What's new

[Release] Asuswrt-Merlin 384.11 is available

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

RMerlin

Asuswrt-Merlin dev
Asuswrt-Merlin 384.11 is now available for all supported models. This is a fairly big update which brings a number of new features.

May 18th: 384.11_2 is now available, containing a couple of minor fixes.

Changes since 384.11:
Code:
  - NEW: Implemented source/destination IP filtering
         for the Netool version of Netstat web page.
  - CHANGED: Backported multiple fixes and improvements
             for ntpd from upstream, improving handling
             of failed server hostname resolution, and better
             clock sync discipline.
  - FIXED: RT-AC88U/3100/5300 were accidentally compiled
           with Netool enabled, which isn't compatible with
           these model's kernel.
 - FIXED: Movistar stopped working for some users.  Re-disabled
          udpxy on Movistar profile for now.  A more complete
          fix will have to come from Asus.
 - FIXED: Re-disabled memaccess debugging tool, as it creates
          a symlink called "sh" which is a pretty bad
          idea from Broadcom. (RT-AC86U, RT-AX88U)

The highlights:
  • New DNS Privacy feature, with DNS-over-TLS support. Configurable under WAN -> Internet Connection, this feature lets you connect with DNS servers that support DNS-over-TLS (DoT). DoT allows your DNS queries to be encrypted, preventing snooping from your ISP or anyone else in transit. Please visit https://dnsprivacy.org/wiki/ for more info on this protocol.
  • Replaced the custom ntpclient with an ntp daemon. This daemon acts as a client (to sync your router's clock with the NTP servers configured on the router's System -> Administration page), but it can also be used as an ntp server for your LAN devices. Server functionality can be enabled on the System Administration page. Afterward, you can either configure your LAN clients to use your router's IP as their NTP server, or enable the option to intercept NTP requests and automatically redirect them to your router's NTPD.
  • Updated some of the Network Tools to use Asus's new Netool service (RT-AC86U and RT-AX88U only). This allows the addition of a new visual ping for instance.
  • GPL merges: 384_5951 (RT-AX88U), 384_45713 (all other models). Note that the RT-AC87U and RT-AC3200 are still using the 384_45149 binary blobs for their closed source components.
  • Component updates: nano (4.0), curl (7.64.1), dropbear (2019.78).
  • Reworked the Firmware Upgrade page. The option to enable/disable automated checks are now on that page, and support for the Beta channel has been removed. Also, the popup reporting a new firmware release will now display that new firmware's version.
  • Cleanups to the DDNS page (removed the annoying alert() popups, and moved the notification within the page itself)
  • Moved some DNS settings (like DNSSEC) from the DHCP to the Internet Connection page
  • Moved LED control to the System -> Administration page
  • Editing devices on the Network Map will no longer restart your entire network, only dnsmasq itself. It means that blocking Internet access through it might not immediately come into effect, however the previous behaviour made it impossible to edit multiple clients.
  • Custom config/script changes: added service-event-end (run at the end of an rc service event, same parameter as service-event), stubby.postconf/add support (for customizing the DNS Privacy configuration). pre-mount will now receive the filesystem as a second argument.
  • Reboot Scheduler should be more reliable and less likely to corrupt plugged USB disks now
  • Security issue CVE-2019-1543 resolved in OpenSSL 1.1.x

Please review the changelog for a complete list of changes.

Anyone donating through Paypal: if you do so specifically for the addition of DNS-over-TLS, please leave a note in your donation, so I can forward your donation to @themiron who did about 90% of the implementation. (the last 10% I did was mostly webui stuff around it, like implementing the preset management).


Downloads are here.
Changelog is here.
 
Last edited:
Upgrade from beta 2 went well!
Thanks!

Sent from my SM-T380 using Tapatalk
 
Hi Merlin

Format JFFS partition at next boot does not format JFFS on an RT-AC5300. Anyonbe else experience this. How does one format it from command line?
 
Hi Merlin

Format JFFS partition at next boot does not format JFFS on an RT-AC5300. Anyonbe else experience this. How does one format it from command line?
did you hit apply after selecting that option before rebooting?
 
Here one AC88U. Movistar IPTV dont work properly on .11 final. Decoder works but when i set one channel its stops playing 2sg later. I went back to beta2 and works properly again.
 
Here one AC88U. Movistar IPTV dont work properly on .11 final. Decoder works but when i set one channel its stops playing 2sg later. I went back to beta2 and works properly again.

The only change there was to ensure udpxy does get started when using Movistar, it shouldn't have any impact on other models.
 
Is anyone else having an issue where you set "Logged packet type" to "accepted" and it keeps going back to "dropped". I'm on RT-AC86U 384.11_0 using FF or Chrome doesn't matter.
 
Do you have skynet installed?
 
The only change there was to ensure udpxy does get started when using Movistar, it shouldn't have any impact on other models.

