=== STEP_032C2 FIREWALL POOL RECHECK === timestamp=20260708-105948 mode=read-only snapshot_to_verify=S032C_FW_POOL_OK_20260708-105809 purpose: fix STEP_032C firewall membership validator === VM101 read-only recheck === date=Wed Jul 8 10:59:48 UTC 2026 === firewall vpn_out raw === vpn_out_index=4 firewall.cfg0ddc81=zone firewall.cfg0ddc81.name='vpn_out' firewall.cfg0ddc81.input='REJECT' firewall.cfg0ddc81.output='ACCEPT' firewall.cfg0ddc81.forward='REJECT' firewall.cfg0ddc81.masq='1' firewall.cfg0ddc81.mtu_fix='1' firewall.cfg0ddc81.network='vpn1' 'vpn2' 'vpn_user' 'vpn3' 'vpn4' 'vpn5' vpn_out_network=vpn1 vpn2 vpn_user vpn3 vpn4 vpn5 HAS_vpn3=1 HAS_vpn4=1 HAS_vpn5=1 === ip -br addr === lo UNKNOWN 127.0.0.1/8 ::1/128 eth0 UP 95.165.105.4/20 fe80::be24:11ff:fe42:83cf/64 eth1 UP 10.200.0.2/24 fe80::be24:11ff:fe09:4e2c/64 eth2 UP 10.71.100.2/24 fe80::be24:11ff:fe4d:7a71/64 eth3 UP 10.201.0.2/24 fe80::be24:11ff:fec8:2ee1/64 vpn1 UNKNOWN 10.91.233.132/32 vpn3 UNKNOWN 10.104.58.24/32 vpn4 UNKNOWN 10.103.120.171/32 vpn5 UNKNOWN 10.97.189.145/32 === ip rule === 0: from all lookup local 10019: from all iif eth1 lookup 200 10020: from 10.200.0.0/24 lookup 200 32766: from all lookup main 32767: from all lookup default === table 200 === default dev vpn1 scope link 10.200.0.0/24 dev eth1 scope link src 10.200.0.2 10.201.0.0/24 dev eth3 scope link src 10.201.0.2 === tables 201-205 === TABLE 201 TABLE 202 TABLE 203 default dev vpn3 scope link TABLE 204 default dev vpn4 scope link TABLE 205 default dev vpn5 scope link === explicit ping probes === ### ping -I vpn3 1.1.1.1 PING 1.1.1.1 (1.1.1.1): 56 data bytes 64 bytes from 1.1.1.1: seq=0 ttl=55 time=52.089 ms 64 bytes from 1.1.1.1: seq=1 ttl=55 time=52.136 ms --- 1.1.1.1 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max = 52.089/52.112/52.136 ms PING_vpn3_RC=0 ### ping -I vpn4 1.1.1.1 PING 1.1.1.1 (1.1.1.1): 56 data bytes 64 bytes from 1.1.1.1: seq=0 ttl=57 time=50.361 ms 64 bytes from 1.1.1.1: seq=1 ttl=57 time=50.041 ms --- 1.1.1.1 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max = 50.041/50.201/50.361 ms PING_vpn4_RC=0 ### ping -I vpn5 1.1.1.1 PING 1.1.1.1 (1.1.1.1): 56 data bytes 64 bytes from 1.1.1.1: seq=0 ttl=61 time=58.726 ms 64 bytes from 1.1.1.1: seq=1 ttl=61 time=59.137 ms --- 1.1.1.1 ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max = 58.726/58.931/59.137 ms PING_vpn5_RC=0 === amneziawg concise === ### vpn1 interface: vpn1 endpoint: 178.215.227.13:44408 latest handshake: 1 minute, 44 seconds ago transfer: 181.68 KiB received, 253.79 KiB sent ### vpn2 ### vpn3 interface: vpn3 endpoint: 95.211.68.119:45176 latest handshake: 4 seconds ago transfer: 3.83 KiB received, 9.81 KiB sent ### vpn4 interface: vpn4 endpoint: 78.31.250.16:41729 latest handshake: 1 minute, 4 seconds ago transfer: 2.81 KiB received, 8.08 KiB sent ### vpn5 interface: vpn5 endpoint: 157.173.27.69:41797 latest handshake: 1 second ago transfer: 2.81 KiB received, 7.24 KiB sent ### vpn_user === uci pending === === legacy processes === === Proxmox snapshot verify === `-> S032C_FW_POOL_OK_20260708-105809 2026-07-08 13:58:14 VM101 egress pool firewall integration OK: vpn3/vpn4/vpn5 in vpn_out, no policy switch === STEP_032C2 RESULT === ping_vpn3_rc=0 ping_vpn4_rc=0 ping_vpn5_rc=0 has_vpn3=1 has_vpn4=1 has_vpn5=1 table203_default_lines=1 table204_default_lines=1 table205_default_lines=1 table200_default_vpn1_lines=1 rule203_205_lines=0 uci_pending_lines=0 snapshot_lines=2 snapshot=S032C_FW_POOL_OK_20260708-105809 decision=PASS_FIREWALL_POOL_RECHECK