That should be enough.
I see that in your firewall zone definition, you list the interface as OpenVPN even though its name is openvpn. This could be the issue.
Then, see the logs. You should see there information that the openvpn got up, firewall got restarted and dnsmasq probably as well.