OpenWrt / LEDE - alternative firmware | [firmware] OpenWrt / LEDE - discussion and problem solving



Rep: (579)
Build OpenWrt / LEDE from source | DD-WRT FIRMWARE | Collect bin (dump) for the programmer | Upgraded UBOOT loaders


OpenWrt / LEDE - alternative firmware


Attached Image


Latest version:OpenWRT 19.07.5
This topic should be placed under the image and logs spoilerPicture

Description / What is discussed in the topic, and what is not
OpenWrt is an embedded Linux kernel-based operating system designed primarily for home routers. Core components include the Linux kernel, util-linux, uClibc or musl, and BusyBox. The source code is open. Distributed under the GNU GPL license.

The LEDE project is developed on the basis of Linux, an embedded meta-distribution based on OpenWRT, focused on a wide range of SOHO wireless routers and non-network devices. “Linux Embedded Development Environment”.
LEDE turned away from the parent project in May 2016, with the goal of continuing to develop better software in an open management model and encouraging new developers to contribute and development efforts.

https://www.openwrt.org
https://github.com/openwrt

https://lede-project.org
https://github.com/lede-project

Emulator OpenWrt / LEDE web interface LuCI (old design theme)


  • This topic is intended to discuss the settings, the installation process on your router and everything related to the OpenWrt / LEDE firmware.
  • In this topicdon't discuss compile from source and rebuild, there is a topic for this Build OpenWrt / LEDE from source
Useful programs
WinSCP graphical client SFTP and SCP
Settings for connecting to a router with LEDE (dropbear must be enabled)
Attached Image

Under Linux, you can either run under winscp wine, or upload files scp command
scp file path [email protected]: the path where to fill in the router
Example:
scp ~ / 1.bin [email protected]: / tmp /

Tftpd32
TFTP for Linux using Ubuntu as an example
Configure tftpd-hpa TFTP server

Install the tftpd-hpa package:
sudo apt-get install tftpd-hpa

After installation, edit the file
sudo nano / etc / default / tftpd-hpa
containing server settings. Let's bring it to the following form:

TFTP_USERNAME = "tftp"
TFTP_DIRECTORY = "/ var / tftp"
TFTP_ADDRESS = "0.0.0.0:69"
TFTP_OPTIONS = "- ipv4 --secure --create --umask 027 --permissive"


In the settings are additional options:
create allows the server to create new files,
ipv4 instructs it to wait for connections only on IPv4 addresses,
umask instructs to reset the write bit for the group and all access bits for other users,
permissive instructs not to carry out any file permissions checks in excess of the operating system.
Create a directory for the tftp server, give the server access to the directory:


sudo mkdir / var / tftp

sudo chown tftp: tftp / var / tftp


You can also change the home directory of the tftp user in the / etc / passwd file to / var / tftp.

Now we just write the ip addresses we need through the gnome network manager and that's it.

It remains to restart the daemon to start working with the new directory:
sudo /etc/init.d/tftpd-hpa restart

Instructions
Useful topics
OpenWrt project news
Download OpenWrt / LEDE


Post has been editedstp101 - 11.12.20, 01:37
Reason for editing: Update OpenWRT 18.06.9 and 19.07.5



Rep: (108)
* Drawde17, This is natural - planner cron performs the designated action in due time and no more. That wi-fi was not included at the start, turn it off by default, and it will be activated only at the scheduled time. But then will probably even worse if the restart will happen in the "working time", wi-fi will remain off. : D It all depends on how frequent restarts, and what is worse - the inclusion of off-hours or non-inclusion in the workplace. ;)
Possible options:
  • You can whenever incl. / Off. save this state in the flash, then after restarting the wi-fi would be in the same condition in which it was before. Realized outrageously simple, but there are drawbacks: 1) there is concern for the health of flash in the long term, since her life is not elastic; 2) if there will be a long power failure, it may have a renewed already after hours, and saved state wi-fi will correspond to the working (and vice versa).

  • Write and add to autostart (/etc/rc.local) Script that will test whether using the NTP synchronization, to which period is made relates the current time (day, month, day of the week?) And bring wi-fi in the state corresponding to this period (incl. / Off.).



Rep: (0)
Thank you all for your answers, it turned out was not the last sysupgrade, because the shaking of the caphttps://openwrt.org/toh/tp-link/archer_c2_ac750. made further instructions on everything in the logs of all good, but the sites but there was no access and no (
I am attaching a piece of log

Thu Sep 20 17:54:50 2018 daemon.notice netifd: Interface 'antizapret' is enabled
Thu Sep 20 17:54:50 2018 daemon.notice netifd: Network device 'tun0' link is up
Thu Sep 20 17:54:50 2018 daemon.notice netifd: Interface 'antizapret' has link connectivity
Thu Sep 20 17:54:50 2018 daemon.notice netifd: Interface 'antizapret' is setting up now
Thu Sep 20 17:54:50 2018 daemon.notice netifd: Interface 'antizapret' is now up
Thu Sep 20 17:54:50 2018 daemon.notice openvpn (antizapret) [1131]: TUN / TAP device tun0 opened
Thu Sep 20 17:54:50 2018 daemon.notice openvpn (antizapret) [1131]: do_ifconfig, tt->did_ifconfig_ipv6_setup = 0
Thu Sep 20 17:54:50 2018 daemon.notice openvpn (antizapret) [1131]: / sbin / ifconfig tun0 192.168.104.27 netmask 255.255.252.0 mtu 1500 broadcast 192.168.107.255
Thu Sep 20 17:54:51 2018 user.notice firewall: Reloading firewall due to ifup of antizapret (tun0)
Thu Sep 20 17:54:52 2018 daemon.warn openvpn (antizapret) [1131]: WARNING: this configuration may cache passwords in memory - use the auth-nocache option to prevent this
Thu Sep 20 17:54:52 2018 daemon.notice openvpn (antizapret) [1131]: Initialization Sequence Completed



Rep: (411)
but the sites but there was no access and no

Judging from the ravine, OpenVPN wound up now, make sure that you are using DNS, provided antizapret
Standard test dnsleaktest.com which DNS shows?

Post has been editedDart raiden - 20.09.18, 21:01



Rep: (78)
* Drawde17,
below you write the logic. Turning on and off are performed on the schedule, wherein the initial instant state is determined by the initial conditions. Mood right at the initial time, after the launch.
* skazo4niym1m,
Buy a paid VPN and not par brains themselves and others.



Rep: (0)
Dart Raiden @ 20.09.18, 20:59*
Standard test dnsleaktest.com which DNS shows?



on dnsleaktest.com test shows Finland and ip 74,125 species. *. *
dns registered loyal, 104.1

Rpendt @ 20.09.18, 21:38*
Buy a paid VPN and not par brains themselves and others.


Thank you for the obvious advice would first like to deal with the proposed solution



Rep: (411)
ping rutor.is or tracert rutor.is that says?

Must be
Pinging rutor.is [10.224.1.182] with 32 bytes of data:


And rutor.is should open in the browser, because although it is blocked in Russia, but he was given the address of 10.224.1.182 and traffic before it goes through a tunnel.

Post has been editedDart raiden - 20.09.18, 23:51



Rep: (176)
Show you how to use a DNS service provider with antizapretom, but that they were requested in order? If you enter directly into the WAN, switched interlock.
Yesterday there was a nasty story, when the Internet was gone (the fault of the wire), and the internal network is not responded (in DNS forwardings have extra. Recording to LAN).



Rep: (108)
* routir, admit, little understood :), but I dare say that we are talking about specifying individual of DNS-servers for individual domains. In the example below to resolve names in provider.net zone (e.g., www.provider.net) will be used DNS-server IP x.x.x.x (such lines can be set):
/ Etc / config / dhcp
config dnsmasq
...
list server '/provider.net/x.x.x.x'
...
or on the command line of the router:
uci add_list dhcp. @ dnsmasq []. server = "/ provider.net/x.x.x.x" && uci commit dhcp && /etc/init.d/dnsmasq reload


... Well or stupid enter DNS provider's second - after antizapretovskogo, in the same place:
Dart Raiden @ 06.08.18, 19:36*
8) In the setting of WAN and WAN6 interfaces (Network в†’ Interfaces) to disable Use DNS servers advertised by peer. For the WAN tab on Advanced settings, in the Use custom DNS servers to enter the address of 192.168.104.1 - DNS-server antizapret ...
Save and apply
- when the first unavailability will yuzatsya second.

(But the first variant, imho, rational - resolution of names in the domain (s) service provider will always be executed directly through the DNS provider, which is faster)

Post has been editedsalexa - 21.09.18, 10:10



Rep: (176)
Thank you already figured out!
We need to do this:
1) WAN interface DNS record in the correct order
Attached Image

2) then DHCP and DNS / Advanced Settings bird on Strict Order
Attached Image

3) reboot

Now, if antizapreta server fell off, there is a request for Adguard. If it is not available (missing the internet, for example), then turn on the provider. Since the latter can go to a local area network, or watch TV for multicast.

salexa @ 21.09.18, 09:33*
first variant, imho, rational - name resolution in the domain provider will always be executed directly through the DNS provider that quickly

Forwarding does not work if the WAN is not written to the necessary DNS server. And there is in fact nothing other than antizapreta, usually)

Post has been editedroutir - 21.09.18, 10:17



Rep: (0)
Dart Raiden @ 20.09.18, 23:48*
And rutor.is should open in the browser, because although it is blocked in Russia, but he was given the address of 10.224.1.182 and traffic before it goes through a tunnel.


Pinging rutor.is [89.221.192.76] with 32 bytes of data:
Response from 89.221.192.76: bytes = 32 time = 7ms TTL = 55

vneshke goes through the exchange, and via the browser does not open ... please tell me where to dig



Rep: (411)
And if on the router to do the same (pinganut the same domain)?
The web interface has a section Troubleshooting, where you can pinganut (or SSH to the router and go from pinganut console).

This can be a router, then everything is fine, but somewhere on the client is registered to, say, a custom DNS ...

Post has been editedDart raiden - 21.09.18, 15:03



Rep: (108)
routir @ 21.09.2018, 12:10*
... Forwarding does not work if the WAN is not written to the necessary DNS server. And there is in fact nothing other than antizapreta usually
Is not there, but in/ Etc / config / dhcpis (inmy example).
Read more ...
Transformation DNS_name ->IP_address dealsdnsmasqHe uses a higher DNS-servers that are specified in the/ Etc / config / dhcpand in/tmp/resolv.conf.auto. The last is automatically unloaded DNS-servers, obtained by DHCP, or added through LuCI (usually for WAN-interface).


Post has been editedsalexa - 21.09.18, 18:31



Rep: (176)
* salexa
I have for some reason does not work, but I will still play with CSN in dnsmasq, .lib area opens out without problems, but the provider servaki and any other - no.

This enabled antizapretom and DNSom on WANe, if that)



Rep: (411)
.Lib provides support and antizapret.



Rep: (0)
Dart Raiden @ 21.09.18, 14:59*
The web interface has a Troubleshooting section, where you can pinganut

there is the same. DNS clients on the different stands automatically



Rep: (411)
Miracles do not happen. And that /tmp/resolv.conf.auto contain?



Rep: (108)
Yes, yes, and for one more, and the contents/tmp/etc/dnsmasq.conf.cfg*(That too twice in the same place does not climb) :)



Rep: (19)
introduced in the lock image for dnsmasq this line - 0.0.0.0 code.directadvert.ru, and advertising on the Rutor from this site is still there? Chyadnt?

P.S. sistemlog scored this:
Sat Sep 22 10:33:21 2018 daemon.info dnsmasq-dhcp [3205]: DHCPREQUEST (br-lan) 192.168.1.108 2c: d0: 5a: dd: f0: 80
Sat Sep 22 10:33:21 2018 daemon.info dnsmasq-dhcp [3205]: DHCPACK (br-lan) 192.168.1.108 2c: d0: 5a: dd: f0: 80 Notik_W

prescribed in /etc/dnsmasq.conf:
dhcp-option = 252, "\ n"
but nothing has changed.

Post has been editedRomio_03 - 22.09.18, 11:50



Rep: (0)
Dart Raiden @ 22.09.18, 02:36*
And that /tmp/resolv.conf.auto


# Interface wan
nameserver 192.168.104.1

salexa @ 22.09.18, 09:20*
contents /tmp/etc/dnsmasq.conf.cfg*

dnsmasq.conf.cfg
# Auto-generated config file from / etc / config / dhcp
conf-file = / etc / dnsmasq.conf
dhcp-authoritative
domain-needed
localise-queries
read-ethers
enable-ubus
expand-hosts
bind-dynamic
local-service
domain = lan
server = / lan /
server = / vpn.antizapret.prostovpn.org / 1.1.1.1
dhcp-leasefile = / tmp / dhcp.leases
resolv-file = / tmp / resolv.conf.auto
dhcp-broadcast = tag: needs-broadcast
addn-hosts = / tmp / hosts
conf-dir = / tmp / dnsmasq.d
user = dnsmasq
group = dnsmasq




bogus-priv
conf-file = / usr / share / dnsmasq / rfc6761.conf
dhcp-range = set: lan, 192.168.1.100,192.168.1.249,255.255.255.0,12h
no-dhcp-interface = eth0.2



Rep: (108)
Well in/tmp/resolv.conf.autoonly DNS "antizapreta" - as it should be, in/tmp/etc/dnsmasq.conf.cfg*generally no extra DNS.
Has links toconf-file = / etc / dnsmasq.conf, conf-file = / usr / share / dnsmasq / rfc6761.conf. By default, the first should be all commented out in the second - only the transfer of the local domain (local, localhost, test ...), uninsurable resolution via DNS vyshestyaschie.

It remains to recheck these 2 files. Or suspect that your system / network there is still some kind of the DNS-server instance, or to state that "miracles happen" and it upset respected* Dart raiden To the contrary ...: D

Post has been editedsalexa - 22.09.18, 22:30


Full version    

Help     rules

Now: 21.01.21, 09:20