...doesn't seem to happen. I've got openvpn running fine, and I've got packets coming in tap0 which should go out eth0 (actually br0) with NAT. But counts in iptables FORWARD chain just don't get incremented, and neither do my -t nat POSTROUTING rule counts. Which is consistent with what I see with tcpdump on the interfaces. Packets just hit the machine and fizzle. I've set /proc/sys/net/ipv4/ip_forward to 1. I can't think of what else I might need to do.

So I'm wondering - could this be a "feature" of a linode?