I was reading his method here:
But he lost me on the stage:
Create a bridge with a /30 address:
/interface bridge
add name=br-wg protocol-mode=none/ip address
add address=172.16.10.1/30 interface=br-wg
I see no connection between this bridge and the WireGuard-Instance?
And the IP “172.16.10.2” in his SNAT rules. What does this?
But if you tell me this is “by design” so, I can live with it.
I think the “routing rule” solution is much easier and resilient (at least with static-public-IPs) than some bridge and NATing.
But I’d would still like to know why “Mangling” fails but Routing/Rules works? As long as under Routing/Settings Policy “User” is above “Main”. AFAIK Mangling and Rounting/Rules are almost the same? Mangling is a more “sophisticated” way and Rounting/Rules simpler?