آموزش میکروتیک

تغییر در نسخه های مختلف

این صفحه را با دوستان خود در شبکه‌های اجتماعی به اشتراک بگذارید.

در این صفحه تغییرات در نسخه های مختلف RouterOS میکروتیک را مشاهده خواهید کرد.

تغییرات در نسخه بعدی RouterOS

What's new in RouterOS v6.38rc37 (2016-Nov-25 11:03):
!) tr069-client - initial implementation (as separate package);
*) dude - (changes discussed here: http://forum.mikrotik.com/viewtopic.php?f=8&t=112599);
*) firewall - fixed filter rule "limit" parameter by making it visible again;
*) hAP lite - fixed bootup (broken in v6.38rc35);

Other changes since 6.37.2:

!) ipsec - added IKEv1 xauth user authentication with RADIUS "/ip ipsec user settings set xauth-use-radius=yes" (cli only);
!) ipsec - added IKEv2 EAP RADIUS passthrough authentication for responder (cli only);
!) ipsec - added IKEv2 experimental support with pre-shared-key and rsa-signature authentication methods (cli only);
!) ipsec - added support unique policy generation (cli only);
!) snmp - added basic get and walk functionality "/tool snmp-[get|walk]";
!) switch - added hardware stp functionality for CRS devices and small Atheros switch chips (http://wiki.mikrotik.com/wiki/Manual:CRS_examples#Spanning_Tree_Protocol);
!) winbox - now Winbox 3.7 is the minimum version that can connect to RouterOS;
*) arp - added local-proxy-arp feature;
*) bgp - do not match all prefixes tagged with community 0:0 by routing filters;
*) bonding - added "forced-mac-address" option;
*) bridge - fixed filter Ingress Priority option (broken in v6.38rc16);
*) bridge - fixed rare crash on bridge port removal;
*) capsman - added possibility to change arp, mtu, l2mtu values in datapath configuration;
*) ccr - added AHCI driver for Samsung XP941 128GB AHCI M.2;
*) certificates - added support for PKCS#12 export;
*) certificates - allow import multiple certs with the same key;
*) certificates - fixed crash when crl is removed while it is being fetched;
*) certificates - fixed trust chain update on local certificate revocation in programs using ssl;
*) certificates - if no name provided create certificate name automatically from certificate fields;
*) chr - fixed "/interface print";
*) chr - fixed crash on "/interface print" (introduced in 6.36.4);
*) chr - fixed crash on "/system shutdown" and "/system shutdown";
*) chr - fixed reboot;
*) crs - added comment ability in more switch menus;
*) crs - fixed rare kernel failure on switch reset (for example, reboot);
*) crs226 - fixed sfp-sfpplus1 link re-negotiation (broken in 6.37rc28/v6.37.1);
*) dhcp - fixed dhcp-client crash (introduced in 6.37rc14);
*) dhcp - fixed issue when dhcp-client was still possible on interfaces with "slave" flag and using slave interface MAC address;
*) dhcp - request dhcp options only if dhcp client is successfully added;
*) dhcp - show dhcp server as invalid and log an error when interface becomes a slave;
*) discovery - added LLDP support;
*) discovery - removed 6to4 tunnels from /ip neighbor discovery menu;
*) disk - fixed issue when disk was renamed after reboot on devices with flash disks;
*) dns - do not resolve incorrect addresses after changes made in static dns entries;
*) dns - improved static dns entry add speed when regexp is being used;
*) ethernet - added "k" and "M" unit support to Ethernet Bandwidth setting;
*) export - do not show interface comment in "/ip neighbor discovery" menu;
*) fastpath - fixed rare crash;
*) file - fixed file manager crash when file transfer gets cancelled;
*) firewall - added creation-time to address list entries;
*) firewall - fixed timeout option on address lists with domain name;
*) firewall - increased max size of connection tracking table to 1048576;
*) firewall - new faster "connection-limit" option implementation;
*) health - show power consumption on devices which has voltage and current monitor;
*) interface - changed loopback interface mtu to 1500;
*) interface - do not treat multiple zeros as single zero on name comparison;
*) interface - show link stats in "/interface print stats-detail" output;
*) ipsec - added ability to specify static IP address at send-dns option (CLI only);
*) ipsec - added ph2 accounting for each policy "/ip ipsec policy ph2-count" (cli only);
*) ipsec - allow to specify explicit split dns address;
*) ipsec - changed logging topic from error to debug when empty pfkey messages are received;
*) ipsec - don't generate unnecessary ah+esp policies;
*) ipsec - fixed generated policy lookup with ah+esp proposal;
*) ipsec - non passive peers will also establish SAs from policy without waiting for the first packet;
*) ipsec - send xauth password without trailing null;
*) led - fixed cAP 2nD stuck in dark mode all the time;
*) led - fixed dark mode for cAP2nD (http://wiki.mikrotik.com/wiki/Manual:System/LEDS#Leds_Setting);
*) log - fixed "System rebooted because of kernel failure" message to show after 1st crash reboot;
*) log - ignore email topic if action is email;
*) lte - added support for more Vodafone K4201-Z and ZTE MF90 modems;
*) lte - added support for PANTECH UML295;
*) lte - allow to execute concurrent info commands;
*) lte - fixed dwm-222 support;
*) lte - fixed init delay after power reset;
*) lte - fixed Pantech UML296 support;
*) lte - increased delay when setting sms send mode;
*) lte - return info data when all the fields are populated;
*) mipsbe - improved memory allocation on devices with nand when file transfer and tcp traffic processing is on progress;
*) mmips - fixed traffic accounting in "/interface" menu;
*) ospf - fixed route crash caused by memory corruption when there are multiple active interfaces;
*) ppp - significantly improved shutdown speed on servers with many active tunnels;
*) profiler - added ability to monitor cpu usage per core;
*) rb850Gx2 - fixed pcb temperature monitor if temperature was above 60C;
*) resolver - ignore cache entries if specific server is used;
*) routerboot - show log message if router CPU/RAM is overclocked;
*) script - increment run count value when script is executed from snmp;
*) smb - fixed crash on connect (introduced in 6.38rc1);
*) snmp - provide sinr in lte table;
*) ssh - fixed lost "/ip ssh" settings on upgrade from version older than 5.15;
*) system - reboot device on critical program crash;
*) tile - fixed rare kernel failure when IPv6 neighbor discovery packet is received;
*) traceroute - fixed crash when too many sessions are active;
*) traffic-flow - fixed flow sequence counter and length;
*) trafficgen - fixed crash when IPv6 traffic is processed;
*) trafficgen - fixed potential crash when very big frame is generated;
*) trafficgen - improved fastpath support;
*) tunnel - allow to force mtu value when actual-mtu is already the same;
*) tunnel - fixed transmit packets occasionally not going through fastpath;
*) tunnel - properly export keepalive value;
*) usb - fixed kernel failure when Nexus 6P device is removed;
*) users - added TikApp policy;
*) vlan - allow to add multiple vlans which name starts with same number and has same length;
*) webfig - fixed smaller than /24 ip address configuration (broken in v6.38rc3);
*) winbox - allow to run profiler from "/system resources" menu;
*) winbox - do not show hotspot user profile incoming and outgoing filters and marks as set if there is no value specified;
*) winbox - properly show VHT basic and supported rates in CAPsMAN;
*) winbox - recognise properly tcp in traffic-generator packet-template header type;
*) winbox - removed spare values from loop-protect menu;
*) winbox - show HT MCS tab if 2GHz-G/N band is used;
*) winbox - show primary and secondary ntp addresses as 0.0.0.0 if none are set;
*) wireless - added api command to report country-list (/interface/wireless/info/country-list);
*) wireless - added CRL checking for eap-tls;
*) wireless - fixed custom channel extension-channel appearance in console;
*) wireless - fixed rare kernel failure when connecting to nv2 access point with legacy rate select;
*) wireless - take in account channel width when returning supported channels;

 RouterOS v6.x

What's new in RouterOS v6.37.2 (2016-Nov-08 13:15):
Important note!!!
Dude client auto-upgrade to this version will not work. Use http://www.mikrotik.com/download for 6.37.2 client download/install.
It will be fixed in soon to be released v6.37.3

Changes since 6.37.1:

!) ethernet - optimized packet processing on low load when irq re-balance is not necessary;
!) fastpath - let one packet per second through slow path to properly update connection timeouts;
!) queues - significantly improved hashing algorithm in dynamic simple queue setups (fixes CPU load spikes on queue removal);
*) arm - improved watchdog reliability;
*) bonding - fixed 802.3ad load balancing over routed VLANs with fastpath enabled;
*) bonding - fixed mac address selection after upgrade;
*) crs - fixed port mirroring halt after L2MTU change;
*) dhcp - do not allow to create dhcp-server on slave interface;
*) ethernet - fixed interface speed reporting for x86 in log after reboot or if "disable-running-check=yes";
*) ethernet - fixed potential loopprotect crash;
*) export - fixed "/interface ethernet switch export" on some boards;
*) export - fixed CRS switch egress-vlan-tag export;
*) fastpath - fixed kernel failure when fastpath traffic goes into loop;
*) fastpath - improved connection tracking timeout updates;
*) firewall - do not allow to increase/decrease ttl and hop-limit by 0;
*) firewall - fixed "connection-state" value disappearance in rules that were created before v6.22;
*) firewall - fixed compact export (introduced in 6.37rc14);
*) firewall - improved "time" option (ranges like 22h-10h now are acceptable);
*) hotspot - fixed nat rule dst-port by making it visible again for Walled Garden ip return rules;
*) ipsec - changed logging topic from error to debug for ph2 transform mismatch messages;
*) ipv6 - increased default max-neighbor-entries value to 8192, same as ipv4;
*) mmips - improved watchdog reliability;
*) package - show minimal supported RouterOS version under "/system resource" menu if it is specified;
*) queue - fixed rare crash on statistic gathering in "/queue tree";
*) queue - improved "time" option (ranges like 22h-10h are now usable);
*) rb2011 - fixed crash on l2mtu changes;
*) sms - fixed crash after modem has failed to start;
*) ssl - fixed potential memory leak ( when using dude for example);
*) torch - fixed aggregate statistics appearance;
*) traffic-flow - fixed dst-port reporting if connection is not maintained by connection tracking;
*) userman - fixed memory leak on user limitation calculations;
*) winbox - added led settings menu;
*) winbox - fixed missing switch menu for mmips devices;

What's new in RouterOS v6.37.1 (2016-Sep-30 10:28):
!) package - fixed wireless package status after upgrade to 6.37 (extra reboot after upgrade is necessary);
!) ssl - fixed peer address/dns verification from certificate (affects sstp, fetch, capsman);
!) winbox - now Winbox 3.6 is the minimum version that can connect to RouterOS;
*) console - fixed typo in web-proxy (passthru to passhtrough);
*) dude - (changes discussed here: http://forum.mikrotik.com/viewtopic.php?f=8&t=112599);
*) export - do not show mac-address in export when it is not necessary;
*) firewall - fixed dynamic dummy firewall rules appearance in raw tables;
*) hotspot - fixed nat rule dst-port by making it visible again;
*) led - fixed default led settings for wAP2nDr2;
*) snmp - do not allow to execute script if user does not have write permission;
*) tile - do not reboot device after watchdog disable/enable;
*) userman - always re-fetch table data when switching between different menus;
*) userman - fixed timezone adjustment in reports;
*) webfig - fixed channel selection in check-for-update menu in Firefox;
*) winbox - added loop-protect settings;
*) winbox - added passthrough state to web-proxy;
*) winbox - allow to unset http-proxy field for sstp client;
*) winbox - do not show health menu on RB951-2n;
*) winbox - fixed typo in dhcpv6 relay (DCHP to DHCP);
*) winbox - show address expiration time in dhcp client list;
*) wireless - show DFS flag in country-info command output;

What's new in RouterOS v6.37 (2016-Sep-23 08:20):
--- IMPORTANT! WIRELESS PACKAGE CHANGES:

There will be only one "wireless" package starting from RouterOS v6.37.

--- IMPORTANT! DFS CHANGES:

DFS configuration in RouterOS has been redesigned, now device looks at specified country settings (/interface wireless info country-info), and applies corresponding DFS mode for each frequency range automatically, making dfs-mode setting unnecessary.

Please, check that your frequencies work with corresponding DFS settings before upgrade.

!) console - dfs-mode setting does not exist any more and all scripts with such setting will not be executed;
!) dude - (changes discussed here: viewtopic.php?f=8&t=110424);
!) dude - from now on dude will use winbox port and it will be changed automatically both in client loader and agent configuration;
!) ethernet - added new loop-protect feature for ethernet, vlan, eoip, eoipv6 interfaces, http://wiki.mikrotik.com/wiki/Manual:Loop_Protect ;
!) wireless - "wireless" package included in bundle "routeros" package;
!) wireless - "wireless-cm2" discontinued;
!) wireless - "wireless-rep" renamed to "wireless";
!) wireless - DFS option is removed, corresponding DFS mode for each frequency range applies automatically;
*) capsman - fixed kernel crash on cap while changing client-to-client forwarding;
*) capsman - report radio-name in registration table;
*) certificate - do not allow to remove certificate template while signing certificate;
*) console - hotspot setup show wrong certificate name;
*) defconf - fixed default configuration restore if virtual wireless interface were present;
*) defconf - fixed default configuration when wireless package is used;
*) defconf - using caps button now forces all wireless interfaces in caps mode;
*) dhcpv6 - improved interface status tracking;
*) dhcpv6 - reworked DHCP-PD server interface and route management;
*) dhcpv6 - update DUID when system-id changes (solves problem when cloned VM retains the same DUID);
*) dns - fixed crash when using regexp static dns entries;
*) ethernet - added support for LAN9514 ethernet dongle;
*) ethernet - allow to force mtu value when actual-mtu is already the same;
*) ethernet - fixed loop-protect on bridged ports;
*) ethernet - fixed never ending loop in CDP packet processing;
*) ethernet - fixed rare kernel failure on non-switch ethernet reset;
*) ethernet - rb44ge now have disabled-running-check=no by default;
*) firewall - added additional matchers for firewall raw rules;
*) firewall - fixed time based rules on time/timezone changes (again);
*) gps - always check NMEA checksum if available;
*) health - do not show psu and fan information for passive cooling devices;
*) hotspot - show comments from user menu also in active menu;
*) ipsec - fixed crash with enabled fragmentation;
*) ipsec - fixed dynamic policy not deleted on disconnect for nat-t peers;
*) ipsec - fixed fragmentation use negotiation;
*) ipsec - fixed kernel crash when sha512 was used;
*) ipv6 - fixed RA and RS processing on new interfaces after many interfaces have lost link during prolonged operation;
*) ipv6 - improved system responsiveness when ipv6 routes are frequently modified;
*) ipv6 - show multiple neighbors with the same address;
*) kvm - fix add/remove of disabled interfaces;
*) kvm - fixed guest crashing when using mtu bigger than 1504;
*) l2tp - fixed kernel failure when fastpath handles l2tp packets;
*) leds - added option to disable all leds on RBcAP2n;
*) lte - added ability to send/receive sms using '/tool sms';
*) lte - added dlink dwm-157 D, dwm-222 support;
*) lte - added huawei me909s variant;
*) lte - added initial deregistration only for bandrich modems;
*) lte - added logging for usb config switching;
*) lte - added Pantech UML295, Vodafone K4201-Z, ZTE MF823/MF831 support;
*) lte - added rndis for ZTE MF8xx;
*) lte - added support for more dlink dwm-222 configurations;
*) lte - added switch for Huawei K5160;
*) lte - added zte K5008-Z back;
*) lte - adjusted usb config for dlink dwm-157 D;
*) lte - fixed at chat condition storage;
*) lte - fixed band setting for sxt lte;
*) lte - fixed band unsetting;
*) lte - fixed default channels for dlink dwm-157;
*) lte - fixed ip activation when CREG (circuit switched) state remains in not registered state;
*) lte - fixed setting correct lte band for sxt lte;
*) lte - process initial state change to deregistred, when lockup occurs;
*) lte - reset if sms storage set fails;
*) mpls - fixed memory leak;
*) mpls - fixed vpls throughput issues caused by out-of-order packets;
*) ntp - fixed ntp server when local-clock used (like usb gps module);
*) partitions - added ability to add comments;
*) ppp - use default-route-distance when adding ipv6 default route;
*) ppp,lte - pin is now converted to string argument;
*) pppoe - fixed disconnects by idle timeout when fastpath is used;
*) quickset - added 2GHz-g/n band support;
*) quickset - fixed guest reporting in "home ap dual" mode;
*) quickset - fixed wireless frequency fields in "home ap dual" mode;
*) rb3011 - fixed rare occasions when router would hang while loading kernel;
*) routing - improved kernel performance in setups with large routing tables;
*) sfp - enabled eeprom printout in /interface ethernet monitor;
*) sfp - fixed initial eeprom reading on CCR1036-8G-2S+ and CCR1072-1G-8S+;
*) sfp - removed "sfp-rate-select" as command was not relevant to currently supported hardware;
*) sms - moved incorrectly logged message from async to gsm topic;
*) sms - report error when unsupported modem is being used;
*) snmp - added script table which executes script and returns it's output on get request;
*) snmp - require write permitions for script run table access;
*) snmp - skip forbidden oids on getnext completion;
*) sstp - allow to specify proxy by dns name;
*) sstp - now supports TLS_ECDHE algorithms;
*) supout - fixed bug that could cause enormous size supout.rif files;
*) supout - improved crash report generation for tile architecture;
*) switch - added comment field for CRS switch VLANs;
*) traffic-flow - allow ipv6 src address to be optional;
*) traffic-flow - fixed IPFIX packet timestamp;
*) traffic-flow - fixed IPFIX wrong flow sequence;
*) trafficgen - add per stream packet count setting;
*) trafficgen - show out-of-order packet counters in stats printouts;
*) tunnel - fixed communication via tunnel to router itself if fastpath was active;
*) tunnel - fixed ipv6 link-local address adding for gre;
*) tunnel - increased minimal MRRU to 1500 for PPP interfaces;
*) tunnel - ipv6 link-local address is now generated from tunnel local-address;
*) usb - added support for SMSC95XX USB Ethernet dongle on mipsbe;
*) usermanager - fixed rare crash on paypal payment;
*) users - fixed script policy checking against user policies when running scripts;
*) webfig - do not crash if radius server does not give out encryption keys;
*) webfig - fixed certificate signing;
*) winbox - added auto refresh for BFD neighbors;
*) winbox - added comment field support for switch vlan menu;
*) winbox - added default-authentication parameter for wireless station modes;
*) winbox - added src-address field for traffic-flow target;
*) winbox - adjust on-event field dynamically depending on window size;
*) winbox - adjusted allowed values for http-proxy field;
*) winbox - disabled MRRU by default for PPP interfaces;
*) winbox - display actual-mtu for tunnels in interfaces window;
*) winbox - fixed disconnect when no windows were opened for a while in unsecure mode;
*) winbox - fixed multiline read only fields not displaying new line characters;
*) winbox - fixed raw firewall showing jump targets from filter chains;
*) winbox - hide ethernet flow control settings for interfaces which does not support them;
*) winbox - removed health menu from devices that do not support it;
*) winbox - removed L2MTU field for PPP interfaces;
*) winbox - removed L2MTU field from PPP server binding settings;
*) winbox - removed unset button for L2MTU field;
*) winbox - show firmware-type in routerboard window;
*) wireless - display DFS flag in country info;
*) wireless - improved driver support for RB953, hAP ac, wAP ac;
*) wireless - send deauth to data frames in scan mode.
*) wireless - updated brazil country settings;

What's new in RouterOS v6.36.4 (2016-Oct-05 11:24):
!) ssl - fixed peer address/dns verification from certificate (affects sstp, fetch, capsman);
*) console - hotspot setup show wrong certificate name;
*) ethernet - added support for LAN9514 ethernet dongle;
*) ethernet - allow to force mtu value when actual-mtu is already the same;
*) firewall - fixed dynamic dummy firewall rules appearance in raw tables;
*) firewall - fixed time based rules on time/timezone changes (again);
*) hotspot - fixed nat rule dst-port by making it visible again;
*) ipsec - changed logging topic from error to debug for ph2 transform mismatch messages;
*) ipsec - fixed dynamic policy not deleted on disconnect for nat-t peers;
*) ipv6 - improved system responsiveness when ipv6 routes are frequently modified;
*) led - fixed default led settings for wAP2nDr2;
*) lte - added dlink dwm-157 D, dwm-222, Pantech UML295, Vodafone K4201-Z, ZTE MF823/MF831 support;
*) lte - added rndis for ZTE MF8xx;
*) lte - added ZTE K5008-Z back;
*) lte - fixed setting correct lte band for sxt lte;
*) mpls - fixed memory leak;
*) pppoe - fixed disconnects by idle timeout when fastpath is used;
*) rb3011 - fixed rare occasions when router would hang while loading kernel;
*) sstp - allow to specify proxy by dns name;
*) tile - do not reboot device after watchdog disable/enable;
*) traffic-flow - fixed dst-port reporting if connection is not maintained by connection tracking;
*) userman - always re-fetch table data when switching between different menus;
*) userman - fixed memory leak on user limitation calculations;
*) userman - fixed timezone adjustment in reports;
*) webfig - fixed certificate signing;
*) webfig - fixed channel selection in check-for-update menu in Firefox;
*) winbox - added auto refresh for BFD neighbors;
*) winbox - adjust on-event field dynamically depending on window size;
*) winbox - adjusted allowed values for http-proxy field;
*) winbox - allow to unset http-proxy field for sstp client;
*) winbox - fixed typo in dhcpv6 relay (DCHP to DHCP);
*) winbox - removed health menu from devices that do not support it;
*) winbox - removed unset button for L2MTU field;
*) wireless - show DFS flag in country-info command output;

What's new in RouterOS v6.36.3 (2016-Sep-05 08:09):
*) arp - fixed crash that caused Ethernet frames to go out via wrong interface;
*) fastpath - fixed kernel crash on interface disable/remove;
*) fetch - fixed bug with incomplete files in https mode;
*) ipsec - don't log authtype mismatch as critical;
*) ipsec - fixed xauth parameter printing in terminal;
*) pppoe - fixed kernel crash caused by dial-on-demand when used with fastpath;
*) pppoe - fixed master interface l2mtu check, could result in assumption that master interface can handle 14 byte bigger packet than it actually can (broken in 6.36);
*) simple queues - fixed issue which caused additional/unnecessary CPU load;
*) vlan - do not allow to add new vlan interface with mtu higher than l2mtu;
*) tile - fixed rare kernel crash when usb device is being attached;

What's new in RouterOS v6.36.2 (2016-Aug-22 12:54):
*) arm - show cpu frequency under resources menu;
*) capsman - fixed upgrade policy;
*) ccr/crs - fixed SFP+ interface ddmi info reporting function. Info is now refreshed on regular intervals;
*) conntrack - fixed ipv6 timeout display;
*) conntrack - fixed removing icmpv6 connections;
*) dns - avoid unnecessary dynamic server address saving in storage;
*) dns - allow to set query-server-timeout and query-total-timeout only greater than 0s;
*) dns - fixed lockup when dynamic dns server address 0.0.0.0 was received;
*) export - updated default values in /system routerboard settings menu;
*) partitions - fixed crash on repartition when there is not enough free space;
*) sstp - fixed disconnects on transmit for multicore systems;
*) switch - fixed configuration reload on CRS switches;
*) winbox - make queue tree default queue type default-small;

What's new in RouterOS v6.36.1 (2016-Aug-05 09:39):
*) address-list - allow DNS names with "_" symbol;
*) address-list - check for duplicates when domain name is used in address field;
*) bridge - fixed kernel failure when set-priority action was used in bridge firewall;
*) dns - avoid unnecessary static entry saving in storage;
*) email - increased time which email tool can spend while sending message;
*) export - removed unnecessary "log-prefix" on firewall export;
*) firewall - fixed time based rules on time/timezone changes;
*) log - logs loaded from disk after reboot didn't have correct topics;
*) lte - fixed access technology update;
*) ovpn - add special exception route for tunnel itself when using add-default-route;
*) ping - fixed freezing on "not running" interfaces;
*) resource - fixed free-memory reporting after disk eject;
*) snmp - fixed packet corruption when multiple trap-targets were used;
*) tile - fixed rare kernel crash when fastpath is being active;
*) traffic-flow - fixed kernel failure when traffic-flow target uses small mtu;
*) upnp - fixed nat rule dst-port by making it visible again;
*) upnp - updated to make it work with more UPnP implementations (for example, latest Skype);
*) vrrp - fixed transition to backup state when ipv6 mode and equal priorities are used;
*) webfig - allowed user password changing (broken in v6.36);
*) x86 - fixed crash when igmp-proxy interface becomes "not running" while passing traffic;

What's new in RouterOS v6.36 (2016-Jul-20 14:09):
*) arm - added Dude server support;
*) dude - (changes discussed here: http://forum.mikrotik.com/viewtopic.php?f=8&t=110428);
*) dude - server package is now made smaller. client side content upgrade is now removed from it and is downloaded straight from our cloud. So workstations on which client is used will require access to wan. Alternatively upgrade must be done by reinstalling the client on each new release;
*) firewall - added "/interface list" menu which allows to create list of interfaces which can be used as in/out-interface-list matcher in firewall and use as a filter in traffic-flow;
*) firewall - added pre-connection tracking filter - "raw" table, that allow to protect connection-tracking from unnecessary traffic;
*) firewall - allow to add domain name to address-lists (dynamic entries for resolved addresses will be added to specified list);
*) wireless - wireless-fp is discontinued, it needs to be uninstalled/disabled before upgrade;
*) address - allow multiple equal ip addresses to be added if neither or only one is enabled;
*) address-list - make "dynamic=yes" as read-only option;
*) arm - fixed kernel failure on low memory;
*) arp - added arp-timeout option per interface;
*) bonding - fixed 802.3ad load balancing mode over tunnels ;
*) bonding - fixed bonding primary slave assignment for ovpn interfaces after startup;
*) bonding - fixed crash on RoMON traffic transmit;
*) bonding - implemented l2mtu value == smallest slave interfaces l2mtu;
*) capsman - fixed crash when running over ovpn;
*) certificate - added automatic scep renewal delay after startup to avoid all requests accessing CA at the same time;
*) certificate - cancel pending renew when certificate becomes valid after date change;
*) certificate - display issuer and subject on check failure;
*) certificate - do not exit after card-verify;
*) certificate - force scep renewal on system clock updates;
*) chr - fixed CHR seeing its own system disk mounted as additional data disk;
*) clock - fixed time keeping for SXT ac, 911L, cAP, mAP lite, wAP;
*) clock - save current time to configuration once per day even if there are no time zone adjustments pending;
*) cloud - fixed export order;
*) console - fixed get false function;
*) console - show message time in echo log messages;
*) defconf - changed channel extension to 20/40/80mhz for all ac boards;
*) dhcp-pd - correct server listing for commands;
*) dhcp-server - fixed radius framed route addition after reboot on client renew;
*) dhcpv6-client - fixed ia lifetime validation when it is set by dhcpv6 client;
*) dhcpv6-relay - set packet link-address only when it is manually configured;
*) dhcpv6-server - fixed binding last-seen update;
*) disk - added support for Plextor PX-G128M6e(A) SSD on CCR1072;
*) email - fixed send from winbox;
*) email - removed subject and body length limit;
*) ethernet - fixed incorrect ether1 link speed after reboot on rb4xx series routers;
*) ethernet - fixed memory leak when setting interface without changing configuration;
*) fastpath - fixed kernel failure when fastpath handles packet with multicast dst-address;
*) fetch - support tls host name extension;
*) firewall - added udplite, dccp, sctp connection tracking helpers;
*) firewall - do not show disabled=no in export;
*) firewall - fixed spelling in built-in firewall commentary;
*) gps - fixed longitude seconds part;
*) health - fixed broken factory voltage calibration data for some hAP ac boards;
*) health - fixed incorrect voltage after reboot on RB2011UAS;
*) icmp - fixed kernel failure when icmp packet could not be processed on high load;
*) ippool6 - fixed crash on acquire when prefix length is equal with pool prefix length;
*) ipsec - add dead ph2 detection exception for windows msgid noncompliance with rfc;
*) ipsec - added dead ph2 reply detection;
*) ipsec - don't register temporary ph2 on dead list;
*) ipsec - fix initiator modecfg dynamic dns;
*) ipsec - fixed AH with SHA2;
*) ipsec - fixed checks before accessing ph1 nat options;
*) ipsec - fixed mode-config export;
*) ipsec - fixed route cache overflow when using ipsec with route cache disabled;
*) ipsec - fixed windows msgid check on x86 devices;
*) ipsec - show remote peer address in error messages when possible;
*) ipsec - store udp encapsulation type in proposal;
*) kernel - fixed possible kernel deadlock when Sierra USB mode is being used;
*) l2tp - fixed crash when rebooting or disabling l2tp while there are still active connections;
*) lcd - reduced lowest backlight-timeout value from 5m to 30s;
*) license - do not expire demo license right after fresh installation of x86;
*) log - added whole scep certificate chain print;
*) log - increase excessive multicast/broadcast warning threshold every time it is logged;
*) log - make logging process less aggressive on startup;
*) lte - added allow-roaming option for Huawei MU709, ME909s devices;
*) lte - added cinterion pls8 support;
*) lte - added support for Huawei E3531;
*) lte - added support for ZTE ZM8620;
*) lte - added use-peer-dns option (will work only combined with add-default-route);
*) lte - changed driver loading for class 2 usb rndis devices;
*) lte - display message in lte,error log if no response received;
*) lte - display message in lte,error log when PIN is required;
*) lte - fix crash on SXT LTE while resetting card while at high traffic;
*) lte - fixed access technology logging;
*) lte - fixed connection for Huawei without cell info;
*) lte - fixed modem init when pin request present;
*) lte - fixed modem network configuration version checks;
*) lte - fixed network-mode support after downgrade;
*) lte - Huawei MU609 must use latest firmware to work correctly;
*) lte - improved multiple same model modems identification;
*) lte - show uicc for Huawei modems;
*) lte - use only creg result codes as network status indications;
*) mesh - fixed crash when connection references a mesh network but it is not available any more;
*) modem - added support for Alcatel OneTouch X600;
*) modem - added support for Quectel EC21 and EC25;
*) modem - added support for SpeedUP SU-900U modem;
*) nand - improved nand refresh feature to enhance stored data integrity;
*) ovpn - enable perfect forwarding secrecy support by default;
*) ovpn - fixed compatibility with OpenVPN 2.3.11;
*) pppoe - allow to set MTU and MRU higher than 1500 for PPPoE;
*) pppoe - do not allow to send out bigger packets than l2mtu if mrru is provided;
*) proxy - limit max ram usage to 80% for tile and x86 devices;
*) queue - reset queue type on interfaces which default queue type changes to no-queue after upgrade;
*) rb2011 - fixed ether6-ether10 flapping when two ports from both switch chips are in the same bridge;
*) rb3011 - fixed port flapping on ether6-ether10;
*) rb3011 - fixed reset button functionality;
*) rb3011 - fixed usb driver load;
*) rb3011 - fixed usb storage mounting;
*) rb3011 - improved performance on high cpu usage;
*) route - added suppport for more than 8 bits of options;
*) route - fixed ospf by handling ipv6 encoded prefixes with stray bits;
*) sniffer - fixed ipv6 address matching;
*) snmp - fixed get function for snmp>=v2 when oid does not exist;
*) snmp - fixed interface stats branch from MikroTik MIB;
*) snmp - report current access technology and cell id for lte modems;
*) snmp - report ram memory as ram instead of other;
*) ssh - add rsa host key size parameter;
*) ssh-keygen - add rsa key size parameter;
*) ssl - do not exit while there still are active sessions;
*) ssl - fixed memory leak on ssl connect/disconnect (fetch, ovpn, etc.);
*) sstp - fixed dns name support in connect-to field if http-proxy is specified;
*) supout - erase panic data properly on Netinstall;
*) switch - fixed switch compact export;
*) timezone - updated timezone information from tzdata2016e release;
*) traffic-flow - added ipfix support (RFC5101 and RFC5102);
*) tunnel - added option to auto detect tunnel local-address;
*) tunnel - fixed rare crash by specifying minimal header length immediately at tunnel initialization;
*) upnp - fixed nat rule dst-port by making it visible again;
*) usb - I-tec U3GLAN3HUB usb hub/ethernet dongle now shows up correctly as ethernet interface;
*) usb - implement possibility to recognize usb hubs/ethernet-dongles (if usb hubs/ethernet-dongles are not recognized with this version - send supout.rif file);
*) userman - fixed crash on database upload;
*) userman - use ipnpb.paypal.com for payment verification;
*) wap-ac - fixed performance problems with 2.4GHz wireless (additional reboot after upgrade required);
*) webfig - do not allow to press OK or Apply if current configuration values are not loaded yet;
*) webfig - reduced refresh time for wireless registration table to 1 second;
*) winbox - added 2ghz-g/n band for wireless-rep;
*) winbox - added icons to bridge filter actions similar to ip firewall;
*) winbox - added support for ipv6 dhcp relay;
*) winbox - allow to reorder hotspot walled-garden & walled-garden-ip rules;
*) winbox - do not allow to specify vlan-mode=no-tag in capsman datapath config;
*) winbox - do not show filter for combined fields like bgp-vpn4 RD;
*) winbox - do not show mode setting for WDS interfaces;
*) winbox - fixed crash on disconnect in secure mode;
*) winbox - fixed crash when using ctrl+d;
*) winbox - fixed safe mode;
*) winbox - improve filtering on list fields;
*) winbox - report correctly dude users in active users list;
*) winbox - set default sa-learning value to "yes" for CRS Ingress VLAN Translation rules;
*) winbox - show action column as first in bridge firewall;
*) winbox - show error when telnet is not allowed because of permissions;
*) wireless - fixed multiple wireless packages enabled at the same time after upgrade;
*) wireless-rep - added initial API support for snooper;
*) wireless-rep - fixed crash on nv2 reconnect;
*) wireless-rep - fixed scan-list unset;
*) wireless-rep - treat missing SSID element as hidden SSID;

