API tools faq
paste
Audioctor

IPv6 with mwan3

Audioctor
May 19th, 2021
70
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 41.64 KB | None | 0 0
raw download clone embed print report
  1.  
  2. root@OpenWrt:~# ubus call system board; \
  3. > uci export network; uci export mwan3; \
  4. head -n -0 /etc/firewall.user; \
  5. > uci export dhcp; uci export firewall; \
  6. ip -6 addr ; ip -6 ro li tab all ; ip -6 ru; \
  7. > head -n -0 /etc/firewall.user; \
  8. > ip6tables-save -c; \
  9. > ip -6 addr ; ip -6 ro li tab all ; ip -6 ru; \
  10. > ls -l /etc/resolv.* /tmp/resolv.* /tmp/resolv.*/* ; head -n -0 /etc/resolv.*
  11. /tmp/resolv.* /tmp/resolv.*/*
  12. {
  13. "kernel": "4.14.209",
  14. "hostname": "OpenWrt",
  15. "system": "MediaTek MT7621 ver:1 eco:3",
  16. "model": "Netgear R6220",
  17. "board_name": "r6220",
  18. "release": {
  19. "distribution": "OpenWrt",
  20. "version": "19.07.5",
  21. "revision": "r11257-5090152ae3",
  22. "target": "ramips/mt7621",
  23. "description": "OpenWrt 19.07.5 r11257-5090152ae3"
  24. }
  25. }
  26. package network
  27.  
  28. config interface 'loopback'
  29. option ifname 'lo'
  30. option proto 'static'
  31. option ipaddr '127.0.0.1'
  32. option netmask '255.0.0.0'
  33.  
  34. config globals 'globals'
  35. option ula_prefix 'dd4e:2271:c462::/48'
  36.  
  37. config interface 'lan'
  38. option type 'bridge'
  39. option ifname 'eth0.1'
  40. option proto 'static'
  41. option netmask '255.255.255.0'
  42. option ip6assign '60'
  43. option ipaddr '192.168.0.1'
  44.  
  45. config device 'lan_eth0_1_dev'
  46. option name 'eth0.1'
  47. option macaddr '08:02:8e:e6:43:e8'
  48.  
  49. config interface 'wan'
  50. option ifname 'eth0.2'
  51. option proto 'dhcp'
  52. option metric '10'
  53. option delegate '0'
  54.  
  55. config device 'wan_eth0_2_dev'
  56. option name 'eth0.2'
  57. option macaddr '08:02:8e:e6:43:e9'
  58.  
  59. config interface 'wan6'
  60. option ifname 'eth0.2'
  61. option proto 'dhcpv6'
  62. option reqaddress 'try'
  63. option reqprefix 'auto'
  64. option metric '10'
  65. option sourcefilter '0'
  66.  
  67. config switch
  68. option name 'switch0'
  69. option reset '1'
  70. option enable_vlan '1'
  71.  
  72. config switch_vlan
  73. option device 'switch0'
  74. option vlan '1'
  75. option vid '1'
  76. option ports '6t 1 0'
  77.  
  78. config switch_vlan
  79. option device 'switch0'
  80. option vlan '2'
  81. option vid '2'
  82. option ports '6t 4'
  83.  
  84. config switch_vlan
  85. option device 'switch0'
  86. option vlan '3'
  87. option vid '3'
  88. option ports '6t 3'
  89.  
  90. config interface 'wanb'
  91. option ifname 'eth0.3'
  92. option proto 'static'
  93. option netmask '255.255.255.0'
  94. option ipaddr '192.168.4.4'
  95. option gateway '192.168.4.1'
  96. option metric '20'
  97. option macaddr '08:02:8e:e6:43:e7'
  98. option force_link '0'
  99. option delegate '0'
  100.  
  101. config interface 'wanb6'
  102. option ifname 'eth0.3'
  103. option proto 'dhcpv6'
  104. option reqaddress 'try'
  105. option reqprefix 'auto'
  106. option macaddr '08:02:8e:e6:43:e7'
  107. option metric '20'
  108. option sourcefilter '0'
  109.  
  110. config switch_vlan
  111. option device 'switch0'
  112. option vlan '5'
  113. option vid '131'
  114. option ports '6t 2t'
  115.  
  116. config switch_vlan
  117. option device 'switch0'
  118. option vlan '6'
  119. option vid '1849'
  120. option ports '6t 2t'
  121.  
  122. config switch_vlan
  123. option device 'switch0'
  124. option vlan '7'
  125. option ports '6t 2'
  126. option vid '4'
  127.  
  128. config interface 'wanc'
  129. option ifname 'eth0.4'
  130. option proto 'static'
  131. option netmask '255.255.255.0'
  132. option ipaddr '192.168.100.2'
  133. option gateway '192.168.100.1'
  134. option metric '30'
  135. option delegate '0'
  136.  
  137. config interface 'wancvirtual'
  138. option ifname 'eth0.4'
  139. option proto 'static'
  140. option netmask '255.255.255.0'
  141. option ipaddr '192.168.100.4'
  142. option gateway '192.168.100.1'
  143. option metric '35'
  144. option macaddr '7c:a9:6b:37:28:2d'
  145.  
  146. config interface 'wanc6'
  147. option proto 'dhcpv6'
  148. option reqprefix 'auto'
  149. option reqaddress 'try'
  150. option mtu '1492'
  151. option macaddr '7c:a9:6b:37:28:2e'
  152. option ifname 'eth0.4'
  153. option metric '30'
  154. option sourcefilter '0'
  155.  
  156. package mwan3
  157.  
  158. config policy 'balanced'
  159. option last_resort 'unreachable'
  160. list use_member 'wan_m1_w3'
  161. list use_member 'wanb_m1_w2'
  162. list use_member 'wanc_m1_w2'
  163. list use_member 'wan6_m1_w3'
  164. list use_member 'wanb6_m1_w2'
  165. list use_member 'wanc6_m1_w2'
  166.  
  167. config policy 'wan_only'
  168. list use_member 'wan_m1_w3'
  169. list use_member 'wan6_m1_w3'
  170.  
  171. config policy 'wanb_only'
  172. list use_member 'wanb_m1_w2'
  173. list use_member 'wanb6_m1_w2'
  174.  
  175. config policy 'wan_wanb'
  176. list use_member 'wan_m1_w3'
  177. list use_member 'wanb_m2_w2'
  178. list use_member 'wan6_m1_w3'
  179. list use_member 'wanb6_m2_w2'
  180.  
  181. config policy 'wanb_wan'
  182. list use_member 'wan_m2_w3'
  183. list use_member 'wanb_m1_w2'
  184. list use_member 'wan6_m2_w3'
  185. list use_member 'wanb6_m1_w2'
  186.  
  187. config globals 'globals'
  188. option mmx_mask '0x3F00'
  189. option rtmon_interval '5'
  190.  
