config route
option interface 'wiro'
option target '0.0.0.0/0'
option table '1'
config rule
option src '192.168.1.0/24'
option dest '0.0.0.0/0'
option priority '1' #order in IP_rules
option lookup '1' #table_assigned
Firewall
config zone
option name 'wan'
option output 'ACCEPT'
option masq '1'
option mtu_fix '1'
option input 'DROP'
option forward 'DROP'
list network 'wan'
list network 'wan6'
list network 'wiro'
REMOVE from wiro
- unneeded:
Assign in the following manner:
# in /etc/config/dhcp
config dhcp 'lan'
#.....
list dhcp_option '6,1.1.1.1,1.0.0.1'
Lastly:
WAN must use a DNS that doesn't route over WG.