I have two Sites A/B with separate internet connections. They are connected through an OpenVPN Tunnel. For a client on side B I want internet traffic to exit through the gateway of A.
More Details:
Site A
LAN: 10.38.60.1/24
WAN: Static IP
Site B
green0: 10.11.12.1/24
WAN: Dynamic IP
TUN2: inet 10.101.101.1 netmask 255.255.255.255 destination 10.101.101.2
OpenVPN
Subnet: 10.101.101.0/255.255.255.0
Client on B
IP: 10.11.12.202/24
Gateway: 10.11.12.1
So my first thought was to add a forward rule via iptables:
iptables -I FORWARD -i green0 -o tun2 -s 10.11.12.202 -j ACCEPT
But it does not seem to work. I also tried to SNAT the traffic, but i don’t think that is nescessary. Any Ideas? Is this even possible with iptables?