Konstantin Babarykin писал(а):
MaDD писал(а):
Это лог с отключенным фаерволом и QOS Engine. Перезагрузка роутера происходит в момент подключения телефона по Wi-Fi. На DIR-300 такой проблемы нет. Создал сеть дома, DIR-300 раздает интернет по Lan и Wi-Fi , к нему подключены различные потребители ,в том числе и DIR-628 по Lan. При подключении телефона по такой схеме к DIR-628 по Wi-Fi проблем нет. Все работает стабильно. Где копать?
В случае подключения LAN to LAN и отключенном DHCP на 628 - он работает в режиме точки доступа и за маршрутизацию отвечает корневой DIR-300. Если ситуация позволяет, то оставить такую схему подключения, если нет, то тут по-хорошему нужны снифы с WAN'а DIR-628 и снифы WiFiные между 628 и телефоном, и надо разбираться, что за сервис "стучится" и спамит
Как работа с правилом проброса всех портов на телефон?
При подключении LAN to LAN DHCP на 628 был включен и роутер исправно работал раздавая IP адреса устройствам. Но такая схема меня не устраивает. Скорость с 300 ниже чем с 628. Весь вечер пытался поймать логи при перезагрузке роутера. После отключения лог пишется заново. Порты проброшены с 0 до 65000 на IP 192.168.0.180 ( IP телефона) .Вот что удалось получить
[INFO] Thu Jun 23 22:40:51 2016 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.0.180 to 213.87.152.61
[INFO] Thu Jun 23 22:40:51 2016 Blocked incoming TCP packet from 213.180.193.82:443 to 10.173.155.188:53495 as FIN:PSH:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:49 2016 Above message repeated 2 times
[INFO] Thu Jun 23 22:40:49 2016 Blocked incoming TCP packet from 213.180.193.82:443 to 10.173.155.188:53495 as FIN:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:49 2016 Above message repeated 1 times
[INFO] Thu Jun 23 22:40:49 2016 Blocked incoming TCP packet from 213.180.193.82:443 to 10.173.155.188:53495 as PSH:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:49 2016 Blocked incoming TCP packet from 217.69.139.90:993 to 10.173.155.188:42961 as PSH:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:49 2016 Log viewed by IP address 192.168.0.150
[INFO] Thu Jun 23 22:40:48 2016 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.0.180 to 213.87.158.20
[INFO] Thu Jun 23 22:40:48 2016 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.0.180 to 212.35.164.5
[INFO] Thu Jun 23 22:40:48 2016 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.0.180 to 213.87.152.61
[INFO] Thu Jun 23 22:40:48 2016 Blocked incoming TCP packet from 52.31.56.131:5223 to 10.173.155.188:55539 as PSH:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:46 2016 Blocked incoming TCP packet from 66.220.156.66:443 to 10.173.155.188:55143 as FIN:PSH:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:46 2016 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.0.180 to 31.44.0.104
[INFO] Thu Jun 23 22:40:45 2016 Blocked incoming TCP packet from 217.69.139.90:993 to 10.173.155.188:42961 as PSH:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:45 2016 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.0.180 to 95.58.246.4
[INFO] Thu Jun 23 22:40:44 2016 Blocked incoming TCP packet from 217.69.139.90:993 to 10.173.155.188:42961 as PSH:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:44 2016 Blocked incoming TCP packet from 149.154.65.51:80 to 10.173.155.188:53493 as FIN:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:43 2016 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.0.180 to 91.246.112.172
[INFO] Thu Jun 23 22:40:43 2016 Blocked incoming TCP packet from 217.69.139.90:993 to 10.173.155.188:42961 as PSH:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:42 2016 Above message repeated 1 times
[INFO] Thu Jun 23 22:40:42 2016 Blocked incoming TCP packet from 217.69.139.90:993 to 10.173.155.188:42961 as FIN:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:42 2016 Blocked incoming TCP packet from 217.69.139.90:993 to 10.173.155.188:42961 as PSH:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:41 2016 Blocked incoming TCP packet from 66.220.146.5:443 to 10.173.155.188:41499 as FIN:PSH:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:39 2016 Blocked incoming TCP packet from 66.220.146.5:443 to 10.173.155.188:41500 as FIN:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:39 2016 Log viewed by IP address 192.168.0.150
[INFO] Thu Jun 23 22:40:38 2016 Blocked incoming TCP packet from 94.100.180.90:993 to 10.173.155.188:46090 as ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:38 2016 Blocked incoming TCP packet from 95.213.4.195:443 to 10.173.155.188:53492 as PSH:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:36 2016 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.0.180 to 195.184.199.171
[INFO] Thu Jun 23 22:40:36 2016 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.0.180 to 5.141.193.237
[INFO] Thu Jun 23 22:40:35 2016 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.0.180 to 185.77.101.239
[INFO] Thu Jun 23 22:40:34 2016 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.0.180 to 188.234.98.17
[INFO] Thu Jun 23 22:40:33 2016 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.0.180 to 91.229.217.143
[INFO] Thu Jun 23 22:40:33 2016 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.0.180 to 91.241.240.138
[INFO] Thu Jun 23 22:40:33 2016 Blocked incoming TCP packet from 66.220.146.5:443 to 10.173.155.188:41499 as FIN:PSH:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:30 2016 Blocked incoming TCP packet from 149.154.65.51:80 to 10.173.155.188:53493 as FIN:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:29 2016 Log viewed by IP address 192.168.0.150
[INFO] Thu Jun 23 22:40:29 2016 Blocked incoming TCP packet from 66.220.146.5:443 to 10.173.155.188:41500 as FIN:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:29 2016 Blocked incoming TCP packet from 87.250.250.82:443 to 10.173.155.188:53464 as FIN:PSH:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:28 2016 Blocked incoming TCP packet from 66.220.146.5:443 to 10.173.155.188:41499 as FIN:PSH:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:28 2016 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.0.180 to 91.246.112.172
[INFO] Thu Jun 23 22:40:26 2016 Blocked incoming TCP packet from 66.220.146.5:443 to 10.173.155.188:41499 as FIN:PSH:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:25 2016 Above message repeated 1 times
[INFO] Thu Jun 23 22:40:25 2016 Blocked incoming TCP packet from 87.250.250.53:443 to 10.173.155.188:40586 as FIN:PSH:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:25 2016 Blocked incoming TCP packet from 66.220.146.5:443 to 10.173.155.188:41499 as FIN:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:25 2016 Blocked incoming TCP packet from 52.31.56.131:5223 to 10.173.155.188:55539 as PSH:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:24 2016 Blocked incoming TCP packet from 66.220.146.5:443 to 10.173.155.188:41499 as FIN:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:24 2016 Blocked incoming TCP packet from 66.220.146.5:443 to 10.173.155.188:41499 as PSH:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:24 2016 Above message repeated 1 times
[INFO] Thu Jun 23 22:40:24 2016 Blocked incoming TCP packet from 66.220.146.5:443 to 10.173.155.188:41500 as FIN:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:23 2016 Blocked incoming TCP packet from 149.154.65.51:80 to 10.173.155.188:53493 as FIN:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:22 2016 Blocked incoming TCP packet from 66.220.146.5:443 to 10.173.155.188:41500 as FIN:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:21 2016 Blocked incoming TCP packet from 66.220.156.66:443 to 10.173.155.188:55143 as FIN:PSH:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:20 2016 Blocked incoming TCP packet from 66.220.146.5:443 to 10.173.155.188:41500 as FIN:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:20 2016 Blocked outgoing ICMP packet (ICMP type 3) from 192.168.0.180 to 83.242.109.66
[INFO] Thu Jun 23 22:40:20 2016 Blocked incoming TCP packet from 66.220.146.5:443 to 10.173.155.188:41500 as FIN:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:19 2016 Blocked incoming TCP packet from 149.154.65.51:80 to 10.173.155.188:53493 as FIN:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:19 2016 Blocked incoming TCP packet from 77.88.21.124:993 to 10.173.155.188:41880 as ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:19 2016 Blocked incoming TCP packet from 66.220.146.5:443 to 10.173.155.188:41500 as FIN:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:19 2016 Log viewed by IP address 192.168.0.150
[INFO] Thu Jun 23 22:40:18 2016 Blocked incoming TCP packet from 149.154.65.51:80 to 10.173.155.188:53493 as FIN:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:16 2016 Above message repeated 3 times
[INFO] Thu Jun 23 22:40:16 2016 Log viewed by IP address 192.168.0.150
[INFO] Thu Jun 23 22:40:15 2016 dlink-1: Wireless system with MAC address EC1F72605CFB secured and linked
[INFO] Thu Jun 23 22:40:15 2016 dlink-1: Wireless system with MAC address EC1F72605CFB associated
[INFO] Thu Jun 23 22:40:15 2016 Above message repeated 1 times
[INFO] Thu Jun 23 22:40:13 2016 Blocked incoming TCP packet from 52.31.56.131:5223 to 10.173.155.188:55539 as PSH:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:11 2016 Blocked incoming TCP packet from 87.250.250.53:443 to 10.173.155.188:40586 as FIN:PSH:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:10 2016 Log viewed by IP address 192.168.0.150
[INFO] Thu Jun 23 22:40:10 2016 Blocked incoming TCP packet from 94.100.180.90:993 to 10.173.155.188:46090 as PSH:ACK received but there is no active connection
[INFO] Thu Jun 23 22:40:09 2016 Log cleared by IP address 192.168.0.150
Телефон подключился,получил IP адрес 192.168.0.180, что то попытался передать, после чего роутер перезагрузился.
С телефона уходит это
IP Tools(www.iptools.su)
Сетевые соединения
Local Address: 192.168.0.180:49323
Foreign Address: 192.168.0.1
State: ESTABLISHED
Local Address: 192.168.0.180:34179
Foreign Address: 192.168.0.1
Local Address: 192.168.0.180:48680
Foreign Address: 192.168.0.1
Local Address: 192.168.0.180:57096
Foreign Address: 63.128.176.5:7275
State: TIME_WAIT
Local Address: 192.168.0.180:38731
Foreign Address: 62.128.100.57
State: ESTABLISHED
Local Address: 192.168.0.180:50843
Foreign Address: 140.205.195.49
State: ESTABLISHED
Local Address: 192.168.0.180:33741
Foreign Address: 47.88.68.98
State: ESTABLISHED
Local Address: 192.168.0.180:38727
Foreign Address: 62.128.100.57
State: TIME_WAIT
как получить сниф с wan роутера я не знаю.