Bug in CTF?

[sbsnb]

@sbsnb, what happens if you try the nvram variable discussed in this thread? It seems to somehow let udp packets (like NTP) sidestep CTF. But only for LAN-originated packets, not router packets (i.e. FORWARD table, not OUTPUT table).

Just a thought...but as I type it, I doubt it would help the router's NTP daemon. But I'm hoping you're desperate enough to try it.

nvram set ctf_pt_udp=1
nvram commit
service restart_firewall
conntrack -F

Microsoft Teams connection drops

Hello, I'm having an issue with my ASUS AC68U (v386.2_6) where Microsoft Teams drops the connection after 10 seconds. Even though I'm connected to my company's VPN, it still drops the connection. The issue is very similar to that reported here, NAT Issue - Microsoft Teams connection drops...

www.snbforums.com

Didn't work

 

[sbsnb]

I don't know whether it's relevant to what you're discussing but the original thread about UDP was regarding loopback traffic. The solution there additionally involved moving that rule to the PREROUTING chain (which John then implemented in his firmware).

http://www.snbforums.com/threads/potential-bug-with-udp-nat-loopback-hairpinning.70892/post-670283

I tried iptables -t mangle -A PREROUTING -p udp -m state --state NEW -j MARK --set-mark 0x1/0x7 and it broke things even more. I could not get ntpq -p to have sane output whatsoever.