[kwlug-disc] wireguard quesion....

bob+kwlug at softscape.ca bob+kwlug at softscape.ca
Tue Mar 2 20:27:21 EST 2021


Oh!


> To make WireGuard more chatty, you just have to add the following in
> your [Interface] section in wg0.conf:
> PersistentKeepalive = 25
> 
> The masquerading is the same, but to enable client isolation, you can
> add the following to your PostUp= line in your [Interface] section:
> ; iptables -I FORWARD -i wg0 -o wg0 -j REJECT --reject-with icmp-adm-
> prohibited
> 
> 
> Everything else is good.
> Sorry about that!

No worries. I did literally zone out. Otherwise I would have asked at the time. I caught the tail end of that slide an missed my chance; figured I'd find it afterward but got stumped.

That syntax nicely ties it back to the rest of the stuff you talked about.

Thanks,
(the other)Bob.




> Cheers,
> Jason.
> 
> On Tue, Mar 2, 2021 at 5:42 PM bob+kwlug at softscape.ca
> <mailto:bob%2Bkwlug at softscape.ca>  <bob+kwlug at softscape.ca
> <mailto:bob%2Bkwlug at softscape.ca> > wrote:
> 
> 
> 	Jason (or anybody),
> 
> 	I probably zoned out for a bit during your talk, but did you
> explain how the assignments on the "One more thing..." page worked and
> where they went in the conf file?
> 
> 	I can't seem to find any documentation for that syntax.
> 
> 	Thanks,
> 	(the other)Bob.
> 
> 
> 
> 
> 	_______________________________________________
> 	kwlug-disc mailing list
> 	kwlug-disc at kwlug.org <mailto:kwlug-disc at kwlug.org>
> 	https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
> 







More information about the kwlug-disc mailing list