What's new

YazFi YazFi - enhanced AsusWRT-Merlin Guest WiFi inc. SSID <-> VPN Client

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

standard ssid/passwd? WPA2?
same with stock firmware?
working fine here with merlin's .17
Correct. In fact the ssid is similar to my main wifi network and the password is almost the same for testing purposes.
With stock firmware I haven't test it because I'm using Merlin since day one :)

Edit: i just formatted again and configured everything from scratch.

Miracle... It suddenly started working. Then I installed YazFi and it worked better :)

I really don't know what can happened, but I suspect some nvram broken var or something...
 
Last edited:
How much time does YazFi waits to get applied?
Guest wifi is working now, but after a reboot it doesnt appli YazFi settings. I have to manually apply them
 
60s after a firewall-start is called
Well, now i'm facing another problem.
I can connect to guest network, but i don't have internet access.
It gets Ip correctly, but haven't access.
I think when i manually restart VPN (i'm redirecting guests to VPN), it starts working

Edit: I was so happy that guest networks started working that I forgot to set "auto start on boot" on vpn client... That way, yazfi was redirecting traffic to a disconnected vpn :) I'm so sorry...

Everything working fine right now!!! Thanks yo everyone
 
Last edited:
Well, now i'm facing another problem.
I can connect to guest network, but i don't have internet access.
It gets Ip correctly, but haven't access.
I think when i manually restart VPN (i'm redirecting guests to VPN), it starts working

Edit: I was so happy that guest networks started working that I forgot to set "auto start on boot" on vpn client... That way, yazfi was redirecting traffic to a disconnected vpn :) I'm so sorry...

Everything working fine right now!!! Thanks yo everyone
At least you know the Merlin VPN killswitch works as intended ;-)
 
Hey Jack, when I reboot the router I have to manually go to ssh and do a "YazFi startup", otherwise the YazFi tab won't show anywhere.
 
The configs are properly applied, only the tab isn't mounted
 
what does syslog show?
Need to reboot it later when everyone's sleeping :)

In the meanwhile, what's for the "&" present on each of your startup scripts line?

/jffs/scripts/YazFi startup & # YazFi
 
How can I grab the log via ssh and filter everything with "YazFi:"?

Here it is. Note that on the meanwhile I forced a YazFi startup via ssh:

Code:
adminRT-AC86U/jffs cat syslog.log-1 | grep "YazFi"                    May  5 06:05:22 YazFi: Lock file found (age: 0 seconds) - stopping to prevent duplicate runs
Jun 12 18:09:00 YazFi: Stale lock file found (>120 seconds old) - purging lock
Jun 12 18:09:00 YazFi: Firewall restarted - sleeping 60s before running YazFi
Jun 12 18:09:13 YazFi: Lock file found (age: 13 seconds) - stopping to prevent duplicate runs
Jun 12 18:09:20 YazFi: Lock file found (age: 20 seconds) - stopping to prevent duplicate runs
Jun 12 18:10:00 YazFi: YazFi v4.0.5 starting up
Jun 12 18:10:02 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 18:10:04 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 18:10:06 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 18:10:17 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:12:33 YazFi: Wireless restarted - sleeping 60s before running YazFi
Jun 12 19:13:05 YazFi: Lock file found (age: 32 seconds) - stopping to prevent duplicate runs
Jun 12 19:13:33 YazFi: YazFi v4.0.5 starting up
Jun 12 19:13:34 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:13:36 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:13:38 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 19:13:41 YazFi: Wireless restarted - sleeping 60s before running YazFi
Jun 12 19:13:49 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:14:41 YazFi: YazFi v4.0.5 starting up
Jun 12 19:14:42 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:14:44 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:14:46 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 19:14:57 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:20:16 YazFi: Mounting YazFi WebUI page as user4.asp
Jun 12 19:25:44 YazFi: Firewall restarted - sleeping 60s before running YazFi
Jun 12 19:25:53 YazFi: Lock file found (age: 9 seconds) - stopping to prevent duplicate runs
Jun 12 19:26:44 YazFi: YazFi v4.0.5 starting up
Jun 12 19:26:46 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:26:48 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:26:50 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 19:27:01 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:37:32 YazFi: Stale lock file found (>120 seconds old) - purging lock
Jun 12 19:37:32 YazFi: Wireless restarted - sleeping 60s before running YazFi
Jun 12 19:38:32 YazFi: YazFi v4.0.5 starting up
 
How can I grab the log via ssh and filter everything with "YazFi:"?

Here it is. Note that on the meanwhile I forced a YazFi startup via ssh:

Code:
adminRT-AC86U/jffs cat syslog.log-1 | grep "YazFi"                    May  5 06:05:22 YazFi: Lock file found (age: 0 seconds) - stopping to prevent duplicate runs
Jun 12 18:09:00 YazFi: Stale lock file found (>120 seconds old) - purging lock
Jun 12 18:09:00 YazFi: Firewall restarted - sleeping 60s before running YazFi
Jun 12 18:09:13 YazFi: Lock file found (age: 13 seconds) - stopping to prevent duplicate runs
Jun 12 18:09:20 YazFi: Lock file found (age: 20 seconds) - stopping to prevent duplicate runs
Jun 12 18:10:00 YazFi: YazFi v4.0.5 starting up
Jun 12 18:10:02 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 18:10:04 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 18:10:06 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 18:10:17 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:12:33 YazFi: Wireless restarted - sleeping 60s before running YazFi
Jun 12 19:13:05 YazFi: Lock file found (age: 32 seconds) - stopping to prevent duplicate runs
Jun 12 19:13:33 YazFi: YazFi v4.0.5 starting up
Jun 12 19:13:34 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:13:36 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:13:38 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 19:13:41 YazFi: Wireless restarted - sleeping 60s before running YazFi
Jun 12 19:13:49 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:14:41 YazFi: YazFi v4.0.5 starting up
Jun 12 19:14:42 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:14:44 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:14:46 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 19:14:57 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:20:16 YazFi: Mounting YazFi WebUI page as user4.asp
Jun 12 19:25:44 YazFi: Firewall restarted - sleeping 60s before running YazFi
Jun 12 19:25:53 YazFi: Lock file found (age: 9 seconds) - stopping to prevent duplicate runs
Jun 12 19:26:44 YazFi: YazFi v4.0.5 starting up
Jun 12 19:26:46 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:26:48 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:26:50 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 19:27:01 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:37:32 YazFi: Stale lock file found (>120 seconds old) - purging lock
Jun 12 19:37:32 YazFi: Wireless restarted - sleeping 60s before running YazFi
Jun 12 19:38:32 YazFi: YazFi v4.0.5 starting up
Stale lock file is concerning. Can you double check you're running the latest? This was added prior to merging v4.0.5 but I don't know if you were running a develop version? https://github.com/jackyaz/YazFi/commit/ac77ad5d574782dd76c89309b2dc127de1a643d2
 
How can I grab the log via ssh and filter everything with "YazFi:"?

Here it is. Note that on the meanwhile I forced a YazFi startup via ssh:

Code:
adminRT-AC86U/jffs cat syslog.log-1 | grep "YazFi"                    May  5 06:05:22 YazFi: Lock file found (age: 0 seconds) - stopping to prevent duplicate runs
Jun 12 18:09:00 YazFi: Stale lock file found (>120 seconds old) - purging lock
Jun 12 18:09:00 YazFi: Firewall restarted - sleeping 60s before running YazFi
Jun 12 18:09:13 YazFi: Lock file found (age: 13 seconds) - stopping to prevent duplicate runs
Jun 12 18:09:20 YazFi: Lock file found (age: 20 seconds) - stopping to prevent duplicate runs
Jun 12 18:10:00 YazFi: YazFi v4.0.5 starting up
Jun 12 18:10:02 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 18:10:04 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 18:10:06 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 18:10:17 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:12:33 YazFi: Wireless restarted - sleeping 60s before running YazFi
Jun 12 19:13:05 YazFi: Lock file found (age: 32 seconds) - stopping to prevent duplicate runs
Jun 12 19:13:33 YazFi: YazFi v4.0.5 starting up
Jun 12 19:13:34 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:13:36 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:13:38 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 19:13:41 YazFi: Wireless restarted - sleeping 60s before running YazFi
Jun 12 19:13:49 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:14:41 YazFi: YazFi v4.0.5 starting up
Jun 12 19:14:42 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:14:44 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:14:46 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 19:14:57 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:20:16 YazFi: Mounting YazFi WebUI page as user4.asp
Jun 12 19:25:44 YazFi: Firewall restarted - sleeping 60s before running YazFi
Jun 12 19:25:53 YazFi: Lock file found (age: 9 seconds) - stopping to prevent duplicate runs
Jun 12 19:26:44 YazFi: YazFi v4.0.5 starting up
Jun 12 19:26:46 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:26:48 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3
Jun 12 19:26:50 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 12 19:27:01 YazFi: YazFi v4.0.5 completed successfully
Jun 12 19:37:32 YazFi: Stale lock file found (>120 seconds old) - purging lock
Jun 12 19:37:32 YazFi: Wireless restarted - sleeping 60s before running YazFi
Jun 12 19:38:32 YazFi: YazFi v4.0.5 starting up
this commit may help https://github.com/jackyaz/YazFi/commit/72bbabbd446d209986bd422dab3065882a31dc2f
 
Thanks pal!

Let me try on next reboot
Code:
Jun 12 21:34:05 YazFi: MD5 hash of YazFi does not match - downloading updated v4.0.5                                                                Jun 12 21:34:09 YazFi: YazFi successfully updated - restarting firewall to apply update                                                             Jun 12 21:34:10 YazFi: Firewall restarted - sleeping 60s before running YazFi                                                                       Jun 12 21:35:10 YazFi: YazFi v4.0.5 starting up                           Jun 12 21:35:11 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3                       Jun 12 21:35:13 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3                       Jun 12 21:35:15 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate Jun 12 21:35:26 YazFi: YazFi v4.0.5 completed successfully                Jun 12 21:36:27 YazFi: Firewall restarted - sleeping 60s before running YazFi                                                                       Jun 12 21:36:56 YazFi: Lock file found (age: 29 seconds) - stopping to prevent duplicate runs                                                       Jun 12 21:37:27 YazFi: YazFi v4.0.5 starting up                           Jun 12 21:37:28 YazFi: wl0.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3                       Jun 12 21:37:31 YazFi: wl1.1 (SSID: Jazz) - VPN redirection enabled, sending all interface internet traffic over VPN Client 3                       Jun 12 21:37:33 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate Jun 12 21:37:43 YazFi: YazFi v4.0.5 completed successfully
 
Last edited:
v4.0.5 is now available!
Changelog:
Code:
NEW: YazFi now supports user/custom scripts. Simply save them to /jffs/addons/YazFi.d/userscripts.d with .sh as the extension, e.g. myscript.sh

I wanted to reply to let you know this meets my needs for the UDP Boradcast issue since I can now just add a script to ensure the broadcasts are tracked and allowed whenever the firewall is reset.
 
Is it possible to enable YazFi and still use the same DHCP pool as the main network? Would it still be able to restrict traffic between the main LAN and guest networks?
 
v4.1.0 is now available
Changelog:
Code:
NEW: Add cron job to check for YazFi rules every 10mins and re-apply if needed
CHANGED: Reduce sleep from 60s to 30s when firewall and wireless restart events are detected
 
v4.1.0 is now available
Changelog:
Code:
NEW: Add cron job to check for YazFi rules every 10mins and re-apply if needed
CHANGED: Reduce sleep from 60s to 30s when firewall and wireless restart events are detected
Code:
Choose an option:    u

YazFi: No new version - latest is v4.0.5

Press enter to continue...

UPDATE: I retried again, and it updated.
 
Code:
Choose an option:    u

YazFi: No new version - latest is v4.0.5

Press enter to continue...

UPDATE: I retried again, and it updated.
Could have been an issue with Github's CDN, I made sure to wait a minute or 2 after merging the branches before posting here :)
 

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top