If you leave it checked, will it still "filter" multicast traffic? So the only workaround is to leave it checked? I am pretty sure it was reported.I may do some searching for it in TRAC. This is the main reason the wiki was changed for Repeater and Repeater Bridge modes.to leave this one checked before turning off the SPI. If I remember correctly the igmprt process would run away causing the CPU usage to peg at 100% and the load average was in the 4.0 range when filter Multicast was unchecked. I saw other issues due to Multicast being turned off. Location: Wherever the wind blows- North America I isolated the Filter Multicast a long time ago but I thought it was just me. I have exactly the same problem with my WRT300N v1. Wow, I thought I was the ONLY one experiencing this. Thanks OP for debugging the issue so thoroughly! The solution, for me at least, is to leave multicast filtering on, otherwise I get no WAN packets. I tried all sorts of NEWD builds, the exact problem above happens. I'd like to confirm the previous post on the WNDR3300. If the checkbox is dimmed and can't be changed, shouldn't it default to off? Which other settings that seem to be SPI Firewall options are also running despite the firewall setting? The Filter Multicast checkbox still has an effect after the SPI Firewall setting had dimmed it. But there is still the interface inconsistency that initially threw me off. That makes sense, since multicast packets will not automatically propagate from the WAN to LAN through a NAT device. I recommend filing a bug, and/or voting for #406 ( ). igmprt has been broken for quite some time (at least a year, according to the tickets on the bugtracker). The igmprt process listens for multicast packets on the WAN port and rebroadcasts them to each LAN client. Re-enabling multicast filtering restores connectivity.Ĭonfusingly, the igmprt process only appears to be running when that checkbox is not checked. Yes, if I disable the Filter Multicast checkbox on either of my BCM4704 r9 CPU-based routers it breaks WAN connectivity. So you're saying if multicast filter is left on by default there's no problem? Toggling the Filter Multicast checkbox also restores connectivity after a few seconds, regardless of the SPI Firewall setting. If I telnet in and kill igmprt, WAN connectivity is immediately restored. This seems to be related to an older problem from this thread: igmprt kills my WAN Unchecking Filter Multicast will break WAN whether SPI is enabled or not. All the other default enabled options on the page, as well as the SPI firewall itself can be disabled without breaking WAN connectivity. Turns out it wasn't the firewall exactly.Īfter more fiddling, I've nailed this down to the Filter Multicast checkbox. Posted: Sun 5:27 Post subject: more specifically, igmprt kills my WAN Both of these routers report using a 264 MHz Broadcom BCM4704 r9 CPU. GUI reset to factory defaults restores outside connections. Re-enabling the firewall did not bring back WAN connectivity. DD-WRT's web GUI worked initially, then after a few minutes it started experiencing long but intermittent page-loading delays or failure. Netgear WNDR3300 - Total failure to reach any outside pages after 10-20 seconds. Linksys WRT54GS v1.1 - no problems (used VINT instead of NEWD) Attempt to load web GUI pages over next 2-5 minutes Uncheck all and disable SPI Firewall on routerĨ. Load NEWD build r10923 mini (reset to defaults)Ħ. Power was toggled on the cable modem when switching routers.Ģ. A cable modem was wired to the router's WAN port. I had the same problem with earlier builds, but this is the first chance I've had to really isolate the problem.Īll tests were done with each router individually wired to a MacBook Pro. This problem is 100% reproducible on both my Netgear WNRD3300 and Linksys WRT150n. The same setting works normally on my G-routers. Posted: Sat 4:39 Post subject: Disabling SPI Firewall breaks WAN connectivity on N routersĭisabling the SPI Firewall causes all outside connections to fail on my two N-routers.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |