PBR Attended SysUpgrade

Installing and Using OpenWrt
1

Hi all, I have a question....my PC is routing via the VPN, when ever I want to check if there are any upgrades for my router using sysupgrade it times out.
If I disable VPN the check works fine.
I have created a rule for https://sysupgrade.openwrt.org to be routed via the wan it still doesn't work. Could some one please check my PBR rule to see if there is anything wrong with it. My PC has an ip of 192.168.1.80. I tried removing my PC ip and also included port 443 to the rule but it didn't make any difference. I think the routing isn't working.
Thanks in advance

PBR
PBR1020×254 14.3 KB

Here is my PBR versions if it makes a difference

Version
Version265×127 2.07 KB

2

I do not use PBR, but based on screenshot it seems strange that you have tried to config with an URL (including https://) instead of just the address sysupgrade.openwrt.org

1 Like
3

Thanks for replying, I just tried removing the https:// and its the same. To be honest I don't believe pbring addrees ever worked for me, I had heaps of problems with optus and in the end I just left it.
Any other checks that I can do to prove its working?

4

You already have a rule to route your desktop via the VPN so the domain based rule is not hit

The domain based rule has to come first so move it up

Note:

  1. If you have IPv6 implemented on your router that can also play a role as you do not route IPv6
  2. You have a rather old version of PBR a lot of work has been done so not sure, it works for me on 1.1.8-r6
  3. If you use nftset it can take a while if you did not flush DNS cache in that case rebooting router and client might be necessary
5

You got me again.....that did it, move the entry to the top. I had a similiar problem with optus (you may not remember :grinning:) that never did work even by moving the entry to the top. Where can I get an updated version of PBR, I just did an upgrade of it yesterday. It would have to be done manually as there are no updates available for my R7800 running:
OpenWrt 23.05.5 r24106-10cc5fcd00 / LuCI openwrt-23.05 branch git-25.024.63972-9fa69d5
Thanks ever so much!!

1 Like
6

Great to hear it is working :slight_smile:

Upgrade instructions: https://docs.openwrt.melmac.net/

If your problem is solved, please consider marking this topic as [Solved]. See How to mark a topic as [Solved] for a short how-to.
Thanks! :slight_smile:

7

Sorry to disturb you, this is not really related to my original question but dont wont to clog up forum not unless you want me to.
Ive updated PBR to latest version but after installation I get this error:
Collected errors:

* resolve_conffiles: Existing conffile /etc/config/pbr is different from the conffile in the new package. The new conffile will be placed at /etc/config/pbr-opkg

Everything seems to work...I renamed that file to PBR just incase, how do I stop it from throwing these errors Ive noticed them when updating other packages.

Thanks

8

It isn't really an error. It's telling you that the configuration file in the package doesn't match the one on your system, which is always going to be the case when you've tweaked the configuration.

Personally I see this message as a reminder to take a look at the new package configuration file and scan it for anything new or interesting.

9

Thank you...as I said it all works, I did have to rename the pbr-opkg to pbr so my config remained the same.
Appreciate your help

10

Isn't the pbr-opkg file the one that came with the package? i.e. the one without your customisations?

1 Like
11

My install is not customized, my version of openwrt is for a R7800
OpenWrt 23.05.5 r24106-10cc5fcd00 / LuCI openwrt-23.05 branch git-25.024.63972-9fa69d5
I upgraded the pbr_1.1.8-r10_all.ipk and luci-app-pbr_1.1.8-r10_all.ipk from github below suggested by @egc

(https://github.com/stangri/repo.openwrt.melmac.net)

Make sense as my version was outdated.

12

Thanks @tievolu that is spot on :+1:

Sometimes you have obsolete settings which are no longer used or new settings and then the default setting is used so usually it is no problem and can be ignored but checking the settings is the sensible approach

1 Like
13

Yes, but your PBR configuration is customised - you at least added a couple of rules.

If you take the vanilla configuration file from the pbr package you'll lose those rules and any other configuration changes you made.

14

Yes you are correct, that's why I renamed my new file from pbr-opkg back to just pbr so that i could keep my rules. Sorry for not understanding what you were saying.

15

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.