Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can't Access USB FTP Storage via Wireguard #999

Open
n4b7l opened this issue Feb 13, 2024 · 5 comments
Open

Can't Access USB FTP Storage via Wireguard #999

n4b7l opened this issue Feb 13, 2024 · 5 comments

Comments

@n4b7l
Copy link

n4b7l commented Feb 13, 2024

USB FTP storage (Plugin) working fine while connected to local network. Recently I have installed Wireguard (Plugin) and I can't access USB FTP storage while connected to Wireguard VPN. However, when I disconnect from VPN it's working again

I am using Linksys 1900ACS router running version 1.13.0

@lantis1008
Copy link
Contributor

Is Gargoyle configured as a WireGuard server or client?
What device are you trying to access the FTP share from?
How is that device connected to Gargoyle? Assuming Gargoyle is a WG Server, are you connecting from externally (i.e. WAN)?

@n4b7l
Copy link
Author

n4b7l commented Feb 14, 2024

WireGuard running as server. Normally when I connect to FTP via WIFI it works perfectly fine. I am able to connect to WireGuard from WAN (mobile data), However, can't access FTP via WireGuard while connected using mobile data

I am using FTP client from F-droid
https://f-droid.org/en/packages/de.qwerty287.ftpclient/

@lantis1008
Copy link
Contributor

I wasn't fully able to work this out, but I did discover some things.
FTP works if you set your Wireguard client to AllowedIPs 0.0.0.0/0
In Gargoyle this is achieved by setting Clients Use Wireguard For: All client traffic. You can also just manually adjust your client config on your device.

If you don't do this and only have the router subnets specified, I think the packets are getting misrouted at one end or rejected by the Wireguard client.
If this config is suitable for you, that works.

Another option is Samba (SMB).
To make this work you need to modify /etc/config/ksmbd and under the 'globals' section add
option interface 'br-lan wg0'
This will make ksmbd listen on the Wireguard interface as well and SMB will work fine.

I'm going to leave this issue open in case someone has some better ideas, but for the moment I can't figure out anything better.

@n4b7l
Copy link
Author

n4b7l commented Feb 16, 2024

I tried with AllowedIP 0.0.0.0/0 and it didn't work!

@lantis1008
Copy link
Contributor

Maybe you need to check your configuration, or provide additional details of your WireGuard configuration and vsftpd

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants