Kamoj Kamoj add-on V5 for Netgear R7800 X4S and R9000 X10

[kamoj]

It is restarted if you change to None or Stubby, and then back.
By the way, it takes some time from when you enable lists till they are downloaded and enabled.
So be patient after enabling new lists. Refresh the page until "Now filtering:" has changed before doing more actions.

there is no command as I know can restart the dnscrypt-proxy without a reboot.

 

[kamoj]

https://www.snbforums.com/threads/k...00-x4s-and-r9000-x10.60590/page-3#post-536755
https://www.snbforums.com/threads/k...00-x4s-and-r9000-x10.60590/page-2#post-536493
https://www.snbforums.com/threads/k...00-x4s-and-r9000-x10.60590/page-4#post-543697

having an issue where if I enable stubby or DNScrypt v2, I keep getting pop-up to login.

using http://www.routerlogin.net/adv_index.htm to login, tried firefox, chrome, private mode, all same result. tried both http and https

 

[kamoj]

@Tiago : I have added "Hairpinning for brwan" to my add-on 5.1 beta. Hopefully it is enough for you!
Tell me if you want to try it.

One small issue I've found on this router whilst using an OpenVPN client: NAT loopback/hairpinning doesn't work.

Keep in mind this is not specific to your setup - I get the same behaviour using this: https://www.myopenrouter.com/article/how-set-openvpn-client-netgear-r7800-voxels-custom-firmware

 

[manup85]

kamoj, is it safe to use your new 5.1 even for a little noob like me? i'd like to try

 

[kamoj]

The 5.1 beta is being tested at the moment.
I suggest you use the 5.0 beta until 5.1 is released.
The known 5.0 beta bugs are listed in the #2 posting in this thread.
If there is some new feature from 5.1 beta you need, please let me know!

kamoj, is it safe to use your new 5.1 even for a little noob like me? i'd like to try

 

[manup85]

The 5.1 beta is being tested at the moment.
I suggest you use the 5.0 beta until 5.1 is released.
The known 5.0 beta bugs are listed in the #2 posting in this thread.
If there is some new feature from 5.1 beta you need, please let me know!

i'd like to use wifi guest bandwidth limit feature, telnet activated on boot and a strong adblock.

Thank You

 

[kamoj]

Kamoj add-on 5.0 already support "strong adblock".
Kamoj add-on 5.1 do support "telnet activated on boot".
Kamoj add-on 5.1 doesn't support "bandwidth limit features". Thank you for showing the interest in such a function!
So there is little reason for you to currently not use the public 5.0 beta.

i'd like to use wifi guest bandwidth limit feature, telnet activated on boot and a strong adblock.
Thank You

 

[Mariachi]

Open VPN setup works like a charm (PrivateVPN). Be sure to download the .ovpn server list from the PrivateVPN site and unzip in /etc/openvpn/config/client/ (dir TCP and UDP must reside there containing the .ovpn files).
Those will be recognized in the config screen for OpenVPN, select, enter your credentials and run. Excellent! Many thnks!!!!!!!!!

 

[kamoj]

Good you like it.
But even better: You don't need to download any server list/files manually since the add-on supports PrivateVPN!
Just chose PrivateVPN in "Create OpenVPN Client Configuration" etc.
(wait 20 seconds or so for servers to answer, select "Country", "Server", "Create Configuration", "Start VPN with this").
Hope you can try that too and report if it's working!

Open VPN setup works like a charm (PrivateVPN). Be sure to download the .ovpn server list from the PrivateVPN site and unzip in /etc/openvpn/config/client/ (dir TCP and UDP must reside there containing the .ovpn files).
Those will be recognized in the config screen for OpenVPN, select, enter your credentials and run. Excellent! Many thnks!!!!!!!!!

 

[Mariachi]

Good you like it.
But even better: You don't need to download any server list/files manually since the add-on supports PrivateVPN!
Just chose PrivateVPN in "Create OpenVPN Client Configuration" etc.
(wait 20 seconds or so for servers to answer, select "Country", "Server", "Create Configuration", "Start VPN with this").
Hope you can try that to and report if it's working!

Confirmed!

 

[B-dog66]

Hmm unfortunately it's not working: the max packet size I can send without fragmentation during ping is still 1464 and not 1472 as I would expect...
Not sure if the problem is the router or the modem... will try to understand...

