[Cerowrt-devel] Intuition of this guy improved his 1, 5 Mbit DSL line

Hi, Story from slashodot: A guy moved to a low speed DSL connection. When describing what he's done to make it work better, among other things, he mentioned he configured QoS to be below his cap. He put 1100 Mb limit on a 1500 Mb line. He's not using the benefits of fq_codel on his TomatoUSB but

Re: [Cerowrt-devel] treating 2.4ghz as -legacy?

I'm not too keen on the -legacy thing, because it's not language agnostic. However it seems to be a trend. At 30c3 they do exactly that: https://twitter.com/arambartholl/statuses/416612652539191296/photo/1/large Best regards, Maciej On Mon, Dec 16, 2013 at 8:46 PM, Dave Taht wrote: > I have lo

Re: [Cerowrt-devel] going down the todo list

> -1) has minidnssd and upnp been working for others correctly? upnp is fine. Sadly, I can't get ssdpd to work since 3.8.x - any other users besides me? Anybody had success? My wired TV and wireless ps3 media server don't see the discovery packets over 239.255.255.250. Maciej _

Re: [Cerowrt-devel] notes on going for a stable release

On Tue, Jan 14, 2014 at 7:07 AM, Dave Taht wrote: > ** The wndr3800 is obsolete and fixing the next generation soon would be good On wndr3800 being obsolete... I was asked recently for a router recommendation. I wanted to say WNDR3800, but do we have anything better that is still that hackable? >

Re: [Cerowrt-devel] a new chipset and elsewhere a review of streamboost

Couldn't find a mention of *codel, but it would be sad to see vendors just sprinkle some traffic shaping on top of codel and brand it. It cheers me up that *codel is about to be picked up by the vendors, but not when customers are tricked to pay extra for SuperBoostNow [tm] or DoMeQuick [tm]... -

Re: [Cerowrt-devel] upnpd problem semi-solved

DLNA discovery is using SSDP. SSDP are multicasts which don't easily traverse between interfaces. minissdp is supposed to proxy between interfaces. I think it also keeps track of the devices so it can respond on behalf of other devices. I'm running 3.10.18-1. If there's a build you would suggest I

[Cerowrt-devel] Fwd: [dtaht/ceropackages-3.3] c873f6: Nuked old miniupnpd minissdpd miniupnc

Hi Dave, About minissdpd, I wasn't able to make DLNA work between wired and wireless interfaces on 3.10.28-4 and other versions since 3.8.x It only works when both devices are wired. If I ever find out what's wrong and get it to work, I'll let you know. Are you removing miniupnpnd completely? Be

Re: [Cerowrt-devel] Fwd: [dtaht/ceropackages-3.3] c873f6: Nuked old miniupnpd minissdpd miniupnc

On Fri, Feb 7, 2014 at 4:48 PM, Dave Taht wrote: > still don't know what to do about dlna/minidssdpd. Had something strange today. DLNA suddenly started to work! I'm on 3.10.28-4, cero's build of upnp, no minissdpd. The only thing that's different this time is that I've had a complete power outage

Re: [Cerowrt-devel] still on a quest for a new platform...

Some specs are surfacing: https://wikidevi.com/wiki/Netgear_R7000 On Mon, Feb 17, 2014 at 1:22 PM, Rich Brown wrote: > Dave, > >> Anyone tried the R7000? >> >> http://www.myopenrouter.com/download/52625/DD-WRT-K3-for-NETGEAR-R7000-Nighthawk-WiFi-Router-Kong-build/ > > Saw this review on Amazon t

Re: [Cerowrt-devel] CeroWrt-3.10.28-14 dev build released

On Thu, Feb 20, 2014 at 12:29 AM, Dave Taht wrote: > + upnpd and natpmp hopefully mostly fixed Last time you upgraded upnpd and removed minissdpd I must say DLNA worked flawlessly - only once I had the TV do a complete power off... I'll check with the new build and report, but I expect minissdpd

Re: [Cerowrt-devel] uplink_buffer_adjustment

On Tue, Feb 25, 2014 at 1:08 PM, Sebastian Moeller wrote: > TL:DR version, netalyzr probes a buffer depth that while existing has > not much relevance on the latency behavior under load for cerowrt. Yes, it doesn't have much relevance for latency where fq_codel or similar are employed. Bu

[Cerowrt-devel] comcast DNS

Story on Comcast DNS providing wrong DNS queries: http://beta.slashdot.org/story/199271 One day ISPs might start mangling 3rd party responses. Unless you use DNSCrypt, for which there is an OpenWRT package which works nicely with dnsmasq on Cero. Some people have asked for it on this ML. Maybe it

Re: [Cerowrt-devel] cerowrt-3.10.32-12 released dlna

Hi Kay, I managed to get DLNA working on 3.10.28 between: a) win7 wireless, ps3 media server b) samsung tv, wired Surprisingly it only started working for me, when I had a complete power outage on the TV. Can you try a restart of your readynas box while the router is up? It works for me without

Re: [Cerowrt-devel] expiring certs kill juniper routers

> 1 3 2 1 * /etc/make-webcerts.sh # regen the web certs every year feb 1 at 3am If for some reason I fail to have my router running on that feral day at 3am, it won't regenerate and we wait a year for the next run. Maybe it'd be better to have a daily job to check for that in case someone misses th

[Cerowrt-devel] "DNSSEC considered harmful"

Hi, I read a twitter conversation last night where somebody said DNSSEC is harmful. I asked why and I got this littany of issues: http://ianix.com/pub/dnssec-outages.html I was blown away not only by the sheer evidence of outages, but especially by the quotes in last sections: Miscellaneous and W

Re: [Cerowrt-devel] Upgraded to 3.10.38-1, DNS issues?

On Sat, May 10, 2014 at 8:42 PM, Aristar wrote: > dnscrypt-proxy is working great though (without needing a resolv > file), it runs as a daemon and sets up an encrypted connection to > OpenDNS servers which you then specifcy 127.0.0.1#2053 for dns > forwarding. I suggested this be added to CeroWRT

Re: [Cerowrt-devel] A stable cerowrt release in sight

at particular kernel might be important. Sorry for my ignorance, but are we affected? Best regards, Maciej Soltysiak ___ Cerowrt-devel mailing list Cerowrt-devel@lists.bufferbloat.net https://lists.bufferbloat.net/listinfo/cerowrt-devel

[Cerowrt-devel] [OT] DLink's StreamBoost sends traffic data to remove servers for analysis

Somebody brought this to my attention on twitter today. DLink's bufferbloat fight branded as StreamBoost has an associated Cloud Service with it. Users who opt in, get to have their data sent. The usual reassurances are made, but in this age of privacy paranoia, I would not be too comfortable opti

[Cerowrt-devel] Help on advertising IPv6

Hi, I have a tunnel from HE. I configured it on cero using the script on this page: http://www.bufferbloat.net/projects/cerowrt/wiki/IPv6_Tunnel >From cero it works, it pings 6 for example. Now, how do I advertise the prefix to my clients? They don't seem to get any. I thought that script worke

[Cerowrt-devel] Switch for home

Hi List, We're happily debloating routers and anything that runs Linux basically, but when it comes to home switches, how does one navigate the market to find a device tunable. A switch device running Linux, like those from mikrotik.com? Best regards, Maciej [1] https://gettys.wordpress.com/2013

[Cerowrt-devel] [OT] Net neutrality, Fast line vs the Benjamin Franklin quote.

d say, those who would trade liberated networks for efficient networks deserve neither." https://twitter.com/ioerror/status/487543279102464000 Best regards, Maciej Soltysiak @maciejsoltysiak ___ Cerowrt-devel mailing list Cerowrt-devel@lists.buffe

[Cerowrt-devel] How much disk space is required to build cero?

Hi list! Can anyone tell me, roughly, how much disk space is required to build cero nowadays? I understand the instructions [1] are still valid. I wanted to experiment on builds but always ran out of disk space and never could provide tested patches. This time I want to try an upgrade to dnscryp

Re: [Cerowrt-devel] Cerowrt build helper script

Hi Toke, I gave it a whirl and unfortunately I have a fail report. Maybe it's something I'm doing wrong, but this is the full output of running git clone, cd to cerowrt-next, ./scripts/cerobuild.sh and make. I emphasized errors with === Any ideas? Best regards, Maciej solt@dev2:~$ git clone htt

Re: [Cerowrt-devel] Fixing bufferbloat: How about an open letter to the web benchmarkers?

o here would sign? I would! Best regards, Maciej Soltysiak ___ Cerowrt-devel mailing list Cerowrt-devel@lists.bufferbloat.net https://lists.bufferbloat.net/listinfo/cerowrt-devel

Re: [Cerowrt-devel] Multicast forwarding

> On Sep 28, 2014 1:23 AM, "Kail" wrote: >> I'm trying to enable DLNA across wifi and wired on 3.10. >> >> PIM is already there is seems to be configured correctly (but for RP >> address, but should not need this). Ever since this stopped working for me I just gave up and thought it must be my dev

[Cerowrt-devel] [OT] father.io - Real Life Massive Multiplayer FPS vs cellular bufferbloat

Hi list, Saw this today. Check out the promo video of this Real Life MMO FPS called father.io (http://father.io/) Seeing this made me wonder how cellular bufferbloat is going to affect the real game play and whether these kinds of applications could actually be the driver to push ISPs for smart q

[Cerowrt-devel] Available MACs in dropbear

Hi list, For some reason dropbear doesn't have modern MACs for SSH. On cero 3.10.36 I've got Dropbear SSH client v2013.59: root@cerowrt:/etc# ssh -m help ssh: Available MACs: hmac-sha1-96,hmac-sha1,hmac-md5 (MD5 BTW...) However, dropbear since v2013.56 has support for sha2 (https://matt.ucc.asn.

