[Fork] Asuswrt-Merlin 374.43 LTS releases (Archive)

[SuperFly74]

Great! Installed -25E7 on my RT-N66U.

Looking for the "Bridge Multicast option" but I can't find it.
The "suppress packet with own address log" is a good idea, always seen a lot of them.

Is this version Any good ? Stabil wifi Using N66U


Sent from my iPhone using Tapatalk

 

[Uncle_Gadget]

Running 25E7 on my AC68U and attempted to do a jjfs backup and noticed the backup was smaller than the previous backup (made under 25E1 - 56K vs 550K) and that the backup file (JFFS_Backup_RT-AC68U-FD60.TAR) was corrupt. So, I reformatted jffs and manually restored the files back to /jffs/. Then, I attempted another backup and the backup was, again, corrupt. The router seems to be able to use the files in jffs without issue, it just won't do a proper backup. Any suggestions on how to fix?

 

[ColinTaylor]

Running 25E7 on my AC68U and attempted to do a jjfs backup and noticed the backup was smaller than the previous backup (made under 25E1 - 56K vs 550K) and that the backup file (JFFS_Backup_RT-AC68U-FD60.TAR) was corrupt. So, I reformatted jffs and manually restored the files back to /jffs/. Then, I attempted another backup and the backup was, again, corrupt. The router seems to be able to use the files in jffs without issue, it just won't do a proper backup. Any suggestions on how to fix?

Good spot. Same here using V25E7 and V26B5. I have to go back to the backup I did just before installing V25E1 to get a good one.

 

[john9527]

@Uncle_Gadget @ColinTaylor
Yep....it's confirmed. Most likely another fallout from that same troublesome CVE port. I'll dig into it.

 

[stalker780]

@stalker780
What Colin said....

Make sure you don't have QoS (either Traditional or Bandwidth Limiter) enabled, per IP traffic monitoring enabled, an IPTV profile enabled or a USB modem attached. Any of these will disable HW/NAT Acceleration.

I've experimented with these settings for the last 6 months . Without NAT accleration I get even lower speed.

Everything you mentioned is disabled and HW NAT enabled and works.

But today I installed 380.66. Made HR and got 900Mbit like a charm.

There are lots of topics here about 220Mbit maximum for n66u on old Merlin firmware. I think some NAT bug is fixed in 380. But not in fork.

 

[john9527]

Everything you mentioned is disabled and HW NAT enabled and works.

Did you do a factory reset when changing the code? It definitely works.....here's a post from someone getting over 900Mb/s on an N16
https://www.snbforums.com/threads/f...leases-v25e7-v26b5.18914/page-301#post-326421

 

[stalker780]

Did you do a factory reset when changing the code? It definitely works.....here's a post from someone getting over 900Mb/s on an N16
https://www.snbforums.com/threads/f...leases-v25e7-v26b5.18914/page-301#post-326421

Of course, I did factory reset in first place.

Anyway I'll try working on 380 for now. Spent a lot of time today reconfiguring it for my needs.

Will flash your fork again later this week and recheck everything again... However, as I mentioned before, I played with all possible options during the last 6 months and the best result I could achieve is 220Mbit.

 

[john9527]

@Uncle_Gadget @ColinTaylor
Yep....it's confirmed. Most likely another fallout from that same troublesome CVE port. I'll dig into it.

Found and fixed. Sad part is that I realized this may be a problem and tweaked things up front....just flubbed the change and didn't catch the incomplete file

 

[jrmwvu04]

The "time left" column of the new upnp always reads N/A and is immediately releasing the port forward to the Xbox One when it turns off now. The effect of that is that because (I think) the mobile app relies on that, it isn't able to turn the box back on as it is supposed to be. This is an issue that could well be solved by a power cycle of the console but aside from that, is that upnp lease time configurable? It would be helpful for me for instance if the main box could just keep its assigned 3074 for long periods.

 

[RMerlin]

BTW, some of the newest security fixes from Asus in 7743 have been moved to a closed source component of httpd (web_hook.o). Sigh.

 

[john9527]

The "time left" column of the new upnp always reads N/A and is immediately releasing the port forward to the Xbox One when it turns off now. The effect of that is that because (I think) the mobile app relies on that, it isn't able to turn the box back on as it is supposed to be. This is an issue that could well be solved by a power cycle of the console but aside from that, is that upnp lease time configurable? It would be helpful for me for instance if the main box could just keep its assigned 3074 for long periods.

If it's listed as N/A, it means it's a permanent lease and only will be released by the client that created it ...Unless you have more than 20 leases (I think that's the number), then it will do cleanup on ports that haven't been accessed. That should be no different that the previous release.

In fact, I've only been able to catch a lease with a timeout a couple of times when I was restarting my router a lot during testing.

EDIT: I just had a vague recollection that there was a 10 minute timer that could kick in under some cases. Unfortunately, IIRC it was a hardcoded timer.

 

[john9527]

BTW, some of the newest security fixes from Asus in 7743 have been moved to a closed source component of httpd (web_hook.o). Sigh.

Wonderful

The other thing I've noticed is that they are opening CVE's against themselves, but not publishing any details for months, even after they say they have delivered a fix.

 

[jrmwvu04]

If it's listed as N/A, it means it's a permanent lease and only will be released by the client that created it ...Unless you have more than 20 leases (I think that's the number), then it will do cleanup on ports that haven't been accessed. That should be no different that the previous release.

In fact, I've only been able to catch a lease with a timeout a couple of times when I was restarting my router a lot during testing.

EDIT: I just had a vague recollection that there was a 10 minute timer that could kick in under some cases. Unfortunately, IIRC it was a hardcoded timer.

The app wouldn't turn on the box so I checked the syslog page and it had no leases listed. Manually turned on the box, refreshed page, saw teredo 10.1.1.142 , 3074 etc etc. Manually turned off the box, refreshed the page, no leases. App wouldn't connect to the box. All of this inside of 2-3 minutes tops.

 

[jrmwvu04]

That should be no different that the previous release.

That's a good point, and if I get a chance I'll flash a prior version and test. I just did another test of box on/off and the port is immediately relinquished when I turn the box off which to my knowledge is new behavior but I'd like to test it to be sure.

 

[Builder71]

Is this version Any good ? Stabil wifi Using N66U


Sent from my iPhone using Tapatalk

Works fine here.
WiFi never changes in this LTS fork, so WiFi is the same (good) as ever before.

 

[Builder71]

BTW, some of the newest security fixes from Asus in 7743 have been moved to a closed source component of httpd (web_hook.o). Sigh.

Builder71 doesn't like this.

 

[wiz]

Hi, John

Is it possible to backport NAT speed from Merlin's 380.67?
http://192.168.197.1/Advanced_FirmwareUpgrade_Content.asp
I have N66U and 1Gbit WAN from my ISP.
When using your firmware I get 210-230Mbit on download.
But using latest Merlin firmware I get 800-900Mbit WAN speed and loose TXpower, so my WiFi barely works in far corners of a house.

So I have to choose, either fullspeed internet by LAN or good WiFi signal, never both

Make sure hardware acceleration is on. I have a n66u and 1 gbit wan as well, and I get around 940 mbps from wan to lan with Johns Fork.

 

[john9527]

Since I think the V26 release is going to need a bit more time to fully 'bake', I decided to do a stable release update....primarily to pick up the new OpenVPN 2.4.3 and a fix for breakage in JFFS backup.

LATEST RELEASE: Update-25E8
27-June-2017
Merlin fork 374.43_2-25E8j9527
Download http://bit.ly/1YdgUcP
============================

Following are the major changes (full changelog is in the zip files)

• Update OpenVPN to 2.4.3
• Update OpenSSL to 1.0.2l
• Fix incomplete/corrupt JFFS backup
• Fix reversed miniupnpd config external and internal port definitions
  This corrects a problem that has existed 'forever', back to the original Tomato base code. See this thread for additional details.
  https://www.snbforums.com/threads/miniupnpd-configuration-internal-external-ports-reversed.39853/

As always, a reminder to have a backup of /jffs in case the jffs space needs to be reformatted due to increases in firmware size. Note that backups made with V25B7 may be corrupt, so plan accordingly.

SHA256

cd5eac044d221e343b34864e080db4f870ccc371c1b129fce2009c7461722970  RT-AC68U_3.0.0.4_374.43_2-25E8j9527.trx
5a8ffb9802cbb507d0f8d8848a3cb2b9d12a203cdfb477f958ae03b28498c22d  RT-AC56U_3.0.0.4_374.43_2-25E8j9527.trx
f6108461fa2011ceb44c239774a79211878660f08d5d4a4a225b6b28f9157c20  RT-N16_3.0.0.4_374.43_2-25E8j9527.trx
68883d47ae02d91fd4a8374e9f17a0e6b374bfeb730f2bb6907b14f18eddbe71  RT-AC66U_3.0.0.4_374.43_2-25E8j9527.trx
f2d7a70d4893b06346935d178927bc96b38c42e6f0a6bd80d8745a9c3b7bd14a  RT-N66U_3.0.0.4_374.43_2-25E8j9527.trx

 

[cybrnook]

John, for users already on your beta 26B5 build, guess it doesn't make sense to go to this build. Would you be updating your beta build with the same updates that were not included at the time of release?

 

[john9527]

John, for users already on your beta 26B5 build, guess it doesn't make sense to go to this build. Would you be updating your beta build with the same updates that were not included at the time of release?

The existing beta already has the OpenVPN/OpenSSL updates. Preparing a beta update now.....to pick up the other E8 changes plus an additional new function