Temat: OpenWRT 24.10 PBR brak Handshake dla klienta
Witam
Konfiguracja działa na 23,05 ale z 24.10 mam problem z podłączeniem klienta do serwera wireguard który jest klientem innego serwera wireguard.
config pbr 'config'
option enabled '1'
option verbosity '2'
option strict_enforcement '1'
option resolver_set 'dnsmasq.nftset'
list resolver_instance '*'
option ipv6_enabled '0'
option boot_timeout '30'
option rule_create_option 'add'
option procd_boot_delay '0'
option procd_reload_delay '1'
option webui_show_ignore_target '0'
option nft_rule_counter '0'
option nft_set_auto_merge '1'
option nft_set_counter '0'
option nft_set_flags_interval '1'
option nft_set_flags_timeout '0'
option nft_set_policy 'performance'
list webui_supported_protocol 'all'
list webui_supported_protocol 'tcp'
list webui_supported_protocol 'udp'
list webui_supported_protocol 'tcp udp'
list webui_supported_protocol 'icmp'
list supported_interface 'wg0'
config include
option path '/usr/share/pbr/pbr.user.aws'
option enabled '0'
config include
option path '/usr/share/pbr/pbr.user.netflix'
option enabled '0'
config policy
option name 'net'
option dest_addr 'fireinfra.net speedtest.pl'
option interface 'wg0'
option enabled '0'
config policy
option name 'Disney'
option dest_addr 'disney.demdex.net braze.com disney-plus.net disney-vod-na-west-1.top.comcast.net disneyplus.com disneyplus.disney.co.jp disneystreaming.service-now.com dssott.com search-api-disney.bamgrid.com starott.com bamgrid.com bam.nr-data.net cdn.registerdisney.go.com cws.conviva.com d9.flashtalking.com disney-portal.my.onetrust.com disneyplus.bn5x.net js-agent.newrelic.com adobedtm.com techlab-cdn.com'
option interface 'wg0'
option src_addr '192.168.13.11/32'W OpenWRT 24.10 znalazłem że PBR automatycznie tworzy takie rule
ip rule show
0: from all lookup local
29998: from all fwmark 0x20000/0xff0000 lookup pbr_wg0
29999: from all sport 52820 lookup pbr_wan
30000: from all fwmark 0x10000/0xff0000 lookup pbr_wan
32766: from all lookup main
32767: from all lookup defaultTu z 23,05
ip rule show
0: from all lookup local
30000: from all fwmark 0x10000/0xff0000 lookup pbr_wan
30001: from all fwmark 0x20000/0xff0000 lookup pbr_wg0
32766: from all lookup main
32767: from all lookup defaultPo ręcznym usunięci tej
29999: from all sport 52820 lookup pbr_wan
reguły można podłączyć sie klientem.
Wie ktoś co można zmienić w ustawianiach aby reguła z portem automatyczni się nie dodawała ?