4 ms·
Preventing Lateral Movement with WireGuard
- ano-ther 3y agoGood article. Is there an easy solution to route everything except the local net through WireGuard? I find the resulting long list of AllowedIPs a bit cumbersome (and impossible to verify). https://www.procustodibus.com/blog/2021/03/wireguard-allowedips-calculator/ https://www.procustodibus.com/blog/2021/03/wireguard-allowed...
- karmarepellent 3y agoIsn't this use case covered in the article that you mentioned? Specifically under the very last heading. https://www.procustodibus.com/blog/2021/03/wireguard-allowedips-calculator/#a-better-alternative https://www.procustodibus.com/blog/2021/03/wireguard-allowed... That is you could specify a single Wireguard peer that you send all the traffic to by setting AllowedIPs to 0.0.0.0/0 and also set more specific routes than 0.0.0.0/0 in the main routing table of your device in order to send traffic to certain networks via a different gateway.
- ano-ther 3y agoAh. Thanks. Need to try that.