Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

v055e: WireGuard with multiple DNS entries #1372

Open
nomisma-qt opened this issue Apr 17, 2024 · 2 comments
Open

v055e: WireGuard with multiple DNS entries #1372

nomisma-qt opened this issue Apr 17, 2024 · 2 comments
Assignees
Labels
bug Something isn't working

Comments

@nomisma-qt
Copy link

nomisma-qt commented Apr 17, 2024

I think I found the issue: at least if you have a custom DNS specified as I have, the Fritzbox Wireguard config for the client contains these two lines specifying the DNS:

DNS = 192.168.178.199,192.168.178.1
DNS = fritz.box

I do not know if this is according to the Wireguard spec or if the implementation from AVM is faulty, but there are two differences between the official Wireguard client and RethinkDNS:

  • the Wireguard client gracefully combines both DNS entries into one, while ReThink only displays the first line and seems to ignore the second one
  • with my setup, only the first DNS entry "192.168.178.199" is valid, and RethinkDNS does not seem to use that one, but Wireguard does. I am however unsure if that was simply bad luck or something caused by the implementation.

As soon as I delete the DNS entry in ReThink and replace it with only the correct DNS entry, the connection works.

Originally posted by @Braintoe in #1298 (comment)

@ignoramous ignoramous added the bug Something isn't working label Apr 17, 2024
@ignoramous ignoramous changed the title I think I found the issue: at least if you have a custom DNS specified as I have, the Fritzbox Wireguard config for the client contains these two lines specifying the DNS: v055e: WireGuard with multiple DNS entries Apr 17, 2024
@ignoramous
Copy link
Collaborator

A user says,

I run my own WG peer on a VPS (trailofbits/algo project.) It provides a QR code for setup. That QR code includes the default DNS server configured in the settings on the VPS server, with both ipv4 and ipv6 addresses. If i use that QR code to set up my android phone to use WG for example with the "WG Tunnel" app by Zane Schepke, found on F-Droid, then the VPN tunnel works fine.

In rethink, DNS does not work by default. In 'wg3' edit mode, where i edit the name, private key, public key, peer addresses and DNS servers, there are two addresses for the DNS, ipv4 and ipv6.

I have to remove the ipv6 address after the comma.

@ignoramous
Copy link
Collaborator

I have to remove the ipv6 address after the comma.

See: #1483

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

3 participants