Installed wireguard, can't reach openwrt forum

[Box-of-Spare-Parts]

I can only reach forum.openwrt.org while not connected to wireguard VPN from outside my LAN. I have to deactivate the wireguard tunnel on my laptop in order to reach the forums. I can reach everything else on the internet, and tracert shows that my internet traffic is going through the tunnel. Anyone else have this issue?

[lleachii]

Welcome to the community!

Where is your Wiregard connected to?

@Box-of-Spare-Parts

I have to deactivate the wireguard tunnel on my laptop in order to reach the forums.

I assume you are on you cellular device/hotspot using your mobile carrier - then you attempt to connect to a Wireguard VPN instance on your home OpenWrt device?

Can you provide specific details?

Additionally, can you provide the laptop's WG config (omit keys)?

[Box-of-Spare-Parts]

I use an openwrt firewall for my home network. While I'm at work or any other place, I connect to my wireguard server at home, which is installed on my openwrt firewall. While I'm connected to my wireguard server, I can reach everything on the internet except openwrt forums.

This is the WG tunnel configuration on my laptop:

[Interface]
PrivateKey = OMITTED
ListenPort = 51820
Address = 192.168.9.4/32

[Peer]
PublicKey = OMITTED
PresharedKey = OMITTED
AllowedIPs = 0.0.0.0/1, 128.0.0.0/1, ::/1, 8000::/1
Endpoint = MYDOMAIN*:51820

[psherman]

@Box-of-Spare-Parts

AllowedIPs = 0.0.0.0/1, 128.0.0.0/1, ::/1, 8000::/1

you can simplify this by using 0.0.0.0/0 and ::/0

Also, are you running IPv6 dual stack on your router and the WG peer on that side?

[lleachii]

Did you omit your DNS setting?

[Box-of-Spare-Parts]

On my laptop's tunnel configuration, there's no DNS

[lleachii]

@Box-of-Spare-Parts

my laptop's tunnel configuration, there's no DNS

You'll need to fix that.

[Box-of-Spare-Parts]

out of the box, I've never removed any IPv6 options. I just start adding the software packages I need.

[psherman]

Remove the IPv6 part of the allowed IPs.

[Box-of-Spare-Parts]

SOLVED.

I had to set the VPN interface MTU to 1420 in advanced settings. I previously had it set to 400, for the rare instances where my phone would have less than optimal cellular reception. I'm able to reach OpenWRT forums now.

[lleachii]

@Box-of-Spare-Parts

MTU to 1420 in advanced settings. I previously had it set to 400, for the rare instances where my phone would have less than optimal cellular reception.

You shouldn't need an MTU that low. I still work with 2400 baud radio, you literally have the MTU set lower than that. Glad you fixed your nonstandard configuration.

I'm shocked you only got errors on one website.