Padavan's Custom Firmware
- Thread starter Guz
- Start date
RT-N56U WAN DHCP Lease Settings?
Hi,
I am trying to figure out if it is possible to see the lease time on the DHCP for my WAN connection as well as a way to bump up/down the renew time on my WAN DHCP Lease.
I have a problem where my DHCP lease will not update after about two weeks for my FIOS internet connection. To solve, I usually just have two wait a few hours for everything to fix itself. I was hoping that I could have the lease renew more often to see if I can avoid this.
Thanks!
Hi,
I am trying to figure out if it is possible to see the lease time on the DHCP for my WAN connection as well as a way to bump up/down the renew time on my WAN DHCP Lease.
I have a problem where my DHCP lease will not update after about two weeks for my FIOS internet connection. To solve, I usually just have two wait a few hours for everything to fix itself. I was hoping that I could have the lease renew more often to see if I can avoid this.
Thanks!
can someone explain me the difference between "linux hybrid nat" and "restricted cone nat"
I read about that for xbox live and p2p full cone nat would be best. But the security is decreased. I don´t want to use it.
If I use port forwarding - is there a difference if I use "linux hybrid nat" (default) or "restricted cone nat" I read the wikis about nat types but nowhere is "linux hybrid nat explained". Is it a symetric nat? Does it make a nat session for every connection?
I read about that for xbox live and p2p full cone nat would be best. But the security is decreased. I don´t want to use it.
If I use port forwarding - is there a difference if I use "linux hybrid nat" (default) or "restricted cone nat" I read the wikis about nat types but nowhere is "linux hybrid nat explained". Is it a symetric nat? Does it make a nat session for every connection?
jbeck57143
New Around Here
I just had an Asus RT-N56U router installed. I didn't install it, my dad had someone else install it. They updated the firmware to 3.0.0.4.342. Like other people, I've been having problems with the wired connection going out. (One computer is wireless, but so far I haven't heard about any problems with that). I would like to install Padavan's firmware-but I don't know which version. I see people have had problems with the most recent ones, so would it be better to use an older one, like 1.0.1.7f-p11? Is there any way to get any of the previous versions-I can only find the most recent one.
Last edited:
I haven't had disconnections either. However, I've experienced a loss of range and throughput also.
kayakj
Regular Contributor
I have had no issues with RT-N56U_3.0.3.3-042 (en-ru). IPv6+IPv4. Linux kernel 3.0.61 and recommend that version (I have not yet upgraded to the newer firmwares as -042 seems to be working well.
Adamm
Part of the Furniture
Adding Support For IPSet
I would love to see something like IPSet implemented into this firmware. Currently I am being attacked by a random botnet of some sort attacking from thousands of random IP's/Ports obviously looking for whatever they can find/gain access to.
My best solution at the moment for a perm ban list is to scan the syslog for dropped IP's from iptables on a daily cronjob.
Now from my experience this works perfectly fine except for when the list grows over the 800ish mark and the CPU maxes out at %100 for a few minutes processing the rules and miniupnpd starts throwing out erros. Having something like IPSet implemented would allow thousands of IPs to be banned from a list without a significant performance hit like the traditional IPTables method and I think would be a great addition to this firmware along with a GUI addition for the less SSH friendly users
I also think they are planning todo the same with Asuswrt-Merlin firmware and the IPset package has been added to the Entware repo. Thanks in advance
I would love to see something like IPSet implemented into this firmware. Currently I am being attacked by a random botnet of some sort attacking from thousands of random IP's/Ports obviously looking for whatever they can find/gain access to.
My best solution at the moment for a perm ban list is to scan the syslog for dropped IP's from iptables on a daily cronjob.
Code:
**snip**
echo "`grep 'DROP IN=' /tmp/syslog.log`" | grep -o 'SRC=[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}' | grep -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}' >> "/opt/etc/ipblock"
echo "`cat "/opt/etc/ipblock" | sort -n | uniq`" > /opt/etc/ipblock
for ip in `cat ${ip_blacklist}` ; do
iptables -I INPUT -i $wan_iface -s $ip -j DROP
done
echo "`sed '/DROP IN=/d' /tmp/syslog.log`" > /tmp/syslog.log
**snip**Now from my experience this works perfectly fine except for when the list grows over the 800ish mark and the CPU maxes out at %100 for a few minutes processing the rules and miniupnpd starts throwing out erros. Having something like IPSet implemented would allow thousands of IPs to be banned from a list without a significant performance hit like the traditional IPTables method and I think would be a great addition to this firmware along with a GUI addition for the less SSH friendly users
I also think they are planning todo the same with Asuswrt-Merlin firmware and the IPset package has been added to the Entware repo. Thanks in advance
Last edited:
Adamm
Part of the Furniture
Unfortunately its not quite that easy when dealing with a large botnet or spoofed IP's. For an example of my situation, within seconds of turning on my router and running a scan there were 100 dropped requests from the built in IPTables rules.
Not only are the ports mostly random (as seen below) the IP's are from various ranges. For anyone interested here's an example list of the IP's ranging from various parts of the world http://pastebin.com/uybc22dz
Not only are the ports mostly random (as seen below) the IP's are from various ranges. For anyone interested here's an example list of the IP's ranging from various parts of the world http://pastebin.com/uybc22dz
Last edited:
LookInToMyEyees
Occasional Visitor
What do you mean execute it?
baadnewz
Occasional Visitor
Shikami
Senior Member
Or...you can log into the router, go to Administration, Console, paste or type in the field the command and hit hit enter. Run it after every upgrade. It may or may not write. The past couple did not, but 48 did.
BTW, I have a 65 now instead of a 56. There is an interesting difference between them. But there is still a performance issue with the wireless drivers.
Maybe I'm just missing it (first time with an Asus router), but on Padavan's latest firmware, where can you see the port forwarding you've setup? I can set it up, and verify it's working. But I'm assuming there's supposed to be a table under there and that table doesn't show anything. So I can't remove what I've already setup either.
Similar threads
