Jump to content

Changelog 4.2


MuKu

Recommended Posts

4.2 is an experimental branch based on Linux 4.9, see also changelog 4.1.

Supported models:

  • Giga (KN-1010)
  • Hero (KN-1011)
  • Start/Starter (KN-1110, KN-1111, KN-1112)
  • Lite (KN-1310)
  • Omni (KN-1410)
  • City (KN-1510)
  • Air/Explorer (KN-1610, KN-1613)
  • Extra/Carrier (KN-1710, KN-1711, KN-1713)
  • Ultra/Titan (KN-1810, KN-1811)
  • Viva/Skipper (KN-1910, KN-1913)
  • Omni DSL (KN-2011, KN-2012)
  • Extra DSL/Carrier DSL/Skipper DSL (KN-2111, KN-2112)
  • Runner 4G (KN-2210, KN-2211, KN-2212)
  • Hero 4G (KN-2310, KN-2311)
  • Hero DSL (KN-2410)
  • Peak DSL (KN-2510)
  • Giant (KN-2610)
  • Peak (KN-2710)
  • Orbiter Pro (KN-2810)
  • Skipper 4G (KN-2910)
  • Speedster (KN-3010, KN-3012)
  • Buddy 4 (KN-3210, KN-3211)
  • Buddy 5 (KN-3311)
  • Buddy 6 (KN-3411)
  • Voyager Pro (KN-3510)
  • Hopper DSL (KN-3610)
  • Sprinter (KN-3710)
  • Hopper (KN-3810)
  • Explorer 4G (KN-4910)
  • Thanks 4
  • Upvote 2
Link to comment
Share on other sites

Release 4.2 Alpha 1:

  • CLI: implemented "grep" filter for command output [NDM-3075]:
    • command … | grep [-A n] [-B n] [-C n] {pattern}
      • -A — number of lines to show after match
      • -B — number of lines to show before match
      • -C — nesting depth of XML context
  • DNAT: fixed port forwarding issues after Hotspot code refactoring (reported by @flybustier) [NDM-3127, NDM-3171]
  • DNS: fixed CloudFlare filter operation on networks without IPv6 support [NDM-3163]
  • Hotspot: implemented automatic host registration in the Home segment (enabled by default) [NDM-3101]:
    • ip hotspot auto-register disable — disable automatic registration
  • Hotspot: implemented segment-default policy for hosts (enabled by default) [NDM-2237]:
    • ip hotspot host conform
  • HTTP: implemented options to preserve Referer and Origin headers when proxying (reported by @Of Course I Still Love You) [NDM-3089]:
    • ip http proxy {name} preserve-referer
    • ip http proxy {name} preserve-origin
  • IPsec: enabled MOBIKE extension (RFC 4555) for Virtual IP IKEv2 client and server [NDM-3164]
  • NAT: fixed dropping of currently active sessions when "ip static" rules are disabled [NDM-3067]
  • Netflow: implemented support for IPv6 sessions [NDM-3109]
  • NTCE: implemented application filtering [NDM-3069]:
    • ntce filter profile {name} application {application} — add application to the profile
    • ntce filter profile {name} group {group} — add application group to the profile
    • ntce filter profile {name} type {type} — set profile type, which can be “permit” or “deny
    • ntce filter profile {name} description {description} — set profile description
    • ntce filter profile {name} schedule {schedule} — set profile schedule
    • ntce filter assign host {host} {profile} — assign profile to a registered host (MAC address)
    • ntce filter assign interface {interface} {profile} — assign profile to an interface
  • SIP: implemented filtering of incoming calls [VOX-271]:
    • nvox sip {id} whitelist {digitmap}
    • nvox sip {id} blacklist {digitmap}
    • nvox sip {id} enable-whitelist
    • nvox sip {id} enable-blacklist
    • show nvox sip {id} whitelist
    • show nvox sip {id} blacklist
  • SIP: implemented phonebook support [VOX-326]:
    • nvox phonebook import {filename} {mode} — import contacts in the vCard format
      • filename — *.vcf filename;
      • mode — import mode: replace, overwrite, extend, or duplicate.
    • nvox phonebook delete — delete all contacts from the phonebook
    • nvox sip {id} enable-whitelist-phonebook — enable phonebook as a whitelist filter for incoming calls
    • show nvox phonebook — display all phonebook records
  • VPN: implemented OpenConnect VPN server [NDM-3141]:
    • oc-server interface {interface} — bind OpenConnect server to an interface
    • oc-server pool-range {begin} {size} — set OpenConnect address pool
    • oc-server static-ip {name} {address} — set static IP address for a user
    • oc-server mtu {mtu} — set OpenConnect server MTU
    • oc-server multi-login — enable multiple connections with the same login
    • ip nat oc — enable NAT for OpenConnect clients
    • service oc-server — enable OpenConnect service
  • Web (beta): added a warning about possible connection loss when changing Wi-Fi settings (reported by @dimon27254) [NWI-3249]
  • Web (beta): added links to extenders on the "Client Lists" page (reported by @dimon27254) [NWI-3189]
  • Web (beta): displayed information about the active sessions count on the dashboard (reported by @dimon27254) [NWI-3326]
  • Web (beta): fixed "Air scanning" dialog on the "Mobile Broadband Internet Connections" page (reported by @dimon27254) [NWI-3193]
  • Web (beta): fixed alignment of input field names (reported by @eda100) [NWI-3239]
  • Web (beta): fixed components list filtering in the System settings (reported by @dimon27254) [NWI-3311]
  • Web (beta): fixed display of "Change Operating Mode" block in the dark theme (reported by @dimon27254) [NWI-3170]
  • Web (beta): fixed display of ACL rules on the Firewall page (reported by @keenet07) [NWI-3153]
  • Web (beta): fixed display of empty band group in "Mobile Broadband Internet Connection" settings (reported by @dimon27254) [NWI-3194]
  • Web (beta): fixed display of a large list of knowledge base articles (reported by @dimon27254) [NWI-3250]
  • Web (beta): fixed display of the chart on the Traffic monitor page (reported by @dimon27254) [NWI-3254]
  • Web (beta): fixed display of wired connections in the MWS table (reported by @dimon27254) [NWI-3214]
  • Web (beta): fixed filters in the MWS transition log (reported by @dimon27254) [NWI-3212]
  • Web (beta): fixed firewall rule editor (reported by @dimon27254) [NWI-3190]
  • Web (beta): fixed header alignment on the login page on mobile devices (reported by @dimon27254) [NWI-3240]
  • Web (beta): fixed minor bugs on the "Mobile Broadband Internet Connections" page (reported by @dimon27254) [NWI-3297]
  • Web (beta): fixed minor issues on the Application traffic analyzer page (reported by @dimon27254) [NWI-3163]
  • Web (beta): fixed saving the Data compression (CCP) checkbox value when PPTP connection is configured (reported by @T@rkus) [NWI-3296]
  • Web (beta): fixed style of select boxes on mobile devices (reported by @dimon27254) [NWI-3192]
  • Web (beta): fixed subnet validation in the firewall rule editor (reported by @dimon27254) [NWI-3213]
  • Web (beta): fixed visibility of Save/Cancel buttons in the System Component Options page (reported by @dimon27254) [NWI-3191]
  • Web (beta): fixed welcome pop-up message on mobile devices (reported by @dimon27254) [NWI-3312]
  • Web (beta): removed text shortening in pop-up dialogs on mobile devices (reported by @dimon27254) [NWI-3181]
  • Web (beta): removed the information "via" which node a device is connected when the "mws" component is not installed (reported by @dimon27254) [NWI-3334]
  • Web (beta): removed the unnecessary horizontal scroll from the block with network ports on mobile devices (reported by @dimon27254) [NWI-3169]
  • Web (beta): updated "Applications" card on the dashboard (reported by @keenet07) [NWI-3188]
  • Thanks 1
  • Upvote 3
Link to comment
Share on other sites

Release 4.2 Alpha 2:

  • HTTP: added read/send timeout configuration for proxies [NDM-3157]:
    • ip http proxy {name} timeout {timeout}
  • IPsec: fixed iOS L2TP/IPsec client disconnections under workload [NDM-3180]
  • Web (beta): added missing translations (reported by @dimon27254) [NWI-3361]
  • Web (beta): fixed appearance of HTML code as text (reported by @dimon27254) [NWI-3359]
  • Web (beta): fixed bugs occuring when the "Cloud-based content filtering and ad blocking" component is uninstalled (reported by @dimon27254) [NWI-3360]
  • Web (beta): fixed display of WISP connection details on the dashboard (reported by @dimon27254) [NWI-3339]
  • Web (beta): fixed notifications display in dark theme (reported by @dimon27254) [NWI-3358]
  • Wireguard: added Advanced Security Configuration parameters (requested by @UwU) [NDM-3202]:
    • interface {name} wireguard asc {jc} {jmin} {jmax} {s1} {s2} {h1} {h2} {h3} {h4}
  • Thanks 3
  • Upvote 1
Link to comment
Share on other sites

Release 4.2 Alpha 3:

  • IPsec: fixed access to the home network when "ip static" rules are configured on WAN IP aliases [NDM-3110]
  • UPnP: fixed priority of "ip static" rules over UPnP rules [NDM-3078]
  • USB: added support for Yota D071C modem [NDM-3218]
  • VPN: implemented OpenConnect client as a separate component [NDM-3207]
  • Web (beta): fixed appearance of the Ethernet ports in Firefox (reported by @Rootdiv) [NWI-3357]
  • Web (beta): fixed appearance of tooltips in the Wi-Fi Monitor (reported by @dimon27254) [NWI-3379]
  • Wi-Fi: implemented a workaround to avoid crashing of certain Realtek Wi-Fi drivers under Windows when passing non-PMF authentication [SYS-1131]
  • ZeroTier: fixed binding to the WAN address and inbound access to the service port (reported by @gaaronk) [NDM-3216]
  • Thanks 2
Link to comment
Share on other sites

Release 4.2 Alpha 4:

  • DNS: enabled HTTP/3 support for DoH (reported by @theGorgeous) [NDM-3229]
  • Hotspot: fixed interception of DNS queries in segments (reported by @ValdikSS) [NDM-3228]
  • IPsec: implemented aggressive IKEv1 mode for compatibility with FritzBox L2TP/IPsec server [NDM-3227]:
    • interface {name} ipsec aggressive
  • Web (beta): added arrows when multiple disc partitions exist in the USB Devices section (reported by @dimon27254) [NWI-3369]
  • Web (beta): fixed content of the "More Information" block on the "Client Lists" page (reported by @dimon27254) [NWI-3402]
  • Web (beta): fixed display of "Save"/"Cancel" buttons when changing Wi-Fi settings (reported by @dimon27254) [NWI-3392]
  • Web (beta): fixed display of shadows in the dark theme (reported by @dimon27254) [NWI-3389]
  • Web (beta): fixed flashing when tapping on folders in the File Manager on mobile devices [NWI-3371]
  • Web (beta): fixed some issues on the dashboard (reported by @dimon27254) [NWI-3323]
  • Web (beta): hidden IPv6 settings when IPv6 component is uninstalled (reported by @dimon27254) [NWI-3384]
  • Web (beta): improved display of signal metrics on the Mobile page (reported by @dimon27254) [NWI-3383]
  • Web (beta): made English names of firmware components used by default (reported by @dimon27254) [NWI-3364]
Link to comment
Share on other sites

Release 4.2 Alpha 5:

  • IPsec: fixed spurious EoIP/IPsec connections after device restart [NDM-2518]
  • IPv6: fixed adding static routes immediately after device restart and during VPN connection (reported by @mrGhotius) [NDM-3248]
  • PingCheck: fixed "upstream is very slow to respond" error [NDM-3244]
  • SSTP, OpenConnect: implemented "camouflage" mode (reported by @snark) [NDM-3257]:
    • oc-server camouflage
    • sstp-server camouflage
  • UPnP: fixed adding rules for hosts that are assigned to a multipath policy [NDM-3251]
  • Web (beta): added support for extender mode [NWI-1861]
  • Web (beta): fixed "statusLed" symbol on the Login page (reported by @dimon27254) [NWI-3363]
  • Web (beta): fixed SMS page display in dark theme (reported by @dimon27254) [NWI-3324]
  • Web (beta): fixed the height of the search query input (reported by @dimon27254) [NWI-3328]
  • Wireguard: fixed route to remote endpoint after device restart [NDM-3223]
  • Thanks 1
Link to comment
Share on other sites

Release 4.2 Alpha 6:

  • CIFS: improved memory usage on low-end devices (reported by @Кинетиковод) [NDM-2927]
  • Hotspot: added MAC address and registration time to the name of devices registered automatically [NDM-3253]
  • HTTP: fixed access to proxies configured as "security-level private" from the home network [NDM-3264]
  • HTTP: fixed X-Real-IP header filling when accessing proxy via KeenDNS [NDM-2214]
  • IPsec: added support for SHA512 HMAC on IKE Phase II [NDM-3269]:
    • crypto ipsec transform-set {name} hmac esp-sha512-hmac
  • IPsec: fixed occasional disconnects of IKEv2 tunnels [NDM-3059]
  • IPv6: fixed accidental reloading of NTCE engine on processing of certain IPv6 packets (reported by @dimon27254) [NDM-3235]
  • IPv6: improved host detection via EchoReq (reported by @tormozillo) [NDM-3265]
  • PingCheck: fixed hostname resolution in accordance with DoT/DoH domain restrictions (reported by @dimon27254) [NDM-3273]
  • USB: added SMS support for Fibocom FM350, Quectel RM500U [NDM-3267]
  • USB: added support for Quectel RM500U-GL modem [NDM-3203]
  • Web (beta): added support for OpenConnect to the "Other Connections" page [NWI-3406]
  • Web (beta): fixed blocking of the "Add Server" button when setting up DNS (reported by @keenet07) [NWI-3418]
  • Web (beta): fixed group operations on the "Connection Policies" page (reported by @AndreBA) [NWI-3404]
  • Web (beta): fixed indents in the "Client Lists" settings popup (reported by @dimon27254) [NWI-3403]
  • Web (beta): fixed Internet connection toggles on the dashboard (reported by @T@rkus) [NWI-3417]
  • Web (beta): fixed rule selection on the "Firewall" page (reported by @dimon27254) [NWI-3419]
  • Web (beta): fixed visual bugs in the dark theme in the "USB Devices" section [NWI-3375]
  • Web (beta): implemented "Call History" page [NWI-3398]
  • Wi-Fi: fixed setting of band-steering preference when upgrading from earlier stable versions [NDM-3241]
  • Thanks 1
Link to comment
Share on other sites

×
×
  • Create New...