#20163: CC 15.05-rc3: packets sent out on a second (wired) WAN are being dropped
somewhere in OpenWRT
-------------------------------+----------------------------------
  Reporter:  braveheart_leo@…  |      Owner:  developers
      Type:  defect            |     Status:  new
  Priority:  high              |  Milestone:  Chaos Calmer (trunk)
 Component:  other             |    Version:  Trunk
Resolution:                    |   Keywords:
-------------------------------+----------------------------------

Comment (by braveheart_leo@…):

 I just want to add some further observations and tests I have conducted.

 As previously mentioned, packets are arriving at the wan2 (eth0.2)
 interface, seen from a tcpdump, but they are not hitting iptables,
 indicating that the packets are being dropped early on:

 {{{
 Chain delegate_input (1 references)
  pkts bytes target     prot opt in     out     source
 destination
    18  1754 ACCEPT     all  --  lo     *       0.0.0.0/0
 0.0.0.0/0
   189 14240 input_rule  all  --  *      *       0.0.0.0/0
 0.0.0.0/0            /* user chain for input */
    10  2993 ACCEPT     all  --  *      *       0.0.0.0/0
 0.0.0.0/0            ctstate RELATED,ESTABLISHED
    28  1300 DROP       all  --  *      *       0.0.0.0/0
 0.0.0.0/0            ctstate INVALID
    93  5012 syn_flood  tcp  --  *      *       0.0.0.0/0
 0.0.0.0/0            tcp flags:0x17/0x02
    19  1139 zone_lan_input  all  --  eth0.1 *       0.0.0.0/0
 0.0.0.0/0
     0     0 zone_wan_input  all  --  eth0.2 *       0.0.0.0/0
 0.0.0.0/0
   132  8808 zone_wan_input  all  --  eth1   *       0.0.0.0/0
 0.0.0.0/0
     0     0 DROP       all  --  *      *       0.0.0.0/0
 0.0.0.0/0
 }}}

 Also, if I issue `ifdown wan`, then wan2 starts working, forwarding
 packets to and fro.

--
Ticket URL: <https://dev.openwrt.org/ticket/20163#comment:2>
OpenWrt <http://openwrt.org>
Opensource Wireless Router Technology
_______________________________________________
openwrt-tickets mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-tickets

Reply via email to