#!/bin/sh
-# the vpn server and everything from the perimeter network are routed via ACE
-ip rule add priority 64 from 10.228.109.236/32 lookup 30
+# the vpn server, the nameservers and everything from the perimeter network
+# are routed via ACE
+ip rule add priority 64 from 10.228.109.104/32 lookup 30
+ip rule add priority 65 from 10.228.109.236/32 lookup 30
+ip rule add priority 66 from 10.228.109.253/32 lookup 30
ip rule add priority 128 from 192.168.173.0/24 lookup 30
# everything else is routed via Telekom (which is the default)