As I am new to this forum, I hope I have selected the correct forum.
I noticed that the iptables rules in /etc/iptables/add-openvpn-rules.sh didn't get applied at system boot.
However, after "systemctl restart iptables-openvpn" everything was fine.
From what I found, i assume that the service is triggered before iptabels is initialized:
To test it I inserted:
iptabels-save > /tmp/test
as the first command in add-openvpn-rules.sh and got an empty file.
I modified iptables-openvpn.service to make it work:
#Before=network-online.target
After=network-online.target
Gerhard
