[Fork] Asuswrt-Merlin 374.43 LTS releases (Archive)

[Mitchell Moonen]

Just about to flash my AC-66U tonight from merlinWRT 380.69_2 to the latest fork of your firmware. What's all this about DoT? pretty big networking rookie and definitely am trying to learn more.

 

[olind]

Hi, I'm using a N16 with the latest Advanced Tomato and I'm looking to update the firmware (since AT seems to be abandoned?). Are the last release for Asuswrt-Merlin on the github page: https://github.com/john9527/asuswrt-merlin/releases ? Any other tips on firmware or update?

Thanks

 

[Michael Cherry]

The only one I can think of for this is to try setting 'Enable WMM APSD' to Disabled on the Wireless > Professional tab.

Thanks for replying John. Channel 11 with with "WMM APSD" enabled was my starting point where the (2) devices wouldn't reconnect. Just changing to Channel 1 let them reconnect. I tried channel 1 with that setting disabled, that worked too. Channel 11 disabled worked. I then re-enabled the setting while on channel 11 and they still reconnected...which is where I started. So my best guess is that just changing the channel at all somehow helped these two devices be able to reconnect. Thanks again!

 

[ColinTaylor]

What's all this about DoT?

Google it. Basically DoT encrypts your DNS requests so that they cannot be read by your ISP/government/etc.

https://dnsprivacy.org/wiki/display/DP/DNS+Privacy+-+The+Problem

The encryption/decryption process requires extra processing which means that uncached DNS requests will be slower. Personally, I don't use it.

 

[ColinTaylor]

Are the last release for Asuswrt-Merlin on the github page: https://github.com/john9527/asuswrt-merlin/releases ?

I'm not sure I understand your question. The latest download for your router is here: http://bit.ly/1YdgUcP

 

[john9527]

Hi, I'm using a N16 with the latest Advanced Tomato and I'm looking to update the firmware (since AT seems to be abandoned?). Are the last release for Asuswrt-Merlin on the github page: https://github.com/john9527/asuswrt-merlin/releases ? Any other tips on firmware or update?

Thanks

Recommend you read through the first post in this thread.

 

[Master3395]

Hello, I've had an Asus AC66U A1, for a long time now.
and i wanted to find out if there was going to be any new updates.
But it doesn't seem like it.
I got "check for beta" enabled too.
But i was wondering if there were any third party updates anywhere.
I saw the first post, but it doesn't seem like it's as up to date, as the current version i got.
Does anyone know if there are any third party updates for this router?
I know that dd-wrt has one that works, but i really like Asuswrt UI.
3.0.0.4.382_50470-g033b865

 

[dave14305]

I saw the first post, but it doesn't seem like it's as up to date, as the current version i got.

It was just updated this week. Do not regard the 376 version number compared to 382 from ASUS.

 

[Master3395]

It was just updated this week. Do not regard the 376 version number compared to 382 from ASUS.

I see that it does not support the below features.
Are the features any big changes, from how it looks today?
And why doesn't it support the router control app? (the app part isn't the biggest deal)

Some of the enhanced gui formatting of later releases, for instance the new wireless log
- Support for the ASUS router control app

I just tried uploading the latest version, for my router.
But got this error.

To comply with regulatory amendments, we have modified our certification rule to ensure better firmware quality. This version is not compatible with all previously released ASUS firmware and uncertified third party firmware. Please check our official websites for the certified firmware.

 

[fatspirit]

I just tried uploading the latest version, for my router.
But got this error.

I suppose you haven't read the Installation Notes from the OP?

 

[Master3395]

I suppose you haven't read the Installation Notes from the OP?

I did, and i figured out, i had to do the 30 v 30 v 30 restoration.
Not the regular from windows.
My bad.
It got uploaded now

 

[Gravityz]

is there a simple way to make https secured encrypted with a free certificate.
i want to get rid of that standard chrome message which states the site is not secure.

on the standard asus firmwae you have let's encrypt but i noticed that option is not in the fork(probably becuase it is a fork firmware)

 

[dave14305]

is there a simple way to make https secured encrypted with a free certificate.
i want to get rid of that standard chrome message which states the site is not secure.

on the standard asus firmwae you have let's encrypt but i noticed that option is not in the fork(probably becuase it is a fork firmware)

If you happen to use Diversion and Pixelserv, there is an easy method documented on the Pixelserv github wiki to create a signed cert.

https://github.com/kvic-z/pixelserv...ixelserv-CA-to-issue-a-certificate-for-WebGUI

 

[john9527]

is there a simple way to make https secured encrypted with a free certificate.
i want to get rid of that standard chrome message which states the site is not secure.

on the standard asus firmwae you have let's encrypt but i noticed that option is not in the fork(probably becuase it is a fork firmware)

I like this one....
https://www.snbforums.com/threads/tool-to-manage-your-own-certificate-authority.45062/

 

[Mikeyy]

View attachment 15274

This is how my router settings look like with latest build.
But https://www.cloudflare.com/ssl/encrypted-sni/ reports "You are not using secure transport for your DNS", so no DoT.

Do I need to change some other settings or checker isn't good?

Also, when I visit https://ipleak.net/ to check, it shows my ISP DNS servers instead of cloudfare.

 

[john9527]

Do I need to change some other settings or checker isn't good?

Make sure there are no DNS servers entered on the LAN > DHCP servers page. Also, check there is no conflict if you are using DNSFilter.

 

[Gravityz]

I like this one....
https://www.snbforums.com/threads/tool-to-manage-your-own-certificate-authority.45062/

Thanks John

i know that tool. i used it to make the default openvpn implementation on Synology a lot more secure by creating my own certificates.(alternative config function)
I however followed a really good "how to" guide so at that time i really did not know what i was doing.

will do some readups to figur this out.

 

[Mikeyy]

Make sure there are no DNS servers entered on the LAN > DHCP servers page. Also, check there is no conflict if you are using DNSFilter.

Thank you.
Now it shows "We weren't able to detect if you are using DNS over secure connection".
I guess that's improvement.

I also have in DHCP page "Advertise router's IP in addition to user-specified DNS" and "Forward local domain queries to upstream DNS" both on YES. Not sure if that should be anything different.

I'm not using DNS filtering, so that shouldn't be issue.

 

[john9527]

Thank you.
Now it shows "We weren't able to detect if you are using DNS over secure connection".
I guess that's improvement.

I also have in DHCP page "Advertise router's IP in addition to user-specified DNS" and "Forward local domain queries to upstream DNS" both on YES. Not sure if that should be anything different.

I'm not using DNS filtering, so that shouldn't be issue.

I get the 'unable to detect msg' too.....it's working
ipleak or dnsleaktest should show the Cloudflare servers.

Forward local queries upstream should be set to No...

 

[Mikeyy]

All fine now, thank you!