210 lines
15 KiB
Plaintext
210 lines
15 KiB
Plaintext
CHAT_OUTPUT_BEGIN
|
|
COMMAND_ID=SUPPORT-261006-PVE01-NETBIRD-FORWARDING-RCA-99708R1
|
|
STATUS=OK
|
|
RC=0
|
|
HOST=pve01
|
|
MODE=read-only
|
|
COMPONENT=pve01-netbird-forwarding-rca
|
|
REFERENCE_REGISTER_CHECK=OK
|
|
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
|
|
ERROR_REGISTER_CHECK=OK
|
|
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
|
|
COMMAND_SHA256=79346c0088b39a1ac744f0a9af86accdc6e5bf3f3cc91ed6a998b0deba27ff8f
|
|
DUPLICATE_FAILED_COMMAND_BLOCKED=false
|
|
EXECUTION_STARTED=true
|
|
CHANGE_DECLARED=false
|
|
RESULT_CONTRACT_VALID=true
|
|
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
|
|
RESULT_CONTRACT_ERROR=NONE
|
|
COMMAND_RC=0
|
|
CHANGES_MADE=false
|
|
ROLLBACK_STARTED=false
|
|
ROLLBACK_RESTORED=null
|
|
MUTATION_OUTCOME=NO_MUTATION
|
|
SANITIZED=yes
|
|
SECRETS_INCLUDED=no
|
|
PRIVATE_ADDRESSES_INCLUDED=no
|
|
RAW_EVIDENCE_SHA256=73f99febb3b776642459f9ec1cb0c4e22ca9e107fcd486495a55ea87e29df880
|
|
SANITIZED_OUTPUT_SHA256=73f99febb3b776642459f9ec1cb0c4e22ca9e107fcd486495a55ea87e29df880
|
|
OUTPUT_BEGIN
|
|
PVE01_NETBIRD_FORWARDING_RCA=V1
|
|
MODE=read-only
|
|
NO_MUTATION=true
|
|
NODE_HOSTNAME=pve01
|
|
NETBIRD_NETWORKS_COUNT=0
|
|
NETBIRD_FORWARDINGRULES_COUNT=1
|
|
NETBIRD_DNSSERVERS_COUNT=0
|
|
NETBIRD_RELAYS_COUNT=3
|
|
NETBIRD_EVENTS_COUNT=2
|
|
NETBIRD_DAEMON_VERSION=0.80.0
|
|
NETBIRD_LAZY_CONNECTION_ENABLED=true
|
|
NETBIRD_USES_KERNEL_INTERFACE=true
|
|
NETBIRD_QUANTUM_RESISTANCE=false
|
|
NETBIRD_PEER_COUNT=8
|
|
NETBIRD_CONNECTED_PEER_COUNT=0
|
|
PVE1_ROUTE_TABLE_7120_BEGIN=true
|
|
REC|PVE1_ROUTE_7120|Error: ipv4: FIB table does not exist.
|
|
REC|PVE1_ROUTE_7120|Dump terminated
|
|
PVE1_ROUTE_TABLE_7120_COUNT=0
|
|
REC|PVE1_IP_RULE|0: from all lookup local
|
|
REC|PVE1_IP_RULE|105: from all lookup main suppress_prefixlength 0
|
|
REC|PVE1_IP_RULE|110: not from all fwmark 0x1bd00 lookup 7120
|
|
REC|PVE1_IP_RULE|32766: from all lookup main
|
|
REC|PVE1_IP_RULE|32767: from all lookup default
|
|
PVE1_IPV4_FORWARD=0
|
|
PVE1_IPV6_FORWARD=0
|
|
PVE1_SRC_VALID_MARK=1
|
|
REC|PVE1_SYSCTL_CONFIG|FILE=50-default.conf|25:net.ipv4.conf.default.rp_filter = 2
|
|
REC|PVE1_SYSCTL_CONFIG|FILE=50-default.conf|26:net.ipv4.conf.*.rp_filter = 2
|
|
REC|PVE1_SYSCTL_CONFIG|FILE=pve-firewall.conf|2:net.ipv4.conf.all.rp_filter = 2
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-08-28TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...
|
|
REC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.
|
|
REC|PVE1_NETBIRD_BOOT_0|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.
|
|
PVE1_IPTABLES-SAVE_LINE_COUNT=278
|
|
PVE1_IPTABLES-SAVE_NETBIRD_COUNT=35
|
|
PVE1_IPTABLES-SAVE_MASQUERADE_COUNT=2
|
|
REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDORWARD ACCEPT [673406:1327114728]
|
|
REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-MSSCLAMP - [0:0]
|
|
REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-PRE - [0:0]
|
|
REC|PVE1_IPTABLES-SAVE|10:-A PREROUTING -j NETBIRD-RT-PRE
|
|
REC|PVE1_IPTABLES-SAVE|11:-A PREROUTING -i wt0 -m conntrack --ctstate NEW -j CONNMARK --set-xmark 0x1bd10/0xffffffff
|
|
REC|PVE1_IPTABLES-SAVE|12:-A FORWARD -j NETBIRD-RT-MSSCLAMP
|
|
REC|PVE1_IPTABLES-SAVE|13:-A FORWARD -i wt0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
|
REC|PVE1_IPTABLES-SAVE|14:-A FORWARD -i wt0 -m conntrack --ctstate DNAT -m mark ! --mark 0x1bd20 -j DROP
|
|
REC|PVE1_IPTABLES-SAVE|15:-A POSTROUTING -o wt0 -m conntrack --ctstate NEW -j CONNMARK --set-xmark 0x1bd11/0xffffffff
|
|
REC|PVE1_IPTABLES-SAVE|16:-A NETBIRD-RT-MSSCLAMP -o wt0 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1240
|
|
REC|PVE1_IPTABLES-SAVE|17:-A NETBIRD-RT-PRE -i wt0 -m set --match-set nb-a27a9074 src -m addrtype --dst-type LOCAL -j MARK --set-xmark 0x1bd20/0xffffffff
|
|
REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-NAT - [0:0]
|
|
REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-RDR - [0:0]
|
|
REC|PVE1_IPTABLES-SAVE|28:-A PREROUTING -j NETBIRD-RT-RDR
|
|
REC|PVE1_IPTABLES-SAVE|29:-A POSTROUTING -j NETBIRD-RT-NAT
|
|
REC|PVE1_IPTABLES-SAVE|30:-A NETBIRD-RT-NAT ! -o lo -m mark --mark 0x1bd21 -j MASQUERADE
|
|
REC|PVE1_IPTABLES-SAVE|31:-A NETBIRD-RT-NAT -o wt0 -m mark --mark 0x1bd22 -j MASQUERADE
|
|
REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RAW - [0:0]
|
|
REC|PVE1_IPTABLES-SAVE|39:-A PREROUTING -j NETBIRD-RAW
|
|
REC|PVE1_IPTABLES-SAVE|40:-A OUTPUT -j NETBIRD-RAW
|
|
REC|PVE1_IPTABLES-SAVE|41:-A NETBIRD-RAW -s IP_REDACTED -d IP_REDACTED -o lo -p udp -m udp --sport 51820 -j NOTRACK
|
|
REC|PVE1_IPTABLES-SAVE|42:-A NETBIRD-RAW -s IP_REDACTED -d IP_REDACTED -o lo -p udp -m udp --dport 51820 -j NOTRACK
|
|
REC|PVE1_IPTABLES-SAVE|43:-A NETBIRD-RAW -s IP_REDACTED -d IP_REDACTED -i lo -p udp -m udp --dport 51820 -j NOTRACK
|
|
REC|PVE1_IPTABLES-SAVE|44:-A NETBIRD-RAW -s IP_REDACTED -d IP_REDACTED -i lo -p udp -m udp --dport 3128 -j NOTRACK
|
|
REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDORWARD ACCEPT [23810:3007921]
|
|
REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-ACL-INPUT - [0:0]
|
|
REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-FWD-IN - [0:0]
|
|
REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-FWD-OUT - [0:0]
|
|
REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDPVEFW-FORWARD - [0:0]
|
|
REC|PVE1_IPTABLES-SAVE|81:-A INPUT -i wt0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
|
REC|PVE1_IPTABLES-SAVE|82:-A INPUT -i wt0 -j NETBIRD-ACL-INPUT
|
|
REC|PVE1_IPTABLES-SAVE|83:-A INPUT -i wt0 -j DROP
|
|
REC|PVE1_IPTABLES-SAVE|85:-A FORWARD -i wt0 -j NETBIRD-RT-FWD-IN
|
|
REC|PVE1_IPTABLES-SAVE|86:-A FORWARD -m mark --mark 0x1bd20 -j ACCEPT
|
|
REC|PVE1_IPTABLES-SAVE|87:-A FORWARD -o wt0 -j NETBIRD-RT-FWD-OUT
|
|
REC|PVE1_IPTABLES-SAVE|88:-A FORWARD -i wt0 -j DROP
|
|
REC|PVE1_IPTABLES-SAVE|89:-A FORWARD -j PVEFW-FORWARD
|
|
REC|PVE1_IPTABLES-SAVE|91:-A NETBIRD-ACL-INPUT -m set --match-set nb-a27a9074 src -j ACCEPT
|
|
REC|PVE1_IPTABLES-SAVE|92:-A NETBIRD-RT-FWD-IN -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
|
REC|PVE1_IPTABLES-SAVE|93:-A NETBIRD-RT-FWD-OUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
|
REC|PVE1_IPTABLES-SAVE|111:-A PVEFW-FORWARD -m conntrack --ctstate INVALID -j DROP
|
|
REC|PVE1_IPTABLES-SAVE|112:-A PVEFW-FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
|
REC|PVE1_IPTABLES-SAVE|113:-A PVEFW-FORWARD -m physdev --physdev-in fwln+ --physdev-is-bridged -j PVEFW-FWBR-IN
|
|
REC|PVE1_IPTABLES-SAVE|114:-A PVEFW-FORWARD -m physdev --physdev-out fwln+ --physdev-is-bridged -j PVEFW-FWBR-OUT
|
|
REC|PVE1_IPTABLES-SAVE|115:-A PVEFW-FORWARD -m comment --comment "PVESIG:qnNexOcGa+y+jebd4dAUqFSp5nw"
|
|
PVE1_IP6TABLES-SAVE_LINE_COUNT=267
|
|
PVE1_IP6TABLES-SAVE_NETBIRD_COUNT=28
|
|
PVE1_IP6TABLES-SAVE_MASQUERADE_COUNT=2
|
|
REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDORWARD ACCEPT [1594:102750]
|
|
REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-MSSCLAMP - [0:0]
|
|
REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-PRE - [0:0]
|
|
REC|PVE1_IP6TABLES-SAVE|10:-A PREROUTING -j NETBIRD-RT-PRE
|
|
REC|PVE1_IP6TABLES-SAVE|11:-A PREROUTING -i wt0 -m conntrack --ctstate NEW -j CONNMARK --set-xmark 0x1bd10/0xffffffff
|
|
REC|PVE1_IP6TABLES-SAVE|12:-A FORWARD -j NETBIRD-RT-MSSCLAMP
|
|
REC|PVE1_IP6TABLES-SAVE|13:-A FORWARD -i wt0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
|
REC|PVE1_IP6TABLES-SAVE|14:-A FORWARD -i wt0 -m conntrack --ctstate DNAT -m mark ! --mark 0x1bd20 -j DROP
|
|
REC|PVE1_IP6TABLES-SAVE|15:-A POSTROUTING -o wt0 -m conntrack --ctstate NEW -j CONNMARK --set-xmark 0x1bd11/0xffffffff
|
|
REC|PVE1_IP6TABLES-SAVE|16:-A NETBIRD-RT-MSSCLAMP -o wt0 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1220
|
|
REC|PVE1_IP6TABLES-SAVE|17:-A NETBIRD-RT-PRE -i wt0 -m set --match-set nb-f4388876-v6 src -m addrtype --dst-type LOCAL -j MARK --set-xmark 0x1bd20/0xffffffff
|
|
REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-NAT - [0:0]
|
|
REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-RDR - [0:0]
|
|
REC|PVE1_IP6TABLES-SAVE|28:-A PREROUTING -j NETBIRD-RT-RDR
|
|
REC|PVE1_IP6TABLES-SAVE|29:-A POSTROUTING -j NETBIRD-RT-NAT
|
|
REC|PVE1_IP6TABLES-SAVE|30:-A NETBIRD-RT-NAT ! -o lo -m mark --mark 0x1bd21 -j MASQUERADE
|
|
REC|PVE1_IP6TABLES-SAVE|31:-A NETBIRD-RT-NAT -o wt0 -m mark --mark 0x1bd22 -j MASQUERADE
|
|
REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDORWARD ACCEPT [1125:72536]
|
|
REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-ACL-INPUT - [0:0]
|
|
REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-FWD-IN - [0:0]
|
|
REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-FWD-OUT - [0:0]
|
|
REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDPVEFW-FORWARD - [0:0]
|
|
REC|PVE1_IP6TABLES-SAVE|72:-A INPUT -i wt0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
|
REC|PVE1_IP6TABLES-SAVE|73:-A INPUT -i wt0 -j NETBIRD-ACL-INPUT
|
|
REC|PVE1_IP6TABLES-SAVE|74:-A INPUT -i wt0 -j DROP
|
|
REC|PVE1_IP6TABLES-SAVE|76:-A FORWARD -i wt0 -j NETBIRD-RT-FWD-IN
|
|
REC|PVE1_IP6TABLES-SAVE|77:-A FORWARD -m mark --mark 0x1bd20 -j ACCEPT
|
|
REC|PVE1_IP6TABLES-SAVE|78:-A FORWARD -o wt0 -j NETBIRD-RT-FWD-OUT
|
|
REC|PVE1_IP6TABLES-SAVE|79:-A FORWARD -i wt0 -j DROP
|
|
REC|PVE1_IP6TABLES-SAVE|80:-A FORWARD -j PVEFW-FORWARD
|
|
REC|PVE1_IP6TABLES-SAVE|82:-A NETBIRD-ACL-INPUT -m set --match-set nb-f4388876-v6 src -j ACCEPT
|
|
REC|PVE1_IP6TABLES-SAVE|83:-A NETBIRD-RT-FWD-IN -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
|
REC|PVE1_IP6TABLES-SAVE|84:-A NETBIRD-RT-FWD-OUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
|
REC|PVE1_IP6TABLES-SAVE|101:-A PVEFW-FORWARD -m conntrack --ctstate INVALID -j DROP
|
|
REC|PVE1_IP6TABLES-SAVE|102:-A PVEFW-FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
|
REC|PVE1_IP6TABLES-SAVE|103:-A PVEFW-FORWARD -m physdev --physdev-in fwln+ --physdev-is-bridged -j PVEFW-FWBR-IN
|
|
REC|PVE1_IP6TABLES-SAVE|104:-A PVEFW-FORWARD -m physdev --physdev-out fwln+ --physdev-is-bridged -j PVEFW-FWBR-OUT
|
|
REC|PVE1_IP6TABLES-SAVE|105:-A PVEFW-FORWARD -m comment --comment "PVESIG:qnNexOcGa+y+jebd4dAUqFSp5nw"
|
|
REC|COMPARE_NODE_BEGIN|NODE=pve02
|
|
REC|COMPARE_NODE_STDERR_LINES|NODE=pve02|COUNT=0
|
|
REC|COMPARE_NODE_BEGIN|NODE=pve03
|
|
REC|COMPARE_NODE_STDERR_LINES|NODE=pve03|COUNT=0
|
|
REC|PVE1_HTTPS4_FINAL|HOST=www.google.com|RC=0|HTTP=200
|
|
curl: (28) Connection timed out after 5002 milliseconds
|
|
REC|PVE1_HTTPS4_FINAL|HOST=api.telegram.org|RC=28|HTTP=000
|
|
DECISION=PASS_PVE01_NETBIRD_FORWARDING_RCA
|
|
NEXT_GATE=PVE01_NETBIRD_FORWARDING_REPAIR
|
|
TASK_RESULT=PVE01_NETBIRD_FORWARDING_RCA
|
|
CHANGES_MADE=false
|
|
ROLLBACK_STARTED=false
|
|
ROLLBACK_RESTORED=null
|
|
MUTATION_OUTCOME=NO_MUTATION
|
|
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261006-PVE01-NETBIRD-FORWARDING-RCA-99708R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
|
|
|
|
OUTPUT_END
|
|
CHAT_OUTPUT_END
|