Recent content by MKANET

I wanted to setup a fast/effective way to block ad-related DNS queries on my LAN. I was going to setup an Adguard Home VM instance on my network... when I realized that Merlin has DNS-based filtering support already. Are there any benefits to just using DNS Director Global Redirection...

I already have the 1200 plan. I got a good deal from Comcast. I currently only get about 900Mbps as opposed to the full 1400Mbps bandwidth. This is for my headless Internet-facing server with multiple self-hosted services; including nzb news client.

Im curious what makes the Intel 2.5Gb chipsets garbage? Do you have a resource I could check out. I only have experience with old fashioned 1gb Intel NICs

Thanks for the advice. I was actually asking the performance difference between Integrated 2.5Gbps NICs verses the equivalent addon card. I definitely want to take advantage of the extra speed.

I just ordered a great Intel-based motherboard... however, I realized afterwards that it only has an integrated old-fashioned 1Gbps Ethernet NIC. I'm curious is there any difference in performance/resource utilization/latency by using an Intel based 2.5Gbps addon NIC verses Integrated Intel...

Thanks. Ill look for deals. I'm currently only getting around 900Mbps Max to my primary PC. Comcast's 1200Mbps tier (which I already have) is actually closer to 1500Mbps downstream speed. I don't consider 60% improvement in downstream speed a small increase.

I'm currently using an Asus RT-AC5300 with the latest Merlin firmware connected to my Comcast "XFi Gateway" with Bridge Mode enabled. However, my Asus router only accommodates old-fashioned 1GB full-duplex Ethernet via its WAN port. I would like to upgrade my Asus router to be able to...

Did anyone figure out a definitive way to resolve this issue? I've had this issue intermittently as long as I've used Merlin. All I know It's not specific to any Merlin version; and, none of the items below are enabled on my setup: -VPN -Bandwidth analysis - Remote access - Mesh networking...

My apologies, I know this is an Asus-Wireless forum. However, I'm not sure where else to ask this question. I am curious if anyone here has installed Python 3.x via Entware on Merlin. Would an RT-AC5300 be able to comfortably handle running something like fail2ban? Thanks (and sorry again...

@ColinTaylor Your suggestion worked perfectly. It was exactly what I wanted. Thank you for the great support in this community. Heck, even RMerlin chimed in to help.

I think I found out why it wasn't working. You clearly told me earlier, "In which case you need to use the FORWARD chain rather than the INPUT chain". I didn't realize what you meant until I saw your example code. I had changed -A to -I only. I should know if this was effective by tomorrow...

Thanks @Huib , I was hoping adding the drop rules from the previous post to do what I want.. since it was relatively simple to do. However, it didn't seem to have any affect after restarting the firewall. @ColinTaylor, my apologies if I misunderstood what you were saying previously. But...

I forward port 80/443 to my web server PC running nginx. I prefer to stop the traffic at the firewall (before even reaching my web server). Previously, I was DENYing the CIDR via Nginx config.

Thanks. My intention is to block specific incoming unsolicited traffic from reaching my webserver via port forwarding. EDIT: I'm curious why would -I work in this case, but not -A?

I have very limited experience with Linux. I was hoping someone could assist me to create a script that will update iptables (to block a few incoming CIDRs). I already have a script called, /jffs/scripts/services-start which is executed when my router boots up. Could someone please assist...