WireGuard: Difference between revisions
imported>Milachew m Some correction in "Setting up WireGuard with NetworkManager" : "loose" option only worked for me. |
imported>Milachew m Some correction in "Setting up WireGuard with NetworkManager" : "loose" option only worked for me. |
||
| Line 298: | Line 298: | ||
<syntaxHighlight lang="nix"> | <syntaxHighlight lang="nix"> | ||
{ config, pkgs, lib, ... }:{ | { config, pkgs, lib, ... }:{ | ||
networking.firewall.checkReversePath = false; | networking.firewall.checkReversePath = false; | ||
} | } | ||
</syntaxHighlight> | </syntaxHighlight> | ||
In some cases not '''false''' but '''"loose"''' (with quotes) can work: | |||
<syntaxHighlight lang="nix"> | |||
{ config, pkgs, lib, ... }:{ | |||
networking.firewall.checkReversePath = "loose"; | |||
} | |||
</syntaxHighlight> | |||
Or you can adapt the rpfilter to ignore wireguard related traffic (replace 51820 by the port of your wireguard endpoint): | |||
<syntaxHighlight lang="nix"> | <syntaxHighlight lang="nix"> | ||
{ config, pkgs, lib, ... }:{ | { config, pkgs, lib, ... }:{ | ||