1 Odpowiedź przez sq3fyk

(9 odpowiedzi, napisanych Oprogramowanie / Software)

Swoją drogą łączę się do kamery kilka sekund obrazu i ciach po połączeniu ciekawe co nie wyrabia sad

Idź do forum: Oprogramowanie / Software

2 Odpowiedź przez sq3fyk

(9 odpowiedzi, napisanych Oprogramowanie / Software)

Tak teraz to poprawiłem
uci set network.lan.ipaddr=192.168.2.1
uci commit network
reboot

Dobra . działa jak powinno późna pora i zmęczenie robią swoje dziekuję za pomoc :0

Idź do forum: Oprogramowanie / Software

3 Odpowiedź przez sq3fyk

(9 odpowiedzi, napisanych Oprogramowanie / Software)

Posta wyżej edytowałem i dodałem show-ny wink

Idź do forum: Oprogramowanie / Software

4 Odpowiedź przez sq3fyk

(9 odpowiedzi, napisanych Oprogramowanie / Software)

Czyli nadal coś robię źle.... ;(

root@OpenWrt:~# uci show firewall
firewall.@defaults[0]=defaults
firewall.@defaults[0].syn_flood='1'
firewall.@defaults[0].input='ACCEPT'
firewall.@defaults[0].output='ACCEPT'
firewall.@defaults[0].forward='REJECT'
firewall.@zone[0]=zone
firewall.@zone[0].name='lan'
firewall.@zone[0].input='ACCEPT'
firewall.@zone[0].output='ACCEPT'
firewall.@zone[0].forward='ACCEPT'
firewall.@zone[0].network='lan wwan'
firewall.@zone[1]=zone
firewall.@zone[1].name='wan'
firewall.@zone[1].input='REJECT'
firewall.@zone[1].output='ACCEPT'
firewall.@zone[1].forward='REJECT'
firewall.@zone[1].masq='1'
firewall.@zone[1].mtu_fix='1'
firewall.@zone[1].network='wan wan6'
firewall.@forwarding[0]=forwarding
firewall.@forwarding[0].src='lan'
firewall.@forwarding[0].dest='wan'
firewall.@rule[0]=rule
firewall.@rule[0].name='Allow-DHCP-Renew'
firewall.@rule[0].src='wan'
firewall.@rule[0].proto='udp'
firewall.@rule[0].dest_port='68'
firewall.@rule[0].target='ACCEPT'
firewall.@rule[0].family='ipv4'
firewall.@rule[1]=rule
firewall.@rule[1].name='Allow-Ping'
firewall.@rule[1].src='wan'
firewall.@rule[1].proto='icmp'
firewall.@rule[1].icmp_type='echo-request'
firewall.@rule[1].family='ipv4'
firewall.@rule[1].target='ACCEPT'
firewall.@rule[2]=rule
firewall.@rule[2].name='Allow-IGMP'
firewall.@rule[2].src='wan'
firewall.@rule[2].proto='igmp'
firewall.@rule[2].family='ipv4'
firewall.@rule[2].target='ACCEPT'
firewall.@rule[3]=rule
firewall.@rule[3].name='Allow-DHCPv6'
firewall.@rule[3].src='wan'
firewall.@rule[3].proto='udp'
firewall.@rule[3].src_ip='fc00::/6'
firewall.@rule[3].dest_ip='fc00::/6'
firewall.@rule[3].dest_port='546'
firewall.@rule[3].family='ipv6'
firewall.@rule[3].target='ACCEPT'
firewall.@rule[4]=rule
firewall.@rule[4].name='Allow-MLD'
firewall.@rule[4].src='wan'
firewall.@rule[4].proto='icmp'
firewall.@rule[4].src_ip='fe80::/10'
firewall.@rule[4].icmp_type='130/0' '131/0' '132/0' '143/0'
firewall.@rule[4].family='ipv6'
firewall.@rule[4].target='ACCEPT'
firewall.@rule[5]=rule
firewall.@rule[5].name='Allow-ICMPv6-Input'
firewall.@rule[5].src='wan'
firewall.@rule[5].proto='icmp'
firewall.@rule[5].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type' 'router-solicitation' 'neighbour-solicitation' 'router-advertisement' 'neighbour-advertisement'
firewall.@rule[5].limit='1000/sec'
firewall.@rule[5].family='ipv6'
firewall.@rule[5].target='ACCEPT'
firewall.@rule[6]=rule
firewall.@rule[6].name='Allow-ICMPv6-Forward'
firewall.@rule[6].src='wan'
firewall.@rule[6].dest='*'
firewall.@rule[6].proto='icmp'
firewall.@rule[6].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type'
firewall.@rule[6].limit='1000/sec'
firewall.@rule[6].family='ipv6'
firewall.@rule[6].target='ACCEPT'
firewall.@include[0]=include
firewall.@include[0].path='/etc/firewall.user'
firewall.@rule[7]=rule
firewall.@rule[7].src='wan'
firewall.@rule[7].dest='lan'
firewall.@rule[7].proto='esp'
firewall.@rule[7].target='ACCEPT'
firewall.@rule[8]=rule
firewall.@rule[8].src='wan'
firewall.@rule[8].dest='lan'
firewall.@rule[8].dest_port='500'
firewall.@rule[8].proto='udp'
firewall.@rule[8].target='ACCEPT'
root@OpenWrt:~# uci show wireless
wireless.radio0=wifi-device
wireless.radio0.type='mac80211'
wireless.radio0.hwmode='11g'
wireless.radio0.path='platform/qca956x_wmac'
wireless.radio0.htmode='HT20'
wireless.radio0.disabled='0'
wireless.radio0.channel='3'
wireless.radio0.country='US'
wireless.@wifi-iface[0]=wifi-iface
wireless.@wifi-iface[0].network='wwan'
wireless.@wifi-iface[0].ssid='oKoMoSkWy.'
wireless.@wifi-iface[0].encryption='psk2'
wireless.@wifi-iface[0].device='radio0'
wireless.@wifi-iface[0].mode='sta'
wireless.@wifi-iface[0].bssid='EC:08:6B:EC:55:FE'
wireless.@wifi-iface[0].key='xxxxxxxx'
root@OpenWrt:~# uci show network
network.loopback=interface
network.loopback.ifname='lo'
network.loopback.proto='static'
network.loopback.ipaddr='127.0.0.1'
network.loopback.netmask='255.0.0.0'
network.globals=globals
network.globals.ula_prefix='fdc5:fd9b:91ea::/48'
network.lan=interface
network.lan.type='bridge'
network.lan.ifname='eth0.1'
network.lan.proto='static'
network.lan.netmask='255.255.255.0'
network.lan.ip6assign='60'
network.lan.gateway='192.168.1.1'
network.lan.dns='192.168.1.1'
network.lan.ipaddr='192.168.1.2'
network.wan=interface
