[Bug 290768] if_wg(4): handshake response has src and dst reverse

From: <bugzilla-noreply_at_freebsd.org>
Date: Thu, 11 Dec 2025 11:19:14 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290768

--- Comment #33 from relvy <it@vineyard-sha.de> ---
OpnSense provided a FreeBSD 15.0 kernel for testing.

I can still reproduce the issue.

pfctl -s states | fgrep 51820
all udp 10.2.1.30:51820 <- a.b.c.d:42501       NO_TRAFFIC:SINGLE
all udp a.b.c.d:42501 -> 10.2.1.30:51820       SINGLE:NO_TRAFFIC

tcpdump:
12:03:03.697882 IP a.b.c.d.42501 > 10.2.1.30.51820: UDP, length 148
12:03:03.697904 IP a.b.c.d.42501 > 10.2.1.30.51820: UDP, length 148
12:03:03.700075 IP a.b.c.d.42501 > 10.2.1.30.51820: UDP, length 148
12:03:03.700098 IP a.b.c.d.42501 > 10.2.1.30.51820: UDP, length 148

dmesg:
[14] wg1: Handshake for peer 1 did not complete after 5 seconds, retrying (try
2)
[14] wg1: Sending handshake initiation to peer 1
[14] wg1: Unable to send packet: 47

wg show:
interface: wg1
  public key: <secret>
  listening port: 51820

peer: <secret>
  allowed ips: 10.251.0.4/32
  transfer: 0 B received, 23.12 KiB sent
  persistent keepalive: every 30 seconds

-- 
You are receiving this mail because:
You are the assignee for the bug.