Wireguard: wg-firezone: Failed to give packet to userspace from peer

I have following ports open
443/tcp
51820/udp

I can access firezone UI, can create and connect new peer.
No Internet connection to peer.
I see following error on server:

$ sudo firezone-ctl tail
wireguard: wg-firezone: Failed to give packet to userspace from peer 14

Issue is likely your firewall. Is forwarding enabled?

my firewall is disabled

$ sudo ufw status verbose
Status: inactive

thanks @jamil . enabling and setting ufw per the troubleshooting page fixed this. I am not sure why it wasn’t working when firewall was inactive.

It’s possible for ufw to be inactive but iptables to be very much active as ufw is just a convenient frontend to it.