Leaderboard

Поддержка DoH HTTP/3 появится на устройствах с >= 256 Мбайт ОЗУ в следующей версии 4.02.

now just says 'offline'.. update that column with "offline/n[datetime]" to see when last-seen... also req#2, Add to devicelist to show recent unregistered clients now offline too -- so over past 24h or past half-dozen over past week... that is just a separate REQ... It surprises me, someone can go onto a Keenetic system a few minutes ago then go offline and be invisible in the UI. I actually prefer a DHCP page where I can see what was recently assigned and so who it was assigned to, but that isn't even fullproof if they go static.

Dear @AlperShal, As a Product Manager for Keenetic I'd like to inform you that a fix for the aforementioned issues has been planned before this was public and reassure you that we take security very seriously. Due to the very low-risk nature of the reported issue we are going to patch that in our next update, with no urgent-version required for the fix. We feel like explaining the issue is required in this case: The CVE CVE-2024-4022 reported a "leak" of information that is meant to be known. Knowing the Model and the Firmware Version from the Web Interface does not consititute a vulnerability and is intended, so much that we write the Router model name in our UI. For the Firmware version, it is easy to recognize the approximate version due to our constant updates that will, inevitably, modify our front-end pages. The CVE CVE-2024-4021 didn't allow any kind of remote access or control, nor private information leak, they only allowed an attacker to see which components (eg. WPA3-E, WireGuard, OpenVPN) have been installed on the system. This doesn't allow to know if a component is enabled, active or, in case a component is missing from the list, if the service is provided by another device that is not the Keenetic Router (eg. WireGuard may not be installed on the exposed Keenetic Router, but may be provided via Port Forwarding). After consulting with an uninvolved, third-party, Security Researcher, we identified the flaw as a category low, information disclosure. This means that the flaw in itself doesn't compromise anything on the product, but could make some flaws (we are not aware of any flaws that involve our products, as of now) easier to target due to being able to identify if the required components to possibly run the attack are installed on the system, even if the randomness explained before is present. I want to reassure all of our customers that this statement doesn't appear to be correct on our side: the reporter has been in touch with our team and we acknowledged the issue, mentioning that a fix was planned. That said, this confusion during the communications made us understand that we need to improve when dealing with these cases. Starting from today I will start some processes to improve, starting from following RFC 9116, so that everyone that finds a security flaw in our system can go through our responsible-disclosure system and do the right thing. In our complete interest to maintain and keep the trust of all of our loyal customers, I kindly thank you for this post. Dametto Luca, Product Manager for Keenetic

Hello, I set up a second connection which is Cloudflare Warp and I want to route some traffic to that connection. I am playing with this tool since 2 days and what is difficult to me can be improved. 1-There should be bulk modification for routes. I have imported batch file of Twitter which has maybe 50 IP. I want to add "Twitter" label to each record. I can not do it. (Or is it possible to add this via batch file, not sure). 2-We should be able to do this with URL like we do it in modern firewalls (Fortigate for example) instead of IP. Because it is impossible for me to find all IPs address of Twitter, Discord, telegram etc.. and they can change/update their IP also. 3-It would be great if we have enable-disable slide button for each routing rule. so that we dont have to delete that routing if we dont want to use it temporarily. Thanks.

Release 4.3 Beta 0: DSL: update DMT code to V5.12.23.9_2025_0115 for en7516-based devices to improve connection stability [SYS-1284] IPv6: enabled NAT66 automatically for /128 prefixes on "global" interfaces (reported by @Sano) [NDM-3669] SFP: added quirks for GPON modules on KN-1012 [SYS-1279]: CDT FD511GX-RM0 CDT SNR-SFP-ONU-XPON Storage: enabled TRIM support for external USB drives (reported by @Isolated) [NDM-3668] Web: allowed usage of "127.*" peer addresses for WireGuard (reported by @henry.pootel) [NWI-3908] Web: fixed display of long SMS messages on mobile screens (reported by @spatiumstas) [NWI-3909] Web: fixed errors in the browser log when leaving the SMS page (reported by @spatiumstas) [NWI-3917] Web: fixed sorting by Node name on Mesh Wi-Fi System page [NWI-4005] Wi-Fi: fixed inability to connect wireless mt7981-based Extenders when hardware packet engine is turned off [SYS-1283]

Release 4.3 Alpha 12: IPoE: reworked code for configuring Wired connections concerning IPTV, VoIP and VLANs on Ethernet ports [NDM-3586] IPv6: fixed the cause of nginx error “bind() to [fd05:...] failed (Address not available)” [NDM-3525]

Release 4.3 Alpha 1: DHCP: implemented configuration of interface-specific relay agents [NDM-3401]: interface {name} ip dhcp relay enable — enable DHCP relay on an interface interface {name} ip dhcp relay upstream server {address} — specify an upstream DHCP server interface {name} ip dhcp relay upstream interface {interface} — bind DHCP upstream to a specific interface (optional) HTTP: implemented "connect" method to allow for OpenVPN proxying [NDM-3497]: ip http proxy {name} upstream (http | https | connect) {upstream} [port] IP: added settings for policy-specific routes [NDM-3435]: ip policy {name} ip route ( {network} {mask} | {host} ) ( {gateway} [interface] | {interface}) [auto] [metric] [reject] ip policy {name} ipv6 route {prefix} ( {interface} [gateway] | {gateway} ) [auto] [metric] [reject] IP: implemented protection against connection table overflow [NDM-3362]: ip conntrack max-entries {max-entries} — set conntrack table size ip conntrack lockout disable — disable conntrack table protection (enabled by default) ip conntrack lockout threshold public {public} — set maximum number of connections from public interfaces (percentage of the conntrack table size, from 50 to 99, default value: 80) ip conntrack lockout duration {duration} — set lockout duration in seconds (from 60 to 3600, default value: 600) ip conntrack sweep threshold {threshold} — set threshold to start cleaning up waiting sessions (percentage of the conntrack table size, from 50 to 99, default value: 70) show ip conntrack lockout — view lockout status IPsec: fixed KeenDNS access to device via IKEv2 connection [NDM-3439] MWS: fixed host uptime reset when roaming between access points (reported by @Radyohead) [NDM-3498] Opkg: disabled restarting of initrc when changing "dns-override" configuration (reported by @Zeleza) [NDM-3496] Proxy: increased maximum identity length from 64 to 128 characters [NDM-3512] SFP: added quirks for GPON modules on KN-1012 [SYS-1209]: ODI DFP-34G-2C2 ODI DFP-34X-2C2 ODI DFP-34X-2C3 Torrent: implemented setting for background priority of disk I/O (reported by @Andrey812) [NDM-3436]: torrent io-priority low USB: added support for ZTE MU5001 5G modem [NDM-3500] VPN: added ability to preempt VPN sessions when multilogin option is disabled (reported by @krasnoperovrv) [NDM-3450]: crypto map {name} l2tp-server session-preempt VPN: fixed dropping of active connections to the server when user account settings are changed [NDM-234] Web: added IPv6 settings for VPN Connections [NWI-3428] Web: added display of extra access points included in segments (reported by @Leshiyart) [NWI-3743] Web: added timer for on-demand mode in WISP settings [NWI-3570] Web: changed colors on traffic monitor charts (reported by @KYTECHNGAMING) [NWI-3699] Web: fixed USB Devices display when unmounting all partitions (reported by @spatiumstas) [NWI-3762] Web: fixed color of "System mode" radiobuttons (reported by @dimon27254) [NWI-3714] Web: fixed header of policy configuration at Connection Policies page (reported by @Gonzik) [NWI-3781]

Release 4.2.0 (preview)*: Torrent: fixed sudden crash and restart of “transmission” service [NDM-3477] * released for devices with USB storage support.

Release 4.2 Beta 4 (preview): DNS: added new public filtering profiles by Control D (reported by @lighting) [NDM-3452] IP: fixed filtering of transit DNS queries when using routing policies (reported by @Veltik) [NDM-3468] IP: implemented standalone mode for policies [NDM-3445]: ip policy {name} standalone — enable “standalone” mode, i.e. do not copy static routes from the main settings IPsec: fixed memory leak when using VirtualIP [NDM-3460] IPsec: fixed saving of "crypto ipsec transform-set cypher" configuration (reported by @CrPO4) [NDM-3470] Opkg: added optional URL to the "opkg disk" command [NDM-3453]: opkg disk {disk} [url] — set disk partition and download an installer package from the specified location (optional) Web (beta): allowed to specify custom port for Proxy upstream (reported by @dimon27254) [NWI-3713] Web (beta): changed link of the "Current user has no password" notification (reported by @spatiumstas) [NWI-3719] Web (beta): disabled on/off toggles for Access Points on Extenders (reported by @dimon27254) [NWI-3634] Web (beta): fixed column titles of the "UPnP Port Forwarding Table" (reported by @mrGhotius) [NWI-3688] Web (beta): fixed display of USB disk label as zeros (reported by @Gim12) [NWI-3672] Web (beta): fixed horizontal scrolling of tables on mobile screens (reported by @dimon27254) [NWI-3683] Web (beta): fixed overlapping of drop-down lists with buttons (reported by @dimon27254) [NWI-3721] Web (beta): fixed visual issues in "Transition Log" (reported by @spatiumstas) [NWI-3658] Web (beta): improved contrast of notification colors (reported by @spatiumstas) [NWI-3667] Wireguard: fixed dynamic source port selection for outgoing connections (reported by @Леонид Харламов) [NDM-3469]

Release 4.2 Alpha 11: Core: fixed "ppe" settings format (reported by @keenet07) [NDM-3311] DNS: fixed reset of static IP settings after device reboot [NDM-3303] DNS: improved robustness of the DoT/DoH cache [NDM-3320] DynDNS: fixed validation of domain names (reported by @Михаил Касванд) [NDM-3309] Mobile: fixed "interface mobile pdp" setting (reported by @k19olegh68) [NDM-3312] OpenSSL: switched to 3.0.13 [SYS-1152] VLAN: implemented mapping of NTCE priority to 802.1p PCP for egress packets (reported by @Gim12) [NDM-3318]: interface {name} vlan qos egress map {priority} {pcp} priority — NTCE priority queue number. If the value is 0, all outgoing packets will receive the given PCP; pcp — 802.1p PCP value. Web (beta): improved behavior of toggles in tables (reported by @keenet07) [NWI-3465] Wi-Fi: fixed 5 GHz channel width degradation on Buddy 6 [SYS-1151] ZeroTier: added support for DNS and global routes (reported by @drno88) [NDM-3319]

Release 4.2 Alpha 10: Core: fixed inversion of certain boolean settings (reported by @dimon27254) [NDM-3297] Core: fixed returning "null" for undefined boolean settings (reported by @agentOleg) [NDM-3298] OpenVPN: fixed spurious reconnects of OpenVPN client [NDM-3301] SNMP: fixed ifAdminStatus monitoring for Ethernet ports [NDM-3296] USB: fixed "interface usb apn" setting (reported by @Grigoriy) [NDM-3307] VPN: implemented adherence to the policy of the bound interface [NDM-3295] Web (beta): added OpenConnect to the Applications page [NWI-3407] Web (beta): fixed "Server address" input validation for OpenConnect (reported by @snark) [NWI-3463] Web (beta): fixed display of connections that use IPv4 over IPv6 [NWI-3472] Web (beta): fixed display of the backup peer address for IPsec connections (reported by @feoser) [NWI-3464]

Release 4.2 Alpha 6: CIFS: improved memory usage on low-end devices (reported by @Кинетиковод) [NDM-2927] Hotspot: added MAC address and registration time to the name of devices registered automatically [NDM-3253] HTTP: fixed access to proxies configured as "security-level private" from the home network [NDM-3264] HTTP: fixed X-Real-IP header filling when accessing proxy via KeenDNS [NDM-2214] IPsec: added support for SHA512 HMAC on IKE Phase II [NDM-3269]: crypto ipsec transform-set {name} hmac esp-sha512-hmac IPsec: fixed occasional disconnects of IKEv2 tunnels [NDM-3059] IPv6: fixed accidental reloading of NTCE engine on processing of certain IPv6 packets (reported by @dimon27254) [NDM-3235] IPv6: improved host detection via EchoReq (reported by @tormozillo) [NDM-3265] PingCheck: fixed hostname resolution in accordance with DoT/DoH domain restrictions (reported by @dimon27254) [NDM-3273] USB: added SMS support for Fibocom FM350, Quectel RM500U [NDM-3267] USB: added support for Quectel RM500U-GL modem [NDM-3203] Web (beta): added support for OpenConnect to the "Other Connections" page [NWI-3406] Web (beta): fixed blocking of the "Add Server" button when setting up DNS (reported by @keenet07) [NWI-3418] Web (beta): fixed group operations on the "Connection Policies" page (reported by @AndreBA) [NWI-3404] Web (beta): fixed indents in the "Client Lists" settings popup (reported by @dimon27254) [NWI-3403] Web (beta): fixed Internet connection toggles on the dashboard (reported by @T@rkus) [NWI-3417] Web (beta): fixed rule selection on the "Firewall" page (reported by @dimon27254) [NWI-3419] Web (beta): fixed visual bugs in the dark theme in the "USB Devices" section [NWI-3375] Web (beta): implemented "Call History" page [NWI-3398] Wi-Fi: fixed setting of band-steering preference when upgrading from earlier stable versions [NDM-3241]

В итоге в выходящем 4.2 будет включено на всех устройствах с более чем 32 МБ flash - то есть на всех, кроме моделей на MT7628 и KN-3010.

Release 4.2 Alpha 2: HTTP: added read/send timeout configuration for proxies [NDM-3157]: ip http proxy {name} timeout {timeout} IPsec: fixed iOS L2TP/IPsec client disconnections under workload [NDM-3180] Web (beta): added missing translations (reported by @dimon27254) [NWI-3361] Web (beta): fixed appearance of HTML code as text (reported by @dimon27254) [NWI-3359] Web (beta): fixed bugs occuring when the "Cloud-based content filtering and ad blocking" component is uninstalled (reported by @dimon27254) [NWI-3360] Web (beta): fixed display of WISP connection details on the dashboard (reported by @dimon27254) [NWI-3339] Web (beta): fixed notifications display in dark theme (reported by @dimon27254) [NWI-3358] Wireguard: added Advanced Security Configuration parameters (requested by @UwU) [NDM-3202]: interface {name} wireguard asc {jc} {jmin} {jmax} {s1} {s2} {h1} {h2} {h3} {h4}

Release 4.3 Beta 3 (preview): DNS: fixed "duplicate key: group" error when using FQDN object groups (reported by @dimon27254) [NDM-3755] HTTP: implemented blacklisting of remote hosts sending invalid POST requests [NDM-3716] NTCE: fixed "detected 5 attributes, only 4 supported" error (reported by @Strider78) [NDM-3756] OpenConnect: fixed User-Agent header when using "anyconnect" protocol [NDM-3733] SSTP: fixed access to SSTP VPN server when "ip http security-level private" is set [NDM-3747] USB: added support for Telit FN990 modem [NDM-3743] VPN: fixed WireGuard and OpenVPN port collision when creating tunnels [NDM-3732] Web: changed view of Connection Policies on mobile screens (reported by @dimon27254) [NWI-4049] Web: fixed display of SFP/Ethernet combo port connection mode (reported by @Gim12) [NWI-3319] Web: fixed opening Mesh Wi-Fi System page after a new Extender is acquired (reported by @KYTECHNGAMING) [NDM-3757] Web: fixed the inability to turn on the Ethernet port after it has been turned off [NWI-4066] Web: fixed unwanted reset of PPPoE authentication settings when selecting "Automatic (DHCP)" option (reported by @Leshiyart) [NWI-4065] Web: increased the number of visible options in drop-down lists (reported by @spatiumstas) [NWI-3756] Wi-Fi: fixed connection instability for some wireless client devices when "target-waketime" setting is enabled [SYS-1266] Wireguard: fixed losing "asc" settings after reconfiguration (reported by @FLK) [SYS-1320]

Release 4.3 Beta 2 (preview): DNS: implemented subdomain resolution in "object-group fqdn" (reported by @avn) [NDM-3726] HTTP: fixed Cookie handling and related "Core::Scgi::Tools: bad request: no session" error during authorization (reported by @snark) [NDM-3713] HTTP: fixed missing static DNS records when "ip http proxy dns-override" is enabled (reported by @Leshiyart) [NDM-3718] IPv6: fixed 6in4 tunnel performance when hardware packet engine is enabled [SYS-1271] OpenSSL: updated to 3.3.3 [SYS-1306] Proxy: fixed resetting of interface counters when it is shut down (reported by @keenet07) [NDM-3724] SFP: fixed KN-1012 compatibility with RTL9601D-based SFP modules [SYS-1313] Web: fixed redundant warning about unsaved changes during firmware upgrade (reported by @dimon27254) [NWI-3944] Web: fixed showing a scroll-bar when dragging objects in the connection priority list (reported by @dimon27254) [NWI-4044] Web: fixed showing an alert about unset password when it's already set (reported by @dimon27254) [NWI-4033] Web: fixed status showing not inserted SIM card on the dashboard (reported by @spatiumstas) [NWI-4016] Web: fixed tooltip readability in the Application Traffic Analyser table (reported by @dimon27254) [NWI-4020] Web: fixed unexpected second reboot after a system update (reported by @spatiumstas) [NWI-4047] Web: fixed Wi-Fi network shutdown despite canceling this action in a pop-up dialog box (reported by @dimon27254) [NWI-4010] Web: improved appearance of the side menu [NWI-3839] Web: locked the LTE signal metrics button when no connection is established (reported by @spatiumstas) [NWI-4015] Web: redesigned password input field with indication of password strength [NWI-4030]

Release 4.3 Beta 1 (preview): Dns: implemented object groups with automatic FQDN name resolution [NDM-3692]: object-group fqdn {name} — create an FQDN object group object-group fqdn {name} include {address} — add an address to the group Opkg: added a hidden command to display the system name of a network interface (requested by @Ponywka) [NDM-3694]: show interface {name} system-name Storage: fixed mounting HFS+ volumes larger than 6TB [SYS-1143] Web: fixed background color of "show threads" output in Web CLI (reported by @spatiumstas) [NWI-4052] Web: fixed display of manually configured HTTPS port in KeenDNS links (reported by @bigpu) [NWI-4027] Web: fixed Fast Transition (802.11r) reset to Disabled when changing SSID on one band [NWI-3900] Web: fixed text description for OpkgLedControlX handler (reported by @dimon27254) [NWI-3997] Web: implemented a setting that allows to assign a specified home network segment to the Extender's Ethernet port [NWI-3571] Web: locked configuration-related system settings when the fail-safe mode is active [NWI-4032] Web: updated modal window behavior and layout [NWI-3979]

Release 4.3 Beta 0.1: DNS: fixed forwarding of transit queries allowed in the system profile [NDM-3651] DNS: fixed initialization of DoT/DoH when static DNS servers are configured for unused connections (reported by @Robespierre) [NDM-3681] MWS: fixed wireless backhaul reconnection when WPA3 is enabled [SYS-1281] OpenVPN: fixed resolving remote endpoint using A (IPv4) DNS queries when IPv6 is running [NDM-3640] Proxy: increased the maximum number of Proxy interfaces to 64 [NDM-3686] SFP: implemented SFP+ and combo port operation mode settings [NDM-3181]: interface {name} media-type {type} — set combo port media type: auto — prefer SFP with auto-failover to MDI (default) mdi — enforce media type to MDI sfp — enforce media type to SFP interface {name} sfp pcs {mode} — set Physical Coding Sublayer (PCS) mode: auto — autodetect from DDMI(default) fallback — sequentially try fixed baseband modes until one of them works sgmii/an — SGMII-supported speeds of 10/100/1000 Mbps with auto-negotiation enabled 1000base-x/an — fixed 1 Gbps baseband with Clause 37 auto-negotiation enabled 1000base-x — fixed 1 Gbps baseband 2500base-x/an — fixed 2.5 Gbps baseband with Clause 37 auto-negotiation enabled 2500base-x — fixed 2.5 Gbps baseband interface {name} sfp rx-los {mode} — set SFP RX_LOS reception mode: auto — autodetect from DDMI (default) accept — accept RX_LOS signal ignore — ignore RX_LOS signal interface {name} sfp init-timeout (auto | {timeout}) — set SFP module initialization timeout in seconds Storage: enabled UASP support for external USB drives [SYS-1290] USB: added support for Sierra MC7304 modem [NDM-3684] Web: fixed auto-completion for "no" with arguments in Web CLI (reported by @dimon27254) [NWI-4022] Web: fixed refreshing of active connections uptime on the dashboard (reported by @k19olegh68) [NWI-4034] Web: fixed unsaved changes warning on Mobile Broadband Internet Connections page (reported by @spatiumstas) [NWI-3999] Web: improved handling of continued commands in Web CLI (reported by @TopGear78) [NWI-3738]

Release 4.3 Alpha 14: Ethernet: fixed 100 Mbps link on a 2.5 Gbps port [SYS-1275] Kernel: fixed system clock drift on mt7981-based devices (reported by @dimon27254) [SYS-1273] OpenVPN: updated to 2.6.13 [NDM-3660] SSTP: fixed "session-preempt" configuration [NDM-3662] Web: fixed appearance of "-1" in Application traffic analyzer (reported by @dimon27254) [NWI-4008] Web: fixed issues on Mesh Wi-Fi system page (reported by @dimon27254) [NWI-4002] Web: fixed update channel tooltip on the dashboard (reported by @dimon27254) [NWI-3932]

So the real feature request sounds as "don't lease the IP address to the host with the installed local-administrated bit in address". Sounds interesting, will reconsider this.

Release 4.3 Alpha 13: AFP: enabled Time Machine attribute for all shares by default [NDM-3510]: afp share {label} {mount} [timemachine] [{description}] IPoE: fixed "voip" role assignment (reported by @Leshiyart) [NDM-3643] IPv6: fixed 6in4 tunneling when static MTU is set [NDM-3644] Web: fixed display of connection name in the “Signal Levels” pop-up (reported by @dimon27254) [NWI-3978] Web: fixed errors in log when adding a DNS server (reported by @dimon27254) [NWI-3991] Web: fixed traffic monitor card on the dashboard (reported by @spatiumstas) [NWI-3921]

Hello, When adding or removing a component on the router, the system automatically restarts immediately after the process. This can cause interruptions, especially during times when an active internet connection is critical. A more user-friendly solution, similar to modern operating systems like Windows, could be implemented: "Restart Now" or "Restart Later" options: Allow users to manually trigger the restart after completing their tasks. Active hours setting: Schedule automatic restarts during specific time periods (e.g., nighttime). Partial configuration application: Enable configurations that don’t require a restart to take effect immediately. Such a feature would significantly enhance the user experience and help ensure uninterrupted internet connectivity. I hope you consider this suggestion and look forward to seeing if it can be implemented in future updates. Thank you!

Release 4.3 Alpha 8: UPnP: fixed "failed to remove PCP mapping" error (reported by @YamadaHideki) [NDM-3588] Web: fixed tooltip display on the traffic monitor graph (reported by @FLK) [NWI-3894]

After updating to version 4.3 Alpha 6, I noticed the following issues: The Buddy 6 mesh device does not display the settings for the Home segment. The Hero mesh device shows the Home segment settings as locked, which seems to be a bug. Additionally, since our mesh device might be operating in wired mode, it should be possible to adjust the 2.4GHz channel independently from the controller. Greetings from Türkiye, together with @KYTECHNGAMING

Hello, I need auto wake on lan client with specific date and time also one time or every day, every week, every month, every year like windows task scheduler. Can you add this next future uptade KeeneticOS 4.3 ? There are many Keenetic devices and PCs in our network. This feature is very necessary for our it department. Thanks, Kind regards.

Release 4.3 Alpha 5: FTP: enabled fastpath to optimize performance [SYS-1234] OPKG: replaced OpkgLedControl with OpkgLedControl1 and OpkgLedControl2 for devices with two FN LEDs (reported by @Roman M) [NDM-3549] SSH: enabled OpenSSL AES-GCM on aarch64 [SYS-1237] SSH: fixed SFTP connection stall after transferring 476 MB [SYS-1240] Web: changed the behavior of update channels for MWS Extenders (reported by @project_fcc) [NWI-3823] Web: fixed display of data units (reported by @dimon27254) [NWI-3893] Web: fixed display of long names in traffic monitor (reported by @dimon27254) [NWI-3860] Web: fixed errors on "General System Settings" page (reported by @spatiumstas) [NWI-3840] Web: fixed malfunction of dashboard tiles on mobile screens (reported by @dimon27254) [NWI-3865] Web: fixed media server working folder paths [NWI-3852] Web: fixed picker display in applications (reported by @spatiumstas) [NWI-3827] Web: fixed system log function (reported by @dimon27254) [NWI-3813] Web: fixed the display of tooltip for the Static IP address field (reported by @dimon27254) [NWI-3818]

Release 4.3 Alpha 4: HTTP: fixed assignment of “security-level private” for proxies [NDM-3479] LED: fixed inability to turn off WAN LED on KN-1012 [SYS-1222] OpenConnect: fixed client reconnection after server restart (reported by @abelar) [NDM-3532] OpenConnect: implemented a command to turn off DTLS (reported by @avn) [NDM-3541]: interface {name} openconnect no dtls OpenConnect: implemented configuration of server routes (reported by @Fedro) [NDM-3540]: oc-server route {address} {mask} OpenConnect: implemented support for IPv6 and server routes by the client (reported by @avn) [NDM-3539]: interface {name} openconnect accept-routes SFP: fixed setting “auto” mode for SFP/MDI combo ports [NDM-3537] Web: fixed downloading of packet capture files (reported by @lighting) [NWI-3790] Web: fixed DSL page display in certain configurations (reported by @Peganeo) [NWI-3838] Web: removed domain-specific DNS from "Signal levels" dialog (reported by @dimon27254) [NWI-3784]

Hello. I have mesh system with titan + buddy 6. when I check a client to see how long it is connected to the network, it only shows how long it is connected to current mesh node. If it switch to other node, than duration resets 0 because it shows the other node connection time. I dont need how long it is connected specific node. I need how long it is connected any node (all network). I believe the purpose of mesh system is to behave like one network. I manage a network with 300 Aruba APs in a company. In Aruba, it shows uptime connection time of a client regardles which AP is connected. Thanks.

Release 4.2 Beta 3 (preview): DynDNS: implemented a command to disable binding of a request to the corresponding connection [NDM-3420]: interface {name} dyndns nobind IP: fixed access restriction to my.keenetic.net from "protected" segments [NDM-3346] IPsec: implemented adherence to the policy of the bound segment for VPN servers (reported by @nstddd) [NDM-3431] Kernel: fixed socket leak in nf_queue (reported by @s_keenetic) [NDM-3428] Mws: fix display of transitions between bands in the Transition Log (reported by @Alexander) [NDM-3412] OpenConnect: fixed selection of the interface through which to connect [NDM-3434] OpenConnect: implemented authgroup setting (reported by @machogar) [NDM-3430]: interface {name} openconnect authgroup {authgroup} OpenVPN: fixed adding routes received from the remote node [NDM-3415] Web (beta): added IP address display for OpenConnect connections (reported by @FLK) [NWI-3656] Web (beta): disabled auto-capitalization in input fields (reported by @spatiumstas) [NWI-3655] Web (beta): fixed "DNS servers" link on the "Internet" tile (reported by @spatiumstas) [NWI-3660] Web (beta): fixed "No new routes found" error when importing routes from file (reported by @efremych) [NWI-3670] Web (beta): fixed "Validate SIP proxy" checkbox (reported by @Gim12) [NWI-3638] Web (beta): fixed "Wireless ACL" page on extenders (reported by @AndreBA) [NWI-3640] Web (beta): fixed contents of the "Segments" tile for extenders (reported by @dimon27254) [NWI-3636] Web (beta): fixed copying of WireGuard public keys from the input form (reported by @spatiumstas) [NWI-3666] Web (beta): fixed display of tabs to fit the available free space (reported by @spatiumstas) [NWI-3393] Web (beta): fixed importing of WireGuard configuration to ignore PersistentKeepalive (reported by @spatiumstas) [NWI-3659] Web (beta): fixed menu scroll bar position on mobile screens (reported by @spatiumstas) [NWI-3654] Web (beta): fixed notification width (reported by @spatiumstas) [NWI-3662] Web (beta): fixed packet size setting for the Ping utility (reported by @spatiumstas) [NWI-3661] Web (beta): fixed unnecessary saving of user-defined tiles layout when opening the dashboard (reported by @And74) [NWI-3635] Web (beta): fixed validation of Proxy IP address to allow 127.0.0.1 (reported by @dimon27254) [NWI-3642] Web (beta): implemented alphabetical name sorting in the file manager (reported by @spatiumstas) [NWI-3663] Web (beta): implemeted display of 5G signal levels [NWI-3035] Web (beta): remove the “5G only” option for modems without 5G support (reported by @dimon27254) [NWI-3629] Web (beta): unified the behaviour of link to uninstalled application (reported by @bigpu) [NWI-3664] Web: fixed data in "Destination IP" column in "Active connections" tables (reported by @dimon27254) [NWI-3633] Wi-Fi: fixed enabling of VHT40 mode on mt7981 based devices [SYS-1189] Wireguard: implemented sending of a client ID in message headers (reported by @avn) [NDM-3427]: interface {name} wireguard peer {peer} client-id send {value}

Release 4.2 Beta 0: PPE: implemented dynamic table size alignment with nf_conntrack_max [NDM-3344] VPN: fixed PPP interface stalling on the backup connection after the primary connection is restored [NDM-3376] Web (beta): enabled the next-generation interface as the default [NDM-3378] Web (beta): fixed some minor issues related to application tiles (reported by @dimon27254) [NWI-3549] Web (beta): fixed unwanted visual effects when clicking on a pie chart (reported by @dimon27254) [NWI-3562] Wi-Fi: fixed display of zero channel number when WISP is connected [SYS-1171] Wi-Fi: fixed uninitialized variable causing errors in status polling and channel selection when DFS is active [SYS-1172]

Release 4.2 Alpha 17: IGMP: added a component to enable IGMP snooping on Buddy devices [NDM-3338] OpenVPN: fixed "Connection reset, restarting" error [NDM-3355] SNTP: filled in "Reference Identifier" and "Reference Timestamp" values in responses according to RFC4330 [NDM-3368] Web (beta): fixed behavior of toggles in tables (reported by @keenet07) [NWI-3524]

