Skip to content

Instantly share code, notes, and snippets.

@laingc
Last active April 16, 2023 05:28
Show Gist options
  • Save laingc/a9aaa970ed763f28f1f35319f21fc8bb to your computer and use it in GitHub Desktop.
Save laingc/a9aaa970ed763f28f1f35319f21fc8bb to your computer and use it in GitHub Desktop.
edgerouter_log_202007261400.txt
firewall {
all-ping enable
broadcast-ping disable
ipv6-receive-redirects disable
ipv6-src-route disable
ip-src-route disable
log-martians enable
name WAN_IN {
default-action drop
description "WAN to internal"
rule 10 {
action accept
description "Allow established/related"
state {
established enable
related enable
}
}
rule 20 {
action accept
description "Wireguard Accept"
destination {
address <<REDACTED_HOME_NETWORK>>.2
port <<REDACTED>>
}
log disable
protocol udp
}
rule 30 {
action drop
description "Drop invalid state"
state {
invalid enable
}
}
}
name WAN_LOCAL {
default-action drop
description "WAN to router"
rule 10 {
action accept
description "Allow established/related"
state {
established enable
related enable
}
}
rule 20 {
action drop
description "Drop invalid state"
state {
invalid enable
}
}
rule 30 {
action accept
description ike
destination {
port 500
}
log disable
protocol udp
}
rule 40 {
action accept
description esp
log disable
protocol esp
}
rule 50 {
action accept
description nat-t
destination {
port 4500
}
log disable
protocol udp
}
rule 60 {
action accept
description l2tp
destination {
port 1701
}
ipsec {
match-ipsec
}
log disable
protocol udp
}
rule 61 {
action accept
description "Wireguard Accept"
destination {
address <<REDACTED_HOME_NETWORK>>.2
port 51820
}
log disable
protocol udp
}
}
options {
mss-clamp {
mss 1412
}
}
receive-redirects disable
send-redirects enable
source-validation disable
syn-cookies enable
}
interfaces {
ethernet eth0 {
duplex auto
firewall {
in {
name WAN_IN
}
local {
name WAN_LOCAL
}
}
speed auto
vif 10 {
description "Internet (PPPoE)"
pppoe 0 {
default-route auto
firewall {
in {
name WAN_IN
}
local {
name WAN_LOCAL
}
}
mtu 1492
name-server auto
password <<REDACTED>>
user-id <<REDACTED>>
}
}
}
ethernet eth1 {
description Local
duplex auto
speed auto
}
ethernet eth2 {
description Local
duplex auto
poe {
output 24v
}
speed auto
}
ethernet eth3 {
description Local
duplex auto
poe {
output 24v
}
speed auto
}
ethernet eth4 {
description Local
duplex auto
speed auto
}
ethernet eth5 {
duplex auto
speed auto
}
loopback lo {
}
switch switch0 {
address <<REDACTED_HOME_NETWORK>>.1/24
description Local
mtu 1500
switch-port {
interface eth1 {
}
interface eth2 {
}
interface eth3 {
}
interface eth4 {
}
vlan-aware disable
}
}
}
port-forward {
auto-firewall enable
hairpin-nat enable
lan-interface switch0
rule 1 {
description Wireguard
forward-to {
address <<REDACTED_HOME_NETWORK>>.2
port <<REDACTED>>
}
original-port <<REDACTED>>
protocol udp
}
wan-interface pppoe0
}
service {
dhcp-server {
disabled false
hostfile-update disable
shared-network-name LAN {
authoritative enable
subnet <<REDACTED_HOME_NETWORK>>.0/24 {
default-router <<REDACTED_HOME_NETWORK>>.1
dns-server <<REDACTED_HOME_NETWORK>>.1
lease 86400
start <<REDACTED_HOME_NETWORK>>.101 {
stop <<REDACTED_HOME_NETWORK>>.254
}
static-mapping DownstairsAP {
ip-address <<REDACTED_HOME_NETWORK>>.4
mac-address <<REDACTED>>
}
static-mapping ManCaveSwitch {
ip-address <<REDACTED_HOME_NETWORK>>.3
mac-address <<REDACTED>>
}
static-mapping Upstairs {
ip-address <<REDACTED_HOME_NETWORK>>.5
mac-address <<REDACTED>>
}
static-mapping helms-deep {
ip-address <<REDACTED_HOME_NETWORK>>.2
mac-address <<REDACTED>>
}
unifi-controller <<REDACTED_HOME_NETWORK>>.2
}
}
static-arp disable
use-dnsmasq disable
}
dns {
forwarding {
cache-size 150
listen-on switch0
options address=/<<REDACTED>>.nz/<<REDACTED_HOME_NETWORK>>.2
}
}
gui {
http-port 80
https-port 443
listen-address <<REDACTED_HOME_NETWORK>>.1
older-ciphers enable
}
nat {
rule 5010 {
description "masquerade for WAN"
outbound-interface pppoe0
type masquerade
}
}
ssh {
port 22
protocol-version v2
}
unms {
disable
}
}
system {
host-name ubnt
login {
user ubnt {
authentication {
REDACTED
}
}
level admin
}
}
name-server 1.1.1.1
name-server 1.1.0.0
name-server 8.8.8.8
ntp {
server 0.ubnt.pool.ntp.org {
}
server 1.ubnt.pool.ntp.org {
}
server 2.ubnt.pool.ntp.org {
}
server 3.ubnt.pool.ntp.org {
}
}
static-host-mapping {
host-name bywater.laing.nz {
inet <<REDACTED_HOME_NETWORK>>.9
}
}
syslog {
global {
facility all {
level notice
}
facility protocols {
level debug
}
}
host <<REDACTED_HOME_NETWORK>>.2 {
facility all {
level info
}
}
}
task-scheduler {
task l2tp_IP_logrotate {
executable {
arguments /config/scripts/l2tp_iplogrotate.conf
path /usr/sbin/logrotate
}
interval 1d
}
task l2tp_IP_update {
executable {
arguments "2>&1 >> /var/log/l2tp_ipupdate.log"
path /config/scripts/l2tp_update_ip
}
interval 30m
}
}
time-zone Pacific/Auckland
}
vpn {
ipsec {
auto-firewall-nat-exclude enable
}
}
<78>Jul 26 14:00:24 ubnt /USR/SBIN/CRON[23791]: (CRON) info (No MTA installed, discarding output)
<86>Jul 26 14:00:24 ubnt CRON[23791]: pam_unix(cron:session): session closed for user root
<86>Jul 26 14:00:42 ubnt sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/opt/vyatta/sbin/ubnt_vtysh -c show ip route summary json
<86>Jul 26 14:00:42 ubnt sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
<86>Jul 26 14:00:44 ubnt sudo: pam_unix(sudo:session): session closed for user root
<86>Jul 26 14:01:44 ubnt sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/opt/vyatta/sbin/ubnt_vtysh -c show ip route summary json
<86>Jul 26 14:01:44 ubnt sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
<86>Jul 26 14:01:45 ubnt sudo: pam_unix(sudo:session): session closed for user root
<86>Jul 26 14:04:30 ubnt sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/opt/vyatta/sbin/ubnt_vtysh -c show ip route summary json
<86>Jul 26 14:04:30 ubnt sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
<86>Jul 26 14:04:44 ubnt sudo: pam_unix(sudo:session): session closed for user root
<38>Jul 26 14:04:46 ubnt sshd[23907]: Connection closed by <<REDACTED>>.102 [preauth]
<38>Jul 26 14:05:03 ubnt sshd[23916]: Accepted publickey for ubnt from <<REDACTED>>.102 port 54083 ssh2: RSA a6:31:97:56:ec:74:d8:e9:4a:6c:4c:26:c3:90:87:e8
<86>Jul 26 14:05:03 ubnt sshd[23916]: pam_unix(sshd:session): session opened for user ubnt by (uid=0)
<150>Jul 26 14:05:05 ubnt pppd[1877]: No response to 6 echo-requests
<149>Jul 26 14:05:05 ubnt pppd[1877]: Serial link appears to be disconnected.
<150>Jul 26 14:05:05 ubnt pppd[1877]: Connect time 3309.3 minutes.
<150>Jul 26 14:05:05 ubnt pppd[1877]: Sent 4292479662 bytes, received 3372359758 bytes.
<30>Jul 26 14:05:05 ubnt netplugd[2417]: pppoe0: ignoring event
<30>Jul 26 14:05:05 ubnt netplugd[2417]: pppoe0: ignoring event
<30>Jul 26 14:05:07 ubnt ntpd[2086]: Deleting interface #4 pppoe0, 222.153.94.51#123, interface stats: received=1322, sent=1394, dropped=0, active_time=241593 secs
<30>Jul 26 14:05:07 ubnt ntpd[2086]: 162.159.200.123 interface 222.153.94.51 -> (null)
<30>Jul 26 14:05:07 ubnt ntpd[2086]: 91.209.0.19 interface 222.153.94.51 -> (null)
<30>Jul 26 14:05:07 ubnt ntpd[2086]: 162.248.241.94 interface 222.153.94.51 -> (null)
<30>Jul 26 14:05:07 ubnt ntpd[2086]: 37.187.5.167 interface 222.153.94.51 -> (null)
<149>Jul 26 14:05:12 ubnt pppd[1877]: Connection terminated: no multilink.
<30>Jul 26 14:05:12 ubnt netplugd[2417]: pppoe0: ignoring event
<149>Jul 26 14:05:12 ubnt pppd[1877]: Modem hangup
<29>Jul 26 14:05:34 ubnt ntpd[2086]: ntpd exiting on signal 15
<29>Jul 26 14:05:37 ubnt ntpd[24082]: ntpd [email protected] Fri Feb 21 09:54:19 UTC 2020 (1)
<29>Jul 26 14:05:37 ubnt ntpd[24083]: proto: precision = 27.972 usec
<30>Jul 26 14:05:37 ubnt ntpd[24083]: Listen and drop on 0 v4wildcard 0.0.0.0 UDP 123
<30>Jul 26 14:05:37 ubnt ntpd[24083]: Listen and drop on 1 v6wildcard :: UDP 123
<30>Jul 26 14:05:37 ubnt ntpd[24083]: Listen normally on 2 lo 127.0.0.1 UDP 123
<30>Jul 26 14:05:37 ubnt ntpd[24083]: Listen normally on 3 switch0 <<REDACTED>>.1 UDP 123
<30>Jul 26 14:05:37 ubnt ntpd[24083]: Listen normally on 4 lo ::1 UDP 123
<30>Jul 26 14:05:37 ubnt ntpd[24083]: Listen normally on 5 eth4 fe80::b6fb:e4ff:feb3:dc5 UDP 123
<30>Jul 26 14:05:37 ubnt ntpd[24083]: Listen normally on 6 eth3 fe80::b6fb:e4ff:feb3:dc4 UDP 123
<30>Jul 26 14:05:37 ubnt ntpd[24083]: Listen normally on 7 switch0 fe80::b6fb:e4ff:feb3:dc7 UDP 123
<30>Jul 26 14:05:37 ubnt ntpd[24083]: Listen normally on 8 eth2 fe80::b6fb:e4ff:feb3:dc3 UDP 123
<30>Jul 26 14:05:37 ubnt ntpd[24083]: Listen normally on 9 eth0.10 fe80::b6fb:e4ff:feb3:dc1 UDP 123
<30>Jul 26 14:05:37 ubnt ntpd[24083]: Listen normally on 10 eth1 fe80::b6fb:e4ff:feb3:dc2 UDP 123
<30>Jul 26 14:05:37 ubnt ntpd[24083]: Listen normally on 11 eth0 fe80::b6fb:e4ff:feb3:dc1 UDP 123
<30>Jul 26 14:05:37 ubnt ntpd[24083]: Listening on routing socket on fd #28 for interface updates
<30>Jul 26 14:05:37 ubnt ntpd[24083]: Deferring DNS for 0.ubnt.pool.ntp.org 1
<30>Jul 26 14:05:37 ubnt ntpd[24083]: Deferring DNS for 1.ubnt.pool.ntp.org 1
<30>Jul 26 14:05:37 ubnt ntpd[24083]: Deferring DNS for 2.ubnt.pool.ntp.org 1
<30>Jul 26 14:05:37 ubnt ntpd[24083]: Deferring DNS for 3.ubnt.pool.ntp.org 1
<27>Jul 26 14:05:39 ubnt ntpd_intres[24089]: host name not found: 0.ubnt.pool.ntp.org
<27>Jul 26 14:05:39 ubnt ntpd_intres[24089]: host name not found: 1.ubnt.pool.ntp.org
<27>Jul 26 14:05:39 ubnt ntpd_intres[24089]: host name not found: 2.ubnt.pool.ntp.org
<27>Jul 26 14:05:39 ubnt ntpd_intres[24089]: host name not found: 3.ubnt.pool.ntp.org
<6>Jul 26 14:05:42 ubnt kernel: device eth0.10 entered promiscuous mode
<6>Jul 26 14:05:42 ubnt kernel: device eth0 entered promiscuous mode
<150>Jul 26 14:05:42 ubnt pppd[1877]: PPP session is 1 (0x1)
<148>Jul 26 14:05:42 ubnt pppd[1877]: Connected to <<REDACTED>> via interface eth0.10
<150>Jul 26 14:05:42 ubnt pppd[1877]: Using interface ppp0
<30>Jul 26 14:05:42 ubnt netplugd[2417]: ppp0: ignoring event
<149>Jul 26 14:05:42 ubnt pppd[1877]: Connect: ppp0 <--> eth0.10
<30>Jul 26 14:05:42 ubnt netplugd[2417]: ppp0: ignoring event
<150>Jul 26 14:05:42 ubnt pppd[1877]: Remote message: Login ok
<149>Jul 26 14:05:42 ubnt pppd[1877]: PAP authentication succeeded
<149>Jul 26 14:05:42 ubnt pppd[1877]: peer from calling number <<REDACTED>> authorized
<30>Jul 26 14:05:43 ubnt netplugd[2417]: pppoe0: ignoring event
<30>Jul 26 14:05:45 ubnt netplugd[2417]: pppoe0: ignoring event
