Hi, I've got a WRT32X with OpenWrt 19.07.3, and I've been getting partial opkg update failures for the past several hours. Any ideas what the problem is, or how to fix it? thanks
root@main:~# opkg update
Downloading http://downloads.openwrt.org/releases/19.07.3/targets/mvebu/cortexa9/packages/Packages.gz
Updated list of available packages in /var/opkg-lists/openwrt_core
Downloading http://downloads.openwrt.org/releases/19.07.3/targets/mvebu/cortexa9/packages/Packages.sig
Signature file download failed.
Remove wrong Signature file.
Downloading http://downloads.openwrt.org/releases/19.07.3/targets/mvebu/cortexa9/kmods/4.14.180-1-a92a3f5c5bed2671533484c7ace9d5b5/Packages.gz
Updated list of available packages in /var/opkg-lists/openwrt_kmods
Downloading http://downloads.openwrt.org/releases/19.07.3/targets/mvebu/cortexa9/kmods/4.14.180-1-a92a3f5c5bed2671533484c7ace9d5b5/Packages.sig
Signature check passed.
Downloading http://downloads.openwrt.org/releases/19.07.3/packages/arm_cortex-a9_vfpv3-d16/base/Packages.gz
Updated list of available packages in /var/opkg-lists/openwrt_base
Downloading http://downloads.openwrt.org/releases/19.07.3/packages/arm_cortex-a9_vfpv3-d16/base/Packages.sig
Signature check passed.
Downloading http://downloads.openwrt.org/releases/19.07.3/packages/arm_cortex-a9_vfpv3-d16/luci/Packages.gz
*** Failed to download the package list from http://downloads.openwrt.org/releases/19.07.3/packages/arm_cortex-a9_vfpv3-d16/luci/Packages.gz
Downloading http://downloads.openwrt.org/releases/19.07.3/packages/arm_cortex-a9_vfpv3-d16/packages/Packages.gz
Updated list of available packages in /var/opkg-lists/openwrt_packages
Downloading http://downloads.openwrt.org/releases/19.07.3/packages/arm_cortex-a9_vfpv3-d16/packages/Packages.sig
Signature check passed.
Downloading http://downloads.openwrt.org/releases/19.07.3/packages/arm_cortex-a9_vfpv3-d16/routing/Packages.gz
Updated list of available packages in /var/opkg-lists/openwrt_routing
Downloading http://downloads.openwrt.org/releases/19.07.3/packages/arm_cortex-a9_vfpv3-d16/routing/Packages.sig
Signature check passed.
Downloading http://downloads.openwrt.org/releases/19.07.3/packages/arm_cortex-a9_vfpv3-d16/telephony/Packages.gz
Updated list of available packages in /var/opkg-lists/openwrt_telephony
Downloading http://downloads.openwrt.org/releases/19.07.3/packages/arm_cortex-a9_vfpv3-d16/telephony/Packages.sig
Signature file download failed.
Remove wrong Signature file.
Collected errors:
* opkg_download: Failed to download http://downloads.openwrt.org/releases/19.07.3/targets/mvebu/cortexa9/packages/Packages.sig, wget returned 4.
* opkg_download: Check your network settings and connectivity.
* opkg_download: Failed to download http://downloads.openwrt.org/releases/19.07.3/packages/arm_cortex-a9_vfpv3-d16/luci/Packages.gz, wget returned 4.
* opkg_download: Check your network settings and connectivity.
* opkg_download: Failed to download http://downloads.openwrt.org/releases/19.07.3/packages/arm_cortex-a9_vfpv3-d16/telephony/Packages.sig, wget returned 4.
* opkg_download: Check your network settings and connectivity.
My setup
I've got a bridged Cable router/modem on the WAN port that I've been using for a while, and a new bridged DSL router/modem on LAN port 1 (converted to WANB). I'm planning on on setting up mwan3, but can't download it due to this error.
