still the same wifi no internet access
Ok but post a traceroute.
traceroute to openwrt.org (139.59.209.225), 30 hops max, 38 byte packets
1 172.16.11.1 54.379 ms
2 103.3.60.3 48.079 ms
3 139.162.0.9 58.480 ms
4 192.80.17.117 57.279 ms
5 *
6 129.250.7.9 317.736 ms
7 129.250.6.14 399.374 ms
8 168.143.229.122 292.276 ms
9 138.197.250.136 306.516 ms
10 *
11 *
12 139.59.209.225 392.454 ms
From the wireless client not the router.
tracepath google.com
1?: [LOCALHOST] pmtu 1500
1: OpenWrt.lan 2.929ms 1: OpenWrt.lan 3.542ms
2: no reply 3: no reply
4: no reply 5: no reply
6: no reply
7: no reply 8: no reply
9: no reply 10: no reply
11: no reply 12: no reply
13: no reply
14: no reply
^C
$
tracepath google.com
1?: [LOCALHOST] pmtu 1500
1: OpenWrt.lan 2.929ms 1: OpenWrt.lan 3.542ms
2: no reply 3: no reply
4: no reply 5: no reply
6: no reply
7: no reply 8: no reply
9: no reply 10: no reply
11: no reply 12: no reply
13: no reply
14: no reply
^C
$
What is the output of iptables-save -c
?
BusyBox v1.30.1 () built-in shell (ash)
_______ ________ __
| |.-----.-----.-----.| | | |.----.| |_
| - || _ | -__| || | | || _|| _|
|_______|| __|_____|__|__||________||__| |____|
|__| W I R E L E S S F R E E D O M
-----------------------------------------------------
OpenWrt 19.07.2, r10947-65030d81f3
-----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:~# iptables-save -c
# Generated by iptables-save v1.8.3 on Thu Nov 12 11:03:05 2020
*nat
:PREROUTING ACCEPT [71:7618]
:INPUT ACCEPT [33:2385]
:OUTPUT ACCEPT [47:3480]
:POSTROUTING ACCEPT [17:1480]
:postrouting_lan_rule - [0:0]
:postrouting_rule - [0:0]
:postrouting_wan_rule - [0:0]
:prerouting_lan_rule - [0:0]
:prerouting_rule - [0:0]
:prerouting_wan_rule - [0:0]
:zone_lan_postrouting - [0:0]
:zone_lan_prerouting - [0:0]
:zone_wan_postrouting - [0:0]
:zone_wan_prerouting - [0:0]
[71:7618] -A PREROUTING -m comment --comment "!fw3: Custom prerouting rule chain" -j prerouting_rule
[70:7534] -A PREROUTING -i br-lan -m comment --comment "!fw3" -j zone_lan_prerouting
[0:0] -A PREROUTING -i eth0.2 -m comment --comment "!fw3" -j zone_wan_prerouting
[1:84] -A PREROUTING -i pptp-vpn -m comment --comment "!fw3" -j zone_wan_prerouting
[0:0] -A PREROUTING -i usb0 -m comment --comment "!fw3" -j zone_wan_prerouting
[75:7779] -A POSTROUTING -m comment --comment "!fw3: Custom postrouting rule chain" -j postrouting_rule
[1:328] -A POSTROUTING -o br-lan -m comment --comment "!fw3" -j zone_lan_postrouting
[0:0] -A POSTROUTING -o eth0.2 -m comment --comment "!fw3" -j zone_wan_postrouting
[40:5107] -A POSTROUTING -o pptp-vpn -m comment --comment "!fw3" -j zone_wan_postrouting
[18:1192] -A POSTROUTING -o usb0 -m comment --comment "!fw3" -j zone_wan_postrouting
[1:328] -A zone_lan_postrouting -m comment --comment "!fw3: Custom lan postrouting rule chain" -j postrouting_lan_rule
[70:7534] -A zone_lan_prerouting -m comment --comment "!fw3: Custom lan prerouting rule chain" -j prerouting_lan_rule
[58:6299] -A zone_wan_postrouting -m comment --comment "!fw3: Custom wan postrouting rule chain" -j postrouting_wan_rule
[58:6299] -A zone_wan_postrouting -m comment --comment "!fw3" -j MASQUERADE
[1:84] -A zone_wan_prerouting -m comment --comment "!fw3: Custom wan prerouting rule chain" -j prerouting_wan_rule
COMMIT
# Completed on Thu Nov 12 11:03:05 2020
# Generated by iptables-save v1.8.3 on Thu Nov 12 11:03:05 2020
*raw
:PREROUTING ACCEPT [2107:481137]
:OUTPUT ACCEPT [1438:468632]
:zone_lan_helper - [0:0]
[1127:162509] -A PREROUTING -i br-lan -m comment --comment "!fw3: lan CT helper assignment" -j zone_lan_helper
[0:0] -A zone_lan_helper -p udp -m comment --comment "!fw3: Amanda backup and archiving proto" -m udp --dport 10080 -j CT --helper amanda
[0:0] -A zone_lan_helper -p udp -m comment --comment "!fw3: RAS proto tracking" -m udp --dport 1719 -j CT --helper RAS
[0:0] -A zone_lan_helper -p tcp -m comment --comment "!fw3: Q.931 proto tracking" -m tcp --dport 1720 -j CT --helper Q.931
[0:0] -A zone_lan_helper -p tcp -m comment --comment "!fw3: IRC DCC connection tracking" -m tcp --dport 6667 -j CT --helper irc
[0:0] -A zone_lan_helper -p tcp -m comment --comment "!fw3: PPTP VPN connection tracking" -m tcp --dport 1723 -j CT --helper pptp
[0:0] -A zone_lan_helper -p tcp -m comment --comment "!fw3: SIP VoIP connection tracking" -m tcp --dport 5060 -j CT --helper sip
[0:0] -A zone_lan_helper -p udp -m comment --comment "!fw3: SIP VoIP connection tracking" -m udp --dport 5060 -j CT --helper sip
[0:0] -A zone_lan_helper -p udp -m comment --comment "!fw3: SNMP monitoring connection tracking" -m udp --dport 161 -j CT --helper snmp
[0:0] -A zone_lan_helper -p udp -m comment --comment "!fw3: TFTP connection tracking" -m udp --dport 69 -j CT --helper tftp
COMMIT
# Completed on Thu Nov 12 11:03:05 2020
# Generated by iptables-save v1.8.3 on Thu Nov 12 11:03:05 2020
*mangle
:PREROUTING ACCEPT [2113:481449]
:INPUT ACCEPT [1550:301445]
:FORWARD ACCEPT [553:179114]
:OUTPUT ACCEPT [1444:470928]
:POSTROUTING ACCEPT [1985:649562]
[0:0] -A FORWARD -o eth0.2 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
[0:0] -A FORWARD -i eth0.2 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
[23:1380] -A FORWARD -o pptp-vpn -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
[23:1364] -A FORWARD -i pptp-vpn -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
[0:0] -A FORWARD -o usb0 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
[0:0] -A FORWARD -i usb0 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
COMMIT
# Completed on Thu Nov 12 11:03:05 2020
# Generated by iptables-save v1.8.3 on Thu Nov 12 11:03:05 2020
*filter
:INPUT ACCEPT [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
:forwarding_lan_rule - [0:0]
:forwarding_rule - [0:0]
:forwarding_wan_rule - [0:0]
:input_lan_rule - [0:0]
:input_rule - [0:0]
:input_wan_rule - [0:0]
:output_lan_rule - [0:0]
:output_rule - [0:0]
:output_wan_rule - [0:0]
:reject - [0:0]
:syn_flood - [0:0]
:zone_lan_dest_ACCEPT - [0:0]
:zone_lan_forward - [0:0]
:zone_lan_input - [0:0]
:zone_lan_output - [0:0]
:zone_lan_src_ACCEPT - [0:0]
:zone_wan_dest_ACCEPT - [0:0]
:zone_wan_dest_REJECT - [0:0]
:zone_wan_forward - [0:0]
:zone_wan_input - [0:0]
:zone_wan_output - [0:0]
:zone_wan_src_REJECT - [0:0]
[160:14032] -A INPUT -i lo -m comment --comment "!fw3" -j ACCEPT
[1395:287673] -A INPUT -m comment --comment "!fw3: Custom input rule chain" -j input_rule
[1353:284376] -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3" -j ACCEPT
[4:240] -A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m comment --comment "!fw3" -j syn_flood
[33:2385] -A INPUT -i br-lan -m comment --comment "!fw3" -j zone_lan_input[0:0] -A INPUT -i eth0.2 -m comment --comment "!fw3" -j zone_wan_input
[1:84] -A INPUT -i pptp-vpn -m comment --comment "!fw3" -j zone_wan_input
[8:828] -A INPUT -i usb0 -m comment --comment "!fw3" -j zone_wan_input
[553:179114] -A FORWARD -m comment --comment "!fw3: Custom forwarding rule chain" -j forwarding_rule
[521:174031] -A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3" -j ACCEPT
