Route Internet traffic MT via WireGuard tunnel through MT WG peer

RouterOS General
21



Wanted to thank you for taking your time to reply.

Sure.

leave IP/DHCP Server DNS setting active but blank,

of course, that’s not gonna work. :smiley:

ALso added fasttrack

Good, check the “connection-mark” you have to use “no-mark”

/ip firewall filter
add action=fasttrack-connection chain=forward comment=FastTrack connection-mark=no-mark connection-state=established,related hw-offload=yes



Still didn’t get to Wireguard configuration

change the subnet and you should be good to go.
You said it does work on your smartphone, which DNS server did you use in the WG client?

22

Wireguard WireHole script actually uses Unbound DNS. So, DNS is assigned in config, it filters everything.
But i have not added it in MT WireGuard settings, didn’t even see a field for it.

23

@emilk

maybe only through terminal?

Check it

ip firewall filter print from=[find comment=FastTrack]



Wireguard WireHole script actually uses Unbound DNS. So, DNS is assigned in the config, it filters everything.
But I have not added it in MT WireGuard settings, didn’t even see a field for it.

What I meant was what did you set as a DNS server in your laptop or smartphone Wireguad client? there is no DNS in MT for WG you have to use mangle and DST-NAT as I did in my config.
The local VDS DNS server.
Public DNS
None

[Interface]
PrivateKey = base64 key
Address = 10.0.6.3/32
DNS = 10.0.6.1
or
DNS = 1.1.1.1
or no DNS

[Peer]
PublicKey = base64 key
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = vpn.domain.com:port