New Build - 03/12/2025 - r60269

Post new topic   Reply to topic    DD-WRT Forum Index -> Marvell MVEBU based Hardware (WRT1900AC etc.)
Author Message
blkt
DD-WRT Guru


Joined: 20 Jan 2019
Posts: 6109

PostPosted: Wed Mar 12, 2025 15:05    Post subject: New Build - 03/12/2025 - r60269 Reply with quote
Welcome to Marvell r60269 beta release thread for reporting, feedback to developers and community benefit.
Please do not flash builds until installation is understood, risks involved and device specific recovery methods.
Avoid discussions, create threads for questions, general problems or use search; this thread is not for support.
List router model & version or revision, operating & wireless modes & exact filename/firmware image flashed.


CLI Flash: 'cd /tmp' then 'wget {file URL}' (http only) or 'curl -O {file URL}' (http, https, ftp) 'write {file} linux' then 'reboot'.

Downloads: HTTPS, FTP

Trac SVN: repository since last build r60217 (mirror)

OpenVPN 2.6.12: Changelog, Guides, Server, PBR, DNS, Kill Switch, Watchdog, Reverse PBR, Client, Multiple, tips, scripts.
WireGuard 1.0.20211208/Tools: Changelog, Guides, Client, Server, Adv, PBR, KS, tips, scripts. Thanks BS egc & eibgrad!

Notes: ...
r58892 r58950 r58976 r59045 r59093 r59171 r59302 r59346 r59369 r59397 r59429 r59468 r59582 r59661 r59765 r59820
r59887 r59964 r60090 r60098 r60121 r60137 r60217 r60269

Issues, observations, and/or workarounds reported:
WebUI: Clear history or use a portable. Temporary cache bypass: Ctrl+F5, Cmd+Shift+R or new private window/incognito.
Please report findings with steps needed to reproduce, configuration, clients, output, logs and important information below!

Important:
Detail issues & relevant configs, logs: syslog klog 'dmesg' 'cat /tmp/var/log/messages' nvram set console_debug=1, serial.
• Firewall NAT: 'iptables -vnL' 'iptables -t nat -vnL' 'iptables -t mangle -vnL' & 'cat /tmp/.ipt'. Debug Analyze: strace tcpdump.
• Gremlins: reboot. cold boot. Reset & reconfigure not restore backup. Search Trac & discuss in forum before opening tickets.
• Include operating & wireless modes (e.g. Gateway, Router, AP, SB, WDS, Mesh) and applicable configurations to reproduce.

Example Template:
Code:
[b]Router/Version: [/b]
[b]File/Kernel: [/b]
[b]Previous/Reset: [/b]
[b]Mode/Status: [/b]
[b]Issues/Errors: [/b]
Sponsor
saphirely
DD-WRT User


Joined: 13 Dec 2020
Posts: 371

PostPosted: Wed Mar 12, 2025 20:34    Post subject: Reply with quote
Linksys WRT1900ACS
Firmware DD-WRT v3.0-r60269 std (03/12/25)
Kernel Linux 6.1.130-rt28 #1026 SMP Wed Mar 12 09:51:40 +07 2025 armv7l

Upgraded by CUI.
Wan IP :Yes
DNS: no works until removed all 5 undefined items under Security->Firewall->Block WAN Requests.
(I did not measure which undefined is the key caused the dns refused ONE BY ONE)
Thank BS!
WENED
DD-WRT Guru


Joined: 30 May 2017
Posts: 593
Location: Rural Manitoba

PostPosted: Wed Mar 12, 2025 20:35    Post subject: Reply with quote
Same problem as previous version. WAN appears to be connected but no internet.
Reverted to 60137

_________________
Starlink & DSL ->
WRT3200acm Master WDS 5GHz 80Mhz CH 100 (+6)-r60652
Ath1 2.4Ghz Disabled
99 Static Leases
ExpressVPN

WRT3200acm r60652 WDS-5Ghz Client

WRT1900ACS - Bricked

WRT1900Ac V1 5Ghz-r60652 WDS Station
(Defective, no 2.4Ghz but 5Ghz works great)

WRT1900AC V1-r60652 WDS Station
WRT1900AC SPARE r60523
WRT1900AC V1 5Ghz AC 80Mhz WDS-AP -----r60652 2.4Ghz AP Ch1 HT20 Mixed

WRT54G DD-WRT v3.0-r37305 micro AP CH 6 Mixed - Not in use

3200 Master -> LAN -> 1900 V1 -> WDS 5Ghz -> 1900 V1
3200 Master -> WDS -> 1900ACS Slave & 1900V1
saphirely
DD-WRT User


Joined: 13 Dec 2020
Posts: 371

PostPosted: Wed Mar 12, 2025 20:49    Post subject: Reply with quote
all 5 undefined items, later displayed as:
Detect and Block Port Scanners
Slowdown connection attempts (Tarpit)
Filter TCP-SYN floods
Filter UDP floods
Filter Ping Echo request floods
saphirely
DD-WRT User


Joined: 13 Dec 2020
Posts: 371

PostPosted: Wed Mar 12, 2025 21:03    Post subject: Reply with quote
I chose all except "Filter UDP floods" , DNS works.

I wonder whether I also filer UDP floods, my DoQ works or not. Perhaps later will test.
saphirely
DD-WRT User


Joined: 13 Dec 2020
Posts: 371

PostPosted: Wed Mar 12, 2025 21:07    Post subject: Reply with quote
@WENED

Please verify your Securite->Firewall->Block WAN requests.
If you ignore something of below:
1.Detect and Block Port Scanners
2.Slowdown connection attempts (Tarpit)
3.Filter TCP-SYN floods
4.Filter UDP floods
5.Filter Ping Echo request floods

For me, I keep 1,2,3,5 and it works.
WENED
DD-WRT Guru


Joined: 30 May 2017
Posts: 593
Location: Rural Manitoba

PostPosted: Wed Mar 12, 2025 21:58    Post subject: Reply with quote
saphirely

Thank you this worked.

It seems there was a major change here and should be posted so everyone is aware. I would not have noticed it as I don't check for changes such as this.

_________________
Starlink & DSL ->
WRT3200acm Master WDS 5GHz 80Mhz CH 100 (+6)-r60652
Ath1 2.4Ghz Disabled
99 Static Leases
ExpressVPN

WRT3200acm r60652 WDS-5Ghz Client

WRT1900ACS - Bricked

WRT1900Ac V1 5Ghz-r60652 WDS Station
(Defective, no 2.4Ghz but 5Ghz works great)

WRT1900AC V1-r60652 WDS Station
WRT1900AC SPARE r60523
WRT1900AC V1 5Ghz AC 80Mhz WDS-AP -----r60652 2.4Ghz AP Ch1 HT20 Mixed

WRT54G DD-WRT v3.0-r37305 micro AP CH 6 Mixed - Not in use

3200 Master -> LAN -> 1900 V1 -> WDS 5Ghz -> 1900 V1
3200 Master -> WDS -> 1900ACS Slave & 1900V1
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 15918
Location: Texas, USA

PostPosted: Wed Mar 12, 2025 22:20    Post subject: Reply with quote
This is a prime example where brevity and strict adherence to one's own swim lane results in a gotcha. Thanks for the feedback,
but I doubt there will be any kind of remedy of the situation that isn't a complete train wreck.

Quote:
Trac SVN: repository since last build r60217 (mirror)

Quote:
Trac SVN: repository since last build r60137 (mirror)

BrainSlayer wrote:
check the new firewall settings. udp flood protection is the problem here. i modified it already for next release but thats the cause and also for any dns problems etc. just disable the new options. reason for the problem is simple. i implemented the filter unconditionally. not just for inbound traffic from wan, but also from inside. small misstake. big consequences. test it again with next release

_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
RSS feed for DD-WRT releases (2025)
RSS feed for DD-WRT releases (2024)
RSS feed for DD-WRT releases (2023)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
Monza
DD-WRT Guru


Joined: 01 Jul 2018
Posts: 534

PostPosted: Wed Mar 12, 2025 23:13    Post subject: Reply with quote
saphirely wrote:
For me, I keep 1,2,3,5 and it works.


Thanks, worked for me as well
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 15918
Location: Texas, USA

PostPosted: Wed Mar 12, 2025 23:26    Post subject: Reply with quote
iTeth wrote:
From the point of view of today's network traffic - especially with simultaneous use of VPNs, online gaming, IPTV, streaming, and a staged web server - the default limits (especially 5 packets/sec for UDP and ICMP) are sometimes too low and can cause false blocking of legitimate traffic. I suggest other default values, especially since the defaults will cause problems in most cases, as I also experienced after the update from r60217, which made available in the Firewall configuration, among other things: Filter TCP-SYN floods, Filter UDP floods, Filter Ping Echo request floods:

TCP-SYN: about 300-600 packets/min.
UDP: 50-100 packets/s (especially for VPN, gaming and streaming).
ICMP (Ping): 20-50 packets/s depending on diagnostic needs.

You can start with the defaults:
Filter TCP-SYN floods: 300
Filter UDP floods: 50
Filter Ping Echo request floods: 20

_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
RSS feed for DD-WRT releases (2025)
RSS feed for DD-WRT releases (2024)
RSS feed for DD-WRT releases (2023)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
saphirely
DD-WRT User


Joined: 13 Dec 2020
Posts: 371

PostPosted: Thu Mar 13, 2025 2:04    Post subject: Reply with quote
I added Filter UDP floods: 50 for testing,
DoQ(dnsproxy pure not https3 works) and M$ Teams worked but displayed connection trouble.

So change "Filter UDP floods: 64" try again.
It works without displaying connection trouble.

If you need to co-operate with M$ Teams, I am glad to share with you.
marcus83
DD-WRT User


Joined: 04 Jan 2024
Posts: 279

PostPosted: Thu Mar 13, 2025 13:57    Post subject: Reply with quote
Router/Version: WRT3200ACM
File/Kernel: Linux 6.1.130-rt28 #998 SMP Sat Mar 8 05:34:44 +07 2025 armv7l
Previous/Reset: 03-08-2025-r60269
Mode/Status: AP
Issues/Errors: AP still unstable, loses the connection, I returned to the r60137
Monza
DD-WRT Guru


Joined: 01 Jul 2018
Posts: 534

PostPosted: Sat Mar 29, 2025 9:13    Post subject: Reply with quote
r60269 has been working for me after above firewall changes. Would occasionally drop WiFi connections but reboot would bring everything back up. It seemed slow when browsing taking time to open new links but worked well otherwise. Releases after r60269 have had issues for me so I've remained on r60269 since release. No problems logging into any sites.

Still . . Proton OpenVPN setup would not connect nor would Amazon tablets/readers. Yesterday could not log in at my bank. Later Roku's lost connection. Switched out to my backup router and still had the same issues. Trouble shooting I found that after disabling ProtonVPN Wireguard I could log in. Considered the possibility it was entirely ProtonVPN's issue?? Not being able to use ProtonVPN's OpenVPN connection OR their Wireguard setup would leave me with no working VPN client???

Out of frustration I reverted to r55630. ProtonVPN OpenVPN setup connected and all WiFi devices connected. Version is stable for the past 14 hrs and no connections loss. Not sure what has happened since r55630 but it's the last release, for me, where everything works as expected. I'm going to run it for a couple of days hoping there are no security loss. Seems I spend a lot of time nowadays just trying to get firmware updates to work??

Expecting delivery of new ASUS router Monday so I'll see how that goes.

Edit: Received and setup router. VERY pleased so far. All wifi devices connect. ProtonVPN OpenVPN and WireGuard both work. Has ASUSWRT firmware so may be a future DD-WRT device. Setup seems sorta, kinda familiar but takes some getting used to. VPN Fusion is where you install clients. Disabled wifi 6 for now as I have no supporting devices.

https://www.asus.com/us/networking-iot-servers/wifi-7/all-series/asus-rt-be92u/techspec/

Had initial issue setting which devices used the vpn. Found post below which set me straight and had immediate success. My understanding was flawed. See question #2 at the very bottom of this link. https://rog-forum.asus.com/t5/faqs-networking/wireless-router-how-to-set-up-a-openvpn-client-in-vpn-fusion/ta-p/1087455

My MB8611 modem now has all connections blue since being connected to the RT-BE92U router (also replaced all cables with CAT-8's). Best wired/wifi speeds I've ever had. Tip, use the "Quick Internet Setup" button rather than the "Manual Setup" button (it seems I'm not THAT smart). After quick setup THEN start making changes. Only negative so far was Trend Micro's free AiProtection . . must consent to data collection to use so I left that off. Unlike my returned router . . this one supports VPN Servers AND Clients out of the box (at no charge). Hoping for future DD-WRT firmware :)

I've been so isolated with Linksys that I'm just finding out there is another firmware available for ASUS called Merlin. They have a release for the RT-BE92U but it is considered unstable for now. Probably give it a try when stable.

Link to supported routers - https://sourceforge.net/projects/asuswrt-merlin/files/

More than you want to know about the two firmware's. https://dongknows.com/asuswrt-merlin-firmware/

Hoping the Merlin files may accelerate the DD-WRT support???
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Marvell MVEBU based Hardware (WRT1900AC etc.) All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum