MuKu

Release 4.1.2 (stable): LTE: implemented restart of L860-GL and similar modems by network connection timeout (reported by @Alexander) [NDM-2980] PingCheck: fixed connection checking through the recursive name resolution [NDM-3086] Web: added Finnish language support [SYS-1114]

Release 4.1.1 (preview): traceroute: fixed sending packets from a specified TCP/UDP port [NDM-3138] Wi-Fi: fix FT for segments with different SSIDs [NDM-2917]

Release 4.1.0 (preview): HTTP: fixed compatibility issue connecting Obsidian and Joplin clients to the WebDAV server (reported by @ツЛешик) [NDM-2213] HTTP: fixed redundant copying of temporary file during WebDAV upload to VFAT and NTFS partitions [NDM-2089] Wi-Fi: fixed duplicate RRM events in the system log when switching radio channels on MWS extenders [SYS-1098]

Release 4.1 Beta 4 (preview): Core: updated timezone for Kazakhstan to UTC+5 [NDM-3147] Hotspot: fixed short-term traffic leakage for hosts with denied access to the Internet [NDM-3127] IPv4: increased the maximum number of IP aliases to 250 [NDM-3063] IPv6: implemented DHCPv6 client prefix delegation hint [NDM-3076]: interface {name} ipv6 dhcp client pd hint {prefix} NTCE: fixed "ntce-pace2: unable to proceed with data, exit" error [NDM-3115] NTCE: fixed DNS-proxy crash when mirroring TCP queries [SYS-1099] NTCE: fixed rate limiting for IntelliQoS [NDM-3104] OpenSSL: updated to 3.1.5 [SYS-1097]: CVE-2023-5678 CVE-2024-0727 Proxy: fixed running of multiple proxy interfaces at the same time [NDM-3122] Wi-Fi: fixed "wind: failed to decrypt message" error (reported by @ForestS) [SYS-1084] Wi-Fi: fixed resetting of Band Steering mode to None [NDM-3126]

Release 4.1 Beta 3 (preview): Wi-Fi: fixed incorrect client disconnect/connect events in the mobile application [NDM-3079] Wi-Fi: implemented handoff mechanism by RSSI threshold [NDM-3081]: interface {name} rssi-threshold {rssi-threshold}

Release 4.1 Beta 2 (preview): IPv6: fixed assignment of IPv6 addresses to SSTP server clients [NDM-2821] Web: fixed default state of the "256-QAM" checkbox (reported by @dimon27254) [NWI-3182] Wi-Fi: fixed wireless connection details for mt76х2-based client [SYS-1060] ZeroTier: fixed system crash when a tunnel is configured [SYS-1066]

Release 4.1 Beta 1 (preview): No changes, draft version porting from Dev

Release 4.1 Beta 0.1: DNS: fixed the erroneous caching of NXDOMAIN responses sent to blocked hosts [SYS-1050] IP: implemented "ip nat" to apply to packets originating from subnets configured as "ip alias" [NDM-3061] PingCheck: fixed compatibility with DoH/DoT [NDM-3062] Wireguard: implemented tunnel binding to a certain parent connection (reported by @vasek00) [NDM-272]: interface {name} wireguard peer {key} connect via {via}

Release 4.1 Beta 0: IPSec: fixed "virtual-ip dhcp route" command [NDM-3053] Web (beta): fixed drop-down menu display on mobiles (reported by @dimon27254) [NWI-3084] Web (beta): implemented SMS page [NWI-3072] Web (beta): reduced the time the interface hangs after an update (reported by @dimon27254) [NWI-3017] Wi-Fi: added PMK cache lifetime control command [NDM-3052]: interface {name} pmksa-lifetime {pmksa-lifetime}

Release 4.1 Alpha 19: IP: fixed erroneous counting of device traffic or attributing it to unregistered devices (reported by @dimon27254) [SYS-965] IPv6: fixed "system failed [0xcffd0c26]" error when modifying access policies (reported by @loly) [NDM-3051] PPE: fixed low speed between interfaces when hardware acceleration is enabled [SYS-1037] Proxy: fixed 'unable to send request: invalid argument' error message in the System log [NDM-3054] Scheduler: fixed transition handling between STD and DST times [NDM-3036] Web (beta): changed the display of the chart legend on the Wi-Fi monitor card (reported by @dimon27254) [NWI-3119] Web (beta): fixed button style in the dark theme (reported by @dimon27254) [NWI-3150] Web (beta): fixed configuration of 6in4 tunnels (reported by @stakp) [NWI-3129] Web (beta): fixed the operation of the Keenetic user management page without the "ssh" component (reported by @dimon27254) [NWI-3121] Web (beta): removed mandatory table completion for classification in IntelliQoS (reported by @dimon27254) [NWI-3025]

Release 4.1 Alpha 18: HTTP: fixed nginx startup failure with no cloudcontrol component installed (reported by @keenet07) [NDM-3046] IP: fixed 'multipath' mode operation with USB modems [NDM-2969] OpenVPN: updated to 2.6.7 [NDM-3049]: CVE-2023-46850 CVE-2023-46849 Proxy: fixed compatibility with HTTPS upstream [NDM-3020] USB: added command [NDM-3044]: interface {name} usb port-id ({port} | auto) Web (beta): added configuration of on-demand backup mode for USB modems [NWI-3115] Web (beta): added confirmation when disabling WAN connection on the dashboard (reported by @dimon27254) [NWI-3083] Wireguard: fixed "system failed [0xcffd0287]" error when importing configurations [NDM-3045]

Release 4.0.7 (preview): DNS: fixed proxy process entering infinite loop during intensive use of TCP requests (reported by @T@rkus) [SYS-1034] USB: added support for Huawei e3331s-2 modem [NDM-2810] USB: added support for Vodafone K5150 (1c26) modem [NDM-2994]

Release 4.0.6 (preview): AFP: fixed password-protected access (reported by @Levon Osipov) [SYS-1030] DNS: fixed applying profiles to hosts with assigned routing policies (reported by @t800) [NDM-2928] DNS: fixed proxy process entering infinite loop during intensive use of TCP requests (reported by @T@rkus) [SYS-1034] IPsec: fixed multiple connections under the same login [NDM-2986] IPsec: fixed null pointer dereference when applying strongSwan configuration [SYS-1033] IPsec: fixed tunnel connection after device restart (reported by @Владислав Сергеев) [NDM-3019] IPv6: disabled global scope in ULA prefix announcements [NDM-2993] ISW: fixed an issue causing incorrect installation of the system language [NDW3-1041] OpenVPN: fixed "Not Connected" state after rebooting (reported by @AbeL) [NDM-2874] Wi-Fi: fixed client rejection with "STA had re-associated from 00:00:00:00:00:00" message [SYS-1029] Wi-Fi: fixed system crash in CmdSetTxPowerCtrl on mt7603-based devices [SYS-1026] Wi-Fi: fixed termination of concurrent dual-band site survey [SYS-989]

Release 4.1 Alpha 17: IP: fixed operation of routes configured through a specific interface with the "reject" option enabled [NDM-3029] IPsec: fixed tunnel connection after device restart (reported by @Владислав Сергеев) [NDM-3019] IPv6: local prefixes are now available for configuration on interfaces (requested by @fl4co) [NDM-3039] MWS: added STP bridge priority setting [NDM-2406]: mws stp priority {priority} UsbLte: added support for Vodafone K5150 (1c26) [NDM-2994] Web (beta): fixed HTTP and HTTPS ports change warning (reported by @dimon27254) [NWI-3091] Web: fixed configuration of 6in4 tunnels (reported by @stakp) [NWI-3076]

Release 4.1 Alpha 16: IPsec: fixed null pointer dereference when applying strongSwan configuration [SYS-1033] IPsec: implemented support for XFRM interfaces for site-to-site traffic routing [NDM-3009]: interface XFRM0 — create an XFRM interface; crypto map {name} tunnel-interface XFRM0 — assign the XFRM interface to a crypto map IPv6: implemented assignment of interface identifier [NDM-2672]: interface {name} ipv6 id ({suffix} | eui64 | random) — assign an IPv6 interface identifier Web (beta): fixed saving of Internet access policy schedule for registered devices (reported by @dimon27254) [NWI-3051] Web (beta): fixed the display of the current static IPv4 address for registered devices (reported by @dimon27254) [NWI-3052]

Release 4.1 Alpha 15: AFP: fixed password-protected access (reported by @Levon Osipov) [SYS-1030] DNS: fixed proxy process entering infinite loop during intensive use of TCP requests (reported by @T@rkus) [SYS-1034] IPsec: fixed multiple connections under the same login [NDM-2986] Opkg: added vxlan module to "Kernel modules for Netfilter" package (reported by @MrArtemSid) [SYS-1028] Tools: implemented "source-address" syntax for ping and ping6 [NDM-3016]: tools ping {host} [count {count}] [size {packetsize}] [sequence-id {sequence-id}] [source ({source-interface}|{source-address})] [tos {tos}] [ttl {ttl}] tools ping6 {host} [count {count}] [size {packetsize}] [sequence-id {sequence-id}] [source ({source-interface}|{source-address})] [tos {tos}] [ttl {ttl}] Web (beta): added the ability to change HTTPS port (reported by @dimon27254) [NWI-3054] Web (beta): fixed configuration of allowed subnets for WireGuard peers (reported by @dimon27254) [NWI-3049] Web (beta): fixed connection status after changing connection priority (reported by @T@rkus) [NWI-2991] Web (beta): fixed localization of tabs in the "Other management options" pop-up (reported by @dimon27254) [NWI-3059] Web (beta): fixed RX/TX chart coloring on the dashboard (reported by @dimon27254) [NWI-3034] Web (beta): fixed segment settings when the "dsl" component is uninstalled (reported by @dimon27254) [NWI-3063] Web (beta): fixed the display of the "Related Articles" list (reported by @dimon27254) [NWI-3058] Web (beta): fixed toggle appearance in the dark theme (reported by @KYTECHNGAMING) [NWI-3055] Wi-Fi: fixed client rejection with "STA had re-associated from 00:00:00:00:00:00" message [SYS-1029] Wi-Fi: fixed system crash in CmdSetTxPowerCtrl on mt7603-based devices [SYS-1026]

Release 4.1 Alpha 14: DNS: fixed freezing of system startup on resolving DoT/DoH servers (reported by @r13) [NDM-3017] MWS: fixed extender connection information on MT7615/7915 controller (reported by @PriSonerS61) [NDM-3015] NTP: added "ntp source" setting to specify NTP client source IP address [NDM-3006]: ntp source {address} SNMP: implemented multiple community profiles with restricted access [NDM-3008]: snmp view <view> include <oid-tree> — include subtree to the view; snmp view <view> exclude <oid-tree> — exclude subtree from the view.

Release 4.1 Alpha 12: DNS: disabled static servers on backup connections [NDM-2990] IPv6: disabled global scope in ULA prefix announcements [NDM-2993] Web (beta): added IPv6 settings in IP and DNS settings [NWI-2925] Web (beta): added IPv6 settings in ISP Authentication [NWI-2936] Web (beta): fixed graph on the Internet card on the dashboard (reported by @dimon27254) [NWI-3014] Web (beta): fixed IP address validation on the "Wi-Fi System" page (reported by @dimon27254) [NWI-2995] Web (beta): fixed loading of the "Static routes" page (reported by @dimon27254) [NWI-3030] Web (beta): fixed the color scheme of the dropdown list (reported by @bigpu) [NWI-3001] Web (beta): fixed the display of icons on the "Wi-Fi System" page (reported by @dimon27254) [NWI-3031] Web (beta): fixed thumbnail of the selected schedule (reported by @dimon27254) [NWI-3006] Web (beta): implemented the "Wi-Fi Monitor" page [NWI-2976] Web (beta): returned "Clear settings" button to the WISP page [NWI-2990] Release 4.1 Alpha 13: DNS: fixed infinite resolving timeout during device startup (reported by @mva113) [NDM-3012]

Release 4.1 Alpha 11: TSMB: fixed tsmb-server startup on mt7622-based devices (reported by @vasek00) [SYS-948] Web (beta): fixed appearance of the "Signal levels" pop-up (reported by @mogvai) [NWI-3003] Web (beta): fixed displaying of HTML code in headers (reported by @dimon27254) [NWI-2984] Web (beta): fixed login after session timeout (reported by @dimon27254) [NWI-3005]

Release 4.0.5 (preview ⇨ stable): Chilli: fixed client bandwidth limitation configured via RADIUS server options [NDM-2947] DNS: fixed "Could not bind on given addresses: Address in use" error when using DNS-over-TLS [SYS-1007] Ethernet: fixed loop detection on Ethernet ports of MT7531 switch (KN-1811) [SYS-879] IP: fixed missing traffic statistics for a number of registered devices approaching 200 [SYS-1014] MWS: fixed extender's wireless backhaul connection when access points are turned off [NDM-2912] MWS: fixed timezone synchronization on extenders [NDM-2918] PPE: aligned the maximum number of sessions with conntrack settings [SYS-980] SIP: fixed the "hash-ends-dial" function to retain the disabled state after reboot [VOX-298] USB: fixed error 125001 when polling Huawei E3276 modem [NDM-2967] Web: added RDP to the list of protocols for redirecting and blocking TCP and UDP [NWI-2890] Web: fixed traffic priority sorting (reported by @Nemeriz) [NWI-2889] Web: fixed Force UDP and IKEv2 checkboxes behavior in EoIP settings [NWI-2981] Web: fixed the display of the band steering setting (reported by @mva113) [NWI-2993] Wi-Fi: enabled AX mode by default for KN-3610 when used as an extender [SYS-997] Wi-Fi: fixed broken CLI command 'no rekey-interval' [SYS-990] Wi-Fi: fixed connection of HP LaserJet printers using WPS [SYS-988] Wi-Fi: fixed kernel crash in FT_KDP_EventInform [SYS-994] Wi-Fi: fixed termination of concurrent dual-band site survey [SYS-989] Wireguard: fixed reinstalling default route when changing priorities in the routing policy (reported by @Andyroll) [NDM-2933]