You will need to add 28 back on to the value for IP/ICMP overheads, so if 1464 is successful, then 1492 is your MTU limit.
See here: https://www.sevenforums.com/tutorials/94721-mtu-limit-test-change-your-connections-mtu-limit.html?__cf_chl_jschl_tk__=a4de7cabf64cca938e4eae5e809dacde61d33b81-1585999108-0-AcG7Q2qKk4Vdbti1xTGj2IP4Fs1svTWwfKpQgG1EvbYKo30Gg09invgIgwgLRS-GJsQ2xsny3XYaa1uDRkIm2Zl2JBkVzSK-G_F-XlzXKHUigS1o24aYWKSoF5YowcUemRw3i5g3M4f6JiAnXQy7MhzVrprIzG6h3YqwU2D1i3d-l3TdJdpzujFnbw2jvUNSSksW2-_hnn4W4sMYxBwzxY_S69X78PmSfstlRY_YlgcAxuU8vdWB0EMkjbZf-EzpIwdPrB7DN3U9MBuNcnSttIaJtNY5q2cIxefGOEkhpKbxHvvmYg3yaHDxWTaQf2yoO0mISW0AXJZ0GpZeJWAwv9-tGX_PGZNfDcYpnr8ExG3b

 

[revengineer]

On several pages of the add-on I received prompts for user name and password and when I enter my credentials they are not accepted. Other users have reported this in the past and suggested changing the password. In the process of playing with passwords, I noticed that the add-on does not like passwords with dollar ($) signs. Can this be fixed?

 

[kamoj]

If you mean passwords for OpenVPN, its fixed in the Beta version. Many things are better in next release.
https://www.snbforums.com/threads/k...ar-r7800-x4s-and-r9000-x10.60590/#post-532396
OpenVPN Client: Create OpenVPN Client Configuration: Fixed credential containing blanks and special characters

On several pages of the add-on I received prompts for user name and password and when I enter my credentials they are not accepted. Other users have reported this in the past and suggested changing the password. In the process of playing with passwords, I noticed that the add-on does not like passwords with dollar ($) signs. Can this be fixed?

 

[revengineer]

If you mean passwords for OpenVPN, its fixed in the Beta version. Many things are better in next release.

The OpenVPN page was one where the credentials window popped up. But is also appeared when I clicked the 10 s refresh check box on the status page. Have you tried using a router password with a $ sign in it?

 

[kamoj]

Those passwords are pure Netgear/Voxel. The add-on has nothing to do with the router password at all.
So avoid using the refresh check box - if that helps.
I never had this problem myself, so I can not help you with this.
But its a good information that it might happen with "$" in the router password.
There is quite a mess in the Netgear code regarding "special characters", its on my todo list to clean it up...

The OpenVPN page was one where the credentials window popped up. But is also appeared when I clicked the 10 s refresh check box on the status page. Have you tried using a router password with a $ sign in it?

 

[revengineer]

Those passwords are pure Netgear/Voxel. The add-on has nothing to do with the router password at all.
So avoid using the refresh check box - if that helps.

It may well be that the issue is with the netgear code and just manifests itself when using the add-on. I will take that advice for now and see if anything changes with the next version of the add-on.

 

[walleyez]

Hello,
Looking for guidance with setting up openvpn using ExpressVPN on a R9000 running Version (Voxel) V1.0.4.39.1HF firmware. I had been using Kong’s last DDWT which began being a bit troublesome lately. Followed the process to transition back to the latest Netgear firmware successfully. Next installed Voxel V1.0.4.39.1HF firmware, followed the first semiautomatic install method of OpenVpn using a USB stick. At this point the router has internet connectivity and OpenVPN client fails to start. I opted to install the Kamoj add-on V5 to take take advantage of the many enhancement it makes available. This add-on is fantastic! The error log is consistent with the “Client:Error: OpenVPN client start failed. No process or tun21 found”. I am completely stuck here. Got past some of the nuances V5 of the add-on brought with using authentication file. Below is the log section for last attempt to get the client working and further information on the network setup.

Main Router is a Cisco RV345

• Currently have UNPN enabled
• Disable firewall to test if it was causing the problem…erorred with same notice
• Port 1195 UDP & TCP forwarding to 172.16.9.1

Netgear R9000 is a VPN Only router

• Currently have UNPN enabled
• DNS is set to ExpressVPN’s recommendation
  • 8.8.8.8
  • 8.8.4.4
  • 156.154.70.1
• Mode is Router
• Router has DHCP enabled.
• Only MacBook connected to router with WIFI and an Ethernet slot
• SSH enabled and working with key pairs.
• Kamoj add-on V5 installed

Session Log Section
2020-04-15 15:08:19 [OpenVPN] Client:Existing OpenVPN nvram configuration found: expressvpnDenver.ovpn
2020-04-15 15:08:19 [OpenVPN] Client:Check if DNS is already working
2020-04-15 15:08:19 [OpenVPN] Client password file given and exist.
2020-04-15 15:08:19 [OpenVPN] Client:Copy /etc/openvpn/config/client/expressvpnDenver.ovpn and change dev to: tun21
2020-04-15 15:08:19 [OpenVPN] Client:******* ip route before START:
default via 172.16.8.1 dev brwan
172.16.8.0/24 dev brwan proto kernel scope link src 172.16.8.2
172.16.9.0/24 dev br0 proto kernel scope link src 172.16.9.1
239.0.0.0/8 dev br0 scope link
2020-04-15 15:08:19 [OpenVPN] Client:Starting OpenVPN client expressvpnDenver.ovpn, device: tun21. Please wait...
Wed Apr 15 15:08:19 2020 WARNING: --keysize is DEPRECATED and will be removed in OpenVPN 2.6
Wed Apr 15 15:08:19 2020 OpenVPN 2.4.8 arm-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
Wed Apr 15 15:08:19 2020 library versions: OpenSSL 1.1.1e 17 Mar 2020, LZO 2.10
Wed Apr 15 15:08:19 2020 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Apr 15 15:08:19 2020 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Wed Apr 15 15:08:19 2020 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Wed Apr 15 15:08:20 2020 nice -20 succeeded
Wed Apr 15 15:08:20 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]70.39.102.170:1195
Wed Apr 15 15:08:20 2020 Socket Buffers: R=[212992->425984] S=[212992->425984]
Wed Apr 15 15:08:20 2020 UDP link local: (not bound)
Wed Apr 15 15:08:20 2020 UDP link remote: [AF_INET]70.39.102.170:1195
Wed Apr 15 15:08:20 2020 TLS: Initial packet from [AF_INET]70.39.102.170:1195, sid=549c09f2 03891a11
2020-04-15 15:08:41 [OpenVPN] Client:INFO: OpenVPN client pid:6138/PID:6138 started with: /usr/sbin/openvpn--devtun21--fast-io--nice-20--auth-nocache--sndbuf786432--rcvbuf786432--tun-mtu1500--mssfix1460--txqueuelen1000--writepid/var/run/openvpn-client.pid--cd/etc/openvpn/config/client--log-append/var/log/openvpn-client.log--config/tmp/openvpn_conf/expressvpnDenver.ovpn--script-security2--up/etc/openvpn/ovpnclient-up.sh--down/etc/openvpn/ovpnclient-down.sh--daemon--pushsndbuf 786432--pushrcvbuf 786432
2020-04-15 15:08:41 [OpenVPN] Client:Error: OpenVPN client start failed. No process or tun21 found
2020-04-15 15:08:41 [OpenVPN] Client:Connection is DOWN:
Wed Apr 15 15:08:41 2020 event_wait : Interrupted system call (code=4)
Wed Apr 15 15:08:41 2020 SIGTERM[hard,] received, process exiting
2020-04-15 15:08:41 [OpenVPN] Client:Optimize Stop. Turning Turbo mode off
2020-04-15 15:08:41 [OpenVPN] Client:Stopped. Restarting Firewall
2020-04-15 15:08:41 [OpenVPN] Client:Remove bad entry from ip route after stop: ip route del:
2020-04-15 15:08:41 [OpenVPN] Client:[OpenVPN] Client:******* ip route before STOP:
default via 172.16.8.1 dev brwan
172.16.8.0/24 dev brwan proto kernel scope link src 172.16.8.2
172.16.9.0/24 dev br0 proto kernel scope link src 172.16.9.1
239.0.0.0/8 dev br0 scope link
2020-04-15 15:08:41 [OpenVPN] Client:******* ip route after STOP:
default via 172.16.8.1 dev brwan
172.16.8.0/24 dev brwan proto kernel scope link src 172.16.8.2
172.16.9.0/24 dev br0 proto kernel scope link src 172.16.9.1
239.0.0.0/8 dev br0 scope link
2020-04-15 15:08:41 [OpenVPN] Client:Stop completed

