tony I have a problem configuring iptables so that a connected client to openvpn can surf the internet. Nothing I've tried works. I have openvpn-2.2.2-1 server running on a centos5.8 machine. The client connects using openvpn gui1.0.3 on a windows machine. I can connect as a client and see the network and other things and most of it is ok but I can't surf the internet through the vpn. If I switch iptables off on the openvpn server the internet comes on fine for the connected client. Here are the current rules I paste into iptables on the openvpn server: iptables -P INPUT ACCEPT iptables -F iptables -A INPUT -i lo -j ACCEPT iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A INPUT -p tcp --dport 1194 -j ACCEPT iptables -A INPUT -p tcp --dport 80 -j ACCEPT iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT ACCEPT what rule do I need to add to allow a client's ip address to surf the internet?
janjust start out with iptables -P FORWARD ACCEPT or iptables -I FORWARD -i tun+ -j ACCEPT iptables -I FORWARD -o tun+ -j ACCEPT
