Professional Documents
Culture Documents
========================
378.55 (17-July-2015)
- FIXED: DHCP lease page could get confused by IPv6 clients on
the LAN.
378.55 Beta 2
- CHANGED:
- CHANGED:
- CHANGED:
-
(11-July-2015)
Updated dnsmasq to 2.73 RC9 (backport from GPL 6975)
Updated odhcp6c to newer version (backport from GPL 6975)
Updated openssl to 1.0.2d (fixes CVE-2015-1793, only present
in Beta 1 - 54_2 was not affected)
CHANGED: Display existing key/certs on the OpenVPN pages once
they've been migrated to JFFS.
FIXED: Time scheduler-related features (Parental Control & Wifi
scheduler) were broken (backported fix from Asus's GPL 6975)
(beta 1 regression)
FIXED: QTN firmware was still being copied to RAM rather than rely
on the symlink to flash added in Beta 1, to save 4 MB of RAM.
(AC87U)
FIXED: Dropbox cloud sync would fail on some setups (backport
from GPL 6975)
FIXED: Entware-setup script would generate an invalid services-start
script
FIXED: Duplicate zoneedit entry on the DDNS service list.
NEW:
NEW:
NEW:
NEW:
NEW:
378.54_1 (8-June-2015)
- Some of the builds were unstable, did a complete recompile of all
releases. There was no code change.
378.54 (7-June-2015)
IMPORTANT: if you were previously using the AiProtection ad blocker, you
will need to manually disable it over SSH after flashing this
release, by running the following commands:
nvram set wrs_adblock_popup=0
nvram set wrs_adblock_stream=0
nvram commit
- NEW: Merged with Asus GPL 378_5134.
- NEW: OpenVPN policy rules can now be set to route matching traffic
through either the tunnel, or to your ISP (allowing you to
create exceptions to your tunnelling rules)
- NEW: Added OpenVPN server setting to let the OS manage
socket buffers (by inserting rcvbuf 0 and sndbuf 0 in
the server configuration)
- CHANGED: Upgraded OpenSSL to 1.0.2a, adding new tls ciphers
378.53 (26-Apr-2015)
- NEW: Merged with Asus GPL 378_4980 (with pieces from 378_4850 for AC56/AC68
and 378_5183 beta for AC87)
- NEW: OpenVPN policy routing. You can select client IPs or destination
IPs which you want to route through your VPN tunnel. You can enter
a single IP (192.168.0.1) or a whole subnet in CIDR format (for
example 74.125.226.112/30).
You can optionally block WAN access to these as well when the
tunnel goes down.
- NEW: Ad blocker based on Trend Micro's Web Reputation System (WRS).
This is an EXPERIMENTAL feature implemented by Asus but that
isn't enabled in the stock firmware.
- CHANGED: Updated Tor to 0.2.5.12
- CHANGED: Those providing a signed SSL certificate for httpd can now
provide chain certificate. The three PEMs must be in
that order: client, intermediate, CA. (Patch by sasoiliev)
- CHANGED: The setting to enable the neighbour solication filter rule
for Comcast's request flooding was changed to "ipv6_ns_drop",
and now defaults to "0" as this hack causes issues with
other ISPs.
- CHANGED: Backported dnsmasq patch that reverts a fix for Windows 8
clients as it could cause issues with other clients.
- FIXED: DNSFilter would fail if you had it set to "Router", and didn't
have a DNS IP entered on the WAN page.
- FIXED: MSS clamping wasn't applied to traffic in both direction, moved
it to the mangle table.
- FIXED: OpenVPN client firewall "external" mode does not exist - removed
from the webui.
- FIXED: PPTP account list could become corrupted after removing an entry
on the PPTP server page.
378.52_2 (5-Apr-2015)
- CHANGED: Updated AiCloud prebuilt binaries for MIPS models
- CHANGED: Applied kernel patch for MIPS kernel ported from 376_3861,
related to CTF support
- FIXED: AiCloud would fail to start unless you had HTTPS enabled for
the webui (causing the key/cert to be missing)
- FIXED: DDNS hostname would become corrupted after backing up
your router configuration (Asus bug)
378.52 (3-Apr-2015)
- NEW: Merged with Asus GPL 378_4608
- NEW: Added ECDHE support to the webui (when accessed over HTTPS)
- NEW: The DHCP server can now provide a second DNS to its clients
- NEW: You can tell the router not to advertise itself as a DNS
- NEW: Experimental Tor support (feature originally developed by
Asus, but not available yet on stock firmware). You can
enable it in the VPN section of the webui.
- CHANGED: Updated miniupnpd to 1.9.20150309
- CHANGED: You can no longer disable the JFFS2 partition if
Traffic Analyzer is enabled. Likewise, you can
no longer enable Traffic Analyzer if the JFFS2
partition is disabled.
