On Tue, Jan 25, 2011 at 10:11 PM, Neal Hogan <[email protected]> wrote:
> On Tue, Jan 25, 2011 at 9:51 PM, Ryan Flannery <[email protected]>
wrote:
>> On Tue, Jan 25, 2011 at 9:01 PM, Neal Hogan <[email protected]> wrote:
>>> Hello misc@,
>>>
>>> I'm having an issue with my wifi AP after I reconnect to my ISP. That
>>> is, when my internet connection is broken, for whatever reason, and
>>> then reconnected, my wireless machines see that the AP is available,
>>> but fail to connect to it. My hard connection works just fine.
>>
>> Do you still have a dynamic IP? If so, is it set to something
>> different when you reconnect?
>>
>> If so, the nat in your pf is probably causing the problem.
>>
>
> I was thinking the same and when I finally got the internet connection
> back the IP looked the same.
>>>
>>> I flush all the routes (ie., # route flush) and then sh /etc/netstart,
>>> but that does not work.
>>
>> Have you also tried restarting pf at this point?
>>
>
> I did not not do that this most recent time, but I seem to remember
> doing it last time without it helping. When I get time, I will try to
> recreate the situation by unplugging my modem and restarting pf.
I tried restarting pf (i.e., pfctl -d && pfctl -ef /etc/pf.conf) and
it didn't work. That is, I flushed the routes, 'sh /etc/netstart'd',
and restarted pf and my wifi access point fails to give addresses.
Below are my pf rules and, route table and ifconfig info before and
after I reboot.
>lambdaroot pfctl -s rules
match in all scrub (no-df random-id reassemble tcp)
match out on em1 from ! (em1) to any nat-to (em1) round-robin
pass in on em1 inet proto tcp from <whitelist> to (em1) port = smtp
flags S/SA keep state rdr-to 127.0.0.1 port 25
pass in on em0 inet proto tcp from any to 192.168.2.1 port = smtp
flags S/SA keep state rdr-to 127.0.0.1 port 25
pass in on em1 inet proto tcp from <spamd> to 64.53.218.214 port =
smtp flags S/SA keep state rdr-to 127.0.0.1 port 8025
pass in on em1 inet proto tcp from <spamd-white> to any port = smtp
flags S/SA keep state rdr-to 127.0.0.1 port 25
pass in on em1 inet proto tcp from ! <spamd-white> to any port = smtp
flags S/SA keep state rdr-to 127.0.0.1 port 8025
block drop in all
block drop out all
block drop in log quick on ! lo inet6 from ::1 to any
block drop in log quick on ! lo inet from 127.0.0.0/8 to any
block drop in log quick inet from 127.0.0.1 to any
block drop in log quick on ! em1 inet from 64.53.216.0/21 to any
block drop in log quick inet from 64.53.218.214 to any
block drop in log quick on ! em0 inet from 192.168.2.0/24 to any
block drop in log quick inet from 192.168.2.1 to any
block drop in log quick on ! ral0 inet from 192.168.3.0/24 to any
block drop in log quick inet from 192.168.3.1 to any
block drop in log quick inet6 from ::1 to any
block drop in log quick on lo0 inet6 from fe80::1 to any
block drop in log quick on em1 inet6 from fe80::2e0:81ff:febc:f36a to any
block drop in log quick on em0 inet6 from fe80::2e0:81ff:febc:f36b to any
block drop in log quick on ral0 inet6 from fe80::20e:2eff:fe96:4ee0 to any
block drop in log quick from <bad_ssh> to any
block drop in log quick from <bad_www> to any
block drop in log quick from <bad_wifi> to any
pass out quick on em1 inet proto tcp from any to 24.172.134.210 port =
finger user = 67 flags S/SA modulate state
pass out quick on ral0 inet proto tcp from any to
<__automatic_80b2c777_0> port = finger user = 67 flags S/SA modulate
state
pass out quick on em0 inet proto tcp from any to
<__automatic_80b2c777_2> port = finger user = 67 flags S/SA modulate
state
pass out quick on ral0 inet proto tcp from any to
<__automatic_80b2c777_1> port = ssh user = 67 flags S/SA modulate
state
pass out quick on em0 inet proto tcp from any to
<__automatic_80b2c777_3> port = ssh user = 67 flags S/SA modulate
state
pass in log on em1 inet proto tcp from any to (em1) port = ssh flags
S/SA synproxy state (source-track rule, max-src-conn-rate 10/20,
overload <bad_ssh> flush global, src.track 20)
pass in log on em1 inet proto tcp from any to (em1) port = smtp flags
S/SA synproxy state
pass in log on em1 inet proto tcp from any to (em1) port = www flags
S/SA synproxy state (source-track rule, max-src-conn 100,
max-src-conn-rate 15/5, overload <bad_www> flush global, src.track 5)
pass in log on em1 inet proto tcp from any to (em1) port = https flags
S/SA synproxy state (source-track rule, max-src-conn 100,
max-src-conn-rate 15/5, overload <bad_www> flush global, src.track 5)
pass in log on em1 inet proto icmp from any to (em1) icmp-type echoreq
keep state
pass in log on em1 inet proto icmp from any to (em1) icmp-type unreach
keep state
pass in on em1 inet proto tcp from any to (em1) port = ftp flags S/SA
keep state (source-track rule, max-src-conn 3, max-src-conn-rate 15/5,
src.track 5)
pass in on em1 proto tcp from any to any port > 49151 flags S/SA keep state
pass in on em1 proto tcp from any to any port = rsync flags S/SA keep state
pass in log on em1 inet proto tcp from 24.172.134.210 to 64.53.218.214
port = finger flags S/SA synproxy state
pass out log on em1 all flags S/SA keep state
pass in quick on em0 inet from 192.168.2.0/24 to any flags S/SA keep state
pass in on ral0 inet from 192.168.3.0/24 to any flags S/SA keep state
pass in on ral0 inet proto udp from 192.168.3.0/24 port = bootpc to
any port = bootps keep state
pass out on ral0 all flags S/SA keep state
pass out on em0 all flags S/SA keep state
pass in log on ral0 inet proto icmp from 192.168.3.0/24 to (ral0) keep state
pass in log on ral0 inet proto tcp from 192.168.3.0/24 to (ral0) port
= ssh flags S/SA synproxy state (source-track rule, max-src-conn-rate
3/20, overload <bad_ssh> flush global, src.track 20)
pass in log on ral0 inet proto tcp from 192.168.3.0/24 to (ral0) port
= www flags S/SA synproxy state (source-track rule, max-src-conn 100,
max-src-conn-rate 15/5, overload <bad_www> flush global, src.track 5)
pass in log on ral0 inet proto tcp from 192.168.3.0/24 to (ral0) port
= https flags S/SA synproxy state (source-track rule, max-src-conn
100, max-src-conn-rate 15/5, overload <bad_www> flush global,
src.track 5)
pass in log on ral0 inet from 192.168.3.0/24 to ! (ral0) flags S/SA
modulate state
lambdaroot route show
Routing tables
Internet:
Destination Gateway Flags Refs Use Mtu Prio Iface
default d53-1-216.nap.wide UGS 11 108289 - 8 em1
64.53.216/21 link#2 UC 1 0 - 4 em1
d53-1-216.nap.wide 00:01:5c:32:fa:c1 UHLc 1 0 - 4 em1
d53-214-218.nap.wi www.lambdaserver.c UGHS 0 118 33160 8 lo0
loopback www.lambdaserver.c UGRS 0 0 33160 8 lo0
www.lambdaserver.c www.lambdaserver.c UH 2 0 33160 4 lo0
192.168.2/24 link#1 UC 2 0 - 4 em0
192.168.2.39 00:0d:9d:43:2b:a7 UHLc 0 236 - 4 em0
192.168.2.43 00:1e:37:d9:cc:ed UHLc 8 1062 - 4 em0
192.168.3/24 link#5 UC 0 0 - 4 ral0
BASE-ADDRESS.MCAST www.lambdaserver.c URS 0 0 33160 8 lo0
Internet6:
Destination Gateway Flags Refs Use Mtu Prio Iface
::/104 www.lambdaserver.c UGRS 0 0 - 8 lo0
::/96 www.lambdaserver.c UGRS 0 0 - 8 lo0
www.lambdaserver.c www.lambdaserver.c UH 14 0 33160 4 lo0
::127.0.0.0/104 www.lambdaserver.c UGRS 0 0 - 8 lo0
::224.0.0.0/100 www.lambdaserver.c UGRS 0 0 - 8 lo0
::255.0.0.0/104 www.lambdaserver.c UGRS 0 0 - 8 lo0
::ffff:0.0.0.0/96 www.lambdaserver.c UGRS 0 0 - 8 lo0
2002::/24 www.lambdaserver.c UGRS 0 0 - 8 lo0
2002:7f00::/24 www.lambdaserver.c UGRS 0 0 - 8 lo0
2002:e000::/20 www.lambdaserver.c UGRS 0 0 - 8 lo0
2002:ff00::/24 www.lambdaserver.c UGRS 0 0 - 8 lo0
fe80::/10 www.lambdaserver.c UGRS 0 0 - 8 lo0
fe80::%em0/64 link#1 UC 0 0 - 4 em0
fe80::%em1/64 link#2 UC 0 0 - 4 em1
fe80::%lo0/64 fe80::1%lo0 U 0 0 - 4 lo0
fe80::%ral0/64 link#5 UC 0 0 - 4 ral0
fec0::/10 www.lambdaserver.c UGRS 0 0 - 8 lo0
ff01::/16 www.lambdaserver.c UGRS 0 0 - 8 lo0
ff01::%em0/32 link#1 UC 0 0 - 4 em0
ff01::%em1/32 link#2 UC 0 0 - 4 em1
ff01::%lo0/32 www.lambdaserver.c UC 0 0 - 4 lo0
ff01::%ral0/32 link#5 UC 0 0 - 4 ral0
ff02::/16 www.lambdaserver.c UGRS 0 0 - 8 lo0
ff02::%em0/32 link#1 UC 0 0 - 4 em0
ff02::%em1/32 link#2 UC 0 0 - 4 em1
ff02::%lo0/32 www.lambdaserver.c UC 0 0 - 4 lo0
ff02::%ral0/32 link#5 UC 0 0 - 4 ral0
lambdaroot ifconfig -a
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 33160
priority: 0
groups: lo
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
inet 127.0.0.1 netmask 0xff000000
em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:e0:81:bc:f3:6b
priority: 0
media: Ethernet autoselect (1000baseT full-duplex,rxpause,txpause)
status: active
inet6 fe80::2e0:81ff:febc:f36b%em0 prefixlen 64 scopeid 0x1
inet 192.168.2.1 netmask 0xffffff00 broadcast 192.168.2.255
em1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:e0:81:bc:f3:6a
priority: 0
groups: egress
media: Ethernet autoselect (100baseTX full-duplex,rxpause,txpause)
status: active
inet6 fe80::2e0:81ff:febc:f36a%em1 prefixlen 64 scopeid 0x2
inet 64.53.218.214 netmask 0xfffff800 broadcast 64.53.223.255
enc0: flags=0<>
priority: 0
groups: enc
status: active
ral0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:0e:2e:96:4e:e0
priority: 4
groups: wlan
media: IEEE802.11 autoselect hostap (autoselect mode 11b hostap)
status: active
ieee80211: nwid lambdaserver chan 1 bssid 00:0e:2e:96:4e:e0
nwkey kashossc63250 100dBm
inet6 fe80::20e:2eff:fe96:4ee0%ral0 prefixlen 64 scopeid 0x5
inet 192.168.3.1 netmask 0xffffff00 broadcast 192.168.3.255
pflog0: flags=141<UP,RUNNING,PROMISC> mtu 33160
priority: 0
groups: pflog
AFTER REBOOT
lambdaroot route show
Routing tables
Internet:
Destination Gateway Flags Refs Use Mtu Prio Iface
default d53-1-216.nap.wide UGS 9 179389 - 8 em1
64.53.216/21 link#2 UC 1 0 - 4 em1
d53-1-216.nap.wide 00:01:5c:32:fa:c1 UHLc 1 0 - 4 em1
d53-214-218.nap.wi www.lambdaserver.c UGHS 0 814 33160 8 lo0
loopback www.lambdaserver.c UGRS 0 0 33160 8 lo0
www.lambdaserver.c www.lambdaserver.c UH 2 492 33160 4 lo0
