VPN out + OpenVPN in

Probably it’s required to add “dev eth0” to the ip route, to force it using the right device as well.