Recent content by egc

Other third party firmwares have options to set the listen port and MTU. I have seen problems with MTU (slow, non loading websites with UDP etc.) so having the ability to set MTU is something which is very useful. Having the option to set a listen port can be useful I have seen providers which...

It is perfectly legitimate to specify a listen port on the client config, you do not have to and in that case a random port will be chosen.

I also get about 30 Mb/s on my Ac68U running OpenVPN and about 100 Mb/s running WireGuard. Unfortunately WireGuard is not supported by Asus-WRT on this router, so for that I had to use another third party firmware

Port number? Like you said hotspot are often actively blocking VPN or only allowing well known ports. If the latter you can try using port 443 for WireGuard/OpenVPN.

Depending on your needs maybe run another third party firmware?

I have my AC68U running DDWRT because I needed faster VPN then the 30 Mb/s OpenVPN gave me and now with WireGuard I get around 100 MB/s, I am running the latest build 51154 without a problem but an AC68U is not the same as your RT-N66U, yours is MIPS older and slower. On the FT forum is a...

DDWRT has OpenVPN and a kill switch in the GUI but honestly if you already have FT running I would ask on their forum. They are usually very helpful Advantage of DDWRT is they also have WireGuard on most routers which is faster and easy to setup

Well said. Your work is much admired and appreciated. Best wishes for all.

But you can maybe do it the old fashioned way and just copy all local routes to the other tables :)

In theory it is possible as other third party firmwares are running Kernel 4.4 for Broadcom Northstar e.g. Asus AC68U but in practices very difficult without having access to the closed source Broadcom code

Unfortunately no AsusWRT for Netgear routers. As this router is behind your Huawei router security should not be a big issue but I would update nonetheless. If you do not want stock firmware there are third party alternatives , I use DDWRT on my R7000 and running the latest build 50963 without...

True, you have to read and follow the forum guidelines, and do some basic research, you cannot blindly barge in. The newer Broadcom routers are normally OK and are always up to date with the latest security patches e.g. Kernel/OpenSSL/WireGuard/OpenVPN etc.

One of My AC68U's runs DDWRT because I needed faster VPN then the 35 Mb/s OpenVPN gave me and DDWRT has native WireGuard which gets me 105 Mb/s and it is running fine for almost two years. DDWRT runs on Kernel 4.4 which is an SLTS Kernel version so still supported security wise, others are...

Also supported by DDWRT : https://wiki.dd-wrt.com/wiki/index.php/Supported_Devices#Asus but different feature set, different kernel

As you are your own network administrator you want clients on your network to use plain DNS:53 and not DoH so that you can block/redirect traffic on your home network The router however can/should use a secure DNS like DoT or DoH (or DNSCrypt and there are newer implementations coming e.g. DoQ...