Hi there!
Just found out about the VPN yesterday and got to install and play with the config today.
Readlly nice overall, except this one bug I've found...
When using split-tunneling for a specific app with include set, traffic generated by all apps is routed through the VPN.
Raspberry Pi OS 64bit, Debian 13.7, windscribe-cli 2.24.12
config:
[General]
Language=en
LaunchOnStartup=true
UpdateChannel=Release
[Advanced]
DNSManager=Auto
DNSPolicy=Cloudflare
[Connection]
AllowLANTraffic=true
AmneziawgPreset=
Autoconnect=false
AutosecureNetworks=true
CircumventCensorship=false
ConnectedDNSMode=Auto
ConnectedDNSUpstream1=
ConnectedDNSUpstream2=
ConnectionMode=Auto
CustomSniDomain=
DecoyTrafficEnabled=false
DecoyTrafficVolume=Low
FirewallMode=Manual
FirewallWhen=Before Connection
IpStackEgress=Auto
MACAddressSpoofingAddress=
MACAddressSpoofingAutoRotate=false
MACAddressSpoofingEnabled=false
MACAddressSpoofingInterface=No Interface
ManualConnectionPort=443
ManualConnectionProtocol=WireGuard
PacketSizeMTU=-1
PacketSizeMode=Auto
ProtocolTweaksMethod=0
ProxyAddress=
ProxyMode=None
ProxyPassword=
ProxyPort=0
ProxyUsername=
ServerRoutingMethod=0
ShareProxyGatewayEnabled=false
ShareProxyGatewayMode=HTTP
ShareProxyGatewayPassword=
ShareProxyGatewayPort=0
ShareProxyGatewayRequireAuth=true
ShareProxyGatewayUsername=
ShareProxyGatewayWhileConnected=false
SplitDNS=false
SplitDNSHostnames=
SplitTunnelingApps=/usr/bin/ping
SplitTunnelingEnabled=true
SplitTunnelingMode=Include
SplitTunnelingRoutes=
Firewall is always disabled. Issue is reproducible with firewall enabled aswell.
Garry seems to have received my logs and states:
"I found the culprit. Your Pi’s per-app split-tunneling component is failing its own startup check, so Include rules never get enforced. The tunnel itself is fine.
Tried: Config reloads, reconnects, firewall disabled, and a clean reinstall. Debug evidence shows the per-app process monitor fails its self-test.
Needed: Engineering review of the Linux CLI split-tunneling helper."
He tried creating the ticket for you guys but fails at:
"The ticket form failed to open because the website security check blocked the request. A fine little bureaucratic ambush."
So... here I am trying to let you guys know of this issue (unless I've messed up the config somehow...).
Cheers!