Messages

I'm trying to connect a VPS to a mail sever on my private network. The VPS is Rocky9 using nftables for a firewall. I set up a wireguard tunnel between the VPS and OPNsense 26.7 and the tunnel works. On the VPS email ports are DNATed to the local address of the mail server. I set up an interface to use as a gateway for wg0 and use policy routing to capture traffic from the mail server and send it to the wireguard tunnel. the mss is clamped to 1380. I can surf the internet from the mail server and send mail through the tunnel. I can connect to the mail server from the VPS using telnet. When I try to connect to the server using the VPS wan address from a computer outside of the OPNsesne network, the first syn packet is routed to the mail server but outgoing traffic dies before it gets to the wireguard tunnel. Also any retries from the originating computer die when they exit the tunnel. There is no SNAT on the mail traffic to retain the sender's ip. Without it DMARK would fail. I use the same routing minus the wireguard tunnel to connect the mail server to OPNsense's wan.

Any help would be appreciated.

Thanks