در این نسخه تغییرات بسیاری داشتیم از جمله
- حذف شدن پکیج Wireless-fp و اضافه شدن پکیج Wireless-rep
- اضافه شدن “interface list” – به شما کمک می کند که از اینترفیس های مورد نیاز یک لیست تهیه کنید.
- اضافه شدن “firewall raw” – این امکان را به شما میدهد که کانکشن های های بیهوده را از قسمت Connection tracking حذف کنید.
در ادامه تمام تغییرات این نسخه را مشاهده میکنیم
arm - added Dude server support
dude - (changes discussed here: http://forum.mikrotik.com/viewtopic.php?f=8&t=110428)
dude - server package is now made smaller. client side content upgrade is now removed from it and is downloaded straight from our cloud. So workstations on which client is used will require access to wan. Alternatively upgrade must be done by reinstalling the client on each new release
firewall - added "/interface list" menu which allows to create list of interfaces which can be used as in/out-interface-list matcher in firewall and use as a filter in traffic-flow
firewall - added pre-connection tracking filter - "raw" table, that allow to protect connection-tracking from unnecessary traffic
firewall - allow to add domain name to address-lists (dynamic entries for resolved addresses will be added to specified list)
wireless - wireless-fp is discontinued, it needs to be uninstalled/disabled before upgrade
address - allow multiple equal ip addresses to be added if neither or only one is enabled
address-list - make "dynamic=yes" as read-only option
arm - fixed kernel failure on low memory
arp - added arp-timeout option per interface
bonding - fixed 802.3ad load balancing mode over tunnels
bonding - fixed bonding primary slave assignment for ovpn interfaces after startup
bonding - fixed crash on RoMON traffic transmit
bonding - implemented l2mtu value == smallest slave interfaces l2mtu
capsman - fixed crash when running over ovpn
certificate - added automatic scep renewal delay after startup to avoid all requests accessing CA at the same time
certificate - cancel pending renew when certificate becomes valid after date change
certificate - display issuer and subject on check failure
certificate - do not exit after card-verify
certificate - force scep renewal on system clock updates
chr - fixed CHR seeing its own system disk mounted as additional data disk
clock - fixed time keeping for SXT ac, 911L, cAP, mAP lite, wAP
clock - save current time to configuration once per day even if there are no time zone adjustments pending
cloud - fixed export order
console - fixed get false function
console - show message time in echo log messages
defconf - changed channel extension to 20/40/80mhz for all ac boards
dhcp-pd - correct server listing for commands
dhcp-server - fixed radius framed route addition after reboot on client renew
dhcpv6-client - fixed ia lifetime validation when it is set by dhcpv6 client
dhcpv6-relay - set packet link-address only when it is manually configured
dhcpv6-server - fixed binding last-seen update
disk - added support for Plextor PX-G128M6e(A) SSD on CCR1072
email - fixed send from winbox
email - removed subject and body length limit
ethernet - fixed incorrect ether1 link speed after reboot on rb4xx series routers
ethernet - fixed memory leak when setting interface without changing configuration
fastpath - fixed kernel failure when fastpath handles packet with multicast dst-address
fetch - support tls host name extension
firewall - added udplite, dccp, sctp connection tracking helpers
firewall - do not show disabled=no in export
firewall - fixed spelling in built-in firewall commentary
gps - fixed longitude seconds part
health - fixed broken factory voltage calibration data for some hAP ac boards
health - fixed incorrect voltage after reboot on RB2011UAS
icmp - fixed kernel failure when icmp packet could not be processed on high load
ippool6 - fixed crash on acquire when prefix length is equal with pool prefix length
ipsec - add dead ph2 detection exception for windows msgid noncompliance with rfc
ipsec - added dead ph2 reply detection
ipsec - don't register temporary ph2 on dead list
ipsec - fix initiator modecfg dynamic dns
ipsec - fixed AH with SHA2
ipsec - fixed checks before accessing ph1 nat options
ipsec - fixed mode-config export
ipsec - fixed route cache overflow when using ipsec with route cache disabled
ipsec - fixed windows msgid check on x86 devices
ipsec - show remote peer address in error messages when possible
ipsec - store udp encapsulation type in proposal
kernel - fixed possible kernel deadlock when Sierra USB mode is being used
l2tp - fixed crash when rebooting or disabling l2tp while there are still active connections
lcd - reduced lowest backlight-timeout value from 5m to 30s
license - do not expire demo license right after fresh installation of x86
log - added whole scep certificate chain print
log - increase excessive multicast/broadcast warning threshold every time it is logged
log - make logging process less aggressive on startup
lte - added allow-roaming option for Huawei MU709, ME909s devices
lte - added cinterion pls8 support
lte - added support for Huawei E3531
lte - added support for ZTE ZM8620
lte - added use-peer-dns option (will work only combined with add-default-route)
lte - changed driver loading for class 2 usb rndis devices
lte - display message in lte,error log if no response received
lte - display message in lte,error log when PIN is required
lte - fix crash on SXT LTE while resetting card while at high traffic
lte - fixed access technology logging
lte - fixed connection for Huawei without cell info
lte - fixed modem init when pin request present
lte - fixed modem network configuration version checks
lte - fixed network-mode support after downgrade
lte - Huawei MU609 must use latest firmware to work correctly
lte - improved multiple same model modems identification
lte - show uicc for Huawei modems
lte - use only creg result codes as network status indications
mesh - fixed crash when connection references a mesh network but it is not available any more
modem - added support for Alcatel OneTouch X600
modem - added support for Quectel EC21 and EC25
modem - added support for SpeedUP SU-900U modem
nand - improved nand refresh feature to enhance stored data integrity
ovpn - enable perfect forwarding secrecy support by default
ovpn - fixed compatibility with OpenVPN 2.3.11
pppoe - allow to set MTU and MRU higher than 1500 for PPPoE
pppoe - do not allow to send out bigger packets than l2mtu if mrru is provided
proxy - limit max ram usage to 80% for tile and x86 devices
queue - reset queue type on interfaces which default queue type changes to no-queue after upgrade
rb2011 - fixed ether6-ether10 flapping when two ports from both switch chips are in the same bridge
rb3011 - fixed port flapping on ether6-ether10
rb3011 - fixed reset button functionality
rb3011 - fixed usb driver load
rb3011 - fixed usb storage mounting
rb3011 - improved performance on high cpu usage
route - added suppport for more than 8 bits of options
route - fixed ospf by handling ipv6 encoded prefixes with stray bits
sniffer - fixed ipv6 address matching
snmp - fixed get function for snmp>=v2 when oid does not exist
snmp - fixed interface stats branch from MikroTik MIB
snmp - report current access technology and cell id for lte modems
snmp - report ram memory as ram instead of other
ssh - add rsa host key size parameter
ssh-keygen - add rsa key size parameter
ssl - do not exit while there still are active sessions
ssl - fixed memory leak on ssl connect/disconnect (fetch, ovpn, etc.)
sstp - fixed dns name support in connect-to field if http-proxy is specified
supout - erase panic data properly on Netinstall
switch - fixed switch compact export
timezone - updated timezone information from tzdata2016e release
traffic-flow - added ipfix support (RFC5101 and RFC5102)
tunnel - added option to auto detect tunnel local-address
tunnel - fixed rare crash by specifying minimal header length immediately at tunnel initialization
upnp - fixed nat rule dst-port by making it visible again
usb - I-tec U3GLAN3HUB usb hub/ethernet dongle now shows up correctly as ethernet interface
usb - implement possibility to recognize usb hubs/ethernet-dongles (if usb hubs/ethernet-dongles are not recognized with this version - send supout.rif file)
userman - fixed crash on database upload
userman - use ipnpb.paypal.com for payment verification
wap-ac - fixed performance problems with 2.4GHz wireless (additional reboot after upgrade required)
webfig - do not allow to press OK or Apply if current configuration values are not loaded yet
webfig - reduced refresh time for wireless registration table to 1 second
winbox - added 2ghz-g/n band for wireless-rep
winbox - added icons to bridge filter actions similar to ip firewall
winbox - added support for ipv6 dhcp relay
winbox - allow to reorder hotspot walled-garden & walled-garden-ip rules
winbox - do not allow to specify vlan-mode=no-tag in capsman datapath config
winbox - do not show filter for combined fields like bgp-vpn4 RD
winbox - do not show mode setting for WDS interfaces
winbox - fixed crash on disconnect in secure mode
winbox - fixed crash when using ctrl+d
winbox - fixed safe mode
winbox - improve filtering on list fields
winbox - report correctly dude users in active users list
winbox - set default sa-learning value to "yes" for CRS Ingress VLAN Translation rules
winbox - show action column as first in bridge firewall
winbox - show error when telnet is not allowed because of permissions
wireless - fixed multiple wireless packages enabled at the same time after upgrade
wireless-rep - added initial API support for snooper
wireless-rep - fixed crash on nv2 reconnect
wireless-rep - fixed scan-list unset
wireless-rep - treat missing SSID element as hidden SSID
