Cannot find packets dropped between Wireguard and LAN
-
I'm using the available wireguard package to build a tunnel to my wireguard server offsite. The tunnel is up and I can send traffic through in some configurations. But a packet delivery failure occurs when I attempt to send a packet in from my Wireguard VPS host without performing SNAT on it. I don't know what this would make any difference. So in one instance, the source IP would be the gateway of my VPS (SNAT mode working), and in the other it would be the original client IP (no SNAT not working).
The Wireguard client is configured with 0.0.0.0/0 as the allowable networks.
The WG interface on pfsense can see the packets arrive with packet capture, but I cannot see the packets exiting the LAN interface. I have a firewall rule to allow all traffic inbound on the WG interface.
Where would I look to see why the packets fail to exit the firewall?