All New

Register

Login

All gists

nuno / gistfile1.txt

0 likes

0 forks

1 files

Last active 5 months ago

1	oot@wireguard:/# wgctl restart
2	=> INFO: 🟢 🔒 Restarting WireGuard...
3	=> INFO: 🔒 Restoring rules from peer meta files...
4	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100/32
5	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.105/32
6	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.102/32
7	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.103/32
8	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101/32
9	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200/32
10	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100:8006/tcp

nuno / gistfile1.txt

0 likes

0 forks

1 files

Last active 5 months ago

1	root@wireguard:~# wgctl restart
2	=> INFO: 🟢 🔒 Restarting WireGuard...
3	=> INFO: 🔒 Restoring rules from peer meta files...
4	=> INFO: 🔒 Rule 'guest' already applied to: 10.1.103.1
5	=> INFO: 🔒 Restored rule 'guest' for: guest-test (10.1.103.1)
6	=> INFO: 🔒 Rule 'guest' already applied to: 10.1.103.2
7	=> INFO: 🔒 Restored rule 'guest' for: guest-test2 (10.1.103.2)
8	=> INFO: 🔒 Rule 'guest' already applied to: 10.1.103.3
9	=> INFO: 🔒 Restored rule 'guest' for: guest-test3 (10.1.103.3)
10	=> INFO: 🔒 Rule 'user' already applied to: 10.1.2.1

nuno / firewall.module

0 likes

0 forks

1 files

Last active 5 months ago

1	function firewall::restore_blocks() {
2	local blocks_dir
3	blocks_dir="$(ctx::blocks)"
4
5	# Restore rules from meta files (new system)
6	rule::restore_all
7
8	# Restore per-client full-blocks (wgctl block/unblock system)
9	for block_file in "${blocks_dir}"/*.block; do
10	[[ -f "$block_file" ]] \|\| continue

nuno / gistfile1.txt

0 likes

0 forks

1 files

Last active 5 months ago

1	"function firewall::restore_blocks" /etc/wireguard/wgctl/modules/firewall.module.sh
2	function firewall::restore_blocks() {
3	local blocks_dir
4	blocks_dir="$(ctx::blocks)"
5
6	# Restore guest rules if marker exists
7	local marker="${blocks_dir}/_guest_rules.active"
8	if [[ -f "$marker" ]]; then
9	firewall::apply_guest_rules
10	log::wg "Restored guest firewall rules"

nuno / gistfile1.txt

0 likes

0 forks

1 files

Last active 5 months ago

1	#!/usr/bin/env bash
2
3	# ============================================
4	# Lifecycle
5	# ============================================
6
7	function cmd::add::on_load() {
8	flag::register --name
9	flag::register --type
10	flag::register --subtype

nuno / gistfile1.txt

0 likes

0 forks

1 files

Last active 5 months ago

1	iptables -L FORWARD -n -v
2	Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
3	pkts bytes target prot opt in out source destination
4	3066 428K ACCEPT 0 -- wg0 * 0.0.0.0/0 0.0.0.0/0
5	2587 3767K ACCEPT 0 -- * wg0 0.0.0.0/0 0.0.0.0/0
6	0 0 LOG 0 -- * * 10.1.103.2 10.0.0.100 LOG flags 0 level 4 prefix "wgctl-dropped: "
7	0 0 DROP 0 -- * * 10.1.103.2 10.0.0.100
8	0 0 LOG 0 -- * * 10.1.103.2 10.0.0.105 LOG flags 0 level 4 prefix "wgctl-dropped: "
9	0 0 DROP 0 -- * * 10.1.103.2 10.0.0.105
10	0 0 LOG 0 -- * * 10.1.103.2 10.0.0.102 LOG flags 0 level 4 prefix "wgctl-dropped: "

nuno / gistfile1.txt

0 likes

0 forks

1 files

Last active 5 months ago

1	function cmd::rule::list() {
2	local rules_dir
3	rules_dir="$(ctx::rules)"
4
5	local rules=("${rules_dir}"/*.rule)
6	if [[ ! -f "${rules[0]}" ]]; then
7	log::wg "No rules configured"
8	return 0
9	fi

nuno / gistfile1.txt

0 likes

0 forks

1 files

Last active 5 months ago

1	cat /etc/wireguard/wgctl/commands/rule.command.sh \| grep -A 50 "function cmd::rule::list"
2	function cmd::rule::list() {
3	local rules_dir
4	rules_dir="$(ctx::rules)"
5
6	local rules=("${rules_dir}"/*.rule)
7	if [[ ! -f "${rules[0]}" ]]; then
8	log::wg "No rules configured"
9	return 0
10	fi

nuno / add.command.sh

0 likes

0 forks

1 files

Last active 6 months ago

1	function cmd::add::run() {
2	local name=""
3	local type=""
4	local subtype=""
5	local rule=""
6	local ip=""
7	local tunnel=""
8	local guest=false
9	local presets=()
10	local show_config=false

nuno / gistfile1.txt

0 likes

0 forks

1 files

Last active 6 months ago

1	I did, just to confirm, is this the place where you'd put it?
2
3	# Create client config
4	peers::create_client_config "$full_name" "$effective_type" "$ip" "$allowed_ips" \|\| return 1
5
6	# Store subtype in meta
7	if [[ -n "$subtype" ]]; then
8	peers::set_meta "$full_name" "subtype" "$subtype"
9	fi

Powered by Opengist ⋅ Load: 99ms⋅

English

⋅ KrilHub