Hi, I have a weird wireless connection issue with my new Nokia N97, hope someone can help me.
I use 1.2.3RC1 embedded on a Alix 2d3 with a <Atheros 5413> minipci card. The system has been serving me fine for a couple of months providing internet access to my server and a sip device cable and to my laptop through wireless. As explained later I don't think this matters, but the wireless card was setup as access point and protected with WPA2. No bridges. The devices in the network dont interact much, they mainly need internet access so I have WAN, LAN, OPT1 and OPT2 with respectively a public IP, 192.168.69.0/24, 192.168.70.0/24, 192.168.71.0/24. Very plain setup, the only rules I've added allow communication between LAN, OPT1 and OPT2. Yesterday I bought a Nokia N97 and as soon as I came back home I started playing with it. I joined my wireless network and typed the PSK and the phone said it was connected properly. Opened the browser and went on google, typed a search and I got the page, another couple of pages and the connection stopped working. The page doesn't load and the phone gives me an error like gateway not responding. I am 101% sure it's something in the phone or in the wireless manager of the phone so I start investigating on it. I can see the DHCP lease from pfsense and for a few seconds I can ping the phone's IP then the connections stops until I manually disconnect and reconnect. Then it works for another few seconds. When the traffic stops after few seconds the phone still thinks it's connected and can stay connected for hours giving the gateway error problem; if I reboot the pfsense box the phone loses the connections for about a minute, then it automatically reconnects and works for a few seconds. I spent a good while focusing on the phone since I was sure they did some weird implementation that wasn't working fine with WPA2. So I decided to simplify the problem. As a test I moved the AP on WEP security, the phone kept connecting and working foe only a few secs. As an extreme step I setup the AP as an open system. The phone kept misbehaving. As a note, during all these tests I was using the same wireless connection with my XP laptop that was working fine. Also, on both the phone and the laptop the signal is really strong (the phone says 100%). I stepped back a bit and I decided to work wit other networks. I know the WEP key of my housemate and some of my neighbours keeps his wireless net open but the signal of this network is really low. My housemate wireless router is a linksys provided by his provider. I could connect on the open network and surf with almost no issues, the signal was occasionally dropping but the phone was reconnecting and then everything was ok. I could use the WEP protected network of my housemate with no issues, I installed several apps, surfed the web and checked emails. I started playing with all the settings like allow 802.11g only, intra BBS etc but the result was always the same. I am a bit at a loss here. I still believe the problem is mainly on the phone. But other APs can work perfectly with it. I wonder if there is a way to make pfSense work like them and allow the phone to use the network. I monitored the traffic with the phone from its connection to when it stops responding. It didn't help me much but maybe somebody can spot interesting clues there. 