Firmware 4.2.x is out as snapshot firmware

[K3rn3l_Ku5h]

UPGRADE you can’t migrate settings again and can’t reuse a previous config file. Need to setup everything from default.

[lama]

I managed to upgrade without issues,… Though I was panicking to Not find “Backup configuration” anywhere,…

Also as usual,… Port Forwarding rules are still ignored for other ip addresses if DMZ is enabled

So can’t use my NAS

[jdub]

@lama

Also as usual,… Port Forwarding rules are still ignored for other ip addresses if DMZ is enabled

I mean, that’s kind of the definition of DMZ, right?

What do you need DMZ for? Convenience?

[Wild_Spy]

I’m not sure if this is the problem of this particular version, but I recently purchased the device and ran into a problem using this and maybe previous version.

I am using WireGuard client with a list of domains that use VPN. I noticed that sometimes the traffic to these domains stops going through the VPN, I had to reset the device and configure it again.

But I think I found a problem in vpnpolicy file.
It works when it is like this:

config policy 'global'
	option kill_switch '0'
	option wan_access '0'
	option service_policy '1'
	option vpn_server_policy '1'

config service 'route_policy'
	option proxy_mode '3'

config policy 'vlan'
	option private '1'
	option guest '1'

config policy 'domain'
	option domain '
>>HERE IS MY DOMAINS LIST<<
'
	option default_policy '0'

but sometimes it changes to this one and stop working:

config policy 'global'
	option kill_switch '0'
	option wan_access '0'
	option service_policy '1'
	option vpn_server_policy '1'

config service 'route_policy'
	option proxy_mode '3'

config policy 'vlan'
	option private '1'
	option guest '1'

config policy 'domain'
	option default_policy '0'
	option domain '
>>HERE IS MY DOMAINS LIST<<
'

so I think that problem is in line option default_policy '0'

can someone please confirm this problem or propose a way to fix it?

GL-AX1800

[Wild_Spy]

Also I can’t connect to router using SFTP. The default settings are set. SSH connection is working. But SFTP fails, I tried Cyberduck, Terminus and Fugu clients. They give me different errors. Cyberduck tell something about “EOF while reading packet”. Fugu just cant connect. And Terminus freezes and throw me EOF error too.

GL-AX1800

[lama]

If only you were part of previous discussions related to this jdub, you would’ve known that i need DMZ Enabled on one NAS address and rest others to follow port forwarding rules (instead of getting blocked). This is nothing new, most of my previous routers allowed me this type of setting,…

[jdub]

@lama

you would’ve known that i need DMZ Enabled on one NAS address and rest others to follow port forwarding rules

So in reviewing the discussion, you don’t need DMZ - you just have a lot of ports you want to forward, so it’s more convenient. Gotcha.

I stand by my statement.

(p.s., just because “most of [your] previous routers allowed [you] this type of setting,…” doesn’t mean they were implementing it correctly. There are tradeoffs to both approaches, but the way it’s currently implemented here is the way it’s typically done)

[lama]

I’m my situation, Any solution, which come from other router guy’s approach or your “Typical” router guys, is welcomed (and a win-win for other end user ). You can sit or stand by your statements all you want, just know I’m more interested in firmware getting better.

I would’ve preferred Dynamic Port Triggering implementation (which is again typically available in most modern routers )

[jdub]

Sounds like you would be better off with a Synology router then?

Maybe I’m being dense here, but I don’t understand the problem with forwarding ports, even if there are a lot of them. There are always tradeoffs between security and convenience, and the words “dynamic” used alongside “firewall” would give any cyber security person pause.

There are a lot of features I’d like to see implemented, but I don’t use words like “disgusted” because I bought a product that doesn’t implement something like I think it should. If you really need that functionality, it seems like you know where you can get it.

[lama]

Synology router? Yep,… having my eye on it for quite some time. I did wait till 4.2 version,…

Port Triggering is dynamic in nature it sure didn’t give Synology guys pause.

Maybe in your arrival things are better so you’re not disgusted but in my arrival I was disgusted by many annoying bugs etc in version 3.xx, and whenever someone pointed me to LuCi,… It eventually felt like go to hell (as I mostly ended up factory resets )

Yes I know where to get it,… “Here” is preferred first because I already have the Ax1800 (and someone did say it was in to-do list).

Even if I opt of Synology, it will be when I’m sure no solution is coming out of here,…

my use of words are my way of getting attention and I’m not going to stop typing for your likings

[jdub]

@lama

Maybe in your arrival things are better so you’re not disgusted but in my arrival I was disgusted by many annoying bugs etc in version 3.xx,

I’ve been here since 2015 with the 6416, but whatever.

There are plenty of things routers like this don’t do well, which is why I don’t use one for my main router. If the software doesn’t meet your needs, it’s not hard to find one that does. Never buy a product based on a promised future update.

@lama

Port Triggering is dynamic in nature it sure didn’t give Synology guys pause.

I mean, I’m a voting member on three IEEE cyber security committees, but I’m sure you know better.

[lama]

here since 2015? That explains a lot, including your frustration? Gl-net is obviously not your main router,… IEEE? What are you doing in this thread your highness?

You’re mistaken or have no idea to why I bought Ax1800 and you’re connecting my feature request, future update to my past decision of purchase? That’s hilarious

[jdub]

@lama

here since 2015? That explains a lot, including your frustration?

Oh I complain here a lot, but I don’t actually expect things to change, and I find ways to make the hardware work for my needs in spite of the bugs (mostly by going to stock OpenWrt, which you obviously don’t want to do).

At the same time, I don’t have a lot of patience for people who continually complain as though they are personally aggrieved because they bought a product and it doesn’t work for them. If it’s a big enough deal for you to log on and express your disgust, just buy the product that meets your needs.

[lama]

You being an IEEE voting guy seem to have lots of time reading complains Do you actually think your prolonged suggestions will make me buy something else? Or make me (or anyone else) stop typing? Or complaining?

I’m an end-user, not as big as you “your impatient highness” and I’m here because these Gl-net people have been nice enough to implement many features that I’ve requested (Along with others). You may not like it but that’s your problem

[jdub]

Ad hominem arguments are the best arguments, aren’t they?

Hope you have a nice evening.

[hansome]

The configuration file vpnpolicy is okay.
How do you confirm “the traffic to these domains stops going through the VPN”? Do you use guest wifi and VPN cascading?

Please use SCP protocol for file transfer.

[hansome]

FYI, thanks for helping debug.

VPN cascading on Flint is not working (4.2.0 snapshot firmware)

Hey guys, it turns out the issue is cause by keeping setting sysuprade. For temporary workaround, issue command uci set wireguard_server.main_server.fwmark='0x80000' uci commit wireguard_server The toggle wg server once. [image] This bug will be fixed asap. @alannts425 @cafebug

[juane]

Has it been resolved in 4.2.0beta1 publishing today?

[xize11]

Hmm I just went from flint 4.1 pre release 6 to 4.2.0 without reseting configuration but my vpn broke which was mullvad vpn, it still says connected but when I checked my device it was not using the vpn.

So I made a backup, and then reset it and manually added for each the config from the backup and I pressed update servers for the vpn client that gave me different mullvad names so it might be this, or something broke in the vpn policies thats the only config I did not migrate manually from the backup.

Now it works fine, all configs I put back:
Network, firewall, dhcp, stubby, wireguard

Not sure if something iptables/nfttables changed between versions?

Only other bug ive been noting but its hard to verify:

Sometimes I notice a slow down with loading sites but this can also be because internet is chaotic around Christmas holidays it seem to happen when I have my mullvad vpn active.

[bOcy]

updated axt1800 to 4.2 beta1, is this parental control, zero tier and tailscale going to be in the glinet app ?