What's new in RouterOS 6.35.4 (2016-Jun-09 12:02):
*) address-list - make "dynamic=yes" as read-only option;
*) bonding - fixed 802.3ad load balancing mode over tunnels ;
*) bonding - fixed bonding primary slave assignment for ovpn interfaces after startup;
*) bonding - fixed crash on RoMON traffic transmit;
*) dhcpv6 client - fixed ia lifetime validation when it is set by dhcpv6 client;
*) disk - added support for Plextor PX-G128M6e(A) SSD on CCR1072;
*) ethernet - fixed memory leak when setting interface without changing configuration;
*) firewall - do not show disabled=no in export;
*) health - fixed broken factory voltage calibration data for some hAP ac boards;
*) health - fixed incorrect voltage after reboot on RB2011UAS;
*) ipsec - fixed mode-config export;
*) ipsec - fixed route cache overflow when using ipsec with route cache disabled;
*) lte - use only creg result codes as network status indications;
*) ovpn - enable perfect forwarding secrecy support by default;
*) rb3011 - fixed port flapping on ether6-ether10;
*) rb3011 - fixed reset button functionality;
*) rb3011 - improved performance on high cpu usage;

What's new in RouterOS 6.35.3 (2016-Jun-01 7:55):
(factory only release)

What's new in RouterOS 6.35.2 (2016-May-02 10:09):
*) discovery - fixed identity discovery (introduced in 6.35.1);
*) firewall - fixed policy routing configurations (introduced in 6.35rc38);
*) log - fixed time zone adjustment (introduced in 6.35.1);
*) queue - fixed interface queue type for ovpn tunnels;
*) snmp - fixed snmp timeout (introduced in 6.35.1);
*) vrrp - fixed missing vrrp interfaces after upgrade (introduced in 6.35.1).

What's new in RouterOS 6.35.1 (2016-Apr-25 09:29):
*) bonding - do not corrupt bonding statistics on configuration changes;
*) bonding - fixed crash when vlan parent mtu is higher than bonding mtu;
*) ethernet - do not allow mtu to be higher than l2mtu and l2mtu to be higher than max-l2mtu (reduce automatically on upgrade if it was wrong before);
*) log - fixed reboot log messages;
*) lte - do not allow to set multiple modes when it is not supported;
*) lte - fixed address acquisition on Huaweii LTE interfaces;
*) winbox - show voltage in Health only if there actually is voltage monitor;
*) wireless - fixed issue when CAPsMAN could lock CAPs interface;

What's new in RouterOS 6.35 (2016-Apr-14 12:55):
Known issue: some huawei lte modems might not get IP address after the reboot of the router - disable/enable of the modems interface fixes that

*) arp - apply Linux Kernel patch to stop RouterOS from randomly exhibiting misplaced ARPs;
*) mipsbe - (excluding RB4xx and CRS series) fixed rare ethernet tx buffer corruption;
*) nand - implemented once a week nand refresh to improve stored data integrity (will increase sector writes);
*) pppoe-client - implemented fastpath support;
*) l2tp - implemented l2tp and lns fastpath/fasttrack support;
*) queue - added bucket-size setting to queues (derived from max-limit);
*) tile - fixed rare situation when some cores decide not to take part in packet processing till next reboot;
*) tunnels - fixed performance slowdown on any other tunnel disable/enable;
*) winbox - increased minimal required winbox version to 3.4;
*) wireless - added new package "wireless-rep";
*) wireless - improved 1-chain 802.11ac station compatibility with other vendor multi-chain APs;
*) address-list - fixed crash in low memory situations;
*) bonding - fixed crash when creating vlans on bonding interface;
*) capsman - added 802.11g/n band;
*) capsman - fixed capsman extension channel names;
*) certificate - revoked certificates not showing as (R)evoked;
*) certificate - allow manual crl url addition;
*) chr - added support for VLAN on Hyper-V;
*) chr - fixed Hyper-V booting from SCSI;
*) chr - fixed Hyper-V on windows 8/10 reboot loop;
*) chr - fixed bridge firewall;
*) chr - fixed kernel crash when virtual ethernet was not connected to anything in Hyper-V;
*) chr - implemented automatic storage increase on disk image size increase;
*) chr - implemented kernel crash saving to autosupout.rif (will utilize additional 24Mb of RAM);
*) chr - make shutdown request from hyper-v work (might fix other hypervisor as well);
*) chr - no more installation on first boot;
*) chr - try to renew expired license once a hour instead of 100h;
*) cloud - don't write minor status changes to storage;
*) console - fixed print follow in "/ip dns cache" menu;
*) console - show RouterOS Version in /interface wireless scan;
*) console - sort completions/hints in natural order;
*) console - update copyright notice;
*) defconf - fixed default configuration for SXT LTE;
*) dhcpv6-client - fixed wrong error message;
*) dhcpv6-client - fix ia expiration and lifetime validation;
*) dhcpv6-server - acquire binding on renew if it does not exist;
*) dude - (changes discussed here: http://forum.mikrotik.com/viewtopic.php?f=8&t=104395);
*) dude - fixed dude login logging, no more shows as winbox login;
*) email - fixed send cmd server addr override;
*) ethernet - add option to see S-GPON-ONU module, GPON side SN in "/int eth mon sfp#";
*) ethernet - do not allow to set self as master port;
*) export - bonding did not show up in global export;
*) export - exclude default values from export in "/interface l2tp-server server" menu;
*) export - fixed export when ipv6 address was taken from pool;
*) export - fixed rare situations when not whole config was exported;
*) export - updated defaults for compact export;
*) fastpath - fixed crash when packet arrives on disabled interface;
*) fastpath - fixed show rx-bits-per-second on all VLAN interfaces;
*) fastpath - improved vlan fastpath;
*) fasttrack - fixed timer updating in connections table for fasttrack connections;
*) fetch - decrease connection idle timeout;
*) firewall - added experimental "action=route" in mangle prerouting - that forces packets to specific gateway by ignoring routing decisions (CLI only);
*) health - always report fan speed (even if it is 0);
*) health - swap fan2 and fan3 on CCR1072;
*) hotspot - clean-up all dead entries at once;
*) hotspot - fixed possible deadlock;
*) hotspot - improved html page resistance against attacks;
*) hotspot - make video tag work properly on hotspot login.html page
*) ip - rename max-arp-entries to less confusing max-neighbor-entries;
*) ippool6 - fixed potential crash;
*) ipsec - always re-key ph1 because it was possible that ph1 without DPD would expire;
*) ipsec - better flush on proposal change;
*) ipsec - fixed crash on policy update;
*) ipsec - fixed fast ph2 SA addition;
*) ipsec - fixed larval SA refresh for display;
*) ipsec - fixed multiple consecutive dynamic policy flush;
*) l2tp & pppoe - fixed user traffic accounting when fastpath was used;
*) l2tp - introduced per tunnel allow-fast-path option;
*) l2tp - added support for Hidden AVP, it is needed for proxy authentication;
*) l2tp - added support for max-sessions;
*) l2tp - added support for proxy authentication when receiving forwarded PPPoE sessions;
*) l2tp - fixed small memory leak on reconnects;
*) lcd - fixed branding packet logo drawing on startup;
*) led - fixed crash on assigned interface removal;
*) led - turn on fault led on CCR1072 if CPU too hot;
*) leds - fixed AP-CAP led blinking after successful association to CAPsMAN;
*) lte - added ipv6 support for SXT LTE;
*) lte - changed AT command processing;
*) lte - changed AT parsing because supported Huawei modems use unsolicited events instead of polling;
*) lte - fixed bandlux modem dialing;
*) lte - fixed crash on early initialization;
*) lte - improve situation when SXT modem never finds operator;
*) lte - replaced signal-strength with rssi in info command;
*) lte - support Alt38XX modem;
*) lte - support for zte mf820s2;
*) lte - supported modems now use unsolicited events for network monitoring;
*) lte - use timer for modem info;
*) map lite - added hardware WPS button support;
*) mpls - do not reset VPLS on TE tunnel re-optimize;
*) ntp - fixed ntp client hangs in reached state;
*) ospf - fixed crash when getting neighbor router-id in NBMA area;
*) ppp - fixed ppp interface reconnect when uPnP was used;
*) ppp - close connection if peer wants to re-authenticate;
*) ppp - fixed memory leak high number of pppoe clients to the same server;
*) ppp - fixed ppp crash if lcp packets were lost and authentication got delayed;
*) ppp - fixed some clients can not connect due to LCP restart;
*) pppoe - added rfc4679 support;
*) pppoe - fixed crash when removing pppoe service;
*) pppoe-server - added pado-delay option;
*) profiler - classify certificate signing;
*) proxy - fixed ftp request url decode;
*) queue - improve "/queue interface" menu;
*) quickset - fixed invalid date adjusted the signal threshold for the signal chart and refresh rate;
*) quickset - fixed situations when hidden password was passed as ******* from winbox nd webfig;
*) radius - warn radius client if incorrect secret is being used;
*) rb3011 - fixed sfp compatibility with CCR when using direct attached cables;
*) rb3011 - fixed time keeping;
*) rb3011 - make ether6-ether10 work if SFP module is present on bootup;
*) romon-ssh - fixed active addresses for romon user;
*) route - do not show duplicate gateway on connected route;
*) route - fixed filter by routing table;
*) routing - fixed rare kernel failure on different dynamic routing configurations;
*) routing - fixed routing-marks were not erased from memory when they are not being used;
*) services - do not show ssh entry under ip services if security package is disabled;
*) snmp - don't group oids for bulk get with maxreps > 1 ;
*) snmp - fixed cpu load reporting to 1min average and change oid to 1.3.6.1.4.1.2021.11.10.0;
*) snmp - fixed dhcpv4 lease hwaddr format according to mib;
*) snmp - fixed getbulk result ordering with multiple request OIDs;
*) ssh - simplify login process;
*) ssl - optimized certificate update;
*) system - log time changes;
*) tile - corrected max-l2mtu;
*) tile - fixed fastpath related memory leak;
*) tile - fixed performance regression on switch chip (introduced in 6.33rc18);
*) tile-crypto - fixed minor memory leak;
*) tool fetch - fixed https cleanup on user stop while handshaking;
*) trafficgen - fixed console arguments;
*) trafficgen - fixed crash when unexpected stream reappears;
*) trafflow - fixed potential deadlock;
*) ups - fixed entering hibernate mode when below battery capacity limit;
*) users - added separate RoMoN policy;
*) webfig - fixed firewall rule sorting did not work in other chains except all;
*) webfig - show single item groups as optional values;
*) webfig - sort numeric columns numerically even if they contain some text;
*) winbox - added "pw-type" to "/interface vpls bgp-vpls" menu;
*) winbox - added "use-control-word" and "pw-mtu" to "/interface vpls cisco-bgp-vpls" menu;
*) winbox - added /interface wireless setup-repeater;
*) winbox - added all the rates settings to the capsman;
*) winbox - added flip-screen option to lcd settings;
*) winbox - added init-delay option to routerboard settings;
*) winbox - added ipv6 firewall missing log option;
*) winbox - added missing eap-ttls-mschamv2 method to wireless security profile;
*) winbox - added mtu=auto support to eoipv6 tunnel;
*) winbox - added sfp-mac for GPON interfaces;
*) winbox - added support for new settings from wireless-rep package;
*) winbox - added support for route action in mangle rules;
*) winbox - allow to set additional-network-modes;
*) winbox - allow to set multiple dh-groups;
*) winbox - disable autostart for wireless scan,snooper,align etc. on open;
*) winbox - do not show "enable-jumper-reset" setting on devices without serial port;
*) winbox - do not show real-tx-power column in current-tx-power by default;
*) winbox - fixed unset options in /routing ospf interface menu;
*) winbox - hotspot default-trial user shows profile as "unknown" in Winbox;
*) winbox - improved winbox connection loss detection, fixes winbox safe mode;
*) winbox - limit ospf key to 16 symbols;
*) winbox - make additional-network-mode optional for lte interface;
*) winbox - make build with latest lte changes;
*) winbox - make mrru disabled and set mtu+mru to auto by default on new servers;
*) winbox - show "usb-power-reset" option on all boards that have it;
*) wireless - fixed crash on nstreme-dual interface stats update;
*) wireless-rep - added 802.11g/n only band;
*) wireless-rep - added STEP feature for the scan-list;
*) wireless-rep - added WPS client support;
*) wireless-rep - added support for saving wireless scan results to file;
*) wireless-rep - added support for wireless background scan for 802.11 protocol;
*) wireless-rep - added support for wireless repeater mode for 802.11 protocol;
*) wireless-rep - added support for wireless scan rounds setting;
*) wireless-rep - adjust roaming scan times;
*) wireless-rep - allow to connect to AP after scan;
*) wireless-rep - do not allow empty ssid for AP modes;
*) wireless-rep - fixed crash on non-HT clients;
*) wireless-rep - fixed latency issues with Intel wireless clients;
*) wireless-rep - fixed nv2 protocol;
*) wireless-rep - fixed qos frame-priority when nv2 protocol used in station-wds mode;
*) wireless-rep - fixed signal leds;
*) wireless-rep - fixed speed issue when connected with Intel 802.11ac;
*) wireless-rep - initial support for station roaming for station mode in 802.11 protocol;
*) wireless-rep - request interface name for setup-repeater;
*) wireless-rep - use full identity where possible;
*) wireless-rep,capsman - added more configuration settings;
*) wireless-rep,capsman - added rate config support.

What's new in RouterOS 6.34.6 (2016-Jun-06 08:37):
*) discovery - fixed identity discovery (introduced in 6.34.5);
*) log - fixed time zone adjustment (introduced in 6.34.5);
*) snmp - fixed snmp timeout (introduced in 6.34.5);
*) vrrp - fixed missing vrrp interfaces after upgrade (introduced in 6.34.5).

What's new in RouterOS 6.34.5 (2016-May-27 11:52):
*) dude - (http://wiki.mikrotik.com/wiki/Manual:The_Dude_v6/dude_v6.xx_changelog);
*) dude - in order to connect to dude server user requires dude policy to be enabled;
*) bonding - do not corrupt bonding statistics on configuration changes;
*) bonding - fixed crash when vlan parent mtu is higher than bonding mtu;
*) cloud - do not write minor status changes to storage;
*) ethernet - do not allow mtu to be higher than l2mtu and l2mtu to be higher than max-l2mtu (reduce automatically on upgrade if it was wrong before);
*) ipsec - better flush on proposal change;
*) ipsec - fixed crash on policy update;
*) log - fixed reboot log messages;
*) lte - do not allow to set multiple modes when it is not supported;
*) queue - fixed interface queue type for ovpn tunnels;
*) rb3011 - fixed port flapping on ether6-ether10;
*) rb3011 - fixed time keeping;
*) switch - fixed compact export;
*) tile - fixed performance regression on switch chip (introduced in 6.33rc18);
*) winbox - show voltage in Health only if there actually is voltage monitor;
*) wireless - fixed issue when CAPsMAN could lock CAPs interface;

What's new in RouterOS 6.34.4 (2016-Mar-24 13:13):
*) bonding - fixed crash on bonding slave release;
*) bonding - fixed mac-address disappearance after reboot in specific setups;
*) chr - fixed reboots with license and queues;
*) console - allow unknown scan-list names on wireless configuration to fix import;
*) fastpath - fixed rare kernel failure;
*) ipsec - take into account ip protocol in kernel policy matcher;
*) mac-winbox - try to aggregate packets & resend all pending packets on timeout;
*) ppp - do not crash when received multiple CBCP packets;
*) ppp - fixed crash when ppp interface gets disconnected and user gets authenticated at the same time (most probable with slow RADIUS server);
*) quickset - fixed wan interface selection on devices with SFP interfaces;
*) quickset - use 5GHz interface instead of 2GHz interface on SXT Lite5 ac;
*) rb3011 - fixed high cpu load breaks ethernet stats;
*) rb3011 - fixed link down messages;
*) romon - fixed romon discovery after romon ID change;
*) timezone - fixed reboot by watchdog when selecting timezones from the end of list;
*) userman - fixed www crash;
*) winbox - allow to show revoked & authority flags at the same time;
*) winbox - correctly recognise if there is need to report fan information under system health;
*) winbox - do not use area v2 names instead of ospf v3 area names;
*) winbox - make mac-winbox work with RB850.

What's new in RouterOS 6.34.3 (2016-Mar-09 10:03)
*) ccr1072 - fix traffic halting when sfp+ 1-4 or 5-8 where all disabled;
*) chr - fixed crash when layer7 firewall option used;
*) fetch - fixed TTFP download;
*) gre - fixed memory leak;
*) lcd - fixed security screen did not show ip addresses on ccr;
*) netinstall - fixed link negotiation for different sfp modules;
*) ppp - fixed ppp crash;
*) queue-tree - improved nested queue limit calculation;
*) ssh - fixed crash on failed scp read;
*) winbox - allow to set multiple dh-groups;
*) winbox - do not show fan statuses in passive cooling CCR1009;
*) winbox - fixed typo in "echo reply";
*) winbox - fixed unset options in /routing ospf interface menu;

What's new in RouterOS 6.34.2 (2016-Feb-18 06:31):
*) dude - updated to the latest Release Candidate revision (v6.35rc11);
*) dude - (changes discussed here: http://forum.mikrotik.com/viewtopic.php?f=8&t=104395);
*) chr - fixed high rate limitation;
*) dhcpv6 client - fix pd hint with empty address;
*) ipsec - fix console peer aes enc algorithm display;
*) l2tp - ipsec peer & policy sometimes was not removed after l2tp interface disable;
*) log - try not to loose disk messages and warn if lost any;
*) lte - fix allowed bands for RBSXTLTE3-7;
*) pptp - fixed kernel crash when receiving fragmented packet with fragmented header;
*) proxy - store error.html on flash if it is available;
*) ssh - fixed connection stalling;
*) ssh - make export verbose work;
*) switch - make "sa-learning=yes" by default when adding Ingress VLAN Translation rules;
*) tile - fixed possible kernel failure with disabled watchdog timer caused by DDoS attack;
*) ups - fix waiting for AC power restore in hibernate mode;
*) winbox - added factory-firmware field to system/routerboard;
*) winbox - fixed email address saving;
*) winbox - fixed multi value field display (i.e. web proxy ports);
*) winbox - incomplete ARP entries are not refreshed;
*) www - fixed www crash.

What's new in RouterOS 6.34.1 (2016-Feb-02 14:08):
*) interface - fixed stats that were 8x smaller;
*) traffic-monitor - fixed stats that were 8x smaller;
*) smips - properly detect smips boards for winbox & webfig.

What's new in RouterOS 6.34 (2016-Jan-29 10:25):
*) mipsle - architecture support dropped (last fully supported version 6.32.x);
*) dude - The reports of my death have been greatly exaggerated;
*) dude - dude RouterOS package added for tile and x86 (CHR) architecture;
*) dude - package included by default to all CHR images;
*) dude - initial work on dude integration into RouterOS;
*) bgp vpls - fixed initialization after reboot;
*) mpls - forwarding of VRF over TE tunnel stopped working after BGP peer reset;
*) ipsec - improved TCP performance on CCRs;
*) btest - significantly increased TCP bandwidth test performance;
*) winbox - fixed possible busy-loop on v2.x with latest 6.34RC versions;
*) cerm - allow to sign certificates from imported CAs created with RouterOS;
*) ldp - fix MPLS PDU max length;
*) net - improve 64bit interface stats support;
*) routerboard - print factory-firmware version in routerboard menu;
*) snmp - add oid from ucd mib for total cpu load OID 1.3.6.1.4.1.2021.11.52.0;
*) winbox - add extra items automatically to multi-line fields if at least one of them is required;
*) winbox - implemented full ipv6 dhcp client;
*) winbox - update blocked flag if user changed blocked field in dhcp server lease;
*) mac-telnet - fixed backspace when typing login username;
*) sstp - allow ECDHE when pfs enabled;
*) lte - fixed info command for Cinterion EHS5-E modem;
*) fast-path - fixed kernel crash on on/off;
*) licensing - fixed that some old 7 symbol keys could not be upgraded;
*) ssh - fixed possible kernel crash;
*) console - fixed crash on creating variable with "?" in it;
*) chr - fix SSH key import on AWS;
*) crs212 - fix 1Gbps ether1 linking problem;
*) timezone - use backward timezone aliases;
*) lte - support serial port for DellWireless 5570;
*) lte - improved dhcp handling on interfaces that doesn't support it;
*) ipsec - allow my-id address specification in main mode;
*) dhcpv6 client - fix remove when client reappears on restart;
*) default config - fix hAP lite with one wireless;
*) firewall - added inversion support for "limit" option;
*) firewall - added bit rate matching for "limit" option;
*) firewall - improved performance for "limit" option;
*) dhcpv6-client - fix ia lifetime check;
*) ipsec - prioritize proposals;
*) ipsec - support multiple DH groups for phase 1;
*) netinstall - fix apply default config;
*) tile - make sure that SFP rj45 modules that use forced 1G FD settings work correctly after system reboot;
*) wireless - added WPS buttons support on hAP and hAP ac lite;
*) upnp - added comment for dynamic dst-nat rules to inform what host/program required it;
*) webfig - recognize properly CHR;
*) chr - license fix for AWS and similar solutions;
*) arm - fix usb modem modules on ARM;
*) dhcpv6-client - fixed stopped state;
*) netinstall - sort packages by name;
*) firewall - do not allow to add new rule before built-in (reverted);
*) winbox - include FP in fast-path column names;
*) ipsec - fix phase2 hmac-sha-256-128 truncation len from 96 to 128
This will break compatibility with all previous versions and any other
currently compatible software using sha256 hmac for phase2;
*) ssh, ftp - make read, write user group policy aware;
*) tunnel - fix keep-alive (introduced in 6.34rc);
*) cerm - show last crl update time;
*) quicket - support CAP mode on all existing wireless packages;
*) wlan - add united states3 country;
*) fast-path - fix locking issue which could lead to reboot loop (introduced in 6.34rc20);
*) userman4 - try loading signup files from db path first;
*) sstp - allow to limit tls version to v1.2 only;
*) chr - make tool profile work on 64bit x86;
*) dhcpv6-server - added binding server=all option;
*) hotspot - added html-directory-override & recognize default hotspot user;
*) hotspot - fixed export of default trial user;
*) hotspot - fixed memory leak on https requests;
*) winbox - allow to specify amsdu-limit & amsdu-threshold on 11n wifi cards;
*) winbox - added multicast-buffering & keepalive-frames settings to wireless interfaces;
*) CHR - implemented trial support for different CHR speed tiers;
*) dhcpv6-client - fix add route/address;
*) usb - enable ch341 serial module;
*) lte - make sure that both LTE miniPCI-e cards are recognized;
*) winbox - show Common-Name of certificates in certificate list;
*) winbox - added units to PCQ queue fields;
*) net - do not break connection when interface is added to bridge;
*) hotspot - show cookie add/remove events in hotspot,debug log;
*) hotspot - allow static entries with the same mac on multiple hotspot servers;
*) hotspot - do not remove mac-cookie in case of radius timeout;
*) hotspot - added byte limits option for default-trial users;
*) ipsec - make sure that dynamic policy always has dynamic flag;
*) CAPsMAN - use CAP name in log when remote-cap is deleted (wireless-cm2);
*) hotspot - fixed login by mac-cookie when roaming among hotspot servers;
*) hotspot - add html-directory-override for read-only directory on usb flash;
*) hotspot - add uptime, byte and packet counter variables to logout script;
*) net - fix statistics counters jumping up to 4G;
*) firewall - SIP helper update for newer Cisco phones;
*) usermanager - fixed usermanager web page crash;
*) ipsec - fixed active SAs flushing;
*) hotspot - added option to login user manually from cli;
*) hotspot - fixed trial-uptime parsing from CLI to Winbox/Webfig;
*) lte - added support for multiple E3372 on the same device;
*) modem - added wpd-600n ppp support;
*) console - fixed incorrect disabled firewall rule matching to "invalid flag";
*) dns - fix for situation when dynamic dns servers could disappear;
*) sfp - fix 10g ports in 1g mode (introduced in 6.34rc1);
*) CCR1072 - added support for S-RJ01 SFP modules;
*) trafficgen - fixed issue that traffic-generator could not be started twice without reboot;
*) dhcpv6-server - replace delay option with preference option.
--
*) winbox - show properly route-distinguisher for bgp vpn4;
*) winbox - show dhcp server name in dhcp leases;
*) ppp - make CoA work correctly with address-lists;
*) winbox - fixed tab names to correspond to console;
*) winbox - show only actual switch-cpu ports in switch setting combobox;
*) winbox/webfig - fixed version column ordering in ip neighbors list;
*) webfig - fixed switch port "default vlan id" has missing "auto" value;
*) webfig - fixed firewall connection-bytes option;
*) ipsec - fixed kernel failure after underlying tunnel has been disabled/enabled;
*) romon - allow to see device identity if it is longer than 31 character;
*) fastpath - show fp counters in /interface monitor aggregate;
*) bridge firewall - fix chain check (broken since 6.33.2);
*) bridge firewall - fixed crash when jump rule points to disabled custom chain;
*) smb - fix crash when changing user which has open session;
*) address-list - properly remove unused address-lists from drop-downs;
*) fetch - fixed closure after 30 seconds;
*) capsman - fix radius accounting stop message;
*) log - reopen log file if deleted;
*) packing - fix tcp/udp checksums when simple packing is used;
*) tile - fix ipsec freeze after SA updates;
*) upnp - fixed missing in-interface option for dynamic dst-nat rules;
*) tunnel - fix complaining about loop after ~248 days;
*) vrrp - make sure that VRRP gets state on bootup;
*) ppp - fixed rare kernel crash (introduced in v6.33);
*) ppp - do not allow empty name ppp secrets;
*) ssh - fix active user accounting.

What's new in RouterOS 6.33.5 (2015-Dec-28 09:13):
*) arp - show incomplete ARP entries;
*) btest - fix potential crash after btest release;
*) btest - improve UDP tx rate precision;
*) crypto - fixed kernel failure in talitos HW encryption;
*) dhcpv6-client - fix DNS address assignement;
*) dhcpv6-client - set correct parameters when rapid commit is used
*) e-mail - do not reset server address after changing configuration;
*) fastpath - fixed possible kernel failure on multi core systems;
*) fetch - added 30 second connection time-out;
*) hotspot - added missing favicon.ico in hotspot html pages;
*) kernel - general improvement for core process scheduling;
*) led - add WLAN led to RB951Ui
*) log - log link up/down events only when link actually has changed its state;
*) lte - improve support Sierra Wireless 320U;
*) lte - speed up first time connection to LTE network on SXT LTE;
*) net - apply slave config only if master config has been changed;
*) net - do not show L2MTU in VLAN compact export;
*) netwatch - make work with ping time-out more precise;
*) ppp - make PPP active print radius & !radius conditions work;
*) romon - do not accept multicast id;
*) romon - fixed crash on RoMON if fast-path was active;
*) smb - show correct interface name in SMB debug logs;
*) ssh - fix session clean-up;
*) sshd - resolved shared secret mismatch issue;
*) tile - fixed kernel failure on HW encryption;
*) webfig - didn't show zero values in CRS ingress/egress VLAN translation rules;
*) winbox - added + & - to IGMP proxy MFC;
*) winbox - added LCD menu for RB3011;
*) winbox - allow to specify traffic-monitor threshold in k & M units + specify that those are bits;
*) winbox - show fast-path per interface counters;
*) wireless - regular “wireless” package is now retired and replaced by "wireless-fp" and "wireless-cm2".

What's new in RouterOS 6.33.3 (2015-Dec-03 16:08):
*) ethernet - fixed 10/100Mbps auto-negotiation fails on RB922UAGS ether1 (introduced in v6.33.2);
*) upnp - fixed memory leak;
*) ssh - avoid double session clean-up;
*) email - make password field sensitive in console.

What's new in RouterOS 6.33.2 (2015-Nov-27 15:00):
*) bridge - fixed power-cycle-ping for bridge ports (was affecting all bridge);
*) ethernet - fixed link resetting on power-cycle-ping value change;
*) ppp - fixed dynamic filter rule adding on some firewall filter configurations;
*) pppoe - improved MTU discovery compatibility with other vendors;
*) pppoe - made MTU discovery more robust;
*) pppoe - fixed compliance to RFC4638 (MTU larger than 1488) again;
*) vrrp - fix arp=reply-only;
*) vrrp - do not warn about version mismatch if VRID does not match;
*) vrrp - allow VRRP to work behind firewall and NAT rules;
*) vrrp - fixed on-backup script;
*) dhcpv4 server - fix kernel crash when restoring lease with queue for non-existent server;
*) dhcpv4-client - support /32 address assignment;
*) ssh - fix key exchange when first kex packet follows.

What's new in RouterOS 6.33.1 (2015-Nov-17 09:55):
*) licensing - fix unneeded connection attempts to 169.254.x.x must be CHR only (introduced in 6.33);
*) pppoe - fixed compliance to RFC4638 for MTU larger than 1488 (introduced in 6.33);
*) CRS2xx - fixed occasional switchip resets (broken in 6.33);
*) fastpath - fixed wireless interface fastpath (broken in 6.33);
*) smb - fixed SMB share crash when connection was cancelled;
*) lcd - fixed LCD crash on fast disable/enable;
*) lcd - refresh LCD after display command is executed;
*) vrrp - fix enabling disabled vrrp interface when vrrp program has exited;
*) winbox - do not send any changes on OK button press if nothing has been changed;
*) www - put correct path to Winbox v3.0 for new installations with branding package;
*) webfig - show correctly SFP Tx/Rx;
*) winbox - renamed power-cycle-ping-interval to power-cycle-ping-timeout;
*) hotspot - fixed missing image at login;
*) netinstall - fix branding pack parsing;
*) packages - show version tag when no bundle is installed.

What's new in RouterOS 6.33 (2015-Nov-06 12:49):
*) dns - initial fix for situation when dynamic dns servers could disappear;
*) winbox - dropped support for winbox v3.0beta and v3.0rc (use winbox v3.0);
*) dhcpv6 - various improvement and fixes for dhcp-pd client and ippool6;
*) defconf - fixed rare situation where configuration was only partially loaded;
*) net - fix possible never ending loop when bad CDP discovery packet is received;
*) log - make default disk file name to reside in flash dir if it exists;
*) romon - change port list to be not ordered in export;
*) capsman - limit number of simultaneous DTLS handshakes;
*) capsman - fixed memory leak on CAP joining CAPsMAN when ssld is used;
*) winbox - added allow-fast-path to eoip, gre & ipip;
*) winbox - do not show power-cycle properties on non poe ports;
*) l2tp: implemented PPPoE over L2TP in LNS mode, RFC3817;
*) webfig - some of the setting were shifted to the right;
*) packages - allow to reinstall from bundle to separate packages & vice versa;
*) packages - prefer out of bundle packages when both of them are installed;
*) packages - fix a problem of upgrading bundle package to non bundled ones;
*) ipsec - force flow cache validation once in 1h;
*) winbox - make sure that all setting names get shown in full;
*) winbox - added poe power-cycle-ping settings to ethernet interfaces;
*) ppp - handle properly case were ppp client is given same address for local & remote end;
*) winbox - added vlan-mode & vlan-id to virtual-ap interface;
*) winbox - added timeout column to ipv6 address lists;
*) winbox - show SFP Tx/Rx Power properly;
*) winbox - added min-links to bonding interface;
*) winbox - do not show health menu on RB951Ui-2HnD;
*) winbox - added support for Login-Timeout & MAC-Auth-Mode in hotspot;
*) cerm - added option to disable crl download in '/certificate settings';
*) winbox - make user ssh key import work again;
*) webfig - make "Copy to Access List" work in CAPsMAN Registration Table;
*) userman - fix report generation problem which could result in some users being skipped from it;
*) winbox - fix to allow cpu-port as mirror-target
*) proxy - error.html parsing enhancement to improve performance
*) CCR1072 - improve ether1 performance under heavy load
*) routerboard - indicate RouterBOOT type in /system routerboard print;
*) mpls - properly use mpls mtu for routes;
*) cerm - fix key description for signed certificates;
*) trafflow - report flow addresses in v1 and v5 without NAT awareness;
*) hotspot - add mac-auth-mode setting for mac-as-passwd option;
*) hotspot - add login-timeout setting to force login for unauth hosts;
*) auto-upgrade - fixed auto upgrade for smipsbe;
*) dns - do not create duplicate entries for same dynamic dns server addresses;
*) ipsec - fix set on multiple policies which could result in adding non existent dynamic policies to the list;
*) email - allow server to be specified as fqdn which is resolved on each send;
*) fastpath - eoip,gre,ipip tunnels support fastpath (new per tunnel setting "allow-fast-path");
*) ppp, pptp, l2tp, pppoe - fix ppp compression related crashes;
*) cerm - also accept downloaded CRLs in PEM format;
*) userman - added 'history clear' to allow flushing undo history, which may take up significant amount of memory for huge databases with hundreds of users;
*) health - fix voltage for CRS109, CRS112 and CRS210 if powered from external adapter;
*) userman - added phone number support to signup form;
*) ip pool6 - try to acquire the same prefix if info matches recently freed;
*) ipsec - fix transport mode ph2 ID ports when policy selects specific ip protocol on initiator;
*) ipsec - use local-address for phase 1 matching and initiation;
*) route - fixed crash on removing route that was aggregated;
*) ipsec - fix replay window, was accidentally disabled since version 6.30;
*) ssh - allow host key import/export;
*) ssh - use 2048bit RSA host key when strong-crypto enabled;
*) ssh - support RSA keys for user authentication;
*) wlan - improved WMM-PowerSave support in wireless-cm2 package;
*) pptp & l2tp - fixed problem where android client could not connect if both dns names were not provided (was broken since v6.30);
*) auto-upgrade - added ability to select which versions to select when upgrading;
*) quickset - fixed HomeAP mode;
*) lte - improved modem identification to better support multiple identical modems;
*) snmp - fix system scripts table;
*) tunnels - eoip,eoipv6,gre,gre6,ipip,ipipv6,6to4 tunnels now support dns name as remote address;
*) fastpath - active mac-winbox or mac-telnet session no longer suspends fastpath;
*) fastpath - added per interface fastpath counters;
*) fastpath - added trafflow support in basic ipv4 and fasttrack ipv4 fastpath;
*) ppp - added on-up & on-down scripts to ppp profile;
*) winbox - allow to specify dns name in all the tunnels;
*) pppoe - added support for MTU > 1492 on PPPoE;
*) cerm - fix scep server certificate-reply degenerate PKCS#7 signed-data content;
*) ppp-client - added default channels for Alcatel OneTouch L100V;
*) defconf - fix for boards that had bridge with only wlan ports;
*) ovpn: support OpenWRT ovpn clients (or any other with enable-small option enabled);
*) cerm - use certificate file name for imported cert name;
*) fetch - fixed error message when error code 200 was received;
*) cerm - rebuild crl for local ca if crl file does not exist;
*) winbox - make directed broadcasts work for neighbor discovery;
*) upnp: automatically adjust mappings to new external ip change;
*) ppp - added ppp interface to upnp internals/externals if requested;
*) ppp - when adding ipv6 default route use user provided distance;
*) userman - allow to correctly enable CoA on router;
*) cerm - show crl nextupdate time;
*) ppp - added CoA support to PPPoE, PPTP & L2TP (Mikrotik-Recv-Limit, Mikrotik-Xmit-Limit, Mikrotik-Rate-Limit, Ascend-Data-Rate, Ascend-XMit-Rate, Session-Timeout);
*) ppp - added new option under "ppp aaa" - "use-circuit-id-in-nas-port-id";
*) userman - refresh active sessions/users view dynamically;
*) package - added version tag and show everywhere alongside of version number;
*) wlan - improved 802.11 protocol single connection TCP performance for ac chipset with cm2 package.

What's new in RouterOS 6.32.3 (2015-Oct-19 11:13):
*) switch - fixed CRS settings set back to defaults after a reboot;
*) netinstall - include missing RB1200 drivers;
*) firewall - fixed connection-rate matcher;
*) ppp, pptp, l2tp, pppoe: fixed router dead locked if compression was enabled on link;
*) quickset - create proper firewall rules when PPPoE is used for address acquisition;
*) sstp - fixed kernel crash when other party started to fragment ppp packets in the middle;
*) ippool6 - optimize same prefix acquisition;
*) winbox - Shift+Ins & Shift+Del did not work in multi entry fields;
*) winbox - allow to specify ipv6 address in traffic flow target;
*) winbox - allow to specify eap-radius-accounting in CAPsMAN;
*) winbox - allow to enter dns name in email server;
*) ups - fix console oid print;
*) tunnel - fix loopback keepalives on gre and ipip;
*) pptp,l 2tp, sstp, pppoe: do not send data packets before we have negotiated connection with other side (happens on dial-on-demand interfaces), this brakes when connecting to other party servers;
*) pptp, l2tp, sstp - make it work when add-default-route & dial-on-demand both are enabled;
*) pptp, l2tp, sstp, pppoe clients - fixed problem where they failed to connect at startup and only reboot helped;
*) nv2 - fixed kernel failure with frame size accounting;
*) ovpn client - fixed crash when ovpn didn't receive it's ip address;
*) lcd - fix slideshow for CCR1072, and possible sign issues for temperatures;
*) winbox - make console notice correct screen size;
*) ssh - allow to specify pass as argument for private key import;
*) winbox - refetch hotspot walled garden hit counter;
*) winbox - added client-connections & server-connections to web proxy status;
*) cerm - fix scep server certificate-reply degenerate PKCS#7 signed-data content;
*) bgp - specific BGP networks were changed to different ones;
*) cerm - allow export for all types except templates;
*) wlan - update brazil-anatel country;
*) winbox - fixed context menu actions to apply to all selected items;

What's new in RouterOS 6.32.2 (2015-Sep-17 15:20):
*) cerm - guard template from parallel use
*) mipsle - fixed missing second level menu in CLI;
*) sstp - avoid routing loops on client when adding default route;
*) sstp - fixed problem where sometimes sstp ip addresses were invalid;
*) switch - fixed bogus log messages about excessive broadcasts/multicasts on master-port;
*) tftp - fix request file name reading from packet
*) pptp encryption - better handling for out-of-order packets;
*) ethernet - added support for new ASIX USB Ethernet dongles;
*) CAPsMAN - fix 100% CPU usage when trying to upgrade RouterOS on CAP;
*) upgrade - fixed default configuration export;
*) ppp - fixed ppp interface stuck in not running state;
*) ipsec - fixed kernel failure when packets were not ordered on first call;
*) upnp - randomize action urls to fix "filet-o-firewall" vulnerability;
*) RB532/RB564 - fixed no link after ethernet disable/enable;
*) romon - fixed default configuration export;
*) tile - fixed occasional deadlock on module unload;
*) mesh - fix router lock-up when interface is added/removed;
*) ipsec - fix sockaddr buf size on id generation for ipv6 address;
*) health - show correct voltage for CRS109,CRS112,CRS210 when powered through PSU and show voltage up to 27V when powered through PoE;
*) email - resolve server address;
*) snmp - show firmware upgrade info;
*) upgrade - report status in check-for-updates.

What's new in RouterOS 6.32.1 (2015-Sep-07 13:03):
*) RB911/912 - fixed lock-up;
*) RB493G - fixed reboot loop;
*) firewall - do not lose firewall mangle rules on start-up;
*) defconf - fix default configuration for routers without wireless package.

What's new in RouterOS 6.32 (2015-Aug-31 14:47):
*) trafflow - added support for IPv6 targets;
*) switch - fixed port flapping on switch ports of RB750, RB750UP, RB751U-2HnD and RB951-2N (introduced in 6.31)
*) ipsec - added compatibility option skip-peer-id-check;
*) flash - fix kernel failure (exposed by 6.31);
*) bridge firewall - add ipv6 src/dst addr, ip protocol, src/dst port matching to bridge firewall;
*) RB911/RB912 - fix SPI bus lock after fast led blink;
*) ipsec - fix potential memory leak;
*) bridge firewall - vlan matchers support service tag - 0x88a8;
*) ippool6 - try to acquire the same prefix if info matches recently freed;
*) crs switch - allow to unset port learn-limit, new default is unset to allow more than 1023 hosts per port;
*) x86 - fixed 32bit multi-cpu kernel support;
*) chr - add hotspot,btest,traffgen support;
*) revised change that caused reboot by watchdog problems introduced in v6.31;
*) ipsec - use local-address for phase 1 matching and initiation;
*) ipsec - fix transport mode ph2 ID ports when policy selects specific ip protocol on initiator;
*) certificates -fixed bug where crl stopped working after a while;
*) ip accounting - fixed kernel crash;
*) snmp - fix system scripts get;
*) hotspot - ignore PoD remote requests if no HotSpot configured;
*) hotspot - fix kernel failure when www plugin aborts on broken html source;
*) torch - add invert filter for src/dst/src6/dst6 addresses ;
*) bonding - add min_links property for 802.3ad mode;
*) snmp - get vlan speed from master interface;
*) hotspot - fix html-directory path on small flash devices;
*) mipsbe - make system shutdown work again;
*) lcd - fixed parallel port LCD display support on multi-cpu x86;
*) bridge - fixed use-ip-firewall-for-vlan in setups with multiple bridges;
*) ipv6 - fixed DHCP-PD client skips some steps when renewing lease;
*) upnp - fixed protocol port selection for upnp protocol comunications;
*) firewall - fixed limit and dst-limit options.
*) winbox - fixed wireless interface l2mtu (VirtualAP and WDS interface creation in winbox)
*) winbox - fixed multiple firewall rule moving in Winbox 2
*) simple queues - restrict all changes in dynamic simple queues

What's new in RouterOS 6.31 (2015-Aug-14 15:42):
*) check-for-update - added ability to select versions channel to check (bugfix, current, RC or development)
*) demo mode of Cloud Hosted Router (CHR) added
*) chr - added x86_64 image for use in virtual environments
*) chr - added support for VMware SCSI virtual disks
*) chr - added support for VMware vmxnet3 network card
*) chr - added support for HyperV SCSI disks
*) chr - added support for HyperV Ethernet interfaces
*) chr - added support for virtio disks
*) fixed occasional interface resetting on CRS switches
*) fixed ethernet stopping on RB NetMetal / SXTG-5HPacD 10Mbit and 100Mbit links
*) ipsec - fixed crash in when gcm encryption was used
*) ipsec - allow to set peer address as "::/0"
*) ipsec - fixed empty sa-src address on acquire in tun mode
*) ipsec - show proposal info in export ipsec section
*) ipsec - preserve port wildcard when generating policy without port override
*) ipsec - fixed replay window, was accidentally disabled since version 6.30;
*) certificate manager - fixed memory leak
*) ssh - allow host key import/export
*) ssh - use 2048bit RSA host key when strong-crypto enabled
*) ssh - support RSA keys for user authentication
*) conntrack - fixed problem with manual connection removal
*) conntrack - added tcp-max-retrans-timeout and tcp-unacked-timeout
*) wireless - implemented l2mtu update if wireless-cm2 is enabled
*) wireless - improved WMM-PowerSave support in wireless-cm2 package
*) mpls - better multicore support for VPLS ingress/egress
*) ovpn - better multicore support for interface initialization/authentication/creation.
*) mesh - performance improvement
*) pptp & l2tp - fixed problem where android client could not connect if both dns names were not provided (was broken since v6.30)
*) user-manager - fixed username was not shown in /tool user-manager user
*) user-manager - fixed zoom for user-manager homepage when mobile devices used
*) winbox - restrict change dynamic interface fields
*) winbox - also hide passphrase in CAPsMAN with "Hide Password"
*) winbox - restrict reversed ranges in dst-port under firewall
*) quickset - fixed HomeAP mode
*) lcd - added LCD package for all architectures (for serial port LCD modules)
*) lcd - fixed crash (and 100% cpu usage) when interface gets removed from "stats-all" screen
*) tool fetch - fixed incomplete ftp download
*) tool fetch - don't trim [t]ftp leading slashes
*) proxy - adjust time according to time-zone settings in proxy cache contents.
*) bridge fastpath - fixed updating bridge FDB on receive (could cause TX traffic flooding on all bridge ports)
*) bonding fastpath - fixed possible crash when bonding master was also a bridge port
*) route - fixed crash on removing route that was aggregated
*) romon - fixed crash on SACKed tx segments
*) lte - improved modem identification to better support multiple identical modems
*) snmp - fixed system scripts table
*) traffic flow - fixed dynamic input/output interface reporting
*) ipv6 dhcp-relay - fixed problem loading configuration

known issue:
*) Dynamic DNS servers can disappear when "allow-remote-requests" are not enabled