Release 4.1 Alpha 8: USB: fixed error 125001 when polling Huawei E3276 modem [NDM-2967] Web (beta): fixed "Save/Cancel" buttons behavior on the "Connection priorities" page (reported by @T@rkus) [NWI-2982] Web (beta): fixed "Users and access" page issues (reported by @dimon27254) [NWI-2985] Web (beta): fixed positioning of firewall rules when saving settings (reported by @dimon27254) [NWI-2983] Web (beta): fixed refresh interval of CPU and RAM charts on the dashboard (reported by @T@rkus) [NWI-2958] Web (beta): fixed the display of "Connection information" pop-up on the dashboard (reported by @dimon27254) [NWI-2946] Web (beta): removed mentions of IPv6 from the dashboard when IPv6 is not installed (reported by @dimon27254) [NWI-2951] Web (beta): removed restart/reboot actions for disabled WANs on the dashboard (reported by @dimon27254) [NWI-2956]

Release 4.1 Alpha 7: IPv6: implemented blocking of transit DNS traffic when Internet filters are enabled [NDM-2960] MWS: fixed Band Steering configuration on extenders (reported by @saffe) [NDM-2962] Wi-Fi: fixed connection of HP LaserJet printers using WPS [SYS-988] Wi-Fi: fixed broken CLI command 'no rekey-interval' [SYS-990]

Release 4.1 Alpha 6: Web (beta): fixed display of the first field label in pop-up dialogs (reported by @dimon27254) [NWI-2943] Web (beta): fixed display of user-defined text in tables (reported by @dimon27254) [NWI-2944] Web (beta): made changes to the Wireless Access Control page (reported by @PriSonerS61) [NWI-2907] Web (beta): implemented a new version of IntelliQoS [NWI-2922]

Release 4.1 Alpha 5: Ethernet: fixed loop detection on Ethernet ports of MT7531 switch (KN-1811) [SYS-879] MWS: fixed extender's wireless backhaul connection when access points are turned off [NDM-2912] PPE: aligned the maximum number of sessions with conntrack settings [SYS-980] Web (beta): added the missing localization for some types of connections (reported by @dimon27254) [NWI-2858] Web (beta): fixed "Port forwarding" page issues (reported by @dimon27254) [NWI-2941] Web (beta): fixed "SFTP server" toggle on dashboard (reported by @keenet07) [NWI-2942] Web (beta): fixed actual state of the "Force UDP" checkbox [NWI-2918] Web (beta): fixed behavior of the "Change" link that changes Wi-Fi schedule (reported by @PriSonerS61) [NWI-2911] Web (beta): fixed displayed data in the "Connection" column of the "Mesh Wi-Fi System" table (reported by @PriSonerS61) [NWI-2939] Web (beta): fixed errors when making changes to settings of registered devices (reported by @dimon27254) [NWI-2899] Web (beta): fixed overlapping time stamps under the "Traffic Monitor" chart on mobile (reported by @dimon27254) [NWI-2916] Web (beta): fixed style of the "Wi-Fi System Nodes Open for Connection" block (reported by @dimon27254) [NWI-2940] Web (beta): fixed the display of available storage applications (reported by @dimon27254) [NWI-2910] Web (beta): fixed various errors on the Ethernet page (reported by @dimon27254) [NWI-2915] Web (beta): made improvements to the design of "My networks and Wi-Fi" card (reported by @bigpu) [NWI-2921] Wireguard: fixed reinstalling default route when changing priorities in the routing policy (reported by @Andyroll) [NDM-2933]

Release 4.0.4 (preview): DNS: fixed "socket is not ready for request" error (reported by @dimon27254) [SYS-971]