Asuswrt-Merlin 374.39 is out

[RMerlin]

set up from scratch and after enabling jffs and restoring autoexecs I went to the tools command to ensure all started when I typed "n" the buffer displays netstat -ln

How can the buffer from a previous version be there after the reset and firmware upgrade?

This is your browser's autocomplete at work, this has nothing to do with the firmware. The router doesn't keep any kind of command history.

 

[Vandergraff]

I am running 39_em and am finding that I occasionally need to reboot my router to keep an IPv6 connection on Comcast. Last time was yesterday.

My modem had rebooted on Friday (I could see that in the modem logs) - not sure if that had anything to do with with it.

Apart from 38 (with known IPv6 Comcast issues) I have had no problems with IPv6 on Comcast with previous builds.

 

[migueln]

Please would anyone consider getting into edgemax routers they are the bestthing

 

[Vandergraff]

As above I am running 39_em and rebooted my router yesterday.

I have the bandwidth logs saved to a USB drive. After the reboot the Global - Last 24 hours, Daily and Monthly totals are missing. However the Per Device - Daily and Monthly totals are there and seem correct?

 

[Deleted member 22229]

I am running 39_em and am finding that I occasionally need to reboot my router to keep an IPv6 connection on Comcast. Last time was yesterday.

My modem had rebooted on Friday (I could see that in the modem logs) - not sure if that had anything to do with with it.

Apart from 38 (with known IPv6 Comcast issues) I have had no problems with IPv6 on Comcast with previous builds.

I have the same issue with the N66U started with the 38 builds and continues in the 39 build ipv6 works then in a few days loses its v6 address and a reboot is required to get it back and then it repeats.

I bought a new AC68U and loaded 39 and so far it has not happened but i have only had the the router for a few days i am keeping a close eye on v6. If this issue happens again its has to be a bug in the firmware. I am also using comcast and v6 works great on every other version but 38-39 builds. I wont use stock Asus firmware because they wont implement a V6 firewall in there firmware.

 

[MonkY]

Hi guys!

Can you tell me if this is based on the latest ASUS Firmware version 3.0.0.4.374.4422 (at least that's for RT-AC66U) or is it newer?

Thx!

 

[RMerlin]

Hi guys!

Can you tell me if this is based on the latest ASUS Firmware version 3.0.0.4.374.4422 (at least that's for RT-AC66U) or is it newer?

Thx!

Quote from the first post:

This build includes Asus's 374.583 GPL code, which adds (amongst other things) support for USB hubs.

 

[Shayne]

This is your browser's autocomplete at work, this has nothing to do with the firmware. The router doesn't keep any kind of command history.

So you say this buffer is kept in the browsers? Anyway it is working live a charm and all my thanks for your firmware and your knowledge. Whenever I google anything about my router guess who pops up with the correct answer. You are a valuable asset to the internet wizard and have taught me a lot.

Regards

 

[Vandergraff]

As above I am running 39_em and rebooted my router yesterday.

I have the bandwidth logs saved to a USB drive. After the reboot the Global - Last 24 hours, Daily and Monthly totals are missing. However the Per Device - Daily and Monthly totals are there and seem correct?

Any ideas on this?

 

[saintdev]

For those of you experiencing your prefix delegation dropping after a few days, you may want to keep an eye on the [IPv6] Netgear retail router IPv6 issues.. topic over on DSLReports. It seems something very similar is happening on some Netgear routers.

 

[jim769]

For those of you experiencing your prefix delegation dropping after a few days, you may want to keep an eye on the [IPv6] Netgear retail router IPv6 issues.. topic over on DSLReports. It seems something very similar is happening on some Netgear routers.

Very interesting now is it a comcast issue or a firmware issue. Seems to me it's firmware because the older builds do not have the issue. At this point what can be done to fix it ?

 

[bilboSNB]

I see. It's listed as an experimental feature from their "Labs", that's why it won't show up in the dropdown menu of their site.

Not sure I want to implement support for an experimental service, since they could very well change the DNS IPs at any moment. However 374.40 will let you specify a user-defined filtering service, so that would work for you.

I'll consider adding it once it comes out of experimental stage.

Further to this I tried opendns again but I just much prefer the cleanness dyndns filtering and the fact there are no adverts.

Also there is an advert category which blocks loads of crap including youtube ads for every device on the network without having to mess with adblock on the router.

 

[bmn1]

Sorry if this has already been mentioned but are we covered?

http://www.maximumpc.com/asus_finally_rolls_out_firmware_fix_major_router_vulnerability_2014

 

[L&LD]

Sorry if this has already been mentioned but are we covered?

http://www.maximumpc.com/asus_finally_rolls_out_firmware_fix_major_router_vulnerability_2014

Don't be sorry; search instead.

