Jump to content
Not connected, Your IP: 3.237.71.23
rgrdgr

ANSWERED eddie-cli: split-tunneling

Recommended Posts

Hi,
I'm trying to exclude some sites from the VPN.  Normally I'd do this via the openvpn config file, and I'd see some instructions on doing this via the GUI.  However, I have no access to a GUI on this machine.  How can i do this using eddie-cli?  Or eddie-ui -cli?

 

Share this post


Link to post

Well, to not quote the rude four-letter thing, there's man eddie-ui ;)
out refers to "out of tunnel".

 

--routes.custom

              Custom routes. Format: '{ip or range},{in/out},{note (optional)};...'. Separate multiple routes with ;. Example: '1.2.3.4,in;2.3.4.5/23,out,'test'


» I am not an AirVPN team member. All opinions are my own and are not to be considered official. Only the AirVPN Staff account should be viewed as such.

» The forums is a place where you can ask questions to the community. You are not entitled to guaranteed answer times. Answer quality may vary, too. If you need professional support, please create tickets.

» If you're new, take some time to read LZ1's New User Guide to AirVPN. On questions, use the search function first. On errors, search for the error message instead.

» If you choose to create a new thread, keep in mind that we don't know your setup. Give info about it. Never forget the OpenVPN logs or, for Eddie, the support file (Logs > lifebelt icon).

» The community kindly asks you to not set up Tor exit relays when connected to AirVPN. Their IP addresses are subject to restrictions and these are relayed to all users of the affected servers.

 

» Furthermore, I propose that your paranoia is to be destroyed. If you overdo privacy, chances are you will be unique amond the mass again.

Share this post


Link to post

Thanks!  In my own defense, I'm using eddie-cli:
 

> man eddie-cli
No manual entry for eddie-cli

Looks like I can switch to eddie-ui and use the -cli option, although I'm not sure that gains me anything.

Share this post


Link to post

eddie-cli was removed some versions ago; which one are you running? Maybe an update is due? ;)

eddie-cli = eddie-ui -cli. You neither gain nor lose anything.


» I am not an AirVPN team member. All opinions are my own and are not to be considered official. Only the AirVPN Staff account should be viewed as such.

» The forums is a place where you can ask questions to the community. You are not entitled to guaranteed answer times. Answer quality may vary, too. If you need professional support, please create tickets.

» If you're new, take some time to read LZ1's New User Guide to AirVPN. On questions, use the search function first. On errors, search for the error message instead.

» If you choose to create a new thread, keep in mind that we don't know your setup. Give info about it. Never forget the OpenVPN logs or, for Eddie, the support file (Logs > lifebelt icon).

» The community kindly asks you to not set up Tor exit relays when connected to AirVPN. Their IP addresses are subject to restrictions and these are relayed to all users of the affected servers.

 

» Furthermore, I propose that your paranoia is to be destroyed. If you overdo privacy, chances are you will be unique amond the mass again.

Share this post


Link to post

Both the eddie-ui version I grabbed earlier today and eddie-cli say 2.16.3.  FYI, there is still a link to eddie-cli from eddie.website.  Perhaps rumors of its demise have been exaggerated.  ;)
 

Share this post


Link to post

Ah okay, I wasn't aware the standalone CLI version was still called eddie-cli. I only noticed the eddie-ui packages having cli removed and the versions merged into eddie-ui. Well, we never stop learning, thanks. :)

Does the routes.custom thing work as expected?


» I am not an AirVPN team member. All opinions are my own and are not to be considered official. Only the AirVPN Staff account should be viewed as such.

» The forums is a place where you can ask questions to the community. You are not entitled to guaranteed answer times. Answer quality may vary, too. If you need professional support, please create tickets.

» If you're new, take some time to read LZ1's New User Guide to AirVPN. On questions, use the search function first. On errors, search for the error message instead.

» If you choose to create a new thread, keep in mind that we don't know your setup. Give info about it. Never forget the OpenVPN logs or, for Eddie, the support file (Logs > lifebelt icon).

