i3roly / glibc_ddwrt

A Bluer Kind of White

dd-wrt build for d-link dir 867/878/882/1935 + 1760/1960/2660/2640 + 3060/3040

(see GPL_VIO_ALLEGATIONS.MD first please)

here's a GNUBS'D-out System V (or "linux" if you take uname seriously) DD-WRT SE ([special edition] dedicated to John Crispin, aka blogic) image with a native BASH shell (with Linux-PAM, DNSCRYPT, OPENDPI, BLOGIC's Hardware NAT for MT7621 devices, WPA3 Support, ENTWARE; don't think the first five are in BS' build). tools were built/based on a NeXTSTEP derivative with GLIBC.

this readme is updated periodically. thus the DD-WRT and kernel versions may be far newer than what is given below. this document serves as a guide for using the firmware.

latest FW :

currently kernel 4.14.302 and DD-WRT v51063

DIR-882/878/867/1935: use the dir-882 firmware

DIR-1760/1960/2660/2640: use the dir-2640 firmware

DIR-3040/3060: use the dir-3040 firmware

* lootbag contains:

• manpages
• GNU Midnight Commander
• tor
• make
• sqlite
• java (JamVM)
• GroFF (for manpages)
• VIm8.1(2-2123)
• minidlna
• SOFTETHER
• tcl/tk 8.6.9
• libX11-1.6.7*
• and a bunch of other shit

i have tested both builds numerous times, they are safe. they will not brick your router. i have been making an 882 firmware for years. the 2640/2660/1760/1960/3040/3060 are recent additions but it are even safer since they have a backup. either way, they dont touch your u-boot (its designated as a read-only partition for both builds) so, at worst, all that will happen is you may need to use recovery mode if something happens (i haven't had a report of this yet).

HOW TO FLASH TO/FROM STOCK FIRMWARE

• download the "factory-to-ddwrt-SE.bin" for your respective model (see above)
• turn your router off.
• hold the reset button and turn your router on.
• let go of the reset button once you see the power light flashing.
• plug in an ethernet cable and assign your device the following properties:
  • static IP: 192.168.0.101
  • netmask: 255.255.255.0
  • router IP: 192.168.0.1
• wait a few seconds after you apply these settings.
• go to http://192.168.0.1
• load the appropriate factory-to-ddwrt-SE.bin file and wait.
• all of these steps apply to restore the stock firmware from dd-wrt.
• we have provided the decrypted versions of supported devices' firmware in the stock_fw to make it easy for people to go back and forth.
• enjoy

many thanks to @0xricksanchez for his proof of concept that allows people to use the decrypted firmware to go back and forth (otherwise it's a nuisance).

LAUNDRY LIST/INFO

• WPA2-MSCHAPv2 in REPEATER MODE should be WORKING as of 51011 .

USAGE

• SETTING TX POWER MANUALLY:

  the manual command is "iwpriv <radio> set TxPwrManualSet=<input>" where i believe input takes five arguments separated by colons (i.e. <arg1>:<arg2>:<arg3>:<arg4>:<arg5>) where each arg is TWO digits (i.e. 14 character string in TOTAL) and takes the following arguments:

  <arg1> (manual mode on or off): 00 (manual mode off), or 01 (manual mode on) <arg2> (band width): 00 (CCK), 01 (OFDM), 02 (HT), 03 (VHT) <arg3> (frequency, only 20 or 40 for HT): 20 (MHz), 40 (MHz), 80 (MHz, mode 03 only), 160 (MHz, mode 03 only) <arg4> (manual power rate): for CCK (00): 0: 1 Mbps ; 1: 2 Mbps; 2: 5 Mbps; 3: 11 Mbps for OFDM (01): 0: 6 Mbps ; 1: 9 Mbps; 2: 12 Mbps; 3: 18 Mbps; 4: 24 Mbps; 5: 36 Mbps; 6: 48 Mbps; 7: 54 Mbps for HT20/HT40 (02): HT20: MCS 0 ~ 7; HT40: MCS 0 ~ 8 for VHT20/VHT40/VHT80/VHT160 (03): MCS - 0 ~ 9 for VHT20 ; MCS - 0 for VHT40/VHT80/VHT160 <arg5>: actual value for power (in dB, i think). ----------------------------------------------------------------------------- SetTxPwrManualCtrl: Set wrong parameters CCK (0) only supports rate setting: 0 ~ 3 and no supports different BW OFDM (1) only supports rate setting: 0 ~ 7 and no supports different BW HT20 (2) only supports rate setting: MCS 0 ~ 7 HT40 (2) only supports rate setting: MCS 0 ~ 8 VHT20 (3) only supports rate setting: 0 ~ 9 VHT40 (3) only supports rate setting: 0 -----------------------------------------------------------------------------

• entware/using the SES/WPS buttons
• the SES (left) button now disables the 2.4G radio, and the WPS (right) button disables the 5G radio. enjoy this fully-functional killer firmware. so good that people are trying to create false rumours about being unable to flash lol.
• i symlinked /usr/local/ to /opt/. so if you mount a usb drive on /opt/, it should have its contents appear in /usr/local. i find this highly desirable. also, enjoy the binutils/gcc suite for this platform. i have tested it and it can compile perl from source. must be pretty, pretty good ;)
• to use ENTWARE, do the following:

  mkdir /mnt/main #make main mount point directory mount /dev/sda1 /mnt/main #mount USB drive to main mount directory opt-opkg-upd.sh #run the opkg/entware installer script

  you now have opkg, and can install packages willy-nilly (tested myself! ENJOY! THIS IS WAY BETTER THAN I ANTICIPATED)
• additional information about RT2880 (MT7615x2) configuration/manipulation
  • each radio now uses one configuration file (i.e. CONFIG_MULTI_PROFILE=n produces AC3467 at 5GHz)
  • VAPs can have distinct wireless channels from the main ssid. To set them, use wl{0,1}_channel=ssid1chan;vap1chan;vap2chan;vap3chan;...;vapNchan where the ordering of the N VAPs' channels (not sure if the limit N is 4, 8 or 16 different channels for VAPS on a single radio) should correspond to the order they are listed in the DD-WRT interface (or nvram settings). I think it's possible to have more VAPs than distinct channels for the respective radio. This feature should really let the mt7615 shine (deal with the reboots. don't create VAPs willy nilly and expect it in 10 seconds k, sometimes it takes 25-30seconds more)
  • PRO TIP #1: switching from BS' to my build, or vice-versa, CAN (but SHOULD not [from my experience flashing back and forth for debugging purposes]) corrupt your nvram because we use different NVRAM drivers. BACK UP your settings and restore them after first-boot.
• additional information about SNMPD
  • snmpd now linked to openssl and supports many more encryption types compared to before.
  • snmpd_conf is now leveraged by services. you can include additional arguments you'd like in snmpd.conf using this nvram variable, which is present in the httpd GUI when enabling the service. enabling encryption requires multiple lines, which can be entered as follows (thx ArchWiki)

    <nvram set snmpd_conf="rouser *desired username for snmp crypto*<hit enter> createUser *desired username for snmp crypto* SHA *desired SHA password* AES *desired AES password*"<hit enter>

• supported languages are (as of 35771): traditional chinese, german, hungarian, italian, latvian, polish, russian, portuguese, and english.
• setuserpasswd/httpd's passwd change mechanism uses crypt_r, where i generate the (necessary) 2-byte salt via arc4random_buf--i.e., it is not generated by PAM, but is "PAM-esque". if you want a "pam password", use the "passwd" utility via sshd/telnet

----

What distinguishes this DD-WRT build?

• Why should I use this version of DD-WRT as opposed to others (assuming availability)?
  • first and foremost: gLIBC 2.33.
  • who cares. i am not going to give reasons for my motivations and why i continue to do this. i did that for three years. i'm over it now. just be greedy and consume.
    • if you don't want to try it, don't.
    • if you want the subpar stock firmware that has good wifi performance: keep it.
    • if you want terrible openwrt or DD-WRT with that stinky faeces they call the mt76 driver: use it.
      • no one is forcing you to try this build, but there must be a reason the DD-WRT maintainer is exerting so much energy trying to bury this build.
        • maybe he has shares in mediatek too.

• "IT'S THE GLOBAL ECKANAMY" (Mitt Romney) <cue gesture:>

glibc_ddwrt's Issues

Sir I am using 2640

Qos not working .

DIR-3040 Firmware not update

Hi friend, I'm trying to apply firmware in my device but allways received failure to update with archive:
factory-to-ddwrt-SE.bin

My device information:
DIR-3040 HW:A1 FW:1.20

You can help with this?
Very thanks

Multi User Beamforming

wifi struggling on some devices

On your latest build DD-WRT v4.14-r47111M CRISPIN (07/29/21) on DIR-878 router and on previous versions as well I'm having a problem of iPhones trying to connect over and over again. Eventually need to reboot the router. I've tried factory reset with factory d-link firmware and openwrt- Same problem. The problem initially started on your Build from 10/2020 that was running super solid until last week. Once flashing your lated build from 11 days ago it didn't give this problem for about 3 days.

/var/log/messages shows
Aug 9 20:27:03 DD-WRT user.warn kernel: BcnCheck: no bcn still occur within 840 sec for band 0(ra0)!!

Not sure if the wifi radios are dying on my router? This also in coincidence started when I added a new 'ecobee smart thermostat'

Let me know what other logs you would want to see. Not sure where to go from here.

WLAN disconnecting from switch

I have tested the last 3 releases on my dir-1760 and am running in to the same issue.

I erase the nvram and setup dd-wrt in ap mode following this guide,
https://wiki.dd-wrt.com/wiki/index.php/Wireless_access_point

Everything is fine until randomly i can no longer reach devices on the lan. I can connect to the dd-wrt web ui via wifi but not from the lan ports.

The only device on the wifi is my android phone and the lan goes to my main switch, (router is pfsense).

Any help would be much appreciated.

DIR-3040

Been having issues getting the last 2 or 3 of your releases to load. In fact the router needs to be restored with the unencrypted stock firmware followed by restoring and installing load your November 2023 release. I have two of these routers and both are having the same issue.

WPA2 Enterprise

I am wondering if you could offer me suggestions on how to make WPA2-EAP (aka Enterprise, 802.1x, Eduroam) function correctly. In OpenWrt it does work if a person installs wpad-wolfssl and attached is a screenshot of the additional fields needed for login.

The specific information that needs to be specified is: EAP-Method: PEAP, Authentication: EAP-MSCHAPv2, Identity: Username, and Password: Password. None of these options are available for any of the WPAx-EAP choices on ddwrt.

virtual interfaces

I can't add virtual interface (for my IoTs), it doesn't show up as access point while scanning the networks, using the latest Firmware: DD-WRT v4.14-r48122M CRISPIN (01/13/22) on DIR-878 A1, please help, thanks.

OPKG Install Script

Not sure if this is a user issue or not but when I run "opt-opkg-upd.sh" after creating the Dir /mnt/main and mounting /dev/sda to it, it appears to run but there are no error/success messages and Entware is not avaiable. The router is a DIR-3040 which I am just setting up and need either zerotier or tinc. As an aside I am presently enjoying your glibc/dd-wrt firmware on two dumb APs (DIR-882).

DIR-3040

Thought I would try your latest update but still not working. Was running 54491 release before the update. It was challenging to get the router back to life after attempting the update. Then after many attempts I installed decrypted 120b3 and then your 54491 release.
Should I say Go Oilers Go or would that identify me as a Flames fan.

Cheers!!

SAMBA USB File sharing not working in 47458M D-Link 266O

Got this running after a bit of trial and error.

But I can't get USB NAS SAMBA file sharing to work. The 4 tb USB disk is mounted fine. But under NAS tab, the file sharing block is empty. No options appear there.

I was able to get MiniDLNA to work, so it's able to access my USB disk and can play media from it as well.

Here are the options I've set.

https://i.postimg.cc/tTL5zWbr/IMG-20210916-031623.jpg
https://i.postimg.cc/HxJz53qc/IMG-20210916-031646.jpg

Its the same in 47458M and the previous version before this. 47451.

Any help would be appreciated as it worked just fine in stock D-Link firmware.

Will test other capabilities.

GUI Webpage 404

I was running on v50486 and decided to update. I tried to open the GUI and was greeted with this page, i figured it needed to be updated with the SSH method like you had asked and i did the same, Even after the upgrade via ssh, this stays the same, then I tried to load the factory-to-ddwrt through emergency mode and the webpage still gives the error screen and it is not reset. now i will try to reset the nvram and post an update.

port forwarding

Hello, port forwarding from a specific source IP doesn't work. I want to restrict access to port 80 on the route, and port 22 on the internal machine to the specific source IP only from two of my static IP source at home and at work. This works in the official dd-wrt builds, which for obvious reasons I don't want to use. Could you please assist?
Thanks a lot.

Wifi physical interfaces disappears in latest build

I flashed the latest build v53391 and my wifi physical interfaces disappeared. LAN was working fine.

Flashed to v53142 and the interfaces were restored with the previous used configuration.

Edit1: Router: DIR-882

Router times out on few menu's DIR-882

So ive been using your build for quite a while and it has mostly been great. but recently i have been facing 2 issues from the last two builds. (i dont know before that because i was using the stock dlink firmware briefly)

When I go to the status page, select any option, the router times out.

it starts with this

user err Caught SIGSEGV (11) in strlen
user err Fault at memory location 0x00000000 due to address not mapped to object (1).

and ends with httpd crashing and restarting after a while. but again crashing on status page.

I have attached my log. i was on the v47111 build but updated to v47143 but same error. It could be an unconnected error but a few apps like whatsapp disconnect from the internet. while rest of the phone has connectivity (both iphone and android).

it starts when this error comes

warning kernel MlmeADDBAAction: PMF connection, Ignore AddBaReq Send DUE TO NOT IN PORTSECURED

also, not sure why it gives

pam_unix(httpd:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=

both ssh and webui login works fine
DIR-882 Log.txt

Not booting after install 2640

i install the file from dlink recovery gui but not boots

DIR-3040 WiFi Setting

Hi @i3roly, how are you?

After some tests, device is working good, I get some problens like freeze or device say "not have internet" but I will try get dmesg log if this occur again.

For now, you know how set Wireless Rate?

When Rate is 1734 Mbit/s all works very good and 5G works in all my house using my Xiaomi Mi 8 Pro with 866mb wireless speed without changes.
And sometimes and I not know why but the Rate is Auto and my Xiaomi Mi 8 Pro only get 866mb when is close to the router.

Very thanks for all friend ;D

DIR-3040 router username/password outright not working, and GUI access not disabling

As this is the first time I've ever ran DD-WRT of any sort, I am unsure what to expect.

So far, model DIR-3040. I have freshly installed factory-to-ddwrt-se.bin with the latest commit as of this writing (0be4c90). Nothing other than official firmware had been flashed before.

I tried to enable what would be equivalent of a "guest network" by adding a VAP to wl0 (2.4ghz), enabled net isolation and AP isolation. This worked.

I then tried to disable Wireless GUI access. This... didn't work. In fact, it doesn't even work on the regular APs. I figured there was some way to add a VLAN to get around that issue but I couldn't find the VAP in the second DHCP that I created. So that hasn't been touched since.

While trying to figure out what was wrong, I accidentally typed the wrong password while logging into the web GUI, and this worked. It was the wrong password. Was baffled, so I cleared my history and tried again with and just mashed the keyboard, also let me into the whole GUI.

Now if the GUI could be disabled for the guest network (or any network for that matter) I would not have minded the password issue, but both of them together seems like a security nightmare. According to some forum posts this feature is not available on all models, which seems slightly odd but I'll take it. But then it would have been nice if the password wasn't basically transparent...

Steps to reproduce GUI disabling issue:

1. Wireless Settings -> Basic
2. Disable Wireless GUI Access
3. Save
4. Apply changes
5. See that you can still open router GUI

Steps to reproduce password not working:

1. Clear all browsing history on a Wi-Fi client
2. Open GUI and go to any tab
3. When asked, type in username, and put in gibberish as password
4. See that you have access to that tab regardless

I am unsure what other info is needed. Let me know if you need anything else. I guess I'll have to work around the guest network by double-NATting for now...

vap

I'm having trouble getting virtual access points working. is this supported on dir-1760? thanks!

Trouble connecting to wifi on some devices & LED error

Hey, I have recently noticed after updating to a certain version I couldn't connected to the WiFi on some devices. It connects fine on my high end laptop as well as other wifi devices around the house including my phone, but i've been facing the issue where another cheaper laptop running windows 11 doesn't connect any more. It used to connect just fine earlier, and after a certain update (i am not sure which update made it stop working) both 2.4GHz and 5GHz refuse to connect.

This is the log from the router when i try to connect

These are my 2.4ghz settings

Security:

Secondly, in the same update, once the internet connection is established the internet LED on the router turns off, if the internet connection is not established it glows orange but turns off instead of turning green like it used to.

Thanks,

Assistance in Installing this version.

Hi,

I have D-Link DIR-2660 A1 router with latest stock firmware 1.11.

I would like to know what's the process of flashing the firmware.

There's very little info about flashing with these new firmware routers on the internet.

Also if you could point me to the exact files that need to be flashed. Thanks. I had contacted you on the D-Link forums priously.

DIR-882: WiFi roaming support?

Basically I need the function to drop clients below a predefined RSSI signal value. Is this possible with this firmware? I didn't find any related settings.
Thanks

Unable to update DIR-878 after 47495 release.

I have been updating using your releases regularly. Two or three weeks ago I tried to update from 47495 and although the update status web screen indicated success the router leds all turned off. Restarting the unit yielded a orange power led for several seconds and then nothing. Thought I would try your latest release, 47608, in case the issue had been fixed in the meantime. That yielded the same result and I had to revert back to the 47495 release.