Περί ROS ο λόγος...

[deniSun]

What''s new in 6.40.8 (2018-Apr-23 11:34) [bugfix]:

!) winbox - fixed vulnerability that allowed to gain access to an unsecured router;
*) certificate - fixed incorrect SCEP URL after an upgrade;
*) health - fixed empty measurements on CRS328-24P-4S+RM;
*) ike2 - use "policy-template-group" parameter when picking proposal as initiator;
*) ipv6 - fixed IPv6 behaviour when bridge port leaves bridge;
*) routerboard - fixed "mode-button" support on hAP lite r2 devices;
*) ssh - fixed SSH service becoming unavailable;
*) traffic-flow - fixed IPv6 destination address value when IPFIX protocol is used;
*) winbox - show "Switch" menu on cAP ac devices;
*) wireless - improved compatibility with BCM chipset devices;

[minas]

Συνήθως δεν είμαι early adopter... τώρα έτσι όπως εξελίχθηκε έκανα τρεις αναβαθμίσεις σε μία εβδομάδα:
Μία την τελευταία της 6.41, μετά λέω μια και τα έριξα να δοκιμάσω την 6.42, και τελικά έβαλα και το κλείσιμο της τρύπας...

Πρέπει να σταματήσω να μπαίνω σε πειρασμό από τα νέα features... έτσι "κύλησα" και σε current από bugfix, επειδή ήθελα το hardware offload στο bridge .

[macro]

E ναι αλλα εβαλες βασικο feature και οχι οτι ναναι.

[deniSun]

What's new in 6.42.2 (2018-May-17 09:20) [current]:

Spoiler:

*) bridge - do not allow to add same interface list to bridge more than once;
*) bridge - fixed LLDP packet receiving;
*) bridge - fixed processing of fragmented packets when hardware offloading is enabled;
*) console - fixed type "on" and "wireless-status" LED trigger value setting (introduced in v6.42.1);
*) crs317 - fixed link flapping when inserted S+RJ10 module without any cable;
*) defconf - fixed wAP LTE kit default configuration;
*) dhcpv4 - prevent sending out ICMP port unreachable packets;
*) dhcpv4-client - fixed DHCP client stuck in renewing state;
*) dhcpv6-relay - fixed missing configuration after reboot;
*) filesystem - fixed NAND memory going into read-only mode;
*) hotspot - fixed user authentication when queue from old session is not removed yet;
*) interface - fixed "built-in=no" parameter for manually created interface lists;
*) interface - fixed "dynamic" built-in interface list behaviour;
*) interface - fixed interface list which include disabled member;
*) interface - fixed interface list which include/exclude another list;
*) interface - fixed interface configuration responsiveness;
*) ipsec - fixed policies becoming invalid if added after a disabled policy;
*) ipsec - improved reliability on IPsec hardware encryption for ARM devices except RB1100Dx4;
*) led - added "dark-mode" functionality for hAP ac and hAP ac^2 devices;
*) lte - improved LTE communication process on MMIPS platform devices;
*) quickset - fixed dual radio mode detection process;
*) routerboard - properly represent board name for hAP ac^2;
*) tile - fixed Ethernet interfaces becoming unresponsive;
*) winbox - allow to specify "any" as wireless "access-list" interface;
*) winbox - fixed "/ip dhcp-server network set dns-none" parameter;
*) wireless - enable all chains by default on devices without external antennas after configuration reset;
*) wireless - fixed packet processing when "static-algo-0=40bit-wep" is being used (introduced in v6.42);
*) wireless - fixed usage of allowed signal strength values received from RADIUS;
*) wireless - improved wireless throughput on hAP ac^2 and cAP ac;
*) x86 - fixed reboot caused by MAC Winbox connection;

[macro]

Αυτο γραφουν για το firmware. Οτι δεν ειναι υποχρεωτικο δλδ και αν δε σου βγαλει μηνυμα στο log "extra reboot is needed" δε χρειαζεται να το κανεις. Και οτι ουτε ειναι καλη ιδεα να το βαλεις στο auto upgrade.

Since firmware fixes for already existing products are very rare, we do not force upgrade on each reboot. Basically, if you do not see change in RouterOS changelog that tells "extra reboot required", there is no need for an upgrade.

We consider that it would not be a good idea to force upgrade and increase boot time significantly just so firmware would be upgraded. At the moment we are maintaining policy that:

1) We do not force upgrade;
2) If you really want to upgrade firmware every time, then either reboot device twice after RouterOS upgrade when auto-upgrade for RouterBOOT is enabled or do such process manually.

Currently implementing simultaneous upgrade would introduce more flaws than pros. However, of course we will always listen to customers complaints and ideas and will try to make upgrade and other processes in RouterOS/RouterBOOT as good as they can be in order to satisfy the biggest part of users.

[minas]

Αυτο γραφουν για το firmware. Οτι δεν ειναι υποχρεωτικο δλδ και αν δε σου βγαλει μηνυμα στο log "extra reboot is needed" δε χρειαζεται να το κανεις. Και οτι ουτε ειναι καλη ιδεα να το βαλεις στο auto upgrade.

Since firmware fixes for already existing products are very rare, we do not force upgrade on each reboot. Basically, if you do not see change in RouterOS changelog that tells "extra reboot required", there is no need for an upgrade.

We consider that it would not be a good idea to force upgrade and increase boot time significantly just so firmware would be upgraded. At the moment we are maintaining policy that:

1) We do not force upgrade;
2) If you really want to upgrade firmware every time, then either reboot device twice after RouterOS upgrade when auto-upgrade for RouterBOOT is enabled or do such process manually.

Currently implementing simultaneous upgrade would introduce more flaws than pros. However, of course we will always listen to customers complaints and ideas and will try to make upgrade and other processes in RouterOS/RouterBOOT as good as they can be in order to satisfy the biggest part of users.

Προσωπικά, αναβαθμίσζω και firmware κάθε φορά. Ούτως ή άλλως μετά το πρώτο reboot, το δεύτερο δεν είναι πρόβλημα.
Καλύτερα που δεν το βάζουν με το ζόρι μαζί με την αναβάθμιση του ROS, αλλά εάν δεν έχει αλλαγές, μπορούν απλά να κρατήσουν το ίδιο version στο firmware, όπως γινόταν παλιότερα.

[deniSun]

Δεν έχουν όλες οι αναβαθμίσεις fw upd.
Μόνο όταν πας από Α.1 σε Α.2.
Στις Α.1.Χ με Α.1.Υ δεν έχεις αναβάθμιση fw.

[deniSun]

What's new in 6.42.3 (2018-May-24 09:20) [current]:

Spoiler:

*) lte - fixed automatic LTE band selection for R11e-LTE;
*) wireless - improved client "channel-width" detection;
*) wireless - improved Nv2 PtMP performance;
*) wireless - increased stability on hAP ac^2 and cAP ac with legacy data rates;

[deniSun]

What's new in 6.42.4 (2018-Jun-15 14:14) [current]:

Spoiler:

