Questions tagged [openwrt]
OpenWrt is a Linux distribution primarily targeted at routing on embedded devices.
231
questions
-1
votes
0
answers
33
views
Tor spawns a lot of obfs4proxy
Hardware: Xiaomi Redmi AX6S (AX3200)
System: OpenWRT 23.05.3, kernel 5.15
I've configured tor to use obfs4proxy and ss-redir (shadowsocks) to use simple-tls plugin.
With no connections via tor and ss-...
0
votes
0
answers
54
views
Cannot setup ssh(dropbear) key login
Dropbear config is /etc/config/dropbear:
config dropbear
option Port '22'
option Interface 'lan'
option RootPasswordAuth 'off'
option PasswordAuth 'on'
I've paste my public ssh key ...
0
votes
0
answers
66
views
Having 2nd router's LAN be on same subnet as main router (and not just wifi)
Below is a diagram of my network:
MAIN router: 192.168.0.1 with DHCP assigning beginning at 192.168.0.5
2nd router: Running openWRT in AP mode. Receives a statically-assigned IP of 192.168.0.2 from ...
0
votes
1
answer
238
views
Fixing route and iptables for an OpenVPN tun0 interface, with a selected and safe routing
I did setup my router to use 3rd party VPNs for maximum security.
Since the ISPs that I am using have blocked all known VPN protocols including OpenVPN protocols, therefore I am forced to configure my ...
2
votes
1
answer
372
views
How to configure DHCP relay when NAT is also used?
I have a multi-homed application server that serves multiple networks that are not connected with each other (other than being all connected to the server, each one on its dedicated network interface)....
0
votes
2
answers
139
views
How do you create user-restrictions using wireguard?
I have two modes that I like to use to model my desired vpn settings,
device wireguards in has access only to jellyfin
device wireguards in has access to all resources.
How do I configure OpenWRT ...
0
votes
1
answer
310
views
IPv6 guest network on OpenWrt, but ISP only delegates one /64 subnet
I want to host both an ordinary unrestricted Wi-Fi network and a more restricted guest Wi-Fi network on the same OpenWrt router. The problem is that my ISP only delegates one /64 subnet to me. ...
-1
votes
1
answer
150
views
How to reroute packets to other gateway in LAN?
I have local network 192.168.203.0/24 with 2 gateways:
192.168.203.1 - router that gives access to the internet,
192.168.203.5 - OpenWRT which gives access to other private network through OpenVPN.
...
0
votes
1
answer
191
views
application runs from command line, but cannot start as init.d script - openWrt
Got a problem with my service written in C. It runs as an init.d service and has been working fine for many months on many devices. Today I've made some changes in the software and very strange thing ...
0
votes
0
answers
222
views
How to troubleshoot PXE boot from DD-WRT dnsmasq not sending tftp server info?
I have a MikroTik hEXs router (firmware v6.47.1) which I want to flash with OpenWRT. The OpenWRT wiki site has detailed instructions on the procedure, and it requires that one netboot the router. My ...
1
vote
1
answer
151
views
Duplicate traffic while spoofing an interface
to sum up my issue, I have a linux router that has 3 network interfaces:
a wlan interface acting as a DHCP server, upon which I manage the device, not in the scope of this question.
a lan interface, ...
0
votes
1
answer
79
views
Is there any geographical zone that permits all 802.11 frequencies? [closed]
When I run OpenWRT sometimes I get errors like this,
daemon.notice hostapd: Frequency 5720 (primary) not allowed for AP mode, flags: 0x800416b NO-IR RADAR
daemon.err hostapd: Primary frequency not ...
0
votes
1
answer
424
views
Does nftables flowtable software/hardware offloading conflict with other nftables rules?
According to https://wiki.nftables.org/wiki-nftables/index.php/Flowtables, flowtables reside in the ingress hook. So, does that mean if connection is picked up by the flowtable, it will not be ...
0
votes
0
answers
340
views
Openwrt don't resolve hostnames to another Openwrt
I have 2 Openwrt routers one is on front, another is on the back.
Back router's WAN connected to LAN of front router and have it's own subnet.
Back router WAN DNS configured to a front router.
Front ...
0
votes
1
answer
255
views
::qWireguard unable to initiate handshake from one direction Site-to-Site VPN
I am trying to setup a Site-to-Site VPN between SiteA (OpenWrt Router) and SiteB (Oracle instance with public IP)
Since SiteA is OpenWRT, I use the GUI
OpenWRT_Server_Conf_Screenshot
...
0
votes
1
answer
267
views
Openvpn - LAN behind openvpn server can not connect to LAN behind openvpn client
I have the following scenario:
Server C and Server D can connect just fine to Server A and Server B , but Server B and Server A can not connect to Server C and Server D.
I found some people having ...
0
votes
1
answer
445
views
How to extend amount of VLAN's via external Managed Switch on Linksys WRT Router on OpenWRT 21
Goal is to create more than 4 VLAN's leveraging external ports on Managed Switch all under control of the Main Router (Linksys WRT with 4 built-in switch-ports) running OpenWRT 21.
Linksys Managed ...
1
vote
0
answers
113
views
connecting two SIP phones from different LANs over ZeroTier openwrt
i make site to site conncetion by tp-link n600 openwrt zerotier and no problem , i can reach every thing in two sites and ping ok
but i have in site 1 Issable and in site 2 sip phone
------------------...
0
votes
0
answers
560
views
1:1 NAT or MultiIP for WAN implementation on OpenWRT NFTABLES (fw4)
I would like to configure 1:1 NAT for my ISP modem connected to my OpenWRT WAN interface.
The modem IP address is 10.70.70.1 and I want to map it on my OpenWRT LAN bridge (192.168.64.0/24) with IP ...
3
votes
2
answers
730
views
How to route host traffic over lxc?
Some info updated:
Last login: Wed Aug 31 18:10:24 2022
root@pve:~# ip route
default via 192.168.132.1 dev vmbr0 proto kernel onlink
192.168.132.0/24 dev vmbr0 proto kernel scope link src 192.168.132....
0
votes
0
answers
393
views
Is is possible to use OpenVPN client as default network gateway (OpenWRT)?
Usually, when using a VPN, you can route all client traffic(s) through a VPN tunnel with a exit point on the VPN server.
Is there a reverse possibility: to organize an exit point to the WWW on the ...
0
votes
0
answers
286
views
nftables or fw4 issue with timebased traffic rules
Since the OpenWRT ver > 22.3 does use NFTABLES instead of IPTABLES I got issue with some firewall (fw4) time based traffic rules that I have no idea how to solve them.
The firewall rule is as ...
0
votes
1
answer
339
views
running openwrt in virtualbox with 2 network adapters- a host only adapter and bridged adapter, but only host-only adapter shows
following this video to try and set up a virtual network for me to practice hacking, but only the host-only adapter shows (I am currently 17 minutes into the video).
uci show network
ip addr
/etc/...
1
vote
0
answers
748
views
Blocking forwarded traffic with OpenWrt fw3 firewall
I can't find out how to create a fw3 rule which does what I want (block all traffic from 192.168.1.119). I have this in /etc/config/firewall
config rule
option ...
1
vote
1
answer
631
views
WG3526 modem can't connect to 4G/LTE with OpenWRT
I have a client with a WG3526 4G/LTE modem with a sim card slot.
I had to change the firmware so I can get detailed bandwidth usage.
My issue is since I installed the generic version of OpenWRT, the ...
0
votes
1
answer
601
views
iptables rules openwrt not working
I am new here and I hope find answer to my question
i hvae set rule in openwrt iptables
iptables -A FORWARD -s 192.168.2.14 -m time --timestart 8:00 --timestop 18:30 -j ACCEPT
iptables -A ...
0
votes
1
answer
136
views
Is ingress filtering described in RFC2827 implemented in most routers? How does such implementation look like?
RFC 2827 describes the idea of ingress filtering that is meant to
deal with DOS attacks that utilize IP spoofing:
An input traffic filter on the ingress (input) link of "router 2", which ...
0
votes
0
answers
362
views
I want to test IGMP capability of a OpenWRT based router. How caan i test?
This is what I want to test out,
SEE IMAGE: Router connected to users and is accessible over the internet as well
PC1 and PC2 should be able to join some group(s).
Should be able to leave group as ...
0
votes
0
answers
318
views
Transform Broadcast packet in Unicast packet with iptables and ebtables
I've been struggling with this problem for months, and my limited networking knowledge doesn't allow me to progress further, so here I am asking for an advice.
I have an OpenWRT Router with two ...
1
vote
1
answer
2k
views
How can I MASQUERADE between vlan bridges
I have created two VLAN bridges in openwrt based system which has single physical interface.
*) eth0->lan->br-lan
*) br-lan->br-lan.2(VLAN INTF)->br-vlan2(BRIDGE INTF)
*) br-lan->br-lan....
0
votes
1
answer
822
views
How to add a routing rule that only match "dport"?
In my OpenWrt box, I want to route only a specific protocol(tcp:1888) to a tun interface only for one PC(192.168.28.2), so I do as following:
ip rule add from 192.168.28.2 dport 1888 lookup 123
ip ...
2
votes
1
answer
971
views
How to block devices connecting to a specific wireless interface from accessing the internet?
I have configured my OpenWRT WiFi router with two wireless interfaces: wlan0 and wlan0-1. My WAN ethernet interface is eth0.2.
How do I prevent devices that connect to wlan0-1 from accessing the ...
0
votes
1
answer
574
views
OpenVPN and IPTABLES - How to assign lan (vpn) gateway to clients
I am trying to set up my openvpn network but I have a problem.
My LAN configuration is as follows:
main router Zyxel 192.168.1.1 acting as gateway (vdsl connection) and
access point;
openwrt router ...
0
votes
1
answer
62
views
Redirect TLS traffic by hostname
I have an IoT device that connects to a.iot.x.amazonaws.com at port 8883 (secure MQTT).
I would instead like it to connect to my own site at b.iot.x.amazonaws.com (same port and protocol). I would ...
0
votes
0
answers
304
views
IPv6 connection drops after renewing an address
I have a router running OpenWrt and a machine with embedded Linux built with Yocto. I need to detect lease renewing in my C application. On my router I decrease lease time to 30 seconds. When I log on ...
0
votes
1
answer
6k
views
Is it possible to force the DHCP server to assign a different IP address each time the address is renewed?
I need to detect IP address renewals in my C++ Linux application and check if the new address is different from the old one. I have access to a router running OpenWrt. I can change the lease time, but ...
0
votes
0
answers
690
views
Requests to WAN IP are served by LAN interface on OpenWrt
Here's the situation. I have OpenWrt installation with multiple zones:
WAN - let it be 1.1.1.1
LAN0 - 192.168.0.0/24
LAN1 - 192.168.1.0/24
After forwarding some port from WAN to LAN0 I can reach it ...
0
votes
1
answer
723
views
Unraid share fails to mount on OpenWRT using mount.cifs?
So I have an Unraid machine with some shares on it and I would like to be able to mount this share on my OpenWRT router for backing up/transfering files onto the router (avoids having to plug-in/...
1
vote
1
answer
1k
views
How to get internet/networking on QEMU for OpenWrt under Windows?
I would like to run a Internet-capable OpenWrt-Box on a Windows10 Machine using QEMU.
I have tried this command:
"c:\Program Files\qemu\qemu-system-aarch64.exe" -m 1024 -smp 2 -cpu cortex-...
0
votes
0
answers
362
views
OpenVPN on OpenWRT fails to connect "connection timeout"
It seems very elegant to be able to connect to your homenetwork from any public accesspoint without being worried to disclose your traffic. So dispite my lack of computer network experience, and after ...
5
votes
2
answers
8k
views
OpenWRT - How to redirect all subdomains of a hostname, to the same host, so that it can be reverse proxied?
I have an OpenWRT router setup, 192.168.1.1, with search domain, local (as opposed to the default lan).
I have a server setup, 192.168.1.200, with hostname, server.local.
I have a workstation, 192.168....
0
votes
1
answer
848
views
Capturing IEEE802.11.x auth and capabilities data with tcpdump?
I'm troubleshooting some issues with my wireless network (OpenWrt 19.x and mobile device) and I came across this:
https://dot11.exposed/2017/09/20/violation-of-802-11-standard-intel-wireless-cards-...
2
votes
1
answer
4k
views
OpenWrt allow IPv6 rule to access a server with global IPv6 on local area
First of all, I have a domain with dns configured to point to my device global address witch is set to static with my ISP gloabl prefix as xxxx:xxxx:xxxx:de01::3/64 in dhcpcd.conf.
I'm using Openwrt ...
3
votes
1
answer
2k
views
Does Dropbear know what a ~/.ssh/config file is?
I want to ssh from one host (OpenWrt running Dropbear) to another host on the same LAN that is running open-ssh server and client.
I converted the private open-ssh key of the other host to dropbear ...
0
votes
1
answer
3k
views
setting up load balancing with mwan3 on openwrt
I want my traffic going through USB-tethering, while destination to 192.168.0.0/24 going to WAN port. I have SSH-ed into the GL-AR750S and opkg-install-ed luci-app-mwan3. Both interfaces are up and ...
0
votes
1
answer
3k
views
How do I block all traffic to all ports except 80/443 in OpenWRT?
I'm trying to do some testing and would like to setup my network to only allow traffic on 80/443, expect for specific IP addresses where I will specify a TCP port and UDP port.
Once completed, I want ...
0
votes
0
answers
3k
views
StrongSwan config issue: no matching peer config found
I am trying to establish a VPN between my router (running OpenWrt) and my smartphone using IPsec.
I followed the guide at https://openwrt.org/docs/guide-user/services/vpn/ipsec/strongswan/roadwarrior
...
0
votes
2
answers
311
views
StrongSwan: manually expire security association
I am working on automating some software tests involving IPSec and StrongSwan. These tests basically apply a swanctl.conf file to two gateway machines, then establish a tunnel between them. It then ...
0
votes
0
answers
2k
views
Use WireGuard for combining bandwidth (multiwan)
Is it possible to combine multiple uplinks for getting faster VPN access to a server with WireGuard?
I already played around with MultiWAN (mwan3, OpenWRT) in the past but for VPN access, its only ...
0
votes
1
answer
2k
views
How can I setup dnsmasq wildcard cnames for domains generated from dhcp leases?
I have an OpenWRT router with automatic dhcp domains enabled. This way, for host example-host, I automatically get an A record for example-host.lan to 192.168.1.2.
I am trying to setup a wildcard ...