- CHANGED: The selected refresh rate of the Wireless Clients
page will be saved to a cookie
- CHANGED: Removed obsolete (non-safe) ciphers such as RC4
from the router's https webui
- CHANGED: Updated OpenSSL to 1.0.0r
- CHANGED: Removed Turbo button support from webui, as that feature
doesn't work with the current bootloader everyone is
using now (RT-AC68)
- CHANGED: Performance optimization to the httpd, dropbear
and rc services
- FIXED: 2.4 GHz and 5 GHz-1 clients were swapped on the
Sysinfo page (RT-AC3200 only)
- FIXED: Wifi PSK wasn't blurred until activated (regression
from 378.51)
- FIXED: Samba's custom config/postconf were ignoring the
state of the global option to enable them (they
would always be used)
- FIXED: Samba's custom config/postconf usage wasn't logged
- FIXED: Some services would fail on their first attempt
to start at boot time due to the QTN subsystem
taking too long. Implemented patch from Asus
which eliminates the long QTN stall at boot
time. This resolves the issue where some users
had trouble connecting their WAN at boot time (RT-AC87U)
- FIXED: NAT rules could occasionally fail to be applied
(patch by john9527)
- CHANGED: The Entware setup scripts will now backup any existing
installation rather than remove it (patch by TeHashX)
- CHANGED: Re-implemented our original NAT loopback code, with attempts
at reconfiguring it whenever the DPI engine is restarted.
This is still experimental, as most of the DPI engine is
closed source, so unsure if the loopback gets re-enabled
in every regular DPI restart scenarios.
- CHANGED: Disabled the offline default error page. Clear your offline
content in your browser to fully get rid of it.
- CHANGED: Removed security warnings if FTP/Samba are configured to
allow unauthenticated users.
- FIXED: Issues when connecting with Russian ISPs relying on DHCP+VPN
(such as Beeline)
- FIXED: When enabling WAN access to webui, the router would always
forward both http and https ports regardless of if either of
these were disabled.
- FIXED: Shared printers over LPRng would sometime fail to
completely print the last page (patch by stsichler)
- FIXED: CVE-2015-0240 security issue in Samba 3.5.8 (used by
AiCloud). The main Samba daemon was patched by the
update to 3.6.25.
378.50 (7-Feb-2015)
- IMPORTANT: You must do a factory default reset, and manually
reconfigure your setting if coming from a version
older than 378.50. Failure to do so can
lead to various issues with wifi, OpenVPN,
and the new AC68U bootloader.
- IMPORTANT: Please read this changelog, especially the changes
related to jffs, user scripts/config and OpenVPN in
the previous 378.50 betas.
- NEW: Merged with Asus GPL 378_4129 code.
- CHANGED: Reverted back to vsftpd 2.x, as 3.0.2 doesn't work properly
on MIPS architectures (and possibly other particular
scenarios as well).
- CHANGED: Added warning to the DDNS page if you set the type
to Custom and either JFFS or custom script support isn't
enabled
- FIXED: A few unescaped quotes in the French dict breaking VPN pages
- FIXED: MAC list would get corrupted when removing and re-adding
entries on the MAC filter list
- FIXED: AC68U CFE update wasn't written to flash due to permission
issues
- FIXED: Static Key field wasn't visible when using HMAC authentication
- FIXED: syslogd was always enforcing the -S switch
- FIXED: When setting a static DHCP from the networkmap, the user-entered
name wouldn't be used. Now it gets used, and we rely on the rc
daemon to properly handle it if it's not a valid hostname (it will
simply not provide it to dnsmasq's static name list).
378.50 Beta 2 (31-Jan-2015)
- NEW: Added custom config and postconf support for avahi, netatalk
and mt-daapd (iTunes server).
- CHANGED: Moved the AC68U CFE update process to the same location
as in GPL 3626 to see if it works more consistently.
- FIXED: Non-DPI build of AC56U had incompatible Tuxera modules
376.49 (21-Dec-2014)
- NEW: Merged with Asus GPL 376_3677. This new code
includes a lot of changes related to USB modem
support.
- NEW: IPv6 handling based on dnsmasq + odhcp6c. This new
code which has been developped by Asus these past few
months but kept disabled so far has been enabled.
Initial tests show much better reliability with
different ISPs.
- NEW: Added IPv6 support to DNSFilter (currently only
Yandex has IPv6 servers). Note that unlike IPv4
filtering, we cannot automatically NAT queries
to the desire server, so the current implementation
works like Asus's YandexDNS service, where IPv6 servers
are simply returned to DHCPv6/RA client queries,
and ip6tables ensures that you cannot override
them, by rejecting connection to other DNS servers.
- CHANGED: Merged newer DPI engine from 378_3123 beta
(AC87)
- CHANGED: Removed SSLv2 and v3 support from OpenSSL
(we had already stopped using these in
376.48, so this removes unused code)
- CHANGED: The VPN webui is now a bit closer to Asus's code.
This will mostly make it easier to keep in
sync with future changes to that UI by
Asus (they rearranged the layout a bit in
376_36xx).
- CHANGED: Updated OpenVPN to 2.3.6
- CHANGED: Reverted to Asus's max-lease number calculation
for dnsmasq
- CHANGED: Hide wireless key on settings page unless field
has focus (patch by John9527)
- CHANGED: Ported USB 3.0 (XHCI) kernel driver from
Netgear GPL (which seems to have in turn
backported it from upstream kernel 3.x)
- CHANGED: Updated Quantenna to v36.7.3.23 (AC87)
- FIXED: vsftpd wasn't properly compiled with SSL
support.
- FIXED: MAC filtering couldn't be disabled on Guest
networks (Asus bug) (Patch by John9527)
- FIXED: Various fixes and tweaks to the new IPv6
code from Pinwing and saintdev
- FIXED: Editing a client on the networkmap would
cause any matching DHCP reservation entry to
lost its hostname
- REMOVED: The web redirection control setting was
removed, as it is being replaced by the
(simpler) redirection setting Asus added
to the System page.
