root@wireguard:/# wgctl restart => INFO: 🟢 🔒 Restarting WireGuard... => INFO: 🔒 Restoring rules from peer meta files... => INFO: 🚫 🔒 Blocked 10.1.1.1 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.1.1 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.1.1 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=desktop-test ip=10.1.1.1 => DEBUG: 🔍 rule::apply: set meta rule=user for desktop-test => INFO: 📋 🔒 Applied rule 'user' to: 10.1.1.1 => INFO: 🔒 Restored rule 'user' for: desktop-test (10.1.1.1) => INFO: 🚫 🔒 Blocked 10.1.1.2 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.1.2 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.1.2 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=desktop-test1 ip=10.1.1.2 => DEBUG: 🔍 rule::apply: set meta rule=user for desktop-test1 => INFO: 📋 🔒 Applied rule 'user' to: 10.1.1.2 => INFO: 🔒 Restored rule 'user' for: desktop-test1 (10.1.1.2) => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.105 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.102 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.103 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.210:9000/tcp => INFO: 🔒 Allowed 10.1.103.1 → 10.0.0.103:53/udp => INFO: 🔒 Allowed 10.1.103.1 → 10.0.0.103:53/tcp => DEBUG: 🔍 rule::apply: peer_name=guest-test ip=10.1.103.1 => DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test => DEBUG: 🔍 dns_redirect: applied for 10.1.103.0/24 => INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.1 => INFO: 🔒 Restored rule 'guest' for: guest-test (10.1.103.1) => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.105 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.102 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.103 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.210:9000/tcp => INFO: 🔒 Allowed 10.1.103.2 → 10.0.0.103:53/udp => INFO: 🔒 Allowed 10.1.103.2 → 10.0.0.103:53/tcp => DEBUG: 🔍 rule::apply: peer_name=guest-test2 ip=10.1.103.2 => DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test2 => DEBUG: 🔍 dns_redirect: already applied for 10.1.103.0/24 => INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.2 => INFO: 🔒 Restored rule 'guest' for: guest-test2 (10.1.103.2) => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.105 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.102 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.103 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.210:9000/tcp => INFO: 🔒 Allowed 10.1.103.3 → 10.0.0.103:53/udp => INFO: 🔒 Allowed 10.1.103.3 → 10.0.0.103:53/tcp => DEBUG: 🔍 rule::apply: peer_name=guest-test3 ip=10.1.103.3 => DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test3 => DEBUG: 🔍 dns_redirect: already applied for 10.1.103.0/24 => INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.3 => INFO: 🔒 Restored rule 'guest' for: guest-test3 (10.1.103.3) => INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=laptop-nuno ip=10.1.2.1 => DEBUG: 🔍 rule::apply: set meta rule=user for laptop-nuno => INFO: 📋 🔒 Applied rule 'user' to: 10.1.2.1 => INFO: 🔒 Restored rule 'user' for: laptop-nuno (10.1.2.1) => INFO: 🚫 🔒 Blocked 10.1.2.2 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.2.2 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.2.2 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=laptop-test ip=10.1.2.2 => DEBUG: 🔍 rule::apply: set meta rule=user for laptop-test => INFO: 📋 🔒 Applied rule 'user' to: 10.1.2.2 => INFO: 🔒 Restored rule 'user' for: laptop-test (10.1.2.2) => INFO: 🚫 🔒 Blocked 10.1.2.3 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.2.3 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.2.3 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=laptop-test1 ip=10.1.2.3 => DEBUG: 🔍 rule::apply: set meta rule=user for laptop-test1 => INFO: 📋 🔒 Applied rule 'user' to: 10.1.2.3 => INFO: 🔒 Restored rule 'user' for: laptop-test1 (10.1.2.3) => INFO: 🚫 🔒 Blocked 10.1.3.3 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.3.3 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.3.3 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=phone-fred ip=10.1.3.3 => DEBUG: 🔍 rule::apply: set meta rule=user for phone-fred => INFO: 📋 🔒 Applied rule 'user' to: 10.1.3.3 => INFO: 🔒 Restored rule 'user' for: phone-fred (10.1.3.3) => INFO: 🚫 🔒 Blocked 10.1.3.4 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.3.4 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.3.4 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=phone-helena ip=10.1.3.4 => DEBUG: 🔍 rule::apply: set meta rule=user for phone-helena => INFO: 📋 🔒 Applied rule 'user' to: 10.1.3.4 => INFO: 🔒 Restored rule 'user' for: phone-helena (10.1.3.4) => INFO: 🚫 🔒 Blocked 10.1.3.2 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.3.2 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.3.2 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=phone-luis ip=10.1.3.2 => DEBUG: 🔍 rule::apply: set meta rule=user for phone-luis => INFO: 📋 🔒 Applied rule 'user' to: 10.1.3.2 => INFO: 🔒 Restored rule 'user' for: phone-luis (10.1.3.2) => INFO: 🚫 🔒 Blocked 10.1.3.1 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.3.1 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.3.1 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=phone-nuno ip=10.1.3.1 => DEBUG: 🔍 rule::apply: set meta rule=user for phone-nuno => INFO: 📋 🔒 Applied rule 'user' to: 10.1.3.1 => INFO: 🔒 Restored rule 'user' for: phone-nuno (10.1.3.1) => INFO: 🚫 🔒 Blocked 10.1.3.5 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.3.5 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.3.5 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=phone-test ip=10.1.3.5 => DEBUG: 🔍 rule::apply: set meta rule=user for phone-test => INFO: 📋 🔒 Applied rule 'user' to: 10.1.3.5 => INFO: 🔒 Restored rule 'user' for: phone-test (10.1.3.5) => INFO: 🚫 🔒 Blocked 10.1.3.6 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.3.6 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.3.6 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=phone-test1 ip=10.1.3.6 => DEBUG: 🔍 rule::apply: set meta rule=user for phone-test1 => INFO: 📋 🔒 Applied rule 'user' to: 10.1.3.6 => INFO: 🔒 Restored rule 'user' for: phone-test1 (10.1.3.6) => INFO: 🚫 🔒 Blocked 10.1.4.1 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.4.1 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.4.1 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=tablet-nuno ip=10.1.4.1 => DEBUG: 🔍 rule::apply: set meta rule=user for tablet-nuno => INFO: 📋 🔒 Applied rule 'user' to: 10.1.4.1 => INFO: 🔒 Restored rule 'user' for: tablet-nuno (10.1.4.1) => SUCCESS: ✅ 🔒 WireGuard restarted