Ysurac / openmptcprouter

OpenMPTCProuter is an open source solution to aggregate multiple internet connections using Multipath TCP (MPTCP) on OpenWrt
https://www.openmptcprouter.com/
GNU General Public License v3.0
1.74k stars 253 forks source link

Forward 5 public ip to ip in lan #1006

Closed DavideCruccolini closed 3 years ago

DavideCruccolini commented 4 years ago

Hi everyone, I have been using this fantastic system for some time now and I must say that I am very satisfied. But now I have a new need, I would like to use my public ip to hijack them directly on some ip of my lan. But I would like to make sure that the nat was eliminated, in practice I would like the public IP to be intended directly on the LAN machine. It would be possible?

Thanks

ascomputer commented 4 years ago

ok then I install the vps script and update you

ascomputer commented 4 years ago

daemon.log installed vps script I posted the file

/etc/openmptcprouter-vps-admin/omr-admin-config.json { "port": 65500, "users": [ { "admin": { "username": "admin", "user_password": "B049238EB6F95F9C444943E8415E40BDEF99DE31AE987A00586C8DC82AE9D20D", "permissions": "admin", "disabled": false }, "openmptcprouter": { "username": "openmptcprouter", "user_password": "BE3F7AC089F54280A03D19AE1AE862E1B46FC68E82D0C8387FBDBF2CEE9BD741", "shadowsocks_port": 65101, "disabled": false, "vpn": "openvpn", "lanips": [ "192.168.100.1/255.255.255.0" ], "vpnremoteip": "10.255.252.6", "vpnlocalip": "10.255.252.1", "ula": "fd72:f0b2:5d9e::/48" } } ], "allips": [ "83.xxx.xxx.185", "83.xxx.xxx.187" ], "ipv4": "83.xxx.xxx.185", "hostname": "83.xxx.xxx.185", "lastchange": 1594886624.6187356

Ysurac commented 4 years ago

Should be better now, I fixed the script. gre_tunnels will appear in /etc/openmptcprouter-vps-admin/omr-admin-config.json after a VPS script update.

ascomputer commented 4 years ago

In the file /etc/openmptcprouter-vps-admin/omr-admin-config.json ... but there is vpn tunnel down

{ "port": 65500, "users": [ { "admin": { "username": "admin", "user_password": "B049238EB6F95F9C444943E8415E40BDEF99DE31AE987A00586C8DC82AE9D20D", "permissions": "admin", "disabled": false }, "openmptcprouter": { "username": "openmptcprouter", "user_password": "BE3F7AC089F54280A03D19AE1AE862E1B46FC68E82D0C8387FBDBF2CEE9BD741", "shadowsocks_port": 65101, "disabled": false, "vpn": "openvpn", "lanips": [ "192.168.100.1/255.255.255.0" ], "vpnremoteip": "10.255.252.6", "vpnlocalip": "10.255.252.1", "ula": "fd72:f0b2:5d9e::/48", "gre_tunnels": { "gre-user0-ip0": { "shadowsocks_port": "65102", "local_ip": "10.255.249.1", "remote_ip": "10.255.249.2", "public_ip": "83.xxx.xxx.185" }, "gre-user0-ip1": { "shadowsocks_port": "65103", "local_ip": "10.255.249.5", "remote_ip": "10.255.249.6", "public_ip": "83.xxx.xxx.187" } } } } ], "allips": [ "83.xxx.xxx.185", "83.xxx.xxx.187" ], "ipv4": "83.xxx.xxx.185", "hostname": "83.xxx.xxx.185", "lastchange": 1594891913.3248146 }

daemon.log Immagine

Ysurac commented 4 years ago

You may have to validate wizard again. And why do you use OpenVPN as VPN ? It's the slowest available VPN.

ascomputer commented 4 years ago

yes i am using openvpn I reinstalled all the vps and the vps script the situation is this Immagine what do you advise me to do?

Ysurac commented 4 years ago

You updated the key in the wizard ?

ascomputer commented 4 years ago

Yes

Ysurac commented 4 years ago

Try to reboot the router and if no change validate the wizard again.

ascomputer commented 4 years ago

I restarted the router and checked all the keys ... same problem

Ysurac commented 4 years ago

Check the log in State->System log

ascomputer commented 4 years ago

Thu Jul 16 13:33:19 2020 daemon.info dnsmasq[7490]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:33:19 2020 daemon.info dnsmasq[7490]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:33:19 2020 daemon.info dnsmasq[7490]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:33:19 2020 daemon.info dnsmasq[7490]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:33:19 2020 daemon.info dnsmasq[7490]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:33:19 2020 daemon.info dnsmasq[7490]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:33:19 2020 daemon.info dnsmasq[7490]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:33:19 2020 daemon.info dnsmasq[7490]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:33:19 2020 daemon.info dnsmasq[7490]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:33:19 2020 daemon.info dnsmasq[7490]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:33:19 2020 daemon.info dnsmasq[7490]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:33:19 2020 daemon.info dnsmasq[7490]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:33:19 2020 daemon.info dnsmasq[7490]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:33:19 2020 daemon.info dnsmasq[7490]: using 43 more nameservers Thu Jul 16 13:33:19 2020 daemon.info dnsmasq[7490]: read /etc/hosts - 4 addresses Thu Jul 16 13:33:19 2020 daemon.info dnsmasq[7490]: read /tmp/hosts/dhcp.cfg01411c - 2 addresses Thu Jul 16 13:33:19 2020 daemon.info dnsmasq-dhcp[7490]: read /etc/ethers - 0 addresses Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty28, subsystem=tty Thu Jul 16 13:33:19 2020 daemon.info dnsmasq[7490]: read /etc/hosts - 4 addresses Thu Jul 16 13:33:19 2020 daemon.info dnsmasq[7490]: read /tmp/hosts/dhcp.cfg01411c - 2 addresses Thu Jul 16 13:33:19 2020 daemon.info dnsmasq-dhcp[7490]: read /etc/ethers - 0 addresses Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty56, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty56 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty56, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty18, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty18 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty18, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty46, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty46 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty46, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=console, subsystem=tty, sysfspath=/sys/devices/virtual/tty/console Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=console, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=ttyS6, subsystem=tty, sysfspath=/sys/devices/platform/serial8250/tty/ttyS6 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=ttyS6, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty36, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty36 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty36, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty26, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty26 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty26, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty54, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty54 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty54, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty16, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty16 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty16, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty8, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty8 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty8, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty44, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty44 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty44, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=ttyS4, subsystem=tty, sysfspath=/sys/devices/pci0000:00/0000:00:16.3/tty/ttyS4 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=ttyS4, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty34, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty34 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty34, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty62, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty62 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty62, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty24, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty24 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty24, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty52, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty52 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty52, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty14, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty14 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty14, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty6, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty6 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty6, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty42, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty42 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty42, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=ttyS2, subsystem=tty, sysfspath=/sys/devices/platform/serial8250/tty/ttyS2 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=ttyS2, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty32, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty32 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty32, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty60, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty60 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty60, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty22, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty22 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty22, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty50, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty50 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty50, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=ttyS14, subsystem=tty, sysfspath=/sys/devices/platform/serial8250/tty/ttyS14 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=ttyS14, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty12, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty12 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty12, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty4, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty4 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty4, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty40, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty40 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty40, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=ttyS0, subsystem=tty, sysfspath=/sys/devices/pnp0/00:02/tty/ttyS0 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=ttyS0, subsystem=tty Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty30, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty30 Thu Jul 16 13:33:19 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty30, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty59, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty59 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty59, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty20, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty20 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty20, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty49, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty49 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty49, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=ttyS12, subsystem=tty, sysfspath=/sys/devices/platform/serial8250/tty/ttyS12 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=ttyS12, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty10, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty10 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty10, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=ttyS9, subsystem=tty, sysfspath=/sys/devices/platform/serial8250/tty/ttyS9 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=ttyS9, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty2, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty2 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty2, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty39, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty39 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty39, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty29, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty29 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty29, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty57, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty57 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty57, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty19, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty19 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty19, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty47, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty47 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty47, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=ttyS10, subsystem=tty, sysfspath=/sys/devices/platform/serial8250/tty/ttyS10 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=ttyS10, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=ttyS7, subsystem=tty, sysfspath=/sys/devices/platform/serial8250/tty/ttyS7 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=ttyS7, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty0, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty0 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty0, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty37, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty37 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty37, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty27, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty27 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty27, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty55, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty55 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty55, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty17, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty17 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty17, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty9, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty9 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty9, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty45, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty45 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty45, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=ttyS5, subsystem=tty, sysfspath=/sys/devices/platform/serial8250/tty/ttyS5 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=ttyS5, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty35, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty35 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty35, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty63, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty63 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty63, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty25, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty25 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty25, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty53, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty53 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty53, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty15, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty15 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty15, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty7, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty7 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty7, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty43, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty43 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty43, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=ttyS3, subsystem=tty, sysfspath=/sys/devices/platform/serial8250/tty/ttyS3 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=ttyS3, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty33, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty33 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty33, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty61, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty61 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty61, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty23, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty23 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty23, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty51, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty51 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty51, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=ttyS15, subsystem=tty, sysfspath=/sys/devices/platform/serial8250/tty/ttyS15 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=ttyS15, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty13, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty13 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty13, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty5, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty5 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty5, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty41, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty41 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty41, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=ttyS1, subsystem=tty, sysfspath=/sys/devices/pnp0/00:03/tty/ttyS1 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=ttyS1, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty31, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty31 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty31, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty21, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty21 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty21, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=ttyS13, subsystem=tty, sysfspath=/sys/devices/platform/serial8250/tty/ttyS13 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=ttyS13, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty11, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty11 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty11, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=tty3, subsystem=tty, sysfspath=/sys/devices/virtual/tty/tty3 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=tty3, subsystem=tty Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=ip6tnl0, subsystem=net, sysfspath=/sys/devices/virtual/net/ip6tnl0 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=ip6tnl0, subsystem=net Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=sit0, subsystem=net, sysfspath=/sys/devices/virtual/net/sit0 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=sit0, subsystem=net Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=gre0, subsystem=net, sysfspath=/sys/devices/virtual/net/gre0 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=gre0, subsystem=net Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=gretap0, subsystem=net, sysfspath=/sys/devices/virtual/net/gretap0 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=gretap0, subsystem=net Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=erspan0, subsystem=net, sysfspath=/sys/devices/virtual/net/erspan0 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=erspan0, subsystem=net Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=ip6gre0, subsystem=net, sysfspath=/sys/devices/virtual/net/ip6gre0 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=ip6gre0, subsystem=net Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=teql0, subsystem=net, sysfspath=/sys/devices/virtual/net/teql0 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=teql0, subsystem=net Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=eth0, subsystem=net, sysfspath=/sys/devices/pci0000:00/0000:00:19.0/net/eth0 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=eth0, subsystem=net Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=eth1, subsystem=net, sysfspath=/sys/devices/pci0000:00/0000:00:1c.0/0000:01:00.0/net/eth1 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=eth1, subsystem=net Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=eth2, subsystem=net, sysfspath=/sys/devices/pci0000:00/0000:00:1c.1/0000:02:00.0/net/eth2 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=eth2, subsystem=net Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=eth3, subsystem=net, sysfspath=/sys/devices/pci0000:00/0000:00:1c.2/0000:03:00.0/net/eth3 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=eth3, subsystem=net Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=eth4, subsystem=net, sysfspath=/sys/devices/pci0000:00/0000:00:1c.3/0000:04:00.0/net/eth4 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=eth4, subsystem=net Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=eth5, subsystem=net, sysfspath=/sys/devices/pci0000:00/0000:00:1c.4/0000:05:00.0/net/eth5 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=eth5, subsystem=net Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=eth6, subsystem=net, sysfspath=/sys/devices/pci0000:00/0000:00:1c.6/0000:06:00.0/net/eth6 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=eth6, subsystem=net Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=eth7, subsystem=net, sysfspath=/sys/devices/pci0000:00/0000:00:1c.7/0000:07:00.0/net/eth7 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=eth7, subsystem=net Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=gre4-omrip0, subsystem=net, sysfspath=/sys/devices/virtual/net/gre4-omrip0 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=gre4-omrip0, subsystem=net Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: cached event found: action=add, name=gre4-omrip1, subsystem=net, sysfspath=/sys/devices/virtual/net/gre4-omrip1 Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: event reported: action=add, name=gre4-omrip1, subsystem=net Thu Jul 16 13:33:20 2020 user.notice ModemManager: hotplug: error: parent device sysfspath not found Thu Jul 16 13:33:21 2020 daemon.info dnsmasq-dhcp[7490]: DHCPREQUEST(eth0) 192.168.1.4 a8:5e:45:e6:23:d7 Thu Jul 16 13:33:21 2020 daemon.info dnsmasq-dhcp[7490]: DHCPNAK(eth0) 192.168.1.4 a8:5e:45:e6:23:d7 wrong network Thu Jul 16 13:33:21 2020 daemon.notice netifd: Network device 'eth0' link is up Thu Jul 16 13:33:21 2020 daemon.notice netifd: Interface 'lan' has link connectivity Thu Jul 16 13:33:21 2020 kern.info kernel: [ 14.603221] e1000e: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx Thu Jul 16 13:33:21 2020 kern.info kernel: [ 14.604300] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Thu Jul 16 13:33:21 2020 daemon.notice netifd: Network device 'eth2' link is up Thu Jul 16 13:33:21 2020 daemon.notice netifd: Interface 'wan2' has link connectivity Thu Jul 16 13:33:21 2020 daemon.notice netifd: Interface 'wan2' is setting up now Thu Jul 16 13:33:21 2020 kern.info kernel: [ 14.827065] e1000e: eth2 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None Thu Jul 16 13:33:21 2020 daemon.notice netifd: wan2 (9867): udhcpc: started, v1.31.1 Thu Jul 16 13:33:21 2020 daemon.notice netifd: wan2 (9867): udhcpc: sending discover Thu Jul 16 13:33:22 2020 user.notice OMR-VPS: Can't get token, try later Thu Jul 16 13:33:22 2020 daemon.info dnsmasq[7490]: read /etc/hosts - 4 addresses Thu Jul 16 13:33:22 2020 daemon.info dnsmasq[7490]: read /tmp/hosts/dhcp.cfg01411c - 2 addresses Thu Jul 16 13:33:22 2020 daemon.info dnsmasq-dhcp[7490]: read /etc/ethers - 0 addresses Thu Jul 16 13:33:23 2020 daemon.info dnsmasq-dhcp[7490]: DHCPREQUEST(eth0) 192.168.1.4 a8:5e:45:e6:23:d7 Thu Jul 16 13:33:23 2020 daemon.info dnsmasq-dhcp[7490]: DHCPNAK(eth0) 192.168.1.4 a8:5e:45:e6:23:d7 wrong network Thu Jul 16 13:33:24 2020 user.notice unbound: default memory configuration Thu Jul 16 13:33:24 2020 daemon.notice unbound: [10195:0] notice: init module 0: iterator Thu Jul 16 13:33:24 2020 user.notice OMR-VPS: Can't get token, try later Thu Jul 16 13:33:24 2020 daemon.info unbound: [10195:0] info: start of service (unbound 1.10.1). Thu Jul 16 13:33:24 2020 daemon.notice netifd: wan2 (9867): udhcpc: sending discover Thu Jul 16 13:33:26 2020 daemon.info dnsmasq-dhcp[7490]: DHCPDISCOVER(eth0) a8:5e:45:e6:23:d7 Thu Jul 16 13:33:26 2020 daemon.info dnsmasq-dhcp[7490]: DHCPOFFER(eth0) 192.168.100.193 a8:5e:45:e6:23:d7 Thu Jul 16 13:33:26 2020 daemon.info dnsmasq-dhcp[7490]: DHCPREQUEST(eth0) 192.168.100.193 a8:5e:45:e6:23:d7 Thu Jul 16 13:33:26 2020 daemon.info dnsmasq-dhcp[7490]: DHCPACK(eth0) 192.168.100.193 a8:5e:45:e6:23:d7 DESKTOP-5TT9PSB Thu Jul 16 13:33:27 2020 daemon.notice netifd: Network device 'eth1' link is up Thu Jul 16 13:33:27 2020 daemon.notice netifd: Interface 'wan1' has link connectivity Thu Jul 16 13:33:27 2020 daemon.notice netifd: Interface 'wan1' is setting up now Thu Jul 16 13:33:27 2020 kern.info kernel: [ 20.655068] e1000e: eth1 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None Thu Jul 16 13:33:27 2020 daemon.notice netifd: wan1 (10289): udhcpc: started, v1.31.1 Thu Jul 16 13:33:27 2020 daemon.notice netifd: wan1 (10289): udhcpc: sending discover Thu Jul 16 13:33:27 2020 daemon.notice netifd: wan2 (9867): udhcpc: sending discover Thu Jul 16 13:33:29 2020 daemon.notice netifd: wan2 (9867): udhcpc: sending select for 10.140.0.2 Thu Jul 16 13:33:29 2020 daemon.notice netifd: wan2 (9867): udhcpc: lease of 10.140.0.2 obtained, lease time 86400 Thu Jul 16 13:33:29 2020 daemon.notice netifd: Interface 'wan2' is now up Thu Jul 16 13:33:30 2020 daemon.notice netifd: wan1 (10289): udhcpc: sending discover Thu Jul 16 13:33:32 2020 user.notice OMR-VPS: Can't get token, try later Thu Jul 16 13:33:33 2020 daemon.notice netifd: wan1 (10289): udhcpc: sending discover Thu Jul 16 13:33:35 2020 daemon.notice netifd: wan1 (10289): udhcpc: sending select for 192.168.1.5 Thu Jul 16 13:33:35 2020 daemon.notice netifd: wan1 (10289): udhcpc: lease of 192.168.1.5 obtained, lease time 86400 Thu Jul 16 13:33:35 2020 daemon.notice netifd: Interface 'wan1' is now up Thu Jul 16 13:33:38 2020 user.notice OMR-VPS: Can't get token, try later Thu Jul 16 13:33:53 2020 daemon.err uhttpd[5985]: luci: accepted login on / for root from 192.168.100.193 Thu Jul 16 13:34:08 2020 user.notice mptcp: Reloading mptcp config due to ifup of loopback (lo) Thu Jul 16 13:34:08 2020 user.notice firewall: Reloading firewall due to ifup of wan3 (eth3) Thu Jul 16 13:34:09 2020 user.notice OMR-VPS: Can't get token, try later Thu Jul 16 13:34:09 2020 user.notice mptcp: Reloading mptcp config due to ifup of wan3 (eth3) Thu Jul 16 13:34:09 2020 user.notice firewall: Reloading firewall due to ifup of wan4 (eth4) Thu Jul 16 13:34:09 2020 user.notice omr-tracker: Launching... Thu Jul 16 13:34:09 2020 user.notice OMR-VPS: Can't get token, try later Thu Jul 16 13:34:09 2020 user.notice mptcp: Reloading mptcp config due to ifup of wan4 (eth4) Thu Jul 16 13:34:09 2020 user.notice omr-tracker: Launched Thu Jul 16 13:34:09 2020 user.notice post-tracking-post-tracking: wan3 (eth3) switched off Thu Jul 16 13:34:09 2020 user.notice post-tracking-post-tracking: omrvpn down. Replace default route by 192.168.1.1 dev eth1 Thu Jul 16 13:34:09 2020 user.notice post-tracking-post-tracking: Delete default route via dev eth3 Thu Jul 16 13:34:09 2020 user.notice post-tracking-post-tracking: wan4 (eth4) switched off Thu Jul 16 13:34:09 2020 daemon.notice openvpn(omr)[12678]: OpenVPN 2.4.9 i486-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] Thu Jul 16 13:34:09 2020 daemon.notice openvpn(omr)[12678]: library versions: OpenSSL 1.1.1g 21 Apr 2020, LZO 2.10 Thu Jul 16 13:34:09 2020 daemon.warn openvpn(omr)[12678]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info. Thu Jul 16 13:34:09 2020 daemon.warn openvpn(omr)[12678]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts Thu Jul 16 13:34:09 2020 daemon.notice openvpn(omr)[12678]: TCP/UDP: Preserving recently used remote address: [AF_INET]83.136.106.185:65301 Thu Jul 16 13:34:09 2020 daemon.notice openvpn(omr)[12678]: Attempting to establish TCP connection with [AF_INET]83.136.106.185:65301 [nonblock] Thu Jul 16 13:34:09 2020 user.notice post-tracking-post-tracking: Delete default route via dev eth4 Thu Jul 16 13:34:09 2020 user.notice post-tracking-post-tracking: wan3 down. Replace default route by 192.168.1.1 dev eth1 Thu Jul 16 13:34:09 2020 daemon.err usbmuxd[12912]: [13:34:09.541][3] usbmuxd v1.1.1 starting up Thu Jul 16 13:34:09 2020 daemon.err usbmuxd[12912]: [13:34:09.541][3] Using libusb 1.0.22 Thu Jul 16 13:34:09 2020 daemon.err usbmuxd[12912]: [13:34:09.541][3] Initialization complete Thu Jul 16 13:34:09 2020 daemon.err usbmuxd[12912]: [13:34:09.541][3] Enabled exit on SIGUSR1 if no devices are attached. Start a new instance with "--exit" to trigger. Thu Jul 16 13:34:09 2020 user.notice post-tracking-post-tracking: wan4 down. Replace default route by 192.168.1.1 dev eth1 Thu Jul 16 13:34:09 2020 user.notice post-tracking-post-tracking: omrvpn down Thu Jul 16 13:34:09 2020 user.notice firewall: Reloading firewall due to ifup of omrip0 (gre4-omrip0) Thu Jul 16 13:34:09 2020 user.notice post-tracking-post-tracking: Disable Pi-Hole... Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[7490]: exiting on receipt of SIGTERM Thu Jul 16 13:34:09 2020 user.notice dnsmasq: DNS rebinding protection is active, will discard upstream RFC1918 responses! Thu Jul 16 13:34:09 2020 user.notice dnsmasq: Allowing 127.0.0.0/8 responses Thu Jul 16 13:34:09 2020 user.notice dnsmasq: Allowing RFC1918 responses for domain plex.direct Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: started, version 2.81 cachesize 150 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: DNS service limited to local subnets Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: compile time options: IPv6 GNU-getopt no-DBus UBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP conntrack ipset auth DNSSEC no-ID loop-detect inotify dumpfile Thu Jul 16 13:34:09 2020 daemon.info dnsmasq-dhcp[13477]: DHCP, IP range 192.168.100.100 -- 192.168.100.249, lease time 12h Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using only locally-known addresses for domain test Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using only locally-known addresses for domain onion Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using only locally-known addresses for domain localhost Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using only locally-known addresses for domain local Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using only locally-known addresses for domain invalid Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using only locally-known addresses for domain bind Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: using 44 more nameservers Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: read /etc/hosts - 4 addresses Thu Jul 16 13:34:09 2020 daemon.info dnsmasq[13477]: read /tmp/hosts/dhcp.cfg01411c - 2 addresses Thu Jul 16 13:34:09 2020 daemon.info dnsmasq-dhcp[13477]: read /etc/ethers - 0 addresses Thu Jul 16 13:34:09 2020 user.notice OMR-VPS: Can't get token, try later Thu Jul 16 13:34:09 2020 user.notice mptcp: Reloading mptcp config due to ifup of omrip0 (gre4-omrip0) Thu Jul 16 13:34:10 2020 daemon.notice openvpn(omr)[12678]: TCP connection established with [AF_INET]83.136.106.185:65301 Thu Jul 16 13:34:10 2020 daemon.notice openvpn(omr)[12678]: TCP_CLIENT link local: (not bound) Thu Jul 16 13:34:10 2020 daemon.notice openvpn(omr)[12678]: TCP_CLIENT link remote: [AF_INET]83.136.106.185:65301 Thu Jul 16 13:34:11 2020 daemon.err openvpn(omr)[12678]: VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: CN=ChangeMe Thu Jul 16 13:34:11 2020 daemon.err openvpn(omr)[12678]: OpenSSL: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed Thu Jul 16 13:34:11 2020 daemon.err openvpn(omr)[12678]: TLS_ERROR: BIO read tls_read_plaintext error Thu Jul 16 13:34:11 2020 daemon.err openvpn(omr)[12678]: TLS Error: TLS object -> incoming plaintext read error Thu Jul 16 13:34:11 2020 daemon.err openvpn(omr)[12678]: TLS Error: TLS handshake failed Thu Jul 16 13:34:11 2020 daemon.err openvpn(omr)[12678]: Fatal TLS error (check_tls_errors_co), restarting Thu Jul 16 13:34:11 2020 daemon.notice openvpn(omr)[12678]: SIGUSR1[soft,tls-error] received, process restarting Thu Jul 16 13:34:11 2020 user.err vnstat_backup: cannot restore, backup file does not exist (yet) Thu Jul 16 13:34:11 2020 user.notice adb-enablemodem: INFO: waiting for device Thu Jul 16 13:34:11 2020 user.notice omr-bypass: Starting OMR-ByPass... Thu Jul 16 13:34:11 2020 user.notice post-tracking-post-tracking: Set ip route replace default scope global nexthop via 192.168.1.1 dev eth1 weight 2 nexthop via 10.140.0.1 dev eth2 weight 1 Thu Jul 16 13:34:12 2020 user.notice OMR-VPS: Can't get token, try later Thu Jul 16 13:34:13 2020 user.notice post-tracking-post-tracking: Set server vps (83.136.106.185) default route 83.136.106.185 nexthop via 192.168.1.1 dev eth1 weight 10 nexthop via 10.140.0.1 dev eth2 weight 1 Thu Jul 16 13:34:13 2020 user.notice post-tracking-post-tracking: Can't find Shadowsocks, restart it... Thu Jul 16 13:34:13 2020 user.notice Shadowsocks: Rules DOWN Thu Jul 16 13:34:13 2020 daemon.err omr-tracker[12463]: Command failed: Not found Thu Jul 16 13:34:13 2020 user.notice Shadowsocks: Rules UP Thu Jul 16 13:34:13 2020 daemon.err omr-tracker[12463]: Flush terminated Thu Jul 16 13:34:13 2020 daemon.err omr-tracker[12463]: ip6tables-restore v1.8.4 (legacy): Set ss_rules6dst_bypass_all doesn't exist. Thu Jul 16 13:34:13 2020 daemon.err omr-tracker[12463]: Thu Jul 16 13:34:13 2020 daemon.err omr-tracker[12463]: Error occurred at line: 2 Thu Jul 16 13:34:13 2020 daemon.err omr-tracker[12463]: Try ip6tables-restore -h' or 'ip6tables-restore --help' for more information. Thu Jul 16 13:34:13 2020 daemon.err omr-tracker[12463]: Flush terminated Thu Jul 16 13:34:14 2020 daemon.err omr-tracker[12463]: RTNETLINK answers: File exists Thu Jul 16 13:34:14 2020 user.notice OMR-VPS: Can't get token, try later (can ping server, server API answer) Thu Jul 16 13:34:14 2020 user.notice post-tracking-post-tracking: Can't find Shadowsocks, restart it... Thu Jul 16 13:34:14 2020 daemon.err omr-tracker[12463]: Flush terminated Thu Jul 16 13:34:14 2020 daemon.err omr-tracker[12463]: ip6tables-restore v1.8.4 (legacy): Set ss_rules6__dst_bypass_all doesn't exist. Thu Jul 16 13:34:14 2020 daemon.err omr-tracker[12463]: Thu Jul 16 13:34:14 2020 daemon.err omr-tracker[12463]: Error occurred at line: 2 Thu Jul 16 13:34:14 2020 daemon.err omr-tracker[12463]: Tryip6tables-restore -h' or 'ip6tables-restore --help' for more information. Thu Jul 16 13:34:14 2020 daemon.err omr-tracker[12463]: Flush terminated Thu Jul 16 13:34:14 2020 daemon.err omr-tracker-ss[12467]: Failed to send request: Operation not permitted Thu Jul 16 13:34:14 2020 daemon.err omr-tracker[12463]: Flush terminated Thu Jul 16 13:34:14 2020 daemon.err omr-tracker[12463]: ip6tables-restore v1.8.4 (legacy): Set ss_rules6dst_bypass_all doesn't exist. Thu Jul 16 13:34:14 2020 daemon.err omr-tracker[12463]: Thu Jul 16 13:34:14 2020 daemon.err omr-tracker[12463]: Error occurred at line: 2 Thu Jul 16 13:34:14 2020 daemon.err omr-tracker[12463]: Try ip6tables-restore -h' or 'ip6tables-restore --help' for more information. Thu Jul 16 13:34:14 2020 daemon.err omr-tracker[12463]: Flush terminated Thu Jul 16 13:34:14 2020 user.notice Shadowsocks: Reload omr-bypass rules Thu Jul 16 13:34:14 2020 user.notice omr-bypass: Starting OMR-ByPass... Thu Jul 16 13:34:15 2020 user.notice omr-bypass: Reload dnsmasq... Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[13477]: exiting on receipt of SIGTERM Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: started, version 2.81 cachesize 150 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: DNS service limited to local subnets Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: compile time options: IPv6 GNU-getopt no-DBus UBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP conntrack ipset auth DNSSEC no-ID loop-detect inotify dumpfile Thu Jul 16 13:34:15 2020 daemon.info dnsmasq-dhcp[16838]: DHCP, IP range 192.168.100.100 -- 192.168.100.249, lease time 12h Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using only locally-known addresses for domain test Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using only locally-known addresses for domain onion Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using only locally-known addresses for domain localhost Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using only locally-known addresses for domain local Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using only locally-known addresses for domain invalid Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using only locally-known addresses for domain bind Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using nameserver 127.0.0.1#5353 Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: using 44 more nameservers Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: read /etc/hosts - 4 addresses Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: read /tmp/hosts/dhcp.cfg01411c - 2 addresses Thu Jul 16 13:34:15 2020 daemon.info dnsmasq-dhcp[16838]: read /etc/ethers - 0 addresses Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: read /etc/hosts - 4 addresses Thu Jul 16 13:34:15 2020 daemon.info dnsmasq[16838]: read /tmp/hosts/dhcp.cfg01411c - 2 addresses Thu Jul 16 13:34:15 2020 daemon.info dnsmasq-dhcp[16838]: read /etc/ethers - 0 addresses Thu Jul 16 13:34:15 2020 user.notice omr-bypass: OMR-ByPass is running Thu Jul 16 13:34:15 2020 user.notice Shadowsocks: Rules DOWN Thu Jul 16 13:34:15 2020 user.info : using tcp fast open Thu Jul 16 13:34:15 2020 user.info : using tcp fast open Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16879]: enable TCP no-delay Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16881]: enable TCP no-delay Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16879]: resolving hostname to IPv6 address first Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16879]: initializing ciphers... chacha20-ietf-poly1305 Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16881]: initializing ciphers... chacha20-ietf-poly1305 Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16881]: listening at 0.0.0.0:1101 Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16879]: listening at 0.0.0.0:1100 Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16881]: tcp port reuse enabled Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16879]: tcp port reuse enabled Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16879]: UDP relay enabled Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16881]: UDP relay enabled Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16879]: udp port reuse enabled Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16881]: udp port reuse enabled Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16881]: running from root user Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16879]: running from root user Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16884]: resolving hostname to IPv6 address first Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-local[16878]: using tcp fast open Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-local[16878]: enable TCP no-delay Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-local[16878]: initializing ciphers... chacha20-ietf-poly1305 Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16884]: initializing ciphers... chacha20-ietf-poly1305 Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16884]: listening at :::2301 Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16884]: tcp port reuse enabled Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-local[16878]: listening at 127.0.0.1:1111 Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16884]: UDP relay enabled Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-local[16878]: tcp port reuse enabled Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-local[16878]: udprelay enabled Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16884]: udp port reuse enabled Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-local[16878]: udp port reuse enabled Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16884]: running from root user Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-local[16878]: running from root user Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16883]: resolving hostname to IPv6 address first Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16883]: initializing ciphers... chacha20-ietf-poly1305 Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16883]: listening at :::2300 Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16883]: tcp port reuse enabled Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16883]: UDP relay enabled Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16883]: udp port reuse enabled Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16883]: running from root user Thu Jul 16 13:34:15 2020 user.info : using tcp fast open Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16880]: enable TCP no-delay Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16880]: resolving hostname to IPv6 address first Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16880]: initializing ciphers... chacha20-ietf-poly1305 Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16880]: listening at 0.0.0.0:1100 Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16880]: tcp port reuse enabled Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16880]: UDP relay enabled Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16880]: udp port reuse enabled Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16880]: running from root user Thu Jul 16 13:34:15 2020 user.info : using tcp fast open Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16882]: enable TCP no-delay Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16882]: initializing ciphers... chacha20-ietf-poly1305 Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16882]: listening at 0.0.0.0:1101 Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16882]: tcp port reuse enabled Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16882]: UDP relay enabled Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16882]: udp port reuse enabled Thu Jul 16 13:34:15 2020 daemon.info /usr/bin/ss-redir[16882]: running from root user Thu Jul 16 13:34:15 2020 user.notice Shadowsocks: Rules UP Thu Jul 16 13:34:15 2020 daemon.err omr-tracker[12462]: Flush terminated Thu Jul 16 13:34:15 2020 daemon.err omr-tracker[12462]: ip6tables-restore v1.8.4 (legacy): Set ss_rules6__dst_bypass_all doesn't exist. Thu Jul 16 13:34:15 2020 daemon.err omr-tracker[12462]: Thu Jul 16 13:34:15 2020 daemon.err omr-tracker[12462]: Error occurred at line: 2 Thu Jul 16 13:34:15 2020 daemon.err omr-tracker[12462]: Tryip6tables-restore -h' or 'ip6tables-restore --help' for more information. Thu Jul 16 13:34:15 2020 daemon.err omr-tracker[12462]: Flush terminated Thu Jul 16 13:34:16 2020 daemon.warn openvpn(omr)[12678]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info. Thu Jul 16 13:34:16 2020 daemon.warn openvpn(omr)[12678]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts Thu Jul 16 13:34:16 2020 daemon.notice openvpn(omr)[12678]: TCP/UDP: Preserving recently used remote address: [AF_INET]83.136.106.185:65301 Thu Jul 16 13:34:16 2020 daemon.notice openvpn(omr)[12678]: Attempting to establish TCP connection with [AF_INET]83.136.106.185:65301 [nonblock] Thu Jul 16 13:34:16 2020 daemon.err omr-tracker[12462]: RTNETLINK answers: File exists Thu Jul 16 13:34:16 2020 daemon.err omr-tracker[12462]: Flush terminated Thu Jul 16 13:34:16 2020 daemon.err omr-tracker[12462]: ip6tables-restore v1.8.4 (legacy): Set ss_rules6__dst_bypass_all doesn't exist. Thu Jul 16 13:34:16 2020 daemon.err omr-tracker[12462]: Thu Jul 16 13:34:16 2020 daemon.err omr-tracker[12462]: Error occurred at line: 2 Thu Jul 16 13:34:16 2020 daemon.err omr-tracker[12462]: Try ip6tables-restore -h' or 'ip6tables-restore --help' for more information. Thu Jul 16 13:34:16 2020 daemon.err omr-tracker[12462]: Flush terminated Thu Jul 16 13:34:16 2020 daemon.err omr-tracker[12462]: Flush terminated Thu Jul 16 13:34:16 2020 daemon.err omr-tracker[12462]: ip6tables-restore v1.8.4 (legacy): Set ss_rules6__dst_bypass_all doesn't exist. Thu Jul 16 13:34:16 2020 daemon.err omr-tracker[12462]: Thu Jul 16 13:34:16 2020 daemon.err omr-tracker[12462]: Error occurred at line: 2 Thu Jul 16 13:34:16 2020 daemon.err omr-tracker[12462]: Tryip6tables-restore -h' or 'ip6tables-restore --help' for more information. Thu Jul 16 13:34:16 2020 daemon.err omr-tracker[12462]: Flush terminated Thu Jul 16 13:34:16 2020 user.notice Shadowsocks: Reload omr-bypass rules Thu Jul 16 13:34:16 2020 user.notice omr-bypass: Starting OMR-ByPass... Thu Jul 16 13:34:17 2020 daemon.notice openvpn(omr)[12678]: TCP connection established with [AF_INET]83.136.106.185:65301 Thu Jul 16 13:34:17 2020 daemon.notice openvpn(omr)[12678]: TCP_CLIENT link local: (not bound) Thu Jul 16 13:34:17 2020 daemon.notice openvpn(omr)[12678]: TCP_CLIENT link remote: [AF_INET]83.136.106.185:65301 Thu Jul 16 13:34:17 2020 daemon.err openvpn(omr)[12678]: VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: CN=ChangeMe Thu Jul 16 13:34:17 2020 daemon.err openvpn(omr)[12678]: OpenSSL: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed Thu Jul 16 13:34:17 2020 daemon.err openvpn(omr)[12678]: TLS_ERROR: BIO read tls_read_plaintext error Thu Jul 16 13:34:17 2020 daemon.err openvpn(omr)[12678]: TLS Error: TLS object -> incoming plaintext read error Thu Jul 16 13:34:17 2020 daemon.err openvpn(omr)[12678]: TLS Error: TLS handshake failed Thu Jul 16 13:34:17 2020 daemon.err openvpn(omr)[12678]: Fatal TLS error (check_tls_errors_co), restarting Thu Jul 16 13:34:17 2020 daemon.notice openvpn(omr)[12678]: SIGUSR1[soft,tls-error] received, process restarting Thu Jul 16 13:34:17 2020 user.notice omr-bypass: Reload dnsmasq... Thu Jul 16 13:34:17 2020 daemon.info dnsmasq[16838]: read /etc/hosts - 4 addresses Thu Jul 16 13:34:17 2020 daemon.info dnsmasq[16838]: read /tmp/hosts/dhcp.cfg01411c - 2 addresses Thu Jul 16 13:34:17 2020 daemon.info dnsmasq-dhcp[16838]: read /etc/ethers - 0 addresses Thu Jul 16 13:34:17 2020 user.notice omr-bypass: OMR-ByPass is running Thu Jul 16 13:34:17 2020 user.info : using tcp fast open Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18514]: enable TCP no-delay Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18514]: resolving hostname to IPv6 address first Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18514]: initializing ciphers... chacha20-ietf-poly1305 Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18514]: listening at 0.0.0.0:1100 Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18514]: tcp port reuse enabled Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18514]: UDP relay enabled Thu Jul 16 13:34:17 2020 user.info : using tcp fast open Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18516]: enable TCP no-delay Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18516]: initializing ciphers... chacha20-ietf-poly1305 Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18514]: udp port reuse enabled Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18514]: running from root user Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18516]: listening at 0.0.0.0:1101 Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18516]: tcp port reuse enabled Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18516]: UDP relay enabled Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18516]: udp port reuse enabled Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18516]: running from root user Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18519]: resolving hostname to IPv6 address first Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18519]: initializing ciphers... chacha20-ietf-poly1305 Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18519]: listening at :::2301 Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18519]: tcp port reuse enabled Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18519]: UDP relay enabled Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18519]: udp port reuse enabled Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18519]: running from root user Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18518]: resolving hostname to IPv6 address first Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18518]: initializing ciphers... chacha20-ietf-poly1305 Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18518]: listening at :::2300 Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18518]: tcp port reuse enabled Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18518]: UDP relay enabled Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18518]: udp port reuse enabled Thu Jul 16 13:34:17 2020 user.info : using tcp fast open Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18518]: running from root user Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18517]: enable TCP no-delay Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18517]: initializing ciphers... chacha20-ietf-poly1305 Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18517]: listening at 0.0.0.0:1101 Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18517]: tcp port reuse enabled Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18517]: UDP relay enabled Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18517]: udp port reuse enabled Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18517]: running from root user Thu Jul 16 13:34:17 2020 user.info : using tcp fast open Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18515]: enable TCP no-delay Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18515]: resolving hostname to IPv6 address first Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18515]: initializing ciphers... chacha20-ietf-poly1305 Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18515]: listening at 0.0.0.0:1100 Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18515]: tcp port reuse enabled Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18515]: UDP relay enabled Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18515]: udp port reuse enabled Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-redir[18515]: running from root user Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-local[18513]: using tcp fast open Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-local[18513]: enable TCP no-delay Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-local[18513]: initializing ciphers... chacha20-ietf-poly1305 Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-local[18513]: listening at 127.0.0.1:1111 Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-local[18513]: tcp port reuse enabled Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-local[18513]: udprelay enabled Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-local[18513]: udp port reuse enabled Thu Jul 16 13:34:17 2020 daemon.info /usr/bin/ss-local[18513]: running from root user Thu Jul 16 13:34:19 2020 daemon.info omr-tracker-ss: Shadowsocks is up (can contact via http 1.0.0.1) Thu Jul 16 13:34:22 2020 daemon.warn openvpn(omr)[12678]: WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info. Thu Jul 16 13:34:22 2020 daemon.warn openvpn(omr)[12678]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts Thu Jul 16 13:34:22 2020 daemon.notice openvpn(omr)[12678]: TCP/UDP: Preserving recently used remote address: [AF_INET]83.136.106.185:65301 Thu Jul 16 13:34:22 2020 daemon.notice openvpn(omr)[12678]: Attempting to establish TCP connection with [AF_INET]83.136.106.185:65301 [nonblock] Thu Jul 16 13:34:23 2020 daemon.notice openvpn(omr)[12678]: TCP connection established with [AF_INET]83.136.106.185:65301 Thu Jul 16 13:34:23 2020 daemon.notice openvpn(omr)[12678]: TCP_CLIENT link local: (not bound) Thu Jul 16 13:34:23 2020 daemon.notice openvpn(omr)[12678]: TCP_CLIENT link remote: [AF_INET]83.136.106.185:65301 Thu Jul 16 13:34:23 2020 daemon.err openvpn(omr)[12678]: VERIFY ERROR: depth=1, error=self signed certificate in certificate chain: CN=ChangeMe Thu Jul 16 13:34:23 2020 daemon.err openvpn(omr)[12678]: OpenSSL: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed Thu Jul 16 13:34:23 2020 daemon.err openvpn(omr)[12678]: TLS_ERROR: BIO read tls_read_plaintext error Thu Jul 16 13:34:23 2020 daemon.err openvpn(omr)[12678]: TLS Error: TLS object -> incoming plaintext read error Thu Jul 16 13:34:23 2020 daemon.err openvpn(omr)[12678]: TLS Error: TLS handshake failed Thu Jul 16 13:34:23 2020 daemon.err openvpn(omr)[12678]: Fatal TLS error (check_tls_errors_co), restarting Thu Jul 16 13:34:23 2020 daemon.notice openvpn(omr)[12678]: SIGUSR1[soft,tls-error] received, process restarting Thu Jul 16 13:34:24 2020 daemon.err omr-tracker-ss[12467]: Failed to send request: Operation not permitted Thu Jul 16 13:34:25 2020 user.notice firewall: Reloading firewall due to ifup of omrip1 (gre4-omrip1) Thu Jul 16 13:34:25 2020 user.notice OMR-VPS: Can't get token, try later Thu Jul 16 13:34:25 2020 user.notice mptcp: Reloading mptcp config due to ifup of omrip1 (gre4-omrip1)

Ysurac commented 4 years ago

Try another VPN.

ascomputer commented 4 years ago

Glorytun? Or mlvpn?

Ysurac commented 4 years ago

Glorytun TCP

ascomputer commented 4 years ago

hello Ysurac, I have abbiliated glorytun tcp restarted router, vps, checked key but it is the same result

Ysurac commented 4 years ago

Check in log what is the problem. Check also the result of ip r via SSH on the router.

ascomputer commented 4 years ago

on the router ip r and it came out root @ OpenMPTCProuter: ~ # ip r 10.140.0.0/24 dev eth2 scope link metric 8 127.0.0.0/8 dev lo proto static scope link metric 1 192.168.1.0/24 dev eth1 scope link metric 7

I then saw in DNS Over HTTPS Proxy Settings was not started so I started manually and now I can go on the internet again

now on the ip r router gives me 10.255.252.1 via 10.255.252.5 dev tun0 10.255.252.5 dev tun0 proto kernel scope link src 10.255.252.6 127.0.0.0/8 dev lo proto static scope link metric 1 ... now I need to understand how to manage the rules in shadowsocks-libev to be able to go on the internet with the second ip of the vps.

ascomputer commented 4 years ago

hi Ysurac I made all attempts to use the two 2 ip of the vps ... if I enable omrip1_rule and put in Src ip / net forward 192.168.100.193 the client 192.168.100.193 comes out quietly with the second ip of the vps but the second client 192.168.194 without rules it will always exit with the second ip even if I put omrip0_rule and I put in Src ip / net forward 192.168.100.194 What do you suggest

Ysurac commented 4 years ago

I found an issue, I fix it, change some default settings in rules to make config easier, test it, release a new beta and I will try to write a doc.

ascomputer commented 4 years ago

ok as soon as the new beta is ready I will try it

Ysurac commented 4 years ago

I fixed some issues and a redirection for anything that is not TCP using gre tunnel is made using shadowsocks configuration automatically. I only need to make a doc now.

ascomputer commented 4 years ago

hi Ysurac, congratulations I installed the beta18 version on vps and on router. it was extremely easy to configure the router to make one client come out on the second ip of the vps and another client on the first ip of the vps. Starting the Router after updating the beta18 in shadowsocks-libev ---> remote server I found a small problem (all the ip server fields were from the first ip of the vps see image) in ormip1server I inserted the second ip. in the redir rules tab -----> omr1ip_rule -----> source settings -----> Src ip / net forward I put the client or clients that come out with the second ip of the vps ... function very well (see image1). But now I have seen that in firewall (Firewall - Port Forwards) if you open an external mail to redirect to a web server or video surveillance (it works) but it works with any ip of the vps (even if the client comes out only on the second ip of the vps). I don't think that's okay unless you can create a single zone for that (WEB SERVER OR VIDEO SURVEILLANCE) ... I do some tests and update my experience .... thanks again Immagine Immagine1

Ysurac commented 4 years ago

You can restrict a opened redirection in advanced parameters and set an "External IP address".

ascomputer commented 4 years ago

using the router as a test and making sure that it can be reached from the outside even if I put in advanced setting gre4-ormip1gre which should correspond to the second ip of the vps the router can be reached both from the first and from the second ip of the vps. I attach photos advanced setting Immagine2

Ysurac commented 4 years ago

The IP need to be the public IP and need to be set manually. But with your settings, nothing should work. I will make some tests.

ascomputer commented 4 years ago

I confirm that if I manually put one of the public ip of the vps it does not work. I also update you that OMR-Bypass does not work tested with the primevideo.com site

Ysurac commented 4 years ago

I tested both firewall redirection from a public IP and omr-bypass and both are working without issues. For omr-bypass you have an issue only with primevideo.com ? You tested a domain like ifconfig.co ?

ascomputer commented 4 years ago

if I put in orm-bypass ifconfig.co and go to this site it shows me the ip of the vps and the geolocation. if i try to see in movies on primevideo.com it says i am connected to a vpn or proxy ... (netflix ok it works well without orm-bypass)

ascomputer commented 4 years ago

for firewall portforwards it's not that it doesn't work it's that it works with both vps ip ... example: if i say that from the outside it must enter the router using the second ip of the vps it enters easily but it also enters with the first ip of the vps

Ysurac commented 4 years ago

You really set OpenMPTCProuter IP as DNS ? I'm not able to reproduce this issue. Same for firewall, it's correcly work on only set IP. You test from an external network ?

ascomputer commented 4 years ago

the client computer is set with dynamic ip so ip gateway and dns is 192.168.100.1 the test of the port forwards from a computer external to the network and I also tried with a mobile phone connected with the 4g it enters the router both with the first ip and with the second ip of the vps.

Ysurac commented 4 years ago

What is exactly the configuration you set for firewall ? and what do you have in /etc/shorewall/rules on the VPS ?

Ysurac commented 4 years ago

For omr-bypass, the issue is from default public IP or when you try from a client with the alternate public IP ?

ascomputer commented 4 years ago

What is exactly the configuration you set for firewall ? and what do you have in /etc/shorewall/rules on the VPS ?

in the vps file / etc / shorewall / rules there is DNS (ACCEPT) $ FW net #

Allow Ping from / to the VPN

# Ping (ACCEPT) vpn $ FW Ping (ACCEPT) $ FW vpn #

Allow Ping from the firewall to the network

# Ping (ACCEPT) $ FW net #

Drop Ping from the "bad" net zone .. and prevent your log from being flooded ..

#

Ping (DROP) net $ FW

Ping (ACCEPT) net $ FW #

Accept connection from port> 65000 for shadowsocks and glorytun on the firewall

# ACCEPT net $ FW tcp 65000-65535 ACCEPT net $ FW udp 65000-65535 #

Accept connection from SSH to the firewall

# ACCEPT net $ FW tcp 65222 #

DHCP forward to the VPN from the firewall

# DHCPfwd (ACCEPT) $ FW vpn #

Redirect all port from 1 to 64999 to the VPN client from the network

#

DNAT net vpn: $ OMR_ADDR tcp 1-64999

DNAT net vpn: $ OMR_ADDR udp 1-64999

DNAT net vpn: $ OMR_ADDR tcp 80 - 10.255.249.6 # OMR openmptcprouter redirect router 80 port tcp to 10.255.249.6 DNAT net vpn: $ OMR_ADDR udp 80 - 10.255.249.6 # OMR openmptcprouter redirect router 80 port udp to 10.255.249.6 DNAT net vpn: $ OMR_ADDR tcp 80 - 83.xxx.xxx.187 # OMR openmptcprouter redirect router 80 port tcp to 83.xxx.xxx.187 DNAT net vpn: $ OMR_ADDR udp 80 - 83.xxx.xxx.187 # OMR openmptcprouter redirect router 80 port udp to 83.xxx.xxx.187 DNAT net vpn: $ OMR_ADDR tcp 80 - 83.xxx.xxx.185 # OMR openmptcprouter redirect router 80 port tcp to 83.xxx.xxx.185 DNAT net vpn: $ OMR_ADDR udp 80 - 83.xxx.xxx.185 # OMR openmptcprouter redirect router 80 port udp to 83.xxx.xxx.185

firewall firewall1 firewall2

ascomputer commented 4 years ago

For omr-bypass, the issue is from default public IP or when you try from a client with the alternate public IP ?

I tried both with the first ip of the vps and with the second ip of the vps the site primevideo.com does not show me the movies says I'm connected to a vpv or proxy and asks to disable orm-bypass

Ysurac commented 4 years ago

I fixed the issue with the firewall (old rules weren't removed), you need to run the snapshot VPS install script again. What is the IP you get from http://ifconfig.co/ that should be bypassed ?

ascomputer commented 3 years ago

hi Ysurac, I updated the vps script with the port forwards firewall problem. for orm-bypass it works only if the client pc comes out with ip default of the vps (first ip) and therefore ifconfig.co gives me ip of the line wan and primevideo.com you can see all the movies. if the pc client configures it to exit with the second ip of the vps, ifconfig.co sees the second ip of the vps and not that of the wan, so primevideo.com you don't want to see movies. if you have new tests to do let me know.

Ysurac commented 3 years ago

For omr-bypass, it's for now only working with default IP. I will add it working with alternates IPs. For the speed from alternates IPs, I'm not able to reproduce the issue.

ascomputer commented 3 years ago

for the speed of the second ip I deleted the post because I had made a mistake ... for omr-bypass I wait for an update to test. Good job.

ascomputer commented 3 years ago

hi Ysurac, are there updates for orm-bypass on alternative ip? so I start to do some testing

Ysurac commented 3 years ago

Yes, at least this work for me on beta 19 that CircleCI is compiling now.

ascomputer commented 3 years ago

perfect! I wait for the beta 19 as soon as I install it ... thanks

ascomputer commented 3 years ago

error updating from beta 18 to beta19

dpkg: error processing archive /tmp/linux-image-5.4.52-mptcp_1.11+206826e_amd64.deb (--install): new linux-image-5.4.52-mptcp package pre-installation script subprocess returned error exit status 1 Examining /etc/kernel/postrm.d. run-parts: executing /etc/kernel/postrm.d/initramfs-tools 5.4.52-mptcp /boot/vmlinuz-5.4.52-mptcp run-parts: executing /etc/kernel/postrm.d/zz-update-grub 5.4.52-mptcp /boot/vmlinuz-5.4.52-mptcp Errors were encountered while processing: /tmp/linux-image-5.4.52-mptcp_1.11+206826e_amd64.deb

Ysurac commented 3 years ago

Read https://github.com/Ysurac/openmptcprouter/issues/959#issuecomment-666364801 or 4 lines before your log extract ;)

ascomputer commented 3 years ago

installed beta19 but if I go out with the second ip of the vps ifconfig.co always sees the ip of the vps and not that of the wan ... what do you advise me to do?

Ysurac commented 3 years ago

DNS used on the client is OpenMPTCProuter IP ?

ascomputer commented 3 years ago

yes 192.168.100.1

Ysurac commented 3 years ago

What is the result of iptables-save on the router ?

ascomputer commented 3 years ago
root@OpenMPTCProuter:~# iptables-save
# Generated by iptables-save v1.8.4 on Thu Jul 30 15:45:41 2020
*raw
:PREROUTING ACCEPT [116572:86520196]
:OUTPUT ACCEPT [93822:33102988]
:zone_lan_helper - [0:0]
-A PREROUTING -i eth0 -m comment --comment "!fw3: lan CT helper assignment" -j z                                                                             one_lan_helper
-A zone_lan_helper -p udp -m comment --comment "!fw3: Amanda backup and archivin                                                                             g proto" -m udp --dport 10080 -j CT --helper amanda
-A zone_lan_helper -p tcp -m comment --comment "!fw3: FTP passive connection tra                                                                             cking" -m tcp --dport 21 -j CT --helper ftp
-A zone_lan_helper -p udp -m comment --comment "!fw3: RAS proto tracking" -m udp                                                                              --dport 1719 -j CT --helper RAS
-A zone_lan_helper -p tcp -m comment --comment "!fw3: Q.931 proto tracking" -m t                                                                             cp --dport 1720 -j CT --helper Q.931
-A zone_lan_helper -p tcp -m comment --comment "!fw3: IRC DCC connection trackin                                                                             g" -m tcp --dport 6667 -j CT --helper irc
-A zone_lan_helper -p tcp -m comment --comment "!fw3: PPTP VPN connection tracki                                                                             ng" -m tcp --dport 1723 -j CT --helper pptp
-A zone_lan_helper -p tcp -m comment --comment "!fw3: SIP VoIP connection tracki                                                                             ng" -m tcp --dport 5060 -j CT --helper sip
-A zone_lan_helper -p udp -m comment --comment "!fw3: SIP VoIP connection tracki                                                                             ng" -m udp --dport 5060 -j CT --helper sip
-A zone_lan_helper -p udp -m comment --comment "!fw3: SNMP monitoring connection                                                                              tracking" -m udp --dport 161 -j CT --helper snmp
-A zone_lan_helper -p udp -m comment --comment "!fw3: TFTP connection tracking"                                                                              -m udp --dport 69 -j CT --helper tftp
COMMIT
# Completed on Thu Jul 30 15:45:41 2020
# Generated by iptables-save v1.8.4 on Thu Jul 30 15:45:41 2020
*nat
:PREROUTING ACCEPT [1259:796127]
:INPUT ACCEPT [940:54116]
:OUTPUT ACCEPT [5723:777339]
:POSTROUTING ACCEPT [1053:65774]
:MINIUPNPD - [0:0]
:MINIUPNPD-POSTROUTING - [0:0]
:postrouting_lan_rule - [0:0]
:postrouting_rule - [0:0]
:postrouting_vpn_rule - [0:0]
:postrouting_wan_rule - [0:0]
:prerouting_lan_rule - [0:0]
:prerouting_rule - [0:0]
:prerouting_vpn_rule - [0:0]
:prerouting_wan_rule - [0:0]
:ss_rules_default_dst - [0:0]
:ss_rules_default_forward - [0:0]
:ss_rules_default_local_out - [0:0]
:ss_rules_default_pre_src - [0:0]
:ss_rules_default_src - [0:0]
:ss_rules_omrip0_dst - [0:0]
:ss_rules_omrip0_forward - [0:0]
:ss_rules_omrip0_pre_src - [0:0]
:ss_rules_omrip0_src - [0:0]
:ss_rules_omrip1_dst - [0:0]
:ss_rules_omrip1_forward - [0:0]
:ss_rules_omrip1_pre_src - [0:0]
:ss_rules_omrip1_src - [0:0]
:zone_lan_postrouting - [0:0]
:zone_lan_prerouting - [0:0]
:zone_vpn_postrouting - [0:0]
:zone_vpn_prerouting - [0:0]
:zone_wan_postrouting - [0:0]
:zone_wan_prerouting - [0:0]
-A PREROUTING -p tcp -j ss_rules_omrip1_pre_src
-A PREROUTING -p tcp -j ss_rules_omrip0_pre_src
-A PREROUTING -p tcp -j ss_rules_default_pre_src
-A PREROUTING -m comment --comment "!fw3: Custom prerouting rule chain" -j prero                                                                             uting_rule
-A PREROUTING -i eth0 -m comment --comment "!fw3" -j zone_lan_prerouting
-A PREROUTING -i eth1 -m comment --comment "!fw3" -j zone_wan_prerouting
-A PREROUTING -i eth2 -m comment --comment "!fw3" -j zone_wan_prerouting
-A PREROUTING -i eth3 -m comment --comment "!fw3" -j zone_wan_prerouting
-A PREROUTING -i eth4 -m comment --comment "!fw3" -j zone_wan_prerouting
-A PREROUTING -i tun0 -m comment --comment "!fw3" -j zone_vpn_prerouting
-A OUTPUT -p tcp -j ss_rules_default_local_out
-A POSTROUTING -m comment --comment "!fw3: Custom postrouting rule chain" -j pos                                                                             trouting_rule
-A POSTROUTING -o eth0 -m comment --comment "!fw3" -j zone_lan_postrouting
-A POSTROUTING -o eth1 -m comment --comment "!fw3" -j zone_wan_postrouting
-A POSTROUTING -o eth2 -m comment --comment "!fw3" -j zone_wan_postrouting
-A POSTROUTING -o eth3 -m comment --comment "!fw3" -j zone_wan_postrouting
-A POSTROUTING -o eth4 -m comment --comment "!fw3" -j zone_wan_postrouting
-A POSTROUTING -o tun0 -m comment --comment "!fw3" -j zone_vpn_postrouting
-A ss_rules_default_dst -m set --match-set omr_dst_bypass_all dst -j RETURN
-A ss_rules_default_dst -m set --match-set omr_dst_bypass_eth4 dst -j RETURN
-A ss_rules_default_dst -m set --match-set omr_dst_bypass_eth3 dst -j RETURN
-A ss_rules_default_dst -m set --match-set omr_dst_bypass_gre4-omrip1gre dst -j                                                                              RETURN
-A ss_rules_default_dst -m set --match-set omr_dst_bypass_gre4-omrip0gre dst -j                                                                              RETURN
-A ss_rules_default_dst -m set --match-set omr_dst_bypass_tun0 dst -j RETURN
-A ss_rules_default_dst -m set --match-set omr_dst_bypass_eth2 dst -j RETURN
-A ss_rules_default_dst -m set --match-set omr_dst_bypass_eth1 dst -j RETURN
-A ss_rules_default_dst -m set --match-set omr_dst_bypass_eth0 dst -j RETURN
-A ss_rules_default_dst -m set --match-set omr_dst_bypass_lo dst -j RETURN
-A ss_rules_default_dst -m set --match-set ss_rules_dst_bypass_all dst -j RETURN
-A ss_rules_default_dst -m set --match-set ss_rules_dst_bypass dst -j RETURN
-A ss_rules_default_dst -m set --match-set ss_rules_dst_forward dst -j ss_rules_                                                                             default_forward
-A ss_rules_default_dst -m comment --comment "dst_default: forward" -j ss_rules_                                                                             default_forward
-A ss_rules_default_forward -p tcp -j REDIRECT --to-ports 1100-1101
-A ss_rules_default_local_out -m set --match-set omr_dst_bypass_all dst -j RETUR                                                                             N
-A ss_rules_default_local_out -m mark --mark 0x539 -j RETURN
-A ss_rules_default_local_out -m set --match-set omr_dst_bypass_eth4 dst -j RETU                                                                             RN
-A ss_rules_default_local_out -m mark --mark 0x53912 -j RETURN
-A ss_rules_default_local_out -m set --match-set omr_dst_bypass_eth3 dst -j RETU                                                                             RN
-A ss_rules_default_local_out -m mark --mark 0x53911 -j RETURN
-A ss_rules_default_local_out -m set --match-set omr_dst_bypass_gre4-omrip1gre d                                                                             st -j RETURN
-A ss_rules_default_local_out -m mark --mark 0x5399 -j RETURN
-A ss_rules_default_local_out -m set --match-set omr_dst_bypass_gre4-omrip0gre d                                                                             st -j RETURN
-A ss_rules_default_local_out -m mark --mark 0x5397 -j RETURN
-A ss_rules_default_local_out -m set --match-set omr_dst_bypass_tun0 dst -j RETU                                                                             RN
-A ss_rules_default_local_out -m mark --mark 0x5395 -j RETURN
-A ss_rules_default_local_out -m set --match-set omr_dst_bypass_eth2 dst -j RETU                                                                             RN
-A ss_rules_default_local_out -m mark --mark 0x5394 -j RETURN
-A ss_rules_default_local_out -m set --match-set omr_dst_bypass_eth1 dst -j RETU                                                                             RN
-A ss_rules_default_local_out -m mark --mark 0x5393 -j RETURN
-A ss_rules_default_local_out -m set --match-set omr_dst_bypass_eth0 dst -j RETU                                                                             RN
-A ss_rules_default_local_out -m mark --mark 0x5392 -j RETURN
-A ss_rules_default_local_out -m set --match-set omr_dst_bypass_lo dst -j RETURN
-A ss_rules_default_local_out -m mark --mark 0x5391 -j RETURN
-A ss_rules_default_local_out -m set --match-set ss_rules_dst_bypass dst -j RETU                                                                             RN
-A ss_rules_default_local_out -m set --match-set ss_rules_dst_bypass_all dst -j                                                                              RETURN
-A ss_rules_default_local_out -m set --match-set ss_rules_dst_bypass_ dst -j RET                                                                             URN
-A ss_rules_default_local_out -m mark --mark 0x539 -j RETURN
-A ss_rules_default_local_out -p tcp -m comment --comment "local_default: forwar                                                                             d" -j ss_rules_default_forward
-A ss_rules_default_pre_src -m set --match-set omr_dst_bypass_all dst -j MARK --                                                                             set-xmark 0x539/0xffffffff
-A ss_rules_default_pre_src -m mark --mark 0x539 -j RETURN
-A ss_rules_default_pre_src -m set --match-set omr_dst_bypass_eth4 dst -j MARK -                                                                             -set-xmark 0x53912/0xffffffff
-A ss_rules_default_pre_src -m mark --mark 0x53912 -j RETURN
-A ss_rules_default_pre_src -m set --match-set omr_dst_bypass_eth3 dst -j MARK -                                                                             -set-xmark 0x53911/0xffffffff
-A ss_rules_default_pre_src -m mark --mark 0x53911 -j RETURN
-A ss_rules_default_pre_src -m set --match-set omr_dst_bypass_gre4-omrip1gre dst                                                                              -j MARK --set-xmark 0x5399/0xffffffff
-A ss_rules_default_pre_src -m mark --mark 0x5399 -j RETURN
-A ss_rules_default_pre_src -m set --match-set omr_dst_bypass_gre4-omrip0gre dst                                                                              -j MARK --set-xmark 0x5397/0xffffffff
-A ss_rules_default_pre_src -m mark --mark 0x5397 -j RETURN
-A ss_rules_default_pre_src -m set --match-set omr_dst_bypass_tun0 dst -j MARK -                                                                             -set-xmark 0x5395/0xffffffff
-A ss_rules_default_pre_src -m mark --mark 0x5395 -j RETURN
-A ss_rules_default_pre_src -m set --match-set omr_dst_bypass_eth2 dst -j MARK -                                                                             -set-xmark 0x5394/0xffffffff
-A ss_rules_default_pre_src -m mark --mark 0x5394 -j RETURN
-A ss_rules_default_pre_src -m set --match-set omr_dst_bypass_eth1 dst -j MARK -                                                                             -set-xmark 0x5393/0xffffffff
-A ss_rules_default_pre_src -m mark --mark 0x5393 -j RETURN
-A ss_rules_default_pre_src -m set --match-set omr_dst_bypass_eth0 dst -j MARK -                                                                             -set-xmark 0x5392/0xffffffff
-A ss_rules_default_pre_src -m mark --mark 0x5392 -j RETURN
-A ss_rules_default_pre_src -m set --match-set omr_dst_bypass_lo dst -j MARK --s                                                                             et-xmark 0x5391/0xffffffff
-A ss_rules_default_pre_src -m mark --mark 0x5391 -j RETURN
-A ss_rules_default_pre_src -m set --match-set ss_rules_dst_bypass_ dst -j RETUR                                                                             N
-A ss_rules_default_pre_src -m set --match-set ss_rules_dst_bypass_all dst -j MA                                                                             RK --set-xmark 0x539/0xffffffff
-A ss_rules_default_pre_src -m set --match-set ss_rules_dst_bypass_all dst -j RE                                                                             TURN
-A ss_rules_default_pre_src -m set --match-set ss_rules_dst_bypass dst -j RETURN
-A ss_rules_default_pre_src -m mark --mark 0x539 -j RETURN
-A ss_rules_default_pre_src -p tcp -j ss_rules_default_src
-A ss_rules_default_src -m set --match-set ss_rules_src_bypass src -j RETURN
-A ss_rules_default_src -m set --match-set ss_rules_src_forward src -j ss_rules_                                                                             default_forward
-A ss_rules_default_src -m set --match-set ss_rules_src_checkdst src -j ss_rules                                                                             _default_dst
-A ss_rules_default_src -m comment --comment "src_default: forward" -j ss_rules_                                                                             default_forward
-A ss_rules_omrip0_dst -m set --match-set ss_rules_dst_bypass_all dst -j RETURN
-A ss_rules_omrip0_dst -m set --match-set ss_rules_dst_bypass dst -j RETURN
-A ss_rules_omrip0_dst -m set --match-set ss_rules_dst_forward dst -j ss_rules_o                                                                             mrip0_forward
-A ss_rules_omrip0_dst -m comment --comment "dst_default: bypass" -j RETURN
-A ss_rules_omrip0_forward -p tcp -j REDIRECT --to-ports 2300
-A ss_rules_omrip0_pre_src -m set --match-set ss_rules_dst_bypass_ dst -j RETURN
-A ss_rules_omrip0_pre_src -m set --match-set ss_rules_dst_bypass_all dst -j MAR                                                                             K --set-xmark 0x539/0xffffffff
-A ss_rules_omrip0_pre_src -m set --match-set ss_rules_dst_bypass_all dst -j RET                                                                             URN
-A ss_rules_omrip0_pre_src -m set --match-set ss_rules_dst_bypass dst -j RETURN
-A ss_rules_omrip0_pre_src -m mark --mark 0x539 -j RETURN
-A ss_rules_omrip0_pre_src -p tcp -j ss_rules_omrip0_src
-A ss_rules_omrip0_src -m set --match-set ss_rules_src_bypass src -j RETURN
-A ss_rules_omrip0_src -m set --match-set ss_rules_src_forward src -j ss_rules_o                                                                             mrip0_forward
-A ss_rules_omrip0_src -m set --match-set ss_rules_src_checkdst src -j ss_rules_                                                                             omrip0_dst
-A ss_rules_omrip0_src -m comment --comment "src_default: bypass" -j RETURN
-A ss_rules_omrip1_dst -m set --match-set ss_rules_dst_bypass_all dst -j RETURN
-A ss_rules_omrip1_dst -m set --match-set ss_rules_dst_bypass dst -j RETURN
-A ss_rules_omrip1_dst -m set --match-set ss_rules_dst_forward dst -j ss_rules_o                                                                             mrip1_forward
-A ss_rules_omrip1_dst -m comment --comment "dst_default: bypass" -j RETURN
-A ss_rules_omrip1_forward -p tcp -j REDIRECT --to-ports 2301
-A ss_rules_omrip1_pre_src -m set --match-set ss_rules_dst_bypass_ dst -j RETURN
-A ss_rules_omrip1_pre_src -m set --match-set ss_rules_dst_bypass_all dst -j MAR                                                                             K --set-xmark 0x539/0xffffffff
-A ss_rules_omrip1_pre_src -m set --match-set ss_rules_dst_bypass_all dst -j RET                                                                             URN
-A ss_rules_omrip1_pre_src -m set --match-set ss_rules_dst_bypass dst -j RETURN
-A ss_rules_omrip1_pre_src -m mark --mark 0x539 -j RETURN
-A ss_rules_omrip1_pre_src -p tcp -j ss_rules_omrip1_src
-A ss_rules_omrip1_src -m set --match-set ss_rules_src_bypass src -j RETURN