376.48_3 (20-Nov-2014)
- FIXED: NAT loopback was broken on MIPS devices
(backported Asus fix from 376_3626)
376.48_2 (8-Nov-2014)
- FIXED: Samba would fail to start on the RT-N16 due to a
missing library.
376.48_1 (7-Nov-2014)
- FIXED: Max-lease calculation Asus introduced in 376_2769 is
broken - re-hardcode it to 253 like they used to do in
previous release. Will be properly fixed once they
release a newer GPL with this issue resolved.
(Asus bug)
376.48 (7-Nov-2014)
- NEW: Added the RT-AC68P to the list of supported devices
- CHANGED: Use sha256 checksums instead of MD5 for improved
security when validating your downloads.
(note: checksums are also posted on the support
forum at SmallNetBuilder)
- CHANGED: Switched my fix for unmounted/hidden partition
support with Asus's own fix from GPL 3561.
- FIXED: Samba would fail to start if the router admin username contained
upper case characters. Samba was modified to have it try to
local the UNIX user as provided (it was previously only
trying upper and lower case versions) (Samba 3.6 bug)
376.48 Beta 3 (02-Nov-2014)
- CHANGED: Updated miniupnpd to release 1.9 (plus upstream
- FIXED: Couldn't edit share permissions for Samba if your
contained an unmounted/hidden partition (Asus bug
- FIXED: Couldn't edit share permissions for Samba for the
internal SDcard reader (Asus bug in 2769)
- FIXED: Missing Max User field to Samba page (Asus bug)
PCP fix)
disk
in 2769)
RT-N66U
- FIXED:
- FIXED:
- FIXED:
- FIXED:
- FIXED:
- FIXED:
- FIXED:
376.47 (20-Sept-2014)
- NEW: Added sha256 and sha512 HMAC support to dropbear (SSH)
- CHANGED: Moved OpenVPN postconf scripts right before server/client
gets started, so you can also use them to modify the other
generated files such as the exported ovpn config file.
- FIXED: SSHD options visibility (patch by pinwing)
- FIXED: EMF/IGMP settings were reverting to the select profile
default (Asus bug introduced in GPL 2678)
- FIXED: PPTP account list failed to display (regression in Beta 1)
- FIXED: VPN server page was switching back to PPTP when changing
OpenVPN unit and you were initially on the PPTP page
- FIXED: Activity indicator wasn't shown during a networkmap
scan
376.47 Beta 1 (14-Sept-2014)
- NEW: Merged with Asus GPL 2678 (AC87)
- NEW: Report Quantenna FW version on Sysinfo page
- NEW: Enabled experimental FTP and Samba Cloud Sync support in AiCloud.
This feature is still in development by Asus, so it might not be
fully functional yet.
- NEW: Enabled experimental SNMPD support, under Administration -> SNMP.
This feature is still in development by Asus, so it might not be
fully functional yet. (not available on the RT-N16)
- NEW: Added option to enable WAN access to SNMPD, defaults to disabled.
(Asus's implementation has it open to the WAN by default)
- CHANGED: Re-increased max allowed FTP user limit to 10 (was reverted
to 5 in the GPL merge when the setting was moved to the
FTP page)
- FIXED: PPTPD was getting enabled every time you clicked Apply while on
the PPTPD VPN Server page
376.46 (26-Aug-2014)
- NEW: Merged with Asus GPL 2061. This is essentially
the new QTN driver for the AC87.
- FIXED: Various webui issues with IE10/IE11 (patch by pinwing)
- FIXED: OpenVPN Client page was visible on the RT-N16
- FIXED: DHCP pool validation error on VPN Server advanced page.
- FIXED: Couldn't edit the first VPN Client entry due to broken
duplicate check (Asus bug)
376.45 (17-Aug-2014)
- NEW: Compiled vsftpd with SSL support (must be manually
configured if you intend to use it)
- NEW: Report FA state (Level 2 CTF) on Sysinfo page.
- CHANGED: Updated dropbear to 2014.65.
- CHANGED: Updated openssl to 1.0.0n (numerous
security fixes)
- CHANGED: Updated lzo to 2.08
- CHANGED: Reworked VPN Server pages to be more intuitive
- FIXED: Garbled client dropdown selector on DNSFilter page
- FIXED: The Comcast neighbour solicitation block wasn't
enabled anymore (regression in 376.44) (Patch by
Sinshiva)
- FIXED: 5 GHz N+AC mode was incorrectly setting router to
N-only mode (Asus bug, fix backported from 2381,
additional fix by me for AC66)
- FIXED: PControl page failing to display on French and
Italian locales (Asus bug)
- FIXED: IPv6 can occasionally fail to work properly when
using a PPPoE WAN interface (patch by pinwing)
376.44 (3-Aug-2014)
IMPORTANT: Make a backup of your JFFS partition if upgrading
an RT-AC56U or RT-AC68U and you have stored files
on that partition! The partition layout has been
changed.
- NEW: Merged with Asus's 376_2044 GPL.
Summary of changes:
* New networkmap, lets users edit device names,
assign icons to devices, etc...
