I have Voxel's 1.0.2.37SF installed and when I check for a Firmware Update using the Netgear Firmware Update Assistant it states the following:
New firmware is found. Do you want to update the firmware? (Yes) (No)
Current GUI Language Version: V1.0.0.288
New GUI Language Version: V1.0.0.299
Should I install this or not?
Better to do not do it.
Voxel.
Just found out Voxel firmware existed and am stoked. I have many reasons, but chief among them is the ability to port mask on port 123 UDP. ATT blocks source ports of 123 if you use their DMZ+ mode. Dumb. Nothing can use NTP properly. Especially devices with embedded firmware.
Can this FW mask source ports? I would prefer all ports are masked, but would appreciate being able to write my own rules too.
I actually did upgrade the GUI as well as Voxel's 1.0.2.37SF version and I haven't encountered any issues yet. That said I have only just installed it and not fully played with it yet.
By the way, thank you Voxel for your hard work!
You probably use stock firmware 1.0.2.36, but this thread is for custom firmware (not stock).
Voxel.
There was something like this. Try to play with port 1234 and NETGEAR's NTP servers. They added the port 1234 to their servers AFAIK.
P.S.
Regarding 1234:
https://community.netgear.com/t5/Ni...me-behind-Uverse-GigaPower-modem/td-p/1254081
Voxel.
I wonder if using iptables from entware could do this exact thing. Should be a small matter to NAT outgoing UDP traffic on port 123. What do you all think about that? Is iptables easily added?
I would dig in a bit other direction. If you can change 123 to 1234 for your LAN clients and use NETGEAR's NTP servers it would be simplest solution. If not, I'd just try to setup NTP server on my router (Entware) and all clients should use my router.
iptables: NETGEAR uses own firewall. Use of direct iptables is a bit troublesome task. I had to use some tricks to modify its work.
Voxel.
iptables -t nat -A PREROUTING -i eth0 -p udp --dport 123 -j REDIRECT --to-port 1234
but I have zero idea how NETGEAR will handle this. Only one way to find out for sure!
Please check this my post https://www.snbforums.com/threads/c...v-1-0-2-42hf-1-0-2-42hf-hw.40688/#post-342246
regarding NG's firewall. For R9000 but similar for R7800.
Voxel.
Excellent write up on that. I would have beat my head against the wall for some time...
Thanks!
I can't find it in your readme guide. But @Voxel , didn't you write up at once point in time a small guide to be able to change the logon info when ssh'ing into the router? I swear I saw it..... somewhere....
You can use official Entware-ng, but I would suggest to use my version of Entware-ng-3x. First, it is optimized especially for R7500/R7800 and R9000 (e.g. guys from Entware team reported that my version is in 30 per cent faster for some tests even for Cortex-A7). Second, my initial scripts in initial tar are adapted for use with these routers. And third, it has no sense to use Entware-ng with kernel 3.x. My version is Entware-ng-3x i.e. for kernel 3.x.Thanks Voxel. For whatever reason, I thought you documented something about that out.
I have a separate question. I am thinking of installing entware to gain a few packages. Is the unit compatible with Entware-ng repo? Or should we use your specially compiled repo, custom for cortex?
I just think if you ever become bored, and give up support.
Welcome To SNBForums
SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.
If you'd like to post a question, simply register and have at it!
While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!