i setup a home serever and done via wireguard as my ISP is CGNAted. everything is working fine and my sites are accessible mobiles and other non wireguard clients. but i cant reach my site on wireguard server and client. it says connection refused.
pls note – ufw disbaled on both vps and home server
curl -kv https://mysite.com -> says connecting from 10.66.66.2 to dns ip and refused connection.
wg server (VPS)-> 10.66.66.1
allowed ips – 10.66.66.2
======================
wg client (home server) -> 10.66.66.2
allowed ips – 0.0.0.0/0
==========================
[Interface]
Address = 10.66.66.1/24,fd42:42:42::1/64
ListenPort = 50652
PrivateKey = [privkey]
PostUp = iptables -I INPUT -p udp --dport 50652 -j ACCEPT
PostUp = iptables -I FORWARD -i eth0 -o wg0 -j ACCEPT
PostUp = iptables -I FORWARD -i wg0 -j ACCEPT
PostUp = iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
PostUp = ip6tables -I FORWARD -i wg0 -j ACCEPT
PostUp = ip6tables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
PostDown = iptables -D INPUT -p udp --dport 50652 -j ACCEPT
PostDown = iptables -D FORWARD -i eth0 -o wg0 -j ACCEPT
PostDown = iptables -D FORWARD -i wg0 -j ACCEPT
PostDown = iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
PostDown = ip6tables -D FORWARD -i wg0 -j ACCEPT
PostDown = ip6tables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
PostUp = iptables -t nat -A PREROUTING -p tcp -i eth0 '!' --dport 22 -j DNAT --to-destination 10.66.66.2; iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to-source vps.public.ip
PostUp = iptables -t nat -A PREROUTING -p udp -i eth0 '!' --dport 50652 -j DNAT --to-destination 10.66.66.2;
PostDown = iptables -t nat -D PREROUTING -p tcp -i eth0 '!' --dport 22 -j DNAT --to-destination 10.66.66.2; iptables -t nat -D POSTROUTING -o eth0 -j SNAT --to-source vps.public.ip
PostDown = iptables -t nat -D PREROUTING -p udp -i eth0 '!' --dport 50652 -j DNAT --to-destination 10.66.66.2;
[Peer]
PublicKey = key
AllowedIPs = 10.66.66.2/32,fd42:42:42::3/128
