[Dnsmasq-discuss] Problem with OpenWRT + dnsmasq

[Juhani Talvela]

Hi Chris & others,

Thank you very much for offering to help me solve this problem. Here is the /var/etc/dnsmasq.conf file. 

--------------------------------------------------------------------------
# auto-generated config file from /etc/config/dhcp
conf-file=/etc/dnsmasq.conf
dhcp-authoritative
domain-needed
localise-queries
read-ethers
bogus-priv
expand-hosts
domain=lan
server=/lan/
dhcp-leasefile=/tmp/dhcp.leases
resolv-file=/tmp/resolv.conf.auto
stop-dns-rebind
rebind-localhost-ok

dhcp-host=00:24:a5:34:03:70,192.168.24.147, xxxx (name removed)
dhcp-host=00:09:b0:45:72:ab,192.168.1.170, xxxx (name removed)

dhcp-range=lan,192.168.1.100,192.168.1.249,255.255.255.0,12h
no-dhcp-interface=eth
dhcp-range=Lan_NAS,192.168.199.100,192.168.99.249,255.255.255.0,12h
dhcp-range=LAN_WiFi,192.168.124.100,192.168.24.249,255.255.255.0,12h
dhcp-range=LAN_Cam,192.168.254.150,192.168.254.249,255.255.255.0,12h

address=/OpenWrt.lan/192.168.1.1
ptr-record=1.1.168.192.in-addr.arpa,OpenWrt.lan
----------------------------------------------------------------------------------------


And the /tmp/resolv.conf.auto
------------------------------------------------------------------------------------------
# Interface wan
nameserver 193.210.19.190
nameserver 192.89.123.231
search dhcp.inet.fi
------------------------------------------------------------------------------------------


The Kernel log (last N rows)
------------------------------------------------------------------------------------------
[ 4231.700000] nf_conntrack: table full, dropping packet.
[ 4231.710000] nf_conntrack: table full, dropping packet.
[ 4231.740000] nf_conntrack: table full, dropping packet.
[ 4231.740000] nf_conntrack: table full, dropping packet.
[ 4231.750000] nf_conntrack: table full, dropping packet.
[ 4231.760000] nf_conntrack: table full, dropping packet.
[ 4231.760000] nf_conntrack: table full, dropping packet.
[ 4233.080000] nf_conntrack: table full, dropping packet.
[10432.030000] net_ratelimit: 22 callbacks suppressed
[10432.030000] UDP: bad checksum. From 192.89.123.231:53 to my_ip_removed:32381 ulen 2848
[10869.150000] UDP: bad checksum. From 193.210.19.190:53 to my_ip_removed:7097 ulen 2848
[11068.050000] UDP: bad checksum. From 192.89.123.231:53 to my_ip_removed:50403 ulen 3270
[11068.050000] UDP: bad checksum. From 192.89.123.231:53 to my_ip_removed:50403 ulen 3270
[11086.280000] UDP: bad checksum. From 192.89.123.231:53 to my_ip_removed:37315 ulen 3270
[11086.290000] UDP: bad checksum. From 192.89.123.231:53 to my_ip_removed:37315 ulen 3270
[11345.460000] UDP: bad checksum. From 193.210.19.190:53 to my_ip_removed:60894 ulen 3270
[11346.120000] UDP: bad checksum. From 192.89.123.231:53 to my_ip_removed:50453 ulen 3270
[11748.090000] UDP: bad checksum. From 192.89.123.231:53 to my_ip_removed:14924 ulen 1863
[14350.300000] UDP: bad checksum. From 192.89.123.231:53 to my_ip_removed:8713 ulen 2726
[14350.350000] UDP: bad checksum. From 192.89.123.231:53 to my_ip_removed:8713 ulen 2726
[14350.370000] UDP: bad checksum. From 192.89.123.231:53 to my_ip_removed:50185 ulen 2726
[14660.580000] UDP: bad checksum. From 193.210.19.190:53 to my_ip_removed:13469 ulen 2726
------------------------------------------------------------------------------------------


And the System log (these are just few of the many similar lines in the log file).
------------------------------------------------------------------------------------------
Sep 20 16:58:43 OpenWrt kern.warn kernel: [ 4231.740000] nf_conntrack: table full, dropping packet.
Sep 20 16:58:43 OpenWrt kern.warn kernel: [ 4231.750000] nf_conntrack: table full, dropping packet.
Sep 20 16:58:43 OpenWrt kern.warn kernel: [ 4231.760000] nf_conntrack: table full, dropping packet.
Sep 20 16:58:43 OpenWrt kern.warn kernel: [ 4231.760000] nf_conntrack: table full, dropping packet.
Sep 20 16:58:44 OpenWrt kern.warn kernel: [ 4233.080000] nf_conntrack: table full, dropping packet.
Sep 20 18:42:03 OpenWrt kern.warn kernel: [10432.030000] net_ratelimit: 22 callbacks suppressed
Sep 20 18:42:03 OpenWrt kern.debug kernel: [10432.030000] UDP: bad checksum. From 192.89.123.231:53 to my_ip_removed:32381 ulen 2848
Sep 20 18:49:20 OpenWrt kern.debug kernel: [10869.150000] UDP: bad checksum. From 193.210.19.190:53 to my_ip_removed:7097 ulen 2848
Sep 20 18:52:39 OpenWrt kern.debug kernel: [11068.050000] UDP: bad checksum. From 192.89.123.231:53 to my_ip_removed:50403 ulen 3270
------------------------------------------------------------------------------------------

There is a substantial number of unsuccesful login attempts from a Russian IP address. But I guess that is more or less "normal".

I cannot capture data at this time, since I'm not home. Will return there tomorrow afternoon, and get some, then.

Cheers
Juhani




-- 
Juhani Talvela
Research Director, Faculty of Technology and Transport
Kymenlaakso University of Applied Sciences www.kyamk.fi
Tel: +358-447-028-227, Fax: +358-523-024-30