[32:5083] -A FORWARD -i br-lan -m comment --comment "!fw3" -j zone_lan_forward
[0:0] -A FORWARD -i eth0.2 -m comment --comment "!fw3" -j zone_wan_forward[0:0] -A FORWARD -i pptp-vpn -m comment --comment "!fw3" -j zone_wan_forward
[0:0] -A FORWARD -i usb0 -m comment --comment "!fw3" -j zone_wan_forward
[0:0] -A FORWARD -m comment --comment "!fw3" -j reject
[160:14032] -A OUTPUT -o lo -m comment --comment "!fw3" -j ACCEPT
[1289:458628] -A OUTPUT -m comment --comment "!fw3: Custom output rule chain" -j output_rule
[1250:455980] -A OUTPUT -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3" -j ACCEPT
[1:328] -A OUTPUT -o br-lan -m comment --comment "!fw3" -j zone_lan_output[0:0] -A OUTPUT -o eth0.2 -m comment --comment "!fw3" -j zone_wan_output
[20:1128] -A OUTPUT -o pptp-vpn -m comment --comment "!fw3" -j zone_wan_output
[18:1192] -A OUTPUT -o usb0 -m comment --comment "!fw3" -j zone_wan_output[9:912] -A reject -p tcp -m comment --comment "!fw3" -j REJECT --reject-with tcp-reset
[0:0] -A reject -m comment --comment "!fw3" -j REJECT --reject-with icmp-port-unreachable
[4:240] -A syn_flood -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m limit --limit 25/sec --limit-burst 50 -m comment --comment "!fw3" -j RETURN
[0:0] -A syn_flood -m comment --comment "!fw3" -j DROP
[1:328] -A zone_lan_dest_ACCEPT -o br-lan -m comment --comment "!fw3" -j ACCEPT
[32:5083] -A zone_lan_forward -m comment --comment "!fw3: Custom lan forwarding rule chain" -j forwarding_lan_rule
[32:5083] -A zone_lan_forward -m comment --comment "!fw3: Zone lan to wan forwarding policy" -j zone_wan_dest_ACCEPT
[0:0] -A zone_lan_forward -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port forwards" -j ACCEPT
[0:0] -A zone_lan_forward -m comment --comment "!fw3" -j zone_lan_dest_ACCEPT
[33:2385] -A zone_lan_input -m comment --comment "!fw3: Custom lan input rule chain" -j input_lan_rule
[0:0] -A zone_lan_input -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port redirections" -j ACCEPT
[33:2385] -A zone_lan_input -m comment --comment "!fw3" -j zone_lan_src_ACCEPT
[1:328] -A zone_lan_output -m comment --comment "!fw3: Custom lan output rule chain" -j output_lan_rule
[1:328] -A zone_lan_output -m comment --comment "!fw3" -j zone_lan_dest_ACCEPT
[33:2385] -A zone_lan_src_ACCEPT -i br-lan -m conntrack --ctstate NEW,UNTRACKED -m comment --comment "!fw3" -j ACCEPT
[0:0] -A zone_wan_dest_ACCEPT -o eth0.2 -m conntrack --ctstate INVALID -m comment --comment "!fw3: Prevent NAT leakage" -j DROP
[0:0] -A zone_wan_dest_ACCEPT -o eth0.2 -m comment --comment "!fw3" -j ACCEPT
[12:480] -A zone_wan_dest_ACCEPT -o pptp-vpn -m conntrack --ctstate INVALID -m comment --comment "!fw3: Prevent NAT leakage" -j DROP
[40:5731] -A zone_wan_dest_ACCEPT -o pptp-vpn -m comment --comment "!fw3" -j ACCEPT
[0:0] -A zone_wan_dest_ACCEPT -o usb0 -m conntrack --ctstate INVALID -m comment --comment "!fw3: Prevent NAT leakage" -j DROP
[18:1192] -A zone_wan_dest_ACCEPT -o usb0 -m comment --comment "!fw3" -j ACCEPT
[0:0] -A zone_wan_dest_REJECT -o eth0.2 -m comment --comment "!fw3" -j reject
[0:0] -A zone_wan_dest_REJECT -o pptp-vpn -m comment --comment "!fw3" -j reject
[0:0] -A zone_wan_dest_REJECT -o usb0 -m comment --comment "!fw3" -j reject
[0:0] -A zone_wan_forward -m comment --comment "!fw3: Custom wan forwarding rule chain" -j forwarding_wan_rule
[0:0] -A zone_wan_forward -p esp -m comment --comment "!fw3: Allow-IPSec-ESP" -j zone_lan_dest_ACCEPT
[0:0] -A zone_wan_forward -p udp -m udp --dport 500 -m comment --comment "!fw3: Allow-ISAKMP" -j zone_lan_dest_ACCEPT
