I am currently running into two issues. 1) I cannot get domain policy to work. and 2) I cannot get remote-port policy to work. If I do a policy on just an IP/IP range, it seems fine.
Version info
root@OpenWrt:~# opkg list-installed | grep policy
luci-app-openvpn-policy-routing - git-17.080.69173-773734e27-4
openvpn-policy-routing - 4.1.4-21
For the domain policy
opkg update; opkg remove dnsmasq; opkg install ipset iptables dnsmasq-full
Package ipset (6.24-1) installed in root is up to date.
Package iptables (1.4.21-2) installed in root is up to date.
Package dnsmasq-full (2.76-1) installed in root is up to date.
I go to domains, and I have this as my "Domains Policies"
/whatismyipaddress.com/hulu.com/netflix.com/wanroute
Netflix still prevents me, and the whatiymyipaddress still shows my VPN IP.
As for my remote-port based policy.
Basically, I have remote ports 1001-65535 set to WAN for my local desktop. Some things, like EC2 instances, properly work with my WAN ip if I set my security group /firewall settings to allow my WAN IP. But stuff like Teamspeak and Steam, seem to still be using my VPN IP. I am not sure where this might be comming from.
One example, with my VPN on, my steam speeds are slow because of my VPN provider for whatever reason. It slowls builds up. But when I turn off my VPN, my speeds sky rocket. VPN provider issue aside, Steam is supposed to be using the following ports.
All of these should be included in my broad IP selection of 1001-65535 to WAN. So I am not sure what the issue is.
I also tried hosting a game server on port 2302, and when people connect, it shows them the VPN IP, so it seems my remote-port based routing is not working as intended?
root@OpenWrt:~# opkg list_installed | grep dnsmasq
dnsmasq-full - 2.76-1
root@OpenWrt:~# grep ipset /etc/config/dhcp
list ipset '/hulu.com/netflix.com/nhl.com/whatismyipaddress.com/wanroute'
openvpn-policy-routing file
config openvpn-policy-routing 'config'
option strict_enforcement '1'
option verbosity '2'
option enabled '1'
config domain-policy
list ipset '/hulu.com/netflix.com/wanroute'
list ipset '/whatismyipaddress.com/wanroute'
config policy
option gateway 'wan'
option comment 'FireTV'
option local_addrs '192.168.1.150'
config policy
option gateway 'wan'
option comment 'MyPC-WAN'
option remote_ports '1001-65535'
My DHCP Config
config dnsmasq
option domainneeded '1'
option boguspriv '1'
option filterwin2k '0'
option localise_queries '1'
option rebind_protection '1'
option rebind_localhost '1'
option local '/lan/'
option domain 'lan'
option expandhosts '1'
option nonegcache '0'
option authoritative '1'
option readethers '1'
option leasefile '/tmp/dhcp.leases'
option resolvfile '/tmp/resolv.conf.auto'
option localservice '1'
list ipset '/hulu.com/netflix.com/nhl.com/whatismyipaddress.com/wanroute'
config dhcp 'lan'
option interface 'lan'
option start '100'
option limit '150'
option leasetime '12h'
option dhcpv6 'server'
option ra 'server'
list dhcp_option '6,209.222.18.222,209.222.18.218'
option ra_management '1'
config dhcp 'wan'
option interface 'wan'
option ignore '1'
config odhcpd 'odhcpd'
option maindhcp '0'
option leasefile '/tmp/hosts/odhcpd'
option leasetrigger '/usr/sbin/odhcpd-update'
My DNSMasq config
# auto-generated config file from /etc/config/dhcp
conf-file=/etc/dnsmasq.conf
dhcp-authoritative
domain-needed
localise-queries
read-ethers
bogus-priv
expand-hosts
local-service
domain=lan
server=/lan/
ipset=/hulu.com/netflix.com/nhl.com/whatismyipaddress.com/wanroute
dhcp-leasefile=/tmp/dhcp.leases
resolv-file=/tmp/resolv.conf.auto
stop-dns-rebind
rebind-localhost-ok
dhcp-broadcast=tag:needs-broadcast
addn-hosts=/tmp/hosts
conf-dir=/tmp/dnsmasq.d
user=dnsmasq
group=dnsmasq
dhcp-range=lan,192.168.1.100,192.168.1.249,255.255.255.0,12h
dhcp-option=lan,6,209.222.18.222,209.222.18.218
no-dhcp-interface=br-wan
(Last edited by kocrachon on 31 Mar 2017, 03:20)
