Logdrop chain missing recently

Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking
Author Message
inetquestion
DD-WRT User


Joined: 24 Sep 2015
Posts: 67

PostPosted: Sun Mar 05, 2023 3:06    Post subject: Logdrop chain missing recently Reply with quote
Currently running: DD-WRT v3.0-r51935 std (03/04/23)

A few weeks ago, noticed the logdrop chain was missing and added it back manually. Since then found the prior feature which blocked brute force for ssh/etc is no longer working either. I've had to down grade to a version where I found all this to be working (51440).

Questions:
- Was this broken in error?
- Did something changed and I need to do something different?
- Is anyone working to resolve this already?
Sponsor
dale_gribble39
DD-WRT Guru


Joined: 11 Jun 2022
Posts: 1927

PostPosted: Sun Mar 05, 2023 3:54    Post subject: Reply with quote
Are you sure you didn't break something in your configs? For me, 'cat /var/log/messages | grep DROP' yields a lot of entries to *not* be working. Guess we'll sound the alarm and take cover from nuclear fallout anyway.
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12877
Location: Netherlands

PostPosted: Sun Mar 05, 2023 8:43    Post subject: Reply with quote
Clear Browser cache (CTRL+F5) and check your settings
_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
inetquestion
DD-WRT User


Joined: 24 Sep 2015
Posts: 67

PostPosted: Sun Mar 05, 2023 12:39    Post subject: Reply with quote
Without changing any settings, can switch between the two version mentioned and one has the logdrop chain, the other doesn't. Something changed between those two dates. How this relates to browser cache is unclear if not improbable.
dale_gribble39
DD-WRT Guru


Joined: 11 Jun 2022
Posts: 1927

PostPosted: Sun Mar 05, 2023 18:20    Post subject: Reply with quote
Given the nature of this community, if this was an all-inclusive bug or issue, there would be tons of "me, too" comments in this thread already. Only way to disprove whether it's a settings issue or not is to do a hard reset and configure from scratch, but the example I've already given is on a device that has not been reset since DD-WRT was initially installed, and that pre-dates the builds described.
_________________
"The woods are lovely, dark and deep,
But I have promises to keep,
And miles to go before I sleep,
And miles to go before I sleep." - Robert Frost

"I am one of the noticeable ones - notice me" - Dale Frances McKenzie Bozzio

<fact>code knows no gender</fact>

This is me, knowing I've ruffled your feathers, and not giving a ****
Some people are still hard-headed.

--------------------------------------
Mac Pro (Mid 2012) - Two 2.4GHz 6-Core Intel Xeon E5645 processors 64GB 1333MHz DDR3 ECC SDRAM OpenSUSE Leap 15.5
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12877
Location: Netherlands

PostPosted: Mon Mar 06, 2023 10:05    Post subject: Reply with quote
I just did a quick check to see if there has been a regression but the logging works on my router (EA6900 build 51937)

So I would advise you to clear your browser cache and check your settings Smile

and yes my advice is given because settings have changed (otherwise I would not have given this advice Wink ) and you might not see the changes if the browser cache is not cleared.

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087


Last edited by egc on Mon Mar 06, 2023 16:16; edited 1 time in total
inetquestion
DD-WRT User


Joined: 24 Sep 2015
Posts: 67

PostPosted: Mon Mar 06, 2023 16:15    Post subject: Reply with quote
Testing via SSH...
Why would logdrop chain be missing on a fresh install?



ssh xxx@yyy
DD-WRT v3.0-r51935 std (c) 2023 NewMedia-NET GmbH
Release: 03/04/23
Board: Linksys WRT3200ACM

BusyBox v1.36.0 (2023-03-04 04:16:24 +07) built-in shell (ash)

xxx@yyy:~# iptables -L -n -v | grep -i logdrop

<...Nothing...>
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12877
Location: Netherlands

PostPosted: Mon Mar 06, 2023 16:18    Post subject: Reply with quote
It is not on by default on a fresh install (fresh as reset to defaults).

You have to enable it and set the right log level (Medium or High) on the Security Tab.

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12877
Location: Netherlands

PostPosted: Mon Mar 06, 2023 16:23    Post subject: Reply with quote
SSH disabled:
root@EA6900:~# nvram get log_level
0
root@EA6900:~# nvram get log_enable
0
root@EA6900:~#

To enable set both to 1 and after that restart the firewall::
restart firewall
Quote:
root@EA6900:~# nvram set log_enable=1
root@EA6900:~# nvram set log_level=1
root@EA6900:~# restart firewall
root@EA6900:~# iptables -vnL | grep log
0 0 logdrop icmp -- vlan2 * 0.0.0.0/0 0.0.0.0/0
0 0 logdrop 2 -- vlan2 * 0.0.0.0/0 0.0.0.0/0
18 2842 logdrop all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 logdrop all -- * * 0.0.0.0/0 0.0.0.0/0
Chain logaccept (0 references)
Chain logdrop (4 references)
Chain logreject (0 references)
root@EA6900:~#

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum