michael_schröder wrote
Thanks for the reply.
How the command should look like? Something like the following one?
iptables -A FORWARD -i tun0 -s 10.8.0.30/24 -d 0.0.0.0 -j ACCEPT
You're missing the Big Picture. There are two aspects to
--redirect-gateway, first being the routes pushed to clients. If all clients get the same routes, then how will your non-redirected clients have Internet access? That's why you need
--client-config-dir, to set routes appropriately.' You would also need to set a static IP address for the user you were wanting redirect.
After that you might need an iptables rule like that, if later rules DROP/REJECT or if the FORWARD policy is DROP. In that case you would also want to know that -s/--source takes a CIDR expression as argument, and a /24 only can be x.x.x.0. If you only want the single address 10.8.0.30, just use that, don't add a CIDR netmask.
regards, rob0
