homelab-admin/homelab-public-context
1
0
Fork 0
Code Activity
Files
6d36af37ec27c27fe7edb1cfdabc0118ce217ec1
homelab-public-context/runtime/latest.txt
T

658 lines
44 KiB
Plaintext
Raw Blame History

CHAT_OUTPUT_BEGIN
COMMAND_ID=SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-EGRESS-PATH-RCA-1163R1
STATUS=OK
RC=0
HOST=pve01
MODE=read-only
COMPONENT=homelab-moldova-edge-egress-path-rca
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=4dd736263e0e25b3d31d60e7b675853bd03788ccdef665c1273de9f2a4d83e72
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=false
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=0
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=78f1ea4cf748ca9ae58d41b22a7504d75b7e4919a270dcbe19dd061ff42739d1
SANITIZED_OUTPUT_SHA256=78f1ea4cf748ca9ae58d41b22a7504d75b7e4919a270dcbe19dd061ff42739d1
OUTPUT_BEGIN
WORKERS2_MOLDOVA_EDGE_EGRESS_PATH_RCA_BEGIN=1
COMMAND_ID=SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-EGRESS-PATH-RCA-1163R1
MODE=read-only
COMPONENT=homelab-moldova-edge-egress-path-rca
MUTATION_BOUNDARY=NONE;PVE03_VM130_CONFIG_LINK_FIREWALL_PLUS_EDGE_GUEST_ROUTE_FIREWALL_RCA;NO_NETWORK_CHANGE;NO_VM_STATE_CHANGE;NO_DNS_WRITE;NO_PROVIDER_MUTATION;NO_MOLDOVA_CONNECTION;NO_SYSTEMD_ACTION;NO_GIT_WRITE;NO_SECRET_VALUE_OUTPUT
PREDECESSOR_1162=PASS_EDGE_NO_TCP443_TO_CLOUDFLARE
HISTORICAL_705R3=EDGE_CONTROL_PATH_READY_VM130_PVE03
CARRIER_BASELINE=KNOWN_GOOD_1137_BYTE_SEMANTICS
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d
TARGETS_SHA256=5cba5f1e14c65211c9fab6d11594c19279ab68369b4db3f7283708c368348288
MD_RELAY_COUNT=1
MD_RELAY_ENABLED=false
CLUSTER_QUERY_RC=0
EDGE_VM_MATCH_COUNT=1
EDGE_VM_VMID=130
EDGE_VM_NODE=pve03
EDGE_VM_STATUS=running
PVE03_PROBE_RC=0
PVE03_PROBE_STDERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
PVE03_EDGE_PATH_BEGIN=1
PVE03_HOST=pve03
PVE03_EUID=0
VM_STATUS=running
VM_CONFIG_SHA256=eb283b95f5a89329cb433e7fca33e81e25f97caa7f662a7ad303c345ae1832b8
VM_NET0_PRESENT=true
VM_NET0_BRIDGE=vmbr0
VM_NET0_FIREWALL=1
VM_NET0_LINK_DOWN=0
VM_NET0_MAC_SHA256=a6abbf31945b0b0723cdfeb74d33e2734f40f892962894276825cb8d41f2fdda
HOST_LINK|name=tap130i0|present=true|state=unknown|master=fwbr130i0
HOST_LINK|name=fwln130i0|present=true|state=up|master=fwbr130i0
HOST_LINK|name=fwpr130p0|present=true|state=up|master=vmbr0
HOST_LINK|name=fwbr130i0|present=true|state=up|master=master
HOST_BRIDGE|name=vmbr0|state=up
VM_FIREWALL_FILE_EXISTS=true
VM_FIREWALL_FILE_SHA256=09e3beaba29b0d84e7bbbc2da490b924a763de3e3305fd3346697faa4b2422cb
VM_FIREWALL_LINE|3:policy_in: ACCEPT
VM_FIREWALL_LINE|4:policy_out: ACCEPT
VM_FIREWALL_LINE|6:[RULES]
VM_FIREWALL_LINE|7:OUT DROP -dest [ADDR] -log nolog
VM_FIREWALL_LINE|8:OUT DROP -dest [ADDR] -log nolog
VM_FIREWALL_LINE|9:OUT DROP -dest [ADDR] -log nolog
PVE03_NFT_LINE_COUNT=1
PVE03_IPTABLES-SAVE|-A FORWARD -i wt0 -m conntrack --ctstate DNAT -m mark ! --mark 0x1bd20 -j DROP
PVE03_IPTABLES-SAVE|:PVEFW-Drop - [0:0]
PVE03_IPTABLES-SAVE|:PVEFW-DropBroadcast - [0:0]
PVE03_IPTABLES-SAVE|:PVEFW-FORWARD - [0:0]
PVE03_IPTABLES-SAVE|:PVEFW-FWBR-IN - [0:0]
PVE03_IPTABLES-SAVE|:PVEFW-FWBR-OUT - [0:0]
PVE03_IPTABLES-SAVE|:PVEFW-HOST-IN - [0:0]
PVE03_IPTABLES-SAVE|:PVEFW-HOST-OUT - [0:0]
PVE03_IPTABLES-SAVE|:PVEFW-INPUT - [0:0]
PVE03_IPTABLES-SAVE|:PVEFW-OUTPUT - [0:0]
PVE03_IPTABLES-SAVE|:PVEFW-Reject - [0:0]
PVE03_IPTABLES-SAVE|:PVEFW-SET-ACCEPT-MARK - [0:0]
PVE03_IPTABLES-SAVE|:PVEFW-logflags - [0:0]
PVE03_IPTABLES-SAVE|:PVEFW-reject - [0:0]
PVE03_IPTABLES-SAVE|:PVEFW-smurflog - [0:0]
PVE03_IPTABLES-SAVE|:PVEFW-smurfs - [0:0]
PVE03_IPTABLES-SAVE|:PVEFW-tcpflags - [0:0]
PVE03_IPTABLES-SAVE|:tap130i0-IN - [0:0]
PVE03_IPTABLES-SAVE|:tap130i0-OUT - [0:0]
PVE03_IPTABLES-SAVE|-A INPUT -i wt0 -j DROP
PVE03_IPTABLES-SAVE|-A INPUT -j PVEFW-INPUT
PVE03_IPTABLES-SAVE|-A FORWARD -i wt0 -j DROP
PVE03_IPTABLES-SAVE|-A FORWARD -j PVEFW-FORWARD
PVE03_IPTABLES-SAVE|-A OUTPUT -j PVEFW-OUTPUT
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -j PVEFW-DropBroadcast
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p icmp -m icmp --icmp-type 3/4 -j ACCEPT
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p icmp -m icmp --icmp-type 11 -j ACCEPT
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -m conntrack --ctstate INVALID -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m multiport --dports 135,445 -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m udp --dport 137:139 -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m udp --sport 137 --dport 1024:65535 -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p tcp -m multiport --dports 135,139,445 -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m udp --dport 1900 -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -p udp -m udp --sport 53 -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-Drop -m comment --comment "PVESIG:83WlR/a4wLbmURFqMQT3uJSgIG8"
PVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -m addrtype --dst-type BROADCAST -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -m addrtype --dst-type MULTICAST -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -m addrtype --dst-type ANYCAST -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -d [ADDR]/4 -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-DropBroadcast -m comment --comment "PVESIG:NyjHNAtFbkH7WGLamPpdVnxHy4w"
PVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m conntrack --ctstate INVALID -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
PVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m physdev --physdev-in fwln+ --physdev-is-bridged -j PVEFW-FWBR-IN
PVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m physdev --physdev-out fwln+ --physdev-is-bridged -j PVEFW-FWBR-OUT
PVE03_IPTABLES-SAVE|-A PVEFW-FORWARD -m comment --comment "PVESIG:qnNexOcGa+y+jebd4dAUqFSp5nw"
PVE03_IPTABLES-SAVE|-A PVEFW-FWBR-IN -m conntrack --ctstate INVALID,NEW -j PVEFW-smurfs
PVE03_IPTABLES-SAVE|-A PVEFW-FWBR-IN -m physdev --physdev-out tap130i0 --physdev-is-bridged -j tap130i0-IN
PVE03_IPTABLES-SAVE|-A PVEFW-FWBR-IN -m physdev --physdev-out tap190i0 --physdev-is-bridged -j tap190i0-IN
PVE03_IPTABLES-SAVE|-A PVEFW-FWBR-IN -m comment --comment "PVESIG:9OsF92MfiIODIzcUNIrKOmVOkVk"
PVE03_IPTABLES-SAVE|-A PVEFW-FWBR-OUT -m physdev --physdev-in tap130i0 --physdev-is-bridged -j tap130i0-OUT
PVE03_IPTABLES-SAVE|-A PVEFW-FWBR-OUT -m physdev --physdev-in tap190i0 --physdev-is-bridged -j tap190i0-OUT
PVE03_IPTABLES-SAVE|-A PVEFW-FWBR-OUT -m comment --comment "PVESIG:rZNhlvxx7SPSwyB4BNDP7aliiPU"
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -i lo -j ACCEPT
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate INVALID -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate INVALID,NEW -j PVEFW-smurfs
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p 2 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/24 -p tcp -m tcp --dport 22 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/24 -p tcp -m tcp --dport 8006 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/24 -p tcp -m tcp --dport 9100 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/24 -p tcp -m tcp --dport 9101 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/10 -p tcp -m tcp --dport 22 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/10 -p tcp -m tcp --dport 8006 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p icmp -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 8006 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 5900:5999 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 3128 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 22 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v4 src -m tcp --dport 60000:60050 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -d [ADDR]/32 -p udp -m udp --dport 5404:5405 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -s [ADDR]/32 -d [ADDR]/32 -p udp -m udp --dport 5404:5405 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -j PVEFW-Drop
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-IN -m comment --comment "PVESIG:E/DUTOuKiQolUkKtABHBSyIB6Q4"
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -o lo -j ACCEPT
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -m conntrack --ctstate INVALID -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -p 2 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -d [ADDR]/24 -p tcp -m tcp --dport 8006 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -d [ADDR]/24 -p tcp -m tcp --dport 22 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -d [ADDR]/24 -p tcp -m tcp --dport 5900:5999 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -d [ADDR]/24 -p tcp -m tcp --dport 3128 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -s [ADDR]/32 -d [ADDR]/32 -p udp -m udp --dport 5404:5405 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -s [ADDR]/32 -d [ADDR]/32 -p udp -m udp --dport 5404:5405 -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -j RETURN
PVE03_IPTABLES-SAVE|-A PVEFW-HOST-OUT -m comment --comment "PVESIG:1eYE8DBaQG01lXgrEFYwctByTNQ"
PVE03_IPTABLES-SAVE|-A PVEFW-INPUT -j PVEFW-HOST-IN
PVE03_IPTABLES-SAVE|-A PVEFW-INPUT -m comment --comment "PVESIG:+5iMmLaxKXynOB/+5xibfx7WhFk"
PVE03_IPTABLES-SAVE|-A PVEFW-OUTPUT -j PVEFW-HOST-OUT
PVE03_IPTABLES-SAVE|-A PVEFW-OUTPUT -m comment --comment "PVESIG:LjHoZeSSiWAG3+2ZAyL/xuEehd0"
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -j PVEFW-DropBroadcast
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p icmp -m icmp --icmp-type 3/4 -j ACCEPT
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p icmp -m icmp --icmp-type 11 -j ACCEPT
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -m conntrack --ctstate INVALID -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m multiport --dports 135,445 -j PVEFW-reject
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m udp --dport 137:139 -j PVEFW-reject
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m udp --sport 137 --dport 1024:65535 -j PVEFW-reject
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p tcp -m multiport --dports 135,139,445 -j PVEFW-reject
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m udp --dport 1900 -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -p udp -m udp --sport 53 -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-Reject -m comment --comment "PVESIG:h3DyALVslgH5hutETfixGP08w7c"
PVE03_IPTABLES-SAVE|-A PVEFW-SET-ACCEPT-MARK -j MARK --set-xmark 0x80000000/0x80000000
PVE03_IPTABLES-SAVE|-A PVEFW-SET-ACCEPT-MARK -m comment --comment "PVESIG:Hg/OIgIwJChBUcWU8Xnjhdd2jUY"
PVE03_IPTABLES-SAVE|-A PVEFW-logflags -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-logflags -m comment --comment "PVESIG:MN4PH1oPZeABMuWr64RrygPfW7A"
PVE03_IPTABLES-SAVE|-A PVEFW-reject -m addrtype --dst-type BROADCAST -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-reject -s [ADDR]/4 -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-reject -p icmp -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-reject -p tcp -j REJECT --reject-with tcp-reset
