Output of "cat /etc/config/mwan3" : config rule 'default_rule' option proto 'all' option sticky '0' option use_policy 'WAN_P3' option dest_ip '0.0.0.0/0' config rule 'default_v6_rule' option dest_ip '::/0' option proto 'all' option sticky '0' option use_policy 'WAN_V6_P3' config rule 'direct_rule' option proto 'all' option sticky '0' option use_policy 'WAN_P1' option dest_ip '0.0.0.0/0' config policy 'WAN_P1' option last_resort 'default' list use_member 'WAN1_G1' config policy 'WAN_V6_P1' list use_member 'WAN1_V6_G1' option last_resort 'default' config policy 'WAN_P2' option last_resort 'default' list use_member 'WAN2_G1' config policy 'WAN_V6_P2' list use_member 'WAN2_V6_G1' option last_resort 'default' config policy 'WAN_P3' option last_resort 'default' list use_member 'WAN1_G1' list use_member 'WAN2_G1' config policy 'WAN_V6_P3' list use_member 'WAN1_V6_G1' list use_member 'WAN2_V6_G1' option last_resort 'default' config member 'WAN1_G1' option interface 'WAN1' option weight '10' option metric '10' config member 'WAN1_V6_G1' option interface 'WAN1_V6' option metric '15' option weight '10' config member 'WAN2_G1' option interface 'WAN2' option weight '1' option metric '30' config member 'WAN2_V6_G1' option interface 'WAN2_V6' option metric '35' option weight '1' config interface 'WAN1' option reliability '1' option count '1' option timeout '2' option interval '5' option down '3' option up '3' list track_ip '8.8.8.8' list track_ip '8.8.4.4' option enabled '1' config interface 'WAN1_V6' option reliability '1' option count '1' option timeout '2' option interval '5' option down '3' option up '3' option enabled '0' config interface 'WAN2' option reliability '1' option timeout '5' option interval '10' option enabled '1' list track_ip '8.8.8.8' list track_ip '8.8.4.4' option count '3' option down '5' option up '5' config interface 'WAN2_V6' option reliability '1' option count '1' option timeout '5' option interval '10' option down '5' option up '5' option enabled '1' list track_ip '2001:4860:4860::8844' list track_ip '2001:4860:4860::8888' config rule 'direct_v6_rule' option dest_ip '::/0' option proto 'all' option sticky '0' option use_policy 'WAN_V6_P3' Output of "cat /etc/config/network" : config interface 'loopback' option ifname 'lo' option proto 'static' option ipaddr '127.0.0.1' option netmask '255.0.0.0' config globals 'globals' option ula_prefix '2001:470:cac2::/48' config switch option name 'switch0' option reset '1' option enable_vlan '1' config switch_vlan option device 'switch0' option vlan '2' option vid '835' option ports '4t 6' config interface 'OVPN' option _orig_ifname 'null' option _orig_bridge 'false' option ifname 'tun0' option metric '100' option proto 'none' config interface 'LAN1' option proto 'static' option ipaddr '172.22.250.254' option netmask '255.255.255.0' option ip6assign '64' option ip6hint 'f250' option _orig_ifname 'null' option _orig_bridge 'false' option ifname 'eth0.1000' config interface 'LAN2' option proto 'static' option ipaddr '172.22.253.1' option netmask '255.255.255.128' option _orig_ifname 'null' option _orig_bridge 'false' option ifname 'eth0.1001' option metric '20' option delegate '0' config interface 'WAN1' option _orig_ifname 'eth1' option _orig_bridge 'false' option ifname 'eth1' option proto 'pppoe' USERNAME HIDDEN PASSWORD HIDDEN option ipv6 'auto' option metric '10' config switch_vlan option device 'switch0' option vlan '4' option vid '1000' option ports '2 3t 5t' config switch_vlan option device 'switch0' option vlan '5' option vid '1001' option ports '1 3t 5t' config interface 'WAN2' option _orig_ifname 'wlan2' option _orig_bridge 'false' option proto 'dhcp' option metric '30' option ifname 'eth0.1' config route option interface 'OVPN' option target '10.0.134.0' option netmask '255.255.255.0' option gateway '10.26.0.5' option metric '5' config switch_vlan option device 'switch0' option vlan '6' option vid '1' option ports '0 5t' config interface 'WLAN1' option type 'bridge' option proto 'static' option ipaddr '172.22.251.254' option netmask '255.255.255.0' option ip6assign '64' option ip6hint 'f251' config interface 'WLAN2' option type 'bridge' option proto 'static' option ipaddr '172.22.252.254' option netmask '255.255.255.0' option ip6assign '64' option ip6hint 'f252' config interface 'WAN1_V6' option proto 'none' option ifname 'null' config interface 'WAN2_V6' option proto '6in4' option peeraddr '216.66.84.42' option ip6addr '(obfuscated)::2/64' option ip6prefix '2001:470:cac2::/48' option tunnelid '(obfuscated)' USERNAME HIDDEN PASSWORD HIDDEN option metric '35' option mtu '1480' option auto '0' Output of "ifconfig" : 6in4-WAN2_V6 Link encap:IPv6-in-IPv4 inet6 addr: fe80::c1f8:2d6a/64 Scope:Link inet6 addr: (obfuscated)::2/64 Scope:Global UP POINTOPOINT RUNNING NOARP MTU:1480 Metric:1 RX packets:52 errors:0 dropped:0 overruns:0 frame:0 TX packets:36 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:7470 (7.2 KiB) TX bytes:3855 (3.7 KiB) br-WLAN1 Link encap:Ethernet HWaddr 00:25:9C:13:77:B4 inet addr:172.22.251.254 Bcast:172.22.251.255 Mask:255.255.255.0 inet6 addr: 2001:470:cac2:f251::1/64 Scope:Global inet6 addr: fe80::225:9cff:fe13:77b4/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:266602 errors:0 dropped:0 overruns:0 frame:0 TX packets:655539 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:52944424 (50.4 MiB) TX bytes:919185186 (876.6 MiB) br-WLAN2 Link encap:Ethernet HWaddr 00:25:9C:13:78:B4 inet addr:172.22.252.254 Bcast:172.22.252.255 Mask:255.255.255.0 inet6 addr: 2001:470:cac2:f252::1/64 Scope:Global inet6 addr: fe80::225:9cff:fe13:78b4/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:907901 errors:0 dropped:0 overruns:0 frame:0 TX packets:2105559 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:293070705 (279.4 MiB) TX bytes:1736465128 (1.6 GiB) eth0 Link encap:Ethernet HWaddr 94:10:3E:8C:AA:D1 inet6 addr: fe80::9610:3eff:fe8c:aad1/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:7698121 errors:0 dropped:319 overruns:0 frame:0 TX packets:9724817 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:532 RX bytes:8048234694 (7.4 GiB) TX bytes:12414919068 (11.5 GiB) Interrupt:27 eth0.1 Link encap:Ethernet HWaddr 94:10:3E:8C:AA:D1 inet addr:(obfuscated) Bcast:(obfuscated) Mask:255.255.254.0 inet6 addr: fe80::9610:3eff:fe8c:aad1/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:486734 errors:0 dropped:0 overruns:0 frame:0 TX packets:348589 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:477724538 (455.5 MiB) TX bytes:154182890 (147.0 MiB) eth0.1000 Link encap:Ethernet HWaddr 94:10:3E:8C:AA:D1 inet addr:172.22.250.254 Bcast:172.22.250.255 Mask:255.255.255.0 inet6 addr: 2001:470:cac2:f250::1/64 Scope:Global inet6 addr: fe80::9610:3eff:fe8c:aad1/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:7209586 errors:0 dropped:0 overruns:0 frame:0 TX packets:9374676 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:7431776071 (6.9 GiB) TX bytes:12221557202 (11.3 GiB) eth0.1001 Link encap:Ethernet HWaddr 94:10:3E:8C:AA:D1 inet addr:172.22.253.1 Bcast:172.22.253.127 Mask:255.255.255.128 inet6 addr: fe80::9610:3eff:fe8c:aad1/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:1482 errors:0 dropped:0 overruns:0 frame:0 TX packets:1545 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:144349 (140.9 KiB) TX bytes:278918 (272.3 KiB) eth1 Link encap:Ethernet HWaddr 94:10:3E:8C:AA:D1 inet6 addr: fe80::9610:3eff:fe8c:aad1/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:24106950 errors:0 dropped:1568 overruns:0 frame:0 TX packets:12486317 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:532 RX bytes:28775577122 (26.7 GiB) TX bytes:11786995895 (10.9 GiB) Interrupt:28 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:65536 Metric:1 RX packets:168421 errors:0 dropped:0 overruns:0 frame:0 TX packets:168421 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:10070887 (9.6 MiB) TX bytes:10070887 (9.6 MiB) pppoe-WAN1 Link encap:Point-to-Point Protocol inet addr:(obfuscated) P-t-P:(obfuscated) Mask:255.255.255.255 UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1456 Metric:1 RX packets:22790410 errors:0 dropped:1620 overruns:0 frame:0 TX packets:11215145 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:3 RX bytes:27002777146 (25.1 GiB) TX bytes:10338562062 (9.6 GiB) wlan0 Link encap:Ethernet HWaddr 00:25:9C:13:77:B4 inet6 addr: fe80::225:9cff:fe13:77b4/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:1706 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:149800 (146.2 KiB) wlan0-1 Link encap:Ethernet HWaddr 00:25:9C:13:78:B4 inet6 addr: fe80::225:9cff:fe13:78b4/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:673030 errors:0 dropped:0 overruns:0 frame:0 TX packets:1540141 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:281281150 (268.2 MiB) TX bytes:1077238680 (1.0 GiB) wlan1 Link encap:Ethernet HWaddr 00:25:9C:13:77:B5 inet6 addr: fe80::225:9cff:fe13:77b5/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:266851 errors:0 dropped:0 overruns:0 frame:0 TX packets:657283 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:56707441 (54.0 MiB) TX bytes:932452236 (889.2 MiB) wlan1-1 Link encap:Ethernet HWaddr 00:25:9C:13:78:B5 inet6 addr: fe80::225:9cff:fe13:78b5/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:239335 errors:0 dropped:0 overruns:0 frame:0 TX packets:572975 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:24956857 (23.7 MiB) TX bytes:702165929 (669.6 MiB) Output of "route -n" : Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 (obfuscated) 0.0.0.0 UG 10 0 0 pppoe-WAN1 0.0.0.0 (obfuscated) 0.0.0.0 UG 30 0 0 eth0.1 (obfuscated).0 0.0.0.0 255.255.254.0 U 30 0 0 eth0.1 (obfuscated).1 0.0.0.0 255.255.255.255 UH 30 0 0 eth0.1 172.22.250.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0.1000 172.22.251.0 0.0.0.0 255.255.255.0 U 0 0 0 br-WLAN1 172.22.252.0 0.0.0.0 255.255.255.0 U 0 0 0 br-WLAN2 172.22.253.0 0.0.0.0 255.255.255.128 U 20 0 0 eth0.1001 (obfuscated) 0.0.0.0 255.255.255.255 UH 0 0 0 pppoe-WAN1 216.66.84.42 193.253.160.3 255.255.255.255 UGH 10 0 0 pppoe-WAN1 216.66.84.42 85.69.252.1 255.255.255.255 UGH 30 0 0 eth0.1 Output of "ip rule show" : 0: from all lookup 128 1: from all lookup local 1001: from all iif pppoe-WAN1 lookup main 1003: from all iif eth0.1 lookup main 2001: from all fwmark 0x100/0xff00 lookup 1 2003: from all fwmark 0x300/0xff00 lookup 3 2253: from all fwmark 0xfd00/0xff00 blackhole 2254: from all fwmark 0xfe00/0xff00 unreachable 32766: from all lookup main 32767: from all lookup default Output of "ip route list table 1-250" : 1 default via (obfuscated) dev pppoe-WAN1 3 default via (obfuscated) dev eth0.1 Firewall default output policy (must be ACCEPT) : ACCEPT Output of "iptables -L -t mangle -v -n" : Chain PREROUTING (policy ACCEPT 353 packets, 30398 bytes) pkts bytes target prot opt in out source destination 449 38824 mwan3_hook all -- * * 0.0.0.0/0 0.0.0.0/0 Chain INPUT (policy ACCEPT 344 packets, 29712 bytes) pkts bytes target prot opt in out source destination Chain FORWARD (policy ACCEPT 9 packets, 686 bytes) pkts bytes target prot opt in out source destination 0 0 TCPMSS tcp -- * tun0 0.0.0.0/0 0.0.0.0/0 ID:66773300 tcp flags:0x06/0x02 /* ovpn (mtu_fix) */ TCPMSS clamp to PMTU 0 0 TCPMSS tcp -- * pppoe-WAN1 0.0.0.0/0 0.0.0.0/0 ID:66773300 tcp flags:0x06/0x02 /* wan1 (mtu_fix) */ TCPMSS clamp to PMTU 0 0 TCPMSS tcp -- * eth0.1 0.0.0.0/0 0.0.0.0/0 ID:66773300 tcp flags:0x06/0x02 /* wan2 (mtu_fix) */ TCPMSS clamp to PMTU 0 0 TCPMSS tcp -- * 6in4-WAN2_V6 0.0.0.0/0 0.0.0.0/0 ID:66773300 tcp flags:0x06/0x02 /* wan2_v6 (mtu_fix) */ TCPMSS clamp to PMTU Chain OUTPUT (policy ACCEPT 348 packets, 91268 bytes) pkts bytes target prot opt in out source destination 441 104K mwan3_hook all -- * * 0.0.0.0/0 0.0.0.0/0 Chain POSTROUTING (policy ACCEPT 357 packets, 91954 bytes) pkts bytes target prot opt in out source destination Chain mwan3_connected (2 references) pkts bytes target prot opt in out source destination 201 16193 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 match-set mwan3_connected dst MARK or 0xff00 Chain mwan3_hook (2 references) pkts bytes target prot opt in out source destination 890 143K CONNMARK all -- * * 0.0.0.0/0 0.0.0.0/0 CONNMARK restore mask 0xff00 181 13836 mwan3_ifaces_in all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 158 10851 mwan3_connected all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 22 1912 mwan3_ifaces_out all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 0 0 mwan3_rules all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 890 143K CONNMARK all -- * * 0.0.0.0/0 0.0.0.0/0 CONNMARK save mask 0xff00 133 19573 mwan3_connected all -- * * 0.0.0.0/0 0.0.0.0/0 mark match ! 0xff00/0xff00 Chain mwan3_iface_in_WAN1 (1 references) pkts bytes target prot opt in out source destination 0 0 MARK all -- pppoe-WAN1 * 0.0.0.0/0 0.0.0.0/0 match-set mwan3_connected src mark match 0x0/0xff00 /* default */ MARK or 0xff00 22 2851 MARK all -- pppoe-WAN1 * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 /* WAN1 */ MARK xset 0x100/0xff00 Chain mwan3_iface_in_WAN2 (1 references) pkts bytes target prot opt in out source destination 0 0 MARK all -- eth0.1 * 0.0.0.0/0 0.0.0.0/0 match-set mwan3_connected src mark match 0x0/0xff00 /* default */ MARK or 0xff00 1 134 MARK all -- eth0.1 * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 /* WAN2 */ MARK xset 0x300/0xff00 Chain mwan3_iface_out_WAN1 (1 references) pkts bytes target prot opt in out source destination 18 1576 MARK all -- * * (obfuscated) 0.0.0.0/0 mark match 0x0/0xff00 /* WAN1 */ MARK xset 0x100/0xff00 Chain mwan3_iface_out_WAN2 (1 references) pkts bytes target prot opt in out source destination 4 336 MARK all -- * * (obfuscated) 0.0.0.0/0 mark match 0x0/0xff00 /* WAN2 */ MARK xset 0x300/0xff00 Chain mwan3_ifaces_in (1 references) pkts bytes target prot opt in out source destination 179 13641 mwan3_iface_in_WAN1 all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 136 9348 mwan3_iface_in_WAN2 all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 Chain mwan3_ifaces_out (1 references) pkts bytes target prot opt in out source destination 22 1912 mwan3_iface_out_WAN1 all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 4 336 mwan3_iface_out_WAN2 all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 Chain mwan3_policy_WAN_P1 (1 references) pkts bytes target prot opt in out source destination 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 /* WAN1 10 10 */ MARK xset 0x100/0xff00 Chain mwan3_policy_WAN_P2 (0 references) pkts bytes target prot opt in out source destination 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 /* WAN2 1 1 */ MARK xset 0x300/0xff00 Chain mwan3_policy_WAN_P3 (1 references) pkts bytes target prot opt in out source destination 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 /* WAN1 10 10 */ MARK xset 0x100/0xff00 Chain mwan3_policy_WAN_V6_P1 (0 references) pkts bytes target prot opt in out source destination 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 /* default */ MARK or 0xff00 Chain mwan3_policy_WAN_V6_P2 (0 references) pkts bytes target prot opt in out source destination 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 /* default */ MARK or 0xff00 Chain mwan3_policy_WAN_V6_P3 (2 references) pkts bytes target prot opt in out source destination 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 /* default */ MARK or 0xff00 Chain mwan3_rules (1 references) pkts bytes target prot opt in out source destination 0 0 mwan3_policy_WAN_P3 all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 /* default_rule */ 0 0 mwan3_policy_WAN_V6_P3 all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 /* default_v6_rule */ 0 0 mwan3_policy_WAN_P1 all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 /* direct_rule */ 0 0 mwan3_policy_WAN_V6_P3 all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 /* direct_v6_rule */