KeeneticOS updates — Preview Channel

Fixed brute force blocking policy for incoming connections to the SFTP Server application. [NDM-3263]

Fixed Connection Policies work with IPv6 protocol under certain conditions. [NDM-3289]

Fixed the continued reconnections of OpenVPN with more than one active client or server. [NDM-3301]

An issue that caused the error message failed to lookup service for segment "WifiMaster1" on Extender devices to appear in the System log has been fixed. [NDM-3325]

Implemented support for direct access mode to KeenDNS domain from browsers with TLS 1.3 hybridized Kyber enabled. [NDM-3284] [Forum topic]

The Quectel RM500U-GL 5G NR, LTE Cat 12 USB (UsbLte-type) modem module is now supported. [NDM-3203]

Fixed spurious EoIP/IPsec connection attempts after device restart. [NDM-2518]

Fixed random disconnection of IKEv2 tunnels to the Keenetic IKEv2/IPsec VPN server. [NDM-3059]

The Application traffic analyser engine now operates more efficiently with the IPv6 protocol under high network load. [NDM-3235] [Forum topic]

Fixed issue with absent route to remote Wireguard endpoint after device restart. [NDM-3223]

Fixed problem with converting Band Steering settings after updating to KeeneticOS 4.1.x version. [NDM-3241]

The problem that causes the error message PingCheck::Resolve: "default": system failed [0xcffd003c], upstream is very slow to respond in the System log has been fixed. [NDM-3244]

The L2TP/IPsec VPN Server now only allows network access to the specified segment. [NDM-3247]

Fixed hostname resolution for Ping Check in TCP/TLS port check mode when using secure DNS for domain name resolution. [NDM-3273] [Forum topic]

Added support for the Yota D071C 4G LTE Cat4 USB modem. [NDM-3218]

Implemented a workaround to prevent certain Realtek Wi-Fi drivers from crashing on Windows OS when passing non-PMF authentication on a PMF-enabled access point. [SYS-1131]

Fixed the OpenVPN client startup failure with Options error: In [CMD-LINE]:1: Error opening configuration file message in the System log. [NDM-3217]

Fixed a problem where replies to recursive DNS queries were causing Internet access to fail. [NDM-3226] [Forum topic]

New 4G modems and modules are now supported, including:

Improved operation of the Ping Check service when using secure DNS for domain name resolution. [NDM-3178]

Fixed the DoT/DOH secure DNS service domain address resolution when a DNS-based content filter uses public resolvers. [NDM-3134]

Fixed an issue with the availability of the SSTP VPN Server when the Internet connection interface ignores the DNS servers provided by the ISP. [NDM-3179]

Fixed operation of ISP-provided DNS servers on a backup connection. [NDM-3186] [Forum topic]

Fixed the DNS subsystem restart with Dns::Recursor: system failed [0xcffd0157] message related to DHCP client operation. [NDM-3188]

Restored the OpenVPN client/server to connect when ignoring the block-outside-dns option. [NDM-3190]

Remote Endpoint resolution for WireGuard peers now works correctly when the connection is restarted. [NDM-3189] [Forum topic]

The Web interface now supports the Finnish language. [SYS-1114]

Implemented restart of L860-GL and similar 4G/3G modems when a prolonged timeout of the mobile network connection occurs. [NDM-2980] [Forum topic]

Fixed Ping Check operation on connections with recursive domain name resolution. [NDM-3086]

Added MAC filtering for ApCli backhaul connection with bound BSSID for correct operation of Mesh Wi-Fi System. [SYS-1118]

Fixed the Wi-Fi Fast Transition (802.11r) operation in the case of different SSIDs on the same network segment. [NDM-2917]

The use of the traceroute diagnostic tool with a specified port for TCP/UDP has been corrected. CLI command example: tools traceroute 1.1.1.1 port 1883. [NDM-3138]

Improved the WebDAV service to prevent connection timeouts when uploading large files to VFAT or NTFS partitions on attached USB storages. [NDM-2089]

Fixed compatibility issue when connecting Obsidian and Joplin clients to the router's WebDAV server. [NDM-2213]

Fixed duplicate 802.11k (Radio Resource Management) RRM: perform scan notified channel: events in the System log when changing Wi-Fi channel on Mesh Wi-Fi System nodes. [SYS-1098]

The prefix delegation hint command for the DHCPv6 client has been implemented in the Command Line Interface (CLI). [NDM-3076]

The error message wind: failed to decrypt message has been moved to debug messages. [SYS-1084]

The number of the ip alias entries has been increased from 8 to 250. [NDM-3063]

The OpenSSL library has been updated to the latest version 3.1.5, which fixes the following list of vulnerabilities: CVE-2023-5678, CVE-2024-0727. [SYS-1097]

Updated the system timezone for Kazakhstan to UTC+5. [NDM-3147]

IntelliQoS rate limiting (ntce upstream rate-limit) is now working as intended. [NDM-3104]

Fixed the ntce-pace2: unable to proceed with data, exit error message with IntelliQoS service under certain conditions. [NDM-3115]

Fixed issue with running multiple Proxy Connections at the same time. [NDM-3122]

Fixed Dns::Proxy service crash when mirroring TCP requests to IntelliQoS. [SYS-1099]

Fixed the issue where Band Steering mode would reset to the None selection under certain conditions. [NDM-3126]

The new "Handoff" option to force Wi-Fi clients with weak signals to disconnect is now available via the Command Line Interface (CLI). [NDM-3081]

Fixed wireless client disconnect/connect event conditions that were causing incorrect notifications from the Keenetic mobile application. [NDM-3079]

SSTP VPN server address allocation now works correctly for IPv6 clients. [NDM-2821]

The functionality of the 256-QAM check box in the General Settings for 2.4 GHz Wi-Fi has been restored. [NWI-3182]

Fixed a reboot issue during ZeroTier connection setup. [SYS-1066]