Kamoj Kamoj Add-on 5.1 Beta testing poll

[kamoj]

New beta available!

Changes in kamoj-addon beta version 5.1b9-5
------------------------------------------------------
- Added favourite (Voxel) icon for Basic tab (and bookmarks) (nsx)
- DNS Privacy/Ad-Blocking: hpHosts removed because malwarebytes stopped publishing the list. (nsx)
- OpenVPN Client: Added "Tubo On" switch to General settings
- Router Information: WiFi info: "RSSI not displayed when Guest Network enabled" (microchip)
- Router Information: Clarified MTD usage and added MTD size of "nvram".
- Settings: Added command: ps
- Settings: WiFi info: Added manufacturer of "Unknown" devices.

 

[helekip]

where is the link to download it?

 

[L&LD]

@helekip, vote and you'll be part of the testing group if more are needed.

 

[Luuc Paauw]

checked the telnet on reboot setting ...but its not working..i have to go to the debug site...the telnet is checked...uncheck it...check it agian and than everything is fine

 

[kamoj]

Thanks for the report.
Only first time after install.

checked the telnet on reboot setting ...but its not working..i have to go to the debug site...the telnet is checked...uncheck it...check it agian and than everything is fine

 

[kamoj]

New Beta available!

Changes in kamoj-addon beta version 5.1b9-6
------------------------------------------------------
- DNS Privacy/Ad-Blocking: Build missing lists when internet gets connected (nsx)
- DNS Privacy/Ad-Blocking: Enhanced Time Zone handling for cron job
- Firmware Update: Always show: Router Analytics Data Collection (HELLO_wORLD)
- OpenVPN Bypass: Update bypass list whenever net-wall is (re-)started (nsx)
- Router Information: Added number of items in "nvram".
- Settings: Added: Streamboost status (QoS for R7800)
- Settings: Added: R7800: Fix Ap-mode WAN port data corruption (Experimental)
- Settings: Added: Route To Other Net (E.g. Modem in NAT Off/Bridge Mode)
- Settings: Enhanced Time Zone handling for cron jobs
- Settings: Preserve Console Log after reading it (nsx)

 

[microchip]

Blacklist is not auto-updating. I have the following

kamoj_adblock_update_time=0 19 * * *
kamoj_adblock_autoupdate=1
kamoj_adblock_adaway=1

It should update at 19 o'clock but when I do ls -l /etc/blacklist.txt, the timestamp is "Apr 19 17:27" (I did a manual update at that time)

Also, if you get it working, consider restarting dnscrypt2 so it can pick up the new entries

 

[kamoj]

Please tell me what add-on version you use, and when (version) it was working for you.
If internet is down when auto-update is run, it will fail - unless you use 5.1b9-6 or later.

dnscrypt2 should already be restarting.

Blacklist is not auto-updating. I have the following

kamoj_adblock_update_time=0 19 * * *
kamoj_adblock_autoupdate=1
kamoj_adblock_adaway=1

It should update at 19 o'clock but when I do ls -l /etc/blacklist.txt, the timestamp is "Apr 19 17:27" (I did a manual update at that time)

Also, if you get it working, consider restarting dnscrypt2 so it can pick up the new entries

 

[kamoj]

The next (soon) add-on release has support for Wireguard Client with GUI similar to the one for OpenVPN Client.
It works for both R7800 and R9000.

 

[helekip]

One thing I would like to ask regarding WireGuard is for a setting to only set up the tunnel with nothing being tunneled through by default.
I ask as my internet is hidden behind a NAT and I want SSH to be able to listen on the WireGuard interface and nothing else.


Sent from my iPhone using Tapatalk

 

[microchip]

Please tell me what add-on version you use, and when (version) it was working for you.
If internet is down when auto-update is run, it will fail - unless you use 5.1b9-6 or later.

dnscrypt2 should already be restarting.

I use the latest 5.1b9-6 version. AFAIK it has never updated before (always need to manually update). My Internet is working just fine 24/7

 

[kamoj]

Thank you for the suggestion.
My knowledge of this is not enough though, and my available time to short for doing this.
Maybe you can ask Voxel, the man behind our firmware?!

One thing I would like to ask regarding WireGuard is for a setting to only set up the tunnel with nothing being tunneled through by default.
I ask as my internet is hidden behind a NAT and I want SSH to be able to listen on the WireGuard interface and nothing else.
Sent from my iPhone using Tapatalk

 

[kamoj]

Thanks, I'll add the issue to the todo-list.
What is the first version of the add-on that you have used for this?
(It would be of big help to understand when this stopped working.)

I use the latest 5.1b9-6 version. AFAIK it has never updated before (always need to manually update). My Internet is working just fine 24/7

 

[microchip]

Thanks, I'll add the issue to the todo-list.
What is the first version of the add-on that you have used for this?
(It would be of big help to understand when this stopped working.)

I'm not sure, and I only yesterday checked if it works or not. I started using AdAway with the first Beta version of 5.1 when I got the link from you but never checked if it auto-updates. Yesterday I did

 

[sreggy]

Hi all,
about 'Route To Other Net (E.g. Modem in NAT Off/Bridge Mode)', 'IP to route' is referred to modem IP (ie 192.168.0.2) or subnet or something else.
Just to understand, is it the equivalent of:

ifconfig `nvram get wan_ifname`:0 192.168.0.2 netmask 255.255.255.0
iptables -t nat -I POSTROUTING -o `nvram get wan_ifname` -d 192.168.0.0/24 -j MASQUERADE​

assuming that my modem is 192.168.0.1, and secondary IP on WAN interface is 192.168.0.2.

Thanks in advance, regards
Stefano

 

[kamoj]

Very good question!

It's to be used if your modem is on another sub net.
Many modems change ip range when you set them to NAT Off/Bridge Mode,
so you can no longer reach their login menu etc.
Example:
Your router use 192.168.1.1 and your modem use 192.168.0.1.
You then enter 192.168.0.1 in the add-on.

The resulting commands are saved to:
/opt/scripts/firewall-start.route_to_other_net.sh, eg

#!/bin/sh
route add -net 192.168.0.1 netmask 255.255.255.255 gw 192.168.1.1
ip route flush cache

Another version of this was:

ip addr add 192.168.0.10/24 dev $(nvram get wan_ifname) brd +
sleep 5
iptables -I POSTROUTING -t nat -o $(nvram get wan_ifname) -d 192.168.0.0/24 -j MASQUERADE

The original thread for this is:
https://www.snbforums.com/threads/accessing-modem-web-gui.60622/
But the poster there never responded so the discussion died out without conclusion.

I hope you can test it and verify if it's working or not.

Thank you!

Hi all,
about 'Route To Other Net (E.g. Modem in NAT Off/Bridge Mode)', 'IP to route' is referred to modem IP (ie 192.168.0.2) or subnet or something else.
Just to understand, is it the equivalent of:

ifconfig `nvram get wan_ifname`:0 192.168.0.2 netmask 255.255.255.0
iptables -t nat -I POSTROUTING -o `nvram get wan_ifname` -d 192.168.0.0/24 -j MASQUERADE​

assuming that my modem is 192.168.0.1, and secondary IP on WAN interface is 192.168.0.2.

Thanks in advance, regards
Stefano

 

[sreggy]

Very good question!

It's to be used if your modem is on another sub net.
Many modems change ip range when you set them to NAT Off/Bridge Mode,
so you can no longer reach their login menu etc.
Example:
Your router use 192.168.1.1 and your modem use 192.168.0.1.
You then enter 192.168.0.1 in the add-on.

The resulting commands are saved to:
/opt/scripts/firewall-start.route_to_other_net.sh, eg

#!/bin/sh
route add -net 192.168.0.1 netmask 255.255.255.255 gw 192.168.1.1
ip route flush cache

Another version of this was:

ip addr add 192.168.0.10/24 dev $(nvram get wan_ifname) brd +
sleep 5
iptables -I POSTROUTING -t nat -o $(nvram get wan_ifname) -d 192.168.0.0/24 -j MASQUERADE

The original thread for this is:
https://www.snbforums.com/threads/accessing-modem-web-gui.60622/
But the poster there never responded so the discussion died out without conclusion.

I hope you can test it and verify if it's working or not.

Thank you!

Thanks a lot,
I'll test late in the night (no interruption in Internet during daytime hours) and I'll be back with a feedback.

Thanks again, regards
Stefano

 

[jrbmw]

vpn client not working ,log says it cant find password or username.
Installed the beta ipk on usb stick. Strange thing on readyshare no memory has been used but the addon is on the usb.

