Damus

Recent Notes

GHOST profile picture
lol ok then troubleshooting

Make sure we are looking at the right interface. Run ip route and see if it’s eth or usb instead.

Check the client config allowed IPs AllowedIPs = 0.0.0.0/0

Silly but make sure the client has internet access in the first place

curl https://1.1.1.1

iptables are easy to make a mess with. Run and see if there is a rule conflict

sudo iptables -P FORWARD ACCEPT
GHOST profile picture
Add the subnet and forwarding rules

sudo iptables -t nat -A POSTROUTING -s 10.6.0.0/24 -o enp0s10 -j MASQUERADE

sudo iptables -A FORWARD -i wg0 -o enp0s10 -j ACCEPT

sudo iptables -A FORWARD -i enp0s10 -o wg0 -m state --state RELATED,ESTABLISHED -j ACCEPT

If it works add it to your WireGuard rules so it stays persistent
GHOST profile picture
Sounds like traffic is not being NATed or routed out of the Pi, so clients can talk to the LAN but not the internet.

Check by running in terminal:
sudo sysctl net.ipv4.ip_forward

If it returns 0 then thats your problem.

If so edit sysctl.conf and add:
net.ipv4.ip_forward=1

Then enable:
sudo sysctl -p

If that's not it then it is something in your iptables or allowed IPs on your client.
GHOST profile picture
I mean, my mestastic device is cool and all but what if I flash it with a script that scans and logs all the lora, bluetooth, and wifi networks around me?