TAILMON TAILMON v1.3.0 -Aug 24, 2025- WireGuard-based Tailscale Installer, Configurator and Monitor (Available in AMTM!)

[Viktor Jaep]

As far as I know Merlin specifically sets the kernel values in the firewall code:

asuswrt-merlin.ng/release/src/router/rc/firewall.c at 9def7bc5f81986dfec82e56cd0f9665f130be88b · RMerl/asuswrt-merlin.ng

Third party firmware for Asus routers (newer codebase) - RMerl/asuswrt-merlin.ng

github.com

So unless he's not in "router mode" I can't think why it wouldn't be set.

@fisk ... please see above. This setting should be on by default. Like @ColinTaylor said, if you're not already in "router mode" (UI -> administration -> operation mode), then there's something else going on. Worst case, I think that would necessitate you possibly needing to reflash a fresh copy of the firmware to ensure all defaults are back in place.

 

[fisk]

As far as I know Merlin specifically sets the kernel values in the firewall code:

asuswrt-merlin.ng/release/src/router/rc/firewall.c at 9def7bc5f81986dfec82e56cd0f9665f130be88b · RMerl/asuswrt-merlin.ng

Third party firmware for Asus routers (newer codebase) - RMerl/asuswrt-merlin.ng

github.com

So unless he's not in "router mode" I can't think why it wouldn't be set.

Definitely in Router Mode. This was unchanged, fresh Merlin install as of this week, on a brand new router.

 

[fisk]

@fisk ... please see above. This setting should be on by default. Like @ColinTaylor said, if you're not already in "router mode" (UI -> administration -> operation mode), then there's something else going on. Worst case, I think that would necessitate you possibly needing to reflash a fresh copy of the firmware to ensure all defaults are back in place.

Appreciated!

All is working (very smoothly and to family satisfaction) now - so I'm not going to poke at it further.

 

[Viktor Jaep]

Appreciated!
View attachment 68433
All is working (very smoothly and to family satisfaction) now - so I'm not going to poke at it further.

Glad it's working... not sure what to tell you about those settings.

 

[JGrana]

Grr... I really need to get me one of those GT-BE98 Pro's so I can do some adequate testing.

Users of VPNMON-R3, RTRMON, PWRMON, WXMON, KILLMON, BACKUPMON and TAILMON
As we can see, @Viktor Jaep has brought many great additions/addons and advice to our community.
IMHO, it’s time to help Mr. Jeap out and thank him for all his work!
Since he has said he really needs to “get one of those GT-BR98 Pro’s” (around $630 USD from a number of US sites) - lets help him out!!!!

Here is his donation link from the AddOn Developer Donation thread:

https://www.buymeacoffee.com/viktorjp

It will be a win/win! Viktor gets a fancy (although a bit odd looking) GT-BE98 Pro for testing all his scripts and we get to thank Viktor and benefit from his scripts and testing!

 

[fisk]

Users of VPNMON-R3, RTRMON, PWRMON, WXMON, KILLMON, BACKUPMON and TAILMON
As we can see, @Viktor Jaep has brought many great additions/addons and advice to our community.
IMHO, it’s time to help Mr. Jeap out and thank him for all his work!
Since he has said he really needs to “get one of those GT-BR98 Pro’s” (around $630 USD from a number of US sites) - lets help him out!!!!

Here is his donation link from the AddOn Developer Donation thread:

https://www.buymeacoffee.com/viktorjp

It will be a win/win! Viktor gets a fancy (although a bit odd looking) GT-BE98 Pro for testing all his scripts and we get to thank Viktor and benefit from his scripts and testing!

Appreciate the nudge. Donating now!

 

[Viktor Jaep]

Thank you! Wow you guys are WAY too generous! Thank you all so much for your support... I'm going to see about getting one around Black Friday or Cyber Monday. Crossing my fingers for a good deal!

 

[rung]

Viktor,

Wanted to say thank you again for the autoupdate feature of the Tailscale binary. Five updates in less than a week? What's going on over there at Tailscale headquarters?

Rung

 

[jksmurf]

Viktor,

Wanted to say thank you again for the autoupdate feature of the Tailscale binary. Five updates in less than a week? What's going on over there at Tailscale headquarters?

Rung

Yeah pretty dire from TS … my other devices don’t have that autoupdate luxury… the tailscale —autoupdate thing doesn’t work that well.

 

[Viktor Jaep]

Wanted to say thank you again for the autoupdate feature of the Tailscale binary. Five updates in less than a week? What's going on over there at Tailscale headquarters?

I know right? It's been crazy lately. I feel so let down when I just finished updating all my non-auto-updating clients, and yet another version comes out. I really do wish I had an easier way of keeping this stuff updated... maybe I need to look at their man pages.

Yeah pretty dire from TS … my other devices don’t have that autoupdate luxury… the tailscale —autoupdate thing doesn’t work that well.

Ditto!

 

[jksmurf]

I know right? It's been crazy lately.

And just for that comment they’ve decided to punish you with another update … 1.90.6… . https://tailscale.com/changelog

 

[Viktor Jaep]

And just for that comment they’ve decided to punish you with another update … 1.90.6… . https://tailscale.com/changelog

Omg I thought they had already fixed that before!!

 

[rung]

Not sure if anyone has this issue with the autoupdate, but for me after any update, even though Tailmon reports everything is connected properly, and the Tailscale client also shows connected and no issues, I cannot connected to my router through the Tailscale network. The only fix I have found is to get the main monitoring loop to restart the tailscale service - which is a challenge to do remotely (happy I have a wireguard server backup).

To try to fix, I have tried various commands at the end of the new autoupdate routine, but this is only change that I could get to work:

--- /jffs/scripts/tailmon.sh
+++ ./tailmain.sh
@@ -1057,6 +1057,9 @@
           startts
           tsup

+          #Rung: Stop tailscale service and let main monitoring loop restart
+          tsdown
+
           echo ""
           printf "\33[2K\r"
           printf "${CGreen}\r[Tailscale Service/Connection Successfully Restarted]\n"

I tested this by repeattedly downgrading and autoupdating the tailscale service (hope they don't mind the extra traffic). Without - Tailscale client will not connect to router after autoupdate. With - connects fine after autoupdate.

I have no idea why restarting Tailscale doesn't work in the autoupdate routine (maybe there is a cache conflict between the update instance and the main monitoring loop?). If no one else is having this issue, I see no need to update the code, but I thought would I share my patch.

Rung

 

[buis]

Did you turn it on in tiscalie website just asking

 

[rung]

Did you turn it on in tiscalie website just asking

Not sure what setting you are referring to, but as stated above, all works fine after the Tailmon's monitoring loop restarts the Tailscale service.

 

[buis]

Login tiscalie website and put on subnet routes in the Check box on

 

[jksmurf]

The only fix I have found is to get the main monitoring loop to restart the tailscale service - which is a challenge to do remotely (happy I have a wireguard server backup).

if no one else is having this issue

I am seeing this. I'm too tied up with other remote router/IoT related headaches to run it to ground atm but yes, WG saved me several times too (and vv it must be said, as IIRC WG needs a DDNS...which also fails occasionally). I am glad I have WG / TS as a backup. TS update sort of just got stuck, did a similar retry to rescue.

 

[rung]

Login tiscalie website and put on subnet routes in the Check box on

Yes, in the Subnets area I have my subnet listed and approved. Thanks.