No internet access or browser functionality after connecting to AmneziaWG.

[alexanderzhirov]

Describe the bug
After installing the latest version of the client in Linux from the ZIP archive provided in the repository, I am observing the following issue: no internet access or browser functionality after connecting to AmneziaWG.

To Reproduce
Adding a config file and connecting to the AmneziaWG server.

Expected behavior
Network operations and web browsing

Log files

Started as system service
IpcProcessTun2Socks::IpcProcessTun2Socks()
Amnezia "Daemon" "Daemon created"
Amnezia "LinuxDaemon" "Daemon created"
Amnezia "WireguardUtilsLinux" "WireguardUtilsLinux created."
Amnezia "DnsUtilsLinux" "DnsUtilsLinux created."
Amnezia "IPUtilsLinux" "IPUtilsLinux created."
Amnezia "DaemonLocalServer" "Server path: /var/run/amneziavpn/daemon.socket"
LocalServer new connection
2025-03-29 01:46:11 debug LocalServer new connection
2025-03-29 01:46:11 debug Amnezia "DaemonLocalServer" "New connection received"
2025-03-29 01:46:11 debug Amnezia "DaemonLocalServerConnection" "Connection created"
2025-03-29 01:46:11 debug Amnezia "DaemonLocalServerConnection" "Read Data"
2025-03-29 01:46:11 debug Amnezia "DaemonLocalServerConnection" "Command received: status"
2025-03-29 01:46:11 debug Amnezia "Daemon" "Status request"
2025-03-29 01:46:11 debug Amnezia "DaemonLocalServerConnection" "Command received: activate"
2025-03-29 01:46:11 debug Amnezia "Daemon" "Activating interface"
2025-03-29 01:46:11 debug Amnezia "WireguardUtilsLinux" "Created wireguard interface amn0"
2025-03-29 01:46:11 debug Amnezia "LinuxRouteMonitor" "LinuxRouteMonitor created."
2025-03-29 01:46:11 debug Amnezia "LinuxFirewall" "( 2 ) $  iptables -C OUTPUT -j amnvpn.anchors 2> /dev/null"
2025-03-29 01:46:12 debug Amnezia "LinuxFirewall" "Tearing down cgroup and routing rules"
2025-03-29 01:46:12 debug Amnezia "LinuxFirewall" "( 255 ) $  ip route flush table amnvpnrt"
2025-03-29 01:46:12 debug Amnezia "LinuxFirewall" "Error: argument \"amnvpnrt\" is wrong: table id value is invalid"
2025-03-29 01:46:12 debug Amnezia "LinuxFirewall" "LinuxFirewall::uninstall() complete"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "( 123 ) $  if ! iptables -L OUTPUT -n --line-numbers -t filter 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then iptables -I OUTPUT -j amnvpn.anchors -t filter && iptables -L OUTPUT -n --line-numbers -t filter 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs iptables -t filter -D OUTPUT ; fi"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "iptables: Bad rule (does a matching rule exist in that chain?)."
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "( 123 ) $  if ! ip6tables -L OUTPUT -n --line-numbers -t filter 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then ip6tables -I OUTPUT -j amnvpn.anchors -t filter && ip6tables -L OUTPUT -n --line-numbers -t filter 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs ip6tables -t filter -D OUTPUT ; fi"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "ip6tables: Bad rule (does a matching rule exist in that chain?)."
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "( 123 ) $  if ! iptables -L POSTROUTING -n --line-numbers -t nat 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then iptables -I POSTROUTING -j amnvpn.anchors -t nat && iptables -L POSTROUTING -n --line-numbers -t nat 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs iptables -t nat -D POSTROUTING ; fi"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "iptables: Bad rule (does a matching rule exist in that chain?)."
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "( 123 ) $  if ! ip6tables -L POSTROUTING -n --line-numbers -t nat 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then ip6tables -I POSTROUTING -j amnvpn.anchors -t nat && ip6tables -L POSTROUTING -n --line-numbers -t nat 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs ip6tables -t nat -D POSTROUTING ; fi"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "ip6tables: Bad rule (does a matching rule exist in that chain?)."
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "( 123 ) $  if ! iptables -L OUTPUT -n --line-numbers -t mangle 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then iptables -I OUTPUT -j amnvpn.anchors -t mangle && iptables -L OUTPUT -n --line-numbers -t mangle 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs iptables -t mangle -D OUTPUT ; fi"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "iptables: Bad rule (does a matching rule exist in that chain?)."
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "( 123 ) $  if ! ip6tables -L OUTPUT -n --line-numbers -t mangle 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then ip6tables -I OUTPUT -j amnvpn.anchors -t mangle && ip6tables -L OUTPUT -n --line-numbers -t mangle 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs ip6tables -t mangle -D OUTPUT ; fi"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "ip6tables: Bad rule (does a matching rule exist in that chain?)."
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "( 123 ) $  if ! iptables -L PREROUTING -n --line-numbers -t raw 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then iptables -I PREROUTING -j amnvpn.anchors -t raw && iptables -L PREROUTING -n --line-numbers -t raw 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs iptables -t raw -D PREROUTING ; fi"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "iptables: Bad rule (does a matching rule exist in that chain?)."
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "( 123 ) $  if ! ip6tables -L PREROUTING -n --line-numbers -t raw 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then ip6tables -I PREROUTING -j amnvpn.anchors -t raw && ip6tables -L PREROUTING -n --line-numbers -t raw 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs ip6tables -t raw -D PREROUTING ; fi"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "ip6tables: Bad rule (does a matching rule exist in that chain?)."
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "Should be setting up cgroup in /sys/fs/cgroup/net_cls/amnvpnexclusions/ for traffic splitting"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "( 1 ) $  if [ ! -d /sys/fs/cgroup/net_cls/amnvpnexclusions/ ] ; then mkdir /sys/fs/cgroup/net_cls/amnvpnexclusions/ ; sleep 0.1 ; echo 0x567 > /sys/fs/cgroup/net_cls/amnvpnexclusions//net_cls.classid ; fi"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "mkdir: cannot create directory ‘/sys/fs/cgroup/net_cls/amnvpnexclusions/’: Нет такого файла или каталога\n/bin/bash: строка 1: /sys/fs/cgroup/net_cls/amnvpnexclusions//net_cls.classid: Нет такого файла или каталога"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "( 255 ) $  if ! ip rule list | grep -q 0x3211 ; then ip rule add from all fwmark 0x3211 lookup amnvpnrt pri 100 ; fi"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "Error: argument \"amnvpnrt\" is wrong: invalid table ID"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "000.allowLoopback(IPv4): OFF -> ON"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "000.allowLoopback(IPv6): OFF -> ON"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "100.blockAll(IPv4): OFF -> ON"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "100.blockAll(IPv6): OFF -> ON"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "110.allowNets(IPv4): OFF -> ON"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "120.blockNets(IPv4): OFF"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "200.allowVPN(IPv4): OFF -> ON"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "250.blockIPv6(IPv6): OFF -> ON"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "290.allowDHCP(IPv4): OFF -> ON"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "290.allowDHCP(IPv6): OFF -> ON"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "300.allowLAN(IPv4): OFF -> ON"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "300.allowLAN(IPv6): OFF -> ON"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "310.blockDNS(IPv4): OFF -> ON"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "320.allowDNS(IPv4): OFF -> ON"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "( 2 ) $  if iptables -C amnvpn.a.400.allowPIA -j amnvpn.400.allowPIA -t filter 2> /dev/null ; then echo '400.allowPIA(IPv4): ON' ; else echo '400.allowPIA(IPv4): OFF -> ON' ; iptables -A amnvpn.a.400.allowPIA -j amnvpn.400.allowPIA -t filter; fi"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "400.allowPIA(IPv4): OFF -> ON"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "iptables v1.8.11 (nf_tables): Chain 'amnvpn.400.allowPIA' does not exist\nTry `iptables -h' or 'iptables --help' for more information."
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "( 2 ) $  if ip6tables -C amnvpn.a.400.allowPIA -j amnvpn.400.allowPIA -t filter 2> /dev/null ; then echo '400.allowPIA(IPv6): ON' ; else echo '400.allowPIA(IPv6): OFF -> ON' ; ip6tables -A amnvpn.a.400.allowPIA -j amnvpn.400.allowPIA -t filter; fi"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "400.allowPIA(IPv6): OFF -> ON"
2025-03-29 01:46:13 debug Amnezia "LinuxFirewall" "ip6tables v1.8.11 (nf_tables): Chain 'amnvpn.400.allowPIA' does not exist\nTry `ip6tables -h' or 'ip6tables --help' for more information."
2025-03-29 01:46:13 debug Amnezia "LinuxRouteMonitor" "Adding exclusion route for *.*.*.*/32"
2025-03-29 01:46:13 debug Gateway  192.168.0.1  for interface  enp0s3
2025-03-29 01:46:13 debug Amnezia "WireguardUtilsLinux" "Configuring peer wabIWeCBQ/mhs5pKb3JZr/SsWZhlgf5ug95+gxRRKUU= via *.*.*.*"
2025-03-29 01:46:13 debug Amnezia "LinuxRouteMonitor" "Adding exclusion route for *.*.*.*/32"
2025-03-29 01:46:13 debug Gateway  192.168.0.1  for interface  enp0s3
2025-03-29 01:46:13 debug Amnezia "LinuxRouteMonitor" "Adding exclusion route for /999999"
2025-03-29 01:46:13 debug Amnezia "LinuxRouteMonitor" "Invalid destination prefix"
2025-03-29 01:46:13 debug Amnezia "DnsUtilsLinux" "Adding DNS resolver 1.1.1.1 via amn0"
2025-03-29 01:46:13 debug Amnezia "LinuxRouteMonitor" "Adding route to 0.0.0.0/1"
2025-03-29 01:46:13 debug Amnezia "LinuxRouteMonitor" "Adding route to 128.0.0.0/1"
2025-03-29 01:46:13 debug Amnezia "LinuxRouteMonitor" "Adding route to ::/1"
2025-03-29 01:46:13 debug Amnezia "LinuxRouteMonitor" "Adding route to 8000::/1"
2025-03-29 01:46:13 debug Amnezia "Daemon" "Connection status: 1"
2025-03-29 01:46:13 debug Amnezia "DnsUtilsLinux" "Setting DNS domain: XXXXXXXX via amn0 search"
2025-03-29 01:46:14 debug Amnezia "Daemon" "Checking for handshake..."
2025-03-29 01:46:14 debug Amnezia "Daemon" "awaiting wabIWeCBQ/mhs5pKb3JZr/SsWZhlgf5ug95+gxRRKUU="
2025-03-29 01:46:14 debug Amnezia "DnsUtilsLinux" "DnsUtilsLinux created."
2025-03-29 01:46:14 debug Restarting systemd-resolved.service
2025-03-29 01:46:14 debug Flush dns completed

