search

ericpaulbishop / gargoyle

Gargoyle Router Management Utility
http://www.gargoyle-router.com
465 stars 222 forks source link

Can't Access USB FTP Storage via Wireguard #999

Open n4b7l opened 4 months ago

n4b7l commented 4 months ago

USB FTP storage (Plugin) working fine while connected to local network. Recently I have installed Wireguard (Plugin) and I can't access USB FTP storage while connected to Wireguard VPN. However, when I disconnect from VPN it's working again

I am using Linksys 1900ACS router running version 1.13.0

lantis1008 commented 4 months ago

Is Gargoyle configured as a WireGuard server or client? What device are you trying to access the FTP share from? How is that device connected to Gargoyle? Assuming Gargoyle is a WG Server, are you connecting from externally (i.e. WAN)?

n4b7l commented 4 months ago

WireGuard running as server. Normally when I connect to FTP via WIFI it works perfectly fine. I am able to connect to WireGuard from WAN (mobile data), However, can't access FTP via WireGuard while connected using mobile data

I am using FTP client from F-droid https://f-droid.org/en/packages/de.qwerty287.ftpclient/

lantis1008 commented 4 months ago

I wasn't fully able to work this out, but I did discover some things. FTP works if you set your Wireguard client to AllowedIPs 0.0.0.0/0 In Gargoyle this is achieved by setting Clients Use Wireguard For: All client traffic. You can also just manually adjust your client config on your device.

If you don't do this and only have the router subnets specified, I think the packets are getting misrouted at one end or rejected by the Wireguard client. If this config is suitable for you, that works.

Another option is Samba (SMB). To make this work you need to modify /etc/config/ksmbd and under the 'globals' section add option interface 'br-lan wg0' This will make ksmbd listen on the Wireguard interface as well and SMB will work fine.

I'm going to leave this issue open in case someone has some better ideas, but for the moment I can't figure out anything better.

n4b7l commented 4 months ago

I tried with AllowedIP 0.0.0.0/0 and it didn't work!

lantis1008 commented 4 months ago

Maybe you need to check your configuration, or provide additional details of your WireGuard configuration and vsftpd