PPTP client MTU value problem

still the same wifi no internet access

Ok but post a traceroute.

traceroute to openwrt.org (139.59.209.225), 30 hops max, 38 byte packets
 1  172.16.11.1  54.379 ms
 2  103.3.60.3  48.079 ms
 3  139.162.0.9  58.480 ms
 4  192.80.17.117  57.279 ms
 5  *
 6  129.250.7.9  317.736 ms
 7  129.250.6.14  399.374 ms
 8  168.143.229.122  292.276 ms
 9  138.197.250.136  306.516 ms
10  *
11  *
12  139.59.209.225  392.454 ms

From the wireless client not the router.

tracepath google.com
 1?: [LOCALHOST]                      pmtu 1500
 1:  OpenWrt.lan                                           2.929ms                               1:  OpenWrt.lan                                           3.542ms
 2:  no reply                                    3:  no reply
 4:  no reply                                    5:  no reply
 6:  no reply
 7:  no reply                                    8:  no reply
 9:  no reply                                   10:  no reply
11:  no reply                                   12:  no reply
13:  no reply
14:  no reply
^C
$
tracepath google.com
 1?: [LOCALHOST]                      pmtu 1500
 1:  OpenWrt.lan                                           2.929ms                               1:  OpenWrt.lan                                           3.542ms
 2:  no reply                                    3:  no reply
 4:  no reply                                    5:  no reply
 6:  no reply
 7:  no reply                                    8:  no reply
 9:  no reply                                   10:  no reply
11:  no reply                                   12:  no reply
13:  no reply
14:  no reply
^C
$

What is the output of iptables-save -c ?


BusyBox v1.30.1 () built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 19.07.2, r10947-65030d81f3
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:~# iptables-save -c
# Generated by iptables-save v1.8.3 on Thu Nov 12 11:03:05 2020
*nat
:PREROUTING ACCEPT [71:7618]
:INPUT ACCEPT [33:2385]
:OUTPUT ACCEPT [47:3480]
:POSTROUTING ACCEPT [17:1480]
:postrouting_lan_rule - [0:0]
:postrouting_rule - [0:0]
:postrouting_wan_rule - [0:0]
:prerouting_lan_rule - [0:0]
:prerouting_rule - [0:0]
:prerouting_wan_rule - [0:0]
:zone_lan_postrouting - [0:0]
:zone_lan_prerouting - [0:0]
:zone_wan_postrouting - [0:0]
:zone_wan_prerouting - [0:0]
[71:7618] -A PREROUTING -m comment --comment "!fw3: Custom prerouting rule chain" -j prerouting_rule
[70:7534] -A PREROUTING -i br-lan -m comment --comment "!fw3" -j zone_lan_prerouting
[0:0] -A PREROUTING -i eth0.2 -m comment --comment "!fw3" -j zone_wan_prerouting
[1:84] -A PREROUTING -i pptp-vpn -m comment --comment "!fw3" -j zone_wan_prerouting
[0:0] -A PREROUTING -i usb0 -m comment --comment "!fw3" -j zone_wan_prerouting
[75:7779] -A POSTROUTING -m comment --comment "!fw3: Custom postrouting rule chain" -j postrouting_rule
[1:328] -A POSTROUTING -o br-lan -m comment --comment "!fw3" -j zone_lan_postrouting
[0:0] -A POSTROUTING -o eth0.2 -m comment --comment "!fw3" -j zone_wan_postrouting
[40:5107] -A POSTROUTING -o pptp-vpn -m comment --comment "!fw3" -j zone_wan_postrouting
[18:1192] -A POSTROUTING -o usb0 -m comment --comment "!fw3" -j zone_wan_postrouting
[1:328] -A zone_lan_postrouting -m comment --comment "!fw3: Custom lan postrouting rule chain" -j postrouting_lan_rule
[70:7534] -A zone_lan_prerouting -m comment --comment "!fw3: Custom lan prerouting rule chain" -j prerouting_lan_rule
[58:6299] -A zone_wan_postrouting -m comment --comment "!fw3: Custom wan postrouting rule chain" -j postrouting_wan_rule
[58:6299] -A zone_wan_postrouting -m comment --comment "!fw3" -j MASQUERADE
[1:84] -A zone_wan_prerouting -m comment --comment "!fw3: Custom wan prerouting rule chain" -j prerouting_wan_rule
COMMIT
# Completed on Thu Nov 12 11:03:05 2020
# Generated by iptables-save v1.8.3 on Thu Nov 12 11:03:05 2020
*raw
:PREROUTING ACCEPT [2107:481137]
:OUTPUT ACCEPT [1438:468632]
:zone_lan_helper - [0:0]
[1127:162509] -A PREROUTING -i br-lan -m comment --comment "!fw3: lan CT helper assignment" -j zone_lan_helper
[0:0] -A zone_lan_helper -p udp -m comment --comment "!fw3: Amanda backup and archiving proto" -m udp --dport 10080 -j CT --helper amanda
[0:0] -A zone_lan_helper -p udp -m comment --comment "!fw3: RAS proto tracking" -m udp --dport 1719 -j CT --helper RAS
[0:0] -A zone_lan_helper -p tcp -m comment --comment "!fw3: Q.931 proto tracking" -m tcp --dport 1720 -j CT --helper Q.931
[0:0] -A zone_lan_helper -p tcp -m comment --comment "!fw3: IRC DCC connection tracking" -m tcp --dport 6667 -j CT --helper irc
[0:0] -A zone_lan_helper -p tcp -m comment --comment "!fw3: PPTP VPN connection tracking" -m tcp --dport 1723 -j CT --helper pptp
[0:0] -A zone_lan_helper -p tcp -m comment --comment "!fw3: SIP VoIP connection tracking" -m tcp --dport 5060 -j CT --helper sip
[0:0] -A zone_lan_helper -p udp -m comment --comment "!fw3: SIP VoIP connection tracking" -m udp --dport 5060 -j CT --helper sip
[0:0] -A zone_lan_helper -p udp -m comment --comment "!fw3: SNMP monitoring connection tracking" -m udp --dport 161 -j CT --helper snmp
[0:0] -A zone_lan_helper -p udp -m comment --comment "!fw3: TFTP connection tracking" -m udp --dport 69 -j CT --helper tftp
COMMIT
