zanophol
I have a Debian Squeeze server that is my NAS/everything box. I have it setup as an OpenVPN server for times when I am travelling and need to securely get back home over the internet. I have SSH as a backup. This server NAT's everything behind it on a 10.10.10.x subnet with an iptables firewall. I have recently decided to implement an openvpn solution from a provided with multiple global exits. However, I am stuck on this part of the configuration.
I can go to the server and login to the openvpn provider and ping anything I want. I can access local resources as well. The problem is with everything else behind the firewall, as they can no longer access the internet. My NAT iptables rules looks like:
IPTABLES -t nat -A POSTROUTING -o eth0 -s 10.0.0.0/8 -j MASQUERADE
I have tried replacing eth0 with tun0, adding tun0 to eth0 and other combinations to no avail. Basically I want the firewall to masquarade whether vpn out connection is working or not. Can someone point me in the right direction here?
