WireGuard pfSense 2.7.2 MobileData 0 received

poldus

Hello.
A few pictures are worth a thousand words.

Here is

WORK - from the internal network 192.168.69.x (via WiFi and Rj45 cable) - handshake OK (Windows, Android).
NOT WORK :

VPN WG (from Android tethering) to Windows peer,
VPN WG via Mobile Data to Android peer.
All WireGuard settings (port 53 and listening port 1024) checked from the network 192.168.69.x (handshakes OK - Windows and Android peers). Listening port less than 1024 - does not work.
What is the REASON that the TUNEL does not work, i.e. receiving is STILL - 0 (zero).

Bob.Dig

@poldus How about using the "default" ports.

poldus

@Bob-Dig
The same results. My ports 53 and listening 1024 is "for" my IPS Provider (blocking or something higher ports).

Bob.Dig

@poldus said in WireGuard pfSense 2.7.2 MobileData 0 received:

My ports 53 and listening 1024 is for my IPS Provider

Then it is probably blocked too, there are no hits in your screen on the WAN-rule. So there is nothing pfSense can do for you. Maybe try Tailscale if you can't have open ports.

poldus

@Bob-Dig
I use duckDNS too. Service (in WireGuard) is UP (+), casches ISP "public" IP but changes in EndPoint my_DDNS.duckdns.org:53 does't MATTER. The same result - NOTHING from "Outside".

poldus

@Bob-Dig said in WireGuard pfSense 2.7.2 MobileData 0 received:

@poldus said in WireGuard pfSense 2.7.2 MobileData 0 received:

My ports 53 and listening 1024 is for my IPS Provider

Then it is probably blocked too, there are no hits in your screen on the WAN-rule. So there is nothing pfSense can do for you. Maybe try Tailscale if you can't have open ports.

Why no hits on WAN? Rules are from tutors wundertech and reddit ("wireguard pfsense"). Rules are "dubbled" on Wireguard and WG_VPN interfaces (because of different interpretation in tutors).

poldus

@poldus
My "thinking" of this PROBLEM are

all KEYS (publics, privates and preshareds) are OK (because of handshaking OK) in both peers (Android, Windows)

2.. what else? rules? "default 51820 port (not working too)

WireGuard is so "experimental" to me? so experimental that UNUSED from me?