RT-N66U will not log ACCEPT packets [FIXED]

[dewils80]

Hi all,

First post - sorry it's a problem and not a "hello".

My RT-N66U stopped logging ACCEPT packets after I updated to the 380.58_0 firmware this morning. Before that it was working fine, and forwarding the syslog onto my monitoring machine. Since the upgrade I can see (and forward) all debug events, DROP packets and DHCPREQUEST/ACK messages in both the syslog and on the monitoring machine. But no ACCEPT.

Just to check, my firewall is enabled and set to BOTH (setting to ACCEPT does not work either). My log level is 7. I've tried not forwarding the syslog. I've even done a factory reset and reconfigured everything (laborious) again, but it still doesn't work.

Searching here hasn't brought up any similar threads - so has anyone got any ideas what to try?

Thanks,
Phil

 

[dewils80]

Any ideas anyone? I'm all out of things to try.

Does anyone know of anything for me to try via SSH? Where are the rules for what gets to syslog stored?

 

[dewils80]

Right - FIXED.

In case anyone else every finds this issue, it's caused when you have Parental Controls switched on. I restricted my IP cameras from internet access (only used in the house), which switches on the parental controls. This setting seems to stop ACCEPT packets being logged. Is this a feature, limitation or a bug?

 

[RMerlin]

Works for me. I configured a client with Parental Control on, and still get ACCEPT log entries in syslog.

 

[dewils80]

Works for me. I configured a client with Parental Control on, and still get ACCEPT log entries in syslog.

Is there something I can do to help development/debugging? Are there logs to capture whilst replicating the problem?

 

[RMerlin]

Is there something I can do to help development/debugging? Are there logs to capture whilst replicating the problem?

Check what iptables rules are created. I can't see any technical explanation for what you describe, unless you are customizing your firewall rules through a user script.

You could also try disabling NAT acceleration, in case it prevents the router firewall from intercepting those new connections.