Connection is established, SSH to local network works, anything else is not working

[alesrosina]

I've setup openvpn connection, added port forward on my router and i can connect to vpn from remote.
I can also connect with ssh to raspberypi, which is running openvpn server. From this machine i can easily browse internet, but i would like to access it on VPN.

Here's some data that might be useful:

$ sudo iptables -S
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT

$ sudo iptables -t nat -S
-P PREROUTING ACCEPT
-P INPUT ACCEPT
-P OUTPUT ACCEPT
-P POSTROUTING ACCEPT
-A POSTROUTING -s 10.247.138.0/24 -o eth0 -m comment --comment openvpn-nat-rule -j MASQUERADE

Not sure where above IP came from and what does it mean?

Contents of /etc/openvpn/server.conf:

dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/pki/ca.crt
cert /etc/openvpn/easy-rsa/pki/issued/____.crt
key /etc/openvpn/easy-rsa/pki/private/____.key
dh none
ecdh-curve prime256v1
topology subnet
server 10.241.87.0 255.255.255.0
# Set your primary domain name server address for clients
push "dhcp-option DNS 9.9.9.9"
push "dhcp-option DNS 149.112.112.112"
# Prevent DNS leaks on Windows
push "block-outside-dns"
# Override the Client default gateway by using 0.0.0.0/1 and
# 128.0.0.0/1 rather than 0.0.0.0/0. This has the benefit of
# overriding but not wiping out the original default gateway.
push "redirect-gateway def1"
client-to-client
client-config-dir /etc/openvpn/ccd
keepalive 15 120
remote-cert-tls client
tls-version-min 1.2
 tls-crypt /etc/openvpn/easy-rsa/pki/ta.key
cipher AES-256-CBC
auth SHA256
user openvpn
group openvpn
persist-key
persist-tun
crl-verify /etc/openvpn/crl.pem
status /var/log/openvpn-status.log 20
status-version 3
syslog
verb 3
#DuplicateCNs allow access control on a less-granular, per user basis.
#Remove # if you will manage access by user instead of device. 
#duplicate-cn
# Generated for use by PiVPN.io

I have tried to connect on Laptop (Ubuntu) & iPhone (OpenVPN app) - both with same result.

My guess is sth with NAT or sth like so, but I'm not an expert here so basically not really understanding what is going on :)

Do you need any other debugging info?

Thanks for your help!

[alesrosina]

OK, I've just fixed it.

Yes, it was an issue with NAT, but I just run pivpn debug and it asked me

:: [ERR] Iptables MASQUERADE rule is not set, attempt fix now? [Y/n]

And now it works.

Closing the issue.