192.168.2/24 link#1 UC 2 0 - 4 em0
192.168.2.39 00:0d:9d:43:2b:a7 UHLc 0 8 - 4 em0
192.168.2.43 00:1e:37:d9:cc:ed UHLc 8 5185 - 4 em0
192.168.3/24 link#5 UC 2 0 - 4 ral0
frege 00:02:6f:98:31:81 UHLc 0 139 - 4 ral0
192.168.3.35 00:02:6f:98:31:81 UHLc 1 1905 - 4 ral0
BASE-ADDRESS.MCAST www.lambdaserver.c URS 0 0 33160 8 lo0
Internet6:
Destination Gateway Flags Refs Use Mtu Prio Iface
::/104 www.lambdaserver.c UGRS 0 0 - 8 lo0
::/96 www.lambdaserver.c UGRS 0 0 - 8 lo0
www.lambdaserver.c www.lambdaserver.c UH 14 0 33160 4 lo0
::127.0.0.0/104 www.lambdaserver.c UGRS 0 0 - 8 lo0
::224.0.0.0/100 www.lambdaserver.c UGRS 0 0 - 8 lo0
::255.0.0.0/104 www.lambdaserver.c UGRS 0 0 - 8 lo0
::ffff:0.0.0.0/96 www.lambdaserver.c UGRS 0 0 - 8 lo0
2002::/24 www.lambdaserver.c UGRS 0 0 - 8 lo0
2002:7f00::/24 www.lambdaserver.c UGRS 0 0 - 8 lo0
2002:e000::/20 www.lambdaserver.c UGRS 0 0 - 8 lo0
2002:ff00::/24 www.lambdaserver.c UGRS 0 0 - 8 lo0
fe80::/10 www.lambdaserver.c UGRS 0 0 - 8 lo0
fe80::%em0/64 link#1 UC 0 0 - 4 em0
fe80::2e0:81ff:feb 00:e0:81:bc:f3:6b HL 0 0 - 4 lo0
fe80::%em1/64 link#2 UC 0 0 - 4 em1
fe80::2e0:81ff:feb 00:e0:81:bc:f3:6a UHL 0 0 - 4 lo0
fe80::%lo0/64 fe80::1%lo0 U 0 0 - 4 lo0
fe80::1%lo0 link#4 UHL 0 0 - 4 lo0
fe80::%ral0/64 link#5 UC 0 0 - 4 ral0
fe80::20e:2eff:fe9 00:0e:2e:96:4e:e0 UHL 0 0 - 4 lo0
fec0::/10 www.lambdaserver.c UGRS 0 0 - 8 lo0
ff01::/16 www.lambdaserver.c UGRS 0 0 - 8 lo0
ff01::%em0/32 link#1 UC 0 0 - 4 em0
ff01::%em1/32 link#2 UC 0 0 - 4 em1
ff01::%lo0/32 www.lambdaserver.c UC 0 0 - 4 lo0
ff01::%ral0/32 link#5 UC 0 0 - 4 ral0
ff02::/16 www.lambdaserver.c UGRS 0 0 - 8 lo0
ff02::%em0/32 link#1 UC 0 0 - 4 em0
ff02::%em1/32 link#2 UC 0 0 - 4 em1
ff02::%lo0/32 www.lambdaserver.c UC 0 0 - 4 lo0
ff02::%ral0/32 link#5 UC 0 0 - 4 ral0
lambdaroot ifconfig -a
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 33160
priority: 0
groups: lo
inet 127.0.0.1 netmask 0xff000000
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:e0:81:bc:f3:6b
priority: 0
media: Ethernet autoselect (1000baseT full-duplex,rxpause,txpause)
status: active
inet 192.168.2.1 netmask 0xffffff00 broadcast 192.168.2.255
inet6 fe80::2e0:81ff:febc:f36b%em0 prefixlen 64 scopeid 0x1
em1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:e0:81:bc:f3:6a
priority: 0
groups: egress
media: Ethernet autoselect (100baseTX full-duplex,rxpause,txpause)
status: active
inet6 fe80::2e0:81ff:febc:f36a%em1 prefixlen 64 scopeid 0x2
inet 64.53.218.214 netmask 0xfffff800 broadcast 64.53.223.255
enc0: flags=0<>
priority: 0
groups: enc
status: active
ral0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:0e:2e:96:4e:e0
priority: 4
groups: wlan
media: IEEE802.11 autoselect hostap
status: active
ieee80211: nwid lambdaserver chan 2 bssid 00:0e:2e:96:4e:e0
nwkey kashossc63250 100dBm
inet 192.168.3.1 netmask 0xffffff00 broadcast 192.168.3.255
inet6 fe80::20e:2eff:fe96:4ee0%ral0 prefixlen 64 scopeid 0x5
pflog0: flags=141<UP,RUNNING,PROMISC> mtu 33160
priority: 0
groups: pflog
>>> At this point, rebooting the AP machine is the
>>> only thing that I've been able to do to rectify the situation. From
>>> the research that I've done, it doesn't look as though I should have
>>> to reboot. Any suggestions?
>>>
>>> Thanks!
>>> -Neal
