Asuswrt-Merlin 374.40 is out

[ozgurcnbyz]

I flashed the firmware on my ac68u yesterday. Seems stable to me.

But on 5ghz WiFi the dfs channels / options are missing. Do I have to reset it? As far as I see it should work?

same here. i remember seeing those options when i was at the firmware 40 beta3. reverted back to alpha4 because of the random reboot issue and now they are gone

 

[RMerlin]

same here. i remember seeing those options when i was at the firmware 40 beta3. reverted back to alpha4 because of the random reboot issue and now they are gone

DFS is only available in 374.40 Beta3, and only for users in the EU region.

 

[Jettubby]

I don't know what's going on with the wireless on N66U? Upgraded from 39 to 40 and started to get all wireless computers/phones/playstation/Roku just disconnect. None will reconnect. Rebooted the router. All will connect then a couple hours later they all disconnect. So I went back to 39 and it's doing the same thing which it didn't do before the upgrade to 40. What the........?!

All wired devices on the router are ok.

 

[Keenan]

IPv6 is not NATted. Every device on your LAN gets its own IPv6 IP. Therefore, the IP that gets tested will be of your client's, not your router's. That means the firewall in effect will be that of your client, unless you have a firewall rule in place on the router blocking the packet before it gets routed to the client.

I don't want to drag this thread off course so is there another thread or discussion here that might explain this in more detail?

For example, what does the IPv6 firewall setting in the router setup actually do? If it's set to "On" then each client regardless of their individual FW setting is being protected? With that "global" IPv6 setting on the router why would some clients respond to the Echo request when others don't? What setting or condition on the client controls or affects this behavior?

From your quoted comment above it must mean that on one of more of my clients I must have a FW rule set that blocks the queries from that port testing site? Would this be default behavior for a Win7 OS?

Thanks!

 

[MarkyPancake]

374.39_0-em has been stable for me on my N66U, so based on the various things I've read about 374.40 I'm going to stay with this firmware for now.

 

[Vandergraff]

From your quoted comment above it must mean that on one of more of my clients I must have a FW rule set that blocks the queries from that port testing site? Would this be default behavior for a Win7 OS?

Thanks!

I just checked on my PC that showed "Echo Reply" was green. I am running Windows 7 with Kaspersky Internet Security 2014. In the Kaspersky firewall rules it has a setting for ICMPv6 Echo Request (in) Block which seems to be active by default. So I guess this explains why this PC shows green on the test. The iPad presumably doesn't block ICMPv6 Echo Requests.

It still doesn't explain why my PC was reporting yellow the first time I upgraded to 374_40 - but it sounds like that was a PC not Asuswrt Merlin issue.

I would still be interested in knowing how to set up the Asuswrt Merlin IPv6 firewall to block ICMPv6 Echo Requests

 

[Builder71]

374.39_0-em has been stable for me on my N66U, so based on the various things I've read about 374.40 I'm going to stay with this firmware for now.

How can you say that?
Just try for yourself and make your own decision!

As usual on forums people only post with problems.
For the majority it works fine.

 

[Builder71]

I don't know what's going on with the wireless on N66U? Upgraded from 39 to 40 and started to get all wireless computers/phones/playstation/Roku just disconnect. None will reconnect. Rebooted the router. All will connect then a couple hours later they all disconnect. So I went back to 39 and it's doing the same thing which it didn't do before the upgrade to 40. What the........?!

All wired devices on the router are ok.

No wireless problems here.

After the flash, did you do a factory reset and manual reconfigure?
On your problem devices "forget" the wireless profile and connect again.
(Or use a different SSID.)

 

[jlake]

I just checked on my PC that showed "Echo Reply" was green. I am running Windows 7 with Kaspersky Internet Security 2014. In the Kaspersky firewall rules it has a setting for ICMPv6 Echo Request (in) Block which seems to be active by default. So I guess this explains why this PC shows green on the test. The iPad presumably doesn't block ICMPv6 Echo Requests.

It still doesn't explain why my PC was reporting yellow the first time I upgraded to 374_40 - but it sounds like that was a PC not Asuswrt Merlin issue.

I would still be interested in knowing how to set up the Asuswrt Merlin IPv6 firewall to block ICMPv6 Echo Requests

Why do you want to block it? Merlin already explained to you that it's not supposed to be blocked. Why persist with this? Google if you need some time of reassurance. Or just disable ipv6 if you can't understand or are paranoid.

http://blogs.cisco.com/security/icmp-and-security-in-ipv6/

 

[ozgurcnbyz]

DFS is only available in 374.40 Beta3, and only for users in the EU region.

cheers Merlin. is there any place where i can learn whats it for ?


Sent from my iPhone using Tapatalk

 

[MarkyPancake]

How can you say that?
Just try for yourself and make your own decision!

It's the manual config part of a firmware change that I find a chore.

 

[Vandergraff]

Why do you want to block it? Merlin already explained to you that it's not supposed to be blocked. Why persist with this? Google if you need some time of reassurance. Or just disable ipv6 if you can't understand or are paranoid.

http://blogs.cisco.com/security/icmp-and-security-in-ipv6/

Not meaning to be a pain and I was responding to another members question.

I admitted before I am not an expert in this - but I also don't see why asking questions would bother you (or anyone else) as long as we are civil. Would you prefer we move to another thread?

I read your link and it does provide some info - while implying there is some significant security risk.

I wonder why would Kaspersky Internet Security suite (used on 240+Million computers worldwide) be set by default to block ICMPv6 Echo Request (in). If my PC is already doing this I might prefer that my other devices do (and probably the only way to do this for embedded devices is in the router).

I have had no problems with IPV6 sites from the PC running KIS.

 

[wbennett77]

It's the manual config part of a firmware change that I find a chore.

If you are upgrading from 374.39_0-em I don't think you have to do any manual reconfigure, you just upgrade.

 

[wbennett77]

I don't know what's going on with the wireless on N66U? Upgraded from 39 to 40 and started to get all wireless computers/phones/playstation/Roku just disconnect. None will reconnect. Rebooted the router. All will connect then a couple hours later they all disconnect. So I went back to 39 and it's doing the same thing which it didn't do before the upgrade to 40. What the........?!

All wired devices on the router are ok.

If you went from 39 regular build and not the "em" flavor you are using a different wireless driver with the "40" and will have to a reset to default and redo your settings manually.

 

[jlake]

Not meaning to be a pain and I was responding to another members question.

I admitted before I am not an expert in this - but I also don't see why asking questions would bother you (or anyone else) as long as we are civil. Would you prefer we move to another thread?

I read your link and it does provide some info - while implying there is some significant security risk.

I wonder why would Kaspersky Internet Security suite (used on 240+Million computers worldwide) be set by default to block ICMPv6 Echo Request (in). If my PC is already doing this I might prefer that my other devices do (and probably the only way to do this for embedded devices is in the router).

I have had no problems with IPV6 sites from the PC running KIS.

If you are concerned that your apple device is not blocking your ICMP the way you want it to, you should maybe ask apple. The router must allow IPv6 ICMP.

 

[tsunami2311]

Any reasons to upgrade to this ? security wise over what I have?

I have no issue or problem Only issue I ever had was with QOS enabled ps3 reports my router was no support ip fragments.


Haveing to redo all the mac addresses I have set for wireless allow list is not something I want to do, seeing I Been told I cant use backups to reapply them along with all my QOS settings and other settings

 

[Vandergraff]

If you are concerned that your apple device is not blocking your ICMP the way you want it to, you should maybe ask apple. The router must allow IPv6 ICMP.

Why must the router allow IPv6 ICMP and its OK for a PC firewall to block it?

Not sure why you are highlighting Apple - it seems some clients block it some don't. People have reported some of their PCs as blocking it and other PCs on the same Network not.

I like this Carl Sagan quote “There are naive questions, tedious questions, ill-phrased questions, questions put after inadequate self-criticism. But every question is a cry to understand the world. There is no such thing as a dumb question.”

You seem adverse to people asking questions - but paraphrasing another quote if you ask a question you may look stupid for 5 minutes but if you don't ask you stay stupid for fifty years, so always ask questions in your life.

 

[Jettubby]

If you went from 39 regular build and not the "em" flavor you are using a different wireless driver with the "40" and will have to a reset to default and redo your settings manually.

I was under the impression that this was not required but will be my next option. On one of my last upgrades going from one em version to the next this same very thing happened (38-em to 39-em I believe. Merlin said to go from 39-em to just the 39 standard version a reset was not required. Now for 40 it is. Man my head's spinning. I think the reset is just going to be part of my upgrade SOP from now on.

 

[telUK]

Installed yesterday from asus stock latest, so far very pleased.

Seems like my wireless range is slightly better as my ps4 went from 78% to 92% with Merlin.


So thanks very much.

Can I ask what exactly people mean when they say EM version?


Cheers

 

[MarkyPancake]

Any firmware change is worth clearing the NVRAM after installation to ensure there are no conflicts with the previous version's settings and code.

It's the manual config after doing this that I find an inconvenience.