Arch Linux

danSman

Member

Registered: 2017-12-21

Posts: 57

Wireguard & firewalld no internet for peer

Hey

I recently switched from ufw to firewalld.

Most of it works so far. I have only trouble to get an internet connection for the peers. The connection to the server works.

I have firewalld configured like this:

firewall-cmd --list-all --zone=public

public (active)
  target: default
  icmp-block-inversion: no
  interfaces: ens3
  sources: 
  services:
  ports: 51820/udp
  protocols: 
  forward: yes
  masquerade: no
  forward-ports: 
  source-ports: 
  icmp-blocks: 
  rich rules:

and created a wireguard zone:

wireguard (active)
  target: default
  icmp-block-inversion: no
  interfaces: wg0
  sources: 
  services: 
  ports: 
  protocols: 
  forward: no
  masquerade: no
  forward-ports: 
  source-ports: 
  icmp-blocks: 
  rich rules:

I forwarded ip4

sysctl -w net.ipv4.ip_forward=1

and had masquerade on on both zones

firewall-cmd --zone=wireguard/public --add-masquerade --permanent

I can't figure out what else is missing ...

danSman

Member

Registered: 2017-12-21

Posts: 57

Re: Wireguard & firewalld no internet for peer

No one?