KeeneticOS updates — Dev Channel

Added MAC filtering for ApCli backhaul connection with bound BSSID for correct operation of Mesh Wi-Fi System. [SYS-1118]

Fixed the Wi-Fi Fast Transition (802.11r) operation in the case of different SSIDs on the same network segment. [NDM-2917]

The use of the traceroute diagnostic tool with a specified port for TCP/UDP has been corrected. CLI command example: tools traceroute 1.1.1.1 port 1883. [NDM-3138]

Fixed duplicate 802.11k (Radio Resource Management) RRM: perform scan notified channel: events in the System log when changing Wi-Fi channel on Mesh Wi-Fi System nodes. [SYS-1098]

The prefix delegation hint command for the DHCPv6 client has been implemented in the Command Line Interface (CLI). [NDM-3076]

The error message wind: failed to decrypt message has been moved to debug messages. [SYS-1084] [Forum topic]

The number of the ip alias entries has been increased from 8 to 250. [NDM-3063]

The OpenSSL library has been updated to the latest version 3.1.5, which fixes the following list of vulnerabilities: CVE-2023-5678, CVE-2024-0727. [SYS-1097]

Updated the system timezone for Kazakhstan to UTC+5. [NDM-3147]

IntelliQoS rate limiting (ntce upstream rate-limit) is now working as intended. [NDM-3104]

Fixed the ntce-pace2: unable to proceed with data, exit error message with IntelliQoS service under certain conditions. [NDM-3115]

Fixed issue with running multiple Proxy Connections at the same time. [NDM-3122]

Fixed Dns::Proxy service crash when mirroring TCP requests to IntelliQoS. [SYS-1099]

Fixed the issue where Band Steering mode would reset to the None selection under certain conditions. [NDM-3126]

The new "Handoff" option to force Wi-Fi clients with weak signals to disconnect is now available via the Command Line Interface (CLI). [NDM-3081]

Fixed wireless client disconnect/connect event conditions that were causing incorrect notifications from the Keenetic mobile application. [NDM-3079]

SSTP VPN server address allocation now works correctly for IPv6 clients. [NDM-2821]

Fixed a reboot issue during ZeroTier connection setup. [SYS-1066]

The new WireGuard VPN via option allows the underlying connection to be implicitly specified for peers. [NDM-272] [Forum topic]

The implementation of automatic source NAT now includes address translation for networks declared as aliases, ensuring the correct operation of the tools ping and tools traceroute commands. [NDM-3061]

Fixed the DNS proxy issue that caused the the DNS_PROBE_FINISHED_NXDOMAIN error message in the web browser when Internet access was blocked by a schedule for another client. [SYS-1050]

Fixed Ping Check compatibility with DNS over HTTPS (DoH) and DNS over TLS (DoT) servers. [NDM-3062]

The new Pairwise Master Key Security Association (PMK SA) cache lifetime control option is now available in the Command Line Interface (CLI). The default value has been changed from 720 seconds to 1440 seconds. [NDM-3052]

Fixed incorrect application of the crypto map {name} virtual-ip dhcp route [{address}/{mask}] CLI command. [NDM-3053]