[Preview] Asuswrt-Merlin 380.63 alpha builds are available

[muffintastic]

What build are you running?

I've reverted back to .60

 

[RMerlin]

How much trouble would it be to port the QOS chart to visualize the firewall log? It'd be great to get an idea of what countries keep knocking at the doors so much and what ports are being attacked without having to do some manual searching.

Two totally different things. There is no firewall log for instance, all hits are logged into syslog, not into some data collection system. What you are looking for is a logfile analyzer - way outside the scope of this project.

@RMerlin - Any chance you can try and fix the DMZ and UPNP issues in the next build? I've had to revert back to a previous build where it worked correctly.

UPNP works fine for me, I use it quite frequently.

You cannot have multiple devices into a DMZ. DMZ means that all traffic that isn't conntracked or explicitly forwarded gets forwarded to that specific IP. Now, if a single device in a DMZ still doesn't work, then something else is wrong with your environment. Could be your ISP modem double natting you, could be they use CGNAT, etc...

 

[DeathAngel74]

Thank you for continuing to make my RT-AC3100 more awesome. Everything is working as expected, DMZ, QoS port forwarding, etc. No issues to report 12 hours after flashing.

 

[bobiii]

Working great, on my RT-AC5300!

 

[vdemarco]

its been working great here. love the traffic logging graphs.

 

[Zirescu]

Got it running on my AC87U - wouldn't take the firmware upgrade without removing the USB key though.

 

[RMerlin]

Refreshed builds have been uploaded.

7b46daf kernel: Fixed bad merge for RT-AC3200 kernel
c90170a webui: Added contextual help for NAT passthrough settings
fa53022 Updated documentation
f9aa712 kernel-mips: Patch the 2.6.22.19 kernel against CVE-2016-5195
7e18948 tor: update to 0.2.8.9 (contains security fixes; closes #1067)
3c81765 Updated documentation
bef8fab webui: Created contextual help popups for various Merlin-specific settings
5171f34 webui: remove extra space between "Manufacturer" and ":" to match the other fields on the MAC popups
fafbbb4 webui: Implement our own help array for openHint() so we won't collide with Asus's, and implement a first entry for the IPv6 firewall
b8e8d67 firewall: support fixed interface ID (EUI64) ipv6 destination addresses (based on john9527's patch)
cdefe67 helper: added pc-delete()
821c324 vpn: Made policy rules start at 10000 instead of 1000
16fcf51 webui: Traffic Manager pages do not reside under QoS, so don't label them as such on bwdpi-enabled models
4636162 webui: Use localized strings for Download/Upload labels on Traffic Monitor charts, and remove extra leading space to scale label
7a95789 kernel-arm: Patched all three 2.6.36 kernels against CVE-2016-5195 (Closes #1066)
343d6f9 ipset_arm: some build systems try to link against the wrong library, ensure we do link against our built libmnl.so (closes #1063)
f022993 dropbear: disable MD5 support, for security reasons
74eeda2 rc: re-create passwd/shadow/group after the JFFS2 partition is mounted, in case we have custom configs stored there (fixes #1061)

 

[Wutikorn]

Refreshed builds have been uploaded.
[/code]

Is there a different when you update a refreshed build compared to moving from alpha2 to alpha3? Just curious if refreshed build means minor changes?

 

[RMerlin]

Is there a different when you update a refreshed build compared to moving from alpha2 to alpha3? Just curious if refreshed build means minor changes?

Version bumps occur at various stages during development, and depend on various things. I don't have any specific rule to determine when I decide to bump. During the alpha stage, it's usually because I finished a specific development task. Alpha tags are only for my personal uses.

 

[charlie2alpha]

Refreshed builds have been uploaded.

b8e8d67 firewall: support fixed interface ID (EUI64) ipv6 destination addresses (based on john9527's patch)

Many thanks for this one to you @RMerlin and to @john9527 . Now the IPv6 firewall is actually usable with dynamic IPs and stateless autoconfiguration. Already tested it, seems to be working fine.

 

[RMerlin]

Many thanks for this one to you @RMerlin and to @john9527 . Now the IPv6 firewall is actually usable with dynamic IPs and stateless autoconfiguration. Already tested it, seems to be working fine.

Entirely John's work, I merely merged his patch on top of my code.

Thanks for confirming that it's working. Can you recommend a way to amend the field description at the top of that page to document this feature? Mentioning EUI64 in the documentation might be over the head of the majority of users.

 

[jsmiddleton4]

"Mentioning EUI64 in the documentation might be over the head of the majority of users."

Hey, I resemble that remark.

 

[charlie2alpha]

Entirely John's work, I merely merged his patch on top of my code.

Thanks for confirming that it's working. Can you recommend a way to amend the field description at the top of that page to document this feature? Mentioning EUI64 in the documentation might be over the head of the majority of users.

True, the average Joe User won't really get the reference. The only thing I can think of is to say something along the lines of that this is the local part of the IP automatically calculated by the device itself and it is unique to the device. The end user doesn't need to know how exactly that is done.

Only exception is Microsoft Windows that uses a random IP but that can be disabled with a single command if needed (and I always do so) but that's too much to mention in tool tips, anybody who needs to configure such a firewall should look it up in a more complete documentation.

 

[bigcid10]

was there no need for a refresh on the ac3200?
Thanks

 

[AndreiV]

was there no need for a refresh on the ac3200?
Thanks

7b46daf kernel: Fixed bad merge for RT-AC3200 kernel

Like this ??

 

[RMerlin]

was there no need for a refresh on the ac3200?
Thanks

I had to compile it separately due to a syntax error in one of the files. I simply forgot to upload it after that separate archive was generated.

 

[jdpg2]

On my AC-5300 I see the old Traffic monitor graphs, not the new shiny ones you created. Under QoS I see the new hoteness pie charts.

 

[RMerlin]

On my AC-5300 I see the old Traffic monitor graphs, not the new shiny ones you created. Under QoS I see the new hoteness pie charts.

The two existing charts haven't been replaced. New charts were added to pages which previously didn't have any, which means Daily and Monthly traffic (both regular and IPTraffic pages).

 

[RMerlin]

The missing RT-AC3200 build has been uploaded.

 

[Veldkornet]

Looking at the QoS graphs, looks good! I just have 2 questions:

1. What type of traffic is "net control packets"?
2. Would it be possible to rather sort the columns on the right by data usage? So most used is on top and least at the bottom?


Sent from my iPhone using Tapatalk