Última atividade 2 months ago

Revisão bb7cef8375c6d412a00ecd39be737486e10924d9

gistfile1.txt Bruto
1oot@wireguard:/# wgctl restart
2=> INFO: 🟢 🔒 Restarting WireGuard...
3=> INFO: 🔒 Restoring rules from peer meta files...
4=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100/32
5=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.105/32
6=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.102/32
7=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.103/32
8=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101/32
9=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200/32
10=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100:8006/tcp
11=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.100:22/tcp
12=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.105:8007/tcp
13=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.102:22/tcp
14=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200:80/tcp
15=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.200:443/tcp
16=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.103:80/tcp
17=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101:80/tcp
18=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.101:443/tcp
19=> INFO: 🚫 🔒 Blocked 10.1.103.1 → 10.0.0.210:9000/tcp
20=> DEBUG: 🔍 rule::apply: peer_name=guest-test ip=10.1.103.1
21=> DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test
22=> INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.1
23=> INFO: 🔒 Restored rule 'guest' for: guest-test (10.1.103.1)
24=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100/32
25=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.105/32
26=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.102/32
27=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.103/32
28=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101/32
29=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200/32
30=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100:8006/tcp
31=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.100:22/tcp
32=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.105:8007/tcp
33=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.102:22/tcp
34=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200:80/tcp
35=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.200:443/tcp
36=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.103:80/tcp
37=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101:80/tcp
38=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.101:443/tcp
39=> INFO: 🚫 🔒 Blocked 10.1.103.2 → 10.0.0.210:9000/tcp
40=> DEBUG: 🔍 rule::apply: peer_name=guest-test2 ip=10.1.103.2
41=> DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test2
42=> INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.2
43=> INFO: 🔒 Restored rule 'guest' for: guest-test2 (10.1.103.2)
44=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100/32
45=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.105/32
46=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.102/32
47=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.103/32
48=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101/32
49=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200/32
50=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100:8006/tcp
51=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.100:22/tcp
52=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.105:8007/tcp
53=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.102:22/tcp
54=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200:80/tcp
55=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.200:443/tcp
56=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.103:80/tcp
57=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101:80/tcp
58=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.101:443/tcp
59=> INFO: 🚫 🔒 Blocked 10.1.103.3 → 10.0.0.210:9000/tcp
60=> DEBUG: 🔍 rule::apply: peer_name=guest-test3 ip=10.1.103.3
61=> DEBUG: 🔍 rule::apply: set meta rule=guest for guest-test3
62=> INFO: 📋 🔒 Applied rule 'guest' to: 10.1.103.3
63=> INFO: 🔒 Restored rule 'guest' for: guest-test3 (10.1.103.3)
64=> INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.100:8006/tcp
65=> INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.105:8007/tcp
66=> INFO: 🚫 🔒 Blocked 10.1.2.1 → 10.0.0.210:9000/tcp
67=> DEBUG: 🔍 rule::apply: peer_name=laptop-nuno ip=10.1.2.1
68=> DEBUG: 🔍 rule::apply: set meta rule=user for laptop-nuno
69=> INFO: 📋 🔒 Applied rule 'user' to: 10.1.2.1
70=> INFO: 🔒 Restored rule 'user' for: laptop-nuno (10.1.2.1)
71=> SUCCESS: ✅ 🔒 WireGuard restarted
72iptables -L FORWARD -n
73Chain FORWARD (policy ACCEPT)
74target prot opt source destination
75DROP 6 -- 10.1.2.1 10.0.0.210 tcp dpt:9000
76DROP 6 -- 10.1.2.1 10.0.0.105 tcp dpt:8007
77DROP 6 -- 10.1.2.1 10.0.0.100 tcp dpt:8006
78DROP 6 -- 10.1.103.3 10.0.0.210 tcp dpt:9000
79DROP 6 -- 10.1.103.3 10.0.0.101 tcp dpt:443
80DROP 6 -- 10.1.103.3 10.0.0.101 tcp dpt:80
81DROP 6 -- 10.1.103.3 10.0.0.103 tcp dpt:80
82DROP 6 -- 10.1.103.3 10.0.0.200 tcp dpt:443
83DROP 6 -- 10.1.103.3 10.0.0.200 tcp dpt:80
84DROP 6 -- 10.1.103.3 10.0.0.102 tcp dpt:22
85DROP 6 -- 10.1.103.3 10.0.0.105 tcp dpt:8007
86DROP 6 -- 10.1.103.3 10.0.0.100 tcp dpt:22
87DROP 6 -- 10.1.103.3 10.0.0.100 tcp dpt:8006
88DROP 0 -- 10.1.103.3 10.0.0.200
89LOG 0 -- 10.1.103.3 10.0.0.200 LOG flags 0 level 4 prefix "wgctl-dropped: "
90DROP 0 -- 10.1.103.3 10.0.0.101
91LOG 0 -- 10.1.103.3 10.0.0.101 LOG flags 0 level 4 prefix "wgctl-dropped: "
92DROP 0 -- 10.1.103.3 10.0.0.103
93LOG 0 -- 10.1.103.3 10.0.0.103 LOG flags 0 level 4 prefix "wgctl-dropped: "
94DROP 0 -- 10.1.103.3 10.0.0.102
95LOG 0 -- 10.1.103.3 10.0.0.102 LOG flags 0 level 4 prefix "wgctl-dropped: "
96DROP 0 -- 10.1.103.3 10.0.0.105
97LOG 0 -- 10.1.103.3 10.0.0.105 LOG flags 0 level 4 prefix "wgctl-dropped: "
98DROP 0 -- 10.1.103.3 10.0.0.100
99LOG 0 -- 10.1.103.3 10.0.0.100 LOG flags 0 level 4 prefix "wgctl-dropped: "
100DROP 6 -- 10.1.103.2 10.0.0.210 tcp dpt:9000
101DROP 6 -- 10.1.103.2 10.0.0.101 tcp dpt:443
102DROP 6 -- 10.1.103.2 10.0.0.101 tcp dpt:80
103DROP 6 -- 10.1.103.2 10.0.0.103 tcp dpt:80
104DROP 6 -- 10.1.103.2 10.0.0.200 tcp dpt:443
105DROP 6 -- 10.1.103.2 10.0.0.200 tcp dpt:80
106DROP 6 -- 10.1.103.2 10.0.0.102 tcp dpt:22
107DROP 6 -- 10.1.103.2 10.0.0.105 tcp dpt:8007
108DROP 6 -- 10.1.103.2 10.0.0.100 tcp dpt:22
109DROP 6 -- 10.1.103.2 10.0.0.100 tcp dpt:8006
110DROP 0 -- 10.1.103.2 10.0.0.200
111LOG 0 -- 10.1.103.2 10.0.0.200 LOG flags 0 level 4 prefix "wgctl-dropped: "
112DROP 0 -- 10.1.103.2 10.0.0.101
113LOG 0 -- 10.1.103.2 10.0.0.101 LOG flags 0 level 4 prefix "wgctl-dropped: "
114DROP 0 -- 10.1.103.2 10.0.0.103
115LOG 0 -- 10.1.103.2 10.0.0.103 LOG flags 0 level 4 prefix "wgctl-dropped: "
116DROP 0 -- 10.1.103.2 10.0.0.102
117LOG 0 -- 10.1.103.2 10.0.0.102 LOG flags 0 level 4 prefix "wgctl-dropped: "
118DROP 0 -- 10.1.103.2 10.0.0.105
119LOG 0 -- 10.1.103.2 10.0.0.105 LOG flags 0 level 4 prefix "wgctl-dropped: "
120DROP 0 -- 10.1.103.2 10.0.0.100
121LOG 0 -- 10.1.103.2 10.0.0.100 LOG flags 0 level 4 prefix "wgctl-dropped: "
122DROP 6 -- 10.1.103.1 10.0.0.210 tcp dpt:9000
123DROP 6 -- 10.1.103.1 10.0.0.101 tcp dpt:443
124DROP 6 -- 10.1.103.1 10.0.0.101 tcp dpt:80
125DROP 6 -- 10.1.103.1 10.0.0.103 tcp dpt:80
126DROP 6 -- 10.1.103.1 10.0.0.200 tcp dpt:443
127DROP 6 -- 10.1.103.1 10.0.0.200 tcp dpt:80
128DROP 6 -- 10.1.103.1 10.0.0.102 tcp dpt:22
129DROP 6 -- 10.1.103.1 10.0.0.105 tcp dpt:8007
130DROP 6 -- 10.1.103.1 10.0.0.100 tcp dpt:22
131DROP 6 -- 10.1.103.1 10.0.0.100 tcp dpt:8006
132DROP 0 -- 10.1.103.1 10.0.0.200
133LOG 0 -- 10.1.103.1 10.0.0.200 LOG flags 0 level 4 prefix "wgctl-dropped: "
134DROP 0 -- 10.1.103.1 10.0.0.101
135LOG 0 -- 10.1.103.1 10.0.0.101 LOG flags 0 level 4 prefix "wgctl-dropped: "
136DROP 0 -- 10.1.103.1 10.0.0.103
137LOG 0 -- 10.1.103.1 10.0.0.103 LOG flags 0 level 4 prefix "wgctl-dropped: "
138DROP 0 -- 10.1.103.1 10.0.0.102
139LOG 0 -- 10.1.103.1 10.0.0.102 LOG flags 0 level 4 prefix "wgctl-dropped: "
140DROP 0 -- 10.1.103.1 10.0.0.105
141LOG 0 -- 10.1.103.1 10.0.0.105 LOG flags 0 level 4 prefix "wgctl-dropped: "
142DROP 0 -- 10.1.103.1 10.0.0.100
143LOG 0 -- 10.1.103.1 10.0.0.100 LOG flags 0 level 4 prefix "wgctl-dropped: "
144ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0
145ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0
146