**** BEGIN LOGGING AT Sun Nov 01 02:59:56 2009
**** ENDING LOGGING AT Sun Nov 01 04:47:38 2009

**** BEGIN LOGGING AT Sun Nov 01 04:47:58 2009
Nov 01 06:05:46 <Comet> hi everyone
Nov 01 06:06:24 <Comet> im trying to find the wake on lan fonera plugin but the author site seams to be down... anyone knows where i can find it?
Nov 01 17:09:28 <psyduck72> hi guys any idea on how to configure openvpn as a client on the fonera??
Nov 01 17:31:43 <iosonoio> psyduck72: just install openvpn with opkg and then configure it as a normal openvpn client...
Nov 01 18:12:06 <jmk___> hi there
Nov 01 18:15:22 <jmk___> I have a quick question regarding the printer server plugin gor fonera 2.0n
Nov 01 19:19:17 <khanku> hello
Nov 01 19:30:15 <khanku> I'm having quite a strange problem with my brand new Fonera 2.0n (firmware v2.3.0.0)
Nov 01 19:31:00 <khanku> the fonera gets an ip from my router but doesn't seem to be able to connect with the internet
Nov 01 19:32:05 <khanku> stranger yet, with ssh, I can ping for example google.com and use UDP (traceroute, DNS) but TCP just does not work
Nov 01 19:32:46 <khanku> routes seems correct
Nov 01 19:32:53 <khanku> I really don't get what's wrong
Nov 01 19:33:01 <khanku> any help would be greatly appreciated
Nov 01 19:39:19 <xMff> what are the symptoms?
Nov 01 19:39:53 <xMff> I mean, does tcp times out or do you get connection refused or something?
Nov 01 19:42:09 <khanku> it timeouts
Nov 01 19:42:42 <khanku> connecting the fonera through my laptop and running tcpdump shows that TCP ACKs but no answers
Nov 01 19:44:01 <khanku> oh and it works flawlessly on my LAN
Nov 01 19:45:06 <xMff> hm weird indeed
Nov 01 19:45:10 <xMff> checked iptables?
Nov 01 19:45:24 <khanku> the output is awfully long
Nov 01 19:45:34 <xMff> yeah I know
Nov 01 19:45:50 <khanku> I stopped the firewall (all to ACCEPT) and it doesn't work any better
Nov 01 19:47:38 <xMff> well if you do that you kill masquerade
Nov 01 19:49:30 <khanku> don't think so
Nov 01 19:50:15 <xMff> I do
Nov 01 19:50:16 <khanku> just did it (/etc/init.d/firewall stop and iptables -L to check) and I still can ping / traceroute to google
Nov 01 19:50:31 <xMff> then something is weird
Nov 01 19:50:42 <khanku> yeah, most definitely
Nov 01 19:50:46 <xMff> how is your fonera connected to wan exactly?
Nov 01 19:51:02 <khanku> ethernet cable to my router
Nov 01 19:51:13 <khanku> which is connect with PPPoE
Nov 01 19:51:41 <khanku> connected*
Nov 01 19:51:47 <xMff> and you use different subnets for the wan side of your fonera and the lan side?
Nov 01 19:51:55 <khanku> yeah, sure
Nov 01 19:52:51 <xMff> and your traceroute shows the fonera as intermediate hop?
Nov 01 19:53:07 <khanku> it has been that way since I got the fonera, so I tried jsut connecting the WAN port of the fonera to my router and waiting... like 30 minutes
Nov 01 19:53:08 <xMff> and the lan ip of your router as the hop after?
Nov 01 19:53:15 <khanku> but the power DEL keeps blinking
Nov 01 19:53:22 <khanku> I also tried at a friends
Nov 01 19:53:42 <khanku> yeah, the traceroute output is perfectly normal
Nov 01 19:53:58 <xMff> what means "perfectly normal" ?
Nov 01 19:54:21 <khanku> starts from the fonera, goes through the router, my isp... to google
Nov 01 19:54:25 <xMff> the thing is, if the fonera would do what it is intended to do you wouldn't be able to do a traceroute at all right now
Nov 01 19:54:36 <xMff> so you do the traceroute from the fonera?
Nov 01 19:54:41 <khanku> yep
Nov 01 19:54:49 <xMff> and the tcp tests too?
Nov 01 19:55:13 <khanku> I'm doing everything with ssh on the fonera
Nov 01 19:55:16 <xMff> what is reported by  sysctl net.ipv4.tcp_ecn   ?
Nov 01 19:55:49 <khanku> root@Fonera:~# sysctl net.ipv4.tcp_ecn
Nov 01 19:55:50 <khanku> net.ipv4.tcp_ecn = 1
Nov 01 19:55:53 <xMff> ah
Nov 01 19:56:03 <xMff> theis is the most likely cause of your troubles
Nov 01 19:56:13 <xMff> try  sysctl -w net.ipv4.tcp_ecn=0
Nov 01 19:56:18 <xMff> and then repeat your tests
Nov 01 19:56:20 <khanku> ok...
Nov 01 19:56:23 <khanku> will do
Nov 01 19:56:50 <xMff> if it helps, edit /etc/sysctl.conf to make it persistent
Nov 01 19:57:26 <xMff> and maybe create a ticket stating that the default should be off since tcp ecn causes hard to debug troubles
Nov 01 19:57:47 <khanku> it actually does work
Nov 01 19:57:55 <khanku> it indeed does
Nov 01 19:58:17 <khanku> why the hell is it enabled by default anyway?
Nov 01 19:58:43 <xMff> because it was enabled by default in the openwrt version fon-ng uses as its base
Nov 01 19:59:03 <xMff> and it does not produce problems in any case, just with certain hosts and/or providers
Nov 01 20:00:23 <khanku> I'm not familiar with it (I must have heard about ECN back in university), when do problems arise?
Nov 01 20:01:59 <xMff> http://www.icir.org/floyd/ecnProblems.html has some background info
Nov 01 20:02:18 <xMff> and wikipedia http://en.wikipedia.org/wiki/Explicit_Congestion_Notification for the theoretical background
Nov 01 20:02:27 <khanku> thanks for the hint
Nov 01 20:02:29 <khanku> and the help
Nov 01 20:02:33 <xMff> np
Nov 01 20:04:11 <khanku> one more question: ecn wasn't enabled on older foneras, was it?
Nov 01 20:06:04 <xMff> likely, yes
Nov 01 20:06:52 <khanku> makes sense
Nov 01 20:07:22 <xMff> I reported it
Nov 01 20:08:02 <khanku> thanks
**** ENDING LOGGING AT Mon Nov 02 02:59:56 2009