*) bridge - allow to make changes for bridge port when it is interface list;
*) bridge - fixed FastPath for bridge master interfaces (introduced in v6.42);
*) certificate - fixed "add-scep" template existence check when signing certificate;
*) chr - fixed adding MSTI entries;
*) chr - fixed boot on hosts older than Windows Server 2012 when running CHR on Hyper-V;
*) chr - fixed various network hang scenarios when running CHR on Hyper-V;
*) console - fixed script permissions if script is executed by other RouterOS service;
*) dhcpv4-server - fixed DHCP server that was stuck on invalid state;
*) health - changed "PSU-Voltage" to "PSU-State" for CRS328-4C-20S-4S+;
*) health - fixed incorrect PSU index for CRS328-4C-20S-4S+;
*) ipsec - improved reliability on IPsec hardware encryption for RB1100Dx4;
*) kidcontrol - fixed dynamically created firewall rules order;
*) led - added "dark-mode" functionality for hEX S and SXTsq 5 ac devices;
*) led - fixed CCR1016-12S-1S+ LED behaviour after Netinstall (introduced in v6.41rc58);
*) led - use routers uptime as a starting point when turning off LEDs if option was not enabled on boot;
*) ppp - fixed "hunged up" grammar to "hung up" within PPP log messages;
*) quickset - added missing wireless "channel-width" settings;
*) quickset - added support for "5ghz-a/n" band when CPE mode is used;
*) snmp - added remote CAP count OID for CAPsMAN;
*) snmp - fixed readings for CAPsMAN slave interfaces;
*) supout - added "partitions" section to supout file;
*) usb - properly detect USB 3.0 flash on RBM33G when jumper is removed;
*) userman - improved unique username generation process when adding batch of users;
*) w60g - improved RAM memoy allocation processes;
*) winbox - added missing "dscp" and "clamp-tcp-mss" settings to IPv6 tunnels;
*) winbox - allow to specify full URL in SCEP certificate signing process;
*) winbox - by default specify keepalive timeout value for tunnel type interfaces;
*) winbox - show "scep-url" for certificates;
*) winbox - show "System/Health" only on boards that have health monitoring;
*) winbox - show firmware upgrade message at the bottom of "System/RouterBOARD" menu;
*) wireless - enable all chains by default on devices without external antennas after configuration reset;
*) wireless - improved Nv2 reliability on ARM devices;

[macro]

Πολλοι εχουν καποιο θεμα με τους DNS με το συγκεκριμενο ROS. Εγω το εκανα σε ενα μηχανημα επειδη δε προλαβα να διαβασω για το προβλημα και για τα αλλα θα περιμενω καποια επομενη εκδοση.

[jkarabas]

Πολλοι εχουν καποιο θεμα με τους DNS με το συγκεκριμενο ROS. Εγω το εκανα σε ενα μηχανημα επειδη δε προλαβα να διαβασω για το προβλημα και για τα αλλα θα περιμενω καποια επομενη εκδοση.

Πάντως εγώ που το αναβάθμισα άμεσα, μέχρι στιγμής δεν έχω κάποιο θέμα με τους DNS του ΟΤΕ.

[deniSun]

Πολλοι εχουν καποιο θεμα με τους DNS με το συγκεκριμενο ROS. Εγω το εκανα σε ενα μηχανημα επειδη δε προλαβα να διαβασω για το προβλημα και για τα αλλα θα περιμενω καποια επομενη εκδοση.

Δεν παίρνει dns από τον πάροχο ή δεν δουλεύει με καρφωτούς;

[macro]

Και τα 2 νομιζω.

[deniSun]

6.42.5 current:

*) api - properly classify API sessions in log;
*) chr - enabled promiscuous mode (requires to be enabled on host as well) when running CHR on Hyper-V;
*) kidcontrol - added dynamic accept firewall rules to allow bandwidth limit when FastTrack is enabled;
*) led - fixed LED default configuration for LtAP mini;
*) snmp - added "rssi" and "tx-sector-info" value support for w60g type interfaces;
*) snmp - added station "distance", "phy-rate", "rssi" value support for w60g type interfaces;
*) ssh - allow to use "diffie-hellman-group1-sha1" on TILE and x86 devices with "strong-crypto" disabled;
*) w60g - added 4th 802.11ad channel (CLI only);
*) w60g - added distance measurement;
*) w60g - general stability and performance improvements;
*) w60g - improved maximum achievable distance;
*) w60g - properly report center status under "tx-sector-info";
*) winbox - show "sector-writes" on ARM devices that have such counters;
*) winbox - show "System/Health" only on devices that have health monitoring;

[macro]

Tα 2 τελευταια παντως το .4 και το .5 δε τα εβαλα και περιμενω, εχουν αστοχιες.