Логин:   Пароль:   
   
 
X   Сообщение сайта
(Сообщение закроется через 2 секунды)
 
> Прошивки для роутеров Asus, Новые прошивки от Мерлина
Sergey Ozerov
сообщение 4.3.2013, 14:15
Сообщение #1


Форуман
Иконка группы

Группа: Главные администраторы
Сообщений: 20579
Регистрация: 10.1.2004
Из: Bogorodskoye, Moscow, Russia
Пользователь №: 1221
Спасибо сказали: 1912 раз(а)



Вроде, пашет... Тогда проанонсирую, как положено...

Новые прошивки от Мерлина (скомпилированы 03 марта):

По сравнению с ранее вышедшим 25-м (без буквы) билдом, исправлен отвалившийся DualAccess -- доступ к локалке при поднятом VPN (L2TP/PPPoE/PPTP) соединении.
Список изменений
CODE
3.0.0.4.270.25b
- FIXED: Disabling DHCP logging would cause a syntax error in dnsmasq's configuration
(regression from dnsmasq update)
- FIXED: Outbound VPN client traffic was dropped (regression from firewall_2 fix)


3.0.0.4.270.25
- NEW: NFS folder sharing. Webui can be found on the USB Applications ->
Servers Center page (NFS Exports tab)
- NEW: dhcpc-event and zcip-event scripts (called on WAN events)
- NEW: Ccustom configs: group.add, gshadow.add, passwd.add, shadow.add, exports.add
- NEW: New script that will setup Entware for you (written by ryzhov_al).
Run "entware-setup.sh" through SSH/Telnet to launch the install process.
- CHANGED: Added a folder picker to the Tools Other Settings page to select
a location to store your traffic data files.
- CHANGED: Updated dnsmasq to 2.65 (backported from 3.0.0.4.334)
- CHANGED: Enabled additional optimizations for openssl and openvpn for
a significant performance gain
- CHANGED: Reverted wireless driver to build 220 (RT-AC66U only)
- FIXED: Added missing badblocks program
- FIXED: Timing issues under IE where resolved device names would
not display on certain pages (such as the Sysinfo page)
- FIXED: VPN client "common name" wasn't getting saved
- FIXED: DHCP client will be less aggressive in attempting to obtain
a lease (wait 2 mins instead of 20 secs between attempts),
should help with ISPs like Charter who will blacklist you
if you send too many Discovery packets in a short period of time.
- FIXED: Made profile.add be run after any Optware profile, so the user
changes will have priority over anything else.
- FIXED: WOL list corruption when removing an entry in some browsers
- FIXED: No longer forward packets with a LAN IP as destination
(Asus bug, fixed CDRouter test firewall_2)
- FIXED: IPv6 WAN would have the wrong prefix length (Asus bug, patch
submitted by PiotrKa)


--------------------
Правило - это КАК без ПОЧЕМУ.
 
+Цитировать сообщение
Оrаkul
сообщение 17.3.2013, 8:09
Сообщение #2


Форуман


Группа: Пользователи
Сообщений: 5065
Регистрация: 22.2.2009
Из: г.Москва, Западное Дегунино
Пользователь №: 61074
Спасибо сказали: 786 раз(а)



У Мерлина обновление, 3.0.0.4_270.26.
Fix&New&Change
CODE
- NEW: ipset Netfilter support + userspace tool to create ipset lists.
- CHANGED: Router's hostname is now set all the time, regardless of
telnet/ssh states (and including in AP mode)
- CHANGED: Added device name field on the LAN page, since it's now relevant
to the router's hostname (not just SMB). Left it on the SMB
page as well, for those used to see it there.
- CHANGED: Router will supply its device name when requesting an IP while
in AP mode.
- CHANGED: Various webui lists were increased from 32 to 128 entries allowed.
- CHANGED: Improved networkmap:
* Will also use DHCP hostnames and user-defined static
names instead of just NetBIOS names
* Client list will show an animation while networkmap is
still busy scanning and resolving device names
* Dropdown menus that use Networkmap to build a list
of devices will also display names in addition to IP/MAC.
- CHANGED: Don't restart the whole network if you only changed DHCP reservations
(LAN -> DHCP page)
- FIXED: Openvpn: Non-CBC ciphers weren't working (their use is still not
recommended)
- FIXED: Proxy auto-configuration support (Asus bug)

18.03.13 UPD
Мерлин заменил "3.0.0.4_270.26" на "3.0.0.4_270.26b".
FIXED: Volume labels with spaces were rejected (Asus used the same code
to validate hostnames and volume labels).
 
+Цитировать сообщение
Sergey Ozerov
сообщение 20.5.2013, 18:28
Сообщение #3


Форуман
Иконка группы

Группа: Главные администраторы
Сообщений: 20579
Регистрация: 10.1.2004
Из: Bogorodskoye, Moscow, Russia
Пользователь №: 1221
Спасибо сказали: 1912 раз(а)



Новые бета прошивки от Мерлина (скомпилированы 17 мая):

По сравнению с ранее вышедшей бетой, исправлено отключение локалки перед запуском pppd (интернет-соединения), что было критично для доступа в инет через L2TP и PPTP.

Список изменений
CODE
3.0.0.4.354.29 Beta 1:
- KNOWN ISSUE: 5 GHz 40 MHz is unreliable with some wireless
cards (RT-N66U)
- NEW: RT-N16 is no longer an experimentally supported device.
Thanks to Mike from Sapphyre Software for providing
me with an RT-N16.
- NEW: Report currently used channels when mousing over
the wifi icon at the top of the webui
- NEW: Sysinfo: Ethernet port state will report each port's VLAN ID.
- CHANGED: Merged with webui content from 3.0.0.4.364
- CHANGED: Increased list height on Site Survey page
- CHANGED: Warn if trying to do a site survey with either
radios disabled.
- CHANGED: Updated to miniupnpd 1.8.20130426
- CHANGED: Updated to dropbear 2013.58
- FIXED: Syslogd must be restarted if we had to adjust its log
level for DHCP query logging.
- FIXED: br0 would change MAC address when starting an OpenVPN server
with a tap interface.
- FIXED: Sysinfo: Port numbering order (RT-N16)
- FIXED: Sysinfo: 5G radio infos weren't hidden if the
router did not support that band (RT-N16)
- FIXED: Wifi status icon would remain half-lit if 2.4 GHz was
disabled on a router without 5 GHz support (RT-N16)
- FIXED: Various fixes related to site survey display
- FIXED: Improved compatibility with USB disks > 2 TB
(must use ext2 or ext3)
- FIXED: Unable to clear DMZ IP (fixed in 364 webui files)
- FIXED: PPTP/L2TP Internet connection unable to connect at boot
(bug introduced in 358.28)
- FIXED: PPTP/L2TP Internet connection unable to reconnect after going
down (unsure if Asus bug or 358.28 bug)
- FIXED: Numerous bugs in the Per IP traffic monitoring causing inaccurate
traffic accounting if there was too much traffic, or if update
requests occured in a too short period of time.
- FIXED: Asking for traffic monitoring (regular and Per IP) database to be
re-created would re-create it again on next reboot if in the mean time
you didn't change any other settings, causing the flag not to be
cleared on the mtd partition.


--------------------
Правило - это КАК без ПОЧЕМУ.
 
+Цитировать сообщение
Sergey Ozerov
сообщение 7.7.2013, 11:54
Сообщение #4


Форуман
Иконка группы

Группа: Главные администраторы
Сообщений: 20579
Регистрация: 10.1.2004
Из: Bogorodskoye, Moscow, Russia
Пользователь №: 1221
Спасибо сказали: 1912 раз(а)



Новые прошивки от Мерлина (скомпилированы 07 июля):

На ссылки может ругаться Касперский ("защита из облака"). По сравнению с ранее вышедшей бетой, добавлена поддержка роутера RT-AC56U. Кроме того, скорее всего, не будет работать аппаратное ускорение PPPoE в связи с откатом на предыдущую (от прошивки .270) версию CTF (возможно, это замечание касается только роутера RT-N66U).

Список изменений
CODE
3.0.0.4.372.30_2:
(note: since people always thought adding a "b" meant "beta'
rather than revision "b", I am switching to Asus's new
numbering scheme, hence "30_2" for this revised 372.30.)
- NEW: Yandex DNS filtering (Experimental builds only). This is a
new feature being implemented by Asus that allows interfacing
with the Yandex DNS filtering system. You can find it under
Parental Control. This is untested, and a work-in-progress.
- FIXED: NAT loopback (invalid iptable rules was silently accepted
by iptables)
- FIXED: Removed empty Yandex tab from regular builds
- FIXED: Entware setup script missing from all builds
- FIXED: pptpd failing to start (was missing from build)
- FIXED: OpenVPN server not starting if using a static key
- FIXED: Disks plugged to USB 2.0 port weren't getting mounted
(RT-AC56U)


3.0.0.4.372.30:
- NEW: Merged with preliminary 372 code provided by Asus
(initialy meant for the ARM environment)
- NEW: RT-AC56U support. Various bugs have been fixed
over the original FW that initially shipped with these routers.
Thanks to Asus for providing a development sample.
- NEW: Added JFFS support to RT-AC56U.
- CHANGED: Downgraded wireless driver + CTF to build 270 version
(RT-N66U, fixes 5 GHz stability issues). Note that this
means that HW acceleration for PPPoE is no longer available
for the RT-N66U, as it was new in the 5.110 SDK.
- CHANGED: Updated iptables-1.4.x to 1.4.14 (RT-AC56U)
- CHANGED: Brought back the Connection page under System Logs
- CHANGED: Updated e2fsprogs to 1.42.7. Amongst other things
this new version is more memory-efficient on large
filesystems.
- CHANGED: Renamed Advanced (Per IP) Traffic monitoring for
IPTraffic (to match the Tomato name for that same
functionality)
- FIXED: GRO kills upload speed if CTF is disabled (patched provided
by Asus, RT-AC56U)
- FIXED: Buffer overrun in NVRAM handling, leading to random crashes
(Asus bug, RT-AC56U)
- FIXED: NVRAM values getting corrupted or disappearing if using more
than 32 KB (Asus bug, RT-AC56U)
- FIXED: Reapply layout fixes to Guest network and DHCP page (were lost
in a recent webui update)
- FIXED: JFFS2 could get reformated again at each subsequent reboots.
- FIXED: Devices with a NetBIOS name of 15 chars long would have their
name merged with the next device's.
- FIXED: Empty Site Survey list if there was only one AP found
- FIXED: Saved settings might fail to restore if they contained
OpenVPN or SSHD keys with CRLF line endings. You should
access the OpenVPN Keys page, click on Apply to re-save them,
then re-create any backup you had of your router settings.
- FIXED: Numerous bugs in ipt_account for Kernel 2.6.36 (RT-AC56U)


--------------------
Правило - это КАК без ПОЧЕМУ.
 
+Цитировать сообщение
Sergey Ozerov
сообщение 13.7.2013, 18:30
Сообщение #5


Форуман
Иконка группы

Группа: Главные администраторы
Сообщений: 20579
Регистрация: 10.1.2004
Из: Bogorodskoye, Moscow, Russia
Пользователь №: 1221
Спасибо сказали: 1912 раз(а)



Вышла новая ревизия железа RT-N66U. Основное отличие от старой -- другая микросхема флеш-памяти. Мерлин уже выпустил прошивку http://www.mediafire.com/download/q9hy6aqc....4_372.30_3.zip с поддержкой этой ревизии (отличие от 30_2 -- только в этом).


--------------------
Правило - это КАК без ПОЧЕМУ.
 
+Цитировать сообщение
Sergey Ozerov
сообщение 27.7.2013, 17:58
Сообщение #6


Форуман
Иконка группы

Группа: Главные администраторы
Сообщений: 20579
Регистрация: 10.1.2004
Из: Bogorodskoye, Moscow, Russia
Пользователь №: 1221
Спасибо сказали: 1912 раз(а)



Новые прошивки от Мерлина (скомпилированы 24 июля):

По сравнению с ранее вышедшим релизом, закрыта дыра в AiCloud.

Список изменений
CODE
3.0.0.4.372.31_2:
- FIXED: Samba wouldn't start due to missing symlink (RT-AC56U)


3.0.0.4.372.31:
- NEW: Merged with 372_1393 code from Asus. Notes:
* Beamforming support for RT-AC66U/RT-AC56U
* RT-N66U driver still downgraded to build 270 (which
means no HW acceleration for PPP, but more reliable
connectivity on the 5 GHz band)
* Minidlna was updated to 1.1.0
* AiCloud security hole fixed
* Parental Control ui still broken under IE10 (use Fx or Chrome
for now)

- NEW: YandexDNS. Asus is currently implementing support in the
firmware for this DNS-based filter. This can be
found under Parental Control. See http://dns.yandex.ru/
for more info (go go Google translate!).
(Experimental builds only)
- NEW: User-provided client config files (ccd) for OpenVPN server.
See the OpenVPN and Custom Config sections of the firmware's
documentation for more info.
- CHANGED: Connections list under System Log will now progressively
display the result while the router is still
resolving IPs (if that option was enabled).
- CHANGED: OpenVPN client password hidden by default (and added
checkbox to display it similar to what Asus added
to the System page)
- FIXED: Sysinfo page was reporting IPv6 as reason for
CTF to be disabled - since 372 that is only true
for ARM devices.
- FIXED: OpenVPN Server in TAP mode + DHCP wasn't routing
properly (DHCP was overruling the default GW)


Сообщение отредактировал Sergey Ozerov - 28.7.2013, 14:09


--------------------
Правило - это КАК без ПОЧЕМУ.
 
+Цитировать сообщение
Sergey Ozerov
сообщение 26.8.2013, 0:55
Сообщение #7


Форуман
Иконка группы

Группа: Главные администраторы
Сообщений: 20579
Регистрация: 10.1.2004
Из: Bogorodskoye, Moscow, Russia
Пользователь №: 1221
Спасибо сказали: 1912 раз(а)



Новые прошивки от Мерлина (скомпилированы 24 августа):

По сравнению с ранее вышедшим релизом, добавлен по умолчанию активированный IPv6-файрволл (до этого весь входящий IPv6-трафик транслировался в домашнюю сеть).

Список изменений
CODE
3.0.0.4.374.32 (24-Aug-2013):
- NEW: Merged with Asus 374_168 GPL code.
- NEW: wan-start script will get passed the WAN unit number as argument
- NEW: Webui option to select the location of the DLNA database (patch by
VinceV)
- NEW: IPv6 firewalling. Originally, Asuswrt would allow any IPv6 traffic
to be forwarded to your LAN devices. This new option (enabled by
default) will prevent traffic forwarding to LAN devices. You can
also create firewall rules to allow inbound traffic to specific
hosts. The firewall configuration can be accessed through the
"Firewall -> IPv6 Firewall" page.
- CHANGED: Upgraded OpenVPN to 2.3.2
- CHANGED: Implemented IPTraffic support in DualWAN - Load balanced
mode (Experimental builds)
- CHANGED: Updated miniupnpd to 20130730
- CHANGED: Updated some prebuilt binaries (RT-AC56U)
- CHANGED: Updated 2.6.36 kernel to the latest code used
in 372_184 (RT-AC56U), includes some changes
related to USB3, and PPP/CTF.
- CHANGED: Smarter location selection for the DLNA database
location to reduce the chances of having it in
RAM if left to default location, filling it up
(patch by VinceV)
- CHANGED: Updated e2fsprogs to 1.42.8 to be in sync with Asus
- FIXED: Web server would crash if you entered too much data in
OpenVPN key/cert fields.
- FIXED: The ACSD service could be exploited by a LAN user to
gain shell access to the router. TCP connections to
ACSD are now blocked by the firewall.
- FIXED: You could not define time periods on the Parental
Control calendar under IE (backported from 374)
- FIXED: Wireless client list would sometime return incorrect
hostname or be missing IP.
- FIXED: Security issue with Samba and symlinks


--------------------
Правило - это КАК без ПОЧЕМУ.
 
+Цитировать сообщение
Sergey Ozerov
сообщение 6.10.2013, 20:07
Сообщение #8


Форуман
Иконка группы

Группа: Главные администраторы
Сообщений: 20579
Регистрация: 10.1.2004
Из: Bogorodskoye, Moscow, Russia
Пользователь №: 1221
Спасибо сказали: 1912 раз(а)



Новые прошивки от Мерлина (скомпилированы 03 октября):

Список изменений
CODE
3.0.0.4.374.33 (3-Oct-2013):
* IMPORTANT *: RT-N66U users must revert back to factory defaults and
manually reconfigure their settings if coming from a FW
older than 3.0.0.4.374.xxx (applies to both Asus or
Asuswrt-Merlin).

- NEW: Merged with Asus 374_726 code from RT-AC66U GPL. Notable changes:
* RT-N66U now based on the SDK6 driver. This resolved the
numerous connectivity issues, at the expense of a shorter
range (a separate SDK5 build based on driver 5.100 is available
in the Experimental folder as an alternative).
* AiCloud 2.0
- NEW: Added bonding.ko kernel module.
- NEW: Repeater mode moved into regular builds.
- NEW: Dual WAN moved into regular builds.
Note that there are still a few issues left, such as recovery
from failover mode when the primary WAN comes back up.
- NEW: YandexDNS support moved into regular builds. This is
a DNS-based filter list, which can be configured under
Parental Control.
- NEW: Added support for last seen devices on Ethernet port status
(Tools-> Sysinfo) for RT-AC56U.
- NEW: Option to control 802.11 extensions that deal with
regulations. On the Wireless Professional page
you can now enable 802.11d and 802.11h support.
- CHANGED: robocfg now (almost) completely supports the
Northstar platform (RT-AC56U)
- CHANGED: Enabled Syn Cookies for ARM devices (RT-AC56U)
- CHANGED: Allow selecting the Download2 folder for media server
location.
- CHANGED: MIPS builds optimized for mips32r2 code generation, which
should improve general performance. (N16/N66/AC66)
- CHANGED: More openssl backports from 1.0.2, adding
mips32r2 support, improving performance
especially for sha1 (RT-N16/N66/AC66)
- CHANGED: Increased OpenVPN crt/key fields to allow up to 3499
characters - enough to accomodate even a 4096 bits key.
- CHANGED: Removed the firewall rules for acsd since it no longer
listens on a TCP socket.
- FIXED: Samba binding to WAN interface would cause warnings
about WINS/master browser (regression in 374)
- FIXED: The ARM kernel was missing the Advanced IP Routing option,
preventing some of the "ip" command functions from
working (was breaking Astrill's plugin) (RT-AC56U)
- FIXED: With FW 374 Asus changed the Samba priority from too high to
too low (-19), resulting in poor sharing performance.
I changed it to a priority of 0, providing more balanced
performance. (N16/N66/AC66)
- FIXED: Some fields would allow invalid characters (such as
single quotes) which might break the webui JS. There might
still be a few unprotected fields.
- FIXED: Memory leak in httpd service (Asus bug)
- FIXED: Parental Control not working with certain schedules
(patch provided by Makkie2002)
- FIXED: Potential key truncation in httpd if one was to use very
large OpenVPN keys and certs in all fields of all four instances.
- FIXED: Samba would start sharing local disks even if all you wanted was
its WINS/Browser services.
- FIXED: The JFFS formatting code could encounter a case
where it wouldn't write back its cleared
format flag.
- FIXED: Restarting the wireless service would break
stealth mode.
- FIXED: The new thumbnail cache code Asus added in build 720's
minidlna will prevent scanning from completing on very
large collections. Reverted that code for now.
- FIXED: Wireless key field was automatically activated on
page load, which could lead to accidental changes
(issue introduced in 374_720).
- FIXED: Router believed that NTP wasn't properly working after a
LAN or wireless service restart (issue introduced in
374_720).
- FIXED: IPv6 client list was incorrectly displayed if a client
didn't have a known hostname (Asus bug)


--------------------
Правило - это КАК без ПОЧЕМУ.
 
+Цитировать сообщение
Sergey Ozerov
сообщение 30.10.2013, 23:06
Сообщение #9


Форуман
Иконка группы

Группа: Главные администраторы
Сообщений: 20579
Регистрация: 10.1.2004
Из: Bogorodskoye, Moscow, Russia
Пользователь №: 1221
Спасибо сказали: 1912 раз(а)



Новые прошивки от Мерлина (скомпилированы 30 октября, добавлена поддержка модели RT-AC68U):

Список изменений
CODE
3.0.0.4.374.34 (30-Oct-2013):
- NEW: Merged with Asus 374_979 (from RT-N66U).
AC56/AC68 AiCloud components taken from 374_217.
- NEW: Added RT-AC68U support.
- NEW: Added IPSec support to the kernel. Userspace tools
such as StrongWAN must be installed from Optware/Entware,
and manually configured. (Patch provided by saintdev)
- NEW: Adjustable MTU for DHCP/static IP WAN users
- NEW: WAN interface name passed as argument to firewall-start
- NEW: Configurable min/max ports allowed to be redirected by UPNP.
This allows WHS users to change the min allowed port from
the default value of 1024 to allow UPNP forwarding of
HTTP/HTTPS.
- NEW: Display CPU temperature on Sysinfo page (AC56 and AC68)
- NEW: Display CPU chart on Performance page (AC56 and AC68)
- CHANGED: UPnP rules will now be processed after manual
forwards and port trigger rules.
- CHANGED: Site Survey now reports supported protocol.
- CHANGED: Updated Dropbear to 2013.60.
- CHANGED: Updated dnsmasq to 2.67 final.
- FIXED: Some Traffic Monitor pages were missing the page tabs.
- FIXED: The webui would allow you to enable SSHD while not
setting an authkey or enabling password-based authentication.
- FIXED: 802.11h options should only be available on the 5 GHz band.
- FIXED: Wifi icon hover would report 5G channel as undefined if
2.4GHz radio was disabled.
- FIXED: IPv6 clients list failed to properly merge IPs from similar MACs
(Asus bug)
- FIXED: Minor layout issues with the Clients list
- FIXED: Samba wasn't started at boot time if browser master or WINS
was enabled and we had no USB disk plugged in.
- FIXED: Router/minidlna crashes when processing very large image
collections - various memory leaks plugged.
(patches provided by Paulo Capani)
- FIXED: Buffer overrun when entering more than 35 MACs on the
filter list. We now support up to 64 MACs.


--------------------
Правило - это КАК без ПОЧЕМУ.
 
+Цитировать сообщение
Оrаkul
сообщение 2.11.2013, 12:23
Сообщение #10


Форуман


Группа: Пользователи
Сообщений: 5065
Регистрация: 22.2.2009
Из: г.Москва, Западное Дегунино
Пользователь №: 61074
Спасибо сказали: 786 раз(а)



Мерлин выложил более свежие сборки, 3.0.0.4.374.34_2.
Fix
CODE
FIXED: DNS resolution not working for VPN clients
(bug in Asus 374_979)
FIXED: USB disk detection on AC56/AC68.
FIXED: Turbo mode option couldn't be saved (RT-AC68)
 
+Цитировать сообщение
Sergey Ozerov
сообщение 25.11.2013, 15:28
Сообщение #11


Форуман
Иконка группы

Группа: Главные администраторы
Сообщений: 20579
Регистрация: 10.1.2004
Из: Bogorodskoye, Moscow, Russia
Пользователь №: 1221
Спасибо сказали: 1912 раз(а)



URL страницы с прошивками Мерлина изменился. Новый URL -- https://www.mediafire.com/folder/bkfq2a6aeb.../Asuswrt-Merlin или переадресация туда же по ссылке http://www.lostrealm.ca/asuswrt-merlin/download

Новые прошивки от Мерлина (скомпилированы 24 ноября):

Список изменений
CODE
3.0.0.4.374.35_2 (24-Nov-2013):
- FIXED: updown.sh script location was changed in
339, causing issues with OpenVPN clients


3.0.0.4.374.35 (24-Nov-2013):
- NEW: Merged with Asus 374_339 GPL (from RT-AC68U).
Asus added some new features in this release:
* Support for HFS+ and Time Machine (AC56/AC68U only)
* OpenVPN support. Their implementation uses the backend
code from Asuswrt-Merlin but with a more
simplistic, novice-friendly webui. This required
adapting the current webui to be able to retain some
of their improvements without sacrificing the
flexibility of being able to have two separate server
and client configurations.

- NEW: Support for Namecheap DDNS (Patch provided by saintdev)
- NEW: Added qos-start user script
- FIXED: Incorrect range validation for UPnP ports on WAN page.
- FIXED: Accidentaly lock out of webui due to software hammering
the router's webui without valid login credentials
- FIXED: NAT Loopback broken with CTF enabled (AC56/AC68) (Asus bug)
- FIXED: Backing up your settings would return an empty CFG file.
- FIXED: Kernel panic when inserting ebtables rule (AC56/AC68,
fix backported from kernel 2.6.37)
- FIXED: If an IP/CIDR on the IPv6 firewall page was long enough
to be shortened with "..." it would be incorrectly saved.
- CHANGED: IPTraffic will now account for traffic going through
an OpenVPN tunnel
- CHANGED: VPN webui is now an hybrid of our original webui,
along with Asus's own. This allows the addition
of these features developed by Asus:
* Ability to export an ovpn config file to give to
your clients
* Support for username/password authentcation on
the built-in server
* Ability to import a tunnel provider's .ovpn
config file to configure a client connection
on the router


--------------------
Правило - это КАК без ПОЧЕМУ.
 
+Цитировать сообщение
Sergey Ozerov
сообщение 2.12.2013, 19:52
Сообщение #12


Форуман
Иконка группы

Группа: Главные администраторы
Сообщений: 20579
Регистрация: 10.1.2004
Из: Bogorodskoye, Moscow, Russia
Пользователь №: 1221
Спасибо сказали: 1912 раз(а)



Новые прошивки от Мерлина (скомпилированы 30 ноября):

Список изменений
CODE
3.0.0.4.374.35_4 (30-Nov-2013):
- CHANGED: Added a VPN mode selector on the VPN Server Details page.
- FIXED: JS error on the VPN Server Details page related to PPTP
- FIXED: Clicking on "Apply" on VPN Details page would fail to
apply your new settings to a running OpenVPN server.
- FIXED: Some port forward rules were incorrectly generated when
in load-balancing mode (Asus bug)
- FIXED: After adding/removing a user to OpenVPN Server, the password
file was not immediately updated. Note that this fix will
break backward compatibility with Asus as the nvram value
storing the list of OpenVPN user/pass had to be renamed
(so not to be instanced).
- FIXED: VPN client not working on MIPS devices (N66/AC66).
- FIXED: Various formatting issues with generated client.ovpn file

По сути, это -- багфикс прошивки 35_2, касающийся в основном OpenVPN на роутере.


--------------------
Правило - это КАК без ПОЧЕМУ.
 
+Цитировать сообщение
Sergey Ozerov
сообщение 12.1.2014, 17:33
Сообщение #13


Форуман
Иконка группы

Группа: Главные администраторы
Сообщений: 20579
Регистрация: 10.1.2004
Из: Bogorodskoye, Moscow, Russia
Пользователь №: 1221
Спасибо сказали: 1912 раз(а)



Новые прошивки от Мерлина (скомпилированы 12 января):

Список изменений
CODE
3.0.0.4.374.38_1 (12-Jan-2014):
- FIXED: Tools -> Run Cmd page wasn't working (regression
in 374.38)
- FIXED: Router getting stuck on various webui changes due
to a broken precompiled emf module (AC56/AC68)


3.0.0.4.374.38 (11-Jan-2014):
This version isn't available for the RT-N16 or the SDK5 build
of the RT-N66U as support for the SDK5 platform is currently
broken. Please stick to 374.36 Beta 1 for the time being on
these two platforms.

Note that the RT-N66U did get a newer wifi driver, so give it a
try, as it might have resolved or at least improved on the wifi
range issues.

Remember to do a factory default reset if switching from SDK5 to
SDK6 builds! Keep a backup of your existing settings in case you
decide to revert back to an SDK5 build.

- NEW: Merged with 374_2078 GPL provided by Asus (From RT-N66U).
Notable changes:
* Updated SDK for MIPS devices - 6.30.163.2002 (r382208)
* PPPoE HW acceleration should be fixed by the new SDK
* Updated AiCloud closed source components (MIPS)

- CHANGED: Reverted Parental Control code to our fixed code,
as I see Asus is still making fixes to their own
code past version 2078.
- CHANGED: Updated AC56 and AC68U wifi driver and CTF to
January 3rd builds (provided by Asus)
- FIXED: emf/igs userspace tools were missing on ARM devices
- FIXED: USB devices missing on MIPS devices (regression
in 374.37)
- FIXED: Wifi stability on ARM devices (regression in
374.37)


3.0.0.4.374.37 (31-Dec-2013):
* This build was pulled due to numerous issues *

- NEW: Merged with Asus 374_501 GPL (from RT-AC68U).
Notable changes in this version:
* New SDK (wireless driver and CTF) for AC56/AC68
* dnsmasq updated to 2.68
* radvd updated to 1.9.5
* Improved IPv6 support
* Fixed Parental Control (A-M's own fix was replaced with
this new one for consistency)
* More details shown on Wireless Log page (their changes
were merged with our own changes)
- CHANGED: Dropbear default path will now include the locations
inside /opt
- CHANGED: Don't include a cert/key section in exported .ovpn if the
router has "User authentication only" enabled
- CHANGED: Display in which chain a given port forward rule is, on the
Port Forwarding page. Allows to distinguish manual forwards
from upnp forwards.
- CHANGED: The state of PPTP/L2TP client connections will be reported
on the VPN Status page.
- CHANGED: Removed the display of global OpenVPN statistics on the
VPN Status page.
- CHANGED: Upgraded AiCloud binary components on MIPS routers to
374_1631 build (N16/N66/AC66)
- FIXED: OpenVPN clients with DNS set to "Strict" weren't properly
setting dnsmasq to use "strict-order"
- FIXED: Garbled resolv.conf generated when adding an OpenVPN client DNS
to it
- FIXED: OpenVPN Client static key was incorrectly processed when shown
on the webui.


3.0.0.4.374.36 Beta 1 (23-Dec-2013):
- NEW: Added ECDSA key support for SSH
- NEW: postconf scripts. This allow you to modify a generated
config file (for example, smb.conf) before the service
using it gets started.
- NEW: layer7 Netfilter module on ARM devices (AC56, AC68).
Note: traffic accounting must be manually enabled on
these devices (see the Layer7 section in the FW's README)
- CHANGED: Updated dropbear to 2013.62
- CHANGED: Improved rendering of the VPN Status page
- CHANGED: Extended retry period for WAN DHCP queries to 160 secs
in Normal DHCP mode to give time to Charter to
unblacklist customers being accidentally blocked by them.
- CHANGED: Downgraded rp-pppoe from 3.11 to 3.10 to see if it's
more stable for some PPPoE users
- FIXED: Some VPN client username/passwords were incorrectly handled
- FIXED: When disabling Dual WAN, WAN unit wasn't being reset to
unit 0, preventing users from editing the correct unit
(Asus bug)
- FIXED: If you replaced the Asus generated CA with your own, the
exported ovpn file would contain your CA with the
Asus-signed client cert/key. Now, we only insert the
client cert/key if it was signed by the current CA.
- FIXED: MSS clamping for clients connecting to the PPTPD server
(Asus bug)
- FIXED: networkmap's DLNA detection was broken with some devices,
and could result in very long delays during scan (Asus bug)
- FIXED: Adjusted various timings in networkmap which should help
with device lists being incomplete especially after a
reboot.

