Search results

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

  1. E

    Wireguard MTU?

    Other third party firmwares have options to set the listen port and MTU. I have seen problems with MTU (slow, non loading websites with UDP etc.) so having the ability to set MTU is something which is very useful. Having the option to set a listen port can be useful I have seen providers which...
  2. E

    Wireguard MTU?

    It is perfectly legitimate to specify a listen port on the client config, you do not have to and in that case a random port will be chosen.
  3. E

    RT-AC68U OpenVPN Server Slow

    I also get about 30 Mb/s on my Ac68U running OpenVPN and about 100 Mb/s running WireGuard. Unfortunately WireGuard is not supported by Asus-WRT on this router, so for that I had to use another third party firmware
  4. E

    Solved OpenVPN Works via LTE and Wifi but Wireguard only works via LTE on 388.1?

    Port number? Like you said hotspot are often actively blocking VPN or only allowing well known ports. If the latter you can try using port 443 for WireGuard/OpenVPN.
  5. E

    What are people doing with non-supported Routers like the RT-AC87U?

    Depending on your needs maybe run another third party firmware?
  6. E

    RT-N66U 2022?

    I have my AC68U running DDWRT because I needed faster VPN then the 30 Mb/s OpenVPN gave me and now with WireGuard I get around 100 MB/s, I am running the latest build 51154 without a problem but an AC68U is not the same as your RT-N66U, yours is MIPS older and slower. On the FT forum is a...
  7. E

    RT-N66U 2022?

    DDWRT has OpenVPN and a kill switch in the GUI but honestly if you already have FT running I would ask on their forum. They are usually very helpful Advantage of DDWRT is they also have WireGuard on most routers which is faster and easy to setup
  8. E

    Packet State for 2022

    Well said. Your work is much admired and appreciated. Best wishes for all.
  9. E

    suppress_prefixlength in ip rule is not working

    But you can maybe do it the old fashioned way and just copy all local routes to the other tables :)
  10. E

    suppress_prefixlength in ip rule is not working

    In theory it is possible as other third party firmwares are running Kernel 4.4 for Broadcom Northstar e.g. Asus AC68U but in practices very difficult without having access to the closed source Broadcom code
  11. E

    Update asuswrt worth it ?

    Unfortunately no AsusWRT for Netgear routers. As this router is behind your Huawei router security should not be a big issue but I would update nonetheless. If you do not want stock firmware there are third party alternatives , I use DDWRT on my R7000 and running the latest build 50963 without...
  12. E

    RT-AC56U - alternative firmware?

    True, you have to read and follow the forum guidelines, and do some basic research, you cannot blindly barge in. The newer Broadcom routers are normally OK and are always up to date with the latest security patches e.g. Kernel/OpenSSL/WireGuard/OpenVPN etc.
  13. E

    RT-AC56U - alternative firmware?

    One of My AC68U's runs DDWRT because I needed faster VPN then the 35 Mb/s OpenVPN gave me and DDWRT has native WireGuard which gets me 105 Mb/s and it is running fine for almost two years. DDWRT runs on Kernel 4.4 which is an SLTS Kernel version so still supported security wise, others are...
  14. E

    RT-AC56U - alternative firmware?

    Also supported by DDWRT : https://wiki.dd-wrt.com/wiki/index.php/Supported_Devices#Asus but different feature set, different kernel
  15. E

    How-to enable DoH (DNS over HTTPS)?

    As you are your own network administrator you want clients on your network to use plain DNS:53 and not DoH so that you can block/redirect traffic on your home network The router however can/should use a secure DNS like DoT or DoH (or DNSCrypt and there are newer implementations coming e.g. DoQ...
  16. E

    Add programs/services to the firmware

    No I would just add your programs to the build when building the firmware. Alternatively just copy them to /jffs and run them from there
  17. E

    Add programs/services to the firmware

    You have to start with compiling your own builds. If you have setup and can do that you also have the cross compiling tools to cross compile your own C code
  18. E

    update dropbear or disable ssh-dss support?

    The RFC draft requires dss but recommends rsa, it does mean as a minimum it should have dss but rsa is better, it does not mean dss has to be available if you have rsa. As it is not secure as the OP already explained why keep it available?
  19. E

    update dropbear or disable ssh-dss support?

    When you compile the build it should be fairly easy to change the default settings in dropbear/default_options.h /* Hostkey/public key algorithms - at least one required, these are used * for hostkey as well as for verifying signatures with pubkey auth. * Removing either of these won't save...
  20. E

    VPN Killswitch

    If you are really concerned about privacy I also would opt for OpenVPN as WireGuard uses static routing which makes the chance of logging somewhat greater although providers have taken various measusre to mitigate this. Furthermore OpenVPN can support obfuscation (as add-on and only some...
Top