Hi!

I try to access a VPN server on the Internet from a host on a local network with a linux router to the Internet. My attempts have failed and I used tcpdump on the router to try and find the problem. It gave the following result:
There are two net interfaces on the router - eth0 - the local net, and eth1 - the Internet. When I try to access the VPN server I see the outgoing packets on both net interfaces, but incoming packets (the server's reply) I can see only on eth1.
iptables allows forwarding for local net without any restrictions:
-A FORWARD -s 192.168.2.0/24 -j ACCEPT
and it works for other services.
Could anybody tell me the nature of the problem and a possible solution, please?

Use stateful rules instead of connection rules.

In other word try the following;

1 members found this post helpful.

Yeah! It seams that's it. Thank you!