Внимательно читаем описание изменений -- насчёт перехода на новую версию SDK: требуется сброс настроек в дефолт кнопкой на роутере и последующая ручная настройка. При откате -- тоже, скорее всего, потребуется та же операция. Перед сбросом рекомендуется сохранить текущие настройки в файл -- на случай отката на старую версию прошивки.

Сообщение отредактировал Sergey Ozerov - 13.1.2014, 13:53
Причина редактирования: Вечером 12 января довыложены багфиксы (38_1) для всех моделей.


--------------------
Правило - это КАК без ПОЧЕМУ.
 
+Цитировать сообщение
vint2009
сообщение 14.1.2014, 15:58
Сообщение #14


Новенький


Группа: Пользователи
Сообщений: 82
Регистрация: 27.9.2011
Пользователь №: 204520
Спасибо сказали: 6 раз(а)



Вдогонку к предыдущему посту (для RT-N66U).

Мерлин в разделе experimetal выложил новую прошивку с дальнобойным wifi:
RT-N66U_3.0.0.4_374.38_1-em.zip
Тестирую два дня, работает стабильно, wifi действительно дальнобойный. Всё нравится.

Правда, я еще US регион выставил у роутера, но и на стандартном все работает хорошо.
 
+Цитировать сообщение
Sergey Ozerov
сообщение 4.2.2014, 15:52
Сообщение #15


Форуман
Иконка группы

Группа: Главные администраторы
Сообщений: 20579
Регистрация: 10.1.2004
Из: Bogorodskoye, Moscow, Russia
Пользователь №: 1221
Спасибо сказали: 1912 раз(а)



Новые прошивки от Мерлина:
3.0.0.4.374.38_2 (скомпилированы 17 января, по сути это -- багфикс прошивки 38_1):

3.0.0.4.374.39 (скомпилированы 31 января):

Список изменений
CODE
3.0.0.4.374.39 (31-Jan-2014)
- NEW: Merged with Asus 374_583 GPL. Notable changes:
* USB hub support
- NEW: DNS-based filtering. Under Parental Control there is
now a new tab called DNS Filter where you can enable
a DNS-based filtering service, and apply a specific
filter both globally and on a per-client basis. Supported
are: OpenDNS, Norton Connect Safe and YandexDNS.
- NEW: helper.sh script, to simplify creation of postconf
scripts. See the postconf section for details.
- CHANGED: Discontinued SDK5 builds for the RT-N66U. The new EM
builds resolved wifi range issues by running the SDK6
driver set in Engineering Mode (driver provided by Asus).
Look in the Experimental folder for the EM build - it will
eventually become the standard build for the N66U once
it gets sufficiently tested. You might need to do a
factory default reset after switching to an EM build,
for best results.
- CHANGED: Re-switched back to rp-pppoe 3.11 since nobody confirmed
that 3.10 worked better for them.
- CHANGED: Allow PPPoE MTU up to 1500, for ISPs that support RFC 4638.
- CHANGED: Additional webui performance improvement by caching CSS.
- FIXED: DHCPv6 client failing to start if the router username was
changed from "admin" (Asus bug) (patch from Saintdev)
- FIXED: DHCPv6 client failing to request an IP with some ISPs
such as Comcast (Asus bug) (patch from Saintdev)
- FIXED: SMB shares were accessible over WAN, bypassing Netfilter
(Asus bug) (AC56/AC68)
- FIXED: USB read speed would be limited by the QoS upstream
configuration (Asus bug) (AC56/AC68)
- FIXED: Resolution of local machines with domain appended would fail
when using a nameserver that does not return nxdomain errors
(such as OpenDNS) (Asus bug)

The new behaviour is configurable on the LAN-> DHCP page,
in case you run your own nameserver which is expected to
handle both local and remote domains. Default is to not
forward these (to allow OpenDNS to work properly).

- FIXED: OpenVPN Client page - changing the local IP wouldn't always be
properly saved.
- FIXED: Well-known services not properly applying settings on the
Network Services Filtering page (Asus bug)
- FIXED: Webui crash when importing an ovpn with invalid cert/keys
- FIXED: resolv.conf not reverted to its original content after an
OpenVPN client that gets DNS pushed to it would disconnect.
- FIXED: The average rates on the realtime traffic page would be
calculated based on the max number of samples (300) instead of
the currently collected number of samples (Asus bug)
- REMOVED: YandexDNS has been removed, since its functionality is now
provided by the new DNSFilter.


3.0.0.4.374.38_2 (17-Jan-2014):
- CHANGED: Improved webui responsiveness by instructing the browser
to cache images.
- CHANGED: Reverted minidlna to 374.37 code. While the latest code
brings some fixes, it seems to also break functionality
for a small number of users. Too many low-level changes
from the minidlna author to make it easy to debug.
- FIXED: Syntax error in DHCPv6 client config (Asus bug)
- FIXED: Domain field wasn't clearly identified on the webui
when DDNS set to Namecheap (Saintdev)
- FIXED: Missing carriage return in dnsmasq.conf when PPTP VPN
is enabled, causing LAN name resolution issues.
(Asus bug)
- FIXED: A few unescaped quotes in the French dict would break
some webui pages (such as the Wireless page).
(Asus bug)
- FIXED: OpenVPN server export would always export the first
server instance configuration.
- FIXED: Bogus "Config file is missing" error logged by pptpd when
it was starting (Asus bug)
- FIXED: "Advertise DNS" wasn't visible if the page was loaded and
"Respond to DNS" was already enabled.


--------------------
Правило - это КАК без ПОЧЕМУ.
 
+Цитировать сообщение
vint2009
сообщение 7.3.2014, 11:57
Сообщение #16


Новенький


Группа: Пользователи
Сообщений: 82
Регистрация: 27.9.2011
Пользователь №: 204520
Спасибо сказали: 6 раз(а)



Вышла новая прошивка Asuswrt-Merlin - build 374.40 (6-March-2014)
http://www.mediafire.com/download/kjb8u7ag....4_374.40_0.zip
Судя по описанию, EM конфигурация для wifi теперь включена на постоянной основе.
Поставил, проверил - пока все работает без нареканий, wifi действительно дальнобойный, как у экспериментальных.
 
+Цитировать сообщение
Sergey Ozerov
сообщение 8.3.2014, 15:54
Сообщение #17


Форуман
Иконка группы

Группа: Главные администраторы
Сообщений: 20579
Регистрация: 10.1.2004
Из: Bogorodskoye, Moscow, Russia
Пользователь №: 1221
Спасибо сказали: 1912 раз(а)



Новые прошивки от Мерлина (скомпилированы 06 марта):

Список изменений
CODE
374.40 (6-March-2014)
- KNOWN ISSUE: Some people are experiencing random reboots
with the RT-AC68U running firmwares based on recent Asus GPL.
If you are are affected, please revert to 374.40 alpha4 for now.
Asus are looking into the issue, which affects this model since
374_4422.

- FIXED: Asuswrt was calling wl_defaults() every time the
wifi was restarted, causing Regulation Mode to be
overwritten. Now we force it to h mode if the
router model and region requires DFS compliance
(same as Asus's code, except we won't enforce
it to off in other scenarios, and will only do
so if it was previously set to off).
- FIXED: Advanced wireless page broken on Internet Explorer, due
to missing Array.IndexOf() support in IE (Asus bug)
- FIXED: Incorrect model detection prevented CPU temperature
from being shown on the Sysinfo page on the "R" SKUs.


374.40 Beta 2 (5-March-2014)
- FIXED: Numerous buffer overruns in networkmap that would result
in crashes or empty/incomplete device list. Was often
visible on networks hosting a Windows Home Server machine.
(Asus bug)
- FIXED: Site survey was reporting 5G as being disabled on RT-N16.
- FIXED: Various issues related to the helper.sh script for postconf
- FIXED: The OpenVPN instance wasn't restarted if it was currently
stopped due to a syntax error in its config and you had
just corrected it.
- FIXED: Restarting the wireless service would stop emf/igs snooping
until they were manually restarted/recconfigured. (Asus bug)
- FIXED: Channels above 153 were missing on 5 GHz band if width
is set to 40 MHz (Asus bug)
- FIXED: reg_mode was being enforced to "h" (EU region) or "off"
(others) since GPL 4422. We now stick again to what's
set in the webui by the end user.
- FIXED: Allow LAN traffic while dualwan mode is set to lb (issue
caused by the default policy fix in beta 1)


374.40 Beta 1 (1-March-2014)
- NEW: Merged with Asus's 374_4561 GPL. Notable changes:
* Various security-related fixes
* Redesigned Parental Control webui
* Notification in case of insecure configuration

- NEW: Added OpenDNS Family Shield support to DNSFilter
- NEW: Added support for up to three user-defined servers to DNSFilter
- NEW: Added option to force DNSfilter clients to always use the DNS
provided to them by the router's DHCP server (which will be
the router itself if you didn't change it on the DHCP
webui page)
- NEW: Option to disable the DHCP6 Server (code contributed by
kdarbyshirebryant)
- CHANGED: The RT-N66U is now compiled with EM enabled
by default. That means there will no longer be a separate
experimental build for this.
- CHANGED: Updated dropbear to 2014.63
- CHANGED: New type of glue for the webui header
- CHANGED: Switched to a shorter version numbering scheme
- FIXED: RT-N16 firmware (missing files were obtained from
the new GPL release Asus made for this model)
- FIXED: Last24 page wasn't properly displaying the
Avg value (regression in 374.39)
- FIXED: Clients with a configured IPv6 DNS would bypass
DNSFilter. DNSFilter-enabled clients will now
be prevented from using IPv6 nameservers, forcing
them through the (IPv4-only) filtering nameserver
- FIXED: DNSFilter clients set to "None" would still be
forced through your WAN-configured nameservers,
preventing nameservers configured on the clients
from working. Now they will fully ignore the DNSFilter
settings.
- FIXED: The global DNSFilter would sometime not get properly
configured in the firewall.
- FIXED: When the firewall was disabled, the FORWARD chain
policy was still left to "DROP" - changed to "ACCEPT".
- FIXED: typo in SMB config ("use spne go") (Asus bug)
- FIXED: PPPoE with an MTU of 1500 requires the WAN interface
to have its MTU set at 1508 (patch by pinwing)
- FIXED: IPv6 Prefix Delegation issues (patch by pinwing)
- FIXED: MTU setting on IPv6 connections (patch by pinwing)

Альфа-версия прошивки модели RT-AC68U для отката в случае, если не покатит вышеуказанная бета (см. примечание в списке изменений выше): http://www.mediafire.com/download/f77jhzgu...4.40_alpha4.zip


--------------------
Правило - это КАК без ПОЧЕМУ.
 
+Цитировать сообщение
Sergey Ozerov
сообщение 19.4.2014, 17:48
Сообщение #18


Форуман
Иконка группы

Группа: Главные администраторы
Сообщений: 20579
Регистрация: 10.1.2004
Из: Bogorodskoye, Moscow, Russia
Пользователь №: 1221
Спасибо сказали: 1912 раз(а)



Новые прошивки от Мерлина (скомпилированы 18 апреля):

Список изменений
CODE
374.41 (18-Apr-2014)
- NEW: Merged with Asus's 374_5047 GPL. Notable changes:
* Fixed RT-AC68U random reboots
* Additionnal security fixes
* Improved Media server, SMB and FTP webui
* minidlna and radvd updates

