MuKu

Release 4.2 Alpha 7: Hotspot: fixed "system failed [0xcffd0042]" error during auto-registration (reported by @dimon27254) [NDM-3275] NTCE: fixed "duplicate key" error that occurs when the IntelliQoS page is opened (reported by @dimon27254) [NDM-3276]

Release 4.1.5 (preview): IPsec: fixed a bug that caused L2TP/IPsec server clients to have unrestricted access to the home network [NDM-3247] IPsec: fixed occasional disconnects of IKEv2 tunnels [NDM-3059] IPsec: fixed spurious EoIP/IPsec connections after device restart [NDM-2518] IPv6: fixed accidental reloading of NTCE engine on processing of certain IPv6 packets (reported by @dimon27254) [NDM-3235] PingCheck: fixed hostname resolution in accordance with DoT/DoH domain restrictions (reported by @dimon27254) [NDM-3273] PingCheck: fixed "upstream is very slow to respond" error [NDM-3244] USB: added support for Quectel RM500U-GL modem [NDM-3203] Wi-Fi: fixed setting of band-steering preference when upgrading from earlier stable versions [NDM-3241] Wireguard: fixed route to remote endpoint after device restart [NDM-3223]

Release 4.2 Alpha 6: CIFS: improved memory usage on low-end devices (reported by @Кинетиковод) [NDM-2927] Hotspot: added MAC address and registration time to the name of devices registered automatically [NDM-3253] HTTP: fixed access to proxies configured as "security-level private" from the home network [NDM-3264] HTTP: fixed X-Real-IP header filling when accessing proxy via KeenDNS [NDM-2214] IPsec: added support for SHA512 HMAC on IKE Phase II [NDM-3269]: crypto ipsec transform-set {name} hmac esp-sha512-hmac IPsec: fixed occasional disconnects of IKEv2 tunnels [NDM-3059] IPv6: fixed accidental reloading of NTCE engine on processing of certain IPv6 packets (reported by @dimon27254) [NDM-3235] IPv6: improved host detection via EchoReq (reported by @tormozillo) [NDM-3265] PingCheck: fixed hostname resolution in accordance with DoT/DoH domain restrictions (reported by @dimon27254) [NDM-3273] USB: added SMS support for Fibocom FM350, Quectel RM500U [NDM-3267] USB: added support for Quectel RM500U-GL modem [NDM-3203] Web (beta): added support for OpenConnect to the "Other Connections" page [NWI-3406] Web (beta): fixed blocking of the "Add Server" button when setting up DNS (reported by @keenet07) [NWI-3418] Web (beta): fixed group operations on the "Connection Policies" page (reported by @AndreBA) [NWI-3404] Web (beta): fixed indents in the "Client Lists" settings popup (reported by @dimon27254) [NWI-3403] Web (beta): fixed Internet connection toggles on the dashboard (reported by @T@rkus) [NWI-3417] Web (beta): fixed rule selection on the "Firewall" page (reported by @dimon27254) [NWI-3419] Web (beta): fixed visual bugs in the dark theme in the "USB Devices" section [NWI-3375] Web (beta): implemented "Call History" page [NWI-3398] Wi-Fi: fixed setting of band-steering preference when upgrading from earlier stable versions [NDM-3241]

Release 4.2 Alpha 5: IPsec: fixed spurious EoIP/IPsec connections after device restart [NDM-2518] IPv6: fixed adding static routes immediately after device restart and during VPN connection (reported by @mrGhotius) [NDM-3248] PingCheck: fixed "upstream is very slow to respond" error [NDM-3244] SSTP, OpenConnect: implemented "camouflage" mode (reported by @snark) [NDM-3257]: oc-server camouflage sstp-server camouflage UPnP: fixed adding rules for hosts that are assigned to a multipath policy [NDM-3251] Web (beta): added support for Extender mode [NWI-1861] Web (beta): fixed "statusLed" symbol on the Login page (reported by @dimon27254) [NWI-3363] Web (beta): fixed SMS page display in dark theme (reported by @dimon27254) [NWI-3324] Web (beta): fixed the height of the search query input (reported by @dimon27254) [NWI-3328] Wireguard: fixed route to remote endpoint after device restart [NDM-3223]

