Davidc502- wrt1200ac wrt1900acx wrt3200acm wrt32x builds

speed samba 36

last release openwrt, compiled wo ip6
5g wifi 80mhz, Killer Wireless-n/a/ac 1535
samba36 no tuning, windows 10 no tuning
after reboot
samba4 goes only to 60MB/s
samba 3.6 take 9MB less on router, is about half the load
I'm open to suggestions

edit: did some tcp tuning, wow 10MB more on internet download, hope its not a glitch
thanks for the tip

I have it on my older notebook... Quite buggy Atheros, in fact. Don't like any Killer after, even now i drop their drivers and use Intel one instead.

About Samba.... I have bcp38 and wsdd2 disable.
My config:

[global]
	netbios name = |NAME| 
	interfaces = |INTERFACES|
	server string = |DESCRIPTION|
	workgroup = |WORKGROUP|
        server min protocol = NT1
	server max protocol = SMB3
	browseable = yes
	deadtime = 30
	domain master = yes
	encrypt passwords = true
	enable core files = no
	guest account = nobody
	guest ok = yes
	invalid users = root
	local master = yes
	load printers = no
	map to guest = Bad User
	null passwords = yes
	#obey pam restrictions = yes
	passdb backend = smbpasswd
	preferred master = yes
	security = user
	smb encrypt = yes
	smb passwd file = /etc/samba/smbpasswd

        time server = yes
        unix extensions = no

        socket options = IPTOS_LOWDELAY TCP_NODELAY

	syslog = 1
	#use sendfile = yes
	writeable = yes

        read raw = yes
        write raw = yes

        getwd cache = yes
        #oplocks = no
        large readwrite = yes

	max xmit = 131072
	aio read size =  65535
        aio write size =  65535
	min receivefile size = 131072

I have some patches too, but it's about other.

You are welcome! And shame to MS for doing this.

Could be a Pandora’s Box too. Works, it’s a means to an end, (though it is so trivial and secure with a wire), BUT. . .

I can’t help but wonder how many peeps will actually replace ‘changeme’ in the script or just do a c&p and then not change wifi passwd on first boot and end up with an SSID of ‘OpenWrt/passwd=changeme’. Shades of Linksys admin/admin.

People tend to be predictable. Take a War Drive with a small toolset using common default unames/passwords and see what it’s really like in the wild. :grimacing:

Might it be prudent to change “changeme” to something like “replace me with the WiFi password of your choice” to at least emphasize the importance of that step?

You assume that people leaving changeme unchanged have a better password than 'password'. Well maybe they have but usually is not better than changeme :stuck_out_tongue: . I've changed the password in the guilde to 'changemeplox' since changeme is too common and is prolly included in every small bruteforce list.

https://setuprouter.com/common-passwords/

We must also consider that this is no guide for newbies. Simply even to get to a point where it's usable you need to:

  • buy a supported router
  • know that you can install a custom firmware
  • decide that you want to install custom firmware
  • find the OpenWrt page :slight_smile:
  • be able to find a build for your model, download it and flash it
  • need an upgrade that is a serious upgrade and you cant just keep config
  • know that you cant just keep config
  • find a guide
  • use ssh, winscp, putty

So I guess if that person leaves changemeplox then meh. You also assumed my good intent :slight_smile:

Yea not happy with killer. Also the tcp configuration mess was not MS fault maybe. I've used the excellent tcpoptimizer https://www.speedguide.net/downloads.php where you can see your settings/ms settings/optimal. And my settings were way off default, I sure didn't change them so its prolly Killer software that did that.
Their services are kept in memory for nothing and utilize like 1% of cpu maybe more - doing nothing.

Will check smb settings, thanks.

1 Like

Installed the latest version, all OK.

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r11829-e3e939d8e6
 -----------------------------------------------------

dnscrypt has been included. dnscrypt will encrypt dns queries keeping them confidential against snooping ISP's. Fairly straight forward setup, but all command line. Let me know if you need help with the setup.

To enable dnscrypt can I just follow the wiki or is there some other procedure that I should keep in mind as you write?

Many thanks... again !

Thank you Izi very much !!
You are loveable :joy: :joy:

I am not sure that the guide has been updated for dnscrypt-proxy2.

If you take a quick search through the thread, there are several example of how to set it up. If you run into any problems feel free to ask the questions and I'll do my best to help you out.

Best Regards,

Hello David,

Thanks for your builds, I've been using them for about a year.
I've been however having issues with them lately and can't properly update to the latest versions.
I'm stuck on r12394-1d4f2ca610, anything newer will fail with my setup.
It looks like this is because your new releases don't have python2 packages anymore, and if I upgrade and reset settings, I'm unable to restore my packages from /etc/config/my_installed_packages and uploading my archive results in the network being unreachable.
I also may be doing something wrong since my / is mounted on a USB stick.

Hi David, I searched the thread and found a post where it seemed this procedure works:

https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Installation-on-OpenWRT

Downloaded the latest bits here (WRT1900AC v1): https://github.com/DNSCrypt/dnscrypt-proxy/releases/download/2.0.42/dnscrypt-proxy-linux_arm-2.0.42.tar.gz + extracted the zipped file.

This is what I did:

  1. connect ssh

  2. delete old dnscrypt-proxy in /usr/sbin/

  3. upload new dnscrypt-proxy to /usr/sbin/

  4. upload modified dnscrypt-proxy.toml file to /etc/config/

    orig (different places in file):
    listen_addresses = ['127.0.0.1:53']
    max_clients = 250
    #tls_cipher_suite = [52392, 49199]
    block_ipv6 = false

    new:
    listen_addresses = ['127.0.0.53:53']
    max_clients = 1500
    tls_cipher_suite = [52392, 49199]
    block_ipv6 = true

  5. update /etc/init.d/dnscrypt-proxy (change line):

    orig:
    CONFIGFILE=/etc/dnscrypt-proxy2/dnscrypt-proxy.toml

    new:
    CONFIGFILE=/etc/config/dnscrypt-proxy.toml

  6. /etc/init.d/dnscrypt-proxy enable
    /etc/init.d/dnscrypt-proxy start

  7. update /etc/config/dhcp and add lines to dnsmasq config:

    option noresolv '1'
    option localuse '1'
    option boguspriv '1'
    list server '127.0.0.53'

  8. /etc/init.d/dnsmasq restart

  9. check https://www.dnsleaktest.com

All OK, happy to share !

update 30/04: some tweaks inside dnscrypt-proxy.toml

2 Likes

you can :

. delete old dnscrypt-proxy in /usr/sbin/>

via ssh?

Yes, just connect via ssh to the router and as root do this: rm /usr/sbin/dnscrypt-proxy.

You can then upload the new binary to the same location. You can of course also keep the existing version (v2.0.34) but on the procedure post at least v2.0.36 was recommended.

In order to prevent leakage of queries from these local zones to upstream resolvers, ensure that you're running version 2.0.36 or later...

1 Like

Not sure if someone else can confirm this but on WRT3200ACM dnscrypt-proxy-android_arm does not work.
What worked for me was the dnscrypt-proxy-linux_arm package.

1 Like

The WRT1900AC has an ARM® Cortex®-A9 processor, so I took the ARM package.

https://github.com/DNSCrypt/dnscrypt-proxy/releases/download/2.0.42/dnscrypt-proxy-linux_arm-2.0.42.tar.gz

Will update my post as I have the wrong link in there I see now. Sorry for that.

@davidc502
Cool that you've added ntfs-3g.
Please also remove kmod-fs-ntfs. Its read only and only for small drives and messes with automount preventing ntfs-3g to be used.

Been making my own builds however I forgot to backup the build with working wifi from a few days ago so i decided to try your build. I really like opentomato theme. Very smooth interface and of course working wifi again lol.

I've created a wiki page with detailed instructions:
https://openwrt.org/docs/guide-user/installation/flashing_openwrt_with_wifi_enabled_on_first_boot
Its usable with any OpenWrt image also with Davids one.

I've got the error image check failed......

I suppose its a problem with the image then. Check if the image is for your device, check if its the upgrade image.

both are true:

openwrt-mvebu-cortexa9-linksys_wrt3200acm-squashfs-sysupgrade.bin

what are you flashing from?
You can also try sysupgrade from command line.