Connect to VPN, no connection to other networks

p1

Six months ago I built a OpenVPN server. It worked and I forgot about it (didn't document and test). A week ago it rebooted and now it doesn't work. I can connect via VPN and talk with the server, but I cannot get to other internal networks or the Internet. I have the rule in iptables to do nat. I push the local networks to the clients. After playing around with it and reading other posts I still haven't figured it out. Any help would be appreciated.

I used 10.10.12.0 instead of 10.8.0.0, but I've also tried 10.8.0.0 with the same results.

The server has no problem communicating with the desired subnets and the Internet.

Server Config
************
port 1194
proto udp
dev tun
server 10.10.12.0 255.255.255.0
ifconfig-pool-persist ipp.txt
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
push "route 10.10.10.0 255.255.255.0"
push "route 192.168.191.0 255.255.255.0"
push "redirect-gateway def1"
comp-lzo
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
log-append /var/log/openvpn
group nobody
daemon
verb 3

Client config
*********
client
remote xxx.xxx.xxx.xxx 1194
dev tun
comp-lzo
ca ca.crt
cert client1.crt
key client1.key
route-delay 2
route-method exe
redirect-gateway def1
dhcp-option DNS xxx.xxx.xxx.xxx
verb 3

Server Routing
***********
# netstat -r
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
10.10.12.2 * 255.255.255.255 UH 0 0 0 tun0
10.10.12.0 10.10.12.2 255.255.255.0 UG 0 0 0 tun0
10.10.10.0 * 255.255.255.0 U 0 0 0 eth0
169.254.0.0 * 255.255.0.0 U 0 0 0 eth0
default 10.10.10.1 0.0.0.0 UG 0 0 0 eth0
#

iptables nat
*********
# iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination

Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- 10.10.12.0/24 anywhere

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
#

p1

I've got this working now. In an article https://library.linode.com/networking/openvpn/centos-6#installing_openvpn I saw directions for iptables and modifying /etc/sysctl.conf. After executing

# echo 1 > /proc/sys/net/ipv4/ip_forward

the VPN appears to work as before. I modified /etc/sysctl.conf so that this is set correctly each time the system reboots.

Once this was working I played with iptables a little. It doesn't appear to make any difference whether I have any rules in it or not. Many posts and installation directions say to use iptables. Am I missing something here?

Thanks for any insight.