Cannot push all traffic through Wireguard tunnel on Ubuntu

Holmes.Sherlock

2/18/23, 3:38 AM

On server,

[Interface]
Address = 10.13.13.1
ListenPort = 51820
PrivateKey = <...>
PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE

[Peer]
# peer1
PublicKey = <...>
AllowedIPs = 10.13.13.2/32
# AllowedIPs = 0.0.0.0/0

On client,

[Interface]
Address = 10.13.13.2
PrivateKey = <...>
ListenPort = 51820
DNS = 8.8.8.8

[Peer]
PublicKey = <...>
Endpoint = <...>:51820
AllowedIPs = 0.0.0.0/0

The server is running inside a docker, the client is running on Ubuntu 18.04. I'm not being able to send all the traffic through the tunnel. If I bring up the wg0 interface on the client and try to connect to a website, it doesn't work. However, ping 8.8.8.8 works. Any idea what is going on?

When brought up, `wg-quick` executes the following command on the client:

# wg-quick up wg1
[#] ip link add wg1 type wireguard
[#] wg setconf wg1 /dev/fd/63
[#] ip -4 address add 10.13.13.2 dev wg1
[#] ip link set mtu 1420 up dev wg1
[#] resolvconf -a tun.wg1 -m 0 -x
[#] wg set wg1 fwmark 51820
[#] ip -4 route add 0.0.0.0/0 dev wg1 table 51820
[#] ip -4 rule add not fwmark 51820 table 51820
[#] ip -4 rule add table main suppress_prefixlength 0
[#] sysctl -q net.ipv4.conf.all.src_valid_mark=1
[#] iptables-restore -n

252

0 + 0

vpn

wireguard

djdomi

2/18/23, 4:06 AM

because 0.0.0.0/0 does not work in case of windows there is a small checkbox in the editor about this to route or not route all traffic and afaik it starts with a bit higher number

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Cannot push all traffic through Wireguard tunnel on Ubuntu

TH: ไม่สามารถส่งทราฟฟิกทั้งหมดผ่านอุโมงค์ Wireguard บน Ubuntu

RO: Nu se poate împinge tot traficul prin tunelul Wireguard pe Ubuntu

RU: Не удается передать весь трафик через туннель Wireguard в Ubuntu

VI: Không thể đẩy tất cả lưu lượng qua đường hầm Wireguard trên Ubuntu

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.