Search results

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

  1. H

    a log-in alert script?

    Most attacks try to guess the password for the user "admin". You can change the username to something else by going to the Administration page, then clicking on the System tab. Change the Router Login Name in the first section. Forcing attackers to guess both the username AND password makes...
  2. H

    DNSFilter bypassed with Android (Pie) 9's Private DNS

    The difference is that the new protocols allow an app to define a DNS server that doesn't even use the global DNS and can define any port that it wants to. It could point to a DNS server that defines snbforums.com (or perhaps your banking site) to any IP address that it wants to. Is that...
  3. H

    DNSFilter bypassed with Android (Pie) 9's Private DNS

    From what I've read, these new DNS protocols allow an application to define and use its own DNS server to resolve host names to any IP that the application wants it to. This is NOT a good thing from a malware perspective. :( I'm not sure how deep into the packets that the Merlin firmware can...
  4. H

    Unanticipated OpenVPN boo-boo

    If you already have changed the "admin" username to something non-obvious, then you're far safer than when leaving "admin" as the username for the administration account. The chances of someone guessing both the username and password is orders of magnitude lower. Most scripts are just doing...
  5. H

    How to rescue? Can't reach the vpn server after changing comp - lzo adaptive to none

    Now that you have it working, you should probably leave well enough alone. :) As stated above, video streams are already highly compressed, so adding another layer of compression won't make it faster, simply because there is nothing to compress. It could even slow the stream down slightly...
  6. H

    [Release] Asuswrt-Merlin 384.7 is now available

    Just in case you didn't catch it, Merlin hinted at a solution in his earlier reply: "There's nothing weak about a 16 character username combined with a 16 characters password. It would take years to get through the number of variations possible with a combination of 32 different characters."...
  7. H

    wpa2 Amazon device unable to connect

    Try testing with a simple password on the wifi. Some devices don't like certain characters, such as periods, commas, or other special characters. For example, I have a Vizio TV that will not connect to the net if there's a period in the password. :( If I remove the period, the TV's connects...
  8. H

    Two-Way IPS: Exploit Remote Command Execution, Netcore Router Backdoor Access

    Have you been using the ASUS App on your phone to access your router? It has been reported that this app automagically enables WAN access to make it "easier" for you to use it from anywhere. :( I have never used the app and my RT-AC68U running 384.4_2 does not have that setting enabled by...
  9. H

    Firefox https connection

    Open About:config in Firefox. Set security.enterprise_roots.enabled to true and Firefox will now honor the system certificates. Note that this also bypasses Firefox's protection against malware that inserts fake certificates in the system certificate store, so it's not a risk-free choice...
  10. H

    [Release 384/NG] Asuswrt-Merlin 384.3 is now available

    It seemed to work just fine. I just followed the directions in the readme file. The only thing I noticed different is that the TrendMicro stuff under AiProtection was turned off, perhaps because it changed quite a bit and added Two-way IPS into the mix.
  11. H

    Two-Way IPS: Exploit Remote Command Execution, Netcore Router Backdoor Access

    Bots, script kiddies, 3-letter agencies, and other miscreants scan all possible IPV4 addresses continuously, looking, as Adamm said above, for open and/or unpatched devices to exploit. There are around 3.7 billion public IPV4 addresses total, but a well written script can scan them all in a...
  12. H

    [Release 384/NG] Asuswrt-Merlin 384.3 is now available

    I used the NVRAM Save/Restore Utility that can be found here: https://www.snbforums.com/threads/user-nvram-save-restore-utility-r26-2.19521/ I don't use TOR, but it did a fine job of migrating all of my settings, including OpenVPN Server with all certificates and keys. :) Edit: RT-AC68U
  13. H

    Signature update failed AC68U

    Hmm. Mine still is at 1.180. When I click Check, the icon spins for a few seconds and it says all is well. The syslog only shows: " rc_service: httpd 11187:notify_rc start_sig_check"
  14. H

    Signature update failed AC68U

    I'm running the same version of Merlin on an AC68U, but it shows the current version as 1.180 and "Signature is up to date". Are the versions different for different routers?
  15. H

    How safe it is to open admin access from WAN ?

    No. Setup the VPN server on your router. Then you can connect to the VPN, which can also make your phone part of the LAN network. Once connected, you can then open the router GUI using the same private IP address that you would use while at home on your LAN.
  16. H

    Stable merlin FW version for AC68U

    380.69_2 loaded on an RT-AC68U here (originally the T-Mobile version) with no problems. Mine has never spontaneously rebooted on its own. It's had several versions of Merlin code on it over the last year, without issue. These tend to run pretty warm, is yours running too hot perhaps? Here are...
  17. H

    Unable to get to Asus FAQ links

    Yes. RT-AC68U, 380.69. All FAQ requests, even an empty one, just get me to an error page. Not a big deal really, as in the past I have found the ASUS links to be mostly worthless because they typically bring up a huge list of "solutions" to problems I did NOT inquire about. A search in this...
  18. H

    Unable to get to Asus FAQ links

    Same here. It seems that something is broken on the ASUS end of things. :(
  19. H

    WatchGuard Updates Firebox T UTM Series For Small Offices

    So pissed to see this while I am setting up a T30 that was just purchased last week. Ugh! :(
  20. H

    NTP (an hour back)

    For those in the US, the default settings need to be changed. Daylight Savings Time rule for the US is: begins at 2:00 a.m. on the second Sunday of March and ends at 2:00 a.m. on the first Sunday of November From...
Top