vpn-route-external.sh

#!/bin/bash

# Set static routing tables to route some external IP addresses
# direct instead of via VPN

action=${1:-create}
gateway=${2:-192.168.1.254}
nonVpnHosts=${3:-$NON_VPN_HOSTS}

if [ -z "$nonVpnHosts" ] ; then
    echo "Please set shell variable \$NON_VPN_HOSTS to space separated list of hosts that don't want route through VPN"
    exit 1
fi

echo "Action : $action"

for host in $nonVpnHosts ; do	
    ip=`host $host | awk '/has address/ { print $4 }'`
    nonVpnIps=$nonVpnIps" $ip"	
done

nonVpnIps=`echo $nonVpnIps | tr ' ' '\n' | sort -u | tr '\n' ' '`
echo "Non VPN Hosts : $nonVpnHosts"
echo "Non VPN IPs   : $nonVpnIps"

function deleteVpnRoutes {
    for ip in $nonVpnIps ; do 
        sudo route -n delete $ip/32 $gateway
    done

    echo "External routes REMOVED to route table"

    for host in $nonVpnHosts ; do
        sudo sed -i '' "/$host/d" /etc/hosts
    done

    echo "External IP addresses REMOVED from /etc/hosts"
}

if [ $action == "delete" ] ; then
    deleteVpnRoutes
else
    deleteVpnRoutes
	
    # We should really get these from nslookup
	
    for host in $nonVpnHosts ; do
        ip=`host $host | awk '/has address/ { print $4 }' | head -n 1`
        echo "$ip	$host" | sudo tee -a /etc/hosts 
    done

    echo "External IP addresses ADDED to /etc/hosts"
    echo "External routes ADDED to route table"

    for ip in $nonVpnIps ; do 
        sudo route -n add $ip/32 $gateway		
    done
fi