runtime: publish SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1
This commit is contained in:
homelab-runtime-publisher
File diff suppressed because one or more lines are too long
@@ -0,0 +1,310 @@
|
||||
CHAT_OUTPUT_BEGIN
|
||||
COMMAND_ID=SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1
|
||||
STATUS=OK
|
||||
RC=0
|
||||
HOST=pve01
|
||||
MODE=read-only
|
||||
COMPONENT=homelab-moldova-edge-netbird-egress-rca
|
||||
REFERENCE_REGISTER_CHECK=OK
|
||||
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
|
||||
ERROR_REGISTER_CHECK=OK
|
||||
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
|
||||
COMMAND_SHA256=31d3e9189305dd16c8be28fb7e42e00b47db6b63b8c826758c373859f18db9af
|
||||
DUPLICATE_FAILED_COMMAND_BLOCKED=false
|
||||
EXECUTION_STARTED=true
|
||||
CHANGE_DECLARED=false
|
||||
RESULT_CONTRACT_VALID=true
|
||||
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
|
||||
RESULT_CONTRACT_ERROR=NONE
|
||||
COMMAND_RC=0
|
||||
CHANGES_MADE=false
|
||||
ROLLBACK_STARTED=false
|
||||
ROLLBACK_RESTORED=null
|
||||
MUTATION_OUTCOME=NO_MUTATION
|
||||
SANITIZED=yes
|
||||
SECRETS_INCLUDED=no
|
||||
PRIVATE_ADDRESSES_INCLUDED=no
|
||||
RAW_EVIDENCE_SHA256=7ed7b1b9bf78ef99af59d64634ea8ae43e76d1fe9515c6fc609085da318823e1
|
||||
SANITIZED_OUTPUT_SHA256=7ed7b1b9bf78ef99af59d64634ea8ae43e76d1fe9515c6fc609085da318823e1
|
||||
OUTPUT_BEGIN
|
||||
WORKERS2_MOLDOVA_EDGE_NETBIRD_EGRESS_RCA_BEGIN=1
|
||||
COMMAND_ID=SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1
|
||||
MODE=read-only
|
||||
COMPONENT=homelab-moldova-edge-netbird-egress-rca
|
||||
MUTATION_BOUNDARY=NONE;EDGE_VM_NETBIRD_PEER_ROUTE_NETWORK_POLICY_AND_JOURNAL_RCA_ONLY;NO_NETWORK_CHANGE;NO_NETBIRD_MUTATION;NO_VM_STATE_CHANGE;NO_DNS_WRITE;NO_PROVIDER_MUTATION;NO_MOLDOVA_CONNECTION;NO_SYSTEMD_ACTION;NO_GIT_WRITE;NO_SECRET_VALUE_OUTPUT
|
||||
PREDECESSOR_1163=PASS_EDGE_PUBLIC_ROUTE_DECISION_VIA_WT0_TABLE_7120
|
||||
CARRIER_BASELINE=KNOWN_GOOD_1137_BYTE_SEMANTICS
|
||||
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
|
||||
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
|
||||
RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d
|
||||
TARGETS_SHA256=5cba5f1e14c65211c9fab6d11594c19279ab68369b4db3f7283708c368348288
|
||||
MD_RELAY_COUNT=1
|
||||
MD_RELAY_ENABLED=false
|
||||
CLUSTER_QUERY_RC=0
|
||||
EDGE_VM_MATCH_COUNT=1
|
||||
EDGE_VM_VMID=130
|
||||
EDGE_VM_NODE=pve03
|
||||
EDGE_VM_STATUS=running
|
||||
EDGE_QGA_TRANSPORT_RC=0
|
||||
EDGE_QGA_TRANSPORT_STDERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
|
||||
EDGE_QGA_EXITCODE=0
|
||||
EDGE_QGA_ERR_BYTES=0
|
||||
EDGE_QGA_ERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
|
||||
EDGE_NETBIRD_EGRESS_BEGIN=1
|
||||
EDGE_HOSTNAME=edge-vm
|
||||
EDGE_EUID=0
|
||||
EDGE_EPOCH=1790206874
|
||||
SERVICE|name=netbird.service|active=active
|
||||
SERVICE|name=netbird.service|enabled=enabled
|
||||
SERVICE|name=systemd-networkd.service|active=active
|
||||
SERVICE|name=systemd-networkd.service|enabled=enabled
|
||||
NETBIRD_VERSION_RC=0
|
||||
NETBIRD_VERSION=0.73.2
|
||||
NETBIRD_STATUS_DETAIL_RC=0
|
||||
NETBIRD_STATUS_DETAIL_BYTES=8694
|
||||
NETBIRD_STATUS_DETAIL_SHA256=cddf4549ddc3c862d7a7aa04645a745b06031ada6ba41ad0330c68b1d42ce0d9
|
||||
NETBIRD_STATUS_INTERESTING_COUNT=49
|
||||
NETBIRD_STATUS| Status: Connecting
|
||||
NETBIRD_STATUS| Relay server address:
|
||||
NETBIRD_STATUS| Networks: -
|
||||
NETBIRD_STATUS| Status: Connecting
|
||||
NETBIRD_STATUS| Relay server address:
|
||||
NETBIRD_STATUS| Networks: -
|
||||
NETBIRD_STATUS| Status: Connecting
|
||||
NETBIRD_STATUS| Relay server address:
|
||||
NETBIRD_STATUS| Networks: -
|
||||
NETBIRD_STATUS| Status: Connecting
|
||||
NETBIRD_STATUS| Relay server address:
|
||||
NETBIRD_STATUS| Networks: -
|
||||
NETBIRD_STATUS| Status: Connecting
|
||||
NETBIRD_STATUS| Relay server address:
|
||||
NETBIRD_STATUS| Networks: -
|
||||
NETBIRD_STATUS| Status: Connecting
|
||||
NETBIRD_STATUS| Relay server address:
|
||||
NETBIRD_STATUS| Networks: -
|
||||
NETBIRD_STATUS| Status: Connecting
|
||||
NETBIRD_STATUS| Relay server address:
|
||||
NETBIRD_STATUS| Networks: -
|
||||
NETBIRD_STATUS| Status: Connecting
|
||||
NETBIRD_STATUS| Relay server address:
|
||||
NETBIRD_STATUS| Networks: -
|
||||
NETBIRD_STATUS| Status: Connecting
|
||||
NETBIRD_STATUS| Relay server address:
|
||||
NETBIRD_STATUS| Networks: -
|
||||
NETBIRD_STATUS| Status: Connecting
|
||||
NETBIRD_STATUS| Relay server address:
|
||||
NETBIRD_STATUS| Networks: -
|
||||
NETBIRD_STATUS| Status: Connecting
|
||||
NETBIRD_STATUS| Relay server address:
|
||||
NETBIRD_STATUS| Networks: -
|
||||
NETBIRD_STATUS| Message: Default route added
|
||||
NETBIRD_STATUS| Message: Default route disconnected due to peer unreachability
|
||||
NETBIRD_STATUS| Message: Default route disconnected due to peer unreachability
|
||||
NETBIRD_STATUS| Message: Network map updated
|
||||
NETBIRD_STATUS| Message: Default route added
|
||||
NETBIRD_STATUS| Message: Default route added
|
||||
NETBIRD_STATUS| Message: Default route added
|
||||
NETBIRD_STATUS| Message: Default route added
|
||||
NETBIRD_STATUS| Message: Default route disconnected due to peer unreachability
|
||||
NETBIRD_STATUS| Message: Default route disconnected due to peer unreachability
|
||||
NETBIRD_STATUS|Management: Disconnected, reason: rpc error: code = Unavailable desc = error reading from server: EOF
|
||||
NETBIRD_STATUS|Signal: Disconnected, reason: rpc error: code = Unavailable desc = error reading from server: EOF
|
||||
NETBIRD_STATUS|Relays:
|
||||
NETBIRD_STATUS|FQDN: edge-vm.netbird.selfhosted
|
||||
NETBIRD_STATUS|Networks: -
|
||||
NETBIRD_STATUS|Peers count: 0/11 Connected
|
||||
PEER_BLOCK_COUNT=1
|
||||
PEER|fqdn=edge-vm.netbird.selfhosted|status=UNKNOWN|relay_present=false|networks=-
|
||||
MOLDOVA_RELAY_PEER_PRESENT=false
|
||||
MOLDOVA_RELAY_PEER_STATUS=ABSENT
|
||||
NETBIRD_CMD|name=ROUTES_LIST|rc=0|bytes=178|sha256=449171b786a12843333f14fc8e8eb1160a3077a1ff08e06cabd0dd4e90eb3a4a|stderr_sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
|
||||
NETBIRD_CMD_LINE_COUNT|name=ROUTES_LIST|count=7
|
||||
NETBIRD_ROUTES_LIST|Available Networks:
|
||||
NETBIRD_ROUTES_LIST| - ID: edge-exit-relay-moldova
|
||||
NETBIRD_ROUTES_LIST| Network: [ADDR], [IPV6]
|
||||
NETBIRD_ROUTES_LIST| Status: Not Selected
|
||||
NETBIRD_ROUTES_LIST| - ID: internet-v4
|
||||
NETBIRD_ROUTES_LIST| Network: [ADDR], [IPV6]
|
||||
NETBIRD_ROUTES_LIST| Status: Selected
|
||||
NETBIRD_CMD|name=NETWORKS_LIST|rc=0|bytes=178|sha256=449171b786a12843333f14fc8e8eb1160a3077a1ff08e06cabd0dd4e90eb3a4a|stderr_sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
|
||||
NETBIRD_CMD_LINE_COUNT|name=NETWORKS_LIST|count=7
|
||||
NETBIRD_NETWORKS_LIST|Available Networks:
|
||||
NETBIRD_NETWORKS_LIST| - ID: edge-exit-relay-moldova
|
||||
NETBIRD_NETWORKS_LIST| Network: [ADDR], [IPV6]
|
||||
NETBIRD_NETWORKS_LIST| Status: Not Selected
|
||||
NETBIRD_NETWORKS_LIST| - ID: internet-v4
|
||||
NETBIRD_NETWORKS_LIST| Network: [ADDR], [IPV6]
|
||||
NETBIRD_NETWORKS_LIST| Status: Selected
|
||||
NETBIRD_STATUS_JSON_RC=0
|
||||
NETBIRD_STATUS_JSON_BYTES=10251
|
||||
NETBIRD_STATUS_JSON_SHA256=ae997e3a2b072bf7da4afa5274bd86824449644b8f17ba6d7439038bf6b9f461
|
||||
NETBIRD_STATUS_JSON_PARSE=true
|
||||
NETBIRD_STATUS_JSON_TOPKEYS=cliVersion,daemonStatus,daemonVersion,dnsServers,events,forwardingRules,fqdn,lazyConnectionEnabled,management,netbirdIp,netbirdIpv6,networks,peers,profileName,publicKey,quantumResistance,quantumResistancePermissive,relays,signal,sshServer,usesKernelInterface,wireguardPort
|
||||
NETBIRD_STATUS_JSON_SELECTED_COUNT=80
|
||||
NETBIRD_JSON|path_sha256=679566c8dc90684de679e276220746522687f2d7e9b4537dc8a97954f01290be|value=11
|
||||
NETBIRD_JSON|path_sha256=4a9cb2135f8edb9ab83136dbb735b5de79ae1ee18f725d7fbeba840ba962b603|value=0
|
||||
NETBIRD_JSON|path_sha256=cad0d10b6d77e2f12265ce446f70de2d90dbb61594f248b1efe6093a2b6b0067|value=pve02.netbird.selfhosted
|
||||
NETBIRD_JSON|path_sha256=f75b6abe4f98877764a72f45a15e7ec41a0b169b2eee375acec84e394478d60e|value=[ADDR]
|
||||
NETBIRD_JSON|path_sha256=76fb0e4770bdf00275de5dd40053bf513e6d6c0e8441df7a028f011f95aad54f|value=[IPV6]
|
||||
NETBIRD_JSON|path_sha256=d07bb3a53b362c40c10b90f846a9a5c169dc3a3f8584d700b33073d0990ba584|value=ioHRHMCrw1revg7p7drr2MZxudHpqfhn9GIHvuDNHBs=
|
||||
NETBIRD_JSON|path_sha256=e63c7de2f5ff704abd4049e74419968caa91ba6af64e36d2d9b9cd18db0748a6|value=Connecting
|
||||
NETBIRD_JSON|path_sha256=f057c793dd182d8eca23f5ef877f11de7c3bd44650bdeb893632a031a21f721d|value=2026-09-23T[IPV6].773489895+03:00
|
||||
NETBIRD_JSON|path_sha256=b8bf2a53c80892125f8820159e7c484dde75b50e5bba990cc4ea4278ad7cd238|value=-
|
||||
NETBIRD_JSON|path_sha256=bd4499df433a7b6583b266fbdd9b11f83f8ed22ab44cf210b2d9db997c76f18f|value=
|
||||
NETBIRD_JSON|path_sha256=be0b2ee8224c7a323fb5427ba6db6ad365f9290b11ebcc07f0ffa3b6088d1a87|value=
|
||||
NETBIRD_JSON|path_sha256=07acc52aa801d037f8fbecce724ac218dc89ce7597edeffd9d30b326d75d49b7|value=
|
||||
NETBIRD_JSON|path_sha256=afa1372736f55a5779c7d9b1d916a27c327aa40b00a81ae75b3511fa8f270456|value=
|
||||
NETBIRD_JSON|path_sha256=d1d68386368a1f8b95ab0817794a18a0eeab5255e339d4a371a8667395ab2f09|value=
|
||||
NETBIRD_JSON|path_sha256=781f25c5890ea6c1a646485d2711cf96a82a829d2a6d01e500b1215e8c51656c|value=0001-01-01T[IPV6]Z
|
||||
NETBIRD_JSON|path_sha256=ef2843e18eb51eb8a6d74f8cc0773632e95bcaae62570e5a96dd27427104d4c3|value=0
|
||||
NETBIRD_JSON|path_sha256=3a1ab30635a45faba4326dd6ed27ded4b7fb7529656b5b0c42029ab40493d3b2|value=0
|
||||
NETBIRD_JSON|path_sha256=c9cc0fdec9098ed03d1230bcb5c7dac031d4b3ab895548da4ef396e3303e7c77|value=0
|
||||
NETBIRD_JSON|path_sha256=3027543b3a52fc9ab1d65ccaa63d17a1ab8536d0629e3de5d7c93227e2009291|value=False
|
||||
NETBIRD_JSON|path_sha256=122cf1659db1689e087c83ced68fd32b7119c1636aa44e006960e1ba4e4ce07b|value=home-pc.netbird.selfhosted
|
||||
NETBIRD_JSON|path_sha256=d52f18655d3fb5ef4e8f22d1b4d435f303ef2defdc33e467f411a1ec5b9ef95a|value=[ADDR]
|
||||
NETBIRD_JSON|path_sha256=2ae7f128330461846d31320c153e9a8612b23b0001f0cb1e28efc33c85df27c1|value=[IPV6]
|
||||
NETBIRD_JSON|path_sha256=44a8ed4bf8cfa95e71c3052bd43ea5d26de58fb47d591cd1f4a4545f802ad1b4|value=CoTpTOUD2TU924swK54vv1yhdCKiMwc5sM8PJVRyWj8=
|
||||
NETBIRD_JSON|path_sha256=c69c0993da1766e8d8f49ccd153b4870cf333bb762ad2218a6c001f9cc1ba521|value=Connecting
|
||||
NETBIRD_JSON|path_sha256=11e14f24088beacadf53d5cf1cd9beddf3a2f1574f2b31f32a7ecccd00eddb8d|value=2026-09-23T[IPV6].774137117+03:00
|
||||
NETBIRD_JSON|path_sha256=e1a55aacc297978f57fc9fb790f82177999ff489404622f4d3061962c0a76cf2|value=-
|
||||
NETBIRD_JSON|path_sha256=0ddd1e8e2c6aefc684246a2e51f93ebf9791886dbc1086ed713f91a6f9397718|value=
|
||||
NETBIRD_JSON|path_sha256=0333fa50df80cbecd0631f6f0f2dd6d406dd5f4e3e429cfe66ac0544b451ba4c|value=
|
||||
NETBIRD_JSON|path_sha256=cec1e61e847d53ef4f33fd9eca376978e50206a642cd1b2b6181ef188c8e0844|value=
|
||||
NETBIRD_JSON|path_sha256=761a28061b3a04c3d7be5823550219f78ed87d7e81c4c9ffa94c59872a41953b|value=
|
||||
NETBIRD_JSON|path_sha256=bc331d12e1191062d924779e6f5769ab274d94220865891b9b769edab6ad276b|value=
|
||||
NETBIRD_JSON|path_sha256=6d8968d2cbabcf24551b8893595ad8df476f10cd64910c2f84a62c58cc140fe1|value=0001-01-01T[IPV6]Z
|
||||
NETBIRD_JSON|path_sha256=3b3fb571582c091a8085b19b5246712a9132df3e05990a80b8629565a3313ae2|value=0
|
||||
NETBIRD_JSON|path_sha256=ddc2824c4914d52159d2b343f1f9c4e6f5fd39925c73170b3586171e07fbcd48|value=0
|
||||
NETBIRD_JSON|path_sha256=0d08eb51a4f04271fadd217b55fef8b3e5b386f90115d406f815962b869032bc|value=0
|
||||
NETBIRD_JSON|path_sha256=c70c1aad1a4fa0dace291b8c1ee114080133c155936fc8965b7e1b89ca211b2c|value=False
|
||||
NETBIRD_JSON|path_sha256=e20ef6bfa0471853660cc087041f17e21701c3e62206df591f398cec5163a871|value=relay.netbird.selfhosted
|
||||
NETBIRD_JSON|path_sha256=78d21cd2a3d8144dc8823aad37ff45bfb834b459b2b658482c8003950e242200|value=[ADDR]
|
||||
NETBIRD_JSON|path_sha256=3ecb35313e1a6fba8f9b42bfe48100131a4d029004527e2ce33ff63809612714|value=[IPV6]
|
||||
NETBIRD_JSON|path_sha256=1c174bc37b1454099e90ecb1bacb58ab017f934bdd68f0332f82ac2ca6314148|value=fj5TW6oRrm5KdlrEQ/Zh/JFOO4DBNIIumt6TmR3FZyE=
|
||||
NETBIRD_JSON|path_sha256=95fb885d9385525e4cc6f6897ffef99d01a3f7f9611a37d227f1d5018a3c312b|value=Connecting
|
||||
NETBIRD_JSON|path_sha256=510a700e68196039deecbf5d8d190340ffb08ff54e8a25a7ed3a521d2c4a5eb5|value=2026-09-24T[IPV6].719543198+03:00
|
||||
NETBIRD_JSON|path_sha256=f958f470595344f2a6cc48739b150b3dc30732eb8b028d4faff2e4faf85e6551|value=-
|
||||
NETBIRD_JSON|path_sha256=252b97a875f0b6f5ab50234c4fea093b5372d85fca3bb78de69bf9abdc816cd5|value=
|
||||
NETBIRD_JSON|path_sha256=8eb7573ee53f2a59dfc1f6f829eebac96272ba79ac7f76805d44ab9cd2babefe|value=
|
||||
NETBIRD_JSON|path_sha256=c16f8ab867969c5cf4718228b7feffbf6ff7becd88e02ae6013b8d01abf7465f|value=
|
||||
NETBIRD_JSON|path_sha256=b0b66262576eb1e75c92a87110b042e64aba396c9cf05e40d7fec9b6f83307da|value=
|
||||
NETBIRD_JSON|path_sha256=59a4062f39a14e1de0533701b74181448788980044c07b6c7e1fd0f8a51b70c3|value=
|
||||
NETBIRD_JSON|path_sha256=bef2b4cb9ea3b2cc5db0e8997f2ef57f66b5726e718287379641000761c65db0|value=0001-01-01T[IPV6]Z
|
||||
NETBIRD_JSON|path_sha256=9edd4c7c8dfa8551da17377c5530dde537c2b09c460a7f5083ed3140fc37f21c|value=0
|
||||
NETBIRD_JSON|path_sha256=1fd9d7593f46418a9f4e3ea0aa849b22cd55ca7c05f141162905559c2130b8a3|value=0
|
||||
NETBIRD_JSON|path_sha256=b7f5bd55ef1c641d4f5fd4e63e808f6b6a7b21df21ee649999ebe1bc24941d94|value=58101043
|
||||
NETBIRD_JSON|path_sha256=ccaba428196ed6060b278353e1aa634d7fc031b418278e0d3fb531a4c395be07|value=False
|
||||
NETBIRD_JSON|path_sha256=e327bb74b0b2c68ca33d265c49965d756544f3a419b9b7c2bf94317f8b6c00a7|value=pve03.netbird.selfhosted
|
||||
NETBIRD_JSON|path_sha256=39be3ea04f55f6877974b0783ccf0526c09ab91a571aeedc295e99fc456f1b02|value=[ADDR]
|
||||
NETBIRD_JSON|path_sha256=3ce1c496bf32694f78c33b04a04d08f0aec302f035c5b51eca535d97f531909d|value=[IPV6]
|
||||
NETBIRD_JSON|path_sha256=ea1b727fc3e7fd7852615d5347e8639c91d58dd64f0975d02123d85154e345b5|value=oXaA1VeKq1d/v5F8w0v/7G1DFL0yJMmxdSk/4X9j2j4=
|
||||
NETBIRD_JSON|path_sha256=cb66d5a3abb053cb20d3481f9ff5c6bc81d9a7b407cb8b48f319c9e09bf669df|value=Connecting
|
||||
NETBIRD_JSON|path_sha256=67f3e52702b07e387176d5cbc95dbbcfdd1c23a91c159ba1c9507271d683b375|value=2026-09-23T[IPV6].773575258+03:00
|
||||
NETBIRD_JSON|path_sha256=fcaf0387b115f2bd09d147636cc83f2d1464425169cea63b0bfac79baddae46d|value=-
|
||||
NETBIRD_JSON|path_sha256=7916502a9bfe8bfc0841a05cd410fa0296c9ad05c4f9eb6e73743975c4c046c6|value=
|
||||
NETBIRD_JSON|path_sha256=fa221acaac543f1da5ba45d8a3772fb1872ef7b024b3895791124a932a9e6659|value=
|
||||
NETBIRD_JSON|path_sha256=55206b1db6dd3ea78bda14ee278ce18c91990a5855691c2c66a952eeea10afbf|value=
|
||||
NETBIRD_JSON|path_sha256=ca17871ab53271d5c93201e9f780b93d8aa4133cbc71d6e4613a558acf61c456|value=
|
||||
NETBIRD_JSON|path_sha256=4a151dffa29d0954648b340c5c1523e2f827ca346b1cc5d5c3b85dd510469dae|value=
|
||||
NETBIRD_JSON|path_sha256=59a4a688d03bb96865bceb126225323dc51b98808e1c4b6d3c5b43180e39f576|value=0001-01-01T[IPV6]Z
|
||||
NETBIRD_JSON|path_sha256=6ff003ffae7699bd7b10e9ac37de4bf7b3995546077ff7713b66270b5ffbc757|value=0
|
||||
NETBIRD_JSON|path_sha256=98b109bcced49829ec0610819e1d4cd6d9bb95eba60b71d68e3eea32fda53101|value=0
|
||||
NETBIRD_JSON|path_sha256=20d283da05f088b99e0d4d4ea5533c8ce3589cf6550fb1155b0b3bace7eb2948|value=0
|
||||
NETBIRD_JSON|path_sha256=718a3fa7ce808de23a8f393434e4f96d89551ed4a62fcaf7201acad73212e7c3|value=False
|
||||
NETBIRD_JSON|path_sha256=bfe94ea4998d1497ead578c9d2351dd86499d715e7a5ae2c251a48ab175e7597|value=desktop-moy.netbird.selfhosted
|
||||
NETBIRD_JSON|path_sha256=10615ff34b6e87b5fc0e348720aa6b4cf7e79505d5399b7f082c6062dfc580f7|value=[ADDR]
|
||||
NETBIRD_JSON|path_sha256=0cfd2e29f0be9e305d2a1869bae732cc2fa4e0f543d06e5ccfd86e28def6b586|value=[IPV6]
|
||||
NETBIRD_JSON|path_sha256=83b78e00feeb099510b8ff7008845df75bc26d617d6d0011e01e62d6da957fca|value=E6+z+dlShOTEO+JOFoHKGcVHqnAcLZGz/Q8i9VAh5Go=
|
||||
NETBIRD_JSON|path_sha256=f60a499031d0775f574a7541a318343ec232d9058df51fb122d90786e7e4d835|value=Connecting
|
||||
NETBIRD_JSON|path_sha256=22c93528375c70c03debe2e7dbbba8b63205daedd81b5785c90903b48729e470|value=2026-09-24T[IPV6].926485532+03:00
|
||||
NETBIRD_JSON|path_sha256=0f1f1de24e138953d23d453ca5c2107709abce3a66dc83d86590db5a5b2106bf|value=-
|
||||
NETBIRD_JSON|path_sha256=bbb7054e5bc8316d34a6361014fce93781407132b089ac8c0227a4e73681f720|value=
|
||||
NETBIRD_JSON|path_sha256=2c7753650b2104d256bbab68e5dffe644077e34a60fbef115b13da287c2c458b|value=
|
||||
NETBIRD_JSON|path_sha256=3f4f797eb572f9538ea32803fc33e3e4484dc6539739a550cf3d85b3a9645eb4|value=
|
||||
ROUTING_VIEW|name=RULE4|rc=0|lines=7|sha256=1b58f518e6616a36df39ac0ccaf9ece7cb2b39d9f4b226d75a17839d5e0373ad
|
||||
ROUTING_RULE4|0: from all lookup local
|
||||
ROUTING_RULE4|100: from [ADDR] lookup main
|
||||
ROUTING_RULE4|101: from [ADDR] lookup 17777
|
||||
ROUTING_RULE4|105: from all lookup main suppress_prefixlength 0
|
||||
ROUTING_RULE4|110: not from all fwmark 0x1bd00 lookup 7120
|
||||
ROUTING_RULE4|32766: from all lookup main
|
||||
ROUTING_RULE4|32767: from all lookup default
|
||||
ROUTING_VIEW|name=RULE6|rc=0|lines=4|sha256=084928feb354be1f5bc19a4e726f8633720b2d0f1c47ae3240f7839b2a369b19
|
||||
ROUTING_RULE6|0: from all lookup local
|
||||
ROUTING_RULE6|105: from all lookup main suppress_prefixlength 0
|
||||
ROUTING_RULE6|110: not from all fwmark 0x1bd00 lookup 7120
|
||||
ROUTING_RULE6|32766: from all lookup main
|
||||
ROUTING_VIEW|name=TABLE7120_4|rc=0|lines=1|sha256=47caf134646621d5b98f8b57df342b12d9ee4d1934eae893f5de787744ee72e4
|
||||
ROUTING_TABLE7120_4|default dev wt0
|
||||
ROUTING_VIEW|name=TABLE7120_6|rc=0|lines=1|sha256=2a5ee430739c900b7bed73ca983a83e00a763cde6cc22d9f34bf5aaba9257dc3
|
||||
ROUTING_TABLE7120_6|default dev wt0 metric 1024 pref medium
|
||||
WT0_LINK_RC=0
|
||||
WT0_OPERSTATE=UNKNOWN
|
||||
WT0_MTU=1280
|
||||
WT0_FLAGS=POINTOPOINT,NOARP,UP,LOWER_UP
|
||||
NFT_RC=0
|
||||
NFT_NETBIRD_RELEVANT_COUNT=47
|
||||
NFT_NETBIRD| oifname "wt0" ct state related,established counter packets 733 bytes 194838 accept
|
||||
NFT_NETBIRD| iifname "wt0" counter packets 688 bytes 510598 accept
|
||||
NFT_NETBIRD| iifname "wt0" counter packets 36248 bytes 41371245 accept
|
||||
NFT_NETBIRD| ip saddr [ADDR] iifname "wt0" ip protocol tcp tcp dport { 80, 443 } counter packets 3302601 bytes 531568845 accept
|
||||
NFT_NETBIRD| oifname "wt0" ct state related,established counter packets 0 bytes 0 accept
|
||||
NFT_NETBIRD| iifname "wt0" counter packets 0 bytes 0 accept
|
||||
NFT_NETBIRD| iifname "wt0" counter packets 0 bytes 0 accept
|
||||
NFT_NETBIRD|table ip netbird {
|
||||
NFT_NETBIRD| chain netbird-rt-fwd {
|
||||
NFT_NETBIRD| chain netbird-rt-postrouting {
|
||||
NFT_NETBIRD| meta mark 0x0001bd22 oifname "wt0" counter packets 0 bytes 0 masquerade
|
||||
NFT_NETBIRD| chain netbird-rt-redirect {
|
||||
NFT_NETBIRD| chain netbird-mangle-postrouting {
|
||||
NFT_NETBIRD| oifname "wt0" ct state new ct mark set 0x0001bd11
|
||||
NFT_NETBIRD| chain netbird-mangle-prerouting {
|
||||
NFT_NETBIRD| iifname "wt0" ct state new ct mark set 0x0001bd10
|
||||
NFT_NETBIRD| iifname "wt0" ip saddr @nb0000001 fib daddr type local meta mark set 0x0001bd20
|
||||
NFT_NETBIRD| chain netbird-mangle-forward {
|
||||
NFT_NETBIRD| oifname "wt0" tcp flags syn counter packets 112 bytes 6720 tcp option maxseg size > 1240 tcp option maxseg size set 1240
|
||||
NFT_NETBIRD| chain netbird-acl-input-rules {
|
||||
NFT_NETBIRD| chain netbird-acl-input-filter {
|
||||
NFT_NETBIRD| iifname "wt0" jump netbird-acl-input-rules
|
||||
NFT_NETBIRD| iifname "wt0" drop
|
||||
NFT_NETBIRD| chain netbird-acl-forward-filter {
|
||||
NFT_NETBIRD| iifname "wt0" jump netbird-rt-fwd
|
||||
NFT_NETBIRD| iifname "wt0" drop
|
||||
NFT_NETBIRD| chain netbird-raw-out {
|
||||
NFT_NETBIRD| chain netbird-raw-pre {
|
||||
NFT_NETBIRD|table ip6 netbird {
|
||||
NFT_NETBIRD| chain netbird-rt-fwd {
|
||||
NFT_NETBIRD| chain netbird-rt-postrouting {
|
||||
NFT_NETBIRD| meta mark 0x0001bd22 oifname "wt0" counter packets 0 bytes 0 masquerade
|
||||
NFT_NETBIRD| chain netbird-rt-redirect {
|
||||
NFT_NETBIRD| chain netbird-mangle-postrouting {
|
||||
NFT_NETBIRD| oifname "wt0" ct state new ct mark set 0x0001bd11
|
||||
NFT_NETBIRD| chain netbird-mangle-prerouting {
|
||||
NFT_NETBIRD| iifname "wt0" ct state new ct mark set 0x0001bd10
|
||||
NFT_NETBIRD| iifname "wt0" ip6 saddr @nb0000001 fib daddr type local meta mark set 0x0001bd20
|
||||
NFT_NETBIRD| chain netbird-mangle-forward {
|
||||
NFT_NETBIRD| oifname "wt0" tcp flags syn counter packets 0 bytes 0 tcp option maxseg size > 1220 tcp option maxseg size set 1220
|
||||
NFT_NETBIRD| chain netbird-acl-input-rules {
|
||||
NFT_NETBIRD| chain netbird-acl-input-filter {
|
||||
NFT_NETBIRD| iifname "wt0" jump netbird-acl-input-rules
|
||||
NFT_NETBIRD| iifname "wt0" drop
|
||||
NFT_NETBIRD| chain netbird-acl-forward-filter {
|
||||
NFT_NETBIRD| iifname "wt0" jump netbird-rt-fwd
|
||||
NFT_NETBIRD| iifname "wt0" drop
|
||||
NETBIRD_JOURNAL_RC=0
|
||||
NETBIRD_JOURNAL_RELEVANT_COUNT=0
|
||||
PUBLIC_ROUTE_GET|family=v4|rc=0|sha256=b1bac959b7f164a915a16d2128198deec0f9d739449bd8398fdf4fa4017159fa
|
||||
PUBLIC_ROUTE_GET_LINE|family=v4|[ADDR] dev wt0 table 7120 src [ADDR] uid 0
|
||||
PUBLIC_ROUTE_GET|family=v6|rc=0|sha256=72b49fa2af3fc9123bcb7f2e4b98dfcbff4c61fd8bf4a3d021bc409d158c39bd
|
||||
PUBLIC_ROUTE_GET_LINE|family=v6|[IPV6] from [IPV6] dev wt0 table 7120 src [IPV6] metric 1024 pref medium
|
||||
MAIN_TABLE_ROUTE_GET_RC=1
|
||||
MAIN_TABLE_ROUTE_GET_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
|
||||
EDGE_NETBIRD_EGRESS_END=1
|
||||
DECISION=PASS_MOLDOVA_1164_EDGE_NETBIRD_EGRESS_RCA_COLLECTED
|
||||
NEXT_GATE=READ_EXACT_1164_AND_CLASSIFY_MOLDOVA_EXIT_DEPENDENCY
|
||||
TASK_RESULT=PASS_MOLDOVA_EDGE_NETBIRD_EGRESS_RCA
|
||||
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
|
||||
WORKERS2_MOLDOVA_EDGE_NETBIRD_EGRESS_RCA_END=1
|
||||
|
||||
OUTPUT_END
|
||||
CHAT_OUTPUT_END
|
||||
+8
-8
File diff suppressed because one or more lines are too long
+262
-609
@@ -1,15 +1,15 @@
|
||||
CHAT_OUTPUT_BEGIN
|
||||
COMMAND_ID=SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-EGRESS-PATH-RCA-1163R1
|
||||
COMMAND_ID=SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1
|
||||
STATUS=OK
|
||||
RC=0
|
||||
HOST=pve01
|
||||
MODE=read-only
|
||||
COMPONENT=homelab-moldova-edge-egress-path-rca
|
||||
COMPONENT=homelab-moldova-edge-netbird-egress-rca
|
||||
REFERENCE_REGISTER_CHECK=OK
|
||||
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
|
||||
ERROR_REGISTER_CHECK=OK
|
||||
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
|
||||
COMMAND_SHA256=4dd736263e0e25b3d31d60e7b675853bd03788ccdef665c1273de9f2a4d83e72
|
||||
COMMAND_SHA256=31d3e9189305dd16c8be28fb7e42e00b47db6b63b8c826758c373859f18db9af
|
||||
DUPLICATE_FAILED_COMMAND_BLOCKED=false
|
||||
EXECUTION_STARTED=true
|
||||
CHANGE_DECLARED=false
|
||||
@@ -24,16 +24,15 @@ MUTATION_OUTCOME=NO_MUTATION
|
||||
SANITIZED=yes
|
||||
SECRETS_INCLUDED=no
|
||||
PRIVATE_ADDRESSES_INCLUDED=no
|
||||
RAW_EVIDENCE_SHA256=78f1ea4cf748ca9ae58d41b22a7504d75b7e4919a270dcbe19dd061ff42739d1
|
||||
SANITIZED_OUTPUT_SHA256=78f1ea4cf748ca9ae58d41b22a7504d75b7e4919a270dcbe19dd061ff42739d1
|
||||
RAW_EVIDENCE_SHA256=7ed7b1b9bf78ef99af59d64634ea8ae43e76d1fe9515c6fc609085da318823e1
|
||||
SANITIZED_OUTPUT_SHA256=7ed7b1b9bf78ef99af59d64634ea8ae43e76d1fe9515c6fc609085da318823e1
|
||||
OUTPUT_BEGIN
|
||||
WORKERS2_MOLDOVA_EDGE_EGRESS_PATH_RCA_BEGIN=1
|
||||
COMMAND_ID=SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-EGRESS-PATH-RCA-1163R1
|
||||
WORKERS2_MOLDOVA_EDGE_NETBIRD_EGRESS_RCA_BEGIN=1
|
||||
COMMAND_ID=SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1
|
||||
MODE=read-only
|
||||
COMPONENT=homelab-moldova-edge-egress-path-rca
|
||||
MUTATION_BOUNDARY=NONE;PVE03_VM130_CONFIG_LINK_FIREWALL_PLUS_EDGE_GUEST_ROUTE_FIREWALL_RCA;NO_NETWORK_CHANGE;NO_VM_STATE_CHANGE;NO_DNS_WRITE;NO_PROVIDER_MUTATION;NO_MOLDOVA_CONNECTION;NO_SYSTEMD_ACTION;NO_GIT_WRITE;NO_SECRET_VALUE_OUTPUT
|
||||
PREDECESSOR_1162=PASS_EDGE_NO_TCP443_TO_CLOUDFLARE
|
||||
HISTORICAL_705R3=EDGE_CONTROL_PATH_READY_VM130_PVE03
|
||||
COMPONENT=homelab-moldova-edge-netbird-egress-rca
|
||||
MUTATION_BOUNDARY=NONE;EDGE_VM_NETBIRD_PEER_ROUTE_NETWORK_POLICY_AND_JOURNAL_RCA_ONLY;NO_NETWORK_CHANGE;NO_NETBIRD_MUTATION;NO_VM_STATE_CHANGE;NO_DNS_WRITE;NO_PROVIDER_MUTATION;NO_MOLDOVA_CONNECTION;NO_SYSTEMD_ACTION;NO_GIT_WRITE;NO_SECRET_VALUE_OUTPUT
|
||||
PREDECESSOR_1163=PASS_EDGE_PUBLIC_ROUTE_DECISION_VIA_WT0_TABLE_7120
|
||||
CARRIER_BASELINE=KNOWN_GOOD_1137_BYTE_SEMANTICS
|
||||
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
|
||||
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
|
||||
@@ -46,612 +45,266 @@ EDGE_VM_MATCH_COUNT=1
|
||||
EDGE_VM_VMID=130
|
||||
EDGE_VM_NODE=pve03
|
||||
EDGE_VM_STATUS=running
|
||||
PVE03_PROBE_RC=0
|
||||
PVE03_PROBE_STDERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
|
||||
PVE03_EDGE_PATH_BEGIN=1
|
||||
PVE03_HOST=pve03
|
||||
PVE03_EUID=0
|
||||
VM_STATUS=running
|
||||
VM_CONFIG_SHA256=eb283b95f5a89329cb433e7fca33e81e25f97caa7f662a7ad303c345ae1832b8
|
||||
VM_NET0_PRESENT=true
|
||||
VM_NET0_BRIDGE=vmbr0
|
||||
VM_NET0_FIREWALL=1
|
||||
VM_NET0_LINK_DOWN=0
|
||||
VM_NET0_MAC_SHA256=a6abbf31945b0b0723cdfeb74d33e2734f40f892962894276825cb8d41f2fdda
|
||||
HOST_LINK|name=tap130i0|present=true|state=unknown|master=fwbr130i0
|
||||
HOST_LINK|name=fwln130i0|present=true|state=up|master=fwbr130i0
|
||||
HOST_LINK|name=fwpr130p0|present=true|state=up|master=vmbr0
|
||||
HOST_LINK|name=fwbr130i0|present=true|state=up|master=master
|
||||
HOST_BRIDGE|name=vmbr0|state=up
|
||||
VM_FIREWALL_FILE_EXISTS=true
|
||||
VM_FIREWALL_FILE_SHA256=09e3beaba29b0d84e7bbbc2da490b924a763de3e3305fd3346697faa4b2422cb
|
||||
VM_FIREWALL_LINE|3:policy_in: ACCEPT
|
||||
VM_FIREWALL_LINE|4:policy_out: ACCEPT
|
||||
VM_FIREWALL_LINE|6:[RULES]
|
||||
VM_FIREWALL_LINE|7:OUT DROP -dest [ADDR] -log nolog
|
||||
VM_FIREWALL_LINE|8:OUT DROP -dest [ADDR] -log nolog
|
||||
VM_FIREWALL_LINE|9:OUT DROP -dest [ADDR] -log nolog
|
||||
PVE03_NFT_LINE_COUNT=1
|
||||
PVE03_IPTABLES-SAVE|-A FORWARD -i wt0 -m conntrack --ctstate DNAT -m mark ! --mark 0x1bd20 -j DROP
|
||||
PVE03_IPTABLES-SAVE|:PVEFW-Drop - [0:0]
|
||||
PVE03_IPTABLES-SAVE|:PVEFW-DropBroadcast - [0:0]
|
||||
PVE03_IPTABLES-SAVE|:PVEFW-FORWARD - [0:0]
|
||||
PVE03_IPTABLES-SAVE|:PVEFW-FWBR-IN - [0:0]
|
||||
PVE03_IPTABLES-SAVE|:PVEFW-FWBR-OUT - [0:0]
|
||||
PVE03_IPTABLES-SAVE|:PVEFW-HOST-IN - [0:0]
|
||||
PVE03_IPTABLES-SAVE|:PVEFW-HOST-OUT - [0:0]
|
||||
PVE03_IPTABLES-SAVE|:PVEFW-INPUT - [0:0]
|
||||
PVE03_IPTABLES-SAVE|:PVEFW-OUTPUT - [0:0]
|
||||
PVE03_IPTABLES-SAVE|:PVEFW-Reject - [0:0]
|
||||
PVE03_IPTABLES-SAVE|:PVEFW-SET-ACCEPT-MARK - [0:0]
|
||||
PVE03_IPTABLES-SAVE|:PVEFW-logflags - [0:0]
|
||||
PVE03_IPTABLES-SAVE|:PVEFW-reject - [0:0]
|
||||
PVE03_IPTABLES-SAVE|:PVEFW-smurflog - [0:0]
|
||||
PVE03_IPTABLES-SAVE|:PVEFW-smurfs - [0:0]
|
||||
PVE03_IPTABLES-SAVE|:PVEFW-tcpflags - [0:0]
|
||||
PVE03_IPTABLES-SAVE|:tap130i0-IN - [0:0]
|
||||
PVE03_IPTABLES-SAVE|:tap130i0-OUT - [0:0]
|
||||
PVE03_IPTABLES-SAVE|-A INPUT -i wt0 -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A INPUT -j PVEFW-INPUT
|
||||
PVE03_IPTABLES-SAVE|-A FORWARD -i wt0 -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A FORWARD -j PVEFW-FORWARD
|
||||
PVE03_IPTABLES-SAVE|-A OUTPUT -j PVEFW-OUTPUT
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -j PVEFW-DropBroadcast
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p icmp -m icmp --icmp-type 3/4 -j ACCEPT
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p icmp -m icmp --icmp-type 11 -j ACCEPT
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -m conntrack --ctstate INVALID -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m multiport --dports 135,445 -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m udp --dport 137:139 -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m udp --sport 137 --dport 1024:65535 -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p tcp -m multiport --dports 135,139,445 -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m udp --dport 1900 -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m udp --sport 53 -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -m comment --comment "PVESIG:83WlR/a4wLbmURFqMQT3uJSgIG8"
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -m addrtype --dst-type BROADCAST -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -m addrtype --dst-type MULTICAST -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -m addrtype --dst-type ANYCAST -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -d [ADDR]/4 -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -m comment --comment "PVESIG:NyjHNAtFbkH7WGLamPpdVnxHy4w"
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m conntrack --ctstate INVALID -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m physdev --physdev-in fwln+ --physdev-is-bridged -j PVEFW-FWBR-IN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m physdev --physdev-out fwln+ --physdev-is-bridged -j PVEFW-FWBR-OUT
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m comment --comment "PVESIG:qnNexOcGa+y+jebd4dAUqFSp5nw"
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-FWBR-IN -m conntrack --ctstate INVALID,NEW -j PVEFW-smurfs
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-FWBR-IN -m physdev --physdev-out tap130i0 --physdev-is-bridged -j tap130i0-IN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-FWBR-IN -m physdev --physdev-out tap190i0 --physdev-is-bridged -j tap190i0-IN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-FWBR-IN -m comment --comment "PVESIG:9OsF92MfiIODIzcUNIrKOmVOkVk"
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-FWBR-OUT -m physdev --physdev-in tap130i0 --physdev-is-bridged -j tap130i0-OUT
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-FWBR-OUT -m physdev --physdev-in tap190i0 --physdev-is-bridged -j tap190i0-OUT
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-FWBR-OUT -m comment --comment "PVESIG:rZNhlvxx7SPSwyB4BNDP7aliiPU"
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -i lo -j ACCEPT
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate INVALID -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate INVALID,NEW -j PVEFW-smurfs
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p 2 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/24 -p tcp -m tcp --dport 22 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/24 -p tcp -m tcp --dport 8006 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/24 -p tcp -m tcp --dport 9100 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/24 -p tcp -m tcp --dport 9101 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/10 -p tcp -m tcp --dport 22 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/10 -p tcp -m tcp --dport 8006 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p icmp -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 8006 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 5900:5999 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 3128 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 22 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 60000:60050 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -d [ADDR]/32 -p udp -m udp --dport 5404:5405 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -d [ADDR]/32 -p udp -m udp --dport 5404:5405 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -j PVEFW-Drop
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -m comment --comment "PVESIG:E/DUTOuKiQolUkKtABHBSyIB6Q4"
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -o lo -j ACCEPT
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -m conntrack --ctstate INVALID -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -p 2 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -d [ADDR]/24 -p tcp -m tcp --dport 8006 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -d [ADDR]/24 -p tcp -m tcp --dport 22 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -d [ADDR]/24 -p tcp -m tcp --dport 5900:5999 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -d [ADDR]/24 -p tcp -m tcp --dport 3128 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -s [ADDR]/32 -d [ADDR]/32 -p udp -m udp --dport 5404:5405 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -s [ADDR]/32 -d [ADDR]/32 -p udp -m udp --dport 5404:5405 -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -j RETURN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -m comment --comment "PVESIG:1eYE8DBaQG01lXgrEFYwctByTNQ"
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-INPUT -j PVEFW-HOST-IN
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-INPUT -m comment --comment "PVESIG:+5iMmLaxKXynOB/+5xibfx7WhFk"
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-OUTPUT -j PVEFW-HOST-OUT
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-OUTPUT -m comment --comment "PVESIG:LjHoZeSSiWAG3+2ZAyL/xuEehd0"
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -j PVEFW-DropBroadcast
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p icmp -m icmp --icmp-type 3/4 -j ACCEPT
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p icmp -m icmp --icmp-type 11 -j ACCEPT
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -m conntrack --ctstate INVALID -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m multiport --dports 135,445 -j PVEFW-reject
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m udp --dport 137:139 -j PVEFW-reject
