Hi,
So apparently, Twitter does not show any media at all with the images being blank and the videos being unplayable. I'm trying to find out whether or not this is a problem with my router (running the latest snapshot build) or if this is a problem with Twitter's servers.
What diagnostic steps would you guys advise, for my router I mean.
Presumig that you have tried a different browser and it did the same, my first guess would be a DNS issue.
Try to ping or traceroute the address where they store the images or videos. For example:
traceroute pbs.twimg.com
What would be the next steps?
Disable peer DNS and configure a major public DNS provider:
https://openwrt.org/docs/guide-user/base-system/dhcp_configuration#upstream_dns_provider
Also make sure to restart your clients or flush DNS cache.
I've did that, yet the commandline shows very high latency despite the adjustments you suggested. Any other suggestions?
Post the output redacting the private parts:
uci show network; uci show firewall; uci show dhcp; \
head -v -n -0 /etc/resolv.* /tmp/resolv.* /tmp/resolv.*/*; \
ip address show; ip route show; ip rule show
Here.
network.loopback=interface
network.loopback.ifname='lo'
network.loopback.proto='static'
network.loopback.ipaddr='127.0.0.1'
network.loopback.netmask='255.0.0.0'
network.globals=globals
network.globals.ula_prefix='fd93:f73a:38cc::/48'
network.lan=interface
network.lan.type='bridge'
network.lan.ifname='eth0.1'
network.lan.proto='static'
network.lan.ip6assign='60'
network.lan.ipaddr='192.168.9.27'
network.lan.igmp_snooping='1'
network.lan.netmask='255.0.0.0'
network.lan.ipv6='off'
network.lan.dns='8.8.8.8' '8.8.4.4' '1.1.1.1' '1.0.0.1'
network.wan=interface
network.wan.ifname='eth0.2'
network.wan.proto='dhcp'
network.wan.ipv6='off'
network.wan.peerdns='0'
network.wan.dns='8.8.8.8' '8.8.4.4' '1.1.1.1' '1.0.0.1'
network.wan_eth0_2_dev=device
network.wan_eth0_2_dev.name='eth0.2'
network.wan_eth0_2_dev.macaddr='70:4f:57:00:4c:75'
network.wan6=interface
network.wan6.ifname='eth0.2'
network.wan6.proto='dhcpv6'
network.wan6.reqaddress='try'
network.wan6.reqprefix='auto'
network.wan6.peerdns='0'
network.wan6.dns='2001:4860:4860::8888' '2001:4860:4860::8844' '2606:4700:4700::1111' '2606:4700:4700::1001'
network.@switch[0]=switch
network.@switch[0].name='switch0'
network.@switch[0].reset='1'
network.@switch[0].enable_vlan='1'
network.@switch_vlan[0]=switch_vlan
network.@switch_vlan[0].device='switch0'
network.@switch_vlan[0].vlan='1'
network.@switch_vlan[0].ports='1 2 3 4 6t'
network.@switch_vlan[1]=switch_vlan
network.@switch_vlan[1].device='switch0'
network.@switch_vlan[1].vlan='2'
network.@switch_vlan[1].ports='0 6t'
firewall.@defaults[0]=defaults
firewall.@defaults[0].input='ACCEPT'
firewall.@defaults[0].output='ACCEPT'
firewall.@defaults[0].synflood_protect='1'
firewall.@defaults[0].drop_invalid='1'
firewall.@defaults[0].forward='ACCEPT'
firewall.@zone[0]=zone
firewall.@zone[0].name='lan'
firewall.@zone[0].network='lan'
firewall.@zone[0].input='ACCEPT'
firewall.@zone[0].output='ACCEPT'
