What's new in 3.30: *) added connection-rate matcher; *) receiving too large frame (>1540 bytes) does not hang ether1 on RB4xx; *) fixed ping - value of 'src-address' was ignored since 3.23; *) api - limited maximum allowed word length to 65536; *) fixed IPv6 Router Solicitation message handling; *) special-login - port could remain used by 'special-login' even after user logged out. fixed; *) bonding in active-backup mode and arp link monitoring works when no switch between endpoints; *) routing, routing-test - fixed route redistribution crash; *) ups - show voltage in .01V units; *) console - 'torch' and 'wireless scan' commands have new argument 'duration' that approximately limits running time of the command; *) api - 'torch' and 'wireless scan' commands now return same values in '!re' responses as in console (before they didn't return anything), '.proplist' is also correctly handled; *) fixed problem - sometimes netinstall did not show new software id; *) added support for BGP aggregates from IGP routes; *) user manager - no backup for deleted logs; What's new in 3.29: *) fixed problem - local bandwith test could take all the CPU to itself not allowing other tasks to run; What's new in 3.28: *) fixed hotspot problem - on multi-processor systems it was not possible to set IP address for hotspot client during login - deadlock did happen; *) fixed hotspot problem - it was possible for hotspot to spike CPU usage to 100% and not to accept new logins during that time; *) added ethernet broadcast support for WakeOnLan tool; *) api - value of 'comment' property was only returned from 'system' package programs; *) to see actual values of sensitive configuration parameters (such as passwords), user needs to possess policy 'sensitive'; *) avoid problems with western time zones by always advancing clock on startup past january 2st 1970, 00:00:00 UTC; *) added 'run-after-reset' argument to 'reset-configuration' command. It allows to specify name of console script file to run after the configuration reset reboots the router. When this argument is used any other default configuration scripts are ignored. *) route - fixed a crash; *) routing-test - fixed OSPF routing table calculation; *) send keepalives every 30s (was 3 min) on ppp clients - make some 3G connections more stable; *) routing-test - changed BGP network and default-originate behaviour; *) web proxy - allow to edit error page; *) console - terminal window size change now does not trigger full terminal reset; *) mesh protocol - improved loop prevention (becomes incompatible with earlier versions); What's new in 3.27: *) fixed memory leak in DNS; What's new in 3.26: *) fixed hotspot problem - deadlock was possible on multi-processor routers; *) fixed problem - it was possible for RouterBOARD to loose configuration after upgrade to RouterOS version 3.25; *) added MetaROUTER support on RB1000; *) using pptp and eoip tunnels simultaneously could crash router; *) api - "comment" property was not accessible, fixed; *) console, api - fixed handling of decimal fractions in time interval values; *) bonding interfaces could sometimes disappear after reboot; *) changed mesh protocol to send routing packets to broadcast address; *) automaticly add ppp client interface when GPRS/3G modem is plugged in; *) added simple/advanced mode to ppp client in WinBox; *) added support for Huawei E1550 UMTS/HSDPA modem; *) added support for Cricket Wireless A600 modem; *) added support for yet another Globetrotter HSDPA modem; *) added support for Sony-Ericson MD300 modem; *) added support for ZTE MF626 & MF627 modems; What's new in 3.25: *) fixed problems with files under MetaROUTERs; *) made WinBox work better on smaller screens; *) made WinBox to not bring down BGP & OSPF when BGP window was opened; *) WinBox menu is better organized, all sub-menus are sorted; *) fixed WinBox problem - /128 IPv6 addresses could not be entered where network address was expected; *) added l2mtu interface parameter with ability to configure for interfaces that support it; *) RB1xx ether1 did not work properly in switch mode; *) api - do not accept truncated property names; *) api - closed sessions were not removed from the '/user active' list; *) routing, routing-test - fixed a BGP crash; *) routing-test - deleted routes were sometimes left displayed in Winbox; *) routing-test - fixed BGP interoperability issue with old Ciscos; *) routing-test - added remove-private-as BGP peer config option; *) added few more variables to hotspot html pages: bytes-total, bytes-total-nice, packets-total *) bandwidth-test supports testing over multiple tcp connections (default 20); *) graphing - HTML page refresh-interval configurable in console; *) user manager - IP pool added to user batch-add form; What's new in 3.24: *) added ability to run non RouterOS in MetaROUTER; *) improved address-list and layer7 firewall feature support for smp systems; *) special-login items can now be disabled; *) fixed special-login to update used-by property of port; *) fixed USB UPS monitoring on RB433UAH; *) console - 'print' command reuses assigned item numbers; *) fixed issue with Cisco BGP VPLS when used between 2 RouterOS devices; *) console - 'print' commands have new option 'follow-only' that continuously shows changes like the 'follow' option, but does not print all items at the beginning; *) api - 'follow' and 'follow-only' options of 'print' commands now work, '.dead' property is reported for deleted items; *) api - 'listen' command now is alias for 'print' with 'follow-only' opriont set; *) api - several commands running in parallel could produce intermixed output, fixed; *) console and api - fixed problem that caused property values sometimes to incorrectly have value '(unknown)', this could happen when running several console or api commands at once; *) fixed BGP VPLS crash when site-id > 15 used somewhere in network; *) changed BGP AS path number output format to ASPLAIN; *) console - new scheduler tasks use trimmed effective user permissions as the default value of policy, previously default value was "read,write,test"; *) added ttl matcher to ipv4 firewall; *) improved dns cache not to allow other RRs in statically configured domains; *) fixed vlan on bonding; *) fixed bonding modes balance-alb and balance-tlb; *) added per-connection-classifier matcher to firewall; *) fixed wireless Hw. Fragmentation Threshold in WinBox; *) user manager - added option to specify custom Return URL for Authorize.Net payments; *) user manager - write logs to syslog topic manager,account; *) routing-test - support for per-VRF BGP instance redistribute settings; *) routing-test - speed up BGP route processing; *) routing-test - added routing-table configuration to RIP; What's new in 3.23: *) added WakeOnLan tool *) fixed installation on fresh disks or VMs; *) add 802.1ad Service Tag support for VLAN; *) wireless - fix for RTS/CTS when used together with dynamic ACK timeout; *) serial ports are now grouped per USB device; *) added gsm info command to ppp-client; *) added URL support to fetch tool; *) added dial-on-demand mode to PPTP & L2TP clients; *) ssh - now non-interactive console commands can reference variables; *) fixed TFTP server logging; *) fixed problem - "/system upgrade" (autoupgrade) did not show proper package architecture and was unable to fetch new packages; *) fixed bug - hotspot 'walled garden ip' rules did not work on some boards after reboot; *) added '/interface print stats' command; *) improved support for OSPF as PE-CE routing protocol; *) added OSPF sham links; *) fixed a bug in set-bgp-prepend-path routing filter; *) fixed some MPLS TE reoptimize bugs; *) added MPLS TE bandwidth management features; *) netwatch - ignore items with interval 0s, this value was causing netwatch to fail; *) routing-test - added new type of gateway argument: ip address together with interface; *) api - 'disabled' property was not available from api since 3.21, fixed; *) api - added support for retrieving OID values; *) api - removed special behaviour of 'find' command under API. Use 'print' command with queries instead of 'find'. This change fixes scripts that are started from API and contain 'find' command. *) console - removed support for octal numbers, now string of digits with a leading zero is interpreted as decimal number; *) console - added binary ~ operator that matches value against POSIX extended regular expression; *) console now accepts decimal numbers with k/K M G T P suffixes for values of some properties; *) console - fixed export problems: if long line is wrapped just before space charater, the space character has to be escaped, otherwise it is lost; errors during export generated a comment line that was incorrectly enclosed in quotes; *) console - added binary ~ operator that matches value against POSIX extended regular expression; *) scheduler - added owner and policy properties; all existing scheduler entries will get owner name "*sched" and policy read,write,test; *) routing-test - allow to specify that route gateway is in the main routing table; *) added route cache statistics; *) fixed mesh protocol; *) graphing - fixed IP address mask display issue for low endian architectures; What's new in 3.22: *) added advanced switch features for RB450G; *) added support for MetaROUTER on RB450G; *) added support for adding physical interfaces to Metarouters; *) added set-bgp-prepend-path action to routing filters; *) added WinBox OSPFv3 support to routing-test package; *) added WinBox IPv6 routes support to routing-test package; *) console - added 'hide-sensitive' option to the export command; *) user manager - fixed customer remove interface bug; *) fixed Cisco BGP VPLS autodiscovery in mpls-test package; *) fixed LDP to not disconnect on unknown capabilities of remote peer (should help establish LDP session with Junos); *) fixed ethernet port name reordering on RB493; *) bonding mode balance-alb now works on RB1xx, RB4xx, RB616, RB600, RB750, RB1000; *) added '/interface ethernet print stats' command for RB450G and RB750; *) fixed CSPF in routing-test to properly interpret link bandwidth; *) added support for C-motech CNU-680 CDMA 1x EV-DO 450Mhz USB Modem; What's new in 3.21: *) backported MetaROUTER support for RB4xx from v4; *) added WinBox MPLS & VPLS support mpls-test package; *) added WinBox BGP support to routing-test package; *) api - added query support for 'print' command; *) added support for bsd-syslog; *) added TFTP server; *) added authorization and TLS support to email tool; *) added pppoe-scanner; *) added tftp protocol support to fetch tool; *) fixed ipsec policy priority to work as documented; *) fixed BGP route selection in routing package; *) allow to use IPsec aggressive mode with pre-shared keys; *) fixed some problems in mesh protocol; *) fixed https proxying with parent proxy; *) fixed Prism shared IRQ issue; *) fixed multiple MPLS/VPLS bugs in mpls-test; *) fixed boot problems on some RB1000s; *) added /interface mesh traceroute command; *) fixed web proxy source address selection; *) fixed pcq queue - pcq sometimes could get through more traffic than specified in max-limit; What's new in 3.20: *) added support for IPsec hardware acceleration on RB1000, increases IPsec SHA1-3DES encryption from 45Mbps to 500Mbps and SHA1-AES from 79Mbps to 500Mbps; *) fixed IPv6 on RB1xx and RB5xx; *) added support for ZTE MY 39, CDMA EVDO USB card; *) added clear-df action to firewall; *) fixed bug - sometimes netinstall could fail to install RouterBOARD with "ERROR: could not format partitions"; *) fixed PCQ bug - pcq-rate < 70000 did not work correctly (broken in 3.17); *) added radius-mac-format setting in hotspot server profile; *) allow to use ip firewall for encapsulated PPPoE packets; *) graphing - fixed 10Gbit card bug; What's new in 3.19: *) fixed problem - web proxy used up all router memory if unlimited ram caching was enabled; *) fixed problem - some log topics got swapped in configuration; *) reduced maximum supported memory for RB1000 to 1.5Gb (was 1.75Gb); *) interface mesh was not working in 3.18, fixed; *) fixed Prism crash; *) fixed VPLS interface related crash in mpls-test; *) allow to enter range in BGP instance confederation peers; *) console - fixed '/system backup save' command, name argument is optional, and backup file name is automatically generated if empty; *) sped up IPv6 forwarding on RB4xx, RB1xx and RB5xx; *) fixed BGP route selection in routing-test; *) fixed dhcp server to update agent-circuit-id and agent-remote-id for lease whenever it changes; What's new in 3.18: *) IPv6 address auto-configuration: added recursive DNS server option; *) fixed problem - sometimes firewall did not work after reboot on RB1xx; *) do not send IPv6 packets over PPTP, L2TP or PPPoE - could confuse some servers or clients; *) allow queues to have all traffic, not only ip (for example vpn); *) added ability to specify dns name in bandwidth test in WinBox; *) fixed problem - sometimes RB1xx (and RB4xx) could not start up or startup was very long; *) improved ipv6 sniffing; *) improve torch and sniffer behavior under high load; *) improved queue statistics; *) fix xen make-routeros-image command; *) fix potential wireless crash under load when negotiating encryption; *) fix several MPLS issues in mpls-test; *) fixed support for Novatel Wireless Ovation MC950D HSUPA; *) fixed some bugs in routing-test OSPF; *) added support for D-Link DUB-E100 USB Ethernet adapter; *) fixed user-manager database rebuild command to succeed in case of malformed database disk image; *) sms - added descriptions for error codes; *) sms - added automatic 'smsc' (service centre address) value detection, to work around first time error when sending SMS without specifying an 'smsc' value; *) fixed - during uptime 4:20 .. 5:00 interface traffic (byte and packet count) was being reported 100 times larger than the actual value; *) provide L2TP server address in Called-Station-Id when doing authentication over RADIUS; *) added support for Sierra Wireless MC8790; *) recalibrated noise floor adjustment for R5H; *) updated drivers & kernel - fixed fast clock issue on x86; What's new in 3.17: *) added support for Intel 10Gb PCI Express driver; *) made Huawei E220 USB modem work again; *) added support for Novatel Wireless Ovation MC950D HSUPA; *) fixed PCQ fairness when pcq-total-limit is reached; *) fixed fetch tool to work when dst-path is not specified (broken in 3.16); *) fetch tool - added keep-result command line argument; *) allow to specify routing-table for ping, trace-route, and telnet; *) fixed an IPsec bug; *) fixed /ip firewall address-list; *) added propagate-ttl option for MPLS; *) fix very long wireless scan-list issues; *) fixed problem - sometimes PCQ could stop data pass-through if pcq-rate was set; *) fixed problem - L2TP could stop working when one of clients stopped responding at wrong time; *) fixed problem - reduced size of supout.rif files; *) graphing - support for 10 Gbit interfaces; *) routing-test - added support for multi-instance OSPF; *) user manager - fixed bug for PayPal payments with long parameter list; *) user manager - database load command supports external storage for temporary files; *) user manager - added support for all UTC time-zone offsets, including +5:30, +5:45, etc.; What's new in 3.16: *) added support for IGMP proxy; *) improved Nstreme polling in wireless-test; *) routing-test - routing filters now use regular expressions to match BGP AS_PATH; use '_' (underscore) to match any of: comma, space, beginning of line, end of line, parentheses, braces; *) make secondary disk contents visible under /file; *) console - allow use of '/' and '.' characters in backup, export and print output file names; *) fixed bug - hotspot universal client did not work for clients with IP address ending with 127 or with 224-239; *) fixed problem - x86 clock was 10 times faster then it should be on some boards; *) fixed kernel panic on RB1000; *) console - fixed wrapping of long lines in GNOME Terminal; *) console - autodetect Mac OS X Leopard Terminal.app, fixes condition when only the bottom line of the terminal was used; *) console - 'find' commands could not match some properties, like 'routing-mark' of the '/ip route find' command. Fixed; What's new in 3.15: *) added workaround for non-standards compliant CPE with timestamp issue; *) added ability to manage multiple disks & stores under /store; *) added support for storing user-manager database on secondary media via /store; *) /store should be used to set up secondary disk as web proxy cache; *) added support for Mesh in WinBox; *) fixed client roaming in mesh protocol; *) fixed bug in MME routing protocol: routes sometimes were lost from routing table; *) fixed some bugs in routing-test; *) fixed traffic forwarding when VRF (virtual routing and forwarding) is used; *) fixed problem - USB did not work on Geode LX boards; *) fixed problem - farsync cards did not negotiate links; *) added support for Novatel EU870D; *) added support for Intel 82575EB & 8257GB gigabit ethernet PCI-Express cards; *) removed support for all synchronous cards but farsync; *) graphing - all target (source) addresses displayed in queue statistics page; *) bridge firewall broute table is removed - it did not work as expected anyway; *) ingress-priority matcher added to bridge firewall *) fixed use-dns property of console traceroute command, default now is use-dns=no; *) updated UK 5.8 FIXED regulatory domain info; *) /system ssh now by default uses name of logged in user instead of "admin"; *) fixed support for some microSD cards on RB400; *) include Relay-Session-ID in packets sent by PPPoE client if required; *) added ability to specify src. address for radius client; *) dns cache - improved static entry behavior; *) fixed dial-on-demand on ppp interfaces; What's new in 3.14: *) fixed '/xen console' command; *) fixed problem - queue bursts did not work; *) added support for OSPF NSSA in routing-test; What's new in 3.14rc1: *) updated drivers, some of the changes: synchronous cards should work in frame relay mode; SIP connection tracking is more standards conformant; valid TCP connection packets will not be marked as invalid; *) mlppp - fixed problem when small packets could not be transmited while more than 2 links were active; *) bgp - fixed attribute flags checking; *) fixed dhcp client - routes were not added back after lease expires and then is acquired again; *) fixed handling of multiple identical address-list entries *) ospf could become unresponsive in some situations, fixed; *) winbox - fixed problem: when moving multiple items at once, correct order was not maintained; *) fixed automatic fan control on RB600; *) added ipv6 firewall address-list; *) fixed some bugs in mesh protocol driver; *) fetch tool - added basic HTTP authentication; *) 6to4 tunnel - allow to specify remote address; What's new in 3.13: *) hotspot - fixed dst-nat for SMTP (broken in 3.11); *) dhcp client - added support for DHCP option 121 (classless route); *) fixed simple queues - changing simple queues could lock up i386 routers *) routing-test - added support for multiple recursive nexthops; *) routing-test - fixed BGP AS number byteorder, broken in 3.12; What's new in 3.12: *) fixed problem - static queues on PPPoE, PPTP, L2TP interfaces became invalid on client reconnect; *) changed behaviour of simple queues - queues with no limit and type default-small and no children actually do not get installed, as if there was no queue; *) console - allow "{}" array syntax only for some command arguments, as it does not make sense in most cases and interferes with the existing scripts. Now "/system script add source={....}" works as it did before 3.11; *) graphing - fixed crash when dynamic interfaces/queues disappear; *) fixed IPv6 address auto-configuration on routerboards; *) added support for OSPFv3; *) improved PCQ queueing algorithm; *) dhcp server - pass Agent-Remote-Id and Agent-Circuit-Id to Radius server; *) user manager - option to use test gateway for Authorize.Net payments; *) fixed bug - web server could lock up at startup (no access to hotspot login page after that); *) routing-test - added support for 4-octet BGP AS numbers; *) routing-test - added default-originate feature for BGP peers; *) routing-test - added IPv6 BGP networks and aggregates; What's new in 3.11: *) fixed bug - in some cases web proxy https with parent-proxy did not work; *) added default-route-distance setting for DHCP client; *) mesh protocol - bridge interface in a mesh did not work well, fixed; *) multicast - fixed bootstrap router (BSR) mechanism; *) user manager - users can now be redirected to HotSpot login page after PayPal payment; *) added ability to dst. nat only address or port, not both at the same time; *) ospf - fixed default route; *) ipsec - fixed tunnel mode with dynamically generated policy; *) port remote-access - fixed allowed-addresses check; *) ethernet half duplex modes on rb400 series work now; *) console - fixed entering of IPv6 prefixes; *) console - fixed crash on window size change; *) console - bit operations (& ^ | << >>) now work with numbers, too; *) console - brace syntax for array declarations ( { value ; value ; value } ) now can be used also where () expressions can be used, previously worked only inside the expressions. Example: :foreach i in {1;2;3;4} do={:put $i} *) console - inside expressions ',' operator can be used to concatenate arrays, unlike '.' which works with strings. Arguments that are not arrays are treated like arrays with single element. Example: {1,2,3;4,5,6;7,8,9} produces value {{1;2;3};{4;5;6};{7;8;9}} (1,{2},{{3;4}},5,{},{6,7},8) produces value {1;2;{3;4};5;{6;7},8} *) console - 'move' commands no allow list of source items to be empty and to contain duplicate items. The porpose is to simplify scripts that use 'find' commands to move items. Example: move ([find dynamic],[find inactive]) - moves all 'dynamic' and 'inactive' items to the end of the list, does not raise error if any item is both 'dynamic' and 'inactive', or if there are no items; *) console - 'move' command does not update item numbers anymore; What's new in 3.10: *) added Multilink PPP to PPPoE client - just specify multiple interfaces to enable it; *) added ability to add dynamicly PPTP, L2TP & PPPoE client addresses to firewall address-list, specified in ppp profile, or via RADIUS in Mikrotik:19; *) added address-list attribute support in user-manager; *) added fan control for RB433; *) added voltage monitor for RB433AH; *) console: fixed 'interface wireless print detail', now shows the same output as 'interface wireless print basic'; fixed print to file, now writes complete contents, fixed resource leak; show name of running scripts in '/system script job', update 'last-started' value; could not use item names for '/interface ovpn-server' and '/interface ovpn-client', fixed; fixed problems with export: some settings were not included in full export, such as '/interface wireless nstreme'); some settings had duplicate entries with an error, such as '/system ntp client' when ntp package was enabled; long parameter values were incorrectly split across multiple lines; export now quotes all values that are split across multiple lines, it also adds line split before all newline characters, which improves readability of exported script sources; *) api - some properties were included multiple times in getall responses; *) port - properly tag all inactive ports; *) port - fixed memory leak that was triggered by addition/removal of USB serial ports; *) changed post-boot critical log messages - write a separate log entry explainig the cause of an non-administrative reboot, such as watchdog ping timeout, even if system rebooted cleanly; *) fixed user-manager 'database rebuild' command to correct database errors; *) fixed bug - user-manager customer password was not decoded correctly when database backup was transferred between Intel/RB100/RB500 and RB300/RB400/RB600/RB1000; *) fixed bug - "/blink" command did not work on RB300/RB600/RB1000; *) allow to configure OSPF authentication key ID; *) allow to include bridge interface in a mesh interface; *) ipsec - added Dead Peer Detection; *) fixed some random crashes on RB411 & RB433; *) fixed bug - OpenVPN could corrupt data on high load and force other end to disconnect; *) fixed bug - DHCP server did not return DHCP options in response to DHCPINFORM request; What's new in 3.9: *) bridge could make router busy even without traffic; *) fixed route redistribution in RIP (bug introduced in 3.8); *) fixed AR5212 kernel crash on setting change; What's new in 3.8: *) fix B mode rate reporting for Atheros 5211 cards; *) IPv4-compatible addresses as IPv6 route gateways now require manually specified interface; *) fixed removing external routes from OSPF; *) added initial version of layer-2 mesh routing protocol; *) fixed problem - OVPN server sometimes crashed; *) fixed problem - torch could fail to aggregate connection data; *) fixed problem - RB500 on high ethernet load rebooted sometimes; *) fixed problem - if PPP (ISDN) client requested it's own address, then server did not report it in logs correctly; *) fixed problem - if PPP (ISDN) client has it's own address, it was not used allways as on-demand ip address; *) fixed problem - PPPoE, PPTP & L2TP stops receiving packets, if MRRU is set and multiple packets get lost; *) added support for Intel Gigabit PCI-Express cards; *) fixed problem - RB433 did not work with v3.7; What's new in 3.7: *) improved simple queue list updating; *) fixed p2p edonkey protocol matcher on rb600; *) fixed booting on CR; *) fixed problem - CF did not work on routerboards; *) fixed ping to 2001::1 like IPv6 addresses in console; *) made ISDN work again; What's new in 3.6: *) fixed booting for x86; *) initial support for MPLS Traffic Engineering tunnels; *) added support for ZTE AC8700 USB modem; What's new in 3.5: *) updated drivers; *) user manager - fixed bug when PayPal payments were discarded because of uppercase characters in business-id field; *) fixed bug - could not ping ip address with 12 digits (like 123.123.12.12) in console; *) console - changed behaviour of '.' operator when one or both of operands is an array, now it produces an array with all pairwise concatenated elements of left and right arrays. An example: if $A contains array 1,2,3,4, then :foreach i in="10.$A.$A.0/24" do={:put $i} will print 16 network prefixes. Currently behaviour of '.' operator with an empty array value is undefined. *) console - fixed bug introduced in 3.4. Concatenation of strings yielded array, so ("A" . "A") was A;A, now ("A" . "A") results in "AA", as before; *) fixed web-proxy check drive command on routerboards; *) console - fixed column widths; *) console - fixed memory leak in 'find' command, introduced in last version; What's new in 3.4: *) improve transmit lockup detection to work around issues with few wireless clients; *) fixed bug - RB100/RB500 upgrade from RouterOS v2.9 could fail if version 2.9 was installed by netinstall from v3; *) console - compatibility syntax for 'find' and 'print where' expressions. If = or != operation has as the left operand name of item property, without leading '$', then right hand operand is parsed according to the syntax of that propery. This also adds back command line completions. Example: /ip address print where interface=ether1 ether1 was parsed as a reference to variable "ether1", now it is parsed as name of the interface, like in version 2.9; *) backup - proceed on read errors, log errors with topics "backup, critical"; *) console - allow commands like 'monitor' and '/tool fetch' in scheduler scripts; *) web proxy - when src-address is specified, use it for outgoing connections; *) fixed crash in pppoe, pptp & l2tp when using ip pools with radius server; *) added support for Option Fusion UMTS Quad-GPRS (Vodafone Globetrotter); *) fixed VLAN on wireless not running after reboot issue; What's new in 3.3: *) fixed SNMP DoS bug *) fixed bug - PPPoE server could crash when running on multiple cores; *) fixed bug - bridging over PPP interfaces with encryption enabled did not work; *) fixed dhcp server - arp entries were not added after reboot; *) fixed problem in pppoe, pptp & l2tp - server could restart; *) fixed bug in console - bridge and ip filter "print static" and "print dynamic" commands had the opposite effect; *) fixed bug - DHCP server did not parse Relay-Agent-Info option 82; *) fixed bug - hotspot login could fail with "ippool acquire failed"; *) graphing - ip address formatting bugfix; *) ospf - added support for Opaque LSA; *) ospf - fixed routes changing type from Intra Area to AS External; *) ospf - fixed multicast group membership in case there are multiple IP networks configured on a single interface; *) routing - now iBGP routes are resolved through IGP and static by default; *) user manager - fixed ampersand bug; *) updated regulatory information for Australia; *) updated drivers; What's new in 3.2: *) ssh - use preshared key also when user name has login parameters; *) added ":led user-led=[yes|no]" command for RB300/RB600 series; *) graphing - bugfixes; health section restored; *) fixed problem - /ip traffic-flow could crash router *) fixed simple queue vlan matching *) fixed ipv6 firewall counters *) user manager - fixed bug related to download/upload counter overflow in reports; *) fixed problem - sometimes dhcp client could not renew lease on wireless interface; *) fixed problem - connection tracking entries could not be removed sometimes; *) ospf - don't install AS external routes with local address as gateway; *) ospf - fixed bug triggered by adding and removing same AS external route on two routers; that route could always remain in OSPF routing table; *) web proxy - compact flash and USB disks did not show up after reboot on slow boards, fixed; *) fixed wireless transmit lockup detection; What's new in 3.1: *) fixed wireless reassociation issue; *) added support for Novatel Wireless Merlin XU870; *) added support for nForce Ethernet cards; *) fixed problem - user manager database in-use counter was wrong for database size over 21 MB; *) console - fixed parsing of alphabetical operators ('and', 'or', 'in') in expression context, this also fixes default configuration revert script; *) fixed TKIP on RB300 and RB600; *) fixed ipv6 firewall connection-state matcher; *) improved WinBox connection speed & memory usage; *) report correct tcp-state for firewall connections; *) fixed ppp user names in ip accounting; *) fixed via vt6122 (rb600 ether3) driver: multicast packet receiving did not work properly; *) user manager - voucher template supports kb/mb/gb for download/upload/transfer limit values; *) added ":led user-led=[yes|no]" command for RB100/RB400/RB500 series; What's new in 3.0: *) fixed auto upgrade on RB333 & RB600; *) made RB411 bootup more stable; *) made DNS & WINS setting work again in PPP; *) fixed bug - dhcp client did not update NTP server list; What's new in 3.0rc14: *) fixed locking up in PPPoE server; *) fixed bridging in PPTP, L2TP an PPPoE; *) fixed bug - MPPE encryption keys received from RADIUS server were decoded improperly on RB333; *) added support for BGP signalled VPLS; *) fixed bug in port remote-access - it was inserting random data, mostly nulls, in data sent to serial port and to tcp connection; *) fixed bug in console error propagation, code like the example below caused console to enter busy loop: :do { badcommandname; } while=(true); *) fixed hotspot https walled-garden; *) fixed bug - dhcp server failed to give out options with code > 127; *) console - fixed numeric parameters that accept negative values, were broken in rc12; *) fixed port line-state values on MIPS RouterBoards; *) fixed bug - idle-timeout & session-timeout were not disabled if they were unset in ppp profiles; *) fixed OSPF compatibility bug with v2.9 (and some other vendor implementations): LS Acknowledgments were sent to wrong address; *) fixed Broadcast flag for DHCP on RB300/RB600; *) fix wireless nstreme packing problem; *) improved layer7 firewall matcher memory usage; *) console - do not add input to history if it is the same as previous line; *) fixed bridge to forward (R)STP frames as regular if (R)STP not enabled; *) fixed bug - configuration for missing serial ports was not tagged inactive; *) console - fixed safe mode, it was causing wery high cpu usage and terminal traffic; *) console - added login parameters, passed as part of login name, after '+'; can be used to disable colors (+c) and terminal autodetection (+t), e.g. "admin+ct"; *) fixed problem - bandwidth shaping on ARES traffic was not working properly; *) user manager - fixed security bug in user page; *) dns resolver has configurable max UDP packet size; *) fixed dns resolver - tcp queries were broken without ipv6 package; *) added ingress priority matcher to firewall rules; *) added number of active pcq queues to queue stats; *) made advanced mode for wireless interface configuration in WinBox; What's new in 3.0rc13: *) fixed problem - clean install on x86 & adding new ethernet interfaces on x86 did not work (introduced in 3.0rc12); What's new in 3.0rc12: *) added support for MPLS & VPLS; *) added ability to specify & disable winbox port under "/ip services"; *) fixed bug - DFS was not taking into account channel usage when selecting channel; *) fixed bug - simultaneously monitoring wireless interface and changing settings could cause crash; *) improved memory usage under RB133C; *) fixed bug - MAC Winbox connection was not very stable; *) fixed bug in graphing; *) fixed problem - routerboard sometimes did not upgrade & reboot if serial cable was not plugged in; *) interface routing now works with PPPoE 'dial-on-demand' interfaces; *) fixed dial-on-demand; *) routing - fixed 'set-in-nexthop' filter (broken in 3.0rc7); *) implemented more registered client flushing on access-list and connect-list changes - now connect-list changes disconnect affected APs, wildcard mac address entry changes disconnect all clients; *) fixed bug - Windows could not synchronize to NTP server if local clock was used as time source (changed stratum from 6 to 4); What's new in 3.0rc11: *) added filters to WinBox lists, and added ability to filter routes without downloading all of them to the client; *) updated WinBox Loader to v2.2.12 - clicking on IP address in router discovery list selects ip address not mac address; *) added '/tool sms send' in advanced-tools package; *) fixed problem - PPPoE, PPTP, L2TP could restart if user disconnected at wrong time; *) fixed problem - PPPoE, PPTP, L2TP static server interfaces disappeared after disconnect; *) added support for adding OVPN interfaces to bridge through specifying bridge in ppp profile; *) multicast - fixed IGMP Leave message handling; *) nand improvement for RB532A; *) fixed user-manager database restore from backup for RB500; *) fixed bonding - when bonding iface was put in bridge arp link monitoring did not work properly; What's new in 3.0rc10: *) fixed problem - sometimes PPTP, L2TP, PPPoE and OpenVPN connections were not accounted properly, and no new connections could be established; *) fixed problem - L2TP sometimes could not establish connections through firewall or with Windows; *) bgp - fixed TCP MD5 authentication on RB300; *) fixed bug - route did not work with Level 1 license and routing package enabled; *) api - '/quit' command now immediately terminates session; *) console: 'and' operator in expressions that follow 'find' and 'print where' now is optional, pre-rc9 syntax 'find mtu=1480 type=ether' works as it used to; added back filters to firewall print commands, filtering by chain now is 'print chain=input' instead of 'print input'; fixed 'print count-only', it was ignoring any additional 'print' arguments that selected only part of items; What's new in 3.0rc9: *) fix for rb100 - can change ethernet settings when interface in bridge/bond; *) fixed problem - RouterOS did not boot on some routers (reported disk not found); *) fixed dns resolver - sometimes could not parse packets with AAAA records; *) hide ppp interface & wireless passwords and keys in WinBox as well; *) fixed traffic-flow - could hang multi cpu router and ignore targets sometimes; *) fixed rb100 - ethernets could be set at random bandwidth limit after reboot; *) console: repaint whole screen after terminal size change while in editor (same as pressing F5 or Ctrl-L). this solves numerous issues with terminal resizing; added more workarounds for the case when terminal is too narrow (<4 characters); now logical operators '&&' and '||' can also be written as 'and' and 'or'; removed 'where' and 'from' arguments of find command. now find command can be followed by arbitrary expression that can use item properties, e.g. "find dst-address in 192.168.0.0/16 and interface=wlan1"; added 'where' argument to print command. "print where " and "print from=[find ]" are equal; removed filters from firewall print commands, now write, e.g., "/ip firewall filter print where !dynamic" instead of "/ip firewall filter print static"; *) web proxy: fixed crash on stopping proxy; What's new in 3.0rc8: *) fixed problem - console did not accept ip address ranges correctly; *) user manager - fixed problem with accounting creating too many sessions; *) console: added ip-prefix and ip6-prefix datatypes, written in address/mask notation; INCOMPATIBLE CHANGE: expressions of the form "(123/45)" (where first operand is literal unquoted value) currently will be parsed as single string, to write division put space before '/' (like with '.' operator); added operator 'in' that checks if first argument is inside second argument, currenty implemented for the case where second argument is ip-prefix or ip6-prefix and first argument is either address or another prefix; don't perform full reset of terminal on login; fixed terminal capability detection, now windows telnet client works better. TERM environment variable is ignored completely now, it was overriding detected values before; *) added support for Huawei E220 USB modem; What's new in 3.0rc7: *) ftpd - automatically reboot after finishing upload that has name *.auto.npk; *) added support for Sierra Wireless AirCard 595U; *) ping - show more types of ICMP reply messages, like in 2.9 versions; *) add ICMP MPLS extension support to traceroute; *) console detects terminal size and capabilities, TERM environment variable is not used, so now this works even over serial; *) console - fixed crash on non-ASCII characters in input and output; *) console - export correctly strings that contain control characters; *) fixed in console - when argument value evaluation produces error, report that error instead of "invalid value for ..." message; *) console - changed the way how required command arguments are processed, now commands like "enable [find]" don't fail with error when find returns nothing; *) fixed memory leak on RB500; *) fixed layer7 protocol matcher, did not handle \x.. sequences correctly; *) fixed allow-shared-key mode for wireless; *) fixed station-pseudobridge mode when used in combination with nstreme framer-policy; *) fixed hidden ssid issues with wds links; *) SNTP client - adjust DST according to timezone settings when clock changes; *) console - fixed crash when terminal size is extremely small (like 1x1), assume default width 80 if terminal is too narrow; *) SNTP - fixed overflow bug, now clocks are adjusted correctly if initial time is way back (like jan/01/1970 on routerboards); *) added RIPng support in WinBox; *) added BGP for IPv6 support in WinBox; *) added PIM support in WinBox; *) added hide passwords option to WinBox; *) added regular expression matching to dns resolver static entries; *) user manager - fixed bug for credit extension using PayPal payments; What's new in 3.0rc6: *) RIP - fixed some problems; *) RIP - automatically distribute connected routes falling within range of some configured network; *) RIPng - network configuration statements removed, interface configuration now is mandatory; *) added support for IPv6 Firewall in WinBox; *) added support for IPv6 DNS cache in WinBox; *) added support for MME routing protocol in WinBox; *) added support for L7 matcher in WinBox; *) added support for Prolific 2303 based USB serial devices; *) specify tcp-mss in dynamicly added PPP mangle rules & do not add them when mtu is bigger then 1500; *) fixed USB UPS detection; *) fixed bug - PPTP client did not work with Windows PPTP server; *) limited number of active authentication sessions for PPPoE server to not overload RADIUS server; *) fixed bug - ssh command did not work on RB333; *) added support for Intel EXPI9404PT PCI-E ethernet adpater; *) added simple SNTP client to system package & removed regular ntp from bundle package; *) updated timezone information; What's new in 3.0rc5: *) added layer7 protocol matching capability in firewall; *) updated network drivers; *) make external-fdb for station-wds interfaces be disabled when in auto mode; *) added regulatory domain info for 5.8GHz band in Germany; *) rip - fixed netmask for default route; *) added /system default-configuration; *) ability to reset without applying default configuration; *) reverted BGP network behaviour back to version 2.9; *) fixed BCP; *) fixed PPPoE, PPTP, L2TP problems with remote authentication; *) made Multi-Link over single link work properly in PPTP & L2TP; *) improved ares/warez p2p protocol matching *) ospf - fixed MD5 authentication; *) console - fixed memory leak in 'find' command; *) fixed ip accounting; *) user manager - customers can configure Authorize.Net title shown to users; What's new in 3.0rc4: *) fixed bug - OpenVPN key renegotiation did not work; *) updated 5ghz regulatory information for Romania, South Africa and Ireland; *) added support for dynamic bridge port adding and path cost update for station-wds mode; *) fixed rb500 korina driver (ether1) transmit issue; *) improved wireless performance (also with 2.9); *) improved nstreme2 performance; What's new in 3.0rc3: *) user manager - added PayPal options (https-response & accept-pending); *) user manager - added transfer-limit to user batch-add form; *) user manager - added download, upload and total transfer to CSV; *) added 5GHz turbo band for Germany and Italy; *) added 'host' argument to 'fetch' tool to support virtual hosts; *) fixed handling of power saving wireless clients; *) ftpd - automatically execute uploaded scripts that have name *.auto.rsc; *) fixed bug - BCP could not be negotiated with some Cisco's; *) fixed bug - PPTP & L2TP did not work on RB333; What's new in 3.0rc2: *) added RFC 2217 server (configure under '/port remote-access'); *) renamed 'get' tool to 'fetch', avoids confusion with builtin 'get' commands; *) ospf - added 'passive' interface flag; *) ups - fixed duplicate logging of line power state; *) fixed bios upgrade from RouterOS on RB200; *) added switch support for rb1xx; *) added support for ipv6 firewall; *) added ipv6 support to dns cache; New features commentary: *) installation and boot of USB sticks/drives with RouterOS Netinstall can now install RouterOS on USB drives. Minitowers and rackmounts with bios's that support USB boot can now easily boot from USB flash/hard drives. The USB flash sticks are available in most electronics stores and are a suitable replacement from IDE flashdrives and CF with IDE adaptors. It might be advisable to find a secure place to connect the USB stick so that it can't be knocked off easily. As of v3rc2,there is one problem that you should not have a hard drive with RouterOS in the same system or the boot program on the USB drive will find the hard drive with RouterOS and probably boot that instead of the RouterOS on the USB stick -- we will work on fixing this. *) RFC 2217 serial server TCP to serial Now you can set the serial port to RFC 2217 server mode and you can use a remote application to communicate/control the serial device. Find out more about this protocol at http://www.faqs.org/rfcs/rfc2217.html What's new in 3.0rc1: *) enable routing package on upgrade - to fix upgrade from 2.9 version where routing-test package was used; *) console - parser now accepts newlines as CR, LF, CR+LF, this fixes import; *) user manager - using +/- image for group field show/hide instead of confusing checkbox; *) fixed bug - usb devices did not work; *) console - added tab key completions in editor; *) fixed slowness of RB112/RB133C during bootup (introduced in 3.0beta9); *) console - fixed variable name lookup; *) console - added back '/setup' command; *) console - added '/system script environment'; *) console - fixed wireless interface configuration export; *) integrated MAC Ping in to regular Ping in WinBox; *) added support for Marvell IDE controller that is embeded in new Intel motherboards; *) fixed bug - for routes received via RIP nexthop was invalid in some cases; *) added 'get' tool for downloading files to router via HTTP or FTP; *) console - some properties could not be set via API, fixed; *) user manager - fixed bug for PayPal payments with user data containing specific characters; *) ip proxy - setting parent proxy did not work; *) fixed bug - dst-active was not updated after time update by NTP; *) console: fixed 'do' arguments in '/tool bandwidth-test' and other commands; inside expressions variables can be referenced without putting '$' before variable name; 'find' commands have new argument 'where' that allows to write filtering condition as console expression; when entering commands from prompt, global variables can be used without declaring them; What's new in 3.0beta10: *) ip proxy - fixed crash; fixed HTTP POST method handling; *) fixed PCMCIA (non CARDBUS mode); *) fixed ethernet packet accounting (FCS 4 bytes were not included); *) ospf - fixed external and inter-area routes; *) ospf - after Dijkstra's algorithm was executed 256 times, intra-area routes become invalid; *) made Torch to not exlcude non TCP & UDP traffic if no specific port was provided; *) user manager - added download/upload limit and group fields to batch-add form; *) updated Realtek 8169 driver; *) added support for radius-mac-authentication result caching in wireless; *) fixed SIP connection tracking on RB100 & RB500; *) added support for Novatel Wireless V740 Verizon; *) wireless - added configuration option for hardware retries count and frame transmit lifetime; *) fixed support for MTB-134 / Portwell EZIO LCD display; *) added initial IPv6 support; *) added radius client to send Accounting-On packet on startup; *) added initial calea support; *) added ethernet bridging support to PPP, PPTP, L2TP & PPPoE; *) added MRRU support to PPP, PPTP, L2TP & PPPoE - packets bigger than MTU can be forwarded; *) user-manager - 3-byte char (UTF-8) bugfix; What's new in 3.0beta9: *) console - removed undocumented scripting commands; *) console - variable lookup now is done while parsing script: variable name completion works variables must be declared before use; *) some of the fixes mentioned under v3.0beta8, did not got in v3.0beta8, they are fixed now; What's new in 3.0beta8: *) use less memory - makes RB133C & RB112 work better; *) added initial support for OpenVPN (client & server mode); *) added support for Sierra Aircard 595 & other Sierra Wireless cards; *) ipsec - fixed tunnel mode; *) fixed bug - bridging with bandwidth shaping could freeze whole system; *) ip proxy - allow setting invalid parent-proxy-port value 0 in console. this fixes import of default settings; *) ip proxy - fixed bugs introduced in 3.0beta6 (proxy could crash, cache was not working correctly); *) support for full frequency list of Atheros chips; *) ups - fixed: program was becoming unresponsive when serial ups was configured but was not connected; *) user manager - password not revealed on sign-up; *) console - each user has separate set of global variables; *) console - fixed crashes when exporting "/system health" on non-routerboards; *) console - removed unexpected entries from export (like /file); *) policy routing - fixed automatically added rules; What's new in 3.0beta7: *) certificates - sometimes when importing CA certificate, certificate cache was reset. Fixed; *) fixed RB200 bios upgrade from RouterOS; *) added reset-configuration command for wireless; *) user manager - user signup bugfix; *) fixed RouterOS configuration to reset when "Soft Reset" jumper on RB133C or JP1 on RB532r5 is shorted; *) hotspot - added to retry mac authentication in case of radius timeout; *) hotspot - added total (in + out) byte limit; *) fixed wireless sniffer file format; *) work around bugs in some WPA2 implementations that do not do proper group key updates; *) routing - added set-in-nexthop and set-out-nexthop filters; *) routing - added notification when filters are changed for RIP and OSPF (affects redistributed routes) *) routing - added MME routing protocol; *) user manager - added total transfer (download + upload) byte limit; *) WMM support; *) TOS matcher in firewall is replaced with DSCP; What's new in 3.0beta6: *) WinBox has ability to search in Tables; *) RSTP bridge package is now merged in to system package; *) routing-test package is renamed to routing; *) console - fixed "" to have type str; *) console - reverted change to export script sources in '{}' braces, such export was not 100% reversible; *) hotspot - added option to specify any password for mac authentication; *) added support for interface routes (without nexthop); *) route deletion from route table now is much faster (important for full feed BGP); *) added update-source option for BGP; *) RIP is rewritten; added passive-interface option for RIP; *) added /routing prefix-lists; they can be used for RIP filtering; *) webproxy now supports SATA disks; *) fixed bug - OS could not be installed on SATA disks without license; *) added support for more network cards based on RTL8169 chip; *) console - F5 or ^L key in commandline resets terminal and prints current input buffer (if it does not fit in one line); *) console - fixed backslash whitespace sequence inside quoted string to expand to nothing, as in 2.9; *) console - fixed completions and help while editing multiline commands; *) console - prompt for continuation lines now shows open braces and quotes; *) console - added 'as-value' option to print and monitor commands that suppresses normal output and returns array of properties instead; *) console - 'get' command without 'value-name' returns array with all item properties; *) console - fixed crash in fullscreen editor when adding empty at the end; *) console - readded 2.9 style help; *) made WRAP board rebooting work; *) user manager - added Authorize.Net payments; *) user manager - prices now stored as decimals; *) user manager - increased active session count limit for license levels 4 and 5; *) user manager - object removal confirmation; *) user manager - CSV files now have header; *) user manager - popup-blocker workaround for CSV; *) user manager - close option for active sessions; *) user manager - reset-counters option for routers; *) user manager - public-host field for customers; *) user manager - group field for users; *) user manager - fixed time-zone bug; *) user manager - added PayPal payments; *) user manager - utf-8 handling bugfix; *) user manager - voucher customization; *) new vrrp implementation *) graphing - incorrect scale legend bugfix for large data amounts; What's new in v3.0beta5: *) console - fixed prompt for continuation lines to be "... "; *) e-mail - changed to send address-literal instead of hostname in EHLO; *) e-mail - added e-mail,debug and e-mail,warning log topics, errors now go to system,e-mail,error; *) console - fixed 'get' commands, were not reporting flag values; *) console - removed :list command; *) updated network drivers; *) console - multiline command editing: Ctrl-\ splits line, prompt shows current line number and total number of lines when more than one, home/end twice goes to beginning/end of command like in fullscreen editor; console - edit command works also in single line input mode; console - 'source' argument in '/system script' and 'do' arguments in various monitor commands accept scripts written in '{}' braces. export uses this syntax to output scripts; What's new in v3.0beta4: *) added GIS/WISPr xml pages for hotspot smart client support; *) console - order export items by dependencies. *) fix virtual-AP default mac address; *) fixed Atheros receive stalling bug that could be observed while snooping and frequency-monitoring; *) fixed interface disappear issue on bridge port disabling/removing; *) fixed station-pseudobridge to not use local macaddress as default for translation; *) made ip firewall not be used for bridged packets by default; What's new in v3.0beta3: *) added Event-Timestamp radius attribute in hotspot Accounting messages; *) added hits counter to hotspot walled-garden rules; *) made demo mode work; *) fixed bug - sometimes installation software was reporting errors were no error existed; *) console - fixed local variables; *) console - improved syntax error messages; *) console - allow use of item numbers in scripts and without prior print; *) console - order export by object type dependencies, use item numbers where required; *) fixed AR5211 channel list bug; What's new in v3.0beta2: *) added support for Atheros PCI Express; *) replaced console parser - colored syntactic feedback, line and column of parse error, export coloring, substitution inside quoted strings (e.g. "addr $($addr & 255.255.255.0)/24"); *) line editor remembers last modified string when walking history. You don't lose your command if accidently press 'up'; *) F1 works as '?' in console; *) references to one script may become '(unknown)', will require manual fixing of configuration; *) fixed behavior of 'do=' arguments in console; *) fixed - executing lines from console history did not reset history position; *) hotspot transparent http proxy requests now go through acl list of proxy; *) autosupout.rif & supout.rif file generation now works; *) wireless - added disable-csma option for nstreme mode; *) wireless - added station-pseudobridge modes to do MAC NAT when bridging over station mode link; *) wireless - support for WPA2 pairwise master key caching to speed up re-connect times; *) wireless - access-list and connect-list can now specify signal range to allow for connection; *) wireless - access-list is now ordered and supports matching of all interfaces, all addresses; *) wireless - access-list entry can match in specified time; *) wireless - access-list can specify client specific WPA or WPA2 pre-shared-key; *) wireless - support for RADIUS accounting for both MAC and EAP; *) wireless - support for RADIUS Disconnect-Request to disconnect client with RADIUS request; *) wireless - can now specify format of MAC address in RADIUS requests; *) wireless - include Calling-Station-Id (in format XX-XX-XX-XX-XX-XX) and Called-Station-Id (in format XX-XX-XX-XX-XX-XX:ssid) in RADIUS requests; What's new in v3.0beta1: *) added support for SATA disks; *) added initial support for SMP on x86; *) added support for up to 2Gb of memory on x86; *) fixed time matching in firewall rules; *) added time matching to bridge firewall rules; *) multiple ports can be specified in firewall as src. and dst.; *) added support for NAT-T in IPsec; Caveats: *) dropped support for Linksys HomeLink PhoneLine Network Card (10Mbps over telephone line); *) dropped support for PCMCIA RadioLan; *) dropped support for Wavelan/Orinoco wireless cards; *) dropped support for Aironet/Cisco wireless cards; *) dropped support for Atheros 5210 wireless cards; *) dropped support for telephony package; *) ISDN does not log called and caller numbers anymore; *) replaced console parser - some of previously accepted syntax now will not work, syntax can change in next betas, completion is not yet fully implemented; *) matching for some RFC non conforming TOS values won't work;