Have you checked? http://wl500g.info/showthread.php?t=5312
pay special attention to the firewall rules.
Have you checked? http://wl500g.info/showthread.php?t=5312
pay special attention to the firewall rules.
Despite being just a static router I missed a NAT rule in iptables.
Chain POSTROUTING (policy ACCEPT 15603 packets, 1038K bytes)
pkts bytes target prot opt in out source destination
8 672 MASQUERADE all -- * tun0 192.168.2.0/24 192.168.3.0/24