Recent content by djmcfar

  1. D

    386.9_0 for me?

    Thank you very much Viktor ! :)
  2. D

    386.9_0 for me?

    I received an alert that new firmware is available today for my ASUS RT-AC86U running Merlin 386.7_2 (yellow exclamation point appeared in UI, shown below), so I checked the Merlin website and found that version 386.9 is available is for the RT-AC86U. My question is, if I go ahead with the...
  3. D

    Request for new User Script hook

    When running VPN in Exclusive mode, all local DNS requests fail when sourced locally, targeting locally (i.e. nslookup requests made from a device on the local network about another device on the same local network). I came up with a fix for this involving inserting a custom rule at the head of...
  4. D

    Can't Find RT-AC86U Wifi Data Chanel Number

    scp did the trick for me.
  5. D

    Can't Find RT-AC86U Wifi Data Chanel Number

    Already tried that and there's nothing on the USB except for the entware directory. I doubt if there's a process using anything on there. There might be some info about that in /proc but that's a lot of trouble to go through in order to unmount the device. I'll look for alternative ways of file...
  6. D

    Can't Find RT-AC86U Wifi Data Chanel Number

    Thanks for your reply Colin. I ordered an Atheros AR9271 2.4 Ghz USB WiFi Wireless Adapter, which will do the trick. If I may add a side question... When a create a tcpdump capture file on the router, syncing and verifying file contents, then remove the USB2 stick from the USB2 slot and take...
  7. D

    Can't Find RT-AC86U Wifi Data Chanel Number

    In wifi monitor mode using wireshark - able to display packets from other devices but no packets other multicast and the like. No application data like web browsing. Thanks in advance.
  8. D

    Local src--> local dest DNS Requests sent to upstream DNS with VPN Client

    Found a fix for the local reverse DNS over Exclusive mode VPN failure which preserves the Exclusive mode DNS leak prevention, by inserting the following rule at the head of the DNSVPNx chain(s). It checks if the DNS request is sourced locally, then checks for the reverse-arpa notation that would...
  9. D

    Local src--> local dest DNS Requests sent to upstream DNS with VPN Client

    So you are saying that when VPN exclusive mode is active, DNS filtering is not possible for WAN routing, meaning that there is no opportunity for the firmware to inspect the source address and DNS request address (or name) before it is passed onto the WAN interface ? If that is the case, the...
  10. D

    Local src--> local dest DNS Requests sent to upstream DNS with VPN Client

    I notice that all other local to local traffic or ARP is filtered from entering the tunnel, perhaps a local DNS request filter could be added also?
  11. D

    Local src--> local dest DNS Requests sent to upstream DNS with VPN Client

    I forgot to add the steps to reproduce.... (1) setup an instance of VPN client, using exclusive DNS mode (2) setup local node-1 to use the tunnel and node-2 to use the WAN (3) from node-1 type "nslookup <private address>" where <private address> is the IP address of a device on the local...
  12. D

    Local src--> local dest DNS Requests sent to upstream DNS with VPN Client

    This thread is for @RMerlin On my RT-AC86U running Merlin 386.7_2, I run the VPN client in exclusive DNS mode because it is necessary to use all of our streaming services. In the VPN Director I have rules to select WAN/VPN for the home computers in our network. Local nslookup queries are...
  13. D

    Smartphone Identification Question

    No, I didn't try that. But it turns out that the root cause of the local DNS failures is beyond my control and has nothing to do with linux. I have VPN client enabled on the router and use the VPN Director rules to select VPN/WAN for the computers in the network. "Exclusive" mode was the only...
  14. D

    Smartphone Identification Question

    Interesting question posed by OP. I started searching on whether Ubuntu intentionally blocks local name resolution, and it turns out that recent versions of dnsmasq do it on purpose, to supposedly thwart some bizarre attack type, so I uninstalled dnsmasq and did a cleanup, rebooted but the...
  15. D

    Smartphone Identification Question

    drinkingbird - As long as the local domain name isn't registered, it should work, but I changed it to home.lan just now, and no effect (other than the windows boxes report the change suffix in their nslookup output, along with the device name ). The chances that nslookup is corrupted are slim...
Back
Top