Release 4.2 Alpha 4: DNS: enabled HTTP/3 support for DoH (reported by @theGorgeous) [NDM-3229] Hotspot: fixed interception of DNS queries in segments (reported by @ValdikSS) [NDM-3228] IPsec: implemented aggressive IKEv1 mode for compatibility with FritzBox L2TP/IPsec server [NDM-3227]: interface {name} ipsec aggressive Web (beta): added arrows when multiple disc partitions exist in the USB Devices section (reported by @dimon27254) [NWI-3369] Web (beta): fixed content of the "More Information" block on the "Client Lists" page (reported by @dimon27254) [NWI-3402] Web (beta): fixed display of "Save"/"Cancel" buttons when changing Wi-Fi settings (reported by @dimon27254) [NWI-3392] Web (beta): fixed display of shadows in the dark theme (reported by @dimon27254) [NWI-3389] Web (beta): fixed flashing when tapping on folders in the File Manager on mobile devices [NWI-3371] Web (beta): fixed some issues on the dashboard (reported by @dimon27254) [NWI-3323] Web (beta): hidden IPv6 settings when IPv6 component is uninstalled (reported by @dimon27254) [NWI-3384] Web (beta): improved display of signal metrics on the Mobile page (reported by @dimon27254) [NWI-3383] Web (beta): made English names of firmware components used by default (reported by @dimon27254) [NWI-3364]

Release 4.1.4 (preview): DNS: increased the maximum response size for recursive resolution of DoT/DoH servers (reported by @Alexey104) [NDM-3226] OpenVPN: fixed VPN client startup failure with "Error opening configuration file" message [NDM-3217] USB: added support for Yota D071C modem [NDM-3218] Wi-Fi: implemented a workaround to avoid crashing of certain Realtek Wi-Fi drivers under Windows when passing non-PMF authentication [SYS-1131]

Release 4.2 Alpha 3: IPsec: fixed access to the home network when "ip static" rules are configured on WAN IP aliases [NDM-3110] UPnP: fixed priority of "ip static" rules over UPnP rules [NDM-3078] USB: added support for Yota D071C modem [NDM-3218] VPN: implemented OpenConnect client as a separate component [NDM-3207] Web (beta): fixed appearance of the Ethernet ports in Firefox (reported by @Rootdiv) [NWI-3357] Web (beta): fixed appearance of tooltips in the Wi-Fi Monitor (reported by @dimon27254) [NWI-3379] Wi-Fi: implemented a workaround to avoid crashing of certain Realtek Wi-Fi drivers under Windows when passing non-PMF authentication [SYS-1131] ZeroTier: fixed binding to the WAN address and inbound access to the service port (reported by @gaaronk) [NDM-3216]

Release 4.1.3 (stable): DNS: fixed "Dns::Recursor: system failed [0xcffd0157]" error [NDM-3188] DNS: fixed resolution of Wireguard remote endpoints when the connection is restarted (reported by @dimon27254) [NDM-3189] DNS: fixed resolving DoT/DoH domain addresses used in public DNS filter presets [NDM-3134] DNS: fixed SSTP VPN Server availability issues when the Internet connection ignores DNS servers provided by ISP [NDM-3179] DNS: fixed usage of DNS servers provided by ISP on a backup connection (reported by @dimon27254) [NDM-3186] OpenVPN: fixed client/server interoperability when the "block-outside-dns" option is ignored on the client [NDM-3190] PingCheck: improved checker operation when using DoT/DoH [NDM-3178] USB: added support for Fibocom FM350-GL modem [NDM-3100] USB: added support for Signalinks M806A and D523E modems [NDM-3185]

Release 4.2 Alpha 2: HTTP: added read/send timeout configuration for proxies [NDM-3157]: ip http proxy {name} timeout {timeout} IPsec: fixed iOS L2TP/IPsec client disconnections under workload [NDM-3180] Web (beta): added missing translations (reported by @dimon27254) [NWI-3361] Web (beta): fixed appearance of HTML code as text (reported by @dimon27254) [NWI-3359] Web (beta): fixed bugs occuring when the "Cloud-based content filtering and ad blocking" component is uninstalled (reported by @dimon27254) [NWI-3360] Web (beta): fixed display of WISP connection details on the dashboard (reported by @dimon27254) [NWI-3339] Web (beta): fixed notifications display in dark theme (reported by @dimon27254) [NWI-3358] Wireguard: added Advanced Security Configuration parameters (requested by @UwU) [NDM-3202]: interface {name} wireguard asc {jc} {jmin} {jmax} {s1} {s2} {h1} {h2} {h3} {h4}

Release 4.2 Alpha 1: CLI: implemented "grep" filter for command output [NDM-3075]: command … | grep [-A n] [-B n] [-C n] {pattern} -A — number of lines to show after match -B — number of lines to show before match -C — nesting depth of XML context DNAT: fixed port forwarding issues after Hotspot code refactoring (reported by @flybustier) [NDM-3127, NDM-3171] DNS: fixed CloudFlare filter operation on networks without IPv6 support [NDM-3163] Hotspot: implemented automatic host registration in the Home segment (enabled by default) [NDM-3101]: ip hotspot auto-register disable — disable automatic registration Hotspot: implemented segment-default policy for hosts (enabled by default) [NDM-2237]: ip hotspot host conform HTTP: implemented options to preserve Referer and Origin headers when proxying (reported by @Of Course I Still Love You) [NDM-3089]: ip http proxy {name} preserve-referer ip http proxy {name} preserve-origin IPsec: enabled MOBIKE extension (RFC 4555) for Virtual IP IKEv2 client and server [NDM-3164] NAT: fixed dropping of currently active sessions when "ip static" rules are disabled [NDM-3067] Netflow: implemented support for IPv6 sessions [NDM-3109] NTCE: implemented application filtering [NDM-3069]: ntce filter profile {name} application {application} — add application to the profile ntce filter profile {name} group {group} — add application group to the profile ntce filter profile {name} type {type} — set profile type, which can be “permit” or “deny” ntce filter profile {name} description {description} — set profile description ntce filter profile {name} schedule {schedule} — set profile schedule ntce filter assign host {host} {profile} — assign profile to a registered host (MAC address) ntce filter assign interface {interface} {profile} — assign profile to an interface SIP: implemented filtering of incoming calls [VOX-271]: nvox sip {id} whitelist {digitmap} nvox sip {id} blacklist {digitmap} nvox sip {id} enable-whitelist nvox sip {id} enable-blacklist show nvox sip {id} whitelist show nvox sip {id} blacklist SIP: implemented phonebook support [VOX-326]: nvox phonebook import {filename} {mode} — import contacts in the vCard format filename — *.vcf filename; mode — import mode: replace, overwrite, extend, or duplicate. nvox phonebook delete — delete all contacts from the phonebook nvox sip {id} enable-whitelist-phonebook — enable phonebook as a whitelist filter for incoming calls show nvox phonebook — display all phonebook records VPN: implemented OpenConnect VPN server [NDM-3141]: oc-server interface {interface} — bind OpenConnect server to an interface oc-server pool-range {begin} {size} — set OpenConnect address pool oc-server static-ip {name} {address} — set static IP address for a user oc-server mtu {mtu} — set OpenConnect server MTU oc-server multi-login — enable multiple connections with the same login ip nat oc — enable NAT for OpenConnect clients service oc-server — enable OpenConnect service Web (beta): added a warning about possible connection loss when changing Wi-Fi settings (reported by @dimon27254) [NWI-3249] Web (beta): added links to Extenders on the "Client Lists" page (reported by @dimon27254) [NWI-3189] Web (beta): displayed information about the active sessions count on the dashboard (reported by @dimon27254) [NWI-3326] Web (beta): fixed "Air scanning" dialog on the "Mobile Broadband Internet Connections" page (reported by @dimon27254) [NWI-3193] Web (beta): fixed alignment of input field names (reported by @eda100) [NWI-3239] Web (beta): fixed components list filtering in the System settings (reported by @dimon27254) [NWI-3311] Web (beta): fixed display of "Change Operating Mode" block in the dark theme (reported by @dimon27254) [NWI-3170] Web (beta): fixed display of ACL rules on the Firewall page (reported by @keenet07) [NWI-3153] Web (beta): fixed display of empty band group in "Mobile Broadband Internet Connection" settings (reported by @dimon27254) [NWI-3194] Web (beta): fixed display of a large list of knowledge base articles (reported by @dimon27254) [NWI-3250] Web (beta): fixed display of the chart on the Traffic monitor page (reported by @dimon27254) [NWI-3254] Web (beta): fixed display of wired connections in the MWS table (reported by @dimon27254) [NWI-3214] Web (beta): fixed filters in the MWS transition log (reported by @dimon27254) [NWI-3212] Web (beta): fixed firewall rule editor (reported by @dimon27254) [NWI-3190] Web (beta): fixed header alignment on the login page on mobile devices (reported by @dimon27254) [NWI-3240] Web (beta): fixed minor bugs on the "Mobile Broadband Internet Connections" page (reported by @dimon27254) [NWI-3297] Web (beta): fixed minor issues on the Application traffic analyzer page (reported by @dimon27254) [NWI-3163] Web (beta): fixed saving the Data compression (CCP) checkbox value when PPTP connection is configured (reported by @T@rkus) [NWI-3296] Web (beta): fixed style of select boxes on mobile devices (reported by @dimon27254) [NWI-3192] Web (beta): fixed subnet validation in the firewall rule editor (reported by @dimon27254) [NWI-3213] Web (beta): fixed visibility of Save/Cancel buttons in the System Component Options page (reported by @dimon27254) [NWI-3191] Web (beta): fixed welcome pop-up message on mobile devices (reported by @dimon27254) [NWI-3312] Web (beta): removed text shortening in pop-up dialogs on mobile devices (reported by @dimon27254) [NWI-3181] Web (beta): removed the information "via" which node a device is connected when the "mws" component is not installed (reported by @dimon27254) [NWI-3334] Web (beta): removed the unnecessary horizontal scroll from the block with network ports on mobile devices (reported by @dimon27254) [NWI-3169] Web (beta): updated "Applications" card on the dashboard (reported by @keenet07) [NWI-3188]

To keep track of the experimental branch, subscribe to the Changelog 4.2

4.2 is a stable branch, see also changelog 4.1. Supported models: Giga (KN-1010) Hero (KN-1011) Start/Starter (KN-1110, KN-1111, KN-1112) Lite (KN-1310) Omni (KN-1410) City (KN-1510) Air/Explorer (KN-1610, KN-1613) Extra/Carrier (KN-1710, KN-1711, KN-1713) Ultra/Titan (KN-1810, KN-1811) Viva/Skipper (KN-1910, KN-1913) Omni DSL (KN-2011, KN-2012) Extra DSL/Carrier DSL/Skipper DSL (KN-2111, KN-2112) Runner 4G (KN-2210, KN-2211, KN-2212) Hero 4G (KN-2310, KN-2311) Hero DSL (KN-2410) Peak DSL (KN-2510) Giant (KN-2610) Peak (KN-2710) Orbiter Pro (KN-2810) Skipper 4G (KN-2910) Speedster (KN-3010, KN-3012) Buddy 4 (KN-3210, KN-3211) Buddy 5 (KN-3311) Buddy 6 (KN-3411) Voyager Pro (KN-3510) Hopper DSL (KN-3610) Sprinter (KN-3710) Hopper (KN-3810) Explorer 4G (KN-4910)

Release 4.1.2 (stable): LTE: implemented restart of L860-GL and similar modems by network connection timeout (reported by @Alexander) [NDM-2980] PingCheck: fixed connection checking through the recursive name resolution [NDM-3086] Web: added Finnish language support [SYS-1114]

Release 4.1.1 (preview): traceroute: fixed sending packets from a specified TCP/UDP port [NDM-3138] Wi-Fi: fix FT for segments with different SSIDs [NDM-2917]

Release 4.1.0 (preview): HTTP: fixed compatibility issue connecting Obsidian and Joplin clients to the WebDAV server (reported by @ツЛешик) [NDM-2213] HTTP: fixed redundant copying of temporary file during WebDAV upload to VFAT and NTFS partitions [NDM-2089] Wi-Fi: fixed duplicate RRM events in the system log when switching radio channels on MWS extenders [SYS-1098]

Release 4.1 Beta 4 (preview): Core: updated timezone for Kazakhstan to UTC+5 [NDM-3147] Hotspot: fixed short-term traffic leakage for hosts with denied access to the Internet [NDM-3127] IPv4: increased the maximum number of IP aliases to 250 [NDM-3063] IPv6: implemented DHCPv6 client prefix delegation hint [NDM-3076]: interface {name} ipv6 dhcp client pd hint {prefix} NTCE: fixed "ntce-pace2: unable to proceed with data, exit" error [NDM-3115] NTCE: fixed DNS-proxy crash when mirroring TCP queries [SYS-1099] NTCE: fixed rate limiting for IntelliQoS [NDM-3104] OpenSSL: updated to 3.1.5 [SYS-1097]: CVE-2023-5678 CVE-2024-0727 Proxy: fixed running of multiple proxy interfaces at the same time [NDM-3122] Wi-Fi: fixed "wind: failed to decrypt message" error (reported by @ForestS) [SYS-1084] Wi-Fi: fixed resetting of Band Steering mode to None [NDM-3126]

Release 4.1 Beta 3 (preview): Wi-Fi: fixed incorrect client disconnect/connect events in the mobile application [NDM-3079] Wi-Fi: implemented handoff mechanism by RSSI threshold [NDM-3081]: interface {name} rssi-threshold {rssi-threshold}

Release 4.1 Beta 2 (preview): IPv6: fixed assignment of IPv6 addresses to SSTP server clients [NDM-2821] Web: fixed default state of the "256-QAM" checkbox (reported by @dimon27254) [NWI-3182] Wi-Fi: fixed wireless connection details for mt76х2-based client [SYS-1060] ZeroTier: fixed system crash when a tunnel is configured [SYS-1066]

Release 4.1 Beta 1 (preview): No changes, draft version porting from Dev

Release 4.1 Beta 0.1: DNS: fixed the erroneous caching of NXDOMAIN responses sent to blocked hosts [SYS-1050] IP: implemented "ip nat" to apply to packets originating from subnets configured as "ip alias" [NDM-3061] PingCheck: fixed compatibility with DoH/DoT [NDM-3062] Wireguard: implemented tunnel binding to a certain parent connection (reported by @vasek00) [NDM-272]: interface {name} wireguard peer {key} connect via {via}

Release 4.1 Beta 0: IPSec: fixed "virtual-ip dhcp route" command [NDM-3053] Web (beta): fixed drop-down menu display on mobiles (reported by @dimon27254) [NWI-3084] Web (beta): implemented SMS page [NWI-3072] Web (beta): reduced the time the interface hangs after an update (reported by @dimon27254) [NWI-3017] Wi-Fi: added PMK cache lifetime control command [NDM-3052]: interface {name} pmksa-lifetime {pmksa-lifetime}

Release 4.1 Alpha 19: IP: fixed erroneous counting of device traffic or attributing it to unregistered devices (reported by @dimon27254) [SYS-965] IPv6: fixed "system failed [0xcffd0c26]" error when modifying access policies (reported by @loly) [NDM-3051] PPE: fixed low speed between interfaces when hardware acceleration is enabled [SYS-1037] Proxy: fixed 'unable to send request: invalid argument' error message in the System log [NDM-3054] Scheduler: fixed transition handling between STD and DST times [NDM-3036] Web (beta): changed the display of the chart legend on the Wi-Fi monitor card (reported by @dimon27254) [NWI-3119] Web (beta): fixed button style in the dark theme (reported by @dimon27254) [NWI-3150] Web (beta): fixed configuration of 6in4 tunnels (reported by @stakp) [NWI-3129] Web (beta): fixed the operation of the Keenetic user management page without the "ssh" component (reported by @dimon27254) [NWI-3121] Web (beta): removed mandatory table completion for classification in IntelliQoS (reported by @dimon27254) [NWI-3025]

Release 4.1 Alpha 18: HTTP: fixed nginx startup failure with no cloudcontrol component installed (reported by @keenet07) [NDM-3046] IP: fixed 'multipath' mode operation with USB modems [NDM-2969] OpenVPN: updated to 2.6.7 [NDM-3049]: CVE-2023-46850 CVE-2023-46849 Proxy: fixed compatibility with HTTPS upstream [NDM-3020] USB: added command [NDM-3044]: interface {name} usb port-id ({port} | auto) Web (beta): added configuration of on-demand backup mode for USB modems [NWI-3115] Web (beta): added confirmation when disabling WAN connection on the dashboard (reported by @dimon27254) [NWI-3083] Wireguard: fixed "system failed [0xcffd0287]" error when importing configurations [NDM-3045]

Release 4.0.7 (preview): DNS: fixed proxy process entering infinite loop during intensive use of TCP requests (reported by @T@rkus) [SYS-1034] USB: added support for Huawei e3331s-2 modem [NDM-2810] USB: added support for Vodafone K5150 (1c26) modem [NDM-2994]

Release 4.0.6 (preview): AFP: fixed password-protected access (reported by @Levon Osipov) [SYS-1030] DNS: fixed applying profiles to hosts with assigned routing policies (reported by @t800) [NDM-2928] DNS: fixed proxy process entering infinite loop during intensive use of TCP requests (reported by @T@rkus) [SYS-1034] IPsec: fixed multiple connections under the same login [NDM-2986] IPsec: fixed null pointer dereference when applying strongSwan configuration [SYS-1033] IPsec: fixed tunnel connection after device restart (reported by @Владислав Сергеев) [NDM-3019] IPv6: disabled global scope in ULA prefix announcements [NDM-2993] ISW: fixed an issue causing incorrect installation of the system language [NDW3-1041] OpenVPN: fixed "Not Connected" state after rebooting (reported by @AbeL) [NDM-2874] Wi-Fi: fixed client rejection with "STA had re-associated from 00:00:00:00:00:00" message [SYS-1029] Wi-Fi: fixed system crash in CmdSetTxPowerCtrl on mt7603-based devices [SYS-1026] Wi-Fi: fixed termination of concurrent dual-band site survey [SYS-989]