v6.44.6 [long-term] is released!

emils · Mon Oct 28, 2019 4:10 pm

RouterOS version 6.44.6 has been released in public "long-term" channel!

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

What's new in 6.44.6 (2019-Oct-24 09:37):

MAJOR CHANGES IN v6.44.6:
----------------------
!) package - accept only packages with original filenames (CVE-2019-3976);
!) package - improved package signature verification (CVE-2019-3977);
!) security - fixed improper handling of DNS responses (CVE-2019-3978, CVE-2019-3979);
----------------------

Changes in this release:

*) capsman - fixed frequency setting requiring multiple frequencies;
*) capsman - fixed newline character missing on some logging messages;
*) ccr - improved packet processing after overloading interface;
*) crs312 - fixed combo SFP port toggling (introduced in v6.44.5);
*) crs328 - adjust fan speed based on SFP and CPU temperature;
*) crs3xx - correctly display link rate when 10/100/1000BASE-T SFP modules are used in SFP+ interfaces;
*) crs3xx - fixed management access when using switch rule "new-vlan-priority" property;
*) export - fixed "bootp-support" parameter export;
*) health - improved fan control on CRS3xx and CCR1016-12S-1S+r2;
*) ike2 - fixed policy port selection for responder with natted initiator;
*) ike2 - fixed traffic selector address family selection when using IPv6;
*) interface - fixed missing PWR-LINE section on PL7411-2nD and PL6411-2nD (introduced v6.44);
*) ipsec - allow inline "passphrase" parameter when importing keys;
*) ipsec - fixed minor spelling mistakes in logs;
*) led - fixed default LED configuration for RBLHG5nD;
*) ospf - fixed opaque LSA type checking in OSPFv2;
*) ospf - fixed possible busy loop condition when accessing OSPF LSAs;
*) ospf - improved "unknown" LSA handling in OSPFv3;
*) profile - added "internet-detect" process classificator;
*) radius - fixed open socket leak when invalid packet is received (introduced in v6.44);
*) sfp - fixed "sfp-rx-power" value for some transceivers;
*) smb - improved stability on x86 and CHR;
*) snmp - fixed encrypted data sequence (introduced in v6.44.5);
*) snmp - improved reliability on SNMP service packet validation;
*) ssh - accept remote forwarding requests with empty hostnames;
*) ssh - fixed carriage return presence in subsequent sessions;
*) ssh - improved remote forwarding handling (introduced in v6.44.3);
*) supout - fixed supout file generation outside of internal storage with insufficient space;
*) switch - fix port isolation for non-CRS series switch chips;
*) system - accept only valid string for "name" parameter in "disk" menu (CVE-2019-15055);
*) system - improved system stability for devices with AR9342 SoC;
*) upgrade - fixed "auto-upgrade" to use new style authentication;
*) upnp - fixed XML parsing (FG-VD-19-110);
*) watchdog - renamed "no-ping-delay" parameter to "ping-start-after-boot";
*) winbox - added "auto-erase" parameter to "Tools/SMS" menu;
*) winbox - added "https-redirect" parameter to "IP/Hotspot/Profiles menu";
*) winbox - added "revision" parameter to "System/Routerboard" menu;
*) winbox - removed "max-sms" parameter from "Tools/SMS" menu;
*) wireless - fixed basic rate reporting in snooper;
*) wireless - improved 802.11ac stability for all ARM devices with wireless;
*) wireless - improved range selection when distance set to "dynamic";
*) wireless - improved stability when setting fixed primary and secondary channels on RB4011iGS+5HacQ2HnD-IN;

For a full changelog please visit https://mikrotik.com/download/changelogs

To upgrade, click "Check for updates" at /system package in your RouterOS configuration interface, or head to our download page: http://www.mikrotik.com/download

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as suspected or after some problem has appeared on device

Please keep this forum topic strictly related to this specific RouterOS release.

deanMKD1 · Mon Oct 28, 2019 5:41 pm

Upgraded my hAP AC2 without problems. Tested WiFi, and seems more stable then even before. No High CPU usage or RAM usage (ram consumation seems lower then 4.43.15 long term). Thanks Mikrotik for this stable build.

petern · Mon Oct 28, 2019 6:30 pm

Good news, my hAP lite which refused to update to 6.44.5 due to space was able to successfully update to 6.44.6! No need for a netinstall.

whatever · Tue Oct 29, 2019 10:13 am

I have successfully updated 4x hap ac², haven't noticed any issues yet. I'm curios to see if 5GHz wifi stability has really improved.

Edit: 5GHz is still crashing/disappearing, waiting for the latest beta changes to get backported.

deanMKD1 · Tue Oct 29, 2019 10:44 am

I have successfully updated 4x hap ac², haven't noticed any issues yet. I'm curios to see if 5GHz wifi stability has really improved.

Do you tested 5ghz ? 2.4ghz seems very stable for me.

phillipegandini · Tue Oct 29, 2019 4:58 pm

30+ equipments upgraded (RB912 family, RB921 family and RB750Pr2)... so far so good

105547111 · Tue Oct 29, 2019 6:04 pm

18 Upgraded without issue. Ranging from CCR1016, CRS125, RB951G, SXT5AC, CHR, no issues.

DanchoDimitrov · Tue Oct 29, 2019 10:49 pm

hAP ac2
on 5g
Tx rate picks up very slowly after a device is connected.
If the freq. is set to auto, it thinks a lot about detecting radar, i gave up and put it on a non DFS channel.
Ping seems fine, ill play with it more tomorrow and add to this reply if I find anything wrong.

Babek · Wed Oct 30, 2019 8:32 am

i found strange problem my CCR - works as DNS-cache and uses dns servers from my 2 bind resolvers after upgrade i noticed that google site doesn't work - put first DNS - as 8.8.8.8 works again - but it resolves google address correctly ping response properly - strange it worked before today's upgrade. I'll look closer to my dns servers why they do not work with google main page. other sites looks like work perfeclty.
Strange that searching via chromium browser works even if main google page doesn't

Caci99 · Wed Oct 30, 2019 11:17 am

hAP ac2
on 5g
Tx rate picks up very slowly after a device is connected.
If the freq. is set to auto, it thinks a lot about detecting radar, i gave up and put it on a non DFS channel.
Ping seems fine, ill play with it more tomorrow and add to this reply if I find anything wrong.

As far as I know, the 5GHz is dependable on regulatory countries (so is 2.4) when setting DFS. When DFS enabled it will look for free frequencies and will wait 1 minute to check the availability of that frequency, if still free than it will select it.
I have disabled DFS on a lot of installations and things run smooth, but of course I am braking the regulatory rules

DanchoDimitrov · Wed Oct 30, 2019 11:27 am

...When DFS enabled it will look for free frequencies and will wait 1 minute to check the availability of that frequency...

As far as i know, DFS scan can take around 10 minutes on some channels.

marisspringis · Wed Oct 30, 2019 1:16 pm

Updated my home Hap AC2 and 5Ghz WiFi works great

before this used 6.45.6 stable and with that all my ios devices constantly after every 4 minutes got reassociating -> disconect -> connect....
with this update everything works just great, only time i see disconection is when ios device conects to 2Ghz from 5Ghz or vice versa

thx Mikrotik

mtzmt · Wed Oct 30, 2019 3:18 pm

Hi,
I am sorry, I have maybe dumb question, I am new here, I tried to find out why don't see in upgrades this "long-term" version. I have RB962UiGS-5HacT2HnT hAP running on 6.42.11 and in winbox I see that it is actual or latest version. Is it correct? I have some problems with IPSec/IKEv2 rekeying and want to try newer version.
thanks.

storp · Wed Oct 30, 2019 3:53 pm

Updated my home network yesterday shortly after the release. Running it on RB4011, cAP AC, wAP AC, cAP and a CHR. Seems to work fine.

Caci99 · Wed Oct 30, 2019 4:58 pm

Hi,
I am sorry, I have maybe dumb question, I am new here, I tried to find out why don't see in upgrades this "long-term" version. I have RB962UiGS-5HacT2HnT hAP running on 6.42.11 and in winbox I see that it is actual or latest version. Is it correct? I have some problems with IPSec/IKEv2 rekeying and want to try newer version.
thanks.

Either download the file from mikrotik, or change the channel to bugfix. I think it was after 6.43 they started calling long-term and stable, before that (your version) it was called bugfix and current.

maryaadmins · Thu Oct 31, 2019 11:22 am

hi
we have dhcp-server behind cisco router (dhcp-relay server)
after upgrade dhcp-server stops giving leases and fills leases with mac-address 00:00:00:00:00:00 and status busy
disabling conflict detection resolves the issue

slagjanj · Thu Oct 31, 2019 3:11 pm

There is possible bug with SNMP
command snmp-get produce error

example :
/tool snmp-get address=192.168.20.1 community=public oid=.1.3.6.1.2.1.2.2.1.2.3
error - contact MikroTik support and send a supout file (3)

with v6.44.5 is OK
also last stable version produce same error

Leon565 · Thu Oct 31, 2019 3:29 pm

Hello ! After upgrading from 6.44.2 to 6.44.6, the PPTP stopped working. L2TP and OpenVPN work well. RouterBOARD 750G r3.

roe1974 · Thu Oct 31, 2019 4:16 pm

I had a problem after upgrade on LtAP with DHCP Server and the raspberry on the ETH Port.
I took 2-3 LtAP reboots so that the Raspberry finally got a IP adresse from DHCP ( always ETH down/ETH up/ETH down/ETH up ....)

Richard

roe1974 · Thu Oct 31, 2019 10:15 pm

same problem after each reboot of the raspi

Caci99 · Fri Nov 01, 2019 10:30 am

Hello ! After upgrading from 6.44.2 to 6.44.6, the PPTP stopped working. L2TP and OpenVPN work well. RouterBOARD 750G r3.

Glad that PPTP does not work. It is so outdated and unsecured that undoes the purpose of VPN. Stick to L2TP with IPSEC or OpenVPN.

Caci99 · Fri Nov 01, 2019 10:32 am

I had a problem after upgrade on LtAP with DHCP Server and the raspberry on the ETH Port.
I took 2-3 LtAP reboots so that the Raspberry finally got a IP adresse from DHCP ( always ETH down/ETH up/ETH down/ETH up ....)

Richard

Those are symptoms of no synchronization between the two ethernet interfaces. Check the ethernet cable, routerboard log, change the settings of the ethernet interface.

msatter · Fri Nov 01, 2019 11:07 am

Entering a address range with a slash, gives an error when you don't get it right, however you get an error states that the DNS is not correct and this could be more specific.

validDNS.JPG

I am on beta 59 of 6.46....so I am in the wrong release of RouterOS but the described mismatch exits also in older versions.

roe1974 · Fri Nov 01, 2019 11:45 am

I had a problem after upgrade on LtAP with DHCP Server and the raspberry on the ETH Port.
I took 2-3 LtAP reboots so that the Raspberry finally got a IP adresse from DHCP ( always ETH down/ETH up/ETH down/ETH up ....)

Richard
Those are symptoms of no synchronization between the two ethernet interfaces. Check the ethernet cable, routerboard log, change the settings of the ethernet interface.

I have nothing changed .. just updated to 6.44.6 ... and in the log i see only ETH up, ETH down ... and the raspi is not getting an IP adress from DHCP ....
richard

Leon565 · Fri Nov 01, 2019 1:38 pm

to Caci99
All customers use L2TP/IPsec and OVPN, but there is a Keenetic-4GII which has only PPTP!

Caci99 · Fri Nov 01, 2019 4:39 pm

to Caci99
All customers use L2TP/IPsec and OVPN, but there is a Keenetic-4GII which has only PPTP!

PPTP is dependable on GRE. They have changed how GRE handles first packets ( version 6.44.3 maybe ).
If you go to that topic you will see some workarounds how to handle the GRE connections.

Leon565 · Sat Nov 02, 2019 3:21 am

to Caci99
All customers use L2TP/IPsec and OVPN, but there is a Keenetic-4GII which has only PPTP!
PPTP is dependable on GRE. They have changed how GRE handles first packets ( version 6.44.3 maybe ).
If you go to that topic you will see some workarounds how to handle the GRE connections.

Thanks for the help
.....the PPTPhelper must be enabled in ip firewall service-port.......

1.png

roe1974 · Sat Nov 02, 2019 7:54 am

is there a deeper loging possibility on mikrotik ? i just see eth interface down / eth interface up / down / up ....
after a while the interface is up and the connection stable until next reboot from raspi
richard

roe1974 · Sat Nov 02, 2019 9:59 am

there must be a problem with LtAP and 6.44.6

i have a raspberry connected to eth0 (the LtAP is powered over POE) ....
everytime when i restart the raspi ... i see a eth up/down/up/down ... and no DHCP IP is assigned.
When i disable the eth port for 1-2 minutes .... then enable the eth port ... then the raspi connect end get an IP adress.
Rebooting the raspi again and i have the same problem .... (cable and injector allready changed)

please help

Richard

Caci99 · Sat Nov 02, 2019 10:09 am

there must be a problem with LtAP and 6.44.6

i have a raspberry connected to eth0 (the LtAP is powered over POE) ....
everytime when i restart the raspi ... i see a eth up/down/up/down ... and no DHCP IP is assigned.
When i disable the eth port for 1-2 minutes .... then enable the eth port ... then the raspi connect end get an IP adress.
Rebooting the raspi again and i have the same problem .... (cable and injector allready changed)

please help

Richard

Downgrade to previous version and see if the problems goes away. If you see no problem in previous version, then write to mikrotik support, if the problem persists then open a new topic because it is not related to this topic.

roe1974 · Sat Nov 02, 2019 11:44 am

can i downgrade when routerboard firmware is allready on 6.44.6 ?
richard

Deantwo · Tue Nov 05, 2019 11:09 am

can i downgrade when routerboard firmware is allready on 6.44.6 ?
richard

Bootloader firmware is not the same as the RouterOS.
You need to downgrade the RouterOS version, not the bootloader firmware.

/system package print

Will show the RouterOS version installed and all packages installed and if they are enabled.
See also: https://wiki.mikrotik.com/wiki/Manual:R ... owngrading

If you have more issues, please make a separate thread in the general RouterOS forum.
Here: viewforum.php?f=2

doncarlosru · Tue Nov 05, 2019 2:06 pm

i found strange problem my CCR - works as DNS-cache and uses dns servers from my 2 bind resolvers after upgrade i noticed that google site doesn't work - put first DNS - as 8.8.8.8 works again - but it resolves google address correctly ping response properly - strange it worked before today's upgrade. I'll look closer to my dns servers why they do not work with google main page. other sites looks like work perfeclty.
Strange that searching via chromium browser works even if main google page doesn't

I have similar strange problem with DNS on CCR.
Resolving on clients that use CCR as a DNS server does not work in half the cases.
Problems is include DNS static records on CCR.

I'm DNATed incoming DNS requests from CCR to hEX with 6.44.6, and it's work!
Problem is CCR specific.

roe1974 · Wed Nov 06, 2019 11:24 am

Hello

Is this point from 6.45.1 stable allready implemented in longterm Version ?

*) rb4011 - fixed MAC address duplication between sfp-sfpplus1 and wlan1 interfaces (wlan1 configuration reset required)

thx for info, Richard

easyspot · Fri Nov 08, 2019 4:44 am

Woah u really live in the future. We all here still at 6.44.6 n u already at 6.44.7 lol.
Upgraded all devices here n all stable.
ARM based wifi ac got stability improvement.
SMIPS upgrade easily if only install 11 packages instead of 13. Kickin tr069 n hotspot package.

mducharme · Sun Nov 10, 2019 8:29 am

We just found that the OSPFv3 changes in 6.44.6 appear to cause problems with neighbor with Cisco switch with IPv6 (C3560 Software (C3560-IPSERVICESK9-M), Version 15.0(2)SE11, RELEASE SOFTWARE (fc3)). Downgrading to 6.44.5 resolves it. Careful if your router needs OSPFv3 neighbour with Cisco devices.

Deantwo · Tue Nov 12, 2019 10:26 am

Thanks! this information is helpful. But while upgrading to v6.44.7 I got lots of errors. I don't know what they meant. what should I do to troubleshoot?
Regards,
Lewis

RouterOS v6.44.7 does not exist (yet?), so that could be your issue.
If something is suggesting that there is a v6.44.7 but failing to download/install it, it might mean that the CVE fixes in this update are working as expected.
You should secure your router as it could be compromised.

If you meant you were having trouble upgrading to v6.44.6, then you need to actually show some of the errors if you want help.
You can make post them here if you think they are directly related to the v6.44.6 version, you can email support@mikrotik.com for direct support, or you can make a new thread in the general RouterOS help forum viewforum.php?f=2 if you just need help in general.

Sob · Tue Nov 12, 2019 5:10 pm

Don't bother, if this "LewisH95" is not just creative spammer establishing ground, I'll eat my hat. All his posts are either copy & paste from elsewhere, just containing keywords related to thread subject, or straight nonsense like this one.

anav · Tue Nov 12, 2019 5:45 pm

I always knew that you were actually S. Holmes!! Your detective skills are inspiring!

sindy · Tue Nov 12, 2019 8:56 pm

I'll eat my hat.

Be careful and maybe think of purchasing one of these just for the case, as although I have the same opinion as you, I've come across one of his posts which made sense in the context of the topic. So maybe he's actually doing his PhD on AI, and he'll finally be giving a perfect answer to each new topic through using the aggregate wisdom of all the posts on this forum written ever since it has been incepted.

dougunder · Thu Nov 21, 2019 11:13 pm

Nice stable release!

We have a few dozen hAp AC's and SXT's on this and 6.44.4

Have to keep an A/B setup as routeros refuses to install the same version packages over a bundle.

Was quite annoyed to receive a shipment of these as they will not install earlier versions.
Going to our internal stable is part of our provisioning, which broke with the new batch.
We assume it was due to now signing the packages. Good move but a little warning and/or a grace period would have been nice.

That said seems solid.

So a question, the one feature I'm really waiting for is SFTP support.
Any Idea when it will make it to long-term?
Went to stable in 6.45.1

Valdis · Fri Nov 22, 2019 1:49 pm

Hello.
This morning (22.11.2019.) upgraded following RB:
hEX, RB750, RB450, RB2010UiAS, RB2011UAS, RB2011iL, RB1100, RB1100AHx2 and RB1100AHx4 - seems everything is working like a charm.
previousely used v6.37.1
Good job at "Long Term" version realice!

CZFan · Fri Nov 22, 2019 10:11 pm

...
previousely used v6.37.1
...

You will have to ensure your devices have not been compromised

easyspot · Wed Nov 27, 2019 4:19 am

hardware: HAP AC Lite
software: 6.44.6
firmware: 6.44.6
services: pptp server, sstp server, dhcp server, dns server, masquerade, dual wifi both on.

problem 1: when multiple (about 5) sstp clients connecting together at once, cpu load goes 100% then wifi rto for 15-20 seconds, then back to normal.
problem 2: after 28 days uptime, suddenly wifi getting so slow, all pptp/sstp clients cant connect, cant remote to winbox, need disconnect power then reconnect power.

All these problem not exist in 6.43.16.

addon 1: please add WinBox button in IP > Neighbors. Already have Ping/Mac Ping/Telnet/Mac Telnet/Torch. Why dont have Winbox? Already ask for this since long time ago.
addon 2: if we set: System > Routerboard > Settings > Auto Upgrade ON, then please do AUTO REBOOT TOO AFTER UPGRADE. Already ask for this TOO since long time ago.
Make it simple, man. Dont make it hard. We choose mikrotik not to get headache!

sba · Thu Dec 12, 2019 9:35 am

This is insane! I spent entire morning on a production network trying to figure out why after upgrade (to stable long term release!) my router does not respond to any DHCP DISCOVER requests. It shows them in log but not sending any offer. Later I found hundreds of "incomplete" arp entries in my core switch. Guess what? Conflict detection feature, that was enabled by default and sending ARP requests to L3 connected switch that relayed dhcp requests from remote segments. Nice Mikrotik. You introduced this "feature" in 6.44: viewtopic.php?f=21&t=145793&start=150#p718701 and it still there. Really?

emils · Thu Dec 12, 2019 12:36 pm

sba you are most likely using proxy arp on the relay router which will respond with its own MAC address to ARP requests causing false positive conflicts. Spending entire morning figuring out what is causing the issue when the issues is clearly mentioned in your Log sounds doubtful.

sba · Thu Dec 12, 2019 4:22 pm

sba you are most likely using proxy arp on the relay router which will respond with its own MAC address to ARP requests causing false positive conflicts. Spending entire morning figuring out what is causing the issue when the issues is clearly mentioned in your Log sounds doubtful.

Nope. No proxy arp. Cisco switch with ip helper configured on vlan interfaces and L3 (/30 subnet) connection to Mikrotik. No bridges, just clean interface with address. Dhcp server have Relay address configured. So, in 6.43.14 worked for about a year without any issue. Update, reboot and surprise - all leases are in use with busy status and all zeroes in mac and ip.
So, what I supposed to clearly see in dhcp debug log? That it receives all dhcp packets, acknowledging renewals and completely ignoring discovers? Yes, that's what I clearly saw. There was no word about failed arp requests. How that would link to "Conflict detection" ?
Scroll this thread up to #16 - same thing: when dhcp server works through relay, conflict detection feature completely shuts it down. Same messages in other announcement threads since 6.44. Have You seen them?
And one small request: when adding new features or changing the way existing works, please consider not to enable new functionality by default, unless it is absolutely necessary. I believe that not only me expect that upgrading to long term stable version won't break the things, that's already working.

If You're interested, I can provide log files.

Thank You.

folkert · Tue Dec 17, 2019 1:05 pm

Hi,

I have something very strange when upgrading to 6.44.6

I installed packages and log says that they are installed

After reboot, Mikrotik says they are not

But in packages I see TR69 is 6.44.6 version but rest is not?

This is the second CCR that has this problem. How to solve this?

Cha0s · Tue Dec 17, 2019 4:31 pm

Remove tr069 package, then manually upload the new packages (not the bundle) you need.

Reboot, and you are good to go.

SX1 · Wed Dec 18, 2019 3:55 pm

Ping utility failed after some success pings. It just write "Running" and do nothing. It crashed after some ARP pings and choosing some options like "Interface", "TTL", etc.
Issue is actual using Winbox, web interface and console too.
Logging in with another user doesn't help.
Logging in from another PC doesn't help.
MikroTik CCR1036-8G-2S+
software: 6.44.6
firmware: 6.44.6
What to do, experts?

Deantwo · Fri Dec 27, 2019 4:15 pm

Ping utility failed after some success pings. It just write "Running" and do nothing. It crashed after some ARP pings and choosing some options like "Interface", "TTL", etc.
Issue is actual using Winbox, web interface and console too.
Logging in with another user doesn't help.
Logging in from another PC doesn't help.
MikroTik CCR1036-8G-2S+
software: 6.44.6
firmware: 6.44.6
What to do, experts?

If it causes your router to crash, then don't do it?

Jokes aside. If it is an issue then make a supout and e-mail it to support like detailed in the opening post.
But if this is unrelated to this specific version you should really make a new thread, or again e-mail support with more specifics and reproductive steps.

Darryl · Thu Jan 02, 2020 6:27 pm

Anyone else using RB 3011 on 6.44.6 that shows the wrong link up time? Viewing the router through winbox ver 3.18 - 3.20 on Windows 7 and windows 10 computers. Viewing Last link up times on the Ethernet interfaces and even the PPPoE client interface shows link up times of the future. Right now its showing for " Last Link up time: Feb/23/2020 18:45:14 " on the PPPoE interface. Another router has Jan 8th for Eth 10 interface.

I'm not sure where the the link up times are calculated. But before anyone asks about the right time in the router and my computers, indeed the time is correct, the timezones are also correct. The link up times can also be different depending on what computer is used. One windows computer has the right link up time, the other computer using the same version of Winbox, doesn't.

mkx · Thu Jan 02, 2020 9:26 pm

This is a known "feature" of winbox.

icko81 · Mon Jan 06, 2020 8:13 pm

Can you fix Meta Router for install openwrt asterix version it does not allow install via image in latest version there is some bug .

thanks
Icko

emils · Wed Jan 29, 2020 10:46 am

New version 6.45.8 has been released in long-term RouterOS channel:

viewtopic.php?f=21&t=156825

Who is online