Unable to update iPad apps through AC68U

[kneo]

I am using merlins firmware on Ac68 and strangely am unable to update apps on my iPad. It does not update apps or system updates but surfing works fine. How do I go about debugging the issue?
I tried updating through my phone network and it’s working fine.

 

[kneo]

Quick info from logs

May 26 16:23:12 kernel: DROP IN=ppp0 OUT= MAC= SRC=10.75.218.225 DST=124.155.254.183 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=12853 DF PROTO=TCP SPT=52203 DPT=445 SEQ=4047841595 ACK=0 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204058E0103030201010402)
May 26 16:23:15 kernel: DROP IN=ppp0 OUT= MAC= SRC=10.75.218.225 DST=124.155.254.183 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=13375 DF PROTO=TCP SPT=52203 DPT=445 SEQ=4047841595 ACK=0 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204058E0103030201010402)
May 26 16:23:21 kernel: DROP IN=ppp0 OUT= MAC= SRC=10.75.218.225 DST=124.155.254.183 LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=14465 DF PROTO=TCP SPT=52203 DPT=445 SEQ=4047841595 ACK=0 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204058E01010402)
May 26 16:23:51 kernel: DROP IN=ppp0 OUT= MAC= SRC=165.227.168.94 DST=124.155.254.183 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=40581 PROTO=TCP SPT=55938 DPT=7696 SEQ=634682914 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0
May 26 16:23:53 kernel: DROP IN=ppp0 OUT= MAC= SRC=74.82.47.45 DST=124.155.254.183 LEN=29 TOS=0x00 PREC=0x00 TTL=51 ID=29536 DF PROTO=UDP SPT=62251 DPT=17 LEN=9
May 26 16:23:58 kernel: DROP IN=ppp0 OUT= MAC= SRC=5.39.218.162 DST=124.155.254.183 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=29905 PROTO=TCP SPT=40389 DPT=3389 SEQ=4104619867 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0
May 26 16:24:54 kernel: DROP IN=ppp0 OUT= MAC= SRC=185.222.210.56 DST=124.155.254.183 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=62557 PROTO=TCP SPT=48325 DPT=7360 SEQ=309532202 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0
May 26 16:25:12 kernel: DROP IN=ppp0 OUT= MAC= SRC=124.247.187.156 DST=124.155.254.183 LEN=40 TOS=0x00 PREC=0x20 TTL=45 ID=46995 PROTO=TCP SPT=51518 DPT=23 SEQ=2090598071 ACK=0 WINDOW=53541 RES=0x00 SYN URGP=0
May 26 16:25:14 kernel: DROP IN=ppp0 OUT= MAC= SRC=185.222.210.56 DST=124.155.254.183 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=48412 PROTO=TCP SPT=48325 DPT=7352 SEQ=2185322259 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0
May 26 16:27:36 kernel: DROP IN=ppp0 OUT= MAC= SRC=43.245.69.6 DST=124.155.254.183 LEN=64 TOS=0x08 PREC=0x20 TTL=239 ID=57197 PROTO=UDP SPT=36903 DPT=161 LEN=44
May 26 16:27:45 kernel: DROP IN=ppp0 OUT= MAC= SRC=192.227.186.4 DST=124.155.254.183 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=25580 PROTO=TCP SPT=47201 DPT=623 SEQ=2974392116 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0
May 26 16:28:26 rc_service: httpd 271:notify_rc restart_dnsmasq
May 26 16:28:46 kernel: DROP IN=ppp0 OUT= MAC= SRC=82.58.87.205 DST=124.155.254.183 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=10939 DF PROTO=TCP SPT=11656 DPT=8080 SEQ=213609963 ACK=0 WINDOW=14600 RES=0x00 SYN URGP=0
May 26 16:30:38 rc_service: httpd 271:notify_rc restart_dnsmasq
May 26 16:32:07 kernel: DROP IN=ppp0 OUT= MAC= SRC=213.136.89.193 DST=124.155.254.183 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=40183 PROTO=TCP SPT=47805 DPT=50802 SEQ=3744375858 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0
May 26 16:32:11 kernel: DROP IN=ppp0 OUT= MAC= SRC=169.60.79.66 DST=124.155.254.183 LEN=1429 TOS=0x00 PREC=0x20 TTL=47 ID=51880 DF PROTO=TCP SPT=443 DPT=45086 SEQ=2532056524 ACK=2019847885 WINDOW=513 RES=0x00 ACK URGP=0 OPT (0101080A6FABA4D7000AB91A)
May 26 16:32:29 kernel: DROP IN=ppp0 OUT= MAC= SRC=185.222.210.56 DST=124.155.254.183 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=17054 PROTO=TCP SPT=48325 DPT=7197 SEQ=867803188 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0
May 26 16:32:35 kernel: DROP IN=ppp0 OUT= MAC= SRC=185.222.210.56 DST=124.155.254.183 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=47913 PROTO=TCP SPT=48325 DPT=6358 SEQ=4283325768 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0
May 26 16:33:15 kernel: DROP IN=ppp0 OUT= MAC= SRC=169.60.79.66 DST=124.155.254.183 LEN=1429 TOS=0x00 PREC=0x20 TTL=47 ID=18142 DF PROTO=TCP SPT=443 DPT=45086 SEQ=2532056524 ACK=2019847885 WINDOW=513 RES=0x00 ACK URGP=0 OPT (0101080A6FAC9ED7000AB91A)

 

[roguetr]

Usually something to do with parental controls or dnsfilter. Relax them and test. Then you can test as you re-enable.

Parental controls is usually the culprit for me because my son has an iPad, he's too young for a real OS ... specific dnsfilter settings have prevented some legitimate online services from working though.

Assuming you don't have a custom configuration, other than the above, I would just remove as much of AiProtection as I could from the equation.

If it's something outside the scope of a default config/factory default and no AiProtection then it's hard to say. In that case you would need to query upstream and contact your provider.

Sent from my MI 5 using Tapatalk

 

[roguetr]

Looks like the firewall is dropping packets. I'd say that means something is classifying them and I'd be glaring at AiProtection if it's enabled, unless you have custom rules.

Sent from my MI 5 using Tapatalk

 

[kneo]

Tried disabling it too but not helping

 

[roguetr]

I don't know if that log is any indication of what's going on but those IPs are all over the place.

Without any more information on the router's possible configuration the only advice I can offer is make sure you are on the latest merlin firmware and ensure you're testing on a stock configuration after a factory reset.

If you are using double NAT, don't. Make sure you are bridging your modem/router

If that doesn't work and you don't want to contact your provider, you could try tethering to a mobile device/testing on a different internet connection (if possible) and you'd at least be able to tell of the provider is at fault.

Sorry, nothing else I can suggest.

Good luck!

Sent from my MI 5 using Tapatalk

 

[kneo]

It appears that most of these IPs are from the Amazon network. My Prime Video app itself is not working and maybe this is the culprit. How do I fix it?

 

[roguetr]

Without more information about your set up and what you have and haven't try, there's nothing I can really suggest. With a bridged modem and stock configuration, there's no good reason for it not to work.

With any luck someone else who's had a similar issue may be able to help you.



Sent from my MI 5 using Tapatalk

 

[kneo]

Noted. Let me try a few more settings. Have upgraded to latest Merlin. Have even pinged Apple support for this. Strangely everything else works perfectly.

 

[Treadler]

I am using merlins firmware on Ac68 and strangely am unable to update apps on my iPad. It does not update apps or system updates but surfing works fine. How do I go about debugging the issue?
I tried updating through my phone network and it’s working fine.

Happened to me some while ago. Did a ‘reset network settings’ on the iPad in question - fixed.

 

[roguetr]

Happened to me some while ago. Did a ‘reset network settings’ on the iPad in question - fixed.

I've seen quite a few people mention that this can fix a variety of issues with iDevices. One person said it fixed their wireless signal strength, which is beyond my comprehension.

Sent from my SM-T815Y using Tapatalk

 

[sfx2000]

I've seen quite a few people mention that this can fix a variety of issues with iDevices. One person said it fixed their wireless signal strength, which is beyond my comprehension.

there's a lot of caching that happens inside iDevices - so doing the "reset network settings" approach can work...

It's a scorched earth approach - first steps actually would be a airplane mode for 15 seconds, and then a power off/on...

 

[roguetr]

there's a lot of caching that happens inside iDevices - so doing the "reset network settings" approach can work...

It's a scorched earth approach - first steps actually would be a airplane mode for 15 seconds, and then a power off/on...

Thanks, though I'm aware that information can be retained between specific activities and can cause problems. I'm all for cache clearing. My comment was just to point out that apparently there are issues you wouldn't think _should_ occur that can occur.

If you could enlighten me on exactly why Apple would not prevent something like signal strength being affected and requiring a network reset, that I'd be interested in!

Also the OP has connectivity, airplane mode of/on etc has more than like been done and is unlikely to help with this specific problem.

Sent from my MI 5 using Tapatalk

 

[kneo]

Tried all kind of things. Not able to pinpoint the issue though. Can anyone confirm that the router has to be restarted if firewall or any ASU’s protection services are enabled or disabled? This is turning out to be very strange. Will post detailed steps tried tomorrow. Also can anyone explain how to read the firewall logs posted in my first post?

 

[roguetr]

With regards to the log, if you look at this one entry:

May 26 16:23:58 kernel: DROP IN=ppp0 OUT= MAC= SRC=5.39.218.162 DST=124.155.254.183 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=29905 PROTO=TCP SPT=40389 DPT=3389 SEQ=4104619867 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0

It just says that there was a connection attempt on destination port (DTP) 3389 (ms-rdp) of your IP (DST), inbound on interface ppp0 that was dropped.

This is pretty normal. Be wary of exposing your IP in forums though.

You'll get a lot of connection attempts to all ports that will be dropped. If the log entry specifies IN=ppp0 you can probably ignore it unless you are trying to diagnose inbound connection issues, like if you were hosting your own web server that you couldn't connect to (or rdp in the above example).

NAT handles the connections you are dealing with and it will have the required options set to ensure established connections initiated internally are translated through. The firewall will only be an issue if it is blocking on the LAN interface, not forwarding or blocking specific destination addresses. With a stock configuration after a factory reset, you should not have to consider any of these factors.

Sent from my MI 5 using Tapatalk

 

[ColinTaylor]

Your firewall logs don't show anything particularly unusual. It looks like you've configured your router to log dropped packets. Not a good idea because you will just fill up the log with all the normal internet noise.

 

[roguetr]

With regards to whether the router requires a reboot after changes, it shouldn't. I'm not saying it doesn't ... But from my experience, the relevant services are restarted after applying changes.

Certain changes do interface with components of the router that can display unwanted or unexpected results, which more often than not is caused by buggy chipsets, their firmware and blobs. A reboot will usually sort out these inconsistencies.

You shouldn't have to worry about any of this with most settings changes.

Sent from my MI 5 using Tapatalk

 

[roguetr]

I still have no idea what the cause of the problem actually is but ...

Let's assume everything is default and your ISP isn't blocking you.

The only stock setting that I can imagine might cause you any issue is the default assigned DNS servers.

So assuming no changes other than entering in your WAN connection details have been made to the router after a factory reset, try manually setting an IP and DNS on a connected client and see if that helps. Google's DNS is 8.8.8.8 but there are plenty out there.

Outside of this I blame your ISP. [emoji3]

Sent from my MI 5 using Tapatalk

 

[kneo]

Your firewall logs don't show anything particularly unusual. It looks like you've configured your router to log dropped packets. Not a good idea because you will just fill up the log with all the normal internet noise.

This is just to debug what the issue is. Strangely I see these dropped packages when I try to update my iPad.

 

[kneo]

Am trying to summarize how I am debugging (in my own n00b way)

1. Tried logging on to the same ISP but from my neighbor's wifi (I have helped set up their wifi and it's not stealing as we're on good terms), the updates work normally.

2. Tried disabling firewall and the AiProtection, but still the updates do not work at my place.

3. The connectivity on the iPad is working fine. Am able to open websites and browse everything else except the appstore updates and the software update of iPad itself.