[Fork] Asuswrt-Merlin 374.43 LTS releases (Archive)

[vx46hD]

Do you have a swap file?

No (at least, I haven't set one).

Looking at the log, there's really no rhyme or reason as to the processes that are getting killed. That, coupled with the fact that it seems you are the only one reporting this type of problem, is leading me to think you may actually have a hardware problem. First thing would be to try and replace the power supply, as when those start getting weak it can lead to all sorts of strange problems.

Thanks for taking a look. As I said I'll upgrade to 36E4, but what's the best way to make sure these problems aren't related to a dodgy flash? Factory reset before/after flashing...?

The power supply is something I'll look at afterwards if it continues.

 

[Grisu]

Factory reset before/after flashing...?

After flashing.
But take the 1 min and do it right before too wont hurt especially in cases there is already something wrong.
And some needed to do things TWICE!
A real power cycle sometimes isnt a bad idea too.

 

[blueshark]

Post the output of the command from the referenced post.....

This can also happen if you update from Merlin and don't do a factory reset.

i did a full reset

edit: how to make change to stubby.yml permanent ?

 

[john9527]

but what's the best way to make sure these problems aren't related to a dodgy flash?

I really don't see anything specifically pointing to the flash....but dropping wireless and what could be ram errors are symptoms of a weakening PS (although nothing is certain)

 

[blueshark]

https://www.snbforums.com/threads/asuswrt-merlin-380-59-ac68u-port-fwd-apply-fail.33895/#post-273422

Also, on the fork, if you are running an OpenVPN server or client, the certs and keys are stored in nvram by default. You need to manually move them over to jffs. See the Merlin_Fork_Options.txt file.

I reset nvram and know is 70%
How to make change to stubby.yml permanent

 

[ColinTaylor]

How to make change to stubby.yml permanent

Use a postconf script.

 

[blueshark]

Use a postconf script.

I know that, but, for some reason stubby.postconf don’t change anything to stubby.yml and if i ran the script manually

/jffs/scripts/stubby.postconf /etc/stubby.yml

Its change are applied

 

[john9527]

@blueshark

Just double checked and postconf for stubby is working as expected....

Generic postconf troubleshooting
- is located in /jffs/scripts
- has the following as the first lines in the file
#!/bin/sh
CONFIG=$1
source /usr/sbin/helper.sh
- has been marked executable with chmod
- has been saved in linux format and not windows format (run dos2unix on the file)
- service has been restarted or the router rebooted

 

[blueshark]

I use script made by @000111

#!/bin/sh
CONFIG=$1
source /usr/sbin/helper.sh
pc_replace "timeout: 2000" "timeout: 5000" $CONFIG
pc_replace "idle_timeout: 5000" "idle_timeout: 10000" $CONFIG
pc_replace "tls_query_padding_blocksize: 128" "tls_query_padding_blocksize: 256" $CONFIG
pc_replace "tls_connection_retries: 5" "tls_connection_retries: 2" $CONFIG
exit

Its executable and linux format

 

[treboR2Robert]

@john9527

I am still running the test 36E3

Is there any difference to 36E4 ?

Did you say you are releasing another one soon ? Like next day or 2 ?

Thanks

 

[john9527]

@blueshark
I did the following....
cd /jffs/scripts
nano stubby.postconf
Copied and pasted from your post into nano and saved
chmod a+rx stubby.postconf
service restart_stubby

Works fine.....

 

[wollyka]

Merlin is still tweaking the new DDNS in his beta.....once he makes a final release I'll take a look at porting it over.

We cannot thank you enough!!

 

[john9527]

@john9527

I am still running the test 36E3

Is there any difference to 36E4 ?

6 changes....documented in the Changelog

Did you say you are releasing another one soon ? Like next day or 2 ?

Yes, picking up fixes for a couple of reported problems....a security fix for a CERT vulnerability and a dnsmasq update (a caching change which seems like it may have some benefits).

 

[treboR2Robert]

6 changes....documented in the Changelog


Yes, picking up fixes for a couple of reported problems....a security fix for a CERT vulnerability and a dnsmasq update (a caching change which seems like it may have some benefits).

Cool ok I'll wait for that one.

Thank you

 

[tyspeed42]

Estrange! My nvram is 85% full and nothing installed to justify this amount.

Stubby.postconf make permanent change !?

Mine is running at 90% utilized nvram 59345/65536

 

[blueshark]

@blueshark
I did the following....
cd /jffs/scripts
nano stubby.postconf
Copied and pasted from your post into nano and saved
chmod a+rx stubby.postconf
service restart_stubby

Works fine.....

yeap, its working. Problably some stupid char on file.
many thanks

 

[themiron]

Yes, picking up fixes for a couple of reported problems....a security fix for a CERT vulnerability and a dnsmasq update (a caching change which seems like it may have some benefits).

fyi, that change seems incomplete, dhcpv6 hostname matching is not supported.
I've contacted Simon about, and before upstream solution handling wpad here would be temporary solution https://github.com/RMerl/asuswrt-merlin.ng/blob/master/release/src/router/dnsmasq/src/util.c#L203

 

[atkinsom]

Mine is running at 90% utilized nvram 59345/65536

I had a similar issue and used John's nvram restore tool to bring it back inline...I used the option in the menu to remove unused nvram components when doing a backup and restore I believe. Anyway you'll get the idea when you use it...went from 91% to 83% after and all worked well. I did it about 6 months ago. Good luck.

 

[bbunge]

@blueshark
I did the following....
cd /jffs/scripts
nano stubby.postconf
Copied and pasted from your post into nano and saved
chmod a+rx stubby.postconf
service restart_stubby

Works fine.....

Since applying this "patch" this morning there have been no errors in stubby.log!

Sent from my P01M using Tapatalk

 

[underdose]

Solved by disabling Diversion (rebooting after enabling Diversion breaks again)

Having a problem with dnsmasq not starting and NTP failing to update and I don't know how it all started. All I can say is there was a power outage yesterday and when the power came back all of this mess happened.

Restoring WAN takes longer than before and I can't get online on my MacBook without changing DNS from 192.168.1.1 to 1.1.1.1 (or any other public DNS) manually in Preferences. Also I'm not able to ping/nslookup any IP when I connect router via SSH, can't update Diversion or pixelserv-tls.

Here's the full system log and dnsmasq.conf
https://paste.ee/p/qXgQb

/jffs/scripts/dnsmasq.postconf

#!/bin/sh
. /opt/share/diversion/file/post-conf.div # Added by Diversion

When I try to restart dnsmasq with "dnsmasq restart" it returns this error:

Sep  9 12:18:52 dnsmasq[1382]: junk found in command line
Sep  9 12:18:52 dnsmasq[1382]: FAILED to start up

Restarting via "service restart_dnsmasq" generates no errors but NTP says it's still waiting for dnsmasq.

Can anyone help me to get dnsmasq and NTP to work as before?

----- edit -----
Log of the exact time of outage from dnsmasq.log1

Oct  6 22:48:19 dnsmasq[1368]: reply scss-prod-an1-notif-13.adobesc.com is 52.194.79.12
Sep  9 01:25:28 dnsmasq[697]: started, version 2.80test6 cachesize 1500
Sep  9 01:25:28 dnsmasq[697]: compile time options: IPv6 GNU-getopt no-RTC no-DBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP no-conntrack ipset no-auth DNSSEC loop-detect no-inotify

IPv6 flag got my attention since it's disabled by default on the router (we don't have it here, yet). May that be the culprit?
----- /edit -----

General Info:
Router: RT-N66U
FW: V36E4
Diversion: 4.0.2
pixelserv-tls: beta v2.2.0-rc.5

Installed Entware Packages:

bind-dig - 9.11.2-3
 bind-libs - 9.11.2-3
 ca-certificates - 20170717
 fake-hwclock - 0.11-1
 file - 5.25-2
 findutils - 4.6.0-1
 git - 2.15.1-1
 htop - 2.0.2-1
 ldconfig - 1.0.17-1
 libc - 1.0.17-1
 libexpat - 2.2.5-1
 libgcc - 5.4.0-1
 libmagic - 5.25-2
 libncurses - 6.0-1c
 libncursesw - 6.0-1c
 libopenssl - 1.0.2n-1
 libpcap - 1.8.1-1
 libpcre - 8.41-2
 libpthread - 1.0.17-1
 librt - 1.0.17-1
 libssp - 5.4.0-1
 libstdcpp - 5.4.0-1
 nano - 2.8.7-1
 nmap - 7.60-1
 openssl-util - 1.0.2n-1
 pixelserv-tls - 2.0.1-1
 terminfo - 6.0-1c
 zlib - 1.2.11-1