Wireguard and DNSleaks

Installing and Using OpenWrt
21

The "Endpoint" in the wireguard config

1 Like
22

:+1:

Correct!

That has to be an IP if the OP wants to use the VPN company's DNS server.

1 Like
23

Here's the config beside the Keys.

[Interface]
PrivateKey =

Address = 10.0.8.195/24,fdab:1337:1337:8::195/64
DNS = 2001:9b1:8826::53, 2001:9b0:4:2601::53, 98.128.186.86, 155.4.89.136

[Peer]
PublicKey =
Endpoint = wireguard.5july.net:48574
AllowedIPs = 0.0.0.0/0, ::/0

24

that is not possible if you can't resolve the domain, this should be an ip address.

try this one: 98.128.186.73:48574

1 Like
25

:man_facepalming:

root@OpenWrt:~# nslookup wireguard.5july.net
Server:         127.0.0.1
Address:        127.0.0.1#53

Name:      wireguard.5july.net
Address 1: 98.128.186.119
Address 2: 98.128.186.115
Address 3: 2001:9b1:8826:0:98:128:186:115
Address 4: 2001:9b1:8826:0:98:128:186:119

Use IP.

2 Likes
26

Seems like I'm getting different nslookup results

nslookup wireguard.5july.net
Server:  EDITH.happy.local
Address:  192.168.111.10

Non-authoritative answer:
Name:    wireguard.5july.net
Addresses:  2001:9b1:8826:0:98:128:186:73
          2001:9b1:8826:0:98:128:186:110
          98.128.186.73
          98.128.186.110
27

Likely because it's probably distributed. I explained to the OP already:

28

This whole setup from the provider seems to be a little off to me.
In the first place I would create a new Network Interface only for the VPN and then feed all the traffic into this.

1 Like
29

I assumed the OP has this already.

30

The provider has no setup for this. They offer a file containing the configs, which you just throw into the wiregaurd application and click connect. I'm opening the file in editor and entering the the info to use it in the router so that the whole network is behind the tunnel.

31

I followed to setup the vpn on my router. Vid

This looks like a setup to me. You should be able to configure everything over the luci webinterface

32

I told you...OK, we're gonna try again...these pages and info already exist, you really need to search.

I suggest:

  • Setup a Wireguard interface
    • add it to a new firewall zone
    • enable masquerade on that zone
  • Add a route to a new table (e.g. 2). do not use names or you have to make more configs
    • 0.0.0.0/0 via your tunnel

Test this way and let us know your results:

ip rule add from 192.168.1.x to 0.0.0.0/0 table 2 priority 2

x == IP of the client you're testing

go to: whatismyip.com

If your single client works upon testing (you should get the IP of the VPN company), we can ask more about how you want DNS and all your network to use VPN.

1 Like
33

I intered the Ip adress you gave instead of ( ```
wireguard.5july.net

Btw, new acc cuz the first one can't reply anymore.  :confused:
34

@Meliods @Meliods

Do not create other accounts to circumvent the noob posting limitation - it is against the Community Guidelines.

Be advised, out of respect for these rules - I (and most others) will not respond to the new account.

Also, do not edit your past postings to add more information. They may be marked for SPAM or vandalism.

1 Like
35

I know sorry, but It said I had to wait 22 hours and I just wanted to tell you that the problem has been solved.
Thanks for the help! :slight_smile:

36

FYI you can use selective dns forwarding to resolve the ip of the wg server with any public nameserver, while using the internal nameserver in general resolving.

2 Likes
37

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.