Quick test request from any official firmware users

[sinshiva]

Does anybody on stock/official get anything under PREROUTING or OUTPUT if they execute via telnet;

iptables -t raw -L -n -v

looking for entries with NOTRACK anywhere. might only work on AC routers; unsure atm. i have no entries at all (via asuswrt-merlin), myself and is contrary to firewall.c if things were working correctly

 

[RMerlin]

Does anybody on stock/official get anything under PREROUTING or OUTPUT if they execute via telnet;

iptables -t raw -L -n -v

looking for entries with NOTRACK anywhere. might only work on AC routers; unsure atm. i have no entries at all (via asuswrt-merlin), myself and is contrary to firewall.c if things were working correctly

Look more closely at that firewall.c code. The whole block is in a "#if 0" statement. That code was the reason why SMB was wide open to the WAN back last year.

 

[sinshiva]

ah, so their notrack modules are buggy? that's unfortunate

 

[sinshiva]

ah, looks like it's only broken on ARM, i was able to insmod xt_NOTRACK.ko just fine on MIPS

[edit/] i take that back, it loads but i still can't use it