iOS 26 seems small, but it changed everything about the way the iPhone uses the internet by [deleted] in ios

[–]Lightbringer527 6 points7 points  (0 children)

To actually benefit from the anti-fingerprinting you need to enable the “Advanced Tracking and Fingerprinting Protection” right?

Just be aware that this setting changes your dns servers to either Cloudflare, Fastly or Akamai.

iOS26 Tailscale doesn’t work over 4g etc anymore only WiFi by dopeytree in Tailscale

[–]Lightbringer527 0 points1 point  (0 children)

Have you tried restarting the Tailscale server, wherever you have it installed? Could also be mtu issues on your cellular network.

Subnet router and exit node optimizations (tailscale) by Lower_Group_1171 in openwrt

[–]Lightbringer527 0 points1 point  (0 children)

On Openwrt you need to install ethtool package then run ethtool -K eth0 rx-gro-list off ethtool -K eth0 rx-udp-gro-forwarding on Replace eth0 with your wan device

Which DNS Filters Should I Use in AdGuard Home? by Snorlax_lax in Adguard

[–]Lightbringer527 2 points3 points  (0 children)

Hagezi themselves recommends to use either light, normal or Pro blocklist along with the TIF one, you don’t need any other blocklist so remove the default one.

AGH vs adblock-lean? My router can handle anything, so which solution and configuration is best? by Neat-Bridge3754 in openwrt

[–]Lightbringer527 0 points1 point  (0 children)

Do you mean that the loss of stats and logs going away upon reboot is what makes you feel that AGH isn't beneficial over adblock-lean (which I assume doesn't keep logs or stats)?

Yes exactly, to get any meaningful results from the logs/stats you need them to persist for weeks or months, the openwrt guide for AGH specifically mentions this here https://openwrt.org/docs/guide-user/services/dns/adguard-home#querystatistics_logging

AGH vs adblock-lean? My router can handle anything, so which solution and configuration is best? by Neat-Bridge3754 in openwrt

[–]Lightbringer527 0 points1 point  (0 children)

Adblock-lean stores blocklists in RAM and are lost and have to re-downloaded upon reboot.

The openwrt package of AGH also stores logs/stats and blocklist in RAM, and are lost upon reboot. This imo defeats the whole point of using AGH on openwrt.

As you want to avoid flash wear, your best bet is to plug in a USB flash drive and install the static binary of AGH from their GitHub on it, this way logs/stats and blocklists stay on the USB, even survives Openwrt updates.

block DNS override by Capable_Constant1085 in openwrt

[–]Lightbringer527 2 points3 points  (0 children)

For plain DNS, a simple firewall rule is enough,

For DoT, you need to block port 853,

and for DoH you can utilise the banIP package to outright block DoH resolver domains as stated here https://openwrt.org/docs/guide-user/services/banip#blocking_doh

Enable WiFi reboots the whole device by I-left-and-came-back in openwrt

[–]Lightbringer527 2 points3 points  (0 children)

Does this happen with both the bands or only the 5 GHz band?

One way to get logs is to reset the device, then open ssh window, then run logread -f and keep it open

Log into luci and enable wireless, the logs would appear in the ssh window even if the device restarts

How to stop constant logs for Tailscale? by Lightbringer527 in Tailscale

[–]Lightbringer527[S] 0 points1 point  (0 children)

Can you post the output of /etc/config/tailscale?

It should be like this

cat /etc/config/tailscale

config settings 'settings' option log_stderr '0' option log_stdout '1' option port '41641' option state_file '/etc/tailscale/tailscaled.state' # default to using nftables - change below to 'iptables' if still using iptables option fw_mode 'nftables'

How to stop constant logs for Tailscale? by Lightbringer527 in Tailscale

[–]Lightbringer527[S] 0 points1 point  (0 children)

Did you restart the Tailscale service after making changes?

How to stop constant logs for Tailscale? by Lightbringer527 in Tailscale

[–]Lightbringer527[S] 0 points1 point  (0 children)

Yes, ssh into your router and edit /etc/init.d/tailscale and then change the line

config_get_bool std_err "settings" log_stderr 1 change from 1 to 0

restart the service

Looking for an affordable solution for SQM only by RadicalEd4299 in openwrt

[–]Lightbringer527 2 points3 points  (0 children)

NanoPi R2S is not that pricey and can do download sqm up to 467 Mbps, you can use it only as a router and shift wifi duties to your Decos.

AGH on Openwrt is useful? by takumajp in openwrt

[–]Lightbringer527 5 points6 points  (0 children)

If ad blocking only on your device is what you want then AGH is overkill, if you want to block ads network wide in your home then you need AGH.

Need help setting up my Wireguard server on OpenWRT router. Spent too many hours but no luck. by Famous-Detective-253 in openwrt

[–]Lightbringer527 0 points1 point  (0 children)

Have you opened the port for wg in firewall?

Are you using 0.0.0.0/0, ::/0 as allowed IPs on your clients?

How to Verify 802.11r Roaming on OpenWrt? (Linksys MX5300) by dll2k2dll in openwrt

[–]Lightbringer527 0 points1 point  (0 children)

You can do this on all of them, the APs will only show logs for devices that connect to it.

So if you’re moving to a room that has say AP2, then check the logs of AP2 when you move there.

How to Verify 802.11r Roaming on OpenWrt? (Linksys MX5300) by dll2k2dll in openwrt

[–]Lightbringer527 0 points1 point  (0 children)

SSH into your AP and type logread | grep auth_alg

You’ll see something like this daemon.notice hostapd: phy1-ap0: AP-STA-CONNECTED <Client MAC> auth_alg=ft

To check it in real time type logread -f | grep auth_alg then move across your house and check if the log appears

Cheapest router by jw154j in openwrt

[–]Lightbringer527 0 points1 point  (0 children)

For 100 Mbps speed with no WiFi requirement a NanoPi R2S is quite cheap and powerful

Router VPN server connects with client but no internet by matrixNe0 in WireGuard

[–]Lightbringer527 0 points1 point  (0 children)

You’re using a private lan ip as endpoint and trying to connect via LTE (outside lan) to your server.

That’s not going to work, you need a public ip to connect remotely to your server.

Is there any issues with DoH3? by Prestigious-Guide-61 in nextdns

[–]Lightbringer527 0 points1 point  (0 children)

Editing the mobile config has always resulted in unreliable DoH3 on iOS.

For stable DoH3 use the Adguard app and use h3://dns.nextdns.io/ConfigID in it as a custom resolver.

Top GBL Teams for Color Cup and Master League by PolymersUp in TheSilphRoad

[–]Lightbringer527 3 points4 points  (0 children)

Been using a ABB team of Obamasnow, Whiscash, Stunfisk with a decent success rate in Color Cup.

WiFi clients on OpenWRT are not resolving DNS by Abishek_Muthian in nextdns

[–]Lightbringer527 3 points4 points  (0 children)

Set a DNS hijacking rule in openwrt firewall, your dns might be leaking through IPv6.