[Fork] Asuswrt-Merlin 374.43 LTS releases (Archive)

[john9527]

@john, with the default you mean the ACK, SYN, ICMP which are on highest no matter what rules you set(unless you switch them off)

Correct....and if you switch them off they will go into the 'default' priority.

 

[ColinTaylor]

So will your setting work for me since our priorities are the exact opposite?

I think it should. But it might need to be revised if you have very low bandwidth.

in your case the TV gets high priority and in my case the ps4
i however do not see your ps4 in the rules, does this mean it uses the default settings for that or does it default to low?

Exactly. It's not specified individually, so any of my devices (apart from pav and TV) will either use the "File Transfer", "BitTorrent" or "Default Priority Level" depending on what ports they're using (and in the case of ports 80, 443 and 8080, transferring more than 2048k).

 

[Gravityz]

50Mbit down, 5Mbit up (not spectacular but before the ps4 pro sufficient)

I think it should. But it might need to be revised if you have very low bandwidth.
Exactly. It's not specified individually, so any of my devices (apart from pav and TV) will either use the "File Transfer", BitTorrent" or "Default Priority Level" depending on what ports they're using (and in the case of ports 80, 443 and 8080, transferring more than 2048k).

 

[Trebuin]

John,
I'm about to pull my hair out trying to figure out why the crashing keeps occurring. Here's the latest log:

https://www.dropbox.com/s/eqwgagyyxly6h0y/AC66U debug.rtf?dl=0

ps, user is not the actual user name

 

[Mr_Andy]

Sorry, but I can't recreate this. Once you enable DNSCrypt, the WAN DNS servers are replaced with the DNSCrypt servers in dnsmasq (127.0.0.1:65053). dnsleaktest.com then showed the DNSCrypt server whether or not the DNSFilter global router setting was enabled.

To see what may be going on, I need to see
killall -s USR1 dnsmasq (this will dump the dnsmasq stats to the syslog so we can verify the DNSCrypt servers are correctly set)
iptables -t nat -nvL (both with and without DNSFilter)

Also, if you are using a VPN Client, that can affect things as well.



Sorry, but again I can't recreate.
ASUSWRT-Merlin RT-AC68U_3.0.0.4 Wed Jan 11 18:22:20 UTC 2017
admin@AC68P-06650:/tmp/home/root# dnscrypt-update-resolvers.sh
Updating the list of public DNSCrypt resolvers...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 31960 100 31960 0 0 18413 0 0:00:01 0:00:01 --:--:-- 37292
Done

Are you sure you don't have another curl installed, maybe via entware? What's the result of entering
which curl

I'm torn on this one.....it's not just the ip, it's also a port and a key that would need to be entered. Currently one way around it would be to edit the resolvers file in /jffs and add your server info. But I'm not sure this will remain possible in the future once I add signature verification to that file.

Hi John

Dnscrypt (set to Cisco OpenDNS) with the Parental Control DNS filter enabled with global filter mode set to 'Router' now appears to be working just fine now for me, looks like a restart of dnsmasq was required after enabling dnscrypt. or just reboot the router which I did

then performing a txt dns lookup to debug.opendns.com reports that DNSCrypt is enabled.

nslookup
Default Server: router.asus.com
Address: 192.168.0.1

> set type=txt
> debug.opendns.com
Server: router.asus.com
Address: 192.168.0.1

Non-authoritative answer:
debug.opendns.com text =

"server m1.lon"
debug.opendns.com text =

"flags 20 0 50 19500007C00400010C1"
debug.opendns.com text =

"originid 39511475"
debug.opendns.com text =

"actype 2"
debug.opendns.com text =

"bundle 8173407"
debug.opendns.com text =

"source 195.166.151.61:50148"
debug.opendns.com text =

"dnscrypt enabled (717473654A614970)"

(root) ??? unknown type 41 ???
>



regards
Andy

 

[john9527]

John,
I'm about to pull my hair out trying to figure out why the crashing keeps occurring. Here's the latest log:

https://www.dropbox.com/s/eqwgagyyxly6h0y/AC66U debug.rtf?dl=0

ps, user is not the actual user name

There is one thing funny I see in your log....the router is having problems starting httpd. It tries to start it normally, then the watchdog kicks in and keeps trying to start it since it can't find it.

Are you using https access for the AP? When is the last time you reformatted jffs? It's possible that the code growth has partially corrupted the jffs space, and if using https the cert can't be found or is corrupted. You might try and reformat jffs and gen a new cert or reload your existing cert..

 

[ocram59]

Hi @john9527
Thank you once again for your great work and support.

I am using 22E2 on RT-N66u

In QOS statistics only the download statistics are shown
Upload page section is jus empty besides the header wth
Class Total Rate Packet rate labels

Is it a specific problem with RT-N6u?


Thank you in advance

 

[john9527]

Hi @john9527
Thank you once again for your great work and support.

I am using 22E2 on RT-N66u

In QOS statistics only the download statistics are shown
Upload page section is jus empty besides the header wth
Class Total Rate Packet rate labels

Is it a specific problem with RT-N6u?


Thank you in advance

Nothing I am aware of. Two things if you would...
- open the browser console and look for any errors
- please log into the router and send me the output of
/tmp/qos
via PM.

 

[ocram59]

Nothing I am aware of. Two things if you would...
- open the browser console and look for any errors
- please log into the router and send me the output of
/tmp/qos
via PM.

Thanks alot, sent you output of /tmp/qos

 

[john9527]

Thanks alot, sent you output of /tmp/qos

I just checked my N66 (it currently not hooked up to the WAN), but I do get two tables populated with zero's and pie charts that are just a line(no data) for both updoad/download. Checked both Chrome and Firefox.

 

[ocram59]

I just checked my N66 (it currently not hooked up to the WAN), but I do get two tables populated with zero's and pie charts that are just a line(no data) for both updoad/download. Checked both Chrome and Firefox.

I get pie chart and table data fully populated for downoad and no pie chart at all and just table header for upload.

Same behavior in IE11, Chrome and Firefox

 

[Trebuin]

There is one thing funny I see in your log....the router is having problems starting httpd. It tries to start it normally, then the watchdog kicks in and keeps trying to start it since it can't find it.

Are you using https access for the AP? When is the last time you reformatted jffs? It's possible that the code growth has partially corrupted the jffs space, and if using https the cert can't be found or is corrupted. You might try and reformat jffs and gen a new cert or reload your existing cert..

That line is actually what caused me to thing something external to cause the problem, but no solution yet.

I've been reformatting the jffs space using the gui frequently, to include yesterday & during my troubleshooting process. I have nothing I use on the jffs apart from the log. I'm not using https, but I will give it a try in case things are not working via the normal http route.

 

[john9527]

That line is actually what caused me to thing something external to cause the problem, but no solution yet.

Another possibility might be an address conflict with the router address?

 

[Trebuin]

Another possibility might be an address conflict with the router address?

I just formatted the jffs & went https, fault still there. I have the master router designating this router to use 192.168.1.2 as the address, & the wifi repeater as 1.3. The master router is 1.1, of course. I don't think anything is using a static address but I can go through the 30 someodd devices to make sure. Also, since I came back down from the latest merlin, would it make sense to roll back to one of the original asus firmware (or older merlin fw) in case some of the code was not rolled back correctly?

 

[Trebuin]

Another possibility might be an address conflict with the router address?

I just updated the log, same link. Redownload it & look at the end. SSL is really pissing the router off now.

 

[Trebuin]

Another possibility might be an address conflict with the router address?

Check your messages, I dumped the nvram to see if anything is hanging on after the factory default...I've done that several times since moving to back to this firmware.

 

[john9527]

I just updated the log, same link. Redownload it & look at the end. SSL is really pissing the router off now.

With https, you are now running into the curl https bug that was previously reported. Switch back to plain http.

 

[Trebuin]

With https, you are now running into the curl https bug that was previously reported. Switch back to plain http.

I'm manually cleared the nvram & am doing a full setup. Usually it's quick, but I'm making sure all the odd things are turned off this time, like STP

 

[punchsuckr]

It's not a reboot, it's a restart of the wan interface.....so wifi stays connected, but of course won't have internet access until it completes.

I pointed it out because on prev versions, any changes on this page resulted in 20% increments...guessing this change is because of dnscrypt.

I've been trying to recreate this one but haven't been able to. I thought I had it once, but the dnscrypt server was being flakey and my WAN really did appear down.
A couple of questions.....
Are you running dual wan?
What is your 'Redirect to error page' setting?

No dual wan here and redirect setting is never which is default I believe. How about a full soft reboot for changes? I think it takes the same amount of time for that counter anyways...but I know it's a dirty fix for something non reproducible at your end

And a final note to all......one thing I've seen is that some of the DNSCrypt servers can be somewhat erratic. If you are having trouble, try a different server first.

I agree, with adguard dns it was a whole different level, the router would tell me wan was up but ddns couldn't update and neither could I access any website after making changes to any settings on the page. Fixed only after 2 reboots. Since then switched to dnscrypt.fr and eu servers.

 

[BuTTuS]

Hard to make a call here.....everyone's environment is different. But in general the AC class routers have the potential for better performance.

For the routers that are supported, you can still load this fork via the ASUS Firmware Recovery Tool if it comes with the newer code that prevents going backwards. But check the supported list, particularly for the AC68. AC68 rev C1 and later are not supported due to a requirement for a new SDK. Also, the new AC66-B1 with the ARM processor upgrade is not supported.

Thanks, that worked just fine. Does future updates need to be installed using the recovery tool as well, or is that a one time "fix"?