[Fork] Asuswrt-Merlin 374.43 LTS releases (Archive)

[terribell]

A generic problem like that can be caused by Anti-virus programs (ESET Nod is one that always comes up).. Whatever one you use, make sure all it's features are disabled for the router ip.

I don't have any other antivirus except windows defender and I've tried accessing from 2 windows machines and several android devices.

For me it's no concern, as it very sporadically happens, and a reset resolves it.

 

[bmb]

A couple of questions.....
- When this happens can you try and access the router by starting your browser in 'no-addons' mode? With Chrome, in particular, I've had some addons not play well with the gui.
- How are you accessing, via http or https?
- Do you have a session timeout set on the administration page and tend to leave the gui up so it auto logs off?
- Are you always accessing from the same client, or does this happen when accessing from a different client from the previous access?

Thank you for the suggestions.

Its in the inaccessible mode now, so I tried Chrome 'no-addons' mode and still unable to connect.

Connection is via http

Yes I have time out set and let it auto log off. Maybe there is a clue in your question, I'll disable this option next time I get access.

I was trying to access from the same client (say pc A) that I last auto logged off from. I suspect this is nearly always case. Now I just used another pc (say pc B) and logged on straight away Progress made here! I then logged out from pc B and could log in from pc A. Success!

I've probably never tried that before as I almost always administer the router from pc A. Also at the same time looks like access to RT-N66U Network shares restored and to attached USB drives, although I did remove one drive and reconnect it, so will have to keep an eye on that part of the problem.

This is the first time I've been able to solve this without a power recycle.

I'll disable auto log off then and log out manually and see how things go.

Thank you very much.

 

[john9527]

This is the first time I've been able to solve this without a power recycle.

I'll disable auto log off then and log out manually and see how things go.

I run with the auto log off, and think it's probably a good safety measure, especially if you try to logon from multiple PCs. Where I've see intermittent problems (that I haven't been able to track down), is when you leave one of the message pages open on the PC, either the 'logged off' page, or the 'can't log on because another user is logged on'. I've found if you close these pages first when they occur, things run much smoother.

 

[Martineau]

..... but on my case even the ssh cannot logon.

Not sure if this monitoring script would be useful?

#!/bin/sh

# Monitor SSH task every 5mins and auto restart if it goes AWOL
cru a CheckSSHD "*/5 * * * * (/bin/pidof dropbear 2>&1 >/dev/null || /sbin/run_sshd)"

No doubt the same monitoring could be applied to httpd with a service restart_httpd?

Obviously if dropbear is hung/stalled, but still exists, then perhaps say every hour you could also issue

killall   dropbear

Feb  1 12:50:23 RT-AC68U authpriv.info dropbear[4982]: Exit (admin): Terminated by signal

Feb  1 12:55:01 RT-AC68U cron.info crond[507]: crond: USER admin pid 6897 cmd (/bin/pidof dropbear 2>&1 >/dev/null || /sbin/run_sshd)
Feb  1 12:55:01 RT-AC68U authpriv.info dropbear[6901]: Running in background

 

[petya]

I also had problems accessing the router but only on 5 Ghz wifi. I switch over to 2.4 Ghz and it works ok.
Internet usually work but the router can't be accessed in any way(web, ssh).
I have a AC66U running 16E1.

 

[john9527]

Another quick update to the beta....

BETA RELEASE: Update-17BA
1-February-2015
Merlin fork 374.43_2-17BAj9527
Download http://1drv.ms/1sDtB1V
============================

Update-17BA

• Fix: QoS enable slider may not be visible (thanks to @scaramonga for the report)
• Added JFFS backup function (Merlin backport)
  access via Administration>Restore/Save/Upload Settings page
• Memory leak fixes backported from Shibby Tomato and Linux repository (right now for ARM only)

Update-17Beta Full log
see http://www.snbforums.com/threads/fork-update-for-374-43-available-v16e1.18914/page-153#post-233992


The code images have grown by 60K-100K...MIPS users make sure to have a jffs backup!

SHA256

965ea35c8ae29dc7c13c358aac0c082546d3d3e5791a2a0471cd252177bb254a *RT-AC56U_3.0.0.4_374.43_2-17BAj9527.trx
1145d667cc76faeec57396b48a00a4801f9f7eaee8521232e07008d12d911692 *RT-AC66U_3.0.0.4_374.43_2-17BAj9527.trx
9aac77b192e1ef7fb2765399c064df78b74d46821374885bc3bc47afb588a036 *RT-AC68U_3.0.0.4_374.43_2-17BAj9527.trx
49be9e128ebcb82b27f20458174b00df425e8465dbd9261ea0b654f7280e2ac8 *RT-N16_3.0.0.4_374.43_2-17BAj9527.trx
edc952553bc76d958a3cad7d214cf93d6005e4fd7b62d3a719a7acbac9b32ab4 *RT-N66U_3.0.0.4_374.43_2-17BAj9527.trx

 

[john9527]

I also had problems accessing the router but only on 5 Ghz wifi. I switch over to 2.4 Ghz and it works ok.
Internet usually work but the router can't be accessed in any way(web, ssh).
I have a AC66U running 16E1.

Don't know what to say about this one.....should be no difference between 2.4 and 5GHz.
I personally access via http/https on windows with IE10/Firefox over Ethernet and 2.4/5 GHz wireless, and on LinuxMint with Firefox/Chrome via 2.4/5 GHz with no problems (save an intermittent problem when I accidentally attempt multiple access from different clients at the same time, and even then ssh will always work).

 

[john9527]

No doubt the same monitoring could be applied to httpd with a service restart_httpd?

httpd is already monitored by the watchdog and restarted automatically if it goes down.

 

[Martineau]

httpd is already monitored by the watchdog and restarted automatically if it goes down.

That's what I thought, but clearly it may be prudent to see if manually creating a new instance of httpd restores GUI access, as presumably the watchdog may not detect the exact condition that seemingly blocks access.
However, restoring SSH access would be more productive to grant access to more diagnostics tools in order to try and identify why the lack of access occurs.

 

[YasharF]

Heads up OpenSSL 1.0.2f just got released: https://www.openssl.org/news/cl102.txt

 

[john9527]

However, restoring SSH access would be more productive to grant access to more diagnostics tools in order to try and identify why the lack of access occurs.

I thought of that when I read your post.....I'll look at adding dropbear/ssh to the watchdog as well.

EDIT: I was also thinking if there was some simple check that could be added to the httpd watchdog to see if it was still really alive and not hung. Any ideas on this one?

 

[john9527]

FYI
Traffic Manager Page is broken in french sorry
374.43_2-17BAj9527

Yes sir......found it. It is this phrase

Liste des normes spécifiées par l'utilisateur

the single ' kills the parsing of the line

 

[trisk]

I don't know if my problem is the same as bmb, but on my case even the ssh cannot logon.
I always get timeouts when trying to interact with the router but as far as I can tell all the functionalities remain working.

Does this happen for both devices connected to WiFi and devices with wired connections?

What happens if you try to ping the router when the web interface stops working?
In a terminal (or cmd.exe in Windows), where router-address is the IP address of your router:

ping router-address​

You can Ctrl-C to stop. If you don't see a response immediately, that's a pretty bad sign.

If that worked, you can also try:

telnet router-address 22​

You should see something like

Escape character is '^]'.
SSH-2.0-dropbear_2015.67​

(Type Ctrl-], followed by Q, to exit)

If both work but you can't actually log in with ssh, try clearing jffs as that may have survived a reset.

 

[RMerlin]

Heads up OpenSSL 1.0.2f just got released: https://www.openssl.org/news/cl102.txt

Nothing really important relative to Asuswrt there. SSLv2 support is already disabled, rejecting DH below 1024-bit is only to ensure that a remote server doesn't use a lower 768-bit DH, and CVE-2016-0701 does not affect OpenVPN.

 

[Martineau]

I thought of that when I read your post.....I'll look at adding dropbear/ssh to the watchdog as well.

EDIT: I was also thinking if there was some simple check that could be added to the httpd watchdog to see if it was still really alive and not hung. Any ideas on this one?

I doubt checking CPU, I/O statistics etc. would give a definite answer to determine if httpd is logicially down,...but how do external web hosts test that their site is available?

Does a curl response in a script prove anything?

curl    10.88.8.2

curl: (7) couldn't connect to host

vs.

curl   $(nvram get lan_ipaddr)

<HTML><HEAD><script>top.location.href='/Main_Login.asp?error_status=1&page=index.asp&lock_time=0';</script>
</HEAD></HTML>

 

[kitch9]

Is there any reason/setting on 16e and 17b firmware why I'm struggling to get my TV's and amp to access the media server on the router. Its just showing as not available, works perfectly on 15?

 

[terribell]

Is there any reason/setting on 16e and 17b firmware why I'm struggling to get my TV's and amp to access the media server on the router. Its just showing as not available, works perfectly on 15?

I sometimes get this problem when there is an error with the disk with the media and the scrapper is not able to proceed.
I use this command "/usr/sbin/minidlna -R -f /etc/minidlna.conf" to try and refresh the database and check the error and if a file is corrupt I check the disk or rename the minidlna folder.

 

[john9527]

Is there any reason/setting on 16e and 17b firmware why I'm struggling to get my TV's and amp to access the media server on the router. Its just showing as not available, works perfectly on 15?

Nothing overt I can think of, I didn't touch any of the minidlna code in the recent releases.
I just double-checked my Yamaha receiver, VIZIO TV, Roku 3 and Windows Media Player and they all can see/use my media server.

Only possibility I can come up with is if you have a really long name for the media server, you might try to shorten it a bit (mine is 17 characters). I closed a bunch of potential buffer overflow conditions in V16, and maybe one of those is coming into play.

 

[Chrysalis]

Right now the ASUS OpenVPN only supports IPv4.....if you have IPv6 enabled it will bypass the VPN. Enabling OpenVPN IPv6 is one of the next things on my 'todo' list

my private vpn server has ipv6 ip's now so I can help test and maybe even supply you an account so you can test directly yourself, let me know if it helps.

 

[john9527]

Does a curl response in a script prove anything?

Great idea.....and it works! Got a little more complex, had to check both http and https access, set timeouts, uset the https cert, etc.....but

Feb  2 07:19:53 watchdog: restart httpd - SSL, process not responding (28)
Feb  2 07:19:53 rc_service: watchdog 706:notify_rc stop_httpd
Feb  2 07:19:53 rc_service: watchdog 706:notify_rc start_httpd
Feb  2 07:19:53 rc_service: waiting "stop_httpd" via watchdog ...
Feb  2 07:19:54 httpd: start httpd
Feb  2 07:19:54 httpd: start httpd - SSL
Feb  2 07:19:55 HTTP login: login 'admin' successful from 192.168.1.100

The (28) is the curl rc for a timeout It's a bit of a hack, but it did break things free from an https 'double logon' attempt fail that I've been unable to track down.