Asuswrt-Merlin 3.0.0.4.374.35 is out

[M1ch43lk]

Hi router friends,

Great job RMerlin and thanks!

I'm running Firmware:3.0.0.4.374.35_4 and noticed that remote logging no longer seems to work:

$ ssh -l admin RT-AC68U "/usr/sbin/nvram get log_ipaddr"
<shows the correct address>

while checking with "ps" the ip shows up as some kind of escape/garbage charcter:

337 admin 1392 S syslogd -m 0 -S -O /tmp/syslog.log -s 256 -l 7 -R .� -L

Known issue? Any hints?

Thanks in advance,

Michael

 

[RMerlin]

Hi router friends,

Great job RMerlin and thanks!

I'm running Firmware:3.0.0.4.374.35_4 and noticed that remote logging no longer seems to work:

$ ssh -l admin RT-AC68U "/usr/sbin/nvram get log_ipaddr"
<shows the correct address>

while checking with "ps" the ip shows up as some kind of escape/garbage charcter:

337 admin 1392 S syslogd -m 0 -S -O /tmp/syslog.log -s 256 -l 7 -R .� -L

Known issue? Any hints?

I've had a few reports of remote logging no longer working, but I haven't had the time to look into it. My available time for development will be quite limited for a few more weeks.

 

[RMerlin]

Hi Merlin

First, thanks for your great job improving the ASUS firmware.

I have one question to you:
Can you please change the width of the window showing the different keys for OpenVPN.
The last 10 characters of every line are moved down to the next line.

It looks like "this":
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIGAUH4767dMA0GCSqGSIb3
JESzEPMA0G
.... many more lines ....
A1UECAwGVmlib3JnMQ8wDQYDVQQHDAZWaWJvcm
cxGDAWBgN
-----END CERTIFICATE-----


Best regards
Peter

It fits fine here on different browsers and computers. You must be using a non-standard resolution or font size.

 

[M1ch43lk]

I've had a few reports of remote logging no longer working, but I haven't had the time to look into it. My available time for development will be quite limited for a few more weeks.

Killing and restarting syslogd with the correct -R <ip> works...so I guess it's log_ipaddr (and probably log_port) not being picked up correctly when syslogd is being started during boot.

//Michael

 

[MXM]

Merlin,

I have a RT-n66U and just updated to 35_4. I'm seeing an issue in _4 but it was also present in _2.. It was not a issue in the previous firmware (34_2).

I am running one OpenVPN server and I'm able to connect without a problem. But when I go to the VPN Status page, I see a bunch if UNDEF entries under "OpenVPN Server 1- Running", then "Clients"...

UNDEF
Tue Dec 3 15:44:01 2013 x.x.x.x:59261 860 5326

UNDEF
Tue Dec 3 15:44:43 2013 x.x.x.x:44256 860 4072

UNDEF
Tue Dec 3 15:44:28 2013 x.x.x.x:53660 860 4870

(x.x.x.x is my IP address)...

I have 19 lines/display sets of this information, and one of them is the real VPN client. The other 18 are all this UNDEF stuff...


And then, I also have two Clients sections in the VPN Status page, with each section having the exact same information... It is an exact duplicate...

Any idea what this is all about?

Thanks,
MM

 

[Shayne]

I never said you WILL lose your partition when upgrading firmware. I said you MIGHT. Big difference.

sorry rephrase the question

I guess I do not fully understand this. So if I upgrade my firmware I may lose my Jiffs partition. You will not implement it because people will lose their jiffs partition. Why would you not implement it with a warning that the jiff needs to be backed up for this version and then it is done and implemented for all. Guess I am a bit confused with regard to your response.

Regards

 

[Builder71]

Something seems wrong with the Per device Real-time Traffic monitor.
ONLY on the Real-time tab I see a lot of IP addresses I don't use.

My router uses the 10.0.0.254 address.
The DHCP range is 10.0.0.200-10.0.0.250
And I use a few manually assigned IP addresses 10.0.0.101-10.0.0.104

No clue why the 10.0.0.87-10.0.0.100 and 10.0.0.105-10.0.0.119 shows up.

(Pic shows only a small part of the long list.)

I did some more digging into this one.
It only shows when I VPN into my network.
(192.168.0.6 is the IP address during the VPN session.)

The pic shows I can find them with: cat /proc/net/ip_conntrack
However they are not shown with the netstat command.

No clue why they show up anyway.

 

[RMerlin]

sorry rephrase the question

I guess I do not fully understand this. So if I upgrade my firmware I may lose my Jiffs partition. You will not implement it because people will lose their jiffs partition. Why would you not implement it with a warning that the jiff needs to be backed up for this version and then it is done and implemented for all. Guess I am a bit confused with regard to your response.

Regards

First reason being the current firmware has no way of knowing that the firmware you are about to flash is guaranteed to lose the existing JFFS2 content. So, I can't have it display an additional warning (beside the existing warning which is probably ignored by 90% of users).

And there is little reason in relocating the JFFS2 partition at this point, as any benefit that would come from it is hypothetical.

 

[RMerlin]

Merlin,

I have a RT-n66U and just updated to 35_4. I'm seeing an issue in _4 but it was also present in _2.. It was not a issue in the previous firmware (34_2).

I am running one OpenVPN server and I'm able to connect without a problem. But when I go to the VPN Status page, I see a bunch if UNDEF entries under "OpenVPN Server 1- Running", then "Clients"...

UNDEF
Tue Dec 3 15:44:01 2013 x.x.x.x:59261 860 5326

UNDEF
Tue Dec 3 15:44:43 2013 x.x.x.x:44256 860 4072

UNDEF
Tue Dec 3 15:44:28 2013 x.x.x.x:53660 860 4870

(x.x.x.x is my IP address)...

I have 19 lines/display sets of this information, and one of them is the real VPN client. The other 18 are all this UNDEF stuff...


And then, I also have two Clients sections in the VPN Status page, with each section having the exact same information... It is an exact duplicate...

Any idea what this is all about?

Thanks,
MM

Not sure what you are trying to describe, please post a screenshot.

 

[RMerlin]

I did some more digging into this one.
It only shows when I VPN into my network.
(192.168.0.6 is the IP address during the VPN session.)

The pic shows I can find them with: cat /proc/net/ip_conntrack
However they are not shown with the netstat command.

No clue why they show up anyway.

If it shows up in the kernel's conntrack listing, then it means the kernel actually saw these connection. Not sure where it might be coming from, but this confirms that it's not a bug with the firmware itself or its traffic monitoring display. Try to track them down through their MAC addresses.

 

[sheamus]

Add User hangs

Hello,

AC68U using RT-AC68U_3.0.0.4_374.35_4. I have a 1TB USB2.0 disk plugged into the USB2 port. I used telnet, and formatted the disk to ext3.

When I try to add a user to FTP, or to Samba, I get the 'processing' dialog popping up, but it just hangs there indefinitely.

There doesn't seem to be any errors in the JS console, and the syslog does not show anything either, it is almost as if the command is never executed.

I have read that this is also a problem with the official firmware. Can a user be manually added using useradd or smbuseradd?

Let me know if you need more info, or want a Jing vid of me reproducing.

Thanks,
~S

 

[Androo]

No other change beside what was mentionned in the changelog: VPN-specific changes, and a bugfix in the port forward code specific to Load Balancing mode. So there shouldn't be any change in either wifi or wired speed.

commit 5264e90d179793b34c78cc5c6473b15603c8febd
Author: Eric Sauvageau <rmerl@lostrealm.ca>
Date:   Sat Nov 30 18:00:21 2013 -0500

    Bumped revision to 374.35_4

commit 3bc5ff143c54d32a34bf500c11aad927d7eb8dc4
Merge: f0fb91d 42c45fc
Author: Eric Sauvageau <rmerl@lostrealm.ca>
Date:   Sat Nov 30 17:59:47 2013 -0500

    Merge branch 'master' of github.com:RMerl/asuswrt-merlin

commit f0fb91d2fe0576047c9fef6eb02f19b529fd8c14
Author: Eric Sauvageau <rmerl@lostrealm.ca>
Date:   Sat Nov 30 17:59:41 2013 -0500

    Updated documentation

commit 42c45fcb87faaf6f1e1e29d7f36113a3b066bef1
Author: Eric Sauvageau <rmerl@lostrealm.ca>
Date:   Sat Nov 30 17:58:22 2013 -0500

    openvpn: Fixed check for the presence of a trailing linefeed at the end of certs when generating client.ovpn

commit 590f8e5cff7fa2f9e4cb91c1c1ce255ed21c0a60
Author: Eric Sauvageau <rmerl@lostrealm.ca>
Date:   Sat Nov 30 16:13:04 2013 -0500

    Re-apply changes accidentally removed with previous commit

commit e21ae45dfe159bab93da405d9f18e11d3e815ad1
Author: Eric Sauvageau <rmerl@lostrealm.ca>
Date:   Sat Nov 30 16:10:33 2013 -0500

    openvpn: When exporting a client config, insert a notice where users should paste their key/cert if not using the router automatically generated keypair

commit 8ee9e383d24fb943a1551290b95f61110a45f69c
Author: Eric Sauvageau <rmerl@lostrealm.ca>
Date:   Sat Nov 30 13:37:08 2013 -0500

    openvpn: Append trailing linefeed to cert/keys inside exported ovpn config if there isn't one

commit c7eea9110b28e784ad6f494b3df9a34a7ef2b615
Author: Eric Sauvageau <rmerl@lostrealm.ca>
Date:   Sat Nov 30 13:19:53 2013 -0500

    vpnc support wasn't properly enabled at build time on MIPS routers

commit e223d3572f131e2d14e13b16d6473a4ec2a9a857
Author: Eric Sauvageau <rmerl@lostrealm.ca>
Date:   Fri Nov 29 02:21:31 2013 -0500

    Updated documentation

commit e4997e9479ca6ef4cd919b8dc1a47d6fd819fc54
Author: Eric Sauvageau <rmerl@lostrealm.ca>
Date:   Fri Nov 29 02:18:26 2013 -0500

    openvpn: Renamed vpn_server_clientlist so it won't be instanced.  This fixes the webui where clicking on Apply after adding a new user would
    not immediately refresh the passwd.openvpn file.

commit 4dfd123e4f9f17975e62a7c1fc05d844bdc9b4c5
Author: Eric Sauvageau <rmerl@lostrealm.ca>
Date:   Fri Nov 29 01:23:59 2013 -0500

    rc: Port forward rules were truncated to 32 chars when in load-balancing mode - increased buffer size to match non-LB code

commit 5aa4eb7c78d4dfd885992437c29ae75e8a28e89a
Author: Eric Sauvageau <rmerl@lostrealm.ca>
Date:   Thu Nov 28 23:43:43 2013 -0500

    webui: Write back VPNServer_mode so the VPN Details page will default to the last used VPN mode

commit 5ddf3de656c3b2a718dc796eb8de7e27af2543de
Author: Eric Sauvageau <rmerl@lostrealm.ca>
Date:   Thu Nov 28 23:29:14 2013 -0500

    webui: we weren't updating the correct form, so OpenVPN server wouldn't restart when applying config changes

commit 19efc517683027f56457efc561dd31b65ed6782f
Author: Eric Sauvageau <rmerl@lostrealm.ca>
Date:   Thu Nov 28 21:02:23 2013 -0500

    webui: minor formating fix

commit 7ebd9cd1de619353de1fd5d788ba77f9e415ad2a
Author: Eric Sauvageau <rmerl@lostrealm.ca>
Date:   Thu Nov 28 20:44:26 2013 -0500

    webui: Remove OpenVPN tab from the PPTP/L2TP client edit popup

commit be9e97002143592299817b48d3328e280c5d37b9
Author: Eric Sauvageau <rmerl@lostrealm.ca>
Date:   Wed Nov 27 01:59:06 2013 -0500

    webui: splitting should be done by the semi-entity, otherwise it causes a JS error

commit 11b4e9ba2a0150212a11ebb860ad3c86cbb4495e
Author: Eric Sauvageau <rmerl@lostrealm.ca>
Date:   Wed Nov 27 01:46:26 2013 -0500

    webui: add Server Mode selector on the VPNServer Details page to switch between PPTP and OpenVPN settings

commit 3f2a668c4edbafa8c2bb7f31214abf17a0f01061
Author: Eric Sauvageau <rmerl@lostrealm.ca>
Date:   Mon Nov 25 23:11:55 2013 -0500

    openvpn: Fix generated ovpn client file for Android clients when using extra HMAC authorization

commit 0d403ba488872f612dd6fcb3cbb9cf904da2a298
Author: Eric Sauvageau <rmerl@lostrealm.ca>
Date:   Mon Nov 25 22:59:06 2013 -0500

    webui: Show static key field when in TLS auth mode as it can also be used in that mode

commit 0536e28f80a01755f7a2956d559a82192a45488c
Merge: ab22b0b a3ef9d3
Author: Eric Sauvageau <rmerl@lostrealm.ca>
Date:   Mon Nov 25 22:18:59 2013 -0500

    Merge branch 'master' of github.com:RMerl/asuswrt-merlin

commit ab22b0bd41e57febcc03f9127bd560702eaf7fe5
Author: Eric Sauvageau <rmerl@lostrealm.ca>
Date:   Mon Nov 25 00:37:27 2013 -0500

    Bumped revision to 374.35_3

No worries, I believe you haha. Why is it I'm experiencing different speeds between firmware versions even when I'm clearing the nvram and following all correct steps?

