MuKu

Release 5.0 Alpha 1: CWMP: implemented basic support of the TR-098 data model, transactions and STUN; feature is available on request, contact technical support for details [NDM-3870] Ethernet: fixed halting of packet transmission at 1 Gbps link on a 2.5 Gbps port [SYS-1354] IPv4: increased the object groups limit to 128 [NDM-3862] IPv6: implemented commands for static address and port translation rules [NDM-3819]: ipv6 static [protocol] ({interface} {mac} | {mac}) [{port} [through {end-port}] ] ipv6 static rule {index} (disable | schedule {schedule}) LTE: fixed USB device restart when ping-check is enabled [NDM-3848] Opkg: enabled auto-mounting of the /lib/system-modules directory (reported by @Kvark) [NDM-3693] Opkg: implemented OpkgTun and OpkgTap interfaces (reported by @avn) [NDM-3846] QMI: implemented the capability to include UsbQmi interfaces in bridge [NDM-3707] TSMB: removed obsolete "cifs master" command [NDM-3827] Web: implemented ZeroTier support in "Other connections" [NDM-4164] Wireguard: fixed AllowIPs validator to not allow overlapping networks [NDM-3868]

5.0 is an experimental branch, see also changelog 4.3. Supported models: Giga (KN-1010) Hero (KN-1011, KN-1012) Start/Starter (KN-1111, KN-1112, KN-1121) Air/Explorer (KN-1613) Extra/Carrier (KN-1711, KN-1713) Ultra/Titan (KN-1810, KN-1811, KN-1812) Viva/Skipper (KN-1910, KN-1912, KN-1913) Omni DSL (KN-2011, KN-2012) Extra DSL/Carrier DSL/Skipper DSL (KN-2111, KN-2112) Runner 4G (KN-2210, KN-2211, KN-2212) Hero 4G (KN-2310, KN-2311) Hero DSL (KN-2410) Peak DSL (KN-2510) Giant (KN-2610) Peak (KN-2710) Orbiter Pro (KN-2810) Skipper 4G (KN-2910) Speedster (KN-3010, KN-3012) Buddy 4 (KN-3210, KN-3211) Buddy 5 (KN-3311) Buddy 6 (KN-3411) Voyager Pro (KN-3510) Hopper DSL (KN-3610) Sprinter (KN-3710, KN-3711) Sprinter SE (KN-3712) Hopper (KN-3810) Hopper SE (KN-3812) Challenger (KN-3910) Challenger SE (KN-3911) Racer (KN-4010) Explorer 4G (KN-4910) Orbiter 6 (KAP-630)

Release 4.3.2 (preview): DNS: fixed behavior of an empty DNS profile [NDM-3843] IPoE: fixed IP address loss on the Home segment when setting port 1 as WAN on KN-3910 [NDM-3830] IPsec: fixed access to the bound network segment for L2TP/IPsec VPN clients [NDM-3715] OpenConnect: fixed compatibility with VPN Client Pro for Android (reported by @Mechanics) [NDM-3838] Opkg: fixed running single commands via "ndmc" (reported by @spatiumstas) [NDM-3837] USB: added support for Fibocom FM190W modem [NDM-3849] Web: fixed various bugs in the interface (reported by @spatiumstas, @dimon27254, @iggo) [NWI-4214]: NWI-4178, NWI-4013, NWI-4187, NWI-4194, NWI-4196, NWI-4197, NWI-4004 Wi-Fi: fixed wireless client disconnection by timeout on AX3000 access points [SYS-1337] ZeroTier: fixed identity.public validation for big-endian (mips) devices (reported by @gaaronk) [NDM-3821]

Release 4.3.1 (preview): DynDNS: fixed saving of 'dyndns nobind' setting [NDM-3816] HTTP: fixed redundant disclosure device information [NDM-3783]: CVE-2024-4021 CVE-2024-4022 IP: fixed applying static routes in multiple IP policies [NDM-3814] IP: fixed assignment of "conform" policy after automatic client registration [NDM-3810] IPsec: fixed wrong "crypto map" use in L2TP/IPSec server settings [NDM-3811] OpenConnect: added random padding to packets to improve connection resistance (reported by @dimon27254) [NDM-3791] OpenConnect: fixed access to the VPN server's attached network [NDM-3820] TSMB: enabled support for extended attributes (reported by @dimon27254) [NDM-3645] VPN: added 'session-logout' command to terminate VPN sessions (reported by @CBLoner) [NDM-3788]: crypto map l2tp-server session-logout {session} crypto map virtual-ip session-logout {session} sstp-server session-logout {session} vpn-server session-logout {session} oc-server session-logout {session} Web: added "https://" to OpenConnect VPN server URI when camouflage is enabled [NWI-4146] Web: added alphabetical sorting to Policy Bindings [NWI-4092] Web: fixed various bugs and layout issues on different screen sizes (reported by @dimon27254, @spatiumstas, @enterfaza, @FLK, @mrGhotius) [NWI-4191]: NWI-4168, NWI-4161, NWI-3901, NWI-4108, NWI-3922, NWI-4083, NWI-4085, NWI-4122, NWI-4125, NWI-4136, NWI-4134, NWI-4135, NWI-4139, NWI-4141, NWI-4130, NWI-4169, NWI-4080, NWI-4160, NWI-4151 Web: implemented display of users in file ACLs for which the system has no accounts configured [NWI-3951]

Release 4.3.0 (preview): Cifs: removed "CIFS" suffix from the mDNS name of the device [NDM-3648] IP: implemented deletion of routes by “route delete” command when importing from a bat-file (reported by @VVS) [NDM-3778] IPv6: implemented DNS server configuration for subnets [NDM-3702]: ipv6 subnet {name} dns-server ({address1} [address2] | disable) Web: fixed absence of buttons on the confirmation popup dialog in the Fail-safe mode (reported by @vk11) [NWI-4143] Web: fixed appearance of the "Read more" button in the list of knowledge base articles (reported by @VVS) [NWI-4137] Web: fixed Applications page loading error [NWI-4104] Web: fixed color of the separation line on the "Network Ports" tile [NWI-4145] Web: fixed excessive row height in the Client Lists table (reported by @AndreBA) [NWI-4133] Web: fixed issues caused by updating the style of control elements (reported by @dimon27254) [NWI-4140] Web: fixed issues in the mobile version of the Connection Policies page (reported by @dimon27254) [NWI-4114] Web: fixed line spacing in text annotations in the mobile version (reported by @dimon27254) [NWI-3872] Web: fixed saving of the main menu in a hidden state when closing and reopening the browser window (reported by @cheburashkaDDNS) [NWI-4120] Web: fixed selection of segments on the traffic monitor pie chart in the mobile version (reported by @dimon27254) [NWI-4079] Web: redesigned "My networks and Wi-Fi" tile on the dashboard [NWI-4071] Wi-Fi: fixed transfer of multicast and broadcast traffic when client isolation is enabled on mt7981-based devices [SYS-1329]

Release 4.3 Beta 4 (preview): IGMP: fixed multicast forwarding to IPTV ports [NDM-3767] IPsec: fixed adding route to client network on L2TP/IPsec server [NDM-3758] NTCE: fixed "system failed [0xcffd00bd]" error when saving filtering profiles (reported by @dimon27254) [NDM-3770] Web: fixed mandatory password input when creating a user for OPKG and applications (reported by @spatiumstas) [NWI-3700] Web: fixed tooltip behaviour on Mesh Wi-Fi system card [NWI-4062] Wi-Fi: fixed configuration of channel width [NDM-3764] Wi-Fi: fixed connection issues with Intel AC9260/9560 adapters in WPA3 PSK mode [SYS-1325]

Release 4.2.6.3 (stable): IPsec: fixed L2TP client operation when L2TP/IPsec component is installed [NDM-3759] Wi-Fi: fixed connection issues with Intel AC9260/9560 adapters in WPA3 PSK mode [SYS-1325]

