Utoljára aktív 2 months ago

Revízió 180af41cc777d15ed556d8c7d5e1a25eafc91d10

gistfile1.txt Eredeti
1root@wireguard:~# wgctl restart
2=> INFO: 🟢 🔒 Restarting WireGuard...
3=> INFO: 🔒 Restoring rules from peer meta files...
4=> INFO: 🔒 Rule 'guest' already applied to: 10.1.103.1
5=> INFO: 🔒 Restored rule 'guest' for: guest-test (10.1.103.1)
6=> INFO: 🔒 Rule 'guest' already applied to: 10.1.103.2
7=> INFO: 🔒 Restored rule 'guest' for: guest-test2 (10.1.103.2)
8=> INFO: 🔒 Rule 'guest' already applied to: 10.1.103.3
9=> INFO: 🔒 Restored rule 'guest' for: guest-test3 (10.1.103.3)
10=> INFO: 🔒 Rule 'user' already applied to: 10.1.2.1
11=> INFO: 🔒 Restored rule 'user' for: laptop-nuno (10.1.2.1)
12=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100/32
13=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.105/32
14=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.102/32
15=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.103/32
16=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101/32
17=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200/32
18=> INFO: 🔒 Restored block rules for: 10.1.103.1
19=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100/32
20=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.105/32
21=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.102/32
22=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.103/32
23=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101/32
24=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200/32
25=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100/32
26=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.105/32
27=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.102/32
28=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.103/32
29=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101/32
30=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200/32
31=> INFO: 🔒 Restored block rules for: 10.1.103.2
32=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100/32
33=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.105/32
34=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.102/32
35=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.103/32
36=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101/32
37=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200/32
38=> INFO: 🔒 Restored block rules for: 10.1.103.3
39=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100:8006/tcp
40=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100:22/tcp
41=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.105:8007/tcp
42=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.102:22/tcp
43=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200:80/tcp
44=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200:443/tcp
45=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.103:80/tcp
46=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101:80/tcp
47=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101:443/tcp
48=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.210:9000/tcp
49=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100:8006/tcp
50=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100:22/tcp
51=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.105:8007/tcp
52=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.102:22/tcp
53=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200:80/tcp
54=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200:443/tcp
