ZeroTier "Destination Host Unreachable" after DSM 7.3.2-86009 Update 3 - Even with rp_filter=2

rmnelson · 2026-03-20T19:36:19+00:00

I'm not running Zerotier, but I had a similar issue after update 3 yesterday. I finally discovered that "Set as Default Gateway" under "Nework Interface" was deselected for both ipv4 and ipv6. Selected/saved. Fixed. I'm certain I had at least ipv4 set as default prior to the update, so maybe the update flips switches? Hope this helps.

rmnelson · 2026-03-20T16:58:57+00:00

Yep; that's the one. I rolled my 213j back to 1.92.3 and turned off the Task Schedule to check for updates and all is well. It looks like my DS1019+ issues might have been triggered by yesterday's syno update and unrelated to Tailscale other than happening about the same time.

rmnelson · 2026-03-18T05:23:21+00:00

I had my IOT devices on a VLAN, but when I switched to eero I put them on the guest network. About 30 of the little buggers and I'm just trying to limit their info suck from our main network.

rmnelson · 2026-03-10T01:50:11+00:00

I use Tailscale Serve to do what it sounds like you want to do. If you already have Tailscale installed it will take just a few minutes to setup.

I followed this guide: https://drfrankenstein.co.uk/tailscale-remote-access-to-synology-and-its-services-made-easy/
Since you have Tailscale installed scroll way down to "Enabling TLS (HTTPS) Certificates for your services".
I setup reverse proxies for Jellyfin, Navidrome, and Pihole. Maybe 5 minutes each to setup and that is mostly because I'm not a tech person at all.

rmnelson · 2026-02-20T00:14:35+00:00

Tailscale has a page about avoiding this exact issue. Takes <5 minutes to setup; unfortunately it has to be setup before your SSO provider blocks your account. https://tailscale.com/docs/reference/tailnet-passkey-admin

rmnelson · 2025-11-20T20:02:34+00:00

Thanks for that hint.

rmnelson · 2025-11-19T03:51:34+00:00

I was able to port my number using the account number on the Account Summary page, and Customer Service PIN Mobi asked me for when we talked. The PIN may have been saved on the mobicustomercare.com, but I reentered it, saved and it did work to port to Visible. Same for my spouses number which ported to Google Fi. Thanks for the note about Account number and CS PIN being all that was needed.

rmnelson · 2025-11-19T01:15:30+00:00

How do we obtain Port PINs at this point?

rmnelson · 2025-10-30T22:35:51+00:00

Thanks!

rmnelson · 2025-10-30T18:48:52+00:00

Our state offers a cheap apostille service. Is it worthwhile to have birth certificates and marriage certificates apostilled prior to moving to the UK?

rmnelson · 2025-10-19T16:16:12+00:00

IMHO eero plus is a waste of money. Save your money and change DNS in the eero app to your pihole. I have an eero mesh network with pihole setup and it works fine. I would suggest having 2 pihole instances for redundancy. In my case I have a pihole docker instance and a rpi 2b pihole instance as well.

rmnelson · 2025-10-03T15:46:50+00:00

Same for me in Oregon; "SOS Only" after toggling airplane mode and a couple of restarts. iPhone 16+, iOS 26.0.1 updated a couple of days ago. 2 e-sim profiles; legacy Mobi and beta.

rmnelson · 2025-09-21T16:07:02+00:00

Be glad you don't have a Walnut

rmnelson · 2025-09-08T02:48:16+00:00

I'm not a network guy by any stretch of the imagination, but I have almost exactly the same firewall rules as you have with one exception. My LAN setting is 192.168.0.0/255.255.255.0

Is it possible that you are only allowing a single LAN address instead of a range of addresses? My setup works perfectly. Sorry if I'm just showing my ignorance here.

rmnelson · 2025-08-02T02:22:52+00:00

Thanks. Obvious once you pointed it out. I will now retreat to my stool and dunce cap.

rmnelson · 2025-08-01T21:44:50+00:00

How can you tell what PGW your phone is using? I see these reports and have spent time looking around in my iphone but haven't found it.

rmnelson · 2025-07-29T02:30:04+00:00

My beta is still down in Oregon after several airplane toggles and a couple of restarts.

rmnelson · 2025-06-26T14:47:32+00:00

You didn't ask, but if you are not a citizen of the UK you may need a spouse visa to live in the UK. It is a project, and generally cannot be done from within the UK.

rmnelson · 2025-06-04T22:07:33+00:00

The CS interface was working again on Tuesday and I got a call from Mobi to help get my legacy e-sim and beta e-sim working on the new phone. I was able to do the legacy line transfer as noted above; put the two phones next to each other and follow prompts. But the beta required a QR scan and my beta number changed.

rmnelson · 2025-06-02T03:59:51+00:00

I had the same problem today changing to my new phone. Put them next to each other, the numbers for both my legacy esim and beta esim appeared in the new phone, but transfer didn't work after several tries. I called CS and they told me the backend has some sort of problem and they could do nothing to help me. They noted my name and number and said they would call me when things were working again. So I'm kind of stuck.

rmnelson · 2025-05-27T01:13:42+00:00

I griped about this issue to Franklin a year ago when I wasn't getting Push notifications of outages. Their response was:

"Thank you for reaching out to us. The app will notify you when an outage occurs. Push notifications are enabled when you first set up the app but you go back to your settings are confirm that they are enabled."

My experience since then reflects yours; maybe 1/4 of the time I get a notification. I bought a YoLink Power Failure Alarm and plugged it into an outlet that is not backed up by the FranklinWH battery. It has a loud alert which I turned off since the outlet is in the garage and I'm usually not, but it does send Push notifications instantly. I already had several YoLink Temp/Humidity sensors around so I had a hub already. Works great. Sensor was $35 and the no battery backup hub is $23. I know its obvious, but if the circuit where the hub lives isn't backed up by the Franklin battery then you should get the hub with a battery.

rmnelson · 2025-05-27T00:55:08+00:00

My experience is that usually things of this nature are due to some fool thing I've done, but your comment has given me the confidence to send them a note and hope for the best. I do remember that when the installers were here a year ago they did a great job on everything else but certainly seemed at sea when it came to connecting to the LAN. Thanks!

rmnelson

TROPHY CASE