Divested-WRT: No-nonsense hardened builds for Linksys WRT series

Hmmmm, interesting, thanks for the links.

I checked my system logs and didn't see anything around:

IEEE 802.11: deauthenticated due to inactivity (timer DEA
UTH/REMOVE)

or

IEEE 802.11: disconnected due to excessive missing ACKs

I think that matches the issue you describe in your post:

There is a third issue with Android that I have experienced where all the issues above are resolved with the work-arounds as noted I still experience an issue where I cannot access the Internet. Android says I am connected. OpenWRT log says I am connected but I cannot access any site on the Internet. If I leave it alone it will resolve itself after some minutes. I am impatient so I turn off then on the Android wireless and all is good (reestablish the connection). I also have hostapd loglevel set to 1 and I do not see anything in the log either.

I'll SSH into my router and do a logread as soon as it happens next time.

Edit - If it keeps happening, I might take a stab at rebuilding with this patch added to see if it indeed fixes things:
https://patchwork.ozlabs.org/project/openwrt/patch/20210722165406.1708-1-arinc.unal@gmail.com/

Edit 2 - Happened again this morning. Here's a copy of the syslog during the time of the event. Nothing really jumps out at me aside from the pattern of connect/disconnect er, actually, I do see deauthenticated due to inactivity (timer DEAUTH/REMOVE) in there:

Wed Aug 11 16:14:54 2021 daemon.info hostapd: wlan1: STA a8:10:87:6e:c1:33 IEEE 802.11: associated (aid 2)
Wed Aug 11 16:14:54 2021 daemon.notice hostapd: wlan1: AP-STA-CONNECTED a8:10:87:6e:c1:33
Wed Aug 11 16:14:54 2021 daemon.info hostapd: wlan1: STA a8:10:87:6e:c1:33 RADIUS: starting accounting session E833591220E090E1
Wed Aug 11 16:14:54 2021 daemon.info hostapd: wlan1: STA a8:10:87:6e:c1:33 WPA: pairwise key handshake completed (RSN)
Wed Aug 11 16:14:54 2021 daemon.notice hostapd: wlan1: EAPOL-4WAY-HS-COMPLETED a8:10:87:6e:c1:33
Wed Aug 11 16:14:54 2021 daemon.info dnsmasq-dhcp[1]: DHCPDISCOVER(br-lan) a8:10:87:6e:c1:33
Wed Aug 11 16:14:54 2021 daemon.info dnsmasq-dhcp[1]: DHCPOFFER(br-lan) 192.168.1.127 a8:10:87:6e:c1:33
Wed Aug 11 16:14:54 2021 daemon.info dnsmasq-dhcp[1]: DHCPREQUEST(br-lan) 192.168.1.127 a8:10:87:6e:c1:33
Wed Aug 11 16:14:54 2021 daemon.info dnsmasq-dhcp[1]: DHCPACK(br-lan) 192.168.1.127 a8:10:87:6e:c1:33
Wed Aug 11 16:14:55 2021 daemon.info hostapd: wlan1: STA a8:10:87:6e:c1:33 IEEE 802.11: authenticated
Wed Aug 11 16:14:59 2021 daemon.notice hostapd: wlan1: AP-STA-DISCONNECTED a8:10:87:6e:c1:33
Wed Aug 11 16:14:59 2021 kern.debug kernel: [338779.308934] ieee80211 phy1: staid 2 deleted
Wed Aug 11 16:15:40 2021 daemon.notice hostapd: wlan0: AP-STA-DISCONNECTED 9a:3e:94:9f:f1:4c
Wed Aug 11 16:15:40 2021 daemon.info hostapd: wlan0: STA 9a:3e:94:9f:f1:4c IEEE 802.11: disassociated
Wed Aug 11 16:15:40 2021 kern.debug kernel: [338820.070172] ieee80211 phy0: staid 1 deleted
Wed Aug 11 16:15:41 2021 daemon.info hostapd: wlan0: STA 9a:3e:94:9f:f1:4c IEEE 802.11: deauthenticated due to inactivity (timer DEAUTH/REMOVE)
Wed Aug 11 16:15:44 2021 daemon.info hostapd: wlan0: STA 9a:3e:94:9f:f1:4c IEEE 802.11: associated (aid 1)
Wed Aug 11 16:15:44 2021 daemon.info hostapd: wlan0: STA 9a:3e:94:9f:f1:4c IEEE 802.11: authenticated
Wed Aug 11 16:15:44 2021 daemon.notice hostapd: wlan0: AP-STA-CONNECTED 9a:3e:94:9f:f1:4c
Wed Aug 11 16:15:44 2021 daemon.info hostapd: wlan0: STA 9a:3e:94:9f:f1:4c RADIUS: starting accounting session 50741EF98FC07017
Wed Aug 11 16:15:44 2021 daemon.info hostapd: wlan0: STA 9a:3e:94:9f:f1:4c WPA: pairwise key handshake completed (RSN)
Wed Aug 11 16:15:44 2021 daemon.notice hostapd: wlan0: EAPOL-4WAY-HS-COMPLETED 9a:3e:94:9f:f1:4c
Wed Aug 11 16:15:44 2021 daemon.info dnsmasq-dhcp[1]: DHCPREQUEST(br-lan) 192.168.1.248 9a:3e:94:9f:f1:4c
Wed Aug 11 16:15:44 2021 daemon.info dnsmasq-dhcp[1]: DHCPACK(br-lan) 192.168.1.248 9a:3e:94:9f:f1:4c Adubs-iPhone
Wed Aug 11 16:15:54 2021 daemon.info hostapd: wlan1: STA a8:10:87:6e:c1:33 IEEE 802.11: associated (aid 2)
Wed Aug 11 16:15:54 2021 daemon.notice hostapd: wlan1: AP-STA-CONNECTED a8:10:87:6e:c1:33
Wed Aug 11 16:15:54 2021 daemon.info hostapd: wlan1: STA a8:10:87:6e:c1:33 RADIUS: starting accounting session 604A206CEB22D45C
Wed Aug 11 16:15:54 2021 daemon.info hostapd: wlan1: STA a8:10:87:6e:c1:33 WPA: pairwise key handshake completed (RSN)
Wed Aug 11 16:15:54 2021 daemon.notice hostapd: wlan1: EAPOL-4WAY-HS-COMPLETED a8:10:87:6e:c1:33
Wed Aug 11 16:15:54 2021 daemon.info dnsmasq-dhcp[1]: DHCPDISCOVER(br-lan) a8:10:87:6e:c1:33
Wed Aug 11 16:15:54 2021 daemon.info dnsmasq-dhcp[1]: DHCPOFFER(br-lan) 192.168.1.127 a8:10:87:6e:c1:33
Wed Aug 11 16:15:54 2021 daemon.info dnsmasq-dhcp[1]: DHCPREQUEST(br-lan) 192.168.1.127 a8:10:87:6e:c1:33
Wed Aug 11 16:15:54 2021 daemon.info dnsmasq-dhcp[1]: DHCPACK(br-lan) 192.168.1.127 a8:10:87:6e:c1:33
Wed Aug 11 16:15:54 2021 daemon.info hostapd: wlan1: STA a8:10:87:6e:c1:33 IEEE 802.11: authenticated
Wed Aug 11 16:15:59 2021 daemon.notice hostapd: wlan1: AP-STA-DISCONNECTED a8:10:87:6e:c1:33
Wed Aug 11 16:15:59 2021 kern.debug kernel: [338839.451147] ieee80211 phy1: staid 2 deleted

According to @arinc9 , the issues described above are different than the wifi cutouts experienced by others on 21.02.

I'm going to try a custom build with his mwlwifi downgrade to see if it fixes my issue.

Read this quote which is quite descriptive of the issue we’re trying to fix.

1 Like

Yup, that's exactly the issue that I'm seeing. My phone will be connected to the wifi, but I can't even resolve 192.168.1.1 to access Luci.

Okay, I've gone ahead and rebuilt my image off of the same Divested commits, only with the mwlwifi downgraded using @arinc9's patch.

Flashed, and I'm off to the races:

root@OpenWrt:~# opkg list | grep mwlwifi
kmod-mwlwifi - 5.10.54+2019-08-18-747796b2-2
mwlwifi-firmware-88w8864 - 2019-08-18-747796b2-2
mwlwifi-firmware-88w8964 - 2019-08-18-747796b2-2

We'll see how the next few days goes.

Edit: In other news, AdguardHome fixed their OpenWrt detection based on the bug I filed with them. I tested the latest edge release, and the service installation/reboot worked like a charm.

Aside from the Wifi issues, the only other issue I've seen is that my WRT3200ACM doesn't pick up the switch that's attached to it when it reboots. It picked up my laptop connected via ethernet just fine, but the port the switch is attached to doesn't "light up" until I unplug and replug the ethernet cable again. Not sure what's up there.

2 Likes

No dice, I'm afraid.

Same wifi cutout issues on my WRT3200ACM, even with the older firmware - phone will be connected, but can't access any websites, nor load 192.168.1.1. Turning wifi off/on again on phone fixes the issue.

Sometimes the logs show deauthenticated due to inactivity (timer DEAUTH/REMOVE), sometimes they don't.

Going to reboot back into my previous image/partition that's running the newest firmware, since running the old seems to have done nothing.

This looks pretty nice. Somebody it seems has been listening. Just went to flash
r17345+8-efca67983d and see this:

@RuralRoots what's your question? Looks like a normal flashing screen, asking to keep settings and checking your choices re: backups.

If you're jumping from a significantly older image, it's recommended to not keep settings/restore things from backup and thus to setup from scratch. Especially with the DSA switch architecture change, older config is incompatible with newer software.

Quick question regarding upgrades:

  1. after upgrade (keeping settings) I have to install dnscryptproxy2 and ddns-scripts and
  2. turn off some start up services on my dumb ap.

After upgrade I will not get any internet connection because dnscryptproxy2 is not installed, so have to go in the dhcp config and 'disable' stuff to get on the internet.

Would it be a easy solution to script this process?

Don’t know what to say about that. I have never seen anything but option 1 - “Keep Settings” on any build I’ve flashed in the 16 months I’ve been using Openwrt (davidc502, my own based on David’s seed following his last, and Divested since it’s inception). Options 2 and 3 I have never seen before today flashing a new build. In fact I ran r17343 yesterday, and got only option 1 on the flash.

I did another build today because I forgot to place a new custom hotplug script in my buildroot files dir (clean, pull, update feeds, download, make - same .config) so it was a surprise.

Just for giggles, I flashed r17343 to alternate partition - NO option 2 or 3????

¯\(ツ)/¯ I dunno.

good luck to users on ext4 using the -u option...

1 Like

So I’m not bonkers?

1 Like

really dissapointing to see this merged without the ext4 issue being addressed...

@ansuel @hnyman i dont have /rom...

let's merge and watch the fallout? (and ignore valid feedback on the PR?)

1 Like

I see said the blind man.

1 Like

If you are selecting dnscrypt-proxy2 and ddns-scripts in make nconfig You shouldn’t need to re-install the package. Your dnscrypt-proxy.toml config file should get picked up by sysupgrade backup

Just a thought if you came from David’s build, does your config for dnscrypt-proxy.toml reside in /etc or /etc/config

I honestly missed that... But also do you have any hint on how to detect ext4 filesystem?
Check for rom existance? Check if overlay is mounted?

2 Likes

Can you test this?

2 Likes

Without alluding to the foregoing, I like it and I find it useful.

The installed_packages.txt defining packages already part of the new build in /rom is helpful. A quick script quickly shows what additional packages I forgot to add to my newest build or conversely when I decide to remove it.

1 Like

I don't create my own build, I think you are referring to that with th emake nconfig?
Dnscrypt.toml is located in /etc/dnscryptproxy2/

Take a look at https://openwrt.org/docs/guide-user/base-system/uci.

Set up a uci script to update what you need in /etc/config/dhcp to enable internet, opkg update ; opkg install dnscrypt-proxy2, and then revert back to your original /etc/config/dhcp.