CHAT_OUTPUT_BEGIN
COMMAND_ID=SUPPORT-260919-NETBIRD-MANAGEMENT-SERVER-AUDIT-READONLY-603R1
STATUS=OK
RC=0
HOST=pve01
MODE=read-only
COMPONENT=netbird-management-server-audit-readonly
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=05748fa27e7bddef0ad5c6f6ce477b5291d901459a89061d4b508da45ea607cc
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=false
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=0
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=b55c91adc8bb8db93f59736dc88c7266fb49256c924f5e8b21de50bcc13d262e
SANITIZED_OUTPUT_SHA256=b55c91adc8bb8db93f59736dc88c7266fb49256c924f5e8b21de50bcc13d262e
OUTPUT_BEGIN
ERROR_REGISTER_CHECK=OK
REFERENCE_CHECK=OK
AUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED
USA_IDENTITY_GATES={"inventory":true,"key":true,"moldova_hostkey":true,"usa_hostkey":true}
PVE1_TRANSPORT_RC=0
PVE1_RECEIPT_VALID=true
PVE1_OBSERVATION={"role":"PVE1","diagnostic_only":true,"endpoints":[{"label":"PVE1","sni":"nb.pvepro.ru","tls_verified":false,"dns_count":1,"dns_hashes":["1fc73136d6d7"],"connect_hash":"1fc73136d6d7","tcp_ms":172,"error":"TLS_TIMEOUT","elapsed_ms":15192}],"grpc":[],"complete":true}
EDGE_TRANSPORT_RC=0
EDGE_RECEIPT_VALID=true
EDGE_OBSERVATION={"role":"EDGE","diagnostic_only":true,"endpoints":[{"label":"EDGE","sni":"nb.pvepro.ru","tls_verified":true,"dns_count":1,"dns_hashes":["1fc73136d6d7"],"connect_hash":"1fc73136d6d7","tcp_ms":239,"tls_ms":498,"tls_version":"TLSv1.3","alpn":"h2","certificate_sha256":"e88a121253506f7d5a23352beb09fd7ec63a65a2e3827ad157c2cc3708d9d9cf","elapsed_ms":498}],"grpc":[{"label":"EDGE","command_rc":0,"http_meta":["200","2"],"grpc_status":"0","content_type":"application/grpc"}],"complete":true}
USA_TRANSPORT_RC=0
USA_RECEIPT_VALID=true
USA_OBSERVATION={"role":"USA","diagnostic_only":true,"server":{"uid":0,"expected_hostname":true,"identity_ok":true,"listen_443":{"rc":0,"lines":["LISTEN 0      4096   [ADDR:1fc73136d6d7]:443 [ADDR:19e362559721]:* users:((\"docker-proxy\",pid=997,fd=8))"]},"docker_rc":0,"containers":[{"name":"netbird-traefik","image":"traefik:v3.6","status":"Up 3 weeks","ports":"\"netbird_netbird\"|{\"443/tcp\":[{\"HostIp\":\"[ADDR:1fc73136d6d7]\",\"HostPort\":\"443\"}],\"80/tcp\":[{\"HostIp\":\"[ADDR:1fc73136d6d7]\",\"HostPort\":\"80\"}]}","inspect_rc":0,"logs_rc":0,"log_counts":{"deadline":0,"x509":0,"handshake":0,"refused":0,"grpc":192,"panic":0}},{"name":"netbird-dashboard","image":"netbirdio/dashboard:latest","status":"Up 3 weeks","ports":"\"netbird_netbird\"|{\"443/tcp\":null,\"80/tcp\":null}","inspect_rc":0,"logs_rc":0,"log_counts":{"deadline":0,"x509":0,"handshake":0,"refused":0,"grpc":0,"panic":0}},{"name":"netbird-server","image":"netbirdio/netbird-server:latest","status":"Up 3 weeks","ports":"\"netbird_netbird\"|{\"3478/udp\":[{\"HostIp\":\"[ADDR:1fc73136d6d7]\",\"HostPort\":\"3478\"}]}","inspect_rc":0,"logs_rc":0,"log_counts":{"deadline":0,"x509":0,"handshake":0,"refused":0,"grpc":0,"panic":0}}],"firewalls":[{"tool":"IPTABLES_FILTER","rc":0,"lines":["# Generated by iptables-save v1.8.9 (nf_tables) on Sat Sep 19 [IPV6] 2026","*filter",":INPUT ACCEPT [0:0]",":FORWARD DROP [0:0]",":OUTPUT ACCEPT [0:0]",":DOCKER - [0:0]",":DOCKER-BRIDGE - [0:0]",":DOCKER-CT - [0:0]",":DOCKER-FORWARD - [0:0]",":DOCKER-INTERNAL - [0:0]",":DOCKER-USER - [0:0]","[34669180:3550258849] -A FORWARD -j DOCKER-USER","[34669180:3550258849] -A FORWARD -j DOCKER-FORWARD","[85783:4117309] -A DOCKER -d [ADDR:be20ca75510c] ! -i br-eda2ddba3837 -o br-eda2ddba3837 -p udp -m udp --dport 3478 -j ACCEPT","[83245:4960506] -A DOCKER -d [ADDR:b89efcf63724] ! -i br-eda2ddba3837 -o br-eda2ddba3837 -p tcp -m tcp --dport 443 -j ACCEPT","[55635:3113546] -A DOCKER -d [ADDR:b89efcf63724] ! -i br-eda2ddba3837 -o br-eda2ddba3837 -p tcp -m tcp --dport 80 -j ACCEPT","[0:0] -A DOCKER ! -i br-eda2ddba3837 -o br-eda2ddba3837 -j DROP","[0:0] -A DOCKER ! -i docker0 -o docker0 -j DROP","[224663:12191361] -A DOCKER-BRIDGE -o br-eda2ddba3837 -j DOCKER","[0:0] -A DOCKER-BRIDGE -o docker0 -j DOCKER","[18547195:1763740123] -A DOCKER-CT -o br-eda2ddba3837 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT","[0:0] -A DOCKER-CT -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT","[34669180:3550258849] -A DOCKER-FORWARD -j DOCKER-CT","[16121985:1786518726] -A DOCKER-FORWARD -j DOCKER-INTERNAL","[16121985:1786518726] -A DOCKER-FORWARD -j DOCKER-BRIDGE","[15897322:1774327365] -A DOCKER-FORWARD -i br-eda2ddba3837 -j ACCEPT","[0:0] -A DOCKER-FORWARD -i docker0 -j ACCEPT","COMMIT","# Completed on Sat Sep 19 [IPV6] 2026"],"selected_lines":29,"truncated":false},{"tool":"IPTABLES_NAT","rc":0,"lines":["# Generated by iptables-save v1.8.9 (nf_tables) on Sat Sep 19 [IPV6] 2026","*nat",":PREROUTING ACCEPT [0:0]",":INPUT ACCEPT [0:0]",":OUTPUT ACCEPT [0:0]",":POSTROUTING ACCEPT [0:0]",":DOCKER - [0:0]","[3101282:183411842] -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER","[0:0] -A OUTPUT ! -d [ADDR:4a7ea1593dd4] -m addrtype --dst-type LOCAL -j DOCKER","[0:0] -A POSTROUTING -s [ADDR:3538188866fb] ! -o docker0 -j MASQUERADE","[1290:77668] -A POSTROUTING -s [ADDR:c41135b9d022] ! -o br-eda2ddba3837 -j MASQUERADE","[55635:3113546] -A DOCKER -d [ADDR:e6de1153c20d] ! -i br-eda2ddba3837 -p tcp -m tcp --dport 80 -j DNAT --to-destination [ADDR:5d71fd96b350]:80","[83245:4960506] -A DOCKER -d [ADDR:e6de1153c20d] ! -i br-eda2ddba3837 -p tcp -m tcp --dport 443 -j DNAT --to-destination [ADDR:5d71fd96b350]:443","[85694:4113877] -A DOCKER -d [ADDR:e6de1153c20d] ! -i br-eda2ddba3837 -p udp -m udp --dport 3478 -j DNAT --to-destination [ADDR:5ca1cde58f6a]:3478","COMMIT","# Completed on Sat Sep 19 [IPV6] 2026"],"selected_lines":16,"truncated":false},{"tool":"NFT","rc":0,"lines":["table ip nat {","\tchain DOCKER {","\t\tiifname != \"br-eda2ddba3837\" ip daddr [ADDR:1fc73136d6d7] tcp dport 80 counter packets 55635 bytes 3113546 dnat to [ADDR:5d71fd96b350]:80","\t\tiifname != \"br-eda2ddba3837\" ip daddr [ADDR:1fc73136d6d7] tcp dport 443 counter packets 83245 bytes 4960506 dnat to [ADDR:5d71fd96b350]:443","\t\tiifname != \"br-eda2ddba3837\" ip daddr [ADDR:1fc73136d6d7] udp dport 3478 counter packets 85694 bytes 4113877 dnat to [ADDR:5ca1cde58f6a]:3478","\tchain PREROUTING {","\t\ttype nat hook prerouting priority dstnat; policy accept;","\t\tfib daddr type local counter packets 3101282 bytes 183411842 jump DOCKER","\tchain OUTPUT {","\t\ttype nat hook output priority -100; policy accept;","\t\tip daddr != [ADDR:4a7ea1593dd4] fib daddr type local counter packets 0 bytes 0 jump DOCKER","\tchain POSTROUTING {","\t\ttype nat hook postrouting priority srcnat; policy accept;","table ip filter {","\tchain DOCKER {","\t\tiifname != \"br-eda2ddba3837\" oifname \"br-eda2ddba3837\" ip daddr [ADDR:5ca1cde58f6a] udp dport 3478 counter packets 85783 bytes 4117309 accept","\t\tiifname != \"br-eda2ddba3837\" oifname \"br-eda2ddba3837\" ip daddr [ADDR:5d71fd96b350] tcp dport 443 counter packets 83245 bytes 4960506 accept","\t\tiifname != \"br-eda2ddba3837\" oifname \"br-eda2ddba3837\" ip daddr [ADDR:5d71fd96b350] tcp dport 80 counter packets 55635 bytes 3113546 accept","\t\tiifname != \"br-eda2ddba3837\" oifname \"br-eda2ddba3837\" counter packets 0 bytes 0 drop","\t\tiifname != \"docker0\" oifname \"docker0\" counter packets 0 bytes 0 drop","\tchain DOCKER-FORWARD {","\t\tcounter packets 34669180 bytes 3550258849 jump DOCKER-CT","\t\tcounter packets 16121985 bytes 1786518726 jump DOCKER-INTERNAL","\t\tcounter packets 16121985 bytes 1786518726 jump DOCKER-BRIDGE","\t\tiifname \"br-eda2ddba3837\" counter packets 15897322 bytes 1774327365 accept","\t\tiifname \"docker0\" counter packets 0 bytes 0 accept","\tchain DOCKER-BRIDGE {","\t\toifname \"br-eda2ddba3837\" counter packets 224663 bytes 12191361 jump DOCKER","\t\toifname \"docker0\" counter packets 0 bytes 0 jump DOCKER","\tchain DOCKER-CT {","\t\toifname \"br-eda2ddba3837\" ct state related,established counter packets 18547195 bytes 1763740123 accept","\t\toifname \"docker0\" ct state related,established counter packets 0 bytes 0 accept","\tchain DOCKER-INTERNAL {","\tchain FORWARD {","\t\ttype filter hook forward priority filter; policy drop;","\t\tcounter packets 34669180 bytes 3550258849 jump DOCKER-USER","\t\tcounter packets 34669180 bytes 3550258849 jump DOCKER-FORWARD","\tchain DOCKER-USER {","table ip6 nat {","\tchain DOCKER {","\tchain PREROUTING {","\t\ttype nat hook prerouting priority dstnat; policy accept;","\t\tfib daddr type local counter packets 0 bytes 0 jump DOCKER","\tchain OUTPUT {","\t\ttype nat hook output priority -100; policy accept;","\t\tip6 daddr != [IPV6] fib daddr type local counter packets 0 bytes 0 jump DOCKER","table ip6 filter {","\tchain DOCKER {","\tchain DOCKER-FORWARD {","\t\tcounter packets 0 bytes 0 jump DOCKER-CT","\t\tcounter packets 0 bytes 0 jump DOCKER-INTERNAL","\t\tcounter packets 0 bytes 0 jump DOCKER-BRIDGE","\tchain DOCKER-BRIDGE {","\tchain DOCKER-CT {","\tchain DOCKER-INTERNAL {","\tchain FORWARD {","\t\ttype filter hook forward priority filter; policy accept;","\t\tcounter packets 0 bytes 0 jump DOCKER-USER","\t\tcounter packets 0 bytes 0 jump DOCKER-FORWARD","\tchain DOCKER-USER {","table ip raw {","\tchain PREROUTING {","\t\ttype filter hook prerouting priority raw; policy accept;","\t\tiifname != \"br-eda2ddba3837\" ip daddr [ADDR:5d7b39d190b3] counter packets 0 bytes 0 drop","\t\tiifname != \"br-eda2ddba3837\" ip daddr [ADDR:5d71fd96b350] counter packets 0 bytes 0 drop","\t\tiifname != \"br-eda2ddba3837\" ip daddr [ADDR:5ca1cde58f6a] counter packets 0 bytes 0 drop"],"selected_lines":66,"truncated":false}]},"endpoints":[{"label":"LOCAL_SNI","sni":"nb.pvepro.ru","tls_verified":false,"connect_hash":"12ca17b49af2","error":"ConnectionRefusedError","errno":111,"elapsed_ms":2},{"label":"SERVER_PUBLIC","sni":"nb.pvepro.ru","tls_verified":true,"dns_count":1,"dns_hashes":["1fc73136d6d7"],"connect_hash":"1fc73136d6d7","tcp_ms":173,"tls_ms":234,"tls_version":"TLSv1.3","alpn":"h2","certificate_sha256":"e88a121253506f7d5a23352beb09fd7ec63a65a2e3827ad157c2cc3708d9d9cf","elapsed_ms":234}],"grpc":[{"label":"LOCAL_GRPC","command_rc":7,"http_meta":["000","0"],"grpc_status":null,"content_type":null},{"label":"SERVER_PUBLIC_GRPC","command_rc":0,"http_meta":["200","2"],"grpc_status":"0","content_type":"application/grpc"}],"complete":true}
TASK_COMPLETE=true
TASK_RESULT=NETBIRD_SERVER_EVIDENCE_COLLECTED
NO_CONNECTION_FIX_APPLIED=true
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260919-NETBIRD-MANAGEMENT-SERVER-AUDIT-READONLY-603R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}

OUTPUT_END
CHAT_OUTPUT_END
