Guest Network and Wireguard

Because you have not permitted udp 67 for dhcp. INPUT and FORWARD can be drop/reject.
You are also mixing upper-lower case names, e.g in network you have GUEST, while in DHCP guest. Stick to lower case everywhere.

Finally you allow in firewall guest->wan forwarding only, however there is no default route in the routing table via the wan interface. You need to do Policy Based Routing and you have 3 options:

  1. mwan3 package
  2. pbr package
  3. a set of rules/routes for each internet connection.
2 Likes