Pierre Emeriaud <petrus.lt+open...@gmail.com> wrote: > Le jeu. 29 oct. 2020 à 01:20, Theo de Raadt <dera...@openbsd.org> a écrit : > > > > I believe you are running into the restriction that we don't allow an > > INADDR_ANY:port binding to be done after a ipaddr:port binding has been > > done. It must be done beforehands. > > Sorry Theo, maybe things got lost in translation, but if my > understanding is correct this is not exactly the case here. wg is > trying to bind to INADDR_ANY, which fails because a dns daemon (in my > case) is already bound to 127.0.0.1:53 (in wg_socket_open() -L700 of > if_wg.c-, sin->sin_addr.s_addr = INADDR_ANY?). > > Is there a reason why wg needs such a large bind?
I don't know why wg does that, because I haven't looked at the code. Your configuration is definately pushing the limits.