YazFi YazFi - enhanced AsusWRT-Merlin Guest WiFi inc. SSID <-> VPN Client

[StefanoN]

Can you run

arp -a

and send the line for your MAC address? (you can omit the actual MAC if you prefer)

Can you also send me the outputs of

ebtables -L

ebtables -t broute -L

and the contents of

/jffs/configs/dnsmasq.conf.add

Hi

YazFi: Querying router for connected WiFi clients...

---------------------------------------------------------------------------

INTERFACE: wl0.1
SSID: ASUS_Guest1

HOSTNAME IP ADDRESS MAC
4C:49:E3:B8:15:67
---------------------------------------------------------------------------

YazFi: Query complete, please see above for results

Redmi4X-Redmi (192.168.1.178) at 4c:49:e3:b8:15:67 [ether] on br0

ebtables -L
Bridge table: filter

Bridge chain: INPUT, entries: 0, policy: ACCEPT

Bridge chain: FORWARD, entries: 2, policy: ACCEPT
-i wl0.1 -j DROP
-o wl0.1 -j DROP

Bridge chain: OUTPUT, entries: 0, policy: ACCEPT

ebtables -t broute -L
Bridge table: broute

Bridge chain: BROUTING, entries: 1, policy: ACCEPT
-p IPv4 -i wl0.1 --ip-dst 192.168.1.0/24 --ip-proto tcp --ip-dport ! 8083 -j DROP


cat /jffs/configs/dnsmasq.conf.add
cat: can't open '/jffs/configs/dnsmasq.conf.add': No such file or directory

Thanks

 

[Jack Yaz]

Hi

YazFi: Querying router for connected WiFi clients...

---------------------------------------------------------------------------

INTERFACE: wl0.1
SSID: ASUS_Guest1

HOSTNAME IP ADDRESS MAC
4C:49:E3:B8:15:67
---------------------------------------------------------------------------

YazFi: Query complete, please see above for results

Redmi4X-Redmi (192.168.1.178) at 4c:49:e3:b8:15:67 [ether] on br0

ebtables -L
Bridge table: filter

Bridge chain: INPUT, entries: 0, policy: ACCEPT

Bridge chain: FORWARD, entries: 2, policy: ACCEPT
-i wl0.1 -j DROP
-o wl0.1 -j DROP

Bridge chain: OUTPUT, entries: 0, policy: ACCEPT

ebtables -t broute -L
Bridge table: broute

Bridge chain: BROUTING, entries: 1, policy: ACCEPT
-p IPv4 -i wl0.1 --ip-dst 192.168.1.0/24 --ip-proto tcp --ip-dport ! 8083 -j DROP


cat /jffs/configs/dnsmasq.conf.add
cat: can't open '/jffs/configs/dnsmasq.conf.add': No such file or directory

Thanks

The most concerning part is that last output. Does this exist?

/jffs/configs/tmpdnsmasq.conf.add

Given that HGG didnt publish source for his forked f/w, I'm inclined to say it's not supported.

 

[StefanoN]

The most concerning part is that last output. Does this exist?

/jffs/configs/tmpdnsmasq.conf.add

Given that HGG didnt publish source for his forked f/w, I'm inclined to say it's not supported.

Hi
Yes the file exist and is empty

 

[Jack Yaz]

Can you send the output when you run YazFi please? (I might need to push an update to let errors appear, but lets see!)

 

[StefanoN]

Can you send the output when you run YazFi please? (I might need to push an update to let errors appear, but lets see!)

Hi
Is this ?
/jffs/scripts# ./YazFi
YazFi: Stale lock file found (>120 seconds old) - purging lock

YazFi: YazFi v2.2.2 starting up

YazFi: wl0.1 passed validation

 

[Jack Yaz]

Hi
Is this ?
/jffs/scripts# ./YazFi
YazFi: Stale lock file found (>120 seconds old) - purging lock

YazFi: YazFi v2.2.2 starting up

YazFi: wl0.1 passed validation

Does it not post any more output from that point? Suggests it's erroring out somewhere...let me add a "verbose" option in, will let you know when its up.

 

[StefanoN]

Does it not post any more output from that point? Suggests it's erroring out somewhere...let me add a "verbose" option in, will let you know when its up.

Hi
Ok, thanks for the support.

 

[Jack Yaz]

Hi
Ok, thanks for the support.

A quick fix, in the Config_Networks function:

replace

2>/dev/null

with

#2>/dev/null

 

[StefanoN]

A quick fix, in the Config_Networks function:

replace

2>/dev/null

with

#2>/dev/null

Hi
./YazFi
YazFi: Stale lock file found (>120 seconds old) - purging lock

YazFi: YazFi v2.2.2 starting up

YazFi: wl0.1 passed validation

YazFi: Adding YazFi to firewall-start

./YazFi: line 1: arithmetic syntax error

 

[Jack Yaz]

Hi
./YazFi
YazFi: Stale lock file found (>120 seconds old) - purging lock

YazFi: YazFi v2.2.2 starting up

YazFi: wl0.1 passed validation

YazFi: Adding YazFi to firewall-start

./YazFi: line 1: arithmetic syntax error

Do you have time to do a Teamviewer session? (PM me the join code if so)

 

[StefanoN]

Do you have time to do a Teamviewer session? (PM me the join code if so)

Yes

 

[Jack Yaz]

Yes

OK, i'll keep an eye on my inbox for the details

 

[StefanoN]

Hi
Do you received my pm ?

 

[Jack Yaz]

Hi
Do you received my pm ?

Nope, nothing come through :/

 

[Jack Yaz]

v2.2.3 is available

Changelog:

• Bugfix with FORWARD chain rule position
• Remove need for grep -P(erl) switch

To update:

/jffs/scripts/YazFi update

 

[owine]

I noticed this completely neutered IPv6 on my network. Setting interfaces to false and reloading allowed me to bring IPv6 back up, but it was unusable with the script enabled.

 

[Jack Yaz]

I noticed this completely neutered IPv6 on my network. Setting interfaces to false and reloading allowed me to bring IPv6 back up, but it was unusable with the script enabled.

I don't touch ipv6. Another user reported ipv6 didn't work for guests but the main LAN still had access.

 

[owine]

I don't touch ipv6. Another user reported ipv6 didn't work for guests but the main LAN still had access.

Found a separate unrelated configuration error causing this. Have not tested on the guest net but will try to do so.

 

[Jack Yaz]

v2.2.4 is available

Changelog:

• Trim domain from hostname in status to keep it tidy (thanks @cmkelley )

To update:

/jffs/scripts/YazFi update

 

[HuskyHerder]

All's well on the update.

Running the status check on this build seems much smoother and quicker. Could just be me, not sure.