Cześć
od kilku tygodni z powodzeniem korzystam z OpenWRT z buildem od Cezarego na GL-MT6000, dziś natomiast zorientowałem się, że z jakiegoś dziwnego powodu nie jestem w stanie dostać się do witryny santander.pl. Ping naturalnie działa, ale w przeglądarce już bez powodzenia.
Problem osobliwy, bo nie działa na żadnym urządzeniu w sieci lokalnej. Nie wiem do końca gdzie szukać źródła problemu, bo nie jest nim Adblock, a reszta konfiguracji mam wrażenie jest raczej domyślna, zaczerpnięta z wątków nt. Orange i PPPPoE.
Pozwolę sobie udostępnić konfigurację, może czegoś nie widzę. Jedyne z czym kombinowałem, to MTU, bo z jakiegoś powodu od samego początku sprzęt nie przekracza ~850 Mbps. Zdaniem instalatora, który zostawił mi ONT w parze z Funboxem 6 to normalne i po wymianie routera na swój prędkość miała dobić do tych ~950, ale ostatecznie prędkość nie wzrosła.
_______ ________ __
| |.-----.-----.-----.| | | |.----.| |_
| - || _ | -__| || | | || _|| _|
|_______|| __|_____|__|__||________||__| |____|
|__| W I R E L E S S F R E E D O M
-----------------------------------------------------------------------------
| |
| OpenWrt 23.05-SNAPSHOT, r24014-76a0c2932c |
| |
| Build time: 2024-07-20 09:42 CEST |
| Cezary Jackiewicz, https://eko.one.pl |
| |
-----------------------------------------------------------------------------
| Machine: GL.iNet GL-MT6000 |
| Uptime: 0d, 22:40:37 |
| Load: 0.04 0.08 0.08 |
| Flash: total: 7.2GB, free: 6.8GB, used: 6% |
| Memory: total: 989.1MB, free: 829.9MB, used: 16% |
| Leases: 21 |
| lan: static, 192.168.1.1 |
| wan: pppoe, 83.10.246.223 |
| radio0: lan, mode: ap, ssid: x, channel: 3, conn: 3 |
| radio1: lan, mode: ap, ssid: x, channel: 36, conn: 1 |
-----------------------------------------------------------------------------
network
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'fd3d:fbf7:eea1::/48'
config device
option name 'br-lan'
option type 'bridge'
list ports 'lan1'
list ports 'lan2'
list ports 'lan3'
list ports 'lan4'
list ports 'lan5'
config device
option name 'lan1'
option macaddr '94:83:c4:a3:c0:f0'
config device
option name 'lan2'
option macaddr '94:83:c4:a3:c0:f0'
config device
option name 'lan3'
option macaddr '94:83:c4:a3:c0:f0'
config device
option name 'lan4'
option macaddr '94:83:c4:a3:c0:f0'
config device
option name 'lan5'
option macaddr '94:83:c4:a3:c0:f0'
config interface 'lan'
option device 'br-lan'
option proto 'static'
option ipaddr '192.168.1.1'
option netmask '255.255.255.0'
option ip6assign '60'
config device
option name 'eth1'
option macaddr '94:83:c4:a3:c0:ee'
config interface 'wan'
option device 'eth1.35'
option proto 'pppoe'
option username 'XXX'
option password 'XXX'
option ipv6 'auto'
config device
option type '8021q'
option ifname 'eth1'
option vid '35'
option name 'eth1.35'
option mtu '1492'
config device
option name 'pppoe-wan'
option mtu '1492'
firewall
config defaults
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option synflood_protect '1'
option flow_offloading '1'
option flow_offloading_hw '1'
config zone
option name 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
list network 'lan'
config zone
option name 'wan'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
option mtu_fix '1'
list network 'wan'
config forwarding
option src 'lan'
option dest 'wan'
config rule
option name 'Allow-DHCP-Renew'
option src 'wan'
option proto 'udp'
option dest_port '68'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'Allow-Ping'
option src 'wan'
option proto 'icmp'
option icmp_type 'echo-request'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-IGMP'
option src 'wan'
option proto 'igmp'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-DHCPv6'
option src 'wan'
option proto 'udp'
option dest_port '546'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-MLD'
option src 'wan'
option proto 'icmp'
option src_ip 'fe80::/10'
list icmp_type '130/0'
list icmp_type '131/0'
list icmp_type '132/0'
list icmp_type '143/0'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Input'
option src 'wan'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
list icmp_type 'router-solicitation'
list icmp_type 'neighbour-solicitation'
list icmp_type 'router-advertisement'
list icmp_type 'neighbour-advertisement'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Forward'
option src 'wan'
option dest '*'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-IPSec-ESP'
option src 'wan'
option dest 'lan'
option proto 'esp'
option target 'ACCEPT'
config rule
option name 'Allow-ISAKMP'
option src 'wan'
option dest 'lan'
option dest_port '500'
option proto 'udp'
option target 'ACCEPT'
config redirect
option dest 'lan'
option target 'DNAT'
option name 'plex'
list proto 'tcp'
option src 'wan'
option src_dport '32400'
option dest_ip '192.168.1.233'
option dest_port '32400'
logi
Tue Aug 13 20:45:44 2024 daemon.err hostapd: nl80211: kernel reports: key addition failed
Tue Aug 13 20:45:44 2024 daemon.info hostapd: phy1-ap0: STA 1a:e9:a6:cc:49:a0 IEEE 802.11: associated (aid 1)
Tue Aug 13 20:45:44 2024 daemon.notice hostapd: phy1-ap0: AP-STA-CONNECTED 1a:e9:a6:cc:49:a0 auth_alg=ft
Tue Aug 13 20:45:49 2024 daemon.info dnsmasq-dhcp[1]: DHCPREQUEST(br-lan) 192.168.1.160 1a:e9:a6:cc:49:a0
Tue Aug 13 20:45:49 2024 daemon.info dnsmasq-dhcp[1]: DHCPACK(br-lan) 192.168.1.160 1a:e9:a6:cc:49:a0 Pixel-7
Tue Aug 13 20:45:49 2024 daemon.warn odhcpd[2348]: No default route present, overriding ra_lifetime!
Tue Aug 13 20:49:01 2024 daemon.warn odhcpd[2348]: No default route present, overriding ra_lifetime!
Tue Aug 13 20:56:39 2024 daemon.warn odhcpd[2348]: No default route present, overriding ra_lifetime!
Tue Aug 13 20:56:42 2024 daemon.info dnsmasq-dhcp[1]: DHCPREQUEST(br-lan) 192.168.1.220 bc:24:11:b9:b9:31
Tue Aug 13 20:56:42 2024 daemon.info dnsmasq-dhcp[1]: DHCPACK(br-lan) 192.168.1.220 bc:24:11:b9:b9:31 prowlarr
Tue Aug 13 20:56:57 2024 daemon.info dnsmasq-dhcp[1]: DHCPREQUEST(br-lan) 192.168.1.192 50:2d:bb:59:b7:14
Tue Aug 13 20:56:57 2024 daemon.info dnsmasq-dhcp[1]: DHCPACK(br-lan) 192.168.1.192 50:2d:bb:59:b7:14 klima-strych
Tue Aug 13 20:59:57 2024 daemon.info dnsmasq-dhcp[1]: DHCPREQUEST(br-lan) 192.168.1.160 1a:e9:a6:cc:49:a0
Tue Aug 13 20:59:57 2024 daemon.info dnsmasq-dhcp[1]: DHCPACK(br-lan) 192.168.1.160 1a:e9:a6:cc:49:a0 Pixel-7
Tue Aug 13 21:00:31 2024 daemon.info dnsmasq-dhcp[1]: DHCPREQUEST(br-lan) 192.168.1.160 1a:e9:a6:cc:49:a0
Tue Aug 13 21:00:31 2024 daemon.info dnsmasq-dhcp[1]: DHCPACK(br-lan) 192.168.1.160 1a:e9:a6:cc:49:a0 Pixel-7
Tue Aug 13 21:00:32 2024 daemon.warn odhcpd[2348]: No default route present, overriding ra_lifetime!
Tue Aug 13 21:02:24 2024 daemon.notice hostapd: phy1-ap0: AP-STA-DISCONNECTED 1a:e9:a6:cc:49:a0
Tue Aug 13 21:02:24 2024 daemon.err hostapd: nl80211: kernel reports: key addition failed