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m udp --sport 137 --dport 1024:65535 -j PVEFW-reject
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p tcp -m multiport --dports 135,139,445 -j PVEFW-reject
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m udp --dport 1900 -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m udp --sport 53 -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -m comment --comment "PVESIG:h3DyALVslgH5hutETfixGP08w7c"
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-SET-ACCEPT-MARK -j MARK --set-xmark 0x80000000/0x80000000
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-SET-ACCEPT-MARK -m comment --comment "PVESIG:Hg/OIgIwJChBUcWU8Xnjhdd2jUY"
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-logflags -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-logflags -m comment --comment "PVESIG:MN4PH1oPZeABMuWr64RrygPfW7A"
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-reject -m addrtype --dst-type BROADCAST -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-reject -s [ADDR]/4 -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-reject -p icmp -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-reject -p tcp -j REJECT --reject-with tcp-reset
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-reject -p udp -j REJECT --reject-with icmp-port-unreachable
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-reject -p icmp -j REJECT --reject-with icmp-host-unreachable
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-reject -j REJECT --reject-with icmp-host-prohibited
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-reject -m comment --comment "PVESIG:Jlkrtle1mDdtxDeI9QaDSL++Npc"
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-smurflog -j DROP
|
||||
PVE03_IPTABLES-SAVE|-A PVEFW-smurflog -m comment --comment "PVESIG:2gfT1VMkfr0JL6OccRXTGXo+1qk"
|
||||
PVE03_IP6TABLES-SAVE|-A FORWARD -i wt0 -m conntrack --ctstate DNAT -m mark ! --mark 0x1bd20 -j DROP
|
||||
PVE03_IP6TABLES-SAVE|:PVEFW-Drop - [0:0]
|
||||
PVE03_IP6TABLES-SAVE|:PVEFW-DropBroadcast - [0:0]
|
||||
PVE03_IP6TABLES-SAVE|:PVEFW-FORWARD - [0:0]
|
||||
PVE03_IP6TABLES-SAVE|:PVEFW-FWBR-IN - [0:0]
|
||||
PVE03_IP6TABLES-SAVE|:PVEFW-FWBR-OUT - [0:0]
|
||||
PVE03_IP6TABLES-SAVE|:PVEFW-HOST-IN - [0:0]
|
||||
PVE03_IP6TABLES-SAVE|:PVEFW-HOST-OUT - [0:0]
|
||||
PVE03_IP6TABLES-SAVE|:PVEFW-INPUT - [0:0]
|
||||
PVE03_IP6TABLES-SAVE|:PVEFW-OUTPUT - [0:0]
|
||||
PVE03_IP6TABLES-SAVE|:PVEFW-Reject - [0:0]
|
||||
PVE03_IP6TABLES-SAVE|:PVEFW-SET-ACCEPT-MARK - [0:0]
|
||||
PVE03_IP6TABLES-SAVE|:PVEFW-logflags - [0:0]
|
||||
PVE03_IP6TABLES-SAVE|:PVEFW-reject - [0:0]
|
||||
PVE03_IP6TABLES-SAVE|:PVEFW-tcpflags - [0:0]
|
||||
PVE03_IP6TABLES-SAVE|:tap130i0-IN - [0:0]
|
||||
PVE03_IP6TABLES-SAVE|:tap130i0-OUT - [0:0]
|
||||
PVE03_IP6TABLES-SAVE|-A INPUT -i wt0 -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A INPUT -j PVEFW-INPUT
|
||||
PVE03_IP6TABLES-SAVE|-A FORWARD -i wt0 -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A FORWARD -j PVEFW-FORWARD
|
||||
PVE03_IP6TABLES-SAVE|-A OUTPUT -j PVEFW-OUTPUT
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p tcp -m tcp --dport 43 -j PVEFW-reject
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -j PVEFW-DropBroadcast
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p ipv6-icmp -m icmp6 --icmpv6-type 1 -j ACCEPT
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p ipv6-icmp -m icmp6 --icmpv6-type 3 -j ACCEPT
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p ipv6-icmp -m icmp6 --icmpv6-type 2 -j ACCEPT
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -m conntrack --ctstate INVALID -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m multiport --dports 135,445 -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m udp --dport 137:139 -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m udp --sport 137 --dport 1024:65535 -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p tcp -m multiport --dports 135,139,445 -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m udp --dport 1900 -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m udp --sport 53 -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -m comment --comment "PVESIG:Jb79Uw7z1vZglIcV7QXA5uY/nbk"
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-DropBroadcast -d ff00::/8 -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-DropBroadcast -m comment --comment "PVESIG:8Krk5Nh8pDZOOc7BQAbM6PlyFSU"
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m conntrack --ctstate INVALID -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m physdev --physdev-in fwln+ --physdev-is-bridged -j PVEFW-FWBR-IN
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m physdev --physdev-out fwln+ --physdev-is-bridged -j PVEFW-FWBR-OUT
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m comment --comment "PVESIG:qnNexOcGa+y+jebd4dAUqFSp5nw"
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-IN -m physdev --physdev-out tap130i0 --physdev-is-bridged -j tap130i0-IN
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-IN -m physdev --physdev-out tap190i0 --physdev-is-bridged -j tap190i0-IN
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-IN -m comment --comment "PVESIG:SN6fTaV+kY20ebDQ/eXdXf9FYBE"
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-OUT -m physdev --physdev-in tap130i0 --physdev-is-bridged -j tap130i0-OUT
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-OUT -m physdev --physdev-in tap190i0 --physdev-is-bridged -j tap190i0-OUT
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-OUT -m comment --comment "PVESIG:rZNhlvxx7SPSwyB4BNDP7aliiPU"
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -i lo -j ACCEPT
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate INVALID -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j RETURN
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j RETURN
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j RETURN
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p ipv6-icmp -m icmp6 --icmpv6-type 136 -j RETURN
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p 2 -j RETURN
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 8006 -j RETURN
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 5900:5999 -j RETURN
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 3128 -j RETURN
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 22 -j RETURN
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 60000:60050 -j RETURN
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -j PVEFW-Drop
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -m comment --comment "PVESIG:t+/LTT8OHyoSgF5i9Hox+PZEud4"
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -o lo -j ACCEPT
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -m conntrack --ctstate INVALID -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j RETURN
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j RETURN
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -p ipv6-icmp -m icmp6 --icmpv6-type 136 -j RETURN
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -p 2 -j RETURN
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -j RETURN
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -m comment --comment "PVESIG:br2bPbA9ZjuHOMNhV8tfLRw1mAs"
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-INPUT -j PVEFW-HOST-IN
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-INPUT -m comment --comment "PVESIG:+5iMmLaxKXynOB/+5xibfx7WhFk"
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-OUTPUT -j PVEFW-HOST-OUT
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-OUTPUT -m comment --comment "PVESIG:LjHoZeSSiWAG3+2ZAyL/xuEehd0"
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p tcp -m tcp --dport 43 -j PVEFW-reject
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -j PVEFW-DropBroadcast
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p ipv6-icmp -m icmp6 --icmpv6-type 1 -j ACCEPT
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p ipv6-icmp -m icmp6 --icmpv6-type 3 -j ACCEPT
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p ipv6-icmp -m icmp6 --icmpv6-type 2 -j ACCEPT
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -m conntrack --ctstate INVALID -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m multiport --dports 135,445 -j PVEFW-reject
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m udp --dport 137:139 -j PVEFW-reject
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m udp --sport 137 --dport 1024:65535 -j PVEFW-reject
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p tcp -m multiport --dports 135,139,445 -j PVEFW-reject
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m udp --dport 1900 -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m udp --sport 53 -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -m comment --comment "PVESIG:aL1nrxJk/u3XmTb3Am2eaM/3yCM"
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-SET-ACCEPT-MARK -j MARK --set-xmark 0x80000000/0x80000000
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-SET-ACCEPT-MARK -m comment --comment "PVESIG:Hg/OIgIwJChBUcWU8Xnjhdd2jUY"
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-logflags -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-logflags -m comment --comment "PVESIG:MN4PH1oPZeABMuWr64RrygPfW7A"
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-reject -p ipv6-icmp -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-reject -p tcp -j REJECT --reject-with tcp-reset
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-reject -p udp -j REJECT --reject-with icmp6-port-unreachable
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-reject -j REJECT --reject-with icmp6-adm-prohibited
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-reject -m comment --comment "PVESIG:etEECUYcgUdzuuO+LDP83pu0S8Y"
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN,PSH,URG -g PVEFW-logflags
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE -g PVEFW-logflags
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --tcp-flags SYN,RST SYN,RST -g PVEFW-logflags
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --tcp-flags FIN,SYN FIN,SYN -g PVEFW-logflags
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --sport 0 --tcp-flags FIN,SYN,RST,ACK SYN -g PVEFW-logflags
|
||||
PVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -m comment --comment "PVESIG:CMFojwNPqllyqD67NeI5m+bP5mo"
|
||||
PVE03_IP6TABLES-SAVE|-A tap130i0-IN -j CONNMARK --set-xmark 0x82/0xffffffff
|
||||
PVE03_IP6TABLES-SAVE|-A tap130i0-IN -p udp -m udp --sport 547 --dport 546 -j ACCEPT
|
||||
PVE03_IP6TABLES-SAVE|-A tap130i0-IN -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j ACCEPT
|
||||
PVE03_IP6TABLES-SAVE|-A tap130i0-IN -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j ACCEPT
|
||||
PVE03_IP6TABLES-SAVE|-A tap130i0-IN -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j ACCEPT
|
||||
PVE03_IP6TABLES-SAVE|-A tap130i0-IN -p ipv6-icmp -m icmp6 --icmpv6-type 136 -j ACCEPT
|
||||
PVE03_IP6TABLES-SAVE|-A tap130i0-IN -j ACCEPT
|
||||
PVE03_IP6TABLES-SAVE|-A tap130i0-IN -m comment --comment "PVESIG:6BljBbDQyGrN4aDv7s9DGHcW7Gk"
|
||||
PVE03_IP6TABLES-SAVE|-A tap130i0-OUT -j CONNMARK --set-xmark 0x82/0xffffffff
|
||||
PVE03_IP6TABLES-SAVE|-A tap130i0-OUT -p udp -m udp --sport 546 --dport 547 -g PVEFW-SET-ACCEPT-MARK
|
||||
PVE03_IP6TABLES-SAVE|-A tap130i0-OUT -m mac ! --mac-source bc:24:11:e1:f3:3c -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A tap130i0-OUT -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j DROP
|
||||
PVE03_IP6TABLES-SAVE|-A tap130i0-OUT -j MARK --set-xmark 0x0/0x80000000
|
||||
PVE03_DEFAULT_ROUTE_PRESENT=true
|
||||
PVE03_EDGE_PATH_END=1
|
||||
EDGE_QGA_TRANSPORT_RC=0
|
||||
EDGE_QGA_TRANSPORT_STDERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
|
||||
EDGE_QGA_EXITCODE=0
|
||||
EDGE_QGA_ERR_BYTES=0
|
||||
EDGE_QGA_ERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
|
||||
EDGE_GUEST_NETWORK_BEGIN=1
|
||||
EDGE_NETBIRD_EGRESS_BEGIN=1
|
||||
EDGE_HOSTNAME=edge-vm
|
||||
EDGE_EUID=0
|
||||
IP_LINK_JSON_RC=0
|
||||
IP_LINK_COUNT=25
|
||||
LINK|name=lo|operstate=UNKNOWN|mtu=65536|up=true|master=none
|
||||
LINK|name=eth0|operstate=UP|mtu=1500|up=true|master=none
|
||||
LINK|name=wg-taftauto|operstate=UNKNOWN|mtu=1420|up=true|master=none
|
||||
LINK|name=wg-edge01|operstate=UNKNOWN|mtu=1420|up=true|master=none
|
||||
LINK|name=br-4d894f9e427b|operstate=DOWN|mtu=1500|up=true|master=none
|
||||
LINK|name=br-5f66e1018bdd|operstate=UP|mtu=1500|up=true|master=none
|
||||
LINK|name=br-8122fec51f39|operstate=UP|mtu=1500|up=true|master=none
|
||||
LINK|name=docker0|operstate=DOWN|mtu=1500|up=true|master=none
|
||||
LINK|name=br-915a81681c3e|operstate=UP|mtu=1500|up=true|master=none
|
||||
LINK|name=br-a4e31561a8d5|operstate=UP|mtu=1500|up=true|master=none
|
||||
LINK|name=br-d41b3e918fbc|operstate=UP|mtu=1500|up=true|master=none
|
||||
LINK|name=br-f43db13d76c4|operstate=UP|mtu=1500|up=true|master=none
|
||||
LINK|name=veth8fecc8f|operstate=UP|mtu=1500|up=true|master=br-f43db13d76c4
|
||||
LINK|name=veth6ebe603|operstate=UP|mtu=1500|up=true|master=br-915a81681c3e
|
||||
LINK|name=veth94bb505|operstate=UP|mtu=1500|up=true|master=br-a4e31561a8d5
|
||||
LINK|name=veth257d0f3|operstate=UP|mtu=1500|up=true|master=br-915a81681c3e
|
||||
LINK|name=vethf307a2b|operstate=UP|mtu=1500|up=true|master=br-5f66e1018bdd
|
||||
LINK|name=veth43ed72a|operstate=UP|mtu=1500|up=true|master=br-8122fec51f39
|
||||
LINK|name=vetha71fd0e|operstate=UP|mtu=1500|up=true|master=br-5f66e1018bdd
|
||||
LINK|name=veth52dc7f8|operstate=UP|mtu=1500|up=true|master=br-915a81681c3e
|
||||
IP_ADDR_JSON_RC=0
|
||||
ADDR_COUNT|name=lo|v4=1|v6=1
|
||||
ADDR_COUNT|name=eth0|v4=1|v6=1
|
||||
ADDR_COUNT|name=wg-taftauto|v4=1|v6=0
|
||||
ADDR_COUNT|name=wg-edge01|v4=1|v6=0
|
||||
ADDR_COUNT|name=br-4d894f9e427b|v4=1|v6=0
|
||||
ADDR_COUNT|name=br-5f66e1018bdd|v4=1|v6=1
|
||||
ADDR_COUNT|name=br-8122fec51f39|v4=1|v6=1
|
||||
ADDR_COUNT|name=docker0|v4=1|v6=1
|
||||
ADDR_COUNT|name=br-915a81681c3e|v4=1|v6=1
|
||||
ADDR_COUNT|name=br-a4e31561a8d5|v4=1|v6=1
|
||||
ADDR_COUNT|name=br-d41b3e918fbc|v4=1|v6=1
|
||||
ADDR_COUNT|name=br-f43db13d76c4|v4=1|v6=1
|
||||
ADDR_COUNT|name=veth8fecc8f|v4=0|v6=1
|
||||
ADDR_COUNT|name=veth6ebe603|v4=0|v6=1
|
||||
ADDR_COUNT|name=veth94bb505|v4=0|v6=1
|
||||
ADDR_COUNT|name=veth257d0f3|v4=0|v6=1
|
||||
ADDR_COUNT|name=vethf307a2b|v4=0|v6=1
|
||||
ADDR_COUNT|name=veth43ed72a|v4=0|v6=1
|
||||
ADDR_COUNT|name=vetha71fd0e|v4=0|v6=1
|
||||
ADDR_COUNT|name=veth52dc7f8|v4=0|v6=1
|
||||
IP_ROUTE_RC=0
|
||||
IP_ROUTE_LINE_COUNT=110
|
||||
ROUTE|default dev wg-edge01 table 17777 scope link
|
||||
ROUTE|default dev wt0 table 7120
|
||||
ROUTE|default via [ADDR] dev eth0 proto static
|
||||
ROUTE|[ADDR]/24 dev wg-taftauto proto kernel scope link src [ADDR]
|
||||
ROUTE|[ADDR]/30 dev wg-edge01 proto kernel scope link src [ADDR]
|
||||
ROUTE|[ADDR]/28 dev br-915a81681c3e proto kernel scope link src [ADDR]
|
||||
ROUTE|[ADDR]/16 dev wt0 proto kernel scope link src [ADDR]
|
||||
ROUTE|[ADDR]/16 dev docker0 proto kernel scope link src [ADDR] linkdown
|
||||
ROUTE|[ADDR]/16 dev br-4d894f9e427b proto kernel scope link src [ADDR] linkdown
|
||||
ROUTE|[ADDR]/16 dev br-d41b3e918fbc proto kernel scope link src [ADDR]
|
||||
ROUTE|[ADDR]/16 dev br-a4e31561a8d5 proto kernel scope link src [ADDR]
|
||||
ROUTE|[ADDR] via [ADDR] dev eth0 src [ADDR]
|
||||
ROUTE|[ADDR]/24 dev eth0 proto kernel scope link src [ADDR]
|
||||
ROUTE|[ADDR]/20 dev br-f43db13d76c4 proto kernel scope link src [ADDR]
|
||||
ROUTE|[ADDR]/20 dev br-8122fec51f39 proto kernel scope link src [ADDR]
|
||||
ROUTE|[ADDR]/20 dev br-5f66e1018bdd proto kernel scope link src [ADDR]
|
||||
ROUTE|local [ADDR] dev wg-taftauto table local proto kernel scope host src [ADDR]
|
||||
ROUTE|broadcast [ADDR] dev wg-taftauto table local proto kernel scope link src [ADDR]
|
||||
ROUTE|local [ADDR] dev wg-edge01 table local proto kernel scope host src [ADDR]
|
||||
ROUTE|broadcast [ADDR] dev wg-edge01 table local proto kernel scope link src [ADDR]
|
||||
ROUTE|local [ADDR] dev br-915a81681c3e table local proto kernel scope host src [ADDR]
|
||||
ROUTE|broadcast [ADDR] dev br-915a81681c3e table local proto kernel scope link src [ADDR]
|
||||
ROUTE|local [ADDR] dev wt0 table local proto kernel scope host src [ADDR]
|
||||
ROUTE|broadcast [ADDR] dev wt0 table local proto kernel scope link src [ADDR]
|
||||
ROUTE|local [ADDR]/8 dev lo table local proto kernel scope host src [ADDR]
|
||||
ROUTE|local [ADDR] dev lo table local proto kernel scope host src [ADDR]
|
||||
ROUTE|broadcast [ADDR] dev lo table local proto kernel scope link src [ADDR]
|
||||
ROUTE|local [ADDR] dev docker0 table local proto kernel scope host src [ADDR]
|
||||
ROUTE|broadcast [ADDR] dev docker0 table local proto kernel scope link src [ADDR] linkdown
|
||||
ROUTE|local [ADDR] dev br-4d894f9e427b table local proto kernel scope host src [ADDR]
|
||||
ROUTE|broadcast [ADDR] dev br-4d894f9e427b table local proto kernel scope link src [ADDR] linkdown
|
||||
ROUTE|local [ADDR] dev br-d41b3e918fbc table local proto kernel scope host src [ADDR]
|
||||
ROUTE|broadcast [ADDR] dev br-d41b3e918fbc table local proto kernel scope link src [ADDR]
|
||||
ROUTE|local [ADDR] dev br-a4e31561a8d5 table local proto kernel scope host src [ADDR]
|
||||
ROUTE|broadcast [ADDR] dev br-a4e31561a8d5 table local proto kernel scope link src [ADDR]
|
||||
ROUTE|local [ADDR] dev eth0 table local proto kernel scope host src [ADDR]
|
||||
ROUTE|broadcast [ADDR] dev eth0 table local proto kernel scope link src [ADDR]
|
||||
ROUTE|local [ADDR] dev br-f43db13d76c4 table local proto kernel scope host src [ADDR]
|
||||
ROUTE|broadcast [ADDR] dev br-f43db13d76c4 table local proto kernel scope link src [ADDR]
|
||||
ROUTE|local [ADDR] dev br-8122fec51f39 table local proto kernel scope host src [ADDR]
|
||||
ROUTE|broadcast [ADDR] dev br-8122fec51f39 table local proto kernel scope link src [ADDR]
|
||||
ROUTE|local [ADDR] dev br-5f66e1018bdd table local proto kernel scope host src [ADDR]
|
||||
ROUTE|broadcast [ADDR] dev br-5f66e1018bdd table local proto kernel scope link src [ADDR]
|
||||
ROUTE|default dev wt0 table 7120 metric 1024 pref medium
|
||||
ROUTE|[IPV6]/64 dev wt0 proto kernel metric 256 pref medium
|
||||
ROUTE|[IPV6]/64 dev eth0 proto kernel metric 256 pref medium
|
||||
ROUTE|[IPV6]/64 dev veth8fecc8f proto kernel metric 256 pref medium
|
||||
ROUTE|[IPV6]/64 dev br-f43db13d76c4 proto kernel metric 256 pref medium
|
||||
ROUTE|[IPV6]/64 dev veth6ebe603 proto kernel metric 256 pref medium
|
||||
ROUTE|[IPV6]/64 dev br-915a81681c3e proto kernel metric 256 pref medium
|
||||
ROUTE|[IPV6]/64 dev veth94bb505 proto kernel metric 256 pref medium
|
||||
ROUTE|[IPV6]/64 dev br-a4e31561a8d5 proto kernel metric 256 pref medium
|
||||
ROUTE|[IPV6]/64 dev veth43ed72a proto kernel metric 256 pref medium
|
||||
ROUTE|[IPV6]/64 dev br-8122fec51f39 proto kernel metric 256 pref medium
|
||||
ROUTE|[IPV6]/64 dev veth257d0f3 proto kernel metric 256 pref medium
|
||||
ROUTE|[IPV6]/64 dev vethf307a2b proto kernel metric 256 pref medium
|
||||
ROUTE|[IPV6]/64 dev br-5f66e1018bdd proto kernel metric 256 pref medium
|
||||
ROUTE|[IPV6]/64 dev vetha71fd0e proto kernel metric 256 pref medium
|
||||
ROUTE|[IPV6]/64 dev veth52dc7f8 proto kernel metric 256 pref medium
|
||||
ROUTE|[IPV6]/64 dev vethb6a364a proto kernel metric 256 pref medium
|
||||
ROUTE|[IPV6]/64 dev veth98c9c14 proto kernel metric 256 pref medium
|
||||
ROUTE|[IPV6]/64 dev veth54c3c78 proto kernel metric 256 pref medium
|
||||
ROUTE|[IPV6]/64 dev veth3eda058 proto kernel metric 256 pref medium
|
||||
ROUTE|[IPV6]/64 dev br-d41b3e918fbc proto kernel metric 256 pref medium
|
||||
ROUTE|[IPV6]/64 dev docker0 proto kernel metric 256 linkdown pref medium
|
||||
ROUTE|local [IPV6] dev lo table local proto kernel metric 0 pref medium
|
||||
ROUTE|local [IPV6] dev wt0 table local proto kernel metric 0 pref medium
|
||||
ROUTE|local [IPV6] dev veth43ed72a table local proto kernel metric 0 pref medium
|
||||
ROUTE|local [IPV6] dev br-915a81681c3e table local proto kernel metric 0 pref medium
|
||||
ROUTE|local [IPV6] dev veth8fecc8f table local proto kernel metric 0 pref medium
|
||||
ROUTE|local [IPV6] dev veth257d0f3 table local proto kernel metric 0 pref medium
|
||||
ROUTE|local [IPV6] dev vethb6a364a table local proto kernel metric 0 pref medium
|
||||
ROUTE|local [IPV6] dev br-f43db13d76c4 table local proto kernel metric 0 pref medium
|
||||
ROUTE|local [IPV6] dev vethf307a2b table local proto kernel metric 0 pref medium
|
||||
ROUTE|local [IPV6] dev veth94bb505 table local proto kernel metric 0 pref medium
|
||||
ROUTE|local [IPV6] dev veth98c9c14 table local proto kernel metric 0 pref medium
|
||||
ROUTE|local [IPV6] dev br-8122fec51f39 table local proto kernel metric 0 pref medium
|
||||
ROUTE|local [IPV6] dev br-a4e31561a8d5 table local proto kernel metric 0 pref medium
|
||||
ROUTE|local [IPV6] dev br-d41b3e918fbc table local proto kernel metric 0 pref medium
|
||||
ROUTE|local [IPV6] dev veth3eda058 table local proto kernel metric 0 pref medium
|
||||
ROUTE|local [IPV6] dev eth0 table local proto kernel metric 0 pref medium
|
||||
ROUTE|local [IPV6] dev vetha71fd0e table local proto kernel metric 0 pref medium
|
||||
ROUTE|local [IPV6] dev veth54c3c78 table local proto kernel metric 0 pref medium
|
||||
ROUTE|local [IPV6] dev veth52dc7f8 table local proto kernel metric 0 pref medium
|
||||
ROUTE|local [IPV6] dev br-5f66e1018bdd table local proto kernel metric 0 pref medium
|
||||
ROUTE|local [IPV6] dev veth6ebe603 table local proto kernel metric 0 pref medium
|
||||
ROUTE|local [IPV6] dev docker0 table local proto kernel metric 0 pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev eth0 table local proto kernel metric 256 pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev wg-edge01 table local proto kernel metric 256 pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev wg-taftauto table local proto kernel metric 256 pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev veth8fecc8f table local proto kernel metric 256 pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev br-f43db13d76c4 table local proto kernel metric 256 pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev veth6ebe603 table local proto kernel metric 256 pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev br-915a81681c3e table local proto kernel metric 256 pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev veth94bb505 table local proto kernel metric 256 pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev br-a4e31561a8d5 table local proto kernel metric 256 pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev veth43ed72a table local proto kernel metric 256 pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev br-8122fec51f39 table local proto kernel metric 256 pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev veth257d0f3 table local proto kernel metric 256 pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev vethf307a2b table local proto kernel metric 256 pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev br-5f66e1018bdd table local proto kernel metric 256 pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev vetha71fd0e table local proto kernel metric 256 pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev veth52dc7f8 table local proto kernel metric 256 pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev vethb6a364a table local proto kernel metric 256 pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev veth98c9c14 table local proto kernel metric 256 pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev veth54c3c78 table local proto kernel metric 256 pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev veth3eda058 table local proto kernel metric 256 pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev br-d41b3e918fbc table local proto kernel metric 256 pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev docker0 table local proto kernel metric 256 linkdown pref medium
|
||||
ROUTE|multicast [IPV6]/8 dev wt0 table local proto kernel metric 256 pref medium
|
||||
IPV4_DEFAULT_ROUTE_COUNT=4
|
||||
DEFAULT4|dev=wg-edge01|gateway_sha256=NA|metric=NA
|
||||
DEFAULT4|dev=wt0|gateway_sha256=NA|metric=NA
|
||||
DEFAULT4|dev=eth0|gateway_sha256=4f9da1283166a1e9f4e6bc7dd240c76aef85772177f717f92abb6e8e2bb8de90|metric=NA
|
||||
DEFAULT4|dev=wt0|gateway_sha256=NA|metric=1024
|
||||
IP_RULE_RC=0
|
||||
RULE|0: from all lookup local
|
||||
RULE|100: from [ADDR] lookup main
|
||||
RULE|101: from [ADDR] lookup 17777
|
||||
RULE|105: from all lookup main suppress_prefixlength 0
|
||||
RULE|110: not from all fwmark 0x1bd00 lookup 7120
|
||||
RULE|32766: from all lookup main
|
||||
RULE|32767: from all lookup default
|
||||
IPV6_ROUTE_RC=0
|
||||
IPV6_DEFAULT_ROUTE_COUNT=1
|
||||
DEFAULT6|default dev wt0 table 7120 metric 1024 pref medium
|
||||
ROUTE_GET|family=v4|rc=0|out_sha256=b1bac959b7f164a915a16d2128198deec0f9d739449bd8398fdf4fa4017159fa|stderr_sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
|
||||
ROUTE_GET_LINE|family=v4|[ADDR] dev wt0 table 7120 src [ADDR] uid 0
|
||||
ROUTE_GET|family=v6|rc=0|out_sha256=72b49fa2af3fc9123bcb7f2e4b98dfcbff4c61fd8bf4a3d021bc409d158c39bd|stderr_sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
|
||||
ROUTE_GET_LINE|family=v6|[IPV6] from [IPV6] dev wt0 table 7120 src [IPV6] metric 1024 pref medium
|
||||
NEIGH_RC=0
|
||||
NEIGH_COUNT=26
|
||||
NEIGH_STATE|state=DELAY|count=1
|
||||
NEIGH_STATE|state=FAILED|count=3
|
||||
NEIGH_STATE|state=REACHABLE|count=9
|
||||
NEIGH_STATE|state=STALE|count=13
|
||||
RESOLV_EXISTS=true
|
||||
RESOLV_LINE_COUNT=23
|
||||
RESOLV_NAMESERVER_COUNT=1
|
||||
RESOLV_SEARCH_COUNT=1
|
||||
NETCFG_FILE_COUNT=1
|
||||
NETCFG|base=50-cloud-init.yaml|path_sha256=b9bc0da3b7c93f972715f97a7a4588b39d3b28d576358a5dafecc1c8a8e2958f|bytes=350|sha256=c23b699ba11e3c57f071346bc1e29cb33dd6de57b319452daed9145fd1b0ba66
|
||||
NETCFG_LINE|base=50-cloud-init.yaml|line=1|text=network:
|
||||
NETCFG_LINE|base=50-cloud-init.yaml|line=5|text= match:
|
||||
NETCFG_LINE|base=50-cloud-init.yaml|line=15|text= set-name: "eth0"
|
||||
NETCFG_LINE|base=50-cloud-init.yaml|line=16|text= routes:
|
||||
EDGE_EPOCH=1790206874
|
||||
SERVICE|name=netbird.service|active=active
|
||||
SERVICE|name=netbird.service|enabled=enabled
|
||||
SERVICE|name=systemd-networkd.service|active=active
|
||||
SERVICE|name=systemd-networkd.service|enabled=enabled
|
||||
NETBIRD_VERSION_RC=0
|
||||
NETBIRD_VERSION=0.73.2
|
||||
NETBIRD_STATUS_DETAIL_RC=0
|
||||
NETBIRD_STATUS_DETAIL_BYTES=8694
|
||||
NETBIRD_STATUS_DETAIL_SHA256=cddf4549ddc3c862d7a7aa04645a745b06031ada6ba41ad0330c68b1d42ce0d9
|
||||
NETBIRD_STATUS_INTERESTING_COUNT=49
|
||||
NETBIRD_STATUS| Status: Connecting
|
||||
NETBIRD_STATUS| Relay server address:
|
||||
NETBIRD_STATUS| Networks: -
|
||||
NETBIRD_STATUS| Status: Connecting
|
||||
NETBIRD_STATUS| Relay server address:
|
||||
NETBIRD_STATUS| Networks: -
|
||||
NETBIRD_STATUS| Status: Connecting
|
||||
NETBIRD_STATUS| Relay server address:
|
||||
NETBIRD_STATUS| Networks: -
|
||||
NETBIRD_STATUS| Status: Connecting
|
||||
NETBIRD_STATUS| Relay server address:
|
||||
NETBIRD_STATUS| Networks: -
|
||||
NETBIRD_STATUS| Status: Connecting
|
||||
NETBIRD_STATUS| Relay server address:
|
||||
NETBIRD_STATUS| Networks: -
|
||||
NETBIRD_STATUS| Status: Connecting
|
||||
NETBIRD_STATUS| Relay server address:
|
||||
NETBIRD_STATUS| Networks: -
|
||||
NETBIRD_STATUS| Status: Connecting
|
||||
NETBIRD_STATUS| Relay server address:
|
||||
NETBIRD_STATUS| Networks: -
|
||||
NETBIRD_STATUS| Status: Connecting
|
||||
NETBIRD_STATUS| Relay server address:
|
||||
NETBIRD_STATUS| Networks: -
|
||||
NETBIRD_STATUS| Status: Connecting
|
||||
NETBIRD_STATUS| Relay server address:
|
||||
NETBIRD_STATUS| Networks: -
|
||||
NETBIRD_STATUS| Status: Connecting
|
||||
NETBIRD_STATUS| Relay server address:
|
||||
NETBIRD_STATUS| Networks: -
|
||||
NETBIRD_STATUS| Status: Connecting
|
||||
NETBIRD_STATUS| Relay server address:
|
||||
NETBIRD_STATUS| Networks: -
|
||||
NETBIRD_STATUS| Message: Default route added
|
||||
NETBIRD_STATUS| Message: Default route disconnected due to peer unreachability
|
||||
NETBIRD_STATUS| Message: Default route disconnected due to peer unreachability
|
||||
NETBIRD_STATUS| Message: Network map updated
|
||||
NETBIRD_STATUS| Message: Default route added
|
||||
NETBIRD_STATUS| Message: Default route added
|
||||
NETBIRD_STATUS| Message: Default route added
|
||||
NETBIRD_STATUS| Message: Default route added
|
||||
NETBIRD_STATUS| Message: Default route disconnected due to peer unreachability
|
||||
NETBIRD_STATUS| Message: Default route disconnected due to peer unreachability
|
||||
NETBIRD_STATUS|Management: Disconnected, reason: rpc error: code = Unavailable desc = error reading from server: EOF
|
||||
NETBIRD_STATUS|Signal: Disconnected, reason: rpc error: code = Unavailable desc = error reading from server: EOF
|
||||
NETBIRD_STATUS|Relays:
|
||||
NETBIRD_STATUS|FQDN: edge-vm.netbird.selfhosted
|
||||
NETBIRD_STATUS|Networks: -
|
||||
NETBIRD_STATUS|Peers count: 0/11 Connected
|
||||
PEER_BLOCK_COUNT=1
|
||||
PEER|fqdn=edge-vm.netbird.selfhosted|status=UNKNOWN|relay_present=false|networks=-
|
||||
MOLDOVA_RELAY_PEER_PRESENT=false
|
||||
MOLDOVA_RELAY_PEER_STATUS=ABSENT
|
||||
NETBIRD_CMD|name=ROUTES_LIST|rc=0|bytes=178|sha256=449171b786a12843333f14fc8e8eb1160a3077a1ff08e06cabd0dd4e90eb3a4a|stderr_sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
|
||||
NETBIRD_CMD_LINE_COUNT|name=ROUTES_LIST|count=7
|
||||
NETBIRD_ROUTES_LIST|Available Networks:
|
||||
NETBIRD_ROUTES_LIST| - ID: edge-exit-relay-moldova
|
||||
NETBIRD_ROUTES_LIST| Network: [ADDR], [IPV6]
|
||||
NETBIRD_ROUTES_LIST| Status: Not Selected
|
||||
NETBIRD_ROUTES_LIST| - ID: internet-v4
|
||||
NETBIRD_ROUTES_LIST| Network: [ADDR], [IPV6]
|
||||
NETBIRD_ROUTES_LIST| Status: Selected
|
||||
NETBIRD_CMD|name=NETWORKS_LIST|rc=0|bytes=178|sha256=449171b786a12843333f14fc8e8eb1160a3077a1ff08e06cabd0dd4e90eb3a4a|stderr_sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
|
||||
NETBIRD_CMD_LINE_COUNT|name=NETWORKS_LIST|count=7
|
||||
NETBIRD_NETWORKS_LIST|Available Networks:
|
||||
NETBIRD_NETWORKS_LIST| - ID: edge-exit-relay-moldova
|
||||
NETBIRD_NETWORKS_LIST| Network: [ADDR], [IPV6]
|
||||
NETBIRD_NETWORKS_LIST| Status: Not Selected
|
||||
NETBIRD_NETWORKS_LIST| - ID: internet-v4
|
||||
NETBIRD_NETWORKS_LIST| Network: [ADDR], [IPV6]
|
||||
NETBIRD_NETWORKS_LIST| Status: Selected
|
||||
NETBIRD_STATUS_JSON_RC=0
|
||||
NETBIRD_STATUS_JSON_BYTES=10251
|
||||
NETBIRD_STATUS_JSON_SHA256=ae997e3a2b072bf7da4afa5274bd86824449644b8f17ba6d7439038bf6b9f461
|
||||
NETBIRD_STATUS_JSON_PARSE=true
|
||||
NETBIRD_STATUS_JSON_TOPKEYS=cliVersion,daemonStatus,daemonVersion,dnsServers,events,forwardingRules,fqdn,lazyConnectionEnabled,management,netbirdIp,netbirdIpv6,networks,peers,profileName,publicKey,quantumResistance,quantumResistancePermissive,relays,signal,sshServer,usesKernelInterface,wireguardPort
|
||||
NETBIRD_STATUS_JSON_SELECTED_COUNT=80
|
||||
NETBIRD_JSON|path_sha256=679566c8dc90684de679e276220746522687f2d7e9b4537dc8a97954f01290be|value=11
|
||||
NETBIRD_JSON|path_sha256=4a9cb2135f8edb9ab83136dbb735b5de79ae1ee18f725d7fbeba840ba962b603|value=0
|
||||
NETBIRD_JSON|path_sha256=cad0d10b6d77e2f12265ce446f70de2d90dbb61594f248b1efe6093a2b6b0067|value=pve02.netbird.selfhosted
|
||||
NETBIRD_JSON|path_sha256=f75b6abe4f98877764a72f45a15e7ec41a0b169b2eee375acec84e394478d60e|value=[ADDR]
|
||||
NETBIRD_JSON|path_sha256=76fb0e4770bdf00275de5dd40053bf513e6d6c0e8441df7a028f011f95aad54f|value=[IPV6]
|
||||
NETBIRD_JSON|path_sha256=d07bb3a53b362c40c10b90f846a9a5c169dc3a3f8584d700b33073d0990ba584|value=ioHRHMCrw1revg7p7drr2MZxudHpqfhn9GIHvuDNHBs=
|
||||
NETBIRD_JSON|path_sha256=e63c7de2f5ff704abd4049e74419968caa91ba6af64e36d2d9b9cd18db0748a6|value=Connecting
|
||||
NETBIRD_JSON|path_sha256=f057c793dd182d8eca23f5ef877f11de7c3bd44650bdeb893632a031a21f721d|value=2026-09-23T[IPV6].773489895+03:00
|
||||
NETBIRD_JSON|path_sha256=b8bf2a53c80892125f8820159e7c484dde75b50e5bba990cc4ea4278ad7cd238|value=-
|
||||
NETBIRD_JSON|path_sha256=bd4499df433a7b6583b266fbdd9b11f83f8ed22ab44cf210b2d9db997c76f18f|value=
|
||||
NETBIRD_JSON|path_sha256=be0b2ee8224c7a323fb5427ba6db6ad365f9290b11ebcc07f0ffa3b6088d1a87|value=
|
||||
NETBIRD_JSON|path_sha256=07acc52aa801d037f8fbecce724ac218dc89ce7597edeffd9d30b326d75d49b7|value=
|
||||
NETBIRD_JSON|path_sha256=afa1372736f55a5779c7d9b1d916a27c327aa40b00a81ae75b3511fa8f270456|value=
|
||||
NETBIRD_JSON|path_sha256=d1d68386368a1f8b95ab0817794a18a0eeab5255e339d4a371a8667395ab2f09|value=
|
||||
NETBIRD_JSON|path_sha256=781f25c5890ea6c1a646485d2711cf96a82a829d2a6d01e500b1215e8c51656c|value=0001-01-01T[IPV6]Z
|
||||
NETBIRD_JSON|path_sha256=ef2843e18eb51eb8a6d74f8cc0773632e95bcaae62570e5a96dd27427104d4c3|value=0
|
||||
NETBIRD_JSON|path_sha256=3a1ab30635a45faba4326dd6ed27ded4b7fb7529656b5b0c42029ab40493d3b2|value=0
|
||||
NETBIRD_JSON|path_sha256=c9cc0fdec9098ed03d1230bcb5c7dac031d4b3ab895548da4ef396e3303e7c77|value=0
|
||||
NETBIRD_JSON|path_sha256=3027543b3a52fc9ab1d65ccaa63d17a1ab8536d0629e3de5d7c93227e2009291|value=False
|
||||
NETBIRD_JSON|path_sha256=122cf1659db1689e087c83ced68fd32b7119c1636aa44e006960e1ba4e4ce07b|value=home-pc.netbird.selfhosted
|
||||
NETBIRD_JSON|path_sha256=d52f18655d3fb5ef4e8f22d1b4d435f303ef2defdc33e467f411a1ec5b9ef95a|value=[ADDR]
|
||||
NETBIRD_JSON|path_sha256=2ae7f128330461846d31320c153e9a8612b23b0001f0cb1e28efc33c85df27c1|value=[IPV6]
|
||||
NETBIRD_JSON|path_sha256=44a8ed4bf8cfa95e71c3052bd43ea5d26de58fb47d591cd1f4a4545f802ad1b4|value=CoTpTOUD2TU924swK54vv1yhdCKiMwc5sM8PJVRyWj8=
|
||||
NETBIRD_JSON|path_sha256=c69c0993da1766e8d8f49ccd153b4870cf333bb762ad2218a6c001f9cc1ba521|value=Connecting
|
||||
NETBIRD_JSON|path_sha256=11e14f24088beacadf53d5cf1cd9beddf3a2f1574f2b31f32a7ecccd00eddb8d|value=2026-09-23T[IPV6].774137117+03:00
|
||||
NETBIRD_JSON|path_sha256=e1a55aacc297978f57fc9fb790f82177999ff489404622f4d3061962c0a76cf2|value=-
|
||||
NETBIRD_JSON|path_sha256=0ddd1e8e2c6aefc684246a2e51f93ebf9791886dbc1086ed713f91a6f9397718|value=
|
||||
NETBIRD_JSON|path_sha256=0333fa50df80cbecd0631f6f0f2dd6d406dd5f4e3e429cfe66ac0544b451ba4c|value=
|
||||
NETBIRD_JSON|path_sha256=cec1e61e847d53ef4f33fd9eca376978e50206a642cd1b2b6181ef188c8e0844|value=
|
||||
NETBIRD_JSON|path_sha256=761a28061b3a04c3d7be5823550219f78ed87d7e81c4c9ffa94c59872a41953b|value=
|
||||
NETBIRD_JSON|path_sha256=bc331d12e1191062d924779e6f5769ab274d94220865891b9b769edab6ad276b|value=
|
||||
NETBIRD_JSON|path_sha256=6d8968d2cbabcf24551b8893595ad8df476f10cd64910c2f84a62c58cc140fe1|value=0001-01-01T[IPV6]Z
|
||||
NETBIRD_JSON|path_sha256=3b3fb571582c091a8085b19b5246712a9132df3e05990a80b8629565a3313ae2|value=0
|
||||
NETBIRD_JSON|path_sha256=ddc2824c4914d52159d2b343f1f9c4e6f5fd39925c73170b3586171e07fbcd48|value=0
|
||||
NETBIRD_JSON|path_sha256=0d08eb51a4f04271fadd217b55fef8b3e5b386f90115d406f815962b869032bc|value=0
|
||||
NETBIRD_JSON|path_sha256=c70c1aad1a4fa0dace291b8c1ee114080133c155936fc8965b7e1b89ca211b2c|value=False
|
||||
NETBIRD_JSON|path_sha256=e20ef6bfa0471853660cc087041f17e21701c3e62206df591f398cec5163a871|value=relay.netbird.selfhosted
|
||||
NETBIRD_JSON|path_sha256=78d21cd2a3d8144dc8823aad37ff45bfb834b459b2b658482c8003950e242200|value=[ADDR]
|
||||
NETBIRD_JSON|path_sha256=3ecb35313e1a6fba8f9b42bfe48100131a4d029004527e2ce33ff63809612714|value=[IPV6]
|
||||
NETBIRD_JSON|path_sha256=1c174bc37b1454099e90ecb1bacb58ab017f934bdd68f0332f82ac2ca6314148|value=fj5TW6oRrm5KdlrEQ/Zh/JFOO4DBNIIumt6TmR3FZyE=
|
||||
NETBIRD_JSON|path_sha256=95fb885d9385525e4cc6f6897ffef99d01a3f7f9611a37d227f1d5018a3c312b|value=Connecting
|
||||
NETBIRD_JSON|path_sha256=510a700e68196039deecbf5d8d190340ffb08ff54e8a25a7ed3a521d2c4a5eb5|value=2026-09-24T[IPV6].719543198+03:00
|
||||
NETBIRD_JSON|path_sha256=f958f470595344f2a6cc48739b150b3dc30732eb8b028d4faff2e4faf85e6551|value=-
|
||||
NETBIRD_JSON|path_sha256=252b97a875f0b6f5ab50234c4fea093b5372d85fca3bb78de69bf9abdc816cd5|value=
|
||||
NETBIRD_JSON|path_sha256=8eb7573ee53f2a59dfc1f6f829eebac96272ba79ac7f76805d44ab9cd2babefe|value=
|
||||
NETBIRD_JSON|path_sha256=c16f8ab867969c5cf4718228b7feffbf6ff7becd88e02ae6013b8d01abf7465f|value=
|
||||
NETBIRD_JSON|path_sha256=b0b66262576eb1e75c92a87110b042e64aba396c9cf05e40d7fec9b6f83307da|value=
|
||||
NETBIRD_JSON|path_sha256=59a4062f39a14e1de0533701b74181448788980044c07b6c7e1fd0f8a51b70c3|value=
|
||||
NETBIRD_JSON|path_sha256=bef2b4cb9ea3b2cc5db0e8997f2ef57f66b5726e718287379641000761c65db0|value=0001-01-01T[IPV6]Z
|
||||
NETBIRD_JSON|path_sha256=9edd4c7c8dfa8551da17377c5530dde537c2b09c460a7f5083ed3140fc37f21c|value=0
|
||||
NETBIRD_JSON|path_sha256=1fd9d7593f46418a9f4e3ea0aa849b22cd55ca7c05f141162905559c2130b8a3|value=0
|
||||
NETBIRD_JSON|path_sha256=b7f5bd55ef1c641d4f5fd4e63e808f6b6a7b21df21ee649999ebe1bc24941d94|value=58101043
|
||||
NETBIRD_JSON|path_sha256=ccaba428196ed6060b278353e1aa634d7fc031b418278e0d3fb531a4c395be07|value=False
|
||||
NETBIRD_JSON|path_sha256=e327bb74b0b2c68ca33d265c49965d756544f3a419b9b7c2bf94317f8b6c00a7|value=pve03.netbird.selfhosted
|
||||
NETBIRD_JSON|path_sha256=39be3ea04f55f6877974b0783ccf0526c09ab91a571aeedc295e99fc456f1b02|value=[ADDR]
|
||||
NETBIRD_JSON|path_sha256=3ce1c496bf32694f78c33b04a04d08f0aec302f035c5b51eca535d97f531909d|value=[IPV6]
|
||||
NETBIRD_JSON|path_sha256=ea1b727fc3e7fd7852615d5347e8639c91d58dd64f0975d02123d85154e345b5|value=oXaA1VeKq1d/v5F8w0v/7G1DFL0yJMmxdSk/4X9j2j4=
|
||||
NETBIRD_JSON|path_sha256=cb66d5a3abb053cb20d3481f9ff5c6bc81d9a7b407cb8b48f319c9e09bf669df|value=Connecting
|
||||
NETBIRD_JSON|path_sha256=67f3e52702b07e387176d5cbc95dbbcfdd1c23a91c159ba1c9507271d683b375|value=2026-09-23T[IPV6].773575258+03:00
|
||||
NETBIRD_JSON|path_sha256=fcaf0387b115f2bd09d147636cc83f2d1464425169cea63b0bfac79baddae46d|value=-
|
||||
NETBIRD_JSON|path_sha256=7916502a9bfe8bfc0841a05cd410fa0296c9ad05c4f9eb6e73743975c4c046c6|value=
|
||||
NETBIRD_JSON|path_sha256=fa221acaac543f1da5ba45d8a3772fb1872ef7b024b3895791124a932a9e6659|value=
|
||||
NETBIRD_JSON|path_sha256=55206b1db6dd3ea78bda14ee278ce18c91990a5855691c2c66a952eeea10afbf|value=
|
||||
NETBIRD_JSON|path_sha256=ca17871ab53271d5c93201e9f780b93d8aa4133cbc71d6e4613a558acf61c456|value=
|
||||
NETBIRD_JSON|path_sha256=4a151dffa29d0954648b340c5c1523e2f827ca346b1cc5d5c3b85dd510469dae|value=
|
||||
NETBIRD_JSON|path_sha256=59a4a688d03bb96865bceb126225323dc51b98808e1c4b6d3c5b43180e39f576|value=0001-01-01T[IPV6]Z
|
||||
NETBIRD_JSON|path_sha256=6ff003ffae7699bd7b10e9ac37de4bf7b3995546077ff7713b66270b5ffbc757|value=0
|
||||
NETBIRD_JSON|path_sha256=98b109bcced49829ec0610819e1d4cd6d9bb95eba60b71d68e3eea32fda53101|value=0
|
||||
NETBIRD_JSON|path_sha256=20d283da05f088b99e0d4d4ea5533c8ce3589cf6550fb1155b0b3bace7eb2948|value=0
|
||||
NETBIRD_JSON|path_sha256=718a3fa7ce808de23a8f393434e4f96d89551ed4a62fcaf7201acad73212e7c3|value=False
|
||||
NETBIRD_JSON|path_sha256=bfe94ea4998d1497ead578c9d2351dd86499d715e7a5ae2c251a48ab175e7597|value=desktop-moy.netbird.selfhosted
|
||||
NETBIRD_JSON|path_sha256=10615ff34b6e87b5fc0e348720aa6b4cf7e79505d5399b7f082c6062dfc580f7|value=[ADDR]
|
||||
NETBIRD_JSON|path_sha256=0cfd2e29f0be9e305d2a1869bae732cc2fa4e0f543d06e5ccfd86e28def6b586|value=[IPV6]
|
||||
NETBIRD_JSON|path_sha256=83b78e00feeb099510b8ff7008845df75bc26d617d6d0011e01e62d6da957fca|value=E6+z+dlShOTEO+JOFoHKGcVHqnAcLZGz/Q8i9VAh5Go=
|
||||
NETBIRD_JSON|path_sha256=f60a499031d0775f574a7541a318343ec232d9058df51fb122d90786e7e4d835|value=Connecting
|
||||
NETBIRD_JSON|path_sha256=22c93528375c70c03debe2e7dbbba8b63205daedd81b5785c90903b48729e470|value=2026-09-24T[IPV6].926485532+03:00
|
||||
NETBIRD_JSON|path_sha256=0f1f1de24e138953d23d453ca5c2107709abce3a66dc83d86590db5a5b2106bf|value=-
|
||||
NETBIRD_JSON|path_sha256=bbb7054e5bc8316d34a6361014fce93781407132b089ac8c0227a4e73681f720|value=
|
||||
NETBIRD_JSON|path_sha256=2c7753650b2104d256bbab68e5dffe644077e34a60fbef115b13da287c2c458b|value=
|
||||
NETBIRD_JSON|path_sha256=3f4f797eb572f9538ea32803fc33e3e4484dc6539739a550cf3d85b3a9645eb4|value=
|
||||
ROUTING_VIEW|name=RULE4|rc=0|lines=7|sha256=1b58f518e6616a36df39ac0ccaf9ece7cb2b39d9f4b226d75a17839d5e0373ad
|
||||
ROUTING_RULE4|0: from all lookup local
|
||||
ROUTING_RULE4|100: from [ADDR] lookup main
|
||||
ROUTING_RULE4|101: from [ADDR] lookup 17777
|
||||
ROUTING_RULE4|105: from all lookup main suppress_prefixlength 0
|
||||
ROUTING_RULE4|110: not from all fwmark 0x1bd00 lookup 7120
|
||||
ROUTING_RULE4|32766: from all lookup main
|
||||
ROUTING_RULE4|32767: from all lookup default
|
||||
ROUTING_VIEW|name=RULE6|rc=0|lines=4|sha256=084928feb354be1f5bc19a4e726f8633720b2d0f1c47ae3240f7839b2a369b19
|
||||
ROUTING_RULE6|0: from all lookup local
|
||||
ROUTING_RULE6|105: from all lookup main suppress_prefixlength 0
|
||||
ROUTING_RULE6|110: not from all fwmark 0x1bd00 lookup 7120
|
||||
ROUTING_RULE6|32766: from all lookup main
|
||||
ROUTING_VIEW|name=TABLE7120_4|rc=0|lines=1|sha256=47caf134646621d5b98f8b57df342b12d9ee4d1934eae893f5de787744ee72e4
|
||||
ROUTING_TABLE7120_4|default dev wt0
|
||||
ROUTING_VIEW|name=TABLE7120_6|rc=0|lines=1|sha256=2a5ee430739c900b7bed73ca983a83e00a763cde6cc22d9f34bf5aaba9257dc3
|
||||
ROUTING_TABLE7120_6|default dev wt0 metric 1024 pref medium
|
||||
WT0_LINK_RC=0
|
||||
WT0_OPERSTATE=UNKNOWN
|
||||
WT0_MTU=1280
|
||||
WT0_FLAGS=POINTOPOINT,NOARP,UP,LOWER_UP
|
||||
NFT_RC=0
|
||||
NFT_LINE_COUNT=333
|
||||
NFT_RELEVANT_COUNT=92
|
||||
NFT| chain FORWARD {
|
||||
NFT| type filter hook forward priority filter; policy accept;
|
||||
NFT| counter packets 4611557 bytes 828408916 jump DOCKER-FORWARD
|
||||
NFT| ip daddr [ADDR] iifname != "br-d41b3e918fbc" oifname "br-d41b3e918fbc" tcp dport 8080 counter packets 0 bytes 0 accept
|
||||
NFT| ip daddr [ADDR] iifname != "br-5f66e1018bdd" oifname "br-5f66e1018bdd" tcp dport 3100 counter packets 0 bytes 0 accept
|
||||
NFT| ip daddr [ADDR] iifname != "br-5f66e1018bdd" oifname "br-5f66e1018bdd" tcp dport 12345 counter packets 0 bytes 0 accept
|
||||
NFT| ip daddr [ADDR] iifname != "br-a4e31561a8d5" oifname "br-a4e31561a8d5" tcp dport 8080 counter packets 0 bytes 0 accept
|
||||
NFT| ip daddr [ADDR] iifname != "br-a4e31561a8d5" oifname "br-a4e31561a8d5" tcp dport 7422 counter packets 0 bytes 0 accept
|
||||
NFT| ip daddr [ADDR] iifname != "br-f43db13d76c4" oifname "br-f43db13d76c4" tcp dport 8080 counter packets 0 bytes 0 accept
|
||||
NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" oifname "br-915a81681c3e" tcp dport 2375 counter packets 0 bytes 0 accept
|
||||
NFT| iifname != "br-4d894f9e427b" oifname "br-4d894f9e427b" counter packets 0 bytes 0 drop
|
||||
NFT| iifname != "br-5f66e1018bdd" oifname "br-5f66e1018bdd" counter packets 0 bytes 0 drop
|
||||
NFT| iifname != "br-8122fec51f39" oifname "br-8122fec51f39" counter packets 0 bytes 0 drop
|
||||
NFT| iifname != "br-915a81681c3e" oifname "br-915a81681c3e" counter packets 0 bytes 0 drop
|
||||
NFT| iifname != "br-a4e31561a8d5" oifname "br-a4e31561a8d5" counter packets 0 bytes 0 drop
|
||||
NFT| iifname != "br-d41b3e918fbc" oifname "br-d41b3e918fbc" counter packets 0 bytes 0 drop
|
||||
NFT| iifname != "br-f43db13d76c4" oifname "br-f43db13d76c4" counter packets 0 bytes 0 drop
|
||||
NFT| iifname != "docker0" oifname "docker0" counter packets 0 bytes 0 drop
|
||||
NFT| chain DOCKER-FORWARD {
|
||||
NFT| type filter hook input priority filter; policy accept;
|
||||
NFT| iifname != "lo" tcp dport 81 counter packets 0 bytes 0 drop
|
||||
NFT| ip saddr [ADDR]/16 iifname "wt0" ip protocol tcp tcp dport { 80, 443 } counter packets 3302601 bytes 531568845 accept
|
||||
NFT| type nat hook postrouting priority srcnat; policy accept;
|
||||
NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" tcp dport 2375 counter packets 0 bytes 0 dnat to [ADDR]:2375
|
||||
NFT| ip daddr [ADDR] iifname != "br-f43db13d76c4" tcp dport 8081 counter packets 0 bytes 0 dnat to [ADDR]:8080
|
||||
NFT| ip daddr [ADDR] iifname != "br-a4e31561a8d5" tcp dport 7422 counter packets 0 bytes 0 dnat to [ADDR]:7422
|
||||
NFT| ip daddr [ADDR] iifname != "br-a4e31561a8d5" tcp dport 8088 counter packets 0 bytes 0 dnat to [ADDR]:8080
|
||||
NFT| ip daddr [ADDR] iifname != "br-5f66e1018bdd" tcp dport 12345 counter packets 0 bytes 0 dnat to [ADDR]:12345
|
||||
NFT| ip daddr [ADDR] iifname != "br-5f66e1018bdd" tcp dport 3100 counter packets 0 bytes 0 dnat to [ADDR]:3100
|
||||
NFT| ip daddr [ADDR] iifname != "br-d41b3e918fbc" tcp dport 9999 counter packets 0 bytes 0 dnat to [ADDR]:8080
|
||||
NFT| type nat hook prerouting priority dstnat; policy accept;
|
||||
NFT| chain OUTPUT {
|
||||
NFT| type nat hook output priority dstnat; policy accept;
|
||||
NFT| type nat hook prerouting priority dstnat; policy accept;
|
||||
NFT| iifname "wg-edge01" ip saddr [ADDR] ip daddr [ADDR] tcp dport { 3478, 3479, 5000, 5222, 5269, 5349, 5350 } dnat to [ADDR]
