This system is the property of Known Element Enterprises LLC. Authorized uses only. All activity may be monitored and reported. All activities subject to monitoring/recording/review in real time and/or at a later time.##### AUDIT START 2026-07-28T02:41:34Z ##### Audit host: pfv-netboot.knel.net Audit user: localuser Script: audit-netboot.sh (READ-ONLY) ======================================================================== SECTION: 1. SYSTEM BASICS ======================================================================== -- uname -- Linux pfv-netboot 6.1.0-44-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.164-1 (2026-03-09) x86_64 GNU/Linux -- /etc/os-release -- PRETTY_NAME="Debian GNU/Linux 12 (bookworm)" NAME="Debian GNU/Linux" VERSION_ID="12" VERSION="12 (bookworm)" VERSION_CODENAME=bookworm ID=debian HOME_URL="https://www.debian.org/" SUPPORT_URL="https://www.debian.org/support" BUG_REPORT_URL="https://bugs.debian.org/" -- uptime -- 21:41:34 up 113 days, 15:32, 2 users, load average: 0.07, 0.07, 0.06 -- timezone -- Local time: Mon 2026-07-27 21:41:34 CDT Universal time: Tue 2026-07-28 02:41:34 UTC RTC time: Tue 2026-07-28 02:41:34 Time zone: US/Central (CDT, -0500) System clock synchronized: yes NTP service: n/a RTC in local TZ: no -- arch -- amd64 -- memory -- total used free shared buff/cache available Mem: 1.9Gi 940Mi 66Mi 65Mi 1.1Gi 961Mi Swap: 974Mi 315Mi 659Mi -- disk -- Filesystem Size Used Avail Use% Mounted on /dev/sda1 491G 18G 448G 4% / -- cpu count -- 2 ======================================================================== SECTION: 2. NETWORK ======================================================================== -- hostname -- pfv-netboot pfv-netboot.knel.net 192.168.3.250 172.24.0.1 172.18.0.1 172.19.0.1 172.23.0.1 172.17.0.1 172.20.0.1 172.22.0.1 100.103.64.82 2600:1700:1d1:eb00:215:5dff:fe64:e81e fd7a:115c:a1e0::2901:4052 -- ip addr -- lo UNKNOWN 127.0.0.1/8 ::1/128 eth0 UP 192.168.3.250/22 2600:1700:1d1:eb00:215:5dff:fe64:e81e/64 fe80::215:5dff:fe64:e81e/64 eth1 UP br-3d55385c5e7d UP 172.24.0.1/16 fe80::d883:2ff:fef8:79cd/64 br-50e2988e78eb DOWN 172.18.0.1/16 br-748fea589ab8 DOWN 172.19.0.1/16 br-b52d11330b20 DOWN 172.23.0.1/16 docker0 DOWN 172.17.0.1/16 br-f91c61cdba28 DOWN 172.20.0.1/16 br-25187260f675 DOWN 172.22.0.1/16 tailscale0 UNKNOWN 100.103.64.82/32 fd7a:115c:a1e0::2901:4052/128 fe80::42db:e6ff:fe57:431c/64 veth9ecb986@if2 UP fe80::c45b:62ff:fe19:6258/64 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host noprefixroute valid_lft forever preferred_lft forever 2: eth0: mtu 1500 qdisc mq state UP group default qlen 1000 link/ether 00:15:5d:64:e8:1e brd ff:ff:ff:ff:ff:ff inet 192.168.3.250/22 brd 192.168.3.255 scope global eth0 valid_lft forever preferred_lft forever inet6 2600:1700:1d1:eb00:215:5dff:fe64:e81e/64 scope global dynamic mngtmpaddr valid_lft 3391sec preferred_lft 3391sec inet6 fe80::215:5dff:fe64:e81e/64 scope link valid_lft forever preferred_lft forever 3: eth1: mtu 1500 qdisc mq state UP group default qlen 1000 link/ether 00:15:5d:64:e8:2a brd ff:ff:ff:ff:ff:ff 5: br-3d55385c5e7d: mtu 1500 qdisc noqueue state UP group default link/ether da:83:02:f8:79:cd brd ff:ff:ff:ff:ff:ff inet 172.24.0.1/16 brd 172.24.255.255 scope global br-3d55385c5e7d valid_lft forever preferred_lft forever inet6 fe80::d883:2ff:fef8:79cd/64 scope link valid_lft forever preferred_lft forever 6: br-50e2988e78eb: mtu 1500 qdisc noqueue state DOWN group default link/ether ca:f9:33:b2:b6:bb brd ff:ff:ff:ff:ff:ff inet 172.18.0.1/16 brd 172.18.255.255 scope global br-50e2988e78eb valid_lft forever preferred_lft forever 7: br-748fea589ab8: mtu 1500 qdisc noqueue state DOWN group default link/ether 82:e8:2b:47:1e:91 brd ff:ff:ff:ff:ff:ff inet 172.19.0.1/16 brd 172.19.255.255 scope global br-748fea589ab8 valid_lft forever preferred_lft forever 8: br-b52d11330b20: mtu 1500 qdisc noqueue state DOWN group default link/ether de:6e:f1:ec:24:64 brd ff:ff:ff:ff:ff:ff inet 172.23.0.1/16 brd 172.23.255.255 scope global br-b52d11330b20 valid_lft forever preferred_lft forever 9: docker0: mtu 1500 qdisc noqueue state DOWN group default link/ether 56:f9:55:99:fa:af brd ff:ff:ff:ff:ff:ff inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0 valid_lft forever preferred_lft forever 10: br-f91c61cdba28: mtu 1500 qdisc noqueue state DOWN group default link/ether 8e:ed:24:fa:4b:4a brd ff:ff:ff:ff:ff:ff inet 172.20.0.1/16 brd 172.20.255.255 scope global br-f91c61cdba28 valid_lft forever preferred_lft forever 11: br-25187260f675: mtu 1500 qdisc noqueue state DOWN group default link/ether 82:af:8a:0a:64:01 brd ff:ff:ff:ff:ff:ff inet 172.22.0.1/16 brd 172.22.255.255 scope global br-25187260f675 valid_lft forever preferred_lft forever 18: tailscale0: mtu 1280 qdisc fq_codel state UNKNOWN group default qlen 500 link/none inet 100.103.64.82/32 scope global tailscale0 valid_lft forever preferred_lft forever inet6 fd7a:115c:a1e0::2901:4052/128 scope global valid_lft forever preferred_lft forever inet6 fe80::42db:e6ff:fe57:431c/64 scope link stable-privacy valid_lft forever preferred_lft forever 24: veth9ecb986@if2: mtu 1500 qdisc noqueue master br-3d55385c5e7d state UP group default link/ether c6:5b:62:19:62:58 brd ff:ff:ff:ff:ff:ff link-netnsid 0 inet6 fe80::c45b:62ff:fe19:6258/64 scope link valid_lft forever preferred_lft forever -- default route -- default via 192.168.3.254 dev eth0 onlink 172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown 172.18.0.0/16 dev br-50e2988e78eb proto kernel scope link src 172.18.0.1 linkdown 172.19.0.0/16 dev br-748fea589ab8 proto kernel scope link src 172.19.0.1 linkdown 172.20.0.0/16 dev br-f91c61cdba28 proto kernel scope link src 172.20.0.1 linkdown 172.22.0.0/16 dev br-25187260f675 proto kernel scope link src 172.22.0.1 linkdown 172.23.0.0/16 dev br-b52d11330b20 proto kernel scope link src 172.23.0.1 linkdown 172.24.0.0/16 dev br-3d55385c5e7d proto kernel scope link src 172.24.0.1 192.168.0.0/22 dev eth0 proto kernel scope link src 192.168.3.250 -- /etc/resolv.conf -- # resolv.conf(5) file generated by tailscale # For more info, see https://tailscale.com/s/resolvconf-overwrite # DO NOT EDIT THIS FILE BY HAND -- CHANGES WILL BE OVERWRITTEN nameserver 100.100.100.100 nameserver fd7a:115c:a1e0::53 search knel.net -- /etc/hosts -- 127.0.0.1 localhost 127.0.1.1 pfv-netboot.knel.net pfv-netboot # The following lines are desirable for IPv6 capable hosts ::1 localhost ip6-localhost ip6-loopback ff02::1 ip6-allnodes ff02::2 ip6-allrouters -- listening TCP/UDP sockets -- Netid State Recv-Q Send-Q Local Address:Port Peer Address:PortProcess udp UNCONN 0 0 0.0.0.0:38908 0.0.0.0:* udp UNCONN 0 0 0.0.0.0:53 0.0.0.0:* udp UNCONN 0 0 0.0.0.0:67 0.0.0.0:* udp UNCONN 0 0 0.0.0.0:46164 0.0.0.0:* udp UNCONN 0 0 0.0.0.0:111 0.0.0.0:* udp UNCONN 0 0 100.103.64.82:123 0.0.0.0:* udp UNCONN 0 0 172.24.0.1:123 0.0.0.0:* udp UNCONN 0 0 192.168.3.250:123 0.0.0.0:* udp UNCONN 0 0 127.0.0.1:123 0.0.0.0:* udp UNCONN 0 0 0.0.0.0:123 0.0.0.0:* udp UNCONN 0 0 172.17.255.255:137 0.0.0.0:* udp UNCONN 0 0 172.17.0.1:137 0.0.0.0:* udp UNCONN 0 0 172.18.255.255:137 0.0.0.0:* udp UNCONN 0 0 172.18.0.1:137 0.0.0.0:* udp UNCONN 0 0 172.19.255.255:137 0.0.0.0:* udp UNCONN 0 0 172.19.0.1:137 0.0.0.0:* udp UNCONN 0 0 172.20.255.255:137 0.0.0.0:* udp UNCONN 0 0 172.20.0.1:137 0.0.0.0:* udp UNCONN 0 0 172.22.255.255:137 0.0.0.0:* udp UNCONN 0 0 172.22.0.1:137 0.0.0.0:* udp UNCONN 0 0 172.23.255.255:137 0.0.0.0:* udp UNCONN 0 0 172.23.0.1:137 0.0.0.0:* udp UNCONN 0 0 172.24.255.255:137 0.0.0.0:* udp UNCONN 0 0 172.24.0.1:137 0.0.0.0:* udp UNCONN 0 0 192.168.3.255:137 0.0.0.0:* udp UNCONN 0 0 192.168.3.250:137 0.0.0.0:* udp UNCONN 0 0 0.0.0.0:137 0.0.0.0:* udp UNCONN 0 0 172.17.255.255:138 0.0.0.0:* udp UNCONN 0 0 172.17.0.1:138 0.0.0.0:* udp UNCONN 0 0 172.18.255.255:138 0.0.0.0:* udp UNCONN 0 0 172.18.0.1:138 0.0.0.0:* udp UNCONN 0 0 172.19.255.255:138 0.0.0.0:* udp UNCONN 0 0 172.19.0.1:138 0.0.0.0:* udp UNCONN 0 0 172.20.255.255:138 0.0.0.0:* udp UNCONN 0 0 172.20.0.1:138 0.0.0.0:* udp UNCONN 0 0 172.22.255.255:138 0.0.0.0:* udp UNCONN 0 0 172.22.0.1:138 0.0.0.0:* udp UNCONN 0 0 172.23.255.255:138 0.0.0.0:* udp UNCONN 0 0 172.23.0.1:138 0.0.0.0:* udp UNCONN 0 0 172.24.255.255:138 0.0.0.0:* udp UNCONN 0 0 172.24.0.1:138 0.0.0.0:* udp UNCONN 0 0 192.168.3.255:138 0.0.0.0:* udp UNCONN 0 0 192.168.3.250:138 0.0.0.0:* udp UNCONN 0 0 0.0.0.0:138 0.0.0.0:* udp UNCONN 0 0 0.0.0.0:161 0.0.0.0:* udp UNCONN 0 0 0.0.0.0:41257 0.0.0.0:* udp UNCONN 0 0 0.0.0.0:20000 0.0.0.0:* udp UNCONN 0 0 0.0.0.0:41641 0.0.0.0:* udp UNCONN 0 0 0.0.0.0:59092 0.0.0.0:* udp UNCONN 0 0 0.0.0.0:10000 0.0.0.0:* udp UNCONN 0 0 127.0.0.1:786 0.0.0.0:* udp UNCONN 0 0 0.0.0.0:40725 0.0.0.0:* udp UNCONN 0 0 0.0.0.0:37749 0.0.0.0:* udp UNCONN 0 0 [::]:53 [::]:* udp UNCONN 0 0 [::]:34901 [::]:* udp UNCONN 0 0 [::]:111 [::]:* udp UNCONN 0 0 [fe80::c45b:62ff:fe19:6258]%veth9ecb986:123 [::]:* udp UNCONN 0 0 [fe80::42db:e6ff:fe57:431c]%tailscale0:123 [::]:* udp UNCONN 0 0 [fd7a:115c:a1e0::2901:4052]:123 [::]:* udp UNCONN 0 0 [fe80::d883:2ff:fef8:79cd]%br-3d55385c5e7d:123 [::]:* udp UNCONN 0 0 [fe80::215:5dff:fe64:e81e]%eth0:123 [::]:* udp UNCONN 0 0 [2600:1700:1d1:eb00:215:5dff:fe64:e81e]:123 [::]:* udp UNCONN 0 0 [::1]:123 [::]:* udp UNCONN 0 0 [::]:123 [::]:* udp UNCONN 0 0 [::]:43257 [::]:* udp UNCONN 0 0 [::]:44469 [::]:* udp UNCONN 0 0 [::]:41641 [::]:* udp UNCONN 0 0 [::]:55132 [::]:* udp UNCONN 0 0 [::]:34667 [::]:* tcp LISTEN 0 4096 0.0.0.0:38435 0.0.0.0:* tcp LISTEN 0 4096 0.0.0.0:20000 0.0.0.0:* tcp LISTEN 0 5 127.0.0.1:555 0.0.0.0:* tcp LISTEN 0 4096 0.0.0.0:10002 0.0.0.0:* tcp LISTEN 0 4096 0.0.0.0:10003 0.0.0.0:* tcp LISTEN 0 4096 0.0.0.0:10000 0.0.0.0:* tcp LISTEN 0 4096 100.103.64.82:64362 0.0.0.0:* tcp LISTEN 0 5 127.0.0.1:61209 0.0.0.0:* tcp LISTEN 0 50 0.0.0.0:139 0.0.0.0:* tcp LISTEN 0 64 0.0.0.0:36079 0.0.0.0:* tcp LISTEN 0 4096 0.0.0.0:45295 0.0.0.0:* tcp LISTEN 0 5 0.0.0.0:4330 0.0.0.0:* tcp LISTEN 0 100 0.0.0.0:25 0.0.0.0:* tcp LISTEN 0 128 0.0.0.0:22 0.0.0.0:* tcp LISTEN 0 64 0.0.0.0:2049 0.0.0.0:* tcp LISTEN 0 4096 0.0.0.0:53 0.0.0.0:* tcp LISTEN 0 4096 0.0.0.0:40029 0.0.0.0:* tcp LISTEN 0 4096 0.0.0.0:111 0.0.0.0:* tcp LISTEN 0 50 0.0.0.0:445 0.0.0.0:* tcp LISTEN 0 4096 0.0.0.0:58853 0.0.0.0:* tcp LISTEN 0 128 0.0.0.0:44322 0.0.0.0:* tcp LISTEN 0 128 0.0.0.0:44323 0.0.0.0:* tcp LISTEN 0 5 0.0.0.0:44321 0.0.0.0:* tcp LISTEN 0 4096 [fd7a:115c:a1e0::2901:4052]:52472 [::]:* tcp LISTEN 0 4096 [::]:45755 [::]:* tcp LISTEN 0 4096 [::]:60951 [::]:* tcp LISTEN 0 4096 *:9090 *:* tcp LISTEN 0 64 [::]:37813 [::]:* tcp LISTEN 0 4096 [::]:10002 [::]:* tcp LISTEN 0 4096 [::]:10003 [::]:* tcp LISTEN 0 4096 [::]:10000 [::]:* tcp LISTEN 0 4096 *:45876 *:* tcp LISTEN 0 50 [::]:139 [::]:* tcp LISTEN 0 4096 [::]:44271 [::]:* tcp LISTEN 0 5 [::]:4330 [::]:* tcp LISTEN 0 128 [::]:22 [::]:* tcp LISTEN 0 64 [::]:2049 [::]:* tcp LISTEN 0 4096 [::]:53 [::]:* tcp LISTEN 0 4096 [::]:111 [::]:* tcp LISTEN 0 4096 *:6556 *:* tcp LISTEN 0 50 [::]:445 [::]:* tcp LISTEN 0 4096 [::]:60725 [::]:* tcp