1 Temat przez pazdzioch (edytowany przez pazdzioch 2026-03-13 22:13:31)

  • Zarejestrowany: 2018-05-25
  • Posty: 494

Temat: Tailscale VPS ExidNode - router problem z PBR

Witam, postawiłem na polskim VPS Tailscale w trybie exit node , na routerze zainstalowalem paczke tailscale, przez polecenie

tailscale up --accept-routes --exit-node=100.90.x.y.z --exit-node-allow-lan-access


autoryzowałem obydwa urzadzenia na stronie Tailscale, VPS w trybie exid node, oraz skonfigurowania firewalla , wszystko ruszyło bez problemu, cały ruch idzie przez IP VPSa.

Pobrałem paczkę PBR aby wybrane lokalne urządzenia korzystały z ip po WAN, niestety ustawienia nie działają ? czy cos musze konretnie w pbr ustawic ? inaczej skonfigurowac Firewalla ?

przykładowa reguła

Name: Streaming_Poland

Interface: tailscale

Local addresses: IP telewizora

Remote addresses:

Protocol : All

2 Odpowiedź przez Cezary

  • Skąd: Warszawa
  • Zarejestrowany: 2006-02-25
  • Posty: 116,354

Odp: Tailscale VPS ExidNode - router problem z PBR

Pokaż co skonfigurowałeś na tym pbr.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

Cezary's Strona

3 Odpowiedź przez pazdzioch (edytowany przez pazdzioch 2026-03-13 22:29:51)

  • Zarejestrowany: 2018-05-25
  • Posty: 494

Odp: Tailscale VPS ExidNode - router problem z PBR

Cezary napisał/a:

Pokaż co skonfigurowałeś na tym pbr.

https://zapodaj.net/plik-UB40hnzHl3

jak bym nie ustawil wszyscy dostają IP VPSa.

4 Odpowiedź przez Cezary

  • Skąd: Warszawa
  • Zarejestrowany: 2006-02-25
  • Posty: 116,354

Odp: Tailscale VPS ExidNode - router problem z PBR

Ale ty ustawiłeś że te kilka domen ma iśc przez wan a nie lokalne urządzenia?

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

Cezary's Strona

5 Odpowiedź przez pazdzioch

  • Zarejestrowany: 2018-05-25
  • Posty: 494

Odp: Tailscale VPS ExidNode - router problem z PBR

NO bo juz kombinuje jak sie da, jak ustawie IP Laptopa i ustawie WAN, to i tak nadal jest IP z VPS

6 Odpowiedź przez Cezary

  • Skąd: Warszawa
  • Zarejestrowany: 2006-02-25
  • Posty: 116,354

Odp: Tailscale VPS ExidNode - router problem z PBR

Zobacz w logach, bo pbr często się rzuca jak gatewaya nie widzi albo podobnych rzeczy.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

Cezary's Strona

7 Odpowiedź przez pazdzioch

  • Zarejestrowany: 2018-05-25
  • Posty: 494

Odp: Tailscale VPS ExidNode - router problem z PBR

Fri Mar 13 22:50:12 2026 daemon.err tailscaled[4599]: 2026/03/13 21:50:12 open-conn-track: timeout opening (TCP 100.98.87.69:50858 => 100.90.103.106:34642) to node [FFwXH]; online=yes, lastRecv=5s
Fri Mar 13 22:50:12 2026 user.notice pbr [6420]: Using uplink interface (on_start): wan [✓]
Fri Mar 13 22:50:12 2026 user.notice pbr [6420]: Found uplink gateway (on_start): 100.64.0.1 [✓]
Fri Mar 13 22:50:12 2026 daemon.info procd: - init complete -
Fri Mar 13 22:50:12 2026 user.notice pbr [6420]: Processing environment (on_start) [✓]
Fri Mar 13 22:50:13 2026 user.notice pbr [6420]: Setting up routing for 'wan/eth1/100.64.0.1' [✓]
Fri Mar 13 22:50:13 2026 user.notice pbr [6420]: Setting up routing for 'wwan/0.0.0.0' [✓]
Fri Mar 13 22:50:13 2026 user.notice pbr [6420]: Setting up routing for 'home/zt5u4qepy5/10.147.17.209' [✓]
Fri Mar 13 22:50:14 2026 daemon.err tailscaled[4599]: 2026/03/13 21:50:13 open-conn-track: timeout opening (TCP 100.98.87.69:50870 => 100.90.103.106:34642) to node [FFwXH]; online=yes, lastRecv=7s
Fri Mar 13 22:50:14 2026 daemon.err tailscaled[4599]: 2026/03/13 21:50:14 open-conn-track: timeout opening (TCP 100.98.87.69:50886 => 100.90.103.106:34642) to node [FFwXH]; online=yes, lastRecv=7s
Fri Mar 13 22:50:14 2026 daemon.err tailscaled[4599]: 2026/03/13 21:50:14 open-conn-track: timeout opening (TCP 100.98.87.69:50884 => 100.90.103.106:34642) to node [FFwXH]; online=yes, lastRecv=7s
Fri Mar 13 22:50:14 2026 user.info adblock-4.4.2-r3[6213]: download of 'adguard' failed, url: https://adguardteam.github.io/AdGuardSD … ilter.txt, rule: BEGIN{FS="[|^]"}/^\|\|([[:alnum:]_-]{1,63}\.)+[[:alpha:]]+\^(\$third-party)?$/{print tolower($3)}, categories: -, rc: 4
Fri Mar 13 22:50:14 2026 user.info adblock-4.4.2-r3[6213]: download of 'adguard_tracking' failed, url: https://raw.githubusercontent.com/Adgua … mains.txt, rule: /^([[:alnum:]_-]{1,63}\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -
Fri Mar 13 22:50:14 2026 user.info adblock-4.4.2-r3[6213]: download of 'certpl' failed, url: https://hole.cert.pl/domains/v2/domains.txt, rule: /^([[:alnum:]_-]{1,63}\.)+[[:alpha:]]+([[:space:]]|$)/{print tolower($1)}, categories: -, rc: 4
Fri Mar 13 22:50:14 2026 user.notice pbr [6420]: Setting up routing for 'tailscale/tailscale0/100.98.87.69' [✓]
Fri Mar 13 22:50:14 2026 daemon.info dnsmasq[1]: exiting on receipt of SIGTERM
Fri Mar 13 22:50:14 2026 daemon.err tailscaled[4599]: 2026/03/13 21:50:14 open-conn-track: timeout opening (TCP 100.98.87.69:50305 => 3.122.134.146:443) to node [FFwXH]; online=yes, lastRecv=7s
Fri Mar 13 22:50:14 2026 daemon.err tailscaled[4599]: 2026/03/13 21:50:14 [RATELIMIT] format("open-conn-track: timeout opening %v to node %v; online=%v, lastRecv=%v")
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: started, version 2.90 cachesize 1000
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: DNS service limited to local subnets
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: compile time options: IPv6 GNU-getopt no-DBus UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack no-ipset no-nftset no-auth no-cryptohash no-DNSSEC no-ID loop-detect inotify dumpfile
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: UBus support enabled: connected to system bus
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq-dhcp[1]: DHCP, IP range 192.168.88.100 -- 192.168.88.249, lease time 12h
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: using only locally-known addresses for test
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: using only locally-known addresses for onion
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: using only locally-known addresses for localhost
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: using only locally-known addresses for local
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: using only locally-known addresses for invalid
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: using only locally-known addresses for bind
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: using only locally-known addresses for lan
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: reading /tmp/resolv.conf.d/resolv.conf.auto
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: using nameserver 9.9.9.9#53
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: using nameserver 149.112.112.112#53
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: using only locally-known addresses for test
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: using only locally-known addresses for onion
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: using only locally-known addresses for localhost
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: using only locally-known addresses for local
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: using only locally-known addresses for invalid
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: using only locally-known addresses for bind
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: using only locally-known addresses for lan
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: read /etc/hosts - 12 names
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq[1]: read /tmp/hosts/dhcp.cfg01411c - 4 names
Fri Mar 13 22:50:17 2026 daemon.info dnsmasq-dhcp[1]: read /etc/ethers - 0 addresses
Fri Mar 13 22:50:17 2026 daemon.err tailscaled[4599]: 2026/03/13 21:50:17 dns udp query: waiting for response or error from [http://100.90.103.106:34642/dns-query]: context deadline exceeded
Fri Mar 13 22:50:17 2026 daemon.err tailscaled[4599]: 2026/03/13 21:50:17 [RATELIMIT] format("health(warnable=%s): ok") (4 dropped)
Fri Mar 13 22:50:17 2026 daemon.err tailscaled[4599]: 2026/03/13 21:50:17 health(warnable=dns-forward-failing): ok
Fri Mar 13 22:50:18 2026 daemon.notice hostapd: phy1-ap0: ACS-COMPLETED freq=5500 channel=100
Fri Mar 13 22:50:18 2026 daemon.notice hostapd: phy1-ap0: interface state ACS->HT_SCAN
Fri Mar 13 22:50:18 2026 daemon.notice hostapd: phy1-ap0: interface state HT_SCAN->DFS
Fri Mar 13 22:50:18 2026 daemon.notice hostapd: phy1-ap0: DFS-CAC-START freq=5500 chan=100 sec_chan=1, width=2, seg0=114, seg1=0, cac_time=60s
Fri Mar 13 22:50:18 2026 daemon.err tailscaled[4599]: 2026/03/13 21:50:18 dns udp query: waiting for response or error from [http://100.90.103.106:34642/dns-query]: context deadline exceeded
Fri Mar 13 22:50:18 2026 daemon.err tailscaled[4599]: 2026/03/13 21:50:18 dns udp query: waiting for response or error from [http://100.90.103.106:34642/dns-query]: context deadline exceeded
Fri Mar 13 22:50:18 2026 daemon.err tailscaled[4599]: 2026/03/13 21:50:18 dns udp query: waiting for response or error from [http://100.90.103.106:34642/dns-query]: context deadline exceeded
Fri Mar 13 22:50:20 2026 daemon.err tailscaled[4599]: 2026/03/13 21:50:20 health(warnable=dns-forward-failing): ok
Fri Mar 13 22:50:20 2026 daemon.err tailscaled[4599]: 2026/03/13 21:50:20 [RATELIMIT] format("health(warnable=%s): ok")
Fri Mar 13 22:50:22 2026 daemon.err tailscaled[4599]: 2026/03/13 21:50:22 dns udp query: waiting for response or error from [http://100.90.103.106:34642/dns-query]: context deadline exceeded
Fri Mar 13 22:50:22 2026 daemon.err tailscaled[4599]: 2026/03/13 21:50:22 [RATELIMIT] format("dns udp query: %v")
Fri Mar 13 22:50:22 2026 daemon.err tailscaled[4599]: 2026/03/13 21:50:22 [RATELIMIT] format("open-conn-track: timeout opening %v to node %v; online=%v, lastRecv=%v") (9 dropped)
Fri Mar 13 22:50:22 2026 daemon.err tailscaled[4599]: 2026/03/13 21:50:22 open-conn-track: timeout opening (TCP 100.98.87.69:40332 => 100.90.103.106:34642) to node [FFwXH]; online=yes, lastRecv=5s
Fri Mar 13 22:50:22 2026 daemon.err tailscaled[4599]: 2026/03/13 21:50:22 open-conn-track: timeout opening (TCP 100.98.87.69:50910 => 100.90.103.106:34642) to node [FFwXH]; online=yes, lastRecv=6s
