# /etc/ufw/before.rules
# START OPENVPN RULES
# NAT table rules
*nat
:POSTROUTING ACCEPT [0:0]
# Allow traffic from OpenVPN client to eth0 (change to the interface you discovered!)
-A POSTROUTING -s 10.8.0.0/8 -o ens224 -j MASQUERADE
-A POSTROUTING -s 10.8.0.0/8 -d 172.29.128.0/18 -o ens192 -j MASQUERADE
-A POSTROUTING -s 10.8.0.0/8 -d 10.0.0.0/8 -o ens256 -j MASQUERADE

COMMIT
# END OPENVPN RULES