[Bug 290768] if_wg(4): handshake response has src and dst reverse

From: <bugzilla-noreply_at_freebsd.org>
Date: Tue, 11 Nov 2025 15:23:03 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290768

--- Comment #14 from relvy <it@vineyard-sha.de> ---
(In reply to Kyle Evans from comment #13)

> a.b.c.d is external to your local network, correct?  Is there NAT involved for a.b.c.d to pass a packet in to 192.168.178.2?

Infrastructure:

LAN opnsense WAN ------------ opnsense WAN CARP -------------- Gateway --------
Internet ----- peer (road warrior)
            igc0                 192.168.178.2                                 
                   a.b.c.d

peer initiates handshake

LAN opnsense WAN ------------ opnsense WAN CARP -------------- Gateway --------
Internet ----- peer (road warrior)
            igc0              192.168.178.2:51820 <----- Port forwarding 
<----------------     a.b.c.d


outgoing traffic:

LAN opnsense WAN ------------ opnsense WAN CARP -------------- Gateway --------
Internet ----- peer (road warrior)
            igc0 -- outbound NAT --> 192.168.178.2
--------------------------------------------->   a.b.c.d

-- 
You are receiving this mail because:
You are the assignee for the bug.