I have successfully set-up SoftEther on my AWS free tier machine, and put a small apache2 instance on there. I can access the webpage via VPN from windows, Mac & linux.
BUT - when the vpn client is activated, ALL the traffic goes through the VPN. This is not what I intended, probably not secure, and will cost me (data throughput on AWS).
I have activated SecureNAT - but i don't understand how to configure it. If I disable (basic)NAT then I can't access the web server.
The basic AWS machines has eth0: flags=4419 mtu 1500 inet 172.31.9.151 netmask 255.255.240.0 broadcast 172.31.15.255
and the SecureNat and SoftEther setup are unchanged.
I think the issue is that the DNS gateway (as below from secureNAT) allows access not only to the webserver, but also EVERYTHING else on the web...
SEE SecureNat standard settings However if I remove this, then I don't have the knowledge to add in the extra routing to JUST allow access to the webserver.
The solution has to be on the server side, not the client (as clients could alter their setup, and it will be hard to get them to use anything other than just an ovpn link anyway). However the SecureNat dialog does have client routing rules it can push (- which I haven't been able to set correctly. :-( )
Any anyone shed any light on this please?