Re: [Cerowrt-devel] Available MACs in dropbear

On Fri, Oct 24, 2014 at 7:52 PM, Michael Richardson wrote: > > The reason why it hurts me is that I have servers configured according > > to bettercrypto.org and I can't connect from cero (rare occasions, but > > 1) MD5 != HMAC-MD5. That I didn't know, thanks Michael. For some reason bette

Re: [Cerowrt-devel] Available MACs in dropbear

On Fri, Oct 24, 2014 at 8:54 PM, Michael Richardson wrote: > > Maciej Soltysiak wrote: > >> The reason why it hurts me is that I have servers configured > >> according to bettercrypto.org and I can't connect from cero (rare > >> occasions, bu

Re: [Cerowrt-devel] Available MACs in dropbear

Funny thing. Latest dropbear still has these 2 commented out for some reason. Maybe it's worth checking upstream. Maciej On 25 Oct 2014 15:36, "Dave Taht" wrote: > I'd argue more in favor of updating to the latest dropbear, pulled anyway. > > On Sat, Oct 25, 2014

[Cerowrt-devel] TCP Fast Open in polipo

pdump to show it actually gives anything. Before I attempt to generate a tcpdump I thought I ask here. Does anyone have a tcpdump showing polipo benefits from TFO? Or can do one easily to support adding this upstream? Best regards, Maciej Soltysiak [1] https://github.com/jech/polipo/issu

Re: [Cerowrt-devel] ar71xx CC builds and tc

Hi, On trunk with ceropackages, I'm getting errors when installing sqm-scripts: root@OpenWrt:/etc# opkg install sqm-scripts Installing sqm-scripts (1.0-3) to root... Downloading http://downloads.openwrt.org/snapshots/trunk/ar71xx/generic/packages/packages/sqm-scripts_1.0-3_all.ipk . Multiple pack

Re: [Cerowrt-devel] eero gains competition in plumewifi

On Mon, Jun 20, 2016 at 8:16 AM, Dave Taht wrote: > I sure wish I knew how they are implementing diversity routing and if > they are bothering to pay attention to make-wifi-fast > > https://www.plumewifi.com/ "Plume is a cloud coordinated WiFi system that exponentially increases the signal stre

[Cerowrt-devel] BBR congestion control algorithm for TCP in net-next

Hi, Just saw this: https://patchwork.ozlabs.org/patch/671069/ Interested to see how BBR would play out with things like fq_codel or cake. "loss-based congestion control is unfortunately out-dated in today's networks. On today's Internet, loss-based congestion control causes the infamous bufferbl

Re: [Cerowrt-devel] one first landing recorded live at ietf

Not sure if anybody uploaded it, but it's processing now and will be available when done at: https://youtu.be/UZDZ-86SZzI Very nice tune, Dave! Let me know if you want to change anything in the metadata. On Tue, Apr 2, 2019 at 2:45 PM Dave Taht wrote: > I have lousy bandwidth at the moment. Co

Re: [Cerowrt-devel] one first landing recorded live at ietf

On Wed, Apr 3, 2019 at 1:50 PM Dave Taht wrote: > Is there a way to edit my tattered voice in the metadata? :) > Haha, not yet I suppose. I hope to fix that the next time I lay it down. But it was the first > time I'd ever got it on video, > and I'm glad all the jokes worked. That was a really f

Re: [Cerowrt-devel] cerowrt 3.3.8-1 and related

Hi Dave, Cool, just flashed my router with the 3.3.8-3, going to use it at home. About codel, does it mean that I shouldn't enable anything in AQM and QOS tabs and just edit /usr/sbin/simple_qos.sh to tune my down/up bandwidth? Regards, Maciej On Fri, Jun 8, 2012 at 4:54 PM, Dave Taht wrote: >

[Cerowrt-devel] [OT] DNS redirected to third-part​​y servers: www.google​​.com ?

o nslookup www.google.com172.30.42.97 (or .1) I get different results, but never this 46.28 nonsense. I get same results when I query my ISP DNS or some other major ISP's DNS in my country. When I do diagnostics from cerowrt, it shows 46.28.x.y. Thanks in advance for having a go with the test! Best regards, M

Re: [Cerowrt-devel] [OT] DNS redirected to third-part​​y servers: www.google​​.com ?

ask. Regards, Maciej On Thu, Jun 14, 2012 at 8:42 PM, Dave Taht wrote: > On Thu, Jun 14, 2012 at 2:32 PM, Maciej Soltysiak > wrote: > > Hi, > > > > > > A bit off topic, not sure if this is cerowrt related but I know you guys > use > > netalyzr. > >

Re: [Cerowrt-devel] no 3.3.8-4 yet

Hi Dave, About crystalizing dev builds. I think we could have a small set of conditions for clear "dev" builds, say: "at least 4 out of 5 dedicated testers reporting they could run it for at least 48 hours without crashes, unplanned reboots or unexpected network behaviour". You could setup a recu

[Cerowrt-devel] WNDR6300 - 802.11ac device - any good?

Hi, Netgear has recently released a 802.11ac device dubbed WNDR6300 with 128 MB Flash and 128 MB RAM. Not sure what chip it has, probably BCM4360. Anybody knows if this is as open as WNDR3800 to allow cerowrt and open the door for even more problem with gigabit wireless? ;-) Regards, Maciej

Re: [Cerowrt-devel] WNDR6300 - 802.11ac device - any good?

much as I like > living in a yurt, I kind of need a car to survive in the US as one > problem I'm dealing with now. > I wish things get better with you soon, even at expense of your tremendous volunteer work. Best regards, Maciej Soltysiak _

Re: [Cerowrt-devel] Cerowrt 3.3.8-10 is released

Hi Dave, Thanks for a good, lengthy update. I wish you pleasant time travelling. One question on ECN though. On Tue, Jul 10, 2012 at 3:43 AM, Dave Taht wrote: > - ECN dropping - after several high level conversations with many > people smarter than me, I decided that dropping ECN packets at a

Re: [Cerowrt-devel] Cerowrt 3.3.8-10 is released

different firmware. Could that be a known issue? Regards, Maciej On Wed, Jul 11, 2012 at 6:56 PM, Maciej Soltysiak wrote: > Hi Dave, > > Thanks for a good, lengthy update. I wish you pleasant time travelling. > > One question on ECN though. > > > On Tue, Jul 10, 2012 at 3:4

[Cerowrt-devel] Different BIND setup per interface

Hi guys, I am thinking of having clients on my -guest intefaces to resolve DNS not from root, but from OpenDNS. This is to have the guests (which may be neighbors, neighbor's kids, visitors) to be able to use DNS that has some filtering ON: scam, malware, etc. I am OK to use normal DNS internally

Re: [Cerowrt-devel] Different BIND setup per interface

Looks like using a view, match-clients and forward should work. Will try and see. On Sun, Jul 15, 2012 at 7:07 PM, Maciej Soltysiak wrote: > Hi guys, > > I am thinking of having clients on my -guest intefaces to resolve DNS not > from root, but from OpenDNS. > This is to have th

[Cerowrt-devel] test, please ignore.

test, please ignore. maciej ___ Cerowrt-devel mailing list Cerowrt-devel@lists.bufferbloat.net https://lists.bufferbloat.net/listinfo/cerowrt-devel

[Cerowrt-devel] [PATCH] OpenDNS bind config for guest wifi. Was: Re: Different BIND setup per interface

Hi guys, You might want to use it or dismiss it completely but here's what I was thinking of in previous email with a patch. Utilize BIND views in CeroWRT to make Guest WiFi interfaces use OpenDNS.com servers, keeping root resolution for wired and non-guest wifi. Rationale: 1) I can use whatever

Re: [Cerowrt-devel] [PATCH] OpenDNS bind config for guest wifi. Was: Re: Different BIND setup per interface

I forgot to mention that it works because BIND assigns views in order in the named.conf file, so guests will match the "guests" view first, non guests, will use the "us" view". On Wed, Aug 1, 2012 at 8:12 PM, Maciej Soltysiak wrote: > Hi guys, > > You

Re: [Cerowrt-devel] cerowrt 3.3.8-17 is released

Hi Dave, Very nice! So far, the GUI didn't break after changing SSID which is positive ;-) For this release, what's the proper way to work with QoS? Editing simple_qos still and running it still? Regards, Maciej On Mon, Aug 13, 2012 at 8:08 AM, Dave Taht wrote: > I'm too tired to write up a fu

Re: [Cerowrt-devel] [Cerowrt-users] Cerowrt_question

On Sat, Aug 18, 2012 at 7:57 PM, Dave Taht wrote: > On Sat, Aug 18, 2012 at 3:47 AM, Oliver Niesner > wrote: >> But at this point i have some problems with understanding: I run the cerowrt >> as a second router in my >> normal network, so the gateway to the internet is my "normal" router with >>

Re: [Cerowrt-devel] cerowrt 3.3.8-17: nice latency improvements, some issues with bind

> Good idea, but you need DNS to find that server, and you need > time to do DNSSEC. How about this: 1) do a 1 time `host time.nist.gov 8.8.8.8` and feed that to NTP config file 2) make NTP get time from the IP of time.nist.gov resolved from step 1 3) start bind with dnssec p.s. you could change 8

Re: [Cerowrt-devel] cerowrt-related donations are now being accepted

Dave, I took the liberty of advertising this among friends and facebook groups. I will also donate later today! Regards, Maciej On Wed, Sep 5, 2012 at 10:13 PM, Dave Taht wrote: > All: > > I have finally got around to putting up a donations page for the > CeroWrt portion of the bufferbloat effo

Re: [Cerowrt-devel] next cerowrt release plan (of sorts)

On Sun, Sep 16, 2012 at 4:02 PM, Dave Taht wrote: > Other things in my backlog are two multicast responder-like daemons - > but can't remember their names mldna? It was minissdpd and miniupnpd, which are pre-requisites for allowing minidlna to work between multiple network segments like we have in

Re: [Cerowrt-devel] understanding_cerowrt_buildsystem

On Thu, Sep 20, 2012 at 9:10 AM, Oliver Niesner wrote: > Hi! > > After a zillion tries i managed to build a cerowrt image for myself. I can only say I feel your pain as I don't think I've ever succeeded either. Which sucks as it prevents me from supplying proper patches for Dave to add minidlna,

Re: [Cerowrt-devel] understanding_cerowrt_buildsystem

On Fri, Sep 21, 2012 at 5:35 PM, Dave Taht wrote: > My overall thought at the moment is to hold a "building > openwrt/cerowrt google hangout" with as many participants as possible, > get some your versions built, record the thing, see what barriers > there are to making it easier, and smash them.

Re: [Cerowrt-devel] How to close default open firewall ports in 3.3.8

This looks like an FAQ item :-) I'll have a look at the wiki. On Oct 10, 2012 7:22 PM, "Dave Taht" wrote: > Several ports are open, but filtered, using various means. Does this > tool not show filtered? > > For example, rsync and ssh are enabled but the default settings in > /etc/xinetd.conf proh

Re: [Cerowrt-devel] grants and funding ops

Looks like we meet all the criteria! Is there a non profit registered for cero? Maciej On Oct 13, 2012 5:25 PM, "Dave Taht" wrote: > I keep my eyes peeled for new ways to keep the momentum going. Saw > this one today. > > > http://www.cisco.com/web/about/doing_business/open_source/givebacks/micr

[Cerowrt-devel] 802.11/g lost after 13 days - 3.3.8-26

Hi, My usage of cerowrt as main router is very easy in terms of stres testing. I mean I just use it for a laptop, an android tablet (nexus 7), sometimes another laptop and that's almost it. Anyway, WNDR3800 with 3.3.8-26 has been up for 13 days, with only miniupnpd and minissdpd installed and jus

Re: [Cerowrt-devel] bufferbloat and the web service providers

What are the heaviest (amount of elements, css, images, scripts, js bugs, ad trackers, all that filth) websites out there? I wonder if it'd be worthwhile to demo loading that in a standard bloated environment and compare with debloated setup? Maybe that could be a variant of your idea below but ge

Re: [Cerowrt-devel] Bufferbloat at LUG talk - Meeting Report

Excellent job Richard! Those slides are very clean and informative and you got fantastic real life user reports! Point #1 is very common: lots of behind-the-scenes javascript, buffering, asynchronous requests, facebook chat box and updates, etc. I was trying to make a mock conversation for the pur

[Cerowrt-devel] How to address IT Pros to the issue?

Hello, Real Example #1: "We have a 5Mbps CIFS partition and XXX was saturating it so no one could print, use office applications (e.g. Word would hang trying to get printer parameters across the network), network shares, anything that uses CIFS basically. We asked the network profiling guys to inv

Re: [Cerowrt-devel] bufferbloat and the web service providers

I just saw another of Oatmeal's comics ( http://theoatmeal.com/pl/state_web_winter_2012/google_fiber) and it hit me. He's a swell guy, his comics are brilliant, insightful and influential (you know he raised about a million bucks to buy g

Re: [Cerowrt-devel] CeroWrt 3.6.11-2 is out with ipv6-support package, bleeding edge dnsmasq, upnp,

Fantastic! I'll test the build with a upnp client and an ssdp device mid next week. Happy holidays! Maciej On 23 Dec 2012 21:08, "Dave Taht" wrote: > I am not in a position to test this release at all - I gave my last > wndr3800s to a deserving student in Paris, and the only other ones I > have

Re: [Cerowrt-devel] Latest IPv6 Updates

Upnp works fine. Ssdpd doesn't, not sure why, it's late now. will test tomorrow. p.s. /use/shin/simple_qos fails on non-existant /etc/functions.sh Am I doing something wrong? Maciej On 28 Dec 2012 21:19, "Dave Taht" wrote: > On Fri, Dec 28, 2012 at 12:56 PM, Steven Barth wrote: > > Hi guys, >

Re: [Cerowrt-devel] Latest IPv6 Updates

Thanks for mergin upnp/ssdpd stuff! Upnp works fine. Ssdpd doesn't, not sure why, it's late now. will test tomorrow. p.s. /use/shin/simple_qos fails on non-existant /etc/functions.sh Am I doing something wrong? Maciej On 28 Dec 2012 21:19, "Dave Taht" wrote: > On Fri, Dec 28, 2012 at 12:56 PM,

Re: [Cerowrt-devel] TFO crashes cerowrt 3.7.1-1

I am seeing something strange here, with polipo related to TFO but also DNS. When I just took 3.7.1-1 and set my windows 7 laptop to use gw.home.lan:8123 as http proxy it didn't work. What I observed was: A) after quite a while polipo's response to browser was 504 Host www.osnews.com lookup failed:

Re: [Cerowrt-devel] TFO crashes cerowrt 3.7.1-1

Oops, apologies if email was formatted weirdly... On Fri, Jan 4, 2013 at 9:42 PM, Maciej Soltysiak wrote: > I am seeing something strange here, with polipo related to TFO but also > DNS. > When I just took 3.7.1-1 and set my windows 7 laptop to use > gw.home.lan:8123 as http proxy it

[Cerowrt-devel] slightly OT: WMM

Hi, Aside from reducing buffers and changing the queue management tactics, we're still interested in QoS and that's why we have tc filters, iptables MARKing, etc. With regard to WLAN, what do you think about enabling or disabling WMM on WLAN NICs and ap/routers? Supposing that applications or ot

[Cerowrt-devel] Nokia decrypts user's HTTPS to compress to improve speed

http://yro.slashdot.org/story/13/01/10/1356228/nokia-admits-decrypting-user-data-claiming-it-isnt-looking Have a look at what corporations resort to when they're in need of serious debloating and things like TCP Fast Open? :-| Regards, Maciej ___ Cerowr

Re: [Cerowrt-devel] Nokia decrypts user's HTTPS to compress to improve speed

t malicious code knowing this might steer the compromised browser+dodgy_cert+phone to rob you of money in your bank. Maciej > ---Original Message- > From: "Maciej Soltysiak" > Sent: Thursday, January 10, 2013 9:46am > To: cerowrt-devel@lists.bufferbloat.net > Subject

Re: [Cerowrt-devel] DLNA with wired and wireless devices

On Wed, Jan 16, 2013 at 10:32 AM, Justin Madru wrote: > Hi, > > I have a wired DLNA server (minidlna) on the wired network, but require > wireless devices to have access to it. It seems that with the default setup > (the split of the wired and wireless into separate networks), devices on > the wir

Re: [Cerowrt-devel] cerowrt 3.7.2-3 released, still in a battle with ipv6

Good build! I have to report that the issue with polipo, DNS and TFO that I observed with 3.7.1-1 seems resolved. Test with and without TFO. Ketan, I won't post a bug unless it appears again. Regards. Maciej On Wed, Jan 16, 2013 at 12:37 PM, Dave Taht wrote: > It's at: > > http://snapon.lab.buff

Re: [Cerowrt-devel] cerowrt 3.7.2-3 released, still in a battle with ipv6

3 at 10:48 PM, Dave Taht wrote: > At least one (possibly not new) unaligned exception trap has reared its > head in addrconf_prefix_rcv. > > https://www.bufferbloat.net/issues/419 > > This is a bad place for one! a network burp heisenbug > > On Wed, Jan 16, 2013 at 4:12 PM, M

Re: [Cerowrt-devel] TFO crashes cerowrt 3.7.1-1

On Mon, Jan 14, 2013 at 7:11 AM, Dave Taht wrote: > The routing cache got eliminated between 3.3 and 3.6, and there were > all sorts of changes to it over the last 6 releases that have been > bothersome. Ok, you might be onto something. It got eliminated in 3.6.x; So I checked a few things with

Re: [Cerowrt-devel] Cerowrt 3.7.2-4 released, multicast (PIM and IGMP) fixed, kernel matches 3.3.8 again

On Thu, Jan 17, 2013 at 2:41 PM, Dave Taht wrote: > It turned out the igmp entries in /proc ARE being stripped out by a > openwrt patch... which I killed... so I built it again > What was the purpose of the patch, do you know? > Hopefully this will resolve the dlna issue and others. It do

