MuKu

Release 4.2 Beta 0: PPE: implemented dynamic table size alignment with nf_conntrack_max [NDM-3344] VPN: fixed PPP interface stalling on the backup connection after the primary connection is restored [NDM-3376] Web (beta): enabled the next-generation interface as the default [NDM-3378] Web (beta): fixed some minor issues related to application tiles (reported by @dimon27254) [NWI-3549] Web (beta): fixed unwanted visual effects when clicking on a pie chart (reported by @dimon27254) [NWI-3562] Wi-Fi: fixed display of zero channel number when WISP is connected [SYS-1171] Wi-Fi: fixed uninitialized variable causing errors in status polling and channel selection when DFS is active [SYS-1172]

Release 4.2 Alpha 17: IGMP: added a component to enable IGMP snooping on Buddy devices [NDM-3338] OpenVPN: fixed "Connection reset, restarting" error [NDM-3355] SNTP: filled in "Reference Identifier" and "Reference Timestamp" values in responses according to RFC4330 [NDM-3368] Web (beta): fixed behavior of toggles in tables (reported by @keenet07) [NWI-3524]

Release 4.2 Alpha 16: Web (beta): fixed display of "File browser" pop-up on mobile screens (reported by @dimon27254) [NWI-3534] Web (beta): fixed issues with the built-in search (reported by @dimon27254) [NWI-3547] Web (beta): fixed issues with Wi-Fi System Extender settings pop-up (reported by @dimon27254) [NWI-3536] Web (beta): fixed labeling of uninstalled applications (reported by @T@rkus) [NWI-3537] Web (beta): fixed links to knowledge base articles (reported by @dimon27254) [NWI-3265] Web (beta): fixed missing tiles on the dashboard (reported by @iggo) [NWI-3514]

Release 4.2 Alpha 15: IPsec: fixed random source port assignment for L2TP/IPsec client [NDM-3349] IPv6: fixed ULA prefix announcements (reported by @pppppppo_98) [NDM-3350] Web (beta): added frequency band selector for 5G on Mobile page (reported by @sanila82) [NWI-3426] Web (beta): fixed "Persistent keepalive" value in WireGuard settings (reported by @Denis P) [NWI-3518] Web (beta): fixed "Show only installed apps" button on mobile screens (reported by @T@rkus) [NWI-3535] Web (beta): fixed behavior of "Test" button on "Cable Diagnostics" page (reported by @dimon27254) [NWI-3533] Web (beta): fixed display of traffic monitor for selected device (reported by @dimon27254) [NWI-3522] Web (beta): fixed mask changing for IP-encapsulated tunnels (reported by @D1abl093) [NWI-3511] Web (beta): fixed reset of speed limit for unregistered devices (reported by @dimon27254) [NWI-3521] Web (beta): fixed saving of “Access to Web applications” settings (reported by @AndyFM) [NWI-3519] Web (beta): fixed validation of IP addresses to disallow addresses occupied by Extenders (reported by @dimon27254) [NWI-3520]

Release 4.2 Alpha 14: MWS: fixed selection of the best node for wireless backhaul connection [SYS-1161] Web (beta): implemented telephony settings; completed all pages of the new Web interface [NWI-3356]

Release 4.1.7 (stable): IPv6: fixed support for multiple IP policies [NDM-3289] MWS: fixed "Network::Interface::Mtk::BandSteering: failed to lookup service for segment" error occurring on extenders [NDM-3325] OpenVPN: fixed spurious reconnects of OpenVPN client [NDM-3301] SSH: fixed SFTP connections blocking by lockout-policy [NDM-3263] Wi-Fi: fixed 5 GHz channel width degradation on Buddy 6 [SYS-1151]

Release 4.2 Alpha 13: SSH: fixed SFTP connections blocking by lockout-policy [NDM-3263] Web (beta): fixed display of "Long pressing" Wi-Fi button handler (reported by @dimon27254) [NWI-3500] Web (beta): fixed display of Internet safety on the Internet tile (reported by @bigpu) [NWI-3467] Web (beta): fixed PSK key validation for IPsec connection [NWI-3504] Web (beta): fixed reloading of "USB Devices and Printers" tile after moving it (reported by @dimon27254) [NWI-3476] Web (beta): fixed saving configuration of "Network Ports" (reported by @101) [NWI-3488]

Release 4.2 Alpha 12: IPsec: fixed remote access via IPsec/IKE VPN connection to a host directly mapped to a WAN IP alias [NDM-3310] MWS: fixed "Network::Interface::Mtk::BandSteering: failed to lookup service for segment" error occurring on Extenders [NDM-3325] MWS: fixed regression in detecting Extender's backhaul connection status when access points are turned off [NDM-3333] MWS: implemented assignment of Extender ports to additional segments [NDM-3162]: mws member {member} port {port} [no] access {interface} — configure {port} as an access port for a segment; mws member {member} port {port} [no] disable — disable port. PPE: fixed IPv6 traffic accounting using the hardware packet engine [NDM-3234] PPE: implemented traffic acceleration when TTL is adjusted manually (reported by @r13) [SYS-1157] Web (beta): fixed bug in "Roaming for wireless devices" settings (reported by @zzaal) [NWI-3462] Web (beta): fixed color of selected application tile in dark theme (reported by @dimon27254) [NWI-3452] Web (beta): fixed deletion of a segment with enabled Captive portal after system restart (reported by @agentOleg) [NWI-3479]

Release 4.2 Alpha 11: Core: fixed "ppe" settings format (reported by @keenet07) [NDM-3311] DNS: fixed reset of static IP settings after device reboot [NDM-3303] DNS: improved robustness of the DoT/DoH cache [NDM-3320] DynDNS: fixed validation of domain names (reported by @Михаил Касванд) [NDM-3309] Mobile: fixed "interface mobile pdp" setting (reported by @k19olegh68) [NDM-3312] OpenSSL: switched to 3.0.13 [SYS-1152] VLAN: implemented mapping of NTCE priority to 802.1p PCP for egress packets (reported by @Gim12) [NDM-3318]: interface {name} vlan qos egress map {priority} {pcp} priority — NTCE priority queue number. If the value is 0, all outgoing packets will receive the given PCP; pcp — 802.1p PCP value. Web (beta): improved behavior of toggles in tables (reported by @keenet07) [NWI-3465] Wi-Fi: fixed 5 GHz channel width degradation on Buddy 6 [SYS-1151] ZeroTier: added support for DNS and global routes (reported by @drno88) [NDM-3319]

Release 4.2 Alpha 10: Core: fixed inversion of certain boolean settings (reported by @dimon27254) [NDM-3297] Core: fixed returning "null" for undefined boolean settings (reported by @agentOleg) [NDM-3298] OpenVPN: fixed spurious reconnects of OpenVPN client [NDM-3301] SNMP: fixed ifAdminStatus monitoring for Ethernet ports [NDM-3296] USB: fixed "interface usb apn" setting (reported by @Grigoriy) [NDM-3307] VPN: implemented adherence to the policy of the bound interface [NDM-3295] Web (beta): added OpenConnect to the Applications page [NWI-3407] Web (beta): fixed "Server address" input validation for OpenConnect (reported by @snark) [NWI-3463] Web (beta): fixed display of connections that use IPv4 over IPv6 [NWI-3472] Web (beta): fixed display of the backup peer address for IPsec connections (reported by @feoser) [NWI-3464]

Release 4.1.6 (stable): HTTP: implemented support for direct access to KeenDNS from browsers with TLS 1.3 hybridized Kyber enabled (reported by @dimon27254) [NDM-3284]

Release 4.2 Alpha 9: Core: fixed password argument parser (reported by @ant76) [NDM-3293]

Release 4.2 Alpha 8: HTTP: implemented support for direct access to KeenDNS from browsers with TLS 1.3 hybridized Kyber enabled (reported by @dimon27254) [NDM-3284] VPN: implemented IP address assignment coordinated with the DHCP pool of the bound home network [NDM-3250] Web (beta): added line break for long modem firmware version in the signal levels pop-up (reported by @dimon27254) [NWI-3422] Web (beta): added new "Segment default" policy to host policies [NWI-3415] Web (beta): fixed color of the "Status LED" symbol on the login page (reported by @dimon27254) [NWI-3435] Web (beta): fixed password reset when changing user account settings (reported by @r13) [NWI-3438] Web (beta): fixed sorting in the "Mesh Wi-Fi system" table (reported by @agentOleg) [NWI-3473] Web (beta): removed the "USB Devices" section for models without USB ports (reported by @dimon27254) [NWI-3436]

Release 4.2 Alpha 7: Hotspot: fixed "system failed [0xcffd0042]" error during auto-registration (reported by @dimon27254) [NDM-3275] NTCE: fixed "duplicate key" error that occurs when the IntelliQoS page is opened (reported by @dimon27254) [NDM-3276]

Release 4.1.5 (preview): IPsec: fixed a bug that caused L2TP/IPsec server clients to have unrestricted access to the home network [NDM-3247] IPsec: fixed occasional disconnects of IKEv2 tunnels [NDM-3059] IPsec: fixed spurious EoIP/IPsec connections after device restart [NDM-2518] IPv6: fixed accidental reloading of NTCE engine on processing of certain IPv6 packets (reported by @dimon27254) [NDM-3235] PingCheck: fixed hostname resolution in accordance with DoT/DoH domain restrictions (reported by @dimon27254) [NDM-3273] PingCheck: fixed "upstream is very slow to respond" error [NDM-3244] USB: added support for Quectel RM500U-GL modem [NDM-3203] Wi-Fi: fixed setting of band-steering preference when upgrading from earlier stable versions [NDM-3241] Wireguard: fixed route to remote endpoint after device restart [NDM-3223]

Release 4.2 Alpha 6: CIFS: improved memory usage on low-end devices (reported by @Кинетиковод) [NDM-2927] Hotspot: added MAC address and registration time to the name of devices registered automatically [NDM-3253] HTTP: fixed access to proxies configured as "security-level private" from the home network [NDM-3264] HTTP: fixed X-Real-IP header filling when accessing proxy via KeenDNS [NDM-2214] IPsec: added support for SHA512 HMAC on IKE Phase II [NDM-3269]: crypto ipsec transform-set {name} hmac esp-sha512-hmac IPsec: fixed occasional disconnects of IKEv2 tunnels [NDM-3059] IPv6: fixed accidental reloading of NTCE engine on processing of certain IPv6 packets (reported by @dimon27254) [NDM-3235] IPv6: improved host detection via EchoReq (reported by @tormozillo) [NDM-3265] PingCheck: fixed hostname resolution in accordance with DoT/DoH domain restrictions (reported by @dimon27254) [NDM-3273] USB: added SMS support for Fibocom FM350, Quectel RM500U [NDM-3267] USB: added support for Quectel RM500U-GL modem [NDM-3203] Web (beta): added support for OpenConnect to the "Other Connections" page [NWI-3406] Web (beta): fixed blocking of the "Add Server" button when setting up DNS (reported by @keenet07) [NWI-3418] Web (beta): fixed group operations on the "Connection Policies" page (reported by @AndreBA) [NWI-3404] Web (beta): fixed indents in the "Client Lists" settings popup (reported by @dimon27254) [NWI-3403] Web (beta): fixed Internet connection toggles on the dashboard (reported by @T@rkus) [NWI-3417] Web (beta): fixed rule selection on the "Firewall" page (reported by @dimon27254) [NWI-3419] Web (beta): fixed visual bugs in the dark theme in the "USB Devices" section [NWI-3375] Web (beta): implemented "Call History" page [NWI-3398] Wi-Fi: fixed setting of band-steering preference when upgrading from earlier stable versions [NDM-3241]

Release 4.2 Alpha 5: IPsec: fixed spurious EoIP/IPsec connections after device restart [NDM-2518] IPv6: fixed adding static routes immediately after device restart and during VPN connection (reported by @mrGhotius) [NDM-3248] PingCheck: fixed "upstream is very slow to respond" error [NDM-3244] SSTP, OpenConnect: implemented "camouflage" mode (reported by @snark) [NDM-3257]: oc-server camouflage sstp-server camouflage UPnP: fixed adding rules for hosts that are assigned to a multipath policy [NDM-3251] Web (beta): added support for Extender mode [NWI-1861] Web (beta): fixed "statusLed" symbol on the Login page (reported by @dimon27254) [NWI-3363] Web (beta): fixed SMS page display in dark theme (reported by @dimon27254) [NWI-3324] Web (beta): fixed the height of the search query input (reported by @dimon27254) [NWI-3328] Wireguard: fixed route to remote endpoint after device restart [NDM-3223]

Release 4.2 Alpha 4: DNS: enabled HTTP/3 support for DoH (reported by @theGorgeous) [NDM-3229] Hotspot: fixed interception of DNS queries in segments (reported by @ValdikSS) [NDM-3228] IPsec: implemented aggressive IKEv1 mode for compatibility with FritzBox L2TP/IPsec server [NDM-3227]: interface {name} ipsec aggressive Web (beta): added arrows when multiple disc partitions exist in the USB Devices section (reported by @dimon27254) [NWI-3369] Web (beta): fixed content of the "More Information" block on the "Client Lists" page (reported by @dimon27254) [NWI-3402] Web (beta): fixed display of "Save"/"Cancel" buttons when changing Wi-Fi settings (reported by @dimon27254) [NWI-3392] Web (beta): fixed display of shadows in the dark theme (reported by @dimon27254) [NWI-3389] Web (beta): fixed flashing when tapping on folders in the File Manager on mobile devices [NWI-3371] Web (beta): fixed some issues on the dashboard (reported by @dimon27254) [NWI-3323] Web (beta): hidden IPv6 settings when IPv6 component is uninstalled (reported by @dimon27254) [NWI-3384] Web (beta): improved display of signal metrics on the Mobile page (reported by @dimon27254) [NWI-3383] Web (beta): made English names of firmware components used by default (reported by @dimon27254) [NWI-3364]

Release 4.1.4 (preview): DNS: increased the maximum response size for recursive resolution of DoT/DoH servers (reported by @Alexey104) [NDM-3226] OpenVPN: fixed VPN client startup failure with "Error opening configuration file" message [NDM-3217] USB: added support for Yota D071C modem [NDM-3218] Wi-Fi: implemented a workaround to avoid crashing of certain Realtek Wi-Fi drivers under Windows when passing non-PMF authentication [SYS-1131]

Release 4.2 Alpha 3: IPsec: fixed access to the home network when "ip static" rules are configured on WAN IP aliases [NDM-3110] UPnP: fixed priority of "ip static" rules over UPnP rules [NDM-3078] USB: added support for Yota D071C modem [NDM-3218] VPN: implemented OpenConnect client as a separate component [NDM-3207] Web (beta): fixed appearance of the Ethernet ports in Firefox (reported by @Rootdiv) [NWI-3357] Web (beta): fixed appearance of tooltips in the Wi-Fi Monitor (reported by @dimon27254) [NWI-3379] Wi-Fi: implemented a workaround to avoid crashing of certain Realtek Wi-Fi drivers under Windows when passing non-PMF authentication [SYS-1131] ZeroTier: fixed binding to the WAN address and inbound access to the service port (reported by @gaaronk) [NDM-3216]

Release 4.1.3 (stable): DNS: fixed "Dns::Recursor: system failed [0xcffd0157]" error [NDM-3188] DNS: fixed resolution of Wireguard remote endpoints when the connection is restarted (reported by @dimon27254) [NDM-3189] DNS: fixed resolving DoT/DoH domain addresses used in public DNS filter presets [NDM-3134] DNS: fixed SSTP VPN Server availability issues when the Internet connection ignores DNS servers provided by ISP [NDM-3179] DNS: fixed usage of DNS servers provided by ISP on a backup connection (reported by @dimon27254) [NDM-3186] OpenVPN: fixed client/server interoperability when the "block-outside-dns" option is ignored on the client [NDM-3190] PingCheck: improved checker operation when using DoT/DoH [NDM-3178] USB: added support for Fibocom FM350-GL modem [NDM-3100] USB: added support for Signalinks M806A and D523E modems [NDM-3185]

Release 4.2 Alpha 2: HTTP: added read/send timeout configuration for proxies [NDM-3157]: ip http proxy {name} timeout {timeout} IPsec: fixed iOS L2TP/IPsec client disconnections under workload [NDM-3180] Web (beta): added missing translations (reported by @dimon27254) [NWI-3361] Web (beta): fixed appearance of HTML code as text (reported by @dimon27254) [NWI-3359] Web (beta): fixed bugs occuring when the "Cloud-based content filtering and ad blocking" component is uninstalled (reported by @dimon27254) [NWI-3360] Web (beta): fixed display of WISP connection details on the dashboard (reported by @dimon27254) [NWI-3339] Web (beta): fixed notifications display in dark theme (reported by @dimon27254) [NWI-3358] Wireguard: added Advanced Security Configuration parameters (requested by @UwU) [NDM-3202]: interface {name} wireguard asc {jc} {jmin} {jmax} {s1} {s2} {h1} {h2} {h3} {h4}

Release 4.2 Alpha 1: CLI: implemented "grep" filter for command output [NDM-3075]: command … | grep [-A n] [-B n] [-C n] {pattern} -A — number of lines to show after match -B — number of lines to show before match -C — nesting depth of XML context DNAT: fixed port forwarding issues after Hotspot code refactoring (reported by @flybustier) [NDM-3127, NDM-3171] DNS: fixed CloudFlare filter operation on networks without IPv6 support [NDM-3163] Hotspot: implemented automatic host registration in the Home segment (enabled by default) [NDM-3101]: ip hotspot auto-register disable — disable automatic registration Hotspot: implemented segment-default policy for hosts (enabled by default) [NDM-2237]: ip hotspot host conform HTTP: implemented options to preserve Referer and Origin headers when proxying (reported by @Of Course I Still Love You) [NDM-3089]: ip http proxy {name} preserve-referer ip http proxy {name} preserve-origin IPsec: enabled MOBIKE extension (RFC 4555) for Virtual IP IKEv2 client and server [NDM-3164] NAT: fixed dropping of currently active sessions when "ip static" rules are disabled [NDM-3067] Netflow: implemented support for IPv6 sessions [NDM-3109] NTCE: implemented application filtering [NDM-3069]: ntce filter profile {name} application {application} — add application to the profile ntce filter profile {name} group {group} — add application group to the profile ntce filter profile {name} type {type} — set profile type, which can be “permit” or “deny” ntce filter profile {name} description {description} — set profile description ntce filter profile {name} schedule {schedule} — set profile schedule ntce filter assign host {host} {profile} — assign profile to a registered host (MAC address) ntce filter assign interface {interface} {profile} — assign profile to an interface SIP: implemented filtering of incoming calls [VOX-271]: nvox sip {id} whitelist {digitmap} nvox sip {id} blacklist {digitmap} nvox sip {id} enable-whitelist nvox sip {id} enable-blacklist show nvox sip {id} whitelist show nvox sip {id} blacklist SIP: implemented phonebook support [VOX-326]: nvox phonebook import {filename} {mode} — import contacts in the vCard format filename — *.vcf filename; mode — import mode: replace, overwrite, extend, or duplicate. nvox phonebook delete — delete all contacts from the phonebook nvox sip {id} enable-whitelist-phonebook — enable phonebook as a whitelist filter for incoming calls show nvox phonebook — display all phonebook records VPN: implemented OpenConnect VPN server [NDM-3141]: oc-server interface {interface} — bind OpenConnect server to an interface oc-server pool-range {begin} {size} — set OpenConnect address pool oc-server static-ip {name} {address} — set static IP address for a user oc-server mtu {mtu} — set OpenConnect server MTU oc-server multi-login — enable multiple connections with the same login ip nat oc — enable NAT for OpenConnect clients service oc-server — enable OpenConnect service Web (beta): added a warning about possible connection loss when changing Wi-Fi settings (reported by @dimon27254) [NWI-3249] Web (beta): added links to Extenders on the "Client Lists" page (reported by @dimon27254) [NWI-3189] Web (beta): displayed information about the active sessions count on the dashboard (reported by @dimon27254) [NWI-3326] Web (beta): fixed "Air scanning" dialog on the "Mobile Broadband Internet Connections" page (reported by @dimon27254) [NWI-3193] Web (beta): fixed alignment of input field names (reported by @eda100) [NWI-3239] Web (beta): fixed components list filtering in the System settings (reported by @dimon27254) [NWI-3311] Web (beta): fixed display of "Change Operating Mode" block in the dark theme (reported by @dimon27254) [NWI-3170] Web (beta): fixed display of ACL rules on the Firewall page (reported by @keenet07) [NWI-3153] Web (beta): fixed display of empty band group in "Mobile Broadband Internet Connection" settings (reported by @dimon27254) [NWI-3194] Web (beta): fixed display of a large list of knowledge base articles (reported by @dimon27254) [NWI-3250] Web (beta): fixed display of the chart on the Traffic monitor page (reported by @dimon27254) [NWI-3254] Web (beta): fixed display of wired connections in the MWS table (reported by @dimon27254) [NWI-3214] Web (beta): fixed filters in the MWS transition log (reported by @dimon27254) [NWI-3212] Web (beta): fixed firewall rule editor (reported by @dimon27254) [NWI-3190] Web (beta): fixed header alignment on the login page on mobile devices (reported by @dimon27254) [NWI-3240] Web (beta): fixed minor bugs on the "Mobile Broadband Internet Connections" page (reported by @dimon27254) [NWI-3297] Web (beta): fixed minor issues on the Application traffic analyzer page (reported by @dimon27254) [NWI-3163] Web (beta): fixed saving the Data compression (CCP) checkbox value when PPTP connection is configured (reported by @T@rkus) [NWI-3296] Web (beta): fixed style of select boxes on mobile devices (reported by @dimon27254) [NWI-3192] Web (beta): fixed subnet validation in the firewall rule editor (reported by @dimon27254) [NWI-3213] Web (beta): fixed visibility of Save/Cancel buttons in the System Component Options page (reported by @dimon27254) [NWI-3191] Web (beta): fixed welcome pop-up message on mobile devices (reported by @dimon27254) [NWI-3312] Web (beta): removed text shortening in pop-up dialogs on mobile devices (reported by @dimon27254) [NWI-3181] Web (beta): removed the information "via" which node a device is connected when the "mws" component is not installed (reported by @dimon27254) [NWI-3334] Web (beta): removed the unnecessary horizontal scroll from the block with network ports on mobile devices (reported by @dimon27254) [NWI-3169] Web (beta): updated "Applications" card on the dashboard (reported by @keenet07) [NWI-3188]

To keep track of the experimental branch, subscribe to the Changelog 4.2

4.2 is a stable branch, see also changelog 4.1. Supported models: Giga (KN-1010) Hero (KN-1011) Start/Starter (KN-1110, KN-1111, KN-1112) Lite (KN-1310) Omni (KN-1410) City (KN-1510) Air/Explorer (KN-1610, KN-1613) Extra/Carrier (KN-1710, KN-1711, KN-1713) Ultra/Titan (KN-1810, KN-1811) Viva/Skipper (KN-1910, KN-1913) Omni DSL (KN-2011, KN-2012) Extra DSL/Carrier DSL/Skipper DSL (KN-2111, KN-2112) Runner 4G (KN-2210, KN-2211, KN-2212) Hero 4G (KN-2310, KN-2311) Hero DSL (KN-2410) Peak DSL (KN-2510) Giant (KN-2610) Peak (KN-2710) Orbiter Pro (KN-2810) Skipper 4G (KN-2910) Speedster (KN-3010, KN-3012) Buddy 4 (KN-3210, KN-3211) Buddy 5 (KN-3311) Buddy 6 (KN-3411) Voyager Pro (KN-3510) Hopper DSL (KN-3610) Sprinter (KN-3710) Hopper (KN-3810) Explorer 4G (KN-4910)