ip ro вам в помощь.# Allow TUN interface connections to OpenVPN server
$IPTABLES -A INPUT -i tun+ -j ACCEPT
# Allow TUN interface connections to be forwarded through other interfaces
$IPTABLES -A FORWARD -i tun+ -j ACCEPT
$IPTABLES -A FORWARD -s $OPENVPN_RANGE -d $LAN_RANGE -j ACCEPT
$IPTABLES -A FORWARD -s $LAN_RANGE -d $OPENVPN_RANGE -j ACCEPT # Keep state.
$IPTABLES -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
# http/https, smtp/smtps, pop3/pop3s, imap/imaps, ssh
$IPTABLES -A INPUT -p tcp -m multiport --dport 80,443,25,465,110,995,143,993,587,465,22 -j ACCEPT
# Loop device.
$IPTABLES -A INPUT -i lo -j ACCEPT
# Allow PING from remote hosts.
$IPTABLES -A INPUT -p icmp --icmp-type echo-request -j ACCEPT