UTorrent only through VPN: could a virtualized pfSense hep me?

mika91

Hi,

I'm just finish building my HomeServer powered with Whs2011, and now I have to secure my uTorrent/eDonkey traffic.
I suscribed a one-year contract to VPN Server provider (VPNFacile), but I can't figure how to use it properly.
I succeed to configure OpenVPN service, but it has some drawbacks:
-> Frequent DNS losses
-> Frequent disconnection (solved with auto-reconnect option)
-> All my server traffic through VPN

I need only uTorrent/eDonkey traffic through VPN!
A friend of mine suggests to take a look at pfSense.
I did, but I'm a network noob, so I need you :)

So the main idea would be to virtualize pfSense in a vmware windows host.
So my server will be reachable through my provider static IP, and pfSense will use an openvpn tunnel.
Now i need to be sure that is possible to uTorrent and eDonkey to use pfSense connection and not the server one.

As you see, I'm a little bit confused…and greetly need your help!
Thanks

Edit: My server as only one network card

dreamslacker

There's something called multi-homing. Basically, you have more than one IP address on an interface card within the same network.

What you can do is to set a 2nd IP (LAN) for the server. uTorrent can bind by IP address on the local adapter so that it only uses that particular IP for traffic.

If you're using eMule, the option is also available via manually adding a configuration line to the preferences.ini file:
See: http://forum.emule-project.net/index.php?showtopic=133920

In pfSense, you would simply set traffic from that particular IP to go through the VPN tunnel instead of default gateway (Manual Advanced Outbound NAT will work just fine here).

stephenw10

To be honest although you could do this with pfSense I expect it would be easier to do this directly from WHS. If you setup the VPN link can you not get emule to use that connection exclusively? Bind to the VPN IP for example.

Steve

mika91

@stephenw10:

To be honest although you could do this with pfSense I expect it would be easier to do this directly from WHS. If you setup the VPN link can you not get emule to use that connection exclusively? Bind to the VPN IP for example.

Steve

I'd like to do this directly from WHS, but I'm not sure it's possible to "split" the traffic or bind VPN to another IP.

stephenw10

It is possible!
How complex it might be to do it is another thing. ;)
I've never used WHS so I can't speak from personal experience but I would start by seeing what sort of settings are in uTorrent/eDonkey for doing this.

You first want to change the VPN connection settings so that it doesn't become the default route when connected. Then maybe try running a socks proxy setup to send traffic via the VPN and set your application to use it (if they support proxies).

There's probably many ways to achieve this.

Steve

Edit: Looks like in emule you can just use the BindAddr option to make it use the VPN interface as linked to by Dreamslacker above: http://forum.emule-project.net/index.php?showtopic=143867&view=&hl=BindAddr&fromsearch=1