https://pastein.ru/t/McB
Загрузка данных
C:\Windows\system32>ssh root@10.10.23.1
The authenticity of host '10.10.23.1 (10.10.23.1)' can't be established.
ED25519 key fingerprint is SHA256:lHZtTZJkC9R4k2GL48s9sWJe57XEri0xu5UwMwucLS8.
This key is not known by any other names.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '10.10.23.1' (ED25519) to the list of known hosts.
root@10.10.23.1's password:
BusyBox v1.37.0 (2026-05-13 22:42:09 UTC) built-in shell (ash)
_______ ________ __
| |.-----.-----.-----.| | | |.----.| |_
| - || _ | -__| || | | || _|| _|
|_______|| __|_____|__|__||________||__| |____|
|__| W I R E L E S S F R E E D O M
-----------------------------------------------------
OpenWrt 25.12.4, r32933-4ccb782af7 Dave's Guitar
-----------------------------------------------------
OpenWrt recently switched to the "apk" package manager!
OPKG Command APK Equivalent Description
------------------------------------------------------------------
opkg install <pkg> apk add <pkg> Install a package
opkg remove <pkg> apk del <pkg> Remove a package
opkg upgrade apk upgrade Upgrade all packages
opkg files <pkg> apk info -L <pkg> List package contents
opkg list-installed apk info List installed packages
opkg update apk update Update package lists
opkg search <pkg> apk search <pkg> Search for packages
------------------------------------------------------------------
For more information visit:
https://openwrt.org/docs/guide-user/additional-software/opkg-to-apk-cheatsheet
root@homespot:~# echo "=== 1. TIME & UPTIME ==="
=== 1. TIME & UPTIME ===
root@homespot:~# date; uptime
=== 2. NTP LOGS ==="
logread | grep -iE "(nTue Jun 23 20:12:33 MSK 2026
tp|time)" | tail -n 10
echo "=== 3. WAN INTE 20:12:33 up 5 min, load average: 0.69, 0.39, 0.17
root@homespot:~# echo "=== 2. NTP LOGS ==="
=== 2. NTP LOGS ===
root@homespot:~# logread | grep -iE "(ntp|time)" | tail -n 10
RFACE ==="
ifconfig wan
echo "=== 4. WAN STATUS ==="
ubus call network.interface.wan status | grep -E "(up|address|gateway|error)"
echo "=== 5. ROUTES ==="
ip route
echo "=== 6. PING GATEWAY ==="
gw=$(ip route | awk '/default/ {print $3}'); ping -c 3 -W 2 $gw
echo "=== 7. PING 8.8.8.8 ==="
ping -c 3 -W 2 8.8.8.8
echo "=== 8. DNS CONFIG ==="
echo "/etc/resolv.conf:"; cat /etc/resolv.conf
echo "/tmp/resolv.conf.d/resolv.conf.auto:"; cat /tmp/resolv.conf.d/resolv.conf.auto 2>/dev/null
echo "=== 9. RAW DNS (8.8.8.8) ==="
nslookup google.com 8.8.8.8
echo "=== 10. SMARTDNS TEST (Port 5335) ==="
nslookup google.com 127.0.0.1:5335
echo "=== 11. DNSMASQ TEST (Port 53) ==="
nslookup google.com 127.0.0.1
echo "=== 12. SMARTDNS LOGS ==="
logread | grep smartdns | tail -n 20
echo "=== 13. SING-BOX LOGS ==="
logread | grep sing-box | tail -n 15
echo "=== 14. FIREWALL MTU & WAN ==="
uci show firewall | grep -E "name='wan'|mtu_fix"
uci show network.wan
echo "=== 15. DOH DIRECT TEST (Cloudflare) ==="
curl -v -I -m 5 https://1.1.1.1/dnTue Jun 23 20:12:31 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:31 ERROR [171135907 5.0s] connection: open connection to 149.154.167.50:80 using outbound/vless[vless-out]: dial tcp 198.55.103.182:443: i/o timeout
Tue Jun 23 20:12:31 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:31 ERROR [1410418116 5.3s] connection: open connection to 146.70.170.228:22 using outbound/direct[direct]: dial tcp 146.70.170.228:22: i/o timeout
Tue Jun 23 20:12:32 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:32 ERROR [370648745 5.1s] connection: open connection to 18.237.193.132:22 using outbound/direct[direct]: dial tcp 18.237.193.132:22: i/o timeout
Tue Jun 23 20:12:32 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:32 ERROR [3916493768 5.5s] connection: open connection to 143.198.247.235:443 using outbound/direct[direct]: dial tcp 143.198.247.235:443: i/o timeout
Tue Jun 23 20:12:32 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:32 ERROR [1773648798 5.0s] connection: open connection to 8.8.8.8:853 using outbound/direct[direct]: dial tcp 8.8.8.8:853: i/o timeout
Tue Jun 23 20:12:32 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:32 ERROR [696116555 5.2s] connection: open connection to 137.184.40.156:80 using outbound/direct[direct]: dial tcp 137.184.40.156:80: i/o timeout
Tue Jun 23 20:12:32 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:32 ERROR [401710483 5.0s] connection: open connection to 91.108.56.187:443 using outbound/vless[vless-out]: dial tcp 198.55.103.182:443: i/o timeout
Tue Jun 23 20:12:32 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:32 ERROR [819332892 5.0s] connection: open connection to 91.108.56.187:80 using outbound/vless[vless-out]: dial tcp 198.55.103.182:443: i/o timeout
Tue Jun 23 20:12:32 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:32 ERROR [2395583116 5.0s] connection: open connection to 139.162.44.194:8069 using outbound/direct[direct]: dial tcp 139.162.44.194:8069: i/o timeout
Tue Jun 23 20:12:32 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:32 ERROR [1372759815 5.2s] connection: open connection to 172.232.148.163:977 using outbound/direct[direct]: dial tcp 172.232.148.163:977: i/o timeout
root@homespot:~# echo "=== 3. WAN INTERFACE ==="
=== 3. WAN INTERFACE ===
root@homespot:~# ifconfig wan
s-query
echo "=== 16. DOH DIRECT TESwan Link encap:Ethernet HWaddr D4:0D:AB:50:A4:73
inet addr:109.60.192.79 Bcast:109.60.192.255 Mask:255.255.255.0
T (Google) ==="
cu UP BROADCAST RUNNING MULTICAST MTU:1492 Metric:1
RX packets:327 errors:0 dropped:39 overruns:0 frame:0
TX packets:9289 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:20374 (19.8 KiB) TX bytes:1356988 (1.2 MiB)
rl -v -I -m 5 https://8.8.8.8/root@homespot:~# echo "=== 4. WAN STATUS ==="
=== 4. WAN STATUS ===
root@homespot:~# ubus call network.interface.wan status | grep -E "(up|address|gateway|error)"
"up": true,
"uptime": 295,
"updated": [
"addresses",
"ipv4-address": [
"address": "109.60.192.79",
"ipv6-address": [
"ipv4-address": [
"ipv6-address": [
root@homespot:~# echo "=== 5. ROUTES ==="
=== 5. ROUTES ===
root@homespot:~# ip route
default via 109.60.192.1 dev wan
10.10.23.0/24 dev br-lan scope link src 10.10.23.1
109.60.192.0/24 dev wan scope link src 109.60.192.79
root@homespot:~# echo "=== 6. PING GATEWAY ==="
=== 6. PING GATEWAY ===
root@homespot:~# gw=$(ip route | awk '/default/ {print $3}'); ping -c 3 -W 2 $gw
y
echo "=== 17. TPROXY RULESPING 109.60.192.1 (109.60.192.1): 56 data bytes
==="
nft list chain inet fw4 singbox_prerouting 2>/dev/null | head -n 15
echo "=== 18. KERNEL LOGS ==="
dmesg | tail -n 20
--- 109.60.192.1 ping statistics ---
3 packets transmitted, 0 packets received, 100% packet loss
root@homespot:~# echo "=== 7. PING 8.8.8.8 ==="
=== 7. PING 8.8.8.8 ===
root@homespot:~# ping -c 3 -W 2 8.8.8.8
PING 8.8.8.8 (8.8.8.8): 56 data bytes
--- 8.8.8.8 ping statistics ---
3 packets transmitted, 0 packets received, 100% packet loss
root@homespot:~# echo "=== 8. DNS CONFIG ==="
=== 8. DNS CONFIG ===
root@homespot:~# echo "/etc/resolv.conf:"; cat /etc/resolv.conf
/etc/resolv.conf:
search lan
nameserver 127.0.0.1
nameserver ::1
root@homespot:~# echo "/tmp/resolv.conf.d/resolv.conf.auto:"; cat /tmp/resolv.conf.d/resolv.conf.auto 2>/dev/null
/tmp/resolv.conf.d/resolv.conf.auto:
# Interface wan
nameserver 8.8.8.8
root@homespot:~# echo "=== 9. RAW DNS (8.8.8.8) ==="
=== 9. RAW DNS (8.8.8.8) ===
root@homespot:~# nslookup google.com 8.8.8.8
;; connection timed out; no servers could be reached
root@homespot:~# echo "=== 10. SMARTDNS TEST (Port 5335) ==="
=== 10. SMARTDNS TEST (Port 5335) ===
root@homespot:~# nslookup google.com 127.0.0.1:5335
Server: 127.0.0.1:5335
Address: 127.0.0.1:5335
Non-authoritative answer:
** server can't find google.com: SERVFAIL
root@homespot:~# echo "=== 11. DNSMASQ TEST (Port 53) ==="
=== 11. DNSMASQ TEST (Port 53) ===
root@homespot:~# nslookup google.com 127.0.0.1
Server: 127.0.0.1
Address: 127.0.0.1:53
Non-authoritative answer:
** server can't find google.com: SERVFAIL
root@homespot:~# echo "=== 12. SMARTDNS LOGS ==="
=== 12. SMARTDNS LOGS ===
root@homespot:~# logread | grep smartdns | tail -n 20
root@homespot:~# echo "=== 13. SING-BOX LOGS ==="
=== 13. SING-BOX LOGS ===
root@homespot:~# logread | grep sing-box | tail -n 15
Tue Jun 23 20:12:44 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:44 ERROR [3724703647 5.0s] connection: open connection to 149.154.175.50:443 using outbound/vless[vless-out]: dial tcp 198.55.103.182:443: i/o timeout
Tue Jun 23 20:12:44 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:44 ERROR [3680399210 5.0s] connection: open connection to 149.154.175.50:80 using outbound/vless[vless-out]: dial tcp 198.55.103.182:443: i/o timeout
Tue Jun 23 20:12:44 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:44 ERROR [3569433943 5.0s] connection: open connection to 139.162.184.254:22 using outbound/direct[direct]: dial tcp 139.162.184.254:22: i/o timeout
Tue Jun 23 20:12:44 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:44 ERROR [2080167155 5.0s] connection: open connection to 51.89.244.119:22 using outbound/direct[direct]: dial tcp 51.89.244.119:22: i/o timeout
Tue Jun 23 20:12:45 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:45 ERROR [2979818243 5.2s] connection: open connection to 146.70.227.100:80 using outbound/direct[direct]: dial tcp 146.70.227.100:80: i/o timeout
Tue Jun 23 20:12:45 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:45 ERROR [2049674480 5.3s] connection: open connection to 172.238.183.31:504 using outbound/direct[direct]: dial tcp 172.238.183.31:504: i/o timeout
Tue Jun 23 20:12:45 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:45 ERROR [2669758886 5.0s] connection: open connection to 149.154.167.50:443 using outbound/vless[vless-out]: dial tcp 198.55.103.182:443: i/o timeout
Tue Jun 23 20:12:45 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:45 ERROR [3500225951 5.0s] connection: open connection to 149.154.167.41:443 using outbound/vless[vless-out]: dial tcp 198.55.103.182:443: i/o timeout
Tue Jun 23 20:12:45 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:45 ERROR [2721853846 5.0s] connection: open connection to 149.154.167.41:80 using outbound/vless[vless-out]: dial tcp 198.55.103.182:443: i/o timeout
Tue Jun 23 20:12:45 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:45 ERROR [922023689 5.0s] connection: open connection to 149.154.167.50:80 using outbound/vless[vless-out]: dial tcp 198.55.103.182:443: i/o timeout
Tue Jun 23 20:12:46 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:46 ERROR [1624597421 5.0s] connection: open connection to 149.154.167.50:443 using outbound/vless[vless-out]: dial tcp 198.55.103.182:443: i/o timeout
Tue Jun 23 20:12:46 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:46 ERROR [1450573467 5.0s] connection: open connection to 149.154.167.41:443 using outbound/vless[vless-out]: dial tcp 198.55.103.182:443: i/o timeout
Tue Jun 23 20:12:46 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:46 ERROR [2420001647 5.0s] connection: open connection to 149.154.167.41:80 using outbound/vless[vless-out]: dial tcp 198.55.103.182:443: i/o timeout
Tue Jun 23 20:12:46 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:46 ERROR [3070753842 5.0s] connection: open connection to 149.154.167.50:80 using outbound/vless[vless-out]: dial tcp 198.55.103.182:443: i/o timeout
Tue Jun 23 20:12:46 2026 daemon.err sing-box[3035]: +0000 2026-06-23 17:12:46 ERROR [3115993172 5.0s] connection: open connection to 54.193.170.51:443 using outbound/direct[direct]: dial tcp 54.193.170.51:443: i/o timeout
root@homespot:~# echo "=== 14. FIREWALL MTU & WAN ==="
=== 14. FIREWALL MTU & WAN ===
root@homespot:~# uci show firewall | grep -E "name='wan'|mtu_fix"
firewall.@zone[1].name='wan'
firewall.@zone[1].mtu_fix='1'
root@homespot:~# uci show network.wan
network.wan=interface
network.wan.device='wan'
network.wan.proto='static'
network.wan.ipv6='0'
network.wan.peerdns='0'
network.wan.username='P3E2412s2119'
network.wan.password='jOqTwm0c2e3i'
network.wan.mtu='1492'
network.wan.multipath='off'
network.wan.ipaddr='109.60.192.79'
network.wan.gateway='109.60.192.1'
network.wan.netmask='255.255.255.0'
network.wan.dns='8.8.8.8'
root@homespot:~# echo "=== 15. DOH DIRECT TEST (Cloudflare) ==="
=== 15. DOH DIRECT TEST (Cloudflare) ===
root@homespot:~# curl -v -I -m 5 https://1.1.1.1/dns-query
* Connection timed out after 5002 milliseconds
curl: (28) Connection timed out after 5002 milliseconds
root@homespot:~# echo "=== 16. DOH DIRECT TEST (Google) ==="
=== 16. DOH DIRECT TEST (Google) ===
root@homespot:~# curl -v -I -m 5 https://8.8.8.8/dns-query
* Connection timed out after 5002 milliseconds
curl: (28) Connection timed out after 5002 milliseconds
root@homespot:~# echo "=== 17. TPROXY RULES ==="
=== 17. TPROXY RULES ===
root@homespot:~# nft list chain inet fw4 singbox_prerouting 2>/dev/null | head -n 15
table inet fw4 {
chain singbox_prerouting {
type filter hook prerouting priority mangle; policy accept;
iifname != "br-lan" return
ip daddr { 10.0.0.0/8, 127.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16 } return
ip daddr 100.64.0.0/10 return
ip daddr { 224.0.0.0/4, 255.255.255.255 } return
udp dport 443 reject
ip daddr { 1.0.0.1, 1.1.1.1, 8.8.4.4, 8.8.8.8 } tcp dport 443 reject with icmp port-unreachable
ip daddr { 1.0.0.1, 1.1.1.1, 8.8.4.4, 8.8.8.8 } udp dport 443 reject with icmp port-unreachable
meta l4proto { tcp, udp } tproxy to :12345 meta mark set 0x00000001
}
}
root@homespot:~# echo "=== 18. KERNEL LOGS ==="
=== 18. KERNEL LOGS ===
root@homespot:~# dmesg | tail -n 20
[ 14.759353] br-lan: port 6(phy1-ap0) entered blocking state
[ 14.764952] br-lan: port 6(phy1-ap0) entered disabled state
[ 14.770642] mt798x-wmac 18000000.wifi phy1-ap0: entered allmulticast mode
[ 14.777724] mt798x-wmac 18000000.wifi phy1-ap0: entered promiscuous mode
[ 14.784645] br-lan: port 6(phy1-ap0) entered blocking state
[ 14.790257] br-lan: port 6(phy1-ap0) entered forwarding state
[ 14.807797] br-lan: port 6(phy1-ap0) entered disabled state
[ 14.817274] mt798x-wmac 18000000.wifi phy1-ap0: left allmulticast mode
[ 14.823842] mt798x-wmac 18000000.wifi phy1-ap0: left promiscuous mode
[ 14.830406] br-lan: port 6(phy1-ap0) entered disabled state
[ 14.849959] br-lan: port 6(phy1-ap0) entered blocking state
[ 14.855578] br-lan: port 6(phy1-ap0) entered disabled state
[ 14.861273] mt798x-wmac 18000000.wifi phy1-ap0: entered allmulticast mode
[ 14.868317] mt798x-wmac 18000000.wifi phy1-ap0: entered promiscuous mode
[ 15.191925] mt7530-mdio mdio-bus:1f wan: Link is Up - 100Mbps/Full - flow control off
[ 23.633311] mt7530-mdio mdio-bus:1f lan1: Link is Up - 100Mbps/Full - flow control rx/tx
[ 23.633337] br-lan: port 1(lan1) entered blocking state
[ 23.646626] br-lan: port 1(lan1) entered forwarding state
[ 80.274849] br-lan: port 6(phy1-ap0) entered blocking state
[ 80.280444] br-lan: port 6(phy1-ap0) entered forwarding state
root@homespot:~# # 1. Отключаем SmartDNS и Sing-box
it.d/smaroot@homespot:~# /etc/init.d/smartdns stop
martdns disable
/etc/init.d/sing-box stop
/etc/init.d/sing-box disable
# 2. Перенастраиваем встроенный dnsmasq на обычный Google DNS (порт 53)
uci delete dhcp.@dnsmasq[0].server 2>/dev/null
uci set dhcp.@dnsmasq[0].noresolv='0'
uci add_list dhcp.@dnsmasq[0].server='8.8.8.8'
uci add_list dhcp.@dnsmasq[0].server='1.1.1.1'
uci commit dhcp
# 3. Назначаем Google DNS самому интерфейсу WAN
uci set network.wan.dns='8.8.8.8'
uci commit network
# 4. Перезапускаем все службы для применения настроек
/etc/init.d/network restart
/etc/init.d/dnsmasq restart
/etc/init.d/firewall restart
root@homespot:~# /etc/init.d/smartdns disable
root@homespot:~# /etc/init.d/sing-box stop
root@homespot:~# /etc/init.d/sing-box disable
root@homespot:~#
root@homespot:~# # 2. Перенастраиваем встроенный dnsmasq на обычный Google DNS (пор
т 53)
root@homespot:~# uci delete dhcp.@dnsmasq[0].server 2>/dev/null
root@homespot:~# uci set dhcp.@dnsmasq[0].noresolv='0'
root@homespot:~# uci add_list dhcp.@dnsmasq[0].server='8.8.8.8'
root@homespot:~# uci add_list dhcp.@dnsmasq[0].server='1.1.1.1'
root@homespot:~# uci commit dhcp
root@homespot:~#
root@homespot:~# # 3. Назначаем Google DNS самому интерфейсу WAN
root@homespot:~# uci set network.wan.dns='8.8.8.8'
root@homespot:~# uci commit network
root@homespot:~#
root@homespot:~# # 4. Перезапускаем все службы для применения настроек
root@homespot:~# /etc/init.d/network restart
root@homespot:~# /etc/init.d/dnsmasq restart
udhcpc: started, v1.37.0
udhcpc: broadcasting discover
udhcpc: no lease, failing
root@homespot:~# /etc/init.d/firewall restart
root@homespot:~#