What's new in 5.24 (2013-Feb-19 15:29): *) l2tp - fixed problem with reconnects when it added multiple ip addresses; *) wireless - fixed AES encryption speed issues (upgrade suggested); *) lcd - changed gamma, which gives greater contrast *) fix reboot when running on third party hypervisors; *) ppp client - fixed possible loss of configuration after reboot for some modems; *) fixed wifi led order on "SXT Lite5"; What's new in 5.23 (2013-Jan-29 14:07): *) lcd - changed gamma, which gives greater contrast *) fix reboot when running on third party hypervisors; *) ppp client - fixed possible loss of configuration after reboot for some modems; *) fixed wifi led order on "SXT Lite5"; What's new in 5.22 (2012-Nov-23 09:28): *) userman - fix PayPal "bad HTTP response"; *) kvm - fixed possible ROS guest incomplete package installation; *) l2tp server - added keepalive-timeout setting; *) wireless - fixed RADIUS mac-caching; *) wireless - fixed rare nv2 link stall; *) metarouter - fixed system occasional lockup for 12s on RB4xx and RB7xx; *) metarouter - fixed crash when FPU exception was raised in one of powerpc metarouters; *) quickset - added HomeAP mode; *) fixed "export compact" in "ip proxy"; What's new in 5.21 (2012-Oct-12 08:25): *) route - fix dst-prefix filtering did not return routes when routes with different routing-mark were present; *) wireless - improved nv2 stability; *) winbox & webfig - added simple new version downloading & upgrading panel; *) dhcp server - immediately store to disk changes for lease configuration; *) lcd - improve graphs screen *) lcd - improve touch screen (must /lcd reset-calibration) *) smb - fix smb share mounting on linux systems *) ovpn - fixed memory leak on disconnects; *) userman - fix unpaid profile activation while authenticating; *) sstp - fix high CPU usage on SSL handshake; *) winbox - added ability to add time & date to dashboard; *) metarouter - fixed lockups on RB110AH; *) metarouter - fixed occasional lockups on RB450G; *) ups - fixed problem connecting to USB device, introduced in 5.20; *) quickset - added Wireless PTP Bridge mode; *) fix MPLS MTU configuration usage; *) dns - fix empty response; What's new in 5.20 (2012-Aug-15 13:04): *) manual upgrade to NEW beta poe controller firmware v2.0 for RB750UP and OmniTIK UPA; more info at http://wiki.mikrotik.com/wiki/Manual:PoE-Out *) fix RB951-2n wireless issues; *) ups - fixed resource leak; What's new in 5.19 (2012-Jul-16 10:51): *) ssh - added /ip ssh regenerate-host-key which will regenerate current host key; *) dhcpv6 client - fix multiple advertise handling; *) snmp - fix v3 engineID discovery; *) fix ticking sound on RB411UAHL; *) user manager - fixed byte to KiB, MiB and GiB conversion (digit after decimal point was incorectly calculated); *) fix routerboard firmware upgrade on RB951-2n; *) sniffer/torch + simple queues sometimes could crash router; What's new in 5.18 (2012-Jun-21 17:20): *) fixed upgrade problem when it failed with error "disk is too small" while there was plenty of space left; *) fix health and poe access reliability on OmniTIK UPA and RB750UP boards; *) sstp - improve initial handshake to better handle many new connections; *) wireless - do not use bridge and WDS mode on AP-AP links, causes loops; *) dhcp ipv6 pd client - fixed ipv6 pool creation after reboot; *) dhcp ipv6 pd client - added option add-default-route; *) sstp - fixed connection idle time reporting; *) fix bad block count not to increase on Samsung K9F1208U0C nand; *) snmp - fix dhcp lease table, snmp reported an incorrect information when a static lease had configured different address than current active address, this should also solve problem with dude polling same leases over and over again; *) fix RB1100 crash on interface disable/l2mtu change/reboot; *) dns could not resolve some domain names, was ignoring replies with DNAME RRs; *) fix firewall log action - sometimes was not logging mac addr; What's new in 5.17 (2012-May-28 12:34): *) files - fixed problem when directories disappeared after reboot on usb or sd flash; *) webfig - make QuickSet scan list work in Firefox v12; *) webfig - fixed problem in QuickSet when changing country or channel-width in AP mode would enable NV2 protocol; *) webfig - fixed skins when hiding first tab may make other tabs inaccessible; *) winbox - fixed packet raw data view in packet sniffer; *) winbox - fixed problem when router could be DoS attacked through winbox port; *) ports - add option "/port firmware ignore-directip-modem" which will ignore modems ip interface and modem's serial ports will be made accessible to users; *) ipv6 pool - allow pools with prefix equal to prefix length; *) ping times improved on Nv2 high data rate wireless links; *) tool email - added starttls option; *) snmp - allow multiple ip ranges for each community; *) serial console - added channel support; What's new in 5.16 (2012-May-09 17:23): *) webfig - fixed problem when new item addition to status page in design skin mode did not work; *) add pw-type option for BGP VPLS; *) fixed mac telnet - sometimes did not work if more than one mac level path to destination; *) user - fixed problem when adding new users from console it's password was not set; *) reset packet mark when encapsulating/decapsulating from eoip,ipip,gre,eoipv6,ipipv6,gre6 tunnels What's new in 5.15 (2012-Apr-20 13:11): *) ssh - added option "/ip ssh always-allow-password-login" which will allow password based login for users using public key; *) snmp - moved disk oids shown in console from "/system resoure" to "/store disk"; *) certificate manager - added PKCS#8 support for key import; *) lte - support for modems which utilize sierra_net driver with product ID 0x68a3, serial interface is no longer accesable for those modems; *) quickset - added AP mode; *) smb - fixed authorization problems, shares should now be browsable; *) dhcp client - revert NTP settings on dhcp client disable; *) dhcp server - use DNS server from DHCP client (broken in v5.13); *) sstp - made it working on Pentium 4 again; *) added support for usb forwarding over tcp; *) webfig - fixed uptime column in hotspot active users list (and other places as well) ; *) webfig - hide design skin button if user does not have sensitive & policy permissions; *) webfig - do not allow to upload/download files without write/read & ftp permisions; *) webfig - fixed blank page when logout, undo, redo, hide-menu or safe-mode were hidden in skin, *) winbox - show connection tracking max entries properly; *) winbox - make interface name sorting more stable; *) winbox - do not reset user password when changing it's properties; *) rb1200 ether6,ether7,ether8 did not support big packets when linked at 10/100Mbps; What's new in 5.14 (2012-Feb-22 12:04): *) winbox - fixed problem when changing main winbox window size and some of the inner windows become hidden; *) backup - backup file creation failed if router identity name had / in it; *) wireless - improved nv2 link stability to reduce control frame timeouts, only AP requires update; *) fixed rare configuration retention problems on RB1100AHx2; *) certificate manager - fixed building certificate trust chain which caused certificate validation problems for some programs (VPN, SSTP etc) when downgrading from this version to older version please run "/certificate reset-certificate-cache" to maintain correct trust chain; What's new in 5.13 (2012-Feb-14 08:18): *) firewall - to-address can be specified as ip address with mask in addition to ip range; *) traffic-generator - fix crash on multicore systems; *) smb - fixes and improvements; *) sstp - added RC4 cipher support to fix interoperability issues introduced in MS KB2585542 security update. from now on RC4 is the preferred cipher and AES will be used only if peer does not advertise RC4; *) dhcp client - revert DNS settings on dhcp client disable; *) quickset - country & channel-width can now be specified; *) quickset - added support for configuring pppoe client on wireless interface; *) bridge - fixed problem where arp reply-only or disabled mode didn't work and disabled bridge interfaces didn't have X flag; *) webfig - fixed problem where none of table entries were shown if table filter was left to 'all'; *) webfig - show login page if autologin fails; *) user manager - don't store backups in active store, always use path relative to /; What's new in 5.12 (2012-Jan-19 14:31): *) console - allow to specify blank interval on x86 screens; *) console - changed 'password' command, now can be used from scripts and api; *) winbox - reorganized window layout to match console better; *) ssh - fixed interoperability problem with psftp based clients; *) implemented simple SMB (windows file sharing) server; *) fixed ovpn-client - client stopped working if it was enabled/disabled at wrong time; *) fixed ipv6 - ipv6 neighbor discovery stopped working when interface arp setting wasn't set to enabled; *) console - minor fixes and improvements; *) console - added support for compact export; *) hotspot - added login redirect through http status 302; *) leds - added default configuration for R5SHPn wireless card; *) ppp - fixed problem were remote-ipv6-prefix was not given to user if remote-ipv6-pool was provided; *) winbox, webfig - sort ethernet interfaces properly when more than 10 exist; *) added QuickSet to RBSXT, RB411, RB711; *) user manager - command to create and assign user profile from console; *) added support for LTE modems (cdc ethernet type); *) fix gre tunnels on x86 and other little endian machines; What's new in 5.11 (2011-Dec-12 11:05): *) hotspot - fixed https login (broken in