What’s new in 6.33 (2015-Nov-06 12:49):<\/p>\n
*) dns – initial fix for situation when dynamic dns servers could disappear; So some of A Thrift’s changes were in there…anyone else see some action they like here?<\/p>\n","protected":false},"excerpt":{"rendered":" What’s new in 6.33 (2015-Nov-06 12:49): *) dns – initial fix for situation when dynamic dns servers could disappear; *) winbox – dropped support\u2026<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,8],"tags":[],"class_list":["post-5192","post","type-post","status-publish","format-standard","hentry","category-mikrotik","category-networking"],"_links":{"self":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/5192","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5192"}],"version-history":[{"count":1,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/5192\/revisions"}],"predecessor-version":[{"id":5193,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/5192\/revisions\/5193"}],"wp:attachment":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5192"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5192"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5192"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n*) winbox – dropped support for winbox v3.0beta and v3.0rc (use winbox v3.0);
\n*) dhcpv6 – various improvement and fixes for dhcp-pd client and ippool6;
\n*) defconf – fixed rare situation where configuration was only partially loaded;
\n*) net – fix possible never ending loop when bad CDP discovery packet is received; Snap…interesting DOS vector<\/strong>
\n*) log – make default disk file name to reside in flash dir if it exists;
\n*) romon – change port list to be not ordered in export;
\n*) capsman – limit number of simultaneous DTLS handshakes;
\n*) capsman – fixed memory leak on CAP joining CAPsMAN when ssld is used;
\n*) winbox – added allow-fast-path to eoip, gre & ipip;
\n*) winbox – do not show power-cycle properties on non poe ports;
\n*) l2tp: implemented PPPoE over L2TP in LNS mode, RFC3817;Just for Thrift hehe<\/strong>
\n*) webfig – some of the setting were shifted to the right;
\n*) packages – allow to reinstall from bundle to separate packages & vice versa;
\n*) packages – prefer out of bundle packages when both of them are installed;
\n*) packages – fix a problem of upgrading bundle package to non bundled ones;
\n*) ipsec – force flow cache validation once in 1h;
\n*) winbox – make sure that all setting names get shown in full;
\n*) winbox – added poe power-cycle-ping settings to ethernet interfaces;
\n*) ppp – handle properly case were ppp client is given same address for local & remote end;
\n*) winbox – added vlan-mode & vlan-id to virtual-ap interface;
\n*) winbox – added timeout column to ipv6 address lists;
\n*) winbox – show SFP Tx\/Rx Power properly;niceeee<\/strong>
\n*) winbox – added min-links to bonding interface;
\n*) winbox – do not show health menu on RB951Ui-2HnD;
\n*) winbox – added support for Login-Timeout & MAC-Auth-Mode in hotspot;
\n*) cerm – added option to disable crl download in ‘\/certificate settings’;
\n*) winbox – make user ssh key import work again;
\n*) webfig – make “Copy to Access List” work in CAPsMAN Registration Table;
\n*) userman – fix report generation problem which could result in some users being skipped from it;
\n*) winbox – fix to allow cpu-port as mirror-target
\n*) proxy – error.html parsing enhancement to improve performance
\n*) CCR1072 – improve ether1 performance under heavy loadHow odd…I wonder why ether1 alone was having issues. I thought the 1072 had individual pipes to the CPU for each port.<\/strong>
\n*) routerboard – indicate RouterBOOT type in \/system routerboard print;
\n*) mpls – properly use mpls mtu for routes;
\n*) cerm – fix key description for signed certificates;
\n*) trafflow – report flow addresses in v1 and v5 without NAT awareness;
\n*) hotspot – add mac-auth-mode setting for mac-as-passwd option;
\n*) hotspot – add login-timeout setting to force login for unauth hosts;
