Gargoyle based on OpenWrt 24.10 is available if you wanted to build it wink the master branch is just a “label”

2

(132 odpowiedzi, napisanych Oprogramowanie / Software)

TWfrolek napisał/a:

hi lantis,

My network topology: WAN LTE modem - RT1 ZTEMF286D Gargoyle (wifi 2.4 + 5G, mqtt broker) LANp4--eth--LANp4 RT2 openwrt (R6220 + the same LAN subnet and SSID as RT1 + 802.11r, VPN)

This is a dump of the network configuration from version 1.15.3:

config interface 'loopback'
    option device 'lo'
    option proto 'static'
    option ipaddr '127.0.0.1'
    option netmask '255.0.0.0'

config globals 'globals'
    option ula_prefix 'fde2:3f9b:aa67::/48'

config device 'brlan_dev'
    option name 'br-lan'
    option type 'bridge'
    list ports 'lan2'
    list ports 'lan3'
    list ports 'lan4'
    list ports 'wan'

config interface 'lan'
    option device 'br-lan'
    option proto 'static'
    option ipaddr '192.168.1.1'
    option netmask '255.255.255.0'
    option ip6assign '60'
    option ip6ifaceid '::1'
    option dns '8.8.8.8 8.8.4.4 2001:4860:4860::8888 2001:4860:4860::8844'

config interface 'wan'
    option device '/dev/cdc-wdm0'
    option proto 'qmi'
    option apn 'internet'
    option mobile_isp 'custom'
    option ipv6 '0'
    option dns '8.8.8.8 8.8.4.4'
    option peerdns '0'

config interface 'wan6'
    option device '/dev/cdc-wdm0'
    option proto 'none'
    option dns '2001:4860:4860::8888 2001:4860:4860::8844'
    option peerdns '0'

config device 'wan_wan_dev'
    option name 'wan'
    option macaddr '10:3c:59:xx:xx:xx'

Ok, no issues there.
Any chance of a log? Before, during and after the problem happens.

And ensuring you have the “gargoyle additions” as an “include” in your /etc/config/firewall

3

(132 odpowiedzi, napisanych Oprogramowanie / Software)

TWfrolek napisał/a:

Hello I uploaded MF286D gargoyle-1.15 (1.15.3 / r0+24153-1292a4a6) to ZTE I uploaded a breath of fresh air. Everything went smoothly, the modem works, it looked beautiful until the FW4 rules were configured. The created rules that allow known macs to the network work randomly, after restarting the router they stop working, restarting the service does not help, sometimes they work for a few minutes, other times they stop working. Port redirection is working properly. The status of the service is correct root@Gargoyle:~# /etc/init.d/firewall status active with no instances I clicked on the rules in the GUI. I did not find the diagram of the occurrence of the problem Cleaning the configuration did not help, reflash does not give anything, so I returned to gargoyle-1.14 (1.14.0.3 / r20265-f85a79bcb4) which works correctly in this regard. I only noticed that when entering the first mac in restriction_rule GUI did not accept the entered data. Sometimes by checking/unchecking the "bird" over a rule and saving the change, FW starts working properly for a while config restriction_rule 'rule_1'     option is_ingress '0'     option description 'WHITE_LIST'     option family 'any'     option not_local_addr '28:C6:3F:C4:xx:xx,B6:xx .... '     option enabled '1' and config whitelist_rule 'exception_4'     option is_ingress '0'     option description 'XBOX'     option family 'any'     option local_addr '28:xx: ....'     option enabled '1' |------------------------------------------------------------------------------------ | Gargoyle PL version 1.15.0.3 | OpenWrt 23.05 branch | | Gargoyle revision 50b3bbde | OpenWrt commit 1292a49 | | Built August 03, 2025 | Target ipq40xx/default | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | Machine: ZTE MF286D |

What is the wan interface called when using the modem? A dump of the network config even on 1.14 would be useful.
If you captured logs from 1.15 that would also help.

Your rules work for me.
I expect this is a case of the rules not reasserting.

4

(11 odpowiedzi, napisanych Oprogramowanie / Software)

Just to circle back on this, it is definitely caused by ksmbd. It does not support symlinks currently. The developer has said that it is on their roadmap to add it back in (as a different more secure implementation) but for now this option should be avoided with samba shares.
Alternatives are to install samba36-server which will work fine.

I am going to try to find time to bring samba4 into Gargoyle as a third alternative as well (as samba36 probably should not be used) but this will be lower priority. I'm hoping ksmbd gets it done before I do.
https://github.com/namjaejeon/ksmbd/iss … 2955925743

Also I attempted a crude backport of the original functionality but I either missed something or did something wrong as it would hang the filesystem when a symlink was involved. So I'm abandoning that approach.

5

(22 odpowiedzi, napisanych Oprogramowanie / Software)

https://github.com/ericpaulbishop/gargo … pn.sh#L567

. /usr/lib/gargoyle/openvpn.sh
generate_crl
/etc/init.d/openvpn restart

That should have done it.
A GUI option will appear to fix this in the future. I did not have time to build it so added the backend only.

6

(11 odpowiedzi, napisanych Oprogramowanie / Software)

The instructions are basically to install samba36-server, the modify the usb_storage.sh check so it prefers it over ksmbd. Then act as normal.
I will test it here in the coming weeks.

7

(11 odpowiedzi, napisanych Oprogramowanie / Software)

Is
/tmp/usb_mount/dev_magazyn/
A symlink to
/tmp/usb_mount/098d5b18-d4e4-4ac5-acb6-721575391220/
When you’re in the not working config?

If yes, I would be interested to see if it starts to work if you swap ksmbd out for samba36.

ksmbd does not support symlinks. They removed them from the code and have not provided an alternative yet.
I haven’t tested it but I had thought this might cause a problem.
If that is confirmed a problem, I will patch symlink support back in.

8

(11 odpowiedzi, napisanych Oprogramowanie / Software)

Can you show the config when it works and when it doesn't please?
I think this may be due to symlinks...

Does
cat /proc/cpuinfo
Show if it is a big or little endian system? That’s the only suspicion I have.
But I believe I have tested on both and no problem.
If these devices were cheaper I’d get one and see what is going on.

It looks like the quota is not there at all actually. It is not in the iptables output (and therefore not in print_quotas)

Also apologies for English. I can provide a polish translation if it is preferred.

I’ve never seen this before.
It looks like an integer overflow, however it is 64bit so should not be a problem.
Can you please also run
iptables -t mangle -nvL | grep bandwidth

And print_quotas as well so I can see both data sets together.
I want to locate if the issue is at the bandwidth kernel module or at the print_quotas utility (or somewhere between).

Please also confirm router model?

This sounds a little bit like this issue, but I am not sure, the details are too vague.
https://github.com/ericpaulbishop/gargo … 0db357f8f2

Update to 1.15.
Clear browser cache.
Check.

13

(132 odpowiedzi, napisanych Oprogramowanie / Software)

I finished the first kmod today.
I promise it is being worked on. However I am 1 person with other priorities.
Free takes time.

Install modern Gargoyle like 1.15.x
If your device is not capable, there is no solution.

Old OpenVPN clients cannot connect to modern OpenVPN servers. This is not a Gargoyle problem.
Update to modern versions please.

16

(288 odpowiedzi, napisanych Oprogramowanie / Software)

Try gpkg instead of opkg. There is a bug causing gpkg to corrupt the database and opkg will seg fault.

If you used opkg and corrupted the database already, start fresh.
https://github.com/ericpaulbishop/gargo … 8859eaf501

17

(7 odpowiedzi, napisanych Oprogramowanie / Software)

Or install 1.15 and use VLAN in GUI wink

18

(26 odpowiedzi, napisanych Oprogramowanie / Software)

I will fix the GUI to prevent such an error in the future. Glad it is working.

19

(26 odpowiedzi, napisanych Oprogramowanie / Software)

dhcp-host=00:23:14:53:3D:48,192.168.1.12,S1558_wifi
dhcp-host=B8:AC:6F:61:40:D5,192.168.1.13,S1558_eth
dhcp-host=90:0E:B3:39:26:74,192.168.1.26,X96Max+100
dhcp-host=7C:D3:0A:3D:7F:E6,192.168.1.100,HA_NEW
dhcp-host=00:E0:4C:68:08:0F,192.168.1.200,HA_OLD

"+" symbol in the hostname is not allowed, remove.
"_" symbol is not allowed, replace it with "-".
Rename all invalid hosts and restart dnsmasq see if problem is resolved.

20

(4 odpowiedzi, napisanych Oprogramowanie / Software)

You didn't like the answers you got at OpenWrt?
https://forum.openwrt.org/t/consolidate … n/193686/2

As a final thought, would you try a 1.15 beta to see if it boots?
https://lantisproject.com/gargoyle_cust … uilds/x86/

Did you decompress the file when sysupgrade? gargoyle-1.14.0.3-generic-squashfs-combined.img ??  It should be gargoyle-1.14.0.3-generic-squashfs-combined.img.gz for sysupgrade

badziewiak napisał/a:

Nie, nie ma tematu suportu. To nielogiczne będzie. Co najwyżej do autora gargoyle.

Just so you know, I've looked at your thread and there's no support I'll be able to offer you.
It works fine for me. Cezary has also reported it working fine.

Flashing OpenWrt and then sysupgrading Gargoyle is a GOOD suggestion to rule out lots of things.

badziewiak napisał/a:

Ale to jest gargoyle. W nowej wersji popsuli opcję wake on lan, bo najczęściej nie ma tych urządzeń, które są potrzebne.

Przepraszamy za używanie angielskiego smile

Can you please report the issue at https://github.com/ericpaulbishop/gargoyle so that I can look into it?
It sounds like a regression, it was not intended to not show all available devices.

Please include:
- Device make/model
- Version
- Configuration details (Gateway/Bridge, DHCP/Static Wired/Wireless, DHCP Enabled, DNS setting etc)
- Expected Behaviour
- Actual Behaviour

I'd be happy to try to resolve this for you, but I can't act on what isn't reported smile

25

(1,299 odpowiedzi, napisanych Oprogramowanie / Software)

Nobody has noticed yet
https://github.com/lantis1008/gargoyle/ … enwrt_2102

Very early stage.