r/openwrt

I have a GL‑Inet router. I flashed OpenWrt on it and use the adblock package. One domain needed for a game keeps being blocked even after I add it to the allowlist and reboot the router. How can I fix this?

I’ve recently dipped my toes into the self hosted landscape this year and I’m happy with my setup using tailscale to access all of my self hosted services behind my normal plain old router. I played around with openwrt like 15-20 years ago and enjoyed breaking my old router and fixing it and optimizing it.

Is there a better solution to accessing my streaming services remotely and securely using an openwrt router that doesn’t involve using cloudflare to constantly update my isp’s assigned ip in a vpn?

Looking for some input. Idk if this is the right subreddit or if anyone has solutioned this before.

Hey there. I’m just wondering what people are using to mange their networks with multiple aps and a router. I have tried openwisp but can not for the life of me get it installed. I have two google wifi pods running openwrt and an x86 machine acting as the main router.

Problem:

Let's say I have a domain like messaging-app.europa.eu, with an SSL certificate, and I use it to distribute a PWA. In the case of an internet blackout I would still like for the app to retrieve updates from a local mesh.

Possible solution:

This is the solution I'm currently imagining:

• Deploy a bunch of OpenWRT routers with some custom software
• The smartphone connect to one such router via wifi
• The PWA tries to connect to the domain https://messaging-app.europa.eu in the absence of internet
• The router has a copy of the SSL certificate, so it can intercept the request and generate valid HTTPS responses from a locally running server

A user would connect to the wifi, exchange messages with other peers connected to the same station without relying on an internet connection.

Questions:

• Do I just need a copy of the SSL certificate on each router, or is there other part of the stack that I should patch? (e.g.: DNS)
• Is it possible to intercept and patch the connection as I mentioned?
• Am I missing something?

Prodrome:

I work for the government and I've been asked to demo a solution for enabling communication during an internet blackout (earthquake, war, ...) using a mesh/p2p network.

The path I'm taking right now is to build a PWA that would work offline, and rely on customized openwrt routers, because it seems that the other solution, WiFi NAN, works well on android phones but not on iphones, due to malicious compliance on Apple side.

Ok so I got burned with Asus tuf be3600, it was buggy connection freezers and vlan bugs. Returned it and after quick search bought Asus be88, flashed Merlin, works like a charm but the main issue isn't sorted still missing coverage in my garden unlike with ild 2.4g Asus running on opentomato.

Last but not least i invested great money in the router where I won't use most of the features it offers. But I'm still running on old Synology ds214se...

So the idea now is to return yet again the Asus be88 and go for flint2 which i can now order from Ali for about 100 euro and use rest of the money to buy a newer NAS.

Spec wise on paper flint2 works great for me tge main question is does it really works well in reality? Can you guys recommend it?

I need one main mlo network, one 5ghz for my tv, and one 2.4 for my iot and car charger. I need two lan vlans, and vlan/pppoe for my wan isp. Some DHCP, mac reservations, USB/5g/lte fail over, some basic fw, ideally some DNS setup to add some blocking DNS and ideally also wire guard client for proton vpn.

It will run about 5 real clients 2-3 wired, glan is enough, and 2-3 wifi clients on WiFi 6. Rest is just noise and iot with about 10-20 small iot devices.

What do you say, will flint2 work for me well? The specs are similar to be3600 which I would happily use but it was Buggy....

P.s. what kind of guy is the flint 2 running with the latest openwrt? Tied luci on my travel cudy and it was a hell to manage.

EDIT: Now I know that I wont sort out the garden coverage with just one AP these days as it was possible in the old days and thats fine I may add additional mesh AP. What is important here is the fact that I currently have a router which is too expensive and complete overkill for my network including the 10ge ports and SFP but I also still run very old NAS which needs deseprate upgrade. This I'm willing to downgrade the router/add AP/mesh if needed and upgrade the NAS.

The current asus I have is abour 300 euro, flint2 is about 100 euro from Ali which seems like a good price to me. The asus TUF BE3600 seemed like a good deal and by numbers it worked well, but in reality it was shitty and buggy. flint2 seem to have similar specs but it runs on opwrt so i rely on the higher sw quality.

Edit2: Got an offer for asus TUF AX600 for 60 euro. Will go for that, basically same HW as the flint2 only the ram and storage is smaller but thats not important for me as I dont plan to run any additional services apart of the basics. As as bonus I'm saving 40 euro, getting Asus gui which i prefer to luci and asus mesh, in case I will feel like the asus fw which seems to be strongly built on openwrt is not enough or has bugs I'm going to flash openwrt, will lose asusmesh but recive long term comunity support.

Seems like win - win to me.

So I just installed Luci’s Adblock. I’m curious what list do you guys use by default that’s provided with the Adblock app that blocks 90% of ads and blocks malware and phishing domains and stuff. Lmk. I wanna further secure my network and not have ads lol. Or at least as little as possible

I have openwrt routers but one is far away and I can't run cable to it. How to connect them as wireless bridge? Thanks

Hi all, I'm aware I'm not in the correct forum, but since there isn't a cudy forum as far as I'm aware I hope to have some luck here.

I'm at a campsite where they have free WiFi with a captive portal, you have to tick a box, click a button and you're ready to go.

I was on cudy std firmware 2.4.7, fired up the cudy in Wisp mode, connected to the network and when it found it and connected it lead me to the captive portal and got connected. happy days.

then I saw a update, going to 2.5.27, I knew they added the vpn option, so I updated. Now I can't get the cudy to redirect me to the captive portal, I do the same thing as before. even resetted the cudy, it connects to the network but never shows the captive portal.

any idea what I'm doing wrong or where to look?

I tried claude, but not successful yet.

Should I revert to 2.4.7 or 2.4.22?

Thanks in advance

Hello. Need some help. I have 3 tp link ax10 routers of which 2 are satellite nodes in easymesh config. I was thinking of buying dlink m30 to configure openwrt on it.

Is there a way where I can only replace my one main ax10 and use other previously as they were for satellite. I know easymesh is not supported on openwrt but I really need other two routers for full coverage of wifi in my home and also don’t want different ssid’s. Thanks

Hi everyone,

I am new to OpenWrt and I am struggling to set up KSMBD.

My goal is to share a 1TB EXT4 external drive USB connected to OpenWrt (WRT1900v1 hw) so I can use it with my Docker containers. I chose KSMBD because it seems like the most lightweight and suitable option for this.

However, I am facing read/write permission issues when trying to access the shared drive.

Could anyone help me figure out what I might be missing in my configuration? Thanks in advance!

The configuration>
# uci show ksmbd

ksmbd.@globals[0]=globals

ksmbd.@globals[0].description='Ksmbd on OpenWrt'

ksmbd.@globals[0].interface='lan'

ksmbd.@globals[0].workgroup='WORKGROUP'

ksmbd.@share[0]=share

ksmbd.@share[0].name='cassette'

ksmbd.@share[0].path='/mnt/cassette/'

ksmbd.@share[0].read_only='no'

ksmbd.@share[0].users='docker'

ksmbd.@share[0].guest_ok='no'

ksmbd.@share[0].create_mask='0666'

ksmbd.@share[0].dir_mask='0777'

Client to test (mint)
$ smbclient //openwrt.local/mnt/cassette/ -U docker

Password for [WORKGROUP\docker]:

Try "help" to get a list of possible commands.

smb: \> get tor-browser-linux-x86_64-15.0.7.tar.xz

NT_STATUS_UNEXPECTED_IO_ERROR opening remote file \tor-browser-linux-x86_64-15.0.7.tar.xz

i can "ls -l" to smb share

("put" action work for smbclient but not for Caja file manager)

I think about permissions problems, but make in openwrt> chmod -R 777 /mnt/cassette

root@OpenWrt:~# ls -lh /mnt/cassette/

drwxrwxrwx 2 65535 65535 4.0K Aug 16 10:57 Exur compras

drwxrwxrwx 2 65535 65535 4.0K Aug 14 09:20 TestErase

drwxrwxrwx 2 1000 1000 16.0K Oct 27 2025 lost+found

drwxrwxrwx 2 root root 4.0K Aug 12 11:50 test

When i put files on "test" Folder with (docker user) (root owner is ok)

When i put files on /mnt/cassette with (docker user) show 65535 and give error

I'm lost ! any ideas?
thanks !

Context;
First of I am a novice when it comes to hardware hacking and am also not the best at firmware analysis, I've researched some stuff in the past but this is the first hands on project I've taken on. The ISP Router is running real OpenWrt, but is also running OpenSync. I managed to set the root password by mounting the overlay fs in the OpenSync failsafe shell. This did work as I was now able to login to luci! Only it seems none of the router configuration it actually done in OpenWrt it's done with OpenSync so it's not populated or easily modifiable without disabling OpenSync afaik.

Backstory;
I've had this old wifi 6e router from a previous ISP, the router has never been configurable via the web ui you've always had to use the isp's app to change any settings and there was only very minimal configuration possible (Ended up having to pay them for it, so I suppose I own it..). Now I've got a much better ISP, but would like to make use of the router if possible so its not just a piece of e-waste.

When going to the routers ip in a browser it shows you a qr code to get the ISP's app and some information like the mac address and stuff like that. But if you go to http://192.168.1.1/cgi-bin/luci it shows an openwrt login screen! I've searched for quite awhile and found no luck of anyone managing to do anything with it not even a boot log shared on this model.

I decided to give it a shot anyways and once I got it taken apart I saw a set of UART pads clear as day, after testing each one with a multimeter for sanity I connected to it with a usb to uart adapter and was very happy to see that not only was the uart console still enabled, but there was a failsafe shell completely unprotected!

I was able to set the root password my mounting the overlay filesystem and simply running the passwd command, this allowed me to login to luci but this wasn't much help for me. None of the configuration seems to be populated in luci which could make sense given the opensync integration.

I have tried modifying the inittab, some of the services in rc.d aswell as rc.local and nothing has been successful, but this could also be an issue with my knowledge/skill with mounting and working with the partitions. When the router finishes booting when not told to go into failsafe (which is holding f and pressing enter when it says to) it simply streams the logs and doesn't ask for user login for anything.

TLDR;
I have an ISP "locked" router running real openwrt that I want to get a root shell on to potentially use it as a real router (even if I had to keep it disconnected from the internet for sanity, it could still be very useful for a lab router) I'm able to access the OpenSync failsafe shell during boot but I haven't been able to make any relevant changes persist besides setting the root password. I'm definitely a beginner when it comes to doing this stuff hands on, so if anyone has any suggestions I'm happy to try them!

Logs;
Notes (Including router model and partition listings): https://pastebin.com/raw/a9Kb0CU7
Normal Boot: https://pastebin.com/raw/1nS21L0S
Post Boot Luci System Log (pt1): https://pastebin.com/raw/StN0Gp7Y
Post Boot Luci System Log (pt2): https://pastebin.com/raw/AENJdyFM

I currently experience some stability issues with my router. WiFi signal kept dropping and not connecting wireless while the wired connection keeps the internet access.

It started when I upgraded to the 4.9 version from 4.8.3 version. Experienced the issues then downgraded to 4.8.4, but still experienced similar instability issues. So currently on 4.8.3 GL

I'm currently exploring using OpenWRT.

Are there any major benefits to this? I only used AdGuard and possibly looking to use IPV6.

ASUS RT-AX52 Pro wasn't on my radar before, but now that Cudy WR3000S price has risen by 50% and Asus one has gotten cheaper. They are now both 50 eur. Which one to buy?

I like my services to listen on LAN IPs only. So I set this:

Network » DNS » Devices & Ports » Listen addresses: 192.168.1.1

The side effect of this is /etc/resolv.conf uses 127.0.0.1, so DNS on the router itself failed. I fixed it like this:

uci add_list dhcp.@dnsmasq[0].listen_address='127.0.0.1'
uci commit dhcp
/etc/init.d/dnsmasq restart

This worked, but any time you hit Save in the GUI in the DNS section, it gets reset. Any ideas how to either make that change permanent or change resolv.conf to query 192.168.1.1?

The way I convinced dropbear to listen only on the LAN was even more of a hack.

System » Administration » SSH Access » Interface: lan

On line 296 of /etc/init.d/dropbear:

case "$a" in *:*) continue;; esac

As expected, the file gets restored to its original in an update. If anyone knows of a more stable way to do this, I would appreciate it.

Using "OpenWrt SNAPSHOT r35523-aac6df7bdc / LuCI Master 26.221.63536~04f1a7f" on a Tenda BE12 Pro. I cannot connect more than three wireless clients. When I try to connect a fourth, logread -f says:

Thu Aug 13 19:53:53 2026 daemon.info hostapd: phy0.0-ap0: STA 04:e8:b9:ea:5b:00 IEEE 802.11: authenticated
Thu Aug 13 19:53:53 2026 daemon.notice hostapd: phy0.0-ap0: STA 04:e8:b9:ea:5b:00 IEEE 802.11: Could not set STA to kernel driver

Every one of my devices will successfully connect, as long as I do not try to connect more than three devices.

It doesn't matter if I use 2.4Ghz, 5Ghz, or both. Maxassoc is 10 on both 2.4 and 5Ghz radios.

Any suggestions would be appreciated.

Hey guys,

I updated my MR600 to v25.12 like a month ago, but it was not a "drag and drop"-update. It broke my internet connectivity.

Did some Googling and searching in this forum, I understand that configurations have been moved around since, causing this issue.

My question is: is there a simple "press here to fix it" to get v25.12 working from a update?

Or is it different things that I need to change, depending on XYZ?

Context: I'm running a basic installation, just with VLAN-tagging for guest wifi. (using a ubnt AP)

So i own a Archer C1200 router which is used and with EU firmware, after digging some forum i found that once you have EU firmware on your TPLink router (I assume all TPLink router has this problem) you can't flash any other firmware like US version of firmware or DD-WRT firmware. So how do i fix this?

I'm in mexico, my options are more limited. I tried ordered a Cudy 3000e but it came in the wrong version. I looked on aliexpress for a xiaomi ax3000t but they are starting to all ship with qualcomm.

Is there a cheap router that can handle 300Mbps symmetric sqm? It doesn't have to have wifi capability but would prefer at least 3x ethernet ports.

Or maybe my glinet opal can handle 300Mbps symmetric when cake_mq comes out? Anyone know?

I have come across an igel and am wondering about putting openwrt on it with a USB3 to nic interface. Looking through the sites I don't see the option for x86. Am I over looking it?