This will block traffic between clients: ip6tables -I FORWARD -i wg0 -o wg0 -j REJECT –reject-with icmp6-adm-prohibited iptables -I FORWARD -i wg0 -o wg0 -j REJECT –reject-with icmp-admin-prohibited To disable isolation for single client: iptables -I FORWARD -i wg0 -s 10.0.0.3/32 -d 10.0.0.0/24 -j ACCEPT 10.0.0.3/32 – Single client IP 10.0.0.0/24 – Subnet allow to…
Tag: wireguard
WireGuard in Proxmox LXC
in Proxmox Host: apt update apt install pve-headers nano /etc/apt/sources.list deb http://deb.debian.org/debian buster-backports main Save. apt update apt install -t buster-backports wireguard-dkms modprobe wireguard echo “wireguard” >> /etc/modules-load.d/modules.conf In LXC Container: apt install wireguard or use piVPN curl -L https://install.pivpn.io | bash
Wireguard Client Connect to Server
apt install wireguard Since we’re only connecting back to our VPN Server, we need to create a file where we will store our VPN profile information. To be clear, this is generated on the VPN server side. We are only copying the contents of the file so that we can authenticate with our VPN server….