[Release 382] Asuswrt-Merlin 382.1 is now available

[RMerlin]

NO signature update (AC-88U Firmware 382.1)

Merlin bug

PLS Reparir

That update code is entirely Asus's, and it also works for me. There's nothing for me to "repair" there.

 

[RMerlin]

I do not have QoS enabled nor App support

Then it means you don't use any feature that requires the signatures...

 

[RMerlin]

DNS question VPN provider.
I played some time with the new 382-1 FW on my AC88 and I noticed that the DNS IP are the same from my ISP and not changed until I choose for Comodo Sec. DNS, then my DNS IP is changed.

I do this in AiProtection - DNS Filtering- DNS Filter, if I choose for Nofilter, Router, OpenDNS.
Then there's no IP change, if I finaly choose Comodo Sec. DNS, then my DNS IP is changed ONLY.

Is this normal, can anybody explain this (or must I start a new topic), or forget I something?
Because I expect my VPN (sever IPvanish) DNS!

DNSFilter won't cause the DNS IP to be changed, it will transparently redirect connections to the specified DNS.

 

[Henk59]

DNSFilter won't cause the DNS IP to be changed, it will transparently redirect connections to the specified DNS.

In short my, VPN DNS is leaking between ISP and VPN Provider?

 

[dvohwinkel]

Then it means you don't use any feature that requires the signatures...

I tried it with QoS on and with QoS off and no difference.

 

[Nagy Imre]

That update code is entirely Asus's, and it also works for me. There's nothing for me to "repair" there.

sig_update.sh and sig_upgrade.sh wrong, changed it, bad!

 

[.TT.]

I tried it with QoS on and with QoS off and no difference.

I have all options enabled.
If you dont have AI-protection enabled the signature version is not displayed.
As it is displaying i am certain it should be updating.
On a side note: I can see that two-way IPS is working.

 

[Nagy Imre]

That update code is entirely Asus's, and it also works for me. There's nothing for me to "repair" there.

BAD, Merlin
model=`nvram get productid`
if [ "$forsq" == "1" ]; then
echo "---- sig update sq normal----" > /tmp/sig_upgrade.log
wget $wget_options http://dlcdnet.asus.com/pub/ASUS/LiveUpdate/Release/Wireless_SQ/sig_update.zip -O /tmp/sig_update.txt
else
echo "---- sig update real normal----" > /tmp/sig_upgrade.log
wget $wget_options http://dlcdnet.asus.com/pub/ASUS/LiveUpdate/Release/Wireless/sig_update.zip -O /tmp/sig_update.txt

Good original.
if [ "$forsq" == "1" ]; then
echo "---- sig update sq normal----" >> /tmp/sig_upgrade.log
wget $wget_options https://dlcdnets.asus.com/pub/ASUS/LiveUpdate/Release/Wireless_SQ/sig2nd_update.zip -O /tmp/sig_update.txt
else
echo "---- sig update real normal----" >> /tmp/sig_upgrade.log
wget $wget_options https://dlcdnets.asus.com/pub/ASUS/LiveUpdate/Release/Wireless/sig2nd_update.zip -O /tmp/sig_update.txt
fi

And there are even more bugs!

 

[RMerlin]

In short my, VPN DNS is leaking between ISP and VPN Provider?

Set your VPN Client DNS to "Exclusive". It will force that client to use the tunnel's DNS.

 

[Henk59]

Set your VPN Client DNS to "Exclusive". It will force that client to use the tunnel's DNS.

For unknown reason the "Exclusive" setting is reset to "Strict" after FW update!
Thanks @Merlin

 

[skeal]

I tried updating the AI-protection signatures and this is what the logs gave me. The gui showed nothing just the signature that didn't update.

Nov 17 11:37:28 rc_service: httpd 382:notify_rc start_sig_check
Nov 17 11:37:31 kernel:  *** ERROR: [tdts_shell_ioctl_sig_op_load:95] tdts_core_rule_parsing_trf_load() fail!
N

 

[RMerlin]

Asus changed the way the sig update script gets included in the firmware at some point during 382 development. There are now two separate update scripts which refer to different URLs.

The new script gets used when building with firmware update checks disabled, but not when it's enabled. Which is why some firmware builds had the correct scripts, and others didn't.

The correct script is this one:

https://raw.githubusercontent.com/R.../src/router/rom/webs_scripts/sig2nd_update.sh

 

[matthew_eli]

Ehi guys, my log is flooded by the following message:

Nov 17 19:45:53 kernel: nf_conntrack: expectation table full

Anyone knows what it means?

 

[RMerlin]

I was browsing around and found that QOS stats are all messed up. There is no upload section, no pie chart, nothing. Here is a sample image of what I see.

Was previously reported, it's related to a change 382 has made for non-DHCP connections (like PPPoE).

https://www.snbforums.com/threads/r...2-1-is-now-available.42127/page-6#post-358471

In 380, Trend Micro was hardcoded for eth0. With 382, they use the ppp interface instead.

 

[RMerlin]

I took the time to update the known issue post. I might have some test builds available around the weekend in the Test Builds folder with some of these fixes.

 

[RMerlin]

Ehi guys, my log is flooded by the following message:

Nov 17 19:45:53 kernel: nf_conntrack: expectation table full

Anyone knows what it means?

According to Google, something is filling up your conntrack tables. It's often caused by a torrent client having too many simultaneous connections.

 

[skeal]

I took the time to update the known issue post. I might have some test builds available around the weekend in the Test Builds folder with some of these fixes.

I'll test for sure!

 

[skeal]

Was previously reported, it's related to a change 382 has made for non-DHCP connections (like PPPoE).

https://www.snbforums.com/threads/r...2-1-is-now-available.42127/page-6#post-358471

In 380, Trend Micro was hardcoded for eth0. With 382, they use the ppp interface instead.

I have a static ip is there any problem with that?

 

[RMerlin]

I have a static ip is there any problem with that?

PPPoE is the problem. Your WAN interface is ppp0 instead of eth0.

 

[Gingernut]

@RMerlin

If possible could you please update minidlna to v1.2.1.

Also I've tried to regenerate my server cetificate to correct the wrong IP issue but it doesn't seem to change/update.