From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id A59193CB38 for ; Sun, 10 Feb 2019 17:34:50 -0500 (EST) Received: from sandelman.ca (unknown [IPv6:2607:f0b0:f:2:56b2:3ff:fe0b:d84]) by tuna.sandelman.ca (Postfix) with ESMTP id A559438264; Sun, 10 Feb 2019 17:31:45 -0500 (EST) Received: by sandelman.ca (Postfix, from userid 179) id CDC741294; Sun, 10 Feb 2019 17:34:49 -0500 (EST) Received: from sandelman.ca (localhost [127.0.0.1]) by sandelman.ca (Postfix) with ESMTP id CC619E78; Sun, 10 Feb 2019 17:34:49 -0500 (EST) From: Michael Richardson To: Dave Taht cc: cerowrt-devel In-Reply-To: <87mun4yilz.fsf@taht.net> References: <7437.1549566518@dooku.sandelman.ca> <87mun4yilz.fsf@taht.net> X-Mailer: MH-E 8.6; nmh 1.7+dev; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Subject: Re: [Cerowrt-devel] upgrading from CeroWRT --- seeking advice on rule testing X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 10 Feb 2019 22:34:50 -0000 --=-=-= Content-Type: text/plain Dave Taht wrote: >> systems having DualStack with NAT44. > I'm under the impression various ipv6 -> ipv4 nat tools are working much > better now. I can't bring myself to care much about ipv6 until I too can > get a static IPv6 allocation. I'm so fed up with the deployment that > I've been working on adding ips to ipv4.... Well, you can get a static IPv6 allocation for a fee, you just need an ISP that you can speak BGP to. That's really what your issue is more than the allocation. >> The naming "se00" vs "ethXX" gets in the way. I have weird problems >> where >> machines behind the gateway can ping 8.8.8.8, but I can't ping it from >> the >> gateway. The details don't matter. I'm mostly writing this for future >> people >> googling. I spent another two hours today trying to debug (the first >> time, I >> had no working uplink, and I was missing tcpdump on the new unit. I >> was >> convinced my ISP had dropped my static routes)... >> >> So I will be starting again from scratch (total factory reset), get it >> going, and then add my custom configuration. > I generally prototype by having a second router entirely take over the > functions of the network. Much like you added a pure wifi router, in > your case I'd have got another router entirely, flashed openwrt, and > tried to get each feature you needed working that way. The problem with trying to make it all work in a test bench is that it has to work with the v6 prefixes that matter, and those are in use. So I guess I could put two routes in series and move things over VLAN by VLAN. I have the untagged traffic out of the router go into VLAN3800 on the switch, which I can see from my desktop. At least the replacement router has a serial console, which I never added to the original. > I do wish cerowrt's stateless firewall idea had been adopted by openwrt, > it leads to much less complicated rules to just pattern match for s+, > g+, etc. Hmm. I am not sure I understand your point. It all looks the same to me, but perhaps I'm running into this differences under the hood which is screwing me up. -- ] Never tell me the odds! | ipv6 mesh networks [ ] Michael Richardson, Sandelman Software Works | IoT architect [ ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails [ --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAlxgpwkACgkQgItw+93Q 3WWh1gf/bTyYuwdSKfpDKXZtkub7itmX5PITqVdcfTxvp8vsXjr0+mI8YsaINANO eekWclttKdzNTzxzngIvU0e3PCi8oTcN92N8jXfnIRYBe/9RJKehpRm3Wclal3Y6 cKv9qRHNWN1xukstzsw7vHEMF4HFoPOHd4M0gbhyrS4XiG7rWfE2lo4qLFbnE4Ut lZhADU8b/UlnpnL58Wx2wOz3Lk2ThiD0/nscCL44Gp2iYQU9fFakncmWtNmMQC3G wv9lDSYM39YEmwwtUt2vnRrIMRKqV2N7WBCgkUkLHENjysf7K3fSHLAUbFI/pTQY o0pEvMMz7n3i7Id6y6OmOCAqp2DJZg== =rZKv -----END PGP SIGNATURE----- --=-=-=--