Fri Mar 13 22:50:22 2026 daemon.err tailscaled[4599]: 2026/03/13 21:50:22 [RATELIMIT] format("open-conn-track: timeout opening %v to node %v; online=%v, lastRecv=%v")
Fri Mar 13 22:50:22 2026 user.notice pbr [6420]: Routing 'Test' via wan [✓]
Fri Mar 13 22:50:22 2026 user.notice pbr [6420]: Installing fw4 nft file [✓]
Fri Mar 13 22:50:22 2026 user.notice pbr [6420]: Setting interface trigger for wan [✓]
Fri Mar 13 22:50:22 2026 user.notice pbr [6420]: Setting interface trigger for wwan [✓]
Fri Mar 13 22:50:22 2026 user.notice pbr [6420]: Setting interface trigger for home [✓]
Fri Mar 13 22:50:22 2026 user.notice pbr [6420]: Setting interface trigger for tailscale [✓]
Fri Mar 13 22:50:22 2026 user.notice pbr [6420]: pbr 1.2.0-r6 monitoring interfaces: wan wwan home tailscale
Fri Mar 13 22:50:23 2026 user.notice pbr [6420]: pbr 1.2.0-r6 (fw4 nft file mode) started with gateways: wan/eth1/100.64.0.1 [✓] wwan/0.0.0.0 home/zt5u4qepy5/10.147.17.209 tailscale/tailscale0/100.98.87.69
Fri Mar 13 22:50:23 2026 user.notice pbr [6420]: ERROR: Failed to resolve 'speedtest.pl'!
Fri Mar 13 22:50:23 2026 user.notice pbr [6420]: ERROR: Failed to resolve 'ipcost.com'!
Fri Mar 13 22:50:23 2026 user.notice pbr [6420]: ERROR: Failed to resolve 'ytimg.com'!
Fri Mar 13 22:50:23 2026 user.notice pbr [6420]: ERROR: Errors encountered, please check https://docs.openwrt.melmac.ca/pbr/1.2. … esDetails!
Fri Mar 13 22:55:24 2026 daemon.err collectd[3200]: Sleeping only 2s because the next interval is 264.580 seconds in the past!
Fri Mar 13 22:55:30 2026 daemon.err tailscaled[4599]: 2026/03/13 21:55:30 monitor: time jumped (probably wake from sleep); synthesizing major change event
Fri Mar 13 22:55:30 2026 daemon.err tailscaled[4599]: 2026/03/13 21:55:30 linkChange: in state Running; updating LAN routes
Fri Mar 13 22:55:30 2026 daemon.err tailscaled[4599]: 2026/03/13 21:55:30 LinkChange: major, rebinding. New state: interfaces.State{defaultRoute=eth1 ifs={br-lan:[192.168.88.1/24 fddd:3906:306b::1/60 llu6] eth1:[100.103.149.193/10 llu6] tailscale0:[100.98.87.69/32 fd7a:115c:a1e0::7233:5745/128 llu6] zt5u4qepy5:[10.147.17.209/16 llu6]} v4=true v6=true}
Fri Mar 13 22:55:30 2026 daemon.err tailscaled[4599]: 2026/03/13 21:55:30 dns: Set: {DefaultResolvers:[http://100.90.103.106:34642/dns-query] Routes:{tail19e59.ts.net.:[]}+65arpa SearchDomains:[tail19e59.ts.net.] Hosts:11}
Fri Mar 13 22:55:30 2026 daemon.err tailscaled[4599]: 2026/03/13 21:55:30 dns: Resolvercfg: {Routes:{.:[http://100.90.103.106:34642/dns-query]} Hosts:11 LocalDomains:[tail19e59.ts.net.]+65arpa}
Fri Mar 13 22:55:30 2026 daemon.err tailscaled[4599]: 2026/03/13 21:55:30 dns: OScfg: {Nameservers:[100.100.100.100] SearchDomains:[tail19e59.ts.net.] }
Fri Mar 13 22:55:30 2026 daemon.err tailscaled[4599]: 2026/03/13 21:55:30 allowing exit node access to local IPs: [127.0.0.0/8 10.147.0.0/16 192.168.88.0/24 fddd:3906:306b::/60 fe80::/64]
Fri Mar 13 22:55:30 2026 daemon.err tailscaled[4599]: 2026/03/13 21:55:30 wgengine: set DNS config again after major link change
Fri Mar 13 22:55:30 2026 daemon.err tailscaled[4599]: 2026/03/13 21:55:30 [RATELIMIT] format("onPortUpdate(port=%v, network=%s)") (1 dropped)
Fri Mar 13 22:55:30 2026 daemon.err tailscaled[4599]: 2026/03/13 21:55:30 onPortUpdate(port=41641, network=udp6)
Fri Mar 13 22:55:30 2026 daemon.err tailscaled[4599]: 2026/03/13 21:55:30 onPortUpdate(port=41641, network=udp4)
Fri Mar 13 22:55:30 2026 daemon.err tailscaled[4599]: 2026/03/13 21:55:30 Rebind; defIf="eth1", ips=[100.103.149.193/10 fe80::1271:b3ff:fe8d:3e9f/64]
Fri Mar 13 22:55:30 2026 daemon.err tailscaled[4599]: 2026/03/13 21:55:30 magicsock: 2 active derp conns: derp-14=cr29s,wr29s derp-22=cr29s,wr28s
Fri Mar 13 22:55:30 2026 daemon.err tailscaled[4599]: 2026/03/13 21:55:30 post-rebind ping of DERP region 14 okay
Fri Mar 13 22:55:30 2026 daemon.err tailscaled[4599]: 2026/03/13 21:55:30 post-rebind ping of DERP region 22 okay
Fri Mar 13 22:55:31 2026 daemon.err tailscaled[4599]: 2026/03/13 21:55:31 magicsock: disco: node [FFwXH] d:1f87ea977a2eed71 now using 37.233.99.35:41641 mtu=1360 tx=0356e3dbfdd5
Fri Mar 13 22:55:55 2026 daemon.info hostapd: phy0-ap0: STA 6c:2f:80:e0:22:ac IEEE 802.11: authenticated
Fri Mar 13 22:55:55 2026 daemon.info hostapd: phy0-ap0: STA 6c:2f:80:e0:22:ac IEEE 802.11: associated (aid 3)
Fri Mar 13 22:55:55 2026 daemon.notice hostapd: phy0-ap0: STA-OPMODE-SMPS-MODE-CHANGED 6c:2f:80:e0:22:ac off
Fri Mar 13 22:55:55 2026 daemon.notice hostapd: phy0-ap0: AP-STA-CONNECTED 6c:2f:80:e0:22:ac auth_alg=open
Fri Mar 13 22:55:55 2026 daemon.info hostapd: phy0-ap0: STA 6c:2f:80:e0:22:ac WPA: pairwise key handshake completed (RSN)
Fri Mar 13 22:55:55 2026 daemon.notice hostapd: phy0-ap0: EAPOL-4WAY-HS-COMPLETED 6c:2f:80:e0:22:ac
Fri Mar 13 22:55:57 2026 daemon.info dnsmasq-dhcp[1]: DHCPREQUEST(br-lan) 192.168.88.142 6c:2f:80:e0:22:ac
Fri Mar 13 22:55:57 2026 daemon.info dnsmasq-dhcp[1]: DHCPACK(br-lan) 192.168.88.142 6c:2f:80:e0:22:ac Lenovo-ThinkCentre
Fri Mar 13 22:56:01 2026 user.err adblock-4.4.2-r3[6213]: dns backend restart with adblock blocklist failed
Fri Mar 13 22:56:01 2026 daemon.info dnsmasq[1]: exiting on receipt of SIGTERM
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: started, version 2.90 cachesize 1000
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: DNS service limited to local subnets
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: compile time options: IPv6 GNU-getopt no-DBus UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack no-ipset no-nftset no-auth no-cryptohash no-DNSSEC no-ID loop-detect inotify dumpfile
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: UBus support enabled: connected to system bus
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq-dhcp[1]: DHCP, IP range 192.168.88.100 -- 192.168.88.249, lease time 12h
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: using only locally-known addresses for test
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: using only locally-known addresses for onion
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: using only locally-known addresses for localhost
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: using only locally-known addresses for local
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: using only locally-known addresses for invalid
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: using only locally-known addresses for bind
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: using only locally-known addresses for lan
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: reading /tmp/resolv.conf.d/resolv.conf.auto
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: using nameserver 9.9.9.9#53
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: using nameserver 149.112.112.112#53
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: using only locally-known addresses for test
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: using only locally-known addresses for onion
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: using only locally-known addresses for localhost
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: using only locally-known addresses for local
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: using only locally-known addresses for invalid
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: using only locally-known addresses for bind
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: using only locally-known addresses for lan
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: read /etc/hosts - 12 names
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq[1]: read /tmp/hosts/dhcp.cfg01411c - 4 names
Fri Mar 13 22:56:04 2026 daemon.info dnsmasq-dhcp[1]: read /etc/ethers - 0 addresses
Fri Mar 13 22:56:04 2026 daemon.err uhttpd[2682]: [info] luci: accepted login on /admin/status/logs for root from 192.168.88.142
Fri Mar 13 22:56:17 2026 daemon.notice hostapd: phy1-ap0: DFS-CAC-COMPLETED success=1 freq=5500 ht_enabled=0 chan_offset=0 chan_width=5 cf1=5570 cf2=0 radar_detected=0
