Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Losing internet everyday, twice a day

    Scheduled Pinned Locked Moved General pfSense Questions
    8 Posts 5 Posters 1.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T Offline
      talon4x4
      last edited by

      For the past month or so I have started losing my internet connection.  It happens everyday around 9-9:30am and then again around 10-10:30pm.  After about 5 minutes it comes back again.

      I had an old PC so I decided to use it for pfSense at home.  Just to learn how it works and play around with it.  So obviously this isn't a critical situation but annoying nonetheless.  My internet provider is Time Warner Cable and I have the Ubee cable modem.

      Below are the entries in the general log file section.  I'm not sure if anything can be taken away from this entries but they are what appear everytime the internet goes down.

      Sep 3 22:33:13 check_reload_status: updating dyndns WAN_DHCP
      Sep 3 22:33:13 check_reload_status: Restarting ipsec tunnels
      Sep 3 22:33:13 check_reload_status: Restarting OpenVPN tunnels/interfaces
      Sep 3 22:33:13 check_reload_status: Reloading filter
      Sep 3 22:33:19 check_reload_status: updating dyndns WAN_DHCP
      Sep 3 22:33:19 check_reload_status: Restarting ipsec tunnels
      Sep 3 22:33:19 check_reload_status: Restarting OpenVPN tunnels/interfaces
      Sep 3 22:33:19 check_reload_status: Reloading filter
      Sep 3 22:38:34 check_reload_status: updating dyndns WAN_DHCP
      Sep 3 22:38:34 check_reload_status: Restarting ipsec tunnels
      Sep 3 22:38:34 check_reload_status: Restarting OpenVPN tunnels/interfaces
      Sep 3 22:38:34 check_reload_status: Reloading filter
      Sep 3 22:38:44 check_reload_status: updating dyndns WAN_DHCP
      Sep 3 22:38:44 check_reload_status: Restarting ipsec tunnels
      Sep 3 22:38:44 check_reload_status: Restarting OpenVPN tunnels/interfaces
      Sep 3 22:38:44 check_reload_status: Reloading filter

      These are the entries from the gateway log.  This appears to be saying that my cable modem has gone down?  I have checked the lights on the cable modem box and they don't indicate that it is down.  So I'm kind of confused about this one.

      Sep 3 22:33:03 apinger: ALARM: WAN_DHCP(192.168.0.1) *** down ***
      Sep 3 22:33:09 apinger: alarm canceled: WAN_DHCP(192.168.0.1) *** down ***
      Sep 3 22:38:24 apinger: ALARM: WAN_DHCP(192.168.0.1) *** delay ***
      Sep 3 22:38:34 apinger: alarm canceled: WAN_DHCP(192.168.0.1) *** delay ***

      At the same time in the firewall log I start getting entries like this (192.168.0.1 is the Ubee)

      Sep 4 09:36:45 WAN 192.168.0.1 224.0.0.1 IGMP
      Sep 4 09:36:45 WAN 192.168.0.1 224.0.0.1 IGMP
      (I can ping the addresses below but I have no idea what they are)
      Sep 4 09:36:45 WAN 192.168.26.1 224.0.0.1 IGMP
      Sep 4 09:36:45 WAN 192.168.27.1 224.0.0.1 IGMP
      Sep 4 09:36:45 WAN 192.168.28.1 224.0.0.1 IGMP

      I am just a beginner with all of this stuff so any help would be greatly appreciated.

      Sean

      1 Reply Last reply Reply Quote 0
      • H Offline
        Harvy66
        last edited by

        You should try logging into your cable modem and checking its logs for errors.

        1 Reply Last reply Reply Quote 0
        • T Offline
          talon4x4
          last edited by

          @Harvy66:

          You should try logging into your cable modem and checking its logs for errors.

          I wish I could.  Unfortunately Time Warner locks out the WebUI.  I tried all the default username/password combos I could find on the internet and none of them worked.

          1 Reply Last reply Reply Quote 0
          • F Offline
            firewalluser
            last edited by

            Maybe you can get your own, but have a look round for those that might have zero days like this one.

            http://www.theregister.co.uk/2015/09/02/sohopeless_belkin_router_redirection_zero_day/
            "Belkin was notified of the vulnerabilities in its latest firmware and likely those earlier but has not released a fix. There is also no mitigations nor practical fixes "as general users are unlikely to be able to monitor traffic entering the router's WAN port".

            Nothing like calling your users dumb.

            Capitalism, currently The World's best Entertainment Control System and YOU cant buy it! But you can buy this, or some of this or some of these

            Asch Conformity, mainly the blind leading the blind.

            1 Reply Last reply Reply Quote 0
            • T Offline
              tim.mcmanus
              last edited by

              What model router do you have from your ISP?

              This link is invaluable for cable internet users.

              http://homepage.ntlworld.com/robin.d.h.walker/docsdiag/

              1 Reply Last reply Reply Quote 0
              • S Offline
                sos
                last edited by

                Similar thing happened to me - kept dropping the internet at 0230 every night. Turned out to be a monitored security alarm which "grabbed" the copper phone line every morning at that time so it could check the line. check to see someone or something isn't messing with your phone line, as the logs you have seem to indicated something similar.

                1 Reply Last reply Reply Quote 0
                • T Offline
                  talon4x4
                  last edited by

                  @sos:

                  Similar thing happened to me - kept dropping the internet at 0230 every night. Turned out to be a monitored security alarm which "grabbed" the copper phone line every morning at that time so it could check the line. check to see someone or something isn't messing with your phone line, as the logs you have seem to indicated something similar.

                  I have a cable modem (Ubee DDW3611), so no phone lines and no security system.

                  @tim.mcmanus:

                  What model router do you have from your ISP?

                  This link is invaluable for cable internet users.

                  http://homepage.ntlworld.com/robin.d.h.walker/docsdiag/

                  Time Warner locks the modem down so I can't do anything mentioned on that website.  Thanks though

                  1 Reply Last reply Reply Quote 0
                  • T Offline
                    tim.mcmanus
                    last edited by

                    @talon4x4:

                    @sos:

                    Similar thing happened to me - kept dropping the internet at 0230 every night. Turned out to be a monitored security alarm which "grabbed" the copper phone line every morning at that time so it could check the line. check to see someone or something isn't messing with your phone line, as the logs you have seem to indicated something similar.

                    I have a cable modem (Ubee DDW3611), so no phone lines and no security system.

                    @tim.mcmanus:

                    What model router do you have from your ISP?

                    This link is invaluable for cable internet users.

                    http://homepage.ntlworld.com/robin.d.h.walker/docsdiag/

                    Time Warner locks the modem down so I can't do anything mentioned on that website.  Thanks though

                    Did you try any of it?  Most modems will respond to an SNMP query, and that's what this is doing.

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post
                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.