[Test builds] 380.58 alpha builds are now available

[CODYQX4]

Check the System Log to ensure that your tunnel provider actually pushes a DNS to you. It's working fine for me using vpnbook.

What would I be looking for specifically? I know that using them via a VPN client such as Viscosity pushed the DNS from them.

 

[Ian Manning]

Is there any prospect of this release fixing NAT Loopback on the RT-AC68U?

 

[WET]

FYI. Loaded 380.58.alpha3 on my AC68U yesterday. All is good for me. I did not have issues with 380.57 either. If I run into any issues I will update.

 

[DomFel]

Seems the AC56U build is bugged from the above comments, probably from outdated binary blobs. I'll ignore this branch for now until ASUS decides to update their code.

It's only the LEDs in a particular situation. Moving to 380.58 a factory reset is almost necessary. After that everything is fine.

 

[RMerlin]

Is there any prospect of this release fixing NAT Loopback on the RT-AC68U?

NAT loopback is working properly, there's nothing to fix there.

 

[RMerlin]

What would I be looking for specifically? I know that using them via a VPN client such as Viscosity pushed the DNS from them.

Look for the OpenVPN line that says "PUSH" in it, as well as any entries from "openvpn-updown".

 

[CODYQX4]

Look for the OpenVPN line that says "PUSH" in it, as well as any entries from "openvpn-updown".

I cleared the log then restarted both VPNs.

I got the following (Note, I restarted VPN #2 first, VPN #1 second):

Feb 26 10:29:37 openvpn[2602]: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Feb 26 10:29:37 openvpn[2602]: PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.4.0.1,comp-lzo no,route-gateway 10.4.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.4.33.184 255.255.0.0'
Feb 26 10:30:38 openvpn[3313]: SENT CONTROL [Private Internet Access]: 'PUSH_REQUEST' (status=1)
Feb 26 10:30:38 openvpn[3313]: PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 209.222.18.222,dhcp-option DNS 209.222.18.218,ping 10,comp-lzo no,route 10.100.4.1,topology net30,ifconfig 10.100.4.6 10.100.4.5'

Those are the desired DNS servers with push log, but the clients just don't care, they use OpenDNS which is my main DNS configured.

I got these for updown (it was a script though not openvpn-updown)

Feb 26 10:29:37 openvpn[2602]: updown.sh tun12 1500 1558 10.4.33.184 255.255.0.0 init
Feb 26 10:30:38 openvpn[3313]: updown.sh tun11 1500 1558 10.100.4.6 10.100.4.5 init

For good measure, I rebooted the router and checked the log again.

Feb 26 10:38:40 openvpn[1372]: SENT CONTROL [Private Internet Access]: 'PUSH_REQUEST' (status=1)
Feb 26 10:38:40 openvpn[1372]: PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 209.222.18.222,dhcp-option DNS 209.222.18.218,ping 10,comp-lzo no,route 10.100.4.1,topology net30,ifconfig 10.100.4.6 10.100.4.5'
Feb 26 10:38:43 openvpn[1383]: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Feb 26 10:38:43 openvpn[1383]: PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.4.0.1,comp-lzo no,route-gateway 10.4.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.4.33.184 255.255.0.0'
Feb 26 10:38:40 openvpn[1372]: updown.sh tun11 1500 1558 10.100.4.6 10.100.4.5 init
Feb 26 10:38:43 openvpn[1383]: updown.sh tun12 1500 1558 10.4.33.184 255.255.0.0 init

I then rebooted a client and went to ipleak.net and it is still using OpenDNS although using VPN for IP+WebRTC. It doesn't matter which one of the VPNs are used, the clients simply use OpenDNS instead, even though the DNS seems to be pushed. I've tried both Strict and Exclusive DNS (I would prefer to use exclusive - I want them 100% disconnected if the VPN is not running for any reason).

This wasn't working on stable either for me (adding a second VPN made it never work unless using DNSFilter, which still works on alpha 3).

 

[RMerlin]

I cleared the log then restarted both VPNs.

I got the following (Note, I restarted VPN #2 first, VPN #1 second):

Feb 26 10:29:37 openvpn[2602]: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Feb 26 10:29:37 openvpn[2602]: PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.4.0.1,comp-lzo no,route-gateway 10.4.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.4.33.184 255.255.0.0'
Feb 26 10:30:38 openvpn[3313]: SENT CONTROL [Private Internet Access]: 'PUSH_REQUEST' (status=1)
Feb 26 10:30:38 openvpn[3313]: PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 209.222.18.222,dhcp-option DNS 209.222.18.218,ping 10,comp-lzo no,route 10.100.4.1,topology net30,ifconfig 10.100.4.6 10.100.4.5'

Those are the desired DNS servers with push log, but the clients just don't care, they use OpenDNS which is my main DNS configured.

