Recent content by Climber

Ah, I was not aware of there being hidden information. Thank you very much. That shows exactly why. TCP is rejected for all interfaces, but UDP to DNS port 53 only from br0. Which explains why DNS lookup and Ping are getting through from br2. Anybody know why it's only blocking DNS for br0 and...

It was on Guest Network #1. I know #1 behaves different and gets a separate bridge and subnet. Since I used the 5GHz it goes to br2. However, I didn't think that would have been a reason to bypass an outgoing firewall. I did some more testing and GN #3 doesn't have this problem, so it seems that...

RT-AX86U on Merlin 3004.388.9_2 Guest networks with intranet access disabled seem to bypass the firewall URL filter. On the main network the blocking works fine. If I enable the intranet access on the guest network the blocking works fine too. I used the GUI to add the URLs and they show up...

Had already done that :-) Just shows acc_num and acc_webdavproxy What fature is acc_list associated with? Maybe my FW version doesn't have it or I don't have it enabled?

Good to know the nvram command gives more variables, but still no acc_list

Awesome. Thank you for the fast help. I found the permissions in the .__ files I don't have an acc_list variable in /jffs/nvram though. Plenty of other lists, but not that one. But changing the .__ file and restarting the FTP service seems to work, so I'm good. Thanks.

Using an RT-AX86U on Merlin 3004.388.4 and want to be able to modify the FTP client folder access permissions from a bash script. Does anyone know where the settings are stored? vsftpd.conf doesn't seem to have them. I can't find them by Googling or simply browsing through the filesystem. Wasn't...

Forgot to mention it's an AX86U running on Merlin 386.7_2. It doesn't seem like a simple hardware switch either, since I can remove an ethernet port from bridge br0 and add it to bridge br1 that is created by guest network #1 with intranet disabled, so different IP addresses assigned.

Bump!

Was trying to do some ethernet level filtering for the LAN/WLAN via ebtables -t broute and it appears that none of the destinations on the local subnet, except for the router itself, are passing through here and thus also not iptables? Also see that several SNB members suggest removing ethX from...