Hot answers tagged openvpn
What the issue is So what you want is for the network address transfer to work (NAT). I don't pretend to be an iptables expert, but I can see based on this part of your iptables-save: *nat :PREROUTING ACCEPT [1710:298954] :INPUT ACCEPT [1480:280336] :OUTPUT ACCEPT [28:4162] :POSTROUTING ACCEPT [86:6162] -A PREROUTING -i wlan0 -p tcp -m mark --mark 0x3e7 ...
You do not really bind eth0 and tun0 any more than you bind wlan0 and tun0. You actually allow the the packets to pass from one interface to another, by setting ip_forwarding=1, either permanently by changing /etc/sysctl.conf, or temporarily by echo-ing 1 into /proc/sys/kernel/net/ipv4/ip_forward. The only thing that is missing is the change of packet ...
You may want to enable forwarding: echo 1 >/proc/sys/net/ipv4/conf/all/forwarding Also, your tunneled IPs (here 10.0.0.0/8) are likely to be private, so do NAT/MASQUERADING: iptables -t nat -A POSTROUTING -s 10.0.0.0/8 -o eth0 -j MASQUERADE
Only top voted, non community-wiki answers of a minimum length are eligible