A quick patch to openvpn which allows for 'routing' back through the tunnel which originated non-local traffic. This is pretty useful for my "honeypot". You also need a policy route for anything sourced from the pot to external, to go through the tun interface.