Opkg update command not working since for a while (wget returned 4)

Installing and Using OpenWrt
1

Hello

I am just trying to re-install my router and since friday I am not able to properly opkg update or opkg install.

While doing opkg update it reaches some files and not reaching others.
While installing opkg install it installing sometimes directly or I need to retry several times.
DNS has been set as 1.1.1.1
Unbound installed.
There is nothing wrong on network.
I tried fresh install, acwifidude firmware and compiled myself also. All of them are same.
What should be the wrong ?

Thank you

root@GVNRouter:~# opkg update
Downloading https://downloads.openwrt.org/releases/22.03.3/targets/ipq806x/gener                                                                                                                                                                  ic/packages/Packages.gz
*** Failed to download the package list from https://downloads.openwrt.org/relea                                                                                                                                                                  ses/22.03.3/targets/ipq806x/generic/packages/Packages.gz

Downloading https://downloads.openwrt.org/releases/22.03.3/packages/arm_cortex-a                                                                                                                                                                  15_neon-vfpv4/base/Packages.gz
Updated list of available packages in /var/opkg-lists/openwrt_base
Downloading https://downloads.openwrt.org/releases/22.03.3/packages/arm_cortex-a                                                                                                                                                                  15_neon-vfpv4/base/Packages.sig
Signature check passed.
Downloading https://downloads.openwrt.org/releases/22.03.3/packages/arm_cortex-a                                                                                                                                                                  15_neon-vfpv4/luci/Packages.gz
*** Failed to download the package list from https://downloads.openwrt.org/relea                                                                                                                                                                  ses/22.03.3/packages/arm_cortex-a15_neon-vfpv4/luci/Packages.gz

Downloading https://downloads.openwrt.org/releases/22.03.3/packages/arm_cortex-a                                                                                                                                                                  15_neon-vfpv4/packages/Packages.gz
*** Failed to download the package list from https://downloads.openwrt.org/relea                                                                                                                                                                  ses/22.03.3/packages/arm_cortex-a15_neon-vfpv4/packages/Packages.gz

Downloading https://downloads.openwrt.org/releases/22.03.3/packages/arm_cortex-a                                                                                                                                                                  15_neon-vfpv4/routing/Packages.gz
Updated list of available packages in /var/opkg-lists/openwrt_routing
Downloading https://downloads.openwrt.org/releases/22.03.3/packages/arm_cortex-a                                                                                                                                                                  15_neon-vfpv4/routing/Packages.sig
Signature check passed.
Downloading https://downloads.openwrt.org/releases/22.03.3/packages/arm_cortex-a                                                                                                                                                                  15_neon-vfpv4/telephony/Packages.gz
Updated list of available packages in /var/opkg-lists/openwrt_telephony
Downloading https://downloads.openwrt.org/releases/22.03.3/packages/arm_cortex-a                                                                                                                                                                  15_neon-vfpv4/telephony/Packages.sig
Signature file download failed.
Remove wrong Signature file.
Collected errors:
 * opkg_download: Failed to download https://downloads.openwrt.org/releases/22.0                                                                                                                                                                  3.3/targets/ipq806x/generic/packages/Packages.gz, wget returned 4.
 * opkg_download: Check your network settings and connectivity.

 * opkg_download: Failed to download https://downloads.openwrt.org/releases/22.0                                                                                                                                                                  3.3/packages/arm_cortex-a15_neon-vfpv4/luci/Packages.gz, wget returned 4.
 * opkg_download: Check your network settings and connectivity.

 * opkg_download: Failed to download https://downloads.openwrt.org/releases/22.0                                                                                                                                                                  3.3/packages/arm_cortex-a15_neon-vfpv4/packages/Packages.gz, wget returned 4.
 * opkg_download: Check your network settings and connectivity.

 * opkg_download: Failed to download https://downloads.openwrt.org/releases/22.0                                                                                                                                                                  3.3/packages/arm_cortex-a15_neon-vfpv4/telephony/Packages.sig, wget returned 4.
 * opkg_download: Check your network settings and connectivity.
2

For trouble shooting here are my config;


root@GVNRouter:~# cat /etc/config/network

config interface 'loopback'
        option device 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'eth1.1'

config device
        option name 'eth1.1'
        option macaddr '60:31:97:3e:db:66'

config interface 'lan'
        option device 'br-lan'
        option proto 'static'
        option ipaddr '192.168.1.1'
        option netmask '255.255.255.0'
        option ip6assign '60'
        option delegate '0'
        option ipv6 '0'

config device
        option name 'eth0.2'
        option macaddr '60:31:97:3e:db:67'

config interface 'wan'
        option device 'eth0.2'
        option proto 'dhcp'
        option peerdns '0'
        list dns '1.1.1.1'
        list dns '8.8.8.8'
        option ipv6 '0'

config switch
        option name 'switch0'
        option reset '1'
        option enable_vlan '1'

config switch_vlan
        option device 'switch0'
        option vlan '1'
        option ports '1 2 3 4 6t'

config switch_vlan
        option device 'switch0'
        option vlan '2'
        option ports '5 0t'

root@GVNRouter:~# cat /etc/config/firewall

config defaults
        option syn_flood '1'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'REJECT'

config zone
        option name 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'
        list network 'lan'

config zone
        option name 'wan'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option masq '1'
        option mtu_fix '1'
        list network 'wan'

config forwarding
        option src 'lan'
        option dest 'wan'

config rule
        option name 'Allow-DHCP-Renew'
        option src 'wan'
        option proto 'udp'
        option dest_port '68'
        option target 'ACCEPT'
        option family 'ipv4'

config rule
        option name 'Allow-Ping'
        option src 'wan'
        option proto 'icmp'
        option icmp_type 'echo-request'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-IGMP'
        option src 'wan'
        option proto 'igmp'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-DHCPv6'
        option src 'wan'
        option proto 'udp'
        option dest_port '546'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-MLD'
        option src 'wan'
        option proto 'icmp'
        option src_ip 'fe80::/10'
        list icmp_type '130/0'
        list icmp_type '131/0'
        list icmp_type '132/0'
        list icmp_type '143/0'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Input'
        option src 'wan'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        list icmp_type 'router-solicitation'
        list icmp_type 'neighbour-solicitation'
        list icmp_type 'router-advertisement'
        list icmp_type 'neighbour-advertisement'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Forward'
        option src 'wan'
        option dest '*'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-IPSec-ESP'
        option src 'wan'
        option dest 'lan'
        option proto 'esp'
        option target 'ACCEPT'

config rule
        option name 'Allow-ISAKMP'
        option src 'wan'
        option dest 'lan'
        option dest_port '500'
        option proto 'udp'
        option target 'ACCEPT'

config rule
        option name 'Allow-Transmission'
        option src 'wan'
        option dest_port '51413'
        option target 'ACCEPT'

root@GVNRouter:~#
3

Nothing weird there.
Either try disabling the syn_flood in firewall, or verify if wan MTU is changed.

4

disabled syn_flood didn't helped.
I am behind on Docsis 3.1 bridged modem. MTU necessary ?

5

It's shouldn't but you don't have many options. The next step would be to start packet capturing.