Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OpenWrt all-in-one package #30

Open
ghost opened this issue Jan 11, 2017 · 3 comments
Open

OpenWrt all-in-one package #30

ghost opened this issue Jan 11, 2017 · 3 comments

Comments

@ghost
Copy link

ghost commented Jan 11, 2017

Hi there
Current data for openwrt is split into win7; win8.1; win10 and then spy; update and extra.
This is the same for all platforms, but doesn't make much sense for openwrt routers.
Routers generally have multiple computers with different OS connected, so, we will probably need all rules for windows 7, 8.1 and 10, this can be a pain in the a to get/update all rules!

I think it would be wise to merge them all in one dnsmasq.conf file and in one firewall.user file.
About the 'spy , update, extra', I would also vote to include them all.
Would be necessary to make sure there aren't duplicates.
You could add this as another method... like this /data/openwrt/all

Let me know what you think.
Thanks.

UPDATE:
A couple days ago I wrote a very 'simple script' that can run directly on Openwrt routers, it downloads, merges all in one firewall.user/dnsmasq.conf and even apply the rules by restarting firewall and dnsmasq.
It uses curl to download, cat for merging all together, sed for cleaning comments and empty lines, sed again for deleting old rules from files (eg. it deletes all entries below #winspy, so all entries above are preserved) and cat again to add (append) them to the actual /etc/firewall.user or dnsmasq.conf file without deleting any comments or custom entries in those files, the "#winspy" works as a flag, everything below will be deleted.

@elgab
Copy link
Contributor

elgab commented Jan 15, 2017

All those entries in /etc/firewall.user are killing speed. you need high-end expensive dual core router.

@ghost
Copy link
Author

ghost commented Jan 15, 2017

I don't see it really.
I use a TP Link WR1043ND v2.1, with all these rules, it runs a small LAN of +-8 devices never notice any slow down, maybe theoretical speed is reduced, but in practice it will never reach that point... example, just look at samba, it will be limited by server (disk) speed

It's abused, system runs on extroot 500GB HD, streams linux stb tv, runs samba server, apache2 web server locally, TOR proxy, Transmission, SSH tunneling...
The only thing that really put some load on cpu is Transmission or/and TOR when they get past 1.5MBs.
But again practical WAN speed is limited and averages only 500KBs during day, also TOR, so cpu load use will be about 0.3 or less..
It runs like this about 2 years now.

@ghost ghost closed this as completed Jan 15, 2017
@ghost ghost reopened this Jan 15, 2017
@elgab
Copy link
Contributor

elgab commented Jan 16, 2017

Last time I tested firewall.user was with the legendary cheap TL-WR740N.
The device was running OK full 100Mbit line, but placing all the firewall rules produced a massive speed drop.

The problem with Microsoft is the insane amount of IP subnets dedicated for spying, you cannot group them all in a /16 to get away with a couple of firewall lines.

17.0.0.0/8 used by 🍎
this one line will work great on that router.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant