Bug#946282: wireguard broken by iptables 1.8.4

2019-12-06 Thread Jeff King
On Fri, Dec 06, 2019 at 05:48:40PM -0500, Daniel Kahn Gillmor wrote: > Upstream commit 884b6e36e6af0c6fa5b9467ccc8c2e2e4477bc95 should fix this > empty line problem, if i'm understanding it correctly. That commit is > part of 0.0.20191206, which i've just uploaded to unstable. Could you > try th

Bug#946282: wireguard broken by iptables 1.8.4

2019-12-06 Thread Daniel Kahn Gillmor
Control: tags 946282 + moreinfo Hi Jeff-- On Fri 2019-12-06 11:16:02 -0500, Jeff King wrote: > Stracing wg-quick shows that it's trying to pass this to > iptables-restore: > > *raw > -I PREROUTING ! -i wg -d 10.0.1.1 -m addrtype ! --src-type LOCAL -j DROP -m > comment --comment "wg-quick(8)

Bug#946282: wireguard broken by iptables 1.8.4

2019-12-06 Thread Jeff King
Package: wireguard Version: 0.0.20191127-2 Severity: normal Since upgrading to iptables 1.8.4, I can't bring use wg-quick to bring up an interface anymore. Here's a simple config that reproduces the problem: [Interface] Address = 10.0.1.1 PrivateKey = 000