I still can not figure this out for the life of me. I want to say appreciate those links, I have read and reread them till my face is blue made a few changes tried things different ways but no luck.
I believe there is something fundamental that I am just not grasping. I have double checked iptables just in case reran these commands.
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o enp0s25 -j MASQUERADE
iptables -A FORWARD -i tun+ -j ACCEPT
iptables -A FORWARD -o tun+ -j ACCEPT
I have changed route to
push "route 10.0.0.0 255.255.255.0"
Also I have tried DNS with both the ip of the serevr and open dns, could not get to work either way. Also the client can only ping devices on the servers local network.
This is what iptables -L shows
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere /* Allow all loopback traffic */
ACCEPT all -- anywhere anywhere /* Accept all incoming */
ACCEPT tcp -- anywhere anywhere tcp dpt:cosmocall state NEW,ESTABLISHED
Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere /* Accept all outgoing */
ACCEPT all -- anywhere anywhere
ACCEPT tcp -- anywhere anywhere tcp spt:cosmocall state ESTABLISHED
port 11098
fragment 548
proto udp
dev tun
ca /etc/openvpn/server/ca.crt
cert /etc/openvpn/server/ArchNas.crt
key /etc/openvpn/server/ArchNAS.key # This file should be kept secret
dh /etc/openvpn/server/dh.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 10.0.0.0 255.255.255.0"
push "redirect-gateway def1 "
push "dhcp-option DNS 10.0.0.1"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
tls-auth /etc/openvpn/server/ta.key 0 # This file is secret
cipher AES-256-CBC
auth SHA512
tls-version-min 1.2
compress lz4-v2
push "compress lz4-v2"
max-clients 15
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
verb 3
