[INFO] WireGuard is started. [INFO] WebUI ports are "8080/tcp,8080/udp". [INFO] Additional ports are "". [INFO] WireGuard remote is "45.128.36.130:1443". [INFO] Docker network interface is "eth1". [INFO] Docker network IP is "172.20.0.4". [INFO] Docker network CIDR is "172.20.0.0/16". [INFO] Adding "192.168.1.0/24" as route via interface "eth1". [INFO] ip route overview: default via 172.20.0.1 dev eth1 10.0.1.0/24 dev eth0 proto kernel scope link src 10.0.1.13 10.13.128.0/24 dev wg0 proto kernel scope link src 10.13.128.85 172.20.0.0/16 dev eth1 proto kernel scope link src 172.20.0.4 192.168.1.0/24 via 172.20.0.1 dev eth1 [INFO] Configuring iptables... [INFO] ipv6 is disabled, we will not set ip6tables rules. [INFO] iptables overview: -P INPUT DROP -P FORWARD DROP -P OUTPUT DROP -A INPUT -i wg0 -p udp -m udp --dport 8080 -j DROP -A INPUT -i wg0 -p tcp -m tcp --dport 8080 -j DROP -A INPUT -i wg0 -p udp -j ACCEPT -A INPUT -i wg0 -p tcp -j ACCEPT -A INPUT -s 172.20.0.0/16 -d 172.20.0.0/16 -j ACCEPT -A INPUT -i eth1 -p udp -m udp --sport 1443 -j ACCEPT -A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -i eth1 -p tcp -m tcp --dport 8080 -j ACCEPT -A INPUT -i eth1 -p udp -m udp --dport 8080 -j ACCEPT -A OUTPUT -o wg0 -p udp -m udp --sport 8080 -j DROP -A OUTPUT -o wg0 -p tcp -m tcp --sport 8080 -j DROP -A OUTPUT -o wg0 -p udp -j ACCEPT -A OUTPUT -o wg0 -p tcp -j ACCEPT -A OUTPUT -s 172.20.0.0/16 -d 172.20.0.0/16 -j ACCEPT -A OUTPUT -o eth1 -p udp -m udp --dport 1443 -j ACCEPT -A OUTPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT -A OUTPUT -o lo -j ACCEPT -A OUTPUT -o eth1 -p tcp -m tcp --sport 8080 -j ACCEPT -A OUTPUT -o eth1 -p udp -m udp --sport 8080 -j ACCEPT