gistfile1.txt - KrilHub Gist

Revízió bb7cef8375c6d412a00ecd39be737486e10924d9

gistfile1.txt · 9.7 KiB · Text Eredeti

oot@wireguard:/# wgctl restart => INFO: 🟢 🔒 Restarting WireGuard... => INFO: 🔒 Restoring rules from peer meta files... => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100/32 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.105/32 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.102/32 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.103/32 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101/32 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200/32 => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100:22/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.102:22/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200:443/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.103:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101:443/tcp => INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=guest-test ip=10.1.103.1 => DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test => INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.1 => INFO: 🔒 Restored rule 'guest' for: guest-test (10.1.103.1) => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100/32 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.105/32 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.102/32 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.103/32 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101/32 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200/32 => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100:22/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.102:22/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200:443/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.103:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101:443/tcp => INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=guest-test2 ip=10.1.103.2 => DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test2 => INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.2 => INFO: 🔒 Restored rule 'guest' for: guest-test2 (10.1.103.2) => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100/32 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.105/32 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.102/32 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.103/32 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101/32 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200/32 => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100:22/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.102:22/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200:443/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.103:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101:80/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101:443/tcp => INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=guest-test3 ip=10.1.103.3 => DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test3 => INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.3 => INFO: 🔒 Restored rule 'guest' for: guest-test3 (10.1.103.3) => INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.100:8006/tcp => INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.105:8007/tcp => INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.210:9000/tcp => DEBUG: 🔍 rule::apply: peer_name=laptop-nuno ip=10.1.2.1 => DEBUG: 🔍 rule::apply: set meta rule=user for laptop-nuno => INFO: 📋 🔒 Applied rule 'user' to: 10.1.2.1 => INFO: 🔒 Restored rule 'user' for: laptop-nuno (10.1.2.1) => SUCCESS: ✅ 🔒 WireGuard