I have a WireGuard Server with a WireGuard Client I can only route Client traffic out the WAN interface.

elegantd

I have the WireGuard (WG) Server working fine and have a WireGuard Client connected with both LAN and WAN access. I would like to know how to have WG Clients connected to my WG server have their traffic exits out a NORD/Surfshark VPN interfaces. ALL VPN interfaces are up and working.

As of now I can only have my WG Client traffic exit out the wireguard_home_server interface.
When I try to choose the NORD/Surfshark interface, I can connect and have access to the LAN but will not have any connectivity to to address outside the LAN.

My firewall rule for WG clients looks like this

If I toggle the WAN_DHCP rule off as explained earlier no traffic outside the LAN.

My firewall rule for WG server looks like this.

I am thinking maybe a nat outbound rule needs to be created. I have tried. But no luck.

My Outbound NAT rules

Bob.Dig

@elegantd There is so much wrong on your side, it is really hard to decide where to start... And what does it even mean: "My firewall rule for WG clients" and "My firewall rule for WG server". Usually, if the firewall is connecting towards a Privacy-VPN, this is called a VPN-Client on the firewall. If your phone is connecting to your firewall from the outside, on the firewall it is called a VPN-Server. In a router/firewall everything is named from the point of view of the router/firewall itself.

If you use WireGuard for the connections to the Privacy-VPN, you usually don't need to configure Outbound NAT, so keep it at automatic (or hybrid, if you also use OpenVPN for that) and remove your faulty rules there.

Destination is almost never your WAN-address, it is any (IP-address) if it is the internet.

Also read this:
https://docs.netgate.com/pfsense/en/latest/multiwan/policy-route.html

You have to learn a lot if you want this to work. Using the software from the Privacy-VPN-Provider is much easier.

elegantd

Thanks Bob I was making it far more complicated than I needed. I have it fixed now. I have the Wireguard Clients connecting to my pfsense server and the ones I want are going out the nordvpn tunnels.

elegantd

@Bob-Dig Thanks Bob I have it fixed now.