Commit graph

4 commits

Author SHA1 Message Date
Paul
101b5564c2 Fix for fwmark
Evidently, wireguard's (use of) fwmark is not well understood. In short,
it determines which routing table to use for a tunnel's packets.

Adding a fwmark to a roadwarrior client config won't do anything to the
actual packets sent to a peer: Packets do not get marked.

A QRCode with `FwMark = ...` in it is invalid.

FwMark is now excluded from client configs (but is written to the
server config /etc/wireguard/wgX.conf).

Potential breaking change of `WGUI_FORWARD_MARK` to `WGUI_FIREWALL_MARK`

But this has the effect of making users eventually notice that it
probably does not do what they want/think.

See:
https://ro-che.info/articles/2021-02-27-linux-routing

https://casavant.org/2020/10/10/wireguard-fwmark.html

https://www.blinkenlights.ch/ccms/posts/source-based-routing/
2023-02-16 20:07:15 +01:00
fr123k
a5fdb1ad1d
Add ForwardMark to global settings (#173) 2022-04-24 09:44:33 +02:00
Khanh Ngo
7c3cac8084
Add Apply Config button to save wireguard config file 2020-04-23 09:29:44 +07:00
Khanh Ngo
e99a5ba92b
Add global setting form 2020-04-20 09:54:41 +07:00