update

[Dave Taht]

* Plan

I will do a next-to-last build at 9AM, and a final build at 12:01PM. I
will test that build against a second wndr.
I *must* leave by 2PM and will be not be back in the office until
monday at the earliest, and will do no further builds.

the new build will contain the modified files thus far, several
packages will be removed to get some space

I am leaving cruithne up for the night at: 172.28.1.102

* open questions

1) do we have a ipv4 subnet assigned at the ietf yet?
2) how to renumber pcp's default ports after a dhcp port range change and
   (shell scripts, please, no python!!!)
3) icmpv6 message?
4) who/how to test  failover
5) configuration documentation for aftr for demo? - where to put on
wiki? (I'm not writing this)
6) configuration doc for sd-cpe - will write friday night - where to
put on wiki?

* status

sd-cpe2 survives a reboot and becomes useful in 123 seconds with no intervention
lan and wireless interfaces route successfully through tun0
complex web sites such as this eat all available ports and can hang forever

https://www.facebook.com/groups/242504412478561/317057111689957/?notif_t=group_activity

see previous message for other websites that behave oddly.

* Core files on sd-cpe2

/etc/rc.local - runs sdcpe start # presently I have it starting too
early, this runs it later
/etc/crazy sets up an iptables rule for icmpv4, I think we need v6
/etc/crazymon a start at trying to do something with an icmp (20
second delay inherent in log)
/etc/setup6 # called by /etc/init.d/sdcpe - has generic nat rules now
for all interfaces
/etc/setup4 # called by dhclient-script
/etc/dhclient-script # hopefully does almost the right thing on a
renew, but pcp??
/etc/config/firewall - vastly reduced numbers of rules, no nat, nat
created by setup4
/etc/firewall.user - some special ipv4 and ipv6 rules, notably one
allowing proto 4
/etc/init.d/sdcpe start
/etc/config/network - hard coded to the ipv6 ips and gateway

* mods from default cerowrt

dnsmasq substituted for bind9 as a forwarder (/etc/resolv.conf.auto
written by setup6)
bind9 (and dnssec) disabled
local time server disabled
babel mesh router disabled

-- 
Dave Täht
SKYPE: davetaht
US Tel: 1-239-829-5608
http://www.bufferbloat.net