[Beta] Asuswrt-Merlin 384.11 Beta is now available

[Gar]

Umm.. Eric, I looking at the presets in 384.11 b1 and Adguard 1 & Adguard 2 are there. Are you saying they will be gone in the next beta?

Using the grc.com speed test those sites have been down/performing poorly.

 

[chris2kari]

Using the grc.com speed test those sites have been down/performing poorly.

Can confirm, from my location in Oceania (New Zealand).

 

[heysoundude]

the big question is how much do they care?

That’s a good point, that either way they’re selling routers; but compare the size of the dev teams between official and Merlin plus scripts. And the same number of products supported. The people here are doing much heavier lifting from where I sit


Sent from my iPhone using Tapatalk

 

[AmyGrrl]

Not sure if this happens on the stock fw as well as your fw. When I had my RT-N66U and I did a firmware update. I would always have to manually reboot. Then I got the RT-AC66U B1. I never once had to manually reboot after doing a firmware update. Now that I got this RT-AX88U. I'm back to having to manually reboot the router again after a firmware update. I'm finding it really annoying having to manually reboot. Why is it doing this? Can something be done to make it reboot after a update? Why did my RT-AC66U B1 always reboot on its own after firmware update while my RT-N66U & RT-AX88U always required a manual reboot after a firmware update?

 

[chris2kari]

Using the grc.com speed test those sites have been down/performing poorly.

Yes, I see they are removed in the latest beta (384.11 beta 2)

 

[EeK]

Can anyone confirm if DoT is causing problems with Steam?

I'm still on 384.10_2 (RT-AC86U), but I recently installed Stubby DNS (via amtm) and had to uninstall it because it made Steam unusable, due to the low download speeds (even their main website/store wouldn't load properly and take forever to load the few parts without any issue).

 

[GHammer]

Has the IPv6 WAN Gateway issue been addressed?
I missed it in the change log for b2 if it has.

 

[RMerlin]

So if ipv6 is enabled the ntp redirect will not work? Or will only work for ipv4 connection?

It will only work for IPv4 connections. That's because IPv6 is routed rather than NAT'ed, so I can't just as easily NAT that trafic to point it at the router's IP instead. A more advanced transparent proxy would be required, which is beyond the scope of this project.

Beta 2: Client list still shows ZERO. Multiple browsers. Cache cleared. RT-AC1900P

Are you using a /24 or something larger? Networkmap is hardcoded to a /24.

Is there away to tell the router to not allow ntp checks via ipv6 so that way ntp relies only on ipv4?

No. However if you know the server the client tries to access, you could change the resolved IP through dnsmasq to ensure it uses an IPv4 address.

What is the client list populated by?

Before Asus closed its source code it would do an arping to the whole /24 subnet, and look for replies.

yes, port 4022.

Turns out the issue is on that router model, Broadcom implemented its own multicast daemon, but Asus forgot to make that daemon restart also restart udpxy. For now you can work around the issue by starting udpxy manually through a firewall-start script (so it gets properly restarted every time the firewall gets restarted).

can automatic firmware checks still be disabled?

Yes.

 

[RMerlin]

Has the IPv6 WAN Gateway issue been addressed?
I missed it in the change log for b2 if it has.

Only the RT-AX88U should have the issue AFAIK, the route handling was fixed for other models in 45713. However the fix is too intricate for me to deduce where it lies in the thousands of line changes from the previous GPL, so a fix will have to come with a future GPL release from Asus. In the mean time it can easily be worked around through the custom script previously posted in this thread.

 

[truglodite]

Can anyone confirm if DoT is causing problems with Steam?...

I responded in another thread that I was also having issues with steam+stubby. I noticed Eek and I both have ac86u routers. Anyone else with another router having issues with steam+stubby? ...or others having the issue on an ac86u?

 

[RMerlin]

Traceroute not working properly.
View attachment 17387

Works for me. Can you try again in case the clock got changed in the middle of the traceroute?

I responded in another thread that I was also having issues with steam+stubby. I noticed Eek and I both have ac86u routers. Anyone else with another router having issues with steam+stubby? ...or others having the issue on an ac86u?

Try a different DoT server. Cloudfalre does not support EDNS, so they might have issues with some CDNs.

 

[Swistheater]

It will only work for IPv4 connections. That's because IPv6 is routed rather than NAT'ed, so I can't just as easily NAT that trafic to point it at the router's IP instead. A more advanced transparent proxy would be required, which is beyond the scope of this project.



Are you using a /24 or something larger? Networkmap is hardcoded to a /24.



No. However if you know the server the client tries to access, you could change the resolved IP through dnsmasq to ensure it uses an IPv4 address.



Before Asus closed its source code it would do an arping to the whole /24 subnet, and look for replies.



Turns out the issue is on that router model, Broadcom implemented its own multicast daemon, but Asus forgot to make that daemon restart also restart udpxy. For now you can work around the issue by starting udpxy manually through a firewall-start script (so it gets properly restarted every time the firewall gets restarted).



Yes.

So I managed to test that it was in fact working with my computer (it worked via IPV4) i could see that the connection was assured on the connections page... my main concern is there away to block it from trying to get the time via the ipv6 connection with firewall rules? or will it only try to gain time via ipv4?

 

[Gar]

Ref the ntp server, if I want to use it do I need to do anything beyond enabling it? Will any/all clients know what to do? I saw the comments about configuring clients but am unsure what that means.

 

[Swistheater]

Ref the ntp server, if I want to use it do I need to do anything beyond enabling it? Will any/all clients know what to do? I saw the comments about configuring clients but am unsure what that means.

it works for me just by adjusting the gui.

 

[Butterfly Bones]

Ref the ntp server, if I want to use it do I need to do anything beyond enabling it? Will any/all clients know what to do? I saw the comments about configuring clients but am unsure what that means.

If you set the ntp server to Yes, another choice pops up to intercept all clients, Yes or No.

 

[Gar]

If you set the ntp server to Yes, another choice pops up to redirect all clients, Yes or No.

I chose yes, is that it? All seems to work as before. Thought there might be individual settings beyond that and didn't know what to do. Thanks

 

[Swistheater]

from what i can tell everything appears to be working good.

 

[Swistheater]

I chose yes, is that it? All seems to work as before. Thought there might be individual settings beyond that and didn't know what to do. Thanks

the only thing i think you can do in a conf file is specify servers, but i don't think you need to as long as you pick two good ones inside administration page.

 

[Gar]

the only thing i think you can do in a conf file is specify servers, but i don't think you need to as long as you pick two good ones inside administration page.

You mean for getting the time, I did that. Seems to be all I can do.

 

[RMerlin]

So I managed to test that it was in fact working with my computer (it worked via IPV4) i could see that the connection was assured on the connections page... my main concern is there away to block it from trying to get the time via the ipv6 connection with firewall rules? or will it only try to gain time via ipv4?

A firewall rule could block it, however you run the risk of having a device with no proper clock sync, which is why I opted not to implement this. The primary goal was not to prevent devices from reaching outside servers, it was to reduce the number of outbound connections to remote servers.