New oleg firmware version

[lly]

Although settings were the same as in earlier version and worked fine. What could be the problem?

ez-ipudate didn't changes between r396-r461. So, if router provides internet successfully, it is not an error of FW itself.

[theMIROn]

Aug 20 21:07:28 ddns update: authentication failure

wrong hostname, password or account expired.
so it's not a prob of FW
check it in /etc/ddns.conf file

[theMIROn]

In r461 we add experimental accel-pptp kernel driver, which should significantly improve PPTP speed. Please help us to test it.

To turn it on you have to do:

nvram set wan0_pptp_kernel=1

nvram commit is superfluous, since there is not needed that driver will start after reboot or crash.
After this, push "Disconnect", wait 10 sec, push "Connect" in web-GUI.

Syslog should have lines like below:

...

p.s automatic reconnect don't work for now.

Since r473 automatic reconnect will work as well, so we really need your feedback about pptp speedup

[wpte]

hello!
I have some problems with wget (the one from ipkg)
basicly when you try to download something it takes ages to resolve the adress for some reason
about 30 to 50 seconds

with the wget from /usr/bin/wget it just happens straight away
I'm not entirely sure if this is firmware related but it seemed to happen after updating r396 to r473

[lly]

hello!
I have some problems with wget (the one from ipkg)
basicly when you try to download something it takes ages to resolve the adress for some reason
about 30 to 50 seconds

with the wget from /usr/bin/wget it just happens straight away
I'm not entirely sure if this is firmware related but it seemed to happen after updating r396 to r473

Very strange, since wget-opt should use its own uClibc from /opt/lib and dnsmasq wasn't changed. You use wget 1.11.4-1 from Oleg ipkg repository?

[theMIROn]

hello!
I have some problems with wget (the one from ipkg)
basicly when you try to download something it takes ages to resolve the adress for some reason
about 30 to 50 seconds

with the wget from /usr/bin/wget it just happens straight away
I'm not entirely sure if this is firmware related but it seemed to happen after updating r396 to r473

30 to 50 seconds? Are you sure your dns servers is ok? check it with nslookup

[wpte]

30 to 50 seconds? Are you sure your dns servers is ok? check it with nslookup

well yes that's the weird thing since I'm using the same DNS server for everything.
My modem is on 192.168.1.1
and the router is connected via dhcp and has no problem receiving the dns server (confirmed by the modem). The only thing the router does is forward the dns server on 192.168.2.1 (used by the computers)

Even when I connect to the dns server directly and try browsing on my pc, there is no delay in resolving addresses.

the nslookup command gives this:

nslookup google.com
Server:    192.168.1.1
Address 1: 192.168.1.1 openrg.home

[about 20 seconds delay]

Name:      google.com
Address 1: 74.125.127.100
Address 2: 74.125.67.100
Address 3: 74.125.45.100 

I mean... it's using the right adress
even when I try an open dns server I get the same delay:

 nslookup google.com 208.67.220.220
[10 seconds delay]
Server:    208.67.220.220
Address 1: 208.67.220.220

[another 20 sec delay]

Name:      google.com
Address 1: 74.125.67.100
Address 2: 74.125.127.100
Address 3: 74.125.45.100 

so I dunno anymore

[WiziPok]

Gentlemen, I need your help to solve my PREROUTING problem …


I used the latest FW, seem that during few hours after rebooting the 500gP v1 everything is work, but after some time everything stops.

Asus 500gp used as AP as open system. In some cases the clients have to be prerouted to the information web pages on port 81.

On port 81 I use bysybox_httpd, starting with post-mount script:

# InfoWeb server on 81
busybox_httpd -p 81 -u root -h /tmp/harddisk/opt/www_info

When the client has to be prerouted I use the following command in script:

mac=$1
port=$2
iptables -t nat -A PREROUTING -p tcp -m mac --mac-source $mac --dport 80 -j DNAT --to-destination 192.168.1.1:$port

So, after fresh reboot the prerouting is working, but after some time and adding new MACs to preroute list the browser got TIME OUT, and no Info Pages appears.

The command

iptables -L -vn -t nat

gives:

Chain PREROUTING (policy ACCEPT 300K packets, 23M bytes)
 pkts bytes target     prot opt in     out     source               destination
 147K   14M VSERVER    all  --  *      *       0.0.0.0/0            83.183.110.99
   46  2192 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           MAC 00:1D:EE:61:FE:11 tcp dpt:80 to:192.168.1.1:81

Chain POSTROUTING (policy ACCEPT 97076 packets, 9890K bytes)
 pkts bytes target     prot opt in     out     source               destination
 211K   15M MASQUERADE  all  --  *      vlan1  !83.183.110.99        0.0.0.0/0
  823 82476 SNAT       all  --  *      br0     192.168.1.0/24       192.168.1.0/24      to:192.168.1.1

Chain OUTPUT (policy ACCEPT 18669 packets, 1220K bytes)
 pkts bytes target     prot opt in     out     source               destination

Where is the trouble?

Thank you

WiZi

[lly]

So, after fresh reboot the prerouting is working, but after some time and adding new MACs to preroute list the browser got TIME OUT, and no Info Pages appears.

Where is the trouble?

Unfortunately, this is not easy question, for me at least.
We already has similar reports (see Issue 34), but still can't reproduce problem.

In your sample I can see only single DNAT rule. Is problem appears with single client after some time, or only when several rules was added? Did you remove rule for disconnected clients?

When forwarding stops, can you trace packets with tcpdump yourself?

[WiziPok]

Hi,

The trouble starts every time, not depending on the number of added MACs.

No, all added rules are permanent. Some cases use the same way to preroute the unwanted clients to the port 82, where ra the BanPages about banned MAC.

Some more specification of 500gp:
- the 500gp is used without WIFI card, so just HOME GATEWAY for Ethernet ports
- all clients are connecting using standalone APs connected to the 500gp trough LAN

Is there must be any additional rule to allow prerouting trough “br0” ?

Thank you

WiZi

[lly]

The trouble starts every time, not depending on the number of added MACs.

I will try to reproduce situation.

Can you tell me if packets counter (output of "iptables -L -vn -t nat") still increase value after forwarding stops? After which time period this bug appeared - one hour, one day ? Was this happens on previous FW versions?

Updated 04-09-2009:
Unfortunately I can't reproduce fail, rule live above day with constant HTTP_GET queries:

$ iptables -L PREROUTING -t nat -vn
Chain PREROUTING (policy ACCEPT 3635 packets, 456K bytes)
 pkts bytes target     prot opt in     out     source               destination.
 313K   19M DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0    MAC 00:1E:8C:5C:BC:XX tcp dpt:81 to:192.168.1.100:8181 

[weixing]

lly,

I need the following under the oleg firmware, please help:
1) NTFS support (stable read-only will be ok), do I need to install ntfs-3g or just ntfs.o? If need to install ntfs-3g, what are the commands to load? insmod -s fuse.o and then....?
2) how can I enable jffs support in oleg? I understand that flashfs is only 64k and only enough for scripts. Where can I store the
3) what are the scripts to auto-detect usb plugged in and enable auto-mounting of partitions?
4) how to support codepages 936 (ie. chinese characters in filename) over samba? where to dl the necessary files?

many thanks!

[weixing]

lly,

I need the following under the oleg firmware, please help:
1) NTFS support (stable read-only will be ok), do I need to install ntfs-3g or just ntfs.o? If need to install ntfs-3g, what are the commands to load? insmod -s fuse.o and then....?
2) how can I enable jffs support in oleg? I understand that flashfs is only 64k and only enough for scripts. Where can I store the
3) what are the scripts to auto-detect usb plugged in and enable auto-mounting of partitions?
4) how to support codepages 936 (ie. chinese characters in filename) over samba? where to dl the necessary files?

many thanks!

In addition,
5) how to add ddns support for 3322.org
6) can I use the download master (for orginal stock firmware) for torrent dl?

[theMIROn]

2) how can I enable jffs support in oleg? I understand that flashfs is only 64k and only enough for scripts. Where can I store the

the support is already here, but internal flash memory is used for flashfs (gzipped tar actually) by now. So, it's kinda useless.

3) what are the scripts to auto-detect usb plugged in and enable auto-mounting of partitions?

/usr/local/sbin/post-mount

4) how to support codepages 936 (ie. chinese characters in filename) over samba? where to dl the necessary files?

you need to build or to search for codepage.936 and unicode_map.936 charset files, then place it in /usr/codepage folder, using mount -o bind

5) how to add ddns support for 3322.org

currently, we have no plans to add more ddns services, 'coz http://www.dnsomatic.com supports a lot of them, acting as ddns proxy.

6) can I use the download master (for orginal stock firmware) for torrent dl?

Search forum for torrent/transmission threads

[weixing]

the support is already here, but internal flash memory is used for flashfs (gzipped tar actually) by now. So, it's kinda useless.

what commands can I use to enable it? do it need to disable flashfs before enable it? more instructions pls.

also, what are the commands to enable ntfs-3g? just copy the 4.4 files to jffs (if enabled) and run ntfs-3g?