Changelog 3.6

[ndm]

3.6 is a stable branch based on Linux 4.9, see also changelog 3.5.

Supported models:

• Giga (KN-1010)
• Start (KN-1110, KN-1111)
• Lite (KN-1310, KN-1311)
• Omni (KN-1410)
• City (KN-1510)
• Air/Explorer (KN-1610, KN-1611)
• Extra/Carrier (KN-1710, KN-1711)
• Ultra/Titan (KN-1810)
• Viva/Skipper (KN-1910)
• Omni DSL (KN-2011)
• Extra DSL/Carrier DSL (KN-2111)
• Runner 4G (KN-2210)
• Hero 4G (KN-2310)
• Hero DSL (KN-2410)
• Giant (KN-2610)
• Speedster (KN-3010)

[ndm]

Release 3.6 Alpha 1:

• MWS: enabled PMF security for backhaul connections
• MWS: implemented backhaul rescanning when a new extender is detected
• DynDNS: added OpenDNS and DNS-O-Matic profiles
• Web: added service class selection for registered devices:
  
  
   
• Web: added Auto-negotiation to Ethernet port settings:
  
  
   
• NTFS: fixed support for cluster size greater than 4kB (reported by @zorro888)
• NTFS: fixed write speed regression (reported by @Space Alex)

[ndm]

Release 3.6 Alpha 2:

• MWS: fixed extender Wi-Fi connection shutdown
• MWS: fixed removal of 192.168.1.3 entries from the device table
• HTTP: improved WebDAV compatibility with Far manager and netbox
• IPsec: implemented DHCP INFORM support in IKEv2 tunnels
• IPsec: fixed crash of the strongswan process (reported by @Vodkins)
• USB: fixed support for the modems:
  • Huawei E8278s-602
  • Alcatel IK40V f/w version 01008

[ndm]

Release 3.6 Alpha 3:

• IPsec: removed obsolete code, optimized footprint
• ACL: fixed removal of empty directories
• NTFS: fixed hiding of files with "hidden" and "system" attributes
• transmission: fixed error reading from the RPC socket (сообщил @AndreBA)
• disabled device reboot by short pressing of the RESET button

[ndm]

Release 3.6 Alpha 4:

• TSMB: fixed WSD discovery failure (reported by @Albram)
• TSMB: fixed access to shared directories via Playstation 2
• Web: unblocked Wi-Fi channel width configuration on extenders
• Web: fixed device list layout issues (reported by @AndreBA)
• Web: fixed display of UPnP rules  (reported by @r777ay)

[ndm]

Release 3.6 Alpha 5:

• MWS: fixed displaying the extender connection parameters (reported by @AndreBA)
• Wi-Fi: rolled back the mt7615 microcode to 20190612110649 (release 3.4) due to complaints about the 40/80 MHz bandwidth selection algorithm

[ndm]

Release 3.6 Alpha 6:

• Wi-Fi: fixed GTK-rekey procedure in the fast-transition mode
• PPPoE: implemented Ethernet link restart after multiple PADO timeouts
• Web: added Speed selector to the Host traffic monitor
• Web: added wired port description to the dashboard
• Web: added static IP address assignment for Wi-Fi system extenders
• Web: fixed display of MAC address for PPP connections on the Dashboard

[ndm]

Release 3.6 Alpha 7:

• PPPoE: fixed connection over VDSL (reported by @aarnet)
• Web: fixed writing files to a USB disk (reported by @rustrict)
• USB: fixed Sierra Wireless EM7455 modem support

[ndm]

Release 3.6 Alpha 8:

• MWS: implemented a unique MAC address of the device in additional network segments
• MWS: implemented sharing of timezone configuration with extenders
• DNS: fixed KeenDNS name resolution from the local network (reported by @Vladimir Dobromyslov)
• Web: improved the Host traffic monitor:
  • The total traffic not included in the Top-5 is shown in gray
  • Traffic from unregistered devices and multicast is visible separately only if it gets into the Top 5

 

[ndm]

Release 3.6 Alpha 9
Release 3.6 Alpha 10:

• MWS: fixed displaying extenders with enhanced MAC addresses (reported by @MDP)

[ndm]

Release 3.6 Alpha 11:

• KeenDNS moved to a separate component: ndns
  
   
• MWS: implemented STP debugging:
  • mws log stp {interface}
    • interface — Bridge interface name
• MWS: fixed FT on segments with "protected" security-level, such as Guest
• MWS: disabled STP on bridged OpenVPN and EoIP interfaces
• QMI: fixed a possible crash when accessing a SIM card
• OpenSSL: updated to 1.1.1i (fixed CVE-2020-1971)

[ndm]

Release 3.6 Alpha 12:

• Wi-Fi: implemented PMK-R1 pool for sustainable WPA3 FT roaming
• DSL: more detailed diagnostics, test run time increased to 7 minutes
• LED: inverted power down schedule:
  • system led shutdown {mode} schedule {schedule} — obsolete setting, do not use
  • system led power schedule {schedule} — LED power up schedule
  • system led power shutdown (front | back | all) — LED shutdown mode
• HTTP: implemented Host header enforcement:
  • ip http proxy {name} force-host {force-host}

[ndm]

Release 3.6 Alpha 13:

• MWS: implemented limiting of a working zone for wireless devices:
  • mws zone {mac} {cid} — limit the mac device roaming zone to the cid node
    
    
     
• DSL: updated the DMT firmware version to 5.10.6.2
• Web: added LED operation mode and schedule settings
  
  
   
• HTTP: fixed "force-host: not enough arguments" error (reported @AndreBA)
• LTE: fixed display of more than two carriers (reported @r13)

[ndm]

Release 3.6 Alpha 14:

• Web: fixed activation of the Initial setup wizard triggered by UPnP (reported by @3-50)
• Web: fixed Acquire/Revisit button appearance (reported by @Unfaithful)

[ndm]

Release 3.6 Alpha 15:

• Web: fixed configuration of port forwarding rules (reported by @snark)
• DSL: fixed initialization of the system timer

[ndm]

Release 3.6 Alpha 16:

• IPsec: implemented EAP-PEAP authentication for IKEv2 client and server
• IPsec: enabled aes256-sha256-modp2048 for compatibility with Proton VPN (reported by @cemoka)
• IPv6: improved IPv6 address detection for automatic whitelisting (reported by @avn)
• HTTP: fixed writing small files (less than 64 KB) via WebDAV (reported by @A. Okan Dagistan)
• USB: fixed spontaneous reboots when using Huawei CDC NCM modems
• LTE: fixed use of QMI connections in additional "ip policy" profiles
• DSL: fixed blocking of the packet queue when G.Vector is active
• DSL: added versions of internal components to the "Diagnostics" page
  
   

[ndm]

Release 3.6 Beta 0 (pre-beta):

• LTE: implemented "Data usage & limit" for KN-2210, KN-2310
  • interface {name} traffic-counter enable — enable traffic accounting
  • interface {name} traffic-counter limit {value} {unit} — set limit in MB, GB, or TB
  • interface {name} traffic-counter threshold {threshold} — set warning level in percentage
  • interface {name} traffic-counter monthly {day-of-month} — set the day of the month for automatic counter reset
  • interface {name} traffic-counter action {limit | threshold} sms-alert phone {phone} — set phone for SMS alerting
  • interface {name} traffic-counter action {limit | threshold} sms-alert message {message} — set SMS text
  • interface {name} traffic-counter action {limit} disconnect — disconnect when the limit is reached
  • interface {name} traffic-counter set {value} {unit} — adjust the counter manually
  • show interface {name} traffic-counter — view the counter status
• DNS: added commands for ignoring dynamic name servers:
  • interface {name} ipsec no name-servers
  • interface {name} mobile no name-servers
  • interface {name} openvpn no name-servers
• HTTP: added X-Forwarded-Proto and X-Forwarded-Port headers (requested by @Zzub)
• IPsec: added "strong-aead" (aes256gcm-prfsha384) and "strong-aead-pfs" (aes256gcm-prfsha384-ecp384) modes
• IPsec: fixed handling of the DHCP option 249 by the L2TP client
• QMI: added support for modems:
  • Alcatel L100V
  • DW5821e (T77W968)

[ndm]

Release 3.6 Beta 1 (official beta):

• QMI: fixed processing of concatenated SMS messages (reported by @glogjet)

[ndm]

Release 3.6 Beta 2 (official beta):

• TSMB: fixed possible crash in processing non-unicode TREE_CONNECT_ANDX
• TSMB: fixed possible crash when renaming files and shares
• Web: fixed Acquire button (reported by @Unfaithful)

[ndm]

Release 3.6 Beta 3 (official beta):

• fixed a bug with mounting an exFAT partition formatted in the MiniTool Partition Wizard
• MWS: improved a backhaul access point selection algorithm
• Web: added extra diagnostics of the DSL connection

[ndm]

Release 3.6.0 (official beta):

• fixed configuration output that exceeds the size of 65639 bytes
• DNS: improved display of the DNS-servers list with multiple internet connections
• MWS: fixed traffic forwarding between mt7613-based wireless extenders (KN-1611, KN-1711, KN-3010)

[ndm]

Release 3.6.1 (official stable):

• mDNS: fixed hostname conflict warning
• Web: fixed internet connection policy binding
• Web: increased the maximum wireless ACL size to 222 records

[ndm]

Release 3.6.2 (official beta → stable):

• USB: fixed connection via HTTP-based Huawei modems

To keep track of the experimental branch, subscribe to the Changelog 3.7

[ndm]

Release 3.6.3 (official beta → stable):

• TSMB: fixed STATUS_LOGON_FAILURE response [NDMS-1303]
• TSMB: enabled SMB_COM_SEEK call without SMB_FLAGS2_UNICODE [NDMS-1531]
• OpenSSL: updated to 1.1.1k:
  • CVE-2021-3449
  • CVE-2021-3450

 

Release 3.6.4 (official beta):

• DNS: fixed internet filters after reconnecting to the internet [NDMS-1420, NDMS-1485]
• DLNA: fixed error: "Exceeded max connections [50], not forking" [NDMS-227]
• Transmission: fixed Web interface localization [NDMS-1541]
• OpenVPN: fixed security issue CVE-2020-15078

[ndm]

Release 3.6.5 (official beta):

• Wi-Fi: fixed all confirmed vulnerabilities from the FragAttacks series:
  • CVE-2020-24586
  • CVE-2020-24587
  • CVE-2020-24588
  • CVE-2020-26139
  • CVE-2020-26140
  • CVE-2020-26146
  • CVE-2020-26147
• USB: fixed "connected" status when ping-check is disabled [NDM-572]

[ndm]

Release 3.6.6 (official stable)

• No changes

[ndm]

Release 3.6.8 (official stable):

• USB: added support for modems:
  • Telit LN960 [NDM-1694]
  • Telit FN980m [NDM-1693]
  • Telit LE910C4 [NDM-1714]
  • Quectel EM160R-GL [NDMS-1594]
• Wi-Fi: added CVE-2020-26140 fixes for Keenetic GIga (KN-1010), Ultra/Titan (KN-1810), Viva/Skipper (KN-1910), Hero 4G (KN-2310), Hero DSL (KN-2410), Peak DSL (KN-2510), Giant (KN-2610)
• Wi-Fi: fixed false-positive Band Steering on RSSI -127 for Keenetic Giga (KN-1011) [SYS-292]
• Curl: fixed vulnerabilities:
  • CVE-2021-22897
  • CVE-2021-22898
  • CVE-2021-22901

[ndm]

Release 3.6.10 (preview):

• MWS: fixed errors related to DPN acceptance in the extender acquisition procedure [NDM-1775]
• SSTP: fixed drop in the VPN server throughput during active data transfer [NDM-1777]
• USB: added support for Telit LN960 modem [NDM-1694]