Sunday, March 21, 2021

Re: Protecting entire LAN subnet with Wiregaurd

Many thanks, I will check out the article.

Antonino Sidoti




> On 22 Mar 2021, at 3:27 pm, Daniel Jakots <danj@chown.me> wrote:
>
> On Sun, 21 Mar 2021 23:49:37 -0400, Daniel Jakots <danj@chown.me> wrote:
>
>> On Mon, 22 Mar 2021 14:34:00 +1100, Antonino Sidoti
>> <nino@sidoti.id.au> wrote:
>>
>>> I am confused on how to force all lan clients in my home network to
>>> use wireguard tunnel via local firewall. Do I need to add routes and
>>> if so how do I do this on my local firewall if the public IP is
>>> dynamic and the default gateway changes regularly.
>>
>> To make all the traffic goes through Wireguard®, you can do
>> # route add default -link -iface wg0
>>
>> Having a dynamic IP at home means that if the IP changes, the server
>> won't be able to initiate the tunnel but AFAIK, that's the only
>> problem.
>
> After thinking more about it, I see what the problem is.
>
> So maybe using some rdomains/rtables as described in
> https://codimd.laas.fr/s/NMc3qt5PQ#
>

No comments:

Post a Comment