ThoWa Hello, I'm new to OpenVPN and using a cellular sim with OpenVPN from the provider, so the OpenVPN server is operated by the provider behind the APN and I have a client configuration to connect to this VPN network. I'm able to connect to the VPN, get an IP on the tun0 interface and I'm able to connect to the devices inside the VPN. But what I also need is an connection from the device to an additional host over internet. Because no direct connection over the OpenVPN server is possible, I want to send the traffic to my OpenVPN client host and forward it to the backend host over the internet. Therefore I have: - set up dns server on my OpenVPN client host, created record for my backend host and pointed it to the IP of my OpenVPN client - configured the dns in provider API, I can now see the dns gets assigned to the devices inside the VPN network - activated /etc/sysctl.conf net.ipv4.ip_forward=1 on the OpenVPN client host - configured forwarding in iptables: sudo iptables -t nat -A PREROUTING -i tun0 -p tcp --dport 8080 -j DNAT --to-destination 212.99.222.83 But the devices in the VPN network can still not access the backend over hos/fqdn or IP What I'm missing here? thanks & regards, Thomas
300000 You need adding client route into your openvpn server so it will know how to route back to client subnet host. Something iroute 192.168.*.* 255.255.255.0 inside cdd file name client.