Hotspot CLients cannot access NFS server on AutoPi

Subject of the issue

I set up an NFS server for the hotspot clients to connect to, however clients attempting to connect get the error “No route to host” while still being able to ping the AutoPi. I also have openvpn set up and connected, the NFS server is accessible from a windows client over the VPN.

iptables rules
Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT udp – 192.168.4.0/24 anywhere state NEW udp dpt:662
ACCEPT tcp – 192.168.4.0/24 anywhere state NEW tcp dpt:662
ACCEPT udp – 192.168.4.0/24 anywhere state NEW udp dpt:875
ACCEPT tcp – 192.168.4.0/24 anywhere state NEW tcp dpt:875
ACCEPT udp – 192.168.4.0/24 anywhere state NEW udp dpt:892
ACCEPT tcp – 192.168.4.0/24 anywhere state NEW tcp dpt:892
ACCEPT udp – 192.168.4.0/24 anywhere state NEW udp dpt:32769
ACCEPT tcp – 192.168.4.0/24 anywhere state NEW tcp dpt:32803
ACCEPT tcp – 192.168.4.0/24 anywhere state NEW tcp dpt:nfs
ACCEPT tcp – 192.168.4.0/24 anywhere state NEW tcp dpt:sunrpc
ACCEPT udp – 192.168.4.0/24 anywhere state NEW udp dpt:sunrpc
ACCEPT all – 10.26.0.0/24 anywhere
ACCEPT all – anywhere anywhere state RELATED,ESTABLISHED
ACCEPT all – anywhere anywhere
ACCEPT icmp – 192.168.4.0/24 anywhere
ACCEPT tcp – 192.168.4.0/24 anywhere state NEW tcp dpt:ssh
ACCEPT tcp – 192.168.4.0/24 anywhere state NEW tcp dpt:domain
ACCEPT udp – 192.168.4.0/24 anywhere state NEW udp dpt:domain
ACCEPT udp – 192.168.4.0/24 anywhere state NEW udp dpt:bootps
ACCEPT udp – default 255.255.255.255 state NEW udp dpt:bootps
ACCEPT tcp – 192.168.4.0/24 anywhere state NEW tcp dpt:http
ACCEPT tcp – 192.168.4.0/24 anywhere state NEW tcp dpt:9000
ACCEPT tcp – 192.168.4.0/24 anywhere state NEW tcp dpt:35000
REJECT all – 192.168.4.0/24 anywhere reject-with icmp-host-prohibited
DROP all – anywhere anywhere

Chain FORWARD (policy DROP)
target     prot opt source               destination
DROP       all  --  anywhere             192.168.4.0/24
ACCEPT     all  --  192.168.4.0/24       anywhere
ACCEPT     all  --  anywhere             192.168.4.0/24
ACCEPT     all  --  anywhere             192.168.4.0/24
REJECT     all  --  anywhere             anywhere             reject-with icmp-host-prohibited
DROP       all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere

Your environment

Gen3