From 39fade1095df1830440479c91afc3b053650a264 Mon Sep 17 00:00:00 2001 From: Sunil Mohan Adapa Date: Wed, 30 Oct 2019 14:46:10 -0700 Subject: [PATCH] wireguard: Accept all IPs on server in a client setup - Without this, all IPs on the server will be rejected and communication will not be possible. Signed-off-by: Sunil Mohan Adapa Reviewed-by: James Valleroy --- plinth/network.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/plinth/network.py b/plinth/network.py index 4a3f62400..0a954f8e9 100644 --- a/plinth/network.py +++ b/plinth/network.py @@ -475,11 +475,12 @@ def _update_wireguard_settings(connection, wireguard): settings.set_property(nm.SETTING_WIREGUARD_PRIVATE_KEY, wireguard['private_key']) - # XXX: not working peer = nm.WireGuardPeer.new() peer.set_endpoint(wireguard['peer_endpoint'], False) peer.set_public_key(wireguard['peer_public_key'], False) peer.set_preshared_key(wireguard['preshared_key'], False) + peer.append_allowed_ip('0.0.0.0/0', False) + peer.append_allowed_ip('::/0', False) settings.append_peer(peer)