diff --git a/runtime/history/SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1.json b/runtime/history/SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1.json new file mode 100644 index 00000000..eb4298ff --- /dev/null +++ b/runtime/history/SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "read-only", + "component": "homelab-moldova-edge-netbird-egress-rca", + "started_at_utc": "2026-09-23T23:41:13Z", + "finished_at_utc": "2026-09-23T23:41:17Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "31d3e9189305dd16c8be28fb7e42e00b47db6b63b8c826758c373859f18db9af", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "7ed7b1b9bf78ef99af59d64634ea8ae43e76d1fe9515c6fc609085da318823e1", + "sanitized_output_sha256": "7ed7b1b9bf78ef99af59d64634ea8ae43e76d1fe9515c6fc609085da318823e1", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "WORKERS2_MOLDOVA_EDGE_NETBIRD_EGRESS_RCA_BEGIN=1\nCOMMAND_ID=SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1\nMODE=read-only\nCOMPONENT=homelab-moldova-edge-netbird-egress-rca\nMUTATION_BOUNDARY=NONE;EDGE_VM_NETBIRD_PEER_ROUTE_NETWORK_POLICY_AND_JOURNAL_RCA_ONLY;NO_NETWORK_CHANGE;NO_NETBIRD_MUTATION;NO_VM_STATE_CHANGE;NO_DNS_WRITE;NO_PROVIDER_MUTATION;NO_MOLDOVA_CONNECTION;NO_SYSTEMD_ACTION;NO_GIT_WRITE;NO_SECRET_VALUE_OUTPUT\nPREDECESSOR_1163=PASS_EDGE_PUBLIC_ROUTE_DECISION_VIA_WT0_TABLE_7120\nCARRIER_BASELINE=KNOWN_GOOD_1137_BYTE_SEMANTICS\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nTARGETS_SHA256=5cba5f1e14c65211c9fab6d11594c19279ab68369b4db3f7283708c368348288\nMD_RELAY_COUNT=1\nMD_RELAY_ENABLED=false\nCLUSTER_QUERY_RC=0\nEDGE_VM_MATCH_COUNT=1\nEDGE_VM_VMID=130\nEDGE_VM_NODE=pve03\nEDGE_VM_STATUS=running\nEDGE_QGA_TRANSPORT_RC=0\nEDGE_QGA_TRANSPORT_STDERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nEDGE_QGA_EXITCODE=0\nEDGE_QGA_ERR_BYTES=0\nEDGE_QGA_ERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nEDGE_NETBIRD_EGRESS_BEGIN=1\nEDGE_HOSTNAME=edge-vm\nEDGE_EUID=0\nEDGE_EPOCH=1790206874\nSERVICE|name=netbird.service|active=active\nSERVICE|name=netbird.service|enabled=enabled\nSERVICE|name=systemd-networkd.service|active=active\nSERVICE|name=systemd-networkd.service|enabled=enabled\nNETBIRD_VERSION_RC=0\nNETBIRD_VERSION=0.73.2\nNETBIRD_STATUS_DETAIL_RC=0\nNETBIRD_STATUS_DETAIL_BYTES=8694\nNETBIRD_STATUS_DETAIL_SHA256=cddf4549ddc3c862d7a7aa04645a745b06031ada6ba41ad0330c68b1d42ce0d9\nNETBIRD_STATUS_INTERESTING_COUNT=49\nNETBIRD_STATUS| Status: Connecting\nNETBIRD_STATUS| Relay server address: \nNETBIRD_STATUS| Networks: -\nNETBIRD_STATUS| Status: Connecting\nNETBIRD_STATUS| Relay server address: \nNETBIRD_STATUS| Networks: -\nNETBIRD_STATUS| Status: Connecting\nNETBIRD_STATUS| Relay server address: \nNETBIRD_STATUS| Networks: -\nNETBIRD_STATUS| Status: Connecting\nNETBIRD_STATUS| Relay server address: \nNETBIRD_STATUS| Networks: -\nNETBIRD_STATUS| Status: Connecting\nNETBIRD_STATUS| Relay server address: \nNETBIRD_STATUS| Networks: -\nNETBIRD_STATUS| Status: Connecting\nNETBIRD_STATUS| Relay server address: \nNETBIRD_STATUS| Networks: -\nNETBIRD_STATUS| Status: Connecting\nNETBIRD_STATUS| Relay server address: \nNETBIRD_STATUS| Networks: -\nNETBIRD_STATUS| Status: Connecting\nNETBIRD_STATUS| Relay server address: \nNETBIRD_STATUS| Networks: -\nNETBIRD_STATUS| Status: Connecting\nNETBIRD_STATUS| Relay server address: \nNETBIRD_STATUS| Networks: -\nNETBIRD_STATUS| Status: Connecting\nNETBIRD_STATUS| Relay server address: \nNETBIRD_STATUS| Networks: -\nNETBIRD_STATUS| Status: Connecting\nNETBIRD_STATUS| Relay server address: \nNETBIRD_STATUS| Networks: -\nNETBIRD_STATUS| Message: Default route added\nNETBIRD_STATUS| Message: Default route disconnected due to peer unreachability\nNETBIRD_STATUS| Message: Default route disconnected due to peer unreachability\nNETBIRD_STATUS| Message: Network map updated\nNETBIRD_STATUS| Message: Default route added\nNETBIRD_STATUS| Message: Default route added\nNETBIRD_STATUS| Message: Default route added\nNETBIRD_STATUS| Message: Default route added\nNETBIRD_STATUS| Message: Default route disconnected due to peer unreachability\nNETBIRD_STATUS| Message: Default route disconnected due to peer unreachability\nNETBIRD_STATUS|Management: Disconnected, reason: rpc error: code = Unavailable desc = error reading from server: EOF\nNETBIRD_STATUS|Signal: Disconnected, reason: rpc error: code = Unavailable desc = error reading from server: EOF\nNETBIRD_STATUS|Relays: \nNETBIRD_STATUS|FQDN: edge-vm.netbird.selfhosted\nNETBIRD_STATUS|Networks: -\nNETBIRD_STATUS|Peers count: 0/11 Connected\nPEER_BLOCK_COUNT=1\nPEER|fqdn=edge-vm.netbird.selfhosted|status=UNKNOWN|relay_present=false|networks=-\nMOLDOVA_RELAY_PEER_PRESENT=false\nMOLDOVA_RELAY_PEER_STATUS=ABSENT\nNETBIRD_CMD|name=ROUTES_LIST|rc=0|bytes=178|sha256=449171b786a12843333f14fc8e8eb1160a3077a1ff08e06cabd0dd4e90eb3a4a|stderr_sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nNETBIRD_CMD_LINE_COUNT|name=ROUTES_LIST|count=7\nNETBIRD_ROUTES_LIST|Available Networks:\nNETBIRD_ROUTES_LIST| - ID: edge-exit-relay-moldova\nNETBIRD_ROUTES_LIST| Network: [ADDR], [IPV6]\nNETBIRD_ROUTES_LIST| Status: Not Selected\nNETBIRD_ROUTES_LIST| - ID: internet-v4\nNETBIRD_ROUTES_LIST| Network: [ADDR], [IPV6]\nNETBIRD_ROUTES_LIST| Status: Selected\nNETBIRD_CMD|name=NETWORKS_LIST|rc=0|bytes=178|sha256=449171b786a12843333f14fc8e8eb1160a3077a1ff08e06cabd0dd4e90eb3a4a|stderr_sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nNETBIRD_CMD_LINE_COUNT|name=NETWORKS_LIST|count=7\nNETBIRD_NETWORKS_LIST|Available Networks:\nNETBIRD_NETWORKS_LIST| - ID: edge-exit-relay-moldova\nNETBIRD_NETWORKS_LIST| Network: [ADDR], [IPV6]\nNETBIRD_NETWORKS_LIST| Status: Not Selected\nNETBIRD_NETWORKS_LIST| - ID: internet-v4\nNETBIRD_NETWORKS_LIST| Network: [ADDR], [IPV6]\nNETBIRD_NETWORKS_LIST| Status: Selected\nNETBIRD_STATUS_JSON_RC=0\nNETBIRD_STATUS_JSON_BYTES=10251\nNETBIRD_STATUS_JSON_SHA256=ae997e3a2b072bf7da4afa5274bd86824449644b8f17ba6d7439038bf6b9f461\nNETBIRD_STATUS_JSON_PARSE=true\nNETBIRD_STATUS_JSON_TOPKEYS=cliVersion,daemonStatus,daemonVersion,dnsServers,events,forwardingRules,fqdn,lazyConnectionEnabled,management,netbirdIp,netbirdIpv6,networks,peers,profileName,publicKey,quantumResistance,quantumResistancePermissive,relays,signal,sshServer,usesKernelInterface,wireguardPort\nNETBIRD_STATUS_JSON_SELECTED_COUNT=80\nNETBIRD_JSON|path_sha256=679566c8dc90684de679e276220746522687f2d7e9b4537dc8a97954f01290be|value=11\nNETBIRD_JSON|path_sha256=4a9cb2135f8edb9ab83136dbb735b5de79ae1ee18f725d7fbeba840ba962b603|value=0\nNETBIRD_JSON|path_sha256=cad0d10b6d77e2f12265ce446f70de2d90dbb61594f248b1efe6093a2b6b0067|value=pve02.netbird.selfhosted\nNETBIRD_JSON|path_sha256=f75b6abe4f98877764a72f45a15e7ec41a0b169b2eee375acec84e394478d60e|value=[ADDR]\nNETBIRD_JSON|path_sha256=76fb0e4770bdf00275de5dd40053bf513e6d6c0e8441df7a028f011f95aad54f|value=[IPV6]\nNETBIRD_JSON|path_sha256=d07bb3a53b362c40c10b90f846a9a5c169dc3a3f8584d700b33073d0990ba584|value=ioHRHMCrw1revg7p7drr2MZxudHpqfhn9GIHvuDNHBs=\nNETBIRD_JSON|path_sha256=e63c7de2f5ff704abd4049e74419968caa91ba6af64e36d2d9b9cd18db0748a6|value=Connecting\nNETBIRD_JSON|path_sha256=f057c793dd182d8eca23f5ef877f11de7c3bd44650bdeb893632a031a21f721d|value=2026-09-23T[IPV6].773489895+03:00\nNETBIRD_JSON|path_sha256=b8bf2a53c80892125f8820159e7c484dde75b50e5bba990cc4ea4278ad7cd238|value=-\nNETBIRD_JSON|path_sha256=bd4499df433a7b6583b266fbdd9b11f83f8ed22ab44cf210b2d9db997c76f18f|value=\nNETBIRD_JSON|path_sha256=be0b2ee8224c7a323fb5427ba6db6ad365f9290b11ebcc07f0ffa3b6088d1a87|value=\nNETBIRD_JSON|path_sha256=07acc52aa801d037f8fbecce724ac218dc89ce7597edeffd9d30b326d75d49b7|value=\nNETBIRD_JSON|path_sha256=afa1372736f55a5779c7d9b1d916a27c327aa40b00a81ae75b3511fa8f270456|value=\nNETBIRD_JSON|path_sha256=d1d68386368a1f8b95ab0817794a18a0eeab5255e339d4a371a8667395ab2f09|value=\nNETBIRD_JSON|path_sha256=781f25c5890ea6c1a646485d2711cf96a82a829d2a6d01e500b1215e8c51656c|value=0001-01-01T[IPV6]Z\nNETBIRD_JSON|path_sha256=ef2843e18eb51eb8a6d74f8cc0773632e95bcaae62570e5a96dd27427104d4c3|value=0\nNETBIRD_JSON|path_sha256=3a1ab30635a45faba4326dd6ed27ded4b7fb7529656b5b0c42029ab40493d3b2|value=0\nNETBIRD_JSON|path_sha256=c9cc0fdec9098ed03d1230bcb5c7dac031d4b3ab895548da4ef396e3303e7c77|value=0\nNETBIRD_JSON|path_sha256=3027543b3a52fc9ab1d65ccaa63d17a1ab8536d0629e3de5d7c93227e2009291|value=False\nNETBIRD_JSON|path_sha256=122cf1659db1689e087c83ced68fd32b7119c1636aa44e006960e1ba4e4ce07b|value=home-pc.netbird.selfhosted\nNETBIRD_JSON|path_sha256=d52f18655d3fb5ef4e8f22d1b4d435f303ef2defdc33e467f411a1ec5b9ef95a|value=[ADDR]\nNETBIRD_JSON|path_sha256=2ae7f128330461846d31320c153e9a8612b23b0001f0cb1e28efc33c85df27c1|value=[IPV6]\nNETBIRD_JSON|path_sha256=44a8ed4bf8cfa95e71c3052bd43ea5d26de58fb47d591cd1f4a4545f802ad1b4|value=CoTpTOUD2TU924swK54vv1yhdCKiMwc5sM8PJVRyWj8=\nNETBIRD_JSON|path_sha256=c69c0993da1766e8d8f49ccd153b4870cf333bb762ad2218a6c001f9cc1ba521|value=Connecting\nNETBIRD_JSON|path_sha256=11e14f24088beacadf53d5cf1cd9beddf3a2f1574f2b31f32a7ecccd00eddb8d|value=2026-09-23T[IPV6].774137117+03:00\nNETBIRD_JSON|path_sha256=e1a55aacc297978f57fc9fb790f82177999ff489404622f4d3061962c0a76cf2|value=-\nNETBIRD_JSON|path_sha256=0ddd1e8e2c6aefc684246a2e51f93ebf9791886dbc1086ed713f91a6f9397718|value=\nNETBIRD_JSON|path_sha256=0333fa50df80cbecd0631f6f0f2dd6d406dd5f4e3e429cfe66ac0544b451ba4c|value=\nNETBIRD_JSON|path_sha256=cec1e61e847d53ef4f33fd9eca376978e50206a642cd1b2b6181ef188c8e0844|value=\nNETBIRD_JSON|path_sha256=761a28061b3a04c3d7be5823550219f78ed87d7e81c4c9ffa94c59872a41953b|value=\nNETBIRD_JSON|path_sha256=bc331d12e1191062d924779e6f5769ab274d94220865891b9b769edab6ad276b|value=\nNETBIRD_JSON|path_sha256=6d8968d2cbabcf24551b8893595ad8df476f10cd64910c2f84a62c58cc140fe1|value=0001-01-01T[IPV6]Z\nNETBIRD_JSON|path_sha256=3b3fb571582c091a8085b19b5246712a9132df3e05990a80b8629565a3313ae2|value=0\nNETBIRD_JSON|path_sha256=ddc2824c4914d52159d2b343f1f9c4e6f5fd39925c73170b3586171e07fbcd48|value=0\nNETBIRD_JSON|path_sha256=0d08eb51a4f04271fadd217b55fef8b3e5b386f90115d406f815962b869032bc|value=0\nNETBIRD_JSON|path_sha256=c70c1aad1a4fa0dace291b8c1ee114080133c155936fc8965b7e1b89ca211b2c|value=False\nNETBIRD_JSON|path_sha256=e20ef6bfa0471853660cc087041f17e21701c3e62206df591f398cec5163a871|value=relay.netbird.selfhosted\nNETBIRD_JSON|path_sha256=78d21cd2a3d8144dc8823aad37ff45bfb834b459b2b658482c8003950e242200|value=[ADDR]\nNETBIRD_JSON|path_sha256=3ecb35313e1a6fba8f9b42bfe48100131a4d029004527e2ce33ff63809612714|value=[IPV6]\nNETBIRD_JSON|path_sha256=1c174bc37b1454099e90ecb1bacb58ab017f934bdd68f0332f82ac2ca6314148|value=fj5TW6oRrm5KdlrEQ/Zh/JFOO4DBNIIumt6TmR3FZyE=\nNETBIRD_JSON|path_sha256=95fb885d9385525e4cc6f6897ffef99d01a3f7f9611a37d227f1d5018a3c312b|value=Connecting\nNETBIRD_JSON|path_sha256=510a700e68196039deecbf5d8d190340ffb08ff54e8a25a7ed3a521d2c4a5eb5|value=2026-09-24T[IPV6].719543198+03:00\nNETBIRD_JSON|path_sha256=f958f470595344f2a6cc48739b150b3dc30732eb8b028d4faff2e4faf85e6551|value=-\nNETBIRD_JSON|path_sha256=252b97a875f0b6f5ab50234c4fea093b5372d85fca3bb78de69bf9abdc816cd5|value=\nNETBIRD_JSON|path_sha256=8eb7573ee53f2a59dfc1f6f829eebac96272ba79ac7f76805d44ab9cd2babefe|value=\nNETBIRD_JSON|path_sha256=c16f8ab867969c5cf4718228b7feffbf6ff7becd88e02ae6013b8d01abf7465f|value=\nNETBIRD_JSON|path_sha256=b0b66262576eb1e75c92a87110b042e64aba396c9cf05e40d7fec9b6f83307da|value=\nNETBIRD_JSON|path_sha256=59a4062f39a14e1de0533701b74181448788980044c07b6c7e1fd0f8a51b70c3|value=\nNETBIRD_JSON|path_sha256=bef2b4cb9ea3b2cc5db0e8997f2ef57f66b5726e718287379641000761c65db0|value=0001-01-01T[IPV6]Z\nNETBIRD_JSON|path_sha256=9edd4c7c8dfa8551da17377c5530dde537c2b09c460a7f5083ed3140fc37f21c|value=0\nNETBIRD_JSON|path_sha256=1fd9d7593f46418a9f4e3ea0aa849b22cd55ca7c05f141162905559c2130b8a3|value=0\nNETBIRD_JSON|path_sha256=b7f5bd55ef1c641d4f5fd4e63e808f6b6a7b21df21ee649999ebe1bc24941d94|value=58101043\nNETBIRD_JSON|path_sha256=ccaba428196ed6060b278353e1aa634d7fc031b418278e0d3fb531a4c395be07|value=False\nNETBIRD_JSON|path_sha256=e327bb74b0b2c68ca33d265c49965d756544f3a419b9b7c2bf94317f8b6c00a7|value=pve03.netbird.selfhosted\nNETBIRD_JSON|path_sha256=39be3ea04f55f6877974b0783ccf0526c09ab91a571aeedc295e99fc456f1b02|value=[ADDR]\nNETBIRD_JSON|path_sha256=3ce1c496bf32694f78c33b04a04d08f0aec302f035c5b51eca535d97f531909d|value=[IPV6]\nNETBIRD_JSON|path_sha256=ea1b727fc3e7fd7852615d5347e8639c91d58dd64f0975d02123d85154e345b5|value=oXaA1VeKq1d/v5F8w0v/7G1DFL0yJMmxdSk/4X9j2j4=\nNETBIRD_JSON|path_sha256=cb66d5a3abb053cb20d3481f9ff5c6bc81d9a7b407cb8b48f319c9e09bf669df|value=Connecting\nNETBIRD_JSON|path_sha256=67f3e52702b07e387176d5cbc95dbbcfdd1c23a91c159ba1c9507271d683b375|value=2026-09-23T[IPV6].773575258+03:00\nNETBIRD_JSON|path_sha256=fcaf0387b115f2bd09d147636cc83f2d1464425169cea63b0bfac79baddae46d|value=-\nNETBIRD_JSON|path_sha256=7916502a9bfe8bfc0841a05cd410fa0296c9ad05c4f9eb6e73743975c4c046c6|value=\nNETBIRD_JSON|path_sha256=fa221acaac543f1da5ba45d8a3772fb1872ef7b024b3895791124a932a9e6659|value=\nNETBIRD_JSON|path_sha256=55206b1db6dd3ea78bda14ee278ce18c91990a5855691c2c66a952eeea10afbf|value=\nNETBIRD_JSON|path_sha256=ca17871ab53271d5c93201e9f780b93d8aa4133cbc71d6e4613a558acf61c456|value=\nNETBIRD_JSON|path_sha256=4a151dffa29d0954648b340c5c1523e2f827ca346b1cc5d5c3b85dd510469dae|value=\nNETBIRD_JSON|path_sha256=59a4a688d03bb96865bceb126225323dc51b98808e1c4b6d3c5b43180e39f576|value=0001-01-01T[IPV6]Z\nNETBIRD_JSON|path_sha256=6ff003ffae7699bd7b10e9ac37de4bf7b3995546077ff7713b66270b5ffbc757|value=0\nNETBIRD_JSON|path_sha256=98b109bcced49829ec0610819e1d4cd6d9bb95eba60b71d68e3eea32fda53101|value=0\nNETBIRD_JSON|path_sha256=20d283da05f088b99e0d4d4ea5533c8ce3589cf6550fb1155b0b3bace7eb2948|value=0\nNETBIRD_JSON|path_sha256=718a3fa7ce808de23a8f393434e4f96d89551ed4a62fcaf7201acad73212e7c3|value=False\nNETBIRD_JSON|path_sha256=bfe94ea4998d1497ead578c9d2351dd86499d715e7a5ae2c251a48ab175e7597|value=desktop-moy.netbird.selfhosted\nNETBIRD_JSON|path_sha256=10615ff34b6e87b5fc0e348720aa6b4cf7e79505d5399b7f082c6062dfc580f7|value=[ADDR]\nNETBIRD_JSON|path_sha256=0cfd2e29f0be9e305d2a1869bae732cc2fa4e0f543d06e5ccfd86e28def6b586|value=[IPV6]\nNETBIRD_JSON|path_sha256=83b78e00feeb099510b8ff7008845df75bc26d617d6d0011e01e62d6da957fca|value=E6+z+dlShOTEO+JOFoHKGcVHqnAcLZGz/Q8i9VAh5Go=\nNETBIRD_JSON|path_sha256=f60a499031d0775f574a7541a318343ec232d9058df51fb122d90786e7e4d835|value=Connecting\nNETBIRD_JSON|path_sha256=22c93528375c70c03debe2e7dbbba8b63205daedd81b5785c90903b48729e470|value=2026-09-24T[IPV6].926485532+03:00\nNETBIRD_JSON|path_sha256=0f1f1de24e138953d23d453ca5c2107709abce3a66dc83d86590db5a5b2106bf|value=-\nNETBIRD_JSON|path_sha256=bbb7054e5bc8316d34a6361014fce93781407132b089ac8c0227a4e73681f720|value=\nNETBIRD_JSON|path_sha256=2c7753650b2104d256bbab68e5dffe644077e34a60fbef115b13da287c2c458b|value=\nNETBIRD_JSON|path_sha256=3f4f797eb572f9538ea32803fc33e3e4484dc6539739a550cf3d85b3a9645eb4|value=\nROUTING_VIEW|name=RULE4|rc=0|lines=7|sha256=1b58f518e6616a36df39ac0ccaf9ece7cb2b39d9f4b226d75a17839d5e0373ad\nROUTING_RULE4|0:\tfrom all lookup local\nROUTING_RULE4|100:\tfrom [ADDR] lookup main\nROUTING_RULE4|101:\tfrom [ADDR] lookup 17777\nROUTING_RULE4|105:\tfrom all lookup main suppress_prefixlength 0\nROUTING_RULE4|110:\tnot from all fwmark 0x1bd00 lookup 7120\nROUTING_RULE4|32766:\tfrom all lookup main\nROUTING_RULE4|32767:\tfrom all lookup default\nROUTING_VIEW|name=RULE6|rc=0|lines=4|sha256=084928feb354be1f5bc19a4e726f8633720b2d0f1c47ae3240f7839b2a369b19\nROUTING_RULE6|0:\tfrom all lookup local\nROUTING_RULE6|105:\tfrom all lookup main suppress_prefixlength 0\nROUTING_RULE6|110:\tnot from all fwmark 0x1bd00 lookup 7120\nROUTING_RULE6|32766:\tfrom all lookup main\nROUTING_VIEW|name=TABLE7120_4|rc=0|lines=1|sha256=47caf134646621d5b98f8b57df342b12d9ee4d1934eae893f5de787744ee72e4\nROUTING_TABLE7120_4|default dev wt0 \nROUTING_VIEW|name=TABLE7120_6|rc=0|lines=1|sha256=2a5ee430739c900b7bed73ca983a83e00a763cde6cc22d9f34bf5aaba9257dc3\nROUTING_TABLE7120_6|default dev wt0 metric 1024 pref medium\nWT0_LINK_RC=0\nWT0_OPERSTATE=UNKNOWN\nWT0_MTU=1280\nWT0_FLAGS=POINTOPOINT,NOARP,UP,LOWER_UP\nNFT_RC=0\nNFT_NETBIRD_RELEVANT_COUNT=47\nNFT_NETBIRD|\t\toifname \"wt0\" ct state related,established counter packets 733 bytes 194838 accept\nNFT_NETBIRD|\t\tiifname \"wt0\" counter packets 688 bytes 510598 accept\nNFT_NETBIRD|\t\tiifname \"wt0\" counter packets 36248 bytes 41371245 accept\nNFT_NETBIRD|\t\tip saddr [ADDR] iifname \"wt0\" ip protocol tcp tcp dport { 80, 443 } counter packets 3302601 bytes 531568845 accept\nNFT_NETBIRD|\t\toifname \"wt0\" ct state related,established counter packets 0 bytes 0 accept\nNFT_NETBIRD|\t\tiifname \"wt0\" counter packets 0 bytes 0 accept\nNFT_NETBIRD|\t\tiifname \"wt0\" counter packets 0 bytes 0 accept\nNFT_NETBIRD|table ip netbird {\nNFT_NETBIRD|\tchain netbird-rt-fwd {\nNFT_NETBIRD|\tchain netbird-rt-postrouting {\nNFT_NETBIRD|\t\tmeta mark 0x0001bd22 oifname \"wt0\" counter packets 0 bytes 0 masquerade\nNFT_NETBIRD|\tchain netbird-rt-redirect {\nNFT_NETBIRD|\tchain netbird-mangle-postrouting {\nNFT_NETBIRD|\t\toifname \"wt0\" ct state new ct mark set 0x0001bd11\nNFT_NETBIRD|\tchain netbird-mangle-prerouting {\nNFT_NETBIRD|\t\tiifname \"wt0\" ct state new ct mark set 0x0001bd10\nNFT_NETBIRD|\t\tiifname \"wt0\" ip saddr @nb0000001 fib daddr type local meta mark set 0x0001bd20\nNFT_NETBIRD|\tchain netbird-mangle-forward {\nNFT_NETBIRD|\t\toifname \"wt0\" tcp flags syn counter packets 112 bytes 6720 tcp option maxseg size > 1240 tcp option maxseg size set 1240\nNFT_NETBIRD|\tchain netbird-acl-input-rules {\nNFT_NETBIRD|\tchain netbird-acl-input-filter {\nNFT_NETBIRD|\t\tiifname \"wt0\" jump netbird-acl-input-rules\nNFT_NETBIRD|\t\tiifname \"wt0\" drop\nNFT_NETBIRD|\tchain netbird-acl-forward-filter {\nNFT_NETBIRD|\t\tiifname \"wt0\" jump netbird-rt-fwd\nNFT_NETBIRD|\t\tiifname \"wt0\" drop\nNFT_NETBIRD|\tchain netbird-raw-out {\nNFT_NETBIRD|\tchain netbird-raw-pre {\nNFT_NETBIRD|table ip6 netbird {\nNFT_NETBIRD|\tchain netbird-rt-fwd {\nNFT_NETBIRD|\tchain netbird-rt-postrouting {\nNFT_NETBIRD|\t\tmeta mark 0x0001bd22 oifname \"wt0\" counter packets 0 bytes 0 masquerade\nNFT_NETBIRD|\tchain netbird-rt-redirect {\nNFT_NETBIRD|\tchain netbird-mangle-postrouting {\nNFT_NETBIRD|\t\toifname \"wt0\" ct state new ct mark set 0x0001bd11\nNFT_NETBIRD|\tchain netbird-mangle-prerouting {\nNFT_NETBIRD|\t\tiifname \"wt0\" ct state new ct mark set 0x0001bd10\nNFT_NETBIRD|\t\tiifname \"wt0\" ip6 saddr @nb0000001 fib daddr type local meta mark set 0x0001bd20\nNFT_NETBIRD|\tchain netbird-mangle-forward {\nNFT_NETBIRD|\t\toifname \"wt0\" tcp flags syn counter packets 0 bytes 0 tcp option maxseg size > 1220 tcp option maxseg size set 1220\nNFT_NETBIRD|\tchain netbird-acl-input-rules {\nNFT_NETBIRD|\tchain netbird-acl-input-filter {\nNFT_NETBIRD|\t\tiifname \"wt0\" jump netbird-acl-input-rules\nNFT_NETBIRD|\t\tiifname \"wt0\" drop\nNFT_NETBIRD|\tchain netbird-acl-forward-filter {\nNFT_NETBIRD|\t\tiifname \"wt0\" jump netbird-rt-fwd\nNFT_NETBIRD|\t\tiifname \"wt0\" drop\nNETBIRD_JOURNAL_RC=0\nNETBIRD_JOURNAL_RELEVANT_COUNT=0\nPUBLIC_ROUTE_GET|family=v4|rc=0|sha256=b1bac959b7f164a915a16d2128198deec0f9d739449bd8398fdf4fa4017159fa\nPUBLIC_ROUTE_GET_LINE|family=v4|[ADDR] dev wt0 table 7120 src [ADDR] uid 0 \nPUBLIC_ROUTE_GET|family=v6|rc=0|sha256=72b49fa2af3fc9123bcb7f2e4b98dfcbff4c61fd8bf4a3d021bc409d158c39bd\nPUBLIC_ROUTE_GET_LINE|family=v6|[IPV6] from [IPV6] dev wt0 table 7120 src [IPV6] metric 1024 pref medium\nMAIN_TABLE_ROUTE_GET_RC=1\nMAIN_TABLE_ROUTE_GET_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nEDGE_NETBIRD_EGRESS_END=1\nDECISION=PASS_MOLDOVA_1164_EDGE_NETBIRD_EGRESS_RCA_COLLECTED\nNEXT_GATE=READ_EXACT_1164_AND_CLASSIFY_MOLDOVA_EXIT_DEPENDENCY\nTASK_RESULT=PASS_MOLDOVA_EDGE_NETBIRD_EGRESS_RCA\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\nWORKERS2_MOLDOVA_EDGE_NETBIRD_EGRESS_RCA_END=1\n" +} diff --git a/runtime/history/SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1.txt b/runtime/history/SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1.txt new file mode 100644 index 00000000..0bd676ca --- /dev/null +++ b/runtime/history/SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1.txt @@ -0,0 +1,310 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1 +STATUS=OK +RC=0 +HOST=pve01 +MODE=read-only +COMPONENT=homelab-moldova-edge-netbird-egress-rca +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=31d3e9189305dd16c8be28fb7e42e00b47db6b63b8c826758c373859f18db9af +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=7ed7b1b9bf78ef99af59d64634ea8ae43e76d1fe9515c6fc609085da318823e1 +SANITIZED_OUTPUT_SHA256=7ed7b1b9bf78ef99af59d64634ea8ae43e76d1fe9515c6fc609085da318823e1 +OUTPUT_BEGIN +WORKERS2_MOLDOVA_EDGE_NETBIRD_EGRESS_RCA_BEGIN=1 +COMMAND_ID=SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1 +MODE=read-only +COMPONENT=homelab-moldova-edge-netbird-egress-rca +MUTATION_BOUNDARY=NONE;EDGE_VM_NETBIRD_PEER_ROUTE_NETWORK_POLICY_AND_JOURNAL_RCA_ONLY;NO_NETWORK_CHANGE;NO_NETBIRD_MUTATION;NO_VM_STATE_CHANGE;NO_DNS_WRITE;NO_PROVIDER_MUTATION;NO_MOLDOVA_CONNECTION;NO_SYSTEMD_ACTION;NO_GIT_WRITE;NO_SECRET_VALUE_OUTPUT +PREDECESSOR_1163=PASS_EDGE_PUBLIC_ROUTE_DECISION_VIA_WT0_TABLE_7120 +CARRIER_BASELINE=KNOWN_GOOD_1137_BYTE_SEMANTICS +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d +TARGETS_SHA256=5cba5f1e14c65211c9fab6d11594c19279ab68369b4db3f7283708c368348288 +MD_RELAY_COUNT=1 +MD_RELAY_ENABLED=false +CLUSTER_QUERY_RC=0 +EDGE_VM_MATCH_COUNT=1 +EDGE_VM_VMID=130 +EDGE_VM_NODE=pve03 +EDGE_VM_STATUS=running +EDGE_QGA_TRANSPORT_RC=0 +EDGE_QGA_TRANSPORT_STDERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 +EDGE_QGA_EXITCODE=0 +EDGE_QGA_ERR_BYTES=0 +EDGE_QGA_ERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 +EDGE_NETBIRD_EGRESS_BEGIN=1 +EDGE_HOSTNAME=edge-vm +EDGE_EUID=0 +EDGE_EPOCH=1790206874 +SERVICE|name=netbird.service|active=active +SERVICE|name=netbird.service|enabled=enabled +SERVICE|name=systemd-networkd.service|active=active +SERVICE|name=systemd-networkd.service|enabled=enabled +NETBIRD_VERSION_RC=0 +NETBIRD_VERSION=0.73.2 +NETBIRD_STATUS_DETAIL_RC=0 +NETBIRD_STATUS_DETAIL_BYTES=8694 +NETBIRD_STATUS_DETAIL_SHA256=cddf4549ddc3c862d7a7aa04645a745b06031ada6ba41ad0330c68b1d42ce0d9 +NETBIRD_STATUS_INTERESTING_COUNT=49 +NETBIRD_STATUS| Status: Connecting +NETBIRD_STATUS| Relay server address: +NETBIRD_STATUS| Networks: - +NETBIRD_STATUS| Status: Connecting +NETBIRD_STATUS| Relay server address: +NETBIRD_STATUS| Networks: - +NETBIRD_STATUS| Status: Connecting +NETBIRD_STATUS| Relay server address: +NETBIRD_STATUS| Networks: - +NETBIRD_STATUS| Status: Connecting +NETBIRD_STATUS| Relay server address: +NETBIRD_STATUS| Networks: - +NETBIRD_STATUS| Status: Connecting +NETBIRD_STATUS| Relay server address: +NETBIRD_STATUS| Networks: - +NETBIRD_STATUS| Status: Connecting +NETBIRD_STATUS| Relay server address: +NETBIRD_STATUS| Networks: - +NETBIRD_STATUS| Status: Connecting +NETBIRD_STATUS| Relay server address: +NETBIRD_STATUS| Networks: - +NETBIRD_STATUS| Status: Connecting +NETBIRD_STATUS| Relay server address: +NETBIRD_STATUS| Networks: - +NETBIRD_STATUS| Status: Connecting +NETBIRD_STATUS| Relay server address: +NETBIRD_STATUS| Networks: - +NETBIRD_STATUS| Status: Connecting +NETBIRD_STATUS| Relay server address: +NETBIRD_STATUS| Networks: - +NETBIRD_STATUS| Status: Connecting +NETBIRD_STATUS| Relay server address: +NETBIRD_STATUS| Networks: - +NETBIRD_STATUS| Message: Default route added +NETBIRD_STATUS| Message: Default route disconnected due to peer unreachability +NETBIRD_STATUS| Message: Default route disconnected due to peer unreachability +NETBIRD_STATUS| Message: Network map updated +NETBIRD_STATUS| Message: Default route added +NETBIRD_STATUS| Message: Default route added +NETBIRD_STATUS| Message: Default route added +NETBIRD_STATUS| Message: Default route added +NETBIRD_STATUS| Message: Default route disconnected due to peer unreachability +NETBIRD_STATUS| Message: Default route disconnected due to peer unreachability +NETBIRD_STATUS|Management: Disconnected, reason: rpc error: code = Unavailable desc = error reading from server: EOF +NETBIRD_STATUS|Signal: Disconnected, reason: rpc error: code = Unavailable desc = error reading from server: EOF +NETBIRD_STATUS|Relays: +NETBIRD_STATUS|FQDN: edge-vm.netbird.selfhosted +NETBIRD_STATUS|Networks: - +NETBIRD_STATUS|Peers count: 0/11 Connected +PEER_BLOCK_COUNT=1 +PEER|fqdn=edge-vm.netbird.selfhosted|status=UNKNOWN|relay_present=false|networks=- +MOLDOVA_RELAY_PEER_PRESENT=false +MOLDOVA_RELAY_PEER_STATUS=ABSENT +NETBIRD_CMD|name=ROUTES_LIST|rc=0|bytes=178|sha256=449171b786a12843333f14fc8e8eb1160a3077a1ff08e06cabd0dd4e90eb3a4a|stderr_sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 +NETBIRD_CMD_LINE_COUNT|name=ROUTES_LIST|count=7 +NETBIRD_ROUTES_LIST|Available Networks: +NETBIRD_ROUTES_LIST| - ID: edge-exit-relay-moldova +NETBIRD_ROUTES_LIST| Network: [ADDR], [IPV6] +NETBIRD_ROUTES_LIST| Status: Not Selected +NETBIRD_ROUTES_LIST| - ID: internet-v4 +NETBIRD_ROUTES_LIST| Network: [ADDR], [IPV6] +NETBIRD_ROUTES_LIST| Status: Selected +NETBIRD_CMD|name=NETWORKS_LIST|rc=0|bytes=178|sha256=449171b786a12843333f14fc8e8eb1160a3077a1ff08e06cabd0dd4e90eb3a4a|stderr_sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 +NETBIRD_CMD_LINE_COUNT|name=NETWORKS_LIST|count=7 +NETBIRD_NETWORKS_LIST|Available Networks: +NETBIRD_NETWORKS_LIST| - ID: edge-exit-relay-moldova +NETBIRD_NETWORKS_LIST| Network: [ADDR], [IPV6] +NETBIRD_NETWORKS_LIST| Status: Not Selected +NETBIRD_NETWORKS_LIST| - ID: internet-v4 +NETBIRD_NETWORKS_LIST| Network: [ADDR], [IPV6] +NETBIRD_NETWORKS_LIST| Status: Selected +NETBIRD_STATUS_JSON_RC=0 +NETBIRD_STATUS_JSON_BYTES=10251 +NETBIRD_STATUS_JSON_SHA256=ae997e3a2b072bf7da4afa5274bd86824449644b8f17ba6d7439038bf6b9f461 +NETBIRD_STATUS_JSON_PARSE=true +NETBIRD_STATUS_JSON_TOPKEYS=cliVersion,daemonStatus,daemonVersion,dnsServers,events,forwardingRules,fqdn,lazyConnectionEnabled,management,netbirdIp,netbirdIpv6,networks,peers,profileName,publicKey,quantumResistance,quantumResistancePermissive,relays,signal,sshServer,usesKernelInterface,wireguardPort +NETBIRD_STATUS_JSON_SELECTED_COUNT=80 +NETBIRD_JSON|path_sha256=679566c8dc90684de679e276220746522687f2d7e9b4537dc8a97954f01290be|value=11 +NETBIRD_JSON|path_sha256=4a9cb2135f8edb9ab83136dbb735b5de79ae1ee18f725d7fbeba840ba962b603|value=0 +NETBIRD_JSON|path_sha256=cad0d10b6d77e2f12265ce446f70de2d90dbb61594f248b1efe6093a2b6b0067|value=pve02.netbird.selfhosted +NETBIRD_JSON|path_sha256=f75b6abe4f98877764a72f45a15e7ec41a0b169b2eee375acec84e394478d60e|value=[ADDR] +NETBIRD_JSON|path_sha256=76fb0e4770bdf00275de5dd40053bf513e6d6c0e8441df7a028f011f95aad54f|value=[IPV6] +NETBIRD_JSON|path_sha256=d07bb3a53b362c40c10b90f846a9a5c169dc3a3f8584d700b33073d0990ba584|value=ioHRHMCrw1revg7p7drr2MZxudHpqfhn9GIHvuDNHBs= +NETBIRD_JSON|path_sha256=e63c7de2f5ff704abd4049e74419968caa91ba6af64e36d2d9b9cd18db0748a6|value=Connecting +NETBIRD_JSON|path_sha256=f057c793dd182d8eca23f5ef877f11de7c3bd44650bdeb893632a031a21f721d|value=2026-09-23T[IPV6].773489895+03:00 +NETBIRD_JSON|path_sha256=b8bf2a53c80892125f8820159e7c484dde75b50e5bba990cc4ea4278ad7cd238|value=- +NETBIRD_JSON|path_sha256=bd4499df433a7b6583b266fbdd9b11f83f8ed22ab44cf210b2d9db997c76f18f|value= +NETBIRD_JSON|path_sha256=be0b2ee8224c7a323fb5427ba6db6ad365f9290b11ebcc07f0ffa3b6088d1a87|value= +NETBIRD_JSON|path_sha256=07acc52aa801d037f8fbecce724ac218dc89ce7597edeffd9d30b326d75d49b7|value= +NETBIRD_JSON|path_sha256=afa1372736f55a5779c7d9b1d916a27c327aa40b00a81ae75b3511fa8f270456|value= +NETBIRD_JSON|path_sha256=d1d68386368a1f8b95ab0817794a18a0eeab5255e339d4a371a8667395ab2f09|value= +NETBIRD_JSON|path_sha256=781f25c5890ea6c1a646485d2711cf96a82a829d2a6d01e500b1215e8c51656c|value=0001-01-01T[IPV6]Z +NETBIRD_JSON|path_sha256=ef2843e18eb51eb8a6d74f8cc0773632e95bcaae62570e5a96dd27427104d4c3|value=0 +NETBIRD_JSON|path_sha256=3a1ab30635a45faba4326dd6ed27ded4b7fb7529656b5b0c42029ab40493d3b2|value=0 +NETBIRD_JSON|path_sha256=c9cc0fdec9098ed03d1230bcb5c7dac031d4b3ab895548da4ef396e3303e7c77|value=0 +NETBIRD_JSON|path_sha256=3027543b3a52fc9ab1d65ccaa63d17a1ab8536d0629e3de5d7c93227e2009291|value=False +NETBIRD_JSON|path_sha256=122cf1659db1689e087c83ced68fd32b7119c1636aa44e006960e1ba4e4ce07b|value=home-pc.netbird.selfhosted +NETBIRD_JSON|path_sha256=d52f18655d3fb5ef4e8f22d1b4d435f303ef2defdc33e467f411a1ec5b9ef95a|value=[ADDR] +NETBIRD_JSON|path_sha256=2ae7f128330461846d31320c153e9a8612b23b0001f0cb1e28efc33c85df27c1|value=[IPV6] +NETBIRD_JSON|path_sha256=44a8ed4bf8cfa95e71c3052bd43ea5d26de58fb47d591cd1f4a4545f802ad1b4|value=CoTpTOUD2TU924swK54vv1yhdCKiMwc5sM8PJVRyWj8= +NETBIRD_JSON|path_sha256=c69c0993da1766e8d8f49ccd153b4870cf333bb762ad2218a6c001f9cc1ba521|value=Connecting +NETBIRD_JSON|path_sha256=11e14f24088beacadf53d5cf1cd9beddf3a2f1574f2b31f32a7ecccd00eddb8d|value=2026-09-23T[IPV6].774137117+03:00 +NETBIRD_JSON|path_sha256=e1a55aacc297978f57fc9fb790f82177999ff489404622f4d3061962c0a76cf2|value=- +NETBIRD_JSON|path_sha256=0ddd1e8e2c6aefc684246a2e51f93ebf9791886dbc1086ed713f91a6f9397718|value= +NETBIRD_JSON|path_sha256=0333fa50df80cbecd0631f6f0f2dd6d406dd5f4e3e429cfe66ac0544b451ba4c|value= +NETBIRD_JSON|path_sha256=cec1e61e847d53ef4f33fd9eca376978e50206a642cd1b2b6181ef188c8e0844|value= +NETBIRD_JSON|path_sha256=761a28061b3a04c3d7be5823550219f78ed87d7e81c4c9ffa94c59872a41953b|value= +NETBIRD_JSON|path_sha256=bc331d12e1191062d924779e6f5769ab274d94220865891b9b769edab6ad276b|value= +NETBIRD_JSON|path_sha256=6d8968d2cbabcf24551b8893595ad8df476f10cd64910c2f84a62c58cc140fe1|value=0001-01-01T[IPV6]Z +NETBIRD_JSON|path_sha256=3b3fb571582c091a8085b19b5246712a9132df3e05990a80b8629565a3313ae2|value=0 +NETBIRD_JSON|path_sha256=ddc2824c4914d52159d2b343f1f9c4e6f5fd39925c73170b3586171e07fbcd48|value=0 +NETBIRD_JSON|path_sha256=0d08eb51a4f04271fadd217b55fef8b3e5b386f90115d406f815962b869032bc|value=0 +NETBIRD_JSON|path_sha256=c70c1aad1a4fa0dace291b8c1ee114080133c155936fc8965b7e1b89ca211b2c|value=False +NETBIRD_JSON|path_sha256=e20ef6bfa0471853660cc087041f17e21701c3e62206df591f398cec5163a871|value=relay.netbird.selfhosted +NETBIRD_JSON|path_sha256=78d21cd2a3d8144dc8823aad37ff45bfb834b459b2b658482c8003950e242200|value=[ADDR] +NETBIRD_JSON|path_sha256=3ecb35313e1a6fba8f9b42bfe48100131a4d029004527e2ce33ff63809612714|value=[IPV6] +NETBIRD_JSON|path_sha256=1c174bc37b1454099e90ecb1bacb58ab017f934bdd68f0332f82ac2ca6314148|value=fj5TW6oRrm5KdlrEQ/Zh/JFOO4DBNIIumt6TmR3FZyE= +NETBIRD_JSON|path_sha256=95fb885d9385525e4cc6f6897ffef99d01a3f7f9611a37d227f1d5018a3c312b|value=Connecting +NETBIRD_JSON|path_sha256=510a700e68196039deecbf5d8d190340ffb08ff54e8a25a7ed3a521d2c4a5eb5|value=2026-09-24T[IPV6].719543198+03:00 +NETBIRD_JSON|path_sha256=f958f470595344f2a6cc48739b150b3dc30732eb8b028d4faff2e4faf85e6551|value=- +NETBIRD_JSON|path_sha256=252b97a875f0b6f5ab50234c4fea093b5372d85fca3bb78de69bf9abdc816cd5|value= +NETBIRD_JSON|path_sha256=8eb7573ee53f2a59dfc1f6f829eebac96272ba79ac7f76805d44ab9cd2babefe|value= +NETBIRD_JSON|path_sha256=c16f8ab867969c5cf4718228b7feffbf6ff7becd88e02ae6013b8d01abf7465f|value= +NETBIRD_JSON|path_sha256=b0b66262576eb1e75c92a87110b042e64aba396c9cf05e40d7fec9b6f83307da|value= +NETBIRD_JSON|path_sha256=59a4062f39a14e1de0533701b74181448788980044c07b6c7e1fd0f8a51b70c3|value= +NETBIRD_JSON|path_sha256=bef2b4cb9ea3b2cc5db0e8997f2ef57f66b5726e718287379641000761c65db0|value=0001-01-01T[IPV6]Z +NETBIRD_JSON|path_sha256=9edd4c7c8dfa8551da17377c5530dde537c2b09c460a7f5083ed3140fc37f21c|value=0 +NETBIRD_JSON|path_sha256=1fd9d7593f46418a9f4e3ea0aa849b22cd55ca7c05f141162905559c2130b8a3|value=0 +NETBIRD_JSON|path_sha256=b7f5bd55ef1c641d4f5fd4e63e808f6b6a7b21df21ee649999ebe1bc24941d94|value=58101043 +NETBIRD_JSON|path_sha256=ccaba428196ed6060b278353e1aa634d7fc031b418278e0d3fb531a4c395be07|value=False +NETBIRD_JSON|path_sha256=e327bb74b0b2c68ca33d265c49965d756544f3a419b9b7c2bf94317f8b6c00a7|value=pve03.netbird.selfhosted +NETBIRD_JSON|path_sha256=39be3ea04f55f6877974b0783ccf0526c09ab91a571aeedc295e99fc456f1b02|value=[ADDR] +NETBIRD_JSON|path_sha256=3ce1c496bf32694f78c33b04a04d08f0aec302f035c5b51eca535d97f531909d|value=[IPV6] +NETBIRD_JSON|path_sha256=ea1b727fc3e7fd7852615d5347e8639c91d58dd64f0975d02123d85154e345b5|value=oXaA1VeKq1d/v5F8w0v/7G1DFL0yJMmxdSk/4X9j2j4= +NETBIRD_JSON|path_sha256=cb66d5a3abb053cb20d3481f9ff5c6bc81d9a7b407cb8b48f319c9e09bf669df|value=Connecting +NETBIRD_JSON|path_sha256=67f3e52702b07e387176d5cbc95dbbcfdd1c23a91c159ba1c9507271d683b375|value=2026-09-23T[IPV6].773575258+03:00 +NETBIRD_JSON|path_sha256=fcaf0387b115f2bd09d147636cc83f2d1464425169cea63b0bfac79baddae46d|value=- +NETBIRD_JSON|path_sha256=7916502a9bfe8bfc0841a05cd410fa0296c9ad05c4f9eb6e73743975c4c046c6|value= +NETBIRD_JSON|path_sha256=fa221acaac543f1da5ba45d8a3772fb1872ef7b024b3895791124a932a9e6659|value= +NETBIRD_JSON|path_sha256=55206b1db6dd3ea78bda14ee278ce18c91990a5855691c2c66a952eeea10afbf|value= +NETBIRD_JSON|path_sha256=ca17871ab53271d5c93201e9f780b93d8aa4133cbc71d6e4613a558acf61c456|value= +NETBIRD_JSON|path_sha256=4a151dffa29d0954648b340c5c1523e2f827ca346b1cc5d5c3b85dd510469dae|value= +NETBIRD_JSON|path_sha256=59a4a688d03bb96865bceb126225323dc51b98808e1c4b6d3c5b43180e39f576|value=0001-01-01T[IPV6]Z +NETBIRD_JSON|path_sha256=6ff003ffae7699bd7b10e9ac37de4bf7b3995546077ff7713b66270b5ffbc757|value=0 +NETBIRD_JSON|path_sha256=98b109bcced49829ec0610819e1d4cd6d9bb95eba60b71d68e3eea32fda53101|value=0 +NETBIRD_JSON|path_sha256=20d283da05f088b99e0d4d4ea5533c8ce3589cf6550fb1155b0b3bace7eb2948|value=0 +NETBIRD_JSON|path_sha256=718a3fa7ce808de23a8f393434e4f96d89551ed4a62fcaf7201acad73212e7c3|value=False +NETBIRD_JSON|path_sha256=bfe94ea4998d1497ead578c9d2351dd86499d715e7a5ae2c251a48ab175e7597|value=desktop-moy.netbird.selfhosted +NETBIRD_JSON|path_sha256=10615ff34b6e87b5fc0e348720aa6b4cf7e79505d5399b7f082c6062dfc580f7|value=[ADDR] +NETBIRD_JSON|path_sha256=0cfd2e29f0be9e305d2a1869bae732cc2fa4e0f543d06e5ccfd86e28def6b586|value=[IPV6] +NETBIRD_JSON|path_sha256=83b78e00feeb099510b8ff7008845df75bc26d617d6d0011e01e62d6da957fca|value=E6+z+dlShOTEO+JOFoHKGcVHqnAcLZGz/Q8i9VAh5Go= +NETBIRD_JSON|path_sha256=f60a499031d0775f574a7541a318343ec232d9058df51fb122d90786e7e4d835|value=Connecting +NETBIRD_JSON|path_sha256=22c93528375c70c03debe2e7dbbba8b63205daedd81b5785c90903b48729e470|value=2026-09-24T[IPV6].926485532+03:00 +NETBIRD_JSON|path_sha256=0f1f1de24e138953d23d453ca5c2107709abce3a66dc83d86590db5a5b2106bf|value=- +NETBIRD_JSON|path_sha256=bbb7054e5bc8316d34a6361014fce93781407132b089ac8c0227a4e73681f720|value= +NETBIRD_JSON|path_sha256=2c7753650b2104d256bbab68e5dffe644077e34a60fbef115b13da287c2c458b|value= +NETBIRD_JSON|path_sha256=3f4f797eb572f9538ea32803fc33e3e4484dc6539739a550cf3d85b3a9645eb4|value= +ROUTING_VIEW|name=RULE4|rc=0|lines=7|sha256=1b58f518e6616a36df39ac0ccaf9ece7cb2b39d9f4b226d75a17839d5e0373ad +ROUTING_RULE4|0: from all lookup local +ROUTING_RULE4|100: from [ADDR] lookup main +ROUTING_RULE4|101: from [ADDR] lookup 17777 +ROUTING_RULE4|105: from all lookup main suppress_prefixlength 0 +ROUTING_RULE4|110: not from all fwmark 0x1bd00 lookup 7120 +ROUTING_RULE4|32766: from all lookup main +ROUTING_RULE4|32767: from all lookup default +ROUTING_VIEW|name=RULE6|rc=0|lines=4|sha256=084928feb354be1f5bc19a4e726f8633720b2d0f1c47ae3240f7839b2a369b19 +ROUTING_RULE6|0: from all lookup local +ROUTING_RULE6|105: from all lookup main suppress_prefixlength 0 +ROUTING_RULE6|110: not from all fwmark 0x1bd00 lookup 7120 +ROUTING_RULE6|32766: from all lookup main +ROUTING_VIEW|name=TABLE7120_4|rc=0|lines=1|sha256=47caf134646621d5b98f8b57df342b12d9ee4d1934eae893f5de787744ee72e4 +ROUTING_TABLE7120_4|default dev wt0 +ROUTING_VIEW|name=TABLE7120_6|rc=0|lines=1|sha256=2a5ee430739c900b7bed73ca983a83e00a763cde6cc22d9f34bf5aaba9257dc3 +ROUTING_TABLE7120_6|default dev wt0 metric 1024 pref medium +WT0_LINK_RC=0 +WT0_OPERSTATE=UNKNOWN +WT0_MTU=1280 +WT0_FLAGS=POINTOPOINT,NOARP,UP,LOWER_UP +NFT_RC=0 +NFT_NETBIRD_RELEVANT_COUNT=47 +NFT_NETBIRD| oifname "wt0" ct state related,established counter packets 733 bytes 194838 accept +NFT_NETBIRD| iifname "wt0" counter packets 688 bytes 510598 accept +NFT_NETBIRD| iifname "wt0" counter packets 36248 bytes 41371245 accept +NFT_NETBIRD| ip saddr [ADDR] iifname "wt0" ip protocol tcp tcp dport { 80, 443 } counter packets 3302601 bytes 531568845 accept +NFT_NETBIRD| oifname "wt0" ct state related,established counter packets 0 bytes 0 accept +NFT_NETBIRD| iifname "wt0" counter packets 0 bytes 0 accept +NFT_NETBIRD| iifname "wt0" counter packets 0 bytes 0 accept +NFT_NETBIRD|table ip netbird { +NFT_NETBIRD| chain netbird-rt-fwd { +NFT_NETBIRD| chain netbird-rt-postrouting { +NFT_NETBIRD| meta mark 0x0001bd22 oifname "wt0" counter packets 0 bytes 0 masquerade +NFT_NETBIRD| chain netbird-rt-redirect { +NFT_NETBIRD| chain netbird-mangle-postrouting { +NFT_NETBIRD| oifname "wt0" ct state new ct mark set 0x0001bd11 +NFT_NETBIRD| chain netbird-mangle-prerouting { +NFT_NETBIRD| iifname "wt0" ct state new ct mark set 0x0001bd10 +NFT_NETBIRD| iifname "wt0" ip saddr @nb0000001 fib daddr type local meta mark set 0x0001bd20 +NFT_NETBIRD| chain netbird-mangle-forward { +NFT_NETBIRD| oifname "wt0" tcp flags syn counter packets 112 bytes 6720 tcp option maxseg size > 1240 tcp option maxseg size set 1240 +NFT_NETBIRD| chain netbird-acl-input-rules { +NFT_NETBIRD| chain netbird-acl-input-filter { +NFT_NETBIRD| iifname "wt0" jump netbird-acl-input-rules +NFT_NETBIRD| iifname "wt0" drop +NFT_NETBIRD| chain netbird-acl-forward-filter { +NFT_NETBIRD| iifname "wt0" jump netbird-rt-fwd +NFT_NETBIRD| iifname "wt0" drop +NFT_NETBIRD| chain netbird-raw-out { +NFT_NETBIRD| chain netbird-raw-pre { +NFT_NETBIRD|table ip6 netbird { +NFT_NETBIRD| chain netbird-rt-fwd { +NFT_NETBIRD| chain netbird-rt-postrouting { +NFT_NETBIRD| meta mark 0x0001bd22 oifname "wt0" counter packets 0 bytes 0 masquerade +NFT_NETBIRD| chain netbird-rt-redirect { +NFT_NETBIRD| chain netbird-mangle-postrouting { +NFT_NETBIRD| oifname "wt0" ct state new ct mark set 0x0001bd11 +NFT_NETBIRD| chain netbird-mangle-prerouting { +NFT_NETBIRD| iifname "wt0" ct state new ct mark set 0x0001bd10 +NFT_NETBIRD| iifname "wt0" ip6 saddr @nb0000001 fib daddr type local meta mark set 0x0001bd20 +NFT_NETBIRD| chain netbird-mangle-forward { +NFT_NETBIRD| oifname "wt0" tcp flags syn counter packets 0 bytes 0 tcp option maxseg size > 1220 tcp option maxseg size set 1220 +NFT_NETBIRD| chain netbird-acl-input-rules { +NFT_NETBIRD| chain netbird-acl-input-filter { +NFT_NETBIRD| iifname "wt0" jump netbird-acl-input-rules +NFT_NETBIRD| iifname "wt0" drop +NFT_NETBIRD| chain netbird-acl-forward-filter { +NFT_NETBIRD| iifname "wt0" jump netbird-rt-fwd +NFT_NETBIRD| iifname "wt0" drop +NETBIRD_JOURNAL_RC=0 +NETBIRD_JOURNAL_RELEVANT_COUNT=0 +PUBLIC_ROUTE_GET|family=v4|rc=0|sha256=b1bac959b7f164a915a16d2128198deec0f9d739449bd8398fdf4fa4017159fa +PUBLIC_ROUTE_GET_LINE|family=v4|[ADDR] dev wt0 table 7120 src [ADDR] uid 0 +PUBLIC_ROUTE_GET|family=v6|rc=0|sha256=72b49fa2af3fc9123bcb7f2e4b98dfcbff4c61fd8bf4a3d021bc409d158c39bd +PUBLIC_ROUTE_GET_LINE|family=v6|[IPV6] from [IPV6] dev wt0 table 7120 src [IPV6] metric 1024 pref medium +MAIN_TABLE_ROUTE_GET_RC=1 +MAIN_TABLE_ROUTE_GET_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 +EDGE_NETBIRD_EGRESS_END=1 +DECISION=PASS_MOLDOVA_1164_EDGE_NETBIRD_EGRESS_RCA_COLLECTED +NEXT_GATE=READ_EXACT_1164_AND_CLASSIFY_MOLDOVA_EXIT_DEPENDENCY +TASK_RESULT=PASS_MOLDOVA_EDGE_NETBIRD_EGRESS_RCA +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} +WORKERS2_MOLDOVA_EDGE_NETBIRD_EGRESS_RCA_END=1 + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index 6d2c1d63..eb4298ff 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,19 +1,19 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-EGRESS-PATH-RCA-1163R1", + "command_id": "SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1", "status": "OK", "rc": 0, "host": "pve01", "mode": "read-only", - "component": "homelab-moldova-edge-egress-path-rca", - "started_at_utc": "2026-09-23T23:37:12Z", - "finished_at_utc": "2026-09-23T23:37:16Z", + "component": "homelab-moldova-edge-netbird-egress-rca", + "started_at_utc": "2026-09-23T23:41:13Z", + "finished_at_utc": "2026-09-23T23:41:17Z", "reference_register_checked": true, "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", "error_register_checked": true, "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", - "command_sha256": "4dd736263e0e25b3d31d60e7b675853bd03788ccdef665c1273de9f2a4d83e72", + "command_sha256": "31d3e9189305dd16c8be28fb7e42e00b47db6b63b8c826758c373859f18db9af", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, @@ -30,9 +30,9 @@ "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "78f1ea4cf748ca9ae58d41b22a7504d75b7e4919a270dcbe19dd061ff42739d1", - "sanitized_output_sha256": "78f1ea4cf748ca9ae58d41b22a7504d75b7e4919a270dcbe19dd061ff42739d1", + "raw_evidence_sha256": "7ed7b1b9bf78ef99af59d64634ea8ae43e76d1fe9515c6fc609085da318823e1", + "sanitized_output_sha256": "7ed7b1b9bf78ef99af59d64634ea8ae43e76d1fe9515c6fc609085da318823e1", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "WORKERS2_MOLDOVA_EDGE_EGRESS_PATH_RCA_BEGIN=1\nCOMMAND_ID=SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-EGRESS-PATH-RCA-1163R1\nMODE=read-only\nCOMPONENT=homelab-moldova-edge-egress-path-rca\nMUTATION_BOUNDARY=NONE;PVE03_VM130_CONFIG_LINK_FIREWALL_PLUS_EDGE_GUEST_ROUTE_FIREWALL_RCA;NO_NETWORK_CHANGE;NO_VM_STATE_CHANGE;NO_DNS_WRITE;NO_PROVIDER_MUTATION;NO_MOLDOVA_CONNECTION;NO_SYSTEMD_ACTION;NO_GIT_WRITE;NO_SECRET_VALUE_OUTPUT\nPREDECESSOR_1162=PASS_EDGE_NO_TCP443_TO_CLOUDFLARE\nHISTORICAL_705R3=EDGE_CONTROL_PATH_READY_VM130_PVE03\nCARRIER_BASELINE=KNOWN_GOOD_1137_BYTE_SEMANTICS\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nTARGETS_SHA256=5cba5f1e14c65211c9fab6d11594c19279ab68369b4db3f7283708c368348288\nMD_RELAY_COUNT=1\nMD_RELAY_ENABLED=false\nCLUSTER_QUERY_RC=0\nEDGE_VM_MATCH_COUNT=1\nEDGE_VM_VMID=130\nEDGE_VM_NODE=pve03\nEDGE_VM_STATUS=running\nPVE03_PROBE_RC=0\nPVE03_PROBE_STDERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nPVE03_EDGE_PATH_BEGIN=1\nPVE03_HOST=pve03\nPVE03_EUID=0\nVM_STATUS=running\nVM_CONFIG_SHA256=eb283b95f5a89329cb433e7fca33e81e25f97caa7f662a7ad303c345ae1832b8\nVM_NET0_PRESENT=true\nVM_NET0_BRIDGE=vmbr0\nVM_NET0_FIREWALL=1\nVM_NET0_LINK_DOWN=0\nVM_NET0_MAC_SHA256=a6abbf31945b0b0723cdfeb74d33e2734f40f892962894276825cb8d41f2fdda\nHOST_LINK|name=tap130i0|present=true|state=unknown|master=fwbr130i0\nHOST_LINK|name=fwln130i0|present=true|state=up|master=fwbr130i0\nHOST_LINK|name=fwpr130p0|present=true|state=up|master=vmbr0\nHOST_LINK|name=fwbr130i0|present=true|state=up|master=master\nHOST_BRIDGE|name=vmbr0|state=up\nVM_FIREWALL_FILE_EXISTS=true\nVM_FIREWALL_FILE_SHA256=09e3beaba29b0d84e7bbbc2da490b924a763de3e3305fd3346697faa4b2422cb\nVM_FIREWALL_LINE|3:policy_in: ACCEPT\nVM_FIREWALL_LINE|4:policy_out: ACCEPT\nVM_FIREWALL_LINE|6:[RULES]\nVM_FIREWALL_LINE|7:OUT DROP -dest [ADDR] -log nolog\nVM_FIREWALL_LINE|8:OUT DROP -dest [ADDR] -log nolog\nVM_FIREWALL_LINE|9:OUT DROP -dest [ADDR] -log nolog\nPVE03_NFT_LINE_COUNT=1\nPVE03_IPTABLES-SAVE|-A FORWARD -i wt0 -m conntrack --ctstate DNAT -m mark ! --mark 0x1bd20 -j DROP\nPVE03_IPTABLES-SAVE|:PVEFW-Drop - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-DropBroadcast - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-FORWARD - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-FWBR-IN - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-FWBR-OUT - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-HOST-IN - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-HOST-OUT - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-INPUT - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-OUTPUT - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-Reject - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-SET-ACCEPT-MARK - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-logflags - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-reject - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-smurflog - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-smurfs - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-tcpflags - [0:0]\nPVE03_IPTABLES-SAVE|:tap130i0-IN - [0:0]\nPVE03_IPTABLES-SAVE|:tap130i0-OUT - [0:0]\nPVE03_IPTABLES-SAVE|-A INPUT -i wt0 -j DROP\nPVE03_IPTABLES-SAVE|-A INPUT -j PVEFW-INPUT\nPVE03_IPTABLES-SAVE|-A FORWARD -i wt0 -j DROP\nPVE03_IPTABLES-SAVE|-A FORWARD -j PVEFW-FORWARD\nPVE03_IPTABLES-SAVE|-A OUTPUT -j PVEFW-OUTPUT\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -j PVEFW-DropBroadcast\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -p icmp -m icmp --icmp-type 3/4 -j ACCEPT\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -p icmp -m icmp --icmp-type 11 -j ACCEPT\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -m conntrack --ctstate INVALID -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m multiport --dports 135,445 -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m udp --dport 137:139 -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m udp --sport 137 --dport 1024:65535 -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -p tcp -m multiport --dports 135,139,445 -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m udp --dport 1900 -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m udp --sport 53 -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -m comment --comment \"PVESIG:83WlR/a4wLbmURFqMQT3uJSgIG8\"\nPVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -m addrtype --dst-type BROADCAST -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -m addrtype --dst-type MULTICAST -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -m addrtype --dst-type ANYCAST -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -d [ADDR]/4 -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -m comment --comment \"PVESIG:NyjHNAtFbkH7WGLamPpdVnxHy4w\"\nPVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m conntrack --ctstate INVALID -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nPVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m physdev --physdev-in fwln+ --physdev-is-bridged -j PVEFW-FWBR-IN\nPVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m physdev --physdev-out fwln+ --physdev-is-bridged -j PVEFW-FWBR-OUT\nPVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m comment --comment \"PVESIG:qnNexOcGa+y+jebd4dAUqFSp5nw\"\nPVE03_IPTABLES-SAVE|-A PVEFW-FWBR-IN -m conntrack --ctstate INVALID,NEW -j PVEFW-smurfs\nPVE03_IPTABLES-SAVE|-A PVEFW-FWBR-IN -m physdev --physdev-out tap130i0 --physdev-is-bridged -j tap130i0-IN\nPVE03_IPTABLES-SAVE|-A PVEFW-FWBR-IN -m physdev --physdev-out tap190i0 --physdev-is-bridged -j tap190i0-IN\nPVE03_IPTABLES-SAVE|-A PVEFW-FWBR-IN -m comment --comment \"PVESIG:9OsF92MfiIODIzcUNIrKOmVOkVk\"\nPVE03_IPTABLES-SAVE|-A PVEFW-FWBR-OUT -m physdev --physdev-in tap130i0 --physdev-is-bridged -j tap130i0-OUT\nPVE03_IPTABLES-SAVE|-A PVEFW-FWBR-OUT -m physdev --physdev-in tap190i0 --physdev-is-bridged -j tap190i0-OUT\nPVE03_IPTABLES-SAVE|-A PVEFW-FWBR-OUT -m comment --comment \"PVESIG:rZNhlvxx7SPSwyB4BNDP7aliiPU\"\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -i lo -j ACCEPT\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate INVALID -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate INVALID,NEW -j PVEFW-smurfs\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p 2 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/24 -p tcp -m tcp --dport 22 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/24 -p tcp -m tcp --dport 8006 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/24 -p tcp -m tcp --dport 9100 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/24 -p tcp -m tcp --dport 9101 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/10 -p tcp -m tcp --dport 22 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/10 -p tcp -m tcp --dport 8006 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p icmp -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 8006 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 5900:5999 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 3128 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 22 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 60000:60050 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -d [ADDR]/32 -p udp -m udp --dport 5404:5405 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -d [ADDR]/32 -p udp -m udp --dport 5404:5405 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -j PVEFW-Drop\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -m comment --comment \"PVESIG:E/DUTOuKiQolUkKtABHBSyIB6Q4\"\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -o lo -j ACCEPT\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -m conntrack --ctstate INVALID -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -p 2 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -d [ADDR]/24 -p tcp -m tcp --dport 8006 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -d [ADDR]/24 -p tcp -m tcp --dport 22 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -d [ADDR]/24 -p tcp -m tcp --dport 5900:5999 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -d [ADDR]/24 -p tcp -m tcp --dport 3128 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -s [ADDR]/32 -d [ADDR]/32 -p udp -m udp --dport 5404:5405 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -s [ADDR]/32 -d [ADDR]/32 -p udp -m udp --dport 5404:5405 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -m comment --comment \"PVESIG:1eYE8DBaQG01lXgrEFYwctByTNQ\"\nPVE03_IPTABLES-SAVE|-A PVEFW-INPUT -j PVEFW-HOST-IN\nPVE03_IPTABLES-SAVE|-A PVEFW-INPUT -m comment --comment \"PVESIG:+5iMmLaxKXynOB/+5xibfx7WhFk\"\nPVE03_IPTABLES-SAVE|-A PVEFW-OUTPUT -j PVEFW-HOST-OUT\nPVE03_IPTABLES-SAVE|-A PVEFW-OUTPUT -m comment --comment \"PVESIG:LjHoZeSSiWAG3+2ZAyL/xuEehd0\"\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -j PVEFW-DropBroadcast\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -p icmp -m icmp --icmp-type 3/4 -j ACCEPT\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -p icmp -m icmp --icmp-type 11 -j ACCEPT\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -m conntrack --ctstate INVALID -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m multiport --dports 135,445 -j PVEFW-reject\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m udp --dport 137:139 -j PVEFW-reject\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m udp --sport 137 --dport 1024:65535 -j PVEFW-reject\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -p tcp -m multiport --dports 135,139,445 -j PVEFW-reject\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m udp --dport 1900 -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m udp --sport 53 -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -m comment --comment \"PVESIG:h3DyALVslgH5hutETfixGP08w7c\"\nPVE03_IPTABLES-SAVE|-A PVEFW-SET-ACCEPT-MARK -j MARK --set-xmark 0x80000000/0x80000000\nPVE03_IPTABLES-SAVE|-A PVEFW-SET-ACCEPT-MARK -m comment --comment \"PVESIG:Hg/OIgIwJChBUcWU8Xnjhdd2jUY\"\nPVE03_IPTABLES-SAVE|-A PVEFW-logflags -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-logflags -m comment --comment \"PVESIG:MN4PH1oPZeABMuWr64RrygPfW7A\"\nPVE03_IPTABLES-SAVE|-A PVEFW-reject -m addrtype --dst-type BROADCAST -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-reject -s [ADDR]/4 -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-reject -p icmp -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-reject -p tcp -j REJECT --reject-with tcp-reset\nPVE03_IPTABLES-SAVE|-A PVEFW-reject -p udp -j REJECT --reject-with icmp-port-unreachable\nPVE03_IPTABLES-SAVE|-A PVEFW-reject -p icmp -j REJECT --reject-with icmp-host-unreachable\nPVE03_IPTABLES-SAVE|-A PVEFW-reject -j REJECT --reject-with icmp-host-prohibited\nPVE03_IPTABLES-SAVE|-A PVEFW-reject -m comment --comment \"PVESIG:Jlkrtle1mDdtxDeI9QaDSL++Npc\"\nPVE03_IPTABLES-SAVE|-A PVEFW-smurflog -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-smurflog -m comment --comment \"PVESIG:2gfT1VMkfr0JL6OccRXTGXo+1qk\"\nPVE03_IP6TABLES-SAVE|-A FORWARD -i wt0 -m conntrack --ctstate DNAT -m mark ! --mark 0x1bd20 -j DROP\nPVE03_IP6TABLES-SAVE|:PVEFW-Drop - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-DropBroadcast - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-FORWARD - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-FWBR-IN - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-FWBR-OUT - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-HOST-IN - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-HOST-OUT - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-INPUT - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-OUTPUT - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-Reject - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-SET-ACCEPT-MARK - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-logflags - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-reject - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-tcpflags - [0:0]\nPVE03_IP6TABLES-SAVE|:tap130i0-IN - [0:0]\nPVE03_IP6TABLES-SAVE|:tap130i0-OUT - [0:0]\nPVE03_IP6TABLES-SAVE|-A INPUT -i wt0 -j DROP\nPVE03_IP6TABLES-SAVE|-A INPUT -j PVEFW-INPUT\nPVE03_IP6TABLES-SAVE|-A FORWARD -i wt0 -j DROP\nPVE03_IP6TABLES-SAVE|-A FORWARD -j PVEFW-FORWARD\nPVE03_IP6TABLES-SAVE|-A OUTPUT -j PVEFW-OUTPUT\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p tcp -m tcp --dport 43 -j PVEFW-reject\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -j PVEFW-DropBroadcast\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p ipv6-icmp -m icmp6 --icmpv6-type 1 -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p ipv6-icmp -m icmp6 --icmpv6-type 3 -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p ipv6-icmp -m icmp6 --icmpv6-type 2 -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -m conntrack --ctstate INVALID -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m multiport --dports 135,445 -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m udp --dport 137:139 -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m udp --sport 137 --dport 1024:65535 -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p tcp -m multiport --dports 135,139,445 -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m udp --dport 1900 -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m udp --sport 53 -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -m comment --comment \"PVESIG:Jb79Uw7z1vZglIcV7QXA5uY/nbk\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-DropBroadcast -d ff00::/8 -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-DropBroadcast -m comment --comment \"PVESIG:8Krk5Nh8pDZOOc7BQAbM6PlyFSU\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m conntrack --ctstate INVALID -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m physdev --physdev-in fwln+ --physdev-is-bridged -j PVEFW-FWBR-IN\nPVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m physdev --physdev-out fwln+ --physdev-is-bridged -j PVEFW-FWBR-OUT\nPVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m comment --comment \"PVESIG:qnNexOcGa+y+jebd4dAUqFSp5nw\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-IN -m physdev --physdev-out tap130i0 --physdev-is-bridged -j tap130i0-IN\nPVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-IN -m physdev --physdev-out tap190i0 --physdev-is-bridged -j tap190i0-IN\nPVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-IN -m comment --comment \"PVESIG:SN6fTaV+kY20ebDQ/eXdXf9FYBE\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-OUT -m physdev --physdev-in tap130i0 --physdev-is-bridged -j tap130i0-OUT\nPVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-OUT -m physdev --physdev-in tap190i0 --physdev-is-bridged -j tap190i0-OUT\nPVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-OUT -m comment --comment \"PVESIG:rZNhlvxx7SPSwyB4BNDP7aliiPU\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -i lo -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate INVALID -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p ipv6-icmp -m icmp6 --icmpv6-type 136 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p 2 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 8006 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 5900:5999 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 3128 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 22 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 60000:60050 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -j PVEFW-Drop\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -m comment --comment \"PVESIG:t+/LTT8OHyoSgF5i9Hox+PZEud4\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -o lo -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -m conntrack --ctstate INVALID -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -p ipv6-icmp -m icmp6 --icmpv6-type 136 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -p 2 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -m comment --comment \"PVESIG:br2bPbA9ZjuHOMNhV8tfLRw1mAs\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-INPUT -j PVEFW-HOST-IN\nPVE03_IP6TABLES-SAVE|-A PVEFW-INPUT -m comment --comment \"PVESIG:+5iMmLaxKXynOB/+5xibfx7WhFk\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-OUTPUT -j PVEFW-HOST-OUT\nPVE03_IP6TABLES-SAVE|-A PVEFW-OUTPUT -m comment --comment \"PVESIG:LjHoZeSSiWAG3+2ZAyL/xuEehd0\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p tcp -m tcp --dport 43 -j PVEFW-reject\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -j PVEFW-DropBroadcast\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p ipv6-icmp -m icmp6 --icmpv6-type 1 -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p ipv6-icmp -m icmp6 --icmpv6-type 3 -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p ipv6-icmp -m icmp6 --icmpv6-type 2 -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -m conntrack --ctstate INVALID -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m multiport --dports 135,445 -j PVEFW-reject\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m udp --dport 137:139 -j PVEFW-reject\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m udp --sport 137 --dport 1024:65535 -j PVEFW-reject\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p tcp -m multiport --dports 135,139,445 -j PVEFW-reject\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m udp --dport 1900 -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m udp --sport 53 -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -m comment --comment \"PVESIG:aL1nrxJk/u3XmTb3Am2eaM/3yCM\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-SET-ACCEPT-MARK -j MARK --set-xmark 0x80000000/0x80000000\nPVE03_IP6TABLES-SAVE|-A PVEFW-SET-ACCEPT-MARK -m comment --comment \"PVESIG:Hg/OIgIwJChBUcWU8Xnjhdd2jUY\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-logflags -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-logflags -m comment --comment \"PVESIG:MN4PH1oPZeABMuWr64RrygPfW7A\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-reject -p ipv6-icmp -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-reject -p tcp -j REJECT --reject-with tcp-reset\nPVE03_IP6TABLES-SAVE|-A PVEFW-reject -p udp -j REJECT --reject-with icmp6-port-unreachable\nPVE03_IP6TABLES-SAVE|-A PVEFW-reject -j REJECT --reject-with icmp6-adm-prohibited\nPVE03_IP6TABLES-SAVE|-A PVEFW-reject -m comment --comment \"PVESIG:etEECUYcgUdzuuO+LDP83pu0S8Y\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN,PSH,URG -g PVEFW-logflags\nPVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE -g PVEFW-logflags\nPVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --tcp-flags SYN,RST SYN,RST -g PVEFW-logflags\nPVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --tcp-flags FIN,SYN FIN,SYN -g PVEFW-logflags\nPVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --sport 0 --tcp-flags FIN,SYN,RST,ACK SYN -g PVEFW-logflags\nPVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -m comment --comment \"PVESIG:CMFojwNPqllyqD67NeI5m+bP5mo\"\nPVE03_IP6TABLES-SAVE|-A tap130i0-IN -j CONNMARK --set-xmark 0x82/0xffffffff\nPVE03_IP6TABLES-SAVE|-A tap130i0-IN -p udp -m udp --sport 547 --dport 546 -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A tap130i0-IN -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A tap130i0-IN -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A tap130i0-IN -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A tap130i0-IN -p ipv6-icmp -m icmp6 --icmpv6-type 136 -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A tap130i0-IN -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A tap130i0-IN -m comment --comment \"PVESIG:6BljBbDQyGrN4aDv7s9DGHcW7Gk\"\nPVE03_IP6TABLES-SAVE|-A tap130i0-OUT -j CONNMARK --set-xmark 0x82/0xffffffff\nPVE03_IP6TABLES-SAVE|-A tap130i0-OUT -p udp -m udp --sport 546 --dport 547 -g PVEFW-SET-ACCEPT-MARK\nPVE03_IP6TABLES-SAVE|-A tap130i0-OUT -m mac ! --mac-source bc:24:11:e1:f3:3c -j DROP\nPVE03_IP6TABLES-SAVE|-A tap130i0-OUT -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j DROP\nPVE03_IP6TABLES-SAVE|-A tap130i0-OUT -j MARK --set-xmark 