[Fork] Asuswrt-Merlin 374.43 LTS releases (Archive)

[BWR]

@BWR - Just to make sure I understand....it's correct the first time you select the page, but incorrect when you change the 'Frequency' selection?.

Yes, the first time I can load the page just fine. Then I go to the frequency dropdown and try to switch, and it redirects me to the URL without the port and the interface is not there of course. If I then add the port to the URL and manually load the page, the frequency and settings have been switched (which I guess means the form was submitted successfully, just the redirect doesn't work as it should).

Something occured to me, the AP's which have a one to one port forwarding (TCP/8010 router -> TCP/8010 AP web interface) work correctly. It seems the problem occurs only when the forwarded port is not the same as the firmware web interface is run on.

 

[GHammer]

I have the same score 17/20 on: http://ipv6-test.com/
but with :http://test-ipv6.com/ ( 9/10)
and : http://ipv6test.google.com/ ( said im ready for the Future )

Disabling Ipv6 Firewall show same scores. I got ESET Smart Security 8 and when i disable Firewall in ESET my score reach 19/20 on ipv6-test.com, same score 9/10 on test-ipv6.com and Ipv6test.google( im still ready for the Future )
I have never tried with Windows Firewall,and yes the firewall in Windows 7 services is deactivated.
So my question is... ICMPv6 filtering is very important? Cause my ipv6 work great with the fork and i dont see any differences between 17/20 or 19/20 and i love ESET.

Thanx

PS: Same scores with all fw 374.xxx,376 and 378 since Eset v6, even with rebooting router

I do not run any antimalware on my system.
Visiting the same site that gave you 7 and 9 of 10, I get 10/10.
All firewall settings are default, except for the Comcast IPv6 tweak in the GUI.

 

[RogerSC]

I have the same score 17/20 on: http://ipv6-test.com/
but with :http://test-ipv6.com/ ( 9/10)
and : http://ipv6test.google.com/ ( said im ready for the Future )

Disabling Ipv6 Firewall show same scores. I got ESET Smart Security 8 and when i disable Firewall in ESET my score reach 19/20 on ipv6-test.com, same score 9/10 on test-ipv6.com and Ipv6test.google( im still ready for the Future )
I have never tried with Windows Firewall,and yes the firewall in Windows 7 services is deactivated.
So my question is... ICMPv6 filtering is very important? Cause my ipv6 work great with the fork and i dont see any differences between 17/20 or 19/20 and i love ESET.

Personally, I use Nod32 antivirus, but not the Eset firewall. Works just fine for me. All my clients have built-in firewalls, and then there's the router firewalls, too. So I don't feel the need for the Eset firewall, but really like the Eset antivirus. Fast, low-impact, and works for me. And I get the ICMPv6 packets I'm supposed to get, which is a good thing. And 10/10 and 19/20, as well.

 

[rsnhakan]

Guys, give me a reason to use this firmware update of Fork.

I am still using 3.0.0.4.374.35_4-sdk5 of Merlin, and this firmware is awesome! No more lose of connections at the thirth floor. In my neighbourhood there are like 5 Wi-Fi connections that my router is receiving. So I think I don't need all security patches?

 

[cofetym]

If your not concerned about possible router vulnerabilities, then stay where you are. Why do you need to be convinced

 

[RogerSC]

Guys, give me a reason to use this firmware update of Fork.

I am still using 3.0.0.4.374.35_4-sdk5 of Merlin, and this firmware is awesome! No more lose of connections at the thirth floor. In my neighbourhood there are like 5 Wi-Fi connections that my router is receiving. So I think I don't need all security patches?

You could just try it...the lowest rent way to do that is to save your current configuration in a file using the firmware backup functionality. Then flash the new firmware, reset to defaults, and do manual configuration from there. Then if you want to go back to the old firmware, you've saved your configurations, and it is easily done. Just flash the old firmware, reset to defaults, and restore your saved configuration file.

Personally, I do care about security on my router, which is the only thing at my house that's on the internet directly and is what is getting scanned all the time by those looking for computers to hack and take over. Security is a lot more than just WiFi security.

Obviously, this is up to you, just do what makes you happy. But do some reading about internet security if you don't understand why you would want to fix security problems.

 

[Vandergraff]

Well, geeze, after reading the last couple of replies, I just asked myself the same question. Same firmware, should be the same resulting ip6tables rules. So I just rebooted my router, and guess what? Got 19/20 on that test as well. Not sure what happened there, same thing happened when I tried 378.50_Beta the first time...then jiggled things around a little, and went up to 19/20. Odd, but okay, I guess.

I suppose that extra reboot when I see 17/20 on that page is now part of my firmware upgrade procedure *smile*.

In my case it depends on the host device I test from.

The router seems to allow 'ICMPv6 Echo Request's - but your device firewall may or may not.

On a Windows PC with Kaspersky Internet Security the firewall defaults to 'ICMPv6 Echo Request' blocked so I get 17/20. If I change the setting in Kaspersky to allow 'ICMPv6 Echo Request's I get 19/20. IOS devices seem to block 'ICMPv6 Echo Request's while using Windows firewall on another machine allows 'ICMPv6 Echo Request's. (Edit my recollection on IOS devices was wrong - they also allow 'ICMPv6 Echo Request's)

So it varies from device to device whether I get 17/20 or 19/20

You can also try the 'Online IPv6 TCP/UDP Port Scanner' http://ipv6.chappell-family.com/ipv6tcptest/

Here you'll get a warning if it is allowed and no warning if blocked....

I am running V7 - but all the versions of Merlin and the fork I have tried behave the same (and I understand correctly). Its the local devices that are making decision to block or not.

 

[john9527]

AFAIK, the IPv6 spec does not allow for blocked echo requests....so enabling in the host firewall actually violates spec.

 

[Vandergraff]

AFAIK, the IPv6 spec does not allow for blocked echo requests....so enabling in the host firewall actually violates spec.

Thanks for confirming that.

Its interesting that Kaspersky blocks by default.

I will unblock in the Kaspersky firewall on that machine

 

[sbailey4]

AC speeds dropped

Hi Guys, I flashed this version last night and did a factory reset and reboot. All worked except my 5ghz wireless AC speeds have dropped to like wireless N. Specifically iPhone 6's were getting 175-270 downloads and 30 up. Now back to 35 or so. Router shows them connected to 5G and linked at 433. I flashed Merlins 376.49_5 to see if I could get it back working and still the same. This is an RT-AC66R and speeds on hardwired is anywhere from 367 to 561 down and 30 up. My laptop on wireless N card can get 80-100 down/30 up even now. Wireless log shows connected to 153/80 MHz.

Settings: Mode=n/ac mixed, bandwidth 20/40/80, channel=Auto/Auto and band 1 checked. Using WPA2/AES. Was working great on latest stock ASUS firmware (went back for the last 2 security changes they made) Any ideas?

 

[john9527]

@sbailey4 - In the fork code there is no N/AC mixed setting, you need to select Wireless Mode=Auto for AC mode to be active.

 

[slvrscoobie]

Did I see somewhere that there was a way to enable to Gui interface from Merlin on this fork? came from the latest merlin to make some adjustments only available up to this firmware. I thought I saw there was some switches that could be enabled for CPU / Wireless usage in the main panel?

 

[john9527]

Did I see somewhere that there was a way to enable to Gui interface from Merlin on this fork? came from the latest merlin to make some adjustments only available up to this firmware. I thought I saw there was some switches that could be enabled for CPU / Wireless usage in the main panel?

No, sorry. There are some custom options (tweaks) that are unique to this fork that can be set, but the new gui additions in the later firmware are not among them and are beyond the scope of the fork.

 

[sbailey4]

@sbailey4 - In the fork code there is no N/AC mixed setting, you need to select Wireless Mode=Auto for AC mode to be active.

Yes sorry that was selected with your firmware. I have reverted back to merlins and ASUS stock and the same issue. Posted those settings. Cant figure out why other connections seem fine just the AC seems to be bad. Also wondering if Ookla is having trouble in general since yesterday as most of those sites are giving poor results even from PC. All started after flashing (at least when I noticed) so wondering if something got jacked in router or just coincidence. This morning I restored back to 376.3754 ASUS stock and LAN speedtest to ISP I got 611 down. On wireless-N laptop getting 85-100 down. The wireless goes down to like 25-30 if use any other speedtest.net server. Still iPhones on Wireless-AC are getting 15-17 down whereas I was getting anywhere from 175-271. Starting to wonder if speedtest.net having issues and thats is what was using on iPhones to test with and just happened about same time I updated firmware. I was expecting your build to bump me back to the 271 mbps range I got in an earlier Merlin build (376.49_4) that has since changed to the 175 range. Problem is it went the ther way!

 

[john9527]

@sbailey4 - You may want to first test speeds just local to your LAN....see point (4) in this post.....speedtest.net can vary dramatically between servers.

http://forums.smallnetbuilder.com/showpost.php?p=145045&postcount=435

 

[sbailey4]

Thanks John will give it a shot! Just was wondering if maybe this was a known issue with this build with a known solution.

[Edit] Took a look at that utility but that is only for PC's not for phones. However there is an app thats called WIFI Sweetspots that actively monitors speed as you walk around to select the "sweetspot" for placing the router or where you will have the best signal from your router. Its testing from itself to the router only. Anyway using that I am seeing the 275-279 Mbps while on 5G- AC band, of course while in close proximity to the router (other side of wall from router). It drops as you move away or upstairs etc. as expected. On the 2.4 ghz band showing 50 to 65 in the same spot. So AC definitely working. As stated I am back on stock firmware but I suspect no difference as my other results were the same from your build to merlins to stock. So apparently speedtest.net is just having issues because I was consistently getting good speeds reported until recently. Thanks again for the info!

 

[john9527]

Thanks John will give it a shot! Just was wondering if maybe this was a known issue with this build with a known solution.

One thing....you didn't mention which router you are using? Depending on the options you are using, you could be disabling CTF which can reduce the throughput (but that doesn't follow since I think you said you are getting good speeds on a wired connection).

 

[KGB7]

Thanks John will give it a shot! Just was wondering if maybe this was a known issue with this build with a known solution.

No one else is having issues, just better performance and better experience then OEM firmware.

 

[Trebuin]

For the first time with this fork, I'm probably going to be rolling back to 6. My asus 66r is running in repeater mode and since this upgrade cannot keep the usb drive connected past 6 days. It appears connected in the GUI, but is not present anywhere on the network using SMB. This can be fixed by turning smb off and on momentarily.

The second thing is that performance seems to have dropped. I'm not using the AC feature that is mentioned above, but speed in N is unpredictive. My ISP has a solid 50mbps but speed testing anything on the network shows that it just stops functioning at small intervals (dips down to zero during the test). Connecting to the master router does not show this problem. There's nothing in the log to indicate the source of the problem. Both the 2.4 and 5g sides show the same issue.

Edit: in addition, the repeater is using the 2.4 side, 20mhz, always has been. The 5.0 side has always acted as bad as the 2.4 side is acting this version.

 

[sbailey4]

One thing....you didn't mention which router you are using? Depending on the options you are using, you could be disabling CTF which can reduce the throughput (but that doesn't follow since I think you said you are getting good speeds on a wired connection).

Sorry it was in the first post only, AC66R. See the edit just above. Seems that internal network is Ok and speedtest.net may be the issue. CFT is enabled. Appreciate the follow-up.