restarted iptables -L FORWARD -n Chain FORWARD (policy ACCEPT) target prot opt source destination DROP 6 -- 10.1.2.1 10.0.0.210 tcp dpt:9000 DROP 6 -- 10.1.2.1 10.0.0.105 tcp dpt:8007 DROP 6 -- 10.1.2.1 10.0.0.100 tcp dpt:8006 DROP 6 -- 10.1.103.3 10.0.0.210 tcp dpt:9000 DROP 6 -- 10.1.103.3 10.0.0.101 tcp dpt:443 DROP 6 -- 10.1.103.3 10.0.0.101 tcp dpt:80 DROP 6 -- 10.1.103.3 10.0.0.103 tcp dpt:80 DROP 6 -- 10.1.103.3 10.0.0.200 tcp dpt:443 DROP 6 -- 10.1.103.3 10.0.0.200 tcp dpt:80 DROP 6 -- 10.1.103.3 10.0.0.102 tcp dpt:22 DROP 6 -- 10.1.103.3 10.0.0.105 tcp dpt:8007 DROP 6 -- 10.1.103.3 10.0.0.100 tcp dpt:22 DROP 6 -- 10.1.103.3 10.0.0.100 tcp dpt:8006 DROP 0 -- 10.1.103.3 10.0.0.200 LOG 0 -- 10.1.103.3 10.0.0.200 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.3 10.0.0.101 LOG 0 -- 10.1.103.3 10.0.0.101 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.3 10.0.0.103 LOG 0 -- 10.1.103.3 10.0.0.103 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.3 10.0.0.102 LOG 0 -- 10.1.103.3 10.0.0.102 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.3 10.0.0.105 LOG 0 -- 10.1.103.3 10.0.0.105 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.3 10.0.0.100 LOG 0 -- 10.1.103.3 10.0.0.100 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 6 -- 10.1.103.2 10.0.0.210 tcp dpt:9000 DROP 6 -- 10.1.103.2 10.0.0.101 tcp dpt:443 DROP 6 -- 10.1.103.2 10.0.0.101 tcp dpt:80 DROP 6 -- 10.1.103.2 10.0.0.103 tcp dpt:80 DROP 6 -- 10.1.103.2 10.0.0.200 tcp dpt:443 DROP 6 -- 10.1.103.2 10.0.0.200 tcp dpt:80 DROP 6 -- 10.1.103.2 10.0.0.102 tcp dpt:22 DROP 6 -- 10.1.103.2 10.0.0.105 tcp dpt:8007 DROP 6 -- 10.1.103.2 10.0.0.100 tcp dpt:22 DROP 6 -- 10.1.103.2 10.0.0.100 tcp dpt:8006 DROP 0 -- 10.1.103.2 10.0.0.200 LOG 0 -- 10.1.103.2 10.0.0.200 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.2 10.0.0.101 LOG 0 -- 10.1.103.2 10.0.0.101 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.2 10.0.0.103 LOG 0 -- 10.1.103.2 10.0.0.103 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.2 10.0.0.102 LOG 0 -- 10.1.103.2 10.0.0.102 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.2 10.0.0.105 LOG 0 -- 10.1.103.2 10.0.0.105 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.2 10.0.0.100 LOG 0 -- 10.1.103.2 10.0.0.100 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 6 -- 10.1.103.1 10.0.0.210 tcp dpt:9000 DROP 6 -- 10.1.103.1 10.0.0.101 tcp dpt:443 DROP 6 -- 10.1.103.1 10.0.0.101 tcp dpt:80 DROP 6 -- 10.1.103.1 10.0.0.103 tcp dpt:80 DROP 6 -- 10.1.103.1 10.0.0.200 tcp dpt:443 DROP 6 -- 10.1.103.1 10.0.0.200 tcp dpt:80 DROP 6 -- 10.1.103.1 10.0.0.102 tcp dpt:22 DROP 6 -- 10.1.103.1 10.0.0.105 tcp dpt:8007 DROP 6 -- 10.1.103.1 10.0.0.100 tcp dpt:22 DROP 6 -- 10.1.103.1 10.0.0.100 tcp dpt:8006 DROP 0 -- 10.1.103.1 10.0.0.200 LOG 0 -- 10.1.103.1 10.0.0.200 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.1 10.0.0.101 LOG 0 -- 10.1.103.1 10.0.0.101 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.1 10.0.0.103 LOG 0 -- 10.1.103.1 10.0.0.103 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.1 10.0.0.102 LOG 0 -- 10.1.103.1 10.0.0.102 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.1 10.0.0.105 LOG 0 -- 10.1.103.1 10.0.0.105 LOG flags 0 level 4 prefix "wgctl-dropped: " DROP 0 -- 10.1.103.1 10.0.0.100 LOG 0 -- 10.1.103.1 10.0.0.100 LOG flags 0 level 4 prefix "wgctl-dropped: " ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0 ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0

1	oot@wireguard:/# wgctl restart
2	=> INFO: 🟢 🔒 Restarting WireGuard...
3	=> INFO: 🔒 Restoring rules from peer meta files...
4	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100/32
5	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.105/32
6	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.102/32
7	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.103/32
8	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101/32
9	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200/32
10	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100:8006/tcp
11	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100:22/tcp
12	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.105:8007/tcp
13	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.102:22/tcp
14	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200:80/tcp
15	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200:443/tcp
16	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.103:80/tcp
17	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101:80/tcp
18	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101:443/tcp
19	=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.210:9000/tcp
20	=> DEBUG: 🔍 rule::apply: peer_name=guest-test ip=10.1.103.1
21	=> DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test
22	=> INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.1
23	=> INFO: 🔒 Restored rule 'guest' for: guest-test (10.1.103.1)
24	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100/32
25	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.105/32
26	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.102/32
27	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.103/32
28	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101/32
29	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200/32
30	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100:8006/tcp
31	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100:22/tcp
32	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.105:8007/tcp
33	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.102:22/tcp
34	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200:80/tcp
35	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200:443/tcp
36	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.103:80/tcp
37	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101:80/tcp
38	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101:443/tcp
39	=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.210:9000/tcp
40	=> DEBUG: 🔍 rule::apply: peer_name=guest-test2 ip=10.1.103.2
41	=> DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test2
42	=> INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.2
43	=> INFO: 🔒 Restored rule 'guest' for: guest-test2 (10.1.103.2)
44	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100/32
45	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.105/32
46	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.102/32
47	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.103/32
48	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101/32
49	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200/32
50	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100:8006/tcp
51	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100:22/tcp
52	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.105:8007/tcp
53	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.102:22/tcp
54	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200:80/tcp
55	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200:443/tcp
56	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.103:80/tcp
57	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101:80/tcp
58	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101:443/tcp
59	=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.210:9000/tcp
60	=> DEBUG: 🔍 rule::apply: peer_name=guest-test3 ip=10.1.103.3
61	=> DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test3
62	=> INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.3
63	=> INFO: 🔒 Restored rule 'guest' for: guest-test3 (10.1.103.3)
64	=> INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.100:8006/tcp
65	=> INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.105:8007/tcp
66	=> INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.210:9000/tcp