-A ss_rules_omrip1_src -m set --match-set ss_rules_src_forward src -j ss_rules_o                                                                             mrip1_forward
-A ss_rules_omrip1_src -m set --match-set ss_rules_src_checkdst src -j ss_rules_                                                                             omrip1_dst
-A ss_rules_omrip1_src -m comment --comment "src_default: bypass" -j RETURN
-A zone_lan_postrouting -m comment --comment "!fw3: Custom lan postrouting rule                                                                              chain" -j postrouting_lan_rule
-A zone_lan_postrouting -s 192.168.100.0/24 -d 192.168.100.1/32 -p tcp -m tcp --                                                                             dport 80 -m comment --comment "!fw3: web (reflection)" -j SNAT --to-source 192.1                                                                             68.100.1
-A zone_lan_postrouting -s 192.168.100.0/24 -d 192.168.100.1/32 -p udp -m udp --                                                                             dport 80 -m comment --comment "!fw3: web (reflection)" -j SNAT --to-source 192.1                                                                             68.100.1
-A zone_lan_prerouting -m comment --comment "!fw3: Custom lan prerouting rule ch                                                                             ain" -j prerouting_lan_rule
-A zone_lan_prerouting -s 192.168.100.0/24 -d 83.136.106.187/32 -p tcp -m tcp --                                                                             dport 80 -m comment --comment "!fw3: web (reflection)" -j DNAT --to-destination                                                                              192.168.100.1:80
-A zone_lan_prerouting -s 192.168.100.0/24 -d 83.136.106.187/32 -p udp -m udp --                                                                             dport 80 -m comment --comment "!fw3: web (reflection)" -j DNAT --to-destination                                                                              192.168.100.1:80
-A zone_vpn_postrouting -m comment --comment "!fw3: Custom vpn postrouting rule                                                                              chain" -j postrouting_vpn_rule
-A zone_vpn_postrouting -m comment --comment "!fw3" -j MASQUERADE
-A zone_vpn_prerouting -m comment --comment "!fw3: Custom vpn prerouting rule ch                                                                             ain" -j prerouting_vpn_rule
-A zone_vpn_prerouting -p tcp -m tcp --dport 80 -m comment --comment "!fw3: web"                                                                              -j DNAT --to-destination 192.168.100.1:80
-A zone_vpn_prerouting -p udp -m udp --dport 80 -m comment --comment "!fw3: web"                                                                              -j DNAT --to-destination 192.168.100.1:80
-A zone_wan_postrouting -m comment --comment "!fw3: Custom wan postrouting rule                                                                              chain" -j postrouting_wan_rule
-A zone_wan_postrouting -m comment --comment "!fw3" -j MASQUERADE
-A zone_wan_prerouting -m comment --comment "!fw3: Custom wan prerouting rule ch                                                                             ain" -j prerouting_wan_rule
COMMIT
# Completed on Thu Jul 30 15:45:41 2020
# Generated by iptables-save v1.8.4 on Thu Jul 30 15:45:41 2020
*mangle
:PREROUTING ACCEPT [111670:79983906]
:INPUT ACCEPT [95191:64063972]
:FORWARD ACCEPT [16479:15919934]
:OUTPUT ACCEPT [89371:29701671]
:POSTROUTING ACCEPT [104559:45569233]
:dscp_mark - [0:0]
:dscp_output - [0:0]
:dscp_postrouting - [0:0]
:dscp_prerouting - [0:0]
:omr-bypass - [0:0]
:omr-bypass-dpi - [0:0]
:omr-gre-tunnel - [0:0]
-A PREROUTING -m addrtype ! --dst-type LOCAL -j omr-bypass
-A PREROUTING -i eth0 -j dscp_prerouting
-A PREROUTING -m addrtype ! --dst-type LOCAL -j omr-gre-tunnel
-A PREROUTING -i eth0 -j dscp_mark
-A PREROUTING -m set --match-set ss_rules_dst_bypass_all dst -j MARK --set-xmark                                                                              0x539/0xffffffff
-A PREROUTING -m set --match-set ss_rules_dst_bypass_all dst -j MARK --set-xmark                                                                              0x539/0xffffffff
-A PREROUTING -m set --match-set ss_rules_dst_bypass_all dst -j MARK --set-xmark                                                                              0x539/0xffffffff
-A PREROUTING -m addrtype ! --dst-type LOCAL -j omr-bypass-dpi
-A FORWARD -o eth0 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!                                                                             fw3: Zone lan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -i eth0 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!                                                                             fw3: Zone lan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -o eth1 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!                                                                             fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -i eth1 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!                                                                             fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -o eth2 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!                                                                             fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -i eth2 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!                                                                             fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -o eth3 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!                                                                             fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -i eth3 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!                                                                             fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -o eth4 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!                                                                             fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -i eth4 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!                                                                             fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -o tun0 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!                                                                             fw3: Zone vpn MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -i tun0 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!                                                                             fw3: Zone vpn MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
-A OUTPUT -j dscp_output
-A POSTROUTING -j dscp_postrouting
-A POSTROUTING -j dscp_mark
-A POSTROUTING -m addrtype --dst-type LOCAL -j omr-bypass-dpi
-A dscp_mark -m comment --comment cs4 -m dscp --dscp 0x20 -j MARK --set-xmark 0x                                                                             7874756e/0xffffffff
-A dscp_mark -m comment --comment cs5 -m dscp --dscp 0x28 -j MARK --set-xmark 0x                                                                             7874756e/0xffffffff
-A dscp_mark -m comment --comment cs6 -m dscp --dscp 0x30 -j MARK --set-xmark 0x                                                                             7874756e/0xffffffff
-A dscp_mark -m comment --comment cs7 -m dscp --dscp 0x38 -j MARK --set-xmark 0x                                                                             7874756e/0xffffffff
-A dscp_output -o tun0 -j DSCP --set-dscp 0x30
-A dscp_postrouting -m set --match-set omr_dscp-cs0 src,dst -m comment --comment                                                                              cs0 -j DSCP --set-dscp 0x00
-A dscp_postrouting -m set --match-set omr_dscp-cs0 src,dst -m comment --comment                                                                              cs0 -j RETURN
-A dscp_postrouting -m set --match-set omr_dscp-cs1 src,dst -m comment --comment                                                                              cs1 -j DSCP --set-dscp 0x08
-A dscp_postrouting -m set --match-set omr_dscp-cs1 src,dst -m comment --comment                                                                              cs1 -j RETURN
-A dscp_postrouting -m set --match-set omr_dscp-cs2 src,dst -m comment --comment                                                                              cs2 -j DSCP --set-dscp 0x10
-A dscp_postrouting -m set --match-set omr_dscp-cs2 src,dst -m comment --comment                                                                              cs2 -j RETURN
-A dscp_postrouting -m set --match-set omr_dscp-cs3 src,dst -m comment --comment                                                                              cs3 -j DSCP --set-dscp 0x18
-A dscp_postrouting -m set --match-set omr_dscp-cs3 src,dst -m comment --comment                                                                              cs3 -j RETURN
-A dscp_postrouting -m set --match-set omr_dscp-cs4 src,dst -m comment --comment                                                                              cs4 -j DSCP --set-dscp 0x20
-A dscp_postrouting -m set --match-set omr_dscp-cs4 src,dst -m comment --comment                                                                              cs4 -j RETURN
-A dscp_postrouting -m set --match-set omr_dscp-cs5 src,dst -m comment --comment                                                                              cs5 -j DSCP --set-dscp 0x28
-A dscp_postrouting -m set --match-set omr_dscp-cs5 src,dst -m comment --comment                                                                              cs5 -j RETURN
-A dscp_postrouting -m set --match-set omr_dscp-cs6 src,dst -m comment --comment                                                                              cs6 -j DSCP --set-dscp 0x30
-A dscp_postrouting -m set --match-set omr_dscp-cs6 src,dst -m comment --comment                                                                              cs6 -j RETURN
-A dscp_postrouting -m set --match-set omr_dscp-cs7 src,dst -m comment --comment                                                                              cs7 -j DSCP --set-dscp 0x38
-A dscp_postrouting -m set --match-set omr_dscp-cs7 src,dst -m comment --comment                                                                              cs7 -j RETURN
-A dscp_postrouting -m set --match-set omr_dscp-ef src,dst -m comment --comment                                                                              ef -j DSCP --set-dscp 0x2e
-A dscp_postrouting -m set --match-set omr_dscp-ef src,dst -m comment --comment                                                                              ef -j RETURN
-A dscp_postrouting -p icmp -m comment --comment ICMP -j DSCP --set-dscp 0x28
-A dscp_postrouting -p icmp -m comment --comment ICMP -j RETURN
-A dscp_postrouting -p udp -m multiport --sports 53,123,5353 -m multiport --dpor                                                                             ts 0:65535 -m comment --comment "DNS udp and NTP" -j DSCP --set-dscp 0x28
-A dscp_postrouting -p udp -m multiport --sports 53,123,5353 -m multiport --dpor                                                                             ts 0:65535 -m comment --comment "DNS udp and NTP" -j RETURN
-A dscp_postrouting -p tcp -m multiport --sports 53,5353 -m multiport --dports 0                                                                             :65535 -m comment --comment "DNS tcp" -j DSCP --set-dscp 0x28
-A dscp_postrouting -p tcp -m multiport --sports 53,5353 -m multiport --dports 0                                                                             :65535 -m comment --comment "DNS tcp" -j RETURN
-A dscp_postrouting -p tcp -m multiport --sports 0:65535 -m multiport --dports 6                                                                             5001,65301,65011 -m comment --comment "OMR vpn" -j DSCP --set-dscp 0x30
-A dscp_postrouting -p tcp -m multiport --sports 0:65535 -m multiport --dports 6                                                                             5001,65301,65011 -m comment --comment "OMR vpn" -j RETURN
-A dscp_postrouting -p udp -m multiport --sports 0:65535 -m multiport --dports 6                                                                             5001 -m comment --comment "OMR vpn" -j DSCP --set-dscp 0x30
-A dscp_postrouting -p udp -m multiport --sports 0:65535 -m multiport --dports 6                                                                             5001 -m comment --comment "OMR vpn" -j RETURN
-A dscp_prerouting -m set --match-set omr_dscp-cs0 src,dst -m comment --comment                                                                              cs0 -j DSCP --set-dscp 0x00
-A dscp_prerouting -m set --match-set omr_dscp-cs0 src,dst -m comment --comment                                                                              cs0 -j RETURN
-A dscp_prerouting -m set --match-set omr_dscp-cs1 src,dst -m comment --comment                                                                              cs1 -j DSCP --set-dscp 0x08
-A dscp_prerouting -m set --match-set omr_dscp-cs1 src,dst -m comment --comment                                                                              cs1 -j RETURN
-A dscp_prerouting -m set --match-set omr_dscp-cs2 src,dst -m comment --comment                                                                              cs2 -j DSCP --set-dscp 0x10
-A dscp_prerouting -m set --match-set omr_dscp-cs2 src,dst -m comment --comment                                                                              cs2 -j RETURN
-A dscp_prerouting -m set --match-set omr_dscp-cs3 src,dst -m comment --comment                                                                              cs3 -j DSCP --set-dscp 0x18
-A dscp_prerouting -m set --match-set omr_dscp-cs3 src,dst -m comment --comment                                                                              cs3 -j RETURN
-A dscp_prerouting -m set --match-set omr_dscp-cs4 src,dst -m comment --comment                                                                              cs4 -j DSCP --set-dscp 0x20
-A dscp_prerouting -m set --match-set omr_dscp-cs4 src,dst -m comment --comment                                                                              cs4 -j RETURN
-A dscp_prerouting -m set --match-set omr_dscp-cs5 src,dst -m comment --comment                                                                              cs5 -j DSCP --set-dscp 0x28
-A dscp_prerouting -m set --match-set omr_dscp-cs5 src,dst -m comment --comment                                                                              cs5 -j RETURN
-A dscp_prerouting -m set --match-set omr_dscp-cs6 src,dst -m comment --comment                                                                              cs6 -j DSCP --set-dscp 0x30
-A dscp_prerouting -m set --match-set omr_dscp-cs6 src,dst -m comment --comment                                                                              cs6 -j RETURN
-A dscp_prerouting -m set --match-set omr_dscp-cs7 src,dst -m comment --comment                                                                              cs7 -j DSCP --set-dscp 0x38
-A dscp_prerouting -m set --match-set omr_dscp-cs7 src,dst -m comment --comment                                                                              cs7 -j RETURN
