[Fork] FreshTomato-ARM

Discussion in 'Tomato Firmware' started by kille72, Apr 15, 2018.

  1. Joseph Deck

    Joseph Deck Network Newbie Member

    That would be great. It is an Asus RT-AC68U.
     
    kille72 likes this.
  2. B Tung

    B Tung New Member Member

    Hi, thanks for continuing the development of tomato

    I installed the 2018.2 firmware on a converted TM-ac1900, the QOS inbound is stuck at 100% P2P/bulk category when i set 70% (inbound qos not working)

    *update* working now with 2018.3 beta, no idea which settings is causing the problem
     
    Last edited: May 29, 2018
    Techie007 and kille72 like this.
  3. kille72

    kille72 LI Guru Member

    rgnldo likes this.
  4. Joseph Deck

    Joseph Deck Network Newbie Member

    Thanks, I installed that, now I can remotely start my PC again!
    (BTW the WOL page worked in Shibby 140. Apparently some objects were renamed in the fork to Fresh Tomato and this particular instance was overlooked. It was somewhat confusing because the function createFieldTable() automatically gives the object an id derived from the name by prepending "_" if no explicit id is specified. Therefore, the actual id of the object did not appear in any definition, which is probably how it was missed.)
     
    pedro311 and kille72 like this.
  5. rgnldo

    rgnldo Serious Server Member

    @kille72 A help! Are the Wireless drivers updated in FreshTomato builds?
     
  6. Bird333

    Bird333 Network Guru Member

    Would you mind sharing your iptables rule?
     
  7. Bird333

    Bird333 Network Guru Member

    Router AC68U running 2018.2. Anybody having trouble losing wireless connection? Occasionally I lose my wireless network. Also sometimes connection to the internet (using a physical wire) even though the gui still shows the router has a WAN address. What command can I use to restart wireless without rebooting the router?
     
  8. Twincam

    Twincam Networkin' Nut Member

    There's some good stuff on this page here https://www.linksysinfo.org/index.php?threads/tomato-toastmans-releases.36106/page-42#post-285217 Read that post [#4166] and then scroll down the page.
     
  9. QQQTJ

    QQQTJ Networkin' Nut Member

    AC68U, HW Rev B1 running 2018.2 AIO.

    It seems there is a form validation bug in forward-basic-ipv6.asp

    The help text says I can specific an outside source network to match the rule against.

    Src Address (optional) - Forward only if from this address. Ex: "2001:4860:800b::/48"

    But trying to add a /64 fails form validation.

    Expected behavior:

    I can speficy Source as 2001:19f0:9001:daa::/64 and only hosts from that network can get in.

    Actual behavior:

    2001:19f0:9001:daa::/64 - invalid IPv6 address with mask
     
  10. Twincam

    Twincam Networkin' Nut Member

    @kille72

    The definite UI cosmetic bug described [against @Toastman builds] here http://www.linksysinfo.org/index.php?threads/tomato-toastmans-releases.36106/page-39#post-280845 persists in your 2018.2 AIO build on my RT-AC3200.

    I suspect it is a bug that may affect all Tomato/Kille72 and Shibby builds too. I don't know how to code the fix, but I [lamely] offered a possible fix [well, "crude analysis"] in that post and, regardless, it will only affect Users who define vWLANs [more than 0]. If no virtual WLANs are defined, the problem does not arise.
     
  11. Bird333

    Bird333 Network Guru Member

    FYI, 2018.3 beta on AC68U is not pulling in my wallpaper.
     
  12. pedro311

    pedro311 Serious Server Member

    Fixed: https://bitbucket.org/pedro311/freshtomato-arm/commits/24de13ddea9195df88328a27caffda59a9069389
     
    kille72 likes this.
  13. Twincam

    Twincam Networkin' Nut Member

  14. Onee-chan

    Onee-chan Network Newbie Member

    Request: Update Layers in QoS in ARM and MIPS Firmware

    Yesterday I wanted to try DD-WRT and install the latest version: Build 36079 (BS): 06-01-2018-r36079
    • ARM (Kernel: Linux 4.4.134) and MIPS (Kernel: Linux 3.10.108)

    DD-WRT QoS
    has the layers updated to date and they work, in Tomato QoS they do not work.

    An screenshot of which I am testing and it works.
    [​IMG]

    It has like 300 layers for everything!
    [​IMG]


    Can you developers install DD-WRT copy their layer and update them in Tomato!
     
    Last edited: Jun 1, 2018
  15. pedro311

    pedro311 Serious Server Member

    Tested, it's working ;)
     
    M_ars and kille72 like this.
  16. Protos

    Protos New Member Member

    First thank you devs and contributors for keeping Tomato alive.
    Just a end user so my feedback will be limited.

    I am using and R8000 and have enabled ipv6 for my ISP (Spectrum)

    I could not get it working without adding scripts to the Firewall and Wan Up. I really had to dig around and ended up at Toastman guide for IPv6. Even so I still only got 19/20 on ipv6testcom as my Hostname was not being passed. Any ideas ???

    Would be great if upon enabling ipv6 those scripts were auto added to the rules (they seem to be required for my ISP and it is probably the largest in USA)
     
  17. Techie007

    Techie007 Serious Server Member

    Confirmed in 2018.3.018 that QoS now appears to be working again instead of all traffic being prioritized at the Default class despite showing up correctly classified in the Details view as with 2018.1 and 2018.2. Rules have been ~80% stock, with several combined into one, and several new ones added to keep up with the changing Internet. No NVRAM resets between updates since 2017.3.
     
    pedro311 and kille72 like this.
  18. horrigun

    horrigun Serious Server Member

    Guys, sorry for off topic and noob question, does anybody know how to set up own email on this firmware (is it possible at all)?
     
  19. ruggerof

    ruggerof Network Guru Member

    What do you mean by "own email"? The firmware to send you email notifications? If so, there is no such feature built in. You can of course make scripts to send you emails, SMS, Telegram notiifications, etc.
     
    horrigun likes this.
  20. Twincam

    Twincam Networkin' Nut Member

    horrigun likes this.
  21. roadkill

    roadkill Super Moderator Staff Member Member

    Techie007 and M_ars like this.
  22. Xruptor

    Xruptor Serious Server Member

    I'm surprised this firmware hasn't been applied to the RT-AC86U. Since it's been applied to several other ARM routers. Would be nice if Tomato was updated so it can support the RT-AC86U if it hasn't already. Still, it's kinda cool that Tomato is still being worked on. I thought it was done for! :D
     
  23. maurer

    maurer Network Guru Member

    rt-ac86u is based on different Broadcom SDK (HND), different kernel (4.1) and different CPU architecture (arm v8 64bit) so no chance for a quick port - it needs lots of work
     
  24. Bird333

    Bird333 Network Guru Member

    Router AC68U running 2018.3 beta. FYI, doing a 'thorough' nvram reset causes the power LED to stay off.
     
  25. Pess0g

    Pess0g Networkin' Nut Member

  26. txnative

    txnative Networkin' Nut Member

    Andre been using a VPN compiled version for R6300v2 from your Git. I have and still use the Qos and have not had any issues with either Qos or Bandwidth Limiter, even on Advancedtomato been running as well as expected, I've been meaning to let you know but haven't seen you around. Have a great weekend
     
  27. Edrikk

    Edrikk Network Guru Member

    @pedro311 @kille72

    bd9bc5d Tomato's iptables is being updated from v1.4.14 (dated May 26th, 2012), to v1.6.2 (dated Feb 2, 2018).

    This commit also takes all the Tomato modifications (including extensions not in clean upstream source, and a few modifications) and places them in a patch file. So the iptables code is now clean and can be dropped in (with modify patches updated if needed; extra files will get auto created now via patch). I'll leave it to someone else if they wish to approach the patch a better way or separate it, but I've done what I intended to.

    Note that v1.6 requires the installation of libmnl-dev. I've added this to the README.md as well.

    A LOT was fixed/updated since 2012 as you can imagine. I've put the full changelog in the (long) commit message.


    The before and after shows that all rules were loaded successfully.

    Code:
    root@TOMATO:/tmp/home/root# iptables -S | wc -l
    73
    
    Code:
    root@TOMATO:/tmp/home/root# iptables -V
    iptables v1.6.2
    root@TOMATO:/tmp/home/root# iptables -S | wc -l
    73
    
    The new 1.6.2 code is placed in a new iptables-1.6.x direcotry. The old iptables-1.4.x directory remains as was, though it can be removed maybe along with other now unused directories such as ntpc and ntpclient to cleanup the source tree of unused stuff.

    I'm not having any problems with the new version... Hopefully all works, but at least we're in a clean / supported state (thanks to @pedro311 for the patching setup).


    PS. After committing I noticed that I named the patch file 101-tomato-additional-files.patch
    Given that it contains both "additional files" but also does a few modifications, maybe the name could be better...

    But after 2-3 days spent on this upgrade, and actually having stuff to do for a while, I'm passing the torch on this one now.
     
    Justio, AndreDVJ, txnative and 6 others like this.
  28. GhaladReam

    GhaladReam Network Guru Member

    @kille72 @pedro311 I would like to report a GUI bug.

    This seems to only affect the FreshTomato ARM branch (does not happen on MIPS).

    I've tested this on both 2018.3 ARM builds for Netgear R7000 and Dlink DIR-868L with the same results, so I imagine this is likely an issue with all ARM builds.

    The graphical "Ethernet Ports State" section completely disappears from the Status-->Overview page after you configure any VLANs using the VLAN GUI (add VIDs 1, 2 and 3 for example) and save/reboot the router. Enabling or Disabling 'Ethernet Ports State' in Basic-->Network has no effect.

    It's not a browser cache issue as I've cleared my cache, and tried different browsers (Edge, Firefox, Chrome) with the same results in each.

    My RT-N66U which has v2018.3 MIPS does not have this issue, and properly displays Ethernet Port States even after VLANs are configured.
     
  29. 5nolly6oster

    5nolly6oster New Member Member

    any plans on making this work on ac68u hwv:c1+? didnt realize i bought a c1 until after it bootlooped and i cant find a search button on this site

    also, could i just spoof a 1.0.2.1, or 1.0.2.5 cfe (thats the bootloader right?) to it to get tomato? i really miss tomato :(
     
  30. chulio

    chulio Reformed Router Member

    Thanks a lot guys for continuing Tomato which I really like !!!

    Two questions from a noob-user:
    1) Which version would you recommend, 2018.2 or 2018.3.beta ?
    I have AT on two access points (R7000, EA6900) and need tagged & untagged VLANs and WLANs, both as "routers" (not gateways, no DHCP server etc, WAN disabled).
    2) I'd love to use Tomato as a wireless repeater, 2.4GHz in as "WAN", 5GHz out as AP/local network incl firewall with VPN split tunnels. Do you think that will be feasible with upcoming releases ?

    Many thanks !
     
  31. Flowgo

    Flowgo New Member Member

    is dnscrypt-proxy broken in the beta?

    I enabled the option and selected cs-usnorth (which I pinged beforehand to make sure it was up, 173.234.56.115) and dns resolution just stops working completely.

    The router refuses my connections for a full minute, too. Not sure what's wrong. Is there something wrong with the default settings? (Local port 40, logging level 6)

    Do I need to have something else configured for it to work properly?
     
  32. pedro311

    pedro311 Serious Server Member

    Nope, it is working just fine.
    Remember, that not all servers support DNSSEC.
     
  33. AndreDVJ

    AndreDVJ LI Guru Member

    I'm back home, though free time will be very limited until I'm finally off on my annual leave.

    I took days off to deal with jetlag and other issues. I caught up with what's been done from pedro, kille72 and Edrikk so far. Will push my changes to git soon.

    SDK7 yes. SDK6 have issues, and won't have time to try anything with the patch Shibby made until at least mid-september. Someone else may take the torch.
    The patch is supposed to take care of this problem. Try resetting your local repo and start over. Issue git clean -fdxq && git reset --hard

    I'm running Debian 9.1 for a while, haven't tried 9.4 yet.

    Regarding GUI, it's a matter of choice. I'm running AT since 2004~ish (and trying to maintain it since I started my fork two years ago or so) and won't return to original Tomato's GUI.
     
    pomidor1 likes this.
  34. koitsu

    koitsu Network Guru Member

    And be sure to do git clean -fdxq from the top of the repository directory (ex. /home/harrison/pedro311arm). You can do git reset --hard from any point in the repo. Tomato's build process tends to throw files "all over the place" -- it's a lot wider than people realise sometimes. I also recommend doing git status after to ensure nothing is left over after. So something like this would do it:

    Code:
    (cd ~/pedro311arm && git clean -fdxq && git reset --hard)
    git status
    
     
  35. Jlove3184

    Jlove3184 Network Newbie Member

    Is cloudflare and Quad9 gonna be supported soon on this new firmware?
     
  36. RMerlin

    RMerlin Network Guru Member

    Personally, I recommend that people have two separate directories: one that contains their git repo, and from which they do the usual git commit/push/pull commands, and a separate one for which they do their actual firmware build. Use "rsync -a --del" between both folders to update your build tree using your development tree, before you can launch a build from that build directory.

    That's how I work here (with one folder per router model). It ensures that the git tree always stays clean (and that I don't accidentally commit temporary files).
     
    txnative and koitsu like this.
  37. gs44

    gs44 Addicted to LI Member

    Newest Beta up and running on my R7000 and everything seems rock solid so far...

    Thanks to the Team here for keeping Tomato Alive!!!!!!!
     
  38. hopeless

    hopeless New Member Member

    Hello, I have change from shibbys tomato firmware to freshtomato. On shibbys firmware I have used tor with a setting (SocksBindAddress) to open the socks port for all devices on local network. Now on FreshTomato I want to use my old setting for tor. But it doesn't work. Tor has made a few changes, the setting "SocksBindAddress" is removed and the values for "SocksPort" are extended. Now on "SocksPort" it can also used with an address like "192.168.1.1:9050", but the WebUI doesn't support this and an error occured if I write it in the custom setting section.

    Additional infos can be found on the tor manual doc at "SocksPort"

    What can I do? Will it fixed in a new Version?
     
  39. jkbuha

    jkbuha New Member Member

    Hey guys - kudos to the great project. Latest beta (019) working perfectly on my DSL-AC68U (sans DSL but that's fine, I only need the router functions).

    Quick question, not sure if it's router specific. Bandwidth and IP monitoring works perfectly, but no reports at all for Web monitoring (even port 80). Has anyone managed to make this work on freshtomato?
     
  40. rgnldo

    rgnldo Serious Server Member

    After several attempts with FreshTomato, I was able to run Unbound on DD-WRT Kong. Much better than DNSMasq. I'll still try again with FreshTomato.
     
  41. pedro311

    pedro311 Serious Server Member

    I presume you didn't try "SocksPort IP: port" in "Custom Configuration"...?
     
  42. Armando Adrid

    Armando Adrid New Member Member

    Hi Guys,

    Thank you for working on this new project -- it works in asus rt-n18u. :).

    Just want to share something (dont know if its a bug). I will try to recreate it again (if my time permits).

