While experimenting with ProtonVPN’s Wireguard configs, I realized that my real IPv6 address was leaking while IPv4 was correctly going through the tunnel. How do I prevent this from happening?
I’ve already tried adding ::/0 to the AllowedIPs option and IPv6 is listed as disabled in the NetworkManager profile.
Maybe you need to set up an iptables firewall rule? In this document they call it kill switch.
BTW. Mullvad has many usefull WG generic guides in their help section.
Thanks! This works, but only if I use
wg-quick. If I import the connection into KDE’s NetworkManager it doesn’t. I am assuming its because it isn’t running thePreDownandPostUpcommands.Hmm, I found that https://feeding.cloud.geek.nz/posts/using-iptables-with-network-manager/
But it seems to be fairly complex and you would even have to change the script to only handle the WG device.