Recent Forum Posts
From categories:
page »

I was seeing a strange bug in my customized firmware based on Shibby, now Arrmo. I was running the problem down for a few days in my custom firmware, and decided to try and compile vanilla and found the same issue. Currently working with the latest release of the arrmo-RT-AC branch.

I was hoping to take advantage of the multiwan feature to make the internet at several locations more reliable with a second internet connection.

Issue: In the event that the primary WAN fails with network connectivity, but no route to the internet, watchdog runs and changes the default route to the secondary connection, but I am not able to resolve DNS or ping the DNS servers after the routes have changed. I have seen that on occasion after some time (15+ minutes) DNS will start to work, but haven't determined why this sometimes works, but most of the time does not.

2 WANs
Primary - vlan1
Secondary - vlan12
OpenVPN client connects back to the central office by a DNS hostname
Both WANs have DNS set to
primary WAN has a WAN weight of 1
secondary WAN has a WAN weight of 0 (failover only)
Watchdog, set to run every 60 minutes. I have been executing it manually for my testing in the vanilla compile, and in my custom firmware I have a script that runs every minute to check if the vpn is up, and as part of its troubleshooting it runs watchdog.

Troubleshooting steps:
- Turned on mwan, vpn, and dnsmasq debugging and can see that mwanrouting is making route changes and has successfully failed over
- Tried changing wan weights, but having anything besides pings and failover traffic on the backup connection will result in large data fees being that its a LTE to ethernet device. having the secondary connection in anything other than failover also causes undesirable instability in our VPN
- I can perform ping -I vlan12, but cannot perform ping indicating to me that there is some sort of a routing issue
- See no routes for any DNS server in route -n or ip route list
- Tried different DNS servers for the secondary WAN, but these servers are never shown in the \etc\resolv.dnsmasq meaning that they are not picked up for use, confirmed in the dnsmasq \var\log\messages
- Searched through the sourcecode to see if I could figure out where the DNS servers were getting picked up and if a static route was being set, but I couldn't find anything. I'm a handy sysadmin, not a developer :) Our inhouse developer also took a look at it, but his skills are largely in LAMP and he does not have a strong networking background.
- Restarting services: dnsmasq, wan, wan2
- killing mwanrouting and started a new instance

Any help would be greatly appreciated

I have a Asus RT-N12 D1 Router with Tomato 1.28 mini (Shibbly) installed. I tried to flash "tomato-K26-1.28.RT-N5x-MIPSR2-140-Mini" to this, it completed the process, rebooted, but it didn't take. It still shows v1.28

I cleared the memory, but still nothing. No error message. What's wrong?

The version of Tomato you have omitted the details of the connections. Sorry.

Re: QOS Details issue by GeeTekGeeTek, 07 Dec 2017 22:31

Ah, just realized that it requires the full python 3 it seems? So maybe there are other solutions out there?

Privacy is a hot topic, and many do not want to hand over their contacts and calendar to google or other online providers. It would be great if Tomato could take over that task by integrating a calendar and contacts server.

I just found Radicale, radicale dot org, which could be a candidate that seems to be pretty easy to get running and integrating?
Maybe there are other solutions that would be better?

I posted this as a stand-alone thread back in June, but got no replies, so reposting here. I've since updated to the most recent (Shibby v1.40), but the problem persists…

I've got my router (RT-AC68U running Shibby v1.28) set to 40MHz width for the 5GHz band, but when I view nearby networks with NirSoft WifiInfoView, it's showing up as 80MHz wide. There are only 20/40/80 choices in the Tomato settings, there's no "auto". I have tried rebooting it, as well.

I'm pretty sure I've confirmed that it's actually running 80MHz wide, too: I have a pair of wireless speakers that run on their own 5GHz net on channel 36. When I set my router to run on channel 44 (or 48, if using upper sideband setting), I can cause the wireless speakers on 36 to lose connection by hauling a bunch of large files across my wifi on 44. Whereas if I set the router to a high channel like 157/161, this doesn't happen.

Is this a bug, or is the channel width setting only a suggestion, or what?

Re: Shibby Builds by meeotchmeeotch, 06 Dec 2017 00:37

Nevermind. Figured it out. Under 'BASIC - Identification - Hostname'.

Feeling stupid right now

Now I have another problem. The router date and time is set to 1970. Not keeping the correct time and my Airprint pdf print files aren't getting time stamped.

Also Samba file share doesn't get auto initialized unless I reset the share under Tomato settings and allow it to restart the Samba services.

Any one who knows please save me from hours of google searching..

Thank you


Basically got TomatoUSB going with optware in the background. Setup a Samba share to a certain folder on my mounting drive which I can see but
Windows is calling the main Computer or root device it sees as 'UNKNOWN'. Can't figure out how to rename it so it says 'TOMATO' or 'N66U' or something.



