# Core 203 and wireguard

**URL:** <https://community.ipfire.org/t/core-203-and-wireguard/15981>\
**Category:** DNS\
**Created:** [21 July 2026 16:56 UTC](https://community.ipfire.org/t/core-203-and-wireguard/15981 "2026-07-21T16:56:58Z")\
**Posts on this page:** 18\
**Page:** 1

<div class="post-metadata">

**Author:** ![tg92](https://community.ipfire.org/user_avatar/community.ipfire.org/tg92/32/15444_2.png) [@tg92](https://community.ipfire.org/u/tg92)\
**Post date:** [21 July 2026 16:56 UTC](https://community.ipfire.org/t/core-203-and-wireguard/15981/1 "2026-07-21T16:56:58Z")

</div>

I have updated my ipfire core 202 to core 203. But My wireguard is not working anymore.  
I can connect to the vpn but I have no traffic on it. I am using it with my phone to secure my wifi access. But It is now impossible to connect to my DMZ at home or to navigate on internet.I don’t understand why. Do you have any idea?  
I have also a trouble with the DHCP on the green network, but after disable and enable it it is working fine like I read in another topic.

---

<div class="post-metadata">

**Author:** ![balooh](https://community.ipfire.org/user_avatar/community.ipfire.org/balooh/32/16088_2.png) [@balooh](https://community.ipfire.org/u/balooh)\
**Post date:** [21 July 2026 19:56 UTC](https://community.ipfire.org/t/core-203-and-wireguard/15981/2 "2026-07-21T19:56:43Z")

</div>

I have also a problem with Wireguard and update core 203. After update, DNS Resolution do not work. Allowed Subnet in the wireguard Settings was 0.0.0.0/0 → no resolution 4 internal or external network. I changed this setting do my Green Interface → external Nameresolution is now ok , internal nameresoluton do not work. On IPfire version 202 everything is working fine. nslookup server… shows:

NS request timed out.  
timeout was 2 seconds.  
Server: UnKnown  
Address: “IP of DNS-Server”

DNS request timed out.  
timeout was 2 seconds.  
DNS request timed out.  
timeout was 2 seconds.  
DNS request timed out.  
timeout was 2 seconds.  
DNS request timed out.  
timeout was 2 seconds.  
\*\*\* Zeitüberschreitung bei Anforderung an UnKnown.

---

<div class="post-metadata">

**Author:** ![tg92](https://community.ipfire.org/user_avatar/community.ipfire.org/tg92/32/15444_2.png) [@tg92](https://community.ipfire.org/u/tg92)\
**Post date:** [21 July 2026 20:37 UTC](https://community.ipfire.org/t/core-203-and-wireguard/15981/3 "2026-07-21T20:37:25Z")

</div>

thank you for this answer.  
I have also the settings 0.0.0.0/0 and the DNS on the green interface.  
So, if I have well understood, if I modify the settings 0.0.0.0/0 to the green interface. External name resolution will work but not the internal name resolution. Why not, I can do with this.  
My question is can I have traffic between the wireguard interface on the red one to navigate on internet?  
Because for me, 0.0.0.0/0 was useful to be able to access to all interfaces (green, orange and red) from the wireguard one. But If you set the green interface instead of 0.0.0.0/0 you can only link wireguard interface to the green interface. Other traffic are forbidden.

the link to the documentation. [www.ipfire.org - WireGuard](https://www.ipfire.org/docs/configuration/services/wireguard)  
You can also decide which networks the peer is able to reach. By default, this is 0.0.0.0/0 to have the client route everything through the tunnel, but you can change it to your GREEN network to only route traffic to the local net over the VPN connection.

---

<div class="post-metadata">

**Author:** ![ezyz](https://community.ipfire.org/user_avatar/community.ipfire.org/ezyz/32/15244_2.png) [@ezyz](https://community.ipfire.org/u/ezyz)\
**Post date:** [22 July 2026 08:48 UTC](https://community.ipfire.org/t/core-203-and-wireguard/15981/4 "2026-07-22T08:48:26Z")

</div>

I have the same problem. ~~I worked around it by creating DNAT rules for WireGuard traffic (udp 53) from the WG side to the red IP. I also have Kubernetes, and it’s experiencing the same issue, so I created DNAT rules for the 10.0.0.0/8 network as well.~~

in knot doc [Configuration — Knot Resolver 6.4.1 documentation](https://www.knot-resolver.cz/documentation/latest/gettingstarted-config.html) there is warning for using 0.0.0.0, so i have also tried to list all the interfaces and now it is working fine.

```auto
network:
  listen:
# - interface: 0.0.0.0@53
    - interface: lo # 127.0.0.1
    - interface: green0
    - interface: blue0
    - interface: orange0
    - interface: red0

```

---

<div class="post-metadata">

**Author:** ![jnko](https://community.ipfire.org/user_avatar/community.ipfire.org/jnko/32/15462_2.png) [@jnko](https://community.ipfire.org/u/jnko)\
**Post date:** [28 July 2026 07:55 UTC](https://community.ipfire.org/t/core-203-and-wireguard/15981/5 "2026-07-28T07:55:03Z")

</div>

You should create a bug report. Someone already created an issue with similar content:

> **[14024 – Knot Resolver crashes on too many host definitions using the same IP...](https://bugzilla.ipfire.org/show_bug.cgi?id=14024)**

Unfortunately I could not find the account registration page…

---

<div class="post-metadata">

**Author:** ![tphz](https://community.ipfire.org/user_avatar/community.ipfire.org/tphz/32/16551_2.png) [@tphz](https://community.ipfire.org/u/tphz)\
**Post date:** [28 July 2026 08:03 UTC](https://community.ipfire.org/t/core-203-and-wireguard/15981/6 "2026-07-28T08:03:26Z")

</div>

> [@jnko](#):
>
> Unfortunately I could not find the account registration page…

> The IPFire People email address and password also act as your IPFire Bugzilla login credentials.

> **[Bugzilla](https://www.ipfire.org/docs/devel/bugzilla)**

Best Regards

edit

 ![obraz](https://community.ipfire.org/uploads/default/original/3X/5/2/52c0987fe517a5f684326a204ded5e0277ef925b.png)  
 ![obraz](https://community.ipfire.org/uploads/default/original/3X/9/9/99a98c5b83506c7952096d7987f0d642b93caebb.png)

---

<div class="post-metadata">

**Author:** ![jnko](https://community.ipfire.org/user_avatar/community.ipfire.org/jnko/32/15462_2.png) [@jnko](https://community.ipfire.org/u/jnko)\
**Post date:** [28 July 2026 08:16 UTC](https://community.ipfire.org/t/core-203-and-wireguard/15981/7 "2026-07-28T08:16:01Z")

</div>

Aahh, I am able to login with my community account…

Somewhere in the documentation there is a link to an not existing page…

> **[Bugzilla](https://www.ipfire.org/docs/devel/bugzilla)**

---

<div class="post-metadata">

**Author:** ![bonnietwin](https://community.ipfire.org/user_avatar/community.ipfire.org/bonnietwin/32/12350_2.png) [@bonnietwin](https://community.ipfire.org/u/bonnietwin)\
**Post date:** [28 July 2026 08:26 UTC](https://community.ipfire.org/t/core-203-and-wireguard/15981/8 "2026-07-28T08:26:25Z")

</div>

> [@jnko](#):
>
> Somewhere in the documentation there is a link to an not existing page…

Where, which link? I just tried all the links on that page and all of them worked for me.

---

<div class="post-metadata">

**Author:** ![jnko](https://community.ipfire.org/user_avatar/community.ipfire.org/jnko/32/15462_2.png) [@jnko](https://community.ipfire.org/u/jnko)\
**Post date:** [28 July 2026 08:39 UTC](https://community.ipfire.org/t/core-203-and-wireguard/15981/9 "2026-07-28T08:39:21Z")

</div>

The “account” link points to `https://people.ipfire.org/register` and will re redirected to IPFire HP.

---

<div class="post-metadata">

**Author:** ![bonnietwin](https://community.ipfire.org/user_avatar/community.ipfire.org/bonnietwin/32/12350_2.png) [@bonnietwin](https://community.ipfire.org/u/bonnietwin)\
**Post date:** [28 July 2026 09:00 UTC](https://community.ipfire.org/t/core-203-and-wireguard/15981/10 "2026-07-28T09:00:00Z")

</div>

For me I got the following join page shown and it did not redirect to anywhere else.

 ![Screenshot_2026-07-28_10-55-38](https://community.ipfire.org/uploads/default/original/3X/5/7/57072b01d32e845b16dbc14b2e9cf488e7a421c5.png)

I am not sure what IPFire HP that you mention is.

The Join page is not of any use to you anyway as you have already joined otherwise you would not be able to post in this community forum.

