<div dir="auto">Do what it says; pass the -w option to iptables.</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sun, Feb 23, 2020, 11:36 Dimitri J. Panagiotou <<a href="mailto:dimitri@panagiotou.net">dimitri@panagiotou.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#330033">Hi,</div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#330033"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#330033">Since upgrading to Fedora 31 (5.5), wireguard (latest) does not start after rebooting.</div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#330033">It does start with no problem at all after rebooting, by manually running wg-quick.</div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#330033"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#330033">This is what I get:</div><div class="gmail_default" style="font-family:tahoma,sans-serif"><font color="#330033">-- Reboot --</font><br><font color="#330033">Feb 22 01:19:48 myservername systemd[1]: Starting WireGuard via wg-quick(8) for wg0...</font><br><font color="#330033">Feb 22 01:19:49 myservername wg-quick[1173]: [#] ip link add wg0 type wireguard</font><br><font color="#330033">Feb 22 01:19:49 myservername wg-quick[1173]: [#] wg setconf wg0 /dev/fd/63</font><br><font color="#330033">Feb 22 01:19:50 myservername wg-quick[1173]: [#] ip -4 address add <a href="http://10.12.182.1/24" target="_blank" rel="noreferrer">10.12.182.1/24</a> dev wg0</font><br><font color="#330033">Feb 22 01:19:50 myservername wg-quick[1173]: [#] ip link set mtu 1420 up dev wg0</font><br><font color="#330033">Feb 22 01:19:50 myservername wg-quick[1173]: [#] mount `10.12.197.1' /etc/resolv.conf</font><br><font color="#330033">Feb 22 01:19:51 myservername wg-quick[1173]: [#] iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o enp2s0 -j MASQUERADE</font><br><font color="#ff0000">Feb 22 01:19:51 myservername wg-quick[1173]: Another app is currently holding the xtables lock. Perhaps you want to use the -w option?</font><br><font color="#330033">Feb 22 01:19:51 myservername wg-quick[1173]: [#] umount /etc/resolv.conf</font><br><font color="#330033">Feb 22 01:19:51 myservername wg-quick[1173]: [#] ip link delete dev wg0</font><br><font color="#330033">Feb 22 01:19:51 myservername systemd[1]: wg-quick@wg0.service: Main process exited, code=exited, status=4/NOPERMISSION</font><br><font color="#330033">Feb 22 01:19:51 myservername systemd[1]: wg-quick@wg0.service: Failed with result 'exit-code'.</font><br><font color="#330033">Feb 22 01:19:51 myservername systemd[1]: Failed to start WireGuard via wg-quick(8) for wg0.</font><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#330033"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#330033">Running </div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#330033">wireguard-dkms.noarch 1:0.0.20200215-2.fc31 @jdoss-wireguard<br>wireguard-tools.x86_64 1:1.0.20200102-1.fc31 @jdoss-wireguard<br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#330033"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#330033">Any idea what's causing this? </div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#330033"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#330033">Thanks,</div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#330033">-dimitri</div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#330033"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#330033"><br></div></div>
_______________________________________________<br>
WireGuard mailing list<br>
<a href="mailto:WireGuard@lists.zx2c4.com" target="_blank" rel="noreferrer">WireGuard@lists.zx2c4.com</a><br>
<a href="https://lists.zx2c4.com/mailman/listinfo/wireguard" rel="noreferrer noreferrer" target="_blank">https://lists.zx2c4.com/mailman/listinfo/wireguard</a><br>
</blockquote></div>