Hello,
Stopping and restarting a wireguard interface creates a firewall zone named wireguard if it isn’t already present and containing the wg interface name in the list of covered networks, and masquerade enabled.
This zone is created even if another one containing the same interface in the covered networks list exists and has masquerading disabled and different inter-zone forwarding configurations.
Of course routing will then fail if the local wg network isn’t in the Allowed IPs list of all the other routers in the network.
Workaround: keep this zone present, remove the wg interface name from the list of covered networks and it will not interfere with the expected flows.
Fix: don’t create this zone if another one with the same covered interface already exists.
Regards,