network.wan.ifname='eth0.2'
network.wan.proto='dhcp'
network.wan6=interface
network.wan6.ifname='eth0.2'
network.wan6.proto='dhcpv6'
network.@switch[0]=switch
network.@switch[0].name='switch0'
network.@switch[0].reset='1'
network.@switch[0].enable_vlan='1'
network.@switch_vlan[0]=switch_vlan
network.@switch_vlan[0].device='switch0'
network.@switch_vlan[0].vlan='1'
network.@switch_vlan[0].ports='1 2 3 4 0t'
network.@switch_vlan[1]=switch_vlan
network.@switch_vlan[1].device='switch0'
network.@switch_vlan[1].vlan='2'
network.@switch_vlan[1].ports='5 0t'
network.stabridge=interface
network.stabridge.proto='relay'
network.stabridge.network='lan wwan'
network.stabridge.ipaddr='192.168.1.35'
network.wwan=interface
network.wwan.proto='dhcp'
root@OpenWrt:~# uci show dhcp
dhcp.@dnsmasq[0]=dnsmasq
dhcp.@dnsmasq[0].domainneeded='1'
dhcp.@dnsmasq[0].boguspriv='1'
dhcp.@dnsmasq[0].filterwin2k='0'
dhcp.@dnsmasq[0].localise_queries='1'
dhcp.@dnsmasq[0].rebind_protection='1'
dhcp.@dnsmasq[0].rebind_localhost='1'
dhcp.@dnsmasq[0].local='/lan/'
dhcp.@dnsmasq[0].domain='lan'
dhcp.@dnsmasq[0].expandhosts='1'
dhcp.@dnsmasq[0].nonegcache='0'
dhcp.@dnsmasq[0].authoritative='1'
dhcp.@dnsmasq[0].readethers='1'
dhcp.@dnsmasq[0].leasefile='/tmp/dhcp.leases'
dhcp.@dnsmasq[0].resolvfile='/tmp/resolv.conf.auto'
dhcp.@dnsmasq[0].localservice='1'
dhcp.lan=dhcp
dhcp.lan.interface='lan'
dhcp.lan.start='100'
dhcp.lan.limit='150'
dhcp.lan.leasetime='12h'
dhcp.lan.dhcpv6='server'
dhcp.lan.ra='server'
dhcp.lan.ra_management='1'
dhcp.lan.ignore='1'
dhcp.wan=dhcp
dhcp.wan.interface='wan'
dhcp.wan.ignore='1'
dhcp.odhcpd=odhcpd
dhcp.odhcpd.maindhcp='0'
dhcp.odhcpd.leasefile='/tmp/hosts/odhcpd'
dhcp.odhcpd.leasetrigger='/usr/sbin/odhcpd-update'
root@OpenWrt:~# uci show firewall
firewall.@defaults[0]=defaults
firewall.@defaults[0].syn_flood='1'
firewall.@defaults[0].input='ACCEPT'
firewall.@defaults[0].output='ACCEPT'
firewall.@defaults[0].forward='REJECT'
firewall.@zone[0]=zone
firewall.@zone[0].name='lan'
firewall.@zone[0].input='ACCEPT'
firewall.@zone[0].output='ACCEPT'
firewall.@zone[0].forward='ACCEPT'
firewall.@zone[0].network='lan wwan'
firewall.@zone[1]=zone
firewall.@zone[1].name='wan'
firewall.@zone[1].input='REJECT'
firewall.@zone[1].output='ACCEPT'
firewall.@zone[1].forward='REJECT'
firewall.@zone[1].masq='1'
firewall.@zone[1].mtu_fix='1'
firewall.@zone[1].network='wan wan6'
firewall.@forwarding[0]=forwarding
firewall.@forwarding[0].src='lan'
firewall.@forwarding[0].dest='wan'
firewall.@rule[0]=rule
firewall.@rule[0].name='Allow-DHCP-Renew'
firewall.@rule[0].src='wan'
firewall.@rule[0].proto='udp'
firewall.@rule[0].dest_port='68'
firewall.@rule[0].target='ACCEPT'
firewall.@rule[0].family='ipv4'
firewall.@rule[1]=rule
firewall.@rule[1].name='Allow-Ping'
firewall.@rule[1].src='wan'
firewall.@rule[1].proto='icmp'
firewall.@rule[1].icmp_type='echo-request'
firewall.@rule[1].family='ipv4'
firewall.@rule[1].target='ACCEPT'
firewall.@rule[2]=rule
firewall.@rule[2].name='Allow-IGMP'
firewall.@rule[2].src='wan'
firewall.@rule[2].proto='igmp'
firewall.@rule[2].family='ipv4'
firewall.@rule[2].target='ACCEPT'
firewall.@rule[3]=rule
firewall.@rule[3].name='Allow-DHCPv6'
firewall.@rule[3].src='wan'
firewall.@rule[3].proto='udp'
firewall.@rule[3].src_ip='fc00::/6'
firewall.@rule[3].dest_ip='fc00::/6'
firewall.@rule[3].dest_port='546'
firewall.@rule[3].family='ipv6'
firewall.@rule[3].target='ACCEPT'
firewall.@rule[4]=rule
firewall.@rule[4].name='Allow-MLD'
firewall.@rule[4].src='wan'
firewall.@rule[4].proto='icmp'
firewall.@rule[4].src_ip='fe80::/10'
firewall.@rule[4].icmp_type='130/0' '131/0' '132/0' '143/0'
firewall.@rule[4].family='ipv6'
firewall.@rule[4].target='ACCEPT'
firewall.@rule[5]=rule
firewall.@rule[5].name='Allow-ICMPv6-Input'
firewall.@rule[5].src='wan'
firewall.@rule[5].proto='icmp'
firewall.@rule[5].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type' 'router-solicitation' 'neighbour-solicitation' 'router-advertisement' 'neighbour-advertisement'
firewall.@rule[5].limit='1000/sec'
firewall.@rule[5].family='ipv6'
firewall.@rule[5].target='ACCEPT'
firewall.@rule[6]=rule
firewall.@rule[6].name='Allow-ICMPv6-Forward'
firewall.@rule[6].src='wan'
firewall.@rule[6].dest='*'
firewall.@rule[6].proto='icmp'
firewall.@rule[6].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type'
firewall.@rule[6].limit='1000/sec'
firewall.@rule[6].family='ipv6'
firewall.@rule[6].target='ACCEPT'
firewall.@include[0]=include
firewall.@include[0].path='/etc/firewall.user'
firewall.@rule[7]=rule
firewall.@rule[7].src='wan'
firewall.@rule[7].dest='lan'
firewall.@rule[7].proto='esp'
firewall.@rule[7].target='ACCEPT'
firewall.@rule[8]=rule
firewall.@rule[8].src='wan'
firewall.@rule[8].dest='lan'
firewall.@rule[8].dest_port='500'
firewall.@rule[8].proto='udp'
firewall.@rule[8].target='ACCEPT'

Idź do forum: Oprogramowanie / Software

5 Odpowiedź przez sq3fyk

(9 odpowiedzi, napisanych Oprogramowanie / Software)

Tylko z opisu wynika ze ruter w trybie sta powinien dzialać w innym subnecie ? inaczej relayd nie będzie działać prawidłowo...?

