wg0 packets not being routed?

Jason A. Donenfeld Jason at zx2c4.com
Fri May 4 02:15:32 CEST 2018

Hello Andy,

The mistake you've made is that your NOC servers don't have a route
indicating that should go to wg0, and likely your
Linode server doesn't have a route indicating that
should go to wg0. Instead, packets to these addresses are going out of
your default route, which is to the Internet, which rightfully rejects
RFC1918 addresses.

You can fix this in two ways:

1) Just use addresses on both sides, so the route can
be inferred from the IP you're using. Or,

2) If you want to keep your existing structures of subnets, then just
add those routes:

nocbox $ ip route add dev wg0
linode $ ip route add dev wg0

If you're using wg-quick(8) to configure things, this will be taken
care of automatically, by the way.


More information about the WireGuard mailing list