1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Loosing connection with net and gateway on "device list"

Discussion in 'Tomato Firmware' started by eRd12, Sep 1, 2008.

  1. eRd12

    eRd12 LI Guru Member

    Hi I have such problem, that my connection stops for couple of seconds. Sites doesn't load and net goes I don't know but not to me :biggrin:

    I found that the mac address of ISP gateway is usually shown on "device list", but when the internet goes off, this string is dissappearing. Maybe someone know what it can be? Is this problem with the provider or maybe with the router?
     
  2. kevanj

    kevanj LI Guru Member

    What model router? Is it a combo router/modem, or do you have a seperate modem? If the MAC address for the ISP is disappearing from the device list, it could be a problem anywhere from the WAN interface on the router, through the cabling to the ISP. If you have a seperate modem, does the modem lose connectivity (usually has an LED to indicate Internet connectivity which might go off if the modem is losing signal from the ISP). If your modem loses connectivity, there is a good chance the problem is in the cabling coming from the ISP. Can you have them check to see if your connection is showing any signs of problems?
     
  3. eRd12

    eRd12 LI Guru Member

    I have WRT54GL and it is connected to the modem in bridge mode. When occurs the disconnect lights on my modem are ok (it isn't loosing synchro). I was connecting other modem in bridge mode and it was the same. I will check cables going to the modem.
     
  4. kevanj

    kevanj LI Guru Member

    Yep, could be the WAN interface on the router that is failing, or a bad cable between the modem and the router, OR the ethernet interface (connected to the router) on the modem that is failing.
     
  5. eRd12

    eRd12 LI Guru Member

    So the cable is not wrong (checked, changed), modem was changed (the same was happening).
    I think it is problem with the router, because when I connected my pc straight to the modem everything was ok (no lost of packets etc.).
     
  6. eRd12

    eRd12 LI Guru Member

    It is virus attack - many inbound connection on ports 12234 and 48284 I tried this firewall script but it didn't help much:

    iptables -I FORWARD -p udp -m mport --dport 6348,12234,48284 -j DROP
    iptables -I FORWARD -p tcp -m mport --dport 6348,12234,48284 -j DROP

    do you know any other solutions?
     
  7. kevanj

    kevanj LI Guru Member

    Clone the MAC on your router WAN interface to make it the same as your PC...it looks like when you connect your PC directly to the modem the attacks go away, probably because you get a different IP from your ISP. Changeing the WAN MAC address will cause the WAN IP to change, and the bad guys will probably not know where to find you. You may want to check your network for an infected machine though. It's possible you have a zombie that has been advertising your IP address as available to it's homebase. If that is the case, changing your MAC/IP will only work until the zombie 'phones home' again
     
  8. eRd12

    eRd12 LI Guru Member

    The main problem is that I have static IP :) So the solution can't be so straight. I'll try to block these ports by ISP or change my modem to router mode, maybe it will help.
     

Share This Page