# Completed on Thu Nov 12 11:03:05 2020
# Generated by iptables-save v1.8.3 on Thu Nov 12 11:03:05 2020
*mangle
:PREROUTING ACCEPT [2113:481449]
:INPUT ACCEPT [1550:301445]
:FORWARD ACCEPT [553:179114]
:OUTPUT ACCEPT [1444:470928]
:POSTROUTING ACCEPT [1985:649562]
[0:0] -A FORWARD -o eth0.2 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
[0:0] -A FORWARD -i eth0.2 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
[23:1380] -A FORWARD -o pptp-vpn -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
[23:1364] -A FORWARD -i pptp-vpn -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
[0:0] -A FORWARD -o usb0 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
[0:0] -A FORWARD -i usb0 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
COMMIT
# Completed on Thu Nov 12 11:03:05 2020
# Generated by iptables-save v1.8.3 on Thu Nov 12 11:03:05 2020
*filter
:INPUT ACCEPT [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
:forwarding_lan_rule - [0:0]
:forwarding_rule - [0:0]
:forwarding_wan_rule - [0:0]
:input_lan_rule - [0:0]
:input_rule - [0:0]
:input_wan_rule - [0:0]
:output_lan_rule - [0:0]
:output_rule - [0:0]
:output_wan_rule - [0:0]
:reject - [0:0]
:syn_flood - [0:0]
:zone_lan_dest_ACCEPT - [0:0]
:zone_lan_forward - [0:0]
:zone_lan_input - [0:0]
:zone_lan_output - [0:0]
:zone_lan_src_ACCEPT - [0:0]
:zone_wan_dest_ACCEPT - [0:0]
:zone_wan_dest_REJECT - [0:0]
:zone_wan_forward - [0:0]
:zone_wan_input - [0:0]
:zone_wan_output - [0:0]
:zone_wan_src_REJECT - [0:0]
[160:14032] -A INPUT -i lo -m comment --comment "!fw3" -j ACCEPT
[1395:287673] -A INPUT -m comment --comment "!fw3: Custom input rule chain" -j input_rule
[1353:284376] -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3" -j ACCEPT
[4:240] -A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m comment --comment "!fw3" -j syn_flood
[33:2385] -A INPUT -i br-lan -m comment --comment "!fw3" -j zone_lan_input[0:0] -A INPUT -i eth0.2 -m comment --comment "!fw3" -j zone_wan_input
[1:84] -A INPUT -i pptp-vpn -m comment --comment "!fw3" -j zone_wan_input
[8:828] -A INPUT -i usb0 -m comment --comment "!fw3" -j zone_wan_input
[553:179114] -A FORWARD -m comment --comment "!fw3: Custom forwarding rule chain" -j forwarding_rule
[521:174031] -A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3" -j ACCEPT
[32:5083] -A FORWARD -i br-lan -m comment --comment "!fw3" -j zone_lan_forward
[0:0] -A FORWARD -i eth0.2 -m comment --comment "!fw3" -j zone_wan_forward[0:0] -A FORWARD -i pptp-vpn -m comment --comment "!fw3" -j zone_wan_forward
[0:0] -A FORWARD -i usb0 -m comment --comment "!fw3" -j zone_wan_forward
[0:0] -A FORWARD -m comment --comment "!fw3" -j reject
[160:14032] -A OUTPUT -o lo -m comment --comment "!fw3" -j ACCEPT
[1289:458628] -A OUTPUT -m comment --comment "!fw3: Custom output rule chain" -j output_rule
[1250:455980] -A OUTPUT -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3" -j ACCEPT
[1:328] -A OUTPUT -o br-lan -m comment --comment "!fw3" -j zone_lan_output[0:0] -A OUTPUT -o eth0.2 -m comment --comment "!fw3" -j zone_wan_output
[20:1128] -A OUTPUT -o pptp-vpn -m comment --comment "!fw3" -j zone_wan_output
[18:1192] -A OUTPUT -o usb0 -m comment --comment "!fw3" -j zone_wan_output[9:912] -A reject -p tcp -m comment --comment "!fw3" -j REJECT --reject-with tcp-reset
[0:0] -A reject -m comment --comment "!fw3" -j REJECT --reject-with icmp-port-unreachable
[4:240] -A syn_flood -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m limit --limit 25/sec --limit-burst 50 -m comment --comment "!fw3" -j RETURN
