homelab-public-context/runtime/latest.json

{
  "schema_version": 1,
  "channel": "homelab-runtime",
  "command_id": "SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-EGRESS-PATH-RCA-1163R1",
  "status": "OK",
  "rc": 0,
  "host": "pve01",
  "mode": "read-only",
  "component": "homelab-moldova-edge-egress-path-rca",
  "started_at_utc": "2026-09-23T23:37:12Z",
  "finished_at_utc": "2026-09-23T23:37:16Z",
  "reference_register_checked": true,
  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
  "error_register_checked": true,
  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
  "command_sha256": "4dd736263e0e25b3d31d60e7b675853bd03788ccdef665c1273de9f2a4d83e72",
  "duplicate_failed_command_blocked": false,
  "block_reason": null,
  "execution_started": true,
  "change_declared": false,
  "result_contract_valid": true,
  "result_contract_status": null,
  "result_contract_error": null,
  "command_rc": 0,
  "changes_made": false,
  "rollback_started": false,
  "rollback_restored": null,
  "mutation_outcome": "NO_MUTATION",
  "sanitized": true,
  "secrets_included": false,
  "private_addresses_included": false,
  "raw_evidence_retained_locally": true,
  "raw_evidence_sha256": "78f1ea4cf748ca9ae58d41b22a7504d75b7e4919a270dcbe19dd061ff42739d1",
  "sanitized_output_sha256": "78f1ea4cf748ca9ae58d41b22a7504d75b7e4919a270dcbe19dd061ff42739d1",
  "output_truncated_in_json": false,
  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
  "output": "WORKERS2_MOLDOVA_EDGE_EGRESS_PATH_RCA_BEGIN=1\nCOMMAND_ID=SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-EGRESS-PATH-RCA-1163R1\nMODE=read-only\nCOMPONENT=homelab-moldova-edge-egress-path-rca\nMUTATION_BOUNDARY=NONE;PVE03_VM130_CONFIG_LINK_FIREWALL_PLUS_EDGE_GUEST_ROUTE_FIREWALL_RCA;NO_NETWORK_CHANGE;NO_VM_STATE_CHANGE;NO_DNS_WRITE;NO_PROVIDER_MUTATION;NO_MOLDOVA_CONNECTION;NO_SYSTEMD_ACTION;NO_GIT_WRITE;NO_SECRET_VALUE_OUTPUT\nPREDECESSOR_1162=PASS_EDGE_NO_TCP443_TO_CLOUDFLARE\nHISTORICAL_705R3=EDGE_CONTROL_PATH_READY_VM130_PVE03\nCARRIER_BASELINE=KNOWN_GOOD_1137_BYTE_SEMANTICS\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nTARGETS_SHA256=5cba5f1e14c65211c9fab6d11594c19279ab68369b4db3f7283708c368348288\nMD_RELAY_COUNT=1\nMD_RELAY_ENABLED=false\nCLUSTER_QUERY_RC=0\nEDGE_VM_MATCH_COUNT=1\nEDGE_VM_VMID=130\nEDGE_VM_NODE=pve03\nEDGE_VM_STATUS=running\nPVE03_PROBE_RC=0\nPVE03_PROBE_STDERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nPVE03_EDGE_PATH_BEGIN=1\nPVE03_HOST=pve03\nPVE03_EUID=0\nVM_STATUS=running\nVM_CONFIG_SHA256=eb283b95f5a89329cb433e7fca33e81e25f97caa7f662a7ad303c345ae1832b8\nVM_NET0_PRESENT=true\nVM_NET0_BRIDGE=vmbr0\nVM_NET0_FIREWALL=1\nVM_NET0_LINK_DOWN=0\nVM_NET0_MAC_SHA256=a6abbf31945b0b0723cdfeb74d33e2734f40f892962894276825cb8d41f2fdda\nHOST_LINK|name=tap130i0|present=true|state=unknown|master=fwbr130i0\nHOST_LINK|name=fwln130i0|present=true|state=up|master=fwbr130i0\nHOST_LINK|name=fwpr130p0|present=true|state=up|master=vmbr0\nHOST_LINK|name=fwbr130i0|present=true|state=up|master=master\nHOST_BRIDGE|name=vmbr0|state=up\nVM_FIREWALL_FILE_EXISTS=true\nVM_FIREWALL_FILE_SHA256=09e3beaba29b0d84e7bbbc2da490b924a763de3e3305fd3346697faa4b2422cb\nVM_FIREWALL_LINE|3:policy_in: ACCEPT\nVM_FIREWALL_LINE|4:policy_out: ACCEPT\nVM_FIREWALL_LINE|6:[RULES]\nVM_FIREWALL_LINE|7:OUT DROP -dest [ADDR] -log nolog\nVM_FIREWALL_LINE|8:OUT DROP -dest [ADDR] -log nolog\nVM_FIREWALL_LINE|9:OUT DROP -dest [ADDR] -log nolog\nPVE03_NFT_LINE_COUNT=1\nPVE03_IPTABLES-SAVE|-A FORWARD -i wt0 -m conntrack --ctstate DNAT -m mark ! --mark 0x1bd20 -j DROP\nPVE03_IPTABLES-SAVE|:PVEFW-Drop - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-DropBroadcast - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-FORWARD - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-FWBR-IN - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-FWBR-OUT - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-HOST-IN - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-HOST-OUT - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-INPUT - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-OUTPUT - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-Reject - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-SET-ACCEPT-MARK - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-logflags - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-reject - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-smurflog - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-smurfs - [0:0]\nPVE03_IPTABLES-SAVE|:PVEFW-tcpflags - [0:0]\nPVE03_IPTABLES-SAVE|:tap130i0-IN - [0:0]\nPVE03_IPTABLES-SAVE|:tap130i0-OUT - [0:0]\nPVE03_IPTABLES-SAVE|-A INPUT -i wt0 -j DROP\nPVE03_IPTABLES-SAVE|-A INPUT -j PVEFW-INPUT\nPVE03_IPTABLES-SAVE|-A FORWARD -i wt0 -j DROP\nPVE03_IPTABLES-SAVE|-A FORWARD -j PVEFW-FORWARD\nPVE03_IPTABLES-SAVE|-A OUTPUT -j PVEFW-OUTPUT\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -j PVEFW-DropBroadcast\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -p icmp -m icmp --icmp-type 3/4 -j ACCEPT\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -p icmp -m icmp --icmp-type 11 -j ACCEPT\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -m conntrack --ctstate INVALID -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m multiport --dports 135,445 -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m udp --dport 137:139 -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m udp --sport 137 --dport 1024:65535 -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -p tcp -m multiport --dports 135,139,445 -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m udp --dport 1900 -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m udp --sport 53 -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Drop -m comment --comment \"PVESIG:83WlR/a4wLbmURFqMQT3uJSgIG8\"\nPVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -m addrtype --dst-type BROADCAST -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -m addrtype --dst-type MULTICAST -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -m addrtype --dst-type ANYCAST -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -d [ADDR]/4 -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -m comment --comment \"PVESIG:NyjHNAtFbkH7WGLamPpdVnxHy4w\"\nPVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m conntrack --ctstate INVALID -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nPVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m physdev --physdev-in fwln+ --physdev-is-bridged -j PVEFW-FWBR-IN\nPVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m physdev --physdev-out fwln+ --physdev-is-bridged -j PVEFW-FWBR-OUT\nPVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m comment --comment \"PVESIG:qnNexOcGa+y+jebd4dAUqFSp5nw\"\nPVE03_IPTABLES-SAVE|-A PVEFW-FWBR-IN -m conntrack --ctstate INVALID,NEW -j PVEFW-smurfs\nPVE03_IPTABLES-SAVE|-A PVEFW-FWBR-IN -m physdev --physdev-out tap130i0 --physdev-is-bridged -j tap130i0-IN\nPVE03_IPTABLES-SAVE|-A PVEFW-FWBR-IN -m physdev --physdev-out tap190i0 --physdev-is-bridged -j tap190i0-IN\nPVE03_IPTABLES-SAVE|-A PVEFW-FWBR-IN -m comment --comment \"PVESIG:9OsF92MfiIODIzcUNIrKOmVOkVk\"\nPVE03_IPTABLES-SAVE|-A PVEFW-FWBR-OUT -m physdev --physdev-in tap130i0 --physdev-is-bridged -j tap130i0-OUT\nPVE03_IPTABLES-SAVE|-A PVEFW-FWBR-OUT -m physdev --physdev-in tap190i0 --physdev-is-bridged -j tap190i0-OUT\nPVE03_IPTABLES-SAVE|-A PVEFW-FWBR-OUT -m comment --comment \"PVESIG:rZNhlvxx7SPSwyB4BNDP7aliiPU\"\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -i lo -j ACCEPT\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate INVALID -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate INVALID,NEW -j PVEFW-smurfs\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p 2 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/24 -p tcp -m tcp --dport 22 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/24 -p tcp -m tcp --dport 8006 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/24 -p tcp -m tcp --dport 9100 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/24 -p tcp -m tcp --dport 9101 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/10 -p tcp -m tcp --dport 22 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/10 -p tcp -m tcp --dport 8006 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p icmp -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 8006 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 5900:5999 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 3128 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 22 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 60000:60050 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -d [ADDR]/32 -p udp -m udp --dport 5404:5405 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -d [ADDR]/32 -p udp -m udp --dport 5404:5405 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -j PVEFW-Drop\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -m comment --comment \"PVESIG:E/DUTOuKiQolUkKtABHBSyIB6Q4\"\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -o lo -j ACCEPT\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -m conntrack --ctstate INVALID -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -p 2 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -d [ADDR]/24 -p tcp -m tcp --dport 8006 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -d [ADDR]/24 -p tcp -m tcp --dport 22 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -d [ADDR]/24 -p tcp -m tcp --dport 5900:5999 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -d [ADDR]/24 -p tcp -m tcp --dport 3128 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -s [ADDR]/32 -d [ADDR]/32 -p udp -m udp --dport 5404:5405 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -s [ADDR]/32 -d [ADDR]/32 -p udp -m udp --dport 5404:5405 -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -j RETURN\nPVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -m comment --comment \"PVESIG:1eYE8DBaQG01lXgrEFYwctByTNQ\"\nPVE03_IPTABLES-SAVE|-A PVEFW-INPUT -j PVEFW-HOST-IN\nPVE03_IPTABLES-SAVE|-A PVEFW-INPUT -m comment --comment \"PVESIG:+5iMmLaxKXynOB/+5xibfx7WhFk\"\nPVE03_IPTABLES-SAVE|-A PVEFW-OUTPUT -j PVEFW-HOST-OUT\nPVE03_IPTABLES-SAVE|-A PVEFW-OUTPUT -m comment --comment \"PVESIG:LjHoZeSSiWAG3+2ZAyL/xuEehd0\"\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -j PVEFW-DropBroadcast\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -p icmp -m icmp --icmp-type 3/4 -j ACCEPT\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -p icmp -m icmp --icmp-type 11 -j ACCEPT\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -m conntrack --ctstate INVALID -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m multiport --dports 135,445 -j PVEFW-reject\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m udp --dport 137:139 -j PVEFW-reject\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m