Differences

This shows you the differences between two versions of the page.

--- userdoc:tt_wireguard_vpn [2019/09/20 19:43] – [WireGuard Client Support] abelbeck
+++ userdoc:tt_wireguard_vpn [2020/03/30 14:33] (current) – [WireGuard VPN Configuration] abelbeck
@@ Line 3: / Line 3: @@
 AstLinux now supports the [[https://www.wireguard.com/|WireGuard VPN]]. WireGuard is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography.  WireGuard was created by Jason A. Donenfeld.
-!!Info ->!! Currently (November 2018) WireGuard has not quite yet been accepted into the mainline Linux kernel. Be certain to perform your own due diligence and testing of what could become the premier VPN in the not too distant future.
+!!Info ->!! Currently (March 2020) WireGuard is included in Linux 5.6 and onward.  Backports for older kernels are also maintained. Be certain to perform your own due diligence and testing of what could become the premier VPN type across most all platforms.
 !!Note: AstLinux 1.3.2 or later is required, new features with 1.3.5 or later!!
@@ Line 193: / Line 193: @@
   * UDP: Define ''UDP'' rules of the form; host1,host2~port1,port2 host3,host4~port3,port4 ...
-!!Tip ->!! Allow SSH traffic, deny all other traffic ... choose "Pass WG->Local" and set ''TCP'' to ''0/0~22''
+!!Tip ->!! Allow SSH and DNS traffic, deny all other traffic ... choose "Pass WG->Local" and set ''TCP'' to ''0/0~22,53'' and ''UDP'' to ''0/0~53''
 !!Tip ->!! Deny HTTP/HTTPS traffic, allow all other traffic ... choose "Deny WG->Local" and set ''TCP'' to ''0/0~80,443''