SCHEMA=wg-paid-vm101-readonly-audit-v1 MACHINE=VM101 AUDIT_UTC=2026-08-02T10:15:07Z HOSTNAME= ===== SYSTEM ===== { "kernel": "6.6.93", "hostname": "OpenWrt", "system": "Intel(R) Core(TM) i7-6950X CPU @ 3.00GHz", "model": "QEMU Standard PC (i440FX + PIIX, 1996)", "board_name": "qemu-standard-pc-i440fx-piix-1996", "rootfs_type": "ext4", "release": { "distribution": "OpenWrt", "version": "24.10.2", "revision": "r28739-d9340319c6", "target": "x86/64", "description": "OpenWrt 24.10.2 r28739-d9340319c6", "builddate": "1750711236" } } Linux OpenWrt 6.6.93 #0 SMP Mon Jun 23 20:40:36 2025 x86_64 GNU/Linux 10:15:07 up 1 day, 21 min, load average: 0.00, 0.01, 0.00 Filesystem Size Used Available Use% Mounted on /dev/root 990.3M 170.8M 803.4M 18% / /dev/root 990.3M 170.8M 803.4M 18% / ===== MACHINE GIT ===== >>> [vm101-git] precheck MODE=--check PROFILE=/etc/router-machine-git-source.conf PROFILE_VERSION=2 PROFILE_SHA256=06dc8ff6870d79ace67e50a983adc5d6e4c1a66683d869013cd8f92b9aa25011 MACHINE_ID=vm101 GIT_DIR=/root/.vm101-source.git WORK_TREE=/ BRANCH=main REMOTE_URL=git@github.com:DChuvelev/wg-paid-vm101.git LOCAL_HEAD=ac678d1b3164e0201d221967fa131e354a211881 >>> [vm101-git] verify remote branch REMOTE_HEAD=ac678d1b3164e0201d221967fa131e354a211881 >>> [vm101-git] build current project allowlist >>> [vm101-git] read paths already tracked by git CURRENT_ALLOWED_COUNT=58 TRACKED_COUNT=58 MANAGED_UNION_COUNT=58 >>> [vm101-git] strict path validation STRICT_PATH_VALIDATION=true >>> [vm101-git] show tracked files now missing from machine TRACKED_PATH_MISSING_COUNT=0 >>> [vm101-git] build simulated git index STAGED_CHANGE_COUNT=0 STAGED_PATHS=NONE >>> [vm101-git] validate simulated staged paths STAGED_PATH_VALIDATION=true SIMULATED_TREE_SHA=0d00ec84743795ff4dde671e42ac3e77241591ef SIMULATED_TREE_FILE_COUNT=58 >>> [vm101-git] high-confidence secret scan of simulated tree HIGH_CONFIDENCE_SECRET_MATCHES=0 >>> [vm101-git] keyword review scan === FILES REQUIRING KEYWORD REVIEW === 0d00ec84743795ff4dde671e42ac3e77241591ef:hmn/hmn-load-vpn-test.sh 0d00ec84743795ff4dde671e42ac3e77241591ef:hmn/hmn-set-code.sh RESULT=PASS_vm101_GIT_PUBLISH_CHECK MACHINE_ID=vm101 GIT_COMMIT=ac678d1b3164e0201d221967fa131e354a211881 GIT_TREE=0d00ec84743795ff4dde671e42ac3e77241591ef GIT_FILE_COUNT=58 COMMIT_CREATED=false PUSH_PERFORMED=false VM101_GIT_CHECK=PASS ===== NETWORK ===== lo UNKNOWN 00:00:00:00:00:00 eth0 UP bc:24:11:42:83:cf eth1 UP bc:24:11:09:4e:2c eth2 UP bc:24:11:4d:7a:71 eth3 UP bc:24:11:c8:2e:e1 vpn1 UNKNOWN vpn2 UNKNOWN vpn3 UNKNOWN vpn4 UNKNOWN vpn5 UNKNOWN lo UNKNOWN 127.0.0.1/8 eth0 UP 95.165.105.4/20 eth1 UP 10.200.0.2/24 eth2 UP 10.71.100.2/24 eth3 UP 10.201.0.2/24 vpn1 UNKNOWN 10.86.108.200/32 vpn2 UNKNOWN 10.91.168.223/32 vpn3 UNKNOWN 10.83.41.157/32 vpn4 UNKNOWN 10.103.187.191/32 vpn5 UNKNOWN 10.124.237.218/32 default via 95.165.96.1 dev eth0 proto static src 95.165.105.4 10.71.100.0/24 dev eth2 proto kernel scope link src 10.71.100.2 10.200.0.0/24 dev eth1 proto kernel scope link src 10.200.0.2 10.201.0.0/24 dev eth3 proto kernel scope link src 10.201.0.2 10.250.100.0/24 via 10.71.100.1 dev eth2 proto static 23.158.72.87 via 95.165.96.1 dev eth0 proto static 37.235.54.96 via 95.165.96.1 dev eth0 proto static 38.7.197.83 via 95.165.96.1 dev eth0 proto static 38.244.192.244 via 95.165.96.1 dev eth0 proto static 46.246.127.84 via 95.165.96.1 dev eth0 proto static 64.253.89.235 via 95.165.96.1 dev eth0 proto static 77.67.8.84 via 95.165.96.1 dev eth0 proto static 78.31.250.16 via 95.165.96.1 dev eth0 proto static 84.32.230.159 via 95.165.96.1 dev eth0 proto static 89.40.104.201 via 95.165.96.1 dev eth0 proto static 89.46.232.39 via 95.165.96.1 dev eth0 proto static 89.46.237.14 via 95.165.96.1 dev eth0 proto static 95.165.96.0/20 dev eth0 proto kernel scope link src 95.165.105.4 95.211.68.119 via 95.165.96.1 dev eth0 proto static 103.57.251.39 via 95.165.96.1 dev eth0 proto static 107.172.187.100 via 95.165.96.1 dev eth0 proto static 107.174.226.51 via 95.165.96.1 dev eth0 proto static 107.175.93.59 via 95.165.96.1 dev eth0 proto static 109.248.198.4 via 95.165.96.1 dev eth0 proto static 112.120.98.53 via 95.165.96.1 dev eth0 proto static 141.98.189.83 via 95.165.96.1 dev eth0 proto static 149.154.157.24 via 95.165.96.1 dev eth0 proto static 151.236.30.139 via 95.165.96.1 dev eth0 proto static 157.173.25.198 via 95.165.96.1 dev eth0 proto static 157.173.27.69 via 95.165.96.1 dev eth0 proto static 178.215.227.13 via 95.165.96.1 dev eth0 proto static 185.14.97.234 via 95.165.96.1 dev eth0 proto static 188.190.17.80 via 95.165.96.1 dev eth0 proto static 192.71.27.64 via 95.165.96.1 dev eth0 proto static 192.71.244.202 via 95.165.96.1 dev eth0 proto static 192.71.247.18 via 95.165.96.1 dev eth0 proto static 192.121.162.75 via 95.165.96.1 dev eth0 proto static 192.121.163.235 via 95.165.96.1 dev eth0 proto static 193.235.207.39 via 95.165.96.1 dev eth0 proto static 194.71.126.45 via 95.165.96.1 dev eth0 proto static 194.71.227.212 via 95.165.96.1 dev eth0 proto static network.loopback=interface network.loopback.device='lo' network.loopback.proto='static' network.loopback.ipaddr='127.0.0.1' network.loopback.netmask='255.0.0.0' network.globals=globals network.globals.packet_steering='1' network.wan=interface network.wan.device='eth0' network.wan.proto='dhcp' network.wan.peerdns='0' network.wan.dns='1.1.1.1' '8.8.8.8' network.mgmt=interface network.mgmt.proto='static' network.mgmt.device='eth2' network.mgmt.ipaddr='10.71.100.2' network.mgmt.netmask='255.255.255.0' network.direct_in=interface network.direct_in.proto='static' network.direct_in.device='eth3' network.direct_in.ipaddr='10.201.0.2' network.direct_in.netmask='255.255.255.0' network.vpn_in=interface network.vpn_in.proto='static' network.vpn_in.device='eth1' network.vpn_in.ipaddr='10.200.0.2/24' network.@route[0]=route network.@route[0].interface='mgmt' network.@route[0].target='10.250.100.0/24' network.@route[0].gateway='10.71.100.1' network.vpn1=interface network.vpn1.proto='amneziawg' network.vpn1.private_key= network.vpn1.awg_jc='3' network.vpn1.awg_jmin='50' network.vpn1.awg_jmax='100' network.vpn1.awg_s1='107' network.vpn1.awg_s2='122' network.vpn1.awg_h1='711662706' network.vpn1.awg_h2='1180552356' network.vpn1.awg_h3='1975038815' network.vpn1.awg_h4='1815189548' network.vpn1.auto='0' network.vpn1.disabled='0' network.vpn1.delegate='0' network.vpn1.peerdns='0' network.vpn1.defaultroute='0' network.vpn1.hmn_role='production_slot' network.vpn1.hmn_source_config='/var/lib/router-egress-recovery/generations/staging/r20c-20260801-171610-1447/configs/egress1.conf' network.vpn1.hmn_loaded_at='2026-08-01T17:28:00Z' network.vpn1.hmn_endpoint='192.121.163.235:42530' network.vpn1.hmn_generation_id='r20c-20260801-171610-1447' network.vpn1.addresses='10.86.108.200/32' network.vpn1.dns='1.1.1.1' network.vpn_user=interface network.vpn_user.proto='amneziawg' network.vpn_user.private_key= network.vpn_user.awg_jc='3' network.vpn_user.awg_jmin='50' network.vpn_user.awg_jmax='100' network.vpn_user.awg_s1='20' network.vpn_user.awg_s2='87' network.vpn_user.awg_h1='217767672' network.vpn_user.awg_h2='1805649910' network.vpn_user.awg_h3='665837737' network.vpn_user.awg_h4='1257888244' network.vpn_user.auto='0' network.vpn_user.disabled='0' network.vpn_user.delegate='0' network.vpn_user.peerdns='0' network.vpn_user.defaultroute='0' network.vpn_user.addresses='10.90.235.244/32' network.vpn_user.dns='1.1.1.1' network.vpn_user.hmn_role='user_select_slot' network.vpn_user.hmn_source_config='/root/hmn/configs/awg1/latest/146-GB-United-Kingdom-London-S1-37.235.54.96-awg1.conf' network.vpn_user.hmn_loaded_at='2026-07-06T17:41:02+00:00' network.vpn_user.hmn_endpoint='37.235.54.96:38971' network.@amneziawg_vpn_user[0]=amneziawg_vpn_user network.@amneziawg_vpn_user[0].description='146-GB-United-Kingdom-London-S1-37.235.54.96-awg1.conf' network.@amneziawg_vpn_user[0].public_key= network.@amneziawg_vpn_user[0].allowed_ips='0.0.0.0/0' network.@amneziawg_vpn_user[0].route_allowed_ips='0' network.@amneziawg_vpn_user[0].persistent_keepalive='28' network.@amneziawg_vpn_user[0].endpoint_host='37.235.54.96' network.@amneziawg_vpn_user[0].endpoint_port='38971' network.vpn2=interface network.vpn2.proto='amneziawg' network.vpn2.private_key= network.vpn2.awg_jc='3' network.vpn2.awg_jmin='50' network.vpn2.awg_jmax='100' network.vpn2.awg_s1='17' network.vpn2.awg_s2='121' network.vpn2.awg_h1='1770463880' network.vpn2.awg_h2='1868667466' network.vpn2.awg_h3='938498412' network.vpn2.awg_h4='71620529' network.vpn2.auto='0' network.vpn2.disabled='0' network.vpn2.delegate='0' network.vpn2.peerdns='0' network.vpn2.defaultroute='0' network.vpn2.hmn_role='production_slot' network.vpn2.hmn_source_config='/var/lib/router-egress-recovery/generations/staging/r20c-20260801-171610-1447/configs/egress2.conf' network.vpn2.hmn_loaded_at='2026-08-01T17:28:00Z' network.vpn2.hmn_endpoint='157.173.25.198:34340' network.vpn2.hmn_generation_id='r20c-20260801-171610-1447' network.vpn2.addresses='10.91.168.223/32' network.vpn2.dns='1.1.1.1' network.vpn3=interface network.vpn3.proto='amneziawg' network.vpn3.private_key= network.vpn3.awg_jc='3' network.vpn3.awg_jmin='50' network.vpn3.awg_jmax='100' network.vpn3.awg_s1='80' network.vpn3.awg_s2='113' network.vpn3.awg_h1='1671317470' network.vpn3.awg_h2='469282168' network.vpn3.awg_h3='844208806' network.vpn3.awg_h4='4169549' network.vpn3.auto='0' network.vpn3.disabled='0' network.vpn3.delegate='0' network.vpn3.peerdns='0' network.vpn3.defaultroute='0' network.vpn3.hmn_role='production_slot' network.vpn3.hmn_source_config='/var/lib/router-egress-recovery/generations/staging/r20c-20260801-171610-1447/configs/egress3.conf' network.vpn3.hmn_loaded_at='2026-08-01T17:28:00Z' network.vpn3.hmn_endpoint='185.14.97.234:37492' network.vpn3.hmn_generation_id='r20c-20260801-171610-1447' network.vpn3.addresses='10.83.41.157/32' network.vpn3.dns='1.1.1.1' network.vpn4=interface