Router replacement, OpenVPN/LAN issue. What is missing?

Question

Mikrotik

Old configuration: all devices on the local network are visible (192.168.1.0/24)
OpenVPN client (172.17.1.x)
OpenVPN server (192.168.1.17, 172.17.1.1)
NetGear router on ubuntu (NAT to OpenVPN server IP address + route 172.17 .1.0/24 gateway=192.168.1.17, no firewall rules).
New configuration: only OpenVPN server (192.168.1.17, 172.17.1.1) is visible, devices in the local network (192.168.1.0/24) are not visible
OpenVPN client (172.17.1.x)
OpenVPN server (192.168.1.17, 172.17.1.1) Mikrotik on
Ubuntu has the following settings:
/ip firewall nat
add action=masquerade chain=srcnat ipsec-policy=out,none out-interface-list=WAN
add action=dst-nat chain=dstnat disabled=no dst-port=1194 in-interface=ether1-WAN protocol=udp to-addresses=192.168.1.17
/ip route
add distance=1 dst-address=172.17.1.0/24 gateway=192.168.1.17
Question: what filtering rule should be added on Mikrotik above all other drop to get access to the local network (192.168.1.0/24)?
Thanks in advance to all who answer.

Answer 1

add action=masquerade chain=srcnat ipsec-policy=out,none out-interface-list=WAN
add action=dst-nat chain=dstnat disabled=no dst-port=1194 in-interface=ether1-WAN protocol=udp to- addresses=192.168.1.17

what is this for?
masquerade fix
add action=masquerade chain=srcnat out-interface-list=WAN