Idź do forum: Oprogramowanie / Software

6 Temat przez sq3fyk

(9 odpowiedzi, napisanych Oprogramowanie / Software)

Dzień dobry

Próbuję zmusić drugi ruter do pracy w trybie STA client (192.168.1.2) tak aby 4 porty lan działały jakbym używał je na głownym ruterze , udało mi się połączyć z wi-fi , ale na żadnym porcie Lan nie mam dostępu do sieci lokalnej na ruterze , który pracuje w trybie AP (192.168.1.1)
Dziękuję za wszelkie sugestie

Idź do forum: Oprogramowanie / Software

7 Odpowiedź przez sq3fyk

(11 odpowiedzi, napisanych Oprogramowanie / Software)

Problem rozwiązany miałem zaznaczoną opcję kompresji comp-lzo po stronie klienta a na serwerze tego nie było dopisałem keepAlive i teraz testuję troszkę.

Idź do forum: Oprogramowanie / Software

8 Odpowiedź przez sq3fyk

(11 odpowiedzi, napisanych Oprogramowanie / Software)

Tak jest ustawione forwardowanie.

firewall.@forwarding[4]=forwarding
firewall.@forwarding[4].src='vpn'
firewall.@forwarding[4].dest='wan'

Nie mam już pomysłów pod wieczór będę walczyć dalej i szukać problemu.....

Idź do forum: Oprogramowanie / Software

9 Odpowiedź przez sq3fyk

(11 odpowiedzi, napisanych Oprogramowanie / Software)

wykonałem kilka czynności z FAQ Opendns:http://openvpn.net/faq.html#dhcpclientserv

Pomogło łączy się bez error-ów ale , pingtimeout inactivity rozłącza co chwilkę sesje , po połączeniu się via tunnel nie ma internetu .

Thu Apr 20 21:05:20 2017 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {C9AF5B9D-BA83-4644-A26D-32C86B5340FF} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Thu Apr 20 21:05:20 2017 Successful ARP Flush on interface [18] {C9AF5B9D-BA83-4644-A26D-32C86B5340FF}
Thu Apr 20 21:05:25 2017 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Thu Apr 20 21:05:25 2017 C:\WINDOWS\system32\route.exe ADD 109.173.133.126 MASK 255.255.255.255 192.168.1.1
Thu Apr 20 21:05:25 2017 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=50 and dwForwardType=4
Thu Apr 20 21:05:25 2017 Route addition via IPAPI succeeded [adaptive]
Thu Apr 20 21:05:25 2017 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Thu Apr 20 21:05:25 2017 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=55 and dwForwardType=4
Thu Apr 20 21:05:25 2017 Route addition via IPAPI succeeded [adaptive]
Thu Apr 20 21:05:25 2017 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Thu Apr 20 21:05:25 2017 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=55 and dwForwardType=4
Thu Apr 20 21:05:25 2017 Route addition via IPAPI succeeded [adaptive]
Thu Apr 20 21:05:25 2017 MANAGEMENT: >STATE:1492715125,ADD_ROUTES,,,
Thu Apr 20 21:05:25 2017 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Thu Apr 20 21:05:25 2017 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=55 and dwForwardType=4
Thu Apr 20 21:05:25 2017 Route addition via IPAPI succeeded [adaptive]
Thu Apr 20 21:05:25 2017 Initialization Sequence Completed
Thu Apr 20 21:05:25 2017 MANAGEMENT: >STATE:1492715125,CONNECTED,SUCCESS,10.8.0.6,109.173.133.126

Idź do forum: Oprogramowanie / Software

10 Odpowiedź przez sq3fyk

(11 odpowiedzi, napisanych Oprogramowanie / Software)

W między czasie wpadłem na to ale nadal jest coś nie tak 

hu Apr 20 20:19:02 2017 MANAGEMENT: >STATE:1492712342,ADD_ROUTES,,,
Thu Apr 20 20:19:02 2017 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Thu Apr 20 20:19:02 2017 Warning: route gateway is not reachable on any active network adapters: 10.8.0.5
Thu Apr 20 20:19:02 2017 Route addition via IPAPI failed [adaptive]
Thu Apr 20 20:19:02 2017 Route addition fallback to route.exe
Thu Apr 20 20:19:02 2017 SYSTEM ROUTING TABLE
Thu Apr 20 20:19:02 2017 0.0.0.0 0.0.0.0 192.168.1.1 p=0 i=26 t=4 pr=3 a=611 h=0 m=50/0/0/0/0
Thu Apr 20 20:19:02 2017 0.0.0.0 128.0.0.0 10.8.0.5 p=0 i=26 t=4 pr=3 a=0 h=0 m=51/0/0/0/0
Thu Apr 20 20:19:02 2017 10.8.0.1 255.255.255.255 10.8.0.5 p=0 i=26 t=4 pr=3 a=0 h=0 m=51/0/0/0/0
Thu Apr 20 20:19:02 2017 109.173.133.126 255.255.255.255 192.168.1.1 p=0 i=26 t=4 pr=3 a=0 h=0 m=50/0/0/0/0
Thu Apr 20 20:19:02 2017 127.0.0.0 255.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=2 a=1079 h=0 m=331/0/0/0/0
Thu Apr 20 20:19:02 2017 127.0.0.1 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=1079 h=0 m=331/0/0/0/0
Thu Apr 20 20:19:02 2017 127.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=1079 h=0 m=331/0/0/0/0
Thu Apr 20 20:19:02 2017 128.0.0.0 128.0.0.0 10.8.0.5 p=0 i=26 t=4 pr=3 a=0 h=0 m=51/0/0/0/0
Thu Apr 20 20:19:02 2017 192.168.1.0 255.255.255.0 192.168.1.5 p=0 i=26 t=3 pr=2 a=611 h=0 m=306/0/0/0/0
Thu Apr 20 20:19:02 2017 192.168.1.5 255.255.255.255 192.168.1.5 p=0 i=26 t=3 pr=2 a=611 h=0 m=306/0/0/0/0
Thu Apr 20 20:19:02 2017 192.168.1.255 255.255.255.255 192.168.1.5 p=0 i=26 t=3 pr=2 a=611 h=0 m=306/0/0/0/0
Thu Apr 20 20:19:02 2017 192.168.56.0 255.255.255.0 192.168.56.1 p=0 i=12 t=3 pr=2 a=1066 h=0 m=281/0/0/0/0
Thu Apr 20 20:19:02 2017 192.168.56.1 255.255.255.255 192.168.56.1 p=0 i=12 t=3 pr=2 a=1066 h=0 m=281/0/0/0/0
Thu Apr 20 20:19:02 2017 192.168.56.255 255.255.255.255 192.168.56.1 p=0 i=12 t=3 pr=2 a=1066 h=0 m=281/0/0/0/0
Thu Apr 20 20:19:02 2017 224.0.0.0 240.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=2 a=1079 h=0 m=331/0/0/0/0
Thu Apr 20 20:19:02 2017 224.0.0.0 240.0.0.0 192.168.56.1 p=0 i=12 t=3 pr=2 a=1069 h=0 m=281/0/0/0/0
Thu Apr 20 20:19:02 2017 224.0.0.0 240.0.0.0 192.168.1.5 p=0 i=26 t=3 pr=2 a=1056 h=0 m=306/0/0/0/0
Thu Apr 20 20:19:02 2017 255.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=1079 h=0 m=331/0/0/0/0
Thu Apr 20 20:19:02 2017 255.255.255.255 255.255.255.255 192.168.56.1 p=0 i=12 t=3 pr=2 a=1069 h=0 m=281/0/0/0/0
Thu Apr 20 20:19:02 2017 255.255.255.255 255.255.255.255 192.168.1.5 p=0 i=26 t=3 pr=2 a=1056 h=0 m=306/0/0/0/0
Thu Apr 20 20:19:02 2017 SYSTEM ADAPTER LIST
Thu Apr 20 20:19:02 2017 Realtek PCIe GBE Family Controller
Thu Apr 20 20:19:02 2017   Index = 11
Thu Apr 20 20:19:02 2017   GUID = {5B43E898-F5B2-4A78-94E1-ED51A52E145C}
Thu Apr 20 20:19:02 2017   IP = 0.0.0.0/0.0.0.0 
Thu Apr 20 20:19:02 2017   MAC = bc:ee:7b:1a:06:42
Thu Apr 20 20:19:02 2017   GATEWAY = 0.0.0.0/255.255.255.255 
Thu Apr 20 20:19:02 2017   DHCP SERV =  
Thu Apr 20 20:19:02 2017   DHCP LEASE OBTAINED = Thu Apr 20 20:19:02 2017
Thu Apr 20 20:19:02 2017   DHCP LEASE EXPIRES  = Thu Apr 20 20:19:02 2017
Thu Apr 20 20:19:02 2017   DNS SERV =  
Thu Apr 20 20:19:02 2017 Bluetooth Device (Personal Area Network)
Thu Apr 20 20:19:02 2017   Index = 13
Thu Apr 20 20:19:02 2017   GUID = {6BFE6C8E-64DE-4895-8205-C552A4C04AC7}
Thu Apr 20 20:19:02 2017   IP = 0.0.0.0/0.0.0.0 
Thu Apr 20 20:19:02 2017   MAC = 48:5a:b6:03:20:9e
Thu Apr 20 20:19:02 2017   GATEWAY = 0.0.0.0/255.255.255.255 
Thu Apr 20 20:19:02 2017   DHCP SERV =  
Thu Apr 20 20:19:02 2017   DHCP LEASE OBTAINED = Thu Apr 20 20:19:02 2017
Thu Apr 20 20:19:02 2017   DHCP LEASE EXPIRES  = Thu Apr 20 20:19:02 2017
Thu Apr 20 20:19:02 2017   DNS SERV =  
Thu Apr 20 20:19:02 2017 VirtualBox Host-Only Ethernet Adapter
Thu Apr 20 20:19:02 2017   Index = 12
Thu Apr 20 20:19:02 2017   GUID = {661744B3-1E3A-48D3-A526-EE5CABF9510C}
Thu Apr 20 20:19:02 2017   IP = 192.168.56.1/255.255.255.0 
Thu Apr 20 20:19:02 2017   MAC = 0a:00:27:00:00:0c
Thu Apr 20 20:19:02 2017   GATEWAY = 0.0.0.0/255.255.255.255 
Thu Apr 20 20:19:02 2017   DNS SERV =  
Thu Apr 20 20:19:02 2017 TAP-Windows Adapter V9
Thu Apr 20 20:19:02 2017   Index = 20
Thu Apr 20 20:19:02 2017   GUID = {C9AF5B9D-BA83-4644-A26D-32C86B5340FF}
Thu Apr 20 20:19:02 2017   IP = 0.0.0.0/0.0.0.0 
Thu Apr 20 20:19:02 2017   MAC = 00:ff:c9:af:5b:9d
Thu Apr 20 20:19:02 2017   GATEWAY = 0.0.0.0/255.255.255.255 
Thu Apr 20 20:19:02 2017   DHCP SERV =  
Thu Apr 20 20:19:02 2017   DHCP LEASE OBTAINED = Thu Apr 20 20:19:02 2017
Thu Apr 20 20:19:02 2017   DHCP LEASE EXPIRES  = Thu Apr 20 20:19:02 2017
Thu Apr 20 20:19:02 2017   DNS SERV =  
Thu Apr 20 20:19:02 2017 802.11n Wireless LAN Card
Thu Apr 20 20:19:02 2017   Index = 26
Thu Apr 20 20:19:02 2017   GUID = {F13C55EF-D7E2-400C-8C9B-E2FBE2C37267}
Thu Apr 20 20:19:02 2017   IP = 192.168.1.5/255.255.255.0 
Thu Apr 20 20:19:02 2017   MAC = 48:5a:b6:03:20:9d
Thu Apr 20 20:19:02 2017   GATEWAY = 192.168.1.1/255.255.255.255 
Thu Apr 20 20:19:02 2017   DHCP SERV = 192.168.1.1/255.255.255.255 
Thu Apr 20 20:19:02 2017   DHCP LEASE OBTAINED = Thu Apr 20 20:08:51 2017
Thu Apr 20 20:19:02 2017   DHCP LEASE EXPIRES  = Fri Apr 21 20:08:51 2017
Thu Apr 20 20:19:02 2017   DNS SERV = 192.168.1.1/255.255.255.255 
Thu Apr 20 20:19:02 2017 Microsoft Wi-Fi Direct Virtual Adapter
Thu Apr 20 20:19:02 2017   Index = 15
Thu Apr 20 20:19:02 2017   GUID = {86E54F5B-3045-4902-8831-042C8DDAB8C4}
Thu Apr 20 20:19:02 2017   IP = 0.0.0.0/0.0.0.0 
Thu Apr 20 20:19:02 2017   MAC = 48:5a:b6:03:20:9f
Thu Apr 20 20:19:02 2017   GATEWAY = 0.0.0.0/255.255.255.255 
Thu Apr 20 20:19:02 2017   DHCP SERV =  
Thu Apr 20 20:19:02 2017   DHCP LEASE OBTAINED = Thu Apr 20 20:19:02 2017
Thu Apr 20 20:19:02 2017   DHCP LEASE EXPIRES  = Thu Apr 20 20:19:02 2017
Thu Apr 20 20:19:02 2017   DNS SERV =  
Thu Apr 20 20:19:02 2017 Initialization Sequence Completed With Errors ( see http://openvpn.net/faq.html#dhcpclientserv )
Thu Apr 20 20:19:02 2017 MANAGEMENT: >STATE:1492712342,CONNECTED,ERROR,10.8.0.6,109.173.133.126

