gistfile1.txt - KrilHub Gist

Rewizja 7f00ffeb4be43bcdcf20989d406492b7e9b22891

gistfile1.txt · 5.9 KiB · Text Surowy

root@wireguard:/# wgctl restart => INFO: 🟢 🔒 Restarting WireGuard... => INFO: 🔒 Restoring rules from peer meta files... => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100:22/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.102:22/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200:443/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.103:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101:443/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=guest-test ip=10.1.103.1 => DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test => INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.1 => INFO: 🔒 Restored rule 'guest' for: guest-test (10.1.103.1) => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100:22/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.102:22/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200:443/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.103:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101:443/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=guest-test2 ip=10.1.103.2 => DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test2 => INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.2 => INFO: 🔒 Restored rule 'guest' for: guest-test2 (10.1.103.2) => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100:22/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.102:22/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200:443/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.103:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101:443/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=guest-test3 ip=10.1.103.3 => DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test3 => INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.3 => INFO: 🔒 Restored rule 'guest' for: guest-test3 (10.1.103.3) => INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=laptop-nuno ip=10.1.2.1 => DEBUG: 🔍 rule::apply: set meta rule=user for laptop-nuno => INFO: 📋 🔒 Applied rule 'user' to: 10.1.2.1 => INFO: 🔒 Restored rule 'user' for: laptop-nuno (10.1.2.1) => SUCCESS: ✅ 🔒 WireGuard restarted root@wireguard:/# iptables -t nat -L PREROUTING Chain PREROUTING (policy ACCEPT) target prot opt source destination root@wireguard:/# iptables -L FORWARD -n Chain FORWARD (policy ACCEPT) target prot opt source destination DROP 6 -- 10.1.2.1 10.0.0.210 tcp dpt:9000 DROP 6 -- 10.1.2.1 10.0.0.105 tcp dpt:8007 DROP 6 -- 10.1.2.1 10.0.0.100 tcp dpt:8006 DROP 6 -- 10.1.103.3 10.0.0.210 tcp dpt:9000 DROP 6 -- 10.1.103.3 10.0.0.101 tcp dpt:443 DROP 6 -- 10.1.103.3 10.0.0.101 tcp dpt:80 DROP 6 -- 10.1.103.3 10.0.0.103 tcp dpt:80 DROP 6 -- 10.1.103.3 10.0.0.200 tcp dpt:443 DROP 6 -- 10.1.103.3 10.0.0.200 tcp dpt:80 DROP 6 -- 10.1.103.3 10.0.0.102 tcp dpt:22 DROP 6 -- 10.1.103.3 10.0.0.105 tcp dpt:8007 DROP 6 -- 10.1.103.3 10.0.0.100 tcp dpt:22 DROP 6 -- 10.1.103.3 10.0.0.100 tcp dpt:8006 DROP 6 -- 10.1.103.2 10.0.0.210 tcp dpt:9000 DROP 6 -- 10.1.103.2 10.0.0.101 tcp dpt:443 DROP 6 -- 10.1.103.2 10.0.0.101 tcp dpt:80 DROP 6 -- 10.1.103.2 10.0.0.103 tcp dpt:80 DROP 6 -- 10.1.103.2 10.0.0.200 tcp dpt:443 DROP 6 -- 10.1.103.2 10.0.0.200 tcp dpt:80 DROP 6 -- 10.1.103.2 10.0.0.102 tcp dpt:22 DROP 6 -- 10.1.103.2 10.0.0.105 tcp dpt:8007 DROP 6 -- 10.1.103.2 10.0.0.100 tcp dpt:22 DROP 6 -- 10.1.103.2 10.0.0.100 tcp dpt:8006 DROP 6 -- 10.1.103.1 10.0.0.210 tcp dpt:9000 DROP 6 -- 10.1.103.1 10.0.0.101 tcp dpt:443 DROP 6 -- 10.1.103.1 10.0.0.101 tcp dpt:80 DROP 6 -- 10.1.103.1 10.0.0.103 tcp dpt:80 DROP 6 -- 10.1.103.1 10.0.0.200 tcp dpt:443 DROP 6 -- 10.1.103.1 10.0.0.200 tcp dpt:80 DROP 6 -- 10.1.103.1 10.0.0.102 tcp dpt:22 DROP 6 -- 10.1.103.1 10.0.0.105 tcp dpt:8007 DROP 6 -- 10.1.103.1 10.0.0.100 tcp dpt:22 DROP 6 -- 10.1.103.1 10.0.0.100 tcp dpt:8006 ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0 ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0

