Weird Issues Updating Firmware & Firewall Logs Not Updating

[Pfirepfox]

Hi All,

Over the past few months, I have had issues with updating the firmware for my system. On occasion, it works without an issue, but on others, it appears to timeout for a reason I cannot find. Updating via CLI also doesn't resolve the issue but has the error below and then appears to hang:

Code Select Expand


fetch: /tmp/changelog/changelog.txz.sig appears to be truncated: 0/1332 bytes


On further analysis today I found some packages had gone from "Installed" to "misconfigured" after my update to 21.7.1 update with the live firewall log just stopping and not updating. I have exhausted my knowledge at this point in debugging and hoping someone may have some insight. Update log below:

Code Select Expand


***GOT REQUEST TO UPDATE***
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Checking for upgrades (109 candidates): .......... done
Processing candidates (109 candidates): ... done
The following 30 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
cyrus-sasl-gssapi: 2.1.27_1
openldap-client: 2.4.59_1

Installed packages to be UPGRADED:
cyrus-sasl: 2.1.27_1 -> 2.1.27_2
filterlog: 0.4_2 -> 0.4_3
krb5: 1.19.1 -> 1.19.2
libfido2: 1.7.0 -> 1.8.0
libnghttp2: 1.43.0 -> 1.44.0
opnsense: 21.7 -> 21.7.1
opnsense-installer: 21.7 -> 21.7.1
opnsense-update: 21.7 -> 21.7.1
php74: 7.4.21 -> 7.4.22_1
php74-ctype: 7.4.21 -> 7.4.22_1
php74-curl: 7.4.21 -> 7.4.22_1
php74-dom: 7.4.21 -> 7.4.22_1
php74-filter: 7.4.21 -> 7.4.22_1
php74-gettext: 7.4.21 -> 7.4.22_1
php74-json: 7.4.21 -> 7.4.22_1
php74-ldap: 7.4.21 -> 7.4.22_1
php74-mbstring: 7.4.21 -> 7.4.22_1
php74-openssl: 7.4.21 -> 7.4.22_1
php74-pdo: 7.4.21 -> 7.4.22_1
php74-session: 7.4.21 -> 7.4.22_1
php74-simplexml: 7.4.21 -> 7.4.22_1
php74-sockets: 7.4.21 -> 7.4.22_1
php74-sqlite3: 7.4.21 -> 7.4.22_1
php74-xml: 7.4.21 -> 7.4.22_1
php74-zlib: 7.4.21 -> 7.4.22_1
py38-urllib3: 1.25.11,1 -> 1.26.6,1

Installed packages to be REINSTALLED:
squid-4.15 (direct dependency changed: openldap-client)
unbound-1.13.1 (options changed)

Number of packages to be installed: 2
Number of packages to be upgraded: 26
Number of packages to be reinstalled: 2

The process will require 1 MiB more space.
15 MiB to be downloaded.
[1/30] Fetching unbound-1.13.1.txz: .......... done
[2/30] Fetching squid-4.15.txz: .......... done
[3/30] Fetching py38-urllib3-1.26.6,1.txz: .......... done
[4/30] Fetching php74-zlib-7.4.22_1.txz: ... done
[5/30] Fetching php74-xml-7.4.22_1.txz: ... done
[6/30] Fetching php74-sqlite3-7.4.22_1.txz: ... done
[7/30] Fetching php74-sockets-7.4.22_1.txz: ..... done
[8/30] Fetching php74-simplexml-7.4.22_1.txz: ... done
[9/30] Fetching php74-session-7.4.22_1.txz: ..... done
[10/30] Fetching php74-pdo-7.4.22_1.txz: ...... done
[11/30] Fetching php74-openssl-7.4.22_1.txz: ........ done
[12/30] Fetching php74-mbstring-7.4.22_1.txz: .......... done
[13/30] Fetching php74-ldap-7.4.22_1.txz: .... done
[14/30] Fetching php74-json-7.4.22_1.txz: ... done
[15/30] Fetching php74-gettext-7.4.22_1.txz: . done
[16/30] Fetching php74-filter-7.4.22_1.txz: ... done
[17/30] Fetching php74-dom-7.4.22_1.txz: ....... done
[18/30] Fetching php74-curl-7.4.22_1.txz: .... done
[19/30] Fetching php74-ctype-7.4.22_1.txz: . done
[20/30] Fetching php74-7.4.22_1.txz: .......... done
[21/30] Fetching opnsense-update-21.7.1.txz: .... done
[22/30] Fetching opnsense-installer-21.7.1.txz: ... done
[23/30] Fetching opnsense-21.7.1.txz: .......... done
[24/30] Fetching libnghttp2-1.44.0.txz: .......... done
[25/30] Fetching libfido2-1.8.0.txz: .......... done
[26/30] Fetching krb5-1.19.2.txz: .......... done
[27/30] Fetching filterlog-0.4_3.txz: .. done
[28/30] Fetching cyrus-sasl-2.1.27_2.txz: .......... done
[29/30] Fetching openldap-client-2.4.59_1.txz: .......... done
[30/30] Fetching cyrus-sasl-gssapi-2.1.27_1.txz: .... done
Checking integrity... done (1 conflicting)
  - openldap-client-2.4.59_1 conflicts with openldap-sasl-client-2.4.59 on /usr/local/bin/ldapadd
Checking integrity... done (0 conflicting)
Conflicts with the existing packages have been found.
One more solver iteration is needed to resolve them.
The following 31 package(s) will be affected (of 0 checked):

