Using Mullvad VPN (WireGuard) on RPi 3B, LE 9.2.8

clriis · March 29, 2022 at 8:41 PM

I've been trying to connect my LibreELEC RPi to Mullvad through WireGuard but is somehow defeated. After reading older posts I gathered that the "connman" configuration utility is a work in progress and disabled it for wg0 in order to use standard WireGuard configuration.

The connection info I get from Mullvad looks like this:

Code

[Interface]
PrivateKey = SP+xWEQJEz/qmowAsMcvdirOM+zUoIhMO1Pq5GRjAVc=
Address = 10.67.246.80/32,fc00:bbbb:bbbb:bb01::4:f64f/128
DNS = 100.64.0.3

[Peer]
PublicKey = dEtwYUFPV0pF7MWJpzo+AixB2CdEIXxBQcQg1ljQkVo=
AllowedIPs = 0.0.0.0/0,::0/0
Endpoint = 198.54.128.82:51820

Then I implemented the guidelines given by ninze : RE: wireguard troubleshooting : no reply

My config files look like this:

system.d/wg0.service:

Code

[Unit]
Description=start wireguard interface
Requires=network-online.service
After=time-sync.target
Before=kodi.service

[Service]
Type=oneshot
RemainAfterExit=true
StandardOutput=journal

ExecStart=ip link add dev wg0 type wireguard
ExecStart=ip address add dev wg0 10.67.246.80/32
ExecStart=wg setconf wg0 /storage/.config/wireguard/wg0.conf
ExecStart=ip link set up dev wg0

ExecStop=ip link set down dev wg0
ExecStop=ip address del dev wg0 10.67.246.80/32
ExecStop=ip link del dev wg0

[Install]
WantedBy=multi-user.target

Display More

wireguard/wg0.conf

Code

[Interface]
ListenPort = 51820
PrivateKey = SP+xWEQJEz/qmowAsMcvdirOM+zUoIhMO1Pq5GRjAVc=
DNS = 100.64.0.3

[Peer]
PublicKey = MRZsEblqO4wlq0WPnZgp5X9ex4Z2FHm9bljO/a/Mznk=
AllowedIPs = 0.0.0.0/0
Endpoint = 68.235.43.82:51820

When starting wg0 i get an error and <systemctl status wg0> shows this:

elonesna · March 29, 2022 at 9:20 PM

My "RTNETLINK answers:File exist" errors are fixed by replacing

AllowedIPs = 0.0.0.0/0

by

AllowedIPs = 0.0.0.0/1,128.0.0.0/1

This is explained at https://www.wireguard.com/netns but I do not know the reason for this error, perhaps there is someone here who is able to explain it to us.

clriis · March 29, 2022 at 11:38 PM

Thanks elonesna .

Now at least the interface is up.

Unfortunately there is no handshake:

elonesna · March 30, 2022 at 10:23 AM

I use three protection systems on my home network: pihole with over 1.5 million domains blocked, skynet firewall with over 40,000 IP addresses (and over 1,700 ranges) blocked, and Trend Micro protection. Well, pihole protection system of my home network prevent me from accessing mullvad.net, and when I add this domain to the white list, then the Trend Micro protection of my router appears. In short mullvad.net is unsafe for me.