Verze 6.33

[goblajz]

What's new in 6.33 (2015-Nov-06 12:49):

*) dns - initial fix for situation when dynamic dns servers could disappear;
*) winbox - dropped support for winbox v3.0beta and v3.0rc (use winbox v3.0);
*) dhcpv6 - various improvement and fixes for dhcp-pd client and ippool6;
*) defconf - fixed rare situation where configuration was only partially loaded;
*) net - fix possible never ending loop when bad CDP discovery packet is received;
*) log - make default disk file name to reside in flash dir if it exists;
*) romon - change port list to be not ordered in export;
*) capsman - limit number of simultaneous DTLS handshakes;
*) capsman - fixed memory leak on CAP joining CAPsMAN when ssld is used;
*) winbox - added allow-fast-path to eoip, gre & ipip;
*) winbox - do not show power-cycle properties on non poe ports;
*) l2tp: implemented PPPoE over L2TP in LNS mode, RFC3817;
*) webfig - some of the setting were shifted to the right;
*) packages - allow to reinstall from bundle to separate packages & vice versa;
*) packages - prefer out of bundle packages when both of them are installed;
*) packages - fix a problem of upgrading bundle package to non bundled ones;
*) ipsec - force flow cache validation once in 1h;
*) winbox - make sure that all setting names get shown in full;
*) winbox - added poe power-cycle-ping settings to ethernet interfaces;
*) ppp - handle properly case were ppp client is given same address for local & remote end;
*) winbox - added vlan-mode & vlan-id to virtual-ap interface;
*) winbox - added timeout column to ipv6 address lists;
*) winbox - show SFP Tx/Rx Power properly;
*) winbox - added min-links to bonding interface;
*) winbox - do not show health menu on RB951Ui-2HnD;
*) winbox - added support for Login-Timeout & MAC-Auth-Mode in hotspot;
*) cerm - added option to disable crl download in '/certificate settings';
*) winbox - make user ssh key import work again;
*) webfig - make "Copy to Access List" work in CAPsMAN Registration Table;
*) userman - fix report generation problem which could result in some users being skipped from it;
*) winbox - fix to allow cpu-port as mirror-target
*) proxy - error.html parsing enhancement to improve performance
*) CCR1072 - improve ether1 performance under heavy load
*) routerboard - indicate RouterBOOT type in /system routerboard print;
*) mpls - properly use mpls mtu for routes;
*) cerm - fix key description for signed certificates;
*) trafflow - report flow addresses in v1 and v5 without NAT awareness;
*) hotspot - add mac-auth-mode setting for mac-as-passwd option;
*) hotspot - add login-timeout setting to force login for unauth hosts;
*) auto-upgrade - fixed auto upgrade for smipsbe;
*) dns - do not create duplicate entries for same dynamic dns server addresses;
*) ipsec - fix set on multiple policies which could result in adding non existent dynamic policies to the list;
*) email - allow server to be specified as fqdn which is resolved on each send;
*) fastpath - eoip,gre,ipip tunnels support fastpath (new per tunnel setting "allow-fast-path");
*) ppp, pptp, l2tp, pppoe - fix ppp compression related crashes;
*) cerm - also accept downloaded CRLs in PEM format;
*) userman - added 'history clear' to allow flushing undo history, which may take up significant amount of memory for huge databases with hundreds of users;
*) health - fix voltage for CRS109, CRS112 and CRS210 if powered from external adapter;
*) userman - added phone number support to signup form;
*) ip pool6 - try to acquire the same prefix if info matches recently freed;
*) ipsec - fix transport mode ph2 ID ports when policy selects specific ip protocol on initiator;
*) ipsec - use local-address for phase 1 matching and initiation;
*) route - fixed crash on removing route that was aggregated;
*) ipsec - fix replay window, was accidentally disabled since version 6.30;
*) ssh - allow host key import/export;
*) ssh - use 2048bit RSA host key when strong-crypto enabled;
*) ssh - support RSA keys for user authentication;
*) wlan - improved WMM-PowerSave support in wireless-cm2 package;
*) pptp & l2tp - fixed problem where android client could not connect if both dns names were not provided (was broken since v6.30);
*) auto-upgrade - added ability to select which versions to select when upgrading;
*) quickset - fixed HomeAP mode;
*) lte - improved modem identification to better support multiple identical modems;
*) snmp - fix system scripts table;
*) tunnels - eoip,eoipv6,gre,gre6,ipip,ipipv6,6to4 tunnels now support dns name as remote address;
*) fastpath - active mac-winbox or mac-telnet session no longer suspends fastpath;
*) fastpath - added per interface fastpath counters;
*) fastpath - added trafflow support in basic ipv4 and fasttrack ipv4 fastpath;
*) ppp - added on-up & on-down scripts to ppp profile;
*) winbox - allow to specify dns name in all the tunnels;
*) pppoe - added support for MTU > 1492 on PPPoE;
*) cerm - fix scep server certificate-reply degenerate PKCS#7 signed-data content;
*) ppp-client - added default channels for Alcatel OneTouch L100V;
*) defconf - fix for boards that had bridge with only wlan ports;
*) ovpn: support OpenWRT ovpn clients (or any other with enable-small option enabled);
*) cerm - use certificate file name for imported cert name;
*) fetch - fixed error message when error code 200 was received;
*) cerm - rebuild crl for local ca if crl file does not exist;
*) winbox - make directed broadcasts work for neighbor discovery;
*) upnp: automatically adjust mappings to new external ip change;
*) ppp - added ppp interface to upnp internals/externals if requested;
*) ppp - when adding ipv6 default route use user provided distance;
*) userman - allow to correctly enable CoA on router;
*) cerm - show crl nextupdate time;
*) ppp - added CoA support to PPPoE, PPTP & L2TP (Mikrotik-Recv-Limit, Mikrotik-Xmit-Limit, Mikrotik-Rate-Limit, Ascend-Data-Rate, Ascend-XMit-Rate, Session-Timeout);
*) ppp - added new option under "ppp aaa" - "use-circuit-id-in-nas-port-id";
*) userman - refresh active sessions/users view dynamically;
*) package - added version tag and show everywhere alongside of version number;
*) wlan - improved 802.11 protocol single connection TCP performance for ac chipset with cm2 package.

[goblajz]

Snad se konečně naučili psát changelogy.

[honzam]

Vypadá to že jo

[Dalibor Toman]

akorat v tom changelogu chybi cokoliv co by opravnovalo to, ze neni setrideny podle kategorii/subsystemu. Takhle neco konkretniho najit znamena prolezt vsechny radky ...

[okoun]

a hlavně slovíčko fix by se snad vůbec nemělo psát ne? jedná se přeci jen o novinky když to není x.x.x

[michnzee]

Tolik řádků snad ještě ani nepamatuju

[the.max]

Teeeeda, oni snad sehnali další kodéry, že je tam tolik věcí dodělanejch a opravenejch. Teď ještě bude zajímavé, kolik dalších nových bugů přidali.

A pořád mi tam chybí nové jádro s podporou nových Inteláckých síťovek na x86. Voni snad na tu x86 schválně prdí, protože pokud by tam přidali ty nové síťovky, tak by asi lidi přestali kupovat ty předražený CCRka.

[Dalibor Toman]

a hlavně slovíčko fix by se snad vůbec nemělo psát ne? jedná se přeci jen o novinky když to není x.x.x

to se do changelogu dostalo, protoze se neco opravovalo. Podle Tebe by meli po te co se rozhodnou, ze dane RC uz je tak kvalitni, ze z nej udelaji current train verzi ty zminky z changelogu o opravach vymazat?

Jedine co mi jeste vadi je, ze RC maji kumulovany changelog - pak clovek nevi co se mezi RC verzemi opravovalo (pokud nema ulozeny stary changelog). Az pak v currrent to muzou napsat jako zmeny od posledni verze pekne pohromade.

[okoun]

nu já bych začal vyrávět RC až bude poslední verze v bugfixu minimálně .2

[Dalibor Toman]

a do ty doby se novy featury nebudou implementovat? Asi ne , ze...

[ludvik]

Přišel jste už někdo na to, proč se to snaží každých pár vteřin komunikovat s 169.254.169.254:80? Ani na fóru jsem zatím nic pořádného nenašel ... Asi to bude ta jedna potřebná věc, která se musí opravit v bugfix verzi.

Kód: Vybrat vše

x.x.x.x - - [09/Nov/2015:00:12:04 +0100] "GET /latest/meta-data/public-keys/0/openssh-key HTTP/1.1" 200 604 "-" "-"
x.x.x.x - - [09/Nov/2015:00:12:05 +0100] "GET /latest/meta-data/hostname HTTP/1.1" 200 230 "-" "-"


[honzam]

Thank you for your reports. We managed to reproduce this issue and are trying to make a fix as soon as possible.

As a temporary workaround you can use this solution:
/ip route add distance=1 dst-address=169.254.0.0/16 type=blackhole

[Laibir]

Jede vám někomu tahle verze bez problému na starších RBčkách? Typu 532A? Po přepnutí balíčku wireless-fp na wireless-cm2 to už nenajelo. Občas naběhne, tak jsem alespoň stihl backup.
Možná je to jen HW chyba, ale nechci zatím dávat na další MK, když si to nějak neověřím.

Díky

[honzam]

rb532 s balíčkem cm2.
Uptime 7dní. Používám to jako domácí wifi

[Selič]

Taky RB532A po více než hodině provozu se sekne a watchdog nezabere. Po odpojení napájení najede jako by se nic nedělo.
Zatím jsem dal downgrade na 6.28 a jede dál.
Je to jen vykrejvač na samotě u lesa pro chalupáře - pouze balíčky advanced tool, dhcp, system, security, wireless.