Zuletzt aktiv 2 months ago

nuno hat die Gist bearbeitet 2 months ago. Zu Änderung gehen

1 file changed, 178 insertions

gistfile1.txt(Datei erstellt)

@@ -0,0 +1,178 @@
1 + root@wireguard:~# wgctl restart
2 + => INFO: 🟢 🔒 Restarting WireGuard...
3 + => INFO: 🔒 Restoring rules from peer meta files...
4 + => INFO: 🔒 Rule 'guest' already applied to: 10.1.103.1
5 + => INFO: 🔒 Restored rule 'guest' for: guest-test (10.1.103.1)
6 + => INFO: 🔒 Rule 'guest' already applied to: 10.1.103.2
7 + => INFO: 🔒 Restored rule 'guest' for: guest-test2 (10.1.103.2)
8 + => INFO: 🔒 Rule 'guest' already applied to: 10.1.103.3
9 + => INFO: 🔒 Restored rule 'guest' for: guest-test3 (10.1.103.3)
10 + => INFO: 🔒 Rule 'user' already applied to: 10.1.2.1
11 + => INFO: 🔒 Restored rule 'user' for: laptop-nuno (10.1.2.1)
12 + => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100/32
13 + => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.105/32
14 + => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.102/32
15 + => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.103/32
16 + => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101/32
17 + => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200/32
18 + => INFO: 🔒 Restored block rules for: 10.1.103.1
19 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100/32
20 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.105/32
21 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.102/32
22 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.103/32
23 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101/32
24 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200/32
25 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100/32
26 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.105/32
27 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.102/32
28 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.103/32
29 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101/32
30 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200/32
31 + => INFO: 🔒 Restored block rules for: 10.1.103.2
32 + => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100/32
33 + => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.105/32
34 + => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.102/32
35 + => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.103/32
36 + => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101/32
37 + => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200/32
38 + => INFO: 🔒 Restored block rules for: 10.1.103.3
39 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100:8006/tcp
40 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100:22/tcp
41 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.105:8007/tcp
42 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.102:22/tcp
43 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200:80/tcp
44 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200:443/tcp
45 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.103:80/tcp
46 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101:80/tcp
47 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101:443/tcp
48 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.210:9000/tcp
49 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100:8006/tcp
50 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100:22/tcp
51 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.105:8007/tcp
52 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.102:22/tcp
53 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200:80/tcp
54 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200:443/tcp
55 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.103:80/tcp
56 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101:80/tcp
57 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101:443/tcp
58 + => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.210:9000/tcp
59 + => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100:8006/tcp
60 + => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100:22/tcp
61 + => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.105:8007/tcp
62 + => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.102:22/tcp
63 + => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200:80/tcp
64 + => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200:443/tcp
65 + => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.103:80/tcp
66 + => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101:80/tcp
67 + => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101:443/tcp
68 + => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.210:9000/tcp
69 + => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100:8006/tcp
70 + => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100:22/tcp
71 + => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.105:8007/tcp
72 + => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.102:22/tcp
73 + => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200:80/tcp
74 + => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200:443/tcp
75 + => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.103:80/tcp
76 + => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101:80/tcp
77 + => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101:443/tcp
78 + => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.210:9000/tcp
79 + => INFO: 🔒 Restored block rules for: guest
80 + => INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.100:8006/tcp
81 + => INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.105:8007/tcp
82 + => INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.210:9000/tcp
83 + => INFO: 🔒 Restored block rules for: user
84 + => SUCCESS: ✅ 🔒 WireGuard restarted
85 + root@wireguard:~# iptables -L FORWARD -n | grep -v "^Chain\|^target\|^$"
86 + DROP 6 -- 10.1.2.1 10.0.0.210 tcp dpt:9000
87 + DROP 6 -- 10.1.2.1 10.0.0.105 tcp dpt:8007
88 + DROP 6 -- 10.1.2.1 10.0.0.100 tcp dpt:8006
89 + DROP 6 -- 10.1.103.1 10.0.0.210 tcp dpt:9000
90 + DROP 6 -- 10.1.103.1 10.0.0.101 tcp dpt:443
91 + DROP 6 -- 10.1.103.1 10.0.0.101 tcp dpt:80
92 + DROP 6 -- 10.1.103.1 10.0.0.103 tcp dpt:80
93 + DROP 6 -- 10.1.103.1 10.0.0.200 tcp dpt:443
94 + DROP 6 -- 10.1.103.1 10.0.0.200 tcp dpt:80
95 + DROP 6 -- 10.1.103.1 10.0.0.102 tcp dpt:22
96 + DROP 6 -- 10.1.103.1 10.0.0.105 tcp dpt:8007
97 + DROP 6 -- 10.1.103.1 10.0.0.100 tcp dpt:22
98 + DROP 6 -- 10.1.103.1 10.0.0.100 tcp dpt:8006
99 + DROP 6 -- 10.1.103.3 10.0.0.210 tcp dpt:9000
100 + DROP 6 -- 10.1.103.3 10.0.0.101 tcp dpt:443
101 + DROP 6 -- 10.1.103.3 10.0.0.101 tcp dpt:80
102 + DROP 6 -- 10.1.103.3 10.0.0.103 tcp dpt:80
103 + DROP 6 -- 10.1.103.3 10.0.0.200 tcp dpt:443
104 + DROP 6 -- 10.1.103.3 10.0.0.200 tcp dpt:80
105 + DROP 6 -- 10.1.103.3 10.0.0.102 tcp dpt:22
106 + DROP 6 -- 10.1.103.3 10.0.0.105 tcp dpt:8007
107 + DROP 6 -- 10.1.103.3 10.0.0.100 tcp dpt:22
108 + DROP 6 -- 10.1.103.3 10.0.0.100 tcp dpt:8006
109 + DROP 6 -- 10.1.103.2 10.0.0.210 tcp dpt:9000
110 + DROP 6 -- 10.1.103.2 10.0.0.101 tcp dpt:443
111 + DROP 6 -- 10.1.103.2 10.0.0.101 tcp dpt:80
112 + DROP 6 -- 10.1.103.2 10.0.0.103 tcp dpt:80
113 + DROP 6 -- 10.1.103.2 10.0.0.200 tcp dpt:443
114 + DROP 6 -- 10.1.103.2 10.0.0.200 tcp dpt:80
115 + DROP 6 -- 10.1.103.2 10.0.0.102 tcp dpt:22
116 + DROP 6 -- 10.1.103.2 10.0.0.105 tcp dpt:8007
117 + DROP 6 -- 10.1.103.2 10.0.0.100 tcp dpt:22
118 + DROP 6 -- 10.1.103.2 10.0.0.100 tcp dpt:8006
119 + DROP 6 -- 10.1.103.2 10.0.0.210 tcp dpt:9000
120 + DROP 6 -- 10.1.103.2 10.0.0.101 tcp dpt:443
121 + DROP 6 -- 10.1.103.2 10.0.0.101 tcp dpt:80
122 + DROP 6 -- 10.1.103.2 10.0.0.103 tcp dpt:80
123 + DROP 6 -- 10.1.103.2 10.0.0.200 tcp dpt:443
124 + DROP 6 -- 10.1.103.2 10.0.0.200 tcp dpt:80
125 + DROP 6 -- 10.1.103.2 10.0.0.102 tcp dpt:22
126 + DROP 6 -- 10.1.103.2 10.0.0.105 tcp dpt:8007
127 + DROP 6 -- 10.1.103.2 10.0.0.100 tcp dpt:22
128 + DROP 6 -- 10.1.103.2 10.0.0.100 tcp dpt:8006
129 + DROP 0 -- 10.1.103.3 10.0.0.200
130 + LOG 0 -- 10.1.103.3 10.0.0.200 LOG flags 0 level 4 prefix "wgctl-dropped: "
131 + DROP 0 -- 10.1.103.3 10.0.0.101
132 + LOG 0 -- 10.1.103.3 10.0.0.101 LOG flags 0 level 4 prefix "wgctl-dropped: "
133 + DROP 0 -- 10.1.103.3 10.0.0.103
134 + LOG 0 -- 10.1.103.3 10.0.0.103 LOG flags 0 level 4 prefix "wgctl-dropped: "
135 + DROP 0 -- 10.1.103.3 10.0.0.102
136 + LOG 0 -- 10.1.103.3 10.0.0.102 LOG flags 0 level 4 prefix "wgctl-dropped: "
137 + DROP 0 -- 10.1.103.3 10.0.0.105
138 + LOG 0 -- 10.1.103.3 10.0.0.105 LOG flags 0 level 4 prefix "wgctl-dropped: "
139 + DROP 0 -- 10.1.103.3 10.0.0.100
140 + LOG 0 -- 10.1.103.3 10.0.0.100 LOG flags 0 level 4 prefix "wgctl-dropped: "
141 + DROP 0 -- 10.1.103.2 10.0.0.200
142 + LOG 0 -- 10.1.103.2 10.0.0.200 LOG flags 0 level 4 prefix "wgctl-dropped: "
143 + DROP 0 -- 10.1.103.2 10.0.0.101
144 + LOG 0 -- 10.1.103.2 10.0.0.101 LOG flags 0 level 4 prefix "wgctl-dropped: "
145 + DROP 0 -- 10.1.103.2 10.0.0.103
146 + LOG 0 -- 10.1.103.2 10.0.0.103 LOG flags 0 level 4 prefix "wgctl-dropped: "
147 + DROP 0 -- 10.1.103.2 10.0.0.102
148 + LOG 0 -- 10.1.103.2 10.0.0.102 LOG flags 0 level 4 prefix "wgctl-dropped: "
149 + DROP 0 -- 10.1.103.2 10.0.0.105
150 + LOG 0 -- 10.1.103.2 10.0.0.105 LOG flags 0 level 4 prefix "wgctl-dropped: "
151 + DROP 0 -- 10.1.103.2 10.0.0.100
152 + LOG 0 -- 10.1.103.2 10.0.0.100 LOG flags 0 level 4 prefix "wgctl-dropped: "
153 + DROP 0 -- 10.1.103.2 10.0.0.200
154 + LOG 0 -- 10.1.103.2 10.0.0.200 LOG flags 0 level 4 prefix "wgctl-dropped: "
155 + DROP 0 -- 10.1.103.2 10.0.0.101
156 + LOG 0 -- 10.1.103.2 10.0.0.101 LOG flags 0 level 4 prefix "wgctl-dropped: "
157 + DROP 0 -- 10.1.103.2 10.0.0.103
158 + LOG 0 -- 10.1.103.2 10.0.0.103 LOG flags 0 level 4 prefix "wgctl-dropped: "
159 + DROP 0 -- 10.1.103.2 10.0.0.102
160 + LOG 0 -- 10.1.103.2 10.0.0.102 LOG flags 0 level 4 prefix "wgctl-dropped: "
161 + DROP 0 -- 10.1.103.2 10.0.0.105
162 + LOG 0 -- 10.1.103.2 10.0.0.105 LOG flags 0 level 4 prefix "wgctl-dropped: "
163 + DROP 0 -- 10.1.103.2 10.0.0.100
164 + LOG 0 -- 10.1.103.2 10.0.0.100 LOG flags 0 level 4 prefix "wgctl-dropped: "
165 + DROP 0 -- 10.1.103.1 10.0.0.200
166 + LOG 0 -- 10.1.103.1 10.0.0.200 LOG flags 0 level 4 prefix "wgctl-dropped: "
167 + DROP 0 -- 10.1.103.1 10.0.0.101
168 + LOG 0 -- 10.1.103.1 10.0.0.101 LOG flags 0 level 4 prefix "wgctl-dropped: "
169 + DROP 0 -- 10.1.103.1 10.0.0.103
170 + LOG 0 -- 10.1.103.1 10.0.0.103 LOG flags 0 level 4 prefix "wgctl-dropped: "
171 + DROP 0 -- 10.1.103.1 10.0.0.102
172 + LOG 0 -- 10.1.103.1 10.0.0.102 LOG flags 0 level 4 prefix "wgctl-dropped: "
173 + DROP 0 -- 10.1.103.1 10.0.0.105
174 + LOG 0 -- 10.1.103.1 10.0.0.105 LOG flags 0 level 4 prefix "wgctl-dropped: "
175 + DROP 0 -- 10.1.103.1 10.0.0.100
176 + LOG 0 -- 10.1.103.1 10.0.0.100 LOG flags 0 level 4 prefix "wgctl-dropped: "
177 + ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0
178 + ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0
Neuer Älter