Re: Add local DNS forwarder to Windows client

2020-11-10 Thread Der PCFreak
Hi, you are wrong! For example, my dwood3rc.txt (only partially) file looks like this: upstream_servers = {} # Initialize dictionary variable upstream_servers["internal."]="192.168.178.1, 192.168.178.2, 192.168.178.3"   # local DNS serv

Re: Actual plans for Windows client: PostUp/PreDown possible?

2020-11-10 Thread Simon Rozman
Hi! WireGuard for Windows and OpenVPN are fundamentally different. Consider WireGuard on Windows as an "always-on" VPN. Once configured by admin, it is just always there, and users don't need to explicitly connect or disconnect. Trust me, this is something your users will grow to love - no sear

Re: Add local DNS forwarder to Windows client

2020-11-10 Thread Tomcsanyi, Domonkos
Hello Yves, Thanks for your reply. Let me answer each point inline: > It's not quite that simple. I'll have to find a DNS proxy that does > what is required to make this scenario work. There is no > hostname/domain pattern because all hosts on a LAN have no dot in > them, just names alone. And n

Re: Add local DNS forwarder to Windows client

2020-11-10 Thread Matthias Urlichs
On 10.11.20 16:38, Yves Goergen wrote: This is not a solution to my problem. And I still refuse to believe that my problem is exotic. Every home LAN has this. Which "every" home LAN has two resolvers, none of them being authoritative? Mine certainly doesn't. >  So if your first DNS is up but

Re: [PATCH AUTOSEL 5.9 26/55] wireguard: selftests: check that route_me_harder packets use the right sk

2020-11-10 Thread Greg KH
On Tue, Nov 10, 2020 at 01:29:41PM +0100, Jason A. Donenfeld wrote: > Note that this requires > https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=46d6c5ae953cc0be38efd0e469284df7c4328cf8 > And that commit should be backported to every kernel ever, since the > bug is so o

Re: Add local DNS forwarder to Windows client

2020-11-10 Thread Yves Goergen
I just read through the 'upstream_servers' section of the Deadwood DNS resolver. And it doesn't seem to do what I need. I'll have to specify a fixed DNS server for a fixed name suffix. This is not possible on LANs where there are no suffixes, as I already described. Setting multiple upstreams for t

Re: No longer compiles on 5.4.76

2020-11-10 Thread Roman Mamedov
On Tue, 10 Nov 2020 18:56:56 +0500 Roman Mamedov wrote: > Hello, > > Building kernel 5.4.76 with WireGuard v1.0.20200908 fails for me now with: > > AS [M] net/wireguard/crypto/zinc/chacha20/chacha20-x86_64.o > In file included from : > ././net/wireguard/compat/compat-asm.h:44: warning: "SYM_

No longer compiles on 5.4.76

2020-11-10 Thread Roman Mamedov
Hello, Building kernel 5.4.76 with WireGuard v1.0.20200908 fails for me now with: AS [M] net/wireguard/crypto/zinc/chacha20/chacha20-x86_64.o In file included from : ././net/wireguard/compat/compat-asm.h:44: warning: "SYM_FUNC_START" redefined #define SYM_FUNC_START ENTRY In file included f

Re: WireGuard-Android QR code import disappeared from chromebook

2020-11-10 Thread Jason A. Donenfeld
Hi Jay, Sorry for breaking your flow and the late reply here. Fixed now, and will be available in the next release: https://git.zx2c4.com/wireguard-android/commit/?id=a300f269f154eddc244fe7fc3f8de556c6172993 Jason

Re: Should we sunset Windows 7 support?

2020-11-10 Thread Jason A. Donenfeld
On Tue, Nov 10, 2020 at 2:05 PM wrote: > FWIW, Microsoft sells extended support (Windows 7 ESU) to corporate > customers using Pro or Enterprise editions. It can be extended until Jan > 10th 2023. > > https://docs.microsoft.com/en-us/troubleshoot/windows-client/windows-7-eos-f > aq/windows-7-exten

Re: MacOS: Can't have multiple on-demand tunnels

2020-11-10 Thread Jasper Knockaert
Hi On 31 Oct 2020, at 12:31, Alexander A. Klimov wrote: Has anyone seen this problem, too? https://youtu.be/qkRmzvnhfzQ Does anyone even know how to workaround it? I can confirm this. You can have only one on-demand tunnel on a mac. Even when having multiple user accounts only one user can

Re: Should we sunset Windows 7 support?

2020-11-10 Thread Isaac Boukris
Hello, New to the list :) On Tue, Nov 10, 2020 at 1:30 PM Jason A. Donenfeld wrote: > > Hi, > > Windows 7 has been EOL'd by Microsoft since January of this year. It > is no longer receiving security updates or fixes. This email is to get > the conversation started about doing the same with WireG

Wireguard-go: How fast wireguard-go devices startup?

2020-11-10 Thread Denis Tingajkin
Hello, During testing wireguard-go device between two k8s clusters, we found that sometimes devices could long start (~30 sec) (we expected < ~15s) Question: Do you have any benchmarks on the startup of wireguard device? (if yes, what is the duration expected?) Logs: DEBUG: Wireguard Devi

Re: Add local DNS forwarder to Windows client

2020-11-10 Thread Der PCFreak
Hi, concerning local DNS forwarder. I am in an environment where I need to resolve public DNS names to local IPs for specific hosts and additionally public DNS for the rest. In Windows XP it was possible to just stop the DNS cache service and set 2 DNS servers and everything worked. Newer vers

Actual plans for Windows client: PostUp/PreDown possible?

2020-11-10 Thread Stefan Puch
Hello! I’d like to raise the question regarding an option for PostUp/PreDown with the Windows client again, which was (to my research) first discussed here on the mailing list at the beginning of December 2019 by Rémi and Jason A. I thought about switching our OpenVPN setup to the modern Wireguar

MacOS: Can't have multiple on-demand tunnels

2020-11-10 Thread Alexander A. Klimov
Hello there! Has anyone seen this problem, too? https://youtu.be/qkRmzvnhfzQ Does anyone even know how to workaround it? Best, AK

MacOS: DNS setting has no effect if the tunnel is not the default gw

2020-11-10 Thread Alexander A. Klimov
Hello there! I have two almost identical tunnels. The only difference: -AllowedIPs=0.0.0.0/0, ::/0 +AllowedIPs=192.168.234.153/32, 64:ff9b::192.168.234.153/128, 192.168.234.186/32, 64:ff9b::192.168.234.186/128 The first one's setting DNS=192.168.234.153 has an effect, the second one's not.

RE: Should we sunset Windows 7 support?

2020-11-10 Thread samuel.progin
Dear all, FWIW, Microsoft sells extended support (Windows 7 ESU) to corporate customers using Pro or Enterprise editions. It can be extended until Jan 10th 2023. https://docs.microsoft.com/en-us/troubleshoot/windows-client/windows-7-eos-f aq/windows-7-extended-security-updates-faq Kind regards.

Re: Should we sunset Windows 7 support?

2020-11-10 Thread Laslo Hunhold
On Tue, 10 Nov 2020 13:27:20 +0100 "Jason A. Donenfeld" wrote: Dear Jason, > Windows 7 has been EOL'd by Microsoft since January of this year. It > is no longer receiving security updates or fixes. This email is to get > the conversation started about doing the same with WireGuard for > Windows.

Re: [PATCH AUTOSEL 5.9 26/55] wireguard: selftests: check that route_me_harder packets use the right sk

2020-11-10 Thread Jason A. Donenfeld
Note that this requires https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=46d6c5ae953cc0be38efd0e469284df7c4328cf8 And that commit should be backported to every kernel ever, since the bug is so old.

Should we sunset Windows 7 support?

2020-11-10 Thread Jason A. Donenfeld
Hi, Windows 7 has been EOL'd by Microsoft since January of this year. It is no longer receiving security updates or fixes. This email is to get the conversation started about doing the same with WireGuard for Windows. Supporting Windows 7 is an ongoing maintenance burden. For example, we use SHA2

Fwd: Add local DNS forwarder to Windows client

2020-11-10 Thread Yves Goergen
Oops, Google Mail cannot reply to all including the mailing list? Why can't we have a normal web forum here? -- Forwarded message - Von: Yves Goergen Date: Di., 10. Nov. 2020 um 11:45 Uhr Subject: Re: Add local DNS forwarder to Windows client To: Tomcsanyi, Domonkos Hello Domi

Re: Transient Connection Issue

2020-11-10 Thread Mo Balaa
Check your MTU across your paths. In my experience, transient connection issues are due to MTU oversize. > On Nov 10, 2020, at 2:20 AM, Tomcsanyi, Domonkos wrote: > > Hi Ashish, > > With the amount of information given it is very hard to comment anything > meaningful. > Have you gone throu

Re: Transient Connection Issue

2020-11-10 Thread Tomcsanyi, Domonkos
Hi Ashish, With the amount of information given it is very hard to comment anything meaningful. Have you gone through standard network connectivity issue investigation steps? E.g.: does ping work? Do you have correct routes setup? What does wg show tell during downtime? What does tcpdump shows o

Re: Add local DNS forwarder to Windows client

2020-11-10 Thread Tomcsanyi, Domonkos
Hello Yves, I am by no means a person with authority to make such a decision, but your usecase seems to be so specific I would not imagine it would make sense to blow up the size and complexity of the Windows wg with a local DNS forwarder. I think it is way better if people just install a local