Search changelog entries
| Component | Change |
|---|---|
| general | trafflow: fix in-interface reporting in flow; |
| general | fixed :execute file= |
| general | bonding: fix arp monitoring in active backup mode |
| ipsec | disallow changing dynamic peer; |
| lte | Fixes bug that causes Sierra Wireless modems with LTE interface to change interface name; |
| quickset | fixed HomeAP mode; |
| quickset | crashes introduced in 6.30 fixed |
| Component | Change |
|---|---|
| api | reduce api tcp connection keepalive delay to 30 seconds, will timeout idle connections in about 5 minutes; |
| ccr | made hardware watchdog work again (was broken since v6.26); |
| console | allow users with 'policy' policy to change script owner; |
| console | values of $".id", $".nextid" and $".dead" are avaliable for use in 'print where' expressions; |
| console | ':execute' command now accepts script source in "{}" braces, like '/system scripts add source=' does; |
| console | ':execute' command now returns internal number of running job, that can be used to check and stop execution. For example: :local j [:execute {/interface print follow where [:log info "$name"]}] :delay 10s :do { /system script job remove $j } on-error={} |
| console | firewall 'print' commands now show all entries including dynamic, 'all' argument now has no effect; |
| fix sending multiple consecutive emails; | |
| fastpath | vlan interfaces support fastpath; |
| fastpath | partial support for bonding interfaces (rx only); |
| fastpath | vrrp interfaces support fastpath; |
| fasttrack | added dummy firewall rule in filter and mangle tables to show packets/bytes that get processed in fasttrack and bypass firewall; |
| firewall | sip helper improved, large packets no longer dropped; |
| firewall | added ipsec-policy matcher to check wheather packet was/will be ipsec processed or not; |
| general | fixed encryption 'out of order' problem on SMP systems; |
| general | fixed router lockup on leap seconds with installed ntp package; |
| general | fixed file transfer on devices with large RAM memory; |
| general | pptp & l2tp & sstp client: support the case were server issues its tunnel ip address the same as its public one; |
| general | removed wireless package from routeros bundle package, new wireless-fp is left in place and wireless-cm2 added as option; |
| general | pptp & l2tp client: when adding default route, add special exception route for a tunnel itself (no need to add it manually anymore); |
| general | improved connection list: added connection packet/byte counters, added separate counters for fasttrack, added current rate display, added flag wheather connection is fasttracked/srcnated/dstnated, removed 2048 connection entry limit; |
| general | fixed memory leak on CCR devices (introduced in 6.28); |
| icmp | use receive interface address when responding with icmp errors; |
| ipsec | fail ph2 negitioation when initiator proposed key length does not match proposal configuration; |
| ipsec | increase replay window to 128; |
| lte | improved modem identification to better support multiple identical modems; |
| possibility to disable route cache | improves DDOS attack handling performance up to 2x (note that ipv4 fastpath depends on route cache); |
| ppp | disable vj tcp header compression; |
| pptp | fixed "encryption got out of sync" problem; |
| snmp | fix system scripts table; |
| ssh | added option '/ip ssh stong-crypto' |
| timezone | updated timezone information to 2015e release; |
| tunnels | eoip, eoipv6, gre,gre6, ipip, ipipv6, 6to4 tunnels have new property - ipsec-secret - for easy setup of ipsec encryption and authentication; |
| wireless | added WMM power save suport for mobile devices; |
| wireless | improve ac radio coexistence with other wireless clients, optimized transmit times to not interfere with other devices; |
| Component | Change |
|---|---|
| added fastpath support for bridge interfaces | packets received and transmitted on bridge interface can go fastpath (previously only bridge forwarded packets could go fastpath); |
| console | allow '-' characters in unknown command argument names; |
| store hostname for consistency; | |
| firewall | fixed sector writes rising starting since 6.28; |
| general | added ~fasttrack-connection~ firewall action in filter/mangle tables for marking connections as fasttrack; |
| general | trafflow: add natted addrs/ports to ipv4 flow info; |
| general | tilegx: enable autoneg for sfp ports in netinstall; |
| general | fixed async. ppp server; |
| general | queue tree: some queues would stop working after some configuration changes; |
| general | fixed CRS226 10G ports could lose link (introduced in 6.28); |
| general | fixed FREAK vulnerability in SSL & TLS; |
| general | improved support for new hEX lite; |
| health | fix voltage on some RB4xx; |
| ipsec | allow to specify custom IP address for my_id parameter; |
| ipv4 fasttrack fastpath | accelerates connection tracking and nat for marked connections (more than 5x performance improvement compared to regular slow path conntrack/nat) - currently limited to TCP/UDP only; |
| mesh | fixed kernel crash; |
| ovpn server | use subnet topology in ip mode if netmask is provided (makes android & ios clients work); |
| packets now can go half-fastpath | if input interface supports fastpath and packet gets forwarded in fastpath but output interface does not support fastpath or has interface queue other than only-hw-queue packet gets converted to slow path only at the dst interface transmit time; |
| romon | fix 100% CPU usage; |
| romon | moved under tools menu in console; |
| snmp | fix rare bug when some OIDs where skipped; |
| ssh | added aes-ctr cipher support; |
| ssh server | use custom generated DH primes when possible; |
| sstp | fixed router lockup. |
| vrrp | do not reset interface when no interesting config changes; |
| Component | Change |
|---|---|
| ar9888 | fixed crash when hw reports invalid rate; |
| cm2 | fixed capsman v2 100% CPU and other stability improvements; |
| console | fixed "in" operator in console; |
| console | make "/system package update print" work again. |
| dhcpv4 client | it is now possible to unset default clientid and hostname options |
| increase server greeting timeout to 60s; | |
| fixed tunnels | could crash when clamp-tcp-mss was enabled; |
| general | added support for SiS 190/191 PCI Ethernet adapter; |
| general | made metarouter work on boards with 802.11ac support or usb LTE; |
| general | make fat32 disk formatting support disks bigger than 134GiB; |
| general | added basic counters for ipv4/bridge fast path, also show status wether fast path is active at all; |
| general | initial RoMon (Router Management Overlay Network) support added. |
| lte | ZTE MF823 may loose configuration; |
| pppoe over eoip | fixed crash with large packets; |
| route | using ldp could cause connected routes with invalid interface nexthop; |
| sstp server | allow ADH only when no certificate set; |
| tile | rare situation when CCR devices failed to auto-negotiate ethernet link (introduced in v6.25); |
| tilegx | fixed memory leak when queue settings are changed; |
| timezone | updated timezone information to 2015b release; |
| trafflow: | fixed crash on disable; |
| userman | update paypal root certificate; |