search

hackgfw / openwrt-gfw

Openwrt的翻墙解决方案
GNU General Public License v3.0
502 stars 111 forks source link

对shell不熟没法调试，gfw-vpn.ipk也安装不上(14.07 Barrier Breaker, r43483) #24

Closed ScrewChineseCommunist closed 9 years ago

ScrewChineseCommunist commented 9 years ago

root@OpenWrt:~# opkg install /tmp/gfw-vpn_0.2_all.ipk Collected errors:

root@OpenWrt:~# opkg install /tmp/gfw-vpn_0.2_all.ipk --force-depends Collected errors:

ScrewChineseCommunist commented 9 years ago

能否回滚到原来的逐步安装配置版本？现在整个编译或安装一旦有问题连日志都看不到。

sakurayknst commented 9 years ago

按照提示信息似乎是无法解压ipk包得到安装脚本（control file 我是这样理解的），很有可能你需要重新下载完整的ipk包然后上传安装

hackgfw commented 9 years ago

看提示应该是文件没有下全，如果你的路由器空间不紧张的话，可以安装完整版的wget，直接在路由器上下载安装。 

opkg update
opkg install wget
wget --no-check-certificate -O /tmp/gfw-vpn_0.2_all.ipk https://github.com/hackgfw/openwrt-gfw/blob/master/gfw/gfw-dns_0.1.2_all.ipk?raw=true
md5sum /tmp/gfw-vpn_0.2_all.ipk
opkg install /tmp/gfw-vpn_0.2_all.ipk

gfw-vpn_0.2_all.ipk 的 md5码应该是 21920141a1b7f0f5e11be43be6f0e8c7 19c79e36007b028bd07f2d53a1a2cfc8

至于查看原来的逐步安装配置版，可以查看项目的commits记录， https://github.com/hackgfw/openwrt-gfw/tree/069ddd2cbd66eba52eb8d83eb5c276307c683c5a 这个是项目去年的状态

UPDATE：修正链接和md5码

ScrewChineseCommunist commented 9 years ago

root@OpenWrt:~# wget -O /tmp/gfw-vpn_0.2_all.ipk http://github.com/hackgfw/openwrt-gfw/blob/master/gfw/gfw-vpn_0.2_all.ipk --2014-12-08 15:07:15-- http://github.com/hackgfw/openwrt-gfw/blob/master/gfw/gfw-vpn_0.2_all.ipk Resolving github.com... 192.30.252.131 Connecting to github.com|192.30.252.131|:80... connected. HTTP request sent, awaiting response... 301 Moved Permanently Location: https://github.com/hackgfw/openwrt-gfw/blob/master/gfw/gfw-vpn_0.2_all.ipk [following] --2014-12-08 15:07:16-- https://github.com/hackgfw/openwrt-gfw/blob/master/gfw/gfw-vpn_0.2_all.ipk Connecting to github.com|192.30.252.131|:443... connected. ERROR: cannot verify github.com's certificate, issued by '/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 Extended Validation Server CA': Unable to locally verify the issuer's authority. To connect to github.com insecurely, use `--no-check-certificate'. root@OpenWrt:~# wget -O /tmp/gfw-vpn_0.2_all.ipk http://github.com/hackgfw/openwrt-gfw/blob/master/gfw/gfw-vpn_0.2_all.ipk --no-check-certificate --2014-12-08 15:07:38-- http://github.com/hackgfw/openwrt-gfw/blob/master/gfw/gfw-vpn_0.2_all.ipk Resolving github.com... 192.30.252.131 Connecting to github.com|192.30.252.131|:80... connected. HTTP request sent, awaiting response... 301 Moved Permanently Location: https://github.com/hackgfw/openwrt-gfw/blob/master/gfw/gfw-vpn_0.2_all.ipk [following] --2014-12-08 15:07:40-- https://github.com/hackgfw/openwrt-gfw/blob/master/gfw/gfw-vpn_0.2_all.ipk Connecting to github.com|192.30.252.131|:443... connected. WARNING: cannot verify github.com's certificate, issued by '/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 Extended Validation Server CA': Unable to locally verify the issuer's authority. HTTP request sent, awaiting response... 200 OK Length: unspecified [text/html] Saving to: '/tmp/gfw-vpn_0.2_all.ipk'

/tmp/gfw-vpn_0.2_all.ipk [ <=> ] 23.84K 74.5KB/s in 0.3s

2014-12-08 15:07:42 (74.5 KB/s) - '/tmp/gfw-vpn_0.2_all.ipk' saved [24409]

root@OpenWrt:~# md5sum /tmp/gfw-vpn_0.2_all.ipk 6b8e3a54813a9b8ce231be73dbbfe618 /tmp/gfw-vpn_0.2_all.ipk root@OpenWrt:~# wget -O /tmp/gfw-vpn_0.2_all.ipk https://github.com/hackgfw/openwrt-gfw/blob/master/gfw/gfw-vpn_0.2_all.ipk --2014-12-08 15:09:30-- https://github.com/hackgfw/openwrt-gfw/blob/master/gfw/gfw-vpn_0.2_all.ipk Resolving github.com... 192.30.252.131 Connecting to github.com|192.30.252.131|:443... connected. ERROR: cannot verify github.com's certificate, issued by '/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 Extended Validation Server CA': Unable to locally verify the issuer's authority. To connect to github.com insecurely, use `--no-check-certificate'. root@OpenWrt:~# wget -O /tmp/gfw-vpn_0.2_all.ipk https://github.com/hackgfw/openwrt-gfw/blob/master/gfw/gfw-vpn_0.2_all.ipk --no-check-certificate --2014-12-08 15:09:38-- https://github.com/hackgfw/openwrt-gfw/blob/master/gfw/gfw-vpn_0.2_all.ipk Resolving github.com... 192.30.252.131 Connecting to github.com|192.30.252.131|:443... connected. WARNING: cannot verify github.com's certificate, issued by '/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 Extended Validation Server CA': Unable to locally verify the issuer's authority. HTTP request sent, awaiting response... 200 OK Length: unspecified [text/html] Saving to: '/tmp/gfw-vpn_0.2_all.ipk'

/tmp/gfw-vpn_0.2_all.ipk [ <=> ] 23.84K 14.1KB/s in 1.7s

2014-12-08 15:09:42 (14.1 KB/s) - '/tmp/gfw-vpn_0.2_all.ipk' saved [24409]

root@OpenWrt:~# md5sum /tmp/gfw-vpn_0.2_all.ipk 9be6cfb8b769e540d1df220bdd34ba84 /tmp/gfw-vpn_0.2_all.ipk

ScrewChineseCommunist commented 9 years ago

root@OpenWrt:~# rm /tmp/gfw-vpn_0.2_all.ipk root@OpenWrt:~# wget -O /tmp/gfw-vpn_0.2_all.ipk https://github.com/hackgfw/openwrt-gfw/blob/master/gfw/gfw-vpn_0.2_all.ipk --no-check-certificate --2014-12-08 15:11:27-- https://github.com/hackgfw/openwrt-gfw/blob/master/gfw/gfw-vpn_0.2_all.ipk Resolving github.com... 192.30.252.131 Connecting to github.com|192.30.252.131|:443... connected. WARNING: cannot verify github.com's certificate, issued by '/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 Extended Validation Server CA': Unable to locally verify the issuer's authority. HTTP request sent, awaiting response... 200 OK Length: unspecified [text/html] Saving to: '/tmp/gfw-vpn_0.2_all.ipk'

/tmp/gfw-vpn_0.2_all.ipk [ <=> ] 23.84K 7.38KB/s in 3.2s

2014-12-08 15:11:34 (7.38 KB/s) - '/tmp/gfw-vpn_0.2_all.ipk' saved [24409]

root@OpenWrt:~# md5sum /tmp/gfw-vpn_0.2_all.ipk e5f6022d19427148562a9ffb98aae3f8 /tmp/gfw-vpn_0.2_all.ipk

ScrewChineseCommunist commented 9 years ago

怎么每次的md5sum值都不一样。。。WTFFF

hackgfw commented 9 years ago

不好意思，链接打错了，当时没有仔细检查，正确应该是

wget --no-check-certificate -O /tmp/gfw-vpn_0.2_all.ipk https://github.com/hackgfw/openwrt-gfw/blob/master/gfw/gfw-dns_0.1.2_all.ipk?raw=true

另外文件大小应该是 2297 字节，md5码是 19c79e36007b028bd07f2d53a1a2cfc8

ScrewChineseCommunist commented 9 years ago

装好了，还是没任何日志输出。。。准备逐步安装配置再试试，还不行的话就是优化内核的问题了。。。

ScrewChineseCommunist commented 9 years ago

root@OpenWrt:~# opkg install ppp-mod-pptp ip ipset iptables-mod-ipopt Installing ppp-mod-pptp (2.4.7-2) to root... Downloading http://downloads.openwrt.org/barrier_breaker/14.07/ar71xx/generic/packages/base/ppp-mod-pptp_2.4.7-2_ar71xx.ipk. Installing ip (3.15.0-1) to root... Downloading http://downloads.openwrt.org/barrier_breaker/14.07/ar71xx/generic/packages/base/ip_3.15.0-1_ar71xx.ipk. Installing ipset (6.20.1-1) to root... Downloading http://downloads.openwrt.org/barrier_breaker/14.07/ar71xx/generic/packages/base/ipset_6.20.1-1_ar71xx.ipk. Installing iptables-mod-ipopt (1.4.21-1) to root... Downloading http://downloads.openwrt.org/barrier_breaker/14.07/ar71xx/generic/packages/base/iptables-mod-ipopt_1.4.21-1_ar71xx.ipk. Configuring ip. Collected errors:

ScrewChineseCommunist commented 9 years ago

14.07测试过优化内核吗？怎么iptables-mod-ipopt都装不上去了。。。

ScrewChineseCommunist commented 9 years ago

root@OpenWrt:~# opkg install ppp-mod-pptp ip ipset iptables-mod-ipopt --force-depends Installing ppp-mod-pptp (2.4.7-2) to root... Downloading http://downloads.openwrt.org/barrier_breaker/14.07/ar71xx/generic/packages/base/ppp-mod-pptp_2.4.7-2_ar71xx.ipk. ^CInterrupted. Writing out status database. root@OpenWrt:~# opkg install ppp-mod-pptp ip ipset iptables-mod-ipopt --force-depends Installing ppp-mod-pptp (2.4.7-2) to root... Downloading http://downloads.openwrt.org/barrier_breaker/14.07/ar71xx/generic/packages/base/ppp-mod-pptp_2.4.7-2_ar71xx.ipk. Installing kmod-pptp (3.10.49-1) to root... Downloading http://downloads.openwrt.org/barrier_breaker/14.07/ar71xx/generic/packages/base/kmod-pptp_3.10.49-1_ar71xx.ipk. Installing kmod-gre (3.10.49-1) to root... Downloading http://downloads.openwrt.org/barrier_breaker/14.07/ar71xx/generic/packages/base/kmod-gre_3.10.49-1_ar71xx.ipk. Installing kmod-iptunnel (3.10.49-1) to root... Downloading http://downloads.openwrt.org/barrier_breaker/14.07/ar71xx/generic/packages/base/kmod-iptunnel_3.10.49-1_ar71xx.ipk. Installing kmod-mppe (3.10.49-1) to root... Downloading http://downloads.openwrt.org/barrier_breaker/14.07/ar71xx/generic/packages/base/kmod-mppe_3.10.49-1_ar71xx.ipk. Installing kmod-crypto-sha1 (3.10.49-1) to root... Downloading http://downloads.openwrt.org/barrier_breaker/14.07/ar71xx/generic/packages/base/kmod-crypto-sha1_3.10.49-1_ar71xx.ipk. Installing kmod-crypto-hash (3.10.49-1) to root... Downloading http://downloads.openwrt.org/barrier_breaker/14.07/ar71xx/generic/packages/base/kmod-crypto-hash_3.10.49-1_ar71xx.ipk. Installing kmod-crypto-ecb (3.10.49-1) to root... Downloading http://downloads.openwrt.org/barrier_breaker/14.07/ar71xx/generic/packages/base/kmod-crypto-ecb_3.10.49-1_ar71xx.ipk. Installing kmod-crypto-manager (3.10.49-1) to root... Downloading http://downloads.openwrt.org/barrier_breaker/14.07/ar71xx/generic/packages/base/kmod-crypto-manager_3.10.49-1_ar71xx.ipk. Installing kmod-crypto-pcompress (3.10.49-1) to root... Downloading http://downloads.openwrt.org/barrier_breaker/14.07/ar71xx/generic/packages/base/kmod-crypto-pcompress_3.10.49-1_ar71xx.ipk. Installing resolveip (2) to root... Downloading http://downloads.openwrt.org/barrier_breaker/14.07/ar71xx/generic/packages/base/resolveip_2_ar71xx.ipk. Package ip (3.15.0-1) installed in root is up to date. Installing ipset (6.20.1-1) to root... Downloading http://downloads.openwrt.org/barrier_breaker/14.07/ar71xx/generic/packages/base/ipset_6.20.1-1_ar71xx.ipk. Installing kmod-ipt-ipset (3.10.49+6.20.1-1) to root... Downloading http://downloads.openwrt.org/barrier_breaker/14.07/ar71xx/generic/packages/base/kmod-ipt-ipset_3.10.49+6.20.1-1_ar71xx.ipk. Installing kmod-nfnetlink (3.10.49-1) to root... Downloading http://downloads.openwrt.org/barrier_breaker/14.07/ar71xx/generic/packages/base/kmod-nfnetlink_3.10.49-1_ar71xx.ipk. Installing libmnl (1.0.3-1) to root... Downloading http://downloads.openwrt.org/barrier_breaker/14.07/ar71xx/generic/packages/base/libmnl_1.0.3-1_ar71xx.ipk. Installing iptables-mod-ipopt (1.4.21-1) to root... Downloading http://downloads.openwrt.org/barrier_breaker/14.07/ar71xx/generic/packages/base/iptables-mod-ipopt_1.4.21-1_ar71xx.ipk. Installing kmod-ipt-ipopt (3.10.49-1) to root... Downloading http://downloads.openwrt.org/barrier_breaker/14.07/ar71xx/generic/packages/base/kmod-ipt-ipopt_3.10.49-1_ar71xx.ipk. Configuring kmod-crypto-hash. Configuring kmod-crypto-pcompress. Configuring kmod-crypto-manager. Configuring kmod-nfnetlink. Configuring kmod-iptunnel. kmod: failed to insert /lib/modules/3.10.49/ip_tunnel.ko Configuring kmod-gre. kmod: failed to insert /lib/modules/3.10.49/ip_gre.ko Configuring libmnl. Configuring resolveip. Configuring kmod-pptp. Configuring kmod-ipt-ipopt. Configuring iptables-mod-ipopt. Configuring kmod-ipt-ipset. kmod: failed to insert /lib/modules/3.10.49/ip_set.ko kmod: failed to insert /lib/modules/3.10.49/ip_set_bitmap_ip.ko kmod: failed to insert /lib/modules/3.10.49/ip_set_bitmap_ipmac.ko kmod: failed to insert /lib/modules/3.10.49/ip_set_bitmap_port.ko kmod: failed to insert /lib/modules/3.10.49/ip_set_hash_ip.ko kmod: failed to insert /lib/modules/3.10.49/ip_set_hash_ipport.ko kmod: failed to insert /lib/modules/3.10.49/ip_set_hash_ipportip.ko kmod: failed to insert /lib/modules/3.10.49/ip_set_hash_ipportnet.ko kmod: failed to insert /lib/modules/3.10.49/ip_set_hash_net.ko kmod: failed to insert /lib/modules/3.10.49/ip_set_hash_netiface.ko kmod: failed to insert /lib/modules/3.10.49/ip_set_hash_netport.ko kmod: failed to insert /lib/modules/3.10.49/ip_set_list_set.ko kmod: failed to insert /lib/modules/3.10.49/xt_set.ko Configuring ipset. Configuring kmod-crypto-sha1. Configuring kmod-crypto-ecb. Configuring kmod-mppe. Configuring ppp-mod-pptp. Collected errors:

hackgfw commented 9 years ago

看提示应该是你用的内核和http://downloads.openwrt.org/barrier_breaker/14.07不符, 你是用 http://downloads.openwrt.org/barrier_breaker/14.07 下载的固件刷机的吗?

ScrewChineseCommunist commented 9 years ago

我用了你优化过的patch编译的内核啊，不然费这么大劲干嘛。。。

hackgfw commented 9 years ago

如果是自己编译的内核,是用不了 http://downloads.openwrt.org/barrier_breaker/14.07 上的内核模块,如果你发现有某些模块没编译/安装,只能重新编译/安装. 不过用户态程序没有这个限制,你可以使用自编内核+官网的用户态程序

hackgfw commented 9 years ago

另外你好像没有在编译的时候把 kmod-pptp 编译进内核,，如果你准备用自编译内核,，最好一开始就把所有需要的内核模块编译进固件里。

ScrewChineseCommunist commented 9 years ago

都有哪些是内核模块？

hackgfw commented 9 years ago

以 kmod 开头的包都是内核模块

ScrewChineseCommunist commented 9 years ago

kmod-iptunnel在哪个目录里？kernel的子目录都看了一遍，找不到。。。只有个kmod-iptunnel6

hackgfw commented 9 years ago

我看了下 kmod-iptunnel ，这个包貌似没有放到分类列表里，不过你可以用搜索找到： 先执行 make menuconfig 进入buildroot，然后按 "/" 输入 kmod-iptunnel 就可以看到这个包了 ，例如：

Symbol: PACKAGE_kmod-iptunnel [=y]
Type  : tristate
  Selected by: PACKAGE_kmod-gre [=y] || PACKAGE_kmod-gre6 [=n] && !LINUX_3_3 && !LINUX_3_6 || PACKAGE_kmod-ipip [=n]......

Symbol: PACKAGE_kmod-iptunnel 后面的 [=y] 表示这个包会被编译到固件里 Selected by: PACKAGE_kmod-gre [=y] 表示如果kmod-gre被编译到固件里，那么kmod-iptunnel也会被编译到固件里

ScrewChineseCommunist commented 9 years ago

嗯。已经逐步安装配置好，并且可以看到/var/log/ppp和ifconfig -a pptp-wall了，流量也跑的蹭蹭蹭，但google、youtube连不上。因为一直用sysupgrade，以前编译的gfw-vpn的配置文件还保留着，所以重新用 mtd -r write /tmp/openwrt-ar71xx-generic-mw4530r-v1-squashfs-sysupgrade.bin firmware 覆盖了一下，再逐步安装配置好，再刷google非常慢，十分钟也只有几十kb。这是什么情况？

ScrewChineseCommunist commented 9 years ago

Plugin pptp.so loaded. PPTP plugin version 1.00 pptp: call manager for 108.x.x.x window size: 50 call id: 1 control connection unix_sock Sent control packet type is 1 'Start-Control-Connection-Request' Received Start Control Connection Reply Client connection established. Sent control packet type is 7 'Outgoing-Call-Request' Received Outgoing Call Reply. Outgoing call established (call ID 1, peer's call ID 14336). using channel 1 Using interface pptp-wall Connect: pptp-wall <--> pptp (108.x.x.x) sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x793ce667>] rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x793ce667>] rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x48d84d1b> ] sent [LCP ConfRej id=0x1 ] sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x793ce667>] rcvd [LCP ConfReq id=0x2 <asyncmap 0x0> <magic 0x48d84d1b>] sent [LCP ConfAck id=0x2 <asyncmap 0x0> <magic 0x48d84d1b>] rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x793ce667>] sent [LCP EchoReq id=0x0 magic=0x793ce667] rcvd [LCP EchoReq id=0x0 magic=0x48d84d1b] sent [LCP EchoRep id=0x0 magic=0x793ce667] rcvd [CHAP Challenge id=0x21 <97d10378cded31286acdb5376647eb27>, name = "pptpd"] added response cache entry 0 sent [CHAP Response id=0x21 <5357de94c8f90ae179d29a75dfd32c80000000000000000039faeba004b7bd328d5558c6245ca88c5c18a5e39f9b082c00>, name = "fkccp"] rcvd [LCP EchoRep id=0x0 magic=0x48d84d1b] rcvd [CHAP Success id=0x21 "S=40C62348194313504DF361FBDA0C813DB38AC57A M=Access granted"] response found in cache (entry 0) CHAP authentication succeeded sent [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>] rcvd [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>] sent [CCP ConfAck id=0x1 <mppe +H -M +S -L -D -C>] rcvd [CCP ConfAck id=0x1 <mppe +H -M +S -L -D -C>] MPPE 128-bit stateless compression enabled sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns2 0.0.0.0>] sent [IPV6CP ConfReq id=0x1 ] rcvd [IPCP ConfReq id=0x1 <addr 10.0.1.1>] sent [IPCP ConfAck id=0x1 <addr 10.0.1.1>] rcvd [IPCP ConfRej id=0x1 <compress VJ 0f 01>] sent [IPCP ConfReq id=0x2 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns2 0.0.0.0>] rcvd [LCP ProtRej id=0x3 80 57 01 01 00 0e 01 0a ed 67 35 45 4c 3b a4 00] Protocol-Reject for 'IPv6 Control Protocol' (0x8057) received rcvd [IPCP ConfNak id=0x2 <addr 10.0.1.5> <ms-dns1 8.8.8.8> <ms-dns2 8.8.4.4>] sent [IPCP ConfReq id=0x3 <addr 10.0.1.5> <ms-dns1 8.8.8.8> <ms-dns2 8.8.4.4>] sent [LCP EchoReq id=0x1 magic=0x793ce667] sent [LCP EchoReq id=0x2 magic=0x793ce667] rcvd [LCP EchoRep id=0x1 magic=0x48d84d1b] rcvd [LCP EchoRep id=0x2 magic=0x48d84d1b] sent [LCP EchoReq id=0x3 magic=0x793ce667] rcvd [LCP EchoRep id=0x3 magic=0x48d84d1b] sent [IPCP ConfReq id=0x3 <addr 10.0.1.5> <ms-dns1 8.8.8.8> <ms-dns2 8.8.4.4>] rcvd [IPCP ConfReq id=0x2 <addr 10.0.1.1>] sent [IPCP ConfAck id=0x2 <addr 10.0.1.1>] rcvd [IPCP ConfAck id=0x3 <addr 10.0.1.5> <ms-dns1 8.8.8.8> <ms-dns2 8.8.4.4>] local IP address 10.0.1.5 remote IP address 10.0.1.1 primary DNS address 8.8.8.8 secondary DNS address 8.8.4.4 Script /lib/netifd/ppp-up started (pid 4682) Script /lib/netifd/ppp-up finished (pid 4682), status = 0x0 Echo Reply received. Echo Reply received. Echo Reply received. Echo Reply received. Echo Reply received. Echo Request received. Sent control packet type is 6 'Echo-Reply' Echo Reply received. Echo Reply received. Terminating on signal 15 Connect time 7.1 minutes. Sent 755769 bytes, received 99495 bytes. Script /lib/netifd/ppp-down started (pid 8607) MPPE disabled sent [LCP TermReq id=0x2 "MPPE disabled"] sent [LCP TermReq id=0x3 "MPPE disabled"] Script /lib/netifd/ppp-down finished (pid 8607), status = 0x0 Closing connection (unhandled) Sent control packet type is 12 'Call-Clear-Request' Closing connection (call state) Plugin pptp.so loaded. PPTP plugin version 1.00 pptp: call manager for 108.x.x.x window size: 50 call id: 2 control connection unix_sock Sent control packet type is 1 'Start-Control-Connection-Request' Received Start Control Connection Reply Client connection established. Sent control packet type is 7 'Outgoing-Call-Request' Received Outgoing Call Reply. Outgoing call established (call ID 2, peer's call ID 14464). using channel 2 Using interface pptp-wall Connect: pptp-wall <--> pptp (108.x.x.x) sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x876af88f>] rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x876af88f>] rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x1f06d23f> ] sent [LCP ConfRej id=0x1 ] sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x876af88f>] rcvd [LCP ConfReq id=0x2 <asyncmap 0x0> <magic 0x1f06d23f>] sent [LCP ConfAck id=0x2 <asyncmap 0x0> <magic 0x1f06d23f>] rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x876af88f>] sent [LCP EchoReq id=0x0 magic=0x876af88f] rcvd [LCP EchoReq id=0x0 magic=0x1f06d23f] sent [LCP EchoRep id=0x0 magic=0x876af88f] rcvd [CHAP Challenge id=0x13 <7ea51d552cc44c57cd148070f9d17e41>, name = "pptpd"] added response cache entry 0 sent [CHAP Response id=0x13 <2ee36855c09883ca1b2a175406f5e7af00000000000000004dbf1b3e4070ade935f24e50a9d3d0f656cb0bdfe612ae2300>, name = "fkccp"] rcvd [LCP EchoRep id=0x0 magic=0x1f06d23f] rcvd [CHAP Success id=0x13 "S=CD482C096EC39A7021BBB8EF9D0FD0FE497CF9A3 M=Access granted"] response found in cache (entry 0) CHAP authentication succeeded sent [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>] rcvd [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>] sent [CCP ConfAck id=0x1 <mppe +H -M +S -L -D -C>] rcvd [CCP ConfAck id=0x1 <mppe +H -M +S -L -D -C>] MPPE 128-bit stateless compression enabled sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns2 0.0.0.0>] sent [IPV6CP ConfReq id=0x1 ] rcvd [IPCP ConfReq id=0x1 <addr 10.0.1.1>] sent [IPCP ConfAck id=0x1 <addr 10.0.1.1>] rcvd [LCP ProtRej id=0x3 80 57 01 01 00 0e 01 0a 98 95 b2 4d 4c bc 10 68] Protocol-Reject for 'IPv6 Control Protocol' (0x8057) received rcvd [IPCP ConfRej id=0x1 <compress VJ 0f 01>] sent [IPCP ConfReq id=0x2 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns2 0.0.0.0>] rcvd [IPCP ConfNak id=0x2 <addr 10.0.1.5> <ms-dns1 8.8.8.8> <ms-dns2 8.8.4.4>] sent [IPCP ConfReq id=0x3 <addr 10.0.1.5> <ms-dns1 8.8.8.8> <ms-dns2 8.8.4.4>] rcvd [IPCP ConfAck id=0x3 <addr 10.0.1.5> <ms-dns1 8.8.8.8> <ms-dns2 8.8.4.4>] local IP address 10.0.1.5 remote IP address 10.0.1.1 primary DNS address 8.8.8.8 secondary DNS address 8.8.4.4 Script /lib/netifd/ppp-up started (pid 8994) Script /lib/netifd/ppp-up finished (pid 8994), status = 0x0 Echo Reply received. No response to 5 echo-requests Serial link appears to be disconnected. Connect time 1.5 minutes. Sent 215031 bytes, received 29918 bytes. Script /lib/netifd/ppp-down started (pid 9112) MPPE disabled sent [LCP TermReq id=0x2 "MPPE disabled"] sent [LCP TermReq id=0x3 "MPPE disabled"] Script /lib/netifd/ppp-down finished (pid 9112), status = 0x0 sent [LCP TermReq id=0x4 "MPPE disabled"] Connection terminated. Modem hangup Closing connection (unhandled) Sent control packet type is 12 'Call-Clear-Request' Closing connection (call state) pptp: call manager for 108.x.x.x window size: 50 call id: 3 control connection unix_sock Sent control packet type is 1 'Start-Control-Connection-Request' Received Start Control Connection Reply Client connection established. Sent control packet type is 7 'Outgoing-Call-Request' Received Outgoing Call Reply. using channel 3 Outgoing call established (call ID 3, peer's call ID 14720). Using interface pptp-wall Connect: pptp-wall <--> pptp (108.x.x.x) sent [LCP ConfReq id=0x5 <asyncmap 0x0> <magic 0x272e74a4>] rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x12e10d96> ] sent [LCP ConfRej id=0x1 ] rcvd [LCP ConfAck id=0x5 <asyncmap 0x0> <magic 0x272e74a4>] rcvd [LCP ConfReq id=0x2 <asyncmap 0x0> <magic 0x12e10d96>] sent [LCP ConfAck id=0x2 <asyncmap 0x0> <magic 0x12e10d96>] sent [LCP EchoReq id=0x0 magic=0x272e74a4] rcvd [LCP EchoReq id=0x0 magic=0x12e10d96] sent [LCP EchoRep id=0x0 magic=0x272e74a4] rcvd [CHAP Challenge id=0x1f <76b0ef785552e3c28bfc80a4eeaca004>, name = "pptpd"] added response cache entry 1 sent [CHAP Response id=0x1f <13fde56357580aad15f665f7d13df0ec0000000000000000723a139a4d7c00eacf2e3edc3e21ad664c394f2a2a2004c400>, name = "fkccp"] rcvd [LCP EchoRep id=0x0 magic=0x12e10d96] rcvd [CHAP Success id=0x1f "S=CBD9FCE18394F2C3876C796D0CC4EBD78F75AF97 M=Access granted"] response found in cache (entry 1) CHAP authentication succeeded sent [CCP ConfReq id=0x2 <mppe +H -M +S -L -D -C>] rcvd [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>] sent [CCP ConfAck id=0x1 <mppe +H -M +S -L -D -C>] rcvd [CCP ConfAck id=0x2 <mppe +H -M +S -L -D -C>] MPPE 128-bit stateless compression enabled sent [IPCP ConfReq id=0x4 <compress VJ 0f 01> <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns2 0.0.0.0>] sent [IPV6CP ConfReq id=0x2 ] rcvd [IPCP ConfReq id=0x1 <addr 10.0.1.1>] sent [IPCP ConfAck id=0x1 <addr 10.0.1.1>] rcvd [LCP ProtRej id=0x3 80 57 01 02 00 0e 01 0a 15 22 68 c5 9e 26 f4 90] Protocol-Reject for 'IPv6 Control Protocol' (0x8057) received rcvd [IPCP ConfRej id=0x4 <compress VJ 0f 01>] sent [IPCP ConfReq id=0x5 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns2 0.0.0.0>] rcvd [IPCP ConfNak id=0x5 <addr 10.0.1.5> <ms-dns1 8.8.8.8> <ms-dns2 8.8.4.4>] sent [IPCP ConfReq id=0x6 <addr 10.0.1.5> <ms-dns1 8.8.8.8> <ms-dns2 8.8.4.4>] rcvd [IPCP ConfAck id=0x6 <addr 10.0.1.5> <ms-dns1 8.8.8.8> <ms-dns2 8.8.4.4>] local IP address 10.0.1.5 remote IP address 10.0.1.1 primary DNS address 8.8.8.8 secondary DNS address 8.8.4.4 Script /lib/netifd/ppp-up started (pid 9246) Script /lib/netifd/ppp-up finished (pid 9246), status = 0x0 Echo Reply received. Terminating on signal 15 Connect time 1.7 minutes. Sent 9434 bytes, received 31087 bytes. Script /lib/netifd/ppp-down started (pid 9441) MPPE disabled sent [LCP TermReq id=0x6 "MPPE disabled"] sent [LCP TermReq id=0x7 "MPPE disabled"] Script /lib/netifd/ppp-down finished (pid 9441), status = 0x0 Closing connection (unhandled) Sent control packet type is 12 'Call-Clear-Request' Closing connection (call state)

hackgfw commented 9 years ago

在 pptp-wall 建立后，可以执行 cat /proc/pptp/pptp-wall 查看统计信息，ping VPN的网关看是否丢包太高。另外就是域名防污染是否已正常工作？

ScrewChineseCommunist commented 9 years ago

yuangg@kingston:~$ ping google.com PING google.com (173.194.127.163) 56(84) bytes of data. 64 bytes from hkg03s14-in-f3.1e100.net (173.194.127.163): icmp_seq=1 ttl=41 time=276 ms 64 bytes from hkg03s14-in-f3.1e100.net (173.194.127.163): icmp_seq=2 ttl=41 time=278 ms 64 bytes from hkg03s14-in-f3.1e100.net (173.194.127.163): icmp_seq=3 ttl=41 time=276 ms 64 bytes from hkg03s14-in-f3.1e100.net (173.194.127.163): icmp_seq=4 ttl=41 time=274 ms 64 bytes from hkg03s14-in-f3.1e100.net (173.194.127.163): icmp_seq=5 ttl=41 time=277 ms 64 bytes from hkg03s14-in-f3.1e100.net (173.194.127.163): icmp_seq=7 ttl=41 time=292 ms 64 bytes from hkg03s14-in-f3.1e100.net (173.194.127.163): icmp_seq=8 ttl=41 time=342 ms 64 bytes from hkg03s14-in-f3.1e100.net (173.194.127.163): icmp_seq=9 ttl=41 time=347 ms 64 bytes from hkg03s14-in-f3.1e100.net (173.194.127.163): icmp_seq=11 ttl=41 time=319 ms 64 bytes from hkg03s14-in-f3.1e100.net (173.194.127.163): icmp_seq=12 ttl=41 time=309 ms 64 bytes from hkg03s14-in-f3.1e100.net (173.194.127.163): icmp_seq=13 ttl=41 time=292 ms 64 bytes from hkg03s14-in-f3.1e100.net (173.194.127.163): icmp_seq=14 ttl=41 time=277 ms 64 bytes from hkg03s14-in-f3.1e100.net (173.194.127.163): icmp_seq=15 ttl=41 time=278 ms 64 bytes from hkg03s14-in-f3.1e100.net (173.194.127.163): icmp_seq=16 ttl=41 time=276 ms 64 bytes from hkg03s14-in-f3.1e100.net (173.194.127.163): icmp_seq=17 ttl=41 time=278 ms 64 bytes from hkg03s14-in-f3.1e100.net (173.194.127.163): icmp_seq=18 ttl=41 time=278 ms 64 bytes from hkg03s14-in-f3.1e100.net (173.194.127.163): icmp_seq=19 ttl=41 time=279 ms 64 bytes from hkg03s14-in-f3.1e100.net (173.194.127.163): icmp_seq=20 ttl=41 time=277 ms ^C --- google.com ping statistics --- 20 packets transmitted, 18 received, 10% packet loss, time 19013ms rtt min/avg/max/mdev = 274.833/290.848/347.840/22.747 ms

ScrewChineseCommunist commented 9 years ago

root@OpenWrt:~# ping 10.0.1.1 PING 10.0.1.1 (10.0.1.1): 56 data bytes 64 bytes from 10.0.1.1: seq=0 ttl=64 time=151.724 ms 64 bytes from 10.0.1.1: seq=1 ttl=64 time=155.740 ms 64 bytes from 10.0.1.1: seq=2 ttl=64 time=152.426 ms 64 bytes from 10.0.1.1: seq=3 ttl=64 time=150.974 ms 64 bytes from 10.0.1.1: seq=4 ttl=64 time=149.563 ms 64 bytes from 10.0.1.1: seq=5 ttl=64 time=148.718 ms 64 bytes from 10.0.1.1: seq=6 ttl=64 time=148.590 ms 64 bytes from 10.0.1.1: seq=7 ttl=64 time=148.119 ms 64 bytes from 10.0.1.1: seq=8 ttl=64 time=150.254 ms 64 bytes from 10.0.1.1: seq=9 ttl=64 time=151.726 ms 64 bytes from 10.0.1.1: seq=10 ttl=64 time=150.405 ms 64 bytes from 10.0.1.1: seq=11 ttl=64 time=149.047 ms 64 bytes from 10.0.1.1: seq=12 ttl=64 time=149.311 ms 64 bytes from 10.0.1.1: seq=13 ttl=64 time=1150.723 ms 64 bytes from 10.0.1.1: seq=14 ttl=64 time=150.393 ms 64 bytes from 10.0.1.1: seq=15 ttl=64 time=151.235 ms 64 bytes from 10.0.1.1: seq=16 ttl=64 time=1160.065 ms 64 bytes from 10.0.1.1: seq=17 ttl=64 time=159.856 ms 64 bytes from 10.0.1.1: seq=18 ttl=64 time=152.055 ms 64 bytes from 10.0.1.1: seq=19 ttl=64 time=150.363 ms 64 bytes from 10.0.1.1: seq=20 ttl=64 time=150.176 ms ^C --- 10.0.1.1 ping statistics --- 21 packets transmitted, 21 packets received, 0% packet loss round-trip min/avg/max = 148.119/246.736/1160.065 ms

ScrewChineseCommunist commented 9 years ago

root@OpenWrt:~# cat /proc/pptp/pptp-wall Accepted: 1581 Under Window: 0 Buffered: 801 Duplicated: 0 Lost: 308

ScrewChineseCommunist commented 9 years ago

到我的网关(10.0.1.1)正常，ping google也正常，但是刷google会提示： The connection to www.google.com was interrupted. Check your Internet connection Check any cables and reboot any routers, modems, or other network devices you may be using. Allow Chromium to access the network in your firewall or antivirus settings. If it is already listed as a program allowed to access the network, try removing it from the list and adding it again. If you use a proxy server... Check your proxy settings or contact your network administrator to make sure the proxy server is working. If you don't believe you should be using a proxy server: Go to the Chromium menu > Settings > Show advanced settings... > Change proxy settings... and make sure your configuration is set to "no proxy" or "direct." Error code: ERR_CONNECTION_RESET

ScrewChineseCommunist commented 9 years ago

在/etc/config/network里注掉wall，重启network，用电脑登录vpn，可以正常访问173.194.127.163，是google首页。所以应该不是dns污染的问题，也不是vpn的问题，而这条内容就是用vpn发的。

ScrewChineseCommunist commented 9 years ago

若挂着pptp-wall所有国外网站包括github都无法访问

ScrewChineseCommunist commented 9 years ago

Plugin pptp.so loaded. PPTP plugin version 1.00 pptp: call manager for fkccp.fkccp.fkccp.fkccp window size: 50 call id: 1 control connection unix_sock Sent control packet type is 1 'Start-Control-Connection-Request' Received Start Control Connection Reply Client connection established. Sent control packet type is 7 'Outgoing-Call-Request' Received Outgoing Call Reply. Outgoing call established (call ID 1, peer's call ID 640). using channel 1 Using interface pptp-wall Connect: pptp-wall <--> pptp (fkccp.fkccp.fkccp.fkccp) sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x2d08dd9f>] sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x2d08dd9f>] sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x2d08dd9f>] sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x2d08dd9f>] sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x2d08dd9f>] sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x2d08dd9f>] sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x2d08dd9f>] sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x2d08dd9f>] sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x2d08dd9f>] sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x2d08dd9f>] read returned zero, peer has closed Closing connection (shutdown) Sent control packet type is 12 'Call-Clear-Request' read returned zero, peer has closed Closing connection (call state) LCP: timeout sending Config-Requests Connection terminated. Modem hangup pptp: call manager for fkccp.fkccp.fkccp.fkccp window size: 50 call id: 2 control connection unix_sock Sent control packet type is 1 'Start-Control-Connection-Request' Received Start Control Connection Reply Client connection established. Sent control packet type is 7 'Outgoing-Call-Request' Received Outgoing Call Reply. using channel 2 Outgoing call established (call ID 2, peer's call ID 768). Using interface pptp-wall Connect: pptp-wall <--> pptp (fkccp.fkccp.fkccp.fkccp) sent [LCP ConfReq id=0x2 <asyncmap 0x0> <magic 0x995aa2da>] rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x2a9b6ebb> ] sent [LCP ConfRej id=0x1 ] rcvd [LCP ConfAck id=0x2 <asyncmap 0x0> <magic 0x995aa2da>] rcvd [LCP ConfReq id=0x2 <asyncmap 0x0> <magic 0x2a9b6ebb>] sent [LCP ConfAck id=0x2 <asyncmap 0x0> <magic 0x2a9b6ebb>] sent [LCP EchoReq id=0x0 magic=0x995aa2da] sent [LCP EchoReq id=0x1 magic=0x995aa2da] rcvd [CHAP Challenge id=0x51 , name = "pptpd"] added response cache entry 0 sent [CHAP Response id=0x51 <2227ba2f71ea401aca47ec4746f0c34c0000000000000000c904810597fe3395f3c809064dcd90e7afc4b13731ffc23b00>, name = "yuangg"] rcvd [LCP EchoRep id=0x0 magic=0x2a9b6ebb] rcvd [LCP EchoRep id=0x1 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x2 magic=0x995aa2da] rcvd [LCP EchoRep id=0x2 magic=0x2a9b6ebb] rcvd [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>] discarding proto 0x80fd in phase 5 sent [LCP EchoReq id=0x3 magic=0x995aa2da] rcvd [LCP EchoRep id=0x3 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x4 magic=0x995aa2da] sent [LCP EchoReq id=0x5 magic=0x995aa2da] rcvd [LCP EchoRep id=0x5 magic=0x2a9b6ebb] rcvd [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>] discarding proto 0x80fd in phase 5 sent [LCP EchoReq id=0x6 magic=0x995aa2da] rcvd [LCP EchoRep id=0x6 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x7 magic=0x995aa2da] rcvd [LCP EchoRep id=0x7 magic=0x2a9b6ebb] rcvd [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>] discarding proto 0x80fd in phase 5 sent [LCP EchoReq id=0x8 magic=0x995aa2da] rcvd [LCP EchoRep id=0x8 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x9 magic=0x995aa2da] rcvd [LCP EchoRep id=0x9 magic=0x2a9b6ebb] sent [LCP EchoReq id=0xa magic=0x995aa2da] rcvd [LCP EchoRep id=0xa magic=0x2a9b6ebb] rcvd [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>] discarding proto 0x80fd in phase 5 sent [LCP EchoReq id=0xb magic=0x995aa2da] rcvd [LCP EchoRep id=0xb magic=0x2a9b6ebb] sent [LCP EchoReq id=0xc magic=0x995aa2da] rcvd [LCP EchoRep id=0xc magic=0x2a9b6ebb] sent [LCP EchoReq id=0xd magic=0x995aa2da] rcvd [LCP EchoRep id=0xd magic=0x2a9b6ebb] rcvd [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>] discarding proto 0x80fd in phase 5 sent [LCP EchoReq id=0xe magic=0x995aa2da] rcvd [LCP EchoRep id=0xe magic=0x2a9b6ebb] sent [LCP EchoReq id=0xf magic=0x995aa2da] rcvd [LCP EchoRep id=0xf magic=0x2a9b6ebb] sent [LCP EchoReq id=0x10 magic=0x995aa2da] rcvd [LCP EchoRep id=0x10 magic=0x2a9b6ebb] rcvd [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>] discarding proto 0x80fd in phase 5 sent [LCP EchoReq id=0x11 magic=0x995aa2da] rcvd [LCP EchoRep id=0x11 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x12 magic=0x995aa2da] rcvd [LCP EchoRep id=0x12 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x13 magic=0x995aa2da] rcvd [LCP EchoRep id=0x13 magic=0x2a9b6ebb] rcvd [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>] discarding proto 0x80fd in phase 5 sent [LCP EchoReq id=0x14 magic=0x995aa2da] rcvd [LCP EchoRep id=0x14 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x15 magic=0x995aa2da] rcvd [LCP EchoRep id=0x15 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x16 magic=0x995aa2da] rcvd [LCP EchoRep id=0x16 magic=0x2a9b6ebb] rcvd [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>] discarding proto 0x80fd in phase 5 sent [LCP EchoReq id=0x17 magic=0x995aa2da] rcvd [LCP EchoRep id=0x17 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x18 magic=0x995aa2da] rcvd [LCP EchoRep id=0x18 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x19 magic=0x995aa2da] rcvd [LCP EchoRep id=0x19 magic=0x2a9b6ebb] rcvd [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>] discarding proto 0x80fd in phase 5 sent [LCP EchoReq id=0x1a magic=0x995aa2da] rcvd [LCP EchoRep id=0x1a magic=0x2a9b6ebb] sent [LCP EchoReq id=0x1b magic=0x995aa2da] rcvd [LCP EchoRep id=0x1b magic=0x2a9b6ebb] sent [LCP EchoReq id=0x1c magic=0x995aa2da] rcvd [LCP EchoRep id=0x1c magic=0x2a9b6ebb] rcvd [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>] discarding proto 0x80fd in phase 5 sent [LCP EchoReq id=0x1d magic=0x995aa2da] rcvd [LCP EchoRep id=0x1d magic=0x2a9b6ebb] sent [LCP EchoReq id=0x1e magic=0x995aa2da] rcvd [LCP EchoReq id=0x1 magic=0x2a9b6ebb] sent [LCP EchoRep id=0x1 magic=0x995aa2da] rcvd [LCP EchoRep id=0x1e magic=0x2a9b6ebb] sent [LCP EchoReq id=0x1f magic=0x995aa2da] rcvd [LCP EchoRep id=0x1f magic=0x2a9b6ebb] sent [LCP EchoReq id=0x20 magic=0x995aa2da] rcvd [LCP EchoRep id=0x20 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x21 magic=0x995aa2da] rcvd [LCP EchoRep id=0x21 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x22 magic=0x995aa2da] rcvd [LCP EchoRep id=0x22 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x23 magic=0x995aa2da] rcvd [LCP EchoRep id=0x23 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x24 magic=0x995aa2da] rcvd [LCP EchoRep id=0x24 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x25 magic=0x995aa2da] rcvd [LCP EchoRep id=0x25 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x26 magic=0x995aa2da] rcvd [LCP EchoRep id=0x26 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x27 magic=0x995aa2da] rcvd [LCP EchoRep id=0x27 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x28 magic=0x995aa2da] rcvd [LCP EchoRep id=0x28 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x29 magic=0x995aa2da] rcvd [LCP EchoRep id=0x29 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x2a magic=0x995aa2da] rcvd [LCP EchoRep id=0x2a magic=0x2a9b6ebb] sent [LCP EchoReq id=0x2b magic=0x995aa2da] rcvd [LCP EchoRep id=0x2b magic=0x2a9b6ebb] sent [LCP EchoReq id=0x2c magic=0x995aa2da] rcvd [LCP EchoRep id=0x2c magic=0x2a9b6ebb] sent [LCP EchoReq id=0x2d magic=0x995aa2da] rcvd [LCP EchoRep id=0x2d magic=0x2a9b6ebb] sent [LCP EchoReq id=0x2e magic=0x995aa2da] rcvd [LCP EchoRep id=0x2e magic=0x2a9b6ebb] sent [LCP EchoReq id=0x2f magic=0x995aa2da] rcvd [LCP EchoRep id=0x2f magic=0x2a9b6ebb] sent [LCP EchoReq id=0x30 magic=0x995aa2da] rcvd [LCP EchoRep id=0x30 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x31 magic=0x995aa2da] rcvd [LCP EchoRep id=0x31 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x32 magic=0x995aa2da] rcvd [LCP EchoRep id=0x32 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x33 magic=0x995aa2da] sent [LCP EchoReq id=0x34 magic=0x995aa2da] sent [LCP EchoReq id=0x35 magic=0x995aa2da] rcvd [LCP EchoRep id=0x34 magic=0x2a9b6ebb] rcvd [LCP EchoRep id=0x35 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x36 magic=0x995aa2da] rcvd [LCP EchoRep id=0x36 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x37 magic=0x995aa2da] rcvd [LCP EchoRep id=0x37 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x38 magic=0x995aa2da] rcvd [LCP EchoRep id=0x38 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x39 magic=0x995aa2da] rcvd [LCP EchoRep id=0x39 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x3a magic=0x995aa2da] rcvd [LCP EchoRep id=0x3a magic=0x2a9b6ebb] sent [LCP EchoReq id=0x3b magic=0x995aa2da] rcvd [LCP EchoRep id=0x3b magic=0x2a9b6ebb] sent [LCP EchoReq id=0x3c magic=0x995aa2da] rcvd [LCP EchoReq id=0x2 magic=0x2a9b6ebb] sent [LCP EchoRep id=0x2 magic=0x995aa2da] rcvd [LCP EchoRep id=0x3c magic=0x2a9b6ebb] Echo Reply received. sent [LCP EchoReq id=0x3d magic=0x995aa2da] rcvd [LCP EchoRep id=0x3d magic=0x2a9b6ebb] sent [LCP EchoReq id=0x3e magic=0x995aa2da] rcvd [LCP EchoRep id=0x3e magic=0x2a9b6ebb] sent [LCP EchoReq id=0x3f magic=0x995aa2da] rcvd [LCP EchoRep id=0x3f magic=0x2a9b6ebb] sent [LCP EchoReq id=0x40 magic=0x995aa2da] rcvd [LCP EchoRep id=0x40 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x41 magic=0x995aa2da] rcvd [LCP EchoRep id=0x41 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x42 magic=0x995aa2da] rcvd [LCP EchoRep id=0x42 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x43 magic=0x995aa2da] sent [LCP EchoReq id=0x44 magic=0x995aa2da] sent [LCP EchoReq id=0x45 magic=0x995aa2da] rcvd [LCP EchoRep id=0x44 magic=0x2a9b6ebb] rcvd [LCP EchoRep id=0x45 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x46 magic=0x995aa2da] rcvd [LCP EchoRep id=0x46 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x47 magic=0x995aa2da] sent [LCP EchoReq id=0x48 magic=0x995aa2da] sent [LCP EchoReq id=0x49 magic=0x995aa2da] sent [LCP EchoReq id=0x4a magic=0x995aa2da] rcvd [LCP EchoRep id=0x48 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x4b magic=0x995aa2da] rcvd [LCP EchoRep id=0x4a magic=0x2a9b6ebb] rcvd [LCP EchoRep id=0x4b magic=0x2a9b6ebb] sent [LCP EchoReq id=0x4c magic=0x995aa2da] sent [LCP EchoReq id=0x4d magic=0x995aa2da] sent [LCP EchoReq id=0x4e magic=0x995aa2da] rcvd [LCP EchoRep id=0x4d magic=0x2a9b6ebb] rcvd [LCP EchoRep id=0x4e magic=0x2a9b6ebb] sent [LCP EchoReq id=0x4f magic=0x995aa2da] sent [LCP EchoReq id=0x50 magic=0x995aa2da] sent [LCP EchoReq id=0x51 magic=0x995aa2da] rcvd [LCP EchoRep id=0x50 magic=0x2a9b6ebb] rcvd [LCP EchoRep id=0x51 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x52 magic=0x995aa2da] sent [LCP EchoReq id=0x53 magic=0x995aa2da] sent [LCP EchoReq id=0x54 magic=0x995aa2da] rcvd [LCP EchoRep id=0x53 magic=0x2a9b6ebb] rcvd [LCP EchoRep id=0x54 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x55 magic=0x995aa2da] rcvd [LCP EchoRep id=0x55 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x56 magic=0x995aa2da] rcvd [LCP EchoRep id=0x56 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x57 magic=0x995aa2da] rcvd [LCP EchoRep id=0x57 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x58 magic=0x995aa2da] rcvd [LCP EchoRep id=0x58 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x59 magic=0x995aa2da] rcvd [LCP EchoRep id=0x59 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x5a magic=0x995aa2da] rcvd [LCP EchoReq id=0x3 magic=0x2a9b6ebb] sent [LCP EchoRep id=0x3 magic=0x995aa2da] rcvd [LCP EchoRep id=0x5a magic=0x2a9b6ebb] sent [LCP EchoReq id=0x5b magic=0x995aa2da] rcvd [LCP EchoRep id=0x5b magic=0x2a9b6ebb] sent [LCP EchoReq id=0x5c magic=0x995aa2da] rcvd [LCP EchoRep id=0x5c magic=0x2a9b6ebb] sent [LCP EchoReq id=0x5d magic=0x995aa2da] rcvd [LCP EchoRep id=0x5d magic=0x2a9b6ebb] sent [LCP EchoReq id=0x5e magic=0x995aa2da] rcvd [LCP EchoRep id=0x5e magic=0x2a9b6ebb] sent [LCP EchoReq id=0x5f magic=0x995aa2da] rcvd [LCP EchoRep id=0x5f magic=0x2a9b6ebb] sent [LCP EchoReq id=0x60 magic=0x995aa2da] rcvd [LCP EchoRep id=0x60 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x61 magic=0x995aa2da] rcvd [LCP EchoRep id=0x61 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x62 magic=0x995aa2da] rcvd [LCP EchoRep id=0x62 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x63 magic=0x995aa2da] rcvd [LCP EchoRep id=0x63 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x64 magic=0x995aa2da] sent [LCP EchoReq id=0x65 magic=0x995aa2da] sent [LCP EchoReq id=0x66 magic=0x995aa2da] rcvd [LCP EchoRep id=0x65 magic=0x2a9b6ebb] rcvd [LCP EchoRep id=0x66 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x67 magic=0x995aa2da] rcvd [LCP EchoRep id=0x67 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x68 magic=0x995aa2da] rcvd [LCP EchoRep id=0x68 magic=0x2a9b6ebb] sent [LCP EchoReq id=0x69 magic=0x995aa2da] sent [LCP EchoReq id=0x6a magic=0x995aa2da] sent [LCP EchoReq id=0x6b magic=0x995aa2da] rcvd [LCP EchoRep id=0x6a magic=0x2a9b6ebb] rcvd [LCP EchoRep id=0x6b magic=0x2a9b6ebb] sent [LCP EchoReq id=0x6c magic=0x995aa2da] sent [LCP EchoReq id=0x6d magic=0x995aa2da] sent [LCP EchoReq id=0x6e magic=0x995aa2da] sent [LCP EchoReq id=0x6f magic=0x995aa2da] sent [LCP EchoReq id=0x70 magic=0x995aa2da] No response to 5 echo-requests Serial link appears to be disconnected. sent [LCP TermReq id=0x3 "Peer not responding"] rcvd [LCP EchoRep id=0x6f magic=0x2a9b6ebb] sent [LCP TermReq id=0x4 "Peer not responding"] read returned zero, peer has closed Closing connection (shutdown) Sent control packet type is 12 'Call-Clear-Request' read returned zero, peer has closed Closing connection (call state) Connection terminated. Modem hangup pptp: call manager for fkccp.fkccp.fkccp.fkccp window size: 50 call id: 3 control connection unix_sock Sent control packet type is 1 'Start-Control-Connection-Request' Received Start Control Connection Reply Client connection established. Sent control packet type is 7 'Outgoing-Call-Request' Received Outgoing Call Reply. Outgoing call established (call ID 3, peer's call ID 1024). using channel 3 Using interface pptp-wall Connect: pptp-wall <--> pptp (fkccp.fkccp.fkccp.fkccp) sent [LCP ConfReq id=0x5 <asyncmap 0x0> <magic 0x813da7f8>] rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x4800d5da> ] sent [LCP ConfRej id=0x1 ] rcvd [LCP ConfAck id=0x5 <asyncmap 0x0> <magic 0x813da7f8>] rcvd [LCP ConfReq id=0x2 <asyncmap 0x0> <magic 0x4800d5da>] sent [LCP ConfAck id=0x2 <asyncmap 0x0> <magic 0x4800d5da>] sent [LCP EchoReq id=0x0 magic=0x813da7f8] rcvd [LCP EchoReq id=0x0 magic=0x4800d5da] sent [LCP EchoRep id=0x0 magic=0x813da7f8] rcvd [CHAP Challenge id=0xe2 <679c49b1746fa71abf822d0f30aa9c79>, name = "pptpd"] added response cache entry 1 sent [CHAP Response id=0xe2 <88c19076421b71a30f7681644d4c51f600000000000000000fbfb7bea35813dba3996f7d8725a9d13fa2853c691b42f900>, name = "yuangg"] rcvd [LCP EchoRep id=0x0 magic=0x4800d5da] rcvd [CHAP Success id=0xe2 "S=611406CF3D5111A376B2345DDC9CE3878AB79D47 M=Access granted"] response found in cache (entry 1) CHAP authentication succeeded sent [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>] rcvd [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>] sent [CCP ConfAck id=0x1 <mppe +H -M +S -L -D -C>] rcvd [CCP ConfAck id=0x1 <mppe +H -M +S -L -D -C>] MPPE 128-bit stateless compression enabled sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns2 0.0.0.0>] sent [IPV6CP ConfReq id=0x1 ] rcvd [IPCP ConfReq id=0x1 <addr 10.0.1.1>] sent [IPCP ConfAck id=0x1 <addr 10.0.1.1>] rcvd [LCP ProtRej id=0x3 80 57 01 01 00 0e 01 0a 49 ea 6b fa 3d bb d6 d5] Protocol-Reject for 'IPv6 Control Protocol' (0x8057) received rcvd [IPCP ConfRej id=0x1 <compress VJ 0f 01>] sent [IPCP ConfReq id=0x2 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns2 0.0.0.0>] rcvd [IPCP ConfNak id=0x2 <addr 10.0.1.3> <ms-dns1 8.8.8.8> <ms-dns2 8.8.4.4>] sent [IPCP ConfReq id=0x3 <addr 10.0.1.3> <ms-dns1 8.8.8.8> <ms-dns2 8.8.4.4>] rcvd [IPCP ConfAck id=0x3 <addr 10.0.1.3> <ms-dns1 8.8.8.8> <ms-dns2 8.8.4.4>] local IP address 10.0.1.3 remote IP address 10.0.1.1 primary DNS address 8.8.8.8 secondary DNS address 8.8.4.4 Script /lib/netifd/ppp-up started (pid 2706) Script /lib/netifd/ppp-up finished (pid 2706), status = 0x0 Echo Reply received. Echo Reply received. Echo Request received. Sent control packet type is 6 'Echo-Reply' Echo Reply received. Echo Reply received. Echo Reply received. Echo Reply received. Terminating on signal 15 Connect time 6.1 minutes. Sent 127413 bytes, received 982819 bytes. Script /lib/netifd/ppp-down started (pid 6456) MPPE disabled sent [LCP TermReq id=0x6 "MPPE disabled"] sent [LCP TermReq id=0x7 "MPPE disabled"] Script /lib/netifd/ppp-down finished (pid 6456), status = 0x0 Closing connection (unhandled) Sent control packet type is 12 'Call-Clear-Request' Closing connection (call state)

hackgfw commented 9 years ago 
root@OpenWrt:~# cat /proc/pptp/pptp-wall
Accepted: 1581
Under Window: 0
Buffered: 801
Duplicated: 0
Lost: 308

首先从这个统计信息看丢包非常多，丢包率大概是 307/(1581+307) = 16%，这么高的丢包率会导致网页打开非常慢。

另外你提到电脑上能打开 google，我估计可能和 https://github.com/hackgfw/openwrt-gfw/issues/5#issuecomment-27190060 是一个问题，你可以在 pptp-wall 建立后再执行

ifconfig pptp-wall mtu 1000

调整下mtu试试看，如果还不行的话可以用 tcpdump 抓包看下。

ScrewChineseCommunist commented 9 years ago

果然啊！以前恐怕也是这个问题吧！早知道早解脱了。。。但只有google能访问，facebook/twitter/youtube还不行。我再看看以前的帖子吧。