WireGuard Gateway with killswitch and port forwards on WAN

[psherman]

@ephidrineon

Is there a plugin or something that I could use, or am I just missing a route and a firewall rule?

A plugin for what?

If the issue is that the port forwarding from the WAN isn't working properly, you will probably need VPN Policy Based Routing

@ephidrineon

• If the VPN interface goes down, the 10.1.0.20 device shall not be allowed to communicate to the outside world

This is easy... just make sure that the firewall zone associated with the 10.1.0.0/24 network (likely 'lan') has forwarding enabled to the wireguard zone, but not to the wan zone. This will act as a kill switch for that network.