Recent content by dodava

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

  1. D

    Passwordless SSH into the Asus Router

    On the Administration-System page there is a field labeled "SSH Authentication key". Paste your authorized keys into this field. The keys will then survive reboot.
  2. D

    how to use openvpn-event ?

    openvpn-event gets called when events happen for both the server and the client, so you need to check that the event is for the tunnel you are worried about. The code below performs actions when the 1st client connection, tun11, either goes up or down. If you are worried about the 2nd client...
  3. D

    sftp access

    Yeah, sorry about that. Brain fart on my part. I have been playing around and run a custom build where things are mounted from the usb drive. I forgot that /usr is not read-write for anyone else.
  4. D

    sftp access

    There are two different protocols for transferring files using ssh. They are scp and sftp (which has no relation to plain ftp). When you enable ssh file transfer via scp is enabled but sftp is not. sftp has advantages over scp. It allows you to interrupt and resume file transfers and it allows...
  5. D

    Asuswrt-Merlin 3.0.0.4.354.28 Beta 1

    The new SSH brute force protection option uses the netfilter recent module, so it is now compiled as part of the kernel versus as a kernel module.
  6. D

    Guest Network working?

    ebtables can't provide wireless client isolation because the traffic between wireless clients on the same wireless network is switched in hardware. The only way to implement client isolation is through the driver. With asuswrt and asuswrt-merlin this is done using the wl command. "wl -i eth1...
  7. D

    Chinese IP in System Log

    If you use asuswrt-merlin beginning with version 3.0.0.4.354.28 Beta 1 SSH brute force protection is available. It needs to be selected on the Administration - System webui page. When enabled if more than 3 ssh connection attempts from a single ip occur within a minute the ip address will be...
  8. D

    Guest Network working?

    As you have already seen the guest wireless network is in the same ip subnet as the non-guest networks. This is because the guest wireless network interfaces are added to the br0 ethernet bridge instance which also contains the wired lan ports and the non-guest wireless interfaces. If you run...
  9. D

    iptables - version

    Use layer7 netfilter module The netfilter layer7 module is available. You just need to "insmod xt_layer7" before you can use iptables to write rules which use it. Using the layer7 module you can write a pattern to match the specific dns packet type you are looking to filter.
  10. D

    AiCloud/Disk self signed cert

    How to use a real certificate I use a real certificate with my router. The following instructions assume basic knowledge of how to ssh to your router and use linux. Pre-requisites jffs enabled and jffs partition formatted certificate in pem format certificate key in pem format with no...
Top