- NEW: PCP support (Port Control Protocol)
- NEW: Option to allow/deny FTP access from WAN. Default is to
reject WAN connections. The option can be found on the
USB Servers -> FTP Share
- NEW: Option to control web redirection while Internet is
down (configurable on the WAN page).
- CHANGED: Upgraded miniupnpd to 1.8.20140401.
- CHANGED: Disk idle exclusion now supports up to 9 disks.
- FIXED: WOL wasn't working (Asus bug in 4887/5047)
- FIXED: Replaced webui glue with permanent concrete. It won't
fall again.
- FIXED: Language dropdown not properly shown with 8-bit
characters.
- FIXED: Comcast's IPv6 network would flood the LAN with
neighbour solicitation packets, which should normally
not cross beyond their modem. There is now an ip6tables
rule to filter out those packets, preventing your log
from being spammed with table overflows. The filter is
is enabled by default and can be disabled by setting the
"ipv6_neighsol_drop" nvram setting to "0". (rule suggested
by diplomat7)
- FIXED: EMF wasn't properly configured after wireless was
restarted (patch from Vahur)
- FIXED: Router crashing when more than around 30 static routes
were entered
- FIXED: webui would die for some users when accessing the VPN Server
config page and there were connected OpenVPN clients
- FIXED: Added missing iptables-save on ARM platform (AC56, AC68)
- FIXED: nvram factory default reset would sometime fail on MIPS
devices (N16, N66, AC66) (Patch by ryzhov_al)
- FIXED: Under a certain situation the router could lose track of
whether an OpenVPN server/client instance was running or not.
This could result in the webui trying to restart it, and
returning an error message because it was already running.
- REMOVED: The Media server database location is no longer
configurable, as we've switched to Asus's new
automatic location selection.
- REMOVED: Removed the Run Cmd page as it was a security
risk. This is also needed to keep in line with
recent security fixes Asus applied to the
httpd backend to limit what external processes
it can run, otherwise any malicious page could
run arbitrary commands on your router if you
were currently logged on a separate tab.

Архив с прошивкой содержит файл MD5-*.txt с MD5-хешами файлов *.trx (перевод строки в файле -- в линуксовой кодировке, т.е. 0x0a вместо виндового/досовского 0x0d0a). Зачем он нужен -- не знаю: всё равно после распаковки архива архиватор проверяет (должен проверять) CRC...


--------------------
Правило - это КАК без ПОЧЕМУ.
 
+Цитировать сообщение
Sergey Ozerov
сообщение 10.5.2014, 15:29
Сообщение #19


Форуман
Иконка группы

Группа: Главные администраторы
Сообщений: 20579
Регистрация: 10.1.2004
Из: Bogorodskoye, Moscow, Russia
Пользователь №: 1221
Спасибо сказали: 1912 раз(а)



Новые прошивки от Мерлина (скомпилированы 09 мая):

Список изменений
CODE
374.42 (9-Mai-2014)
- NEW: Merged with Asus's 374_5656 GPL.
- NEW: Added Comodo Secure DNS to supported DNSFilter services
- FIXED: Download2 folder wasn't selectable anymore on the
Media Server page.
- FIXED: Pass correct valid and preferred lifetime to radvd when
using DHCPv6-PD (Patch by pinwing)
- FIXED: IPv6 connectivity could be lost after 1-2 hours due
to the time shift caused by NTP at boot time
(Patch by pinwing)
- FIXED: Various IPv6 connectivity issues related to services
being (re)started at the wrong time, or twice.
(Patch by pinwing)
- FIXED: Build system would sometime try to use the local system's
header/libs - use a pkg-config wrapper to avoid this
issue (Patch by ppuryear)
- FIXED: Erratic 5G led blinking behaviour as the watchdog's software-
based blinking was constantly writing to the wireless chip's
registers for led control. (AC68)
- FIXED: LEDs weren't all turning back on when coming out of
Stealth Mode (AC56)
- CHANGED: Make the router use dnsmasq for internal name
resolution rather than directly using the WAN DNS.
- CHANGED: Upgraded OpenVPN to 2.3.4.
- CHANGED: Upgraded miniupnpd to 1.8.20140422 (PCP-related fixes).

По сути, это -- багфикс предыдущей версии.


--------------------
Правило - это КАК без ПОЧЕМУ.
 
+Цитировать сообщение
Sergey Ozerov
сообщение 7.6.2014, 14:21
Сообщение #20


Форуман
Иконка группы

Группа: Главные администраторы
Сообщений: 20579
Регистрация: 10.1.2004
Из: Bogorodskoye, Moscow, Russia
Пользователь №: 1221
Спасибо сказали: 1912 раз(а)



Новые прошивки от Мерлина (скомпилированы 06-07 июня):

Список изменений
CODE
374.43_2 (7-June-2014)
- FIXED: NTFS disks couldn't be mounted (Paragon driver not
loading due to a kernel change) (AC56, AC68)


374.43 (6-June-2014)
- NEW: User-configurable refresh period to trigger a DDNS
update after a certain number of days.
- CHANGED: dnsmasq option 252 now defaults to an empty string,
to silence broken clients such as Win7.
Important: if you were previously using a customized
252 reply (to use with a valid wpad/pac file), you
will need to use a postconf script to change the
default config instead of appending your own
config.
If you use DNS-based WPAD setting, you will need
to remove the 252 option using postconf, as IE will
not query for the DNS entry if there is a 252
option through DHCP, even if it fails to connect to it.

- CHANGED: Updated miniupnpd to 1.8.20140523.
- CHANGED: Updated openssl to 1.0.0m.
- CHANGED: More backports from OpenSSL 1.0.2, improving SHA
performance on ARM routers.
- CHANGED: The JFFS2 partition is now disabled by default after
a factory default reset.
- FIXED: Media server page wouldn't let you enable the iTunes
server unless you also enabled DLNA (Asus bug)
- FIXED: Restricted guests still had access to the router (Asus
bug introduced in GPL 4887)
- FIXED: 6in4 traffic wasn't bypassing CTF if dualwan mode was
either disabled or set to failover mode (AC56/AC68)
- FIXED: Single character workgroups were rejected as invalid
(Asus bug)
- FIXED: Networks with SSIDs containing single quotes
would break the client list (Asus bug)
- FIXED: Traffic Monitor results are wrong on PPPoE connections
(Asus bug) (Patch by pinwing, additional debugging
by fantom1)
- FIXED: Crash if entering close to 64 MACs plus their names on
the MAC filter page.


374.42_2 (16-May-2014)
- FIXED: Time Machine support (AC56, AC68).


Сообщение отредактировал Sergey Ozerov - 9.6.2014, 2:14
Причина редактирования: Заменены ссылки для AC56U, AC68U: вышел багфикс.


--------------------
Правило - это КАК без ПОЧЕМУ.
 
+Цитировать сообщение

2 страниц V   1 2 >
Ответить в данную темуНачать новую тему
1 чел. читают эту тему (гостей: 1, скрытых пользователей: 0)
Пользователей: 0



© 2005—2016 ООО «Нэт Бай Нэт Холдинг»,
Все права защищены.
Правила пользования ресурсами