What's new in RouterOS 6.30.2 (2015-Jul-22 11:17):
*) pptp & l2tp - fixed problem where android client could not connect if both dns names were not provided (was broken since v6.30);
*) lcd - fix crash (and 100% cpu usage) when interface gets removed from "stats-all" screen
*) tool fetch - fix incomplete ftp download
*) ipsec - fixed crash in when gcm encryption was used
*) certificate manager - fixed memory leak
*) traffic flow - fixed dynamic input/output interface reporting
*) user-manager - fixed username was not shown in /tool user-manager user
*) user-manager - fixed zoom for user-manager homepage when mobile devices used
*) winbox - restrict reversed ranges in dst-port under firewall
*) snmp - fix system scripts table
*) quickset - fixed HomeAP mode

What's new in RouterOS 6.30.1 (2015-Jul-14 11:22):
*) quickset - fixed HomeAP mode;
*) lte - Fixes bug that causes Sierra Wireless modems with LTE interface to change interface name;
*) trafflow: fix in-interface reporting in flow;
*) ipsec - disallow changing dynamic peer;
*) quickset - crashes introduced in 6.30 fixed
*) fixed :execute file=
*) bonding: fix arp monitoring in active backup mode

What's new in RouterOS 6.30 (2015-Jul-08 09:07):
*) wireless - added WMM power save suport for mobile devices;
*) firewall - sip helper improved, large packets no longer dropped;
*) fixed encryption 'out of order' problem on SMP systems;
*) email - fix sending multiple consecutive emails;
*) fixed router lockup on leap seconds with installed ntp package;
*) ccr - made hardware watchdog work again (was broken since v6.26);
*) console - allow users with 'policy' policy to change script owner;
*) icmp - use receive interface address when responding with icmp errors;
*) ipsec - fail ph2 negitioation when initiator proposed key length does not match proposal configuration;
*) timezone - updated timezone information to 2015e release;
*) ssh - added option '/ip ssh stong-crypto'
*) wireless - improve ac radio coexistence with other wireless clients;
*) console - values of S~.id~, S~.nextid~ and S~.dead~ are avaliable for use in 'print where' expressions;
*) console - ':execute' command now accepts 'file=' parameter and writes script output to scpecified file;
*) console - ':execute' command now accepts script source in ~{}~ braces, like '/system scripts add source=' does;
*) console - ':execute' command now returns internal number of running job, that can be used to check and stop execution. For example:
   :local j [:execute {/interface print follow where [:log info ~Sname~]}]
   :delay 10s
   :do { /system script job remove Sj } on-error={}
*) console - firewall 'print' commands now show all entries including dynamic, 'all' argument now has no effect;
*) ipsec - increase replay window to 128;
*) fixed file transfer on devices with large RAM memory;
*) pptp - fixed ~encryption got out of sync~ problem;
*) ppp - disable vj tcp header compression;
*) api - reduce api tcp connection keepalive delay to 30 seconds, will timeout idle connections in about 5 minutes;
*) pptp & l2tp & sstp client: support the case were server issues its tunnel ip address the same as its public one;
*) removed wireless package from routeros bundle package, new wireless-fp is left in place;
*) pptp & l2tp client: when adding default route, add special exception route for a tunnel itself (no need to add it manually anymore);
*) improved connection list: added connection packet/byte counters, added separate counters for fasttrack, added current rate display, added flag wheather connection is fasttracked/srcnated/dstnated, removed 2048 connection entry limit;
*) tunnels - eoip,eoipv6,gre,gre6,ipip,ipipv6,6to4 tunnels have new property - ipsec-secret - for easy setup of ipsec encryption and authentication;
*) fixed kernel failure after queues configuration has been changed.
*) firewall - added ipsec-policy matcher to check wheather packet was/will be ipsec processed or not;
*) possibility to disable route cache - improves DDOS attack handling performance up to 2x (note that ipv4 fastpath depends on route cache);
*) fasttrack - added dummy firewall rule in filter and mangle tables to show packets/bytes that get processed in fasttrack and bypass firewall;
*) fastpath - vlan interfaces support fastpath;
*) fastpath - partial support for bonding interfaces (rx only);
*) fastpath - vrrp interfaces support fastpath;
*) fixed memory leak on CCR devices (introduced in 6.28);
*) lte - improved modem identification to better support multiple identical modems;
*) snmp - fix system scripts table;

What's new in RouterOS 6.29.1 (2015-Jun-01 13:30):
*) fixed vpls bridging (introduced in v6.29);
*) fixed problem where some CRS could not be reached (introduced in v6.29);

What's new in RouterOS 6.29 (2015-May-27 11:19):
*) ssh server - use custom generated DH primes when possible;
*) ipsec - allow to specify custom IP address for my_id parameter;
*) ovpn server - use subnet topology in ip mode if netmask is provided (makes android & ios clients work);
*) console - allow '-' characters in unknown command argument names;
*) snmp - fix rare bug when some OIDs where skipped;
*) ssh - added aes-ctr cipher support;
*) mesh - fixed kernel crash;
*) ipv4 fasttrack fastpath - accelerates connection tracking and nat for marked connections (more than 5x performance improvement compared to regular slow path conntrack/nat) - currently limited to TCP/UDP only;
*) added ~fasttrack-connection~ firewall action in filter/mangle tables for marking connections as fasttrack;
*) added fastpath support for bridge interfaces - packets received and transmitted on bridge interface can go fastpath (previously only bridge forwarded packets could go fastpath);
*) packets now can go half-fastpath - if input interface supports fastpath and packet gets forwarded in fastpath but output interface does not support fastpath or has interface queue other than only-hw-queue packet gets converted to slow path only at the dst interface transmit time;
*) trafflow: add natted addrs/ports to ipv4 flow info;
*) tilegx: enable autoneg for sfp ports in netinstall;
*) health - fix voltage on some RB4xx;
*) romon - fix 100% CPU usage;
*) romon - moved under tools menu in console;
*) email - store hostname for consistency;
*) vrrp - do not reset interface when no interesting config changes;
*) fixed async. ppp server;
*) sstp - fixed router lockup;
*) queue tree: some queues would stop working after some configuration changes;
*) fixed CRS226 10G ports could lose link (introduced in 6.28);
*) fixed FREAK vulnerability in SSL & TLS;
*) firewall - fixed sector writes rising starting since 6.28;
*) improved support for new hEX lite;

What's new in RouterOS 6.28 (2015-Apr-15 15:18):
*) email - increase server greeting timeout to 60s;
*) lte - ZTE MF823 may loose configuration;
*) userman - update paypal root certificate;
*) timezone - updated timezone information to 2015b release;
*) cm2 - fixed capsman v2 100% CPU and other stability improvements;
*) route - using ldp could cause connected routes with invalid interface nexthop;
*) added support for SiS 190/191 PCI Ethernet adapter;
*) made metarouter work on boards with 802.11ac support or usb LTE;
*) sstp server - allow ADH only when no certificate set;
*) make fat32 disk formatting support disks bigger than 134GiB;
*) fixed tunnels - could crash when clamp-tcp-mss was enabled;
*) added basic counters for ipv4/bridge fast path, also show status weather fast path is active at all;
*) trafflow: - fixed crash on disable;
*) pppoe - fixed crash when big ppp packets with were sent over EOIP;
*) tilegx - fixed memory leak when queue settings are changed;
*) ar9888 - fixed crash when hw reports invalid rate;
*) console - fixed "in" operator in console;
*) console - make "/system package update print" work again.
*) tile - rare situation when CCR devices failed to auto-negotiate ethernet link (introduced in v6.25);
*) dhcpv4 client - it is now possible to unset default clientid and hostname options
*) initial RoMon (Router Management Overlay Network) support added.

What's new in RouterOS 6.27 (2015-Feb-11 13:24):
*) added support for SiS 190/191 PCI Ethernet adapter;
*) made metarouter work on boards with 802.11ac support or usb LTE;
*) sstp server - allow ADH only when no certificate set;
*) make fat32 disk formatting support disks bigger than 134GiB;
*) fixed tunnels - could crash when clamp-tcp-mss was enabled;
*) added basic counters for ipv4/bridge fast path, also show status weather fast path is active at all;
*) console - added 'comment' parameter for '/system script'
*) api - return sentences can have property ".section" that groups values from commands such as "monitor", "traceroute", "print" (with non-zero 'interval' value);
*) cloud - add time zone detection feature "/system clock time-zone-autodetect";
*) cloud - rename "/ip cloud enabled" to "/ip cloud ddns-enabled";
*) cloud - make "/ip cloud update-time" independent from "/ip cloud ddns-enabled"
*) cloud - when setting "/ip cloud ddns-enabled" to "no" router will send message to server to disable DNS name for this routerboard;
*) cloud - "/ip cloud force-update" command now will work also when "/ip cloud ddns-enabled = no". usefull if user wants to disable DDNS;
*) RB4xxGL - improved ethernet throughput (less dropped packets);
*) RouterBOARD - fixed health reporting;
*) check-installation: fixed wrong kernel crc on powerpc boards
*) watchdog: fix software watchdog for x86
*) ssh - check conn state before sending disconnect message;
*) ipsec - fixed crash that happened in specific situation;

What's new in RouterOS 6.26 (2015-Feb-03 15:18):
*) ssh - fixed ssh related crashes;
*) ovpn - allow to add VLANs to ovpn server bindings;
*) sstp - added pfs option which enables DHE;
*) pppoe client - increased timeout when searching for servers;
*) sstp - fixed problem were Windows 8 clients couldn't connect;
*) console - fixed some missing export entries;
*) smb - improved stability, fixed some crashes and problems causing disconnects;
*) api - fixed /system check-installation;
*) cerm - fix scep client ca caps parsing;
*) RouterBOARD - included new RouterBOOT 3.22 to enable protected-routerboot setting (see wiki);
*) webfig - fixed various design skin issues;
*) NTP client - accepts ipv6 as a server address;
*) known issue - /system check-installation incorrectly reports error on PPC;
*) CCR improvements in link detection for SFP/SFP+ and auto-negotiation for SFP interfaces

What's new in RouterOS 6.25 (2015-Jan-19 10:11):
*) certificates - fix SCEP RA operation and SCEP client when operating with RA;
*) ppp - report authentication failure cause like in v6.6;
*) ovpn server - added support for address lists;
*) improved boot times;
*) api - fixed missing return values of some commands;
*) ntp - fixed vulnerabilities;
*) mpls/vpls have improved per core balancing on CCRs;
*) fixed queue tree no-mark matching (was broken since 6.24);
*) fixed nested simple queues (was broken since 6.24);
*) fixed occasional crash when ipv6 was used;
*) fixed route cache overflow (ipv4/ipv6 stops working) if ipsec is used;
*) fixed Omnitik upgrade from v5 where wireless config was not correctly saved
*) fixed Webfig Design Skin where some skin changes were not saved
*) WPS support added to CM2 wireless package

What's new in RouterOS 6.24 (2014-Dec-23 13:38):
*) ntp - fixed vulnerabilities;
*) web proxy - fix problem when dscp was not set when ipv6 was enabled;
*) fixed problem where some of ethernet cards do not work on x86;
*) improved CCR ethernet driver (less dropped packets);
*) improved queue tree parent=global performance (especially on SMP systems and CCRs);
*) eoip/eoipv6/gre/gre6/ipip/ipipv6/6to4 tunnels have improved per core balancing on CCRs;
*) fixed tx for 6to4 tunnels with unspecified dst address;
*) fixed vrrp - could sometimes not work properly because of advertising bad set of ip addresses;

What's new in RouterOS 6.23 (2014-Dec-04 14:46):
*) pptp - fixed problem where tunnel stopped transmitting packets under heavy load;
*) web proxy - caching in RAM for boards with 32MB or less RAM will not cache any content;
*) leds - removed 'led' command and added support for 'on', 'off' types under 'system leds';
*) files - allow to move files between different disks in winbox;
*) dhcpv4 server - fix adding address lists from radius;
*) dhcpv4 server - make radius classless static route tag as dhcp vendor specific;
*) smb - fixed HDD used/free space reporting
*) made powerpc metarouters work again (were broken in v6.22);
*) disks - fixed fat32 formatting where some bogus files with strange names were created (to delete existing files reformatting is needed);
*) disks - fixed problem where some of USB disks were not recognized;
*) fetch - allow checking certificate trust without crl checking;
*) userman - fix more web session problems when user uses customer and administrator interfaces at the same time;
*) snmp - fix external storage info reporting;
*) snmp - fix bulk walk problem introduced in v6.20;
*) fix tunnels - keep keepalive disabled for existing tunnels when upgrading;
*) fix tunnels - mtu for eoip tunnels was not allowed to be set less than 1280 since 6.20;
*) using routing-marks could lead to tunnel loop detection to turn off tunnels;

What's new in RouterOS 6.22 (2014-Nov-11 14:46):
*) ovpn - added support for null crypto;
*) files - allow to remove empty disk folders;
*) sntp - fix problems with dns name resolving failures that were triggering system watchdog timeout;
*) eoip/eoipv6/gre/gre6/ipip/ipipv6/6to4 tunnels have new features:
        tunnels go down when no route to destination;
        tunnels go down for 1 minute when transmit loop detected, warning gets logged;
        new keepalive-retries setting;
        keepalives enabled by default for new tunnels (10sec interval, 10 retries);
*) improved connection-state matcher in firewall - can match multiple states in one rule, supports negation;
*) added connection-nat-state matcher - can match connections that are srcnatted,dstnatted or both;
*) 100% CPU load caused by DNS service fixed;
*) 100% CPU load caused by unclassified services fixed;
*) 6to4 tunnel fixed;
*) new RouterBOOT firmware for Metal 2SHPn to improve wireless stability;

What's new in RouterOS 6.21.1 (2014-Nov-03 15:20):
*) fixed ugprading from v5;

What's new in RouterOS 6.21 (2014-Oct-29 09:41):
*) userman - fix ~Your session has been reset due to inactivity~ error;
*) timezone - updated timezone information to 2014i release;
*) wireless - fixed scanning tool crash for 802.11ac interfaces
*) wireless - fixed Nv2 kernel panic on 802.11ac interfaces;
*) quickset - added vpn configuration to Wifi AP & Ethernet modes as well;
*) lte - changed device identification for devices which regenerate MAC address, most likely this will loose device's configuration;
*) sstp - fixed disconnects on high traffic load;
*) ovpn client - fixed problem where ip address was not added to bridge interface in ethernet mode;
*) webfig - show properly Switch Port configuration;
*) disks - fixed support for MMC/SD cards;
*) winbox - added filtering by dscp to torch;
*) certificate - fix CRL handling in trust chain;
*) fixed 6to4 tunnels having inactive routes;
*) ipsec - fix downgrade problem to v5;
*) ipsec - disallow template-policy-group=none in peer config and set it to 'default';
*) metarouter - some metaroutes didn't have their licenses;
*) torch - possibility to filter by dscp;,
*) fixed - master port on AR8327 switches that is put into bridge could sometimes not work properly;
*) fixed queues - could have huge latencies and smaller throughput than specified;
*) interfaces report last link up/down time and link down count;

