KeeneticOS updates — Preview Channel

The new WireGuard VPN via option allows the underlying connection to be implicitly specified for peers. [NDM-272]

The new Pairwise Master Key Security Association (PMK SA) cache lifetime control option is now available in the Command Line Interface (CLI). The default value has been changed from 720 seconds to 1440 seconds. [NDM-3052]

A new option to bind USB devices to specific ports or paths is now available through the Command Line Interface (CLI). [NDM-3044]

The Vodafone K5150 (ProdID=1c26) 4G LTE Cat 4 USB modem is now supported. [NDM-2994]

The new IPv6 interface identifier options are now available, providing a custom setting in the Command Line Interface (CLI). [NDM-2672]

The new XFRM interface implementation allows IPsec VPN site-to-site tunnel traffic to follow firewall rules and operate based on the routing table, including use as an Internet connection. [NDM-3009]

The new ntp source option allows to specify the source IP address for outgoing NTP client traffic. [NDM-3006]

Enhanced SNMP implementation allows multiple community setups and profiles with restricted access to OID branches. [NDM-3008]

The option to enforce Protected Management Frames (PMF) is now available for wireless interfaces with WPA2 protection. [NDM-2930]

Introduced synchronisation of read-only permission for user accounts for Mesh Wi-Fi system extenders. [NDM-2985]

The additional user accounts are now transfered to extenders in the Wi-Fi System. [NDM-2871]

Added sequential shutdown of bridged interfaces during a broadcast storm to protect remote access to the Keenetic device. [SYS-1003]

The new Proxy connection options, which introduce connectivity over the UDP protocol, are now available from the Command Line Interface (CLI). [NDM-2971]

The new ZeroTier client supports secure connection with your private networks and devices anywhere online. [NDM-2883]:

The implementation of automatic source NAT now includes address translation for networks declared as aliases, ensuring the correct operation of the tools ping and tools traceroute commands. [NDM-3061]

The OpenVPN service has been updated to version 2.6.7. This update includes fixes for the following security vulnerabilities: CVE-2023-46850 and CVE-2023-46849. [NDM-3049]

The Keenetic Wi-Fi system now allows manual selection of the STP bridge priority value to work seamlessly on an existing network with managed switches. [NDM-2406]

IPv6 local prefixes of the ULA fc00::/7 address space are now available for configuration on network interfaces. [NDM-3039]

The new source-address option allows the source IP address to be specified for the ping and ping6 CLI commands. [NDM-3016]

The Kernel modules for Netfilter system component now includes vxlan support. [SYS-1028]

Updated the netatalk service used in the AFP file sharing system component to version 3.1.15. [SYS-1021]

Increased the number of wireless Network name SSIDs up to 7 on each band. [SYS-995]

Implemented blocking of transit IPv6 DNS traffic when Internet filters are enabled. [NDM-2960]

The OpenSSL library is updated to the latest version 3.1.2, which fixes the following list of vulnerabilities: CVE-2023-3817, CVE-2023-3446, CVE-2023-2975. [SYS-949]

Incoming and outgoing bandwidth control for IntelliQoS implemented in the Command Line Interface (CLI). [NDM-2757]

The OpenSSL library is updated to the latest version, 3.1.1, which fixes the following list of vulnerabilities: CVE-2023-2650, CVE-2023-0465. [SYS-883]

Fixed the DNS proxy issue that caused the the DNS_PROBE_FINISHED_NXDOMAIN error message in the web browser when Internet access was blocked by a schedule for another client. [SYS-1050]

Fixed incorrect application of the crypto map {name} virtual-ip dhcp route [{address}/{mask}] CLI command. [NDM-3053]

Fixed an issue with the Traffic Monitor that could cause inaccurate client traffic counts or misidentification of unregistered clients when using the Hardware Network Accelerator. [SYS-965]

Fixed an issue that reduced the speed of traffic between interfaces when the Hardware Network Accelerator is enabled. [SYS-1037]

Schedule event handling has been improved to handle switching between Standard Time and Daylight Saving Time. [NDM-3036]

Fixed the system failed [0xcffd0c26] error message when creating/modifying a multipath Internet Connection Policy with a TunnelSixInFour connection. [NDM-3051]

Fixed the ndnproxy: [....] unable to send request: invalid argument error message in the System log. [NDM-3054]

Internet connection policy correctly aggregates bandwidth when using mobile broadband connections in Multipath mode. [NDM-2969]

The Proxy client compatibility issue that prevented it from working correctly with HTTPS servers has been fixed. [NDM-3020]

The system failed [0xcffd0287] error message when importing WireGuard VPN configurations has been fixed. [NDM-3045]

Fixed IPv6 in IPv4 Tunnels configuration in Web interface. [NWI-3076]

Fixed operation of static routes with the exclusive route option enabled. [NDM-3029]

The static DNS servers bound to the backup connection are no longer used for the active connection. [NDM-2990]

Fixed CLAT working in backup connection mode. [NDM-2885]

Traffic Monitor now correctly displays client traffic in VPN connections established over public networks. [SYS-1004]

Fixed Band Steering configuration errors on extenders. [NDM-2962]

Fixed Ping Check system failed [0xcffd0304], network unreachable error message that appears under certain conditions. [NDM-2906]

Fixed KeenDNS cloud connectivity over IPv6 protocol. [NDM-2894]

The problem that causes the error message Ndns::Tunnel: out of memory [0xcffe00ba] in the System log has been fixed. [NDM-2895]

Fixed display of disabled Internet connection status in the Web interface. [NDM-2890]

Fixed operation of OpenVPN connections using a custom Connection policy. [NDM-2888]