Release Asuswrt-Merlin 386.7 is now available for all models

[laracroftonline]

Hi All, I have downloaded RT-AC5300_386.7_0.zip a couple of times, extracted the .trx file but every time I try and upload the firmware the router errors telling me it is an invalid file?

Currently running 386.5_2

Adrian.

reboot your router and try upgrading it again. usually works for me when i get this error.

 

[Viktor Jaep]

is it 100% certain that you dare to update my sister's router which is an rt-ax86u?

want to be sure it does not stop working

want to be 100 % sure before I do anything with her router

There's always a risk. Nobody here is going to give you any guarantees. Just make sure you have a backup plan and are ready to commit the time to restore from scratch.

 

[2345rsdf]

Hi All, I have downloaded RT-AC5300_386.7_0.zip a couple of times, extracted the .trx file but every time I try and upload the firmware the router errors telling me it is an invalid file?

Currently running 386.5_2

Adrian.

Same on my RT-AC86U. Hash file matches the one provided in the zip. Router reboot didnt help.

 

[Kabouter Plop]

Be nice if i could setup 2 dns servers per custom user defined row 2 ipv4 and 2 ipv6 i have 2 pihole servers on 2 different ip's

 

[rgration]

Interesting!

My AX88U has always had region = “Asia (Default)”.
There was never (till now) an “Australia“ option.

I queried Asus back in the day after buying the router, & was assured that “Asia” was correct.

Ive just configured the “Australia” setting & gained channels 12 & 13 on 2.4 band: lost channels 100, 104, 108 & 112 on the 5ghz band. (No loss, I’m not using DFS or 160 bandwidth anyhow.

Thanks for that info. The 'Australia' option has been around for many years on the AC88U, so strange that it would not also have been there from the get go on the AX88U.

I live in an apartment block with about 250 apartments in the building and there is massive congestion on the 2.4GHz channels and significant congestion on the 5GHz channels. So having access to the additional UNII-2A and UNII-2C channels is really important for being able to minimise interference from nearby routers in neighbouring apartments in the building.

Hopefully this issue can be fixed in the 386.7_2 update.

 

[scjr]

RT-AC1900P. Smooth update from 386.5_2 to 386.7. Thank you, Merlin.

 

[fitnesspmm]

RT-AC5300

2.4 and 5G#2 works fine
5G#1 connects but these no upload data when doing a speed test. Internet doesn't work very well if at all.

I've done 2 clean factory defaults but same problem.

Any suggestions, I'm going back versions at the moment but still the same thing.

 

[Samuel_1975]

Tried to install but it failed, it said on the app, you have to run it manually on the routers page on asus from merlin?

 

[ColinTaylor]

you have to run it manually on the routers page on asus from merlin?

Yes.

 

[Tex Texan]

Interesting!

My AX88U has always had region = “Asia (Default)”.
There was never (till now) an “Australia“ option.

I queried Asus back in the day after buying the router, & was assured that “Asia” was correct.

Ive just configured the “Australia” setting & gained channels 12 & 13 on 2.4 band: lost channels 100, 104, 108 & 112 on the 5ghz band. (No loss, I’m not using DFS or 160 bandwidth anyhow.

Can you change region after setup somewhere within the settings, or can this only be set upon initial connection set up?

Edit - don't worry, found it, it's under Wireless -> Professional -> Region if anyone else needs to know!

 

[heysoundude]

I suspect Asus is not quite ready to expose the WireGuard service yet. The wireguard modules (kernel driver and wg helper app) and Web UI page source might be in the release, but not yet exposed.
@Jack Yaz scmerlin addon inadvertently exposes them since it walks the entire WebUI tree and adds a feature that opens a submenu when you click on the main menu item (i.e. click Game on the far right and it shows “Game Boost”. Its a quicker way to get to sub menu items (sub tabs) from the main menu.

Personally I would not recommend doing anything on the Asus WireGuard menus (server/client) if you do have/install scmerlin. If their not ready - their not ready. Asus will release when they ARE ready.

There is always the @Martineau WireGuard Manager (wg_manager) addon if you want to try WireGuard now.
For now, it is all command line based. He is working on a Web page now.

Going to be an interesting race to see who releases a full WireGuard Web based feature - Asus or @Martineau ;-)

I'm of the perspective that @Martineau 's and @ZebMcKayhan 's Wireguard Server will end up being the preferred implementation, and Asus will end up following their lead (eventually)

 

[STRUZZIN]

All my AX58U / AC68U Units working great.
Thank You !

 

[Jeffrey Young]

Hi Merlin, thanks for the latest release 386.7. After upgrading from 386.5_2 directly, I saw in the log:

Jun 23 17:49:09 RT-AX86U-1F70 kernel: <unknown>: hw csum failure
Jun 23 17:49:09 RT-AX86U-1F70 kernel: CPU: 1 PID: 5116 Comm: dnsmasq Tainted: P           O    4.1.52 #2
Jun 23 17:49:09 RT-AX86U-1F70 kernel: Hardware name: Broadcom-v8A (DT)
Jun 23 17:49:09 RT-AX86U-1F70 kernel: Call trace:
Jun 23 17:49:09 RT-AX86U-1F70 kernel: [<ffffffc000087398>] dump_backtrace+0x0/0x150
Jun 23 17:49:09 RT-AX86U-1F70 kernel: [<ffffffc0000874fc>] show_stack+0x14/0x20
Jun 23 17:49:09 RT-AX86U-1F70 kernel: [<ffffffc0005589d0>] dump_stack+0x90/0xb0
Jun 23 17:49:09 RT-AX86U-1F70 kernel: [<ffffffc0003fe05c>] netdev_rx_csum_fault+0x3c/0x50
Jun 23 17:49:09 RT-AX86U-1F70 kernel: [<ffffffc0003f22d0>] skb_copy_and_csum_datagram_msg+0xe8/0xf8
Jun 23 17:49:09 RT-AX86U-1F70 kernel: [<ffffffc0004f8468>] udpv6_recvmsg+0x2a0/0x7d8
Jun 23 17:49:09 RT-AX86U-1F70 kernel: [<ffffffc0004a616c>] inet_recvmsg+0xa4/0xc8
Jun 23 17:49:09 RT-AX86U-1F70 kernel: [<ffffffc0003df4d4>] sock_recvmsg+0x14/0x20
Jun 23 17:49:09 RT-AX86U-1F70 kernel: [<ffffffc0003e10e4>] ___sys_recvmsg+0xac/0x1a8
Jun 23 17:49:09 RT-AX86U-1F70 kernel: [<ffffffc0003e3b18>] __sys_recvmsg+0x40/0x80
Jun 23 17:49:09 RT-AX86U-1F70 kernel: [<ffffffc000423410>] compat_SyS_recvmsg+0x10/0x18
Jun 23 17:49:09 RT-AX86U-1F70 kernel: <unknown>: hw csum failure
Jun 23 17:49:09 RT-AX86U-1F70 kernel: CPU: 1 PID: 5116 Comm: dnsmasq Tainted: P           O    4.1.52 #2
Jun 23 17:49:09 RT-AX86U-1F70 kernel: Hardware name: Broadcom-v8A (DT)
Jun 23 17:49:09 RT-AX86U-1F70 kernel: Call trace:
Jun 23 17:49:09 RT-AX86U-1F70 kernel: [<ffffffc000087398>] dump_backtrace+0x0/0x150
Jun 23 17:49:09 RT-AX86U-1F70 kernel: [<ffffffc0000874fc>] show_stack+0x14/0x20
Jun 23 17:49:09 RT-AX86U-1F70 kernel: [<ffffffc0005589d0>] dump_stack+0x90/0xb0
Jun 23 17:49:09 RT-AX86U-1F70 kernel: [<ffffffc0003fe05c>] netdev_rx_csum_fault+0x3c/0x50
Jun 23 17:49:09 RT-AX86U-1F70 kernel: [<ffffffc0003f22d0>] skb_copy_and_csum_datagram_msg+0xe8/0xf8
Jun 23 17:49:09 RT-AX86U-1F70 kernel: [<ffffffc0004f8468>] udpv6_recvmsg+0x2a0/0x7d8
Jun 23 17:49:09 RT-AX86U-1F70 kernel: [<ffffffc0004a616c>] inet_recvmsg+0xa4/0xc8
Jun 23 17:49:09 RT-AX86U-1F70 kernel: [<ffffffc0003df4d4>] sock_recvmsg+0x14/0x20
Jun 23 17:49:09 RT-AX86U-1F70 kernel: [<ffffffc0003e10e4>] ___sys_recvmsg+0xac/0x1a8
Jun 23 17:49:09 RT-AX86U-1F70 kernel: [<ffffffc0003e3b18>] __sys_recvmsg+0x40/0x80
Jun 23 17:49:09 RT-AX86U-1F70 kernel: [<ffffffc000423410>] compat_SyS_recvmsg+0x10/0x18
Jun 23 17:49:10 RT-AX86U-1F70 kernel: <unknown>: hw csum failure
Jun 23 17:49:10 RT-AX86U-1F70 kernel: CPU: 2 PID: 5116 Comm: dnsmasq Tainted: P           O    4.1.52 #2
Jun 23 17:49:10 RT-AX86U-1F70 kernel: Hardware name: Broadcom-v8A (DT)
Jun 23 17:49:10 RT-AX86U-1F70 kernel: Call trace:
Jun 23 17:49:10 RT-AX86U-1F70 kernel: [<ffffffc000087398>] dump_backtrace+0x0/0x150
Jun 23 17:49:10 RT-AX86U-1F70 kernel: [<ffffffc0000874fc>] show_stack+0x14/0x20
Jun 23 17:49:10 RT-AX86U-1F70 kernel: [<ffffffc0005589d0>] dump_stack+0x90/0xb0
Jun 23 17:49:10 RT-AX86U-1F70 kernel: [<ffffffc0003fe05c>] netdev_rx_csum_fault+0x3c/0x50
Jun 23 17:49:10 RT-AX86U-1F70 kernel: [<ffffffc0003f22d0>] skb_copy_and_csum_datagram_msg+0xe8/0xf8
Jun 23 17:49:10 RT-AX86U-1F70 kernel: [<ffffffc0004f8468>] udpv6_recvmsg+0x2a0/0x7d8
Jun 23 17:49:10 RT-AX86U-1F70 kernel: [<ffffffc0004a616c>] inet_recvmsg+0xa4/0xc8
Jun 23 17:49:10 RT-AX86U-1F70 kernel: [<ffffffc0003df4d4>] sock_recvmsg+0x14/0x20
Jun 23 17:49:10 RT-AX86U-1F70 kernel: [<ffffffc0003e10e4>] ___sys_recvmsg+0xac/0x1a8
Jun 23 17:49:10 RT-AX86U-1F70 kernel: [<ffffffc0003e3b18>] __sys_recvmsg+0x40/0x80
Jun 23 17:49:10 RT-AX86U-1F70 kernel: [<ffffffc000423410>] compat_SyS_recvmsg+0x10/0x18
Jun 23 17:49:31 RT-AX86U-1F70 kernel: <unknown>: hw csum failure
Jun 23 17:49:31 RT-AX86U-1F70 kernel: CPU: 2 PID: 5116 Comm: dnsmasq Tainted: P           O    4.1.52 #2
Jun 23 17:49:31 RT-AX86U-1F70 kernel: Hardware name: Broadcom-v8A (DT)
Jun 23 17:49:31 RT-AX86U-1F70 kernel: Call trace:
Jun 23 17:49:31 RT-AX86U-1F70 kernel: [<ffffffc000087398>] dump_backtrace+0x0/0x150
Jun 23 17:49:31 RT-AX86U-1F70 kernel: [<ffffffc0000874fc>] show_stack+0x14/0x20
Jun 23 17:49:31 RT-AX86U-1F70 kernel: [<ffffffc0005589d0>] dump_stack+0x90/0xb0
Jun 23 17:49:31 RT-AX86U-1F70 kernel: [<ffffffc0003fe05c>] netdev_rx_csum_fault+0x3c/0x50
Jun 23 17:49:31 RT-AX86U-1F70 kernel: [<ffffffc0003f22d0>] skb_copy_and_csum_datagram_msg+0xe8/0xf8
Jun 23 17:49:31 RT-AX86U-1F70 kernel: [<ffffffc0004f8468>] udpv6_recvmsg+0x2a0/0x7d8
Jun 23 17:49:31 RT-AX86U-1F70 kernel: [<ffffffc0004a616c>] inet_recvmsg+0xa4/0xc8
Jun 23 17:49:31 RT-AX86U-1F70 kernel: [<ffffffc0003df4d4>] sock_recvmsg+0x14/0x20
Jun 23 17:49:31 RT-AX86U-1F70 kernel: [<ffffffc0003e10e4>] ___sys_recvmsg+0xac/0x1a8
Jun 23 17:49:31 RT-AX86U-1F70 kernel: [<ffffffc0003e3b18>] __sys_recvmsg+0x40/0x80
Jun 23 17:49:31 RT-AX86U-1F70 kernel: [<ffffffc000423410>] compat_SyS_recvmsg+0x10/0x18

