Re: native wireguard + nat

2021-03-04 Thread Andrew Klaus
Please provide your whole pf.conf file and ifconfig output. It's difficult to help with only a small subset of the configuration. There are PF macros referenced, but they weren't included either. On Thu, Mar 4, 2021 at 10:53 AM Riccardo Giuntoli wrote: > root@ganesha:/etc# cat pf.conf | grep w

Re: native wireguard + nat

2021-03-04 Thread Riccardo Giuntoli
root@ganesha:/etc# cat pf.conf | grep wg block in on wg match out on $ext_if from wg0:network to any nat-to $ext_if:0 pass in on wg from wg:network to ! modulate state root@ganesha:/etc# root@ganesha:/etc# ping -c 1 10.10.10.2 PING 10.10.10.2 (10.10.10.2): 56 data bytes 64 bytes from 10.10.10.2

Re: native wireguard + nat

2021-03-04 Thread Ashton Fagg
Riccardo Giuntoli writes: > Hi list. A pleasure to. > > Got a strange error with native wireguard for roadwarrior config. Pasting the full error makes people more likely to help you. > PF NAT doesn't work. Ok, but what's the error? "doesn't work" isn't very descriptive. > Someone with the sam