Source-IP routing rule to vpn tunnel

I also wrote a how-to of sorts on this here: