Padavan's Custom Firmware

[arul]

what is the problem you were having? dropped wireless or hang? the problem only on 5ghz for me. i'll try lowering the multicast.

 

[Guz]

Slow 2.4 GHz , signal drop.

My 5 GHz has always been rock solid. But only my SurfaceRT, and my Nokia Lumina 810 use it.

 

[Shikami]

Remember the basic rule on multicast settings:
Higher multicast rate = more speed, less range
Lower multicast rate = less speed, more range

And also: CCK corresponds to 11b, OFDM corresponds to 11g, and HTMIX corresponds to 11n.

 

[y2kdread]

RT-N56U WAN DHCP Lease Settings?

Hi,

I am trying to figure out if it is possible to see the lease time on the DHCP for my WAN connection as well as a way to bump up/down the renew time on my WAN DHCP Lease.

I have a problem where my DHCP lease will not update after about two weeks for my FIOS internet connection. To solve, I usually just have two wait a few hours for everything to fix itself. I was hoping that I could have the lease renew more often to see if I can avoid this.

Thanks!

 

[Mat77]

can someone explain me the difference between "linux hybrid nat" and "restricted cone nat"

I read about that for xbox live and p2p full cone nat would be best. But the security is decreased. I don´t want to use it.

If I use port forwarding - is there a difference if I use "linux hybrid nat" (default) or "restricted cone nat" I read the wikis about nat types but nowhere is "linux hybrid nat explained". Is it a symetric nat? Does it make a nat session for every connection?

 

[Shikami]

The wireless issues I do not have; disconnections are what you all report. However, I do have an issue with throughput. It is at a quarter or half of what it should be. This is on a PC (802.11n 150), Android phone (Galaxy S3), and iPad2.

 

[jbeck57143]

I just had an Asus RT-N56U router installed. I didn't install it, my dad had someone else install it. They updated the firmware to 3.0.0.4.342. Like other people, I've been having problems with the wired connection going out. (One computer is wireless, but so far I haven't heard about any problems with that). I would like to install Padavan's firmware-but I don't know which version. I see people have had problems with the most recent ones, so would it be better to use an older one, like 1.0.1.7f-p11? Is there any way to get any of the previous versions-I can only find the most recent one.

 

[RogerSC]

The wireless issues I do not have; disconnections are what you all report. However, I do have an issue with throughput. It is at a quarter or half of what it should be. This is on a PC (802.11n 150), Android phone (Galaxy S3), and iPad2.

I haven't had disconnections either. However, I've experienced a loss of range and throughput also.

 

[kayakj]

I just had an Asus RT-N56U router installed. I didn't install it, my dad had someone else install it. They updated the firmware to 3.0.0.4.342. Like other people, I've been having problems with the wired connection going out. (One computer is wireless, but so far I haven't heard about any problems with that). I would like to install Padavan's firmware-but I don't know which version. I see people have had problems with the most recent ones, so would it be better to use an older one, like 1.0.1.7f-p11? Is there any way to get any of the previous versions-I can only find the most recent one.

I have had no issues with RT-N56U_3.0.3.3-042 (en-ru). IPv6+IPv4. Linux kernel 3.0.61 and recommend that version (I have not yet upgraded to the newer firmwares as -042 seems to be working well.

 

[arul]

i would second that. although i prefer -040 on kernel 3.0.60 better. but both are my preference so far. -045 simply fail to stream videos properly on certain youtube videos. tried -046 too, worked ok, but for some reason it dropped media server after a day or two.

 

[Adamm]

Adding Support For IPSet

I would love to see something like IPSet implemented into this firmware. Currently I am being attacked by a random botnet of some sort attacking from thousands of random IP's/Ports obviously looking for whatever they can find/gain access to.

My best solution at the moment for a perm ban list is to scan the syslog for dropped IP's from iptables on a daily cronjob.

**snip**
	echo "`grep 'DROP IN=' /tmp/syslog.log`" | grep -o 'SRC=[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}' | grep -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}' >> "/opt/etc/ipblock"
	echo "`cat "/opt/etc/ipblock" | sort -n | uniq`" > /opt/etc/ipblock
	for ip in `cat ${ip_blacklist}` ; do
	iptables -I INPUT -i $wan_iface -s $ip -j DROP
	done
	echo "`sed '/DROP IN=/d' /tmp/syslog.log`" > /tmp/syslog.log

**snip**

Now from my experience this works perfectly fine except for when the list grows over the 800ish mark and the CPU maxes out at %100 for a few minutes processing the rules and miniupnpd starts throwing out erros. Having something like IPSet implemented would allow thousands of IPs to be banned from a list without a significant performance hit like the traditional IPTables method and I think would be a great addition to this firmware along with a GUI addition for the less SSH friendly users

I also think they are planning todo the same with Asuswrt-Merlin firmware and the IPset package has been added to the Entware repo. Thanks in advance

 

[jhoffy22]

Just block the entire IP range...

 

[Adamm]

Unfortunately its not quite that easy when dealing with a large botnet or spoofed IP's. For an example of my situation, within seconds of turning on my router and running a scan there were 100 dropped requests from the built in IPTables rules.

Not only are the ports mostly random (as seen below) the IP's are from various ranges. For anyone interested here's an example list of the IP's ranging from various parts of the world http://pastebin.com/uybc22dz

Mar 27 00:01:16 Firewall: [Blocking 99 IP's From Syslog] ... ... ...
Mar 27 00:01:16 Firewall: [Complete] 38 IPs currently banned. Attacks detected on 4 internal port(s) sourcing from 44 external port(s)

 

[jhoffy22]

That is very odd. The behavior is very similar to that of a DDOS attack.

 

[Mat77]

new Firmware online

3.0.3.4-048

http://code.google.com/p/rt-n56u/

 

[Shikami]

With the 48 firmware it seems that there are changes that use the reset_ss.sh script. So, execute it.

 

[LookInToMyEyees]

With the 48 firmware it seems that there are changes that use the reset_ss.sh script. So, execute it.

What do you mean execute it?

 

[baadnewz]

What do you mean execute it?

telnet to router then in promt type
sh /sbin/reset_ss.sh

 

[Shikami]

telnet to router then in promt type
sh /sbin/reset_ss.sh

Or...you can log into the router, go to Administration, Console, paste or type in the field the command and hit hit enter. Run it after every upgrade. It may or may not write. The past couple did not, but 48 did.

BTW, I have a 65 now instead of a 56. There is an interesting difference between them. But there is still a performance issue with the wireless drivers.

 

[Flak]

Maybe I'm just missing it (first time with an Asus router), but on Padavan's latest firmware, where can you see the port forwarding you've setup? I can set it up, and verify it's working. But I'm assuming there's supposed to be a table under there and that table doesn't show anything. So I can't remove what I've already setup either.