* Reworked IPv6 support
* New filesystem driver provider for NTFS/HFS+/FAT
* Webui visual update
* Updated components (minidlna, radvd, dnsmasq)
-
374.40 (6-March-2014)
- KNOWN ISSUE: Some people are experiencing random reboots
with the RT-AC68U running firmwares based on recent Asus GPL.
If you are are affected, please revert to 374.40 alpha4 for now.
Asus are looking into the issue, which affects this model since
374_4422.
- FIXED: Asuswrt was calling wl_defaults() every time the
wifi was restarted, causing Regulation Mode to be
overwritten. Now we force it to h mode if the
router model and region requires DFS compliance
(same as Asus's code, except we won't enforce
it to off in other scenarios, and will only do
so if it was previously set to off).
- FIXED: Advanced wireless page broken on Internet Explorer, due
to missing Array.IndexOf() support in IE (Asus bug)
- FIXED: Incorrect model detection prevented CPU temperature
from being shown on the Sysinfo page on the "R" SKUs.
374.40 Beta 2 (5-March-2014)
- FIXED: Numerous buffer overruns in networkmap that would result
in crashes or empty/incomplete device list. Was often
visible on networks hosting a Windows Home Server machine.
(Asus bug)
- FIXED: Site survey was reporting 5G as being disabled on RT-N16.
- FIXED: Various issues related to the helper.sh script for postconf
- FIXED: The OpenVPN instance wasn't restarted if it was currently
stopped due to a syntax error in its config and you had
just corrected it.
- FIXED: Restarting the wireless service would stop emf/igs snooping
until they were manually restarted/recconfigured. (Asus bug)
- FIXED: Channels above 153 were missing on 5 GHz band if width
(Asus bug)
- FIXED: A few unescaped quotes in the French dict would break
some webui pages (such as the Wireless page).
(Asus bug)
- FIXED: OpenVPN server export would always export the first
server instance configuration.
- FIXED: Bogus "Config file is missing" error logged by pptpd when
it was starting (Asus bug)
- FIXED: "Advertise DNS" wasn't visible if the page was loaded and
"Respond to DNS" was already enabled.
3.0.0.4.374.38_1 (12-Jan-2014):
- FIXED: Tools -> Run Cmd page wasn't working (regression
in 374.38)
- FIXED: Router getting stuck on various webui changes due
to a broken precompiled emf module (AC56/AC68)
3.0.0.4.374.38 (11-Jan-2014):
This version isn't available for the RT-N16 or the SDK5 build
of the RT-N66U as support for the SDK5 platform is currently
broken. Please stick to 374.36 Beta 1 for the time being on
these two platforms.
Note that the RT-N66U did get a newer wifi driver, so give it a
try, as it might have resolved or at least improved on the wifi
range issues.
Remember to do a factory default reset if switching from SDK5 to
SDK6 builds! Keep a backup of your existing settings in case you
decide to revert back to an SDK5 build.
- NEW: Merged with 374_2078 GPL provided by Asus (From RT-N66U).
Notable changes:
* Updated SDK for MIPS devices - 6.30.163.2002 (r382208)
* PPPoE HW acceleration should be fixed by the new SDK
* Updated AiCloud closed source components (MIPS)
- CHANGED: Reverted Parental Control code to our fixed code,
as I see Asus is still making fixes to their own
code past version 2078.
- CHANGED: Updated AC56 and AC68U wifi driver and CTF to
January 3rd builds (provided by Asus)
- FIXED: emf/igs userspace tools were missing on ARM devices
- FIXED: USB devices missing on MIPS devices (regression
in 374.37)
- FIXED: Wifi stability on ARM devices (regression in
374.37)
3.0.0.4.374.37 (31-Dec-2013):
* This build was pulled due to numerous issues *
- NEW: Merged with Asus 374_501 GPL (from RT-AC68U).
Notable changes in this version:
* New SDK (wireless driver and CTF) for AC56/AC68
* dnsmasq updated to 2.68
* radvd updated to 1.9.5
* Improved IPv6 support
3.0.0.4.374.34_2 (01-Nov-2013):
- FIXED: DNS resolution not working for VPN clients
(bug in Asus 374_979)
- FIXED: USB disk detection on AC56/AC68.
- FIXED: Turbo mode option couldn't be saved (RT-AC68)
3.0.0.4.374.34 (30-Oct-2013):
- NEW: Merged with Asus 374_979 (from RT-N66U).
AC56/AC68 AiCloud components taken from 374_217.
- NEW: Added RT-AC68U support.
- NEW: Added IPSec support to the kernel. Userspace tools
such as StrongWAN must be installed from Optware/Entware,
and manually configured. (Patch provided by saintdev)
- NEW: Adjustable MTU for DHCP/static IP WAN users
- NEW: WAN interface name passed as argument to firewall-start
- NEW: Configurable min/max ports allowed to be redirected by UPNP.
This allows WHS users to change the min allowed port from
the default value of 1024 to allow UPNP forwarding of
HTTP/HTTPS.
- NEW: Display CPU temperature on Sysinfo page (AC56 and AC68)
- NEW: Display CPU chart on Performance page (AC56 and AC68)
- CHANGED: UPnP rules will now be processed after manual
forwards and port trigger rules.
- CHANGED: Site Survey now reports supported protocol.
- CHANGED: Updated Dropbear to 2013.60.
- CHANGED: Updated dnsmasq to 2.67 final.
- FIXED: Some Traffic Monitor pages were missing the page tabs.
- FIXED: The webui would allow you to enable SSHD while not
setting an authkey or enabling password-based authentication.
- FIXED: 802.11h options should only be available on the 5 GHz band.
- FIXED: Wifi icon hover would report 5G channel as undefined if
2.4GHz radio was disabled.
- FIXED: IPv6 clients list failed to properly merge IPs from similar
MACs (Asus bug)
- FIXED: Minor layout issues with the Clients list
- FIXED: Samba wasn't started at boot time if browser master or WINS
was enabled and we had no USB disk plugged in.
- FIXED: Router/minidlna crashes when processing very large image
collections - various memory leaks plugged.
(patches provided by Paulo Capani)
- FIXED: Buffer overrun when entering more than 35 MACs on the
filter list. We now support up to 64 MACs.
3.0.0.4.374.33 (3-Oct-2013):
* IMPORTANT *: RT-N66U users must revert back to factory defaults and
manually reconfigure their settings if coming from a FW
older than 3.0.0.4.374.xxx (applies to both Asus or
Asuswrt-Merlin).
- NEW: Merged with Asus 374_726 code from RT-AC66U GPL. Notable changes:
* RT-N66U now based on the SDK6 driver. This resolved the
numerous connectivity issues, at the expense of a shorter
range (a separate SDK5 build based on driver 5.100 is
available in the Experimental folder as an alternative).
* AiCloud 2.0
- NEW: Added bonding.ko kernel module.
- NEW: Repeater mode moved into regular builds.
- NEW: Dual WAN moved into regular builds.
Note that there are still a few issues left, such as recovery
from failover mode when the primary WAN comes back up.
- NEW: YandexDNS support moved into regular builds. This is
a DNS-based filter list, which can be configured under
Parental Control.
- NEW: Added support for last seen devices on Ethernet port status
(Tools-> Sysinfo) for RT-AC56U.
- NEW: Option to control 802.11 extensions that deal with
regulations. On the Wireless Professional page
you can now enable 802.11d and 802.11h support.
- CHANGED: robocfg now (almost) completely supports the
Northstar platform (RT-AC56U)
- CHANGED: Enabled Syn Cookies for ARM devices (RT-AC56U)
- CHANGED: Allow selecting the Download2 folder for media server
location.
- CHANGED: MIPS builds optimized for mips32r2 code generation, which
should improve general performance. (N16/N66/AC66)
- CHANGED: More openssl backports from 1.0.2, adding
mips32r2 support, improving performance
especially for sha1 (RT-N16/N66/AC66)
- CHANGED: Increased OpenVPN crt/key fields to allow up to 3499
characters - enough to accomodate even a 4096 bits key.
- CHANGED: Removed the firewall rules for acsd since it no longer
listens on a TCP socket.
- FIXED: Samba binding to WAN interface would cause warnings
about WINS/master browser (regression in 374)
- FIXED: The ARM kernel was missing the Advanced IP Routing option,
preventing some of the "ip" command functions from
working (was breaking Astrill's plugin) (RT-AC56U)
- FIXED: With FW 374 Asus changed the Samba priority from too high to
too low (-19), resulting in poor sharing performance.
I changed it to a priority of 0, providing more balanced
performance. (N16/N66/AC66)
- FIXED: Some fields would allow invalid characters (such as
single quotes) which might break the webui JS. There might
still be a few unprotected fields.
- FIXED: Memory leak in httpd service (Asus bug)
- FIXED: Parental Control not working with certain schedules
(patch provided by Makkie2002)
- FIXED: Potential key truncation in httpd if one was to use very
large OpenVPN keys and certs in all fields of all four
instances.
- FIXED: Samba would start sharing local disks even if all you
wanted was its WINS/Browser services.
- FIXED: The JFFS formatting code could encounter a case
where it wouldn't write back its cleared
format flag.
- FIXED: Restarting the wireless service would break
stealth mode.
- FIXED: The new thumbnail cache code Asus added in build 720's
minidlna will prevent scanning from completing on very
large collections. Reverted that code for now.
- FIXED: Wireless key field was automatically activated on
page load, which could lead to accidental changes
(issue introduced in 374_720).
- FIXED: Router believed that NTP wasn't properly working after a
LAN or wireless service restart (issue introduced in
374_720).
- FIXED: IPv6 client list was incorrectly displayed if a client
didn't have a known hostname (Asus bug)
3.0.0.4.374.32 (24-Aug-2013):
- NEW: Merged with Asus 374_168 GPL code.
- NEW: wan-start script will get passed the WAN unit number as
argument
- NEW: Webui option to select the location of the DLNA database
(patch by VinceV)
- NEW: IPv6 firewalling. Originally, Asuswrt would allow any IPv6
traffic to be forwarded to your LAN devices. This new option
(enabled by default) will prevent traffic forwarding to LAN
devices. You can also create firewall rules to allow inbound
traffic to specific hosts. The firewall configuration can be
accessed through the "Firewall -> IPv6 Firewall" page.
- CHANGED: Upgraded OpenVPN to 2.3.2
- CHANGED: Implemented IPTraffic support in DualWAN - Load balanced
mode (Experimental builds)
- CHANGED: Updated miniupnpd to 20130730
- CHANGED: Updated some prebuilt binaries (RT-AC56U)
- CHANGED: Updated 2.6.36 kernel to the latest code used
in 372_184 (RT-AC56U), includes some changes
related to USB3, and PPP/CTF.
