Is this supposed to happen? I thought it assigned a special ip and that’s the one you use. For me I’m able to access my original local ip address outside my network, and from the provided tailscale ip. luckily when I turn off tailscale I can’t access either.
Depending on how you set up your on-LAN tailscale hosts, you may have included
--advertise-routes=<your lan CIDR>
and then I think you need to--accept-routes
on other clients for them to actually set up the local routes that use the wireguard connection, but that would likely explain the behavior you’re seeing unless the behavior was updated to make this automatic.