Is this any cause for concern? It happened 4 times after the upgrade reboot, and it didn't show again (for now)

Dnsmasq is crashing. Do you run any dnsmasq.postconf files? Check those for errors and check your manual ip assignments. Any dnsmasq entries in the log just prior to crash?

 

[heysoundude]

Asuswrt-Merlin 386.7 is now available for all supported models. The focus of this release is to upgrade the GPL base code, as well as introduce a few minor improvements:

• Merged with GPL 386_49335 (for the RT-AC5300) and 386_48966 (for all other models).
• DNSFilter can now also intercept and redirect IPv6 DNS queries on HND models. You can also specify IPv6 DNS servers for the three custom settings.
• Component updates: openssl 1.1.1o, haveged 1.9.18, openvpn 2.5.7 and tor 0.4.7.8.
• Fixed CVE-2022-0934 and CVE-2022-26376.
• And a few other fixes

Also this includes the following changes from 386.6 (which was previously only available for the XT12 and GT-AX6000):

• Added new IPv6 options to OpenVPN servers, allowing to disable/enable IPv6 support, and also to enable NAT (allowing remote clients to also redirect their IPv6 Internet traffic through their router's OpenVPN server
• Updated components: wget (1.21.3), dropbear (2022.82)
• Allow requesting bigger IPv6 subnets from your ISP
• Fixed Traditional QoS download traffic limited by upstream bandwidth

Note: while openssl 1.1.1p just came out, I decided not to put the firmware through another beta cycle just for it as the security issue it addresses does not affect Asuswrt-Merlin.

Please keep the discussion on this particular release. Off-topic posts will be moved, deleted or ignored depending on my mood at the time.
This thread will be closed down once the initial release feedback has quieted town.

Downloads are here.
Changelog is here.

Can anyone tell me how to go about requesting a larger ipv6 prefix from my ISP in Merlin please?

 

[RMerlin]

Indeed got the same messages and these ones were not present in the beta2

That`s definitely not related, since the only changes between beta 2 and final were related to Tor and OpenVPN:

merlin@ubuntu-dev:~/amng$ git log 386.7-beta2..386.7 --oneline
94cc3d910e Bumped revision to 386.7 final
b7b2da99b0 Updated documentation
77bf6e916b shared: increase max ipv6_dns1_x length to 39 chars
6303f0be67 libovpn: also allow inbound OVPN client traffic destined at the router itself when the firewall is set to allow it
98b053d93c tor: updated to 0.4.7.8

I just noticed that these messages are only showing up in my syslog server.
But not in the syslog on the router UI.

That would probably imply they are logged at a lower priority than what your remote syslog shows, or they are filtered by the router (a few warning messages are filtered like that on the Syslog display page).

Wondering if this version has the WireGuard UI for AX86U?

No.

Ax56U stuck on Please wait, Applying settings upgrade from 386_5.2 to 386_7.

Reboot with no USB disk plugged, then try with a different browser.

@RMerlin - is there something wrong with the menus for WireGuard?

Using scMerlin, hovering over 'VPN' I see two menus for WireGuard - server and client.

That addon is incorrectly showing you old work-in-progress pages that should not be visible. There is no Wireguard webui support at this time.

