1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Dismiss Notice

Welcome To SNBForums

SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.

If you'd like to post a question, simply register and have at it!

While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!

[Release] Asuswrt-Merlin 384.7 is now available

Discussion in 'Asuswrt-Merlin' started by RMerlin, Oct 7, 2018.

  1. RMerlin

    RMerlin Super Moderator

    Joined:
    Apr 14, 2012
    Messages:
    27,986
    Location:
    Canada
    Asuswrt-Merlin 384.7 is now available. This release is not available for the RT-AC3200 or RT-AC56U, due to lack of compatible release code from Asus. In addition to merging with GPL 384_21152, this release brings major changes to the DDNS support, replacing the venerable ez-ipupdate client with the more secure In-a-Dyn.

    The highlights of this release:
    • Merged with Asus GPL 384_21152. The RT-AC87U binary blobs from GPL 382_50702 were merged in, allowing 384.7 to support this model (it wasn't available for 384.6).
    • Replaced ez-ipupdate with In-a-Dyn. This DDNS client is more modern, and still actively developed It also makes it easier to support multiple services. A custom plugin was developed to fully support Asus's own DDNS service.
    • All DDNS services now use HTTPS. Your DDNS login credentials are finally secure. Welcome to 2018 folks. Now might be a good time to change your DDNS password, just to be on the safe side.
    • Added freedns.afraid.org DDNS service to the webui.
    • DDNS can now retrieve your public IP either Internally (the original method of using the IP on your router's WAN interface) or Externally (by querying a remote server). This allows the use of DDNS in a Dual NAT or CGNAT situation. Note that it's still up to you to handle the fact that you have two firewalls in front of one another, so things like port forwarding or VPN server support will still require you to handle that at the first firewall level.
    • DFS Channel information are now shown on the Wireless Log page (based on upstream code from Asus's stock firmware)
    • Updated various components: curl (7.61.1), wget (1.19.5), openssl (1.0.2p), dnsmasq (2.80test8), nano (3.1).
    • DNSFilter settings were moved to the LAN section, to make it clearer that this feature is completely unrelated to Trend Micro.
    • Removed the various Norton Connect services from the DNSFIlter page. Symantec is going to discontinue the service in November. On first boot, any DNSFilter client set to use a Norton Connect DNS will be switched to OpenDNS Family to prevent service interruption while still providing security. Go to the DNSFilter page to adjust your settings as desired.
    • Added Quad9 to the list of supported DNSFIlter services (to compensate for the loss of Norton)
    • A couple of IPv6-related fixes surrounding dnsmasq (like dnsmasq crashes on the RT-AC86U in stateful mode).
    Please keep discussion in this thread to this specific release.


    Downloads are here.
    Changelog is here.
     
    triple, beastobadness, Dorus and 39 others like this.
  2. Please support SNBForums! Just click on this link before you buy something from Amazon and we'll get a small commission on anything you buy. Thanks!
  3. consorts

    consorts Occasional Visitor

    Joined:
    Sep 9, 2018
    Messages:
    19
    learned merlin is a version behind asus stock

    so nvm, asked and answered...
     
    Last edited: Oct 8, 2018
    Mihai likes this.
  4. scjr

    scjr Senior Member

    Joined:
    Nov 21, 2017
    Messages:
    430
    Location:
    "While I Breathe, I Hope"
    Upgraded over beta 3. All is well. Thanks, Eric!
     
    skeal and Mihai like this.
  5. RMerlin

    RMerlin Super Moderator

    Joined:
    Apr 14, 2012
    Messages:
    27,986
    Location:
    Canada
    Which specific version do you mean by "the latest Asus stock"? If it's something that was broken in 21152 and they only fixed in a later release, then you will have to wait for a release from me that will incorporate those fixes from upstream.
     
    skeal and Mihai like this.
  6. bitmonster

    bitmonster Regular Contributor

    Joined:
    Sep 26, 2018
    Messages:
    134
    Great work Merlin! Thank you for all your hard work!

    All working sweet here!! I still see 'insecure' in the DNSMASQ log running Diversion but I also saw 'Secure' which I never saw before... How can we see if DNSSEC is working?

    I am using Cloudflare 1.1.1.1 DNS - set to 'Router' as DNS Filter to enable Diversion to work.

    Sent from my SM-G965F using Tapatalk
     
    Last edited: Oct 7, 2018
    Mihai likes this.
  7. consorts

    consorts Occasional Visitor

    Joined:
    Sep 9, 2018
    Messages:
    19
    ASUS RT-AC3100 Firmware Version 3.0.0.4.384.32799 2018/09/19

    under normal circumstance, approximately when should merlin have "caught up" with asus stock ?
     
    Mihai likes this.
  8. JSinFCVA

    JSinFCVA Occasional Visitor

    Joined:
    Oct 11, 2017
    Messages:
    41
    Upgraded from 384.6 (Didn't have a chance to test the Beta). So far all is well on the AC86U. Did not need to reinitialize and configure from scratch. Will do that if I run into any issues.
     
    scjr, Kingp1n and Mihai like this.
  9. appleseed

    appleseed Regular Contributor

    Joined:
    Jun 26, 2010
    Messages:
    60
    Location:
    everywhere
    upgraded from 384.6, dirty flash, over wireless, while drinking hot coffee. I live on the wild side.
    absolutely no problems at all, but I use minimalist ntwk settings, so YMMV. Thank you Merlin
     
    doczenith1 likes this.
  10. scjr

    scjr Senior Member

    Joined:
    Nov 21, 2017
    Messages:
    430
    Location:
    "While I Breathe, I Hope"
    When Asus makes the GPL source code available.
     
    Mihai likes this.
  11. ozzman13

    ozzman13 New Around Here

    Joined:
    Oct 7, 2018
    Messages:
    2
    Is the RT-AC66U_B1 H/W Ver: B2 supported? I tried to install the AC86U firmware today but keep getting an unsuccessful upgrade error. Do I need to change the file format or anything? I've never seen a .w file before:

    RT-AC86U_384.7_0_cferom_ubi.w

    Thank you for the help! I tried searching the forums but I was not able to come up with a prior example.
     
    Mihai likes this.
  12. scjr

    scjr Senior Member

    Joined:
    Nov 21, 2017
    Messages:
    430
    Location:
    "While I Breathe, I Hope"
    Wrong firmware. Use the firmware for RT-AC68U.
     
    Mihai, skeal and ozzman13 like this.
  13. ozzman13

    ozzman13 New Around Here

    Joined:
    Oct 7, 2018
    Messages:
    2
    Doh! I kept reading it wrong! Thank you for making it crystal clear.
     
    Mihai and scjr like this.
  14. Grisu

    Grisu Very Senior Member

    Joined:
    Aug 28, 2014
    Messages:
    1,195
    Would be better to use 68U firmware instead of 86U ;)
     
    Mihai and ozzman13 like this.
  15. RMerlin

    RMerlin Super Moderator

    Joined:
    Apr 14, 2012
    Messages:
    27,986
    Location:
    Canada
    Unknown, it depends primarily on when they make the source code available before I can even begin to work on it. The 32799 code isn't available yet.

    There are various test websites out there for DNSSEC, best is to use them under Windows. Under Linux, issue a dig command through your router with a know-secured website (like asuswrt.lostrealm.ca) and see if in the flags you get the "ad" flag. Make sure you specify the router's IP, otherwise dig might use the dnsmasq version running on your Linux system, which might not be dnssec-enabled (under Ubuntu for instance it isn't).
     
    Mihai and bitmonster like this.
  16. Geraner

    Geraner Regular Contributor

    Joined:
    Jul 19, 2009
    Messages:
    131
    Location:
    Stockholm / Sweden
    Awesome that you added Quad9 as Norton Connect Safe will be discontinued.
     
    Last edited: Oct 7, 2018
    Mihai likes this.
  17. Grisu

    Grisu Very Senior Member

    Joined:
    Aug 28, 2014
    Messages:
    1,195
    Last edited: Oct 8, 2018
    Mihai likes this.
  18. bitmonster

    bitmonster Regular Contributor

    Joined:
    Sep 26, 2018
    Messages:
    134
    Seriously mate, you're a total champion. Asus should give you a medal for all the work you put in, or stock options at the very least!

    That's terrible that Ubuntu is not dnssec enabled (I use KUbuntu so I assume it's the same) however I have a Windows 10 system running now (I dual boot) so I'll just try that...

    I also wonder how necessary a DNS service is if I am already running Diversion, which I assume uses the same block files as the various DNS services anyway. So Cloudflare 1.1.1.1 seems adequate running with Diversion then (assuming DNSSec works).

    I am curious what the 'Validation result is INSECURE' entries in the Diversion log are about though. I am very keen to secure DNS properly.

    I Google'd for a few DNSec test sites but at first glance they failed although they may not be testing correctly (or testing the actual router resolution).
     
    Last edited: Oct 7, 2018
    Billy Chaney and Mihai like this.
  19. skeal

    skeal Very Senior Member

    Joined:
    Apr 30, 2016
    Messages:
    1,879
    Location:
    Script Tester from CA
    New stable release 384.7 running fine after factory reset (cause that's how I roll).;)
     
    AntonK, Clark Griswald, Mihai and 2 others like this.
  20. elorimer

    elorimer Senior Member

    Joined:
    Dec 16, 2013
    Messages:
    460
    Anyone else having problems with the 87U package? I've downloaded it twice but the upload fails.
     
    Mihai likes this.
  21. scjr

    scjr Senior Member

    Joined:
    Nov 21, 2017
    Messages:
    430
    Location:
    "While I Breathe, I Hope"
    Did you reboot the router?
     
    Mihai likes this.
Please support SNBForums! Just click on this link before you buy something from Amazon and we'll get a small commission on anything you buy. Thanks!