Simple for those who know, indecipherable for those who don't...
I'm running openVPN on (hypothetical) 184.108.40.206, I want to FORWARD incoming traffic, arriving on interface eth0 to interface tun0.
It would also be nice to filter - based on destination IP address. I'm doing the NAT later on, but like to lock down early wherever possible.
So onto the main course...
#Enable forwarding from eth0 to tun0 iptables -A FORWARD -i eth0 -o tun+ -j ACCEPT
But this doesn't pass any packets whatsoever:
#Stricter version iptables -A FORWARD -i eth0 -o tun+ --dst 220.127.116.11 -j ACCEPT
Am I being unacceptably foolish?