Hi guys,

I'm new here…

I have been on firmware 1.28 for a while, 2 years more or less. And I never updated because everything was working well. Today I update for 1.30 and 1.40 and still had the problem, so i downgrade to 1.30. I have a Asus RT-AC66U, that is connected to my ISP router. And never had a problem almost 3 years…

So I realized I couldn't connect to any of my devices from outside. I use DDNS from no-ip, i have a payd account.

If I ping my network from outside, isn't reachable. Already activated the ICMP on the dns options. I can ping from router>tools>ping, also from any computer inside my local network.

I checked the log and i had the message " DNS-rebind attacks from" (this is my ddns host). So I unchecked this option from advanced > dhcp/dns. But nothing changed.

The DDNS its working, it get the success message. Apparently everything its working, but cant access from outside.

I also tried ping directly to my IP, also the external IP. I'm a bit lost here… And out of ideas.

thx in advance to all of you

I tried to post here some printscreens links, but didn't allowed me

Cant access from outside by Samir GaniSamir Gani, 04 Dec 2017 14:50

Hello everyone, I'd like to know a command which do redirecting port internal 3076 to 3077 for example, I tell us why, My brother and me have two xbox one with upnp we haven't any problr to have nat open on interface or other games,because upnp oprn alternative port to 3074,but the problem is with Call of duty WWIi ,this game need 3076 but when you join multiplayer this open to the dynamic asigned ip(or static dhcp ip) this open this port on both internal and external,but when the other console join and rule wasn't deletrd or expired upnp gives to it random port on external and 3076 on internal and in this console shows moderate in game however on xbox wire condig shoes open,game goes very bad with moderate inside in although on xbox shows open, I have beenn reading alot for scripts and commands,port forward doesn't do de trick indeed with that gives problems on both because only one can have 3076 on internal.Well las try was use this script on firewall and wanup

iptables -A INPUT -s -p udp -m udp —dport 3076 -j ACCEPT
iptables -A PREROUTING -t nat -i br0 -p udp —dport 3076 -j REDIRECT —to-port 3077
I've tried last

and the following:
iptables -A INPUT -s -p udp -m udp —dport 3076 -j ACCEPT
iptables -A PREROUTING -t nat -i eth0 -p udp —dport 3076 -j REDIRECT —to-port 3077

and on upnp config allow 3076 3077
and allow 3076 allow 3077
Talking about the interface of ip have to be br0 because on advanced routing it shows as
and I have router connecting to a modem on bridge,on that modem i have on nat none and is only working as modem
If I have put one ip on dmz rest of dhcp dont work,and as I told if I put one of the two ips ofside of dhcp and do portforwarding the other can bes open nat on game never
Please help me ,i believe have to be any solution

PD more details: i have wnr3500lv2 netgear and Tomato Firmware 1.28.0000 MIPSR2-140 K26 USB AIO with shibby mod

Hi everyone

I must first admit that I am a rookie when it comes to setting up networks like this.

So what I am trying to accomplish is having one router with a VPN running as a host router, and a second router running as client going direct to my ISP while being isolated from other network. DHCP enabled on both so I can connect to each on the fly via wireless.

My setup: Modem connected direct to router A running tomato shibbys 1.40 on an EA6500v2 with VPN. Router B (model EA6200 on stock firmware) hooked from the WAN port to the LAN port on router A. Router A local IP set to: DHCP enabled. Router B IP set to

The reason why I am running the VPN as host is due to my network layout and range in my home. I can explain further if needed.

I have spent hours reading on the forums but most of the threads are about setups where the VPN router is client or Only allowing VPN to run on specific IP's

The original idea was to have a switch in front of my modem and then have two lines running to two separate routers. This is apparently not possible as my ISP only allows for one IP. I honestly didn't think the 2nd router would need its own IP to set it up this way.

So I am now looking for a way to exclude router B's IP address from the VPN and go direct to my ISP. I thought that having them on two different subnets would be enough but that doesn't seem to be the case.

I have tried adding this script to the WAN up tab under admin/scripts:

echo 0 > /proc/sys/net/ipv4/conf/all/rp_filter
iptables -t mangle -F PREROUTING
ip route add default table 200 via
ip rule add fwmark 1 table 200
ip route flush cache
iptables -t mangle -I PREROUTING -i br0 -s -j MARK —set-mark 1

When I use this script and check my external IP it still shows the VPN.

I have seen some other things to try but they are either for a slightly different purpose or are for other firmwares.

Its worth mentioning that there is a bug with the EA6500 where if there is too many settings it will not show wireless access points or just go into a boot loop altogether upon reboot. I have tried adding lines to init and shutdown scripts but it doesn't seem to help with that issue. So what I have been doing is setting options that require a reboot first and then adding in the rest of the configs (wireless settings and VPN settings) which do not require a full reboot.

Lines for init and shutdown:

for line in $(nvram show | grep =$); do var=${line%*=}; nvram unset $var;
nvram commit

Were you able to fix the issue?

Re: QOS Details issue by ferntomferntom, 29 Nov 2017 02:05
ferntomferntom 29 Nov 2017 01:57
in discussion Discussions / General » Introduction

Hi guys, nice that I was able to come across this community. I hope everyone is still active.

Introduction by ferntomferntom, 29 Nov 2017 01:57

I am trying to follow the guide for setting up OpenDNS, but I can't find the dnscrypt-proxy setting. I have Asus WL-520GU with 4MB flash size, so I have been running with the below firmware:

Tomato Firmware 1.28.0000 MIPSR1-132 K26 Mini

According some posts, this version has this option along with static DNS settings. Is there another place or a way to turn on this setting?

Looks like I can't post the screenshot. Basically it just shows IGMP ( [hide]

No other items in the details page.

Re: QOS Details issue by xhalozxhaloz, 25 Nov 2017 20:50

Hello, I setup my router and everything was working fine. After I rebooted my QOS details page looks like this. I have no idea why or how to fix it. It is enabled and I haven't changed anything. This is an ongoing issue I've been having. Even did a full reinstall and it worked until I rebooted again. Any suggestions? Thank you!

Also….seems that when I turn off "enable qos" it is still running. Weird!

QOS Details issue by xhalozxhaloz, 25 Nov 2017 20:49


Im sorry if im in the wrong place.
I have an old speedtouch 581 router with adsl that i dont use.
I dont have adsl anymore and i just want to use the router part.
I know tomato doesnt support modem, but can i install tomato and have the router part working?

Thanks in advance

Re: Shibby Builds by bombixbombix, 24 Nov 2017 10:27

Today I have added a firewall script, and I found, that the script executed four times:

The script in the web gui:

ebtables -A FORWARD -o eth1 --pkttype-type multicast -j DROP
ebtables -A OUTPUT -o eth1 --pkttype-type multicast -j DROP

SSH - ebtables output :

root@Asus-RT-N16:/tmp/home/root# ebtables -L
Bridge table: filter

Bridge chain: INPUT, entries: 0, policy: ACCEPT

Bridge chain: FORWARD, entries: 4, policy: ACCEPT
-o eth1 --pkttype-type multicast -j DROP
-o eth1 --pkttype-type multicast -j DROP
-o eth1 --pkttype-type multicast -j DROP
-o eth1 --pkttype-type multicast -j DROP

Bridge chain: OUTPUT, entries: 4, policy: ACCEPT
-o eth1 --pkttype-type multicast -j DROP
-o eth1 --pkttype-type multicast -j DROP
-o eth1 --pkttype-type multicast -j DROP
-o eth1 --pkttype-type multicast -j DROP

If I added a simple mount command to the firewall script (I know, that is not the right place to mount), it is also executed four times

mount - /home/root/log -t cifs -o noatime,nodiratime,UNC=// log,username=log,password=*********,uid=0,gid=0
root@Asus-RT-N16:/tmp/home/root# mount
rootfs on / type rootfs (rw)
/dev/root on / type squashfs (ro)
proc on /proc type proc (rw)
tmpfs on /tmp type tmpfs (rw)
devfs on /dev type tmpfs (rw,noatime)
sysfs on /sys type sysfs (rw)
devpts on /dev/pts type devpts (rw)
- on /tmp/home/root/log type cifs (rw,noatime,nodiratime,unc=\\\log,username=log,uid=0,gid=0,rsize=16384,wsize=57344)
- on /cifs1 type cifs (rw,noatime,nodiratime,unc=\\\log,username=log,uid=0,gid=0,rsize=16384,wsize=57344)
- on /tmp/home/root/log type cifs (rw,noatime,nodiratime,unc=\\\log,username=log,uid=0,gid=0,rsize=16384,wsize=57344)
- on /tmp/home/root/log type cifs (rw,noatime,nodiratime,unc=\\\log,username=log,uid=0,gid=0,rsize=16384,wsize=57344)
- on /tmp/home/root/log type cifs (rw,noatime,nodiratime,unc=\\\log,username=log,uid=0,gid=0,rsize=16384,wsize=57344)

If I add this mount command to init script, it's not executed. No mounted unc path. (Of course, I have made the log dir under /home/root )

Any idea?

I am also looking for the TomatoUSB-DDWRT_Airprint-Cloudprint_support-03282013c.tar.gz - anyone have the file they can share?

it seems the TomatoUSB-DDWRT_Airprint-Cloudprint_support-03282013c.tar.gz LINK is broken. Can u fix this, please?
Thanks a lot!

page »
Unless otherwise stated, the content of this page is licensed under Creative Commons Attribution-ShareAlike 3.0 License