    Here's what happen:

    Setup:

    - enable CIFS
    - enable logging and saved to CIFS
    - enable bandwidth and IP monitoring and saved to CIFS

    possible bug/error when the following happens:
    - CIFS server got hung or disconnected
    - my ISP got disconnected
    - the router lost internet connection but still showing connected but the date/time and ISP connections show showing the same date/time (both for uptime)
    - i tried clicking disconnect/reconnect (its showing in the process of reconnecting) but after it refresh it show the same connection and date/time/uptime
    - tried to reboot via the reboot options, still nothing
    - tried to view the bw/ip and syslog its showing not running (because of CIFS) issue.
    - by this stage, olny options for me was to physically power off/on.

    after it reboot i did not reconfigure CIFS again but stick a USB flash drive and let the logs/bw/ip saves on that location. for now its running fine for full day now.

    I will try to re-create the issue, if the same scenario happen then it is possible in the firmware that preventing me to perform any task if those error were encountered again.

    EDIT:

    - i first installed the 2018.2 version but the QOS is buggy (inbount stuck in 100% in one rule).
    - Then flash the new 2018.3 over the old one. the QOS is working now. So far the only issue i encounter is what i have described above.
     
  43. hopeless

    hopeless New Member Member

    I have tried, see my last sentence of the first paragraph. I got an error on save with "SocksPort IP: port" in "Custom Configuration".
     
  44. eangulus

    eangulus Network Guru Member

    Just wanted to report that I am getting alot of errors in the logs. The is on a Clean install (NVRAM cleared) RT-AC3200 firmware 2018.3. Logs are completely flooded with these making it pointless to look at them for anything else.

    Code:
    Jun  8 18:26:13 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001540.496 wl1: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:13 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001540.501 wl1: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:13 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001540.502 wl1: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:13 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001540.502 wl1: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:13 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001540.518 wl1: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:13 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001540.522 wl1: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:13 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001540.523 wl1: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:13 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001540.523 wl1: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:13 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001539.854 wl0: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:13 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001539.855 wl0: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:13 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001539.856 wl0: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:13 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001539.856 wl0: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001543.414 wl2: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001543.418 wl2: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001543.419 wl2: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001543.420 wl2: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: dhd_prot_ioctl: status ret value is -21
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: dhd_prot_ioctl: status ret value is -21
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: dhd_prot_ioctl: status ret value is -21
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: dhd_prot_ioctl: status ret value is -21
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: dhd_prot_ioctl: status ret value is -21
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: dhd_prot_ioctl: status ret value is -21
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: dhd_prot_ioctl: status ret value is -21
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: dhd_prot_ioctl: status ret value is -21
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: dhd_prot_ioctl: status ret value is -21
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: dhd_prot_ioctl: status ret value is -21
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: dhd_prot_ioctl: status ret value is -21
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: dhd_prot_ioctl: status ret value is -21
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: dhd_prot_ioctl: status ret value is -21
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: dhd_prot_ioctl: status ret value is -21
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: dhd_prot_ioctl: status ret value is -21
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: dhd_prot_ioctl: status ret value is -21
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: dhd_prot_ioctl: status ret value is -21
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: dhd_prot_ioctl: status ret value is -21
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: dhd_prot_ioctl: status ret value is -21
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001540.542 wl0: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001540.544 wl0: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001540.544 wl0: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001540.545 wl0: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001540.563 wl0: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001540.564 wl0: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001540.565 wl0: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001540.565 wl0: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001544.104 wl2: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001544.109 wl2: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001544.109 wl2: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001544.110 wl2: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001544.124 wl2: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001544.129 wl2: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001544.130 wl2: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001544.131 wl2: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001541.206 wl1: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001541.211 wl1: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001541.211 wl1: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001541.212 wl1: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001541.227 wl1: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001541.231 wl1: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001541.232 wl1: wlc_iovar_op: sta_info BCME -21 (Bad Address)
    Jun  8 18:26:14 RT-14DDA9713410 kern.warn kernel: CONSOLE: 001541.232 wl1: wlc_iovar_op: sta_info BCME -21 (Bad Address)
     
  45. kille72

    kille72 LI Guru Member

    To mute debugging errors in this version and all previous ones, just add to firewall script:

    Code:
    dhd -i ethX msglevel 0x0000
    where X is your active wireless (1,2,3, etc)
     
    NotVeryClever likes this.
  46. pedro311

    pedro311 Serious Server Member

    No problem here (see screenshot).
    But you have right, it's time to change "Socks Port" field in the GUI and in the code.
     

    Attached Files:

    • tor.png
      tor.png
      File size:
      8.5 KB
      Views:
      36
  47. eangulus

    eangulus Network Guru Member

    Is that what it is...

    Do I do it for each wifi by doing multiple lines? I have the rt-ac3200 so I have a 2.4 and 2x 5ghz.

    Sent from my Pixel XL using Tapatalk
     
  48. pomidor1

    pomidor1 Networkin' Nut Member

    Code:
    dhd -i eth1 msglevel 0x0000
    dhd -i eth2 msglevel 0x0000
    dhd -i eth3 msglevel 0x0000
     
  49. MysticGold04

    MysticGold04 New Member Member

    I've been a lurker for some time now, just want to pass on my thanks to the devs for keeping this great firmware option alive. I've had many routers in the past few years and have flashed lots of firmware. I currently have 4 Asus TM-AC1900 units that have been converted to AC68Us. One is being used as the main router gateway, one as an AP (running 2018.3 Beta), and 2 as wireless bridges. I also have a couple of trusty E4200 V1s that have been retired as of now, but still function perfectly. I also have a 54GL, but he does not boot anymore, just flashes his power light and that's it.
     
