Hi,

I'm using a laptop running Archlinux and I've got openvpn working nicely as a service (which gives tun0 an ip), and I've got my 'real' connection usually through wlp2s0 or enp1s0 my wireless and wired interfaces.

I'd like to force myUser1 to use wlp2s0 or enp1s0, and never tun0. I'd like to force myUser2 to use tun0, and never anything else. So if I'm not connected to a VPN, myUser2 can't do anything, but if I am connected to a VPN, myUser1 will never use it so he can browse the web regularly.

If you've got the time to give me a full rundown, thats great, but if anyone could just point me in the right direction for what to learn, I'd appreciate that too.

Thanks!

Also, because it's a laptop, I'd like to be able to roam across wireless and wired networks, and avoid hardcoding things.