LISTEN 0 128 [::]:44322 [::]:* tcp LISTEN 0 128 [::]:44323 [::]:* tcp LISTEN 0 5 [::]:44321 [::]:* -- /etc/network/interfaces -- # This file describes the network interfaces available on your system # and how to activate them. For more information, see interfaces(5). source /etc/network/interfaces.d/* # The loopback network interface auto lo iface lo inet loopback # The primary network interface allow-hotplug eth0 iface eth0 inet static address 192.168.3.250 netmask 255.255.252.0 gateway 192.168.3.254 #allow-hotplug eth1 #iface eth1 inet static # address 10.100.100.4 # netmask 255.255.255.0 -- netplan -- -- systemd-networkd -- total 8 drwxr-xr-x 2 root root 4096 Mar 6 2025 . drwxr-xr-x 5 root root 4096 Jul 20 17:55 .. ● State: n/a Online state: unknown Address: 192.168.3.250 on eth0 172.24.0.1 on br-3d55385c5e7d 172.18.0.1 on br-50e2988e78eb 172.19.0.1 on br-748fea589ab8 172.23.0.1 on br-b52d11330b20 172.17.0.1 on docker0 172.20.0.1 on br-f91c61cdba28 172.22.0.1 on br-25187260f675 100.103.64.82 on tailscale0 2600:1700:1d1:eb00:215:5dff:fe64:e81e on eth0 fd7a:115c:a1e0::2901:4052 on tailscale0 fe80::215:5dff:fe64:e81e on eth0 fe80::d883:2ff:fef8:79cd on br-3d55385c5e7d fe80::42db:e6ff:fe57:431c on tailscale0 fe80::c45b:62ff:fe19:6258 on veth9ecb986 Gateway: 192.168.3.254 on eth0 fe80::6e4b:b4ff:fe10:4061 on eth0 ======================================================================== SECTION: 3. RELEVANT SYSTEMD UNITS ======================================================================== -- all units matching dns|pihole|dnsmasq|technitium|ftl|ntp|chrony|timesync -- initrd-parse-etc.service loaded inactive dead Mountpoints Configured in the Real Root ntpsec-rotate-stats.service loaded inactive dead Rotate ntpd stats ntpsec-systemd-netif.service loaded inactive dead ntpsec-systemd-netif.service ntpsec.service loaded active running Network Time Service ● systemd-resolved.service not-found inactive dead systemd-resolved.service ● systemd-timesyncd.service not-found inactive dead systemd-timesyncd.service -- unit files (enabled state) -- ntpsec-systemd-netif.path enabled enabled postfix-resolvconf.path disabled enabled ntp.service alias - ntpd.service alias - ntpsec-rotate-stats.service static - ntpsec-systemd-netif.service static - ntpsec-wait.service disabled enabled ntpsec.service enabled enabled postfix-resolvconf.service disabled enabled ntpsec-rotate-stats.timer enabled enabled ntpsec.timer masked enabled -- installed packages of interest -- ii dnsmasq-base 2.90-4~deb12u2 amd64 Small caching DNS proxy and DHCP/TFTP server - executable ii ntpsec 1.2.2+dfsg1-1+deb12u1 amd64 Network Time Protocol daemon and utility programs ii ntpsec-ntpdate 1.2.2+dfsg1-1+deb12u1 amd64 client for setting system time from NTP servers ii ntpsec-ntpdig 1.2.2+dfsg1-1+deb12u1 amd64 ntpdig SNTP client ii python3-ntp 1.2.2+dfsg1-1+deb12u1 amd64 Python 3 NTP Helper Classes ======================================================================== SECTION: 4. NTP ======================================================================== -- chrony -- -- chronyc sources/stats (if available) -- main: line 44: printf: --: invalid option printf: usage: printf [-v var] format [arguments] -- ntpsec / ntp classic -- ● ntpsec.service - Network Time Service Loaded: loaded (/lib/systemd/system/ntpsec.service; enabled; preset: enabled) Active: active (running) since Mon 2026-07-20 17:56:32 CDT; 1 week 0 days ago Docs: man:ntpd(8) Process: 2124687 ExecStart=/usr/libexec/ntpsec/ntp-systemd-wrapper (code=exited, status=0/SUCCESS) Main PID: 2124690 (ntpd) Tasks: 1 (limit: 2219) Memory: 10.7M CPU: 34.324s CGroup: /system.slice/ntpsec.service └─2124690 /usr/sbin/ntpd -p /run/ntpd.pid -c /etc/ntpsec/ntp.conf -g -N -u ntpsec:ntpsec ● ntpsec.service - Network Time Service Loaded: loaded (/lib/systemd/system/ntpsec.service; enabled; preset: enabled) Active: active (running) since Mon 2026-07-20 17:56:32 CDT; 1 week 0 days ago Docs: man:ntpd(8) Process: 2124687 ExecStart=/usr/libexec/ntpsec/ntp-systemd-wrapper (code=exited, status=0/SUCCESS) Main PID: 2124690 (ntpd) Tasks: 1 (limit: 2219) Memory: 10.7M CPU: 34.324s CGroup: /system.slice/ntpsec.service └─2124690 /usr/sbin/ntpd -p /run/ntpd.pid -c /etc/ntpsec/ntp.conf -g -N -u ntpsec:ntpsec main: line 44: printf: --: invalid option printf: usage: printf [-v var] format [arguments] main: line 37: printf: --: invalid option printf: usage: printf [-v var] format [arguments] driftfile /var/lib/ntp/ntp.drift leapfile /usr/share/zoneinfo/leap-seconds.list server pfvsvrpi.knel.net restrict 127.0.0.1 restrict ::1 -- systemd-timesyncd -- main: line 44: printf: --: invalid option printf: usage: printf [-v var] format [arguments] -- openntpd -- main: line 44: printf: --: invalid option printf: usage: printf [-v var] format [arguments] ======================================================================== SECTION: 5. DOCKER ======================================================================== -- docker version -- Client: Docker Engine - Community Version: 29.6.2 API version: 1.55 Go version: go1.26.5 Git commit: dfc4efb Built: Thu Jul 16 16:12:20 2026 OS/Arch: linux/amd64 Context: default Client: Docker Engine - Community Version: 29.6.2 API version: 1.55 Go version: go1.26.5 Git commit: dfc4efb Built: Thu Jul 16 16:12:20 2026 OS/Arch: linux/amd64 Context: default Server: Docker Engine - Community Engine: Version: 29.6.2 API version: 1.55 (minimum version 1.40) Go version: go1.26.5 Git commit: 3d80467 Built: Thu Jul 16 16:12:20 2026 OS/Arch: linux/amd64 Experimental: false containerd: Version: v2.2.6 GitCommit: 11ce9d5f3c68c941867e82890e93e815c1304f1b runc: Version: 1.3.6 GitCommit: v1.3.6-0-g491b69ba docker-init: Version: 0.19.0 GitCommit: de40ad0 -- containers (running) -- CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 1d09249f01b0 pihole/pihole:latest "start.sh" 5 months ago Up 44 minutes (healthy) 67/udp, 0.0.0.0:53->53/tcp, 0.0.0.0:53->53/udp, [::]:53->53/tcp, [::]:53->53/udp, 123/udp, 0.0.0.0:10002->80/tcp, [::]:10002->80/tcp, 0.0.0.0:10003->443/tcp, [::]:10003->443/tcp pihole c33ced53142e dockurr/chrony "/bin/startup" 13 months ago Up 7 days (healthy) tsys-ntp -- containers (all) -- CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 1d09249f01b0 pihole/pihole:latest "start.sh" 5 months ago Up 44 minutes (healthy) 67/udp, 0.0.0.0:53->53/tcp, 0.0.0.0:53->53/udp, [::]:53->53/tcp, [::]:53->53/udp, 123/udp, 0.0.0.0:10002->80/tcp, [::]:10002->80/tcp, 0.0.0.0:10003->443/tcp, [::]:10003->443/tcp pihole c33ced53142e dockurr/chrony "/bin/startup" 13 months ago Up 7 days (healthy) tsys-ntp -- images -- IMAGE ID DISK USAGE CONTENT SIZE EXTRA busybox:latest 6d3e4188a38a 4.28MB 0B dockurr/chrony:latest 3b656f2feb55 15.4MB 0B U pihole/pihole:latest 81365952d1f8 92.7MB 0B U -- volumes -- DRIVER VOLUME NAME local 0cb24520936997d233409ea07681920fdb03d92967856e849474cf90446dc426 local 0ccc1140e4b86442167f65d7caf43d8a3bc04fff2bef461f112d8b7c8e4bd4c8 local 1d7f70d65f5d739f737c3bc0d1b0b2b5cf4f192477dcbbdb95bca344310bff84 local 2a1726279d1d382ab0a2bcb2079f60e65fc0fd0d40880074038e0c678b2a7f56 local 3d207dff87da7dc7d11b70f1e595cc5cce001392cb663ac4d664f5710b9879b8 local 4f8894b9f0206c743be26e6b644e3bf017c5b6e190ac7da31e7ffb7132a1ca2f local 7c210964fd48cd91c8e37543d562569ec523208b5ea421f8fb47dc73a6d724ee local 8ccc4c07bf45d05bc922d4f619780f60cac0149b4dd7de5be7720f72f47e6c10 