Voxel Custom firmware build for R7800 v. 1.0.2.82SF & v. 1.0.2.82.1SF & v. 1.0.2.82.2SF

[Voxel]

Continuation of

. . .
https://www.snbforums.com/threads/c...0-2-80sf-v-1-0-2-80-4sf-v-1-0-2-80-5sf.66275/
https://www.snbforums.com/threads/custom-firmware-build-for-r7800-v-1-0-2-81sf-v-1-0-2-81-1sf.68365/

New version of my custom firmware build: 1.0.2.82SF.

Changes (vs 1.0.2.81.1SF):

1. DNSCrypt Proxy v.2 is upgraded 2.0.44->2.0.45.

(see https://github.com/DNSCrypt/dnscrypt-proxy/releases for details and changes in config).​

2. iptables package is upgraded 1.8.6->1.8.7.
3. ipset package is upgraded 7.9->7.10.
4. libnetfilter_conntrack package is upgraded 0.9.1->1.0.8.
5. tcpdump package is upgraded 3.9.8->4.9.3.
6. ethtool package is upgraded 5.9->5.10.
7. libusb package is upgraded 1.0.23->1.0.24.
8. sysstat package is upgraded 12.4.1->12.4.2.
9. nano package is upgraded 5.4->5.5.
10. libreadline package is upgraded 8.0->8.1.

[Edited]

New version of my custom firmware build: 1.0.2.82.1SF.

Changes (vs 1.0.2.82SF):

1. Toolchain: Go is upgraded 1.15.6->1.15.7.
2. Toolchain: binutils version is upgraded 2.35.1->2.36.
3. wget package is upgraded 1.20.3->1.21.1.
4. ca-certificates package is upgraded 20200601->20210119.
5. curl package is upgraded 7.74.0->7.75.0.
6. net-wall script: special processing IPv6 option 'net-wall -6 start' or 'net-wall -6 restart' (thanks to HELLO_wORLD).
7. iprange 1.0.4 package is added (Aegis, HELLO_wORLD).

[Edited]

Quickfix/Snapshot version 1.0.2.82.2SF.

Changes (vs 1.0.2.82.1SF):

1. Toolchain: Go is upgraded 1.15.7->1.15.8.
2. Toolchain: binutils version is upgraded 2.36->2.36.1.
3. Fix NG/DNI bug in net-lan for ReadyCLOUD ('alish.sh'->'alias.sh') (thanks to kamoj).
4. util-linux package is upgraded 2.36.1->2.36.2.
5. ubus package is upgraded 2020-12-04->2021-02-15.


The link is:

https://www.voxel-firmware.com (thanks to vladlenas for his help with hosting).

Voxel.

 

[HELLO_wORLD]

THANK YOU!!!!!

 

[microchip]

Was fighting a bit with the new config of dnscrypt-proxy-2. After 10 minutes was able to get it working. The rest works without issues

NG just released a new .80 version that has unspecified "security fixes"

 

[bartj12]

BIG thanks!!

 

[Voxel]

NG just released a new .80 version that has unspecified "security fixes"

I know, but concrete changes (a la "fixes") are unknown. Only guessing. The last GPL codes from NG/DNI are 1.0.2.74. There was 1.0.2.78 and 1.0.2.80 released after that. Most interesting since 1.0.2.78 is changing uhttpd --> lighthttpd for WebGUI. But not the latest version. This lighthttpd is used in ORBI firmware, so of course its use is step forward in spite of not fresh version.

1.0.2.80 vs 1.0.2.78: changes in "cloud" (ReadyCLOUD): they now are using binary '/sbin/cloud' instead of script. Most probably it is these 'security fixes'. Plus changes in lighthttpd certificates (security fixes(?)). But a lot of CVEs are left

Also some changes in the 'pot' package (2012):

. . .
/************************************************
* functions implemented in POT flash partition *
* Delta Networks Ltd. (R) 2012 *
************************************************/
. . .



see https://github.com/SVoxel/R7800/tree/master/package/pot for details of what is 'pot'.

I cannot say more, because no GPL source codes for .78 and .80:

https://kb.netgear.com/2649/NETGEAR-Open-Source-Code-for-Programmers-GPL

Voxel.

 

[wurstbrot]

Maybe the dnsmasq CVE ?

DNSPOOQ - JSOF

Back to Disclosures DNSpooq – Kaminsky attack is back! 7 new vulnerabilities are being disclosed in common DNS software dnsmasq, reminiscent of 2008 weaknesses in Internet DNS Architecture Overview Impact […]

www.jsof-tech.com

 

[Voxel]

Maybe the dnsmasq CVE ?

Maybe. But not only.

These are rather new discovery (CVE). 1.0.2.80 still using dnsmasq 2.78 so add also CVE-2017-15107.


P.S.

Critical Netgear Bug Impacts Flagship Nighthawk Router

Have you all see this one? Dozens of routers are patched by Netgear as it snuffs out critical, high and medium severity flaws. Read it all at https://threatpost.com/critical-netgear-bug-impacts-nighthawk-router/153445/

www.snbforums.com

Voxel.

 

[LeKeiser]

New firmware installed this morning. Again, and again, Thank You Mr Voxel!!!

 

[Sizzlechest]

Had to reset the router and restore the settings from backup. It was asking to set the password. I restarted and it was fine for about a minute, then lost all network access. I couldn't even reliably connect to the router login page. Everything works great now. It sounds like this hits everyone eventually. I was lucky to never have had to do a router reset and restore until now.

 

[scooter2765]

Thanks!!

 

[Gallo]

Thank you kind sir, your efforts are well appreciated

 

[B-dog66]

Up and running! Big thanks @Voxel !

 

[B-dog66]

What are your opinions about to use a Raspberry Pi 4 for a VPN gateway? Would it be faster than straight from the router openvpn?

 

[HELLO_wORLD]

What are your opinions about to use a Raspberry Pi 4 for a VPN gateway? Would it be faster than straight from the router openvpn?

IMHO, this is the best way to go for VPN. Don’t know about RP4, but such small devices are powerful enough.

 

[bartj12]

What are your opinions about to use a Raspberry Pi 4 for a VPN gateway? Would it be faster than straight from the router openvpn?

I have used pivpn (wireguard) on rp4, works like a charm!
Personally I leave my router (r7800) do the router stuff and use RP for the rest (pihole dns incl dhcp, hassio, wireguard VPN etc.)

 

[kokishin]

Hi @Voxel,

I just installed 82SF. 7800 reported I was installing an older firmware version which of course I ignored. Other than that, my 7800 is up and running sweet.

Thank you!

 

[Voxel]

reported I was installing an older firmware version which of course I ignored

Just ignore such warnings, right.

Voxel.

 

[IAMP373R]

Hello Voxel, i am a newbie here, i have followed your firmware documentation to install entware on 81.1sf, i also installed Kamoj add-on too.
Am i need to install kamoj add-on again after upgraded to 82sf? or do i need to remove kamoj add-on first in order to install 82sf?
btw very happy to work with your custom firmware, compare it with official firmware is day and night different.

 

[kamoj]

Hi and welcome!
You should:
1. Install Voxel .82SF.
2. Install Kamoj add-on.

Hello Voxel, i am a newbie here, i have followed your firmware documentation to install entware on 81.1sf, i also installed Kamoj add-on too.
Am i need to install kamoj add-on again after upgraded to 82sf? or do i need to remove kamoj add-on first in order to install 82sf?
btw very happy to work with your custom firmware, compare it with official firmware is day and night different.

 

[IAMP373R]

Hi and welcome!
You should:
1. Install Voxel .82SF.
2. Install Kamoj add-on.

i also create the swap file on my usb stick. do i need to type "swapon swap" again?
also thanks for your add-on, it is awesome