- CHANGED: Smarter location selection for the DLNA database
location to reduce the chances of having it in
RAM if left to default location, filling it up
(patch by VinceV)
- CHANGED: Updated e2fsprogs to 1.42.8 to be in sync with Asus
- FIXED: Web server would crash if you entered too much data in
OpenVPN key/cert fields.
- FIXED: The ACSD service could be exploited by a LAN user to
gain shell access to the router. TCP connections to
ACSD are now blocked by the firewall.
- FIXED: You could not define time periods on the Parental
Control calendar under IE.
- FIXED: Wireless client list would sometime return incorrect
hostname or be missing IP.
- FIXED: Security issue with Samba and symlinks
3.0.0.4.372.31_2 (28-July-2013):
- FIXED: Samba wouldn't start due to missing symlink (RT-AC56U)
3.0.0.4.372.31 (24-July-2013:
- NEW: Merged with 372_1393 code from Asus. Notes:
* Beamforming support for RT-AC66U/RT-AC56U
* RT-N66U driver still downgraded to build 270 (which
means no HW acceleration for PPP, but more reliable
connectivity on the 5 GHz band)
* Minidlna was updated to 1.1.0
* AiCloud security hole fixed
* Parental Control ui still broken under IE10 (use Fx or Chrome
for now)
- NEW: YandexDNS. Asus is currently implementing support in the
firmware for this DNS-based filter. This can be
found under Parental Control. See http://dns.yandex.ru/
for more info (go go Google translate!).
(Experimental builds only)
- NEW: User-provided client config files (ccd) for OpenVPN server.
See the OpenVPN and Custom Config sections of the firmware's
documentation for more info.
- CHANGED: Connections list under System Log will now progressively
display the result while the router is still
resolving IPs (if that option was enabled).
- FIXED:
- FIXED:
- FIXED:
- FIXED:
3.0.0.4.270.26b (17-Mar-2013):
- FIXED: Volume labels with spaces were rejected (Asus used the same
code to validate hostnames and volume labels)
3.0.0.4.270.26 (15-Mar-2013):
- NEW: ipset Netfilter support + userspace tool to create ipset lists.
- CHANGED: Router's hostname is now set all the time, regardless of
telnet/ssh states (and including in AP mode)
- CHANGED: Added device name field on the LAN page, since it's now
relevant to the router's hostname (not just SMB). Left
it on the SMB page as well, for those used to see it there.
- CHANGED: Router will supply its device name when requesting an IP
while in AP mode.
- CHANGED: Various webui lists were increased from 32 to 128 entries
allowed.
- CHANGED: Improved networkmap:
* Will also use DHCP hostnames and user-defined static
names instead of just NetBIOS names
* Client list will show an animation while networkmap is
still busy scanning and resolving device names
* Dropdown menus that use Networkmap to build a list
of devices will also display names in addition to IP/MAC.
- CHANGED: Don't restart the whole network if you only changed DHCP
reservations (LAN -> DHCP page)
- FIXED: Openvpn: Non-CBC ciphers weren't working (their use is still
not recommended)
- FIXED: Proxy auto-configuration support (Asus bug)
3.0.0.4.270.25b (3-Mar-2013):
- FIXED: Disabling DHCP logging would cause a syntax error in
dnsmasq's configuration (regression from dnsmasq update)
- FIXED: Outbound VPN client traffic was dropped (regression from
firewall_2 fix)
3.0.0.4.270.25
- NEW: NFS folder sharing. Webui can be found on the
USB Applications -> Servers Center page (NFS Exports tab)
- NEW: dhcpc-event and zcip-event scripts (called on WAN events)
- NEW: Ccustom configs: group.add, gshadow.add, passwd.add,
shadow.add, exports.add
- NEW: New script that will setup Entware for you (written by
ryzhov_al). Run "entware-setup.sh" through SSH/Telnet to
launch the install process.
- CHANGED: Added a folder picker to the Tools Other Settings page to
select a location to store your traffic data files.
3.0.0.4.270.24 (13-Feb-2013):
- NEW: Rebased on 3.0.0.4.270. Notable changes:
o New driver builds (these are NOT the new major versions that
Asus are still working on)
o NTP-related changes
- NEW: Report CTF (HW Acceleration) state on Sysinfo page.
- NEW: Display Ethernet port states on the Sysinfo page.
- NEW: Replaced Busybox fsck/mkfs tools with those from e2fsprogs,
should be more reliable.
- CHANGED: Temperatures on Sysinfo page will now auto-update every 3
seconds.
- CHANGED: Connections page now uses Ajax for slightly better rendering
- CHANGED: Improved name resolution on traffic monitor page, now uses
a device's hostname if it reported one.
- CHANGED: Client List now uses our improved name resolution code,
will overwrite names with those entered on the DHCP static
lease page.
- CHANGED: Updated to OpenVPN 2.3.0 and lzo 2.06.
- CHANGED: Updated Busybox to 1.20.2 (with Oleg/wl500g patches
re-applied). Lots of fixes, including GPT support in
fdisk.
- CHANGED: Updated Miniupnpd to version 1.8. NOTE: previous
versions were NOT affected by the recent UPNP exploit
disclosure. This is just as an added security precaution.
- FIXED: Temperature on Performance Tuning page would fail to update
if a radio was disabled.
- FIXED: Various timing issues causing some TrafficMonitoring and the
Sysinfo pages to often fail loading under IE.
- FIXED: JS error on the Per Device pages if FW failed to load the
traffic history.
- FIXED: ebtables were still broken, fixed by a complete rebuild.
- FIXED: Some OpenVPN fields rejected -1 as being valid.
- FIXED: Hide 5G radio info from Sysinfo page if router is \
single band (RT-N16)
- FIXED: Master Browser/WINS would not work if there was no USB disk
plugged.
- FIXED: Samba would bind to the WAN interface while in router mode
(Asus bug)
- FIXED: Backported various kernel fixes from Oleg/WL500G, Tomato
and Kernel.org to help improve HDD > 2 TB support (still
not perfect, some USB enclosures are simply not Linux
compatible)
- FIXED: Display of Connections under IE
- FIXED: Trying to apply settings on the System page with a username
containing a non-alphanum would incorrectly assume you just
tried to change to an account name that already existed
(Asus bug).
- FIXED: Wouldn't enable wins in Samba if you had a WINS IP entered
on the DHCP configuration page.
3.0.0.4.266.23b (31-Dec-2012):
- FIXED: The IE fix ended up breaking Firefox (and meanwhile, Chrome
worked fine no matter which method was used to build that
dropdown).
3.0.0.4.266.23 (31-Dec-2012):
- NEW: Rebased on 3.0.0.4.266 (from the RT-AC66U GPL)
- NEW: Tools icon contributed by Maximilian Czarnecki.
- FIXED: Skip bad blocks while erasing MTD partition (fixes RT-AC66U
failing to format JFFS2 partition due to bad blocks)
- FIXED: Router would have no hostname if you enabled ssh but kept
telnet disabled.
- FIXED: Couldn't add new ebtables rules (regression in 264.22)
- FIXED: customized minidlna.conf
- FIXED: Traffic monitoring per IP is unreliable if HW acceleration
is enabled. Do not load CTF if booting with cstats enabled.
- FIXED: Per Device traffic monitor pages missing under IE
3.0.0.4.264.22 (15-Dec-2012):
- NEW: Rebased on 3.0.0.4.264 (from the RT-N53 GPL).
- NEW: Traffic monitoring per IP added to the Traffic Monitor section.
Based on the Tomato IPTraffic implementation by Teaman.
- NEW: Option to disable the Netfilter SIP helper (Firewall page),
allows people to manually forward port 5060 to their own SIP
server
- NEW: Option to enable/disable logging DHCP client queries
(LAN->DHCP page)
- FIXED: Tabs would disappear while on the Monthly traffic page.
- FIXED: Really fixed Firefox issue (the fix wasn't merged
in release 260.21).
- FIXED: Router crash if the list of MAC filters + their names got
too long.
- FIXED: OpenVPN webui: TLS Reneg and Connection Retry wouldn't let
you enter -1 as value.
- FIXED: Layout issues on the DHCP page (one in Asus code, another
in Merlin code)
- FIXED: Beeline Corbina was unable to connect to PPTP/L2TP server
due to DNS issues.
- CHANGED: System log starts at the bottom (backported from GPL 314)
- CHANGED: Dual WAN is no longer enabled in regular builds - too many
issues with it at this point. Regular USB failover
still works.
3.0.0.4.260.21 (5-Dec-2012):
- NEW: Option to enable simpler share names. When enabled, the folder
Share will be shared as "Share" instead of "Share (on sda1)".
The option can be found on the Misc tab, under USB Application.
- NEW: User customized config files for various services. Those custom
config entries can either be appended, or completely replace the
config file generated by the firmware.
- NEW: Added Name field to the Wireless ACL page.
- NEW: Added service applet to rc. For example, "service restart_samba" will
restart the Samba service. For advanced usage/debugging only.
- NEW: Backported OpenSSL ASM optimization from 1.0.1, for significant perfor
mance
improvements in applications such as OpenVPN or SSH when using AES.
- NEW: Report the current CFE/Bootloader version on the Sysinfo page.
- FIXED: Minor tweaks to the AiCloud pages so they can fit on a 15" laptop sc
reen
(some close buttons at the bottom were unreachable)
- FIXED: Enabling SSH access from WAN didn't work if DualWAN
was set to load-balancing.
- FIXED: Removed MAC Filter page, as it doesn't work (not compatible
with Parental Control).
- FIXED: OpenVPN Client "Username Auth only" option was broken.
- FIXED: Limit valid characters in a DHCP/WOL description to prevent
breaking the webui by using invalid ones such as quotes.
- FIXED: OpenVPN Client wasn't properly applying DNS settings that
the server was pushing to us.
- FIXED: Wireless client list alignment in AP mode.
- CHANGED: Less strict rules when validating user-entered MAC hwaddr.
3.0.0.4.220.18b (25-Sept-2012):
- NEW: Report both rx and tx rates on wifi connections
- FIXED: Handle cases where the wireless driver returns a speed of -1
- FIXED: Removed rssi retrieval retries, as it would make the first access to
the wireless page take forever if you had multiple connected clients
.
You will have to manually refresh the page the first time you access
it
if the RSSI is reported as "??".
3.0.0.4.220.18 (23-Sept-2012):
- NEW: Added OpenVPN logging verbosity setting (vpn_loglevel, must be
manually set to a value between 0 and 15, with 3 being the default).
- FIXED: Buffer overrun in init code that would crash the router when
too many features were enabled at compile time.
- FIXED: Re-enabled DualWAN (RT-N66U, RT-AC66U)
- FIXED: Re-enabled Beceem (Wimax) support in RT-AC66U.
- FIXED: OpenVPN 'Start with WAN' and 'Respond to DNS' settings were
not properly saved.
- FIXED: First time a client's rssi is polled it would return 0.
- FIXED: post-mount user script wasn't executed (regression in 220.17)
- CHANGED: Added some info to the OpenVPN server and client pages.
- CHANGED: Improved load time of the VPN Status page.
3.0.0.4.220.17 (18-Sept-2012):
- NEW: Rebased on 3.0.0.4.220, which includes:
3.0.0.3.130.9 (10-June-2012):
- NEW: Enabled new Dual WAN support from Asus
- FIXED: no-ip DDNS entry would revert to Asus DDNS on webui
3.0.0.3.130.8 (8-June-2012):
*** Reverting to factory defaults BEFORE and AFTER flashing
this version is strongly recommended! The newer Asus code base
seems to have changed quite a few settings, so you'll want to
not only start with the new default values, but also get rid
of obsolete settings. Otherwise you will be wasting a
good amount of the limited available nvram. ***
- KNOWN ISSUE: Memory leak when using IPv6 (bug in Asus's code
and/or kernel code)
- KNOWN ISSUE: PPTP VPN can randomly reboot the router if accessing
a LAN device behind the router. Workaround is to
use an IP range outside of the local LAN
(i.e. 10.0.0.0 instead of 192.168.1.0), and either
set your VPN to use the VPN tunnel as default
gateway, or manually add a route to your VPN
client.
- NEW: Rebased patches on 3.0.0.4.130 (RT-N53U sources).
Build 130 brings various code changes to IPv6, not sure
what else (as I have no changelog between 112 and 130).
The QoS code remains from build 108, as build 130 is
unstable.
- NEW: Added "diff" utility
- NEW: Keyword-based filter (new in 130)
- FIXED: Firmware/settings can now be uploaded over HTTPS
(bug fixed by Asus)
- FIXED: Buffer overflow in networkmap that would cause garbled
device names to appear on the clists list (bug in
Asus's code)
- FIXED: Firewall would break when applying a game preset that
had multiple ports separated by a "," (bug in Asus's
code)
- FIXED: WOL through webui wasn't working when IPv6 is enabled
- FIXED: Memory leak in sit.ko (backported from Linux 2.6.25.3)
- IMPROVED: /jffs/scripts/ will be created automatically if it
doesn't exist (you must still make any new script
executable using "chmod a+rx script_filename")
3.0.0.3.108.7 (27-May-2012):
- NEW: Added no-ip.com support to DDNS (patch submitted by Igor Pavlov)
- NEW: Added webui page under System Log to display active/tracked
network connections.
- NEW: Added netstat-nat command.
- NEW: Added pre-mount and post-mount user scripts (patch submitted by
Shantanu Goel)
- NEW: Allows tweaking TCP/UDP connection tracking timeouts
- FIXED: Removed check in Asus's code that would reject txpower > 80
unless you clicked three times on Apply (?!).
NOTE: Still not sure power setting even works, as I get
-80db from the other end of the house no matter if I use
40 or 500 mW.
3.0.0.3.108.6 (14-May-2012):
- NEW: HTTP access list (backported from build 112)
- NEW: PPTP VPN encryption options (backported from build 112)
- FIXED: Traffic history location was't properly saved
when changed in webui.
- FIXED: Disabled traffic history saving to nvram for now,
to avoid people accidentally filling their limited nvram space.
- FIXED: Missing bottom pixels from the bottom of General menu
- FIXED: Removed invalid CSS attribute
- FIXED: typo in VPN iptables entries (bug in Asus's code)
3.0.0.3.108.5 (5-May-2012):
- NEW: Crond starts at boot time.
- NEW: init-start is a new user script that will be run early on
at boot time (right after jffs is mounted, and before any
service gets started)
- NEW: Can save traffic history to a custom location (USB or
JFFS, for instance) to preserve it between reboots.
- NEW: Added Monthly traffic page (ported from Tomato)
- NEW: Added the Performance Tuning page (with temperature).
- FIXED: Webui authentication was bypassed by the web server (bug in
Asus's code)
- FIXED: Httpd crash when uploading a FW or settings file over
https - should simply fail now. For now you have to
use http for flashing the FW or restoring your settings
from a saved config file.
3.0.0.3.108.4 (28-Apr-2012):
- NEW: Clicking on the MAC address of an unidentified client will do a lookup
in
the OUI database (ported from DD-WRT).
- NEW: Added HTTPS access to web interface (configurable under Administration
)
- NEW: Option to turn the WPS button into a radio on/off toggle (under Admini
stration)
- FIXED: sshd would start even if disabled
- CHANGE: Switched back to wol, as people report better compatibility with it
.
ether-wake remains available over Telnet.
3.0.0.3.108.3 (18-Apr-2012):