UFW (Uncomplicated Firewall) with Wireguard connecting to Mullvad VPN sanity check on UFW setup. (lemmy.world)

submitted 1 year ago by Machinist@lemmy.world to c/piracy@lemmy.dbzer0.com

9 comments fedilink hide all child comments

I would really appreciate it if someone would double check me. Sorry for the screenshot. Either the Lemmy code button isn't great or I'm just dum at formatting.

This has local *arr servers available and traceroute shows me going through the VPN.

The largest blue blotch is the ip address of a mullvad vpn server.

Rpi4, Raspberry Pi OS lite.

Mullvad VPN. IPv6 has been nuked. Using Wireguard through wg-quick.

wg2 originates from a .conf file from Mullvad with IPv6 stripped.

Do these UFW settings look right?

you are viewing a single comment's thread
view the rest of the comments

[-] kowcop@aussie.zone 13 points 1 year ago

Pretty sure DNS is 53 UDP. Not sure if you meant it like that.

Port 53 TCP is for dns zone transfers

[-] dragonfly4933@lemmy.dbzer0.com 8 points 1 year ago

DNS vc is used for any dns request, not just zone transfers. UDP can sometimes fail in some situations, in which case the client will fall back to TCP which will keep it working.

load more comments (3 replies)

this post was submitted on 23 Jul 2023

51 points (96.4% liked)