Hi Merlin, thanks for the latest release 386.7. After upgrading from 386.5_2 directly, I saw in the log:

dnsmasq hasn't changed in many months, so something else on your router is causing it to crash. If you use an addon that modifies its config (like Diversion), try disabling it.
EDIT: There was one change that fixed an issue in DHCPv6's functions. Are you using DHCPv6 on your network?

Hi All, I have downloaded RT-AC5300_386.7_0.zip a couple of times, extracted the .trx file but every time I try and upload the firmware the router errors telling me it is an invalid file?

Double check that you have the correct model. Reboot the router with no USB disk attached, then try again with a different browser.

 

[Chuckles67]

Dirty flashed an RT-AX86U from 386.5_2 to 386.7. Forgot to remove USB stick (swap file + Diversion + Disk check script). All good after 15 minutes of use.
Thanks RMerlin!

 

[Damit1]

So
After upgrading from 386.5_2 to 386_7 B- then B2. Then Release Stable 386_7.
Had issues with IPv4 and IPv6.

Reverted back to 386.5_2- both IPv4 and IPv6 without any issue for few hours now.
2*AX88U

It is the first release of RMerlin that is very buggy.

My ring is also seem to be stabllize in this FW.
I guess it is related to IPv6 connectivity.

I suggest and hope dear merlin will bring a patch FW for it.

 

[Jeffrey Young]

That`s definitely not related, since the only changes between beta 2 and final were related to Tor and OpenVPN:

merlin@ubuntu-dev:~/amng$ git log 386.7-beta2..386.7 --oneline
94cc3d910e Bumped revision to 386.7 final
b7b2da99b0 Updated documentation
77bf6e916b shared: increase max ipv6_dns1_x length to 39 chars
6303f0be67 libovpn: also allow inbound OVPN client traffic destined at the router itself when the firewall is set to allow it
98b053d93c tor: updated to 0.4.7.8

That would probably imply they are logged at a lower priority than what your remote syslog shows, or they are filtered by the router (a few warning messages are filtered like that on the Syslog display page).


No.


Reboot with no USB disk plugged, then try with a different browser.


That addon is incorrectly showing you old work-in-progress pages that should not be visible. There is no Wireguard webui support at this time.


dnsmasq hasn't changed in many months, so something else on your router is causing it to crash. If you use an addon that modifies its config (like Diversion), try disabling it.


Double check that you have the correct model. Reboot the router with no USB disk attached, then try again with a different browser.

Not that I would ever want to dispute the master, but CVE-2022-0934 was a security fault in dnsmasq (a 1 byte headet vulnerability of some kind). If this was fixed (from your changelog), then wouldn't dnsmasq have changed?

 

[RMerlin]

Going to be an interesting race to see who releases a full WireGuard Web based feature - Asus or @Martineau ;-)

Asus already won there, their public beta RC3 firmware has their new VPN interface with Wireguard support since last autumn However I don't intend to use their client design since it's too integrated into OpenVPN's UI. I will have to develop my own webui once their backend code becomes final. My server page will probably be the one from Asus however.

is it 100% certain that you dare to update my sister's router which is an rt-ax86u?

If you are referring to the early beta issues, the problematic cferom component has been removed from that router's firmware image while Asus resolves the issue on their end.

Tried to install but it failed, it said on the app, you have to run it manually on the routers page on asus from merlin?

The app will try to download from Asus' servers. You have to flash manually with my firmware, there's no liveupdate support (and if it did, the app would probably still point to Asus' download servers, not mine).

Can anyone tell me how to go about requesting a larger ipv6 prefix from my ISP in Merlin please?

There should be a prefix length field on the IPv6 settings page. If not, try setting the ipv6_prefix_len_wan nvram manually.

 

[RMerlin]

Not that I would ever want to dispute the master, but CVE-2022-0934 was a security fault in dnsmasq (a 1 byte headet vulnerability of some kind). If this was fixed (from your changelog), then wouldn't dnsmasq have changed?

Right, I forgot about that backport. That was just a backport of that specific fix however, the dnsmasq code base is still unchanged. That code targets DHCPv6.

While it's possible that a fix could cause crashes (dnsmasq's stability has been dubious these past few releases, which is why I am sticking to 2.85 for now), I guess there's always a chance it could be related. I would have expected more widespread reports of crashes however if that were the case.