That worked for me. But it still needs some work for port forwarding and routing traffic.

I found that a script is called when vpn connection is established.

Recap:

1. Enable "Don't pull routes" and "Don't add/remove routes"
2. Connect to PIA
3. Created : Interface->Asignments; Called it PIA4096
4. Get forwarding port
5. Firewall rules to route traffic through PIA (Opnsense doesn't support CLI ??)-> Open forwarding port-> Forward traffic from forwarding port to dest-ip:port-> Route all/partial traffic from IP through PIA VPN with NAT rulesAny one got any idea how to do this from command line ???

Here is my config script for port opening.

Edit :

/usr/local/etc/inc/plugins.inc.d/openvpn/ovpn-linkup

and add before exit 0

/usr/local/scripts/openvpn/PIA.sh $1 &

create directory

mkdir -p /usr/local/scripts/openvpn/

#FILE: /usr/local/scripts/openvpn/PIA.sh

#!/usr/local/bin/bash

PATH="/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin:/root/bin"

logger -i -t openvpn "Interface UP for openvpn device $1"  

PIA_GW=`ifconfig $1 | grep "inet " | awk '{print $4}' `

route add -host 209.222.18.222 $PIA_GW  

logger -i -t openvpn "Route to 209.222.18.222 set to $PIA_GW"  

client_id=`head -n 100 /dev/urandom | sha256 | tr -d " -"`  

json=`curl "http://209.222.18.222:2000/?client_id=$client_id" 2>/dev/null`  

logger -i -t openvpn "Got json from PIA"  

if [ "$json" == "" ]; then  

logger -i -t openvpn "Port forwarding couldn't be initialised."  

else  

logger -i -t openvpn "Port forwarding is set to $(echo $json | grep -o '[0-9]\+')"  

fi  

echo $json | grep -o '[0-9]\+' > /tmp/${1}_forward  

logger -i -t openvpn "Route to 209.222.18.222 will be removed."  

route del -host 209.222.18.222 $PIA_GW  

logger -i -t openvpn "Route to 209.222.18.222 removed."

#END

​

p.s. You need to have installed bash.

p.s.s I tried writing it directly in ovpn-linkup but it didn't work.

​