title: AWS VPC outbound traffic
body: <p>I have a VPC in AWS with a public and a private subnet. I added an OpenVPN server to it and as long as I'm logged into the VPN I can access everything just fine. I now need to set it up so that a server in the VPC can access an external REST API. My current ACL rules are completely open. Both inbound and outbound look like this:</p>
  
  <pre><code>100 ALL Traffic ALL ALL 0.0.0.0/0 ALLOW
  *   ALL Traffic ALL ALL 0.0.0.0/0 DENY
  </code></pre>
  
  <p>I have my security group setup to only allow internal traffic on these ports:</p>
  
  <pre><code>SSH (22)     TCP (6) 22   10.0.0.0/24
  HTTP (80)    TCP (6) 80   10.0.0.0/24
  HTTPS (443)  TCP (6) 443  10.0.0.0/24
  MySQL (3306) TCP (6) 3306 10.0.0.0/24
  </code></pre>
  
  <p>My outbound traffic for the security group allows all. So I would think an outbound http request would be allowed by the security group and the ACL. But when I try <code>wget google.com</code> the domain is resolved but it just sits at connecting to google.com. I checked my routing table and any traffic thats not local goes to the gateway:</p>
  
  <pre><code>Destination Target       Status Propagated
  10.0.0.0/24 local        Active No
  0.0.0.0/0   igw-912ddaf4 Active No
  </code></pre>
  
  <p>Can someone point me in the right direction of how this should be set up. Or tell me why I don't have outbound traffic. Maybe at least list any other places where network traffic could be restricted on AWS's VPC.
  Thanks</p>