  191. config interface 'wan'
  192. option enabled '1'
  193. list track_ip '8.8.4.4'
  194. list track_ip '8.8.8.8'
  195. list track_ip '208.67.222.222'
  196. list track_ip '208.67.220.220'
  197. option family 'ipv4'
  198. option reliability '2'
  199. option count '1'
  200. option timeout '2'
  201. option failure_latency '1000'
  202. option recovery_latency '500'
  203. option failure_loss '20'
  204. option recovery_loss '5'
  205. option interval '5'
  206. option down '3'
  207. option up '8'
  208.  
  209. config interface 'wan6'
  210. list track_ip '2001:4860:4860::8844'
  211. list track_ip '2001:4860:4860::8888'
  212. list track_ip '2620:0:ccd::2'
  213. list track_ip '2620:0:ccc::2'
  214. option family 'ipv6'
  215. option reliability '2'
  216. option count '1'
  217. option timeout '2'
  218. option interval '5'
  219. option down '3'
  220. option up '8'
  221. option enabled '1'
  222. option initial_state 'online'
  223. option track_method 'ping'
  224. option size '56'
  225. option max_ttl '60'
  226. option check_quality '0'
  227. option failure_interval '5'
  228. option recovery_interval '5'
  229.  
  230. config interface 'wanb'
  231. list track_ip '8.8.4.4'
  232. list track_ip '8.8.8.8'
  233. list track_ip '208.67.222.222'
  234. list track_ip '208.67.220.220'
  235. option family 'ipv4'
  236. option count '1'
  237. option timeout '2'
  238. option interval '5'
  239. option down '3'
  240. option up '8'
  241. option enabled '1'
  242. option initial_state 'online'
  243. option track_method 'ping'
  244. option size '56'
  245. option max_ttl '60'
  246. option check_quality '0'
  247. option failure_interval '5'
  248. option recovery_interval '5'
  249. option reliability '2'
  250.  
  251. config interface 'wanb6'
  252. option family 'ipv6'
  253. option count '1'
  254. option timeout '2'
  255. option interval '5'
  256. option down '3'
  257. option up '8'
  258. option enabled '1'
  259. option initial_state 'online'
  260. option track_method 'ping'
  261. option size '56'
  262. option max_ttl '60'
  263. option check_quality '0'
  264. option failure_interval '5'
  265. option recovery_interval '5'
  266. option reliability '2'
  267. list track_ip '2001:4860:4860::8844'
  268. list track_ip '2001:4860:4860::8888'
  269. list track_ip '2620:0:ccd::2'
  270.  
  271. config member 'wan_m1_w3'
  272. option interface 'wan'
  273. option metric '1'
  274. option weight '3'
  275.  
  276. config member 'wan_m2_w3'
  277. option interface 'wan'
  278. option metric '2'
  279. option weight '3'
  280.  
  281. config member 'wanb_m1_w2'
  282. option interface 'wanb'
  283. option metric '1'
  284. option weight '2'
  285.  
  286. config member 'wanb_m2_w2'
  287. option interface 'wanb'
  288. option metric '2'
  289. option weight '2'
  290.  
  291. config member 'wan6_m1_w3'
  292. option interface 'wan6'
  293. option metric '1'
  294. option weight '3'
  295.  
  296. config member 'wan6_m2_w3'
  297. option interface 'wan6'
  298. option metric '2'
  299. option weight '3'
  300.  
  301. config member 'wanb6_m1_w2'
  302. option interface 'wanb6'
  303. option metric '1'
  304. option weight '2'
  305.  
  306. config member 'wanb6_m2_w2'
  307. option interface 'wanb6'
  308. option metric '2'
  309. option weight '2'
  310.  
  311. config rule 'https'
  312. option sticky '1'
  313. option dest_port '443'
  314. option proto 'tcp'
  315. option use_policy 'balanced'
  316.  
  317. config rule 'default_rule_v4'
  318. option dest_ip '0.0.0.0/0'
  319. option use_policy 'balanced'
  320. option family 'ipv4'
  321.  
  322. config rule 'default_rule_v6'
  323. option dest_ip '::/0'
  324. option use_policy 'balanced'
  325. option family 'ipv6'
  326.  
  327. config interface 'wanc'
  328. option enabled '1'
  329. option initial_state 'online'
  330. option family 'ipv4'
  331. option track_method 'ping'
  332. option count '1'
  333. option size '56'
  334. option max_ttl '60'
  335. option check_quality '0'
  336. option timeout '2'
  337. option interval '5'
  338. option failure_interval '5'
  339. option recovery_interval '5'
  340. option down '3'
  341. list track_ip '8.8.4.4'
  342. list track_ip '8.8.8.8'
  343. list track_ip '208.67.222.222'
  344. list track_ip '208.67.220.220'
  345. option reliability '2'
  346. option up '8'
  347.  
  348. config member 'wanc_m1_w2'
  349. option interface 'wanc'
  350. option metric '1'
  351. option weight '2'
  352.  
  353. config member 'wanc_m2_w2'
  354. option interface 'wanc'
  355. option metric '2'
  356. option weight '2'
  357.  
  358. config interface 'wanc6'
  359. option enabled '1'
  360. option initial_state 'online'
  361. option track_method 'ping'
  362. option reliability '2'
  363. option count '1'
  364. option size '56'
  365. option max_ttl '60'
  366. option check_quality '0'
  367. option timeout '2'
  368. option interval '5'
  369. option failure_interval '5'
  370. option recovery_interval '5'
  371. option down '3'
  372. option up '8'
  373. option family 'ipv6'
  374. list track_ip '2001:4860:4860::8844'
  375. list track_ip '2001:4860:4860::8888'
  376. list track_ip '2620:0:ccd::2'
  377.  
  378. config member 'wanc6_m1_w2'
  379. option interface 'wanc6'
  380. option metric '1'
  381. option weight '2'
  382.  
  383. config member 'wanc6_m2_w2'
  384. option metric '2'
  385. option weight '2'
  386.  
  387. package dhcp
  388.  
  389. config dnsmasq
  390. option domainneeded '1'
  391. option boguspriv '1'
  392. option filterwin2k '0'
  393. option localise_queries '1'
  394. option rebind_protection '1'
  395. option rebind_localhost '1'
  396. option local '/lan/'
  397. option domain 'lan'
  398. option expandhosts '1'
  399. option nonegcache '0'
  400. option authoritative '1'
  401. option readethers '1'
  402. option leasefile '/tmp/dhcp.leases'
  403. option resolvfile '/tmp/resolv.conf.auto'
  404. option nonwildcard '1'
  405. option localservice '1'
  406.  
  407. config dhcp 'lan'
  408. option interface 'lan'
  409. option start '100'
  410. option limit '150'
  411. option leasetime '12h'
  412. option ra 'server'
  413. option dhcpv6 'server'
  414. option ra_management '1'
  415.  
  416. config dhcp 'wan'
  417. option interface 'wan'
  418. option ignore '1'
  419.  
  420. config odhcpd 'odhcpd'
  421. option maindhcp '0'
  422. option leasefile '/tmp/hosts/odhcpd'
  423. option leasetrigger '/usr/sbin/odhcpd-update'
  424. option loglevel '4'
  425.  
  426. package firewall
  427.  
  428. config defaults
  429. option input 'ACCEPT'
  430. option output 'ACCEPT'
  431. option synflood_protect '1'
  432. option forward 'ACCEPT'
  433.  
  434. config zone
  435. option name 'lan'
  436. option input 'ACCEPT'
  437. option output 'ACCEPT'
  438. option forward 'ACCEPT'
  439. option network 'lan'
  440.  
  441. config zone
  442. option name 'wan'
  443. option input 'REJECT'
  444. option output 'ACCEPT'
  445. option forward 'REJECT'
  446. option mtu_fix '1'
  447. option masq '1'
  448. option network 'wan wan6 wanb wanb6 wanc wancvirtual wanc6'
  449. option masq6 ''\''1'\'''
  450.  
  451. config forwarding
  452. option src 'lan'
  453. option dest 'wan'
  454.  
  455. config rule
  456. option name 'Allow-DHCP-Renew'
  457. option src 'wan'
  458. option proto 'udp'
  459. option dest_port '68'
  460. option target 'ACCEPT'
  461. option family 'ipv4'
  462.  
  463. config rule
  464. option name 'Allow-Ping'
  465. option src 'wan'
  466. option proto 'icmp'
  467. option icmp_type 'echo-request'
  468. option family 'ipv4'
  469. option target 'ACCEPT'
  470.  
  471. config rule
  472. option name 'Allow-IGMP'
  473. option src 'wan'
  474. option proto 'igmp'
  475. option family 'ipv4'
  476. option target 'ACCEPT'
  477.  
  478. config rule
  479. option name 'Allow-DHCPv6'
  480. option src 'wan'
  481. option proto 'udp'
  482. option src_ip 'fc00::/6'
  483. option dest_ip 'fc00::/6'
  484. option dest_port '546'
  485. option family 'ipv6'
  486. option target 'ACCEPT'
  487.  
  488. config rule
  489. option name 'Allow-MLD'
  490. option src 'wan'
  491. option proto 'icmp'
  492. option src_ip 'fe80::/10'
  493. list icmp_type '130/0'
  494. list icmp_type '131/0'
  495. list icmp_type '132/0'
  496. list icmp_type '143/0'
  497. option family 'ipv6'
  498. option target 'ACCEPT'
  499.  
  500. config rule
  501. option name 'Allow-ICMPv6-Input'
  502. option src 'wan'
  503. option proto 'icmp'
  504. list icmp_type 'echo-request'
  505. list icmp_type 'echo-reply'
  506. list icmp_type 'destination-unreachable'
  507. list icmp_type 'packet-too-big'
  508. list icmp_type 'time-exceeded'
  509. list icmp_type 'bad-header'
  510. list icmp_type 'unknown-header-type'
  511. list icmp_type 'router-solicitation'
  512. list icmp_type 'neighbour-solicitation'
  513. list icmp_type 'router-advertisement'
  514. list icmp_type 'neighbour-advertisement'
  515. option limit '1000/sec'
  516. option family 'ipv6'
  517. option target 'ACCEPT'
  518.  
  519. config rule
  520. option name 'Allow-ICMPv6-Forward'
  521. option src 'wan'
  522. option dest '*'
  523. option proto 'icmp'
  524. list icmp_type 'echo-request'
  525. list icmp_type 'echo-reply'
  526. list icmp_type 'destination-unreachable'
  527. list icmp_type 'packet-too-big'
  528. list icmp_type 'time-exceeded'
  529. list icmp_type 'bad-header'
  530. list icmp_type 'unknown-header-type'
  531. option limit '1000/sec'
  532. option family 'ipv6'
  533. option target 'ACCEPT'
  534. option enabled ''\''0'\'''
  535.  
  536. config rule
  537. option name 'Allow-IPSec-ESP'
  538. option src 'wan'
  539. option dest 'lan'
  540. option proto 'esp'
  541. option target 'ACCEPT'
  542.  
  543. config rule
  544. option name 'Allow-ISAKMP'
  545. option src 'wan'
  546. option dest 'lan'
  547. option dest_port '500'
  548. option proto 'udp'
  549. option target 'ACCEPT'
  550.  
  551. config include
  552. option path '/etc/firewall.user'
  553.  
  554. config forwarding
  555. option dest 'lan'
  556. option src 'wan'
  557.  
  558. config redirect
  559. option dest_port '21'
  560. option src 'wan'
  561. option name 'Linphone'
  562. option src_dport '21'
  563. option target 'DNAT'
  564. option dest_ip '192.168.0.187'
  565. option dest 'lan'
  566. list proto 'udp'
  567. option src_ip '192.168.4.1'
  568. list src_mac 'B4:6E:08:93:57:C2'
  569.  
  570. config include 'nat6'
  571. option path '/etc/firewall.nat6'
  572. option reload '1'
  573.  
  574. # This file is interpreted as shell script.
  575. # Put your custom iptables rules here, they will
  576. # be executed with each firewall (re-)start.
  577.  
  578. # Internal uci firewall chains are flushed and recreated on reload, so
  579. # put custom rules into the root chains e.g. INPUT or FORWARD or into the
  580. # special user chains, e.g. input_wan_rule or postrouting_lan_rule.
  581. # Generated by ip6tables-save v1.8.3 on Thu May 20 02:53:47 2021
  582. *nat
  583. :PREROUTING ACCEPT [4923:701626]
  584. :INPUT ACCEPT [2513:222150]
  585. :OUTPUT ACCEPT [7277:712927]
  586. :POSTROUTING ACCEPT [9:1334]
  587. :postrouting_lan_rule - [0:0]
  588. :postrouting_rule - [0:0]
  589. :postrouting_wan_rule - [0:0]
  590. :prerouting_lan_rule - [0:0]
  591. :prerouting_rule - [0:0]
  592. :prerouting_wan_rule - [0:0]
  593. :zone_lan_postrouting - [0:0]
  594. :zone_lan_prerouting - [0:0]
  595. :zone_wan_postrouting - [0:0]
  596. :zone_wan_prerouting - [0:0]
  597. [4923:701626] -A PREROUTING -m comment --comment "!fw3: Custom prerouting rule chain" -j prerouting_rule
  598. [4243:582966] -A PREROUTING -i br-lan -m comment --comment "!fw3" -j zone_lan_prerouting
  599. [0:0] -A PREROUTING -i eth0.2 -m comment --comment "!fw3" -j zone_wan_prerouting
  600. [0:0] -A PREROUTING -i eth0.3 -m comment --comment "!fw3" -j zone_wan_prerouting
  601. [680:118660] -A PREROUTING -i eth0.4 -m comment --comment "!fw3" -j zone_wan_prerouting
  602. [8562:910475] -A POSTROUTING -m comment --comment "!fw3: Custom postrouting rule chain" -j postrouting_rule
  603. [9:1334] -A POSTROUTING -o br-lan -m comment --comment "!fw3" -j zone_lan_postrouting
  604. [3291:378353] -A POSTROUTING -o eth0.2 -m comment --comment "!fw3" -j zone_wan_postrouting
  605. [2541:226490] -A POSTROUTING -o eth0.3 -m comment --comment "!fw3" -j zone_wan_postrouting
  606. [2721:304298] -A POSTROUTING -o eth0.4 -m comment --comment "!fw3" -j zone_wan_postrouting
  607. [9:1334] -A zone_lan_postrouting -m comment --comment "!fw3: Custom lan postrouting rule chain" -j postrouting_lan_rule
  608. [4243:582966] -A zone_lan_prerouting -m comment --comment "!fw3: Custom lan prerouting rule chain" -j prerouting_lan_rule
  609. [8553:909141] -A zone_wan_postrouting -m comment --comment "!fw3: Custom wan postrouting rule chain" -j postrouting_wan_rule
  610. [8553:909141] -A zone_wan_postrouting -m comment --comment "!fw3" -j MASQUERADE
  611. [680:118660] -A zone_wan_prerouting -m comment --comment "!fw3: Custom wan prerouting rule chain" -j prerouting_wan_rule
  612. COMMIT
  613. # Completed on Thu May 20 02:53:47 2021
  614. # Generated by ip6tables-save v1.8.3 on Thu May 20 02:53:47 2021
  615. *mangle
  616. :PREROUTING ACCEPT [27249:4370961]
  617. :INPUT ACCEPT [12878:1543090]
  618. :FORWARD ACCEPT [13051:2531467]
  619. :OUTPUT ACCEPT [26799:3382939]
  620. :POSTROUTING ACCEPT [39807:5911826]
  621. :mwan3_connected - [0:0]
  622. :mwan3_hook - [0:0]
  623. :mwan3_iface_in_wan6 - [0:0]
  624. :mwan3_iface_in_wanb6 - [0:0]
  625. :mwan3_iface_in_wanc6 - [0:0]
  626. :mwan3_ifaces_in - [0:0]
  627. :mwan3_policy_balanced - [0:0]
  628. :mwan3_policy_wan_only - [0:0]
  629. :mwan3_policy_wan_wanb - [0:0]
  630. :mwan3_policy_wanb_only - [0:0]
  631. :mwan3_policy_wanb_wan - [0:0]
  632. :mwan3_rule_https - [0:0]
  633. :mwan3_rules - [0:0]
  634. [1314831:172180377] -A PREROUTING -j mwan3_hook
  635. [1965:156688] -A FORWARD -o eth0.2 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
  636. [5030:397440] -A FORWARD -i eth0.2 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
  637. [0:0] -A FORWARD -o eth0.3 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
  638. [0:0] -A FORWARD -i eth0.3 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
  639. [9500:751668] -A FORWARD -o eth0.4 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
  640. [3232:255540] -A FORWARD -i eth0.4 -p tcp -m tcp --tcp-flags SYN,RST SYN -m comment --comment "!fw3: Zone wan MTU fixing" -j TCPMSS --clamp-mss-to-pmtu
  641. [1193252:139576459] -A OUTPUT -j mwan3_hook
  642. [965634:112082966] -A mwan3_connected -m set --match-set mwan3_connected dst -j MARK --set-xmark 0x3f00/0x3f00
  643. [406:21896] -A mwan3_hook -p ipv6-icmp -m icmp6 --icmpv6-type 133 -j RETURN
  644. [13430:1775264] -A mwan3_hook -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j RETURN
  645. [306924:22091576] -A mwan3_hook -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j RETURN
  646. [96129:6193992] -A mwan3_hook -p ipv6-icmp -m icmp6 --icmpv6-type 136 -j RETURN
  647. [27:4392] -A mwan3_hook -p ipv6-icmp -m icmp6 --icmpv6-type 137 -j RETURN
  648. [167232:17392128] -A mwan3_hook -p ipv6-icmp -m set --match-set mwan3_source_v6 src -m icmp6 --icmpv6-type 128 -j RETURN
  649. [1923935:264277588] -A mwan3_hook -j CONNMARK --restore-mark --nfmask 0x3f00 --ctmask 0x3f00
  650. [587026:62157788] -A mwan3_hook -m mark --mark 0x0/0x3f00 -j mwan3_ifaces_in
  651. [382245:39265855] -A mwan3_hook -m mark --mark 0x0/0x3f00 -j mwan3_connected
  652. [132937:16400596] -A mwan3_hook -m mark --mark 0x0/0x3f00 -j mwan3_rules
  653. [1923935:264277588] -A mwan3_hook -j CONNMARK --save-mark --nfmask 0x3f00 --ctmask 0x3f00
  654. [1306710:179663725] -A mwan3_hook -m mark ! --mark 0x3f00/0x3f00 -j mwan3_connected
  655. [10670:811276] -A mwan3_iface_in_wan6 -i eth0.2 -m set --match-set mwan3_connected_v6 src -m mark --mark 0x0/0x3f00 -m comment --comment default -j MARK --set-xmark 0x3f00/0x3f00
  656. [83759:8705968] -A mwan3_iface_in_wan6 -i eth0.2 -m mark --mark 0x0/0x3f00 -m comment --comment wan6 -j MARK --set-xmark 0x200/0x3f00
  657. [0:0] -A mwan3_iface_in_wanb6 -i eth0.3 -m set --match-set mwan3_connected_v6 src -m mark --mark 0x0/0x3f00 -m comment --comment default -j MARK --set-xmark 0x3f00/0x3f00
  658. [0:0] -A mwan3_iface_in_wanb6 -i eth0.3 -m mark --mark 0x0/0x3f00 -m comment --comment wanb6 -j MARK --set-xmark 0x400/0x3f00
