DomainVPNRouting "ip rule show" does not take any arguments

[Tarek Yag]

Hi All!

I'm a proud user of Asuswrt-Merlin since a few months, and would like to take the chance to thank every contributor to this great project, and every addon author and contributor.

Now, going straight forward to the point. Before posting this, I searched the forum about my problem and found no valid answer or solution for it. Related posts to my problem are:

Domain-based VPN Routing Script

Hello, Does anyone have a file or excel with all the domains and subdomains for sites like youtube, hulu, disney, Pluto, Amazon, that can share with me? I am trying use the script, but i am unable to get it to work, i believe that there are some domains that i am missing.... Thanks

www.snbforums.com

WANFailover - Dual WAN Failover Script

v1.5.6-beta5 Release: ***Disclaimer: This is a beta release and has been untested*** Manually upgrade to this beta by running the following command" ***Allow for cronjob to relaunch the script*** /usr/sbin/curl -s...

www.snbforums.com

Whenever I do a manual policy query via SSH terminal through the addon's main menu, I always get the following warning many times:

"ip rule show" does not take any arguments.

As suggested in other related posts, I checked Entware for package "ip-full", and it's not installed at all!
I even tried after the check to install "ip-full" package, then made another policy query but it showed the same warning too. So, I ended up removing the package to avoid any future conflicts.

I'm using the latest version of the addon (2.1.3), and currently have the problem on two routers which have two different firmware!
DSL-AC68U, Firmware: 386.12-gnuton1
RT-AC68U, Firmware: 386.14 official merlin

These two routers were totally reset and setup from scratch a couple of days ago, but the same warning still showed. Additionally, I had the same problem previously on the DSL-AC68U with firmware 386.12_0-gnuton0_beta1, before I even started using RT-AC68U once again.

Best Regards,
Tarek Yag

 

[Tarek Yag]

Dear @Ranger802004, your attention here is very much appreciated, and thank you very much in advance.
I'm ready to provide any more information or screenshots related to the bug.

 

[Ranger802004]

Dear @Ranger802004, your attention here is very much appreciated, and thank you very much in advance.
I'm ready to provide any more information or screenshots related to the bug.

Do you have the older ip binary installed from entware by any chance? Usually that causes this issue.

 

[Tarek Yag]

Do you have the older ip binary installed from entware by any chance? Usually that causes this issue.

If you mean a package other than "ip-full", please provide me with the exact package name to check for it. As I already stated that I did check "ip-full" package in Entware, and it wasn't installed at all.

As suggested in other related posts, I checked Entware for package "ip-full", and it's not installed at all!
I even tried after the check to install "ip-full" package, then made another policy query but it showed the same warning too. So, I ended up removing the package to avoid any future conflicts.

 

[Ranger802004]

If you mean a package other than "ip-full", please provide me with the exact package name to check for it. As I already stated that I did check "ip-full" package in Entware, and it wasn't installed at all.

Yes ip-full package, do you have the Entware one installed?

 

[Tarek Yag]

Dear @Ranger802004, I would like to politely ask you to re-read all the needed details that I already provided since my very first post in this thread. You keep asking questions that I already provided answers for since the very beginning.

Yes ip-full package, do you have the Entware one installed?

Again, "ip-full" is not installed in my Entware setup.

 

[Tarek Yag]

Dear @Ranger802004, I've had some free time today and did some research to provide you with more details that are very interesting to me at least!

1- The only "ip" binary I have is located at it's normal place. Following are related commands with their output:

ls -g /usr/sbin/ip*
-rwxr-xr-x    1 root        273716 Jul 20 20:38 /usr/sbin/ip
lrwxrwxrwx    1 root            13 Jul 20 20:38 /usr/sbin/ip6tables -> xtables-multi
lrwxrwxrwx    1 root            13 Jul 20 20:38 /usr/sbin/ip6tables-restore -> xtables-multi
lrwxrwxrwx    1 root            13 Jul 20 20:38 /usr/sbin/ip6tables-save -> xtables-multi
-rwxr-xr-x    1 root        111392 Jul 20 20:39 /usr/sbin/ipset
lrwxrwxrwx    1 root            13 Jul 20 20:38 /usr/sbin/iptables -> xtables-multi
lrwxrwxrwx    1 root            13 Jul 20 20:38 /usr/sbin/iptables-restore -> xtables-multi
lrwxrwxrwx    1 root            13 Jul 20 20:38 /usr/sbin/iptables-save -> xtables-multi
ls -g /usr/bin/ip*
lrwxrwxrwx    1 root            17 Jul 20 20:38 /usr/bin/ipcrm -> ../../bin/busybox
lrwxrwxrwx    1 root            17 Jul 20 20:38 /usr/bin/ipcs -> ../../bin/busybox

2- No "ip" binaries availabe inside entware binary directories

ls -g /opt/bin/ip*
ls: /opt/bin/ip*: No such file or directory
ls -g /opt/sbin/ip*
ls: /opt/sbin/ip*: No such file or directory

3- The PATH variable is set correctly when your script starts up, it shows the following in logs:

domain_vpn_routing: Debug - PATH: /sbin:/bin:/usr/sbin:/usr/bin:/opt/bin:/opt/sbin:/bin:/usr/bin:/sbin:/usr/sbin:/home/atr:/mmc/sbin:/mmc/bin:/mmc/usr/sbin:/mmc/usr/bin:/opt/sbin:/opt/bin:/opt/usr/sbin:/opt/usr/bin

4- The version of the only ip utility I have is:

ip -V
ip utility, iproute2-ss150210

5- I even added the following line to my /jffs/configs/profile.add file then rebooted the router, with no luck again:

alias ip=/usr/sbin/ip

I can't think of any other reason why your script is not working as expected on my RT-AC68U. Are there any more debugging steps that you may need to figure what is the problem?