v5.9); *) eoip: swap tunnel id bytes to be compatible with previous versions; *) eoip,gre: fix setting config What's new in 5.10 (2011-Dec-09 11:49): *) snmp - provide extended interface statistics when availabe; *) dhcpv6 client - use link-scoped multicast address; *) dhcp client - renew dhcp lease on ethernet link up event; *) ipv6 gre tunnel added (/interface gre6) supports ip and ipv6 encapsulation; *) ip gre tunnel supports ipv6 encapsulation; *) allow setting bigger trafflow cache; *) improved RB1200 stability when using ether9,ether10; *) fixed RB1200 stability issues when using crypto hardware acceleration; What's new in 5.9 (2011-Nov-29 14:32): *) ssh - fix mempry leak when client uses public key authentication; *) ppp - added support for new RADIUS attribute MT-Delegated-IPv6-Pool (#22); *) ntp client - faster initial synchronization; *) ppp - added support for dhcpv6 pd; *) wireless - nv2 improvements for 11n cards; *) hotspot - fixed login page to better handle big load; *) wireless - change default rate-selection to advanced; *) snmp - fix simple queue table; *) webfig - fixed problem were users wihtout sensitive permission could download senstive files (like backups); *) webfig - fixed problem were table filters did not work allways as expected; *) metarouter - fixed problem where local routeros instances did not boot; *) dhcpv6 - client and server moved to respective /ipv6 dhcp- entry; *) dhcpv6 server - changed how bindings are defined, users should add missing static binding information after upgrade; *) sms - send sms now uses channel from config if it's not specified in the command; What's new in 5.8 (2011-Nov-01 10:14): *) snmp - fixed problem where some rows were missed in a few tables when walking them; *) ipv6 - added support for router address assignment from ipv6 pools; *) routerboard - fix RB400/RB700 bootloader upgrade problem *) radius - respond to CoA & Disconnect requests with the same ip address it was received to; *) improved webfig look; *) webfig - do not allow to show secret passwords if user does not have sensitive permission; *) webfig - allow to customize all item names in skins; *) updated timezone information; *) lcd - added support for new ax93304 model and nexcom LCDs; *) ppp - added support for ipv6 pools; *) ppp - added support for Framed-IPv6-Pool radius attribute; *) dhcp client - fix high CPU usage when interface is disabled; *) snmp - trap interface filter, multiple trap targets; *) dhcp - added server support for IPv6 prefix delegation from /ipv6 pool, client support is also added; *) ipsec - support authorization with raw RSA keys; *) added ipv6 prefix pools; *) winbox - now copied item in ordered list is added right after it's original; *) pcq - fixed possible crash; What's new in 5.7 (2011-Sep-14 10:54): *) ovpn client - fixed crash when user name or password together were longer than 11 symbols; *) sstp client - added an option to skip server address verification from certificate; *) fixed problem - router crashed sometimes when using USB modem; *) userman - show overall totals, show user totals if user has more than one entry; *) lcd - retrieving '/system lcd page' configuration did not work with hundreds of interfaces; *) webfig - added ability to reorder fields in skins; *) webfig - added ability to add/remove new tabs & separators in skins; *) webfig - added ability to add any field to special status page; *) webfig - fixed problem when user sometimes got logged out with message "internal server error"; *) webfig - logout didn't log user out from router; *) webfig - added System/Password for changing user's own password; *) system reset-configuration - if keep-users is specified ssh user keys are preserved as well; *) ipsec - new exchange mode (main-l2tp) for l2tp tunnel users to allow FQDN as a peer ID with preshared key authorization in main mode; *) ssh - fix possible server crash when connection is interrupted; *) improved ipv4 forwarding performance on all boards with simple configuration by up to 30%; *) add passthrough setting to change-dscp, change-ttl, change-mss, strip-ipv4-options, change-hop-limit mangle targets; *) ipsec - fixed problem of RB1200 rebooting when large amount of UDP traffic is sent through IPsec; *) sniffer - added more useful packet filtering options, also available as quick mode command parameters; What's new in 5.6 (2011-Aug-02 14:45): *) ipsec - fix a problem which could silently remove a manual policy from the kernel if the peer configuration has 'generate-policy' set to 'yes' and if the policy matches with the traffic selector of a SA being removed on the responder side, also fix a problem that some generated policies may stay in kernel after relevant SA was removed; *) profiler - correctly show idle task on RB1200; *) webfig - fix dual nstreme interface setting lists; *) webfig - fix Wireless Access/Connect List editing; *) webfig - fix bitrate presentation in simple queues (show 1.5M as 1500k); *) fixed micro-sd access on RB400 not to stop everything else; *) sstp - when server certificate verification is enabled for sstp client, it will additionally compare IP addresses found in certificate's subjectAltName and subject CN to the real address, DNS names are ignored; *) tftp - optional block counter roll-over support; *) hotspot - fixed possible crash in case of multiple Radius CoA requests; *) userman - speedup user deletion with big log size, note that first userman startup after this update may take few minutes if the log size is in hundreds of MB; *) mpls - added support for enabling/disabling control word usage for BGP based VPLS tunnels (both - Cisco and RFC 4761 based); *) mpls - added support for auto-discovery of VPLS NLRI encoding method for Cisco BGP based VPLS tunnels; *) winbox - sometimes after disconnecting, winbox could not connect back; *) gre,ipip tunnels - new dscp parameter (0..63 or inherit); *) ping - new dscp parameter; What's new in 5.6: *) bgp - allow parallel operation of RFC4761 "l2vpn" and draft-ietf-l2vpn-signaling "l2vpn-cisco" BGP VPLS variants inside single peering session. *) console - ":resolve" command now returns IPv6 address for domain names that have only IPv6 address records; *) snmp - provide ups alarms for bad or low battery or for ups overload; *) route - fixed SNMP getnext queries, were failing to find next prefix in the OID order; What's new in 5.5 (2011-Jun-20 14:43): *) console - resolved problem that appeared in version 5.4. it caused 'sup-output' command to crash console on systems with many ethernet interfaces or very long interface names. *) serial console - do not automatically send login prompt to attached usb modem if no other serial port exists; *) winbox - fixed scrolling in terminal window; *) webfig - encrypt whole session even in non https mode; *) do not show contents of skin files to users without 'sensitive' permission; What's new in 5.4 (2011-May-27 13:18): *) webfig - do not try to open many windows if first open was blocked by browser; *) RB4xx ether1 port flapping fixed; What's new in 5.3 (2011-Apr-29 15:05): *) snmp - fix table get next with partial row keys; *) snmp - respond from correct source address when multiple exist; *) snmp - fix possible interface disappearing when walking ipNetToMediaTable; *) snmp - fix possible memory leak; *) ipsec - flush SAs and inform peer when rebooting or shutting down; *) openvpn - fixed crash; *) implemented terminal in WebFig; *) implemented Skin mode in WebFig; *) added support for more Broadcom Tigon3 based ethernet cards; *) winbox - fixed byte to KiB, MiB and GiB conversion (digit after decimal point could be a bit off); *) console - align numbers right in tabular print output; *) fixed RB450G, RB750G switch chip slow ethernet problem; *) fix vlan disable not taking effect; *) userman - fix Authorize.Net payment bypass; *) userman - added profile option to overwrite shared users option in user settings when profile is activated; *) userman - fix db backup if it's size exceeds 2G; *) wireless - merged ht-extension-channels in to channel-width; What's new in 5.2 (2011-Apr-21 09:36): *) fixed webfig; *) console - fixed problem with supout file generation and export that appeared in version 5.1, it was causing console to enter busy loop on some boards; *) ssh client - added source address and remote command options; *) user manager - added /tool usermanager profile; What's new in 5.1 (2011-Apr-08 12:55): *) ipsec - fix SA lifetime display when timezone offset does not equal 0; *) ipsec - now default DPD interval is 2 min for new configurations; *) webfig - make bandwidth-test work; *) fixed problem - wireless package got disabled after upgrading from v4; *) sstp - fix problems on multicore systems; What's new in 5.0 (2011-Mar-31 11:33): *) route - fixed cause of crashes when handling multipath routes; *) route - fixed limit on maximum active IPv6 route count, was causing issues with more than 2000 active routes; *) ipsec - added command kill-connections under remote-peers; *) ipsec - fix responder side phase2 negotiation problem which prevented more than one Windows7 host to initiate SA; *) fixed vrrp - interface was invalid after undoing remove; *) winbox - added more detailed /interface ethernet stats; *) winbox - added ability to send e-mail; *) winbox - added missing 'set-metric' parameter in 'Routing/Prefix List'; *) wireless - 802.11 dynamic distance fix; *) fixed problem - packages could not be uninstalled if disk was full; *) fixed problem - some of the RouterBOARDS did not reboot properly sometimes; *) fixed problem - VLANs on bridge interface did not work; *) ssh - client supports public key authentication;