Update script (fw_upgrade)

Thanks  user8446 here are the arp -a


root@Shield:~# arp -a
IP address       HW type     Flags       HW address            Mask     Device
192.168.1.100    0x1         0x2         98:90:96:9b:51:ac     *        br-lan
192.168.1.1      0x1         0x2         38:2c:4a:ce:90:d0     *        br-lan
root@Shield:~#





C:\Users\SC>arp -a

Interface: 192.168.1.100 --- 0x4
  Internet Address      Physical Address      Type
  192.168.1.1           38-2c-4a-ce-90-d0     dynamic
  192.168.1.43          a4-77-33-47-a7-36     dynamic
  192.168.1.59          2c-26-5f-80-02-15     dynamic
  192.168.1.175         e8-de-27-39-c8-55     dynamic
  192.168.1.230         00-08-dc-1b-f9-01     dynamic
  192.168.1.255         ff-ff-ff-ff-ff-ff     static
  224.0.0.2             01-00-5e-00-00-02     static
  224.0.0.22            01-00-5e-00-00-16     static
  224.0.0.251           01-00-5e-00-00-fb     static
  224.0.0.252           01-00-5e-00-00-fc     static
  239.255.255.250       01-00-5e-7f-ff-fa     static
  255.255.255.255       ff-ff-ff-ff-ff-ff     static

In your router, do a DHCP reservation for your shield on 192.168.1.111. Your Asus router DHCP assigned it to 192.168.1.59 and not letting it switch to .111, I'm guessing some type of anti arp spoofing in your router?
Also, you didn't point the dns and gateway in your router to your shield did you?

breda wrote

Hi, also notice that the shield has 2 IP address one is 192.168.1.111  but does not bring up shield  in  browser,  however if I use  192.168.1.59 I can log-in to the shield and  looking at my ASUS router only 192.168.1.111 is visible  on my Interface ip list

In your router, set a reserved IP for 192.168.1.111 and assign it to the MAC ID of your Shield. That way, when Shield tries to switch to .111, the Router will have already assigned it .111 and there will be no conflict.

HI, Thaks again for all the help I reserved IP for 192.168.1.111 and assign it to the MAC ID of your Shield. but I notice  after I log in luci   I get
 Authorization Required Please enter your username and password  and I do enter them  but when  I click on any of the tabs on top it wants  the username and password  again,

Ok not getting the passwords pop up anymore  but still not getting any internet traffic  I also notice a file named network.br in  etc/config/ here is the contents


-----------------------------------------------------------------------------------------------------------------------------------
network.br


config interface 'loopback'
        option ifname 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'fd30:1d37:4e69::/48'

config interface 'wan'
        option ifname 'eth0'
        option proto 'none'
        option enable '1'

config interface 'wan6'
        option ifname 'eth2'
        option proto 'none'
        option enable '1'

config interface 'lan'
        option ifname 'eth1'
        option proto 'dhcp'
        option type 'bridge'
        option enable '1'

---------------------------------------------------------------------------------------------------------------------------------------------------------


root@Shield:~# arp -a
IP address       HW type     Flags       HW address            Mask     Device
192.168.1.118    0x1         0x2         04:5c:06:0a:dd:af     *        br-lan
192.168.1.1      0x1         0x2         38:2c:4a:ce:90:d0     *        br-lan
192.168.1.100    0x1         0x2         98:90:96:9b:51:ac     *        br-lan
root@Shield:~#



Microsoft Corporation. All rights reserved.

C:\Users\SC>arp -a

Interface: 192.168.1.100 --- 0x4
  Internet Address      Physical Address      Type
  192.168.1.1           38-2c-4a-ce-90-d0     dynamic
  192.168.1.34          f0-27-2d-32-a9-af     dynamic
  192.168.1.111         2c-26-5f-80-02-15     dynamic
  192.168.1.175         e8-de-27-39-c8-55     dynamic
  192.168.1.230         00-08-dc-1b-f9-01     dynamic
  192.168.1.255         ff-ff-ff-ff-ff-ff     static
  192.168.49.1          f0-27-2d-32-a9-af     dynamic
  224.0.0.2             01-00-5e-00-00-02     static
  224.0.0.22            01-00-5e-00-00-16     static
  224.0.0.251           01-00-5e-00-00-fb     static
  224.0.0.252           01-00-5e-00-00-fc     static
  239.255.255.250       01-00-5e-7f-ff-fa     static
  255.255.255.255       ff-ff-ff-ff-ff-ff     static

Hi

fw_upgrade version 8 is now ready

WARNING to use this latest version, 4 files new changing i have included a script that does this.

