Comments (6)
If you have upgraded busybox it probably reset the soft link to ip full binary which is required by pbr.
Completely remove and reinstall ip-full.
from source.openwrt.melmac.net.
Versions 0.9.9-31 and later will force-use ip-full
even if the softlink has ben overwritten by a busybox.
from source.openwrt.melmac.net.
Irrelevant UI problems:
- There is no longer an
ignore
option inInterface
dropdown when adding policies with LuCI.
From your config: option webui_show_ignore_target '0'
.
ip: bad line 11: 1 tokens found, 2 needed
What's the output of opkg list-installed | grep ip
?
from source.openwrt.melmac.net.
Also, output of service pbr status
and your network config.
Sorry, one more thing -- output of ip -4 route list table main
please.
from source.openwrt.melmac.net.
I just update from 22.03.0
to 22.03.2
right now and everything was fine until updating BusyBox
.
The problem should be from the shipped ip
package.
Sorry, last time I updated all of my packages including BusyBox
and PBR
and didn't notice that. I should've mentioned it.
ip route
root@XMR3G:/home/soberia# ip route
default via 172.20.0.32 dev pppoe-wan
10.0.0.0/24 dev wan scope link src 10.0.0.10
10.0.1.0/24 dev br-lan scope link src 10.0.1.1
10.0.2.0/24 dev br-lan-vpn scope link src 10.0.2.1
10.0.3.0/24 dev wlan0-2 scope link src 10.0.3.1
10.0.4.0/24 dev wg_server scope link src 10.0.4.1
10.8.0.0/24 dev tun0 scope link src 10.8.0.2
172.20.0.32 dev pppoe-wan scope link src ***
opkg list-installed | grep ip
root@XMR3G:/home/soberia# opkg list-installed | grep ip
ip-full - 5.15.0-3
iptables-mod-ipopt - 1.8.7-7
iptables-zz-legacy - 1.8.7-7
kmod-ipt-core - 5.10.146-1
kmod-ipt-ipopt - 5.10.146-1
kmod-iptunnel - 5.10.146-1
kmod-nf-ipt - 5.10.146-1
libip4tc2 - 1.8.7-7
libip6tc2 - 1.8.7-7
libiptext0 - 1.8.7-7
libiptext6-0 - 1.8.7-7
libjson-script20220515 - 2022-05-15-d2223ef9-1
luci-lib-ip - git-20.250.76529-62505bd
luci-proto-ipv6 - git-21.148.48881-79947af
odhcpd-ipv6only - 2022-03-22-860ca900-1
resolveip - 2
sqm-scripts - 1.5.2-1
vpnc-scripts - 20151220-2
service pbr status
root@XMR3G:/home/soberia# service pbr status
============================================================
pbr - environment
pbr 0.9.9-30 running on OpenWrt 22.03.2. WAN (IPv4): wan/pppoe-wan/172.20.0.32.
============================================================
Dnsmasq version 2.86 Copyright (c) 2000-2021 Simon Kelley
Compile time options: IPv6 GNU-getopt no-DBus UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack no-ipset no-auth no-cryptohash no-DNSSEC no-ID loop-detect inotify dumpfile
============================================================
pbr chains - policies
chain pbr_forward {
}
chain pbr_input {
}
chain pbr_output {
}
chain pbr_prerouting {
ip daddr @pbr_wg_client_4_dst_ip_user goto pbr_mark_0x020000
ip saddr @pbr_wg_client_4_src_ip_user goto pbr_mark_0x020000
ether saddr @pbr_wg_client_4_src_mac_user goto pbr_mark_0x020000
ip daddr @pbr_wg_client_2_4_dst_ip_user goto pbr_mark_0x040000
ip saddr @pbr_wg_client_2_4_src_ip_user goto pbr_mark_0x040000
ether saddr @pbr_wg_client_2_4_src_mac_user goto pbr_mark_0x040000
ip daddr @pbr_wg_client_3_4_dst_ip_user goto pbr_mark_0x050000
ip saddr @pbr_wg_client_3_4_src_ip_user goto pbr_mark_0x050000
