Re: Protecting entire LAN subnet with Wiregaurd

On Mon, 22 Mar 2021 14:34:00 +1100, Antonino Sidoti <nino@sidoti.id.au>
wrote:

> I am confused on how to force all lan clients in my home network to
> use wireguard tunnel via local firewall. Do I need to add routes and
> if so how do I do this on my local firewall if the public IP is
> dynamic and the default gateway changes regularly.

To make all the traffic goes through Wireguard®, you can do
# route add default -link -iface wg0

Having a dynamic IP at home means that if the IP changes, the server
won't be able to initiate the tunnel but AFAIK, that's the only problem.

Cheers,
Daniel