[0:0] -A zone_wan_forward -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port forwards" -j ACCEPT
[0:0] -A zone_wan_forward -m comment --comment "!fw3" -j zone_wan_dest_REJECT
[9:912] -A zone_wan_input -m comment --comment "!fw3: Custom wan input rule chain" -j input_wan_rule
[0:0] -A zone_wan_input -p udp -m udp --dport 68 -m comment --comment "!fw3: Allow-DHCP-Renew" -j ACCEPT
[0:0] -A zone_wan_input -p icmp -m icmp --icmp-type 8 -m comment --comment "!fw3: Allow-Ping" -j ACCEPT
[0:0] -A zone_wan_input -p igmp -m comment --comment "!fw3: Allow-IGMP" -j ACCEPT
[0:0] -A zone_wan_input -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept port redirections" -j ACCEPT
[9:912] -A zone_wan_input -m comment --comment "!fw3" -j zone_wan_src_REJECT
[38:2320] -A zone_wan_output -m comment --comment "!fw3: Custom wan output rule chain" -j output_wan_rule
[38:2320] -A zone_wan_output -m comment --comment "!fw3" -j zone_wan_dest_ACCEPT
[0:0] -A zone_wan_src_REJECT -i eth0.2 -m comment --comment "!fw3" -j reject
[1:84] -A zone_wan_src_REJECT -i pptp-vpn -m comment --comment "!fw3" -j reject
[8:828] -A zone_wan_src_REJECT -i usb0 -m comment --comment "!fw3" -j reject
COMMIT
# Completed on Thu Nov 12 11:03:05 2020
root@OpenWrt:~#
Kernel log
[ 0.000000] Linux version 4.14.171 (builder@buildhost) (gcc version 7.5.0 (OpenWrt GCC 7.5.0 r10947-65030d81f3)) #0 Thu Feb 27 21:05:12 2020
[ 0.000000] Board has DDR2
[ 0.000000] Analog PMU set to hw control
[ 0.000000] Digital PMU set to hw control
[ 0.000000] SoC Type: MediaTek MT7620A ver:2 eco:6
[ 0.000000] bootconsole [early0] enabled
[ 0.000000] CPU0 revision is: 00019650 (MIPS 24KEc)
[ 0.000000] MIPS: machine is YOUKU YK1
[ 0.000000] Determined physical RAM map:
[ 0.000000] memory: 08000000 @ 00000000 (usable)
[ 0.000000] Initrd not found or empty - disabling initrd
[ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[ 0.000000] Zone ranges:
[ 0.000000] Normal [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] On node 0 totalpages: 32768
[ 0.000000] free_area_init_node: node 0, pgdat 8047c5d0, node_mem_map 81000040
[ 0.000000] Normal zone: 256 pages used for memmap
[ 0.000000] Normal zone: 0 pages reserved
[ 0.000000] Normal zone: 32768 pages, LIFO batch:7
[ 0.000000] random: get_random_bytes called from 0x8047f740 with crng_init=0
[ 0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[ 0.000000] pcpu-alloc: [0] 0
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 32512
[ 0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2
[ 0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[ 0.000000] Writing ErrCtl register=00062210
[ 0.000000] Readback ErrCtl register=00062210
[ 0.000000] Memory: 123780K/131072K available (3915K kernel code, 180K rwdata, 500K rodata, 1220K init, 215K bss, 7292K reserved, 0K cma-reserved)
[ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[ 0.000000] NR_IRQS: 256
[ 0.000000] CPU Clock: 580MHz
[ 0.000000] clocksource: systick: mask: 0xffff max_cycles: 0xffff, max_idle_ns: 583261500 ns
[ 0.000000] systick: enable autosleep mode
[ 0.000000] systick: running - mult: 214748, shift: 32
[ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6590553264 ns
[ 0.000012] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405115902ns
[ 0.015478] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[ 0.087726] pid_max: default: 32768 minimum: 301
[ 0.097134] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.110167] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.130353] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.149836] futex hash table entries: 256 (order: -1, 3072 bytes)
[ 0.162015] pinctrl core: initialized pinctrl subsystem
[ 0.173632] NET: Registered protocol family 16
[ 0.205849] rt2880_gpio 10000600.gpio: registering 24 gpios
[ 0.216890] rt2880_gpio 10000600.gpio: registering 24 irq handlers
[ 0.229482] rt2880_gpio 10000638.gpio: registering 16 gpios
[ 0.240486] rt2880_gpio 10000638.gpio: registering 16 irq handlers
[ 0.253088] rt2880_gpio 10000660.gpio: registering 32 gpios
[ 0.264090] rt2880_gpio 10000660.gpio: registering 32 irq handlers
[ 0.276679] rt2880_gpio 10000688.gpio: registering 1 gpios
[ 0.287509] rt2880_gpio 10000688.gpio: registering 1 irq handlers
[ 0.305019] clocksource: Switched to clocksource systick
[ 0.316687] NET: Registered protocol family 2
[ 0.326267] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.340056] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.352641] TCP: Hash tables configured (established 1024 bind 1024)
[ 0.365428] UDP hash table entries: 256 (order: 0, 4096 bytes)
[ 0.376954] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[ 0.389657] NET: Registered protocol family 1
[ 0.398251] PCI: CLS 0 bytes, default 32
[ 0.401040] rt-timer 10000100.timer: maximum frequency is 1220Hz
[ 0.413793] Crashlog allocated RAM at address 0x3f00000
[ 0.425905] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[ 0.444769] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.456272] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.486495] io scheduler noop registered
[ 0.494140] io scheduler deadline registered (default)
[ 0.505425] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[ 0.520912] console [ttyS0] disabled
[ 0.527972] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 20, base_baud = 2500000) is a Palmchip BK-3103
[ 0.547643] console [ttyS0] enabled
[ 0.561459] bootconsole [early0] disabled
[ 0.585459] spi spi0.0: force spi mode3
[ 0.593851] m25p80 spi0.0: found w25q256, expected mx25l25635f
[ 0.616526] m25p80 spi0.0: w25q256 (32768 Kbytes)
[ 0.625963] 4 fixed-partitions partitions found on MTD device spi0.0
[ 0.638638] Creating 4 MTD partitions on "spi0.0":
[ 0.648208] 0x000000000000-0x000000030000 : "u-boot"
[ 0.659090] 0x000000030000-0x000000040000 : "u-boot-env"
[ 0.670615] 0x000000040000-0x000000050000 : "factory"
[ 0.681647] 0x000000050000-0x000002000000 : "firmware"
[ 0.695755] 2 uimage-fw partitions found on MTD device firmware
[ 0.707606] Creating 2 MTD partitions on "firmware":
[ 0.717524] 0x000000000000-0x00000017df9f : "kernel"
[ 0.728337] 0x00000017df9f-0x000001fb0000 : "rootfs"
[ 0.739128] mtd: device 5 (rootfs) set to be root filesystem
[ 0.752001] 1 squashfs-split partitions found on MTD device rootfs
[ 0.764392] 0x0000005a0000-0x000001fb0000 : "rootfs_data"
[ 0.776960] libphy: Fixed MDIO Bus: probed
[ 0.793884] gsw: setting port4 to ephy mode
[ 0.802522] mtk_soc_eth 10100000.ethernet: loaded mt7620 driver
[ 0.815112] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5
[ 0.832133] rt2880_wdt 10000120.watchdog: Initialized
[ 0.843640] NET: Registered protocol family 10
[ 0.856807] Segment Routing with IPv6
[ 0.864212] NET: Registered protocol family 17
[ 0.873193] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[ 0.899038] 8021q: 802.1Q VLAN Support v1.8
[ 0.916139] VFS: Mounted root (squashfs filesystem) readonly on device 31:5.
[ 0.936995] Freeing unused kernel memory: 1220K
[ 0.946051] This architecture does not have kernel memory protection.
[ 1.877219] init: Console is alive
[ 1.884241] init: - watchdog -
[ 2.434992] random: fast init done
[ 3.690009] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[ 3.816439] usbcore: registered new interface driver usbfs
[ 3.827531] usbcore: registered new interface driver hub
[ 3.838281] usbcore: registered new device driver usb
[ 3.854425] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[ 3.869328] ehci-platform: EHCI generic platform driver
[ 3.890171] phy phy-usbphy.0: remote usb device wakeup disabled
[ 3.901988] phy phy-usbphy.0: UTMI 16bit 30MHz
[ 3.910883] ehci-platform 101c0000.ehci: EHCI Host Controller
[ 3.922386] ehci-platform 101c0000.ehci: new USB bus registered, assigned bus number 1
[ 3.938301] ehci-platform 101c0000.ehci: irq 26, io mem 0x101c0000
[ 3.959154] ehci-platform 101c0000.ehci: USB 2.0 started, EHCI 1.00
[ 3.972690] hub 1-0:1.0: USB hub found
[ 3.980640] hub 1-0:1.0: 1 port detected
[ 3.991980] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[ 4.006101] ohci-platform: OHCI generic platform driver
[ 4.016898] ohci-platform 101c1000.ohci: Generic Platform OHCI controller
[ 4.030522] ohci-platform 101c1000.ohci: new USB bus registered, assigned bus number 2
[ 4.046427] ohci-platform 101c1000.ohci: irq 26, io mem 0x101c1000
[ 4.084463] hub 2-0:1.0: USB hub found
[ 4.092414] hub 2-0:1.0: 1 port detected
[ 4.138515] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[ 4.157201] init: - preinit -
[ 4.267024] usb 1-1: new high-speed USB device number 2 using ehci-platform
[ 5.783104] 8021q: adding VLAN 0 to HW filter on device eth0
[ 5.947143] random: procd: uninitialized urandom read (4 bytes read)
[ 8.818881] jffs2: notice: (440) jffs2_build_xattr_subsystem: complete building xattr subsystem, 7 of xdatum (0 unchecked, 7 orphan) and 24 of xref (3 dead, 21 orphan) found.
[ 8.852342] mount_root: overlay filesystem has not been fully initialized yet
[ 8.868244] mount_root: switching to jffs2 overlay
[ 8.970086] overlayfs: upper fs does not support tmpfile.
[ 8.987916] urandom-seed: Seed file not found (/etc/urandom.seed)
[ 9.151391] procd: - early -
[ 9.159362] procd: - watchdog -
[ 9.818163] random: jshn: uninitialized urandom read (4 bytes read)
[ 9.918989] procd: - watchdog -
[ 9.940993] procd: - ubus -
[ 10.207855] random: jshn: uninitialized urandom read (4 bytes read)
[ 10.388629] random: ubusd: uninitialized urandom read (4 bytes read)
[ 10.451100] procd: - init -
[ 11.828556] kmodloader: loading kernel modules from /etc/modules.d/*
[ 11.871397] tun: Universal TUN/TAP device driver, 1.6
[ 11.901382] gre: GRE over IPv4 demultiplexor driver
[ 11.926466] ip_gre: GRE over IPv4 tunneling driver
[ 11.987611] ip6_tables: (C) 2000-2006 Netfilter Core Team
[ 12.051048] Netfilter messages via NETLINK v0.30.
[ 12.100459] ip_set: protocol 6
[ 12.230618] Loading modules backported from Linux version v4.19.98-0-gd183c8e2647a
[ 12.245787] Backport generated by backports.git v4.19.98-1-0-g8204eb99
[ 12.358025] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 12.418216] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[ 12.558399] urngd: jent-rng init failed, err: 2
[ 12.597718] ctnetlink v0.93: registering with nfnetlink.
[ 12.714317] wireguard: WireGuard 0.0.20190702 loaded. See www.wireguard.com for information.
[ 12.731220] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
[ 12.773922] xt_time: kernel timezone is -0000
[ 12.785763] usbcore: registered new interface driver cdc_ether
[ 12.876363] PPP generic driver version 2.4.2
[ 12.888304] PPP MPPE Compression module registered
[ 12.899756] NET: Registered protocol family 24
[ 12.910676] PPTP driver version 0.8.5
[ 12.921832] usbcore: registered new interface driver rndis_host
[ 12.971988] rt2800_wmac 10180000.wmac: loaded eeprom from mtd device "factory"
[ 12.986478] ieee80211 phy0: rt2x00_set_rt: Info - RT chipset 6352, rev 0500 detected
[ 13.001948] ieee80211 phy0: rt2x00_set_rf: Info - RF chipset 7620 detected
[ 13.016419] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
[ 13.100990] kmodloader: done loading kernel modules from /etc/modules.d/*
[ 42.699661] 8021q: adding VLAN 0 to HW filter on device eth0
[ 42.734377] br-lan: port 1(eth0.1) entered blocking state
[ 42.745411] br-lan: port 1(eth0.1) entered disabled state
[ 42.756582] device eth0.1 entered promiscuous mode
[ 42.766179] device eth0 entered promiscuous mode
[ 42.854890] br-lan: port 1(eth0.1) entered blocking state
[ 42.865700] br-lan: port 1(eth0.1) entered forwarding state
[ 42.877061] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[ 43.715218] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[ 46.802148] ieee80211 phy0: rt2800_rf_self_txdc_cal: Info - RF Tx self calibration start
[ 46.818836] ieee80211 phy0: rt2800_rf_self_txdc_cal: Info - RF Tx self calibration end
[ 48.670683] ieee80211 phy0: rt2800_loft_iq_calibration: Info - LOFT Calibration Done!
[ 48.690177] ieee80211 phy0: rt2800_iq_search: Info - IQCalibration Start!
[ 48.718132] ieee80211 phy0: rt2800_iq_search: Info - IQCalibration Done! CH = 0, (gain= 0, phase= 2)
[ 48.737256] ieee80211 phy0: rt2800_iq_search: Info - IQCalibration Start!
[ 48.765183] ieee80211 phy0: rt2800_iq_search: Info - IQCalibration Done! CH = 1, (gain= f, phase= 0)
[ 48.783425] ieee80211 phy0: rt2800_loft_iq_calibration: Info - TX IQ Calibration Done!
[ 48.812624] ieee80211 phy0: rt2800_rxiq_calibration: Info - RXIQ G_imb=-3, Ph_rx=-1
[ 48.838164] ieee80211 phy0: rt2800_rxiq_calibration: Info - RXIQ G_imb=0, Ph_rx=-2
[ 48.863377] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 48.882661] br-lan: port 2(wlan0) entered blocking state
[ 48.893331] br-lan: port 2(wlan0) entered disabled state
[ 48.904408] device wlan0 entered promiscuous mode
[ 48.926379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 48.939328] br-lan: port 2(wlan0) entered blocking state
[ 48.949968] br-lan: port 2(wlan0) entered forwarding state
[ 62.914266] usb 1-1: USB disconnect, device number 2
[ 63.420467] usb 1-1: new high-speed USB device number 3 using ehci-platform
[ 63.677175] rndis_host 1-1:1.0 usb0: register 'rndis_host' at usb-101c0000.ehci-1, RNDIS device, 02:64:3a:74:9f:17
[ 71.587553] random: crng init done
[ 71.594341] random: 6 urandom warning(s) missed due to ratelimiting
[ 176.916046] br-lan: port 2(wlan0) entered disabled state
[ 176.926843] br-lan: port 1(eth0.1) entered disabled state
[ 177.071974] device eth0.1 left promiscuous mode
[ 177.081288] br-lan: port 1(eth0.1) entered disabled state
[ 177.111376] IPv6: ADDRCONF(NETDEV_UP): eth0.1: link is not ready
[ 177.126955] device wlan0 left promiscuous mode
[ 177.136102] br-lan: port 2(wlan0) entered disabled state
[ 177.803095] device eth0 left promiscuous mode
[ 182.307513] 8021q: adding VLAN 0 to HW filter on device eth0
[ 182.342403] br-lan: port 1(eth0.1) entered blocking state
[ 182.353435] br-lan: port 1(eth0.1) entered disabled state
[ 182.364609] device eth0.1 entered promiscuous mode
[ 182.374205] device eth0 entered promiscuous mode
[ 182.459992] br-lan: port 1(eth0.1) entered blocking state
[ 182.470821] br-lan: port 1(eth0.1) entered forwarding state
[ 182.482163] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[ 183.379130] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[ 185.401005] ieee80211 phy0: rt2800_rf_self_txdc_cal: Info - RF Tx self calibration start
[ 185.417633] ieee80211 phy0: rt2800_rf_self_txdc_cal: Info - RF Tx self calibration end
[ 189.513432] ieee80211 phy0: rt2800_loft_iq_calibration: Info - LOFT Calibration Done!
[ 189.532922] ieee80211 phy0: rt2800_iq_search: Info - IQCalibration Start!
[ 189.560874] ieee80211 phy0: rt2800_iq_search: Info - IQCalibration Done! CH = 0, (gain= d, phase= 2)
[ 189.579997] ieee80211 phy0: rt2800_iq_search: Info - IQCalibration Start!
[ 189.607916] ieee80211 phy0: rt2800_iq_search: Info - IQCalibration Done! CH = 1, (gain= 0, phase=3e)
[ 189.626156] ieee80211 phy0: rt2800_loft_iq_calibration: Info - TX IQ Calibration Done!
[ 189.655390] ieee80211 phy0: rt2800_rxiq_calibration: Info - RXIQ G_imb=-3, Ph_rx=3
[ 189.680752] ieee80211 phy0: rt2800_rxiq_calibration: Info - RXIQ G_imb=0, Ph_rx=-1
[ 189.705492] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 189.747928] br-lan: port 2(wlan0) entered blocking state
[ 189.758596] br-lan: port 2(wlan0) entered disabled state
[ 189.769595] device wlan0 entered promiscuous mode
[ 189.790564] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 189.803522] br-lan: port 2(wlan0) entered blocking state
[ 189.814162] br-lan: port 2(wlan0) entered forwarding state
[ 234.088202] pptp-vpn: renamed from ppp0
[ 368.189655] pptp-vpn: renamed from ppp0
[ 370.038066] pptp-vpn: renamed from ppp0
[ 509.497964] pptp-vpn: renamed from ppp0
[ 1803.162601] pptp-vpn: renamed from ppp0
[ 2056.779958] pptp-vpn: renamed from ppp0
[ 2740.227036] pptp-vpn: renamed from ppp0
[ 3259.045091] pptp-vpn: renamed from ppp0
[ 3270.164065] pptp-vpn: renamed from ppp0
[ 4498.689845] pptp-vpn: renamed from ppp0
@vgaetera I don't see anything out of the ordinary. I suspect the vpn server is dropping them to deny NATed hosts.
@andysyam enter this command and try again. iptables -t mangle -A PREROUTING -j TTL --ttl-set 65
1 Like
where is the file I need to change to add this
iptables -t mangle -A PREROUTING -j TTL --ttl-set 65
Just type it in the ssh. If it works we'll make it permanent.
root@OpenWrt:~# iptables -t mangle -A PREROUTING -j TTL --ttl-set 65
iptables v1.8.3 (legacy): unknown option "--ttl-set"
Try `iptables -h' or 'iptables --help' for more information.
Install package kmod-ipt-ipopt
root@OpenWrt:~# opkg install kmod-ipt-ipopt
Installing kmod-ipt-ipopt (4.14.171-1) to root...
Downloading http://downloads.openwrt.org/releases/19.07.2/targets/ramips/mt7620/packages/kmod-ipt-ipopt_4.14.171-1_mipsel_24kc.ipk
Configuring kmod-ipt-ipopt.
root@OpenWrt:~# iptables -t mangle -A PREROUTING -j TTL --ttl-set 65
iptables v1.8.3 (legacy): unknown option "--ttl-set"
Try `iptables -h' or 'iptables --help' for more information.
Waoo unknown option "--ttl-set"
Is this installed? kmod-ipt-core
and iptables-mod-ipopt
root@OpenWrt:~# opkg install kmod-ipt-ipopt kmod-ipt-core
Installing kmod-ipt-ipopt (4.14.171-1) to root...
Downloading http://downloads.openwrt.org/releases/19.07.2/targets/ramips/mt7620/packages/kmod-ipt-ipopt_4.14.171-1_mipsel_24kc.ipk
Package kmod-ipt-core (4.14.171-1) installed in root is up to date.
Configuring kmod-ipt-ipopt.
root@OpenWrt:~#
root@OpenWrt:~#
root@OpenWrt:~# iptables -t mangle -A PREROUTING -j TTL --ttl-set 65
iptables v1.8.3 (legacy): unknown option "--ttl-set"
Try `iptables -h' or 'iptables --help' for more information.
do I have to install all kernel modules?
Run this: opkg install iptables-mod-ipopt