Well, i said what happen when i flash .11 final on ac88u... Movistar IPTV stop works as should and go back to beta2 makes it working again. I will flash .11 final again to double check and will post what happen.

I know movistar do scans to find active udpxy and block IPTV if find any broadcast to stop piracy but my udpxy port is 0 (default)...

EDIT: Flashed again .11 final and again same problem. On TV decoder when i set one channel it freeze 2sg later and on pc i cant get multicast using VLC. Go back to beta2 solve the problem.
 
Last edited:
Working fantastic on the RT-AX88U updated from beta 2
 
upload_2019-5-8_21-49-17.png

has any one tested the new bone beta?
 
Upgrade to final from beta 2. Working well thus far. Thanks!
 
Well, i said what happen when i flash .11 final on ac88u... Movistar IPTV stop works as should and go back to beta2 makes it working again. I will flash .11 final again to double check and will post what happen.

I know movistar do scans to find active udpxy and block IPTV if find any broadcast to stop piracy but my udpxy port is 0 (default)...

EDIT: Flashed again .11 final and again same problem. On TV decoder when i set one channel it freeze 2sg later and on pc i cant get multicast using VLC. Go back to beta2 solve the problem.
Try a factory reset after flash of final
 
Code:
traceroute to www.google.com (216.58.192.36), 30 hops max, 60 byte packets
 1  96.120.21.221 (96.120.21.221)  10.748 ms  10.505 ms  10.001 ms
 2  68.86.171.233 (68.86.171.233)  13.893 ms  13.474 ms  16.879 ms
 3  68.87.166.77 (68.87.166.77)  15.970 ms  15.550 ms  15.548 ms
 4  68.86.95.45 (68.86.95.45)  24.055 ms  23.210 ms  23.597 ms
 5  68.86.82.154 (68.86.82.154)  22.786 ms  22.546 ms  22.302 ms
 6  66.208.233.242 (66.208.233.242)  21.924 ms 66.208.228.98 (66.208.228.98)  20.614 ms  21.426 ms
 7  * * *
 8  216.239.59.14 (216.239.59.14)  21.945 ms 108.170.226.225 (108.170.226.225)  20.938 ms 108.170.226.229 (108.170.226.229)  20.575 ms
 9  216.58.192.36 (216.58.192.36)  19.271 ms  17.590 ms 108.170.226.225 (108.170.226.225)  23.326 ms


On the RT-AC5300 a trace route after upgrading to this release merlin.

Notice it is not listing the hostnames
 
@RMerlin, I know that 'dirty' flashing from 384.10_0 to 384.11 is just a single 'version' update and a reset is probably not required (or, is it)?

But I'm curious if doing dirty flashes from 384.10_0, to 384.11, including all the point releases and the two alpha's and the two beta's is still considered the same? Your thoughts would be much appreciated. Thank you.
 
Code:
traceroute to www.google.com (216.58.192.36), 30 hops max, 60 byte packets
 1  96.120.21.221 (96.120.21.221)  10.748 ms  10.505 ms  10.001 ms
 2  68.86.171.233 (68.86.171.233)  13.893 ms  13.474 ms  16.879 ms
 3  68.87.166.77 (68.87.166.77)  15.970 ms  15.550 ms  15.548 ms
 4  68.86.95.45 (68.86.95.45)  24.055 ms  23.210 ms  23.597 ms
 5  68.86.82.154 (68.86.82.154)  22.786 ms  22.546 ms  22.302 ms
 6  66.208.233.242 (66.208.233.242)  21.924 ms 66.208.228.98 (66.208.228.98)  20.614 ms  21.426 ms
 7  * * *
 8  216.239.59.14 (216.239.59.14)  21.945 ms 108.170.226.225 (108.170.226.225)  20.938 ms 108.170.226.229 (108.170.226.229)  20.575 ms
 9  216.58.192.36 (216.58.192.36)  19.271 ms  17.590 ms 108.170.226.225 (108.170.226.225)  23.326 ms


On the RT-AC5300 a trace route after upgrading to this release merlin.

Notice it is not listing the hostnames

Could it be because of this in the changelog?
Code:
- UPDATED: Other models to 384_45713 GPL (RT-AC87U, RT-AC3200
             and RT-AC5300 still using 384_45149 binary blobs)
 
Could it be because of this in the changelog?
Code:
- UPDATED: Other models to 384_45713 GPL (RT-AC87U, RT-AC3200
             and RT-AC5300 still using 384_45149 binary blobs)
No it is from when he tried to.put NTools on all of the routers
 
No it is from when he tried to.put NTools on all of the routers

If I recall, that would be reversed for the 384.11 release?
Code:
- CHANGED: Replaced Network Analysis and Netstat pages (under
             Network Tools) with new versions based on Asus's
             Netool daemon (RT-AC86U, RT-AX88U)
 

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top