oot@wireguard:/# wgctl restart => INFO: 🟢 🔒 Restarting WireGuard... => INFO: 🔒 Restoring rules from peer meta files... => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100/32 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.105/32 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.102/32 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.103/32 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101/32 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200/32 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100:22/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.102:22/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200:443/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.103:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101:443/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=guest-test ip=10.1.103.1 => DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test => INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.1 => INFO: 🔒 Restored rule 'guest' for: guest-test (10.1.103.1) => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100/32 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.105/32 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.102/32 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.103/32 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101/32 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200/32 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100:22/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.102:22/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200:443/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.103:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101:443/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=guest-test2 ip=10.1.103.2 => DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test2 => INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.2 => INFO: 🔒 Restored rule 'guest' for: guest-test2 (10.1.103.2) => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100/32 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.105/32 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.102/32 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.103/32 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101/32 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200/32 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100:22/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.102:22/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200:443/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.103:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101:443/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=guest-test3 ip=10.1.103.3 => DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test3 => INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.3 => INFO: 🔒 Restored rule 'guest' for: guest-test3 (10.1.103.3) => INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=laptop-nuno ip=10.1.2.1 => DEBUG: 🔍 rule::apply: set meta rule=user for laptop-nuno => INFO: 📋 🔒 Applied rule 'user' to: 10.1.2.1 => INFO: 🔒 Restored rule 'user' for: laptop-nuno (10.1.2.1) => SUCCESS: ✅ 🔒 WireGuard restarted iptables -L FORWARD -n Chain FORWARD (policy ACCEPT) target prot opt source destination DROP 6 -- 10.1.2.1 10.0.0.210 tcp dpt:9000 DROP 6 -- 10.1.2.1 10.0.0.105 tcp dpt:8007 DROP 6 -- 10.1.2.1 10.0.0.100 tcp dpt:8006 DROP 6 -- 10.1.103.3 10.0.0.210 tcp dpt:9000 DROP 6 -- 10.1.103.3 10.0.0.101 tcp dpt:443 DROP 6 -- 10.1.103.3 10.0.0.101 tcp dpt:80 DROP 6 -- 10.1.103.3 10.0.0.103 tcp dpt:80 DROP 6 -- 10.1.103.3 10.0.0.200 tcp dpt:443 DROP 6 -- 10.1.103.3 10.0.0.200 tcp dpt:80 DROP 6 -- 10.1.103.3 10.0.0.102 tcp dpt:22 DROP 6 -- 10.1.103.3 10.0.0.105 tcp dpt:8007 DROP 6 -- 10.1.103.3 10.0.0.100 tcp dpt:22 DROP 6 -- 10.1.103.3 10.0.0.100 tcp dpt:8006 DROP 0 -- 10.1.103.3 10.0.0.200 LOG 0 -- 10.1.103.3 10.0.0.200 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.3 10.0.0.101 LOG 0 -- 10.1.103.3 10.0.0.101 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.3 10.0.0.103 LOG 0 -- 10.1.103.3 10.0.0.103 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.3 10.0.0.102 LOG 0 -- 10.1.103.3 10.0.0.102 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.3 10.0.0.105 LOG 0 -- 10.1.103.3 10.0.0.105 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.3 10.0.0.100 LOG 0 -- 10.1.103.3 10.0.0.100 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 6 -- 10.1.103.2 10.0.0.210 tcp dpt:9000 DROP 6 -- 10.1.103.2 10.0.0.101 tcp dpt:443 DROP 6 -- 10.1.103.2 10.0.0.101 tcp dpt:80 DROP 6 -- 10.1.103.2 10.0.0.103 tcp dpt:80 DROP 6 -- 10.1.103.2 10.0.0.200 tcp dpt:443 DROP 6 -- 10.1.103.2 10.0.0.200 tcp dpt:80 DROP 6 -- 10.1.103.2 10.0.0.102 tcp dpt:22 DROP 6 -- 10.1.103.2 10.0.0.105 tcp dpt:8007 DROP 6 -- 10.1.103.2 10.0.0.100 tcp dpt:22 DROP 6 -- 10.1.103.2 10.0.0.100 tcp dpt:8006 DROP 0 -- 10.1.103.2 10.0.0.200 LOG 0 -- 10.1.103.2 10.0.0.200 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.2 10.0.0.101 LOG 0 -- 10.1.103.2 10.0.0.101 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.2 10.0.0.103 LOG 0 -- 10.1.103.2 10.0.0.103 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.2 10.0.0.102 LOG 0 -- 10.1.103.2 10.0.0.102 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.2 10.0.0.105 LOG 0 -- 10.1.103.2 10.0.0.105 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.2 10.0.0.100 LOG 0 -- 10.1.103.2 10.0.0.100 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 6 -- 10.1.103.1 10.0.0.210 tcp dpt:9000 DROP 6 -- 10.1.103.1 10.0.0.101 tcp dpt:443 DROP 6 -- 10.1.103.1 10.0.0.101 tcp dpt:80 DROP 6 -- 10.1.103.1 10.0.0.103 tcp dpt:80 DROP 6 -- 10.1.103.1 10.0.0.200 tcp dpt:443 DROP 6 -- 10.1.103.1 10.0.0.200 tcp dpt:80 DROP 6 -- 10.1.103.1 10.0.0.102 tcp dpt:22 DROP 6 -- 10.1.103.1 10.0.0.105 tcp dpt:8007 DROP 6 -- 10.1.103.1 10.0.0.100 tcp dpt:22 DROP 6 -- 10.1.103.1 10.0.0.100 tcp dpt:8006 DROP 0 -- 10.1.103.1 10.0.0.200 LOG 0 -- 10.1.103.1 10.0.0.200 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.1 10.0.0.101 LOG 0 -- 10.1.103.1 10.0.0.101 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.1 10.0.0.103 LOG 0 -- 10.1.103.1 10.0.0.103 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.1 10.0.0.102 LOG 0 -- 10.1.103.1 10.0.0.102 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.1 10.0.0.105 LOG 0 -- 10.1.103.1 10.0.0.105 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.1 10.0.0.100 LOG 0 -- 10.1.103.1 10.0.0.100 LOG flags 0 level 4 prefix "wgctl-dropped: " ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0 ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0