ds281 wrote:fatboy wrote:TeeZee, are you willing to share your clean up patch and config file with us? I also have been picking out patches from arokh's build to make a custom image for 2 of my WNDR3700v1 and a WNDR3800. My focus is primary in creating a stable optimized gateway like you do. I have a NAS for all my medias so I don't really need my gateway to be a media server.
My image currently include all the features in the first post with the following exception.
Removed:
- MiniDLNA
- SAMBA server
- HD-idle
Added:
+ OpenVPN
+ multiwan
+ iPhone USB Ethernet Driver - for tethering as 2nd WAN connection
+ wondershaper
I'd be interested in your build - sounds exactly like what I'm after too. Any chance you'll make it publicly available?
Sure I'll share my build/config, whatever, if it helps anybody. But it's not so special right now.
I too want to share some experiences that may help others in not making my mistakes.
I for one have been searching for days why my wireless internet bandwidth sometimes was up to the full 60Mbps and sometimes kept stuck at around 20Mbps (tried different builds and that takes time!) only to find that running inSSIDer (great tool!) kills wifi throughput! So the build was fine after all!
I also spent a lot of time finding the cause why my router had errors at the system tab and had lost all configuration changes after reboot. It appeared I had 2 problems: the image was too large, so the jffs overlay did not mount (so config was on volatile memory). Number 2 was a type in my predefined config that crashed Luci on the system tab.
My build is now simple and stable based of both the config of arokh and the latest attitude adjust release.
This is what I would like to work towards:
stay close to the stable attitude adjust sources and first fix instabilities before experimenting with features. Tag stable releases
a stable build that has all basic router functionality on board (openvpn, l2tp, IP4, IP6, shaping, etc).
a build that works out of the box (like arokh did, wireless available for easy config, most work is done already!) Just restore personal configuration using Luci and off go!
which works well with USB-overlay so anybody can install it's desired custom packages
all changes at least a *bit* documented (why the change?)
optimised for speed and size (and tx-power/CRDA-reg settings, will look into it once more, to really confirm it doesn't work)
predefined firewall rules for VPN etc ready to activate.
preconfigured zones: public, lan, wan, vpn
dnsmasq configured with dnsmasq.d directory & ad banning includes
Add ons:
I made a public hotspot using lua (a separate zone, dnsmasq script to trigger generation of a ticket, lua for web interface, iptables for redirects and blocking, etc) - I want to make it a package.
I want to use iptable rules to account certain traffic (lua script, web interface, + simple iptables "--comment" rules = nihil cpu) E.g. account for all news traffic = iptables
I personally do like accessing the router with samba, so if size allows it I will include a (minimal?) samba. (I believe arokh did some crunching excluding nmbd)
I want to look into the solution of upgrading an USB-overlayed router when a new kernel is used; currently the overlay is switched off automatically and all packages must be removed and reinstalled manually. I would like that scripted.
I am now looking into the required modules for IPTABLES to get firewall rule"L2TP ESP" working:
config 'rule'
option 'target' 'ACCEPT'
option 'name' 'L2TP ESP'
option 'src' 'wan'
option 'proto' 'udp'
option 'dest_port' '1701'
option 'extra' '-m policy --strict --dir in --pol ipsec --proto esp'
option enabled 0
[EDIT: the above requires "iptables-mod-ipsec"]
A wiki for those who are looking for similar build would be handy... Anybody who wants to contribute?
Ragards,
TeeZee
(Last edited by TeeZee on 9 Dec 2012, 23:41)