2020-04-22 21:06:28 [OpenVPN] Client:No password file found: /tmp/openvpn_client/idpw. Check pre-defined username/password
2020-04-22 21:06:28 [OpenVPN] Client:No password file found. No pre-defined username/password exist.
2020-04-22 21:06:28 [OpenVPN] Client:ERROR: No password file found and no default passwords exist. Exiting

 

[sreggy]

Thanks a lot,
I'll test late in the night (no interruption in Internet during daytime hours) and I'll be back with a feedback.

Thanks again, regards
Stefano

Hi,
I did test with the following config

#!/bin/sh
route add -net 192.168.1.1 netmask 255.255.255.255 gw 192.168.0.1
ip route flush cache

#!/bin/sh
ip addr add 192.168.1.10/24 dev $(nvram get wan_ifname) brd +
sleep 5
iptables -I POSTROUTING -t nat -o $(nvram get wan_ifname) -d 192.168.1.0/24 -j MASQUERADE

#!/bin/sh
ifconfig $(nvram get wan_ifname):1 192.168.1.10 netmask 255.255.255.0
iptables -t nat -I POSTROUTING -o $(nvram get wan_ifname) -d 192.168.1.0/24 -j MASQUERADE

but with no success, tracing with a TCPDUMP

~ # tcpdump -i brwan -p icmp
tcpdump: WARNING: brwan: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on brwan, link-type EN10MB (Ethernet), capture size 96 bytes

00:27:26.939469 IP 192.168.1.10 > zyxel.saruman: ICMP echo request, id 36669, seq 0, length 64
00:27:26.939937 IP zyxel.saruman > 192.168.1.10: ICMP echo reply, id 36669, seq 0, length 64
00:27:26.940156 IP 192.168.1.10 > zyxel.saruman: ICMP 192.168.1.10 protocol 1 port 58990 unreachable, length 92

00:27:27.939531 IP 192.168.1.10 > zyxel.saruman: ICMP echo request, id 36669, seq 1, length 64
00:27:27.939875 IP zyxel.saruman > 192.168.1.10: ICMP echo reply, id 36669, seq 1, length 64
00:27:27.940031 IP 192.168.1.10 > zyxel.saruman: ICMP 192.168.1.10 protocol 1 port 25672 unreachable, length 92

00:27:28.940125 IP 192.168.1.10 > zyxel.saruman: ICMP echo request, id 36669, seq 2, length 64
00:27:28.968616 IP zyxel.saruman > 192.168.1.10: ICMP echo reply, id 36669, seq 2, length 64
00:27:28.968772 IP 192.168.1.10 > zyxel.saruman: ICMP 192.168.1.10 protocol 1 port 12357 unreachable, length 92

seems that something goes wrong ...

Could anyone help ...

Thanks, regarda
Stefano

 

[kamoj]

I suggest you do not try to edit any .ovpn file yourself.

Download the .ovpn files untouched and use the add-on GUI to handle your configurations.
In the GUI you fill in ID and PASSWORD and it gets ok.

Copy all your wanted .ovpn (configuration) files into a directory named openvpn-client on a USB device.
(No sub-directories in the USB openvpn-client dir.)
Then insert this USB device into the router and all configs are copied to the correct directory
in the router! (Thank you @Voxel !)

After that you can easy change between these configurations through the add-on.
You can edit the files from within it, and as well set your ID and Password.

Alternatively you can use the GUI and just fill in the fields and paste the contents of the configuration file.

If you still have problem, please open another thread for that, since it has nothing to do with the beta testing.

PS
Sorry for the bad documentation of the Add-on functions.
I hope one day I get help by someone (preferably native) English spoken that can help make a short manual.

vpn client not working ,log says it cant find password or username.
Installed the beta ipk on usb stick. Strange thing on readyshare no memory has been used but the addon is on the usb.

2020-04-22 21:06:28 [OpenVPN] Client:No password file found: /tmp/openvpn_client/idpw. Check pre-defined username/password
2020-04-22 21:06:28 [OpenVPN] Client:No password file found. No pre-defined username/password exist.
2020-04-22 21:06:28 [OpenVPN] Client:ERROR: No password file found and no default passwords exist. Exiting