How can I bypass resource blocking by the provider?

Question

openvpn

Good afternoon everyone. I needed to get access to Russian resources, and as far as I'm Ukrainian, I don't have access to them. To do this, I raised my vpn server to OpenVPN Access Server. Further, I have Mikrotik at home, I would like to push vpn to my entire home network, and not to one device. As far as I’m not a guru in Mikrotiks, but just an amateur (I just understand how and what works, but I haven’t learned many subtleties yet), I started looking for all sorts of manuals by which I can make sure that all traffic goes through VPN only for those resources that I provide. I did not want to set your restriction on the VPN server itself, so I tried this instruction (not advertising): https://weblance.com.ua/317-obhod-blokirovki-sayto...

The catch is that for some reason the traffic still does not go through the VPN to the addresses I need. There is a connection with the VPN server, it was checked on how many devices, but for some reason the rules in the router do not work. Please tell me why?

Thank you!

Answer 1

https://mr-allen.com/mikrotik/incremental-rkn-bypass
_

Answer 2

The idea is:
- DNS traffic should go through the tunnel. In general, the whole thing - because the simplest way to block is to intercept DNS and replace data with a Provo stub. Therefore, the entire DNS must be sent to the tunnel, and even better, raise the DNS for your network directly on Mikrotik (and so that he takes the data for himself from the tunnel)