Questions tagged [wireguard]

Questions specific to Wireguard VPN in general, such as setup or functioning question. Use this tag if your question involves directly Wireguard VPN technology; do not use it if you just happen to be using Wireguard and your question is about a specific network configuration.

Filter by
Sorted by
Tagged with
0 votes
1 answer
21 views

Wireguard: unable to access services running inside linux guest from internet when vpn connected

I run several services in a linux guest running on vmware on a windows host. Inside the linux guest, I connect the wireguard client to my vpn provider using the following config: [Interface] ...
user avatar
0 votes
1 answer
37 views

Wireguard transfer of external ip address

There is an external server (host) with wireguard, ip address 98.XX.XX.XX and internal server (client) with wireguard 192.168.0.2. On client installed web server (nginx, phpfpm). On host all ports ...
user avatar
  • 1
0 votes
1 answer
20 views

UFW Masquerade and outside traffic only on specific interfaces

I have a Ubuntu system (192.168.A.B) that is running as a Wireguard "server" with 2 tunnels with the following networks and UFW rules: Network 10.255.200.0/24 ufw allow XXX/udp && ...
user avatar
  • 103
0 votes
2 answers
34 views

How to assign different public IP addresses for different Wireguard peers?

I want to use different public IP addresses for each peer in my Wireguard network. Is it possible? How to do it?
user avatar
0 votes
0 answers
31 views

Yet another Wireguard "handshake initiated but no internet or LAN access" request for troubleshooting assistance

I had this exact configuration working for over a year until out of the blue while I was traveling a few weeks ago my wireguard connection stopped working. When I got home I tried to troubleshoot but ...
user avatar
  • 21
0 votes
1 answer
74 views

Run Wireguard as a client on Win10 with WSL2

When attempting to run a Wireguard client in a Docker container or on WSL2 itself you will run into issues such as: 2022-04-27 17:15:45,035 DEBG 'start-script' stderr output: [#] ip -4 rule add table ...
user avatar
0 votes
1 answer
14 views

client-certificate authentication for SSH

My servers are incessantly being brute-force attacked on my SSH port. I am using non-standard SSH port, firewall blacklist for port-scanners, and I am also using custom fail2ban-like script to ban ...
user avatar
1 vote
2 answers
47 views

Openbsd wireguard to wireguard

I build a server (vps) which play the role of my gateway. My whole personal network is connected behind through wireguard. Every think works well, I follow more or less https://openbsdrouterguide.net ...
user avatar
  • 59
0 votes
0 answers
103 views

Wireguard how make access only to the local network for some clients on centos?

I need some of the clients to have access to the internet when connected through the wireguard, and some only see the local network for access to samba, but without access to the Internet. I have ...
user avatar
0 votes
0 answers
22 views

Forward a port through a VPN to remote host

Preface: I would like to setup a game server for me and my friends to play on that is hosted on my local machine. My machine is currently at university which doesn't allow me to forward ports. I ...
user avatar
  • 1
0 votes
1 answer
323 views

libvirt QEMU/KVM guest cannot connect to network (NAT)

An Ubuntu QEMU/KVM guest created in virt-manager with all default settings and network type NAT can't activate its network. My host is Fedora 35. A screenshot of the guest's NetworkManager log is ...
user avatar
  • 1
0 votes
0 answers
78 views

How to SSH into a computer in my local network, that is connected to a remote WireGuard-server?

I'm playing around with my new Asus router that has an OpenVPN-server option. It works fine connecting to the router's VPN and accessing my devices in my home LAN (except for one...). There is one ...
user avatar
0 votes
0 answers
22 views

How to forward a port from a private interface to a public one?

I need to forward port 25565 (Minecraft) from a server which has got public ip to another one (without a public ip) to port 25565 too. These servers are in a Wireguard network 10.1.0/24 on interface ...
user avatar
0 votes
0 answers
43 views

Using Wireguard to expose Minikube services on a VM

Due to hitting bugs running Minikube on BTRFS, I am running it now on a QEMU Fedora 35 guest VM on Fedora 35 host. I can use ssh -fNL port forwards to access the Podman diven network services in the ...
user avatar
  • 151
2 votes
1 answer
118 views

Web server cannot access itself through public ip address on nftables port forwarding

I have a WireGuard server as the edge router. Forwarding all http traffic to my web server. Everything works fine but there is a problem. The web server cannot access itself through the WireGuard ...
user avatar
  • 23
0 votes
0 answers
39 views

wireguard: set up interface

What exactly happens when I do wg-quick up wg0 ? What commands does the above script execute? I have a simple setup, where I want to configure wg0' interface, as configured in my config file /etc/...
user avatar
1 vote
1 answer
178 views

mount smb share after wireguard with fstab or systemd

I'm trying to mount an SMB-share after a wireguard connection has been established. Therefore I did the following things: created a wireguard config made systemd start the connection on startup ...
user avatar
  • 73
1 vote
0 answers
49 views