  50. dskete

    dskete Serious Server Member

    Anyone use this with AT&T U-Verse Pace 5268AC modem? I have followed the instructions here https://forums.att.com/t5/AT-T-Inte...dge-mode-or-another-AT-amp/m-p/2707755#M12774 to configure DMZ+ and also assigned a static IP address on the R7000. However every 3 weeks or so I lose internet connectivity and the only way to recover is to do a nvram wipe of the R7000 and setup everything again.

    This happens with other firmware like XVortex/DD-WRT, so definitely a problem with the modem. Is there any other configuration trick to help with this situation? I have an openvpn client configured.

    Thanks.
     
  51. WildFireSG

    WildFireSG Addicted to LI Member

    I don't want to overstate the obvious, but maybe it is not "definitely a problem with the modem". Perhaps it is a problem with the R7000 as the same problem happens on multiple firmwares.

    If you have configured the modem to have the R7000 as the DMZ, and you only have to reset the R7000 to regain access, I would not point the finger at the modem...
     
  52. edud2k

    edud2k Network Newbie Member

    I plan to install the fresh tomato in my tenda ac15 and would like to know if the QOS and 2.4 and 5Ghz networks are working properly.

    someone with tenda ac15 could comment on the stability of the fresh tomato.

    thanks !!
     
  53. hopeless

    hopeless New Member Member

  54. pedro311

    pedro311 Serious Server Member

    I see now, there are two errors in the code:
    1. it should allow for multiple use of "SocksPort", also in Custom Config,
    2. search for specified words (you can't duplicate GUI entries [except "SocksPort"], and some are not permitted), doesn't check all of the textarea, it checks only first word... :p

    I'll fix it.
     
  55. pedro311

    pedro311 Serious Server Member

  56. WildFireSG

    WildFireSG Addicted to LI Member

    @kille72 Any word on when 2018.3 will come out of beta? I've been running 2017.2 rock solid for the past year but look forward to getting all of the latest updates. It looks like 2018.3 is also going to be quite solid. Running Asus RT-AC68U.
     
  57. kille72

    kille72 LI Guru Member

    Soon if nothing unpredictable occurs :)
     
  58. kasper1985

    kasper1985 New Member Member

    Hi,

    I am using fresh tomato on a asus RT-AC56U to setup a pppoe connection. As a modem i use a modified fritzbox 7581 that has been modified (through the config file) to act as a dumb modem.

    I have filled in the modem's IP (192.168.178.1) in the "route modem IP" in the GUI. I am still not able to ping or access the modem's gui from any machine connected to the asus.

    My ISP recquires to have VLAN6 tagged for the internet (and uses other VLAN's for TV etc) and i noticed the interface VLAN6 has IP 192.168.178.2 when the "route modem IP" is used. There is also a route added to the kernel's routing table when i use this option.

    I think tomato is confused because of the use of the VLAN and the ip should be removed from vlan 6 interface and added to eth0 (WAN interface) but i haven't been able to figure out how i do this. When i try to do this through the CLI i get thrown at by error messages.

    Can someone tell me how to make the changes that i think will fix the issue? Or another way (through the GUI) to fix this?
     
  59. Tomato Mike

    Tomato Mike Network Newbie Member

  60. R7000user

    R7000user Network Newbie Member

    According to Steve Gibson at GRC, VPNfilter is looking more and more like state-sponsored malware with massive resources that can quickly develop and deploy plug-in modules for specific router models. The list of affected models/makers is growing fast and the FBI takedown of command and control sites was ineffective because infected routers simply switched IPs. In light of this, how much emphasis are the volunteers (thank you for this work) developing freshtomato putting into security and ensuring the code is not impacted?
     
  61. NErdgOd

    NErdgOd New Member Member

    @kille72 using 2018.3.018 on an A1 ac68u in wireless ethernet bridge mode(5gz)
    things like ping, and wget report "bad address," ddns fails to find external ip, etc. despite having dns set to 8.8.8.8 & 8.8.4.4 under basic>network.

    can provide more info if needed, never noticed this happening in merlin or previous versions of tomato ive used. checked resolv.conf and it was blank, curently adding "Echo nameserver 8.8.8.8 >> /etc/resolv.conf" in the init script is a functional workaround
     
  62. user17600

    user17600 Reformed Router Member

    VPNfilter propagation is really is about default passwords and remote access.

    If you have changed the default administrative username and password when you first put your router in service, and never exposed your router administrative access to the WAN side of things, you're likely just fine.

    If you're concerned about VPNfilter, download the latest firmware, reset the router, re-flash and immediately change the administrative information. If you're concerned that third party firmware could be compromised OOB, you still have the option of going back to the manufacturers version.

    (Frankly I'm more worried about a rouge IoT doing something bad to my network or scanning it and reporting information I haven't consented to disclosing. So in addition to changing the administrative info, I have all IoTs on a separate guestnet with AP isolation in place so they can talk to their server but not to anything else on my network.)
     
    Joe A likes this.
  63. Monk E. Boy

    Monk E. Boy Network Guru Member

    Its also a little, um, odd to request that developers update for a threat that has literally no information published. Once the persistent infection vector(s) are published then, and only then, can anyone accurately say whether or not Tomato (or any other firmware) is vulnerable. I haven't read anything about Tomato, DD-WRT, or another third party firmware that's vulnerable to VPNFilter, but that may be due to the small installed base of third party firmwares.

    Until more details are known the only thing to do is to follow best practices. Change default passwords. Expose as little to the internet as possible (e.g. do not, under any circumstance, enable remote management). Update to the latest version that supports your hardware to get updated components (which, in theory, have fewer vulnerabilities).
     
  64. jerrm

    jerrm Network Guru Member

    And the nature of 3rd party firmware users - generally more aware of such issues and less likely to expose a service.
     
    Techie007 and Justio like this.
  65. jkbuha

    jkbuha New Member Member

    Happened to me as well. Editing resolv.conf (or indeed anything under basic>network) didn't work at all. After running some tests on the command line it turns out dnsmasq wasn't properly configured (maybe because I came directly from shibby's build)

    Entering a custom field for dnsmasq under Advanced->DHCP/DNS worked, as follows:

    Code:
    server=1.1.1.1
    server=1.0.0.1
    server=208.67.222.222
    server=208.67.220.220
    server=8.8.8.8
    server=8.8.4.4
    etc etc. add flavour to taste as required...
     
    thewaywardgeek00 likes this.
  66. edud2k

    edud2k Network Newbie Member

    what it takes to set up 5Ghz at full speed ?
    here I can not get good speed even though I'm close to the router.
    Please help me !!!
     
  67. WildFireSG

    WildFireSG Addicted to LI Member

    @kille72 @pedro311 Was just wondering about a request I made a while back to have an option to display the CPU and wireless temperatures in Fahrenheit for U.S. users. Any thoughts on if that can make it into 2018.3 ?
     
  68. R7000user

    R7000user Network Newbie Member

    Nobody was requesting developers update for a threat.
    What was asked is how much emphasis developers are placing on OOB security for the new firmware (aka as vetting the code).
     
  69. Justio

    Justio Networkin' Nut Member

    http://linksysinfo.org/index.php?threads/fork-freshtomato-arm.74117/

    Check the part How to report a bug or problem

    Please note that i do not want to be rude, but you're not providing any details....
    A good idea also (when an specific request like yours is made) is to open a new thread, maybe will be valuable to others having the same problem later in time...you know, it does not get lost in this tread ... with it's main scope being "to report a bug or problem"...

    Regards
     
    kille72 likes this.
  70. edud2k

    edud2k Network Newbie Member

    If I did not report a bug, it's because I'm not sure it's a bug.
    If this topic is the firmware in question, why create another topic?
    I just asked how to configure the 5Ghz network to get the maximum speed of the router.
    When I select the A-only mode, the firmware itself already automatically selects 20mhz and will not accept that I choose the channel or change the frequency to 80mhz.
    Because of this detail, my connection does not reach a good speed in 5Ghz.
    Other.
    Do not want to be rude too, just asked for help, or am I just using the router in 5ghz with speed problems?
    In another question I asked who had the same router as me, TENDA AC15, no one answered. this is frustrating.
    If I can not ask, then tell me who can direct my doubts about this firmware?
     
  71. Aardvark

    Aardvark Serious Server Member

    Why are you using A-only mode? From what I recall, that old standard had a 54Mbps max speed. Try using Auto mode.
     
  72. edud2k

    edud2k Network Newbie Member

    A = (AC) I imagine it to be, it does not make sense to have an AC equipment and leave it in N.

    so I imagine there is a way (which I have not yet figured out, and why I doubt it) how to set up fresh tomato to get me the full speed of the router.
    My cell phone is only 2 meters from the router and I have only 250Mb of speed, and the signal bar is in half, while it should be at 433Mb.

    I'm not criticizing anyone, I just asked for help in what may be some configuration I'm doing wrong.
    I like TOMATO and have already used it on other routers that I have always had a lot of quality.
    In advance I thank the developers for keeping this firmware.
     
  73. Aardvark

    Aardvark Serious Server Member

    Did you TRY Auto mode like I suggested? A-only refers to 11a, not 11ac. I just tried A-only mode on my AC68U and the throughput dropped from 140Mbps to 20Mbps, which is about what I'd expect.

    Edit: Are you saying that you are getting 250Mbps now, with the mode set to A-only?
     
  74. usergay

    usergay Network Newbie Member

    Here are my settings, Try these and let me know if you notice any improvements.

    5ghz Config.png

    5Ghz Config ADV.png 5ghz Status.png Speedtest.png
     
    nodnarb91 likes this.
  75. edud2k

    edud2k Network Newbie Member

    so A, I thought it was by AC. was a misinterpretation on my part.
    my current setting is in AUTO and channel with 80 Mhz, country region: #a
    wpa2 personal: tkip / AES
     
  76. edud2k

    edud2k Network Newbie Member

    I'll test your configuration soon and share the result.
    thanks for the help posting the screens

    Edit: after see the tips here.
    Thanks @usergay and @Aardvark
    But the signal in 5Ghz is not great, only good. I dont know why
     

    Attached Files:

    Last edited: Jun 16, 2018
  77. WildFireSG

    WildFireSG Addicted to LI Member

    Hello. I'd like to ask some questions and offer suggestions...

    1. Do you have a need for Access Point + WDS to be set on both 2.4GHz and 5GHz networks? Do you need it on either? If not, set the mode to Access Point Only.

    2. Do you have a need for *very* old WPA/TKIP only clients to connect? If not, set security to WPA2 Personal + AES only.

    3. Try using 5GHz channel 36. The lower the channel the easier it is for the signal to penetrate walls and go farther but will have "less bandwidth". I put "less bandwidth" in quotes because you will probably not notice the difference from the upper 5GHz channels.

    4. Previously, you had Wireless Network Mode set to A only but it was suggested you set to Auto. I suggest setting to N only if you do not have any 5GHz Wireless-A clients which are less popular that Wireless-N.

    5. Also, I would suggest setting "Interference Mitigation" to "None" in the Advanced Wireless Settings. According to http://tomatousb.org/settings:wireless#toc22, this "feature" has been responsible for much instability and poor throughput.

    6. Lastly, I would not be too concerned with the Wireless Rate shown on the Status Page. In my observations, it fluctuates regularly but I have not noticed it affect actual throughput during multiple tests.

    upload_2018-6-16_14-53-37.png
     
    Last edited: Jun 16, 2018
  78. hokie21

    hokie21 Network Guru Member

  79. WildFireSG

    WildFireSG Addicted to LI Member

    Sounds like a great opportunity for code bloat. What would be the actual value added to FreshTomato?
     
  80. usergay

    usergay Network Newbie Member


    More suggestions...

    1. Make sure country setting is set as Singapore.
    2. Enable Frame Burst only for 5ghz network
    3. Set Encryption to WPA2 + AES only
    4. Set Wireless mode to AUTO
    5. Set transmit power to 0 (Hardware default)
    6. For maximum speed use 80mhz
     
    nodnarb91 likes this.
  81. maurer

    maurer Network Guru Member

    i've set all this on my ea6300v1 and maximum connection speed in tomato is 468mbps although windows says 866mbps (intel ac7260 client) .
    any hints?
     
  82. thewaywardgeek00

    thewaywardgeek00 Network Newbie Member

    Anyone running Broadcom BCM4708? Curious about your router temps., using D-Link DIR-868L, my CPU Temp.: 82°C, no load. Is this normal?
     
  83. user17600

    user17600 Reformed Router Member

    I have developed the habit of putting my routers on a laptop cooling pad to keep temps down and longevity up. My R7000 (BCM4709A) runs in the 45-50C range on the pad, even at idle. So 82F is probably not out of the unexpected.

    (IIRC the R7K runs in the 70s without the pad - about 50C north of ambient temperature.)

    $10 cooling pad plugged into a usb port can help with that and help extend the life of your router.
     
  84. usergay

    usergay Network Newbie Member

    Agreed!

    My R7000's temps on laptop cooling pad (room temp currently @ 30 Degrees Celsius):

    firefox_2018-06-17_15-51-13.png
     
    travism likes this.
  85. WildFireSG

    WildFireSG Addicted to LI Member

    I'd recommend checking to make sure WMM is set to Enabled under Advanced Wireless Settings. I had inadvertently disabled it while tinkering and noticed bad speeds. When I switched it back to enabled, the speeds jumped. Other than that, I wouldn't pay too much attention to it if you are not experiencing a noticeable performance problem.
     
  86. usergay

    usergay Network Newbie Member

    Well for one... The windows wifi speed measurement is inaccurate & two, the router's interface will show the speed it's receiving from the client (468mbps), while the client will show the speed it's receiving from the router (866mbps). As long as you're still getting excellent speeds, I wouldn't worry too much about those gauges.
     
  87. hokie21

    hokie21 Network Guru Member

    I guess one persons "code bloat" is another person's "really valuable feature." Adding this feature would complement the existing performance tracking and graphical presentation capabilities of FreshTomato such as "bandwidth display," "IP traffic display" and "QOS graphs." It would allow every person who runs FreshTomato ARM to participate in the SamKnows project by contributing their network performance statistics to the report generated by Samknows for the FCC or national PTTs showing how well network providers are meeting their advertised speeds. It will allow the user of FreshTomato to see graphs such as these linked below and not have to wait for and install a separate piece of hardware (SamKnows Whitebox) just for that purpose. https://imgur.com/a/scOKgyb
     
  88. thewaywardgeek00

    thewaywardgeek00 Network Newbie Member

    Notice I'm at Celsius there, anyways I put up a 220v Data Cabinet Fan underneath it, runs at 60-63 deg. Celsuis, and can't seem to lower it other than "renovating" the case of said router.
     
    Last edited: Jun 18, 2018
    travism likes this.
  89. koitsu

    koitsu Network Guru Member

    I don't know about the R7000, but for an RT-AC56U, you can decrease temperatures by disabling the 2.4GHz and 5GHz wireless interfaces. These chips increase the CPU temperature of the router by several degrees Celsius.

    For external cooling of said RT-AC56U without modification (i.e. does not void warranty), I suggest the USB-powered AC Infinity MULTIFAN S3. Simply placing it next to the router positioned upright, thus blowing over both the front/back of the router from the side, at Medium speed, can decrease temperatures by ~8-12C. Proof is below (the "mountains" you see are when the fan was turned off).

    upload_2018-6-17_21-32-54.png

    HTH.
     
    pegasus123 and thewaywardgeek00 like this.
  90. pegasus123

    pegasus123 Addicted to LI Member

    My R7000 produce lot of heat, having 3 bridges, 2.4ghz wifi and 5ghz + guest wifi and QOS is On.

    It hovers around 80c on normal day, if i turn the AC on, thats the time it goes down to 63c.
     
  91. sstacks

    sstacks Reformed Router Member

    Hi. Many thanks for continuing development of TomatoUSB.

    I have been happily chugging away with an R7000 for several years, but now I have had significant instabilities over the past few weeks. I may have multiple problems, but I believe I have narrowed at least one of the problems down to Samba file sharing. The problem started to occur with a Shibby build (but not due to a firmware upgrade) and continues with the FreshTomato beta build. I even purchased a second R7000 router and installed FreshTomato, and the problem persisted.

    When the problem occurs, the router essentially becomes unresponsive other than responding to pings, as per normal. When unresponsive, no data is transmitted, and though the SSIDs are still alive, they do not accept connections (e.g. on iOS, it claims that the password is incorrect).

    Before the problem occurs, I have been monitoring 'top' via telnet. An 'smbd -D' process appears to be going nuts. The 'VSZ' field keeps increasing every second. e.g. right now VSZ is at '124m' (i.e. 124,000 - I think?) and 51.1 '%VSZ'. CPU for the process is around 2.0. I expect that VSZ will continue to increase until the router becomes unresponsive once again.

    Is there any logging that I can enable in order to help with troubleshooting of this problem?

    EDIT: The router did NOT become unresponsive in this instance. The rogue process appears to have disappeared, and all is normal. For now.
     
    Last edited: Jun 18, 2018
  92. thewaywardgeek00

    thewaywardgeek00 Network Newbie Member

    Thanks for this tidbit, also found some really old info that seems to work from here:

    https://linksysinfo.org/index.php?threads/commands-in-the-dnsmasq-custom-configuration-box.30677/

    Anyways what I wanted to ask is how do I test if nameservers put in dnsmasq.conf really work? Checked "resolv.dnsmasq" but don't seem to see the nameservers listed in dnsmasq.conf,(newb here so don't really know how dnsmasq works).
     
    Last edited: Jun 19, 2018
  93. WildFireSG

    WildFireSG Addicted to LI Member

    The function of SamKnows and the value that would be added to the SamKnows reporting is not in question. The question still remains as to what would be the "really valuable feature" add for the FreshTomato *router* project when the SamKnows features are available via other means?
     
  94. AndreDVJ

    AndreDVJ LI Guru Member

    Try issuing killall -USR1 dnsmasq then check syslog or the file you specified for log-facility
     
    thewaywardgeek00 likes this.
  95. thewaywardgeek00

    thewaywardgeek00 Network Newbie Member

    It worked! Thanks!
     
  96. user17600

    user17600 Reformed Router Member

    I had this same thing happen with the 2017.3 build, IIRC. I "kill"ed the runaway process (SMBD), cleared the NVRAM, re-entered the settings and rebooted. I haven't had the issue since.

    TL;DR - did you flash "dirty" or clean? If dirty, try the above. But I can confirm that I had the same issue with an earlier build - my CPU load was north of 2 and the CPU temp was smokin' hot.
     
  97. hokie21

    hokie21 Network Guru Member

    I believe I've already answered your question, but let me try again. Adding this would integrate functionality that today requires additional special purpose hardware that not everyone has easy access to. You can get a separate NAS, but I sure like the SAMBA feature built into FreshTomato. I have a separate linux box running APCUPSD, but I sure like and use that feature built into FreshTomato. FreshTomato is more than just a router. This is clearly not essential router functionality, but there are lots of value added extras in FreshTomato that are not essential router functionality. This change is still valuable in my assessment.
     
    WildFireSG likes this.
  98. maurer

    maurer Network Guru Member

    my max speed is about 45MB/s (360mbps) under those advertised 468mbps.
    I believe it can do better - my channel (153) has no interference.
    WMM is enabled
     
  99. sstacks

    sstacks Reformed Router Member

    Thanks for the response. When the issue first happened regularly, I cleared the NVRAM and re-entered all the settings, but the issue came back. I even bought a second R7000, but the same thing happened.

    After some more sleuthing, I have a new prime suspect. And it's someone that I never would have suspected. The problems started right around the time that I started using a USB-to-ethernet adapter on one of the networked laptops. The connection with this adapter has been unreliable with very slow network transfer speeds until I unplug it and replug it. Well, I replugged it yesterday, and then noticed the SMBD process going nuts immediately thereafter. So I disconnected the adapter and the problem hasn't come back since then.

    Is it possible that a rogue adapter on the network could essentially bring down a router? I should note that this particular laptop has had some wonkiness with its USB ports. (e.g. constantly connecting and disconnecting a plugged-in phone)
     
  100. edud2k

    edud2k Network Newbie Member

    even following your suggestions, I can not get the speed of my device that is 433mb.
    in addition the signal bar is only half, leaving the device with only 260mb at most.
    I set it up for the United States, because for Brazil the speed and the signal got worse.
    I'm less than 2 meters from the router
     
    attip90 likes this.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice