Hi everybody, I've correctly set up my vpn server and client to get my whole internet connection using the vpn tunnel thanks to "redirect-gateway def1". Later, I will want to redirect some ports from my openvpn server to the client, so for example I can ssh to my client through the public ip of my openvpn server machine, but that's not the point of this post. Whil doinge I was my research, I've found this [url=https://community.openvpn.net/openvpn/wiki/BridgingAndRouting]wiki page[/url] that gives a lot of iptables rules. The thing is that I didn't need to use any of these iptables rules to get my set up working, except only this rule : [code] # Masquerade traffic from LAN to "the world" iptables -t nat -I POSTROUTING -o eth1 \ -s 192.168.0.0/24 -j MASQUERADE [/code] So, my question is, why all these iptables rules ? Why does it work for me without these rules (ie. browsing the web from my client) ? If anyone can enlightnen me, I'd be glad :D

Confused about these iptables rules on the wiki

aixki

Hi everybody,

I've correctly set up my vpn server and client to get my whole internet connection using the vpn tunnel thanks to "redirect-gateway def1".

Later, I will want to redirect some ports from my openvpn server to the client, so for example I can ssh to my client through the public ip of my openvpn server machine, but that's not the point of this post.

Whil doinge I was my research, I've found this wiki page that gives a lot of iptables rules. The thing is that I didn't need to use any of these iptables rules to get my set up working, except only this rule :

# Masquerade traffic from LAN to "the world"
    iptables -t nat -I POSTROUTING -o eth1 \
          -s 192.168.0.0/24 -j MASQUERADE

So, my question is, why all these iptables rules ? Why does it work for me without these rules (ie. browsing the web from my client) ?

If anyone can enlightnen me, I'd be glad 😃