Thanks. Fixed this way: https://git.zx2c4.com/WireGuard/commit/?id=57854fb710160f567cf776b65080a9ce5afdf02c But: why is your remove_iptables failing in the first place?