Leaderboard

@Pars @PriSonerS61 @ru.celebi @Ahmed Ensar, thank you for your help. The issue is confirmed, it will be fixed in one of the future versions.

5.1 is an experimental branch, see also changelog 5.0. Supported models: Giga (KN-1010) Hero (KN-1011, KN-1012) Start/Starter (KN-1111, KN-1112, KN-1121) Air/Explorer (KN-1613, KN-1621) Extra/Carrier (KN-1713, KN-1714, KN-1721) Ultra/Titan (KN-1810, KN-1811, KN-1812) Viva/Skipper (KN-1910, KN-1912, KN-1913) Omni DSL (KN-2011, KN-2012) Extra DSL/Carrier DSL/Skipper/Speedster DSL (KN-2111, KN-2112, KN-2113) Runner 4G (KN-2210, KN-2211, KN-2212, KN-2213) Hero 4G (KN-2310, KN-2311) Hopper 4G+ (KN-2312) Hero DSL (KN-2410) Peak DSL (KN-2510) Giant (KN-2610) Peak (KN-2710) Orbiter Pro (KN-2810) Skipper 4G (KN-2910) Speedster 4G (KN-2911) Speedster (KN-3010, KN-3012, KN-3013) Buddy 4 (KN-3210, KN-3211) Buddy 5 (KN-3310, KN-3311) Buddy 5S (KN-3410) Buddy 6 (KN-3411) Voyager Pro (KN-3510) Hopper DSL (KN-3610, KN-3611) Sprinter (KN-3710, KN-3711) Sprinter SE (KN-3712) Hopper (KN-3810, KN-3811) Hopper SE (KN-3812) Challenger (KN-3910) Challenger SE (KN-3911) Racer (KN-4010) Buddy 6 SE (KN-4410) Explorer 4G (KN-4910) Orbiter 6 (KAP-630) Stellar 6 (KAP-650)

Release 5.1 Beta 4 (preview) MWS: fixed the 'the controller DPN document is not accepted' error that occurred when acquiring an extender under certain conditions [NDM-4452] Web: sorted the client list alphabetically when adding a custom view to the Traffic Monitor page (requested by @dimon27254) [NWI-4827] WireGuard: fixed the 'invalid I1 value' error that occured when importing certain configurations [NDM-4472]

Release 5.1 Beta 2 (preview) Mobile: enabled the display of signal level, band, downlink and uplink frequency, BSSID, TAC/LAC, and PCI/PSC data, where available during mobile network scans with Hero 5G (KN-4110) devices [NWI-4800] MWS: added support for mobile network scanning with embedded 5G/4G modems on Wi-Fi System Extenders [NWI-4802] MWS: enabled the display of connection details for client devices connected to Wi-Fi System Extenders via Ethernet [NDM-4429] Web: adjusted the height of the list on the Application Traffic Analyser page (reported by @dimon27254) [NWI-4819] Web: resolved the issue that occurred when changing the network port speed on the System Settings page [NWI-4833] Web: updated the Wi-Fi Network Settings editor window to resolve the issue when configuring the WPA Enterprise protection [NWI-4806] Web: fixed the display of the current time in the schedule editor [NWI-4815] Web: resolved the scrolling issue for the mobile view of the Application Traffic Analyser page [NWI-4816] Web: fixed the display of transmitted traffic statistics for unregistered clients on the Client Lists page (reported by @x13) [NWI-4834] Web: fixed the Download Station application operation [NWI-4826] Web: fixed several issues with the Wi-Fi settings (reported by @spatiumstas, @keenet07) [NWI-4813] Web: adjusted the contrast of table elements to improve readability (requested by @spatiumstas) [NWI-4805] Web: removed the unnecessary 'Delete' button from the WireGuard VPN Server connection statistics window in mobile view [NWI-4809] Web: updated the Traffic Monitor card on the Dashboard page for better performance in mobile view [NWI-4779] Wi-Fi: updated the MediaTek Wi-Fi 7 SoC firmware and wireless driver to improve stability, compatibility, and performance in various Wi-Fi operation scenarios [SYS-1772] WireGuard: fixed the issue with multiple connections operation after a device restart (reported by @tkost, @Robespierre) [NDM-4418]

Release 5.1 Beta 0.3 IPv6: fixed the web interface operation when IPv6 was turned off with 'system set net.ipv6.conf.all.disable_ipv6 1' command (requested by @gaaronk) [NDM-4303] LTE: reduced the delay when switching between slots of a dual-SIM modem on Hopper 4G+ and Hero 5G models [NDM-4379] PingCheck: fixed the switch to the backup connection with an unconfigured availability check in case the higher-priority connection check fails [NDM-4392] SSH: fixed an issue that could prevent the session timeout from being applied correctly [NDM-4406] Tools: added an option to set the DF (Do Not Fragment) bit in the ping utility via the command line interface [NDM-4391] Web: fixed missing localization in the confirmation dialogue when turning off Wi-Fi (reported by @project_fcc) [NWI-4791] Web: corrected the notification that appears when turning off all access points in the wireless band (requested by @dimon27254) [NWI-4783] Web: fixed an issue where the selected Automatic theme would switch when printing the wireless network information (reported by @dimon27254) [NWI-4773] Web: fixed issues with the wireless roaming settings on the Access Points page (reported by @dimon27254) [NWI-4778] Web: corrected the display of the storage icon at certain screen resolutions (reported by @dimon27254) [NWI-4693] Wi-Fi: fixed a potential crash and memory leak that could occur when connecting to a Wi-Fi 7 network using WPA3-SAE after changing the wireless settings [SYS-1749]

Release 5.1 Alpha 3 DynDNS: fixed the 'URL must be filled for custom type' error preventing operation with custom servers (reported by @snark) [NDM-4292] Web: implemented turning off the modem power cycle for custom Internet availability checker modes [NWI-4629] Web: improved the port forwarding rule management buttons for the mobile view of the registered client settings (reported by @dimon27254) [NWI-4672] Web: corrected the sorting of clients by IP address in the client lists (reported by @dimon27254) [NWI-4677] Wireguard: added support for advanced ASC parameters via configuration file import or by using CLI (requested by @FLK) [NDM-4298] interface {name} wireguard asc {jc} {jmin} {jmax} {s1} {s2} {h1} {h2} {h3} {h4} [{s3} {s4} {i1} {i2} {i3} {i4} {i5}]   Known issues: System update operation on devices with NAND memory is partially blocked. Please visit Download Center for your model and use the Recovery Utility to restore, or upload an image from our KeeneticOS archive via tftp.

Release 5.0.5 (preview): IP: fixed flushing cached sessions when restarting Wireguard connection included in a routing policy [NDM-4225] KeenDNS: fixed direct domain name resolution via IPv6 [NDM-4136] UPnP: fixed compatibility with Synology NAS (reported by @Gull_88) [NDM-4247] UsbQmi: added support for Sierra EM9293 modem (reported by @Marvin) [NDM-4235] Web: fixed "Сaptive portal profiles not received" error [NWI-4611] Web: fixed displaying an empty dialog when file uploading is cancelled (reported by @spatiumstas) [NWI-4607]

Release 5.0.4 (preview → stable): CIFS: fixed compatibility with MacOS TimeMachine [NDM-4112] gnutls: updated to 3.8.11 [NDM-4205]: CVE-2025-32988 CVE-2025-32989 CVE-2025-32990 CVE-2025-6395 CVE-2025-9820 HTTP: fixed loss of access to Web UI due to network discovery timeouts [NDM-4223] IP: fixed adding of static routes after the default route [NDM-4209] NTCE: optimized memory consumption [NDM-4219] SSDP: fixed system crash during network discovery [NDM-4224] Web: added Name sorting to DNS-Based Routing [NWI-4595] Web: fixed configuration saving without VLAN ID (reported by @Mikhail_YAR) [NWI-4578]

The controller update channel is not propagated to the extender devices, this is the expected behavior.

Release 5.0.3 (preview): DNS: fixed FQDN-based routing when DNS is running over TCP (reported by @qmxocynjca) [NDM-4201] DNS: optimized performance of FQDN routing list updates [NDM-4197] MWS: fixed wireless 2.4 GHz backhaul on MT7603 and MT7628-based devices [SYS-1513] udpxy: fixed crash when running on a Bridge public interface [NDM-4200] Web: fixed hiding the Mobile menu when USB modem support is not installed (reported by @qmxocynjca) [NWI-4518] ZeroTier: fixed system restart loop when fail-safe mode is enabled [NDM-4187]

Release 5.0 Beta 2 (preview): CIFS: fixed excessive restarts when running a Wireguard server (reported by @dimon27254) [NDM-4059] DNS: fixed a busy loop when processing malformed responses (reported by @vitalik6243) [NDM-4034] DNS: fixed the operation of exclusive routes (reported by @keenet07) [NDM-4046] IPv6: fixed access to services running on interfaces with “private” security level (reported by @KirillR) [NDM-4061] OpenConnect: enabled support for Basic authentication [NDM-4037]: interface {name} openconnect allow-basic-auth SFP: fixed hardware reset of embedded switch on KN-1012 when using an external xPON SFP module [SYS-1455] Web: added IPv6 settings to Segments [NWI-4373] Web: allowed USSD requests starting with # [NWI-4401] Web: fixed display of segment access points after deletion (reported by @Sh1kuren) [NWI-4407] Web: fixed DNS profile editing when the "dns-filter" component is not installed (reported by @dimon27254) [NWI-4396] Web: fixed interface display when editing DNS-based routes (reported by @ftn453) [NWI-4405] Web: fixed KeenDNS configuration (reported by @ftn453) [NWI-4427] Web: fixed printing of Wi-Fi information with a custom logo (reported by @dimon27254) [NWI-4387] Web: fixed sorting of tables by ports and profiles (reported by @Серов Николай) [NWI-4386] Web: fixed static routing configuration issues (reported by @Denis P) [NWI-4428] Web: fixed validation of iperf3 parameters (reported by @dimon27254) [NWI-4402] Web: implemented the new Internet card on the dashboard [NWI-4377] Web: improved the naming of WireGuard configuration files (reported by @dimon27254) [NWI-4424] Wi-Fi: fixed blocking of legacy b/g clients when n/ax compatibility mode is configured [SYS-1446] Wireguard: fixed display of remote peers' IP addresses and ports (reported by @Denis P) [NDM-4064]

Release 5.0 Beta 1 (preview): Ethernet: fixed bogus half-duplex link status for 2.5 Gbps [SYS-1438] IPsec: fixed "identity-local" reset during reconfiguration [NDM-4036] MWS: implemented the use of an Extender's built-in 4G modem as a WAN connection [NDM-4027] USB: fixed "invalid argument" error when polling SMART on SATA drives [NDM-4026] VRRP: imlpemented support for VRRP version 2 and 3; can be installed as a separate component [SYS-1443]: interface {name} vrrp group {group} ip {ip} — set virtual IP address for the group. interface {name} vrrp group {group} priority {priority} — set priority (integer in the range 0 to 255), the device with the numerically highest priority becomes the master in the group. interface {name} vrrp group {group} advertise {advertise} — set advertisement interval in seconds (integer in the range 1 to 255, the default is 1) interface {name} vrrp version {version} — set protocol version, supported values: default — use version 2 for IPv4 and version 3 for IPv6. v2 — strict compliance to VRRP version 2: zero VIPs are not allowed; IPv6 addresses not allowed; state MASTER can be configured if and only if priority is 255. v3 — compliance to VRRP version 3 for both IPv4 and IPv6. v3-compat — VRRP version 3 compatible with some manufacturers (e.g. Cisco and Juniper) who interpret RFC5798 5.2.8 as applying only to IPv6, since the pseudo-header in RFC2460 is specified only for IPv6, although most open source implementations include the pseudo-header for IPv4. This option enables the IPv4 pseudo-header, but excludes it from the checksum calculation for IPv4. show interface {name} vrrp — show VRRP status. Web: added IPv6 support on the Port Forwarding page [NWI-4213] Web: fixed issues with the WireGuard server configuration (reported by @dimon27254) [NWI-4372] Web: fixed issues with tooltips on the Wi-Fi system page (reported by @dimon27254) [NWI-4379] Web: fixed timestamp of the last WireGuard handshake (reported by @dimon27254) [NWI-4384]

Release 5.0 Alpha 7: SNMP: added wireless broadband connection metrics [NDM-3934]: RSSI OID: .1.3.6.1.4.1.9.9.661.1.3.4.1.1.1.7006 RSRP OID: .1.3.6.1.4.1.9.9.817.1.1.1.1.1.1.7006 RSRQ OID: .1.3.6.1.4.1.9.9.817.1.1.1.1.1.2.7006 SNR OID: .1.3.6.1.4.1.9.9.817.1.1.1.1.1.3.7006 USB: implemented support for Signalinks M806B D525C modems [NDM-3933] Web: added cable testing display on Diagnostics page (reported by @dimon27254) [NWI-4029] Web: changed auto-update status on Extender (reported by @iggo) [NWI-4205] Web: fixed translation issues (reported by @dimon27254) [NWI-4281]

Release 5.0 Alpha 6: DynDNS: fixed "IPv6 update disabled" issue while IPv6 address is present (reported by @ru.celebi) [NDM-3927] HTTP: fixed "ban remote host 127.0.0.1" error when using the mobile application [NDM-3926] IPsec: fixed binding IKEv2 policy to a home network segment (reported by @Denis P) [NDM-3925] IPsec: fixed rekey issue when initiating IKEv2 connection [NDM-3922] Web: fixed tooltip display on the Wi-Fi monitor tile (reported by @dimon27254) [NWI-4298] Web: improved function blocking during fail-safe operation [NWI-4252] Wireguard: fixed "system failed [0xcffd009e]" error when loading settings with rearranged [Peer] and [Interface] blocks (reported by @Sergeykk) [NDM-3930]

Release 5.0 Alpha 5: IP: implemented removal of multiple routes; "no" destination arguments made optional [NDM-3911]: no ip route [{network} {mask} | {host} | default] [{gateway} | {interface}] [metric] no ip policy route [{network} {mask} | {host}] [{interface} | {gateway}] [metric] no ipv6 route [{prefix} | default] ({interface} [{gateway}] | {gateway}) IPv4: fixed "out of memory" error when creating an IP policy (reported by @Ponywka) [NDM-3907] Kernel: removed excessive debug messages from ntc [SYS-1384] mDNS: enabled announcement of the Web interface (HTTP) service in the local network [NDM-3919] OpenConnect: added nc (Juniper) protocol [NDM-3908]: interface {name} openconnect protocol (anyconnect | fortinet | nc) OpenConnect: fixed usage of authgroup with anyconnect protocol [NDM-3918] USB: fixed LTE modem's "terminal options verification failed" error (reported by @k19olegh68) [NDM-3905] Web: added a new Automatic theme that follows system preferences (requested by @dimon27254) [NWI-4242] Web: enabled usage of VLAN 0 for Wired connections [NWI-4315] Web: fixed appearance of table row borders (reported by @dimon27254) [NWI-4299] Web: fixed closing of the registration pop-up for unregistered hosts (reported by @spatiumstas) [NWI-4244] Web: fixed table scrolling on the Application Traffic Analyser page (reported by @dimon27254) [NWI-4283] Web: fixed table display in the Transition Log (reported by @dimon27254) [NWI-4284] Wi-Fi: fixed MAC address change for WifiStation interfaces (reported by @project_fcc) [NDM-3906] Wireguard: implemented obfuscation key for peers (requested by @Oleg Nekrylov) [NDM-3917]: interface {name} wireguard peer obfs-key {obfs-key} ZeroTier: removed repetitive "install accepted route" messages [NDM-3903]

Release 4.3.4 (preview): IPv4: fixed "out of memory" error when creating an IP policy (reported by @Ponywka) [NDM-3907] IPv6: fixed inbound connections to SSH server (reported by @ru.celebi) [NDM-3891] IPv6: fixed inbound connections to VPN servers [NDM-3886] Kernel: removed excessive debug messages from ntc [SYS-1384] Web: added VLAN 802.1p settings to Ethernet Cable Connections (reported by @czerniewski) [NWI-3726] Web: fixed appearance of table row borders (reported by @AndreBA, @dimon27254) [NWI-4250, NWI-4299] Web: fixed color notations on the Traffic Monitor page (reported by @keenet07) [NWI-4243] Web: fixed device name display in WebCLI (reported by @qmxocynjca) [NWI-4240] Web: fixed minor issues with Mesh Wi-Fi system tile (reported by @dimon27254) [NWI-4275] Web: fixed saving of G.INP settings for ADSL [NWI-4270] Web: fixed saving of "TCP/UDP (all ports) and ICMP" forwarding rules [NWI-4253] Web: removed Users configuration description from "IKEv2/IPsec VPN server" page (reported by @project_fcc) [NWI-4245] Wi-Fi: fixed WPS when WPA2-Enterprise is enabled [SYS-1361] Wireguard: fixed AllowIPs validator to allow overlapping networks with a warning message (reported by @Александр Гольдварг) [NDM-3888] ZeroTier: removed repetitive "install accepted route" messages [NDM-3903]

Hi, We were waiting for for the great DNS Based Routing feature to arrive, and now that KeeneticOS 5 is in the stable channel. We immediately upgraded our 8 routers and extenders to the latest version. However it's a big disappointment that DNS Routing would only work on Default policy. We have several Wifi Connections, each of them is tied to a different Segment Policy. where each segment connects via specific VPN Tunnel. The idea was to have the DNS Routing work on top of already defined policy, so that clients will continue to use assigned VPN tunnel on the policy, and at the same time still be able to route to a different VPN Tunnel for specific Website. Example: Wifi 1 Routes to UK VPN (Segment Policy), and Amazon.com Routes to USA VPN (DNS Routing). Please Look into having this implemented (or advise on whether there's a workaround on this). We currently use IPv4 Routing to have this achieved, but it's hard to keep track of changing websites ip addresses. Thank you!

I’ve been using KeenDNS for years without any problems. However, for the past few hours, I haven’t been able to access my router via my KeenDNS domain. Is anyone else experiencing the same issue today?

Hello everyone. Some time ago Adguard offered a "free" alternative like nextdns that "has its own customizable interface". Anyone can use it now, it's in open beta. I think it will have many users as it is a free alternative to NextDns. It would be great if Keenetic brought this new adguard dns as a component. ⬆️ https://adguard-dns.io/en/welcome.html

Release 5.1 Alpha 1 Dns: implemented basic access authentication (RFC 7617) for DNS-over-HTTPS (DoH) server URIs [NDM-4168] DynDNS: added the DuckDNS preset [NDM-4273] IPv6: implemented IPv6 access lists [NDM-4130] ipv6 access-list {acl} ipv6 access-list {acl} (permit | deny) ((tcp | udp) ({source} | (host {source}) | any) [port (((lt | gt | eq) {source-port}) | (range {source-port} {source-end-port}))] ({destination} | (host {destination}) | any) [port (((lt | gt | eq) {destination-port}) | (range {destination-port} {destination-end-port}))]) | ((((ipv6 | esp | ahp | pcp | sctp)) | {protocol}) ({source} | (host {source}) | any) ({destination} | (host {destination}) | any)) | (icmp ({source} | (host {source}) | any) ({destination} | (host {destination}) | any) [(icmp-message | ({icmp-type} [{icmp-code}]))]) ipv6 access-list {acl} rule {index} (disable | (schedule {schedule}) | (order {new-index}) | (description {description})) ipv6 access-list {acl} auto-delete KeenDNS: fixed updating static DNS records after switching the service from cloud to direct mode [NDM-4255] Storage: implemented tools to check and format the file system [NDM-4239] media {name} partition {partition} check media {name} partition {partition} format {type} Web: added IPv6 rule configuration to firewall [NWI-4614] Web: dedicated a page for configuring storage devices and USB devices [NWI-4583] Web: added support for IPv6 URIs when configuring DNS-over-TLS (DoT) and DNS-over-HTTPS (DoH) secure DNS servers [NWI-4610] Web: fixed editing of DNS-based routing rules (reported by @dchusovitin) [NWI-4622] Web: fixed the actuation of toggles for the mobile view (reported by @spatiumstas) [NWI-4632] Web: fixed the shortening of client names (reported by @dimon27254) [NWI-4668] Web: improved toggle state indication [NWI-4661] Web: implemented reordering of DNS-based routing rules [NWI-4659] Wi-Fi: fixed the cause of Wi-Fi clients dropping from 80 MHz channel width when the Adjustment ZeroWait DFS was triggered [SYS-1544] ZeroTier: implemented an option to connect to custom networks that use private root servers (moons) [NDM-4236] interface {name} zerotier orbit {world-id} {moon-id}

Release 5.0.6 (preview): Ethernet: restored the cable diagnostics functionality for 2.5 Gbit/s ports [SYS-1529] HTTP: eliminated CVE-2026-1642 security vulnerability in the HTTP proxy service [NDM-4267] KeenDNS: fixed the inaccessibility of domain name to clients on the home network after switching the service from cloud to direct mode [NDM-4255] LTE: fixed the mobile data packet loss when polling the SMS subsystem of the built-in modem [NDM-4244] LTE: fixed the improper dual-SIM slot switching operation with the ping-check enabled (reported by @Ста По) [NDM-4237] MWS: fixed the cause of the 'response is too big' error message logged by the Wi-Fi System controller [NDM-4250] MWS: improved the Wi-fi System extender discovery to employ both L2 (LLDP) and L3 (multicast WS-Discovery) protocols and support specific configurations of managed Ethernet switches [NDM-4220] Web: fixed the radio button operation for selecting the Wi-Fi bands in the client settings (reported by @dimon27254) [NWI-4630] Web: corrected the display of wired clients connecting through Wi-Fi System extenders (reported by @Gonzik) [NWI-4667] Web: fixed the Wi-Fi System transition log filtering by client names that contain spaces (reported by @dimon27254) [NWI-4616] Wi-Fi: fixed the cause of Wi-Fi clients dropping from 80 MHz channel width when the Adjustment ZeroWait DFS was triggered [SYS-1544] Wi-Fi: resolved rejection of Wi-Fi clients trying to associate with 'IE_SUPP_CHANNELS' request element exceeding 64 bytes [SYS-1539]

Hello guys, I wrote 3 scripts to be used with Keenetic router with Entware installed and set. I tested them with my KN-1812 and all seems to work; I'd be glad to know your feedback and suggestions. Keenetic Firewall: https://github.com/mattheweli/keenetic-firewall Keenetic Pingtool: https://github.com/mattheweli/keenetic-pingtool Keenetic vnstat: https://github.com/mattheweli/keenetic-vnstat I'm available for any questions you may have

Ahhh! The telnet port was set to "21". Setting it to 23 fixed the telnet problem. Onward and Upward!

I'm trying to connect KN-1111 as Extender to my KN-3811 using Wi-Fi System. KN-1111 shown in "Extenders available for adding to the Wi-Fi System" but on "Acquire" nothing happens. Error from KN-3811 system log Mws::Controller::Manager: the controller DPN document is not accepted. I've tried to reset both devices, tried different os versions, reinstalled wifi system component, tried both ethernet and wps connection methods. No success.

I am a PS5 Pro owner, and despite the console supporting wifi 7 and MLO, I am experiencing significant connection issues when trying to connect to my Titan 1812 router. Here are the specific problems: AX/BE 5ghz band issues: The device fails to connect to the 5 ghz band (AX or BE). it consistently defaults to 2.4 ghz. I have tried adjusting the band steering to favor 5 ghz and even forced the device to only use 5 ghzz, but in those cases, it refuses to connect entirely. Low speeds on 2.4 ghz BE: It does connect via 2.4 ghz BE, but the speeds are capped around 50-60 Mbps, even though the Titan is positioned very close to the PS5. MLO failure: After establishing a 2.4 ghz connection, whenever I enable MLO in the PS5 settings, the connection drops completely. I suspect this is an issue related to the Titan router, as I have tested this with another Playstation device and encountered the same results. Are there any other PS5 Pro and Titan 1812 users experiencing similar issues? Thanks.

Thank you for the explanation @David CHEVALIER 🙂 So far, I can't really remember any similar requests. Scheduling port shutdowns is a smart solution for your setup 💪 Generally speaking, in a similar setup it would be easier to just use a few Keenetic APs + the central Keenetic router. If you unite them into a Mesh Wi-Fi system, the central router (“controller”) will be able to distribute its settings to access points, including the Wi-Fi schedule. We get requests to add that feature from time to time. It may be implemented in one of the future releases. On a related note, our router provides a REST API that you can use to control it with a bit of scripting. This way you can create your custom small UI containing all the features you want. If you are interested in that, I can provide more details.

Release 5.0.2 (preview): Core: fixed access to sensitive data for users with "readonly" privileges [NDM-4169] DNS: fixed "stubby: Could not parse config file" error when using DoT (reported by @snark) [NDM-4125] DNS: fixed system crash in "DNS FQDN event sink" threads [NDM-4162] IPv6: fixed parsing "ipv6 static" commands with comments (reported by @avn) [NDM-4098] MWS: fixed Extender connection through WAN (blue) port (reported by @Zoomer88) [SYS-1483] Tools: added "source-address" parameter for "tools iperf3" [NDM-4176] Web: added eSIM configuration page [NWI-4526] Web: fixed "components list: execute denied" error for users with "manager" privileges (reported by @dimon27254) [NWI-4532] Web: fixed "Enable SNTP service" checkbox (reported by @qmxocynjca) [NWI-4561] Web: fixed a warning about missing password when navigating from RMM [NDM-4170] Web: removed text reduction for fail-safe pop-up (reported by @dimon27254) [NWI-4554] Web: updated the Transition Log display on mobile screens (reported by @dimon27254) [NWI-4549] Wi-Fi: fixed ACL filtering for Wi-Fi 7 clients with MLO enabled [SYS-1507] Wi-Fi: fixed compatibility with iPhone 17 when Wi-Fi 7 MLO and Fast Transition are enabled [SYS-1497] Wi-Fi: fixed MWS zoning for Wi-Fi 7 clients with MLO enabled [SYS-1505]

Release 5.0.1 (preview): Core: fixed command execution restriction for users with read-only privileges [NDM-4113] DNS: implemented configuration of routes via different gateways for the same FQDN object group [NDM-4118] HTTP: fixed user authentication when logging in from IPv6 addresses (reported by @Sano) [NDM-4115] IPv6: fixed default route setup for DS-Lite over PPPoE [NDM-4109] IPv6: fixed usage of hardware PPE when "ipv6 pass through" is enabled [SYS-1482] Web: changed the alerts' appearance and mechanics [NWI-4469] Web: changed the system behaviour when opening from an outdated browser [NWI-4273] Web: fixed "Transit requests allowed" status on the "DNS Configuration" page (reported by @dimon27254) [NWI-4512] Web: fixed bottom margin of the signal metrics pop-up (reported by @dimon27254) [NWI-4511] Web: fixed Domain Name List table issues [NWI-4509] Web: fixed iperf3 validation issues (reported by @dimon27254) [NWI-4466] Web: fixed opkg initrc removal (reported by @qmxocynjca) [NWI-4510] Web: fixed traffic display legend issues (reported by @FLK) [NWI-4508] Web: fixed WireGuard connection saving (reported by @spatiumstas) [NWI-4533] Wi-Fi: fixed KN-1812 bootloop when radio is disabled by WLAN button [SYS-1481]

Release 5.0.0 (preview): DNS: fixed "IPset kernel error" when adding FQDN object group exclusions (reported by @dimon27254) [NDM-4101] DNS: fixed parsing "auto" argument when reading configuration (reported by @keenet07) [NDM-4096] DNS: fixed sending responses with "easyconfig" address to VPN clients (reported by @snark) [NDM-4095] DNS: сhanged NXDOMAIN response to NOERROR when requesting AAAA for A-only records [NDM-3857] DSL: fixed PPE crash when connected via ADSL [SYS-1464] HTTP: disabled public access to the device with a weak administrator password [NDM-4097] LTE: implemented cell binding for the FM350-GL modem [NDM-3201] LTE: improved FM350gl-16 modem compatibility with Yota [NDM-3997] Monitor: changed the packet dump extension from .pcapng to .pcap [NDM-4091] OpenSSL: updated to 3.0.18 [NDM-4083] PPP: implemented routing loop prevention when receiving erroneous IPCP remote peer [NDM-4093] UsbLte: implemented eSIM and dualSIM support for the FM350-GL modem [NDM-4100] Web: added button labels in the Internet tile (reported by @dimon27254) [NWI-4461] Web: added interface selection for Wireguard (reported by @T@rkus) [NWI-3819] Web: fix tooltip display on the Wi-Fi Monitor page (reported by @dimon27254) [NWI-4449] Web: fixed filter display in the Internet tile when the component is missing (reported by @FLK) [NWI-4462] Web: fixed functioning of toggle switches in Other Connections (reported by @FLK) [NWI-4452] Web: fixed QR code for hidden SSIDs (reported by @cheburashkaDDNS) [NWI-4468] Web: fixed the graph's upper border in the Internet tile (reported by @Denis P) [NWI-4460] Web: fixed Wi-Fi band display on wide screens [NWI-4472] Wi-Fi: fixed WifiGuestApToggle to turn on guest APs [NDM-4054]

Hi, Could you please group the client list by SSID? This will help us better analyze the device distribution and see how many clients are connected under each SSID. If possible, please include in the report the number of clients per SSID along with device details such as MAC address, IP address, and connection duration. Thank you in advance for your support. Its so complicated

Release 5.0 Beta 3 (preview): CIFS: fixed copying files using named streams (reported by @dimon27254) [SYS-1450] DNS: added support for IP subnets in "object-group fqdn include" [NDM-4078] DNS: fixed forwarding of servfail.invalid requests to external servers [NDM-4069] DNS: fixed overload of "Dns::Route::ResolveQueue" [NDM-4086] DNS: reduced the resolving intensity of unused “object-group fqdn” names (reported by @dimon27254) [NDM-4082] IPsec: fixed transition of L2TP traffic when L2TP/IPsec server is running [NDM-4068] IPv4: fixed disabling of individual static routes (reported by @dimon27254) [NDM-4076] IPv6: enabled external access to backup WAN interfaces (reported by @qmxocynjca) [NDM-4067] VPN: implemented DNS server overriding for clients of built-in VPN servers [NDM-4032]: crypto map virtual-ip dns-servers {dns1} [dns2] crypto map l2tp-server dns-servers {dns1} [dns2] sstp-server dns-servers {dns1} [dns2] vpn-server dns-servers {dns1} [dns2] oc-server dns-servers {dns1} [dns2] Web: fixed blocking of Wi-Fi toggles in MWS extenders (reported by @dimon27254) [NWI-4450] Web: fixed display of application blocking status (reported by @FLK) [NDM-4051] Web: fixed display of drop-down lists on mobile screens (reported by @dimon27254) [NWI-4448] Web: fixed display of TunnelSixInFour interfaces when editing static rules (reported by @Denis P) [NWI-4456] Web: fixed display of WireGuard server statistics (reported by @Denis P) [NWI-4425] Web: fixed help sign jumping on mobile screens (reported by @dimon27254) [NWI-4447] Wi-Fi: fixed potential system crash when using OWE authentication [SYS-1461]

Release 5.0 Beta 0: DNS: added support for subnets in "object-group fqdn exclude" (reported by @Denis P) [NDM-4013] Kernel: fixed security issues: CVE-2024-36971 [SYS-1436] CVE-2024-41012 [SYS-1430] CVE-2024-50302 [SYS-1431] SSH: fixed public access via IPv6 [NDM-4010] Web: added DNS-based routes feature to the Static routes page [NWI-4186] Web: added iperf3 tool to the Diagnostics page [NWI-4371] Web: redesigned DNS Configuration page for the mobile screens (reported by @dimon27254) [NWI-4375] Web: restored the lte-firmware file in the list of system files [NWI-4367]

Release 5.0 Alpha 13: Core: added date and time to downloaded firmware and startup-config filenames (reported by @ftn453) [NDM-3999] DNS: added support for domain names in "object-group fqdn exclude" (reported by @keshun) [NDM-4001] DNS: fixed "ResolveQueue: system failed [0xcffd0046]" error (reported by @Denis P) [NDM-4002] Web: added Average speed information to the Traffic Monitor (reported by @enterfaza) [NWI-4212] Web: fixed DoH server validation (reported by @YevhenK) [NWI-4350] Web: fixed SFP port name saving [NWI-4360]

Hello, I thought of a feature for experienced users. It is a process I often use in SFP GPON modules. It can be seen in Openwrt or Linux-based operating systems. I would like to see the ability to manually change partitions in KeeneticOS as well. One partition could hold the stable version, while the other partition could hold the developer version of KeeneticOS. Similarly, when updating from the developer version to the stable version during an update, the update should be written to the other partition. Instead of writing the new version to the other partition and performing the version update procedure each time, it would be a good idea to change the partition using a command line or a button in the interface. Example application: nv getenv sw_commit If sw_commit returns 0 sw_commit=0 nv setenv sw_commit 1 nv setenv sw_active 1 reboot - nv getenv sw_commit If sw_commit returns 1 sw_commit=1 nv setenv sw_commit 0 nv setenv sw_active 0 reboot If you want to manage this, you can also set up one partition to always have the stable version and the other partition to always have the developer version. Just switch to the other partition first when you want to update a specific software.

Release 5.0 Alpha 12: CdcEthernet: added support for SMD12 SMW12 modems [NDM-2979] HTTP: implemented Origin header enforcement for proxies [NDM-3988]: ip http proxy {name} force-origin {force-origin} MWS: fixed regression after implementing user tag “manager” (reported by @dimon27254) [NDM-3981] USB: added support for Fibocom FM101-GL modem [NDM-3970] USB: added support for Olax F90 modem [NDM-3983] Web: fixed End User License Agreement line spacing (reported by @dimon27254) [NWI-4344]

Having an RTMP server would be very useful. Could you please consider this? Keenetic becomes indispensable for live broadcasts. Matter support would be great, and for example, by connecting a Sonoff USB module to the Keenetic, you could manage all ZigBee, Wi-Fi, and Matter-enabled devices through the Keenetic.

Release 5.0 Alpha 11: Core: implemented user tag "manager" for limited administration rights [NDM-3945] HTTP: fixed display of custom logo in the "Information for the Wi-Fi network" pop-up (reported by @dimon27254) [NDM-3969] Iperf: fixed configuration issues (reported by @ru.celebi, @vasek00) [NDM-3972] IPv6: implemented UPnP IGDv2 PCP protocol [NDM-3859] Web: added data transfer statistics to the IPsec table (reported by @sersh) [NWI-4318] Web: added "Application filtering" tab to the "Internet safety" settings [NWI-4232] Web: added Network access setting for IKEv1 and IKEv2 VPN servers [NWI-4328] Web: adjusted the WireGuard table look (reported by @FLK) [NWI-4337] Web: implemented WireGuard VPN server configuration in Applications [NWI-4206] Web: fixed IPv6 prefix validator in WireGuard (reported by @spatiumstas) [NWI-4355] Web: fixed issues when editing users and passwords (reported by @dimon27254) [NWI-4131] Web: fixed the behaviour of drop-down lists when clicked (reported by @dimon27254) [NWI-4365] Web: reduced the toggle response time on the Segments page (reported by @dimon27254) [NWI-4363]

Release 5.0 Alpha 10: Core: implemented "Dummy" network interface [NDM-3958] DNS: fixed bugs in the operation of FQDN-based routing rules (reported by @dimon27254) [NDM-3956] DynDNS: implemented "dynu" service type (reported by @ru.celebi) [NDM-3959] Mobile: renamed "acq", "apn", and "wwan-force-connected" configuration commands [NDM-3950]: interface {name} usb acq → interface {name} mobile acq interface {name} usb apn → interface {name} mobile apn interface {name} usb wwan-force-connected → interface {name} mobile force-connected OpenConnect: fixed "system failed [0xcffd0085]" error by supporting IPv6 DNS (reported by @arsik) [NDM-3962] Opkg: implemented support for authentication credentials in "opkg disk" URL (reported by @dimon27254) [NDM-3960] Tools: added "reverse" and "streams" arguments to iperf3 [NDM-3963]: tools iperf3 {host} [ipv4 | ipv6] [tcp | udp] [reverse] [port {port}] [bitrate {bitrate}] [streams {streams}] [time {time} | bytes {bytes}] [source-interface {source-interface}] Tools: implemented "iperf3" service [NDM-3786]: iperf3 interface {interface} — bind to a specific interface (default: bind to all interfaces according to the security level) iperf3 port {port} — set port (default: 5201) iperf3 security-level (public | protected | private) — set security level (default: private) service iperf3 — run the service

Release 5.0 Alpha 9: DNS: fixed priority of user-defined static records over dynamic ones [NDM-3947] DNS: implemented FQDN object-group based routing [NDM-3946]: dns-proxy route object-group {group} [{interface} | {gateway} [interface]] [auto] [reject] DynDNS: fixed simultaneous registration of IPv4 and IPv6 addresses (reported by @ru.celebi) [NDM-3952] IPsec: fixed transmission of Virtual-IP DHCP routes to VPN clients (reported by @lexm434) [NDM-3954] IPv6: fixed MAP-T bypass of UDP packets with zero checksum [SYS-1404] Syslog: fixed saving of "no system log reduction" to the running-config [NDM-3953] VPN: fixed OpenConnect, Proxy, ZeroTier client reconfiguration (reported by @qmxocynjca) [NDM-3951] Web: fixed display of the clients tooltip in the Wi-Fi system nodes table (reported by @zevs) [NWI-4323] Web: fixed saving of changed TTL value [NWI-4322] Web: fixed the display of the drop-down list on the Internet Safety page (reported by @kroleg) [NWI-4306] Web: hidden Home segment delete button (reported by @dimon27254) [NWI-4340] Web: speed up loading when no replies are received from webhelp (reported by @dimon27254) [NWI-4326] Wireguard: enabled peer "keepalive" interval set to 15 by default (reported by @FLK) [NDM-3948]

Release 5.0 Alpha 8: IPv6: removed the "ip6" component; IPv6 functionality is merged with the base system [NDM-3935] Mobile: added eSIM local profile management support for UsbLte, UsbQmi interfaces [NDM-3850]: show interface {name} esim status — get eSIM status (incl. EID) interface {name} esim profile download {qrcode} — download eSIM profiles interface {name} esim profile list — list eSIM profiles interface {name} esim profile activate {iccid} — activate eSIM profile interface {name} esim profile deactivate {iccid} — deactivate eSIM profile interface {name} esim profile delete {iccid} — delete eSIM profile interface {name} esim profile rename {iccid} {newname} — rename eSIM profile Proxy: fixed "socks5 client read auth" error [NDM-3942] Tools: implemented "tools iperf3" command; must be installed as a separate component [NDM-3785]: tools iperf3 {host} [ipv4 | ipv6] [tcp | udp] [port {port}] [bitrate {bitrate}] [time {time} | bytes {bytes}] [source-interface {source-interface}] Web: added interface selection when downloading routes (requested by @vincome) [NWI-4288] Wireguard: fixed various configuration import issues [NDM-3943]

Release 5.0 Alpha 4: Dns: fixed forwarding of negative responses to local clients at 127.0.0.1 (reported by @dchusovitin) [SYS-1382] Web: fixed appearance of table row borders (reported by @AndreBA) [NWI-4250] Web: fixed behavior of the menu items in expanded view (reported by @dimon27254) [NWI-4198] Web: fixed device name display in WebCLI (reported by @qmxocynjca) [NWI-4240] Web: fixed minor issues with Mesh Wi-Fi system tile (reported by @dimon27254) [NWI-4275] Web: fixed saving of "TCP/UDP (all ports) and ICMP" forwarding rules [NWI-4253]

Release 5.0 Alpha 3: IPv4: implemented support for comments when importing/exporting routes (reported by @SergiusWA) [NDM-3889] IPv6: fixed inbound connections to SSH server (reported by @ru.celebi) [NDM-3891] IPv6: fixed inbound connections to VPN servers [NDM-3886] Web: added VLAN 802.1p settings to Ethernet Cable Connections (reported by @czerniewski) [NWI-3726] Web: fixed color notations on the Traffic Monitor page (reported by @keenet07) [NWI-4243] Web: removed Users configuration description from "IKEv2/IPsec VPN server" page (reported by @project_fcc) [NWI-4245] Wireguard: fixed AllowIPs validator to allow overlapping networks with a warning message (reported by @Александр Гольдварг) [NDM-3888] Wireguard: fixed WGOBFS netfilter chains (reported by @Denis P) [NDM-3890]

Release 5.0 Alpha 2: IPsec: fixed an issue with IKEv1 and IPsec Site-to-Site server running simultaneously [NDM-3878] IPsec: fixed segmentation fault for VirtualIPServerIKE2 [NDM-3880] IPsec: fixed traffic accounting for IKEv2 server [NDM-3876] IPsec: implemented usage of IKEv2 server certificate defined by "crypto ipsec profile VirtualIPServerIKE2 identity-local fqdn" (requested by @Denis P) [NDM-3884] Proxy: removed "Proxy0: 0x7f9ba28be0 socks5 client res.rep” debug messages from the system log [NDM-3875] Web: fixed saving of G.INP settings for ADSL [NWI-4270] Wi-Fi: fixed WPS when WPA2-Enterprise is enabled [SYS-1361] Wireguard: implemented DD-WRT compatible obfuscation key (requested by @Oleg Nekrylov) [NDM-3883]: interface {name} wireguard obfs-key {obfs-key}

service ssh system configuration save

The main idea is to add the ability to reject connections based on MAC address patterns (masks) in cases where white/blacklists are not flexible enough for configuration.

So the real feature request sounds as "don't lease the IP address to the host with the installed local-administrated bit in address". Sounds interesting, will reconsider this.

Hello. I think IntelliQoS is missing a few controls. @eralde These are : 1) Enable / disable 2) MBPS / KBPS selection Feature 1 is needed because : SQM cannot be disabled, there is no control for this in the new interface. When you want to disable it, you cannot enter the value 0 or leave it empty. The 2nd feature is needed for the following reason: Sometimes users may want to fine tune the speed in KBPS. I think it would be good to give this choice to the user. https://ibb.co/mBtd1xD

I use Pi-hole on my home network to block ads. All I had to do with IPv4 was set the DHCP server in my Keenetic device. I recently switched my ISP and they provide IPv6 connectivity. I managed to have IPv6 working, but now the router pushes via SLAAC its IPv6 address as DNS server to clients. So now my devices prefer IPv6 and reach to the router for DNS resolution, bypassing the Pi-hole on my home network. I tried to find an option to change the DNS server address pushed via SLAAC but couldn't find one. I saw that I can change SLAAC to DHCPv6 but I can't find where to set the options. Is it possible to change the DNS server pushed to IPv6 clients?

Hi, In some cases it is necessary to measure the connection performance between the Keenetic device and the ISP. However the results of speed testing applications, like fast.com, nperf etc., which runs on the computer, are bound to the quality of wi-fi connections or the performance of operation system itself. Thus, the results may not be project the connection quality between the ISP and the Keenetic device. I tried the iperf3 package to measure the speed between the ISP and the Keenetic , but I couldn't connect to none of the public servers. It would be great if there is a speedtesting application on KeeneticOS, with a user friendly UI, 1- Which measures the speed between the keenetic device and the ISP (a software that runs directly on the keenetic device like iperf3). 2- Which measures the connection performance between the home networkind device (pc, mobile phone etc.) and the keenetic device. The seperated results helps us to detect at which point the connection performance issues occur. Kind regards Gökalp

Hello can you add https://virtualhere.com/ please for USB Remote