Installed packages to be REMOVED:
openldap-sasl-client: 2.4.59

New packages to be INSTALLED:
cyrus-sasl-gssapi: 2.1.27_1
openldap-client: 2.4.59_1

Installed packages to be UPGRADED:
cyrus-sasl: 2.1.27_1 -> 2.1.27_2
filterlog: 0.4_2 -> 0.4_3
krb5: 1.19.1 -> 1.19.2
libfido2: 1.7.0 -> 1.8.0
libnghttp2: 1.43.0 -> 1.44.0
opnsense: 21.7 -> 21.7.1
opnsense-installer: 21.7 -> 21.7.1
opnsense-update: 21.7 -> 21.7.1
php74: 7.4.21 -> 7.4.22_1
php74-ctype: 7.4.21 -> 7.4.22_1
php74-curl: 7.4.21 -> 7.4.22_1
php74-dom: 7.4.21 -> 7.4.22_1
php74-filter: 7.4.21 -> 7.4.22_1
php74-gettext: 7.4.21 -> 7.4.22_1
php74-json: 7.4.21 -> 7.4.22_1
php74-ldap: 7.4.21 -> 7.4.22_1
php74-mbstring: 7.4.21 -> 7.4.22_1
php74-openssl: 7.4.21 -> 7.4.22_1
php74-pdo: 7.4.21 -> 7.4.22_1
php74-session: 7.4.21 -> 7.4.22_1
php74-simplexml: 7.4.21 -> 7.4.22_1
php74-sockets: 7.4.21 -> 7.4.22_1
php74-sqlite3: 7.4.21 -> 7.4.22_1
php74-xml: 7.4.21 -> 7.4.22_1
php74-zlib: 7.4.21 -> 7.4.22_1
py38-urllib3: 1.25.11,1 -> 1.26.6,1

Installed packages to be REINSTALLED:
squid-4.15 (direct dependency changed: openldap-client)
unbound-1.13.1 (options changed)

Number of packages to be removed: 1
Number of packages to be installed: 2
Number of packages to be upgraded: 26
Number of packages to be reinstalled: 2

The operation will free 2 MiB.
[1/31] Upgrading libnghttp2 from 1.43.0 to 1.44.0...
[1/31] Extracting libnghttp2-1.44.0: .......... done
[2/31] Upgrading php74 from 7.4.21 to 7.4.22_1...
[2/31] Extracting php74-7.4.22_1: .......... done
[3/31] Upgrading php74-session from 7.4.21 to 7.4.22_1...
[3/31] Extracting php74-session-7.4.22_1: .......... done
[4/31] Upgrading php74-pdo from 7.4.21 to 7.4.22_1...
[4/31] Extracting php74-pdo-7.4.22_1: .......... done
[5/31] Upgrading php74-json from 7.4.21 to 7.4.22_1...
[5/31] Extracting php74-json-7.4.22_1: .......... done
[6/31] Reinstalling unbound-1.13.1...
===> Creating groups.
Using existing group 'unbound'.
===> Creating users
Using existing user 'unbound'.
[6/31] Extracting unbound-1.13.1: .......... done
[7/31] Upgrading php74-zlib from 7.4.21 to 7.4.22_1...
[7/31] Extracting php74-zlib-7.4.22_1: ....... done
[8/31] Upgrading php74-xml from 7.4.21 to 7.4.22_1...
[8/31] Extracting php74-xml-7.4.22_1: ........ done
[9/31] Upgrading php74-sqlite3 from 7.4.21 to 7.4.22_1...
[9/31] Extracting php74-sqlite3-7.4.22_1: ........ done
[10/31] Upgrading php74-sockets from 7.4.21 to 7.4.22_1...
[10/31] Extracting php74-sockets-7.4.22_1: .......... done
[11/31] Upgrading php74-simplexml from 7.4.21 to 7.4.22_1...
[11/31] Extracting php74-simplexml-7.4.22_1: ......... done
[12/31] Upgrading php74-openssl from 7.4.21 to 7.4.22_1...
[12/31] Extracting php74-openssl-7.4.22_1: ....... done
[13/31] Upgrading php74-gettext from 7.4.21 to 7.4.22_1...
[13/31] Extracting php74-gettext-7.4.22_1: ....... done
[14/31] Upgrading php74-filter from 7.4.21 to 7.4.22_1...
[14/31] Extracting php74-filter-7.4.22_1: ........ done
[15/31] Upgrading php74-dom from 7.4.21 to 7.4.22_1...
[15/31] Extracting php74-dom-7.4.22_1: .......... done
[16/31] Upgrading php74-curl from 7.4.21 to 7.4.22_1...
[16/31] Extracting php74-curl-7.4.22_1: ....... done
[17/31] Upgrading php74-ctype from 7.4.21 to 7.4.22_1...
[17/31] Extracting php74-ctype-7.4.22_1: ....... done
[18/31] Upgrading opnsense-update from 21.7 to 21.7.1...
[18/31] Extracting opnsense-update-21.7.1: .......... done
[19/31] Upgrading opnsense-installer from 21.7 to 21.7.1...
[19/31] Extracting opnsense-installer-21.7.1: .......... done
[20/31] Upgrading filterlog from 0.4_2 to 0.4_3...
[20/31] Extracting filterlog-0.4_3: .... done
[21/31] Upgrading krb5 from 1.19.1 to 1.19.2...
[21/31] Extracting krb5-1.19.2: .......... done
[22/31] Upgrading cyrus-sasl from 2.1.27_1 to 2.1.27_2...
*** Added group `cyrus' (id 60)
*** Added user `cyrus' (id 60)
[22/31] Extracting cyrus-sasl-2.1.27_2: .......... done
[23/31] Deinstalling openldap-sasl-client-2.4.59...
[23/31] Deleting files for openldap-sasl-client-2.4.59: .......... done
[24/31] Installing cyrus-sasl-gssapi-2.1.27_1...
[24/31] Extracting cyrus-sasl-gssapi-2.1.27_1: .......... done
[25/31] Installing openldap-client-2.4.59_1...
[25/31] Extracting openldap-client-2.4.59_1: .......... done
[26/31] Reinstalling squid-4.15...
===> Creating groups.
Using existing group 'squid'.
===> Creating users
Using existing user 'squid'.
===> Creating homedir(s)
===> Pre-installation configuration for squid-4.15
[26/31] Extracting squid-4.15: .......... done
[27/31] Upgrading php74-ldap from 7.4.21 to 7.4.22_1...
[27/31] Extracting php74-ldap-7.4.22_1: ....... done
[28/31] Upgrading py38-urllib3 from 1.25.11,1 to 1.26.6,1...
[28/31] Extracting py38-urllib3-1.26.6,1: .......... done
[29/31] Upgrading php74-mbstring from 7.4.21 to 7.4.22_1...
[29/31] Extracting php74-mbstring-7.4.22_1: .......... done
[30/31] Upgrading libfido2 from 1.7.0 to 1.8.0...
[30/31] Extracting libfido2-1.8.0: .......... done
[31/31] Upgrading opnsense from 21.7 to 21.7.1...
[31/31] Extracting opnsense-21.7.1: .......... done
Stopping configd...done
Resetting root shell
Updating /etc/shells
Unhooking from /etc/rc
Unhooking from /etc/rc.shutdown
Updating /etc/shells
Registering root shell
Hooking into /etc/rc
Hooking into /etc/rc.shutdown
Starting configd.
>>> Invoking update script 'refresh'
Keep version OPNsense\Monit\Monit (1.0.9)
Keep version OPNsense\Firewall\Alias (1.0.0)
Keep version OPNsense\Firewall\Category (1.0.0)
Keep version OPNsense\OpenVPN\Export (0.0.1)
Keep version OPNsense\CaptivePortal\CaptivePortal (1.0.0)
Keep version OPNsense\Core\Firmware (1.0.0)
Keep version OPNsense\Interfaces\Loopback (1.0.0)
Keep version OPNsense\Interfaces\VxLan (1.0.1)
Keep version OPNsense\Cron\Cron (1.0.2)
Keep version OPNsense\IPsec\IPsec (1.0.0)
Keep version OPNsense\TrafficShaper\TrafficShaper (1.0.3)
Keep version OPNsense\Syslog\Syslog (1.0.0)
Keep version OPNsense\IDS\IDS (1.0.6)
Keep version OPNsense\Proxy\Proxy (1.0.4)
Keep version OPNsense\Diagnostics\Lvtemplate (0.0.1)
Keep version OPNsense\Diagnostics\Netflow (1.0.1)
Keep version OPNsense\Routes\Route (1.0.0)
Keep version OPNsense\Unbound\Unbound (1.0.0)
Keep version OPNsense\Wireguard\General (0.0.1)
Keep version OPNsense\Wireguard\Server (0.0.2)
Keep version OPNsense\Wireguard\Client (0.0.6)
Writing firmware setting...done.
Writing trust files...done.
Configuring login behaviour...done.
Configuring system logging...done.
=====
Message from openldap-client-2.4.59_1:

--
The OpenLDAP client package has been successfully installed.

Edit
  /usr/local/etc/openldap/ldap.conf
to change the system-wide client defaults.

Try `man ldap.conf' and visit the OpenLDAP FAQ-O-Matic at
  http://www.OpenLDAP.org/faq/index.cgi?file=3
for more information.
You may need to manually remove /usr/local/etc/squid/squid.conf if it is no longer needed.
=====
Message from py38-urllib3-1.26.6,1:

--
Since version 1.25 HTTPS connections are now verified by default which is done
via "cert_reqs = 'CERT_REQUIRED'".  While certificate verification can be
disabled via "cert_reqs = 'CERT_NONE'", it's highly recommended to leave it on.

Various consumers of net/py-urllib3 already have implemented routines that
either explicitly enable or disable HTTPS certificate verification (e.g. via
configuration settings, CLI arguments, etc.).

Yet it may happen that there are still some consumers which don't explicitly
enable/disable certificate verification for HTTPS connections which could then
lead to errors (as is often the case with self-signed certificates).

In case of an error one should try first to temporarily disable certificate
verification of the problematic urllib3 consumer to see if that approach will
remedy the issue.
=====
Message from opnsense-21.7.1:

--
The song remains the same
Checking integrity... done (0 conflicting)
Deinstallation has been requested for the following 1 packages:

