|
本帖最后由 514422325 于 2017-1-15 17:49 编辑
Asuswrt-Merlin 380.65 Beta is now available for download, for all supported models.
This version contains a lot of changes, with the biggest ones being the upgrade to OpenVPN 2.4, Busybox 1.25.1, and GPL 380_4180 merge.
Highlights:
Merged with GPL 380_4180. Note that the webui pages that were broken in 4180 (Network Tools, WOL, etc...) have been fixed.
Upgrade to OpenVPN 2.4.0, and implemented support for many of its new features, including: GCM ciphers, NCP, LZ4 compression, tls-crypt. Existing 2.3 clients can still connect, provided you don't enable any of the new 2.4 features. Please see the Asuswrt-Merlin changelog, as well as the OpenVPN 2.4 manual page for more info on these new features. Also, obsolete RC ciphers were removed from the server webui.
Upgrade to Busybox 1.25.1 ported to Asuswrt by TheMIROn. For most users this change is transparent, main benefit of this upgrade is making it easier to keep up-to-date with future security updates for Busybox (and probably a series of fixes between 1.20 and 1.25). A couple of new applets were also enabled, to assist script authors.
A new "update-notification" script has been added, which gets run whenever the scheduled new firmware check finds a new version. That script can be used to send you an Email, an SMS, flash your router LEDs, etc... Also, generate a system log entry when a new firmware is available.
Other updated components: Tor (0.2.9.8), nano (2.7.4).
Host file will give priority to the hostname you configure for your router, over the hardcoded router.asus.com (will show up when doing a traceroute or any other router IP resolution).
Fixed IPv6 request for some models (like the RT-AC88U) that were using a blank MAC when generating their DUID
Numerous fixes to the Network Service Firewall that failed to work under various scenarios
Additional fixes to OpenVPN (ovpn export, failure to clean up routes on restart)
RT-N66U, RT-AC66U and RT-AC5300 would reboot up to three times if one of their wifi interface was disabled
And quite a few more - make sure to read the complete Changelog
Things that need particular testing:
OpenVPN, both existing configurations and the new features. Make sure you understand how these work first - NCP for instance isn't always intuitive in its behaviour.
Existing scripts - make sure they still work fine with the Busybox upgrade
The RT-N66U, RT-AC66U, RT-AC56U and RT-AC3200 have to reuse some older closed source components due to incomplete/missing GPL release from Asus. Look for any unusual behaviour, especially regarding wifi.
Make sure you read the Changelog for more details.

Asuswrt-Merlin Changelog
========================
380.65 Beta 1 (15-Jan-2017)
- NEW: Merged with Asus GPL 380_4180 (and fixed its broken
Network Tools/Connections/etc... pages)
- NEW: Upgraded to OpenVPN 2.4.0, and implemented support
for many of its new features:
* GCM ciphers
* LZ4 compression
* tls-crypt (uses the Static Key field)
* Cipher negotiation (NCP), with (optional)
fallback to legacy "cipher" parameter when
an OpenVPN 2.3 client connects to the
router's 2.4 server.
Please refer to the OpenVPN 2.4 documentation for
more info on these new features.
You will be warned if any server setting would
generate an exportable ovpn file that would be
incompatible with older clients.
Existing client config shouldn't need to be changed,
unless you modify the router's server configuration.
- NEW: Upgraded Busybox to 1.25.1 (patch by theMIROn)
- NEW: Added the following Busybox applets: ntpd, time, uniq,
xargs and getopt, for feature parity with John's fork.
- NEW: Option on Media Server page to enable minidlna's
built-in status web page. Default URL is
http://router.asus.com:8200 .
- NEW: Support for Vodafone R226 USB LTE (patch by
Gernot Pansy)
- NEW: New "update-notification" user script, that gets run
when a scheduled firmware check detects a new version
is available.
- CHANGED: Removed support for all RC ciphers on OpenVPN.
DES is staying for now, but should still be avoided
whenever possible.
- CHANGED: Updated Tor to 0.2.9.8 (patch by blackfuel)
- CHANGED: Updated nano to 2.7.4.
- CHANGED: hosts file will now give a higher priority to the
user-configured hostname for the router ahead of
hardcoded ones (like router.asus.com).
- CHANGED: Create a system log entry if new firmware is available.
- FIXED: Invalid DUID used when requesting an IPv6 prefix
for some of the newer router models, which would
prevent them from getting working IPv6 (Asus bug)
- FIXED: Network Service Firewall rules not applied
under certain configurations
- FIXED: Port triggering wasn't working if traffic had
been whitelisted by Network Service Firewall
- FIXED: Avahi wasn't rejecting connections from
secondary WAN interface
- FIXED: Sorting clients by connection time would incorrectly
treat 10 hours as longer than 9 hours, as it was
handling it as a string (Asus bug)
- FIXED: Exported ovpn client file wouldn't use the
user-configured hostname when using DDNS custom mode.
- FIXED: Exported OpenVPN client config didn't work when
using static key authentication.
- FIXED: Exported OpenVPN client config wasn't editable with
Notepad, the default editor used by Windows's
OpenVPN GUI.
- FIXED: OpenVPN was killed too quickly on disconnection,
causing issues when using explicit-exit-notify
(patch by john9527)
- FIXED: OpenVPN client/server instances weren't properly
restarted on a WAN restart (patch by john9527)
- FIXED: Some models (N66/Ac66/AC5300) would reboot 3 times
if one of the radios was found disabled by the user
while booting (Asus bug).

更新机型:
RT-AC5300 RT-AC3200 RT-AC3100 RT-AC88U RT-AC87U RT-AC68U/RT-AC1900/RT-AC66U B1 RT-AC66U RT-AC56U RT-N66U
|
|