iptables rule(s) to send openvpn traffic from clients over an sshuttle tunnel?

Solution 1:

A couple of questions to clarify, basically, you want the openvpn clients to have access to what the openvpn server does, mainly the target ssh server subnet (10.10.0.1). Correct?

Does the openvpn server have access to everything it should? If so, I believe it's simply a matter of routing, telling the openvpn client, that anything going to 10.10.0.1/24 routes through 10.8.0.1.

If I'm missing something please let me know.

If not, you can just tell openvpn to route for gateways behind it as well, and push those routes to the client.

push "route 10.10.0.0 255.255.255.0"

Make sure you let the 10.10.0.0 boxes know the route back to the clients. Also, don't forget to allow ip forwarding