I am surprised that it is actually nftables and not legacy iptables!
I am not sure how openwrt stores nftables config and how it looks, however you should find a `chain {}` block where `hook forward` is written, next lines within this block will specify policies regarding allowed traffic and there should be a rule lile `reject`
If it lools similar to what I have described then you need to add rules that will allow traffic to and from wireguard interface as it is currently allowed for your WAN interface (it might be eth0 for you)
Skhron
npub1ye…t6anu
2024-10-15 23:04:43
in reply to nevent1q…0225
Author Public Key
npub1yequ2pswfmkgyzylmvkfawz8z3nqlh0hcgaqr4e3xy2grxplq96stt6anuPublished at
2024-10-15 23:04:43Event JSON
{
"id": "e39f68d77224ff38ac4a406f7771cf5ba867891bfd19fa81b5a6fd75c8427ccd",
"pubkey": "2641c5060e4eec82089fdb2c9eb84714660fddf7c23a01d731311481983f0175",
"created_at": 1729033483,
"kind": 1,
"tags": [
[
"e",
"dda237d0cb4215259ffbaef11d0dab5a8943fc64c8e44bb21b63e73db233eded",
"",
"root"
],
[
"e",
"9ca333ddcc7772b96d42cde5fd776e2a301b9a5fb2255841e7f0d7b07d87cec9"
],
[
"e",
"fea0f5ed44b7d9e198cdc8e34d3c81f875ce1a32c1614c4c68b64ed3c070d774",
"",
"reply"
],
[
"p",
"eda96cb93aecdd61ade0c1f9d2bfdf95a7e76cf1ca89820c38e6e4cea55c0c05"
],
[
"p",
"2641c5060e4eec82089fdb2c9eb84714660fddf7c23a01d731311481983f0175"
]
],
"content": "I am surprised that it is actually nftables and not legacy iptables!\n\nI am not sure how openwrt stores nftables config and how it looks, however you should find a `chain {}` block where `hook forward` is written, next lines within this block will specify policies regarding allowed traffic and there should be a rule lile `reject`\n\nIf it lools similar to what I have described then you need to add rules that will allow traffic to and from wireguard interface as it is currently allowed for your WAN interface (it might be eth0 for you)",
"sig": "36b8802bf8c04e4fa1bb31fe93d5fb1ca881fa7dbf9e23d3ff5df8ef47e3c3f49de75b41263d14eaf5157a391114e861d3e382ed62e8f8605705a129a5da2821"
}