== SEC-010 re-assert PRE-STATE capture 2026-07-23T03:59:29Z ==
--- voffice1 (region; hand-extended two-leg file) ---
#!/usr/sbin/nft -f
table inet sec010 {
  chain forward {
    type filter hook forward priority -10; policy accept;
    oifname "enp2s0" drop
    iifname "enp2s0" drop
    oifname "enp3s0" drop
    iifname "enp3s0" drop
  }
}
..RULESET..
table inet sec010 {
	chain forward {
		type filter hook forward priority filter - 10; policy accept;
		oifname "enp2s0" drop
		iifname "enp2s0" drop
		oifname "enp3s0" drop
		iifname "enp3s0" drop
	}
}
--- vvr1-dc0 rack (172.31.0.2) ---
#!/usr/sbin/nft -f
table inet sec010 {
  chain forward {
    type filter hook forward priority -10; policy accept;
    oifname "enp1s0" drop
    iifname "enp1s0" drop
  }
}
..RULESET..
table inet sec010 {
	chain forward {
		type filter hook forward priority filter - 10; policy accept;
		oifname "enp1s0" drop
		iifname "enp1s0" drop
	}
}
--- vvr1-dc1 rack (172.31.0.6) ---
#!/usr/sbin/nft -f
table inet sec010 {
  chain forward {
    type filter hook forward priority -10; policy accept;
    oifname "enp1s0" drop
    iifname "enp1s0" drop
  }
}
..RULESET..
table inet sec010 {
	chain forward {
		type filter hook forward priority filter - 10; policy accept;
		oifname "enp1s0" drop
		iifname "enp1s0" drop
	}
}

== POST-STATE 2026-07-23T04:01:45Z: preamble present, double-restart converged (2/2, 2/2, 4/4 drops) ==
--- voffice1 ---
#!/usr/sbin/nft -f
table inet sec010 {}
delete table inet sec010
4
--- vvr1-dc0 ---
#!/usr/sbin/nft -f
table inet sec010 {}
delete table inet sec010
2
--- vvr1-dc1 ---
#!/usr/sbin/nft -f
table inet sec010 {}
delete table inet sec010
2