PVE03_IPTABLES-SAVE|-A PVEFW-reject -p udp -j REJECT --reject-with icmp-port-unreachable
PVE03_IPTABLES-SAVE|-A PVEFW-reject -p icmp -j REJECT --reject-with icmp-host-unreachable
PVE03_IPTABLES-SAVE|-A PVEFW-reject -j REJECT --reject-with icmp-host-prohibited
PVE03_IPTABLES-SAVE|-A PVEFW-reject -m comment --comment "PVESIG:Jlkrtle1mDdtxDeI9QaDSL++Npc"
PVE03_IPTABLES-SAVE|-A PVEFW-smurflog -j DROP
PVE03_IPTABLES-SAVE|-A PVEFW-smurflog -m comment --comment "PVESIG:2gfT1VMkfr0JL6OccRXTGXo+1qk"
PVE03_IP6TABLES-SAVE|-A FORWARD -i wt0 -m conntrack --ctstate DNAT -m mark ! --mark 0x1bd20 -j DROP
PVE03_IP6TABLES-SAVE|:PVEFW-Drop - [0:0]
PVE03_IP6TABLES-SAVE|:PVEFW-DropBroadcast - [0:0]
PVE03_IP6TABLES-SAVE|:PVEFW-FORWARD - [0:0]
PVE03_IP6TABLES-SAVE|:PVEFW-FWBR-IN - [0:0]
PVE03_IP6TABLES-SAVE|:PVEFW-FWBR-OUT - [0:0]
PVE03_IP6TABLES-SAVE|:PVEFW-HOST-IN - [0:0]
PVE03_IP6TABLES-SAVE|:PVEFW-HOST-OUT - [0:0]
PVE03_IP6TABLES-SAVE|:PVEFW-INPUT - [0:0]
PVE03_IP6TABLES-SAVE|:PVEFW-OUTPUT - [0:0]
PVE03_IP6TABLES-SAVE|:PVEFW-Reject - [0:0]
PVE03_IP6TABLES-SAVE|:PVEFW-SET-ACCEPT-MARK - [0:0]
PVE03_IP6TABLES-SAVE|:PVEFW-logflags - [0:0]
PVE03_IP6TABLES-SAVE|:PVEFW-reject - [0:0]
PVE03_IP6TABLES-SAVE|:PVEFW-tcpflags - [0:0]
PVE03_IP6TABLES-SAVE|:tap130i0-IN - [0:0]
PVE03_IP6TABLES-SAVE|:tap130i0-OUT - [0:0]
PVE03_IP6TABLES-SAVE|-A INPUT -i wt0 -j DROP
PVE03_IP6TABLES-SAVE|-A INPUT -j PVEFW-INPUT
PVE03_IP6TABLES-SAVE|-A FORWARD -i wt0 -j DROP
PVE03_IP6TABLES-SAVE|-A FORWARD -j PVEFW-FORWARD
PVE03_IP6TABLES-SAVE|-A OUTPUT -j PVEFW-OUTPUT
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p tcp -m tcp --dport 43 -j PVEFW-reject
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -j PVEFW-DropBroadcast
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p ipv6-icmp -m icmp6 --icmpv6-type 1 -j ACCEPT
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p ipv6-icmp -m icmp6 --icmpv6-type 3 -j ACCEPT
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p ipv6-icmp -m icmp6 --icmpv6-type 2 -j ACCEPT
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -m conntrack --ctstate INVALID -j DROP
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m multiport --dports 135,445 -j DROP
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m udp --dport 137:139 -j DROP
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m udp --sport 137 --dport 1024:65535 -j DROP
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p tcp -m multiport --dports 135,139,445 -j DROP
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m udp --dport 1900 -j DROP
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j DROP
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -p udp -m udp --sport 53 -j DROP
PVE03_IP6TABLES-SAVE|-A PVEFW-Drop -m comment --comment "PVESIG:Jb79Uw7z1vZglIcV7QXA5uY/nbk"
PVE03_IP6TABLES-SAVE|-A PVEFW-DropBroadcast -d ff00::/8 -j DROP
PVE03_IP6TABLES-SAVE|-A PVEFW-DropBroadcast -m comment --comment "PVESIG:8Krk5Nh8pDZOOc7BQAbM6PlyFSU"
PVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m conntrack --ctstate INVALID -j DROP
PVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
PVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m physdev --physdev-in fwln+ --physdev-is-bridged -j PVEFW-FWBR-IN
PVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m physdev --physdev-out fwln+ --physdev-is-bridged -j PVEFW-FWBR-OUT
PVE03_IP6TABLES-SAVE|-A PVEFW-FORWARD -m comment --comment "PVESIG:qnNexOcGa+y+jebd4dAUqFSp5nw"
PVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-IN -m physdev --physdev-out tap130i0 --physdev-is-bridged -j tap130i0-IN
PVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-IN -m physdev --physdev-out tap190i0 --physdev-is-bridged -j tap190i0-IN
PVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-IN -m comment --comment "PVESIG:SN6fTaV+kY20ebDQ/eXdXf9FYBE"
PVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-OUT -m physdev --physdev-in tap130i0 --physdev-is-bridged -j tap130i0-OUT
PVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-OUT -m physdev --physdev-in tap190i0 --physdev-is-bridged -j tap190i0-OUT
PVE03_IP6TABLES-SAVE|-A PVEFW-FWBR-OUT -m comment --comment "PVESIG:rZNhlvxx7SPSwyB4BNDP7aliiPU"
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -i lo -j ACCEPT
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate INVALID -j DROP
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j RETURN
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j RETURN
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j RETURN
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p ipv6-icmp -m icmp6 --icmpv6-type 136 -j RETURN
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p 2 -j RETURN
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 8006 -j RETURN
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 5900:5999 -j RETURN
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 3128 -j RETURN
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 22 -j RETURN
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -p tcp -m set --match-set PVEFW-0-management-v6 src -m tcp --dport 60000:60050 -j RETURN
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -j PVEFW-Drop
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -j DROP
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-IN -m comment --comment "PVESIG:t+/LTT8OHyoSgF5i9Hox+PZEud4"
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -o lo -j ACCEPT
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -m conntrack --ctstate INVALID -j DROP
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j RETURN
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j RETURN
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -p ipv6-icmp -m icmp6 --icmpv6-type 136 -j RETURN
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -p 2 -j RETURN
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -j RETURN
PVE03_IP6TABLES-SAVE|-A PVEFW-HOST-OUT -m comment --comment "PVESIG:br2bPbA9ZjuHOMNhV8tfLRw1mAs"
PVE03_IP6TABLES-SAVE|-A PVEFW-INPUT -j PVEFW-HOST-IN
PVE03_IP6TABLES-SAVE|-A PVEFW-INPUT -m comment --comment "PVESIG:+5iMmLaxKXynOB/+5xibfx7WhFk"
PVE03_IP6TABLES-SAVE|-A PVEFW-OUTPUT -j PVEFW-HOST-OUT
PVE03_IP6TABLES-SAVE|-A PVEFW-OUTPUT -m comment --comment "PVESIG:LjHoZeSSiWAG3+2ZAyL/xuEehd0"
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p tcp -m tcp --dport 43 -j PVEFW-reject
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -j PVEFW-DropBroadcast
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p ipv6-icmp -m icmp6 --icmpv6-type 1 -j ACCEPT
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p ipv6-icmp -m icmp6 --icmpv6-type 3 -j ACCEPT
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p ipv6-icmp -m icmp6 --icmpv6-type 2 -j ACCEPT
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -m conntrack --ctstate INVALID -j DROP
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m multiport --dports 135,445 -j PVEFW-reject
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m udp --dport 137:139 -j PVEFW-reject
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m udp --sport 137 --dport 1024:65535 -j PVEFW-reject
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p tcp -m multiport --dports 135,139,445 -j PVEFW-reject
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m udp --dport 1900 -j DROP
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j DROP
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -p udp -m udp --sport 53 -j DROP
PVE03_IP6TABLES-SAVE|-A PVEFW-Reject -m comment --comment "PVESIG:aL1nrxJk/u3XmTb3Am2eaM/3yCM"
PVE03_IP6TABLES-SAVE|-A PVEFW-SET-ACCEPT-MARK -j MARK --set-xmark 0x80000000/0x80000000
PVE03_IP6TABLES-SAVE|-A PVEFW-SET-ACCEPT-MARK -m comment --comment "PVESIG:Hg/OIgIwJChBUcWU8Xnjhdd2jUY"
PVE03_IP6TABLES-SAVE|-A PVEFW-logflags -j DROP
PVE03_IP6TABLES-SAVE|-A PVEFW-logflags -m comment --comment "PVESIG:MN4PH1oPZeABMuWr64RrygPfW7A"
PVE03_IP6TABLES-SAVE|-A PVEFW-reject -p ipv6-icmp -j DROP
PVE03_IP6TABLES-SAVE|-A PVEFW-reject -p tcp -j REJECT --reject-with tcp-reset
PVE03_IP6TABLES-SAVE|-A PVEFW-reject -p udp -j REJECT --reject-with icmp6-port-unreachable
PVE03_IP6TABLES-SAVE|-A PVEFW-reject -j REJECT --reject-with icmp6-adm-prohibited
PVE03_IP6TABLES-SAVE|-A PVEFW-reject -m comment --comment "PVESIG:etEECUYcgUdzuuO+LDP83pu0S8Y"
PVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN,PSH,URG -g PVEFW-logflags
PVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE -g PVEFW-logflags
PVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --tcp-flags SYN,RST SYN,RST -g PVEFW-logflags
PVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --tcp-flags FIN,SYN FIN,SYN -g PVEFW-logflags
PVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -p tcp -m tcp --sport 0 --tcp-flags FIN,SYN,RST,ACK SYN -g PVEFW-logflags
PVE03_IP6TABLES-SAVE|-A PVEFW-tcpflags -m comment --comment "PVESIG:CMFojwNPqllyqD67NeI5m+bP5mo"
PVE03_IP6TABLES-SAVE|-A tap130i0-IN -j CONNMARK --set-xmark 0x82/0xffffffff
PVE03_IP6TABLES-SAVE|-A tap130i0-IN -p udp -m udp --sport 547 --dport 546 -j ACCEPT
PVE03_IP6TABLES-SAVE|-A tap130i0-IN -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j ACCEPT
PVE03_IP6TABLES-SAVE|-A tap130i0-IN -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j ACCEPT
PVE03_IP6TABLES-SAVE|-A tap130i0-IN -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j ACCEPT
PVE03_IP6TABLES-SAVE|-A tap130i0-IN -p ipv6-icmp -m icmp6 --icmpv6-type 136 -j ACCEPT
PVE03_IP6TABLES-SAVE|-A tap130i0-IN -j ACCEPT
PVE03_IP6TABLES-SAVE|-A tap130i0-IN -m comment --comment "PVESIG:6BljBbDQyGrN4aDv7s9DGHcW7Gk"
PVE03_IP6TABLES-SAVE|-A tap130i0-OUT -j CONNMARK --set-xmark 0x82/0xffffffff
PVE03_IP6TABLES-SAVE|-A tap130i0-OUT -p udp -m udp --sport 546 --dport 547 -g PVEFW-SET-ACCEPT-MARK
PVE03_IP6TABLES-SAVE|-A tap130i0-OUT -m mac ! --mac-source bc:24:11:e1:f3:3c -j DROP
PVE03_IP6TABLES-SAVE|-A tap130i0-OUT -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j DROP
PVE03_IP6TABLES-SAVE|-A tap130i0-OUT -j MARK --set-xmark 0x0/0x80000000
PVE03_DEFAULT_ROUTE_PRESENT=true
PVE03_EDGE_PATH_END=1
EDGE_QGA_TRANSPORT_RC=0
EDGE_QGA_TRANSPORT_STDERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
EDGE_QGA_EXITCODE=0
EDGE_QGA_ERR_BYTES=0
EDGE_QGA_ERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
EDGE_GUEST_NETWORK_BEGIN=1
EDGE_HOSTNAME=edge-vm
EDGE_EUID=0
IP_LINK_JSON_RC=0
IP_LINK_COUNT=25
LINK|name=lo|operstate=UNKNOWN|mtu=65536|up=true|master=none
LINK|name=eth0|operstate=UP|mtu=1500|up=true|master=none
LINK|name=wg-taftauto|operstate=UNKNOWN|mtu=1420|up=true|master=none
LINK|name=wg-edge01|operstate=UNKNOWN|mtu=1420|up=true|master=none
LINK|name=br-4d894f9e427b|operstate=DOWN|mtu=1500|up=true|master=none
LINK|name=br-5f66e1018bdd|operstate=UP|mtu=1500|up=true|master=none
