On Sat, Aug 7, 2010 at 13:09, J Webster <webster_jack@xxxxxxxxxxx> wrote: > However, although it connects, when I view the IP from the client, it still > says xx.xx.xx.198 That sounds correct to me. -j MASQUERADE is old and ugly and should be avoided. it really does a -j SNAT --to-source 1.2.3.4 where 1.2.3.4 is the primary address of the egressing interface. It can be useful when that interface' address is not static, but you're probably better scripting around that. So you want your openvpn client to use the openvpn server as its default route. And by "view the IP from the client", you mean you visit some site like say https://secure.informaction.com/ipecho/ and it reports one IP when queried by a process on the openvpn server, and reports another IP when queried by a process on an openvpn client, and you do not like that? Try replacing the '-j MASQUERADE's with explicit '-j SNAT --to-source's. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