[0:0] -A syn_flood -m comment --comment "!fw3" -j DROP
[1:328] -A zone_lan_dest_ACCEPT -o br-lan -m comment --comment "!fw3" -j ACCEPT
[32:5083] -A zone_lan_forward -m comment --comment "!fw3: Custom lan forwarding rule chain" -j forwarding_lan_rule
[32:5083] -A zone_lan_forward -m comment --comment "!fw3: Zone lan to wan forwarding policy" -j zone_wan_dest_ACCEPT
[0:0] -A zone_lan_forward -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port forwards" -j ACCEPT
[0:0] -A zone_lan_forward -m comment --comment "!fw3" -j zone_lan_dest_ACCEPT
[33:2385] -A zone_lan_input -m comment --comment "!fw3: Custom lan input rule chain" -j input_lan_rule
[0:0] -A zone_lan_input -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port redirections" -j ACCEPT
[33:2385] -A zone_lan_input -m comment --comment "!fw3" -j zone_lan_src_ACCEPT
[1:328] -A zone_lan_output -m comment --comment "!fw3: Custom lan output rule chain" -j output_lan_rule
[1:328] -A zone_lan_output -m comment --comment "!fw3" -j zone_lan_dest_ACCEPT
[33:2385] -A zone_lan_src_ACCEPT -i br-lan -m conntrack --ctstate NEW,UNTRACKED -m comment --comment "!fw3" -j ACCEPT
[0:0] -A zone_wan_dest_ACCEPT -o eth0.2 -m conntrack --ctstate INVALID -m comment --comment "!fw3: Prevent NAT leakage" -j DROP
[0:0] -A zone_wan_dest_ACCEPT -o eth0.2 -m comment --comment "!fw3" -j ACCEPT
[12:480] -A zone_wan_dest_ACCEPT -o pptp-vpn -m conntrack --ctstate INVALID -m comment --comment "!fw3: Prevent NAT leakage" -j DROP
[40:5731] -A zone_wan_dest_ACCEPT -o pptp-vpn -m comment --comment "!fw3" -j ACCEPT
[0:0] -A zone_wan_dest_ACCEPT -o usb0 -m conntrack --ctstate INVALID -m comment --comment "!fw3: Prevent NAT leakage" -j DROP
[18:1192] -A zone_wan_dest_ACCEPT -o usb0 -m comment --comment "!fw3" -j ACCEPT
[0:0] -A zone_wan_dest_REJECT -o eth0.2 -m comment --comment "!fw3" -j reject
[0:0] -A zone_wan_dest_REJECT -o pptp-vpn -m comment --comment "!fw3" -j reject
[0:0] -A zone_wan_dest_REJECT -o usb0 -m comment --comment "!fw3" -j reject
[0:0] -A zone_wan_forward -m comment --comment "!fw3: Custom wan forwarding rule chain" -j forwarding_wan_rule
[0:0] -A zone_wan_forward -p esp -m comment --comment "!fw3: Allow-IPSec-ESP" -j zone_lan_dest_ACCEPT
[0:0] -A zone_wan_forward -p udp -m udp --dport 500 -m comment --comment "!fw3: Allow-ISAKMP" -j zone_lan_dest_ACCEPT
[0:0] -A zone_wan_forward -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port forwards" -j ACCEPT
[0:0] -A zone_wan_forward -m comment --comment "!fw3" -j zone_wan_dest_REJECT
[9:912] -A zone_wan_input -m comment --comment "!fw3: Custom wan input rule chain" -j input_wan_rule
[0:0] -A zone_wan_input -p udp -m udp --dport 68 -m comment --comment "!fw3: Allow-DHCP-Renew" -j ACCEPT
[0:0] -A zone_wan_input -p icmp -m icmp --icmp-type 8 -m comment --comment "!fw3: Allow-Ping" -j ACCEPT
[0:0] -A zone_wan_input -p igmp -m comment --comment "!fw3: Allow-IGMP" -j ACCEPT
[0:0] -A zone_wan_input -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port redirections" -j ACCEPT
[9:912] -A zone_wan_input -m comment --comment "!fw3" -j zone_wan_src_REJECT
[38:2320] -A zone_wan_output -m comment --comment "!fw3: Custom wan output rule chain" -j output_wan_rule
[38:2320] -A zone_wan_output -m comment --comment "!fw3" -j zone_wan_dest_ACCEPT
[0:0] -A zone_wan_src_REJECT -i eth0.2 -m comment --comment "!fw3" -j reject
[1:84] -A zone_wan_src_REJECT -i pptp-vpn -m comment --comment "!fw3" -j reject
[8:828] -A zone_wan_src_REJECT -i usb0 -m comment --comment "!fw3" -j reject
COMMIT
# Completed on Thu Nov 12 11:03:05 2020
root@OpenWrt:~#

