New comments from May 18, 2024

aqui

Wireguard with systemd and nftables

Definitely! As you can see in the above routing table: 192.168.11.1 is the default gateway in case the client is active, cause it has the ...

Gelöst

21

Comments

May 14, 2024

Linuxero

Wireguard with systemd and nftables

Well, when I configure it to use the peer as a gateway, this is how my routing table looks like. default via 192.168.11.1 dev Tawa ...

Gelöst

21

Comments

ghost-in-the-shell

EdgeRouter Lite 3 IPv6 configuration

Fritzbox is OK now but EdgeRouter not see ...

17

Comments

Linuxero

EdgeRouter Lite 3 IPv6 configuration

The last group of screenshots - interfaces on edgerouter ...

17

Comments

LinuxeroEdgeRouter Lite 3 IPv6 configurationI guess I'll send all the screen shots unordered, otherwise it's going to take a lot of time ...

17

Comments

LinuxeroEdgeRouter Lite 3 IPv6 configurationEdgerouter ipv6-name ...

17

Comments

LinuxeroEdgeRouter Lite 3 IPv6 configurationEdgerouter groups ...

17

Comments

LinuxeroEdgeRouter Lite 3 IPv6 configurationEdgerouter - firewall screenshots group 1 ...

17

Comments

LinuxeroEdgeRouter Lite 3 IPv6 configurationEdgerouter screenshots ...

17

Comments

LinuxeroEdgeRouter Lite 3 IPv6 configurationThe last two screenshots of fritzbox ...

17

Comments

LinuxeroEdgeRouter Lite 3 IPv6 configurationI cannot arrange the screenshots otherwise ...

17

Comments

LinuxeroEdgeRouter Lite 3 IPv6 configurationThank you for all your insights. I am attaching screenshots of my configuration. Maybe this could help show out my problem better. ...

17

Comments

May 12, 2024

aquiWireguard with systemd and nftablesIf the peer is active what does the route table say on clientsite? ip r ...

Gelöst

21

Comments

ghost-in-the-shellEdgeRouter Lite 3 IPv6 configurationNo that's wrong thinking! The Fritzbox itself normally gets a dynamic global prefix from your provider e.g. a 56er prefix. To use a subnet of ...

17

Comments

LinuxeroEdgeRouter Lite 3 IPv6 configuration@Pjordorf; The firmware is v2.0.9-hotfix.7. I need to get IPv6 on all my clients behing the Edgerouter DHCP on Fritzbox should only announce the Fritzbox ...

17

Comments

LinuxeroWireguard with systemd and nftablesThank you @aqui; I am aware of that. I'll try to depict my problem in details. I can connect to the wireguard peer/server. I can ...

Gelöst

21

Comments

aquiEdgeRouter Lite 3 IPv6 configurationCan also be seen with a Fritzbox serving Dual Stack connections with prefix delegation and firewalls in a cascade setup like above: etc. Here is ...

17

Comments

aquiWireguard with systemd and nftablesDue to good reasons this can ONLY be done by YOU as the threadowner! If you do not want it to be marked as "solved" ...

Gelöst

21

Comments

ghost-in-the-shellEdgeRouter Lite 3 IPv6 configurationHowdy. This setting is wrong, you must provide prefix Information (IA_PD) via DHCPv6 to sub routers!! So if you want to provide prefixes for sub ...

17

Comments

May 11, 2024

PjordorfEdgeRouter Lite 3 IPv6 configurationHallo, Read Firmware? Config is actually what exeactly? And DHCP on in the FritzBox dows what, especiaaly since the ERL3 handels all the clients? Gruss, ...

17

Comments

LinuxeroWireguard with systemd and nftablesHi; I took sometime to test everything and I started a fresh clean setup of everything. I can reach the peer on ipv4 and ipv6, ...

Gelöst

21

Comments

May 05, 2024

ghost-in-the-shellWireguard with systemd and nftablesNormal, you forgott to add established related traffic to the forward chain as well as you block local forward traffic, so you only have a ...

Gelöst

21

Comments

May 04, 2024

LinuxeroWireguard with systemd and nftables@12764050420 Thank you. You're right, how did I miss that. :) On the server I can see this in dmesg output: ...

Gelöst

21

Comments

ghost-in-the-shellWireguard with systemd and nftablesThere is another catastrophic failure here, private IPs as Endpoint addresses does not make any sense when connecting from the outside world also a missing ...

Gelöst

21

Comments

LinuxeroWireguard with systemd and nftables@schrick Sorry I have missed to add that in my post, I actually already have it :) Thank you for the reminder :) ...

Gelöst

21

Comments

LinuxeroWireguard with systemd and nftables@aqui Thank you for your reply. However, the configuration that you mention is using systemd service files to start wireguard, which I do not wish ...

Gelöst

21

Comments

ghost-in-the-shellWireguard with systemd and nftablesYou have forgotten to add a real network adapter to the bridge! A bridge alone without hardware has no contact to the outside world . ...

Gelöst

21

Comments

aquiWireguard with systemd and nftablesThe above configuration is very weired and totally different from a standard Wireguard configuration. Why didnt you use the classical approach with a text config ...

Gelöst

21

Comments

LinuxeroWireguard with systemd and nftablesThank you for the hint. As a matter of fact none of the information in the post correspond to my real configuration. I have just ...

Gelöst

21

Comments

BoomercringeWireguard with systemd and nftablesHello, sorry for not being helpful, but you shouldn't post your wireguard keys on the internet ...

Gelöst

21

Comments

May 02, 2024

aquiCheck of ZFW FirewallIf that was all please do not forget to close your thread or mark it as solved!! ...

6

Comments

Apr 29, 2024

ThePinky777End of availability for classic Teams clientbut also it makes "so oder so komische sachen in Teams", I don't care what you do nice effects: outlook teams plugin installs itself automatically ...

2

Comments

Apr 28, 2024

GlobetrotterEnd of availability for classic Teams clientHi Don't forget to deinstall the old Client ;) Windows makes "ansonsten komische Sachen" Greets Globe! ...

2

Comments

Apr 22, 2024

aquiCheck of ZFW Firewall1.) OK, in this case you can of course just ignore the overload command! Yes, that is expectable cause, you did not define a source ...

6

Comments

gleixnerdCheck of ZFW Firewall1. Yes but I dont use the overload command, I use static NAT that translates one internal IP to the public WAN IP. ip nat ...

6

Comments

Apr 19, 2024

aquiCheck of ZFW Firewall1.) No, of course not. Everything which is translated by NAT is explicitly defined in the ACL which is mapped to the overload command. I ...

6

Comments

gleixnerdCheck of ZFW Firewall1. I have tried that a few day ago, thats why you dont see icmp allowed in the lists. But with one difference, I entered ...

6

Comments

aquiWireguard VPN on UDM Pro behind Fritzbox - Handshake did not completeThis statement is totally confusing. :-( The Fritzbox-firewall coupling port is the UDM WAN interface which is, regarding to your description, 192.168.2.10. So does this ...

3

Comments

aquiCheck of ZFW Firewall1.) That is normal behaviour. You have mapped the ACL "ALLOWv4" to the policy-map "INTERNET_ROUTER_POLICY" which is responsable for the protocols which are allowed to ...

6

Comments

jstrickerWireguard VPN on UDM Pro behind Fritzbox - Handshake did not completeThats my configs: ...

3

Comments