Menu
What's new
By:
Filters Better Search

Search results

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

  1. K

    Stubby-Installer-Asuswrt-Merlin

    To put it simply. If your upstream public DNS server (e.g. CF or Google) is further away from your PC in terms of network latency (read 5ms vs 50ms vs 150ms for example), IP addresses of CDN servers resolved by the upstream DNS server will not be optimal in terms of network latency. If people...
  2. K

    Stubby-Installer-Asuswrt-Merlin

    To echo Merlin's comment, I would add further the following (or at least my position..). 1. Currently the most convincing argument in favour of deploying DoT/DoH on home routers is to prevent eavesdropping/tampering DNS queries by your ISP. I still remember the guy (@lancethepants) who...
  3. K

    Stubby-Installer-Asuswrt-Merlin

    Oh, I see. Let's be patient. Like you I'm also happy to change position about DoT/DoH. So I think we're reasonable people after all.
  4. K

    Stubby-Installer-Asuswrt-Merlin

    Sorry to step in. I'm fully aware that you aren't addressing the question to me. You're asking a tricky question. Don't you..? I think if you're happy with it you can continue to use it. Perhaps we could wait for people working on DoT/DoH to do some performance measurement if there is time...
  5. K

    Stubby-Installer-Asuswrt-Merlin

    Or you can use Tor or other stealth tech... I respect your choice but we have quite a different view and priority on technologies. I don't appreciate a simple statement to make a siding. Some more digging..numbers etc.. in performance (e.g. as suggested by Merlin) perhaps can steer the...
  6. K

    Yet another malware block script using ipset (v4 and v6)

    I believe so and your experiment had proven that. So perhaps you can strike a balance in between.. I think the quality of these lists varies a lot. "modem's IP" is due to perhaps private addresses are included in some lists.. Worth a try. Don't be too desperate as your default firewall rules...
  7. K

    Stubby-Installer-Asuswrt-Merlin

    A "science project" to me is akin to "research project" that an individual or a team discovering something new and perhaps even unique. So it carries a sense of scarcity, innovation, uniqueness, edge tech, etc. That doesn't seem to be shared by everyone but let's not digress into it further. In...
  8. K

    Stubby-Installer-Asuswrt-Merlin

    The responses were a bit overwhelming. Two people being picky on my use of "science project". I thought that is a positive term on this forum. Perhaps not then I'll take it back and apologise. Look.. if people think I'm trying to demote Xentrak's effort on doing projects, I think you guys miss...
  9. K

    Stubby-Installer-Asuswrt-Merlin

    As a science project, I think an installation script is very good exercise and help people in need (I haven't looked at the scripting code). But a script like this should not be an encouragement... for people to try DoT nor DoH IMHO. Both technologies at the moment slow down your DNS queries...
  10. K

    Yet another malware block script using ipset (v4 and v6)

    I had some time looking into wget. I suggest you reduce the number of lists in your run (perhaps take it to the extreme minimal). See if you get a different error. @who me? let me know if this helps..
  11. K

    Web History Reporting and Management (Traffic Analyzer/Aiprotection Monitor)

    This is an interesting discovery. Didn't know about it until I came across this thread. I would think it deserves more attention than it currently is. Something goes wrong with the readership of this forum..
  12. K

    NTP Daemon for ASUSWRT/Merlin

    I think you're spot on. You can undo the 'sed' by manually editing the file. If that's too much, simply remove directory and its content, and re-apply by following instructions from the Wiki.
  13. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    v2.2.y has rock solid performance with LAN clients, and much improved performance over WAN/VPN. My latest servstats. HTTPS ads have taken over the world!
  14. K

    Entware Entware: which USB stick performs well?

    For those who bought this stick on my recommendation, and only realise later that doesn't work quite as compatible on Merlin FWs, I'm sorry.. My RT-AC56U running 380.66 has no such compatibility issue. So perhaps safe to say that it only happens after that and in more recent FWs. BTW, your...
  15. K

    Entware Entware: which USB stick performs well?

    Then just get a faster stick. It helps..sometimes noticeably on demanding apps such as syslog-ng. Note that people reported Merlin FWs compatibility with USB 3 is a bit "hit and miss." You might not be able to take full advantage of a USB3 stick. Regardless it should give you a better 4K...
  16. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    webui and OpenVPN...I don't want to get into any of these.. I just think you setup the discussion of TLS 1.3 (OpenSSL 1.1.1) in the wrong backdrop. Regardless TLS 1.3 should bring improvement to webui if you understand how it works..
  17. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    I appreciate Merlin share his experiment in detail.. Just want to re-assure pixelserv-tls users that going with TLS 1.3 (OpenSSL 1.1.1) brings non-trivial improvement in a couple of areas. Don't doubt for a moment about the worthiness of the move..
  18. K

    Diversion Diversion - the Router Ad-Blocker

    This has been mentioned a few times in my thread with the following solution from me. That thread also has an explanation by me on why sometimes websites didn't load in general regardless pixelserv-tls is ON or OFF. To your Amazon app issue, try to whitelist fls-na.amazon.com...
  19. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    @dave14305 I'm flattered to learn that you went through the whole thread! Glad to hear you also enjoy it. Recently I did something similar on another forum..lol To clarify one thing. Entware not incorporating the "OpenSSL flag" has little impact on me personally. Perhaps a ripple but even that...
  20. K

    Yet another malware block script using ipset (v4 and v6)

    I haven't run into the same error myself and I don't have a readily working solution for you. Google seems to tell it's not an uncommon error. I believe if you look into wget's source code (if that's comfortable with you), you should have a good chance to understand what causes the error.
Top