Investigate on how to mark NetBird network as Private on Windows #175

Closed
opened 2025-11-20 05:07:23 -05:00 by saavagebueno · 3 comments
Owner

Originally created by @braginini on GitHub (Aug 23, 2022).

On Windows Device the Network created by the NetApp is labeled as a Public network.

Workaround for now:

PowerShell: Set-NetConnectionProfile -InterfaceAlias 'wt0' -NetworkCategory 'Private'

or :

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Profiles
Change "Category" from 0 to 1

We plan to use Windows Packet Filter integration to do this automatically.

Originally created by @braginini on GitHub (Aug 23, 2022). On Windows Device the Network created by the NetApp is labeled as a Public network. Workaround for now: ``` PowerShell: Set-NetConnectionProfile -InterfaceAlias 'wt0' -NetworkCategory 'Private' ``` or : ``` Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Profiles Change "Category" from 0 to 1 ``` We plan to use Windows Packet Filter integration to do this automatically.
saavagebueno added the enhancementclientwindows labels 2025-11-20 05:07:23 -05:00
Author
Owner

@Lordtagoh commented on GitHub (Aug 23, 2022):

I'm the person who send this msg,
The problem is that ON windows
wireguard doesn't set Default Gateway, the network is labeled Public.

This is a bit complicated becuase it doesn't let the firewall work as expected, since i use netbird as a "local network" vpn

This is a problem derived from Wireguard implementation, so is not directly your fault.

But it will affect windows users

@Lordtagoh commented on GitHub (Aug 23, 2022): I'm the person who send this msg, The problem is that ON windows wireguard doesn't set Default Gateway, the network is labeled Public. This is a bit complicated becuase it doesn't let the firewall work as expected, since i use netbird as a "local network" vpn This is a problem derived from Wireguard implementation, so is not directly your fault. But it will affect windows users
Author
Owner

@robertgro commented on GitHub (Nov 30, 2022):

The WireGuard Tunnel network adapter is set to 'public' by default on windows, leading to issue when trying to quickconfig winrm (Error number: -2144108183 0x80338169) (winrm firewall exception):

winrm_firewall_exception

@braginini
Setting the NetConnectionProfile via Powershell or changing the category in NetworkList\Profiles as suggested works for now. But lately there were several new releases of the netbird app within a short time span. Everytime I update the app to the latest version on windows, it creates a new profile in the networklist, filling up my windows registry with new guid's*:
(*as the 'ProfileName' also reads, counting up to nowhere)

winreg

Is this the expected behaviour?

Edit: even better. After applying the fix (setting the adapter to private) and restarting the system, windows automatically creates a new public adapter, still counting up:
image

@robertgro commented on GitHub (Nov 30, 2022): The WireGuard Tunnel network adapter is set to 'public' by default on windows, leading to issue when trying to quickconfig winrm (Error number: -2144108183 0x80338169) (winrm firewall exception): ![winrm_firewall_exception](https://user-images.githubusercontent.com/34941707/204768148-e54a2400-76b6-4da7-b4b1-e6edcba62829.png) @braginini Setting the NetConnectionProfile via Powershell or changing the category in NetworkList\Profiles as suggested works for now. But lately there were several new releases of the netbird app within a short time span. Everytime I update the app to the latest version on windows, it creates a new profile in the networklist, filling up my windows registry with new guid's*: _(*as the 'ProfileName' also reads, counting up to nowhere)_ ![winreg](https://user-images.githubusercontent.com/34941707/204768822-697353ac-4ec3-4252-9644-45bafeab0fca.png) Is this the expected behaviour? Edit: even better. After applying the fix (setting the adapter to private) and restarting the system, windows automatically creates a new public adapter, still counting up: ![image](https://user-images.githubusercontent.com/34941707/204774627-9e7790ba-369a-4558-9998-978a8baf3e34.png)
Author
Owner

@nazarewk commented on GitHub (Apr 17, 2025):

I'm closing this due to https://github.com/netbirdio/netbird/pull/1071

@Lordtagoh @robertgro feel free to comment in case this is not solved yet

@nazarewk commented on GitHub (Apr 17, 2025): I'm closing this due to https://github.com/netbirdio/netbird/pull/1071 @Lordtagoh @robertgro feel free to comment in case this is not solved yet
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#175