Tomato for R8000

FreshTomato-ARM by kille72 for NETGEAR R8000 (AIO-2018.4)

NOTE: YOU MAY NEED AN "INITIAL" FLASH FILE IN ORDER TO FLASH THIS FIRMWARE TO YOUR ROUTER. FLASH AT YOUR OWN RISK. INITIAL FILES CAN BE FOUND HERE: 

https://exotic.se/freshtomato-arm/Netgear%20R-series%20initial%20files/


[FreshTomato-ARM]
(Tomato-ARM by @kille72 project changed its name to FreshTomato)

Forked off from Tomato-ARM by Shibby, builds compiled by FreshTomato team
FreshTomato team: @kille72 @pedro311

Latest version: 2018.4 - 2018.09.12
Source code: https://bitbucket.org/kille72/freshtomato-arm, https://bitbucket.org/pedro311/freshtomato-arm
Downloads: http://freshtomato.org
Donate: https://exotic.se

For the following ARM routers: Asus N18U, AC56S, AC56U/AC56R, AC68U(A1,A2,B1)/R/P, AC3200, Netgear R6250, R6300v2, R6400, r7000, R8000, Linksys EA6300v1/EA6400, EA6500v2, EA6700, EA6900, Tenda AC15, Huawei WS880, Dlink DIR868L, Xiaomi R1D.

Disclaimer: We are not responsible for any bricked routers, nor do we encourage other people to flash alternative firmwares on their routers. Use at your own risk!

ORIGINAL THREAD:

https://www.linksysinfo.org/index.php?threads/fork-freshtomato-arm.74117/

FreshTomato-ARM Changelog
===========================

2018.4 - 2018.09.12
----------------------------

- Preliminary support for Stubby (DNS-over-TLS)
- dnsmasq: Updated to 2.80test6
- openssl: updated to 1.0.2p
- php: Updated to 7.2.9
- tor: Updated to 0.3.3.9
- tinc: Updated to 1.1pre16
- libcurl: Updated to 7.61.1
- libcurl: Fix build failures
- e2fsprogs: Updated to 1.44.4
- libcurl: Updated CA certificate bundle as of 2018-06-20
- adminer: Updated to 4.6.3
- miniupnpd: Updated to 2.1.20180706
- libjson-c: Updated to 0.13.1
- samba: enable PARALLEL_BUILD directive for components
- gmp: optimize gmp build (fix compilation with different autotools version, allow parallel make, don't build demos and doc)
- mdadm: skip building mdadm man pages
- igmpproxy: fix compiler flags, change code optimization to -O3
- dnscrypt-proxy: Updated resolvers csv to 20180709
- Increase the maximum size that is used when reading the ssh-host-key (to 4096 bits)
- OpenVPN: make IPv6 connection possible if IPv6 is enabled
- OpenVPN: extend Server GUI functionality - add option to push LAN(br0)...LAN4(br3) (only if available) - push the suitable DNS Server LAN IP
- radvd: remove leftovers at file router/rc/rc.h (Tomato uses dnsmasq)
- GUI: only include curl as a connection checker, if it's built
- GUI: openvpn: add AES-*-GCM ciphers to the available legacy ciphers
- GUI: add a needed include file for code utilizing bwm-common.js
- GUI: bwm-common.js: fix erroneous change in commit 3e650c1
- GUI: wireless.js: fix erroneous change in commit fe53904
- GUI: do not display rt bw graphs if monitoring has been disabled
- router: Makefile: compile dnsmasq with NO_ID, NO_AUTH and NO_GMP directive + some cosmetics
- router/rc/wan.c: start miniupnpd after httpd/later to avoid disabling IPv6 at miniupnpd startup (does happen sometimes with 2018.3, solves miniupnpd warning "no HTTP IPv6 address, disabling IPv6" at reboot/restart)
- router/rc/transmission.c: sysctl binary is not included in TomatoUSB, write values directly instead
- router/rc/rc.h: fix ARM builds WITHOUT IPv6 support (there is no freshtomato ARM build with IPv4 support only)
- router/rc/firewall.c and rc.h - add function "enable_ndp_proxy()" - Enable NDP Proxy for IPv6 builds - add missing conditional compilation
- watchdog: increase waittime to 3 and max_ttl to 4 in traceroute to reduce false positives
- nocat: Retiring Captive Portal feature
- kernel: netfilter: fix u32 match
- kernel: netfilter: nf_conntrack: fix count leak in error path of __nf_conntrack_alloc
- kernel: netfilter: nf_conntrack: set conntrack templates again if we return NF_REPEAT
- kernel: netfilter: nf_conntrack: fix early_drop with reliable event delivery
- kernel: netfilter: nf_conntrack: fix ct refcount leak in l4proto->error() (Tomato doesn't have icmp module, but this fix is still relevant)
- kernel: netfilter: nf_conntrack: fix event flooding in GRE protocol tracker
- kernel: netfilter: ip6_route_output() never returns NULL. ip6_route_output() never returns NULL, so it is wrong to check if the return value is NULL
- kernel: netfilter: ip4 ip_queue: Fix small leak in ipq_build_packet_message()
- kernel: netfilter: ip6 ip_queue: Fix small leak in ipq_build_packet_message()
- kernel: netfilter: ipset: dumping error triggered removing references twice
- kernel: netfilter: ebtables: fix wrong name length while copying to user-space
- kernel: logfs: Prevent memory corruption
- kernel: cifs: fix possible memory corruption in CIFSFindNext
- kernel: ARM: 6891/1: prevent heap corruption in OABI semtimedop
- kernel: ext3: Fix error handling on inode bitmap corruption
- kernel: ext2: Fix error handling on inode bitmap corruption
- kernel: mac80211: fix conn_mon_timer running after disassociate
- patches: dnsmasq: log packet resize reports at debug level instead of warning since they are too frequent
- WL: update wireless driver for SDK7 to GPL 382.50470
- Fixing the `uname -r` issue in readme

AdvancedTomato for NETGEAR R8000 (3.4-140 TRX)

https://advancedtomato.com/

NOTE: AN INITIAL FLASH FILE MAY BE REQUIRED TO BRING THIS ROUTER FROM STOCK TO TOMATO, THEN THE .TRX FILE IS USED TO UPDATE TO THE LATEST VERSION. SEE ADVANCEDTOMATO'S LINK ABOVE TO DETERMINE IF AN INITIAL BUILD IS REQUIRED BEFORE FLASHING THIS FIRMWARE.

Update 3.4-140 (GUI):
- Synchronized changes with Shibby's 140 builds
- Added customized scrollbars to the navigation and content container
- Updated adminer to version 4.3.1
- Fixed/Improved some cosmetics across all pages
- Improved amount of numbers you can enter on QOS Settings page (Inbound/Outbound limits input)

All versions (Shibby):
– Allow to enable/disable APCUPSD daemon (disabled by default)
– Updated mymotd script
– kernel: (backport) fix reuse-after-free in DCCP
– Collection of patches from M_ars to hopefully correct IPTraffic/Bandwidth monitor
– Add -N flag to httpd (always send no-cache)
– Allow to change listen interface for MiniDLNA
– Add support for user-defined interfaces for Samba
– libcurl: Add CA bundle support but only for AIO targets
– AdBlock: improvements
– samba, CVE-2015-5252; Subject: Insufficient symlink verification in smbd
– samba, CVE-2012-0870; Subject: Remote code execution vulnerability in smbd
– samba, Patch – Denial of service – CPU loop and memory allocation
– Fix lack of BWM stats for WAN when using PPPoE
– Fix some display issues in wireless rates
– Add generation/use of ECDSA keys for SSH/Dropbear
– Fix VLAN resetting to default
– dropbear: disable MD5 support, for security reasons
– Make bandwidth limiter work with IPv6
– Fix /etc/shadow file. Fix authentication issue for CUPS
– use macvendors.com for OUI lookup
– nginx: updated to 1.10.3
– nano: Updated to 2.8.0
– sqlite: Updated to 3.18.0
– tinc: update to 1.1pre14
– OpenVPN: updated to 2.4.1
– OpenVPN: upgrade bundled LZ4 library to 1.7.5
– dnsmasq: Many changes ported from upstream up to March 17th, 2017
– libsodium: Updated to 1.0.12
– xl2tpd: Updated to 1.3.9
– tor: Updated to 0.2.9.10
– libcurl: Updated to 7.53.1
– e2fsprogs: Updated to 1.43.4
– libiconv: Updated to 1.15
– libjson-c: Updated to 0.12.1
– zlib: Updated to 1.2.11
– sqlite: Updated to 3.17.0
– usb_modeswitch: updated to 2.50 and data package to 20170205 (2017-02-05)
– pcre: updated to 8.40
– dnscrypt: updated to 1.9.4
– openssl: Updated to 1.0.2k
– gmp: updated to 6.1.2
– nettle: updated to 3.3
– busybox: update to 1.25.1
– libnfsidmap: updated to 0.26
– minidlna: Updated to 1.1.6

ARM only (Shibby):
– Add support of Asus RT-AC56S (Single-core clone of RT-AC56U)
– R1D: Turn off USB 3.0 option
– stealthMode and optware no longer to be installed
– ipset: Updated to 6.32
– Use kernel ext4 driver for all ext2/3/4 filesystems
– Fix several ARM nvram utility bugs
– kernel-arm: Patched all 2.6.36 kernel against CVE-2016-5195
– kernel-arm: Disable router anycast address for /127 and /128 prefixes

Tomato by Shibby for NETGEAR R8000 (140-AIO)

NOTE: A SPECIAL "INITIAL" FLASH FILE IS NEEDED FOR SHIBBY'S TOMATO ON THE R8000. YOU MUST FIRST FLASH WITH THIS INITIAL FILE BEFORE UPGRADING TO THIS FINAL VERSION. SEE INSTRUCTIONS IN THE VIDEOS BELOW AND ON SHIBBY'S SITE, OR OUR FORUMS, FOR MORE INFORMATION.

How to install tomato:
http://tomato.groov.pl/?p=614

How to return to Genie:
http://tomato.groov.pl/?p=616

Additional Downloads from Shibby: http://tomato.groov.pl/?page_id=164

Sources: http://tomato.groov.pl/?page_id=166

Initial Tomato Flash File by shibby for NETGEAR R8000 (138-Initial)

The initial flash file for the NETGEAR R8000 when upgrading to Shibby's v138 Tomato from stock.

Latest versions of final flash files at Downloads

Instructions:

How to install tomato:
http://tomato.groov.pl/?p=614

How to return to Genie:
http://tomato.groov.pl/?p=616

Tomato Firmware by shibby for NETGEAR R8000 (138-VPN)

THE INITIAL FLASH FILE for v138 FOR THE R8000 MUST BE APPLIED FIRST. (Available at Downloads)

Instructions:

How to install tomato:
http://tomato.groov.pl/?p=614

How to return to Genie:
http://tomato.groov.pl/?p=616

Source:

http://tomato.groov.pl/?page_id=164

 

Tomato Firmware by shibby for NETGEAR R8000 (138-AIO)

THE INITIAL FLASH FILE for v138 FOR THE R8000 MUST BE APPLIED FIRST. (Available at Downloads)

Instructions:

How to install tomato:
http://tomato.groov.pl/?p=614

How to return to Genie:
http://tomato.groov.pl/?p=616

Source:

http://tomato.groov.pl/?page_id=164

 

Tomato Firmware by shibby for NETGEAR R8000 Nighthawk (VPN)

NOTE: This is the "upgrade" flash file which must be applied after the "initial" flash, found here.

This file takes you from the initial Tomato flash to the upgraded shibby build.

It comes in two flavors, AIO (All-In-One) and VPN.


http://tomato.groov.pl/download/K26ARM7/136-MultiWAN/

Tomato firmware by shibby for the NETGEAR R8000 Nighthawk - Upgrade File from initial -> current shibby build

136-MultiWAN Updated 04-12-2016

 

Tomato Firmware by shibby for NETGEAR R8000 Nighthawk (All-In-One)

NOTE: This is the "upgrade" flash file which must be applied after the "initial" flash, found here.

This file takes you from the initial Tomato flash to the upgraded shibby build.

It comes in two flavors, AIO (All-In-One) and VPN.


http://tomato.groov.pl/download/K26ARM7/136-MultiWAN/

Tomato firmware by shibby for the NETGEAR R8000 Nighthawk - Upgrade File from initial -> current shibby build

136-MultiWAN Updated 04-12-2016

Tomato Firmware by shibby for NETGEAR R8000 (Initial)

NOTE: This is the "initial" flash file if you wish to flash your NETGEAR R8000 Nighthawk with Tomato.

This file takes you from the stock firmware to Tomato, then you need to upgrade to the latest shibby build.

http://tomato.groov.pl/download/K26ARM7/136-MultiWAN/


Tomato firmware by shibby for the NETGEAR R8000 Nighthawk - Initial flash file from Genie -> Tomato

136-MultiWAN Updated 04-12-2016