Search results

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

  1. Zastoff

    Release ASUS RT-AX88U Version 3.0.0.4.386.49674 (2022/07/14)

    ASUS RT-AX88U Firmware version 3.0.0.4.386.49674 1. Fixed CVE-2022-26376 2. Improved system stability 3. Supported Safe Browsing in the router app to filter explicit content from search results. You can set it in the router app --> Devices or Family. Download link...
  2. Zastoff

    Why DNS over TLS is so important, and if you are not using it you should be

    I have read the same(my knowledge with unbound is limited), But dosen't unbound manager include a ad-block and some kind of dns-firewall? Maybe that's why he likes and recommends it.
  3. Zastoff

    Why DNS over TLS is so important, and if you are not using it you should be

    Indeed the authoritative/root servers used by unbound is sort of public also i guess but the advantage in that case is that unbound only use them rarely from what i understand.. (Hope someone correct me if i am wrong on how unbound works/behaves as my knowledge is limited) None of the dns...
  4. Zastoff

    Why DNS over TLS is so important, and if you are not using it you should be

    Still awaiting the actual facts on a comparison for the available encrypted DNS protocols? What is known is that DoH and DoT provides more information then needed to the server about the device used then regular dns/dnscrypt. Session tickets/tracking also needed for DoH/DoT, Reuses it over a...
  5. Zastoff

    Upgrade advice from RT-AC87U

    I had a 87u and upgraded to a ax88u and wifi is almost the same a bit better on the ax88 is what i experience. AX86u should preform(think the 4th antenna is built in on ax86u)equal to the ax88u i believe. Was looking at both models before i upgraded..But the ax88u is like 87u in design and fit...
  6. Zastoff

    Why DNS over TLS is so important, and if you are not using it you should be

    The recommendation i did was to use dnscrypt installer in AMTM over the entware guide that was linked.. Also wrote that i do recommend DoT. The Question on relays logging: The relay do not have the key for the encrypted packets, it only blindly forwards and my ip is removed for the DNS server...
  7. Zastoff

    Why DNS over TLS is so important, and if you are not using it you should be

    Dnscrypt-proxy 2 can not fall back to unencrypted dns and for any dns protocol it comes down to what server providers to trust.. Think it is way easier to block most DoT servers since most use port 853 some of them can be used on port 443.. Dnscrypt-proxy 2 in asuswrt-merlin use the regular dns...
  8. Zastoff

    Why DNS over TLS is so important, and if you are not using it you should be

    Would recommend DNSCrypt installer in AMTM, It has some really nice install/configuration options and it has built in checks and works nice with dns-filter. https://github.com/thuantran/dnscrypt-asuswrt-installer#current-features
  9. Zastoff

    [ 386.7 alpha Build(s) ] Testing available build(s)

    Seems like the the entropy pool is larger with this firmware/updated Haveged, Checked it for a couple of days now ;) izzt@RT-AX88U:/tmp/home/root# cat /proc/sys/kernel/random/entropy_avail 3149 izzt@RT-AX88U:/tmp/home/root# cat /proc/sys/kernel/random/entropy_avail 3902 Was more between...
  10. Zastoff

    Is there a way to set DNS-server priority in Dnsmasq when using DoT?!

    DNSCrypt-proxy have a bit more options, It sort servers by fastest and have 4 options on how the servers configured will be used Link to wiki And DNSCrypt support DoH and DNSCrypt protocol not DoT, But NextDNS have DoH servers that can be used i guess, But if you want to use them with a nextdns...
  11. Zastoff

    Is there a way to set DNS-server priority in Dnsmasq when using DoT?!

    Think if you set round_robin=0 it will use the first configured server until it becomes unresponsive and then move to the next DoT server in the list. Think you have a stubby.yaml with the settings for stubby(DoT) Have not used DoT for a long time so i am not 100% sure on this.. And undo the...
  12. Zastoff

    [ 386.7 alpha Build(s) ] Testing available build(s)

    Smooth update on RT-AX88u from 386.5_2 to 386.7_alpha1-g2ba96ac078 All good :) Thanks RMerlin ;)
  13. Zastoff

    Help for Script to Block Specific Streaming Services

    Here is a thread on how you can use a service like nextdns or opendns via dns filter for specific clients. https://www.snbforums.com/threads/block-access-to-tiktok-in-the-morning-and-evening.76965/#post-739369 Can skip the part with cron jobs if you do not want it on a schedule. Hope this can help
  14. Zastoff

    Block Youtube on client basis and schedule

    Here is a tread on how i do it.. https://www.snbforums.com/threads/block-access-to-tiktok-in-the-morning-and-evening.76965/#post-739369 Hope this can be some helpful information on a possible way to do it ;)
  15. Zastoff

    How to block 127.0.0.1 from spesific outgoing DNS query in Iptables?

    Tried with LAN/DNS-Filter set Enable DNS-based Filtering ON and Global Filter Mode= router?
  16. Zastoff

    Skynet How to further analyse skynet blocks

    Additional info on commands and stats for Skynet: https://www.snbforums.com/threads/skynet-router-firewall-security-enhancements.16798/#post-115872
  17. Zastoff

    Strange entries in my log

    In my tests I did on 386.5alpha builds the log messages come from parental control filters, That is part of Trend Micro's stuff in the router. Think something changed with the log level on Parental control part..
  18. Zastoff

    Release Asuswrt-Merlin 386.5 is now available

    Yes as a test version before 386.5_2 was released. https://www.snbforums.com/threads/asuswrt-merlin-386-5-is-now-available.77691/page-21#post-752808
  19. Zastoff

    how to update firmware with USB with adding installed

    I have no experience with aimesh nodes since i don't use it. Reboot is always good before flashing new firmware to free up more memory.
  20. Zastoff

    how to update firmware with USB with adding installed

    Yes but the drive will be mounted automatically again after the firmware upgrade since the router is restarted in the update process.
Top