I had similar problem and have found solution, so maybe my example will help someone. I had wireguard config set as shown at wireguard tutorial, with local server not using NAT, with forwarded ports on router and added static route from wireguard network pool to unraid ip. Peer access was set to remote tunneled access and what happened was I could connect via wireguard and could reach server ip and all dockers running on the same addres, I could reach physical router on my network, as well as adguard docker running on custom network with its own ip. But nothing else, I couldn't reach any other devices on my LAN or anything outside my LAN (no internet access). What worked for me was addition of postrouting to iptables in unraid console: iptables -t nat -A POSTROUTING -s 10.253.0.0/24 -o shim-br0 -j MASQUERADEI have both br0 and shim-br0 interfaces on my unraid, but setting the first one didn't work for me. As far as I know this setting is not persistent so it has to be done at each server reboot. I have used user scripts for that. I hope this helps someone.