Firewall (FW), three leg:eth0: 172.16.1.101eth1: 192.168.99.99 (LAN)eth2: 10.0.0.1 (DMZ)I installed openvpn in FW by tunnel mode, already ok:tun0: 192.168.10.0/24. If I use shorewall and squid proxy FW is ok. At beside can connect to FW, LAN, DMZ using my company services.Now, I want to use iptables rules + squid proxy. What do I set rules for openvpn? And I have set rules below but not connect to server firewall installed openvpn:Packet forwardingnet.ipv4.ip_forward = 1OpenVPNiptables -A INPUT -i eth0 -m state --state NEW -p udp --dport 1194 -j ACCEPTAllow TUN interface connections to OpenVPN serveriptables -A INPUT -i tun+ -j ACCEPTAllow TUN interface connections to be forwarded through other interfacesiptables -A FORWARD -i tun+ -j ACCEPTiptables -A FORWARD -i tun+ -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPTiptables -A FORWARD -i eth0 -o tun+ -m state --state RELATED,ESTABLISHED -j ACCEPTNAT the VPN client traffic to the internetiptables -t nat -A POSTROUTING -s 192.168.10.0/24 -o eth0 -j MASQUERADEIf your default iptables OUTPUT value is not ACCEPT, you will also need a line like:iptables -A OUTPUT -o tun+ -j ACCEPT
set rules for openvpn by iptables in firewall CentOS 6.2
iptables;openvpn