I use openVPN to connect to a server at work. However, I only want to use the VPN for work-related stuff and not for my regular browsing. I don't really know much about VPNs, so it's entirely possible this is already the case, but I'm not sure.My current client configuration is:$ cat CRSSLconfig.tblk/client.ovpnclientdev tunport 8440connect-retry 0proto tcp-clientremote 123.456.78.9resolv-retry infinitenobindpersist-keypersist-tunauth-user-pass login.confcomp-lzoauth-retry interactverb 3reneg-sec 0status crssl_client_status.logca ca.pemcert cert.pemkey userkey.keyAnd I connect by runningsudo openvpn client.ovpnIn case it's relevant, I am running OpenVPN 2.3.8 on 64 bit Arch.A reverse DNS lookup on my IP shows that it points to my local ISP:$ host $(wget -qO - http://wtfismyip.com/text)252.224.246.46.in-addr.arpa domain name pointer 1.2.3.4.my.isp.comThe output of ip a (22.33.44 IPs are on the VPN):1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00    inet 127.0.0.1/8 scope host lo       valid_lft forever preferred_lft forever    inet6 ::1/128 scope host        valid_lft forever preferred_lft forever2: enp3s5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000    link/ether 00:1f:c6:cb:2f:20 brd ff:ff:ff:ff:ff:ff    inet 192.168.1.103/24 brd 192.168.1.255 scope global enp3s5       valid_lft forever preferred_lft forever    inet6 fe80::1cfa:c27c:6982:369a/64 scope link        valid_lft forever preferred_lft forever9: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 100    link/none     inet 22.33.44.2/24 brd 22.33.44.255 scope global tun0       valid_lft forever preferred_lft foreverMy routing table as reported by ip route show is:$ ip route showdefault via 192.168.1.1 dev enp3s5  metric 202 22.33.44.0/24 via 22.33.44.1 dev tun0 22.33.45.0/24 dev tun0  proto kernel  scope link  src 22.33.45.2 192.168.1.0/24 dev enp3s5  proto kernel  scope link  src 192.168.1.103  metric 202 The 22.33.44.NN addresses all correspond to IPs on the VPN network. I have changed the first three digit groups but not the last (so the 22.33.44.1 is actually the gateway, for example). Is that enough to conclude that normal internet traffic isn't going through the VPN? How can I i) check what connections are being routed through the VPN and ii) configure the VPN to only work for specific connections? I don't have access to the server config, is this something I can configure from the client?
How can I check whether a given connection is going through my VPN?
networking;vpn;openvpn
You must check the routing table. With the route command, you can see how you traffic is routed, if there is a line like default 123.456.78.x is likely that your traffic is redirected on the VPN, however if your public ip is your isp it is very likely that the VPN rotate only traffic headed to work.These lines indicate that the traffic with a destination LAN 22:33:44 or 22:33:45 pass through the VPN: 22.33.44.0/24 via 22.33.44.1 dev tun0 22.33.45.0/24 dev tun0 proto kernel scope link src 22.33.45.2 Everything else (destination default passes through the card enp3s5 and is directed by the router 192.168.1.1 that is external to the VPN:default via 192.168.1.1 dev enp3s5 metric 202 