Does anyone know the best way to route traffic from transmission through Mullvad?
I have transmissionset up on my plex server which I control using tranmission remote and want to download my Linux ISOs with privacy.
I have downloaded the wireguard config and can connect to it using wg-quick, but I don’t want all traffic going through it, only transmission.
rambos, angielski Consider moving from mullvad if you are into torrenting. Mullvad doesnt support port forwarding anymore. But no matter what provider you chose, use docker container gluetun to route traffic from any other container (like transmission). I like transmission, but most people use qbittorrent because its more advanced. You can also set up VPN in qbittorrent settings
sxan, angielski 
Which affects torrentors how?
Jerbil, angielski 
If the port you’re connecting through isn’t forwarded, it isn’t allowing most connections through, drastically slowing down your speed and ability to seed, since you can’t connect to any peers.
sxan, angielski I don’t torrent, as a rule, so I can’t say I’d notice any speed reduction. I had, however, noticed that no matter how long I kept seeding, I’d gotten few - or maybe no - connections. I didn’t know if this were because nobody else was leeching the thing at the time, or something else like this.
I’m very reluctant to give up Mullvad. So far, in all ways I care about they’ve demonstrated justification for brand loyalty. Plus, I’ve been with them for years and already have everything set up and configured across multiple deviiiiceeeessss.
As I said, torrenting isn’t a critical activity for me, so I’ll hang tight. I am curious to know if Mullvad has given a justification for stopping support for port forwarding. They used to, right? So it was work for them to stop.
lud, angielski Here is their blog post about it: mullvad.net/…/removing-the-support-for-forwarded-…
sxan, angielski Thank you for the link! Very informative.
matey, angielski You’ll get more connections if people can get to you; otherwise, you’re only connecting to people who are port forwarding themselves. If you’re port forwarding, you can connect to everyone.
mara, angielski 
I personally shove Transmission into Docker:
<span style="color:#63a35c;">services</span><span style="color:#323232;">: </span><span style="color:#323232;"> </span><span style="color:#63a35c;">wireguard</span><span style="color:#323232;">: </span><span style="color:#323232;"> </span><span style="color:#63a35c;">image</span><span style="color:#323232;">: </span><span style="color:#183691;">ghcr.io/linuxserver/wireguard </span><span style="color:#323232;"> </span><span style="color:#63a35c;">container_name</span><span style="color:#323232;">: </span><span style="color:#183691;">wireguard </span><span style="color:#323232;"> </span><span style="color:#63a35c;">cap_add</span><span style="color:#323232;">: </span><span style="color:#323232;"> - </span><span style="color:#183691;">NET_ADMIN </span><span style="color:#323232;"> - </span><span style="color:#183691;">SYS_MODULE </span><span style="color:#323232;"> </span><span style="color:#63a35c;">environment</span><span style="color:#323232;">: </span><span style="color:#323232;"> - </span><span style="color:#183691;">PUID=1000 </span><span style="color:#323232;"> - </span><span style="color:#183691;">PGID=1000 </span><span style="color:#323232;"> - </span><span style="color:#183691;">TZ=Europe/Stockholm </span><span style="color:#323232;"> </span><span style="color:#63a35c;">ports</span><span style="color:#323232;">: </span><span style="color:#323232;"> - </span><span style="color:#183691;">9091:9091/tcp </span><span style="color:#323232;"> </span><span style="color:#63a35c;">volumes</span><span style="color:#323232;">: </span><span style="color:#323232;"> - </span><span style="color:#183691;">./config:/config </span><span style="color:#323232;"> - </span><span style="color:#183691;">/lib/modules:/lib/modules </span><span style="color:#323232;"> </span><span style="color:#63a35c;">sysctls</span><span style="color:#323232;">: </span><span style="color:#323232;"> - </span><span style="color:#183691;">net.ipv6.conf.all.disable_ipv6=0 </span><span style="color:#323232;"> - </span><span style="color:#183691;">net.ipv4.conf.all.src_valid_mark=1 </span><span style="color:#323232;"> </span><span style="color:#63a35c;">restart</span><span style="color:#323232;">: </span><span style="color:#183691;">unless-stopped </span><span style="color:#323232;"> </span><span style="color:#63a35c;">transmission</span><span style="color:#323232;">: </span><span style="color:#323232;"> </span><span style="color:#63a35c;">image</span><span style="color:#323232;">: </span><span style="color:#183691;">ghcr.io/linuxserver/transmission </span><span style="color:#323232;"> </span><span style="color:#63a35c;">container_name</span><span style="color:#323232;">: </span><span style="color:#183691;">transmission </span><span style="color:#323232;"> </span><span style="color:#63a35c;">ulimits</span><span style="color:#323232;">: </span><span style="color:#323232;"> </span><span style="color:#63a35c;">nofile</span><span style="color:#323232;">: </span><span style="color:#0086b3;">1048576 </span><span style="color:#323232;"> </span><span style="color:#63a35c;">environment</span><span style="color:#323232;">: </span><span style="color:#323232;"> - </span><span style="color:#183691;">PUID=1000 </span><span style="color:#323232;"> - </span><span style="color:#183691;">PGID=996 </span><span style="color:#323232;"> - </span><span style="color:#183691;">TZ=Europe/Stockholm </span><span style="color:#323232;"> - </span><span style="color:#183691;">USER=azurediamond </span><span style="color:#323232;"> - </span><span style="color:#183691;">PASS=hunter2 </span><span style="color:#323232;"> </span><span style="color:#63a35c;">volumes</span><span style="color:#323232;">: </span><span style="color:#323232;"> - </span><span style="color:#183691;">./config:/config </span><span style="color:#323232;"> - </span><span style="color:#183691;">/data:/data </span><span style="color:#323232;"> - </span><span style="color:#183691;">/data/Torrents/dl:/downloads </span><span style="color:#323232;"> - </span><span style="color:#183691;">/data/Torrents/inbox/start:/watch </span><span style="color:#323232;"> </span><span style="color:#63a35c;">network_mode</span><span style="color:#323232;">: </span><span style="color:#183691;">"service:wireguard" </span><span style="color:#323232;"> </span><span style="color:#63a35c;">depends_on</span><span style="color:#323232;">: [ </span><span style="color:#183691;">"wireguard" </span><span style="color:#323232;">] </span><span style="color:#323232;"> </span><span style="color:#63a35c;">restart</span><span style="color:#323232;">: </span><span style="color:#183691;">unless-stopped </span>Make sure your mullvad config is called
wg0.confin./config.
FrostyCaveman, angielski I do this except with github.com/qdm12/gluetun
(which apparently also can be used as a k8s sidecar container, am gonna try this soon as well)
christophski, angielski I’m trying this and it seems to be running. If I run
curl 127.0.0.1:9091I get a 403 which is expected but if I try to access the same from another computer on the network then the connection times out, any idea what could be the cause?
coaxil, angielski Oh yes, got your password :p
kingorgg, angielski All I see is *******.
Flyswat, angielski Really?
Password: ********
pewgar_seemsimandroid, angielski h2
nicocool84, angielski If transmission is running in a container, my latest blog post is actually about that: www.nicoco.fr/blog/2023/09/10/wireguard/
jws_shadotak, angielski I highly recommend moving that to a docker or podman setup. Gluetun is the go-to for VPN traffic. Set up a little container and you can link other containers to it to route all their traffic through.
GregoryTheGreat, angielski The best way I’ve found.
newIdentity, angielski I use UFW
Moonrise2473, angielski
newIdentity, angielski Mullvad is using WireGuard though
Oisteink, angielski You might want your program and the vpn interface to be in a separate namespace? Somewhat opposite this: www.wireguard.com/netns/#the-new-namespace-soluti…
You don’t want all traffic routed, you want only this one app. More info here: linuxhint.com/use-linux-network-namespace/
Dodaj komentarz