Re: WireGuard + /32 tunnel endpoint: incoming connections unreachable on NetBSD was: Wireguard woes

[Sad Clouds <cryintothebluesky%gmail.com@localhost>]

On Sun, 25 Jan 2026 08:43:51 +0100
Ramiro Aceves <ea1abz%gmail.com@localhost> wrote:

> netbsd-raspaZeroW# route -n show
> Routing tables
> 
> Internet:
> Destination        Gateway            Flags    Refs      Use    Mtu 
> Interface
> default            192.168.1.1        UGS         -        -      -  bwfm0
> 44.27.132.76       wg0                UHl         -        -      -  wg0
> 44.27.132.76/32    44.27.132.76       U           -        -      -  wg0

I'm not sure how netbsd kernel deals with /32 netmask but it seems it
is not routing packets and treating it as a local destination.

You may need to add a static route with a different netmask, e.g.:

route add -net 44.27.132.76/24 -interface 44.27.132.76