Маршруты

pppppppo_98 · Четверг в 19:16

Мне кто нибуль модет объяснить что здесь происходит

ip -ts -o -c monitor route
[2026-09-24T21:49:33.499035] 2001:db8:: dev br0 table 4096 metric 1000 pref medium
[2026-09-24T21:49:33.500878] Deleted 2001:db8:: dev br0 table 4096 metric 1000 pref medium
[2026-09-24T21:49:33.727077] 2001:db8:: dev br1 table 4096 metric 1000 pref medium
[2026-09-24T21:49:33.728831] Deleted 2001:db8:: dev br1 table 4096 metric 1000 pref medium
[2026-09-24T21:49:58.534348] 2001:db8:: dev br0 table 4096 metric 1000 pref medium
[2026-09-24T21:49:58.536179] Deleted 2001:db8:: dev br0 table 4096 metric 1000 pref medium
[2026-09-24T21:49:58.762443] 2001:db8:: dev br1 table 4096 metric 1000 pref medium
[2026-09-24T21:49:58.764220] Deleted 2001:db8:: dev br1 table 4096 metric 1000 pref medium
[2026-09-24T21:50:23.570219] 2001:db8:: dev br0 table 4096 metric 1000 pref medium
[2026-09-24T21:50:23.572032] Deleted 2001:db8:: dev br0 table 4096 metric 1000 pref medium
[2026-09-24T21:50:23.798321] 2001:db8:: dev br1 table 4096 metric 1000 pref medium
[2026-09-24T21:50:23.800099] Deleted 2001:db8:: dev br1 table 4096 metric 1000 pref medium
==================================
[2026-09-24T21:55:38.283624] Deleted default via 10.76.0.1 dev eth3 metric 1000
[2026-09-24T21:55:38.283714] default via 10.76.0.1 dev eth3 metric 1000
[2026-09-24T21:55:38.284090] Deleted default via 10.76.0.1 dev eth3 table 16386 src 10.76.37.100 metric 1000
[2026-09-24T21:55:38.284134] Deleted 10.73.27.0/24 dev awg0 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.284152] Deleted 10.76.0.0/16 dev eth3 table 16386 scope link src 10.76.37.100 metric 1000
[2026-09-24T21:55:38.284174] Deleted 10.76.0.0/16 dev eth3 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.284200] Deleted 10.107.6.0/24 dev awg2 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.284226] Deleted 10.107.7.0/24 dev br1 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.284256] Deleted 172.27.0.192 via 10.73.27.146 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.284285] Deleted 172.27.5.0/24 via 10.73.27.146 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.284311] Deleted 192.168.7.0/24 dev awg0 table 16386 scope link metric 1000
[2026-09-24T21:55:38.284338] Deleted 192.168.18.0/24 dev br0 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.284364] Deleted 192.168.100.0/24 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.284392] Deleted 192.168.101.128/28 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.284418] Deleted 192.168.153.0/24 via 10.73.27.198 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.284451] Deleted 192.168.223.0/30 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.284483] Deleted 192.168.224.0/24 dev awg0 table 16386 scope link metric 1000
[2026-09-24T21:55:38.285391] 192.168.224.0/24 dev awg0 table 16386 scope link metric 1000
[2026-09-24T21:55:38.285419] 192.168.223.0/30 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.285455] 192.168.153.0/24 via 10.73.27.198 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.285487] 192.168.101.128/28 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.285515] 192.168.100.0/24 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.285544] 192.168.18.0/24 dev br0 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.285573] 192.168.7.0/24 dev awg0 table 16386 scope link metric 1000
[2026-09-24T21:55:38.285603] 172.27.5.0/24 via 10.73.27.146 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.285631] 172.27.0.192 via 10.73.27.146 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.285664] 10.107.7.0/24 dev br1 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.285694] 10.107.6.0/24 dev awg2 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.285721] 10.76.0.0/16 dev eth3 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.285749] 10.73.27.0/24 dev awg0 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.285785] 10.76.0.0/16 dev eth3 table 16386 scope link src 10.76.37.100 metric 1000
[2026-09-24T21:55:38.285813] default via 10.76.0.1 dev eth3 table 16386 src 10.76.37.100 metric 1000
[2026-09-24T21:55:38.484055] Deleted default via 10.76.0.1 dev eth3 table 16386 src 10.76.37.100 metric 1000
[2026-09-24T21:55:38.484151] Deleted 10.73.27.0/24 dev awg0 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.484169] Deleted 10.76.0.0/16 dev eth3 table 16386 scope link src 10.76.37.100 metric 1000
[2026-09-24T21:55:38.484182] Deleted 10.76.0.0/16 dev eth3 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.484193] Deleted 10.107.6.0/24 dev awg2 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.484203] Deleted 10.107.7.0/24 dev br1 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.484229] Deleted 172.27.0.192 via 10.73.27.146 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.484386] Deleted 172.27.5.0/24 via 10.73.27.146 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.484412] Deleted 192.168.7.0/24 dev awg0 table 16386 scope link metric 1000
[2026-09-24T21:55:38.484427] Deleted 192.168.18.0/24 dev br0 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.484443] Deleted 192.168.100.0/24 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.484455] Deleted 192.168.101.128/28 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.484466] Deleted 192.168.153.0/24 via 10.73.27.198 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.484476] Deleted 192.168.223.0/30 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.484486] Deleted 192.168.224.0/24 dev awg0 table 16386 scope link metric 1000
[2026-09-24T21:55:38.484745] 192.168.224.0/24 dev awg0 table 16386 scope link metric 1000
[2026-09-24T21:55:38.484778] 192.168.223.0/30 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.484818] 192.168.153.0/24 via 10.73.27.198 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.484855] 192.168.101.128/28 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.484889] 192.168.100.0/24 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.484924] 192.168.18.0/24 dev br0 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.484959] 192.168.7.0/24 dev awg0 table 16386 scope link metric 1000
[2026-09-24T21:55:38.484994] 172.27.5.0/24 via 10.73.27.146 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.485029] 172.27.0.192 via 10.73.27.146 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.485066] 10.107.7.0/24 dev br1 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.485099] 10.107.6.0/24 dev awg2 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.485133] 10.76.0.0/16 dev eth3 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.485165] 10.73.27.0/24 dev awg0 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.485204] 10.76.0.0/16 dev eth3 table 16386 scope link src 10.76.37.100 metric 1000
[2026-09-24T21:55:38.485240] default via 10.76.0.1 dev eth3 table 16386 src 10.76.37.100 metric 1000

=====================================
[2026-09-24T21:55:49.036668] 2001:db8:: dev br0 table 4096 metric 1000 pref medium
[2026-09-24T21:55:49.038547] Deleted 2001:db8:: dev br0 table 4096 metric 1000 pref medium
[2026-09-24T21:55:49.264761] 2001:db8:: dev br1 table 4096 metric 1000 pref medium
[2026-09-24T21:55:49.266585] Deleted 2001:db8:: dev br1 table 4096 metric 1000 pref medium

1.Почему раз в 25 секунд добавояется и тут же убирается на интерфейсах локальной сети какой-то левый маршрут.
2. зачем 2 раз подряд удаляются и снова уставлива.тся все маршруты в таблице main?

Denis P · Четверг в 19:24

7 минут назад, pppppppo_98 сказал:

Мне кто нибуль модет объяснить что здесь происходит

ip -ts -o -c monitor route
[2026-09-24T21:49:33.499035] 2001:db8:: dev br0 table 4096 metric 1000 pref medium
[2026-09-24T21:49:33.500878] Deleted 2001:db8:: dev br0 table 4096 metric 1000 pref medium
[2026-09-24T21:49:33.727077] 2001:db8:: dev br1 table 4096 metric 1000 pref medium
[2026-09-24T21:49:33.728831] Deleted 2001:db8:: dev br1 table 4096 metric 1000 pref medium
[2026-09-24T21:49:58.534348] 2001:db8:: dev br0 table 4096 metric 1000 pref medium
[2026-09-24T21:49:58.536179] Deleted 2001:db8:: dev br0 table 4096 metric 1000 pref medium
[2026-09-24T21:49:58.762443] 2001:db8:: dev br1 table 4096 metric 1000 pref medium
[2026-09-24T21:49:58.764220] Deleted 2001:db8:: dev br1 table 4096 metric 1000 pref medium
[2026-09-24T21:50:23.570219] 2001:db8:: dev br0 table 4096 metric 1000 pref medium
[2026-09-24T21:50:23.572032] Deleted 2001:db8:: dev br0 table 4096 metric 1000 pref medium
[2026-09-24T21:50:23.798321] 2001:db8:: dev br1 table 4096 metric 1000 pref medium
[2026-09-24T21:50:23.800099] Deleted 2001:db8:: dev br1 table 4096 metric 1000 pref medium
==================================
[2026-09-24T21:55:38.283624] Deleted default via 10.76.0.1 dev eth3 metric 1000
[2026-09-24T21:55:38.283714] default via 10.76.0.1 dev eth3 metric 1000
[2026-09-24T21:55:38.284090] Deleted default via 10.76.0.1 dev eth3 table 16386 src 10.76.37.100 metric 1000
[2026-09-24T21:55:38.284134] Deleted 10.73.27.0/24 dev awg0 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.284152] Deleted 10.76.0.0/16 dev eth3 table 16386 scope link src 10.76.37.100 metric 1000
[2026-09-24T21:55:38.284174] Deleted 10.76.0.0/16 dev eth3 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.284200] Deleted 10.107.6.0/24 dev awg2 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.284226] Deleted 10.107.7.0/24 dev br1 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.284256] Deleted 172.27.0.192 via 10.73.27.146 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.284285] Deleted 172.27.5.0/24 via 10.73.27.146 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.284311] Deleted 192.168.7.0/24 dev awg0 table 16386 scope link metric 1000
[2026-09-24T21:55:38.284338] Deleted 192.168.18.0/24 dev br0 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.284364] Deleted 192.168.100.0/24 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.284392] Deleted 192.168.101.128/28 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.284418] Deleted 192.168.153.0/24 via 10.73.27.198 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.284451] Deleted 192.168.223.0/30 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.284483] Deleted 192.168.224.0/24 dev awg0 table 16386 scope link metric 1000
[2026-09-24T21:55:38.285391] 192.168.224.0/24 dev awg0 table 16386 scope link metric 1000
[2026-09-24T21:55:38.285419] 192.168.223.0/30 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.285455] 192.168.153.0/24 via 10.73.27.198 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.285487] 192.168.101.128/28 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.285515] 192.168.100.0/24 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.285544] 192.168.18.0/24 dev br0 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.285573] 192.168.7.0/24 dev awg0 table 16386 scope link metric 1000
[2026-09-24T21:55:38.285603] 172.27.5.0/24 via 10.73.27.146 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.285631] 172.27.0.192 via 10.73.27.146 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.285664] 10.107.7.0/24 dev br1 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.285694] 10.107.6.0/24 dev awg2 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.285721] 10.76.0.0/16 dev eth3 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.285749] 10.73.27.0/24 dev awg0 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.285785] 10.76.0.0/16 dev eth3 table 16386 scope link src 10.76.37.100 metric 1000
[2026-09-24T21:55:38.285813] default via 10.76.0.1 dev eth3 table 16386 src 10.76.37.100 metric 1000
[2026-09-24T21:55:38.484055] Deleted default via 10.76.0.1 dev eth3 table 16386 src 10.76.37.100 metric 1000
[2026-09-24T21:55:38.484151] Deleted 10.73.27.0/24 dev awg0 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.484169] Deleted 10.76.0.0/16 dev eth3 table 16386 scope link src 10.76.37.100 metric 1000
[2026-09-24T21:55:38.484182] Deleted 10.76.0.0/16 dev eth3 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.484193] Deleted 10.107.6.0/24 dev awg2 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.484203] Deleted 10.107.7.0/24 dev br1 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.484229] Deleted 172.27.0.192 via 10.73.27.146 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.484386] Deleted 172.27.5.0/24 via 10.73.27.146 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.484412] Deleted 192.168.7.0/24 dev awg0 table 16386 scope link metric 1000
[2026-09-24T21:55:38.484427] Deleted 192.168.18.0/24 dev br0 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.484443] Deleted 192.168.100.0/24 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.484455] Deleted 192.168.101.128/28 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.484466] Deleted 192.168.153.0/24 via 10.73.27.198 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.484476] Deleted 192.168.223.0/30 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.484486] Deleted 192.168.224.0/24 dev awg0 table 16386 scope link metric 1000
[2026-09-24T21:55:38.484745] 192.168.224.0/24 dev awg0 table 16386 scope link metric 1000
[2026-09-24T21:55:38.484778] 192.168.223.0/30 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.484818] 192.168.153.0/24 via 10.73.27.198 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.484855] 192.168.101.128/28 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.484889] 192.168.100.0/24 dev awg1 table 16386 scope link metric 1000
[2026-09-24T21:55:38.484924] 192.168.18.0/24 dev br0 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.484959] 192.168.7.0/24 dev awg0 table 16386 scope link metric 1000
[2026-09-24T21:55:38.484994] 172.27.5.0/24 via 10.73.27.146 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.485029] 172.27.0.192 via 10.73.27.146 dev awg0 table 16386 metric 1000
[2026-09-24T21:55:38.485066] 10.107.7.0/24 dev br1 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.485099] 10.107.6.0/24 dev awg2 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.485133] 10.76.0.0/16 dev eth3 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.485165] 10.73.27.0/24 dev awg0 table 16386 proto kernel scope link metric 1000
[2026-09-24T21:55:38.485204] 10.76.0.0/16 dev eth3 table 16386 scope link src 10.76.37.100 metric 1000
[2026-09-24T21:55:38.485240] default via 10.76.0.1 dev eth3 table 16386 src 10.76.37.100 metric 1000

=====================================
[2026-09-24T21:55:49.036668] 2001:db8:: dev br0 table 4096 metric 1000 pref medium
[2026-09-24T21:55:49.038547] Deleted 2001:db8:: dev br0 table 4096 metric 1000 pref medium
[2026-09-24T21:55:49.264761] 2001:db8:: dev br1 table 4096 metric 1000 pref medium
[2026-09-24T21:55:49.266585] Deleted 2001:db8:: dev br1 table 4096 metric 1000 pref medium

1.Почему раз в 25 секунд добавояется и тут же убирается на интерфейсах локальной сети какой-то левый маршрут.
2. зачем 2 раз подряд удаляются и снова уставлива.тся все маршруты в таблице main?

Снесите все пакеты из entware, задайте вопрос ещё раз.

pppppppo_98 · Четверг в 19:42

10 минут назад, Denis P сказал:

Снесите все пакеты из entware, задайте вопрос ещё раз.

зачем? Это что проблем ентваре? я его посавил неделю назад... постоянный снос маршрутов... Таблицв main кстати раз в полчасаи дважды очмщается

ну частично понятно

I [Sep 24 22:25:38] ndhcpc: GigabitEthernet1: received ACK for 10.76.37.100
from 10.76.0.1 lease 3600 sec.
I [Sep 24 22:25:38] ndm: Opkg::Manager: /opt/etc/ndm/netfilter.d/firewall.sh:

а этот момент и происходит очищение таблицы main

Denis P · Четверг в 20:22

1 час назад, pppppppo_98 сказал:

dev awg0

как минимум этот интерфейс не из коробки
и скриптик
/opt/etc/ndm/netfilter.d/firewall.sh:
по этому копать сначала в эту сторону

Изменено Четверг в 20:25 пользователем Denis P

pppppppo_98 · Пятница в 06:18

cat /opt/etc/ndm/netfilter.d/firewall.sh
#!/opt/bin/sh
. /opt/etc/netenv
add_firewall_chain () {
   local TYPE=$1
local TABLE=$2
local ADD=$3
local CHAIN
local FILTER
local ACTION
if [ "${TABLE}" == "filter" ]; then
TABLE=""
else
TABLE="-t ${TABLE}"
fi
   if [ "${ADD}" == "append" ]; then
CHAIN=$4
ADD="-A ${CHAIN}"
FILTER=$5
ACTION=$6
else
CHAIN=$5
ADD="-I ${CHAIN} ${4}"
FILTER=$6
ACTION=$7
fi
   CHECKCOMMAND="${TYPE} ${TABLE} -C ${CHAIN} ${FILTER} ${ACTION}"
   ADDCOMMAND="${TYPE} ${TABLE} ${ADD} ${FILTER} ${ACTION}"
   $CHECKCOMMAND || $ADDCOMMAND
}

if [ "${table}" == "filter" ]; then
   if [ "${type}" == "iptables" ];
   then
       #Accept ssh from all interface
       CHAIN="_NDM_INPUT"; FILTER="-p tcp --dport ${PORTSSH} -m state --state NEW"; ACTION="-j ACCEPT"
       add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

       #Accept wireguard/amneziawg from all interface
FILTER="-p udp --dport ${PORTAMN1}"; ACTION="-j ACCEPT"
       add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-p udp --dport ${PORTAMN0}"; ACTION="-j ACCEPT"
add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-p udp --dport ${PORTAMN2}"; ACTION="-j ACCEPT"
add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-p udp --dport ${PORTWG0}"; ACTION="-j ACCEPT"
add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

       #Accept incoming vpn traffic
       CHAIN="_NDM_ACL_IN"; FILTER="-i ${DEVAMN1}"; ACTION="-j ACCEPT"
       add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

       FILTER="-i ${DEVAMN0}"; ACTION="-j ACCEPT"
       add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-i ${DEVAMN2}"; ACTION="-j ACCEPT"
add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-i ${DEVWG0}"; ACTION="-j ACCEPT"
add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

       #Accept outgoing vpn traffic
       CHAIN="_NDM_ACL_OUT"; FILTER="-o ${DEVAMN1}"; ACTION="-j ACCEPT"
       add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-o ${DEVAMN0}"; ACTION="-j ACCEPT"
add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-o ${DEVAMN2}"; ACTION="-j ACCEPT"
add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-o ${DEVWG0}"; ACTION="-j ACCEPT"
add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

   #   FILTER="-o !${DEVAMN} -s ${NATED_SUBNET}"
   #   ACTION="-j DROP"
   #   iptables -C $CHAIN $FILTER $ACTION || iptables -A $CHAIN $FILTER $ACTION
       exit 0
   fi

   #Accept ssh from all interface
   CHAIN="_NDM_INPUT"; FILTER="-p tcp --dport ${PORTSSH} -m state --state NEW"; ACTION="-j ACCEPT"
   add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

   #Accept wireguard/amneziawg from all interface
   FILTER="-p udp --dport ${PORTAMN1}"; ACTION="-j ACCEPT"
   add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-p udp --dport ${PORTAMN0}"; ACTION="-j ACCEPT"
   add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-p udp --dport ${PORTAMN2}"; ACTION="-j ACCEPT"
add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-p udp --dport ${PORTWG0}"; ACTION="-j ACCEPT"
add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

   #Accept incoming vpn traffic
   CHAIN="_NDM_ACL_IN"; FILTER="-i ${DEVAMN1}"; ACTION="-j ACCEPT"
   add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

   FILTER="-i ${DEVAMN0}"; ACTION="-j ACCEPT"
   add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-i ${DEVAMN2}"; ACTION="-j ACCEPT"
add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-i ${DEVWG0}"; ACTION="-j ACCEPT"
add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

   #Accept outgoing vpn traffic
   CHAIN="_NDM_ACL_OUT"; FILTER="-o ${DEVAMN1}"; ACTION="-j ACCEPT"
   add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-o ${DEVAMN0}"; ACTION="-j ACCEPT"
add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-o ${DEVAMN2}"; ACTION="-j ACCEPT"
add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-o ${DEVWG0}"; ACTION="-j ACCEPT"
add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

   #Accept forwarding VPNs traffic
   CHAIN="_NDM_DELEGATED_FORWARD"; FILTER="-i ${DEVAMN1}"; ACTION="-j ACCEPT"
   add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-o ${DEVAMN1}"; ACTION="-j ACCEPT"
   add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

   FILTER="-i ${DEVAMN0}"; ACTION="-j ACCEPT"
   add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-o ${DEVAMN0}"; ACTION="-j ACCEPT"
   add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

   FILTER="-i ${DEVAMN2}"; ACTION="-j ACCEPT"
   add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-o ${DEVAMN2}"; ACTION="-j ACCEPT"
   add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

   FILTER="-i ${DEVWG0}"; ACTION="-j ACCEPT"
   add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-o ${DEVWG0}"; ACTION="-j ACCEPT"
   add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

   #Accept inconing connection for internal interfsces
   FILTER="-i ${DEVWAN} -m state --state NEW -s 2000::/3"; ACTION="-j ACCEPT"
   add_firewall_chain ${type} ${table} append "${CHAIN}" "${FILTER}" "${ACTION}"

   exit 0
elif [ "${table}" == "nat" ]; then
   if [ "$type" == "iptables" ]; then

       CHAIN="_NDM_MASQ"; FILTER="-s ${KHEST4NET2} -o ${DEVWAN}"; ACTION="-j MASQUERADE"
       add_firewall_chain ${type} ${table} insert 1 "${CHAIN}" "${FILTER}" "${ACTION}"

       #No (internal) masquarade to my home traffic to VPNs
      CHAIN="POSTROUTING"; FILTER="-s ${HLAN4NET} -o ${DEVAMN1}"; ACTION="-j RETURN"
       add_firewall_chain ${type} ${table} insert 1 "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-s ${HLAN4NET} -o ${DEVAMN0}"
add_firewall_chain ${type} ${table} insert 2 "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-s ${NATED4NET1} -o ${DEVAMN1}"
add_firewall_chain ${type} ${table} insert 3 "${CHAIN}" "${FILTER}" "${ACTION}"

FILTER="-s ${NATED4NET1} -o ${DEVAMN0}"
add_firewall_chain ${type} ${table} insert 4 "${CHAIN}" "${FILTER}" "${ACTION}"


       FILTER="-s ${KHEST4NET2} -o ${DEVLAN}"
       add_firewall_chain ${type} ${table} insert 5 "${CHAIN}" "${FILTER}" "${ACTION}"
fi
elif [ "$table" == "mangle" ]; then
   if [ "$type" == "iptables" ]; then
       #Clamp mss foreign traffic trough VPN
       CHAIN="FORWARD"; FILTER="-i ${DEVLAN1} -o ${DEVAMN2} -s ${NATED4NET1} -p tcp --tcp-flags SYN,RST SYN"; ACTION="-j TCPMSS --clamp-mss-to-pmtu"
       add_firewall_chain ${type} ${table} insert 1 "${CHAIN}" "${FILTER}" "${ACTION}"
   fi
fi

В /opt/etc/netenv каждой переменной присваивается значение. Я не вижу здесь ничего такого что бы перегружало всю таблицу маршрутизации кроме самого события

[Sep 24 22:25:38] ndhcpc: GigabitEthernet1: received ACK for 10.76.37.100
from 10.76.0.1 lease 3600 sec.
иии это недает никакой информации зачем раз в 25 секун добавлять и удалять маршрут

pppppppo_98 · Пятница в 06:24

если есть интерес то еще вот так

ls -l /opt/etc/init.d/
-rwxr-xr-x 1 root root 749 Feb 13 2026 K51dropbear
-rwxr-xr-x 1 root root 240 Feb 14 2026 K70bird
-rwxr--r-- 1 root root 884 Sep 14 12:43 S00conf
-rwxr-xr-x 1 root root 232 Mar 15 2026 S10cron
-rwxr-xr-x 1 root root 735 Mar 16 2026 S40sshd
-rwxr-xr-x 1 root root 189 May 24 2025 S50atd
-rw-r--r-- 1 root root 2842 May 24 2025 rc.func
-rwxr-xr-x 1 root root 950 May 24 2025 rc.unslung

но bird в состоянии K а не S ака не запущен

ps w
PID USER VSZ STAT COMMAND
1 root 1080 S init
2 root 0 SW [kthreadd]
3 root 0 SW [kworker/0:0]
4 root 0 SW< [kworker/0:0H]
6 root 0 SW [ksoftirqd/0]
7 root 0 SW [rcu_sched]
8 root 0 SW [rcu_bh]
9 root 0 SW [migration/0]
10 root 0 SW< [lru-add-drain]
11 root 0 SW [cpuhp/0]
12 root 0 SW [cpuhp/1]
13 root 0 SW [migration/1]
14 root 0 SW [ksoftirqd/1]
16 root 0 SW< [kworker/1:0H]
17 root 0 SW [cpuhp/2]
18 root 0 SW [migration/2]
19 root 0 SW [ksoftirqd/2]
21 root 0 SW< [kworker/2:0H]
161 root 0 SW [oom_reaper]
162 root 0 SW< [writeback]
164 root 0 SW< [crypto]
165 root 0 SW< [bioset]
167 root 0 SW< [kblockd]
239 root 0 SW [kswapd0]
241 root 0 SW< [vmstat]
335 root 0 SW [hwrng]
339 root 0 SW [spi32766]
346 root 0 SW< [bioset]
352 root 0 SW< [bioset]
357 root 0 SW< [bioset]
362 root 0 SW< [bioset]
367 root 0 SW< [bioset]
372 root 0 SW< [bioset]
377 root 0 SW< [bioset]
382 root 0 SW< [bioset]
387 root 0 SW< [bioset]
392 root 0 SW< [bioset]
397 root 0 SW< [bioset]
402 root 0 SW< [bioset]
407 root 0 SW< [bioset]
412 root 0 SW< [bioset]
417 root 0 SW< [bioset]
422 root 0 SW< [bioset]
427 root 0 SW< [bioset]
432 root 0 SW< [bioset]
458 root 0 SW [cfinteractive]
471 root 0 SW< [ipv6_addrconf]
481 root 0 SW< [kworker/1:1H]
482 root 0 SW< [kworker/0:1H]
483 root 0 SW< [kworker/2:1H]
484 root 50224 S ndm
490 root 0 SW [kworker/0:2]
533 root 0 SW< [bioset]
536 root 0 SW< [bioset]
539 root 0 SW< [bioset]
542 root 0 SW< [bioset]
545 root 0 SW< [bioset]
548 root 0 SW< [bioset]
551 root 0 SW< [bioset]
554 root 0 SW< [bioset]
569 root 0 SW< [bioset]
656 root 0 SW< [uas]
672 root 2256 S /usr/sbin/ndnproxy -c /var/ndnproxymain.conf -p /var/ndnproxymain.pid -f /var/ndnproxyhostmap.conf -s /va
674 root 0 SW [irq/111-mt7988-]
675 root 0 SW [irq/121-mt7988-]
676 root 0 SW [irq/29-mt7988-p]
677 root 0 SW [irq/118-eth_mis]
682 root 0 SW [ser_mngr]
683 root 0 SW [warp]
684 root 0 SW [wed_task0]
705 root 0 SW [HwCtrlTask_0]
706 root 0 SW [DeviceTask_0]
707 root 0 SW< [ph_dev_wq_0]
715 root 0 SW [ubi_bgt0d]
716 root 0 SW [ubifs_bgt0_0]
718 root 0 SW [psimon]
720 root 0 SW< [bioset]
723 root 5384 S /bin/wind -b br0 -i ra0 -i rai0 -k ********************************
724 root 1380 S /usr/sbin/telnetd -l ndmc -p 23 -c /var/telnetd.conf -F
725 root 1428 S /bin/mtkiappd -e br0 -wi ra0 -wi rai0 -k ********************************
726 root 1140 S /bin/bndstrg -d 0 -c /var/run/bndstrg-br0.conf
731 root 0 SW [scsi_eh_0]
732 root 0 SW< [scsi_tmf_0]
733 root 0 SW [usb-storage]
736 root 1428 S /bin/mtkiappd -e br1 -wi ra1 -wi rai1 -k ********************************
737 root 5384 S /bin/wind -b br1 -i ra1 -i rai1 -k ********************************
738 root 1112 S /usr/sbin/odhcp6c -s /var/dhcp6c/script -p /var/run/dhcp6c.pid-br1 -f -a -N none -P 0 br1
740 root 1164 S /usr/sbin/radvd -n -m syslog -C /var/run/radvd.conf -p /var/run/radvd.pid -d 0
741 root 1164 S /usr/sbin/radvd -n -m syslog -C /var/run/radvd.conf -p /var/run/radvd.pid -d 0
742 root 1480 S /sbin/ndhcps -f -s -i br0 -I Bridge0 -m 192.168.18.32 -P name:_WEBADMIN,192.168.18.64,192.168.18.127,255.
743 root 1480 S /sbin/ndhcps -f -s -i br1 -I Bridge1 -m 10.107.7.12 -P name:_WEBADMIN_GUEST_AP,10.107.7.33,10.107.7.152,2
748 root 0 SW< [bioset]
749 root 1112 S /usr/sbin/odhcp6c -s /var/dhcp6c/script -p /var/run/dhcp6c.pid-br0 -f -a -N none -P 0 br0
752 root 0 SW [RtmpCmdQTask_00]
753 root 0 SW [RtmpWscTask_00]
754 root 0 SW [BPCCCmdQTask_00]
755 root 0 SW [ser_task_00]
756 root 0 SW [RtmpMlmeTask_00]
758 root 0 SW [RtmpCmdQTask_01]
759 root 0 SW [RtmpWscTask_01]
760 root 0 SW [BPCCCmdQTask_01]
761 root 0 SW [ser_task_01]
762 root 0 SW [RtmpMlmeTask_01]
764 root 19312 S nginx: master process /usr/sbin/nginx -e /dev/null
772 root 1464 S /sbin/ndhcpc -f -n GigabitEthernet1 -i eth3 -s /var/run/ndhcpc-eth3 -p /var/run/ndhcpc-eth3.pid -H Netcra
773 root 1112 S /usr/sbin/odhcp6c -s /var/dhcp6c/script -p /var/run/dhcp6c.pid-eth3 -f -a -P 0 eth3
775 root 0 SW [jbd2/sda1-8]
776 root 0 SW< [ext4-rsv-conver]
793 root 5084 S cron -s
800 root 9512 S sshd: /opt/sbin/sshd [listener] 0 of 10-100 startups
807 nobody 2480 S atd
962 root 0 SW< [wg-crypt-nwg0]
964 root 6376 S /bin/coalagent -c c18f6832-15ca-11f1-9396-d5758d29734d -C /var/coalagent.conf -s /var/run/coalagent-feedb
1231 nobody 19892 S nginx: worker process
1232 nobody 19892 S nginx: worker process
1233 nobody 19892 S nginx: worker process
1235 nobody 1372 S /usr/sbin/nllda -I Bridge0 -p Home -M xx:xx:xx:xx:xx:xx -x 32 -n Netcraze-9350 -D Netcraze Ultra (NDMS 5.
1236 nobody 1372 S /usr/sbin/nlldo -u nobody -a 32
1333 root 0 SW< [wg-crypt-awg0]
1449 root 0 SW< [wg-crypt-awg2]
12165 root 0 SW< [wg-crypt-awg1]
24610 root 0 SW [kworker/1:1]
24666 root 0 SW [kworker/u6:1]
24709 root 0 SW [kworker/2:0]
25459 root 0 SW [kworker/u6:3]
25489 root 3452 S /usr/sbin/dhcpd -f -6 -cf /var/run/dhcp6d.conf-br0 -pf /var/run/dhcp6d.pid-br0 -lf /var/run/dhcp6d.leases
25490 root 2864 S /usr/sbin/dhcpd -f -6 -cf /var/run/dhcp6d.conf-br1 -pf /var/run/dhcp6d.pid-br1 -lf /var/run/dhcp6d.leases
25514 root 9992 S sshd-session: root [priv]
25516 root 10388 R sshd-session: root@pts/0
25517 root 3372 S -sh
25519 root 0 SW [kworker/2:1]
25533 root 0 SW [kworker/1:0]
25599 root 0 SW [kworker/2:2]
25661 root 0 SW [kworker/u6:0]
25676 root 3372 R ps w

Mamay · Суббота в 05:05

Учитесь скрывать под спойлер свои простыни.

Войти

Маршруты

Вопрос

pppppppo_98

6 ответов на этот вопрос

Рекомендуемые сообщения

Denis P

pppppppo_98

Denis P

pppppppo_98

pppppppo_98

Mamay

Присоединяйтесь к обсуждению

Последние посетители 0 пользователей онлайн

Обзор

Активность

Магазин

My Details

Важная информация