R7000_386.4_0.zip

Asuswrt-Merlin 386/NG Changelog =============================== 386.4 (1-Jan-2022) - NEW: Added support for the RT-AX86S (uses the same firmware as the RT-AX86U). - NEW: Added wireguard kernel module + userspace tool to HND models firmware images. - NEW: IPv6 support for OpenVPN server. Allows to remotely connect to your router's OpenVPN server over IPv6, and reach LAN clients over their IPv6 (redirecting IPv6 Internet traffic does not work). - UPDATED: Merged with GPL 386_45958 + a few newer patches from Asus. - UPDATED: curl to 7.79.1. - UPDATED: vsftpd to 3.0.5. - UPDATED: openssl to 1.1.1m. - UPDATED: wget to 1.21.1. - UPDATED: nettle to 3.7.3. - UPDATED: dnsmasq to 2.86. - UPDATED: openvpn to 2.5.5. - UPDATED: tor to 0.4.5.11. - UPDATED: miniupnpd to 2.2.3-git 20211017. - UPDATED: inadyn to 2.9.1. - UPDATED: CA bundle to 2021-12-13. - UPDATED: amtm to 3.2.2 (thelonelycoder) - CHANGED: replaced jitterentropy-rngd with haveged. It uses more resources, but it works properly on older platforms, and is generally less CPU intensive in regular use. This is implemented for all router models. - CHANGED: Switched dnsmasq crypto backend to nettle. - CHANGED: Switched to Asus's own dhcp hostname support. Existing dhcp_hostnames entries will be converted on first boot. - CHANGED: miniupnpd will now be supplied the public WAN IP to improve compatibility with dual NAT setups. - CHANGEED: Disabling Auto DoH will now also disable Windows' new Discovery of Designated Resolvers (DDR) feature. - FIXED: Wrong interface might be used for the default gateway in an openvpn client routing table. - FIXED: Generated OpenVPN certs used SHA1 signatures instead of SHA256 (regression from 386.1) - FIXED: Various issues with protocol handling when importing an ovpn client file. - FIXED: IPv6 not working while in Dual WAN mode. - FIXED: Failed OpenVPN client connections might sometime be stuck with a "Connecting" state. - FIXED: NTP sometimes failing to update at boot time when using IPv6. - FIXED: Changes done by firewall-start may be lost after ddns service gets stopped when using tunnelbroker 386.3_2 (6-Aug-2021) - NOTE: closed down the Issue tracker on Github, as 90% of it was people asking for technical support, or failing to use the supplied submission form. - CHANGED: Re-disabled jitterentropy-rngd on non-HND models. It kept using CPU time every two seconds and had a very marginal impact on the entropy pool (which it never could push above the target threshold of 1024). - CHANGED: Moved the "Redirect Internet traffic" setting on the OpenVPN Client page to the Network Settings section to increase its visibility, as too many users are forgetting to configure it. - CHANGED: Display "Internet traffic not redirected" instead of "Public IP Unknown" on the OpenVPN Client status display when Redirect Internet traffic is set to "No". - FIXED: Only the first OpenVPN client would be used if you had multiple clients connected and the first one had a Redirect Internet set to "No". Now, setting this to "No" means that client's routing table will no longer get a default gateway configured, allowing traffic to be processed by other RPDB tables if there wasn't a matching route within that client's table. - FIXED: IPV6-compatible DNSFilter servers weren't properly configured in dnsmasq. - FIXED: DNSFilter client rules may get corrupted after a reboot. 386.3 (23-July-2021) - NOTE: First time you boot into this version, you need to either shift-reload the main index page, or clear your browser cache. - NEW: Introducing VPN Director, which replaces the original policy routing management interface for OpenVPN clients. A bit similar to Asus's own VPN Fusion, OpenVPN routing rules are now managed through a central web interface, and they are stored in JFFS instead of nvram, to allow creating more rules, and free up some nvram for nvram-limited devices such as the RT-AC68U. See the Wiki for more information. - NEW: Added QR codes to the networkmap as well as the Guest Network page, to allow easily connecting a mobile device just by scanning the QR code. The generated QR code can also be saved as a file if you'd like to print it. - CHANGED: Rewrote OpenVPN routing handling. The firmware will now handle route creation itself rather than letting the openvpn client create/remove routes. The new implementation brings a few changes: - "Force Internet traffic through tunnel" can now be set to "No", "Yes (All)" or "VPN Director". - This setting will now override whatever setting pushed by the server regarding gateway redirection. - The kill switch can now be used in both "Yes" and "VPN Director" routing modes - Manually stopping a client will remove the kill switch. It will now only be applied at boot time (if client was set to start at boot), or if the tunnel is disconnected through a non-user event - CHANGED: Reworked OpenVPN's DNS Exclusive mode implementation and interaction with dnsmasq. - CHANGED: Moved OpenVPN Custom settings content to JFFS, and increased max storage length from around 350 chars to 4095 chars. - CHANGED: Added support for BCM50991 used for the 2.5G interface in newer RT-AX86U revisions. - UPDATED: nano to 5.7. - UPDATED: curl to 7.76.1. - UPDATED: dnsmasq to 2.85-openssl. - UPDATED: openvpn to 2.5.3. - UPDATED: getdns to 1.7.0. - UPDATED: stubby to 0.4.0. - FIXED: Setting an OpenVPN client's DNS mode to Exclusive could fail to work for certain configurations - FIXED: DNS Exclusive redirections applied in Policy mode could be executed in the wrong order if you had overlapping policy rules in two separate clients. - FIXED: Clients connected to Guest Network 1 couldn't be routed through an OpenVPN tunnel. - FIXED: Clients connected to Guest Network 1 would bypass DNSFilter rules. - FIXED: USB disks not properly unmounted on reboot on some router models. - FIXED: Missing error report on OpenVPN client connection failure - FIXED: profile.add getting used even if JFFS scripting was disabled (dave14305) - FIXED: Freedns authentication errors would not properly be reported as errors. 386.2_6 (6-June-2021) - NOTE: The IRC channel, #asuswrt, has moved to the Libera IRC network (https://libera.chat/). - UPDATED: chart.js to 2.9.4. - UPDATED: tor to 0.4.5.8. - UPDATED: root certificate bundle to June 5th 2021. - FIXED: Fragattack security issues 386.2_4 (30-Apr-2021) - NEW: Added jitterentropy-rngd to non-HND models, in addition to HND models. - UPDATED: OpenVPN to 2.5.2. - UPDATED: jitterentropy-rngd to 1.2.2 (library 3.0.3) - FIXED: Scheduled new FW checks wouldn't display the webui notification icon when the local router had a new release available. - FIXED: OpenVPN server wo