I have a lxc-container with eth0 and ip 172.17.0.2/16. The host has a bridge br0 with 172.17.0.1/16. Both can ping each other. Further the host has a vpn wg0 and ip 172.16.0.1/16. If I ping from inside the container to the vpn I get:
# ping 172.16.0.1
PING 172.16.0.1 (172.16.0.1) 56(84) bytes of data.
64 bytes from 172.16.0.1: icmp_seq=1 ttl=64 time=0.051 ms
Why is this? I expected no connection between both interfaces as forwarding and NAT are not enabled.