Настройка VPN Антизапрет на роутере Xiaomi Mi-R3G (Padavan)

User69 · April 6, 2020, 9:56am

Всем привет!
Вот мой скрин настроек для этого роутера, может, кому-то пригодится:

List of Allowed NCP Ciphers:
AES-128-CBC:AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305

Ключи настраиваются в соседнем табе, думаю, с этим проблем ни у кого не возникнет:

Содержимое Extended Configuration:

# Custom user conf file for OpenVPN client
# Please add needed params only!

### Negotiable Crypto Parameters
#ncp-disable

### If your server certificates with the nsCertType field set to "server"
remote-cert-tls server
setenv FRIENDLY_NAME "AntiZapret VPN TCP"

### Process priority level (0..19)
nice 0

### Syslog verbose level
verb 3

#my
resolv-retry infinite
persist-key
persist-tun
pull-filter ignore "block-outside-dns"
auth-nocache

Malah · September 8, 2020, 2:02pm

Доброго дня.
Это нормально когда трассировка вот такая? Сам рутрекер тем не менее с браузера открывается.
Из-за этого Monitorrent раздачи не подхватывает.

/opt/home/admin # traceroute rutracker.org
traceroute to rutracker.org (10.224.0.12), 30 hops max, 38 byte packets
 1  10.224.0.12 (10.224.0.12)  138.197 ms  137.352 ms  137.626 ms
 2  10.224.0.12 (10.224.0.12)  137.718 ms  355.567 ms  276.872 ms
 3  10.224.0.12 (10.224.0.12)  274.006 ms  486.192 ms  139.081 ms
 4  10.224.0.12 (10.224.0.12)  276.652 ms  276.037 ms  411.087 ms
 5  10.224.0.12 (10.224.0.12)  284.659 ms  410.573 ms  284.115 ms
 6  10.224.0.12 (10.224.0.12)  401.061 ms  362.950 ms  279.806 ms
 7  10.224.0.12 (10.224.0.12)  289.213 ms  354.302 ms  276.087 ms
 8  10.224.0.12 (10.224.0.12)  280.283 ms  409.703 ms  448.021 ms
 9  10.224.0.12 (10.224.0.12)  138.772 ms  138.715 ms  138.559 ms
10  10.224.0.12 (10.224.0.12)  139.378 ms  139.732 ms  139.285 ms
11  10.224.0.12 (10.224.0.12)  139.231 ms  139.951 ms  176.195 ms
12  10.224.0.12 (10.224.0.12)  139.262 ms  141.716 ms  139.351 ms
13  *  *  *
14  10.224.0.12 (10.224.0.12)  175.440 ms  175.688 ms  *
15  10.224.0.12 (10.224.0.12)  175.770 ms  176.822 ms  274.994 ms
16  10.224.0.12 (10.224.0.12)  280.798 ms  306.383 ms  178.094 ms
17  10.224.0.12 (10.224.0.12)  311.132 ms  322.432 ms  273.287 ms

Так же с Лостфильмом

/opt/home/admin # traceroute lostfilm.tv
traceroute to lostfilm.tv (10.224.0.66), 30 hops max, 38 byte packets
 1  10.224.0.66 (10.224.0.66)  311.417 ms  272.276 ms  278.554 ms
 2  10.224.0.66 (10.224.0.66)  274.675 ms  357.483 ms  274.184 ms
 3  10.224.0.66 (10.224.0.66)  451.130 ms  452.566 ms  354.962 ms
 4  10.224.0.66 (10.224.0.66)  138.754 ms  355.180 ms  273.343 ms
 5  10.224.0.66 (10.224.0.66)  149.429 ms  397.478 ms  410.965 ms
 6  10.224.0.66 (10.224.0.66)  279.099 ms  418.388 ms  417.620 ms
 7  10.224.0.66 (10.224.0.66)  280.743 ms  409.448 ms  452.075 ms
 8  10.224.0.66 (10.224.0.66)  138.865 ms  138.978 ms  140.918 ms
 9  10.224.0.66 (10.224.0.66)  138.300 ms  137.967 ms  138.590 ms
10  10.224.0.66 (10.224.0.66)  140.395 ms  139.102 ms  139.039 ms
11  10.224.0.66 (10.224.0.66)  139.219 ms  139.372 ms  139.462 ms
12  10.224.0.66 (10.224.0.66)  355.176 ms  275.910 ms  275.305 ms

ValdikSS · September 11, 2020, 4:57am

Трассировка нормальная, хоть и может выглядеть странно.
Торрент-анонсеры rutracker внесены в реестр по IP-адресам, а не по доменам, из-за чего не маршрутизируются через VPN. Перенастройте их вручную на другие адреса, через DNS или hosts:

163.172.167.207 bt.t-ru.org
163.172.167.207 bt2.t-ru.org
163.172.167.207 bt3.t-ru.org
163.172.167.207 bt4.t-ru.org

samur005 · March 21, 2022, 4:43am

На март 2022 этот способ не работает у меня

arsenal3008 · March 21, 2022, 3:40pm

Не соглашусь, только что поставил, Рутреккер, пиратбэй, лостфильм и т.д. все открывает, автору спасибо…

drfischer · May 31, 2022, 10:45am

У меня на Padavan не работает, правда нет возможности в поле Транспорт выставить TCP over ipV4. Доступно либо upd либо tcp. Возможно что дело в этом?
И сам интернет приходит в роутер через модем с симкой.

User69 · June 26, 2023, 7:45am

На свежей сборке Padavan
https://4pda.to/forum/index.php?showtopic=837667&view=findpost&p=115437304
OVPN AZ не стартует сам после ребута:

openvpn-cli[536]: Attempting to establish TCP connection with [AF_INET]51.158.187.25:1194 [nonblock]
openvpn-cli[536]: TCP/UDP: Closing socket
openvpn-cli[536]: SIGTERM[hard,init_instance] received, process exiting

Но вручную потом запускается без проблем:

openvpn-cli[598]: Attempting to establish TCP connection with [AF_INET]51.158.187.25:1194 [nonblock]
openvpn-cli[598]: TCP connection established with [AF_INET]51.158.187.25:1194

AZ тут явно ни при чем, но может, кто сталкивался?

Apriori · December 28, 2023, 10:05pm

Прошу помощи: этот же роутер на падаване ни в какую не хочет подключаться. Надпись “подключено” не появляется, а в логах выдаёт вот такую ошибку:

ec 28 21:44:02 MI-3: starting OpenVPN client…
Dec 28 21:44:02 openvpn-cli[465]: Options error: Unrecognized option or missing parameter(s) in client.conf:24: pull-filter (2.3.12)
Dec 28 21:44:02 openvpn-cli[465]: Use --help for more information.
Dec 28 21:44:11 NTP Client: Synchronizing time to pool.ntp.org.
Dec 28 21:44:25 NTP Client: System time changed, offset: 12.144257s
Dec 28 21:44:32 pppd[425]: System time change detected.
Dec 28 21:48:11 MI-3: starting OpenVPN client…
Dec 28 21:48:11 openvpn-cli[508]: Options error: Unrecognized option or missing parameter(s) in client.conf:25: pull-filter (2.3.12)
Dec 28 21:48:11 openvpn-cli[508]: Use --help for more information.
Dec 28 21:55:37 MI-3: starting OpenVPN client…
Dec 28 21:55:37 openvpn-cli[565]: Options error: Unrecognized option or missing parameter(s) in client.conf:24: pull-filter (2.3.12)
Dec 28 21:55:37 openvpn-cli[565]: Use --help for more information.

Но я в этом совершенно ничего не понимаю( Пожалейте пожалуйста новичка, подскажите пошагово куда ткнуть что бы заработало…(

User69 · December 28, 2023, 11:16pm

У Вас OpenVPN больно старый, для начала обновите прошивку:
https://4pda.to/forum/index.php?showtopic=837667&st=27220#entry115437304

User69 · December 28, 2023, 11:17pm

Исправили, кстати

dartraiden · December 29, 2023, 2:15pm

Нужно убрать строчку, в которой есть pull-filter, о чём ovpn вполне ясно и пишет в лог - он такой опции не знает.

Apriori · December 29, 2023, 3:47pm

Спасибо, прогресс какой то появился, когда я убрал строчку из скрипта, но в целом картину это не сильно изменило( На секунду появляется слово “коннект” и потом бесконечно переподключает VPN:

Dec 29 15:41:54 syslogd started: BusyBox v1.24.2
Dec 29 15:41:54 MI-3: firmware version: 3.4.3.9-099_eaafd46
Dec 29 15:41:54 kernel: klogd started: BusyBox v1.24.2 (2016-11-24 20:22:38 MSK)
Dec 29 15:41:54 kernel: Linux version 3.4.113 (padavan@hms) (gcc version 4.4.7 (GCC) ) #1 Thu Nov 24 20:16:28 MSK 2016
Dec 29 15:41:54 kernel: MediaTek SoC: MT7620A, RevID: 0206, RAM: DDR2, XTAL: 20MHz
Dec 29 15:41:54 kernel: CPU/OCP/SYS frequency: 600/200/200 MHz
Dec 29 15:41:54 kernel: CPU revision is: 00019650 (MIPS 24KEc)
Dec 29 15:41:54 kernel: Determined physical RAM map:
Dec 29 15:41:54 kernel: memory: 08000000 @ 00000000 (usable)
Dec 29 15:41:54 kernel: Zone PFN ranges:
Dec 29 15:41:54 kernel: Normal 0x00000000 → 0x00008000
Dec 29 15:41:54 kernel: Movable zone start PFN for each node
Dec 29 15:41:54 kernel: Early memory PFN ranges
Dec 29 15:41:54 kernel: 0: 0x00000000 → 0x00008000
Dec 29 15:41:54 kernel: On node 0 totalpages: 32768
Dec 29 15:41:54 kernel: free_area_init_node: node 0, pgdat 8035f460, node_mem_map 81000000
Dec 29 15:41:54 kernel: Normal zone: 256 pages used for memmap
Dec 29 15:41:54 kernel: Normal zone: 0 pages reserved
Dec 29 15:41:54 kernel: Normal zone: 32512 pages, LIFO batch:7
Dec 29 15:41:54 kernel: Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Dec 29 15:41:54 kernel: Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
Dec 29 15:41:54 kernel: pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
Dec 29 15:41:54 kernel: pcpu-alloc: [0] 0
Dec 29 15:41:54 kernel: Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512
Dec 29 15:41:54 kernel: Kernel command line: console=ttyS0,115200n8 root=/dev/mtdblock4 rootfstype=squashfs
Dec 29 15:41:54 kernel: PID hash table entries: 512 (order: -1, 2048 bytes)
Dec 29 15:41:54 kernel: Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Dec 29 15:41:54 kernel: Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Dec 29 15:41:54 kernel: Writing ErrCtl register=00026dc0
Dec 29 15:41:54 kernel: Readback ErrCtl register=00026dc0
Dec 29 15:41:54 kernel: Memory: 126172k/131072k available (3003k kernel code, 4900k reserved, 451k data, 192k init, 0k highmem)
Dec 29 15:41:54 kernel: NR_IRQS:40
Dec 29 15:41:54 kernel: console [ttyS0] enabled
Dec 29 15:41:54 kernel: Calibrating delay loop… 397.82 BogoMIPS (lpj=795648)
Dec 29 15:41:54 kernel: pid_max: default: 32768 minimum: 301
Dec 29 15:41:54 kernel: Mount-cache hash table entries: 512
Dec 29 15:41:54 kernel: NET: Registered protocol family 16
Dec 29 15:41:54 kernel: bio: create slab at 0
Dec 29 15:41:54 kernel: SCSI subsystem initialized
Dec 29 15:41:54 kernel: usbcore: registered new interface driver usbfs
Dec 29 15:41:54 kernel: usbcore: registered new interface driver hub
Dec 29 15:41:54 kernel: usbcore: registered new device driver usb
Dec 29 15:41:54 kernel: PCI host bridge to bus 0000:00
Dec 29 15:41:54 kernel: pci_bus 0000:00: root bus resource [mem 0x20000000-0x2fffffff]
Dec 29 15:41:54 kernel: pci_bus 0000:00: root bus resource [io 0x10160000-0x1016ffff]
Dec 29 15:41:54 kernel: pci 0000:00:00.0: [1814:0801] type 01 class 0x060400
Dec 29 15:41:54 kernel: pci 0000:00:00.0: supports D1
Dec 29 15:41:54 kernel: pci 0000:00:00.0: PME# supported from D0 D1 D3hot
Dec 29 15:41:54 kernel: pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
Dec 29 15:41:54 kernel: pci 0000:01:00.0: [14c3:7662] type 00 class 0x028000
Dec 29 15:41:54 kernel: pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit]
Dec 29 15:41:54 kernel: pci 0000:01:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref]
Dec 29 15:41:54 kernel: pci 0000:01:00.0: PME# supported from D0 D3hot D3cold
Dec 29 15:41:54 kernel: pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff]
Dec 29 15:41:54 kernel: pci 0000:00:00.0: BAR 9: assigned [mem 0x20100000-0x201fffff pref]
Dec 29 15:41:54 kernel: pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit]
Dec 29 15:41:54 kernel: pci 0000:01:00.0: BAR 6: assigned [mem 0x20100000-0x2010ffff pref]
Dec 29 15:41:54 kernel: pci 0000:00:00.0: PCI bridge to [bus 01-01]
Dec 29 15:41:54 kernel: pci 0000:00:00.0: bridge window [mem 0x20000000-0x200fffff]
Dec 29 15:41:54 kernel: pci 0000:00:00.0: bridge window [mem 0x20100000-0x201fffff pref]
Dec 29 15:41:54 kernel: PCI: Enabling device 0000:00:00.0 (0000 → 0002)
Dec 29 15:41:54 kernel: Switching to clocksource MIPS
Dec 29 15:41:54 kernel: NET: Registered protocol family 2
Dec 29 15:41:54 kernel: IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
Dec 29 15:41:54 kernel: TCP established hash table entries: 4096 (order: 3, 32768 bytes)
Dec 29 15:41:54 kernel: TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
Dec 29 15:41:54 kernel: TCP: Hash tables configured (established 4096 bind 4096)
Dec 29 15:41:54 kernel: TCP: reno registered
Dec 29 15:41:54 kernel: UDP hash table entries: 256 (order: 0, 4096 bytes)
Dec 29 15:41:54 kernel: NET: Registered protocol family 1
Dec 29 15:41:54 kernel: PCI: CLS 32 bytes, default 32
Dec 29 15:41:54 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher
Dec 29 15:41:54 kernel: msgmni has been set to 246
Dec 29 15:41:54 kernel: io scheduler noop registered (default)
Dec 29 15:41:54 kernel: Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
Dec 29 15:41:54 kernel: serial8250: ttyS0 at MMIO 0x10000c00 (irq = 20) is a 16550A
Dec 29 15:41:54 kernel: Ralink GPIO driver initialized. Number of GPIO: 73, GPIO mode: 00101B1D
Dec 29 15:41:54 kernel: loop: module loaded
Dec 29 15:41:54 kernel: !!! nand page size=2048, addr len=4
Dec 29 15:41:54 kernel: Creating 9 MTD partitions on “ra_nfc”:
Dec 29 15:41:54 kernel: 0x000000000000-0x000000040000 : “Bootloader”
Dec 29 15:41:54 kernel: 0x000000040000-0x0000000c0000 : “BootEnv”
Dec 29 15:41:54 kernel: 0x0000000c0000-0x000000600000 : “Factory”
Dec 29 15:41:54 kernel: 0x000000600000-0x000000740000 : “Kernel”
Dec 29 15:41:54 kernel: 0x000000740000-0x000001600000 : “RootFS”
Dec 29 15:41:54 kernel: 0x000001600000-0x000001680000 : “Config”
Dec 29 15:41:54 kernel: 0x000001680000-0x000001700000 : “Storage”
Dec 29 15:41:54 kernel: 0x000001700000-0x000008000000 : “RWFS”
Dec 29 15:41:54 kernel: nand_block_checkbad: offs:3960000 tag: BAD
Dec 29 15:41:54 kernel: 0x000000600000-0x000001600000 : “Firmware_Stub”
Dec 29 15:41:54 kernel: tun: Universal TUN/TAP device driver, 1.6
Dec 29 15:41:54 kernel: tun: (C) 1999-2004 Max Krasnyansky maxk@qualcomm.com
Dec 29 15:41:54 kernel: Ralink APSoC Ethernet Driver v3.2.4 (raeth)
Dec 29 15:41:54 kernel: raeth: PDMA RX ring 256, PDMA TX ring 512. Max packet size 1536
Dec 29 15:41:54 kernel: raeth: NAPI support, weight 32
Dec 29 15:41:54 kernel: raeth: Byte Queue Limits (BQL) support
Dec 29 15:41:54 kernel: PPP generic driver version 2.4.2
Dec 29 15:41:54 kernel: PPP MPPE Compression module registered
Dec 29 15:41:54 kernel: NET: Registered protocol family 24
Dec 29 15:41:54 kernel: PPTP driver version 0.8.5
Dec 29 15:41:54 kernel: usbcore: registered new interface driver libusual
Dec 29 15:41:54 kernel: nf_conntrack version 0.5.0 (16384 buckets, 32768 max)
Dec 29 15:41:54 kernel: xt_time: kernel timezone is -0000
Dec 29 15:41:54 kernel: Bridge firewalling registered
Dec 29 15:41:54 kernel: gre: GRE over IPv4 demultiplexor driver
Dec 29 15:41:54 kernel: ip_tables: (C) 2000-2006 Netfilter Core Team
Dec 29 15:41:54 kernel: TCP: cubic registered
Dec 29 15:41:54 kernel: NET: Registered protocol family 10
Dec 29 15:41:54 kernel: ip6_tables: (C) 2000-2006 Netfilter Core Team
Dec 29 15:41:54 kernel: IPv6 over IPv4 tunneling driver
Dec 29 15:41:54 kernel: NET: Registered protocol family 17
Dec 29 15:41:54 kernel: L2TP core driver, V2.0
Dec 29 15:41:54 kernel: PPPoL2TP kernel driver, V2.0
Dec 29 15:41:54 kernel: 8021q: 802.1Q VLAN Support v1.8
Dec 29 15:41:54 kernel: ASUS NVRAM, v0.08. Available space: 131072. Integrity: OK
Dec 29 15:41:54 kernel: VFS: Mounted root (squashfs filesystem) readonly on device 31:4.
Dec 29 15:41:54 kernel: Freeing unused kernel memory: 192k freed
Dec 29 15:41:54 kernel: Algorithmics/MIPS FPU Emulator v1.5
Dec 29 15:41:54 kernel: rt2860v2_ap: module license ‘Proprietary’ taints kernel.
Dec 29 15:41:54 kernel: APSoC AP Driver version: 2.7.2.0
Dec 29 15:41:54 kernel: PCI: Enabling device 0000:01:00.0 (0000 → 0002)
Dec 29 15:41:54 kernel: MT76x2 AP Driver version: 3.0.5.0
Dec 29 15:41:54 kernel: usbcore: registered new interface driver usblp
Dec 29 15:41:54 kernel: Initializing USB Mass Storage driver…
Dec 29 15:41:54 kernel: usbcore: registered new interface driver usb-storage
Dec 29 15:41:54 kernel: USB Mass Storage support registered.
Dec 29 15:41:54 kernel: ehci_hcd: USB 2.0 ‘Enhanced’ Host Controller (EHCI) Driver
Dec 29 15:41:54 kernel: ehci-platform ehci-platform: Generic Platform EHCI Controller
Dec 29 15:41:54 kernel: ehci-platform ehci-platform: new USB bus registered, assigned bus number 1
Dec 29 15:41:54 kernel: ehci-platform ehci-platform: irq 26, io mem 0x101c0000
Dec 29 15:41:54 kernel: ehci-platform ehci-platform: USB 2.0 started, EHCI 1.00, overcurrent ignored
Dec 29 15:41:54 kernel: usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
Dec 29 15:41:54 kernel: usb usb1: Product: Generic Platform EHCI Controller
Dec 29 15:41:54 kernel: usb usb1: Manufacturer: Linux 3.4.113 ehci_hcd
Dec 29 15:41:54 kernel: usb usb1: SerialNumber: ehci-platform
Dec 29 15:41:54 kernel: hub 1-0:1.0: USB hub found
Dec 29 15:41:54 kernel: hub 1-0:1.0: 1 port detected
Dec 29 15:41:54 kernel: ohci_hcd: USB 1.1 ‘Open’ Host Controller (OHCI) Driver
Dec 29 15:41:54 kernel: ohci-platform ohci-platform: Generic Platform OHCI Controller
Dec 29 15:41:54 kernel: ohci-platform ohci-platform: new USB bus registered, assigned bus number 2
Dec 29 15:41:54 kernel: ohci-platform ohci-platform: irq 26, io mem 0x101c1000
Dec 29 15:41:54 kernel: usb usb2: New USB device found, idVendor=1d6b, idProduct=0001
Dec 29 15:41:54 kernel: usb usb2: Product: Generic Platform OHCI Controller
Dec 29 15:41:54 kernel: usb usb2: Manufacturer: Linux 3.4.113 ohci_hcd
Dec 29 15:41:54 kernel: usb usb2: SerialNumber: ohci-platform
Dec 29 15:41:54 kernel: hub 2-0:1.0: USB hub found
Dec 29 15:41:54 kernel: hub 2-0:1.0: 1 port detected
Dec 29 15:41:54 kernel: raeth: HW IP/TCP/UDP checksum RX/TX offload enabled
Dec 29 15:41:54 kernel: raeth: HW VLAN TX offload enabled
Dec 29 15:41:54 kernel: raeth: HW Scatter/Gather TX offload enabled
Dec 29 15:41:54 kernel: mtk_esw - hw bridge: W|LLLL
Dec 29 15:41:54 kernel: mtk_esw - set broadcast storm control rate as: 10 mbps
Dec 29 15:41:54 kernel: device eth2.1 entered promiscuous mode
Dec 29 15:41:54 kernel: device eth2 entered promiscuous mode
Dec 29 15:41:55 kernel: mtk_esw: Link Status Changed - Port WAN Link Up
Dec 29 15:41:58 kernel: ch1 bssid=e8:48:b8:9f:58:f3
Dec 29 15:41:59 kernel: ch1 bssid=e2:0e:e4:ed:e7:40
Dec 29 15:41:59 kernel: ch1 bssid=d8:af:81:c1:51:c5
Dec 29 15:41:59 kernel: ch1 bssid=78:94:b4:8c:a8:80
Dec 29 15:41:59 kernel: ch1 bssid=38:2c:4a:aa:41:28
Dec 29 15:41:59 kernel: ch1 bssid=08:c6:b3:b7:8c:21
Dec 29 15:41:59 kernel: ch2 bssid=a0:a3:f0:fa:71:4e
Dec 29 15:41:59 kernel: ch2 bssid=f4:23:9c:dd:72:10
Dec 29 15:41:59 kernel: ch3 bssid=e2:0e:e4:d1:83:22
Dec 29 15:41:59 kernel: ch3 bssid=e2:0e:e4:e1:83:22
Dec 29 15:41:59 kernel: ch3 bssid=0c:80:63:01:e8:ac
Dec 29 15:41:59 kernel: ch3 bssid=50:d4:f7:ea:27:cf
Dec 29 15:41:59 kernel: ch4 bssid=cc:2d:21:4b:65:f1
Dec 29 15:41:59 kernel: ch5 bssid=08:5a:11:3b:37:7b
Dec 29 15:41:59 kernel: ch5 bssid=0c:0e:76:a8:dd:b8
Dec 29 15:41:59 kernel: ch6 bssid=9c:53:22:26:3e:1f
Dec 29 15:41:59 kernel: ch7 bssid=0c:b6:d2:19:3d:99
Dec 29 15:41:59 kernel: ch7 bssid=08:c6:b3:28:b9:70
Dec 29 15:41:59 kernel: ch8 bssid=ac:15:a2:19:78:6d
Dec 29 15:41:59 kernel: ch8 bssid=ae:15:a2:29:78:6d
Dec 29 15:41:59 kernel: ch8 bssid=1c:7e:e5:31:27:a6
Dec 29 15:41:59 kernel: ch9 bssid=a0:ab:1b:e7:dc:80
Dec 29 15:41:59 kernel: ch9 bssid=04:bf:6d:97:0c:b0
Dec 29 15:41:59 kernel: ch9 bssid=50:ff:20:38:c4:06
Dec 29 15:41:59 kernel: ch9 bssid=52:ff:20:48:c4:06
Dec 29 15:41:59 kernel: ch11 bssid=08:5a:11:3a:b9:83
Dec 29 15:41:59 kernel: ch11 bssid=3c:98:72:47:ed:a6
Dec 29 15:41:59 kernel: ch11 bssid=d8:af:81:b3:b1:ea
Dec 29 15:41:59 kernel: ch11 bssid=e8:de:27:df:44:b6
Dec 29 15:41:59 kernel: ch12 bssid=60:a4:4c:e0:20:58
Dec 29 15:41:59 kernel: ch13 bssid=f0:b4:d2:d0:b8:18
Dec 29 15:41:59 kernel: =====================================================
Dec 29 15:41:59 kernel: Channel 1 : Dirty = 660, False CCA = 201, Busy Time = 0, Skip Channel = FALSE
Dec 29 15:41:59 kernel: Channel 2 : Dirty = 556, False CCA = 169, Busy Time = 0, Skip Channel = FALSE
Dec 29 15:41:59 kernel: Channel 3 : Dirty = 664, False CCA = 17, Busy Time = 0, Skip Channel = FALSE
Dec 29 15:41:59 kernel: Channel 4 : Dirty = 598, False CCA = 26, Busy Time = 0, Skip Channel = FALSE
Dec 29 15:41:59 kernel: Channel 5 : Dirty = 692, False CCA = 110, Busy Time = 0, Skip Channel = FALSE
Dec 29 15:41:59 kernel: Channel 6 : Dirty = 542, False CCA = 134, Busy Time = 0, Skip Channel = FALSE
Dec 29 15:41:59 kernel: Channel 7 : Dirty = 620, False CCA = 104, Busy Time = 0, Skip Channel = FALSE
Dec 29 15:41:59 kernel: Channel 8 : Dirty = 614, False CCA = 24, Busy Time = 0, Skip Channel = FALSE
Dec 29 15:41:59 kernel: Channel 9 : Dirty = 652, False CCA = 38, Busy Time = 0, Skip Channel = FALSE
Dec 29 15:41:59 kernel: Channel 10 : Dirty = 460, False CCA = 110, Busy Time = 0, Skip Channel = FALSE
Dec 29 15:41:59 kernel: Channel 11 : Dirty = 564, False CCA = 158, Busy Time = 0, Skip Channel = FALSE
Dec 29 15:41:59 kernel: Channel 12 : Dirty = 386, False CCA = 157, Busy Time = 0, Skip Channel = TRUE
Dec 29 15:41:59 kernel: Channel 13 : Dirty = 294, False CCA = 18, Busy Time = 0, Skip Channel = TRUE
Dec 29 15:41:59 kernel: =====================================================
Dec 29 15:41:59 kernel: Rule 1 CCA value : Min Dirtiness ==> Select Channel 13
Dec 29 15:41:59 kernel: Min Dirty = 294
Dec 29 15:41:59 kernel: ExChannel = 9 , 0
Dec 29 15:41:59 kernel: BW = 40
Dec 29 15:41:59 kernel: device ra0 entered promiscuous mode
Dec 29 15:42:01 kernel: ch36 bssid=0c:0e:76:a8:dd:ba
Dec 29 15:42:01 kernel: ch36 bssid=e8:48:b8:9e:34:c6
Dec 29 15:42:01 kernel: ch40 bssid=9c:53:22:26:3e:1e
Dec 29 15:42:01 kernel: ch44 bssid=08:5a:11:3b:37:79
Dec 29 15:42:01 kernel: ch44 bssid=78:94:b4:8c:a8:81
Dec 29 15:42:01 kernel: =====================================================
Dec 29 15:42:01 kernel: Channel 36 : Dirty = 182, False CCA = 199, Busy Time = 0, Skip Channel = FALSE
Dec 29 15:42:01 kernel: Channel 40 : Dirty = 198, False CCA = 165, Busy Time = 0, Skip Channel = FALSE
Dec 29 15:42:01 kernel: Channel 44 : Dirty = 182, False CCA = 163, Busy Time = 0, Skip Channel = FALSE
Dec 29 15:42:01 kernel: Channel 48 : Dirty = 64, False CCA = 97, Busy Time = 0, Skip Channel = FALSE
Dec 29 15:42:01 kernel: =====================================================
Dec 29 15:42:01 kernel: Rule 2 CCA value : Min False CCA value ==> Select Channel 36, min falsecca = 1250
Dec 29 15:42:01 kernel: device rai0 entered promiscuous mode
Dec 29 15:42:02 kernel: br0: port 3(rai0) entered forwarding state
Dec 29 15:42:02 kernel: br0: port 2(ra0) entered forwarding state
Dec 29 15:42:02 kernel: br0: port 1(eth2.1) entered forwarding state
Dec 29 15:42:02 kernel: mtk_esw - software IGMP/MLD snooping: 1
Dec 29 15:42:02 dnsmasq[396]: started, version 2.76 cachesize 1024
Dec 29 15:42:02 dnsmasq[396]: compile time options: IPv6 GNU-getopt no-RTC no-DBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP no-conntrack ipset no-auth no-DNSSEC no-loop-detect no-inotify
Dec 29 15:42:02 dnsmasq-dhcp[396]: DHCP, IP range 192.168.1.2 – 192.168.1.244, lease time 1d
Dec 29 15:42:02 dnsmasq-dhcp[396]: DHCP, sockets bound exclusively to interface br0
Dec 29 15:42:02 dnsmasq[396]: read /etc/hosts - 3 addresses
Dec 29 15:42:02 dnsmasq[396]: read /etc/storage/dnsmasq/hosts - 0 addresses
Dec 29 15:42:02 dnsmasq-dhcp[396]: read /etc/dnsmasq/dhcp/dhcp-hosts.rc
Dec 29 15:42:03 kernel: Ralink HW NAT v2.52.0 Module Enabled, FoE Size: 16384
Dec 29 15:42:03 MI-3: Hardware NAT/Routing: Enabled, IPoE/PPPoE offload [WAN]<->[LAN/WLAN]
Dec 29 15:42:03 MI-3: Hardware NAT/Routing: IPv4 UDP flow offload - ON
Dec 29 15:42:03 MI-3: Hardware NAT/Routing: IPv6 routes offload - OFF
Dec 29 15:42:03 DHCP MAN Client: starting on eth2.2 …
Dec 29 15:42:03 pppd[424]: Plugin rp-pppoe.so loaded.
Dec 29 15:42:03 pppd[424]: RP-PPPoE plugin version 3.12 compiled against pppd 2.4.7
Dec 29 15:42:03 pppd[425]: pppd 2.4.7 started by admin, uid 0
Dec 29 15:42:03 pppd[425]: PPP session is 29732 (0x7424)
Dec 29 15:42:03 pppd[425]: Connected to 02:00:01:01:00:05 via interface eth2.2
Dec 29 15:42:03 pppd[425]: Using interface ppp0
Dec 29 15:42:03 pppd[425]: Connect: ppp0 ↔ eth2.2
Dec 29 15:42:04 pppd[425]: Remote message: Authentication success,Welcome!
Dec 29 15:42:04 pppd[425]: PAP authentication succeeded
Dec 29 15:42:04 pppd[425]: peer from calling number 02:00:01:01:00:05 authorized
Dec 29 15:42:04 pppd[425]: local IP address 100.72.92.43
Dec 29 15:42:04 pppd[425]: remote IP address 81.177.113.52
Dec 29 15:42:04 pppd[425]: primary DNS address 88.147.128.16
Dec 29 15:42:04 pppd[425]: secondary DNS address 88.147.129.17
Dec 29 15:42:04 miniupnpd[435]: version 2.0 starting UPnP-IGD ext if ppp0 BOOTID=1703864524
Dec 29 15:42:04 miniupnpd[435]: HTTP listening on port 40271
Dec 29 15:42:04 httpd[429]: Server listening port 80 (HTTP).
Dec 29 15:42:04 MI-3: WAN up (ppp0)
Dec 29 15:42:04 PPPoE: Connected
Dec 29 15:42:04 kernel: br0: port 3(rai0) entered forwarding state
Dec 29 15:42:04 kernel: br0: port 2(ra0) entered forwarding state
Dec 29 15:42:04 kernel: br0: port 1(eth2.1) entered forwarding state
Dec 29 15:42:05 MI-3: starting OpenVPN client…
Dec 29 15:42:05 openvpn-cli[473]: OpenVPN 2.3.12 mipsel-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Nov 24 2016
Dec 29 15:42:05 openvpn-cli[473]: library versions: OpenSSL 1.0.1u 22 Sep 2016, LZO 2.09
Dec 29 15:42:05 openvpn-cli[474]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 29 15:42:05 openvpn-cli[474]: Socket Buffers: R=[87380->87380] S=[16384->16384]
Dec 29 15:42:05 openvpn-cli[474]: Attempting to establish TCP connection with [AF_INET]51.75.70.203:1194 [nonblock]
Dec 29 15:42:05 dnsmasq[396]: read /etc/hosts - 3 addresses
Dec 29 15:42:05 dnsmasq[396]: read /etc/storage/dnsmasq/hosts - 0 addresses
Dec 29 15:42:05 dnsmasq-dhcp[396]: read /etc/dnsmasq/dhcp/dhcp-hosts.rc
Dec 29 15:42:05 dnsmasq[396]: using nameserver 88.147.128.16#53
Dec 29 15:42:05 dnsmasq[396]: using nameserver 88.147.129.17#53
Dec 29 15:42:14 NTP Client: Synchronizing time to pool.ntp.org.
Dec 29 15:42:15 openvpn-cli[474]: TCP: connect to [AF_INET]51.75.70.203:1194 failed, will try again in 5 seconds: Connection timed out
Dec 29 15:42:27 NTP Client: System time changed, offset: 11.717367s
Dec 29 15:42:35 pppd[425]: System time change detected.
Dec 29 15:42:42 openvpn-cli[474]: TCP: connect to [AF_INET]51.75.70.203:1194 failed, will try again in 5 seconds: Connection timed out
Dec 29 15:42:57 openvpn-cli[474]: TCP: connect to [AF_INET]51.75.70.203:1194 failed, will try again in 5 seconds: Connection timed out
Dec 29 15:43:12 openvpn-cli[474]: TCP: connect to [AF_INET]51.75.70.203:1194 failed, will try again in 5 seconds: Connection timed out
Dec 29 15:43:27 openvpn-cli[474]: TCP: connect to [AF_INET]51.75.70.203:1194 failed, will try again in 5 seconds: Connection timed out
Dec 29 15:43:42 openvpn-cli[474]: TCP: connect to [AF_INET]51.75.70.203:1194 failed, will try again in 5 seconds: Connection timed out
Dec 29 15:43:57 openvpn-cli[474]: TCP: connect to [AF_INET]51.75.70.203:1194 failed, will try again in 5 seconds: Connection timed out
Dec 29 15:44:12 openvpn-cli[474]: TCP: connect to [AF_INET]51.75.70.203:1194 failed, will try again in 5 seconds: Connection timed out
Dec 29 15:44:27 openvpn-cli[474]: TCP: connect to [AF_INET]51.75.70.203:1194 failed, will try again in 5 seconds: Connection timed out
Dec 29 15:44:42 openvpn-cli[474]: TCP: connect to [AF_INET]51.75.70.203:1194 failed, will try again in 5 seconds: Connection timed out

