Asuswrt-Merlin 378.56 is available

[pauligrinder]

If it does a boot loop then it's an actual bug. What's the format of the key that you pasted, so I can try to reproduce it?

The proper format is the same used by openssh (and Linux in general). It's different from the format used by SecureCRT (i.e. it's not in PEM format)

The key should look somewhat like this (this is based on my ecdsa key, an rsa key should me quite similar):

ecdsa-sha2-nistp256 AAAAE2VjZHNhLREtbmlzdHAyAAAIbmWkjWAyNTYAAABCCO76w7ajXhqWjFsoRTZ+6j3ozO9oi2Nc7G9Y8etEoP1qTb3LmsakHqHMpvN7tPVABsAhG+x7sKIOPRls8kaVRPdA= user@host

It's an openssh generated RSA key, but I think it went wrong because I pasted the private key directly. I don't want to paste my real key here, but here's a newly generated similar one:

-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----

So I'll try putting the same key I have on my Raspberry Pi's authorized_keys file, and that'll probably work. That same key I pasted would look like this in that format:

ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAmFcHbZ1C8327QfGIDQ8PeuUvRtmzyWwFYirT3XmHs17L17hO7orvQp3ZvdyyV4s3DzTk2UOWuF9mm3pWa7n8LvG7hM3Mf7YHErUznqg/rGdt6W4v7Gv8qkw7oZDt4Wk2WkWJA/tHXd2ZOPkEUciSFHgmeJC+L0EQAn1p3nlhLYVktlOg+9L02bMwvldJQPCm2VP3Yji2XMU3CV2xJ9Vrhj6IB0SpZh2OKqzmmDl/IY8BvIa4ZF72PP5W7P7zM1L6Z/2/vMbYXhFM0EIds+ycJQWw8JshPeIj9cv1oqOyJhEv8a1UNaSYNmjg5gD/z6A4IZmQB1dHoIkeQrNawUOnvw== imported-openssh-key

Thanks Oh, and I guess the boot loop occured because the string I pasted was way too long and that hadn't been handled...

 

[^Tripper^]

I am getting that one too. Never happened before 378.56, is it a bug?

Oct 28 12:49:48 hour monitor: daemon is starting
Oct 28 12:49:48 hour monitor: ntp is not syn
Oct 28 12:50:18 hour monitor: daemon is starting
Oct 28 12:50:18 hour monitor: ntp is not syn
Oct 28 12:50:48 hour monitor: daemon is starting
Oct 28 12:50:48 hour monitor: ntp is not syn
Oct 28 12:51:18 hour monitor: daemon is starting
Oct 28 12:51:18 hour monitor: ntp is not syn

I have tried changing pool.ntp.org to direct IP address but that didn't resolve this issue for me.

I saw this thread but I am not really sure how to apply these changes.

Yeah I saw that thread but I guess it didn't apply to me as I did not have any customizations. I just basically did what I mentioned; unplugged everything, reinstall, reset to default, changed to direct IP and it worked.

Sorry, can't help beyond that. Perhaps someone else can chime in.

 

[Jorge Rui]

Can you add To IPTV the Vodafone profile?
XptoPt has the script for that.

Asuswrt-Merlin is now available for all supported models except for the RT-N66U (Asus hasn't released updated source code for that model yet, making it impossible for me to compile it).

 

[cierzo]

RT-AC87U vlan issues

Please give this new test build a try:

http://www.mediafire.com/download/gzsxsjxgi8maam8/RT-AC87U_378.56_1-gf34b046.zip

It resolved the issue for me with my test setup where I used an RT-N16 to simulate an ISP providing DHCP leases over a specific VLAN.

WAN Connected!
Thank you very much.

Now I'm trying to figure out why IPTV is not working with 378.55 config but today I've ran out of time.
IPTV is working configuring one port for deco but I'm using both internet and IPTV vlans tagged to switch (port 7)

 

[RMerlin]

I am getting that one too. Never happened before 378.56, is it a bug?

Oct 28 12:49:48 hour monitor: daemon is starting
Oct 28 12:49:48 hour monitor: ntp is not syn
Oct 28 12:50:18 hour monitor: daemon is starting
Oct 28 12:50:18 hour monitor: ntp is not syn
Oct 28 12:50:48 hour monitor: daemon is starting
Oct 28 12:50:48 hour monitor: ntp is not syn
Oct 28 12:51:18 hour monitor: daemon is starting
Oct 28 12:51:18 hour monitor: ntp is not syn

I have tried changing pool.ntp.org to direct IP address but that didn't resolve this issue for me.

I saw this thread but I am not really sure how to apply these changes.

Did you customize the dnsmasq config file?

Please provide your boot log.

 

[RMerlin]

Can you add To IPTV the Vodafone profile?
XptoPt has the script for that.

I don't make ISP-specific customizations as I have no way of actually testing them. Those should be done by Asus.

 

[Dick]

Hello!
Merlin, thank you for a new build!
I have a problem on an AC68U and 378.56 firmware: UPnP is enabled, but transmission couldn't open port via UPnP. Logs looks like UPnP is broken. Rebooting router without effect. When I manually open firewall port 51413, it is ok. Do you have an idea?

[2015-10-28 13:59:33.868 UTC] Port Forwarding (NAT-PMP) initnatpmp succeeded (0) (natpmp.c:70)
[2015-10-28 13:59:33.868 UTC] Port Forwarding (NAT-PMP) sendpublicaddressrequest succeeded (2) (natpmp.c:70)
[2015-10-28 13:59:41.868 UTC] Port Forwarding (UPnP) UPNP_GetValidIGD failed (errno 0 - Success) (upnp.c:235)
[2015-10-28 13:59:41.868 UTC] Port Forwarding (UPnP) If your router supports UPnP, please make sure UPnP is enabled! (upnp.c:238)
[2015-10-28 13:59:41.868 UTC] Port Forwarding Starting (port-forwarding.c:92)
[2015-10-28 14:01:41.868 UTC] Port Forwarding (NAT-PMP) readnatpmpresponseorretry failed. Natpmp returned -7 (the gateway does not support nat-pmp); errno is 11 (Resource temporarily unavailable) (natpmp.c:75)

 

[My_dogs_White]

I was a little concerned to move over to 378.56 because of issues some people have run into. I made the switch and wanted to report all went well. So far everything is working as it should. The traffic analyzer is working and so far the system log is not being flooded like it was with 9177.

Edit to Add (RT-AC87U)

Thank you Merlin!

 

[chiquito]

Now that the 578.6 is working well be possible that we had the triple brings the router VLAN as providing movistar (comtremd for xample) so we could connect the receiver to movistar provides to watch TV and also to connect an IP phone at any port router ..
thanks for your support and follow so ..

 

[gjf]

Looks like the bug when enabled Download Master does not allow to spin down HDD was solved in this version.
Nice!

 

[ubimea]

Update to latest Merlin firmware 378.56 on our Asus RT-AC3200 was without issue.
No problems with port forwarding, OpenVPN, Manually Assigned IP around the DHCP, remote access from Asus ddns, and wired and wireless connections all working as expected (not currently using wireless Smart Connect).
Update sequence used was removed USB devices, rebooted, installed new firmware, get glass of red wine and wait three minutes for update to complete; connect via interface to new firmware, force reboot again from GUI, add USB devices back, reboot final time. After three days with no issues, and for no reason other than we haven’t done so since purchasing the router, restored to factory default, then spent several hours reconfiguring back to our needs.
Thank you Merlin for all your efforts with the firmware and your explanations here online. The 378.56 Merlin release is recommended as of the date of this post without reservation for the RT-AC3200.

 

[mike2h]

thx merlin and ty to all the beta testers!!!!!!!!!!!!

 

[Conductor]

Yeah I saw that thread but I guess it didn't apply to me as I did not have any customizations. I just basically did what I mentioned; unplugged everything, reinstall, reset to default, changed to direct IP and it worked.

Sorry, can't help beyond that. Perhaps someone else can chime in.

I'm new to Merlin's firmware and still learning my way around, but FWIW, I saw this issue when running both betas and .56. I never saw it with .55. I have not configured anything out of the ordinary. Each time I was able to fix it by changing the WAN DNS Setting. One of the times, I was using Google's DNS servers (and had the issue) and after toggling to my ISP's DNS servers (automatic) its was fine. I was then able to change it back to Google's and it continued to work.

 

[RMerlin]

I'm new to Merlin's firmware and still learning my way around, but FWIW, I saw this issue when running both betas and .56. I never saw it with .55. I have not configured anything out of the ordinary. Each time I was able to fix it by changing the WAN DNS Setting. One of the times, I was using Google's DNS servers (and had the issue) and after toggling to my ISP's DNS servers (automatic) its was fine. I was then able to change it back to Google's and it continued to work.

What type of WAN connection do you use?

 

[RMerlin]

Hello!
Merlin, thank you for a new build!
I have a problem on an AC68U and 378.56 firmware: UPnP is enabled, but transmission couldn't open port via UPnP. Logs looks like UPnP is broken. Rebooting router without effect. When I manually open firewall port 51413, it is ok. Do you have an idea?

[2015-10-28 13:59:33.868 UTC] Port Forwarding (NAT-PMP) initnatpmp succeeded (0) (natpmp.c:70)
[2015-10-28 13:59:33.868 UTC] Port Forwarding (NAT-PMP) sendpublicaddressrequest succeeded (2) (natpmp.c:70)
[2015-10-28 13:59:41.868 UTC] Port Forwarding (UPnP) UPNP_GetValidIGD failed (errno 0 - Success) (upnp.c:235)
[2015-10-28 13:59:41.868 UTC] Port Forwarding (UPnP) If your router supports UPnP, please make sure UPnP is enabled! (upnp.c:238)
[2015-10-28 13:59:41.868 UTC] Port Forwarding Starting (port-forwarding.c:92)
[2015-10-28 14:01:41.868 UTC] Port Forwarding (NAT-PMP) readnatpmpresponseorretry failed. Natpmp returned -7 (the gateway does not support nat-pmp); errno is 11 (Resource temporarily unavailable) (natpmp.c:75)

Works for me. Check your system log for any error message related to miniupnpd. Also check the System Log -> Fowarded Ports page to see what's currently redirected, in case there's a port conflict.

 

[RMerlin]

Thanks Oh, and I guess the boot loop occured because the string I pasted was way too long and that hadn't been handled...

I do limit the number of characters allowed in the webui, but there might be a buffer somewhere in the SSH key management that's smaller than that limit. I will have to trace out that code branch to see if anything along the way needs resizing.

 

[john9527]

I do limit the number of characters allowed in the webui, but there might be a buffer somewhere in the SSH key management that's smaller than that limit. I will have to trace out that code branch to see if anything along the way needs resizing.

I didn't look to see if it's the same in the later releases, but in the fork it would just truncate the key. For my next release, I added an alert that the key field was too long.

 

[jontalk]

When I go to the download page for my router, RT-AC56U, I don't see any releases since 2013. I was under the impression Merlin supports all AC routers. If so where do I locate this release for my specific device? Thanks

 

[RMerlin]

I didn't look to see if it's the same in the later releases, but in the fork it would just truncate the key. For my next release, I added an alert that the key field was too long.

I guess one could check the size of the user-entered data, and if it's exactly the same length as the field limit (3499 if I remember correctly), then issue a warning.

I know dropbear isn't very resilient to corrupted keys, but that shouldn't cause a kernel panic, so the overrun is most likely in rc or libshared. Could also be in the processor code where I handle endlines before storing into nvram.

 

[RMerlin]

When I go to the download page for my router, RT-AC56U, I don't see any releases since 2013. I was under the impression Merlin supports all AC routers. If so where do I locate this release for my specific device? Thanks

Make sure you use the download sites listed on http://asuswrt.lostrealm.ca/download . The RT-AC56U latest release is 378.56, released a few days ago.