Comments on: Routing specific websites through your VPN gateway using pfSense https://geekistheway.com/2021/04/21/routing-specific-sites-through-your-vpn-gateway-using-pfsense/ Trying to learn just a bit! Wed, 16 Apr 2025 06:07:47 +0000 hourly 1 By: Max https://geekistheway.com/2021/04/21/routing-specific-sites-through-your-vpn-gateway-using-pfsense/#comment-4738 Wed, 16 Apr 2025 06:07:47 +0000 https://crepaldi.us/?p=809#comment-4738 Txs this is inspiring.
I wonder if there is a Method to manage which VPN is used by looking up the geoip first instead of entering a view URLs?

]]> By: Matt https://geekistheway.com/2021/04/21/routing-specific-sites-through-your-vpn-gateway-using-pfsense/#comment-290 Thu, 31 Aug 2023 17:42:44 +0000 https://crepaldi.us/?p=809#comment-290 I think you also need to add an outbound rule on the OpenVPN Interface for all of your network IP’s don’t you?

]]> By: badgeramalama https://geekistheway.com/2021/04/21/routing-specific-sites-through-your-vpn-gateway-using-pfsense/#comment-279 Wed, 21 Jun 2023 22:53:11 +0000 https://crepaldi.us/?p=809#comment-279 I’d not understood the purpose of the tag before – nice. I block traffic leaking if the gateway goes down by checking the box at System > Advanced > Miscellaneous > Gateway Monitoring > Skip rules when gateway is down. Then, if the gateway is down (i.e. the VPN is down), the rule that would forward the traffic isn’t created at all and there’s no route. It certainly works if I turn off the VPN anyway.

Re creating aliases for Netflix IP addresses, you can use the pfBlocker package to generate aliases dynamically to look up the relevant IP addresses from Netflix’s ASN that you can then use in a firewall rule as desired (I’m doing the opposite; I want Netflix to skip the VPN). You can set up separate aliases for Amazon, BBC, whatever, and then use all of the matched addresses in your rules. And since pfBlocker updates on a schedule, the aliases are also kept up to date. It works really well.

Found this a while back (not my own work):

https://uniteinnovations.com/tutorials/bypassing-your-vpn-for-netflix-and-amazon-prime-video-with-pfsense/

]]> By: Thiago Crepaldi https://geekistheway.com/2021/04/21/routing-specific-sites-through-your-vpn-gateway-using-pfsense/#comment-264 Wed, 19 Apr 2023 14:54:27 +0000 https://crepaldi.us/?p=809#comment-264 In reply to daniel githinji.

Sorry, unfortunately I don’t. If you find, let me know and I will create a post for it. Usually these lists are provided by the companies behind the DNS blocking solutions – and are paid. I am sure Netflix must rotate IPs to make it hard, but you can always use Wireshark to analyze your traffic and learn their IPs.

]]> By: daniel githinji https://geekistheway.com/2021/04/21/routing-specific-sites-through-your-vpn-gateway-using-pfsense/#comment-263 Wed, 19 Apr 2023 12:32:22 +0000 https://crepaldi.us/?p=809#comment-263 Hi there, appreciate the guide.
Quick one do you have a source on where you get all the websites domain i.e netflix

]]> By: Thiago Crepaldi https://geekistheway.com/2021/04/21/routing-specific-sites-through-your-vpn-gateway-using-pfsense/#comment-155 Tue, 27 Jul 2021 14:23:28 +0000 https://crepaldi.us/?p=809#comment-155 In reply to Oli.

I usually wait for the Black Friday deals and get one of the 3 years package. I have tried both PIA and Surfshark. Both are to use on pfSense, especially for US locations. I don’t try to use Netflix in different countries, but some people consider this an important criteria for the decision

]]> By: Oli https://geekistheway.com/2021/04/21/routing-specific-sites-through-your-vpn-gateway-using-pfsense/#comment-154 Tue, 27 Jul 2021 08:20:54 +0000 https://crepaldi.us/?p=809#comment-154 Thank you for the guide!

What VPN service do you use as your endpoint in the US?

]]>