Raspberry pi as Wireguard server and OpenVPN client: No connection to devices

I am trying and searching a lot but I am struggling with my scenario. I found some same posts, but there was no solution. I am using a Raspberry PI (192.168.10.100) to connect as a openvpn client to ...
user avatar
0 votes
1 answer
137 views

Wireguard Client on Debian 10 on OVH VPS connected but does not pass traffic

I have simple topology. I want my VPS on OVH to connect to Wireguard VPN Server. Server config is ok because other client (Windows) work well with it. VPN Client Wireguard runs on Debian 10: 4.19.0-18-...
user avatar
1 vote
1 answer
494 views

iptables forward traffic from/to wireguard

Consider the following setup. I have a VPS that is connected to the internet, having a fixed IP. Further, in my home network, behind a NAT router, I do have my home network with several hosts. My home ...
user avatar
  • 430
0 votes
0 answers
70 views

Wireguard does not rout all traffic over the tunnel even with 0.0.0.0/0

I have a raspberry pi with a Wireguard Server and a number of peer's Android, Windows and another Raspberry pi. The tunnel works on all clients (for example i can ping my upnp server). The thing that ...
user avatar
  • 3
0 votes
0 answers
123 views

How to enable Wireguard UDP port on SELinux

I have a wireguard tunnel on a RHEL 8 server and I would like to enable SELinux. In order to do that, Redhat docs suggest the following commnad: #> semanage port -a -t <type> -p udp <port&...
user avatar
  • 175
0 votes
0 answers
16 views

Wireguard setup script keeps freezing

I'm trying to get a demo run of Wireguard by running the sample script client.sh from their website. Every time I run the script on Fedora 35, it keeps freezing without doing anything. Finally, after ...
user avatar
0 votes
0 answers
238 views

Why is my openWRT routing not working as expected

I hope I am just missing something simple here. I have a OpenWRT router with a Wireguard VPN running, everything routing through the VPN, which is all working fine. I have put a route in place so that ...
user avatar
0 votes
0 answers
86 views

How can I reach a VM through a wireguard tunnel provided by the Host?

I've a working WireGuard setup with a Server, a Host and a Machine. The IPs are in the 10.0.0.x range with subnet mask 255.255.255.0. I can ping the Machine from the Host and the Host from the Machine ...
user avatar
  • 132
0 votes
1 answer
82 views

Incoming traffic to docker tries to exit via wireguard tunnel

I have the following problem: My server has a public static ip. So far so good. My plan is it to bypass a firewall with wireguard and still be able to access the server and it's services via the ...
user avatar
  • 101
0 votes
0 answers
385 views

How do I correctly set up a Linux VM as a gateway to route all traffic through a Wireguard VPN connection?

I have been banging my head against the wall for a couple of weeks trying to figure out how to set up a Linux VM on a Mac to act both as a NordVPN client and a gateway/router to forward all traffic ...
user avatar
0 votes
0 answers
62 views

Forward UDP traffic to OpenVPN client

I have these hosts: server-a, server-b, firewall-a firewall-a ========== public: 5.5.5.5 private: 192.168.44.1 forwards tcp 1194 to 192.168.44.9 forwards udp 51820 to 192.168.44.9 server-a ======== ...
user avatar
  • 101
0 votes
1 answer
25 views

How to be connected to two seperate wireguard networks

I wanted to access my home router from anywhere without it being on a public address so I installed wireguard on it, installed wireguard on a digital ocean server, installed wireguard on my own laptop ...
user avatar
  • 143
0 votes
1 answer
238 views

How to monitor activity of all WireGuard clients connected to a server?

I've setup a WireGuard server on a Linux server. Is it possible to monitor stuff like bandwidth, DNS requests, websites visited, etc of all wg clients connected to this server?
user avatar
1 vote
0 answers
172 views

How to fix routing for Wireguard VPN Gateway

I am desperately trying to get my Wireguard-VPN-Setup up and running as my Internet Connection has been switched to IPV6 (DS-lite). My Setup(raw): NetCup VPS (acting as IPv4 contact point for my ...
user avatar
  • 11
1 vote
1 answer
282 views

How to set up NAT of VPN-sourced ip packets?

