[ILUG] Problems with Three Mobile-Broadband Router

[Michael Watterson]

On my home Broadband I switched from a Dlink Router to a OpenWRT based 
Router connected to the cable modem

On the Luci Interface I setup Monitoring and fiddled with the WAN
Accept / reject / Drop settings

Before on Dlink I was getting small traffic overnight  apart from email

With the OpenWRT and adjusting the Drop/Reject etc the amount of packet 
arriving hasn't changed (about 300 per second), but traffic from them is 
now near zero (flat line overnight).

Zones:
WAN FIREWALL   (MASQ [x])
Incoming Default is DROP
Outgoing Default is ACCEPT
Forwarded Default is REJECT

LAN FIREWALL   (MASQ [_])
Incoming Default is ACCEPT
Outgoing Default is ACCEPT
Forwarded Default is ACCEPT

Packets and Traffic are not the same thing.


Specific forwarding inward rules for OpenVPN and Skype work fine.

Niall O Broin wrote:
> On 21 Jul 2009, at 11:54, Kenn Humborg wrote:
>
>>> Traffic is download mostly - which at least is a bit reassuring.
>
> Not really - see what Kenn says later about port scans etc. Any such
> incoming traffic shows as download, whether it's as traffic arriving
> as a result of your actions or not.
>
>> Originally, we were using the "open.internet" GPRS APN.  However,
>> the telco bills were showing 30-40% more traffic than we were
>> measuring in our software.  Switching to the "internet" APN sorted
>> this out.
>>
>> It turns out that the "open.internet" APN allows all inbound traffic
>> to your dynamically-assigned public IP address, whereas "internet"
>> only allows inbound IP traffic associated with existing TCP
>> connections (and presumably UDP too for DNS stuff).
>
> This is very interesting Kenn. Where did you manage to get that 
> information?
> I've been using open.internet on my computer's dialup settings since I 
> switched
> to O2 (changed now :-) ) though I see that the phone itself was setup 
> to use
> internet for its own connections - not sure how I managed to do that, 
> as I had
> no idea of there being a difference between them.
>
>
> Niall


-- 
Mike