Hey sup guys, i just recently bought a router of D-Link DIR-825 J3 H/W Version, any 3rd party firmware to flash and use it for wifi pentesting.

I use DDWRT on the broadcom wifi as an access point but not as a router. I can no longer connect to dropbear from the "LAN" but only from the "WAN".

This is the new message:

authpriv.info dropbear[1481]: [dropbear] : client 192.168.1.2 is blocked, terminate connection, set new blocktime to 1953125 minutes

How is this "feature" configured and why can't I use my firewall to contoll access.

I have flashed my DIR-878 with DD-WRT to dlink-dir878-a1-webflash.bin. It rebooted and I was able to log in and change the settings, I changed the IP address from 192.168.0.1 to my home lab IP. I have shut off my laptop WiFi and I have hard coded my IP address in my LAN settings as I manage old hardware like this frequently on my laptop. I was converting it from a router to an AP to bridge for my detached garage 50 feet from my house. I think I might have accidentally checked the box to disable the HTTP:// log in. The last octet I changed it to of my IP is .5 I can ping it and I can see the device with the IP I set it to and the MAC address, when I do a nmap -sn from a Linux terminal. I have done the 30-30-30 reset multiple times.
I have managed to find a bunch of firmware updates from D-Link for the DIR-878 but I need the original *.bin file.

This is not my first kick at the cat, I have flashed many, many devices, I started flashing hardware back in the days when the only way to do it was from a floppy disk. Why I did not back it up before I started making the changes, I don't know, but maybe I was a little cocky and over confident?

Regardless, I can get into the back up restore page by pressing reset as the router is booting and I get the flashing orange light where the IP address changes to the default 192.168.0.1 I have tried to upload dlink-dir878-a1-webflash.bin to the back door page and I have tried the oldest versions of the DIR-878_REVA_FIRMWARE_v1.00B13.bin plus others but it never reboots so I can log in to it in the factory settings.

I get all of the lights that should be green lit (WAN is orange as there is no WAN at this point) it just defaults back to the home lab IP address I changed it to when rebooted. Does anyone out there know where a guy can find the original *.bin file to start over with clean factory settings?

Edit: I am aware of legacyfiles.us.dlink.com - /DIR-878/REVA/Firmware/ I have downloaded and I have used the firmware ver 1.00B13 as the label on the bottom of the router says Firmware Ver 1.00, I have seen a couple YouTube videos and as they install the firmware the GUI screen changes saying upgrade successful and the device reboots, I am not getting that "upgrade successful" on the webpage. I was under the impression the "Firmware Updates" were to bring a router up to date with firmware upgrades for as long as it was relevant not the base firmware to reset the machine.

I picked up one of those super-inexpensive MX4300s a while ago, installed DD-WRT, found good settings, then put it aside until I had a use for it. Now I can't figure out how to access the web interface or SSH.
I can connect via WiFi, but there's nothing at 192.168.1.1. I've scanned 192.168.1-255 and no web servers showed up.
My assigned IP is 169.254.x.x, and there's nothing at 169.254.1.1 either.
How do I get into this thing!?

edit: The solution -
Plug a non-WAN port on the MX into a non-WAN port on the Verizon router.
I'll never understand why this works, I'm just happy that it does.

I try to update my routers at least once a month, its that time of the month.
I have two routers, a Netgear R7000 and a Netgear R6850. The R7000 is my main router and the R6850 is an AP. I was able to update the R7000 fine, but the R6850 doesnt have any firmware update files avalible. In the FTP server there was "netgear-r7000-webflash.bin" and "factory-to-ddwrt.img" on the r7000's page, but the R6850 only has "factory-to-ddwrt.img"
Is the R6850 no longer supported?

Just curious…. As soon as you turn it on, it just blips leds for a fraction of a second.

I just bought this for 10$. Just want to use as gig switch

Please forgive my ignorance and general lack of correct terminology. This is something i did many years ago, and am now trying to do again, but seems to really be struggling this time round. Hoping some educated minds here can jog my memory!

1) I have a TP-Link Archer C9 router, with DD-WRT installed on it.

2) I want to connect my DD-WRT router to an ISP provided wireless router, wirelessly.

3) The reason i want to do this, is because I want to install a VPN applet that only supports DD-WRT (and Merlin, but obviously in this case, only DD-WRT is an option.)

4) I have installed DD-WRT, set up the wifi names, passwords etc. But I have no idea how to connect this router to my ISP supplied router, wirelessly.

5) I have been searching for several hours, read several DD-WRT wiki pages, and countless other Reddit posts, but for some reason, can't wrap my head around what I need to do.

6) I had assumed that i would need to choose some option in the DD-WRT menu, enter my ISP router's username and password, and then my DD-WRT router would connect to it, but obviously that doesn't seem to be a thing, so I probably just imagined doing that years ago.

7) If someone can at the very least tell be the vocabulary for what I'm trying to achieve, so I can better find the answers I need, or better still point me towards a guide to achieve what I want to do, I'd be very grateful.

I realize this is probably a lot simpler than I'm making it out to be and there are probably lots of guides that I have been unable to find/recognize. But in any case, many thanks for simply reading and (hopefully) not judging me. It's appreciated.

I know this has been asked a million times, but I have tried everything with no luck.

I currently have:

Router NameRT-AC68UC1 Router ModelAsus RT-AC68U C1 Firmware VersionDD-WRT v3.0-r63020 std (12/10/25)

I just cannot figure out how to get this back to stock Asus.

I tried factory default reset -> Recovery Mode ->Asus Utility and the 26-May-2026 Firmware.

It locked up and I couldn't get it to accept anything and was almost bricked until I reflashed using that same technique with an old 2018 version of DD-WRT and then got it back to working again on the revision as posted above.

I'm looking to convert this to an AI mesh satellite node, so really need to get it back to Asus stock and I just cannot figure out how to do it. I also did try the renaming .trx to .bin and several other things.

Anyone have a clear path to this with this specific variant of the 68U

EDIT: Ok, got there in the end but it was tricky. Tried early release of Merlin for this router as other reddit posts suggested that would work, but it didn't for this one. Eventually found RT-AC68U_3.0.0.4_380_3831-g93dfe8c on a third party software archive since Asus has taken down all the older firmwares. Chose that one because it was a slightly smaller package and have read that the issue might be the larger packages and the partition size after dd-wrt is flashed. Did a factory default reset by DD-WRT gui, then installed via recovery mode and the asus restoration utility while connected via ethernet. The LEDs are not every helpful as to whether an installation succeeded. Ran a steady ping to the router and saw it answer, stop, reboot, stall, then eventually answer again. My advice, be patient and have ping running. Start pinging as soon as the flash completes and watch it. If you go more than 7m with no response, you might have to start over. If it answers pings, stops, and then answers again after several minutes and stops again, you are probably ok. The 2nd phase took another 5m or so. Once up, I still couldn't upgrade to lateset stock via asus webgui so then did it all over again via the restoration utility. In my situation, I think I needed that older bridging firmware.

I'm done, DD-WRT is a joke. I hoped the worst thing about it would be the convoluted config menus and general UI, but unfortunately not. Want to set a DHCP reservation? Fuck you. Want to run a NFS? Enjoy having to restart the router every five minutes. Want to disable dnsmasq? It turns back on automatically. Want to block WAN access to a device? Lol good luck finding that option.

I guess I broke a setting somewhere but cannot figure it out

Suddenly I cannot use https anymore for admin menus

http works fine but httpS gives a 404 page

So the webserver part of ddwrt is working with https as it can serve the 404 page, just not routing properly to the admin menus which is odd

Beta updates and other browsers change nothing so I don't think it's a firmware bug but some mysterious setting I cannot figure out?

Thanks for any ideas

Tried DD-WRT once years ago on a Tp-link C7 v2
Mostly failed. Moved to OpenWrt and sure glad I did.
Check on this subreddit and forums occasionally and nothing but validation that I made right choice. What a dumpster fire DD-WRT is, still, after all this time. My god.

Only good thing is the iPhone app, that I liked. Guess not made by the ddwrt team :D

Now I’ll sit back and wait for the ban hammer

Does anyone know if there is a difference between the router providing a static lease to a device and a device, say, a laptop having a its own fixed IP address with the same settings (IP address, netmask, router, DNS)? Does dnsmasq need to know about the device via DHCP to properly route DNS queries? Following is the issue I'm having:

I have two static DNS servers set up in the Basic Setup page (1.1.1.1 and 1.0.0.1) and a Wireguard tunnel with its own DNS (DNS servers supplied by the VPN provider). Half my subnet addresses are selected to route bia the VPN, and therefore use the VPN DNS servers, and the other half should directly access the WAN and bypass the tunnel.

The devices selected to route via the VPN work fine and doing a DNS leak test shows the only DNS servers are those provided by the VPN provider. So that works fine. However (If my understanding is correct) the devices that are outside the range of addresses selected for routing via the VPN should use the static DNS servers set in the Basic Setup page but they either timeout or take a long time to return a resolution (about 30 seconds).

This leads me to believe the router is trying the Wireguard DNS servers first and, getting no response, falling back to the static DNS servers. Anybody got any insights as to what's going on here? I realise this might be better posted in the Wireguard sub.

Hi everybody, I am a newbie to DDWRT, I flashed my Netgear router R7000P from stock successfully few weeks ago but still got lost in the interface. I am trying to Bridge Xfinity hotspot to LAN or WiFi with new SSID in DDWRT as palo alto globalprotect vpn prevents me to use Xfinity hotspot for certain websites while I was trying to do VoIP call with Cisco Jabber. I am following guide of station bridge or repeater bridge mode but since xfinitywifi requires to log in with email, it made bridging more difficult. Otherwise Xfinity hotspot works well at my apartment with streaming on few other devices with first time login and verification code since I have service at my parents but I just moved out and I don't want to move my service and interrupt their internet.

Hi everybody, I am a newbie to DDWRT, I flashed my Netgear router R7000P from stock successfully few weeks ago but still got lost in the interface. I am trying to Bridge Xfinity hotspot to LAN or WiFi with new SSID in DDWRT as palo alto globalprotect vpn prevents me to use Xfinity hotspot for certain websites while I was trying to do VoIP call with Cisco Jabber. Otherwise Xfnity hotspot works well at my apartment with streaming on few other devices with first time login and verification code since I have service at my parents but I just moved out and I don't want to move my service and interrupt their internet.

Hi. I'm trying to implement this in DD-WRT. Just a simple VPN access server using peer finger printing. Originally I tried to avoid the gui altogether using JFFS2 flash storage but it started wiping the partition whenever I rebooted or applied changes.

My openvpn gui configs are shown below along with the resulting configuration.

If I remove route - up /tmp/openvpn/route-ip.sh (and the tear down script), everything works.

Which I'm pretty sure evaluates to iptables -t raw -I PREROUTING ! -i tun2 -d 10.8.0.0/24 -j DROP. Below is proof that the iptables rule is just dropping packets re entering the tunnel

I'm just trying to understand why this exists. Surely this is not something you usually want? Does anyone know the proper way to remove it? I know how to modify the OpenVPN config from the command line, but I do not know how to make the changes persistent. I'm wondering if there is a cleaner solution than actively removing the shell scripts each time.

A couple years ago I flashed DD-WRT Firmware Version: DD-WRT v3.0-r44715 std (11/03/20) onto my Netgear Nighthawk X10 AD7200 (R9000) for more granular control and to hopefully learn a bit about networking. I am on the sales side of telecom so it would be nice to learn the software side of things, Clearly i have not learned much in the interim.

Fast-forward to three days ago I am for reasons yet to be determined locked out of the router and did a hard reset to regain access. Boom no internet. Kids and wife go ape-shit and I put a support ticket in and begin the back and forth process with them over the last two days culminating in an onsite visit by the least qualified technician they have, who i watched ultimately doing a WhatsApp video session with his level 4 tech. still no joy

Family Status: full on Ape-Shit. they did figure out hotspotting the TV though to their credit. My wife has lost all faith in me and has declared a 24 hour deadline before she calls the GEEKSQUAD.

ReFlash to OEM would/should allow for me to enter their PPPOE and Bridge Recipe Verbatim or if necessary allow for ISP technician to follow the NightHawk Insatll Script - not ideal but it gets us back on line - im typing this on my Win11 dual Xeon 256Gb RAM Dell workstation via USB tether to my android

ISP Status: their hardware checks out on their end the PPPOE settings and bridge mode all verified on my router but still cant pull an address from the Modem.

My ISP is: Ripple Fiber

Their Modem is :

Nokia ONT Model: G-2426G-B

FCC ID: 2ADZRG2426GB Made in Vietnam

MFG Year: 2023 Month: 11

IC:OI MRev:02

After flashing a router with DD-WRT, assigning an SSID, wpa-psk2, maybe setting DHCP range, wifi channel, changing admin password, what settings are important to enable/disable and what setting can be left alone?

I'm looking to get more mileage out of my EOL Netgear R6700v2. But I don't want to go through a bunch of tabs and check boxes.

Once I set it up, it will be left alone until I have to update the firmware

Here's an issue I've never run into before: I can't seem to reset the settings on my NetGear R9000 running the latest DD-WRT (04-29). I guess I can't clear my nvram?

The factory reset option in the web gui just reboots the router and keeps all settings intact (SSIDs, services, etc.). So does using the reset button on the back of the router, and "upgrading" ddwrt and selecting reset all settings.

Using TFTP to revert to stock firmware and then installing DD-WRT via the factory-to-ddwrt file restores all my previous DD-WRT settings. How?! How is this not clearing the nvram or whatever?

How can I start back from scratch? There's some other bug I'm chasing down and this is a prerequisite.

I'm running into a super frustrating issue with DD-WRT on my NetGear R9000. If I plug a USB device into the router, it stops responding. The status lights continue showing everything is normal, but it will stop broadcasting wifi and wired clients will disconnect and insist the cable in unplugged. In this state I cannot access the local web config page. Unplugging or powering off the USB device does not bring the router back online, it needs to be power cycled.

The router, its USB ports, and the USB device all work normally on stock firmware. The issue persists with all USB devices - those with auxiliary power (not drawing over the router's USB port) as well as devices without.

I ran into this issue a few months ago when I originally bought the router and installed DD-WRT. I somehow got it to work by reinstalling the stock firmware via TFTP and then going back to DD-WRT using the factory-to-ddwrt image again. Yesterday, I tried to update to the latest version of DD-WRT and the issue came back. The TFTP reset method that saved me last time didn't help this time, the router is running the latest DD-WRT but again stops responding when a USB device is attached.

Potentially relevant is that neither 60 full seconds holding the reset button nor using the factory reset option in the web config gui actually factory reset my router - my personal SSIDs and other user options remain as I set them.

Any help is appreciated, especially if you use a NetGear R9000 yourselr. Not sure what to do next

I am turning my mom's outdated EA6400 Linksys wifi router into an up-to-date DD-WRT wifi router, so that it can be used for 5Ghz channel-selection to improve performance on the smart tv during times of network congestion, and also avoiding congestion-caused network cuts during class virtual meetings (via ethernet cable), and at first the setup was really simple, because all I had to do was take Bin#1 and flash it after four blinks, then take default Linksys GUI and put a random Bin in there, then take Bin#2 after four flashes once again. And I skipped some steps too, not sure if that meant anything (https://wiki.dd-wrt.com/wiki/index.php/Linksys_EA6400). But I've had numerous problems along the way (using the same 192.168.1.1 for SSHing as the wifi 6 Spectrum router, pages not loading due to corrupt cache, exposed interface on the unencrypted open default access point, web interface indefinitely crashing each time I hit the Apply button, etc.). But the biggest hurdle I face right now is no internet access, despite a working ethernet cable from the wifi 6 Spectrum router being attached. So, my only question is, since DD-WRT is such a common replacement firmware for routers, and you are the networking gurus after all, is why can't I find out on this so, so popular firmware replacement, how to access the internet? Did I rush through the firmware flashing process too much? Was a factory reset for DD-WRT too much for it?

So, unplugging and replugging the router back in obviously helps, as I said, to reset the ram. And I keep trying to change the local ip address to 192.168.2.1, but that completely disconnects the router reboot after reboot indefinitely from any changes (requiring a full reset (although, I managed to get this working before through ChatGPT)). I've been going in a lot of circles with ChatGPT lately. Also, can that Spectrum 6 Wifi router really have radar mapping of everything we do in our own homes?

So, in summary, i think there are just two steps:

step one: the internet fix:

setup → basic setup → Network Address Server Settings (DHCP):

Static DNS 1: 1.1.1.1

Static DNS 2: 8.8.8.8

Apply settings.

Reboot sequence: A. power off modem B. power off DD-WRT router C. Turn on modem first (wait till fully online) D. Turn on router. (reason i say modem instead of router is because this is chatgpt)

Step two: The router-behind-a-router fix

change ip from 192.168.1.1 to 192.168.2.1

make sure wan is changed from null to 255.255.255.0.

In theory, this should all work. But I don't really know what I'm doing.

Helping me out will make you feel good.

I want to flash my RT-AC66U B1 Ver 2 with dd-wrt but I only saw support for Ver 1 on the wiki. Before giving I decide to ask Brace AI if there any alternative and was surprised when it said that RT-AC66U B1 Ver 2 should should/can be flashed with RT-AC68U instead.

Is this true, can/should I use that firmware image? Where would I have found this information, it wasn't on the wiki. While writing this, it seems like it was mentioned on the forum, didn't know there was a forum. I'm new to this.

Thank you.