67	=> DEBUG: 🔍 rule::apply: peer_name=laptop-nuno ip=10.1.2.1
68	=> DEBUG: 🔍 rule::apply: set meta rule=user for laptop-nuno
69	=> INFO: 📋 🔒 Applied rule 'user' to: 10.1.2.1
70	=> INFO: 🔒 Restored rule 'user' for: laptop-nuno (10.1.2.1)
71	=> SUCCESS: ✅ 🔒 WireGuard restarted
72	iptables -L FORWARD -n
73	Chain FORWARD (policy ACCEPT)
74	target prot opt source destination
75	DROP 6 -- 10.1.2.1 10.0.0.210 tcp dpt:9000
76	DROP 6 -- 10.1.2.1 10.0.0.105 tcp dpt:8007
77	DROP 6 -- 10.1.2.1 10.0.0.100 tcp dpt:8006
78	DROP 6 -- 10.1.103.3 10.0.0.210 tcp dpt:9000
79	DROP 6 -- 10.1.103.3 10.0.0.101 tcp dpt:443
80	DROP 6 -- 10.1.103.3 10.0.0.101 tcp dpt:80
81	DROP 6 -- 10.1.103.3 10.0.0.103 tcp dpt:80
82	DROP 6 -- 10.1.103.3 10.0.0.200 tcp dpt:443
83	DROP 6 -- 10.1.103.3 10.0.0.200 tcp dpt:80
84	DROP 6 -- 10.1.103.3 10.0.0.102 tcp dpt:22
85	DROP 6 -- 10.1.103.3 10.0.0.105 tcp dpt:8007
86	DROP 6 -- 10.1.103.3 10.0.0.100 tcp dpt:22
87	DROP 6 -- 10.1.103.3 10.0.0.100 tcp dpt:8006
88	DROP 0 -- 10.1.103.3 10.0.0.200
89	LOG 0 -- 10.1.103.3 10.0.0.200 LOG flags 0 level 4 prefix "wgctl-dropped: "
90	DROP 0 -- 10.1.103.3 10.0.0.101
91	LOG 0 -- 10.1.103.3 10.0.0.101 LOG flags 0 level 4 prefix "wgctl-dropped: "
92	DROP 0 -- 10.1.103.3 10.0.0.103
93	LOG 0 -- 10.1.103.3 10.0.0.103 LOG flags 0 level 4 prefix "wgctl-dropped: "
94	DROP 0 -- 10.1.103.3 10.0.0.102
95	LOG 0 -- 10.1.103.3 10.0.0.102 LOG flags 0 level 4 prefix "wgctl-dropped: "
96	DROP 0 -- 10.1.103.3 10.0.0.105
97	LOG 0 -- 10.1.103.3 10.0.0.105 LOG flags 0 level 4 prefix "wgctl-dropped: "
98	DROP 0 -- 10.1.103.3 10.0.0.100
99	LOG 0 -- 10.1.103.3 10.0.0.100 LOG flags 0 level 4 prefix "wgctl-dropped: "
100	DROP 6 -- 10.1.103.2 10.0.0.210 tcp dpt:9000
101	DROP 6 -- 10.1.103.2 10.0.0.101 tcp dpt:443
102	DROP 6 -- 10.1.103.2 10.0.0.101 tcp dpt:80
103	DROP 6 -- 10.1.103.2 10.0.0.103 tcp dpt:80
104	DROP 6 -- 10.1.103.2 10.0.0.200 tcp dpt:443
105	DROP 6 -- 10.1.103.2 10.0.0.200 tcp dpt:80
106	DROP 6 -- 10.1.103.2 10.0.0.102 tcp dpt:22
107	DROP 6 -- 10.1.103.2 10.0.0.105 tcp dpt:8007
108	DROP 6 -- 10.1.103.2 10.0.0.100 tcp dpt:22
109	DROP 6 -- 10.1.103.2 10.0.0.100 tcp dpt:8006
110	DROP 0 -- 10.1.103.2 10.0.0.200
111	LOG 0 -- 10.1.103.2 10.0.0.200 LOG flags 0 level 4 prefix "wgctl-dropped: "
112	DROP 0 -- 10.1.103.2 10.0.0.101
113	LOG 0 -- 10.1.103.2 10.0.0.101 LOG flags 0 level 4 prefix "wgctl-dropped: "
114	DROP 0 -- 10.1.103.2 10.0.0.103
115	LOG 0 -- 10.1.103.2 10.0.0.103 LOG flags 0 level 4 prefix "wgctl-dropped: "
116	DROP 0 -- 10.1.103.2 10.0.0.102
117	LOG 0 -- 10.1.103.2 10.0.0.102 LOG flags 0 level 4 prefix "wgctl-dropped: "
118	DROP 0 -- 10.1.103.2 10.0.0.105
119	LOG 0 -- 10.1.103.2 10.0.0.105 LOG flags 0 level 4 prefix "wgctl-dropped: "
120	DROP 0 -- 10.1.103.2 10.0.0.100
121	LOG 0 -- 10.1.103.2 10.0.0.100 LOG flags 0 level 4 prefix "wgctl-dropped: "
122	DROP 6 -- 10.1.103.1 10.0.0.210 tcp dpt:9000
123	DROP 6 -- 10.1.103.1 10.0.0.101 tcp dpt:443
124	DROP 6 -- 10.1.103.1 10.0.0.101 tcp dpt:80
125	DROP 6 -- 10.1.103.1 10.0.0.103 tcp dpt:80
126	DROP 6 -- 10.1.103.1 10.0.0.200 tcp dpt:443
127	DROP 6 -- 10.1.103.1 10.0.0.200 tcp dpt:80
128	DROP 6 -- 10.1.103.1 10.0.0.102 tcp dpt:22
129	DROP 6 -- 10.1.103.1 10.0.0.105 tcp dpt:8007
130	DROP 6 -- 10.1.103.1 10.0.0.100 tcp dpt:22
131	DROP 6 -- 10.1.103.1 10.0.0.100 tcp dpt:8006
132	DROP 0 -- 10.1.103.1 10.0.0.200
133	LOG 0 -- 10.1.103.1 10.0.0.200 LOG flags 0 level 4 prefix "wgctl-dropped: "
134	DROP 0 -- 10.1.103.1 10.0.0.101
135	LOG 0 -- 10.1.103.1 10.0.0.101 LOG flags 0 level 4 prefix "wgctl-dropped: "
136	DROP 0 -- 10.1.103.1 10.0.0.103
137	LOG 0 -- 10.1.103.1 10.0.0.103 LOG flags 0 level 4 prefix "wgctl-dropped: "
138	DROP 0 -- 10.1.103.1 10.0.0.102
139	LOG 0 -- 10.1.103.1 10.0.0.102 LOG flags 0 level 4 prefix "wgctl-dropped: "
140	DROP 0 -- 10.1.103.1 10.0.0.105
141	LOG 0 -- 10.1.103.1 10.0.0.105 LOG flags 0 level 4 prefix "wgctl-dropped: "
142	DROP 0 -- 10.1.103.1 10.0.0.100
143	LOG 0 -- 10.1.103.1 10.0.0.100 LOG flags 0 level 4 prefix "wgctl-dropped: "
144	ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0
145	ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0
146