This version now adds back web filter selection, some have been chance to marry up with the free web filters that are download from www.shallalist.de, if the download file is not available  the script will continue running. At present If i  selecte  all (Ads Malicious Drugs Religion Gamble Porn Spyware Redirector Downloads)  this totals 1120398 line of ip address, which does slow the shield down if i unselect the porn filter this drop down to 239210 lines of ip address. if you do need the porn filter i would goes and use opendns and have them filter the porn. Only a suggestion, i left the option as it's your choice.
Ramdisk has now gone as it uses tmpfs which is using the shields memory,
Code has been slimmed and more error checking implemented

Think this should be the last change for sometime.  

If you copy all files to /tmp on the shield and run update_fw_upgrade8_files.sh, it will rename the original files to *.old and then move the new files from /tmp to the corresponding locations.

dnsmasq.dnsmasq
e2guardian.lua
fw_upgrade.fw_upgrade
update_fw_upgrade8_files.sh
write-categories.sh

i will also post on github

hope you all enjoy

roadrunnere42

Great work Roadrunnere42 would this help with my loss of internet in bridge mode? Also, I have 2 network files  in /etc/config/network  one is named
network  and one is network.br  should  there be 2 of them?

Roadrunnere42 wrote

Hi

fw_upgrade version 8 is now ready

Think this should be the last change for sometime.  

Thank you for all your hard work!!

breda

I did  notice in your dnsmasq file that you have commented out hans additions, is this on proposes?

If you update to version 8 the old files are not overwritten but just has .old added to the name, so you can always revert back to 7.?

networks are not my thing,  hope you get is sort quickly.

roadrunner42

Hi, Roadrunnere42 no I did not make any changes to dnsmasq file

Thanks

breda

lust looked at your posted etc/config/network file and compared with my spare shield which has not been modified and running sp1.51 and found that you have
option proto 'dhcp'  where as i don't have this.

my file is as follows

config interface 'loopback'
        option ifname 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'fd30:1d37:4e69::/48'

config interface 'wan'
        option ifname 'eth0'
        option proto 'none'
        option enable '1'
        option auto '1'

config interface 'wan6'
        option ifname 'eth2'
        option proto 'none'
        option enable '1'
        option auto '1'

config interface 'lan'
        option ifname 'eth1'
        option type 'bridge'
        option enable '1'
        option proto 'static'
        option ipaddr '192.168.2.111'
        option netmask '255.255.255.0'
        option gateway '192.168.2.1'
        option broadcast '192.168.2.255'
        option dns '192.168.2.1'

config interface 'blockdomain'
        option ifname 'br-lan'
        option proto 'static'
        option ipaddr '192.168.2.112'
        option netmask '255.255.255.0'

hope this helps

roadrunnere42

Thanks  Roadrunnere42  I see config interface 'lan'  option proto 'dhcp'  I will  try to  I change it to 'static via WinSCP also  there seem to be   2 network files  in /etc/config/network  one is named  network  and one is network.br


is the network.br for bridge mode configuration?

Hi, is this the right setting ?


config interface 'blockdomain'
        option ifname 'br-lan'
        option proto 'static'
        option ipaddr '192.168.1.112'
        option netmask '255.255.255.0'

Hi, Roadrunnere42 I copied all files to /tmp how do you run the update_fw_upgrade8_files.sh I'm log in via SSH ?

Thanks

breda

make sure you are in tmp folder  (cd /tmp)

then type

update_fw_upgrade8_files.sh    

or

sh update_fw_upgrade8_files.sh

the script will run and the words finished copying will be displayed on screen  when it's finished copying files (usually 1 second)

roadrunnere42

I've closed this super long thread - @Roadrunner - please open a new fw_upgrade thread.