IP Filter/Split Tunneling

[Suchi8321]

Hello there,

I'm trying to get split tunneling to work.
In older version the behavior was anything within the "IncludeIpRanges" was sent through the VPN and anything else was allowed to bypass the VPN.

That doesn't seem to be the case anymore, here is the server logs for reference:

root@***:/opt/VpnHoodServer# ./vhserver start
[03:10:57.5472] info: [0]
      Using FileAccessManager. AccessFolder: /opt/VpnHoodServer/storage/access
2024/03/01 03:10:57.830 | Info |  | Server 
 Module: VpnHood.Server, Version=3.3.470.0, Culture=neutral, PublicKeyToken=null  

2024/03/01 03:10:57.858 | Info |  | Server 
 OS: Debian GNU/Linux 12 (bookworm), X64, TotalMemory: 951 MB, Logical Cores: 2  

2024/03/01 03:10:57.862 | Info |  | Server 
 DefaultTcpKernelSentBufferSize: 16384, DefaultTcpKernelReceiveBufferSize: 131072  

2024/03/01 03:10:57.909 | Info |  | Server 
 Configuring by the Access Manager...  

2024/03/01 03:11:07.950 | Info |  | Server 
 Public IPv4: <null>, Public IPv6: <null>, IsV6Supported: False  

2024/03/01 03:11:07.979 | Info |  | Server 
 RemoteConfig: {
  "Tracking": {
    "TrackClientIp": false,
    "TrackLocalPort": false,
    "TrackDestinationIp": false,
    "TrackDestinationPort": false,
    "TrackUdp": true,
    "TrackTcp": true,
    "TrackIcmp": true
  },
  "Session": {
    "Timeout": "01:00:00",
    "UdpTimeout": "00:01:00",
    "TcpTimeout": "00:15:00",
    "IcmpTimeout": "00:00:30",
    "SyncInterval": "00:20:00",
    "SyncCacheSize": 100000000,
    "MaxDatagramChannelCount": 8,
    "MaxUdpClientCount": 500,
    "MaxIcmpClientCount": 20,
    "TcpBufferSize": 8192,
    "TcpKernelSendBufferSize": null,
    "TcpKernelReceiveBufferSize": null,
    "TcpConnectTimeout": "00:00:30",
    "TcpReuseTimeout": "00:00:40",
    "MaxTcpConnectWaitCount": 500,
    "MaxTcpChannelCount": 1000,
    "NetScanLimit": null,
    "NetScanTimeout": null,
    "UseUdpProxy2": false
  },
  "NetFilter": {
    "IncludeLocalNetwork": false,
    "PacketCaptureIncludeIpRanges": null,
    "PacketCaptureExcludeIpRanges": null,
    "IncludeIpRanges": [
      "63.251.140.0-63.251.140.255",
      "69.25.124.0-69.25.125.255",
      "70.42.8.0-70.42.8.255",
      "70.42.198.0-70.42.199.255",
      "74.201.102.0-74.201.103.255",
      "74.201.106.0-74.201.107.255",
      "74.201.105.108-74.201.105.111",
      "85.236.96.0-85.236.103.255",
      "188.42.95.0-188.42.95.255",
      "188.42.147.0-188.42.147.255",
      "216.52.53.0-216.52.53.255"
    ],
    "ExcludeIpRanges": null,
    "BlockIpV6": true
  },
  "TcpEndPoints": [
    "0.0.0.0:443"
  ],
  "UdpEndPoints": [
    "0.0.0.0:3407",
    "[::]:3407"
  ],
  "UpdateStatusInterval": "00:02:00",
  "LogAnonymizer": true,
  "ServerSecret": "***",
  "ConfigCode": "",
  "MinCompletionPortThreads": null,
  "MaxCompletionPortThreads": null,
  "DnsChallenge": null
}  

2024/03/01 03:11:07.979 | Info |  | Server 
 MinWorkerThreads: 2, MinCompletionPortThreads: 30  

2024/03/01 03:11:07.980 | Info |  | Server 
 MaxWorkerThreads: 32767, MaxCompletionPortThreads: 65535  

2024/03/01 03:11:07.984 | Info |  | Server 
 Starting ServerHost...  

2024/03/01 03:11:07.984 | Info |  | Server 
 Start listening on UdpEndPoint: 0.0.0.0:3407  

2024/03/01 03:11:07.991 | Info |  | Server 
 Start listening on UdpEndPoint: :::3407  

2024/03/01 03:11:07.991 | Info |  | Server 
 Start listening on TcpEndPoint: 0.0.0.0:443  

2024/03/01 03:11:07.994 | Info |  | Server 
 Server is ready!  

2024/03/01 03:11:17.670 | Info | Session | Server => RemoteEp: ***:58538 
 New session has been created. SessionId: 1  

2024/03/01 03:11:17.673 | Info | Session | Server => RemoteEp: ***:58538 
 New Session. SessionId: 1, Agent: Mozilla/5.0*** 

2024/03/01 03:11:17.673 | Info | SessionTrack | Server => RemoteEp: ***:58538 
 SessionId: 1   New     TokenId: **-8cd1-f034097dd304   ClientCount: 0          ClientId: ***  ClientIp: *     Version: 3.3.470        OS: Windows NT 10.0  

2024/03/01 03:11:17.914 | Info | NetProtect | Server 
 Some requests has been blocked. EventDuration: 00:00:00, EventCount: 1, EventTotal: 1  

2024/03/01 03:11:17.931 | Info | NetProtect | Server 
 Some requests has been blocked. EventDuration: 00:00:00, EventCount: 1, EventTotal: 2  

2024/03/01 03:11:18.933 | Info | NetProtect | Server 
 Some requests has been blocked. EventDuration: 00:00:01, EventCount: 1, EventTotal: 3  

2024/03/01 03:11:20.946 | Info | NetProtect | Server 
 Some requests has been blocked. EventDuration: 00:00:02, EventCount: 1, EventTotal: 4  

2024/03/01 03:11:20.946 | Info | NetProtect | Server 
 Some requests has been blocked. EventDuration: 00:00:00, EventCount: 1, EventTotal: 5  

2024/03/01 03:11:21.105 | Info | NetProtect | Server 
 Some requests has been blocked. EventDuration: 00:00:00, EventCount: 1, EventTotal: 6  

2024/03/01 03:11:21.149 | Info | NetProtect | Server 
 Some requests has been blocked. EventDuration: 00:00:00, EventCount: 1, EventTotal: 7  

2024/03/01 03:11:22.154 | Info | NetProtect | Server 
 Some requests has been blocked. EventDuration: 00:00:01, EventCount: 1, EventTotal: 8 

[trudyhood]

Can you give me an access key to your server?
[email protected]

[Suchi8321]

sent

[trudyhood]

I couldn't find any issue. What are your expectations? Are you sure your client hasn't checked "excluding my country"? Let me know the target IP that goes to your VPN that shouldn't, or vice versa.

[Suchi8321]

the client is setup to be (All countries, Use UDP)
I'm unable to connect to anything when i have that setup, when i remove the ips from IncludeIpRanges the vpn works as expected

[trudyhood]

I have created an issue to address this. It appears that your range does not include the default DNS servers, which in our case are Google's DNS servers: 8.8.8.8 and 8.8.4.4. In the meantime, you can add these DNS servers to your included range. Please let me know if this does not temporarily resolve the issue.
issue #477

[Suchi8321]

Thanks for your input, I can confirm that adding:

"8.8.8.8/32",
"8.8.4.4/32"

to IncludeIpRanges list resolves this issue