From my testing, ssh login to the router with key is around double as fast (about 2,5 seconds) when the build is compiled with gcc 4.6. With 4.8 it takes like 4-5 seconds to log in.

Could anyone else confirm this? Seems like a performance regression, and it most likely affects other things than ssh login.

Here's the build with gcc 4.6:

http://enduser.subsignal.org/~trondah/test/

I find it hard to believe that the compiler version change itself would be the culprit. But at the same time the mips16 support was turned on by default. You might testing 4.8, but turning mips16 off for the relevant modules.

So you're not seeing this with your barrier breaker builds? Flashing between a gcc 4.6 and 4.8 build the login time doubles for some reason it's reproducible here. I'll try with MIPS16 off.

(Last edited by arokh on 9 Jul 2014, 19:18)

Does anyone have this build's OpenVPN working with iphone or ipad openvpn client ?

What I have found sofar after many hours of testing and Googling is that IOS client does not support static keys.

@hnyman

Ok, seems like turning off MIPS16 did the trick.

EDIT: Found https://dev.openwrt.org/ticket/15209 same thing

@SeaTea

The official Android/iOS client doesn't support static keys. If you have a jailbroken iPhone I believe there are openvpn packages in cydia.

(Last edited by arokh on 10 Jul 2014, 00:04)

My iphone and ipad are not jailbroken so I have to use the official OpenVPN client. That works fine with ca-cert / user login when OpenVPN running on my QNAP NAS, which I am using normally.  Is any other config without static-key too heavy for WNDR3700 ?

There is no difference performance wise, I just picked a static key setup because I only need one client and it's alot less work to set up. Generating certificates would need easy-rsa scripts and openssl so would add size to the build as well. You can safely create certificates and use those instead of a static key setup if you need to.

Ad blocking is a bit annoying without a proper Pixelserv setup, otherwise all advertisements redirect to an error page in most browsers. Could you add pixelserv to the build and configure it, as long as it doesn't take up too much space?

Huh? Works fine in Safari, Chrome, IE? Should not give you an error page, the ad blocking resolves known hosts to 0.0.0.0 which effectively goes nowhere. You can turn it off if you like. What would be the point of running Pixelserv?

EDIT: Ah, replace the ad with a 1x1 gif. Not sure there's a need for that, do you have an example page that gives you an error?

(Last edited by arokh on 11 Jul 2014, 07:23)

Example: http://i.imgur.com/OUVGxxH.jpg

Also, I noticed that ad blocking doesn't appear to work on ads that are served via IPv6.

Yeah, doesn't look very clean. I think we can serve the gif with uhttpd, I'll look into it this weekend. Are there really that many IPv6 ads? Adding an entry for every host in the blocklist will double the filesize, I don't think that's worth it.

(Last edited by arokh on 11 Jul 2014, 12:04)

Ok, new build is out. Flash cleanly because it contains changes to UCI config.

@bcmccoy11

Thx for a good suggestion, seems to work great

(Last edited by arokh on 11 Jul 2014, 14:50)

Google Ads aren't blocked for me since they're served via IPv6.

Find the ones you need I can add :: entries for them in the hosts file.

I'm not sure what ones are IPv6 and what ones aren't, but I know that Google Ads are served over IPv6 whenever it's available, so the ad blocking doesn't work correctly. Beside the IPv6 bug, ad blocking works flawlessly over IPv4.

(Last edited by bmccoy11 on 11 Jul 2014, 22:05)

Well, its not a bug you just need entries for the hosts. Or just set your os preference to ipv4.

I have a question I am looking at the smcroute.conf can you explain what this line does? why is it 239 when the subnet is 255?
Join multicast group 239.255.255.250 on tun0
mgroup from tun0 group 239.255.255.250

# Route multicast to group 239.255.255.250 from tun0 to br-lan
mroute from tun0 group 239.255.255.250 to br-lan

also anyone have an idea when a final build will be available? I want to see a newer BB build that is stable.

(Last edited by wesleyhey on 12 Jul 2014, 06:42)

BB doesn't have a stable release yet...

@wesleyhey

http://en.wikipedia.org/wiki/Multicast_address

I'm using BB every day, it's rock solid.

@arokh I encounter a few errors with the new blocking solution via serving the gif.

For instance the world of tanks launcher was working fine with the 0.0.0.0 entry. Now the launcher produces script errors for the following url:

http://www.googletagmanager.com/gtm.js?dummy=0.06011478156453781&id=GTM-KR23QK

googletagmanger is part of the hosts file

+192.168.1.254    www.googletagmanager.com

Is there a way to fix this problem or is it a problem that needs no fixing? ;-)

By the way I highly appreciate the work you are doing for all of us.

thx in advance

What kind of script errors, and what kind of problem does this cause you except for the error message?

Hello Experts,

I have plugged an USB drive (ext3 format) into the router.
I guess it will be mounted as /mnt/sda1 automatically.

How do I read/write it from my Windows 7 PC please?
Do I need to install Samba?
If yes, what packages should I install? I can see 5 in Available Packages:
     luci-app-samba
     samba36-client
     samba36-server
     squid-mod-basic-auth-smb
     squid-mod-ntlm-auth-smb-auth
In what order I should install?

Thanks.

     [s] luci-app-samba is broken...  (BB / trunk)[/s]  my mistake, i misconfigured it...
     samba36-server is your choise, u have to config it over sftp, ssh or sth else. read http://wiki.openwrt.org/doc/uci/samba

(Last edited by benba on 17 Jul 2014, 10:40)

luci-app-samba works fine for me, that's all you need to install and it will automatically install all dependencies.

Just FYI anyone, if you change your LAN IP range, remember to update uhttpd to point to the new IP, or change it to 0.0.0.0 -  in the latest build, it specifically points to 192.168.1.1... had me scratching my head a little.

One question; the latest build has "alias" as an interface.. is this for the PixelServ?

EDIT: only change to 0.0.0.0 if you update your host file to redirect adblocks to another port/don't use port 80/have disabled ad block.

(Last edited by aaronta on 14 Jul 2014, 08:19)