- 19
- 7
- 2
- 19
- 7
- 2
- 1813
- 2481
- 104
- 19
- 7
- 2
@BORAXnapisał(-a)mając Funbox 3.0 musisz aplikować w konfiguracji każdego urządzenia adres DNS. Funbox ze względów między innymi bezpieczeństwa nie zezwala na ich zmianę na poziomie routera
W routerze mam na sztywno to co wszyscy a w linuxie chcialbym docelowo DNS over TLS
W pierwszej chwili nie poszedł TLS zrywał połączenie więc sprawdziłem na prostrzym przypadku ... no i jest grubo 
Raz ustawiłem na funbox 3 dns over tls działał tylko przez weekend ale internet chodził nieporównywalnie szybciej niż dziś
To już jest któryś funbox3 z kolei i na tym nie moge za wiele podziałać ... patrz wyżej 
- 22
- 25
- 3
- 19
- 7
- 2
jest mały progress chociaż u mnie traceroute dla 1.1.1.1 pokazuje droge do cloudflare
próba zestawienia połączenia DNS over TLS kończy się timeeoutem
włączam funbox robię dig wp.pl gdy lampki się wyszumią - tym razem DNS over TLS na 9.9.9.9
1 0.000000 192.168.1.1 → 224.0.0.1 IGMPv2 62 Membership Query, general 2 4.381446 127.0.0.1 → 127.0.0.1 UDP 90 48692 → 48884 Len=46 3 4.381616 $$$LAPTOP-IP → 9.9.9.9 TCP 80 45404 → 853 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 TSval=2039067141 TSecr=0 WS=128 TFO=R 4 4.409813 9.9.9.9 → $$$LAPTOP-IP TCP 76 853 → 45404 [SYN, ACK] Seq=0 Ack=1 Win=28960 Len=0 MSS=1460 TSval=3959142448 TSecr=2039067141 WS=256 5 4.409891 $$$LAPTOP-IP → 9.9.9.9 TCP 68 45404 → 853 [ACK] Seq=1 Ack=1 Win=64256 Len=0 TSval=2039067170 TSecr=3959142448 6 4.410154 $$$LAPTOP-IP → 9.9.9.9 TLSv1 337 Client Hello 7 4.438175 9.9.9.9 → $$$LAPTOP-IP TCP 68 853 → 45404 [ACK] Seq=1 Ack=270 Win=30208 Len=0 TSval=3959142476 TSecr=2039067170 8 4.438798 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 2964 Server Hello, Change Cipher Spec, Application Data, Application Data 9 4.438842 $$$LAPTOP-IP → 9.9.9.9 TCP 68 45404 → 853 [ACK] Seq=270 Ack=2897 Win=63488 Len=0 TSval=2039067199 TSecr=3959142477 10 4.438849 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 176 Application Data, Application Data 11 4.438869 $$$LAPTOP-IP → 9.9.9.9 TCP 68 45404 → 853 [ACK] Seq=270 Ack=3005 Win=63488 Len=0 TSval=2039067199 TSecr=3959142478 12 4.441657 $$$LAPTOP-IP → 9.9.9.9 TLSv1.3 148 Change Cipher Spec, Application Data 13 4.472296 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 307 Application Data 14 4.472345 $$$LAPTOP-IP → 9.9.9.9 TLSv1.3 220 Application Data 15 4.472687 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 307 Application Data 16 4.502255 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 142 Application Data 17 4.502365 $$$LAPTOP-IP → 9.9.9.9 TCP 68 45404 → 853 [ACK] Seq=502 Ack=3557 Win=64128 Len=0 TSval=2039067262 TSecr=3959142511 18 4.502458 $$$LAPTOP-IP → 9.9.9.9 TLSv1.3 220 Application Data 19 4.533065 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 1231 Application Data 20 4.533122 $$$LAPTOP-IP → 9.9.9.9 TLSv1.3 676 Application Data, Application Data, Application