Kernel log

[    0.000000] Linux version 4.14.171 (builder@buildhost) (gcc version 7.5.0 (OpenWrt GCC 7.5.0 r10947-65030d81f3)) #0 Thu Feb 27 21:05:12 2020
[    0.000000] Board has DDR2
[    0.000000] Analog PMU set to hw control
[    0.000000] Digital PMU set to hw control
[    0.000000] SoC Type: MediaTek MT7620A ver:2 eco:6
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019650 (MIPS 24KEc)
[    0.000000] MIPS: machine is YOUKU YK1
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] On node 0 totalpages: 32768
[    0.000000] free_area_init_node: node 0, pgdat 8047c5d0, node_mem_map 81000040
[    0.000000]   Normal zone: 256 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 32768 pages, LIFO batch:7
[    0.000000] random: get_random_bytes called from 0x8047f740 with crng_init=0
[    0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[    0.000000] pcpu-alloc: [0] 0 
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00062210
[    0.000000] Readback ErrCtl register=00062210
[    0.000000] Memory: 123780K/131072K available (3915K kernel code, 180K rwdata, 500K rodata, 1220K init, 215K bss, 7292K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS: 256
[    0.000000] CPU Clock: 580MHz
[    0.000000] clocksource: systick: mask: 0xffff max_cycles: 0xffff, max_idle_ns: 583261500 ns
[    0.000000] systick: enable autosleep mode
[    0.000000] systick: running - mult: 214748, shift: 32
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6590553264 ns
[    0.000012] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405115902ns
[    0.015478] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.087726] pid_max: default: 32768 minimum: 301
[    0.097134] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.110167] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.130353] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.149836] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.162015] pinctrl core: initialized pinctrl subsystem
[    0.173632] NET: Registered protocol family 16
[    0.205849] rt2880_gpio 10000600.gpio: registering 24 gpios
[    0.216890] rt2880_gpio 10000600.gpio: registering 24 irq handlers
[    0.229482] rt2880_gpio 10000638.gpio: registering 16 gpios
[    0.240486] rt2880_gpio 10000638.gpio: registering 16 irq handlers
[    0.253088] rt2880_gpio 10000660.gpio: registering 32 gpios
[    0.264090] rt2880_gpio 10000660.gpio: registering 32 irq handlers
[    0.276679] rt2880_gpio 10000688.gpio: registering 1 gpios
[    0.287509] rt2880_gpio 10000688.gpio: registering 1 irq handlers
[    0.305019] clocksource: Switched to clocksource systick
[    0.316687] NET: Registered protocol family 2
[    0.326267] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.340056] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.352641] TCP: Hash tables configured (established 1024 bind 1024)
[    0.365428] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.376954] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.389657] NET: Registered protocol family 1
[    0.398251] PCI: CLS 0 bytes, default 32
[    0.401040] rt-timer 10000100.timer: maximum frequency is 1220Hz
[    0.413793] Crashlog allocated RAM at address 0x3f00000
[    0.425905] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[    0.444769] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.456272] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.486495] io scheduler noop registered
[    0.494140] io scheduler deadline registered (default)
[    0.505425] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.520912] console [ttyS0] disabled
[    0.527972] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 20, base_baud = 2500000) is a Palmchip BK-3103
[    0.547643] console [ttyS0] enabled
[    0.561459] bootconsole [early0] disabled
[    0.585459] spi spi0.0: force spi mode3
[    0.593851] m25p80 spi0.0: found w25q256, expected mx25l25635f
[    0.616526] m25p80 spi0.0: w25q256 (32768 Kbytes)
[    0.625963] 4 fixed-partitions partitions found on MTD device spi0.0
[    0.638638] Creating 4 MTD partitions on "spi0.0":
[    0.648208] 0x000000000000-0x000000030000 : "u-boot"
[    0.659090] 0x000000030000-0x000000040000 : "u-boot-env"
[    0.670615] 0x000000040000-0x000000050000 : "factory"
[    0.681647] 0x000000050000-0x000002000000 : "firmware"
[    0.695755] 2 uimage-fw partitions found on MTD device firmware
[    0.707606] Creating 2 MTD partitions on "firmware":
[    0.717524] 0x000000000000-0x00000017df9f : "kernel"
[    0.728337] 0x00000017df9f-0x000001fb0000 : "rootfs"
[    0.739128] mtd: device 5 (rootfs) set to be root filesystem
[    0.752001] 1 squashfs-split partitions found on MTD device rootfs
[    0.764392] 0x0000005a0000-0x000001fb0000 : "rootfs_data"
[    0.776960] libphy: Fixed MDIO Bus: probed
[    0.793884] gsw: setting port4 to ephy mode
[    0.802522] mtk_soc_eth 10100000.ethernet: loaded mt7620 driver
[    0.815112] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5
[    0.832133] rt2880_wdt 10000120.watchdog: Initialized
[    0.843640] NET: Registered protocol family 10
[    0.856807] Segment Routing with IPv6
[    0.864212] NET: Registered protocol family 17
[    0.873193] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    0.899038] 8021q: 802.1Q VLAN Support v1.8
[    0.916139] VFS: Mounted root (squashfs filesystem) readonly on device 31:5.
[    0.936995] Freeing unused kernel memory: 1220K
[    0.946051] This architecture does not have kernel memory protection.
[    1.877219] init: Console is alive
[    1.884241] init: - watchdog -
[    2.434992] random: fast init done
[    3.690009] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    3.816439] usbcore: registered new interface driver usbfs
[    3.827531] usbcore: registered new interface driver hub
[    3.838281] usbcore: registered new device driver usb
[    3.854425] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    3.869328] ehci-platform: EHCI generic platform driver
[    3.890171] phy phy-usbphy.0: remote usb device wakeup disabled
[    3.901988] phy phy-usbphy.0: UTMI 16bit 30MHz
[    3.910883] ehci-platform 101c0000.ehci: EHCI Host Controller
[    3.922386] ehci-platform 101c0000.ehci: new USB bus registered, assigned bus number 1
[    3.938301] ehci-platform 101c0000.ehci: irq 26, io mem 0x101c0000
[    3.959154] ehci-platform 101c0000.ehci: USB 2.0 started, EHCI 1.00
[    3.972690] hub 1-0:1.0: USB hub found
[    3.980640] hub 1-0:1.0: 1 port detected
[    3.991980] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    4.006101] ohci-platform: OHCI generic platform driver
[    4.016898] ohci-platform 101c1000.ohci: Generic Platform OHCI controller
[    4.030522] ohci-platform 101c1000.ohci: new USB bus registered, assigned bus number 2
[    4.046427] ohci-platform 101c1000.ohci: irq 26, io mem 0x101c1000
[    4.084463] hub 2-0:1.0: USB hub found
[    4.092414] hub 2-0:1.0: 1 port detected
[    4.138515] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    4.157201] init: - preinit -
[    4.267024] usb 1-1: new high-speed USB device number 2 using ehci-platform
[    5.783104] 8021q: adding VLAN 0 to HW filter on device eth0
[    5.947143] random: procd: uninitialized urandom read (4 bytes read)
[    8.818881] jffs2: notice: (440) jffs2_build_xattr_subsystem: complete building xattr subsystem, 7 of xdatum (0 unchecked, 7 orphan) and 24 of xref (3 dead, 21 orphan) found.
[    8.852342] mount_root: overlay filesystem has not been fully initialized yet
[    8.868244] mount_root: switching to jffs2 overlay
[    8.970086] overlayfs: upper fs does not support tmpfile.
[    8.987916] urandom-seed: Seed file not found (/etc/urandom.seed)
[    9.151391] procd: - early -
[    9.159362] procd: - watchdog -
[    9.818163] random: jshn: uninitialized urandom read (4 bytes read)
[    9.918989] procd: - watchdog -
[    9.940993] procd: - ubus -
[   10.207855] random: jshn: uninitialized urandom read (4 bytes read)
[   10.388629] random: ubusd: uninitialized urandom read (4 bytes read)
[   10.451100] procd: - init -
[   11.828556] kmodloader: loading kernel modules from /etc/modules.d/*
[   11.871397] tun: Universal TUN/TAP device driver, 1.6
[   11.901382] gre: GRE over IPv4 demultiplexor driver
[   11.926466] ip_gre: GRE over IPv4 tunneling driver
[   11.987611] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   12.051048] Netfilter messages via NETLINK v0.30.
[   12.100459] ip_set: protocol 6
[   12.230618] Loading modules backported from Linux version v4.19.98-0-gd183c8e2647a
[   12.245787] Backport generated by backports.git v4.19.98-1-0-g8204eb99
[   12.358025] ip_tables: (C) 2000-2006 Netfilter Core Team
[   12.418216] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[   12.558399] urngd: jent-rng init failed, err: 2
[   12.597718] ctnetlink v0.93: registering with nfnetlink.
[   12.714317] wireguard: WireGuard 0.0.20190702 loaded. See www.wireguard.com for information.
[   12.731220] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
[   12.773922] xt_time: kernel timezone is -0000
[   12.785763] usbcore: registered new interface driver cdc_ether
[   12.876363] PPP generic driver version 2.4.2
[   12.888304] PPP MPPE Compression module registered
[   12.899756] NET: Registered protocol family 24
[   12.910676] PPTP driver version 0.8.5
[   12.921832] usbcore: registered new interface driver rndis_host
[   12.971988] rt2800_wmac 10180000.wmac: loaded eeprom from mtd device "factory"
[   12.986478] ieee80211 phy0: rt2x00_set_rt: Info - RT chipset 6352, rev 0500 detected
[   13.001948] ieee80211 phy0: rt2x00_set_rf: Info - RF chipset 7620 detected
[   13.016419] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
[   13.100990] kmodloader: done loading kernel modules from /etc/modules.d/*
[   42.699661] 8021q: adding VLAN 0 to HW filter on device eth0
[   42.734377] br-lan: port 1(eth0.1) entered blocking state
[   42.745411] br-lan: port 1(eth0.1) entered disabled state
[   42.756582] device eth0.1 entered promiscuous mode
[   42.766179] device eth0 entered promiscuous mode
[   42.854890] br-lan: port 1(eth0.1) entered blocking state
[   42.865700] br-lan: port 1(eth0.1) entered forwarding state
[   42.877061] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   43.715218] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   46.802148] ieee80211 phy0: rt2800_rf_self_txdc_cal: Info - RF Tx self calibration start
[   46.818836] ieee80211 phy0: rt2800_rf_self_txdc_cal: Info - RF Tx self calibration end
[   48.670683] ieee80211 phy0: rt2800_loft_iq_calibration: Info - LOFT Calibration Done!
[   48.690177] ieee80211 phy0: rt2800_iq_search: Info - IQCalibration Start!
[   48.718132] ieee80211 phy0: rt2800_iq_search: Info - IQCalibration Done! CH = 0, (gain= 0, phase= 2)
[   48.737256] ieee80211 phy0: rt2800_iq_search: Info - IQCalibration Start!
[   48.765183] ieee80211 phy0: rt2800_iq_search: Info - IQCalibration Done! CH = 1, (gain= f, phase= 0)
[   48.783425] ieee80211 phy0: rt2800_loft_iq_calibration: Info - TX IQ Calibration Done!
[   48.812624] ieee80211 phy0: rt2800_rxiq_calibration: Info - RXIQ G_imb=-3, Ph_rx=-1
[   48.838164] ieee80211 phy0: rt2800_rxiq_calibration: Info - RXIQ G_imb=0, Ph_rx=-2
[   48.863377] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[   48.882661] br-lan: port 2(wlan0) entered blocking state
[   48.893331] br-lan: port 2(wlan0) entered disabled state
[   48.904408] device wlan0 entered promiscuous mode
[   48.926379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   48.939328] br-lan: port 2(wlan0) entered blocking state
[   48.949968] br-lan: port 2(wlan0) entered forwarding state
[   62.914266] usb 1-1: USB disconnect, device number 2
[   63.420467] usb 1-1: new high-speed USB device number 3 using ehci-platform
[   63.677175] rndis_host 1-1:1.0 usb0: register 'rndis_host' at usb-101c0000.ehci-1, RNDIS device, 02:64:3a:74:9f:17
[   71.587553] random: crng init done
[   71.594341] random: 6 urandom warning(s) missed due to ratelimiting
[  176.916046] br-lan: port 2(wlan0) entered disabled state
[  176.926843] br-lan: port 1(eth0.1) entered disabled state
[  177.071974] device eth0.1 left promiscuous mode
[  177.081288] br-lan: port 1(eth0.1) entered disabled state
[  177.111376] IPv6: ADDRCONF(NETDEV_UP): eth0.1: link is not ready
[  177.126955] device wlan0 left promiscuous mode
[  177.136102] br-lan: port 2(wlan0) entered disabled state
[  177.803095] device eth0 left promiscuous mode
[  182.307513] 8021q: adding VLAN 0 to HW filter on device eth0
[  182.342403] br-lan: port 1(eth0.1) entered blocking state
[  182.353435] br-lan: port 1(eth0.1) entered disabled state
[  182.364609] device eth0.1 entered promiscuous mode
[  182.374205] device eth0 entered promiscuous mode
[  182.459992] br-lan: port 1(eth0.1) entered blocking state
[  182.470821] br-lan: port 1(eth0.1) entered forwarding state
[  182.482163] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[  183.379130] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[  185.401005] ieee80211 phy0: rt2800_rf_self_txdc_cal: Info - RF Tx self calibration start
[  185.417633] ieee80211 phy0: rt2800_rf_self_txdc_cal: Info - RF Tx self calibration end
[  189.513432] ieee80211 phy0: rt2800_loft_iq_calibration: Info - LOFT Calibration Done!
[  189.532922] ieee80211 phy0: rt2800_iq_search: Info - IQCalibration Start!
[  189.560874] ieee80211 phy0: rt2800_iq_search: Info - IQCalibration Done! CH = 0, (gain= d, phase= 2)
[  189.579997] ieee80211 phy0: rt2800_iq_search: Info - IQCalibration Start!
[  189.607916] ieee80211 phy0: rt2800_iq_search: Info - IQCalibration Done! CH = 1, (gain= 0, phase=3e)
[  189.626156] ieee80211 phy0: rt2800_loft_iq_calibration: Info - TX IQ Calibration Done!
[  189.655390] ieee80211 phy0: rt2800_rxiq_calibration: Info - RXIQ G_imb=-3, Ph_rx=3
[  189.680752] ieee80211 phy0: rt2800_rxiq_calibration: Info - RXIQ G_imb=0, Ph_rx=-1
[  189.705492] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[  189.747928] br-lan: port 2(wlan0) entered blocking state
[  189.758596] br-lan: port 2(wlan0) entered disabled state
[  189.769595] device wlan0 entered promiscuous mode
[  189.790564] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  189.803522] br-lan: port 2(wlan0) entered blocking state
[  189.814162] br-lan: port 2(wlan0) entered forwarding state
[  234.088202] pptp-vpn: renamed from ppp0
[  368.189655] pptp-vpn: renamed from ppp0
[  370.038066] pptp-vpn: renamed from ppp0
[  509.497964] pptp-vpn: renamed from ppp0
[ 1803.162601] pptp-vpn: renamed from ppp0
[ 2056.779958] pptp-vpn: renamed from ppp0
[ 2740.227036] pptp-vpn: renamed from ppp0
[ 3259.045091] pptp-vpn: renamed from ppp0
[ 3270.164065] pptp-vpn: renamed from ppp0
[ 4498.689845] pptp-vpn: renamed from ppp0

@vgaetera I don't see anything out of the ordinary. I suspect the vpn server is dropping them to deny NATed hosts.
@andysyam enter this command and try again. iptables -t mangle -A PREROUTING -j TTL --ttl-set 65

1 Like

where is the file I need to change to add this

iptables -t mangle -A PREROUTING -j TTL --ttl-set 65

Just type it in the ssh. If it works we'll make it permanent.

root@OpenWrt:~# iptables -t mangle -A PREROUTING -j TTL --ttl-set 65
iptables v1.8.3 (legacy): unknown option "--ttl-set"
Try `iptables -h' or 'iptables --help' for more information.

Install package kmod-ipt-ipopt

root@OpenWrt:~# opkg install kmod-ipt-ipopt
Installing kmod-ipt-ipopt (4.14.171-1) to root...
Downloading http://downloads.openwrt.org/releases/19.07.2/targets/ramips/mt7620/packages/kmod-ipt-ipopt_4.14.171-1_mipsel_24kc.ipk
Configuring kmod-ipt-ipopt.
root@OpenWrt:~# iptables -t mangle -A PREROUTING -j TTL --ttl-set 65
iptables v1.8.3 (legacy): unknown option "--ttl-set"
Try `iptables -h' or 'iptables --help' for more information.

Waoo unknown option "--ttl-set"

Is this installed? kmod-ipt-core and iptables-mod-ipopt

root@OpenWrt:~# opkg install kmod-ipt-ipopt kmod-ipt-core
Installing kmod-ipt-ipopt (4.14.171-1) to root...
Downloading http://downloads.openwrt.org/releases/19.07.2/targets/ramips/mt7620/packages/kmod-ipt-ipopt_4.14.171-1_mipsel_24kc.ipk
Package kmod-ipt-core (4.14.171-1) installed in root is up to date.
Configuring kmod-ipt-ipopt.
root@OpenWrt:~# 
root@OpenWrt:~# 
root@OpenWrt:~# iptables -t mangle -A PREROUTING -j TTL --ttl-set 65
iptables v1.8.3 (legacy): unknown option "--ttl-set"
Try `iptables -h' or 'iptables --help' for more information.

do I have to install all kernel modules?

Run this: opkg install iptables-mod-ipopt