Custom firmware build for R7800 v. 1.0.2.61SF

[kamoj]

And please, continue the cron talk in another thread.
This thread is about Voxel FW 61SF !

 

[vit5421]

You are not runninmg Voxel FW????
This thread is for Voxel FW.
(crond -c /opt/tmp/mycron/crontabs is only to make you not have to reboot to get cron working)

Lol, I running latest Voxel fw, but was not sure about follow up two lines coz not a Linux pro. Still don't understand but will try. Thank you very much

 

[cdysthe]

I've seen a lot of discussions around ICMP filtering on IPv6 in Netgear firmware. I am running Voxel on my R7800 and there's a setting at the bottom saying IPv6 Filtering > Secured | Open. I tried to set it to open but I still have filtered ICMP on IPv6 so this setting is probably something else? Anyhow, it would be good with an option to disable ICMP filtering on IPv6.

 

[jsmiddleton4]

ICMP IPv6 filtering is a touchy subject.....

Netgear’s mind seems to be made up regardless of any settings and it will always be “On”. Annoying but that seems to be their decision.

 

[vit5421]

I still cant find a way to manually limit the download and specially upload internet speed to improve the bufferbloat. Any proposals?

 

[kamoj]

Just FYI:
These are the outputs from my R7800 when changing "Advanced, Advanced Setup, IPv6": "Internet Connection Type" from IPv6 Disabled to Pass Through

root@R7800:/$ ip6tables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
DROP       tcp      anywhere             anywhere            tcp dpt:www
DROP       tcp      anywhere             anywhere            tcp dpt:domain
DROP       tcp      anywhere             anywhere            tcp dpt:https
DROP       tcp      anywhere             anywhere            tcp dpt:afpovertcp
DROP       tcp      anywhere             anywhere            tcp dpt:zebra

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
root@R7800:/$

root@R7800:/$ ip6tables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
root@R7800:/$

So maybe e.g. ip6tables -L can be used for further investigations?

I've seen a lot of discussions around ICMP filtering on IPv6 in Netgear firmware. I am running Voxel on my R7800 and there's a setting at the bottom saying IPv6 Filtering > Secured | Open. I tried to set it to open but I still have filtered ICMP on IPv6 so this setting is probably something else? Anyhow, it would be good with an option to disable ICMP filtering on IPv6.

 

[e38BimmerFN]

Setting NAT Filter only changes the kind of NAT Cone the R7800 uses, Secure means it will use Port Address Restricted Cone NAT. OPEN means it will use Full Cone NAT. FC is older and a bit less secure than PAR NAT. However, FC NAT has it's uses still, helps in attaining OPEN NAT across the board for two or more game consoles or PCs playing multiplayer online games at the same time. PAR NAT limits this and only the first powered ON console or PC will get OPEN NAT while the others will mostly see Moderate NAT in game. This NAT issue is only on IPv4. The gaming NAT issues isn't a problem for a single game or PC. Supposedly NAT behavior changes when IPv6 becomes the norm and when game devs start fully including IPv6 support in there code. I use Full Cone NAT for my two game consoles and have zero issues. I'll switch back to Secure when there isn't a 2nd game console in the house.

I've seen a lot of discussions around ICMP filtering on IPv6 in Netgear firmware. I am running Voxel on my R7800 and there's a setting at the bottom saying IPv6 Filtering > Secured | Open. I tried to set it to open but I still have filtered ICMP on IPv6 so this setting is probably something else? Anyhow, it would be good with an option to disable ICMP filtering on IPv6.

 

[Ronald G Brookshire]

Continuation of
. . .
https://www.snbforums.com/threads/custom-firmware-build-for-r7800-v-1-0-2-60sf.48805/

New version of my custom firmware build: 1.0.2.61SF.

Changes (vs 1.0.2.60SF):

1. stubby package is added to provide DNS-over-TLS support:

to enable stubby run the commands from telnet/ssh console:

nvram set stubby=1
nvram commit​

and reboot your router; to disable stubby run the commands from telnet/ssh console:

nvram set stubby=0
nvram commit​

and reboot your router.​

2. getdns, unbound, yaml, ca-certificates packages are added (stubby dependences).
3. sqlite3 package is upgraded 3230100->3240000.
4. liblz4 package is upgraded 1.8.2->1.8.3.
5. sysstat package is upgraded 11.0.4->11.6.4.
6. ubus package is upgraded 2018-07-26->2018-10-06-221ce7e7.
7. libevent2-pthreads packages is removed (not used).
8. Toolchain: binutils version is upgraded to 2.31.1.
9. Host tools: two components are upgraded.

