Jump to content
TorGuard

🔥 HowTo - OpenWRT with any TorGuard's Wireguard IP

Rate this topic


19807409

Recommended Posts

  • Replies 167
  • Created
  • Last Reply

Top Posters In This Topic

  • 19807409

    92

  • James8078

    42

  • simschu

    9

  • Keymaster4225

    6

Top Posters In This Topic

Popular Posts

I decided to write a simple guide and share it with most before preparing this guide properly and uploading everything to github. This guide will be updated and scripts uploaded to github, after that

glad it worked, you are welcome Actually yes, simply rerunning tginstall, as your credentials and so on are saved in /etc/config/torguard, just change before that server ip which is saved in /

Excellent. I was able to change it. Previously, I was just deleting the files in /usr/bin but it didn't ask for the new IP, so your solution was very welcome! thank you!   Here are the resul

Posted Images

19807409
3 minutes ago, James8078 said:

Ok thanks.

About github, can't find where to reach you via message or others...

[email protected] is email for that account to which you can send email, but honestly, I really check it only few times in a week (or a month), I guess if you have any questions or issues you can always open here a thread or on github an issue where it is not only me who can reply and help.

If you send me email, best is if you encrypt your message with gpg, you can find public key for [email protected], if not, it is in the attachment of this post.

If emails do not come from known sender and are not encrypted I normally do not bother a lot to read it.

[email protected]_PublicKey_ASCII_D761EE2E5E9790FD45B58224E4AA16A7442E2431.asc

Link to post
Share on other sites
19807409
3 minutes ago, James8078 said:

the attchment here is working or not? seems unavailable?

Indeed, strange, here it is in cleartext, copy save it as pubkey.asc:

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2

mQGNBFh+dtABDAChFahf1w7u/ptHVb8qI1lsqt8exApZJSuJBJPyD8/Npk6mp8KB
Ictp6KJAdHQvnFbPL29d4Ytu4VQFOkgkAZ4o/zuezLY0RR2WCaxzlnc8FZ1xe0uo
6/U+3pi00hp8y1+PN1t6k5M99nzDXnETKo9yhnq5MA/1IETLY4+gx6In3KfCoR/4
rPxLefQ4f0ArIxIF/M82YZQxJRv8Rli6v2Ke0f+EVEPwz0ZlczdrKPSms5ispLNB
QT1OYeipymEh89BWyEaw43RXTOVCBZO6o8nsUzzjIeMSsiAdWWeheuJrakVWGYeR
8fRc7Mn49Cs3QuiKK+D9+1byh3S7Wnsq+7nINEoD3Lir6FeWUruGVT1yCSaAK3qw
UiEFza0ZZXqyNqOBQjTqTVPkWWn5myXX39KeBCznQ4i6TRMhlrwg9n+7Fj4PrzId
9Kr4jvKnhmdaqq/8vEJ4F2O4TyBIWcdVBjlqUnce9/rjAuLP9WRsds6v5U+XV1Lv
qsfHwwin/PVgpQsAEQEAAbQuVG9yR3VhcmQgKE1haW4gQWRkcmVzcykgPHRvcmd1
YXJkQGkycG1haWwub3JnPokBuQQTAQgAIwUCWH520AIbAwcLCQgHAwIBBhUIAgkK
CwQWAgMBAh4BAheAAAoJEOSqFqdELiQxmhAL/054VDAmGb+OJICbqrZQUQeKoQWN
a1QZH2YrQ2AFqvU/niG6svd9LWAn7Z2sYK/m0mys+ZgrQChXEktGhgGAQz7deh14
J8RBQVsHN1vvthHPtgzIfH2JEkiEHocPZYszmf5fBmvLVK4/ZzBQcEXC/dq36KpD
pV3Sm9Bf+xQGLzJ0TD4DaX4plut8vWmw0LPqs16IPFGIxYa5FIIaXWycBXHSTHHD
TcrysJKL1jevLMzAcNBFdTZcc61Dy5VPTDm5iolc8XCq+1uVe3eduzyT2mDZUdhT
0TRoTzoYKVpCpKSVtTNiMjFJimctnUVVgJZB6po3M8y4uB3cxPmIsVJt5aApd41o
B2N2uzP9Lvks+ivTJao/BoFbZdzcRD15ggA623LctQh+7caugolylu+DC7P6gDJC
5yPwlij/2qdHXmDWdhHNTVfqzYS35gP1Tdckd8drUA9BbXeEIEp+JWp9waP2f77C
ltJ31y2gLJ3LA1UHvdwSZWdFTrO1t1Z9VHyeLLkBjQRYfnbQAQwAxl7eIcShUHQV
9g6RmORizCiuo06Kz9Sf15Yy1tYxzeXmo7Dkbluo1rBeujGqhX1YXBo4e8YKj+ID
F/dLkhK7hxj8UykAP7x3FysCz3TWhXO0yrrdamEzGvGjJfpVgplN06F8U1psh3aR
hBKVzUFNRf+8lqym6sy5xQgp0BnK4Mu1PE/qGgFYOEEtHCaIRk5+hnrFD2VOb6bO
49aRfOqYekpPQQQoHpDLMKFowStZeheKhLFNgNS9FzmZq2EITWhQFC8pOFHybWvK
3noMtOO9w/2VtILd6EPrnI2R4sg8oqAhEpWq/o4hCmbBSEZB9AGVIDLjPH1JOsqU
hCxmVe1kcpd6m2F5yO2WssphjOw/S7ISWPfIA8gQAgchfIwK2r2HAvJN7q6ft8Vw
rDew+GKzk11b4CzOMFmOA2e8hPemwGAbE0nOBQxulnhc4Bs3cqz5rGucCxisJoiX
I5WnKDZGDScQtBH2gJsrpeJ+lspOVtBcHdSbWqaPI5PfDLwh2SbJABEBAAGJAZ8E
GAEIAAkFAlh+dtACGwwACgkQ5KoWp0QuJDEzJwwAj8jlrFmuW/594g8kumg29sLF
1ry7YugiNhOW1+504573sbWAFz53i90DkdQ37wqZOo9onZhHQQPNacuWvG0/Fgrw
P5K4YmtgOnbRzX32YeKiFwgx3i6N3f4fTeXTeQqdPy0+Xy3Fzg+2iZS/jmNgWwBe
e952877Og8ZT3u/TLznftBhhQA9QYIiVNSib8Dqd4/L7PSXenGdCCa9hnn4wL5p6
z6LlgfDdn8esikXd/foN4dVuu6EZHoFsC1LVCzjNp7/dRcZ7H+shyXV24oU8rWRU
9ivTjMIFUTLzUaYrHEzx1ToqXrunYVS7caDkHij8U9VWYhxLNcVeYzl+L3WI8AdZ
K3KuG5K9usYNVELLFJez4fe4bit9X9hy+IvJLmbg55X7m3n7xHeHy4lwNMEr/2Gx
RtqcyZq66mEoz02pEXGPBcVHqHxOU8nq55KF8ctyjd5/X+rtWyowVzv5PaCqXcqh
6Z/8JCKnipP0sF/WINl49Xf1vRV0FOB9vgcnkhOb
=C1Zg
-----END PGP PUBLIC KEY BLOCK-----

 

Link to post
Share on other sites
James8078
2 hours ago, 19807409 said:

Indeed, strange, here it is in cleartext, copy save it as pubkey.asc:

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2
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=C1Zg
-----END PGP PUBLIC KEY BLOCK-----

 

ok good, I guess I can use FlowCrypt , to do that?

Link to post
Share on other sites
19807409
9 hours ago, James8078 said:

ok good, I guess I can use FlowCrypt , to do that?

For gmail in chrome and firefox based browsers use mailvelope: https://www.mailvelope.com/

Latest thunderbird has gpg support included if you use it.

For ubuntu/debian and most other linux distors gpg is included as well as app. You can install additionally some other tools like kleopatra.

For windows users, you can install this: https://www.gpg4win.org/download.html

You could also use keybase or similar services.

For your question about flashing:

Please read documentation about it as it explains everything pretty well, also things which I write now:

How to flash with Luci with keeping the settings: https://openwrt.org/docs/guide-quick-start/sysupgrade.luci
How to flash with CLI: https://openwrt.org/docs/guide-user/installation/sysupgrade.cli

 

So, first download image and check the hash, if hash is ok then flash your image.

# cd to tmp, if you need to free up more space, read about it on openwrt wiki for which you have a link above
cd /tmp

# Download image
wget https://downloads.openwrt.org/snapshots/targets/mvebu/cortexa9/openwrt-mvebu-cortexa9-linksys_wrt3200acm-squashfs-sysupgrade.bin

# Download hashsums file
wget https://downloads.openwrt.org/snapshots/targets/mvebu/cortexa9/sha256sums

# check hashsums
sha256sum -c sha256sums 2> /dev/null | grep OK

if hashsum is ok, you will see something like this and can flash:

openwrt-mvebu-cortexa9-linksys_wrt3200acm-squashfs-sysupgrade.bin: OK

Flash preserving your settings:

sysupgrade -v /tmp/openwrt-mvebu-cortexa9-linksys_wrt3200acm-squashfs-sysupgrade.bin

You can add the `-n` option if you DO NOT want to preserve any old configuration files and configure upgraded device from clean state (network/system settings will be lost as well)

sysupgrade -n /tmp/openwrt-mvebu-cortexa9-linksys_wrt3200acm-squashfs-sysupgrade.bin

Optionaly (you dont need it), If you want to create a /etc/backup/installed_packages.txt file which lists all your packages and where they are stored (you dont need it but you can if you want to have backup of those):

sysupgrade -k /tmp/openwrt-mvebu-cortexa9-linksys_wrt3200acm-squashfs-sysupgrade.bin

    
Wait until your router is flashed and ssh to your router

ssh YourRouterIP

then update and restore opkg (all your installed packages):

opkg update
opkg restore

Reboot

reboot -f

 

You asked also how it could be done daily, above you can see it, there are several ways how you can run a job which will check if there is a new image and flash it restoring all your settings, but this is something that you should not automate unless it is a development machine/router which is not used by other users. It is very rare, but it can happen that once in a year there is one bad image which would cause you troubles and if you update every single release (daily) then your chances running into that problem is 100% if one exists.

Link to post
Share on other sites
James8078

@

19807409

Im not able to open your mails, it says that I need keys and I dont have the good one (mailenvelope)

 

On 1/15/2021 at 11:31 AM, 19807409 said:

[email protected] is email for that account to which you can send email, but honestly, I really check it only few times in a week (or a month), I guess if you have any questions or issues you can always open here a thread or on github an issue where it is not only me who can reply and help.

If you send me email, best is if you encrypt your message with gpg, you can find public key for [email protected], if not, it is in the attachment of this post.

If emails do not come from known sender and are not encrypted I normally do not bother a lot to read it.

[email protected]_PublicKey_ASCII_D761EE2E5E9790FD45B58224E4AA16A7442E2431.ascUnavailable

 

Link to post
Share on other sites
19807409
12 minutes ago, James8078 said:

Im not able to open your mails, it says that I need keys and I dont have the good one (mailenvelope)

the email you sent had attachment, you public key. You used FlowCrypt to encrypt it, by that I would assume that you imported your private key into FlowCrypt.

-----BEGIN PGP MESSAGE-----
Version: FlowCrypt Email Encryption 8.0.1
Comment: Seamlessly send and receive encrypted email

Also, you must have created your gpg key. If you created it on debian, then start Passwords application and there you can export your private key.

When you got your private key, then import it to mailvelope and you will be able to decrypt.

If you got confused, you did not use this key anyway for anything except sending that one email. You can create a new key with passwords utility in debian/ubuntu, for windows with kleopatra (gpg4win package includes it).

If you want to create it in terminal, then you can run as example:

gpg --full-generate

It is always good idea to read documentation about those things, save also a link of some gpg cheat sheet (as example one by duckduckgo)

grafik
Link to post
Share on other sites
James8078
On 1/17/2021 at 4:53 AM, 19807409 said:

sysupgrade -k /tmp/openwrt-mvebu-cortexa9-linksys_wrt3200acm-squashfs-sysupgrade.bin

    
Wait until your router is flashed and ssh to your router


ssh YourRouterIP

then update and restore opkg (all your installed packages):


opkg update
opkg restore

Reboot


reboot -f

 

s

hi,

 

when you wrote : opkg restore (all packages) you mean that I  need to restore all with commands? Like
opkg restore adblock banip openvpn dnscrypt proxy 2 etc etc? Cause when I did it, after ''opkg restore'' Ive had in terminal kind of ''okpk command line help''

Link to post
Share on other sites
19807409
4 hours ago, James8078 said:

when you wrote : opkg restore (all packages) you mean that I  need to restore all with commands?

by that I mean just opkg restore without anything. You seem not to have followed instructions: https://openwrt.org/docs/guide-user/installation/generic.sysupgrade

If opkg backup and opkg restore are not available, then you do not have that script which I wrote you should install extras: https://openwrt.org/docs/guide-user/additional-software/opkg#instructions

opkg restore

will restore all your packages.

PS: congrats for decrypting

Link to post
Share on other sites
James8078
7 hours ago, 19807409 said:

by that I mean just opkg restore without anything. You seem not to have followed instructions: https://openwrt.org/docs/guide-user/installation/generic.sysupgrade

If opkg backup and opkg restore are not available, then you do not have that script which I wrote you should install extras: https://openwrt.org/docs/guide-user/additional-software/opkg#instructions

opkg restore

will restore all your packages.

PS: congrats for decrypting

everything worked fine during process, but in your case, if you do ''restore'' what do you see in shell sfter that?

Link to post
Share on other sites
19807409
39 minutes ago, James8078 said:

can I paste all those commands form the link and put in terminal? thats it

yes

Link to post
Share on other sites
19807409
44 minutes ago, James8078 said:

everything worked fine during process, but in your case, if you do ''restore'' what do you see in shell sfter that?

I see all packages which I had installed being installed.

  • Thanks 1
Link to post
Share on other sites
James8078
1 hour ago, 19807409 said:

I see all packages which I had installed being installed.

Ok on my side it wasn't.

I will try the Cli you gave me as link.

I do that when I upgrade or i can paste that script anytime, like now?

Link to post
Share on other sites
19807409
2 minutes ago, James8078 said:

Ok on my side it wasn't.

I will try the Cli you gave me as link.

I do that when I upgrade or i can paste that script anytime, like now?

 

Its quite straight forward, paste all of this simply in terminal:

mkdir -p /etc/profile.d
cat  << "EOF_cat" > /etc/profile.d/opkg.sh
# Wrap Opkg calls
opkg() {
    local OPKG_CMD="${1}"
    local OPKG_CMDS=" backup restore import uci destlist proc allupgrade newconf "
    if echo "${OPKG_CMDS}" | grep -q -e "\s${OPKG_CMD}\s"
    then opkg_"${@}"
    else command opkg "${@}"
    fi
}
 
# Initialize Opkg configuration
opkg_uci() {
    if ! uci -q show opkg > /dev/null
    then uci import opkg < /dev/null
    fi
    uci -q batch << EOF
delete opkg.overlay
delete opkg.rom
delete opkg.rwm
set opkg.overlay=list
set opkg.rom=list
set opkg.rwm=list
set opkg.custom=list
$(sed -r -e "s/^(.*)\s(.*)$/add_list opkg.\2.pkg=\1/")
commit opkg
EOF
}
 
# Import Opkg configuration from sysupgrade backup
opkg_import() {
    local OPKG_BACK="${1:-/etc/backup/installed_packages.txt}"
    sed -e "s/\sunknown$/\trwm/" "${OPKG_BACK}" | opkg_uci
}
 
# Back up the list of installed packages
opkg_backup() {
    opkg_destlist | opkg_uci
}
 
# Restore packages from the list
opkg_restore() {
    local OPKG_LIST="${1:-overlay}"
    local OPKG_PKGS="$(uci get opkg."${OPKG_LIST}".pkg | sed -e "s/\s/\n/g")"
    local OPKG_INST="$(mktemp -t opkg.XXXXXX)"
    local OPKG_DEL="$(mktemp -t opkg.XXXXXX)"
    local OPKG_ADD="$(mktemp -t opkg.XXXXXX)"
    opkg list-installed | sed -e "s/\s.*$//" > "${OPKG_INST}"
    echo "${OPKG_PKGS}" | sed -n -e "s/^-//p" > "${OPKG_DEL}"
    echo "${OPKG_PKGS}" | sed -e "/^-/d" > "${OPKG_ADD}"
    opkg_proc remove $(grep -x -f "${OPKG_INST}" "${OPKG_DEL}")
    opkg_proc install $(grep -v -x -f "${OPKG_INST}" "${OPKG_ADD}")
    rm -f "${OPKG_INST}" "${OPKG_DEL}" "${OPKG_ADD}"
}
 
# List packages by destination
opkg_destlist() {
    find /usr/lib/opkg/info -name "*.control" "(" \
    "(" -exec test -f /rom/{} ";" -exec echo {} rom ";" ")" -o \
    "(" -exec test -f /overlay/upper/{} ";" -exec echo {} overlay ";" ")" -o \
    "(" -exec echo {} rwm ";" ")" ")" | sed -e "s/.*\///;s/\.control\s/\t/"
}
 
# Process packages one by one
opkg_proc() {
    local OPKG_PKG=""
    local OPKG_CMD="${1:?}"
    if [ -z "${2}" ]
    then local OPKG_PKGS=""
    else local OPKG_PKGS="${@#* }"
    fi
    for OPKG_PKG in ${OPKG_PKGS}
    do opkg --force-depends "${OPKG_CMD}" "${OPKG_PKG}"
    done
}
 
# Upgrade all installed packages
opkg_allupgrade() {
    local OPKG_DEST="${1:-.*}"
    local OPKG_INST="$(mktemp -t opkg.XXXXXX)"
    local OPKG_UPGR="$(mktemp -t opkg.XXXXXX)"
    opkg_destlist | sed -n -e "s/\s${OPKG_DEST}$//p" > "${OPKG_INST}"
    opkg list-upgradable | sed -e "s/\s.*$//" > "${OPKG_UPGR}"
    opkg_proc upgrade $(grep -x -f "${OPKG_INST}" "${OPKG_UPGR}")
    rm -f "${OPKG_INST}" "${OPKG_UPGR}"
}
 
# Find new configurations
opkg_newconf() {
    find /etc -name "*-opkg"
}
EOF_cat
. /etc/profile

 

that would be it, now run opkg backup, firmware upgrade, on next book opkg restore, if opkg restore is not availble, then paste again the code above which simply creates /etc/profile.d/opkg.sh script.

Link to post
Share on other sites
19807409

If that file is not available after flashing, then add it to sysupgrade.conf:

/etc/profile.d/opkg.sh

and it will be available.

Link to post
Share on other sites
James8078

another build created but I still have to install Luci app via ssh , I dont know why, I choose Luci app in ''make menuconfig'' during my building but I need to install anyway..

Link to post
Share on other sites
James8078
On 1/22/2021 at 11:25 AM, 19807409 said:

If that file is not available after flashing, then add it to sysupgrade.conf:

/etc/profile.d/opkg.sh

and it will be available.

[email protected]:~# opkg restore
uci: Entry not found

 

Link to post
Share on other sites
19807409
On 1/23/2021 at 5:46 AM, James8078 said:

another build created but I still have to install Luci app via ssh , I dont know why, I choose Luci app in ''make menuconfig'' during my building but I need to install anyway..

I already explained it in several posts. I do not know what and why you build and with which settings, for that help you should go to openwrt, once again, I suggest and suggested you to use snapshot images and not to compile. You probably added luci modified, but again, this would be fully offtopic here to talk/explain about how to build openwrt images, especially as it is done daily and found under snapshots as well as those online are upgradeable and your compiled is not compatible to them.

 

I posted you links to sysupgrade but your questions tell me that you did not read it which you should do. Sysupgrade documentation explains you all what I write and wrote in details and by that I feel it is a waste of time to explain what is written there if one can read it up.

Read and run this script (upgradefw-wrt3200acm.zip in the attachment) and inspect it and how it works and what it does. It will flash your router.

Before you run it, add tginstall, opkg backup script and other things which you might need to /etc/sysupgrade.conf

# if this script IS NOT available after reboot, then delete comment sign, if it is available, leave it as it is or delete
# /etc/profile.d/opkg.sh
# torguard and tgapi
/etc/torguard/
/etc/config/torguard
/etc/init.d/tgapi
/usr/bin/tgapitest
/usr/bin/tginit
/usr/bin/tgsetup
/usr/bin/tginit-uci-basic
/usr/bin/tguninstall
/usr/bin/tgfunctions
/usr/bin/tginstall
/usr/bin/tgupgrade
# root folder
/root/

save upgradefw on your router, lets say as /root/bin/upgradefw. It will create restore script in /root/bin/restore (that is why I included /root in sysupgrade.conf)

/root/bin/upgradefw

and make it executable with

chmod +x /root/bin/upgradefw

Thats it, now you can upgrade only firmware and then manually restore. In my example, I run those commands from my notebook, this is just a scratch, as example, you can add a check for when your device gets up so that waiting 240 seconds can be skipped and done automatically:

#!/bin/sh
LOG="upgradefw.log"
ROUTERIP="IPOFYOURROUTER"
ssh [email protected]${ROUTERIP} "/root/bin/upgradefw" | tee ${LOG};
echo "Wait 240 seconds until router reboots" && sleep 240 &&
ssh [email protected]${ROUTERIP} "/root/bin/restore" | tee -a ${LOG}
echo "firmware upgrade finished"

 

There are also other ways of how one can keep automated upgrade but I will get not deeper into it in this thread as it is fully offtopic here, we already slide too much away from wireguard on openwrt away. If you go and read sysupgrade documentation you will know much more about it and different options.

PS: I tested and did run the script on archer-c5v1, it should work with any openwrt, just edit the script var in the header of upgradefw. I do not have wrt3200acm and can not test it.

upgradefw-wrt3200acm.zip upgrade-and-restore.log-archer-c5v1-snapshot.zip

Link to post
Share on other sites
19807409

Oh, and yes, I almost forgot torguard api service. If you have some manually created startup scripts, then you will have to activate them as per default they will be deactivated after reflashing, if you use torguard api script, then your upgrade script which you run on your pc could look like like this:

#!/bin/sh
LOG="upgradefw.log"
ROUTERIP="IPOFYOURROUTER"
ssh [email protected]${ROUTERIP} "/root/bin/upgradefw" | tee ${LOG};
echo "Wait 240 seconds until router reboots" && sleep 240 &&
ssh [email protected]${ROUTERIP} "/root/bin/restore" | tee -a ${LOG}
echo "Run Torguard api on router to make sure that settings are valid"
ssh [email protected]${ROUTERIP} "/etc/init.d/tgapi enable;/etc/init.d/tgapi restart" | tee -a ${LOG}
echo "firmware upgrade finished"

echo "Reboot your router"
ssh [email protected]${ROUTERIP} "reboot -f" | tee -a ${LOG}

 

Link to post
Share on other sites
James8078
5 hours ago, 19807409 said:

Oh, and yes, I almost forgot torguard api service. If you have some manually created startup scripts, then you will have to activate them as per default they will be deactivated after reflashing, if you use torguard api script, then your upgrade script which you run on your pc could look like like this:

#!/bin/sh
LOG="upgradefw.log"
ROUTERIP="IPOFYOURROUTER"
ssh [email protected]${ROUTERIP} "/root/bin/upgradefw" | tee ${LOG};
echo "Wait 240 seconds until router reboots" && sleep 240 &&
ssh [email protected]${ROUTERIP} "/root/bin/restore" | tee -a ${LOG}
echo "Run Torguard api on router to make sure that settings are valid"
ssh [email protected]${ROUTERIP} "/etc/init.d/tgapi enable;/etc/init.d/tgapi restart" | tee -a ${LOG}
echo "firmware upgrade finished"

echo "Reboot your router"
ssh [email protected]${ROUTERIP} "reboot -f" | tee -a ${LOG}

 

thanks a lot again.
your attachments have  problem, it seems not available

Link to post
Share on other sites
19807409
2 hours ago, James8078 said:

thanks a lot again.
your attachments have  problem, it seems not available

you are welcome.

no, they do not, I checked it after posting:

grafik.png

you have to be logged in for ability to download attachments on this forum. I pasted it first as codebox, but forum does not allow it (which is stupid, as it is a codebox), however, attachments are available and downloadable.

  • Like 1
Link to post
Share on other sites
James8078
2 hours ago, 19807409 said:

you are welcome.

no, they do not, I checked it after posting:

grafik.png

you have to be logged in for ability to download attachments on this forum. I pasted it first as codebox, but forum does not allow it (which is stupid, as it is a codebox), however, attachments are available and downloadable.

IM crazy or what.... I can't download them..... it seems a pics lol

  • Haha 1
Link to post
Share on other sites
19807409
2 minutes ago, James8078 said:

IM crazy or what.... I can't download them..... it seems a pics lol

This post made my day today 💥💥💥  🤣

Yes, thats a screenshot and they are clickable in the original post. You have to be logged in for ability to download it, you should see it like in a screenshot which you tried to click in hope to be download links :)

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...

×
×
  • Create New...