0x0/0x80000000\nPVE03_DEFAULT_ROUTE_PRESENT=true\nPVE03_EDGE_PATH_END=1\nEDGE_QGA_TRANSPORT_RC=0\nEDGE_QGA_TRANSPORT_STDERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nEDGE_QGA_EXITCODE=0\nEDGE_QGA_ERR_BYTES=0\nEDGE_QGA_ERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nEDGE_GUEST_NETWORK_BEGIN=1\nEDGE_HOSTNAME=edge-vm\nEDGE_EUID=0\nIP_LINK_JSON_RC=0\nIP_LINK_COUNT=25\nLINK|name=lo|operstate=UNKNOWN|mtu=65536|up=true|master=none\nLINK|name=eth0|operstate=UP|mtu=1500|up=true|master=none\nLINK|name=wg-taftauto|operstate=UNKNOWN|mtu=1420|up=true|master=none\nLINK|name=wg-edge01|operstate=UNKNOWN|mtu=1420|up=true|master=none\nLINK|name=br-4d894f9e427b|operstate=DOWN|mtu=1500|up=true|master=none\nLINK|name=br-5f66e1018bdd|operstate=UP|mtu=1500|up=true|master=none\nLINK|name=br-8122fec51f39|operstate=UP|mtu=1500|up=true|master=none\nLINK|name=docker0|operstate=DOWN|mtu=1500|up=true|master=none\nLINK|name=br-915a81681c3e|operstate=UP|mtu=1500|up=true|master=none\nLINK|name=br-a4e31561a8d5|operstate=UP|mtu=1500|up=true|master=none\nLINK|name=br-d41b3e918fbc|operstate=UP|mtu=1500|up=true|master=none\nLINK|name=br-f43db13d76c4|operstate=UP|mtu=1500|up=true|master=none\nLINK|name=veth8fecc8f|operstate=UP|mtu=1500|up=true|master=br-f43db13d76c4\nLINK|name=veth6ebe603|operstate=UP|mtu=1500|up=true|master=br-915a81681c3e\nLINK|name=veth94bb505|operstate=UP|mtu=1500|up=true|master=br-a4e31561a8d5\nLINK|name=veth257d0f3|operstate=UP|mtu=1500|up=true|master=br-915a81681c3e\nLINK|name=vethf307a2b|operstate=UP|mtu=1500|up=true|master=br-5f66e1018bdd\nLINK|name=veth43ed72a|operstate=UP|mtu=1500|up=true|master=br-8122fec51f39\nLINK|name=vetha71fd0e|operstate=UP|mtu=1500|up=true|master=br-5f66e1018bdd\nLINK|name=veth52dc7f8|operstate=UP|mtu=1500|up=true|master=br-915a81681c3e\nIP_ADDR_JSON_RC=0\nADDR_COUNT|name=lo|v4=1|v6=1\nADDR_COUNT|name=eth0|v4=1|v6=1\nADDR_COUNT|name=wg-taftauto|v4=1|v6=0\nADDR_COUNT|name=wg-edge01|v4=1|v6=0\nADDR_COUNT|name=br-4d894f9e427b|v4=1|v6=0\nADDR_COUNT|name=br-5f66e1018bdd|v4=1|v6=1\nADDR_COUNT|name=br-8122fec51f39|v4=1|v6=1\nADDR_COUNT|name=docker0|v4=1|v6=1\nADDR_COUNT|name=br-915a81681c3e|v4=1|v6=1\nADDR_COUNT|name=br-a4e31561a8d5|v4=1|v6=1\nADDR_COUNT|name=br-d41b3e918fbc|v4=1|v6=1\nADDR_COUNT|name=br-f43db13d76c4|v4=1|v6=1\nADDR_COUNT|name=veth8fecc8f|v4=0|v6=1\nADDR_COUNT|name=veth6ebe603|v4=0|v6=1\nADDR_COUNT|name=veth94bb505|v4=0|v6=1\nADDR_COUNT|name=veth257d0f3|v4=0|v6=1\nADDR_COUNT|name=vethf307a2b|v4=0|v6=1\nADDR_COUNT|name=veth43ed72a|v4=0|v6=1\nADDR_COUNT|name=vetha71fd0e|v4=0|v6=1\nADDR_COUNT|name=veth52dc7f8|v4=0|v6=1\nIP_ROUTE_RC=0\nIP_ROUTE_LINE_COUNT=110\nROUTE|default dev wg-edge01 table 17777 scope link \nROUTE|default dev wt0 table 7120 \nROUTE|default via [ADDR] dev eth0 proto static \nROUTE|[ADDR]/24 dev wg-taftauto proto kernel scope link src [ADDR] \nROUTE|[ADDR]/30 dev wg-edge01 proto kernel scope link src [ADDR] \nROUTE|[ADDR]/28 dev br-915a81681c3e proto kernel scope link src [ADDR] \nROUTE|[ADDR]/16 dev wt0 proto kernel scope link src [ADDR] \nROUTE|[ADDR]/16 dev docker0 proto kernel scope link src [ADDR] linkdown \nROUTE|[ADDR]/16 dev br-4d894f9e427b proto kernel scope link src [ADDR] linkdown \nROUTE|[ADDR]/16 dev br-d41b3e918fbc proto kernel scope link src [ADDR] \nROUTE|[ADDR]/16 dev br-a4e31561a8d5 proto kernel scope link src [ADDR] \nROUTE|[ADDR] via [ADDR] dev eth0 src [ADDR] \nROUTE|[ADDR]/24 dev eth0 proto kernel scope link src [ADDR] \nROUTE|[ADDR]/20 dev br-f43db13d76c4 proto kernel scope link src [ADDR] \nROUTE|[ADDR]/20 dev br-8122fec51f39 proto kernel scope link src [ADDR] \nROUTE|[ADDR]/20 dev br-5f66e1018bdd proto kernel scope link src [ADDR] \nROUTE|local [ADDR] dev wg-taftauto table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev wg-taftauto table local proto kernel scope link src [ADDR] \nROUTE|local [ADDR] dev wg-edge01 table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev wg-edge01 table local proto kernel scope link src [ADDR] \nROUTE|local [ADDR] dev br-915a81681c3e table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev br-915a81681c3e table local proto kernel scope link src [ADDR] \nROUTE|local [ADDR] dev wt0 table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev wt0 table local proto kernel scope link src [ADDR] \nROUTE|local [ADDR]/8 dev lo table local proto kernel scope host src [ADDR] \nROUTE|local [ADDR] dev lo table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev lo table local proto kernel scope link src [ADDR] \nROUTE|local [ADDR] dev docker0 table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev docker0 table local proto kernel scope link src [ADDR] linkdown \nROUTE|local [ADDR] dev br-4d894f9e427b table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev br-4d894f9e427b table local proto kernel scope link src [ADDR] linkdown \nROUTE|local [ADDR] dev br-d41b3e918fbc table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev br-d41b3e918fbc table local proto kernel scope link src [ADDR] \nROUTE|local [ADDR] dev br-a4e31561a8d5 table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev br-a4e31561a8d5 table local proto kernel scope link src [ADDR] \nROUTE|local [ADDR] dev eth0 table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev eth0 table local proto kernel scope link src [ADDR] \nROUTE|local [ADDR] dev br-f43db13d76c4 table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev br-f43db13d76c4 table local proto kernel scope link src [ADDR] \nROUTE|local [ADDR] dev br-8122fec51f39 table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev br-8122fec51f39 table local proto kernel scope link src [ADDR] \nROUTE|local [ADDR] dev br-5f66e1018bdd table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev br-5f66e1018bdd table local proto kernel scope link src [ADDR] \nROUTE|default dev wt0 table 7120 metric 1024 pref medium\nROUTE|[IPV6]/64 dev wt0 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev eth0 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev veth8fecc8f proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev br-f43db13d76c4 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev veth6ebe603 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev br-915a81681c3e proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev veth94bb505 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev br-a4e31561a8d5 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev veth43ed72a proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev br-8122fec51f39 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev veth257d0f3 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev vethf307a2b proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev br-5f66e1018bdd proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev vetha71fd0e proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev veth52dc7f8 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev vethb6a364a proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev veth98c9c14 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev veth54c3c78 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev veth3eda058 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev br-d41b3e918fbc proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev docker0 proto kernel metric 256 linkdown pref medium\nROUTE|local [IPV6] dev lo table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev wt0 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev veth43ed72a table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev br-915a81681c3e table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev veth8fecc8f table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev veth257d0f3 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev vethb6a364a table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev br-f43db13d76c4 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev vethf307a2b table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev veth94bb505 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev veth98c9c14 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev br-8122fec51f39 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev br-a4e31561a8d5 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev br-d41b3e918fbc table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev veth3eda058 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev eth0 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev vetha71fd0e table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev veth54c3c78 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev veth52dc7f8 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev br-5f66e1018bdd table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev veth6ebe603 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev docker0 table local proto kernel metric 0 pref medium\nROUTE|multicast [IPV6]/8 dev eth0 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev wg-edge01 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev wg-taftauto table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev veth8fecc8f table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev br-f43db13d76c4 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev veth6ebe603 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev br-915a81681c3e table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev veth94bb505 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev br-a4e31561a8d5 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev veth43ed72a table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev br-8122fec51f39 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev veth257d0f3 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev vethf307a2b table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev br-5f66e1018bdd table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev vetha71fd0e table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev veth52dc7f8 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev vethb6a364a table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev veth98c9c14 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev veth54c3c78 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev veth3eda058 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev br-d41b3e918fbc table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev docker0 table local proto kernel metric 256 linkdown pref medium\nROUTE|multicast [IPV6]/8 dev wt0 table local proto kernel metric 256 pref medium\nIPV4_DEFAULT_ROUTE_COUNT=4\nDEFAULT4|dev=wg-edge01|gateway_sha256=NA|metric=NA\nDEFAULT4|dev=wt0|gateway_sha256=NA|metric=NA\nDEFAULT4|dev=eth0|gateway_sha256=4f9da1283166a1e9f4e6bc7dd240c76aef85772177f717f92abb6e8e2bb8de90|metric=NA\nDEFAULT4|dev=wt0|gateway_sha256=NA|metric=1024\nIP_RULE_RC=0\nRULE|0:\tfrom all lookup local\nRULE|100:\tfrom [ADDR] lookup main\nRULE|101:\tfrom [ADDR] lookup 17777\nRULE|105:\tfrom all lookup main suppress_prefixlength 0\nRULE|110:\tnot from all fwmark 0x1bd00 lookup 7120\nRULE|32766:\tfrom all lookup main\nRULE|32767:\tfrom all lookup default\nIPV6_ROUTE_RC=0\nIPV6_DEFAULT_ROUTE_COUNT=1\nDEFAULT6|default dev wt0 table 7120 metric 1024 pref medium\nROUTE_GET|family=v4|rc=0|out_sha256=b1bac959b7f164a915a16d2128198deec0f9d739449bd8398fdf4fa4017159fa|stderr_sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nROUTE_GET_LINE|family=v4|[ADDR] dev wt0 table 7120 src [ADDR] uid 0 \nROUTE_GET|family=v6|rc=0|out_sha256=72b49fa2af3fc9123bcb7f2e4b98dfcbff4c61fd8bf4a3d021bc409d158c39bd|stderr_sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nROUTE_GET_LINE|family=v6|[IPV6] from [IPV6] dev wt0 table 7120 src [IPV6] metric 1024 pref medium\nNEIGH_RC=0\nNEIGH_COUNT=26\nNEIGH_STATE|state=DELAY|count=1\nNEIGH_STATE|state=FAILED|count=3\nNEIGH_STATE|state=REACHABLE|count=9\nNEIGH_STATE|state=STALE|count=13\nRESOLV_EXISTS=true\nRESOLV_LINE_COUNT=23\nRESOLV_NAMESERVER_COUNT=1\nRESOLV_SEARCH_COUNT=1\nNETCFG_FILE_COUNT=1\nNETCFG|base=50-cloud-init.yaml|path_sha256=b9bc0da3b7c93f972715f97a7a4588b39d3b28d576358a5dafecc1c8a8e2958f|bytes=350|sha256=c23b699ba11e3c57f071346bc1e29cb33dd6de57b319452daed9145fd1b0ba66\nNETCFG_LINE|base=50-cloud-init.yaml|line=1|text=network:\nNETCFG_LINE|base=50-cloud-init.yaml|line=5|text= match:\nNETCFG_LINE|base=50-cloud-init.yaml|line=15|text= set-name: \"eth0\"\nNETCFG_LINE|base=50-cloud-init.yaml|line=16|text= routes:\nNFT_RC=0\nNFT_LINE_COUNT=333\nNFT_RELEVANT_COUNT=92\nNFT|\tchain FORWARD {\nNFT|\t\ttype filter hook forward priority filter; policy accept;\nNFT|\t\tcounter packets 4611557 bytes 828408916 jump DOCKER-FORWARD\nNFT|\t\tip daddr [ADDR] iifname != \"br-d41b3e918fbc\" oifname \"br-d41b3e918fbc\" tcp dport 8080 counter packets 0 bytes 0 accept\nNFT|\t\tip daddr [ADDR] iifname != \"br-5f66e1018bdd\" oifname \"br-5f66e1018bdd\" tcp dport 3100 counter packets 0 bytes 0 accept\nNFT|\t\tip daddr [ADDR] iifname != \"br-5f66e1018bdd\" oifname \"br-5f66e1018bdd\" tcp dport 12345 counter packets 0 bytes 0 accept\nNFT|\t\tip daddr [ADDR] iifname != \"br-a4e31561a8d5\" oifname \"br-a4e31561a8d5\" tcp dport 8080 counter packets 0 bytes 0 accept\nNFT|\t\tip daddr [ADDR] iifname != \"br-a4e31561a8d5\" oifname \"br-a4e31561a8d5\" tcp dport 7422 counter packets 0 bytes 0 accept\nNFT|\t\tip daddr [ADDR] iifname != \"br-f43db13d76c4\" oifname \"br-f43db13d76c4\" tcp dport 8080 counter packets 0 bytes 0 accept\nNFT|\t\tip daddr [ADDR] iifname != \"br-915a81681c3e\" oifname \"br-915a81681c3e\" tcp dport 2375 counter packets 0 bytes 0 accept\nNFT|\t\tiifname != \"br-4d894f9e427b\" oifname \"br-4d894f9e427b\" counter packets 0 bytes 0 drop\nNFT|\t\tiifname != \"br-5f66e1018bdd\" oifname \"br-5f66e1018bdd\" counter packets 0 bytes 0 drop\nNFT|\t\tiifname != \"br-8122fec51f39\" oifname \"br-8122fec51f39\" counter packets 0 bytes 0 drop\nNFT|\t\tiifname != \"br-915a81681c3e\" oifname \"br-915a81681c3e\" counter packets 0 bytes 0 drop\nNFT|\t\tiifname != \"br-a4e31561a8d5\" oifname \"br-a4e31561a8d5\" counter packets 0 bytes 0 drop\nNFT|\t\tiifname != \"br-d41b3e918fbc\" oifname \"br-d41b3e918fbc\" counter packets 0 bytes 0 drop\nNFT|\t\tiifname != \"br-f43db13d76c4\" oifname \"br-f43db13d76c4\" counter packets 0 bytes 0 drop\nNFT|\t\tiifname != \"docker0\" oifname \"docker0\" counter packets 0 bytes 0 drop\nNFT|\tchain DOCKER-FORWARD {\nNFT|\t\ttype filter hook input priority filter; policy accept;\nNFT|\t\tiifname != \"lo\" tcp dport 81 counter packets 0 bytes 0 drop\nNFT|\t\tip saddr [ADDR]/16 iifname \"wt0\" ip protocol tcp tcp dport { 80, 443 } counter packets 3302601 bytes 531568845 accept\nNFT|\t\ttype nat hook postrouting priority srcnat; policy accept;\nNFT|\t\tip daddr [ADDR] iifname != \"br-915a81681c3e\" tcp dport 2375 counter packets 0 bytes 0 dnat to [ADDR]:2375\nNFT|\t\tip daddr [ADDR] iifname != \"br-f43db13d76c4\" tcp dport 8081 counter packets 0 bytes 0 dnat to [ADDR]:8080\nNFT|\t\tip daddr [ADDR] iifname != \"br-a4e31561a8d5\" tcp dport 7422 counter packets 0 bytes 0 dnat to [ADDR]:7422\nNFT|\t\tip daddr [ADDR] iifname != \"br-a4e31561a8d5\" tcp dport 8088 counter packets 0 bytes 0 dnat to [ADDR]:8080\nNFT|\t\tip daddr [ADDR] iifname != \"br-5f66e1018bdd\" tcp dport 12345 counter packets 0 bytes 0 dnat to [ADDR]:12345\nNFT|\t\tip daddr [ADDR] iifname != \"br-5f66e1018bdd\" tcp dport 3100 counter packets 0 bytes 0 dnat to [ADDR]:3100\nNFT|\t\tip daddr [ADDR] iifname != \"br-d41b3e918fbc\" tcp dport 9999 counter packets 0 bytes 0 dnat to [ADDR]:8080\nNFT|\t\ttype nat hook prerouting priority dstnat; policy accept;\nNFT|\tchain OUTPUT {\nNFT|\t\ttype nat hook output priority dstnat; policy accept;\nNFT|\t\ttype nat hook prerouting priority dstnat; policy accept;\nNFT|\t\tiifname \"wg-edge01\" ip saddr [ADDR] ip daddr [ADDR] tcp dport { 3478, 3479, 5000, 5222, 5269, 5349, 5350 } dnat to [ADDR]\nNFT|\t\ttype nat hook postrouting priority srcnat; policy accept;\nNFT|\t\toifname \"eth0\" ip daddr [ADDR] tcp dport { 3478, 3479, 5000, 5222, 5269, 5349, 5350 } snat to [ADDR]\nNFT|\t\ttype nat hook prerouting priority dstnat; policy accept;\nNFT|\tchain OUTPUT {\nNFT|\t\ttype nat hook output priority dstnat; policy accept;\nNFT|\tchain DOCKER-FORWARD {\nNFT|\tchain FORWARD {\nNFT|\t\ttype filter hook forward priority filter; policy accept;\nNFT|\t\tcounter packets 0 bytes 0 jump DOCKER-FORWARD\nNFT|\t\ttype filter hook input priority filter; policy accept;\nNFT|\t\tiifname != \"lo\" tcp dport 81 counter packets 0 bytes 0 drop\nNFT|\t\ttype filter hook prerouting priority raw; policy accept;\nNFT|\t\tip daddr [ADDR] iifname != \"br-f43db13d76c4\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"br-915a81681c3e\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"br-a4e31561a8d5\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"br-8122fec51f39\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"br-5f66e1018bdd\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"br-915a81681c3e\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"lo\" tcp dport 2375 counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"lo\" tcp dport 8081 counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"br-5f66e1018bdd\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"lo\" tcp dport 7422 counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"lo\" tcp dport 8088 counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"br-915a81681c3e\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"br-915a81681c3e\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"lo\" tcp dport 12345 counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"br-915a81681c3e\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"lo\" tcp dport 3100 counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"br-915a81681c3e\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"br-d41b3e918fbc\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"lo\" tcp dport 9999 counter packets 0 bytes 0 drop\nNFT|\t\ttype nat hook postrouting priority srcnat - 1; policy accept;\nNFT|\t\ttype nat hook prerouting priority dstnat; policy accept;\nNFT|\t\ttype filter hook postrouting priority mangle; policy accept;\nNFT|\t\ttype filter hook prerouting priority mangle; policy accept;\nNFT|\tchain netbird-mangle-forward {\nNFT|\t\ttype filter hook forward priority mangle; policy accept;\nNFT|\t\toifname \"wt0\" tcp flags syn counter packets 91 bytes 5460 tcp option maxseg size > 1240 tcp option maxseg size set 1240\nNFT|\t\ttype filter hook input priority filter; policy accept;\nNFT|\t\tiifname \"wt0\" drop\nNFT|\tchain netbird-acl-forward-filter {\nNFT|\t\ttype filter hook forward priority filter; policy accept;\nNFT|\t\tiifname \"wt0\" drop\nNFT|\t\ttype filter hook output priority raw; policy accept;\nNFT|\t\ttype filter hook prerouting priority raw; policy accept;\nNFT|\t\ttype nat hook postrouting priority srcnat - 1; policy accept;\nNFT|\t\ttype nat hook prerouting priority dstnat; policy accept;\nNFT|\t\ttype filter hook postrouting priority mangle; policy accept;\nNFT|\t\ttype filter hook prerouting priority mangle; policy accept;\nNFT|\tchain netbird-mangle-forward {\nNFT|\t\ttype filter hook forward priority mangle; policy accept;\nNFT|\t\toifname \"wt0\" tcp flags syn counter packets 0 bytes 0 tcp option maxseg size > 1220 tcp option maxseg size set 1220\nNFT|\t\ttype filter hook input priority filter; policy accept;\nNFT|\t\tiifname \"wt0\" drop\nNFT|\tchain netbird-acl-forward-filter {\nNFT|\t\ttype filter hook forward priority filter; policy accept;\nNFT|\t\tiifname \"wt0\" drop\nIPTABLES4_RC=0\nIPTABLES4_RELEVANT_COUNT=30\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-f43db13d76c4 -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-a4e31561a8d5 -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-8122fec51f39 -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-5f66e1018bdd -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 2375 -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 8081 -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-5f66e1018bdd -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 7422 -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 8088 -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 12345 -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 3100 -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-d41b3e918fbc -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 9999 -j DROP\nIPTABLES4|-A INPUT ! -i lo -p tcp -m tcp --dport 81 -j DROP\nIPTABLES4|-A INPUT -s [ADDR]/16 -i wt0 -p tcp -m multiport --dports 80,443 -j ACCEPT\nIPTABLES4|-A DOCKER ! -i br-4d894f9e427b -o br-4d894f9e427b -j DROP\nIPTABLES4|-A DOCKER ! -i br-5f66e1018bdd -o br-5f66e1018bdd -j DROP\nIPTABLES4|-A DOCKER ! -i br-8122fec51f39 -o br-8122fec51f39 -j DROP\nIPTABLES4|-A DOCKER ! -i br-915a81681c3e -o br-915a81681c3e -j DROP\nIPTABLES4|-A DOCKER ! -i br-a4e31561a8d5 -o br-a4e31561a8d5 -j DROP\nIPTABLES4|-A DOCKER ! -i br-d41b3e918fbc -o br-d41b3e918fbc -j DROP\nIPTABLES4|-A DOCKER ! -i br-f43db13d76c4 -o br-f43db13d76c4 -j DROP\nIPTABLES4|-A DOCKER ! -i docker0 -o docker0 -j DROP\nIPTABLES4|:PREROUTING ACCEPT [3066759:284433816]\nIPTABLES6_RC=0\nIPTABLES6_RELEVANT_COUNT=1\nIPTABLES6|-A