17:55:01.669458 IP (tos 0x0, ttl 64, id 32436, offset 0, flags [none], proto ICMP (1), length 48) 192.168.71.1 > 192.168.71.198: ICMP echo request, id 63553, seq 0, length 28 17:55:02.018578 IP (tos 0x10, ttl 16, id 0, offset 0, flags [none], proto UDP (17), length 328) 192.168.71.1.bootps > 192.168.71.198.bootpc: [udp sum ok] BOOTP/DHCP, Reply, length 300, xid 0xb078fb1a, Flags [none] (0x0000) Your-IP 192.168.71.198 Client-Ethernet-Address 00:26:68:04:de:05 (oui Unknown) Vendor-rfc1048 Extensions Magic Cookie 0x63825363 DHCP-Message Option 53, length 1: Offer Server-ID Option 54, length 4: 192.168.71.1 Lease-Time Option 51, length 4: 7200 Domain-Name-Server Option 6, length 4: 192.168.71.1 Domain-Name Option 15, length 12: "nglrossi.com" Subnet-Mask Option 1, length 4: 255.255.255.0 Default-Gateway Option 3, length 4: 192.168.71.1 17:55:02.025847 IP (tos 0x10, ttl 16, id 0, offset 0, flags [none], proto UDP (17), length 328) 192.168.71.1.bootps > 192.168.71.198.bootpc: [udp sum ok] BOOTP/DHCP, Reply, length 300, xid 0xb078fb1a, Flags [none] (0x0000) Your-IP 192.168.71.198 Client-Ethernet-Address 00:26:68:04:de:05 (oui Unknown) Vendor-rfc1048 Extensions Magic Cookie 0x63825363 DHCP-Message Option 53, length 1: ACK Server-ID Option 54, length 4: 192.168.71.1 Lease-Time Option 51, length 4: 7200 Domain-Name-Server Option 6, length 4: 192.168.71.1 Domain-Name Option 15, length 12: "nglrossi.com" Subnet-Mask Option 1, length 4: 255.255.255.0 Default-Gateway Option 3, length 4: 192.168.71.1 17:55:02.028479 arp who-has 192.168.71.198 tell 0.0.0.0 17:55:04.359259 arp who-has 192.168.71.1 tell 192.168.71.198 17:55:04.359300 arp reply 192.168.71.1 is-at 00:80:48:46:e3:59 (oui Unknown) 17:55:04.360953 IP (tos 0x0, ttl 69, id 5866, offset 0, flags [none], proto UDP (17), length 62) 192.168.71.198.50296 > 192.168.71.1.domain: [udp sum ok] 59054+ A? api.facebook.com. (34) 17:55:04.511435 IP (tos 0x0, ttl 64, id 43002, offset 0, flags [none], proto UDP (17), length 78) 192.168.71.1.domain > 192.168.71.198.50296: [udp sum ok] 59054 q: A? api.facebook.com. 1/0/0 api.facebook.com. A api.11.07.snc1.facebook.com (50) 17:55:04.516576 IP (tos 0x0, ttl 69, id 5867, offset 0, flags [DF], proto TCP (6), length 64) 192.168.71.198.44097 > api.11.07.snc1.facebook.com.https: S, cksum 0xd8e0 (correct), 23669898:23669898(0) win 64240 <mss 1460,nop,nop,timestamp 1206074519 0,nop,wscale 0,nop,nop,sackOK> 17:55:07.525201 IP (tos 0x0, ttl 69, id 5868, offset 0, flags [DF], proto TCP (6), length 64) 192.168.71.198.44097 > api.11.07.snc1.facebook.com.https: S, cksum 0xf988 (correct), 23669898:23669898(0) win 64240 <mss 1460,nop,nop,timestamp 1209080769 0,nop,wscale 0,nop,nop,sackOK> 17:55:07.865656 IP (tos 0x0, ttl 233, id 37711, offset 0, flags [DF], proto TCP (6), length 64) api.11.07.snc1.facebook.com.https > 192.168.71.198.44097: S, cksum 0xafb4 (correct), 2341697726:2341697726(0) ack 23669899 win 4380 <mss 1460,nop,wscale 0,nop,nop,timestamp 1873592474 1209080769,sackOK,eol> 17:55:07.867563 IP (tos 0x0, ttl 69, id 5869, offset 0, flags [DF], proto TCP (6), length 52) 192.168.71.198.44097 > api.11.07.snc1.facebook.com.https: ., cksum 0xcc3d (correct), 1:1(0) ack 1 win 64240 <nop,nop,timestamp 1209423144 1873592474> 17:55:08.647767 IP (tos 0x0, ttl 69, id 5870, offset 0, flags [none], proto UDP (17), length 60) 192.168.71.198.50296 > 192.168.71.1.domain: [udp sum ok] 44990+ A? www.google.com. (32) 17:55:08.679984 IP (tos 0x0, ttl 69, id 5871, offset 0, flags [DF], proto TCP (6), length 126) 192.168.71.198.44097 > api.11.07.snc1.facebook.com.https: P, cksum 0x8123 (correct), 1:75(74) ack 1 win 64240 <nop,nop,timestamp 1210235144 1873592474> 17:55:08.730226 IP (tos 0x0, ttl 64, id 56164, offset 0, flags [none], proto UDP (17), length 176) 192.168.71.1.domain > 192.168.71.198.50296: [udp sum ok] 44990 q: A? www.google.com. 7/0/0 www.google.com. CNAME www.l.google.com., www.l.google.com. A ey-in-f147.google.com, www.l.google.com. A ey-in-f104.google.com, www.l.google.com. A ey-in-f103.google.com, www.l.google.com. A ey-in-f106.google.com, www.l.google.com. A ey-in-f105.google.com, www.l.google.com. A ey-in-f99.google.com (148) 17:55:08.733798 IP (tos 0x0, ttl 69, id 5872, offset 0, flags [DF], proto TCP (6), length 64) 192.168.71.198.49309 > ey-in-f147.google.com.http: S, cksum 0x15bb (correct), 25096121:25096121(0) win 64240 <mss 1460,nop,nop,timestamp 1210288269 0,nop,wscale 0,nop,nop,sackOK> 17:55:09.814452 IP (tos 0x0, ttl 55, id 53113, offset 0, flags [none], proto TCP (6), length 60) ey-in-f147.google.com.http > 192.168.71.198.49309: S, cksum 0x05fc (correct), 1009875165:1009875165(0) ack 25096122 win 5672 <mss 1430,sackOK,timestamp 4224210362 1210288269,nop,wscale 9> 17:55:09.816440 IP (tos 0x0, ttl 69, id 5873, offset 0, flags [DF], proto TCP (6), length 52) 192.168.71.198.49309 > ey-in-f147.google.com.http: ., cksum 0xceb9 (correct), 1:1(0) ack 1 win 64240 <nop,nop,timestamp 1211369894 4224210362> 17:55:09.837739 IP (tos 0x0, ttl 69, id 5874, offset 0, flags [DF], proto TCP (6), length 856) 192.168.71.198.49309 > ey-in-f147.google.com.http: P, cksum 0x6e32 (correct), 1:805(804) ack 1 win 64240 <nop,nop,timestamp 1211389894 4224210362> 17:55:09.927397 IP (tos 0x0, ttl 55, id 48740, offset 0, flags [none], proto TCP (6), length 52) ey-in-f147.google.com.http > 192.168.71.198.49309: ., cksum 0x77e7 (correct), 1:1(0) ack 805 win 15 <nop,nop,timestamp 4224210474 1211389894> 17:55:09.928183 IP (tos 0x0, ttl 55, id 2163, offset 0, flags [none], proto TCP (6), length 460) ey-in-f147.google.com.http > 192.168.71.198.49309: P, cksum 0xaa67 (correct), 1:409(408) ack 805 win 15 <nop,nop,timestamp 4224210477 1211389894> 17:55:09.941012 IP (tos 0x0, ttl 69, id 5875, offset 0, flags [none], proto UDP (17), length 59) 192.168.71.198.57683 > 192.168.71.1.domain: [udp sum ok] 40409+ A? www.google.nl. (31) 17:55:09.987308 IP (tos 0x0, ttl 64, id 56850, offset 0, flags [none], proto UDP (17), length 203) 192.168.71.1.domain > 192.168.71.198.57683: [udp sum ok] 40409 q: A? www.google.nl. 8/0/0 www.google.nl. CNAME www.google.com., www.google.com. CNAME www.l.google.com., www.l.google.com. A ew-in-f103.google.com, www.l.google.com. A ew-in-f147.google.com, www.l.google.com. A ew-in-f99.google.com, www.l.google.com. A ew-in-f106.google.com, www.l.google.com. A ew-in-f104.google.com, www.l.google.com. A ew-in-f105.google.com (175) 17:55:09.991235 IP (tos 0x0, ttl 69, id 5876, offset 0, flags [DF], proto TCP (6), length 64) 192.168.71.198.46916 > ew-in-f103.google.com.http: S, cksum 0xc620 (correct), 25764963:25764963(0) win 64240 <mss 1460,nop,nop,timestamp 1211543269 0,nop,wscale 0,nop,nop,sackOK> 17:55:10.019354 IP (tos 0x0, ttl 55, id 19255, offset 0, flags [none], proto TCP (6), length 60) ew-in-f103.google.com.http > 192.168.71.198.46916: S, cksum 0x656d (correct), 770552672:770552672(0) ack 25764964 win 5672 <mss 1430,sackOK,timestamp 1537572 1211543269,nop,wscale 6> 17:55:10.021632 IP (tos 0x0, ttl 69, id 5877, offset 0, flags [DF], proto TCP (6), length 52) 192.168.71.198.46916 > ew-in-f103.google.com.http: ., cksum 0x3639 (correct), 1:1(0) ack 1 win 64240 <nop,nop,timestamp 1211574269 1537572> 17:55:10.024458 IP (tos 0x0, ttl 69, id 5878, offset 0, flags [DF], proto TCP (6), length 684) 192.168.71.198.46916 > ew-in-f103.google.com.http: P, cksum 0x43f8 (correct), 1:633(632) ack 1 win 64240 <nop,nop,timestamp 1211576269 1537572> 17:55:10.114577 IP (tos 0x0, ttl 55, id 33867, offset 0, flags [none], proto TCP (6), length 52) ew-in-f103.google.com.http > 192.168.71.198.46916: ., cksum 0x2631 (correct), 1:1(0) ack 633 win 109 <nop,nop,timestamp 1537640 1211576269> 17:55:10.136712 IP (tos 0x0, ttl 69, id 5879, offset 0, flags [DF], proto TCP (6), length 52) 192.168.71.198.49309 > ey-in-f147.google.com.http: ., cksum 0xe2af (correct), 805:805(0) ack 409 win 65228 <nop,nop,timestamp 1211690144 4224210477> 17:55:10.213056 IP (tos 0x0, ttl 55, id 32870, offset 0, flags [none], proto TCP (6), length 679) ew-in-f103.google.com.http > 192.168.71.198.46916: P, cksum 0xe123 (correct), 1:628(627) ack 633 win 109 <nop,nop,timestamp 1537711 1211576269> 17:55:10.226491 IP (tos 0x0, ttl 55, id 12374, offset 0, flags [none], proto TCP (6), length 54) ew-in-f103.google.com.http > 192.168.71.198.46916: P, cksum 0x1659 (correct), 628:630(2) ack 633 win 109 <nop,nop,timestamp 1537721 1211576269> 17:55:10.259275 IP (tos 0x0, ttl 55, id 62028, offset 0, flags [none], proto TCP (6), length 1355) ew-in-f103.google.com.http > 192.168.71.198.46916: P, cksum 0x1ed6 (correct), 630:1933(1303) ack 633 win 109 <nop,nop,timestamp 1537755 1211576269> 17:55:10.262900 IP (tos 0x0, ttl 69, id 5880, offset 0, flags [DF], proto TCP (6), length 52) 192.168.71.198.46916 > ew-in-f103.google.com.http: ., cksum 0x7adf (correct), 633:633(0) ack 1933 win 65228 <nop,nop,timestamp 1211815144 1537711> 17:55:10.263246 IP (tos 0x0, ttl 55, id 16749, offset 0, flags [none], proto TCP (6), length 460) ey-in-f147.google.com.http > 192.168.71.198.49309: P, cksum 0xa943 (correct), 1:409(408) ack 805 win 15 <nop,nop,timestamp 4224210769 1211389894> 17:55:10.265073 IP (tos 0x0, ttl 69, id 5881, offset 0, flags [DF], proto TCP (6), length 64) 192.168.71.198.49309 > ey-in-f147.google.com.http: ., cksum 0x4cdf (correct), 805:805(0) ack 409 win 65228 <nop,nop,timestamp 1211818144 4224210477,nop,nop,sack 1 {1:409}> 17:55:13.975637 IP (tos 0x0, ttl 69, id 5882, offset 0, flags [DF], proto TCP (6), length 126) 192.168.71.198.44097 > api.11.07.snc1.facebook.com.https: P, cksum 0xe39d (correct), 1:75(74) ack 1 win 64240 <nop,nop,timestamp 1215518269 1873592474> 17:55:15.182357 IP (tos 0x0, ttl 69, id 5883, offset 0, flags [DF], proto TCP (6), length 895) 192.168.71.198.49309 > ey-in-f147.google.com.http: P, cksum 0x2de7 (correct), 805:1648(843) ack 409 win 65228 <nop,nop,timestamp 1216721394 4224210477> 17:55:17.858381 IP (tos 0x0, ttl 69, id 5884, offset 0, flags [DF], proto TCP (6), length 895) 192.168.71.198.49309 > ey-in-f147.google.com.http: P, cksum 0x68bb (correct), 805:1648(843) ack 409 win 65228 <nop,nop,timestamp 1219393269 4224210477> 17:55:23.207399 IP (tos 0x0, ttl 69, id 5885, offset 0, flags [DF], proto TCP (6), length 895) 192.168.71.198.49309 > ey-in-f147.google.com.http: P, cksum 0xde63 (correct), 805:1648(843) ack 409 win 65228 <nop,nop,timestamp 1224737019 4224210477> 17:55:24.536085 IP (tos 0x0, ttl 69, id 5886, offset 0, flags [DF], proto TCP (6), length 126) 192.168.71.198.44097 > api.11.07.snc1.facebook.com.https: P, cksum 0xf441 (correct), 1:75(74) ack 1 win 64240 <nop,nop,timestamp 1226065144 1873592474> 17:55:25.946131 IP (tos 0x0, ttl 69, id 5911, offset 0, flags [none], proto UDP (17), length 62) 192.168.71.198.52497 > 192.168.71.1.domain: [udp sum ok] 13542+ A? api.facebook.com. (34) 17:55:26.094925 IP (tos 0x0, ttl 55, id 8804, offset 0, flags [none], proto TCP (6), length 504) ey-in-f147.google.com.http > 192.168.71.198.49309: P, cksum 0x1f8a (correct), 409:861(452) ack 1648 win 18 <nop,nop,timestamp 4224226658 1219393269> 17:55:26.319905 IP (tos 0x0, ttl 69, id 5912, offset 0, flags [DF], proto TCP (6), length 52) 192.168.71.198.49309 > ey-in-f147.google.com.http: ., cksum 0x18df (correct), 1648:1648(0) ack 861 win 64776 <nop,nop,timestamp 1227846394 4224226658> 17:55:26.360026 IP (tos 0x0, ttl 55, id 35194, offset 0, flags [none], proto TCP (6), length 54) ey-in-f147.google.com.http > 192.168.71.198.49309: P, cksum 0x07b5 (correct), 861:863(2) ack 1648 win 18 <nop,nop,timestamp 4224226927 1227846394> 17:55:26.366538 IP (tos 0x0, ttl 55, id 60529, offset 0, flags [none], proto TCP (6), length 1330) ey-in-f147.google.com.http > 192.168.71.198.49309: P, cksum 0x8fc6 (correct), 863:2141(1278) ack 1648 win 18 <nop,nop,timestamp 4224226927 1227846394> 17:55:26.568916 IP (tos 0x0, ttl 69, id 5913, offset 0, flags [DF], proto TCP (6), length 52) 192.168.71.198.49309 > ey-in-f147.google.com.http: ., cksum 0x407a (correct), 1648:1648(0) ack 2141 win 65228 <nop,nop,timestamp 1228096394 4224226927> 17:55:26.976171 IP (tos 0x0, ttl 69, id 5914, offset 0, flags [none], proto UDP (17), length 62) 192.168.71.198.52497 > 192.168.71.1.domain: [udp sum ok] 13542+ A? api.facebook.com. (34) 17:55:27.033227 IP (tos 0x0, ttl 64, id 44660, offset 0, flags [none], proto UDP (17), length 78) 192.168.71.1.domain > 192.168.71.198.52497: [udp sum ok] 13542 q: A? api.facebook.com. 1/0/0 api.facebook.com. A api.10.07.snc1.facebook.com (50) 17:55:27.251610 IP (tos 0x0, ttl 69, id 5915, offset 0, flags [DF], proto TCP (6), length 64) 192.168.71.198.46884 > api.10.07.snc1.facebook.com.http: S, cksum 0x75c2 (correct), 33692190:33692190(0) win 64240 <mss 1460,nop,nop,timestamp 1228777144 0,nop,wscale 0,nop,nop,sackOK> 17:55:30.261544 IP (tos 0x0, ttl 69, id 5916, offset 0, flags [DF], proto TCP (6), length 64) 192.168.71.198.46884 > api.10.07.snc1.facebook.com.http: S, cksum 0x9476 (correct), 33692190:33692190(0) win 64240 <mss 1460,nop,nop,timestamp 1231783894 0,nop,wscale 0,nop,nop,sackOK> 17:55:36.271884 IP (tos 0x0, ttl 69, id 5917, offset 0, flags [DF], proto TCP (6), length 