firewall
- AllowedIPs is not access control
A per-friend WireGuard kit scoped each peer with AllowedIPs, which is a route on the friend's own device. The real scope is a forward-chain drop on the router.
A per-friend WireGuard kit scoped each peer with AllowedIPs, which is a route on the friend's own device. The real scope is a forward-chain drop on the router.