[Fork] Asuswrt-Merlin 374.43 LTS releases (Archive)

[BlueBlood]

Any clues in the log file?

nothing... and here are the latest log lines:

/sbin/ifconfig utun6 10.8.0.2 10.8.0.1 netmask 255.255.255.0 mtu 1500 up
/sbin/route add -net 10.8.0.0 -netmask 255.255.255.0 10.8.0.2
add net 10.8.0.0: gateway 10.8.0.2
/sbin/route add -net xx.xx.xx.xx -netmask 255.255.255.255 192.168.2.1
add net xx.xx.xx.xx: gateway 192.168.2.1
/sbin/route add -net 0.0.0.0 -netmask 128.0.0.0 10.8.0.1
add net 0.0.0.0: gateway 10.8.0.1
/sbin/route add -net 128.0.0.0 -netmask 128.0.0.0 10.8.0.1
add net 128.0.0.0: gateway 10.8.0.1
MacDNSAction: FLAGS=F RD=1 SO=5000 DNS=8.8.8.8,8.8.4.4 DOM= ADS=
open utun6 SUCCEEDED
⏎17/04/2020, 20:45:28 Connected via utun6
⏎17/04/2020, 20:45:28 MacLifeCycle NET_IFACE en0
⏎17/04/2020, 20:45:28 EVENT: CONNECTED xx.xx.xx.xx:443 via /TCPv4 on utun6/10.8.0.2/ gw=[10.8.0.1/]

 

[sto]

@john9527 :

Hi John: Any chance of adding this server to the DoT list in a forthcoming release?

And this new Canadian-based solution:

https://www.cira.ca/cybersecurity-services/canadian-shield

CIRA is the Canadian central registry (who handles the .ca TLD for instance).

 

[dave14305]

@john9527 :

Hi John: Any chance of adding this server to the DoT list in a forthcoming release?

Link to the actual IPs and TLS names: https://www.cira.ca/cybersecurity-services/canadian-shield/configure

You can also update the stubby-resolvers.csv file by running /usr/sbin/stubby-update-resolvers.sh and then carefully editing /jffs/etc/stubby-resolvers.csv. If you mess it up you can run
/usr/sbin/stubby-update-resolvers.sh again to re-download the file from OneDrive.

 

[sto]

You can also update the stubby-resolvers.csv file by running /usr/sbin/stubby-update-resolvers.sh and then carefully editing /jffs/etc/stubby-resolvers.csv. If you mess it up you can run
/usr/sbin/stubby-update-resolvers.sh again to re-download the file from OneDrive.

I confess I tried that and botched it. That's why I'm deferring to smarter people than me.

 

[john9527]

CONNECTED xx.xx.xx.xx:443

You're connecting on port 443....make sure the AiCloud port has been changed and you are not running another server that uses that port.

 

[dave14305]

I confess I tried that and botched it. That's why I'm deferring to smarter people than me.

"CIRA Private Primary",149.112.121.10,2620:10A:80BB::10,853,private.canadianshield.cira.ca,,,yes,yes,yes
"CIRA Private Secondary",149.112.122.10,2620:10A:80BC::10,853,private.canadianshield.cira.ca,,,yes,yes,yes
"CIRA Protected Primary",149.112.121.20,2620:10A:80BB::20,853,protected.canadianshield.cira.ca,,,yes,yes,yes
"CIRA Protected Secondary",149.112.122.20,2620:10A:80BC::20,853,protected.canadianshield.cira.ca,,,yes,yes,yes
"CIRA Family Primary",149.112.121.30,2620:10A:80BB::30,853,family.canadianshield.cira.ca,,,yes,yes,yes
"CIRA Family Secondary",149.112.122.30,2620:10A:80BC::30,853,family.canadianshield.cira.ca,,,yes,yes,yes

 

[ColinTaylor]

The latest 42E7 software is installed on my RT-N66U router, everything works well, except that this error constantly occurs in the system log:

How to fix this error?

Thanks in advance!

The only time I see this in my logs is when the WAN interface is offline. So that's at router startup or shutdown, or when I unplug the WAN cable.

 

[sto]

"CIRA Private Primary",149.112.121.10,2620:10A:80BB::10,853,private.canadianshield.cira.ca,,,yes,yes,yes
"CIRA Private Secondary",149.112.122.10,2620:10A:80BC::10,853,private.canadianshield.cira.ca,,,yes,yes,yes
"CIRA Protected Primary",149.112.121.20,2620:10A:80BB::20,853,protected.canadianshield.cira.ca,,,yes,yes,yes
"CIRA Protected Secondary",149.112.122.20,2620:10A:80BC::20,853,protected.canadianshield.cira.ca,,,yes,yes,yes
"CIRA Family Primary",149.112.121.30,2620:10A:80BB::30,853,family.canadianshield.cira.ca,,,yes,yes,yes
"CIRA Family Secondary",149.112.122.30,2620:10A:80BC::30,853,family.canadianshield.cira.ca,,,yes,yes,yes

View attachment 22794

Damn. You're too fast for me. I managed to get it myself on the third try. Thanks!

 

[john9527]

@john9527 :

Hi John: Any chance of adding this server to the DoT list in a forthcoming release?

@dave14305 - Thanks for generating the entries....the OneDrive copy has been updated for anyone that wants to run the update script.

 

[dave14305]

@dave14305 - Thanks for generating the entries....the OneDrive copy has been updated for anyone that wants to run the update script.

Any thoughts on how to handle the growing number of DoT servers in the world? Ideas for easier user customization where you don't have to be personally involved? Or maybe someone can develop a UI add-on...

 

[john9527]

Any thoughts on how to handle the growing number of DoT servers in the world? Ideas for easier user customization where you don't have to be personally involved? Or maybe someone can develop a UI add-on...

Problem is that javascript has no API to access local files (by design, for security reasons). So anything that manipulates local files, needs a 'c' helper and needs to be integrated into the security checks of what's actually allowed to run.

Just FYI....I have a helper that reads the stubby csv and returns an array back to the gui (sound familiar )

 

[sto]

@dave14305 - Thanks for generating the entries....the OneDrive copy has been updated for anyone that wants to run the update script.

Talk about fast. You guys are amazing! Thanks!

 

[dave14305]

Problem is that javascript has no API to access local files (by design, for security reasons). So anything that manipulates local files, needs a 'c' helper and needs to be integrated into the security checks of what's actually allowed to run.

Just FYI....I have a helper that reads the stubby csv and returns an array back to the gui (sound familiar )

It might also be feasible to repoint to the stubby_csv nvram variable to a custom file if necessary. Otherwise, new values can be written to custom_settings.txt and handled via service-event handlers to manipulate the source file. Need to think about it, preferably with wine.

 

[ColinTaylor]

The only time I see this in my logs is when the WAN interface is offline. So that's at router startup or shutdown, or when I unplug the WAN cable.

@john9527 So is this a bug?

I see that wsdd2 is meant to be listening on br0, but it's binding to all interfaces.

# netstat -nlp | grep wsdd
tcp        0      0 0.0.0.0:3702            0.0.0.0:*               LISTEN      1706/wsdd2
udp        0      0 0.0.0.0:3702            0.0.0.0:*                           1706/wsdd2

# ps w | grep ws
 1706 admin      676 S    /usr/sbin/wsdd2 -d -w -i br0 -b sku:RT-AC68U,serial:305a3ac78a20

 

[BlueBlood]

You're connecting on port 443....make sure the AiCloud port has been changed and you are not running another server that uses that port.

Thanks for the hint; I will try changing the port of the remote server (AiCloud service was stopped)

 

[john9527]

(AiCloud service was stopped)

Doesn't matter if it's stopped.....it still grabs the port.

 

[john9527]

the

@john9527 So is this a bug?

I see that wsdd2 is meant to be listening on br0, but it's binding to all interfaces.

# netstat -nlp | grep wsdd
tcp        0      0 0.0.0.0:3702            0.0.0.0:*               LISTEN      1706/wsdd2
udp        0      0 0.0.0.0:3702            0.0.0.0:*                           1706/wsdd2

# ps w | grep ws
 1706 admin      676 S    /usr/sbin/wsdd2 -d -w -i br0 -b sku:RT-AC68U,serial:305a3ac78a20

The interface binding was an addition by themiron....I'll double check my backport.

 

[XRunner]

Not sure....I don't see it on my system. I have seen some posts for the latest Merlin builds where it was seen.
The only things I can suggest are
- if you are not using USB shares on the router with Windows 10 and SMB1 disabled, you can disable loading that service with
nvram set wsdd_enable=0
nvram commit
and reboot
- to check under LAN>IPTV and make sure that multicast routing and multicast forwarding are both set to Enable.

Thank you, the wsdd2 error has completely disappeared!
However, a new error appeared in the system log:

Apr 17 22:44:36 miniupnpd[523]: upnpevents_processfds: 0x437218, remove subscriber uuid:947a425e-deb6-42dd-9a15-f3fb0400452f after an ERROR cb: http://192.168.1.2:2869/upnp/eventing/mhcrsxcgfp

What does this mean?
And how to fix it?
Thank you in advance!

 

[dave14305]

the

The interface binding was an addition by themiron....I'll double check my backport.

I believe netstat output looks like this on Merlin as well, if my memory serves.

 

[john9527]

I believe netstat output looks like this on Merlin as well, if my memory serves.

If you get a chance to verify that....
I double checked my backport....looks in sync with Merlin.