No internet access "sometimes" after wireguard installation

[archidote]

Hello, I have setup wireguard with your beautiful script

it's works ! I can connect to my server from LTE but I can't reach internet

I have also check if the ip forwading was activated with echo 1 > /proc/sys/net/ipv4/ip_forward

do you have an issue to solve my problem ?

thank's

brlndtech

(Debian 10.X)

[X1Aaron]

I am having the same issue with Debian 10

[X1Aaron]

Same issue on Ubuntu 18.04

[X1Aaron]

I am able to ping the client from the server, so it is connecting. Maybe something is wrong with DNS?

[archidote]

I am able to ping the client from the server, so it is connecting. Maybe something is wrong with DNS?

No, I have tested to ping 8.8.8.8, and I can't access to it...

[z3ro-dot-z3ro]

I think this is a kernel issue. I had the problem with one VPS host that used a newer kernel, but no on another that uses an older one. There doesn't seem to be much guidance or information either way, though.

[Nyr]

Probably not a kernel issue.

Is your server behind NAT? Can you try from a non-LTE client?

Is your server a dedicated or fully virtualized system, or is it a container like OpenVZ or LXC?

Specify "sometimes": when does it work? When it doesn't?

[archidote]

Probably not a kernel issue.

Is your server behind NAT? Can you try from a non-LTE client?

Is your server a dedicated or fully virtualized system, or is it a container like OpenVZ or LXC?

Specify "sometimes": when does it work? When it doesn't?

Yes, my server is behind a nat, I have already try with a wifi connexion outside of my home

My server is a fully dedicated system. it's not a virtual server.

When I install wireguard at the first, it's works, but when I reboot the server, I can connect to the VPN but not to Internet unfortunatly.

@Nyr

[Nyr]

@brlndtech if the server IP is dynamic, that can be the problem because POSTROUTING rules will still perform SNAT to the old IP.

[archidote]

the ip of the server is FIX.. so I don't think so .. @Nyr
Maybe I will try to execute this command to see if it work: iptables -t nat -A PREROUTING -d $vps_public_ip -j DNAT --to-destination $home_pc_ip