Need VPN iproute help

Troubleshooting
10

Given the requirement to route only the hotspot over vpn, I would suggest the following.

  1. Filter the default gateway from the OpenVPN client.
cat << EOF >> /etc/openvpn/client.conf
pull-filter ignore redirect-gateway
route-nopull
EOF
  1. Now your default gateway remains the eth1 after the VPN is up.
  2. Isolate the hostspot and route it over the VPN
ip rule add from 192.168.42.0/24 lookup 42
ip route add default via 10.6.19.1 dev tun1 table 42
  1. Fix the firewall
iptables -t nat -A POSTROUTING -s 192.168.42.0/24 -o tun1 -j MASQUERADE
iptables -t filter -A FORWARD -i wlan0 -o tun1 -j ACCEPT
  1. You probably want to delete the other firewall rules to allow from wlan0 to eth1 if you want them isolated.