Re: [Cerowrt-devel] DLNA with wired and wireless devices

Justin, please have a go with latest 3.7.2-4, I tested and it works for me with devices on se00 and sw00 and sw10. It's not enabled for guest wlan: http://snapon.lab.bufferbloat.net/~cero2/cerowrt/wndr/3.7.2-4/ Maciej On Wed, Jan 16, 2013 at 10:32 AM, Justin Madru wrote: > Hi, > > I have a wired

Re: [Cerowrt-devel] cerowrt 3.7.2-3 released, still in a battle with ipv6

Maciej On Wed, Jan 16, 2013 at 10:53 PM, Maciej Soltysiak wrote: > Saw this in dmesg too: > > [ 720.03] [ cut here ] > [ 720.03] WARNING: at > /build/cero2/src/Cerowrt-next/build_dir/target-mips_r2_uClibc-0.9.33.2/linux-ar71xx_generic/compat-wi

Re: [Cerowrt-devel] cerowrt 3.7.2-3 released, still in a battle with ipv6

FYI /etc/config/dhcp is compiled into /var/etc/dnsmasq.conf, I believe /etc/dnsmasq.conf is not used On 19 Jan 2013 02:40, "Richard Brown" wrote: > Dave, > > Could you post the generated dnsmasq.conf file and your network file > and cc steven barth? > > > Here's my /etc/dnsmasq.conf file and

Re: [Cerowrt-devel] fq_codel through Tor

Funny you should ask. Being inspired by Tor's Jacob Applebaum's keynote at #29C3 ( http://isoc-ny.org/p2/4650 ) I started a tor node. Without throttling the effect on my box was similar to bittorrent : instantly dozens of connections consuming in total 4-5 MB/s inwards and outwards. Observed in ipt

[Cerowrt-devel] So, what's a good cable modem?

My wndr3800 is connected to ISP-supplied Cisco EPC 3925 ( http://www.cisco.com/web/consumer/support/modem_DPC3925.html ) I believe it's locked out in terms of shell access so controlling it is next to impossible. So, what's a good cable modem for debloating? Any net gear stuff? Maciej ___

Re: [Cerowrt-devel] dnsmasq ipv6 stuff

Something doesn't add up for me. Editing /etc/dnsmasq.conf and restarting yields a process: /usr/sbin/dnsmasq -C /var/etc/dnsmasq.conf Now, /var/etc/dnsmasq.conf, being compiled from /etc/config/dhcp doesn't seem to have the settings from /etc/dnsmasq.conf Also, things like ra-names in /etc/dnsma

[Cerowrt-devel] 250 Mb/s

FYI, got a leaflet today from my ISP with an offer of "up to 250Mb/s" FTTH. I wonder what software stack is used in FTTH modems and how hackable are they and would openwrt ever run on such NTUs. Maciej ___ Cerowrt-devel mailing list Cerowrt-devel@lists.

Re: [Cerowrt-devel] arp for 0.0.0.0

On 25 Jan 2013 17:23, "Michael Richardson" wrote: > It also seems that there is no control to keep dnsmasq from answering > on my ge00.I guess some trojans try to use me for DOS amplication by > asking for isc.org continuously? There is. Although dnsmasq listens on 0.0.0.0:53 and :::53 it is

Re: [Cerowrt-devel] cerowrt-3.7.3-2 released

I think Dave was thinking of encrypting uftp traffic, which uses RSA. How random does that have to be? Depends how sofisticated is your adversary I guess. Do we only want to prevent clear text transfers or make it hard to decrypt? On Mon, Jan 21, 2013 at 10:47 PM, wrote: > How random do you need

Re: [Cerowrt-devel] cerowrt-3.7.4-3 released

Fantastic to hear about recent dhcpv6 developments! I haven't had the time to use the tweaks advertised to make it working on 3.7.3-2 nor to test 3.7.4-3 but I found something else... Since the last builds were about making ipv6 more usable I played with some proxies. I added this to /etc/hosts to

Re: [Cerowrt-devel] blocking probes...

I've said it before and I'll say it again: iptables -I zone_wan -j DROP And if you really need access from wan INSERT a rule before that DROP. Regards, Maciej On Mon, Jan 28, 2013 at 4:44 PM, Török Edwin wrote: > On 01/13/2013 11:15 AM, Török Edwin wrote: > > On 01/13/2013 06:50 AM, Dave Taht w

Re: [Cerowrt-devel] Fixing simple_qos.sh

On Tue, Jan 29, 2013 at 10:21 PM, Sebastian Moeller wrote: > Any idea of how to determine link speed by a script? I assumed Dave meant this to be as simple as fetching a file and timing that. Basically a quite script form of http://speedtest.net/ > As I intend to disable upnp it would

Re: [Cerowrt-devel] stanford talk/deluged in hardware/yurtlab

On Sun, Feb 3, 2013 at 7:10 PM, Dave Taht wrote: > On Sun, Feb 3, 2013 at 10:03 AM, Mark Constable wrote: > >> On 2013-02-03 09:18am, Dave Taht wrote: >> > I'm grumpy, as it doesn't have an esata interface internally, >> apparently. >> >> https://www.google.com?q=HP+N40L+MicroServer >> >> I know

Re: [Cerowrt-devel] ping icmp ttl exceeded

On Mon, Feb 4, 2013 at 8:41 AM, Dave Taht wrote: > Heh. I turned out I'd left mtr running in another window... Yeah, exactly. Decreasing TTLs suggest traceroute tools :-) As Ketan noted, it's best to decode what's in the ICMP TTL exceeded payload to see what packet triggered this. traceroute u

[Cerowrt-devel] Bulding cero

Right, I wanted to add TFO support to privoxy so I had another go at building cero according to the wiki. http://www.bufferbloat.net/projects/cerowrt/wiki/Building_CeroWrt_on_your_own_machine 1. One thing is that it bails at the same place (fetching pimd) as last time [1]. 2. The other is that it

Re: [Cerowrt-devel] Switch Issue

option device rtl8366s option port 5 option led 2 Best regards, Maciej Soltysiak On Wed, Feb 20, 2013 at 5:01 PM, William Katsak wrote: > Hello, > > Just wanted to see if anyone has seen an issue like this: > > I have a 3800 running S

Re: [Cerowrt-devel] Switch Issue

Hi David, Yup, I know, I'm not using vlans now. What I meant is that when I tinkered with it, I screwed wired connections. Hence I offered a working-ethernet config to William. William, did you have any luck fixing your issue? Regards, Maciej Soltysiak On Wed, Feb 20, 2013 at 8:29 PM,

Re: [Cerowrt-devel] collecting some data?

On Mon, Feb 25, 2013 at 9:13 PM, Dave Taht wrote: > I have been collecting statistics on the behavior of the 3.7.5-2 version > of cerowrt, and perhaps y'all out there can help. I've been doing four > repeatable tests. > > I feed the attached file into the chrome web page benchmark and run it 4 >

Re: [Cerowrt-devel] collecting some data?

On Mon, Feb 25, 2013 at 9:39 PM, Maciej Soltysiak wrote: > On Mon, Feb 25, 2013 at 9:13 PM, Dave Taht wrote: > >> I have been collecting statistics on the behavior of the 3.7.5-2 version >> of cerowrt, and perhaps y'all out there can help. I've been doing four >&

[Cerowrt-devel] Google working on experimental 3.8 Linux kernel for Android

Hiya, Looks like Google's experimenting with 3.8 for Android: https://android.googlesource.com/kernel/common/+/experimental/android-3.8 Sounds great if this means they will utilize fq_codel, TFO, BQL, etc. Anyway my nexus 7 says it has 3.1.10 and this 3.8 will probably go to Android 5.0 so I hope

Re: [Cerowrt-devel] cerowrt 3.8.6-2 released

Fantastic! I'm still on 3.7.4 but it works great for me. On Sun, Apr 7, 2013 at 1:35 PM, Dave Taht wrote: > todo list: > > *** TODO update iproute2 (3.7) > Hint: actually there's 3.8.0 but will fail to build on such a silly thing as this: error: ignoring return value of ‘fgets’, declared w

Re: [Cerowrt-devel] atomic route updates?

I think I remember to fix ssdp you brought some of route cache and igmp back. Do we know if cero routed setup without route cache can work with ssdp? I wouldn't like to force bringing back route cache just for ssdp. I'm OK to test this scenario. Maciej On 20 Apr 2013 18:01, "Dave Taht" wrote: >

Re: [Cerowrt-devel] cerowrt 3.8.8-4 released

On Wed, Apr 24, 2013 at 10:55 AM, Dave Taht wrote: >++ fq_codel is on by default on ALL interfaces with default quantum of > 300 > Including loopback? > (yes, openwrt has obsoleted pfifo_fast!) > Yeah, if this gets picked up by regular distros, looks like some portions of LARTC (lar

Re: [Cerowrt-devel] cerowrt 3.8.8-4 released

On Thu, Apr 25, 2013 at 7:56 AM, Dave Taht wrote: > simplest most closely models the ns2 testing cablelabs did. By being > simpler, it has less bugs. > > So if you could try that under a variety of workloads, particularly > with bittorrent I think it would be interesting... I still think the > mo

  1   2   >