Openvpn-AS + Iptables

[hombrezuelo]

Hi brothers,

I'm running openpvn-as on debian in routing mode, i can make login in this server, but i can´t reach the others host on the lan. this is my scenario.

WAN---router--firewall (iptables)----------lan----------openvpn-AS-----------------hosts
192.168.10.20 192.168.10.0/24 192.168.10.21 192.168.10.11

When i make login i can ping my server 192.168.10.21 from vpn, i cant ping to the others hosts on the lan 192.168.10.0/24 this is my configuration:

Routing
Should VPN clients have access to private subnets (non-public networks on the server side)?
NoYes, using NATYes, using routing (advanced)

Specify the private subnets to which all clients should be given access (as 'network/netmask_bits', one per line):
192.168.10.0/23---------THIS is my real lan

I was reading this docu
https://community.openvpn.net/openvpn/w ... AndRouting

I got stuck in this step:
Using routing and OpenVPN not running on the default gateway

it says:
# Allow traffic initiated from VPN to access LAN
iptables -I FORWARD -i tun0 -o eth0 \
-s 10.8.0.0/24 -d 192.168.0.0/24 \
-m conntrack --ctstate NEW -j ACCEPT

i have questions:

1.-My firewall is in other host in my lan and i have not interface called tun0, where´s supposed to define tun0?
2.-In my openvpn-AS just i have as0t0 as0t1 as0t2 as0t3 as0t4 as0t5
3.-wich are the iptables policies that should i put in my openvpn-as and my firewall too (both are running on debian)

Thanks for your help