[Release] Asuswrt-Merlin 384.13 is now available

[netware5]

The router no longer uses dnsmasq for local resolution, it uses the WAN DNS instead for improved reliablity.

Does that mean I cannot use anymore local hostnames to access them? For example using hostnames in Windows or Linux CLI? My router is used as DNS server by all network devices. For local hostnames it provides answers, for outside hosts it forwards the request to upstream DNS (ISP).

 

[dave14305]

Does that mean I cannot use anymore local hostnames to access them? For example using hostnames in Windows or Linux CLI? My router is used as DNS server by all network devices. For local hostnames it provides answers, for outside hosts it forwards the request to upstream DNS (ISP).

Your clients can still resolve local hostnames using the router as DNS server. By default, the router itself can no longer lookup local hostnames.

 

[eastavin]

Oh, i see... Thank you for clarification

I came across something that explains how to get a green light for the encrypted SNI test. The feature is supported in Firefox 62 and up. I just tried it in the Firefox nightly build and it worked. https://miketabor.com/enable-dns-over-https-and-encrypted-sni-in-firefox/

 

[Broken Hope]

The router no longer uses dnsmasq for local resolution, it uses the WAN DNS instead for improved reliablity.

Has anything changed regarding DHCP with .13 vs .12, just trying to figure out why my Smart Scale a Withings Body+ no longer seems to sync reliably over WiFi any more, I have to reboot my router to get it to work properly again, after working for the best part of a year previously. My Blu-ray player also stopped reliably getting a DHCP IP so had to set it to static.

 

[MDM]

I came across something that explains how to get a green light for the encrypted SNI test. The feature is supported in Firefox 62 and up. I just tried it in the Firefox nightly build and it worked. https://miketabor.com/enable-dns-over-https-and-encrypted-sni-in-firefox/

Yes, and RMerlin said also it is not secure, and bad implementation...

 

[RMerlin]

Yes, and RMerlin said also it is not secure, and bad implementation...

I never said it wasn't secure. Just that it messes with existing network infrastructures, and DNS over TLS is a smarter, better designed option.

 

[Deleted member 22229]

Ok so using DNS over Tls how does this work for IPv6 ? I did set cloudflare for dns on the IPv6 tab 2606:4700:4700::1111

 

[RMerlin]

Ok so using DNS over Tls how does this work for IPv6 ? I did set cloudflare for dns on the IPv6 tab 2606:4700:4700::1111

Add an IPv6 DNS over TLS server from the WAN page, same location where you configure the IPv4 ones.

The DNS configured on the IPv6 config page have nothing to do with DNS over TLS.

 

[Deleted member 22229]

Your the best Eric Thanks. Good thing your not married with kids, None of this would be possible..

 

[Butterfly Bones]

Has anything changed regarding DHCP with .13 vs .12, just trying to figure out why my Smart Scale a Withings Body+ no longer seems to sync reliably over WiFi any more, I have to reboot my router to get it to work properly again, after working for the best part of a year previously. My Blu-ray player also stopped reliably getting a DHCP IP so had to set it to static.

Not that it helps, but I have the Body+ and it has worked with 384.11, .12, and .13 for me, no issues at all.

 

[MDM]

I never said it wasn't secure. Just that it messes with existing network infrastructures, and DNS over TLS is a smarter, better designed option.

My bad, I probably red it elsewhere, and someone else said it was less secure...

 

[randomName]

kernel: nf_conntrack: expectation table full

My log is getting flooded by this. Is this a firmware issue, and how can it be fixed?

 

[e_lasman]

Is your script doing this?
https://github.com/RMerl/asuswrt-merlin/wiki/Custom-DDNS

Not until now. That was it, thank you!

Now I need to make LE work and I'm golden.

 

[eastavin]

I never said it wasn't secure. Just that it messes with existing network infrastructures, and DNS over TLS is a smarter, better designed option.

Could you point me to that contribution please? Were you commenting on encrypted sni when your said it messes with infrastructure? I was thinking if one's goal is to shield all your traffic from the ISP then one should include the encrypted sni when circumstances permit.

 

[consorts]

Could you point me to that contribution please?

https://www.snbforums.com/threads/how-to-set-up-dns-over-tls-384-13.59461/

 

[#TY]

Hi guys, today out of the blue, my amtm seems broken. I tried rebooting the router but nothing changed. Has anyone seen this before? I get UPD ERR for several items including amtm and SkyNet won't even open.

Could my USB key be dead or dying? I haven't touched anything otherwise and it was working perfectly for the longest time.

 

[dave14305]

Hi guys, today out of the blue, my amtm seems broken. I tried rebooting the router but nothing changed. Has anyone seen this before? I get UPD ERR for several items including amtm and SkyNet won't even open.

Could my USB key be dead or dying? I haven't touched anything otherwise and it was working perfectly for the longest time.

I'm wondering if you're having an issue resolving the diversion.ch hostname? Does it work in a browser?

 

[#TY]

I'm wondering if you're having an issue resolving the diversion.ch hostname? Does it work in a browser?

Yes no problem in the browser.

 

[dave14305]

Yes no problem in the browser.

Oh, wait, it won't be the same as a browser due to the different DNS config for the router.

What if you run this in the ssh window?

# curl -fsLN --retry 3 https://diversion.ch/diversion/diversion.info

You should get this:

#bof

S_VERSION=4.1
S_M_VERSION=4
S_RELEASED="September 20 2019"
UPDATE_TEXT='See https://diversion.ch for change log'
UI_UPDATE_TEXT='     See https://diversion.ch for change log'
#eof

 

[#TY]

Oh, wait, it won't be the same as a browser due to the different DNS config for the router.

What if you run this in the ssh window?

# curl -fsLN --retry 3 https://diversion.ch/diversion/diversion.info

You should get this:

#bof

S_VERSION=4.1
S_M_VERSION=4
S_RELEASED="September 20 2019"
UPDATE_TEXT='See https://diversion.ch for change log'
UI_UPDATE_TEXT='     See https://diversion.ch for change log'
#eof

I do