But im still happy someone (ppalias) took the time to help me.
PS: The only problem is is there a way else than postboot script to make thos changes permanent? I cant figure out how to make this special NAT table entry via ZS?
Im also failing to get autologin working for ZS openVPN version, someone has a binary that accept password via file?
ip.forwarding=1 should be already configured on the ZS, otherwise it won’t work as a router.
The iptables rule is masquerading (NATing) everything that comes from 192.168.0.0/24. ZS arranges NAT with interfaces, not networks. Maybe your problem was just to add the tunnel interface on the NAT list.