Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a openVPN set up on the server and I am using openVPN connect for my client. I have some internal websites that I need to access and some of them don't work. I want to make sure that when the traffic is going through the VPN and not though the normal internet connection. The gateway ip for my network is and the gateway for openVPN is I have done trace route and it shows that the websites that don't work access and not Is this proof that it is not going though the VPN?

share|improve this question
It's not really an answer, so I will comment instead. Two things you need to check 1- What are your DNS ipconfig /all if you do not even have a DNS that can resolve your website internally, then you have a problem. 2- Check your routes route print is your Internal websites IP routed towards the Tunnel. – Alex Feb 18 '13 at 20:57
His question answers part of your comment already. DNS resolution is working fine because packets are being sent out. – gparent Feb 18 '13 at 20:58
up vote 2 down vote accepted

If you're on windows then start a dos window and run the tracert command.

e.g. tracert

You can also use an IP address instead of a DNS name.

If you're on Linux you can do the same with the traceroute command.

With both utilities you should hopefully get a trace of the route that packets take to reach the destination. You'll be able to tell if it's passing through your VPN gateway.

share|improve this answer
I am using windows and when tracert google it uses the normal gateway. Also for the websites that don't work it uses the normal gateway. Is there anyway to force all traffic though the VPN? – monkthemighty Feb 18 '13 at 20:42
Yes, and if you want all traffic to go via the VPN you need to make all clients set their default route to whatever the VPN gateway address is. Normally you'd do this on a DHCP server to tell all clients on the LAN the new gateway (default route) address or you might be able to add it to the normal gateway to forward all traffic on via the VPN. – Matt Feb 18 '13 at 20:47
Yes, it's called Full Tunnel as opposed to Split Tunnel. But the first thing I would check is actually your routes with route print. Are you routing the correct traffic in the Tunnel? – Alex Feb 18 '13 at 20:49
You might want to start a new question. As it's been answered. We've now verified that not all your traffic is passing through the VPN. – Matt Feb 18 '13 at 20:53

Look at the routing table....netstat -r. Yes you can change routing by modifications of the routing tables and/or using iptables.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.