before or after, not a yes or no question

After

what is the output of

ip route

on the egress

I set all, egress, ingress, then I create the client

default via 172.31.1.1 dev eth0 proto dhcp src 49.12.231.51 metric 100 10.101.0.0/16 dev netmaker proto kernel scope link src 10.101.0.1 49.12.231.51 via 172.31.1.1 dev eth0 64.233.163.127 via 172.31.1.1 dev eth0 137.184.16.175 via 172.31.1.1 dev eth0 159.223.60.49 via 172.31.1.1 dev eth0 172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 172.18.0.0/16 dev br-64bce9e2ae24 proto kernel scope link src 172.18.0.1 172.31.1.1 dev eth0 proto dhcp scope link src 49.12.231.51 metric 100 172.253.121.127 via 172.31.1.1 dev eth0 185.12.64.1 via 172.31.1.1 dev eth0 proto dhcp src 49.12.231.51 metric 100 185.12.64.2 via 172.31.1.1 dev eth0 proto dhcp src 49.12.231.51 metric 100

do you have iptables or nftables on the egress?

No, I don't think.

I haven't done anything on this level

you can't have any egress (or ingress) without iptables or nftables

I had just read the docs

Ok. Ingress work fine.

Where I can't find that in the doc?

The only thing what I do it's: sudo ufw allow proto tcp from any to any port 443 && sudo ufw allow proto tcp from any to any port 80 && sudo ufw allow 51821:51830/udp And iptables --policy FORWARD ACCEPT

what is output of

iptables --list

and

iptables --list -t nat

iptables --list Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination root@ubuntu-2gb-nbg1-1:~# iptables --list Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination

for the second question (iptables --list -t nat) : Chain PREROUTING (policy ACCEPT) target prot opt source destination Chain INPUT (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain POSTROUTING (policy ACCEPT) target prot opt source destination

Any hint?

maybe i'm in wron room but I test, i need help

What is your issue?

this https://discord.com/channels/825071750290210916/1107623906250080266 and https://discord.com/channels/825071750290210916/1108502695679107203

for explain I have a vps for netmaker server (ovh)

and 2 host on different site with netclient

I configure the egress on both node

and I want to all host behind node A access to all host behind node B

but don't work

but the node A ping all node behind node B and node B ping all node behind node A

when I capture packet with tshark on node A or B on interface have access network elle other host the packet capture nothing to show but if i capture the same on interface netmaker node A or B I view packet arrived

the node with netclient don't forward or something like that

and I don't understand why, because the same configuration work on v0.14 @User

I just leave and reconnect de netclient and now