Can't update software list on fresh install

ruaidhri · November 14, 2020, 11:08am

I have installed ver 19.07 and when I try to update software list it just hangs. If I ssh into openwrt and issue opkg update I get the error message: Failed to send request: Operation not permitted. I think it might be a ipv6 issue as my isp doesn't support ipv6 and even though I've disabled ipv6 it still shows an ipv6 number when I type ip -6 addr. My internet works and I'm using pi-hole as my dns server and dhcp server. I have ipv6 switched off there too. I have another connection that has ipv6 support and opkg works fine on that connection.

hnyman · November 14, 2020, 11:26am

You might install full wget (GNU wget), as it handles fallback from IPv6 to IPv4 better than the built-in "uclient-fetch", a small simplified wget replacement that is used by default.

Download

manually, by downloading to PC and transferring .ipk file with SCP or such, or
with "uclient-fetch -4" option...

 OpenWrt SNAPSHOT, r14935-95b0751d0f
 -----------------------------------------------------

root@router1:~# uclient-fetch -?
uclient-fetch: unrecognized option: ?
Usage: uclient-fetch [options] <URL>
Options:
        -4                              Use IPv4 only
        -6                              Use IPv6 only
        -q                              Turn off status messages
        -O <file>                       Redirect output to file (use "-" for std                out)
        -P <dir>                        Set directory for output files
        --user=<user>                   HTTP authentication username
        --password=<password>           HTTP authentication password
        --user-agent|-U <str>           Set HTTP user agent
        --post-data=STRING              use the POST method; send STRING as the

ruaidhri · November 14, 2020, 11:37am

Which version of wget do I download? I'm using a netgear r7000

hnyman · November 14, 2020, 11:49am

I think that Netgear R7000 is bcm53xxx device that uses cortex-a9 packages, right?

Then it might be on e of these:

from
https://downloads.openwrt.org/releases/packages-19.07/arm_cortex-a9/packages/

e.g. https://downloads.openwrt.org/releases/packages-19.07/arm_cortex-a9/packages/wget-nossl_1.20.3-4_arm_cortex-a9.ipk
(without ssl capability)

ruaidhri · November 14, 2020, 12:13pm

Ok, it looks like that doesn't help. I get the error message Failed to send request: Operation not permitted
again when I use wget -4 to try and download a file. I've phoned my isp and they tell me they are not blocking anything. When I use my backup ISP it works fine so it looks like it's an isp issue. I'm tearing my hair out as my isp says everything is working fine.

vgaetera · November 14, 2020, 12:35pm

Post the output:

ubus call system board; uci show network; uci show firewall; uci show dhcp; \
head -v -n -0 /etc/resolv.* /tmp/resolv.* /tmp/resolv.*/*; \
ip address show; ip route show table all; ip rule show

ruaidhri · November 14, 2020, 1:31pm

{
"kernel": "4.14.195",
"hostname": "OpenWrt",
"system": "ARMv7 Processor rev 0 (v7l)",
"model": "Netgear R7000",
"board_name": "netgear,r7000",
"release": {
"distribution": "OpenWrt",
"version": "19.07.4",
"revision": "r11208-ce6496d796",
"target": "bcm53xx/generic",
"description": "OpenWrt 19.07.4 r11208-ce6496d796"
}
}
network.loopback=interface
network.loopback.ifname='lo'
network.loopback.proto='static'
network.loopback.ipaddr='127.0.0.1'
network.loopback.netmask='255.0.0.0'
network.globals=globals
network.globals.ula_prefix='fd71:370b:e006::/48'
network.lan=interface
network.lan.type='bridge'
network.lan.ifname='eth0.1'
network.lan.proto='static'
network.lan.netmask='255.255.255.0'
network.lan.ipaddr='192.168.0.1'
network.lan.dns='192.168.0.12'
network.lan.ipv6='off'
network.wan=interface
network.wan.ifname='eth0.2'
network.wan.proto='static'
network.wan.netmask='255.255.255.252'
network.wan.ipaddr='172.22.112.198'
network.wan.gateway='172.22.112.197'
network.wan.dns='78.155.251.1' '78.155.250.1'
network.wan.ipv6='off'
network.wan_eth0_2_dev=device
network.wan_eth0_2_dev.name='eth0.2'
network.wan_eth0_2_dev.macaddr='14:59:c0:89:f2:9f'
network.wan6=interface
network.wan6.ifname='eth0.2'
network.wan6.proto='dhcpv6'
network.@switch[0]=switch
network.@switch[0].name='switch0'
network.@switch[0].reset='1'
network.@switch[0].enable_vlan='1'
network.@switch_vlan[0]=switch_vlan
network.@switch_vlan[0].device='switch0'
network.@switch_vlan[0].vlan='1'
network.@switch_vlan[0].ports='1 2 3 4 5t'
network.@switch_vlan[1]=switch_vlan
network.@switch_vlan[1].device='switch0'
network.@switch_vlan[1].vlan='2'
network.@switch_vlan[1].ports='0 5t'
firewall.@defaults[0]=defaults
firewall.@defaults[0].syn_flood='1'
firewall.@defaults[0].input='ACCEPT'
firewall.@defaults[0].output='ACCEPT'
firewall.@defaults[0].forward='REJECT'
firewall.@zone[0]=zone
firewall.@zone[0].name='lan'
firewall.@zone[0].network='lan'
firewall.@zone[0].input='ACCEPT'
firewall.@zone[0].output='ACCEPT'
firewall.@zone[0].forward='ACCEPT'
firewall.@zone[1]=zone
firewall.@zone[1].name='wan'
firewall.@zone[1].network='wan' 'wan6'
firewall.@zone[1].input='REJECT'
firewall.@zone[1].output='ACCEPT'
firewall.@zone[1].forward='REJECT'
firewall.@zone[1].masq='1'
firewall.@zone[1].mtu_fix='1'
firewall.@forwarding[0]=forwarding
firewall.@forwarding[0].src='lan'
firewall.@forwarding[0].dest='wan'
firewall.@rule[0]=rule
firewall.@rule[0].name='Allow-DHCP-Renew'
firewall.@rule[0].src='wan'
firewall.@rule[0].proto='udp'
firewall.@rule[0].dest_port='68'
firewall.@rule[0].target='ACCEPT'
firewall.@rule[0].family='ipv4'
firewall.@rule[1]=rule
firewall.@rule[1].name='Allow-Ping'
firewall.@rule[1].src='wan'
firewall.@rule[1].proto='icmp'
firewall.@rule[1].icmp_type='echo-request'
firewall.@rule[1].family='ipv4'
firewall.@rule[1].target='ACCEPT'
firewall.@rule[2]=rule
firewall.@rule[2].name='Allow-IGMP'
firewall.@rule[2].src='wan'
firewall.@rule[2].proto='igmp'
firewall.@rule[2].family='ipv4'
firewall.@rule[2].target='ACCEPT'
firewall.@rule[3]=rule
firewall.@rule[3].name='Allow-DHCPv6'
firewall.@rule[3].src='wan'
firewall.@rule[3].proto='udp'
firewall.@rule[3].src_ip='fc00::/6'
firewall.@rule[3].dest_ip='fc00::/6'
firewall.@rule[3].dest_port='546'
firewall.@rule[3].family='ipv6'
firewall.@rule[3].target='ACCEPT'
firewall.@rule[3].enabled='0'
firewall.@rule[4]=rule
firewall.@rule[4].name='Allow-MLD'
firewall.@rule[4].src='wan'
firewall.@rule[4].proto='icmp'
firewall.@rule[4].src_ip='fe80::/10'
firewall.@rule[4].icmp_type='130/0' '131/0' '132/0' '143/0'
firewall.@rule[4].family='ipv6'
firewall.@rule[4].target='ACCEPT'
firewall.@rule[4].enabled='0'
firewall.@rule[5]=rule
firewall.@rule[5].name='Allow-ICMPv6-Input'
firewall.@rule[5].src='wan'
firewall.@rule[5].proto='icmp'
firewall.@rule[5].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type' 'router-solicitation' 'neighbour-solicitation' 'router-advertisement' 'neighbour-advertisement'
firewall.@rule[5].limit='1000/sec'
firewall.@rule[5].family='ipv6'
firewall.@rule[5].target='ACCEPT'
firewall.@rule[5].enabled='0'
firewall.@rule[6]=rule
firewall.@rule[6].name='Allow-ICMPv6-Forward'
firewall.@rule[6].src='wan'
firewall.@rule[6].dest='*'
firewall.@rule[6].proto='icmp'
firewall.@rule[6].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type'
firewall.@rule[6].limit='1000/sec'
firewall.@rule[6].family='ipv6'
firewall.@rule[6].target='ACCEPT'
firewall.@rule[6].enabled='0'
firewall.@rule[7]=rule
firewall.@rule[7].name='Allow-IPSec-ESP'
firewall.@rule[7].src='wan'
firewall.@rule[7].dest='lan'
firewall.@rule[7].proto='esp'
firewall.@rule[7].target='ACCEPT'
firewall.@rule[7].enabled='0'
firewall.@rule[8]=rule
firewall.@rule[8].name='Allow-ISAKMP'
firewall.@rule[8].src='wan'
firewall.@rule[8].dest='lan'
firewall.@rule[8].dest_port='500'
firewall.@rule[8].proto='udp'
firewall.@rule[8].target='ACCEPT'
firewall.@rule[8].enabled='0'
firewall.@include[0]=include
firewall.@include[0].path='/etc/firewall.user'
dhcp.@dnsmasq[0]=dnsmasq
dhcp.@dnsmasq[0].domainneeded='1'
dhcp.@dnsmasq[0].localise_queries='1'
dhcp.@dnsmasq[0].rebind_protection='1'
dhcp.@dnsmasq[0].rebind_localhost='1'
dhcp.@dnsmasq[0].local='/lan/'
dhcp.@dnsmasq[0].domain='lan'
dhcp.@dnsmasq[0].expandhosts='1'
dhcp.@dnsmasq[0].readethers='1'
dhcp.@dnsmasq[0].leasefile='/tmp/dhcp.leases'
dhcp.@dnsmasq[0].resolvfile='/tmp/resolv.conf.auto'
dhcp.@dnsmasq[0].localservice='1'
dhcp.lan=dhcp
dhcp.lan.interface='lan'
dhcp.lan.ra='server'
dhcp.lan.ra_management='1'
dhcp.lan.ignore='1'
dhcp.lan.dhcpv6='disabled'
dhcp.wan=dhcp
dhcp.wan.interface='wan'
dhcp.wan.ignore='1'
dhcp.odhcpd=odhcpd
dhcp.odhcpd.maindhcp='0'
dhcp.odhcpd.leasefile='/tmp/hosts/odhcpd'
dhcp.odhcpd.leasetrigger='/usr/sbin/odhcpd-update'
dhcp.odhcpd.loglevel='4'
==> /etc/resolv.conf <==
search lan
nameserver 127.0.0.1

==> /tmp/resolv.conf <==
search lan
nameserver 127.0.0.1

==> /tmp/resolv.conf.auto <==

Interface lan

nameserver 192.168.0.12

Interface wan

nameserver 78.155.251.1
nameserver 78.155.250.1
head: /tmp/resolv./: No such file or directory
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP qlen 1000
link/ether 14:59:c0:89:f2:9e brd ff:ff:ff:ff:ff:ff
inet6 fe80::1659:c0ff:fe89:f29e/64 scope link
valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
link/ether 14:59:c0:89:f2:9f brd ff:ff:ff:ff:ff:ff
4: eth2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
link/ether 66:cc:ea:71:78:fb brd ff:ff:ff:ff:ff:ff
6: br-lan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
link/ether 14:59:c0:89:f2:9e brd ff:ff:ff:ff:ff:ff
inet 192.168.0.1/24 brd 192.168.0.255 scope global br-lan
valid_lft forever preferred_lft forever
inet6 fe80::1659:c0ff:fe89:f29e/64 scope link
valid_lft forever preferred_lft forever
7: eth0.1@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP qlen 1000
link/ether 14:59:c0:89:f2:9e brd ff:ff:ff:ff:ff:ff
8: eth0.2@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
link/ether 14:59:c0:89:f2:9f brd ff:ff:ff:ff:ff:ff
inet 172.22.112.198/30 brd 172.22.112.199 scope global eth0.2
valid_lft forever preferred_lft forever
inet6 fe80::1659:c0ff:fe89:f29f/64 scope link
valid_lft forever preferred_lft forever
default via 172.22.112.197 dev eth0.2
172.22.112.196/30 dev eth0.2 scope link src 172.22.112.198
192.168.0.0/24 dev br-lan scope link src 192.168.0.1
broadcast 127.0.0.0 dev lo table local scope link src 127.0.0.1
local 127.0.0.0/8 dev lo table local scope host src 127.0.0.1
local 127.0.0.1 dev lo table local scope host src 127.0.0.1
broadcast 127.255.255.255 dev lo table local scope link src 127.0.0.1
broadcast 172.22.112.196 dev eth0.2 table local scope link src 172.22.112.198
local 172.22.112.198 dev eth0.2 table local scope host src 172.22.112.198
broadcast 172.22.112.199 dev eth0.2 table local scope link src 172.22.112.198
broadcast 192.168.0.0 dev br-lan table local scope link src 192.168.0.1
local 192.168.0.1 dev br-lan table local scope host src 192.168.0.1
broadcast 192.168.0.255 dev br-lan table local scope link src 192.168.0.1
unreachable fd71:370b:e006::/48 dev lo metric 2147483647 error -113
fe80::/64 dev eth0 metric 256
fe80::/64 dev eth0.2 metric 256
fe80::/64 dev br-lan metric 256
local ::1 dev lo table local metric 0
anycast fe80:: dev eth0.2 table local metric 0
anycast fe80:: dev eth0 table local metric 0
anycast fe80:: dev br-lan table local metric 0
local fe80::1659:c0ff:fe89:f29e dev eth0 table local metric 0
local fe80::1659:c0ff:fe89:f29e dev br-lan table local metric 0
local fe80::1659:c0ff:fe89:f29f dev eth0.2 table local metric 0
ff00::/8 dev eth0 table local metric 256
ff00::/8 dev eth0.2 table local metric 256
ff00::/8 dev br-lan table local metric 256
0: from all lookup local
32766: from all lookup main
32767: from all lookup default
root@OpenWrt:~# ip address show; ip route show table all; ip rule show >> output
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP qlen 1000
link/ether 14:59:c0:89:f2:9e brd ff:ff:ff:ff:ff:ff
inet6 fe80::1659:c0ff:fe89:f29e/64 scope link
valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
link/ether 14:59:c0:89:f2:9f brd ff:ff:ff:ff:ff:ff
4: eth2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
link/ether 66:cc:ea:71:78:fb brd ff:ff:ff:ff:ff:ff
6: br-lan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
link/ether 14:59:c0:89:f2:9e brd ff:ff:ff:ff:ff:ff
inet 192.168.0.1/24 brd 192.168.0.255 scope global br-lan
valid_lft forever preferred_lft forever
inet6 fe80::1659:c0ff:fe89:f29e/64 scope link
valid_lft forever preferred_lft forever
7: eth0.1@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP qlen 1000
link/ether 14:59:c0:89:f2:9e brd ff:ff:ff:ff:ff:ff
8: eth0.2@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
link/ether 14:59:c0:89:f2:9f brd ff:ff:ff:ff:ff:ff
inet 172.22.112.198/30 brd 172.22.112.199 scope global eth0.2
valid_lft forever preferred_lft forever
inet6 fe80::1659:c0ff:fe89:f29f/64 scope link
valid_lft forever preferred_lft forever
default via 172.22.112.197 dev eth0.2
172.22.112.196/30 dev eth0.2 scope link src 172.22.112.198
192.168.0.0/24 dev br-lan scope link src 192.168.0.1
broadcast 127.0.0.0 dev lo table local scope link src 127.0.0.1
local 127.0.0.0/8 dev lo table local scope host src 127.0.0.1
local 127.0.0.1 dev lo table local scope host src 127.0.0.1
broadcast 127.255.255.255 dev lo table local scope link src 127.0.0.1
broadcast 172.22.112.196 dev eth0.2 table local scope link src 172.22.112.198
local 172.22.112.198 dev eth0.2 table local scope host src 172.22.112.198
broadcast 172.22.112.199 dev eth0.2 table local scope link src 172.22.112.198
broadcast 192.168.0.0 dev br-lan table local scope link src 192.168.0.1
local 192.168.0.1 dev br-lan table local scope host src 192.168.0.1
broadcast 192.168.0.255 dev br-lan table local scope link src 192.168.0.1
unreachable fd71:370b:e006::/48 dev lo metric 2147483647 error -113
fe80::/64 dev eth0 metric 256
fe80::/64 dev eth0.2 metric 256
fe80::/64 dev br-lan metric 256
local ::1 dev lo table local metric 0
anycast fe80:: dev eth0.2 table local metric 0
anycast fe80:: dev eth0 table local metric 0
anycast fe80:: dev br-lan table local metric 0
local fe80::1659:c0ff:fe89:f29e dev eth0 table local metric 0
local fe80::1659:c0ff:fe89:f29e dev br-lan table local metric 0
local fe80::1659:c0ff:fe89:f29f dev eth0.2 table local metric 0
ff00::/8 dev eth0 table local metric 256
ff00::/8 dev eth0.2 table local metric 256
ff00::/8 dev br-lan table local metric 256
root@OpenWrt:~# ls
Packages.gz
control.tar.gz
data.tar.gz
debian-binary
ipset_7.3-1_aarch64_cortex-a72.ipk
iptables-mod-conntrack-extra_1.8.3-1_arm_cortex-a9.ipk
iptables-mod-ipopt_1.8.3-1_arm_cortex-a9.ipk
iptables-mod-ipopt_1.8.4-1_arm_cortex-a9_neon.ipk
kmod-ipt-conntrack-extra_4.14.195-1_arm_cortex-a9.ipk
kmod-ipt-ipopt_4.14.195-1_arm_cortex-a9.ipk
kmod-ipt-raw_4.14.195-1_arm_cortex-a9.ipk
luci-app-mwan3_git-20.313.59566-7460e9d-1_all.ipk
luci-compat_git-20.313.59566-7460e9d-1_all.ipk
mwan3_2.8.14-2_all.ipk
output
wget_1.20.3-4_aarch64_cortex-a72.ipk
root@OpenWrt:~# vi output
root@OpenWrt:~# ip address show; ip route show table all; ip rule show
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP qlen 1000
link/ether 14:59:c0:89:f2:9e brd ff:ff:ff:ff:ff:ff
inet6 fe80::1659:c0ff:fe89:f29e/64 scope link
valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
link/ether 14:59:c0:89:f2:9f brd ff:ff:ff:ff:ff:ff
4: eth2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
link/ether 66:cc:ea:71:78:fb brd ff:ff:ff:ff:ff:ff
6: br-lan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
link/ether 14:59:c0:89:f2:9e brd ff:ff:ff:ff:ff:ff
inet 192.168.0.1/24 brd 192.168.0.255 scope global br-lan
valid_lft forever preferred_lft forever
inet6 fe80::1659:c0ff:fe89:f29e/64 scope link
valid_lft forever preferred_lft forever
7: eth0.1@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP qlen 1000
link/ether 14:59:c0:89:f2:9e brd ff:ff:ff:ff:ff:ff
8: eth0.2@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
link/ether 14:59:c0:89:f2:9f brd ff:ff:ff:ff:ff:ff
inet 172.22.112.198/30 brd 172.22.112.199 scope global eth0.2
valid_lft forever preferred_lft forever
inet6 fe80::1659:c0ff:fe89:f29f/64 scope link
valid_lft forever preferred_lft forever
default via 172.22.112.197 dev eth0.2
172.22.112.196/30 dev eth0.2 scope link src 172.22.112.198
192.168.0.0/24 dev br-lan scope link src 192.168.0.1
broadcast 127.0.0.0 dev lo table local scope link src 127.0.0.1
local 127.0.0.0/8 dev lo table local scope host src 127.0.0.1
local 127.0.0.1 dev lo table local scope host src 127.0.0.1
broadcast 127.255.255.255 dev lo table local scope link src 127.0.0.1
broadcast 172.22.112.196 dev eth0.2 table local scope link src 172.22.112.198
local 172.22.112.198 dev eth0.2 table local scope host src 172.22.112.198
broadcast 172.22.112.199 dev eth0.2 table local scope link src 172.22.112.198
broadcast 192.168.0.0 dev br-lan table local scope link src 192.168.0.1
local 192.168.0.1 dev br-lan table local scope host src 192.168.0.1
broadcast 192.168.0.255 dev br-lan table local scope link src 192.168.0.1
unreachable fd71:370b:e006::/48 dev lo metric 2147483647 error -113
fe80::/64 dev eth0 metric 256
fe80::/64 dev eth0.2 metric 256
fe80::/64 dev br-lan metric 256
local ::1 dev lo table local metric 0
anycast fe80:: dev eth0.2 table local metric 0
anycast fe80:: dev eth0 table local metric 0
anycast fe80:: dev br-lan table local metric 0
local fe80::1659:c0ff:fe89:f29e dev eth0 table local metric 0
local fe80::1659:c0ff:fe89:f29e dev br-lan table local metric 0
local fe80::1659:c0ff:fe89:f29f dev eth0.2 table local metric 0
ff00::/8 dev eth0 table local metric 256
ff00::/8 dev eth0.2 table local metric 256
ff00::/8 dev br-lan table local metric 256
0: from all lookup local
32766: from all lookup main
32767: from all lookup default
root@OpenWrt:~# ubus call system board; uci show network; uci show firewall; uci
show dhcp; \

head -v -n -0 /etc/resolv.* /tmp/resolv.* /tmp/resolv./; \

{
"kernel": "4.14.195",
"hostname": "OpenWrt",
"system": "ARMv7 Processor rev 0 (v7l)",
"model": "Netgear R7000",
"board_name": "netgear,r7000",
"release": {
"distribution": "OpenWrt",
"version": "19.07.4",
"revision": "r11208-ce6496d796",
"target": "bcm53xx/generic",
"description": "OpenWrt 19.07.4 r11208-ce6496d796"
}
}
network.loopback=interface
network.loopback.ifname='lo'
network.loopback.proto='static'
network.loopback.ipaddr='127.0.0.1'
network.loopback.netmask='255.0.0.0'
network.globals=globals
network.globals.ula_prefix='fd71:370b:e006::/48'
network.lan=interface
network.lan.type='bridge'
network.lan.ifname='eth0.1'
network.lan.proto='static'
network.lan.netmask='255.255.255.0'
network.lan.ipaddr='192.168.0.1'
network.lan.dns='192.168.0.12'
network.lan.ipv6='off'
network.wan=interface
network.wan.ifname='eth0.2'
network.wan.proto='static'
network.wan.netmask='255.255.255.252'
network.wan.ipaddr='172.22.112.198'
network.wan.gateway='172.22.112.197'
network.wan.dns='78.155.251.1' '78.155.250.1'
network.wan.ipv6='off'
network.wan_eth0_2_dev=device
network.wan_eth0_2_dev.name='eth0.2'
network.wan_eth0_2_dev.macaddr='14:59:c0:89:f2:9f'
network.wan6=interface
network.wan6.ifname='eth0.2'
network.wan6.proto='dhcpv6'
network.@switch[0]=switch
network.@switch[0].name='switch0'
network.@switch[0].reset='1'
network.@switch[0].enable_vlan='1'
network.@switch_vlan[0]=switch_vlan
network.@switch_vlan[0].device='switch0'
network.@switch_vlan[0].vlan='1'
network.@switch_vlan[0].ports='1 2 3 4 5t'
network.@switch_vlan[1]=switch_vlan
network.@switch_vlan[1].device='switch0'
network.@switch_vlan[1].vlan='2'
network.@switch_vlan[1].ports='0 5t'
firewall.@defaults[0]=defaults
firewall.@defaults[0].syn_flood='1'
firewall.@defaults[0].input='ACCEPT'
firewall.@defaults[0].output='ACCEPT'
firewall.@defaults[0].forward='REJECT'
firewall.@zone[0]=zone
firewall.@zone[0].name='lan'
firewall.@zone[0].network='lan'
firewall.@zone[0].input='ACCEPT'
firewall.@zone[0].output='ACCEPT'
firewall.@zone[0].forward='ACCEPT'
firewall.@zone[1]=zone
firewall.@zone[1].name='wan'
firewall.@zone[1].network='wan' 'wan6'
firewall.@zone[1].input='REJECT'
firewall.@zone[1].output='ACCEPT'
firewall.@zone[1].forward='REJECT'
firewall.@zone[1].masq='1'
firewall.@zone[1].mtu_fix='1'
firewall.@forwarding[0]=forwarding
firewall.@forwarding[0].src='lan'
firewall.@forwarding[0].dest='wan'
firewall.@rule[0]=rule
firewall.@rule[0].name='Allow-DHCP-Renew'
firewall.@rule[0].src='wan'
firewall.@rule[0].proto='udp'
firewall.@rule[0].dest_port='68'
firewall.@rule[0].target='ACCEPT'
firewall.@rule[0].family='ipv4'
firewall.@rule[1]=rule
firewall.@rule[1].name='Allow-Ping'
firewall.@rule[1].src='wan'
firewall.@rule[1].proto='icmp'
firewall.@rule[1].icmp_type='echo-request'
firewall.@rule[1].family='ipv4'
firewall.@rule[1].target='ACCEPT'
firewall.@rule[2]=rule
firewall.@rule[2].name='Allow-IGMP'
firewall.@rule[2].src='wan'
firewall.@rule[2].proto='igmp'
firewall.@rule[2].family='ipv4'
firewall.@rule[2].target='ACCEPT'
firewall.@rule[3]=rule
firewall.@rule[3].name='Allow-DHCPv6'
firewall.@rule[3].src='wan'
firewall.@rule[3].proto='udp'
firewall.@rule[3].src_ip='fc00::/6'
firewall.@rule[3].dest_ip='fc00::/6'
firewall.@rule[3].dest_port='546'
firewall.@rule[3].family='ipv6'
firewall.@rule[3].target='ACCEPT'
firewall.@rule[3].enabled='0'
firewall.@rule[4]=rule
firewall.@rule[4].name='Allow-MLD'
firewall.@rule[4].src='wan'
firewall.@rule[4].proto='icmp'
firewall.@rule[4].src_ip='fe80::/10'
firewall.@rule[4].icmp_type='130/0' '131/0' '132/0' '143/0'
firewall.@rule[4].family='ipv6'
firewall.@rule[4].target='ACCEPT'
firewall.@rule[4].enabled='0'
firewall.@rule[5]=rule
firewall.@rule[5].name='Allow-ICMPv6-Input'
firewall.@rule[5].src='wan'
firewall.@rule[5].proto='icmp'
firewall.@rule[5].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type' 'router-solicitation' 'neighbour-solicitation' 'router-advertisement' 'neighbour-advertisement'
firewall.@rule[5].limit='1000/sec'
firewall.@rule[5].family='ipv6'
firewall.@rule[5].target='ACCEPT'
firewall.@rule[5].enabled='0'
firewall.@rule[6]=rule
firewall.@rule[6].name='Allow-ICMPv6-Forward'
firewall.@rule[6].src='wan'
firewall.@rule[6].dest='*'
firewall.@rule[6].proto='icmp'
firewall.@rule[6].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type'
firewall.@rule[6].limit='1000/sec'
firewall.@rule[6].family='ipv6'
firewall.@rule[6].target='ACCEPT'
firewall.@rule[6].enabled='0'
firewall.@rule[7]=rule
firewall.@rule[7].name='Allow-IPSec-ESP'
firewall.@rule[7].src='wan'
firewall.@rule[7].dest='lan'
firewall.@rule[7].proto='esp'
firewall.@rule[7].target='ACCEPT'
firewall.@rule[7].enabled='0'
firewall.@rule[8]=rule
firewall.@rule[8].name='Allow-ISAKMP'
firewall.@rule[8].src='wan'
firewall.@rule[8].dest='lan'
firewall.@rule[8].dest_port='500'
firewall.@rule[8].proto='udp'
firewall.@rule[8].target='ACCEPT'
firewall.@rule[8].enabled='0'
firewall.@include[0]=include
firewall.@include[0].path='/etc/firewall.user'
dhcp.@dnsmasq[0]=dnsmasq
dhcp.@dnsmasq[0].domainneeded='1'
dhcp.@dnsmasq[0].localise_queries='1'
dhcp.@dnsmasq[0].rebind_protection='1'
root@OpenWrt:~# ubus call system board; uci show network; uci show firewall; uci
show dhcp; \

head -v -n -0 /etc/resolv.* /tmp/resolv.* /tmp/resolv./;
ip address show; ip route show table all; ip rule show
{
"kernel": "4.14.195",
"hostname": "OpenWrt",
"system": "ARMv7 Processor rev 0 (v7l)",
"model": "Netgear R7000",
"board_name": "netgear,r7000",
"release": {
"distribution": "OpenWrt",
"version": "19.07.4",
"revision": "r11208-ce6496d796",
"target": "bcm53xx/generic",
"description": "OpenWrt 19.07.4 r11208-ce6496d796"
}
}
network.loopback=interface
network.loopback.ifname='lo'
network.loopback.proto='static'
network.loopback.ipaddr='127.0.0.1'
network.loopback.netmask='255.0.0.0'
network.globals=globals
network.globals.ula_prefix='fd71:370b:e006::/48'
network.lan=interface
network.lan.type='bridge'
network.lan.ifname='eth0.1'
network.lan.proto='static'
network.lan.netmask='255.255.255.0'
network.lan.ipaddr='192.168.0.1'
network.lan.dns='192.168.0.12'
network.lan.ipv6='off'
network.wan=interface
network.wan.ifname='eth0.2'
network.wan.proto='static'
network.wan.netmask='255.255.255.252'
network.wan.ipaddr='172.22.112.198'
network.wan.gateway='172.22.112.197'
network.wan.dns='78.155.251.1' '78.155.250.1'
network.wan.ipv6='off'
network.wan_eth0_2_dev=device
network.wan_eth0_2_dev.name='eth0.2'
network.wan_eth0_2_dev.macaddr='14:59:c0:89:f2:9f'
network.wan6=interface
network.wan6.ifname='eth0.2'
network.wan6.proto='dhcpv6'
network.@switch[0]=switch
network.@switch[0].name='switch0'
network.@switch[0].reset='1'
network.@switch[0].enable_vlan='1'
network.@switch_vlan[0]=switch_vlan
network.@switch_vlan[0].device='switch0'
network.@switch_vlan[0].vlan='1'
network.@switch_vlan[0].ports='1 2 3 4 5t'
network.@switch_vlan[1]=switch_vlan
network.@switch_vlan[1].device='switch0'
network.@switch_vlan[1].vlan='2'
network.@switch_vlan[1].ports='0 5t'
firewall.@defaults[0]=defaults
firewall.@defaults[0].syn_flood='1'
firewall.@defaults[0].input='ACCEPT'
firewall.@defaults[0].output='ACCEPT'
firewall.@defaults[0].forward='REJECT'
firewall.@zone[0]=zone
firewall.@zone[0].name='lan'
firewall.@zone[0].network='lan'
firewall.@zone[0].input='ACCEPT'
firewall.@zone[0].output='ACCEPT'
firewall.@zone[0].forward='ACCEPT'
firewall.@zone[1]=zone
firewall.@zone[1].name='wan'
firewall.@zone[1].network='wan' 'wan6'
firewall.@zone[1].input='REJECT'
firewall.@zone[1].output='ACCEPT'
firewall.@zone[1].forward='REJECT'
firewall.@zone[1].masq='1'
firewall.@zone[1].mtu_fix='1'
firewall.@forwarding[0]=forwarding
firewall.@forwarding[0].src='lan'
firewall.@forwarding[0].dest='wan'
firewall.@rule[0]=rule
firewall.@rule[0].name='Allow-DHCP-Renew'
firewall.@rule[0].src='wan'
firewall.@rule[0].proto='udp'
firewall.@rule[0].dest_port='68'
firewall.@rule[0].target='ACCEPT'
firewall.@rule[0].family='ipv4'
firewall.@rule[1]=rule
firewall.@rule[1].name='Allow-Ping'
firewall.@rule[1].src='wan'
firewall.@rule[1].proto='icmp'
firewall.@rule[1].icmp_type='echo-request'
firewall.@rule[1].family='ipv4'
firewall.@rule[1].target='ACCEPT'
firewall.@rule[2]=rule
