bnovotny

Welp @binhex, never thought I'd hit a roadblock like this but here we are 2 hours of troubleshooting later.😂 I'm having an issue with remote access via my WireGuard server affecting only this docker container. everything works as expected on LAN including sonarr and jackett that hang off of the network on the container via -network=container:containerName. on my VPN I can ping my client machine through the tunnel from the container, qbitorrent living on 8080 is accessible, but ICMP doesn't pass and sonarr and jackett are unreachable (essentially one way traffic). I've tried making a few iptables changes to allow my "192.168.2.0/24" VPN subnet through, essentially just copying what is permitted for the "192.168.1.1/24" network. I'm stumped and pretty sure I just suck at iptables, any help is appreciated. docker run -d --name='binhex-qbittorrentvpn' --net='br0' --ip='192.168.1.12' --privileged=true -e TZ="America/Phoenix" -e HOST_OS="Unraid" -e HOST_HOSTNAME="HotBox" -e HOST_CONTAINERNAME="binhex-qbittorrentvpn" -e 'TCP_PORT_6881'='6881' -e 'UDP_PORT_6881'='6881' -e 'TCP_PORT_8080'='8080' -e 'TCP_PORT_8118'='8118' -e 'VPN_ENABLED'='yes' -e 'VPN_USER'='xxxxxx' -e 'VPN_PASS'='xxxxxx' -e 'VPN_PROV'='pia' -e 'VPN_CLIENT'='wireguard' -e 'VPN_OPTIONS'='' -e 'STRICT_PORT_FORWARD'='yes' -e 'ENABLE_PRIVOXY'='no' -e 'WEBUI_PORT'='8080' -e 'LAN_NETWORK'='192.168.1.0/24,192.168.2.0/24' -e 'NAME_SERVERS'='84.200.69.80,37.235.1.174,1.1.1.1,37.235.1.177,84.200.70.40,1.0.0.1' -e 'VPN_INPUT_PORTS'='' -e 'VPN_OUTPUT_PORTS'='' -e 'DEBUG'='false' -e 'UMASK'='000' -e 'PUID'='99' -e 'PGID'='100' -l net.unraid.docker.managed=dockerman -l net.unraid.docker.webui='http://[IP]:[PORT:8080]/' -l net.unraid.docker.icon='https://raw.githubusercontent.com/binhex/docker-templates/master/binhex/images/qbittorrent-icon.png' -v '/mnt/user/data/torrents/':'/data':'rw' -v '/mnt/user/appdata/binhex-qbittorrentvpn':'/config':'rw' --sysctl="net.ipv4.conf.all.src_valid_mark=1" 'binhex/arch-qbittorrentvpn' f31f91700b2a9888f3b410f24e123f8bce3e9a448b13904ec73fd564b33efe99 Attempted IP tables fix iptables -I INPUT 8 -s 192.168.2.0/24 -d 192.168.2.0/24 -j ACCEPT iptables -I INPUT 22 -s 192.168.2.0/24 -d 192.168.2.0/24 -j ACCEPT iptables -I OUTPUT 8 -s 192.168.2.0/24 -d 192.168.2.0/24 -j ACCEPT iptables -I OUTPUT 22 -s 192.168.2.0/24 -d 192.168.2.0/24 -j ACCEPT Attached supervisord.log supervisord.log