Manual WGET usually works
root@main:~# wget http://downloads.openwrt.org/releases/19.07.3/targets/mvebu/cortexa9/packages/Packages.sig
Downloading 'http://downloads.openwrt.org/releases/19.07.3/targets/mvebu/cortexa9/packages/Packages.sig'
Connecting to 2a01:4f8:251:321::2:80
Writing to 'Packages.sig'
Packages.sig 100% |*******************************| 167 0:00:00 ETA
Download completed (167 bytes)
root@main:~# rm Packages.sig
root@main:~# wget http://downloads.openwrt.org/releases/19.07.3/packages/arm_cortex-a9_vfpv3-d16/luci/Packages.sig
Downloading 'http://downloads.openwrt.org/releases/19.07.3/packages/arm_cortex-a9_vfpv3-d16/luci/Packages.sig'
Connecting to 2a01:4f8:251:321::2:80
Writing to 'Packages.sig'
Packages.sig 100% |*******************************| 164 0:00:00 ETA
Download completed (164 bytes)
root@main:~# rm Packages.sig
root@main:~# wget http://downloads.openwrt.org/releases/19.07.3/packages/arm_cortex-a9_vfpv3-d16/routing/Packages.gz
Downloading 'http://downloads.openwrt.org/releases/19.07.3/packages/arm_cortex-a9_vfpv3-d16/routing/Packages.gz'
Connecting to 2a01:4f8:251:321::2:80
Writing to 'Packages.gz'
Packages.gz 100% |*******************************| 11627 0:00:00 ETA
Download completed (11627 bytes)
root@main:~# wget http://downloads.openwrt.org/releases/19.07.3/packages/arm_cortex-a9_vfpv3-d16/telephony/Packages.sig
Downloading 'http://downloads.openwrt.org/releases/19.07.3/packages/arm_cortex-a9_vfpv3-d16/telephony/Packages.sig'
Connecting to 2a01:4f8:251:321::2:80
Connection error: Connection failed
root@main:~# wget http://downloads.openwrt.org/releases/19.07.3/packages/arm_cortex-a9_vfpv3-d16/telephony/Packages.sig
Downloading 'http://downloads.openwrt.org/releases/19.07.3/packages/arm_cortex-a9_vfpv3-d16/telephony/Packages.sig'
Connecting to 2a01:4f8:251:321::2:80
Writing to 'Packages.sig'
Packages.sig 100% |*******************************| 164 0:00:00 ETA
Download completed (164 bytes)
Things I've tried
- I've tried updating both on luci and through ssh
- revert to an earlier backup before I had the DSL modem/router, and disconnected the dsl modem/router
- Reset to defaults
Cable interface is working
root@main:~# ping -c 1 -I eth1.2 www.google.com
PING www.google.com (216.239.38.120): 56 data bytes
64 bytes from 216.239.38.120: seq=0 ttl=119 time=67.255 ms
--- www.google.com ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
DSL is working (though I have to reference the device pppoe-WANB, and not the interface eth1.3)
root@main:~# ping -c 1 -I pppoe-WANB www.google.com
PING www.google.com (216.239.38.120): 56 data bytes
64 bytes from 216.239.38.120: seq=0 ttl=120 time=74.338 ms
--- www.google.com ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 74.338/74.338/74.338 ms
Network file (partial obscured with ????)
root@main:~# cat /etc/config/network
config interface 'loopback'
option ifname 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'fd22:8fb4:????::/48'
config interface 'lan'
option type 'bridge'
option ifname 'eth0.1'
option proto 'static'
option ipaddr '192.168.1.1'
option netmask '255.255.255.0'
option ip6assign '60'
config interface 'wan'
option ifname 'eth1.2'
option proto 'dhcp'
option peerdns '0'
list dns '185.228.168.10'
option metric '10'
config interface 'wan6'
option ifname 'eth1.2'
option proto 'dhcpv6'
config switch
option name 'switch0'
option reset '1'
option enable_vlan '1'
config switch_vlan
option device 'switch0'
option vlan '1'
option vid '1'
option ports '0 1 2 5t'
config switch_vlan
option device 'switch0'
option vlan '2'
option ports '4 6t'
option vid '2'
config switch_vlan
option device 'switch0'
option vlan '3'
option ports '3 6t'
option vid '3'
config interface 'WANB'
option ifname 'eth1.3'
option proto 'pppoe'
option password '?????'
option ipv6 'auto'
option username '????'
option metric '20'
list dns '185.228.168.10'
option peerdns '0'
DHCP
root@main:~# cat /etc/config/dhcp
config dnsmasq
option domainneeded '1'
option localise_queries '1'
option local '/lan/'
option domain 'lan'
option expandhosts '1'
option authoritative '1'
option readethers '1'
option leasefile '/tmp/dhcp.leases'
option resolvfile '/tmp/resolv.conf.auto'
option localservice '1'
option rebind_protection '1'
list server '185.228.168.10'
option confdir '/tmp/dnsmasq.d'
config dhcp 'lan'
option interface 'lan'
option start '100'
option limit '150'
option leasetime '12h'
option dhcpv6 'server'
option ra 'server'
config dhcp 'wan'
option interface 'wan'
option ignore '1'
config odhcpd 'odhcpd'
option maindhcp '0'
option leasefile '/tmp/hosts/odhcpd'
option leasetrigger '/usr/sbin/odhcpd-update'
option loglevel '4'
config domain
option name 'modem'
option ip '192.168.100.1'
config host
option name 'server'
option dns '1'
option mac '????'
option ip '192.168.1.199'
config host
option name 'printer'
option dns '1'
option mac '????'
option ip '192.168.1.129'
config host
option name 'mia3'
option dns '1'
option mac '????'
option ip '192.168.1.185'
config host
option name 'secondary'
option dns '1'
option mac '????'
option ip '192.168.1.2'
Firewall
root@main:~# cat /etc/config/firewall
config defaults
option syn_flood '1'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'REJECT'
config zone
option name 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
option network 'lan'
config zone
option name 'wan'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
option mtu_fix '1'
option network 'wan wan6 wanb WANB'
config forwarding
option src 'lan'
option dest 'wan'
config rule
option name 'Allow-DHCP-Renew'
option src 'wan'
option proto 'udp'
option dest_port '68'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'Allow-Ping'
option src 'wan'
option proto 'icmp'
option icmp_type 'echo-request'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-IGMP'
option src 'wan'
option proto 'igmp'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-DHCPv6'
option src 'wan'
option proto 'udp'
option src_ip 'fc00::/6'
option dest_ip 'fc00::/6'
option dest_port '546'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-MLD'
option src 'wan'
option proto 'icmp'
option src_ip 'fe80::/10'
list icmp_type '130/0'
list icmp_type '131/0'
list icmp_type '132/0'
list icmp_type '143/0'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Input'
option src 'wan'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
list icmp_type 'router-solicitation'
list icmp_type 'neighbour-solicitation'
list icmp_type 'router-advertisement'
list icmp_type 'neighbour-advertisement'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Forward'
option src 'wan'
option dest '*'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-IPSec-ESP'
option src 'wan'
option dest 'lan'
option proto 'esp'
option target 'ACCEPT'
config rule
option name 'Allow-ISAKMP'
option src 'wan'
option dest 'lan'
option dest_port '500'
option proto 'udp'
option target 'ACCEPT'
config include
option path '/etc/firewall.user'
config redirect
option target 'DNAT'
option src 'wan'
option dest 'lan'
option proto 'tcp udp'
option src_dport '122'
option dest_ip '192.168.1.199'
option dest_port '122'
option name 'shh connect'
option enabled '0'
config redirect
option target 'DNAT'
option dest 'lan'
option proto 'tcp udp'
option src_dport '53'
option dest_port '53'
option name 'Force DNS'
option src 'lan'
option dest_ip '192.168.1.1'
config redirect
option dest_port '8050'
option src 'wan'
option name 'test_http'
option src_dport '8050'
option target 'DNAT'
option dest_ip '192.168.1.199'
option dest 'lan'
option enabled '0'