 

[dave14305]

The ancient iproute2 v3.19.0 used on non-HND routers does not accept arguments, as indicated. That was added in v4.9.

 

[Ranger802004]

Dear @Ranger802004, I've had some free time today and did some research to provide you with more details that are very interesting to me at least!

1- The only "ip" binary I have is located at it's normal place. Following are related commands with their output:

ls -g /usr/sbin/ip*
-rwxr-xr-x    1 root        273716 Jul 20 20:38 /usr/sbin/ip
lrwxrwxrwx    1 root            13 Jul 20 20:38 /usr/sbin/ip6tables -> xtables-multi
lrwxrwxrwx    1 root            13 Jul 20 20:38 /usr/sbin/ip6tables-restore -> xtables-multi
lrwxrwxrwx    1 root            13 Jul 20 20:38 /usr/sbin/ip6tables-save -> xtables-multi
-rwxr-xr-x    1 root        111392 Jul 20 20:39 /usr/sbin/ipset
lrwxrwxrwx    1 root            13 Jul 20 20:38 /usr/sbin/iptables -> xtables-multi
lrwxrwxrwx    1 root            13 Jul 20 20:38 /usr/sbin/iptables-restore -> xtables-multi
lrwxrwxrwx    1 root            13 Jul 20 20:38 /usr/sbin/iptables-save -> xtables-multi
ls -g /usr/bin/ip*
lrwxrwxrwx    1 root            17 Jul 20 20:38 /usr/bin/ipcrm -> ../../bin/busybox
lrwxrwxrwx    1 root            17 Jul 20 20:38 /usr/bin/ipcs -> ../../bin/busybox

2- No "ip" binaries availabe inside entware binary directories

ls -g /opt/bin/ip*
ls: /opt/bin/ip*: No such file or directory
ls -g /opt/sbin/ip*
ls: /opt/sbin/ip*: No such file or directory

3- The PATH variable is set correctly when your script starts up, it shows the following in logs:

domain_vpn_routing: Debug - PATH: /sbin:/bin:/usr/sbin:/usr/bin:/opt/bin:/opt/sbin:/bin:/usr/bin:/sbin:/usr/sbin:/home/atr:/mmc/sbin:/mmc/bin:/mmc/usr/sbin:/mmc/usr/bin:/opt/sbin:/opt/bin:/opt/usr/sbin:/opt/usr/bin

4- The version of the only ip utility I have is:

ip -V
ip utility, iproute2-ss150210

5- I even added the following line to my /jffs/configs/profile.add file then rebooted the router, with no luck again:

alias ip=/usr/sbin/ip

I can't think of any other reason why your script is not working as expected on my RT-AC68U. Are there any more debugging steps that you may need to figure what is the problem?

ip -V
ip utility, iproute2-ss150210

This is the problem, this version of the binary doesn't support the same functions as the common found on most routers running ASUS Merlin (iproute2-5.11.0).

 

[Tarek Yag]

So, is there any way to do a manual upgrade for this package (like building it)?
I initially thought that this package is coming with a more recent version built-in with the more recent Merlin firmware as stated in other posts.

Thank you very much for your help

 

[Ranger802004]

So, is there any way to do a manual upgrade for this package (like building it)?
I initially thought that this package is coming with a more recent version built-in with the more recent Merlin firmware as stated in other posts.

Thank you very much for your help

It would be installed by the firmware, there are some routers on that older codebase with the version of iproute2 that works so it may be a model specific issue.

 

[Tarek Yag]

Yeah, I understand it's a model specific issue, well, unfortunately for me. I might be upgrading to RT-AX86U next year!

I'll figure out how to update a package in the core firmware, if possible.

 

[Tarek Yag]

One last thing for me, is it possible for you to introduce into your script a simple check on the number of available OpenVPN clients in the router before the script gets their system variables?

Currently, your script checks for OpenVPN clients 3, 4, and 5 which are not present in RT-AC68U and some other old models, so when it does that, the script never finishes executing! This is the case for install and normal operation.

So, I had to edit the code and remove all related lines to get it to work on both my routers since I started using the script a few months ago.

Note: I've reported this issue earlier in another post and mentioned you there, but got no response. This is the post

 

[Ranger802004]

One last thing for me, is it possible for you to introduce into your script a simple check on the number of available OpenVPN clients in the router before the script gets their system variables?

Currently, your script checks for OpenVPN clients 3, 4, and 5 which are not present in RT-AC68U and some other old models, so when it does that, the script never finishes executing! This is the case for install and normal operation.

So, I had to edit the code and remove all related lines to get it to work on both my routers since I started using the script a few months ago.

Note: I've reported this issue earlier in another post and mentioned you there, but got no response. This is the post

Open up a GitHub issue for me to look into this, that is where I do support for the script.

 

[Tarek Yag]

Open up a GitHub issue for me to look into this, that is where I do support for the script.

Thank you very much, I'll do it very soon!

 

[Tarek Yag]

@Ranger802004
Following up on this issue, as I'm still doing research on it (at my free time) and reaching out to more people..

Entware feed for armv7sf-k2.6 has a newer version of iproute2 than what is built-in with Merlin 386.14 (latest). So, my first recommendation is to install ip-full package to get newer tool versions including the ip tool. Well, at least for router models RT-AC68U and DSL-AC68U

Merlin iproute2 version: 3.19.0 (ss150210)
Entware iproute2 version: 4.4.0 (ss4.4.0-10a-entware)

Additionally, I just submitted a package request at Entware GitHub project, hoping to get a more recent package version, hopefully 4.9+
Link: https://github.com/Entware/Entware/issues/1093