Originally Posted by
The Cog
Have you configured any firewall rules? Please post the output of these commands:
Code:
sudo iptables-save
sudo nft list ruleset
Also, I gather that a Neighbor Solicitation request must come from the Link Local address of the sender, and you don't seem to have a Link Local address. This might be the source of the problem.
First, thank you for reply!
1) No, I didn't set up any firewall rules.
2)
...and you don't seem to have a Link Local address.
Could you help me to add correct Link-Local address via terminal, please???
sudo iptables-save
Code:
# Generated by iptables-save v1.8.7 on Mon Nov 21 12:36:40 2022
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A FORWARD -i ens3 -o wg0 -j ACCEPT
-A FORWARD -i wg0 -j ACCEPT
COMMIT
# Completed on Mon Nov 21 12:36:40 2022
# Generated by iptables-save v1.8.7 on Mon Nov 21 12:36:40 2022
*nat
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -o ens3 -j MASQUERADE
COMMIT
# Completed on Mon Nov 21 12:36:40 2022
sudo nft list ruleset
Code:
table ip filter {
chain FORWARD {
type filter hook forward priority filter; policy accept;
iifname "ens3" oifname "wg0" counter packets 0 bytes 0 accept
iifname "wg0" counter packets 0 bytes 0 accept
}
}
table ip nat {
chain POSTROUTING {
type nat hook postrouting priority srcnat; policy accept;
oifname "ens3" counter packets 50 bytes 3449 masquerade
}
}
table ip6 filter {
chain FORWARD {
type filter hook forward priority filter; policy accept;
iifname "wg0" counter packets 0 bytes 0 accept
}
}
table ip6 nat {
chain POSTROUTING {
type nat hook postrouting priority srcnat; policy accept;
oifname "ens3" counter packets 43 bytes 4143 masquerade
}
}
Bookmarks