Ask
Reply
Solution
28-09-2023 12:59 PM
I have recently moved home and have signed up for Vodafone Fibre.
Since it's been installed, I've been experiencing connection drop outs several times an hour.
When these drop outs occur, my PC is still connected to the router but all pings timeout and the browser/games/etc. behave like the PC is offline. Other devices are unaffected.
I am still diagnosing but I have a suspicion the drop outs may be due to being connected via Google One VPN.
Does Vodafone have any issues with Google One VPN?
03-10-2023 12:16 AM
I have some further info to try to diagnose these infrequent drop outs...
I'm now pretty certain the issue isn't to do with the VPN as I've experienced the same drop outs several times with the VPN switched off.
I've also extracted the router logs from the time of the drop outs:
Date Time Category Severity Log Details
02.10.2023 22:18:27 system Error Failed to send DHCPV6 message to ff02::1:2 (Permission denied)
02.10.2023 22:18:26 system Warning 2023/10/02 22:18:25 [warn] 6610#0: *74800 [lua] session.lua:103: changeUser(): changing user to vodafone
02.10.2023 22:18:20 system Error 2023/10/02 22:18:20 [error] 6610#0: *74800 [lua] sessionmgr.lua:262: redirectIfNotAuthorized(): Unauthorized request
02.10.2023 22:18:20 system Error 2023/10/02 22:18:20 [error] 6610#0: *74800 [lua] sessionmgr.lua:262: redirectIfNotAuthorized(): Unauthorized request
02.10.2023 22:18:20 system Warning 2023/10/02 22:18:20 [warn] 6610#0: *74800 [lua] session.lua:354: new(): new session for default user
02.10.2023 22:18:12 firewall Warning [385736.568765] DROP wan in: IN=pppoe-wan OUT= MAC= src=79.124.62.86 DST=<MYIP> LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=11602 PROTO=TCP SPT=42797 DPT=63289 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000
02.10.2023 22:18:09 lan Info DHCPACK(br-lan) 192.168.1.74 <MYMACADDRESS>
02.10.2023 22:18:09 lan Info DHCPREQUEST(br-lan) 192.168.1.74 <MYMACADDRESS>
02.10.2023 22:18:09 data Notice Added new STA to monitor [<MYMACADDRESS>]
02.10.2023 22:18:09 system Warning [385733.342837] br-lan: received packet on wl1 with own address as source address
02.10.2023 22:18:09 lan Info Probing device <MYMACADDRESS> IP address 192.168.1.74 on interface br-lan
02.10.2023 22:18:09 data Notice Deleting STA from monitor [<MYMACADDRESS>]
Date Time Category Severity Log Details
03.10.2023 00:09:02 system Error Failed to send DHCPV6 message to ff02::1:2 (Permission denied)
03.10.2023 00:08:09 firewall Warning [392333.103882] DROP wan in: IN=pppoe-wan OUT= MAC= src=185.224.128.17 DST=<MYIP> LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=54321 PROTO=TCP SPT=53742 DPT=8118 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
03.10.2023 00:07:53 system Warning 2023/10/03 00:07:53 [warn] 6610#0: *76295 [lua] session.lua:103: changeUser(): changing user to vodafone
03.10.2023 00:07:51 system Warning 2023/10/03 00:07:51 [warn] 6610#0: *76295 [lua] session.lua:354: new(): new session for default user
03.10.2023 00:07:21 firewall Warning [392285.697322] DROP wan in: IN=pppoe-wan OUT= MAC= src=125.246.98.153 DST=<MYIP> LEN=36 TOS=0x00 PREC=0x00 TTL=54 ID=16233 DF PROTO=UDP SPT=10226 DPT=123 LEN=16 MARK=0x8000000
03.10.2023 00:06:52 system Error Failed to send DHCPV6 message to ff02::1:2 (Permission denied)
Does any of this provide any clues?
03-10-2023 07:04 AM
Indeed, it answers your enquiry. The VPN is trying to use IPv6. Vodafone don't provide IPv6.
03-10-2023 02:19 PM
@Ripshod I think we already mentioned that 😁
03-10-2023 02:33 PM
VPN was actually off when these logs were taken.
03-10-2023 02:36 PM
I've found these router settings. Should IPv6 be switched off here?
03-10-2023 02:38 PM
@jamesl1001 We have to wait until the image has been moderated.
03-10-2023 04:43 PM
I think you should be able to see it now?
(These are the default settings, so I'd be surprised if this is causing the drop outs, otherwise everyone would be having the same issue.)
03-10-2023 05:54 PM
@jamesl1001 Images still hidden.
03-10-2023 06:05 PM
The mods are never very quick at moderating images, If you want us to see them quicker you will need to use a 3rd party image sharing site.
03-10-2023 02:42 PM
@jamesl1001 You can ignore the ones containing "DROP wan in: " because that's the firewall doing its job protecting you. If you're bored you can lookup the SRC ip-address and see where the intrusion is coming from. For example 125.246.98.153 is in South Korea and has been previously reported port scanning and brute force attacks.