[cjweiland]

Hello,

I flashed a D-Link router (DIR-878 A1) with DD-WRT (DD-WRT v3.0-r47381 std (09/08/21)) and installed the Astril Applet (v2.9.37).

When I try to connect, I get the following error:

Status: HTTP/1.1 200 Ok Content-Type: text/html Server: httpd Date: Sun, 19 Sep 2021 08:46:12 GMT Connection: close Cache-Control: private, max-age=600 Content-Disposition: attachment; filename=MyPage.asp Cache-Control: no-cache Pragma: no-cache Expires: 0 Content-Length: 13 DISCONNECTED

The router works fine, I can connect to the Internet but I cannot get the Astrill applet to work.

I contacted Astrill and they told me to downgrade DD-WRT and contact the DD-WRT forum.

Anybody an idea to what version DD-WRT I should downgrade?
Does anybody have a DIR-878 with Astrill? If yes what DD-WRT version do you use?

Regards
Christian

[egc]

Consider to setup manually, Astrill should have instructions for that or get a different vpn provider

Downgrading is a bad advice, the latest build can/will have security and other fixes which might be important.

General VPN documentation, see link in my signature at the bottom.

[cjweiland]

Hello,

I flashed the router with lower release DD-WRT v3.0-r36330 std (07/16/1) which resulted in some progress.

Now I have log output in the Astrill applet, which I didn’t have before, and the following error is logged:
Mon Sep 20 10:11:48 2021 ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such device (errno=19)
Mon Sep 20 10:11:48 2021 Exiting due to fatal error

Astril instructed me to send the following commands using SSH:

[ ! -e /dev/net/tun ] && mkdir -p /dev/net && mknod /dev/net/tun c 10 200
lsmod | grep -q ^tun || modprobe tun

The first command returns nothing.
The second command returns:
-sh modprobe: not found

The answer of Astrill was:

Apparently, the flash memory got corrupted and hence Linux installation is corrupted which is why some parts are not working.

Any idea what I should do?

Regards
Christian

[egc]

Of course you are free to use any build you like but these old builds have real security issues.

Besides they are no longer supported either.

I have no experience with Astrill and their applet so cannot give you any support about that.

I have seen that you can setup Astrill Manually (at least for Tomato: https://wiki.astrill.com/Astrill_Setup_Manual:How_to_configure_OpenVPN_on_Tomato_firmware_flashed_Routers ) so it would be possible to setup also manually for DDWRT.

I would consider trying to setup manually if Astrill cannot give the necessary support for a recent DDWRT build.

General OpenVPN setup for clients see:
https://forum.dd-wrt.com/phpBB2/download.php?id=48550

[cjweiland]

Hello,

Thank you for your answer.

The router will be used in China and OpenVPN is not working there because of the big firewall of china.
The Astrill applet is mandatory.

Could it be that some software components are missing in this build like Astrill is thinking?

Regards
Christian

[kernel-panic69]

So, I presume one of two things: That Astrill is supposed to use the RouterPro protocol because of the restrictions in China, or because it is trying to or is actually using OpenVPN. This is just an interface; it's not a completely separate solution.

https://www.astrill.com/astrill-vpn-routers/self-made

[cjweiland]

I think the best is that I give the router back and go for an Asus Router with ASUSWRT-Merlin Firmware.
There are some listed on the Astrill wiki:

https://wiki.astrill.com/index.php/Astrill_Setup_Manual:Getting_started_with_ASUS_Merlin_firmware_for_routers

Thanks so far!
Christian

[kernel-panic69]

What is the output of 'which modprobe' via ssh? Either their instructions are suspect, or modprobe was not compiled into the busybox binary in the firmware image.

[egc]

Especially for China you want the latest build with all the necessary security fixes and if Astrill does not support that then using another better supported firmware is certainly an option.

[cjweiland]

<<What is the output of 'which modprobe' via ssh?<<
Nothing is returned, see screenshot.

<<Especially for China you want the latest build with all the necessary security fixes and <<
I 100 % aggree

[kernel-panic69]

Please consider re-sizing your image(s) to no wider than 768 pixels per the forum rules and guidelines.

[cjweiland]

<<Please consider re-sizing your image(s) to no wider than 768 pixels per the forum rules and guidelines.<<
Sorry, see attachment

[ho1Aetoo]

Modules can also be loaded with insmod

[kernel-panic69]

^^^^ 100% correct; and that is where Astrill's instructions were suspect, most likely

[cjweiland]

“Insmod tun” did the trick, thanks ho1Aetoo!

But something is still wrong, the call of the applet does return only an empty page most of the time…