daemongmong

小弟的仍用v23.x，雖然已設定WAN incoming為blocked，但昨晚上網遇到突然網絡改為本地WAN的，要重啟路由器才解決。不知道是不是v23.x的bug，升級到v25.x會改善嗎？

via HKEPC IR 5.1.14 - Android(5.1.2F)

张无忌

小弟的仍用v23.x，雖然已設定WAN incoming為blocked，但昨晚上網遇到突然網絡改為本地WAN的，要重啟路由器 ...
daemongmong 發表於 2026-2-6 05:47

你用 OpenWrt 23.x，例如 SSH 22 进入 WAN（或者其他你 enable to allow），一般都是 blocked，但是其他 internal -> WAN 口可以出的，不是外面 SSH 22 进入，就算 24.x and 25.x 都一样的。

张无忌

很快就到 25.12.0-rc5，这是最后一个，之后就是 formal final release 了。

https://lists.openwrt.org/piperm ... ebruary/044570.html

张无忌

OpenWrt 25.12.0-rc5 OpenClash 0.47.055 on GL-MT6000
GL-MT6000 25.12.0-rc5
OpenClash 0.47.055

在大陆可以按照 OpenClash 和加入机场，不用 reboot，能自动连接。

apk
/etc/apk/repositories.d/distfeeds.list

1. sed -i 's_https\?://downloads.openwrt.org_https://mirrors.tuna.tsinghua.edu.cn/openwrt_' /etc/apk/repositories.d/distfeeds.list

複製代碼

..

Get luci-app-openclash-0.47.055.apk

1. wget -O /tmp/openclash.apk https://github.com/vernesong/OpenClash/releases/download/v0.47.055/luci-app-openclash-0.47.055.apk

複製代碼

..

OpenClash

1. #nftables
   
2. apk update
   
3. apk add bash dnsmasq-full curl ca-bundle ip-full ruby ruby-yaml kmod-tun kmod-inet-diag unzip kmod-nft-tproxy luci-compat luci luci-base
   
4. apk add -q --force-overwrite --clean-protected --allow-untrusted /tmp/openclash.apk

複製代碼

..

图1：


测试：
在大陆可以看到 YouTube。


[1] https://github.com/vernesong/OpenClash/releases

张无忌

OpenWrt 25.12.0-rc5 PassWall 26.1.13-1
GL-MT6000 25.12.0-rc5

O:

1. sed -i 's_https\?://downloads.openwrt.org_https://mirrors.tuna.tsinghua.edu.cn/openwrt_' /etc/apk/repositories.d/distfeeds.list

複製代碼

..

A:

1. wget https://github.com/Openwrt-Passwall/openwrt-passwall/releases/download/26.1.13-1/luci-app-passwall-26.1.13-r1.apk -O luci-app-passwall-26.1.13-r1.apk
   
2. wget https://github.com/Openwrt-Passwall/openwrt-passwall/releases/download/26.1.13-1/luci-i18n-passwall-zh-cn-26.1.13.apk -O luci-i18n-passwall-zh-cn-26.1.13.apk
   
3. wget https://github.com/Openwrt-Passwall/openwrt-passwall/releases/download/26.1.13-1/passwall_packages_apk_aarch64_cortex-a53.zip -O passwall_packages_apk_aarch64_cortex-a53.zip

複製代碼

..

B:

1. apk add unzip
   
2. unzip passwall_packages_apk_aarch64_cortex-a53.zip

複製代碼

..

C:

1. mv *.apk /tmp

複製代碼

..

D:

1. cd /tmp
   
2. apk add --allow-untrusted *.apk

複製代碼

..

E: App update and PassWall

1. wget https://github.com/Openwrt-Passwall/openwrt-passwall/releases/download/26.2.14-1/25.12+_luci-app-passwall-26.2.14-r1.apk -O 25.12+_luci-app-passwall-26.2.14-r1.apk

複製代碼

..

F. Update PassWall

1. apk add --allow-untrusted 25.12+_luci-app-passwall-26.2.14-r1.apk

複製代碼

..

Reference:
[1] https://github.com/Openwrt-Passwall/openwrt-passwall

张无忌

OpenWrt 25.12.0-rc5 PassWall 26.2.14 method 2
GL-MT6000 25.12.0-rc5

Test

1. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/xray-core-26.2.6-r1.apk/download -O xray-core-26.2.6-r1.apk
   
2. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/v2ray-geoip-202602050029.1.apk/download -O v2ray-geoip-202602050029.1.apk
   
3. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/v2ray-geosite-202602052221.1.apk/download -O passwall_packages/v2ray-geosite-202602052221.1.apk
   
4. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/v2ray-plugin-5.45.1-r1.apk/download -O v2ray-plugin-5.45.1-r1.apk
   
5. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/sing-box-1.12.22-r1.apk/download -O sing-box-1.12.22-r1.apk
   
6. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/tcping-0.3-r1.apk/download -O tcping-0.3-r1.apk
   
7. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/trojan-plus-10.0.3-r2.apk/download -O trojan-plus-10.0.3-r2.apk
   
8. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/tuic-client-1.0.0-r1.apk/download -O tuic-client-1.0.0-r1.apk
   
9. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/shadowsocks-rust-sslocal-1.24.0-r1.apk/download -O shadowsocks-rust-sslocal-1.24.0-r1.apk
   
10. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/shadowsocks-rust-ssmanager-1.24.0-r1.apk/download -O shadowsocks-rust-ssmanager
    
11. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/shadowsocks-rust-ssserver-1.24.0-r1.apk/download -O shadowsocks-rust-ssserver-1.24.0-r1.apk
    
12. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/shadowsocks-rust-ssservice-1.24.0-r1.apk/download -O shadowsocks-rust-ssservice-1.24.0-r1.apk
    
13. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/shadowsocks-rust-ssurl-1.24.0-r1.apk/download -O shadowsocks-rust-ssurl-1.24.0-r1.apk
    
14. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/shadowsocksr-libev-ssr-check-2.5.6-r11.apk/download -O shadowsocksr-libev-ssr-check-2.5.6-r11.apk
    
15. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/shadowsocksr-libev-ssr-local-2.5.6-r11.apk/download -O shadowsocksr-libev-ssr-local-2.5.6-r11.apk
    
16. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/shadowsocksr-libev-ssr-nat-2.5.6-r11.apk/download -O shadowsocksr-libev-ssr-nat-2.5.6-r11.apk
    
17. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/shadowsocksr-libev-ssr-redir-2.5.6-r11.apk/download -O shadowsocksr-libev-ssr-redir-2.5.6-r11.apk
    
18. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/shadowsocksr-libev-ssr-server-2.5.6-r11.apk/download -O shadowsocksr-libev-ssr-server-2.5.6-r11.apk
    
19. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/simple-obfs-client-0.0.5-r3.apk/download -O simple-obfs-client-0.0.5-r3.apk
    
20. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/simple-obfs-server-0.0.5-r3.apk/download -O passwall_packages/simple-obfs-server-0.0.5-r3.apk
    
21. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/geoview-0.2.5-r1.apk/download -O geoview-0.2.5-r1.apk
    
22. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/hysteria-2.7.0-r1.apk/download -O hysteria-2.7.0-r1.apk
    
23. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/ipt2socks-1.1.4-r3.apk/download -O ipt2socks-1.1.4-r3.apk
    
24. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/microsocks-1.0.5-r1.apk/download -O microsocks-1.0.5-r1.apk
    
25. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/naiveproxy-143.0.7499.109-r2.apk/download -O naiveproxy-143.0.7499.109-r2.apk
    
26. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/shadow-tls-0.2.25-r1.apk/download -O shadow-tls-0.2.25-r1.apk
    
27. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/shadowsocks-libev-ss-local-3.3.5-r13.apk/download -O shadowsocks-libev-ss-local-3.3.5-r13.apk
    
28. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/shadowsocks-libev-ss-redir-3.3.5-r13.apk/download -O shadowsocks-libev-ss-redir-3.3.5-r13.apk
    
29. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/shadowsocks-libev-ss-server-3.3.5-r13.apk/download -O shadowsocks-libev-ss-server-3.3.5-r13.apk
    
30. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/shadowsocks-libev-ss-tunnel-3.3.5-r13.apk/download -O shadowsocks-libev-ss-tunnel-3.3.5-r13.apk
    
31. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/chinadns-ng-2025.08.09-r1.apk/download -O chinadns-ng-2025.08.09-r1.apk
    
32. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_packages/dns2socks-2.1-r2.apk/download -O dns2socks-2.1-r2.apk

複製代碼

..

Add passwall and passwall-zu-cn

1. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_luci/luci-app-passwall-26.2.14-r1.apk/download -O luci-app-passwall-26.2.14-r1.apk
   
2. wget https://sourceforge.net/projects/openwrt-passwall-build/files/releases/packages-25.12/aarch64_cortex-a53/passwall_luci/luci-i18n-passwall-zh-cn-26.2.14.apk/download -O luci-i18n-passwall-zh-cn-26.2.14.apk

複製代碼

..

Install

1. apk add --allow-untrusted *.apk

複製代碼

..

Reference:
[1] https://github.com/Openwrt-Passwall/openwrt-passwall

张无忌

OpenWrt 25.12.0-rc5 AdGuard Home
GL-MT6000 25.12.0-rc5

Apk:
北京清华
/etc/apk/repositories.d/distfeeds.list

1. sed -i 's_https\?://downloads.openwrt.org_https://mirrors.tuna.tsinghua.edu.cn/openwrt_' /etc/apk/repositories.d/distfeeds.list

複製代碼

..

Install

1. apk add adguardhome

複製代碼

..

测试可以看 [1].

Reference:
[1] AdGuard Home

张无忌

OpenWrt 25.12.0-rc5 Tailscale
GL-MT6000 25.12.0-rc5
Cudy TR3000 256MB 25.12.0-rc5

1. 大陆安装，香港不用，use PuTTY

1. sed -i 's_https\?://downloads.openwrt.org_https://mirrors.tuna.tsinghua.edu.cn/openwrt_' /etc/apk/repositories.d/distfeeds.list

複製代碼

..

2. Install Tailscale

1. apk update && apk add tailscale

複製代碼

..

3. Initial Setup，用 browser 打开 https

1. root@OpenWrt:~# tailscale up
   
2. Error: changing settings via 'tailscale up' requires mentioning all
   
3. non-default flags. To proceed, either re-run your command with --reset or
   
4. use the command below to explicitly mention the current value of
   
5. all non-default settings:
   
6. 
   
7.         tailscale up --advertise-exit-node --advertise-routes=192.168.1.0/24,192.168.55.0/24 --snat-subnet-routes=false
   
8. 
   
9. root@OpenWrt:~#

複製代碼

..

4. Command "tailscale up --advertise-exit-node --advertise-routes=192.168.1.0/24,192.168.55.0/24 --snat-subnet-routes=false"

1. root@OpenWrt:~# tailscale up --advertise-exit-node --advertise-routes=192.168.1.
   
2. 0/24,192.168.55.0/24 --snat-subnet-routes=false
   
3. Warning: UDP GRO forwarding is suboptimally configured on eth0, UDP forwarding throughput capability will increase with a configuration change.
   
4. See https://tailscale.com/s/ethtool-config-udp-gro
   
5. 
   
6. To authenticate, visit:
   
7. 
   
8.         https://login.tailscale.com/a/5f409f736b092

複製代碼

..

5. Add subnets and exit node

6. Add Tailscale interface
图5：


7. Setup firewall
图6：


8. "service tailscale restart"

#########################
9. Add "tailscale update" and "service tailscale restart"
Problems with tailscale update.

10. Reboot

Reference:
[1] 非公网/公网 Tailscale on OpenWrt with subnets and exit node

张无忌

OpenWrt 25.12.0-rc5 CPU temperature
GL-MT6000 25.12.0-rc5

apk

1. apk update
   
2. apk add luci-app-statistics collectd-mod-thermal htop

複製代碼

..

张无忌

因为 OpenWrt 25.12.0 已经 formal release，这个帖子就停！！！

https://git.openwrt.org/openwrt/openwrt/refs/
https://downloads.openwrt.org/releases/25.12.0/