Joined: 06 Jun 2006 Posts: 7492 Location: Dresden, Germany
Posted: Sun Jul 17, 2022 12:19 Post subject:
you or somebody else is requesting files from the router which do not exist. thats all. this isnt caused by the firmware _________________ "So you tried to use the computer and it started smoking? Sounds like a Mac to me.." - Louis Rossmann https://www.youtube.com/watch?v=eL_5YDRWqGE&t=60s
Joined: 06 Jun 2006 Posts: 7492 Location: Dresden, Germany
Posted: Sun Jul 17, 2022 12:29 Post subject:
i can give you a hint. you haybe have 2 routers with identical ip's in your network. or more serious a trojan horse trying to modify your router. start_apply.htm is a file which can only be found on the original asus firmware and on asus routers. _________________ "So you tried to use the computer and it started smoking? Sounds like a Mac to me.." - Louis Rossmann https://www.youtube.com/watch?v=eL_5YDRWqGE&t=60s
Joined: 16 Mar 2019 Posts: 353 Location: Szczecin, Poland EU
Posted: Mon Jul 18, 2022 19:41 Post subject:
Primarly you should try to totally clear web browser cache. That problem was exist often on my previously dd-wrt router (WNR3500Lv2). Currently I have Atheros based device and this problem is rather absent.
thanks, is there any way to see where the request or attempt came from? like IP? to see if its a local problem or a attempt from outside the local network?
does the ddwrt firmware have any function to protect against attacks from the internet? that are not options in the GUI
Joined: 01 Feb 2016 Posts: 54 Location: Oregon, U.S.
Posted: Sun Jul 24, 2022 21:18 Post subject:
I have no idea why all successful WebGUI logins are recorded as authentication errors.
You will find the following SYSLOG entries for every SUCCESSFUL WebGUI login.
The first line will be normal, and second line will be highlighted in RED.
Joined: 16 Nov 2015 Posts: 6437 Location: UK, London, just across the river..
Posted: Mon Jul 25, 2022 12:29 Post subject:
TedCheeze those are normal messages, to appear in syslog when you log in...its been discussed many times, it is the normal browser/router behaviour...and there is nothing bad..
If you have unauthorised WEBGUI attempts, there will be either MAC address or IP showing in this type of messages...if those attempts count 5 those will be blocked for a period of time...
and period of time will extend on more attempts...
tgvrfcedx about start_apply.htm BS explained what is the reason for those...and i cannot be more helpful...indeed
there are many treads to search and read in order to gain information and do your own research before ring the bell...at least that is what i do...lots of info in DDWRT forum, or google... ask google kernel-panic 69 DDWRT and you will see all his posts...so adding DDWRT to your search yields the correct results.. _________________ Atheros
TP-Link WR740Nv1 ---DD-WRT 55630 WAP
TP-Link WR1043NDv2 -DD-WRT 55723 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55779 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55819 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55779 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
Most search engines support "site:forum.dd-wrt.com" to narrow scope of keywords or search terms,
web search engine operators - + "" AND OR | * and more for better results. DD-WRT forum search:
Select Search for all terms, Display results as: Posts & Return first All Available characters of posts.