I have set up a VPN environment with Windows Clients.
This env is working fine basically.
The thing is that I only want to route traffic through the VPN that is addressed to the LAN behind the VPN. Hence all normal internet traffic should go out over the normal interface.
Currently I have solved this problem doing the following:
On the windows clients I have disabled "Use default gateway on remote network" as you do to enable Split Tunelling.
Also I have added a custom route: route -p add 172.16.0.0 mask 255.255.0.0 10.0.0.0 if 36
172.16.0.0 is the network of the LAN the VPN Server belongs to.
This works perfectly for my PPTP VPN. I can reach all services inside the lan, even via DNS, as far as I can see and external traffic is routed via the local interface.
Still, I am wondering if this route can be improved or if it is an intrinsically flawed approach to solve this issue.
How can I improve my setup in terms of security, flexibility, etc...