#!/bin/bash
set -euo pipefail
echo ===UFW===
ufw status verbose || true
echo ===IPT-USER===
iptables -L ufw-user-input -n -v 2>/dev/null | head -30 || true
echo ===NFT51820===
nft list ruleset 2>/dev/null | grep -n -C3 51820 || true
echo ===TCPDUMP===
timeout 8 tcpdump -n -i any udp port 51820 -c 8 2>&1 || true
echo ===WG2===
wg show wg0 dump