|
||||
NFT| type nat hook postrouting priority srcnat; policy accept;
|
||||
NFT| oifname "eth0" ip daddr [ADDR] tcp dport { 3478, 3479, 5000, 5222, 5269, 5349, 5350 } snat to [ADDR]
|
||||
NFT| type nat hook prerouting priority dstnat; policy accept;
|
||||
NFT| chain OUTPUT {
|
||||
NFT| type nat hook output priority dstnat; policy accept;
|
||||
NFT| chain DOCKER-FORWARD {
|
||||
NFT| chain FORWARD {
|
||||
NFT| type filter hook forward priority filter; policy accept;
|
||||
NFT| counter packets 0 bytes 0 jump DOCKER-FORWARD
|
||||
NFT| type filter hook input priority filter; policy accept;
|
||||
NFT| iifname != "lo" tcp dport 81 counter packets 0 bytes 0 drop
|
||||
NFT| type filter hook prerouting priority raw; policy accept;
|
||||
NFT| ip daddr [ADDR] iifname != "br-f43db13d76c4" counter packets 0 bytes 0 drop
|
||||
NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" counter packets 0 bytes 0 drop
|
||||
NFT| ip daddr [ADDR] iifname != "br-a4e31561a8d5" counter packets 0 bytes 0 drop
|
||||
NFT| ip daddr [ADDR] iifname != "br-8122fec51f39" counter packets 0 bytes 0 drop
|
||||
NFT| ip daddr [ADDR] iifname != "br-5f66e1018bdd" counter packets 0 bytes 0 drop
|
||||
NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" counter packets 0 bytes 0 drop
|
||||
NFT| ip daddr [ADDR] iifname != "lo" tcp dport 2375 counter packets 0 bytes 0 drop
|
||||
NFT| ip daddr [ADDR] iifname != "lo" tcp dport 8081 counter packets 0 bytes 0 drop
|
||||
NFT| ip daddr [ADDR] iifname != "br-5f66e1018bdd" counter packets 0 bytes 0 drop
|
||||
NFT| ip daddr [ADDR] iifname != "lo" tcp dport 7422 counter packets 0 bytes 0 drop
|
||||
NFT| ip daddr [ADDR] iifname != "lo" tcp dport 8088 counter packets 0 bytes 0 drop
|
||||
NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" counter packets 0 bytes 0 drop
|
||||
NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" counter packets 0 bytes 0 drop
|
||||
NFT| ip daddr [ADDR] iifname != "lo" tcp dport 12345 counter packets 0 bytes 0 drop
|
||||
NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" counter packets 0 bytes 0 drop
|
||||
NFT| ip daddr [ADDR] iifname != "lo" tcp dport 3100 counter packets 0 bytes 0 drop
|
||||
NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" counter packets 0 bytes 0 drop
|
||||
NFT| ip daddr [ADDR] iifname != "br-d41b3e918fbc" counter packets 0 bytes 0 drop
|
||||
NFT| ip daddr [ADDR] iifname != "lo" tcp dport 9999 counter packets 0 bytes 0 drop
|
||||
NFT| type nat hook postrouting priority srcnat - 1; policy accept;
|
||||
NFT| type nat hook prerouting priority dstnat; policy accept;
|
||||
NFT| type filter hook postrouting priority mangle; policy accept;
|
||||
NFT| type filter hook prerouting priority mangle; policy accept;
|
||||
NFT| chain netbird-mangle-forward {
|
||||
NFT| type filter hook forward priority mangle; policy accept;
|
||||
NFT| oifname "wt0" tcp flags syn counter packets 91 bytes 5460 tcp option maxseg size > 1240 tcp option maxseg size set 1240
|
||||
NFT| type filter hook input priority filter; policy accept;
|
||||
NFT| iifname "wt0" drop
|
||||
NFT| chain netbird-acl-forward-filter {
|
||||
NFT| type filter hook forward priority filter; policy accept;
|
||||
NFT| iifname "wt0" drop
|
||||
NFT| type filter hook output priority raw; policy accept;
|
||||
NFT| type filter hook prerouting priority raw; policy accept;
|
||||
NFT| type nat hook postrouting priority srcnat - 1; policy accept;
|
||||
NFT| type nat hook prerouting priority dstnat; policy accept;
|
||||
NFT| type filter hook postrouting priority mangle; policy accept;
|
||||
NFT| type filter hook prerouting priority mangle; policy accept;
|
||||
NFT| chain netbird-mangle-forward {
|
||||
NFT| type filter hook forward priority mangle; policy accept;
|
||||
NFT| oifname "wt0" tcp flags syn counter packets 0 bytes 0 tcp option maxseg size > 1220 tcp option maxseg size set 1220
|
||||
NFT| type filter hook input priority filter; policy accept;
|
||||
NFT| iifname "wt0" drop
|
||||
NFT| chain netbird-acl-forward-filter {
|
||||
NFT| type filter hook forward priority filter; policy accept;
|
||||
NFT| iifname "wt0" drop
|
||||
IPTABLES4_RC=0
|
||||
IPTABLES4_RELEVANT_COUNT=30
|
||||
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-f43db13d76c4 -j DROP
|
||||
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP
|
||||
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-a4e31561a8d5 -j DROP
|
||||
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-8122fec51f39 -j DROP
|
||||
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-5f66e1018bdd -j DROP
|
||||
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP
|
||||
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 2375 -j DROP
|
||||
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 8081 -j DROP
|
||||
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-5f66e1018bdd -j DROP
|
||||
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 7422 -j DROP
|
||||
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 8088 -j DROP
|
||||
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP
|
||||
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP
|
||||
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 12345 -j DROP
|
||||
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP
|
||||
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 3100 -j DROP
|
||||
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP
|
||||
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-d41b3e918fbc -j DROP
|
||||
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 9999 -j DROP
|
||||
IPTABLES4|-A INPUT ! -i lo -p tcp -m tcp --dport 81 -j DROP
|
||||
IPTABLES4|-A INPUT -s [ADDR]/16 -i wt0 -p tcp -m multiport --dports 80,443 -j ACCEPT
|
||||
IPTABLES4|-A DOCKER ! -i br-4d894f9e427b -o br-4d894f9e427b -j DROP
|
||||
IPTABLES4|-A DOCKER ! -i br-5f66e1018bdd -o br-5f66e1018bdd -j DROP
|
||||
IPTABLES4|-A DOCKER ! -i br-8122fec51f39 -o br-8122fec51f39 -j DROP
|
||||
IPTABLES4|-A DOCKER ! -i br-915a81681c3e -o br-915a81681c3e -j DROP
|
||||
IPTABLES4|-A DOCKER ! -i br-a4e31561a8d5 -o br-a4e31561a8d5 -j DROP
|
||||
IPTABLES4|-A DOCKER ! -i br-d41b3e918fbc -o br-d41b3e918fbc -j DROP
|
||||
IPTABLES4|-A DOCKER ! -i br-f43db13d76c4 -o br-f43db13d76c4 -j DROP
|
||||
IPTABLES4|-A DOCKER ! -i docker0 -o docker0 -j DROP
|
||||
IPTABLES4|:PREROUTING ACCEPT [3066759:284433816]
|
||||
IPTABLES6_RC=0
|
||||
IPTABLES6_RELEVANT_COUNT=1
|
||||
IPTABLES6|-A INPUT ! -i lo -p tcp -m tcp --dport 81 -j DROP
|
||||
NET_SERVICE|name=systemd-networkd.service|active=active
|
||||
NET_SERVICE|name=NetworkManager.service|active=inactive
|
||||
NET_SERVICE|name=networking.service|active=inactive
|
||||
EDGE_GUEST_NETWORK_END=1
|
||||
DECISION=PASS_MOLDOVA_1163_EDGE_EGRESS_PATH_RCA_COLLECTED
|
||||
NEXT_GATE=READ_EXACT_1163_AND_CHOOSE_DNS_AUTHORITY_PATH
|
||||
TASK_RESULT=PASS_MOLDOVA_EDGE_EGRESS_PATH_RCA
|
||||
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-EGRESS-PATH-RCA-1163R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
|
||||
WORKERS2_MOLDOVA_EDGE_EGRESS_PATH_RCA_END=1
|
||||
NFT_NETBIRD_RELEVANT_COUNT=47
|
||||
NFT_NETBIRD| oifname "wt0" ct state related,established counter packets 733 bytes 194838 accept
|
||||
NFT_NETBIRD| iifname "wt0" counter packets 688 bytes 510598 accept
|
||||
NFT_NETBIRD| iifname "wt0" counter packets 36248 bytes 41371245 accept
|
||||
NFT_NETBIRD| ip saddr [ADDR] iifname "wt0" ip protocol tcp tcp dport { 80, 443 } counter packets 3302601 bytes 531568845 accept
|
||||
NFT_NETBIRD| oifname "wt0" ct state related,established counter packets 0 bytes 0 accept
|
||||
NFT_NETBIRD| iifname "wt0" counter packets 0 bytes 0 accept
|
||||
NFT_NETBIRD| iifname "wt0" counter packets 0 bytes 0 accept
|
||||
NFT_NETBIRD|table ip netbird {
|
||||
NFT_NETBIRD| chain netbird-rt-fwd {
|
||||
NFT_NETBIRD| chain netbird-rt-postrouting {
|
||||
NFT_NETBIRD| meta mark 0x0001bd22 oifname "wt0" counter packets 0 bytes 0 masquerade
|
||||
NFT_NETBIRD| chain netbird-rt-redirect {
|
||||
NFT_NETBIRD| chain netbird-mangle-postrouting {
|
||||
NFT_NETBIRD| oifname "wt0" ct state new ct mark set 0x0001bd11
|
||||
NFT_NETBIRD| chain netbird-mangle-prerouting {
|
||||
NFT_NETBIRD| iifname "wt0" ct state new ct mark set 0x0001bd10
|
||||
NFT_NETBIRD| iifname "wt0" ip saddr @nb0000001 fib daddr type local meta mark set 0x0001bd20
|
||||
NFT_NETBIRD| chain netbird-mangle-forward {
|
||||
NFT_NETBIRD| oifname "wt0" tcp flags syn counter packets 112 bytes 6720 tcp option maxseg size > 1240 tcp option maxseg size set 1240
|
||||
NFT_NETBIRD| chain netbird-acl-input-rules {
|
||||
NFT_NETBIRD| chain netbird-acl-input-filter {
|
||||
NFT_NETBIRD| iifname "wt0" jump netbird-acl-input-rules
|
||||
NFT_NETBIRD| iifname "wt0" drop
|
||||
NFT_NETBIRD| chain netbird-acl-forward-filter {
|
||||
NFT_NETBIRD| iifname "wt0" jump netbird-rt-fwd
|
||||
NFT_NETBIRD| iifname "wt0" drop
|
||||
NFT_NETBIRD| chain netbird-raw-out {
|
||||
NFT_NETBIRD| chain netbird-raw-pre {
|
||||
NFT_NETBIRD|table ip6 netbird {
|
||||
NFT_NETBIRD| chain netbird-rt-fwd {
|
||||
NFT_NETBIRD| chain netbird-rt-postrouting {
|
||||
NFT_NETBIRD| meta mark 0x0001bd22 oifname "wt0" counter packets 0 bytes 0 masquerade
|
||||
NFT_NETBIRD| chain netbird-rt-redirect {
|
||||
NFT_NETBIRD| chain netbird-mangle-postrouting {
|
||||
NFT_NETBIRD| oifname "wt0" ct state new ct mark set 0x0001bd11
|
||||
NFT_NETBIRD| chain netbird-mangle-prerouting {
|
||||
NFT_NETBIRD| iifname "wt0" ct state new ct mark set 0x0001bd10
|
||||
NFT_NETBIRD| iifname "wt0" ip6 saddr @nb0000001 fib daddr type local meta mark set 0x0001bd20
|
||||
NFT_NETBIRD| chain netbird-mangle-forward {
|
||||
NFT_NETBIRD| oifname "wt0" tcp flags syn counter packets 0 bytes 0 tcp option maxseg size > 1220 tcp option maxseg size set 1220
|
||||
NFT_NETBIRD| chain netbird-acl-input-rules {
|
||||
NFT_NETBIRD| chain netbird-acl-input-filter {
|
||||
NFT_NETBIRD| iifname "wt0" jump netbird-acl-input-rules
|
||||
NFT_NETBIRD| iifname "wt0" drop
|
||||
NFT_NETBIRD| chain netbird-acl-forward-filter {
|
||||
NFT_NETBIRD| iifname "wt0" jump netbird-rt-fwd
|
||||
NFT_NETBIRD| iifname "wt0" drop
|
||||
NETBIRD_JOURNAL_RC=0
|
||||
NETBIRD_JOURNAL_RELEVANT_COUNT=0
|
||||
PUBLIC_ROUTE_GET|family=v4|rc=0|sha256=b1bac959b7f164a915a16d2128198deec0f9d739449bd8398fdf4fa4017159fa
|
||||
PUBLIC_ROUTE_GET_LINE|family=v4|[ADDR] dev wt0 table 7120 src [ADDR] uid 0
|
||||
PUBLIC_ROUTE_GET|family=v6|rc=0|sha256=72b49fa2af3fc9123bcb7f2e4b98dfcbff4c61fd8bf4a3d021bc409d158c39bd
|
||||
PUBLIC_ROUTE_GET_LINE|family=v6|[IPV6] from [IPV6] dev wt0 table 7120 src [IPV6] metric 1024 pref medium
|
||||
MAIN_TABLE_ROUTE_GET_RC=1
|
||||
MAIN_TABLE_ROUTE_GET_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
|
||||
EDGE_NETBIRD_EGRESS_END=1
|
||||
DECISION=PASS_MOLDOVA_1164_EDGE_NETBIRD_EGRESS_RCA_COLLECTED
|
||||
NEXT_GATE=READ_EXACT_1164_AND_CLASSIFY_MOLDOVA_EXIT_DEPENDENCY
|
||||
TASK_RESULT=PASS_MOLDOVA_EDGE_NETBIRD_EGRESS_RCA
|
||||
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
|
||||
WORKERS2_MOLDOVA_EDGE_NETBIRD_EGRESS_RCA_END=1
|
||||
|
||||
OUTPUT_END
|
||||
CHAT_OUTPUT_END
|
||||
|
||||
Reference in New Issue
Block a user