I’m running OPENWRT chaos calmer on top of Raspberry pi 2. I successfully configured the OPENVPN client and client route my traffic through the VPN tunnel. But when I reboot the pi LAN interface connect directly to the WAN interface for small time and route traffic outside the VPN tunnel. This will only happen for very small time. (Time that need VPN client to start). But I need to stop this. I need to route almost all the traffic through VPN client all the time and if the VPN not connected user should not able to access the internet. I configured Proxy client called TINYPROXY with this setup and may be it will cause the problem. But I have not clear idea how to stop this
These are my configs
/etc/config/network
config interface 'loopback'
option ifname 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config interface 'lan'
option ifname 'eth0'
option proto 'static'
option netmask '255.255.255.0'
option ipaddr '192.168.2.1'
option dns '8.8.8.8 8.8.4.4'
config interface 'wan'
option ifname 'eth1'
option proto 'dhcp'
option peerdns '0'
option dns '8.8.8.8 8.8.4.4'
config globals 'globals'
option ula_prefix 'fd14:b495:5965::/48'
config interface 'vpn0'
option ifname 'tun0'
option proto 'none'
option auto '1'
option delegate '0'
/etc/config/firewall
config defaults
option syn_flood '1'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
config zone
option name 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
option network 'lan'
config zone
option name 'wan'
option output 'ACCEPT'
option masq '1'
option mtu_fix '1'
option input 'ACCEPT'
option forward 'ACCEPT'
option network 'wan wan6 vpn0'
config rule
option name 'Allow-DHCP-Renew'
option src 'wan'
option proto 'udp'
option dest_port '68'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'Allow-Ping'
option src 'wan'
option proto 'icmp'
option icmp_type 'echo-request'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-IGMP'
option src 'wan'
option proto 'igmp'
option family 'ipv4'
option target 'ACCEPT'
config include
option path '/etc/firewall.user'
config redirect
# option target 'DNAT'
# option dest 'vpn'
option name 'Transparent Proxy Redirect'
option src 'lan'
option proto 'tcp'
option dest_port '8888'
option src_dport '80'
option src_dip '!192.168.2.1'
option dest_ip '192.168.2.1'
config zone
option name 'vpn'
option masq '1'
option input 'ACCEPT'
option forward 'ACCEPT'
option output 'ACCEPT'
option network 'vpn0'
config forwarding
option src 'vpn'
option dest 'lan'
/etc/config/tinyproxy
config tinyproxy
option enabled '1'
option User 'nobody'
option Group 'nogroup'
option Port '8888'
option Timeout '600'
option DefaultErrorFile '/usr/share/tinyproxy/default.html'
option StatFile '/usr/share/tinyproxy/stats.html'
option LogFile '/var/log/tinyproxy.log'
option LogLevel 'Info'
option MaxClients '100'
option MinSpareServers '5'
option MaxSpareServers '20'
option StartServers '10'
option MaxRequestsPerChild '0'
option ViaProxyName 'tinyproxy'
list Allow '127.0.0.1'
list Allow '192.168.2.1/24'
list ConnectPort '443'
list ConnectPort '563'
list ConnectPort '80'
option Filter '/www/textui/tinyproxy/blocked.txt'
I want to exactly achieve this
USER --> LAN --> TINYPROXY --> VPN --> WAN
My TINYPROXY is working perfectly fine. All the other configs are working fine. The problem only exists for small time when PI reboot
Could someone help me in this?