I just used: # iptables -t nat -A POSTROUTING -o tap0 -j MASQUERADE And it worked, thanks. On Sun, Jul 08, 2012 at 20:49:08 +0200, Pascal Hambourg wrote: > 1) You need a SNAT/MASQUERADE iptables rule for traffic going through > the VPN so that it goes out with the address assigned to the VPN > interface as the source address, otherwise the packets will have the > default source address, i.e. the one assigned to the default internet > interface.