Merlin has a custom Asuswrt firmware for the RT-AC66U router which can be found at its new home at http://www.mediafire.com/asuswrt-merlin/#
With this firmware Merlin adds some needed feature that Asus lefted out see below.
Using IPv6 can be a pain without a firewall between you and the world. This is one of the reasons I like Merlin’s version of the firmware,
You can create a file /jffs/scripts/firewall-start on the router to run a custom firewall rules at start up.
Here’s an example of what that file would look like for IPv6 6in4 tunnel with ip6tables:
ip6tables -A INPUT -j DROP
ip6tables -I FORWARD 2 -m state --state RELATED,ESTABLISHED -j ACCEPT
# Allowed inbound rules here, such as this one:
ip6tables -I FORWARD 2 -p tcp -m state --state NEW -i v6in4 --dport 22-j ACCEPT
ip6tables -A FORWARD -i v6in4 -o br0 -p all -j DROP
ip6tables -A FORWARD -i br0 -o any -p all -j ACCEPT
ip6tables -A FORWARD -i br0 -o v6in4 -p all -j ACCEPT
ip6tables -A FORWARD -i any -o br0 -p all -j ACCEPT
ip6tables -A FORWARD -j DROP
Here is a list of features that Asuswrt-merlin brings over the original firmware:
System:
– Based on the 3.0.0.4.246 source release from Asus
– Various bugfixes (like the crash on VPN/NAT Loopback access of LAN devices)
– Persistent JFFS partition
– User scripts that run on specific events
– Cron jobs
– Customized config files for router services
– LED control – put your Dark Knight in Stealth Mode by turning off all LEDs
Disk sharing:
– Act as a Master Browser
– Act as a WINS server
– Optionally use shorter share names (folder name only)
– Disk spindown after user-configurable inactivity timeout
Networking:
– WakeOnLan web interface (with user-entered preset targets)
– SSHD
– Allows tweaking TCP/UDP connection tracking timeouts
– CIFS client support (for mounting remote SMB share on the router)
– Layer7 iptables matching
– User-defined options for WAN DHCP queries (required by some ISPs)
– Improved NAT loopback (based on code from phuzi0n from the DD-WRT forums)
– Dual WAN support (both failover and load
balancing supported) (EXPERIMENTAL) (RT-N66U, RT-AC66U)
– OpenVPN client and server, based on code originally written by
Keith Moyer for Tomato and reused with his permission. (RT-N66U, RT-AC66U)
– Option to control Spanning-Tree Protocol support.
Web interface:
– Clicking on the MAC address of an unidentified client will do a lookup in
the OUI database (ported from DD-WRT).
– Optionally save traffic stats to disk (USB or JFFS partition)
– Display monthly traffic reports
– Display active/tracked network connections
– Name field on the DHCP reservation list and Wireless ACL list
– System info summary page
– Wireless client IP, hostname, rate and rssi on the Wireless Log page
– Wifi icon reports the state of both radios
Thank you Merlin for your hard work in creating this firmware.