-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathCHANGELOG
1996 lines (1901 loc) · 129 KB
/
CHANGELOG
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
===========================
FreshTomato-ARM Changelog
===========================
(for full changelog, see: https://bitbucket.org/pedro311/freshtomato-arm/src/arm-master/CHANGELOG)
2021.8 2021.12.25
---------------------------
- kernel: [SCSI] sd: Fix overflow with big physical blocks
- tor: update to 0.4.6.8
- nano: update to 6.0
- libncurses: update to 6.3
- libsodium: update to latest version of 1.0.18-stable
- nginx: update to 1.21.4
- util-linux: update to 2.37.2
- mysql: update to 5.5.62
- libexif: update to 0.6.24
- libcurl: update to 7.80.0
- sqlite: update to 3.37.0
- openssl-1.1: update to 1.1.1m
- openvpn: update to 2.5.5
- libcurl: update CA certificate bundle as of 2021-10-26
- build: Makefile: rp-pppoe: remove debugging information, add -Wall instead
- build: Makefile: libsodium: add CFLAGS/LDFLAGS to recipe
- build: Makefile: pass EXTRACFLAGS also to openssl/mysql/php, ensure that optimization is complete
- build: fix program memory size too small for STOCK NETGEAR firmware
- build: fix cryptic BAD TRX HEADER with actual error message that means something
- build: libsodium: build as static library
- build: add irqbalance tool with needed libraries for multi-core routers; add irqbalance to all multi-core targets
- build: busybox: compile with CONFIG_FEATURE_WGET_LONG_OPTIONS enabled
- build: patches: diskdev_cmds-332.25: add path to libcrypto.so.1.1 library, so mkfs.hfs can be linked to it instead of the old one from toolchain
- build: use --no-check-certificate for wget in scripts only when CA cert is not installed
- build: router: Makefile: transmission: do not try to built with libiconv
- build: router: Makefile: add appropriate flags when building packages to prevent use of incorrect or old headers/libraries (fixes #174)
- build: correct 128K crash partition creation
- build: correct Memory mapping for 512M DRAM
- GUI / httpd: misc.c - speed up status-overview (part 2)
- GUI: fix the display of SMS and signal level (RSSI) in some cases
- GUI: Status: Logs: escape HTML characters in log entries
- GUI: Basic: DHCP Reservation: do not allow duplicate IP - causes dnsmasq fail to start
- GUI: Basic: DHCP Reservation: allow 'dot' to be used in DHCP reservation hostname - useful for setting static records for external hosts
- GUI: Advanced: DHCP/DNS: dnscrypt-proxy: add dynamically to the page drop-down list of resolvers, so it's now possible to use alternative/downloaded file (/etc/dnscrypt-resolvers-alt.csv); also add DNSSEC and NOLOGS info to the list
- GUI: status-overview - improve ethstate if WAN port is moved to primary LAN
- GUI: status-overview - repair/show correct wireless infos (only for some Router like R6400, DIR868L ...)
- GUI: basic-network - add more options for wireless mode (AC-Only, N/AC Mixed)
- GUI: Status: Device List: change name and title of the button for 'DHCP Reservation'
- dhcpv6: remove debug info - save some space; remove unneeded file
- httpd: misc.c: fix condition for recognition when the JFFS2 partition is mounted (only for RT-AC branch)
- mdu: use 'PUT' instead of 'POST' for cloudfare to update DNS record (closes #141)
- nginx: compile with ngx_http_realip_module enabled
- patches: getnds/stubby: also add tls_ca_file to yml quote check (broken in 0.4.0)
- pdureader: avoid SIGSEGV caused by improper gcom (comgt) response
- rc: pbr.c: replace depreciated gethostbyname() with getaddrinfo()
- rc: pptp_client.c: replace depreciated gethostbyname() with getaddrinfo()
- rc: do not stop ntpd on WAN stop - only stop it on stop_services()
- rc: mwan.c: fix multiWAN routing
- rc: network.c - repair/improve function for wireless restart/start (only)
- rc: nginx.c: fix php config file
- rc: nginx: make h5ai support optional - it breaks autoindex if enabled but not used
- rc: services.c: dnsmasq: replace Asus patched max EDNS packet size with proper config file setting
- rc: services.c: also prevent Windows' DDR (Designated Discovery of Resolver) when blocking auto DoH promotion
- rc: services.c: do not add 'trust-anchors.conf' to dnsmasq config file when built without DNSSEC
- toolchain: remove unneeded libraries
- VLAN: repair vlan setup/config and adjust to FT logic (ID mapping)
- VLAN: extend/fix vlan setups
- vsftpd: remove legacy capability warning (added as a patch)
- vsftpd: restore OpenSSL-1.0 support (added as a patch)
2021.7 2021.10.15
---------------------------
Note: mainly bugfixes release.
- busybox: update to 1.34.1
- libcurl: update CA certificate bundle as of 2021-09-30
- dnscrypt-proxy: update resolvers csv file
- GUI: correct display (center) of some checkbox in tables
- GUI: Status: Overview: display 'Click to view SMS' link also for hw-ether (MIPS) module modem type
- GUI: Status: Overview: fix minor problem with reported multiWAN status
- GUI: Status: Overview: fix javascript error caused by the lack of 'wanX_ifnames' nvram values
- GUI: add blinking to Time status when it's unavailable
- httpd: openvpn.c: fix adding correct keys for client config file
- rc: dhcp.c: buffer overflow protection (snprintf) + cosmetic
- rc: dhcp.c: start_dhcpc(): use _eval() with pid to start udhcpc
- rc: firewall.c: change condition for source in 'Intercept NTP/DNS client traffic' FW rules
- rc: services.c: add 'force' to dnsmasq dhcp-option 42
- rc: service: start_ntpd(): fix start of ntpd when more arguments are given
- www: admin-config.asp: also replace '/' to '_' in filename
- www: tomato.js: fix createFieldTable() function
2021.6 2021.10.12
---------------------------
Note1: because of changes in GUI, clean your browser cache and/or use Ctrl+F5 (FF) to avoid artifacts.
Note2: because of changes in nvram variables, check your settings on 'Advanced -> DHCP/DNS -> Client (WAN)' page.
- kernel: ipv6: send NEWLINK on RA managed/otherconf changes (fix from upstream https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a394eef562d781f37a50d99cf1dfe596dc1ed96d)
- kernel: ipv6: send only one NEWLINK when RA causes changes (fix from upstream https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2053aeb69a53224717296db31b13d5b45b4f1a0e)
- openssl-1.1: update to 1.1.1l
- e2fsprogs: update to 1.46.4
- nginx: update to 1.21.3
- ntfs-3g: update to 2021.8.22
- tor: update to 0.4.6.7
- miniupnpd: update to 2.2.3
- dnsmasq: update to 2.86
- libcurl: update to 7.79.1
- libexif: update to 0.6.23
- openvpn: update to 2.5.4
- Add Media Bridge Mode (for SDK6 and up)
- WL SDK (RT-N branch and up): turn On wl setting STBC RX
- Correct JFFS and crash memory storage R6400/R6400v2 NVRAM_128K
- build: Makefile: nettle: compile with --disable-fat
- build: Makefile: dnsmasq: switch to nettle for crypto backend
- build: allow to build dnssec and stubby independently
- GUI: Administration: Access: show 'Allow Remote Upgrade' regardless of 'Remote Access' state
- GUI: Status: Device List: fix javascript error in targets without network discovery helper
- GUI: Status: Overview: add missing space between unit and flash size/cpu clock
- GUI: OpenVPN Server: fix the case in which after removing the CA key in GUI, re-generating keys will use its old version from nvram
- GUI: OpenVPN Server: fix generation of the correct CA Key previously caused clients errors. In order to work properly, the key must be generated again both for the server and client(s).
- GUI: Status: Overview: fix toggle of WAN and Virtual Wireless nodes
- GUI: Improvements to Advanced MAC page; closes #125
- GUI: add WiFi QR Code generator to 'z' (AIO) targets
- GUI: Admin: Logging: add minimum log level watched for syslogd
- GUI: Admin: Debugging: rename console log level into Kernel printk log level (it has better meaning); add a reboot after changing log level, since we setup klogd only at init, so it is required to reboot; add Notes
- GUI: add new, improved log viewer
- GUI: Basic: Network: fix javascript freezing when more than 1 WAN has been set
- GUI: Status: Overview: fix WL label issue on some routers
- GUI: Advanced: DHCP/DNS: move some options from Client to Server section
- GUI: Admin: Configuration: add current date to backup file (closes #156)
- GUI: Status: Overview: add MultiWAN Status and button to force watchdog check manually
- GUI: advanced-wireless: - add one more example for USA country setup (Q2 / 96)
- GUI: advanced-wireless - add Protected Management Frames option
- adblock: remove inactive list (http://www.malwaredomainlist.com/hostslist/hosts.txt)
- adblock: correct url of DOH servers list
- ebtables: libebtc: fix malloc usage (fix from upstream)
- httpd: log.c: fix a bug not showing all logs when external log is configured
- OpenVPN: Server: add generated keys for client also to .ovpn configuration file
- PPTP Server: bypass CTF (if enabled)
- Revert "rc: do not restart nas services/wsdd2 on WAN up"
- rc: network.c - repair function restart_wl() and do not start radio join (again)
- rc: services.c: start_ntpd(): eval() will wait until process quits, so use _eval() with pid; otherwise, start_ntpd() never returns
- watchdog/multiwan: fix a whole bunch of problems
- www: at.css: add icons to Connect/Disconnect buttons for Advanced themes
- www: advanced-wlanvifs.asp: fix bug causing js error
2021.5 2021.08.14
---------------------------
Note: because of changes in GUI, clean your browser cache and/or use Ctrl+F5 (FF) to avoid artifacts.
- Add mDNS (Avahi) support (https://github.com/lathiat/avahi)
- Add ZFS support for 'z' (AIO) targets (@lancethepants)
- kernel: fix from upstream for CVE-2021-22555
- Wireless Client Mode: repair that operation mode for SDK6 and up!
- SDK6: update ctf (part 3) (for single and dual-core)
- SDK7: help multiSSID setups
- WL SDK6/SDK7: turn On wl setting "probresp_sw" for wireless band steering (BSD)
- openvpn: update to 2.5.3
- getdns/stubby: update to 1.7.0/0.4.0
- ntfs-3g: update to 2021.04.05 (added handling of Windows 8/Windows 10 file systems)
- tor: update to 0.4.6.6
- tinc: update to 1.1pre18
- nano: update to 5.8
- sqlite: update to 3.36.0
- pcre: update to 8.45
- nginx: update to 1.21.1
- iperf: update to 3.10
- nettle: update to 3.7.3
- libogg: update to 1.3.5
- libpng: update to 1.6.37
- libvorbis: update to 1.3.7
- e2fsprogs: update to 1.46.3
- libcurl: update to 7.78.0
- wsdd2: update to 1.8.6
- vsftpd: update to 3.0.5
- libcurl: update CA certificate bundle as of 2021-07-05
- GUI: Admin: Access: tweaks Web Admin panel, reorder (thanks @rs232)
- GUI: advanced-wireless - adjust name/label for wl country "GB" to GREAT BRITAIN
- GUI: Advanced: Virtual Wireless: add Interface status in Details table
- GUI: Basic: Network: allow 0.0.0.0 as a valid address (in special cases) for all bridges
- GUI: NAS: File Sharing: limit samba workgroup name to 15 chars
- GUI: Tools: WOL: also show in the table devices from other than primary bridge
- GUI: Status: Device List: fix some issues with disconnected WL devices
- GUI: Status: Device List: fix some issues with WDS devices
- GUI: Status: Device List: improve IPv6 support
- GUI: Status: Device List: add images to Noise Floor level
- GUI: Status: Device List: add additional confirmation when deleting lease
- GUI: Status: Device List: display Virtual Wireless Interface reference within parentheses like bridges and vlans
- GUI: Status: Overview: do not display any virtual interface linked to the chip/frequency that is disabled
- GUI: Status: Overview: add a graphic bars to CQI1 and CQI2 LTE strenght indicator
- GUI: Status: Overview: switch 'Free' to 'Used', change order
- GUI: Status: Overview: add progress bars (thanks @rs232)
- GUI: fix a bug when scaling size is less than 10KB
- Fix container build on updated Debian 10
- busybox: add CONFIG_DIFF to configuration
- httpd: buffer overflow protection (snprintf)
- httpd: make asp_lanip() multi-lan aware
- OpenVPN: bypass CTF (if enabled)
- rstats: make it multiwan aware for daily/weekly/monthly history
- tinc: run firewall rules after bringing up the vpn. If adding custom routes into the firewall rules, the interface needs to pre-exist
- transmission: fix when runned without auth
- TTB: v3.02 change default URLs and add URL redundancy/randomisation; thanks to @rs232
- rc: do not restart nas services/wsdd2 on WAN up (fixed in recent wsdd2 update)
- rc: firewall.c: make NAT loopback work if CTF is enabled
- rc: init.c: set unique machine-id during init
- rc: mwan.c: don't log multiwan status update continually
- rc: nginx.c: add svg/svgz support
- rc: nginx.c: add h5ai support (https://larsjung.de/h5ai/)
- rc: transmission.c: TCP buffers tune, lost in one of the previous commits
- rc: services.c: add logging when starting/stopping httpd
- rc: services.c: avahi: improve generated config
- Netgear R6250 - adjust LED table (logic fix for logo LED, was inverted)
- Netgear R6300v2 - adjust LED table (logic fix for logo LED, was inverted)
2021.3 2021.06.05
--------------------------
- SDK6: update wireless driver (dual core) - fix for FragAttacks
- kernel: drivers: net: ppp_generic.c: check pointer first
- busybox: update to 1.33.1
- tor: update to 0.4.5.8
- sqlite: update to 3.35.5
- dnsmasq: update to 2021.04.10 (3573ca0) snapshot
- openvpn: update to 2.5.2
- libcurl: update to 7.76.1
- nettle: update to 3.7.2
- nginx: update to 1.19.10
- tinc: update to d100eb0 (2021.04.15) snaphot
- nano: update to 5.7
- rp-pppoe: update to 3.15
- miniupnpd: update to 2.2.2
- adminer: update to 4.8.1-mysql-en
- libxml2: update to 2.9.12
- iperf2: update to 3.9
- minidlna: update to 1.3.0
- vsftpd: update to 3.0.4
- libcurl: update CA certificate bundle as of 2021-04-13
- getdns: fixes from upstream
- ebtables: fixes from upstream
- build: add Asus RT-AC68U V3 support
- build: add Asus RT-AC1750 B1 support
- build: add Asus RT-AC1900U support
- build: add Netgear R6900 support
- build: Makefile: switch to tinc instead of SNMP for 'e' (VPN) image
- build: Makefile: tor: compile without zstd and systemd
- build: Makefile: nano: add -fsi to autoreconf
- build: Makefile: use 'printf' command instead of 'echo', fix formatting
- build: Makefile: add libmnl to PKG_CONFIG_PATCH in libnetfilter_queue, libnetfilter_conntrack and conntrack-tools recipies
- build: common.mak: add (export) PKG_CONFIG_DIR/PKG_CONFIG_LIBDIR/PKG_CONFIG_SYSROOT_DIR env variables
- GUI: update all icons; thanks to @rs232
- GUI improvements: add interface/bridge info to the device list page and other changes; fixes #106
- GUI: Admin: Bandwidth Monitoring: fix the availability of some forms when enabling/disabling
- GUI: Advanced: DHCP/DNS: exclude ipv6 only servers if ipv6 not enabled
- GUI: Advanced: DHCP/DNS: when built with stubby add option to choose between dnsmasq and stubby for DNSSEC validation
- GUI: Advanced: DHCP/DNS: add option to force minimum acceptable TLS version to 1.3 for Stubby (required OpenSSL >= 1.1.1)
- GUI: Advanced: DHCP/DNS: fix visibility of 'DNSSEC validation method' radio group
- GUI: Advanced: DHCP/DNS: Add option to generate a name for DHCP clients which do not otherwise have one; useful for e.g. Device List page
- GUI: Advanced: DHCP/DNS: always show the 'Prevent client auto DoH' option regardless of whether the image is built with or without Stubby
- GUI: Advanced: DHCP/DNS: make 'dnsmasq custom configuration' textarea automatically stretched vertically
- GUI: Bandwidth: Last 24 Hours: fix bridge naming
- GUI: Bandwidth: WAN Bandwidth - Daily: flip from/to dates
- GUI: Basic: DHCP Reservation: do not allow multiple hostnames for a device when only associate to a MAC address (causing dnsmasq failed to start)
- GUI: basic-ipv6.asp - hide option tun mtu for case 6RD Relay (not used)
- GUI: basic-ipv6.asp - show option tun ttl for case 6rd from DHCPv4 (Option 212)
- GUI: DHCP Reservation: allow definition of hostnames for devices without static DHCP assignment (resolves #127)
- GUI: Display NETGEAR CFE version on status page
- GUI: status-devices.asp - extend IPv6 support
- GUI: Status: Device List: add network discovery helper; thanks to @rs232 for the bash script and the idea
- GUI: Status: Overview: fix displaying of static DNS when in AP mode
- GUI: Tools: Wireless Site Survey: add/change OUI search like this one on Device List page. Also, calculate the signal quality as on that page
- GUI: Virtual Wireless: add frequency to interface drop down list
- Adblock: add DoH servers to Adblock blacklist (disabled)
- BWL: add the ability to enable/disable rule and enter the description
- BWL: fix bwlimit filter conflicts due to priority value
- busybox: build with CONFIG_FEATURE_TOP_INTERACTIVE
- dnsmasq: patches: fix patch 110 - compilation error when building an image without openssl1.1 support
- cstats: replace date check with nvram ntp check instead
- flac: do not build docs, test and utility
- httpd: devlist.c: also add hostname to devlist()
- IPv6: for case DHCPv6 PD use IPv6 preferred lifetime provided by your ISP/Server for LAN0-3 (IPv6 lease time); Note: get back IPv6 connectivity faster with IPv6 addr/prefix changes. (Some ISPs provide really very low lifetimes)
- IPv6: for case DHCPv6 PD use first ethernet for DUID-LL (LLT) (and not ifb0); fixes #113; DUID used by a client or server should not change over time, therefore we use eth0 (constant) now
- IPv6: help IPv6 and advertise the link MTU in router advertisement messages
- miniupnpd: patches: remove SO_REUSEPORT option for SSDP - causing build error
- OpenVPN: Server: fix generating keys
- OpenVPN: implement kill-switch for routing policy
- PPPoE: Allow MTU up to 1500 for ISPs that support RFC 4638; Note: Jumbo frame needs to be enabled and supported (Gigabit-LAN) for the router. Clamping can be disabled manually via nvram value "tcp_clamp_disable"
- QoS: extend qos_irates and qos_orates nvram variables to 256 characters for multiwan images
- rstats: replace date check with nvram ntp check instead
- rstats: remove old history format
- stubby: only include IPv6 resolvers if needed
- transmission: add missing file in prepackaged source build for tr 3.00
