Describe the bug
Client blocks connections to servers whose IP addresses are not included in AllowedIPs, rather than allowing such traffic to pass outside the tunnel.
Platform:
- OS: Windows 11 Pro 25H2 (26200.8524)
- App Version: 1.0.2
To Reproduce
My use case involves excluding only certain websites from the tunnel. For example, let’s say in this case it’s browserleaks.com (104.236.69.55/32) (but, of course, this issue applies to any IP addresses not included in the AllowedIPs list).
Then, using the WireGuard AllowedIPs Calculator, I get the values AllowedIPs = 0.0.0.0/2, 64.0.0.0/3, 96.0.0.0/5, 104.0.0.0/9, 104.128.0.0/10, 104.192.0.0/11, 104.224.0.0/13, 104.232.0.0/14, 104.236.0.0/18, 104.236.64.0/22, 104.236.68.0/24, 104.236.69.0/27, 104.236.69.32/28, 104.236.69.48/30, 104.236.69.52/31, 104.236.69.54/32, 104.236.69.56/29, 104.236.69.64/26, 104.236.69.128/25, 104.236.70.0/23, 104.236.72.0/21, 104.236.80.0/20, 104.236.96.0/19, 104.236.128.0/17, 104.237.0.0/16, 104.238.0.0/15, 104.240.0.0/12, 105.0.0.0/8, 106.0.0.0/7, 108.0.0.0/6, 112.0.0.0/4, 128.0.0.0/1, ::/0 and specify them in my configuration (in this case, it’s a standard Cloudflare WARP configuration with AmneziaWG 1.5).
After that, I expect that when connecting to browserleaks.com, traffic will go directly to it, but instead I get an ERR_NETWORK_ACCESS_DENIED error from the browser. At the same time, other sites work through the tunnel as expected.
Additional context
At the time of testing, I am not using any other VPN/proxy connections. The issue occurs regardless of the app's settings and not related to DPI censorship. Other clients (WG Tunnel on Android, AmneziaVPN on Windows) do not experience this problem with the same configuration and behave as expected.
Describe the bug
Client blocks connections to servers whose IP addresses are not included in AllowedIPs, rather than allowing such traffic to pass outside the tunnel.
Platform:
To Reproduce
My use case involves excluding only certain websites from the tunnel. For example, let’s say in this case it’s browserleaks.com (104.236.69.55/32) (but, of course, this issue applies to any IP addresses not included in the AllowedIPs list).
Then, using the WireGuard AllowedIPs Calculator, I get the values
AllowedIPs = 0.0.0.0/2, 64.0.0.0/3, 96.0.0.0/5, 104.0.0.0/9, 104.128.0.0/10, 104.192.0.0/11, 104.224.0.0/13, 104.232.0.0/14, 104.236.0.0/18, 104.236.64.0/22, 104.236.68.0/24, 104.236.69.0/27, 104.236.69.32/28, 104.236.69.48/30, 104.236.69.52/31, 104.236.69.54/32, 104.236.69.56/29, 104.236.69.64/26, 104.236.69.128/25, 104.236.70.0/23, 104.236.72.0/21, 104.236.80.0/20, 104.236.96.0/19, 104.236.128.0/17, 104.237.0.0/16, 104.238.0.0/15, 104.240.0.0/12, 105.0.0.0/8, 106.0.0.0/7, 108.0.0.0/6, 112.0.0.0/4, 128.0.0.0/1, ::/0and specify them in my configuration (in this case, it’s a standard Cloudflare WARP configuration with AmneziaWG 1.5).After that, I expect that when connecting to browserleaks.com, traffic will go directly to it, but instead I get an ERR_NETWORK_ACCESS_DENIED error from the browser. At the same time, other sites work through the tunnel as expected.
Additional context
At the time of testing, I am not using any other VPN/proxy connections. The issue occurs regardless of the app's settings and not related to DPI censorship. Other clients (WG Tunnel on Android, AmneziaVPN on Windows) do not experience this problem with the same configuration and behave as expected.