ICMP, UDP and VPN only work on router, not LAN

BlueWaterCrystal commented 1 month ago

Hi,

I'm not sure what happened, but LAN clients cannot use ICMP or UDP, only TCP and when set to VPN only, there is no connectivity.

However, the router itself works correctly, when I send a ping from the router I see it go via the VPN to the server. Additionally, LAN can ping the router but not beyond.

I've tried reinstalling the server but the issue persists.

Expected Behavior

ICMP and UDP works for LAN Clients and Router.
LAN Clients to still have Internet access while only using VPN instead of Proxy.

Current Behavior

ICMP and UDP only works for the Router.
VPN only gives the Router Internet but LAN Clients have no Internet access.

Specifications

OpenMPTCProuter version: v0.61-snapshot-master-
OpenMPTCProuter kernel: 6.1.71
OpenMPTCProuter VPS version: 6.1.0-25-amd64 0.1030
OpenMPTCProuter VPS provider: Qubitbytes
OpenMPTCProuter platform: Bananapi BPI-R3

Ysurac commented 1 month ago

Can you take a screenshot of status page ?

BlueWaterCrystal commented 1 month ago

Hi,

Here's a screenshot of the status page:

Ysurac commented 1 month ago

What is the VPN you use ?

BlueWaterCrystal commented 1 month ago

OpenVPN TCP, I've also tried Glorytun TCP and the UDP version.

Ysurac commented 1 month ago

Did you change any network configuration on LAN interface (apart the IP) ? I would need, via SSH on the router, the result of uci show network and uci show firewall.

BlueWaterCrystal commented 1 month ago

Other than changing the LAN IP, I've tried to enable IPv6 with a /56 subnet but couldn't get it to work.

uci show network:

network.loopback=interface
network.loopback.proto='static'
network.loopback.ipaddr='127.0.0.1'
network.loopback.netmask='255.0.0.0'
network.loopback.multipath='off'
network.loopback.device='lo'
network.loopback.metric='7'
network.globals=globals
network.globals.ula_prefix='fd27:5dd9:d146::/48'
network.globals.multipath='enable'
network.globals.mptcp_path_manager='fullmesh'
network.globals.mptcp_scheduler='default'
network.globals.congestion='bbr'
network.globals.mptcp_checksum='0'
network.globals.mptcp_debug='0'
network.globals.mptcp_syn_retries='4'
network.globals.mptcp_subflows='8'
network.globals.mptcp_add_addr_accepted='1'
network.globals.mptcp_add_addr_timeout='120'
network.globals.mptcp_pm_type='0'
network.globals.mptcp_fullmesh_num_subflows='1'
network.globals.mptcp_fullmesh_create_on_err='1'
network.globals.mptcp_ndiffports_num_subflows='1'
network.globals.mptcp_stale_loss_cnt='1'
network.lan=interface
network.lan.proto='static'
network.lan.ipaddr='192.168.200.1'
network.lan.netmask='255.255.255.0'
network.lan.device='wan'
network.lan.ifname='wan'
network.lan.metric='9999'
network.lan.ipv6='0'
network.lan.delegate='0'
network.lan.addlatency='0'
network.lan.txqueuelen='2000'
network.lan.multipath='off'
network.lan.ip4table='lan'
network.lan.defaultroute='0'
network.lan.peerdns='0'
network.lan.ip6assign='60'
network.lan_rule=rule
network.lan_rule.lookup='lan'
network.lan_rule.priority='100'
network.wan1=interface
network.wan1.device='lan1'
network.wan1.proto='static'
network.wan1.ip4table='wan'
network.wan1.multipath='master'
network.wan1.defaultroute='0'
network.wan1.delegate='0'
network.wan1.addlatency='0'
network.wan1.macaddr='ee:a8:f3:3d:8e:4a'
network.wan1.metric='9'
network.wan1.peerdns='0'
network.wan1.ipv6='0'
network.wan1.ipaddr='192.168.8.2'
network.wan1.netmask='255.255.255.0'
network.wan1.gateway='192.168.8.1'
network.wan1_dev=device
network.wan1_dev.name='lan1'
network.wan1_dev.txqueuelen='1000'
network.wan2=interface
network.wan2.device='lan2'
network.wan2.proto='dhcp'
network.wan2.ip4table='wan'
network.wan2.multipath='on'
network.wan2.defaultroute='0'
network.wan2.delegate='0'
network.wan2.addlatency='0'
network.wan2.macaddr='e0:f1:26:08:fd:c7'
network.wan2.metric='10'
network.wan2.peerdns='0'
network.wan2.ipv6='0'
network.wan2_dev=device
network.wan2_dev.name='lan2'
network.wan2_dev.txqueuelen='1000'
network.wan2_dev.mtu='1500'
network.wan3=interface
network.wan3.device='usb0'
network.wan3.proto='dhcp'
network.wan3.ip4table='wan'
network.wan3.multipath='off'
network.wan3.defaultroute='0'
network.wan3.delegate='0'
network.wan3.addlatency='0'
network.wan3.macaddr='58:16:30:ea:b0:e1'
network.wan3.metric='13'
network.wan3.peerdns='0'
network.wan3.ipv6='0'
network.wan3_dev=device
network.wan3_dev.name='usb0'
network.wan3_dev.txqueuelen='1000'
network.wan4=interface
network.wan4.device='lan4'
network.wan4.proto='dhcp'
network.wan4.ip4table='wan'
network.wan4.multipath='off'
network.wan4.defaultroute='0'
network.wan4.delegate='0'
network.wan4.addlatency='0'
network.wan4.macaddr='70:a8:c7:46:7d:c4'
network.wan4.metric='12'
network.wan4.peerdns='0'
network.wan4.ipv6='0'
network.wan4_dev=device
network.wan4_dev.name='lan4'
network.wan4_dev.txqueuelen='1000'
network.omrvpn=interface
network.omrvpn.device='tun0'
network.omrvpn.proto='none'
network.omrvpn.ip4table='vpn'
network.omrvpn.multipath='off'
network.omrvpn.leasetime='12h'
network.omrvpn.type='tunnel'
network.omrvpn.txqueuelen='100'
network.omrvpn.metric='1500'
network.tun0=device
network.tun0.name='tun0'
network.tun0.mtu='1500'
network.omr6in4=interface
network.omr6in4.proto='6in4'
network.omr6in4.ip4table='vpn'
network.omr6in4.multipath='off'
network.omr6in4.ipaddr='10.255.255.2'
network.omr6in4.peeraddr='10.255.255.1'
network.omr6in4.gateway='fd00::a00:1/126'
network.omr6in4.ip6addr='fd00::a00:2/126'
network.omr6in4.metric='1201'
network.omr6in4.force_link='1'
network.eth1_fw_rule6=rule6
network.eth1_fw_rule6.priority='1'
network.eth1_fw_rule6.mark='0x65399999'
network.eth1_fw_rule6.lookup='9999'
network.lan1_fw_rule6=rule6
network.lan1_fw_rule6.priority='1'
network.lan1_fw_rule6.mark='0x65399'
network.lan1_fw_rule6.lookup='9'
network.lan2_fw_rule6=rule6
network.lan2_fw_rule6.priority='1'
network.lan2_fw_rule6.mark='0x653910'
network.lan2_fw_rule6.lookup='10'
network.lan3_fw_rule6=rule6
network.lan3_fw_rule6.priority='1'
network.lan3_fw_rule6.mark='0x653911'
network.lan3_fw_rule6.lookup='11'
network.lan4_fw_rule6=rule6
network.lan4_fw_rule6.priority='1'
network.lan4_fw_rule6.mark='0x653912'
network.lan4_fw_rule6.lookup='12'
network.tun0_fw_rule6=rule6
network.tun0_fw_rule6.priority='1'
network.tun0_fw_rule6.mark='0x65391500'
network.tun0_fw_rule6.lookup='1500'
network.all_fw_rule6=rule6
network.all_fw_rule6.priority='1'
network.all_fw_rule6.mark='0x6539'
network.all_fw_rule6.lookup='6991337'
network.wan_fw_rule6=rule6
network.wan_fw_rule6.priority='1'
network.wan_fw_rule6.mark='0x65399999'
network.wan_fw_rule6.lookup='9999'
network.wwan5=interface
network.wwan5.proto='dhcp'
network.wwan5.metric='16'
network.wwan5.multipath='off'
network.wwan5.addlatency='0'
network.wwan5.device='phy1-sta1'
network.wwan5.ipv6='0'
network.wwan5.defaultroute='0'
network.wwan5.peerdns='0'
network.wwan5.delegate='0'
network.phy1_sta0_fw_rule6=rule6
network.phy1_sta0_fw_rule6.priority='1'
network.phy1_sta0_fw_rule6.mark='0x653914'
network.phy1_sta0_fw_rule6.lookup='14'
network.wwan2_5=interface
network.wwan2_5.proto='dhcp'
network.wwan2_5.metric='17'
network.wwan2_5.multipath='off'
network.wwan2_5.device='phy0-sta0'
network.wwan2_5.ipv6='0'
network.wwan2_5.defaultroute='0'
network.wwan2_5.peerdns='0'
network.wwan2_5.delegate='0'
network.wwan2_5.addlatency='0'
network.phy0_sta0_fw_rule6=rule6
network.phy0_sta0_fw_rule6.priority='1'
network.phy0_sta0_fw_rule6.mark='0x653917'
network.phy0_sta0_fw_rule6.lookup='17'
network.wwan_dev=device
network.wwan_dev.name='phy1-sta0'
network.lan_dev=device
network.lan_dev.name='wan'
network.wwan2_dev=device
network.wwan2_dev.name='phy1-sta1'
network.wwan3_dev=device
network.wwan3_dev.name='phy0-sta0'
network.phy1_sta1_fw_rule6=rule6
network.phy1_sta1_fw_rule6.priority='1'
network.phy1_sta1_fw_rule6.mark='0x653916'
network.phy1_sta1_fw_rule6.lookup='16'
network.lan1_13_fw_rule6=rule6
network.lan1_13_fw_rule6.priority='1'
network.lan1_13_fw_rule6.mark='0x653910'
network.lan1_13_fw_rule6.lookup='10'
network.6in4_omr6in4_fw_rule6=rule6
network.6in4_omr6in4_fw_rule6.priority='1'
network.6in4_omr6in4_fw_rule6.mark='0x65391201'
network.6in4_omr6in4_fw_rule6.lookup='1201'
network.usb0_fw_rule6=rule6
network.usb0_fw_rule6.priority='1'
network.usb0_fw_rule6.mark='0x653913'
network.usb0_fw_rule6.lookup='13'
network.wan_fw_rule=rule
network.wan_fw_rule.priority='1'
network.wan_fw_rule.mark='0x45399999'
network.wan_fw_rule.lookup='9999'
network.lan1_fw_rule=rule
network.lan1_fw_rule.priority='1'
network.lan1_fw_rule.mark='0x45399'
network.lan1_fw_rule.lookup='9'
network.lan2_fw_rule=rule
network.lan2_fw_rule.priority='1'
network.lan2_fw_rule.mark='0x453910'
network.lan2_fw_rule.lookup='10'
network.usb0_fw_rule=rule
network.usb0_fw_rule.priority='1'
network.usb0_fw_rule.mark='0x453913'
network.usb0_fw_rule.lookup='13'
network.lan4_fw_rule=rule
network.lan4_fw_rule.priority='1'
network.lan4_fw_rule.mark='0x453912'
network.lan4_fw_rule.lookup='12'
network.tun0_fw_rule=rule
network.tun0_fw_rule.priority='1'
network.tun0_fw_rule.mark='0x45391500'
network.tun0_fw_rule.lookup='1500'
network.phy1_sta1_fw_rule=rule
network.phy1_sta1_fw_rule.priority='1'
network.phy1_sta1_fw_rule.mark='0x453916'
network.phy1_sta1_fw_rule.lookup='16'
network.phy0_sta0_fw_rule=rule
network.phy0_sta0_fw_rule.priority='1'
network.phy0_sta0_fw_rule.mark='0x453917'
network.phy0_sta0_fw_rule.lookup='17'
network.all_fw_rule=rule
network.all_fw_rule.priority='1'
network.all_fw_rule.mark='0x4539'
network.all_fw_rule.lookup='991337'