The link is:

https://www.voxel-firmware.com (thanks to vladlenas for his help with hosting).

So important notes:

1. stubby (DNS-Over-TLS) is already included into firmware (not necessary to install add-on). To enable stubby run the commands from telnet/ssh console:

nvram set stubby=1
nvram commit​

and reboot your router; to disable stubby run the commands from telnet/ssh console:

nvram set stubby=0
nvram commit​

and reboot your router. Currently it is configured to use Cloudflare servers (DoT). You may customize your config file:

/etc/stubby/stubby.yml

2. dnscrypt-proxy (v. 1) is left in firmware (will be removed in the next release). If both (dnscrypt-proxy and stubby) are enabled, stubby has higher priority and dnscrypt-proxy will be stopped.

Voxel.

Is it safe to do this firmware update. Just bought the x4s, the r7000 speed slowed using the updated firmware.

 

[kamoj]

YES!
I strongly recommed you to go for Voxel's 1.0.2.61SF .
Just download and install!

 

[percy3]

I was forced for a few days to use stock .60 in order to discuss some issues with NG and now, after switching back to .61SF, still cannot believe Netgear router can provide such a stable connection. As a test I've worked for an hour or so via RDP from 2.4 to 5 GHz machine and not a single interruption occurred whilst on.60 session would break up every few minutes.

 

[e38BimmerFN]

Voxel, I'll post this here since I mostly use your FW, however i presume this may stem from stock FW.
My R7800 is in wireless bridge mode. There is a Status window that appears when you log in to the R7800 in this mode. One of the sections is Wireless Settings that gives SSID NAME, what frequency, link rate and connection status. I noticed that today, with v60SF and v61SF, SSID name is correct however Link Rate reads Zero(0) and Connection status says unconnected. The unit is connected and working fine in bridge mode. Happens on both radios.
https://i.ibb.co/K0L99nw/R7800-No-Bridge-Status.png

I'll load up stock FW and see what happens there.
Yes Kamoj add-on reports information in the debug page.

 

[e38BimmerFN]

Loaded up Stock v60 FW and seems that status is there:
https://ibb.co/N1Sfnty

 

[e38BimmerFN]

After testing stock, I applied v61SF again and just did a reset and configured Wireless Bridge. Link Rate reads Zero(0) and Connection status says unconnected.

 

[vit5421]

I have a very strange of 5 GHz AC instability with latest v. 1.0.2.61SF build for r7800. There is no more clients on 161 ch but real wifi speed is fluctuating from 640 mbs to 320 mbs during transferring files from Synology NAS to i7 laptop using intel 9620 adapter.
Any suggestions?

 

[e38BimmerFN]

Does this happen with stock FW?

I have a very strange of 5 GHz AC instability with latest v. 1.0.2.61SF build for r7800. There is no more clients on 161 ch but real wifi speed is fluctuating from 640 mbs to 320 mbs during transferring files from Synology NAS to i7 laptop using intel 9620 adapter.
Any suggestions?

 

[vit5421]

idk about stock, newer use it

 

[e38BimmerFN]

Well voxel bases it's stuff from same that stock comes from so might try it and see. Either it could work or exhibit same issue.

I found a possible UI bug in Voxels FW that I don't see in stock FW.

 

[vit5421]

Netgear builds are very unstable according to many users opinion.
I just wondering if you are experience the same.
It worked all day at very high speed and dropped down twice at the evening. I can see now very low around 90dbm neighbor wifi signal at the same 161ch

 

[e38BimmerFN]

The try of stock FW would be to see if the problem is experienced there. Then you can go back to Voxels. Or try a prior version of voxels FW. Mines is bridge mode so I don't know if I would see this issue. From having two PCs connected to mine, i don't, at least in bridge mode. Seen others mention having wifi problems in various versions of Voxels FW.

 

[Gar]

Used Netgear R7800 may replace old Asus as it's awesome with your new firmware v61SF...thanks!

I will miss the bandwidth control flexibility, but I dont believe that's your fault.

Took a chance on eBay and so far so good.