Release 4.2 Alpha 12: IPsec: fixed remote access via IPsec/IKE VPN connection to a host directly mapped to a WAN IP alias [NDM-3310] MWS: fixed "Network::Interface::Mtk::BandSteering: failed to lookup service for segment" error occurring on Extenders [NDM-3325] MWS: fixed regression in detecting Extender's backhaul connection status when access points are turned off [NDM-3333] MWS: implemented assignment of Extender ports to additional segments [NDM-3162]: mws member {member} port {port} [no] access {interface} — configure {port} as an access port for a segment; mws member {member} port {port} [no] disable — disable port. PPE: fixed IPv6 traffic accounting using the hardware packet engine [NDM-3234] PPE: implemented traffic acceleration when TTL is adjusted manually (reported by @r13) [SYS-1157] Web (beta): fixed bug in "Roaming for wireless devices" settings (reported by @zzaal) [NWI-3462] Web (beta): fixed color of selected application tile in dark theme (reported by @dimon27254) [NWI-3452] Web (beta): fixed deletion of a segment with enabled Captive portal after system restart (reported by @agentOleg) [NWI-3479]

Release 4.2 Alpha 7: Hotspot: fixed "system failed [0xcffd0042]" error during auto-registration (reported by @dimon27254) [NDM-3275] NTCE: fixed "duplicate key" error that occurs when the IntelliQoS page is opened (reported by @dimon27254) [NDM-3276]

Related CVEs: - CVE-2024-4021 - CVE-2024-4022 Affected devices: - KN-1010 - KN-1410 - KN-1711 - KN-1810 - KN-1910 Affected versions: - Up to 4.1.2.15 Description (4021): A vulnerability was found in Keenetic KN-1010, KN-1410, KN-1711, KN-1810 and KN-1910 up to 4.1.2.15. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /ndmComponents.js of the component Configuration Setting Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-261673 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Release 4.2 Alpha 5: IPsec: fixed spurious EoIP/IPsec connections after device restart [NDM-2518] IPv6: fixed adding static routes immediately after device restart and during VPN connection (reported by @mrGhotius) [NDM-3248] PingCheck: fixed "upstream is very slow to respond" error [NDM-3244] SSTP, OpenConnect: implemented "camouflage" mode (reported by @snark) [NDM-3257]: oc-server camouflage sstp-server camouflage UPnP: fixed adding rules for hosts that are assigned to a multipath policy [NDM-3251] Web (beta): added support for Extender mode [NWI-1861] Web (beta): fixed "statusLed" symbol on the Login page (reported by @dimon27254) [NWI-3363] Web (beta): fixed SMS page display in dark theme (reported by @dimon27254) [NWI-3324] Web (beta): fixed the height of the search query input (reported by @dimon27254) [NWI-3328] Wireguard: fixed route to remote endpoint after device restart [NDM-3223]

Release 4.2 Alpha 4: DNS: enabled HTTP/3 support for DoH (reported by @theGorgeous) [NDM-3229] Hotspot: fixed interception of DNS queries in segments (reported by @ValdikSS) [NDM-3228] IPsec: implemented aggressive IKEv1 mode for compatibility with FritzBox L2TP/IPsec server [NDM-3227]: interface {name} ipsec aggressive Web (beta): added arrows when multiple disc partitions exist in the USB Devices section (reported by @dimon27254) [NWI-3369] Web (beta): fixed content of the "More Information" block on the "Client Lists" page (reported by @dimon27254) [NWI-3402] Web (beta): fixed display of "Save"/"Cancel" buttons when changing Wi-Fi settings (reported by @dimon27254) [NWI-3392] Web (beta): fixed display of shadows in the dark theme (reported by @dimon27254) [NWI-3389] Web (beta): fixed flashing when tapping on folders in the File Manager on mobile devices [NWI-3371] Web (beta): fixed some issues on the dashboard (reported by @dimon27254) [NWI-3323] Web (beta): hidden IPv6 settings when IPv6 component is uninstalled (reported by @dimon27254) [NWI-3384] Web (beta): improved display of signal metrics on the Mobile page (reported by @dimon27254) [NWI-3383] Web (beta): made English names of firmware components used by default (reported by @dimon27254) [NWI-3364]

Release 4.2 Alpha 3: IPsec: fixed access to the home network when "ip static" rules are configured on WAN IP aliases [NDM-3110] UPnP: fixed priority of "ip static" rules over UPnP rules [NDM-3078] USB: added support for Yota D071C modem [NDM-3218] VPN: implemented OpenConnect client as a separate component [NDM-3207] Web (beta): fixed appearance of the Ethernet ports in Firefox (reported by @Rootdiv) [NWI-3357] Web (beta): fixed appearance of tooltips in the Wi-Fi Monitor (reported by @dimon27254) [NWI-3379] Wi-Fi: implemented a workaround to avoid crashing of certain Realtek Wi-Fi drivers under Windows when passing non-PMF authentication [SYS-1131] ZeroTier: fixed binding to the WAN address and inbound access to the service port (reported by @gaaronk) [NDM-3216]