Idź do forum: Oprogramowanie / Software

11 Odpowiedź przez sq3fyk

(11 odpowiedzi, napisanych Oprogramowanie / Software)

po dopisaniu zaczęły się takie rzeczy wyprawiać sad

Thu Apr 20 20:09:08 2017 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {C9AF5B9D-BA83-4644-A26D-32C86B5340FF} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Thu Apr 20 20:09:08 2017 NOTE: FlushIpNetTable failed on interface [20] {C9AF5B9D-BA83-4644-A26D-32C86B5340FF} (status=5) : Odmowa dostêpu.  
Thu Apr 20 20:09:13 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:13 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:18 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:18 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:19 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:19 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:20 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:20 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:22 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:22 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:23 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:23 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:24 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:24 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:25 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:25 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:26 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:26 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:27 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:27 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:28 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:28 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:29 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:29 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:30 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:30 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:31 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:31 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:32 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:32 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:33 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:33 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:34 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:34 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:36 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:36 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:37 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:37 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:38 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:38 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:39 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:39 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:40 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:40 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:41 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:41 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:42 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:42 2017 Route: Waiting for TUN/TAP interface to come up...
Thu Apr 20 20:09:43 2017 TEST ROUTES: 0/0 succeeded len=1 ret=0 a=0 u/d=down
Thu Apr 20 20:09:43 2017 C:\WINDOWS\system32\route.exe ADD 109.173.133.126 MASK 255.255.255.255 192.168.1.1
Thu Apr 20 20:09:43 2017 ROUTE: route addition failed using CreateIpForwardEntry: Odmowa dostêpu.   [status=5 if_index=26]
Thu Apr 20 20:09:43 2017 Route addition via IPAPI failed [adaptive]
Thu Apr 20 20:09:43 2017 Route addition fallback to route.exe
Thu Apr 20 20:09:43 2017 ERROR: Windows route add command failed [adaptive]: returned error code 1
Thu Apr 20 20:09:43 2017 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Thu Apr 20 20:09:43 2017 Warning: route gateway is not reachable on any active network adapters: 10.8.0.5
Thu Apr 20 20:09:43 2017 Route addition via IPAPI failed [adaptive]
Thu Apr 20 20:09:43 2017 Route addition fallback to route.exe
Thu Apr 20 20:09:43 2017 ERROR: Windows route add command failed [adaptive]: returned error code 1
Thu Apr 20 20:09:43 2017 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Thu Apr 20 20:09:43 2017 Warning: route gateway is not reachable on any active network adapters: 10.8.0.5
Thu Apr 20 20:09:43 2017 Route addition via IPAPI failed [adaptive]
Thu Apr 20 20:09:43 2017 Route addition fallback to route.exe
Thu Apr 20 20:09:43 2017 ERROR: Windows route add command failed [adaptive]: returned error code 1
Thu Apr 20 20:09:43 2017 MANAGEMENT: >STATE:1492711783,ADD_ROUTES,,,
Thu Apr 20 20:09:43 2017 C:\WINDOWS\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Thu Apr 20 20:09:43 2017 Warning: route gateway is not reachable on any active network adapters: 10.8.0.5
Thu Apr 20 20:09:43 2017 Route addition via IPAPI failed [adaptive]
Thu Apr 20 20:09:43 2017 Route addition fallback to route.exe
Thu Apr 20 20:09:43 2017 ERROR: Windows route add command failed [adaptive]: returned error code 1
Thu Apr 20 20:09:43 2017 SYSTEM ROUTING TABLE
Thu Apr 20 20:09:43 2017 0.0.0.0 0.0.0.0 192.168.1.1 p=0 i=26 t=4 pr=3 a=52 h=0 m=50/0/0/0/0
Thu Apr 20 20:09:43 2017 127.0.0.0 255.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=2 a=520 h=0 m=331/0/0/0/0
Thu Apr 20 20:09:43 2017 127.0.0.1 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=520 h=0 m=331/0/0/0/0
Thu Apr 20 20:09:43 2017 127.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=520 h=0 m=331/0/0/0/0
Thu Apr 20 20:09:43 2017 192.168.1.0 255.255.255.0 192.168.1.5 p=0 i=26 t=3 pr=2 a=52 h=0 m=306/0/0/0/0
Thu Apr 20 20:09:43 2017 192.168.1.5 255.255.255.255 192.168.1.5 p=0 i=26 t=3 pr=2 a=52 h=0 m=306/0/0/0/0
Thu Apr 20 20:09:43 2017 192.168.1.255 255.255.255.255 192.168.1.5 p=0 i=26 t=3 pr=2 a=52 h=0 m=306/0/0/0/0
Thu Apr 20 20:09:43 2017 192.168.56.0 255.255.255.0 192.168.56.1 p=0 i=12 t=3 pr=2 a=507 h=0 m=281/0/0/0/0
Thu Apr 20 20:09:43 2017 192.168.56.1 255.255.255.255 192.168.56.1 p=0 i=12 t=3 pr=2 a=507 h=0 m=281/0/0/0/0
Thu Apr 20 20:09:43 2017 192.168.56.255 255.255.255.255 192.168.56.1 p=0 i=12 t=3 pr=2 a=507 h=0 m=281/0/0/0/0
Thu Apr 20 20:09:43 2017 224.0.0.0 240.0.0.0 127.0.0.1 p=0 i=1 t=3 pr=2 a=520 h=0 m=331/0/0/0/0
Thu Apr 20 20:09:43 2017 224.0.0.0 240.0.0.0 192.168.56.1 p=0 i=12 t=3 pr=2 a=510 h=0 m=281/0/0/0/0
Thu Apr 20 20:09:43 2017 224.0.0.0 240.0.0.0 192.168.1.5 p=0 i=26 t=3 pr=2 a=497 h=0 m=306/0/0/0/0
Thu Apr 20 20:09:43 2017 255.255.255.255 255.255.255.255 127.0.0.1 p=0 i=1 t=3 pr=2 a=520 h=0 m=331/0/0/0/0
Thu Apr 20 20:09:43 2017 255.255.255.255 255.255.255.255 192.168.56.1 p=0 i=12 t=3 pr=2 a=510 h=0 m=281/0/0/0/0
Thu Apr 20 20:09:43 2017 255.255.255.255 255.255.255.255 192.168.1.5 p=0 i=26 t=3 pr=2 a=497 h=0 m=306/0/0/0/0
Thu Apr 20 20:09:43 2017 SYSTEM ADAPTER LIST
Thu Apr 20 20:09:43 2017 Realtek PCIe GBE Family Controller
Thu Apr 20 20:09:43 2017   Index = 11
Thu Apr 20 20:09:43 2017   GUID = {5B43E898-F5B2-4A78-94E1-ED51A52E145C}
Thu Apr 20 20:09:43 2017   IP = 0.0.0.0/0.0.0.0 
Thu Apr 20 20:09:43 2017   MAC = bc:ee:7b:1a:06:42
Thu Apr 20 20:09:43 2017   GATEWAY = 0.0.0.0/255.255.255.255 
Thu Apr 20 20:09:43 2017   DHCP SERV =  
Thu Apr 20 20:09:43 2017   DHCP LEASE OBTAINED = Thu Apr 20 20:09:43 2017
Thu Apr 20 20:09:43 2017   DHCP LEASE EXPIRES  = Thu Apr 20 20:09:43 2017
Thu Apr 20 20:09:43 2017   DNS SERV =  
Thu Apr 20 20:09:43 2017 Bluetooth Device (Personal Area Network)
Thu Apr 20 20:09:43 2017   Index = 13
Thu Apr 20 20:09:43 2017   GUID = {6BFE6C8E-64DE-4895-8205-C552A4C04AC7}
Thu Apr 20 20:09:43 2017   IP = 0.0.0.0/0.0.0.0 
Thu Apr 20 20:09:43 2017   MAC = 48:5a:b6:03:20:9e
Thu Apr 20 20:09:43 2017   GATEWAY = 0.0.0.0/255.255.255.255 
Thu Apr 20 20:09:43 2017   DHCP SERV =  
Thu Apr 20 20:09:43 2017   DHCP LEASE OBTAINED = Thu Apr 20 20:09:43 2017
Thu Apr 20 20:09:43 2017   DHCP LEASE EXPIRES  = Thu Apr 20 20:09:43 2017
Thu Apr 20 20:09:43 2017   DNS SERV =  
Thu Apr 20 20:09:43 2017 VirtualBox Host-Only Ethernet Adapter
Thu Apr 20 20:09:43 2017   Index = 12
Thu Apr 20 20:09:43 2017   GUID = {661744B3-1E3A-48D3-A526-EE5CABF9510C}
Thu Apr 20 20:09:43 2017   IP = 192.168.56.1/255.255.255.0 
Thu Apr 20 20:09:43 2017   MAC = 0a:00:27:00:00:0c
Thu Apr 20 20:09:43 2017   GATEWAY = 0.0.0.0/255.255.255.255 
Thu Apr 20 20:09:43 2017   DNS SERV =  
Thu Apr 20 20:09:43 2017 TAP-Windows Adapter V9
Thu Apr 20 20:09:43 2017   Index = 20
Thu Apr 20 20:09:43 2017   GUID = {C9AF5B9D-BA83-4644-A26D-32C86B5340FF}
Thu Apr 20 20:09:43 2017   IP = 0.0.0.0/0.0.0.0 
Thu Apr 20 20:09:43 2017   MAC = 00:ff:c9:af:5b:9d
Thu Apr 20 20:09:43 2017   GATEWAY = 0.0.0.0/255.255.255.255 
Thu Apr 20 20:09:43 2017   DHCP SERV =  
Thu Apr 20 20:09:43 2017   DHCP LEASE OBTAINED = Thu Apr 20 20:09:43 2017
Thu Apr 20 20:09:43 2017   DHCP LEASE EXPIRES  = Thu Apr 20 20:09:43 2017
Thu Apr 20 20:09:43 2017   DNS SERV =  
Thu Apr 20 20:09:43 2017 802.11n Wireless LAN Card
Thu Apr 20 20:09:43 2017   Index = 26
Thu Apr 20 20:09:43 2017   GUID = {F13C55EF-D7E2-400C-8C9B-E2FBE2C37267}
Thu Apr 20 20:09:43 2017   IP = 192.168.1.5/255.255.255.0 
Thu Apr 20 20:09:43 2017   MAC = 48:5a:b6:03:20:9d
Thu Apr 20 20:09:43 2017   GATEWAY = 192.168.1.1/255.255.255.255 
Thu Apr 20 20:09:43 2017   DHCP SERV = 192.168.1.1/255.255.255.255 
Thu Apr 20 20:09:43 2017   DHCP LEASE OBTAINED = Thu Apr 20 20:08:51 2017
Thu Apr 20 20:09:43 2017   DHCP LEASE EXPIRES  = Fri Apr 21 20:08:51 2017
Thu Apr 20 20:09:43 2017   DNS SERV = 192.168.1.1/255.255.255.255 
Thu Apr 20 20:09:43 2017 Microsoft Wi-Fi Direct Virtual Adapter
Thu Apr 20 20:09:43 2017   Index = 15
Thu Apr 20 20:09:43 2017   GUID = {86E54F5B-3045-4902-8831-042C8DDAB8C4}
Thu Apr 20 20:09:43 2017   IP = 0.0.0.0/0.0.0.0 
Thu Apr 20 20:09:43 2017   MAC = 48:5a:b6:03:20:9f
Thu Apr 20 20:09:43 2017   GATEWAY = 0.0.0.0/255.255.255.255 
Thu Apr 20 20:09:43 2017   DHCP SERV =  
Thu Apr 20 20:09:43 2017   DHCP LEASE OBTAINED = Thu Apr 20 20:09:43 2017
Thu Apr 20 20:09:43 2017   DHCP LEASE EXPIRES  = Thu Apr 20 20:09:43 2017
Thu Apr 20 20:09:43 2017   DNS SERV =  
Thu Apr 20 20:09:43 2017 Initialization Sequence Completed With Errors ( see http://openvpn.net/faq.html#dhcpclientserv )
Thu Apr 20 20:09:43 2017 MANAGEMENT: >STATE:1492711783,CONNECTED,ERROR,10.8.0.6,109.173.133.126