Я на днях попробую обновить прошивку роутера до актуальной… Попробую с ней, если конечно, получится что нибудь((

dartraiden · December 29, 2023, 4:03pm

Добавьте в расширенные параметры verb 5, тогда OVPN будет поразговорчивее.

Apriori · December 29, 2023, 6:25pm

SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Dec 29 18:24:23 openvpn-cli[466]: [antizapret-server-shared] Peer Connection Initiated with [AF_INET]51.158.176.255:1194
Dec 29 18:24:25 openvpn-cli[466]: SENT CONTROL [antizapret-server-shared]: 'PUSH_REQUEST' (status=1)
Dec 29 18:24:25 openvpn-cli[466]: PUSH: Received control message: 'PUSH_REPLY,route 10.224.0.0 255.254.0.0,dhcp-option DNS 192.168.104.1,block-outside-dns,route-gateway 192.168.104.1,topology subnet,ping 110,ping-restart 360,socket-flags TCP_NODELAY,route 103.246.200.0 255.255.252.0,route 178.239.88.0 255.255.248.0,route 185.104.45.0 255.255.255.0,route 193.105.213.36 255.255.255.252,route 203.104.128.0 255.255.240.0,route 203.104.144.0 255.255.248.0,route 203.104.152.0 255.255.252.0,route 68.171.224.0
Dec 29 18:24:25 openvpn-cli[466]: Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:3: block-outside-dns (2.3.12)
Dec 29 18:24:25 openvpn-cli[466]: OPTIONS IMPORT: timers and/or timeouts modified
Dec 29 18:24:25 openvpn-cli[466]: OPTIONS IMPORT: --socket-flags option modified
Dec 29 18:24:25 openvpn-cli[466]: OPTIONS IMPORT: --ifconfig/up options modified
Dec 29 18:24:25 openvpn-cli[466]: OPTIONS IMPORT: route options modified
Dec 29 18:24:25 openvpn-cli[466]: OPTIONS IMPORT: route-related options modified
Dec 29 18:24:25 openvpn-cli[466]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Dec 29 18:24:25 openvpn-cli[466]: OPTIONS IMPORT: peer-id set
Dec 29 18:24:25 openvpn-cli[466]: OPTIONS IMPORT: adjusting link_mtu to 1562
Dec 29 18:24:25 openvpn-cli[466]: TUN/TAP device tun0 opened
Dec 29 18:24:25 openvpn-cli[466]: TUN/TAP TX queue length set to 100
Dec 29 18:24:25 openvpn-cli[466]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Dec 29 18:24:25 openvpn-cli[466]: /sbin/ifconfig tun0 192.168.106.10 netmask 255.255.248.0 mtu 1500 broadcast 192.168.111.255
Dec 29 18:24:25 openvpn-cli[466]: ovpnc.script tun0 1500 1562 192.168.106.10 255.255.248.0 init
Dec 29 18:24:25 dnsmasq[396]: read /etc/hosts - 3 addresses
Dec 29 18:24:25 dnsmasq[396]: read /etc/storage/dnsmasq/hosts - 0 addresses
Dec 29 18:24:25 dnsmasq-dhcp[396]: read /etc/dnsmasq/dhcp/dhcp-hosts.rc
Dec 29 18:24:25 dnsmasq[396]: using nameserver 192.168.104.1#53
Dec 29 18:24:25 vpnc-script: tun0 up
Dec 29 18:24:25 openvpn-cli[466]: /sbin/route add -net 10.224.0.0 netmask 255.254.0.0 gw 192.168.104.1
Dec 29 18:24:25 openvpn-cli[466]: /sbin/route add -net 103.246.200.0 netmask 255.255.252.0 gw 192.168.104.1
Dec 29 18:24:26 openvpn-cli[466]: /sbin/route add -net 178.239.88.0 netmask 255.255.248.0 gw 192.168.104.1
Dec 29 18:24:26 openvpn-cli[466]: /sbin/route add -net 185.104.45.0 netmask 255.255.255.0 gw 192.168.104.1
Dec 29 18:24:26 openvpn-cli[466]: /sbin/route add -net 193.105.213.36 netmask 255.255.255.252 gw 192.168.104.1
Dec 29 18:24:26 openvpn-cli[466]: /sbin/route add -net 203.104.128.0 netmask 255.255.240.0 gw 192.168.104.1
Dec 29 18:24:26 openvpn-cli[466]: /sbin/route add -net 203.104.144.0 netmask 255.255.248.0 gw 192.168.104.1
Dec 29 18:24:26 openvpn-cli[466]: /sbin/route add -net 203.104.152.0 netmask 255.255.252.0 gw 192.168.104.1
Dec 29 18:24:26 openvpn-cli[466]: /sbin/route add -net 68.171.224.0 netmask 255.255.224.0 gw 192.168.104.1
Dec 29 18:24:26 openvpn-cli[466]: /sbin/route add -net 74.82.64.0 netmask 255.255.224.0 gw 192.168.104.1
Dec 29 18:24:26 openvpn-cli[466]: Initialization Sequence Completed
Dec 29 18:24:26 openvpn-cli[466]: Connection reset, restarting [0]
Dec 29 18:24:26 openvpn-cli[466]: TCP/UDP: Closing socket
Dec 29 18:24:26 openvpn-cli[466]: /sbin/route del -net 74.82.64.0 netmask 255.255.224.0
Dec 29 18:24:26 openvpn-cli[466]: /sbin/route del -net 68.171.224.0 netmask 255.255.224.0
Dec 29 18:24:26 openvpn-cli[466]: /sbin/route del -net 203.104.152.0 netmask 255.255.252.0
Dec 29 18:24:26 openvpn-cli[466]: /sbin/route del -net 203.104.144.0 netmask 255.255.248.0
Dec 29 18:24:26 openvpn-cli[466]: /sbin/route del -net 203.104.128.0 netmask 255.255.240.0
Dec 29 18:24:26 openvpn-cli[466]: /sbin/route del -net 193.105.213.36 netmask 255.255.255.252
Dec 29 18:24:26 openvpn-cli[466]: /sbin/route del -net 185.104.45.0 netmask 255.255.255.0
Dec 29 18:24:26 openvpn-cli[466]: /sbin/route del -net 178.239.88.0 netmask 255.255.248.0
Dec 29 18:24:26 openvpn-cli[466]: /sbin/route del -net 103.246.200.0 netmask 255.255.252.0
Dec 29 18:24:26 openvpn-cli[466]: /sbin/route del -net 10.224.0.0 netmask 255.254.0.0
Dec 29 18:24:26 openvpn-cli[466]: Closing TUN/TAP interface
Dec 29 18:24:26 openvpn-cli[466]: /sbin/ifconfig tun0 0.0.0.0
Dec 29 18:24:26 openvpn-cli[466]: ovpnc.script tun0 1500 1562 192.168.106.10 255.255.248.0 init
Dec 29 18:24:26 dnsmasq[396]: read /etc/hosts - 3 addresses
Dec 29 18:24:26 dnsmasq[396]: read /etc/storage/dnsmasq/hosts - 0 addresses
Dec 29 18:24:26 dnsmasq-dhcp[396]: read /etc/dnsmasq/dhcp/dhcp-hosts.rc
Dec 29 18:24:26 dnsmasq[396]: using nameserver 88.147.129.17#53
Dec 29 18:24:26 dnsmasq[396]: using nameserver 88.147.128.16#53
Dec 29 18:24:26 vpnc-script: tun0 down
Dec 29 18:24:26 openvpn-cli[466]: SIGUSR1[soft,connection-reset] received, process restarting
Dec 29 18:24:26 openvpn-cli[466]: Restart pause, 5 second(s)

Пока что вот так, лучше не стало(

dartraiden · December 29, 2023, 6:47pm

В расширенные опции можно добавить ignore-unknown-option block-outside-dns

verb 3 можно убрать, verb 5 имеет приоритет

OpenVPN староват, 2.3… На более свежих версиях должно работать так

Apriori · January 1, 2024, 5:02pm

Спасибо за помощь! По факту я обновил прошивку и всё просто заработало по скриншотам настроек. Но Вам особая благодарность за попытку помочь!

Viper · March 7, 2024, 5:24pm

привіт

скиньте будь ласка посилання на ключі