jdu

i figured it out. i had to change 0.0.0.0/0 to 0.0.0.0/1, 128.0.0.0/1

thanks, makes sense. i tried what you suggested but i have the same startup problem. there always seems to be the following error (both in privoxy and e.g. the prebuilt container you mentioned) in the log and then a message indicating that the wg interface couldn't come up: [#] sysctl -q net.ipv4.conf.all.src_valid_mark=1 [#] iptables-restore -n iptables-restore v1.8.10 (legacy): iptables-restore: unable to initialize table 'raw' Error occurred at line: 1 Try `iptables-restore -h' or 'iptables-restore --help' for more information.

I'm trying to start the privoxyvpn container using PIA with wireguard but I keep getting the following messages in the log when it tries to bring the interface up: 2024-09-03 18:15:08,600 DEBG 'start-script' stdout output: [info] Attempting to bring WireGuard interface 'up'... [debug] Running WireGuard kernel implementation... 2024-09-03 18:15:08,608 DEBG 'start-script' stderr output: Warning: `/config/wireguard/wg0.conf' is world accessible 2024-09-03 18:15:08,615 DEBG 'start-script' stderr output: [#] ip link add wg0 type wireguard 2024-09-03 18:15:08,617 DEBG 'start-script' stderr output: [#] wg setconf wg0 /dev/fd/63 2024-09-03 18:15:08,619 DEBG 'start-script' stderr output: [#] ip -4 address add 10.15.186.168 dev wg0 2024-09-03 18:15:08,625 DEBG 'start-script' stderr output: [#] ip link set mtu 1420 up dev wg0 2024-09-03 18:15:08,632 DEBG 'start-script' stderr output: [#] wg set wg0 fwmark 51820 2024-09-03 18:15:08,633 DEBG 'start-script' stderr output: [#] ip -4 route add 0.0.0.0/0 dev wg0 table 51820 2024-09-03 18:15:08,634 DEBG 'start-script' stderr output: [#] ip -4 rule add not fwmark 51820 table 51820 2024-09-03 18:15:08,635 DEBG 'start-script' stderr output: [#] ip -4 rule add table main suppress_prefixlength 0 2024-09-03 18:15:08,638 DEBG 'start-script' stderr output: [#] sysctl -q net.ipv4.conf.all.src_valid_mark=1 2024-09-03 18:15:08,639 DEBG 'start-script' stderr output: [#] iptables-restore -n 2024-09-03 18:15:08,644 DEBG 'start-script' stderr output: iptables-restore v1.8.10 (legacy): iptables-restore: unable to initialize table 'raw' Error occurred at line: 1 Try `iptables-restore -h' or 'iptables-restore --help' for more information. 2024-09-03 18:15:08,648 DEBG 'start-script' stderr output: [#] ip -4 rule delete table 51820 2024-09-03 18:15:08,652 DEBG 'start-script' stderr output: [#] ip -4 rule delete table main suppress_prefixlength 0 2024-09-03 18:15:08,658 DEBG 'start-script' stderr output: [#] ip link delete dev wg0 2024-09-03 18:15:08,701 DEBG 'start-script' stdout output: [warn] WireGuard interface failed to come 'up', exit code is '1' Also, I'm confused what the VPN_INPUT/OUTPUT_PORTS should be if I want to simply enable port forwarding for Qbittorrent. Please, can you offer any advice? docker run -d \ --sysctl="net.ipv4.conf.all.src_valid_mark=1" \ --privileged=true \ -p 8118:8118 \ -p 9118:9118 \ -p 58946:58946 \ -p 58946:58946/udp \ --name=privoxyvpn \ -v /share/data/privoxyvpn/config:/config \ -v /etc/localtime:/etc/localtime:ro \ -e VPN_ENABLED=yes \ -e VPN_USER=user \ -e VPN_PASS=pass \ -e VPN_PROV=pia \ -e VPN_CLIENT=wireguard \ -e ENABLE_STARTUP_SCRIPTS=no \ -e ENABLE_PRIVOXY=yes \ -e STRICT_PORT_FORWARD=yes \ -e USERSPACE_WIREGUARD=no \ -e ENABLE_SOCKS=yes \ -e SOCKS_USER=admin \ -e SOCKS_PASS=socks \ -e LAN_NETWORK=192.168.4.0/24 \ -e NAME_SERVERS=84.200.69.80,37.235.1.174,1.1.1.1,37.235.1.177,84.200.70.40,1.0.0.1 \ -e VPN_INPUT_PORTS=17309 \ #qbittorrent port?? -e VPN_OUTPUT_PORTS=17309 \ #qbittorrent port?? -e DEBUG=true \ -e UMASK=000 \ -e PUID=0 \ -e PGID=0 \ binhex/arch-privoxyvpn