Page 1 of 1
v6.44.1 [stable] is released!
Posted: Thu Mar 14, 2019 1:12 pm
by emils
RouterOS version 6.44.1 has been released in public "stable" channel!
Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.
What's new in 6.44.1 (2019-Mar-13 08:38):
Changes in this release:
*) bridge - fixed possible memory leak when using "ingress-filtering=yes" on bridge interface;
*) certificate - force 3DES encryption for P12 certificate export;
*) dhcp - fixed dual stack queue addition;
*) dhcpv6-server - use MAC address for RADIUS user when "allow-dual-stack-queue=yes";
*) e-mail - fixed missing "from" address for sent e-mails (introduced in v6.44);
*) gps - increase precision for dd format;
*) gps - removed unnecessary leading "0" for dd format;
*) ipsec - allow identities with empty XAuth login and password if RADIUS is enabled (introduced in v6.44);
*) ipsec - fixed dynamic L2TP peer and identity configuration missing after reboot (introduced in v6.44);
*) ipsec - use "remote-id=ignore" for dynamic L2TP configuration (introduced in v6.44);
*) ipv6 - do not allow setting "preferred-lifetime" longer than "valid-lifetime";
*) lte - do not show "session-uptime" if session is not up;
*) lte - fixed LTE interface band setting on RBSXTLTE3-7 (introduced in v6.44);
*) rb4011 - fixed ether10 failing to auto negotiate link speed to 1Gbps;
*) winbox - added "use-local-address" parameter in "IP/Cloud" menu;
*) wireless - fixed antenna gain setting on RBSXT5nDr2;
To upgrade, click "Check for updates" at /system package in your RouterOS configuration interface, or head to our download page:
http://www.mikrotik.com/download
If you experience version related issues, then please send supout file from your router to
support@mikrotik.com. File must be generated while router is not working as suspected or after some problem has appeared on device
Please keep this forum topic strictly related to this particular RouterOS release.
Re: v6.44.1 [stable] is released!
Posted: Thu Mar 14, 2019 3:35 pm
by pe1chl
Has anything done about the problem in connection tracking?
(it is not listed in the changes, but neither was the change that introduced the problem)
loose-tcp-tracking is no longer working!
after upgrade and reboot all existing TCP connections across the router are stuck, and firewall logs "tcp (ACK, PSH)" packets being dropped.
normally, after a router reboot an outgoing TCP packet on an existing connection (no NAT in use!) will re-establish the tracking entry when loose-tcp-tracking is selected (the default).
now all connections need to be re-connected.
new connections are processed correctly, but existing connections are not.
Re: v6.44.1 [stable] is released!
Posted: Thu Mar 14, 2019 5:05 pm
by Ulypka
please, say what with [Ticket#2018101022007579] ?
Re: v6.44.1 [stable] is released!
Posted: Thu Mar 14, 2019 5:11 pm
by mmanard
Hi all,
I noticed since 6.44 and now 6.44.1 some neighbors are displayed without their IP address.. is there a solution?
Re: v6.44.1 [stable] is released!
Posted: Thu Mar 14, 2019 5:48 pm
by LeftyTs
Any ideas why in a LHG XL 5 ac wireless interface, even though wmm-support=disabled in the wlan1 interface, when I monitor wlan1 the interface shows wmm-enabled: yes? Is this a ROS bug?
Re: v6.44.1 [stable] is released!
Posted: Thu Mar 14, 2019 8:59 pm
by nichky
What for
*) winbox - added "use-local-address" parameter in "IP/Cloud" menu;
Re: v6.44.1 [stable] is released!
Posted: Thu Mar 14, 2019 9:04 pm
by rushlife
Hi all,
I noticed since 6.44 and now 6.44.1 some neighbors are displayed without their IP address.. is there a solution?
+1
Re: v6.44.1 [stable] is released!
Posted: Thu Mar 14, 2019 10:38 pm
by gotsprings
Updated hAP AC2 and CCR1009 from 6.44 to 6.44.1
I am seeing a lot of dropped Forwarded packets as INVALID.
These are packets that should have hit the New connection from a local device in the address list. But are getting dropped.
Also
IPSEC connection between offices is now dropping pings.
Call from another Tech.
We found that routing between 2 subnets was getting flagged as invalid. Had to add a pass rule for anything from Subnet1 to accept Forward to Subnet2 and the reverse.
Seems 6.44.1 broke some stuff.
Guess we are back to the days where we can't "just download the latest firmware."
Re: v6.44.1 [stable] is released!
Posted: Thu Mar 14, 2019 11:02 pm
by nostromog
What for
*) winbox - added "use-local-address" parameter in "IP/Cloud" menu;
What I have seen I'd it means that IP/Cloud will expose your internal addresses in DNS.
If you have a router inside your company that got 192.168.88.206 this will be the addresse it will return
Sent from my Redmi Note 5 using Tapatalk
Re: v6.44.1 [stable] is released!
Posted: Thu Mar 14, 2019 11:38 pm
by jmckerrow
Tested Version on CCR1036-12G-4S
- ROMON is not showing up in a discovery
- ROMON appears to have been broken or some part of it.
- CCR1036 is not showing up in ROMON list anymore after 44.1 installed.
Anybody else seeing this.... or not!
?
Re: v6.44.1 [stable] is released!
Posted: Fri Mar 15, 2019 12:12 am
by HzMeister
Wireless clients are getting disconnected after this update.
6.44 was fine, so downgraded back to it.
Re: v6.44.1 [stable] is released!
Posted: Fri Mar 15, 2019 7:33 am
by nichky
What for
*) winbox - added "use-local-address" parameter in "IP/Cloud" menu;
What I have seen I'd it means that IP/Cloud will expose your internal addresses in DNS.
If you have a router inside your company that got 192.168.88.206 this will be the addresse it will return
where will return?
Sent from my Redmi Note 5 using Tapatalk
Re: v6.44.1 [stable] is released!
Posted: Fri Mar 15, 2019 8:25 am
by nostromog
What for
*) winbox - added "use-local-address" parameter in "IP/Cloud" menu;
What I have seen I'd it means that IP/Cloud will expose your internal addresses in DNS.
If you have a router inside your company that got 192.168.88.206 this will be the addresse it will return
where will return?
Sent from my Redmi Note 5 using Tapatalk
Queries to the DNS name <sn>.sn.mynetname.net return the IPv4/IPv6 addresses of the router. If you select "use-local-address" the IPv4 returned will be the local one in the WAN interface, not the IPv4 that the Cloud service sees.
Sent from my Redmi Note 5 using Tapatalk
Re: v6.44.1 [stable] is released!
Posted: Fri Mar 15, 2019 12:49 pm
by nichky
What for
*) winbox - added "use-local-address" parameter in "IP/Cloud" menu;
What I have seen I'd it means that IP/Cloud will expose your internal addresses in DNS.
If you have a router inside your company that got 192.168.88.206 this will be the addresse it will return
where will return?
Sent from my Redmi Note 5 using Tapatalk
Queries to the DNS name <sn>.sn.mynetname.net return the IPv4/IPv6 addresses of the router. If you select "use-local-address" the IPv4 returned will be the local one in the WAN interface, not the IPv4 that the Cloud service sees.
Domain names did not change, it's still *.sn.mynetname.net
Sent from my Redmi Note 5 using Tapatalk
Re: v6.44.1 [could be stable] is released!
Posted: Fri Mar 15, 2019 1:33 pm
by anav
Updated hAP AC2 and CCR1009 from 6.44 to 6.44.1
I am seeing a lot of dropped Forwarded packets as INVALID.
These are packets that should have hit the New connection from a local device in the address list. But are getting dropped.
Also
IPSEC connection between offices is now dropping pings.
Call from another Tech.
We found that routing between 2 subnets was getting flagged as invalid. Had to add a pass rule for anything from Subnet1 to accept Forward to Subnet2 and the reverse.
Seems 6.44.1 broke some stuff.
Guess we are back to the days where we can't "just download the latest firmware."
...
Fixed the Title!!
v6.44.1 [could be stable] is released!
I always wait for a couple of days to see if you are happy with a new firmware! Please don't change your habits LOL.
Re: v6.44.1 [stable] is released!
Posted: Fri Mar 15, 2019 2:01 pm
by pe1chl
Updated hAP AC2 and CCR1009 from 6.44 to 6.44.1
I am seeing a lot of dropped Forwarded packets as INVALID.
These are packets that should have hit the New connection from a local device in the address list. But are getting dropped.
This looks like a case of the problem already mentioned in post #2 in this topic and in several posts (by me and others) in the 6.44 topic.
For some reason there is no reaction at all from MikroTik, although they often post replies to such reports in release topics.
There also is no hint of a change in the connection tracking functionality anywhere in the release notes.
Re: v6.44.1 [stable] is released!
Posted: Fri Mar 15, 2019 2:30 pm
by anav
@Pe1chi
It boggles my mind that MT does not understand the word
stable in a full context.
Specifically they obviously (and keep proving it), need a
"stable" of beta testers for firmware before public release.
By that I mean a mix of thoroughbreds, like yourself, mkx, sob, etc.......... and some mixed breeds like myself for example.
Throw in a few dark and/or wild horses like chupka, sebastia, and gotsprings for example and they would same themselves a lot of unnecessary grief.
Re: v6.44.1 [stable] is released!
Posted: Fri Mar 15, 2019 3:29 pm
by CZFan
Updated hAP AC2 and CCR1009 from 6.44 to 6.44.1
I am seeing a lot of dropped Forwarded packets as INVALID.
These are packets that should have hit the New connection from a local device in the address list. But are getting dropped.
Also
...
Updated my Hap AC^2, also getting lots of invalids dropped, but these drops are ACKs and ACK,FINs, so not sure these should be in the "New" connections.
Further to above, it seems to be only from the wireless side, no drops in log from my ethernet connections, my wireless is not part of bridge config
Re: v6.44.1 [stable] is released!
Posted: Fri Mar 15, 2019 3:42 pm
by R1CH
I can confirm the "Loose TCP Tracking" is completely broken in this release (and perhaps 6.44, didn't test it extensively). Previously established connections are treated as INVALID regardless of the setting.
Re: v6.44.1 [stable] is released!
Posted: Fri Mar 15, 2019 3:47 pm
by pe1chl
I can confirm the "Loose TCP Tracking" is completely broken in this release (and perhaps 6.44, didn't test it extensively). Previously established connections are treated as INVALID regardless of the setting.
That already happened in 6.44 as I noticed when I upgraded my home router.
There I always have >10 established TCP sessions and they all failed when I did the upgrade, which did not happen before.
Re: v6.44.1 [stable] is released!
Posted: Fri Mar 15, 2019 3:56 pm
by R1CH
This doesn't affect users only during an upgrade, the default RouterOS conntrack timeouts are quite low and especially with the bug with tcp unacked timer, it's easy to get day-to-day TCP connections affected by this.
Re: v6.44.1 [stable] is released!
Posted: Fri Mar 15, 2019 4:05 pm
by osc86
Tested Version on CCR1036-12G-4S
- ROMON is not showing up in a discovery
- ROMON appears to have been broken or some part of it.
- CCR1036 is not showing up in ROMON list anymore after 44.1 installed.
Anybody else seeing this.... or not!
?
Updated a CCR1009, 2xCHR, 951Ui-2HnD, 750G r3, 2x 941-2nD to 6.44.1.
RoMon working fine for me, all devices can see each other.
Re: v6.44.1 [stable] is released!
Posted: Fri Mar 15, 2019 6:35 pm
by jrpaz
Has anything done about the problem in connection tracking?
(it is not listed in the changes, but neither was the change that introduced the problem)
loose-tcp-tracking is no longer working!
after upgrade and reboot all existing TCP connections across the router are stuck, and firewall logs "tcp (ACK, PSH)" packets being dropped.
normally, after a router reboot an outgoing TCP packet on an existing connection (no NAT in use!) will re-establish the tracking entry when loose-tcp-tracking is selected (the default).
now all connections need to be re-connected.
new connections are processed correctly, but existing connections are not.
Do you know if the behavior is different if you just uncheck the box in connection tracking?
Re: v6.44.1 [stable] is released!
Posted: Fri Mar 15, 2019 6:51 pm
by R1CH
I didn't see any difference in behavior, it behaves as if it's disabled regardless of the checkbox state.
Re: v6.44.1 [stable] is released!
Posted: Fri Mar 15, 2019 7:30 pm
by ognjen
Hi all,
I noticed since 6.44 and now 6.44.1 some neighbors are displayed without their IP address.. is there a solution?
+1
Re: v6.44.1 [stable] is released!
Posted: Fri Mar 15, 2019 8:51 pm
by CZFan
Hi all,
I noticed since 6.44 and now 6.44.1 some neighbors are displayed without their IP address.. is there a solution?
My guess will be those devices do not have an IP on the interface reported on.
Re: v6.44.1 [stable] is released!
Posted: Fri Mar 15, 2019 10:11 pm
by isacalmeida
Hello,
Fix: ppp - fixed dynamic route creation towards VPN server when "add-default-route" is used;
This fix came in version 6.44, but it fixes the bug only for a PPPoE connection with an L2TP tunnel over it. Is it possible to include in next version the adjustment of this bug of a PPTP tunnel over a PPPoE tunnel?
Thanks
Re: v6.44.1 [stable] is released!
Posted: Fri Mar 15, 2019 11:41 pm
by Beone
Anyone else experiencing lower single-stream TCP throughput on CCR through IPSEC connections using 6.44 and 6.44.1?
Remote-end: 6.42.12
Local-end: 6.44 & 6.44.1; downgrading local-end to 6.42.12 boosts the speed back to normal: ~140Mbit/s in single-stream.
Verified with bandwidth-test and traffic-generator
Re: v6.44.1 [stable] is released!
Posted: Fri Mar 15, 2019 11:47 pm
by nomad
"Stable" huh.
Over half of my CAPS did not come back. Not even replying to a ping, not contactable by MAC either.
Downgrading to 6.44 failed on router as well.
Nice going ppl, I'll be in long-term from now on.
Re: v6.44.1 [stable] is released!
Posted: Sat Mar 16, 2019 12:15 am
by Oliver96
Hey!
I updated my wAP ac today and it didn't come up anymore as usual. I hooked up via LAN and I have seen the configuration looks broken after the update.
Temp Fix: I restored my config and now it seems to work.
Hope it helps
Re: v6.44.1 [stable] is released!
Posted: Sat Mar 16, 2019 10:02 am
by Shalom
For the IKE VPN for iPhone issue, after I change the VPN setting on the iphone local ID to blank (leave it empty), everything works perfect as it before
Re: v6.44.1 [stable] is released!
Posted: Sat Mar 16, 2019 10:39 am
by nostromog
FYI
The 4th machine that I upgraded to 6.44.1 (from 6.44) started to show 100% CPU (profiled to be in ipsec) and would not respond to "/ export" or even "/ip ipsec remote-peers print".
I could disable security and reboot and it was working, but without access to the disabled configuration, re-enabling it would start the loop again. I tried upgrading to 6.45beta11 but it had the same behaviour, so I settled with 6.44.1
The only solution I found out was to reset configuration and recreate from export without the offending part, which I think is (experimenting from a recent thread I found):
/ip ipsec identity
add auth-method=pre-shared-key-xauth disabled=yes generate-policy=port-strict \
mode-config=RW-cfg my-id=fqdn:my.domain peer=mypeer \
policy-template-group=RoadWarrior xauth-login=11111
add auth-method=pre-shared-key-xauth generate-policy=port-strict \
mode-config=RW-cfg my-id=fqdn:my.domain peer=mypeer \
policy-template-group=RoadWarrior xauth-login=22222
add auth-method=pre-shared-key-xauth generate-policy=port-strict \
mode-config=RW-cfg my-id=fqdn:my.domain peer=mypeer \
policy-template-group=RoadWarrior xauth-login=33333
The machine is back to work with the same ipsec configuration except those entries and:
* it was exchange-mode main, now it is ike2
* no xauth, now it has a shared identity with just psk.
I'm almost 100% sure that the main+pre-shared-key-xauth was causing it.
The other 3 machines I upgraded through the path from 6.43.12 -> 6.44 -> 6.44.1 were ok
Re: v6.44.1 [stable] is released!
Posted: Sat Mar 16, 2019 12:27 pm
by eddieb
Updated all my devices from 6.44 to 6.44.1 thru dude, no problems
ipsec site-to-site run fine
l2tp-ipsec roadwarrior dailin works fine
Eddie
Re: v6.44.1 [stable] is released!
Posted: Sat Mar 16, 2019 12:46 pm
by plisken
What about load balancing and failover?
Multiple tutorials about load balancing and failover do not work.
Make it work so that we have a solution.
I spent 14 days on a properly working load balancing and it still doesn't work.
Very frustrating.
That is not an advertisement for Mikrotik, do something about it so that many people will be happy.
I already sent several supout.rif but I have not seen a solution.
Mikrotik people start with the load balancing and failover debug please.
Re: v6.44.1 [stable] is released!
Posted: Sat Mar 16, 2019 5:48 pm
by Chupaka
What tutorials? We're not telepathists. More examples, please.
Re: v6.44.1 [stable] is released!
Posted: Sat Mar 16, 2019 6:13 pm
by eddieb
Is it possible to stay on the topic ? So, just what is in the changelog for this release.
If it is NOT in the changelog, it is NOT in this release. Please open a separate topic if needed.
Re: v6.44.1 [stable] is released!
Posted: Sat Mar 16, 2019 7:39 pm
by Ansy
Can't upgrade one of my
hAP lite from
6.44 to
6.44.1 --
"not enough space for upgrade" 
Files are empty, all modules are disabled (
system is active only), 14.3MB free RAM.
Configuration is based on static IP (two routes for failover), 10 default firewall
filter rules,
masquerade and one
raw against DNS attacks, SNTP, DNS cache 512K... no RAM-eating features.
How can I get
minimal smips package without all that modules? Or only
netinstall can help me?
Three the same
hAP lite devices with more lite configurations upgraded fine or almost fine after disabling some modules (
security, ipv6, advanced-tools), but not this one.
May be some invisible garbage files eat the memory? How can I check and fix it?
Re: v6.44.1 [stable] is released!
Posted: Sat Mar 16, 2019 9:46 pm
by pe1chl
Try to upgrade immediately after a reboot (before running lots of traffic through it).
When that does not work, export and backup the config and netinstall.
Re: v6.44.1 [stable] is released!
Posted: Sat Mar 16, 2019 10:07 pm
by Chupaka
Can't upgrade one of my
hAP lite from
6.44 to
6.44.1 --
"not enough space for upgrade"
Files are empty, all modules are disabled (
system is active only), 14.3MB free RAM.
But how much HDD space is free? That's what's used for upgrade in hAP Lite.
Also, disabling packages does not free up HDD space. Uninstall it instead of disabling.
Re: v6.44.1 [stable] is released!
Posted: Sat Mar 16, 2019 10:26 pm
by mkx
Also, disabling packages does not free up HDD space. Uninstall it instead of disabling.
Unfortunately it's not possible to un-install bundled packages ... To be able to do that one has to perform upgrade by manually uploading only needed packages from "Extra packages".
Re: v6.44.1 [stable] is released!
Posted: Sun Mar 17, 2019 2:08 am
by lucidnx
Updated all my devices from 6.44 to 6.44.1 thru dude, no problems
ipsec site-to-site run fine
l2tp-ipsec roadwarrior dailin works fine
Eddie
Can you show your config? I am unable to get windows clients for l2tp ipsec to work... it's lost somewhere in phase1 or 2
Re: v6.44.1 [stable] is released!
Posted: Sun Mar 17, 2019 9:38 am
by BartoszP
After upgrade to 6.44.1 on RB962 GRE+IPSec stopped working when connected to 6.44 on the other side. After downgrade to 6.44 back on-line.
Re: v6.44.1 [stable] is released!
Posted: Sun Mar 17, 2019 3:45 pm
by plisken
What tutorials? We're not telepathists. More examples, please.
@Chupaka, see this topic and you know without telepathie
viewtopic.php?f=2&t=145970&e=1&view=unread#unread
Re: v6.44.1 [stable] is released!
Posted: Mon Mar 18, 2019 1:34 am
by bradg
Unable to upgrade from v6.43.2 to v6.44.1 on wAP 60G (arm). Log output after reboot shows:
jan/01 18:13:50 system,info installed system-6.44.1
jan/01 18:13:50 system,info installed (disabled) tr069-client-6.44.1
jan/01 18:13:50 system,info installed wireless@-6.44.1
jan/01 18:13:50 system,info installed (disabled) advanced-tools-6.44.1
jan/01 18:13:50 system,info installed (disabled) calea-6.44.1
jan/01 18:13:50 system,info installed (disabled) dhcp-6.44.1
jan/01 18:13:50 system,info installed (disabled) hotspot-6.44.1
jan/01 18:13:50 system,info installed (disabled) ipv6-6.44.1
jan/01 18:13:50 system,info installed (disabled) mpls-6.44.1
jan/01 18:13:50 system,info installed (disabled) multicast-6.44.1
jan/01 18:13:50 system,info installed (disabled) ntp-6.44.1
jan/01 18:13:50 system,info installed (disabled) openflow-6.44.1
jan/01 18:13:50 system,info installed (disabled) ppp-6.44.1
jan/01 18:13:50 system,info installed (disabled) routing-6.44.1
jan/01 18:13:50 system,error can not install security-6.44.1: dhcp-6.44.1 is not installed, but is required
jan/01 18:13:50 system,info router rebooted
Excluding security package allows the remainder of the packages to be installed, but after reboot, security package still cannot be installed separately as a workaround - same error.
Re: v6.44.1 [stable] is released!
Posted: Mon Mar 18, 2019 1:49 am
by R1CH
Do you really need all those packages? You are likely out of space since the device only has 16MB flash.
Re: v6.44.1 [stable] is released!
Posted: Mon Mar 18, 2019 1:51 am
by yottabit
Also, in the release notes, security now depends on dhcp. Maybe having DHCP package disabled is causing the problem. You should remove all of those extra packages that you have disabled.
Sent from my Pixel 3 using Tapatalk
Re: v6.44.1 [stable] is released!
Posted: Mon Mar 18, 2019 2:14 am
by LeftyTs
Latest release, I was forced to re-enable dhcp package almost everywhere because of many errors errors like those.
Re: v6.44.1 [stable] is released!
Posted: Mon Mar 18, 2019 10:00 am
by ofer
3xHAC AC were updated from 6.44 to 6.44.1 no unexpected issues.
Thanks!
Re: v6.44.1 [stable] is released!
Posted: Mon Mar 18, 2019 6:42 pm
by gta
Updated all my devices from 6.44 to 6.44.1 thru dude, no problems
ipsec site-to-site run fine
l2tp-ipsec roadwarrior dailin works fine
Eddie
Can you show your config? I am unable to get windows clients for l2tp ipsec to work... it's lost somewhere in phase1 or 2
For me, windows l2tp ipsec client also stopped working, but I did not update my router (still on 6.44). I think it may be associated with installation of March windows 10 patches; the VPN worked before they installed last week.
Re: v6.44.1 [stable] is released!
Posted: Tue Mar 19, 2019 2:38 am
by bbs2web
MAC telnet broken in 6.44.1, appears to be when router has multiple interfaces.
Problem on all routers we've upgraded to 6.44.1 whilst 6.44 worked perfectly.
We'll need to lab this, to provide more granular detail...
Re: v6.44.1 [stable] is released!
Posted: Tue Mar 19, 2019 10:10 am
by LeftyTs
Updated all my devices from 6.44 to 6.44.1 thru dude, no problems
ipsec site-to-site run fine
l2tp-ipsec roadwarrior dailin works fine
Eddie
Can you show your config? I am unable to get windows clients for l2tp ipsec to work... it's lost somewhere in phase1 or 2
For me, windows l2tp ipsec client also stopped working, but I did not update my router (still on 6.44). I think it may be associated with installation of March windows 10 patches; the VPN worked before they installed last week.
Windows 7 with all updates works fine here with 6.44.1
Re: v6.44.1 [stable] is released!
Posted: Tue Mar 19, 2019 3:22 pm
by bratislav
Can't upgrade one of my
hAP lite from
6.44 to
6.44.1 --
"not enough space for upgrade"
Files are empty, all modules are disabled (
system is active only), 14.3MB free RAM.
But how much HDD space is free? That's what's used for upgrade in hAP Lite.
Also, disabling packages does not free up HDD space. Uninstall it instead of disabling.
Are you sure about that? As far as I know on routers like hAP lite RAM is used for storing upgrade files ...
As can be seen when we print resources with no update files
[admin@MikroTik] > file print
# NAME TYPE SIZE CREATION-TIME
0 flash disk jan/01/1970 01:00:05
1 flash/skins directory jan/01/1970 01:00:01
2 flash/pub directory jan/02/1970 01:33:40
[admin@MikroTik] > system resource print
uptime: 2d5h45m26s
version: 6.42.12 (long-term)
build-time: Feb/12/2019 08:23:13
factory-software: 6.29.1
free-memory: 41.7MiB
total-memory: 64.0MiB
cpu: MIPS 24Kc V7.4
cpu-count: 1
cpu-frequency: 650MHz
cpu-load: 5%
free-hdd-space: 4688.0KiB
total-hdd-space: 16.0MiB
write-sect-since-reboot: 807
write-sect-total: 95645
bad-blocks: 0%
architecture-name: mipsbe
board-name: hAP ac lite
platform: MikroTik
[admin@MikroTik] > file print
# NAME TYPE SIZE CREATION-TIME
0 flash disk jan/01/1970 01:00:05
1 routeros-mipsbe-6.42.7.npk package 10.3MiB mar/19/2019 14:11:46
2 flash/skins directory jan/01/1970 01:00:01
3 flash/pub directory jan/02/1970 01:33:40
[admin@MikroTik] > system resource print
uptime: 2d5h42m47s
version: 6.42.12 (long-term)
build-time: Feb/12/2019 08:23:13
factory-software: 6.29.1
free-memory: 31.4MiB
total-memory: 64.0MiB
cpu: MIPS 24Kc V7.4
cpu-count: 1
cpu-frequency: 650MHz
cpu-load: 8%
free-hdd-space: 4688.0KiB
total-hdd-space: 16.0MiB
write-sect-since-reboot: 807
write-sect-total: 95645
bad-blocks: 0%
architecture-name: mipsbe
board-name: hAP ac lite
platform: MikroTik
And after we upload upgrade files the only thing that changes is RAM usage, not to mention that there would be no room for 10.3MiB file on free-hdd-space: 4688.0KiB ...
Re: v6.44.1 [stable] is released!
Posted: Tue Mar 19, 2019 8:52 pm
by bbs2web
6.44.1 does not make it possible to stop MikroTik neighbour discovery announcements.
Winbox shows settings from 6.44 but advertisements are still broadcast and export config contradicts Winbox:
#> /ip neighbor discovery-settings set discover-interface-list=!external
#> /ip neighbor export
/ip neighbor discovery-settings set discover-interface-list=external
Export config does not retain negative expression...
Re: v6.44.1 [stable] is released!
Posted: Tue Mar 19, 2019 9:04 pm
by mada3k
MAC telnet broken in 6.44.1, appears to be when router has multiple interfaces.
Problem on all routers we've upgraded to 6.44.1 whilst 6.44 worked perfectly.
We'll need to lab this, to provide more granular detail...
Thats worrying, But I can't confirm this at home
[xxxxxxxx@rba] > /ip neighbor pr
# INTERFACE ADDRESS MAC-ADDRESS IDENTITY VERSION BOARD
0 eth1 fe80::ce2d:e0ff:fe07:1f5e CC:2D:E0:07:1F:5E rbb 6.44.1 ... RB750Gr3
[xxxxxxxx@rba] > /tool mac-telnet CC:2D:E0:07:1F:5E
Login: xxxxxxxx
Password:
Trying CC:2D:E0:07:1F:5E...
Connected to CC:2D:E0:07:1F:5E
MMM MMM KKK TTTTTTTTTTT KKK
MMMM MMMM KKK TTTTTTTTTTT KKK
MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK
MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK
MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK
MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK
MikroTik RouterOS 6.44.1 (c) 1999-2019 http://www.mikrotik.com/
[?] Gives the list of available commands
command [?] Gives help on the command and list of arguments
[Tab] Completes the command/word. If the input is ambiguous,
a second [Tab] gives possible options
/ Move up to base level
.. Move up one level
/command Use command at the base level
[xxxxxxxx@rbb] >
Re: v6.44.1 [stable] is released!
Posted: Tue Mar 19, 2019 10:09 pm
by LeftyTs
MAC telnet broken in 6.44.1, appears to be when router has multiple interfaces.
Problem on all routers we've upgraded to 6.44.1 whilst 6.44 worked perfectly.
We'll need to lab this, to provide more granular detail...
Thats worrying, But I can't confirm this at home
[xxxxxxxx@rba] > /ip neighbor pr
# INTERFACE ADDRESS MAC-ADDRESS IDENTITY VERSION BOARD
0 eth1 fe80::ce2d:e0ff:fe07:1f5e CC:2D:E0:07:1F:5E rbb 6.44.1 ... RB750Gr3
[xxxxxxxx@rba] > /tool mac-telnet CC:2D:E0:07:1F:5E
Login: xxxxxxxx
Password:
Trying CC:2D:E0:07:1F:5E...
Connected to CC:2D:E0:07:1F:5E
MMM MMM KKK TTTTTTTTTTT KKK
MMMM MMMM KKK TTTTTTTTTTT KKK
MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK
MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK
MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK
MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK
MikroTik RouterOS 6.44.1 (c) 1999-2019 http://www.mikrotik.com/
[?] Gives the list of available commands
command [?] Gives help on the command and list of arguments
[Tab] Completes the command/word. If the input is ambiguous,
a second [Tab] gives possible options
/ Move up to base level
.. Move up one level
/command Use command at the base level
[xxxxxxxx@rbb] >
Works fine here also without issues in all routers and interfaces so far.
Re: v6.44.1 [stable] is released!
Posted: Wed Mar 20, 2019 1:01 am
by lucidnx
Updated all my devices from 6.44 to 6.44.1 thru dude, no problems
ipsec site-to-site run fine
l2tp-ipsec roadwarrior dailin works fine
Eddie
Can you show your config? I am unable to get windows clients for l2tp ipsec to work... it's lost somewhere in phase1 or 2
For me, windows l2tp ipsec client also stopped working, but I did not update my router (still on 6.44). I think it may be associated with installation of March windows 10 patches; the VPN worked before they installed last week.
Windows 7 with all updates works fine here with 6.44.1
found it!
probably windows is not properly detecting nat, there is registry to force windows to assume both client and server is behind NAT..
reg add HKLM\SYSTEM\CurrentControlSet\Services\PolicyAgent /v AssumeUDPEncapsulationContextOnSendRule /t REG_DWORD /d 0x2 /f
0 - no nat
1 - server behind nat
2 - both
Re: v6.44.1 [stable] is released!
Posted: Wed Mar 20, 2019 10:37 am
by Chupaka
Are you sure about that? As far as I know on routers like hAP lite RAM is used for storing upgrade files ...
As can be seen when we print resources with no update files
[admin@MikroTik] > file print
# NAME TYPE SIZE CREATION-TIME
0 flash disk jan/01/1970 01:00:05
1 flash/skins directory jan/01/1970 01:00:01
2 flash/pub directory jan/02/1970 01:33:40
[admin@MikroTik] > system resource print
uptime: 2d5h45m26s
version: 6.42.12 (long-term)
build-time: Feb/12/2019 08:23:13
factory-software: 6.29.1
free-memory: 41.7MiB
total-memory: 64.0MiB
cpu: MIPS 24Kc V7.4
cpu-count: 1
cpu-frequency: 650MHz
cpu-load: 5%
free-hdd-space: 4688.0KiB
total-hdd-space: 16.0MiB
write-sect-since-reboot: 807
write-sect-total: 95645
bad-blocks: 0%
architecture-name: mipsbe
board-name: hAP ac lite
platform: MikroTik
[admin@MikroTik] > file print
# NAME TYPE SIZE CREATION-TIME
0 flash disk jan/01/1970 01:00:05
1 routeros-mipsbe-6.42.7.npk package 10.3MiB mar/19/2019 14:11:46
2 flash/skins directory jan/01/1970 01:00:01
3 flash/pub directory jan/02/1970 01:33:40
[admin@MikroTik] > system resource print
uptime: 2d5h42m47s
version: 6.42.12 (long-term)
build-time: Feb/12/2019 08:23:13
factory-software: 6.29.1
free-memory: 31.4MiB
total-memory: 64.0MiB
cpu: MIPS 24Kc V7.4
cpu-count: 1
cpu-frequency: 650MHz
cpu-load: 8%
free-hdd-space: 4688.0KiB
total-hdd-space: 16.0MiB
write-sect-since-reboot: 807
write-sect-total: 95645
bad-blocks: 0%
architecture-name: mipsbe
board-name: hAP ac lite
platform: MikroTik
And after we upload upgrade files the only thing that changes is RAM usage, not to mention that there would be no room for 10.3MiB file on free-hdd-space: 4688.0KiB ...
Yep, but you have hAP AC Lite, not hAP Lite. In hAP Lite, there's no "flash" dir and only 32M RAM (6M free for me - definitely not enough to keep an upgrade files).
Re: v6.44.1 [stable] is released!
Posted: Wed Mar 20, 2019 11:05 am
by pe1chl
probably windows is not properly detecting nat, there is registry to force windows to assume both client and server is behind NAT..
reg add HKLM\SYSTEM\CurrentControlSet\Services\PolicyAgent /v AssumeUDPEncapsulationContextOnSendRule /t REG_DWORD /d 0x2 /f
0 - no nat
1 - server behind nat
2 - both
It would be nice when RouterOS had some setting to force UDP encapsulation without NAT-detection too!
The "NAT traversal" checkmark in Profiles is only enabling the autodetection, there could be another setting in Peers that forces it.
(e.g. for networks that do not have NAT but are not transparent for ESP/AH only for TCP and UDP)
Re: v6.44.1 [stable] is released!
Posted: Thu Mar 21, 2019 8:19 am
by ssbaksa
MAC telnet broken in 6.44.1, appears to be when router has multiple interfaces.
Problem on all routers we've upgraded to 6.44.1 whilst 6.44 worked perfectly.
We'll need to lab this, to provide more granular detail...
I didn't try MAC telnet but ... I have an old RB411 which I use for testing different setups. After upgrading it to 6.44.1 all worked fine. Then it was time to clear all configuration from it to build some test environment from scratch. After reboot - no MAC connectivity at all using Winbox. It wasn't shown in neighbors at all. Luckily I am old school guy and there is always an serial cable around. That worked and after adding IP to Ethernet port MAC connectivity was up again.
Very strange!
Re: v6.44.1 [stable] is released!
Posted: Thu Mar 21, 2019 11:10 am
by ISPIE001
There is a problem with 6.44 and 6.44.1 with Radius servers - on NAS routers after around 24hours, we get radius timeouts, where PPP users are unable to authenticate. The only solution is to reboot the router.
We have seen this problem on both 6.44 and 6.44.1 and have downgraded these routers to 6.43.13.
I do not know if this issue is present or not in the 6.43 releases, as everything we had upgraded had been in the 6.42 strain.
BUT if you have radius authentication for clients, do not upgrade to 6.44.x
Re: v6.44.1 [stable] is released!
Posted: Fri Mar 22, 2019 1:27 am
by indnti
Upgrade CCR1016-12G. We have massive packet loss on an IPSEC connection. The bigger the packet size, the more packets are lost. - up to 45%.
Downgrading to 6.44 solves the Problem !!!
Re: v6.44.1 [stable] is released!
Posted: Fri Mar 22, 2019 10:49 am
by pe1chl
Downgrading to 6.44 solves the Problem !!!
Did you also try a reboot before downgrade?
Re: v6.44.1 [stable] is released!
Posted: Sat Mar 23, 2019 12:38 am
by bbs2web
This is definitely an issue with 6.44.1...
I unfortunately haven't had an opportunity to distil this yet but have a client's router on which this problem also occurs with a far simpler setup than our own.
Presume it's related to bond interfaces, when they interface via a switch...
MAC telnet broken in 6.44.1, appears to be when router has multiple interfaces.
Re: v6.44.1 [stable] is released!
Posted: Mon Mar 25, 2019 12:21 am
by karo84
Hello.
After updating to 6.44.1 everything was OK. But in some days certificates for ipsec had been expired and I had to add new certificates. So I can not connect to my router now. Getting "ipsec,error identity not found for peer:". Before this I was connecting from Iphone and from Windows 10.
I have tried all combinations in ipsec identifier menu. Nothing helped.
Is there any ideas? (/sys routerboard print
routerboard: yes
model: 2011UiAS-2HnD
serial-number: 569404965A09
firmware-type: ar9344
factory-firmware: 3.19
current-firmware: 6.44
upgrade-firmware: 6.44.1
)
Thanks
Re: v6.44.1 [stable] is released!
Posted: Mon Mar 25, 2019 8:06 am
by tesme33
Hi
just upgraded my CCR1009 and a hAP Lite. Up to now no problems.
OS and firmware upgraded.
But the config is quite simple.
Yours
Re: v6.44.1 [stable] is released!
Posted: Tue Mar 26, 2019 3:57 pm
by Anastasia
Yep, but you have hAP AC Lite, not hAP Lite. In hAP Lite, there's no "flash" dir and only 32M RAM (6M free for me - definitely not enough to keep an upgrade files).
Нi!
You should try online upgrade (delete all what you can from Files + 15-16 MB should be in RAM) - and it should work.
1) System => Packages => Check For Updates
2) Download&Upgrade (+reboot)
3) System => Routerboard. Compare Current Firmware and Upgrade Firmware. Click Upgrade.
Here is article in russian
https://asp24.ru/mikrotik/obnovlenie-ro ... -mikrotik/
Re: v6.44.1 [stable] is released!
Posted: Fri Mar 29, 2019 4:12 pm
by igogo56136
Hello. On the RB1100AHx2 Mikrotik Firmware 6.43, the QOS DSCP HTB was configured according to the instruction
https://wiki.mikrotik.com/wiki/DSCP_based_QoS_with_HTB. Internet access was through PPPoE configured was on ether1. Everything worked. The provider has changed the settings and now the trunk-port comes to ether1 with VLAN 130 (Internet ivlan130) and VLAN 120 (L2 communication channel with another network). Updated to 6.44.1. I migrated the DSCP to the new interface ivlan130. I stopped showing traffic in Queues - Queue tree (Avg Rate 0, Bytes 0 and so on) Tell me if QoS is working or am I doing something wrong? sorry google translate =)
Re: v6.44.1 [stable] is released!
Posted: Fri Mar 29, 2019 8:47 pm
by LeoCombes
We try 6.44.1 in CCR1009 and 1100AHx2.
DHCP server fails giving IP to clients, apparently when relay is used.
DHCP leases list fill completelly, all with mac-address field '00: 00: 00: 00: 00: 00 ', and then complains with a message like' ip pool is empty '. All IPs in pool are assigned to mac-address '00: 00: 00: 00: 00: 00 'and any client receive no IP address.
The configuration is:
/ ip dhcp-server
add address-pool = "private IPs" bootp-lease-time = lease-time bootp-support = dynamic disabled = no interface = ether4 lease-time = 12h name = "customers" relay = 172.16.2.1
In both routers, back to the 6.42.10 fix the problem. No other intermediate versions are been tested.
Re: v6.44.1 [stable] is released!
Posted: Sat Mar 30, 2019 7:21 am
by gdelacruz
unfortunately my MT is not upgrading to 6.44 from 6.43.12.
i am using the upgrade tool from winbox. downloading and reboot but it does not change at all...
pls. advise .. using RB952Ui-5ac2nD..
thanks
Re: v6.44.1 [stable] is released!
Posted: Sat Mar 30, 2019 8:28 am
by uldise
unfortunately my MT is not upgrading to 6.44 from 6.43.12.
i am using the upgrade tool from winbox. downloading and reboot but it does not change at all...
pls. advise .. using RB952Ui-5ac2nD..
thanks
you just need to hit Downgrade button on System/packages
Re: v6.44.1 [stable] is released!
Posted: Sat Mar 30, 2019 3:14 pm
by sponge
after upgrading 2 of my APs to v6.44.1 stable I am facing a problem with rx, bandwidth test shows very high tx and 0 rx, anyone facing the same issue ? any solutions ?
Re: v6.44.1 [stable] is released!
Posted: Sat Mar 30, 2019 3:16 pm
by CZFan
unfortunately my MT is not upgrading to 6.44 from 6.43.12.
i am using the upgrade tool from winbox. downloading and reboot but it does not change at all...
pls. advise .. using RB952Ui-5ac2nD..
thanks
Having the same problem on 1 device, trying to upgrade from 6.43.8 to 6.44.1, it downloads it, reboots, and then still on 6.43.8
Re: v6.44.1 [stable] is released!
Posted: Sat Mar 30, 2019 3:46 pm
by mkx
@CZFan, @gdelacruz: is there anything in the log about upgrading (or its failure)?
Re: v6.44.1 [stable] is released!
Posted: Sat Mar 30, 2019 11:59 pm
by CZFan
@CZFan, @gdelacruz: is there anything in the log about upgrading (or its failure)?
When I try to uninstall the packages that are disabled, I get error, cant uninstall bundled package
Have over 1000 of these devices deployed at 1 client only
Log info after trying to upgrade:
23:46:30 system,info installed routeros-smips-6.44.1
23:46:30 system,info installed tr069-client-6.44.1
23:46:30 system,error not enough space for upgrade
23:46:31 system,info router rebooted
/file pri:
# NAME TYPE SIZE CREATION-TIME
0 routeros-smips-6.44.1.npk package 7.3MiB mar/30/2019 23:46:25
1 skins directory jan/01/1970 02:00:01
2 tr069-client-6.44.1-smips.npk package 108.1KiB mar/30/2019 23:46:25
/sys reso pri:
uptime: 6m28s
version: 6.43.8 (stable)
build-time: Dec/21/2018 07:10:42
factory-software: 6.38
free-memory: 7.7MiB
total-memory: 32.0MiB
cpu: MIPS 24Kc V7.4
cpu-count: 1
cpu-frequency: 650MHz
cpu-load: 1%
free-hdd-space: 16.0KiB
total-hdd-space: 16.0MiB
write-sect-since-reboot: 608
write-sect-total: 99506
bad-blocks: 0%
architecture-name: smips
board-name: hAP lite
platform: MikroTik
Flags: X - disabled
# NAME VERSION SCHEDULED
0 tr069-client 6.43.8
1 routeros-smips 6.43.8
2 system 6.43.8
3 X ipv6 6.43.8
4 wireless 6.43.8
5 X hotspot 6.43.8
6 dhcp 6.43.8
7 X mpls 6.43.8
8 routing 6.43.8
9 X ppp 6.43.8
10 security 6.43.8
11 advanced-tools 6.43.8
Re: v6.44.1 [stable] is released!
Posted: Sun Mar 31, 2019 12:10 am
by osc86
uninstall tr069 package, remove everything from /files, upgrade only routeros, after suiccessful upgrade install tr069 again
Re: v6.44.1 [stable] is released!
Posted: Sun Mar 31, 2019 12:18 am
by CZFan
uninstall tr069 package, remove everything from /files, upgrade only routeros, after suiccessful upgrade install tr069 again
Yes, if it was a device at my home, no issues, but now I must go do that on over 1000 devices at client site?
WTF is it even necessary to do that, I am a patient person, been a MT "evangelist" in all I do, but MT is starting to embarrass me on every corner now and my patience is starting to wear thin now.
Plus, I read the other day that NAND pricing has dropped seriously last year or so, so why are we sitting with &^%%$& 16MB of NANDs, MT starting to limit us?????
Re: v6.44.1 [stable] is released!
Posted: Sun Mar 31, 2019 12:37 am
by osc86
so why are we sitting with &^%%$& 16MB of NANDs
I agree, this is ridiculous
Re: v6.44.1 [stable] is released!
Posted: Sun Mar 31, 2019 10:36 am
by mkx
It is possible to covert from "bundle" package to individual packages ... grab extra packages archive from download site, then extract only packages needed (at least system, probably security and dhcp ... security is needed for ssh access and dhcp is dependency for security), upload them to router and reboot the router. This way the disabled packages won't use up NAND space ...
Re: v6.44.1 [stable] is released!
Posted: Sun Mar 31, 2019 10:17 pm
by pe1chl
"bundle" package should be phased out by MikroTik!
It did not have any advantages and it has disadvantages when having small flash space.
Just change the next update so that it will load individual packages (only those that are present) the next time.
And of course install those individual packages at installation.
I always convert to individual packages for the first update after buying, but it is extra work because you have to download
the .zip and extract only the needed packages, instead of simply clicking "download&upgrade" in the package menu.
Re: v6.44.1 [stable] is released!
Posted: Mon Apr 01, 2019 1:43 am
by CZFan
Thx @mkx, @pe1chl for the info.
Have over 1000 of these deployed in user homes (FTTx Deployment), so if things go wrong, not easy to get physical access to these plus user / client downtime.
There was a time when I still had hair, when all jumped ship from Novell (had a very soft spot for Novell) to MS. At the time, I decided to do both, but keep focusing on Novell, re-certifying in Novell, selling Novell, etc, just hope I am not making same mistake here...
I am just a bit annoyed at the moment and will get over it, info you provided is much appreciated, thx again, so you learn every day....
Re: v6.44.1 [stable] is released!
Posted: Mon Apr 01, 2019 4:42 pm
by pe1chl
Of course you should never upgrade all those 1000 in one pass of some magic script.
First try it on a couple of routers.
I never had issues moving from bundle package to separate packages during an upgrade!
Just login to the router, see in /system packages what packages are installed (and enabled), upload only
those packages (extracted from the all-packages zipfile for that architecture) of the wanted new version,
and do a reboot. After the reboot, login to the router and check that the new version packages have installed
without error (look at the top of the logs).
Now there should be more free space.
When you have 1000 of those deployed, I presume you have some test "sites" or local routers where you
can test such things before deploying everywhere. When you manage the routers yourself and know that
they are all the same, you can blindly upload the correct set of packages. When you have packages that
you are sure you are not using (like mpls, hotspot) you can disable them before doing the above and gain
even more space. This may also be true for packages like ppp and security but be careful, you may have
unexpected dependencies on those.
Re: v6.44.1 [stable] is released!
Posted: Mon Apr 01, 2019 10:57 pm
by pe1chl
I'm not completely sure when this problem was introduced, but I find that the "distance" specification in the advanced settings for Wireless does not work correctly.
The distance given when dynamic mode is selected is higher than the actual distance (in my case for an 8.3 kilometer link it says 11 kilometer) and when a fixed value
is given that is "too low" (in this case when I specified 9km) the resulting TX CCQ is very low.
Re: v6.44.1 [stable] is released!
Posted: Tue Apr 02, 2019 11:47 am
by hhoeth
I'm running ovpn-client on my MT devices and the openvpn server on a Debian box. After upgrading from 43.x to 44.1 I get lots of "IP packet with unknown IP version=0 seen" in my server logs. I've solved this by downgrading to 43.13 now, but I hope this gets fixed in stable.
Re: v6.44.1 [stable] is released! - URGENT
Posted: Tue Apr 02, 2019 11:00 pm
by mativcp
After upgrade to 6.44.1 (Stable) CCR1009-7G-1C-1S+ STOP WORKINKG
All routes got deleted and there is not posible way to add routes, manually or by ip addresses added
The only connection method was by mac
PPP conections wont dial
(ATTACHED IMAGES)
With other errors,....The only way to fix it was to back to 6.43.13 (long term)
I dont remember the firmware i was when y upgrade (By automatic update), but after downgrade to 6.43.13 to fix it, try to update by copying NPK to files, and reboot, and same result, router broken with no functions.
Downgrade again and now is workling on 6.43.13.
Is hardware related issue with the new firmware?.
Is this a general error?.
Could not make the support.rif...did mikrotik found/is able to reproduce this error or is smthg particular with our router?.
ill wait answer...Thanks in advance
Re: v6.44.1 [stable] is released! - URGENT
Posted: Wed Apr 03, 2019 10:34 am
by Deantwo
@mativcp:
After upgrade to 6.44.1 (Stable) CCR1009-7G-1C-1S+ STOP WORKINKG
...
ill wait answer...Thanks in advance
As it says in the opening post, you need to make a supout while the issue is present and send it to MikroTik support along with your report.
RouterOS version 6.44.1 has been released in public "stable" channel!
...
If you experience version related issues, then please send supout file from your router to
support@mikrotik.com. File must be generated while router is not working as suspected or after some problem has appeared on device
Re: v6.44.1 [stable] is released!
Posted: Thu Apr 04, 2019 10:46 am
by emils
New version 6.44.2 has been released in stable RouterOS channel:
viewtopic.php?f=21&t=147277