I had a problem where Windows 7 would not allow inbound connections over my openVPN tunnel. Meaning that my Windows 7 client would allow outbound and established connections but not allow inbound connections coming from openVPN network. For instance I can ping a Linux client without firewall from my W7 client, but the Linux client cannot ping the W7 client (packets get dropped by the Windows 7 firewall).
I solved this by excluding the network adapter that was created by openVPN (tun/tap adapter) from the Windows firewall public and private profiles. Basically I would like ICMP to work and RDP but all the rest I want to have secure. At the moment I just allow all incoming connections on the network. (which is private and shared by only my machines). I was wondering if this is the most sensible thing to do or if there is a way to allow incoming ping and rdp towards the TUN/TAP interface (coming from my VPN network) without allowing any other connection?
The windows clients are all running Windows 7 Professional.