*.*.*.* - hidden my server IP.

Desktop (please complete the following information):

• OS: Solus Linux
• Version 4.7

[alexanderzhirov]

I tried the Wireguard configuration - it connected and the network started working.
The AmneziaWG configuration also connected, but the network still didn’t work.

However, from a phone or a Mac/Windows device, the connection via AmneziaWG works without any issues.

[alexanderzhirov]

Managed to use the amneziawg configuration without any crutches or clients, just through the regular console:

alexander@solus ~ $ echo $(curl -s ifconfig.me)
62.33.*.*
alexander@solus ~ $ sudo awg-quick up wg0
[#] ip link add wg0 type amneziawg
RTNETLINK answers: Operation not supported
[!] Missing WireGuard (Amnezia VPN) kernel module. Falling back to slow userspace implementation.
[#] amneziawg-go wg0
┌──────────────────────────────────────────────────────────────┐
│                                                              │
│       Running amneziawg-go is not required because this      │
│       kernel has first class support for AmneziaWG. For      │
│       information on installing the kernel module,           │
│       please visit:                                          │
| https://github.com/amnezia-vpn/amneziawg-linux-kernel-module │
│                                                              │
└──────────────────────────────────────────────────────────────┘
[#] awg setconf wg0 /dev/fd/63
[#] ip -4 address add 10.8.0.4/24 dev wg0
[#] ip link set mtu 1420 up dev wg0
[#] resolvconf -a wg0 -m 0 -x
[#] awg set wg0 fwmark 51820
[#] ip -6 rule add not fwmark 51820 table 51820
[#] ip -6 rule add table main suppress_prefixlength 0
[#] ip -6 route add ::/0 dev wg0 table 51820
[#] nft -f /dev/fd/63
[#] ip -4 rule add not fwmark 51820 table 51820
[#] ip -4 rule add table main suppress_prefixlength 0
[#] ip -4 route add 0.0.0.0/0 dev wg0 table 51820
[#] sysctl -q net.ipv4.conf.all.src_valid_mark=1
[#] nft -f /dev/fd/63
alexander@solus ~ $ echo $(curl -s ifconfig.me)
91.243.*.*

In general, the client doesn’t work correctly with the AmneziaWG protocol on Solus Linux.

[outspace]

please add interface list and routing table from your Solus Linux after client connected.

I tried the Wireguard configuration - it connected and the network started working.

Looks like you have broken AWG config.

[alexanderzhirov]

@outspace The file is unchanged, and it is correctly used when I establish a connection via awg-quick.
Here is the result after connecting through the client.

root@solus-mate ~ # ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host noprefixroute 
       valid_lft forever preferred_lft forever
2: enp0s3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 08:00:27:76:a1:32 brd ff:ff:ff:ff:ff:ff
    inet 192.168.0.99/24 brd 192.168.0.255 scope global dynamic noprefixroute enp0s3
       valid_lft 73444sec preferred_lft 73444sec
    inet6 fd01::39e6:e49b:6954:2a65/64 scope global dynamic noprefixroute 
       valid_lft 220sec preferred_lft 220sec
    inet6 fe80::6b2d:533:222b:1102/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
12: amn0: <POINTOPOINT,PROMISC,NOTRAILERS,UP,LOWER_UP> mtu 1376 qdisc fq_codel state UNKNOWN group default qlen 500
    link/none 
    inet 10.8.0.0/32 scope global amn0
       valid_lft forever preferred_lft forever
    inet6 fd58:baa6:dead::1/64 scope global 
       valid_lft forever preferred_lft forever
    inet6 fe80::998e:e7e1:a69:4880/64 scope link stable-privacy proto kernel_ll 
       valid_lft forever preferred_lft forever

# ip route
0.0.0.0/1 dev amn0 metric 1 
default via 192.168.0.1 dev enp0s3 proto dhcp src 192.168.0.99 metric 100 
91.243.*.* via 192.168.0.1 dev enp0s3 
128.0.0.0/1 dev amn0 metric 1 
192.168.0.0/24 dev enp0s3 proto kernel scope link src 192.168.0.99 metric 100

For some reason, the IP address was not assigned to the interface when connecting through the client.

[outspace]

yep, inet address on amn0 interface is incorrect.

Please check "Address" parametr in your AWG config. (Connection->Share->AmneziaWG native format)
.

[alexanderzhirov]

I didn’t quite understand where this needs to be done. There’s no such option in the client itself.

[outspace]

[alexanderzhirov]

I don't have it

[alexanderzhirov]

[outspace]

ok, you have only client config. that's why you can not share it.

please try another AWG config.

[alexanderzhirov]

I tried importing different awg configuration files. Can you provide an example of what it should look like inside correctly?

[alexanderzhirov]

My conf file:

[Interface]
PrivateKey = <key>
Address = 10.8.0.9/24
DNS = 1.1.1.1
Jc = 8
Jmin = 50
Jmax = 1000
S1 = 76
S2 = 114
H1 = 121057217
H2 = 1744119161
H3 = 1685182984
H4 = 1240226708

[Peer]
PublicKey = <key>
PresharedKey = <key>
AllowedIPs = 0.0.0.0/0, ::/0
PersistentKeepalive = 0
Endpoint = <ip>:<port>

[Primat2022-bin]

Try turn off killswitct in settengs