Hello everybody I have a question
# installi
important-guitar-33892
05/04/2023, 11:05 AMHello everybody, I have a question regarding a "simple" vpn setup with netmaker. I followed this instructions: https://docs.netmaker.org/egress-gateway.html#nat-gateway and used nmctl to create the network with a default external client DNS, but If I connect my phone as external client, I cant access the internet :/ The phone doesn't receive any packages. Any idea what I can do to solve my issue?
b
boundless-ability-97383
05/04/2023, 11:09 AMby "the phone doesn't recive any packages" do you mean it doesn't handshake?
i
important-guitar-33892
05/04/2023, 11:14 AMyes, sorry for the confusion, I thought that the phone could connect to the server because the node was shown in the graph overview, but I gues that doesn't indicate anything :/
important-guitar-33892
05/04/2023, 11:24 AMThis was caused by may firewall, I'm sorry :/
Now my phone can receive packages, but I'm still unable to access the internet through the VPN. I'm a litte bit confused by the settings for the phone wireguard, because there is the same ip used for my phone client and for the DNS server (.254). Is this a bug?
b
boundless-ability-97383
05/04/2023, 11:41 AMcan you send a screen shot of the netowrk graph
i
important-guitar-33892
05/04/2023, 11:43 AMfrom netmaker? the graph is really small, only my phone, my server node and a node named 0.0.0.0/0
b
boundless-ability-97383
05/04/2023, 11:43 AMcan you ping the node which has the 0.0.0.0/0 egress? from the ext client
i
important-guitar-33892
05/04/2023, 11:44 AMso you mean the server node?
important-guitar-33892
05/04/2023, 11:45 AMbecause this is the connection structure: phone -> server node -> 0.0.0.0/0
b
boundless-ability-97383
05/04/2023, 11:45 AMthen yes
i
important-guitar-33892
05/04/2023, 11:46 AMyep, the server node is pingable from the phone via ip
b
boundless-ability-97383
05/04/2023, 11:46 AMcan you traceroute 1.1.1.1 from the ext client
boundless-ability-97383
05/04/2023, 11:47 AMsee where the traffic is getting stuck
i
important-guitar-33892
05/04/2023, 11:48 AMyep, I will try
important-guitar-33892
05/04/2023, 11:48 AMbut why 1.1.1.1? Sorry if this is a nooby question
important-guitar-33892
05/04/2023, 11:50 AMfirst step is localhost, then my server node (10.11.10.1) then all steps are "no reply"
b
boundless-ability-97383
05/04/2023, 11:51 AMthere is no reason it has to be that ip spefically, but its one i use cause 1) i know its an internet ip 2) its cloudflares dns server that ive never had icmp request blocked on 3) cause its cloudflares dns server it has a very very high uptime.
boundless-ability-97383
05/04/2023, 11:51 AMwhat os is the server node?
i
important-guitar-33892
05/04/2023, 11:52 AMdebian 11
important-guitar-33892
05/04/2023, 11:52 AMarm 64
b
boundless-ability-97383
05/04/2023, 11:53 AMis ip forwarding enabled?
i
important-guitar-33892
05/04/2023, 11:53 AMouh shit, no, I dont think so
important-guitar-33892
05/04/2023, 11:54 AMI will try this 🙂
important-guitar-33892
05/04/2023, 11:58 AMI enabled ip forewarding by editing
/etc/sysctl.confnet.ipv4.ip_forward=1sysctl -pimportant-guitar-33892
05/04/2023, 11:59 AMBut nothing changed when trying to traceroute 1.1.1.1 from the client
b
boundless-ability-97383
05/04/2023, 11:59 AMtry
iptables -P FORWARD ACCEPTi
important-guitar-33892
05/04/2023, 12:04 PMnice, now I can ping 1.1.1.1 🙂
but it cant resolve DNS request, because a ping on google.com failed with unknown host
b
boundless-ability-97383
05/04/2023, 12:04 PMokay, what is the DNS entry on the extclient config file
i
important-guitar-33892
05/04/2023, 12:08 PMahhh, there was a mistake
important-guitar-33892
05/04/2023, 12:08 PMthank you so much for your time 🙏 now i can access the internet from my external client 🥳
b
boundless-ability-97383
05/04/2023, 12:08 PMyou are welcome