<149>Jul 26 14:05:45 ubnt pppd[1877]: local IP address 222.154.80.230
<149>Jul 26 14:05:45 ubnt pppd[1877]: remote IP address 219.88.156.1
<149>Jul 26 14:05:45 ubnt pppd[1877]: primary DNS address 122.56.237.1
<149>Jul 26 14:05:45 ubnt pppd[1877]: secondary DNS address 210.55.111.1
<86>Jul 26 14:05:46 ubnt sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/opt/vyatta/sbin/ubnt_vtysh -c show ip route summary json
<86>Jul 26 14:05:46 ubnt sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
<30>Jul 26 14:06:20 ubnt ntpd[24083]: Listen normally on 12 pppoe0 222.154.80.230 UDP 123
<38>Jul 26 14:08:23 ubnt sshd[23920]: Received disconnect from <<REDACTED>>.102: 11: disconnected by user
<86>Jul 26 14:08:23 ubnt sshd[23916]: pam_unix(sshd:session): session closed for user ubnt
<30>Jul 26 14:08:23 ubnt ntpd_intres[24089]: DNS 0.ubnt.pool.ntp.org -> 200.160.7.186
<86>Jul 26 14:08:40 ubnt sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/ubnt-intf-ipv6.pl pppoe0
<86>Jul 26 14:08:40 ubnt sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
<86>Jul 26 14:08:49 ubnt sudo: pam_unix(sudo:session): session closed for user root
<86>Jul 26 14:08:56 ubnt sudo: pam_unix(sudo:session): session closed for user root
<38>Jul 26 14:08:56 ubnt sshd[24160]: Accepted publickey for ubnt from <<REDACTED>>.102 port 54132 ssh2: RSA a6:31:97:56:ec:74:d8:e9:4a:6c:4c:26:c3:90:87:e8
<86>Jul 26 14:08:57 ubnt sshd[24160]: pam_unix(sshd:session): session opened for user ubnt by (uid=0)
<86>Jul 26 14:08:59 ubnt sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/ipset create ADDRv4_pppoe0 hash:net hashsize 10 maxelem 100
<86>Jul 26 14:08:59 ubnt sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
<86>Jul 26 14:09:00 ubnt sudo: pam_unix(sudo:session): session closed for user root
<150>Jul 26 14:09:06 ubnt pppd[1877]: No response to 6 echo-requests
<149>Jul 26 14:09:06 ubnt pppd[1877]: Serial link appears to be disconnected.
<150>Jul 26 14:09:06 ubnt pppd[1877]: Connect time 3.4 minutes.
<150>Jul 26 14:09:06 ubnt pppd[1877]: Sent 14764546 bytes, received 2927754549 bytes.
<30>Jul 26 14:09:06 ubnt netplugd[2417]: pppoe0: ignoring event
<30>Jul 26 14:09:06 ubnt netplugd[2417]: pppoe0: ignoring event
<30>Jul 26 14:09:09 ubnt ntpd[24083]: Deleting interface #12 pppoe0, 222.154.80.230#123, interface stats: received=0, sent=1, dropped=0, active_time=55 secs
<30>Jul 26 14:09:09 ubnt ntpd[24083]: 200.160.7.186 interface 222.154.80.230 -> (null)
<27>Jul 26 14:09:09 ubnt ntpd_intres[24089]: host name not found: 1.ubnt.pool.ntp.org
<27>Jul 26 14:09:09 ubnt ntpd_intres[24089]: host name not found: 2.ubnt.pool.ntp.org
<27>Jul 26 14:09:09 ubnt ntpd_intres[24089]: host name not found: 3.ubnt.pool.ntp.org
<86>Jul 26 14:09:10 ubnt sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/ipset create NETv4_pppoe0 hash:net hashsize 10 maxelem 100
<86>Jul 26 14:09:10 ubnt sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
<86>Jul 26 14:09:11 ubnt sudo: pam_unix(sudo:session): session closed for user root
<149>Jul 26 14:09:12 ubnt pppd[1877]: Connection terminated: no multilink.
<30>Jul 26 14:09:12 ubnt netplugd[2417]: pppoe0: ignoring event
<149>Jul 26 14:09:12 ubnt pppd[1877]: Modem hangup
<150>Jul 26 14:09:47 ubnt pppd[1877]: PPP session is 1 (0x1)
<148>Jul 26 14:09:47 ubnt pppd[1877]: Connected to <<REDACTED>> via interface eth0.10
<150>Jul 26 14:09:47 ubnt pppd[1877]: Using interface ppp0
<149>Jul 26 14:09:47 ubnt pppd[1877]: Connect: ppp0 <--> eth0.10
<30>Jul 26 14:09:47 ubnt netplugd[2417]: ppp0: ignoring event
<30>Jul 26 14:10:07 netplugd[2417]: last message repeated 2 times
<86>Jul 26 14:10:07 ubnt sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/opt/vyatta/sbin/ubnt_vtysh -c show ip route summary json
<86>Jul 26 14:10:07 ubnt sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
<86>Jul 26 14:10:53 ubnt sudo: pam_unix(sudo:session): session closed for user root
<86>Jul 26 14:11:01 ubnt sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/ubnt-intf-ipv6.pl ppp0
<86>Jul 26 14:11:02 ubnt sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
<86>Jul 26 14:11:03 ubnt sudo: pam_unix(sudo:session): session closed for user root
<27>Jul 26 14:11:15 ubnt ntpd_intres[24089]: host name not found: 1.ubnt.pool.ntp.org
<27>Jul 26 14:11:15 ubnt ntpd_intres[24089]: host name not found: 2.ubnt.pool.ntp.org
<27>Jul 26 14:11:15 ubnt ntpd_intres[24089]: host name not found: 3.ubnt.pool.ntp.org
<30>Jul 26 14:14:28 ubnt dhcpd: DHCPREQUEST for <<REDACTED>>.2 from <<REDACTED>> via switch0
<30>Jul 26 14:14:28 ubnt dhcpd: DHCPACK on <<REDACTED>>.2 to <<REDACTED>> via switch0
<86>Jul 26 14:14:29 ubnt sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/opt/vyatta/sbin/ubnt_vtysh -c show ip route summary json
<86>Jul 26 14:14:29 ubnt sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
<86>Jul 26 14:14:29 ubnt sudo: pam_unix(sudo:session): session closed for user root
<86>Jul 26 14:15:29 ubnt sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/opt/vyatta/sbin/ubnt_vtysh -c show ip route summary json
<86>Jul 26 14:15:29 ubnt sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
<86>Jul 26 14:15:29 ubnt sudo: pam_unix(sudo:session): session closed for user root
<6>Jul 26 14:15:48 ubnt kernel: nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead.
<86>Jul 26 14:16:01 ubnt CRON[2761]: pam_unix(cron:session): session opened for user root by (uid=0)
<78>Jul 26 14:16:01 ubnt /USR/SBIN/CRON[2762]: (root) CMD (/etc/ubnt-rtr-ui/cleanup-sessions)
<86>Jul 26 14:16:01 ubnt CRON[2761]: pam_unix(cron:session): session closed for user root
<86>Jul 26 14:16:29 ubnt sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/opt/vyatta/sbin/ubnt_vtysh -c show ip route summary json
<86>Jul 26 14:16:29 ubnt sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
<86>Jul 26 14:16:29 ubnt sudo: pam_unix(sudo:session): session closed for user root
<86>Jul 26 14:17:01 ubnt CRON[2784]: pam_unix(cron:session): session opened for user root by (uid=0)
<78>Jul 26 14:17:01 ubnt /USR/SBIN/CRON[2785]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly)
<86>Jul 26 14:17:02 ubnt CRON[2784]: pam_unix(cron:session): session closed for user root
<86>Jul 26 14:17:30 ubnt sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/opt/vyatta/sbin/ubnt_vtysh -c show ip route summary json
<86>Jul 26 14:17:30 ubnt sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
<86>Jul 26 14:17:30 ubnt sudo: pam_unix(sudo:session): session closed for user root
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment