Pfsense to Ubuntu wireguard VPN issue

Networking & Firewalls
1

I have a strange situation.
Im trying to NAT all the traffic from a specific Vlan on a Wireguard VPN and is not working properly. Wireguard tunnel is up and running fine. From the Vlan 25 clients Im able to access some websites and ping/traceroute this sites (ex: duckduckgo. com, Kernel. org) but some other sites are not working (Ex: Google. com and most of the sites)

Untitled Diagram.drawio(2)
Untitled Diagram.drawio(2)932×687 36.9 KB

192.168.25.253 is the IP of the Pfsense em0.25 interface.
10.0.0.2 is the IP of the Pfsense tun_wg0 interface
10.0.0.1 is the IP of the Ubuntu Box wg0 interface

A traceroute for google from a client in Vlan 25 is getting error.

tracert -d google. com

Tracing route to google.com [172.217.16.238]
over a maximum of 30 hops:

1 192.168.25.253 reports: Destination host unreachable.

Trace complete.

A traceroute for duckduckgo from the same client in Vlan 25 is ok

tracert -d duckduckgo.com

Tracing route to duckduckgo. com [52.142.124.215]
over a maximum of 30 hops:

1 54 ms 53 ms 54 ms 10.0.0.1
2 56 ms 56 ms 55 ms xxx.xxx.xx.xx
3 87 ms 88 ms 88 ms 104.44.197.203
4 87 ms 85 ms 88 ms 104.44.230.249
5 108 ms 108 ms 108 ms 104.44.20.15
6 112 ms 111 ms 112 ms 104.44.17.187
7 154 ms 108 ms 111 ms 104.44.29.35
8 112 ms 109 ms 109 ms 104.44.30.59
9 106 ms 109 ms 105 ms 104.44.11.82

2

Make sure you have all the outbound NAT setup properly. I don’t have any videos on it yet, but the developer does.

3

Thanks for pointing me into the proper direction. I was having a issue with the gateway setup for the Wireguard interface, I had setup the gw to the server side IP.
Looks like Wireguard needs to use the local end side IP of the tunnel as gw.

The correct video for my problem is the bellow one.