ale to już chyba z windowsa widać coś

Idź do forum: Oprogramowanie / Software

12 Odpowiedź przez sq3fyk

(11 odpowiedzi, napisanych Oprogramowanie / Software)

Chciałem uzyskać przekierowanie  całego ruchu przez tunel z komputera na Windows i żeby miał Ip takie jak na WAN rutera.
Czyli jakby był połączony w domu do rutera przez wifi np.
Dziekuje

Idź do forum: Oprogramowanie / Software

13 Temat przez sq3fyk

(11 odpowiedzi, napisanych Oprogramowanie / Software)

Witajcie


Dzisiaj zmagam się z uruchomieniem tunelowania jestem na takim etapie :
Łączę się z komputera na Windows za pomocą openvpn gui i połączenie jest certyfikaty się autoryzują , dostaję adresację 10.8.0X tak jak w przykładzie.

gdy komputer połączy się za pomocą tunelu niestety ip nie jest takie samo jak na openwrt sad nie wiem gdzie popełniam błąd.

firewall:

firewall.@rule[16].name='OpenVPN'
firewall.@rule[16].target='ACCEPT'
firewall.@rule[16].src='wan'
firewall.@rule[16].proto='udp'
firewall.@rule[16].dest_port='1194'
firewall.@zone[5]=zone
firewall.@zone[5].name='vpn'
firewall.@zone[5].input='ACCEPT'
firewall.@zone[5].forward='ACCEPT'
firewall.@zone[5].output='ACCEPT'
firewall.@zone[5].network='vpn'
firewall.@forwarding[4]=forwarding
firewall.@forwarding[4].src='vpn'
firewall.@forwarding[4].dest='wan'

ifconfig tun0:

 ifconfig tun0
tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:10.8.0.1  P-t-P:10.8.0.2  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

/etc/config/openvpn

config openvpn 'home'
        option enabled '1'
        option dev 'tun'
        option port '1194'
        option proto 'udp'
        option log '/tmp/openvpn.log'
        option verb '3'
        option ca '/etc/openvpn/ca.crt'
        option cert '/etc/openvpn/serwer.crt'
        option key '/etc/openvpn/serwer.key'
        option server '10.8.0.0 255.255.255.0'
        option dh '/etc/openvpn/dh2048.pem'

Bardzo prosze o pomoc pozdrawiam

Idź do forum: Oprogramowanie / Software

14 Odpowiedź przez sq3fyk

(38 odpowiedzi, napisanych Oprogramowanie / Software)

Witam
Albo dopisz do Cron-a harmonogram ja tak mam zrobione.

Pozdrawiam

Idź do forum: Oprogramowanie / Software

15 Odpowiedź przez sq3fyk

(12 odpowiedzi, napisanych Oprogramowanie / Software)

Wszystko już wiem dziękuję Cezary.

Idź do forum: Oprogramowanie / Software

16 Odpowiedź przez sq3fyk

(12 odpowiedzi, napisanych Oprogramowanie / Software)

A nie jest to przypadkiem kierowanie (resolver) do danych serwerów dns uzywających DNS crypt ?
na wiki jest wzmianka aby utworzyc sobie zapasowe resolvery na wypadek usterki pierwszego serwera ?

Multiple DNSCrypt instances is helpful to provide dnsmasq with a fallback nameserver without losing the privacy benefits of DNSCrypt (source).

Add more resolver entries to your /etc/config/dnscrypt-proxy configuration (note that each resolver must be on a different port): 

config dnscrypt-proxy ns1
    option address '127.0.0.1'
    option port '5353'
    option resolver 'fvz-anyone'
    # option resolvers_list '/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv'
    # option ephemeral_keys '0'

config dnscrypt-proxy ns2
    option address '127.0.0.1'
    option port '5454'
    option resolver 'd0wn-random-ns1'
    # option resolvers_list '/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv'
    # option ephemeral_keys '0'

w /usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv  jest nawet cała lista.

Przepraszam że się czepiam ale lepiej staram się zrozumieć mechanizm działania.
Dziekuję za poprzednie wpisy , które pomogły rozwiązać mi problem.

Idź do forum: Oprogramowanie / Software

17 Odpowiedź przez sq3fyk

(12 odpowiedzi, napisanych Oprogramowanie / Software)

Ok teraz weryfikacja przeszła ok , czy warto w takim razie dodac resolver list czy ma to tylko znaczenie przy weryfikacji na różnych serwisach ?
Opóźnienie dodałem dziekuję.

Idź do forum: Oprogramowanie / Software

18 Odpowiedź przez sq3fyk

(12 odpowiedzi, napisanych Oprogramowanie / Software)

A może Firewall coś blokuje ? bo już nie mam pomysłów.
Bo niby proxuje  dnscrypt-proxy Proxying from 127.0.0.1:5353 to 185.121.177.177:443 a jednak nie działa

Idź do forum: Oprogramowanie / Software

19 Odpowiedź przez sq3fyk

(12 odpowiedzi, napisanych Oprogramowanie / Software)

czyli jednak nie funkcjonuje sad

C:\Users\Krzysztof>nslookup
Default Server:  OpenWrt.lan
Address:  192.168.1.1

> set type=txt
> debug.opendns.com
Server:  OpenWrt.lan
Address:  192.168.1.1

*** OpenWrt.lan can't find debug.opendns.com: Non-existent domain
>

Tylko gdzie popełniłem błąd robiłem dokładnie w/g poradnika z eko.one.pl i wspierałem się wiki i powinno być wszystko ok sad

Idź do forum: Oprogramowanie / Software

20 Temat przez sq3fyk

(12 odpowiedzi, napisanych Oprogramowanie / Software)

Witajcie

Uruchomiłęm DNScrypt na ruterze i niby wszystko działa ale wszystkie strony testujące działanie wskazują że nie używam DNScrypt-a


A więc wygląda to tak:

/etc/config/dhcp

config dnsmasq
        option domainneeded '1'
        option boguspriv '1'
        option filterwin2k '0'
        option localise_queries '1'
        option rebind_protection '1'
        option rebind_localhost '1'
        option local '/lan/'
        option domain 'lan'
        option expandhosts '1'
        option nonegcache '0'
        option authoritative '1'
        option readethers '1'
        option leasefile '/tmp/dhcp.leases'
        option noresolv '1'
        list server '127.0.0.1#5353'
        list server '/pool.ntp.org/208.67.222.222'
        option localservice '1'
root@OpenWrt:~# logread | grep -n "using nameserver"
316:Wed Apr 19 19:15:48 2017 daemon.info dnsmasq[2040]: using nameserver 208.67.222.222#53 for domain pool.ntp.org
317:Wed Apr 19 19:15:48 2017 daemon.info dnsmasq[2040]: using nameserver 127.0.0.1#5353
root@OpenWrt:~# logread | grep "Proxying from"
Wed Apr 19 19:15:58 2017 daemon.notice dnscrypt-proxy[958]: dnscrypt-proxy Proxying from 127.0.0.1:5353 to 185.121.177.177:443

NTP client uruchomiony na ruterze dodany serwer jedyny pool.ntp.org
Nie wiem gdzie jest błąd ?
Komputer na windows używa dns-a 192.168.1.1

Strony do testu: https://www.opendns.com/welcome/
http://dnssec.vs.uni-due.de/

Dziekuję za wszystkie sugestie

Idź do forum: Oprogramowanie / Software

21 Odpowiedź przez sq3fyk

(21 odpowiedzi, napisanych Oprogramowanie / Software)

Faktycznie teraz działa bardzo dziękuję za poświęcony czas wink

Idź do forum: Oprogramowanie / Software

22 Odpowiedź przez sq3fyk

(21 odpowiedzi, napisanych Oprogramowanie / Software)

Zrobiłem dokładnie tak faktycznie teraz dodało rule[9] i 10
ale nadal jest dostęp sad
wrzucam show firewall.

root@OpenWrt:~# uci show firewall
firewall.@defaults[0]=defaults
firewall.@defaults[0].syn_flood='1'
firewall.@defaults[0].input='ACCEPT'
firewall.@defaults[0].output='ACCEPT'
firewall.@defaults[0].forward='REJECT'
firewall.@zone[0]=zone
firewall.@zone[0].name='lan'
firewall.@zone[0].network='lan'
firewall.@zone[0].input='ACCEPT'
firewall.@zone[0].output='ACCEPT'
firewall.@zone[0].forward='ACCEPT'
firewall.@zone[1]=zone
firewall.@zone[1].name='wan'
firewall.@zone[1].network='wan' 'wan6'
firewall.@zone[1].input='REJECT'
firewall.@zone[1].output='ACCEPT'
firewall.@zone[1].forward='REJECT'
firewall.@zone[1].masq='1'
firewall.@zone[1].mtu_fix='1'
firewall.@forwarding[0]=forwarding
firewall.@forwarding[0].src='lan'
firewall.@forwarding[0].dest='wan'
firewall.@rule[0]=rule
firewall.@rule[0].name='Allow-DHCP-Renew'
firewall.@rule[0].src='wan'
firewall.@rule[0].proto='udp'
firewall.@rule[0].dest_port='68'
firewall.@rule[0].target='ACCEPT'
firewall.@rule[0].family='ipv4'
firewall.@rule[1]=rule
firewall.@rule[1].name='Allow-Ping'
firewall.@rule[1].src='wan'
firewall.@rule[1].proto='icmp'
firewall.@rule[1].icmp_type='echo-request'
firewall.@rule[1].family='ipv4'
firewall.@rule[1].target='ACCEPT'
firewall.@rule[2]=rule
firewall.@rule[2].name='Allow-IGMP'
firewall.@rule[2].src='wan'
firewall.@rule[2].proto='igmp'
firewall.@rule[2].family='ipv4'
firewall.@rule[2].target='ACCEPT'
firewall.@rule[3]=rule
firewall.@rule[3].name='Allow-DHCPv6'
firewall.@rule[3].src='wan'
firewall.@rule[3].proto='udp'
firewall.@rule[3].src_ip='fc00::/6'
firewall.@rule[3].dest_ip='fc00::/6'
firewall.@rule[3].dest_port='546'
firewall.@rule[3].family='ipv6'
firewall.@rule[3].target='ACCEPT'
firewall.@rule[4]=rule
firewall.@rule[4].name='Allow-MLD'
firewall.@rule[4].src='wan'
firewall.@rule[4].proto='icmp'
firewall.@rule[4].src_ip='fe80::/10'
firewall.@rule[4].icmp_type='130/0' '131/0' '132/0' '143/0'
firewall.@rule[4].family='ipv6'
firewall.@rule[4].target='ACCEPT'
firewall.@rule[5]=rule
firewall.@rule[5].name='Allow-ICMPv6-Input'
firewall.@rule[5].src='wan'
firewall.@rule[5].proto='icmp'
firewall.@rule[5].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type' 'router-solicitation' 'neighbour-solicitation' 'router-advertisement' 'neighbour-advertisement'
firewall.@rule[5].limit='1000/sec'
firewall.@rule[5].family='ipv6'
firewall.@rule[5].target='ACCEPT'
firewall.@rule[6]=rule
firewall.@rule[6].name='Allow-ICMPv6-Forward'
firewall.@rule[6].src='wan'
firewall.@rule[6].dest='*'
firewall.@rule[6].proto='icmp'
firewall.@rule[6].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type'
firewall.@rule[6].limit='1000/sec'
firewall.@rule[6].family='ipv6'
firewall.@rule[6].target='ACCEPT'
firewall.@include[0]=include
firewall.@include[0].path='/etc/firewall.user'
firewall.@rule[7]=rule
firewall.@rule[7].src='wan'
firewall.@rule[7].dest='lan'
firewall.@rule[7].proto='esp'
firewall.@rule[7].target='ACCEPT'
firewall.@rule[8]=rule
firewall.@rule[8].src='wan'
firewall.@rule[8].dest='lan'
firewall.@rule[8].dest_port='500'
firewall.@rule[8].proto='udp'
firewall.@rule[8].target='ACCEPT'
firewall.@zone[2]=zone
firewall.@zone[2].name='lan2'
firewall.@zone[2].network='lan2'
firewall.@zone[2].input='ACCEPT'
firewall.@zone[2].output='ACCEPT'
firewall.@zone[2].forward='REJECT'
firewall.@forwarding[1]=forwarding
firewall.@forwarding[1].src='lan2'
firewall.@forwarding[1].dest='wan'
firewall.@forwarding[2]=forwarding
firewall.@forwarding[2].src='lan3'
firewall.@forwarding[2].dest='wan'
firewall.@zone[3]=zone
firewall.@zone[3].name='lan4'
firewall.@zone[3].network='lan4'
firewall.@zone[3].input='ACCEPT'
firewall.@zone[3].output='ACCEPT'
firewall.@zone[3].forward='REJECT'
firewall.@forwarding[3]=forwarding
firewall.@forwarding[3].src='lan4'
firewall.@forwarding[3].dest='wan'
firewall.@zone[4]=zone
firewall.@zone[4].name='lan3'
firewall.@zone[4].network='lan3'
firewall.@zone[4].input='ACCEPT'
firewall.@zone[4].output='ACCEPT'
firewall.@zone[4].forward='REJECT'
firewall.@forwarding[4]=forwarding
firewall.@forwarding[4].src='lan3'
firewall.@forwarding[4].dest='wan'
firewall.@rule[9]=rule
firewall.@rule[9].src='lan2'
firewall.@rule[9].proto='udp'
firewall.@rule[9].src_port='67-68'
firewall.@rule[9].dest_port='67-68'
firewall.@rule[9].target='ACCEPT'
firewall.@rule[9].family='ipv4'
firewall.@rule[10]=rule
firewall.@rule[10].src='lan2'
firewall.@rule[10].dest_port='53'
firewall.@rule[10].target='ACCEPT'
firewall.@rule[10].family='ipv4'
firewall.@rule[10].proto='tcpudp'

Wydaje mi się ze wpisy powyzej przepuszczaja wszystko ale nie wiem dokłądnie jestem za słaby sad

Idź do forum: Oprogramowanie / Software

23 Odpowiedź przez sq3fyk

(21 odpowiedzi, napisanych Oprogramowanie / Software)

No to od nowa musiałem wrt postawić , przez Luci wyczyściłem sobie wszystko w firewall,u i odciełem się od świata (swoją drogą to wgrywanie firmwaru z failsafe to juz rutyna u mnie ;P )
Po wpisaniu regułęm dla lan2 , które podałem wyżej , przestaje działać dhcp na switchu dostep do sieci itd teraz naprawde poległem....

Idź do forum: Oprogramowanie / Software

24 Odpowiedź przez sq3fyk

(21 odpowiedzi, napisanych Oprogramowanie / Software)

Dokładnie dla lan2 zone2 , dla lan3 zone3 itd tak zrobiłem idę do rutera wpiąć się po kablu i testować wink

Idź do forum: Oprogramowanie / Software

25 Odpowiedź przez sq3fyk

(21 odpowiedzi, napisanych Oprogramowanie / Software)

czyli odpowiednio zmodyfikowane dla kazżdego interfejsu sieciowego lan2 , lan3 i lan4

# uci set firewall.@zone[2].input=REJECT
    # uci set firewall.@zone[2].output=ACCEPT
    # uci set firewall.@zone[2].forward=REJECT

    # uci add firewall rule
    # uci set firewall.@rule[2].src=lan2
    # uci set firewall.@rule[2].proto=udp
    # uci set firewall.@rule[2].src_port=67-68
    # uci set firewall.@rule[2].dest_port=67-68
    # uci set firewall.@rule[2].target=ACCEPT
    # uci set firewall.@rule[2].family=ipv4

    # uci add firewall rule
    # uci set firewall.@rule[2].src=lan2
    # uci set firewall.@rule[2].dest_port=53
    # uci set firewall.@rule[2].target=ACCEPT
    # uci set firewall.@rule[2].family=ipv4
    # uci set firewall.@rule[2].proto=tcpudp

    # uci commit

przy czym zone2 to lan2 a src-lan2 dobrze rozumiem ?
Dziekuję

Idź do forum: Oprogramowanie / Software