Release 4.3 Beta 3 (preview): DNS: fixed "duplicate key: group" error when using FQDN object groups (reported by @dimon27254) [NDM-3755] HTTP: implemented blacklisting of remote hosts sending invalid POST requests [NDM-3716] NTCE: fixed "detected 5 attributes, only 4 supported" error (reported by @Strider78) [NDM-3756] OpenConnect: fixed User-Agent header when using "anyconnect" protocol [NDM-3733] SSTP: fixed access to SSTP VPN server when "ip http security-level private" is set [NDM-3747] USB: added support for Telit FN990 modem [NDM-3743] VPN: fixed WireGuard and OpenVPN port collision when creating tunnels [NDM-3732] Web: changed view of Connection Policies on mobile screens (reported by @dimon27254) [NWI-4049] Web: fixed display of SFP/Ethernet combo port connection mode (reported by @Gim12) [NWI-3319] Web: fixed opening Mesh Wi-Fi System page after a new Extender is acquired (reported by @KYTECHNGAMING) [NDM-3757] Web: fixed the inability to turn on the Ethernet port after it has been turned off [NWI-4066] Web: fixed unwanted reset of PPPoE authentication settings when selecting "Automatic (DHCP)" option (reported by @Leshiyart) [NWI-4065] Web: increased the number of visible options in drop-down lists (reported by @spatiumstas) [NWI-3756] Wi-Fi: fixed connection instability for some wireless client devices when "target-waketime" setting is enabled [SYS-1266] Wireguard: fixed losing "asc" settings after reconfiguration (reported by @FLK) [SYS-1320]

Release 4.2.6.2 (stable): MWS: fixed wireless backhaul reconnection when WPA3 is enabled [SYS-1281]

Release 4.3 Beta 2 (preview): DNS: implemented subdomain resolution in "object-group fqdn" (reported by @avn) [NDM-3726] HTTP: fixed Cookie handling and related "Core::Scgi::Tools: bad request: no session" error during authorization (reported by @snark) [NDM-3713] HTTP: fixed missing static DNS records when "ip http proxy dns-override" is enabled (reported by @Leshiyart) [NDM-3718] IPv6: fixed 6in4 tunnel performance when hardware packet engine is enabled [SYS-1271] OpenSSL: updated to 3.3.3 [SYS-1306] Proxy: fixed resetting of interface counters when it is shut down (reported by @keenet07) [NDM-3724] SFP: fixed KN-1012 compatibility with RTL9601D-based SFP modules [SYS-1313] Web: fixed redundant warning about unsaved changes during firmware upgrade (reported by @dimon27254) [NWI-3944] Web: fixed showing a scroll-bar when dragging objects in the connection priority list (reported by @dimon27254) [NWI-4044] Web: fixed showing an alert about unset password when it's already set (reported by @dimon27254) [NWI-4033] Web: fixed status showing not inserted SIM card on the dashboard (reported by @spatiumstas) [NWI-4016] Web: fixed tooltip readability in the Application Traffic Analyser table (reported by @dimon27254) [NWI-4020] Web: fixed unexpected second reboot after a system update (reported by @spatiumstas) [NWI-4047] Web: fixed Wi-Fi network shutdown despite canceling this action in a pop-up dialog box (reported by @dimon27254) [NWI-4010] Web: improved appearance of the side menu [NWI-3839] Web: locked the LTE signal metrics button when no connection is established (reported by @spatiumstas) [NWI-4015] Web: redesigned password input field with indication of password strength [NWI-4030]

Release 4.2.6.1 (stable): Web: fixed Fast Transition (802.11r) reset to Disabled when changing SSID on one band [NWI-3900]

Release 4.3 Beta 1 (preview): Dns: implemented object groups with automatic FQDN name resolution [NDM-3692]: object-group fqdn {name} — create an FQDN object group object-group fqdn {name} include {address} — add an address to the group Opkg: added a hidden command to display the system name of a network interface (requested by @Ponywka) [NDM-3694]: show interface {name} system-name Storage: fixed mounting HFS+ volumes larger than 6TB [SYS-1143] Web: fixed background color of "show threads" output in Web CLI (reported by @spatiumstas) [NWI-4052] Web: fixed display of manually configured HTTPS port in KeenDNS links (reported by @bigpu) [NWI-4027] Web: fixed Fast Transition (802.11r) reset to Disabled when changing SSID on one band [NWI-3900] Web: fixed text description for OpkgLedControlX handler (reported by @dimon27254) [NWI-3997] Web: implemented a setting that allows to assign a specified home network segment to the Extender's Ethernet port [NWI-3571] Web: locked configuration-related system settings when the fail-safe mode is active [NWI-4032] Web: updated modal window behavior and layout [NWI-3979]

