MuKu

Release 4.1 Alpha 4: DNS: fixed "socket is not ready for request" error (reported by @dimon27254) [SYS-971] MWS: fixed timezone synchronization on extenders [NDM-2918] Web (beta): added "Wi-Fi System Nodes Open for Connection" section (reported by @KYTECHNGAMING) [NWI-2879] Web (beta): changed behavior pattern of the main menu (reported by @dimon27254) [NWI-2871] Web (beta): fixed display of OpenVPN configuration in the dark theme (reported by @AndreBA) [NWI-2891] Web (beta): fixed display of time stamps in mobile version (reported by @dimon27254) [NWI-2897] Web (beta): fixed DNS server list output on dashboard (reported by @keenet07) [NWI-2903] Web (beta): fixed output of "802.1x Authentication" block (reported by @PriSonerS61) [NWI-2904] Web (beta): fixed positioning of elements on the login page (reported by @dimon27254) [NWI-2901] Web (beta): fixed some bugs on the "General settings" page (reported by @dimon27254) [NWI-2892] Web (beta): fixed the list of applications available for installation (reported by @dimon27254) [NWI-2859] Web (beta): fixed the statuses of internet connections (reported by @dimon27254) [NWI-2884] Web (beta): fixed transitions from "Client List" page (reported by @dimon27254) [NWI-2902] Web (beta): improved dashboard scrolling (reported by @dimon27254) [NWI-2875] Web (beta): implemented "Data usage & limit" page [NWI-2726]

Release 4.1 Alpha 3: IPv4: fixed some websites not loading with traffic shaping enabled (reported by @VKN3) [SYS-953] IPv4: fixed timeouts when accessing websites via policy with multipath enabled [NDM-2792] IPv6: fixed cyclic restart of dhcp6d after saving segment settings [NDM-2916] IPv6: fixed the incompatibility with A1 Belarus [SYS-930] ISW: fixed an error when determining Internet connection via PPPoE/DSL [NDM-2914] KeenDNS: fixed the use of static record 78.47.125.180 in the direct mode [NDM-2905] PingCheck: fixed "system failed [0xcffd0304], network unreachable" error [NDM-2906] PPPoE: fixed connection breakdown when renewing a DHCP address on a parent interface [NDM-2904] Web (beta): added "restart interface" action for tunnels and PPPoE connections (reported by @bigpu) [NWI-2863] Web (beta): added data update to the traffic monitor card on the dashboard (reported by @T@rkus) [NWI-2878] Web (beta): added translations in segments (reported by @dimon27254) [NWI-2861] Web (beta): corrected the language value in the page code (reported by @dimon27254) [NWI-2862] Web (beta): fixed bugs with fonts (reported by @dimon27254) [NWI-2857] Web (beta): fixed clients sort order and segment descriptions (reported by @dimon27254) [NWI-2883] Web (beta): fixed display of Wi-Fi monitor card on the dashboard (reported by @keenet07) [NWI-2880] Web (beta): fixed errors on the Ethernet page (reported by @dimon27254) [NWI-2874] Web (beta): fixed infinite loading of the wifiSystem page (reported by @PriSonerS61) [NWI-2856] Web (beta): fixed saving the state of Firewall rules (reported by @keenet07) [NWI-2877] Web (beta): fixed specific DNS servers output on the dashboard (reported by @keenet07) [NWI-2864] Web (beta): fixed the "Update" button on the wifiSystem page (reported by @KYTECHNGAMING) [NWI-2870] Web (beta): improved the mobile view of the login page (reported by @dimon27254) [NWI-2865] Web (beta): removed speed limit settings when no component is present (reported by @dimon27254) [NWI-2860] ZeroTier: implemented ZeroTier One client [NDM-2883]: interface ZeroTier0 — create ZeroTier interface; interface {name} zerotier network-id {network-id} — set ZeroTier network ID; interface {name} zerotier accept-addresses — accept addresses from the server; interface {name} zerotier accept-routes — accept routes from the server; interface {name} zerotier connect [via {via}] — enable connection via specified interface; show interface {name} zerotier peers — show peers.

Release 4.0.3 (preview): IPsec: fixed saving the "Multiple sign-in" checkbox (reported by @ian) [NDM-2853] IPv4: fixed some websites not loading with traffic shaping enabled (reported by @VKN3) [SYS-953] IPv4: fixed source IP address selection when "ip alias" addresses are configured (reported by @Leonid K.) [SYS-945] IPv4: fixed timeouts when accessing websites via policy with multipath enabled [NDM-2792] IPv6: fixed cyclic restart of dhcp6d after saving segment settings [NDM-2916] IPv6: fixed the incompatibility with A1 Belarus [SYS-930] ISW: fixed an error when determining Internet connection via PPPoE/DSL [NDM-2914] KeenDNS: fixed the use of static record 78.47.125.180 in the direct mode [NDM-2905] MWS: fixed duplicates detection when extender IP address is changed (reported by @bigpu) [NDM-2892] OpenSSL: updated to 3.0.10 [SYS-949]: CVE-2023-3817 CVE-2023-3446 CVE-2023-2975 OpenVPN: fixed default route through the tunnel configured in IP policy (reported by @Deks) [NDM-2888] Opkg: fixed ifstatechanged.d arguments; added new iflayerchanged.d (reported by @Freize) [NDM-2897] PPPoE: fixed connection breakdown when renewing a DHCP address on a parent interface [NDM-2904] Wi-Fi: fix "wind: failed to make ioctl call: network is down" errors [NDM-2887]

Release 4.1 Alpha 2: Cloud: fixed "out of memory [0xcffe00ba]" error (reported by @dimon27254) [NDM-2895] Cloud: fixed KeenDNS cloud connectivity via IPv6 to HTTP [NDM-2894] IPv4: fixed source IP address selection when "ip alias" addresses are configured [SYS-945] MWS: fixed duplicates detection when extender IP address is changed (reported by @bigpu) [NDM-2892] OpenSSL: updated to 3.1.2 [SYS-949]: CVE-2023-3817 CVE-2023-3446 CVE-2023-2975 Opkg: fixed ifstatechanged.d arguments; added new iflayerchanged.d (reported by @Freize) [NDM-2897] Web: fixed status of disabled internet connection (reported by @dimon27254) [NDM-2890]

To keep track of the experimental branch, subscribe to the Changelog 4.1

Release 4.1 Alpha 1: Cloud: fixed KeenDNS cloud connectivity via IPv6 without IPv4 WAN [NDM-2870] IPsec: fixed saving the "Multiple sign-in" checkbox (reported by @ian) [NDM-2853] IPv4: fixed source IP address selection when "ip alias" addresses are configured [SYS-945] NTCE: implemented bandwidth limitation for IntelliQoS [NDM-2757]: ntce upstream rate-limit {interface} input ({rate} | auto) ntce upstream rate-limit {interface} output ({rate} | auto) OpenSSL: updated to 3.1.1 [SYS-883]: CVE-2023-2650 CVE-2023-0465 OpenVPN: fixed default route through the tunnel configured in IP policy [NDM-2888] Web: added a new component*: Next-generation web interface [SYS-933] * at the development/testing stage is not available for devices with limited flash memory: KN-1110, KN-1111, KN-1310, KN-1410, KN-1510, KN-1610, KN-1710, KN-1711; active in the router mode only.

4.1 is a stable branch based on Linux 4.9, see also changelog 4.0. Supported models: Giga (KN-1010) Hero (KN-1011) Start/Starter (KN-1110, KN-1111, KN-1112) Lite (KN-1310) Omni (KN-1410) City (KN-1510) Air/Explorer (KN-1610, KN-1613) Extra/Carrier (KN-1710, KN-1711, KN-1713) Ultra/Titan (KN-1810, KN-1811) Viva/Skipper (KN-1910, KN-1913) Omni DSL (KN-2011, KN-2012) Extra DSL/Carrier DSL/Skipper DSL (KN-2111, KN-2112) Runner 4G (KN-2210, KN-2211, KN-2212) Hero 4G (KN-2310, KN-2311) Hero DSL (KN-2410) Peak DSL (KN-2510) Giant (KN-2610) Peak (KN-2710) Orbiter Pro (KN-2810) Skipper 4G (KN-2910) Speedster (KN-3010, KN-3012) Buddy 4 (KN-3210, KN-3211) Buddy 5 (KN-3311) Buddy 6 (KN-3411) Voyager Pro (KN-3510) Hopper DSL (KN-3610) Sprinter (KN-3710) Hopper (KN-3810) Explorer 4G (KN-4910)

Release 4.0.2 (preview ⇨ stable): IP: removed interface subnet check when specifying static routes with a gateway address [NDM-2839] MWS: fixed "not found: interface security-level" error when configuring extenders [NDM-2868] MWS: fixed appearance of "duplicate" extenders in the device list (reported by @Vision) [NDM-2869] Ping-check: fixed operation when there are no configured DNS servers in the system (reported by @Eric750) [NDM-2784] Wi-Fi: fixed 802.11r fast transition in protected segments (reported by @dimon27254) [NDM-2774] Wi-Fi: fixed stack corruption when processing incoming WPA3-SAE-H2E connections [SYS-932]

Release 4.0.1 (preview): AFP: updated netatalk to 3.1.15 (reported by @saffe) [SYS-929] HTTP: fixed error 404 on redirection to legacy wizard/initial-setup (reported by @roman_sh) [NDM-2848] IPsec: fixed MPPE support for L2TP/IPsec [NDM-2859] IPv4: fixed blocking access to the "private" IP address of the device from "protected" segments [NDM-2744] Kernel: fixed watchdog reboots caused by incorrect operation of the system timer on KN-3810 [SYS-920] MWS: optimized firmware update installation procedure [NDM-2816] MWS: fixed "port 0 is busy" error when configuring extenders (reported by @BugM) [NDM-2852] Torrent: fixed "alternative speed" mode button (reported by @Ацкий Падонак) [NDM-2858]

Release 4.0.0 (preview): DNS: fixed disabling packet interception when filtering is disabled [NDM-2769] MWS: fixed STP operation for mt7915 devices [SYS-904] Web: fixed "GigabitEthernet1 is off-board" error when deleting wired connection via port 0 [NDM-2651] Web: fixed XSS on segment name [NWI-2715] Wi-Fi: fixed MCU crash on DFS-enabled devices [SYS-536] Wireguard: fixed restart of all tunnels when turning off one of them (reported by @dimon27254) [NDM-2800] Wireguard: fixed errors in HTTP server configuration after changing the interface security level [NDM-2832]

Release 4.0 Beta 3 (preview): IPv6: added ICMPv6 support to "ipv6 static" rules [NDM-2760]: ipv6 static (... | icmpv6) [interface] {mac} IPv6: implemented de-announcement of prefixes for backup connections [NDM-2805] Wi-Fi: fixed connection when changing the channel width from 80 to 20 MHz [SYS-893] PPE: fixed traffic accounting when multiple WAN connections are active (reported by @dimon27254) [SYS-880] Wireguard: fixed connection restart on NTP time synchronization (reported by @divinepredecessor) [NDM-2773]

Release 4.0 Beta 2 (preview): IPsec: fixed GRE/IPsec connection to Cisco IKEv2 endpoints [NDM-2789] LTE: fixed scanning of available mobile operators [NDM-2788] MWS: fixed adding new extenders when the Internet connection is not available [NDM-2594] PPE: fixed crash in the traffic shaper kernel module [NDM-2730] SIP: implemented sending keepalive messages to all SIP servers listed in the DNS SRV record [VOX-278]: nvox sip keepalive-extended USB: added support for MTS 81332FT modem [NDM-2786] Web: fixed positioning of elements when zooming the dashboard in Safari iOS 16 [NWI-2626] Web: fixed Wi-Fi monitor tooltip (reported by @dimon27254) [NWI-2648] Web: fixed a number of minor visual defects (reported by @dimon27254) [NWI-2675; NWI-2676]

Release 4.0 Beta 1 (preview): USB: added support for IoTMBB MM200-1 modem [NDM-2778]

Release 4.0 Beta 0.3 (pre-beta): IPsec: fixed local and remote IKEv2 proposal ID when GRE tunneling is used [NDM-2750] PPE: fixed system deadlock when processing traffic counters [SYS-860] Web: fixed sorting by "Channels" column on "Wi-Fi monitor" page (reported by @dimon27254) [NWI-2603] Web: fixed the display of the Fail-safe function dialogue window (reported by @dimon27254) [NWI-2635] Wi-Fi: fixed client reassociation without fast-transition [SYS-845]

Release 4.0 Beta 0.2 (pre-beta): DHCP: implemented "ip" format for custom options [NDM-2755]: ip dhcp pool {name} option {2..254} ip {address[,address]*} HTTP: implemented access to WebDAV via IPv6 [NDM-737] TSMB: fixed a bug that caused the device to reboot while writing a file [NDM-1738]

Release 4.0 Beta 0.1 (pre-beta): HTTP: restored HEAD method for *.html resources (reported by @merc75) [NDM-2748] PPE: fixed misclassification of registered traffic as unregistered in traffic accounting (reported by @dimon27254) [SYS-846] PPE: fixed traffic accounting for Wi-Fi hosts connected to en7528 [SYS-854] USB: added support for Fibocom L830-EB modem [NDM-2742]

Release 4.0 Alpha 20: MWS: implemented propagation of NTP settings to extenders [NDM-2508] PingCheck: fixed incompatibility with DNS-over-TLS and DNS-over-HTTPS (reported by @k19olegh68) [NDM-2739] SIP: increased the maximum value of the registration timeout to 86400 [VOX-268] USB: fixed using LTE modem as the only WAN connection with the default ping-check profile (reported by @Зухель) [NDM-2745] USB: discontinued support for Samsung GT-B3730 modem [NDM-2746] Web: fixed incorrect VLAN role assignment to ports [NWI-2593] Wi-Fi: fixed WDMA port blocking when changing the wireless driver settings under heavy load [SYS-841]

Release 4.0 Alpha 19: App: fixed mobile application connectivity with KeeneticOS API (reported by @ant76) [SYS-838] Cloud: fixed "resource deadlock avoided" error (reported by @ラル カ) [NDM-2736] DNS: fixed "unable to obtain addresses" error for DNS-over-TLS and DNS-over-HTTPS filtering (reported by @T@rkus) [NDM-2735] LTE: fixed "lock precedence violation" error when using Fibocom L850/L860 (reported by @k19olegh68) [NDM-2733] Wi-Fi: fixed a bug in mt7615 driver that caused incorrect RSSI levels of 5 GHz clients [NDM-2737]

Release 4.0 Alpha 18: EN7528: implemented QDMA Frame Engine recovery in case of an accidental halt [SYS-834] IPsec: fixed bandwidth limitation for IKEv2 connections [NDM-2537] IPv6: implemented binding of DNS addresses to interfaces [NDM-2664]: ipv6 name-server [{domain} [on {interface}]] NTCE: fixed asymmetric bandwidth limitation for hosts when IntelliQoS is enabled [SYS-836] PingCheck: changed initial state to negative, reduced initial check time [NDM-1837] UsbLte: fixed incompatibility with mobile operator Motiv KN-2211 KN-2910 KN-2311 [NDM-2717] UsbLte: fixed incompatibility with mobile operator A1 KN-2211 KN-2910 [NDM-2718] Wi-Fi: fixed re-association when roaming using PMKID [SYS-810] Wireguard: fixed the deletion of a static route after changing the underlying connection [NDM-2522]

Release 4.0 Alpha 17: Core: fixed traffic accounting for unregistered devices [NDM-2702] Core: fixed interface status handling in multipath policies [NDM-2706] Mobile: added support for LTE bands over 43 [NDM-1686] OpenVPN: fixed adding IPv4 routes with mask /32 [NDM-2686] PingCheck: fixed false-negative ICMP checks in the Megafon mobile network [NDM-2521] Web: fixed WISP configuration when selecting a network with mixed WPA1/WPA2-PSK security mode (reported by @dimon27254) [NWI-1544] Web: fixed "Clients isolation" checkbox in Safari (reported by @enterfaza) [NWI-2501] Web: fixed the display of “other devices” in the traffic monitor [NWI-2541] Web: added 2500 Mbps mode in KN-1811 port settings [NWI-2494] Web: added "UDP6", "TCP6" and "TLS6" to the "SIP transport" drop-down [NWI-2499]

Release 4.0 Alpha 16: DECT: added support for Panasonic KX-TGA681 handset [VOX-267] DSL: added the ability to set PVC MTU up to 1522 bytes [SYS-820] Ethernet: added the ability to set MTU up to 1514 bytes [SYS-812] IPv4: implemented flushing of active sessions when turning firewall rules on/off [NDM-2690] LTE: fixed modem firmware update procedure for KN-2211, KN-2311, KN-2910 [SYS-816] USB: fixed "web-api" authentication for ZTE MF79U modems (reported by @yuoras) [NDM-2694]

Release 4.0 Alpha 15: IPv4: corrected "ip alias" configuration to ensure NAT casting to the primary address [SYS-806] SIP: added IPv6 transport configuration [VOX-142]: nvox sip transport (... | udp6 | tcp6 | tls6) DECT: added support for handsets Gigaset E290HX and Gigaset 550HX [VOX-56] Gigaset AS69HX [VOX-73]

Release 4.0 Alpha 14: Chilli: increased packet queue length to avoid "packet dropped due to congestion" errors [NDM-2572] Chilli: added optional parameters to the login command [NDM-2679]: interface Chilli0 chilli login {mac} [username {username} password {password}] HTTP: added setting to change HTTPS server port [NDM-2670]: ip http ssl port {port} HTTP: added "robots.txt" to prevent indexing by search engines [NDM-2673] IPsec: fixed configuration error when creating a "crypto ike key" 96 characters long [NDM-2562] LTE: fixed disabling all bands on built-in modem of KN-2211, KN-2910, KN-2311 [NDM-2676] Web: fixed assignment of content filtering profile (reported by @Серов Николай) [NWI-1547] Wi-Fi: fixed reconnection of wireless clients to the access point with WPA3-PSK security [SYS-797]

Release 4.0 Alpha 13: Chilli: added a command for manual authorization of hotspot hosts [NDM-2417]: interface Chilli0 chilli login {mac} Core: fixed "lock precedence violation" errors (reported by @dimon27254) [NDM-2663] IPv4: implemented on-demand connection backup [NDM-2643]*: interface standby enable Mobile: fixed traffic counting in the "Data usage & limit" feature [NDM-2626] OpenVPN: fixed reading username and password from the <auth-user-pass> settings [NDM-2640] PPPoE: fixed traffic accounting when hardware PPE is enabled (reported by @dimon27254) [NDM-2580] Web: fixed "Partial data" tooltip contents in Safari and Firefox (reported by @enterfaza) [NWI-1527] Web: fixed "DNS servers" toggle for UsbLte interfaces (reported by @mogvai) [NWI-1542] Wi-Fi: fixed parsing site-survey security parameters for BSS that announce WPA2 and FT [SYS-796] * Connections configured in this way are disabled as long as the system has an active connection to the Internet with a higher priority.

Release 4.0 Alpha 12: App: fixed starting mobile application agent after firmware update [SYS-793] IPsec: fixed erroneous removal of DNS settings from IKEv1/IKEv2 VPN servers [NDM-2662] MWS: fixed the DHCP client startup on extenders connected over the wireless backhaul (reported by @PriSonerS61) [NDM-2655] OpenVPN: fixed detection of the interface state (reported by @i81) [NDM-2661] PPE: modified "no ppe hardware" behaviour to keep LAN to Wi-Fi acceleration [NDM-2660] Web: fixed "Select country..." popup in Safari (reported by @n1ck222) [NWI-1541] Web: fixed frequency band selector for UsbQmi and UsbLte modems (reported by @roman_sh) [NWI-1543] Wi-Fi: fixed the BSS ranking algorithm for WifiStation and MWS backhaul [SYS-782]