---

<div class="post-metadata">

**Author:** ![jnko](https://community.ipfire.org/user_avatar/community.ipfire.org/jnko/32/15462_2.png) [@jnko](https://community.ipfire.org/u/jnko)\
**Post date:** [28 July 2026 09:01 UTC](https://community.ipfire.org/t/core-203-and-wireguard/15981/11 "2026-07-28T09:01:57Z")

</div>

> [@jnko](#):
>
> [www.ipfire.org - Join Our Community](https://people.ipfire.org/register)

Interesting!  
Brave/Chrome points to correct site, Firefox lands on homepage - wired…

---

<div class="post-metadata">

**Author:** ![bonnietwin](https://community.ipfire.org/user_avatar/community.ipfire.org/bonnietwin/32/12350_2.png) [@bonnietwin](https://community.ipfire.org/u/bonnietwin)\
**Post date:** [28 July 2026 09:03 UTC](https://community.ipfire.org/t/core-203-and-wireguard/15981/12 "2026-07-28T09:03:29Z")

</div>

I am using Firefox and for me it went to the right place.

---

<div class="post-metadata">

**Author:** ![jnko](https://community.ipfire.org/user_avatar/community.ipfire.org/jnko/32/15462_2.png) [@jnko](https://community.ipfire.org/u/jnko)\
**Post date:** [28 July 2026 09:06 UTC](https://community.ipfire.org/t/core-203-and-wireguard/15981/13 "2026-07-28T09:06:20Z")

</div>

![image](https://community.ipfire.org/uploads/default/original/3X/f/b/fb1fb37f6e7284513e6863d97ba8950439b9a257.png)

---

<div class="post-metadata">

**Author:** ![tphz](https://community.ipfire.org/user_avatar/community.ipfire.org/tphz/32/16551_2.png) [@tphz](https://community.ipfire.org/u/tphz)\
**Post date:** [28 July 2026 11:48 UTC](https://community.ipfire.org/t/core-203-and-wireguard/15981/14 "2026-07-28T11:48:27Z")

</div>

> [@jnko](#):
>
> Brave/Chrome points to correct site, Firefox lands on homepage - wired…

Chrome and Firefox “lands on homepage” if you were previously logged in 🤷

 ![obraz](https://community.ipfire.org/uploads/default/original/3X/d/3/d3684cc5bd9988a89c21b867914cdcaab1c75564.png)

Regards

---

<div class="post-metadata">

**Author:** ![bonnietwin](https://community.ipfire.org/user_avatar/community.ipfire.org/bonnietwin/32/12350_2.png) [@bonnietwin](https://community.ipfire.org/u/bonnietwin)\
**Post date:** [28 July 2026 12:08 UTC](https://community.ipfire.org/t/core-203-and-wireguard/15981/15 "2026-07-28T12:08:37Z")

</div>

Okay, I confirm that. However if you are logged in then you don’t need to register a new IPFire People account because you are already registered.

If you aren’t logged in then you get the Join page but if you then enter your existing username it will say that you can’t use it as it is already used.

So the link is for users who are not registered already with IPFire and therefore cannot log in to Community, People or Bugzilla.

---

<div class="post-metadata">

**Author:** ![jakoch](https://community.ipfire.org/user_avatar/community.ipfire.org/jakoch/32/15462_2.png) [@jakoch](https://community.ipfire.org/u/jakoch)\
**Post date:** [30 July 2026 11:28 UTC](https://community.ipfire.org/t/core-203-and-wireguard/15981/16 "2026-07-30T11:28:31Z")

</div>

I found out yesterday that I also have wireguard connection issues as described above. I have looked but can not find the actual “official” solution. I of course may have missed it. Does one exist?

---

<div class="post-metadata">

**Author:** ![tg92](https://community.ipfire.org/user_avatar/community.ipfire.org/tg92/32/15444_2.png) [@tg92](https://community.ipfire.org/u/tg92)\
**Post date:** [30 July 2026 17:12 UTC](https://community.ipfire.org/t/core-203-and-wireguard/15981/17 "2026-07-30T17:12:05Z")

</div>

there is a bug:

> **[14030 – DNS resolution via OpenVPN or Wireguard not possibe](https://bugzilla.ipfire.org/show_bug.cgi?id=14030)**

a workaround is described in a previous post.  
network:  
listen:

# - interface: 0.0.0.0@53

```
- interface: lo # 127.0.0.1
- interface: green0
- interface: blue0
- interface: orange0
- interface: red0

```

in file `/etc/knot-resolver/config.yaml`

---

<div class="post-metadata">

**Author:** ![kunta](https://community.ipfire.org/user_avatar/community.ipfire.org/kunta/32/16456_2.png) [@kunta](https://community.ipfire.org/u/kunta)\
**Post date:** [15 August 2026 07:09 UTC](https://community.ipfire.org/t/core-203-and-wireguard/15981/18 "2026-08-15T07:09:14Z")

</div>

Unfortunately, this does not work after reboot. Knot-resolver does not start automatically.

green0, blue0, red0… interfaces are initialized after DNS. DNS waits some time, than fails to start.

If you start knot resolver manually after reboot everything is ok.
