What's new

Asuswrt-Merlin 378.50 is out

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

RT-AC68U 3.0.0.4 378.50 Blocking Remote Access to Security Cameras

I have an Asus AC68U and have been successfully been running Merlin firmware version 376.49_4. A couple of days ago I upgraded to 378.50 and noticed that I could no longer access my security camera DVR via my WAN IP address and a port that I forward to the DVR IP on the local LAN. I then downgraded back to 376.49_4 and I was once again able to access the security cameras remotely again.

On the Port Forwarding page, I have my camera DVR set up in port forwarding using a single port for the Port Range and Local Port and the Local IP is a static assigned IP for the DVR device on my local network. The Protocol is TCP.

The camera DVR also requires another external port range set up to point to the Local IP on TCP as well.

At first I thought my cameras weren't working, but then I realized I could reach them from the local network IP, just not remotely via the WAN IP/Port. When I downgraded the router firmware, it worked perfectly again from both locations (local and remote).

Regards,
Vinnie
 
Not a fix but a workaround: maybe connect to your router via VPN, and look at your camera's like you are physically on the LAN. I have always done it through a VPN.

Sent from my Nexus 5 using Tapatalk
 
I have an Asus AC68U and have been successfully been running Merlin firmware version 376.49_4. A couple of days ago I upgraded to 378.50 and noticed that I could no longer access my security camera DVR via my WAN IP address and a port that I forward to the DVR IP on the local LAN. I then downgraded back to 376.49_4 and I was once again able to access the security cameras remotely again.

On the Port Forwarding page, I have my camera DVR set up in port forwarding using a single port for the Port Range and Local Port and the Local IP is a static assigned IP for the DVR device on my local network. The Protocol is TCP.

The camera DVR also requires another external port range set up to point to the Local IP on TCP as well.

At first I thought my cameras weren't working, but then I realized I could reach them from the local network IP, just not remotely via the WAN IP/Port. When I downgraded the router firmware, it worked perfectly again from both locations (local and remote).

Regards,
Vinnie

try disabling "NAT acceleration" under LAN then last tab.
 
power slide control

I've tried the effect control but it does not seem to adjust anything.
Not in any position neither power up or down both the 2.4 and 5.0GHz.
Can you look over there and see if there is something wrong.

Octopus
 
I have an Asus AC68U and have been successfully been running Merlin firmware version 376.49_4. A couple of days ago I upgraded to 378.50 and noticed that I could no longer access my security camera DVR via my WAN IP address and a port that I forward to the DVR IP on the local LAN. I then downgraded back to 376.49_4 and I was once again able to access the security cameras remotely again.

On the Port Forwarding page, I have my camera DVR set up in port forwarding using a single port for the Port Range and Local Port and the Local IP is a static assigned IP for the DVR device on my local network. The Protocol is TCP.

The camera DVR also requires another external port range set up to point to the Local IP on TCP as well.

At first I thought my cameras weren't working, but then I realized I could reach them from the local network IP, just not remotely via the WAN IP/Port. When I downgraded the router firmware, it worked perfectly again from both locations (local and remote).

Regards,
Vinnie
Based on my personal experiences, I think there is an issue with NAT Loopback in this version. For me, it works for a short period of time, then stops working. But I haven't seen any confirmation of this being a known issue.
 
Hey Merlin, I'm noticing a issue when putting my AC87R into AP mode. This isn't a problem in router mode, nor did I notice this issue in your previous firmware before this one using AP mode. The issue is, when I go to the samba share menu. At the bottom normally there are options, to change folder permissions for the attached drive. However this area is staying blank with no options. I have removed, and re-attached the harddrive. I have even reset the router, none of this fixed the issue. The current work around for me, is to have the router in router mode, and set folder permissions before switching it to AP mode. The hard drive mounts fine, and I can even access it in AP mode.

So the only current issue is, while in AP mode. The samba share folder permission area is blank. I'm using your 378.50_ta firmware. I dunno if asus introduced this bug in the newer build you used, or not. I just know I was using AP mode on your build before this, and this wasn't an issue. I'm gonna include a image of what I'm talking about as well.
EDIT: I also tried both Chrome, and Firefox, to make sure it wasn't a browser issue. Both showed same blank bottom area.

TY3GPlU.png
 
Last edited:
try disabling "NAT acceleration" under LAN then last tab.
Thanks. I disabled this option and re-upgraded and it seems to be working now. I may try setting it back to auto later just to see if the problem recurs to verify that indeed that setting is the culprit, but for now I'm just happy it's working. Thanks again!
 
Finally decided to bite the bullet and upgraded to 378.50 - except for formating the USB (jffs) drive, everything is solid so far!
 
Based on my personal experiences, I think there is an issue with NAT Loopback in this version. For me, it works for a short period of time, then stops working. But I haven't seen any confirmation of this being a known issue.

There is definitely some sort of issue with NAT loopback in this version. I run a home based business and use screenconnect for remoting in to my clients. Screenconnect is hosted at home and I use dynDNS to keep my host name ip address updated.

Screenconnect and host name resolution stop working after a few hours with 387.50, and none of my remote access tools work. Totally unusable for me, I had to roll back to 376.49_5. Screenconnect and every tool I use is now stable. NAT Loopback has been very hit and miss with various versions. Find a version that works and don't upgrade, even merlin's firmwares have issues with this feature.
 
Adding my 2 cents, I do not have any NAT loopback issues with my AC56U but I am also not using hardware acceleration of any kind, also I am using the non-DPI firmware. Of course I know that not using the h/w acceleration is not an option for users of rather high speed lines.
 
Are you running the peerguardian style scripts from the following link?

https://github.com/RMerl/asuswrt-merlin/wiki/Using-ipset

When I first installed this script it worked okay, but recently the block list used appears to have had more IP addresses added that relate to digital rights owners. So I was experiencing exactly the same intermittent issues as yourself.

Disable the script & reboot & see if that makes things work again...

Nope, not using any peerguardian style scripts at all..
 
Is anyone having trouble with 378.50 and connecting to some hostnames?
It's not consistent, it happens to sites even like amazon.com sometimes won't load. Browser gives me a complete error saying it couldn't resolve the site.

However, sometimes it's not an issue with the entire site. Sometimes just some resources like css and js files are returning 404s so styling on sites are messed up in layout and formatting.

This also happens on my iphone when I'm connected by wifi. As soon as the problem hits, if I toggle wifi and go to LTE, it works right away. Toggle back to wifi, it fails.

Anyone else having this issue? This only started when i upgraded to 378.50 (yes, I did a full reset per the firmware instructions).

Yes, indeed having the same issue with the RT-N66U. It has been rock-solid through many previous Merlin firmware releases. In some cases you get server/site not found, or you get partial loaded pages with either missing images or missing css's. It can even be a site/page that loaded perfectly a couple of minutes earlier.

Two mitigating steps you can take:

1. Clear the browser cache/history (it then works for some period before you have to repeat the step.

2. Change your DNS settings on your computer/laptop, not to use the router as the default DNS server (thus for example, 8.8.8.8 as the primary DNS server and then use the router as the secondary one).

I have experienced this issue with 1 Mac Air, 1 MacBook Pro, 2 Mac Minis (with a mixture of Yosemite and Mavericks and with different browsers [Safari, Firefox and Chrome] when it starts happening it happens on all browsers)
Assuming that the issue lays somewhere with dnsmasq on the router
This is on vanilla merlin release with no add-ons and pretty basic configuration. At first I thought it was an issue with the flashing and factory reset, so I re-did the whole procedure again and the results are identical.

For now I am downgrading to RT-N66U_3.0.0.4_376.49_5 and will see if this gets addressed in one of the next versions.

BH
 
2. Change your DNS settings on your computer/laptop, not to use the router as the default DNS server (thus for example, 8.8.8.8 as the primary DNS server and then use the router as the secondary one).

I use 8.8.8.8 and 8.8.4.4. for WAN DNS Setting. RT-AC66U and 378.50 has been rock solid.
 
Upload/Download merge when using OpenVPN client

I'm trying the experimental build for my AC68. So far all is well.

I just have a question about the Adaptive QOS section. In the bandwidth monitor sub-section I see a nice upload and download meter with DHCP clients listed. I have left each client as "empty", not assigning any of the clients to any of the choices of priority.

In the QOS sub-section "enable smart QOS" is turned off. This is what I want.

I just want to make sure that there is no QOS happening on my router. I'm fine with the bandwidth monitor display, but I want to make sure it's not throttling according to any rule.

Also, I'm noticing in that bandwidth monitor sub-section that while connected to VPN (router is connected with openvpn client 1) the upload and download of a client is being summed and combined all in the upload category, both as a whole of all clients and for the individual client. So, there seems to be a bug there. Or maybe connecting to VPN will necessarily fool this?

Anyway, thanks for the great firmware RMerlin!



Anybody else have that issue? When connected to OpenVPN client, all the traffic is consider "upload" is this an issue? Wrong interface is monitored to give stats?

Thanks!
 
ac66u 378.50 download master installation failed.

process is interrupted during asuslighttpd package installation.

i switched back to official asus firmware and download master was successfully installed. switched back to merlin's and installation failed.
 
I have an Asus AC68U and have been successfully been running Merlin firmware version 376.49_4. A couple of days ago I upgraded to 378.50 and noticed that I could no longer access my security camera DVR via my WAN IP address and a port that I forward to the DVR IP on the local LAN. I then downgraded back to 376.49_4 and I was once again able to access the security cameras remotely again.

On the Port Forwarding page, I have my camera DVR set up in port forwarding using a single port for the Port Range and Local Port and the Local IP is a static assigned IP for the DVR device on my local network. The Protocol is TCP.

The camera DVR also requires another external port range set up to point to the Local IP on TCP as well.

At first I thought my cameras weren't working, but then I realized I could reach them from the local network IP, just not remotely via the WAN IP/Port. When I downgraded the router firmware, it worked perfectly again from both locations (local and remote).

Regards,
Vinnie

Same problem.. My (not so great) "workaround" is to go to the routers' "Wan/Port Forwarding" page, disable+enable the "Enable Port Forwarding" option then click "Apply". Viola.... "good" to go for a day or two.
 
ASUS RT-AC56U Firmware version 3.0.0.4.378.4376

ASUS RT-AC56U Firmware version 3.0.0.4.378.4376 is out, dated yesterday. Includes AiProtection and Adaptive QoS, so, I guess we can have a non-experimental 378.50 of AC56 now :).
 
ASUS RT-AC56U Firmware version 3.0.0.4.378.4376 is out, dated yesterday. Includes AiProtection and Adaptive QoS, so, I guess we can have a non-experimental 378.50 of AC56 now :).

Noted the following from http://www.asus.com/us/Networking/RTAC56U/HelpDesk_Download/:

[Important 1]
If your firmware is 3.0.0.4.374.xxxx, please upgrade to 3.0.0.4.376.xxxx first. Only 3.0.0.4.376.xxxx can upgrade to this version.

[Important 2]
This version included AiProtection and AdaptiveQoS. After firmware updated, please press the reset button more than five seconds to reset the router to avoid some compatibility issues.

I wonder if .376 has CFE upgrades like the AC68U ?
 
Adaptive QoS -- disappearing Apps

RT-AC68R, RMerlin 378.50 with factory reset and manual setup from scratch. I initially kicked off Adaptive QoS and re-ordered the "Applications" to prioritize VoIP. Seemed to work fine. Then I went back and found that the Apps were no longer displayed on the "Adaptive type" page under Adaptive QoS->QoS tab. It's just blank between "Highest" and "Lowest".

I re-installed firmware, did a factory reset and got the Apps back. Then re-loaded my most recent configuration file and they disappeared again, even though QoS was turned off when I saved the config.

Any ideas? I can start re-config from scratch again, but worried I might end up in the same predicament.

While I'm asking dumb questions, is there any way to better understand the App classes, what parameters they are defined by -- port numbers etc?

I'm finding it frustratingly hard to confirm that QoS is working as intended.

Thanks!
 
Last edited:
ASUS RT-AC56U Firmware version 3.0.0.4.378.4376 is out, dated yesterday. Includes AiProtection and Adaptive QoS, so, I guess we can have a non-experimental 378.50 of AC56 now :).

Not until the source code is available. For now I'm forced to reuse the AC68U driver, which is why this is released as experimental.
 

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top