network.vpn4.proto='amneziawg' network.vpn4.private_key= network.vpn4.awg_jc='3' network.vpn4.awg_jmin='50' network.vpn4.awg_jmax='100' network.vpn4.awg_s1='52' network.vpn4.awg_s2='88' network.vpn4.awg_h1='247439890' network.vpn4.awg_h2='1157952265' network.vpn4.awg_h3='469264248' network.vpn4.awg_h4='95652034' network.vpn4.auto='0' network.vpn4.disabled='0' network.vpn4.delegate='0' network.vpn4.peerdns='0' network.vpn4.defaultroute='0' network.vpn4.hmn_role='production_slot' network.vpn4.hmn_source_config='/var/lib/router-egress-recovery/generations/staging/r20c-20260801-171610-1447/configs/egress4.conf' network.vpn4.hmn_loaded_at='2026-08-01T17:28:00Z' network.vpn4.hmn_endpoint='84.32.230.159:43808' network.vpn4.hmn_generation_id='r20c-20260801-171610-1447' network.vpn4.addresses='10.103.187.191/32' network.vpn4.dns='1.1.1.1' network.vpn5=interface network.vpn5.proto='amneziawg' network.vpn5.private_key= network.vpn5.awg_jc='3' network.vpn5.awg_jmin='50' network.vpn5.awg_jmax='100' network.vpn5.awg_s1='110' network.vpn5.awg_s2='69' network.vpn5.awg_h1='1835589950' network.vpn5.awg_h2='1099975115' network.vpn5.awg_h3='829252662' network.vpn5.awg_h4='1534369890' network.vpn5.auto='0' network.vpn5.disabled='0' network.vpn5.delegate='0' network.vpn5.peerdns='0' network.vpn5.defaultroute='0' network.vpn5.hmn_role='production_slot' network.vpn5.hmn_source_config='/var/lib/router-egress-recovery/generations/staging/r20c-20260801-171610-1447/configs/egress5.conf' network.vpn5.hmn_loaded_at='2026-08-01T17:28:00Z' network.vpn5.hmn_endpoint='151.236.30.139:33998' network.vpn5.hmn_generation_id='r20c-20260801-171610-1447' network.vpn5.addresses='10.124.237.218/32' network.vpn5.dns='1.1.1.1' network.vpn_test=interface network.vpn_test.proto='amneziawg' network.vpn_test.private_key= network.vpn_test.awg_jc='3' network.vpn_test.awg_jmin='50' network.vpn_test.awg_jmax='100' network.vpn_test.awg_s1='18' network.vpn_test.awg_s2='76' network.vpn_test.awg_h1='1955462561' network.vpn_test.awg_h2='1627595855' network.vpn_test.awg_h3='1760056293' network.vpn_test.awg_h4='1765367965' network.vpn_test.auto='0' network.vpn_test.disabled='0' network.vpn_test.delegate='0' network.vpn_test.peerdns='0' network.vpn_test.defaultroute='0' network.vpn_test.addresses='10.67.234.5/32' network.vpn_test.dns='1.1.1.1' network.vpn_test.hmn_role='test_slot' network.vpn_test.hmn_source_config='/root/hmn/configs/awg1/20260801-171613/225-IL-Israel-Tel-Aviv-S5-192.71.27.64-awg1.conf' network.vpn_test.hmn_loaded_at='2026-08-01T17:27:40+00:00' network.vpn_test.hmn_endpoint='192.71.27.64:40044' network.@amneziawg_vpn_test[0]=amneziawg_vpn_test network.@amneziawg_vpn_test[0].description='225-IL-Israel-Tel-Aviv-S5-192.71.27.64-awg1.conf' network.@amneziawg_vpn_test[0].public_key= network.@amneziawg_vpn_test[0].allowed_ips='0.0.0.0/0' network.@amneziawg_vpn_test[0].route_allowed_ips='0' network.@amneziawg_vpn_test[0].persistent_keepalive='24' network.@amneziawg_vpn_test[0].endpoint_host='192.71.27.64' network.@amneziawg_vpn_test[0].endpoint_port='40044' network.@amneziawg_vpn1[0]=amneziawg_vpn1 network.@amneziawg_vpn1[0].description='r16-r20c-20260801-171610-1447-egress1' network.@amneziawg_vpn1[0].public_key= network.@amneziawg_vpn1[0].allowed_ips='0.0.0.0/0' network.@amneziawg_vpn1[0].route_allowed_ips='0' network.@amneziawg_vpn1[0].persistent_keepalive='24' network.@amneziawg_vpn1[0].endpoint_host='192.121.163.235' network.@amneziawg_vpn1[0].endpoint_port='42530' network.@amneziawg_vpn2[0]=amneziawg_vpn2 network.@amneziawg_vpn2[0].description='r16-r20c-20260801-171610-1447-egress2' network.@amneziawg_vpn2[0].public_key= network.@amneziawg_vpn2[0].allowed_ips='0.0.0.0/0' network.@amneziawg_vpn2[0].route_allowed_ips='0' network.@amneziawg_vpn2[0].persistent_keepalive='27' network.@amneziawg_vpn2[0].endpoint_host='157.173.25.198' network.@amneziawg_vpn2[0].endpoint_port='34340' network.@amneziawg_vpn3[0]=amneziawg_vpn3 network.@amneziawg_vpn3[0].description='r16-r20c-20260801-171610-1447-egress3' network.@amneziawg_vpn3[0].public_key= network.@amneziawg_vpn3[0].allowed_ips='0.0.0.0/0' network.@amneziawg_vpn3[0].route_allowed_ips='0' network.@amneziawg_vpn3[0].persistent_keepalive='25' network.@amneziawg_vpn3[0].endpoint_host='185.14.97.234' network.@amneziawg_vpn3[0].endpoint_port='37492' network.@amneziawg_vpn4[0]=amneziawg_vpn4 network.@amneziawg_vpn4[0].description='r16-r20c-20260801-171610-1447-egress4' network.@amneziawg_vpn4[0].public_key= network.@amneziawg_vpn4[0].allowed_ips='0.0.0.0/0' network.@amneziawg_vpn4[0].route_allowed_ips='0' network.@amneziawg_vpn4[0].persistent_keepalive='26' network.@amneziawg_vpn4[0].endpoint_host='84.32.230.159' network.@amneziawg_vpn4[0].endpoint_port='43808' network.@amneziawg_vpn5[0]=amneziawg_vpn5 network.@amneziawg_vpn5[0].description='r16-r20c-20260801-171610-1447-egress5' network.@amneziawg_vpn5[0].public_key= network.@amneziawg_vpn5[0].allowed_ips='0.0.0.0/0' network.@amneziawg_vpn5[0].route_allowed_ips='0' network.@amneziawg_vpn5[0].persistent_keepalive='24' network.@amneziawg_vpn5[0].endpoint_host='151.236.30.139' network.@amneziawg_vpn5[0].endpoint_port='33998' { "interface": [ { "interface": "direct_in", "up": true, "pending": false, "available": true, "autostart": true, "dynamic": false, "uptime": 87709, "l3_device": "eth3", "proto": "static", "device": "eth3", "updated": [ "addresses" ], "metric": 0, "dns_metric": 0, "delegation": true, "ipv4-address": [ { "address": "10.201.0.2", "mask": 24 } ], "ipv6-address": [ ], "ipv6-prefix": [ ], "ipv6-prefix-assignment": [ ], "route": [ ], "dns-server": [ ], "dns-search": [ ], "neighbors": [ ], "inactive": { "ipv4-address": [ ], "ipv6-address": [ ], "route": [ ], "dns-server": [ ], "dns-search": [ ], "neighbors": [ ] }, "data": { } }, { "interface": "loopback", "up": true, "pending": false, "available": true, "autostart": true, "dynamic": false, "uptime": 87709, "l3_device": "lo", "proto": "static", "device": "lo", "updated": [ "addresses" ], "metric": 0, "dns_metric": 0, "delegation": true, "ipv4-address": [ { "address": "127.0.0.1", "mask": 8 } ], "ipv6-address": [ ], "ipv6-prefix": [ ], "ipv6-prefix-assignment": [ ], "route": [ ], "dns-server": [ ], "dns-search": [ ], "neighbors": [ ], "inactive": { "ipv4-address": [ ], "ipv6-address": [ ], "route": [ ], "dns-server": [ ], "dns-search": [ ], "neighbors": [ ] }, "data": { } }, { "interface": "mgmt", "up": true, "pending": false, "available": true, "autostart": true, "dynamic": false, "uptime": 87709, "l3_device": "eth2", "proto": "static", "device": "eth2", "updated": [ "addresses", "routes" ], "metric": 0, "dns_metric": 0, "delegation": true, "ipv4-address": [ { "address": "10.71.100.2", "mask": 24 } ], "ipv6-address": [ ], "ipv6-prefix": [ ], "ipv6-prefix-assignment": [ ], "route": [ { "target": "10.250.100.0", "mask": 24, "nexthop": "10.71.100.1", "source": "0.0.0.0/0" } ], "dns-server": [ ], "dns-search": [ ], "neighbors": [ ], "inactive": { "ipv4-address": [ ], "ipv6-address": [ ], "route": [ ], "dns-server": [ ], "dns-search": [ ], "neighbors": [ ] }, "data": { } }, { "interface": "vpn1", "up": true, "pending": false, "available": true, "autostart": true, "dynamic": false, "uptime": 60427, "l3_device": "vpn1", "proto": "amneziawg", "updated": [ "addresses" ], "metric": 0, "dns_metric": 0, "delegation": false, "ipv4-address": [ { "address": "10.86.108.200", "mask": 32 } ], "ipv6-address": [ ], "ipv6-prefix": [ ], "ipv6-prefix-assignment": [ ], "route": [ ], "dns-server": [ "1.1.1.1" ], "dns-search": [ ], "neighbors": [ ], "inactive": { "ipv4-address": [ ], "ipv6-address": [ ], "route": [ ], "dns-server": [ ], "dns-search": [ ], "neighbors": [ ] }, "data": { } }, { "interface": "vpn2", "up": true, "pending": false, "available": true, "autostart": true, "dynamic": false, "uptime": 60420, "l3_device": "vpn2", "proto": "amneziawg", "updated": [ "addresses" ], "metric": 0, "dns_metric": 0, "delegation": false, "ipv4-address": [ { "address": "10.91.168.223", "mask": 32 } ], "ipv6-address": [ ], "ipv6-prefix": [ ], "ipv6-prefix-assignment": [ ], "route": [ ], "dns-server": [ "1.1.1.1" ], "dns-search": [ ], "neighbors": [ ], "inactive": { "ipv4-address": [ ], "ipv6-address": [ ], "route": [ ], "dns-server": [ ], "dns-search": [ ], "neighbors": [ ] }, "data": { } }, { "interface": "vpn3", "up": true, "pending": false, "available": true, "autostart": true, "dynamic": false, "uptime": 60412, "l3_device": "vpn3", "proto": "amneziawg", "updated": [ "addresses" ], "metric": 0, "dns_metric": 0, "delegation": false, "ipv4-address": [ { "address": "10.83.41.157", "mask": 32 } ], "ipv6-address": [ ], "ipv6-prefix": [ ], "ipv6-prefix-assignment": [ ], "route": [ ], "dns-server": [ "1.1.1.1" ], "dns-search": [ ], "neighbors": [ ], "inactive": { "ipv4-address": [ ], "ipv6-address": [ ], "route": [ ], "dns-server": [ ], "dns-search": [ ], "neighbors": [ ] }, "data": { } }, { "interface": "vpn4", "up": true, "pending": false, "available": true, "autostart": true, "dynamic": false, "uptime": 60404, "l3_device": "vpn4", "proto": "amneziawg", "updated": [ "addresses" ], "metric": 0, "dns_metric": 0, "delegation": false, "ipv4-address": [ { "address": "10.103.187.191", "mask": 32 } ], "ipv6-address": [ ], "ipv6-prefix": [ ], "ipv6-prefix-assignment": [ ], "route": [ ], "dns-server": [ "1.1.1.1" ], "dns-search": [ ], "neighbors": [ ], "inactive": { "ipv4-address": [ ], "ipv6-address": [ ], "route": [ ], "dns-server": [ ], "dns-search": [ ], "neighbors": [ ] }, "data": { } }, { "interface": "vpn5", "up": true, "pending": false, "available": true, "autostart": true, "dynamic": false, "uptime": 60396, "l3_device": "vpn5", "proto": "amneziawg", "updated": [ "addresses" ], "metric": 0, "dns_metric": 0, "delegation": false, "ipv4-address": [ { "address": "10.124.237.218", "mask": 32 } ], "ipv6-address": [ ], "ipv6-prefix": [ ], "ipv6-prefix-assignment": [ ], "route": [ ], "dns-server": [ "1.1.1.1" ], "dns-search": [ ], "neighbors": [ ], "inactive": { "ipv4-address": [ ], "ipv6-address": [ ], "route": [ ], "dns-server": [ ], "dns-search": [ ], "neighbors": [ ] }, "data": { } }, { "interface": "vpn_in", "up": true, "pending": false, "available": true, "autostart": true, "dynamic": false, "uptime": 87709, "l3_device": "eth1", "proto": "static", "device": "eth1", "updated": [ "addresses" ], "metric": 0, "dns_metric": 0, "delegation": true, "ipv4-address": [ { "address": "10.200.0.2", "mask": 24 } ], "ipv6-address": [ ], "ipv6-prefix": [ ], "ipv6-prefix-assignment": [ ], "route": [ ], "dns-server": [ ], "dns-search": [ ], "neighbors": [ ], "inactive": { "ipv4-address": [ ], "ipv6-address": [ ], "route": [ ], "dns-server": [ ], "dns-search": [ ], "neighbors": [ ] }, "data": { } }, { "interface": "vpn_test", "up": false, "pending": false, "available": true, "autostart": false, "dynamic": false, "proto": "amneziawg", "data": { } }, { "interface": "vpn_user", "up": false, "pending": false, "available": true, "autostart": false, "dynamic": false, "proto": "amneziawg", "data": { } }, { "interface": "wan", "up": true, "pending": false, "available": true, "autostart": true, "dynamic": false, "uptime": 87709, "l3_device": "eth0", "proto": "dhcp", "device": "eth0", "metric": 0, "dns_metric": 0, "delegation": true, "ipv4-address": [ { "address": "95.165.105.4", "mask": 20 } ], "ipv6-address": [ ], "ipv6-prefix": [ ], "ipv6-prefix-assignment": [ ], "route": [ { "target": "0.0.0.0", "mask": 0, "nexthop": "95.165.96.1", "source": "95.165.105.4/32" } ], "dns-server": [ "1.1.1.1", "8.8.8.8" ], "dns-search": [ ], "neighbors": [ ], "inactive": { "ipv4-address": [ ], "ipv6-address": [ ], "route": [ ], "dns-server": [ "62.112.113.170", "62.112.106.130" ], "dns-search": [ ], "neighbors": [ ] }, "data": { "dhcpserver": "95.165.96.1", "leasetime": 300 } } ] } ===== PAID INBOUND FIREWALL AND DNAT ===== firewall.@redirect[0]=redirect firewall.@redirect[0].name='WG_easy_51821_to_VM103' firewall.@redirect[0].family='ipv4' firewall.@redirect[0].src='wan' firewall.@redirect[0].src_dport='51821' firewall.@redirect[0].proto='udp' firewall.@redirect[0].dest='Management' firewall.@redirect[0].dest_ip='10.71.1.189' firewall.@redirect[0].dest_port='51821' firewall.@redirect[0].target='DNAT' firewall.@redirect[1]=redirect firewall.@redirect[1].name='wg_remote_to_vm100' firewall.@redirect[1].src='wan' firewall.@redirect[1].dest='Management' firewall.@redirect[1].src_dport='51820' firewall.@redirect[1].dest_ip='10.71.100.1' firewall.@redirect[1].dest_port='51820' firewall.@redirect[1].proto='udp' firewall.@redirect[1].target='DNAT' firewall.dnat_wg_paid_51830=redirect firewall.dnat_wg_paid_51830.name='DNAT-WG-Paid-51830-to-VM100' firewall.dnat_wg_paid_51830.src='wan' firewall.dnat_wg_paid_51830.src_dport='51830' firewall.dnat_wg_paid_51830.dest_ip='10.71.100.1' firewall.dnat_wg_paid_51830.dest_port='51830' firewall.dnat_wg_paid_51830.proto='udp' firewall.dnat_wg_paid_51830.target='DNAT' firewall.dnat_wg_paid_51830.dest='Management' firewall.reports_http_80=redirect firewall.reports_http_80.target='DNAT' firewall.reports_https_443=redirect firewall.reports_https_443.target='DNAT' ct status dnat accept comment "!fw4: Accept port redirections" ct status dnat accept comment "!fw4: Accept port forwards" ct status dnat accept comment "!fw4: Accept port redirections" ct status dnat accept comment "!fw4: Accept port forwards" meta nfproto ipv4 udp dport 51821 counter packets 0 bytes 0 dnat ip to 10.71.1.189:51821 comment "!fw4: WG_easy_51821_to_VM103" meta nfproto ipv4 udp dport 51820 counter packets 16 bytes 2672 dnat ip to 10.71.100.1:51820 comment "!fw4: wg_remote_to_vm100" meta nfproto ipv4 udp dport 51830 counter packets 0 bytes 0 dnat ip to 10.71.100.1:51830 comment "!fw4: DNAT-WG-Paid-51830-to-VM100" meta nfproto ipv4 tcp dport 80 counter packets 195 bytes 10228 dnat ip to 10.71.100.84:80 comment "!fw4: Reports HTTP 80 to VM130" meta nfproto ipv4 tcp dport 443 counter packets 354 bytes 18548 dnat ip to 10.71.100.84:443 comment "!fw4: Reports HTTPS 443 to VM130" ip saddr 10.71.100.0/24 ip daddr 95.165.105.4 udp dport 51821 dnat ip to 10.71.1.189:51821 comment "!fw4: WG_easy_51821_to_VM103 (reflection)" ip saddr 10.71.100.0/24 ip daddr 95.165.105.4 udp dport 51820 dnat ip to 10.71.100.1:51820 comment "!fw4: wg_remote_to_vm100 (reflection)" ip saddr 10.71.100.0/24 ip daddr 95.165.105.4 udp dport 51830 dnat ip to 10.71.100.1:51830 comment "!fw4: DNAT-WG-Paid-51830-to-VM100 (reflection)" ip saddr 10.71.100.0/24 ip daddr 95.165.105.4 tcp dport 80 dnat ip to 10.71.100.84:80 comment "!fw4: Reports HTTP 80 to VM130 (reflection)" ip saddr 10.71.100.0/24 ip daddr 95.165.105.4 tcp dport 443 dnat ip to 10.71.100.84:443 comment "!fw4: Reports HTTPS 443 to VM130 (reflection)" ip saddr 10.71.100.0/24 ip daddr 10.71.100.1 udp dport 51820 snat ip to 10.71.100.2 comment "!fw4: wg_remote_to_vm100 (reflection)" ip saddr 10.71.100.0/24 ip daddr 10.71.100.1 udp dport 51830 snat ip to 10.71.100.2 comment "!fw4: DNAT-WG-Paid-51830-to-VM100 (reflection)" WG_PAID_PUBLIC_PORT=51830 WG_PAID_DNAT_PRESENT=true CANDIDATE_AWG_PUBLIC_PORT=51831 CANDIDATE_AWG_PUBLIC_PORT_COLLISION=false CANDIDATE_AWG_DNAT_PRESENT=false ===== UDP LISTENERS ===== Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name udp 0 0 0.0.0.0:42156 0.0.0.0:* - udp 0 0 0.0.0.0:42216 0.0.0.0:* - udp 0 0 0.0.0.0:50984 0.0.0.0:* - udp 0 0 10.124.237.218:53 0.0.0.0:* 3789/dnsmasq udp 0 0 10.103.187.191:53 0.0.0.0:* 3789/dnsmasq udp 0 0 10.83.41.157:53 0.0.0.0:* 3789/dnsmasq udp 0 0 10.91.168.223:53 0.0.0.0:* 3789/dnsmasq udp 0 0 10.86.108.200:53 0.0.0.0:* 3789/dnsmasq udp 0 0 127.0.0.1:53 0.0.0.0:* 3789/dnsmasq udp 0 0 95.165.105.4:53 0.0.0.0:* 3789/dnsmasq udp 0 0 10.200.0.2:53 0.0.0.0:* 3789/dnsmasq udp 0 0 10.71.100.2:53 0.0.0.0:* 3789/dnsmasq udp 0 0 10.201.0.2:53 0.0.0.0:* 3789/dnsmasq udp 0 0 0.0.0.0:44598 0.0.0.0:* - udp 0 0 0.0.0.0:47990 0.0.0.0:* - udp 0 0 :::42156 :::* - udp 0 0 :::42216 :::* - udp 0 0 :::50984 :::* - udp 0 0 fe80::be24:11ff:fe42:83cf:53 :::* 3789/dnsmasq udp 0 0 fe80::be24:11ff:fe4d:7a71:53 :::* 3789/dnsmasq udp 0 0 ::1:53 :::* 3789/dnsmasq udp 0 0 fe80::be24:11ff:fe09:4e2c:53 :::* 3789/dnsmasq udp 0 0 fe80::be24:11ff:fec8:2ee1:53 :::* 3789/dnsmasq udp 0 0 :::44598 :::* - udp 0 0 :::47990 :::* - ===== CURRENT SELECTOR MAPPER HEALTH ===== 10011: from all fwmark 0x201 lookup 201 10012: from all fwmark 0x202 lookup 202 10013: from all fwmark 0x203 lookup 203 10014: from all fwmark 0x204 lookup 204 10015: from all fwmark 0x205 lookup 205 TABLE_201=default dev vpn1 scope link TABLE_202=default dev vpn2 scope link TABLE_203=default dev vpn3 scope link TABLE_204=default dev vpn4 scope link TABLE_205=default dev vpn5 scope link EGRESS_AWG_INTERFACES=vpn1 vpn2 vpn3 vpn4 vpn5 RESULT=PASS_R20QW_VM101_READONLY_AUDIT