how to debug an iptable problem?

  • ATTENTION! As of November 1, 2020, you are not able to reply to threads 6 months after the thread is opened if there are more than 500 posts in the thread.
    Threads will not be locked, so posts may still be edited by their authors.
    Just start a new thread on the topic to post if you get an error message when trying to reply to a thread.

solstyce

Occasional Visitor
I'm an iptables savage - I know just enough to know how thoroughly I could ruin my network configuration, and could use some help. I've tried to wrap my head around iptables several times over the years, and each time stagger away with a headache.

I've run into a problem where my AC68U drops WAN every 10 minutes on the dot. Turns out, AT&T uses 10 minute DHCP leases, and the DHCP renew request at 5 minutes isn't getting handled correctly.

I'm using FreshJR's Adaptive QoS on Merlin 384.17 and I see the DHCP expiring every 10 minutes and WAN dropping and reconnecting in the syslog. When I disable Adaptive QoS, everything works fine, and I see the DHCP renew event in syslog every 5 minutes.

I'm assuming there is an iptable rule in the FreshJR QoS script that is causing the DHCP requests to be dropped / blocked but I don't know enough about iptables to figure out the problem.

Can someone wiser in the way of iptables than I guide me with what command I should use to show all the rules so I can compare with and without Adaptive QoS to check the diff for possible problems?

Any assistance much appreciated!
 

dave14305

Part of the Furniture
Code:
iptables-save > withqos.txt
# go and disable QoS
iptables-save > withoutqos.txt
diff withqos.txt withoutqos.txt
 

solstyce

Occasional Visitor
Thanks, @dave14305!

To close the loop on this thread, dave14305 found the solution to my AC68U dropping WAN every 10 minutes whenever I enabled Adaptive QoS. For some reason Adaptive QoS is dropping the DHCP packets, and since my DHCP lease is only 10 minutes, it was resetting constantly.

If you're having issues with adaptive QoS and DHCP, see this post.
 

Similar threads

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top