Download LineSafer

LineSafer access points

An extra GL.iNet router becomes an access point with the router's own networks. Download the file for your model; the steps are in the guide.

Guide: installing and linking an access point →

ZimaBoard 232 · new

LineSafer on a ZimaBoard 232 too, instead of the Flint as the main router. It has two network ports: eth1 for the Internet and eth0 for the home. It has no Wi-Fi: the wireless networks come from LineSafer access points connected to eth0. Tested on one ZimaBoard 232.

LineSafer app for Android

See your home network and do the everyday things from your phone: pause, devices to approve, your kids' requests, remote access. The app talks only to your router, with no account and no cloud.

Warnings

• Installing third-party firmware carries risks. A power cut during installation or a wrong file can leave the router unusable until you restore it (see below). Always check the SHA-256 fingerprint before installing.
• Router warranty. Replacing the original firmware may affect the GL.iNet warranty: check its terms before you go ahead. LineSafer is not a GL.iNet product and is not endorsed by GL.iNet.
• Filtering is best effort. No network filter blocks everything: it can't see traffic over mobile data, a VPN or Tor, and a new site may not be in the lists yet. Parental control helps, but it doesn't replace being there and talking with your children.
• Before you start write down your connection settings (for example your fibre VLAN): the first installation erases the original firmware's settings.
• Compliant Wi-Fi. The firmware uses the country and transmit power allowed in Italy/EU: don't modify it to exceed them.

Check the file before installing it

The SHA-256 fingerprint of the downloaded file must match the one shown above.

Going back to the original firmware

The Flint 2 has a recovery system (U-Boot) that LineSafer doesn't touch: it works even if the firmware no longer starts. In short: download the original firmware from GL.iNet's website, give your computer the fixed address GL.iNet indicates, connect it with a cable to a LAN port, hold the reset button while powering the router on until the light changes, then open the recovery page and upload the file. Follow GL.iNet's official guide, which has the exact steps for your model.

Terms of use, licences and sources

LineSafer is free of charge but not open source: the panel, the API and the router scripts are © Raffaele Salutari, all rights reserved. You may download, install and use it free of charge on GL.iNet Flint 2 routers you own or manage, also on behalf of others as long as you don't charge for the software. You may not sell it, or distribute modified versions or present them as LineSafer, without written permission. "LineSafer" is the project's name: don't use it for other products.

The firmware contains third-party free software, each under its own licence: OpenWrt, the Linux kernel and BusyBox (GPL-2.0), dnsmasq (GPL), nftables (GPL-2.0), lighttpd (BSD), ucode (ISC), stubby and getdns (BSD), miniupnpd (BSD), msmtp (GPL-3.0), Tailscale (BSD-3-Clause) and others. Block lists are not included: the router downloads them from their original sources (hagezi, blocklistproject, Spamhaus, abuse.ch, Emerging Threats, Tor Project), each with its own terms of use. These licences apply to their respective parts and take precedence over the above: third-party components remain free under their own terms. The /etc/init.d/lighttpd script, modified from OpenWrt's, remains GPL-2.0 and is included as source in the image; the panel's QR generator is derived from Project Nayuki's qrcodegen (MIT License).

• Sources of the GPL components in this release. The image is built with OpenWrt's official ImageBuilder and contains the official, unmodified packages of OpenWrt 25.12.6: the corresponding sources are the ones OpenWrt publishes for that release.
  • system: tag v25.12.6 (revision r33311-981c978eff);
  • package feeds at the exact revisions: packages, luci, routing, telephony;
  • original program archives: sources.openwrt.org; release packages and build information: downloads.openwrt.org;
  • note: after the release OpenWrt keeps updating the 25.12 packages (security fixes) from the openwrt-25.12 branch, so some packages come from revisions later than the tag. The exact source of each package (repository, directory and revision) is in the list below;
  • list of the image's packages with versions, licences and exact source: linesafer-4.1.11-pacchetti.txt.
• Complete source archive of this release, downloadable here: linesafer-4.1.11-sorgenti-gpl.tar (1.3 GB; SHA-256 in linesafer-4.1.11-sorgenti-gpl.tar.sha256). It contains the OpenWrt and feed sources at the revisions used, the original archives of every program (kernel and toolchain included) and a SOURCES.md file with the full list.
• LineSafer AP access points 1.9.1. The same rules, with the official OpenWrt packages for their processors: ath79/nand (GL-AR750S) and ipq40xx/generic (GL-B1300). Package lists with versions, licences and exact source: GL-AR750S, GL-B1300. Complete source archives: GL-AR750S (1.2 GB, SHA-256), GL-B1300 (1.2 GB, SHA-256).
• ZimaBoard 232, LineSafer 4.1.13. The same rules, with OpenWrt's official packages for x86/64. Package list; full source archive: linesafer-4.1.13-sorgenti-gpl.tar (1.2 GB, SHA-256).
• Copy on request. If you'd rather get them another way, we'll provide the complete sources of this release for at least three years from its publication: write to us from the contact page.

Privacy

LineSafer sends nothing to us: no account, no telemetry, no usage statistics. Statistics, lists and settings stay on the router. The router only connects to the services it needs to work: the DNS servers you choose, the block list sources, the time (NTP) and, only if you turn them on, Tailscale for remote access, your mail server for alerts, the Tor Project's list of Tor servers for VPN and Tor blocking and Cloudflare for the speed test. When you download this file from this site, the server records, like any website, the IP address and time of the request in the hosting provider's logs. We only count how many downloads there are per release and per day: your address is not stored.

Reporting a security issue

If you find a vulnerability, write to us from the contact page before making it public: we'll fix it and publish an updated release, installable from the panel with «Keep settings».

What's in this release

• Filters for the whole home: ads, trackers, dangerous sites and adult content, on every device, even those without an app.
• Kids' profiles: schedules, time limits, a data limit per day or per month, pause and requests for extra time.
• Separate networks: Home, Smart for connected things, Guests; new devices to approve.
• LineSafer access points (GL.iNet AR750S and B1300) with the same networks and assisted roaming between router and access points.
• Backup line: a 4G/5G router on a LAN port takes over when the main line goes down.
• Statistics and traffic per device, event log, network map, e-mail alerts.
• Secure panel over HTTPS, access from away with Tailscale and an Android app.
• Updates from the panel: LineSafer and the system are downloaded from the site, checked by their signature; if LineSafer does not start, it goes back to the previous version by itself.