 

[speedingcheetah]

Hello,

AC68U using RT-AC68U_3.0.0.4_374.35_4. I have a 1TB USB2.0 disk plugged into the USB2 port. I used telnet, and formatted the disk to ext3.

When I try to add a user to FTP, or to Samba, I get the 'processing' dialog popping up, but it just hangs there indefinitely.

There doesn't seem to be any errors in the JS console, and the syslog does not show anything either, it is almost as if the command is never executed.

I have read that this is also a problem with the official firmware. Can a user be manually added using useradd or smbuseradd?

Let me know if you need more info, or want a Jing vid of me reproducing.

Thanks,
~S

I am on stock...and i noticed this issue. Asus bug?

 

[hagbard]

It has been working for a long time now.

Just bought this router and installed this firmware. Parental control does NOT work.

 

[hagbard]

Parental control and WiFi connected printer works fine here.

How can this work for some and not others? There has to either be a problem in the configuration (a conflict with another setting?) or a problem with some hardware and not others. This is assuming that PC is actually working in some.

 

[RMerlin]

Hello,

AC68U using RT-AC68U_3.0.0.4_374.35_4. I have a 1TB USB2.0 disk plugged into the USB2 port. I used telnet, and formatted the disk to ext3.

When I try to add a user to FTP, or to Samba, I get the 'processing' dialog popping up, but it just hangs there indefinitely.

There doesn't seem to be any errors in the JS console, and the syslog does not show anything either, it is almost as if the command is never executed.

Compatibility issue with recent versions of Chrome. You have to use another browser for the time being when editing users or folders.

 

[RMerlin]

How can this work for some and not others? There has to either be a problem in the configuration (a conflict with another setting?) or a problem with some hardware and not others. This is assuming that PC is actually working in some.

It does work for quite a few users, as this was something that was specifically debugged and tested a few weeks ago. How are you testing it? What type of configuration do you have? What kind of schedule? Is the clock and timezone set correctly?

 

[RMerlin]

No worries, I believe you haha. Why is it I'm experiencing different speeds between firmware versions even when I'm clearing the nvram and following all correct steps?

Quite often, the change is caused by the router reboot itself, not by the firmware change. This is especially common if you have channels set to Auto instead of manually assigned.

 

[Builder71]

If it shows up in the kernel's conntrack listing, then it means the kernel actually saw these connection. Not sure where it might be coming from, but this confirms that it's not a bug with the firmware itself or its traffic monitoring display. Try to track them down through their MAC addresses.

These connections are all [UNREPLIED], meaning the connection has not seen any traffic in both directions.

Using the arp command isn't very helpful.
A long list like this:

? (10.0.0.87) at <incomplete>  on br0
? (10.0.0.88) at <incomplete>  on br0
? (10.0.0.89) at <incomplete>  on br0
? (10.0.0.90) at <incomplete>  on br0
? (10.0.0.91) at <incomplete>  on br0
? (10.0.0.92) at <incomplete>  on br0
? (10.0.0.93) at <incomplete>  on br0
? (10.0.0.94) at <incomplete>  on br0
? (10.0.0.95) at <incomplete>  on br0
? (10.0.0.96) at <incomplete>  on br0
? (10.0.0.97) at <incomplete>  on br0
? (10.0.0.98) at <incomplete>  on br0
? (10.0.0.99) at <incomplete>  on br0
etc...

Dead end for me.

 

[hagbard]

It does work for quite a few users, as this was something that was specifically debugged and tested a few weeks ago. How are you testing it? What type of configuration do you have? What kind of schedule? Is the clock and timezone set correctly?

What do you mean by "configuration"?

My son's computer is set to Allow access between 6am and 9pm. Yet last night, the log shows he was on till 11pm. This was confirmed by him. Its set by his mac address. The clock and timezone are right on.

The router is setup in Wireless Router mode. In my previous Tomato routers, its always been set up as Access Point. Does this make a difference?