TunnlTo / desktop-app

TunnlTo is a Windows WireGuard VPN client built for split tunnelling.
https://tunnl.to
1.51k stars 61 forks source link

Can't access webservers or other devices hosted on wireguard destination network, but whatismyip shows correct remote ip #81

Closed ihaddy closed 1 year ago

ihaddy commented 1 year ago

Apologies for the confusing title, unsure how to phrase it. Basically, i copied a config file directly from wireguard that works and allows me to tunnel into my home network, access all web servers hosted on my home network (and that are normally blocked from remote access) in the 192.168.1.X/24 range, when i use curl ifconfig.me or google my IP it correctly shows my home IP address when i tunnel into the my home network using wireguard.

Using that config file into tunnlTo, i can use chrome and google whatismyip to see i have correctly assumed my home network's IP however i can NOT access anything on my home network, with the error "connection time out". Is this an issue with TunnlTo under the hood and if so how can i help troubleshoot this?

troubleshoot tunnel
brendanosborne commented 1 year ago

TunnlTo wraps WireSock so you can start troubleshooting by launching WireSock from the command line:

  1. Open TunnlTo and Enable the tunnel (this will save the config file to disk)
  2. Disable the tunnel and close TunnlTo
  3. Open a command prompt and issue the following commands (make sure you alter the username in the second command):
    cd C:\Program Files\WireSock VPN Client\bin
    wiresock-client.exe run -config C:\Users\<YOUR USERNAME>\AppData\Local\TunnlTo\tunnel.conf -log-level all

When you are trying to access the web servers on your home network from Chrome, are you using the IP address of the endpoint or a DNS name? What happens if you curl to the web server IP address?

Did you mean to have '0.0.0.0/0, ::/0' in the 'Allowed IP's' field as this will send all traffic through the tunnel. I assume you're only trying to send traffic to the web servers?

As an alternative, have you considered running TailScale on your client machine and the web servers?