<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.E-MailFormatvorlage20
{mso-style-type:personal-reply;
font-family:"Arial",sans-serif;
color:windowtext;
font-weight:normal;
font-style:normal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=DE link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US'>Hi,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US'>your solution solved my problem: Chaning subnet to 32 instead of 24.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US'>Thank you and kind regards,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US'>Danny<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-language:EN-US'><o:p> </o:p></span></p><div style='border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt'><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b>Von:</b> Steven Honson <steven@honson.id.au> <br><b>Gesendet:</b> Samstag, 8. September 2018 12:22<br><b>An:</b> danny.korpan@mailbox.org<br><b>Cc:</b> wireguard@lists.zx2c4.com<br><b>Betreff:</b> Re: Routing only to latest peer in the config list seems to work<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Hi Danny,<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Have you also changed the mask for each of the peers on your central node to /32? If not you’ll need to do this, as leaving them as /24 still effectively makes them all the same route. Ie 192.168.50.1/24 and 192.168.50.2/24 are both the same still. The “AllowedIPs" on the central node to be 192.168.50.1/32, 192.168.50.2/32 etc in your example.<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>You can leave the “Address” IPs with a /24 mask.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Are you able to share an updated copy of your configs?<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Cheers,<o:p></o:p></p></div><div><p class=MsoNormal>Steven<o:p></o:p></p></div><div><p class=MsoNormal><br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal>On 8 Sep 2018, at 6:36 pm, <a href="mailto:danny.korpan@mailbox.org">danny.korpan@mailbox.org</a> wrote:<o:p></o:p></p></div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial",sans-serif'>Hi,</span><o:p></o:p></p></div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial",sans-serif'> </span><o:p></o:p></p></div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial",sans-serif'>I’ve changed the AllowedIPs so that everyone has it’s own dedicated IP. Still the same problem. No routing.</span><o:p></o:p></p></div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial",sans-serif'> </span><o:p></o:p></p></div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial",sans-serif'>Kind Regards,</span><o:p></o:p></p></div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial",sans-serif'>Danny</span><o:p></o:p></p></div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial",sans-serif'> </span><o:p></o:p></p></div><div style='border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt'><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><div><p class=MsoNormal><b>Von:</b><span class=apple-converted-space> </span>Ryan Whelan <<a href="mailto:rcwhelan@gmail.com">rcwhelan@gmail.com</a>><span class=apple-converted-space> </span><br><b>Gesendet:</b><span class=apple-converted-space> </span>Donnerstag, 6. September 2018 19:14<br><b>An:</b><span class=apple-converted-space> </span><a href="mailto:danny.korpan@mailbox.org">danny.korpan@mailbox.org</a><br><b>Cc:</b><span class=apple-converted-space> </span>WireGuard mailing list <<a href="mailto:wireguard@lists.zx2c4.com">wireguard@lists.zx2c4.com</a>><br><b>Betreff:</b><span class=apple-converted-space> </span>Re: Routing only to latest peer in the config list seems to work<o:p></o:p></p></div></div></div><div><p class=MsoNormal> <o:p></o:p></p></div><div><div><p class=MsoNormal>You're using the same AllowedIPs for multiple peers.<o:p></o:p></p></div></div><div><p class=MsoNormal> <o:p></o:p></p></div><div><div><div><p class=MsoNormal>On Thu, Sep 6, 2018 at 12:15 PM <<a href="mailto:danny.korpan@mailbox.org"><span style='color:purple'>danny.korpan@mailbox.org</span></a>> wrote:<o:p></o:p></p></div></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt'><div><p class=MsoNormal>Hi,<br><br>I have the problem with my wireguard server, that only the latest user<br>"peer" from the server config can route/ping to the internal wireguard<br>server IP or the clients in the network behind the wireguard server upon<br>successful connection. All peers can connect to the server, but only the<br>latest in the list last can ping other servers.<br>I can't locate the error in the configs... does anybody have an idea?<br><br>My wireguard server and client version is using 0.0.20180809-wg1~xenial with<br>Ubuntu 18.04.1<br><br>wg0.conf<br>[Interface]<br>Address =<span class=apple-converted-space> </span><a href="http://192.168.50.1/24" target="_blank"><span style='color:purple'>192.168.50.1/24</span></a><br>PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A<br>POSTROUTING -o eth0 -j MASQUERADE<br>PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D<br>POSTROUTING -o eth0 -j MASQUERADE<br>ListenPort = 51820<br>PrivateKey = XXX<br><br>[Peer]<br>#User 1<br>PublicKey = XXX<br>PresharedKey = XXX<br>AllowedIPs =<span class=apple-converted-space> </span><a href="http://192.168.50.0/24" target="_blank"><span style='color:purple'>192.168.50.0/24</span></a><br><br>[Peer]<br>#User 2<br>PublicKey = XXX<br>PresharedKey = XXX<br>#AllowedIPs =<span class=apple-converted-space> </span><a href="http://192.168.50.0/24" target="_blank"><span style='color:purple'>192.168.50.0/24</span></a><br><br>[Peer]<br>#User 3<br>PublicKey = XXX<br>PresharedKey = XXX<br>AllowedIPs =<span class=apple-converted-space> </span><a href="http://192.168.50.0/24" target="_blank"><span style='color:purple'>192.168.50.0/24</span></a><br><br>[Peer]<br>#User 4<br>PublicKey = XXX<br>PresharedKey = XXX<br>AllowedIPs =<span class=apple-converted-space> </span><a href="http://192.168.50.0/24" target="_blank"><span style='color:purple'>192.168.50.0/24</span></a><br><br><br><br>client.config<br>[Interface]<br>PrivateKey = XXX<br>DNS = 192.168.178.1<br>Address =<span class=apple-converted-space> </span><a href="http://192.168.50.2/24" target="_blank"><span style='color:purple'>192.168.50.2/24</span></a><br><br>[Peer]<br>PublicKey = XXX<br>PresharedKey = XXX<br>AllowedIPs =<span class=apple-converted-space> </span><a href="http://192.168.50.0/24" target="_blank"><span style='color:purple'>192.168.50.0/24</span></a>,<span class=apple-converted-space> </span><a href="http://190.168.178.0/24" target="_blank"><span style='color:purple'>190.168.178.0/24</span></a><br>Endpoint = my.remote.server:51820<br>PersistentKeepalive = 25<br><br>My sysctl.conf includes<br>net.ipv4.conf.all.proxy_arp = 1<br>net.ipv4.ip_forward = 1<br><br>Does anybody have an idea?<br><br><br>Kind Regards,<br>Danny<br><br>_______________________________________________<br>WireGuard mailing list<br><a href="mailto:WireGuard@lists.zx2c4.com" target="_blank"><span style='color:purple'>WireGuard@lists.zx2c4.com</span></a><br><a href="https://lists.zx2c4.com/mailman/listinfo/wireguard" target="_blank"><span style='color:purple'>https://lists.zx2c4.com/mailman/listinfo/wireguard</span></a><o:p></o:p></p></div></blockquote></div></div><p class=MsoNormal><span style='font-size:9.0pt;font-family:"Helvetica",sans-serif'>_______________________________________________<br>WireGuard mailing list<br><a href="mailto:WireGuard@lists.zx2c4.com">WireGuard@lists.zx2c4.com</a><br><a href="https://lists.zx2c4.com/mailman/listinfo/wireguard">https://lists.zx2c4.com/mailman/listinfo/wireguard</a></span><o:p></o:p></p></div></blockquote></div><p class=MsoNormal><o:p> </o:p></p></div></div></div></body></html>