root@wireguard:~# wgctl restart
=> INFO: 🟢 🔒  Restarting WireGuard...
=> INFO: 🔒  Restoring rules from peer meta files...
=> INFO: 🔒  Rule 'guest' already applied to: 10.1.103.1
=> INFO: 🔒  Restored rule 'guest' for: guest-test (10.1.103.1)
=> INFO: 🔒  Rule 'guest' already applied to: 10.1.103.2
=> INFO: 🔒  Restored rule 'guest' for: guest-test2 (10.1.103.2)
=> INFO: 🔒  Rule 'guest' already applied to: 10.1.103.3
=> INFO: 🔒  Restored rule 'guest' for: guest-test3 (10.1.103.3)
=> INFO: 🔒  Rule 'user' already applied to: 10.1.2.1
=> INFO: 🔒  Restored rule 'user' for: laptop-nuno (10.1.2.1)
=> INFO: 🚫 🔒  Blocked 10.1.103.1 → 10.0.0.100/32
=> INFO: 🚫 🔒  Blocked 10.1.103.1 → 10.0.0.105/32
=> INFO: 🚫 🔒  Blocked 10.1.103.1 → 10.0.0.102/32
=> INFO: 🚫 🔒  Blocked 10.1.103.1 → 10.0.0.103/32
=> INFO: 🚫 🔒  Blocked 10.1.103.1 → 10.0.0.101/32
=> INFO: 🚫 🔒  Blocked 10.1.103.1 → 10.0.0.200/32
=> INFO: 🔒  Restored block rules for: 10.1.103.1
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.100/32
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.105/32
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.102/32
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.103/32
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.101/32
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.200/32
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.100/32
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.105/32
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.102/32
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.103/32
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.101/32
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.200/32
=> INFO: 🔒  Restored block rules for: 10.1.103.2
=> INFO: 🚫 🔒  Blocked 10.1.103.3 → 10.0.0.100/32
=> INFO: 🚫 🔒  Blocked 10.1.103.3 → 10.0.0.105/32
=> INFO: 🚫 🔒  Blocked 10.1.103.3 → 10.0.0.102/32
=> INFO: 🚫 🔒  Blocked 10.1.103.3 → 10.0.0.103/32
=> INFO: 🚫 🔒  Blocked 10.1.103.3 → 10.0.0.101/32
=> INFO: 🚫 🔒  Blocked 10.1.103.3 → 10.0.0.200/32
=> INFO: 🔒  Restored block rules for: 10.1.103.3
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.100:8006/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.100:22/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.105:8007/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.102:22/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.200:80/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.200:443/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.103:80/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.101:80/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.101:443/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.210:9000/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.100:8006/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.100:22/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.105:8007/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.102:22/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.200:80/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.200:443/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.103:80/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.101:80/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.101:443/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.2 → 10.0.0.210:9000/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.3 → 10.0.0.100:8006/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.3 → 10.0.0.100:22/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.3 → 10.0.0.105:8007/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.3 → 10.0.0.102:22/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.3 → 10.0.0.200:80/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.3 → 10.0.0.200:443/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.3 → 10.0.0.103:80/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.3 → 10.0.0.101:80/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.3 → 10.0.0.101:443/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.3 → 10.0.0.210:9000/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.1 → 10.0.0.100:8006/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.1 → 10.0.0.100:22/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.1 → 10.0.0.105:8007/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.1 → 10.0.0.102:22/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.1 → 10.0.0.200:80/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.1 → 10.0.0.200:443/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.1 → 10.0.0.103:80/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.1 → 10.0.0.101:80/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.1 → 10.0.0.101:443/tcp
=> INFO: 🚫 🔒  Blocked 10.1.103.1 → 10.0.0.210:9000/tcp
=> INFO: 🔒  Restored block rules for: guest
=> INFO: 🚫 🔒  Blocked 10.1.2.1 → 10.0.0.100:8006/tcp
=> INFO: 🚫 🔒  Blocked 10.1.2.1 → 10.0.0.105:8007/tcp
=> INFO: 🚫 🔒  Blocked 10.1.2.1 → 10.0.0.210:9000/tcp
=> INFO: 🔒  Restored block rules for: user
=> SUCCESS: ✅ 🔒  WireGuard restarted
root@wireguard:~# iptables -L FORWARD -n | grep -v "^Chain\|^target\|^$"
DROP       6    --  10.1.2.1             10.0.0.210           tcp dpt:9000
DROP       6    --  10.1.2.1             10.0.0.105           tcp dpt:8007
DROP       6    --  10.1.2.1             10.0.0.100           tcp dpt:8006
DROP       6    --  10.1.103.1           10.0.0.210           tcp dpt:9000
DROP       6    --  10.1.103.1           10.0.0.101           tcp dpt:443
DROP       6    --  10.1.103.1           10.0.0.101           tcp dpt:80
DROP       6    --  10.1.103.1           10.0.0.103           tcp dpt:80
DROP       6    --  10.1.103.1           10.0.0.200           tcp dpt:443
DROP       6    --  10.1.103.1           10.0.0.200           tcp dpt:80
DROP       6    --  10.1.103.1           10.0.0.102           tcp dpt:22
DROP       6    --  10.1.103.1           10.0.0.105           tcp dpt:8007
DROP       6    --  10.1.103.1           10.0.0.100           tcp dpt:22
DROP       6    --  10.1.103.1           10.0.0.100           tcp dpt:8006
DROP       6    --  10.1.103.3           10.0.0.210           tcp dpt:9000
DROP       6    --  10.1.103.3           10.0.0.101           tcp dpt:443
DROP       6    --  10.1.103.3           10.0.0.101           tcp dpt:80
DROP       6    --  10.1.103.3           10.0.0.103           tcp dpt:80
DROP       6    --  10.1.103.3           10.0.0.200           tcp dpt:443
DROP       6    --  10.1.103.3           10.0.0.200           tcp dpt:80
DROP       6    --  10.1.103.3           10.0.0.102           tcp dpt:22
DROP       6    --  10.1.103.3           10.0.0.105           tcp dpt:8007
DROP       6    --  10.1.103.3           10.0.0.100           tcp dpt:22
DROP       6    --  10.1.103.3           10.0.0.100           tcp dpt:8006
DROP       6    --  10.1.103.2           10.0.0.210           tcp dpt:9000
DROP       6    --  10.1.103.2           10.0.0.101           tcp dpt:443
DROP       6    --  10.1.103.2           10.0.0.101           tcp dpt:80
DROP       6    --  10.1.103.2           10.0.0.103           tcp dpt:80
DROP       6    --  10.1.103.2           10.0.0.200           tcp dpt:443
DROP       6    --  10.1.103.2           10.0.0.200           tcp dpt:80
DROP       6    --  10.1.103.2           10.0.0.102           tcp dpt:22
DROP       6    --  10.1.103.2           10.0.0.105           tcp dpt:8007
DROP       6    --  10.1.103.2           10.0.0.100           tcp dpt:22
DROP       6    --  10.1.103.2           10.0.0.100           tcp dpt:8006
DROP       6    --  10.1.103.2           10.0.0.210           tcp dpt:9000
DROP       6    --  10.1.103.2           10.0.0.101           tcp dpt:443
DROP       6    --  10.1.103.2           10.0.0.101           tcp dpt:80
DROP       6    --  10.1.103.2           10.0.0.103           tcp dpt:80
DROP       6    --  10.1.103.2           10.0.0.200           tcp dpt:443
DROP       6    --  10.1.103.2           10.0.0.200           tcp dpt:80
DROP       6    --  10.1.103.2           10.0.0.102           tcp dpt:22
DROP       6    --  10.1.103.2           10.0.0.105           tcp dpt:8007
DROP       6    --  10.1.103.2           10.0.0.100           tcp dpt:22
DROP       6    --  10.1.103.2           10.0.0.100           tcp dpt:8006
DROP       0    --  10.1.103.3           10.0.0.200
LOG        0    --  10.1.103.3           10.0.0.200           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.3           10.0.0.101
LOG        0    --  10.1.103.3           10.0.0.101           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.3           10.0.0.103
LOG        0    --  10.1.103.3           10.0.0.103           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.3           10.0.0.102
LOG        0    --  10.1.103.3           10.0.0.102           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.3           10.0.0.105
LOG        0    --  10.1.103.3           10.0.0.105           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.3           10.0.0.100
LOG        0    --  10.1.103.3           10.0.0.100           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.2           10.0.0.200
LOG        0    --  10.1.103.2           10.0.0.200           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.2           10.0.0.101
LOG        0    --  10.1.103.2           10.0.0.101           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.2           10.0.0.103
LOG        0    --  10.1.103.2           10.0.0.103           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.2           10.0.0.102
LOG        0    --  10.1.103.2           10.0.0.102           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.2           10.0.0.105
LOG        0    --  10.1.103.2           10.0.0.105           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.2           10.0.0.100
LOG        0    --  10.1.103.2           10.0.0.100           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.2           10.0.0.200
LOG        0    --  10.1.103.2           10.0.0.200           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.2           10.0.0.101
LOG        0    --  10.1.103.2           10.0.0.101           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.2           10.0.0.103
LOG        0    --  10.1.103.2           10.0.0.103           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.2           10.0.0.102
LOG        0    --  10.1.103.2           10.0.0.102           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.2           10.0.0.105
LOG        0    --  10.1.103.2           10.0.0.105           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.2           10.0.0.100
LOG        0    --  10.1.103.2           10.0.0.100           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.1           10.0.0.200
LOG        0    --  10.1.103.1           10.0.0.200           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.1           10.0.0.101
LOG        0    --  10.1.103.1           10.0.0.101           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.1           10.0.0.103
LOG        0    --  10.1.103.1           10.0.0.103           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.1           10.0.0.102
LOG        0    --  10.1.103.1           10.0.0.102           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.1           10.0.0.105
LOG        0    --  10.1.103.1           10.0.0.105           LOG flags 0 level 4 prefix "wgctl-dropped: "
DROP       0    --  10.1.103.1           10.0.0.100
LOG        0    --  10.1.103.1           10.0.0.100           LOG flags 0 level 4 prefix "wgctl-dropped: "
ACCEPT     0    --  0.0.0.0/0            0.0.0.0/0
ACCEPT     0    --  0.0.0.0/0            0.0.0.0/0