firewall.@zone[0].forward='ACCEPT'
firewall.@zone[1]=zone
firewall.@zone[1].name='wan'
firewall.@zone[1].network='wan' 'wan6'
firewall.@zone[1].input='REJECT'
firewall.@zone[1].output='ACCEPT'
firewall.@zone[1].masq='1'
firewall.@zone[1].mtu_fix='1'
firewall.@zone[1].forward='ACCEPT'
firewall.@forwarding[0]=forwarding
firewall.@forwarding[0].src='lan'
firewall.@forwarding[0].dest='wan'
firewall.@rule[0]=rule
firewall.@rule[0].name='Allow-DHCP-Renew'
firewall.@rule[0].src='wan'
firewall.@rule[0].proto='udp'
firewall.@rule[0].dest_port='68'
firewall.@rule[0].target='ACCEPT'
firewall.@rule[0].family='ipv4'
firewall.@rule[1]=rule
firewall.@rule[1].name='Allow-Ping'
firewall.@rule[1].src='wan'
firewall.@rule[1].proto='icmp'
firewall.@rule[1].icmp_type='echo-request'
firewall.@rule[1].family='ipv4'
firewall.@rule[1].target='ACCEPT'
firewall.@rule[2]=rule
firewall.@rule[2].name='Allow-IGMP'
firewall.@rule[2].src='wan'
firewall.@rule[2].proto='igmp'
firewall.@rule[2].family='ipv4'
firewall.@rule[2].target='ACCEPT'
firewall.@rule[3]=rule
firewall.@rule[3].name='Allow-DHCPv6'
firewall.@rule[3].src='wan'
firewall.@rule[3].proto='udp'
firewall.@rule[3].src_ip='fc00::/6'
firewall.@rule[3].dest_ip='fc00::/6'
firewall.@rule[3].dest_port='546'
firewall.@rule[3].family='ipv6'
firewall.@rule[3].target='ACCEPT'
firewall.@rule[4]=rule
firewall.@rule[4].name='Allow-MLD'
firewall.@rule[4].src='wan'
firewall.@rule[4].proto='icmp'
firewall.@rule[4].src_ip='fe80::/10'
firewall.@rule[4].icmp_type='130/0' '131/0' '132/0' '143/0'
firewall.@rule[4].family='ipv6'
firewall.@rule[4].target='ACCEPT'
firewall.@rule[5]=rule
firewall.@rule[5].name='Allow-ICMPv6-Input'
firewall.@rule[5].src='wan'
firewall.@rule[5].proto='icmp'
firewall.@rule[5].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type' 'router-solicitation' 'neighbour-solicitation' 'router-advertisement' 'neighbour-advertisement'
firewall.@rule[5].limit='1000/sec'
firewall.@rule[5].family='ipv6'
firewall.@rule[5].target='ACCEPT'
firewall.@rule[6]=rule
firewall.@rule[6].name='Allow-ICMPv6-Forward'
firewall.@rule[6].src='wan'
firewall.@rule[6].dest='*'
firewall.@rule[6].proto='icmp'
firewall.@rule[6].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type'
firewall.@rule[6].limit='1000/sec'
firewall.@rule[6].family='ipv6'
firewall.@rule[6].target='ACCEPT'
firewall.@rule[7]=rule
firewall.@rule[7].name='Allow-IPSec-ESP'
firewall.@rule[7].src='wan'
firewall.@rule[7].dest='lan'
firewall.@rule[7].proto='esp'
firewall.@rule[7].target='ACCEPT'
firewall.@rule[8]=rule
firewall.@rule[8].name='Allow-ISAKMP'
firewall.@rule[8].src='wan'
firewall.@rule[8].dest='lan'
firewall.@rule[8].dest_port='500'
firewall.@rule[8].proto='udp'
firewall.@rule[8].target='ACCEPT'
firewall.@rule[9]=rule
firewall.@rule[9].name='Support-UDP-Traceroute'
firewall.@rule[9].src='wan'
firewall.@rule[9].dest_port='33434:33689'
firewall.@rule[9].proto='udp'
firewall.@rule[9].family='ipv4'
firewall.@rule[9].target='REJECT'
firewall.@rule[9].enabled='false'
firewall.@include[0]=include
firewall.@include[0].path='/etc/firewall.user'
firewall.@redirect[0]=redirect
firewall.@redirect[0].target='DNAT'
firewall.@redirect[0].name='HTTP'
firewall.@redirect[0].proto='tcp'
firewall.@redirect[0].src='wan'
firewall.@redirect[0].src_dport='80'
firewall.@redirect[0].dest='lan'
firewall.@redirect[0].dest_ip='192.0.0.0/8'
firewall.@redirect[0].dest_port='80'
firewall.@redirect[1]=redirect
firewall.@redirect[1].target='DNAT'
firewall.@redirect[1].name='HTTPS'
firewall.@redirect[1].proto='tcp'
firewall.@redirect[1].src='wan'
firewall.@redirect[1].src_dport='443'
firewall.@redirect[1].dest='lan'
firewall.@redirect[1].dest_ip='192.0.0.0/8'
firewall.@redirect[1].dest_port='443'
firewall.@redirect[2]=redirect
firewall.@redirect[2].target='DNAT'
firewall.@redirect[2].name='POP2'
firewall.@redirect[2].proto='tcp'
firewall.@redirect[2].src='wan'
firewall.@redirect[2].src_dport='109'
firewall.@redirect[2].dest='lan'
firewall.@redirect[2].dest_port='109'
firewall.@redirect[2].dest_ip='192.0.0.0/8'
firewall.@redirect[3]=redirect
firewall.@redirect[3].target='DNAT'
firewall.@redirect[3].name='POP3'
firewall.@redirect[3].src='wan'
firewall.@redirect[3].src_dport='110'
firewall.@redirect[3].dest='lan'
firewall.@redirect[3].dest_port='110'
firewall.@redirect[3].proto='tcp'
firewall.@redirect[3].dest_ip='192.0.0.0/8'
firewall.@redirect[4]=redirect
firewall.@redirect[4].target='DNAT'
firewall.@redirect[4].proto='tcp'
firewall.@redirect[4].src='wan'
firewall.@redirect[4].src_dport='25'
firewall.@redirect[4].dest='lan'
firewall.@redirect[4].dest_port='25'
firewall.@redirect[4].name='SMTP'
firewall.@redirect[4].dest_ip='192.0.0.0/8'
firewall.@redirect[5]=redirect
firewall.@redirect[5].target='DNAT'
firewall.@redirect[5].name='Steam TCP 1'
firewall.@redirect[5].proto='tcp'
firewall.@redirect[5].src='wan'
firewall.@redirect[5].src_dport='27015-27030'
firewall.@redirect[5].dest='lan'
firewall.@redirect[5].dest_port='27015-27030'
firewall.@redirect[5].dest_ip='192.0.0.0/8'
firewall.@redirect[6]=redirect
firewall.@redirect[6].target='DNAT'
firewall.@redirect[6].name='Steam TCP 2'
firewall.@redirect[6].proto='tcp'
firewall.@redirect[6].src='wan'
firewall.@redirect[6].src_dport='27036'
firewall.@redirect[6].dest='lan'
firewall.@redirect[6].dest_port='27036'
firewall.@redirect[6].dest_ip='192.0.0.0/8'
firewall.@redirect[7]=redirect
firewall.@redirect[7].target='DNAT'
firewall.@redirect[7].name='Steam UDP 1'
firewall.@redirect[7].proto='udp'
firewall.@redirect[7].src='wan'
firewall.@redirect[7].src_dport='27000-27100'
firewall.@redirect[7].dest='lan'
firewall.@redirect[7].dest_port='27000-27100'
firewall.@redirect[7].dest_ip='192.0.0.0/8'
firewall.@redirect[8]=redirect
firewall.@redirect[8].target='DNAT'
firewall.@redirect[8].src='wan'
firewall.@redirect[8].dest='lan'
firewall.@redirect[8].proto='udp'
firewall.@redirect[8].src_dport='3478-3497'
firewall.@redirect[8].dest_port='3478-3497'
firewall.@redirect[8].name='FaceTime, Steam, & Zoom UDP '
firewall.@redirect[8].dest_ip='192.0.0.0/8'
firewall.@redirect[9]=redirect
firewall.@redirect[9].target='DNAT'
firewall.@redirect[9].proto='udp'
firewall.@redirect[9].src='wan'
firewall.@redirect[9].src_dport='4379-4380'
firewall.@redirect[9].dest='lan'
firewall.@redirect[9].dest_port='4379-4380'
firewall.@redirect[9].name='Steam UDP 2'
firewall.@redirect[9].dest_ip='192.0.0.0/8'
firewall.@redirect[10]=redirect
firewall.@redirect[10].target='DNAT'
firewall.@redirect[10].proto='tcp'
firewall.@redirect[10].src='wan'
firewall.@redirect[10].src_dport='5223'
firewall.@redirect[10].dest='lan'
firewall.@redirect[10].dest_port='5223'
firewall.@redirect[10].name='FaceTime & iMessage TCP'
firewall.@redirect[10].dest_ip='192.0.0.0/8'
firewall.@redirect[11]=redirect
firewall.@redirect[11].target='DNAT'
firewall.@redirect[11].name='FaceTime UDP 1'
firewall.@redirect[11].proto='udp'
firewall.@redirect[11].src='wan'
firewall.@redirect[11].src_dport='16384-16387'
firewall.@redirect[11].dest='lan'
firewall.@redirect[11].dest_port='16384-16387'
firewall.@redirect[11].dest_ip='192.0.0.0/8'
firewall.@redirect[12]=redirect
firewall.@redirect[12].target='DNAT'
firewall.@redirect[12].name='FaceTime UDP 2'
firewall.@redirect[12].proto='udp'
firewall.@redirect[12].src='wan'
firewall.@redirect[12].src_dport='16393-16402'
firewall.@redirect[12].dest='lan'
firewall.@redirect[12].dest_port='16393-16402'
firewall.@redirect[12].dest_ip='192.0.0.0/8'
firewall.@redirect[13]=redirect
firewall.@redirect[13].target='DNAT'
firewall.@redirect[13].name='Zoom TCP 1'
firewall.@redirect[13].proto='tcp'
firewall.@redirect[13].src='wan'
firewall.@redirect[13].src_dport='8801-8802'
firewall.@redirect[13].dest='lan'
firewall.@redirect[13].dest_port='8801-8802'
firewall.@redirect[13].dest_ip='192.0.0.0/8'
firewall.@redirect[14]=redirect
firewall.@redirect[14].target='DNAT'
firewall.@redirect[14].name='Zoom UDP 1'
firewall.@redirect[14].proto='udp'
firewall.@redirect[14].src='wan'
firewall.@redirect[14].src_dport='8801-8810'
firewall.@redirect[14].dest='lan'
firewall.@redirect[14].dest_port='8801-8810'
firewall.@redirect[14].dest_ip='192.0.0.0/8'
firewall.@redirect[15]=redirect
firewall.@redirect[15].target='DNAT'
firewall.@redirect[15].name='Riot Games TCP 1'
firewall.@redirect[15].proto='tcp'
firewall.@redirect[15].src='wan'
firewall.@redirect[15].src_dport='5222-5223'
firewall.@redirect[15].dest='lan'
firewall.@redirect[15].dest_port='5222-5223'
firewall.@redirect[15].dest_ip='192.0.0.0/8'
firewall.@redirect[16]=redirect
firewall.@redirect[16].target='DNAT'
firewall.@redirect[16].name='Riot Games TCP 2'
firewall.@redirect[16].proto='tcp'
firewall.@redirect[16].src='wan'
firewall.@redirect[16].src_dport='2099'
firewall.@redirect[16].dest='lan'
firewall.@redirect[16].dest_port='2099'
firewall.@redirect[16].dest_ip='192.0.0.0/8'
firewall.@redirect[17]=redirect
firewall.@redirect[17].target='DNAT'
firewall.@redirect[17].name='League of Legends UDP 1'
firewall.@redirect[17].proto='udp'
firewall.@redirect[17].src='wan'
firewall.@redirect[17].src_dport='5000-5500'
firewall.@redirect[17].dest='lan'
firewall.@redirect[17].dest_port='5000-5500'
firewall.@redirect[17].dest_ip='192.0.0.0/8'
firewall.@redirect[18]=redirect
firewall.@redirect[18].target='DNAT'
firewall.@redirect[18].name='League of Legends UDP 2'
firewall.@redirect[18].src='wan'
firewall.@redirect[18].src_dport='8088'
firewall.@redirect[18].dest='lan'
firewall.@redirect[18].dest_port='8088'
firewall.@redirect[18].proto='tcp' 'udp'
firewall.@redirect[18].dest_ip='192.0.0.0/8'
firewall.@redirect[19]=redirect
firewall.@redirect[19].target='DNAT'
firewall.@redirect[19].name='Riot Games UDP 1'
firewall.@redirect[19].proto='udp'
firewall.@redirect[19].src='wan'
firewall.@redirect[19].src_dport='8393-8400'
firewall.@redirect[19].dest='lan'
firewall.@redirect[19].dest_port='8393-8400'
firewall.@redirect[19].dest_ip='192.0.0.0/8'
firewall.miniupnpd=include
firewall.miniupnpd.type='script'
firewall.miniupnpd.path='/usr/share/miniupnpd/firewall.include'
firewall.miniupnpd.family='any'
firewall.miniupnpd.reload='1'
dhcp.@dnsmasq[0]=dnsmasq
dhcp.@dnsmasq[0].domainneeded='1'
dhcp.@dnsmasq[0].localise_queries='1'
dhcp.@dnsmasq[0].rebind_protection='1'
dhcp.@dnsmasq[0].rebind_localhost='1'
dhcp.@dnsmasq[0].local='/lan/'
dhcp.@dnsmasq[0].domain='lan'
dhcp.@dnsmasq[0].expandhosts='1'
dhcp.@dnsmasq[0].authoritative='1'
dhcp.@dnsmasq[0].readethers='1'
dhcp.@dnsmasq[0].leasefile='/tmp/dhcp.leases'
dhcp.@dnsmasq[0].resolvfile='/tmp/resolv.conf.d/resolv.conf.auto'
dhcp.@dnsmasq[0].localservice='1'
dhcp.lan=dhcp
dhcp.lan.interface='lan'
dhcp.lan.start='100'
dhcp.lan.limit='150'
dhcp.lan.leasetime='12h'
dhcp.lan.ra_slaac='1'
dhcp.lan.ra_flags='managed-config' 'other-config'
dhcp.lan.ra='server'
dhcp.lan.dhcpv6='server'
dhcp.lan.ra_management='1'
dhcp.lan.ra_default='1'
dhcp.lan.ndp='hybrid'
dhcp.lan.dns='2001:4860:4860::8888' '2001:4860:4860::8844' '2606:4700:4700::1111' '2606:4700:4700::1001'
dhcp.wan=dhcp
dhcp.wan.interface='wan'
dhcp.wan.ignore='1'
dhcp.odhcpd=odhcpd
dhcp.odhcpd.maindhcp='0'
dhcp.odhcpd.leasefile='/tmp/hosts/odhcpd'
dhcp.odhcpd.leasetrigger='/usr/sbin/odhcpd-update'
dhcp.odhcpd.loglevel='4'
dhcp.@host[0]=host
dhcp.@host[0].name='RE205'
dhcp.@host[0].ip='192.0.0.110'
dhcp.@host[0].mac='B2:BE:76:5C:47:0D'
dhcp.@host[1]=host
dhcp.@host[1].name='RE205'
dhcp.@host[1].ip='192.0.0.199'
dhcp.@host[1].mac='B0:BE:76:5C:47:0D'
==> /etc/resolv.conf <==
search lan
nameserver 127.0.0.1
nameserver ::1
==> /tmp/resolv.conf <==
search lan
nameserver 127.0.0.1
nameserver ::1
==> /tmp/resolv.conf.d <==
head: /tmp/resolv.conf.d: I/O error
==> /tmp/resolv.conf.d/resolv.conf.auto <==
# Interface lan
nameserver 8.8.8.8
nameserver 8.8.4.4
nameserver 1.1.1.1
nameserver 1.0.0.1
# Interface wan
nameserver 8.8.8.8
nameserver 8.8.4.4
nameserver 1.1.1.1
nameserver 1.0.0.1
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN qlen 1000
link/ether 70:4f:57:00:4c:74 brd ff:ff:ff:ff:ff:ff
inet6 fe80::724f:57ff:fe00:4c74/64 scope link
valid_lft forever preferred_lft forever
11: br-lan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
link/ether 70:4f:57:00:4c:74 brd ff:ff:ff:ff:ff:ff
inet 192.168.9.27/8 brd 192.255.255.255 scope global br-lan
valid_lft forever preferred_lft forever
inet6 fd93:f73a:38cc::1/60 scope global
valid_lft forever preferred_lft forever
inet6 fe80::724f:57ff:fe00:4c74/64 scope link
valid_lft forever preferred_lft forever
12: eth0.1@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP qlen 1000
link/ether 70:4f:57:00:4c:74 brd ff:ff:ff:ff:ff:ff
13: eth0.2@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc cake state UP qlen 1000
link/ether 70:4f:57:00:4c:75 brd ff:ff:ff:ff:ff:ff
inet 10.1.150.8/16 brd 10.1.255.255 scope global eth0.2
valid_lft forever preferred_lft forever
inet6 fe80::724f:57ff:fe00:4c75/64 scope link
valid_lft forever preferred_lft forever
14: wlan0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP qlen 1000
link/ether 70:4f:57:00:4c:72 brd ff:ff:ff:ff:ff:ff
inet6 fe80::724f:57ff:fe00:4c72/64 scope link
valid_lft forever preferred_lft forever
15: wlan1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP qlen 1000
link/ether 70:4f:57:00:4c:73 brd ff:ff:ff:ff:ff:ff
inet6 fe80::724f:57ff:fe00:4c73/64 scope link
valid_lft forever preferred_lft forever
18: ifb4eth0.2: <BROADCAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc cake state UNKNOWN qlen 32
link/ether 52:74:fa:a4:c2:03 brd ff:ff:ff:ff:ff:ff
inet6 fe80::5074:faff:fea4:c203/64 scope link
valid_lft forever preferred_lft forever
default via (redacted) dev eth0.2 src (redacted)
10.1.0.0/16 dev eth0.2 scope link src (redacted)
192.0.0.0/8 dev br-lan scope link src 192.168.9.27
0: from all lookup local
32766: from all lookup main
32767: from all lookup default
Anything you see that may be cause for concern on the logs I sent?
Also check your mtu settings against your ISP's requirements and that you have MSS clamping enabled (if your mtu is lower than 1500 bytes, at least).
MSS Clamping? Where is that setting in LuCI?
You seem to have MSS clamping covered (Network --> Firewall --> WAN/ edit --> General Settings.
Well, you are messing with mixing private address space (192.168.x.x) and public routable internet (everything in 192.x.x.x outside 192.168.x.x).
Using netmask of 255.0.0.0 with 192.168.9.x LAN IP address is wrong.
The same goes for those redirects to '192.0.0.0/8'. Looks strange.
Additionally, your WAN seems to be private addressing space again, 10.1.0.0/16. Some double NAT setup?
And you seems to have eth0.1 for LAN and eth0.2 for WAN, right? It would be more typical to have eth0.x and eth1.x etc. What is your device?
Shouldn't be. I already set my ISP Modem+Router Combo to Bridge mode.
sed -i -e "s|192\.0\.0\.0/8|192.168.0.0/16|g" /etc/config/firewall
/etc/init.d/firewall restart
uci set dhcp.@host[0].ip="192.168.9.110"
uci set dhcp.@host[1].ip="192.168.9.199"
uci commit dhcp
/etc/init.d/dnsmasq restart
uci -q delete dhcp.lan.dns
uci commit dhcp
/etc/init.d/odhcpd restart
uci set network.lan.netmask="255.255.0.0"
uci commit network
/etc/init.d/network restart
This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.