uci show firewall:

firewall.@defaults[0]=defaults
firewall.@defaults[0].syn_flood='1'
firewall.@defaults[0].input='REJECT'
firewall.@defaults[0].output='REJECT'
firewall.@defaults[0].forward='REJECT'
firewall.@defaults[0].fullcone='0'
firewall.@defaults[0].flow_offloading='0'
firewall.@defaults[0].flow_offloading_hw='0'
firewall.@defaults[0].disable_ipv6='0'
firewall.zone_lan=zone
firewall.zone_lan.name='lan'
firewall.zone_lan.input='ACCEPT'
firewall.zone_lan.output='ACCEPT'
firewall.zone_lan.forward='ACCEPT'
firewall.zone_lan.auto_helper='1'
firewall.zone_lan.mtu_fix='1'
firewall.zone_lan.network='lan'
firewall.zone_wan=zone
firewall.zone_wan.name='wan'
firewall.zone_wan.input='REJECT'
firewall.zone_wan.output='ACCEPT'
firewall.zone_wan.forward='REJECT'
firewall.zone_wan.fullcone4='0'
firewall.zone_wan.fullcone6='0'
firewall.zone_wan.masq='1'
firewall.zone_wan.mtu_fix='1'
firewall.zone_wan.auto_helper='1'
firewall.zone_wan.network='wan1' 'wan2' 'wan3' 'wan4' 'wwan3' 'wwan' 'wwan2_5' 'wwan5'
firewall.@forwarding[0]=forwarding
firewall.@forwarding[0].src='lan'
firewall.@forwarding[0].dest='wan'
firewall.@rule[0]=rule
firewall.@rule[0].name='Allow-DHCP-Renew'
firewall.@rule[0].src='wan'
firewall.@rule[0].proto='udp'
firewall.@rule[0].dest_port='68'
firewall.@rule[0].target='ACCEPT'
firewall.@rule[0].family='ipv4'
firewall.@rule[1]=rule
firewall.@rule[1].name='Allow-Ping'
firewall.@rule[1].src='wan'
firewall.@rule[1].proto='icmp'
firewall.@rule[1].icmp_type='echo-request'
firewall.@rule[1].family='ipv4'
firewall.@rule[1].target='ACCEPT'
firewall.@rule[2]=rule
firewall.@rule[2].name='Allow-IGMP'
firewall.@rule[2].src='wan'
firewall.@rule[2].proto='igmp'
firewall.@rule[2].family='ipv4'
firewall.@rule[2].target='ACCEPT'
firewall.@rule[3]=rule
firewall.@rule[3].name='Allow-DHCPv6'
firewall.@rule[3].src='wan'
firewall.@rule[3].proto='udp'
firewall.@rule[3].dest_port='546'
firewall.@rule[3].family='ipv6'
firewall.@rule[3].target='ACCEPT'
firewall.@rule[4]=rule
firewall.@rule[4].name='Allow-MLD'
firewall.@rule[4].src='wan'
firewall.@rule[4].proto='icmp'
firewall.@rule[4].src_ip='fe80::/10'
firewall.@rule[4].icmp_type='130/0' '131/0' '132/0' '143/0'
firewall.@rule[4].family='ipv6'
firewall.@rule[4].target='ACCEPT'
firewall.@rule[5]=rule
firewall.@rule[5].name='Allow-ICMPv6-Forward'
firewall.@rule[5].src='wan'
firewall.@rule[5].dest='*'
firewall.@rule[5].proto='icmp'
firewall.@rule[5].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type'
firewall.@rule[5].limit='1000/sec'
firewall.@rule[5].family='ipv6'
firewall.@rule[5].target='ACCEPT'
firewall.@rule[6]=rule
firewall.@rule[6].name='Allow-IPSec-ESP'
firewall.@rule[6].src='wan'
firewall.@rule[6].dest='lan'
firewall.@rule[6].proto='esp'
firewall.@rule[6].target='ACCEPT'
firewall.@rule[7]=rule
firewall.@rule[7].name='Allow-ISAKMP'
firewall.@rule[7].src='wan'
firewall.@rule[7].dest='lan'
firewall.@rule[7].dest_port='500'
firewall.@rule[7].proto='udp'
firewall.@rule[7].target='ACCEPT'
firewall.@rule[8]=rule
firewall.@rule[8].target='ACCEPT'
firewall.@rule[8].name='Allow-All-LAN-to-VPN'
firewall.@rule[8].dest='vpn'
firewall.@rule[8].src='lan'
firewall.@rule[8].proto='all'
firewall.zone_vpn=zone
firewall.zone_vpn.name='vpn'
firewall.zone_vpn.masq='1'
firewall.zone_vpn.input='REJECT'
firewall.zone_vpn.forward='ACCEPT'
firewall.zone_vpn.output='ACCEPT'
firewall.zone_vpn.mtu_fix='1'
firewall.zone_vpn.auto_helper='1'
firewall.zone_vpn.network='omrvpn' 'omr6in4'
firewall.@rule[9]=rule
firewall.@rule[9].target='ACCEPT'
firewall.@rule[9].name='Allow-All-Ping'
firewall.@rule[9].proto='icmp'
firewall.@rule[9].dest='*'
firewall.@rule[9].src='*'
firewall.@rule[9].icmp_type='echo-request'
firewall.@rule[9].limit='1000/sec'
firewall.@rule[10]=rule
firewall.@rule[10].target='ACCEPT'
firewall.@rule[10].name='Allow-VPN-ICMP'
firewall.@rule[10].proto='icmp'
firewall.@rule[10].src='vpn'
firewall.@rule[11]=rule
firewall.@rule[11].target='ACCEPT'
firewall.@rule[11].name='Allow-Lan-to-Wan'
firewall.@rule[11].dest='wan'
firewall.@rule[11].src='lan'
firewall.@rule[11].proto='all'
firewall.@rule[12]=rule
firewall.@rule[12].target='ACCEPT'
firewall.@rule[12].name='ICMPv6-Lan-to-OMR'
firewall.@rule[12].src='lan'
firewall.@rule[12].family='ipv6'
firewall.@rule[12].proto='icmp'
firewall.@rule[12].limit='1000/sec'
firewall.@rule[12].icmp_type='echo-reply destination-unreachable echo-request router-advertisement router-solicitation time-exceeded'
firewall.omr_server=include
firewall.omr_server.path='/etc/firewall.omr-server'
firewall.omr_server.reload='1'
firewall.gre_tunnel=include
firewall.gre_tunnel.path='/etc/firewall.gre-tunnel'
firewall.gre_tunnel.reload='0'
firewall.ttl=include
firewall.ttl.path='/etc/firewall.ttl'
firewall.ttl.reload='1'
firewall.fwlantovpn=forwarding
firewall.fwlantovpn.src='lan'
firewall.fwlantovpn.dest='vpn'
firewall.blockquicproxy=rule
firewall.blockquicproxy.name='Block QUIC Proxy'
firewall.blockquicproxy.proto='udp'
firewall.blockquicproxy.dest_port='443'
firewall.blockquicproxy.target='DROP'
firewall.blockquicproxy.src='lan'
firewall.blockquicall=rule
firewall.blockquicall.name='Block QUIC All'
firewall.blockquicall.proto='udp'
firewall.blockquicall.src='*'
firewall.blockquicall.dest='*'
firewall.blockquicall.dest_port='443'
firewall.blockquicall.target='DROP'
firewall.allowicmpipv6=rule
firewall.allowicmpipv6.proto='icmp'
firewall.allowicmpipv6.target='ACCEPT'
firewall.allowicmpipv6.src='wan'
firewall.allowicmpipv6.name='Allow IPv6 ICMP'
firewall.allowicmpipv6.family='ipv6'
firewall.allowicmpipv6.limit='1000/sec'
firewall.allowicmpipv6.icmp_type='neighbour-advertisement neighbour-solicitation router-advertisement router-solicitation'
firewall.allowdhcpv6546=rule
firewall.allowdhcpv6546.target='ACCEPT'
firewall.allowdhcpv6546.src='wan'
firewall.allowdhcpv6546.proto='udp'
firewall.allowdhcpv6546.dest_port='547'
firewall.allowdhcpv6546.name='Allow DHCPv6 (546-to-547)'
firewall.allowdhcpv6546.family='ipv6'
firewall.allowdhcpv6546.src_port='546'
firewall.allowdhcpv6547=rule
firewall.allowdhcpv6547.target='ACCEPT'
firewall.allowdhcpv6547.src='wan'
firewall.allowdhcpv6547.proto='udp'
firewall.allowdhcpv6547.dest_port='546'
firewall.allowdhcpv6547.name='Allow DHCPv6 (547-to-546)'
firewall.allowdhcpv6547.family='ipv6'
firewall.allowdhcpv6547.src_port='547'
firewall.omr_bypass=include
firewall.omr_bypass.path='/etc/firewall.omr-bypass'
firewall.omr_bypass.reload='0'
firewall.omr_bypass.enabled='1'
firewall.omr_bypass.type='script'
firewall.omr_bypass.fw4_compatible='1'
firewall.omr_dscp_cs0_4=ipset
firewall.omr_dscp_cs0_4.name='omr_dscp_cs0_4'
firewall.omr_dscp_cs0_4.match='dest_ip'
firewall.omr_dscp_rule_cs0_4=rule
firewall.omr_dscp_rule_cs0_4.name='omr_dscp_cs0_4'
firewall.omr_dscp_rule_cs0_4.ipset='omr_dscp_cs0_4'
firewall.omr_dscp_rule_cs0_4.set_dscp='CS0'
firewall.omr_dscp_rule_cs0_4.target='DSCP'
firewall.omr_dscp_rule_cs0_4.src='lan'
firewall.omr_dscp_rule_cs0_4.dest='*'
firewall.omr_dscp_cs1_4=ipset
firewall.omr_dscp_cs1_4.name='omr_dscp_cs1_4'
firewall.omr_dscp_cs1_4.match='dest_ip'
firewall.omr_dscp_rule_cs1_4=rule
firewall.omr_dscp_rule_cs1_4.name='omr_dscp_cs1_4'
firewall.omr_dscp_rule_cs1_4.ipset='omr_dscp_cs1_4'
firewall.omr_dscp_rule_cs1_4.set_dscp='CS1'
firewall.omr_dscp_rule_cs1_4.target='DSCP'
firewall.omr_dscp_rule_cs1_4.src='lan'
firewall.omr_dscp_rule_cs1_4.dest='*'
firewall.omr_dscp_cs2_4=ipset
firewall.omr_dscp_cs2_4.name='omr_dscp_cs2_4'
firewall.omr_dscp_cs2_4.match='dest_ip'
firewall.omr_dscp_rule_cs2_4=rule
firewall.omr_dscp_rule_cs2_4.name='omr_dscp_cs2_4'
firewall.omr_dscp_rule_cs2_4.ipset='omr_dscp_cs2_4'
firewall.omr_dscp_rule_cs2_4.set_dscp='CS2'
firewall.omr_dscp_rule_cs2_4.target='DSCP'
firewall.omr_dscp_rule_cs2_4.src='lan'
firewall.omr_dscp_rule_cs2_4.dest='*'
firewall.omr_dscp_cs3_4=ipset
firewall.omr_dscp_cs3_4.name='omr_dscp_cs3_4'
firewall.omr_dscp_cs3_4.match='dest_ip'
firewall.omr_dscp_rule_cs3_4=rule
firewall.omr_dscp_rule_cs3_4.name='omr_dscp_cs3_4'
firewall.omr_dscp_rule_cs3_4.ipset='omr_dscp_cs3_4'
firewall.omr_dscp_rule_cs3_4.set_dscp='CS3'
firewall.omr_dscp_rule_cs3_4.target='DSCP'
firewall.omr_dscp_rule_cs3_4.src='lan'
firewall.omr_dscp_rule_cs3_4.dest='*'
firewall.omr_dscp_cs4_4=ipset
firewall.omr_dscp_cs4_4.name='omr_dscp_cs4_4'
firewall.omr_dscp_cs4_4.match='dest_ip'
firewall.omr_dscp_rule_cs4_4=rule
firewall.omr_dscp_rule_cs4_4.name='omr_dscp_cs4_4'
firewall.omr_dscp_rule_cs4_4.ipset='omr_dscp_cs4_4'
firewall.omr_dscp_rule_cs4_4.set_dscp='CS4'
firewall.omr_dscp_rule_cs4_4.target='DSCP'
firewall.omr_dscp_rule_cs4_4.src='lan'
firewall.omr_dscp_rule_cs4_4.dest='*'
firewall.omr_dscp_cs5_4=ipset
firewall.omr_dscp_cs5_4.name='omr_dscp_cs5_4'
firewall.omr_dscp_cs5_4.match='dest_ip'
firewall.omr_dscp_rule_cs5_4=rule
firewall.omr_dscp_rule_cs5_4.name='omr_dscp_cs5_4'
firewall.omr_dscp_rule_cs5_4.ipset='omr_dscp_cs5_4'
firewall.omr_dscp_rule_cs5_4.set_dscp='CS5'
firewall.omr_dscp_rule_cs5_4.target='DSCP'
firewall.omr_dscp_rule_cs5_4.src='lan'
firewall.omr_dscp_rule_cs5_4.dest='*'
firewall.omr_dscp_cs6_4=ipset
firewall.omr_dscp_cs6_4.name='omr_dscp_cs6_4'
firewall.omr_dscp_cs6_4.match='dest_ip'
firewall.omr_dscp_rule_cs6_4=rule
firewall.omr_dscp_rule_cs6_4.name='omr_dscp_cs6_4'
firewall.omr_dscp_rule_cs6_4.ipset='omr_dscp_cs6_4'
firewall.omr_dscp_rule_cs6_4.set_dscp='CS6'
firewall.omr_dscp_rule_cs6_4.target='DSCP'
firewall.omr_dscp_rule_cs6_4.src='lan'
firewall.omr_dscp_rule_cs6_4.dest='*'
firewall.omr_dscp_cs7_4=ipset
firewall.omr_dscp_cs7_4.name='omr_dscp_cs7_4'
firewall.omr_dscp_cs7_4.match='dest_ip'
firewall.omr_dscp_rule_cs7_4=rule
firewall.omr_dscp_rule_cs7_4.name='omr_dscp_cs7_4'
firewall.omr_dscp_rule_cs7_4.ipset='omr_dscp_cs7_4'
firewall.omr_dscp_rule_cs7_4.set_dscp='CS7'
firewall.omr_dscp_rule_cs7_4.target='DSCP'
firewall.omr_dscp_rule_cs7_4.src='lan'
firewall.omr_dscp_rule_cs7_4.dest='*'
firewall.omr_dscp_ef_4=ipset
firewall.omr_dscp_ef_4.name='omr_dscp_ef_4'
firewall.omr_dscp_ef_4.match='dest_ip'
firewall.omr_dscp_rule_ef_4=rule
firewall.omr_dscp_rule_ef_4.name='omr_dscp_ef_4'
firewall.omr_dscp_rule_ef_4.ipset='omr_dscp_ef_4'
firewall.omr_dscp_rule_ef_4.set_dscp='EF'
firewall.omr_dscp_rule_ef_4.target='DSCP'
firewall.omr_dscp_rule_ef_4.src='lan'
firewall.omr_dscp_rule_ef_4.dest='*'
firewall.omr_dscp_rule1=rule
firewall.omr_dscp_rule1.name='omr_dscp_rule1'
firewall.omr_dscp_rule1.target='DSCP'
firewall.omr_dscp_rule1.set_dscp='CS7'
firewall.omr_dscp_rule1.src='lan'
firewall.omr_dscp_rule1.src_ip='0.0.0.0/0'
firewall.omr_dscp_rule1.dest_ip='0.0.0.0/0'
firewall.omr_dscp_rule1.proto='icmp'
firewall.omr_dscp_rule1.src_port='0-65535'
firewall.omr_dscp_rule1.dest_port='0-65535'
firewall.omr_dscp_rule2=rule
firewall.omr_dscp_rule2.name='omr_dscp_rule2'
firewall.omr_dscp_rule2.target='DSCP'
firewall.omr_dscp_rule2.set_dscp='CS4'
firewall.omr_dscp_rule2.src='lan'
firewall.omr_dscp_rule2.src_ip='0.0.0.0/0'
firewall.omr_dscp_rule2.dest_ip='0.0.0.0/0'
firewall.omr_dscp_rule2.proto='udp'
firewall.omr_dscp_rule2.src_port='53 123 5353'
firewall.omr_dscp_rule2.dest_port='0-65535'
firewall.omr_dscp_rule3=rule
firewall.omr_dscp_rule3.name='omr_dscp_rule3'
firewall.omr_dscp_rule3.target='DSCP'
firewall.omr_dscp_rule3.set_dscp='CS4'
firewall.omr_dscp_rule3.src='lan'
firewall.omr_dscp_rule3.src_ip='0.0.0.0/0'
firewall.omr_dscp_rule3.dest_ip='0.0.0.0/0'
firewall.omr_dscp_rule3.proto='tcp'
firewall.omr_dscp_rule3.src_port='53 5353'
firewall.omr_dscp_rule3.dest_port='0-65535'
firewall.omr_dscp_rule4=rule
firewall.omr_dscp_rule4.name='omr_dscp_rule4'
firewall.omr_dscp_rule4.target='DSCP'
firewall.omr_dscp_rule4.set_dscp='CS4'
firewall.omr_dscp_rule4.src='lan'
firewall.omr_dscp_rule4.src_ip='0.0.0.0/0'
firewall.omr_dscp_rule4.dest_ip='0.0.0.0/0'
firewall.omr_dscp_rule4.proto='tcp'
firewall.omr_dscp_rule4.src_port='0-65535'
firewall.omr_dscp_rule4.dest_port='65500'
firewall.omr_dscp_rule5=rule
firewall.omr_dscp_rule5.name='omr_dscp_rule5'
firewall.omr_dscp_rule5.target='DSCP'
firewall.omr_dscp_rule5.set_dscp='CS7'
firewall.omr_dscp_rule5.src='lan'
firewall.omr_dscp_rule5.src_ip='0.0.0.0/0'
firewall.omr_dscp_rule5.dest_ip='0.0.0.0/0'
firewall.omr_dscp_rule5.proto='tcp'
firewall.omr_dscp_rule5.src_port='0-65535'
firewall.omr_dscp_rule5.dest_port='65001 65301 65401 65011'
firewall.omr_dscp_rule6=rule
firewall.omr_dscp_rule6.name='omr_dscp_rule6'
firewall.omr_dscp_rule6.target='DSCP'
firewall.omr_dscp_rule6.set_dscp='CS7'
firewall.omr_dscp_rule6.src='lan'
firewall.omr_dscp_rule6.src_ip='0.0.0.0/0'
firewall.omr_dscp_rule6.dest_ip='0.0.0.0/0'
firewall.omr_dscp_rule6.proto='udp'
firewall.omr_dscp_rule6.src_port='0-65535'
firewall.omr_dscp_rule6.dest_port='65001 65301'
firewall.omr_dscp_rule7=rule
firewall.omr_dscp_rule7.name='omr_dscp_rule7'
firewall.omr_dscp_rule7.target='DSCP'
firewall.omr_dscp_rule7.set_dscp='CS6'
firewall.omr_dscp_rule7.src='lan'
firewall.omr_dscp_rule7.src_ip='0.0.0.0/0'
firewall.omr_dscp_rule7.dest_ip='0.0.0.0/0'
firewall.omr_dscp_rule7.proto='tcp'
firewall.omr_dscp_rule7.src_port='0-65535'
firewall.omr_dscp_rule7.dest_port='65101 65228'
firewall.omr_dst_bypass_wan_4=ipset
firewall.omr_dst_bypass_wan_4.name='omr_dst_bypass_wan_4'
firewall.omr_dst_bypass_wan_4.match='dest_ip'
firewall.omr_dst_bypass_wan_4.family='ipv4'
firewall.omr_dst_bypass_wan_4.enabled='1'
firewall.omr_dst_bypass_wan_6=ipset
firewall.omr_dst_bypass_wan_6.name='omr_dst_bypass_wan_6'
firewall.omr_dst_bypass_wan_6.match='dest_ip'
firewall.omr_dst_bypass_wan_6.family='ipv6'
firewall.omr_dst_bypass_wan_6.enabled='1'
firewall.omr_dst_bypass_wan_dstip_4=rule
firewall.omr_dst_bypass_wan_dstip_4.name='omr_dst_bypass_wan_rule'
firewall.omr_dst_bypass_wan_dstip_4.ipset='omr_dst_bypass_wan_4'
firewall.omr_dst_bypass_wan_dstip_4.target='MARK'
firewall.omr_dst_bypass_wan_dstip_4.src='lan'
firewall.omr_dst_bypass_wan_dstip_4.dest='*'
firewall.omr_dst_bypass_wan_dstip_4.family='ipv4'
firewall.omr_dst_bypass_wan_dstip_4.enabled='0'
firewall.omr_dst_bypass_wan_dstip_4.set_mark='0x45399999'
firewall.omr_dst_bypass_wan_dstip_4_accept=rule
firewall.omr_dst_bypass_wan_dstip_4_accept.name='omr_dst_bypass_wan_rule_accept'
firewall.omr_dst_bypass_wan_dstip_4_accept.target='ACCEPT'
firewall.omr_dst_bypass_wan_dstip_4_accept.dest='*'
firewall.omr_dst_bypass_wan_dstip_4_accept.family='ipv4'
firewall.omr_dst_bypass_wan_dstip_4_accept.enabled='0'
firewall.omr_dst_bypass_wan_dstip_4_accept.mark='0x45399999'
firewall.omr_dst_bypass_wan_srcip_4=rule
firewall.omr_dst_bypass_wan_srcip_4.name='omr_dst_bypass_wan_srcip'
firewall.omr_dst_bypass_wan_srcip_4.ipset='omr_dst_bypass_wan_4'
firewall.omr_dst_bypass_wan_srcip_4.src='lan'
firewall.omr_dst_bypass_wan_srcip_4.dest='*'
firewall.omr_dst_bypass_wan_srcip_4.family='ipv4'
firewall.omr_dst_bypass_wan_srcip_4.target='MARK'
firewall.omr_dst_bypass_wan_srcip_4.enabled='0'
firewall.omr_dst_bypass_wan_srcip_4.set_xmark='0x45399999'
firewall.omr_dst_bypass_wan_mac_4=rule
firewall.omr_dst_bypass_wan_mac_4.name='omr_dst_bypass_wan_mac'
firewall.omr_dst_bypass_wan_mac_4.src='lan'
firewall.omr_dst_bypass_wan_mac_4.dest='*'
firewall.omr_dst_bypass_wan_mac_4.target='MARK'
firewall.omr_dst_bypass_wan_mac_4.enabled='0'
firewall.omr_dst_bypass_wan_mac_4.set_xmark='0x45399999'
firewall.omr_dst_bypass_wan_srcport_tcp_4=rule
firewall.omr_dst_bypass_wan_srcport_tcp_4.name='omr_dst_bypass_wan_srcport'
firewall.omr_dst_bypass_wan_srcport_tcp_4.proto='tcp'
firewall.omr_dst_bypass_wan_srcport_tcp_4.src='lan'
firewall.omr_dst_bypass_wan_srcport_tcp_4.dest='*'
firewall.omr_dst_bypass_wan_srcport_tcp_4.target='MARK'
firewall.omr_dst_bypass_wan_srcport_tcp_4.enabled='0'
firewall.omr_dst_bypass_wan_srcport_tcp_4.set_xmark='0x45399999'
firewall.omr_dst_bypass_wan_srcport_udp_4=rule
firewall.omr_dst_bypass_wan_srcport_udp_4.name='omr_dst_bypass_wan_srcport'
firewall.omr_dst_bypass_wan_srcport_udp_4.proto='udp'
firewall.omr_dst_bypass_wan_srcport_udp_4.src='lan'
firewall.omr_dst_bypass_wan_srcport_udp_4.dest='*'
firewall.omr_dst_bypass_wan_srcport_udp_4.target='MARK'
firewall.omr_dst_bypass_wan_srcport_udp_4.enabled='0'
firewall.omr_dst_bypass_wan_srcport_udp_4.set_xmark='0x45399999'
firewall.omr_dst_bypass_wan_dstport_tcp_4=rule
firewall.omr_dst_bypass_wan_dstport_tcp_4.name='omr_dst_bypass_wan_dstport'
firewall.omr_dst_bypass_wan_dstport_tcp_4.src='lan'
firewall.omr_dst_bypass_wan_dstport_tcp_4.dest='*'
firewall.omr_dst_bypass_wan_dstport_tcp_4.target='MARK'
firewall.omr_dst_bypass_wan_dstport_tcp_4.enabled='0'
firewall.omr_dst_bypass_wan_dstport_tcp_4.set_xmark='0x45399999'
firewall.omr_dst_bypass_wan_dstport_udp_4=rule
firewall.omr_dst_bypass_wan_dstport_udp_4.name='omr_dst_bypass_wan_dstport'
firewall.omr_dst_bypass_wan_dstport_udp_4.src='lan'
firewall.omr_dst_bypass_wan_dstport_udp_4.dest='*'
firewall.omr_dst_bypass_wan_dstport_udp_4.target='MARK'
firewall.omr_dst_bypass_wan_dstport_udp_4.enabled='0'
firewall.omr_dst_bypass_wan_dstport_udp_4.set_xmark='0x45399999'
firewall.omr_dst_bypass_lan1_4=ipset
firewall.omr_dst_bypass_lan1_4.name='omr_dst_bypass_lan1_4'
firewall.omr_dst_bypass_lan1_4.match='dest_ip'
firewall.omr_dst_bypass_lan1_4.family='ipv4'
firewall.omr_dst_bypass_lan1_4.enabled='1'
firewall.omr_dst_bypass_lan1_6=ipset
firewall.omr_dst_bypass_lan1_6.name='omr_dst_bypass_lan1_6'
firewall.omr_dst_bypass_lan1_6.match='dest_ip'
firewall.omr_dst_bypass_lan1_6.family='ipv6'
firewall.omr_dst_bypass_lan1_6.enabled='1'
firewall.omr_dst_bypass_lan1_dstip_4=rule
firewall.omr_dst_bypass_lan1_dstip_4.name='omr_dst_bypass_lan1_rule'
firewall.omr_dst_bypass_lan1_dstip_4.ipset='omr_dst_bypass_lan1_4'
firewall.omr_dst_bypass_lan1_dstip_4.target='MARK'
firewall.omr_dst_bypass_lan1_dstip_4.src='lan'
firewall.omr_dst_bypass_lan1_dstip_4.dest='*'
firewall.omr_dst_bypass_lan1_dstip_4.family='ipv4'
firewall.omr_dst_bypass_lan1_dstip_4.enabled='0'
firewall.omr_dst_bypass_lan1_dstip_4.set_mark='0x45399'
firewall.omr_dst_bypass_lan1_dstip_4_accept=rule
firewall.omr_dst_bypass_lan1_dstip_4_accept.name='omr_dst_bypass_lan1_rule_accept'
firewall.omr_dst_bypass_lan1_dstip_4_accept.target='ACCEPT'
firewall.omr_dst_bypass_lan1_dstip_4_accept.dest='*'
firewall.omr_dst_bypass_lan1_dstip_4_accept.family='ipv4'
firewall.omr_dst_bypass_lan1_dstip_4_accept.enabled='0'
firewall.omr_dst_bypass_lan1_dstip_4_accept.mark='0x45399'
firewall.omr_dst_bypass_lan1_srcip_4=rule
firewall.omr_dst_bypass_lan1_srcip_4.name='omr_dst_bypass_lan1_srcip'
firewall.omr_dst_bypass_lan1_srcip_4.ipset='omr_dst_bypass_lan1_4'
firewall.omr_dst_bypass_lan1_srcip_4.src='lan'
firewall.omr_dst_bypass_lan1_srcip_4.dest='*'
firewall.omr_dst_bypass_lan1_srcip_4.family='ipv4'
firewall.omr_dst_bypass_lan1_srcip_4.target='MARK'
firewall.omr_dst_bypass_lan1_srcip_4.enabled='0'
firewall.omr_dst_bypass_lan1_srcip_4.set_xmark='0x45399'
firewall.omr_dst_bypass_lan1_mac_4=rule
firewall.omr_dst_bypass_lan1_mac_4.name='omr_dst_bypass_lan1_mac'
firewall.omr_dst_bypass_lan1_mac_4.src='lan'
firewall.omr_dst_bypass_lan1_mac_4.dest='*'
firewall.omr_dst_bypass_lan1_mac_4.target='MARK'
firewall.omr_dst_bypass_lan1_mac_4.enabled='0'
firewall.omr_dst_bypass_lan1_mac_4.set_xmark='0x45399'
firewall.omr_dst_bypass_lan1_srcport_tcp_4=rule
firewall.omr_dst_bypass_lan1_srcport_tcp_4.name='omr_dst_bypass_lan1_srcport'
firewall.omr_dst_bypass_lan1_srcport_tcp_4.proto='tcp'
firewall.omr_dst_bypass_lan1_srcport_tcp_4.src='lan'
firewall.omr_dst_bypass_lan1_srcport_tcp_4.dest='*'
firewall.omr_dst_bypass_lan1_srcport_tcp_4.target='MARK'
firewall.omr_dst_bypass_lan1_srcport_tcp_4.enabled='0'
firewall.omr_dst_bypass_lan1_srcport_tcp_4.set_xmark='0x45399'
firewall.omr_dst_bypass_lan1_srcport_udp_4=rule
firewall.omr_dst_bypass_lan1_srcport_udp_4.name='omr_dst_bypass_lan1_srcport'
firewall.omr_dst_bypass_lan1_srcport_udp_4.proto='udp'
firewall.omr_dst_bypass_lan1_srcport_udp_4.src='lan'
firewall.omr_dst_bypass_lan1_srcport_udp_4.dest='*'
firewall.omr_dst_bypass_lan1_srcport_udp_4.target='MARK'
firewall.omr_dst_bypass_lan1_srcport_udp_4.enabled='0'
firewall.omr_dst_bypass_lan1_srcport_udp_4.set_xmark='0x45399'
firewall.omr_dst_bypass_lan1_dstport_tcp_4=rule
firewall.omr_dst_bypass_lan1_dstport_tcp_4.name='omr_dst_bypass_lan1_dstport'
firewall.omr_dst_bypass_lan1_dstport_tcp_4.src='lan'
firewall.omr_dst_bypass_lan1_dstport_tcp_4.dest='*'
firewall.omr_dst_bypass_lan1_dstport_tcp_4.target='MARK'
firewall.omr_dst_bypass_lan1_dstport_tcp_4.enabled='0'
firewall.omr_dst_bypass_lan1_dstport_tcp_4.set_xmark='0x45399'
firewall.omr_dst_bypass_lan1_dstport_udp_4=rule
firewall.omr_dst_bypass_lan1_dstport_udp_4.name='omr_dst_bypass_lan1_dstport'
firewall.omr_dst_bypass_lan1_dstport_udp_4.src='lan'
firewall.omr_dst_bypass_lan1_dstport_udp_4.dest='*'
firewall.omr_dst_bypass_lan1_dstport_udp_4.target='MARK'
firewall.omr_dst_bypass_lan1_dstport_udp_4.enabled='0'
firewall.omr_dst_bypass_lan1_dstport_udp_4.set_xmark='0x45399'
firewall.omr_dst_bypass_lan2_4=ipset
firewall.omr_dst_bypass_lan2_4.name='omr_dst_bypass_lan2_4'
firewall.omr_dst_bypass_lan2_4.match='dest_ip'
firewall.omr_dst_bypass_lan2_4.family='ipv4'
firewall.omr_dst_bypass_lan2_4.enabled='1'
firewall.omr_dst_bypass_lan2_6=ipset
firewall.omr_dst_bypass_lan2_6.name='omr_dst_bypass_lan2_6'
firewall.omr_dst_bypass_lan2_6.match='dest_ip'
firewall.omr_dst_bypass_lan2_6.family='ipv6'
firewall.omr_dst_bypass_lan2_6.enabled='1'
firewall.omr_dst_bypass_lan2_dstip_4=rule
firewall.omr_dst_bypass_lan2_dstip_4.name='omr_dst_bypass_lan2_rule'
firewall.omr_dst_bypass_lan2_dstip_4.ipset='omr_dst_bypass_lan2_4'
firewall.omr_dst_bypass_lan2_dstip_4.target='MARK'
firewall.omr_dst_bypass_lan2_dstip_4.src='lan'
firewall.omr_dst_bypass_lan2_dstip_4.dest='*'
firewall.omr_dst_bypass_lan2_dstip_4.family='ipv4'
firewall.omr_dst_bypass_lan2_dstip_4.enabled='0'
firewall.omr_dst_bypass_lan2_dstip_4.set_mark='0x453910'
firewall.omr_dst_bypass_lan2_dstip_4_accept=rule
firewall.omr_dst_bypass_lan2_dstip_4_accept.name='omr_dst_bypass_lan2_rule_accept'
firewall.omr_dst_bypass_lan2_dstip_4_accept.target='ACCEPT'
firewall.omr_dst_bypass_lan2_dstip_4_accept.dest='*'
firewall.omr_dst_bypass_lan2_dstip_4_accept.family='ipv4'
firewall.omr_dst_bypass_lan2_dstip_4_accept.enabled='0'
firewall.omr_dst_bypass_lan2_dstip_4_accept.mark='0x453910'
firewall.omr_dst_bypass_lan2_srcip_4=rule
firewall.omr_dst_bypass_lan2_srcip_4.name='omr_dst_bypass_lan2_srcip'
firewall.omr_dst_bypass_lan2_srcip_4.ipset='omr_dst_bypass_lan2_4'
firewall.omr_dst_bypass_lan2_srcip_4.src='lan'
firewall.omr_dst_bypass_lan2_srcip_4.dest='*'
firewall.omr_dst_bypass_lan2_srcip_4.family='ipv4'
firewall.omr_dst_bypass_lan2_srcip_4.target='MARK'
firewall.omr_dst_bypass_lan2_srcip_4.enabled='0'
firewall.omr_dst_bypass_lan2_srcip_4.set_xmark='0x453910'
firewall.omr_dst_bypass_lan2_mac_4=rule
firewall.omr_dst_bypass_lan2_mac_4.name='omr_dst_bypass_lan2_mac'
firewall.omr_dst_bypass_lan2_mac_4.src='lan'
firewall.omr_dst_bypass_lan2_mac_4.dest='*'
firewall.omr_dst_bypass_lan2_mac_4.target='MARK'
firewall.omr_dst_bypass_lan2_mac_4.enabled='0'
firewall.omr_dst_bypass_lan2_mac_4.set_xmark='0x453910'
firewall.omr_dst_bypass_lan2_srcport_tcp_4=rule
firewall.omr_dst_bypass_lan2_srcport_tcp_4.name='omr_dst_bypass_lan2_srcport'
firewall.omr_dst_bypass_lan2_srcport_tcp_4.proto='tcp'
firewall.omr_dst_bypass_lan2_srcport_tcp_4.src='lan'
firewall.omr_dst_bypass_lan2_srcport_tcp_4.dest='*'
firewall.omr_dst_bypass_lan2_srcport_tcp_4.target='MARK'
firewall.omr_dst_bypass_lan2_srcport_tcp_4.enabled='0'
firewall.omr_dst_bypass_lan2_srcport_tcp_4.set_xmark='0x453910'
firewall.omr_dst_bypass_lan2_srcport_udp_4=rule
firewall.omr_dst_bypass_lan2_srcport_udp_4.name='omr_dst_bypass_lan2_srcport'
firewall.omr_dst_bypass_lan2_srcport_udp_4.proto='udp'
firewall.omr_dst_bypass_lan2_srcport_udp_4.src='lan'
firewall.omr_dst_bypass_lan2_srcport_udp_4.dest='*'
firewall.omr_dst_bypass_lan2_srcport_udp_4.target='MARK'
firewall.omr_dst_bypass_lan2_srcport_udp_4.enabled='0'
firewall.omr_dst_bypass_lan2_srcport_udp_4.set_xmark='0x453910'
firewall.omr_dst_bypass_lan2_dstport_tcp_4=rule
firewall.omr_dst_bypass_lan2_dstport_tcp_4.name='omr_dst_bypass_lan2_dstport'
firewall.omr_dst_bypass_lan2_dstport_tcp_4.src='lan'
firewall.omr_dst_bypass_lan2_dstport_tcp_4.dest='*'
firewall.omr_dst_bypass_lan2_dstport_tcp_4.target='MARK'
firewall.omr_dst_bypass_lan2_dstport_tcp_4.enabled='0'
firewall.omr_dst_bypass_lan2_dstport_tcp_4.set_xmark='0x453910'
firewall.omr_dst_bypass_lan2_dstport_udp_4=rule
firewall.omr_dst_bypass_lan2_dstport_udp_4.name='omr_dst_bypass_lan2_dstport'
firewall.omr_dst_bypass_lan2_dstport_udp_4.src='lan'
firewall.omr_dst_bypass_lan2_dstport_udp_4.dest='*'
firewall.omr_dst_bypass_lan2_dstport_udp_4.target='MARK'
firewall.omr_dst_bypass_lan2_dstport_udp_4.enabled='0'
firewall.omr_dst_bypass_lan2_dstport_udp_4.set_xmark='0x453910'
firewall.omr_dst_bypass_usb0_4=ipset
firewall.omr_dst_bypass_usb0_4.name='omr_dst_bypass_usb0_4'
firewall.omr_dst_bypass_usb0_4.match='dest_ip'
firewall.omr_dst_bypass_usb0_4.family='ipv4'
firewall.omr_dst_bypass_usb0_4.enabled='1'
firewall.omr_dst_bypass_usb0_6=ipset
firewall.omr_dst_bypass_usb0_6.name='omr_dst_bypass_usb0_6'
firewall.omr_dst_bypass_usb0_6.match='dest_ip'
firewall.omr_dst_bypass_usb0_6.family='ipv6'
firewall.omr_dst_bypass_usb0_6.enabled='1'
firewall.omr_dst_bypass_usb0_dstip_4=rule
firewall.omr_dst_bypass_usb0_dstip_4.name='omr_dst_bypass_usb0_rule'
firewall.omr_dst_bypass_usb0_dstip_4.ipset='omr_dst_bypass_usb0_4'
firewall.omr_dst_bypass_usb0_dstip_4.target='MARK'
firewall.omr_dst_bypass_usb0_dstip_4.src='lan'
firewall.omr_dst_bypass_usb0_dstip_4.dest='*'
firewall.omr_dst_bypass_usb0_dstip_4.family='ipv4'
firewall.omr_dst_bypass_usb0_dstip_4.enabled='0'
firewall.omr_dst_bypass_usb0_dstip_4.set_mark='0x453913'
firewall.omr_dst_bypass_usb0_dstip_4_accept=rule
firewall.omr_dst_bypass_usb0_dstip_4_accept.name='omr_dst_bypass_usb0_rule_accept'
firewall.omr_dst_bypass_usb0_dstip_4_accept.target='ACCEPT'
firewall.omr_dst_bypass_usb0_dstip_4_accept.dest='*'
firewall.omr_dst_bypass_usb0_dstip_4_accept.family='ipv4'
firewall.omr_dst_bypass_usb0_dstip_4_accept.enabled='0'
firewall.omr_dst_bypass_usb0_dstip_4_accept.mark='0x453913'
firewall.omr_dst_bypass_usb0_srcip_4=rule
firewall.omr_dst_bypass_usb0_srcip_4.name='omr_dst_bypass_usb0_srcip'
firewall.omr_dst_bypass_usb0_srcip_4.ipset='omr_dst_bypass_usb0_4'
firewall.omr_dst_bypass_usb0_srcip_4.src='lan'
firewall.omr_dst_bypass_usb0_srcip_4.dest='*'
firewall.omr_dst_bypass_usb0_srcip_4.family='ipv4'
firewall.omr_dst_bypass_usb0_srcip_4.target='MARK'
firewall.omr_dst_bypass_usb0_srcip_4.enabled='0'
firewall.omr_dst_bypass_usb0_srcip_4.set_xmark='0x453913'
firewall.omr_dst_bypass_usb0_mac_4=rule
firewall.omr_dst_bypass_usb0_mac_4.name='omr_dst_bypass_usb0_mac'
firewall.omr_dst_bypass_usb0_mac_4.src='lan'
firewall.omr_dst_bypass_usb0_mac_4.dest='*'
firewall.omr_dst_bypass_usb0_mac_4.target='MARK'
firewall.omr_dst_bypass_usb0_mac_4.enabled='0'
firewall.omr_dst_bypass_usb0_mac_4.set_xmark='0x453913'
firewall.omr_dst_bypass_usb0_srcport_tcp_4=rule
firewall.omr_dst_bypass_usb0_srcport_tcp_4.name='omr_dst_bypass_usb0_srcport'
firewall.omr_dst_bypass_usb0_srcport_tcp_4.proto='tcp'
firewall.omr_dst_bypass_usb0_srcport_tcp_4.src='lan'
firewall.omr_dst_bypass_usb0_srcport_tcp_4.dest='*'
firewall.omr_dst_bypass_usb0_srcport_tcp_4.target='MARK'
firewall.omr_dst_bypass_usb0_srcport_tcp_4.enabled='0'
firewall.omr_dst_bypass_usb0_srcport_tcp_4.set_xmark='0x453913'
firewall.omr_dst_bypass_usb0_srcport_udp_4=rule
firewall.omr_dst_bypass_usb0_srcport_udp_4.name='omr_dst_bypass_usb0_srcport'
firewall.omr_dst_bypass_usb0_srcport_udp_4.proto='udp'
firewall.omr_dst_bypass_usb0_srcport_udp_4.src='lan'
firewall.omr_dst_bypass_usb0_srcport_udp_4.dest='*'
firewall.omr_dst_bypass_usb0_srcport_udp_4.target='MARK'
firewall.omr_dst_bypass_usb0_srcport_udp_4.enabled='0'
firewall.omr_dst_bypass_usb0_srcport_udp_4.set_xmark='0x453913'
firewall.omr_dst_bypass_usb0_dstport_tcp_4=rule
firewall.omr_dst_bypass_usb0_dstport_tcp_4.name='omr_dst_bypass_usb0_dstport'
firewall.omr_dst_bypass_usb0_dstport_tcp_4.src='lan'
firewall.omr_dst_bypass_usb0_dstport_tcp_4.dest='*'
firewall.omr_dst_bypass_usb0_dstport_tcp_4.target='MARK'
firewall.omr_dst_bypass_usb0_dstport_tcp_4.enabled='0'
firewall.omr_dst_bypass_usb0_dstport_tcp_4.set_xmark='0x453913'
firewall.omr_dst_bypass_usb0_dstport_udp_4=rule
firewall.omr_dst_bypass_usb0_dstport_udp_4.name='omr_dst_bypass_usb0_dstport'
firewall.omr_dst_bypass_usb0_dstport_udp_4.src='lan'
firewall.omr_dst_bypass_usb0_dstport_udp_4.dest='*'
firewall.omr_dst_bypass_usb0_dstport_udp_4.target='MARK'
firewall.omr_dst_bypass_usb0_dstport_udp_4.enabled='0'
firewall.omr_dst_bypass_usb0_dstport_udp_4.set_xmark='0x453913'
firewall.omr_dst_bypass_lan4_4=ipset
firewall.omr_dst_bypass_lan4_4.name='omr_dst_bypass_lan4_4'
firewall.omr_dst_bypass_lan4_4.match='dest_ip'
firewall.omr_dst_bypass_lan4_4.family='ipv4'
firewall.omr_dst_bypass_lan4_4.enabled='1'
firewall.omr_dst_bypass_lan4_6=ipset
firewall.omr_dst_bypass_lan4_6.name='omr_dst_bypass_lan4_6'
firewall.omr_dst_bypass_lan4_6.match='dest_ip'
firewall.omr_dst_bypass_lan4_6.family='ipv6'
firewall.omr_dst_bypass_lan4_6.enabled='1'
firewall.omr_dst_bypass_lan4_dstip_4=rule
firewall.omr_dst_bypass_lan4_dstip_4.name='omr_dst_bypass_lan4_rule'
firewall.omr_dst_bypass_lan4_dstip_4.ipset='omr_dst_bypass_lan4_4'
firewall.omr_dst_bypass_lan4_dstip_4.target='MARK'
firewall.omr_dst_bypass_lan4_dstip_4.src='lan'
firewall.omr_dst_bypass_lan4_dstip_4.dest='*'
firewall.omr_dst_bypass_lan4_dstip_4.family='ipv4'
firewall.omr_dst_bypass_lan4_dstip_4.enabled='0'
firewall.omr_dst_bypass_lan4_dstip_4.set_mark='0x453912'
firewall.omr_dst_bypass_lan4_dstip_4_accept=rule
firewall.omr_dst_bypass_lan4_dstip_4_accept.name='omr_dst_bypass_lan4_rule_accept'
firewall.omr_dst_bypass_lan4_dstip_4_accept.target='ACCEPT'
firewall.omr_dst_bypass_lan4_dstip_4_accept.dest='*'
firewall.omr_dst_bypass_lan4_dstip_4_accept.family='ipv4'
firewall.omr_dst_bypass_lan4_dstip_4_accept.enabled='0'
firewall.omr_dst_bypass_lan4_dstip_4_accept.mark='0x453912'
firewall.omr_dst_bypass_lan4_srcip_4=rule
firewall.omr_dst_bypass_lan4_srcip_4.name='omr_dst_bypass_lan4_srcip'
firewall.omr_dst_bypass_lan4_srcip_4.ipset='omr_dst_bypass_lan4_4'
firewall.omr_dst_bypass_lan4_srcip_4.src='lan'
firewall.omr_dst_bypass_lan4_srcip_4.dest='*'
firewall.omr_dst_bypass_lan4_srcip_4.family='ipv4'
firewall.omr_dst_bypass_lan4_srcip_4.target='MARK'
firewall.omr_dst_bypass_lan4_srcip_4.enabled='0'
firewall.omr_dst_bypass_lan4_srcip_4.set_xmark='0x453912'
firewall.omr_dst_bypass_lan4_mac_4=rule
firewall.omr_dst_bypass_lan4_mac_4.name='omr_dst_bypass_lan4_mac'
firewall.omr_dst_bypass_lan4_mac_4.src='lan'
firewall.omr_dst_bypass_lan4_mac_4.dest='*'
firewall.omr_dst_bypass_lan4_mac_4.target='MARK'
firewall.omr_dst_bypass_lan4_mac_4.enabled='0'
firewall.omr_dst_bypass_lan4_mac_4.set_xmark='0x453912'
firewall.omr_dst_bypass_lan4_srcport_tcp_4=rule
firewall.omr_dst_bypass_lan4_srcport_tcp_4.name='omr_dst_bypass_lan4_srcport'
firewall.omr_dst_bypass_lan4_srcport_tcp_4.proto='tcp'
firewall.omr_dst_bypass_lan4_srcport_tcp_4.src='lan'
firewall.omr_dst_bypass_lan4_srcport_tcp_4.dest='*'
firewall.omr_dst_bypass_lan4_srcport_tcp_4.target='MARK'
firewall.omr_dst_bypass_lan4_srcport_tcp_4.enabled='0'
firewall.omr_dst_bypass_lan4_srcport_tcp_4.set_xmark='0x453912'
firewall.omr_dst_bypass_lan4_srcport_udp_4=rule
firewall.omr_dst_bypass_lan4_srcport_udp_4.name='omr_dst_bypass_lan4_srcport'
firewall.omr_dst_bypass_lan4_srcport_udp_4.proto='udp'
firewall.omr_dst_bypass_lan4_srcport_udp_4.src='lan'
firewall.omr_dst_bypass_lan4_srcport_udp_4.dest='*'
firewall.omr_dst_bypass_lan4_srcport_udp_4.target='MARK'
firewall.omr_dst_bypass_lan4_srcport_udp_4.enabled='0'
firewall.omr_dst_bypass_lan4_srcport_udp_4.set_xmark='0x453912'
firewall.omr_dst_bypass_lan4_dstport_tcp_4=rule
firewall.omr_dst_bypass_lan4_dstport_tcp_4.name='omr_dst_bypass_lan4_dstport'
firewall.omr_dst_bypass_lan4_dstport_tcp_4.src='lan'
firewall.omr_dst_bypass_lan4_dstport_tcp_4.dest='*'
firewall.omr_dst_bypass_lan4_dstport_tcp_4.target='MARK'
firewall.omr_dst_bypass_lan4_dstport_tcp_4.enabled='0'
firewall.omr_dst_bypass_lan4_dstport_tcp_4.set_xmark='0x453912'
firewall.omr_dst_bypass_lan4_dstport_udp_4=rule
firewall.omr_dst_bypass_lan4_dstport_udp_4.name='omr_dst_bypass_lan4_dstport'
firewall.omr_dst_bypass_lan4_dstport_udp_4.src='lan'
firewall.omr_dst_bypass_lan4_dstport_udp_4.dest='*'
firewall.omr_dst_bypass_lan4_dstport_udp_4.target='MARK'
firewall.omr_dst_bypass_lan4_dstport_udp_4.enabled='0'
firewall.omr_dst_bypass_lan4_dstport_udp_4.set_xmark='0x453912'
firewall.omr_dst_bypass_tun0_4=ipset
firewall.omr_dst_bypass_tun0_4.name='omr_dst_bypass_tun0_4'
firewall.omr_dst_bypass_tun0_4.match='dest_ip'
firewall.omr_dst_bypass_tun0_4.family='ipv4'
firewall.omr_dst_bypass_tun0_4.enabled='1'
firewall.omr_dst_bypass_tun0_6=ipset
firewall.omr_dst_bypass_tun0_6.name='omr_dst_bypass_tun0_6'
firewall.omr_dst_bypass_tun0_6.match='dest_ip'
firewall.omr_dst_bypass_tun0_6.family='ipv6'
firewall.omr_dst_bypass_tun0_6.enabled='1'
firewall.omr_dst_bypass_tun0_dstip_4=rule
firewall.omr_dst_bypass_tun0_dstip_4.name='omr_dst_bypass_tun0_rule'
firewall.omr_dst_bypass_tun0_dstip_4.ipset='omr_dst_bypass_tun0_4'
firewall.omr_dst_bypass_tun0_dstip_4.target='MARK'
firewall.omr_dst_bypass_tun0_dstip_4.src='lan'
firewall.omr_dst_bypass_tun0_dstip_4.dest='*'
firewall.omr_dst_bypass_tun0_dstip_4.family='ipv4'
firewall.omr_dst_bypass_tun0_dstip_4.enabled='0'
firewall.omr_dst_bypass_tun0_dstip_4.set_mark='0x45391500'
firewall.omr_dst_bypass_tun0_dstip_4_accept=rule
firewall.omr_dst_bypass_tun0_dstip_4_accept.name='omr_dst_bypass_tun0_rule_accept'
firewall.omr_dst_bypass_tun0_dstip_4_accept.target='ACCEPT'
firewall.omr_dst_bypass_tun0_dstip_4_accept.dest='*'
firewall.omr_dst_bypass_tun0_dstip_4_accept.family='ipv4'
firewall.omr_dst_bypass_tun0_dstip_4_accept.enabled='0'
firewall.omr_dst_bypass_tun0_dstip_4_accept.mark='0x45391500'
firewall.omr_dst_bypass_tun0_srcip_4=rule
firewall.omr_dst_bypass_tun0_srcip_4.name='omr_dst_bypass_tun0_srcip'
firewall.omr_dst_bypass_tun0_srcip_4.ipset='omr_dst_bypass_tun0_4'
firewall.omr_dst_bypass_tun0_srcip_4.src='lan'
firewall.omr_dst_bypass_tun0_srcip_4.dest='*'
firewall.omr_dst_bypass_tun0_srcip_4.family='ipv4'
firewall.omr_dst_bypass_tun0_srcip_4.target='MARK'
firewall.omr_dst_bypass_tun0_srcip_4.enabled='0'
firewall.omr_dst_bypass_tun0_srcip_4.set_xmark='0x45391500'
firewall.omr_dst_bypass_tun0_mac_4=rule
firewall.omr_dst_bypass_tun0_mac_4.name='omr_dst_bypass_tun0_mac'
firewall.omr_dst_bypass_tun0_mac_4.src='lan'
firewall.omr_dst_bypass_tun0_mac_4.dest='*'
firewall.omr_dst_bypass_tun0_mac_4.target='MARK'
firewall.omr_dst_bypass_tun0_mac_4.enabled='0'
firewall.omr_dst_bypass_tun0_mac_4.set_xmark='0x45391500'
firewall.omr_dst_bypass_tun0_srcport_tcp_4=rule
firewall.omr_dst_bypass_tun0_srcport_tcp_4.name='omr_dst_bypass_tun0_srcport'
firewall.omr_dst_bypass_tun0_srcport_tcp_4.proto='tcp'
firewall.omr_dst_bypass_tun0_srcport_tcp_4.src='lan'
firewall.omr_dst_bypass_tun0_srcport_tcp_4.dest='*'
firewall.omr_dst_bypass_tun0_srcport_tcp_4.target='MARK'
firewall.omr_dst_bypass_tun0_srcport_tcp_4.enabled='0'
firewall.omr_dst_bypass_tun0_srcport_tcp_4.set_xmark='0x45391500'
firewall.omr_dst_bypass_tun0_srcport_udp_4=rule
firewall.omr_dst_bypass_tun0_srcport_udp_4.name='omr_dst_bypass_tun0_srcport'
firewall.omr_dst_bypass_tun0_srcport_udp_4.proto='udp'
firewall.omr_dst_bypass_tun0_srcport_udp_4.src='lan'
firewall.omr_dst_bypass_tun0_srcport_udp_4.dest='*'
firewall.omr_dst_bypass_tun0_srcport_udp_4.target='MARK'
firewall.omr_dst_bypass_tun0_srcport_udp_4.enabled='0'
firewall.omr_dst_bypass_tun0_srcport_udp_4.set_xmark='0x45391500'
firewall.omr_dst_bypass_tun0_dstport_tcp_4=rule
firewall.omr_dst_bypass_tun0_dstport_tcp_4.name='omr_dst_bypass_tun0_dstport'
firewall.omr_dst_bypass_tun0_dstport_tcp_4.src='lan'
firewall.omr_dst_bypass_tun0_dstport_tcp_4.dest='*'
firewall.omr_dst_bypass_tun0_dstport_tcp_4.target='MARK'
firewall.omr_dst_bypass_tun0_dstport_tcp_4.enabled='0'
firewall.omr_dst_bypass_tun0_dstport_tcp_4.set_xmark='0x45391500'
firewall.omr_dst_bypass_tun0_dstport_udp_4=rule
firewall.omr_dst_bypass_tun0_dstport_udp_4.name='omr_dst_bypass_tun0_dstport'
firewall.omr_dst_bypass_tun0_dstport_udp_4.src='lan'
firewall.omr_dst_bypass_tun0_dstport_udp_4.dest='*'
firewall.omr_dst_bypass_tun0_dstport_udp_4.target='MARK'
firewall.omr_dst_bypass_tun0_dstport_udp_4.enabled='0'
firewall.omr_dst_bypass_tun0_dstport_udp_4.set_xmark='0x45391500'
firewall.omr_dst_bypass_phy1_sta1_4=ipset
firewall.omr_dst_bypass_phy1_sta1_4.name='omr_dst_bypass_phy1_sta1_4'
firewall.omr_dst_bypass_phy1_sta1_4.match='dest_ip'
firewall.omr_dst_bypass_phy1_sta1_4.family='ipv4'
firewall.omr_dst_bypass_phy1_sta1_4.enabled='1'
firewall.omr_dst_bypass_phy1_sta1_6=ipset
firewall.omr_dst_bypass_phy1_sta1_6.name='omr_dst_bypass_phy1_sta1_6'
firewall.omr_dst_bypass_phy1_sta1_6.match='dest_ip'
firewall.omr_dst_bypass_phy1_sta1_6.family='ipv6'
firewall.omr_dst_bypass_phy1_sta1_6.enabled='1'
firewall.omr_dst_bypass_phy1_sta1_dstip_4=rule
firewall.omr_dst_bypass_phy1_sta1_dstip_4.name='omr_dst_bypass_phy1_sta1_rule'
firewall.omr_dst_bypass_phy1_sta1_dstip_4.ipset='omr_dst_bypass_phy1_sta1_4'
firewall.omr_dst_bypass_phy1_sta1_dstip_4.target='MARK'
firewall.omr_dst_bypass_phy1_sta1_dstip_4.src='lan'
firewall.omr_dst_bypass_phy1_sta1_dstip_4.dest='*'
firewall.omr_dst_bypass_phy1_sta1_dstip_4.family='ipv4'
firewall.omr_dst_bypass_phy1_sta1_dstip_4.enabled='0'
firewall.omr_dst_bypass_phy1_sta1_dstip_4.set_mark='0x453916'
firewall.omr_dst_bypass_phy1_sta1_dstip_4_accept=rule
firewall.omr_dst_bypass_phy1_sta1_dstip_4_accept.name='omr_dst_bypass_phy1_sta1_rule_accept'
firewall.omr_dst_bypass_phy1_sta1_dstip_4_accept.target='ACCEPT'
firewall.omr_dst_bypass_phy1_sta1_dstip_4_accept.dest='*'
firewall.omr_dst_bypass_phy1_sta1_dstip_4_accept.family='ipv4'
firewall.omr_dst_bypass_phy1_sta1_dstip_4_accept.enabled='0'
firewall.omr_dst_bypass_phy1_sta1_dstip_4_accept.mark='0x453916'
firewall.omr_dst_bypass_phy1_sta1_srcip_4=rule
firewall.omr_dst_bypass_phy1_sta1_srcip_4.name='omr_dst_bypass_phy1_sta1_srcip'
firewall.omr_dst_bypass_phy1_sta1_srcip_4.ipset='omr_dst_bypass_phy1_sta1_4'
firewall.omr_dst_bypass_phy1_sta1_srcip_4.src='lan'
firewall.omr_dst_bypass_phy1_sta1_srcip_4.dest='*'
firewall.omr_dst_bypass_phy1_sta1_srcip_4.family='ipv4'
firewall.omr_dst_bypass_phy1_sta1_srcip_4.target='MARK'
firewall.omr_dst_bypass_phy1_sta1_srcip_4.enabled='0'
firewall.omr_dst_bypass_phy1_sta1_srcip_4.set_xmark='0x453916'
firewall.omr_dst_bypass_phy1_sta1_mac_4=rule
firewall.omr_dst_bypass_phy1_sta1_mac_4.name='omr_dst_bypass_phy1_sta1_mac'
firewall.omr_dst_bypass_phy1_sta1_mac_4.src='lan'
firewall.omr_dst_bypass_phy1_sta1_mac_4.dest='*'
firewall.omr_dst_bypass_phy1_sta1_mac_4.target='MARK'
firewall.omr_dst_bypass_phy1_sta1_mac_4.enabled='0'
firewall.omr_dst_bypass_phy1_sta1_mac_4.set_xmark='0x453916'
firewall.omr_dst_bypass_phy1_sta1_srcport_tcp_4=rule
firewall.omr_dst_bypass_phy1_sta1_srcport_tcp_4.name='omr_dst_bypass_phy1_sta1_srcport'
firewall.omr_dst_bypass_phy1_sta1_srcport_tcp_4.proto='tcp'
firewall.omr_dst_bypass_phy1_sta1_srcport_tcp_4.src='lan'
firewall.omr_dst_bypass_phy1_sta1_srcport_tcp_4.dest='*'
firewall.omr_dst_bypass_phy1_sta1_srcport_tcp_4.target='MARK'
firewall.omr_dst_bypass_phy1_sta1_srcport_tcp_4.enabled='0'
firewall.omr_dst_bypass_phy1_sta1_srcport_tcp_4.set_xmark='0x453916'
firewall.omr_dst_bypass_phy1_sta1_srcport_udp_4=rule
firewall.omr_dst_bypass_phy1_sta1_srcport_udp_4.name='omr_dst_bypass_phy1_sta1_srcport'
firewall.omr_dst_bypass_phy1_sta1_srcport_udp_4.proto='udp'
firewall.omr_dst_bypass_phy1_sta1_srcport_udp_4.src='lan'
firewall.omr_dst_bypass_phy1_sta1_srcport_udp_4.dest='*'
firewall.omr_dst_bypass_phy1_sta1_srcport_udp_4.target='MARK'
firewall.omr_dst_bypass_phy1_sta1_srcport_udp_4.enabled='0'
firewall.omr_dst_bypass_phy1_sta1_srcport_udp_4.set_xmark='0x453916'
firewall.omr_dst_bypass_phy1_sta1_dstport_tcp_4=rule
firewall.omr_dst_bypass_phy1_sta1_dstport_tcp_4.name='omr_dst_bypass_phy1_sta1_dstport'
firewall.omr_dst_bypass_phy1_sta1_dstport_tcp_4.src='lan'
firewall.omr_dst_bypass_phy1_sta1_dstport_tcp_4.dest='*'
firewall.omr_dst_bypass_phy1_sta1_dstport_tcp_4.target='MARK'
firewall.omr_dst_bypass_phy1_sta1_dstport_tcp_4.enabled='0'
firewall.omr_dst_bypass_phy1_sta1_dstport_tcp_4.set_xmark='0x453916'
firewall.omr_dst_bypass_phy1_sta1_dstport_udp_4=rule
firewall.omr_dst_bypass_phy1_sta1_dstport_udp_4.name='omr_dst_bypass_phy1_sta1_dstport'
firewall.omr_dst_bypass_phy1_sta1_dstport_udp_4.src='lan'
firewall.omr_dst_bypass_phy1_sta1_dstport_udp_4.dest='*'
firewall.omr_dst_bypass_phy1_sta1_dstport_udp_4.target='MARK'
firewall.omr_dst_bypass_phy1_sta1_dstport_udp_4.enabled='0'
firewall.omr_dst_bypass_phy1_sta1_dstport_udp_4.set_xmark='0x453916'
firewall.omr_dst_bypass_phy0_sta0_4=ipset
firewall.omr_dst_bypass_phy0_sta0_4.name='omr_dst_bypass_phy0_sta0_4'
firewall.omr_dst_bypass_phy0_sta0_4.match='dest_ip'
firewall.omr_dst_bypass_phy0_sta0_4.family='ipv4'
firewall.omr_dst_bypass_phy0_sta0_4.enabled='1'
firewall.omr_dst_bypass_phy0_sta0_6=ipset
firewall.omr_dst_bypass_phy0_sta0_6.name='omr_dst_bypass_phy0_sta0_6'
firewall.omr_dst_bypass_phy0_sta0_6.match='dest_ip'
firewall.omr_dst_bypass_phy0_sta0_6.family='ipv6'
firewall.omr_dst_bypass_phy0_sta0_6.enabled='1'
firewall.omr_dst_bypass_phy0_sta0_dstip_4=rule
firewall.omr_dst_bypass_phy0_sta0_dstip_4.name='omr_dst_bypass_phy0_sta0_rule'
firewall.omr_dst_bypass_phy0_sta0_dstip_4.ipset='omr_dst_bypass_phy0_sta0_4'
firewall.omr_dst_bypass_phy0_sta0_dstip_4.target='MARK'
firewall.omr_dst_bypass_phy0_sta0_dstip_4.src='lan'
firewall.omr_dst_bypass_phy0_sta0_dstip_4.dest='*'
firewall.omr_dst_bypass_phy0_sta0_dstip_4.family='ipv4'
firewall.omr_dst_bypass_phy0_sta0_dstip_4.enabled='0'
firewall.omr_dst_bypass_phy0_sta0_dstip_4.set_mark='0x453917'
firewall.omr_dst_bypass_phy0_sta0_dstip_4_accept=rule
firewall.omr_dst_bypass_phy0_sta0_dstip_4_accept.name='omr_dst_bypass_phy0_sta0_rule_accept'
firewall.omr_dst_bypass_phy0_sta0_dstip_4_accept.target='ACCEPT'
firewall.omr_dst_bypass_phy0_sta0_dstip_4_accept.dest='*'
firewall.omr_dst_bypass_phy0_sta0_dstip_4_accept.family='ipv4'
firewall.omr_dst_bypass_phy0_sta0_dstip_4_accept.enabled='0'
firewall.omr_dst_bypass_phy0_sta0_dstip_4_accept.mark='0x453917'
firewall.omr_dst_bypass_phy0_sta0_srcip_4=rule
firewall.omr_dst_bypass_phy0_sta0_srcip_4.name='omr_dst_bypass_phy0_sta0_srcip'
firewall.omr_dst_bypass_phy0_sta0_srcip_4.ipset='omr_dst_bypass_phy0_sta0_4'
firewall.omr_dst_bypass_phy0_sta0_srcip_4.src='lan'
firewall.omr_dst_bypass_phy0_sta0_srcip_4.dest='*'
firewall.omr_dst_bypass_phy0_sta0_srcip_4.family='ipv4'
firewall.omr_dst_bypass_phy0_sta0_srcip_4.target='MARK'
firewall.omr_dst_bypass_phy0_sta0_srcip_4.enabled='0'
firewall.omr_dst_bypass_phy0_sta0_srcip_4.set_xmark='0x453917'
firewall.omr_dst_bypass_phy0_sta0_mac_4=rule
firewall.omr_dst_bypass_phy0_sta0_mac_4.name='omr_dst_bypass_phy0_sta0_mac'
firewall.omr_dst_bypass_phy0_sta0_mac_4.src='lan'
firewall.omr_dst_bypass_phy0_sta0_mac_4.dest='*'
firewall.omr_dst_bypass_phy0_sta0_mac_4.target='MARK'
firewall.omr_dst_bypass_phy0_sta0_mac_4.enabled='0'
firewall.omr_dst_bypass_phy0_sta0_mac_4.set_xmark='0x453917'
firewall.omr_dst_bypass_phy0_sta0_srcport_tcp_4=rule
firewall.omr_dst_bypass_phy0_sta0_srcport_tcp_4.name='omr_dst_bypass_phy0_sta0_srcport'
firewall.omr_dst_bypass_phy0_sta0_srcport_tcp_4.proto='tcp'
firewall.omr_dst_bypass_phy0_sta0_srcport_tcp_4.src='lan'
firewall.omr_dst_bypass_phy0_sta0_srcport_tcp_4.dest='*'
firewall.omr_dst_bypass_phy0_sta0_srcport_tcp_4.target='MARK'
firewall.omr_dst_bypass_phy0_sta0_srcport_tcp_4.enabled='0'
firewall.omr_dst_bypass_phy0_sta0_srcport_tcp_4.set_xmark='0x453917'
firewall.omr_dst_bypass_phy0_sta0_srcport_udp_4=rule
firewall.omr_dst_bypass_phy0_sta0_srcport_udp_4.name='omr_dst_bypass_phy0_sta0_srcport'
firewall.omr_dst_bypass_phy0_sta0_srcport_udp_4.proto='udp'
firewall.omr_dst_bypass_phy0_sta0_srcport_udp_4.src='lan'
firewall.omr_dst_bypass_phy0_sta0_srcport_udp_4.dest='*'
firewall.omr_dst_bypass_phy0_sta0_srcport_udp_4.target='MARK'
firewall.omr_dst_bypass_phy0_sta0_srcport_udp_4.enabled='0'
firewall.omr_dst_bypass_phy0_sta0_srcport_udp_4.set_xmark='0x453917'
firewall.omr_dst_bypass_phy0_sta0_dstport_tcp_4=rule
firewall.omr_dst_bypass_phy0_sta0_dstport_tcp_4.name='omr_dst_bypass_phy0_sta0_dstport'
firewall.omr_dst_bypass_phy0_sta0_dstport_tcp_4.src='lan'
firewall.omr_dst_bypass_phy0_sta0_dstport_tcp_4.dest='*'
firewall.omr_dst_bypass_phy0_sta0_dstport_tcp_4.target='MARK'
firewall.omr_dst_bypass_phy0_sta0_dstport_tcp_4.enabled='0'
firewall.omr_dst_bypass_phy0_sta0_dstport_tcp_4.set_xmark='0x453917'
firewall.omr_dst_bypass_phy0_sta0_dstport_udp_4=rule
firewall.omr_dst_bypass_phy0_sta0_dstport_udp_4.name='omr_dst_bypass_phy0_sta0_dstport'
firewall.omr_dst_bypass_phy0_sta0_dstport_udp_4.src='lan'
firewall.omr_dst_bypass_phy0_sta0_dstport_udp_4.dest='*'
firewall.omr_dst_bypass_phy0_sta0_dstport_udp_4.target='MARK'
firewall.omr_dst_bypass_phy0_sta0_dstport_udp_4.enabled='0'
firewall.omr_dst_bypass_phy0_sta0_dstport_udp_4.set_xmark='0x453917'
firewall.omr_dst_bypass_all_4=ipset
firewall.omr_dst_bypass_all_4.name='omr_dst_bypass_all_4'
firewall.omr_dst_bypass_all_4.match='dest_ip'
firewall.omr_dst_bypass_all_4.family='ipv4'
firewall.omr_dst_bypass_all_4.enabled='1'
firewall.omr_dst_bypass_all_6=ipset
firewall.omr_dst_bypass_all_6.name='omr_dst_bypass_all_6'
firewall.omr_dst_bypass_all_6.match='dest_ip'
firewall.omr_dst_bypass_all_6.family='ipv6'
firewall.omr_dst_bypass_all_6.enabled='1'
firewall.omr_dst_bypass_all_dstip_4=rule
firewall.omr_dst_bypass_all_dstip_4.name='omr_dst_bypass_all_rule'
firewall.omr_dst_bypass_all_dstip_4.ipset='omr_dst_bypass_all_4'
firewall.omr_dst_bypass_all_dstip_4.target='MARK'
firewall.omr_dst_bypass_all_dstip_4.src='lan'
firewall.omr_dst_bypass_all_dstip_4.dest='*'
firewall.omr_dst_bypass_all_dstip_4.family='ipv4'
firewall.omr_dst_bypass_all_dstip_4.enabled='0'
firewall.omr_dst_bypass_all_dstip_4.set_mark='0x4539'
firewall.omr_dst_bypass_all_dstip_4_accept=rule
firewall.omr_dst_bypass_all_dstip_4_accept.name='omr_dst_bypass_all_rule_accept'
firewall.omr_dst_bypass_all_dstip_4_accept.target='ACCEPT'
firewall.omr_dst_bypass_all_dstip_4_accept.dest='*'
firewall.omr_dst_bypass_all_dstip_4_accept.family='ipv4'
firewall.omr_dst_bypass_all_dstip_4_accept.enabled='0'
firewall.omr_dst_bypass_all_dstip_4_accept.mark='0x4539'
firewall.omr_dst_bypass_all_srcip_4=rule
firewall.omr_dst_bypass_all_srcip_4.name='omr_dst_bypass_all_srcip'
firewall.omr_dst_bypass_all_srcip_4.ipset='omr_dst_bypass_all_4'
firewall.omr_dst_bypass_all_srcip_4.src='lan'
firewall.omr_dst_bypass_all_srcip_4.dest='*'
firewall.omr_dst_bypass_all_srcip_4.family='ipv4'
firewall.omr_dst_bypass_all_srcip_4.target='MARK'
firewall.omr_dst_bypass_all_srcip_4.enabled='0'
firewall.omr_dst_bypass_all_srcip_4.set_xmark='0x4539'
firewall.omr_dst_bypass_all_mac_4=rule
firewall.omr_dst_bypass_all_mac_4.name='omr_dst_bypass_all_mac'
firewall.omr_dst_bypass_all_mac_4.src='lan'
firewall.omr_dst_bypass_all_mac_4.dest='*'
firewall.omr_dst_bypass_all_mac_4.target='MARK'
firewall.omr_dst_bypass_all_mac_4.enabled='0'
firewall.omr_dst_bypass_all_mac_4.set_xmark='0x4539'
firewall.omr_dst_bypass_all_srcport_tcp_4=rule
firewall.omr_dst_bypass_all_srcport_tcp_4.name='omr_dst_bypass_all_srcport'
firewall.omr_dst_bypass_all_srcport_tcp_4.proto='tcp'
firewall.omr_dst_bypass_all_srcport_tcp_4.src='lan'
firewall.omr_dst_bypass_all_srcport_tcp_4.dest='*'
firewall.omr_dst_bypass_all_srcport_tcp_4.target='MARK'
firewall.omr_dst_bypass_all_srcport_tcp_4.enabled='0'
firewall.omr_dst_bypass_all_srcport_tcp_4.set_xmark='0x4539'
firewall.omr_dst_bypass_all_srcport_udp_4=rule
firewall.omr_dst_bypass_all_srcport_udp_4.name='omr_dst_bypass_all_srcport'
firewall.omr_dst_bypass_all_srcport_udp_4.proto='udp'
firewall.omr_dst_bypass_all_srcport_udp_4.src='lan'
firewall.omr_dst_bypass_all_srcport_udp_4.dest='*'
firewall.omr_dst_bypass_all_srcport_udp_4.target='MARK'
firewall.omr_dst_bypass_all_srcport_udp_4.enabled='0'
firewall.omr_dst_bypass_all_srcport_udp_4.set_xmark='0x4539'
firewall.omr_dst_bypass_all_dstport_tcp_4=rule
firewall.omr_dst_bypass_all_dstport_tcp_4.name='omr_dst_bypass_all_dstport'
firewall.omr_dst_bypass_all_dstport_tcp_4.src='lan'
firewall.omr_dst_bypass_all_dstport_tcp_4.dest='*'
firewall.omr_dst_bypass_all_dstport_tcp_4.target='MARK'
firewall.omr_dst_bypass_all_dstport_tcp_4.enabled='0'
firewall.omr_dst_bypass_all_dstport_tcp_4.set_xmark='0x4539'
firewall.omr_dst_bypass_all_dstport_udp_4=rule
firewall.omr_dst_bypass_all_dstport_udp_4.name='omr_dst_bypass_all_dstport'
firewall.omr_dst_bypass_all_dstport_udp_4.src='lan'
firewall.omr_dst_bypass_all_dstport_udp_4.dest='*'
firewall.omr_dst_bypass_all_dstport_udp_4.target='MARK'
firewall.omr_dst_bypass_all_dstport_udp_4.enabled='0'
firewall.omr_dst_bypass_all_dstport_udp_4.set_xmark='0x4539'

Ysurac commented 1 month ago

All seems ok. What is the configuration on your client computer ?

BlueWaterCrystal commented 1 month ago

All clients are affected, and all use DHCP.

When I do a ping from the diagnostics page, I see the packets go via tun0 and all works fine. However, when I ping from a client, I see the packet enter on the LAN port but it doesn't appear on tun0 and results in request timed out.

tcpdump of tun0: (ping via diagnostics page to www.openmptcprouter.com)

11:32:18.972972 IP 10.255.255.2 > 10.255.255.1: ICMP echo request, id 14161, seq 1, length 64
11:32:19.019249 IP 10.255.255.1 > 10.255.255.2: ICMP echo reply, id 14161, seq 1, length 64
11:32:24.255800 IP 10.255.255.2 > 143-244-38-136.bunnyinfra.net: ICMP echo request, id 36989, seq 1, length 64
11:32:24.282290 IP 143-244-38-136.bunnyinfra.net > 10.255.255.2: ICMP echo reply, id 36989, seq 1, length 64
11:32:24.290445 IP 10.255.255.2 > 10.255.255.1: ICMP echo request, id 18393, seq 1, length 64
11:32:24.319758 IP 10.255.255.1 > 10.255.255.2: ICMP echo reply, id 18393, seq 1, length 64
11:32:25.256853 IP 10.255.255.2 > 143-244-38-136.bunnyinfra.net: ICMP echo request, id 36989, seq 2, length 64
11:32:25.285642 IP 143-244-38-136.bunnyinfra.net > 10.255.255.2: ICMP echo reply, id 36989, seq 2, length 64
11:32:26.258512 IP 10.255.255.2 > 143-244-38-136.bunnyinfra.net: ICMP echo request, id 36989, seq 3, length 64
11:32:26.284823 IP 143-244-38-136.bunnyinfra.net > 10.255.255.2: ICMP echo reply, id 36989, seq 3, length 64
11:32:27.260520 IP 10.255.255.2 > 143-244-38-136.bunnyinfra.net: ICMP echo request, id 36989, seq 4, length 64
11:32:27.296849 IP 143-244-38-136.bunnyinfra.net > 10.255.255.2: ICMP echo reply, id 36989, seq 4, length 64
11:32:28.261570 IP 10.255.255.2 > 143-244-38-136.bunnyinfra.net: ICMP echo request, id 36989, seq 5, length 64
11:32:28.288616 IP 143-244-38-136.bunnyinfra.net > 10.255.255.2: ICMP echo reply, id 36989, seq 5, length 64

tcpdump of LAN - (client pinging www.openmptcprouter.com)

11:34:05.975133 IP 192.168.200.206 > host.fireflywhm.com: ICMP echo request, id 35, seq 51029, length 40
11:34:06.340655 IP 192.168.200.206 > a92-123-241-137.deploy.static.akamaitechnologies.com: ICMP echo request, id 58352, seq 121, length 9
11:34:06.447571 IP 192.168.200.206 > one.one.one.one: ICMP echo request, id 42715, seq 20282, length 9
11:34:06.453222 IP 192.168.200.206 > dns.google: ICMP echo request, id 42710, seq 20282, length 9
**11:34:06.464622 IP 192.168.200.206 > 143-244-38-136.bunnyinfra.net: ICMP echo request, id 35, seq 51033, length 1008** <----
11:34:06.480825 IP 192.168.200.206 > li-in-f94.1e100.net: ICMP echo request, id 35, seq 51035, length 40

tcpdump of LAN - (client pinging router)

**11:37:31.406019 IP 192.168.200.206 > openmptcprouter.lan: ICMP echo request, id 35, seq 52675, length 1008** <----
**11:37:31.406176 IP openmptcprouter.lan > 192.168.200.206: ICMP echo reply, id 35, seq 52675, length 1008** <----
11:37:31.469657 IP 192.168.200.206 > 216.119.69.148: ICMP echo request, id 35, seq 52677, length 40
11:37:31.469656 IP 192.168.200.206 > a23-52-18-110.deploy.static.akamaitechnologies.com: ICMP echo request, id 35, seq 52678, length 40
11:37:31.469656 IP 192.168.200.206 > 64.85.9.242: ICMP echo request, id 35, seq 52676, length 40
11:37:31.469657 IP 192.168.200.206 > 223.235.187.35.bc.googleusercontent.com: ICMP echo request, id 35, seq 52679, length 40
11:37:31.679910 IP 192.168.200.206 > one.one.one.one: ICMP echo request, id 62958, seq 4, length 8
11:37:31.679910 IP 192.168.200.206 > one.one.one.one: ICMP echo request, id 36433, seq 4, length 8
11:37:31.689916 IP 192.168.200.206 > dns.google: ICMP echo request, id 46483, seq 4, length 8
11:37:31.973752 IP 192.168.200.206 > 91.132.209.35.bc.googleusercontent.com: ICMP echo request, id 35, seq 52681, length 40
11:37:31.973752 IP 192.168.200.206 > 91.195.6.131: ICMP echo request, id 35, seq 52683, length 40
11:37:31.973752 IP 192.168.200.206 > a23-52-21-155.deploy.static.akamaitechnologies.com: ICMP echo request, id 35, seq 52682, length 40
11:37:31.973752 IP 192.168.200.206 > sc105.eboundhost.com: ICMP echo request, id 35, seq 52680, length 40
**11:37:32.417077 IP 192.168.200.206 > openmptcprouter.lan: ICMP echo request, id 35, seq 52684, length 1008** <----
**11:37:32.417235 IP openmptcprouter.lan > 192.168.200.206: ICMP echo reply, id 35, seq 52684, length 1008** <----

Ysurac / openmptcprouter