I got these for updown (it was a script though not openvpn-updown)

Feb 26 10:29:37 openvpn[2602]: updown.sh tun12 1500 1558 10.4.33.184 255.255.0.0 init
Feb 26 10:30:38 openvpn[3313]: updown.sh tun11 1500 1558 10.100.4.6 10.100.4.5 init

The lack of entry for openvpn-updown means that for some reason there are no DNS being added to the firewall. Can you double check that you did set the Accept DNS option to "Exclusive" on your OpenVPN client configurations, and that policy-based routing is indeed enabled with some clients configured in it?

 

[abescalamis]

I installed .58 and its working good, the issue/bug that I found has nothing to do with the firmware is with DLNA, after merlin added minidlna 1.1.5. I store my movies with their cover picture (JPEG dlna compatible), so it will display the picture as the cover-art on players, and now it displays the cover separately. that started with .57 I believe.

 

[CODYQX4]

The lack of entry for openvpn-updown means that for some reason there are no DNS being added to the firewall. Can you double check that you did set the Accept DNS option to "Exclusive" on your OpenVPN client configurations, and that policy-based routing is indeed enabled with some clients configured in it?

I have them configured as follows:
https://imgur.com/a/iyDfG

 

[RMerlin]

I have them configured as follows:
https://imgur.com/a/iyDfG

No idea why it wouldn't work then. We'll need to mount a modified version of the updown.sh script on your router with additional debug output to figure out what's going on as I can't reproduce it here. However I can't do that now as I'm not at home.

If you are confortable with Linux script, make a copy of the script in a writable location, then mount it on top of the original read-only script:

cp /usr/sbin/updown.sh /jffs/
mount -o bind /jffs/updown.sh /usr/sbin/updown.sh

Then, you can modify /jffs/updown.sh script to insert more logging information (use the "logger" command to send to syslog, there are already a few example inside that script on how to use it), and try reconnecting your OpenVPN clients to see what you get. Most important is to check what you get as OPTION passed to that script.

 

[jerry6]

Thanks , hope you're feeling better

 

[CODYQX4]

No idea why it wouldn't work then. We'll need to mount a modified version of the updown.sh script on your router with additional debug output to figure out what's going on as I can't reproduce it here. However I can't do that now as I'm not at home.

If you are confortable with Linux script, make a copy of the script in a writable location, then mount it on top of the original read-only script:

cp /usr/sbin/updown.sh /jffs/
mount -o bind /jffs/updown.sh /usr/sbin/updown.sh

Then, you can modify /jffs/updown.sh script to insert more logging information (use the "logger" command to send to syslog, there are already a few example inside that script on how to use it), and try reconnecting your OpenVPN clients to see what you get. Most important is to check what you get as OPTION passed to that script.

I copied that file over then used init-start to mount it on reboot.

I got the following entries from that reboot: http://pastebin.com/6sj4rr7Y

I used the following script: http://pastebin.com/bu2egZXU

If you have any suggestions from there, please let me know.

 

[RMerlin]

I copied that file over then used init-start to mount it on reboot.

I got the following entries from that reboot: http://pastebin.com/6sj4rr7Y

I used the following script: http://pastebin.com/bu2egZXU

If you have any suggestions from there, please let me know.

Thanks. I'm not at home right now so I can't look, I'll check either tonight or this weekend to see if anything comes up.

 

[MarkRH]

I am guessing not, but does this version include the changes in the latest ASUS RT-AC68U Firmware version 3.0.0.4.380.1842? https://www.asus.com/us/Networking/RTAC68U/HelpDesk_Download/

Thanks,
Mark

 

[cmillar6]

All good here too.Vanilla config.No Qos(no need), No IP monitoring(no need)
NAT enabled(CTF+FA)
2.4 ghz(with NAT)Wireless clients have acces to internet and 5ghz working fine
1 days uptime

Great fw and i like the new "Advanced Tweaks and Hacks"

FYI = 2.4ghz with NAT disable is still present for AC68(tested) , but i dont care , i dont need QOS or IP monitoring

My AC68 also spontaneously reboots with 380.57 onward, its fine with the previous SDK. I'm curious to see if others are experiencing this.

 

[RMerlin]

I am guessing not, but does this version include the changes in the latest ASUS RT-AC68U Firmware version 3.0.0.4.380.1842? https://www.asus.com/us/Networking/RTAC68U/HelpDesk_Download/

Thanks,
Mark

See the changelog for which GPL coebase this is based on.

 

[Quint]

Hi,
For those suffering with older hw that has wireless issues, where can we get 378.56_2 from?

Thanks,
Quint

 

[RMerlin]

Hi,
For those suffering with older hw that has wireless issues, where can we get 378.56_2 from?

Thanks,
Quint

Same place as the other releases -either of the download sites.

Sent from my Nexus 9 using Tapatalk

 

[Veldkornet]

Working fine on my AC66U so far (including DNSCrypt and DNSSEC).

DNSCrypt? New in this firmware? I look forward to that if it is

On that note, any recommendations on a provider that uses both? Which also has IPv6 support?

GoogleDNS -> DNSSEC - Yes | DNSCrypt - No
OpenDNS -> DNSSEC - No | DNSCrypt - Yes


Sent from my iPhone using Tapatalk