New Build - 03/12/2025 - r60269

Post new topic   Reply to topic    DD-WRT Forum Index -> Marvell MVEBU based Hardware (WRT1900AC etc.)
Author Message
blkt
DD-WRT Guru


Joined: 20 Jan 2019
Posts: 6059

PostPosted: Wed Mar 12, 2025 15:05    Post subject: New Build - 03/12/2025 - r60269 Reply with quote
Welcome to Marvell r60269 beta release thread for reporting, feedback to developers and community benefit.
Please do not flash builds until installation is understood, risks involved and device specific recovery methods.
Avoid discussions, create threads for questions, general problems or use search; this thread is not for support.
List router model & version or revision, operating & wireless modes & exact filename/firmware image flashed.


CLI Flash: 'cd /tmp' then 'wget {file URL}' (http only) or 'curl -O {file URL}' (http, https, ftp) 'write {file} linux' then 'reboot'.

Downloads: HTTPS, FTP

Trac SVN: repository since last build r60217 (mirror)

OpenVPN 2.6.12: Changelog, Guides, Server, PBR, DNS, Kill Switch, Watchdog, Reverse PBR, Client, Multiple, tips, scripts.
WireGuard 1.0.20211208/Tools: Changelog, Guides, Client, Server, Adv, PBR, KS, tips, scripts. Thanks BS egc & eibgrad!

Notes: ...
r58892 r58950 r58976 r59045 r59093 r59171 r59302 r59346 r59369 r59397 r59429 r59468 r59582 r59661 r59765 r59820
r59887 r59964 r60090 r60098 r60121 r60137 r60217 r60269

Issues, observations, and/or workarounds reported:
WebUI: Clear history or use a portable. Temporary cache bypass: Ctrl+F5, Cmd+Shift+R or new private window/incognito.
Please report findings with steps needed to reproduce, configuration, clients, output, logs and important information below!

Important:
Detail issues & relevant configs, logs: syslog klog 'dmesg' 'cat /tmp/var/log/messages' nvram set console_debug=1, serial.
• Firewall NAT: 'iptables -vnL' 'iptables -t nat -vnL' 'iptables -t mangle -vnL' & 'cat /tmp/.ipt'. Debug Analyze: strace tcpdump.
• Gremlins: reboot. cold boot. Reset & reconfigure not restore backup. Search Trac & discuss in forum before opening tickets.
• Include operating & wireless modes (e.g. Gateway, Router, AP, SB, WDS, Mesh) and applicable configurations to reproduce.

Example Template:
Code:
[b]Router/Version: [/b]
[b]File/Kernel: [/b]
[b]Previous/Reset: [/b]
[b]Mode/Status: [/b]
[b]Issues/Errors: [/b]
Sponsor
saphirely
DD-WRT User


Joined: 13 Dec 2020
Posts: 352

PostPosted: Wed Mar 12, 2025 20:34    Post subject: Reply with quote
Linksys WRT1900ACS
Firmware DD-WRT v3.0-r60269 std (03/12/25)
Kernel Linux 6.1.130-rt28 #1026 SMP Wed Mar 12 09:51:40 +07 2025 armv7l

Upgraded by CUI.
Wan IP :Yes
DNS: no works until removed all 5 undefined items under Security->Firewall->Block WAN Requests.
(I did not measure which undefined is the key caused the dns refused ONE BY ONE)
Thank BS!
WENED
DD-WRT Guru


Joined: 30 May 2017
Posts: 592
Location: Rural Manitoba

PostPosted: Wed Mar 12, 2025 20:35    Post subject: Reply with quote
Same problem as previous version. WAN appears to be connected but no internet.
Reverted to 60137

_________________
Starlink & DSL ->
WRT3200acm Master WDS 5GHz 80Mhz CH 100 (+6)-r60276
Ath1 2.4Ghz Disabled
99 Static Leases
ExpressVPN

WRT3200acm r56941 Spare

WRT1900Ac V1 5Ghz-r60276 WDS Station
(Defective, no 2.4Ghz but 5Ghz works great)

WRT1900AC V1-r60276 WDS Station
WRT1900AC SPARE r54914
WRT1900AC V1 5Ghz AC 80Mhz WDS-AP -----r60276
2.4Ghz AP Ch1 HT20 Mixed

WRT54G DD-WRT v3.0-r37305 micro AP CH 6 Mixed - Not in use

3200 Master -> LAN -> 1900 V1 -> WDS 5Ghz -> 1900 V1
3200 Master -> WDS -> 1900ACS Slave & 1900V1
saphirely
DD-WRT User


Joined: 13 Dec 2020
Posts: 352

PostPosted: Wed Mar 12, 2025 20:49    Post subject: Reply with quote
all 5 undefined items, later displayed as:
Detect and Block Port Scanners
Slowdown connection attempts (Tarpit)
Filter TCP-SYN floods
Filter UDP floods
Filter Ping Echo request floods
saphirely
DD-WRT User


Joined: 13 Dec 2020
Posts: 352

PostPosted: Wed Mar 12, 2025 21:03    Post subject: Reply with quote
I chose all except "Filter UDP floods" , DNS works.

I wonder whether I also filer UDP floods, my DoQ works or not. Perhaps later will test.
saphirely
DD-WRT User


Joined: 13 Dec 2020
Posts: 352

PostPosted: Wed Mar 12, 2025 21:07    Post subject: Reply with quote
@WENED

Please verify your Securite->Firewall->Block WAN requests.
If you ignore something of below:
1.Detect and Block Port Scanners
2.Slowdown connection attempts (Tarpit)
3.Filter TCP-SYN floods
4.Filter UDP floods
5.Filter Ping Echo request floods

For me, I keep 1,2,3,5 and it works.
WENED
DD-WRT Guru


Joined: 30 May 2017
Posts: 592
Location: Rural Manitoba

PostPosted: Wed Mar 12, 2025 21:58    Post subject: Reply with quote
saphirely

Thank you this worked.

It seems there was a major change here and should be posted so everyone is aware. I would not have noticed it as I don't check for changes such as this.

_________________
Starlink & DSL ->
WRT3200acm Master WDS 5GHz 80Mhz CH 100 (+6)-r60276
Ath1 2.4Ghz Disabled
99 Static Leases
ExpressVPN

WRT3200acm r56941 Spare

WRT1900Ac V1 5Ghz-r60276 WDS Station
(Defective, no 2.4Ghz but 5Ghz works great)

WRT1900AC V1-r60276 WDS Station
WRT1900AC SPARE r54914
WRT1900AC V1 5Ghz AC 80Mhz WDS-AP -----r60276
2.4Ghz AP Ch1 HT20 Mixed

WRT54G DD-WRT v3.0-r37305 micro AP CH 6 Mixed - Not in use

3200 Master -> LAN -> 1900 V1 -> WDS 5Ghz -> 1900 V1
3200 Master -> WDS -> 1900ACS Slave & 1900V1
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 15720
Location: Texas, USA

PostPosted: Wed Mar 12, 2025 22:20    Post subject: Reply with quote
This is a prime example where brevity and strict adherence to one's own swim lane results in a gotcha. Thanks for the feedback,
but I doubt there will be any kind of remedy of the situation that isn't a complete train wreck.

Quote:
Trac SVN: repository since last build r60217 (mirror)

Quote:
Trac SVN: repository since last build r60137 (mirror)

BrainSlayer wrote:
check the new firewall settings. udp flood protection is the problem here. i modified it already for next release but thats the cause and also for any dns problems etc. just disable the new options. reason for the problem is simple. i implemented the filter unconditionally. not just for inbound traffic from wan, but also from inside. small misstake. big consequences. test it again with next release

_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
RSS feed for DD-WRT releases (2025)
RSS feed for DD-WRT releases (2024)
RSS feed for DD-WRT releases (2023)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
Monza
DD-WRT Guru


Joined: 01 Jul 2018
Posts: 528

PostPosted: Wed Mar 12, 2025 23:13    Post subject: Reply with quote
saphirely wrote:
For me, I keep 1,2,3,5 and it works.


Thanks, worked for me as well
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 15720
Location: Texas, USA

PostPosted: Wed Mar 12, 2025 23:26    Post subject: Reply with quote
iTeth wrote:
From the point of view of today's network traffic - especially with simultaneous use of VPNs, online gaming, IPTV, streaming, and a staged web server - the default limits (especially 5 packets/sec for UDP and ICMP) are sometimes too low and can cause false blocking of legitimate traffic. I suggest other default values, especially since the defaults will cause problems in most cases, as I also experienced after the update from r60217, which made available in the Firewall configuration, among other things: Filter TCP-SYN floods, Filter UDP floods, Filter Ping Echo request floods:

TCP-SYN: about 300-600 packets/min.
UDP: 50-100 packets/s (especially for VPN, gaming and streaming).
ICMP (Ping): 20-50 packets/s depending on diagnostic needs.

You can start with the defaults:
Filter TCP-SYN floods: 300
Filter UDP floods: 50
Filter Ping Echo request floods: 20

_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
RSS feed for DD-WRT releases (2025)
RSS feed for DD-WRT releases (2024)
RSS feed for DD-WRT releases (2023)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
saphirely
DD-WRT User


Joined: 13 Dec 2020
Posts: 352

PostPosted: Thu Mar 13, 2025 2:04    Post subject: Reply with quote
I added Filter UDP floods: 50 for testing,
DoQ(dnsproxy pure not https3 works) and M$ Teams worked but displayed connection trouble.

So change "Filter UDP floods: 64" try again.
It works without displaying connection trouble.

If you need to co-operate with M$ Teams, I am glad to share with you.
marcus83
DD-WRT User


Joined: 04 Jan 2024
Posts: 257

PostPosted: Thu Mar 13, 2025 13:57    Post subject: Reply with quote
Router/Version: WRT3200ACM
File/Kernel: Linux 6.1.130-rt28 #998 SMP Sat Mar 8 05:34:44 +07 2025 armv7l
Previous/Reset: 03-08-2025-r60269
Mode/Status: AP
Issues/Errors: AP still unstable, loses the connection, I returned to the r60137
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Marvell MVEBU based Hardware (WRT1900AC etc.) All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum