this post was submitted on 24 Aug 2023
8 points (90.0% liked)

Linux

8114 readers
83 users here now

Welcome to c/linux!

Welcome to our thriving Linux community! Whether you're a seasoned Linux enthusiast or just starting your journey, we're excited to have you here. Explore, learn, and collaborate with like-minded individuals who share a passion for open-source software and the endless possibilities it offers. Together, let's dive into the world of Linux and embrace the power of freedom, customization, and innovation. Enjoy your stay and feel free to join the vibrant discussions that await you!

Rules:

  1. Stay on topic: Posts and discussions should be related to Linux, open source software, and related technologies.

  2. Be respectful: Treat fellow community members with respect and courtesy.

  3. Quality over quantity: Share informative and thought-provoking content.

  4. No spam or self-promotion: Avoid excessive self-promotion or spamming.

  5. No NSFW adult content

  6. Follow general lemmy guidelines.

founded 1 year ago
MODERATORS
 

While experimenting with ProtonVPN's Wireguard configs, I realized that my real IPv6 address was leaking while IPv4 was correctly going through the tunnel. How do I prevent this from happening?

I've already tried adding ::/0 to the AllowedIPs option and IPv6 is listed as disabled in the NetworkManager profile.

top 3 comments
sorted by: hot top controversial new old
[–] Quereller@lemmy.one 1 points 1 year ago (1 children)

Maybe you need to set up an iptables firewall rule? In this document they call it kill switch.

BTW. Mullvad has many usefull WG generic guides in their help section.

[–] Molecular0079@lemmy.world 1 points 1 year ago (1 children)

Thanks! This works, but only if I use wg-quick. If I import the connection into KDE's NetworkManager it doesn't. I am assuming its because it isn't running the PreDown and PostUp commands.

[–] Quereller@lemmy.one 1 points 1 year ago

Hmm, I found that https://feeding.cloud.geek.nz/posts/using-iptables-with-network-manager/

But it seems to be fairly complex and you would even have to change the script to only handle the WG device.