matze@ubnt:~$ ip addr 1: lo: mtu 65536 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: mtu 1500 qdisc noqueue state UP link/ether 70:a7:41:f7:xx:xx brd ff:ff:ff:ff:ff:ff inet 192.168.156.10/24 scope global eth0 valid_lft forever preferred_lft forever inet6 fe80::72a7:41ff:fef7:xx/64 scope link valid_lft forever preferred_lft forever 3: eth1: mtu 1500 qdisc noqueue state UNKNOWN link/ether 70:a7:41:f7:xx:xx brd ff:ff:ff:ff:ff:ff inet 192.168.56.1/24 brd 192.168.56.255 scope global eth1 valid_lft forever preferred_lft forever inet6 fe80::72a7:41ff:fef7:xxxx/64 scope link valid_lft forever preferred_lft forever 4: eth2: mtu 1500 qdisc noqueue state DOWN link/ether 70:a7:41:f7:xx:xx brd ff:ff:ff:ff:ff:ff 5: imq0: mtu 16000 qdisc pfifo_fast state UNKNOWN qlen 11000 link/void 9: eth0.7@eth0: mtu 1500 qdisc noqueue state UP link/ether 70:a7:41:f7:xx:xx brd ff:ff:ff:ff:ff:ff inet6 fe80::72a7:41ff:fef7:xxxx/64 scope link valid_lft forever preferred_lft forever 10: pppoe2: mtu 1492 qdisc pfifo_fast state UNKNOWN qlen 100 link/ppp inet 46.94.119.197 peer 62.155.246.13/32 scope global pppoe2 valid_lft forever preferred_lft forever matze@ubnt:~$ sudo ping -n -I pppoe2 8.8.8.8 PING 8.8.8.8 (8.8.8.8) from 46.94.119.197 pppoe2: 56(84) bytes of data. ^C --- 8.8.8.8 ping statistics --- 2 packets transmitted, 0 received, 100% packet loss, time 1008ms matze@ubnt:~$ sudo ping -n -I pppoe2 46.94.119.197 PING 46.94.119.197 (46.94.119.197) from 46.94.119.197 pppoe2: 56(84) bytes of data. 64 bytes from 46.94.119.197: icmp_req=1 ttl=64 time=0.389 ms 64 bytes from 46.94.119.197: icmp_req=2 ttl=64 time=0.253 ms ^C --- 46.94.119.197 ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 1001ms rtt min/avg/max/mdev = 0.253/0.321/0.389/0.068 ms matze@ubnt:~$ sudo ping -n -I pppoe2 62.155.246.13 PING 62.155.246.13 (62.155.246.13) from 46.94.119.197 pppoe2: 56(84) bytes of data. ^C --- 62.155.246.13 ping statistics --- 7 packets transmitted, 0 received, 100% packet loss, time 6016ms ------------------- Jan 12 05:28:55 ubnt pppd[10545]: Connected to 28:8a:1c:5b:e6:9b via interface eth0.7 Jan 12 05:28:55 ubnt zebra[753]: interface ppp0 index 10 added. Jan 12 05:28:55 ubnt pppd[10545]: Connect: ppp0 <--> eth0.7 Jan 12 05:28:55 ubnt zebra[753]: interface ppp0 mtu changed from 1500 to 1492 Jan 12 05:28:55 ubnt pppd[10545]: PAP authentication succeeded Jan 12 05:28:55 ubnt pppd[10545]: peer from calling number 28:xx:xx:xx:xx:xx authorized Jan 12 05:28:55 ubnt zebra[753]: warning: PtP interface ppp0 with addr 46.94.119.197/32 needs a peer address Jan 12 05:28:55 ubnt zebra[753]: interface index 10 was renamed from ppp0 to pppoe2 Jan 12 05:28:56 ubnt pppd[10545]: local IP address 46.94.119.197 Jan 12 05:28:56 ubnt pppd[10545]: remote IP address 62.155.246.13 Jan 12 05:28:56 ubnt zebra[753]: interface pppoe2 index 10 changed . ------matze@ubnt:/var/log$ sudo tcpdump -v -n -i pppoe2 tcpdump: listening on pppoe2, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes 05:43:48.289161 IP (tos 0x0, ttl 64, id 16419, offset 0, flags [DF], proto UDP (17), length 61) 46.94.119.197.30715 > 1.1.1.1.53: 55260+ A? de.pool.ntp.org. (33) 05:43:48.289363 IP (tos 0x0, ttl 64, id 55093, offset 0, flags [DF], proto UDP (17), length 61) 46.94.119.197.30715 > 8.8.8.8.53: 55260+ A? de.pool.ntp.org. (33) 05:43:48.289504 IP (tos 0x0, ttl 64, id 55094, offset 0, flags [DF], proto UDP (17), length 61) 46.94.119.197.30715 > 8.8.8.8.53: 55260+ A? de.pool.ntp.org. (33) 05:43:48.289633 IP (tos 0x0, ttl 64, id 16420, offset 0, flags [DF], proto UDP (17), length 61) 46.94.119.197.30715 > 1.1.1.1.53: 55260+ A? de.pool.ntp.org. (33) 05:43:48.838211 IP (tos 0x0, ttl 63, id 25623, offset 0, flags [DF], proto TCP (6), length 60) 46.94.119.197.50806 > 10.175.175.4.42000: Flags [S], cksum 0x35bb (correct), seq 3874380474, win 64240, options [mss 1452,sackOK,TS val 781376709 ecr 0,nop,wscale 4], length 0 05:43:48.858388 IP (tos 0x0, ttl 64, id 16432, offset 0, flags [DF], proto UDP (17), length 80) 46.94.119.197.41982 > 1.1.1.1.53: 1617+ AAAA? detectportal.firefox.com.fritz.box. (52) 05:43:48.858587 IP (tos 0x0, ttl 64, id 55129, offset 0, flags [DF], proto UDP (17), length 80) 46.94.119.197.41982 > 8.8.8.8.53: 1617+ AAAA? detectportal.firefox.com.fritz.box. (52) 05:43:48.858723 IP (tos 0x0, ttl 64, id 55130, offset 0, flags [DF], proto UDP (17), length 80) 46.94.119.197.41982 > 8.8.8.8.53: 1617+ AAAA? detectportal.firefox.com.fritz.box. (52) 05:43:48.858852 IP (tos 0x0, ttl 64, id 16433, offset 0, flags [DF], proto UDP (17), length 80) 46.94.119.197.41982 > 1.1.1.1.53: 1617+ AAAA? detectportal.firefox.com.fritz.box. (52) 05:43:48.861358 IP (tos 0x0, ttl 64, id 16434, offset 0, flags [DF], proto UDP (17), length 60) 46.94.119.197.30715 > 1.1.1.1.53: 54211+ AAAA? ntp.ubuntu.com. (32) 05:43:48.861539 IP (tos 0x0, ttl 64, id 55131, offset 0, flags [DF], proto UDP (17), length 60) 46.94.119.197.30715 > 8.8.8.8.53: 54211+ AAAA? ntp.ubuntu.com. (32) 05:43:48.861675 IP (tos 0x0, ttl 64, id 55132, offset 0, flags [DF], proto UDP (17), length 60) 46.94.119.197.30715 > 8.8.8.8.53: 54211+ AAAA? ntp.ubuntu.com. (32) 05:43:48.876463 IP (tos 0x0, ttl 64, id 16436, offset 0, flags [DF], proto UDP (17), length 70) 46.94.119.197.30715 > 1.1.1.1.53: 35690+ AAAA? detectportal.firefox.com. (42) 05:43:48.876630 IP (tos 0x0, ttl 64, id 55133, offset 0, flags [DF], proto UDP (17), length 70) 46.94.119.197.30715 > 8.8.8.8.53: 35690+ AAAA? detectportal.firefox.com. (42) 05:43:48.876774 IP (tos 0x0, ttl 64, id 55134, offset 0, flags [DF], proto UDP (17), length 70) 46.94.119.197.30715 > 8.8.8.8.53: 35690+ AAAA? detectportal.firefox.com. (42) 05:43:48.876909 IP (tos 0x0, ttl 64, id 16437, offset 0, flags [DF], proto UDP (17), length 70) 46.94.119.197.30715 > 1.1.1.1.53: 35690+ AAAA? detectportal.firefox.com. (42) 05:43:48.879527 IP (tos 0x0, ttl 64, id 16438, offset 0, flags [DF], proto UDP (17), length 70) 46.94.119.197.21072 > 1.1.1.1.53: 59118+ A? ntp.ubuntu.com.fritz.box. (42) 05:43:48.879705 IP (tos 0x0, ttl 64, id 55135, offset 0, flags [DF], proto UDP (17), length 70) 46.94.119.197.21072 > 8.8.8.8.53: 59118+ A? ntp.ubuntu.com.fritz.box. (42) 05:43:48.879853 IP (tos 0x0, ttl 64, id 55136, offset 0, flags [DF], proto UDP (17), length 70) 46.94.119.197.21072 > 8.8.8.8.53: 59118+ A? ntp.ubuntu.com.fritz.box. (42) 05:43:48.879982 IP (tos 0x0, ttl 64, id 16439, offset 0, flags [DF], proto UDP (17), length 70) 46.94.119.197.21072 > 1.1.1.1.53: 59118+ A? ntp.ubuntu.com.fritz.box. (42) 05:43:48.882590 IP (tos 0x0, ttl 64, id 16440, offset 0, flags [DF], proto UDP (17), length 80) 46.94.119.197.54180 > 1.1.1.1.53: 51647+ A? detectportal.firefox.com.fritz.box. (52) 05:43:48.882749 IP (tos 0x0, ttl 64, id 55137, offset 0, flags [DF], proto UDP (17), length 80) 46.94.119.197.54180 > 8.8.8.8.53: 51647+ A? detectportal.firefox.com.fritz.box. (52) 05:43:48.882898 IP (tos 0x0, ttl 64, id 55138, offset 0, flags [DF], proto UDP (17), length 80) 46.94.119.197.54180 > 8.8.8.8.53: 51647+ A? detectportal.firefox.com.fritz.box. (52) 05:43:48.883042 IP (tos 0x0, ttl 64, id 16441, offset 0, flags [DF], proto UDP (17), length 80) 46.94.119.197.54180 > 1.1.1.1.53: 51647+ A? detectportal.firefox.com.fritz.box. (52) 05:43:48.885603 IP (tos 0x0, ttl 64, id 16442, offset 0, flags [DF], proto UDP (17), length 60) 46.94.119.197.30715 > 1.1.1.1.53: 2708+ A? ntp.ubuntu.com. (32) 05:43:48.885834 IP (tos 0x0, ttl 64, id 55139, offset 0, flags [DF], proto UDP (17), length 60) 46.94.119.197.30715 > 8.8.8.8.53: 2708+ A? ntp.ubuntu.com. (32) 05:43:48.885990 IP (tos 0x0, ttl 64, id 55140, offset 0, flags [DF], proto UDP (17), length 60) 46.94.119.197.30715 > 8.8.8.8.53: 2708+ A? ntp.ubuntu.com. (32) 05:43:48.886119 IP (tos 0x0, ttl 64, id 16443, offset 0, flags [DF], proto UDP (17), length 60) 46.94.119.197.30715 > 1.1.1.1.53: 2708+ A? ntp.ubuntu.com. (32) 05:43:48.888685 IP (tos 0x0, ttl 64, id 16444, offset 0, flags [DF], proto UDP (17), length 70) 46.94.119.197.30715 > 1.1.1.1.53: 22569+ AAAA? ntp.ubuntu.com.fritz.box. (42) 05:43:48.889305 IP (tos 0x0, ttl 64, id 55141, offset 0, flags [DF], proto UDP (17), length 70) 46.94.119.197.30715 > 8.8.8.8.53: 22569+ AAAA? ntp.ubuntu.com.fritz.box. (42) 05:43:48.889948 IP (tos 0x0, ttl 64, id 55142, offset 0, flags [DF], proto UDP (17), length 70) 46.94.119.197.30715 > 8.8.8.8.53: 22569+ AAAA? ntp.ubuntu.com.fritz.box. (42) 05:43:48.890600 IP (tos 0x0, ttl 64, id 16445, offset 0, flags [DF], proto UDP (17), length 70) 46.94.119.197.30715 > 1.1.1.1.53: 22569+ AAAA? ntp.ubuntu.com.fritz.box. (42) 05:43:48.895693 IP (tos 0x0, ttl 64, id 16446, offset 0, flags [DF], proto UDP (17), length 70) 46.94.119.197.30715 > 1.1.1.1.53: 27224+ A? detectportal.firefox.com. (42) 05:43:48.895890 IP (tos 0x0, ttl 64, id 55143, offset 0, flags [DF], proto UDP (17), length 70) 46.94.119.197.30715 > 8.8.8.8.53: 27224+ A? detectportal.firefox.com. (42) 05:43:48.896045 IP (tos 0x0, ttl 64, id 55144, offset 0, flags [DF], proto UDP (17), length 70) 46.94.119.197.30715 > 8.8.8.8.53: 27224+ A? detectportal.firefox.com. (42) 05:43:48.896175 IP (tos 0x0, ttl 64, id 16447, offset 0, flags [DF], proto UDP (17), length 70) 46.94.119.197.30715 > 1.1.1.1.53: 27224+ A? detectportal.firefox.com. (42) 05:43:49.132842 IP (tos 0x0, ttl 64, id 16448, offset 0, flags [DF], proto UDP (17), length 60) 46.94.119.197.47765 > 1.1.1.1.53: 20221+ TXT? push.apple.com. (32) 05:43:49.133918 IP (tos 0x0, ttl 64, id 55156, offset 0, flags [DF], proto UDP (17), length 60) 46.94.119.197.47765 > 8.8.8.8.53: 20221+ TXT? push.apple.com. (32) 05:43:49.134899 IP (tos 0x0, ttl 64, id 55157, offset 0, flags [DF], proto UDP (17), length 60) 46.94.119.197.47765 > 8.8.8.8.53: 20221+ TXT? push.apple.com. (32) 05:43:49.135934 IP (tos 0x0, ttl 64, id 16449, offset 0, flags [DF], proto UDP (17), length 60) 46.94.119.197.47765 > 1.1.1.1.53: 20221+ TXT? push.apple.com. (32) 05:43:49.334633 IP (tos 0x0, ttl 64, id 16450, offset 0, flags [DF], proto UDP (17), length 61) 46.94.119.197.41264 > 1.1.1.1.53: 18078+ A? de.pool.ntp.org. (33) 05:43:49.335811 IP (tos 0x0, ttl 64, id 55166, offset 0, flags [DF], proto UDP (17), length 61) 46.94.119.197.41264 > 8.8.8.8.53: 18078+ A? de.pool.ntp.org. (33) 05:43:49.336932 IP (tos 0x0, ttl 64, id 55167, offset 0, flags [DF], proto UDP (17), length 61) 46.94.119.197.41264 > 8.8.8.8.53: 18078+ A? de.pool.ntp.org. (33) 05:43:49.338052 IP (tos 0x0, ttl 64, id 16451, offset 0, flags [DF], proto UDP (17), length 61) 46.94.119.197.41264 > 1.1.1.1.53: 18078+ A? de.pool.ntp.org. (33) 05:43:49.480532 IP (tos 0x0, ttl 64, id 16454, offset 0, flags [DF], proto UDP (17), length 93) 46.94.119.197.46854 > 1.1.1.1.53: 15109+ AAAA? firefox.settings.services.mozilla.com.fritz.box. (65) 05:43:49.481702 IP (tos 0x0, ttl 64, id 55169, offset 0, flags [DF], proto UDP (17), length 93) 46.94.119.197.46854 > 8.8.8.8.53: 15109+ AAAA? firefox.settings.services.mozilla.com.fritz.box. (65) 05:43:49.482876 IP (tos 0x0, ttl 64, id 55170, offset 0, flags [DF], proto UDP (17), length 93) 46.94.119.197.46854 > 8.8.8.8.53: 15109+ AAAA? firefox.settings.services.mozilla.com.fritz.box. (65) 05:43:49.484063 IP (tos 0x0, ttl 64, id 16455, offset 0, flags [DF], proto UDP (17), length 93) 46.94.119.197.46854 > 1.1.1.1.53: 15109+ AAAA? firefox.settings.services.mozilla.com.fritz.box. (65) 05:43:49.487870 IP (tos 0x0, ttl 64, id 16456, offset 0, flags [DF], proto UDP (17), length 93) 46.94.119.197.30715 > 1.1.1.1.53: 7151+ A? firefox.settings.services.mozilla.com.fritz.box. (65) 05:43:49.488928 IP (tos 0x0, ttl 64, id 55171, offset 0, flags [DF], proto UDP (17), length 93) 46.94.119.197.30715 > 8.8.8.8.53: 7151+ A? firefox.settings.services.mozilla.com.fritz.box. (65) 05:43:49.490084 IP (tos 0x0, ttl 64, id 55172, offset 0, flags [DF], proto UDP (17), length 93) 46.94.119.197.30715 > 8.8.8.8.53: 7151+ A? firefox.settings.services.mozilla.com.fritz.box. (65) 05:43:49.491250 IP (tos 0x0, ttl 64, id 16457, offset 0, flags [DF], proto UDP (17), length 93) 46.94.119.197.30715 > 1.1.1.1.53: 7151+ A? firefox.settings.services.mozilla.com.fritz.box. (65) 05:43:49.494984 IP (tos 0x0, ttl 64, id 16458, offset 0, flags [DF], proto UDP (17), length 83) 46.94.119.197.46646 > 1.1.1.1.53: 39746+ AAAA? firefox.settings.services.mozilla.com. (55) 05:43:49.495790 IP (tos 0x0, ttl 64, id 55173, offset 0, flags [DF], proto UDP (17), length 83) 46.94.119.197.46646 > 8.8.8.8.53: 39746+ AAAA? firefox.settings.services.mozilla.com. (55) 05:43:49.496422 IP (tos 0x0, ttl 64, id 55174, offset 0, flags [DF], proto UDP (17), length 83) 46.94.119.197.46646 > 8.8.8.8.53: 39746+ AAAA? firefox.settings.services.mozilla.com. (55) 05:43:49.497043 IP (tos 0x0, ttl 64, id 16459, offset 0, flags [DF], proto UDP (17), length 83) 46.94.119.197.46646 > 1.1.1.1.53: 39746+ AAAA? firefox.settings.services.mozilla.com. (55) 05:43:49.502170 IP (tos 0x0, ttl 64, id 16460, offset 0, flags [DF], proto UDP (17), length 83) 46.94.119.197.26236 > 1.1.1.1.53: 27229+ A? firefox.settings.services.mozilla.com. (55) 05:43:49.502811 IP (tos 0x0, ttl 64, id 55175, offset 0, flags [DF], proto UDP (17), length 83) 46.94.119.197.26236 > 8.8.8.8.53: 27229+ A? firefox.settings.services.mozilla.com. (55) 05:43:49.503437 IP (tos 0x0, ttl 64, id 55176, offset 0, flags [DF], proto UDP (17), length 83) 46.94.119.197.26236 > 8.8.8.8.53: 27229+ A? firefox.settings.services.mozilla.com. (55) 05:43:49.504054 IP (tos 0x0, ttl 64, id 16461, offset 0, flags [DF], proto UDP (17), length 83) 46.94.119.197.26236 > 1.1.1.1.53: 27229+ A? firefox.settings.services.mozilla.com. (55) ^C 60 packets captured 61 packets received by filter 1 packet dropped by kernel -----------