datadunia
cbacfea7f2
NexusGuard CI / server-core-test (push) Failing after 3m6s
NexusGuard CI / server-core-build (push) Has been skipped
NexusGuard CI / device-agent-test (push) Failing after 4s
NexusGuard CI / device-agent-cross-build (amd64, linux) (push) Has been skipped
NexusGuard CI / device-agent-cross-build (amd64, windows) (push) Has been skipped
NexusGuard CI / device-agent-cross-build (arm64, linux) (push) Has been skipped
NexusGuard CI / dashboard-test (push) Failing after 4s
NexusGuard CI / dashboard-dist (push) Has been skipped
20 lines
713 B
Plaintext
20 lines
713 B
Plaintext
table ip nexusguard {
|
|
chain forward {
|
|
type filter hook forward priority filter; policy accept;
|
|
ct state established,related accept comment "fwd_estab"
|
|
ip saddr 10.172.21.2 ip daddr 10.172.21.0/24 accept comment "peer_gogo2"
|
|
ip saddr 10.172.21.3 ip daddr 10.172.21.0/24 accept comment "peer_gogo3"
|
|
ip saddr 10.172.21.0/24 drop comment "wg_isolation_default"
|
|
}
|
|
}
|
|
|
|
# Rule counts:
|
|
# total = 4
|
|
# peer_ = 2 (peer_gogo2, peer_gogo3)
|
|
# fwd_estab = 1
|
|
# wg_isolation_default = 1
|
|
# duplicates: NONE (verified via `sort | uniq -c`)
|
|
#
|
|
# Rule order: CORRECT (fwd_estab first for fast-path, wg_isolation last for default drop)
|
|
# Persistence: STABLE (no process re-adding rules; verified across 30s window)
|