Search results

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

  1. ASAT

    Overclocking RT-AC56U

    60mm hole saw and a 60mm hole. Drill press, clamp, and piece of 2x4 wood underneath. Speed 950 RPM or greater.
  2. ASAT

    NTP Daemon for ASUSWRT/Merlin

    Could you please check what is the USB-to-serial driver that it is loading? Type 'dmesg' and look for /dev/ttyUSB0.
  3. ASAT

    Disable Internet for Guest Network

    The following post will show you how. However, I have not tried it yet. http://www.snbforums.com/threads/ac68u-guest-network-problem.26176/#post-217539
  4. ASAT

    Disable Internet for Guest Network

    There is now a Github fork for this. https://github.com/RMerl/asuswrt-merlin/compare/master...PhillipLauder:master
  5. ASAT

    Disable Internet for Guest Network

    I could do it. However, now I see this commented code and warning. asuswrt-merlin/release/src/router/rc/sysdeps/init-broadcom.c, line 1529: /* Requires bridge netfilter, but slows down and breaks EMF/IGS IGMP IPTV Snooping if (nvram_get_int("sw_mode") == SW_MODE_ROUTER &&...
  6. ASAT

    Disable Internet for Guest Network

    My RT-AC68U and RT-AC56U are currently running this modified Asuswrt-Merlin 380.57 firmware now. If it stops working I'll post here again. HOwever, I think it's good.
  7. ASAT

    Block access to wan subnet

    Just to be sure, you can also check the packet & byte counts to see if the rule is being matched. ebtables -t broute -L --Lmac2 --Lc --Ln And you can also make a fake rule that doesn't do anything except log the rule matches. However this sometimes does not log every hit. ebtables -t broute -I...
  8. ASAT

    Disable Internet for Guest Network

    The following method apparently worked for me. However, I had to modify the Asuswrt-Merlin firmware. /jffs/scripts/firewall-start #!/bin/sh # selectively disable Internet for each Guest Network interface /usr/sbin/iptables -I FORWARD -m physdev --physdev-in wl0.1 -o eth0 -j DROP...
  9. ASAT

    Disable Internet for Guest Network

    Parental Controls should be sufficient. Or, just use iptables rules to accomplish this. Block by IP address /usr/sbin/iptables -I FORWARD -s 192.168.1.137 -j DROP OR, block by MAC address /usr/sbin/iptables -I FORWARD -m mac --mac-source 00:0F:EA:c2:5f:37 -j DROP However, I like the idea of...
  10. ASAT

    Disable Internet for Guest Network

    Apparently, with Parental Control you must specify the MAC address of the computer to block. Whereas, the OP requires an entire interface (a Wi-Fi Guest Network) block access to the Internet, while still able to see computers on the LAN.
  11. ASAT

    Disable Internet for Guest Network

    You're right, my example script does not work because the router sees the guest wi-fi client traffic as coming from the bridge interface "br0", not the actual guest wi-fi interface. I had to turn on logging to see what was going on. Log iptables & ebtables hits to /tmp/syslog.log...
  12. ASAT

    Disable Internet for Guest Network

    This piece of script will show you how. /jffs/scripts/firewall-start #!/bin/sh /usr/sbin/iptables -I FORWARD -i wl0.1 -j DROP # Disable Internet for 2.4GHz Wi-Fi Guest SSID#1 /usr/sbin/iptables -I FORWARD -i wl0.2 -j DROP # Disable Internet for 2.4GHz Wi-Fi Guest SSID#2 /usr/sbin/iptables -I...
  13. ASAT

    Restricting access to specific ports - Whitelist ?

    This will tell you what's going on. Check the pkts & bytes counts to see that your rules are being matched. Chances are that your rules are not matching anything. /usr/sbin/iptables -nvL --line-numbers
  14. ASAT

    Firewall script is still not working

    I don't think iptables is capable of killing a TCP connection on the router. A firewall lets you make rules to drop packets OR send back an error packet in response to a matched packet. However, to effectively "kill" a connection, you'd need to have control of the client computer who started...
  15. ASAT

    Firewall script is still not working

    Is the time that is specified by the iptables rules in UTC or local time? And, how you drop packets for an established connection? TCP is "connection-oriented". UDP is "connectionless". I think you may need additional rules to drop packets for those established TCP connections during...
  16. ASAT

    NTP Daemon for ASUSWRT/Merlin

    @JGrana Are you sure GPSD is what you want to do? Your refclock IP address (127.127.28.0) suggests that you're trying to use the SHM driver with GPSD. Here's the complete list of refclock drivers here: http://doc.ntp.org/4.2.8/refclock.html#list I use the Refclock Driver Type#20, Generic...
  17. ASAT

    NTP Daemon for ASUSWRT/Merlin

    I think you need NTPD recompiled with the Driver Type#28: Shared Memory Driver. Quote from the NTPD documentation: "GPSD knows how to talk to many GPS devices. It can work with NTPD through the SHM driver." Shared Memory Driver http://doc.ntp.org/4.2.8/drivers/driver28.html I think you're...
  18. ASAT

    Restricting access to specific ports - Whitelist ?

    It also works if you put the rules in "firewall-start" script. However, if you switch to Repeater mode, then I can't remember which one doesn't run.
  19. ASAT

    Restricting access to specific ports - Whitelist ?

    Try this way instead. The rules will be inserted at the top in reverse order. iptables -I FORWARD -p tcp --dport 5060 -j DROP iptables -I FORWARD -p tcp --dport 5068 -j DROP iptables -I FORWARD -p tcp -s 61.243.142.120 --dport 5060 -j ACCEPT iptables -I FORWARD -p tcp -s 88.215.134.231 --dport...
  20. ASAT

    Set the router clock with a GPS receiver for under $70

    DCF77 is a German longwave time signal and standard-frequency radio station https://en.wikipedia.org/wiki/DCF77 WWVB is a NIST time signal radio station near Fort Collins, Colorado https://en.wikipedia.org/wiki/WWVB NIST Radio Station WWVB http://www.nist.gov/pml/div688/grp40/wwvb.cfm...
Top