Victek Releases Tomato RAF 1.28.8515 ND Kernel 2.4

I have it up and running on 3 units. Thanks Vic.

http://victek.is-a-geek.com/tomato.html

I got it running on 2 units of WRT54G v3.1. Sweet

Obvious new feature:
Web Usage

How you managed to fit the new stuff on a smaller image ...
Tomato_RAF_1.25.8515.2-ND.trx was 3160 KB
tomato.RAF-K24-1.28.8515_lite.trx is 2888 KB

I've loaded it onto one of my Buffalo WHR-HP-G54 without any issues. Thanks Victek.

I've noticed a couple of defaults on Wireless\Settings which may be incorrect:

Transmit Power is set to 42 - the default says 10 for the WHR-HP-G54.
Enhanced RX Sensitivity is set to Enable - the default says Disable.

Also, What is 'Bluetooth Coexistance' and how does it affect the running of the router?

Apart from that, :biggrin::biggrin::biggrin::biggrin::biggrin:

I am not seeing "Enhanced RX Sensitivity" on my Linksys units. I'm curious about the "Bluetooth Coexistance" setting as well.

It's a Buffalo specific option I believe:

Loaded on my WRT54G-TM. Goodbye 293 Days uptime with 1.25. Hello new 1.28. TY Victek.

Dnsmasq 2.49 a typo or no? Tomato 1.28 is using 2.55 :-/

Must be a typo since below is from a router with this build on it...

Code:

# cat /etc/motd
Tomato v1.28.8515 _RAF ND Std
# dnsmasq -v
Dnsmasq version 2.55  Copyright (c) 2000-2010 Simon Kelley

Edit: TexasFlood beat me to it.

Thanks Victek. I updated my WRT54G without trouble, but I did notice reduced WAN throughput.
I have a 30Mbit/s connection which RAF 1.25 could just about manage, but now RAF 1.28 doesn't reach
that speed, though it's configured almost the same as before. It stops near 25Mbit, and is likely limited
by the CPU, because overclocking gives a slight improvement. (I did clear nvram, am not using qos.)

I know a lot's changed between these versions that could cause this, and not all of it done by Victek,
so I don't expect there to be a quick fix. But if any of you guys has a suggestion, I'd like to hear it.

Two problems that I've ran into...

First of all: Victek's name is misspelled in the name of the thread. :shock:

Now about the actual RAF: I have just flashed my WRT54GL v1.1 to new RAF and I've fan into two problems:

1) Access Restriction problem. This is could be a bug. I was able to block only a certain port in RAF 1.25 with access restriction rules. Now if I set my rule as following:

Code:

TCP/UDP    Src or Dst   ##PortNumber##
IPP2P (disabled)      Layer 7 (disabled)

then after saving settings it resets to:

Code:

TCP/UDP    AnyPort   ___blanked out____
IPP2P (disabled)      Layer 7 (disabled)

Also, I have used this rule before without specifying "HTTP Request" and now I can't leave that field blank.

So, now I cannot block a specific port as I used to in RAF 1.25

2) My Bandwidth Usage script no longer works for some reason. I'm not sure if some commands were removed from RAF 1.28, but here's my Wan Up script:

Code:

USER="my_user_name_here"
PASS="my_password_here"
PORT=21
SERVER="upload.comcast.net"
RPATH="/bandwidth/rstats.tar"
RPATH_DATE="/bandwidth/rstats\`date +%Y.%m.%d-%H.%M.%S\`.tar"
LPATH="/tmp/rstats.tar"

/bin/sleep 10

if [ ! -s /tmp/backup-rstats ] ; then
    echo -e "#!/bin/sh\nkillall -1 rstats\nsleep 3\ntar -cf \"$LPATH\" /tmp/var/lib/misc/rstats-*\nftpput -u \"$USER\" -p \"$PASS\" -P $PORT $SERVER \"$RPATH\" \"$LPATH\"\nftpput -u \"$USER\" -p \"$PASS\" -P $PORT $SERVER \"$RPATH_DATE\" \"$LPATH\"\nrm \"$LPATH\"" > /tmp/backup-rstats
    chmod 777 /tmp/backup-rstats
    echo -e "#!/bin/sh\nservice rstats stop\nftpget -u \"$USER\" -p \"$PASS\" -P $PORT $SERVER \"$LPATH\" \"$RPATH\"" > /tmp/restore-rstats
    echo -e "if [ \$? != 0 ] ; then\n  logger RStats Restore Failed... will retry in 5 minutes\nled amber on\n  cru a rstats \"*/5 * * * * /tmp/restore-rstats\"\n  return 1\nfi\nled amber off\ntar -xf \"$LPATH\" -C /\nrm \"$LPATH\"\nservice rstats start\ncru a rstats \"1 */1 * * * /tmp/backup-rstats\"" >> /tmp/restore-rstats
    echo -e "logger RStats Data Restored\nrm /tmp/restore-rstats" >> /tmp/restore-rstats
    chmod 777 /tmp/restore-rstats
    /tmp/restore-rstats
fi

This script used to work just fine a few minutes ago with 1.25 before I flashed to 1.28. Is there anything that I should change in the script? I would really like to have rstats backup functionality again. Please, help.

Other than two problems above, it's running smoothly. I haven't tried the web usage yet, but will soon.

I tried to correct that typo to no avail. I have contacted a mod and asked that it be corrected.

Victek,

I seen you released the following. Thanks for the updates and all the work!

Tomato RAF 1.28.8515ND. Standard version for WRT54GL and non USB routers.

Do you plan on releasing a regular non ND version? Example with the previous version.

Tomato RAF 1.25.8025.2

And I know you had another version but ND.

I did some more testing and found out that "ftpget" is no longer available. This is probably why my FTP rstats backup script is not working

Was ftpget removed on purpose from RAF 1.28?

I see that Vic has now released a 1.28 ND version with USB + VPN

Thanks for the new firmware. Just checking to be sure. Its the 2.4 and not the 2.6 kernel?

A simple but very valuable inclusion for me under Wireless Transmit Power

"(use 0 for hardware default)"

Thanks Victek. Worth the wait mate.

JSM, from my logs

tomato user.info kernel: Linux NET4.0 for Linux 2.4

Thanks sop...

What is apsd mode?

Its in advanced wireless settings.

I haven't flashed this but is this similar to Teddybear's lite version?...without ftpget and etc

From Tomatousb:
APSD Mode

Automatic Power Save Delivery is a more efficient power management method than legacy 802.11 Power Save Polling. Most newer 802.11 stations already support a power management mechanism similar to APSD. APSD is very useful for a VoIP phone, as data rates are roughly the same in both directions. Whenever Voice data are sent to the Access Point, the Access Point is triggered to send the buffered Voice data in the other direction. After that the Voice over IP phone enters doze state until next Voice data have to be sent to the Access Point.

Thank you, Victek! Hoping for a RAF version for my WRT320N

I noticed that the QOS Classification haved changed from Highest, High, Low, Lowest to Service, Game, WWW, etc. Any input on the changes? Does Service have a higher priority over Game? I have MagicJack and I want to set it to the highest priority class. Service is it? Thanks!

It seems to be working ok here. Did you remember to click 'Add' (something I'm always forgetting) or have you done a full Erase?:

Oh, lol, stupid me :doh:

Of course I didn't press the "Add" button. I was just hitting the "Save" button. lol

See, this is how good Tomato is: set it and forget it. It was so long ago since I have set up 1.25 RAF, that I forgot some stuff.

Anyway, thank you for opening my eyes onto some obvious stuff

So does the prevent dns rebind attacks box simply add the stop-dns-rebind cmd to the dnsmasq? Also, why is upnp service scheduled to restart every 24 hours by default? Is the just being used as an example or have I missed something upnp related?

Toast, thank you for the info. I actually set my Magicjacks/VOIP in the highest category. I guess its current classification should do it for me. As with the previous builds, I usually bring the highest settings from the top down (In other words, I group evrything. All categories in the highest level i place on the top most of the list and the lowest to the lowest part of the list.) - or does it have any effect at all if I leave everything in the mixed class - no order at all with this latest build? Thanks!

I'd like to know this also?

Toink: the order of the list is the order traffic is prioritized. Ignore the class names, classes are simply used to assign specific amounts of bandwidth and while their order matters, the list takes priority.

I'd suggest experimenting if in doubt however. I've just discovered the (default) L7 skypeout filter is catching most of uTorrents udp traffic rather than skype. Not much use as a game filter but could prove quite useful in other ways

Hi, why new version of Victek RAF didnt have command ftpget? Is this bug or what?

thanks for reaply

It was enabled by default for me and Azuse. I don't know if it was intentional though. That's the question.

"APSD is very useful for a VoIP phone"

So basically if not using VoIP leave it be?

On Victek site apear a new version of tomato - Tomato RAF 1.28.8525 ND + VPN. Standard version for WRT54GL and non USB routers WITH VPN.

To people complaint about FTPGET, FTPPUT, FTPGET long options ... these features are not implemented in Tomato RAF. It's not a bug, is Tomato RAF. :biggrin:

Ftpput is still there though. Just ftpget is not there, but I think I know what I have to do now: I will flash back 1.25 RAF, copy fptget, then flash again to 1.28, put ftpget to JFFS and modify rstat backup script. I don't know if this will work, but the only way is to try and see...

Victek, thank you for the new release. So far it's very stable and fast.

Wow... this is great! I see a few different ones now:

Tomato RAF 1.28.8520 ND + USB + VPN. Version for ASUS WL-500gP, 520gU and in general for MIPSR1 USB Routers.
Tomato RAF 1.28.8525 ND + VPN. Standard version for WRT54GL and non USB routers WITH VPN.

and also a test version:

Tomato RAF 1.23.8624 ND + USB + RAF mod TB Version for ASUS USB Router + IP/MAC Limiter RAF version.

I wonder if anyone could clarify what would be the main differences between these and Teddybear's VPN builds?
Does this include all of the standard Teddybear features?

I believe I bricked my RT-N16 trying to flash from dd-wrt to Tomato 1.28.8550. Power light is blinking, can't access 192.168.1.1, but it does respond to pinging. Any help?

Please, do a reset. Fort he future remember to perform upgrade using 'Erase nvram values when upgrade', this option was fixed in the upgrade menu to avoid your post for Tomato users.
In your case do telnet, and once you're in the prompt type nvram erase, reboot and wait.

Last resource: Use the Firmware restoration tool from Asus (Asus utilities) to recover your router, works 100%.

OK I took the plunge... upgraded to this from Teddybear K26 beta 19 VPN... and all seems fine.

The only issue I have is the swap partition of my USB drive isn't being mounted or used (the other partitions are).

It mounted fine automatically under the beta 19 version of Teddybear K26 VPN build, but I had this same problem when I tried to upgrade to beta 20. There seems to be a discussion over whether it should or shouldn't automount here:

http://tomatousb.org/forum/t-259082

Without getting into the argument over whether it should or shouldn't do so by default, can someone tell me how, e.g. some script, to make it mount and be used each time the router starts?

Oh, nooooo, my little experiment didn't work: ftpget from 1.25 is few kilobytes more than available free space on JFFS on my wrt54gl v1.1, so it won't fit.

I was using RAF ever since I bought this router and I don't want to use any other firmware except Tomato RAF, even though others might still have ftpget/put. I guess I will have to forget about rstats backup... :cry:

Add one more person to that. I just found out that I have upnp restart scheduled in "Custom 1" to be performed ever 24 hours on my wrt54gl as well. The "Enabled" is checked by default.

I'm curious, is the vpn version simply the regular version with vpn added or have other features been remove to make room for it?

Do you think it's abnormal to enable this checkbox in order to quick-off stacked applications?. If you don't like it please disabled, is your router, I enabled as extra security, it's a good choice for me (and I offer it to the people using this firmware).
OMG ... you have more than 75 enable/disable options in this firmware, customize it at your wish, this is not a bug. Thank you! :biggrin:

Tell me bugs, not wishes or preferences.

Just added along with many other features, not only OpenVPN.

Has anyone ran into any major bugs yet with this release and the WRT54GL? How different is the interface? Has the WRT54GL seen a nice boost in performance?

You should be able to load the binary on an external website and have the router download it to ram when it reboots and establishes an internet connection... Plop it in the WAN UP section of the Admin\Scripts section:

Code:

ls /var | grep -x 'ftpget'
if [ $? == 1 ]; then
    wget -P /var http://xxxxx/ftpget
    chmod +x /var/ftpget
##    /var/ftpget    ## if it runs as a daemon, probably won't need this line
fi

Change your script to point to /var/ftpget and if you stand on one foot while praying, it might work...

Or perhaps just update the script to use wget, I've used wget to get an ftp file with the following syntax:

Code:

wget ftp://id:pw@{ftp server name or IP}/{file to retrieve}

Hi...

I am new to backing up statistics...can you help me before I upgrade my asus 500gp to the latest tomato1.28

please give me steps to do it

10x

I'm sorry, that's not what I meant...

Wow. I didn't say that I don't like it. I'm sorry for any misunderstanding that my post have caused. The main point of my post was that "it is enabled by default for me too". No complaints. No problems. Just a confirmation that it is enabled in my case too. That's it.

Again, I'm very sorry if my post seems like some negative opinion, that's not what I meant it to be. After all, English is not my native language. Please, understand me. :sad:

What I also like about this new version is the ability to run WPA2+AES to my Ethernet Bridge. Excellent work. Previously it forced me to run WPA2/WPA on my AP and WPA on the WET. :thumbups:

:biggrin::biggrin:I read spanglish, sorry if you feel attack in my words, as I answered to your PM, don't worry, enjoy and report any bug found.

PS. I will create a FTPGET, FTPPUT, FTPGET long.. release tonight, then, we can sing with beers!!

Oh my goodness, that VPN build is awesome. I've long wanted a VPN server on my WRT54GL but didn't want to leave VicTek's excellent work. Now we can have both!

Ok folks, some of you were quite vocal during VicTek's absence and now that he is back with some of his most exciting work its time to reciprocate and give him a donation! If you donated a while back it may be time to donate again, which I just did.

Virtual pizza's and cerveza's on me :rockon:

Thank you, Victek!

Hmm... Since it was me who got rid of ftpget from Tomato to save some space, I would like to know why would anybody need ftpget when you already have wget which can do both - http and ftp? Is there any good reason to keep ftpget?

"I read Spanish"

Me too. Don't understand a lick of it, but I read it.

Thanks again for getting this firmware out and engaging us again on this forum. A question is being asked in the K6 MIPSR2 thread about the Netgear 3500. Any advice on how to flash the Netgear safely?

New versions seems to be running great! I noticed vastly different QoS classifications than 1.25 however. Were these modified default QoS changes part of vanilla 1.28 as well? These modified settings have forced me to have to disable QoS since it was actually slowing down my connection with these new settings (and i forgot to write my old ones down before clearing NVRAM, silly me). Oh well, I don't really use QoS anymore. I mainly used to use it when I lived with my brother and he was playing WoW.

Regardless thanks for the new version Vic! I'm running the VPN build on my WRT54G-TM and no problems so far!

Well I've been trying the vpn build for a few hours now but I simply cannot get mac limiting to work. I'll try re-flashing tomorrow. Only errors in the logs are these:

Jan 1 00:00:13 unknown user.debug kernel: vlan1: dev_set_allmulti(master, 1)
Jan 1 00:00:13 unknown user.err igmpproxy[441]: Vif #1 was already upstream. Cannot set VIF #2 as upstream as well.
Jan 1 00:00:13 unknown user.debug kernel: vlan1: dev_set_allmulti(master, -1)
Jan 1 00:00:13 unknown user.warn kernel: HTB: quantum of class 10015 is small. Consider r2q change.
Jan 1 00:00:14 unknown user.debug kernel: vlan1: dev_set_allmulti(master, 1)
Jan 1 00:00:14 unknown user.err igmpproxy[467]: Vif #1 was already upstream. Cannot set VIF #2 as upstream as well.
Jan 1 00:00:14 unknown user.debug kernel: vlan1: dev_set_allmulti(master, -1)
Jan 1 00:00:14 unknown user.debug kernel: vlan1: dev_set_allmulti(master, 1)
Jan 1 00:00:14 unknown user.err igmpproxy[488]: Vif #1 was already upstream. Cannot set VIF #2 as upstream as well.
Jan 1 00:00:14 unknown user.debug kernel: vlan1: dev_set_allmulti(master, -1)
Jan 1 00:00:14 unknown user.warn kernel: HTB: quantum of class 10016 is small. Consider r2q change.
Jan 1 00:00:14 unknown user.debug kernel: vlan1: dev_set_allmulti(master, 1)
Jan 1 00:00:14 unknown user.err igmpproxy[497]: Vif #1 was already upstream. Cannot set VIF #2 as upstream as well.
Jan 1 00:00:14 unknown user.debug kernel: vlan1: dev_set_allmulti(master, -1)
Sep 21 00:15:26 unknown user.debug kernel: vlan1: dev_set_allmulti(master, 1)
Sep 21 00:15:26 unknown user.err igmpproxy[647]: Vif #1 was already upstream. Cannot set VIF #2 as upstream as well.
Sep 21 00:15:27 unknown user.debug kernel: vlan1: dev_set_allmulti(master, -1)
Sep 21 00:15:27 unknown user.debug kernel: vlan1: dev_set_allmulti(master, 1)
Sep 21 00:15:27 unknown user.err igmpproxy[650]: Vif #1 was already upstream. Cannot set VIF #2 as upstream as well.
Sep 21 00:15:27 unknown user.debug kernel: vlan1: dev_set_allmulti(master, -1)
Sep 21 00:15:27 unknown user.debug kernel: vlan1: dev_set_allmulti(master, 1)
Sep 21 00:15:27 unknown user.err igmpproxy[695]: Vif #1 was already upstream. Cannot set VIF #2 as upstream as well.
Sep 21 00:15:27 unknown user.debug kernel: vlan1: dev_set_allmulti(master, -1)

I believe that Vic included Toastman's QOS with labels as I recall. --bill

Ok, that makes sense. Thank you, Teddy_bear! I actually didn't notice wget there initially. Now I modified the script and it all works again. Also, big thanks to Jedis and TexasFlood about mentioning wget as well.

Here are modified scripts that work with 1.28 RAF if anyone else is interested:

NOTE: I'm not the original author of these scripts. I just modified one line of code.

Shutdown script:

Code:

if [ ! -s /tmp/restore-rstats ] ; then  {make sure any previous restore was successful, or we will overwrite the backup with nothing...}
/tmp/backup-rstats
fi

WanUp script:

Code:

USER="YOUR_USER_NAME"
PASS="YOUR_PASS"
PORT=21
SERVER="SERVER_URL_HERE"
RPATH="/rstats.tar"
RPATH_DATE="/rstats\`date +%Y.%m.%d-%H.%M.%S\`.tar"
LPATH="/tmp/rstats.tar"


/bin/sleep 10


if [ ! -s /tmp/backup-rstats ] ; then
    echo -e "#!/bin/sh\nkillall -1 rstats\nsleep 3\ntar -cf \"$LPATH\" /tmp/var/lib/misc/rstats-*\nftpput -u \"$USER\" -p \"$PASS\" -P $PORT $SERVER \"$RPATH\" \"$LPATH\"\nftpput -u \"$USER\" -p \"$PASS\" -P $PORT $SERVER \"$RPATH_DATE\" \"$LPATH\"\nrm \"$LPATH\"" > /tmp/backup-rstats
    chmod 777 /tmp/backup-rstats
    echo -e "#!/bin/sh\nservice rstats stop\nwget ftp://$USER:$PASS@$SERVER:$PORT$RPATH -O \"$LPATH\"" > /tmp/restore-rstats
    echo -e "if [ \$? != 0 ] ; then\n  logger RStats Restore Failed... will retry in 5 minutes\nled amber on\n  cru a rstats \"*/5 * * * * /tmp/restore-rstats\"\n  return 1\nfi\nled amber off\ntar -xf \"$LPATH\" -C /\nrm \"$LPATH\"\nservice rstats start\ncru a rstats \"1 */1 * * * /tmp/backup-rstats\"" >> /tmp/restore-rstats
    echo -e "logger RStats Data Restored\nrm /tmp/restore-rstats" >> /tmp/restore-rstats
    chmod 777 /tmp/restore-rstats
    /tmp/restore-rstats
fi

So, I guess there's no need now for Victek to add ftpget to the firmware. Victek, sorry for the hassle. Your firmware rocks and the latest release is the best ever!!!

Can anyone please tell me what web usage/web monitoring is for?

When enabled, it logs every web page you visit and every web search you make.

Thank you.

Yeah, it runs WPA2 on WDS too.

But I was wondering how could it be possible? Is it due to the newer wireless drivers?

I'm going to say thank you once more. Having set my wl-500gp v2 to setting "0" I'm now getting 2100 KB/s wireless throughput where I was getting 1300 KB/s!

I tried mW settings at 5, 10, 15, 19, 21, 22, 30, 42 and 79 which I though was the standard conversion and throughout was rubbish.

Is there way to find out what the default actually is or at what mW the router is running at?

Anyway... VERY HAPPY CHAPPY here!

Cheers

Correct, I included the QoS rules by Sir Toastman :smile: as I thought was driven by real experience by a lots of users on his hotspot. Do you think original QoS and labels by default are more practical?
And I'm glad with this new VPN version fro WRT54GL, longtime awaited and a great ROI for this model.

I have to mention all my gratitude to Teddy_Bear, Toastman, LLy and all the talents (as I mention in Tomato RAF about section) mantaining and supporting this great code. IMO we have a stable firmware (Tomato RAF 1.25.8515 was a reference for me) and I rejected to update RAF version since longtime ago, I did, we win!

In few days a new . (dot) release for each RAF version will be released .. I hope, 24 hour per day are not enough in my case.

Victek,

With these new releases coming. Do we have to go through the clear NVRAM (thorough) ? Or can we simply just upgrade over the top? What do you advise? Btw. I just flashed mine tonight and it is fantastic. I also OC my router with this release for the first time. The internet is much more snappy and the gui is the quickest I have ever used with router firmware so far.

In an ideal world... I would like to see the user being allowed to change the names of the classes themselves, in a similar way to how the user can add a "description" in the port-forwarding page.
This would obviously require a GUI change, but perhaps whatever code it is that is used on the port-forwarding description fields, could be re-used for the QoS classes.....
For example I don't play any games, but I do have all my VOIP stuff allocated to the Games class. It would be nicer if I could change the name "Games" to "VOIP".

Just a short note to say I've been running the K24 RAF+USB+VPN mod on my Asus WL-500GPv2 for a day now, and everything seems very nice and stable.
Thank you very much Victek, this new VPN mod is a really nice addition.
One question for WL-500GPv2 users - has anyone successfully overclocked their machines in a stable way? If so to what CPU Frequency?

I'm sure it is best to clear NVRAM.... but.... FYI, I moved from Teddybear USB+VPN K.26 beta19 to Victek's K.24 RAF+USB+VPN without erasing NVRAM and all seems fine. Other's experience may vary...

mmm, you know? .. I always update my router erasing nvram, then I use IMacros (Firefox add) to recover all settings in few seconds.

Very interesting... could you explain a bit more how you use it to recover the settings?

PS to others - iMacros link is here

iam a newbie can any one tell me which Victek firmware to be flashed for wrt54gv2?
please reply thanks everybody

Can you please explain how to use this...as I am new to this stuff.

1.25.8025

Found a possible bug in 1.28 RAF... uPnP doesn't seem to work when NAT-PMP is enabled at the same time as uPnP. I have an XBOX360 connected to XBOX LIVE, and it uses uPnP to forward the UDP port it needs to communicate, however when NAT-PNP is enabled, it seems unable to forward the port it needs. As soon as I disable NAT-PMP, the XBOX is able to forward the correct port and all is well. This behavior didn't exist in 1.25 RAF versions, I always remember having NAT-PMP and uPnP enabled. I'm not sure if this is isolated to just the XBOX360, or all devices/apps which use uPnP.

This isn't a huge issue for me since I don't have anything which requires NAT-PMP, so I simply disable it, I just thought I would report this,

Note that I did clear the NVRAM before and after flashing to 1.28 RAF.

Can't tell for certain as I'm not sure what devices I have that may or may not use NAT-PMP.

I have a PS3. Daughter's Blackberry might. Not sure about the Wii either.

With UPNP and NAT-PMP enabled all my devices are given an IP address.

Same with NAT-PMP disabled.

Pity, I don't like games (so, I can't test it) I tested with 9 PC's at home and all applications able to handle UPnP and NAT-PMP are working nice, somebody can do more tests with XBOX360? Thanks.

I'd like to say a big thank you for this excellent firmware/mod. I'm also curious to know if you're going to release an k26 MIPSR1 for non-usb routers.

No, first I would like to keep current releases free of bugs, next . (dot) release will include another feature, then test bugs, and if everything went fine ... might be..

Seems the xbox does have issues with PMP. Tried it a few times, couple times it worked with the pmp box checked, couple times it didn't. Couple times it worked with a pmp entry in the table, couple times it didn't. Seems temperamental but disabling it makes the xbox work every time.

Oh and the mac limiting is working, but it seems to have a much harder time dealing with torrent than is did in 1.25 but I won't play with it until you get the next build out.

Also (out of curiosity), what does this error mean?

Sep 21 19:22:16 unknown daemon.notice miniupnpd[3146]: received signal 15, good-bye
Sep 21 19:22:17 unknown user.debug kernel: vlan1: dev_set_allmulti(master, 1)
Sep 21 19:22:17 unknown user.err igmpproxy[3599]: Vif #1 was already upstream. Cannot set VIF #2 as upstream as well.
Sep 21 19:22:17 unknown user.debug kernel: vlan1: dev_set_allmulti(master, -1)
Sep 21 19:22:17 unknown daemon.notice miniupnpd[3601]: HTTP listening on port 2142

Wait a second, I thought the newer wireless drivers had issues with WDS. I had to move back to 1.25.8025 from 1.25.8515ND because WDS was unreliable, which was apparently a known issue with the new drivers. Are you saying that this ND version has no WDS issues and supports additional security modes as well?!

Azuse - Where is the PMP box so I can disable it. My kids were playing xbox and were experiencing connection drops. Thanks

This is EXACTLY the same problem I was experiencing before I disabled NAT-PMP. Once you do (but leave uPnP enabled) then XBOX LIVE will work great. Go to Port Forwarding-->uPnP / NAT-PMP, but enable uPnP and keep NAT-PMP disabled.

Being handed an IP address is not the issue. The issue is the XBOX360 not being able to forward it's needed uPnP port when NAT-PMP is enabled. I'm also certain it's a firmware issue and not the XBOX, since uPnP + NAT-PMP enabled works fine in 1.25 RAF.

Are you getting disconnected completely from xbox live? Or are you having problems getting connected to games? I don't have these problems, however, i'm sure it's because I set a Static DHCP on the Xbox and forward all of these ports manually per the support document.

http://support.xbox.com/support/en/us/nxe/kb.aspx?category=xboxlive&ID=908874&lcid=1033

Yes, random disconnections. I also have static DHCP set for all my devices. I've always used uPnP for XBOX, because sometimes the port it uses for LIVE randomly changes, also sometimes friends come over with their XBOXes, and a different random port gets used & forwarded because the XBOX knows that the default port is in use so it assigns a different one and uPnP forwards it.

Many thanks to Victek for this realese!
Open VPN is my challenge now because i'm newbie in that.
I know that there is HOWTO for openvpn, but I cant find easy-rsa subdirectory in Busy Box in order to generate CA and key for the server and client.
And also how can I copy the client keys to the machine which need them?

It is an optional thing. Basically, every time you reboot your router, you loose bandwidth usage statistics. You can, of course, backup/restore bandwidth stats manually yourself by pressing a few buttons, but if you're lazy like me :smile: then you can use the backup scripts posted earlier to backup your bandwidth stats to some FTP.

So,
1) first you have to have some FTP somewhere. I use free FTP with Comcast just because I have Comcast Internet and they gave me a free FTP account.
2) Then copy-paste the "Shutdown Script" to Administration->Scripts->Shutdown on your router,
3) and copy-paste the "Wan Up Script" to the Administration->Scripts->Wan Up
4) Now go to Wan Up script and replace USER="xxx", PASS="xxx", SERVER="xxx" with your real FTP username, password, and server URL (I have upload.comcast.net with Comcast FTP) instead of xxx.
EDIT: at this point you must also make a dummy "rstats.tar" file on the FTP. It can be even 0 bytes in size, but it must be on the FTP server.
5) Reboot the router to verify that your bandwidth stats backup is working (stats restored and show up in Bandwidth page on the router after reboot).

From then on your bandwidth stats will be backed up and restored automatically and your laziness can prosper (just like mine is :biggrin

Hi, first time i use the Victek mod (1.28.8515 ND).
Have PPPoE and i set Connect On Demand and Max Idle Time to 60 minutes.

Connect On Demand doesn't work here on my router.

No scheduled task or cron jobs running. All computers are off over the night. But the router no makes disconnect after 1 hour.
Also after a completly new restart of the router it seems the it connects like Keep Alive not On Demand.

I'm the only with this problem?

And yes y did NVRAM erase after update.

polilla, tested, it works. Check if some of your PC's is having Magic Packet enabled, this can be the reason why WAN connection is up always. To be sure 100%, test with oficial Tomato 1.28 the same issue if happens and feedback please.

Just adding to the NAT-PMP/UPnP discussion, I use NAT-PMP with UPnP switched off. I use NAT-PMP because the ports used to close as soon as he application exited whereas with UPnP they stayed open for a while.

I've started getting the following messages from utorrent:



The ports do open still but do not always close immediately utorrent exits. They close eventually with a message in the log due, I expect, to the Inactive Rules Cleaning.

These are my router settings:


Apart from this minor issue (and the G54 wireless defaults) the firmware is excellent. Thanks Victek.

Yeah yeah! Victek's version now has WDS and WEB (Wireless Ethernet Bridge) working with WPA2 Personal! No more messages of "WPA2 is only available in AP mode".
:biggrin:

But I'm not sure whether it is just a GUI cosmetic change or it's the actual WPA2 working, so I'll need Victek to confirm.

Found this in my log.

Sep 21 11:59:53 unknown daemon.warn dnsmasq[94]: possible DNS-rebind attack detected: pvw.lan.vig.tpa.foxnews.com

Nice to see the prevent dns rebind attack in the new firmware. :biggrin:

Installed on my GL with no problems. I will post a feedback after 2 - 3 days of testing.

Thanks Victek!

Thank you so much, i checked on your site but i got error while downloading
404 - Not Found
can you please provide me the link to download
Sorry for the trouble

Again great job, even greater that you'll be doing a point release. I hope you keep doing a point release for any updates to Busybox, dnsmasq etc. or anything to make things more efficient and/or to protect us from any exploit. Once again thanks.

You can download from here -> http://rapidshare.com/files/420528169/Tomato_RAF_1.25.8025.2_Std.7z

Connect On Demand-Problem

Victek i used Tomato 1.28 (and older) before your mod without any problem.
I have nothing changed in my home-network except the router-software.

Last night no became disconnect, problem exist.

Sep 22 06:28:07 Linksys daemon.notice pppoe[78]: Disconnected.
Sep 22 06:28:07 Linksys daemon.notice pppoe[78]: Connect time 392.5 minutes.

In the morning i think i got the 24 hour disconnect from my provider, router no does redial (its correct for on demand)
Connection time says me more than 4 hours without activity over night in my home-network.

Edit:
Tested one time with 5 minutes idle and got disconnect after 15.1 minutes.
I want test this later, in the moment the network is under heavy use.

Wanted to say thanks for the scripts. However, I wanted to thank you more to let me know we had a free FTP with comcast! I had no idea! How much space do we have there??

I assume this would work the same with Teddy's RT-N16 mod?