Recent content by netware5

You can still use your "old" router safely with John's fork of Merlin firmware. More information you can find here https://www.snbforums.com/threads/fork-asuswrt-merlin-374-lts-release-52e7.76314

Rule No.1: The only router port opened to the external world shall be the port OpenVPN server listening to! Following this rule also allows to minimise the risk using older router, which does not receive security updates anymore. The OpenVPN is very robust from the security point of view.

Dirty upgrade from 388.4. No issues so far. Thank you @RMerlin !

I am using the tls-crypt directive, which is the next level to tls-auth. It does not reduce the noise in log file but stops the scanners at earlier stage.

Yes, but if the client is in restrictive environment this is the only possible solution. The port scanners just flood the log file. Yes, the DPI engines can detect the OpenVPN traffic, but they are used mainly in extremely restrictive environments like China (GFW) and other states with...

My OpenVPN server works on TCP port 443 many years without problems. I don't use any "AI" things from Asus :) Running the server on 443 is generally the only possible solution when the client is in very restrictive environment. But it doesn't help in the case of Great Firewall of China (GFW) :)

Dirty upgraded from 388.2_2. No issues so far. Thank you, @RMerlin !

It is interesting that in the list we have VPN server and port forwarding. I am curious how they might be vulnerable. This at least breaks my strong believe in the Rule #1: "the only port open to the WAN shall be the port OpenVPN server is listening on". The believe that any vulnerability of...

Yes, the flash might be on its last legs and I am prepared for that. But this does not explain why when the disk FS is clean the AMTM failed to upgrade Entware packages while the opkg manual upgrade went fine.

Exactly!

Did it and now the file system is clean. Thank you for the advice! But the problem with Entware update persisted. The AMTM says that 35 packages should be updated, but after running update nothing happens. Solved the problem by running manually "opkg upgrade" and everything went fine. Maybe...

Hi guys! The Entware won't update. I decided to check the AMTM Disk Check log. Wed Jun 14 21:39:09 DST 2023 Waited 26s for NTP to sync date Wed Jun 14 21:39:09 DST 2023 Probing 'ext2' on device /dev/sda1 Running disk check v3.1, with command 'e2fsck -p' on /dev/sda1 Data contains a file system...

The presence of proton.me domain in the script is very strange. It belongs to the Proton Mail, which is well known as an extremely secure mail, vpn and cloud storage service. Personally I have an ultimate trust to them. Maybe it is in the script just by coincidence or have been put there just to...

Dirty upgrade from 388.1. No issues so far. Thank you, Merlin!

Dirty upgrade from 386.8, no issues so far. Thank you, @RMerlin !