LINK|name=br-8122fec51f39|operstate=UP|mtu=1500|up=true|master=none
LINK|name=docker0|operstate=DOWN|mtu=1500|up=true|master=none
LINK|name=br-915a81681c3e|operstate=UP|mtu=1500|up=true|master=none
LINK|name=br-a4e31561a8d5|operstate=UP|mtu=1500|up=true|master=none
LINK|name=br-d41b3e918fbc|operstate=UP|mtu=1500|up=true|master=none
LINK|name=br-f43db13d76c4|operstate=UP|mtu=1500|up=true|master=none
LINK|name=veth8fecc8f|operstate=UP|mtu=1500|up=true|master=br-f43db13d76c4
LINK|name=veth6ebe603|operstate=UP|mtu=1500|up=true|master=br-915a81681c3e
LINK|name=veth94bb505|operstate=UP|mtu=1500|up=true|master=br-a4e31561a8d5
LINK|name=veth257d0f3|operstate=UP|mtu=1500|up=true|master=br-915a81681c3e
LINK|name=vethf307a2b|operstate=UP|mtu=1500|up=true|master=br-5f66e1018bdd
LINK|name=veth43ed72a|operstate=UP|mtu=1500|up=true|master=br-8122fec51f39
LINK|name=vetha71fd0e|operstate=UP|mtu=1500|up=true|master=br-5f66e1018bdd
LINK|name=veth52dc7f8|operstate=UP|mtu=1500|up=true|master=br-915a81681c3e
IP_ADDR_JSON_RC=0
ADDR_COUNT|name=lo|v4=1|v6=1
ADDR_COUNT|name=eth0|v4=1|v6=1
ADDR_COUNT|name=wg-taftauto|v4=1|v6=0
ADDR_COUNT|name=wg-edge01|v4=1|v6=0
ADDR_COUNT|name=br-4d894f9e427b|v4=1|v6=0
ADDR_COUNT|name=br-5f66e1018bdd|v4=1|v6=1
ADDR_COUNT|name=br-8122fec51f39|v4=1|v6=1
ADDR_COUNT|name=docker0|v4=1|v6=1
ADDR_COUNT|name=br-915a81681c3e|v4=1|v6=1
ADDR_COUNT|name=br-a4e31561a8d5|v4=1|v6=1
ADDR_COUNT|name=br-d41b3e918fbc|v4=1|v6=1
ADDR_COUNT|name=br-f43db13d76c4|v4=1|v6=1
ADDR_COUNT|name=veth8fecc8f|v4=0|v6=1
ADDR_COUNT|name=veth6ebe603|v4=0|v6=1
ADDR_COUNT|name=veth94bb505|v4=0|v6=1
ADDR_COUNT|name=veth257d0f3|v4=0|v6=1
ADDR_COUNT|name=vethf307a2b|v4=0|v6=1
ADDR_COUNT|name=veth43ed72a|v4=0|v6=1
ADDR_COUNT|name=vetha71fd0e|v4=0|v6=1
ADDR_COUNT|name=veth52dc7f8|v4=0|v6=1
IP_ROUTE_RC=0
IP_ROUTE_LINE_COUNT=110
ROUTE|default dev wg-edge01 table 17777 scope link
ROUTE|default dev wt0 table 7120
ROUTE|default via [ADDR] dev eth0 proto static
ROUTE|[ADDR]/24 dev wg-taftauto proto kernel scope link src [ADDR]
ROUTE|[ADDR]/30 dev wg-edge01 proto kernel scope link src [ADDR]
ROUTE|[ADDR]/28 dev br-915a81681c3e proto kernel scope link src [ADDR]
ROUTE|[ADDR]/16 dev wt0 proto kernel scope link src [ADDR]
ROUTE|[ADDR]/16 dev docker0 proto kernel scope link src [ADDR] linkdown
ROUTE|[ADDR]/16 dev br-4d894f9e427b proto kernel scope link src [ADDR] linkdown
ROUTE|[ADDR]/16 dev br-d41b3e918fbc proto kernel scope link src [ADDR]
ROUTE|[ADDR]/16 dev br-a4e31561a8d5 proto kernel scope link src [ADDR]
ROUTE|[ADDR] via [ADDR] dev eth0 src [ADDR]
ROUTE|[ADDR]/24 dev eth0 proto kernel scope link src [ADDR]
ROUTE|[ADDR]/20 dev br-f43db13d76c4 proto kernel scope link src [ADDR]
ROUTE|[ADDR]/20 dev br-8122fec51f39 proto kernel scope link src [ADDR]
ROUTE|[ADDR]/20 dev br-5f66e1018bdd proto kernel scope link src [ADDR]
ROUTE|local [ADDR] dev wg-taftauto table local proto kernel scope host src [ADDR]
ROUTE|broadcast [ADDR] dev wg-taftauto table local proto kernel scope link src [ADDR]
ROUTE|local [ADDR] dev wg-edge01 table local proto kernel scope host src [ADDR]
ROUTE|broadcast [ADDR] dev wg-edge01 table local proto kernel scope link src [ADDR]
ROUTE|local [ADDR] dev br-915a81681c3e table local proto kernel scope host src [ADDR]
ROUTE|broadcast [ADDR] dev br-915a81681c3e table local proto kernel scope link src [ADDR]
ROUTE|local [ADDR] dev wt0 table local proto kernel scope host src [ADDR]
ROUTE|broadcast [ADDR] dev wt0 table local proto kernel scope link src [ADDR]
ROUTE|local [ADDR]/8 dev lo table local proto kernel scope host src [ADDR]
ROUTE|local [ADDR] dev lo table local proto kernel scope host src [ADDR]
ROUTE|broadcast [ADDR] dev lo table local proto kernel scope link src [ADDR]
ROUTE|local [ADDR] dev docker0 table local proto kernel scope host src [ADDR]
ROUTE|broadcast [ADDR] dev docker0 table local proto kernel scope link src [ADDR] linkdown
ROUTE|local [ADDR] dev br-4d894f9e427b table local proto kernel scope host src [ADDR]
ROUTE|broadcast [ADDR] dev br-4d894f9e427b table local proto kernel scope link src [ADDR] linkdown
ROUTE|local [ADDR] dev br-d41b3e918fbc table local proto kernel scope host src [ADDR]
ROUTE|broadcast [ADDR] dev br-d41b3e918fbc table local proto kernel scope link src [ADDR]
ROUTE|local [ADDR] dev br-a4e31561a8d5 table local proto kernel scope host src [ADDR]
ROUTE|broadcast [ADDR] dev br-a4e31561a8d5 table local proto kernel scope link src [ADDR]
ROUTE|local [ADDR] dev eth0 table local proto kernel scope host src [ADDR]
ROUTE|broadcast [ADDR] dev eth0 table local proto kernel scope link src [ADDR]
ROUTE|local [ADDR] dev br-f43db13d76c4 table local proto kernel scope host src [ADDR]
ROUTE|broadcast [ADDR] dev br-f43db13d76c4 table local proto kernel scope link src [ADDR]
ROUTE|local [ADDR] dev br-8122fec51f39 table local proto kernel scope host src [ADDR]
ROUTE|broadcast [ADDR] dev br-8122fec51f39 table local proto kernel scope link src [ADDR]
ROUTE|local [ADDR] dev br-5f66e1018bdd table local proto kernel scope host src [ADDR]
ROUTE|broadcast [ADDR] dev br-5f66e1018bdd table local proto kernel scope link src [ADDR]
ROUTE|default dev wt0 table 7120 metric 1024 pref medium
ROUTE|[IPV6]/64 dev wt0 proto kernel metric 256 pref medium
ROUTE|[IPV6]/64 dev eth0 proto kernel metric 256 pref medium
ROUTE|[IPV6]/64 dev veth8fecc8f proto kernel metric 256 pref medium
ROUTE|[IPV6]/64 dev br-f43db13d76c4 proto kernel metric 256 pref medium