-A dscp_prerouting -m set --match-set omr_dscp-ef src,dst -m comment --comment e                                                                             f -j DSCP --set-dscp 0x2e
-A dscp_prerouting -m set --match-set omr_dscp-ef src,dst -m comment --comment e                                                                             f -j RETURN
-A dscp_prerouting -p icmp -m comment --comment ICMP -j DSCP --set-dscp 0x28
-A dscp_prerouting -p icmp -m comment --comment ICMP -j RETURN
-A dscp_prerouting -p udp -m multiport --sports 53,123,5353 -m multiport --dport                                                                             s 0:65535 -m comment --comment "DNS udp and NTP" -j DSCP --set-dscp 0x28
-A dscp_prerouting -p udp -m multiport --sports 53,123,5353 -m multiport --dport                                                                             s 0:65535 -m comment --comment "DNS udp and NTP" -j RETURN
-A dscp_prerouting -p tcp -m multiport --sports 53,5353 -m multiport --dports 0:                                                                             65535 -m comment --comment "DNS tcp" -j DSCP --set-dscp 0x28
-A dscp_prerouting -p tcp -m multiport --sports 53,5353 -m multiport --dports 0:                                                                             65535 -m comment --comment "DNS tcp" -j RETURN
-A dscp_prerouting -p tcp -m multiport --sports 0:65535 -m multiport --dports 65                                                                             001,65301,65011 -m comment --comment "OMR vpn" -j DSCP --set-dscp 0x30
-A dscp_prerouting -p tcp -m multiport --sports 0:65535 -m multiport --dports 65                                                                             001,65301,65011 -m comment --comment "OMR vpn" -j RETURN
-A dscp_prerouting -p udp -m multiport --sports 0:65535 -m multiport --dports 65                                                                             001 -m comment --comment "OMR vpn" -j DSCP --set-dscp 0x30
-A dscp_prerouting -p udp -m multiport --sports 0:65535 -m multiport --dports 65                                                                             001 -m comment --comment "OMR vpn" -j RETURN
-A omr-bypass -m set --match-set omr_dst_bypass_eth4 dst -j MARK --set-xmark 0x5                                                                             3912/0xffffffff
-A omr-bypass -m set --match-set omr_dst_bypass_eth3 dst -j MARK --set-xmark 0x5                                                                             3911/0xffffffff
-A omr-bypass -m set --match-set omr_dst_bypass_gre4-omrip1gre dst -j MARK --set                                                                             -xmark 0x5399/0xffffffff
-A omr-bypass -m set --match-set omr_dst_bypass_gre4-omrip0gre dst -j MARK --set                                                                             -xmark 0x5397/0xffffffff
-A omr-bypass -m set --match-set omr_dst_bypass_tun0 dst -j MARK --set-xmark 0x5                                                                             395/0xffffffff
-A omr-bypass -m set --match-set omr_dst_bypass_eth2 dst -j MARK --set-xmark 0x5                                                                             394/0xffffffff
-A omr-bypass -m set --match-set omr_dst_bypass_eth1 dst -j MARK --set-xmark 0x5                                                                             393/0xffffffff
-A omr-bypass -m set --match-set omr_dst_bypass_eth0 dst -j MARK --set-xmark 0x5                                                                             392/0xffffffff
-A omr-bypass -m set --match-set omr_dst_bypass_lo dst -j MARK --set-xmark 0x539                                                                             1/0xffffffff
-A omr-bypass -m set --match-set omr_dst_bypass_all dst -j MARK --set-xmark 0x53                                                                             9/0xffffffff
-A omr-bypass-dpi -m ndpi  --proto amazon  -j MARK --set-xmark 0x5393/0xffffffff
-A omr-bypass-dpi -m ndpi  --proto netflix  -j MARK --set-xmark 0x5393/0xfffffff                                                                             f
-A omr-bypass-dpi -m ndpi  --proto facebook  -j MARK --set-xmark 0x5393/0xffffff                                                                             ff
-A omr-gre-tunnel -s 192.168.100.193/32 -j MARK --set-xmark 0x6671/0xffffffff
COMMIT
# Completed on Thu Jul 30 15:45:41 2020
# Generated by iptables-save v1.8.4 on Thu Jul 30 15:45:41 2020
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT DROP [0:0]
:MINIUPNPD - [0:0]
:forwarding_lan_rule - [0:0]
:forwarding_rule - [0:0]
:forwarding_vpn_rule - [0:0]
:forwarding_wan_rule - [0:0]
:input_lan_rule - [0:0]
:input_rule - [0:0]
:input_vpn_rule - [0:0]
:input_wan_rule - [0:0]
:output_lan_rule - [0:0]
:output_rule - [0:0]
:output_vpn_rule - [0:0]
:output_wan_rule - [0:0]
:reject - [0:0]
:syn_flood - [0:0]
:zone_lan_dest_ACCEPT - [0:0]
:zone_lan_forward - [0:0]
:zone_lan_input - [0:0]
:zone_lan_output - [0:0]
:zone_lan_src_ACCEPT - [0:0]
:zone_vpn_dest_ACCEPT - [0:0]
:zone_vpn_forward - [0:0]
:zone_vpn_input - [0:0]
:zone_vpn_output - [0:0]
:zone_vpn_src_REJECT - [0:0]
:zone_wan_dest_ACCEPT - [0:0]
:zone_wan_dest_REJECT - [0:0]
:zone_wan_forward - [0:0]
:zone_wan_input - [0:0]
:zone_wan_output - [0:0]
:zone_wan_src_REJECT - [0:0]
-A INPUT -i lo -m comment --comment "!fw3" -j ACCEPT
-A INPUT -m comment --comment "!fw3: Custom input rule chain" -j input_rule
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3"                                                                              -j ACCEPT
-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m comment --comment "!fw                                                                             3" -j syn_flood
-A INPUT -i eth0 -m comment --comment "!fw3" -j zone_lan_input
-A INPUT -i eth1 -m comment --comment "!fw3" -j zone_wan_input
-A INPUT -i eth2 -m comment --comment "!fw3" -j zone_wan_input
-A INPUT -i eth3 -m comment --comment "!fw3" -j zone_wan_input
-A INPUT -i eth4 -m comment --comment "!fw3" -j zone_wan_input
-A INPUT -i tun0 -m comment --comment "!fw3" -j zone_vpn_input
-A INPUT -m comment --comment "!fw3" -j reject
-A FORWARD -m comment --comment "!fw3: Custom forwarding rule chain" -j forwardi                                                                             ng_rule
-A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3                                                                             " -j ACCEPT
-A FORWARD -p icmp -m icmp --icmp-type 8 -m comment --comment "!fw3: Allow-All-P                                                                             ing" -j ACCEPT
-A FORWARD -i eth0 -m comment --comment "!fw3" -j zone_lan_forward
-A FORWARD -i eth1 -m comment --comment "!fw3" -j zone_wan_forward
-A FORWARD -i eth2 -m comment --comment "!fw3" -j zone_wan_forward
-A FORWARD -i eth3 -m comment --comment "!fw3" -j zone_wan_forward
-A FORWARD -i eth4 -m comment --comment "!fw3" -j zone_wan_forward
-A FORWARD -i tun0 -m comment --comment "!fw3" -j zone_vpn_forward
-A FORWARD -m comment --comment "!fw3" -j reject
-A OUTPUT -o lo -m comment --comment "!fw3" -j ACCEPT
-A OUTPUT -m comment --comment "!fw3: Custom output rule chain" -j output_rule
-A OUTPUT -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3"                                                                              -j ACCEPT
-A OUTPUT -o eth0 -m comment --comment "!fw3" -j zone_lan_output
-A OUTPUT -o eth1 -m comment --comment "!fw3" -j zone_wan_output
-A OUTPUT -o eth2 -m comment --comment "!fw3" -j zone_wan_output
-A OUTPUT -o eth3 -m comment --comment "!fw3" -j zone_wan_output
-A OUTPUT -o eth4 -m comment --comment "!fw3" -j zone_wan_output
-A OUTPUT -o tun0 -m comment --comment "!fw3" -j zone_vpn_output
-A OUTPUT -m comment --comment "!fw3" -j reject
-A reject -p tcp -m comment --comment "!fw3" -j REJECT --reject-with tcp-reset
-A reject -m comment --comment "!fw3" -j REJECT --reject-with icmp-port-unreacha                                                                             ble
-A syn_flood -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m limit --limit 25/s                                                                             ec --limit-burst 50 -m comment --comment "!fw3" -j RETURN
-A syn_flood -m comment --comment "!fw3" -j DROP
-A zone_lan_dest_ACCEPT -o eth0 -m comment --comment "!fw3" -j ACCEPT
-A zone_lan_forward -m comment --comment "!fw3: Custom lan forwarding rule chain                                                                             " -j forwarding_lan_rule
-A zone_lan_forward -p tcp -m comment --comment "!fw3: Allow-All-LAN-to-VPN" -j                                                                              zone_vpn_dest_ACCEPT
-A zone_lan_forward -p udp -m comment --comment "!fw3: Allow-All-LAN-to-VPN" -j                                                                              zone_vpn_dest_ACCEPT
-A zone_lan_forward -p tcp -m comment --comment "!fw3: Allow-Lan-to-Wan" -j zone                                                                             _wan_dest_ACCEPT
-A zone_lan_forward -p udp -m comment --comment "!fw3: Allow-Lan-to-Wan" -j zone                                                                             _wan_dest_ACCEPT
-A zone_lan_forward -m comment --comment "!fw3: Zone lan to wan forwarding polic                                                                             y" -j zone_wan_dest_ACCEPT
-A zone_lan_forward -m conntrack --ctstate DNAT -m comment --comment "!fw3: Acce                                                                             pt port forwards" -j ACCEPT
-A zone_lan_forward -m comment --comment "!fw3" -j zone_lan_dest_ACCEPT
-A zone_lan_input -m comment --comment "!fw3: Custom lan input rule chain" -j in                                                                             put_lan_rule
-A zone_lan_input -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept                                                                              port redirections" -j ACCEPT
-A zone_lan_input -m comment --comment "!fw3" -j zone_lan_src_ACCEPT
-A zone_lan_output -m comment --comment "!fw3: Custom lan output rule chain" -j                                                                              output_lan_rule
-A zone_lan_output -m comment --comment "!fw3" -j zone_lan_dest_ACCEPT
-A zone_lan_src_ACCEPT -i eth0 -m conntrack --ctstate NEW,UNTRACKED -m comment -                                                                             -comment "!fw3" -j ACCEPT
-A zone_vpn_dest_ACCEPT -o tun0 -m conntrack --ctstate INVALID -m comment --comm                                                                             ent "!fw3: Prevent NAT leakage" -j DROP
-A zone_vpn_dest_ACCEPT -o tun0 -m comment --comment "!fw3" -j ACCEPT
-A zone_vpn_forward -m comment --comment "!fw3: Custom vpn forwarding rule chain                                                                             " -j forwarding_vpn_rule
-A zone_vpn_forward -m conntrack --ctstate DNAT -m comment --comment "!fw3: Acce                                                                             pt port forwards" -j ACCEPT
-A zone_vpn_forward -m comment --comment "!fw3" -j zone_vpn_dest_ACCEPT
-A zone_vpn_input -m comment --comment "!fw3: Custom vpn input rule chain" -j in                                                                             put_vpn_rule
-A zone_vpn_input -p icmp -m comment --comment "!fw3: Allow-VPN-ICMP" -j ACCEPT
-A zone_vpn_input -p udp -m udp --dport 67 -m comment --comment "!fw3: Allow-DHC                                                                             P-Request-VPN" -j ACCEPT
-A zone_vpn_input -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept                                                                              port redirections" -j ACCEPT
-A zone_vpn_input -m comment --comment "!fw3" -j zone_vpn_src_REJECT
-A zone_vpn_output -m comment --comment "!fw3: Custom vpn output rule chain" -j                                                                              output_vpn_rule
-A zone_vpn_output -m comment --comment "!fw3" -j zone_vpn_dest_ACCEPT
-A zone_vpn_src_REJECT -i tun0 -m comment --comment "!fw3" -j reject
-A zone_wan_dest_ACCEPT -o eth1 -m conntrack --ctstate INVALID -m comment --comm                                                                             ent "!fw3: Prevent NAT leakage" -j DROP
-A zone_wan_dest_ACCEPT -o eth1 -m comment --comment "!fw3" -j ACCEPT
-A zone_wan_dest_ACCEPT -o eth2 -m conntrack --ctstate INVALID -m comment --comm                                                                             ent "!fw3: Prevent NAT leakage" -j DROP
-A zone_wan_dest_ACCEPT -o eth2 -m comment --comment "!fw3" -j ACCEPT
-A zone_wan_dest_ACCEPT -o eth3 -m conntrack --ctstate INVALID -m comment --comm                                                                             ent "!fw3: Prevent NAT leakage" -j DROP
-A zone_wan_dest_ACCEPT -o eth3 -m comment --comment "!fw3" -j ACCEPT
-A zone_wan_dest_ACCEPT -o eth4 -m conntrack --ctstate INVALID -m comment --comm                                                                             ent "!fw3: Prevent NAT leakage" -j DROP
-A zone_wan_dest_ACCEPT -o eth4 -m comment --comment "!fw3" -j ACCEPT
-A zone_wan_dest_REJECT -o eth1 -m comment --comment "!fw3" -j reject
-A zone_wan_dest_REJECT -o eth2 -m comment --comment "!fw3" -j reject
-A zone_wan_dest_REJECT -o eth3 -m comment --comment "!fw3" -j reject
-A zone_wan_dest_REJECT -o eth4 -m comment --comment "!fw3" -j reject
-A zone_wan_forward -m comment --comment "!fw3: Custom wan forwarding rule chain                                                                             " -j forwarding_wan_rule
-A zone_wan_forward -p esp -m comment --comment "!fw3: Allow-IPSec-ESP" -j zone_                                                                             lan_dest_ACCEPT
-A zone_wan_forward -p udp -m udp --dport 500 -m comment --comment "!fw3: Allow-                                                                             ISAKMP" -j zone_lan_dest_ACCEPT
-A zone_wan_forward -m conntrack --ctstate DNAT -m comment --comment "!fw3: Acce                                                                             pt port forwards" -j ACCEPT
-A zone_wan_forward -m comment --comment "!fw3" -j zone_wan_dest_REJECT
-A zone_wan_input -m comment --comment "!fw3: Custom wan input rule chain" -j in                                                                             put_wan_rule
-A zone_wan_input -p udp -m udp --dport 68 -m comment --comment "!fw3: Allow-DHC                                                                             P-Renew" -j ACCEPT
-A zone_wan_input -p icmp -m icmp --icmp-type 8 -m comment --comment "!fw3: Allo                                                                             w-Ping" -j ACCEPT
-A zone_wan_input -p igmp -m comment --comment "!fw3: Allow-IGMP" -j ACCEPT
-A zone_wan_input -m conntrack --ctstate DNAT -m comment --comment "!fw3: Accept                                                                              port redirections" -j ACCEPT
-A zone_wan_input -m comment --comment "!fw3" -j zone_wan_src_REJECT
-A zone_wan_output -m comment --comment "!fw3: Custom wan output rule chain" -j                                                                              output_wan_rule
-A zone_wan_output -m comment --comment "!fw3" -j zone_wan_dest_ACCEPT
-A zone_wan_src_REJECT -i eth1 -m comment --comment "!fw3" -j reject
-A zone_wan_src_REJECT -i eth2 -m comment --comment "!fw3" -j reject
-A zone_wan_src_REJECT -i eth3 -m comment --comment "!fw3" -j reject
-A zone_wan_src_REJECT -i eth4 -m comment --comment "!fw3" -j reject
COMMIT
# Completed on Thu Jul 30 15:45:41 2020