Installed packages to be REMOVED:
libsodium: 1.0.18

Number of packages to be removed: 1

The operation will free 2 MiB.
[1/1] Deinstalling libsodium-1.0.18...
[1/1] Deleting files for libsodium-1.0.18: .......... done
Checking all packages: .......... done
The following package files will be deleted:
/var/cache/pkg/os-etpro-telemetry-1.5~6dcdd75c65.txz
/var/cache/pkg/os-theme-rebellion-1.8.7.txz
/var/cache/pkg/os-etpro-telemetry-1.5.txz
/var/cache/pkg/os-intrusion-detection-content-et-open-1.0.1~5749c40acd.txz
/var/cache/pkg/os-intrusion-detection-content-snort-vrt-1.1_1~1b1996af41.txz
/var/cache/pkg/os-theme-rebellion-1.8.7~731bb22ca2.txz
/var/cache/pkg/os-intrusion-detection-content-snort-vrt-1.1_1~2aa8a8a971.txz
/var/cache/pkg/os-intrusion-detection-content-et-pro-1.0.2_1~c4fa1a14b3.txz
/var/cache/pkg/smartmontools-7.2_1.txz
/var/cache/pkg/os-intrusion-detection-content-snort-vrt-1.1_1.txz
/var/cache/pkg/os-smart-2.2~bd4d8c16f4.txz
/var/cache/pkg/os-smart-2.2.txz
/var/cache/pkg/os-intrusion-detection-content-et-pro-1.0.2_1.txz
/var/cache/pkg/smartmontools-7.2_1~67dbef1aa4.txz
/var/cache/pkg/os-wireguard-1.7~f69316daa0.txz
/var/cache/pkg/bash-5.1.8~d14ba7f85d.txz
/var/cache/pkg/os-wireguard-1.7.txz
/var/cache/pkg/wireguard-tools-1.0.20210424~db8a8be741.txz
/var/cache/pkg/wireguard-tools-1.0.20210424.txz
/var/cache/pkg/bash-5.1.8.txz
/var/cache/pkg/wireguard-go-0.0.20210424,1~cb0ce3f425.txz
/var/cache/pkg/unbound-1.13.1~d5a823b661.txz
/var/cache/pkg/wireguard-go-0.0.20210424,1.txz
/var/cache/pkg/os-intrusion-detection-content-et-open-1.0.1~33ae5d4a33.txz
/var/cache/pkg/php74-zlib-7.4.22_1.txz
/var/cache/pkg/unbound-1.13.1.txz
/var/cache/pkg/os-intrusion-detection-content-et-open-1.0.1.txz
/var/cache/pkg/squid-4.15~7909842b44.txz
/var/cache/pkg/squid-4.15.txz
/var/cache/pkg/py38-urllib3-1.26.6,1~7fbf3eccb2.txz
/var/cache/pkg/php74-xml-7.4.22_1~96c1396e58.txz
/var/cache/pkg/py38-urllib3-1.26.6,1.txz
/var/cache/pkg/php74-zlib-7.4.22_1~80ceab2289.txz
/var/cache/pkg/php74-sqlite3-7.4.22_1.txz
/var/cache/pkg/php74-xml-7.4.22_1.txz
/var/cache/pkg/php74-sqlite3-7.4.22_1~d45ec2555b.txz
/var/cache/pkg/php74-sockets-7.4.22_1~894f5d9442.txz
/var/cache/pkg/php74-simplexml-7.4.22_1.txz
/var/cache/pkg/php74-sockets-7.4.22_1.txz
/var/cache/pkg/php74-simplexml-7.4.22_1~a5ac052907.txz
/var/cache/pkg/php74-session-7.4.22_1~55bc0af20e.txz
/var/cache/pkg/php74-session-7.4.22_1.txz
/var/cache/pkg/php74-pdo-7.4.22_1~a01dab3b01.txz
/var/cache/pkg/php74-pdo-7.4.22_1.txz
/var/cache/pkg/php74-openssl-7.4.22_1~99b36c32bd.txz
/var/cache/pkg/php74-openssl-7.4.22_1.txz
/var/cache/pkg/php74-mbstring-7.4.22_1~b95d44fb0b.txz
/var/cache/pkg/php74-mbstring-7.4.22_1.txz
/var/cache/pkg/php74-ldap-7.4.22_1~5793203b95.txz
/var/cache/pkg/php74-ldap-7.4.22_1.txz
/var/cache/pkg/php74-json-7.4.22_1~c2d4449850.txz
/var/cache/pkg/php74-json-7.4.22_1.txz
/var/cache/pkg/php74-gettext-7.4.22_1~1f1f7b953c.txz
/var/cache/pkg/php74-gettext-7.4.22_1.txz
/var/cache/pkg/php74-filter-7.4.22_1~a3e341f69a.txz
/var/cache/pkg/php74-filter-7.4.22_1.txz
/var/cache/pkg/php74-dom-7.4.22_1~63eddd3a62.txz
/var/cache/pkg/php74-7.4.22_1.txz
/var/cache/pkg/php74-dom-7.4.22_1.txz
/var/cache/pkg/php74-curl-7.4.22_1~e048566e2c.txz
/var/cache/pkg/php74-curl-7.4.22_1.txz
/var/cache/pkg/php74-ctype-7.4.22_1~85e4c7a59e.txz
/var/cache/pkg/php74-7.4.22_1~1a267aa017.txz
/var/cache/pkg/php74-ctype-7.4.22_1.txz
/var/cache/pkg/opnsense-update-21.7.1~e89cff4534.txz
/var/cache/pkg/opnsense-update-21.7.1.txz
/var/cache/pkg/opnsense-installer-21.7.1~4342b86780.txz
/var/cache/pkg/opnsense-21.7.1~ac01c2e89b.txz
/var/cache/pkg/opnsense-installer-21.7.1.txz
/var/cache/pkg/opnsense-21.7.1.txz
/var/cache/pkg/libfido2-1.8.0~8c651e96a3.txz
/var/cache/pkg/libnghttp2-1.44.0~6588232a8a.txz
/var/cache/pkg/libnghttp2-1.44.0.txz
/var/cache/pkg/libfido2-1.8.0.txz
/var/cache/pkg/krb5-1.19.2~240baf8e3b.txz
/var/cache/pkg/krb5-1.19.2.txz
/var/cache/pkg/filterlog-0.4_3~6202f309b9.txz
/var/cache/pkg/filterlog-0.4_3.txz
/var/cache/pkg/cyrus-sasl-2.1.27_2~ac6c747ffb.txz
/var/cache/pkg/cyrus-sasl-2.1.27_2.txz
/var/cache/pkg/openldap-client-2.4.59_1~3e6709808c.txz
/var/cache/pkg/openldap-client-2.4.59_1.txz
/var/cache/pkg/cyrus-sasl-gssapi-2.1.27_1~bd9c11ef4b.txz
/var/cache/pkg/cyrus-sasl-gssapi-2.1.27_1.txz
The cleanup will free 18 MiB
Deleting files: .......... done
All done
Your system is up to date.
Starting web GUI...done.
Generating RRD graphs...done.
Fetching base-21.7.1-amd64.txz: ...