55=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.103:80/tcp
56=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101:80/tcp
57=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101:443/tcp
58=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.210:9000/tcp
59=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100:8006/tcp
60=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100:22/tcp
61=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.105:8007/tcp
62=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.102:22/tcp
63=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200:80/tcp
64=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200:443/tcp
65=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.103:80/tcp
66=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101:80/tcp
67=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101:443/tcp
68=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.210:9000/tcp
69=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100:8006/tcp
70=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100:22/tcp
71=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.105:8007/tcp
72=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.102:22/tcp
73=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200:80/tcp
74=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200:443/tcp
75=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.103:80/tcp
76=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101:80/tcp
77=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101:443/tcp
78=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.210:9000/tcp
79=> INFO: 🔒 Restored block rules for: guest
80=> INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.100:8006/tcp
81=> INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.105:8007/tcp
82=> INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.210:9000/tcp
83=> INFO: 🔒 Restored block rules for: user
84=> SUCCESS: ✅ 🔒 WireGuard restarted
85root@wireguard:~# iptables -L FORWARD -n | grep -v "^Chain\|^target\|^$"
86DROP 6 -- 10.1.2.1 10.0.0.210 tcp dpt:9000
87DROP 6 -- 10.1.2.1 10.0.0.105 tcp dpt:8007
88DROP 6 -- 10.1.2.1 10.0.0.100 tcp dpt:8006
89DROP 6 -- 10.1.103.1 10.0.0.210 tcp dpt:9000
90DROP 6 -- 10.1.103.1 10.0.0.101 tcp dpt:443
91DROP 6 -- 10.1.103.1 10.0.0.101 tcp dpt:80
92DROP 6 -- 10.1.103.1 10.0.0.103 tcp dpt:80
93DROP 6 -- 10.1.103.1 10.0.0.200 tcp dpt:443
94DROP 6 -- 10.1.103.1 10.0.0.200 tcp dpt:80
95DROP 6 -- 10.1.103.1 10.0.0.102 tcp dpt:22
96DROP 6 -- 10.1.103.1 10.0.0.105 tcp dpt:8007
97DROP 6 -- 10.1.103.1 10.0.0.100 tcp dpt:22
98DROP 6 -- 10.1.103.1 10.0.0.100 tcp dpt:8006
99DROP 6 -- 10.1.103.3 10.0.0.210 tcp dpt:9000
100DROP 6 -- 10.1.103.3 10.0.0.101 tcp dpt:443
101DROP 6 -- 10.1.103.3 10.0.0.101 tcp dpt:80
102DROP 6 -- 10.1.103.3 10.0.0.103 tcp dpt:80
103DROP 6 -- 10.1.103.3 10.0.0.200 tcp dpt:443
104DROP 6 -- 10.1.103.3 10.0.0.200 tcp dpt:80
105DROP 6 -- 10.1.103.3 10.0.0.102 tcp dpt:22
106DROP 6 -- 10.1.103.3 10.0.0.105 tcp dpt:8007
107DROP 6 -- 10.1.103.3 10.0.0.100 tcp dpt:22
108DROP 6 -- 10.1.103.3 10.0.0.100 tcp dpt:8006
109DROP 6 -- 10.1.103.2 10.0.0.210 tcp dpt:9000
110DROP 6 -- 10.1.103.2 10.0.0.101 tcp dpt:443
111DROP 6 -- 10.1.103.2 10.0.0.101 tcp dpt:80
112DROP 6 -- 10.1.103.2 10.0.0.103 tcp dpt:80
113DROP 6 -- 10.1.103.2 10.0.0.200 tcp dpt:443
114DROP 6 -- 10.1.103.2 10.0.0.200 tcp dpt:80
115DROP 6 -- 10.1.103.2 10.0.0.102 tcp dpt:22
116DROP 6 -- 10.1.103.2 10.0.0.105 tcp dpt:8007
117DROP 6 -- 10.1.103.2 10.0.0.100 tcp dpt:22
118DROP 6 -- 10.1.103.2 10.0.0.100 tcp dpt:8006
119DROP 6 -- 10.1.103.2 10.0.0.210 tcp dpt:9000
120DROP 6 -- 10.1.103.2 10.0.0.101 tcp dpt:443
121DROP 6 -- 10.1.103.2 10.0.0.101 tcp dpt:80
122DROP 6 -- 10.1.103.2 10.0.0.103 tcp dpt:80
123DROP 6 -- 10.1.103.2 10.0.0.200 tcp dpt:443
124DROP 6 -- 10.1.103.2 10.0.0.200 tcp dpt:80
125DROP 6 -- 10.1.103.2 10.0.0.102 tcp dpt:22
126DROP 6 -- 10.1.103.2 10.0.0.105 tcp dpt:8007
127DROP 6 -- 10.1.103.2 10.0.0.100 tcp dpt:22
128DROP 6 -- 10.1.103.2 10.0.0.100 tcp dpt:8006
129DROP 0 -- 10.1.103.3 10.0.0.200
130LOG 0 -- 10.1.103.3 10.0.0.200 LOG flags 0 level 4 prefix "wgctl-dropped: "
131DROP 0 -- 10.1.103.3 10.0.0.101
132LOG 0 -- 10.1.103.3 10.0.0.101 LOG flags 0 level 4 prefix "wgctl-dropped: "
133DROP 0 -- 10.1.103.3 10.0.0.103
134LOG 0 -- 10.1.103.3 10.0.0.103 LOG flags 0 level 4 prefix "wgctl-dropped: "
135DROP 0 -- 10.1.103.3 10.0.0.102
136LOG 0 -- 10.1.103.3 10.0.0.102 LOG flags 0 level 4 prefix "wgctl-dropped: "
137DROP 0 -- 10.1.103.3 10.0.0.105
138LOG 0 -- 10.1.103.3 10.0.0.105 LOG flags 0 level 4 prefix "wgctl-dropped: "
139DROP 0 -- 10.1.103.3 10.0.0.100
140LOG 0 -- 10.1.103.3 10.0.0.100 LOG flags 0 level 4 prefix "wgctl-dropped: "
141DROP 0 -- 10.1.103.2 10.0.0.200
142LOG 0 -- 10.1.103.2 10.0.0.200 LOG flags 0 level 4 prefix "wgctl-dropped: "
143DROP 0 -- 10.1.103.2 10.0.0.101
144LOG 0 -- 10.1.103.2 10.0.0.101 LOG flags 0 level 4 prefix "wgctl-dropped: "
145DROP 0 -- 10.1.103.2 10.0.0.103
146LOG 0 -- 10.1.103.2 10.0.0.103 LOG flags 0 level 4 prefix "wgctl-dropped: "
147DROP 0 -- 10.1.103.2 10.0.0.102
148LOG 0 -- 10.1.103.2 10.0.0.102 LOG flags 0 level 4 prefix "wgctl-dropped: "
149DROP 0 -- 10.1.103.2 10.0.0.105
150LOG 0 -- 10.1.103.2 10.0.0.105 LOG flags 0 level 4 prefix "wgctl-dropped: "
151DROP 0 -- 10.1.103.2 10.0.0.100
152LOG 0 -- 10.1.103.2 10.0.0.100 LOG flags 0 level 4 prefix "wgctl-dropped: "
153DROP 0 -- 10.1.103.2 10.0.0.200
154LOG 0 -- 10.1.103.2 10.0.0.200 LOG flags 0 level 4 prefix "wgctl-dropped: "
155DROP 0 -- 10.1.103.2 10.0.0.101
156LOG 0 -- 10.1.103.2 10.0.0.101 LOG flags 0 level 4 prefix "wgctl-dropped: "
157DROP 0 -- 10.1.103.2 10.0.0.103
158LOG 0 -- 10.1.103.2 10.0.0.103 LOG flags 0 level 4 prefix "wgctl-dropped: "
159DROP 0 -- 10.1.103.2 10.0.0.102
160LOG 0 -- 10.1.103.2 10.0.0.102 LOG flags 0 level 4 prefix "wgctl-dropped: "
161DROP 0 -- 10.1.103.2 10.0.0.105
162LOG 0 -- 10.1.103.2 10.0.0.105 LOG flags 0 level 4 prefix "wgctl-dropped: "
163DROP 0 -- 10.1.103.2 10.0.0.100
164LOG 0 -- 10.1.103.2 10.0.0.100 LOG flags 0 level 4 prefix "wgctl-dropped: "
165DROP 0 -- 10.1.103.1 10.0.0.200
166LOG 0 -- 10.1.103.1 10.0.0.200 LOG flags 0 level 4 prefix "wgctl-dropped: "
167DROP 0 -- 10.1.103.1 10.0.0.101
168LOG 0 -- 10.1.103.1 10.0.0.101 LOG flags 0 level 4 prefix "wgctl-dropped: "
169DROP 0 -- 10.1.103.1 10.0.0.103
170LOG 0 -- 10.1.103.1 10.0.0.103 LOG flags 0 level 4 prefix "wgctl-dropped: "
171DROP 0 -- 10.1.103.1 10.0.0.102
172LOG 0 -- 10.1.103.1 10.0.0.102 LOG flags 0 level 4 prefix "wgctl-dropped: "
173DROP 0 -- 10.1.103.1 10.0.0.105
174LOG 0 -- 10.1.103.1 10.0.0.105 LOG flags 0 level 4 prefix "wgctl-dropped: "
175DROP 0 -- 10.1.103.1 10.0.0.100
176LOG 0 -- 10.1.103.1 10.0.0.100 LOG flags 0 level 4 prefix "wgctl-dropped: "
177ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0
178ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0