Trouble Setting Up iptables

[a5m]

Hello everyone,

I need some help setting up iptables. I've followed this guide: https://torguard.net/knowledgebase.php?action=displayarticle&catid=60&id=165

I'm currently running the latest Merlin on a RT-AC68R and have setup OpenVPN using this guide: https://torguard.net/knowledgebase.php?action=displayarticle&id=216

Only changes I've made are setting Accept DNS Configuration to Exclusive, Cipher Negotiation to Enable (with fallback) and Force Internet Traffic Through Tunnel to Policy Rules (strict) and routing only the NAS IP 192.168.1.69 through the tunnel.

For iptables destip I've used the NAS IP 192.168.1.69 but all internet traffic is getting blocked except for the NAS. I'm pretty sure iptables needs something added or modified but I'm not sure what. Any help would be greatly appreciated.

Thanks in advance

 

[Xentrk]

Hello everyone,

I need some help setting up iptables. I've followed this guide: https://torguard.net/knowledgebase.php?action=displayarticle&catid=60&id=165

I'm currently running the latest Merlin on a RT-AC68R and have setup OpenVPN using this guide: https://torguard.net/knowledgebase.php?action=displayarticle&id=216

Only changes I've made are setting Accept DNS Configuration to Exclusive, Cipher Negotiation to Enable (with fallback) and Force Internet Traffic Through Tunnel to Policy Rules (strict) and routing only the NAS IP 192.168.1.69 through the tunnel.

For iptables destip I've used the NAS IP 192.168.1.69 but all internet traffic is getting blocked except for the NAS. I'm pretty sure iptables needs something added or modified but I'm not sure what. Any help would be greatly appreciated.

Thanks in advance

Here is another reference for you

https://github.com/RMerl/asuswrt-merlin/wiki/Policy-based-Port-routing-(manual-method)

I recommend configuring the router IP address to use the WAN iface in the Policy Routing section on the VPN client screen.

 

[a5m]

Here is another reference for you

https://github.com/RMerl/asuswrt-merlin/wiki/Policy-based-Port-routing-(manual-method)

I recommend configuring the router IP address to use the WAN iface in the Policy Routing section on the VPN client screen.

Thanks for your reply.

To be blatantly honest I'm new to this stuff so I was hoping someone would just tell me what to do. But I like figuring these things out. I'll probably be back with some questions

 

[a5m]

Just following up in case anyone else was having a similar issue.

I left everything the same as stated in my original post, except for iptables I deleted the top half and left only the following:

iptables -I FORWARD -i tun11 -p udp -d destIP --dport Port -j ACCEPT
iptables -I FORWARD -i tun11 -p tcp -d destIP --dport Port -j ACCEPT
iptables -t nat -I PREROUTING -i tun11 -p tcp --dport Port -j DNAT --to-destination destIP
iptables -t nat -I PREROUTING -i tun11 -p udp --dport Port -j DNAT --to-destination destIP

That seems to have done the trick. All traffic is flowing normally now.