WireGuard & Port Forwarding

[mimugmail]

Today I fixed an issue where reply packet was sent via OpenVPN ofvsome other vpn Provider. Best would be to stop or disable all other vpn stuff to find the issue

[Voodoo]

in my case i did not have openvpn or ipsec enabled during my wireguard tests.

Only a wireguard interface and some vlans.

[Scanline]

FYI, I ran into the same issue and opened a bug report on github, if anyone wants to chime in

https://github.com/opnsense/core/issues/4389

[AndreK]

I have similar Problems.
I have 2 PPPoe Wan Adapter (1 for Voice and 1 for Filehosting) an 1 Default Gateway for nomal Internet surfing.

When i only open the Port to WG on the PPPoe for Fileosting i see the Traffic came in an that WG send some traffic out. But he didnt sent it back over the interfaces there it came from. He sends it over the Default GW (see it in tcpdump).

So the Handschake dont work.

[mimugmail]

Can you try if this also happens with -kmod?

[AndreK]

Hi,

what does -kmod do?

[mimugmail]

It uses ifconfig to create interfaces and the -go variant uses its own one. With -kmod e.g. also CARP works compared to -go

[AndreK]

Sorry for my question.

Does kmod mean to install it by hand and not through the sense GUI?

[mimugmail]

Yes, pkg install wireguard-kmod

[AndreK]

Ok. But i think if i install this, i cant use the gui anymore. Is that right?

[mimugmail]

Just Install an reboot, you still use the old Plugin and as backend the kmod