Simple for those who know, indecipherable for those who don't...
I'm running openVPN on (hypothetical) 18.104.22.168, I want to FORWARD incoming traffic, arriving on interface eth0 to interface tun0.
It would also be nice to filter - based on destination IP address. I'm doing the NAT later on, but like to lock down early wherever possible.
So onto the main course...
#Enable forwarding from eth0 to tun0 iptables -A FORWARD -i eth0 -o tun+ -j ACCEPT
But this doesn't pass any packets whatsoever:
#Stricter version iptables -A FORWARD -i eth0 -o tun+ --dst 22.214.171.124 -j ACCEPT
Am I being unacceptably foolish?