This is an automated archive.

The original was posted on /r/wireguard by /u/mark_paterson on 2023-09-10 21:59:18+00:00.

I’m running WireGuard on Ubuntu 22.04.3 LTS on my home server in the US and connecting to it with a MacBook Air running the WireGuard client app.

I’m currently traveling in Japan and trying to connect to epson.com.

When I’m on the hotel WiFi with no VPN connection, I can connect to epson.com with no problem. And nslookup gives the following output…

nslookup epson.com
Server:     192.168.2.1
Address:    192.168.2.1#53

Non-authoritative answer:
Name:   epson.com
Address: 45.60.106.158
Name:   epson.com
Address: 45.60.45.158

However, when I connect to my home WireGuard VPN, I can no longer load epson.com in my browser. nslookup now gives this result (which I think still looks fine)

nslookup epson.com
Server:     192.168.50.1
Address:    192.168.50.1#53

Non-authoritative answer:
Name:   epson.com
Address: 45.60.45.158
Name:   epson.com
Address: 45.60.106.158

I thought maybe I had a setting wrong, so I tried connecting using my Private Internet Access VPN connection, configured over WireGuard, and that doesn’t work either! nslookup for that…

nslookup epson.com
Server:     10.0.0.243
Address:    10.0.0.243#53

Non-authoritative answer:
Name:   epson.com
Address: 45.60.45.158
Name:   epson.com
Address: 45.60.106.158

Like I said, if I set my PIA protocol to OpenVPN, the site loads with no problem. What is going on here?

My personal WireGuard server settings are this (I set the MTU lower as a recommendation of something to try, but that didn’t fix it.

My WireGuard server interface config is this…

```[Interface]
Address = 10.0.10.1/24
ListenPort = 51820
MTU = 1280
PrivateKey = XXXXXXXXX
PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eno1 -j MASQUERADE
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eno1 -j MASQUERADE

and my MacBook Air client is this…

[Interface]
PrivateKey = XXXXX
ListenPort = 51820
Address = 10.0.10.4/32
DNS = 192.168.50.1 (this is my home router with AdGuard, but also got same result set to 8.8.8.8)

[Peer]
PublicKey = XXXXX
AllowedIPs = 0.0.0.0/0
Endpoint = XXXXX:51820
PersistentKeepalive = 25

This is so perplexing. Looking for any help.