D-Link Forums
The Graveyard - Products No Longer Supported => Routers / COVR => DIR-865L => Topic started by: rlcronin on August 16, 2012, 06:40:43 AM
-
As previously reported, sometimes when I reboot my 865, when it comes back up it has forgotten the admin login password I previously set and has reverted back to blank. I had previously thought this only happened when rebooting after restoring a saved configuration. However, yesterday I changed turned on IPV4 multicast streams (to fix a problem with AirPrint) and had to reboot to activate it. Sure enough, after the reboot the password I had previously saved no longer worked and I had to supply blanks to get logged in.
It seems a fairly serious security issue to me if the password is going to randomly get reset to blanks.
--
bc
-
What FW version is currently loaded?
What browser are you using when this happens? Happen if you use IE?
Have you cleared the browser cache?
Does this happen on more than one PC?
Have you done a factory reset along with clearing the browser cache and then set up something on the router and then have it reboot?
Please review this:
http://forums.dlink.com/index.php?topic=50314.0 (http://forums.dlink.com/index.php?topic=50314.0)
-
What FW version is currently loaded?
What browser are you using when this happens? Happen if you use IE?
Have you cleared the browser cache?
Does this happen on more than one PC?
Have you done a factory reset along with clearing the browser cache and then set up something on the router and then have it reboot?
Please review this:
http://forums.dlink.com/index.php?topic=50314.0 (http://forums.dlink.com/index.php?topic=50314.0)
1.01
Chrome, I refuse to use IE
I clear my browser cache every time I close it (multiple times a day, yes I am compulsive)
Not sure, I tend to reboot the router from the PC that the router sits next to
This litany of questions smacks of a helpdesk script intended to tire out the user so they'll stop complaining and you won't have to fix a problem ;-)
--
bc
-
Please review this:
http://forums.dlink.com/index.php?topic=50314.0 (http://forums.dlink.com/index.php?topic=50314.0)
Oh and as regards this advice, could you please explain how the router forgetting the password I configured after weeks of it working fine and simply rebooting the router could possibly have anything whatsoever to do with what browser I initiated the reboot from? This sounds like a myth. I'd like some factual basis for the claims, please.
--
bc
-
I would ask you to give IE and or FF a try and test this out. Many variables with Chrome that maybe causing issues with the router. Just the other day a guy bricked his 835 while upgrading FW using Chrome. We have seen other problems in using Chrome as a router management tool. Please consider trying IE and or FF and let us know the results.
Unfortunately the 865 isn't available at a store here yet or I would go try one out and test this myself. ::)
-
I would also contact DLink support, level 2 or higher and talk to them about this.
-
Hows your 865L doing? ???
-
Hows your 865L doing? ???
Stable, but still with the various issues I mentioned (but none are showstoppers).
--
bc
-
We still waiting on release day here. ::)
-
Hows your 865L doing? ???
So remember my DNS Relay issue? If I disable DNS relay and configure static DNS servers in the router's Internet Settings dialog (pointing to OpenDNS), while my PC's would get the correct set of DNS servers (the two OpenDNS ones and two from my ISP), all of their DNS lookups would timeout.
Well, since I had been running with DNS Relay ON as a workaround and I'd been having problems with OpenDNS sometimes not being used (going to welcome.opendns.com would claim I wasn't using OpenDNS despite the fact my static DNS servers in the router were pointing to OpenDNS), I was getting desperate for a real solution. So, I researched it a bit more last night and came across some information suggesting that turning off SPI (in Firewall Settings) would help. I just tried that and indeed it worked.
So, something about DNS Relay being off causes DNS conversations to be subjected to SPI and something in the router's SPI processing causes DNS queries to never complete. I saw a suggestion that the bug may have something to do with modern DNS queries requiring more than 512 bytes and speculation that the router fails to allocate more than that. I'm not expert in these matters by any means, so this explanation may not be 100% spot-on, but if I were a Dlink firmware engineer I'd use it as a clue as to where to start looking.
I regret that this morning I can't find the exact article that I found the SPI clue in. It was a well researched and very detailed account of a Dlink router's behavior in all the possible configuration states (relay on, relay off, SPI on, SPI off, etc.). I found it by searching Google for "DLINK DNS RELAY PROBLEM" and then just wading through the (many, many) hits. Apparently this issue goes back years and years and affects nearly every Dlink router, ever! On some routers there was no interaction with SPI (i.e. tunring off DNS relay was enough to fix it), but on others you also had to turn off SPI. Based on my results, it seems the 865L is one of those.
While I am happy to have found a way to get DNS working properly with this router, I am discouraged that this problem has been around so very long and that Dlink can't fix it once and for all. Further, I am not certain I want to run with SPI off for any length of time, so now I have to decide whether I want move on to some other router or not. I think I will run off to BestBuy today to pickup a competitor's router to test (and return if it doesn't pan out).
--
bc
-
If you happen to cross that article again, it would be helpful to get a review of it. Did you happen to notice the date of th article?
I would agree that there could be an issue with DNS and SPI, however in most uses of SOHO routers, generally most uses are going to be using default ISP DNS and leaving the router in default settings, however given the fact that options are available in the router to set up using other DNS, realistically it should work well using default or custom settings with SPI and DNS Relay ON or OFF.
I have been running custom DNS addresses using Name Bench from Google as I primary and secondary for finding faster DNS. DNS Relay has been OFF. However I do notice that sometimes on my Mac Book Pro and using Opera, that when I open pages to the web, Opera seems to be still trying to load or complete and come to a full stop when loading pages. Not sure if this could be related to this or the WiFi. Generally it works most of the time so I believe its a Wifi issue.
As for this DNS Problem, there could be other factors leading to it, ISP services, ISP modem setup and configuration and how did they come to the conclusion of this "DLINK DNS RELAY PROBLEM"? I believe there are other variables that could lead to false positives.
We are currently monitoring a problem between one Canadian ISP and a DIR-835. Seems that YouTube and other sites are not working well with these two configurations. I have verified that here in the U.S., the problem does not exist a I went and bought the 835 and tested it out and then returned the router. Seems like we see some odd ball issues always with Canadian ISPs and these routers.
I wish the 865L was on sale here so I could test this out. One thing you could do, try taking the router to a different place, friend, family or someone who's is on a different ISP and Modem. See if the problem follows. Would be a good test and let you know more about it. I supposed I can test it out on a couple of routers I got here. If you can either post or PM me some exact details of setting up the router and steps you take, would be helpful. I just got an ol DIR-685 to test out. Will see if I exhibit this DHCP Reservation issue they are seeing over on that board even though the poor thing is EOL.
I'll pass this along to D-Link so they so. Please keep us posted on your results with the 865L and a different Mfr router. And if you come across that article, please post it.
Have a good weekend.
-
we should probably start a new thread on this...Want to start a new post?
Did the article happen to be on DSLreports or Broadbandreports?
-
I doubt this has anything to do with the ISP, but for the record, my ISP is CableVision in Dutchess County NY. The modem is an Arris TM802G running firmware TS0703123_090611_MODEL_7_8. The connection is rated at 50/8, but consistently delivers 60/8.
As near as I can tell, the minimum router settings to recreate this are:
On the Manual Internet Connection Setup page:
Internet connection: Dynamic IP (DHCP)
Primary DNS Server: 208.67.222.222
Secondary DNS Server: 208.67.220.220
On the Network Settings page:
Enable DNS Relay is UN-CHECKED
Enable DHCP Server is CHECKED
On the Firewall Settings page:
Enable SPI is CHECKED
When my PC requests an IP address it gets:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) 82583V Gigabit Network Connection
Physical Address. . . . . . . . . : 54-04-A6-3C-DC-B3
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::cdc5:4a91:5a8d:915d%16(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.100(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Friday, October 05, 2012 10:24:32 AM
Lease Expires . . . . . . . . . . : Tuesday, November 12, 2148 8:58:52 PM
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DHCPv6 IAID . . . . . . . . . . . : 424936614
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-40-DA-0C-20-CF-30-4F-F3-B7
DNS Servers . . . . . . . . . . . : 208.67.222.222
208.67.220.220
167.206.251.129
167.206.251.130
NetBIOS over Tcpip. . . . . . . . : Enabled
If I then open a command prompt and do (say) ping google.com, ping sits there for quite some time doing nothing and eventually times out, saying it cannot resolve the address.
If I then UN-CHECK Enable SPI and issue
ipconfig /release
ipconfig /flushdns
ipconfig /renew
from the PC and issue the same ping command, it works.
--
bc
-
we should probably start a new thread on this...Want to start a new post?
Did the article happen to be on DSLreports or Broadbandreports?
I'm sorry, I forget. I'll need to try to find it again ...
--
bc
-
FYi,
Seen some various issue with Arris Modems (http://forums.dlink.com/index.php?topic=50682.0).
-
Tried your settings on my DIR-685 and with my Mac I can successfully ping google.com. I'll give my DIR-857 a go.
-
FYi,
Seen some various issue with Arris Modems (http://forums.dlink.com/index.php?topic=50682.0).
The TM802G does not have a built-in router to my knowledge.
--
bc
-
Tried your settings on my DIR-685 and with my Mac I can successfully ping google.com. I'll give my DIR-857 a go.
I did not have this issue with the 857.
--
bc
-
ok, confirmed the 857 as well. It's working. Possible this is with certain models. I forwarded this to D-Link. Hope will review and let us know.
-
ok, confirmed the 857 as well. It's working. Possible this is with certain models. I forwarded this to D-Link. Hope will review and let us know.
I left out some of my settings from the Firewall Settings page, perhaps they matter:
I have UDP endpoint filtering set to Address Restricted.
I have TCP endpoint filtering set to Address Restricted.
I have Enable anti-spoof checking UN-checked.
I have Enable DMZ UN-checked.
I have all the ALG's except SIP checked.
--
bc
-
If you change both NAT settings to Endpoint Independent, any change?
-
If you change both NAT settings to Endpoint Independent, any change?
Actually, yes. With SPI ON and both set to Endpoint Independent, it works ...
Perhaps someone better schooled in networking than I could explain whether the behavior I observed with it set to Address Rerstricted is expected, normal behavior? If so, then I suppose this is a user error. As Steve Jobs might have said, "You're setting it wrong." :-)
So now I am curious, what happens if YOU set yours to Address Restricted. Does that recreate the "problem"?
--
bc
-
Let me see, I know the 857 doesn't have additional NAT options so I presume by default, NAT settings are being handled automatically or maybe set for Endpoint maybe. I don't know. The 685 has user custom options under firewall so a user can set up just about anything. Let me get a different router that has Endpoint and Restricted options out and test. I presume that if it's set for restricted then this may impact the result and maybe working as expected.
I probably should have mentioned or asked you about your NAT settings before. ::)
-
After reading the description of the difference between endpoint independent and address restricted, it seems as though what must be happening is that the DNS responses I am receiving must be coming from a different IP address than the one I made the connection on (as endpoint independent allows that, whereas address restricted does not). It seems reasonable there could be some kind of load balancing going on at OpenDNS that farms queries directed at the main OpenDNS IP to a stable of responders that live at different IP addresses.
Which also suggests that maybe if I turned DNS relay back on and left the NAT settings at endpoint independent, everything would work OK as well (it definitely did not with the NAT settings set to address restricted, at least not consistently, sometimes welcome.opendns.com told me I was not using OpenDNS, sometimes it told me I was).
--
bc
-
Which also suggests that maybe if I turned DNS relay back on and left the NAT settings at endpoint independent, everything would work OK as well (it definitely did not with the NAT settings set to address restricted, at least not consistently, sometimes welcome.opendns.com told me I was not using OpenDNS, sometimes it told me I was).
Confirmed. I think I get it now. Whew. Ok then, consider this a user error. I was indeed setting it wrong.
It still loses the admin password after a reboot though, really it does ;-)
And loopback is still a problem (can't open my WHS website from within my LAN using its external address).
But I am a bit happier with it now, nonetheless.
--
bc
-
Ok,
well I'm getting successful pings back on the DGL-4500. Using all 3 modes and flushing DNS cache.
Maybe it's how the 4500 handles everything and could be different from the 865L in that regard.
Well, at least you have a better option and this seems to be a good thing. Endpoint Independency has resolved many issues before.
So you are still seeing the admin password being cleared? Happens on all different browsers?
Hope it keeps working better for ya.