Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 11 Nov 2025 15:23:03 +0000
From:      bugzilla-noreply@freebsd.org
To:        net@FreeBSD.org
Subject:   [Bug 290768] if_wg(4): handshake response has src and dst reverse
Message-ID:  <bug-290768-7501-P5qzPxVAbH@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-290768-7501@https.bugs.freebsd.org/bugzilla/>
References:  <bug-290768-7501@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290768

--- Comment #14 from relvy <it@vineyard-sha.de> ---
(In reply to Kyle Evans from comment #13)

> a.b.c.d is external to your local network, correct?  Is there NAT involved for a.b.c.d to pass a packet in to 192.168.178.2?

Infrastructure:

LAN opnsense WAN ------------ opnsense WAN CARP -------------- Gateway --------
Internet ----- peer (road warrior)
            igc0                 192.168.178.2                                 
                   a.b.c.d

peer initiates handshake

LAN opnsense WAN ------------ opnsense WAN CARP -------------- Gateway --------
Internet ----- peer (road warrior)
            igc0              192.168.178.2:51820 <----- Port forwarding 
<----------------     a.b.c.d


outgoing traffic:

LAN opnsense WAN ------------ opnsense WAN CARP -------------- Gateway --------
Internet ----- peer (road warrior)
            igc0 -- outbound NAT --> 192.168.178.2
--------------------------------------------->   a.b.c.d

-- 
You are receiving this mail because:
You are the assignee for the bug.


Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-290768-7501-P5qzPxVAbH>