\n*) auto-upgrade – fixed auto upgrade for smipsbe;
\n*) dns – do not create duplicate entries for same dynamic dns server addresses;
\n*) ipsec – fix set on multiple policies which could result in adding non existent dynamic policies to the list;
\n*) email – allow server to be specified as fqdn which is resolved on each send;Killer<\/strong>
\n*) fastpath – eoip,gre,ipip tunnels support fastpath (new per tunnel setting “allow-fast-path”);Sick…anyone test yet?<\/strong>
\n*) ppp, pptp, l2tp, pppoe – fix ppp compression related crashes;Nice…I use this in a few places<\/strong>
\n*) cerm – also accept downloaded CRLs in PEM format;
\n*) userman – added ‘history clear’ to allow flushing undo history, which may take up significant amount of memory for huge databases with hundreds of users;
\n*) health – fix voltage for CRS109, CRS112 and CRS210 if powered from external adapter;
\n*) userman – added phone number support to signup form;
\n*) ip pool6 – try to acquire the same prefix if info matches recently freed;
\n*) ipsec – fix transport mode ph2 ID ports when policy selects specific ip protocol on initiator;
\n*) ipsec – use local-address for phase 1 matching and initiation;
\n*) route – fixed crash on removing route that was aggregated;
\n*) ipsec – fix replay window, was accidentally disabled since version 6.30;
\n*) ssh – allow host key import\/export;
\n*) ssh – use 2048bit RSA host key when strong-crypto enabled;
\n*) ssh – support RSA keys for user authentication;
\n*) wlan – improved WMM-PowerSave support in wireless-cm2 package;
\n*) pptp & l2tp – fixed problem where android client could not connect if both dns names were not provided (was broken since v6.30);
\n*) auto-upgrade – added ability to select which versions to select when upgrading;
\n*) quickset – fixed HomeAP mode;
\n*) lte – improved modem identification to better support multiple identical modems;
\n*) snmp – fix system scripts table;
\n*) tunnels – eoip,eoipv6,gre,gre6,ipip,ipipv6,6to4 tunnels now support dns name as remote address;I believe this is only on initial connection. I wonder if there is a way that if the connection drops it would attempt to DNS query again – if the remote address changed it would reconnect<\/strong>
\n*) fastpath – active mac-winbox or mac-telnet session no longer suspends fastpath;
\n*) fastpath – added per interface fastpath counters;
\n*) fastpath – added trafflow support in basic ipv4 and fasttrack ipv4 fastpath;
\n*) ppp – added on-up & on-down scripts to ppp profile;
\n*) winbox – allow to specify dns name in all the tunnels;
\n*) pppoe – added support for MTU > 1492 on PPPoE;
\n*) cerm – fix scep server certificate-reply degenerate PKCS#7 signed-data content;
\n*) ppp-client – added default channels for Alcatel OneTouch L100V;
\n*) defconf – fix for boards that had bridge with only wlan ports;
\n*) ovpn: support OpenWRT ovpn clients (or any other with enable-small option enabled);
\n*) cerm – use certificate file name for imported cert name;
\n*) fetch – fixed error message when error code 200 was received;
\n*) cerm – rebuild crl for local ca if crl file does not exist;
\n*) winbox – make directed broadcasts work for neighbor discovery;
\n*) upnp: automatically adjust mappings to new external ip change;
\n*) ppp – added ppp interface to upnp internals\/externals if requested;
\n*) ppp – when adding ipv6 default route use user provided distance;
\n*) userman – allow to correctly enable CoA on router;
\n*) cerm – show crl nextupdate time;
\n*) ppp – added CoA support to PPPoE, PPTP & L2TP (Mikrotik-Recv-Limit, Mikrotik-Xmit-Limit, Mikrotik-Rate-Limit, Ascend-Data-Rate, Ascend-XMit-Rate, Session-Timeout);
\n*) ppp – added new option under “ppp aaa” – “use-circuit-id-in-nas-port-id”;
\n*) userman – refresh active sessions\/users view dynamically;
\n*) package – added version tag and show everywhere alongside of version number;
\n*) wlan – improved 802.11 protocol single connection TCP performance for ac chipset with cm2 package.<\/p>\n