Index: /src/router/openvpn/config2/openvpn.webvpn
===================================================================
--- /src/router/openvpn/config2/openvpn.webvpn	(revision 18561)
+++ /src/router/openvpn/config2/openvpn.webvpn	(revision 18562)
@@ -29,4 +29,8 @@
 				<input size="15" maxlength="15" name="openvpn_net" value="<% nvram_get("openvpn_net"); %>" />
 			</div>
+			<div class="setting">
+				<div class="label"><% tran("service.vpnd_mask"); %></div>
+				<input size="15" maxlength="15" name="openvpn_mask" value="<% nvram_get("openvpn_mask"); %>" />
+			</div>
 		</div>
 		<div id="idbridge">
@@ -49,10 +53,11 @@
 					<input size="15" maxlength="15" name="openvpn_gateway" value="<% nvram_get("openvpn_gateway"); %>" />
 				</div>
-			</div>
-		</div>
-		<div class="setting">
-			<div class="label"><% tran("service.vpnd_mask"); %></div>
-			<input size="15" maxlength="15" name="openvpn_mask" value="<% nvram_get("openvpn_mask"); %>" />
-		</div>
+				<div class="setting">
+					<div class="label"><% tran("service.vpnd_mask"); %></div>
+					<input size="15" maxlength="15" name="openvpn_mask_br" value="<% nvram_get("openvpn_mask"); %>" />
+				</div>
+			</div>
+		</div>
+
 		<div class="setting">
 			<div class="label"><% tran("share.port"); %></div>
Index: /src/router/services/services/openvpn.c
===================================================================
--- /src/router/services/services/openvpn.c	(revision 18561)
+++ /src/router/services/services/openvpn.c	(revision 18562)
@@ -338,6 +338,6 @@
 	else {
 		fprintf(fp,
-			"iptables -A FORWARD -i %s1 -j %s\n",
-			"iptables -A FORWARD -o %s1 -j %s\n",
+			"iptables -I FORWARD -i %s1 -j logaccept\n",
+			"iptables -I FORWARD -o %s1 -j logaccept\n",
 			nvram_safe_get("openvpncl_tuntap"),
 			nvram_safe_get("openvpncl_tuntap"));
@@ -370,6 +370,6 @@
 	else {
 		fprintf(fp,
-			"iptables -D FORWARD -i %s1 -j %s\n",
-			"iptables -D FORWARD -o %s1 -j %s\n",
+			"iptables -D FORWARD -i %s1 -j logaccept\n",
+			"iptables -D FORWARD -o %s1 -j logaccept\n",
 			nvram_safe_get("openvpncl_tuntap"),
 			nvram_safe_get("openvpncl_tuntap"));