I have an SBC running Arch Linux that I use as a VPN server (as it is the only device having a globally accessed IP address not NATed by ISPs) to connect three different networks. These are 192.168.0....
user avatar
0 votes
1 answer
940 views

Wireguard - Clients can ping server but not each other

I have 3 nodes - 1 server, and two additional clients. I can successfully ping the server endpoint from both clients, and I can ping the two clients from the server. However the two clients can not ...
user avatar
0 votes
1 answer
106 views

Could not bind wireguard address when starting postgresql

I'm running wg-quick.service on system startup to establish a VPN tunnel: root@db ~ # cat /usr/lib/systemd/system/wg-quick@.service [Unit] Description=WireGuard via wg-quick(8) for %I After=network-...
user avatar
  • 101
2 votes
0 answers
172 views

Linux / iptables - NATing between overlapping subnets

I'm trying to NAT from one Wireguard interface to another while retaining a private subnet. Here's my setup. The trick here is that I have overlapping subnets on the interfaces. My VPN server has ...
user avatar
  • 21
0 votes
0 answers
48 views

Disable system wide vpn on a specific browser

I have a system-wide OpenVPN and wireguard vpn from IVPN,i have 3 browsers, chrome, firefox and opera, i only want to use the VPN connection on opera and firefox, on google chrome i want to use my ...
user avatar
0 votes
0 answers
72 views

Cannot send/receive email through postfix/dovecot behind NAT

I am trying to set up a secondary mail server for my domain. For this server, I have a very small KVM VPS with public IP and Oracle Linux 8 (Kernel 5.4) with Wireguard installed, and bigger Virtual ...
user avatar
  • 21
0 votes
1 answer
123 views

Forward only LAN traffic from network namespace to root namespace

I set up my machine going by the tutorial here to make a Wireguard interface the only interface (so any of my applications can only use that to access the internet). This works as intended, but now I ...
user avatar
0 votes
0 answers
324 views

How to route LXC container traffic through Wireguard tunnel?

The image shows a complete picture of what I'm building. But for now I want to implement a small part with one home server and 2 LXC, 2 ipv4 on a remote server. I want to use 2 different Wireguard ...
user avatar
  • 1
0 votes
0 answers
70 views

How to assign a remote public ip (via wireguard) to lxc container

What I have: lxc host # ifconfig wg1: flags=209<UP,POINTOPOINT,RUNNING,NOARP> mtu 1420 inet 192.168.7.2 netmask 255.255.255.0 destination 192.168.7.2 ... enp2s0: flags=4163<UP,BROADCAST,...
user avatar
  • 1
2 votes
2 answers
2k views

Oracle Free Tier: Wireguard and iptables

Problem: Traffic not making it from "client" to "server" and back. Configs: "server": [Interface] Address = 10.8.0.1/24 ListenPort = 51820 PrivateKey = [redacted] PostUp ...
user avatar
0 votes
0 answers
199 views

MiniUPnP interface and NAT-PMP is not going through wireguard

Running a wireguard VPN on both an ubuntu VPS and Arch local machine. Forwarded port 23288 on VPS's wireguard conf with iptable rule: PreUp = iptables -t nat -A PREROUTING -d vps.public.ip -p tcp --...
user avatar
  • 135
0 votes
1 answer
195 views

Forwarding the local service ports through wireguard and back for the local service

My System: Local: Arch Linux VPS: Linode uubuntu 20.04.1 Standard Wireguard Package on both ends So I am using airdcppd, a file sharing program which uses 3 ports on my local machine to transfer ...
user avatar
  • 135
2 votes
1 answer
229 views

Wireguard Multiline Config Value

Is it possible to split a config command over multiple lines instead of one long string? E.g. PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE When ...
user avatar
  • 4,843
1 vote
1 answer
1k views

No route to host with routing to interface for specific port

I have a server A with a VPN configured to another server B. Currently, server A can ping server B by using the VPN address 10.12.0.1. I would like to route all HTTPS traffic via server B and let ...
user avatar
0 votes
1 answer
122 views

How to use `wakeonlan` with a VPN active?

Today, I've started using the PIA (Private Internet Access - Version 2.9) VPN service via their native application to set things up, everything works like a charm so far, apart wakeonlan some-mac-...
user avatar
0 votes
0 answers
121 views

Need help with forwarding a port of a local service through VPN so it can be accessed from the net

TL;DR: Goal: to forward a service on a local machine with its associated ports under a VPN to the VPS so it can be accessible from the net, checked port to be open with a port checker. I think that ...
user avatar
  • 135
0 votes
2 answers
1k views

Client (Ubuntu 20.04) cannot resolve internet pages while connected to the VPN WireGuard Server

I've setup a WireGuard VPN, however after successfully connecting with the following command the browser is not loading web pages from the internet: wg-quick up `pwd`/myifwg0.conf I checked the ...
user avatar
  • 355
0 votes
1 answer
59 views

Wireguard connection problem

We are starting using WireGuard in company, and seems like I am the only one who has problem with using it. When I tracepath to connect on one of our servers, it won't even let me connect from my ...
user avatar
  • 338
2 votes
2 answers
2k views

Connect 2 sites (networks) with Wireguard

Following is what I want to achieve. Could someone suggest a solution with specific steps? If the requirement cannot be satisfied with Wireguard what would be an alternate solution? Routers on both ...
user avatar