If attempting to route between two subnets on S3 (such as between the S3 VPC and OpenVPN connected machines), you will need to right-click the router instance, select Network -> Change Source/Dest Check, and disable it.

This is on top of enabling IP forwarding. It is not necessary to enable promiscuous mode on the interface(s).