root@OpenWrt:~# iptables-save -c | grep "INPUT -i br-if_Guests"
[9:1248] -A INPUT -i br-if_Guests -m comment --comment "!fw3" -j zone_lan_input
After a good night sleep now I am able to connect to OpenWrt when using the Guests interface. Somehow it seems things are cached for well after a router reboot. Is there any way I can make any change forcibly be applied? I.e flush anything related?
DNS resolving now also seems to be doing well. I'll try switching the Guests back to it's own fwzone
EDIT: it's getting more ridiculous by the minute Just a while ago the guest network started blocking access to openwrt again. without any configuration change on my end what so ever.
I did find something strange though when I actually did try to move the guests back to the guests fwzone again. (L)uci is messing with configs more than I'd like
root@OpenWrt:~# head -n -0 /etc/resolv.* /tmp/resolv.* /tmp/resolv.*/*; \
> time nslookup openwrt.org; \
> time nslookup openwrt.org 8.8.8.8; \
> time nslookup openwrt.org 1.1.1.1
==> /etc/resolv.conf <==
search lan
nameserver 127.0.0.1
==> /tmp/resolv.conf <==
search lan
nameserver 127.0.0.1
==> /tmp/resolv.conf.auto <==
# Interface if_Guests
nameserver 1.1.1.1
# Interface if_Trusted
nameserver 1.1.1.1
# Interface wan
nameserver 1.1.1.1
head: /tmp/resolv.*/*: No such file or directory
Server: 127.0.0.1
Address: 127.0.0.1#53
Name: openwrt.org
Address 1: 139.59.209.225
Address 2: 2a03:b0c0:3:d0::1af1:1
real 0m 0.00s
user 0m 0.00s
sys 0m 0.00s
Server: 8.8.8.8
Address: 8.8.8.8#53
Name: openwrt.org
Address 1: 139.59.209.225
Address 2: 2a03:b0c0:3:d0::1af1:1
real 0m 0.01s
user 0m 0.00s
sys 0m 0.00s
Server: 1.1.1.1
Address: 1.1.1.1#53
Name: openwrt.org
Address 1: 139.59.209.225
Address 2: 2a03:b0c0:3:d0::1af1:1
real 0m 0.00s
user 0m 0.00s
sys 0m 0.00s
pvedesktop@pvemobile:~$ time nslookup openwrt.org
Server: 10.5.0.1
Address: 10.5.0.1#53
Non-authoritative answer:
Name: openwrt.org
Address: 139.59.209.225
Name: openwrt.org
Address: 2a03:b0c0:3:d0::1af1:1
real 0m0.014s
user 0m0.010s
sys 0m0.000s