Can a VPN block WireGuard and UFW?
I have set up wireguard and ufw using this guide. If ufw on the vpn server is enabled, it blocks some packets below (internet through the vpn on the client doesn’t work). If ufw is disabled, the packets flow as expected.
Do you need a firewall to use WireGuard?
In conclusion, you can just drop the firewall at all because your traffic is behind the VPN network already and most of the popular VPN services have Cyber Security built-in alike NordVPN there’s no need in firewall, I’m not aware of all the features of Wireguard though, you can check this on their website.
How to automate iptables on a WireGuard device?
Here’s the appropriate command (substitude wg0 for your wireguard device, and ens3 for your lan device): After that I was able to ssh properly again! You can add these to your wireguard config files to automate iptables by adding these lines to your wireguard config on the server host under [Interface]:
What are the rules for UFW on eth0?
By default, ufw will apply rules to all available interfaces. To limit this, specify DIRECTION on INTERFACE, where DIRECTION is one of in or out (interface aliases are not supported). For example, to allow all new incoming http connections on eth0, use:
What should I add to UFW to unblock those [ you Fw block ]?
Apr 29 12:20:07 VMLinux01 kernel: [ 35.745575] [UFW BLOCK] IN=wg0 OUT=eth0 MAC = SRC=10.6.0.175 DST=1.0.0.1 LEN=62 TOS=0x00 PREC=0x00 TTL=127 ID=23594 PROTO=UD P SPT=55948 DPT=53 LEN=42 What rule should I add to UFW to unblock those [UFW BLOCK] ?
Do you need WireGuard to connect to both LANs?
We also need the mobile clients, when connected to one of the LANs though wireguard, to have access to both LANs through the site-to-site tunnel created above. In other words, if mobile client connects to 192.168.1.15 (wireguard client1), he should be able to access 192.168.1.1/24 AND 192.168.2.1/24.