local 71c98aa3d5fb266ef291ac4fc95b11fc83475b9bb0f70999e77095249ad18bf5 local 83f977471ac2f4ad6521ad50f0311ee36547701d00d9a869903f0ba667c2000d local 87eced0295c12870220fc746ef685530cb5b8e20c4afafbfd573ff773459cd9f local 95eb8a7b389b9a04bd90f4cee485bd015b7c3fd311c1750c7596a2b2fde1605d local 562da84ce678f8d8b9cc45665099f2562beb4a41c860b5951ef8b88a8f682e41 local 8974fb973f2be9c05c1ec6548ffaad0b1caa302972f7567c3fb3a97d59b9076b local 201278554f24a7af6284b9564c45656e6d2dc7b9daea24fe52707d7825cb5385 local b24c0bd3e25987537a92078d6f521f5f155e7379295d21e43c500cbabc8a02e0 local bb353f885d620d98dbb147f0ff51f38a87725669b1a14390fb825509878a7e0b local bc96d56b965f1e238afd47e483b93f1ec9ed59e8458e8e851ffc9710582a5475 local c329a5b999999c074bf767bc1f7b3647cf5d4d0624b7d45d63658cbb723e5d46 local cf03c8ea64823ac8db5c6df1093b2d9f5146838dd8dc2986bdc485e8b59d0d24 local d9500add842368a6d637090569e5c13cb9f068cbfeb14e02c597ae82f2807e47 local da3164486ea59aaa9fd14113faa9104411c61ad36a9487e3ce780e86a96dac1f local dae4bbdcbb634b817b47558df3908906fe7635ad57377389616189bd0f2d7b64 local dddeee12833ed02185e00732ddb8c12ef6a6b88c49e7df4e48f7a27b71182bf5 local dns_tsys-dns-config local dns_tyss-dns-config local e054c42f042095e22be91432ca87e524fc0ebbc447a800c263c389577e190629 local eda6668262ccd43f0e3c0b9e3c42711cc516f372b46ef174bca34d96d17740b8 local f53cb9833442fd9499260fa8073a04a15f5c96a5576aa96d781bc24441906942 local f142ec0c6150618365447908d5753ff5ff7defcbf27c210702a17ad205dc4aba local f350de2e220f4983bca2e7ca96374a597a075779224b036ccd76deb280ba8922 -- networks -- NETWORK ID NAME DRIVER SCOPE 0f56376f4515 bridge bridge local f91c61cdba28 dns_default bridge local b24303598fa1 host host local 25187260f675 msmtpd_default bridge local 748fea589ab8 netdisco_default bridge local bd40993bc47f none null local b52d11330b20 ntp_default bridge local 3d55385c5e7d pihole_default bridge local 50e2988e78eb root_default bridge local -- compose files in common locations -- ### /opt ### total 16 drwxr-xr-x 4 root root 4096 Dec 29 2025 . drwxr-xr-x 20 root root 4096 Jul 20 17:55 .. drwxr-xr-x 2 beszel beszel 4096 Apr 6 01:08 beszel-agent drwx--x--x 4 root root 4096 Jun 10 2025 containerd ======================================================================== SECTION: 6. PI-HOLE ======================================================================== (pihole command not on PATH) -- /etc/pihole listing -- main: line 54: printf: --: invalid option printf: usage: printf [-v var] format [arguments] (cannot list /etc/pihole) main: line 44: printf: --: invalid option printf: usage: printf [-v var] format [arguments] main: line 44: printf: --: invalid option printf: usage: printf [-v var] format [arguments] main: line 44: printf: --: invalid option printf: usage: printf [-v var] format [arguments] main: line 44: printf: --: invalid option printf: usage: printf [-v var] format [arguments] main: line 44: printf: --: invalid option printf: usage: printf [-v var] format [arguments] main: line 44: printf: --: invalid option printf: usage: printf [-v var] format [arguments] main: line 44: printf: --: invalid option printf: usage: printf [-v var] format [arguments] main: line 44: printf: --: invalid option printf: usage: printf [-v var] format [arguments] main: line 44: printf: --: invalid option printf: usage: printf [-v var] format [arguments] main: line 44: printf: --: invalid option printf: usage: printf [-v var] format [arguments] main: line 44: printf: --: invalid option printf: usage: printf [-v var] format [arguments] main: line 44: printf: --: invalid option printf: usage: printf [-v var] format [arguments] -- /etc/pihole/*.conf (all) -- -- /etc/dnsmasq.d listing -- main: line 44: printf: --: invalid option printf: usage: printf [-v var] format [arguments] main: line 54: printf: --: invalid option printf: usage: printf [-v var] format [arguments] (cannot list /etc/dnsmasq.d) -- /etc/dnsmasq.conf (if present) -- -- gravity.db schema + row counts (Pi-hole v5+) -- main: line 44: printf: --: invalid option printf: usage: printf [-v var] format [arguments] (no gravity.db found) -- lighttpd / pihole web admin -- main: line 44: printf: --: invalid option printf: usage: printf [-v var] format [arguments] alias.url += ("/javascript" => "/usr/share/javascript") -- pihole-FTL service -- ======================================================================== SECTION: 7. TECHNITIUM DNS ======================================================================== -- technitium systemd unit -- -- any unit containing technitium -- -- unit file path -- ### checking /etc/technitium ### ### checking /etc/technitium/dns ### ### checking /opt/technitium ### ### checking /opt/technitium/dns ### ### checking /var/lib/technitium ### ### checking /usr/local/technitium ### -- technitium config.xml / dnsServer.conf (search) -- ======================================================================== SECTION: 8. FIREWALL & MISC ======================================================================== -- nftables -- table ip raw { chain PREROUTING { type filter hook prerouting priority raw; policy accept; iifname != "br-b52d11330b20" ip daddr 172.23.0.2 counter packets 0 bytes 0 drop iifname != "br-3d55385c5e7d" ip daddr 172.24.0.2 counter packets 0 bytes 0 drop } chain OUTPUT { type filter hook output priority raw; policy accept; } } table ip filter { chain INPUT { type filter hook input priority filter; policy accept; counter packets 8461563 bytes 1841523123 jump ts-input } chain FORWARD { type filter hook forward priority filter; policy drop; counter packets 20387709 bytes 3821595842 jump DOCKER-USER counter packets 20387709 bytes 3821595842 jump DOCKER-FORWARD counter packets 1064 bytes 88643 jump ts-forward } chain OUTPUT { type filter hook output priority filter; policy accept; } chain DOCKER-FORWARD { counter packets 20387709 bytes 3821595842 jump DOCKER-CT counter packets 14776132 bytes 2075147539 jump DOCKER-INTERNAL counter packets 14776132 bytes 2075147539 jump DOCKER-BRIDGE iifname "br-748fea589ab8" counter packets 0 bytes 0 accept iifname "br-b52d11330b20" counter packets 0 bytes 0 accept iifname "br-f91c61cdba28" counter packets 0 bytes 0 accept iifname "br-25187260f675" counter packets 0 bytes 0 accept iifname "br-3d55385c5e7d" counter packets 10132822 bytes 1741327665 accept iifname "br-50e2988e78eb" counter packets 0 bytes 0 accept iifname "docker0" counter packets 0 bytes 0 accept } chain DOCKER-USER { } chain ts-input { iifname "lo" ip saddr 100.103.64.82 counter packets 0 bytes 0 accept iifname "tailscale0" counter packets 512217 bytes 46924098 accept udp dport 41641 counter packets 3360373 bytes 516737750 accept iifname != "tailscale0" ip saddr 100.115.92.0/23 counter packets 0 bytes 0 return iifname != "tailscale0" ip saddr 100.64.0.0/10 counter packets 0 bytes 0 drop } chain ts-forward { iifname "tailscale0" counter packets 28 bytes 2578 meta mark set mark and 0xff00ffff xor 0x40000 meta mark & 0x00ff0000 == 0x00040000 counter packets 28 bytes 2578 accept oifname "tailscale0" ip saddr 100.64.0.0/10 counter packets 0 bytes 0 drop oifname "tailscale0" counter packets 15 bytes 1554 accept } chain DOCKER { iifname != "br-3d55385c5e7d" oifname "br-3d55385c5e7d" ip daddr 172.24.0.2 tcp dport 443 counter packets 0 bytes 0 accept iifname != "br-3d55385c5e7d" oifname "br-3d55385c5e7d" ip daddr 172.24.0.2 tcp dport 80 counter packets 0 bytes 0 accept iifname != "br-3d55385c5e7d" oifname "br-3d55385c5e7d" ip daddr 172.24.0.2 udp dport 53 counter packets 32283 bytes 2368019 accept iifname != "br-3d55385c5e7d" oifname "br-3d55385c5e7d" ip daddr 172.24.0.2 tcp dport 53 counter packets 638 bytes 34248 accept iifname != "br-748fea589ab8" oifname "br-748fea589ab8" counter packets 0 bytes 0 drop iifname != "br-b52d11330b20" oifname "br-b52d11330b20" counter packets 0 bytes 0 drop iifname != "br-f91c61cdba28" oifname "br-f91c61cdba28" counter packets 0 bytes 0 drop iifname != "br-25187260f675" oifname "br-25187260f675" counter packets 0 bytes 0 drop iifname != "br-3d55385c5e7d" oifname "br-3d55385c5e7d" counter packets 0 bytes 0 drop iifname != "br-50e2988e78eb" oifname "br-50e2988e78eb" counter packets 0 bytes 0 drop iifname != "docker0" oifname "docker0" counter packets 0 bytes 0 drop } chain DOCKER-BRIDGE { oifname "br-748fea589ab8" counter packets 0 bytes 0 jump DOCKER oifname "br-b52d11330b20" counter packets 0 bytes 0 jump DOCKER oifname "br-f91c61cdba28" counter packets 0 bytes 0 jump DOCKER oifname "br-25187260f675" counter packets 0 bytes 0 jump DOCKER oifname "br-3d55385c5e7d" counter packets 4643310 bytes 333819874 jump DOCKER oifname "br-50e2988e78eb" counter packets 0 bytes 0 jump DOCKER -- iptables -- -P INPUT ACCEPT -P FORWARD DROP -P OUTPUT ACCEPT -N DOCKER -N DOCKER-BRIDGE -N DOCKER-CT -N DOCKER-FORWARD -N DOCKER-INTERNAL -N DOCKER-USER -N ts-forward -N ts-input -A INPUT -j ts-input -A FORWARD -j DOCKER-USER -A FORWARD -j DOCKER-FORWARD -A FORWARD -j ts-forward -A DOCKER -d 172.24.0.2/32 ! -i br-3d55385c5e7d -o br-3d55385c5e7d -p tcp -m tcp --dport 443 -j ACCEPT -A DOCKER -d 172.24.0.2/32 ! -i br-3d55385c5e7d -o br-3d55385c5e7d -p tcp -m tcp --dport 80 -j ACCEPT -A DOCKER -d 172.24.0.2/32 ! -i br-3d55385c5e7d -o br-3d55385c5e7d -p udp -m udp --dport 53 -j ACCEPT -A DOCKER -d 172.24.0.2/32 ! -i br-3d55385c5e7d -o br-3d55385c5e7d -p tcp -m tcp --dport 53 -j ACCEPT -A DOCKER ! -i br-748fea589ab8 -o br-748fea589ab8 -j DROP -A DOCKER ! -i br-b52d11330b20 -o br-b52d11330b20 -j DROP -A DOCKER ! -i br-f91c61cdba28 -o br-f91c61cdba28 -j DROP -A DOCKER ! -i br-25187260f675 -o br-25187260f675 -j DROP -A DOCKER ! -i br-3d55385c5e7d -o br-3d55385c5e7d -j DROP -A DOCKER ! -i br-50e2988e78eb -o br-50e2988e78eb -j DROP -A DOCKER ! -i docker0 -o docker0 -j DROP -A DOCKER-BRIDGE -o br-748fea589ab8 -j DOCKER -A DOCKER-BRIDGE -o br-b52d11330b20 -j DOCKER -A DOCKER-BRIDGE -o br-f91c61cdba28 -j DOCKER -A DOCKER-BRIDGE -o br-25187260f675 -j DOCKER -A DOCKER-BRIDGE -o br-3d55385c5e7d -j DOCKER -A DOCKER-BRIDGE -o br-50e2988e78eb -j DOCKER -A DOCKER-BRIDGE -o docker0 -j DOCKER -A DOCKER-CT -o br-748fea589ab8 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A DOCKER-CT -o br-b52d11330b20 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A DOCKER-CT -o br-f91c61cdba28 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A DOCKER-CT -o br-25187260f675 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A DOCKER-CT -o br-3d55385c5e7d -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A DOCKER-CT -o br-50e2988e78eb -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A DOCKER-CT -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -- ufw -- -- firewalld -- -- selinux/apparmor -- (SELinux not present) ======================================================================== SECTION: 9. CRON & TIMERS ======================================================================== -- root crontab -- (n/a) -- localuser crontab -- (none) -- /etc/cron.d -- -- pihole timer -- ##### AUDIT END 2026-07-28T02:41:34Z #####