What's new in RouterOS 6.20 (2014-Oct-01 10:06):
*) cert scep - use fingerprints for transactionids;
*) ipsec - support fqdn as my id;
*) fetch - allow fetching files larger than 4G;
*) fetch - fixed problem where files fetched over https were trimmed in size;
*) fixed problem - it was not possible to see & uninstall dude package;
*) stores are replaced with folders and disks are now managed under /disk menu;
*) added support for SMSC750x USB Gigabit Ethernet on x86;
*) ups - support selftest for smart and hid UPS;
*) pppoe client - increase connection timeout to make connection establishment possible on busy pppoe server;
*) dhcp server - change default lease time from 3 days to 10 minutes to avoid running out of IPs;
*) ipsec - allow binding modeconf address to username;
*) eoip/eoipv6/gre/gre6/ipip/ipipv6/6to4 tunnels have new features:
        auto mtu (enabled by default for new tunnels);
        dscp (inherit/specific value, inherit by default for new tunnels);
        clamp-tcp-mss (yes by default for new tunnels);
*) eoip/gre/ipip/6to4 tunnels have dont-fragment option (inherit/no, no by default for new tunnels);
*) bridge has auto mtu feature (enabled by default for new bridges);
*) pppoe-server has auto mtu feature (enabled by default for new pppoe servers);

What's new in RouterOS 6.19 (2014-Aug-26 14:05):
*) wireless - improvements for nv2 and 802.11ac
*) sstp - make sstp work on i386 as well;
*) ippool - improve performance when acquiring address without preference;
*) partitions - copying partitions did not work on some boards;
*) bridge - added "Auto Isolate" stp enhancement (802.1q-2011, 13.25.6)
*) ipsec - when peer config is changed kill only relevant SAs;
*) vpls - do not abort BGP connection when receiving invalid 12 byte nexthop encoding;
*) dns-update - fix zone update;
*) dhcpv4 server - support multiple radius address lists;
*) console - added unary operator 'any' that evaluates to true if argument is not null or nothing value;
*) CCR - major queueing performance fix, now
*) CCR - fixed crash on L2MTU change;
*) CCR - improved performance;
*) firewall - packet defragmenting will only happen with connection tracking enabled;
*) firewall - optimized option matching order with-in a rule;
*) firewall - rules that require CONNTRACK to work will now have Invalid flag when CONNTRACK is disabled;
*) firewall - rules that require use-ip-firewall to work will now have invalid flag when use-ip-firewall is disabled;
*) firewall - rules that have interface with "Slave" flag specified as in-/out-interface will now have Invalid flag;
*) firewall - rules that have interface without "Slave" flag specified as in-/out-bridge-port will now have Invalid flag;
*) firewall - rules with Invalid flags will now be auto-commented to explain why;
*) console - added unary operator 'any' that evaluates to true if argument is not null or nothing value;
*) l2tp - force l2tp to not use MPPE encryption if IPsec is used;
*) sstp - force sstp to not use MPPE encryption (it already has TLS one);
*) sstp - report TLS encryption as well;
*) sstp - make it work for x86 systems
*) winbox - added dual PSU stats in health menu
*) ipv6 - Gre6 can now correctly fragment large packets
*) simple queue performance optimisation/improvement for multi-core RouterOS devices (especially CCR)

What's new in RouterOS 6.18 (2014-Jul-30 16:25):
*) safe mode - do not allow user with less permissions to disrupt active safe mode;
*) console - print command does not try to reuse item numbers assigned by previous invocations of 'print' when doing 'print where' or 'print follow', items are numbered consecutively starting from '0'.
*) console - fix compact export of some partially modified configuration values;
*) api - use the same syntax for property values as is used in 'print detail' output, with the exception of numbers, that are not shown with suffixes (K/M/G/T or bitrate) and are not contracted or separated into digit groups.
*) console - show internal numbers in the form returned by 'find' (like *9A0F) instead of ~(unknown)~ when configuration refers to deleted items. This change also applies to API.
*) ipsec - fix addition of default policy template;
*) console - values of type 'nil' were returning 'nil' as result of most operations. Now it compares less than all values except 'nil' and 'nothing', and compares inequal to all values except 'nil'. This was changed to make 'print where' and 'find where' more useful. An example. Previously the following command /ip route print where routing-mark!=nosuch Would not print routes that had no value for 'routing-mark' set, because (nil != ~nosuch~) was equal to nil. Now it evaluates to 'true', and this command will also print all routes that have no 'routing-mark' value set.
*) l2tp - fixed problem on CCR where server responded with wrong source address;
*) console export - put qutes around item names that start with a digit;
*) sntp client - added support for dns lookup of ntp servers;
*) console - when exporting to file, use name ending in '.in_progress', and rename when export finishes;
*) bridge setups sometimes could crash on CCR devices;
*) fixed port flapping in 1G mode on sfp-sfpplus1 on CRS226;

What's new in RouterOS 6.17 (2014-Jul-18 15:14):
*) CCR1009 - fixed crash, only affects CCR1009;

What's new in RouterOS 6.16 (2014-Jul-17 13:12):
*) 802.11ac support added in wireless-fp package;
*) winbox - fixed random disconnection over encrypted tunnels;
*) l2tp, pptp, pppoe - fixed possible packet corruption when encryption was enabled;
*) ovpn - fixed ethernet mode;
*) certificates - use SHA256 for fingerprinting;
*) ipsec - fix AH proposal and problem when sometimes policy was not generated;
*) snmp - support AES encryption (rfc3826);
*) l2tp server: added option to enable IPsec automatically;
*) poe-out: added power-cycle-ping and power-cycle-interval settings;
*) gps - increased retry duration to 30 seconds;
*) time - on routerboards, current time is saved in configuration on reboot and on clock adjustment, and is used to set initial time after reboot;
*) sntp - disabling/enabling client was causing dynamic-servers to be ignored (bug introduced in 6.14);
*) CCR - fixed rare file system corruption when none of configuration could be changed or some of it disappeared;
*) ipsec - allow multiple encryption algorithms per peer;
*) email - support tls only connections;
*) smb - fixed usb share issues after reboot
*) snmp - fix v3 protocol time window checks;
*) updated timezone information;
*) quickset - added VPN settings for HomeAP mode;
*) latency improvements on CCR devices;

What's new in RouterOS 6.15 (2014-Jun-12 12:25):
*) fixed upgrade from v5 - on first boot all the optional packages were disabled;
*) fixed problem where sntp server could not be specified in winbox & webfig;
*) metarouter - make openwrt work on ppc metarouter again;

What's new in RouterOS 6.14 (2014-Jun-06 15:34):
*) sntp - 'mode' now is a read-only property, it is set to broadcast if no server ip address is specified;
*) smb - fixed some SMB1 errors;
*) wireless-fp package is now included in routeros one (disabled by default);
*) webfig - fixed quickset, it didn't work with disabled wireless pacakge;
*) sstp - fixed problem where session was closed every 2min;
*) pptp,l2tp,pppoe - fixed problem where some of the static bindings become dynamic interfaces;
*) eoip - lowered default MTU to avoid IP packet fragmentation;
*) eoip - added clamp-tcp-mss setting with default=yes for new tunnels to avoid IP packet fragmentation;
*) fixed - bridge could sometimes get added without ~running~ flag;
*) fixed - simple queues could sometimes crash router;
*) fixed - simple queue stats freeze (empty winbox queue window);
*) ssh server - allow none cipher;
*) proxy - added 'anonymous' option which will skip adding X-* and Via headers;
*) dhcp server - added option use-framed-as-classless and added support for DHCP-Classless-Static-Route RADIUS attribute;
*) quickset - fixed problem where address mode selection did not work in bridge mode;
*) ipv6 address - fixed problem where changing advertise lost ipv6 connected route;

What's new in RouterOS 6.13 (2014-May-15 16:03):
*) console - comments are now accepted where new command can start, that is,
    where '/' or ':' characters can be used to start new command, e.g.
      /interface { # comment until the end of the line
        print
       }
*) backup - backups by default are encrypted now (with user password). To use backup on older versions, you should disable encryption with dont-encrypt flag when creating it;
*) files with '.sensitive.' in the filename require 'sensitive' permission to manipulate;
*) lcd - reduce CPU usage when displaying static screens;
*) l2tp - fixed occasional server lockup;
*) l2tp - fixed occasional server lockup;
*) pptp - fixed memory leak;
*) sstp - fixed crashes;

What's new in RouterOS 6.12 (2014-Apr-14 09:27):
*) l2tp - fixed ~no buffer space available~ problem;
*) ipsec - support IPv4 over IPv6 and vice versa;
*) pppoe - report correctly number of active links;
*) updated timezone information;
*) many fixes for CRS managed switch functionality - particularly improved VLAN support, port isolation, defaults;
*) added trunk support for CRS switches;
*) added policing support for CRS switches;
*) www - added support for HTTP byte ranges;
*) lte - provide signal strength using snmp and make 'info once' work in console;

What's new in 6.11 (2014-Mar-20 09:16):
*) ipsec - fix aes-cbc hardware acceleration on CCR with key sizes 192 and 256;
*) wireless - add auto frequency feature;
*) ovpn - fixed TLS renegotiation;
*) ovpn - make bridge mode work with big packets (do not leave extraneous padding);
*) ovpn - fixed require-client-certifcate;
*) ppp - revert RADIUS NAS-Port behaviour, report tunnel interface id;
*) ppp - mppe encryption together with mrru locked the router;
*) dhcp - added support for DHCP option 138 - list of CAPWAP IPv4 servers;
*) quickset - added Guest Network setup to Home AP mode;
*) console - no longer required to supply value of '/routing bgp instance vrf' property 'instance' for 'add' command;
*) ethernet - added option to enable rx/tx flow control (will be disabled by default);
*) ethernet - added ability to specify advertised modes for copper ports;
*) fixed 100% cpu usage on CCRs;
*) ssl - not finding CRL in local store for any certificate in trust chain will cause connection to fail;
*) lte - support for Huawei ME609 and ME909u-521;

What's new in RouterOS 6.10 (2014-Feb-12 13:46):
*) fix autosupout.rif generation after kernel panic;
*) ovpn - make it work again;
*) ovpn client - remove cipher=any & auth=any options, protocol does not support them;
*) pptp - fixed where Windows & MacOS clients were disconnecting all the time;
*) sstp - make it work with Windows client with AES encryption;
*) ipv6 pool - fix dynamic prefix disappearing which may influence large VPNs with IPv6;
*) ssh client - fix key agreement when sometimes wrong DH algorithm was selected;
*) bgp - multipath eBGP now does not propagate BGP nexthop unless forced in configuration;
*) removed 10/100 half duplex from autonegotiation advertisement on CCR;

What's new in 6.9 (2014-Jan-31 11:18):
*) lcd - added option to change the color-scheme;
*) updated bootloader firmware;
*) ppp: fixed RADIUS accounting;
*) ppp: fixed IPV6-Prefix assigning;
*) ppp: fixed dial-on-demand;

What's new in 6.8 (2014-Jan-29 15:52):
*) bridge - default protocol-mode changed to RSTP for new bridges, fixed bridge mac address changing when port (with lowest mac address) goes down
*) userman - improve startup time;
*) sstp client - support server name verification from certificate;
*) wireless - improved 11n and nv2 stability;
*) dhcp client - support interfaces in bridge;
*) dhcp - parse decimal strings and IP addreses in options value;
*) bgp - don't show community 'internet' in BGP advertisements;
*) ipsec - enable hardware acceleration for aes-cbc-128 + md5|sha1|sha256 aead on tilera cpus;
*) ospf - fixed checksum calculation for OSPFv3 AS-external-LSAs;
*) default configuration - changed dhcp server lease time to 10 minutes;
*) fixed port isolation on CRSs (bug introduced in v6.6);
*) smb - added support for SMB 2.002
*) timezone information updated;
*) ppp - fixed ppp bridging (did not work since v6.6);
*) improved speed of PPP, PPPoE, PPTP & L2TP on multicore routers;
*) address-list - fix crash when adding two identical address list entries (not allowed any more);
*) fixed multicast forwarding on CCRs;

What's new in 6.7 (2013-Nov-29 13:37):
*) support Android usb tethering interface;
*) ipsec - added aes-gcm icv16 encryption mode;
*) wireless - improve rate selection for nstreme protocol
*) poe - new poe controller firmware for RB750UP and OmniTIK UPA;
*) ipsec - added aes-ctr encryption mode;
*) leds - inverted modem signal trigger, now it will trigger when the signal level rises above the treshold;
*) ipsec - added sha256 and sha512 support;
*) ipsec - proposal defaults changed to aes-128 and sha1 for both phase1 and phase2;
*) certificate - support ip, dns and email subject alternative names;
*) dhcpv4 server - added REMOTE_ID option variable for relayed packets;
*) ipsec - fix policy bypass on IPv6 gre, ipip, eoip tunnels when policy uses protocol filter;
*) userman - fix crash on tilera;
*) fixed hairpin nat on bridge with use-ip-firewall=yes;
*) fixed vlan on bridge after reboot having 00:00:00:00:00:00 mac address;
*) address-list - allow manually adding timeoutable entries;
*) address-list - show dynamic entry timeout;
*) fixed l2mtu changing on CCRs - could cause port flapping;
*) disabling/enabling ethernet ports did not work properly on CCRs - could cause port flapping;
*) fixed port flapping on CCR - could happen when having other than only-hardware-queue interface queue.
Note that having other interface queue than only-hardware-queue dramatically reduces performace, so should be avoided if possible;

What's new in 6.6 (2013-Nov-07 13:04):
*) winbox - fixed problem where all previous session opened windows were read only;
*) certificate - no more 'reset-certificate-cache' and 'decrypt' commands, private keys can be decrypted only on 'import', use 'decrypt' before upgrade if needed;
*) fixed arp-reply only with more than one ip address on interface;
*) fixed RB400 not to reboot by watchdog during micro-sd format;
*) web proxy - fix SPDY server push handling;
*) certificate - merged '/certificate ca issued', '/certificate scep client' and '/certificate templates' into '/certificate';
*) console - :foreach command can iterate over keys and values in an array, by specifying two counter variables, e.g.: :foreach k,v in=[/system clock get] do={:put "$k is $v"};
*) added support for new Intel 10Gb ethernet cards (82599);
*) certificates - fixed certificate import;
*) wireless - fixed crash when dfs was enabled on pre-n wireless cards;
*) fixed port flapping on CCR;

What's new in 6.5 (2013-Oct-16 15:32):
*) tftp - added data packet pipelining for read requests;
*) console - exported physical interface configuration uses 'default-name' instead of item number to match relevant interface;
*) console - report all constituent errors for parameters with multiple alternative value types;
*) certificates - merge '/certificate ca' into '/certificate', use set-ca-passphrase to maintain CA functionality;
*) lcd - backlight option is replaced with "/lcd backlight" command
*) dhcp server - added option to disable conflict-detection;
*) console - ':return' does not trigger 'on-error=' action of ':do' command;
*) route - fixed crash that could be triggered by change in nexthop address resolution;
*) route - some imported VPNv4 routes were not using MPLS labels;
*) route - imported VPNv4 routes were not always updated or removed when the original route changed;
*) winbox - fixed problem where all settings were read only on first open;
*) ovpn server - use only ciphers that are allowed not that client requested;
*) ssh client - fixed public key authentication;
*) ipsec - fix peer mathing with non byte aligned masks;
*) fix routerboot upgrading if RouterOS is partitioned;
*) add support for second serial port on CCR boards;
*) fix serial port baudrate selection on CCR boards;
*) ethernet interface stats that are behind switch chip show real hw stats instead of just the traffic that goes through cpu;

