#NAT table rules for Wireguard - insert after line 44 - if your WG subnet is different from the example, then you must change the below entries to match or you will get a BAD_MAP_IPs error during routing, causing your packets to DROP -A ufw-before-forward -s 172.16.79.0/27 -j ACCEPT -A ufw-before-forward -d 172.16.79.0/27 -j ACCEPT # NAT table rules for Wireguard - insert after line 78 *nat :POSTROUTING ACCEPT [0:0] -A POSTROUTING -o {your internet facing interface} -j MASQUERADE #If you do not end each edit to the NAT Table with COMMIT, they do not propagate COMMIT