Switch Internet Access for WireGuard | Notion

wg0 server

PostUp

# masquerade eth0
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE; ip6tables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

PostDown

# unmasquerade eth0
iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE; ip6tables -t nat -D POSTROUTING -o eth0 -j MASQUERADE

wg1 client

PostUp

# unmasquerade eth0
iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE; ip6tables -t nat -D POSTROUTING -o eth0 -j MASQUERADE

# masquerade wg1
iptables -t nat -A POSTROUTING -o wg1 -j MASQUERADE; ip6tables -t nat -A POSTROUTING -o wg1 -j MASQUERADE

PostDown

# unmasquerade wg1
iptables -t nat -D POSTROUTING -o wg1 -j MASQUERADE; ip6tables -t nat -D POSTROUTING -o wg1 -j MASQUERADE

# masquerade eth0
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE; ip6tables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

Access to server IP

PostUp = ip rule add from "ServerIP" lookup main
PreDown = ip rule del from "ServerIP" lookup main