Changes:
- fixed router lockup on leap seconds with installed ntp package;
- ccr - made hardware watchdog work again (was broken since v6.26);
- console - allow users with 'policy' policy to change script owner;
- icmp - use receive interface address when responding with icmp errors;
- ipsec - fail ph2 negotiation when initiator proposed key length does not match proposal configuration;
- timezone - updated timezone information to 2015e release;
- ssh - added option '/ip ssh strong-crypto'
- wireless - improve ac radio coexistence with other wireless clients;
- console - values of S~.id~, S~.nextid~ and S~.dead~ are available for use in 'print where' expressions;
- console - ':execute' command now accepts 'file=' parameter and writes script output to specified file;
- console - ':execute' command now accepts script source in ~{}~ braces, like '/system scripts add source=' does;
- console - ':execute' command now returns internal number of running job, that can be used to check and stop execution.
- console - firewall 'print' commands now show all entries including dynamic, 'all' argument now has no effect;
- ipsec - increase replay window to 128;
- fixed file transfer on devices with large RAM memory;
- pptp - fixed ~encryption got out of sync~ problem;
- ppp - disable vj tcp header compression;
- api - reduce api tcp connection keepalive delay to 30 seconds, will timeout idle connections in about 5 minutes;
- pptp & l2tp & sstp client: support the case were server issues its tunnel ip address the same as its public one;
- removed wireless package from routeros bundle package, new wireless-fp is left in place;
- pptp & l2tp client: when adding default route, add special exception route for a tunnel itself (no need to add it manually anymore);
- improved connection list: added connection packet/byte counters, added separate counters for fasttrack, added current rate display, added flag whether connection is fasttracked/srcnated/dstnated, removed 2048 connection entry limit;
- tunnels - eoip, eoipv6, gre,gre6, ipip, ipipv6, 6to4 tunnels have new property - ipsec-secret - for easy setup of ipsec encryption and authentication;
- firewall - added ipsec-policy matcher to check whether packet was/will be ipsec processed or not;
- possibility to disable route cache - improves DDOS attack handling performance up to 2x (note that ipv4 fastpath depends on route cache);
- fasttrack - added dummy firewall rule in filter and mangle tables to show packets/bytes that get processed in fasttrack and bypass firewall;
- fastpath - vlan interfaces support fastpath;
- fastpath - partial support for bonding interfaces (rx only);
- fastpath - vrrp interfaces support fastpath;
- fixed memory leak on CCR devices (introduced in 6.28);
About Router Firmware:
Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn’t either newer or matching this release.
Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.
In theory, these steps shouldn’t be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don’t always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.
If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.
If you’re looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don’t power off the router or use its buttons during the installation, if you wish avoid any malfunctions.
If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don’t miss the update that will improve your device.
Bình luận không