MuKu

Release 5.0 Alpha 1: CWMP: implemented basic support of the TR-098 data model, transactions and STUN; feature is available on request, contact technical support for details [NDM-3870] Ethernet: fixed halting of packet transmission at 1 Gbps link on a 2.5 Gbps port [SYS-1354] IPv4: increased the object groups limit to 128 [NDM-3862] IPv6: implemented commands for static address and port translation rules [NDM-3819]: ipv6 static [protocol] ({interface} {mac} | {mac}) [{port} [through {end-port}] ] ipv6 static rule {index} (disable | schedule {schedule}) LTE: fixed USB device restart when ping-check is enabled [NDM-3848] Opkg: enabled auto-mounting of the /lib/system-modules directory (reported by @Kvark) [NDM-3693] Opkg: implemented OpkgTun and OpkgTap interfaces (reported by @avn) [NDM-3846] QMI: implemented the capability to include UsbQmi interfaces in bridge [NDM-3707] TSMB: removed obsolete "cifs master" command [NDM-3827] Web: implemented ZeroTier support in "Other connections" [NDM-4164] Wireguard: fixed AllowIPs validator to not allow overlapping networks [NDM-3868]

5.0 is an experimental branch, see also changelog 4.3. Supported models: Giga (KN-1010) Hero (KN-1011, KN-1012) Start/Starter (KN-1111, KN-1112, KN-1121) Air/Explorer (KN-1613) Extra/Carrier (KN-1711, KN-1713) Ultra/Titan (KN-1810, KN-1811, KN-1812) Viva/Skipper (KN-1910, KN-1912, KN-1913) Omni DSL (KN-2011, KN-2012) Extra DSL/Carrier DSL/Skipper DSL (KN-2111, KN-2112) Runner 4G (KN-2210, KN-2211, KN-2212) Hero 4G (KN-2310, KN-2311) Hero DSL (KN-2410) Peak DSL (KN-2510) Giant (KN-2610) Peak (KN-2710) Orbiter Pro (KN-2810) Skipper 4G (KN-2910) Speedster (KN-3010, KN-3012) Buddy 4 (KN-3210, KN-3211) Buddy 5 (KN-3311) Buddy 6 (KN-3411) Voyager Pro (KN-3510) Hopper DSL (KN-3610) Sprinter (KN-3710, KN-3711) Sprinter SE (KN-3712) Hopper (KN-3810) Hopper SE (KN-3812) Challenger (KN-3910) Challenger SE (KN-3911) Racer (KN-4010) Explorer 4G (KN-4910) Orbiter 6 (KAP-630)

Release 4.3.2 (preview): DNS: fixed behavior of an empty DNS profile [NDM-3843] IPoE: fixed IP address loss on the Home segment when setting port 1 as WAN on KN-3910 [NDM-3830] IPsec: fixed access to the bound network segment for L2TP/IPsec VPN clients [NDM-3715] OpenConnect: fixed compatibility with VPN Client Pro for Android (reported by @Mechanics) [NDM-3838] Opkg: fixed running single commands via "ndmc" (reported by @spatiumstas) [NDM-3837] USB: added support for Fibocom FM190W modem [NDM-3849] Web: fixed various bugs in the interface (reported by @spatiumstas, @dimon27254, @iggo) [NWI-4214]: NWI-4178, NWI-4013, NWI-4187, NWI-4194, NWI-4196, NWI-4197, NWI-4004 Wi-Fi: fixed wireless client disconnection by timeout on AX3000 access points [SYS-1337] ZeroTier: fixed identity.public validation for big-endian (mips) devices (reported by @gaaronk) [NDM-3821]

Release 4.3.1 (preview): DynDNS: fixed saving of 'dyndns nobind' setting [NDM-3816] HTTP: fixed redundant disclosure device information [NDM-3783]: CVE-2024-4021 CVE-2024-4022 IP: fixed applying static routes in multiple IP policies [NDM-3814] IP: fixed assignment of "conform" policy after automatic client registration [NDM-3810] IPsec: fixed wrong "crypto map" use in L2TP/IPSec server settings [NDM-3811] OpenConnect: added random padding to packets to improve connection resistance (reported by @dimon27254) [NDM-3791] OpenConnect: fixed access to the VPN server's attached network [NDM-3820] TSMB: enabled support for extended attributes (reported by @dimon27254) [NDM-3645] VPN: added 'session-logout' command to terminate VPN sessions (reported by @CBLoner) [NDM-3788]: crypto map l2tp-server session-logout {session} crypto map virtual-ip session-logout {session} sstp-server session-logout {session} vpn-server session-logout {session} oc-server session-logout {session} Web: added "https://" to OpenConnect VPN server URI when camouflage is enabled [NWI-4146] Web: added alphabetical sorting to Policy Bindings [NWI-4092] Web: fixed various bugs and layout issues on different screen sizes (reported by @dimon27254, @spatiumstas, @enterfaza, @FLK, @mrGhotius) [NWI-4191]: NWI-4168, NWI-4161, NWI-3901, NWI-4108, NWI-3922, NWI-4083, NWI-4085, NWI-4122, NWI-4125, NWI-4136, NWI-4134, NWI-4135, NWI-4139, NWI-4141, NWI-4130, NWI-4169, NWI-4080, NWI-4160, NWI-4151 Web: implemented display of users in file ACLs for which the system has no accounts configured [NWI-3951]

Release 4.3.0 (preview): Cifs: removed "CIFS" suffix from the mDNS name of the device [NDM-3648] IP: implemented deletion of routes by “route delete” command when importing from a bat-file (reported by @VVS) [NDM-3778] IPv6: implemented DNS server configuration for subnets [NDM-3702]: ipv6 subnet {name} dns-server ({address1} [address2] | disable) Web: fixed absence of buttons on the confirmation popup dialog in the Fail-safe mode (reported by @vk11) [NWI-4143] Web: fixed appearance of the "Read more" button in the list of knowledge base articles (reported by @VVS) [NWI-4137] Web: fixed Applications page loading error [NWI-4104] Web: fixed color of the separation line on the "Network Ports" tile [NWI-4145] Web: fixed excessive row height in the Client Lists table (reported by @AndreBA) [NWI-4133] Web: fixed issues caused by updating the style of control elements (reported by @dimon27254) [NWI-4140] Web: fixed issues in the mobile version of the Connection Policies page (reported by @dimon27254) [NWI-4114] Web: fixed line spacing in text annotations in the mobile version (reported by @dimon27254) [NWI-3872] Web: fixed saving of the main menu in a hidden state when closing and reopening the browser window (reported by @cheburashkaDDNS) [NWI-4120] Web: fixed selection of segments on the traffic monitor pie chart in the mobile version (reported by @dimon27254) [NWI-4079] Web: redesigned "My networks and Wi-Fi" tile on the dashboard [NWI-4071] Wi-Fi: fixed transfer of multicast and broadcast traffic when client isolation is enabled on mt7981-based devices [SYS-1329]

Release 4.3 Beta 4 (preview): IGMP: fixed multicast forwarding to IPTV ports [NDM-3767] IPsec: fixed adding route to client network on L2TP/IPsec server [NDM-3758] NTCE: fixed "system failed [0xcffd00bd]" error when saving filtering profiles (reported by @dimon27254) [NDM-3770] Web: fixed mandatory password input when creating a user for OPKG and applications (reported by @spatiumstas) [NWI-3700] Web: fixed tooltip behaviour on Mesh Wi-Fi system card [NWI-4062] Wi-Fi: fixed configuration of channel width [NDM-3764] Wi-Fi: fixed connection issues with Intel AC9260/9560 adapters in WPA3 PSK mode [SYS-1325]

Release 4.2.6.3 (stable): IPsec: fixed L2TP client operation when L2TP/IPsec component is installed [NDM-3759] Wi-Fi: fixed connection issues with Intel AC9260/9560 adapters in WPA3 PSK mode [SYS-1325]

Release 4.3 Beta 3 (preview): DNS: fixed "duplicate key: group" error when using FQDN object groups (reported by @dimon27254) [NDM-3755] HTTP: implemented blacklisting of remote hosts sending invalid POST requests [NDM-3716] NTCE: fixed "detected 5 attributes, only 4 supported" error (reported by @Strider78) [NDM-3756] OpenConnect: fixed User-Agent header when using "anyconnect" protocol [NDM-3733] SSTP: fixed access to SSTP VPN server when "ip http security-level private" is set [NDM-3747] USB: added support for Telit FN990 modem [NDM-3743] VPN: fixed WireGuard and OpenVPN port collision when creating tunnels [NDM-3732] Web: changed view of Connection Policies on mobile screens (reported by @dimon27254) [NWI-4049] Web: fixed display of SFP/Ethernet combo port connection mode (reported by @Gim12) [NWI-3319] Web: fixed opening Mesh Wi-Fi System page after a new Extender is acquired (reported by @KYTECHNGAMING) [NDM-3757] Web: fixed the inability to turn on the Ethernet port after it has been turned off [NWI-4066] Web: fixed unwanted reset of PPPoE authentication settings when selecting "Automatic (DHCP)" option (reported by @Leshiyart) [NWI-4065] Web: increased the number of visible options in drop-down lists (reported by @spatiumstas) [NWI-3756] Wi-Fi: fixed connection instability for some wireless client devices when "target-waketime" setting is enabled [SYS-1266] Wireguard: fixed losing "asc" settings after reconfiguration (reported by @FLK) [SYS-1320]

Release 4.2.6.2 (stable): MWS: fixed wireless backhaul reconnection when WPA3 is enabled [SYS-1281]

Release 4.3 Beta 2 (preview): DNS: implemented subdomain resolution in "object-group fqdn" (reported by @avn) [NDM-3726] HTTP: fixed Cookie handling and related "Core::Scgi::Tools: bad request: no session" error during authorization (reported by @snark) [NDM-3713] HTTP: fixed missing static DNS records when "ip http proxy dns-override" is enabled (reported by @Leshiyart) [NDM-3718] IPv6: fixed 6in4 tunnel performance when hardware packet engine is enabled [SYS-1271] OpenSSL: updated to 3.3.3 [SYS-1306] Proxy: fixed resetting of interface counters when it is shut down (reported by @keenet07) [NDM-3724] SFP: fixed KN-1012 compatibility with RTL9601D-based SFP modules [SYS-1313] Web: fixed redundant warning about unsaved changes during firmware upgrade (reported by @dimon27254) [NWI-3944] Web: fixed showing a scroll-bar when dragging objects in the connection priority list (reported by @dimon27254) [NWI-4044] Web: fixed showing an alert about unset password when it's already set (reported by @dimon27254) [NWI-4033] Web: fixed status showing not inserted SIM card on the dashboard (reported by @spatiumstas) [NWI-4016] Web: fixed tooltip readability in the Application Traffic Analyser table (reported by @dimon27254) [NWI-4020] Web: fixed unexpected second reboot after a system update (reported by @spatiumstas) [NWI-4047] Web: fixed Wi-Fi network shutdown despite canceling this action in a pop-up dialog box (reported by @dimon27254) [NWI-4010] Web: improved appearance of the side menu [NWI-3839] Web: locked the LTE signal metrics button when no connection is established (reported by @spatiumstas) [NWI-4015] Web: redesigned password input field with indication of password strength [NWI-4030]

Release 4.2.6.1 (stable): Web: fixed Fast Transition (802.11r) reset to Disabled when changing SSID on one band [NWI-3900]

Release 4.3 Beta 1 (preview): Dns: implemented object groups with automatic FQDN name resolution [NDM-3692]: object-group fqdn {name} — create an FQDN object group object-group fqdn {name} include {address} — add an address to the group Opkg: added a hidden command to display the system name of a network interface (requested by @Ponywka) [NDM-3694]: show interface {name} system-name Storage: fixed mounting HFS+ volumes larger than 6TB [SYS-1143] Web: fixed background color of "show threads" output in Web CLI (reported by @spatiumstas) [NWI-4052] Web: fixed display of manually configured HTTPS port in KeenDNS links (reported by @bigpu) [NWI-4027] Web: fixed Fast Transition (802.11r) reset to Disabled when changing SSID on one band [NWI-3900] Web: fixed text description for OpkgLedControlX handler (reported by @dimon27254) [NWI-3997] Web: implemented a setting that allows to assign a specified home network segment to the Extender's Ethernet port [NWI-3571] Web: locked configuration-related system settings when the fail-safe mode is active [NWI-4032] Web: updated modal window behavior and layout [NWI-3979]

Release 4.3 Beta 0.1: DNS: fixed forwarding of transit queries allowed in the system profile [NDM-3651] DNS: fixed initialization of DoT/DoH when static DNS servers are configured for unused connections (reported by @Robespierre) [NDM-3681] MWS: fixed wireless backhaul reconnection when WPA3 is enabled [SYS-1281] OpenVPN: fixed resolving remote endpoint using A (IPv4) DNS queries when IPv6 is running [NDM-3640] Proxy: increased the maximum number of Proxy interfaces to 64 [NDM-3686] SFP: implemented SFP+ and combo port operation mode settings [NDM-3181]: interface {name} media-type {type} — set combo port media type: auto — prefer SFP with auto-failover to MDI (default) mdi — enforce media type to MDI sfp — enforce media type to SFP interface {name} sfp pcs {mode} — set Physical Coding Sublayer (PCS) mode: auto — autodetect from DDMI(default) fallback — sequentially try fixed baseband modes until one of them works sgmii/an — SGMII-supported speeds of 10/100/1000 Mbps with auto-negotiation enabled 1000base-x/an — fixed 1 Gbps baseband with Clause 37 auto-negotiation enabled 1000base-x — fixed 1 Gbps baseband 2500base-x/an — fixed 2.5 Gbps baseband with Clause 37 auto-negotiation enabled 2500base-x — fixed 2.5 Gbps baseband interface {name} sfp rx-los {mode} — set SFP RX_LOS reception mode: auto — autodetect from DDMI (default) accept — accept RX_LOS signal ignore — ignore RX_LOS signal interface {name} sfp init-timeout (auto | {timeout}) — set SFP module initialization timeout in seconds Storage: enabled UASP support for external USB drives [SYS-1290] USB: added support for Sierra MC7304 modem [NDM-3684] Web: fixed auto-completion for "no" with arguments in Web CLI (reported by @dimon27254) [NWI-4022] Web: fixed refreshing of active connections uptime on the dashboard (reported by @k19olegh68) [NWI-4034] Web: fixed unsaved changes warning on Mobile Broadband Internet Connections page (reported by @spatiumstas) [NWI-3999] Web: improved handling of continued commands in Web CLI (reported by @TopGear78) [NWI-3738]

Release 4.2.6 (preview → stable): Ethernet: fixed 100 Mbps link on a 2.5 Gbps port [SYS-1275] IPv6: fixed 6in4 tunneling when static MTU is set [NDM-3644] Kernel: fixed system clock drift on mt7981-based devices (reported by @dimon27254) [SYS-1273] OpenVPN: updated to 2.6.13 [NDM-3660] SFP: added quirks for GPON modules on KN-1012 [SYS-1279]: CDT FD511GX-RM0 CDT SNR-SFP-ONU-XPON Web: fixed an error when creating an EoIP tunnel (reported by @xan) [NWI-3964] Web: fixed auto-completion for "no" with arguments in Web CLI (reported by @dimon27254) [NWI-4022] Web: fixed connection priority setting on mobile screens (reported by @spatiumstas) [NWI-3990] Web: fixed display of connection name in the “Signal Levels” pop-up (reported by @dimon27254) [NWI-3978] Web: fixed errors in log when adding a DNS server (reported by @dimon27254) [NWI-3991] Web: fixed traffic monitor card on the dashboard (reported by @spatiumstas) [NWI-3921] Web: fixed unsaved changes warning on Mobile Broadband Internet Connections page (reported by @spatiumstas) [NWI-3999] Web: improved handling of continued commands in Web CLI (reported by @TopGear78) [NWI-3738] Wi-Fi: fixed inability to connect wireless mt7981-based Extenders when hardware packet engine is turned off [SYS-1283]

Release 4.3 Beta 0: DSL: update DMT code to V5.12.23.9_2025_0115 for en7516-based devices to improve connection stability [SYS-1284] IPv6: enabled NAT66 automatically for /128 prefixes on "global" interfaces (reported by @Sano) [NDM-3669] SFP: added quirks for GPON modules on KN-1012 [SYS-1279]: CDT FD511GX-RM0 CDT SNR-SFP-ONU-XPON Storage: enabled TRIM support for external USB drives (reported by @Isolated) [NDM-3668] Web: allowed usage of "127.*" peer addresses for WireGuard (reported by @henry.pootel) [NWI-3908] Web: fixed display of long SMS messages on mobile screens (reported by @spatiumstas) [NWI-3909] Web: fixed errors in the browser log when leaving the SMS page (reported by @spatiumstas) [NWI-3917] Web: fixed sorting by Node name on Mesh Wi-Fi System page [NWI-4005] Wi-Fi: fixed inability to connect wireless mt7981-based Extenders when hardware packet engine is turned off [SYS-1283]

Release 4.3 Alpha 14: Ethernet: fixed 100 Mbps link on a 2.5 Gbps port [SYS-1275] Kernel: fixed system clock drift on mt7981-based devices (reported by @dimon27254) [SYS-1273] OpenVPN: updated to 2.6.13 [NDM-3660] SSTP: fixed "session-preempt" configuration [NDM-3662] Web: fixed appearance of "-1" in Application traffic analyzer (reported by @dimon27254) [NWI-4008] Web: fixed issues on Mesh Wi-Fi system page (reported by @dimon27254) [NWI-4002] Web: fixed update channel tooltip on the dashboard (reported by @dimon27254) [NWI-3932]

Release 4.3 Alpha 13: AFP: enabled Time Machine attribute for all shares by default [NDM-3510]: afp share {label} {mount} [timemachine] [{description}] IPoE: fixed "voip" role assignment (reported by @Leshiyart) [NDM-3643] IPv6: fixed 6in4 tunneling when static MTU is set [NDM-3644] Web: fixed display of connection name in the “Signal Levels” pop-up (reported by @dimon27254) [NWI-3978] Web: fixed errors in log when adding a DNS server (reported by @dimon27254) [NWI-3991] Web: fixed traffic monitor card on the dashboard (reported by @spatiumstas) [NWI-3921]

Release 4.3 Alpha 12: IPoE: reworked code for configuring Wired connections concerning IPTV, VoIP and VLANs on Ethernet ports [NDM-3586] IPv6: fixed the cause of nginx error “bind() to [fd05:...] failed (Address not available)” [NDM-3525]

Release 4.2.5 (preview → stable): HTTP: fixed "there are errors in config" endless loop when OpenConnect server is active (reported by @Namenloss) [NDM-3627] IP: fixed status of blocked hosts with "conform" policy assigned [NDM-3607] NTCE: fixed "system failed [0xcffd0532], unable to write to control file" error (reported by @Denis P) [NDM-3614] NTCE: fixed application data inconsistency that caused issues with the Application Traffic Monitor (reported by @dimon27254) [NDM-3602] Web: fixed 2FA input on the NextDNS login pop-up (reported by @ava-by) [NWI-3925] Web: fixed display of information on pie charts when hovering over them (reported by @dimon27254) [NWI-3947] Web: fixed display of scanning status for DLNA media server (reported by @project_fcc) [NWI-3844] Web: fixed display of unsupported OPKG settings for non-USB devices (reported by @SerjPav) [NWI-3994] Web: fixed removal of the Wi-Fi client connection from the Home segment when changing SSID on Extender [NWI-3983] Web: fixed visibility of the “close” icon for pop-up notifications (reported by @AndreBA) [NWI-3946] Web: fixed whitespaces in links to knowledge base articles (reported by @AndreBA) [NWI-3929] Wi-Fi: fixed system crash caused by whitelist MAC address overflow [SYS-1253]

Release 4.3 Alpha 11: DynDNS: increased HTTP version to 1.1 in all requests (reported by @Olegas) [NDM-3628] HTTP: fixed "there are errors in config" endless loop when OpenConnect server is active (reported by @Namenloss) [NDM-3627] NTP: implemented server suspension before the time is synchronized (reported by @feoser) [NDM-3620] SSTP: implemented automatic configuration of OSC following SSL certificate [NDM-3622] TSMB: fixed compatibility with iOS 18 [NDM-3626] USB: implemented FM350 modem configuration without power-cycle (reported by @toxa_e1) [NDM-3615] Web: fixed 2FA input on the NextDNS login pop-up (reported by @ava-by) [NWI-3925] Web: fixed an error when creating an EoIP tunnel (reported by @xan) [NWI-3964] Web: fixed connection priority setting on mobile screens (reported by @spatiumstas) [NWI-3990] Web: fixed display of scanning status for DLNA media server (reported by @project_fcc) [NWI-3844] Web: fixed display of unsupported OPKG settings for non-USB devices (reported by @SerjPav) [NWI-3994] Web: fixed issues with scrollbars (reported by @dimon27254) [NWI-3962] Web: fixed removal of the Wi-Fi client connection from the Home segment when changing SSID on Extender [NWI-3983] Web: fixed spacing between tiles on the dashboard (reported by @dimon27254) [NWI-3920] Web: fixed the display of the page with legal documents (reported by @dimon27254) [NWI-3995]

Release 4.3 Alpha 10: IP: fixed status of blocked hosts with "conform" policy assigned [NDM-3607] NTCE: fixed application data inconsistency that caused issues with the Application Traffic Monitor [NDM-3602] SMS: implemented automatic deletion of messages to prevent storage from filling up [NDM-3281] Web: fixed a race condition that caused issues with loading the system settings page (reported by @Vladimir Belov) [NWI-3970] Web: fixed display of information on pie charts when hovering over them (reported by @dimon27254) [NWI-3947] Web: fixed whitespaces in links to knowledge base articles (reported by @AndreBA) [NWI-3929] Web: updated the appearance of end-user agreements [NWI-3952]

Release 4.2.4 (preview → stable): DNS: fixed waiting for a response from the upstream server polled last [SYS-1245] MWS: fixed activation of 5 GHz access point on Extenders [NDM-3565] SFP: added quirks for GPON modules on KN-1012 [SYS-1248] ODI DFP-34X-2I3 ODI DFP-34X-2IY3 SSTP: fixed server compliance with the policy bound to the interface [NDM-3563] Web: fixed "Applications not installed" status on the dashboard (reported by @dimon27254) [NWI-3798] Web: fixed autocompletion in the command line interface (reported by @dimon27254) [NWI-3791] Web: fixed display of long strings in search results (reported by @dimon27254) [NWI-3866] Web: fixed display of special usernames (reported by @MaXaoH) [NWI-3898] Web: fixed flickering when loading the Home segment page (reported by @spatiumstas) [NWI-3820] Web: fixed menu section headings (reported by @spatiumstas) [NWI-3824] Web: fixed sorting of the Mesh Wi-Fi System list by "Uptime" (reported by @Эльдар) [NWI-3815] Web: fixed tooltip display on the traffic monitor graph (reported by @FLK) [NWI-3894] Web: fixed tooltips on the Traffic Monitor page (reported by @T@rkus) [NWI-3825] Web: fixed WPA3 network selection for WISP [NWI-3937] Wi-Fi: fixed preserving the radio turned off by button after system restart [SYS-1239] Wireguard: fixed connection uptime (reported by @spatiumstas) [NDM-3567] Wireguard: fixed reconnection after disabling the local interface [NDM-3560]

Release 4.3 Alpha 9: Core: fixed errors when reading tx/rx counters on mt7621 switch ports [NDM-3592] IPv4: added support for prefix notation via “/” when importing routes from a files [NDM-3471] IPv4: added UTF-8 BOM support when importing routes from a file [NDM-3593] Web: fixed visibility of the “close” icon for pop-up notifications (reported by @AndreBA) [NWI-3946] Wi-Fi: fixed system crash caused by whitelist MAC address overflow [SYS-1253]

Release 4.3 Alpha 8: UPnP: fixed "failed to remove PCP mapping" error (reported by @YamadaHideki) [NDM-3588] Web: fixed tooltip display on the traffic monitor graph (reported by @FLK) [NWI-3894]

Release 4.3 Alpha 7: MWS: fixed activation of 5 GHz access point on Extenders [NDM-3565] Web: fixed "Applications not installed" status on the dashboard (reported by @dimon27254) [NWI-3798] Web: fixed alignment of document links on mobile screens (reported by @dimon27254) [NWI-3828] Web: fixed display of long strings in search results (reported by @dimon27254) [NWI-3866] Web: fixed display of special usernames (reported by @MaXaoH) [NWI-3898] Web: fixed menu section headings (reported by @spatiumstas) [NWI-3824] Web: fixed WPA3 network selection for WISP [NWI-3937] Web: removed "DNS server" field from IKE VPN server settings (reported by @lighting) [NWI-3899]