1	root@wireguard:/# wgctl restart
2	=> INFO: 🟢 🔒 Restarting WireGuard...
3	=> INFO: 🔒 Restoring rules from peer meta files...
4	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100:8006/tcp
5	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100:22/tcp
6	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.105:8007/tcp
7	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.102:22/tcp
8	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200:80/tcp
9	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200:443/tcp
10	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.103:80/tcp
11	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101:80/tcp
12	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101:443/tcp
13	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.210:9000/tcp
14	=> DEBUG: 🔍 rule::apply: peer_name=guest-test ip=10.1.103.1
15	=> DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test
16	=> INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.1
17	=> INFO: 🔒 Restored rule 'guest' for: guest-test (10.1.103.1)
18	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100:8006/tcp
19	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100:22/tcp
20	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.105:8007/tcp
21	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.102:22/tcp
22	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200:80/tcp
23	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200:443/tcp
24	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.103:80/tcp
25	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101:80/tcp
26	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101:443/tcp
27	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.210:9000/tcp
28	=> DEBUG: 🔍 rule::apply: peer_name=guest-test2 ip=10.1.103.2
29	=> DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test2
30	=> INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.2
31	=> INFO: 🔒 Restored rule 'guest' for: guest-test2 (10.1.103.2)
32	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100:8006/tcp
33	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100:22/tcp
34	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.105:8007/tcp
35	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.102:22/tcp
36	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200:80/tcp
37	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200:443/tcp
38	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.103:80/tcp
39	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101:80/tcp
40	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101:443/tcp
41	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.210:9000/tcp
42	=> DEBUG: 🔍 rule::apply: peer_name=guest-test3 ip=10.1.103.3
43	=> DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test3
44	=> INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.3
45	=> INFO: 🔒 Restored rule 'guest' for: guest-test3 (10.1.103.3)
46	=> INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.100:8006/tcp
47	=> INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.105:8007/tcp
48	=> INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.210:9000/tcp
49	=> DEBUG: 🔍 rule::apply: peer_name=laptop-nuno ip=10.1.2.1
50	=> DEBUG: 🔍 rule::apply: set meta rule=user for laptop-nuno
51	=> INFO: 📋 🔒 Applied rule 'user' to: 10.1.2.1
52	=> INFO: 🔒 Restored rule 'user' for: laptop-nuno (10.1.2.1)
53	=> SUCCESS: ✅ 🔒 WireGuard restarted
54	root@wireguard:/# iptables -t nat -L PREROUTING
55	Chain PREROUTING (policy ACCEPT)
56	target prot opt source destination
57	root@wireguard:/# iptables -L FORWARD -n
58	Chain FORWARD (policy ACCEPT)
59	target prot opt source destination
60	DROP 6 -- 10.1.2.1 10.0.0.210 tcp dpt:9000
61	DROP 6 -- 10.1.2.1 10.0.0.105 tcp dpt:8007
62	DROP 6 -- 10.1.2.1 10.0.0.100 tcp dpt:8006
63	DROP 6 -- 10.1.103.3 10.0.0.210 tcp dpt:9000
64	DROP 6 -- 10.1.103.3 10.0.0.101 tcp dpt:443
65	DROP 6 -- 10.1.103.3 10.0.0.101 tcp dpt:80
66	DROP 6 -- 10.1.103.3 10.0.0.103 tcp dpt:80
67	DROP 6 -- 10.1.103.3 10.0.0.200 tcp dpt:443
68	DROP 6 -- 10.1.103.3 10.0.0.200 tcp dpt:80
69	DROP 6 -- 10.1.103.3 10.0.0.102 tcp dpt:22
70	DROP 6 -- 10.1.103.3 10.0.0.105 tcp dpt:8007
71	DROP 6 -- 10.1.103.3 10.0.0.100 tcp dpt:22
72	DROP 6 -- 10.1.103.3 10.0.0.100 tcp dpt:8006
73	DROP 6 -- 10.1.103.2 10.0.0.210 tcp dpt:9000
74	DROP 6 -- 10.1.103.2 10.0.0.101 tcp dpt:443
75	DROP 6 -- 10.1.103.2 10.0.0.101 tcp dpt:80
76	DROP 6 -- 10.1.103.2 10.0.0.103 tcp dpt:80
77	DROP 6 -- 10.1.103.2 10.0.0.200 tcp dpt:443
78	DROP 6 -- 10.1.103.2 10.0.0.200 tcp dpt:80
79	DROP 6 -- 10.1.103.2 10.0.0.102 tcp dpt:22
80	DROP 6 -- 10.1.103.2 10.0.0.105 tcp dpt:8007
81	DROP 6 -- 10.1.103.2 10.0.0.100 tcp dpt:22
82	DROP 6 -- 10.1.103.2 10.0.0.100 tcp dpt:8006
83	DROP 6 -- 10.1.103.1 10.0.0.210 tcp dpt:9000
84	DROP 6 -- 10.1.103.1 10.0.0.101 tcp dpt:443
85	DROP 6 -- 10.1.103.1 10.0.0.101 tcp dpt:80
86	DROP 6 -- 10.1.103.1 10.0.0.103 tcp dpt:80
87	DROP 6 -- 10.1.103.1 10.0.0.200 tcp dpt:443
88	DROP 6 -- 10.1.103.1 10.0.0.200 tcp dpt:80
89	DROP 6 -- 10.1.103.1 10.0.0.102 tcp dpt:22
90	DROP 6 -- 10.1.103.1 10.0.0.105 tcp dpt:8007
91	DROP 6 -- 10.1.103.1 10.0.0.100 tcp dpt:22
92	DROP 6 -- 10.1.103.1 10.0.0.100 tcp dpt:8006
93	ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0
94	ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0