I'm having some trouble getting OpenVPN working on my pfSense box. The issue is quite strange to me.

When I have the OpenVPN turned on, only my router is able to connect to the Internet. From the router I can use ping, links, etc., and connections work exactly as expected - through the VPN, with the IP address assigned by my VPN provider (Proxy.sh, incidentally).

However, none of the clients on the local network can connect to the Internet. I get timeouts when using ping or a web browser. I can ping my router, and the IP address of the gateway.

When I switch the default gateway from the VPN to my ISP's gateway, all works exactly as expected.

Here the routing table (netstat -r) when in VPN mode, and a key for it:

IPv4
Destination Gateway Flags   Refs    Use Mtu Netif   Expire
0.0.0.0/1   10.XX.X.53  UGS 0   122 1500    ovpnc1  =>
default 10.XX.X.53  UGS 0   235 1500    ovpnc1   
8.8.8.8 10.XX.X.53  UGHS    0   82  1500    ovpnc1   
10.XX.X.1/32    10.11.0.53  UGS 0   0   1500    ovpnc1   
10.XX.X.53  link#12 UH  0   0   1500    ovpnc1   
10.XX.X.54  link#12 UHS 0   0   16384   lo0  
ZZ.XX.XXX.0/20  link#1  U   0   83  1500    re0  
ZZ.XX.XXX.XXX   link#1  UHS 0   0   16384   lo0  
127.0.0.1   link#9  UH  0   12  16384   lo0  
128.0.0.0/1 10.11.0.53  UGS 0   123 1500    ovpnc1   
192.168.1.0/24  link#11 U   0   1434    1500    ue0  
192.168.1.1 link#11 UHS 0   0   16384   lo0  
YYY.YYY.YYY.YYY/32  ZZ.XX.XXX.1 UGS 0   249 1500    re0 

IP addresses

• 10.XX.X.53/54 - My DHCP-assigned IP address/pair from the VPN provider
• ZZ.XX.XXX.XXX - My external IP assigned by my ISP
• YYY.YYY.YYY.YYY - The external IP assigned by the VPN provider

Interfaces

• ovpnc1 - My VPN client interface
• re0 - My LAN interface
• ue0 - My WAN interface

This looks essentially what I would expect it to be. The default route is through the VPN provider. The VPN address is routed through the ISP-assigned IP address. I am not sure what would be wrong here.

So figuring this was a firewall issue, I basically tried enabling all in/out traffic. This did not seem to remedy the problem.

Also figuring it could possibly be some client networking issue, I restarted the clients on the LAN. This did not help.

I also ran route flush and reset the routes manually.

So I am a bit stumped, and would be very grateful for any thoughts on what the problem might be.