===== vm100_uci_firewall =====
CMD: remote_vm100 uci show firewall

firewall.@defaults[0]=defaults
firewall.@defaults[0].input='REJECT'
firewall.@defaults[0].output='ACCEPT'
firewall.@defaults[0].forward='REJECT'
firewall.@defaults[0].synflood_protect='1'
firewall.@zone[0]=zone
firewall.@zone[0].name='lan'
firewall.@zone[0].input='ACCEPT'
firewall.@zone[0].output='ACCEPT'
firewall.@zone[0].forward='ACCEPT'
firewall.@zone[0].network='lan'
firewall.@zone[1]=zone
firewall.@zone[1].name='transit_direct'
firewall.@zone[1].input='ACCEPT'
firewall.@zone[1].output='ACCEPT'
firewall.@zone[1].forward='REJECT'
firewall.@zone[1].network='transit_direct'
firewall.@zone[1].masq='1'
firewall.@zone[1].mtu_fix='1'
firewall.@forwarding[0]=forwarding
firewall.@forwarding[0].src='lan'
firewall.@forwarding[0].dest='transit_direct'
firewall.@zone[2]=zone
firewall.@zone[2].name='transit_vpn'
firewall.@zone[2].input='ACCEPT'
firewall.@zone[2].output='ACCEPT'
firewall.@zone[2].forward='REJECT'
firewall.@zone[2].masq='1'
firewall.@zone[2].mtu_fix='1'
firewall.@zone[2].network='transit_vpn'
firewall.@forwarding[1]=forwarding
firewall.@forwarding[1].src='lan'
firewall.@forwarding[1].dest='transit_vpn'
firewall.@zone[3]=zone
firewall.@zone[3].name='remote_in'
firewall.@zone[3].input='ACCEPT'
firewall.@zone[3].output='ACCEPT'
firewall.@zone[3].forward='ACCEPT'
firewall.@zone[3].network='wg_remote'
firewall.@forwarding[2]=forwarding
firewall.@forwarding[2].src='remote_in'
firewall.@forwarding[2].dest='lan'
firewall.@forwarding[3]=forwarding
firewall.@forwarding[3].src='remote_in'
firewall.@forwarding[3].dest='transit_direct'
firewall.@forwarding[4]=forwarding
firewall.@forwarding[4].src='remote_in'
firewall.@forwarding[4].dest='transit_vpn'
firewall.@rule[0]=rule
firewall.@rule[0].src='transit_direct'
firewall.@rule[0].name='Allow-WG-Remote-In'
firewall.@rule[0].proto='udp'
firewall.@rule[0].dest_ip='10.201.0.1'
firewall.@rule[0].dest_port='51820'
firewall.@rule[0].target='ACCEPT'
firewall.@rule[1]=rule
firewall.@rule[1].name='ALLOW_OWNER_DNS_VM100'
firewall.@rule[1].family='ipv4'
firewall.@rule[1].src='remote_in'
firewall.@rule[1].src_ip='10.250.1.3'
firewall.@rule[1].proto='tcp udp'
firewall.@rule[1].dest_port='53'
firewall.@rule[1].target='ACCEPT'
firewall.@rule[2]=rule
firewall.@rule[2].name='ALLOW_OWNER_WGEASY_UI'
firewall.@rule[2].family='ipv4'
firewall.@rule[2].src='remote_in'
firewall.@rule[2].dest='lan'
firewall.@rule[2].src_ip='10.250.1.3'
firewall.@rule[2].dest_ip='10.71.1.189'
firewall.@rule[2].proto='tcp'
firewall.@rule[2].dest_port='51822'
firewall.@rule[2].target='ACCEPT'
firewall.@rule[3]=rule
firewall.@rule[3].name='BLOCK_OWNER_VM100_ROUTER'
firewall.@rule[3].family='ipv4'
firewall.@rule[3].src='remote_in'
firewall.@rule[3].src_ip='10.250.1.3'
firewall.@rule[3].proto='all'
firewall.@rule[3].target='REJECT'
firewall.@rule[4]=rule
firewall.@rule[4].name='BLOCK_OWNER_VM101'
firewall.@rule[4].family='ipv4'
firewall.@rule[4].src='remote_in'
firewall.@rule[4].dest='lan'
firewall.@rule[4].src_ip='10.250.1.3'
firewall.@rule[4].dest_ip='10.71.1.2'
firewall.@rule[4].proto='all'
firewall.@rule[4].target='REJECT'
firewall.@rule[5]=rule
firewall.@rule[5].name='BLOCK_OWNER_PROXMOX'
firewall.@rule[5].family='ipv4'
firewall.@rule[5].src='remote_in'
firewall.@rule[5].dest='lan'
firewall.@rule[5].src_ip='10.250.1.3'
firewall.@rule[5].dest_ip='10.71.1.222'
firewall.@rule[5].proto='all'
firewall.@rule[5].target='REJECT'
firewall.@rule[6]=rule
firewall.@rule[6].name='BLOCK_OWNER_VM103_EXCEPT_UI'
firewall.@rule[6].family='ipv4'
firewall.@rule[6].src='remote_in'
firewall.@rule[6].dest='lan'
firewall.@rule[6].src_ip='10.250.1.3'
firewall.@rule[6].dest_ip='10.71.1.189'
firewall.@rule[6].proto='all'
firewall.@rule[6].target='REJECT'
firewall.wg_paid=zone
firewall.wg_paid.name='wg_paid'
firewall.wg_paid.input='ACCEPT'
firewall.wg_paid.output='ACCEPT'
firewall.wg_paid.forward='REJECT'
firewall.wg_paid.network='wg_paid'
firewall.wg_paid_to_transit_direct=forwarding
firewall.wg_paid_to_transit_direct.src='wg_paid'
firewall.wg_paid_to_transit_direct.dest='transit_direct'
firewall.wg_paid_to_transit_vpn=forwarding
firewall.wg_paid_to_transit_vpn.src='wg_paid'
firewall.wg_paid_to_transit_vpn.dest='transit_vpn'
firewall.allow_wg_paid_51830=rule
firewall.allow_wg_paid_51830.name='Allow-WG-Paid-51830'
firewall.allow_wg_paid_51830.proto='udp'
firewall.allow_wg_paid_51830.dest_port='51830'
firewall.allow_wg_paid_51830.target='ACCEPT'

rc=0