Data, Application Data 21 4.564526 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 1147 Application Data 22 4.565333 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 458 Application Data 23 4.565375 $$$LAPTOP-IP → 9.9.9.9 TCP 68 45404 → 853 [ACK] Seq=1262 Ack=6189 Win=64128 Len=0 TSval=2039067325 TSecr=3959142602 24 4.618445 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 182 Application Data 25 4.620618 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 848 Application Data 26 4.620731 $$$LAPTOP-IP → 9.9.9.9 TCP 68 45404 → 853 [ACK] Seq=1262 Ack=7083 Win=64128 Len=0 TSval=2039067380 TSecr=3959142656 27 7.289015 $$$LAPTOP-IP → 172.217.16.3 TCP 68 46282 → 443 [ACK] Seq=1 Ack=1 Win=501 Len=0 TSval=1480267360 TSecr=2798955943 28 9.382040 127.0.0.1 → 127.0.0.1 UDP 90 48692 → 48884 Len=46 29 9.382274 $$$LAPTOP-IP → 9.9.9.9 TLSv1.3 220 Application Data 30 9.411252 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 142 Application Data 31 9.411460 $$$LAPTOP-IP → 9.9.9.9 TLSv1.3 220 Application Data 32 9.412765 Sagemcom_$$$FUNBOX-MAC → ARP 62 Who has $$$LAPTOP-IP? Tell 192.168.1.1 33 9.412812 WistronI_$$$LAPTOP-MAC → ARP 44 $$$LAPTOP-IP is at $$$LAPTOP-MAC 34 9.441008 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 1231 Application Data 35 9.441090 $$$LAPTOP-IP → 9.9.9.9 TLSv1.3 676 Application Data, Application Data, Application Data, Application Data 36 9.470441 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 1147 Application Data 37 9.470509 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 458 Application Data 38 9.470539 $$$LAPTOP-IP → 9.9.9.9 TCP 68 45404 → 853 [ACK] Seq=2174 Ack=9789 Win=64128 Len=0 TSval=2039072230 TSecr=3959147508 39 9.470543 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 182 Application Data 40 9.470549 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 848 Application Data 41 9.470658 $$$LAPTOP-IP → 9.9.9.9 TCP 68 45404 → 853 [ACK] Seq=2174 Ack=10683 Win=64128 Len=0 TSval=2039072230 TSecr=3959147509 42 10.033248 Sagemcom_$$$FUNBOX-MAC → HomePlug 62 MAC Management 43 14.161557 198.252.206.25 → $$$LAPTOP-IP TLSv1.2 129 Application Data 44 14.382757 127.0.0.1 → 127.0.0.1 UDP 90 48692 → 48884 Len=46 45 14.382977 $$$LAPTOP-IP → 9.9.9.9 TLSv1.3 220 Application Data 46 14.450653 9.9.9.9 → $$$LAPTOP-IP TCP 68 853 → 45404 [ACK] Seq=10683 Ack=2326 Win=38400 Len=0 TSval=3959152489 TSecr=2039077143 47 14.463028 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 142 Application Data 48 14.463205 $$$LAPTOP-IP → 9.9.9.9 TLSv1.3 220 Application Data 49 14.491295 9.9.9.9 → $$$LAPTOP-IP TCP 68 853 → 45404 [ACK] Seq=10757 Ack=2478 Win=39680 Len=0 TSval=3959152529 TSecr=2039077223 50 14.491372 $$$LAPTOP-IP → 9.9.9.9 TLSv1.3 676 Application Data, Application Data, Application Data, Application Data 51 14.491379 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 1231 Application Data 52 14.521243 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 1147 Application Data 53 14.521295 $$$LAPTOP-IP → 9.9.9.9 TCP 68 45404 → 853 [ACK] Seq=3086 Ack=12999 Win=64128 Len=0 TSval=2039077281 TSecr=3959152530 54 14.521298 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 458 Application Data 55 14.521306 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 182 Application Data 56 14.521313 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 848 Application Data 57 14.521409 $$$LAPTOP-IP → 9.9.9.9 TCP 68 45404 → 853 [ACK] Seq=3086 Ack=14283 Win=64128 Len=0 TSval=2039077281 TSecr=3959152560 58 23.673029 $$$LAPTOP-IP → 198.252.206.25 TCP 68 43944 → 443 [ACK] Seq=0 Ack=1 Win=501 Len=0 TSval=1520445039 TSecr=2276464594 59 23.785180 198.252.206.25 → $$$LAPTOP-IP TCP 68 [TCP ****** ACK 43#1] [TCP ACKed unseen segment] 443 → 43944 [ACK] Seq=62 Ack=1 Win=61 Len=0 TSval=2276829079 TSecr=1519849778 60 24.531686 $$$LAPTOP-IP → 9.9.9.9 TLSv1.3 92 Application Data 61 24.531734 $$$LAPTOP-IP → 9.9.9.9 TCP 68 45404 → 853 [FIN, ACK] Seq=3110 Ack=14283 Win=64128 Len=0 TSval=2039087291 TSecr=3959152560 62 24.559861 9.9.9.9 → $$$LAPTOP-IP TLSv1.3 92 Application Data 63 24.559940 $$$LAPTOP-IP → 9.9.9.9 TCP 56 45404 → 853 [RST] Seq=3111 Win=0 Len=0 64 24.559948 9.9.9.9 → $$$LAPTOP-IP TCP 68 853 → 45404 [FIN, ACK] Seq=14307 Ack=3111 Win=40704 Len=0 TSval=3959162598 TSecr=2039087291 65 24.559971 $$$LAPTOP-IP → 9.9.9.9 TCP 56 45404 → 853 [RST] Seq=3111 Win=0 Len=0 66 28.281033 $$$LAPTOP-IP → 46.101.120.188 TCP 68 45404 → 443 [ACK] Seq=1 Ack=1 Win=9136 Len=0 TSval=3040152852 TSecr=3219099768 67 28.311694 46.101.120.188 → $$$LAPTOP-IP TCP 68 [TCP ACKed unseen segment] 443 → 45404 [ACK] Seq=1 Ack=2 Win=692 Len=0 TSval=3219111028 TSecr=3040107838
zauważyłem że porty mimo że są otwarte w regułach wykazywane są jako zamknięte
nmap -p 80,443,22,53,853,9418 $$$ROUTER-PUB-IP Starting Nmap 7.70 ( https://nmap.org ) at 2019-09-25 14:13 CEST Nmap scan report for $$$ROUTER-PUB-IP.ipv4.supernova.orange.pl ($$$ROUTER-PUB-IP) Host is up (0.0016s latency). PORT STATE SERVICE 22/tcp filtered ssh 53/tcp filtered domain 80/tcp open http 443/tcp open https 853/tcp filtered domain-s 9418/tcp filtered git Nmap done: 1 IP address (1 host up) scanned in 1.26 seconds ➜ ~ nmap -p 80,443,22,53,853,9418 192.168.1.1 Starting Nmap 7.70 ( https://nmap.org ) at 2019-09-25 14:13 CEST Nmap scan report for 192.168.1.1 Host is up (0.0013s latency). PORT STATE SERVICE 22/tcp filtered ssh 53/tcp filtered domain 80/tcp open http 443/tcp open https 853/tcp filtered domain-s 9418/tcp filtered git Nmap done: 1 IP address (1 host up) scanned in 1.25 seconds
z tego jak wygląda ruch sieciowy wnioskuje że wszytkie porty są otwarte poza 853 nmap mówi co innego
sytuacja bliźniacza do mojego posta "FunBox 3.0 saegem... firewall "odrzuc" ... nie odrzuca"
tyle że teraz jest "akceptuj" wciąż blokuje 
poprzednio skończyło się na wymianie urządzenia... co teraz ? 
