Search results

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

  1. truglodite

    Openvpn: Server2 not starting up on reboot...

    I am not sure if this has anything to do with my change from tls-auth to tls-crypt, or configuring openvpn and the webgui with custom certs... but my router refuses to automatically start openvpn server instance 2 after reboot. I have to log in to the webgui, and "apply" advanced settings of...
  2. truglodite

    User-provided SSL certificate for webui

    Thanks RMerlin! I went over the gencert.sh and openssl.cnf file on my router, and derived a config that does the same thing on my Linux box. I learned something new, got to use different parameters (like 4096bit), and perhaps have keys with decent entropy (I read that some embedded uC's, ie...
  3. truglodite

    User-provided SSL certificate for webui

    My chrome browser (up to date) gets a green padlock when I have the os trust the built in router generated cert (/jffs/ssl/cert.pem... rename to router.crt for Windows to use it). The generated cert has the router local ip as a CN, and the San includes the ip, router.asus.com, etc. What I am...
  4. truglodite

    Anyone using TLS-Crypt in new 380.65 beta?

    I am likely too late for you, but being a fellow newb I feel the pain and hope this post may save future newb suffering. Assuming you built your keys with easyrsa according to the usual howto docs... you can (and should) edit the var file after you enter 'init-config'... before calling 'var' at...
  5. truglodite

    One PKI for multiple servers (openvpn + webui + pixelserv-tls)

    Ooh, googling self-signed web certs using openssl, and finding references to SANs... looks like I've got a whole 'nother book to read upon. If anyone happens to have links to some newb friendly openssh web cert primers, I'd be greatful if you shared them. I'm not sure if it's even worth the...
  6. truglodite

    One PKI for multiple servers (openvpn + webui + pixelserv-tls)

    I have been getting my cranial signals crossed learning the ins/outs of SSL, as it relates to openvpn vs merlin webui. I need a few questions answered to help straighten my course. ...this is just for my home, n66u 380.67, with only a handful of family only devices connecting. Right now my...
  7. truglodite

    Dlna over openvpn

    Cool! After brainstorming I wondered just how long it would take to make a guide that eliminates most of the questions that could come up... could be an endless guide depending who it is written for lol. I didn't feel up to the task of picking an audience and making assumptions on knowledge...
  8. truglodite

    Dlna over openvpn

    It is good that es added a pay version, and I understand most of the free bloat version is that way to pay bills. I decided to try Solid Explorer first, simply because they never went down the bloatware road. For $2 I am now able to stream my music albums and assorted videos with minimal fuss...
  9. truglodite

    AB-Solution - The Ad Blocking Solution

    I was just off by a .www, and feel dumb for not checking that. Thanks again... all works as expected. I rarely visit ten/sevenforums myself, but they have had some good bits of Windows info I've used in the past. They don't seem ad heavy to me either, but maybe they have been up to some...
  10. truglodite

    Dlna over openvpn

    I enjoyed es explorer+mx video+vlc player for a while on my previous phone, until I read some posts on xda from a few well respected devs stating that es was phoning home to China for unknown reasons. That phone was also rooted, and I didn't feel confident in configuring the firewall to stop the...
  11. truglodite

    AB-Solution - The Ad Blocking Solution

    By blank do you mean absolution is blocking them? Are those in the blocking file? I didnt look for them since like I said absolution said 'exact match found in block list when I whitelisted. I tried clearing dns cache... no change... tenforums still works, and sevenforums does not. Fyi, I did...
  12. truglodite

    AB-Solution - The Ad Blocking Solution

    I have discovered an interesting problem... tenforums.com and sevenforums.com showed as a pixel. I looked at the absolution logs while trying to access those sites, and nothing showed up. An iPad pops up with an 'insecure certs warning', in which the details show a pixelserv cert. To stab in the...
  13. truglodite

    Dlna over openvpn

    I understand TAP+ANDROID w/o root isn't possible. (I edited my earlier post to reflect that) Looks like the slow samba isn't openvpn's fault... connected directly on the LAN (phone on wifi, pc wired) samba still didn't get better than ~800kbps. Googling more, it appears that this is a known...
  14. truglodite

    Dlna over openvpn

    Router is 25 up and down... loosely capped. Phone's 4g varies with location but download usually exceeds router upload. Router: phone: Udp vpn: Tcp vpn: ...samba 550 kbps, lol.
  15. truglodite

    Dlna over openvpn

    Win10 file sharing (samba) worked fine for me after adding a rule to windows firewall... advanced firewall settings, inbound, File & Printer Sharing SMB-In, scope, add your tunnel's subnet to 'these remote IPs' (default ovpn tunnel uses 10.8.0.0/24). You may want to run 2 server instances on...
  16. truglodite

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Oh heck yeah... mindblown! I didn't see that in the middle of my frustration while manual quoting, lol. Thanks!
  17. truglodite

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    It's annoying this forum doesn't have a 'quote button' I could use on the above post. This quote took a lot of work... I was probably not accurate in describing the problem with syslog + serverstats. To be clear, the bug I noticed: The servstats SSL fields, slh, slm, sle, and slu, do not...
  18. truglodite

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    @thelonelycoder ...well deserved beverage money sent via paypal. :) @jrmwvu04 I got my kids over the fact that they have to type a pin... actually they got all excited about the new "secret codes" to lock their devices, LOL! After doing that, our cls is less than 1/10 of slh. So I am also...
  19. truglodite

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    '...devices on my network that allow' I didn't know how challenging it would be to add certs to all my usual clients. Older hardware can handle user certs in weird ways. For example you have to have a pin screen lock for user certs to work on my a couple tab4's my kids use (kit kat). The...
  20. truglodite

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    I appreciate the advice. I did try playing with the -o option. Values ranging from 1 to 15 didn't reduce the cls%. Mstombs, that sheds a little more light... I know near zero about how https works. I skinned over the code and was also attracted to socket_handler.c... seems that's where the data...
Top