[Release] Asuswrt-Merlin 380.65 is now available

[Dimitris19]

RT-AC88U
Firmware 380.65

Did someone hacked my router?

Feb 19 01:47:34 odhcp6c[21947]: Server returned message status 0
Feb 19 02:03:56 syslogd started: BusyBox v1.25.1
Feb 19 02:03:56 kernel: klogd started: BusyBox v1.25.1 (2017-02-03 00:20:52 EST)
Feb 19 02:04:03 dropbear[30898]: Running in background
Feb 19 02:04:03 start_nat_rules: apply the nat_rules(/tmp/nat_rules_ppp0_eth0)!
Feb 19 02:04:04 RT-AC88U: start httpd - SSL
Feb 19 02:04:04 RT-AC88U: start httpd
Feb 19 02:04:04 miniupnpd[30931]: HTTP listening on port 34332
Feb 19 02:04:04 miniupnpd[30931]: Listening for NAT-PMP/PCP traffic on port 5351
Feb 19 02:04:04 miniupnpd[30931]: shutting down MiniUPnPd
Feb 19 02:04:04 miniupnpd[30933]: HTTP listening on port 36120
Feb 19 02:04:04 miniupnpd[30933]: Listening for NAT-PMP/PCP traffic on port 5351
Feb 19 02:04:05 hour monitor: daemon is starting
Feb 19 02:04:15 dropbear[30934]: Child connection from 186.190.203.67:42363
Feb 19 02:04:36 dropbear[30934]: Password auth succeeded for 'dimitris' from 186.190.203.67:42363
Feb 19 02:06:32 dropbear[30934]: Exit (dimitris): Error reading: Connection timed out

According to this site (https://www.iplocation.net/) the ip 186.190.203.67 is from Argentina and i live in Greece

 

[wgentine]

RT-AC88U
Firmware 380.65

Did someone hacked my router?

Feb 19 01:47:34 odhcp6c[21947]: Server returned message status 0
Feb 19 02:03:56 syslogd started: BusyBox v1.25.1
Feb 19 02:03:56 kernel: klogd started: BusyBox v1.25.1 (2017-02-03 00:20:52 EST)
Feb 19 02:04:03 dropbear[30898]: Running in background
Feb 19 02:04:03 start_nat_rules: apply the nat_rules(/tmp/nat_rules_ppp0_eth0)!
Feb 19 02:04:04 RT-AC88U: start httpd - SSL
Feb 19 02:04:04 RT-AC88U: start httpd
Feb 19 02:04:04 miniupnpd[30931]: HTTP listening on port 34332
Feb 19 02:04:04 miniupnpd[30931]: Listening for NAT-PMP/PCP traffic on port 5351
Feb 19 02:04:04 miniupnpd[30931]: shutting down MiniUPnPd
Feb 19 02:04:04 miniupnpd[30933]: HTTP listening on port 36120
Feb 19 02:04:04 miniupnpd[30933]: Listening for NAT-PMP/PCP traffic on port 5351
Feb 19 02:04:05 hour monitor: daemon is starting
Feb 19 02:04:15 dropbear[30934]: Child connection from 186.190.203.67:42363
Feb 19 02:04:36 dropbear[30934]: Password auth succeeded for 'dimitris' from 186.190.203.67:42363
Feb 19 02:06:32 dropbear[30934]: Exit (dimitris): Error reading: Connection timed out

According to this site (https://www.iplocation.net/) the ip 186.190.203.67 is from Argentina and i live in Greece

Very likely. You shall never use expose passwd enabled ssh to WAN.
Disable password auth and generate a rsa key to log to your router immediately.

 

[visortgw]

Very likely. You shall never use expose passwd enabled ssh to WAN.
Disable password auth and generate a rsa key to log to your router immediately.

Better yet, disable WAN access completely except for VPN access. There is another thread dedicated to addressing the hacking via WAN.

 

[Dimitris19]

Thank you both
I just noticed another attack? on system log
Feb 19 15:52:44 dropbear[25435]: Child connection from 200.192.211.242:46628
Feb 19 15:52:48 dropbear[25435]: Exit before auth: Exited normally

I disabled completely web access from wan and changed username and pass
Should i do something else?

 

[SHSPVR]

Hi in the last few builder there seem to be a issue with the Traffic Analyzer - Statistic
Traffic history location = Custom Location
Save frequency = Every 1 Hour
Save history location = /mnt/SYSTEM/Logs (Front USB port)

Seem be failing to write data on USB stick after about 3 to 4 days and of one core has High CPU usage

 

[Cain]

Hi guys, I'm new to Merlin. I cannot seem to connect to his web page, where is the nest best place to download the latest release? I see lots of mirrors, but I want to be certain to get the file form an approved source.

Thanks!!

 

[RMerlin]

Hi guys, I'm new to Merlin. I cannot seem to connect to his web page, where is the nest best place to download the latest release? I see lots of mirrors, but I want to be certain to get the file form an approved source.

Thanks!!

Turn off your VPN tunnel, it's probably blacklisted by my provider.

Official mirror sites are on Mediafire and Sourceforge.

 

[muzykcb]

Hi Merlin. Whether the new version 380.64, improve operation of the hidden network in the 5 GHz frequency as it was in version 380.59. In version 380.63 _2 hidden network is not always visible by the devices that are connected to this network.

RT-AC68U


RMerlin: Wifi performance is what it is, it's entirely under Asus's control.


Welcome To Merlin. In the latest software ASUS RT-AC68U Firmware version 3.0.0.4.380.7266 problem that I described. TV Samsung sees a hidden network on 5 GHz. by contrast, in the software Merlin 380.65 Samsung TV cannot see hidden network in the 5 GHz band

 

[stambeccuccio]

 

[Lajos]

RT-AC66U
Same problem with DLNA that others report after flashing 380.65 final (without factory reset). Was working fine until I tried the experiment and added a file to my music folder with samba. Then, like others, no more DLNA server found by Skifta, and also, http://192.168.50.1:8200 not accessible when enabled. All works OK after reboot/restart until any further files added to music folder which recreates the problem. Have never had this problem with earlier versions. Just adding my user experience to others to confirm there is a problem with minidlna that wasn't in earlier versions.

Hello RMerlin,

first of all, thank you for your awesome work with that router firmware!

I can assure psychbiz, I have the same problem with my RT-AC66U, so I downgraded to the last before firmware, and it works just fine.

You can find some of my inspection's results - what latenitetech suggested to test:
https://www.snbforums.com/threads/minidlna-config-unsuccessful.37459/#post-308594

Have a good work forward,
Lajos

 

[RMerlin]

View attachment 8585

That branch is mostly just so I don't fall too far behind in merges. 7266 has too many issues to be usable for a stable release. That's why it's on a separate branch.

 

[RMerlin]

The scenario is simple:
Network Map -> MAC and IP address Binding -> Apply.

https://www.snbforums.com/threads/r...-65-is-now-available.37295/page-6#post-306579

Thanks. Note that this is mostly cosmetic, miniupnpd gets restarted later down, so this doesn't cause any real problem. The first restart simply occurs just before the firewall gets reconfigured when a restart_net_and_phy event is issued (which pretty much restarts the whole networking stack).

 

[Reinvented]

That branch is mostly just so I don't fall too far behind in merges. 7266 has too many issues to be usable for a stable release. That's why it's on a separate branch.

That's really unfortunate. Anything major that's broken so far?

Also, AC3100 and 380.65 is working just fine for me. Haven't really pushed it to it's limits. Only issue for me so far is traffic classification is broken and showing everything as default for me as well.

 

[RMerlin]

That's really unfortunate. Anything major that's broken so far?

Bandwidth Limiter is broken (but fixable). And the wifi stability issues of 4180 are still there. Some people also reporting WAN issues, but no idea why that might be the case since I saw no change to that code.

 

[wpte]

I had a crash yesterday with a reboot message. The first line in the message has some wierd artifacts shown in hex: "derefere[xEF][xBE]u[xAA]at". Maybe cosmic rays?

 

[RMerlin]

I had a crash yesterday with a reboot message. The first line in the message has some wierd artifacts shown in hex: "derefere[xEF][xBE]u[xAA]at". Maybe cosmic rays?

Router crashed while dealing with IPv6 traffic.

 

[RMerlin]

"update server" now doesn't go.. it's in loop
View attachment 8601

Works for me.

 

[wpte]

Router crashed while dealing with IPv6 traffic.

Ah, I see, a kernel issue then. That's something you don't usually patch right?

 

[RMerlin]

Ah, I see, a kernel issue then. That's something you don't usually patch right?

Right, I don't have the know-how to investigate that type of crash.

 

[elgreco29]

Hi Merlin, thanks for your great work. For me on a ac66u bandwith monitor (daily, per month) won't work. With older versions there were no problemes. Any ideas.