thanks for the info its interesting.

Looking at the live iptables rules on the router it is using both SNAT and masquerade.
However SNAT is only used on the lan ips masquerade is used on 0.0.0.0 meaning what you said is probably happening. Whether or not I can manually change this with it sticking (at least between reboots) is another matter tho.

For ppp persist is configured so the sigterm defenitly shouldnt be happening.

I think you may well be right regarding iptables but given there is some rules set with my wan ip I believe these rules are probably getting updated everytime ppp connects and if thats the case me manually changing them probably wont be effective, but I will try to replace the postrouting masq with snat and see what happens when I cycle ppp.

--edit--

Ok I found a setting in tomato for SNAT, enabled it so dont need custom rules. Manually disconnecting ppp still terminates all connections so I did a test with a low LCP timeout, pulled the wan cable for 30 seconds, put it back in, log shows ppp was lost and started again, and my ssh session held, so hopefully this does the trick.

Edited by Chrysalis (Sat 04-Jan-14 01:58:26)

Well tomatoasus I had trouble getting ipv6 working correctly, although I got it working the things I had to do I thought was very silly so am preparing a report to both the 2 guys maintaining forks (although I think wont get fixed), and I changed back to the merlinasus firmware which is much more compliant with RFC's. The problem is this firmware is masquerade with no option to use snat, so will be contacting this dev to get it implemented though he is much more active than the tomato guys.

this is only an issue on ipv4 tho, from what I can see on the ipv6 iptables the problem will be ipv4 side only.

It's possible that just disabling nat by gui and then making manual rules would let you do snat.

Of course I don't know your firmware at all. When I first did this on a modem/router it was using routertech firmware which didn't have snat in GUI, but did have it in kernel. Later I got a /29 and and started doing NAT on a separate PC I used as a gateway.

WRT still loosing connections when pppd is killed, maybe something is happening in the scripts which by default are /etc/ppp/ip-up /etc/ppp/ip-down (routertech didn't use those on the version I used back then).

yeah although I expect that wont be too easy either, all these custom firmwares, asuswrt etc. one thing that cant be customised is the iptables rules and the scripts they use seem hidden away. They write temporary config files instead of permanent one's.

I will leave it alone for now.

Post deleted by AndyHCZ