iamckn / wireguard_ansible

Ansible scripts for the set up a typical wireguard VPN connection
https://www.ckn.io/blog/2017/11/14/wireguard-vpn-typical-setup/
322 stars 69 forks source link

DNS and ICMP works, but that's it #16

Closed mabushey closed 5 years ago

mabushey commented 5 years ago
$ sudo wg-quick up wg0-client                                                                                                                                                                                                                                             
[#] ip link add wg0-client type wireguard
[#] wg setconf wg0-client /dev/fd/63
[#] ip -4 address add 10.200.200.2/32 dev wg0-client
[#] ip link set mtu 1420 up dev wg0-client
[#] resolvconf -a wg0-client -m 0 -x
Too few arguments.
Too few arguments.
[#] wg set wg0-client fwmark 51820
[#] ip -4 route add 0.0.0.0/0 dev wg0-client table 51820
[#] ip -4 rule add not fwmark 51820 table 51820
[#] ip -4 rule add table main suppress_prefixlength 0
michael@corwin ~/source/wireguard_ansible$ ping -c1 google.com                                                                                                                                                                                                                                                     
PING google.com (216.58.194.206) 56(84) bytes of data.
64 bytes from sfo03s01-in-f14.1e100.net (216.58.194.206): icmp_seq=1 ttl=57 time=33.2 ms

--- google.com ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 33.165/33.165/33.165/0.000 ms

Awesome, DNS and ICMP are working

`curl www.google.com` just hangs.

$ sudo wg show interface: wg0-client public key: {redacted} private key: (hidden) listening port: 57514 fwmark: 0xca6c

peer: {redacted} endpoint: {redacted}:51820 allowed ips: 0.0.0.0/0 latest handshake: 30 seconds ago transfer: 13.77 KiB received, 41.77 KiB sent persistent keepalive: every 21 seconds

mabushey commented 5 years ago

All it took was a dpkg --purge ufw on the server to get things working.