Fri Mar 13 22:56:18 2026 kern.info kernel: [  106.182121] br-lan: port 6(phy1-ap0) entered blocking state
Fri Mar 13 22:56:18 2026 kern.info kernel: [  106.187960] br-lan: port 6(phy1-ap0) entered forwarding state
Fri Mar 13 22:56:18 2026 daemon.notice netifd: Network device 'phy1-ap0' link is up
Fri Mar 13 22:56:18 2026 daemon.notice hostapd: phy1-ap0: interface state DFS->ENABLED
Fri Mar 13 22:56:18 2026 daemon.notice hostapd: phy1-ap0: AP-ENABLED
Fri Mar 13 22:56:36 2026 daemon.err tailscaled[4599]: 2026/03/13 21:56:36 magicsock: home DERP changing from derp-14 [26ms] to derp-4 [21ms]
Fri Mar 13 22:56:36 2026 daemon.err tailscaled[4599]: 2026/03/13 21:56:36 magicsock: home is now derp-4 (fra)
Fri Mar 13 22:56:36 2026 daemon.err tailscaled[4599]: 2026/03/13 21:56:36 magicsock: adding connection to derp-4 for home-keep-alive
Fri Mar 13 22:56:36 2026 daemon.err tailscaled[4599]: 2026/03/13 21:56:36 magicsock: 3 active derp conns: derp-4=cr0s,wr0s derp-14=cr2m0s,wr2m0s derp-22=cr2m0s,wr1m0s
Fri Mar 13 22:56:36 2026 daemon.err tailscaled[4599]: 2026/03/13 21:56:36 control: NetInfo: NetInfo{varies=false hairpin= ipv6=false ipv6os=true udp=true icmpv4=false derp=#4 portmap= link="" firewallmode="nft-forced"}
Fri Mar 13 22:56:36 2026 daemon.err tailscaled[4599]: 2026/03/13 21:56:36 derphttp.Client.Recv: connecting to derp-4 (fra)
Fri Mar 13 22:56:36 2026 daemon.err tailscaled[4599]: 2026/03/13 21:56:36 magicsock: derp-4 connected; connGen=1
Fri Mar 13 22:56:36 2026 daemon.err tailscaled[4599]: 2026/03/13 21:56:36 [RATELIMIT] format("health(warnable=%s): ok") (1 dropped)
Fri Mar 13 22:56:36 2026 daemon.err tailscaled[4599]: 2026/03/13 21:56:36 health(warnable=no-derp-connection): ok
Fri Mar 13 22:56:42 2026 daemon.info hostapd: phy1-ap0: STA 44:f5:3e:8b:45:40 IEEE 802.11: authenticated
Fri Mar 13 22:56:46 2026 daemon.err tailscaled[4599]: 2026/03/13 21:56:46 magicsock: closing connection to derp-14 (idle), age 1m45s
Fri Mar 13 22:56:46 2026 daemon.err tailscaled[4599]: 2026/03/13 21:56:46 magicsock: closing connection to derp-22 (idle), age 1m45s
Fri Mar 13 22:56:46 2026 daemon.err tailscaled[4599]: 2026/03/13 21:56:46 magicsock: 1 active derp conns: derp-4=cr10s,wr10s
Fri Mar 13 22:56:47 2026 daemon.notice hostapd: phy1-ap0: STA-OPMODE-N_SS-CHANGED 44:f5:3e:8b:45:40 2
Fri Mar 13 22:56:47 2026 daemon.info hostapd: phy1-ap0: STA 44:f5:3e:8b:45:40 IEEE 802.11: associated (aid 1)
Fri Mar 13 22:56:47 2026 daemon.notice hostapd: phy1-ap0: AP-STA-CONNECTED 44:f5:3e:8b:45:40 auth_alg=sae
Fri Mar 13 22:56:47 2026 daemon.info hostapd: phy1-ap0: STA 44:f5:3e:8b:45:40 WPA: pairwise key handshake completed (RSN)
Fri Mar 13 22:56:47 2026 daemon.notice hostapd: phy1-ap0: EAPOL-4WAY-HS-COMPLETED 44:f5:3e:8b:45:40
Fri Mar 13 22:56:47 2026 daemon.info dnsmasq-dhcp[1]: DHCPREQUEST(br-lan) 192.168.88.219 44:f5:3e:8b:45:40
Fri Mar 13 22:56:47 2026 daemon.info dnsmasq-dhcp[1]: DHCPACK(br-lan) 192.168.88.219 44:f5:3e:8b:45:40 AndroidTV-Sypialnia
Fri Mar 13 22:56:48 2026 daemon.warn odhcpd[2552]: A default route is present but there is no public prefix on lan thus we announce no default route by setting ra_lifetime to 0!
Fri Mar 13 22:57:27 2026 daemon.notice netifd: wan (3971): udhcpc: sending renew to server 100.64.0.1
Fri Mar 13 22:58:24 2026 daemon.warn odhcpd[2552]: A default route is present but there is no public prefix on lan thus we announce no default route by setting ra_lifetime to 0!
Fri Mar 13 22:58:43 2026 daemon.notice netifd: wan (3971): udhcpc: sending renew to server 100.64.0.1
Fri Mar 13 22:59:21 2026 daemon.notice netifd: wan (3971): udhcpc: sending renew to server 100.64.0.1
Fri Mar 13 22:59:40 2026 daemon.notice netifd: wan (3971): udhcpc: sending renew to server 100.64.0.1
Fri Mar 13 22:59:44 2026 daemon.notice netifd: wan (3971): udhcpc: broadcasting renew
Fri Mar 13 22:59:44 2026 daemon.notice netifd: wan (3971): udhcpc: lease of 100.103.149.193 obtained from 100.64.0.1, lease time 300

8 Odpowiedź przez pazdzioch

  • Zarejestrowany: 2018-05-25
  • Posty: 494

Odp: Tailscale VPS ExidNode - router problem z PBR

Doszedł kolejny problem podcasz moim kombinacji, chciałem zainstalowac dnsmasq-full poprzez

opkg remove dnsmasq && opkg install dnsmasq-full

ale utracilem dostep do neta smile pobrałem recznie pliki .ipk do mojej wersji 24.10 / cortexa53 a doklaniej dnsmasq-full / libnettle8 , wrzucilem do /tmp , chcialem rpzez putty zainstalowac ale wywala błedy


root@OpenWrt:~# opkg install /tmp/dnsmasq-full_*.ipk
Unknown package 'dnsmasq-full'.
Collected errors:
* pkg_hash_check_unresolved: cannot find dependency libnettle8 for dnsmasq-full
* pkg_hash_check_unresolved: cannot find dependency libnetfilter-conntrack3 for                               dnsmasq-full
* pkg_hash_fetch_best_installation_candidate: Packages for dnsmasq-full found,                               but incompatible with the architectures configured
* opkg_install_cmd: Cannot install package dnsmasq-full.
root@OpenWrt:~# opkg install /tmp/libnettle8_*.ipk
Unknown package 'libnettle8'.
Collected errors:
* pkg_hash_check_unresolved: cannot find dependency libgmp10 for libnettle8
* pkg_hash_fetch_best_installation_candidate: Packages for libnettle8 found, but incompatible with the architectures configured
* opkg_install_cmd: Cannot install package libnettle8.
root@OpenWrt:~# opkg install /tmp/libnetfilter-conntrack3_*.ipk
Unknown package 'libnetfilter-conntrack3'.
Collected errors:
* pkg_hash_check_unresolved: cannot find dependency libnfnetlink0 for libnetfilter-conntrack3
* pkg_hash_fetch_best_installation_candidate: Packages for libnetfilter-conntrack3 found, but incompatible with the architectures configured
* opkg_install_cmd: Cannot install package libnetfilter-conntrack3.

9 Odpowiedź przez pazdzioch

  • Zarejestrowany: 2018-05-25
  • Posty: 494

Odp: Tailscale VPS ExidNode - router problem z PBR

Udało mi się router przywrócić do życia, zainstalowałem na vps serwer wireguard, i na nim polityka pbr działa bez problemu.

Wolał by użyć Tailscale aby nie płacić za serwer