Asus RT-AC86U - Running Diversion + Skynet + Stubby - connection problems

Blackbox · Feb 11, 2019

Hey guys,

I am having some connection problems with my setup and hope someone can help me here.

I am using a RT-AC86U with the latest Merlin Firmware (384.9) and I also use the latest Diversion, Skynet and Stubby. After setting up the system with all the above it works flawless for a few days.

However after 3 or 4 days I start to have serious connection problems, while not making any changes to the initial setup which worked.

What happens after a few days is that the connection drops and I cannot reconnect and in the Merlin router menu the internet status is shown as "Disconnected".

I double checked all the entries and everything is exactly the same as it was in the initial setup (DNS server, entries in Diversion, Skynet etc). Also the VPN Client says it is connected, while the internet status shows the whole system is disconnected.

So it must be something that occurs over time, in my case a few days.

I already tried to restart the router, but the problem stays. Sometimes I am able to connect and then a few minutes later all of a sudden the connection gets slower and becomes buggy until it completely drops and I cannot connect anymore.

Did anyone experience the same behaviour with the same setup?

Blackbox · Feb 12, 2019

UPDATE: Went back to Firmware 384.8_2 as 384.9 clearly has bugs!

martinr · Feb 12, 2019

Any clues in stslog?

PeterV · Feb 12, 2019

Blackbox said:
Hey guys,

I am having some connection problems with my setup and hope someone can help me here.

I am using a RT-AC86U with the latest Merlin Firmware (384.9) and I also use the latest Diversion, Skynet and Stubby. After setting up the system with all the above it works flawless for a few days.

However after 3 or 4 days I start to have serious connection problems, while not making any changes to the initial setup which worked.

What happens after a few days is that the connection drops and I cannot reconnect and in the Merlin router menu the internet status is shown as "Disconnected".

?

I have a similar setup.
Please check two things:
1. Does dns service is working? Simple do a command "nslookup www.google.com", for example.
2. Check with top, what process use most CPU resources. In my case it was usb_something(I'm not in home, and can't check now).

In the same time I expirienced the dhcp functionality issues (my TV panel received answer from dnsmasq with to big delay, and in fact said - no dhcp in the network).
After entering the static IP in thoe TV settings it works without any problems ...

Disabling Diversion solved this problem temporary (Diversion significantly increasy read from the USB due to blacklists).
Reboot is solved this issue fully, and Diversion was swithced on again.

Now I established some monitoring for this usb service, to see, what will happen later.

consorts · Feb 12, 2019

Blackbox said:
after 3 or 4 days I start to have serious connection problems

it would help if you could clarified if your problems are wired or wireless or both.

i had the same symptoms a few months ago, but it was only over the wireless radios.
this was due to incorrect "professional" page wireless settings.

when it happens to everything and your cpu% gets high,
it was due to skynet and diversion not syncing their lists properly.

bbunge · Feb 12, 2019

Blackbox said:
Hey guys,

I am having some connection problems with my setup and hope someone can help me here.

I am using a RT-AC86U with the latest Merlin Firmware (384.9) and I also use the latest Diversion, Skynet and Stubby. After setting up the system with all the above it works flawless for a few days.

However after 3 or 4 days I start to have serious connection problems, while not making any changes to the initial setup which worked.

What happens after a few days is that the connection drops and I cannot reconnect and in the Merlin router menu the internet status is shown as "Disconnected".

I double checked all the entries and everything is exactly the same as it was in the initial setup (DNS server, entries in Diversion, Skynet etc). Also the VPN Client says it is connected, while the internet status shows the whole system is disconnected.

So it must be something that occurs over time, in my case a few days.

I already tried to restart the router, but the problem stays. Sometimes I am able to connect and then a few minutes later all of a sudden the connection gets slower and becomes buggy until it completely drops and I cannot connect anymore.

Did anyone experience the same behaviour with the same setup?

Disable network monitoring. Located in Administration System in 384.9. Sounds counter intuitive but works for me!

Sent from my SM-T380 using Tapatalk

Blackbox · Feb 13, 2019

Thanks for the responses!

@bbunge since I rolled back to Firmware 384.8_2 I cannot disable network monitoring.

Even with version 384.8_2 I still have exactly the same symptoms!

After one day web access becomes incredibly buggy, sometimes it finds webpages, sometimes it does not connect to certain websites, but only to a few.

Really not sure what causes this.

Does it help if I post parts of the system log, if so what part?

@consorts I am mainly on Wifi but will explore cable connection too!

bbunge · Feb 13, 2019

Blackbox said:
Thanks for the responses!

@bbunge since I rolled back to Firmware 384.8_2 I cannot disable network monitoring.

Even with version 384.8_2 I still have exactly the same symptoms!

After one day web access becomes incredibly buggy, sometimes it finds webpages, sometimes it does not connect to certain websites.

Does it help if I post parts of the system log, if so what part?

@consorts I am mainly on Wifi but will explore cable connection too!

Yes you can disable Network Monitoring in 384.8. Look in Tools - Other Settings (if I remember correctly) near the bottom.

Blackbox · Feb 13, 2019

bbunge said:
Yes you can disable Network Monitoring in 384.8. Look in Tools - Other Settings (if I remember correctly) near the bottom.

Under Tools/Other Settings I only find these:

Do I disable it by disabling "WAN: Use DNS probes to determine if WAN is up"?

bbunge · Feb 13, 2019

Blackbox said:
Under Tools/Other Settings I only find these:

I remember the setting was there on my RT-AC66U_B1. The AC86U may not have had that setting or it is in another place. Easy enough to go back to 384.9 as Network Monitoring is in Administration - System...

Blackbox · Feb 14, 2019

consorts said:
it would help if you could clarified if your problems are wired or wireless or both.

i had the same symptoms a few months ago, but it was only over the wireless radios.
this was due to incorrect "professional" page wireless settings.

when it happens to everything and your cpu% gets high,
it was due to skynet and diversion not syncing their lists properly.

Thanks @consorts, so far I am using a wired connection and it seems to have no issues (will see how it goes for a few days).

However, could you let me know how you solved your issue with Wifi in detail please?

Blackbox · Feb 14, 2019

martinr said:
Any clues in stslog?

Thanks @martinr but where do I find sts logs?

Blackbox · Feb 14, 2019

PeterV said:
I have a similar setup.
Please check two things:
1. Does dns service is working? Simple do a command "nslookup www.google.com", for example.
2. Check with top, what process use most CPU resources. In my case it was usb_something(I'm not in home, and can't check now).

In the same time I expirienced the dhcp functionality issues (my TV panel received answer from dnsmasq with to big delay, and in fact said - no dhcp in the network).
After entering the static IP in thoe TV settings it works without any problems ...

Disabling Diversion solved this problem temporary (Diversion significantly increasy read from the USB due to blacklists).
Reboot is solved this issue fully, and Diversion was swithced on again.

Now I established some monitoring for this usb service, to see, what will happen later.

Thanks @PeterV DNS service is working, where do I find which process uses how much CPU in the router?

Blackbox · Feb 14, 2019

Here is the syslog, just before the connection dropped again...

Code:

Feb 13 22:08:28 ovpn-client1[1680]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Feb 13 23:08:28 ovpn-client1[1680]: TLS: soft reset sec=0 bytes=55710257/-1 pkts=123369/0
Feb 13 23:08:28 ovpn-client1[1680]: VERIFY OK: depth=1, C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=ExpressVPN CA, emailAddress=support@expressvpn.com
Feb 13 23:08:28 ovpn-client1[1680]: VERIFY OK: nsCertType=SERVER
Feb 13 23:08:28 ovpn-client1[1680]: VERIFY X509NAME OK: C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=Server-3826-0a, emailAddress=support@expressvpn.com
Feb 13 23:08:28 ovpn-client1[1680]: VERIFY OK: depth=0, C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=Server-3826-0a, emailAddress=support@expressvpn.com
Feb 13 23:08:28 ovpn-client1[1680]: Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Feb 13 23:08:28 ovpn-client1[1680]: Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Feb 13 23:08:28 ovpn-client1[1680]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Feb 14 00:08:28 ovpn-client1[1680]: VERIFY OK: depth=1, C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=ExpressVPN CA, emailAddress=support@expressvpn.com
Feb 14 00:08:28 ovpn-client1[1680]: VERIFY OK: nsCertType=SERVER
Feb 14 00:08:28 ovpn-client1[1680]: VERIFY X509NAME OK: C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=Server-3826-0a, emailAddress=support@expressvpn.com
Feb 14 00:08:28 ovpn-client1[1680]: VERIFY OK: depth=0, C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=Server-3826-0a, emailAddress=support@expressvpn.com
Feb 14 00:08:28 ovpn-client1[1680]: Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Feb 14 00:08:28 ovpn-client1[1680]: Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Feb 14 00:08:28 ovpn-client1[1680]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Feb 14 00:19:42 kernel: ^[[0;33;45mBroadcom Packet Flow Cache HW acceleration disabled.^[[0m
Feb 14 00:19:42 kernel: Disabled Runner binding to Flow Cache
Feb 14 00:19:42 kernel: Init chrdev /dev/detector with major 190
Feb 14 00:19:42 kernel: tdts: tcp_conn_max = 8000
Feb 14 00:19:42 kernel: tdts: tcp_conn_timeout = 300 sec
Feb 14 00:19:44 kernel: SHN Release Version: 2.0.1 3529123_patch
Feb 14 00:19:44 kernel: UDB Core Version: 0.2.14 r3529123
Feb 14 00:19:44 kernel: Init chrdev /dev/idpfw with major 191
Feb 14 00:19:44 kernel: IDPfw: flush fc
Feb 14 00:19:44 kernel: IDPfw: IDPfw is ready
Feb 14 00:19:44 kernel: sizeof forward pkt param = 280
Feb 14 00:19:44 BWDPI: fun bitmap = 3
Feb 14 00:19:55 kernel: IDPfw: Exit IDPfw
Feb 14 00:19:55 kernel: mod epilog takes 0 jiffies
Feb 14 00:19:55 kernel: IDPfw: Exit IDPfw
Feb 14 00:19:56 kernel: Exit chrdev /dev/idpfw with major 191
Feb 14 00:19:56 kernel: Exit chrdev /dev/detector with major 190
Feb 14 00:19:56 rc_service: bwdpi_check 855:notify_rc start_firewall
Feb 14 00:19:56 nat: apply nat rules (/tmp/nat_rules_eth0_eth0)
Feb 14 00:19:56 custom_script: Running /jffs/scripts/nat-start
Feb 14 00:19:56 (install_stubby.sh): 12300 Starting Script Execution (iptables)
Feb 14 00:19:56 custom_script: Running /jffs/scripts/firewall-start (args: eth0)
Feb 14 00:19:56 Skynet: [%] Startup Initiated... ( skynetloc=/tmp/mnt/USB-Drive/skynet )
Feb 14 00:52:02 rc_service: httpd 767:notify_rc restart_firewall
Feb 14 00:52:02 nat: apply nat rules (/tmp/nat_rules_eth0_eth0)
Feb 14 00:52:02 custom_script: Running /jffs/scripts/nat-start
Feb 14 00:52:02 (install_stubby.sh): 24878 Starting Script Execution (iptables)
Feb 14 00:52:02 custom_script: Running /jffs/scripts/firewall-start (args: eth0)
Feb 14 00:52:02 Skynet: [%] Startup Initiated... ( skynetloc=/tmp/mnt/USB-Drive/skynet )
Feb 14 00:52:32 rc_service: httpd 767:notify_rc restart_firewall
Feb 14 00:52:32 nat: apply nat rules (/tmp/nat_rules_eth0_eth0)
Feb 14 00:52:32 custom_script: Running /jffs/scripts/nat-start
Feb 14 00:52:32 (install_stubby.sh): 26073 Starting Script Execution (iptables)
Feb 14 00:52:32 custom_script: Running /jffs/scripts/firewall-start (args: eth0)
Feb 14 00:52:32 Skynet: [%] Startup Initiated... ( skynetloc=/tmp/mnt/USB-Drive/skynet )
Feb 14 00:52:49 rc_service: httpd 767:notify_rc restart_firewall
Feb 14 00:52:49 nat: apply nat rules (/tmp/nat_rules_eth0_eth0)
Feb 14 00:52:49 custom_script: Running /jffs/scripts/nat-start
Feb 14 00:52:49 (install_stubby.sh): 27093 Starting Script Execution (iptables)
Feb 14 00:52:49 custom_script: Running /jffs/scripts/firewall-start (args: eth0)
Feb 14 00:53:29 rc_service: httpd 767:notify_rc restart_firewall
Feb 14 00:53:29 nat: apply nat rules (/tmp/nat_rules_eth0_eth0)
Feb 14 00:53:29 custom_script: Running /jffs/scripts/nat-start
Feb 14 00:53:29 (install_stubby.sh): 27427 Starting Script Execution (iptables)
Feb 14 00:53:29 custom_script: Running /jffs/scripts/firewall-start (args: eth0)
Feb 14 00:53:29 Skynet: [%] Startup Initiated... ( skynetloc=/tmp/mnt/USB-Drive/skynet )
Feb 14 00:53:49 rc_service: httpd 767:notify_rc restart_firewall
Feb 14 00:53:49 nat: apply nat rules (/tmp/nat_rules_eth0_eth0)
Feb 14 00:53:49 custom_script: Running /jffs/scripts/nat-start
Feb 14 00:53:49 (install_stubby.sh): 28460 Starting Script Execution (iptables)
Feb 14 00:53:49 custom_script: Running /jffs/scripts/firewall-start (args: eth0)
Feb 14 00:54:23 rc_service: httpd 767:notify_rc restart_firewall
Feb 14 00:54:23 nat: apply nat rules (/tmp/nat_rules_eth0_eth0)
Feb 14 00:54:23 custom_script: Running /jffs/scripts/nat-start
Feb 14 00:54:23 (install_stubby.sh): 28751 Starting Script Execution (iptables)
Feb 14 00:54:23 custom_script: Running /jffs/scripts/firewall-start (args: eth0)
Feb 14 00:54:23 Skynet: [%] Startup Initiated... ( skynetloc=/tmp/mnt/USB-Drive/skynet )
Feb 14 00:54:36 kernel: [BLOCKED - INBOUND] IN=eth0 OUT= MAC=04:92:26:80:a1:00:00:17:10:87:12:99:08:00 SRC=221.181.156.59 DST=72.229.237.96 LEN=48 TOS=0x04 PREC=0x00 TTL=110 ID=38817 PROTO=TCP SPT=29964 DPT=22 SEQ=3168846 ACK=1112464615 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B401010402) MARK=0x8000000
Feb 14 00:54:42 nat: apply redirect rules
Feb 14 00:54:42 WAN_Connection: ISP's DHCP did not function properly.
Feb 14 00:54:42 DualWAN: skip single wan wan_led_control - WANRED off
Feb 14 00:54:59 Skynet: [#] 144341 IPs (+0) -- 1654 Ranges Banned (+0) || 0 Inbound -- 0 Outbound Connections Blocked! [start] [36s]
Feb 14 00:55:41 kernel: [BLOCKED - INBOUND] IN=eth0 OUT= MAC=04:92:26:80:a1:00:00:17:10:87:12:99:08:00 SRC=216.218.206.91 DST=72.229.237.96 LEN=68 TOS=0x00 PREC=0x00 TTL=53 ID=3349 DF PROTO=UDP SPT=60161 DPT=111 LEN=48 MARK=0x8000000
Feb 14 00:57:13 kernel: [BLOCKED - INBOUND] IN=eth0 OUT= MAC=04:92:26:80:a1:00:00:17:10:87:12:99:08:00 SRC=185.176.26.45 DST=72.229.237.96 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=58023 PROTO=TCP SPT=40514 DPT=6345 SEQ=862918414 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000

martinr · Feb 14, 2019

Blackbox said:

Here is the syslog, just before the connection dropped again...

Code:

Feb 13 22:08:28 ovpn-client1[1680]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Feb 13 23:08:28 ovpn-client1[1680]: TLS: soft reset sec=0 bytes=55710257/-1 pkts=123369/0
Feb 13 23:08:28 ovpn-client1[1680]: VERIFY OK: depth=1, C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=ExpressVPN CA, emailAddress=support@expressvpn.com
Feb 13 23:08:28 ovpn-client1[1680]: VERIFY OK: nsCertType=SERVER
Feb 13 23:08:28 ovpn-client1[1680]: VERIFY X509NAME OK: C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=Server-3826-0a, emailAddress=support@expressvpn.com
Feb 13 23:08:28 ovpn-client1[1680]: VERIFY OK: depth=0, C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=Server-3826-0a, emailAddress=support@expressvpn.com
Feb 13 23:08:28 ovpn-client1[1680]: Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Feb 13 23:08:28 ovpn-client1[1680]: Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Feb 13 23:08:28 ovpn-client1[1680]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Feb 14 00:08:28 ovpn-client1[1680]: VERIFY OK: depth=1, C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=ExpressVPN CA, emailAddress=support@expressvpn.com
Feb 14 00:08:28 ovpn-client1[1680]: VERIFY OK: nsCertType=SERVER
Feb 14 00:08:28 ovpn-client1[1680]: VERIFY X509NAME OK: C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=Server-3826-0a, emailAddress=support@expressvpn.com
Feb 14 00:08:28 ovpn-client1[1680]: VERIFY OK: depth=0, C=VG, ST=BVI, O=ExpressVPN, OU=ExpressVPN, CN=Server-3826-0a, emailAddress=support@expressvpn.com
Feb 14 00:08:28 ovpn-client1[1680]: Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Feb 14 00:08:28 ovpn-client1[1680]: Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Feb 14 00:08:28 ovpn-client1[1680]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Feb 14 00:19:42 kernel: ^[[0;33;45mBroadcom Packet Flow Cache HW acceleration disabled.^[[0m
Feb 14 00:19:42 kernel: Disabled Runner binding to Flow Cache
Feb 14 00:19:42 kernel: Init chrdev /dev/detector with major 190
Feb 14 00:19:42 kernel: tdts: tcp_conn_max = 8000
Feb 14 00:19:42 kernel: tdts: tcp_conn_timeout = 300 sec
Feb 14 00:19:44 kernel: SHN Release Version: 2.0.1 3529123_patch
Feb 14 00:19:44 kernel: UDB Core Version: 0.2.14 r3529123
Feb 14 00:19:44 kernel: Init chrdev /dev/idpfw with major 191
Feb 14 00:19:44 kernel: IDPfw: flush fc
Feb 14 00:19:44 kernel: IDPfw: IDPfw is ready
Feb 14 00:19:44 kernel: sizeof forward pkt param = 280
Feb 14 00:19:44 BWDPI: fun bitmap = 3
Feb 14 00:19:55 kernel: IDPfw: Exit IDPfw
Feb 14 00:19:55 kernel: mod epilog takes 0 jiffies
Feb 14 00:19:55 kernel: IDPfw: Exit IDPfw
Feb 14 00:19:56 kernel: Exit chrdev /dev/idpfw with major 191
Feb 14 00:19:56 kernel: Exit chrdev /dev/detector with major 190
Feb 14 00:19:56 rc_service: bwdpi_check 855:notify_rc start_firewall
Feb 14 00:19:56 nat: apply nat rules (/tmp/nat_rules_eth0_eth0)
Feb 14 00:19:56 custom_script: Running /jffs/scripts/nat-start
Feb 14 00:19:56 (install_stubby.sh): 12300 Starting Script Execution (iptables)
Feb 14 00:19:56 custom_script: Running /jffs/scripts/firewall-start (args: eth0)
Feb 14 00:19:56 Skynet: [%] Startup Initiated... ( skynetloc=/tmp/mnt/USB-Drive/skynet )
Feb 14 00:52:02 rc_service: httpd 767:notify_rc restart_firewall
Feb 14 00:52:02 nat: apply nat rules (/tmp/nat_rules_eth0_eth0)
Feb 14 00:52:02 custom_script: Running /jffs/scripts/nat-start
Feb 14 00:52:02 (install_stubby.sh): 24878 Starting Script Execution (iptables)
Feb 14 00:52:02 custom_script: Running /jffs/scripts/firewall-start (args: eth0)
Feb 14 00:52:02 Skynet: [%] Startup Initiated... ( skynetloc=/tmp/mnt/USB-Drive/skynet )
Feb 14 00:52:32 rc_service: httpd 767:notify_rc restart_firewall
Feb 14 00:52:32 nat: apply nat rules (/tmp/nat_rules_eth0_eth0)
Feb 14 00:52:32 custom_script: Running /jffs/scripts/nat-start
Feb 14 00:52:32 (install_stubby.sh): 26073 Starting Script Execution (iptables)
Feb 14 00:52:32 custom_script: Running /jffs/scripts/firewall-start (args: eth0)
Feb 14 00:52:32 Skynet: [%] Startup Initiated... ( skynetloc=/tmp/mnt/USB-Drive/skynet )
Feb 14 00:52:49 rc_service: httpd 767:notify_rc restart_firewall
Feb 14 00:52:49 nat: apply nat rules (/tmp/nat_rules_eth0_eth0)
Feb 14 00:52:49 custom_script: Running /jffs/scripts/nat-start
Feb 14 00:52:49 (install_stubby.sh): 27093 Starting Script Execution (iptables)
Feb 14 00:52:49 custom_script: Running /jffs/scripts/firewall-start (args: eth0)
Feb 14 00:53:29 rc_service: httpd 767:notify_rc restart_firewall
Feb 14 00:53:29 nat: apply nat rules (/tmp/nat_rules_eth0_eth0)
Feb 14 00:53:29 custom_script: Running /jffs/scripts/nat-start
Feb 14 00:53:29 (install_stubby.sh): 27427 Starting Script Execution (iptables)
Feb 14 00:53:29 custom_script: Running /jffs/scripts/firewall-start (args: eth0)
Feb 14 00:53:29 Skynet: [%] Startup Initiated... ( skynetloc=/tmp/mnt/USB-Drive/skynet )
Feb 14 00:53:49 rc_service: httpd 767:notify_rc restart_firewall
Feb 14 00:53:49 nat: apply nat rules (/tmp/nat_rules_eth0_eth0)
Feb 14 00:53:49 custom_script: Running /jffs/scripts/nat-start
Feb 14 00:53:49 (install_stubby.sh): 28460 Starting Script Execution (iptables)
Feb 14 00:53:49 custom_script: Running /jffs/scripts/firewall-start (args: eth0)
Feb 14 00:54:23 rc_service: httpd 767:notify_rc restart_firewall
Feb 14 00:54:23 nat: apply nat rules (/tmp/nat_rules_eth0_eth0)
Feb 14 00:54:23 custom_script: Running /jffs/scripts/nat-start
Feb 14 00:54:23 (install_stubby.sh): 28751 Starting Script Execution (iptables)
Feb 14 00:54:23 custom_script: Running /jffs/scripts/firewall-start (args: eth0)
Feb 14 00:54:23 Skynet: [%] Startup Initiated... ( skynetloc=/tmp/mnt/USB-Drive/skynet )
Feb 14 00:54:36 kernel: [BLOCKED - INBOUND] IN=eth0 OUT= MAC=04:92:26:80:a1:00:00:17:10:87:12:99:08:00 SRC=221.181.156.59 DST=72.229.237.96 LEN=48 TOS=0x04 PREC=0x00 TTL=110 ID=38817 PROTO=TCP SPT=29964 DPT=22 SEQ=3168846 ACK=1112464615 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B401010402) MARK=0x8000000
Feb 14 00:54:42 nat: apply redirect rules
Feb 14 00:54:42 WAN_Connection: ISP's DHCP did not function properly.
Feb 14 00:54:42 DualWAN: skip single wan wan_led_control - WANRED off
Feb 14 00:54:59 Skynet: [#] 144341 IPs (+0) -- 1654 Ranges Banned (+0) || 0 Inbound -- 0 Outbound Connections Blocked! [start] [36s]
Feb 14 00:55:41 kernel: [BLOCKED - INBOUND] IN=eth0 OUT= MAC=04:92:26:80:a1:00:00:17:10:87:12:99:08:00 SRC=216.218.206.91 DST=72.229.237.96 LEN=68 TOS=0x00 PREC=0x00 TTL=53 ID=3349 DF PROTO=UDP SPT=60161 DPT=111 LEN=48 MARK=0x8000000
Feb 14 00:57:13 kernel: [BLOCKED - INBOUND] IN=eth0 OUT= MAC=04:92:26:80:a1:00:00:17:10:87:12:99:08:00 SRC=185.176.26.45 DST=72.229.237.96 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=58023 PROTO=TCP SPT=40514 DPT=6345 SEQ=862918414 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000

I’m sorry I comfused you with my misspelling of syslog.
The last 8 lines of the log appear to contain useful information, though I’m hoping someone with more experience will spot the problem. However, I see the blocked inbound connection by Skynet just before “WAN_Connection: ISP's DHCP did not function properly.”
and that makes me wonder if you might try temporarily turning Skynet off to see if that’s where the problem lies.

PeterV · Feb 15, 2019

Blackbox said:
Thanks @PeterV DNS service is working, where do I find which process uses how much CPU in the router?

You can see it by starting

Code:

top

in command line interface (via ssh)

Blackbox · Feb 16, 2019

Noone has the same issues with the above setup?

Blackbox · Feb 16, 2019

consorts said:
it would help if you could clarified if your problems are wired or wireless or both.

i had the same symptoms a few months ago, but it was only over the wireless radios.
this was due to incorrect "professional" page wireless settings.

when it happens to everything and your cpu% gets high,
it was due to skynet and diversion not syncing their lists properly.

Thanks @consorts, could you please let me know how you solved your issue with Wifi in detail please?

Thread starter	Title	Forum	Replies	Date
F	ASUS RT-AC86U (merlin Current Version : 386.12_6): jffs2: Argh. No free space left for GC. Can you help me troubleshoot this please?	Asuswrt-Merlin	6	Mar 20, 2024
H	Asus RT-AC86U problem wyze camera	Asuswrt-Merlin	18	Jan 4, 2024
T	Revert RT-AC86U to Asus Firmware - not working	Asuswrt-Merlin	8	Jul 29, 2023
Y	ASUS AC86U Firmware merlin 386.11 - NAT Loopback not working please help !	Asuswrt-Merlin	6	Jul 16, 2023
S	Can anyone help me to check if my RT-AC86U is part of this latest ASUS debacle	Asuswrt-Merlin	24	May 22, 2023
Z	Solved Accidentally flashed XT12 latest merlin on a ET12 Asus Zenwifi Pro. Can't flash back stock FW.	Asuswrt-Merlin	11	Friday at 7:25 AM
B	Asus RT-AC5300 and ExpressVPN	Asuswrt-Merlin	8	Apr 16, 2024
T	Asus RT-AX86U vs RT-AX68U (with Merlin cake SQM)	Asuswrt-Merlin	9	Apr 13, 2024
	Does ASUS Merlin's QoS consider DSCP?	Asuswrt-Merlin	6	Apr 13, 2024
	iVentoy on Asus Merlin	Asuswrt-Merlin	1	Apr 10, 2024

Asus RT-AC86U - Running Diversion + Skynet + Stubby - connection problems

Occasional Visitor

Occasional Visitor

Part of the Furniture

Regular Contributor

Senior Member

Part of the Furniture

Occasional Visitor

Part of the Furniture

Occasional Visitor

Part of the Furniture

Occasional Visitor

Occasional Visitor

Occasional Visitor

Occasional Visitor

Part of the Furniture

Regular Contributor

Occasional Visitor

Occasional Visitor

Similar threads

Similar threads

Sign Up For SNBForums Daily Digest