| View previous topic :: View next topic |
| Author |
Message |
totalimpact User

Joined: 14 Jul 2009 Posts: 26
|
Posted: Mon Feb 08, 2010 7:17 pm Post subject: Firewall problems in r2671 blocking outpound ping |
|
|
I am having an issue on some of my routers that are keeping client PCs from ping addresses at the other end of the mesh.
If I ping 192.168.1.10 it responds:
Reply from 101.166.244.1: Destination port unreachable.
But I am able to RDP to 192.168.1.10, however not being able to ping kills some of my other applications.
When I run:
/etc/init.d/iprules stop
/etc/init.d/iprules start
Pings magically start to go through.
I am using the OMP1 as a kind of bridge with a workstation on the wired port that needs to get back to a server on the main network. In the dashboard I do NOT have Gateway LAN Block: checked. I have Autoupdates enabled, and have forced update and upgrade in the shell.
I tried to build a custom.sh to just run the commands above, but they dont seem to run, and traffic is still blocked, my script looks like this:
| Code: | #!/bin/sh
/etc/init.d/iprules stop
/etc/init.d/iprules start |
Is there any way to get this working right - either by a custom.sh, or some update? |
|
| Back to top |
|
 |
Antonio (isleman) Site Admin


Joined: 10 Feb 2008 Posts: 1241 Location: Toscana, Italy
|
Posted: Mon Feb 08, 2010 11:08 pm Post subject: |
|
|
I'll check that issue, anyway, running
| Quote: | /etc/init.d/iprules stop
/etc/init.d/iprules start |
you break the captive portal. |
|
| Back to top |
|
 |
totalimpact User

Joined: 14 Jul 2009 Posts: 26
|
Posted: Mon Feb 08, 2010 11:11 pm Post subject: |
|
|
r2671
I am not using any captive portal - how can I allow pings through my LAN? |
|
| Back to top |
|
 |
totalimpact User

Joined: 14 Jul 2009 Posts: 26
|
Posted: Wed Feb 17, 2010 12:08 am Post subject: |
|
|
| Is there any way to fix this? How can I make the custom.sh script properly run these commands? |
|
| Back to top |
|
 |
totalimpact User

Joined: 14 Jul 2009 Posts: 26
|
Posted: Fri Feb 19, 2010 7:58 am Post subject: |
|
|
I put this in my custom.sh, but it does not seem to help as nodes still randomly block pings to the main LAN.
| Code: | #!/bin/sh
echo "*/3 * * * * /etc/init.d/iprules stop" >> /etc/crontabs/root
|
|
|
| Back to top |
|
 |
totalimpact User

Joined: 14 Jul 2009 Posts: 26
|
Posted: Mon Feb 22, 2010 8:33 pm Post subject: |
|
|
I guess I will have forget about Openmesh - nobody can help me with this, the firewall will not stay off, it keeps blocking local access which is hurting my users a great deal.
Looks like a great product for people looking to setup just wireless hotspots to the internet. |
|
| Back to top |
|
 |
mtlowes Power User

Joined: 28 Oct 2009 Posts: 283 Location: Lakeshore Ontario Canada
|
Posted: Mon Feb 22, 2010 9:07 pm Post subject: |
|
|
| totalimpact wrote: | I guess I will have forget about Openmesh - nobody can help me with this, the firewall will not stay off, it keeps blocking local access which is hurting my users a great deal.
Looks like a great product for people looking to setup just wireless hotspots to the internet. |
Try R2690, I'm sure it'll help, 2671 has inherent issues IMO |
|
| Back to top |
|
 |
totalimpact User

Joined: 14 Jul 2009 Posts: 26
|
Posted: Mon Feb 22, 2010 9:18 pm Post subject: |
|
|
I dont see that version anywhere in the download section:
Only registered users can see links on this forum! Register or Login on forum! |
Is that still a beta firmware?
If I set my dashboard to Auto upgrade will it get this firmware? |
|
| Back to top |
|
 |
totalimpact User

Joined: 14 Jul 2009 Posts: 26
|
Posted: Mon Feb 22, 2010 10:12 pm Post subject: |
|
|
So I see 2690 is in
Only registered users can see links on this forum! Register or Login on forum! |
if I enable test firmware in my dashboard - will it use that one? |
|
| Back to top |
|
 |
mtlowes Power User

Joined: 28 Oct 2009 Posts: 283 Location: Lakeshore Ontario Canada
|
Posted: Mon Feb 22, 2010 10:20 pm Post subject: yes |
|
|
| totalimpact wrote: | So I see 2690 is in
Only registered users can see links on this forum! Register or Login on forum! |
if I enable test firmware in my dashboard - will it use that one? |
Yes |
|
| Back to top |
|
 |
totalimpact User

Joined: 14 Jul 2009 Posts: 26
|
Posted: Tue Feb 23, 2010 6:22 pm Post subject: |
|
|
so that did nothing, r2690 has the same issue.
I kind of figured out the symptoms - if a wireless workstation tries to ping something on the lan, traffic gets dropped - but as soon as that station tries to browse the web, then pings will start passing to the lan also.
Unfortunately I have no more time to be down, so I have no more Openmesh nodes on my network. |
|
| Back to top |
|
 |
|