› UKTH forums › 🛜 Wireless Routers & Modems › ASUS & Wireless › ASUS – DSL-AC88U / DSL-AC3100 Firmwares (beta's) etc. Looks like a new Beta Release for the DSL-AC88U is available, this version has Telnet enabled and improved 2.4GHz wifi (I believe). DSL-AC88U_v9.10.06_build581_debug.w.zip https://www.asuswebstorage.com/navigate/s/604D61534F2541D1B3CE1CC031A697E4Y UK Sentinel In a completely...
- This topic has 1,438 replies, 106 voices, and was last updated 1 week, 1 day ago by
alt.james.
- AuthorPosts
- October 17, 2019 at 6:21 am #4804
Does this work. or are you looking to create a singular static route ? Not sure if the DSL-AC88U has this option, but under LAN > DHCP Server is there an option to set DNS and WINS Server setting. this should then configure DNS queries obtained via DHCP to the DNS IP address of your Pi Hole IP Address. Then block port 53 ?
I’ve already have set the DNS server of the router to my Pi Hole, but how do I block port 53?
You need to login in order to vote
October 17, 2019 at 7:58 am #4805I see, so your DNS Services is now using something like DNS server Port 443 and you are looking to blocking port 53 to stop apps etc. chatting via DNS on port 53 ?
IS that correct ? as if so then I think the DSL-AC88U firmware does not allow telnet access, to close port 53 or use Iptables, but I will look into this more later today?
In a completely sane world, madness is the only freedom (J.G.Ballard).
You need to login in order to vote
October 17, 2019 at 8:29 am #4807This router/modem (Asus DSL-AC88U) has become a really dissapointing piece of expensive kit to the extent that I might go back to the Homehub.
Can anyone help with appropriate settings for ipv6?
Unlike the previous iteration of the router (AC-68U) this one doesn’t give any options to change the lan prefix length to coordinate with BT as /56 rather than /64
I have it set in native mode and have tried messing around with the other settings (eg Static Ip) to no avail.
You need to login in order to vote
October 17, 2019 at 8:39 am #4808Can anyone help with appropriate settings for ipv6? Unlike the previous iteration of the router (AC-68U) this one doesn’t give any options to change the lan prefix length to coordinate with BT as /56 rather than /64 I have it set in native mode and have tried messing around with the other settings (eg Static Ip) to no avail.
I fought with IPv6 on this router for months and in the end I gave up – it simply doesn’t work on BT Openreach services, either with the built in modem or an external Openreach one.
Oddly enough, I also have a Billion 8900AX-1600 R2 which has the same chipset and the same IPv6 issues…

You need to login in order to vote
October 17, 2019 at 10:44 am #4809As @KingfisherUK said, IPv6 /56 for UK (BT) usage does not work well, ASUS are fully aware of this issue and hopefully will be fixed in next firmware release (whenever that is)

In a completely sane world, madness is the only freedom (J.G.Ballard).
You need to login in order to vote
October 17, 2019 at 1:22 pm #4812@jetspeed – Ok, I believe the following will block all port 53 requests from LAN to WAN, but never tested this on the DSL-AC88U.
Go to Firewall > Network Services Filter to block port 53 TCP and UDP. as Network Services Filter only impacts LAN to WAN traffic and this should create entries in the iptables automatically.
For ASUS, I believe all ports from WAN to LAN are closed by default, so ports are only opened by LAN traffic heading to default gateway , (UPnP – Port Forwarding) etc.
Let us know how this goes ?
Attachments:
In a completely sane world, madness is the only freedom (J.G.Ballard).
You need to login in order to vote
October 18, 2019 at 7:36 am #4815@jetspeed – Ok, I believe the following will block all port 53 requests from LAN to WAN, but never tested this on the DSL-AC88U. Go to Firewall > Network Services Filter to block port 53 TCP and UDP. as Network Services Filter only impacts LAN to WAN traffic and this should create entries in the iptables automatically. For ASUS, I believe all ports from WAN to LAN are closed by default, so ports are only opened by LAN traffic heading to default gateway , (UPnP – Port Forwarding) etc. Let us know how this goes ?
Thank you! This looks like what I’m after, but somehow can’t add port 53 without first adding a source IP? When adding port 53, it just disappears – no error message, no nothing.
I’m using FW503 and screen looks slightly different?
Attachments:
You need to login in order to vote
October 18, 2019 at 8:05 am #4817That is disappointing, try a different browser.
and try newer firmware – Version 1.10.06_Build591
I managed to get it to work on RT-AC86U and an RT-AX88U simulator online
not sure if 0.0.0.0 would work for Source IP address ?
If these options does not work, then alas no other option available to block port 56 from UI, hopefully ASUS will fix also in next firmware (big list they have)

Attachments:
In a completely sane world, madness is the only freedom (J.G.Ballard).
You need to login in order to vote
October 18, 2019 at 8:41 am #4822That is disappointing, try a different browser. and try newer firmware – Version 1.10.06_Build591 I managed to get it to work on RT-AC86U and an RT-AX88U simulator online not sure if 0.0.0.0 would work for Source IP address ? http://demoui.asus.com/ If these options does not work, then alas no other option available to block port 56 from UI, hopefully ASUS will fix also in next firmware (big list they have)

No go captain, I’m on record 56 days online streak with FW503! All the later ones, I couldn’t get a few weeks before it would lock up or have DNS failures.
Tried Chrome and Firefox, same deal.
I put my own PC’s as the source and tried a nslookup but it seemed to resolve fine and didn’t appear to block anything?
Anyway, I think I give up and wait for the next FW.
Thank you for the assist.
You need to login in order to vote
October 18, 2019 at 10:01 am #482356 days, that is a first for the DSL-AC3100 / 88U

In a completely sane world, madness is the only freedom (J.G.Ballard).
You need to login in order to vote
October 18, 2019 at 6:55 pm #4824Hi getting BT ultrafast 2 FTTP installed on Monday,I thought my DSL-AC88U would work (Would rather not use the BT Super Hub 2 BT sent)Â but reading this thread im having doubts.Can you folk give me any tips/advice to get it working please.
You need to login in order to vote
October 19, 2019 at 6:09 am #482656 days, that is a first for the DSL-AC3100 / 88U

No, it’s my own record, but I think another of your regular users did something like 90??

You need to login in order to vote
October 19, 2019 at 1:06 pm #4827Yes, that was me. I went to something like 120 or so in the end. I would have been well on the way again if builders hadn’t cut through the power the other day.
You need to login in order to vote
October 20, 2019 at 6:51 am #4828Yes, that was me. I went to something like 120 or so in the end.
It seems like we’re the only ones left using this. Let’s have a friendly competition. I’ll let you know when I break your record ;)
You need to login in order to vote
October 20, 2019 at 10:32 am #4829OK, you’re on! I’m at 10 days 22 hours at the moment. I’m sure to make it to February without any new firmware appearing so I might be get past 120 days! The trick, as far as I can tell, is to turn everything off. No AI. No VPN & hardly any wifi devices. I do use it to stream music and to run torrents, but other than that it doesn’t do anything complicated.
You need to login in order to vote
- AuthorPosts
- You must be logged in to reply to this topic.



