I think you meant to point to your post which is Post 12:
https://community.ipfire.org/t/firewall-log-entries-ct-invalid/7519/12?u=jon
Are you ordering the new router to fix DROP_NEWNOTSYN / DROP_CTINVALID? If so then I don’t think that will fix anything.
That sounds fine.
And we can close this post if your OpenVPN questions are answered…