nuno zrewidował ten Gist 1 month ago. Przejdź do rewizji
1 file changed, 32 insertions
gistfile1.txt(stworzono plik)
| @@ -0,0 +1,32 @@ | |||
| 1 | + | inspect: | |
| 2 | + | ── Firewall (+2 -6) ──────────────────────────── | |
| 3 | + | ||
| 4 | + | ACCEPT 10.1.3.5 → 10.0.0.103:53:tcp | |
| 5 | + | ACCEPT 10.1.3.5 → 10.0.0.103:53:udp | |
| 6 | + | DROP 10.1.3.5 → 10.0.0.210:9000:tcp | |
| 7 | + | DROP 10.1.3.5 → 10.0.0.105:8007:tcp | |
| 8 | + | DROP 10.1.3.5 → 10.0.0.100:8006:tcp | |
| 9 | + | DROP 10.1.3.5 → 10.0.0.103 | |
| 10 | + | DROP 10.1.3.5 → 10.0.0.100 | |
| 11 | + | DROP 10.1.3.5 → 10.0.0.101 | |
| 12 | + | ||
| 13 | + | root@wireguard:/etc/wireguard/wgctl# wgctl fw list --peer phone-test | |
| 14 | + | ||
| 15 | + | ──────────────────────────────────────────────── | |
| 16 | + | Firewall Rules (FORWARD) | |
| 17 | + | ──────────────────────────────────────────────── | |
| 18 | + | ||
| 19 | + | 0 0 ACCEPT 6 -- * * 10.1.3.5 10.0.0.103 tcp dpt:53 | |
| 20 | + | 0 0 ACCEPT 17 -- * * 10.1.3.5 10.0.0.103 udp dpt:53 | |
| 21 | + | 0 0 NFLOG 6 -- * * 10.1.3.5 10.0.0.210 tcp dpt:9000 nflog-prefix "wgctl-drop:" nflog-group 1 | |
| 22 | + | 0 0 DROP 6 -- * * 10.1.3.5 10.0.0.210 tcp dpt:9000 | |
| 23 | + | 0 0 NFLOG 6 -- * * 10.1.3.5 10.0.0.105 tcp dpt:8007 nflog-prefix "wgctl-drop:" nflog-group 1 | |
| 24 | + | 0 0 DROP 6 -- * * 10.1.3.5 10.0.0.105 tcp dpt:8007 | |
| 25 | + | 0 0 NFLOG 6 -- * * 10.1.3.5 10.0.0.100 tcp dpt:8006 nflog-prefix "wgctl-drop:" nflog-group 1 | |
| 26 | + | 0 0 DROP 6 -- * * 10.1.3.5 10.0.0.100 tcp dpt:8006 | |
| 27 | + | 0 0 NFLOG 0 -- * * 10.1.3.5 10.0.0.103 nflog-prefix "wgctl-drop:" nflog-group 1 | |
| 28 | + | 0 0 DROP 0 -- * * 10.1.3.5 10.0.0.103 | |
| 29 | + | 0 0 NFLOG 0 -- * * 10.1.3.5 10.0.0.100 nflog-prefix "wgctl-drop:" nflog-group 1 | |
| 30 | + | 0 0 DROP 0 -- * * 10.1.3.5 10.0.0.100 | |
| 31 | + | 0 0 NFLOG 0 -- * * 10.1.3.5 10.0.0.101 nflog-prefix "wgctl-drop:" nflog-group 1 | |
| 32 | + | 0 0 DROP 0 -- * * 10.1.3.5 10.0.0.101 | |
Nowsze
Starsze