Kamoj Kamoj add-on V5 for Netgear R7800 X4S and R9000 X10

[kamoj]

Haha, who knows. Depends on.
Who is more determined.
Who has more time.
But if we want, both me and @Voxel could do it. That's my belief.

So if you had a RBR50, would you still be able to get around:
The Orbi GUI and cgi handling is not standard.
Netgear seems to have tried to lock-out people like @Voxel and me.
It is probably necessary to own an Orbi to get around this inconvenience
(I have googled some and it seems like you can/must hi-jack the original GUI, so it's doable, though not easy.)

 

[e38BimmerFN]

I just loaded v5 of your add on on my R7800. Gotta say Wow. Great job. Like the additional menus and hidden features.
Orbi would be stellar with this.

 

[nsx]

hi! amazing addon for an amazing firmware! great job kamoj & Voxel !!
little bug in OpenVPN client config: the password is not stored properly (last character is deleted if it's a symbol like +)

 

[Tom Brough]

@kamoj What's the possibility of including a banip style add-on into the next version, the addition of ad blocking is most welcomed, adding ip banning too would be the icing on the cake!!

 

[kamoj]

That's a very good suggestion!
I have added it to the todo-list.
Would it be enough to start with an "own manual ip" list?

@kamoj What's the possibility of including a banip style add-on into the next version, the addition of ad blocking is most welcomed, adding ip banning too would be the icing on the cake!!

 

[kamoj]

Ok, It was easy to implement, so it will included be in next release!

You make your own list of ip addresses, one per line.
It's also possible to use wildcard for the last octet, e.g.:
1.2.3.4
5.6.7.8
1.231.153.*
2.20.55.*
10.11.12.13

@kamoj What's the possibility of including a banip style add-on into the next version, the addition of ad blocking is most welcomed, adding ip banning too would be the icing on the cake!!

 

[hannez8014]

Hi Kamoj
I love your addon for r7800. I wonder if it's a possibility to ad an option för when Wan down the router will restart automaticly
Best Regards Hannez

Skickat från min POT-LX1 via Tapatalk

 

[kamoj]

Thank you for the appreciation
It's not difficult, but please tell me more about your use case!
Tell me more about how it would function.
How long without "WAN"? How often restart?
What is "Wan down"? No DNS? No ping answer? No incoming traffic? Etc.

Hi Kamoj
I love your addon for r7800. I wonder if it's a possibility to ad an option för when Wan down the router will restart automaticly
Best Regards Hannez

Skickat från min POT-LX1 via Tapatalk

 

[hannez8014]

So I have a problem with someone attacking my router I think. When I look in dmsg it says ip spoofing and ddos. So several times a day my internet connection shuts down. And when I restart my router internet is working again. When I do a check internet connection in windows 10 it says I have a problem with dns. Next time it happens I can post the log. I have to find a way to stop the attacks or some mitigation to the problem. I use expressvpn and dns proxy 2. Thanks to your addon they work fine. Hope for some tips to my problem

Best Regards Hannez

Skickat från min POT-LX1 via Tapatalk

 

[kamoj]

Tips next time you have problems:

• save the openvpn log file
• run "ping 8.8.8.8" from windows (8.8.8.8 is google DNS)
• run "ping 8.8.8.8" from the router command prompt
• close the openvpn connection and see what happens

I've not tested the OpenVPN with ExpressVPN, so I don't know what settings are optimal.
Are you running udp or tcp, what mtu, buffer size, mss fix, encryption etc?
But I'm glad you confirm it is working.

Are the ddos attacks coming from a few or many many different ip addresses?
Are they coming even when you are connected to ExpressVPN as well?

So I have a problem with someone attacking my router I think. When I look in dmsg it says ip spoofing and ddos. So several times a day my internet connection shuts down. And when I restart my router internet is working again. When I do a check internet connection in windows 10 it says I have a problem with dns. Next time it happens I can post the log. I have to find a way to stop the attacks or some mitigation to the problem. I use expressvpn and dns proxy 2. Thanks to your addon they work fine. Hope for some tips to my problem

Best Regards Hannez

Skickat från min POT-LX1 via Tapatalk

 

[Tom Brough]

Ok, It was easy to implement, so it will included be in next release!

You make your own list of ip addresses, one per line.
It's also possible to use wildcard for the last octet, e.g.:
1.2.3.4
5.6.7.8
1.231.153.*
2.20.55.*
10.11.12.13

That's great to hear, currently I use a few lists from sources, but I can copy and paste them into my own files easy enough.

When's V6 coming then

 

[Tom Brough]

Ok, It was easy to implement, so it will included be in next release!

You make your own list of ip addresses, one per line.
It's also possible to use wildcard for the last octet, e.g.:
1.2.3.4
5.6.7.8
1.231.153.*
2.20.55.*
10.11.12.13

I use these lists...

https://pgl.yoyo.org/as/serverlist.php?showintro=0;hostformat=hosts

https://myip.ms/files/blacklist/general/full_blacklist_database.zip

https://www.dshield.org/block.txt

https://github.com/shounak-de/iblocklist-loader/blob/master/iblocklist-loader.sh

All which are automatically added in openwrt banip program...

Https://github.com/openwrt/packages/blob/master/net/banip/files/banip.conf

 

[kamoj]

That will take some time...
First I want to make a v5 bug-fix release, remember this v5.00 is a beta release.
Trying to get time to fix the reported bugs for v5. Also need to adapt to new Voxel releases.

Then maybe for v5.1/v6 make a GUI for Wireguard, an intelligent installer, a smart backup/restore function, traffic shaping/bandwidth limiting etc...
Pretty much up to what users wish and their level of appreciation of mine and Voxel's work.
PS

...
When's V6 coming then

 

[Tom Brough]

Brilliant news @kamoj

Can't wait for the updates, many thanks for all your hardwork.

 

[nsx]

Hello, I have 2 questions regarding the VPN bypass page:

1/ There is always "Bypass devices:1" even when the list is empty, is this normal? which device is it?
2/ Can you add the router itself to the bypass list (to de/activate VPN tunneling for the Transmission client in Voxel's firmware) ?

thank you again!

 

[kamoj]

1/ I've corrected some bug about this page, for next release.
To see all bypass devices, run router command:

ip rule show

2/ You can try it out yourself by running router commands (If your router has ip 192.168.1.1):

ip rule add from 192.168.1.1 table novpn
ip route flush cache

'

Hello, I have 2 questions regarding the VPN bypass page:

1/ There is always "Bypass devices:1" even when the list is empty, is this normal? which device is it?
2/ Can you add the router itself to the bypass list (to de/activate VPN tunneling for the Transmission client in Voxel's firmware) ?

thank you again!

 

[Tom Brough]

When's the next release due??

 

[L&LD]

When it's ready!

 

[Tom Brough]

I know that, but is it likely to be soon or ages away? I need the ip filtering for my set up.

 

[L&LD]

It will likely be sooner than ages away.