I guess I would have to say 'thanks' now. I'm not keen as I feel handled like 'a stupid newb'. I'm sorry for that, I'm trying to learn something through doing it. I might be a noob at this now, but I'm not a noob at IT in general and one thing I learned through the years is that I always respect someone who doesn't know shit today - he might be the one helping me tomorrow.
That aside.
First of all: it works now. Not only thanks to what you suggested, I had to change my firewall settings too. Also, as I said before, I had tried a lot of configs together - the fact that that one line
# push "redirect-gateway def1 bypass-dhcp"
was actually in my config is because I added it, it didn't work, I commented it out. I think I've tried about 100 combinations of things commented out/ uncommented out again. Just like now: I had to comment out the firewall rules again. I mean, it's not that I didn't know that that particular line had anything to do with my problems. Instead of just quoting articles telling me why I'm wrong, you might as well try to be nice and explain.
Second comment: good one, I never thought about that before but you're right there. I've changed my LAN subnet to 192.168.143.0 as you suggested. Thanks.
Last comment: I'm not entirely sure what you want to say with
Right now, when my config works, my IP address on the laptop while connected
does change and my internet traffic
is routed through my PI. So I don't see why you would link to your reaction to a totally unrelated post - a reaction where you talk about "garbage". I didn't use the "guide" cited in that post. The only thing I can make up out of that part of your reaction is that my question is also "garbage", but seeing that it now works as I described and also expected - I don't get it?
In general: thanks for telling me to actually "keep guessing and commenting things out / uncommenting things". Thanks for pointing me at a potential risk with my subnet (the only really helpful part in your post actually). But, no thanks for making me feel a total noob that doesn't know shit.
----
Current configs:
server.conf
local 192.168.143.50
dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/Pi.crt
key /etc/openvpn/easy-rsa/keys/Pi.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig 10.8.0.1 10.8.0.2
push "route 10.8.0.1 255.255.255.255"
push "route 10.8.0.0 255.255.255.0"
push "route 192.168.143.50 255.255.255.0"
push "route 192.168.143.0 255.255.255.0"
push "dhcp-option DNS xxx.xxx.xxx.xxx"
push "dhcp-option DNS xxx.xxx.xxx.xxx"
push "redirect-gateway def1 bypass-dhcp"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log 20
log /var/log/openvpn.log
verb 1
Firewall rules
#!/bin/sh
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j SNAT --to-source 192.168.143.50