» The community kindly asks you to not set up Tor exit relays when connected to AirVPN. Their IP addresses are subject to restrictions and these are relayed to all users of the affected servers.

 

» Furthermore, I propose that your paranoia is to be destroyed. If you overdo privacy, chances are you will be unique amond the mass again.

Share this post


Link to post
16 minutes ago, giganerd said:

Does the routes.custom thing work as expected?


Hmm, no it doesn't look like it.  I'm running eddie-ui with this command:
/usr/bin/eddie-ui --cli --connect --server=XXX --login=uuu --password=ppp --routes.custom='69.16.179.29,out;69.16.179.28,out'

Neither destination gets added to my routing table, and if I use traceroute they go through the vpn.

Maybe I should make my own script to modify the routing table and invoke it with --event.vpn.up.filename.

Share this post


Link to post
1 hour ago, rgrdgr said:

Neither destination gets added to my routing table, and if I use traceroute they go through the vpn.


Interesting. Can you maybe test 2.18.x? You can use the portable, in case you don't want to override the stable.

» I am not an AirVPN team member. All opinions are my own and are not to be considered official. Only the AirVPN Staff account should be viewed as such.

» The forums is a place where you can ask questions to the community. You are not entitled to guaranteed answer times. Answer quality may vary, too. If you need professional support, please create tickets.

» If you're new, take some time to read LZ1's New User Guide to AirVPN. On questions, use the search function first. On errors, search for the error message instead.

» If you choose to create a new thread, keep in mind that we don't know your setup. Give info about it. Never forget the OpenVPN logs or, for Eddie, the support file (Logs > lifebelt icon).

» The community kindly asks you to not set up Tor exit relays when connected to AirVPN. Their IP addresses are subject to restrictions and these are relayed to all users of the affected servers.

 

» Furthermore, I propose that your paranoia is to be destroyed. If you overdo privacy, chances are you will be unique amond the mass again.

Share this post


Link to post
On 3/24/2020 at 3:59 PM, rgrdgr said:

Hmm, no it doesn't look like it.  I'm running eddie-ui with this command:

/usr/bin/eddie-ui --cli --connect --server=XXX --login=uuu --password=ppp --routes.custom='69.16.179.29,out;69.16.179.28,out'

Neither destination gets added to my routing table, and if I use traceroute they go through the vpn.

Maybe I should make my own script to modify the routing table and invoke it with --event.vpn.up.filename.

Is this how you exclude a website from the VPN? I particularly do not want my Internet TV included in the VPN because it really slows down. Thank you.

Share this post


Link to post
2 hours ago, fudgelfreck said:

Is this how you exclude a website from the VPN?


You can only exclude IP addresses.

» I am not an AirVPN team member. All opinions are my own and are not to be considered official. Only the AirVPN Staff account should be viewed as such.

» The forums is a place where you can ask questions to the community. You are not entitled to guaranteed answer times. Answer quality may vary, too. If you need professional support, please create tickets.

» If you're new, take some time to read LZ1's New User Guide to AirVPN. On questions, use the search function first. On errors, search for the error message instead.

» If you choose to create a new thread, keep in mind that we don't know your setup. Give info about it. Never forget the OpenVPN logs or, for Eddie, the support file (Logs > lifebelt icon).

» The community kindly asks you to not set up Tor exit relays when connected to AirVPN. Their IP addresses are subject to restrictions and these are relayed to all users of the affected servers.

 

» Furthermore, I propose that your paranoia is to be destroyed. If you overdo privacy, chances are you will be unique amond the mass again.

Share this post


Link to post

You might be able to do it by IP addresses. I don't actually do this anymore - it was much easier to use docker containers to do the split tunneling.  I have one container for OpenVPN and then everything I want to tunnel uses that container for its network.  But I only had a few services I wanted to tunnel.  

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
  • Security Check
    Play CAPTCHA Audio
    Refresh Image

×
×
  • Create New...