INPUT ! -i lo -p tcp -m tcp --dport 81 -j DROP\nNET_SERVICE|name=systemd-networkd.service|active=active\nNET_SERVICE|name=NetworkManager.service|active=inactive\nNET_SERVICE|name=networking.service|active=inactive\nEDGE_GUEST_NETWORK_END=1\nDECISION=PASS_MOLDOVA_1163_EDGE_EGRESS_PATH_RCA_COLLECTED\nNEXT_GATE=READ_EXACT_1163_AND_CHOOSE_DNS_AUTHORITY_PATH\nTASK_RESULT=PASS_MOLDOVA_EDGE_EGRESS_PATH_RCA\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-EGRESS-PATH-RCA-1163R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\nWORKERS2_MOLDOVA_EDGE_EGRESS_PATH_RCA_END=1\n" + "output": "WORKERS2_MOLDOVA_EDGE_NETBIRD_EGRESS_RCA_BEGIN=1\nCOMMAND_ID=SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1\nMODE=read-only\nCOMPONENT=homelab-moldova-edge-netbird-egress-rca\nMUTATION_BOUNDARY=NONE;EDGE_VM_NETBIRD_PEER_ROUTE_NETWORK_POLICY_AND_JOURNAL_RCA_ONLY;NO_NETWORK_CHANGE;NO_NETBIRD_MUTATION;NO_VM_STATE_CHANGE;NO_DNS_WRITE;NO_PROVIDER_MUTATION;NO_MOLDOVA_CONNECTION;NO_SYSTEMD_ACTION;NO_GIT_WRITE;NO_SECRET_VALUE_OUTPUT\nPREDECESSOR_1163=PASS_EDGE_PUBLIC_ROUTE_DECISION_VIA_WT0_TABLE_7120\nCARRIER_BASELINE=KNOWN_GOOD_1137_BYTE_SEMANTICS\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nTARGETS_SHA256=5cba5f1e14c65211c9fab6d11594c19279ab68369b4db3f7283708c368348288\nMD_RELAY_COUNT=1\nMD_RELAY_ENABLED=false\nCLUSTER_QUERY_RC=0\nEDGE_VM_MATCH_COUNT=1\nEDGE_VM_VMID=130\nEDGE_VM_NODE=pve03\nEDGE_VM_STATUS=running\nEDGE_QGA_TRANSPORT_RC=0\nEDGE_QGA_TRANSPORT_STDERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nEDGE_QGA_EXITCODE=0\nEDGE_QGA_ERR_BYTES=0\nEDGE_QGA_ERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nEDGE_NETBIRD_EGRESS_BEGIN=1\nEDGE_HOSTNAME=edge-vm\nEDGE_EUID=0\nEDGE_EPOCH=1790206874\nSERVICE|name=netbird.service|active=active\nSERVICE|name=netbird.service|enabled=enabled\nSERVICE|name=systemd-networkd.service|active=active\nSERVICE|name=systemd-networkd.service|enabled=enabled\nNETBIRD_VERSION_RC=0\nNETBIRD_VERSION=0.73.2\nNETBIRD_STATUS_DETAIL_RC=0\nNETBIRD_STATUS_DETAIL_BYTES=8694\nNETBIRD_STATUS_DETAIL_SHA256=cddf4549ddc3c862d7a7aa04645a745b06031ada6ba41ad0330c68b1d42ce0d9\nNETBIRD_STATUS_INTERESTING_COUNT=49\nNETBIRD_STATUS| Status: Connecting\nNETBIRD_STATUS| Relay server address: \nNETBIRD_STATUS| Networks: -\nNETBIRD_STATUS| Status: Connecting\nNETBIRD_STATUS| Relay server address: \nNETBIRD_STATUS| Networks: -\nNETBIRD_STATUS| Status: Connecting\nNETBIRD_STATUS| Relay server address: \nNETBIRD_STATUS| Networks: -\nNETBIRD_STATUS| Status: Connecting\nNETBIRD_STATUS| Relay server address: \nNETBIRD_STATUS| Networks: -\nNETBIRD_STATUS| Status: Connecting\nNETBIRD_STATUS| Relay server address: \nNETBIRD_STATUS| Networks: -\nNETBIRD_STATUS| Status: Connecting\nNETBIRD_STATUS| Relay server address: \nNETBIRD_STATUS| Networks: -\nNETBIRD_STATUS| Status: Connecting\nNETBIRD_STATUS| Relay server address: \nNETBIRD_STATUS| Networks: -\nNETBIRD_STATUS| Status: Connecting\nNETBIRD_STATUS| Relay server address: \nNETBIRD_STATUS| Networks: -\nNETBIRD_STATUS| Status: Connecting\nNETBIRD_STATUS| Relay server address: \nNETBIRD_STATUS| Networks: -\nNETBIRD_STATUS| Status: Connecting\nNETBIRD_STATUS| Relay server address: \nNETBIRD_STATUS| Networks: -\nNETBIRD_STATUS| Status: Connecting\nNETBIRD_STATUS| Relay server address: \nNETBIRD_STATUS| Networks: -\nNETBIRD_STATUS| Message: Default route added\nNETBIRD_STATUS| Message: Default route disconnected due to peer unreachability\nNETBIRD_STATUS| Message: Default route disconnected due to peer unreachability\nNETBIRD_STATUS| Message: Network map updated\nNETBIRD_STATUS| Message: Default route added\nNETBIRD_STATUS| Message: Default route added\nNETBIRD_STATUS| Message: Default route added\nNETBIRD_STATUS| Message: Default route added\nNETBIRD_STATUS| Message: Default route disconnected due to peer unreachability\nNETBIRD_STATUS| Message: Default route disconnected due to peer unreachability\nNETBIRD_STATUS|Management: Disconnected, reason: rpc error: code = Unavailable desc = error reading from server: EOF\nNETBIRD_STATUS|Signal: Disconnected, reason: rpc error: code = Unavailable desc = error reading from server: EOF\nNETBIRD_STATUS|Relays: \nNETBIRD_STATUS|FQDN: edge-vm.netbird.selfhosted\nNETBIRD_STATUS|Networks: -\nNETBIRD_STATUS|Peers count: 0/11 Connected\nPEER_BLOCK_COUNT=1\nPEER|fqdn=edge-vm.netbird.selfhosted|status=UNKNOWN|relay_present=false|networks=-\nMOLDOVA_RELAY_PEER_PRESENT=false\nMOLDOVA_RELAY_PEER_STATUS=ABSENT\nNETBIRD_CMD|name=ROUTES_LIST|rc=0|bytes=178|sha256=449171b786a12843333f14fc8e8eb1160a3077a1ff08e06cabd0dd4e90eb3a4a|stderr_sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nNETBIRD_CMD_LINE_COUNT|name=ROUTES_LIST|count=7\nNETBIRD_ROUTES_LIST|Available Networks:\nNETBIRD_ROUTES_LIST| - ID: edge-exit-relay-moldova\nNETBIRD_ROUTES_LIST| Network: [ADDR], [IPV6]\nNETBIRD_ROUTES_LIST| Status: Not Selected\nNETBIRD_ROUTES_LIST| - ID: internet-v4\nNETBIRD_ROUTES_LIST| Network: [ADDR], [IPV6]\nNETBIRD_ROUTES_LIST| Status: Selected\nNETBIRD_CMD|name=NETWORKS_LIST|rc=0|bytes=178|sha256=449171b786a12843333f14fc8e8eb1160a3077a1ff08e06cabd0dd4e90eb3a4a|stderr_sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nNETBIRD_CMD_LINE_COUNT|name=NETWORKS_LIST|count=7\nNETBIRD_NETWORKS_LIST|Available Networks:\nNETBIRD_NETWORKS_LIST| - ID: edge-exit-relay-moldova\nNETBIRD_NETWORKS_LIST| Network: [ADDR], [IPV6]\nNETBIRD_NETWORKS_LIST| Status: Not Selected\nNETBIRD_NETWORKS_LIST| - ID: internet-v4\nNETBIRD_NETWORKS_LIST| Network: [ADDR], [IPV6]\nNETBIRD_NETWORKS_LIST| Status: Selected\nNETBIRD_STATUS_JSON_RC=0\nNETBIRD_STATUS_JSON_BYTES=10251\nNETBIRD_STATUS_JSON_SHA256=ae997e3a2b072bf7da4afa5274bd86824449644b8f17ba6d7439038bf6b9f461\nNETBIRD_STATUS_JSON_PARSE=true\nNETBIRD_STATUS_JSON_TOPKEYS=cliVersion,daemonStatus,daemonVersion,dnsServers,events,forwardingRules,fqdn,lazyConnectionEnabled,management,netbirdIp,netbirdIpv6,networks,peers,profileName,publicKey,quantumResistance,quantumResistancePermissive,relays,signal,sshServer,usesKernelInterface,wireguardPort\nNETBIRD_STATUS_JSON_SELECTED_COUNT=80\nNETBIRD_JSON|path_sha256=679566c8dc90684de679e276220746522687f2d7e9b4537dc8a97954f01290be|value=11\nNETBIRD_JSON|path_sha256=4a9cb2135f8edb9ab83136dbb735b5de79ae1ee18f725d7fbeba840ba962b603|value=0\nNETBIRD_JSON|path_sha256=cad0d10b6d77e2f12265ce446f70de2d90dbb61594f248b1efe6093a2b6b0067|value=pve02.netbird.selfhosted\nNETBIRD_JSON|path_sha256=f75b6abe4f98877764a72f45a15e7ec41a0b169b2eee375acec84e394478d60e|value=[ADDR]\nNETBIRD_JSON|path_sha256=76fb0e4770bdf00275de5dd40053bf513e6d6c0e8441df7a028f011f95aad54f|value=[IPV6]\nNETBIRD_JSON|path_sha256=d07bb3a53b362c40c10b90f846a9a5c169dc3a3f8584d700b33073d0990ba584|value=ioHRHMCrw1revg7p7drr2MZxudHpqfhn9GIHvuDNHBs=\nNETBIRD_JSON|path_sha256=e63c7de2f5ff704abd4049e74419968caa91ba6af64e36d2d9b9cd18db0748a6|value=Connecting\nNETBIRD_JSON|path_sha256=f057c793dd182d8eca23f5ef877f11de7c3bd44650bdeb893632a031a21f721d|value=2026-09-23T[IPV6].773489895+03:00\nNETBIRD_JSON|path_sha256=b8bf2a53c80892125f8820159e7c484dde75b50e5bba990cc4ea4278ad7cd238|value=-\nNETBIRD_JSON|path_sha256=bd4499df433a7b6583b266fbdd9b11f83f8ed22ab44cf210b2d9db997c76f18f|value=\nNETBIRD_JSON|path_sha256=be0b2ee8224c7a323fb5427ba6db6ad365f9290b11ebcc07f0ffa3b6088d1a87|value=\nNETBIRD_JSON|path_sha256=07acc52aa801d037f8fbecce724ac218dc89ce7597edeffd9d30b326d75d49b7|value=\nNETBIRD_JSON|path_sha256=afa1372736f55a5779c7d9b1d916a27c327aa40b00a81ae75b3511fa8f270456|value=\nNETBIRD_JSON|path_sha256=d1d68386368a1f8b95ab0817794a18a0eeab5255e339d4a371a8667395ab2f09|value=\nNETBIRD_JSON|path_sha256=781f25c5890ea6c1a646485d2711cf96a82a829d2a6d01e500b1215e8c51656c|value=0001-01-01T[IPV6]Z\nNETBIRD_JSON|path_sha256=ef2843e18eb51eb8a6d74f8cc0773632e95bcaae62570e5a96dd27427104d4c3|value=0\nNETBIRD_JSON|path_sha256=3a1ab30635a45faba4326dd6ed27ded4b7fb7529656b5b0c42029ab40493d3b2|value=0\nNETBIRD_JSON|path_sha256=c9cc0fdec9098ed03d1230bcb5c7dac031d4b3ab895548da4ef396e3303e7c77|value=0\nNETBIRD_JSON|path_sha256=3027543b3a52fc9ab1d65ccaa63d17a1ab8536d0629e3de5d7c93227e2009291|value=False\nNETBIRD_JSON|path_sha256=122cf1659db1689e087c83ced68fd32b7119c1636aa44e006960e1ba4e4ce07b|value=home-pc.netbird.selfhosted\nNETBIRD_JSON|path_sha256=d52f18655d3fb5ef4e8f22d1b4d435f303ef2defdc33e467f411a1ec5b9ef95a|value=[ADDR]\nNETBIRD_JSON|path_sha256=2ae7f128330461846d31320c153e9a8612b23b0001f0cb1e28efc33c85df27c1|value=[IPV6]\nNETBIRD_JSON|path_sha256=44a8ed4bf8cfa95e71c3052bd43ea5d26de58fb47d591cd1f4a4545f802ad1b4|value=CoTpTOUD2TU924swK54vv1yhdCKiMwc5sM8PJVRyWj8=\nNETBIRD_JSON|path_sha256=c69c0993da1766e8d8f49ccd153b4870cf333bb762ad2218a6c001f9cc1ba521|value=Connecting\nNETBIRD_JSON|path_sha256=11e14f24088beacadf53d5cf1cd9beddf3a2f1574f2b31f32a7ecccd00eddb8d|value=2026-09-23T[IPV6].774137117+03:00\nNETBIRD_JSON|path_sha256=e1a55aacc297978f57fc9fb790f82177999ff489404622f4d3061962c0a76cf2|value=-\nNETBIRD_JSON|path_sha256=0ddd1e8e2c6aefc684246a2e51f93ebf9791886dbc1086ed713f91a6f9397718|value=\nNETBIRD_JSON|path_sha256=0333fa50df80cbecd0631f6f0f2dd6d406dd5f4e3e429cfe66ac0544b451ba4c|value=\nNETBIRD_JSON|path_sha256=cec1e61e847d53ef4f33fd9eca376978e50206a642cd1b2b6181ef188c8e0844|value=\nNETBIRD_JSON|path_sha256=761a28061b3a04c3d7be5823550219f78ed87d7e81c4c9ffa94c59872a41953b|value=\nNETBIRD_JSON|path_sha256=bc331d12e1191062d924779e6f5769ab274d94220865891b9b769edab6ad276b|value=\nNETBIRD_JSON|path_sha256=6d8968d2cbabcf24551b8893595ad8df476f10cd64910c2f84a62c58cc140fe1|value=0001-01-01T[IPV6]Z\nNETBIRD_JSON|path_sha256=3b3fb571582c091a8085b19b5246712a9132df3e05990a80b8629565a3313ae2|value=0\nNETBIRD_JSON|path_sha256=ddc2824c4914d52159d2b343f1f9c4e6f5fd39925c73170b3586171e07fbcd48|value=0\nNETBIRD_JSON|path_sha256=0d08eb51a4f04271fadd217b55fef8b3e5b386f90115d406f815962b869032bc|value=0\nNETBIRD_JSON|path_sha256=c70c1aad1a4fa0dace291b8c1ee114080133c155936fc8965b7e1b89ca211b2c|value=False\nNETBIRD_JSON|path_sha256=e20ef6bfa0471853660cc087041f17e21701c3e62206df591f398cec5163a871|value=relay.netbird.selfhosted\nNETBIRD_JSON|path_sha256=78d21cd2a3d8144dc8823aad37ff45bfb834b459b2b658482c8003950e242200|value=[ADDR]\nNETBIRD_JSON|path_sha256=3ecb35313e1a6fba8f9b42bfe48100131a4d029004527e2ce33ff63809612714|value=[IPV6]\nNETBIRD_JSON|path_sha256=1c174bc37b1454099e90ecb1bacb58ab017f934bdd68f0332f82ac2ca6314148|value=fj5TW6oRrm5KdlrEQ/Zh/JFOO4DBNIIumt6TmR3FZyE=\nNETBIRD_JSON|path_sha256=95fb885d9385525e4cc6f6897ffef99d01a3f7f9611a37d227f1d5018a3c312b|value=Connecting\nNETBIRD_JSON|path_sha256=510a700e68196039deecbf5d8d190340ffb08ff54e8a25a7ed3a521d2c4a5eb5|value=2026-09-24T[IPV6].719543198+03:00\nNETBIRD_JSON|path_sha256=f958f470595344f2a6cc48739b150b3dc30732eb8b028d4faff2e4faf85e6551|value=-\nNETBIRD_JSON|path_sha256=252b97a875f0b6f5ab50234c4fea093b5372d85fca3bb78de69bf9abdc816cd5|value=\nNETBIRD_JSON|path_sha256=8eb7573ee53f2a59dfc1f6f829eebac96272ba79ac7f76805d44ab9cd2babefe|value=\nNETBIRD_JSON|path_sha256=c16f8ab867969c5cf4718228b7feffbf6ff7becd88e02ae6013b8d01abf7465f|value=\nNETBIRD_JSON|path_sha256=b0b66262576eb1e75c92a87110b042e64aba396c9cf05e40d7fec9b6f83307da|value=\nNETBIRD_JSON|path_sha256=59a4062f39a14e1de0533701b74181448788980044c07b6c7e1fd0f8a51b70c3|value=\nNETBIRD_JSON|path_sha256=bef2b4cb9ea3b2cc5db0e8997f2ef57f66b5726e718287379641000761c65db0|value=0001-01-01T[IPV6]Z\nNETBIRD_JSON|path_sha256=9edd4c7c8dfa8551da17377c5530dde537c2b09c460a7f5083ed3140fc37f21c|value=0\nNETBIRD_JSON|path_sha256=1fd9d7593f46418a9f4e3ea0aa849b22cd55ca7c05f141162905559c2130b8a3|value=0\nNETBIRD_JSON|path_sha256=b7f5bd55ef1c641d4f5fd4e63e808f6b6a7b21df21ee649999ebe1bc24941d94|value=58101043\nNETBIRD_JSON|path_sha256=ccaba428196ed6060b278353e1aa634d7fc031b418278e0d3fb531a4c395be07|value=False\nNETBIRD_JSON|path_sha256=e327bb74b0b2c68ca33d265c49965d756544f3a419b9b7c2bf94317f8b6c00a7|value=pve03.netbird.selfhosted\nNETBIRD_JSON|path_sha256=39be3ea04f55f6877974b0783ccf0526c09ab91a571aeedc295e99fc456f1b02|value=[ADDR]\nNETBIRD_JSON|path_sha256=3ce1c496bf32694f78c33b04a04d08f0aec302f035c5b51eca535d97f531909d|value=[IPV6]\nNETBIRD_JSON|path_sha256=ea1b727fc3e7fd7852615d5347e8639c91d58dd64f0975d02123d85154e345b5|value=oXaA1VeKq1d/v5F8w0v/7G1DFL0yJMmxdSk/4X9j2j4=\nNETBIRD_JSON|path_sha256=cb66d5a3abb053cb20d3481f9ff5c6bc81d9a7b407cb8b48f319c9e09bf669df|value=Connecting\nNETBIRD_JSON|path_sha256=67f3e52702b07e387176d5cbc95dbbcfdd1c23a91c159ba1c9507271d683b375|value=2026-09-23T[IPV6].773575258+03:00\nNETBIRD_JSON|path_sha256=fcaf0387b115f2bd09d147636cc83f2d1464425169cea63b0bfac79baddae46d|value=-\nNETBIRD_JSON|path_sha256=7916502a9bfe8bfc0841a05cd410fa0296c9ad05c4f9eb6e73743975c4c046c6|value=\nNETBIRD_JSON|path_sha256=fa221acaac543f1da5ba45d8a3772fb1872ef7b024b3895791124a932a9e6659|value=\nNETBIRD_JSON|path_sha256=55206b1db6dd3ea78bda14ee278ce18c91990a5855691c2c66a952eeea10afbf|value=\nNETBIRD_JSON|path_sha256=ca17871ab53271d5c93201e9f780b93d8aa4133cbc71d6e4613a558acf61c456|value=\nNETBIRD_JSON|path_sha256=4a151dffa29d0954648b340c5c1523e2f827ca346b1cc5d5c3b85dd510469dae|value=\nNETBIRD_JSON|path_sha256=59a4a688d03bb96865bceb126225323dc51b98808e1c4b6d3c5b43180e39f576|value=0001-01-01T[IPV6]Z\nNETBIRD_JSON|path_sha256=6ff003ffae7699bd7b10e9ac37de4bf7b3995546077ff7713b66270b5ffbc757|value=0\nNETBIRD_JSON|path_sha256=98b109bcced49829ec0610819e1d4cd6d9bb95eba60b71d68e3eea32fda53101|value=0\nNETBIRD_JSON|path_sha256=20d283da05f088b99e0d4d4ea5533c8ce3589cf6550fb1155b0b3bace7eb2948|value=0\nNETBIRD_JSON|path_sha256=718a3fa7ce808de23a8f393434e4f96d89551ed4a62fcaf7201acad73212e7c3|value=False\nNETBIRD_JSON|path_sha256=bfe94ea4998d1497ead578c9d2351dd86499d715e7a5ae2c251a48ab175e7597|value=desktop-moy.netbird.selfhosted\nNETBIRD_JSON|path_sha256=10615ff34b6e87b5fc0e348720aa6b4cf7e79505d5399b7f082c6062dfc580f7|value=[ADDR]\nNETBIRD_JSON|path_sha256=0cfd2e29f0be9e305d2a1869bae732cc2fa4e0f543d06e5ccfd86e28def6b586|value=[IPV6]\nNETBIRD_JSON|path_sha256=83b78e00feeb099510b8ff7008845df75bc26d617d6d0011e01e62d6da957fca|value=E6+z+dlShOTEO+JOFoHKGcVHqnAcLZGz/Q8i9VAh5Go=\nNETBIRD_JSON|path_sha256=f60a499031d0775f574a7541a318343ec232d9058df51fb122d90786e7e4d835|value=Connecting\nNETBIRD_JSON|path_sha256=22c93528375c70c03debe2e7dbbba8b63205daedd81b5785c90903b48729e470|value=2026-09-24T[IPV6].926485532+03:00\nNETBIRD_JSON|path_sha256=0f1f1de24e138953d23d453ca5c2107709abce3a66dc83d86590db5a5b2106bf|value=-\nNETBIRD_JSON|path_sha256=bbb7054e5bc8316d34a6361014fce93781407132b089ac8c0227a4e73681f720|value=\nNETBIRD_JSON|path_sha256=2c7753650b2104d256bbab68e5dffe644077e34a60fbef115b13da287c2c458b|value=\nNETBIRD_JSON|path_sha256=3f4f797eb572f9538ea32803fc33e3e4484dc6539739a550cf3d85b3a9645eb4|value=\nROUTING_VIEW|name=RULE4|rc=0|lines=7|sha256=1b58f518e6616a36df39ac0ccaf9ece7cb2b39d9f4b226d75a17839d5e0373ad\nROUTING_RULE4|0:\tfrom all lookup local\nROUTING_RULE4|100:\tfrom [ADDR] lookup main\nROUTING_RULE4|101:\tfrom [ADDR] lookup 17777\nROUTING_RULE4|105:\tfrom all lookup main suppress_prefixlength 0\nROUTING_RULE4|110:\tnot from all fwmark 0x1bd00 lookup 7120\nROUTING_RULE4|32766:\tfrom all lookup main\nROUTING_RULE4|32767:\tfrom all lookup default\nROUTING_VIEW|name=RULE6|rc=0|lines=4|sha256=084928feb354be1f5bc19a4e726f8633720b2d0f1c47ae3240f7839b2a369b19\nROUTING_RULE6|0:\tfrom all lookup local\nROUTING_RULE6|105:\tfrom all lookup main suppress_prefixlength 0\nROUTING_RULE6|110:\tnot from all fwmark 0x1bd00 lookup 7120\nROUTING_RULE6|32766:\tfrom all lookup main\nROUTING_VIEW|name=TABLE7120_4|rc=0|lines=1|sha256=47caf134646621d5b98f8b57df342b12d9ee4d1934eae893f5de787744ee72e4\nROUTING_TABLE7120_4|default dev wt0 \nROUTING_VIEW|name=TABLE7120_6|rc=0|lines=1|sha256=2a5ee430739c900b7bed73ca983a83e00a763cde6cc22d9f34bf5aaba9257dc3\nROUTING_TABLE7120_6|default dev wt0 metric 1024 pref medium\nWT0_LINK_RC=0\nWT0_OPERSTATE=UNKNOWN\nWT0_MTU=1280\nWT0_FLAGS=POINTOPOINT,NOARP,UP,LOWER_UP\nNFT_RC=0\nNFT_NETBIRD_RELEVANT_COUNT=47\nNFT_NETBIRD|\t\toifname \"wt0\" ct state related,established counter packets 733 bytes 194838 accept\nNFT_NETBIRD|\t\tiifname \"wt0\" counter packets 688 bytes 510598 accept\nNFT_NETBIRD|\t\tiifname \"wt0\" counter packets 36248 bytes 41371245 accept\nNFT_NETBIRD|\t\tip saddr [ADDR] iifname \"wt0\" ip protocol tcp tcp dport { 80, 443 } counter packets 3302601 bytes 531568845 accept\nNFT_NETBIRD|\t\toifname \"wt0\" ct state related,established counter packets 0 bytes 0 accept\nNFT_NETBIRD|\t\tiifname \"wt0\" counter packets 0 bytes 0 accept\nNFT_NETBIRD|\t\tiifname \"wt0\" counter packets 0 bytes 0 accept\nNFT_NETBIRD|table ip netbird {\nNFT_NETBIRD|\tchain netbird-rt-fwd {\nNFT_NETBIRD|\tchain netbird-rt-postrouting {\nNFT_NETBIRD|\t\tmeta mark 0x0001bd22 oifname \"wt0\" counter packets 0 bytes 0 masquerade\nNFT_NETBIRD|\tchain netbird-rt-redirect {\nNFT_NETBIRD|\tchain netbird-mangle-postrouting {\nNFT_NETBIRD|\t\toifname \"wt0\" ct state new ct mark set 0x0001bd11\nNFT_NETBIRD|\tchain netbird-mangle-prerouting {\nNFT_NETBIRD|\t\tiifname \"wt0\" ct state new ct mark set 0x0001bd10\nNFT_NETBIRD|\t\tiifname \"wt0\" ip saddr @nb0000001 fib daddr type local meta mark set 0x0001bd20\nNFT_NETBIRD|\tchain netbird-mangle-forward {\nNFT_NETBIRD|\t\toifname \"wt0\" tcp flags syn counter packets 112 bytes 6720 tcp option maxseg size > 1240 tcp option maxseg size set 1240\nNFT_NETBIRD|\tchain netbird-acl-input-rules {\nNFT_NETBIRD|\tchain netbird-acl-input-filter {\nNFT_NETBIRD|\t\tiifname \"wt0\" jump netbird-acl-input-rules\nNFT_NETBIRD|\t\tiifname \"wt0\" drop\nNFT_NETBIRD|\tchain netbird-acl-forward-filter {\nNFT_NETBIRD|\t\tiifname \"wt0\" jump netbird-rt-fwd\nNFT_NETBIRD|\t\tiifname \"wt0\" drop\nNFT_NETBIRD|\tchain netbird-raw-out {\nNFT_NETBIRD|\tchain netbird-raw-pre {\nNFT_NETBIRD|table ip6 netbird {\nNFT_NETBIRD|\tchain netbird-rt-fwd {\nNFT_NETBIRD|\tchain netbird-rt-postrouting {\nNFT_NETBIRD|\t\tmeta mark 0x0001bd22 oifname \"wt0\" counter packets 0 bytes 0 masquerade\nNFT_NETBIRD|\tchain netbird-rt-redirect {\nNFT_NETBIRD|\tchain netbird-mangle-postrouting {\nNFT_NETBIRD|\t\toifname \"wt0\" ct state new ct mark set 0x0001bd11\nNFT_NETBIRD|\tchain netbird-mangle-prerouting {\nNFT_NETBIRD|\t\tiifname \"wt0\" ct state new ct mark set 0x0001bd10\nNFT_NETBIRD|\t\tiifname \"wt0\" ip6 saddr @nb0000001 fib daddr type local meta mark set 0x0001bd20\nNFT_NETBIRD|\tchain netbird-mangle-forward {\nNFT_NETBIRD|\t\toifname \"wt0\" tcp flags syn counter packets 0 bytes 0 tcp option maxseg size > 1220 tcp option maxseg size set 1220\nNFT_NETBIRD|\tchain netbird-acl-input-rules {\nNFT_NETBIRD|\tchain netbird-acl-input-filter {\nNFT_NETBIRD|\t\tiifname \"wt0\" jump netbird-acl-input-rules\nNFT_NETBIRD|\t\tiifname \"wt0\" drop\nNFT_NETBIRD|\tchain netbird-acl-forward-filter {\nNFT_NETBIRD|\t\tiifname \"wt0\" jump netbird-rt-fwd\nNFT_NETBIRD|\t\tiifname \"wt0\" drop\nNETBIRD_JOURNAL_RC=0\nNETBIRD_JOURNAL_RELEVANT_COUNT=0\nPUBLIC_ROUTE_GET|family=v4|rc=0|sha256=b1bac959b7f164a915a16d2128198deec0f9d739449bd8398fdf4fa4017159fa\nPUBLIC_ROUTE_GET_LINE|family=v4|[ADDR] dev wt0 table 7120 src [ADDR] uid 0 \nPUBLIC_ROUTE_GET|family=v6|rc=0|sha256=72b49fa2af3fc9123bcb7f2e4b98dfcbff4c61fd8bf4a3d021bc409d158c39bd\nPUBLIC_ROUTE_GET_LINE|family=v6|[IPV6] from [IPV6] dev wt0 table 7120 src [IPV6] metric 1024 pref medium\nMAIN_TABLE_ROUTE_GET_RC=1\nMAIN_TABLE_ROUTE_GET_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nEDGE_NETBIRD_EGRESS_END=1\nDECISION=PASS_MOLDOVA_1164_EDGE_NETBIRD_EGRESS_RCA_COLLECTED\nNEXT_GATE=READ_EXACT_1164_AND_CLASSIFY_MOLDOVA_EXIT_DEPENDENCY\nTASK_RESULT=PASS_MOLDOVA_EDGE_NETBIRD_EGRESS_RCA\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\nWORKERS2_MOLDOVA_EDGE_NETBIRD_EGRESS_RCA_END=1\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index bfeb7e3a..0bd676ca 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,15 +1,15 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-EGRESS-PATH-RCA-1163R1 +COMMAND_ID=SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1 STATUS=OK RC=0 HOST=pve01 MODE=read-only -COMPONENT=homelab-moldova-edge-egress-path-rca +COMPONENT=homelab-moldova-edge-netbird-egress-rca REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 -COMMAND_SHA256=4dd736263e0e25b3d31d60e7b675853bd03788ccdef665c1273de9f2a4d83e72 +COMMAND_SHA256=31d3e9189305dd16c8be28fb7e42e00b47db6b63b8c826758c373859f18db9af DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true CHANGE_DECLARED=false @@ -24,16 +24,15 @@ MUTATION_OUTCOME=NO_MUTATION SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=78f1ea4cf748ca9ae58d41b22a7504d75b7e4919a270dcbe19dd061ff42739d1 -SANITIZED_OUTPUT_SHA256=78f1ea4cf748ca9ae58d41b22a7504d75b7e4919a270dcbe19dd061ff42739d1 +RAW_EVIDENCE_SHA256=7ed7b1b9bf78ef99af59d64634ea8ae43e76d1fe9515c6fc609085da318823e1 +SANITIZED_OUTPUT_SHA256=7ed7b1b9bf78ef99af59d64634ea8ae43e76d1fe9515c6fc609085da318823e1 OUTPUT_BEGIN -WORKERS2_MOLDOVA_EDGE_EGRESS_PATH_RCA_BEGIN=1 -COMMAND_ID=SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-EGRESS-PATH-RCA-1163R1 +WORKERS2_MOLDOVA_EDGE_NETBIRD_EGRESS_RCA_BEGIN=1 +COMMAND_ID=SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1 MODE=read-only -COMPONENT=homelab-moldova-edge-egress-path-rca -MUTATION_BOUNDARY=NONE;PVE03_VM130_CONFIG_LINK_FIREWALL_PLUS_EDGE_GUEST_ROUTE_FIREWALL_RCA;NO_NETWORK_CHANGE;NO_VM_STATE_CHANGE;NO_DNS_WRITE;NO_PROVIDER_MUTATION;NO_MOLDOVA_CONNECTION;NO_SYSTEMD_ACTION;NO_GIT_WRITE;NO_SECRET_VALUE_OUTPUT -PREDECESSOR_1162=PASS_EDGE_NO_TCP443_TO_CLOUDFLARE -HISTORICAL_705R3=EDGE_CONTROL_PATH_READY_VM130_PVE03 +COMPONENT=homelab-moldova-edge-netbird-egress-rca +MUTATION_BOUNDARY=NONE;EDGE_VM_NETBIRD_PEER_ROUTE_NETWORK_POLICY_AND_JOURNAL_RCA_ONLY;NO_NETWORK_CHANGE;NO_NETBIRD_MUTATION;NO_VM_STATE_CHANGE;NO_DNS_WRITE;NO_PROVIDER_MUTATION;NO_MOLDOVA_CONNECTION;NO_SYSTEMD_ACTION;NO_GIT_WRITE;NO_SECRET_VALUE_OUTPUT +PREDECESSOR_1163=PASS_EDGE_PUBLIC_ROUTE_DECISION_VIA_WT0_TABLE_7120 CARRIER_BASELINE=KNOWN_GOOD_1137_BYTE_SEMANTICS REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 @@ -46,612 +45,266 @@ EDGE_VM_MATCH_COUNT=1 EDGE_VM_VMID=130 EDGE_VM_NODE=pve03 EDGE_VM_STATUS=running -PVE03_PROBE_RC=0 -PVE03_PROBE_STDERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 -PVE03_EDGE_PATH_BEGIN=1 -PVE03_HOST=pve03 -PVE03_EUID=0 -VM_STATUS=running -VM_CONFIG_SHA256=eb283b95f5a89329cb433e7fca33e81e25f97caa7f662a7ad303c345ae1832b8 -VM_NET0_PRESENT=true -VM_NET0_BRIDGE=vmbr0 -VM_NET0_FIREWALL=1 -VM_NET0_LINK_DOWN=0 -VM_NET0_MAC_SHA256=a6abbf31945b0b0723cdfeb74d33e2734f40f892962894276825cb8d41f2fdda -HOST_LINK|name=tap130i0|present=true|state=unknown|master=fwbr130i0 -HOST_LINK|name=fwln130i0|present=true|state=up|master=fwbr130i0 -HOST_LINK|name=fwpr130p0|present=true|state=up|master=vmbr0 -HOST_LINK|name=fwbr130i0|present=true|state=up|master=master -HOST_BRIDGE|name=vmbr0|state=up -VM_FIREWALL_FILE_EXISTS=true -VM_FIREWALL_FILE_SHA256=09e3beaba29b0d84e7bbbc2da490b924a763de3e3305fd3346697faa4b2422cb -VM_FIREWALL_LINE|3:policy_in: ACCEPT -VM_FIREWALL_LINE|4:policy_out: ACCEPT -VM_FIREWALL_LINE|6:[RULES] -VM_FIREWALL_LINE|7:OUT DROP -dest [ADDR] -log nolog -VM_FIREWALL_LINE|8:OUT DROP -dest [ADDR] -log nolog -VM_FIREWALL_LINE|9:OUT DROP -dest [ADDR] -log nolog -PVE03_NFT_LINE_COUNT=1 -PVE03_IPTABLES-SAVE|-A FORWARD -i wt0 -m conntrack --ctstate DNAT -m mark ! --mark 0x1bd20 -j DROP -PVE03_IPTABLES-SAVE|:PVEFW-Drop - [0:0] -PVE03_IPTABLES-SAVE|:PVEFW-DropBroadcast - [0:0] -PVE03_IPTABLES-SAVE|:PVEFW-FORWARD - [0:0] -PVE03_IPTABLES-SAVE|:PVEFW-FWBR-IN - [0:0] -PVE03_IPTABLES-SAVE|:PVEFW-FWBR-OUT - [0:0] -PVE03_IPTABLES-SAVE|:PVEFW-HOST-IN - [0:0] -PVE03_IPTABLES-SAVE|:PVEFW-HOST-OUT - [0:0] -PVE03_IPTABLES-SAVE|:PVEFW-INPUT - [0:0] -PVE03_IPTABLES-SAVE|:PVEFW-OUTPUT - [0:0] -PVE03_IPTABLES-SAVE|:PVEFW-Reject - [0:0] -PVE03_IPTABLES-SAVE|:PVEFW-SET-ACCEPT-MARK - [0:0] -PVE03_IPTABLES-SAVE|:PVEFW-logflags - [0:0] -PVE03_IPTABLES-SAVE|:PVEFW-reject - [0:0] -PVE03_IPTABLES-SAVE|:PVEFW-smurflog - [0:0] -PVE03_IPTABLES-SAVE|:PVEFW-smurfs - [0:0] -PVE03_IPTABLES-SAVE|:PVEFW-tcpflags - [0:0] -PVE03_IPTABLES-SAVE|:tap130i0-IN - [0:0] -PVE03_IPTABLES-SAVE|:tap130i0-OUT - [0:0] -PVE03_IPTABLES-SAVE|-A INPUT -i wt0 -j DROP -PVE03_IPTABLES-SAVE|-A INPUT -j PVEFW-INPUT -PVE03_IPTABLES-SAVE|-A FORWARD -i wt0 -j DROP -PVE03_IPTABLES-SAVE|-A FORWARD -j PVEFW-FORWARD -PVE03_IPTABLES-SAVE|-A OUTPUT -j PVEFW-OUTPUT -PVE03_IPTABLES-SAVE|-A PVEFW-Drop -j PVEFW-DropBroadcast -PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p icmp -m icmp --icmp-type 3/4 -j ACCEPT -PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p icmp -m icmp --icmp-type 11 -j ACCEPT -PVE03_IPTABLES-SAVE|-A PVEFW-Drop -m conntrack --ctstate INVALID -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m multiport --dports 135,445 -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m udp --dport 137:139 -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m udp --sport 137 --dport 1024:65535 -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p tcp -m multiport --dports 135,139,445 -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m udp --dport 1900 -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m udp --sport 53 -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-Drop -m comment --comment "PVESIG:83WlR/a4wLbmURFqMQT3uJSgIG8" -PVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -m addrtype --dst-type BROADCAST -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -m addrtype --dst-type MULTICAST -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -m addrtype --dst-type ANYCAST -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -d [ADDR]/4 -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -m comment --comment "PVESIG:NyjHNAtFbkH7WGLamPpdVnxHy4w" -PVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m conntrack --ctstate INVALID -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -PVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m physdev --physdev-in fwln+ --physdev-is-bridged -j PVEFW-FWBR-IN -PVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m physdev --physdev-out fwln+ --physdev-is-bridged -j PVEFW-FWBR-OUT -PVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m comment --comment "PVESIG:qnNexOcGa+y+jebd4dAUqFSp5nw" -PVE03_IPTABLES-SAVE|-A PVEFW-FWBR-IN -m conntrack --ctstate INVALID,NEW -j PVEFW-smurfs -PVE03_IPTABLES-SAVE|-A PVEFW-FWBR-IN -m physdev --physdev-out tap130i0 --physdev-is-bridged -j tap130i0-IN -PVE03_IPTABLES-SAVE|-A PVEFW-FWBR-IN -m physdev --physdev-out tap190i0 --physdev-is-bridged -j tap190i0-IN -PVE03_IPTABLES-SAVE|-A PVEFW-FWBR-IN -m comment --comment "PVESIG:9OsF92MfiIODIzcUNIrKOmVOkVk" -PVE03_IPTABLES-SAVE|-A PVEFW-FWBR-OUT -m physdev --physdev-in tap130i0 --physdev-is-bridged -j tap130i0-OUT -PVE03_IPTABLES-SAVE|-A PVEFW-FWBR-OUT -m physdev --physdev-in tap190i0 --physdev-is-bridged -j tap190i0-OUT -PVE03_IPTABLES-SAVE|-A PVEFW-FWBR-OUT -m comment --comment "PVESIG:rZNhlvxx7SPSwyB4BNDP7aliiPU" -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -i lo -j ACCEPT -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate INVALID -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate INVALID,NEW -j PVEFW-smurfs -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p 2 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/24 -p tcp -m tcp --dport 22 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/24 -p tcp -m tcp --dport 8006 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/24 -p tcp -m tcp --dport 9100 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/24 -p tcp -m tcp --dport 9101 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/10 -p tcp -m tcp --dport 22 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/10 -p tcp -m tcp --dport 8006 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p icmp -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 8006 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 5900:5999 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 3128 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 22 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 60000:60050 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -d [ADDR]/32 -p udp -m udp --dport 5404:5405 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -d [ADDR]/32 -p udp -m udp --dport 5404:5405 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -j PVEFW-Drop -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -m comment --comment "PVESIG:E/DUTOuKiQolUkKtABHBSyIB6Q4" -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -o lo -j ACCEPT -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -m conntrack --ctstate INVALID -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -p 2 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -d [ADDR]/24 -p tcp -m tcp --dport 8006 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -d [ADDR]/24 -p tcp -m tcp --dport 22 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -d [ADDR]/24 -p tcp -m tcp --dport 5900:5999 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -d [ADDR]/24 -p tcp -m tcp --dport 3128 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -s [ADDR]/32 -d [ADDR]/32 -p udp -m udp --dport 5404:5405 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -s [ADDR]/32 -d [ADDR]/32 -p udp -m udp --dport 5404:5405 -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -j RETURN -PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -m comment --comment "PVESIG:1eYE8DBaQG01lXgrEFYwctByTNQ" -PVE03_IPTABLES-SAVE|-A PVEFW-INPUT -j PVEFW-HOST-IN -PVE03_IPTABLES-SAVE|-A PVEFW-INPUT -m comment --comment "PVESIG:+5iMmLaxKXynOB/+5xibfx7WhFk" -PVE03_IPTABLES-SAVE|-A PVEFW-OUTPUT -j PVEFW-HOST-OUT -PVE03_IPTABLES-SAVE|-A PVEFW-OUTPUT -m comment --comment "PVESIG:LjHoZeSSiWAG3+2ZAyL/xuEehd0" -PVE03_IPTABLES-SAVE|-A PVEFW-Reject -j PVEFW-DropBroadcast -PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p icmp -m icmp --icmp-type 3/4 -j ACCEPT -PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p icmp -m icmp --icmp-type 11 -j ACCEPT -PVE03_IPTABLES-SAVE|-A PVEFW-Reject -m conntrack --ctstate INVALID -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m multiport --dports 135,445 -j PVEFW-reject -PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m udp --dport 137:139 -j PVEFW-reject -PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m udp --sport 137 --dport 1024:65535 -j PVEFW-reject -PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p tcp -m multiport --dports 135,139,445 -j PVEFW-reject -PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m udp --dport 1900 -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m udp --sport 53 -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-Reject -m comment --comment "PVESIG:h3DyALVslgH5hutETfixGP08w7c" -PVE03_IPTABLES-SAVE|-A PVEFW-SET-ACCEPT-MARK -j MARK --set-xmark 0x80000000/0x80000000 -PVE03_IPTABLES-SAVE|-A PVEFW-SET-ACCEPT-MARK -m comment --comment "PVESIG:Hg/OIgIwJChBUcWU8Xnjhdd2jUY" -PVE03_IPTABLES-SAVE|-A PVEFW-logflags -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-logflags -m comment --comment "PVESIG:MN4PH1oPZeABMuWr64RrygPfW7A" -PVE03_IPTABLES-SAVE|-A PVEFW-reject -m addrtype --dst-type BROADCAST -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-reject -s [ADDR]/4 -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-reject -p icmp -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-reject -p tcp -j REJECT --reject-with tcp-reset -PVE03_IPTABLES-SAVE|-A PVEFW-reject -p udp -j REJECT --reject-with icmp-port-unreachable -PVE03_IPTABLES-SAVE|-A PVEFW-reject -p icmp -j REJECT --reject-with icmp-host-unreachable -PVE03_IPTABLES-SAVE|-A PVEFW-reject -j REJECT --reject-with icmp-host-prohibited -PVE03_IPTABLES-SAVE|-A PVEFW-reject -m comment --comment "PVESIG:Jlkrtle1mDdtxDeI9QaDSL++Npc" -PVE03_IPTABLES-SAVE|-A PVEFW-smurflog -j DROP -PVE03_IPTABLES-SAVE|-A PVEFW-smurflog -m comment --comment "PVESIG:2gfT1VMkfr0JL6OccRXTGXo+1qk" -PVE03_IP6TABLES-SAVE|-A FORWARD -i wt0 -m conntrack --ctstate DNAT -m mark ! --mark 0x1bd20 -j DROP -PVE03_IP6TABLES-SAVE|:PVEFW-Drop - [0:0] -PVE03_IP6TABLES-SAVE|:PVEFW-DropBroadcast - [0:0] -PVE03_IP6TABLES-SAVE|:PVEFW-FORWARD - [0:0] -PVE03_IP6TABLES-SAVE|:PVEFW-FWBR-IN - [0:0] -PVE03_IP6TABLES-SAVE|:PVEFW-FWBR-OUT - [0:0] -PVE03_IP6TABLES-SAVE|:PVEFW-HOST-IN - [0:0] -PVE03_IP6TABLES-SAVE|:PVEFW-HOST-OUT - [0:0] -PVE03_IP6TABLES-SAVE|:PVEFW-INPUT - [0:0] -PVE03_IP6TABLES-SAVE|:PVEFW-OUTPUT - [0:0] -PVE03_IP6TABLES-SAVE|:PVEFW-Reject - [0:0] -PVE03_IP6TABLES-SAVE|:PVEFW-SET-ACCEPT-MARK - [0:0] -PVE03_IP6TABLES-SAVE|:PVEFW-logflags - [0:0] -PVE03_IP6TABLES-SAVE|:PVEFW-reject - [0:0] -PVE03_IP6TABLES-SAVE|:PVEFW-tcpflags - [0:0] -PVE03_IP6TABLES-SAVE|:tap130i0-IN - [0:0] -PVE03_IP6TABLES-SAVE|:tap130i0-OUT - [0:0] -PVE03_IP6TABLES-SAVE|-A INPUT -i wt0 -j DROP -PVE03_IP6TABLES-SAVE|-A INPUT -j PVEFW-INPUT -PVE03_IP6TABLES-SAVE|-A FORWARD -i wt0 -j DROP -PVE03_IP6TABLES-SAVE|-A FORWARD -j PVEFW-FORWARD -PVE03_IP6TABLES-SAVE|-A OUTPUT -j PVEFW-OUTPUT -PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p tcp -m tcp --dport 43 -j PVEFW-reject -PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -j PVEFW-DropBroadcast -PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p ipv6-icmp -m icmp6 --icmpv6-type 1 -j ACCEPT -PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p ipv6-icmp -m icmp6 --icmpv6-type 3 -j ACCEPT -PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p ipv6-icmp -m icmp6 --icmpv6-type 2 -j ACCEPT -PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -m conntrack --ctstate INVALID -j DROP -PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m multiport --dports 135,445 -j DROP -PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m udp --dport 137:139 -j DROP -PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m udp --sport 137 --dport 1024:65535 -j DROP -PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p tcp -m multiport --dports 135,139,445 -j DROP -PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m udp --dport 1900 -j DROP -PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j DROP -PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m udp --sport 53 -j DROP -PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -m comment --comment "PVESIG:Jb79Uw7z1vZglIcV7QXA5uY/nbk" -PVE03_IP6TABLES-SAVE|-A PVEFW-DropBroadcast -d ff00::/8 -j DROP -PVE03_IP6TABLES-SAVE|-A PVEFW-DropBroadcast -m comment --comment "PVESIG:8Krk5Nh8pDZOOc7BQAbM6PlyFSU" -PVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m conntrack --ctstate INVALID -j DROP -PVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -PVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m physdev --physdev-in fwln+ --physdev-is-bridged -j PVEFW-FWBR-IN -PVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m physdev --physdev-out fwln+ --physdev-is-bridged -j PVEFW-FWBR-OUT -PVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m comment --comment "PVESIG:qnNexOcGa+y+jebd4dAUqFSp5nw" -PVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-IN -m physdev --physdev-out tap130i0 --physdev-is-bridged -j tap130i0-IN -PVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-IN -m physdev --physdev-out tap190i0 --physdev-is-bridged -j tap190i0-IN -PVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-IN -m comment --comment "PVESIG:SN6fTaV+kY20ebDQ/eXdXf9FYBE" -PVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-OUT -m physdev --physdev-in tap130i0 --physdev-is-bridged -j tap130i0-OUT -PVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-OUT -m physdev --physdev-in tap190i0 --physdev-is-bridged -j tap190i0-OUT -PVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-OUT -m comment --comment "PVESIG:rZNhlvxx7SPSwyB4BNDP7aliiPU" -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -i lo -j ACCEPT -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate INVALID -j DROP -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j RETURN -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j RETURN -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j RETURN -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p ipv6-icmp -m icmp6 --icmpv6-type 136 -j RETURN -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p 2 -j RETURN -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 8006 -j RETURN -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 5900:5999 -j RETURN -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 3128 -j RETURN -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 22 -j RETURN -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 60000:60050 -j RETURN -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -j PVEFW-Drop -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -j DROP -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -m comment --comment "PVESIG:t+/LTT8OHyoSgF5i9Hox+PZEud4" -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -o lo -j ACCEPT -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -m conntrack --ctstate INVALID -j DROP -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j RETURN -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j RETURN -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -p ipv6-icmp -m icmp6 --icmpv6-type 136 -j RETURN -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -p 2 -j RETURN -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -j RETURN -PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -m comment --comment "PVESIG:br2bPbA9ZjuHOMNhV8tfLRw1mAs" -PVE03_IP6TABLES-SAVE|-A PVEFW-INPUT -j PVEFW-HOST-IN -PVE03_IP6TABLES-SAVE|-A PVEFW-INPUT -m comment --comment "PVESIG:+5iMmLaxKXynOB/+5xibfx7WhFk" -PVE03_IP6TABLES-SAVE|-A PVEFW-OUTPUT -j PVEFW-HOST-OUT -PVE03_IP6TABLES-SAVE|-A PVEFW-OUTPUT -m comment --comment "PVESIG:LjHoZeSSiWAG3+2ZAyL/xuEehd0" -PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p tcp -m tcp --dport 43 -j PVEFW-reject -PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -j PVEFW-DropBroadcast -PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p ipv6-icmp -m icmp6 --icmpv6-type 1 -j ACCEPT -PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p ipv6-icmp -m icmp6 --icmpv6-type 3 -j ACCEPT -PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p ipv6-icmp -m icmp6 --icmpv6-type 2 -j ACCEPT -PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -m conntrack --ctstate INVALID -j DROP -PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m multiport --dports 135,445 -j PVEFW-reject -PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m udp --dport 137:139 -j PVEFW-reject -PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m udp --sport 137 --dport 1024:65535 -j PVEFW-reject -PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p tcp -m multiport --dports 135,139,445 -j PVEFW-reject -PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m udp --dport 1900 -j DROP -PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j DROP -PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m udp --sport 53 -j DROP -PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -m comment --comment "PVESIG:aL1nrxJk/u3XmTb3Am2eaM/3yCM" -PVE03_IP6TABLES-SAVE|-A PVEFW-SET-ACCEPT-MARK -j MARK --set-xmark 0x80000000/0x80000000 -PVE03_IP6TABLES-SAVE|-A PVEFW-SET-ACCEPT-MARK -m comment --comment "PVESIG:Hg/OIgIwJChBUcWU8Xnjhdd2jUY" -PVE03_IP6TABLES-SAVE|-A PVEFW-logflags -j DROP -PVE03_IP6TABLES-SAVE|-A PVEFW-logflags -m comment --comment "PVESIG:MN4PH1oPZeABMuWr64RrygPfW7A" -PVE03_IP6TABLES-SAVE|-A PVEFW-reject -p ipv6-icmp -j DROP -PVE03_IP6TABLES-SAVE|-A PVEFW-reject -p tcp -j REJECT --reject-with tcp-reset -PVE03_IP6TABLES-SAVE|-A PVEFW-reject -p udp -j REJECT --reject-with icmp6-port-unreachable -PVE03_IP6TABLES-SAVE|-A PVEFW-reject -j REJECT --reject-with icmp6-adm-prohibited -PVE03_IP6TABLES-SAVE|-A PVEFW-reject -m comment --comment "PVESIG:etEECUYcgUdzuuO+LDP83pu0S8Y" -PVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN,PSH,URG -g PVEFW-logflags -PVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE -g PVEFW-logflags -PVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --tcp-flags SYN,RST SYN,RST -g PVEFW-logflags -PVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --tcp-flags FIN,SYN FIN,SYN -g PVEFW-logflags -PVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --sport 0 --tcp-flags FIN,SYN,RST,ACK SYN -g PVEFW-logflags -PVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -m comment --comment "PVESIG:CMFojwNPqllyqD67NeI5m+bP5mo" -PVE03_IP6TABLES-SAVE|-A tap130i0-IN -j CONNMARK --set-xmark 0x82/0xffffffff -PVE03_IP6TABLES-SAVE|-A tap130i0-IN -p udp -m udp --sport 547 --dport 546 -j ACCEPT -PVE03_IP6TABLES-SAVE|-A tap130i0-IN -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j ACCEPT -PVE03_IP6TABLES-SAVE|-A tap130i0-IN -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j ACCEPT -PVE03_IP6TABLES-SAVE|-A tap130i0-IN -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j ACCEPT -PVE03_IP6TABLES-SAVE|-A tap130i0-IN -p ipv6-icmp -m icmp6 --icmpv6-type 136 -j ACCEPT -PVE03_IP6TABLES-SAVE|-A tap130i0-IN -j ACCEPT -PVE03_IP6TABLES-SAVE|-A tap130i0-IN -m comment --comment "PVESIG:6BljBbDQyGrN4aDv7s9DGHcW7Gk" -PVE03_IP6TABLES-SAVE|-A tap130i0-OUT -j CONNMARK --set-xmark 0x82/0xffffffff -PVE03_IP6TABLES-SAVE|-A tap130i0-OUT -p udp -m udp --sport 546 --dport 547 -g PVEFW-SET-ACCEPT-MARK -PVE03_IP6TABLES-SAVE|-A tap130i0-OUT -m mac ! --mac-source bc:24:11:e1:f3:3c -j DROP -PVE03_IP6TABLES-SAVE|-A tap130i0-OUT -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j DROP -PVE03_IP6TABLES-SAVE|-A tap130i0-OUT -j MARK --set-xmark 0x0/0x80000000 -PVE03_DEFAULT_ROUTE_PRESENT=true -PVE03_EDGE_PATH_END=1 EDGE_QGA_TRANSPORT_RC=0 EDGE_QGA_TRANSPORT_STDERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 EDGE_QGA_EXITCODE=0 EDGE_QGA_ERR_BYTES=0 EDGE_QGA_ERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 -EDGE_GUEST_NETWORK_BEGIN=1 +EDGE_NETBIRD_EGRESS_BEGIN=1 EDGE_HOSTNAME=edge-vm EDGE_EUID=0 -IP_LINK_JSON_RC=0 -IP_LINK_COUNT=25 -LINK|name=lo|operstate=UNKNOWN|mtu=65536|up=true|master=none -LINK|name=eth0|operstate=UP|mtu=1500|up=true|master=none -LINK|name=wg-taftauto|operstate=UNKNOWN|mtu=1420|up=true|master=none -LINK|name=wg-edge01|operstate=UNKNOWN|mtu=1420|up=true|master=none -LINK|name=br-4d894f9e427b|operstate=DOWN|mtu=1500|up=true|master=none -LINK|name=br-5f66e1018bdd|operstate=UP|mtu=1500|up=true|master=none -LINK|name=br-8122fec51f39|operstate=UP|mtu=1500|up=true|master=none -LINK|name=docker0|operstate=DOWN|mtu=1500|up=true|master=none -LINK|name=br-915a81681c3e|operstate=UP|mtu=1500|up=true|master=none -LINK|name=br-a4e31561a8d5|operstate=UP|mtu=1500|up=true|master=none -LINK|name=br-d41b3e918fbc|operstate=UP|mtu=1500|up=true|master=none -LINK|name=br-f43db13d76c4|operstate=UP|mtu=1500|up=true|master=none -LINK|name=veth8fecc8f|operstate=UP|mtu=1500|up=true|master=br-f43db13d76c4 -LINK|name=veth6ebe603|operstate=UP|mtu=1500|up=true|master=br-915a81681c3e -LINK|name=veth94bb505|operstate=UP|mtu=1500|up=true|master=br-a4e31561a8d5 -LINK|name=veth257d0f3|operstate=UP|mtu=1500|up=true|master=br-915a81681c3e -LINK|name=vethf307a2b|operstate=UP|mtu=1500|up=true|master=br-5f66e1018bdd -LINK|name=veth43ed72a|operstate=UP|mtu=1500|up=true|master=br-8122fec51f39 -LINK|name=vetha71fd0e|operstate=UP|mtu=1500|up=true|master=br-5f66e1018bdd -LINK|name=veth52dc7f8|operstate=UP|mtu=1500|up=true|master=br-915a81681c3e -IP_ADDR_JSON_RC=0 -ADDR_COUNT|name=lo|v4=1|v6=1 -ADDR_COUNT|name=eth0|v4=1|v6=1 -ADDR_COUNT|name=wg-taftauto|v4=1|v6=0 -ADDR_COUNT|name=wg-edge01|v4=1|v6=0 -ADDR_COUNT|name=br-4d894f9e427b|v4=1|v6=0 -ADDR_COUNT|name=br-5f66e1018bdd|v4=1|v6=1 -ADDR_COUNT|name=br-8122fec51f39|v4=1|v6=1 -ADDR_COUNT|name=docker0|v4=1|v6=1 -ADDR_COUNT|name=br-915a81681c3e|v4=1|v6=1 -ADDR_COUNT|name=br-a4e31561a8d5|v4=1|v6=1 -ADDR_COUNT|name=br-d41b3e918fbc|v4=1|v6=1 -ADDR_COUNT|name=br-f43db13d76c4|v4=1|v6=1 -ADDR_COUNT|name=veth8fecc8f|v4=0|v6=1 -ADDR_COUNT|name=veth6ebe603|v4=0|v6=1 -ADDR_COUNT|name=veth94bb505|v4=0|v6=1 -ADDR_COUNT|name=veth257d0f3|v4=0|v6=1 -ADDR_COUNT|name=vethf307a2b|v4=0|v6=1 -ADDR_COUNT|name=veth43ed72a|v4=0|v6=1 -ADDR_COUNT|name=vetha71fd0e|v4=0|v6=1 -ADDR_COUNT|name=veth52dc7f8|v4=0|v6=1 -IP_ROUTE_RC=0 -IP_ROUTE_LINE_COUNT=110 -ROUTE|default dev wg-edge01 table 17777 scope link -ROUTE|default dev wt0 table 7120 -ROUTE|default via [ADDR] dev eth0 proto static -ROUTE|[ADDR]/24 dev wg-taftauto proto kernel scope link src [ADDR] -ROUTE|[ADDR]/30 dev wg-edge01 proto kernel scope link src [ADDR] -ROUTE|[ADDR]/28 dev br-915a81681c3e proto kernel scope link src [ADDR] -ROUTE|[ADDR]/16 dev wt0 proto kernel scope link src [ADDR] -ROUTE|[ADDR]/16 dev docker0 proto kernel scope link src [ADDR] linkdown -ROUTE|[ADDR]/16 dev br-4d894f9e427b proto kernel scope link src [ADDR] linkdown -ROUTE|[ADDR]/16 dev br-d41b3e918fbc proto kernel scope link src [ADDR] -ROUTE|[ADDR]/16 dev br-a4e31561a8d5 proto kernel scope link src [ADDR] -ROUTE|[ADDR] via [ADDR] dev eth0 src [ADDR] -ROUTE|[ADDR]/24 dev eth0 proto kernel scope link src [ADDR] -ROUTE|[ADDR]/20 dev br-f43db13d76c4 proto kernel scope link src [ADDR] -ROUTE|[ADDR]/20 dev br-8122fec51f39 proto kernel scope link src [ADDR] -ROUTE|[ADDR]/20 dev br-5f66e1018bdd proto kernel scope link src [ADDR] -ROUTE|local [ADDR] dev wg-taftauto table local proto kernel scope host src [ADDR] -ROUTE|broadcast [ADDR] dev wg-taftauto table local proto kernel scope link src [ADDR] -ROUTE|local [ADDR] dev wg-edge01 table local proto kernel scope host src [ADDR] -ROUTE|broadcast [ADDR] dev wg-edge01 table local proto kernel scope link src [ADDR] -ROUTE|local [ADDR] dev br-915a81681c3e table local proto kernel scope host src [ADDR] -ROUTE|broadcast [ADDR] dev br-915a81681c3e table local proto kernel scope link src [ADDR] -ROUTE|local [ADDR] dev wt0 table local proto kernel scope host src [ADDR] -ROUTE|broadcast [ADDR] dev wt0 table local proto kernel scope link src [ADDR] -ROUTE|local [ADDR]/8 dev lo table local proto kernel scope host src [ADDR] -ROUTE|local [ADDR] dev lo table local proto kernel scope host src [ADDR] -ROUTE|broadcast [ADDR] dev lo table local proto kernel scope link src [ADDR] -ROUTE|local [ADDR] dev docker0 table local proto kernel scope host src [ADDR] -ROUTE|broadcast [ADDR] dev docker0 table local proto kernel scope link src [ADDR] linkdown -ROUTE|local [ADDR] dev br-4d894f9e427b table local proto kernel scope host src [ADDR] -ROUTE|broadcast [ADDR] dev br-4d894f9e427b table local proto kernel scope link src [ADDR] linkdown -ROUTE|local [ADDR] dev br-d41b3e918fbc table local proto kernel scope host src [ADDR] -ROUTE|broadcast [ADDR] dev br-d41b3e918fbc table local proto kernel scope link src [ADDR] -ROUTE|local [ADDR] dev br-a4e31561a8d5 table local proto kernel scope host src [ADDR] -ROUTE|broadcast [ADDR] dev br-a4e31561a8d5 table local proto kernel scope link src [ADDR] -ROUTE|local [ADDR] dev eth0 table local proto kernel scope host src [ADDR] -ROUTE|broadcast [ADDR] dev eth0 table local proto kernel scope link src [ADDR] -ROUTE|local [ADDR] dev br-f43db13d76c4 table local proto kernel scope host src [ADDR] -ROUTE|broadcast [ADDR] dev br-f43db13d76c4 table local proto kernel scope link src [ADDR] -ROUTE|local [ADDR] dev br-8122fec51f39 table local proto kernel scope host src [ADDR] -ROUTE|broadcast [ADDR] dev br-8122fec51f39 table local proto kernel scope link src [ADDR] -ROUTE|local [ADDR] dev br-5f66e1018bdd table local proto kernel scope host src [ADDR] -ROUTE|broadcast [ADDR] dev br-5f66e1018bdd table local proto kernel scope link src [ADDR] -ROUTE|default dev wt0 table 7120 metric 1024 pref medium -ROUTE|[IPV6]/64 dev wt0 proto kernel metric 256 pref medium -ROUTE|[IPV6]/64 dev eth0 proto kernel metric 256 pref medium -ROUTE|[IPV6]/64 dev veth8fecc8f proto kernel metric 256 pref medium -ROUTE|[IPV6]/64 dev br-f43db13d76c4 proto kernel metric 256 pref medium -ROUTE|[IPV6]/64 dev veth6ebe603 proto kernel metric 256 pref medium -ROUTE|[IPV6]/64 dev br-915a81681c3e proto kernel metric 256 pref medium -ROUTE|[IPV6]/64 dev veth94bb505 proto kernel metric 256 pref medium -ROUTE|[IPV6]/64 dev br-a4e31561a8d5 proto kernel metric 256 pref medium -ROUTE|[IPV6]/64 dev veth43ed72a proto kernel metric 256 pref medium -ROUTE|[IPV6]/64 dev br-8122fec51f39 proto kernel metric 256 pref medium -ROUTE|[IPV6]/64 dev veth257d0f3 proto kernel metric 256 pref medium -ROUTE|[IPV6]/64 dev vethf307a2b proto kernel metric 256 pref medium -ROUTE|[IPV6]/64 dev br-5f66e1018bdd proto kernel metric 256 pref medium -ROUTE|[IPV6]/64 dev vetha71fd0e proto kernel metric 256 pref medium -ROUTE|[IPV6]/64 dev veth52dc7f8 proto kernel metric 256 pref medium -ROUTE|[IPV6]/64 dev vethb6a364a proto kernel metric 256 pref medium -ROUTE|[IPV6]/64 dev veth98c9c14 proto kernel metric 256 pref medium -ROUTE|[IPV6]/64 dev veth54c3c78 proto kernel metric 256 pref medium -ROUTE|[IPV6]/64 dev veth3eda058 proto kernel metric 256 pref medium -ROUTE|[IPV6]/64 dev br-d41b3e918fbc proto kernel metric 256 pref medium -ROUTE|[IPV6]/64 dev docker0 proto kernel metric 256 linkdown pref medium -ROUTE|local [IPV6] dev lo table local proto kernel metric 0 pref medium -ROUTE|local [IPV6] dev wt0 table local proto kernel metric 0 pref medium -ROUTE|local [IPV6] dev veth43ed72a table local proto kernel metric 0 pref medium -ROUTE|local [IPV6] dev br-915a81681c3e table local proto kernel metric 0 pref medium -ROUTE|local [IPV6] dev veth8fecc8f table local proto kernel metric 0 pref medium -ROUTE|local [IPV6] dev veth257d0f3 table local proto kernel metric 0 pref medium -ROUTE|local [IPV6] dev vethb6a364a table local proto kernel metric 0 pref medium -ROUTE|local [IPV6] dev br-f43db13d76c4 table local proto kernel metric 0 pref medium -ROUTE|local [IPV6] dev vethf307a2b table local proto kernel metric 0 pref medium -ROUTE|local [IPV6] dev veth94bb505 table local proto kernel metric 0 pref medium -ROUTE|local [IPV6] dev veth98c9c14 table local proto kernel metric 0 pref medium -ROUTE|local [IPV6] dev br-8122fec51f39 table local proto kernel metric 0 pref medium -ROUTE|local [IPV6] dev br-a4e31561a8d5 table local proto kernel metric 0 pref medium -ROUTE|local [IPV6] dev br-d41b3e918fbc table local proto kernel metric 0 pref medium -ROUTE|local [IPV6] dev veth3eda058 table local proto kernel metric 0 pref medium -ROUTE|local [IPV6] dev eth0 table local proto kernel metric 0 pref medium -ROUTE|local [IPV6] dev vetha71fd0e table local proto kernel metric 0 pref medium -ROUTE|local [IPV6] dev veth54c3c78 table local proto kernel metric 0 pref medium -ROUTE|local [IPV6] dev veth52dc7f8 table local proto kernel metric 0 pref medium -ROUTE|local [IPV6] dev br-5f66e1018bdd table local proto kernel metric 0 pref medium -ROUTE|local [IPV6] dev veth6ebe603 table local proto kernel metric 0 pref medium -ROUTE|local [IPV6] dev docker0 table local proto kernel metric 0 pref medium -ROUTE|multicast [IPV6]/8 dev eth0 table local proto kernel metric 256 pref medium -ROUTE|multicast [IPV6]/8 dev wg-edge01 table local proto kernel metric 256 pref medium -ROUTE|multicast [IPV6]/8 dev wg-taftauto table local proto kernel metric 256 pref medium -ROUTE|multicast [IPV6]/8 dev veth8fecc8f table local proto kernel metric 256 pref medium -ROUTE|multicast [IPV6]/8 dev br-f43db13d76c4 table local proto kernel metric 256 pref medium -ROUTE|multicast [IPV6]/8 dev veth6ebe603 table local proto kernel metric 256 pref medium -ROUTE|multicast [IPV6]/8 dev br-915a81681c3e table local proto kernel metric 256 pref medium -ROUTE|multicast [IPV6]/8 dev veth94bb505 table local proto kernel metric 256 pref medium -ROUTE|multicast [IPV6]/8 dev br-a4e31561a8d5 table local proto kernel metric 256 pref medium -ROUTE|multicast [IPV6]/8 dev veth43ed72a table local proto kernel metric 256 pref medium -ROUTE|multicast [IPV6]/8 dev br-8122fec51f39 table local proto kernel metric 256 pref medium -ROUTE|multicast [IPV6]/8 dev veth257d0f3 table local proto kernel metric 256 pref medium -ROUTE|multicast [IPV6]/8 dev vethf307a2b table local proto kernel metric 256 pref medium -ROUTE|multicast [IPV6]/8 dev br-5f66e1018bdd table local proto kernel metric 256 pref medium -ROUTE|multicast [IPV6]/8 dev vetha71fd0e table local proto kernel metric 256 pref medium -ROUTE|multicast [IPV6]/8 dev veth52dc7f8 table local proto kernel metric 256 pref medium -ROUTE|multicast [IPV6]/8 dev vethb6a364a table local proto kernel metric 256 pref medium -ROUTE|multicast [IPV6]/8 dev veth98c9c14 table local proto kernel metric 256 pref medium -ROUTE|multicast [IPV6]/8 dev veth54c3c78 table local proto kernel metric 256 pref medium -ROUTE|multicast [IPV6]/8 dev veth3eda058 table local proto kernel metric 256 pref medium -ROUTE|multicast [IPV6]/8 dev br-d41b3e918fbc table local proto kernel metric 256 pref medium -ROUTE|multicast [IPV6]/8 dev docker0 table local proto kernel metric 256 linkdown pref medium -ROUTE|multicast [IPV6]/8 dev wt0 table local proto kernel metric 256 pref medium -IPV4_DEFAULT_ROUTE_COUNT=4 -DEFAULT4|dev=wg-edge01|gateway_sha256=NA|metric=NA -DEFAULT4|dev=wt0|gateway_sha256=NA|metric=NA -DEFAULT4|dev=eth0|gateway_sha256=4f9da1283166a1e9f4e6bc7dd240c76aef85772177f717f92abb6e8e2bb8de90|metric=NA -DEFAULT4|dev=wt0|gateway_sha256=NA|metric=1024 -IP_RULE_RC=0 -RULE|0: from all lookup local -RULE|100: from [ADDR] lookup main -RULE|101: from [ADDR] lookup 17777 -RULE|105: from all lookup main suppress_prefixlength 0 -RULE|110: not from all fwmark 0x1bd00 lookup 7120 -RULE|32766: from all lookup main -RULE|32767: from all lookup default -IPV6_ROUTE_RC=0 -IPV6_DEFAULT_ROUTE_COUNT=1 -DEFAULT6|default dev wt0 table 7120 metric 1024 pref medium -ROUTE_GET|family=v4|rc=0|out_sha256=b1bac959b7f164a915a16d2128198deec0f9d739449bd8398fdf4fa4017159fa|stderr_sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 -ROUTE_GET_LINE|family=v4|[ADDR] dev wt0 table 7120 src [ADDR] uid 0 -ROUTE_GET|family=v6|rc=0|out_sha256=72b49fa2af3fc9123bcb7f2e4b98dfcbff4c61fd8bf4a3d021bc409d158c39bd|stderr_sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 -ROUTE_GET_LINE|family=v6|[IPV6] from [IPV6] dev wt0 table 7120 src [IPV6] metric 1024 pref medium -NEIGH_RC=0 -NEIGH_COUNT=26 -NEIGH_STATE|state=DELAY|count=1 -NEIGH_STATE|state=FAILED|count=3 -NEIGH_STATE|state=REACHABLE|count=9 -NEIGH_STATE|state=STALE|count=13 -RESOLV_EXISTS=true -RESOLV_LINE_COUNT=23 -RESOLV_NAMESERVER_COUNT=1 -RESOLV_SEARCH_COUNT=1 -NETCFG_FILE_COUNT=1 -NETCFG|base=50-cloud-init.yaml|path_sha256=b9bc0da3b7c93f972715f97a7a4588b39d3b28d576358a5dafecc1c8a8e2958f|bytes=350|sha256=c23b699ba11e3c57f071346bc1e29cb33dd6de57b319452daed9145fd1b0ba66 -NETCFG_LINE|base=50-cloud-init.yaml|line=1|text=network: -NETCFG_LINE|base=50-cloud-init.yaml|line=5|text= match: -NETCFG_LINE|base=50-cloud-init.yaml|line=15|text= set-name: "eth0" -NETCFG_LINE|base=50-cloud-init.yaml|line=16|text= routes: +EDGE_EPOCH=1790206874 +SERVICE|name=netbird.service|active=active +SERVICE|name=netbird.service|enabled=enabled +SERVICE|name=systemd-networkd.service|active=active +SERVICE|name=systemd-networkd.service|enabled=enabled +NETBIRD_VERSION_RC=0 +NETBIRD_VERSION=0.73.2 +NETBIRD_STATUS_DETAIL_RC=0 +NETBIRD_STATUS_DETAIL_BYTES=8694 +NETBIRD_STATUS_DETAIL_SHA256=cddf4549ddc3c862d7a7aa04645a745b06031ada6ba41ad0330c68b1d42ce0d9 +NETBIRD_STATUS_INTERESTING_COUNT=49 +NETBIRD_STATUS| Status: Connecting +NETBIRD_STATUS| Relay server address: +NETBIRD_STATUS| Networks: - +NETBIRD_STATUS| Status: Connecting +NETBIRD_STATUS| Relay server address: +NETBIRD_STATUS| Networks: - +NETBIRD_STATUS| Status: Connecting +NETBIRD_STATUS| Relay server address: +NETBIRD_STATUS| Networks: - +NETBIRD_STATUS| Status: Connecting +NETBIRD_STATUS| Relay server address: +NETBIRD_STATUS| Networks: - +NETBIRD_STATUS| Status: Connecting +NETBIRD_STATUS| Relay server address: +NETBIRD_STATUS| Networks: - +NETBIRD_STATUS| Status: Connecting +NETBIRD_STATUS| Relay server address: +NETBIRD_STATUS| Networks: - +NETBIRD_STATUS| Status: Connecting +NETBIRD_STATUS| Relay server address: +NETBIRD_STATUS| Networks: - +NETBIRD_STATUS| Status: Connecting +NETBIRD_STATUS| Relay server address: +NETBIRD_STATUS| Networks: - +NETBIRD_STATUS| Status: Connecting +NETBIRD_STATUS| Relay server address: +NETBIRD_STATUS| Networks: - +NETBIRD_STATUS| Status: Connecting +NETBIRD_STATUS| Relay server address: +NETBIRD_STATUS| Networks: - +NETBIRD_STATUS| Status: Connecting +NETBIRD_STATUS| Relay server address: +NETBIRD_STATUS| Networks: - +NETBIRD_STATUS| Message: Default route added +NETBIRD_STATUS| Message: Default route disconnected due to peer unreachability +NETBIRD_STATUS| Message: Default route disconnected due to peer unreachability +NETBIRD_STATUS| Message: Network map updated +NETBIRD_STATUS| Message: Default route added +NETBIRD_STATUS| Message: Default route added +NETBIRD_STATUS| Message: Default route added +NETBIRD_STATUS| Message: Default route added +NETBIRD_STATUS| Message: Default route disconnected due to peer unreachability +NETBIRD_STATUS| Message: Default route disconnected due to peer unreachability +NETBIRD_STATUS|Management: Disconnected, reason: rpc error: code = Unavailable desc = error reading from server: EOF +NETBIRD_STATUS|Signal: Disconnected, reason: rpc error: code = Unavailable desc = error reading from server: EOF +NETBIRD_STATUS|Relays: +NETBIRD_STATUS|FQDN: edge-vm.netbird.selfhosted +NETBIRD_STATUS|Networks: - +NETBIRD_STATUS|Peers count: 0/11 Connected +PEER_BLOCK_COUNT=1 +PEER|fqdn=edge-vm.netbird.selfhosted|status=UNKNOWN|relay_present=false|networks=- +MOLDOVA_RELAY_PEER_PRESENT=false +MOLDOVA_RELAY_PEER_STATUS=ABSENT +NETBIRD_CMD|name=ROUTES_LIST|rc=0|bytes=178|sha256=449171b786a12843333f14fc8e8eb1160a3077a1ff08e06cabd0dd4e90eb3a4a|stderr_sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 +NETBIRD_CMD_LINE_COUNT|name=ROUTES_LIST|count=7 +NETBIRD_ROUTES_LIST|Available Networks: +NETBIRD_ROUTES_LIST| - ID: edge-exit-relay-moldova +NETBIRD_ROUTES_LIST| Network: [ADDR], [IPV6] +NETBIRD_ROUTES_LIST| Status: Not Selected +NETBIRD_ROUTES_LIST| - ID: internet-v4 +NETBIRD_ROUTES_LIST| Network: [ADDR], [IPV6] +NETBIRD_ROUTES_LIST| Status: Selected +NETBIRD_CMD|name=NETWORKS_LIST|rc=0|bytes=178|sha256=449171b786a12843333f14fc8e8eb1160a3077a1ff08e06cabd0dd4e90eb3a4a|stderr_sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 +NETBIRD_CMD_LINE_COUNT|name=NETWORKS_LIST|count=7 +NETBIRD_NETWORKS_LIST|Available Networks: +NETBIRD_NETWORKS_LIST| - ID: edge-exit-relay-moldova +NETBIRD_NETWORKS_LIST| Network: [ADDR], [IPV6] +NETBIRD_NETWORKS_LIST| Status: Not Selected +NETBIRD_NETWORKS_LIST| - ID: internet-v4 +NETBIRD_NETWORKS_LIST| Network: [ADDR], [IPV6] +NETBIRD_NETWORKS_LIST| Status: Selected +NETBIRD_STATUS_JSON_RC=0 +NETBIRD_STATUS_JSON_BYTES=10251 +NETBIRD_STATUS_JSON_SHA256=ae997e3a2b072bf7da4afa5274bd86824449644b8f17ba6d7439038bf6b9f461 +NETBIRD_STATUS_JSON_PARSE=true +NETBIRD_STATUS_JSON_TOPKEYS=cliVersion,daemonStatus,daemonVersion,dnsServers,events,forwardingRules,fqdn,lazyConnectionEnabled,management,netbirdIp,netbirdIpv6,networks,peers,profileName,publicKey,quantumResistance,quantumResistancePermissive,relays,signal,sshServer,usesKernelInterface,wireguardPort +NETBIRD_STATUS_JSON_SELECTED_COUNT=80 +NETBIRD_JSON|path_sha256=679566c8dc90684de679e276220746522687f2d7e9b4537dc8a97954f01290be|value=11 +NETBIRD_JSON|path_sha256=4a9cb2135f8edb9ab83136dbb735b5de79ae1ee18f725d7fbeba840ba962b603|value=0 +NETBIRD_JSON|path_sha256=cad0d10b6d77e2f12265ce446f70de2d90dbb61594f248b1efe6093a2b6b0067|value=pve02.netbird.selfhosted +NETBIRD_JSON|path_sha256=f75b6abe4f98877764a72f45a15e7ec41a0b169b2eee375acec84e394478d60e|value=[ADDR] +NETBIRD_JSON|path_sha256=76fb0e4770bdf00275de5dd40053bf513e6d6c0e8441df7a028f011f95aad54f|value=[IPV6] +NETBIRD_JSON|path_sha256=d07bb3a53b362c40c10b90f846a9a5c169dc3a3f8584d700b33073d0990ba584|value=ioHRHMCrw1revg7p7drr2MZxudHpqfhn9GIHvuDNHBs= +NETBIRD_JSON|path_sha256=e63c7de2f5ff704abd4049e74419968caa91ba6af64e36d2d9b9cd18db0748a6|value=Connecting +NETBIRD_JSON|path_sha256=f057c793dd182d8eca23f5ef877f11de7c3bd44650bdeb893632a031a21f721d|value=2026-09-23T[IPV6].773489895+03:00 +NETBIRD_JSON|path_sha256=b8bf2a53c80892125f8820159e7c484dde75b50e5bba990cc4ea4278ad7cd238|value=- +NETBIRD_JSON|path_sha256=bd4499df433a7b6583b266fbdd9b11f83f8ed22ab44cf210b2d9db997c76f18f|value= +NETBIRD_JSON|path_sha256=be0b2ee8224c7a323fb5427ba6db6ad365f9290b11ebcc07f0ffa3b6088d1a87|value= +NETBIRD_JSON|path_sha256=07acc52aa801d037f8fbecce724ac218dc89ce7597edeffd9d30b326d75d49b7|value= +NETBIRD_JSON|path_sha256=afa1372736f55a5779c7d9b1d916a27c327aa40b00a81ae75b3511fa8f270456|value= +NETBIRD_JSON|path_sha256=d1d68386368a1f8b95ab0817794a18a0eeab5255e339d4a371a8667395ab2f09|value= +NETBIRD_JSON|path_sha256=781f25c5890ea6c1a646485d2711cf96a82a829d2a6d01e500b1215e8c51656c|value=0001-01-01T[IPV6]Z +NETBIRD_JSON|path_sha256=ef2843e18eb51eb8a6d74f8cc0773632e95bcaae62570e5a96dd27427104d4c3|value=0 +NETBIRD_JSON|path_sha256=3a1ab30635a45faba4326dd6ed27ded4b7fb7529656b5b0c42029ab40493d3b2|value=0 +NETBIRD_JSON|path_sha256=c9cc0fdec9098ed03d1230bcb5c7dac031d4b3ab895548da4ef396e3303e7c77|value=0 +NETBIRD_JSON|path_sha256=3027543b3a52fc9ab1d65ccaa63d17a1ab8536d0629e3de5d7c93227e2009291|value=False +NETBIRD_JSON|path_sha256=122cf1659db1689e087c83ced68fd32b7119c1636aa44e006960e1ba4e4ce07b|value=home-pc.netbird.selfhosted +NETBIRD_JSON|path_sha256=d52f18655d3fb5ef4e8f22d1b4d435f303ef2defdc33e467f411a1ec5b9ef95a|value=[ADDR] +NETBIRD_JSON|path_sha256=2ae7f128330461846d31320c153e9a8612b23b0001f0cb1e28efc33c85df27c1|value=[IPV6] +NETBIRD_JSON|path_sha256=44a8ed4bf8cfa95e71c3052bd43ea5d26de58fb47d591cd1f4a4545f802ad1b4|value=CoTpTOUD2TU924swK54vv1yhdCKiMwc5sM8PJVRyWj8= +NETBIRD_JSON|path_sha256=c69c0993da1766e8d8f49ccd153b4870cf333bb762ad2218a6c001f9cc1ba521|value=Connecting +NETBIRD_JSON|path_sha256=11e14f24088beacadf53d5cf1cd9beddf3a2f1574f2b31f32a7ecccd00eddb8d|value=2026-09-23T[IPV6].774137117+03:00 +NETBIRD_JSON|path_sha256=e1a55aacc297978f57fc9fb790f82177999ff489404622f4d3061962c0a76cf2|value=- +NETBIRD_JSON|path_sha256=0ddd1e8e2c6aefc684246a2e51f93ebf9791886dbc1086ed713f91a6f9397718|value= +NETBIRD_JSON|path_sha256=0333fa50df80cbecd0631f6f0f2dd6d406dd5f4e3e429cfe66ac0544b451ba4c|value= +NETBIRD_JSON|path_sha256=cec1e61e847d53ef4f33fd9eca376978e50206a642cd1b2b6181ef188c8e0844|value= +NETBIRD_JSON|path_sha256=761a28061b3a04c3d7be5823550219f78ed87d7e81c4c9ffa94c59872a41953b|value= +NETBIRD_JSON|path_sha256=bc331d12e1191062d924779e6f5769ab274d94220865891b9b769edab6ad276b|value= +NETBIRD_JSON|path_sha256=6d8968d2cbabcf24551b8893595ad8df476f10cd64910c2f84a62c58cc140fe1|value=0001-01-01T[IPV6]Z +NETBIRD_JSON|path_sha256=3b3fb571582c091a8085b19b5246712a9132df3e05990a80b8629565a3313ae2|value=0 +NETBIRD_JSON|path_sha256=ddc2824c4914d52159d2b343f1f9c4e6f5fd39925c73170b3586171e07fbcd48|value=0 +NETBIRD_JSON|path_sha256=0d08eb51a4f04271fadd217b55fef8b3e5b386f90115d406f815962b869032bc|value=0 +NETBIRD_JSON|path_sha256=c70c1aad1a4fa0dace291b8c1ee114080133c155936fc8965b7e1b89ca211b2c|value=False +NETBIRD_JSON|path_sha256=e20ef6bfa0471853660cc087041f17e21701c3e62206df591f398cec5163a871|value=relay.netbird.selfhosted +NETBIRD_JSON|path_sha256=78d21cd2a3d8144dc8823aad37ff45bfb834b459b2b658482c8003950e242200|value=[ADDR] +NETBIRD_JSON|path_sha256=3ecb35313e1a6fba8f9b42bfe48100131a4d029004527e2ce33ff63809612714|value=[IPV6] +NETBIRD_JSON|path_sha256=1c174bc37b1454099e90ecb1bacb58ab017f934bdd68f0332f82ac2ca6314148|value=fj5TW6oRrm5KdlrEQ/Zh/JFOO4DBNIIumt6TmR3FZyE= +NETBIRD_JSON|path_sha256=95fb885d9385525e4cc6f6897ffef99d01a3f7f9611a37d227f1d5018a3c312b|value=Connecting +NETBIRD_JSON|path_sha256=510a700e68196039deecbf5d8d190340ffb08ff54e8a25a7ed3a521d2c4a5eb5|value=2026-09-24T[IPV6].719543198+03:00 +NETBIRD_JSON|path_sha256=f958f470595344f2a6cc48739b150b3dc30732eb8b028d4faff2e4faf85e6551|value=- +NETBIRD_JSON|path_sha256=252b97a875f0b6f5ab50234c4fea093b5372d85fca3bb78de69bf9abdc816cd5|value= +NETBIRD_JSON|path_sha256=8eb7573ee53f2a59dfc1f6f829eebac96272ba79ac7f76805d44ab9cd2babefe|value= +NETBIRD_JSON|path_sha256=c16f8ab867969c5cf4718228b7feffbf6ff7becd88e02ae6013b8d01abf7465f|value= +NETBIRD_JSON|path_sha256=b0b66262576eb1e75c92a87110b042e64aba396c9cf05e40d7fec9b6f83307da|value= +NETBIRD_JSON|path_sha256=59a4062f39a14e1de0533701b74181448788980044c07b6c7e1fd0f8a51b70c3|value= +NETBIRD_JSON|path_sha256=bef2b4cb9ea3b2cc5db0e8997f2ef57f66b5726e718287379641000761c65db0|value=0001-01-01T[IPV6]Z +NETBIRD_JSON|path_sha256=9edd4c7c8dfa8551da17377c5530dde537c2b09c460a7f5083ed3140fc37f21c|value=0 +NETBIRD_JSON|path_sha256=1fd9d7593f46418a9f4e3ea0aa849b22cd55ca7c05f141162905559c2130b8a3|value=0 +NETBIRD_JSON|path_sha256=b7f5bd55ef1c641d4f5fd4e63e808f6b6a7b21df21ee649999ebe1bc24941d94|value=58101043 +NETBIRD_JSON|path_sha256=ccaba428196ed6060b278353e1aa634d7fc031b418278e0d3fb531a4c395be07|value=False +NETBIRD_JSON|path_sha256=e327bb74b0b2c68ca33d265c49965d756544f3a419b9b7c2bf94317f8b6c00a7|value=pve03.netbird.selfhosted +NETBIRD_JSON|path_sha256=39be3ea04f55f6877974b0783ccf0526c09ab91a571aeedc295e99fc456f1b02|value=[ADDR] +NETBIRD_JSON|path_sha256=3ce1c496bf32694f78c33b04a04d08f0aec302f035c5b51eca535d97f531909d|value=[IPV6] +NETBIRD_JSON|path_sha256=ea1b727fc3e7fd7852615d5347e8639c91d58dd64f0975d02123d85154e345b5|value=oXaA1VeKq1d/v5F8w0v/7G1DFL0yJMmxdSk/4X9j2j4= +NETBIRD_JSON|path_sha256=cb66d5a3abb053cb20d3481f9ff5c6bc81d9a7b407cb8b48f319c9e09bf669df|value=Connecting +NETBIRD_JSON|path_sha256=67f3e52702b07e387176d5cbc95dbbcfdd1c23a91c159ba1c9507271d683b375|value=2026-09-23T[IPV6].773575258+03:00 +NETBIRD_JSON|path_sha256=fcaf0387b115f2bd09d147636cc83f2d1464425169cea63b0bfac79baddae46d|value=- +NETBIRD_JSON|path_sha256=7916502a9bfe8bfc0841a05cd410fa0296c9ad05c4f9eb6e73743975c4c046c6|value= +NETBIRD_JSON|path_sha256=fa221acaac543f1da5ba45d8a3772fb1872ef7b024b3895791124a932a9e6659|value= +NETBIRD_JSON|path_sha256=55206b1db6dd3ea78bda14ee278ce18c91990a5855691c2c66a952eeea10afbf|value= +NETBIRD_JSON|path_sha256=ca17871ab53271d5c93201e9f780b93d8aa4133cbc71d6e4613a558acf61c456|value= +NETBIRD_JSON|path_sha256=4a151dffa29d0954648b340c5c1523e2f827ca346b1cc5d5c3b85dd510469dae|value= +NETBIRD_JSON|path_sha256=59a4a688d03bb96865bceb126225323dc51b98808e1c4b6d3c5b43180e39f576|value=0001-01-01T[IPV6]Z +NETBIRD_JSON|path_sha256=6ff003ffae7699bd7b10e9ac37de4bf7b3995546077ff7713b66270b5ffbc757|value=0 +NETBIRD_JSON|path_sha256=98b109bcced49829ec0610819e1d4cd6d9bb95eba60b71d68e3eea32fda53101|value=0 +NETBIRD_JSON|path_sha256=20d283da05f088b99e0d4d4ea5533c8ce3589cf6550fb1155b0b3bace7eb2948|value=0 +NETBIRD_JSON|path_sha256=718a3fa7ce808de23a8f393434e4f96d89551ed4a62fcaf7201acad73212e7c3|value=False +NETBIRD_JSON|path_sha256=bfe94ea4998d1497ead578c9d2351dd86499d715e7a5ae2c251a48ab175e7597|value=desktop-moy.netbird.selfhosted +NETBIRD_JSON|path_sha256=10615ff34b6e87b5fc0e348720aa6b4cf7e79505d5399b7f082c6062dfc580f7|value=[ADDR] +NETBIRD_JSON|path_sha256=0cfd2e29f0be9e305d2a1869bae732cc2fa4e0f543d06e5ccfd86e28def6b586|value=[IPV6] +NETBIRD_JSON|path_sha256=83b78e00feeb099510b8ff7008845df75bc26d617d6d0011e01e62d6da957fca|value=E6+z+dlShOTEO+JOFoHKGcVHqnAcLZGz/Q8i9VAh5Go= +NETBIRD_JSON|path_sha256=f60a499031d0775f574a7541a318343ec232d9058df51fb122d90786e7e4d835|value=Connecting +NETBIRD_JSON|path_sha256=22c93528375c70c03debe2e7dbbba8b63205daedd81b5785c90903b48729e470|value=2026-09-24T[IPV6].926485532+03:00 +NETBIRD_JSON|path_sha256=0f1f1de24e138953d23d453ca5c2107709abce3a66dc83d86590db5a5b2106bf|value=- +NETBIRD_JSON|path_sha256=bbb7054e5bc8316d34a6361014fce93781407132b089ac8c0227a4e73681f720|value= +NETBIRD_JSON|path_sha256=2c7753650b2104d256bbab68e5dffe644077e34a60fbef115b13da287c2c458b|value= +NETBIRD_JSON|path_sha256=3f4f797eb572f9538ea32803fc33e3e4484dc6539739a550cf3d85b3a9645eb4|value= +ROUTING_VIEW|name=RULE4|rc=0|lines=7|sha256=1b58f518e6616a36df39ac0ccaf9ece7cb2b39d9f4b226d75a17839d5e0373ad +ROUTING_RULE4|0: from all lookup local +ROUTING_RULE4|100: from [ADDR] lookup main +ROUTING_RULE4|101: from [ADDR] lookup 17777 +ROUTING_RULE4|105: from all lookup main suppress_prefixlength 0 +ROUTING_RULE4|110: not from all fwmark 0x1bd00 lookup 7120 +ROUTING_RULE4|32766: from all lookup main +ROUTING_RULE4|32767: from all lookup default +ROUTING_VIEW|name=RULE6|rc=0|lines=4|sha256=084928feb354be1f5bc19a4e726f8633720b2d0f1c47ae3240f7839b2a369b19 +ROUTING_RULE6|0: from all lookup local +ROUTING_RULE6|105: from all lookup main suppress_prefixlength 0 +ROUTING_RULE6|110: not from all fwmark 0x1bd00 lookup 7120 +ROUTING_RULE6|32766: from all lookup main +ROUTING_VIEW|name=TABLE7120_4|rc=0|lines=1|sha256=47caf134646621d5b98f8b57df342b12d9ee4d1934eae893f5de787744ee72e4 +ROUTING_TABLE7120_4|default dev wt0 +ROUTING_VIEW|name=TABLE7120_6|rc=0|lines=1|sha256=2a5ee430739c900b7bed73ca983a83e00a763cde6cc22d9f34bf5aaba9257dc3 +ROUTING_TABLE7120_6|default dev wt0 metric 1024 pref medium +WT0_LINK_RC=0 +WT0_OPERSTATE=UNKNOWN +WT0_MTU=1280 +WT0_FLAGS=POINTOPOINT,NOARP,UP,LOWER_UP NFT_RC=0 -NFT_LINE_COUNT=333 -NFT_RELEVANT_COUNT=92 -NFT| chain FORWARD { -NFT| type filter hook forward priority filter; policy accept; -NFT| counter packets 4611557 bytes 828408916 jump DOCKER-FORWARD -NFT| ip daddr [ADDR] iifname != "br-d41b3e918fbc" oifname "br-d41b3e918fbc" tcp dport 8080 counter packets 0 bytes 0 accept -NFT| ip daddr [ADDR] iifname != "br-5f66e1018bdd" oifname "br-5f66e1018bdd" tcp dport 3100 counter packets 0 bytes 0 accept -NFT| ip daddr [ADDR] iifname != "br-5f66e1018bdd" oifname "br-5f66e1018bdd" tcp dport 12345 counter packets 0 bytes 0 accept -NFT| ip daddr [ADDR] iifname != "br-a4e31561a8d5" oifname "br-a4e31561a8d5" tcp dport 8080 counter packets 0 bytes 0 accept -NFT| ip daddr [ADDR] iifname != "br-a4e31561a8d5" oifname "br-a4e31561a8d5" tcp dport 7422 counter packets 0 bytes 0 accept -NFT| ip daddr [ADDR] iifname != "br-f43db13d76c4" oifname "br-f43db13d76c4" tcp dport 8080 counter packets 0 bytes 0 accept -NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" oifname "br-915a81681c3e" tcp dport 2375 counter packets 0 bytes 0 accept -NFT| iifname != "br-4d894f9e427b" oifname "br-4d894f9e427b" counter packets 0 bytes 0 drop -NFT| iifname != "br-5f66e1018bdd" oifname "br-5f66e1018bdd" counter packets 0 bytes 0 drop -NFT| iifname != "br-8122fec51f39" oifname "br-8122fec51f39" counter packets 0 bytes 0 drop -NFT| iifname != "br-915a81681c3e" oifname "br-915a81681c3e" counter packets 0 bytes 0 drop -NFT| iifname != "br-a4e31561a8d5" oifname "br-a4e31561a8d5" counter packets 0 bytes 0 drop -NFT| iifname != "br-d41b3e918fbc" oifname "br-d41b3e918fbc" counter packets 0 bytes 0 drop -NFT| iifname != "br-f43db13d76c4" oifname "br-f43db13d76c4" counter packets 0 bytes 0 drop -NFT| iifname != "docker0" oifname "docker0" counter packets 0 bytes 0 drop -NFT| chain DOCKER-FORWARD { -NFT| type filter hook input priority filter; policy accept; -NFT| iifname != "lo" tcp dport 81 counter packets 0 bytes 0 drop -NFT| ip saddr [ADDR]/16 iifname "wt0" ip protocol tcp tcp dport { 80, 443 } counter packets 3302601 bytes 531568845 accept -NFT| type nat hook postrouting priority srcnat; policy accept; -NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" tcp dport 2375 counter packets 0 bytes 0 dnat to [ADDR]:2375 -NFT| ip daddr [ADDR] iifname != "br-f43db13d76c4" tcp dport 8081 counter packets 0 bytes 0 dnat to [ADDR]:8080 -NFT| ip daddr [ADDR] iifname != "br-a4e31561a8d5" tcp dport 7422 counter packets 0 bytes 0 dnat to [ADDR]:7422 -NFT| ip daddr [ADDR] iifname != "br-a4e31561a8d5" tcp dport 8088 counter packets 0 bytes 0 dnat to [ADDR]:8080 -NFT| ip daddr [ADDR] iifname != "br-5f66e1018bdd" tcp dport 12345 counter packets 0 bytes 0 dnat to [ADDR]:12345 -NFT| ip daddr [ADDR] iifname != "br-5f66e1018bdd" tcp dport 3100 counter packets 0 bytes 0 dnat to [ADDR]:3100 -NFT| ip daddr [ADDR] iifname != "br-d41b3e918fbc" tcp dport 9999 counter packets 0 bytes 0 dnat to [ADDR]:8080 -NFT| type nat hook prerouting priority dstnat; policy accept; -NFT| chain OUTPUT { -NFT| type nat hook output priority dstnat; policy accept; -NFT| type nat hook prerouting priority dstnat; policy accept; -NFT| iifname "wg-edge01" ip saddr [ADDR] ip daddr [ADDR] tcp dport { 3478, 3479, 5000, 5222, 5269, 5349, 5350 } dnat to [ADDR] -NFT| type nat hook postrouting priority srcnat; policy accept; -NFT| oifname "eth0" ip daddr [ADDR] tcp dport { 3478, 3479, 5000, 5222, 5269, 5349, 5350 } snat to [ADDR] -NFT| type nat hook prerouting priority dstnat; policy accept; -NFT| chain OUTPUT { -NFT| type nat hook output priority dstnat; policy accept; -NFT| chain DOCKER-FORWARD { -NFT| chain FORWARD { -NFT| type filter hook forward priority filter; policy accept; -NFT| counter packets 0 bytes 0 jump DOCKER-FORWARD -NFT| type filter hook input priority filter; policy accept; -NFT| iifname != "lo" tcp dport 81 counter packets 0 bytes 0 drop -NFT| type filter hook prerouting priority raw; policy accept; -NFT| ip daddr [ADDR] iifname != "br-f43db13d76c4" counter packets 0 bytes 0 drop -NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" counter packets 0 bytes 0 drop -NFT| ip daddr [ADDR] iifname != "br-a4e31561a8d5" counter packets 0 bytes 0 drop -NFT| ip daddr [ADDR] iifname != "br-8122fec51f39" counter packets 0 bytes 0 drop -NFT| ip daddr [ADDR] iifname != "br-5f66e1018bdd" counter packets 0 bytes 0 drop -NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" counter packets 0 bytes 0 drop -NFT| ip daddr [ADDR] iifname != "lo" tcp dport 2375 counter packets 0 bytes 0 drop -NFT| ip daddr [ADDR] iifname != "lo" tcp dport 8081 counter packets 0 bytes 0 drop -NFT| ip daddr [ADDR] iifname != "br-5f66e1018bdd" counter packets 0 bytes 0 drop -NFT| ip daddr [ADDR] iifname != "lo" tcp dport 7422 counter packets 0 bytes 0 drop -NFT| ip daddr [ADDR] iifname != "lo" tcp dport 8088 counter packets 0 bytes 0 drop -NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" counter packets 0 bytes 0 drop -NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" counter packets 0 bytes 0 drop -NFT| ip daddr [ADDR] iifname != "lo" tcp dport 12345 counter packets 0 bytes 0 drop -NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" counter packets 0 bytes 0 drop -NFT| ip daddr [ADDR] iifname != "lo" tcp dport 3100 counter packets 0 bytes 0 drop -NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" counter packets 0 bytes 0 drop -NFT| ip daddr [ADDR] iifname != "br-d41b3e918fbc" counter packets 0 bytes 0 drop -NFT| ip daddr [ADDR] iifname != "lo" tcp dport 9999 counter packets 0 bytes 0 drop -NFT| type nat hook postrouting priority srcnat - 1; policy accept; -NFT| type nat hook prerouting priority dstnat; policy accept; -NFT| type filter hook postrouting priority mangle; policy accept; -NFT| type filter hook prerouting priority mangle; policy accept; -NFT| chain netbird-mangle-forward { -NFT| type filter hook forward priority mangle; policy accept; -NFT| oifname "wt0" tcp flags syn counter packets 91 bytes 5460 tcp option maxseg size > 1240 tcp option maxseg size set 1240 -NFT| type filter hook input priority filter; policy accept; -NFT| iifname "wt0" drop -NFT| chain netbird-acl-forward-filter { -NFT| type filter hook forward priority filter; policy accept; -NFT| iifname "wt0" drop -NFT| type filter hook output priority raw; policy accept; -NFT| type filter hook prerouting priority raw; policy accept; -NFT| type nat hook postrouting priority srcnat - 1; policy accept; -NFT| type nat hook prerouting priority dstnat; policy accept; -NFT| type filter hook postrouting priority mangle; policy accept; -NFT| type filter hook prerouting priority mangle; policy accept; -NFT| chain netbird-mangle-forward { -NFT| type filter hook forward priority mangle; policy accept; -NFT| oifname "wt0" tcp flags syn counter packets 0 bytes 0 tcp option maxseg size > 1220 tcp option maxseg size set 1220 -NFT| type filter hook input priority filter; policy accept; -NFT| iifname "wt0" drop -NFT| chain netbird-acl-forward-filter { -NFT| type filter hook forward priority filter; policy accept; -NFT| iifname "wt0" drop -IPTABLES4_RC=0 -IPTABLES4_RELEVANT_COUNT=30 -IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-f43db13d76c4 -j DROP -IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP -IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-a4e31561a8d5 -j DROP -IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-8122fec51f39 -j DROP -IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-5f66e1018bdd -j DROP -IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP -IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 2375 -j DROP -IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 8081 -j DROP -IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-5f66e1018bdd -j DROP -IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 7422 -j DROP -IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 8088 -j DROP -IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP -IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP -IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 12345 -j DROP -IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP -IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 3100 -j DROP -IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP -IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-d41b3e918fbc -j DROP -IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 9999 -j DROP -IPTABLES4|-A INPUT ! -i lo -p tcp -m tcp --dport 81 -j DROP -IPTABLES4|-A INPUT -s [ADDR]/16 -i wt0 -p tcp -m multiport --dports 80,443 -j ACCEPT -IPTABLES4|-A DOCKER ! -i br-4d894f9e427b -o br-4d894f9e427b -j DROP -IPTABLES4|-A DOCKER ! -i br-5f66e1018bdd -o br-5f66e1018bdd -j DROP -IPTABLES4|-A DOCKER ! -i br-8122fec51f39 -o br-8122fec51f39 -j DROP -IPTABLES4|-A DOCKER ! -i br-915a81681c3e -o br-915a81681c3e -j DROP -IPTABLES4|-A DOCKER ! -i br-a4e31561a8d5 -o br-a4e31561a8d5 -j DROP -IPTABLES4|-A DOCKER ! -i br-d41b3e918fbc -o br-d41b3e918fbc -j DROP -IPTABLES4|-A DOCKER ! -i br-f43db13d76c4 -o br-f43db13d76c4 -j DROP -IPTABLES4|-A DOCKER ! -i docker0 -o docker0 -j DROP -IPTABLES4|:PREROUTING ACCEPT [3066759:284433816] -IPTABLES6_RC=0 -IPTABLES6_RELEVANT_COUNT=1 -IPTABLES6|-A INPUT ! -i lo -p tcp -m tcp --dport 81 -j DROP -NET_SERVICE|name=systemd-networkd.service|active=active -NET_SERVICE|name=NetworkManager.service|active=inactive -NET_SERVICE|name=networking.service|active=inactive -EDGE_GUEST_NETWORK_END=1 -DECISION=PASS_MOLDOVA_1163_EDGE_EGRESS_PATH_RCA_COLLECTED -NEXT_GATE=READ_EXACT_1163_AND_CHOOSE_DNS_AUTHORITY_PATH -TASK_RESULT=PASS_MOLDOVA_EDGE_EGRESS_PATH_RCA -HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-EGRESS-PATH-RCA-1163R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} -WORKERS2_MOLDOVA_EDGE_EGRESS_PATH_RCA_END=1 +NFT_NETBIRD_RELEVANT_COUNT=47 +NFT_NETBIRD| oifname "wt0" ct state related,established counter packets 733 bytes 194838 accept +NFT_NETBIRD| iifname "wt0" counter packets 688 bytes 510598 accept +NFT_NETBIRD| iifname "wt0" counter packets 36248 bytes 41371245 accept +NFT_NETBIRD| ip saddr [ADDR] iifname "wt0" ip protocol tcp tcp dport { 80, 443 } counter packets 3302601 bytes 531568845 accept +NFT_NETBIRD| oifname "wt0" ct state related,established counter packets 0 bytes 0 accept +NFT_NETBIRD| iifname "wt0" counter packets 0 bytes 0 accept +NFT_NETBIRD| iifname "wt0" counter packets 0 bytes 0 accept +NFT_NETBIRD|table ip netbird { +NFT_NETBIRD| chain netbird-rt-fwd { +NFT_NETBIRD| chain netbird-rt-postrouting { +NFT_NETBIRD| meta mark 0x0001bd22 oifname "wt0" counter packets 0 bytes 0 masquerade +NFT_NETBIRD| chain netbird-rt-redirect { +NFT_NETBIRD| chain netbird-mangle-postrouting { +NFT_NETBIRD| oifname "wt0" ct state new ct mark set 0x0001bd11 +NFT_NETBIRD| chain netbird-mangle-prerouting { +NFT_NETBIRD| iifname "wt0" ct state new ct mark set 0x0001bd10 +NFT_NETBIRD| iifname "wt0" ip saddr @nb0000001 fib daddr type local meta mark set 0x0001bd20 +NFT_NETBIRD| chain netbird-mangle-forward { +NFT_NETBIRD| oifname "wt0" tcp flags syn counter packets 112 bytes 6720 tcp option maxseg size > 1240 tcp option maxseg size set 1240 +NFT_NETBIRD| chain netbird-acl-input-rules { +NFT_NETBIRD| chain netbird-acl-input-filter { +NFT_NETBIRD| iifname "wt0" jump netbird-acl-input-rules +NFT_NETBIRD| iifname "wt0" drop +NFT_NETBIRD| chain netbird-acl-forward-filter { +NFT_NETBIRD| iifname "wt0" jump netbird-rt-fwd +NFT_NETBIRD| iifname "wt0" drop +NFT_NETBIRD| chain netbird-raw-out { +NFT_NETBIRD| chain netbird-raw-pre { +NFT_NETBIRD|table ip6 netbird { +NFT_NETBIRD| chain netbird-rt-fwd { +NFT_NETBIRD| chain netbird-rt-postrouting { +NFT_NETBIRD| meta mark 0x0001bd22 oifname "wt0" counter packets 0 bytes 0 masquerade +NFT_NETBIRD| chain netbird-rt-redirect { +NFT_NETBIRD| chain netbird-mangle-postrouting { +NFT_NETBIRD| oifname "wt0" ct state new ct mark set 0x0001bd11 +NFT_NETBIRD| chain netbird-mangle-prerouting { +NFT_NETBIRD| iifname "wt0" ct state new ct mark set 0x0001bd10 +NFT_NETBIRD| iifname "wt0" ip6 saddr @nb0000001 fib daddr type local meta mark set 0x0001bd20 +NFT_NETBIRD| chain netbird-mangle-forward { +NFT_NETBIRD| oifname "wt0" tcp flags syn counter packets 0 bytes 0 tcp option maxseg size > 1220 tcp option maxseg size set 1220 +NFT_NETBIRD| chain netbird-acl-input-rules { +NFT_NETBIRD| chain netbird-acl-input-filter { +NFT_NETBIRD| iifname "wt0" jump netbird-acl-input-rules +NFT_NETBIRD| iifname "wt0" drop +NFT_NETBIRD| chain netbird-acl-forward-filter { +NFT_NETBIRD| iifname "wt0" jump netbird-rt-fwd +NFT_NETBIRD| iifname "wt0" drop +NETBIRD_JOURNAL_RC=0 +NETBIRD_JOURNAL_RELEVANT_COUNT=0 +PUBLIC_ROUTE_GET|family=v4|rc=0|sha256=b1bac959b7f164a915a16d2128198deec0f9d739449bd8398fdf4fa4017159fa +PUBLIC_ROUTE_GET_LINE|family=v4|[ADDR] dev wt0 table 7120 src [ADDR] uid 0 +PUBLIC_ROUTE_GET|family=v6|rc=0|sha256=72b49fa2af3fc9123bcb7f2e4b98dfcbff4c61fd8bf4a3d021bc409d158c39bd +PUBLIC_ROUTE_GET_LINE|family=v6|[IPV6] from [IPV6] dev wt0 table 7120 src [IPV6] metric 1024 pref medium +MAIN_TABLE_ROUTE_GET_RC=1 +MAIN_TABLE_ROUTE_GET_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 +EDGE_NETBIRD_EGRESS_END=1 +DECISION=PASS_MOLDOVA_1164_EDGE_NETBIRD_EGRESS_RCA_COLLECTED +NEXT_GATE=READ_EXACT_1164_AND_CLASSIFY_MOLDOVA_EXIT_DEPENDENCY +TASK_RESULT=PASS_MOLDOVA_EDGE_NETBIRD_EGRESS_RCA +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-NETBIRD-EGRESS-RCA-1164R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} +WORKERS2_MOLDOVA_EDGE_NETBIRD_EGRESS_RCA_END=1 OUTPUT_END CHAT_OUTPUT_END