Full VPN Log Section
2020-04-15 15:08:19 [OpenVPN] Client:Starting OpenVPN client expressvpnDenver.ovpn, device: tun21. Please wait...
Wed Apr 15 15:08:19 2020 WARNING: --keysize is DEPRECATED and will be removed in OpenVPN 2.6
Wed Apr 15 15:08:19 2020 OpenVPN 2.4.8 arm-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
Wed Apr 15 15:08:19 2020 library versions: OpenSSL 1.1.1e 17 Mar 2020, LZO 2.10
Wed Apr 15 15:08:19 2020 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Apr 15 15:08:19 2020 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Wed Apr 15 15:08:19 2020 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Wed Apr 15 15:08:20 2020 nice -20 succeeded
Wed Apr 15 15:08:20 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]70.39.102.170:1195
Wed Apr 15 15:08:20 2020 Socket Buffers: R=[212992->425984] S=[212992->425984]
Wed Apr 15 15:08:20 2020 UDP link local: (not bound)
Wed Apr 15 15:08:20 2020 UDP link remote: [AF_INET]70.39.102.170:1195
Wed Apr 15 15:08:20 2020 TLS: Initial packet from [AF_INET]70.39.102.170:1195, sid=549c09f2 03891a11
2020-04-15 15:08:41 [OpenVPN] Client:INFO: OpenVPN client pid:6138/PID:6138 started with: /usr/sbin/openvpn--devtun21--fast-io--nice-20--auth-nocache--sndbuf786432--rcvbuf786432--tun-mtu1500--mssfix1460--txqueuelen1000--writepid/var/run/openvpn-client.pid--cd/etc/openvpn/config/client--log-append/var/log/openvpn-client.log--config/tmp/openvpn_conf/expressvpnDenver.ovpn--script-security2--up/etc/openvpn/ovpnclient-up.sh--down/etc/openvpn/ovpnclient-down.sh--daemon--pushsndbuf 786432--pushrcvbuf 786432
2020-04-15 15:08:41 [OpenVPN] Client:Error: OpenVPN client start failed. No process or tun21 found
2020-04-15 15:08:41 [OpenVPN] Client:Connection is DOWN:
Wed Apr 15 15:08:41 2020 event_wait : Interrupted system call (code=4)
Wed Apr 15 15:08:41 2020 SIGTERM[hard,] received, process exiting
2020-04-15 15:08:41 [OpenVPN] Client:Optimize Stop. Turning Turbo mode off
2020-04-15 15:08:41 [OpenVPN] Client:Stopped. Restarting Firewall
2020-04-15 15:08:41 [OpenVPN] Client:Remove bad entry from ip route after stop: ip route del:
2020-04-15 15:08:41 [OpenVPN] Client:[OpenVPN] Client:******* ip route before STOP:
default via 172.16.8.1 dev brwan
172.16.8.0/24 dev brwan proto kernel scope link src 172.16.8.2
172.16.9.0/24 dev br0 proto kernel scope link src 172.16.9.1
239.0.0.0/8 dev br0 scope link
2020-04-15 15:08:41 [OpenVPN] Client:******* ip route after STOP:
default via 172.16.8.1 dev brwan
172.16.8.0/24 dev brwan proto kernel scope link src 172.16.8.2
172.16.9.0/24 dev br0 proto kernel scope link src 172.16.9.1
239.0.0.0/8 dev br0 scope link
2020-04-15 15:08:41 [OpenVPN] Client:Stop completed

Looking forward to using the firmware and add-ons. Looks like huge amount of great work putting this together!

 

[kamoj]

Welcome to this community @walleyez !
Apparently ExpressVPN does not "create" the vpn tunnel as it should.
Have you used the Kamoj add-on to create the .ovpn file?
And how is user/password entered?
It's good if you can PM me your .ovpn file contents.
Sorry to say I have not been able to give "native" support to ExpressVPN even if it might be one of the very best in many ways.
This is because they don't publish their .ovpn files, and maybe they even are specific for each user, like Mullvad and others.
So if you trust me contact me via PM and will try to help you of course.
Sincerely,
Kamoj

 

[walleyez]

Kamoj
Man thank you very much for the quick response! I did end up using your add-on to create / rename the the auth.txt file. Found a post from you back on Dec 29th that laid out the work around to get past the "No password file found". User and password are stored together in a .auth file separate from the .ovpn file.
I'd be more than happy to send you the ovpn file. I several different ovpn files that are downloaded from the ExpressVPN site. They actually have a DDWRT setup guide along with ovpn files for each different server location. Depending on you router / setup you may use the whole thing or cut pieces out of it with their instruction.
That being said I can't find how to send you a PM...I just became member on her today to send my previous message. Think I've been up a bit too long fighting with this router. Is it the start a conversation link that is in your profile?

 

[Panner]

Kamoj

Same thing happened to me when I updated one of the 5.1 beta addons (8.6 to 8.7). Suddenly the VPN connection that had been working with no problems and the same .ovpn and password files stopped with the log showing the same as walleyez. I uninstalled the update and installed the previous (which was working with the same .ovpn file). It did the same thing. Tried a few different .ovpn files and 1 worked. seemeed ok and then updated the 5.1 beta addon. All OK and has not reoccured with subsequent updates. Only difference between the .ovpn file that worked and the one that stopped was the IP address of the VPN server - same location just a different IP access. Do not know why it happened but has worked OK ever since and with each further beta update! Can send you the VPN log if it helps as I kept a copy in case I needed to raise a query if it did not clear.

Hope that helps