  659. [2137:372880] -A mwan3_iface_in_wanc6 -i eth0.4 -m set --match-set mwan3_connected_v6 src -m mark --mark 0x0/0x3f00 -m comment --comment default -j MARK --set-xmark 0x3f00/0x3f00
  660. [6655:691752] -A mwan3_iface_in_wanc6 -i eth0.4 -m mark --mark 0x0/0x3f00 -m comment --comment wanc6 -j MARK --set-xmark 0x600/0x3f00
  661. [587011:62156230] -A mwan3_ifaces_in -m mark --mark 0x0/0x3f00 -j mwan3_iface_in_wanb6
  662. [586044:62049242] -A mwan3_ifaces_in -m mark --mark 0x0/0x3f00 -j mwan3_iface_in_wan6
  663. [23147:2586074] -A mwan3_ifaces_in -m mark --mark 0x0/0x3f00 -j mwan3_iface_in_wanc6
  664. [1653:242059] -A mwan3_policy_balanced -m mark --mark 0x0/0x3f00 -m statistic --mode random --probability 0.39999999991 -m comment --comment "wanc6 2 5" -j MARK --set-xmark 0x600/0x3f00
  665. [2407:371222] -A mwan3_policy_balanced -m mark --mark 0x0/0x3f00 -m comment --comment "wan6 3 3" -j MARK --set-xmark 0x200/0x3f00
  666. [0:0] -A mwan3_policy_wan_only -m mark --mark 0x0/0x3f00 -m comment --comment "wan6 3 3" -j MARK --set-xmark 0x200/0x3f00
  667. [0:0] -A mwan3_policy_wan_wanb -m mark --mark 0x0/0x3f00 -m comment --comment "wan6 3 3" -j MARK --set-xmark 0x200/0x3f00
  668. [0:0] -A mwan3_policy_wanb_only -o eth0.3 -m mark --mark 0x0/0x3f00 -m comment --comment "out wanb6 eth0.3" -j MARK --set-xmark 0x3f00/0x3f00
  669. [0:0] -A mwan3_policy_wanb_only -m mark --mark 0x0/0x3f00 -m comment --comment unreachable -j MARK --set-xmark 0x3e00/0x3f00
  670. [0:0] -A mwan3_policy_wanb_wan -m mark --mark 0x0/0x3f00 -m comment --comment "wan6 3 3" -j MARK --set-xmark 0x200/0x3f00
  671. [1702:135120] -A mwan3_rule_https -m mark --mark 0x0/0x3f00 -j mwan3_policy_balanced
  672. [1702:135120] -A mwan3_rule_https -m mark ! --mark 0xfc00/0xfc00 -j SET --del-set mwan3_sticky_https src,src
  673. [1702:135120] -A mwan3_rule_https -m mark ! --mark 0xfc00/0xfc00 -j SET --add-set mwan3_sticky_https src,src
  674. [1702:135120] -A mwan3_rules -p tcp -m multiport --dports 443 -m mark --mark 0x0/0x3f00 -j mwan3_rule_https
  675. [2358:478161] -A mwan3_rules -m mark --mark 0x0/0x3f00 -j mwan3_policy_balanced
  676. COMMIT
  677. # Completed on Thu May 20 02:53:47 2021
  678. # Generated by ip6tables-save v1.8.3 on Thu May 20 02:53:47 2021
  679. *filter
  680. :INPUT ACCEPT [0:0]
  681. :FORWARD ACCEPT [0:0]
  682. :OUTPUT ACCEPT [0:0]
  683. :forwarding_lan_rule - [0:0]
  684. :forwarding_rule - [0:0]
  685. :forwarding_wan_rule - [0:0]
  686. :input_lan_rule - [0:0]
  687. :input_rule - [0:0]
  688. :input_wan_rule - [0:0]
  689. :output_lan_rule - [0:0]
  690. :output_rule - [0:0]
  691. :output_wan_rule - [0:0]
  692. :reject - [0:0]
  693. :syn_flood - [0:0]
  694. :zone_lan_dest_ACCEPT - [0:0]
  695. :zone_lan_forward - [0:0]
  696. :zone_lan_input - [0:0]
  697. :zone_lan_output - [0:0]
  698. :zone_lan_src_ACCEPT - [0:0]
  699. :zone_wan_dest_ACCEPT - [0:0]
  700. :zone_wan_dest_REJECT - [0:0]
  701. :zone_wan_forward - [0:0]
  702. :zone_wan_input - [0:0]
  703. :zone_wan_output - [0:0]
  704. :zone_wan_src_REJECT - [0:0]
  705. [2:632] -A INPUT -i lo -m comment --comment "!fw3" -j ACCEPT
  706. [12876:1542458] -A INPUT -m comment --comment "!fw3: Custom input rule chain" -j input_rule
  707. [7392:1097383] -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3" -j ACCEPT
  708. [2:168] -A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m comment --comment "!fw3" -j syn_flood
  709. [4003:324575] -A INPUT -i br-lan -m comment --comment "!fw3" -j zone_lan_input
  710. [1103:93620] -A INPUT -i eth0.2 -m comment --comment "!fw3" -j zone_wan_input
  711. [164:11520] -A INPUT -i eth0.3 -m comment --comment "!fw3" -j zone_wan_input
  712. [214:15360] -A INPUT -i eth0.4 -m comment --comment "!fw3" -j zone_wan_input
  713. [13051:2531467] -A FORWARD -m comment --comment "!fw3: Custom forwarding rule chain" -j forwarding_rule
  714. [11578:2318489] -A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3" -j ACCEPT
  715. [1473:212978] -A FORWARD -i br-lan -m comment --comment "!fw3" -j zone_lan_forward
  716. [0:0] -A FORWARD -i eth0.2 -m comment --comment "!fw3" -j zone_wan_forward
  717. [0:0] -A FORWARD -i eth0.3 -m comment --comment "!fw3" -j zone_wan_forward
  718. [0:0] -A FORWARD -i eth0.4 -m comment --comment "!fw3" -j zone_wan_forward
  719. [2:632] -A OUTPUT -o lo -m comment --comment "!fw3" -j ACCEPT
  720. [26797:3382307] -A OUTPUT -m comment --comment "!fw3: Custom output rule chain" -j output_rule
  721. [11226:2062739] -A OUTPUT -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment "!fw3" -j ACCEPT
  722. [1512:106396] -A OUTPUT -o br-lan -m comment --comment "!fw3" -j zone_lan_output
  723. [3672:352787] -A OUTPUT -o eth0.2 -m comment --comment "!fw3" -j zone_wan_output
  724. [2697:237771] -A OUTPUT -o eth0.3 -m comment --comment "!fw3" -j zone_wan_output
  725. [7690:622614] -A OUTPUT -o eth0.4 -m comment --comment "!fw3" -j zone_wan_output
  726. [32:2504] -A reject -p tcp -m comment --comment "!fw3" -j REJECT --reject-with tcp-reset
  727. [0:0] -A reject -m comment --comment "!fw3" -j REJECT --reject-with icmp6-port-unreachable
  728. [2:168] -A syn_flood -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m limit --limit 25/sec --limit-burst 50 -m comment --comment "!fw3" -j RETURN
  729. [0:0] -A syn_flood -m comment --comment "!fw3" -j DROP
  730. [1512:106396] -A zone_lan_dest_ACCEPT -o br-lan -m comment --comment "!fw3" -j ACCEPT
  731. [1473:212978] -A zone_lan_forward -m comment --comment "!fw3: Custom lan forwarding rule chain" -j forwarding_lan_rule
  732. [1473:212978] -A zone_lan_forward -m comment --comment "!fw3: Zone lan to wan forwarding policy" -j zone_wan_dest_ACCEPT
  733. [0:0] -A zone_lan_forward -m comment --comment "!fw3" -j zone_lan_dest_ACCEPT
  734. [4003:324575] -A zone_lan_input -m comment --comment "!fw3: Custom lan input rule chain" -j input_lan_rule
  735. [4003:324575] -A zone_lan_input -m comment --comment "!fw3" -j zone_lan_src_ACCEPT
  736. [1512:106396] -A zone_lan_output -m comment --comment "!fw3: Custom lan output rule chain" -j output_lan_rule
  737. [1512:106396] -A zone_lan_output -m comment --comment "!fw3" -j zone_lan_dest_ACCEPT
  738. [4003:324575] -A zone_lan_src_ACCEPT -i br-lan -m conntrack --ctstate NEW,UNTRACKED -m comment --comment "!fw3" -j ACCEPT
  739. [36:2160] -A zone_wan_dest_ACCEPT -o eth0.2 -m conntrack --ctstate INVALID -m comment --comment "!fw3: Prevent NAT leakage" -j DROP
  740. [4593:487355] -A zone_wan_dest_ACCEPT -o eth0.2 -m comment --comment "!fw3" -j ACCEPT
  741. [0:0] -A zone_wan_dest_ACCEPT -o eth0.3 -m conntrack --ctstate INVALID -m comment --comment "!fw3: Prevent NAT leakage" -j DROP
  742. [2697:237771] -A zone_wan_dest_ACCEPT -o eth0.3 -m comment --comment "!fw3" -j ACCEPT
  743. [7:420] -A zone_wan_dest_ACCEPT -o eth0.4 -m conntrack --ctstate INVALID -m comment --comment "!fw3: Prevent NAT leakage" -j DROP
  744. [8199:698444] -A zone_wan_dest_ACCEPT -o eth0.4 -m comment --comment "!fw3" -j ACCEPT
  745. [0:0] -A zone_wan_dest_REJECT -o eth0.2 -m comment --comment "!fw3" -j reject
  746. [0:0] -A zone_wan_dest_REJECT -o eth0.3 -m comment --comment "!fw3" -j reject
  747. [0:0] -A zone_wan_dest_REJECT -o eth0.4 -m comment --comment "!fw3" -j reject
  748. [0:0] -A zone_wan_forward -m comment --comment "!fw3: Custom wan forwarding rule chain" -j forwarding_wan_rule
  749. [0:0] -A zone_wan_forward -p esp -m comment --comment "!fw3: Allow-IPSec-ESP" -j zone_lan_dest_ACCEPT
  750. [0:0] -A zone_wan_forward -p udp -m udp --dport 500 -m comment --comment "!fw3: Allow-ISAKMP" -j zone_lan_dest_ACCEPT
  751. [0:0] -A zone_wan_forward -m comment --comment "!fw3: Zone wan to lan forwarding policy" -j zone_lan_dest_ACCEPT
  752. [0:0] -A zone_wan_forward -m comment --comment "!fw3" -j zone_wan_dest_REJECT
  753. [1481:120500] -A zone_wan_input -m comment --comment "!fw3: Custom wan input rule chain" -j input_wan_rule
  754. [0:0] -A zone_wan_input -s fc00::/6 -d fc00::/6 -p udp -m udp --dport 546 -m comment --comment "!fw3: Allow-DHCPv6" -j ACCEPT
  755. [269:20444] -A zone_wan_input -s fe80::/10 -p ipv6-icmp -m icmp6 --icmpv6-type 130/0 -m comment --comment "!fw3: Allow-MLD" -j ACCEPT
  756. [0:0] -A zone_wan_input -s fe80::/10 -p ipv6-icmp -m icmp6 --icmpv6-type 131/0 -m comment --comment "!fw3: Allow-MLD" -j ACCEPT
  757. [0:0] -A zone_wan_input -s fe80::/10 -p ipv6-icmp -m icmp6 --icmpv6-type 132/0 -m comment --comment "!fw3: Allow-MLD" -j ACCEPT
  758. [0:0] -A zone_wan_input -s fe80::/10 -p ipv6-icmp -m icmp6 --icmpv6-type 143/0 -m comment --comment "!fw3: Allow-MLD" -j ACCEPT
  759. [0:0] -A zone_wan_input -p ipv6-icmp -m icmp6 --icmpv6-type 128 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Input" -j ACCEPT
  760. [0:0] -A zone_wan_input -p ipv6-icmp -m icmp6 --icmpv6-type 129 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Input" -j ACCEPT
  761. [0:0] -A zone_wan_input -p ipv6-icmp -m icmp6 --icmpv6-type 1 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Input" -j ACCEPT
  762. [0:0] -A zone_wan_input -p ipv6-icmp -m icmp6 --icmpv6-type 2 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Input" -j ACCEPT
  763. [0:0] -A zone_wan_input -p ipv6-icmp -m icmp6 --icmpv6-type 3 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Input" -j ACCEPT
  764. [0:0] -A zone_wan_input -p ipv6-icmp -m icmp6 --icmpv6-type 4/0 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Input" -j ACCEPT
  765. [0:0] -A zone_wan_input -p ipv6-icmp -m icmp6 --icmpv6-type 4/1 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Input" -j ACCEPT
  766. [0:0] -A zone_wan_input -p ipv6-icmp -m icmp6 --icmpv6-type 133 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Input" -j ACCEPT
  767. [342:24624] -A zone_wan_input -p ipv6-icmp -m icmp6 --icmpv6-type 135 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Input" -j ACCEPT
  768. [295:38176] -A zone_wan_input -p ipv6-icmp -m icmp6 --icmpv6-type 134 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Input" -j ACCEPT
  769. [543:34752] -A zone_wan_input -p ipv6-icmp -m icmp6 --icmpv6-type 136 -m limit --limit 1000/sec -m comment --comment "!fw3: Allow-ICMPv6-Input" -j ACCEPT
  770. [32:2504] -A zone_wan_input -m comment --comment "!fw3" -j zone_wan_src_REJECT
  771. [14059:1213172] -A zone_wan_output -m comment --comment "!fw3: Custom wan output rule chain" -j output_wan_rule
  772. [14059:1213172] -A zone_wan_output -m comment --comment "!fw3" -j zone_wan_dest_ACCEPT
  773. [19:1520] -A zone_wan_src_REJECT -i eth0.2 -m comment --comment "!fw3" -j reject
  774. [0:0] -A zone_wan_src_REJECT -i eth0.3 -m comment --comment "!fw3" -j reject
  775. [13:984] -A zone_wan_src_REJECT -i eth0.4 -m comment --comment "!fw3" -j reject
  776. COMMIT
  777. # Completed on Thu May 20 02:53:47 2021
  778. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
  779. inet6 ::1/128 scope host
  780. valid_lft forever preferred_lft forever
  781. 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UNKNOWN qlen 1000
  782. inet6 fe80::a02:8eff:fee6:43e8/64 scope link
  783. valid_lft forever preferred_lft forever
  784. 5: br-lan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
  785. inet6 2001:4490:4409:74b5::1/64 scope global dynamic noprefixroute
  786. valid_lft 80634sec preferred_lft 80634sec
  787. inet6 2001:4490:4409:6fe4::1/64 scope global dynamic noprefixroute
  788. valid_lft 37429sec preferred_lft 37429sec
  789. inet6 dd4e:2271:c462::1/60 scope global noprefixroute
  790. valid_lft forever preferred_lft forever
  791. inet6 fe80::a02:8eff:fee6:43e8/64 scope link
  792. valid_lft forever preferred_lft forever
  793. 7: eth0.2@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
  794. inet6 2405:201:300f:d4:a02:8eff:fee6:43e9/64 scope global dynamic noprefixroute
  795. valid_lft 3585sec preferred_lft 3585sec
  796. inet6 fe80::a02:8eff:fee6:43e9/64 scope link
  797. valid_lft forever preferred_lft forever
  798. 8: eth0.3@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
  799. inet6 fdb4:6e08:9357:c200:a02:8eff:fee6:43e7/64 scope global dynamic noprefixroute
  800. valid_lft 7057sec preferred_lft 3457sec
  801. inet6 fe80::a02:8eff:fee6:43e7/64 scope link
  802. valid_lft forever preferred_lft forever
  803. 9: eth0.4@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1492 state UP qlen 1000
  804. inet6 2001:4490:4409:74b5:7ea9:6bff:fe37:282e/64 scope global dynamic noprefixroute
  805. valid_lft 86336sec preferred_lft 86336sec
  806. inet6 fd8c:fd18:2c36:c100:7ea9:6bff:fe37:282e/64 scope global dynamic noprefixroute
  807. valid_lft 7136sec preferred_lft 3536sec
  808. inet6 2001:4490:4409:6fe4::1/128 scope global dynamic noprefixroute
  809. valid_lft 37430sec preferred_lft 37430sec
  810. inet6 fe80::7ea9:6bff:fe37:282e/64 scope link
  811. valid_lft forever preferred_lft forever
  812. 10: wlan1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
  813. inet6 fe80::a02:8eff:fee6:43ec/64 scope link
  814. valid_lft forever preferred_lft forever
  815. 11: wlan0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
  816. inet6 fe80::a02:8eff:fee6:43e8/64 scope link
  817. valid_lft forever preferred_lft forever
  818. 2001:4490:4409:6fe4::/64 dev eth0.4 table 2 proto static metric 256 pref medium
  819. 2001:4490:4409:6fe4::/64 dev br-lan table 2 proto static metric 1024 pref medium
  820. 2001:4490:4409:738e::/64 dev eth0.4 table 2 proto static metric 256 pref medium
  821. 2001:4490:4409:74b5::/64 dev eth0.4 table 2 proto static metric 256 pref medium
  822. 2405:201:300f:d4::/64 dev eth0.2 table 2 proto static metric 256 pref medium
  823. dd4e:2271:c462::/64 dev br-lan table 2 proto static metric 1024 pref medium
  824. fd8c:fd18:2c36:c100::/64 dev eth0.4 table 2 proto static metric 256 pref medium
  825. fdb4:6e08:9357:c200::/64 dev eth0.3 table 2 proto static metric 256 pref medium
  826. default via fe80::6a14:1ff:fe58:9f8b dev eth0.2 table 2 metric 10 pref medium
  827. 2001:4490:4409:6fe4::/64 dev eth0.4 table 4 proto static metric 256 pref medium
  828. 2001:4490:4409:6fe4::/64 dev br-lan table 4 proto static metric 1024 pref medium
  829. 2001:4490:4409:738e::/64 dev eth0.4 table 4 proto static metric 256 pref medium
  830. 2001:4490:4409:74b5::/64 dev eth0.4 table 4 proto static metric 256 pref medium
  831. 2405:201:300f:d4::/64 dev eth0.2 table 4 proto static metric 256 pref medium
  832. dd4e:2271:c462::/64 dev br-lan table 4 proto static metric 1024 pref medium
  833. fd8c:fd18:2c36:c100::/64 dev eth0.4 table 4 proto static metric 256 pref medium
  834. fdb4:6e08:9357:c200::/64 dev eth0.3 table 4 proto static metric 256 pref medium
  835. default via fe80::1 dev eth0.3 table 4 metric 20 pref medium
  836. 2001:4490:4409:6fe4::/64 dev eth0.4 table 6 proto static metric 256 pref medium
  837. 2001:4490:4409:6fe4::/64 dev br-lan table 6 proto static metric 1024 pref medium
  838. 2001:4490:4409:738e::/64 dev eth0.4 table 6 proto static metric 256 pref medium
  839. 2001:4490:4409:74b5::/64 dev eth0.4 table 6 proto static metric 256 pref medium
  840. 2405:201:300f:d4::/64 dev eth0.2 table 6 proto static metric 256 pref medium
  841. dd4e:2271:c462::/64 dev br-lan table 6 proto static metric 1024 pref medium
  842. fd8c:fd18:2c36:c100::/64 dev eth0.4 table 6 proto static metric 256 pref medium
  843. fdb4:6e08:9357:c200::/64 dev eth0.3 table 6 proto static metric 256 pref medium
  844. default via fe80::1 dev eth0.4 table 6 metric 30 pref medium
  845. 2001:4490:4409:6fe4::/64 dev eth0.4 proto static metric 256 pref medium
  846. 2001:4490:4409:6fe4::/64 dev br-lan proto static metric 1024 pref medium
  847. unreachable 2001:4490:4409:6fe4::/64 dev lo proto static metric 2147483647 error 4294967148 pref medium
  848. 2001:4490:4409:738e::/64 dev eth0.4 proto static metric 256 pref medium
  849. 2001:4490:4409:74b5::/64 dev eth0.4 proto static metric 256 pref medium
  850. 2001:4490:4409:74b5::/64 dev br-lan proto static metric 1024 pref medium
  851. unreachable 2001:4490:4409:74b5::/64 dev lo proto static metric 2147483647 error 4294967148 pref medium
  852. 2405:201:300f:d4::/64 dev eth0.2 proto static metric 256 pref medium
  853. dd4e:2271:c462::/64 dev br-lan proto static metric 1024 pref medium
  854. unreachable dd4e:2271:c462::/48 dev lo proto static metric 2147483647 error 4294967148 pref medium
  855. fd8c:fd18:2c36:c100::/64 dev eth0.4 proto static metric 256 pref medium
  856. fdb4:6e08:9357:c200::/64 dev eth0.3 proto static metric 256 pref medium
  857. fe80::/64 dev eth0 proto kernel metric 256 pref medium
  858. fe80::/64 dev eth0.2 proto kernel metric 256 pref medium
  859. fe80::/64 dev eth0.3 proto kernel metric 256 pref medium
  860. fe80::/64 dev eth0.4 proto kernel metric 256 pref medium
  861. fe80::/64 dev br-lan proto kernel metric 256 pref medium
  862. fe80::/64 dev wlan0 proto kernel metric 256 pref medium
  863. fe80::/64 dev wlan1 proto kernel metric 256 pref medium
  864. default via fe80::6a14:1ff:fe58:9f8b dev eth0.2 proto static metric 384 pref medium
  865. default via fe80::1 dev eth0.4 proto static metric 512 pref medium
  866. local ::1 dev lo table local proto kernel metric 0 pref medium
  867. anycast 2001:4490:4409:6fe4:: dev br-lan table local proto kernel metric 0 pref medium
  868. local 2001:4490:4409:6fe4::1 dev br-lan table local proto kernel metric 0 pref medium
  869. local 2001:4490:4409:6fe4::1 dev eth0.4 table local proto kernel metric 0 pref medium
  870. anycast 2001:4490:4409:74b5:: dev eth0.4 table local proto kernel metric 0 pref medium
  871. anycast 2001:4490:4409:74b5:: dev br-lan table local proto kernel metric 0 pref medium
  872. local 2001:4490:4409:74b5::1 dev br-lan table local proto kernel metric 0 pref medium
  873. local 2001:4490:4409:74b5:7ea9:6bff:fe37:282e dev eth0.4 table local proto kernel metric 0 pref medium
  874. anycast 2405:201:300f:d4:: dev eth0.2 table local proto kernel metric 0 pref medium
  875. local 2405:201:300f:d4:a02:8eff:fee6:43e9 dev eth0.2 table local proto kernel metric 0 pref medium
  876. anycast dd4e:2271:c462:: dev br-lan table local proto kernel metric 0 pref medium
  877. local dd4e:2271:c462::1 dev br-lan table local proto kernel metric 0 pref medium
  878. anycast fd8c:fd18:2c36:c100:: dev eth0.4 table local proto kernel metric 0 pref medium
  879. local fd8c:fd18:2c36:c100:7ea9:6bff:fe37:282e dev eth0.4 table local proto kernel metric 0 pref medium
  880. anycast fdb4:6e08:9357:c200:: dev eth0.3 table local proto kernel metric 0 pref medium
  881. local fdb4:6e08:9357:c200:a02:8eff:fee6:43e7 dev eth0.3 table local proto kernel metric 0 pref medium
  882. anycast fe80:: dev eth0 table local proto kernel metric 0 pref medium
  883. anycast fe80:: dev eth0.2 table local proto kernel metric 0 pref medium
  884. anycast fe80:: dev eth0.3 table local proto kernel metric 0 pref medium
  885. anycast fe80:: dev eth0.4 table local proto kernel metric 0 pref medium
  886. anycast fe80:: dev br-lan table local proto kernel metric 0 pref medium
  887. anycast fe80:: dev wlan0 table local proto kernel metric 0 pref medium
  888. anycast fe80:: dev wlan1 table local proto kernel metric 0 pref medium
  889. local fe80::a02:8eff:fee6:43e7 dev eth0.3 table local proto kernel metric 0 pref medium
  890. local fe80::a02:8eff:fee6:43e8 dev eth0 table local proto kernel metric 0 pref medium
  891. local fe80::a02:8eff:fee6:43e8 dev br-lan table local proto kernel metric 0 pref medium
  892. local fe80::a02:8eff:fee6:43e8 dev wlan0 table local proto kernel metric 0 pref medium
  893. local fe80::a02:8eff:fee6:43e9 dev eth0.2 table local proto kernel metric 0 pref medium
  894. local fe80::a02:8eff:fee6:43ec dev wlan1 table local proto kernel metric 0 pref medium
  895. local fe80::7ea9:6bff:fe37:282e dev eth0.4 table local proto kernel metric 0 pref medium
  896. ff00::/8 dev eth0 table local metric 256 pref medium
  897. ff00::/8 dev br-lan table local metric 256 pref medium
  898. ff00::/8 dev eth0.2 table local metric 256 pref medium
  899. ff00::/8 dev eth0.3 table local metric 256 pref medium
  900. ff00::/8 dev eth0.4 table local metric 256 pref medium
  901. ff00::/8 dev wlan0 table local metric 256 pref medium
  902. ff00::/8 dev wlan1 table local metric 256 pref medium
  903. 0: from all lookup local
  904. 1002: from all iif eth0.2 lookup 2
  905. 1004: from all iif eth0.3 lookup 4
  906. 1006: from all iif eth0.4 lookup 6
  907. 2002: from all fwmark 0x200/0x3f00 lookup 2
  908. 2004: from all fwmark 0x400/0x3f00 lookup 4
  909. 2006: from all fwmark 0x600/0x3f00 lookup 6
  910. 2061: from all fwmark 0x3d00/0x3f00 blackhole
  911. 2062: from all fwmark 0x3e00/0x3f00 unreachable
  912. 32766: from all lookup main
  913. 4200000000: from 2001:4490:4409:6fe4::1/64 iif br-lan unreachable
  914. 4200000000: from 2001:4490:4409:74b5::1/64 iif br-lan unreachable
  915. 4200000001: from all iif lo failed_policy
  916. 4200000005: from all iif br-lan failed_policy
  917. 4200000007: from all iif eth0.2 failed_policy
  918. 4200000007: from all iif eth0.2 failed_policy
  919. 4200000008: from all iif eth0.3 failed_policy
  920. 4200000008: from all iif eth0.3 failed_policy
  921. 4200000009: from all iif eth0.4 failed_policy
  922. 4200000009: from all iif eth0.4 failed_policy
  923. 4200000009: from all iif eth0.4 failed_policy
  924. ls: /tmp/resolv.*/*: No such file or directory
  925. lrwxrwxrwx 1 root root 16 Dec 6 07:31 /etc/resolv.conf -> /tmp/resolv.conf
  926. -rw-r--r-- 1 root root 0 May 20 02:37 /tmp/resolv.conf
  927. -rw-r--r-- 1 root root 222 May 20 02:37 /tmp/resolv.conf.auto
  928. ==> /etc/resolv.conf <==
  929.  
  930. ==> /tmp/resolv.conf <==
  931.  
  932. ==> /tmp/resolv.conf.auto <==
  933. # Interface wan
  934. nameserver 192.168.29.1
  935. # Interface wan6
  936. nameserver 2405:201:300f:d4::c0a8:1d01
  937. # Interface wanb6
  938. nameserver fe80::1%eth0.3
  939. # Interface wanc6
  940. nameserver 2001:4490:3ffe:13::4
  941. nameserver 2001:4490:3ffe:13::4
  942. head: /tmp/resolv.*/*: No such file or directory
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!