Rule not taking effect

[Fright]

hi
From what I see, I get the feeling that the 172.25.25.11-server knows nothing about the 10.8.0.0 network location. most likely it has only the default gateway specified (OPT3 ip). and it turns out that requests from 10.8.0.0 clients come to the server without OPN, and responses from the server go through OPNs, which is what it calls asymmetric routing. you can try to add route to 10.8.0.0/24 through 172.25.25.15 on 172.25.25.11-server.

generally speaking, all hosts on the 175.25/24 network should have a route to the 10.8/24 network through 172.25.25.11