udp --sport 137 --dport 1024:65535 -j PVEFW-reject\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -p tcp -m multiport --dports 135,139,445 -j PVEFW-reject\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m udp --dport 1900 -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m udp --sport 53 -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-Reject -m comment --comment \"PVESIG:h3DyALVslgH5hutETfixGP08w7c\"\nPVE03_IPTABLES-SAVE|-A PVEFW-SET-ACCEPT-MARK -j MARK --set-xmark 0x80000000/0x80000000\nPVE03_IPTABLES-SAVE|-A PVEFW-SET-ACCEPT-MARK -m comment --comment \"PVESIG:Hg/OIgIwJChBUcWU8Xnjhdd2jUY\"\nPVE03_IPTABLES-SAVE|-A PVEFW-logflags -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-logflags -m comment --comment \"PVESIG:MN4PH1oPZeABMuWr64RrygPfW7A\"\nPVE03_IPTABLES-SAVE|-A PVEFW-reject -m addrtype --dst-type BROADCAST -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-reject -s [ADDR]/4 -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-reject -p icmp -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-reject -p tcp -j REJECT --reject-with tcp-reset\nPVE03_IPTABLES-SAVE|-A PVEFW-reject -p udp -j REJECT --reject-with icmp-port-unreachable\nPVE03_IPTABLES-SAVE|-A PVEFW-reject -p icmp -j REJECT --reject-with icmp-host-unreachable\nPVE03_IPTABLES-SAVE|-A PVEFW-reject -j REJECT --reject-with icmp-host-prohibited\nPVE03_IPTABLES-SAVE|-A PVEFW-reject -m comment --comment \"PVESIG:Jlkrtle1mDdtxDeI9QaDSL++Npc\"\nPVE03_IPTABLES-SAVE|-A PVEFW-smurflog -j DROP\nPVE03_IPTABLES-SAVE|-A PVEFW-smurflog -m comment --comment \"PVESIG:2gfT1VMkfr0JL6OccRXTGXo+1qk\"\nPVE03_IP6TABLES-SAVE|-A FORWARD -i wt0 -m conntrack --ctstate DNAT -m mark ! --mark 0x1bd20 -j DROP\nPVE03_IP6TABLES-SAVE|:PVEFW-Drop - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-DropBroadcast - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-FORWARD - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-FWBR-IN - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-FWBR-OUT - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-HOST-IN - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-HOST-OUT - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-INPUT - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-OUTPUT - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-Reject - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-SET-ACCEPT-MARK - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-logflags - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-reject - [0:0]\nPVE03_IP6TABLES-SAVE|:PVEFW-tcpflags - [0:0]\nPVE03_IP6TABLES-SAVE|:tap130i0-IN - [0:0]\nPVE03_IP6TABLES-SAVE|:tap130i0-OUT - [0:0]\nPVE03_IP6TABLES-SAVE|-A INPUT -i wt0 -j DROP\nPVE03_IP6TABLES-SAVE|-A INPUT -j PVEFW-INPUT\nPVE03_IP6TABLES-SAVE|-A FORWARD -i wt0 -j DROP\nPVE03_IP6TABLES-SAVE|-A FORWARD -j PVEFW-FORWARD\nPVE03_IP6TABLES-SAVE|-A OUTPUT -j PVEFW-OUTPUT\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p tcp -m tcp --dport 43 -j PVEFW-reject\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -j PVEFW-DropBroadcast\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p ipv6-icmp -m icmp6 --icmpv6-type 1 -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p ipv6-icmp -m icmp6 --icmpv6-type 3 -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p ipv6-icmp -m icmp6 --icmpv6-type 2 -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -m conntrack --ctstate INVALID -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m multiport --dports 135,445 -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m udp --dport 137:139 -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m udp --sport 137 --dport 1024:65535 -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p tcp -m multiport --dports 135,139,445 -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m udp --dport 1900 -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m udp --sport 53 -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Drop -m comment --comment \"PVESIG:Jb79Uw7z1vZglIcV7QXA5uY/nbk\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-DropBroadcast -d ff00::/8 -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-DropBroadcast -m comment --comment \"PVESIG:8Krk5Nh8pDZOOc7BQAbM6PlyFSU\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m conntrack --ctstate INVALID -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m physdev --physdev-in fwln+ --physdev-is-bridged -j PVEFW-FWBR-IN\nPVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m physdev --physdev-out fwln+ --physdev-is-bridged -j PVEFW-FWBR-OUT\nPVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m comment --comment \"PVESIG:qnNexOcGa+y+jebd4dAUqFSp5nw\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-IN -m physdev --physdev-out tap130i0 --physdev-is-bridged -j tap130i0-IN\nPVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-IN -m physdev --physdev-out tap190i0 --physdev-is-bridged -j tap190i0-IN\nPVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-IN -m comment --comment \"PVESIG:SN6fTaV+kY20ebDQ/eXdXf9FYBE\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-OUT -m physdev --physdev-in tap130i0 --physdev-is-bridged -j tap130i0-OUT\nPVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-OUT -m physdev --physdev-in tap190i0 --physdev-is-bridged -j tap190i0-OUT\nPVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-OUT -m comment --comment \"PVESIG:rZNhlvxx7SPSwyB4BNDP7aliiPU\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -i lo -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate INVALID -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p ipv6-icmp -m icmp6 --icmpv6-type 136 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p 2 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 8006 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 5900:5999 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 3128 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 22 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 60000:60050 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -j PVEFW-Drop\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -m comment --comment \"PVESIG:t+/LTT8OHyoSgF5i9Hox+PZEud4\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -o lo -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -m conntrack --ctstate INVALID -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -p ipv6-icmp -m icmp6 --icmpv6-type 136 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -p 2 -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -j RETURN\nPVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -m comment --comment \"PVESIG:br2bPbA9ZjuHOMNhV8tfLRw1mAs\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-INPUT -j PVEFW-HOST-IN\nPVE03_IP6TABLES-SAVE|-A PVEFW-INPUT -m comment --comment \"PVESIG:+5iMmLaxKXynOB/+5xibfx7WhFk\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-OUTPUT -j PVEFW-HOST-OUT\nPVE03_IP6TABLES-SAVE|-A PVEFW-OUTPUT -m comment --comment \"PVESIG:LjHoZeSSiWAG3+2ZAyL/xuEehd0\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p tcp -m tcp --dport 43 -j PVEFW-reject\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -j PVEFW-DropBroadcast\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p ipv6-icmp -m icmp6 --icmpv6-type 1 -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p ipv6-icmp -m icmp6 --icmpv6-type 3 -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p ipv6-icmp -m icmp6 --icmpv6-type 2 -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -m conntrack --ctstate INVALID -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m multiport --dports 135,445 -j PVEFW-reject\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m udp --dport 137:139 -j PVEFW-reject\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m udp --sport 137 --dport 1024:65535 -j PVEFW-reject\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p tcp -m multiport --dports 135,139,445 -j PVEFW-reject\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m udp --dport 1900 -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m udp --sport 53 -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-Reject -m comment --comment \"PVESIG:aL1nrxJk/u3XmTb3Am2eaM/3yCM\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-SET-ACCEPT-MARK -j MARK --set-xmark 0x80000000/0x80000000\nPVE03_IP6TABLES-SAVE|-A PVEFW-SET-ACCEPT-MARK -m comment --comment \"PVESIG:Hg/OIgIwJChBUcWU8Xnjhdd2jUY\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-logflags -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-logflags -m comment --comment \"PVESIG:MN4PH1oPZeABMuWr64RrygPfW7A\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-reject -p ipv6-icmp -j DROP\nPVE03_IP6TABLES-SAVE|-A PVEFW-reject -p tcp -j REJECT --reject-with tcp-reset\nPVE03_IP6TABLES-SAVE|-A PVEFW-reject -p udp -j REJECT --reject-with icmp6-port-unreachable\nPVE03_IP6TABLES-SAVE|-A PVEFW-reject -j REJECT --reject-with icmp6-adm-prohibited\nPVE03_IP6TABLES-SAVE|-A PVEFW-reject -m comment --comment \"PVESIG:etEECUYcgUdzuuO+LDP83pu0S8Y\"\nPVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN,PSH,URG -g PVEFW-logflags\nPVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE -g PVEFW-logflags\nPVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --tcp-flags SYN,RST SYN,RST -g PVEFW-logflags\nPVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --tcp-flags FIN,SYN FIN,SYN -g PVEFW-logflags\nPVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --sport 0 --tcp-flags FIN,SYN,RST,ACK SYN -g PVEFW-logflags\nPVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -m comment --comment \"PVESIG:CMFojwNPqllyqD67NeI5m+bP5mo\"\nPVE03_IP6TABLES-SAVE|-A tap130i0-IN -j CONNMARK --set-xmark 0x82/0xffffffff\nPVE03_IP6TABLES-SAVE|-A tap130i0-IN -p udp -m udp --sport 547 --dport 546 -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A tap130i0-IN -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A tap130i0-IN -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A tap130i0-IN -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A tap130i0-IN -p ipv6-icmp -m icmp6 --icmpv6-type 136 -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A tap130i0-IN -j ACCEPT\nPVE03_IP6TABLES-SAVE|-A tap130i0-IN -m comment --comment \"PVESIG:6BljBbDQyGrN4aDv7s9DGHcW7Gk\"\nPVE03_IP6TABLES-SAVE|-A tap130i0-OUT -j CONNMARK --set-xmark 0x82/0xffffffff\nPVE03_IP6TABLES-SAVE|-A tap130i0-OUT -p udp -m udp --sport 546 --dport 547 -g PVEFW-SET-ACCEPT-MARK\nPVE03_IP6TABLES-SAVE|-A tap130i0-OUT -m mac ! --mac-source bc:24:11:e1:f3:3c -j DROP\nPVE03_IP6TABLES-SAVE|-A tap130i0-OUT -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j DROP\nPVE03_IP6TABLES-SAVE|-A tap130i0-OUT -j MARK --set-xmark 0x0/0x80000000\nPVE03_DEFAULT_ROUTE_PRESENT=true\nPVE03_EDGE_PATH_END=1\nEDGE_QGA_TRANSPORT_RC=0\nEDGE_QGA_TRANSPORT_STDERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nEDGE_QGA_EXITCODE=0\nEDGE_QGA_ERR_BYTES=0\nEDGE_QGA_ERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nEDGE_GUEST_NETWORK_BEGIN=1\nEDGE_HOSTNAME=edge-vm\nEDGE_EUID=0\nIP_LINK_JSON_RC=0\nIP_LINK_COUNT=25\nLINK|name=lo|operstate=UNKNOWN|mtu=65536|up=true|master=none\nLINK|name=eth0|operstate=UP|mtu=1500|up=true|master=none\nLINK|name=wg-taftauto|operstate=UNKNOWN|mtu=1420|up=true|master=none\nLINK|name=wg-edge01|operstate=UNKNOWN|mtu=1420|up=true|master=none\nLINK|name=br-4d894f9e427b|operstate=DOWN|mtu=1500|up=true|master=none\nLINK|name=br-5f66e1018bdd|operstate=UP|mtu=1500|up=true|master=none\nLINK|name=br-8122fec51f39|operstate=UP|mtu=1500|up=true|master=none\nLINK|name=docker0|operstate=DOWN|mtu=1500|up=true|master=none\nLINK|name=br-915a81681c3e|operstate=UP|mtu=1500|up=true|master=none\nLINK|name=br-a4e31561a8d5|operstate=UP|mtu=1500|up=true|master=none\nLINK|name=br-d41b3e918fbc|operstate=UP|mtu=1500|up=true|master=none\nLINK|name=br-f43db13d76c4|operstate=UP|mtu=1500|up=true|master=none\nLINK|name=veth8fecc8f|operstate=UP|mtu=1500|up=true|master=br-f43db13d76c4\nLINK|name=veth6ebe603|operstate=UP|mtu=1500|up=true|master=br-915a81681c3e\nLINK|name=veth94bb505|operstate=UP|mtu=1500|up=true|master=br-a4e31561a8d5\nLINK|name=veth257d0f3|operstate=UP|mtu=1500|up=true|master=br-915a81681c3e\nLINK|name=vethf307a2b|operstate=UP|mtu=1500|up=true|master=br-5f66e1018bdd\nLINK|name=veth43ed72a|operstate=UP|mtu=1500|up=true|master=br-8122fec51f39\nLINK|name=vetha71fd0e|operstate=UP|mtu=1500|up=true|master=br-5f66e1018bdd\nLINK|name=veth52dc7f8|operstate=UP|mtu=1500|up=true|master=br-915a81681c3e\nIP_ADDR_JSON_RC=0\nADDR_COUNT|name=lo|v4=1|v6=1\nADDR_COUNT|name=eth0|v4=1|v6=1\nADDR_COUNT|name=wg-taftauto|v4=1|v6=0\nADDR_COUNT|name=wg-edge01|v4=1|v6=0\nADDR_COUNT|name=br-4d894f9e427b|v4=1|v6=0\nADDR_COUNT|name=br-5f66e1018bdd|v4=1|v6=1\nADDR_COUNT|name=br-8122fec51f39|v4=1|v6=1\nADDR_COUNT|name=docker0|v4=1|v6=1\nADDR_COUNT|name=br-915a81681c3e|v4=1|v6=1\nADDR_COUNT|name=br-a4e31561a8d5|v4=1|v6=1\nADDR_COUNT|name=br-d41b3e918fbc|v4=1|v6=1\nADDR_COUNT|name=br-f43db13d76c4|v4=1|v6=1\nADDR_COUNT|name=veth8fecc8f|v4=0|v6=1\nADDR_COUNT|name=veth6ebe603|v4=0|v6=1\nADDR_COUNT|name=veth94bb505|v4=0|v6=1\nADDR_COUNT|name=veth257d0f3|v4=0|v6=1\nADDR_COUNT|name=vethf307a2b|v4=0|v6=1\nADDR_COUNT|name=veth43ed72a|v4=0|v6=1\nADDR_COUNT|name=vetha71fd0e|v4=0|v6=1\nADDR_COUNT|name=veth52dc7f8|v4=0|v6=1\nIP_ROUTE_RC=0\nIP_ROUTE_LINE_COUNT=110\nROUTE|default dev wg-edge01 table 17777 scope link \nROUTE|default dev wt0 table 7120 \nROUTE|default via [ADDR] dev eth0 proto static \nROUTE|[ADDR]/24 dev wg-taftauto proto kernel scope link src [ADDR] \nROUTE|[ADDR]/30 dev wg-edge01 proto kernel scope link src [ADDR] \nROUTE|[ADDR]/28 dev br-915a81681c3e proto kernel scope link src [ADDR] \nROUTE|[ADDR]/16 dev wt0 proto kernel scope link src [ADDR] \nROUTE|[ADDR]/16 dev docker0 proto kernel scope link src [ADDR] linkdown \nROUTE|[ADDR]/16 dev br-4d894f9e427b proto kernel scope link src [ADDR] linkdown \nROUTE|[ADDR]/16 dev br-d41b3e918fbc proto kernel scope link src [ADDR] \nROUTE|[ADDR]/16 dev br-a4e31561a8d5 proto kernel scope link src [ADDR] \nROUTE|[ADDR] via [ADDR] dev eth0 src [ADDR] \nROUTE|[ADDR]/24 dev eth0 proto kernel scope link src [ADDR] \nROUTE|[ADDR]/20 dev br-f43db13d76c4 proto kernel scope link src [ADDR] \nROUTE|[ADDR]/20 dev br-8122fec51f39 proto kernel scope link src [ADDR] \nROUTE|[ADDR]/20 dev br-5f66e1018bdd proto kernel scope link src [ADDR] \nROUTE|local [ADDR] dev wg-taftauto table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev wg-taftauto table local proto kernel scope link src [ADDR] \nROUTE|local [ADDR] dev wg-edge01 table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev wg-edge01 table local proto kernel scope link src [ADDR] \nROUTE|local [ADDR] dev br-915a81681c3e table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev br-915a81681c3e table local proto kernel scope link src [ADDR] \nROUTE|local [ADDR] dev wt0 table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev wt0 table local proto kernel scope link src [ADDR] \nROUTE|local [ADDR]/8 dev lo table local proto kernel scope host src [ADDR] \nROUTE|local [ADDR] dev lo table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev lo table local proto kernel scope link src [ADDR] \nROUTE|local [ADDR] dev docker0 table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev docker0 table local proto kernel scope link src [ADDR] linkdown \nROUTE|local [ADDR] dev br-4d894f9e427b table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev br-4d894f9e427b table local proto kernel scope link src [ADDR] linkdown \nROUTE|local [ADDR] dev br-d41b3e918fbc table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev br-d41b3e918fbc table local proto kernel scope link src [ADDR] \nROUTE|local [ADDR] dev br-a4e31561a8d5 table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev br-a4e31561a8d5 table local proto kernel scope link src [ADDR] \nROUTE|local [ADDR] dev eth0 table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev eth0 table local proto kernel scope link src [ADDR] \nROUTE|local [ADDR] dev br-f43db13d76c4 table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev br-f43db13d76c4 table local proto kernel scope link src [ADDR] \nROUTE|local [ADDR] dev br-8122fec51f39 table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev br-8122fec51f39 table local proto kernel scope