ASUS RT-AC68U Firmware version 3.0.0.4.378.3873

[plun]

One change with this firmware, tons with login attemps can be seen in the system log.

Also testing the new AIprotection > Network protection (TrendMicro)

Never seen this before in the system log???

Jan 17 22:42:31 dropbear[4785]: login attempt for nonexistent user from ::ffff:88.150.196.163:48436
Jan 17 22:42:32 dropbear[4784]: login attempt for nonexistent user from ::ffff:219.232.239.40:40287
Jan 17 22:42:32 dropbear[4785]: exit before auth: error reading: Connection reset by peer
Jan 17 22:42:32 dropbear[4786]: Child connection from ::ffff:88.150.196.163:49037
Jan 17 22:42:33 dropbear[4784]: exit before auth: Disconnect received
Jan 17 22:42:33 dropbear[4787]: Child connection from ::ffff:219.232.239.40:41035
Jan 17 22:42:33 dropbear[4786]: login attempt for nonexistent user from ::ffff:88.150.196.163:49037
Jan 17 22:42:34 dropbear[4786]: exit before auth: Disconnect received
Jan 17 22:42:34 dropbear[4788]: Child connection from ::ffff:88.150.196.163:49686
Jan 17 22:42:35 dropbear[4788]: login attempt for nonexistent user from ::ffff:88.150.196.163:49686
Jan 17 22:42:35 dropbear[4787]: login attempt for nonexistent user from ::ffff:219.232.239.40:41035
Jan 17 22:42:36 dropbear[4788]: exit before auth: Disconnect received

 

[IAAI]

One change with this firmware, tons with login attemps can be seen in the system log.

Also testing the new AIprotection > Network protection (TrendMicro)

Never seen this before in the system log???

disable SSH + Disable Asus DDNS

Me learning

http://forums.smallnetbuilder.com/showthread.php?t=20675

http://forums.smallnetbuilder.com/showthread.php?t=17626

 

[plun]

disable SSH + Disable Asus DDNS

Me learning

http://forums.smallnetbuilder.com/showthread.php?t=20675

http://forums.smallnetbuilder.com/showthread.php?t=17626

OK, SSH was enabled and for sure a left-over from Merlin firmware.

I couldn´t disable SSH from the administration page so I cleared nvram with Putty and mtd-erase2 nvram.

Started from scratch and it seems this was a SSH bombardment mostly from chinese IP-adresses.

Going to enable ddns later and check system log again....

EDIT AiProtection enabled again.

 

[IAAI]

OK, SSH was enabled and for sure a left-over from Merlin firmware.

I couldn´t disable SSH from the administration page so I cleared nvram with Putty and mtd-erase2 nvram.

Started from scratch and it seems this was a SSH bombardment mostly from chinese IP-adresses.

Going to enable ddns later and check system log again....

EDIT AiProtection enabled again.

In my case most ips were from China . 3 weeks ago i got a login attempt from California [emoji38] . Expect to see these logs again and again with ddns enabled

 

[plun]

In my case most ips were from China . 3 weeks ago i got a login attempt from California [emoji38] . Expect to see these logs again and again with ddns enabled

OK, but I have not seen this "bombardment" before, maybe these events are suppressed with Merlin or John's firmware?? Or something else is changed??

Also got the time settings error within the admin page but it was just to change to Greenwich time and then back to my timezone as other users already found out.

 

[RMerlin]

OK, SSH was enabled and for sure a left-over from Merlin firmware.

I couldn´t disable SSH from the administration page so I cleared nvram with Putty and mtd-erase2 nvram.

Started from scratch and it seems this was a SSH bombardment mostly from chinese IP-adresses.

Going to enable ddns later and check system log again....

EDIT AiProtection enabled again.

Asus recently added SSH support in the stock firmware. Unfortunately, two problems:

- It's exposed to WAN by default, with no way to limit it to LAN
- The System page is currently borked, you cannot change any setting on that page due to a Javascript error caused by a bug in their new DST handling code

 

[RMerlin]

OK, but I have not seen this "bombardment" before, maybe these events are suppressed with Merlin or John's firmware?? Or something else is changed??

My SSH implementation does not expose SSH to WAN, unless you specifically enable that option.

 

[plun]

Ok, great answers!

I also enabled ddns and no problem with that within the system log.

It must be a ugly SSH solution from ASUS...... never seen such bombardment!

 

[fraatti]

RT-AC68U (router) & RT-N66 (repeater), Mobile broadband user 4G/LTE

Is huawei e3276 allready working with this firmware or anyother merlin firmware? I am still using 374.XX...

 

[plun]

Is huawei e3276 allready working with this firmware or anyother merlin firmware? I am still using 374.XX...

Nope, max 20 Mbits (cdc_ncm high speed driver not used), I gave up and using a Dovado Tiny as bridge.....

I have also signed a fiber contract and they will dig as soon the snow is gone.

EDIT .3873 works just fine nevertheless after my nvram-reset yesterday!

 

[sanke1]

v3873 is running stable and fast here. Mad props to ASUS to finally get their act together after 1 year.

RT-AC68U is a fantastic router.

 

[cc666]

Version

v3873 is running stable and fast here. Mad props to ASUS to finally get their act together after 1 year.

RT-AC68U is a fantastic router.

Sankel1 do you mean Version 3.0.0.4.378.3885? There is no 3873 that I can find......Do you have a link?
Please clarify

CC

 

[tim]

Sankel1 do you mean Version 3.0.0.4.378.3885? There is no 3873 that I can find......Do you have a link?
Please clarify

CC

3.0.0.4.378.3885 is for the AC87U.

 

[oturn]

Ever since upgrading from 3.0.0.4.376.3626 to 3.0.0.4.378.3873, port forwarding on my RT-AC68U stops working nearly every day. It has to be disabled and re-enabled. Reboot times are over 2 minutes. Also, previous firmware versions allowed separate MAC filter rules per band, but this no longer appears to be the case.

From the lack of posts, these issues don't appear to be common. Any help would be greatly appreciated!

 

[jjhowey]

Ever since upgrading from 3.0.0.4.376.3626 to 3.0.0.4.378.3873, port forwarding on my RT-AC68U stops working nearly every day. It has to be disabled and re-enabled. Reboot times are over 2 minutes. Also, previous firmware versions allowed separate MAC filter rules per band, but this no longer appears to be the case.

From the lack of posts, these issues don't appear to be common. Any help would be greatly appreciated!

I had similar problems with my guest network that no one else had.

My only advice would be to start completely refresh, so run: "mtd-erase2 nvram" and then hold down reset for 5 seconds.

 

[oturn]

Do reboots typically take 2 to 2.5 minutes?

Was the ability to configure the wireless MAC filtering per band removed in 3.0.0.4.378.3873?

 

[RMerlin]

Do reboots typically take 2 to 2.5 minutes?

Yes, varying based on which services you have enabled.

Was the ability to configure the wireless MAC filtering per band removed in 3.0.0.4.378.3873?

Yes. Don't know why, but it was deliberate and not a bug, considering the code that was added to achieve this.

 

[oturn]

That's a disappointing reduction in functionality. I've always preferred a single SSID, and per-band MAC filtering allowed me to better manage my wireless clients. Is there a resource at ASUS for feedback on changes like this?

 

[BobD]

I just installed this firmware and did a factory reset (3.0.0.4.378.3873). Has anyone checked the GUI on.... Network Map>System Status>Status Tab. my CPU and RAM does not display its current state. it just displays "NAN%".

update: GUI works fine with chrome. has errors when using IE.

Yes, I have this problem and I use IE11.

NaN is an abbreviation for "Not a Number" and is sometimes used when an invalid value is returned for a field.

It's beginning to look like ASUS makes a few changes and then puts a release out for field testing to find the bugs. The only problem is the bugs are multiplying.

It seems that Merlin is doing a far better job than ASUS despite what must be much more limited resources.

 

[hjzwiers]

After installing 3.0.0.4.378.3873 I have frequent disconnects

The router runs (sometimes hours, once one whole day) but then restarts itself with a new date in the logging (always Dec 1), here an example of the logging:

Jan 25 00:59:57 ntp: start NTP update
Jan 25 01:59:59 ntp: start NTP update
Jan 25 03:00:01 ntp: start NTP update
Jan 25 03:59:57 ntp: start NTP update
Jan 25 04:59:57 ntp: start NTP update
Jan 25 05:59:57 ntp: start NTP update
Jan 25 06:59:57 ntp: start NTP update
Jan 25 07:59:59 ntp: start NTP update
Dec 1 01:00:13 syslogd started: BusyBox v1.17.4
Dec 1 01:00:13 kernel: klogd started: BusyBox v1.17.4 (2015-01-12 08:26:27 CST)
Dec 1 01:00:13 kernel: Linux version 2.6.36.4brcmarm (gitserv_asus@wireless-pub1) (gcc version 4.5.3 (Buildroot 2012.02) ) #1 SMP PREEMPT Mon Jan 12 08:34:54 CST 2015
Dec 1 01:00:13 kernel: CPU: ARMv7 Processor [413fc090] revision 0 (ARMv7), cr=10c53c7f
Dec 1 01:00:13 kernel: CPU: VIPT nonaliasing data cache, VIPT nonaliasing instruction cache
Dec 1 01:00:13 kernel: Machine: Northstar Prototype
Dec 1 01:00:13 kernel: Ignoring unrecognised tag 0x00000000
Dec 1 01:00:13 kernel: Memory policy: ECC disabled, Data cache writealloc
Dec 1 01:00:13 kernel: Built 1 zonelists in Zone order, mobility grouping on. Total pages: 60416

etc

After the firmware update I reset the router as instructed and did a factory reset through the UI.

I also needed to set the region to GMT to be able to set a new user name and password.

After a manual power cycle the router works again ..... for a period.

Is this a firmware problem? Any clues?