KeeneticOS 4.2
KeeneticOS release notes for Keenetic Hero DSL (KN-2410) in the Development Channel
KeeneticOS releases in this channel show what we're working on right now. We update roughly weekly. N.B.: While releases in this channel do undergo testing, they are still sometimes bugs present, as we want you, our community, to share in what's new as soon as possible. Your input is really valued.
Keenetic Hero DSL (KN-2410) is currently in the Standard Updates support period and receives regular software updates, including security enhancements, new features, operating system updates, and bug fixes.
KeeneticOS 4.2 Alpha 14
15/06/2024
New
The Phone Station and Phone Lines pages are now available in the Next-generation web interface (beta) component. [NWI-3356]
Fixed
Fixed selection of the best node for wireless backhaul connection in the Mesh Wi-Fi System. [SYS-1161]
KeeneticOS 4.2 Alpha 13
08/06/2024
Fixed
Fixed brute force blocking policy for incoming connections to the SFTP Server application. [NDM-3263]
The following fixes have been applied to the Next-generation web interface (beta) component.
Fixed incorrect PSK key validation for the site-to-site IPsec VPN connections. The PSK key can be up to
96characters in length. [NWI-3504]Fixed the refresh of USB drives and printers tile after moving. [NWI-3476] [Forum topic]
Fixed saving the configuration in the Network Ports section of the System settings page. [NWI-3488] [Forum topic]
Fixed the display of the Internet safety field on the Internet tile. [NWI-3467] [Forum topic]
KeeneticOS 4.2 Alpha 12
01/06/2024
New
You can now assign Network ports on Extender devices to any configured network segment using the Command Line Interface (CLI). Alternatively, you may wish to disable the Network ports for security reasons. [NDM-3162]
mws member {member} port {port} [no] access {interface}— assign{port}on a{member}node to access an{interface}segment;mws member {member} port {port} [no] disable— disable{port}on a{member}node.
Enhanced software packet processing engine to enable acceleration for traffic with a manually set TTL value. [SYS-1157] [Forum topic]
Fixed
Fixed IPv6 traffic accounting with the hardware packet processing engine disabled. [NDM-3234]
Fixed remote access over an IKEv2/IPsec VPN connection to a local network host for which a SNAT mapping rule is configured. [NDM-3310]
An issue that caused the error message
failed to lookup service for segment "WifiMaster1"on Extender devices to appear in the System log has been fixed. [NDM-3325]The following fixes have been applied to the Next-generation web interface (beta) component.
Fixed the colour of the selected application tile using the Dark theme. [NWI-3452] [Forum topic]
Fixed an error in the Roaming for Wireless Clients settings under certain conditions. [NWI-3462] [Forum topic]
Fixed issue where network segment would disappear after system restart, caused by enabling the Captive portal. [NWI-3479] [Forum topic]
KeeneticOS 4.2 Alpha 11
25/05/2024
New
The new IntelliQoS option allows 802.1p priority code point (PCP) mapping for egress packets in the command line interface (CLI). [NDM-3318] [Forum topic]
interface {name} vlan qos egress map {priority} {pcp}{priority}— NTCE priority queue number. Use0to assign the same PCP value to any outgoing packet on the interface;{pcp}— set the new value of the 802.1p priority code point.
The implementation of a ZeroTier connection now includes accepting managed routes and DNS servers published on the ZeroTier network controller. [NDM-3319] [Forum topic]
Improved
The OpenSSL library has been moved to a different branch with the latest version
3.0.13. [SYS-1152]Improved robustness of the DNS over TLS and DNS over HTTPS server cache. [NDM-3320] [Forum topic]
The behaviour of toggles in tables has been improved in the Next-generation web interface (beta) component. [NWI-3465] [Forum topic]
Fixed
Fixed an issue where static DNS settings were cleared when the device was restarted. [NDM-3303]
Fixed the DynDNS domain name validation; now it's possible to use only one domain. [NDM-3309] [Forum topic]
Fixed incorrect behaviour of Hardware Network Accelerator toggle due to incorrect web-api settings format. [NDM-3311] [Forum topic]
Fixed incorrect behaviour of Enable IPv6 checkbox for mobile 4G/3G connections due to incorrect web-api settings format. [NDM-3312] [Forum topic]
KeeneticOS 4.2 Alpha 10
17/05/2024
New
The new OpenConnect VPN server application tile is now available in the Next-generation web interface (beta) component on the Applications page. [NWI-3407]
Improved
The clients of the VPN Server (PPTP, SSTP and OpenConnect) now access the Internet following the Connection Policy of the local network to which the server is bound. [NDM-3295]
Fixed
Fixed Connection Policies work with IPv6 protocol under certain conditions. [NDM-3289]
Enabled the SNMP reports by OID
ifAdminStatusto monitor the operational state of device ports via third-party software. [NDM-3296]Fixed a problem where certain settings were disabled due to incorrect inversion of boolean variables. [NDM-3297] [Forum topic]
The problem of returning
nullfor undefined boolean settings in the KeeneticOS core API has been fixed. [NDM-3298] [Forum topic]Fixed the continued reconnections of OpenVPN with more than one active client or server. [NDM-3301]
A problem that caused the
Command::XmlConfig: "apn": failed to set "comment": invalid keyerror message to appear in the System log has been fixed. [NDM-3307] [Forum topic]The following fixes have been applied to the Next-generation web interface (beta) component.
Server address input validation for the OpenConnect VPN client fixed. [NWI-3463] [Forum topic]
Fixed the display of the backup gateway address for site-to-site IPsec VPN connections. [NWI-3464] [Forum topic]
Fixed the display of using IPv4 over IPv6 connections. [NWI-3472]
KeeneticOS 4.2 Alpha 9
09/05/2024
Fixed
Fixed a problem that could cause the password argument to be parsed incorrectly during configuration. [NDM-3293] [Forum topic]
KeeneticOS 4.2 Alpha 8
09/05/2024
New
The new options have been implemented in the Next-generation web interface (beta) component.
Added a line break for the long modem firmware version in the Show signal levels popup. [NWI-3422] [Forum topic]
Added a new Segment default policy to the Policy Bindings tab for the clients. [NWI-3415]
Improved
The implementation of IKEv1/IKEv2 IPsec VPN servers now allows to avoid IP address conflicts with other interfaces. [NDM-3250]
Implemented support for direct access mode to KeenDNS domain from browsers with
TLS 1.3 hybridized Kyberenabled. [NDM-3284] [Forum topic]
Fixed
The following fixes have been applied to the Next-generation web interface (beta) component.
Fixed password reset on change of user account settings. [NWI-3438] [Forum topic]
Fixed sorting in the Mesh Wi-Fi System table. [NWI-3473] [Forum topic]
Fixed the colour of the Status LED symbol on the Web Interface Login page. [NWI-3435] [Forum topic]
KeeneticOS 4.2 Alpha 7
28/04/2024
Fixed
An issue that caused the
system failed [0xcffd0042]error message to appear in the System log during client auto-registration has been fixed. [NDM-3275] [Forum topic]An issue that caused the
duplicate keyerror message to appear in the System log when opening the IntelliQoS page has been fixed. [NDM-3276] [Forum topic]
KeeneticOS 4.2 Alpha 6
27/04/2024
New
The Quectel RM500U-GL 5G NR, LTE Cat 12 USB (
UsbLte-type) modem module is now supported. [NDM-3203]Tip
To connect an LTE module to your Keenetic device, you can purchase a third-party USB adapter with a SIM card slot for the Mini PCI-E LTE module or M.2 LTE module.
The new options have been implemented in the Next-generation web interface (beta) component.
Implemented Call History page for the Keenetic Phone Station system component. [NWI-3398]
Added support for the OpenConnect protocol to the Other Connections page. [NWI-3406]
Improved
Improved host detection using
EchoReqin theICMPv6protocol to ensure correct operation of port forwarding rules for the IPv6 protocol. [NDM-3265] [Forum topic]Optimized the memory consumption of the SMB file and printer sharing system component when using the Cx File Explorer mobile application. [NDM-2927] [Forum topic]
Added SMS subsystem support for Fibocom FM350 and Quectel RM500U modem modules. [NDM-3267]
The Phase 2 of the site-to-site IPsec tunnel now supports the SHA512 HMAC algorithm. [NDM-3269]
crypto ipsec transform-set {name} hmac esp-sha512-hmac— enableesp-sha512-hmacalgorithm for transform-set{name}
Added MAC address and registration time information to the name of devices registered automatically. This will help you easily identify and keep track of the devices on your network. [NDM-3253]
Fixed
Fixed the forwarding of the source IP address in the
X-Real-IPheader when accessing web applications via KeenDNS. [NDM-2214]Fixed random disconnection of IKEv2 tunnels to the Keenetic IKEv2/IPsec VPN server. [NDM-3059]
The Application traffic analyser engine now operates more efficiently with the IPv6 protocol under high network load. [NDM-3235]
Fixed problem with converting Band Steering settings after updating to KeeneticOS
4.1.xversion. [NDM-3241]Fixed hostname resolution for Ping Check in TCP/TLS port check mode when using secure DNS for domain name resolution. [NDM-3273] [Forum topic]
Fixed access to the KeenDNS Web Applications configured with prohibited remote access (
security-level private) from the home network. [NDM-3264] [Forum topic]The following fixes have been applied to the Next-generation web interface (beta) component.
Fixed several visual bugs in the Dark theme in the USB Devices section. [NWI-3375] [Forum topic]
Fixed the indents on the Client Lists settings popup. [NWI-3403] [Forum topic]
Fixed group operations on the Connection Policies page. [NWI-3404] [Forum topic]
Fixed the rule selection on the Firewall page. [NWI-3419] [Forum topic]
Fixed Internet connection toggles on the System Dashboard page. [NWI-3417] [Forum topic]
Fixed the blocked Add Server button when adding more than eight servers to the System DNS resolution profile. [NWI-3418] [Forum topic]
KeeneticOS 4.2 Alpha 5
20/04/2024
New
The
camouflagemode option has been added to both SSTP VPN and OpenConnect VPN servers and clients, providing greater security against remote service scanning. [NDM-3257] [Forum topic]oc-server camouflage— enablecamouflageoption for the OpenConnect VPN serversstp-server camouflage— enablecamouflageoption for the SSTP VPN server
The Next-generation web interface (beta) component now supports Extender mode operation. [NWI-1861]
Fixed
Fixed spurious EoIP/IPsec connection attempts after device restart. [NDM-2518]
Incomplete application of static IPv6 routes when re-establishing an associated VPN connection after a reboot fixed. [NDM-3248] [Forum topic]
Fixed issue with absent route to remote Wireguard endpoint after device restart. [NDM-3223]
The problem that causes the error message
PingCheck::Resolve: "default": system failed [0xcffd003c], upstream is very slow to respondin the System log has been fixed. [NDM-3244]UPnP service rules are now correctly applied to clients accessing the Internet using the Connection policy with active multipath mode. [NDM-3251]
The following fixes have been applied to the Next-generation web interface (beta) component.
Fixed the display of the SMS page using the Dark theme. [NWI-3324] [Forum topic]
Fixed the
statusLedicon on the Web Interface Login page. [NWI-3363] [Forum topic]Fixed the height of the Search query input field. [NWI-3328] [Forum topic]
KeeneticOS 4.2 Alpha 4
13/04/2024
Improved
DNS over HTTPS (DoH) now supports secure name resolution over the HTTP/3 protocol. [NDM-3229] [Forum topic]
Implemented an
aggressivemode option for the IKEv1 client in the command line interface (CLI) for compatibility with VPN (IPsec) servers running on Fritz!Box routers. [NDM-3227]interface {name} ipsec aggressive— set theaggressivePhase 1 mode for VPN connection{name}
Improved display of 4G/3G signal metrics on the Mobile page in the Next-generation web interface (beta) component. [NWI-3383] [Forum topic]
Fixed
Fixed DNS query interception in the additional network segments. [NDM-3228] [Forum topic]
The following fixes have been applied to the Next-generation web interface (beta) component.
Fixed several issues with the System Dashboard page. [NWI-3323] [Forum topic]
KeeneticOS system component names are now displayed in English if the translation is not available. [NWI-3364] [Forum topic]
An expanded view arrow for multi-partition USB storage devices has been added to the USB Devices section of the Applications menu. [NWI-3369] [Forum topic]
Added an Expand/Collapse action for the parent items in the File browser pop-up in the USB Devices section of the Applications menu. [NWI-3370] [Forum topic]
Fixed flickering when tapping folders in the File browser on mobile devices. [NWI-3371] [Forum topic]
Added scrolling to the Permissions for the selected folder panel in the File browser on mobile devices. [NWI-3376] [Forum topic]
The IPv6 settings section now only appears in connection configurations when the IPv6 system component is installed. [NWI-3384] [Forum topic]
Fixed the display of shadows in the Dark theme. [NWI-3389] [Forum topic]
Fixed the display of the Save and Cancel buttons when changing Wi-Fi settings in the My Networks and Wi-Fi menu. [NWI-3392] [Forum topic]
The content of the More Information block on the Clients Lists page has been corrected. [NWI-3402] [Forum topic]
Fixed the Connection policy dropdown display on the Clients Lists page in mobile view. [NWI-3373] [Forum topic]
KeeneticOS 4.2 Alpha 3
06/04/2024
New
The new OpenConnect VPN client system component is now available, allowing you to establish a secure connection to a remote server via the command line interface (CLI). [NDM-3207]
Improved
Implemented a workaround to prevent certain Realtek Wi-Fi drivers from crashing on Windows OS when passing non-PMF authentication on a PMF-enabled access point. [SYS-1131]
Fixed
Fixed priority of user-defined
ip staticrules over automatic UPnP port forwarding rules to a host. [NDM-3078]Fixed home network access for L2TP/IPsec VPN server clients when
ip staticrules are configured on WAN IP aliases. [NDM-3110]Fixed binding to the WAN address and inbound access to the service port for the ZeroTier client connection. [NDM-3216] [Forum topic]
The following fixes have been applied to the Next-generation web interface (beta) component.
Fixed the display of the Network ports card in the Firefox browser. [NWI-3357] [Forum topic]
Fixed the display of the Network SSID tooltips on the Wi-Fi Monitor page. [NWI-3379] [Forum topic]
KeeneticOS 4.2 Alpha 2
30/03/2024
New
A new CLI
grepextension is now available to filter the output of theshowcommand. [NDM-3075]grep [-A <n>] [-B <n>] [-C <n>] regex— trim theshowcommand output using theregexregular expression.-A— number of XML nodes to show after match.-B— number of XML nodes to show before match.-C— displayed XML cluster depth.
For example:
(config)>
show interface | grep addressInterface, name = "Home" address: 192.168.2.1 ipv6: Interface, name = "Guest" address: 10.1.30.1 ipv6: (config)>show system | grep cpuloadcpuload: 5
Improved
A new read/send timeout option allows the session lifetime for Web applications of the KeenDNS proxy service to be set via the command line interface (CLI). [NDM-3157]
ip http proxy {name} timeout {timeout}— set{timeout}for KeenDNS{name}proxy.
The WireGuard advanced security configuration (ASC) parameters are now available in the command line interface (CLI). [NDM-3202]
interface {name} wireguard asc {jc} {jmin} {jmax} {s1} {s2} {h1} {h2} {h3} {h4}— set additional ASC parameters for WireGuard{name}tunnel.
Fixed
Fixed iOS L2TP/IPsec client disconnecting under heavy load. [NDM-3180]
The following fixes have been applied to the Next-generation web interface (beta) component.
Fixed display of the Wireless ISP (WISP) connection details on the System Dashboard page under certain conditions. [NWI-3339] [Forum topic]
Fixed display of notifications in the Dark theme. [NWI-3358] [Forum topic]
Fixed HTML code appearing as text in certain headers. [NWI-3359] [Forum topic]
Fixed errors occurring when the Cloud-based content filtering and ad blocking component is uninstalled. [NWI-3360] [Forum topic]
Added missing translations for some UI elements. [NWI-3361] [Forum topic]
KeeneticOS 4.2 Alpha 1
22/03/2024
New
A new segment default policy for hosts has been implemented and is now enabled by default. Registered devices with this connection policy assigned will follow the default connection policy of the network segment they are connecting to. [NDM-2237]
ip hotspot host {MAC} conform— set host with specified{MAC}to follow the current segment's connection policy.
The new application filtering option is now available in the Application traffic analyser service via command line interface (CLI). This option allows to create a filtering profile, add required applications, assign a host or segment to the filtering profile and enable the operation schedule. [NDM-3069]
ntce filter profile {name} application {application}— add an application to the profile.ntce filter profile {name} group {group}— add an application group to the profile.ntce filter profile {name} type {type}— set the profile type, which can bepermitordeny.ntce filter profile {name} description {description}— set the profile description.ntce filter profile {name} schedule {schedule}— set the profile schedule.ntce filter assign host {host} {profile}— assign a profile to a registered host (MAC address).ntce filter assign interface {interface} {profile}— assign a profile to an interface.
The new option to automatically register hosts in the Home segment is now available (enabled by default). You can disable this behaviour using the command line interface (CLI). [NDM-3101]
ip hotspot auto-register disable— disable automatic host registration for the Home segment.
The new OpenConnect VPN server system component is now available, providing a remote SSL VPN connection to your Keenetic. [NDM-3141]
oc-server interface {interface}— bind OpenConnect server to an interface.oc-server pool-range {begin} {size}— set OpenConnect address pool.oc-server static-ip {name} {address}— set static IP address for a user.oc-server mtu {mtu}— set OpenConnect server MTU.oc-server multi-login— enable multiple connections with the same user account.ip nat oc— enable NAT for OpenConnect clients.service oc-server— enable OpenConnect service.
