YazFi YazFi - enhanced AsusWRT-Merlin Guest WiFi inc. SSID <-> VPN Client

[maghuro]

standard ssid/passwd? WPA2?
same with stock firmware?
working fine here with merlin's .17

Correct. In fact the ssid is similar to my main wifi network and the password is almost the same for testing purposes.
With stock firmware I haven't test it because I'm using Merlin since day one

Edit: i just formatted again and configured everything from scratch.

Miracle... It suddenly started working. Then I installed YazFi and it worked better

I really don't know what can happened, but I suspect some nvram broken var or something...

 

[maghuro]

How much time does YazFi waits to get applied?
Guest wifi is working now, but after a reboot it doesnt appli YazFi settings. I have to manually apply them

 

[Jack Yaz]

How much time does YazFi waits to get applied?
Guest wifi is working now, but after a reboot it doesnt appli YazFi settings. I have to manually apply them

60s after a firewall-start is called

 

[maghuro]

60s after a firewall-start is called

Well, now i'm facing another problem.
I can connect to guest network, but i don't have internet access.
It gets Ip correctly, but haven't access.
I think when i manually restart VPN (i'm redirecting guests to VPN), it starts working

Edit: I was so happy that guest networks started working that I forgot to set "auto start on boot" on vpn client... That way, yazfi was redirecting traffic to a disconnected vpn I'm so sorry...

Everything working fine right now!!! Thanks yo everyone

 

[Jack Yaz]

Well, now i'm facing another problem.
I can connect to guest network, but i don't have internet access.
It gets Ip correctly, but haven't access.
I think when i manually restart VPN (i'm redirecting guests to VPN), it starts working

Edit: I was so happy that guest networks started working that I forgot to set "auto start on boot" on vpn client... That way, yazfi was redirecting traffic to a disconnected vpn I'm so sorry...

Everything working fine right now!!! Thanks yo everyone

At least you know the Merlin VPN killswitch works as intended ;-)

 

[maghuro]

At least you know the Merlin VPN killswitch works as intended ;-)

Ahahahah always look on the full side of glass

 

[maghuro]

Hey Jack, when I reboot the router I have to manually go to ssh and do a "YazFi startup", otherwise the YazFi tab won't show anywhere.

 

[maghuro]

The configs are properly applied, only the tab isn't mounted

 

[Jack Yaz]

Hey Jack, when I reboot the router I have to manually go to ssh and do a "YazFi startup", otherwise the YazFi tab won't show anywhere.

what does syslog show?

 

[maghuro]

what does syslog show?

Need to reboot it later when everyone's sleeping

In the meanwhile, what's for the "&" present on each of your startup scripts line?

/jffs/scripts/YazFi startup & # YazFi

 

[maghuro]

How can I grab the log via ssh and filter everything with "YazFi:"?

Here it is. Note that on the meanwhile I forced a YazFi startup via ssh:

adminRT-AC86U/jffs cat syslog.log-1 | grep "YazFi"                    May  5 06:05:22 YazFi: Lock file found (age: 0 seconds) - stopping to prevent duplicate runs
Jun 12 18:09:00 YazFi: Stale lock file found (>120 seconds old) - purging lock
Jun 12 18:09:00 YazFi: Firewall restarted - sleeping 60s before running YazFi
Jun 12 18:09:13 YazFi: Lock file found (age: 13 seconds) - stopping to prevent duplicate runs
Jun 12 18:09:20 YazFi: Lock file found (age: 20 seconds) - stopping to prevent duplicate runs
Jun 12 18:10:00 YazFi: YazFi v4.0.5 starting up
Jun 12 18:10:02 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 18:10:04 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 18:10:06 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 18:10:17 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:12:33 YazFi: Wireless restarted - sleeping 60s before running YazFi
Jun 12 19:13:05 YazFi: Lock file found (age: 32 seconds) - stopping to prevent duplicate runs
Jun 12 19:13:33 YazFi: YazFi v4.0.5 starting up
Jun 12 19:13:34 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:13:36 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:13:38 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 19:13:41 YazFi: Wireless restarted - sleeping 60s before running YazFi
Jun 12 19:13:49 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:14:41 YazFi: YazFi v4.0.5 starting up
Jun 12 19:14:42 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:14:44 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:14:46 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 19:14:57 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:20:16 YazFi: Mounting YazFi WebUI page as user4.asp
Jun 12 19:25:44 YazFi: Firewall restarted - sleeping 60s before running YazFi
Jun 12 19:25:53 YazFi: Lock file found (age: 9 seconds) - stopping to prevent duplicate runs
Jun 12 19:26:44 YazFi: YazFi v4.0.5 starting up
Jun 12 19:26:46 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:26:48 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:26:50 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 19:27:01 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:37:32 YazFi: Stale lock file found (>120 seconds old) - purging lock
Jun 12 19:37:32 YazFi: Wireless restarted - sleeping 60s before running YazFi
Jun 12 19:38:32 YazFi: YazFi v4.0.5 starting up

 

[Jack Yaz]

How can I grab the log via ssh and filter everything with "YazFi:"?

Here it is. Note that on the meanwhile I forced a YazFi startup via ssh:

adminRT-AC86U/jffs cat syslog.log-1 | grep "YazFi"                    May  5 06:05:22 YazFi: Lock file found (age: 0 seconds) - stopping to prevent duplicate runs
Jun 12 18:09:00 YazFi: Stale lock file found (>120 seconds old) - purging lock
Jun 12 18:09:00 YazFi: Firewall restarted - sleeping 60s before running YazFi
Jun 12 18:09:13 YazFi: Lock file found (age: 13 seconds) - stopping to prevent duplicate runs
Jun 12 18:09:20 YazFi: Lock file found (age: 20 seconds) - stopping to prevent duplicate runs
Jun 12 18:10:00 YazFi: YazFi v4.0.5 starting up
Jun 12 18:10:02 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 18:10:04 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 18:10:06 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 18:10:17 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:12:33 YazFi: Wireless restarted - sleeping 60s before running YazFi
Jun 12 19:13:05 YazFi: Lock file found (age: 32 seconds) - stopping to prevent duplicate runs
Jun 12 19:13:33 YazFi: YazFi v4.0.5 starting up
Jun 12 19:13:34 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:13:36 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:13:38 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 19:13:41 YazFi: Wireless restarted - sleeping 60s before running YazFi
Jun 12 19:13:49 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:14:41 YazFi: YazFi v4.0.5 starting up
Jun 12 19:14:42 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:14:44 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:14:46 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 19:14:57 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:20:16 YazFi: Mounting YazFi WebUI page as user4.asp
Jun 12 19:25:44 YazFi: Firewall restarted - sleeping 60s before running YazFi
Jun 12 19:25:53 YazFi: Lock file found (age: 9 seconds) - stopping to prevent duplicate runs
Jun 12 19:26:44 YazFi: YazFi v4.0.5 starting up
Jun 12 19:26:46 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:26:48 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:26:50 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 19:27:01 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:37:32 YazFi: Stale lock file found (>120 seconds old) - purging lock
Jun 12 19:37:32 YazFi: Wireless restarted - sleeping 60s before running YazFi
Jun 12 19:38:32 YazFi: YazFi v4.0.5 starting up

Stale lock file is concerning. Can you double check you're running the latest? This was added prior to merging v4.0.5 but I don't know if you were running a develop version? https://github.com/jackyaz/YazFi/commit/ac77ad5d574782dd76c89309b2dc127de1a643d2

 

[maghuro]

Stale lock file is concerning. Can you double check you're running the latest? This was added prior to merging v4.0.5 but I don't know if you were running a develop version? https://github.com/jackyaz/YazFi/commit/ac77ad5d574782dd76c89309b2dc127de1a643d2

I'm using master, and latest one (with that 10day old commit), as I reset the router yesterday and configured everything from scratch, including installing your scripts.

 

[Jack Yaz]

How can I grab the log via ssh and filter everything with "YazFi:"?

Here it is. Note that on the meanwhile I forced a YazFi startup via ssh:

adminRT-AC86U/jffs cat syslog.log-1 | grep "YazFi"                    May  5 06:05:22 YazFi: Lock file found (age: 0 seconds) - stopping to prevent duplicate runs
Jun 12 18:09:00 YazFi: Stale lock file found (>120 seconds old) - purging lock
Jun 12 18:09:00 YazFi: Firewall restarted - sleeping 60s before running YazFi
Jun 12 18:09:13 YazFi: Lock file found (age: 13 seconds) - stopping to prevent duplicate runs
Jun 12 18:09:20 YazFi: Lock file found (age: 20 seconds) - stopping to prevent duplicate runs
Jun 12 18:10:00 YazFi: YazFi v4.0.5 starting up
Jun 12 18:10:02 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 18:10:04 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 18:10:06 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 18:10:17 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:12:33 YazFi: Wireless restarted - sleeping 60s before running YazFi
Jun 12 19:13:05 YazFi: Lock file found (age: 32 seconds) - stopping to prevent duplicate runs
Jun 12 19:13:33 YazFi: YazFi v4.0.5 starting up
Jun 12 19:13:34 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:13:36 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:13:38 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 19:13:41 YazFi: Wireless restarted - sleeping 60s before running YazFi
Jun 12 19:13:49 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:14:41 YazFi: YazFi v4.0.5 starting up
Jun 12 19:14:42 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:14:44 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:14:46 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 19:14:57 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:20:16 YazFi: Mounting YazFi WebUI page as user4.asp
Jun 12 19:25:44 YazFi: Firewall restarted - sleeping 60s before running YazFi
Jun 12 19:25:53 YazFi: Lock file found (age: 9 seconds) - stopping to prevent duplicate runs
Jun 12 19:26:44 YazFi: YazFi v4.0.5 starting up
Jun 12 19:26:46 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:26:48 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:26:50 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 19:27:01 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:37:32 YazFi: Stale lock file found (>120 seconds old) - purging lock
Jun 12 19:37:32 YazFi: Wireless restarted - sleeping 60s before running YazFi
Jun 12 19:38:32 YazFi: YazFi v4.0.5 starting up

this commit may help https://github.com/jackyaz/YazFi/commit/72bbabbd446d209986bd422dab3065882a31dc2f

 

[maghuro]

this commit may help https://github.com/jackyaz/YazFi/commit/72bbabbd446d209986bd422dab3065882a31dc2f

Thanks pal!

Let me try on next reboot

Jun 12 21:34:05 YazFi: MD5 hash of YazFi does not match - downloading updated v4.0.5                                                                Jun 12 21:34:09 YazFi: YazFi successfully updated - restarting firewall to apply update                                                             Jun 12 21:34:10 YazFi: Firewall restarted - sleeping 60s before running YazFi                                                                       Jun 12 21:35:10 YazFi: YazFi v4.0.5 starting up                           Jun 12 21:35:11 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3                       Jun 12 21:35:13 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3                       Jun 12 21:35:15 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate Jun 12 21:35:26 YazFi: YazFi v4.0.5 completed successfully                Jun 12 21:36:27 YazFi: Firewall restarted - sleeping 60s before running YazFi                                                                       Jun 12 21:36:56 YazFi: Lock file found (age: 29 seconds) - stopping to prevent duplicate runs                                                       Jun 12 21:37:27 YazFi: YazFi v4.0.5 starting up                           Jun 12 21:37:28 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3                       Jun 12 21:37:31 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3                       Jun 12 21:37:33 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate Jun 12 21:37:43 YazFi: YazFi v4.0.5 completed successfully

 

[Xannor]

v4.0.5 is now available!
Changelog:

NEW: YazFi now supports user/custom scripts. Simply save them to /jffs/addons/YazFi.d/userscripts.d with .sh as the extension, e.g. myscript.sh

I wanted to reply to let you know this meets my needs for the UDP Boradcast issue since I can now just add a script to ensure the broadcasts are tracked and allowed whenever the firewall is reset.

 

[SammyG]

Is it possible to enable YazFi and still use the same DHCP pool as the main network? Would it still be able to restrict traffic between the main LAN and guest networks?

 

[Jack Yaz]

v4.1.0 is now available
Changelog:

NEW: Add cron job to check for YazFi rules every 10mins and re-apply if needed
CHANGED: Reduce sleep from 60s to 30s when firewall and wireless restart events are detected

 

[visortgw]

v4.1.0 is now available
Changelog:

NEW: Add cron job to check for YazFi rules every 10mins and re-apply if needed
CHANGED: Reduce sleep from 60s to 30s when firewall and wireless restart events are detected

Choose an option:    u

YazFi: No new version - latest is v4.0.5

Press enter to continue...

UPDATE: I retried again, and it updated.

 

[Jack Yaz]

Choose an option:    u

YazFi: No new version - latest is v4.0.5

Press enter to continue...

UPDATE: I retried again, and it updated.

Could have been an issue with Github's CDN, I made sure to wait a minute or 2 after merging the branches before posting here