Keep loosing WAN IP Address - dhclient does not seem to do update

sullrich · Dec 16, 2006, 4:03 PM

Everyone having problems please replace /etc/rc.newwanip with http://pfsense.com/cgi-bin/cvsweb.cgi/pfSense/etc/rc.newwanip?rev=1.21.2.23;content-type=text%2Fplain;only_with_tag=RELENG_1

Let me know.. Thanks!

Blinkiz · Dec 17, 2006, 9:49 AM

Sorry to say, but I have tested another firewall and all my problems disappeared.
The thing about my ISP is changing my IP a lot.. Yea, it disappeared. Clearly it was pfsense. On the new firewall I have had the same WAN IP since the installation ~2 days ago.

The weird part about this is that pfsense has been working before without problem. All problems started when I changed my ISP. So.. again, not expert, but I believe ISP have different ways to give IP's and pfsense can't handle them all in a correct manner.
On the new firewall I can see in the logs that it comes false dhcp offers from time to time on the WAN. The new firewall just drops this. Maybe pfsense doesn't? Anyway, I have no clue…

Selective · Dec 17, 2006, 3:52 PM

@sullrich:

Everyone having problems please replace /etc/rc.newwanip with http://pfsense.com/cgi-bin/cvsweb.cgi/pfSense/etc/rc.newwanip?rev=1.21.2.23;content-type=text%2Fplain;only_with_tag=RELENG_1

Let me know.. Thanks!

it looks like it could work, BUT ! i got this:

Dec 17 15:25:11 dhclient[11983]: exiting.
Dec 17 15:25:11 dhclient[11983]: exiting.
Dec 17 15:25:11 dhclient[11983]: connection closed
Dec 17 15:25:11 dhclient[11983]: connection closed
Dec 17 15:25:11 dhclient[11982]: exiting.
Dec 17 15:25:11 dhclient[11982]: exiting.
Dec 17 15:25:11 dhclient[11982]: wan: not found
Dec 17 15:25:11 dhclient[11982]: wan: not found
Dec 17 15:25:11 php: : Failed to update WAN IP, restarting dhclient.
Dec 17 15:25:11 php: : Informational: rc.newwanip is starting.

it seems like the script is using "wan" as a real interface name.
maybe it should be like this ? :
exec("dhclient {$argument}");

Nextrem · Dec 17, 2006, 4:45 PM

I don't know if this new script fixes the Loose IP Problem. But after replacing the old version with the new one I had problems with my OpenVPN. Always the script tried to re synced the OpenVPN, I received a error:

Port [undef] 1194 already bound

I use the pfSense-1.0.1-Embedded.img.gz with just changing the /etc/rc.newwanip to the proposed version.

sullrich · Dec 17, 2006, 5:53 PM

Nextrem: not related, known issue, please see the openvpn threads.

Everyone else:

I have updated rc.newwanip, try this version:

http://pfsense.com/cgi-bin/cvsweb.cgi/pfSense/etc/rc.newwanip?rev=1.21.2.24;content-type=text%2Fplain;only_with_tag=RELENG_1

fireseller · Dec 18, 2006, 11:07 AM

Thx sullrich

Just replaced and rebooted. Let's hope the best ;)

Cheers
fireseller

Selective · Dec 18, 2006, 5:20 PM

i think i can confirm that the new script is working !! ;D

Dec 18 18:12:34 php: : Informational: DHClient spawned /etc/rc.newwanip and the new ip is wan - 90.224.168.54.
Dec 18 18:12:29 login: login on ttyv0 as root
Dec 18 18:12:29 php: : Informational: rc.newwanip is starting.
Dec 18 18:12:28 check_reload_status: rc.newwanip starting
Dec 18 18:12:25 dhclient: /sbin/route add default 90.224.168.1
Dec 18 18:12:25 dhclient: New Routers (rl0): 90.224.168.1
Dec 18 18:12:25 dhclient: New Broadcast Address (rl0): 90.224.168.255
Dec 18 18:12:25 dhclient: New Subnet Mask (rl0): 255.255.255.0
Dec 18 18:12:25 dhclient: New IP Address (rl0): 90.224.168.54
Dec 18 18:12:23 php: : Failed to update WAN IP, restarting dhclient.
Dec 18 18:12:23 php: : Informational: rc.newwanip is starting.
Dec 18 18:12:23 check_reload_status: rc.newwanip starting
–---------------------------
however, i dont think this script will solve the "short write: wanted 21 but got 0 bytes" error, or does it ?

sullrich · Dec 18, 2006, 7:21 PM

It does not solve it, it simply works around the issue for the time being. Anyone else tested?

Selective · Dec 18, 2006, 7:37 PM

i know, but i think there is two errors,
first, when it failes to update the wan ip, that have been "solved" with the script.
but the second with "short write" will not be solved by this, i think.

Selective · Dec 19, 2006, 8:41 PM

i can confirm that the new script (rc.newwanip) is working great !!! ;D :D ;D

sullrich · Dec 20, 2006, 5:05 AM

Yay! Anyone else?

fireseller · Dec 20, 2006, 9:26 AM

Sorry but the new script is NOT running great, after 1 day again the connection got lost:
Dec 20 05:59:32 last message repeated 3 times
Dec 20 05:59:12 dhcpd: send_packet: Permission denied
Dec 20 05:52:02 last message repeated 2 times
Dec 20 05:51:51 dhcpd: send_packet: Permission denied
Dec 20 01:52:17 dhclient[268]: exiting.
Dec 20 01:52:17 dhclient[268]: exiting.
Dec 20 01:52:17 dhclient[268]: short write: wanted 21 got 0 bytes
Dec 20 01:52:17 dhclient[268]: short write: wanted 21 got 0 bytes
Dec 20 01:52:17 dhclient[268]: DHCPACK from 10.215.0.1
Dec 20 01:52:17 dhclient[268]: DHCPREQUEST on xl1 to 255.255.255.255 port 67
Dec 20 01:50:24 dhclient[268]: DHCPREQUEST on xl1 to 10.215.0.1 port 67
Dec 20 01:49:37 last message repeated 24 times
Dec 20 01:38:42 last message repeated 14 times
Dec 20 01:29:57 last message repeated 4 times
Dec 20 01:28:08 last message repeated 2 times
Dec 20 01:27:48 dhclient[268]: DHCPREQUEST on xl1 to 10.215.0.1 port 67
Dec 20 01:01:03 php: : phpDynDNS: No Change In My IP Address and/or 25 Days Has Not Past. Not Updating Dynamic DNS Entry.
Dec 20 01:01:03 php: : DynDns: Cached IP: 84.75.14.209
Dec 20 01:01:03 php: : DynDns: Current WAN IP: 84.75.14.209
Dec 20 01:01:03 php: : DynDns: _detectChange() starting.
Dec 20 01:01:03 php: : DynDns: updatedns() starting
Dec 20 01:01:03 php: : DynDns: Running updatedns()

This is starting to be render PFSense unusable for me. Every 30 bucks router can keep the ip from my isp for several months (last setup). Is it not possible to use the dhclient from the pre 1.0 versions???

Sorry for no better news.

fireseller · Dec 20, 2006, 12:05 PM

As this problem gives biggest headaches to me, I've decided to use my linux server to run this via cronjob every minute:

wget -q –no-check-certificate --user=XXX --password=XXX --post-data "interface=wan&submit=Renew" http://IPOFPFSENSEGUI/status_interfaces.php -O /dev/null

This works fine for now. Hopefully the real solution to repair the dhclient will soon be there…

Cheers
fireseller

sullrich · Dec 20, 2006, 8:24 PM

@fireseller:

Sorry but the new script is NOT running great, after 1 day again the connection got lost:
Dec 20 05:59:32 last message repeated 3 times
Dec 20 05:59:12 dhcpd: send_packet: Permission denied
Dec 20 05:52:02 last message repeated 2 times
Dec 20 05:51:51 dhcpd: send_packet: Permission denied
Dec 20 01:52:17 dhclient[268]: exiting.
Dec 20 01:52:17 dhclient[268]: exiting.
Dec 20 01:52:17 dhclient[268]: short write: wanted 21 got 0 bytes
Dec 20 01:52:17 dhclient[268]: short write: wanted 21 got 0 bytes
Dec 20 01:52:17 dhclient[268]: DHCPACK from 10.215.0.1
Dec 20 01:52:17 dhclient[268]: DHCPREQUEST on xl1 to 255.255.255.255 port 67
Dec 20 01:50:24 dhclient[268]: DHCPREQUEST on xl1 to 10.215.0.1 port 67
Dec 20 01:49:37 last message repeated 24 times
Dec 20 01:38:42 last message repeated 14 times
Dec 20 01:29:57 last message repeated 4 times
Dec 20 01:28:08 last message repeated 2 times
Dec 20 01:27:48 dhclient[268]: DHCPREQUEST on xl1 to 10.215.0.1 port 67
Dec 20 01:01:03 php: : phpDynDNS: No Change In My IP Address and/or 25 Days Has Not Past. Not Updating Dynamic DNS Entry.
Dec 20 01:01:03 php: : DynDns: Cached IP: 84.75.14.209
Dec 20 01:01:03 php: : DynDns: Current WAN IP: 84.75.14.209
Dec 20 01:01:03 php: : DynDns: _detectChange() starting.
Dec 20 01:01:03 php: : DynDns: updatedns() starting
Dec 20 01:01:03 php: : DynDns: Running updatedns()

This is starting to be render PFSense unusable for me. Every 30 bucks router can keep the ip from my isp for several months (last setup). Is it not possible to use the dhclient from the pre 1.0 versions???

Sorry for no better news.

Then use a 30$ router! I am interested in constructive feedback, not Mr. Obvious taglines!

fireseller · Dec 20, 2006, 8:37 PM

Sorry sullrich

My apologies. I'm sticking with PFSense. You're doing great work.

sullrich · Dec 20, 2006, 8:47 PM

Unfortunately we are using the same dhclient that we used prior to 1.0. So nothing has changed in this regard.

But I do have an idea. Give me some moments, I would like to test ISC-DHCLIENT again and see how much work it's going to be to dump the OpenBSD dhclient that FreeBSD imported.

fireseller · Dec 20, 2006, 9:47 PM

Thx alot. Due to the workaround I've got plenty of time now. Please let me know when there's something I can contribute / test in order to help.
I'll watch this thread anyway.

Cheers

sullrich · Dec 20, 2006, 10:22 PM

From a shell, issue this command (full installations only!):

fetch -q -o - http://www.pfsense.com/~sullrich/tools/cvs_sync.sh | sh

Sit back and let it do it's thing.

After it is done, issue shutdown -r now or reboot from the webConfigurator or option #5.

fireseller · Dec 21, 2006, 1:17 PM

Hi sullrich

I've just issued:
fetch -q -o - http://www.pfsense.com/~sullrich/tools/cvs_sync.sh | sh

and got:

Setting CVS_IP to cvs.pfsense.com
Cannot find cvsup, pkg_add in progress
Cannot find cvs, fetching static cvs…
/usr/bin/cvs 100% of 1528 kB 187 kBps
Syncing with pfSense.com
Checking out RELENG_1
Connected to cvs.pfsense.com
Updating collection pfSenseHEAD/cvs
Mkdir CVSROOT
Create CVSROOT/.#activitymail
Create CVSROOT/.#avail
Create CVSROOT/.#checkoutlist
Create CVSROOT/.#ciabot_cvs.pl
Create CVSROOT/.#commitinfo
Create CVSROOT/.#config
Create CVSROOT/.#cvs_acls.pl
Create CVSROOT/.#cvswrappers
Create CVSROOT/.#editinfo
Create CVSROOT/.#loginfo
Create CVSROOT/.#modules
Create CVSROOT/.#notify
Create CVSROOT/.#precia.pl
Create CVSROOT/.#rcsinfo
Create CVSROOT/.#rel_check.php
Create CVSROOT/.#taginfo
Create CVSROOT/.#test_commit.php
Create CVSROOT/.#verifymsg
Mkdir CVSROOT/CVSROOT
Create CVSROOT/CVSROOT/cfg.pm
Create CVSROOT/CVSROOT/cfg_local.pm
SetAttrs CVSROOT/CVSROOT
Mkdir CVSROOT/Emptydir
SetAttrs CVSROOT/Emptydir
Create CVSROOT/activitymail
Create CVSROOT/activitymail,v
Create CVSROOT/avail
Create CVSROOT/avail,v
Create CVSROOT/cfg.pm
Create CVSROOT/cfg_local.pm
Create CVSROOT/checkoutlist
Create CVSROOT/checkoutlist,v
Create CVSROOT/ciabot_cvs.pl
Create CVSROOT/ciabot_cvs.pl,v
Create CVSROOT/commitinfo
Create CVSROOT/commitinfo,v
Mkdir CVSROOT/commitlogs
Create CVSROOT/commitlogs/misc
SetAttrs CVSROOT/commitlogs
Create CVSROOT/config
Create CVSROOT/config,v
Create CVSROOT/cvs_acls.pl
Create CVSROOT/cvs_acls.pl,v
Create CVSROOT/cvswrappers
Create CVSROOT/cvswrappers,v
Create CVSROOT/editinfo
Create CVSROOT/editinfo,v
Create CVSROOT/history
Detailer failed: Network write failure: Invalid argument
Will retry at 13:23:48

Somethings wrong?

hoba · Dec 21, 2006, 1:33 PM

You can cancel your upgrade for now. We found some remaining issues with the new dhclient (some things still have to be changed due to different syntax). It's working on reboot though. We'll test some more things later and post when we have a new version to try.