RouterOS version 6.42.12 has been released in public "long-term" channel!
Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.
What's new in 6.42.12 (2019-Feb-12 08:23):
MAJOR CHANGES IN v6.42.12:
----------------------
!) winbox - improvements in connection handling to router with open winbox service (CVE-2019–3924);
----------------------
Changes in this release:
*) ipsec - accept only valid path for "export-pub-key" parameter in "key" menu;
*) quickset - fixed "country" parameter not properly setting regulatory domain configuration;
*) smb - fixed possible buffer overflow;
*) w60g - fixed disconnection issues in PtMP setups;
*) wireless - improved antenna gain setting for devices with built in antennas;
*) wireless - show indoor/outdoor frequency limitations under "/interface wireless info country-info" command;
To upgrade, click "Check for updates" at /system package in your RouterOS configuration interface, or head to our download page: http://www.mikrotik.com/download
If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as suspected or after some problem has appeared on device
Please keep this forum topic strictly related to this specific RouterOS release.
Re: v6.42.12 [long-term] is released!
Why dont u make auto reboot after firmware upgrade???? Every new update also update firmware, and u put an option to auto upgrade firmware. But why do we have to reboot manually???
Re: v6.42.12 [long-term] is released!
There are no firmware related changes in this release. Why do you feel it is necessary to upgrade it?
Re: v6.42.12 [long-term] is released!
Such auto-upgrade reboot you can create with very basic scripting.Why dont u make auto reboot after firmware upgrade???? Every new update also update firmware, and u put an option to auto upgrade firmware. But why do we have to reboot manually???
Re: v6.42.12 [long-term] is released!
How do we know that?There are no firmware related changes in this release. Why do you feel it is necessary to upgrade it?
Number has increased, so alt least that has changed.
Re: v6.42.12 [long-term] is released!
How do we know if there is no firmware change, since it changed from 6.42.11 to 6.42.12, and auto upgrade setting really did firmware upgrade?
Re: v6.42.12 [long-term] is released!
Usually it is indicated by "("/system routerboard upgrade" required)" added to the specific change log entry. Automatic reboot would just pointlessly increase the total upgrade time necessary for really no benefit.
Re: v6.42.12 [long-term] is released!
Because there is no indication otherwise. Before the firmware number changed only when some upgrade was made to it. Now it is locked with the ROS version. How can we know when to upgrade?There are no firmware related changes in this release. Why do you feel it is necessary to upgrade it?
That was a terrible idea: destroyed any sane way we had to keep track of when we should upgrade the firmware.
Re: v6.42.12 [long-term] is released!
No one can be expected to go through the logs, just to find it out. Why don't we get a nice warning, at the same line of firmware version?Usually it is indicated by "("/system routerboard upgrade" required)" added to the specific change log entry. Automatic reboot would just pointlessly increase the total upgrade time necessary for really no benefit.
Re: v6.42.12 [long-term] is released!
I managed over 400 routerboards, almost all architecture, so how do I know if this or that routerboard got no firmware changes? U want me to watch every routerboard tiny firmware notification during update?
Re: v6.42.12 [long-term] is released!
U wanna match firmware version with ros version is ok, u wanna make it auto upgrade is cool, just add a little tiny feature: auto reboot after firmware upgrade. So when we do package update, rebooting, firmware auto upgrade, auto reboot, then all done.
Re: v6.42.12 [long-term] is released!
Thank you for your feedback. Now please keep the discussion related to this specific RouterOS version.
Re: v6.42.12 [long-term] is released!
What does this mean ?
*) wireless - improved antenna gain setting for devices with built in antennas;
It would be nice if it knew the antenna gain of the device, just tested on a 4011 with wireless, and nothing obvious in winbox.
*) wireless - improved antenna gain setting for devices with built in antennas;
It would be nice if it knew the antenna gain of the device, just tested on a 4011 with wireless, and nothing obvious in winbox.
Re: v6.42.12 [long-term] is released!
For devices with antenna, it does know the gain.
Open Wireless -> Wlan2 -> Advanced -> Antenna gain will show 3 in the RB4011
Open Wireless -> Wlan2 -> Advanced -> Antenna gain will show 3 in the RB4011
Re: v6.42.12 [long-term] is released!
By default, the value is left at zero on upgrade.
Changing to Regulatory Domain mode, selecting a country, leaving the value at zero and clicking on 'Apply' generates a pop up error message. I've not been able to make it show me "3" by default.
Plus... Since when is the antenna gain dependent on the country the device is located in? Therefore why check it when selecting a country? The antenna is 3dBi (or whatever is physically installed in the RB) and always will be, regardless of where it is physically (OK - unless someone opens it up and makes some serious modifications!)
Lastly - what's with the (6) at the end of the error message? That is suggesting that the antenna gain is 3 or it might also be 6?
Changing to Regulatory Domain mode, selecting a country, leaving the value at zero and clicking on 'Apply' generates a pop up error message. I've not been able to make it show me "3" by default.
Plus... Since when is the antenna gain dependent on the country the device is located in? Therefore why check it when selecting a country? The antenna is 3dBi (or whatever is physically installed in the RB) and always will be, regardless of where it is physically (OK - unless someone opens it up and makes some serious modifications!)
Lastly - what's with the (6) at the end of the error message? That is suggesting that the antenna gain is 3 or it might also be 6?
You do not have the required permissions to view the files attached to this post.
Re: v6.42.12 [long-term] is released!
This is the end Mikrotik! Regulation got u by the balls.
With antenna gain and TX limitation there is no way to use Mikrotik wireless devices anymore unless u stick to a version prior to these awful changes. Even if I would tend to see the root of these changes outside of Mikrotik the devices are crippled practically.
You should think about a way to run those devices with regulatory channels but without brakes for those who dont even have neighbors they could jam with a little bit more power while allowing reasonable range for ur devices.
With antenna gain and TX limitation there is no way to use Mikrotik wireless devices anymore unless u stick to a version prior to these awful changes. Even if I would tend to see the root of these changes outside of Mikrotik the devices are crippled practically.
You should think about a way to run those devices with regulatory channels but without brakes for those who dont even have neighbors they could jam with a little bit more power while allowing reasonable range for ur devices.
Re: v6.42.12 [long-term] is released!
Superchannel is still available and it has no limitations.This is the end Mikrotik! Regulation got u by the balls.
Re: v6.42.12 [long-term] is released!
Regulation is the EU law.
But how to read "current tx power" values? On AC hardware is not displayed
But how to read "current tx power" values? On AC hardware is not displayed
Re: v6.42.12 [long-term] is released!
It has been mentioned a thousand times by now. Chose no country, and there you have your freedom to do what ever you like in braking the regulations. Do you really believe MikroTik is to be held responsible for the regulations enforced by local Laws?This is the end Mikrotik! Regulation got u by the balls.
With antenna gain and TX limitation there is no way to use Mikrotik wireless devices anymore unless u stick to a version prior to these awful changes. Even if I would tend to see the root of these changes outside of Mikrotik the devices are crippled practically.
You should think about a way to run those devices with regulatory channels but without brakes for those who dont even have neighbors they could jam with a little bit more power while allowing reasonable range for ur devices.
Re: v6.42.12 [long-term] is released!
It’s on Status tab for AC chipsetsRegulation is the EU law.
But how to read "current tx power" values? On AC hardware is not displayed
Re: v6.42.12 [long-term] is released!
Definitely missing some more details about when and how to we are vulnerable to this vulnerability.MAJOR CHANGES IN v6.42.12:
----------------------
!) winbox - improvements in connection handling to router with open winbox service (CVE-2019–3924);
----------------------
I would like to know if WinBox service whitelist is enough to keep a <v6.42.12 router safe.
Code: Select all
/ip service
set winbox address=a.b.c.d/32
Sad this wasn't mentioned at all in the blog post too.
Re: v6.42.12 [long-term] is released!
I got an answer from @normis in another thread.Definitely missing some more details about when and how to we are vulnerable to this vulnerability.MAJOR CHANGES IN v6.42.12:
----------------------
!) winbox - improvements in connection handling to router with open winbox service (CVE-2019–3924);
----------------------
I would like to know if WinBox service whitelist is enough to keep a <v6.42.12 router safe.Code: Select all/ip service set winbox address=a.b.c.d/32
So yes, an address whitelist on your WinBox service will protect you from this.Yes, "service" menu limitation will protect you, the service "winbox" affects winbox/dude/tik-app all at the same time.
Re: v6.42.12 [long-term] is released!
I would say no.I would like to know if WinBox service whitelist is enough to keep a <v6.42.12 router safe.Code: Select all/ip service set winbox address=a.b.c.d/32
It may be enough for the latest discovered bug, but there may be more.
You should never open Winbox to internet.
Use VPN if you can, if can not do that and still need Winbox open
1. Use an access list,
2. Use another port than default.
3. Use port knocking.
4. Send all log of changes to an external server (syslog)
5. Use a script to open winbox port in a small time frame each week.
6.+++
Re: v6.42.12 [long-term] is released!
Hi,
Is seems the RB751 doesn't show the internal gain correctly. The RB951 shows correctly.
Regards,
Harry
Is seems the RB751 doesn't show the internal gain correctly. The RB951 shows correctly.
Regards,
Harry
Code: Select all
[admin@KANTOOR] > /interface wireless info hw-info
interface:
ranges: 2200-2700/0.5/b,g,gn20,gn40
tx-chains: 0,1
rx-chains: 0,1
extra-info: pciinfo:0x0, cid:0, gain:0
[admin@KANTOOR] > /system routerboard print
routerboard: yes
model: 751G-2HnD
serial-number: 3A65025BEA46
firmware-type: ar7240
factory-firmware: 3.0
current-firmware: 6.42.12
upgrade-firmware: 6.42.12
[admin@WOONKAMER] > /interface wireless info hw-info
interface:
ranges: 2312-2732/5/b,g,gn20,gn40
2484-2484/5/b,g,gn20,gn40
tx-chains: 0,1
rx-chains: 0,1
extra-info: pciinfo:0x0, cid:0, gain:3
[admin@WOONKAMER] > /system routerboard print
routerboard: yes
model: 951G-2HnD
serial-number: 4F4504D222E3
firmware-type: ar9344
factory-firmware: 3.10
current-firmware: 6.42.12
upgrade-firmware: 6.42.12
Re: v6.42.12 [long-term] is released!
Does the hAP AC Lite (952Ui-5ac2nD) really go this high, on the 5GHz radio? I know, I know. Regulations, superchannel, etc. But the question is: does the hardware really go this high?
Code: Select all
/interface wireless info hw-info wlan_5GHz
ranges: 4920-6100/5/a,an20,an40,ac20,ac40,ac80
tx-chains: 0
rx-chains: 0
extra-info: pciinfo:0x0, cid:0, gain:2Re: v6.42.12 [long-term] is released!
High as in frequentie? Or in channel bandwith? Or db power or what do you mean?Does the hAP AC Lite (952Ui-5ac2nD) really go this high, on the 5GHz radio? I know, I know. Regulations, superchannel, etc. But the question is: does the hardware really go this high?
Re: v6.42.12 [long-term] is released!
Sorry. Frequency.High as in frequentie? Or in channel bandwith? Or db power or what do you mean?Does the hAP AC Lite (952Ui-5ac2nD) really go this high, on the 5GHz radio? I know, I know. Regulations, superchannel, etc. But the question is: does the hardware really go this high?
Who is online
Users browsing this forum: seriquiti and 13 guests