AR750s new testing firmware bug

antony500 · 2020-02-13T12:50:43.937Z

Hello,

Just installed the new testing firmware for the AR750s, there is a small bug. opkg update won’t work, supposedly for an SSL error (wget returned 5). I currently fixed it by changing distfeeds to use http instead of https. ca_certificates seems to be installed and okay, so I do not know what the problem is.

EDIT: I also seem to have problems connecting to multiple wireguard servers, receiving no handshakes back. The config files have been tested on both a desktop PC and phone connected to the AR750S, and I also used a config which was working on an older firmware version, so my servers are most likely not the problem. Let me know if I can do anything to help debug this.

EDIT2: For wireguard, i tried running /etc/init.d/wireguard reload, this was the result
root@GL-AR750S:~# /etc/init.d/wireguard reload
uci: Entry not found
uci: Entry not found
uci: Entry not found
uci: Entry not found
uci: Entry not found
uci: Entry not found
uci: Entry not found
* Clearing IPv4 filter table
* Clearing IPv4 nat table
* Clearing IPv4 mangle table
* Populating IPv4 filter table
* Rule ‘Allow-DHCP-Renew’
* Rule ‘Allow-Ping’
* Rule ‘Allow-IGMP’
* Rule ‘Allow-IPSec-ESP’
* Rule ‘Allow-ISAKMP’
* Rule ‘guestzone_DHCP’
* Rule ‘guestzone_DNS’
* Forward ‘lan’ → ‘wan’
* Forward ‘guestzone’ → ‘wan’
* Zone ‘lan’
* Zone ‘wan’
* Zone ‘guestzone’
* Populating IPv4 nat table
* Zone ‘lan’
* Zone ‘wan’
* Zone ‘guestzone’
* Populating IPv4 mangle table
* Zone ‘lan’
* Zone ‘wan’
* Zone ‘guestzone’
* Clearing IPv6 filter table
* Clearing IPv6 mangle table
* Populating IPv6 filter table
* Rule ‘Allow-DHCPv6’
* Rule ‘Allow-MLD’
* Rule ‘Allow-ICMPv6-Input’
* Rule ‘Allow-ICMPv6-Forward’
* Rule ‘Allow-IPSec-ESP’
* Rule ‘Allow-ISAKMP’
* Rule ‘guestzone_DHCP’
* Rule ‘guestzone_DNS’
* Forward ‘lan’ → ‘wan’
* Forward ‘guestzone’ → ‘wan’
* Zone ‘lan’
* Zone ‘wan’
* Zone ‘guestzone’
* Populating IPv6 mangle table
* Zone ‘lan’
* Zone ‘wan’
* Zone ‘guestzone’
* Set tcp_ecn to off
* Set tcp_syncookies to on
* Set tcp_window_scaling to on
* Running script ‘/etc/firewall.user’
uci: Entry not found
uci: Entry not found
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
ipset v6.34: The set with the given name does not exist
iptables v1.6.2: can’t initialize iptables table raw': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. iptables v1.6.2: can't initialize iptables table raw’: Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
! Failed with exit code 3
* Running script ‘/var/etc/gls2s.include’
! Skipping due to path error: No such file or directory
* Running script ‘/usr/bin/glfw.sh’
* Running script ‘/usr/sbin/glqos.sh’
* Running script ‘/var/etc/mwan3.include’
uci: Entry not found
uci: Entry not found

I installed kmod-ipt-raw which solved the iptables error, but wireguard still does not work, however now I do get an occasional successful handshake, but still no connection.

alzhao · 2020-02-14T03:55:41.195Z

I don’t have the error for opkg

image754×405 7.07 KB

antony500 · 2020-02-14T09:26:12.898Z

I tried a full reset and the opkg issue went away. However, wireguard still does not work with any type of config.

alzhao · 2020-02-14T10:48:15.400Z

My AR750s with 3.100 works with AzireVPN wireguard without problem.

Do you mean that you can config your wireguard but cannot connect?

antony500 · 2020-02-14T11:52:05.917Z

Yes, I do get a single handshake back from the server at the beginning, but after that no traffic goes through and I get no more handshakes from the server.