I've been playing around with trying to get VPN working via the built-in VPN settings. I'm using Nord and I've extracted by private key, calculated my public key and know where to connect to, port, and public key for the nord server.

I had all kinds of issues getting it going the 1st time, and decided to start over so I deleted the tunnel. I was testing with Firefox and I could not get it to connect to VPN no matter what I tried, after deleting the tunnel I couldn't connect to sites with the network set to bridge, but I could with it set to host. I eventually started over with Firefox, removed the docker, grabbed a fresh copy and it was working as expected. I then went back to the VPN settings and configured everything, the tunnel came up, I was getting bytes in and out. I set the network for Firefox to WG0 and was able to connect to the webUI, but it was extremely slow to type/click in the ui. I then went back out and switched back to Bridge and it was fine.

I have no idea, but after causing a loop in the network which effectively locked me out of the web interface, and correcting it I Firefox is showing the IP of my VPN, however using dnsleaktest with either the standard or extendned tests I can see my ISP's ip address.

Consulting an AI it suggests:

# This forces the Firefox bridge to ONLY talk to the WireGuard interface

iptables -A FORWARD -s 172.17.0.0/16 ! -o wg0 -j REJECT

But frankly I don't think that's likely the right or best answer. Does anyone have any suggestions?

I'm very suprised that there's not more setup guides for Nordlynx in Unraid unless I'm missing them, I see SpaceInvader has videos out for PIA. And Nord was a huge PIA to get keys out of, I don't know why they don't make that easy. My Nord sub is up in June of 27, should I be looking to switch (as a side question)?

In case anyone comes upon this topic in the future I was able to close the leak by adding --dns=(DNS of VPN service) to the Extra Parameters of the docker container.