Virtual Wireless broken?

April 19, 2019, 1:39 pm

≫ Next: OpenVPN Client Bug: Persistent NAT Rules

≪ Previous: Dual WAN, second WAN as WIFI Client to Hotspot

FreshTomato Firmware 2019.1 K26ARM USB AIO-64K

I was making some changes to my virtual wireless and I went to save and I get the error

The field "wl_wpa_psk" is invalid. Please report this problem.

Apparently now I can no longer make any changes to my virtual wifi? What can I do about this?

↧

OpenVPN Client Bug: Persistent NAT Rules

April 20, 2019, 4:25 am

≫ Next: Static DHCP entries location

≪ Previous: Virtual Wireless broken?

I believe I've found another bug/issue w/ the OpenVN client. It was discovered while trying to find a workaround for the following OpenVPN issue, and discussed there as well. I just wanted to formalize the issue in its own dedicated thread.

https://www.linksysinfo.org/index.php?threads/openvpn-client-security-enhancement.74549/

It appears that FreshTomato (Firmware 2018.5 K26ARM USB AIO-64K) is NAT'ing all the OpenVPN client network interfaces (tun11, tun12, and tun13), even...

OpenVPN Client Bug: Persistent NAT Rules

↧

Static DHCP entries location

April 20, 2019, 12:07 pm

≫ Next: SOLVED: OpenVPN Client Bug: Persistent NAT Rules

≪ Previous: OpenVPN Client Bug: Persistent NAT Rules

I do not use the router as DHCP/DNS server.

However, I want to have the hostnames in the Device List (checking what in online and the wifi signal strength). I do not want to enter entries in both locations (my Pihole as DHCP/DNS) and in the Tomato.

I did not find a file in the router filesystem that contains those entries so I can change it. Can someone give me some tips?

I expected that I can copy a similar file to the one in PiHole to the Tomato over SSH and keep them in sync

↧

SOLVED: OpenVPN Client Bug: Persistent NAT Rules

April 20, 2019, 1:17 pm

≫ Next: [MIPS Repo] Entware-backports (entware-ng reloaded)

≪ Previous: Static DHCP entries location

↧

[MIPS Repo] Entware-backports (entware-ng reloaded)

April 21, 2019, 7:08 pm

≫ Next: How can I forward a port to another computer but maintain the originating IP?

≪ Previous: SOLVED: OpenVPN Client Bug: Persistent NAT Rules

As you already noticed entware-ng (http://pkg.entware.net/binaries/mipsel) doesn't get updated anymore.
The repo on github is archived (read-only) and all the development moved to entware repo.
It now supports MIPSsel with kernel >= 3.4 which means john's fork (+ older merlin installs) and freshtomato are left without an updated repo.
For my own usage I've found some time to update and compile...

[MIPS Repo] Entware-backports (entware-ng reloaded)

↧

How can I forward a port to another computer but maintain the originating IP?

April 21, 2019, 9:32 pm

≫ Next: Harmony Hub won't get a IP address with update

≪ Previous: [MIPS Repo] Entware-backports (entware-ng reloaded)

I need to forward traffic coming into a cloud-provisioned Ubuntu VPS at 1.1.1.100 on port 1234 to port 5678 on local Windows computer (192.168.0.200, which is behind a Tomato router at 2.2.2.200 / 192.168.0.1), but to preserve the originating IP address. The router forwards port 5678 to the Windows machine.

When I run this on the VPS:

iptables -t nat -A PREROUTING -p tcp --dport 1234 -j DNAT --to-destination 2.2.2.200:5678
iptables -t nat -A POSTROUTING -p tcp -d 2.2.2.200 --dport...

How can I forward a port to another computer but maintain the originating IP?

↧

Harmony Hub won't get a IP address with update

April 22, 2019, 9:36 pm

≫ Next: Security Enhancement: Let's disable the APs by default!

≪ Previous: How can I forward a port to another computer but maintain the originating IP?

Router AC-68U running 2019.2

After upgrading, this one device doesn't want to get an IP address. Looking on the 'device list' I can see it appear briefly and then disappear every few seconds. The TX/RX always reads 1/1. I had this problem the last time I upgrading to 2018.5. For the life of me I can't remember how I got it working the last time. I have done thorough nvram erase before and after the upgrade no dice. Unplugged the hub no help. I have gone back to 2018.5 and restored...

Harmony Hub won't get a IP address with update

↧

Security Enhancement: Let's disable the APs by default!

April 23, 2019, 1:18 pm

≫ Next: Routing Policy ? in VPN Tunneling

≪ Previous: Harmony Hub won't get a IP address with update

Just wondering if anyone else has thought about the benefits of having the APs in the firmware default to OFF rather than ON.

I've thought about this many times before, and just let it slide. But when you really think about, it's incredibly dumb to turn the radios ON and w/ no security. I understand why OEM firmware does this; they assume the customer is a total idiot, so they make it as simple as possible to get started. But is this a valid assumption for ppl using third party firmware?...

Security Enhancement: Let's disable the APs by default!

↧

Routing Policy ? in VPN Tunneling

April 24, 2019, 1:29 pm

≫ Next: Cannot Access Bridge Interface

≪ Previous: Security Enhancement: Let's disable the APs by default!

Hi,

I'm a new user of FreshTomato and allready now i love it..
I was using Asus Merlin version on my Asus, but just found my old Linksys / Cisco EA6700

I was tested the VPN Tunneling and it works as it should.. The problem is it redirect all traffic.. I would like only to have some of the host in my local area network should use the VPN ?

In my Asus router with Asus Merlin i did have it like that and worked like a charm..
But then I saw this: Routing Policy looks very similar...

Routing Policy ? in VPN Tunneling

↧

Cannot Access Bridge Interface

April 24, 2019, 1:30 pm

≫ Next: How can I set a TomatoUSB router up in STA mode.

≪ Previous: Routing Policy ? in VPN Tunneling

After setting up my Asus router with Tomato 1.28 Shibby in wireless bridge mode, I find that I can no longer access the interface. I suspect that this is by design...but at some point (I guess) I'll need to get in and tweak some things. Other than doing the 30/30/30 reset is there any other way to get back in?

↧

How can I set a TomatoUSB router up in STA mode.

April 24, 2019, 5:53 pm

≫ Next: Need stubby configuration help

≪ Previous: Cannot Access Bridge Interface

I can't translate the modes I see in the Wireless mode list to STA. I have a computer with an ethernet port that I want to use the router to connect to a wireless network. I have no way to get an ethernet cable to it.

Thanks,
Jim

↧

Need stubby configuration help

April 24, 2019, 7:04 pm

≫ Next: R7000 "random" reboots

≪ Previous: How can I set a TomatoUSB router up in STA mode.

Using the built in config file in FreshTomato 2019.2. At the site 1.1.1.1/help it reports 'NO' for DNS over TLS. It also fails a couple of tests at https://cmdns.dev.dns-oarc.net/ (sorry can't remember which ones). How can I fix these?

Here is the default stubby.yml file

Code:

tls_ca_file: "/rom/cacert.pem"

resolution_type: GETDNS_RESOLUTION_STUB

dns_transport_list:
  - GETDNS_TRANSPORT_TLS

tls_authentication: GETDNS_AUTHENTICATION_REQUIRED

tls_query_padding_blocksize:...

Need stubby configuration help

↧

R7000 "random" reboots

April 28, 2019, 2:06 am

≫ Next: Linksys E900 Access Restriction problem

≪ Previous: Need stubby configuration help

I just upgraded to the newest FreshTomato [2019.1]
When I upgraded, it checked the "clear nvram" box.

I've put most of my config back in place, but it did reboot a few times during the configuration.

I'd like to see if there is anything in the logs... So I try refreshing the log page several times - I haven't been able to catch anything that points me to a possible cause, but I assume I'm missing the error due to the reboot and loss of the log.

Is there a way to get the logs to go...

R7000 "random" reboots

↧

Linksys E900 Access Restriction problem

April 28, 2019, 3:01 am

≫ Next: Wireless Ethernet Bridge -- No Current Time

≪ Previous: R7000 "random" reboots

Hello to all. I have E900 router links. HW version 1.0.0.3. In the factory FW no item "Access Restriction" , but i need it.
I have burning tomato FW into router (tomato-E900-NVRAM64K-1.28.RT-N5x-MIPSR2-140-Max). Reset NVRAM.
But unfortunately in the section "Access Restriction" there are no necessary elements.
[IMG]

Only button ADD. If i push it, appear only buttons save, delete, cancel.
[IMG]

I...

Linksys E900 Access Restriction problem

↧

Wireless Ethernet Bridge -- No Current Time

April 28, 2019, 5:34 am

≫ Next: Asus AC68U

≪ Previous: Linksys E900 Access Restriction problem

In looking further into why my Wireless Ethernet Bridge (WEB) router (running FreshTomato 2019.1) cannot get the current time on Status->Overview page I discovered that my WEB router does not have a default route in its routing table and the two files ntp.conf and resolv.dnsmasq (which resolv.conf is symbolically linked to) are missing in its /etc directory. This is in spite of the fact I have configured Default Gateway and Static DNS entries in basic->Network as well as NTP entries in...

Wireless Ethernet Bridge -- No Current Time

↧

Asus AC68U

April 28, 2019, 9:42 am

≫ Next: FreshTomato on a RT-AC68P (or RT-AC68U) operating as a Wireless Ethernet Bridge?

≪ Previous: Wireless Ethernet Bridge -- No Current Time

Hello
I am using an Asus AC68U router (rev A2) which is equipped with firmware
AsusWRT-Merlin 384.9 and I want to test FreshTomato 2019.1.
What is the best way to proceed?
current firmware ---> FreshTomato or
current firmware ---> original Asus firmware (3.0.0.4 ?) ---> FreshTomato
or another ?
Thanks for your help

↧

FreshTomato on a RT-AC68P (or RT-AC68U) operating as a Wireless Ethernet Bridge?

April 28, 2019, 11:17 am

≫ Next: On which routers does Tomato provide VPN settings?

≪ Previous: Asus AC68U

Is there anyone who has run FreshTomato on a RT-AC68P (or RT-AC68U) operating as a Wireless Ethernet Bridge?

If so, have you run into any issue?

TIA.

↧

On which routers does Tomato provide VPN settings?

April 29, 2019, 3:23 am

≫ Next: How to create a separate sub-net in "Repeater" mode

≪ Previous: FreshTomato on a RT-AC68P (or RT-AC68U) operating as a Wireless Ethernet Bridge?

Hi! New to this forum, grateful if someone can point me in the right direction with this question.

From my home office I have to connect to my work network via VPN. To make this easier with multiple devices I thought it would be a good idea if the router could handle the VPN connection.

After much searching and reading, Tomato seemed to be the best firmware choice. So I took the leap and flashed FreshTomato onto an old Linksys E1200.

It was not an easy install, and took several hours to...

On which routers does Tomato provide VPN settings?

↧

How to create a separate sub-net in "Repeater" mode

April 29, 2019, 5:26 am

≫ Next: 2.4GHz WiFi disapears

≪ Previous: On which routers does Tomato provide VPN settings?

Hi,

The business next door has a fiber connection (tech company) and I am paying to use their wi-fi. The arragement is much better then getting a connection of my own.

I would like to do the following: connect to their wi-fi signal, create my own sub-net with DHCP server and all that, and then also create my own wi-fi and guest wi-fi.

Currently, I am connecting in "repeater" mode (Asus terminology) which does allow me to setup my own wi-fi netwrok, however in this mode I am using the DHCP...

How to create a separate sub-net in "Repeater" mode

↧

2.4GHz WiFi disapears

April 30, 2019, 11:39 am

≫ Next: ASUS RT-AC66U B1 H/W Rev. B2 firmware compatibility?

≪ Previous: How to create a separate sub-net in "Repeater" mode

Hi All i have this wierd issue..

I just tried a couple of time to flash my Linksys Cisco EA 6700 and everything was perfect..
When it was done i cleared the NVRam and router rebooted. Everything was perfect. I started configure my router WIFI and works perfect.. After a reboot the 2.4GHz WiFi disapears and the 5GHz is more limited in the settings. Plus it reset the WIFI config back to standard.

I searched and search and found this guide:...

2.4GHz WiFi disapears

↧