Ok ik ervaar al een tijdje problemen met mijn iptv. Nu moet ik zeggen dat ik ook qosify gebruik en ik vermoed dat qosify iets doet dat mijn netwerk niet leuk vind. Toch vraag ik me af of ik iets verkeerd doe. Wanneer ik de openwrt router reboot, moet ikĀ in ssh route intypen en kijken of de gateway niet is veranderd. Zo ja dan moet ik de gateway ip veranderen in het netwerk config en een service network reload doen. Hebben hier meer mensen laat van. Dit is overigens gedrag dat voor qosify ook al was. Maar na qosify merk ik dat wanneer ik een app open op de tv omtvanger, dat mijn iptv internet eraf wordt geknikkerd.Ā
Ā
Dit is mijn network config en firewall config.Ā
Network config:
config interface 'loopback'
Ā Ā Ā Ā option device 'lo'
Ā Ā Ā Ā option proto 'static'
Ā Ā Ā Ā option ipaddr '127.0.0.1'
Ā Ā Ā Ā option netmask '255.0.0.0'
config globals 'globals'
Ā Ā Ā Ā option packet_steering '1'
config device
Ā Ā Ā Ā option name 'br-lan'
Ā Ā Ā Ā option type 'bridge'
Ā Ā Ā Ā list ports 'eth0'
Ā Ā Ā Ā list ports 'eth3'
Ā Ā Ā Ā option igmp_snooping '1'
Ā Ā Ā Ā option stp '1'
config interface 'lan'
Ā Ā Ā Ā option device 'br-lan'
Ā Ā Ā Ā option proto 'static'
Ā Ā Ā Ā option netmask '255.255.255.0'
Ā Ā Ā Ā option ipaddr '192.168.1.1'
Ā Ā Ā Ā option ip6assign '60'
config interface 'wan'
Ā Ā Ā Ā option proto 'pppoe'
Ā Ā Ā Ā option username 'xxx@internet'
Ā Ā Ā Ā option password 'ppp'
Ā Ā Ā Ā option device 'eth1.6'
Ā Ā Ā Ā option ipv6 '0'
Ā Ā Ā Ā option mtu '1500'
config interface 'wan6'
Ā Ā Ā Ā option proto 'dhcpv6'
Ā Ā Ā Ā option device '@wan'
Ā Ā Ā Ā option reqaddress 'try'
Ā Ā Ā Ā option reqprefix 'auto'
config device
Ā Ā Ā Ā option name 'eth1'
Ā Ā Ā Ā option mtu '1508'
config device
Ā Ā Ā Ā option name 'eth1.6'
Ā Ā Ā Ā option type '8021q'
Ā Ā Ā Ā option ifname 'eth1'
Ā Ā Ā Ā option vid '6'
config device
Ā Ā Ā Ā option name 'eth1.4'
Ā Ā Ā Ā option type '8021q'
Ā Ā Ā Ā option ifname 'eth1'
Ā Ā Ā Ā option vid '4'
Ā Ā Ā Ā option ipv6 '0'
Ā Ā Ā Ā option mtu '1500'
config interface 'IPTV_wan'
Ā Ā Ā Ā option proto 'dhcp'
Ā Ā Ā Ā option delegate '0'
Ā Ā Ā Ā option defaultroute '0'
Ā Ā Ā Ā option peerdns '0'
Ā Ā Ā Ā option vendorid 'IPTV_RG'
Ā Ā Ā Ā option device 'eth1.4'
Ā Ā Ā Ā option ipv6 '0'
config route
Ā Ā Ā Ā option interface 'IPTV_WAN'
Ā Ā Ā Ā option target '213.75.112.0/21'
Ā Ā Ā Ā option gateway '10.180.188.1'
config device
Ā Ā Ā Ā option name 'eth0'
config device
Ā Ā Ā Ā option name 'eth3'
Ā
Firewall config:
config defaults
Ā Ā Ā Ā option input 'REJECT'
Ā Ā Ā Ā option output 'ACCEPT'
Ā Ā Ā Ā option forward 'REJECT'
Ā Ā Ā Ā option synflood_protect '1'
