gistfile1.txt - KrilHub Gist

gistfile1.txt · 4.3 KiB · Text 原始文件

root@wireguard:/# iptables -F FORWARD root@wireguard:/# iptables -t nat -F PREROUTING root@wireguard:/# wgctl restart => INFO: 🟢 🔒 Restarting WireGuard... => INFO: 🔒 Restoring rules from peer meta files... => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.105 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.102 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.103 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=guest-test ip=10.1.103.1 => DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test => INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.1 => INFO: 🔒 Restored rule 'guest' for: guest-test (10.1.103.1) => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.105 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.102 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.103 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=guest-test2 ip=10.1.103.2 => DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test2 => INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.2 => INFO: 🔒 Restored rule 'guest' for: guest-test2 (10.1.103.2) => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.105 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.102 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.103 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=guest-test3 ip=10.1.103.3 => DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test3 => INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.3 => INFO: 🔒 Restored rule 'guest' for: guest-test3 (10.1.103.3) => INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=laptop-nuno ip=10.1.2.1 => DEBUG: 🔍 rule::apply: set meta rule=user for laptop-nuno => INFO: 📋 🔒 Applied rule 'user' to: 10.1.2.1 => INFO: 🔒 Restored rule 'user' for: laptop-nuno (10.1.2.1) => SUCCESS: ✅ 🔒 WireGuard restarted root@wireguard:/# iptables -L FORWARD -n Chain FORWARD (policy ACCEPT) target prot opt source destination DROP 6 -- 10.1.2.1 10.0.0.210 tcp dpt:9000 DROP 6 -- 10.1.2.1 10.0.0.105 tcp dpt:8007 DROP 6 -- 10.1.2.1 10.0.0.100 tcp dpt:8006 DROP 6 -- 10.1.103.3 10.0.0.210 tcp dpt:9000 DROP 0 -- 10.1.103.3 10.0.0.101 DROP 0 -- 10.1.103.3 10.0.0.200 DROP 0 -- 10.1.103.3 10.0.0.103 DROP 0 -- 10.1.103.3 10.0.0.102 DROP 0 -- 10.1.103.3 10.0.0.105 DROP 0 -- 10.1.103.3 10.0.0.100 DROP 6 -- 10.1.103.2 10.0.0.210 tcp dpt:9000 DROP 0 -- 10.1.103.2 10.0.0.101 DROP 0 -- 10.1.103.2 10.0.0.200 DROP 0 -- 10.1.103.2 10.0.0.103 DROP 0 -- 10.1.103.2 10.0.0.102 DROP 0 -- 10.1.103.2 10.0.0.105 DROP 0 -- 10.1.103.2 10.0.0.100 DROP 6 -- 10.1.103.1 10.0.0.210 tcp dpt:9000 DROP 0 -- 10.1.103.1 10.0.0.101 DROP 0 -- 10.1.103.1 10.0.0.200 DROP 0 -- 10.1.103.1 10.0.0.103 DROP 0 -- 10.1.103.1 10.0.0.102 DROP 0 -- 10.1.103.1 10.0.0.105 DROP 0 -- 10.1.103.1 10.0.0.100 ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0 ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0

1	root@wireguard:/# iptables -F FORWARD
2	root@wireguard:/# iptables -t nat -F PREROUTING
3	root@wireguard:/# wgctl restart
4	=> INFO: 🟢 🔒 Restarting WireGuard...
5	=> INFO: 🔒 Restoring rules from peer meta files...
6	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100
7	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.105
8	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.102
9	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.103
10	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200
11	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101
12	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.210:9000/tcp
13	=> DEBUG: 🔍 rule::apply: peer_name=guest-test ip=10.1.103.1
14	=> DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test
15	=> INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.1
16	=> INFO: 🔒 Restored rule 'guest' for: guest-test (10.1.103.1)
17	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100
18	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.105
19	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.102
20	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.103
21	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200
22	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101
23	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.210:9000/tcp
24	=> DEBUG: 🔍 rule::apply: peer_name=guest-test2 ip=10.1.103.2
25	=> DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test2
26	=> INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.2
27	=> INFO: 🔒 Restored rule 'guest' for: guest-test2 (10.1.103.2)
28	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100
29	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.105
30	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.102
31	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.103
32	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200
33	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101
34	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.210:9000/tcp
35	=> DEBUG: 🔍 rule::apply: peer_name=guest-test3 ip=10.1.103.3
36	=> DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test3
37	=> INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.3
38	=> INFO: 🔒 Restored rule 'guest' for: guest-test3 (10.1.103.3)
39	=> INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.100:8006/tcp
40	=> INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.105:8007/tcp
41	=> INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.210:9000/tcp
42	=> DEBUG: 🔍 rule::apply: peer_name=laptop-nuno ip=10.1.2.1
43	=> DEBUG: 🔍 rule::apply: set meta rule=user for laptop-nuno
44	=> INFO: 📋 🔒 Applied rule 'user' to: 10.1.2.1
45	=> INFO: 🔒 Restored rule 'user' for: laptop-nuno (10.1.2.1)
46	=> SUCCESS: ✅ 🔒 WireGuard restarted
47	root@wireguard:/# iptables -L FORWARD -n
48	Chain FORWARD (policy ACCEPT)
49	target prot opt source destination
50	DROP 6 -- 10.1.2.1 10.0.0.210 tcp dpt:9000
51	DROP 6 -- 10.1.2.1 10.0.0.105 tcp dpt:8007
52	DROP 6 -- 10.1.2.1 10.0.0.100 tcp dpt:8006
53	DROP 6 -- 10.1.103.3 10.0.0.210 tcp dpt:9000
54	DROP 0 -- 10.1.103.3 10.0.0.101
55	DROP 0 -- 10.1.103.3 10.0.0.200
56	DROP 0 -- 10.1.103.3 10.0.0.103
57	DROP 0 -- 10.1.103.3 10.0.0.102
58	DROP 0 -- 10.1.103.3 10.0.0.105
59	DROP 0 -- 10.1.103.3 10.0.0.100
60	DROP 6 -- 10.1.103.2 10.0.0.210 tcp dpt:9000
61	DROP 0 -- 10.1.103.2 10.0.0.101
62	DROP 0 -- 10.1.103.2 10.0.0.200
63	DROP 0 -- 10.1.103.2 10.0.0.103
64	DROP 0 -- 10.1.103.2 10.0.0.102
65	DROP 0 -- 10.1.103.2 10.0.0.105
66	DROP 0 -- 10.1.103.2 10.0.0.100
67	DROP 6 -- 10.1.103.1 10.0.0.210 tcp dpt:9000
68	DROP 0 -- 10.1.103.1 10.0.0.101
69	DROP 0 -- 10.1.103.1 10.0.0.200
70	DROP 0 -- 10.1.103.1 10.0.0.103
71	DROP 0 -- 10.1.103.1 10.0.0.102
72	DROP 0 -- 10.1.103.1 10.0.0.105
73	DROP 0 -- 10.1.103.1 10.0.0.100
74	ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0
75	ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0