From 0d139a91176c2c648be4ffb85141747a28cc4609 Mon Sep 17 00:00:00 2001 From: dogeystamp Date: Mon, 24 Jun 2024 00:38:08 -0400 Subject: [PATCH] Revert "posts/wireguard.md: update ufw rule" This reverts commit f46477c916ac0fff54fe97e1b5aea52a364781ae. --- posts/wireguard.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/posts/wireguard.md b/posts/wireguard.md index dfa4e98..c4d0df6 100644 --- a/posts/wireguard.md +++ b/posts/wireguard.md @@ -199,10 +199,10 @@ be sure to have sane firewall rules before doing this. > Note: If you use [UFW](https://wiki.archlinux.org/title/Uncomplicated_Firewall) as a firewall like me, you'll also [need to set a rule](https://dietpi.com/forum/t/wireguard-no-handshake-established/15979) to let VPN traffic in. > Without this, all the `iptables` rules do nothing and your forwarded packets will get blocked. -> Replace `wg0` with your own VPN interface name: +> Replace the subnet with your VPN subnet: > > ``` -> # ufw allow in on wg0 to any +> # ufw allow in from 10.0.0.0/24 to any > ``` > Another UFW quirk is that it has its own `sysctl.conf`, which lives at `/etc/ufw/sysctl.conf`.