The Keenetic Phone Station system component now supports the filtering of incoming calls. [VOX-271]
nvox sip {id} whitelist {digitmap}— create whitelist for SIP{id}with specified{digitmap};for example:
nvox sip 1 whitelist +1111x.|+2222x.|2389x.|32756— allows phone calls with numbers starting from+1111,+2222,2389and an32756number.nvox sip {id} blacklist {digitmap}— create blacklist for SIP{id}with specified{digitmap};for example:
nvox sip 1 blacklist +3333x.— block phone number starting from+3333.nvox sip {id} enable-whitelist— enable whitelist for SIP{id}.nvox sip {id} enable-blacklist— enable blacklist for SIP{id}.show nvox sip {id} whitelist— display allowlist settings.show nvox sip {id} blacklist— display blocklist settings.
The Keenetic Phone Station system now supports import of the phonebook from a file. [VOX-326]
nvox phonebook import {filename} {mode}— import contacts in the vCard format.filename— *.vcf filename;mode— import mode:replace,overwrite,extend, orduplicate.
nvox phonebook delete— delete all contacts from the phonebook.nvox sip {id} enable-whitelist-phonebook— enable phonebook as an allowlist filter for incoming calls.show nvox phonebook— display all phonebook records.
Improved
Disabling Port Forwarding (
ip static) rules now forces matching active sessions to be dropped. [NDM-3067]Implemented new options to preserve Referer and Origin headers for Web applications of the KeenDNS proxy service in the command line interface (CLI). [NDM-3089] [Forum topic]
ip http proxy {name} preserve-referer— preserve Referer header for{name}of the web proxy rule.ip http proxy {name} preserve-origin— preserve Origin header for{name}of the web proxy rule.
A NetFlow monitor system component can now collect IPv6 traffic information and monitor network flows. [NDM-3109]
The
MOBIKEextension (RFC 4555) has been enabled for both the IKEv2/IPsec VPN Server and the IKEv2 client. [NDM-3164]The improvements have been applied to the Next-generation web interface (beta) component.
Updated Applications card on the System Dashboard page. [NWI-3188] [Forum topic]
Added links to non-mesh extenders on the Client Lists page. [NWI-3189] [Forum topic]
Added a warning about possible connection loss when changing Wi-Fi settings. [NWI-3249] [Forum topic]
Removed the information via which node a client device is connected to when the Wi-Fi System controller component is not installed. [NWI-3334] [Forum topic]
The System Dashboard page now has an Active connections statistics string in the About the System card. [NWI-3326] [Forum topic]
Fixed
The CloudFlare content filter has been corrected to work properly on networks that do not support IPv6. [NDM-3163]
Fixed port forwarding issues after Hotspot (
ip hostspot) code refactoring. [NDM-3127, NDM-3171] [Forum topic]The following fixes have been applied to the Next-generation web interface (beta) component.
Fixed column filters on the Mesh Wi-Fi System > Transition Log page. [NWI-3212] [Forum topic]
Fixed Subnet validation for the Source IP field in the Firewall rule editor. [NWI-3213] [Forum topic]
Fixed display of wired connections in the Mesh Wi-Fi System table when an Extender is connected via another Extender. [NWI-3214] [Forum topic]
Fixed alignment of input field names. [NWI-3239] [Forum topic]
Fixed header alignment on the login page for mobile devices. [NWI-3240] [Forum topic]
Fixed visibility of the Save and Cancel buttons on the System Component Options page. [NWI-3191] [Forum topic]
Fixed display of ACL (access list) rules and UI elements on the Firewall page. [NWI-3153] [Forum topic]
Fixed minor issues on the Application traffic analyser page. [NWI-3163] [Forum topic]
Removed the unnecessary horizontal scrolling from the Network Ports block in the General System Settings for mobile devices. [NWI-3169] [Forum topic]
Fixed display of the Change Operating Mode block in the Dark theme. [NWI-3170] [Forum topic]
Removed text truncation in pop-up dialogues on mobile devices. [NWI-3181] [Forum topic]
Fixed frequency band selector display of the empty band group on the Mobile page. [NWI-3194] [Forum topic]
Fixed Scan the air dialog on the Mobile page. [NWI-3193] [Forum topic]
Fixed style of select boxes on mobile devices. [NWI-3192] [Forum topic]
Fixed Firewall Rule editor formatting. [NWI-3190] [Forum topic]
Fixed display of a larger list of knowledge base articles in the Related Articles popup. [NWI-3250] [Forum topic]
Fixed display of the chart on the Traffic Monitor page. [NWI-3254] [Forum topic]
Fixed saving of the Data compression (CCP) checkbox value when configuring a PPTP connection. [NWI-3296] [Forum topic]
Minor bugs fixed on the Mobile page. [NWI-3297] [Forum topic]
Fixed filtering of the System Component Options list on the General System Settings page. [NWI-3311] [Forum topic]
Fixed welcome popup message on mobile devices. [NWI-3312] [Forum topic]