- TTB: increase the time interval when trying to download the theme to 5 minutes when there are network problems
- vsftpd: add fix for CVE-2015-1419
- httpd: httpd.c: use logmsg(); add 'X-Frame-Options' in httpd response headers for better protection; more verbose logging; code improvements
- httpd: upgrade.c: erase flash file when it's not needed anymore to release more memory; clearly specify the directory from which the (www) files used later are copied - also in some color schemes .png files are needed; a few minor changes in .asp file
- httpd: wl.c - align country list code/way and sync SDK7 to newer SDK6 code
- rc: introduce new functions that remove kernel modules (grouped by type), used when disabling/removing USB support or on reboot/upgrade the router
- rc: add g_upgrade global variable - used to skip several unnecessary delay and redundant steps during upgrade procedure
- rc: do not stop inactive services, also mute unwanted log messages about it
- rc: dhcpd: discard old format of dhcpd_static
- rc: dnsmasq: add the ability to forward local domain queries to upstream DNS (default disabled)
- rc: firewall: rate limit ipv6 ping when allow ping request disabled
- rc: init.c: try to write all pending modifications/cache data before reboot
- rc: init.c: give at least 30 secs instead of only 20 secs before enforcing a system reset during reboot
- rc: init.c: kill all instances of pppd/xl2tpd on reboot/halt
- rc: services.c: dnsmasq: disable negative caching
- rc: transmission.c: fix issue while stopping daemon (resolves #131)
- samba: enable pthread
- shared: id.c: cosmetic for RT-AC67U detection details/infos
- switch3g: add search for every possible visible usb device as a last resort when vendor/product is not available
- switch4g: add search for every possible visible usb device as a last resort when vendor/product is not available
- www: advanced-dhcpdns.asp: fix javascript error in case when the image is built without IPv6 support
- www: basic-static.asp: abandon the old nvram dhcpd_static format; Note: the allowed notation of the IP address also changes (one octet => full IP), ie "200" => "192.168.1.200" (to be synced with other places), so if using the old one, re-enter reservations again
- www: basic-network.asp: fix page when WL module is removed
- www: bwm.c: extend allowed size of restored cstats/rstats backup file
- www: at*.css: align "About" description to the left
- www: tomato.js: fix problems with refresh time, when using more than one refresher
- www: wireless.jsx: fix the radio frequency display (2.4 / 5GHz) for dual-band WL devices
- www: small fixes for older browsers
2021.2 2021.03.28
--------------------------
- SDK6: update wireless driver (dual core); 6.37 RC14.126 wl0: Feb 4 2021 16:49:59 version 6.37.14.126 (r561982)
- e2fsprogs: update to 1.46.2
- nano: update to 5.6.1
- nfs-utils: update to 1.3.5-rc6
- nginx: update to 1.19.7
- openssl: update to 1.1.1k
- openvpn: update to 2.5.1
- pppd: update to 2.4.8
- tor: update to 0.4.5.6
- sqlite: update to 3.34.01
- libcurl: update CA certificate bundle as of 2021-01-19
- build: Makefile: enable CRASHLOG by default on AIO targets
- GUI: Admin: Logging: add 'Drop duplicates' option
- GUI: Admin: Debugging: add the ability to disable cache in the httpd daemon
- GUI: Advanced: DHCP/DNS: add warning to dnscrypt-proxy/Stubby priority option regarding possible DNS leak
- GUI: Advanced: Wireless: remove 'AP Isolation' option because it's already on 'Virtual Wireless' page (where it's also possible to use this option with virtual interfaces)
- GUI: Advanced: VLAN: improvement to the page; fixes #104
- GUI: Advanced: VLAN: add marking that the given WL is turned off
- GUI: Advanced: VLAN: use the same port order as on Overview page
- GUI: Basic: Network: disable DNS and set to Auto if dnscrypt/Stubby with No-Resolv is enabled (except for static proto); fix variable in for loop
- GUI: basic-network.asp - in case wan disabled (for ex. wireless bridge) make sure to use static dns
- GUI: Basic: Network: fix LTE/3G fields checker (this mode can only be set to one WAN)
- GUI: Basic: Network: fix problems with Wireless Client mode
- GUI: Status: Overview: correct Connect/Disconnect buttons behaviour; fixes #103
- GUI: Status: Overview: correctly display used DNS
- GUI: change default colours of all speed graphs to Blue & Orange
- GUI: modification to QoS and Bandwidth/IP-Traffic pages; fixes #79
- GUI: update signal bar and ethernet images; thanks to @rs232
- GUI: change of naming convention for WANs and LANs; also for WLs
- adblock: fix the issue when only a custom black list is added (without any URL defined), dnsmasq restarts every 5 minutes
- busybox: ntpd: fix the case where two replies received at once and first one causes a step; fix from upstream
- busybox: enable CONFIG_FEATURE_SYSLOGD_DUP
- busybox: ntpd: add -t switch to disable rfc4330 cross-check, parameters tuning
- busybox: use CLOCK_MONOTONIC instead of gettimeofday
- dhcp6c: use monotonic time if possible
- ebtables: libebtc: Open the lockfile with O_CLOEXEC; fix from upstream
- httpd: some changes to gencert.sh and httpd.c
- httpd: add IP when logging bad password attempt; fix incorrect sizeof() in strlcpy() (line 820+)
- iptables: fix default location of l7-protocols of iptables userspace components
- iptables: fix save formatting for libipt_layer7
- iptables: fix save formatting for libipt_ipp2p
- openvpn: vpnrouting.sh: fix removal of firewall rules
- pppd: use monotonic time if possible
- QoS: statistics and classification not available in Cake mode
- rp-pppoe: use monotonic time if possible, added as a patch
- rc: nfs: add threads support
- rc: openvpn.c: don't allow duplicate-cn while in non-exclusive config-dir mode
- rc: openvpn.c: only add 'username-as-common-name' to server config if user/pass auth only is checked
- rc: further tweaks to ntpd handling on wanup
- rc: services.c: also restart httpd on ntp sync
- rc: adjust new ntpd handling for case wan disabled (time was not working after boot up; bridge mode and AP only)
- stubby: update resolvers file
- stubby: add location of alternative configuration file (/etc/stubby/stubby.alt) to bypass stubby UI configuration; fixes #108
- tomatoanon: fix script
- watchdog: fix problems with DHCP on multiwan
- watchdog: also use temporary added route for WAN check in case of failover
- www: advanced-dhcpdns.asp: fix javascript error on images without OpenVPN
- www: .asp: fix potential problem with _service input field
- www: basic-time.asp: fix potential problem with _service input field; display Router Time (almost) in real time
- www: add Status_Router.asp with current IP (only WAN) for ddclient; use '-use=linksys-wrt854g' as a supported router (https://sourceforge.net/p/ddclient/git/ci/master/tree/ddclient)
- IPv6: adjust linux setup and make it more stable
2021.1 2021.02.20
--------------------------
- kernel/kernel sdk7: net sched: Pass the skb into change so it can access NETLINK_CB
- kernel/kernel sdk7: pkt_sched: namespace aware act_mirred
- kernel/kernel sdk7: ifb: dont hard code inet_net use
- kernel/kernel sdk7: backport CAKE SQM scheduler and needed kernel functions
- kernel/kernel sdk7: add wireguard support
- kernel/kernel sdk7: add Wireguard v1.0.20201221
- busybox: update to 1.32.1
- iptables: update to 1.8.7
- nano: update to 5.5
- igmpproxy: update to 0.3
- nettle: update to 3.7
- nginx: update to 1.19.6
- miniupnpd: update to 2.2.1
- dnsmasq: update to 2.84
- tor: update to 0.4.4.7
- adminer: update to 4.8.0
- e2fsprogs: update to 1.46.1
- libsodium: update to 1.0.18-stable
- build: add support for Netgear XR300
- build: add support for Belkin F9K1113v2 router
- build: docker: add docker image for building
- build: add Wireguard tools
- build: SDK6: small update/addendum for new wireless drivers (single- and dual-core) *.126 Year 2020
- build: SDK6: update wireless driver (dual core)
- build: Makefile: e2fsprogs: include badblocks applet in image
- GUI: move stubby, dnscrypt-proxy and some other options to Advanced -> DHCP/DNS
- GUI: use Advanced/VLAN instead of Basic/Network for WAN bridging; - the old method only caused bugs in the GUI and confusion
- GUI: Status: Overview: corrections and fixes; - display more info in real-time; - in case of Wireless Client mode, stick to Signal Quality (like on Device List page), not SNR (signal value to the noise value)
- GUI: change default colours of speed graphs to Blue & Orange
- GUI: Bandwidth & IP Traffic - make it possible to show (save) values up to 500 Mbit/s (for last 24 hours, Daily, ...)
- GUI: advanced-dhcpdns.asp - add Fast RA mode option
- GUI: Web Server: Nginx & PHP: use ajax to Start/Stop button
- GUI: Status: Overview: use ajax for all buttons
- GUI: Admin Access: use ajax for Start/Stop sshd and telnetd buttons
- GUI: Advanced: Firewall: add the ability to configure udpxy upstream interface
- GUI: USB and NAS: Media Server: use ajax for all buttons
- GUI: VPN Tunneling: Tinc: use ajax for all buttons
- GUI: VPN Tunneling: PPTP Client: use ajax for Start/Stop button
- GUI: Port Forwarding: UPnP/NAT-PMP: use ajax for all buttons
- GUI: VPN Tunneling: OpenVPN Client: use ajax for all buttons; also refresh status tile automatically
- GUI: VPN Tunneling: OpenVPN Server: use ajax for all buttons; also refresh status tile automatically
- GUI: Tunneling: OpenVPN Server: allow empty string as a static key in case it's located elsewhere
- GUI: Tunneling: OpenVPN Server: add auth file (if needed) for generated client configuration; fix client number in generated certificate; some code improvements
- GUI: remove unneeded footer messages when using Start/Stop/etc. buttons
- GUI: implement GUI and nvram variables for CAKE AQM QoS
- DDNS: add Duck DNS support
- iproute2: tc: cross-port cake support to tc from tc-adv project
- Major QoS improvements. Harmonize all uses of firewall marks between VPN, wan PBR, BWLimit and QoS
- miniupnpd: only build miniupnpd exe; also build with HAVE_IP_MREQN
- multiwan: reduce and flush the route cache to ensure a more synchronous load-balancing across multiwan
- multiwan: also allow to init state file with value "1" instead of "0" - it could speed up connection process in some cases
- multiwan: improvements for GUI and connection time; - show real WAN status on Status->Overview page; - time needed to connect WANs (traffic) has been reduced twice
- busybox: enable CONFIG_FEATURE_SWAPONOFF_LABEL
- openvpn: masquerade all client outbound traffic regardless of source subnet
- openvpn: ignore unsupported ipv6 push configurations for ovpn client
- QoS: re-enable View Details without having to enable QoS itself; - it works actually only on MIPS routers; - in ARM: TBD (now need to enable/disable QoS for it to work)
- SNMP: tune recipe: add 2 more modules, set default snmp level to 2, set enable-mfd-rewrites
- stubby: add full GUI support; based on @RMerlin work (thanks!)
- stubby: tweak config: tls_query_padding_blocksize and idle_timeout
- rc: log when calling a nonexistent service
- rc: add logger to QoS and BW Limiter
- rc: restart nas services/wsdd2 on WAN up; - temp workaround for issue with wsdd2
- rc: bwlimit.c: add start/stop options and in only one exe file (like in QoS)
- rc: firewall.c: tune some params in NAT performance tweaks
- rc: interface.c: add possibility to set mtu in _ifconfig()
- rc: misc.c - adjust killall_tk_period_wait() (100 ms instead of 1 sec)
- rc: network.c: adjust and update host DHCP relay code
- rc: openvpn.c: enable multihome for UDP servers when in multiwan mode (required as the router has multiple interfaces and we don't bind to a specific one)
- rc: openvpn.c: fix firewall rules for ovpn server when [udp/tcp]4/6 is selected
- rc: openvpn.c: another attempt to obtain an automatic restart after the client/server dies
- rc: services.c: name of the service could be "jffs" or "jffs2"
- rc: wan.c: do not send user/password when empty in PPP3G proto
- IPv6: rc: services.c - use global address and not link-local address for DNS
- rc: do not restart WAN for changes on BW Limiter page when nocat is disabled
- rc: remove redundant parameter from start_wan() and start_wan_if() functions
- shared: shared.h - adjust preprocessor conditons for SDK7
- rc/shared: do not redefine functions in different folders! It already cost me a lot of time... Also move killall_tk_period_wait() to libshared
- www: advanced-dhcpdns.asp: fix javascript error in VPN builds
- www: advanced-dhcpdns.asp: fix javascript error if image built without dnscrypt-proxy
- www: restrict-edit.asp: change wait time to 3 secs; cosmetic
- www: tomato.js: fix wrongly treated input delay value in TomatoRefresh.initPage
- www: qos-settings.asp: restart BW Limiter automatically when disabling QoS, also show/hide notice when needed
- www: qos-settings.asp: automate fq_codel enabling when using only SQM
- www: qos-settings.asp: improved 'Classify traffic' checkbox
- R1D Xiaomi: change/fix LED table
2020.8 2020.12.19
--------------------------
- kernel SDK6: small update for bridge (sync with asus src)
- kernel SDK6: netfilter: nf_conntrack_core.c - small update and add one more check; Note: align/sync with asus src
- kernel sdk7: QoS: fix definitely ingress system; two modules needed for operation were not built; mirred sched needed patch
- kernel: netfilter: ebtables: convert BUG_ONs to WARN_ONs
- kernel: netfilter: ebtables: fix a memory leak bug in compat
- kernel: netfilter: ebtables: compat: reject all padding in matches/watchers
- kernel: net_sched: fix datalen for ematch
- SDK6: update wireless driver (dual core) - 6.37 RC14.126 wl0: Aug 10 2020 17:00:56 version 6.37.14.126 (r561982)
- SDK6: small update for et (sync with asus src); Note: ARP skip ctf
- SDK6: update ctf (part 2) (for single and dual-core)
- SDK6: update NAS / Network Authentication Server
- SDK7: update NAS / Network Authentication Server; Note: only binary blob
- SDK7: router: wlconf: use src files / compile from src
- SDK7: GUI: keep the current wireless noise floor value(s) on device list page - now it's supported
- SDK7: update wl util; Note: GPL 300438252287 / only blob
- SDK7: update emf / igs; Note: GPL 300438252287 / only blob
- openssl-1.1: update to 1.1.1i
- openvpn: update to 2.5.0
- nano: update to 5.4
- nginx: udpate to 1.19.5
- php: update to 7.2.34
- dropbear: update to 2020.81
- xl2tpd: update to 1.3.16
- iptables: update to 1.8.6
- busybox: update to 1.31.1
- tor: update to 0.4.4.6
- SNMP: update to 5.9; clean sources, add patches instead
- igmpproxy: update to 78eda58 (2020-09-05) snapshot
- udpxy: update to 1.0-25.1
- miniupnpd: update to 2.2.0
- adminer: update to 4.7.8
- gmp: update to 6.2.1
- sqlite: update to 3.34.0
- uqmi: update to 2020.11.22 (0a19b5b) snapshot
- wsdd2: update to 2020.11.19 (e0cf50d) snapshot
- libcurl: update CA certificate bundle as of 2020-10-14
- build: add wireless band steering feature (turned off by default); WARNING: if someone wants to enable this feature - should do a clean update (or adjust the values manually)
- build: add Netgear R6700v1 support
- build: add Asus RT-AC67U Support
- build: add Asus RT-N66U C1 support (almost the same like RT-AC66U B1)
- build: correct R6400, R6400v2 and R6700v3 board_data partition offset and size to fix board data from being overwritten by jffs
- build: harmonize BW Limiter filenames, service name, variables names, etc., also in NVRAM; it was a real mess...; Note: those using BW Limiter must either manually rename the variables in NVRAM or enter the values from scratch
- build: update R1D leds Blue for Internet as original fw, Red for diag
- build: changes in patch_files macro
- build: librt is required on every target with USB support (for e2fsprogs)
- IPv6: extend GUI status page (status-overview.asp) - show IPv6 WAN DNS addresses
- IPv6: send ICMPv6 RSes only when RAs are accepted; see https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v3.19&id=026359bc6eddfdc2d2e684bf0b51691649b90f33
- IPv6: unify logic evaluating inet6_dev's accept_ra property; see https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v3.19&id=aeaf6e9d2f49d793d3eb8c1af4095cf25e061b94
- IPv6: make 'addrconf_rs_timer' send Router Solicitations (and re-arm itself) if Router Advertisements are accepted; see https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v3.19&id=9ba2add3cf5c103b7236f82a023c8ee05a51e4d1
- IPv6: split IPv6 / IPv4 up and down logic (they work independent of each other now)
- GUI: openvpn: remove option to enable/disable NCP (deprecated)
- GUI: openvpn: make Data Ciphers (ncp-ciphers) editable
- GUI: openvpn: only use the old --cipher setting in static key mode; remove obsolete hmac digests from server options (leave them in client for compatibility)
- GUI: openvpn: add stub/stub-v2 compression support to OpenVPN client
- GUI: openvpn: implement tls-crypt-v2 support
- GUI: openvpn server: fix bug with generating client configuration in 'secret' mode; also add some more checks
- GUI: openvpn server: implement 'Serial number' for generated client configuration in 'tls' mode
- GUI: openvpn server: implement CRL file
- GUI: openvpn client: distinguish between remote-cert-tls and verify-x509-name options
- GUI: openvpn: fix formatting
- GUI: advanced-wlanvifs.asp - add AP Isolation setting also for VIFs
- GUI: Admin: Debugging: add Clear Cache link (removes all Storage Object item for domain/IP address)
- GUI: also add localStorage.clear() on admin-upgrade and admin-access pages
- GUI: basic-network.asp - repair scan button function and provide control channel at wireless survey
- GUI: improvement to shutdown() - added 2nd pop-up with confirmation
- GUI: Advanced: DHCP/DNS: extend allowed dnsmasq custom configuration text area to 4096 characters
- GUI: MultiWAN Routing: extend Domain field to 70 characters
- GUI: QoS Graphs: fix displaying correct number of connections for the lowest priority class in BW Distribution
- GUI: tinc: properly format the display of information on the Status page; fixes #71
- GUI: Admin: Debugging: add possibility to enable segfault logging to syslog
- GUI: Advanced: Firewall: simplify the part with WAN behavior for ping and traceroute
- GUI: advanced-wireless - restrict tx power range (for very low values); Via GUI we allow a tx power range in mW from 5 to 1000 or default value 0 (-1 will be used for the wl driver) --> AVOID 1-4 mW area; see latest findings https://www.linksysinfo.org/index.php?threads/tenda-ac15-ac1900-tomato-firmware-support.71709/page-14#post-321389
- adblock: update blacklist URLs
- busybox: add time and getopt applets
- dnsmasq: add default edns_pktsz
- dropbear: use common random source for ltm
- dropbear: libtommath: enable fixed cutoffs as size-optimization
- firewall: allow incoming IPv6 from br0 to br3 (and align also to IPv4); fix issue #75
- firewall: adjust limit connection attempts (ssh/telnet) for IPv6 (and align to IPv4 --> remove incoming device, apply to all)
- getdns: listeners reply returned wireformat (fix from upstream, issue #430)
- iproute2: updates from upstream
- MOTD: only display Wireless info if that radio is enabled
- MOTD: fix motd and remove ethstate leftovers
- multiwan: in case of multiwan, don't set default gateway route. mwanroute script will handle this
- multiwan: mwan_load_balance: if connection is down, clear old mwan state
- multiwan: make watchdog less destructive to the routing table (only modify route of test hosts); change default checker to curl
- watchdog: new method of checking without breaking existing connections to the check hosts
- watchdog: fix incorrect ISPPPD check and condition
- ntp: implement ntp server properly
- openvpn: extend data-cipher length as per the ovpn documentation
- openvpn: switch to the subnet topology, instead of the deprecated net30 topology; Ref: https://community.openvpn.net/openvpn/wiki/Topology#Topologysubnet
- openvpn: ensure DHCP doesn't override our default route (fixes TAP+DHCP)
- openvpn: hide build date
- openvpn: add 'mode p2p' option to generated client config if auth mode is static
- openssl: conf: add extendedKeyUsage also to usr_cert section
- pppd: fix/correction for commit IPv6: split IPv6 / IPv4 up and down logic (see https://bitbucket.org/pedro311/freshtomato-arm/commits/d365748b8f458a196a6351849f0aa985263bd1b0); fix for: PPTP Server and Client not working anymore
- pppd: add two patches from openwrt: retain foreign default routes on Linux, remove runtime kernel checks
- vpnrouting: do not add local routes if in PBR strict mode; also use 'via $route_vpn_gateway' if available
- vsftpd: add native support for basic ftp_tls using router httpd cert/key
- httpd: openvpn.c: fix generation of client configuration file for user&pass/user&pass only Auth
- httpd: fix problems with server.pem key when using HTTPS
- httpd: ctnf.c: use ifb instead of imq for ARM, as a ingress system not only for default WAN
- httpd: use UTF-8 decoding for SSIDs
- www: vpn-tinc.asp: fix typo (also fixes #60)
- www: fix escapeCGI to properly encode unicode
- defaults.c : disable IP Traffic (cstats) Monitoring feature by default and save cpu workload; In additon disabling cstats avoids the waring/note at basic-network.asp that netmask should have at least 22 bits (255.255.252.0); fix issue #72
- rc: firewall.c: use REDIRECT target instead of DNAT to intercept dns traffic, as it's more efficient
- rc: firewall.c: raise a little allowed hit count in BF protection for remote GUI access (part 2 for IPv6)
- rc: firewall.c: only intercept udp requests to port 123, ntpd does not listen to tcp
- rc: firewall.c: be more restrictive, only allow ICMP messages we need
- rc: openvpn.c: add keepalive to client config
- rc: openvpn.c: client: fix ineffective "route" directives when PBR active; discussion: https://www.linksysinfo.org/index.php?threads/openvpn-client-bug-flaw-ineffective-route-directives-when-pbr-active.75941/
- rc: ppp.c: - set nvram "wan_iface" also in case IPv6 link up (function ip6up_main()); fix for: ipup_main() not yet (or later) called --> nvram variable "wan_iface" needed for function start_dhcp6c()
- rc: pptp.c - small fix for SDK Update
- rc: services: adjust function start_dnsmasq() and check wireless bridge after stop_dnsmasq(); fix for: in wireless ethernet bridge mode, router time not working anymore
- rc: qos.c: fix typo in DEV name
- rc: qos.c: fix illegal match, no SELECTOR like ipv6
- rc: wan.c - adjust function config_pppd() and start/add IPv6 only for "wan" (no IPv6 multiwan support)
2020.6 2020.09.25
--------------------------
Note: due to the WL (re)tuning and new WL drivers, users with WIFI problems after upgrading to 2020.6, should use clean install (clean NVRAM, no backups, see "important" in 2020.3 section)
- SDK7: update part 1 Note: sync SDK7 with ASUS SRC and also stay closer to SDK6
- SDK6: update wireless driver to fix Kr00k (single core)
- SDK6: update wireless driver to fix Kr00k (dual core)
- SDK6/SDK7: merge (missing) CTF fixes/changes (part 1)
- kernel SDK7: update drivers to SDK6 versions
- kernel: netfilter: xt_recent: add address masking option (ported from upstream)
- kernel: netfilter: xt_recent: fix namespace destroy path
- kernel: netfilter: xt_recent: avoid high order page allocations
- kernel: make xt_recent built-in instead of module
- kernel: update ipt_webmon module, so it works also for https connections
- kernel: drivers: net: usb: qmi_wwan: fixes/updates from upstream
- kernel: drivers: net: usbnet: Fix -Wcast-function-type
- kernel: drivers: net: usb: updates from upstream
- kernel sdk7: hso: fix memory leak in hso_create_rfkill()
- kernel sdk6: drivers: net: pppoe.c: apply patch from SDK7 branch
- kernel: usb: remove unused bitmap #define from hcd.h
- kernel sdk6: net: bridge: br_multicast.c - Disable bridge multicast_snooping by default because it can interfere with EMF and other multicast things
- kernel: include: dst.c: disable WARN_ON_ONCE()
- kernel: net: core: dev.c: updates from upstream; fix compiler warnings
- busybox: clean sources of 1.25.1, add patches instead
- dnsmasq: update to 2.82
- libcurl: update to 7.72.0
- libjson: udpdate to 0.15 (20200726)
- nano: update to 5.2
- nginx: update to 1.19.2
- php: update to 7.2.33
- sqlite: update to 3.33.0
- openvpn: update to 2.5_rc1
- tor: update to 0.4.4.5
- transmission: update to 3.00
- libcurl: update CA certificate bundle as of 2020-07-22
- system: add option to adjust tcp/udp buffers and thresholds
- build: update logic how to apply patches
- build: rom: use a local copy of ca-certificates file when unable to download
- build: disable JFFS support for target 'r6400e/z' (R6400/R6400v2/R6700v3) because of problems
- build: e2fsprogs: tune recipe; add more tools (tune2fs, badblocks); add config file for e2fsck; move them to /usr/sbin, where they should be
- make: build the modules needed by apcupsd standalone - the way it is done so far only (unnecessarily) increases the kernel size, and we don't need amazing performance here and I bet 95% of users don't use it
- WL: add clm data for documentation (definition of channels, regions, ...)
- for routers with amplifiers, increase possible range to 1000 mW (30 dBm)
- implement option to prevent Firefox's automatic usage of DoH
- DNS: fix the bug even when WAN DNS server is set to Auto, still using what was previously entered in the Manual DNS field
- router: fix build of libFLAC in some cases
- remove libuuid checking in miniupnpd build
- fix building router/conf on GCC 10 compiler on host
- MULTIWAN: rc: dhcp.c: call function mwan_table_del(prefix) for dual WAN and multi WAN setups
- MULTIWAN: rc: dhcp.c: call function mwan_load_balance() for dual WAN and multi WAN setups
- IPv6: adjust start and stop logic
- GUI: Status: Device List: also deauthenticate device when deleting DHCP lease
- GUI: advanced-wireless.as - reboot the router if the user wants to change the wireless country
- GUI: status-devices.asp - show RX / TX values (again)
- GUI: SDK6: keep the current wireless noise floor value(s) on device list page
- GUI: Device List: better match the pictures to the signal level
- GUI: advanced-wireless.asp - make it possible to select country rev
- GUI: advanced-wireless.asp: when changing country settings for the wireless driver, also change bootloader default values (long version; short version already in place)
- GUI: advanced-wireless.asp - hide option Bluetooth Coexistence for 5 GHz wireless interfaces
- GUI: advanced-wireless.asp - hide option Turbo QAM for 5 GHz wireless interfaces
- GUI: include AdvancedTomato font into the css stylesheet
- iptables: fix save formatting for libipt_webst, libipt_account, ROUTE target, TRIGGER target
- iptables: fix list formatting for ROUTE target
- iptables: fix match for ipt_account
- iptables: fix handling ICMPv6 reject --with-tcp-reset
- httpd: update the way how failed GUI login attempts are added to log
- rc: firewall.c: raise a little allowed hit count in BF protection for remote GUI access
- rc: network.c: do not unload the wifi driver by default Note: avoid reboot problems
- rc: fix segfault in dhcpc-release and dhcpc-renew when run without arguments
- rc: dnsmasq: reject wpad hostname (protect against VU#598349)
- rc: mwan.c: adjust function mwan_table_del() and remove only active and valid DNS
- rc: wan.c: do not restart wireless at function start_wan()
- rom: Makefile: fix downloading dnscrypt-proxy resolvers file
- shared: defaults.c: adjust redial period to 20 seconds; note: this (minimum) waiting time helps with dual-stack to get a fresh IPv6 setup
- shared: defaults.c: don't prioritize AES-256 over AES-128 (no AES acceleration)
- openvpn: try to use CHACHA20-POLY1305 (if supported by the remote end) on routers without AES acceleration
- openvpn: disable compression by default
- openvpn: update config file generation for OpenVPN 2.5 (also fixes #57)
- www: tomato.js: add SameSite=Lax also when deleting cookies
- Remove Board ID for Charter specific routers, only have OEM board ID
- Add Charter specific board ID for initial file, update make file to generate init file
- update version (in cfg file) to "V1.0.12.99" due to NETGEAR mandating no downgrades and having a limit on how high the new version can be
- R8000: do not enable air time fairness by default (note: user can enable/disable it at the GUI)
- Asus RT-AC56R: provide 80 MHz channels for USA default country
- All Router (SDK6/SDK7): change country default setup
2020.5 2020.07.17
--------------------------
Note: mainly bugfixes (see *)
- kernel: r2q change message from priority WARNING to priority DEBUG
- WL: update wireless driver for SDK7 to GPL 382.52287 (Kr00k)
- (*) firewall: fix commit 31a8eb0 (brute force mitigation rule on port defined for GUI remote access) - increase hitcount / lower period of time (hardcoded)
- libevent: update to 2.1.12-stable
- tor: update to 0.4.3.6
- libcurl: update to 7.71.1
- (*) GUI: advanced-wireless.asp: when changing country for WL driver, also change its short version - 'ccode'
- httpd: add to log failed GUI login attempts
- www: tomato.js: add SameSite=Lax when creating cookies
- (*) www: clearcookies.asp: remove the comment left when debugging
- (*) Netgear Router (all supported): Raise revision level (again)
- (*) Asus RT-AC56R: improve/fix support with new wifi driver (*.126)
- (*) Asus RT-AC56U/R: do not unload wifi driver
2020.4 2020.07.10
--------------------------
Note: Users with WIFI problems after upgrading to 2020.3, should use clean install here again (clean NVRAM, no backups, see "important" in 2020.3 log); this also applies to all upgrading from earlier versions.
- kernel: backport support for setting a default qdisc
- kernel/kernel sdk7: enable kernel network namespaces and veth for AIO targets
- kernel/kernel sdk7: netns: Deduplicate and fix copy_net_ns when !CONFIG_NET_NS
- kernel/kernel sdk7: net: huawei_cdc_ncm: remove redundant assignment to variable ret
- kernel/kernel sdk7: net: usb: qmi_wwan: remove redundant assignment to variable status
- toolchain: brcm-arm-toolchains update; newer uClibc 0.9.33.2 with NPTL enabled
- build: kernel: enable HIDRAW for UPS support in apcupsd
- SDK6: update EMF / IGS and utilities finally - use src files / compile from src
- add and enable Conntrack Userspace Tool for VPN/AIO targets (Thanks to @Not Sure)
- add diskdev_cmds-332.25 (hfsprogs) to the tree with patches
- add HFS/HFS+ support (also with tuxera driver)
- enable Open HFS/HFS+ driver on all targets
- enable Tuxera HFS/HFS+ driver on targets: ac68e/ac68z (RT-N18U, RT-AC56U, RT-AC68U, RT-AC68R, RT-AC68P, RT-AC66U_B1, RT-AC1900P VPN/AIO); ac15e (Tenda AC15 VPN); ac18e/ac18z (Tenda AC18 VPN/AIO)
- enable crash log by taking space from the end of the jffs2 partition (as an option)
- fix panic due to incorrect check of error pointer when proc_ns_fget fails
- enable Tuxera HFS/HFS+ driver on all ac3200_ (RT-AC3200) targets
- adminer: update to 4.7.7
- libyaml: update to 0.2.5
- php: update to 7.2.31
- tor: update to 0.4.3.5
- libcurl: update to 7.71.0
- e2fsprogs: update to 1.45.6
- nettle: update to 3.6
- iptables: update to 1.8.5; add conditional compilation with libnetfilter_conntrack to enable connlabel match support
- libnetfilter_conntrack: update to 1.0.8
- conntrack-tools: update to 1.4.6
- libexif: update to 0.6.22
- nano: update to 4.9.3
- nginx: update to 1.19.0
- sqlite: update to 3.32.3
- rp-pppoe: update to 3.14
- libnfsidmap: update to 0.27
- libjson-c: update to 1c6086a (2020.05.31) snapshot
- dropbear: update to 2020.80; remove patch 102-fix-cbc_mode-cant-be-fully-disabled - already in upstream
- portmap: update to 4836a4a (2014-06-23) snapshot; remove unneeded patch - already in upstream
- iproute2: clean sources of 3.19.0, add patches instead
- accel-pptp: clean sources of 0.8.5 add patches instead
- switch4g: fix modem reset, it works at last
- SNMP: add device name and FW version to nsExtendOutput table
- MDU: send User-Agent also in case of Custom url
- samba: add protocol selection options (SMBv1, SMBv2, SMBv1 + SMBv2); make SMBv2 + SMBv1 the default (no change)
- samba: configuration tune up
- dropbear: strip version from ident
- firewall: openvpn: fix duplicate openvpn rules on wan/openvpn restart
- firewall: retry failed iptables-restore in a few secs
- firewall: add a brute force mitigation rule on port defined for GUI remote access
- openvpn: fix multiple issues in stopping vpn services
- openvpn: set up firewall in correct order - before starting openvpn but after stopping it
- openvpn: shutdown all running servers/clients on wan stop and remove tunnel modules
- openvpn: ensure duplicate-cn is set as default if not specified
- openvpn: no longer dump stats to system log
- openvpn: in case of openvpn unexpectedly dies - flush tun IF, otherwise openvpn will not re-start (required by iproute2)
- GUI: advanced-wireless.asp: set interference mitigation mode correctly for ARM
- GUI: advanced-wireless.asp: adjust note/comment for transmit power option
- GUI: advanced-wireless.asp: hide wifi option Turbo QAM for NON-AC hardware modules
- GUI: extend advanced-wireless.asp / Wireless Multicast Forwarding (no new GUI options)
- GUI: Admin Restrictions: change permitted value for Limit Connections Attempts (fixes #44)
- GUI: Advanced: Wireless: changes for new default settings; Thanks to @rs232
- GUI: Advanced: Wireless: check TxBF support (v2); note: Turn off and hide TxBF options if needed!
- GUI: Admin Access: SSH Daemon: add ed25519/ecdsa to the allowed authentication keys; also fix the regexp/code to check the entire field, not just the first line
- GUI: Administration: Upgrade: fix missing css when loading reboot.asp
- GUI: NAS: USB support: add info on how to create an ext4 file system that will be compatible with FreshTomato ARM
- GUI: basic-network.asp - hide and disable wan options/settings if the user selects/enables wireless bridge mode
- router: Makefile: snmp: tune recipe; add only needed mibs; enable logging (/var/log/snmpd.log)
- router: Makefile: OpenVPN: use the iproute2 ip tool instead of ifconfig
- router: httpd: limit SSL certificate to 13 months if clock has been set; new Apple initiative to force removal of possibly compromised certs
- router: rc: network.c: change/adjust requirements for vhtmode and vht_features
- router: rc: mtd.c: skip bad blocks during erase
- router: shared: defaults: change wifi radio powersave mode; turn it off by default now (align to ASUS)
- router: shared: defaults: change wifi rxchain powersave mode; turn it off by default now
- router: shared: update ifaddrs.c
- router: www: advanced-routing.asp: remove Mode option - it has undocumented secondary effects
- rom: simplify ca-bundle update (also fixes #43)
- EA6200: set nvram value "band" correct for this router (5 GHz module first)
- DIR868L: Workaround to show 32 KB threshold at the GUI that should not be crossed right now!
- R7000: do not enable air time fairness by default
- DIR868L rev a/b/c: adjust default wifi country to SG (note: avoid using wildcard #a)
- R6400v2 / R6700v3: improve/fix support for SDK6 (no change for other routers)
- DIR868L: do not enable vhtmode and vht_features for 2G wifi module (Note: prevent/avoid problems on older/cost optimized/partly NON-AC hardware)
- R6400v1: do not enable vhtmode and vht_features for 2G wifi module
- EA6350v1 / EA6200: do not enable vhtmode and vht_features for 2G wifi module
- Netgear R6250: do not enable vhtmode and vht_features for 2G wifi module
- Netgear R6300v2: do not enable vhtmode and vht_features for 2G wifi module
- Netgear R6400v2 / R6700v3: do not enable vhtmode and vht_features for 2G wifi module
- Xiaomi R1D: do not enable vhtmode and vht_features for 2G wifi module
- Asus RT-AC56U: do not enable vhtmode and vht_features for 2G wifi module
- EA6400 / EA6500v2 / EA6700: do not enable vhtmode and vht_features for 2G wifi module
2020.3 2020.05.09
--------------------------
!!!IMPORTANT (applies to all routers)!!!
- Due to the new WL driver and the required changes in NVRAM, for the update process select a new image AND CHECK "Delete all data from NVRAM after flashing". DO NOT use backups!
- kernel: cdc_ncm: Implement the 32-bit version of NCM Transfer Block; Fix the build warning; Add skb_put_zero() to include/linux/skbuff.h
- SDK6: add/update missing dpsta/proxy things; Hint: We (will) need it
(also for possible future updates)
- SDK6: update wifi driver (for single and dual-core) to 6.37.14.126 (r561982)
- SDK7: repair merge with arm-master branch after SDK6 driver update, to solve client connection problems with sdk7 routers
- add wsdd2. wsdd2 is a small daemon that can service WSD/LLMNR queries. It allows the router to be visible in Windows's Network list without requiring SMB1 support
- openssl-1.1: update to 1.1.1g
- miniupnpd: update to 2.1.20200329
- adminer: update to 4.7.6
- dnsmasq: update to 2.81
- tor: update to 0.4.2.7
- nano: update to 4.9
- libcurl: update to 7.69.1
- nginx: update to 1.17.10
- nano: update to 4.9.2
- libyaml: update to 0.2.3
- iperf: update to 3.7
- openvpn: update to 2.4.9
- libncurses: update to 6.2
- libjson-c: update to 0.14 (2020.04.19); due to autoconf support removed for CMake, Makefile recipes have been updated
- dropbear: update to 90cfbe1 (2020.03.27) snapshot
- dnsmasq: remove 19036 trust anchor, now expired
- miniupnpd: revert previous upstream changes that prevented the use of a private IP on the WAN interface
- libcurl: smtp: set auth correctly
- adblock: switch URL for Windows 10 blacklist
- adblock: a few changes so that it doesnt start simultaneously; correction in the blacklist address
- Revert "busybox: wget: openssl11: fix ssl when built with OpenSSL-1.1.x" No more needed - we have symlink to openssl11 now
- Allow a custom autorefresh status script for each wan and output its HTML in the overview page for USB targets
- Add xterm-256color terminal This solves a problem with message Error opening terminal: xterm-256color when user tries to run nano on some platforms
- dropbear: disable 3DES and CBC
- dropbear: Fix CBC_MODE can't be fully disabled
- MDU: update for Cloudflare DDNS, fixes #30
- Use strip instead of gcc to determine toolchain path to allow using ccache
- GUI: Administration: BWM/IPT: fix html (inability to backup stats)
- GUI: Admin Access: restart sshd if password is changed (otherwise, the old will be used until reboot)
- GUI: Admin: JFFS: add more info about possible errors, fix minor html problems
- GUI: Tools: IPerf: two modifications move initialization to earlyInit() to avoid flickering when loading the page enable background images for 'Start/Stop test' button
- GUI: OpenVPN Client: also 'Policy Routing (strict)' should be impossible to select if interface is TAP
- build: apcupsd: omit check for shutdown file; needed if compiled with ccache
- build: add JFFS support on BRCM Nand Flash Partition
- build: enable JFFS Support on BRCM Nand Flash Partition for target n18e, n18z, ac68e, ac68z (RT-N18U, RT-AC56U, RT-AC68U, RT-AC68R, RT-AC68P, RT-AC66U_B1, RT-AC1900P)
- build: enable JFFS Support on BRCM Nand Flash Partition for target ac3200e, ac3200z, ac3200-128e, ac3200-128z (RT-AC3200 VPN/AIO 64K/128K)
- build: enable JFFS support on BRCM Nand Flash Partition for target r8000e and r8000z (Netgear R8000 VPN/AIO)
- Makefile: one file/image for all RT-AC68U versions (A1,A2,B1,B2,C1,E1)/R/P
- Makefile: add option -fno-delete-null-pointer-checks
- router: Makefile: openssl/openssl-1.1: fix typo in recipe
- router: Makefile: avoid building libcurl more than once
- router: Makefile: avoid building nettle (and gmp) if not needed
- router: Makefile: tune to work on Debian 10.x as a host
- router: Makefile: add -fPIC where needed also as CFLAGS
- router: httpd: bwm.c: extend allowed IPT backup size
- router: httpd: openvpn.c: generating a CSR request does not require the -days parameter
- router: others: tomatoanon: change URL for version checker to freshtomato.org; cosmetics
- router: rc: init.c - enable or disable jumbo_frame and set jumbo frame size for ARM branch
- router: rc: init.c - remove start_nas()/stop_nas() (already done at start_services()/stop_services())
- router: rc: jffs2.c: fix the error appearing after proper jffs formatting
- router: rc: network.c: do not unload (reload) wifi driver for some older routers (Linksys EA6200 / EA6350v1 and Netgear R6250)
- router: shared: misc.c: add function nvram_set_int()
- router: shared: shutils.c: fix for function get_pid_by_name (add missing closedir)
- router: shared: shutils.c: fix for function nvifname_to_osifname (check pointer first
)
- router: www: vpn-pptp.asp: fix typo (in commit 5452cea) causing JS error; fixes #24
- WL: update wireless driver for SDK7 to GPL 382.51939
- EA6200: small addendum/correction for new wl driver
2020.2 2020.03.20
--------------------------
Note: Because of changes in GUI it is recommended to clear the browser cache, or use Ctrl+F5
- Add Asus RT-AC68U B2 support (almost the same like AC1900P)
- kernel: tcp: avoid infinite loop in tcp_splice_read() Splicing from TCP socket is vulnerable when a packet with URG flag is received and stored into receive queue
- kernel: net: don't call strlen() on the user buffer in packet_bind_spkt() KMSAN (KernelMemorySanitizer, a new error detection tool) reports use of uninitialized memory in packet_bind_spkt()
- kernel: netfilter: nf_ct_ipv4: handle invalid IPv4 and IPv6 packets consistently IPv6 conntrack marked invalid packets as INVALID and let the user drop those by an explicit rule, while IPv4 conntrack dropped such packets itself
- kernel: netfilter: nf_ct_ipv4: packets with wrong ihl are invalid
- kernel: ipv6: do not increment mac header when it's unset Otherwise we'll overflow the integer. This occurs when layer 3 tunneled packets are handed off to the IPv6 layer
- kernel: ipv6: Allow IPv4-mapped address as next-hop Made kernel accept IPv6 routes with IPv4-mapped address as next-hop
- gmp: update to 6.2.0
- nginx: update to 1.17.9
- php: update to 7.2.28
- spawn-fcgi: update to 3c1b01c (2019.08.25) snapshot; clean sources, add patch instead, cosmetic in router/Makefile
- sqlite: update to 3.31.1
- libcurl: update to 7.69.0
- dnsmasq: update to 2.81rc3
- libexif: update to 54b6f7f (2020.02.29) snapshot
- nano: update to 4.8
- pcre: update to 8.44
- tor: update to 0.4.2.6
- getdns/stubby: update to 1.6.0/0.3.0
- pppd: fixes from upstream (pppd: Fix bounds check in EAP code; pppd: Ignore received EAP messages when not doing EAP)
- libcurl: update CA certificate bundle as of 2020-01-01
- GUI: TOR: add an option to resolve only .onion/.exit domains without having to configure anything else
- GUI: Fix Issue #15 to allow configuring remote access in router mode
- GUI: Admin Access: fix info about default web username
- GUI: Admin Access: delete the unnecessary http_root variable (Allow web login as "root") - now the username is 'root' if it's not entered, no need to check/uncheck something
- GUI: overview: fix the order of the enable/disable wifi buttons for routers with three radios
- GUI: overview: fix issue when warning about unsecured wifi appears, even if this radio is temporarily disabled by Disable button on this page
- GUI: Admin Access: do not restart sshd if there are no configuration changes
- GUI: Basic Network: fix the order in which the wifi interfaces are selected when setting Wireless Client Mode bug similar to that on the Overview page fd06410
- GUI: clean-up; the first step to sorting out this mess
- GUI: add AdvancedTomato-like themes: red, blue, green and dark
- GUI: nas-samba.asp - add option to enable/disable GRO (Default Off > like before)
- GUI: OpenVPN client: extend To Domain field to 50 chars
- GUI: support showing status of hilink modem reachable from any WAN
- router: Makefile: clean-up; remove unused scsi-idle package from the tree
- router: Makefile: fix some configure/compiler warnings, clean-up
- router: Makefile: there is no libyaml to install
- router: Makefile: remove FULL_OPENSSL var
- router: Makefile: always build and install zlib
- router: Makefile: samba3: build with libiconv if available
- router: Makefile: transmission: fix compiler warnings (partially); dont build utils/cli; clean-up recipe
- router: Makefile: add symlink to openssl
- router: httpd: misc.c: change memory format specifiers to unsigned integer, fixes #9 (there was an overflow in displaying memory sizes above 2GB)
- router: mdu: Makefile: build openssl11 with pthread
- router: others: secure adblock with lock file; cosmetic in Makefile
- router: others: mymotd: fix bad number bug when wanX is disabled
- router: rc: services.c: add warning to syslog when dnsmasq is skipped because of WEB mode enabled
- router: rc: init.c - adjust et and wl thresh value after reset (for wifi-driver and et_linux.c)
- router: rc: init.c - init variable restore_defaults to 0 and also use it to reset/adjust beamforming parameter
- router: rc: network.c - rework start and stop of emf/lan/wl - fix/correct start and stop of EMF (stop failed almost every time and also router stuck/hung sometimes at reboot via GUI!) - make EMF multi-lan aware - give feedback about start and stop EMF - rework basic start and stop of start_lan / start_lan_wl / start_wl / start_wireless
- router: rc: usb.c - improve/extend detection to activate the USB LED for Router with only one USB LED
- router: rc: network.c - bring down loopback interface if we stop lan (and some cosmetic)
- router: rc: init.c - remove start_nas()/stop_nas() (already done at start_services()/stop_services())
- router: rc: blink_br.c - exit / stop blink_br for router with more than one LAN LED (we do not need blink_br in that case > save memory/cpu load)
- router: rc: init.c - reboot automatically when the kernel panics and set waiting time (3 sec now)
- router: rc: init.c - set overcommit_memory and overcommit_ratio
- router: rc: network.c - unload/load wifi driver only with start_lan() and stop_lan()
- router: rc: network.c - make sure to validate/restore all per wl-interface related variables for sdk7
- router: rc: init.c - load wifi driver for sdk7 at sysinit Hint: sdk7 seems to be a special case
- router: rc: services.c: simplify if statement
- router: www: vpn-tinc.asp: fix some bugs, add link to the tutorial, clean-up
- router: www: status-overview.asp: add missing 10Mb port icons, add set of half-duplex icons, code optimization/reduce size, clean-up
- RT-AC3200: improve/change LED table if router is in WiFi bridge mode
- Huawei WS880: disable wifi blink by default for WS880, causing problems (This is a workaround for now!)
- Huawei WS880: change LED table
2020.1 2020.01.20
--------------------------
- openssl: update to 1.0.2u
- nano: update to 4.7
- tinc: update to de7d5a0 (2019.07.17) snapshot
- dnsmasq: update to ab53883 (2020.01.11) snapshot
- e2fsprogs: update to 1.45.5
- libcurl: update to 7.68.0
- openssl-1.1: move folder to openssl-1.1
- openssl11: Enable OpenSSL 1.1.1 in router/Makefile
- openssl11: add patch
- openssl11: tor: enable OpenSSL 1.1.x support
- openssl11: OpenVPN: enable OpenSSL 1.1.x support
- openssl11: getdns/stubby: enable OpenSSL 1.1.x support
- openssl11: vsftpd: enable OpenSSL 1.1.x support
- openssl11: enable OpenSSL 1.1.x for libcurl, mdu (if built with libcurl), transmission
- openssl11: tinc: enable OpenSSL 1.1.x support
- openssl11: nginx: enable OpenSSL 1.1.x support
- openssl11: mysql: enable OpenSSL 1.1.x support
- openssl11: enable OpenSSL 1.1.1 for httpd, mssl, mdu (if built with mssl)
- openssl11: dnsmasq: add openssl backend for DNSSEC
- openssl11: Add OPENSSL_PREFER_CHACHA_OVER_GCM option
- openssl11: priorize CHACHA over GCM for models with no AES acceleration
- openssl11: dont build test and fuzz to shorten build time
- openssl11: enable OpenSSL 1.1.x on all targets
- GUI: FTP Server Configuration: add usage notes
- GUI: advanced-vlan.asp - make it possible to create a VLAN with all ports (including tag on!)
- GUI: Static DHCP/ARP/IPT: also restart dnsmasq when saving
- GUI: Advanced: DHCP / DNS Server (LAN): change the DHCPC Options format to a 256 character textarea
- vsftpd: clean 3.0.3 sources, add patch instead
- mdu: fix some bugs (again)
- stubby: add syslog support
- pppd: restore the use of libcrypt to support DES instead of OpenSSL (commit #5c08f06 introduced an upstream change: 'Use openssl for DES instead of libcrypt / glibc', with no choice of libcrypt (only libdes and OpenSSL). It requires OpenSSL 1.0.2 and prevents compilation with OpenSSL 1.1. This commit fixes it))
- pppd: fixes from upstream (pppd.h: Add missing headers; pppd: Don't free static string; pppd: Limit memory accessed by string formats with max length specified; pppd: Make sure word read from options file is null-terminated; pppd: Avoid use of strnlen (and strlen) in vslprintf)
- miniupnpd: get rid of OpenSSL dependencies in miniupnpd
- vpnrouting: fix the extraction of foreign options from the OpenVPN server, add a warning if the option is enabled but nothing was received from the server, change firewall restart - move to the very end
- busybox: wget: openssl11: fix ssl when built with OpenSSL-1.1.x
- NFS: allow selection of protocol version; optimization and clean-up; move code from nfs.rc script to nfs.c
- router: Makefile: correct/adjust/fix emf & igs targets
- router: wlconf: use src files / compile from sources
- router: shared: defaults.c: align type1 nvram settings to Asus SRC
- router: shared: defaults: add nvram acs variables (align to Asus SRC)
- router: shared: defaults: add limit for association retries (align to Asus SRC)
- Asus RT-AC1900P: fix detection
- RT-AC68U: extend stealth mode (add / turn off Asus Logo LED also)
2019.4 2019.12.29
--------------------------