ether saddr @pbr_wg_client_3_4_src_mac_user goto pbr_mark_0x050000
ip saddr @pbr_openvpn_4_src_ip_cfg056ff5 goto pbr_mark_0x060000 comment "vpn_lan"
}
chain pbr_postrouting {
}
============================================================
pbr chains - marking
chain pbr_mark_0x010000 {
counter packets 0 bytes 0 meta mark set meta mark & 0xff01ffff | 0x00010000
return
}
chain pbr_mark_0x020000 {
counter packets 0 bytes 0 meta mark set meta mark & 0xff02ffff | 0x00020000
return
}
chain pbr_mark_0x030000 {
counter packets 0 bytes 0 meta mark set meta mark & 0xff03ffff | 0x00030000
return
}
chain pbr_mark_0x040000 {
counter packets 0 bytes 0 meta mark set meta mark & 0xff04ffff | 0x00040000
return
}
chain pbr_mark_0x050000 {
counter packets 0 bytes 0 meta mark set meta mark & 0xff05ffff | 0x00050000
return
}
chain pbr_mark_0x060000 {
counter packets 0 bytes 0 meta mark set meta mark & 0xff06ffff | 0x00060000
return
}
chain pbr_mark_0x070000 {
counter packets 0 bytes 0 meta mark set meta mark & 0xff07ffff | 0x00070000
return
}
chain pbr_mark_0x080000 {
counter packets 0 bytes 0 meta mark set meta mark & 0xff08ffff | 0x00080000
return
}
============================================================
pbr nft sets
set pbr_wg_client_4_dst_ip_user {
type ipv4_addr
policy memory
flags interval
auto-merge
comment ""
}
set pbr_wg_client_4_src_ip_user {
type ipv4_addr
policy memory
flags interval
auto-merge
comment ""
}
set pbr_wg_client_4_src_mac_user {
type ether_addr
policy memory
flags interval
auto-merge
comment ""
}
set pbr_wg_client_2_4_dst_ip_user {
type ipv4_addr
policy memory
flags interval
auto-merge
comment ""
}
set pbr_wg_client_2_4_src_ip_user {
type ipv4_addr
policy memory
flags interval
auto-merge
comment ""
}
set pbr_wg_client_2_4_src_mac_user {
type ether_addr
policy memory
flags interval
auto-merge
comment ""
}
set pbr_wg_client_3_4_dst_ip_user {
type ipv4_addr
policy memory
flags interval
auto-merge
comment ""
}
set pbr_wg_client_3_4_src_ip_user {
type ipv4_addr
policy memory
flags interval
auto-merge
comment ""
}
set pbr_wg_client_3_4_src_mac_user {
type ether_addr
policy memory
flags interval
auto-merge
comment ""
}
set pbr_openvpn_4_src_ip_cfg056ff5 {
type ipv4_addr
flags interval
auto-merge
comment "vpn_lan"
elements = { 10.0.2.0/24 }
}
============================================================
ip: bad line 1: 1 tokens found, 2 needed
ip: bad line 2: 1 tokens found, 2 needed
ip: bad line 3: 1 tokens found, 2 needed
ip: bad line 4: 1 tokens found, 2 needed
ip: bad line 5: 1 tokens found, 2 needed
ip: bad line 6: 1 tokens found, 2 needed
ip: bad line 7: 1 tokens found, 2 needed
ip: bad line 8: 1 tokens found, 2 needed
ip: bad line 9: 1 tokens found, 2 needed
ip: bad line 10: 1 tokens found, 2 needed
ip: bad line 11: 1 tokens found, 2 needed
ip: bad line 12: 1 tokens found, 2 needed
ip: bad line 13: 1 tokens found, 2 needed
ip: bad line 14: 1 tokens found, 2 needed
ip: bad line 16: 1 tokens found, 2 needed
ip: bad line 17: 1 tokens found, 2 needed
IPv4 table 22 route: unreachable default
IPv4 table 22 rule:
ip: bad line 1: 1 tokens found, 2 needed
ip: bad line 2: 1 tokens found, 2 needed
ip: bad line 3: 1 tokens found, 2 needed
ip: bad line 4: 1 tokens found, 2 needed
ip: bad line 5: 1 tokens found, 2 needed
ip: bad line 6: 1 tokens found, 2 needed
ip: bad line 7: 1 tokens found, 2 needed
ip: bad line 8: 1 tokens found, 2 needed
ip: bad line 9: 1 tokens found, 2 needed
ip: bad line 10: 1 tokens found, 2 needed
ip: bad line 11: 1 tokens found, 2 needed
ip: bad line 12: 1 tokens found, 2 needed
ip: bad line 13: 1 tokens found, 2 needed
ip: bad line 14: 1 tokens found, 2 needed
ip: bad line 16: 1 tokens found, 2 needed
ip: bad line 17: 1 tokens found, 2 needed
IPv4 table 23 route: unreachable default
IPv4 table 23 rule:
ip: bad line 1: 1 tokens found, 2 needed
ip: bad line 2: 1 tokens found, 2 needed
ip: bad line 3: 1 tokens found, 2 needed
ip: bad line 4: 1 tokens found, 2 needed
ip: bad line 5: 1 tokens found, 2 needed
ip: bad line 6: 1 tokens found, 2 needed
ip: bad line 7: 1 tokens found, 2 needed
ip: bad line 8: 1 tokens found, 2 needed
ip: bad line 9: 1 tokens found, 2 needed
ip: bad line 10: 1 tokens found, 2 needed
ip: bad line 11: 1 tokens found, 2 needed
ip: bad line 12: 1 tokens found, 2 needed
ip: bad line 13: 1 tokens found, 2 needed
ip: bad line 14: 1 tokens found, 2 needed
ip: bad line 16: 1 tokens found, 2 needed
ip: bad line 17: 1 tokens found, 2 needed
IPv4 table 24 route: unreachable default
IPv4 table 24 rule:
ip: bad line 1: 1 tokens found, 2 needed
ip: bad line 2: 1 tokens found, 2 needed
ip: bad line 3: 1 tokens found, 2 needed
ip: bad line 4: 1 tokens found, 2 needed
ip: bad line 5: 1 tokens found, 2 needed
ip: bad line 6: 1 tokens found, 2 needed
ip: bad line 7: 1 tokens found, 2 needed
ip: bad line 8: 1 tokens found, 2 needed
ip: bad line 9: 1 tokens found, 2 needed
ip: bad line 10: 1 tokens found, 2 needed
ip: bad line 11: 1 tokens found, 2 needed
ip: bad line 12: 1 tokens found, 2 needed
ip: bad line 13: 1 tokens found, 2 needed
ip: bad line 14: 1 tokens found, 2 needed
ip: bad line 16: 1 tokens found, 2 needed
ip: bad line 17: 1 tokens found, 2 needed
IPv4 table 25 route: unreachable default
IPv4 table 25 rule:
ip: bad line 1: 1 tokens found, 2 needed
ip: bad line 2: 1 tokens found, 2 needed
ip: bad line 3: 1 tokens found, 2 needed
ip: bad line 4: 1 tokens found, 2 needed
ip: bad line 5: 1 tokens found, 2 needed
ip: bad line 6: 1 tokens found, 2 needed
ip: bad line 7: 1 tokens found, 2 needed
ip: bad line 8: 1 tokens found, 2 needed
ip: bad line 9: 1 tokens found, 2 needed
ip: bad line 10: 1 tokens found, 2 needed
ip: bad line 11: 1 tokens found, 2 needed
ip: bad line 12: 1 tokens found, 2 needed
ip: bad line 13: 1 tokens found, 2 needed
ip: bad line 14: 1 tokens found, 2 needed
ip: bad line 16: 1 tokens found, 2 needed
ip: bad line 17: 1 tokens found, 2 needed
IPv4 table 26 route: unreachable default
IPv4 table 26 rule:
ip: bad line 1: 1 tokens found, 2 needed
ip: bad line 2: 1 tokens found, 2 needed
ip: bad line 3: 1 tokens found, 2 needed
ip: bad line 4: 1 tokens found, 2 needed
ip: bad line 5: 1 tokens found, 2 needed
ip: bad line 6: 1 tokens found, 2 needed
ip: bad line 7: 1 tokens found, 2 needed
ip: bad line 8: 1 tokens found, 2 needed
ip: bad line 9: 1 tokens found, 2 needed
ip: bad line 10: 1 tokens found, 2 needed
ip: bad line 11: 1 tokens found, 2 needed
ip: bad line 12: 1 tokens found, 2 needed
ip: bad line 13: 1 tokens found, 2 needed
ip: bad line 14: 1 tokens found, 2 needed
ip: bad line 16: 1 tokens found, 2 needed
ip: bad line 17: 1 tokens found, 2 needed
IPv4 table 27 route: unreachable default
IPv4 table 27 rule:
ip: bad line 1: 1 tokens found, 2 needed
ip: bad line 2: 1 tokens found, 2 needed
ip: bad line 3: 1 tokens found, 2 needed
ip: bad line 4: 1 tokens found, 2 needed
ip: bad line 5: 1 tokens found, 2 needed
ip: bad line 6: 1 tokens found, 2 needed
ip: bad line 7: 1 tokens found, 2 needed
ip: bad line 8: 1 tokens found, 2 needed
ip: bad line 9: 1 tokens found, 2 needed
ip: bad line 10: 1 tokens found, 2 needed
ip: bad line 11: 1 tokens found, 2 needed
ip: bad line 12: 1 tokens found, 2 needed
ip: bad line 13: 1 tokens found, 2 needed
ip: bad line 14: 1 tokens found, 2 needed
ip: bad line 16: 1 tokens found, 2 needed
ip: bad line 17: 1 tokens found, 2 needed
IPv4 table 28 route: unreachable default
IPv4 table 28 rule:
ip: bad line 1: 1 tokens found, 2 needed
ip: bad line 2: 1 tokens found, 2 needed
ip: bad line 3: 1 tokens found, 2 needed
ip: bad line 4: 1 tokens found, 2 needed
ip: bad line 5: 1 tokens found, 2 needed
ip: bad line 6: 1 tokens found, 2 needed
ip: bad line 7: 1 tokens found, 2 needed
ip: bad line 8: 1 tokens found, 2 needed
ip: bad line 9: 1 tokens found, 2 needed
ip: bad line 10: 1 tokens found, 2 needed
ip: bad line 11: 1 tokens found, 2 needed
ip: bad line 12: 1 tokens found, 2 needed
ip: bad line 13: 1 tokens found, 2 needed
ip: bad line 14: 1 tokens found, 2 needed
ip: bad line 16: 1 tokens found, 2 needed
ip: bad line 17: 1 tokens found, 2 needed
IPv4 table 29 route: unreachable default
IPv4 table 29 rule:
from source.openwrt.melmac.net.
Reinstalling the ip-full
solve the problem. Thanks
from source.openwrt.melmac.net.
Related Issues (20)
- [simple-adblock] Issue: Allowed Domain allows all domains which terminate in that substring, even partial words. HOT 7
- [pbr-iptables] no longer creates PBR_OUTPUT chain when necessary HOT 3
- Unresponsive luci-app-pbr Page HOT 10
- All interface options undefined luci-app-pbr HOT 9
- [pbr] issue with rule generation from cfg HOT 3
- [pbr] wish: populate ipset automatically HOT 7
- [pbr][wish] support adguardhome.ipset as resolver_set option HOT 28
- [PBR] Issue: Database /etc/iproute2/rt_tables is corrupted HOT 5
- [pbr] Issue: failed to set up HOT 8
- [wireshark-helper] Issue: cannot find dependency luci-lua-runtime for luci-app-wireshark-helper HOT 10
- [pbr] Issue: No place to file `pbr` issues? HOT 1
- [pbr] Issue: resolvers are unavailable despite installing all requirements HOT 8
- [pbr] issue: Inconsistent routing with PBR/OpenVPN HOT 10
- [pbr] issue: cannot chose routing via wireguard interface if wan is default interface, only wan interface available for pbr rules HOT 10
- pbr service error: failed to set up interfaces HOT 6
- [pbr] wish: interface specific rule reload on interface restart - wireguard interface restart causes pbr to re-apply rules for all interfaces HOT 6
- [pbr] issue: timeout waiting for wan gateway on USB-based WAN HOT 4
- [https-dns-proxy] Incorrect error code checking
- [pbr] issue: Switch from uci <command> to uci_<command> causes segfault HOT 27
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from source.openwrt.melmac.net.