firewall.@rule[2].name='Allow-IGMP'
firewall.@rule[2].src='wan'
firewall.@rule[2].proto='igmp'
firewall.@rule[2].family='ipv4'
firewall.@rule[2].target='ACCEPT'
firewall.@rule[3]=rule
firewall.@rule[3].name='Allow-DHCPv6'
firewall.@rule[3].src='wan'
firewall.@rule[3].proto='udp'
firewall.@rule[3].src_ip='fc00::/6'
firewall.@rule[3].dest_ip='fc00::/6'
firewall.@rule[3].dest_port='546'
firewall.@rule[3].family='ipv6'
firewall.@rule[3].target='ACCEPT'
firewall.@rule[3].enabled='0'
firewall.@rule[4]=rule
firewall.@rule[4].name='Allow-MLD'
firewall.@rule[4].src='wan'
firewall.@rule[4].proto='icmp'
firewall.@rule[4].src_ip='fe80::/10'
firewall.@rule[4].icmp_type='130/0' '131/0' '132/0' '143/0'
firewall.@rule[4].family='ipv6'
firewall.@rule[4].target='ACCEPT'
firewall.@rule[4].enabled='0'
firewall.@rule[5]=rule
firewall.@rule[5].name='Allow-ICMPv6-Input'
firewall.@rule[5].src='wan'
firewall.@rule[5].proto='icmp'
firewall.@rule[5].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type' 'router-solicitation' 'neighbour-solicitation' 'router-advertisement' 'neighbour-advertisement'
firewall.@rule[5].limit='1000/sec'
firewall.@rule[5].family='ipv6'
firewall.@rule[5].target='ACCEPT'
firewall.@rule[5].enabled='0'
firewall.@rule[6]=rule
firewall.@rule[6].name='Allow-ICMPv6-Forward'
firewall.@rule[6].src='wan'
firewall.@rule[6].dest='*'
firewall.@rule[6].proto='icmp'
firewall.@rule[6].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type'
firewall.@rule[6].limit='1000/sec'
firewall.@rule[6].family='ipv6'
firewall.@rule[6].target='ACCEPT'
firewall.@rule[6].enabled='0'
firewall.@rule[7]=rule
firewall.@rule[7].name='Allow-IPSec-ESP'
firewall.@rule[7].src='wan'
firewall.@rule[7].dest='lan'
firewall.@rule[7].proto='esp'
firewall.@rule[7].target='ACCEPT'
firewall.@rule[7].enabled='0'
firewall.@rule[8]=rule
firewall.@rule[8].name='Allow-ISAKMP'
firewall.@rule[8].src='wan'
firewall.@rule[8].dest='lan'
firewall.@rule[8].dest_port='500'
firewall.@rule[8].proto='udp'
firewall.@rule[8].target='ACCEPT'
firewall.@rule[8].enabled='0'
firewall.@include[0]=include
firewall.@include[0].path='/etc/firewall.user'
dhcp.@dnsmasq[0]=dnsmasq
dhcp.@dnsmasq[0].domainneeded='1'
dhcp.@dnsmasq[0].localise_queries='1'
dhcp.@dnsmasq[0].rebind_protection='1'
dhcp.@dnsmasq[0].rebind_localhost='1'
dhcp.@dnsmasq[0].local='/lan/'
dhcp.@dnsmasq[0].domain='lan'
dhcp.@dnsmasq[0].expandhosts='1'
dhcp.@dnsmasq[0].readethers='1'
dhcp.@dnsmasq[0].leasefile='/tmp/dhcp.leases'
dhcp.@dnsmasq[0].resolvfile='/tmp/resolv.conf.auto'
dhcp.@dnsmasq[0].localservice='1'
dhcp.lan=dhcp
dhcp.lan.interface='lan'
dhcp.lan.ra='server'
dhcp.lan.ra_management='1'
dhcp.lan.ignore='1'
dhcp.lan.dhcpv6='disabled'
dhcp.wan=dhcp
dhcp.wan.interface='wan'
dhcp.wan.ignore='1'
dhcp.odhcpd=odhcpd
dhcp.odhcpd.maindhcp='0'
dhcp.odhcpd.leasefile='/tmp/hosts/odhcpd'
dhcp.odhcpd.leasetrigger='/usr/sbin/odhcpd-update'
dhcp.odhcpd.loglevel='4'
==> /etc/resolv.conf <==
search lan
nameserver 127.0.0.1

==> /tmp/resolv.conf <==
search lan
nameserver 127.0.0.1

==> /tmp/resolv.conf.auto <==

Interface lan

nameserver 192.168.0.12

Interface wan

nameserver 78.155.251.1
nameserver 78.155.250.1
head: /tmp/resolv./: No such file or directory
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP qlen 1000
link/ether 14:59:c0:89:f2:9e brd ff:ff:ff:ff:ff:ff
inet6 fe80::1659:c0ff:fe89:f29e/64 scope link
valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
link/ether 14:59:c0:89:f2:9f brd ff:ff:ff:ff:ff:ff
4: eth2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
link/ether 66:cc:ea:71:78:fb brd ff:ff:ff:ff:ff:ff
6: br-lan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
link/ether 14:59:c0:89:f2:9e brd ff:ff:ff:ff:ff:ff
inet 192.168.0.1/24 brd 192.168.0.255 scope global br-lan
valid_lft forever preferred_lft forever
inet6 fe80::1659:c0ff:fe89:f29e/64 scope link
valid_lft forever preferred_lft forever
7: eth0.1@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP qlen 1000
link/ether 14:59:c0:89:f2:9e brd ff:ff:ff:ff:ff:ff
8: eth0.2@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
link/ether 14:59:c0:89:f2:9f brd ff:ff:ff:ff:ff:ff
inet 172.22.112.198/30 brd 172.22.112.199 scope global eth0.2
valid_lft forever preferred_lft forever
inet6 fe80::1659:c0ff:fe89:f29f/64 scope link
valid_lft forever preferred_lft forever
default via 172.22.112.197 dev eth0.2
172.22.112.196/30 dev eth0.2 scope link src 172.22.112.198
192.168.0.0/24 dev br-lan scope link src 192.168.0.1
broadcast 127.0.0.0 dev lo table local scope link src 127.0.0.1
local 127.0.0.0/8 dev lo table local scope host src 127.0.0.1
local 127.0.0.1 dev lo table local scope host src 127.0.0.1
broadcast 127.255.255.255 dev lo table local scope link src 127.0.0.1
broadcast 172.22.112.196 dev eth0.2 table local scope link src 172.22.112.198
local 172.22.112.198 dev eth0.2 table local scope host src 172.22.112.198
broadcast 172.22.112.199 dev eth0.2 table local scope link src 172.22.112.198
broadcast 192.168.0.0 dev br-lan table local scope link src 192.168.0.1
local 192.168.0.1 dev br-lan table local scope host src 192.168.0.1
broadcast 192.168.0.255 dev br-lan table local scope link src 192.168.0.1
unreachable fd71:370b:e006::/48 dev lo metric 2147483647 error -113
fe80::/64 dev eth0 metric 256
fe80::/64 dev eth0.2 metric 256
fe80::/64 dev br-lan metric 256
local ::1 dev lo table local metric 0
anycast fe80:: dev eth0.2 table local metric 0
anycast fe80:: dev eth0 table local metric 0
anycast fe80:: dev br-lan table local metric 0
local fe80::1659:c0ff:fe89:f29e dev eth0 table local metric 0
local fe80::1659:c0ff:fe89:f29e dev br-lan table local metric 0
local fe80::1659:c0ff:fe89:f29f dev eth0.2 table local metric 0
ff00::/8 dev eth0 table local metric 256
ff00::/8 dev eth0.2 table local metric 256
ff00::/8 dev br-lan table local metric 256
0: from all lookup local
32766: from all lookup main
32767: from all lookup default
root@OpenWrt:~#

vgaetera · November 14, 2020, 1:41pm

This might be some issue with DNS.
Try to disable/remove this one:

ruaidhri · November 14, 2020, 1:47pm

I've powered down my dns server and now using isp dns, no difference. openwrt.org resolves

root@OpenWrt:~# nslookup downloads.openwrt.org
Server: 127.0.0.1
Address: 127.0.0.1#53

Name: downloads.openwrt.org
downloads.openwrt.org canonical name = mirror-02.infra.openwrt.org
Name: mirror-02.infra.openwrt.org
Address 1: 176.9.48.73
downloads.openwrt.org canonical name = mirror-02.infra.openwrt.org
Address 2: 2a01:4f8:150:6449::2
root@OpenWrt:~#

vgaetera · November 14, 2020, 2:26pm

Did you try to configure WAN with DHCP instead of static address?

ruaidhri · November 14, 2020, 4:04pm

My ISP gave me a static ip to connect with, they don't have a DHCP server. After a lot of switching networks and downloading mwan3 and all the required dependencies I have managed to get my netgear r7000 to connect to my adsl router and it downloads all the software no problem. So it's an ISP problem even if they don't want to admit it. If I want to update the software in future I may just unplug the cat5 cable for my primary ISP and it will automatically switch over to my secondary ISP even though it's 5 times slower. If I didn't have the second connection I never would have found a solution.

ruaidhri · November 14, 2020, 4:21pm

traceroute to 176.9.48.73 (176.9.48.73), 64 hops max
1 192.168.0.1 70.049ms 1.168ms 1.185ms
2 172.22.112.197 1.383ms 1.305ms 1.236ms
3 172.22.112.1 6.646ms 121.613ms 28.743ms
4 10.163.1.1 107.655ms 171.123ms 170.215ms
5 10.100.63.1 33.783ms 137.711ms 171.585ms
6 * * *
7 10.100.140.1 273.270ms 131.283ms 170.456ms
8 10.160.254.1 171.685ms 176.462ms 164.994ms
9 10.160.254.254 27.910ms 141.743ms 41.653ms
10 78.155.225.175 148.749ms 151.060ms 72.043ms
11 77.67.98.105 29.208ms 103.980ms 136.332ms
12 141.136.110.41 280.556ms 271.026ms 43.624ms
13 154.14.78.154 226.870ms 139.779ms 134.882ms
14 * * 213.239.203.154 102.769ms
15 213.239.229.90 137.575ms 135.680ms 272.339ms
16 176.9.48.73 136.331ms 136.633ms 134.491ms

That's from the ISP that doesn't work, I don't want to share the other traceroute as it shows my static IP. They are similar.

ruaidhri · November 14, 2020, 4:55pm

I've narrowed it down to IPv6. Here's the output from curl:

curl --verbose http://downloads.openwrt.org/releases/packages-19.07/arm_cortex-a9/packages/wget-nossl_1.20.3-4_arm_cortex-a9.ipk

Trying 176.9.48.73:80...
TCP_NODELAY set
Trying 2a01:4f8:150:6449::2:80...
TCP_NODELAY set
Immediate connect fail for 2a01:4f8:150:6449::2: Cannot assign requested address
and it keeps repeating. My primary ISP doesn't use IPv6 but my backup does. I've tried disabling IPv6 but it still tries to connect as you can see.

Disable IPv6 on all devices solves the problem.

system · November 24, 2020, 4:55pm

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.