Same error in my case.
admin@RT-AC86U:/jffs/root# iptables -L INPUT -v --line-numbers
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
num pkts bytes target prot opt in out source destination
1 284 70830 ACCEPT all -- any any anywhere...
Hmmm… I've got a few cases when realip is properly set, but still no ext_ip= statement in miniupnpd config. Then we need to force update process.
#!/bin/sh
# IPv4 detection taken from WGM code by Martineau
Is_IPv4() {
grep -oE '^([0-9]{1,3}\.){3}[0-9]{1,3}$' # IPv4 format...
I've got a problem in 386.5_2 with miniupnpd refuses to map ports. Instead I got this:
Apr 23 01:50:25 RT-AC86U miniupnpd[2782]: Failed to add NAT-PMP 42613 tcp->192.168.16.16:22000 'NAT-PMP 42613 tcp'
Apr 23 01:50:26 RT-AC86U miniupnpd[2782]: Failed to add NAT-PMP 42613...
What I needed to do is rather opposite — to route all my local clients to WAN, except when destination IP is from predefined IPset, then route to VPN (wg11).
Yes, wg11 mark is 0x1000.
ip rule del prio 9901
ip rule add from 0/0 fwmark "0x1000/0x1000" table 121 prio 9901
Yeah I've figured it out (put it to wg11-route-up.sh), but what I've NOT figured is 'echo 0 > /proc/sys/net/ipv4/conf/wg11/rp_filter' magick. :) It works now, thanx a lot!
Why then 'peer wg11 rule add vpn src=192.168.mysubnet.mycomputer' works in policy mode (it really works), so it creates all routing rules , but IPset setting doesn't? I don't understand it, totally confused.
Smth like 'peer wg11 rule add vpn ipset=ipsetname' (where ipsetname is dst) would be...