SoftHub

Changes:

- Updated OpenSSL to 1.0.1q.
- Updated OpenVPN to 2.3.9.
- Updated dropbear SSH to 2015.71.
- Updated miniupnpd to 1.9.20151219.
- Updated usb-modeswitch to 2.2.6, updated usb-modeswitch-data up to 2015-11-01.
- Linux kernel: fixed IPv6 fragmentation issue introduced on the 086 build.
- Linux kernel: fixed memory corruption in PPPoE driver introduced on the 095 build.
- Linux kernel: more upstream updates.
- HW_NAT: dynamic select FoE 64/80 on runtime, use FoE 80 only IPv6 offload enabled.
- HW_NAT: removed FoE bind limits on HWNATv2 hardware (MT7620/MT7621).
- Control: fixed L2TP client regression introduced on the 097 build.
- Scripts: migrated to Entware-ng repository (thanks to Alexander Ryzhov).
- WebUI: removed bogus safe login logic for AP mode.

ATTENTION:

- After the first upgrade from official firmware, all settings will be erased. Do not load settings (CFG file) from official firmware!!!
- After upgrade from any official ASUS firmware, WAN MAC address for RT-N14U/N11P is dynamically changed (not permanent) in last octet. Please check MAC binding from your ISP.

These features are NO LONGER AVAILABLE:

- WPS/WSC (completely disabled due to the serious security hole).
- ASUS Download Master is no longer supported. It was replaced by Transmission.

After upgrade to 3.X.3.8-085 (and higher) from any previous builds, please:

- Clear browser cache to properly render WebUI pages.
- Sync OpenVPN client and server settings with new controls.
- Update region timezone (for Russia only).
- Remember that the manual NVRAM reset is not required.

After manual NVRAM reset:

- Both Wireless AP security is WPA2-Personal with pre-shared key 1234567890 by default.
- HTTP and Telnet/SSH login:passw is admin:admin by default.

Base build Description:

[x] Linux kernel-3.0.101+ (with upstream backports).
[x] IPv6 full support (native and SIT tunnels).
[x] NTFS filesystem (Paragon ufsd 8.6 for ASUS).
[x] FAT16/FAT32/exFAT filesystem.
[x] EXT4/EXT3/EXT2 filesystem (EXT3/EXT2 via EXT4 driver).
[x] FUSE kernel modules.
[x] UVC camera kernel modules.
[x] NFS kernel modules (NFSv2/3 client/server).
[x] CIFS client kernel modules.
[x] IPSET kernel modules.
[x] LPR printing daemon.
[x] USB-over-Ethernet printing daemon.
[x] dropbear (SSH client/server).
[x] sftp (SSH FTP server).
[x] vsftpd (FTP server).
[x] samba (SMB server).
[x] xupnpd (multicast IPTV->UPnP proxy).
[x] openvpn (security VPN client/server).
[x] https server for WebUI.
[+] openssl binary (allow generate certificates for openvpn/https).
[+] tcpdump utility.
[-] minidlna (UPnP/DLNA A/V mediaserver).
[-] firefly (iTunes audio mediaserver).
[-] transmission (torrent client).
[-] aria2 (multi-protocol download manager).
[-] QoS kernel modules.
[-] IFB/IMQ kernel modules.
[-] USB HID kernel modules.
[-] XFS filesystem.
[-] openssh (BSD SSH client/server).
[-] parted utility.
[-] Stripped debug messages from Samba server.

Note:

- [x] > Mandatory
- [+] > Included
- [-] > Excluded

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn’t either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn’t be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don’t always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you’re looking for certain safety measures, remember that it would be