[Fork] Asuswrt-Merlin 374.43 LTS releases (Archive)

[phx28777]

Most of the problems are probably due to the lack of time sync, but the router should still resolve DNS anyway.

Can you post a screenshot of your WAN settings? And NTP servers from the Administration/System page?

All of John's 40Ex releases have been working great with DoT
on my RT68

As a workaround try using 216.239.35.0 (google Public NTP server) for your primary NTP server

 

[szimat]

Sorry guysy, but is John back now? I see you post to him and a new release is available, still I don't see John posting?

 

[BloodFX]

Sorry guysy, but is John back now? I see you post to him and a new release is available, still I don't see John posting?

Pretty sure I saw him post dev build e9 could be wrong.

 

[dave14305]

Sorry guysy, but is John back now? I see you post to him and a new release is available, still I don't see John posting?

All we know is new builds have been appearing in his OneDrive development directory in the past month, but his last forum post was almost 6 months ago.

 

[dave14305]

I'm also experimenting with forcing the router to use WAN DNS for its lookups instead of DNSMASQ, like Merlin did by default in 384.12. I think it makes sense to do so, but not sure if there are any side-effects unique to John's fork.
My /jffs/scripts/wan-start script:

#!/bin/sh

[ -f "/tmp/resolv.conf" ] && ln -sf /tmp/resolv.conf /etc/resolv.conf

EDIT: I see this is fruitless because dnsmasq relinks the /etc/resolv.conf to /rom/etc/resolv.conf AFTER the dnsmasq.postconf script runs, so I can't really enforce this. Learned something new!

Eureka! It didn’t occur to me at first, but in 40E4 John implemented the service-event-end script execution. So I’ve created /jffs/scripts/service-event-end with:

#!/bin/sh

ACTION="$1"
SERVICE="$2"

if [ "$ACTION" = "start" ] || [ "$ACTION" = "restart" ] && [ "$SERVICE" = "dnsmasq" ]; then
        [ -f "/tmp/resolv.conf" ] && ln -sf /tmp/resolv.conf /etc/resolv.conf
fi

 

[alfie]

Most of the problems are probably due to the lack of time sync, but the router should still resolve DNS anyway.

Can you post a screenshot of your WAN settings? And NTP servers from the Administration/System page?

Hi, changed primary NTP as suggested by @phx28777 but DDNS and DNS are still not resolving.
https://postimg.cc/gallery/2ubaju9qa/

 

[dave14305]

Hi, changed primary NTP as suggested by @phx28777 but DDNS and DNS are still not resolving.
https://postimg.cc/gallery/2ubaju9qa/

What happens if you disable “Redirect to Error Page” on the WAN tab?

 

[alfie]

What happens if you disable “Redirect to Error Page” on the WAN tab?

“Redirect to Error Page” disabled and apparently nothing changes

Do you need any other log?

 

[dave14305]

“Redirect to Error Page” disabled and apparently nothing changes

Do you need any other log?

Questions:

1. Does your router have a public WAN IP address assigned when Internet is "broken"?
2. Can you ping 1.1.1.1 from your router using the Network Tools / Network Analysis page in the GUI?
3. Can you nslookup www.snbforums.com from the Network Tools / Network Analysis page in the GUI?
4. Are you comfortable posting the entire syslog from the router, or at least the section where you enable DoT?
5. Is it possible your ISP has blocked DoT, or was this working before on v39E3 of the fork?

 

[BloodFX]

It works fine on e3 anything after e3 and the problem starts.

 

[dave14305]

Are these issues on MIPS routers (N66U, AC66U)? From the changelog it reads that John backed out his stubby workaround for MIPS because it was incorporated upstream in getdns. Maybe it's not working as it should.

Is stubby running at all?

 

[dave14305]

I dusted off my old N66U and put 40E9 on it, and sure enough, Stubby throws an error just trying to parse the config file, the same way when John reported it to the Stubby devs last year.

So something needs fixing.

 

[alfie]

Questions:

1. Does your router have a public WAN IP address assigned when Internet is "broken"?
2. Can you ping 1.1.1.1 from your router using the Network Tools / Network Analysis page in the GUI?
3. Can you nslookup www.snbforums.com from the Network Tools / Network Analysis page in the GUI?
4. Are you comfortable posting the entire syslog from the router, or at least the section where you enable DoT?
5. Is it possible your ISP has blocked DoT, or was this working before on v39E3 of the fork?

1. I see a public WAN with DoT enabled
2. 1.1.1.1 working
PING 1.1.1.1 (1.1.1.1): 56 data bytes
64 bytes from 1.1.1.1: seq=0 ttl=58 time=3.241 ms
64 bytes from 1.1.1.1: seq=1 ttl=58 time=3.139 ms
64 bytes from 1.1.1.1: seq=2 ttl=58 time=3.162 ms
64 bytes from 1.1.1.1: seq=3 ttl=58 time=3.160 ms
64 bytes from 1.1.1.1: seq=4 ttl=58 time=3.137 ms

--- 1.1.1.1 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max = 3.137/3.167/3.241 ms

3. Nslookup fails
4. Log when DoT enabled https://pastebin.com/raw/n4ALy2de
5. Actually DoT is working when v39E3 is installed

Router is MIPS AC66U

What I see here is that NTP is not causing the issue because when I set Google 216.239.35.0 NTP, time sync.
It's a DNS resolver issue.

 

[dave14305]

1. I see a public WAN with DoT enabled
2. 1.1.1.1 working
PING 1.1.1.1 (1.1.1.1): 56 data bytes
64 bytes from 1.1.1.1: seq=0 ttl=58 time=3.241 ms
64 bytes from 1.1.1.1: seq=1 ttl=58 time=3.139 ms
64 bytes from 1.1.1.1: seq=2 ttl=58 time=3.162 ms
64 bytes from 1.1.1.1: seq=3 ttl=58 time=3.160 ms
64 bytes from 1.1.1.1: seq=4 ttl=58 time=3.137 ms

--- 1.1.1.1 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max = 3.137/3.167/3.241 ms

3. Nslookup fails
4. Log when DoT enabled https://pastebin.com/raw/n4ALy2de
5. Actually DoT is working when v39E3 is installed

Router is MIPS AC66U

What I see here is that NTP is not causing the issue because when I set Google 216.239.35.0 NTP, time sync.
It's a DNS resolver issue.

To confirm my theory, what happens if you SSH to the router and run:

stubby -g -C /etc/stubby.yml

EDIT: Nevermind, I see in your syslog a 55 exit code for Stubby, which confirms it.

 

[alfie]

To confirm my theory, what happens if you SSH to the router and run:

stubby -g -C /etc/stubby.yml

EDIT: Nevermind, I see in your syslog a 55 exit code for Stubby, which confirms it.

Thanks Dave
so with this in mind, what should MIPS owners expect?

 

[dave14305]

Thanks Dave
so with this in mind, what should MIPS owners expect?

Stay on 39E3 and wait to see if a new build is posted sometime in the future. John fixed this before, so I'm sure he can fix it again if the GetDNS code isn't right on MIPS.

 

[d0g]

Did you follow every step of this tutorial? https://www.asus.com/support/FAQ/1000814/
The router must be in Rescue mode for the utility to work.
No need to flash with intermediate fw if its for downgrade.

Doesn't the fact that I'm seeing the CFE Mini-Web Server mean I'm in Rescue mode? (I'm on a Mac, using Mac version of restoration utility.)

 

[keef]

Hello. I use Merlin 384.13. I need to install a IPVanish VPN applet. I cannot find a place on Merlin to input the commands to install. Documentation for DD-WRT points to System->Commands however I cannot find a comparable box in Merlin.

thanks, Bj

 

[ColinTaylor]

Hello. I use Merlin 384.13. I need to install a IPVanish VPN applet. I cannot find a place on Merlin to input the commands to install. Documentation for DD-WRT points to System->Commands however I cannot find a comparable box in Merlin.

This thread is about John's forked firmware, not Merlin's. That said, neither firmware has a System->Commands option. Asuswrt is not DD-WRT.

 

[L&LD]

Hello. I use Merlin 384.13. I need to install a IPVanish VPN applet. I cannot find a place on Merlin to input the commands to install. Documentation for DD-WRT points to System->Commands however I cannot find a comparable box in Merlin.

thanks, Bj

You are posting to the wrong thread.