gargoyle icon indicating copy to clipboard operation
gargoyle copied to clipboard

Can't Access USB FTP Storage via Wireguard

Open n4b7l opened this issue 2 years ago • 5 comments

USB FTP storage (Plugin) working fine while connected to local network. Recently I have installed Wireguard (Plugin) and I can't access USB FTP storage while connected to Wireguard VPN. However, when I disconnect from VPN it's working again

I am using Linksys 1900ACS router running version 1.13.0

n4b7l avatar Feb 13 '24 20:02 n4b7l

Is Gargoyle configured as a WireGuard server or client? What device are you trying to access the FTP share from? How is that device connected to Gargoyle? Assuming Gargoyle is a WG Server, are you connecting from externally (i.e. WAN)?

lantis1008 avatar Feb 13 '24 21:02 lantis1008

WireGuard running as server. Normally when I connect to FTP via WIFI it works perfectly fine. I am able to connect to WireGuard from WAN (mobile data), However, can't access FTP via WireGuard while connected using mobile data

I am using FTP client from F-droid https://f-droid.org/en/packages/de.qwerty287.ftpclient/

n4b7l avatar Feb 14 '24 09:02 n4b7l

I wasn't fully able to work this out, but I did discover some things. FTP works if you set your Wireguard client to AllowedIPs 0.0.0.0/0 In Gargoyle this is achieved by setting Clients Use Wireguard For: All client traffic. You can also just manually adjust your client config on your device.

If you don't do this and only have the router subnets specified, I think the packets are getting misrouted at one end or rejected by the Wireguard client. If this config is suitable for you, that works.

Another option is Samba (SMB). To make this work you need to modify /etc/config/ksmbd and under the 'globals' section add option interface 'br-lan wg0' This will make ksmbd listen on the Wireguard interface as well and SMB will work fine.

I'm going to leave this issue open in case someone has some better ideas, but for the moment I can't figure out anything better.

lantis1008 avatar Feb 16 '24 10:02 lantis1008

I tried with AllowedIP 0.0.0.0/0 and it didn't work!

n4b7l avatar Feb 16 '24 11:02 n4b7l

Maybe you need to check your configuration, or provide additional details of your WireGuard configuration and vsftpd

lantis1008 avatar Feb 16 '24 11:02 lantis1008