 

[bmn1]

Don't be sorry; search instead.

I did search, and you're right... I'm not sorry.

Security problem - nothing
Security patch - nothing
4422 - got something today, but nothing yesterday. That's why I asked. Thanks for nothing jerk.

 

[jlake]

I did search, and you're right... I'm not sorry.

Security problem - nothing
Security patch - nothing
4422 - got something today, but nothing yesterday. That's why I asked. Thanks for nothing jerk.

The ac68 and ac56 still have samba vulnerability in asus stock firmware. It was not patched correctly in 4422.

Run a port scan with grc.

https://www.grc.com/x/ne.dll?bh0bkyd2

 

[joltdude]

For those of you experiencing your prefix delegation dropping after a few days, you may want to keep an eye on the [IPv6] Netgear retail router IPv6 issues.. topic over on DSLReports. It seems something very similar is happening on some Netgear routers.

I'm thinking there's some errata in the binary blob from Broadcom, and a condition is occurring with some firmwares where it's being triggered or not by the open source ip6 code and not others... Would explain the similar issues with the Netgear...

Sent from my Venue 7 3730 using Tapatalk

 

[SpOuK3]

I posted in the alpha 4 build but ... issue is present with the .39 current build.

Hi,

I'm a new user with the RT-AC66U + Merlin firmware and I have an issue with samba and VPN.

1) Credentials are always rejected when going thru a VPN.

2) Here's the logs:

Feb 20 10:26:18 smbd[1309]: [2014/02/20 10:26:18, 0] smbd/sesssetup.c:reply_sesssetup_and_X(1265)
Feb 20 10:26:18 smbd[1309]: reply_sesssetup_and_X: Rejecting attempt at SPNEGO session setup when it was not negoitiated.
Feb 20 10:28:37 smbd[1316]: [2014/02/20 10:28:37, 0] smbd/sesssetup.c:reply_sesssetup_and_X(1265)
Feb 20 10:28:37 smbd[1316]: reply_sesssetup_and_X: Rejecting attempt at SPNEGO session setup when it was not negoitiated.
Feb 20 10:28:37 smbd[1317]: [2014/02/20 10:28:37, 0] smbd/sesssetup.c:reply_sesssetup_and_X(1265)
Feb 20 10:28:37 smbd[1317]: reply_sesssetup_and_X: Rejecting attempt at SPNEGO session setup when it was not negoitiated.
Feb 20 10:28:37 smbd[1318]: [2014/02/20 10:28:37, 0] smbd/sesssetup.c:reply_sesssetup_and_X(1265)
Feb 20 10:28:37 smbd[1318]: reply_sesssetup_and_X: Rejecting attempt at SPNEGO session setup when it was not negoitiated.
Feb 20 10:29:07 smbd[1319]: [2014/02/20 10:29:07, 0] smbd/sesssetup.c:reply_sesssetup_and_X(1265)
Feb 20 10:29:07 smbd[1319]: reply_sesssetup_and_X: Rejecting attempt at SPNEGO session setup when it was not negoitiated.
Feb 20 10:29:22 smbd[1322]: [2014/02/20 10:29:22, 0] smbd/sesssetup.c:reply_sesssetup_and_X(1265)
Feb 20 10:29:22 smbd[1322]: reply_sesssetup_and_X: Rejecting attempt at SPNEGO session setup when it was not negoitiated.
Feb 20 10:29:22 smbd[1323]: [2014/02/20 10:29:22, 0] smbd/sesssetup.c:reply_sesssetup_and_X(1265)
Feb 20 10:29:22 smbd[1323]: reply_sesssetup_and_X: Rejecting attempt at SPNEGO session setup when it was not negoitiated.
Feb 20 10:29:44 smbd[1327]: [2014/02/20 10:29:44, 0] smbd/sesssetup.c:reply_sesssetup_and_X(1265)
Feb 20 10:29:44 smbd[1327]: reply_sesssetup_and_X: Rejecting attempt at SPNEGO session setup when it was not negoitiated.



I checked the issue on google and found two solutions and they are not working...

--> Add "security = USER" to smb.conf (already there by default)
--> Change to "yes" : client use spnego = no

It's still not working ... I'm connecting to the VPN with my Nexus 5 device and I use Astro File Manager to access smb share...

Also, credentials are working from a local PC using Windows 8.1.


Thanks for your input on this one!


EDIT: there's a weird line in smb.conf by default: --> "use spne go = no" is this generated by the firmware? this line is there after a reboot of the router...

2nd EDIT: removing the "use spne go = no" from smb.conf fix the issue .... Maybe thats a bug? Can RMerlin have a look at it?

 

[RMerlin]

I posted in the alpha 4 build but ... issue is present with the .39 current build.

Hi,

I'm a new user with the RT-AC66U + Merlin firmware and I have an issue with samba and VPN.

1) Credentials are always rejected when going thru a VPN.

2) Here's the logs:

Feb 20 10:26:18 smbd[1309]: [2014/02/20 10:26:18, 0] smbd/sesssetup.c:reply_sesssetup_and_X(1265)
Feb 20 10:26:18 smbd[1309]: reply_sesssetup_and_X: Rejecting attempt at SPNEGO session setup when it was not negoitiated.
Feb 20 10:28:37 smbd[1316]: [2014/02/20 10:28:37, 0] smbd/sesssetup.c:reply_sesssetup_and_X(1265)
Feb 20 10:28:37 smbd[1316]: reply_sesssetup_and_X: Rejecting attempt at SPNEGO session setup when it was not negoitiated.
Feb 20 10:28:37 smbd[1317]: [2014/02/20 10:28:37, 0] smbd/sesssetup.c:reply_sesssetup_and_X(1265)
Feb 20 10:28:37 smbd[1317]: reply_sesssetup_and_X: Rejecting attempt at SPNEGO session setup when it was not negoitiated.
Feb 20 10:28:37 smbd[1318]: [2014/02/20 10:28:37, 0] smbd/sesssetup.c:reply_sesssetup_and_X(1265)
Feb 20 10:28:37 smbd[1318]: reply_sesssetup_and_X: Rejecting attempt at SPNEGO session setup when it was not negoitiated.
Feb 20 10:29:07 smbd[1319]: [2014/02/20 10:29:07, 0] smbd/sesssetup.c:reply_sesssetup_and_X(1265)
Feb 20 10:29:07 smbd[1319]: reply_sesssetup_and_X: Rejecting attempt at SPNEGO session setup when it was not negoitiated.
Feb 20 10:29:22 smbd[1322]: [2014/02/20 10:29:22, 0] smbd/sesssetup.c:reply_sesssetup_and_X(1265)
Feb 20 10:29:22 smbd[1322]: reply_sesssetup_and_X: Rejecting attempt at SPNEGO session setup when it was not negoitiated.
Feb 20 10:29:22 smbd[1323]: [2014/02/20 10:29:22, 0] smbd/sesssetup.c:reply_sesssetup_and_X(1265)
Feb 20 10:29:22 smbd[1323]: reply_sesssetup_and_X: Rejecting attempt at SPNEGO session setup when it was not negoitiated.
Feb 20 10:29:44 smbd[1327]: [2014/02/20 10:29:44, 0] smbd/sesssetup.c:reply_sesssetup_and_X(1265)
Feb 20 10:29:44 smbd[1327]: reply_sesssetup_and_X: Rejecting attempt at SPNEGO session setup when it was not negoitiated.



I checked the issue on google and found two solutions and they are not working...

--> Add "security = USER" to smb.conf (already there by default)
--> Change to "yes" : client use spnego = no

It's still not working ... I'm connecting to the VPN with my Nexus 5 device and I use Astro File Manager to access smb share...

Also, credentials are working from a local PC using Windows 8.1.


Thanks for your input on this one!


EDIT: there's a weird line in smb.conf by default: --> "use spne go = no" is this generated by the firmware? this line is there after a reboot of the router...

2nd EDIT: removing the "use spne go = no" from smb.conf fix the issue .... Maybe thats a bug? Can RMerlin have a look at it?

spnego is disabled by default for compatibility reasons - enabling it will prevent various Windows clients from connecting (for instance when they have the Windows Live ID Signin assistant installed).

In your case I recommend using a postconf script to set it to yes, since defaulting to yes would break compatibility for a lot more users.

 

[SpOuK3]

spnego is disabled by default for compatibility reasons - enabling it will prevent various Windows clients from connecting (for instance when they have the Windows Live ID Signin assistant installed).

In your case I recommend using a postconf script to set it to yes, since defaulting to yes would break compatibility for a lot more users.

Hi RMerlin,

I don't want to set it to yes... I found an error in the default smb.conf file: (here's a snapshot)

<....
max connections = 5
socket options = TCP_NODELAY SO_KEEPALIVE SO_RCVBUF=65536 SO_SNDBUF=65536
obey pam restrictions = no
use spne go = no
client use spnego = no
disable spoolss = yes
host msdfs = no
strict allocate = No
bind interfaces only = yes
interfaces = lo br0
....>

The line in bold is "invalid" which is causing issue... Once removed and samba restarted my issue are gone... But when rebooting, the line is back by default ... I think it's a bug or something put this in the config file by default... (typo?)