gistfile1.txt
· 2.4 KiB · Text
Originalformat
inspect:
── Firewall (+2 -6) ────────────────────────────
ACCEPT 10.1.3.5 → 10.0.0.103:53:tcp
ACCEPT 10.1.3.5 → 10.0.0.103:53:udp
DROP 10.1.3.5 → 10.0.0.210:9000:tcp
DROP 10.1.3.5 → 10.0.0.105:8007:tcp
DROP 10.1.3.5 → 10.0.0.100:8006:tcp
DROP 10.1.3.5 → 10.0.0.103
DROP 10.1.3.5 → 10.0.0.100
DROP 10.1.3.5 → 10.0.0.101
root@wireguard:/etc/wireguard/wgctl# wgctl fw list --peer phone-test
────────────────────────────────────────────────
Firewall Rules (FORWARD)
────────────────────────────────────────────────
0 0 ACCEPT 6 -- * * 10.1.3.5 10.0.0.103 tcp dpt:53
0 0 ACCEPT 17 -- * * 10.1.3.5 10.0.0.103 udp dpt:53
0 0 NFLOG 6 -- * * 10.1.3.5 10.0.0.210 tcp dpt:9000 nflog-prefix "wgctl-drop:" nflog-group 1
0 0 DROP 6 -- * * 10.1.3.5 10.0.0.210 tcp dpt:9000
0 0 NFLOG 6 -- * * 10.1.3.5 10.0.0.105 tcp dpt:8007 nflog-prefix "wgctl-drop:" nflog-group 1
0 0 DROP 6 -- * * 10.1.3.5 10.0.0.105 tcp dpt:8007
0 0 NFLOG 6 -- * * 10.1.3.5 10.0.0.100 tcp dpt:8006 nflog-prefix "wgctl-drop:" nflog-group 1
0 0 DROP 6 -- * * 10.1.3.5 10.0.0.100 tcp dpt:8006
0 0 NFLOG 0 -- * * 10.1.3.5 10.0.0.103 nflog-prefix "wgctl-drop:" nflog-group 1
0 0 DROP 0 -- * * 10.1.3.5 10.0.0.103
0 0 NFLOG 0 -- * * 10.1.3.5 10.0.0.100 nflog-prefix "wgctl-drop:" nflog-group 1
0 0 DROP 0 -- * * 10.1.3.5 10.0.0.100
0 0 NFLOG 0 -- * * 10.1.3.5 10.0.0.101 nflog-prefix "wgctl-drop:" nflog-group 1
0 0 DROP 0 -- * * 10.1.3.5 10.0.0.101
| 1 | inspect: |
| 2 | ── Firewall (+2 -6) ──────────────────────────── |
| 3 | |
| 4 | ACCEPT 10.1.3.5 → 10.0.0.103:53:tcp |
| 5 | ACCEPT 10.1.3.5 → 10.0.0.103:53:udp |
| 6 | DROP 10.1.3.5 → 10.0.0.210:9000:tcp |
| 7 | DROP 10.1.3.5 → 10.0.0.105:8007:tcp |
| 8 | DROP 10.1.3.5 → 10.0.0.100:8006:tcp |
| 9 | DROP 10.1.3.5 → 10.0.0.103 |
| 10 | DROP 10.1.3.5 → 10.0.0.100 |
| 11 | DROP 10.1.3.5 → 10.0.0.101 |
| 12 | |
| 13 | root@wireguard:/etc/wireguard/wgctl# wgctl fw list --peer phone-test |
| 14 | |
| 15 | ──────────────────────────────────────────────── |
| 16 | Firewall Rules (FORWARD) |
| 17 | ──────────────────────────────────────────────── |
| 18 | |
| 19 | 0 0 ACCEPT 6 -- * * 10.1.3.5 10.0.0.103 tcp dpt:53 |
| 20 | 0 0 ACCEPT 17 -- * * 10.1.3.5 10.0.0.103 udp dpt:53 |
| 21 | 0 0 NFLOG 6 -- * * 10.1.3.5 10.0.0.210 tcp dpt:9000 nflog-prefix "wgctl-drop:" nflog-group 1 |
| 22 | 0 0 DROP 6 -- * * 10.1.3.5 10.0.0.210 tcp dpt:9000 |
| 23 | 0 0 NFLOG 6 -- * * 10.1.3.5 10.0.0.105 tcp dpt:8007 nflog-prefix "wgctl-drop:" nflog-group 1 |
| 24 | 0 0 DROP 6 -- * * 10.1.3.5 10.0.0.105 tcp dpt:8007 |
| 25 | 0 0 NFLOG 6 -- * * 10.1.3.5 10.0.0.100 tcp dpt:8006 nflog-prefix "wgctl-drop:" nflog-group 1 |
| 26 | 0 0 DROP 6 -- * * 10.1.3.5 10.0.0.100 tcp dpt:8006 |
| 27 | 0 0 NFLOG 0 -- * * 10.1.3.5 10.0.0.103 nflog-prefix "wgctl-drop:" nflog-group 1 |
| 28 | 0 0 DROP 0 -- * * 10.1.3.5 10.0.0.103 |
| 29 | 0 0 NFLOG 0 -- * * 10.1.3.5 10.0.0.100 nflog-prefix "wgctl-drop:" nflog-group 1 |
| 30 | 0 0 DROP 0 -- * * 10.1.3.5 10.0.0.100 |
| 31 | 0 0 NFLOG 0 -- * * 10.1.3.5 10.0.0.101 nflog-prefix "wgctl-drop:" nflog-group 1 |
| 32 | 0 0 DROP 0 -- * * 10.1.3.5 10.0.0.101 |