MuKu

Release 4.1 Alpha 17: IP: fixed operation of routes configured through a specific interface with the "reject" option enabled [NDM-3029] IPsec: fixed tunnel connection after device restart (reported by @Владислав Сергеев) [NDM-3019] IPv6: local prefixes are now available for configuration on interfaces (requested by @fl4co) [NDM-3039] MWS: added STP bridge priority setting [NDM-2406]: mws stp priority {priority} UsbLte: added support for Vodafone K5150 (1c26) [NDM-2994] Web (beta): fixed HTTP and HTTPS ports change warning (reported by @dimon27254) [NWI-3091] Web: fixed configuration of 6in4 tunnels (reported by @stakp) [NWI-3076]

Release 4.1 Alpha 16: IPsec: fixed null pointer dereference when applying strongSwan configuration [SYS-1033] IPsec: implemented support for XFRM interfaces for site-to-site traffic routing [NDM-3009]: interface XFRM0 — create an XFRM interface; crypto map {name} tunnel-interface XFRM0 — assign the XFRM interface to a crypto map IPv6: implemented assignment of interface identifier [NDM-2672]: interface {name} ipv6 id ({suffix} | eui64 | random) — assign an IPv6 interface identifier Web (beta): fixed saving of Internet access policy schedule for registered devices (reported by @dimon27254) [NWI-3051] Web (beta): fixed the display of the current static IPv4 address for registered devices (reported by @dimon27254) [NWI-3052]

Release 4.1 Alpha 15: AFP: fixed password-protected access (reported by @Levon Osipov) [SYS-1030] DNS: fixed proxy process entering infinite loop during intensive use of TCP requests (reported by @T@rkus) [SYS-1034] IPsec: fixed multiple connections under the same login [NDM-2986] Opkg: added vxlan module to "Kernel modules for Netfilter" package (reported by @MrArtemSid) [SYS-1028] Tools: implemented "source-address" syntax for ping and ping6 [NDM-3016]: tools ping {host} [count {count}] [size {packetsize}] [sequence-id {sequence-id}] [source ({source-interface}|{source-address})] [tos {tos}] [ttl {ttl}] tools ping6 {host} [count {count}] [size {packetsize}] [sequence-id {sequence-id}] [source ({source-interface}|{source-address})] [tos {tos}] [ttl {ttl}] Web (beta): added the ability to change HTTPS port (reported by @dimon27254) [NWI-3054] Web (beta): fixed configuration of allowed subnets for WireGuard peers (reported by @dimon27254) [NWI-3049] Web (beta): fixed connection status after changing connection priority (reported by @T@rkus) [NWI-2991] Web (beta): fixed localization of tabs in the "Other management options" pop-up (reported by @dimon27254) [NWI-3059] Web (beta): fixed RX/TX chart coloring on the dashboard (reported by @dimon27254) [NWI-3034] Web (beta): fixed segment settings when the "dsl" component is uninstalled (reported by @dimon27254) [NWI-3063] Web (beta): fixed the display of the "Related Articles" list (reported by @dimon27254) [NWI-3058] Web (beta): fixed toggle appearance in the dark theme (reported by @KYTECHNGAMING) [NWI-3055] Wi-Fi: fixed client rejection with "STA had re-associated from 00:00:00:00:00:00" message [SYS-1029] Wi-Fi: fixed system crash in CmdSetTxPowerCtrl on mt7603-based devices [SYS-1026]

Release 4.1 Alpha 14: DNS: fixed freezing of system startup on resolving DoT/DoH servers (reported by @r13) [NDM-3017] MWS: fixed extender connection information on MT7615/7915 controller (reported by @PriSonerS61) [NDM-3015] NTP: added "ntp source" setting to specify NTP client source IP address [NDM-3006]: ntp source {address} SNMP: implemented multiple community profiles with restricted access [NDM-3008]: snmp view <view> include <oid-tree> — include subtree to the view; snmp view <view> exclude <oid-tree> — exclude subtree from the view.

Release 4.1 Alpha 12: DNS: disabled static servers on backup connections [NDM-2990] IPv6: disabled global scope in ULA prefix announcements [NDM-2993] Web (beta): added IPv6 settings in IP and DNS settings [NWI-2925] Web (beta): added IPv6 settings in ISP Authentication [NWI-2936] Web (beta): fixed graph on the Internet card on the dashboard (reported by @dimon27254) [NWI-3014] Web (beta): fixed IP address validation on the "Wi-Fi System" page (reported by @dimon27254) [NWI-2995] Web (beta): fixed loading of the "Static routes" page (reported by @dimon27254) [NWI-3030] Web (beta): fixed the color scheme of the dropdown list (reported by @bigpu) [NWI-3001] Web (beta): fixed the display of icons on the "Wi-Fi System" page (reported by @dimon27254) [NWI-3031] Web (beta): fixed thumbnail of the selected schedule (reported by @dimon27254) [NWI-3006] Web (beta): implemented the "Wi-Fi Monitor" page [NWI-2976] Web (beta): returned "Clear settings" button to the WISP page [NWI-2990] Release 4.1 Alpha 13: DNS: fixed infinite resolving timeout during device startup (reported by @mva113) [NDM-3012]

Release 4.1 Alpha 11: TSMB: fixed tsmb-server startup on mt7622-based devices (reported by @vasek00) [SYS-948] Web (beta): fixed appearance of the "Signal levels" pop-up (reported by @mogvai) [NWI-3003] Web (beta): fixed displaying of HTML code in headers (reported by @dimon27254) [NWI-2984] Web (beta): fixed login after session timeout (reported by @dimon27254) [NWI-3005]

Release 4.0.5 (preview ⇨ stable): Chilli: fixed client bandwidth limitation configured via RADIUS server options [NDM-2947] DNS: fixed "Could not bind on given addresses: Address in use" error when using DNS-over-TLS [SYS-1007] Ethernet: fixed loop detection on Ethernet ports of MT7531 switch (KN-1811) [SYS-879] IP: fixed missing traffic statistics for a number of registered devices approaching 200 [SYS-1014] MWS: fixed extender's wireless backhaul connection when access points are turned off [NDM-2912] MWS: fixed timezone synchronization on extenders [NDM-2918] PPE: aligned the maximum number of sessions with conntrack settings [SYS-980] SIP: fixed the "hash-ends-dial" function to retain the disabled state after reboot [VOX-298] USB: fixed error 125001 when polling Huawei E3276 modem [NDM-2967] Web: added RDP to the list of protocols for redirecting and blocking TCP and UDP [NWI-2890] Web: fixed traffic priority sorting (reported by @Nemeriz) [NWI-2889] Web: fixed Force UDP and IKEv2 checkboxes behavior in EoIP settings [NWI-2981] Web: fixed the display of the band steering setting (reported by @mva113) [NWI-2993] Wi-Fi: enabled AX mode by default for KN-3610 when used as an extender [SYS-997] Wi-Fi: fixed broken CLI command 'no rekey-interval' [SYS-990] Wi-Fi: fixed connection of HP LaserJet printers using WPS [SYS-988] Wi-Fi: fixed kernel crash in FT_KDP_EventInform [SYS-994] Wi-Fi: fixed termination of concurrent dual-band site survey [SYS-989] Wireguard: fixed reinstalling default route when changing priorities in the routing policy (reported by @Andyroll) [NDM-2933]

Release 4.1 Alpha 8: USB: fixed error 125001 when polling Huawei E3276 modem [NDM-2967] Web (beta): fixed "Save/Cancel" buttons behavior on the "Connection priorities" page (reported by @T@rkus) [NWI-2982] Web (beta): fixed "Users and access" page issues (reported by @dimon27254) [NWI-2985] Web (beta): fixed positioning of firewall rules when saving settings (reported by @dimon27254) [NWI-2983] Web (beta): fixed refresh interval of CPU and RAM charts on the dashboard (reported by @T@rkus) [NWI-2958] Web (beta): fixed the display of "Connection information" pop-up on the dashboard (reported by @dimon27254) [NWI-2946] Web (beta): removed mentions of IPv6 from the dashboard when IPv6 is not installed (reported by @dimon27254) [NWI-2951] Web (beta): removed restart/reboot actions for disabled WANs on the dashboard (reported by @dimon27254) [NWI-2956]

Release 4.1 Alpha 7: IPv6: implemented blocking of transit DNS traffic when Internet filters are enabled [NDM-2960] MWS: fixed Band Steering configuration on extenders (reported by @saffe) [NDM-2962] Wi-Fi: fixed connection of HP LaserJet printers using WPS [SYS-988] Wi-Fi: fixed broken CLI command 'no rekey-interval' [SYS-990]

Release 4.1 Alpha 6: Web (beta): fixed display of the first field label in pop-up dialogs (reported by @dimon27254) [NWI-2943] Web (beta): fixed display of user-defined text in tables (reported by @dimon27254) [NWI-2944] Web (beta): made changes to the Wireless Access Control page (reported by @PriSonerS61) [NWI-2907] Web (beta): implemented a new version of IntelliQoS [NWI-2922]

Release 4.1 Alpha 5: Ethernet: fixed loop detection on Ethernet ports of MT7531 switch (KN-1811) [SYS-879] MWS: fixed extender's wireless backhaul connection when access points are turned off [NDM-2912] PPE: aligned the maximum number of sessions with conntrack settings [SYS-980] Web (beta): added the missing localization for some types of connections (reported by @dimon27254) [NWI-2858] Web (beta): fixed "Port forwarding" page issues (reported by @dimon27254) [NWI-2941] Web (beta): fixed "SFTP server" toggle on dashboard (reported by @keenet07) [NWI-2942] Web (beta): fixed actual state of the "Force UDP" checkbox [NWI-2918] Web (beta): fixed behavior of the "Change" link that changes Wi-Fi schedule (reported by @PriSonerS61) [NWI-2911] Web (beta): fixed displayed data in the "Connection" column of the "Mesh Wi-Fi System" table (reported by @PriSonerS61) [NWI-2939] Web (beta): fixed errors when making changes to settings of registered devices (reported by @dimon27254) [NWI-2899] Web (beta): fixed overlapping time stamps under the "Traffic Monitor" chart on mobile (reported by @dimon27254) [NWI-2916] Web (beta): fixed style of the "Wi-Fi System Nodes Open for Connection" block (reported by @dimon27254) [NWI-2940] Web (beta): fixed the display of available storage applications (reported by @dimon27254) [NWI-2910] Web (beta): fixed various errors on the Ethernet page (reported by @dimon27254) [NWI-2915] Web (beta): made improvements to the design of "My networks and Wi-Fi" card (reported by @bigpu) [NWI-2921] Wireguard: fixed reinstalling default route when changing priorities in the routing policy (reported by @Andyroll) [NDM-2933]

Release 4.0.4 (preview): DNS: fixed "socket is not ready for request" error (reported by @dimon27254) [SYS-971]

Release 4.1 Alpha 4: DNS: fixed "socket is not ready for request" error (reported by @dimon27254) [SYS-971] MWS: fixed timezone synchronization on extenders [NDM-2918] Web (beta): added "Wi-Fi System Nodes Open for Connection" section (reported by @KYTECHNGAMING) [NWI-2879] Web (beta): changed behavior pattern of the main menu (reported by @dimon27254) [NWI-2871] Web (beta): fixed display of OpenVPN configuration in the dark theme (reported by @AndreBA) [NWI-2891] Web (beta): fixed display of time stamps in mobile version (reported by @dimon27254) [NWI-2897] Web (beta): fixed DNS server list output on dashboard (reported by @keenet07) [NWI-2903] Web (beta): fixed output of "802.1x Authentication" block (reported by @PriSonerS61) [NWI-2904] Web (beta): fixed positioning of elements on the login page (reported by @dimon27254) [NWI-2901] Web (beta): fixed some bugs on the "General settings" page (reported by @dimon27254) [NWI-2892] Web (beta): fixed the list of applications available for installation (reported by @dimon27254) [NWI-2859] Web (beta): fixed the statuses of internet connections (reported by @dimon27254) [NWI-2884] Web (beta): fixed transitions from "Client List" page (reported by @dimon27254) [NWI-2902] Web (beta): improved dashboard scrolling (reported by @dimon27254) [NWI-2875] Web (beta): implemented "Data usage & limit" page [NWI-2726]

Release 4.1 Alpha 3: IPv4: fixed some websites not loading with traffic shaping enabled (reported by @VKN3) [SYS-953] IPv4: fixed timeouts when accessing websites via policy with multipath enabled [NDM-2792] IPv6: fixed cyclic restart of dhcp6d after saving segment settings [NDM-2916] IPv6: fixed the incompatibility with A1 Belarus [SYS-930] ISW: fixed an error when determining Internet connection via PPPoE/DSL [NDM-2914] KeenDNS: fixed the use of static record 78.47.125.180 in the direct mode [NDM-2905] PingCheck: fixed "system failed [0xcffd0304], network unreachable" error [NDM-2906] PPPoE: fixed connection breakdown when renewing a DHCP address on a parent interface [NDM-2904] Web (beta): added "restart interface" action for tunnels and PPPoE connections (reported by @bigpu) [NWI-2863] Web (beta): added data update to the traffic monitor card on the dashboard (reported by @T@rkus) [NWI-2878] Web (beta): added translations in segments (reported by @dimon27254) [NWI-2861] Web (beta): corrected the language value in the page code (reported by @dimon27254) [NWI-2862] Web (beta): fixed bugs with fonts (reported by @dimon27254) [NWI-2857] Web (beta): fixed clients sort order and segment descriptions (reported by @dimon27254) [NWI-2883] Web (beta): fixed display of Wi-Fi monitor card on the dashboard (reported by @keenet07) [NWI-2880] Web (beta): fixed errors on the Ethernet page (reported by @dimon27254) [NWI-2874] Web (beta): fixed infinite loading of the wifiSystem page (reported by @PriSonerS61) [NWI-2856] Web (beta): fixed saving the state of Firewall rules (reported by @keenet07) [NWI-2877] Web (beta): fixed specific DNS servers output on the dashboard (reported by @keenet07) [NWI-2864] Web (beta): fixed the "Update" button on the wifiSystem page (reported by @KYTECHNGAMING) [NWI-2870] Web (beta): improved the mobile view of the login page (reported by @dimon27254) [NWI-2865] Web (beta): removed speed limit settings when no component is present (reported by @dimon27254) [NWI-2860] ZeroTier: implemented ZeroTier One client [NDM-2883]: interface ZeroTier0 — create ZeroTier interface; interface {name} zerotier network-id {network-id} — set ZeroTier network ID; interface {name} zerotier accept-addresses — accept addresses from the server; interface {name} zerotier accept-routes — accept routes from the server; interface {name} zerotier connect [via {via}] — enable connection via specified interface; show interface {name} zerotier peers — show peers.

Release 4.0.3 (preview): IPsec: fixed saving the "Multiple sign-in" checkbox (reported by @ian) [NDM-2853] IPv4: fixed some websites not loading with traffic shaping enabled (reported by @VKN3) [SYS-953] IPv4: fixed source IP address selection when "ip alias" addresses are configured (reported by @Leonid K.) [SYS-945] IPv4: fixed timeouts when accessing websites via policy with multipath enabled [NDM-2792] IPv6: fixed cyclic restart of dhcp6d after saving segment settings [NDM-2916] IPv6: fixed the incompatibility with A1 Belarus [SYS-930] ISW: fixed an error when determining Internet connection via PPPoE/DSL [NDM-2914] KeenDNS: fixed the use of static record 78.47.125.180 in the direct mode [NDM-2905] MWS: fixed duplicates detection when extender IP address is changed (reported by @bigpu) [NDM-2892] OpenSSL: updated to 3.0.10 [SYS-949]: CVE-2023-3817 CVE-2023-3446 CVE-2023-2975 OpenVPN: fixed default route through the tunnel configured in IP policy (reported by @Deks) [NDM-2888] Opkg: fixed ifstatechanged.d arguments; added new iflayerchanged.d (reported by @Freize) [NDM-2897] PPPoE: fixed connection breakdown when renewing a DHCP address on a parent interface [NDM-2904] Wi-Fi: fix "wind: failed to make ioctl call: network is down" errors [NDM-2887]

Release 4.1 Alpha 2: Cloud: fixed "out of memory [0xcffe00ba]" error (reported by @dimon27254) [NDM-2895] Cloud: fixed KeenDNS cloud connectivity via IPv6 to HTTP [NDM-2894] IPv4: fixed source IP address selection when "ip alias" addresses are configured [SYS-945] MWS: fixed duplicates detection when extender IP address is changed (reported by @bigpu) [NDM-2892] OpenSSL: updated to 3.1.2 [SYS-949]: CVE-2023-3817 CVE-2023-3446 CVE-2023-2975 Opkg: fixed ifstatechanged.d arguments; added new iflayerchanged.d (reported by @Freize) [NDM-2897] Web: fixed status of disabled internet connection (reported by @dimon27254) [NDM-2890]

To keep track of the experimental branch, subscribe to the Changelog 4.1

Release 4.1 Alpha 1: Cloud: fixed KeenDNS cloud connectivity via IPv6 without IPv4 WAN [NDM-2870] IPsec: fixed saving the "Multiple sign-in" checkbox (reported by @ian) [NDM-2853] IPv4: fixed source IP address selection when "ip alias" addresses are configured [SYS-945] NTCE: implemented bandwidth limitation for IntelliQoS [NDM-2757]: ntce upstream rate-limit {interface} input ({rate} | auto) ntce upstream rate-limit {interface} output ({rate} | auto) OpenSSL: updated to 3.1.1 [SYS-883]: CVE-2023-2650 CVE-2023-0465 OpenVPN: fixed default route through the tunnel configured in IP policy [NDM-2888] Web: added a new component*: Next-generation web interface [SYS-933] * at the development/testing stage is not available for devices with limited flash memory: KN-1110, KN-1111, KN-1310, KN-1410, KN-1510, KN-1610, KN-1710, KN-1711; active in the router mode only.

4.1 is a stable branch based on Linux 4.9, see also changelog 4.0. Supported models: Giga (KN-1010) Hero (KN-1011) Start/Starter (KN-1110, KN-1111, KN-1112) Lite (KN-1310) Omni (KN-1410) City (KN-1510) Air/Explorer (KN-1610, KN-1613) Extra/Carrier (KN-1710, KN-1711, KN-1713) Ultra/Titan (KN-1810, KN-1811) Viva/Skipper (KN-1910, KN-1913) Omni DSL (KN-2011, KN-2012) Extra DSL/Carrier DSL/Skipper DSL (KN-2111, KN-2112) Runner 4G (KN-2210, KN-2211, KN-2212) Hero 4G (KN-2310, KN-2311) Hero DSL (KN-2410) Peak DSL (KN-2510) Giant (KN-2610) Peak (KN-2710) Orbiter Pro (KN-2810) Skipper 4G (KN-2910) Speedster (KN-3010, KN-3012) Buddy 4 (KN-3210, KN-3211) Buddy 5 (KN-3311) Buddy 6 (KN-3411) Voyager Pro (KN-3510) Hopper DSL (KN-3610) Sprinter (KN-3710) Hopper (KN-3810) Explorer 4G (KN-4910)

Release 4.0.2 (preview ⇨ stable): IP: removed interface subnet check when specifying static routes with a gateway address [NDM-2839] MWS: fixed "not found: interface security-level" error when configuring extenders [NDM-2868] MWS: fixed appearance of "duplicate" extenders in the device list (reported by @Vision) [NDM-2869] Ping-check: fixed operation when there are no configured DNS servers in the system (reported by @Eric750) [NDM-2784] Wi-Fi: fixed 802.11r fast transition in protected segments (reported by @dimon27254) [NDM-2774] Wi-Fi: fixed stack corruption when processing incoming WPA3-SAE-H2E connections [SYS-932]

Release 4.0.1 (preview): AFP: updated netatalk to 3.1.15 (reported by @saffe) [SYS-929] HTTP: fixed error 404 on redirection to legacy wizard/initial-setup (reported by @roman_sh) [NDM-2848] IPsec: fixed MPPE support for L2TP/IPsec [NDM-2859] IPv4: fixed blocking access to the "private" IP address of the device from "protected" segments [NDM-2744] Kernel: fixed watchdog reboots caused by incorrect operation of the system timer on KN-3810 [SYS-920] MWS: optimized firmware update installation procedure [NDM-2816] MWS: fixed "port 0 is busy" error when configuring extenders (reported by @BugM) [NDM-2852] Torrent: fixed "alternative speed" mode button (reported by @Ацкий Падонак) [NDM-2858]

Release 4.0.0 (preview): DNS: fixed disabling packet interception when filtering is disabled [NDM-2769] MWS: fixed STP operation for mt7915 devices [SYS-904] Web: fixed "GigabitEthernet1 is off-board" error when deleting wired connection via port 0 [NDM-2651] Web: fixed XSS on segment name [NWI-2715] Wi-Fi: fixed MCU crash on DFS-enabled devices [SYS-536] Wireguard: fixed restart of all tunnels when turning off one of them (reported by @dimon27254) [NDM-2800] Wireguard: fixed errors in HTTP server configuration after changing the interface security level [NDM-2832]

Release 4.0 Beta 3 (preview): IPv6: added ICMPv6 support to "ipv6 static" rules [NDM-2760]: ipv6 static (... | icmpv6) [interface] {mac} IPv6: implemented de-announcement of prefixes for backup connections [NDM-2805] Wi-Fi: fixed connection when changing the channel width from 80 to 20 MHz [SYS-893] PPE: fixed traffic accounting when multiple WAN connections are active (reported by @dimon27254) [SYS-880] Wireguard: fixed connection restart on NTP time synchronization (reported by @divinepredecessor) [NDM-2773]

Release 4.0 Beta 2 (preview): IPsec: fixed GRE/IPsec connection to Cisco IKEv2 endpoints [NDM-2789] LTE: fixed scanning of available mobile operators [NDM-2788] MWS: fixed adding new extenders when the Internet connection is not available [NDM-2594] PPE: fixed crash in the traffic shaper kernel module [NDM-2730] SIP: implemented sending keepalive messages to all SIP servers listed in the DNS SRV record [VOX-278]: nvox sip keepalive-extended USB: added support for MTS 81332FT modem [NDM-2786] Web: fixed positioning of elements when zooming the dashboard in Safari iOS 16 [NWI-2626] Web: fixed Wi-Fi monitor tooltip (reported by @dimon27254) [NWI-2648] Web: fixed a number of minor visual defects (reported by @dimon27254) [NWI-2675; NWI-2676]

Release 4.0 Beta 1 (preview): USB: added support for IoTMBB MM200-1 modem [NDM-2778]