ANSWERED Port Forwarding Returns 110 in Opensense over Wireguard Tunnel?

[stryk3rr3al 1]

Hello, 

I've followed the guide on the Opnsens page to setup selective routing to AirVPN over wireguard. 
Everything's working great except port forwarding over the VPN tunnel, it seems like the traffic is never even reaching the Wireguard WAN gateway I have setup because I don't see packets flowing in a packet capture for the forwarded port. 

I'm using the Fang server in Chicago and I've included serval screenshots of my OpnSense Wireguard config. 
Also I've tried manually creating a rule under the Wirguard_VPN_Wan instance with a reply to address as the Wireguard wan and that has not worked.
I also checked that the client was not blocking the connection, network adapter was set as private and firewall was disabled, yet applications are not receiving traffic over my forwarded ports. 
Can anyone here offer any insight into what the problem could be? I do have 1:1 Nat enabled, so external IP's can be accessed internally, but I'm not sure that would even cause problems with port forwarding. 

Does anyone have any suggestions or ideas for what could be broken in OpnSense, or what I'm doing wrong? 


















 

[stryk3rr3al 1]

Port forwarding is working now. 

Two things caused the issue for me. 
1. The default firewall rule created when port forwarding is broken.
2. The Antivirus software on my computer was blocking the connection. 

Fixes: 

Issue 1 --->
In case this helps anyone in future - When creating a port forward for a Wireguard interface in OPNSense, the automatic firewall that is created doesn't work.

To fix this, go to the wireguard interface firewall rules.  Create a new rule that's the same as the automatic firewall rule, except click "Advanced features: Show/Hide" and set "reply-to" to the wireguard interface.  Then go back to the port forward rule and set "Filter rule association" to "None" to remove the original (broken) firewall rule.

Issue 2 ---> 
Adjust the firewall rules on the computer to allow the connection