Linux wg-quick • Kill Switch Guide
Linux kill-switch support for NoLogVPN configs
NoLogVPN currently supports a Linux kill-switch configuration variant for WireGuard users who connect with wg-quick. It adds firewall rules that block outbound traffic outside the VPN tunnel while the interface is up.
This is the honest support level available today. Native NoLogVPN app kill-switches for other platforms are still on the roadmap.
What it does
Rejects outbound traffic that is not going through the WireGuard interface while the tunnel is active.
Supported now
Linux systems using wg-quick with iptables and ip6tables available.
Not native yet
Windows, macOS, iPhone, and Android still depend on the client or OS features you choose there.
How to use it
1. Create a device from your NoLogVPN dashboard.
2. In the device-ready window, choose Download Linux Kill Switch.
3. Save the file somewhere like
/etc/wireguard/nologvpn.conf.4. Bring the tunnel up with
sudo wg-quick up nologvpn.5. Bring it down with
sudo wg-quick down nologvpn.Rules included
The Linux kill-switch download adds the following firewall hooks to the interface section of your WireGuard configuration:
# Linux wg-quick kill switch PostUp = iptables -I OUTPUT ! -o %i -m mark ! --mark $(wg show %i fwmark) -m addrtype ! --dst-type LOCAL -j REJECT; ip6tables -I OUTPUT ! -o %i -m mark ! --mark $(wg show %i fwmark) -m addrtype ! --dst-type LOCAL -j REJECT PreDown = iptables -D OUTPUT ! -o %i -m mark ! --mark $(wg show %i fwmark) -m addrtype ! --dst-type LOCAL -j REJECT; ip6tables -D OUTPUT ! -o %i -m mark ! --mark $(wg show %i fwmark) -m addrtype ! --dst-type LOCAL -j REJECT
Important notes
• This is intended for Linux systems using
wg-quick.• It requires root privileges plus
iptables and ip6tables.• If the tunnel is not brought up correctly, traffic may be blocked until you bring the interface down or fix the rules.
• Test it carefully before relying on it as your only leak-protection control.
• For non-Linux devices, use the WireGuard app and any available OS-level always-on or block-without-VPN settings.
Review how NoLogVPN handles privacy, subscriptions, and account records before starting a paid plan.