No internet for connected clients with freshly install pivpn (wireguard)

Viewed 1935

I have a freshly installed pi4, and after running curl -L https://install.pivpn.io | bash to install pivpn (wireguard), the clients connect but have no internet access. From my Pi I can ping the clients. Using tcpdump I can also see the clients are connected, but still no internet access

My Iptables is set like this:

#iptables -S
 
-P INPUT DROP
-P FORWARD DROP
-P OUTPUT ACCEPT
-A INPUT -i eth0 -p udp -m udp --dport 51820 -m comment --comment wireguard-input-rule -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -m comment --comment ssh -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 443 -m comment --comment ssh -j ACCEPT
-A FORWARD -d 10.6.0.0/24 -i eth0 -o wg0 -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment wireguard-forward-rule -j ACCEPT
-A FORWARD -s 10.6.0.0/24 -i wg0 -o eth0 -m comment --comment wireguard-forward-rule -j ACCEPT

in my /etc/sysctl.conf the net.ipv4.ip_forward=1

and the rest of the settings of ipvpn are just standard.

In the wireguard settings I just use google DNS: 8.8.8.8

I am running out of ideas. Can anyone please help ?

1 Answers

Sounds like the only thing you're missing is IP Forwarding:

You can enable it on the fly with: sysctl -w net.ipv4.ip_forward=1

And you can make it permanent by editing /etc/sysctl.conf and setting net.ipv4.ip_forward = 1

Related