KeeneticOS updates — Dev Channel

Further modem support: The Huawei E392u-12 modem is now supported. [NDMS-1078]

Improved compatibility with the Huawei E3372h-320 modem having customized firmware version for A1 mobile operator in Belarus. [NDMS-1079]

Further modem support: The Telit LN940 modem is now supported. [NDMS-985]

Improved security: The OpenSSL library is updated to version 1.1.1h

A new Firewall rule will now be, correctly, added to the top of the rules list in the web interface. [NDW-1413] [Reported by MDP]

The Connection names on the Internet safety page are now correctly displayed in the language configured for the web interface. [NDW-1397] [Reported by rustrict and r13]

Further modem support: The high-speed LTE Сat12 HP lt4220 and Foxconn T77W676 modem modules are now supported. [NDMS-985]

Improved compatibility: The Wingle Model W02 modem, having a customised software version for the ALTEL mobile operator, is now supported. [NDMS-859]

The case when a remote VPN client connected to the IKEv2 server running on the Keenetic can't access the Internet is now fixed. [NDMS-1019]

Improved modem support for the Alcatel IK40V with a firmware version 01008. [NDMS-946]

The mobile network scanning procedure Scan the air for the Anydata W140 USB modem is fixed. [NDMS-920]

The non-applicable No IP address option is removed from the advanced settings of the VPN connections in the Other connections section of the Web Interface. [NDW-1351] [Reported by m__a__l]

The list of the available Connections for the Internet Safety - DNS Servers setting of the Web Interface is fixed : only public interfaces can be chosen. [NDW-1352] [Reported by r13]

The removal of the restriction on open wireless bands is now working properly. Selecting back the Both bands setting restores the default behaviour. This configuration option allows the limiting of the connection of a dual band wi-fi client to a particular wireless band only: 2.4 or 5 GHz. The setting works for both a standalone device and / or a Wi‑Fi system with multiple nodes. [NDMS-763, NDMS-866]

Another modem supported: The LTE Cat4 ZTE MF79 USB-modem is now supported. You can use a USB-modem as your primary connection, to backup an existing link, or to balance traffic between multiple links. [NDMS-979]

The internal logic of the IGMP snooping component is improved for the scenario when several multicast clients are connected to the LAN port of the device via a single external Ethernet switch or several daisy-chained Ethernet switches. [NDMS-981]

Fixed the handling of multiple subscriptions to a multicast group on different Ethernet ports of a device operating in Extender mode. Multicast groups are used to deliver IPTV services to the customer's equipment, such as set-top boxes or computers with corresponding software installed. [NDMS-1002]

The spontaneous shutdown of the File and printer sharing (TSMB CIFS) component, providing network access to connected USB devices, is fixed. [NDMS-788, NDMS-974] [Reported by Andrex]

Rules enrichment: A description field has been added to the firewall rules control. [NDMS-939, NDW-1302] [Requested by cocojambo]

Security enhancement: A new network protection mode WPA2 + WPA3 Enterprise is now available, delivering enhanced security. The WPA Enterprise modes are designed for use in distributed networks and require a RADIUS authentication server. [NDW-1299]

Finer control: The Ext filesystem support has been unbundled as a separate component. If you are not using Ext filesystem on your attached USB-disks, removing the component helps to save memory for other useful options and applications available in KeeneticOS. [NDMS-965]

WPA + WPA2 Enterprise/WPA2 Enterprise/WPA2 + WPA3 Enterprise network protection modes are now working properly for hidden network names (SSIDs). [NDMS-929]

The OPKG (Open Package) configuration form has been fixed. [NDW-1294] [Reported by DennoN]

A memory leak issue in the I/O subsystem was fixed. [NDMS-952] [Reported by Serghey]

Proper IGMP snooping operation was restored, so that when you watch IP-TV, only the set-top box (STB) will receive “multicast” traffic, and the rest of the network will not be flooded. [NDMS-954]

USB-modems with embedded SD-card slots are now correctly displayed on the System Dashboard. [NDW-1292] [Reported by drdic]

Download Station efficiency: The Transmission Torrent client of the Download Station application now utilizes NTFS (file system) sparse file support. Adding new torrent tasks, especially those requiring large file allocation, is now a faster and less CPU-consuming process. [NDMS-935]

Configuration enriched: The Port forwarding rule form now has dual TCP/UDP protocol options for your greater convenience in configuring access to the services on your local network from the Internet. [NDW-1241, NDMS-909]

Configuration enriched: 4G USB modems featuring the UsbLte type interface now have a Mobile network type selector among their configuration options. Such manual options are useful to prevent modem software from re-assessing and changing network type on their own over a prolonged period online. [NDW-1284]

Interface update: The Download Station application now has version 1.6.0 of the Transmission WEB Control interface. [NDMS-949]

Dashboard stability: A fix has been implemented for a bug which sometimes caused the System Dashboard view to crash when the Cloud-based remote control and KeenDNS system component was not installed. [NDW-1247] [Reported by KorDen]

Cleaner logs: After an unsuccessful attempt to establish SSL session(s) during SSTP VPN connection initiation, the do_page_fault() SIGSEGV error was appearing in the system log file - the problem causing this error has been fixed. [NDMS-933] [Reported by 3-50]

Efficiency gain: The NTFS filesystem component now has sparse file support. The advantage of sparse files is that storage is only allocated when actually needed, and the period required for initial allocation, and the first writing of data, is reduced. [TFS-20200729]

LTE modules / IoT: The Quectel EG12 and EM12 LTE Advanced category 12 modules are now supported. [NDMS-928]

Please install the 3G/4G QMI USB modems system component in the Management > System Settings section before connecting the modem.

New in NetFlow: The NetFlow Monitor system component is now enabled to set the version of flow records sent towards flow collectors. Specifically, NetFlow versions 5, 9 and 10 (IPFIX) are supported. Configuration is available from the command line interface only. [NDMS-631]

Major security upgrade: Access from the Internet to web applications running on a home network via your registered KeenDNS domain name has been given a substantial security upgrade. If your application runs the HTTPS protocol, you can now select this protocol type in the configuration settings. Most importantly, the Allow access from the Internet configuration option is now independent from any decision you might make to allow remote access to the Web Interface of your Keenetic itself, as configured at the Management > Users and access > Remote access page. [NDMS-927, NDMS-215, NDW-1242, NDW-1237]

Better USB visibility: The Usb Devices table in the Applications section now shows the file systems of connected USB-drives. KeeneticOS supports the NTFS, FAT32, Ext, HFS+ and ExFAT file systems via the installation of the corresponding system component in the Management > System Settings section. [NDW-1233]

Better USB security: Some applications running on your Keenetic device, for example WebDAV server, use temporary folders on attached USB-disks to store partially downloaded files, etc. Now these system folders and files are hidden from the users accessing the same disks via SMB/CIFS file server shares on the local network. [NDMS-689]

Network rules note facility: In the Network Rules > Routing section there is now a way to describe the purpose of a particular static route entry. A Description field is added to the Static route parameters form and User-defined routes table. Further, for your greater convenience, you can sort the table by clicking any column header row, including Description. [NDMS-911, NDW-1231]

Even better Help: Context help signs are now perfectly aligned across the web interface. Clicking the context help sign lists the relevant topics from the Keenetic online user manual. [NDW-1223] [Reported by enterfaza]

The Enable download sequential option of the Download Station application has been fixed. An issue occurred after upgrading Transmission Torrent client to version 3. [NDMS-875] [Reported by engelsit]

Better IPSec security: The IPsec VPN system component now has the latest and greatest security options for making your IPsec VPN tunelling as safe as possible. IPsec connections now support:

[WEB-4059]

Faster IPSec security: The IPsec encryption algorithms AES-CTR, AES-CCM and AES-GCM are now hardware-accelerated on devices equipped with the Multi-Protocol Engine EIP-93.

Another modem supported: The Huawei E8372h-320 USB-modem is now supported. You can use a USB-modem as your primary connection, to backup an existing link, or to balance traffic between multiple links. [NDMS-910]

New, up-to-the-minute, security: The IKEv2 VPN server application is now live. IKEv2 stands for Internet Key Exchange, version 2 (this VPN protocol is also referred to as IKEv2/IPsec, but as IKEv2 is never implemented without the IPsec encryption layer, it is generally shortened to just IKEv2). IKEv2 is one of the newest security protocols, with high speed, and with VPN clients available for all desktop and mobile platforms. [NDW-1208]

Traffic shaping improvements: When a traffic shaping rule is applied to a host in your network, or a network segment, it is now live almost instantly. Remember that the maximum Internet access speed can be shaped independently in each of the upload and download directions. [NDMS-898]

Remote web application access: KeenDNS allows you to enable access from the Internet to web applications running on your network. If your web application runs on HTTPS protocol, the new https option will help to set it up. [NDMS-215]

Download Station update: The Transmission Torrent client of the Download Station system application is updated to version 3.00. [NDM-875]

WISP connection tracking: Traffic counting had developed an issue on Wireless ISP (WISP) connections - this is now back to normal. You can use Wireless ISP connections to attach to a neighbour's Wi‑Fi, or a public Wi‑Fi hot-spot in close proximity as a backup or for traffic offloading. [NDMS-913]

An IPsec performance degradation issue introduced with the addition of ESP ALG was fixed. [NDMS-897]

Enriched KeenDNS service: An advanced configuration option is now available for users of the KeenDNS web applications feature — the real IP address of a remote client can be presented to the web application, instead of the Keenetic router's IP address.

Richer modem support: Compatibility with the latest USB modems has been improved by adding support for the NTB-32 data transfer mode. [NDMS-704]

Initial setup wizard could not start after restoring factory settings on device. [NDW-1198]

Device list cleaning: Occasionally, registered hosts appeared twice on the Registered devices list - this has now been fixed. [NDMS-884]

Better traffic counting: Part of the traffic was sometimes counted incorrectly in the Host Traffic Monitor as coming from unregistered hosts. The Host Traffic Monitor is a useful tool, valued by both consumer and small business users, that tracks Internet traffic consumption by devices in your home or office. [NDMS-738, NDMS-737]

Connectivity: A few Wi‑Fi clients had trouble connecting to a Keenetic Wi‑Fi network configured in WPA2-PSK + WPA3-PSK mixed mode. [NDMS-858]

More powerful remote activation: Sending a Wake-on-LAN magic packet from a remote location over the Internet to turn on a device in the local network did not work for network segments with Connection policy for unregistered devices set to No Internet access - this is now resolved. [NDMS-844]

Tidier readout: USB storage capable devices no longer show “not found: show/media” errors when the USB storage support system component is removed. [NDW-1194]