Questions tagged [wireguard]

352 questions
0
votes
1 answer

Wireguard Connection Dies on Ubuntu Peer

I live in a building where the network is behind a NAT. I have a Linux desktop PC and a laptop. In order to access my desktop via ssh, I have a Wireguard VPN running on my desktop, laptop and a VPS. The issue is that connection between my desktop…
saad
  • 103
  • 3
0
votes
1 answer

Firewalld Blocking SSH between Clients on WireGuard LAN

What needs to be allowed in firewalld so that WireGuard clients can connect to each other via SSH? The Setup I have two clients and a server on a WireGuard VPN network. All of them are running Debian 11. CLIENT A -------- SERVER -------- CLIENT…
user371793
  • 27
  • 6
0
votes
0 answers

Port forwarding with iptables for Nextcloud (fpm+nginx) through Wireguard

I am trying to reach my Nextcloud (fpm behind nginx) instance through a wireguard VPN, both running in a docker container. My docker-compose.yml looks like: version: "3.9" services: nextcloud: image: nextcloud container_name: nextcloud …
0
votes
0 answers

site-to-peer topology with wireguard

I need to modify an existing Wireguard VPN with start topology (central peer with public IP, called "server" in the schema), so that one site will be connecting via a single "site peer" routing the traffic from other peers in its local network (as…
eudoxos
  • 363
  • 2
  • 3
  • 11
0
votes
1 answer

Can clients run a IPIP (protocol 4) tunnel inside Wireguard as in OpenVPN?

When two subnets are connected via Wireguard, clients can communicate to each other using TCP/UDP/ICMP. Can clients run IPIP (protocol 4) tunnels in Wireguard as in OpenVPN? I'm planning to migrate from OpenVPN to Wireguard and checking if it will…
laimison
  • 579
  • 2
  • 9
  • 17
0
votes
1 answer

Iptables: how to allow forwarding from wireguard NIC only to some IP

Context I successfully integrated Wireguard in my LAN so I could access my NAS (192.168.1.45) from the outside. |Router| ===:5182=> |VPN server| ====> |NAS| 192.168.1.254 192.168.1.21 (wlan0) 192.168.1.45 …
zar3bski
  • 133
  • 1
  • 2
  • 11
0
votes
1 answer

Routing call to IP-filtered web service from Docker container via WireGuard VPN

Scenario: A simple PHP script (myip.php) hosted on a server with public IP WSIP. The script is available via http and https. I have a small server (GW) with public IP GWIP. This server is intented to be used only as a gateway. Another server…
0
votes
0 answers

Wireguard server multi-hop for some peers

I have several Wireguard servers hosted on Ubuntu VPS servers. There are peers setup on each VPN server. I have the servers setup in "mesh" configuration and they're all able to ping each other directly. The servers have ipv4 forwarding enabled. I…
0
votes
2 answers

Secure my DNS server by allowing connection only from VPN

I have an Ubuntu 20.04 LTS VPS (connected directly to the internet), on which I installed WireGuard and Pi-Hole. I noticed tons of requests on my ad-blocking DNS server, and I suddenly realized that leaving my 53 port open was a bad idea at all. I'm…
0
votes
0 answers

Wireguard network peers access to lan

I hope you can help me with my problem. I am building a network for personal use and I found some issues, I don't have experience in networks. I will explain using the attached image: Network Infrastructure Diagram Problem: I cannot reach devices on…
0
votes
1 answer

How do I configure a Wireguard Interface to connect to a remote peer through a specific network interface?

Suppose I have two servers, gateway which is publicly visible to the internet and appserver which is hidden behind a nat/firewall. Also suppose that each of these two servers has two interfaces connected to entirely separate internet uplinks (see…
0
votes
1 answer

WireGuard allow access to single service on network

I'm running a WireGuard server on my Raspberry Pi using the https://github.com/linuxserver/docker-wireguard image. I want to allow peers to do two things: Connect to a single NAS via SMB Ping the same NAS I've written the following iptables rules…
Lukas Knuth
  • 131
  • 4
0
votes
1 answer

Wireguard iface - icmp6 replys from lo interface

I use wireguard between 2 Debian11 and face a problem: traffic goes in to wireguard interface/ip address but goes out with lo as interface with the right ip address 19:23:50.287492 wig0 In IP6 fd99:1234:beef:cafe:fade::7000 >…
TOOTAi
  • 1
  • 1
0
votes
1 answer

port forwarding from wireguard interface to another host with iptables

I have two servers that I can access one of them via wireguard. I have a service that listen on 4559 port on the second server. how can I port forward to second server via iptables. [laptop] [server1] …
0
votes
0 answers

Wireguard not reconnect after network cable reconnected

I am currently testing with my wireguard ubuntu setup. But I have a problem with the vpn connection it is not reestablished after unplugging and plugging the network cable. If i unplug the switch from the uplink it works without problem. Is there a…
live2
  • 113
  • 6