I have this set up actually, took me a while to set up too...
If you're using OpenVPN you can use my up/down script for OpenVPN/squid. You'll also need to set up BIND to go thru the VPN too:
if [ "$status" = "up" ]; then
If you have mask 255.255.0.0 i.e. 192.168.30.1/16 it covers range from 192.168.0.0 to 192.168.255.255. Therefore, it's looking for 192.168.100.201 on the same subnet i.e. using only layer 2 without any routing.
For routing, you need to use subnets that won't overlap. If you wish to continue using these ranges, that would be:
192.168.0.0/18 from 192.168.0.0 ...
You can read this:
The author redirect all 80 port traffic to privoxy, for ad blocking, you can change his command to redirect to squid.
iptables -t nat -A PREROUTING -s YOUR.NET.ADDRESS/NETTMASK -p tcp -m multiport --dport 80 -j DNAT --to-destination 127....
According to this github thread the feature may be available in near future, as the code already exists. So the answer for this time is probably no, as this update has not yet been merged. You can, however, try to use the patch yourself (and recompile SoftEther) or work this problem around with RADIUS.
Ok, so following on from https://superuser.com/questions/923747/vpn-ip-forwarding-and-nat/925570#925570 I have what may be a really stupid question to ask, but if all you need is access to specific ports, like http/https have you tried SSH Tunneling? It's much easier than setting up a VPN. Ultimately you ssh from one machine to another, and then have the ...
If the client is linux, you need to add "dhclient tunx" command at the end of softether startup script. Adding sleep delay time also good to make sure vpn already connected before launching dhclient command.