link src [ADDR] \nROUTE|local [ADDR] dev br-5f66e1018bdd table local proto kernel scope host src [ADDR] \nROUTE|broadcast [ADDR] dev br-5f66e1018bdd table local proto kernel scope link src [ADDR] \nROUTE|default dev wt0 table 7120 metric 1024 pref medium\nROUTE|[IPV6]/64 dev wt0 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev eth0 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev veth8fecc8f proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev br-f43db13d76c4 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev veth6ebe603 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev br-915a81681c3e proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev veth94bb505 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev br-a4e31561a8d5 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev veth43ed72a proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev br-8122fec51f39 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev veth257d0f3 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev vethf307a2b proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev br-5f66e1018bdd proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev vetha71fd0e proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev veth52dc7f8 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev vethb6a364a proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev veth98c9c14 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev veth54c3c78 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev veth3eda058 proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev br-d41b3e918fbc proto kernel metric 256 pref medium\nROUTE|[IPV6]/64 dev docker0 proto kernel metric 256 linkdown pref medium\nROUTE|local [IPV6] dev lo table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev wt0 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev veth43ed72a table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev br-915a81681c3e table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev veth8fecc8f table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev veth257d0f3 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev vethb6a364a table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev br-f43db13d76c4 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev vethf307a2b table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev veth94bb505 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev veth98c9c14 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev br-8122fec51f39 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev br-a4e31561a8d5 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev br-d41b3e918fbc table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev veth3eda058 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev eth0 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev vetha71fd0e table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev veth54c3c78 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev veth52dc7f8 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev br-5f66e1018bdd table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev veth6ebe603 table local proto kernel metric 0 pref medium\nROUTE|local [IPV6] dev docker0 table local proto kernel metric 0 pref medium\nROUTE|multicast [IPV6]/8 dev eth0 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev wg-edge01 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev wg-taftauto table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev veth8fecc8f table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev br-f43db13d76c4 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev veth6ebe603 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev br-915a81681c3e table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev veth94bb505 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev br-a4e31561a8d5 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev veth43ed72a table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev br-8122fec51f39 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev veth257d0f3 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev vethf307a2b table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev br-5f66e1018bdd table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev vetha71fd0e table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev veth52dc7f8 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev vethb6a364a table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev veth98c9c14 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev veth54c3c78 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev veth3eda058 table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev br-d41b3e918fbc table local proto kernel metric 256 pref medium\nROUTE|multicast [IPV6]/8 dev docker0 table local proto kernel metric 256 linkdown pref medium\nROUTE|multicast [IPV6]/8 dev wt0 table local proto kernel metric 256 pref medium\nIPV4_DEFAULT_ROUTE_COUNT=4\nDEFAULT4|dev=wg-edge01|gateway_sha256=NA|metric=NA\nDEFAULT4|dev=wt0|gateway_sha256=NA|metric=NA\nDEFAULT4|dev=eth0|gateway_sha256=4f9da1283166a1e9f4e6bc7dd240c76aef85772177f717f92abb6e8e2bb8de90|metric=NA\nDEFAULT4|dev=wt0|gateway_sha256=NA|metric=1024\nIP_RULE_RC=0\nRULE|0:\tfrom all lookup local\nRULE|100:\tfrom [ADDR] lookup main\nRULE|101:\tfrom [ADDR] lookup 17777\nRULE|105:\tfrom all lookup main suppress_prefixlength 0\nRULE|110:\tnot from all fwmark 0x1bd00 lookup 7120\nRULE|32766:\tfrom all lookup main\nRULE|32767:\tfrom all lookup default\nIPV6_ROUTE_RC=0\nIPV6_DEFAULT_ROUTE_COUNT=1\nDEFAULT6|default dev wt0 table 7120 metric 1024 pref medium\nROUTE_GET|family=v4|rc=0|out_sha256=b1bac959b7f164a915a16d2128198deec0f9d739449bd8398fdf4fa4017159fa|stderr_sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nROUTE_GET_LINE|family=v4|[ADDR] dev wt0 table 7120 src [ADDR] uid 0 \nROUTE_GET|family=v6|rc=0|out_sha256=72b49fa2af3fc9123bcb7f2e4b98dfcbff4c61fd8bf4a3d021bc409d158c39bd|stderr_sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nROUTE_GET_LINE|family=v6|[IPV6] from [IPV6] dev wt0 table 7120 src [IPV6] metric 1024 pref medium\nNEIGH_RC=0\nNEIGH_COUNT=26\nNEIGH_STATE|state=DELAY|count=1\nNEIGH_STATE|state=FAILED|count=3\nNEIGH_STATE|state=REACHABLE|count=9\nNEIGH_STATE|state=STALE|count=13\nRESOLV_EXISTS=true\nRESOLV_LINE_COUNT=23\nRESOLV_NAMESERVER_COUNT=1\nRESOLV_SEARCH_COUNT=1\nNETCFG_FILE_COUNT=1\nNETCFG|base=50-cloud-init.yaml|path_sha256=b9bc0da3b7c93f972715f97a7a4588b39d3b28d576358a5dafecc1c8a8e2958f|bytes=350|sha256=c23b699ba11e3c57f071346bc1e29cb33dd6de57b319452daed9145fd1b0ba66\nNETCFG_LINE|base=50-cloud-init.yaml|line=1|text=network:\nNETCFG_LINE|base=50-cloud-init.yaml|line=5|text=      match:\nNETCFG_LINE|base=50-cloud-init.yaml|line=15|text=      set-name: \"eth0\"\nNETCFG_LINE|base=50-cloud-init.yaml|line=16|text=      routes:\nNFT_RC=0\nNFT_LINE_COUNT=333\nNFT_RELEVANT_COUNT=92\nNFT|\tchain FORWARD {\nNFT|\t\ttype filter hook forward priority filter; policy accept;\nNFT|\t\tcounter packets 4611557 bytes 828408916 jump DOCKER-FORWARD\nNFT|\t\tip daddr [ADDR] iifname != \"br-d41b3e918fbc\" oifname \"br-d41b3e918fbc\" tcp dport 8080 counter packets 0 bytes 0 accept\nNFT|\t\tip daddr [ADDR] iifname != \"br-5f66e1018bdd\" oifname \"br-5f66e1018bdd\" tcp dport 3100 counter packets 0 bytes 0 accept\nNFT|\t\tip daddr [ADDR] iifname != \"br-5f66e1018bdd\" oifname \"br-5f66e1018bdd\" tcp dport 12345 counter packets 0 bytes 0 accept\nNFT|\t\tip daddr [ADDR] iifname != \"br-a4e31561a8d5\" oifname \"br-a4e31561a8d5\" tcp dport 8080 counter packets 0 bytes 0 accept\nNFT|\t\tip daddr [ADDR] iifname != \"br-a4e31561a8d5\" oifname \"br-a4e31561a8d5\" tcp dport 7422 counter packets 0 bytes 0 accept\nNFT|\t\tip daddr [ADDR] iifname != \"br-f43db13d76c4\" oifname \"br-f43db13d76c4\" tcp dport 8080 counter packets 0 bytes 0 accept\nNFT|\t\tip daddr [ADDR] iifname != \"br-915a81681c3e\" oifname \"br-915a81681c3e\" tcp dport 2375 counter packets 0 bytes 0 accept\nNFT|\t\tiifname != \"br-4d894f9e427b\" oifname \"br-4d894f9e427b\" counter packets 0 bytes 0 drop\nNFT|\t\tiifname != \"br-5f66e1018bdd\" oifname \"br-5f66e1018bdd\" counter packets 0 bytes 0 drop\nNFT|\t\tiifname != \"br-8122fec51f39\" oifname \"br-8122fec51f39\" counter packets 0 bytes 0 drop\nNFT|\t\tiifname != \"br-915a81681c3e\" oifname \"br-915a81681c3e\" counter packets 0 bytes 0 drop\nNFT|\t\tiifname != \"br-a4e31561a8d5\" oifname \"br-a4e31561a8d5\" counter packets 0 bytes 0 drop\nNFT|\t\tiifname != \"br-d41b3e918fbc\" oifname \"br-d41b3e918fbc\" counter packets 0 bytes 0 drop\nNFT|\t\tiifname != \"br-f43db13d76c4\" oifname \"br-f43db13d76c4\" counter packets 0 bytes 0 drop\nNFT|\t\tiifname != \"docker0\" oifname \"docker0\" counter packets 0 bytes 0 drop\nNFT|\tchain DOCKER-FORWARD {\nNFT|\t\ttype filter hook input priority filter; policy accept;\nNFT|\t\tiifname != \"lo\" tcp dport 81 counter packets 0 bytes 0 drop\nNFT|\t\tip saddr [ADDR]/16 iifname \"wt0\" ip protocol tcp tcp dport { 80, 443 } counter packets 3302601 bytes 531568845 accept\nNFT|\t\ttype nat hook postrouting priority srcnat; policy accept;\nNFT|\t\tip daddr [ADDR] iifname != \"br-915a81681c3e\" tcp dport 2375 counter packets 0 bytes 0 dnat to [ADDR]:2375\nNFT|\t\tip daddr [ADDR] iifname != \"br-f43db13d76c4\" tcp dport 8081 counter packets 0 bytes 0 dnat to [ADDR]:8080\nNFT|\t\tip daddr [ADDR] iifname != \"br-a4e31561a8d5\" tcp dport 7422 counter packets 0 bytes 0 dnat to [ADDR]:7422\nNFT|\t\tip daddr [ADDR] iifname != \"br-a4e31561a8d5\" tcp dport 8088 counter packets 0 bytes 0 dnat to [ADDR]:8080\nNFT|\t\tip daddr [ADDR] iifname != \"br-5f66e1018bdd\" tcp dport 12345 counter packets 0 bytes 0 dnat to [ADDR]:12345\nNFT|\t\tip daddr [ADDR] iifname != \"br-5f66e1018bdd\" tcp dport 3100 counter packets 0 bytes 0 dnat to [ADDR]:3100\nNFT|\t\tip daddr [ADDR] iifname != \"br-d41b3e918fbc\" tcp dport 9999 counter packets 0 bytes 0 dnat to [ADDR]:8080\nNFT|\t\ttype nat hook prerouting priority dstnat; policy accept;\nNFT|\tchain OUTPUT {\nNFT|\t\ttype nat hook output priority dstnat; policy accept;\nNFT|\t\ttype nat hook prerouting priority dstnat; policy accept;\nNFT|\t\tiifname \"wg-edge01\" ip saddr [ADDR] ip daddr [ADDR] tcp dport { 3478, 3479, 5000, 5222, 5269, 5349, 5350 } dnat to [ADDR]\nNFT|\t\ttype nat hook postrouting priority srcnat; policy accept;\nNFT|\t\toifname \"eth0\" ip daddr [ADDR] tcp dport { 3478, 3479, 5000, 5222, 5269, 5349, 5350 } snat to [ADDR]\nNFT|\t\ttype nat hook prerouting priority dstnat; policy accept;\nNFT|\tchain OUTPUT {\nNFT|\t\ttype nat hook output priority dstnat; policy accept;\nNFT|\tchain DOCKER-FORWARD {\nNFT|\tchain FORWARD {\nNFT|\t\ttype filter hook forward priority filter; policy accept;\nNFT|\t\tcounter packets 0 bytes 0 jump DOCKER-FORWARD\nNFT|\t\ttype filter hook input priority filter; policy accept;\nNFT|\t\tiifname != \"lo\" tcp dport 81 counter packets 0 bytes 0 drop\nNFT|\t\ttype filter hook prerouting priority raw; policy accept;\nNFT|\t\tip daddr [ADDR] iifname != \"br-f43db13d76c4\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"br-915a81681c3e\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"br-a4e31561a8d5\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"br-8122fec51f39\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"br-5f66e1018bdd\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"br-915a81681c3e\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"lo\" tcp dport 2375 counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"lo\" tcp dport 8081 counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"br-5f66e1018bdd\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"lo\" tcp dport 7422 counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"lo\" tcp dport 8088 counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"br-915a81681c3e\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"br-915a81681c3e\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"lo\" tcp dport 12345 counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"br-915a81681c3e\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"lo\" tcp dport 3100 counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"br-915a81681c3e\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"br-d41b3e918fbc\" counter packets 0 bytes 0 drop\nNFT|\t\tip daddr [ADDR] iifname != \"lo\" tcp dport 9999 counter packets 0 bytes 0 drop\nNFT|\t\ttype nat hook postrouting priority srcnat - 1; policy accept;\nNFT|\t\ttype nat hook prerouting priority dstnat; policy accept;\nNFT|\t\ttype filter hook postrouting priority mangle; policy accept;\nNFT|\t\ttype filter hook prerouting priority mangle; policy accept;\nNFT|\tchain netbird-mangle-forward {\nNFT|\t\ttype filter hook forward priority mangle; policy accept;\nNFT|\t\toifname \"wt0\" tcp flags syn counter packets 91 bytes 5460 tcp option maxseg size > 1240 tcp option maxseg size set 1240\nNFT|\t\ttype filter hook input priority filter; policy accept;\nNFT|\t\tiifname \"wt0\" drop\nNFT|\tchain netbird-acl-forward-filter {\nNFT|\t\ttype filter hook forward priority filter; policy accept;\nNFT|\t\tiifname \"wt0\" drop\nNFT|\t\ttype filter hook output priority raw; policy accept;\nNFT|\t\ttype filter hook prerouting priority raw; policy accept;\nNFT|\t\ttype nat hook postrouting priority srcnat - 1; policy accept;\nNFT|\t\ttype nat hook prerouting priority dstnat; policy accept;\nNFT|\t\ttype filter hook postrouting priority mangle; policy accept;\nNFT|\t\ttype filter hook prerouting priority mangle; policy accept;\nNFT|\tchain netbird-mangle-forward {\nNFT|\t\ttype filter hook forward priority mangle; policy accept;\nNFT|\t\toifname \"wt0\" tcp flags syn counter packets 0 bytes 0 tcp option maxseg size > 1220 tcp option maxseg size set 1220\nNFT|\t\ttype filter hook input priority filter; policy accept;\nNFT|\t\tiifname \"wt0\" drop\nNFT|\tchain netbird-acl-forward-filter {\nNFT|\t\ttype filter hook forward priority filter; policy accept;\nNFT|\t\tiifname \"wt0\" drop\nIPTABLES4_RC=0\nIPTABLES4_RELEVANT_COUNT=30\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-f43db13d76c4 -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-a4e31561a8d5 -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-8122fec51f39 -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-5f66e1018bdd -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 2375 -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 8081 -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-5f66e1018bdd -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 7422 -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 8088 -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 12345 -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 3100 -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-d41b3e918fbc -j DROP\nIPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 9999 -j DROP\nIPTABLES4|-A INPUT ! -i lo -p tcp -m tcp --dport 81 -j DROP\nIPTABLES4|-A INPUT -s [ADDR]/16 -i wt0 -p tcp -m multiport --dports 80,443 -j ACCEPT\nIPTABLES4|-A DOCKER ! -i br-4d894f9e427b -o br-4d894f9e427b -j DROP\nIPTABLES4|-A DOCKER ! -i br-5f66e1018bdd -o br-5f66e1018bdd -j DROP\nIPTABLES4|-A DOCKER ! -i br-8122fec51f39 -o br-8122fec51f39 -j DROP\nIPTABLES4|-A DOCKER ! -i br-915a81681c3e -o br-915a81681c3e -j DROP\nIPTABLES4|-A DOCKER ! -i br-a4e31561a8d5 -o br-a4e31561a8d5 -j DROP\nIPTABLES4|-A DOCKER ! -i br-d41b3e918fbc -o br-d41b3e918fbc -j DROP\nIPTABLES4|-A DOCKER ! -i br-f43db13d76c4 -o br-f43db13d76c4 -j DROP\nIPTABLES4|-A DOCKER ! -i docker0 -o docker0 -j DROP\nIPTABLES4|:PREROUTING ACCEPT [3066759:284433816]\nIPTABLES6_RC=0\nIPTABLES6_RELEVANT_COUNT=1\nIPTABLES6|-A INPUT ! -i lo -p tcp -m tcp --dport 81 -j DROP\nNET_SERVICE|name=systemd-networkd.service|active=active\nNET_SERVICE|name=NetworkManager.service|active=inactive\nNET_SERVICE|name=networking.service|active=inactive\nEDGE_GUEST_NETWORK_END=1\nDECISION=PASS_MOLDOVA_1163_EDGE_EGRESS_PATH_RCA_COLLECTED\nNEXT_GATE=READ_EXACT_1163_AND_CHOOSE_DNS_AUTHORITY_PATH\nTASK_RESULT=PASS_MOLDOVA_EDGE_EGRESS_PATH_RCA\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-EGRESS-PATH-RCA-1163R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\nWORKERS2_MOLDOVA_EDGE_EGRESS_PATH_RCA_END=1\n"
}