config zone
Ā Ā Ā Ā option name 'lan'
Ā Ā Ā Ā option input 'ACCEPT'
Ā Ā Ā Ā option output 'ACCEPT'
Ā Ā Ā Ā option forward 'ACCEPT'
Ā Ā Ā Ā list network 'lan'
config zone
Ā Ā Ā Ā option name 'wan'
Ā Ā Ā Ā option input 'REJECT'
Ā Ā Ā Ā option output 'ACCEPT'
Ā Ā Ā Ā option forward 'REJECT'
Ā Ā Ā Ā option masq '1'
Ā Ā Ā Ā list network 'wan'
Ā Ā Ā Ā list network 'wan6'
config forwarding
Ā Ā Ā Ā option src 'lan'
Ā Ā Ā Ā option dest 'wan'
config rule
Ā Ā Ā Ā option name 'Allow-DHCP-Renew'
Ā Ā Ā Ā option src 'wan'
Ā Ā Ā Ā option proto 'udp'
Ā Ā Ā Ā option dest_port '68'
Ā Ā Ā Ā option target 'ACCEPT'
Ā Ā Ā Ā option family 'ipv4'
config rule
Ā Ā Ā Ā option name 'Allow-Ping'
Ā Ā Ā Ā option src 'wan'
Ā Ā Ā Ā option proto 'icmp'
Ā Ā Ā Ā option icmp_type 'echo-request'
Ā Ā Ā Ā option family 'ipv4'
Ā Ā Ā Ā option target 'ACCEPT'
config rule
Ā Ā Ā Ā option name 'Allow-IGMP'
Ā Ā Ā Ā option src 'wan'
Ā Ā Ā Ā option proto 'igmp'
Ā Ā Ā Ā option family 'ipv4'
Ā Ā Ā Ā option target 'ACCEPT'
config rule
Ā Ā Ā Ā option name 'Allow-DHCPv6'
Ā Ā Ā Ā option src 'wan'
Ā Ā Ā Ā option proto 'udp'
Ā Ā Ā Ā option dest_port '546'
Ā Ā Ā Ā option family 'ipv6'
Ā Ā Ā Ā option target 'ACCEPT'
config rule
Ā Ā Ā Ā option name 'Allow-MLD'
Ā Ā Ā Ā option src 'wan'
Ā Ā Ā Ā option proto 'icmp'
Ā Ā Ā Ā option src_ip 'fe80::/10'
Ā Ā Ā Ā list icmp_type '130/0'
Ā Ā Ā Ā list icmp_type '131/0'
Ā Ā Ā Ā list icmp_type '132/0'
Ā Ā Ā Ā list icmp_type '143/0'
Ā Ā Ā Ā option family 'ipv6'
Ā Ā Ā Ā option target 'ACCEPT'
config rule
Ā Ā Ā Ā option name 'Allow-ICMPv6-Input'
Ā Ā Ā Ā option src 'wan'
Ā Ā Ā Ā option proto 'icmp'
Ā Ā Ā Ā list icmp_type 'echo-request'
Ā Ā Ā Ā list icmp_type 'echo-reply'
Ā Ā Ā Ā list icmp_type 'destination-unreachable'
Ā Ā Ā Ā list icmp_type 'packet-too-big'
Ā Ā Ā Ā list icmp_type 'time-exceeded'
Ā Ā Ā Ā list icmp_type 'bad-header'
Ā Ā Ā Ā list icmp_type 'unknown-header-type'
Ā Ā Ā Ā list icmp_type 'router-solicitation'
Ā Ā Ā Ā list icmp_type 'neighbour-solicitation'
Ā Ā Ā Ā list icmp_type 'router-advertisement'
Ā Ā Ā Ā list icmp_type 'neighbour-advertisement'
Ā Ā Ā Ā option limit '1000/sec'
Ā Ā Ā Ā option family 'ipv6'
Ā Ā Ā Ā option target 'ACCEPT'
config rule
Ā Ā Ā Ā option name 'Allow-ICMPv6-Forward'
Ā Ā Ā Ā option src 'wan'
Ā Ā Ā Ā option dest '*'
Ā Ā Ā Ā option proto 'icmp'
Ā Ā Ā Ā list icmp_type 'echo-request'
Ā Ā Ā Ā list icmp_type 'echo-reply'
Ā Ā Ā Ā list icmp_type 'destination-unreachable'
Ā Ā Ā Ā list icmp_type 'packet-too-big'
Ā Ā Ā Ā list icmp_type 'time-exceeded'
Ā Ā Ā Ā list icmp_type 'bad-header'
Ā Ā Ā Ā list icmp_type 'unknown-header-type'
Ā Ā Ā Ā option limit '1000/sec'
Ā Ā Ā Ā option family 'ipv6'
Ā Ā Ā Ā option target 'ACCEPT'
config rule
Ā Ā Ā Ā option name 'Allow-IPSec-ESP'
Ā Ā Ā Ā option src 'wan'
Ā Ā Ā Ā option dest 'lan'
Ā Ā Ā Ā option proto 'esp'
Ā Ā Ā Ā option target 'ACCEPT'
config rule
Ā Ā Ā Ā option name 'Allow-ISAKMP'
Ā Ā Ā Ā option src 'wan'
Ā Ā Ā Ā option dest 'lan'
Ā Ā Ā Ā option dest_port '500'
Ā Ā Ā Ā option proto 'udp'
Ā Ā Ā Ā option target 'ACCEPT'
config zone
Ā Ā Ā Ā option name IPTV_WAN
Ā Ā Ā Ā option input ACCEPT
Ā Ā Ā Ā option forward REJECT
Ā Ā Ā Ā option output ACCEPT
Ā Ā Ā Ā option network IPTV_WAN
Ā Ā Ā Ā option masq 1
config forwarding
Ā Ā Ā Ā option dest IPTV_WAN
Ā Ā Ā Ā option src lan
config rule
Ā Ā Ā Ā option name Allow-IGMP-Proxy
Ā Ā Ā Ā option proto udp
Ā Ā Ā Ā option family ipv4
Ā Ā Ā Ā option target ACCEPT
Ā Ā Ā Ā option dest_ip 224.0.0.0/4
Ā Ā Ā Ā option dest lan
Ā Ā Ā Ā option src IPTV_WAN
config rule
Ā Ā Ā Ā option name 'Allow-IGMP-From-LAN'
Ā Ā Ā Ā option src 'lan'
Ā Ā Ā Ā option proto 'igmp'
Ā Ā Ā Ā option family 'ipv4'
Ā Ā Ā Ā option target 'ACCEPT'
config rule
Ā Ā Ā Ā option name 'Allow-MLD-From-LAN'
Ā Ā Ā Ā option src 'lan'
Ā Ā Ā Ā option proto 'icmp'
Ā Ā Ā Ā option src_ip 'fe80::/10'
Ā Ā Ā Ā list icmp_type '130/0'
Ā Ā Ā Ā list icmp_type '131/0'
Ā Ā Ā Ā list icmp_type '132/0'
Ā Ā Ā Ā list icmp_type '143/0'
Ā Ā Ā Ā option family 'ipv6'
Ā Ā Ā Ā option target 'ACCEPT'
config rule
Ā Ā Ā Ā option name 'Allow-ICMPv6-Input-From-LAN'
Ā Ā Ā Ā option src 'lan'
Ā Ā Ā Ā option proto 'icmp'
Ā Ā Ā Ā list icmp_type 'echo-request'
Ā Ā Ā Ā list icmp_type 'echo-reply'
Ā Ā Ā Ā list icmp_type 'destination-unreachable'
Ā Ā Ā Ā list icmp_type 'packet-too-big'
Ā Ā Ā Ā list icmp_type 'time-exceeded'
Ā Ā Ā Ā list icmp_type 'bad-header'
Ā Ā Ā Ā list icmp_type 'unknown-header-type'
Ā Ā Ā Ā list icmp_type 'router-solicitation'
Ā Ā Ā Ā list icmp_type 'neighbour-solicitation'
Ā Ā Ā Ā list icmp_type 'router-advertisement'
Ā Ā Ā Ā list icmp_type 'neighbour-advertisement'
Ā Ā Ā Ā option limit '1000/sec'
Ā Ā Ā Ā option family 'ipv6'
Ā Ā Ā Ā option target 'ACCEPT'
config rule
Ā Ā Ā Ā option name 'Allow-ICMPv6-Forward-From-LAN'
Ā Ā Ā Ā option src 'lan'
Ā Ā Ā Ā option dest '*'
Ā Ā Ā Ā option proto 'icmp'
Ā Ā Ā Ā list icmp_type 'echo-request'
Ā Ā Ā Ā list icmp_type 'echo-reply'
Ā Ā Ā Ā list icmp_type 'destination-unreachable'
Ā Ā Ā Ā list icmp_type 'packet-too-big'
Ā Ā Ā Ā list icmp_type 'time-exceeded'
Ā Ā Ā Ā list icmp_type 'bad-header'
Ā Ā Ā Ā list icmp_type 'unknown-header-type'
Ā Ā Ā Ā option limit '1000/sec'
Ā Ā Ā Ā option family 'ipv6'
Ā Ā Ā Ā option target 'ACCEPT'