ROUTE|[IPV6]/64 dev veth6ebe603 proto kernel metric 256 pref medium
ROUTE|[IPV6]/64 dev br-915a81681c3e proto kernel metric 256 pref medium
ROUTE|[IPV6]/64 dev veth94bb505 proto kernel metric 256 pref medium
ROUTE|[IPV6]/64 dev br-a4e31561a8d5 proto kernel metric 256 pref medium
ROUTE|[IPV6]/64 dev veth43ed72a proto kernel metric 256 pref medium
ROUTE|[IPV6]/64 dev br-8122fec51f39 proto kernel metric 256 pref medium
ROUTE|[IPV6]/64 dev veth257d0f3 proto kernel metric 256 pref medium
ROUTE|[IPV6]/64 dev vethf307a2b proto kernel metric 256 pref medium
ROUTE|[IPV6]/64 dev br-5f66e1018bdd proto kernel metric 256 pref medium
ROUTE|[IPV6]/64 dev vetha71fd0e proto kernel metric 256 pref medium
ROUTE|[IPV6]/64 dev veth52dc7f8 proto kernel metric 256 pref medium
ROUTE|[IPV6]/64 dev vethb6a364a proto kernel metric 256 pref medium
ROUTE|[IPV6]/64 dev veth98c9c14 proto kernel metric 256 pref medium
ROUTE|[IPV6]/64 dev veth54c3c78 proto kernel metric 256 pref medium
ROUTE|[IPV6]/64 dev veth3eda058 proto kernel metric 256 pref medium
ROUTE|[IPV6]/64 dev br-d41b3e918fbc proto kernel metric 256 pref medium
ROUTE|[IPV6]/64 dev docker0 proto kernel metric 256 linkdown pref medium
ROUTE|local [IPV6] dev lo table local proto kernel metric 0 pref medium
ROUTE|local [IPV6] dev wt0 table local proto kernel metric 0 pref medium
ROUTE|local [IPV6] dev veth43ed72a table local proto kernel metric 0 pref medium
ROUTE|local [IPV6] dev br-915a81681c3e table local proto kernel metric 0 pref medium
ROUTE|local [IPV6] dev veth8fecc8f table local proto kernel metric 0 pref medium
ROUTE|local [IPV6] dev veth257d0f3 table local proto kernel metric 0 pref medium
ROUTE|local [IPV6] dev vethb6a364a table local proto kernel metric 0 pref medium
ROUTE|local [IPV6] dev br-f43db13d76c4 table local proto kernel metric 0 pref medium
ROUTE|local [IPV6] dev vethf307a2b table local proto kernel metric 0 pref medium
ROUTE|local [IPV6] dev veth94bb505 table local proto kernel metric 0 pref medium
ROUTE|local [IPV6] dev veth98c9c14 table local proto kernel metric 0 pref medium
ROUTE|local [IPV6] dev br-8122fec51f39 table local proto kernel metric 0 pref medium
ROUTE|local [IPV6] dev br-a4e31561a8d5 table local proto kernel metric 0 pref medium
ROUTE|local [IPV6] dev br-d41b3e918fbc table local proto kernel metric 0 pref medium
ROUTE|local [IPV6] dev veth3eda058 table local proto kernel metric 0 pref medium
ROUTE|local [IPV6] dev eth0 table local proto kernel metric 0 pref medium
ROUTE|local [IPV6] dev vetha71fd0e table local proto kernel metric 0 pref medium
ROUTE|local [IPV6] dev veth54c3c78 table local proto kernel metric 0 pref medium
ROUTE|local [IPV6] dev veth52dc7f8 table local proto kernel metric 0 pref medium
ROUTE|local [IPV6] dev br-5f66e1018bdd table local proto kernel metric 0 pref medium
ROUTE|local [IPV6] dev veth6ebe603 table local proto kernel metric 0 pref medium
ROUTE|local [IPV6] dev docker0 table local proto kernel metric 0 pref medium
ROUTE|multicast [IPV6]/8 dev eth0 table local proto kernel metric 256 pref medium
ROUTE|multicast [IPV6]/8 dev wg-edge01 table local proto kernel metric 256 pref medium
ROUTE|multicast [IPV6]/8 dev wg-taftauto table local proto kernel metric 256 pref medium
ROUTE|multicast [IPV6]/8 dev veth8fecc8f table local proto kernel metric 256 pref medium
ROUTE|multicast [IPV6]/8 dev br-f43db13d76c4 table local proto kernel metric 256 pref medium
ROUTE|multicast [IPV6]/8 dev veth6ebe603 table local proto kernel metric 256 pref medium
ROUTE|multicast [IPV6]/8 dev br-915a81681c3e table local proto kernel metric 256 pref medium
ROUTE|multicast [IPV6]/8 dev veth94bb505 table local proto kernel metric 256 pref medium
ROUTE|multicast [IPV6]/8 dev br-a4e31561a8d5 table local proto kernel metric 256 pref medium
ROUTE|multicast [IPV6]/8 dev veth43ed72a table local proto kernel metric 256 pref medium
ROUTE|multicast [IPV6]/8 dev br-8122fec51f39 table local proto kernel metric 256 pref medium
ROUTE|multicast [IPV6]/8 dev veth257d0f3 table local proto kernel metric 256 pref medium
ROUTE|multicast [IPV6]/8 dev vethf307a2b table local proto kernel metric 256 pref medium
ROUTE|multicast [IPV6]/8 dev br-5f66e1018bdd table local proto kernel metric 256 pref medium
ROUTE|multicast [IPV6]/8 dev vetha71fd0e table local proto kernel metric 256 pref medium
ROUTE|multicast [IPV6]/8 dev veth52dc7f8 table local proto kernel metric 256 pref medium
ROUTE|multicast [IPV6]/8 dev vethb6a364a table local proto kernel metric 256 pref medium
ROUTE|multicast [IPV6]/8 dev veth98c9c14 table local proto kernel metric 256 pref medium
ROUTE|multicast [IPV6]/8 dev veth54c3c78 table local proto kernel metric 256 pref medium
ROUTE|multicast [IPV6]/8 dev veth3eda058 table local proto kernel metric 256 pref medium
ROUTE|multicast [IPV6]/8 dev br-d41b3e918fbc table local proto kernel metric 256 pref medium
ROUTE|multicast [IPV6]/8 dev docker0 table local proto kernel metric 256 linkdown pref medium
ROUTE|multicast [IPV6]/8 dev wt0 table local proto kernel metric 256 pref medium
IPV4_DEFAULT_ROUTE_COUNT=4
DEFAULT4|dev=wg-edge01|gateway_sha256=NA|metric=NA
DEFAULT4|dev=wt0|gateway_sha256=NA|metric=NA
DEFAULT4|dev=eth0|gateway_sha256=4f9da1283166a1e9f4e6bc7dd240c76aef85772177f717f92abb6e8e2bb8de90|metric=NA
DEFAULT4|dev=wt0|gateway_sha256=NA|metric=1024
IP_RULE_RC=0
RULE|0: from all lookup local
RULE|100: from [ADDR] lookup main
RULE|101: from [ADDR] lookup 17777
RULE|105: from all lookup main suppress_prefixlength 0
RULE|110: not from all fwmark 0x1bd00 lookup 7120
RULE|32766: from all lookup main
RULE|32767: from all lookup default
IPV6_ROUTE_RC=0
IPV6_DEFAULT_ROUTE_COUNT=1
DEFAULT6|default dev wt0 table 7120 metric 1024 pref medium
ROUTE_GET|family=v4|rc=0|out_sha256=b1bac959b7f164a915a16d2128198deec0f9d739449bd8398fdf4fa4017159fa|stderr_sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
ROUTE_GET_LINE|family=v4|[ADDR] dev wt0 table 7120 src [ADDR] uid 0
ROUTE_GET|family=v6|rc=0|out_sha256=72b49fa2af3fc9123bcb7f2e4b98dfcbff4c61fd8bf4a3d021bc409d158c39bd|stderr_sha256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
ROUTE_GET_LINE|family=v6|[IPV6] from [IPV6] dev wt0 table 7120 src [IPV6] metric 1024 pref medium
NEIGH_RC=0
NEIGH_COUNT=26
NEIGH_STATE|state=DELAY|count=1
NEIGH_STATE|state=FAILED|count=3
NEIGH_STATE|state=REACHABLE|count=9
NEIGH_STATE|state=STALE|count=13
RESOLV_EXISTS=true
RESOLV_LINE_COUNT=23
RESOLV_NAMESERVER_COUNT=1
RESOLV_SEARCH_COUNT=1
NETCFG_FILE_COUNT=1
NETCFG|base=50-cloud-init.yaml|path_sha256=b9bc0da3b7c93f972715f97a7a4588b39d3b28d576358a5dafecc1c8a8e2958f|bytes=350|sha256=c23b699ba11e3c57f071346bc1e29cb33dd6de57b319452daed9145fd1b0ba66
NETCFG_LINE|base=50-cloud-init.yaml|line=1|text=network:
NETCFG_LINE|base=50-cloud-init.yaml|line=5|text= match:
NETCFG_LINE|base=50-cloud-init.yaml|line=15|text= set-name: "eth0"
NETCFG_LINE|base=50-cloud-init.yaml|line=16|text= routes:
NFT_RC=0
NFT_LINE_COUNT=333
NFT_RELEVANT_COUNT=92
NFT| chain FORWARD {
NFT| type filter hook forward priority filter; policy accept;
NFT| counter packets 4611557 bytes 828408916 jump DOCKER-FORWARD
NFT| ip daddr [ADDR] iifname != "br-d41b3e918fbc" oifname "br-d41b3e918fbc" tcp dport 8080 counter packets 0 bytes 0 accept
NFT| ip daddr [ADDR] iifname != "br-5f66e1018bdd" oifname "br-5f66e1018bdd" tcp dport 3100 counter packets 0 bytes 0 accept
NFT| ip daddr [ADDR] iifname != "br-5f66e1018bdd" oifname "br-5f66e1018bdd" tcp dport 12345 counter packets 0 bytes 0 accept
NFT| ip daddr [ADDR] iifname != "br-a4e31561a8d5" oifname "br-a4e31561a8d5" tcp dport 8080 counter packets 0 bytes 0 accept
NFT| ip daddr [ADDR] iifname != "br-a4e31561a8d5" oifname "br-a4e31561a8d5" tcp dport 7422 counter packets 0 bytes 0 accept
NFT| ip daddr [ADDR] iifname != "br-f43db13d76c4" oifname "br-f43db13d76c4" tcp dport 8080 counter packets 0 bytes 0 accept
NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" oifname "br-915a81681c3e" tcp dport 2375 counter packets 0 bytes 0 accept
NFT| iifname != "br-4d894f9e427b" oifname "br-4d894f9e427b" counter packets 0 bytes 0 drop
NFT| iifname != "br-5f66e1018bdd" oifname "br-5f66e1018bdd" counter packets 0 bytes 0 drop
NFT| iifname != "br-8122fec51f39" oifname "br-8122fec51f39" counter packets 0 bytes 0 drop
NFT| iifname != "br-915a81681c3e" oifname "br-915a81681c3e" counter packets 0 bytes 0 drop
NFT| iifname != "br-a4e31561a8d5" oifname "br-a4e31561a8d5" counter packets 0 bytes 0 drop
NFT| iifname != "br-d41b3e918fbc" oifname "br-d41b3e918fbc" counter packets 0 bytes 0 drop
NFT| iifname != "br-f43db13d76c4" oifname "br-f43db13d76c4" counter packets 0 bytes 0 drop
NFT| iifname != "docker0" oifname "docker0" counter packets 0 bytes 0 drop
NFT| chain DOCKER-FORWARD {
NFT| type filter hook input priority filter; policy accept;
NFT| iifname != "lo" tcp dport 81 counter packets 0 bytes 0 drop
NFT| ip saddr [ADDR]/16 iifname "wt0" ip protocol tcp tcp dport { 80, 443 } counter packets 3302601 bytes 531568845 accept
NFT| type nat hook postrouting priority srcnat; policy accept;
NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" tcp dport 2375 counter packets 0 bytes 0 dnat to [ADDR]:2375
NFT| ip daddr [ADDR] iifname != "br-f43db13d76c4" tcp dport 8081 counter packets 0 bytes 0 dnat to [ADDR]:8080
NFT| ip daddr [ADDR] iifname != "br-a4e31561a8d5" tcp dport 7422 counter packets 0 bytes 0 dnat to [ADDR]:7422
NFT| ip daddr [ADDR] iifname != "br-a4e31561a8d5" tcp dport 8088 counter packets 0 bytes 0 dnat to [ADDR]:8080
NFT| ip daddr [ADDR] iifname != "br-5f66e1018bdd" tcp dport 12345 counter packets 0 bytes 0 dnat to [ADDR]:12345
NFT| ip daddr [ADDR] iifname != "br-5f66e1018bdd" tcp dport 3100 counter packets 0 bytes 0 dnat to [ADDR]:3100
NFT| ip daddr [ADDR] iifname != "br-d41b3e918fbc" tcp dport 9999 counter packets 0 bytes 0 dnat to [ADDR]:8080
NFT| type nat hook prerouting priority dstnat; policy accept;
NFT| chain OUTPUT {
NFT| type nat hook output priority dstnat; policy accept;
NFT| type nat hook prerouting priority dstnat; policy accept;
NFT| iifname "wg-edge01" ip saddr [ADDR] ip daddr [ADDR] tcp dport { 3478, 3479, 5000, 5222, 5269, 5349, 5350 } dnat to [ADDR]
NFT| type nat hook postrouting priority srcnat; policy accept;
NFT| oifname "eth0" ip daddr [ADDR] tcp dport { 3478, 3479, 5000, 5222, 5269, 5349, 5350 } snat to [ADDR]
NFT| type nat hook prerouting priority dstnat; policy accept;
NFT| chain OUTPUT {
NFT| type nat hook output priority dstnat; policy accept;
NFT| chain DOCKER-FORWARD {
NFT| chain FORWARD {
NFT| type filter hook forward priority filter; policy accept;
NFT| counter packets 0 bytes 0 jump DOCKER-FORWARD
NFT| type filter hook input priority filter; policy accept;
NFT| iifname != "lo" tcp dport 81 counter packets 0 bytes 0 drop
NFT| type filter hook prerouting priority raw; policy accept;
NFT| ip daddr [ADDR] iifname != "br-f43db13d76c4" counter packets 0 bytes 0 drop
NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" counter packets 0 bytes 0 drop
NFT| ip daddr [ADDR] iifname != "br-a4e31561a8d5" counter packets 0 bytes 0 drop
NFT| ip daddr [ADDR] iifname != "br-8122fec51f39" counter packets 0 bytes 0 drop
NFT| ip daddr [ADDR] iifname != "br-5f66e1018bdd" counter packets 0 bytes 0 drop
NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" counter packets 0 bytes 0 drop
NFT| ip daddr [ADDR] iifname != "lo" tcp dport 2375 counter packets 0 bytes 0 drop
NFT| ip daddr [ADDR] iifname != "lo" tcp dport 8081 counter packets 0 bytes 0 drop
NFT| ip daddr [ADDR] iifname != "br-5f66e1018bdd" counter packets 0 bytes 0 drop
NFT| ip daddr [ADDR] iifname != "lo" tcp dport 7422 counter packets 0 bytes 0 drop
NFT| ip daddr [ADDR] iifname != "lo" tcp dport 8088 counter packets 0 bytes 0 drop
NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" counter packets 0 bytes 0 drop
NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" counter packets 0 bytes 0 drop
NFT| ip daddr [ADDR] iifname != "lo" tcp dport 12345 counter packets 0 bytes 0 drop
NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" counter packets 0 bytes 0 drop
NFT| ip daddr [ADDR] iifname != "lo" tcp dport 3100 counter packets 0 bytes 0 drop
NFT| ip daddr [ADDR] iifname != "br-915a81681c3e" counter packets 0 bytes 0 drop
NFT| ip daddr [ADDR] iifname != "br-d41b3e918fbc" counter packets 0 bytes 0 drop
NFT| ip daddr [ADDR] iifname != "lo" tcp dport 9999 counter packets 0 bytes 0 drop
NFT| type nat hook postrouting priority srcnat - 1; policy accept;
NFT| type nat hook prerouting priority dstnat; policy accept;
NFT| type filter hook postrouting priority mangle; policy accept;
NFT| type filter hook prerouting priority mangle; policy accept;
NFT| chain netbird-mangle-forward {
NFT| type filter hook forward priority mangle; policy accept;
NFT| oifname "wt0" tcp flags syn counter packets 91 bytes 5460 tcp option maxseg size > 1240 tcp option maxseg size set 1240
NFT| type filter hook input priority filter; policy accept;
NFT| iifname "wt0" drop
NFT| chain netbird-acl-forward-filter {
NFT| type filter hook forward priority filter; policy accept;
NFT| iifname "wt0" drop
NFT| type filter hook output priority raw; policy accept;
NFT| type filter hook prerouting priority raw; policy accept;
NFT| type nat hook postrouting priority srcnat - 1; policy accept;
NFT| type nat hook prerouting priority dstnat; policy accept;
NFT| type filter hook postrouting priority mangle; policy accept;
NFT| type filter hook prerouting priority mangle; policy accept;
NFT| chain netbird-mangle-forward {
NFT| type filter hook forward priority mangle; policy accept;
NFT| oifname "wt0" tcp flags syn counter packets 0 bytes 0 tcp option maxseg size > 1220 tcp option maxseg size set 1220
NFT| type filter hook input priority filter; policy accept;
NFT| iifname "wt0" drop
NFT| chain netbird-acl-forward-filter {
NFT| type filter hook forward priority filter; policy accept;
NFT| iifname "wt0" drop
IPTABLES4_RC=0
IPTABLES4_RELEVANT_COUNT=30
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-f43db13d76c4 -j DROP
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-a4e31561a8d5 -j DROP
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-8122fec51f39 -j DROP
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-5f66e1018bdd -j DROP
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 2375 -j DROP
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 8081 -j DROP
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-5f66e1018bdd -j DROP
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 7422 -j DROP
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 8088 -j DROP
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 12345 -j DROP
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 3100 -j DROP
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-915a81681c3e -j DROP
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i br-d41b3e918fbc -j DROP
IPTABLES4|-A PREROUTING -d [ADDR]/32 ! -i lo -p tcp -m tcp --dport 9999 -j DROP
IPTABLES4|-A INPUT ! -i lo -p tcp -m tcp --dport 81 -j DROP
IPTABLES4|-A INPUT -s [ADDR]/16 -i wt0 -p tcp -m multiport --dports 80,443 -j ACCEPT
IPTABLES4|-A DOCKER ! -i br-4d894f9e427b -o br-4d894f9e427b -j DROP
IPTABLES4|-A DOCKER ! -i br-5f66e1018bdd -o br-5f66e1018bdd -j DROP
IPTABLES4|-A DOCKER ! -i br-8122fec51f39 -o br-8122fec51f39 -j DROP
IPTABLES4|-A DOCKER ! -i br-915a81681c3e -o br-915a81681c3e -j DROP
IPTABLES4|-A DOCKER ! -i br-a4e31561a8d5 -o br-a4e31561a8d5 -j DROP
IPTABLES4|-A DOCKER ! -i br-d41b3e918fbc -o br-d41b3e918fbc -j DROP
IPTABLES4|-A DOCKER ! -i br-f43db13d76c4 -o br-f43db13d76c4 -j DROP
IPTABLES4|-A DOCKER ! -i docker0 -o docker0 -j DROP
IPTABLES4|:PREROUTING ACCEPT [3066759:284433816]
IPTABLES6_RC=0
IPTABLES6_RELEVANT_COUNT=1
IPTABLES6|-A INPUT ! -i lo -p tcp -m tcp --dport 81 -j DROP
NET_SERVICE|name=systemd-networkd.service|active=active
NET_SERVICE|name=NetworkManager.service|active=inactive
NET_SERVICE|name=networking.service|active=inactive
EDGE_GUEST_NETWORK_END=1
DECISION=PASS_MOLDOVA_1163_EDGE_EGRESS_PATH_RCA_COLLECTED
NEXT_GATE=READ_EXACT_1163_AND_CHOOSE_DNS_AUTHORITY_PATH
TASK_RESULT=PASS_MOLDOVA_EDGE_EGRESS_PATH_RCA
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260924-HOMELAB-MOLDOVA-EDGE-EGRESS-PATH-RCA-1163R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
WORKERS2_MOLDOVA_EDGE_EGRESS_PATH_RCA_END=1
OUTPUT_END
CHAT_OUTPUT_END
View Git Blame Copy Permalink