Firmware

Tomato 1.20

• Updated to dnsmasq 2.43. This takes care of the CERT VU#800113 security issue.
• Fixed setting custom scheduler time doesn't save correctly.
• Updated to L7 patterns 2008-04-23
• Static DHCP limit increased to 100.
• Added EasyDNS HTTPS support.
• Added date format option for Bandwidth/* pages.

»Download

Tomato 1.19

• Removed route hash size changes. This seems to have caused overflow and "rusty's brain broke" errors for some people.
• Fixed disabled GUI button was not dimmed.
• Updated DST for France, Germany, Italy, Poland, Sweden timezones.
• Updated L7 patterns 2008-02-20.

»Download

Tomato 1.18

• Fixed PPPoE may exit instead of retrying during a connection attempt.
• DHCP (udhcpc) logging is now optional. To enable, go to Admin/Logging.
• Added custom entries and support for "every x minutes" in Admin/Scheduler.
• Increased Basic/Wireless Filter limit to 100.
• A few changes to hopefully improve speed: Use jhash for conntrack, increase route cache hash size, increase default conntrack size, option for SYN/FIN/RST prioritization (see QOS/Settings). Thanks to Rodney C.
• Updated Venezuela, South Australia TZ.
• Updated Dropbear 0.51.

»Download

Tomato 1.17

• Fixed PPPoE connect on demand.
• Fixed DHCP not passing current DNS address.
• Fixed TZO external IP check results in chopped address.
• Lenghtened DDNS hostname field.

»Download

Tomato 1.16

• More logging, fixes for PPPoE support. Thanks to Walter & Markus for lots of testing.
• Updated igmprt. This might fix a problem with it dying unexpectedly.
• Updated squashfs.
• Updated Dnsmasq 2.41.
• Updated L7 2008-02-10.
• Fixed route was changed incorrectly on renew when using L2TP.
• Fixed ping page.
• Behavior of how the WEP keys are handled has changed. Previous versions forced the selected key to #1 internally. If you encounter problems, please make sure the key # is correct, or use key #1 manually.
• Behavior of WHR-HP-G54's Enhanced RX's (Adv/Wireless) has been swapped. Please verify that it's working correctly.
• Support for DynDNS via HTTPS added.
• A separate test build with newer drivers (-ND) is now available. It's for the WHR-G125 and WRH54G, but it will also work on a few other routers. Not a lot of testing has gone into this, and it will definitely *not* run correctly on all routers that run just fine on the "normal" firmware, so *please use with caution*. Thanks to George for making it work on the WHR-G125.

»Download

Tomato 1.15.1297

• Downgraded busybox back to 1.2 for now. The upgrade seems to have caused a few problems with things like DHCP. Note: This is the same version used prior to Tomato 1.14. It's stable and from a user's viewpoint, you shouldn't see any change in functionality between the two.

If you're having problems with loosing Internet connection after a while and you're using DHCP, please try this version.

»Download

Tomato 1.14.1288

• Fixed possible cross-site vulnerability in web admin.
• Fixed saving SSL certificate to nvram.
• Fixed problem with NAT Loopback thanks to John M. 'Forwarded-Only' is now the default setting.
• New favicon thanks to David V.
• Microsoft MN-700 ID'd thanks to John F.
• Network Label can now be entered for OpenDNS.
• Upgraded Busybox to 1.9.0.
• Upgrade L7 filters to l7-protocols-2008-01-16.

»Download

Tomato 1.13.1252

• Fixed problem with L2TP, PPPoE, PPTP.

»Download

Tomato 1.11

• Fixed UPnP entries are lost when some settings are changed.
• Fixed RIP config causing distribution of indirect routes.
• FTP NAT helper can now be disabled in Advanced/CTNF.
• Bandwidth data can now be saved on reboot/shutdown.
• Added a reboot and reconnect scheduler (Admin/Scheduler).
• Decreased time interval from 30 mins to 15 mins for Access Restriction.
• Updated New Zealand timezone.
• Updated L7 patterns to l7-protocols-2007-10-10.
• Rolled back recent changes from 4.30.11 and iptables to fix a forwarding bug that some are experiencing. I've been unable to replicate the problem, but have received some good feedback on this, so hopefully this does fix it for everyone.

»Download

Just a small update...

• Fixed DDNS custom URL doesn't work correctly if "@" was used in the path.
• Fixed config backup download may be renamed/handled by the browser instead of just saving it. This seems to have been introduced when I corrected a content-type typo.
• SSL certificate CN is now editable in Admin/Access. The default didn't turn out to be useful, so I'll just let you guys decide what you need in there (your DDNS hostname maybe).
• Updated to l7-protocols-2007-10-03.

»Download

Oops... IE doesn't like an extra comma. Let's fix this quickly:

Version 1.09

• Fixed DDNS page error when using Internet Explorer.

»Download

Hmmmm... Freshly squeezed Tomato...

• Fixed forwarding a port with a source address and without a source address restriction at the same time may not work correctly. If you have this problem right now, please go to Forward/Basic and click Save to fix the entries.
• Fixed Keep Alive's "redial" was not restarted.
• Changed the keep alive "redial" method to a more simplier, safer way. Incase you experience a problem with this, please try "nvram set oldredial=1; nvram commit" and reboot. If that fixes the problem, then please let me know.
• Fixed DHCP lease time resets when Dnsmasq is restarted.
• Fixed UPnP may not start sometimes, changes made when deleting manually are not saved, connect may block for a long time.
• Added detection of WZR-HP-G54, WZR-RS-G54, WZR-RS-G54HP, WVR-G54-NF, WHR2-A54-G54, WHR3-AG54, RT390W, WX-6615GT. Thanks to piggy for adding most of these and to others who sent in data.
• Added Scott D's nice BlueGreen2 theme.
• New DDNS system adds 3322, FreeDNS, OpenDNS, custom https:// URLs, external check ip support, retry on error, refresh after 26 28 (edit: changelog typo) days on all services to prevent expiring.
• Added "Intercept DNS Port" option in Advanced/DNS which may be helpful when used with OpenDNS for parental control. When enabled, anything going out to UDP port 53 is redirected to Dnsmasq.
• The GUI's SSL certificate SN is now randomized, CN is now also set to the router's LAN IP address, and the certificate can now also be saved in nvram and re-generated more easily if needed in Admin/Access.
• The GUI's local HTTP/HTTPS port can now be changed.
• A list of NTP servers from pool.ntp.org can now be easily selected in Basic/Time.
• Updated dnsmasq 2.40, dropbear 0.50, iptables 1.3.8, l7-protocols-2007-07-27.
• Some merging of code and pre-built binaries from WRT54GL 4.30.11.
• Various minor changes.

»Download

Time for a Tomato update...

• Added source address restriction for basic forwarding, DMZ and remote web/ssh admin. The IP address format for all are the same: "1.1.1.1", "1.1.1.0/24", "1.1.1.0/255.255.255.0" or "1.1.1.1-2.2.2.2". Note: This required some changes to Basic Forwarding's nvram format.
• Bandwidth graph changes: Selectable 24/18/12/6/4 hours, total downloaded/uploaded during the period is now shown, time is now shown on clicked spot and at the bottom, refresh time is now automatically calculated, etc. As usual, please backup your data if needed before upgrading.
• Added Motorola WR850G/GP support. Please see the warning in the readme before using.
• Added Buffalo WBR2-G54 support.
• Added support for wl_distance from OpenWRT. Pretty much untested at this point...
• L7 patterns updated to 2007-05-09 version.
• Dnsmasq upgraded to 2.39.
• Removed Logout option for IE7. No suitable work-around was found for BA.
• Fixed wl0_* may not get reset to the same value as wl_* in some cases.

»Download

It's only been a week, but here's 1.06... I wanted to clear this off quickly before I start working on something else (unrelated). Enjoy! :)

• Fixed restore bandwidth doesn't work with IE.
• Fixed executing a script via AOSS/SES button leaves zombies lying around.
• Fixed scp to router not working.
• Fixed reset/ses button on WRTSL54GS not working.
• QOS htb burst does not use a fixed value anymore which may improve performance, especially for those with a high upload speed. If for some reason you want to use the old method: "nvram set qos_burst0=4; nvram set qos_burst1=2"
• Added time zone for South Australia.
• Added support for Asus WL-500G Premium without USB. Like the WRTSL54GS, this is a simple detection support without any additional USB goodies.

»Download

Here's 1.05...

• Removed several updates made during the last few versions which may have caused more problems for some.
• Fixed device list may not show all (again).
• Added weekly bandwidth usage page and reworked the daily and monthly pages. The weekly page uses the the daily data so no additional changes to the data file is needed.
• Time: Added more new DST, adjusted a few TZ, increased field size of servers, blocked servers (kiss-o-death/stratum=0) can be cleared in the GUI (shown only if there is a blocked server).
• Logging: Cron event logging can now be disabled, mark interval can now be adjusted, limit can now be disabled.
• PPTP, RTSP, H.323 NAT helper modules can now be disabled in Advanced/Conntrack incase anyone has problems with these. These were always loaded in previous versions.
• Upgraded Dnsmasq to 2.38.
• Upgraded Dropbear to 0.49.
• Added support for Buffalo WZR-G54.
• Added support for Linksys WRTSL54GS without USB. There is absolutely no USB support built-in or installable! I was asked for this even without USB. Unfortunately, I don't think I'll be able to make a full version for this one anytime soon.
• etc.

»Download

This is a quick update to mainly fix a problem with WRT54G v2.2 crashing. It looks like I made a mistake when I changed the way the routers are detected and as a result, WRT54G 2.2, 3.0 and 3.1 are not identified correctly. This is a problem for the 2.2 since it needs to be clocked to 216MHz to fix a hardware problem.

• Fixed detection for WRT54G 2.2, 3.x, WRT54GS 1.1, 2.x.

»Download

Lots more fixes for 1.03. I've disabled the -mips32 gcc option on this release so it's a little bigger, but hopefully it will make the firmware even more stable. »Download

Changelog

• Fixed using Wireless Survey if wireless was disabled made the power/diag led light up.
• Fixed Admin/Bandwidth Custom Path field validation error.
• Fixed DDNS may parse a custom DDNS incorrectly if @ is used in a URL with basic authentication.
• Fixed DDNS Force Update option wasn't working.
• Fixed wrong type detection for some routers.
• Removed -mips32 gcc switch which may be causing some random weirdness.
• Synced a few changes in Linksys WRT54GL 4.30.9: Fix for CVE-2006-0039, some changes resulting from CDRouter testing, a few prebuilt apps.
• Updated PPTP conntrack/NAT helper patch.
• Increased allowed length of router hostname and domain name.
• Default SSID is now "wireless" instead of "linksys".
• Updated iptables to 1.3.7.
• Updated L7 filters to 2007-01-14 release. New: Chikka, Radmin. Updated: BitTorrent, Battlefield 2, etc.
• Added option to disable wireless radio in Access Restriction.
• Added No-IP.com DDNS service, including support for groups.

Also available is a new Tomato FAQ page.

More bug fixin'...

• Fixed several field validation problems in Basic/Network.
• Fixed WINS setting erased on DHCP "deconfig" event.
• Fixed awk hangs evaluating a regular expression. Seems to be a compiler quirk.
• Fixed PPPoE may take a while to reconnect in some cases because of abrupt termination.
• Added an option in Advanced/DHCP for reduced DHCP packet size (WAN side). Toggling this may help fix problems with DHCP failing to aquire an address. The previous behavior was the same as enabled in 1.00 and 1.01, the default is now disabled, the same behavior as the original udhcpc.
• DDNS (ez-ipupdate) now retries if connect() fails. This is on a lower level only, it does not include errors given off by DDNS services or web site errors (incorrect password, 404, etc.).

»Download


Happy New Year everyone! :)

Tomato 1.01 fixes a few bugs including a leak in httpd that could cause the GUI to stop working, a problem with only one DNS was being used, and a problem with manual connect/disconnect. The bandwidth monitor has been updated to handle files more carefully. I also filled in a few minor requests while I'm at it... »Go Download

Tomato is a small, lean and simple replacement firmware for Linksys' WRT54G/GL/GS, Buffalo WHR-G54S/WHR-HP-G54 and other Broadcom-based routers.

Support for the Buffalo WHR-G54S has been included in the regular Tomato release. See http://www.polarcloud.com/tomato/ for details.

HyperWRT +Tofu is a Linksys WRT54G/GL and Linksys WRTSL54GS firmware based on stock Linksys firmware + HyperWRT + added extras.