64) 192.168.71.198.46884 > api.10.07.snc1.facebook.com.http: S, cksum 0x069b (correct), 33692190:33692190(0) win 64240 <mss 1460,nop,nop,timestamp 1237783894 0,nop,wscale 0,nop,nop,sackOK> 17:55:48.315712 IP (tos 0x0, ttl 69, id 5919, offset 0, flags [DF], proto TCP (6), length 64) 192.168.71.198.46884 > api.10.07.snc1.facebook.com.http: S, cksum 0xeae3 (correct), 33692190:33692190(0) win 64240 <mss 1460,nop,nop,timestamp 1249783894 0,nop,wscale 0,nop,nop,sackOK> 17:55:52.375344 IP (tos 0x0, ttl 69, id 5920, offset 0, flags [DF], proto TCP (6), length 933) 192.168.71.198.49309 > ey-in-f147.google.com.http: P, cksum 0x63e6 (correct), 1648:2529(881) ack 2141 win 65228 <nop,nop,timestamp 1253830769 4224226927> 17:55:52.424312 IP (tos 0x0, ttl 55, id 24618, offset 0, flags [none], proto TCP (6), length 52) ey-in-f147.google.com.http > 192.168.71.198.49309: ., cksum 0x2785 (correct), 2141:2141(0) ack 2529 win 21 <nop,nop,timestamp 4224252987 1253830769> 17:55:57.377709 arp who-has 192.168.71.1 tell 192.168.71.198 17:55:58.378483 arp who-has 192.168.71.1 tell 192.168.71.198 17:55:59.379824 arp who-has 192.168.71.1 tell 192.168.71.198 17:56:12.354753 arp who-has 192.168.71.1 tell 192.168.71.198 17:56:13.356077 arp who-has 192.168.71.1 tell 192.168.71.198 17:56:14.373619 arp who-has 192.168.71.1 tell 192.168.71.198 17:56:26.034851 arp who-has 192.168.71.1 tell 192.168.71.198 17:56:27.051863 arp who-has 192.168.71.1 tell 192.168.71.198 17:56:28.053179 arp who-has 192.168.71.1 tell 192.168.71.198 17:56:29.055659 arp who-has 192.168.71.1 tell 192.168.71.198 17:56:30.071065 arp who-has 192.168.71.1 tell 192.168.71.198 17:56:31.072116 arp who-has 192.168.71.1 tell 192.168.71.198 17:56:37.061135 arp who-has 192.168.71.1 tell 192.168.71.198 17:56:39.063759 arp who-has 192.168.71.1 tell 192.168.71.198 17:56:46.676080 arp who-has 192.168.71.1 tell 192.168.71.198 17:56:47.675967 arp who-has 192.168.71.1 tell 192.168.71.198 17:56:48.675840 arp who-has 192.168.71.1 tell 192.168.71.198 17:56:56.285134 arp who-has 192.168.71.1 tell 192.168.71.198 17:56:57.286959 arp who-has 192.168.71.1 tell 192.168.71.198 17:56:58.288134 arp who-has 192.168.71.1 tell 192.168.71.198 17:57:00.383476 arp who-has 192.168.71.1 tell 192.168.71.198 17:57:01.385234 arp who-has 192.168.71.1 tell 192.168.71.198 17:57:02.386009 arp who-has 192.168.71.1 tell 192.168.71.198 17:57:05.903659 arp who-has 192.168.71.1 tell 192.168.71.198 17:57:06.904310 arp who-has 192.168.71.1 tell 192.168.71.198 17:57:07.905090 arp who-has 192.168.71.1 tell 192.168.71.198 17:57:15.518576 arp who-has 192.168.71.1 tell 192.168.71.198 17:57:16.518221 arp who-has 192.168.71.1 tell 192.168.71.198 17:57:17.519001 arp who-has 192.168.71.1 tell 192.168.71.198 17:57:25.125733 arp who-has 192.168.71.1 tell 192.168.71.198 17:57:26.133276 arp who-has 192.168.71.1 tell 192.168.71.198 17:57:27.134365 arp who-has 192.168.71.1 tell 192.168.71.198 17:57:31.075112 arp who-has 192.168.71.1 tell 192.168.71.198 17:57:32.073601 arp who-has 192.168.71.1 tell 192.168.71.198 17:57:33.073327 arp who-has 192.168.71.1 tell 192.168.71.198 17:57:34.091756 arp who-has 192.168.71.1 tell 192.168.71.198 17:57:35.107371 arp who-has 192.168.71.1 tell 192.168.71.198 17:57:36.107938 arp who-has 192.168.71.1 tell 192.168.71.198 Thanks, Angelo