At home I have a network behind a router. Right now I am sitting in the office.

The router is connected to my ISP and I know my IP. (e.g.

I can ping the IP.

In the router I can enable portforwarding to specific IPs in the LAN.

I am forwarding ssh to one specific PC, so that I can connect to it with: ssh -p 2345 mysshuser@ Everything works and is fine.

But after connecting the PC with OpenVpn to my VPN Provider, I can't ssh into the machine anymore.

The error is the following:

ssh: connect to host port 2345: Connection timed out

I think I know that I must somehow forward packets from the tun0 interface to Local-Area-Network interface, that OpenVpn creates to connect to the VPN provider, but I dont know how.

Or is it not possible to have the PC connected to VPN and ssh into it?

Additional notes

  • VPN-Provider is NordVPN
  • I have read this post, but the issue seems VPN provider specific, so i don't think its a duplicate
  • I have found this post and I am asking myself, wether or not this breaks the privacy aspect of the VPN?
  • Also this post seems to be solving the issue, but again the question wether or not this breaks the privacy of my VPN is my question?


I could solve my problem using the links provided in Additional Notes.

But could someone clarify the security aspect of this routing? Is my privacy compromised now?

  • No, it does not compromise the privacy aspect. The main goal of source base routing is providing a way to answer for an incoming connection when multiple uplinks exist. Or basically it tells the PC to answer via given interface if the connection was initiated through it. Dec 15, 2017 at 14:05

1 Answer 1


You probably have multiple default gateways in your route table. You need to set up policy routing at your PC. It is called source based policy routing.

PS. What topics can I ask about here?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.