PureVPN with pfSense and port forwarding - sending only select traffic to PureVPN

VPN
1

Overall issue: Starlink is the only practical option here for an ISP and it uses CGNAT, so I can’t use port forwarding on my pfSense firewall. I need to be able to reach some computers on my LAN from outside, using my mobile devices. (So I don’t need to reach them from other peoples’ computers, only my own devices.) Also, I do not want all my LAN traffic going through PureVPN - only the response to requests coming from my mobile devices.

I was trying to accomplish this with an OpenVPN server on a VPS. The hard part has been in getting help on the pfSense setup and forwarding ONLY the VPN traffic through the OpenVPN interface. (I’ve been asking for help, and I get answers and responses, but the main issue is never addressed in answers.)

I know about this guide, provided by PureVPN, but that forwards ALL my LAN traffic through PureVPN. As mentioned, I want to direct ONLY the responses to my mobile devices through the PureVPN network.

Is there a tutorial for how to forward only the traffic I want to the VPN?

Also, since I’m trying to relearn routing (I did it something like 15-20 years ago, so long ago I’ve forgotten how it all works), it might help to know what address space my OpenVPN network on PureVPN is using. Is there a standard answer for that or is there a way I can find that out?

2

Hey, you are suggested to only set your desired WAN interface on the OpenVPN interface under the NAT Firewall that you wish to go through the OpenVPN tunnel (referring to the step # 8 of the guide) and leave the rest of the interfaces as it is i.e. on WAN/LAN interfaces, in that way only certain interfaces will use the OpenVPN connection.

3

Hi, I had a bit of a hard time trying to get help for this. I do not use pfSense, but I have an Asus (Merlin firmware router). Read what I did here I was trying to share on r/Starlink to help others, but looks like you can adapt my solution to what you need…
Also doing something similar to what I did you can forward different incoming ports to different devices on your network.
As per traffic to the internet, it is possible to configure the opvn file for split tunnels.