+7 (812) 929-8183,
+7 (812) 929-8283

RouterOS Changelog ROS v4.0 - 6.30.2

What's new in 6.30.2 (2015-Jul-22 11:17):

*) pptp & l2tp - fixed problem where android client could not connect if
both dns names were not provided (was broken since v6.30);
*) lcd - fix crash (and 100% cpu usage) when interface gets removed from "stats-all" screen
*) tool fetch - fix incomplete ftp download
*) ipsec  - fixed crash in when gcm encryption was used
*) certificate manager - fixed memory leak
*) traffic flow - fixed dynamic input/output interface reporting
*) user-manager - fixed username was not shown in /tool user-manager user
*) user-manager - fixed zoom for user-manager homepage when mobile devices used
*) winbox - restrict reversed ranges in dst-port under firewall
*) snmp - fix system scripts table
*) quickset - fixed HomeAP mode

known issue:
*) Dynamic DNS servers can disappear when "allow-remote-requests" are not enabled

What's new in 6.30.1 (2015-Jul-14 11:22):

*) quickset - fixed HomeAP mode;
*) lte - Fixes bug that causes Sierra Wireless modems with LTE  interface to change interface name;
*) trafflow: fix in-interface reporting in flow;
*) ipsec - disallow changing dynamic peer;
*) quickset - crashes introduced in 6.30 fixed
*) fixed :execute file=
*) bonding: fix arp monitoring in active backup mode

What's new in 6.30 (2015-Jul-08 09:07):

*) wireless - added WMM power save suport for mobile devices;
*) firewall - sip helper improved, large packets no longer dropped;
*) fixed encryption 'out of order' problem on SMP systems;
*) email - fix sending multiple consecutive emails;
*) fixed router lockup on leap seconds with installed ntp package;
*) ccr - made hardware watchdog work again (was broken since v6.26);
*) console - allow users with 'policy' policy to change script owner;
*) icmp - use receive interface address when responding with icmp errors;
*) ipsec - fail ph2 negitioation when initiator proposed key length
   does not match proposal configuration;
*) timezone - updated timezone information to 2015e release;
*) ssh - added option '/ip ssh stong-crypto'
*) wireless - improve ac radio coexistence with other wireless clients, optimized
    transmit times to not interfere with other devices;
*) console - values of $".id", $".nextid" and $".dead" are avaliable for
    use in 'print where' expressions;
*) console - ':execute' command now accepts script source in "{}" braces,
    like '/system scripts add source=' does;
*) console - ':execute' command now returns internal number of running job,
    that can be used to check and stop execution. For example:
      :local j [:execute {/interface print follow where [:log info "$name"]}]
      :delay 10s
      :do { /system script job remove $j } on-error={}
*) console - firewall 'print' commands now show all entries including
    dynamic, 'all' argument now has no effect;
*) ipsec - increase replay window to 128;
*) fixed file transfer on devices with large RAM memory;
*) pptp - fixed "encryption got out of sync" problem;
*) ppp - disable vj tcp header compression;
*) api - reduce api tcp connection keepalive delay to 30 seconds,
   will timeout idle connections in about 5 minutes;
*) pptp & l2tp & sstp client: support the case were server issues its tunnel
   ip address the same as its public one;
*) removed wireless package from routeros bundle package,
   new wireless-fp is left in place and wireless-cm2 added as option;
*) pptp & l2tp client: when adding default route, add special exception route for
   a tunnel itself (no need to add it manually anymore);
*) improved connection list: added connection packet/byte counters,
   added separate counters for fasttrack, added current rate display,
   added flag wheather connection is fasttracked/srcnated/dstnated,
   removed 2048 connection entry limit;
*) tunnels - eoip, eoipv6, gre,gre6, ipip, ipipv6, 6to4 tunnels
   have new property - ipsec-secret - for easy setup of ipsec
   encryption and authentication;
*) firewall - added ipsec-policy matcher to check wheather packet
   was/will be ipsec processed or not;
*) possibility to disable route cache - improves DDOS attack
   handling performance up to 2x (note that ipv4 fastpath depends on route cache);
*) fasttrack - added dummy firewall rule in filter and mangle tables
   to show packets/bytes that get processed in fasttrack and bypass firewall;
*) fastpath - vlan interfaces support fastpath;
*) fastpath - partial support for bonding interfaces (rx only);
*) fastpath - vrrp interfaces support fastpath;
*) fixed memory leak on CCR devices (introduced in 6.28);
*) lte - improved modem identification to better support multiple identical modems;
*) snmp - fix system scripts table;

What's new in 6.29 (2015-May-27 11:19):

*) ssh server - use custom generated DH primes when possible;
*) ipsec - allow to specify custom IP address for my_id parameter;
*) ovpn server - use subnet topology in ip mode if netmask is provided (makes android & ios
   clients work);
*) console - allow '-' characters in unknown command argument names;
*) snmp - fix rare bug when some OIDs where skipped;
*) ssh - added aes-ctr cipher support;
*) mesh - fixed kernel crash;
*) ipv4 fasttrack fastpath - accelerates connection tracking and nat for marked
   connections (more than 5x performance improvement compared to regular slow
   path conntrack/nat) - currently limited to TCP/UDP only;
*) added ~fasttrack-connection~ firewall action in filter/mangle tables for marking
   connections as fasttrack;
*) added fastpath support for bridge interfaces - packets received and transmitted
   on bridge interface can go fastpath (previously only bridge forwarded packets
   could go fastpath);
*) packets now can go half-fastpath - if input interface supports fastpath and
   packet gets forwarded in fastpath but output interface does not support fastpath
   or has interface queue other than only-hw-queue packet gets converted
   to slow path only at the dst interface transmit time;
*) trafflow: add natted addrs/ports to ipv4 flow info;
*) tilegx: enable autoneg for sfp ports in netinstall;
*) health - fix voltage on some RB4xx;
*) romon - fix 100% CPU usage;
*) romon - moved under tools menu in console;
*) email - store hostname for consistency;
*) vrrp - do not reset interface when no interesting config changes;
*) fixed async. ppp server;
*) sstp - fixed router lockup.
*) queue tree: some queues would stop working after some configuration changes;
*) fixed CRS226 10G ports could lose link (introduced in 6.28);
*) fixed FREAK vulnerability in SSL & TLS;
*) firewall - fixed sector writes rising starting since 6.28;
*) improved support for new hEX lite;

What's new in 6.28 (2015-Apr-15 15:18):

*) email - increase server greeting timeout to 60s;
*) lte - ZTE MF823 may loose configuration;
*) userman - update paypal root certificate;
*) timezone - updated timezone information to 2015b release;
*) cm2 - fixed capsman v2 100% CPU and other stability improvements;
*) route - using ldp could cause connected routes with
    invalid interface nexthop;
*) added support for SiS 190/191 PCI Ethernet adapter;
*) made metarouter work on boards with 802.11ac support or usb LTE;
*) sstp server - allow ADH only when no certificate set;
*) make fat32 disk formatting support disks bigger than 134GiB;
*) fixed tunnels - could crash when clamp-tcp-mss was enabled;
*) added basic counters for ipv4/bridge fast path, also show status wether fast
   path is active at all;
*) trafflow: - fixed crash on disable;
*) pppoe over eoip - fixed crash with large packets;
*) tilegx - fixed memory leak when queue settings are changed;
*) ar9888 - fixed crash when hw reports invalid rate;
*) console - fixed "in" operator in console;
*) console - make "/system package update print" work again.
*) tile - rare situation when CCR devices failed to auto-negotiate ethernet link (introduced in v6.25);
*) dhcpv4 client - it is now possible to unset default clientid and hostname options
*) initial RoMon (Router Management Overlay Network) support added.

What's new in 6.27 (2015-Feb-11 13:24):

*) console - added 'comment' parameter for '/system script'
*) api - return sentences can have property ".section" that groups values
   from commands such as "monitor", "traceroute",
   "print" (with non-zero 'interval' value);
*) cloud - add time zone detection feature "/system clock time-zone-autodetect";
*) cloud - rename "/ip cloud enabled" to "/ip cloud ddns-enabled";
*) cloud - make "/ip cloud update-time" independent from "/ip cloud ddns-enabled"
*) cloud - when setting "/ip cloud ddns-enabled" to "no" router will send
           message to server to disable DNS name for this routerboard;
*) cloud - "/ip cloud force-update" command now will work also when
           "/ip cloud ddns-enabled = no". usefull if user wants to disable DDNS;
*) RB4xxGL - improved ethernet throughput (less dropped packets);
*) RouterBOARD - fixed health reporting;
*) check-installation: fixed wrong kernel crc on powerpc boards
*) watchdog: fix software watchdog for x86
*) ssh - check conn state before sending disconnect message;
*) ipsec - fixed crash that happened in specific situation;

What's new in 6.26 (2015-Feb-03 15:18):

*) ssh - fixed ssh related crashes;
*) ovpn - allow to add VLANs to ovpn server bindings;
*) sstp - added pfs option which enables DHE;
*) pppoe client - increased timeout when searching for servers;
*) sstp - fixed problem were Windows 8 clients couldn't connect;
*) console - fixed some missing export entries;
*) smb - improved stability, fixed some crashes and problems causing disconnects;
*) api - fixed /system check-installation;
*) cerm - fix scep client ca caps parsing;
*) RouterBOARD - included new RouterBOOT 3.22 to enable protected-routerboot setting (see wiki);
*) webfig - fixed various design skin issues;
*) NTP client - accepts ipv6 as a server address;
*) CCR improvements in link detection for SFP/SFP+ and auto-negotiation for SFP interfaces;
*) known issue - /system check-installation incorrectly reports error on PPC;

What's new in 6.25 (2015-Jan-19 10:11):

*) certificates - fix SCEP RA operation and SCEP client when operating with RA;
*) ppp - report authentication failure cause like in v6.6;
*) ovpn server - added support for address lists;
*) improved boot times;
*) api - fixed missing return values of some commands;
*) ntp - fixed vulnerabilities;
*) mpls/vpls have improved per core balancing on CCRs;
*) fixed queue tree no-mark matching (was broken since 6.24);
*) fixed nested simple queues (was broken since 6.24);
*) fixed occasional crash when ipv6 was used;
*) fixed route cache overflow (ipv4/ipv6 stops working) if ipsec is used;
*) fixed Omnitik upgrade from v5 where wireless config was not correctly saved
*) fixed Webfig Design Skin where some skin changes were not saved
*) WPS support added to CM2 wireless package

What's new in 6.24 (2014-Dec-23 13:38):

*) ntp - fixed vulnerabilities;
*) web proxy - fix problem when dscp was not set when ipv6 was enabled;
*) fixed problem where some of ethernet cards do not work on x86;
*) improved CCR ethernet driver (less dropped packets);
*) improved queue tree parent=global performance (especially on SMP systems and CCRs);
*) eoip/eoipv6/gre/gre6/ipip/ipipv6/6to4 tunnels have improved per core balancing on CCRs;
*) fixed tx for 6to4 tunnels with unspecified dst address;
*) fixed vrrp - could sometimes not work properly because of advertising bad set of ip addresses;

What's new in 6.23.1 (2014-Dec-08 11:43):

*) fixed problem where some of ethernet cards do not work on x86;

What's new in 6.23 (2014-Dec-04 14:46):

*) pptp - fixed problem where tunnel stopped transmitting packets under heavy load;
*) web proxy - caching in RAM for boards with 32MB or less RAM will not cache any content;
*) leds - removed 'led' command and added support for 'on', 'off' types under 'system leds';
*) files - allow to move files between different disks in winbox;
*) dhcpv4 server - fix adding address lists from radius;
*) dhcpv4 server - make radius classless static route tag as dhcp vendor specific;
*) smb - fixed HDD used/free space reporting
*) made powerpc metarouters work again (were broken in v6.22);
*) disks - fixed fat32 formatting where some bogus files with strange names were created
   (to delete existing files reformatting is needed);
*) disks - fixed problem where some of USB disks were not recognized;
*) fetch - allow checking certificate trust without crl checking;
*) userman - fix more web session problems when user uses
    customer and administrator interfaces at the same time;
*) snmp - fix external storage info reporting;
*) snmp - fix bulk walk problem introduced in v6.20;
*) fix tunnels - keep keepalive disabled for existing tunnels when upgrading;
*) fix tunnels - mtu for eoip tunnels was not allowed
   to be set less than 1280 since 6.20;
*) using routing-marks could lead to tunnel loop detection to turn off tunnels;

What's new in 6.22 (2014-Nov-11 14:46):

*) ovpn - added support for null crypto;
*) files - allow to remove empty disk folders;
*) sntp - fix problems with dns name resolving failures that were triggering
    system watchdog timeout;
*) eoip/eoipv6/gre/gre6/ipip/ipipv6/6to4 tunnels have new features:
   tunnels go down when no route to destination;
   tunnels go down for 1 minute when transmit loop detected, warning gets logged;
   new keepalive-retries setting;
   keepalives enabled by default for new tunnels (10sec interval, 10 retries);
*) improved connection-state matcher in firewall - can match multiple states in one rule, supports negation;
*) added connection-nat-state matcher - can match connections that are srcnatted,dstnatted or both;
*) 100% CPU load caused by DNS service fixed;
*) 100% CPU load caused by unclassified services fixed;
*) 6to4 tunnel fixed;
*) new RouterBOOT firmware for Metal 2SHPn to improve wireless stability;

What's new in 6.21.1 (2014-Nov-03 15:20):

*) fixed ugprading from v5;

What's new in 6.21 (2014-Oct-30 12:34):

*) userman - fix ~Your session has been reset due to inactivity~ error;
*) timezone - updated timezone information to 2014i release;
*) wireless - fixed scanning tool crash for 802.11ac interfaces
*) wireless - fixed Nv2 kernel panic on 802.11ac interfaces
*) quickset - added vpn configuration to Wifi AP %26 Ethernet modes as well;
*) lte - changed device identification for devices which regenerate MAC address,
   most likely this will loose device's configuration;
*) sstp - fixed disconnects on high traffic load;
*) ovpn client - fixed problem where ip address was not added to bridge interface in ethernet mode;
*) webfig - show properly Switch Port configuration;
*) disks - fixed support for MMC/SD cards;
*) winbox - added filtering by dscp to torch;
*) certificate - fix CRL handling in trust chain;
*) fixed 6to4 tunnels having inactive routes;
*) ipsec - fix downgrade problem to v5;
*) ipsec - disallow template-policy-group=none in peer config and set it to 'default';
*) metarouter - some metaroutes didn't have their licenses;
*) torch - possibility to filter by dscp;
*) fixed - master port on AR8327 switches that is put into bridge could sometimes not work properly;
*) fixed queues - could have huge latencies and smaller throughput than specified;
*) interfaces report last link up/down time and link down count;

What's new in 6.20 (2014-Oct-01 10:06):

*) cert scep - use fingerprints for transaction ids;
*) ipsec - support fqdn as my id;
*) fetch - allow fetching files larger than 4G;
*) fetch - fixed problem where files fetched over https were trimmed in size;
*) fixed problem - it was not possible to see %26 uninstall dude package;
*) stores are replaced with folders and disks are now managed under /disk menu;
*) added support for SMSC750x USB Gigabit Ethernet on x86;
*) ups - support selftest for smart and hid UPS;
*) pppoe client - increase connection timeout to make connection establishment
   possible on busy pppoe server;
*) dhcp server - change default lease time from 3 days to 10 minutes
    to avoid running out of IPs;
*) ipsec - allow binding modeconf address to username;
*) eoip/eoipv6/gre/gre6/ipip/ipipv6/6to4 tunnels have new features:
    auto mtu (enabled by default for new tunnels);
    dscp (inherit/specific value, inherit by default for new tunnels);
    clamp-tcp-mss (yes by default for new tunnels);
*) eoip/gre/ipip/6to4 tunnels have dont-fragment option (inherit/no, no by default for new tunnels);
*) bridge has auto mtu feature (enabled by default for new bridges);
*) pppoe-server has auto mtu feature (enabled by default for new pppoe servers);

What's new in 6.19 (2014-Aug-26 14:05):

*) wireless - improvements for nv2 and 802.11ac
*) sstp - make sstp work on i386 as well;
*) ippool - improve performance when acquiring address without preference;
*) partitions - copying partitions did not work on some boards;
*) bridge - added "Auto Isolate" stp enhancement (802.1q-2011, 13.25.6)
*) ipsec - when peer config is changed kill only relevant SAs;
*) vpls - do not abort BGP connection when receiving invalid 12 byte
    nexthop encoding;
*) dns-update - fix zone update;
*) dhcpv4 server - support multiple radius address lists;
*) console - added unary operator 'any' that evaluates to true if argument
    is not null or nothing value;
*) CCR - improved performance;
*) firewall - packet defragmenting will only happen with connection tracking enabled;
*) firewall - optimized option matching order with-in a rule;
*) firewall - rules that require CONNTRACK to work will now have Invalid flag
   when CONNTRACK is disabled;
*) firewall - rules that require use-ip-firewall to work will now have invalid flag
   when use-ip-firewall is disabled;
*) firewall - rules that have interface with "Slave" flag specified as in-/out-interface
   will now have Invalid flag;
*) firewall - rules that have interface without "Slave" flag specified as in-/out-bridge-port
   will now have Invalid flag;
*) firewall - rules with Invalid flags will now be auto-commented to explain why;
*) l2tp - force l2tp to not use MPPE encryption if IPsec is used;
*) sstp - force sstp to not use MPPE encryption (it already has TLS one);
*) sstp - make it work for x86 systems
*) winbox - added dual PSU stats in health menu
*) ipv6 - Gre6 can now correctly fragment large packets
*) simple queue performance optimisation/improvement for multi-core RouterOS devices (especially CCR)

What's new in 6.18 (2014-Aug-01 10:47):

*) sstp - report TLS encryption as well;
*) safe mode - do not allow user with less permissions to disrupt active safe mode;
*) console - print command does not try to reuse item numbers assigned by
    previous invocations of 'print' when doing 'print where' or 'print follow',
    items are numbered consecutively starting from '0'.
*) console - fix compact export of some partially modified
    configuration values;
*) api - use the same syntax for property values as is used in 'print detail'
    output, with the exception of numbers, that are not shown with suffixes
    (K/M/G/T or bitrate) and are not contracted or separated into digit groups,
    and "yes"/"no" values that continue to be reported as "true"/"false".
*) console - show internal numbers in the form returned by 'find' (like *9A0F)
    instead of "(unknown)" when configuration refers to
    deleted items. This change also applies to API.
*) ipsec - fix addition of default policy template;
*) console - values of type 'nil' were returning 'nil' as result of most
    operations. Now it compares less than all values except 'nil'
    and 'nothing', and compares inequal to all values except 'nil'.
    This was changed to make 'print where' and 'find where' more useful.
    An example. Previously the following command
        /ip route print where routing-mark!=nosuch
    Would not print routes that had no value for 'routing-mark' set, because
    (nil != "nosuch") was equal to nil. Now it evaluates to 'true', and this
    command will also print all routes that have no 'routing-mark' value set.
*) l2tp - fixed problem on CCR where server responded with wrong source address;
*) console export - put qutes around item names that start with a digit;
*) sntp client - added support for dns lookup of ntp servers;
*) console - when exporting to file, use name ending in '.in_progress', and
   rename when export finishes;
*) bridge setups sometimes could crash on CCR devices;
*) fixed port flapping in 1G mode on sfp-sfpplus1 on CRS226;
*) fixed SXT ac model losing it's interface if changing regulatory settings in "routerboard" menu

What's new in 6.17 (2014-Jul-18 15:14):

*) CCR1009 - fixed crash, only affects CCR1009;

What's new in 6.16 (2014-Jul-17 13:12):

*) 802.11ac support added in wireless-fp package for QCA9880/9882 rev2 (-BR4A) chips;
*) ip cloud now allows to set which IP to use - detected (public) or local (private);
*) l2tp, pptp, pppoe - fixed possible packet corruption when encryption was enabled;
*) ovpn - fixed ethernet mode;
*) certificates - use SHA256 for fingerprinting;
*) ipsec - fix AH proposal and problem when sometimes policy was not generated;
*) snmp - support AES encryption (rfc3826);
*) l2tp server: added option to enable IPsec automatically;
*) poe-out: added power-cycle-ping and power-cycle-interval settings;
*) gps - increased retry duration to 30 seconds;
*) time - on routerboards, current time is saved in configuration on reboot
    and on clock adjustment, and is used to set initial time after reboot;
*) sntp - disabling/enabling client was causing dynamic-servers to be ignored
    (bug introduced in 6.14);
*) CCR - fixed rare file system corruption when none
   of configuration could be changed or some of it disappeared;
*) ipsec - allow multiple encryption algorithms per peer;
*) email - support tls only connections;
*) smb - fixed usb share issues after reboot
*) snmp - fix v3 protocol time window checks;
*) updated timezone information;
*) quickset - added VPN settings for HomeAP mode;
*) latency improvements on CCR devices;

What's new in 6.15 (2014-Jun-12 12:25):

*) fixed upgrade from v5 - on first boot all the optional packages were disabled;
*) fixed problem where sntp server could not be specified in winbox & webfig;
*) metarouter - make openwrt work on ppc metarouter again;

What's new in 6.14 (2014-Jun-06 15:34):

*) sntp - 'mode' now is a read-only property, it is set to broadcast if no
    server ip address is specified;
*) smb - fixed some SMB1 errors;
*) wireless-fp package is now included in routeros one (disabled by default);
*) webfig - fixed quickset, it didn't work with disabled wireless pacakge;
*) sstp - fixed problem where session was closed every 2min;
*) pptp,l2tp,pppoe - fixed problem where some of the static bindings
   become dynamic interfaces;
*) eoip - lowered default MTU to avoid IP packet fragmentation;
*) eoip - added clamp-tcp-mss setting with default=yes for new tunnels to avoid
   IP packet fragmentation;
*) fixed - bridge could sometimes get added without "running" flag;
*) fixed - simple queues could sometimes crash router;
*) fixed - simple queue stats freeze (empty winbox queue window);
*) ssh server - allow none cipher;
*) proxy - added 'anonymous' option which will skip adding X-* and Via headers;
*) dhcp server - added option use-framed-as-classless and
    added support for DHCP-Classless-Static-Route RADIUS attribute;
*) quickset - fixed problem where address mode selection did not work in
    bridge mode;
*) ipv6 address - fixed problem where changing advertise lost ipv6 connected route;

CAVEAT: CAPsMAN Layer3 doesn’t work if IPv6 package enabled either
    on CAPsMAN or CAP device;


What's new in 6.13 (2014-May-15 16:03):

*) console - comments are now accepted where new command can start, that is,
    where '/' or ':' characters can be used to start new command, e.g.
    /interface { # comment until the end of the line
        print
    }
*) backup - backups by default are encrypted now (with user password).
   To use backup on older versions, you should disable encryption with dont-encrypt
   flag when creating it;
*) files with '.sensitive.' in the filename require 'sensitive'
    permission to manipulate;
*) lcd - reduce CPU usage when displaying static screens;
*) l2tp - fixed occasional server lockup;
*) pptp - fixed memory leak;
*) sstp - fixed crashes;

What's new in 6.12 (2014-Apr-14 09:27):

*) l2tp - fixed "no buffer space available" problem;
*) ipsec - support IPv4 over IPv6 and vice versa;
*) pppoe - report correctly number of active links;
*) updated timezone information;
*) many fixes for CRS managed switch functionality -
   particularly improved VLAN support, port isolation, defaults;
*) added trunk support for CRS switches;
*) added policing support for CRS switches;
*) www - added support for HTTP byte ranges;
*) lte - provide signal strength using snmp and make 'info once' work in console;

What's new in 6.11 (2014-Mar-20 09:16):

*) ipsec - fix aes-cbc hardware acceleration on CCR with key sizes 192 and 256;
*) wireless - add auto frequency feature;
*) ovpn - fixed TLS renegotiation;
*) ovpn - make bridge mode work with big packets (do not leave extraneous padding);
*) ovpn - fixed require-client-certifcate;
*) ppp - revert RADIUS NAS-Port behaviour, report tunnel interface id;
*) ppp - mppe encryption together with mrru locked the router;
*) dhcp - added support for DHCP option 138 - list of CAPWAP IPv4 servers;
*) quickset - added Guest Network setup to Home AP mode;
*) console - no longer required to supply value of '/routing bgp instance vrf'
    property 'instance' for 'add' command;
*) ethernet - added option to enable rx/tx flow control
    (will be disabled by default);
*) ethernet - added ability to specify advertised modes for copper ports;
*) fixed 100% cpu usage on CCRs;
*) ssl - not finding CRL in local store for any certificate in trust chain will cause connection to fail;
*) lte - support for Huawei ME609 and ME909u-521;

What's new in 6.10 (2014-Feb-12 13:46):

*) fix autosupout.rif generation after kernel panic;
*) ovpn - make it work again;
*) ovpn client - remove cipher=any & auth=any options,
   protocol does not support them;
*) pptp - fixed where Windows & MacOS clients were disconnecting all the time;
*) sstp - make it work with Windows client with AES encryption;
*) ipv6 pool - fix dynamic prefix disappearing which may influence large
    VPNs with IPv6;
*) ssh client - fix key agreement when sometimes wrong DH algorithm was selected;
*) bgp - multipath eBGP now does not propagate BGP nexthop unless
    forced in configuration;
*) removed 10/100 half duplex from autonegotiation advertisement on CCR;

What's new in 6.9 (2014-Jan-31 11:18):

*) lcd - added option to change the color-scheme;
*) updated bootloader firmware;
*) ppp: fixed RADIUS accounting;
*) ppp: fixed IPV6-Prefix assigning;
*) ppp: fixed dial-on-demand;

What's new in 6.8 (2014-Jan-29 15:52):

*) bridge - default protocol-mode changed to RSTP for new bridges,
   fixed bridge mac address changing when port (with lowest mac address) goes down
*) userman - improve startup time;
*) sstp client - support server name verification from certificate;
*) wireless - improved 11n and nv2 stability;
*) dhcp client - support interfaces in bridge;
*) dhcp - parse decimal strings and IP addreses in options value;
*) bgp - don't show community 'internet' in BGP advertisements;
*) ipsec - enable hardware acceleration for aes-cbc + md5|sha1|sha256 aead on CCR;
*) ospf - fixed checksum calculation for OSPFv3 AS-external-LSAs;
*) default configuration - changed dhcp server lease time to 10 minutes;
*) fixed port isolation on CRSs (bug introduced in v6.6);
*) smb - added support for SMB 2.002
*) timezone information updated;
*) ppp - fixed ppp bridging (did not work since v6.6);
*) improved speed of PPP, PPPoE, PPTP & L2TP on multicore routers;
*) address-list - fix crash when adding two identical address list entries;
*) fixed multicast forwarding on CCRs;
*) firewall - improved address-type matcher, and added it for ipv6 aswell;
*) kernel drivers for ppp, pppoe, pptp, l2tp are now lock-less on transmit & receive;
*) all ppp packets (except discovery packets) now can be handled by multiple cores;
*) MPPE driver now can handle up to 256 out-of-order packets;

What's new in 6.7 (2013-Nov-29 13:37):

*) support Android usb tethering interface;
*) ipsec - added aes-gcm icv16 encryption mode;
*) wireless - improve rate selection for nstreme protocol
*) poe - new poe controller firmware for RB750UP and OmniTIK UPA;
*) ipsec - added aes-ctr encryption mode;
*) leds - inverted modem signal trigger, now it will trigger when the signal
    level rises above the treshold;
*) ipsec - added sha256 and sha512 support;
*) ipsec - proposal defaults changed to aes-128 and sha1 for both phase1 and phase2;
*) certificate - support ip, dns and email subject alternative names;
*) dhcpv4 server - added REMOTE_ID option variable for relayed packets;
*) ipsec - fix policy bypass on IPv6 gre, ipip, eoip tunnels when policy
    uses protocol filter;
*) userman - fix crash on tilera;
*) fixed hairpin nat on bridge with use-ip-firewall=yes;
*) fixed vlan on bridge after reboot having 00:00:00:00:00:00 mac address;
*) address-list - allow manually adding timeoutable entries;
*) address-list - show dynamic entry timeout;
*) fixed l2mtu changing on CCRs - could cause port flapping;
*) disabling/enabling ethernet ports did not work properly on CCRs,
   could cause port flapping;
*) fixed port flapping on CCR - could happen when having other than
    only-hardware-queue interface queue.
    Note that having other interface queue than only-hardware-queue
    dramatically reduces performace, so should be avoided if possible;


What's new in 6.6 (2013-Nov-07 13:04):

*) winbox - fixed problem where all previous session opened windows were read only;
*) certificate - no more 'reset-certificate-cache' and 'decrypt' commands,
    private keys can be decrypted only on 'import', use 'decrypt'
    before upgrade if needed;
*) fixed arp-reply only with more than one ip address on interface;
*) fixed RB400 not to reboot by watchdog during micro-sd format;
*) web proxy - fix SPDY server push handling;
*) certificate - merged '/certificate ca issued', '/certificate scep client' and
   '/certificate templates' into '/certificate';
*) console - :foreach command can iterate over keys and values in an array,
    by specifying two counter variables, e.g.:
    :foreach k,v in=[/system clock get] do={:put "$k is $v"};
*) added support for new Intel 10Gb ethernet cards (82599);
*) certificates - fixed certificate import;
*) wireless - fixed crash when dfs was enabled on pre-n wireless cards;
*) fixed port flapping on CCR;

What's new in 6.5 (2013-Oct-16 15:32):

*) tftp - added data packet pipelining for read requests;
*) console - exported physical interface configuration uses 'default-name'
    instead of item number to match relevant interface;
*) console - report all constituent errors for parameters with multiple
   alternative value types;
*) certificates - merge '/certificate ca' into '/certificate',
    use set-ca-passphrase to maintain CA functionality;
*) lcd - backlight option is replaced with "/lcd backlight" command
*) dhcp server - added option to disable conflict-detection;
*) console - ':return' does not trigger 'on-error=' action of ':do' command;
*) route - fixed crash that could be triggered by change in nexthop
    address resolution;
*) route - some imported VPNv4 routes were not using MPLS labels;
*) route - imported VPNv4 routes were not always updated or removed when
    the original route changed;
*) winbox - fixed problem where all settings were read only on first open;
*) ovpn server - use only ciphers that are allowed not that client requested;
*) ssh client - fixed public key authentication;
*) ipsec - fix peer mathing with non byte aligned masks;
*) fix routerboot upgrading if RouterOS is partitioned;
*) add support for second serial port on CCR boards;
*) fix serial port baudrate selection on CCR boards;
*) ethernet interface stats that are behind switch chip
    show real hw stats instead of just the traffic that goes through cpu;


What's new in 6.4 (2013-Sep-12 13:52):

*) wireless - improved 802.11n wireless retransmission (doesn't effect nstreme/nv2)
*) ovpn - allow to specify server via dns name;
*) winbox - fixed problem where ipv6 routes with non local link address gateway
   could not be added;
*) fixed watchdog on mipsle boards;
*) traceroute - added count & max-hops parameters;
*) traceroute - added back use-dns parameter;
*) fixed usb Yota LTE modem hangup;
*) console - make newly added item names always immediately available;
*) graphing - make sure that interface graphs gets preserved across reboots;

What's new in 6.3 (2013-Sep-03 12:25):

*) ssh - fixed denial of service;
*) traceroute - show mpls labels as well;
*) bug fix - sometimes some new interfaces could not be created properly any more (f.e. some pppoe clients could not connect);
*) console - added '/console clear-history' command that clears command-line
   history for all users, requires 'policy' policy;
*) sstp - limit packet queue for each device;
*) RB2011L - fixed occasional gigabit switch-chip lockup;
*) user manager - will warn on 1MB and stop before reaching minimum of 500KB disk space;
*) hotspot - do not account traffic to local hotspot pages;
*) ppp, hotspot - added ability to specify where to insert rate limiting queue,
   it's parent and type;
*) pptp, l2tp, sstp - allow to specify server via dns name;
*) dhcp - added ability to specify where to insert rate limiting queue;
*) www proxy - support ipv6 parent proxy;
*) webfig - fixed problem when opening quickset page country
   was automaticly changed to etsi;
*) traceroute - added mtr like pinging;
*) fix queues - correct queue was not installed when last child removed;
*) fix simple queues - sometimes some simple queues would stop
   working after configuration changes;
*) console - fixed issue with local variables having non-empty value
    before first assignment;
*) console - fixed command ":global name" without second argument to not
    create or change global variable "name", only effect is to make "name"
    refer to global variable.
*) console - fixed passing local variables as argument to function;
*) RB1200 - fixed crash when receiving over l2mtu size packets
   on some ethernet interfaces;

What's new in 6.2 (2013-Aug-02 10:37):

*) console - added "on-error" argument to ':do' command that is executed
    if command raises error;
*) hotspot - fixed chap error after failed http-chap login (broken in v6.1);
*) console - added new ':return' command that interrupts execution of script
    and passes argument as return value if script was called as function;
*) routerboot - fixed upgrade from RouterOS (could fail on some units);
*) userman - fixed payment gateway response notify processing;
*) console - resolved issue with 'from-pool' propery in '/ipv6 address';
*) console - array value syntax in expressions '{1;2;3;4}' now can
    specify values with word keys as '{a=1;b=2}';
*) console - added 'verbose' argument to '/import' command that enables
    line-by-line script import. By default import whole script at once
    and don't print it, as it was in version 6.0;
*) console - ':global', ':local' and ':set' commands have new parameter 'do'
    that allows assigning block of commands to the variable;
*) console - global variables now are common to all users and are
    available to all users with at least "read,write,test,policy" policy;
*) console - fixed parameter passing to scripts. Script parameters can
    be accessed without declaring them with ':local' and ':global' commands.
    For backwards compatibility global variables are first looked up in
    script parametrs;
*) console - '$var 1 2 a="a" b="b"' syntax for passing parameters to commands
    stored in a variable. Parameters are accessed as '$1' '$2' '$a' '$b';
*) ipsec - fixed peer address matching;
*) ups - query smart ups capabilities before issuing any commands;
*) improved CCR responsiveness on other interfaces when one interface is under attack;
*) sms tool - added sim-pin setting;
*) dhcp server - framed routes are now also added to the server routing table;
*) dhcpv6 server - added binding-script option;
*) proxy - allow multiple src-address for ipv4 and ipv6;
*) eoip,gre tunnels could occasionally crash multicore router;
*) fixed bug - sometimes some types of interfaces would stop working;
*) ipsec sometimes could crash kernel on CCR;
*) connection tracking sometimes could crash kernel on CCR;
*) ppp,pptp,l2tp,sstp - added default-route-distance parameter;
*) scep - "/cert scep ra" merged into "/cert scep client" without saving ra config;
*) ipsec - fix phase1 autonegotiation on little endian platforms;
*) pppoe server - allow service with empty service-name to accept all pppoe clients;
*) lcd - current-screen option is replaced with "/lcd show" command
*) lcd - current-interface option is replaced with "/lcd interface display" command
*) graphing - make graphs stable on ppp & ovpn interfaces;
*) www, hotspot - fixed problem when www service stopped responding on high load;
*) winbox, webfig: allow to enter space in the text fields;
*) webfig - fixed configuration of VPLS & routing filters;
*) lcd - added option for enabling or disabling the touch screen;
*) lcd - added options for screen switching;
*) lcd - up to 10 non-physical interfaces can now be added to the lcd;
*) lcd - all interface graph screen can now be customized from /lcd interface page;
*) backup - changed default backup file name to <id>-<YY><MM><DD>-<HHMM>.backup
   for file browsers to sort them properly;
*) webfig - it did not work in Opera;
*) webfig - made terminal work again;
*) winbox - added ability to fully set up traffic generator in winbox;
*) trafficgen - allow ranges for ip addrs and udp ports;
*) trafficgen - add tcp header support;
*) queue simple - fixed bug - actual queue order sometimes was wrong;
*) queue simple - queue is not invalid when at least one of target interfaces is up;
*) fixed crash when setting master-port on AR8327 switch chips;
*) fixed addresslist - dynamic entries sometimes would still
   show up even afther being timed out;
*) added /ip settings allow-hw-fast-path setting to control AR8327N hardware ipv4 fast path;
*) vrrp - allow more than one vrrp on interface;

What's new in 6.1 (2013-Jun-12 11:50):

*) pptp, l2tp - fixed crash when tunnel mru was too big and fragmented ip packet
   was received;
*) hotspot - fixed problem when after upgrade hotspot html directory was empty;
*) ipv6 nd - dns dynamic-servers were not included in router advertisements;
*) winbox - fixed problem Switch menu disappeared on RB2011;
*) fixed memory amount issue on RB1100AHx2;
*) console - '/import' prints each command that is executed;
*) console - 'import' has new argument 'from-line' that starts executing
    commands after specified line;
*) secure api - fixed problem when wrong client ip address was reported;
*) hotspot - fixed universal client;
*) api - added support for API over TLS (SSL);
*) api - api service is now enabled by default;
*) ppp - do not show R flag for locally authenticated users;
*) vrrp - fixed ah authentication;
*) webfig - added support for RADIUS authentication (via MS-CHAPv2);
*) ipsec - for peers with full IP address specified system will
   autostart ISAKMP SA negotiation;
*) trafficgen - added inject-pcap command for replaying pcap files into network;
*) dns - retry queries with tcp if truncated results received;
*) improved queue statistics updating;
*) fix 1G linking with some Cisco devices (affects RB7xx, RB9xx, RB1100, RB2011, CCR);

What's new in 6.0 (2013-May-17 14:04):

*) ipsec - added /peer passive option which will prevent starting ISAKMP negotiation
    and signifies xauth responder/initiator side;
*) RouterBOARD - default wireless config now includes password - serial number;
*) lte - support YOTA WLTUBA-107;
*) console - fixed crash when variable name was not specified for
    ':global', ':local', ':set', ':for' and ':foreach' commands;
*) hotspot - added mac-cookie login method;
   http://wiki.mikrotik.com/wiki/Manual:Hotspot_Introduction#MAC_Cookie
*) lcd - show a message when system shutdown is complete;
*) lcd - added Log screen which is accessible through the Main Menu
   and shows log messages where action=echo;
*) ipsec - added pre-shared-key-xauth and rsa-signature-hybrid
   authentication methods;
*) increased max l2mtu on CCR to 10226 bytes;
*) fixed crash on RB1200;
*) fixed bonding - did not work after remove, undo;
*) fixed queues - router could become unresponsive when configuring queues;

What's new in 6.0rc14 (2013-Apr-24 11:52):

*) route - make connected routes inactive when interface has no link;
*) ipsec - changing or removing unused peer or proposal config won't
   flush active SAs;
*) console - add 'without-paging' to more 'print' commands;
*) route - automatically repair FIB inconsistencies;
*) ipsec mode-cfg - unity split include support;
*) ipsec policy - template matching for policy generation;
*) metarouter: fixed occasional lockups on mipsbe boards;
*) fixed crash when bridge filter rule had action=return for rule in builtin chain;
*) traffic-flow - fixed deadlock and crash on multicore;
*) fixed memory leak on CCR with PPPoE interfaces;
*) improved PPPoE interface encapsulation performance;
*) fixed queues - total amount of traffic passing through queues sometimes was
   about 1Gbit;

What's new in 6.0rc13 (2013-Apr-08 14:25):

*) pppoe, l2tp, pptp server - increased lcp retransmit count to 10;
*) pptp, l2tp & pppoe clients - added ability to specify keepalive timeout;
*) graphing - fixed problem were interface graphs are lost on reboot;
*) dhcpv6 - added relay;
*) sstp server - restore (disabled in rc12) test mode which allows
    running server without certificate;
*) lcd - added option for turning backlight on/off;
*) bgp - fix med comparison check if routes are received from iBGP peer;
*) fixed simple queues - sometimes some simple queues did not limit traffic
   (bug introduced in 6.0rc12);
*) allow to change arp timeout (in /ip settings);
*) added /ip neighbor discovery settings setting "default-for-dynamic" to control
   discovery on new dynamic interfaces (off by default);

What's new in 6.0rc12 (2013-Mar-26 17:18):

*) ospf - add use-dn option;
*) ospf - fix route-tag handling;
*) fixed layer7 matcher - it is case insensitive now;
*) remote logging - added iso8601 time format support;
*) bgp - change MED propagation logic, now discarded when sending route with
    non-empty AS_PATH to an external peer;
*) fixed occasional nand corruption on CCR;
*) ipsec - added ipv4 mode-cfg support for responder;
*) ipsec - fixed some issues with removal of dynamic policies;
*) email - renamed parameter tls to start-tls for send command;
*) wireless - update required when using small width channel RB2011 RB9xx
    caveat: update remote end/s before updating AP as both side are
       required to use new/same version for a link
*) ipsec - generate-policy now can have port-strict value which will use port
   from peer's proposal when generating policy or port-override which
   will always generate policy for any port;
*) ipsec - responder side now uses initiator exchange type for peer
   config selection;
*) lcd - changed All interface stat screen (bar graphs) to show total
   bandwidth usage, combine rx/tx together;
*) lcd - removed "all-interface-mode" option;
*) lcd - changed "Interfaces" screen to show interface usage
   similiar to All interface stat screen;
*) lcd - improved Interfaces -> * -> Info screen, added more wireless information;
*) lcd - added Registration Table screen for wireless interfaces under
    Interfaces -> 'wireless interface' -> Registration Table;
*) fixed occasional kernel crashes on CCR;
*) fixed other than only-hardware-queue interface queues on CCR;
*) lte - devices with vendor/product id pair 0x0f3d/0x68AA now
   uses directip inferface;
*) dhcp client v4 - option add-default-route now supports special-classless value;
*) significantly increased simple queue performance on multi core systems
   (up to 9x on CCR1036 with at least 32 top level simple queues);
*) ip arp - new property published;
*) web proxy - added new option max-cache-object-size,
   upper limit of max-client-connections and max-server-connections
   is now calculated from system RAM;
*) ospf - fixed inconsistency in external ECMP route calculation;
*) certificates - CA keys are no more cached, every CA operations
   now requires a valid CA passphrase.
   use set-ca-passphrase for scep server to cache CA key in encrypted form;
*) ppp - made MPPE encryption work on tilera (bug introduced in 6.0rc10);
*) tool fetch - https support with optional certificate verification;
*) sstp server - removed test mode which allowed running server without certificate;
*) trafficgen - add support for ipv6 header;
*) wireless - added support for small channels on SXT lite;

What's new in 6.0rc11 (2013-Feb-22 09:17):

*) ppp - made MPPE encryption work on tilera (bug introduced in 6.0rc10);
*) sstp server - added option to force AES encryption;
*) fixed router crash on heavy traffic with sierra lte
   modem on boards with 32MB RAM;

What's new in 6.0rc10 (2013-Feb-15 10:47):

*) ppp - added bridge-path-cost & bridge-port-priority to ppp profiles;
*) ppp - made RSTP work over ppp links as well;
*) ppp - added last-logged-out to ppp secrets;
*) ppp - made MRRU work propererly on CCR;
*) hotspot, ppp - support multiple address-lists;
*) fixed problem - could not format disks larger than 2Gb on CCR;
*) fixed problem - repartitioning flash second time made system unbootable;
*) fixed problem - partition fall back settings got corrupted;
*) fixed problem - package made for other architectures could be installed,
   making whole system non functioning;
*) sstp, ipsec - respect CRLs;
*) certificates - for certificates marked as trusted=yes,
    CRL will be automaticly updated once in hour from http sources;
*) fixed ppp family interfaces - show it's status (bug introduced in rc8);
*) fixed p2p, connection-bytes firewall matcher;
*) fixed ip firewall nat action=same;

What's new in 6.0rc9 (2013-Feb-08 08:15):

*) ospf - fixed Summary-LSA prefix length check for OSPFv3, was not
    accepting valid LSAs;
*) certificates - fix broken certificate handling
   (bug introduced in rc8) in all related programs;
*) fixed - bgp tcp-md5-key crash on CCR;
*) fixed interfaces list sometimes showing up empty;
*) fixed - ip addrs could be inactive for some types of interfaces
   which are added as bridge ports and disabled;

What's new in 6.0rc8 (2013-Feb-04 13:25):

*) ppp,pppoe,pptp,l2tp,sstp - only 2 change mss mangle rules are
   created for all ppp interfaces;
*) wireless - fixed AES encryption speed issues (upgrade suggested);
*) dhcpv6 server - handle info requests;
*) webfig - compressed all html resource files, speeds up opening of webfig page;
*) console - reduced width of address column in '/user print';
*) simple queues requires target arg to be specified when adding;
*) do not count packets for unknown protocols as rx_dropped;
*) snmp - provide POE info;
*) improved cpu usage reporting on CCR boards;
*) improved interface reading performance;
*) changed CLI interface order - first are ethernets,
   second wireless, third everything else.
   Within group interfaces are ordered by name;
*) interfaces are deleted much faster, could be bottleneck on
   systems with many ppp sessions;
*) pptp,l2tp,6to4 tunnel encapsulation/decapsulation now resets packet marks to
   have consistent behavior across tunnels;
*) fix simple queue interface matching when doing encapsulation in some tunnel,
   could result in double accounted packets;
*) ip/ipv6 firewall has all-ether,all-wireless,all-vlan,all-ppp interface matchers
*) queue limits could be inaccurate for large limits (100M or more);

What's new in 6.0rc7 (2013-Jan-18 13:04):

*) dhcp relay - possibility to add relay agent information option;
*) lcd - options current-interface, time-interval and all-interface-mode
    no longer get reset after reboot;
*) fix reboot in virtualized enviroment;
*) lcd - improve slideshow screen;
*) console - file print now shows file size as small number with suffix;
*) dhcp v4 - fix problem when sometimes client or server failed to send packets
    most likely it happened on vlan interfaces;
*) ipv6 - added setting to disable forwarding;
*) added "/ip neighbor discovery settings" menu with "default=yes/no" setting;

What's new in 6.0rc6 (2012-Dec-21 12:20):

*) fixed problem - netinstall for x86 did not work;
*) lcd - added take-screenshot command;
*) lcd - fixed calibration, fresh boards no longer require recalibration;
*) optimize memory usage - makes 32Mb routerboards more stable;
*) support BandRich modems with newer firmware;
*) ipsec - authentication using certificate store but without CRL checking for now;
*) added feature - flash can be partitioned on routerboards and
   separate versions can be installed on each of them (requires latest firmware);
*) fixed problem - after restoring backup, it gets restored again on every reboot;
*) improved router performance when dhcp client/server present in system;
*) fixed vlan on bond after reboot;
*) fixed occasional queue kernel crash;

What's new in 6.0rc5 (2012-Dec-05 15:22):

*) wireless - advanced rate selection is the only method supported;
*) ssh client - support keyboard-interactive authentication;
*) fix simple queue config upgrade;

What's new in 6.0rc4 (2012-Nov-28 17:16):

*) dhcp server - added two radius string options (24, 25)
   for use in custom dhcp options;
*) fixed problem - ppp dial-on-demand did not work, it allways dialed in;
*) fixed problem - password was not saved when adding new user;
*) added feature - show last-logged-in in users list;
*) snmp - fix interface table;
*) dhcp ipv6 - added comment fields;
*) dhcp client ipv6 - add/remove default route or ntp server
   without renew when settings change;
*) ppp clients - set up dns dynamic-servers instead of static ones;
*) fixed problem - Connect button did not work in wireless scanner;
*) dhcp server - added radius framed route support;
*) fixed problem - MetaROUTERs did not work
   on PowerPC boards (RB800, RB1000, RB1100);
*) fixed problem - check-for-updates stopped working if it didn't find new updates
   previously;
*) dhcp ipv6 - added dns option support;
*) gre - support all protocol encapsulation, not just ip and ipv6;

What's new in 6.0rc3 (2012-Nov-09 12:59):

*) fixed problem - MetaROUTERs did not work on RB2011s;
*) fixed problem - Realtek 1Gbit ethernet cards did not work;
*) added "/ip settings" menu with following settings:
   ip-forward, send-redirects, accept-source-route, accept-redirects,
   secure-redirects, rp-filter, tcp-syncookies;
*) fix some ipv6 firewall matchers;
*) improved performance for eoip,eoipv6,gre,gre6 tunnels, especially on multi core;
*) /queue tree entries with parent=global are performed
   separately from /queue simple and before /queue simple;
*) snmp - fixed missing OIDs;

What's new in 6.0rc2 (2012-Oct-24 11:27):

*) added generic fast path support on certain interfaces
   (all ethernets on RB3xx, RB6xx, RB7xx, RB8xx, RB9xx, RB1000, RB11xx, RB2011);
*) added ipv4 fast path, it doubles ipv4 forwarding performance
   on supported interfaces when no firewall, conntrack, queues.
*) added traffic generator fast path;
*) addedbridge fast path;
   More info on fast path: http://wiki.mikrotik.com/wiki/Manual:Fast_Path

What's new in 6.0rc1 (2012-Sep-26 14:56):

*) i386 - increased number of supported cores to 64;
*) userman - fix unpaid profile activation while authenticating;
*) dhcp client - custom options;
*) dhcp options - allow mixing different data types;
*) console - "export compact" now is the default, use "export verbose" to get
     previous behaviour;
*) ntp - make it work again;
*) tftpd - if real-file is a existing directory then prefix request with it;
*) RB333 ethernets are back;
*) dns - rotate servers only on failure;
*) fix M3P (/ip packing);

What's new in 6.0beta3 (2012-Aug-22 12:12):

*) installation - use much less space in storage (works well with 32MiB flash);
*) routerboard package is now merged with system package;
*) userman - use corresponding time zone data when showing date in console;
*) gps - init-string option;
*) ipsec - kill phase1 if ipsec-sa in responder expires due to system time change;
*) ipsec - rekey phase1 before expiration;
*) ipsec - when last ISAKMP-SA is deleted for the remote host
   remove related IPSec-SAs;
*) ipsec - send delete IPSec-SAs on shutdown/reboot;
*) user manager - fix user's active profile end time if it has unlimited validity,
    these users now won't be hidden from reports when date filters are in effect;
*) certificate validity is shown using local timezone offset;
*) fixed queue bit rate reporting;
*) fixed ipv6 firewall;
*) upgraded drivers and kernel (to linux-3.3.5);
*) added priority matcher to firewall;
*) added change-dscp from-priority and from-priority-to-high-3-bits options;
*) fixed router crash or hang when rebooting;
*) add snif-tzsp,snif-pc actions to ip/ipv6 firewall mangle;
*) traffic-generator improvements for multi core;

What's new in 6.0beta2 (2012-Apr-24 10:57):

*) "/ip address set" and "/ipv6 address set" commands did not work properly;
*) fix eoipv6 tunnels, tunnel-ids in packets were shuffled;
*) fix dynamic simple queues;
*) fix /ipv6 firewall connection-state matcher, was crashing router;
*) fix traffic generator, was crashing router when generating traffic
   on bonding interface;
*) fix wds interfaces;
*) downgrading to v5 was losing wireless interface configuration;
*) fix queue byte and rate statistics;
*) fix ethernet port order on all boards;

What's new in 6.0beta1 (2012-Apr-13 15:26):

*) updated drivers and kernel (to linux-2.6.38.2);
*) improved interface management
   (scales well for up to thousands of interfaces and more);
*) improved queue management (/queue simple and /queue tree) - easily handles tens
   of thousands of queues;
*) improved overall router performance when simple queues are used -
   at least double the performance of v5,
   even bigger improvements on multicore systems;
*) very small overhead for packets that miss simple queues,
   but simple queues are present in the system;
*) pcq queue is NAT aware (just like "/queue simple" and "/ip traffic-flow";
*) in "/ip firewall mangle" can specify "new-priority=from-dscp-high-3-bits";
*) new default queue types: pcq-download-default and pcq-upload-default;
*) simple queues have separate priority setting for download/upload/total;
*) slave flag shows up for interfaces that are in bridge,bonding or switch group;
*) global-in, global-out, global-total parent in /queue tree is
   replaced with global that is equivalent to global-total in v5;
*) simple queues happen in different place - at the very end of
   postrouting and local-in chains;
*) simple queues target-addresses and interface parameters are joined into one
   target parameter, now supports multiple interfaces match for one queue;
*) simple queues dst-address parameter is changed to dst and now supports
   destination interface matching;
*) dns cache logs requests to topics "dns" and "packet";

What's new in 5.26 (2013-Sep-04 15:01):

*) ssh - fixed denial of service;

What's new in 5.25 (2013-Apr-25 15:59):

*) web proxy - speed up startup;
*) metarouter - fixed occasional lockups on mipsbe boards;
*) wireless - update required when using small width channel RB2011 RB9xx
    caveat: update remote end/s before updating AP as both side are required to use new/same version for a link

What's new in 5.24 (2013-Feb-19 15:29):

*) l2tp - fixed problem with reconnects when it added multiple ip addresses;
*) wireless - fixed AES encryption speed issues (upgrade suggested);

What's new in 5.23 (2013-Jan-29 14:07):

*) lcd - changed gamma, which gives greater contrast
*) fix reboot when running on third party hypervisors;
*) ppp client - fixed possible loss of configuration after reboot for some modems;
*) fixed wifi led order on "SXT Lite5";

What's new in 5.22 (2012-Nov-23 09:28):

*) userman - fix PayPal "bad HTTP response";
*) kvm - fixed possible ROS guest incomplete package installation;
*) l2tp server - added keepalive-timeout setting;
*) wireless - fixed RADIUS mac-caching;
*) wireless - fixed rare nv2 link stall;
*) metarouter - fixed system occasional lockup for 12s on RB4xx and RB7xx;
*) metarouter - fixed crash when FPU exception was raised in one of powerpc metarouters;
*) quickset - added HomeAP mode;
*) fixed "export compact" in "ip proxy";

What's new in 5.21 (2012-Oct-12 08:25):

*) route - fix dst-prefix filtering did not return routes when routes with
    different routing-mark were present;
*) wireless - improved nv2 stability;
*) winbox & webfig - added simple new version downloading & upgrading panel;
*) dhcp server - immediately store to disk changes for lease configuration;
*) lcd - improve graphs screen
*) lcd - improve touch screen (must /lcd reset-calibration)
*) smb - fix smb share mounting on linux systems
*) ovpn - fixed memory leak on disconnects;
*) userman - fix unpaid profile activation while authenticating;
*) sstp - fix high CPU usage on SSL handshake;
*) winbox - added ability to add time & date to dashboard;
*) metarouter - fixed lockups on RB110AH;
*) metarouter - fixed occasional lockups on RB450G;
*) ups - fixed problem connecting to USB device, introduced in 5.20;
*) quickset - added Wireless PTP Bridge mode;
*) fix MPLS MTU configuration usage;
*) dns - fix empty response;

What's new in 5.20 (2012-Aug-15 13:04):

*) manual upgrade to NEW beta poe controller firmware v2.0 for RB750UP and OmniTIK UPA;
   more info at http://wiki.mikrotik.com/wiki/Manual:PoE-Out
*) fix RB951-2n wireless issues;
*) ups - fixed resource leak;

What's new in 5.19 (2012-Jul-16 10:51):

*) ssh - added /ip ssh regenerate-host-key which will regenerate current host key;
*) dhcpv6 client - fix multiple advertise handling;
*) snmp - fix v3 engineID discovery;
*) fix ticking sound on RB411UAHL;
*) user manager - fixed byte to KiB, MiB and GiB conversion
  (digit after decimal point was incorectly calculated);
*) fix routerboard firmware upgrade on RB951-2n;
*) sniffer/torch + simple queues sometimes could crash router;

What's new in 5.18 (2012-Jun-21 17:20):

*) fixed upgrade problem when it failed with error "disk is too small" while
   there was plenty of space left;
*) fix health and poe access reliability on OmniTIK UPA and RB750UP boards;
*) sstp - improve initial handshake to better handle many new connections;
*) wireless - do not use bridge and WDS mode on AP-AP links, causes loops;
*) dhcp ipv6 pd client - fixed ipv6 pool creation after reboot;
*) dhcp ipv6 pd client - added option add-default-route;
*) sstp - fixed connection idle time reporting;
*) fix bad block count not to increase on Samsung K9F1208U0C nand;
*) snmp - fix dhcp lease table, snmp reported an incorrect information
    when a static lease had configured different address than current active address,
    this should also solve problem with dude polling same leases over and over again;
*) fix RB1100 crash on interface disable/l2mtu change/reboot;
*) dns could not resolve some domain names, was ignoring replies with DNAME RRs;
*) fix firewall log action - sometimes was not logging mac addr;

What's new in 5.17 (2012-May-28 12:34):

*) files - fixed problem when directories disappeared after reboot on usb or sd flash;
*) webfig - make QuickSet scan list work in Firefox v12;
*) webfig - fixed problem in QuickSet when changing country or channel-width in AP
   mode would enable NV2 protocol;
*) webfig - fixed skins when hiding first tab may make other tabs inaccessible;
*) winbox - fixed packet raw data view in packet sniffer;
*) winbox - fixed problem when router could be DoS attacked through winbox port;
*) ports - add option "/port firmware ignore-directip-modem"
    which will ignore modems ip interface
    and modem's serial ports will be made accessible to users;
*) ipv6 pool - allow pools with prefix equal to prefix length;
*) ping times improved on Nv2 high data rate wireless links;
*) tool email - added starttls option;
*) snmp - allow multiple ip ranges for each community;
*) serial console - added channel support;

What's new in 5.16 (2012-May-09 17:23):

*) webfig - fixed problem when new item addition to status page in design skin mode
   did not work;
*) add pw-type option for BGP VPLS;
*) fixed mac telnet - sometimes did not work if more than one mac level path
    to destination;
*) user - fixed problem when adding new users from console it's password was not set;
*) reset packet mark when encapsulating/decapsulating from eoip,ipip,gre,eoipv6,ipipv6,gre6 tunnels

What's new in 5.15 (2012-Apr-20 13:11):

*) ssh - added option "/ip ssh always-allow-password-login" which will allow
    password based login for users using public key;
*) snmp - moved disk oids shown in console from "/system resoure" to "/store disk";
*) certificate manager - added PKCS#8 support for key import;
*) lte - support for modems which utilize sierra_net driver with product ID 0x68a3,
    serial interface is no longer accesable for those modems;
*) quickset - added AP mode;
*) smb - fixed authorization problems, shares should now be browsable;
*) dhcp client - revert NTP settings on dhcp client disable;
*) dhcp server - use DNS server from DHCP client (broken in v5.13);
*) sstp - made it working on Pentium 4 again;
*) added support for usb forwarding over tcp;
*) webfig - fixed uptime column in hotspot active users list (and other places as well) ;
*) webfig - hide design skin button if user does not have
   sensitive & policy permissions;
*) webfig - do not allow to upload/download files
   without write/read & ftp permisions;
*) webfig - fixed blank page when logout, undo, redo, hide-menu or safe-mode were hidden in skin,
*) winbox - show connection tracking max entries properly;
*) winbox - make interface name sorting more stable;
*) winbox - do not reset user password when changing it's properties;
*) rb1200 ether6,ether7,ether8 did not support big packets when linked at 10/100Mbps;

What's new in 5.14 (2012-Feb-22 12:04):

*) winbox - fixed problem when changing main winbox window size and some of the inner windows
   become hidden;
*) backup - backup file creation failed if router identity name had / in it;
*) wireless - improved nv2 link stability to reduce control frame timeouts,
    only AP requires update;
*) fixed rare configuration retention problems on RB1100AHx2;
*) certificate manager - fixed building certificate trust chain which caused
    certificate validation problems for some programs (VPN, SSTP etc)
    when downgrading from this version to older version please run
    "/certificate reset-certificate-cache" to maintain correct trust chain;

What's new in 5.13 (2012-Feb-14 08:18):

*) firewall - to-address can be specified as ip address with mask in addition to
    ip range;
*) traffic-generator - fix crash on multicore systems;
*) smb - fixes and improvements;
*) sstp - added RC4 cipher support to fix interoperability issues
    introduced in MS KB2585542 security update. from now on RC4 is the
    preferred cipher and AES will be used only if peer does not advertise RC4;
*) dhcp client - revert DNS settings on dhcp client disable;
*) quickset - country & channel-width can now be specified;
*) quickset - added support for configuring pppoe client on wireless interface;
*) bridge - fixed problem where arp reply-only or disabled mode didn't work and
   disabled bridge interfaces didn't have X flag;
*) webfig - fixed problem where none of table entries were shown if table filter
   was left to 'all';
*) webfig - show login page if autologin fails;
*) user manager - don't store backups in active store, always use path relative to /;

What's new in 5.12 (2012-Jan-19 14:31):

*) console - allow to specify blank interval on x86 screens;
*) console - changed 'password' command, now can be used from scripts and api;
*) winbox - reorganized window layout to match console better;
*) ssh - fixed interoperability problem with psftp based clients;
*) implemented simple SMB (windows file sharing) server;
*) fixed ovpn-client - client stopped working if it was enabled/disabled at wrong time;
*) fixed ipv6 - ipv6 neighbor discovery stopped working when
   interface arp setting wasn't set to enabled;
*) console - minor fixes and improvements;
*) console - added support for compact export;
*) hotspot - added login redirect through http status 302;
*) leds - added default configuration for R5SHPn wireless card;
*) ppp - fixed problem were remote-ipv6-prefix was not given to user if remote-ipv6-pool was
   provided;
*) winbox, webfig - sort ethernet interfaces properly when more than 10 exist;
*) added QuickSet to RBSXT, RB411, RB711;
*) user manager - command to create and assign user profile from console;
*) added support for LTE modems (cdc ethernet type);
*) fix gre tunnels on x86 and other little endian machines;

What's new in 5.11 (2011-Dec-12 11:05):

*) hotspot - fixed https login (broken in v5.9);
*) eoip: swap tunnel id bytes to be compatible with previous versions;
*) eoip,gre: fix setting config

What's new in 5.10 (2011-Dec-09 11:49):

*) snmp - provide extended interface statistics when availabe;
*) dhcpv6 client - use link-scoped multicast address;
*) dhcp client - renew dhcp lease on ethernet link up event;
*) ipv6 gre tunnel added (/interface gre6) supports ip and ipv6 encapsulation;
*) ip gre tunnel supports ipv6 encapsulation;
*) allow setting bigger trafflow cache;
*) improved RB1200 stability when using ether9,ether10;
*) fixed RB1200 stability issues when using crypto hardware acceleration;

What's new in 5.9 (2011-Nov-29 14:32):

*) ssh - fix mempry leak when client uses public key authentication;
*) ppp - added support for new RADIUS attribute MT-Delegated-IPv6-Pool (#22);
*) ntp client - faster initial synchronization;
*) ppp - added support for dhcpv6 pd;
*) wireless - nv2 improvements for 11n cards;
*) hotspot - fixed login page to better handle big load;
*) wireless - change default rate-selection to advanced;
*) snmp - fix simple queue table;
*) webfig - fixed problem were users wihtout sensitive permission could download
   senstive files (like backups);
*) webfig - fixed problem were table filters did not work allways as expected;
*) metarouter - fixed problem where local routeros instances did not boot;
*) dhcpv6 - client and server moved to respective /ipv6 dhcp- entry;
*) dhcpv6 server - changed how bindings are defined, users should add
    missing static binding information after upgrade;
*) sms - send sms now uses channel from config if it's not specified in the command;

What's new in 5.8 (2011-Nov-01 10:14):

*) snmp - fixed problem where some rows were missed
   in a few tables when walking them;
*) ipv6 - added support for router address assignment from ipv6 pools;
*) routerboard - fix RB400/RB700 bootloader upgrade problem
*) radius - respond to CoA & Disconnect requests with the same ip address
   it was received to;
*) improved webfig look;
*) webfig - do not allow to show secret passwords if user does not have
   sensitive permission;
*) webfig - allow to customize all item names in skins;
*) updated timezone information;
*) lcd - added support for new ax93304 model and nexcom LCDs;
*) ppp - added support for ipv6 pools;
*) ppp - added support for Framed-IPv6-Pool radius attribute;
*) dhcp client - fix high CPU usage when interface is disabled;
*) snmp - trap interface filter, multiple trap targets;
*) dhcp - added server support for IPv6 prefix delegation from /ipv6 pool,
        client support is also added;
*) ipsec - support authorization with raw RSA keys;
*) added ipv6 prefix pools;
*) winbox - now copied item in ordered list is added right after it's original;
*) pcq - fixed possible crash;

What's new in 5.7 (2011-Sep-14 10:54):

*) ovpn client - fixed crash when user name or password together
   were longer than 11 symbols;
*) sstp client - added an option to skip
    server address verification from certificate;
*) fixed problem - router crashed sometimes when using USB modem;
*) userman - show overall totals, show user totals if user has more
   than one entry;
*) lcd - retrieving '/system lcd page' configuration did not work with
    hundreds of interfaces;
*) webfig - added ability to reorder fields in skins;
*) webfig - added ability to add/remove new tabs & separators in skins;
*) webfig - added ability to add any field to special status page;
*) webfig - fixed problem when user sometimes got logged out with message
   "internal server error";
*) webfig - logout didn't log user out from router;
*) webfig - added System/Password for changing user's own password;
*) system reset-configuration - if keep-users is specified ssh user keys are
   preserved as well;
*) ipsec - new exchange mode (main-l2tp) for l2tp tunnel users to allow
    FQDN as a peer ID with preshared key authorization in main mode;
*) ssh - fix possible server crash when connection is interrupted;
*) improved ipv4 forwarding performance on all boards with simple configuration
    by up to 30%;
*) add passthrough setting to change-dscp, change-ttl, change-mss,
    strip-ipv4-options, change-hop-limit mangle targets;
*) ipsec - fixed problem of RB1200 rebooting when large amount of UDP traffic is
   sent through IPsec;
*) sniffer - added more useful packet filtering options, also available as quick
    mode command parameters;

What's new in 5.6 (2011-Aug-02 14:45):

*) ipsec - fix a problem which could silently remove a manual policy
    from the kernel if the peer configuration has 'generate-policy' set to 'yes'
    and if the policy matches with the traffic selector of a SA being removed
    on the responder side, also fix a problem that some generated policies
    may stay in kernel after relevant SA was removed;
*) profiler - correctly show idle task on RB1200;
*) webfig - fix dual nstreme interface setting lists;
*) webfig - fix Wireless Access/Connect List editing;
*) webfig - fix bitrate presentation in simple queues (show 1.5M as 1500k);
*) fixed micro-sd access on RB400 not to stop everything else;
*) sstp - when server certificate verification is enabled for sstp client,
    it will additionally compare IP addresses found in certificate's
    subjectAltName and subject CN to the real address, DNS names are ignored;
*) tftp - optional block counter roll-over support;
*) hotspot - fixed possible crash in case of multiple Radius CoA requests;
*) userman - speedup user deletion with big log size,
    note that first userman startup after this update
    may take few minutes if the log size is in hundreds of MB;
*) mpls - added support for enabling/disabling control word usage for
   BGP based VPLS tunnels (both - Cisco and RFC 4761 based);
*) mpls - added support for auto-discovery of VPLS NLRI encoding method
   for Cisco BGP based VPLS tunnels;
*) winbox - sometimes after disconnecting, winbox could not connect back;
*) gre,ipip tunnels - new dscp parameter (0..63 or inherit);
*) ping - new dscp parameter;

What's new in 5.6:

*) bgp - allow parallel operation of RFC4761 "l2vpn" and
    draft-ietf-l2vpn-signaling "l2vpn-cisco" BGP VPLS variants inside
    single peering session.
*) console - ":resolve" command now returns IPv6 address for domain names
    that have only IPv6 address records;
*) snmp - provide ups alarms for bad or low battery or for ups overload;
*) route - fixed SNMP getnext queries, were failing to find next
    prefix in the OID order;

What's new in 5.5 (2011-Jun-20 14:43):

*) console - resolved problem that appeared in version 5.4. it caused
    'sup-output' command to crash console on systems with many ethernet
    interfaces or very long interface names.
*) serial console - do not automatically send login prompt to attached
   usb modem if no other serial port exists;
*) winbox - fixed scrolling in terminal window;
*) webfig - encrypt whole session even in non https mode;
*) do not show contents of skin files to users without
   'sensitive' permission;

What's new in 5.4 (2011-May-27 13:18):

*) webfig - do not try to open many windows
   if first open was blocked by browser;
*) RB4xx ether1 port flapping fixed;

What's new in 5.3 (2011-Apr-29 15:05):

*) snmp - fix table get next with partial row keys;
*) snmp - respond from correct source address when multiple exist;
*) snmp - fix possible interface disappearing when walking ipNetToMediaTable;
*) snmp - fix possible memory leak;
*) ipsec - flush SAs and inform peer when rebooting or shutting down;
*) openvpn - fixed crash;
*) implemented terminal in WebFig;
*) implemented Skin mode in WebFig;
*) added support for more Broadcom Tigon3 based ethernet cards;
*) winbox - fixed byte to KiB, MiB and GiB conversion
  (digit after decimal point could be a bit off);
*) console - align numbers right in tabular print output;
*) fixed RB450G, RB750G switch chip slow ethernet problem;
*) fix vlan disable not taking effect;
*) userman - fix Authorize.Net payment bypass;
*) userman - added profile option to overwrite shared users option
    in user settings when profile is activated;
*) userman - fix db backup if it's size exceeds 2G;
*) wireless - merged ht-extension-channels in to channel-width;

What's new in 5.2 (2011-Apr-21 09:36):

*) fixed webfig;
*) console - fixed problem with supout file generation and export that
    appeared in version 5.1, it was causing console to enter busy loop
    on some boards;
*) ssh client - added source address and remote command options;
*) user manager - added /tool usermanager profile;

What's new in 5.1 (2011-Apr-08 12:55):

*) ipsec - fix SA lifetime display when timezone offset does not equal 0;
*) ipsec - now default DPD interval is 2 min for new configurations;
*) webfig - make bandwidth-test work;
*) fixed problem - wireless package got disabled after upgrading from v4;
*) sstp - fix problems on multicore systems;

What's new in 5.0 (2011-Mar-31 11:33):

*) route - fixed cause of crashes when handling multipath routes;
*) route - fixed limit on maximum active IPv6 route count,
   was causing issues with more than 2000 active routes;
*) ipsec - added command kill-connections under remote-peers;
*) ipsec - fix responder side phase2 negotiation problem
    which prevented more than one Windows7 host to initiate SA;
*) fixed vrrp - interface was invalid after undoing remove;
*) winbox - added more detailed /interface ethernet stats;
*) winbox - added ability to send e-mail;
*) winbox - added missing 'set-metric' parameter
   in 'Routing/Prefix List';
*) wireless - 802.11 dynamic distance fix;
*) fixed problem - packages could not be uninstalled if disk was full;
*) fixed problem - some of the RouterBOARDS did not reboot properly sometimes;
*) fixed problem - VLANs on bridge interface did not work;
*) ssh - client supports public key authentication;

What's new in 5.0rc11 (2011-Mar-04 14:29):

*) led trigger - changed blinking for modem signal and interface monitoring;
*) ppp - added ability to specify data-channel for ppp server interfaces;
*) ipsec - added more Diffie-Hellman groups;
*) console - fixed a memory leak;
*) console - don't recreate default '/system console' entry for the serial
    port if it is removed;
*) netinstall - fixed CD-ROM & usb install;
*) wireless nv2 - fixed RB532 freeze;
*) wireless - fixed station-bridge mode;
*) wireless - added station-bridge support for 802.11 and nstreme;
*) gps - show higher precision coordinates;
*) snmp - added OIDs for kvm and metarouter;
*) usermanager - works again and to make user profile active after signup,
                please recreate relevant user profiles;

What's new in 5.0rc10 (2011-Feb-17 14:06):

*) routing - fixed ipv6 connected routes,
    IPv6 connected routes disappeared after interface restart;
*) routing - fixed high CPU usage when adding BGP ipv6 routes;
*) winbox - fixed opening terminal window to KVM instance;
*) winbox - fixed connect button in wireless scan;
*) winbox - fixed make-binding in hotspot hosts;
*) ipsec - fix possible crash when ipv6 is enabled;
*) snmp - add usb power reset (see updated MIB);

What's new in 5.0rc9 (2011-Feb-09 13:57):

*) wireless - fixed disconnect problem on long distance
   802.11 40MHz links;
*) wireless nv2 - fixed station mode that broke when station-bridge
   was introduced
*) wireless - more improvements for 11n compatibility;
*) routing - fixed problem with best route selection, sometimes inferior route
    could get selected as the active, problem was introduced in 5.0rc8;
*) kvm - fix guest starting;

What's new in 5.0rc8 (2011-Feb-01 14:03):

*) added led trigger - change leds on different events;
*) snmp - restored access to routing tables;
*) snmp - fixed memory leak for OID 1.3.6.1.2.1.25.2;
*) ipsec - added ipv6 support;
*) removed broadcast setting from ip address;
*) radv - fixed problem when wrong link local address was used
   to send advertisements on bridge interface;
*) ppp - make IPv6 work again (introduced in v5.0rc7);
*) ppp - fixed problem when user re-authenticated and traffic accounting
   included data from previous session;
*) fixed traffic-flow on x86-smp (could stop sending flows);
*) improved usb modem mode switching;
*) kvm - fixed problem when sometimes virtualization detection fails;
*) routing - route with recursive gateway sometimes was not selected as
    active, if another inferior route with directly reachable gateway
    was present;
*) bgp - removed "interface" property from bgp peer configuration, now
    ipv6 link local remote address must be specified using the
    "address%interface" notation;
*) added extended ethernet statistics (/interface ethernet print stats) for RB800,RB1000,RB1100 and RB7xx with AR7241 or newer cpu;
*) wireless - improved 11n compatibility;
*) wireless nv2 - added support for station-bridge mode;
*) wireless nv2 - added area support;
*) wireless - added ability to set registration-table comment using RADIUS
   attribute;
*) implemented usb power-reset command on RB SXT 5HnD;

What's new in 5.0rc7 (2010-Dec-29 10:39):

*) fixed hotspot;
*) tftp - fixed problem when nobody could
   connect if no ip-address were provided;
*) winbox - fixed mac ping from neighbor list;
*) fixed simple queues on little endian cpus;
*) fixed simple queues without provided dst-address;
*) fixed problem - could not update license for
   old style 7 digit software-id's;
*) fixed winbox - IPv6 route could not be added;
*) ssh - allow bigger packets (fixes some disconnecting problems);
*) added support for RDC R6040 Ethernet controller;

What's new in 5.0rc6 (2010-Dec-23 13:33):

*) ntp server now requires a broadcast address for broadcast mode to work
   it should be specified under broadcast-addresses (X.X.X.255),
   255.255.255.255 is not going to work;
*) ssh - fixed showing forwarding settings,
   check your setting after upgrade!
*) allow to specify multiple networks (including IPv6)
   in user's allowed-from list;
*) added support for Safe Mode to WinBox;
*) allow to specify non acceptable groups for RADIUS console logins;
*) handle correctly IPv6 address on bridged or switched interfaces;
*) added IPv6 connection list;
*) added IPV6 support to graphing;
*) added IPv6 support to SNTP client;
*) added IPv6 support to NTP client & server;
*) added IPv6 support to RADIUS client;
*) added IPv6 support to snmp;
*) added IPv6 support to tftp server, also changed logging levels;
*) added IPv6 support to ssh client;
*) added IPv6 support to watchdog;
*) added IPv6 support for /tool e-mail;
*) added IPv6 support to log remote target;
*) added IPv6 support to API;
*) added IPv6 support to winbox;
*) added IPv6 support to ftpd;
*) added IPv6 support to netwatch;
*) added IPv6 support for /queue simple;
*) added IPv6 support for /tool bandwidth-test;
*) added IPv6 support for /tool torch;
*) added IPv6 support for /interface vrrp (version 3);
*) added IP/IPv6 over ipv6 tunnel interface (/interface ipipv6);
*) added Ethernet over IPv6 tunnel interface (/interface eoipv6);
*) snmp - added ipv6AddrTable from IPV6-MIB;
*) wireless nv2 - fixed station-wds mode multicast problem;
*) wireless nv2 - fixed occasional encrypted link stalls;

What's new in 5.0rc5 (2010-Dec-01 07:47):

*) logging - added email-starttls option for email target;
*) pcq - added burst settings, like in "/queue tree" and "/queue simple";
*) pcq - can specify address masks for pcq;
*) pcq - added ipv6 support;
*) wireless - fixed WPA;
*) radius - fixed encryption key decoding for wireless EAP & PPPs;
*) winbox - make keyboard work right away after main window is activated;
*) snmp - fix BER encoding for negative INTEGER values;

What's new in 5.0rc4 (2010-Nov-22 16:58):

*) radius - fixed Disconnect and CoA response signature generation;
*) winbox - make double click work in text fields again;
*) winbox - allow to drag windows outside of main one to the left;
*) winbox - make some settings look more consistent;
*) winbox - allot to specify IPv6 address in routing filter prefix;
*) winbox - make possible to open IPv6 routes without crashing;
*) winbox - improved item reordering in long lists;
*) winbox - improved SNMP configuration support;
*) winbox - added support for KVM configuration;
*) winbox - added support for Traffic Engineering configuration;
*) ovpn - make ovpn client work with OpenVPN v2.1.3;
*) lcd - support Crystalfontz 631,633
    also support for Crystalfontz lcd contrast setting is added;
*) console - fixed missing return value of the ping command when executed
    from a scheduler entry;
*) console - 'ping' command with specified value of 'interface' always forced
    "arp-ping=yes", fixed;
*) routing - fixed problem with 'check-gateway' status update that could get
    triggered when multiple routes with different values of 'target-scope'
    and 'check-gateway' referenced the same gateway IP address;
*) store - allow to use external disks;
*) modem firmware directory can be specified in /port firmware
    Gobi users should change this setting or directory name;
*) ups - support USB UPS on RB4xx as well;
*) snmp - fix BER encoding for some INTEGER based values;
*) snmp - provide proxy stats using SQUID-MIB;
*) snmp - provide ups info using UPS-MIB;
*) snmp - provide external storage information;
*) wireless nv2 - add missing statistics fields;
*) wireless - add per-chain signal strength fields;
*) added hotspot html variable "host-ip";
*) fixed pcq queue type;
*) fixed leds on RB750;
*) added hotspot html variable "host-ip";
*) wireless nv2 - fixed station-wds mode multicast problem;
*) wireless nv2 - fixed occasional encrypted link stalls;

What's new in 5.0rc3 (2010-Oct-29 09:02):

*) lcd - support Crystalfontz 635
*) wireless nv2 - fix stalls on encrypted 11n links using high rates;
*) wireless nv2 - fix encryption related kernel crash;
*) sstp - fixed memory leak;
*) fixed problem - bad boot/kernel crc was reported on powerpc boards
   when in fact it was good;

What's new in 5.0rc2 (2010-Oct-27 16:20):

*) wireless nv2 - encryption support;
*) tool fetch - support ftp STOR;
*) ospf - fixed crash when working with external LSA that contain
    forwarding addess;
*) ipsec - supports NAT-T drafts;
*) ipsec - added debug logging, to maintain same log verbosity as before with
    'ipsec' topic now use topics 'ipsec,debug,!packet';
*) ipsec - make it work with EoIP, GRE, PPTP and L2TP;
*) support for Atheros AR9271 wireless chip;
*) added support for more Intel 82575/82576 PCI-Express Gigabit Ethernet cards;
*) added support for idle detection on RB1xx/RB5xx in /tool profile;
*) fixed Wireless manual tx power configuration for 11n rates in WinBox;
*) fixed torch;

What's new in 5.0rc1 (2010-Sep-17 13:58):

*) wireless nv2 - add WDS support;
*) added ability to monitor cpu usage by task (/tool profile);
*) added support for RPS (Receive Packet Steering) on multicore systems;
*) added cisco compatible gre tunnels;
*) fix simple queues on multicore (fixes intel 82576 crash/reboot);
*) fixed sstp memory leak;
*) winbox - fixed ability to configure RB1100 switches;
*) ssh - fix possible crashing;
*) snmp - fix GET request processing;
*) ipsec - added ability to specify ID_USER_FQDN peer identity;
*) ipsec - encypt last IKE phase 1 packet when in aggresive mode as initiator;
*) wireless nv2 - added nv2-cell-radius parameter to specify distance
     in km to farthest client on AP;
*) wireless nv2 - fix transmit stall issue for non-11n chips;
*) wireless - fix x86 nstreme multiprocessor hang;
*) made user manager web interface work again;
*) updated drivers and kernel (to linux-2.6.35);

What's new in 5.0beta6 (2010-Aug-10 13:22):

*) sstp - fixed memory leak;
*) wireless - changed band setting and added channel-width setting
*) wireless - support for 11n rates in 5&10mhz channels
*) wireless nv2 - fixed multiple problems including occasional tx stall;
*) made gps accessible through SNMP;
*) snmp - added GETBULK support, no more table caching - solves problems
            with huge tables, routing tables currently are not available;
*) ssh - fixed public key authentication in case
        when client is not verifying if server will accept the key;
*) fixed problem - MetaROUTER did not work on RB800, RB1000 & RB1100;

*) user manager is not working - will be fixed in next version;
*) intel 82576 (uncommon expensive chip) crash/reboot to be fixed in
   next release;

What's new in 5.0beta5 (2010-Jul-23 14:50):

*) email - supports multiple CCs
*) fix 5&10MHz channel support for 11n cards;
*) ssh - fix ssh client crash;
*) ssh - password authentication is disabled for users with public keys;
*) ping - fixed ping packet-loss calculation;

What's new in 5.0beta4 (2010-Jun-28 16:17):

*) console - /ping command again returns number of ping responses received,
    didn't work in 5.0beta3;
*) added ability to monitor each cpu core usage;
*) added support for SATA,SCSI & USB CD-ROMs in CD installer;
*) fixed problem - IRQ balancer did not use correct CPU core
   on non auto MSI irqs after reboot;
*) fixed memory leak;
*) route - new property 'vrf-interface' (for static and dhcp routes),
    automatically updates 'routing-mark' of the route to keep it in the same
    VRF as the specified interface;

What's new in 5.0beta3 (2010-Jun-17 13:46):

*) hotspot - drop hotspot specific tcp connections from non-hotspot clients
   already at firewall;
*) lcd - added support for AX89063
*) console - output of '/ping' and '/tool traceroute' commands is more
    in line with the rest of the console commands;
*) api - '/ping' and '/tool traceroute' commands are fully functional;
*) console - added 'server' and 'server-port' arguments to '/resolve' command;
*) lcd - show free/total memory in units of million bytes (MB);
*) lcd - added page that shows system identity;
*) sstp - made it work with Windows 7;
*) sstp server - client reconnects did not work;
*) winbox - implemented proper maximize support for inner windows;
*) fix 5&10MHz channel support for 11n cards;
*) added IRQ balancer;
*) enabled PCI MSI on i386 multicore setups;

What's new in 5.0beta2 (2010-Apr-30 11:24):

*) added wireless distance setting, removed ack-timeout;
*) improved 802.11 operation for outdoor distances;
*) fixed sstp on x86;
*) console - removed 'delay' argument from '/system scheduler add' command;
*) console - remove 'comment=""' values from export;
*) console - updated '/system script job':
    - also show active login sessions here;
    - new read-only property 'type' with values "command", "login"
        or "api-login" for running commands and either kind of login sessions;
    - new optional read-only property 'parent' with id of the job that
        has spawned this one;
*) console - changed "started" property of '/system script job' to use
    local time;
*) console - new property 'type' in '/system script job'
*) console - added '/port remote-access export' command;
*) console - fixed bug that caused "cannot set ..." error when using
    some properties in 'find' commands;
*) show old software id in export file header;
*) api - can supply password to '/system/upgrade/upgrade-package-source/add';
*) api - 'print' command was not showing values of some properties
    such as 'servers' in "/ip/dns";
*) api - fixed api login sessions not dissapearing from '/user active' after
    termination;
*) '/user active' now lists type of api connections as 'api';
*) added support for hardware watchdog on RB1000 & RB800;
*) added support for ASIX AX88xxx based USB Ethernet Adapters on RB4xx;
*) fixed problem - ipv6 traffic was not bridged if ipv6 package was not enabled;
*) fixed getting interface stats in dude;
*) fixed metarouter stability problem on RB400s & RB750s;
*) fixed metarouter - it didn't work on RB1000 with 2Gb;
*) fixed metarouter - it locked up on RB800;
*) fixed problem - SFQ queues did not work on interfaces (wireless) if none
   of simple or tree queues were added;
*) fixed RB800 temperature;
*) fixed problem - WinBox crashed while opening VAP interface;
*) dhcp server - fixed possible inactive dhcp server in case of many
   dhcp leases with address-pool enabled;
*) dhcp server - show non-printable option 82 agent-circuit-id and
   agent-remote-id values in hexadecimal notation
   (in the same way as client-id is shown);

What's new in 5.0beta1 (2010-Mar-31 09:17):

*) updated drivers and kernel (to linux-2.6.32.5);
*) ssh is now completely rewritten (supports connection forwarding, only DSA keys);
*) added support for SSTP protocol (PPP over TLS);
*) added support for multiple Intel Ethernet cards;
*) added support for IPv6 over PPP
   (enabled by default if ipv6 package is installed),
   link-local addresses are assigned, and server can issue IPv6 global prefixes
   to clients per ppp secret or RADIUS reply (Framed-IPv6-Prefix);
*) added proper support for MPLS over PPP (by default it is now disabled);
*) fixed RB800 temperature;
*) silentboot feature updated;
*) WinBox - any file dropped on WinBox will be uploaded to router;
*) multicast - fixed possible crash during PIM startup;
*) report platform name in "/sysrem resource";
*) fixed problem - vlans were not working on RB750 ether1;
*) fixed mac address handling on RB750, some specific arp requests did not work;
*) more than two dns servers allowed in /ip dns;
*) sniffer and torch could process packet from other interfaces;
*) ospf - fixed DR and BDR election;
*) ospf - changed "/routing ospf route" to show type 2 metric instead of
    internal metric for type 2 external routes;
*) added IPv6 support to trafflow (v9 only);
*) rewritten user-manager (formerly known as userman-test);
*) dns cache rotates order of records in reply messages

What's new in 4.6:

*) only accept dotted decimal notation for IP addresses. Use of numbers
    with leading zero, numbers larger than 255 and non-decimal numbers
    is not accepted (but still can omit third or second and third numbers,
    if they are zero);
*) email - user must enable tls explicitly
*) remove limit on number of multicast enabled interfaces, maximum was 32;
*) dhcp server - show last-seen time for leases;
*) fixed - when closing winbox terminal window with active serial-terminal
    console command, serial port sometimes was left in acquired state;

What's new in 4.5:

*) ipsec - added blowfish, twofish, and camellia encryption algorithms;
*) fixed static route removing;
*) fixed DHCP client compatibility with some DHCP servers;
*) added static multi-cast route support;
*) fixed temperature monitor on RB800 and RB450G;
*) user manager - payment bug fix - now able to buy
   credits without extend price specified;

What's new in 4.4:

*) snmp - fixed snmp version three;
*) snmp - fixed vlan interface speed;
*) hotspot - fixed radius variables in hotspot html pages;
*) removed support for xen;
*) routing - added support for BFD protocol;
*) fixed problem - MetaROUTER sometimes froze on RB4xx;
*) fixed OSPFv3 on bridge interfaces;

What's new in 4.3:

*) kvm - vnc support, booting from cdrom image
*) API - fixed possible crash when running concurrent commands;
*) console - fixed logging commands: 'warning', 'error' and 'debug' were
    all using 'info' topic;
*) bgp - added routing-table configuration option for instances;
*) bgp - added 'as-override' and 'passive' configuration options for peers;
*) bgp - added support for Site of Origin extended communities;
*) bgp - fixed some network issues;
*) ospf - fixed problem: when last neighbor on multi-access interface disappeared,
   incorrect RouterLSA was generated on designated router;
*) metarouter - allow to specify metarouter's memory size when importing image;
*) firewall - added 'routing-table' matcher;
*) fixed problem - e1000 driver did not work in virtual machines;

What's new in 4.2:

*) fixed problem - RB450G ethernet did not work if one of the ports was disabled;
*) fixed ethernet of RB433 with switch chip IP175D;
*) fixed route attribute problem;
*) fixed route next-hops falling under multiple connected routes;

What's new in 4.1:

*) fixed problem - RB750 (clocked at 300MHz) Ethernet did not work;
*) fixed problem - routes on some interfaces (like VLAN) were not activated;
*) ppp, gps, sms, serial terminal - allow use of different channels
    on same port across multiple programs simultaneous
*) dhcp server - added support for dynamic address-list entries;
*) hotspot - added support for dynamic address-list entries;
*) hotspot - fixed redirect after login in case if client gets new IP address
   (problem introduced in 3.28);

What's new in 4.0:

*) IT87XX hardware monitoring sensor support;
*) kvm allows to choose emulated nic model;
*) hotspot - fixed redirect after login in case if client gets new IP address
   (problem introduced in 3.28);
*) hotspot - fixed redirect after login in case if client gets new IP address;
*) console - commands like 'monitor', 'torch' and others that periodically
    refresh information sometimes failed to work when started from
    the scheduler;
*) console - scheduled scripts no longer require 'test' policy to run;
*) console - fix issues with scripts that contain lines with trailing spaces;
*) console - add back compatibility with old scripts that use space instead
    of '=' to separate argument name and value;
*) console - following fixes:
    - accept item numbers when prompted by command to specify item;
    - argument names without '=' were matched even when expecting unnamed
        value; this broke code such as:
           :foreach i in=1,2,3 do {}
       here 'i' was matched as argument name "in";
    - 'tab' key did not automatically append '=' after complete argument
        names;    

What's new in 4.0rc1:

*) console - removed support for Lua (will be reintroduced later);
*) incorporated all the bug fixes since v3.30;
*) port remote-access - added 'log-file' property. If value is a non-empty
    string, then all data that is read from the port is appended to a file
    with that name, regardless of the active remote connection;
*) console - removed '/user' from the output of top level '/export' command,
    still can be exported by '/user export';

What's new in 4.0beta4:

*) routing - changed BGP network and default-originate behavior;
*) web proxy - allow to edit error page;
*) console - terminal window size change now does not trigger full terminal
   reset;
*) mesh protocol - improved loop prevention (becomes incompatible with earlier versions);

*) incorporated all the bug fixes since v3.27;

What's new in 4.0beta3:

*) added support for 802.11n atheros based wireless cards;
*) added ability to run other OSs in MetaROUTERs;
*) console: Lua scripting language. http://wiki.mikrotik.com/wiki/Lua
*) console: added nstreme-dual OIDs;
*) incorporated all the bug fixes since v3.23;

What's new in 4.0beta2:

*) console: added 'without-paging' argument to 'monitor' commands;
*) console: now 'without-paging' and 'interval' arguments in of 'print'
    commands work together. Printing can be stopped by pressing 'q' or
    ctrl-c, any other key triggers printing;
*) incorporated all the bug fixes since v3.22;
*) fixed TFTP server logging;
*) fixed problem - "/system upgrade" did not show proper package
   architecture and was unable to fetch new packages;

What's new in 4.0beta1:

*) added support for MetaROUTERs;
*) all test packages are regular ones;
*) console - can mix named and unnamed arguments, can use names for unnamed
     argument values. For example all of the following commands are
     accepted now:
       /ping 10.11.12.13 count=4
       /ping address=10.11.12.13 count=4
       /ping count=4 10.11.12.13
22.07.2015

Возврат к списку