HTTP 500 in Firewall Portforwardings Page

Hi there,

i’m using OpenWrt omnia 15.05 r47055 and got this error when opening the firewall/port forwarding page:

500 Interner Serverfehler
Entschuldigung, auf dem Server ist ein unerwarteter Fehler aufgetreten.

/usr/lib/lua/luci/dispatcher.lua:460: Failed to execute arcombine dispatcher target for entry '/admin/network/firewall/forwards'.
The called action terminated with an exception:
/usr/lib/lua/luci/template.lua:97: Failed to execute template 'cbi/map'.
A runtime error occured: /usr/lib/lua/luci/template.lua:97: Failed to execute template 'cbi/tblsection'.
A runtime error occured: /usr/lib/lua/luci/template.lua:97: Failed to execute template 'firewall/cbi_addforward'.
A runtime error occured: /usr/lib/lua/luci/util.lua:34: bad argument #2 to 'format' (string expected, got table)
stack traceback:
	[C]: in function 'assert'
	/usr/lib/lua/luci/dispatcher.lua:460: in function 'dispatch'
	/usr/lib/lua/luci/dispatcher.lua:141: in function 

So i can not add oder modify any portforwardings :frowning:

BR

mode

another error when i try to edit a traffic rule

/usr/lib/lua/luci/dispatcher.lua:460: Failed to execute arcombine dispatcher target for entry ‘/admin/network/firewall/rules/cfg0a92bd’.
The called action terminated with an exception:
/usr/lib/lua/luci/util.lua:34: bad argument #2 to ‘format’ (string expected, got table)
stack traceback:
[C]: in function ‘assert’
/usr/lib/lua/luci/dispatcher.lua:460: in function ‘dispatch’
/usr/lib/lua/luci/dispatcher.lua:141: in function </usr/lib/lua/luci/dispatcher.lua:140>

my /etc/config/firewall

config defaults
        option syn_flood '1'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'REJECT'

config zone
        option name 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'
        option network 'lan LAN_GUEST'

config zone
        option name 'wan'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option masq '1'
        option mtu_fix '1'
        option network 'wan wan6'

config forwarding
        option src 'lan'
        option dest 'wan'

config rule
        option name 'Allow-DHCP-Renew'
        option src 'wan'
        option proto 'udp'
        option dest_port '68'
        option target 'ACCEPT'
        option family 'ipv4'

config rule
        option name 'Allow-Ping'
        option src 'wan'
        option proto 'icmp'
        option icmp_type 'echo-request'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-IGMP'
        option src 'wan'
        option proto 'igmp'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-DHCPv6'
        option src 'wan'
        option proto 'udp'
        option src_ip 'fe80::/10'
        option src_port '547'
        option dest_ip 'fe80::/10'
        option dest_port '546'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-MLD'
        option src 'wan'
        option proto 'icmp'
        option src_ip 'fe80::/10'
        list icmp_type '130/0'
        list icmp_type '131/0'
        list icmp_type '132/0'
        list icmp_type '143/0'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Input'
        option src 'wan'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        list icmp_type 'router-solicitation'
        list icmp_type 'neighbour-solicitation'
        list icmp_type 'router-advertisement'
        list icmp_type 'neighbour-advertisement'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Forward'
        option src 'wan'
        option dest '*'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config include
        option path '/etc/firewall.user'

config include
        option path '/usr/share/firewall/turris'
        option reload '1'

config include
        option path '/etc/firewall.d/with_reload/firewall.include.sh'
        option reload '1'

config include
        option path '/etc/firewall.d/without_reload/firewall.include.sh'
        option reload '0'

config rule
        option src 'wan'
        option dest 'lan'
        option proto 'esp'
        option target 'ACCEPT'

config rule
        option src 'wan'
        option dest 'lan'
        option dest_port '500'
        option proto 'udp'
        option target 'ACCEPT'

config include 'miniupnpd'
        option type 'script'
        option path '/usr/share/miniupnpd/firewall.include'
        option family 'any'
        option reload '1'

config zone 'guest_turris'
        option enabled '0'
        option name 'guest_turris'
        option input 'REJECT'
        option forward 'REJECT'
        option output 'ACCEPT'
        option network 'guest_turris'

config forwarding 'guest_turris_forward_wan'
        option enabled '0'
        option name 'guest to wan forward'
        option src 'guest_turris'
        option dest 'wan'

config rule 'guest_turris_dns_rule'
        option enabled '0'
        option name 'guest dns rule'
        option src 'guest_turris'
        option proto 'tcpudp'
        option dest_port '53'
        option target 'ACCEPT'

config rule 'guest_turris_dhcp_rule'
        option enabled '0'
        option name 'guest dhcp rule'
        option src 'guest_turris'
        option proto 'udp'
        option src_port '67-68'
        option dest_port '67-68'
        option target 'ACCEPT'

config redirect
        option target 'DNAT'
        option src 'wan'
        option dest 'lan'
        option proto 'tcp'
        option src_dport '443'
        option dest_ip '192.168.6.13'
        option dest_port '443'
        option name 'HTTPS'

config redirect
        option target 'DNAT'
        option src 'wan'
        option dest 'lan'
        option proto 'udp'
        option src_dport '500'
        option dest_ip '192.168.6.12'
        option dest_port '500'
        option name 'VPN'

config redirect
        option target 'DNAT'
        option src 'wan'
        option dest 'lan'
        option proto 'udp'
        option src_dport '4500'
        option dest_ip '192.168.6.12'
        option dest_port '4500'
        option name 'VPN'

config redirect
        option target 'DNAT'
        option src 'wan'
        option dest 'lan'
        option proto 'tcp udp'
        option src_dport '5060'
        option dest_ip '192.168.6.20'
        option dest_port '5060'
        option name 'SIP'

config redirect
        option target 'DNAT'
        option src 'wan'
        option dest 'lan'
        option proto 'udp'
        option src_dport '7078-7109'
        option dest_ip '192.168.6.20'
        option dest_port '7078-7109'
        option name 'VoIP RTP'

Switched to latest RC. Error still there. Please assist.

1 Like

Hi,
please can you try factory reset or maybe go to the first snapshot to see if it works and if it works after update?
(and can you try it in English? Maybe (not likely) there’s something bad in Germany language)

If not, then it is strange that you have this issue, because no one else reported it.

If the issue still persist, please can you reach Turris support via email:
tech.support(at)turris.cz ? :slight_smile:

1 Like

Hi Pepe,

i learned the hard way. FW Update or Lang switch did not help.

So i performed a factory reset (in result a wasn’t able to perform updates because of missing certs - but i manged to fix that )
After this i setup the router step by step. After every change i checked if the error occurs.
The error was in the /etc/config/dhcp file. I added a “config host” section with name as type “list” instead of “option”, because a wanted to have more than one name (local dns resolving) for this host. after changing list to option and removing the addtional hostnames all works fine.

1 Like

Glad that you found it!