Hi all, I am a bit new to RouterOS, etc. Two nights ago my RouterOS 6.49.5, RB951G-2HnD stopped allowing external web browsing or pinging to the internet. I have a smart home device (UDI ISY) that is still sending me internet down (ping) reports info via gmail.com and I can reach it from the internet via it’s portal. I can also still access my network from remote with my PPTP VPN on the router. All other router features seem to be fully functional.
I can also attach to the router with Winbox and everything seems normal from my limited perspective. Also I can use Winbox to ping the internet and all internal devices without any issues. I haven’t logged into the router in months, much less changed anything on the router or even on the network in general. I have powered off rebooted many times with no changes and I did a restore of my last backup from 9 months ago. Still no change. I have also plugged my laptop directly into the router switch and it still can’t browse the internet or ping outside. All inside local connections are working as expected.
I am using the wireless feature on the RB and it’s connections show the same problems. Nothing in the logs area seem to indicate a problem.
I am lost at where to start or look for the issue. Any suggestions? I am about to the point of pulling out my old dd-wrt router out and reinstalling it!
Hiw about creating text export of full config and post it here for review? Open terminal window, execute /export file=anynameyouwish, fetch it off router, open it in text editor, redact sensitive information (serial number, public IP addresses, wifi passwords, etc.) and copy-paste it inside [__code] [/code] blick (the icon in button bar above post editing window).
Additional updates, also sorry for the long delays, my posts have to be approved first before you can see them. Hopefully that is not forever.
After posting the original item last night and after 2 days of being down and while waiting another 12 hours waiting for approval to post, I was desperate to try some troubleshooting. There was one “default” rule in my firewall rules list that I was concerned about. It drops incoming packets that originated externally on the wan port.
So I disabled it. Immediately things started working and the logs window started showing inbound “attacks” using telnet. But I ran a few ping tests and web browsing attempts and it was all working. So I reenabled the rule to stop the inbound attempts. They stopped in the logs immediately, but the pinging and web browsing did not stop and continued to work.
But I noticed in the continuous pings to 8.8.8.8 I would get 4-8 second gaps of packet loss every few minutes, clearly in blocks and not random losses. Still it was better than it was. I had to go on a video conference for a couple of hours. About every 3-5 minutes, my connection would break and after about 15-30 seconds it would reconnect, almost like clockwork.
This morning after checking the continuous ping test, it appears during the night that the ping losses stopped and now everything seems to be running as normal.
Again, the only thing I did concerning the network troubles last night was to disable and reenable that one rule, nothing else, no reboots or anything.
My probable next step would be to update my RouterOS. I am running about a year old version. Any other suggestions are welcome.
Try to check RAM and CPU usage when device misbehaves. Also check connection tracking list for number of active connections.
The firewall filter ruleset could be improved IMHO … have a look at defaults, it might inspire you (execute /system default-config print in a really wide terminal window).
And a last-resort notice: sometimes devices develop some weird behaviour which can not be explained by visible configuration. Often the problem is solved by resetting to factory default and re-applying previous config (config has to be exported to text file, using binary backup doesn’t help), if that doesn’t help netinstall (and re-configuring) does.
I believe the threshold to bypass mandatory moderation is 3 approved posts, which is why your latest post didn’t require moderator approval.
another 12 hours waiting for approval to post
I was the one to approve the initial post in this thread, with a 5 hour 18 minute delay. As many moderators as there now are, I was surprised it was even that long. More than once, I’ve been looking into a post’s details to decide if it’s kosher and have had the decision taken out of my hands by another mod who decided to approve it before I could.
Your second and third posts in this thread were approved by another of the mods, back-to-back, which means that despite the 20 minute gap between you posting them, the moderation delays were different, at 4 hours and 46 minutes for the second post and 4:26 for the third.
So no, not “12 hours.” Please don’t exaggerate. We have logs.