Release 4.3 Beta 0.1: DNS: fixed forwarding of transit queries allowed in the system profile [NDM-3651] DNS: fixed initialization of DoT/DoH when static DNS servers are configured for unused connections (reported by @Robespierre) [NDM-3681] MWS: fixed wireless backhaul reconnection when WPA3 is enabled [SYS-1281] OpenVPN: fixed resolving remote endpoint using A (IPv4) DNS queries when IPv6 is running [NDM-3640] Proxy: increased the maximum number of Proxy interfaces to 64 [NDM-3686] SFP: implemented SFP+ and combo port operation mode settings [NDM-3181]: interface {name} media-type {type} — set combo port media type: auto — prefer SFP with auto-failover to MDI (default) mdi — enforce media type to MDI sfp — enforce media type to SFP interface {name} sfp pcs {mode} — set Physical Coding Sublayer (PCS) mode: auto — autodetect from DDMI(default) fallback — sequentially try fixed baseband modes until one of them works sgmii/an — SGMII-supported speeds of 10/100/1000 Mbps with auto-negotiation enabled 1000base-x/an — fixed 1 Gbps baseband with Clause 37 auto-negotiation enabled 1000base-x — fixed 1 Gbps baseband 2500base-x/an — fixed 2.5 Gbps baseband with Clause 37 auto-negotiation enabled 2500base-x — fixed 2.5 Gbps baseband interface {name} sfp rx-los {mode} — set SFP RX_LOS reception mode: auto — autodetect from DDMI (default) accept — accept RX_LOS signal ignore — ignore RX_LOS signal interface {name} sfp init-timeout (auto | {timeout}) — set SFP module initialization timeout in seconds Storage: enabled UASP support for external USB drives [SYS-1290] USB: added support for Sierra MC7304 modem [NDM-3684] Web: fixed auto-completion for "no" with arguments in Web CLI (reported by @dimon27254) [NWI-4022] Web: fixed refreshing of active connections uptime on the dashboard (reported by @k19olegh68) [NWI-4034] Web: fixed unsaved changes warning on Mobile Broadband Internet Connections page (reported by @spatiumstas) [NWI-3999] Web: improved handling of continued commands in Web CLI (reported by @TopGear78) [NWI-3738]

Release 4.2.6 (preview → stable): Ethernet: fixed 100 Mbps link on a 2.5 Gbps port [SYS-1275] IPv6: fixed 6in4 tunneling when static MTU is set [NDM-3644] Kernel: fixed system clock drift on mt7981-based devices (reported by @dimon27254) [SYS-1273] OpenVPN: updated to 2.6.13 [NDM-3660] SFP: added quirks for GPON modules on KN-1012 [SYS-1279]: CDT FD511GX-RM0 CDT SNR-SFP-ONU-XPON Web: fixed an error when creating an EoIP tunnel (reported by @xan) [NWI-3964] Web: fixed auto-completion for "no" with arguments in Web CLI (reported by @dimon27254) [NWI-4022] Web: fixed connection priority setting on mobile screens (reported by @spatiumstas) [NWI-3990] Web: fixed display of connection name in the “Signal Levels” pop-up (reported by @dimon27254) [NWI-3978] Web: fixed errors in log when adding a DNS server (reported by @dimon27254) [NWI-3991] Web: fixed traffic monitor card on the dashboard (reported by @spatiumstas) [NWI-3921] Web: fixed unsaved changes warning on Mobile Broadband Internet Connections page (reported by @spatiumstas) [NWI-3999] Web: improved handling of continued commands in Web CLI (reported by @TopGear78) [NWI-3738] Wi-Fi: fixed inability to connect wireless mt7981-based Extenders when hardware packet engine is turned off [SYS-1283]

Release 4.3 Beta 0: DSL: update DMT code to V5.12.23.9_2025_0115 for en7516-based devices to improve connection stability [SYS-1284] IPv6: enabled NAT66 automatically for /128 prefixes on "global" interfaces (reported by @Sano) [NDM-3669] SFP: added quirks for GPON modules on KN-1012 [SYS-1279]: CDT FD511GX-RM0 CDT SNR-SFP-ONU-XPON Storage: enabled TRIM support for external USB drives (reported by @Isolated) [NDM-3668] Web: allowed usage of "127.*" peer addresses for WireGuard (reported by @henry.pootel) [NWI-3908] Web: fixed display of long SMS messages on mobile screens (reported by @spatiumstas) [NWI-3909] Web: fixed errors in the browser log when leaving the SMS page (reported by @spatiumstas) [NWI-3917] Web: fixed sorting by Node name on Mesh Wi-Fi System page [NWI-4005] Wi-Fi: fixed inability to connect wireless mt7981-based Extenders when hardware packet engine is turned off [SYS-1283]