Recent content by eak

I should add that Netgear was not helpful at all. Their tech didn't understand IPv4 routing. After an hour he or she finally consulted a "higher tier" and reported back, "As I consult this to the higher tier they said that this kind of setup would not work with the Orbi router it's a product...

I recently changed my router to a Netgear Orbi RBK50 with the latest firmware. The LAN address of the router is 192.168.1.1 and things on the 192.168.1.0/24 subnet can access the internet just fine. On the 192.168.1.0/24 subnet is a box that forwards packets to another subnet, 192.168.2.0/24...

Thank you for 67_0! The new http certificate feature is a real time saver. While I was installing 67_0 on my media bridge, I noticed there is no route table in that mode. I have two subnets in my configuration, so it would help to be able to specify a static route, since one of my DNS servers...

Thank you for your continued work on this firmware. A question: Will 380.67 include OpenVPN 2.4.3? They just released multiple security fixes in that version:

The CherryBlossom user's manual, as released by WikiLeaks, indicates that the CIA software can be built for Asus hardware. Is anything known about what techniques were used to compromise Asus routers, and whether those vulnerabilities have been closed in the latest software?

Thank you Merlin. Do you know if httpd supports ECDSA certificates? Those are smaller. I believe I tried one once, and it didn't work, but as you keep upgrading the versions of things, that may have changed.

My RT-AC66U nvram is at 64012 bytes (1524 left). The largest item is https_crt_file, which is 5800 bytes (/etc/cert.pem is 5416 bytes). I would like to install a new cert.pem, but it would result in an nvram overflow. Is there a way to move https_crt_file out of nvram to, for example, jffs or...

I have two RT-AC66s, the first is the main router, and the second runs in media bridge mode. The second one seems to have failed. I cannot connect to it either via WiFi or ethernet. I have done a factory reset, but the ethernet port of the computer never gets a DHCP address from the RT-AC66. I...

I would like to edit the MAC filter list via SSH (e.g. to change a MAC address). I discovered several candidate variables via "nvram show". Do all of these needed to be edited in sync? Or are some vestigial since the 2.4 and 5 lists were merged? Also, is there a way to just turn off MAC...

Is there anything that should be done prior to installing 55 on a system that already has a /jffs/openvpn on 54_2? I used the recipe you posted once for manually moving OpenVPN keys etc. from NVRAM to JFFS (using a space in the GUI and then using custom commands to reference /jffs/openvpn files...

This is a happy user success report concerning the item "OpenSSL upgraded from 1.0.0 to 1.0.2". I have my 54_2 connecting to two OpenVPN Linux servers (I do not run an OpenVPN server on the RT-AC66U). I was able to introduce "tls-version-min 1.2" into the config and the logs report Control...

Thank you so much for this! This will be a big improvement. Has anyone tried using EC certificates and CA with 378.54_2?

Thank you. That is very helpful. I just make the /jffs change for the OpenVPN certs and it worked well. I might even have the room for a https cert/key in nvram now (too bad they can't live in jffs too). What did you think of sasoiliev's suggestion at at the link you posted? I actually keep a...

Thank you. That looks like it would indeed solve the problem. I will give it a try at the next reload. Do you happen to know if there is a way to set the certificate used by the router's HTTPS daemon? I would set it to the same one used by OpenVPN and avoid some certificate warnings when I...

I do hope that by the time OpenVPN 2.4 comes out, ASUS will have upgraded to OpenSSL 1.0.2, since 1.0.0 lacks TLS1.2 and newer EC ciphers (which require much shorter keys, and therefore much less NVRAM space).