From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-0.5 required=3.0 tests=DKIM_INVALID,DKIM_SIGNED, HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,MAILING_LIST_MULTI,SPF_HELO_NONE, SPF_PASS,URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 866EEC43331 for ; Fri, 6 Sep 2019 21:55:16 +0000 (UTC) Received: from krantz.zx2c4.com (krantz.zx2c4.com [192.95.5.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 124CB2082C for ; Fri, 6 Sep 2019 21:55:15 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=fail reason="signature verification failed" (1024-bit key) header.d=frederickding.com header.i=@frederickding.com header.b="kwSQXNVQ" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 124CB2082C Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=frederickding.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=wireguard-bounces@lists.zx2c4.com Received: from krantz.zx2c4.com (localhost [IPv6:::1]) by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 0c1e4e8b; Fri, 6 Sep 2019 21:54:58 +0000 (UTC) Received: from krantz.zx2c4.com (localhost [127.0.0.1]) by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 37dfa4d7 for ; Fri, 6 Sep 2019 21:08:10 +0000 (UTC) Received: from mail-yw1-xc43.google.com (mail-yw1-xc43.google.com [IPv6:2607:f8b0:4864:20::c43]) by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 1f8c59a6 for ; Fri, 6 Sep 2019 21:08:09 +0000 (UTC) Received: by mail-yw1-xc43.google.com with SMTP id n126so2761982ywf.1 for ; Fri, 06 Sep 2019 14:08:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=frederickding.com; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=lnHtFTdQBZNupMoiv6FQHdKN6GtAuICA9P/vdQRUTs8=; b=kwSQXNVQAfcfNTVC23IPkYn3BoeuG4jCy6JSuHh2lG8mHi4zk04k0RNH0EPKAFsbO8 BXjeU6YN0yPzv7oGN7GaHqqt0BMO8bfXbjrqpm8t/fuPkeQLUTG2Z2iLfIOJelee+Sla eo3OnFTjCL7P7q48jvCDyZFceteFV+Jqy0Nj0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=lnHtFTdQBZNupMoiv6FQHdKN6GtAuICA9P/vdQRUTs8=; b=YEg148fie6DLsjGEknI9sr9RT2ZpTlLqzGP4RxEnZDrY/KayU/Mqmd6S1TI2RJlS6s RyZIlkDtMYENjEr/ZHsJMQuBcWwF/toMXh9mHz5PAzOMjrYdsSOebEwSom/iecyW2XuM OLnNgez6crXca/9aDROczVhKcu+RnZ1Id176u8b+okFQzhVMmOllIgSnrjHN0lE6nud1 1SWdRXIFsFKOQThgN8bQ4x9g3rw34sci1ca8l2A8NCKaOW7XsI0QndboqvhicVEwfpIr y8SXUu4ZGAk9AYGYeWPaw34TaMLF+SMSbB73b65BwjG6rQuUVF1fq0nrgg868hwMrwot 0+SQ== X-Gm-Message-State: APjAAAVVnaPRgyutzdLEGi9OUuCIsepwENtu0RGv7Wwd8MYCaE+K13qq 6GCSZJRka8aAcMhSnEhopAN+IpU8zgC9GI3xanDqC4tv9eo= X-Google-Smtp-Source: APXvYqwLg5B3CMCZ4MW7feSw0l2cQExP6zLVZArCgTqPx0bJsiaUHjWEpOAfccDNjcjKuCakEAuPz6K6ZBexa7aDhjA= X-Received: by 2002:a81:9346:: with SMTP id k67mr8443759ywg.47.1567804089080; Fri, 06 Sep 2019 14:08:09 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Frederick Ding Date: Fri, 6 Sep 2019 23:07:56 +0200 Message-ID: Subject: Re: wireguard-android broken after update to Android 10 To: lists@coryfields.com X-Mailman-Approved-At: Fri, 06 Sep 2019 23:54:56 +0200 Cc: wireguard@lists.zx2c4.com X-BeenThere: wireguard@lists.zx2c4.com X-Mailman-Version: 2.1.15 Precedence: list List-Id: Development discussion of WireGuard List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0618092701465660761==" Errors-To: wireguard-bounces@lists.zx2c4.com Sender: "WireGuard" --===============0618092701465660761== Content-Type: multipart/alternative; boundary="000000000000ceb9ff0591e8d5cd" --000000000000ceb9ff0591e8d5cd Content-Type: text/plain; charset="UTF-8" Pixel 3 user here on Android 10. Have you checked whether all packets are not getting through, or whether it's just appearing that way due to DNS issues? Maybe try deactivating the Private DNS (which may use DNS over HTTP) setting in Network & Internet settings and see if that helps? Or try using Hurricane Electric's net tools app to try pinging an IP address by number to see where things are breaking... On Fri, Sep 6, 2019, 21:19 Cory Fields wrote: > Today I updated my Pixel 3 to Android 10 and my wireguard vpn is no longer > functional. Everything appears to be working fine, just no connections. > It's a very straightforward ipv4 setup with a Debian host on the other side. > > It seems maybe I'm not alone: > > https://old.reddit.com/r/WireGuard/comments/bnx4yy/wireguard_tunnel_broken_on_android_q_beta/ > > Might there be some non-obvious new security setting that needs to be > turned off (or granted) after the update? > > I'm afraid I don't have much other useful information to provide here, but > I can send a log file from the android client off-list if it would be > helpful. > > Regards, > Cory Fields > _______________________________________________ > WireGuard mailing list > WireGuard@lists.zx2c4.com > https://lists.zx2c4.com/mailman/listinfo/wireguard > --000000000000ceb9ff0591e8d5cd Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Pixel 3 user here on Android 10. Have you checked wh= ether all packets are not getting through, or whether it's just appeari= ng that way due to DNS issues? Maybe try deactivating the Private DNS (whic= h may use DNS over HTTP) setting in Network & Internet settings and see= if that helps? Or try using Hurricane Electric's net tools app to try = pinging an IP address by number to see where things are breaking...

=
On Fri, Se= p 6, 2019, 21:19 Cory Fields <li= sts@coryfields.com> wrote:
<= div dir=3D"ltr">
Today I updated my Pixel 3 to Android 10 and my wiregu= ard vpn is no longer functional. Everything appears to be working fine, jus= t no connections. It's a very straightforward ipv4 setup with a Debian = host on the other side.

It seems maybe I'm= not alone:

Might there= be some non-obvious new security setting that needs to be turned off (or g= ranted) after the update?

I'm afraid I don'= ;t have much other useful information to provide here, but I can send a log= file from the android client off-list if it would be helpful.
Regards,
Cory Fields
_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinf= o/wireguard
--000000000000ceb9ff0591e8d5cd-- --===============0618092701465660761== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ WireGuard mailing list WireGuard@lists.zx2c4.com https://lists.zx2c4.com/mailman/listinfo/wireguard --===============0618092701465660761==--