Wireguard VPN before Tor

Support
1

Hello.

Trying to setup User → VPN → Tor → Internet using Wireguard.

This is the content of /etc/whonix_firewall.d/50_user.conf file:

VPN_FIREWALL=1
VPN_INTERFACE=wg0

Here is /etc/wireguard/wg0.conf:

[Interface]
# Device: Exotic Devy
PrivateKey = <prkey>
Address = 10.71.133.230/32
DNS = 10.64.0.1

[Peer]
PublicKey = <pbkey>
AllowedIPs = 0.0.0.0/0
Endpoint = 146.11.111.11:51820

Tried to set it up using wg-quick, but it messes with route tables, so it didn’t work out.

Then I noticed that I can’t even ping WG server, so for the tests sake, added

`sudo nft insert rule inet filter output ip daddr 146.11.111.11 accept`

rule to nf.

WG server is accessible now, but Tor logs are still flooded with

 15:28:23 [WARN] 1299 connections have failed:
 15:28:23 [WARN]  1298 connections died in state connect()ing with SSL state
   (No SSL object)
 15:28:23 [WARN] 1298 connections have failed:
 15:28:23 [WARN]  1297 connections died in state connect()ing with SSL state
   (No SSL object)

and

wg show wg0

doesn’t display handshake.

How to make it work? Any ideas?

2