ASUS RT-AC56S AsusWrt-Merlin Firmware 384.6.0

The AsusWrt-Merlin firmware was developed with the primary goal of boosting the original ASUS firmware, fix bugs and also add new improvements. This package includes a customized firmware targeted at ASUS routers that brings various changes without modifying the interface of the original firmware.

Changes:

- NOTE: The RT-AC87U is not supported in this release, as Asus hasn't released any updated code for that model.
- NEW: Merged with GPL 384_21045/382_50624.
- NEW: Added support for the "-p" option to netstat.
- NEW: Added setting to enable DNS rebind protection, on the DHCP page. This works by rejecting upstream server responses that would point at a private IP.
- CHANGED: Updated nano to 2.9.8
- CHANGED: Updated curl to 7.60.0 (contains security fixes)
- CHANGED: Allow selecting text (for copy/paste operations) on AiProtection pages.
- CHANGED: Added AES--GCM ciphers to the OpenVPN legacy ciphers (so they can be explicitely used without using NCP).
- CHANGED: Updated dnsmasq to 2.80test2-17-g51e4eee (themiron)
- CHANGED: Since dnsmasq 2.80, dnsmasq now ensures that unsigned DNS replies received with DNSSEC enabled are legitimate. If your upstream DNS doesn't support DNSSEC, this means all replies from signed zones will be considered invalid. Make sure you only enable DNSSEC if your upstream DNS servers do support it. This behaviour is a bit slower, but far more secure than the old default.
- CHANGED: Network Tools -> Netstat output also report program/PID
- CHANGED: Updated CA bundle to June 20th version.
- FIXED: IPv6-related issues on non-HND platform (themiron)
- FIXED: Couldn't log on WTFast if accessing the router webui over https.
- FIXED: USB modem support code failing to properly pass parameters to the kernel module (themiron)
- REMOVED: WTFast support for RT-AC88U/RT-AC3100/RT-AC5300, as it's incompatible with recent versions of curl (and has been broken for quite some time). Not gonna revert back to a 7 years old curl version just for wtfast.

CHANGED: Revised OpenVPN server options:

- Removed "TLS Reneg time" (rarely used, can manually be set as a custom option)
- Removed "Server Poll" (which didn't work properly), and reimplemented watchdog service, hardcoded to 2 mins frequency.
- Removed "Push LAN" and "Redirect Gateway", replaced with new Client Access setting
- Removed Firewall setting (firewall rules are now always created, and the broken External mode was fixed and integrated into the new Client Access setting). You can now use the postconf script to override it.
- Removed option to respond to DNS queries- enabling the option to Push DNS will also handle it
- Added new Client Access setting to select between three types of access: LAN only, WAN only (will block access to the LAN, including the router itself) and LAN + WAN.
- Keys and certificates can now be up to 7999 characters long.

CHANGED: Revised OpenVPN client options:

- Reorganized settings into groups
- Removed "Poll Interval" (which didn't work properly), and reimplemented watchdog service, with a hardcoded frequency of 2 mins.
- Removed Firewall setting (firewall rules are now always created). You can now use the postconf script to override it.
- Modified behaviour of Connection Retry. Instead of taking a value in seconds that only affected resolution failure, it now takes a number of attempts, and affects connection failures. Resolution failures will now retry for an infinite period of time (the default OpenVPN value).
- Added "refresh" link which can be clicked to re-query the public IP endpoint of the tunnel
- Keys and certificates can now be up to 7999 characters long.
 

Installation Notes:

- This custom firmware can be applied like any regular update.
- You should not need to reset to factory defaults.
- You can revert back to an original ASUS firmware at any time.
- Do not load a saved copy of your settings. 

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.