[errored out]

Have you tried re-installing your system when running, not reinstalling from an ISO?

https://docs.opnsense.org/manual/virtuals.html?highlight=opnsense%20bootstrap

look at opnsense-bootstrap.  A word of caution, it is not recommended to do this unless otherwise told to do so, (by opnsense). 

I have done this several times to my system, and have not had unresolvable issues. The only thing I would warn is saving a backup and then after the system reboots,  install the plug-ins (will be missing).

[Pfirepfox]

I am concerned about attempting a bootstrap as sometime the updates timeout/fail. If I attempt a bootstrap and it hangs I may be left with a environment that fails to do anything.

Has anyone else got a suggestion?

[Pfirepfox]

I have managed to resolve the firewall logging issue, by clearing logs, clearing cache and then rebooting - unsure why it did not work initially.

During the reboot, some package changes occurred and now they are saying "orphaned" rather than "misconfigured".

Still no luck with resolving the update issue when the changelog.txz.sig is truncated

[franco]

"misconfigured" is a new feature of 21.1.3 and not relevant here. "orphaned" means there is no remote package database yet which is as easily fixed as checking for updates.

Something is clearly wrong in your system, either by packet truncation or other type of mangling of incoming traffic:

> fetch: /tmp/changelog/changelog.txz.sig appears to be truncated: 0/1332 bytes

A 1332 byte file cannot download with 0 bytes...


Cheers,
Franco

[Pfirepfox]

Thanks Franco, looks like I have narrowed it down and hopefully working with the below.

1) Checking if /tmp/changelog/ exists failed with "does not exist"
2) Manually created using touch /tmp/changelog/
3) Turned off setting "Use IPv4 over IPv6" in general
4) Manually downloaded changelog using fetch -v https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/sets/changelog.txz.sig
5) Rebooted and checked connectivity in UI - failed to Hostcentral in Australia (Mirror.as24220.net)
6) Changed mirror to NYC (Mirrors.nycbug.org)
7) Checked connectivity - now working
8) Ran update and package now say installed :)

Unsure why Hostcentral in Australia does not work with the same setting and also unsure of how changelog was deleted? Someone smarter than me would know a potential cause

[franco]

> 3) Turned off setting "Use IPv4 over IPv6" in general

I think this might be the real deal: IPv6 support is enabled by default but ends up being defunct for some ISPs...


Cheers,
Franco

[Pfirepfox]

I have turned on and off that setting in the past with little effect, but glad to see it working. Do you happen to know why using the Hostcentral Mirror in Australia is still failing even with the same settings? Would be interesting to see if anyone else is having the same issue

[muchacha_grande]

I found the same problem today trying to update to 21.7.3 and solved it just turning on "Prefer IPv4 even if IPv6 is available".

Recently my ISP changed my WAN IPv4 to a private one and started to use Carrier NAT. I complained about the change and finally they give me back a public IP. Since then IPv6 started to work weird.