Описание | What's new in 6.33rc25: - ipsec - fix set on multiple policies which could result in adding non existent dynamic policies to the list; - email - allow server to be specified as fqdn which is resolved on each send; - fastpath - eoip,gre,ipip tunnels support fastpath (new per tunnel setting "allow-fast-path"); - ppp, pptp, l2tp, pppoe - fix ppp compression related crashes; - certificate - fix scep server certificate-reply degenerate PKCS7 signed-data content; - certificate - also accept downloaded CRLs in PEM format; - userman - added 'history clear' to allow flushing undo history, which may take up significant amount of memory for huge databases with hundreds of users; - userman - refresh active user/session view when opened; - health - fix voltage for CRS109, CRS112 and CRS210 if powered from external adapter - userman - added phone number support to signup form; - ip pool6 - try to acquire the same prefix if info matches recently freed; - ipsec - fix transport mode ph2 ID ports when policy selects specific ip protocol on initiator; - ipsec - use local-address for phase 1 matching and initiation; - pptp, l2tp, sstp, pppoe clients - fixed problem where they failed to connect at startup and only reboot helped; - route - fixed crash on removing route that was aggregated; - ipsec - fix replay window, was accidently disabled since version 6.30; - ssh - allow host key import/export; - ssh - use 2048bit RSA host key when strong-crypto enabled; - ssh - support RSA keys for user authentication; - wireless - improved WMM-PowerSave support in wireless-cm2 package; - pptp & l2tp - fixed problem where android client could not connect if both dns names were not provided (was broken since v6.30); - auto upgrade - added ability to select which versions to select when upgrading; - quickset - fixed HomeAP mode; - lte - improved modem identification to better support multiple identical modems; - snmp - fix system scripts table; - tunnels - eoip,eoipv6,gre,gre6,ipip,ipipv6,6to4 tunnels now support dns name as remote address; - fastpath - active macwinbox or mactelnet session no longer suspends fastpath; - fastpath - added per interface fastpath counters; - fastpath - added trafflow support in basic ipv4 and fasttrack ipv4 fastpaths; - quickset - create proper firewall rules when PPPoE is used for address acquisition; - ppp - added on-up & on-down scripts to ppp profile - sstp - fixed kernel crash when other party started to fragment ppp packets in the middle; - ippool6 - optimize same prefix acquisition; - winbox - Shift+Ins & Shift+Del did not work in multi entry fields; - winbox - allow to specify ipv6 address in traffic flow target; - winbox - allow to specify eap-radius-accounting in CAPsMAN; - winbox - allow to specify dns name in all the tunnels; - winbox - allow to enter dns name in email server; - pppoe - added support for MTU > 1492 on PPPoE; - email - allow server to be specified as fqdn which is resolved on each send; - cerm - fix scep server certificate-reply degenerate PKCS7 signed-data content; - ups - fix console oid print; - ppp-client - added default channels for Alcatel OneTouch L100V; - tunnel - fix loopback keepalives on gre and ipip; - pptp,l2tp,sstp,pppoe: fixed bug 7586: do not send data packets before we have negotiated connection with other side (happens on dial-on-demand interfaces), this brakes when connecting to other party servers; - email - allow server to be specified as fqdn which is resolved on each send; - defconf - fix for boards that had bridge with only wlan ports; - pptp,l2tp,sstp - make it work when add-default-route & dial-on-demand both are enabled; - nv2 - fixed kernel failure with frame size accounting; - ovpn: support OpenWRT ovpn clients (or any other with enable-small option enabled); - cerm - use certificate file name for imported cert name; - ovpn client - fixed crash when ovpn didn't receive its ip address; - lcd - fix slideshow for CCR1072, and possible sign issues for temperatures; - winbox - make console notice correct screen size; - fetch - fixed error message when error code 200 was received; - winbox - fixed context menu actions to apply to all selected items; - ssh - allow to specify pass as argument for private key import - winbox - refetch hotspot walled garden hit counter; - winbox - added client-connections & server-connections to web proxy status; - cerm - rebuild crl for local ca if crl file does not exist; - winbox - make directed broadcasts work for neighbor discovery; - upnp: automatically adjust mappings to new external ip change;; - bgp - specific BGP networks were c |