Allow any (ip4) traffic to enter the tunnel, install a route in the default routing table to make that happen (well the second depends on the client) Does it d

Allow any (ip4) traffic to enter the tunnel, install a route in the default routing table to make that happen (well the second depends on the client) Does it do the opposite of that?