What's new in 6.4 (2013-Sep-12 13:52):
*) wireless - improved 802.11n wireless retransmission (doesn't effect nstreme/nv2)
*) ovpn - allow to specify server via dns name;
*) winbox - fixed problem where ipv6 routes with non local link address gateway could not be added;
*) fixed watchdog on mipsle boards;
*) traceroute - added count & max-hops parameters;
*) traceroute - added back use-dns parameter;
*) fixed usb Yota LTE modem hangup;
*) console - make newly added item names always immediately available;
*) graphing - make sure that interface graphs gets preserved across reboots;

What's new in 6.3 (2013-Sep-03 12:25):
*) ssh - fixed denial of service;
*) traceroute - show mpls labels as well;
*) bug fix - sometimes some new interfaces could not be created properly any more (f.e. some pppoe clients could not connect);
*) console - added '/console clear-history' command that clears command-line history for all users, requires 'policy' policy;
*) sstp - limit packet queue for each device;
*) RB2011L - fixed occasional gigabit switch-chip lockup;
*) user manager - will warn on 1MB and stop before reaching minimum of 500KB disk space;
*) hotspot - do not account traffic to local hotspot pages;
*) ppp, hotspot - added ability to specify where to insert rate limiting queue, it's parent and type;
*) pptp, l2tp, sstp - allow to specify server via dns name;
*) dhcp - added ability to specify where to insert rate limiting queue;
*) www proxy - support ipv6 parent proxy;
*) webfig - fixed problem when opening quickset page country was automaticly changed to etsi;
*) traceroute - added mtr like pinging;
*) fix queues - correct queue was not installed when last child removed;
*) fix simple queues - sometimes some simple queues would stop working after configuration changes;
*) console - fixed issue with local variables having non-empty value before first assignment;
*) console - fixed command ":global name" without second argument to not create or change global variable "name", only effect is to make "name" refer to global variable.
*) console - fixed passing local variables as argument to function;
*) RB1200 - fixed crash when receiving over l2mtu size packets on some ethernet interfaces;

What's new in 6.2 (2013-Aug-02 10:37):
*) console - added "on-error" argument to ':do' command that is executed if command raises error;
*) hotspot - fixed chap error after failed http-chap login (broken in v6.1);
*) console - added new ':return' command that interrupts execution of script and passes argument as return value if script was called as function;
*) routerboot - fixed upgrade from RouterOS (could fail on some units);
*) userman - fixed payment gateway response notify processing;
*) console - resolved issue with 'from-pool' propery in '/ipv6 address';
*) console - array value syntax in expressions '{1;2;3;4}' now can specify values with word keys as '{a=1;b=2}';
*) console - added 'verbose' argument to '/import' command that enables line-by-line script import. By default import whole script at once and don't print it, as it was in version 6.0;
*) console - ':global', ':local' and ':set' commands have new parameter 'do' that allows assigning block of commands to the variable;
*) console - global variables now are common to all users and are available to all users with at least "read,write,test,policy" policy;
*) console - fixed parameter passing to scripts. Script parameters can be accessed without declaring them with ':local' and ':global' commands. For backwards compatibility global variables are first looked up in script parametrs;
*) console - '$var 1 2 a="a" b="b"' syntax for passing parameters to commands stored in a variable. Parameters are accessed as '$1' '$2' '$a' '$b';
*) ipsec - fixed peer address matching;
*) ups - query smart ups capabilities before issuing any commands;
*) improved CCR responsiveness on other interfaces when one interface is under attack;
*) sms tool - added sim-pin setting;
*) dhcp server - framed routes are now also added to the server routing table;
*) dhcpv6 server - added binding-script option;
*) proxy - allow multiple src-address for ipv4 and ipv6;
*) eoip,gre tunnels could occasionally crash multicore router;
*) fixed bug - sometimes some types of interfaces would stop working;
*) ipsec sometimes could crash kernel on CCR;
*) connection tracking sometimes could crash kernel on CCR;
*) ppp,pptp,l2tp,sstp - added default-route-distance parameter;
*) scep - "/cert scep ra" merged into "/cert scep client" without saving ra config;
*) ipsec - fix phase1 autonegotiation on little endian platforms;
*) pppoe server - allow service with empty service-name to accept all pppoe clients;
*) lcd - current-screen option is replaced with "/lcd show" command
*) lcd - current-interface option is replaced with "/lcd interface display" command
*) graphing - make graphs stable on ppp & ovpn interfaces;
*) www, hotspot - fixed problem when www service stopped responding on high load;
*) winbox, webfig: allow to enter space in the text fields;
*) webfig - fixed configuration of VPLS & routing filters;
*) lcd - added option for enabling or disabling the touch screen;
*) lcd - added options for screen switching;
*) lcd - up to 10 non-physical interfaces can now be added to the lcd;
*) lcd - all interface graph screen can now be customized from /lcd interface page;
*) backup - changed default backup file name to <id>-<YY><MM><DD>-<HHMM>.backup for file browsers to sort them properly;
*) webfig - it did not work in Opera;
*) webfig - made terminal work again;
*) winbox - added ability to fully set up traffic generator in winbox;
*) trafficgen - allow ranges for ip addrs and udp ports;
*) trafficgen - add tcp header support;
*) queue simple - fixed bug - actual queue order sometimes was wrong;
*) queue simple - queue is not invalid when at least one of target interfaces is up;
*) fixed crash when setting master-port on AR8327 switch chips;
*) fixed addresslist - dynamic entries sometimes would still show up even afther being timed out;
*) added /ip settings allow-hw-fast-path setting to control AR8327N hardware ipv4 fast path;
*) vrrp - allow more than one vrrp on interface;

What's new in 6.1 (2013-Jun-12 11:50):
*) pptp, l2tp - fixed crash when tunnel mru was too big and fragmented ip packet was received;
*) hotspot - fixed problem when after upgrade hotspot html directory was empty;
*) ipv6 nd - dns dynamic-servers were not included in router advertisements;
*) winbox - fixed problem Switch menu disappeared on RB2011;
*) fixed memory amount issue on RB1100AHx2;
*) console - '/import' prints each command that is executed;
*) console - 'import' has new argument 'from-line' that starts executing commands after specified line;
*) secure api - fixed problem when wrong client ip address was reported;
*) hotspot - fixed universal client;
*) api - added support for API over TLS (SSL);
*) api - api service is now enabled by default;
*) ppp - do not show R flag for locally authenticated users;
*) vrrp - fixed ah authentication;
*) webfig - added support for RADIUS authentication (via MS-CHAPv2);
*) ipsec - for peers with full IP address specified system will autostart ISAKMP SA negotiation;
*) trafficgen - added inject-pcap command for replaying pcap files into network;
*) dns - retry queries with tcp if truncated results received;
*) improved queue statistics updating;
*) fix 1G linking with some Cisco devices (affects RB7xx, RB9xx, RB1100, RB2011, CCR);

What's new in 6.0 (2013-May-17 14:04):
*) ipsec - added /peer passive option which will prevent starting ISAKMP negotiation and signifies xauth responder/initiator side;
*) RouterBOARD - default wireless config now includes password - serial number;
*) lte - support YOTA WLTUBA-107;
*) console - fixed crash when variable name was not specified for ':global', ':local', ':set', ':for' and ':foreach' commands;
*) hotspot - added mac-cookie login method; http://wiki.mikrotik.com/wiki/Manual:Hotspot_Introduction#MAC_Cookie
*) lcd - show a message when system shutdown is complete;
*) lcd - added Log screen which is accessible through the Main Menu and shows log messages where action=echo;
*) ipsec - added pre-shared-key-xauth and rsa-signature-hybrid authentication methods;
*) increased max l2mtu on CCR to 10226 bytes;
*) fixed crash on RB1200;
*) fixed bonding - did not work after remove, undo;
*) fixed queues - router could become unresponsive when configuring queues;

What's new in 6.0rc14 (2013-Apr-24 11:52):
*) route - make connected routes inactive when interface has no link;
*) ipsec - changing or removing unused peer or proposal config won't flush active SAs;
*) console - add 'without-paging' to more 'print' commands;
*) route - automatically repair FIB inconsistencies;
*) ipsec mode-cfg - unity split include support;
*) ipsec policy - template matching for policy generation;
*) metarouter: fixed occasional lockups on mipsbe boards;
*) fixed crash when bridge filter rule had action=return for rule in builtin chain;
*) traffic-flow - fixed deadlock and crash on multicore;
*) fixed memory leak on CCR with PPPoE interfaces;
*) improved PPPoE interface encapsulation performance;
*) fixed queues - total amount of traffic passing through queues sometimes was about 1Gbit;

What's new in 6.0rc13 (2013-Apr-08 14:25):
*) pppoe, l2tp, pptp server - increased lcp retransmit count to 10;
*) pptp, l2tp & pppoe clients - added ability to specify keepalive timeout;
*) graphing - fixed problem were interface graphs are lost on reboot;
*) dhcpv6 - added relay;
*) sstp server - restore (disabled in rc12) test mode which allows running server without certificate;
*) lcd - added option for turning backlight on/off;
*) bgp - fix med comparison check if routes are received from iBGP peer;
*) fixed simple queues - sometimes some simple queues did not limit traffic (bug introduced in 6.0rc12);
*) allow to change arp timeout (in /ip settings);
*) added /ip neighbor discovery settings setting "default-for-dynamic" to control discovery on new dynamic interfaces (off by default);

What's new in 6.0rc12 (2013-Mar-26 17:18):
*) ospf - add use-dn option;
*) ospf - fix route-tag handling;
*) fixed layer7 matcher - it is case insensitive now;
*) remote logging - added iso8601 time format support;
*) bgp - change MED propagation logic, now discarded when sending route with non-empty AS_PATH to an external peer;
*) fixed occasional nand corruption on CCR;
*) ipsec - added ipv4 mode-cfg support for responder;
*) ipsec - fixed some issues with removal of dynamic policies;
*) email - renamed parameter tls to start-tls for send command;
*) wireless - update required when using small width channel RB2011 RB9xx caveat: update remote end/s before updating AP as both side are required to use new/same version for a link
*) ipsec - generate-policy now can have port-strict value which will use port from peer's proposal when generating policy or port-override which will always generate policy for any port;
*) ipsec - responder side now uses initiator exchange type for peer config selection;
*) lcd - changed All interface stat screen (bar graphs) to show total bandwidth usage, combine rx/tx together;
*) lcd - removed "all-interface-mode" option;
*) lcd - changed "Interfaces" screen to show interface usage similiar to All interface stat screen;
*) lcd - improved Interfaces -> * -> Info screen, added more wireless information;
*) lcd - added Registration Table screen for wireless interfaces under Interfaces -> 'wireless interface' -> Registration Table;
*) fixed occasional kernel crashes on CCR;
*) fixed other than only-hardware-queue interface queues on CCR;
*) lte - devices with vendor/product id pair 0x0f3d/0x68AA now uses directip inferface;
*) dhcp client v4 - option add-default-route now supports special-classless value;
*) significantly increased simple queue performance on multi core systems (up to 9x on CCR1036 with at least 32 top level simple queues);
*) ip arp - new property published;
*) web proxy - added new option max-cache-object-size, upper limit of max-client-connections and max-server-connections is now calculated from system RAM;
*) ospf - fixed inconsistency in external ECMP route calculation;
*) certificates - CA keys are no more cached, every CA operations now requires a valid CA passphrase. use set-ca-passphrase for scep server to cache CA key in encrypted form;
*) ppp - made MPPE encryption work on tilera (bug introduced in 6.0rc10);
*) tool fetch - https support with optional certificate verification;
*) sstp server - removed test mode which allowed running server without certificate;
*) trafficgen - add support for ipv6 header;
*) wireless - added support for small channels on SXT lite;

What's new in 6.0rc11 (2013-Feb-22 09:17):
*) ppp - made MPPE encryption work on tilera (bug introduced in 6.0rc10);
*) sstp server - added option to force AES encryption;
*) fixed router crash on heavy traffic with sierra lte modem on boards with 32MB RAM;

What's new in 6.0rc10 (2013-Feb-15 10:47):
*) ppp - added bridge-path-cost & bridge-port-priority to ppp profiles;
*) ppp - made RSTP work over ppp links as well;
*) ppp - added last-logged-out to ppp secrets;
*) ppp - made MRRU work propererly on CCR;
*) hotspot, ppp - support multiple address-lists;
*) fixed problem - could not format disks larger than 2Gb on CCR;
*) fixed problem - repartitioning flash second time made system unbootable;
*) fixed problem - partition fall back settings got corrupted;
*) fixed problem - package made for other architectures could be installed, making whole system non functioning;
*) sstp, ipsec - respect CRLs;
*) certificates - for certificates marked as trusted=yes, CRL will be automaticly updated once in hour from http sources;
*) fixed ppp family interfaces - show it's status (bug introduced in rc8);
*) fixed p2p, connection-bytes firewall matcher;
*) fixed ip firewall nat action=same;

What's new in 6.0rc9 (2013-Feb-08 08:15):
*) ospf - fixed Summary-LSA prefix length check for OSPFv3, was not accepting valid LSAs;
*) certificates - fix broken certificate handling (bug introduced in rc8) in all related programs;
*) fixed - bgp tcp-md5-key crash on CCR;
*) fixed interfaces list sometimes showing up empty;
*) fixed - ip addrs could be inactive for some types of interfaces which are added as bridge ports and disabled;

What's new in 6.0rc8 (2013-Feb-04 13:25):
*) ppp,pppoe,pptp,l2tp,sstp - only 2 change mss mangle rules are created for all ppp interfaces;
*) wireless - fixed AES encryption speed issues (upgrade suggested);
*) dhcpv6 server - handle info requests;
*) webfig - compressed all html resource files, speeds up opening of webfig page;
*) console - reduced width of address column in '/user print';
*) simple queues requires target arg to be specified when adding;
*) do not count packets for unknown protocols as rx_dropped;
*) snmp - provide POE info;
*) improved cpu usage reporting on CCR boards;
*) improved interface reading performance;
*) changed CLI interface order - first are ethernets, second wireless, third everything else. Within group interfaces are ordered by name;
*) interfaces are deleted much faster, could be bottleneck on systems with many ppp sessions;
*) pptp,l2tp,6to4 tunnel encapsulation/decapsulation now resets packet marks to have consistent behavior across tunnels;
*) fix simple queue interface matching when doing encapsulation in some tunnel, could result in double accounted packets;
*) ip/ipv6 firewall has all-ether,all-wireless,all-vlan,all-ppp interface matchers
*) queue limits could be inaccurate for large limits (100M or more);

What's new in 6.0rc7 (2013-Jan-18 13:04):
*) dhcp relay - possibility to add relay agent information option;
*) lcd - options current-interface, time-interval and all-interface-mode no longer get reset after reboot;
*) fix reboot in virtualized enviroment;
*) lcd - improve slideshow screen;
*) console - file print now shows file size as small number with suffix;
*) dhcp v4 - fix problem when sometimes client or server failed to send packets most likely it happened on vlan interfaces;
*) ipv6 - added setting to disable forwarding;
*) added "/ip neighbor discovery settings" menu with "default=yes/no" setting;

What's new in 6.0rc6 (2012-Dec-21 12:20):
*) fixed problem - netinstall for x86 did not work;
*) lcd - added take-screenshot command;
*) lcd - fixed calibration, fresh boards no longer require recalibration;
*) optimize memory usage - makes 32Mb routerboards more stable;
*) support BandRich modems with newer firmware;
*) ipsec - authentication using certificate store but without CRL checking for now;
*) added feature - flash can be partitioned on routerboards and separate versions can be installed on each of them (requires latest firmware);
*) fixed problem - after restoring backup, it gets restored again on every reboot;
*) improved router performance when dhcp client/server present in system;
*) fixed vlan on bond after reboot;
*) fixed occasional queue kernel crash;

What's new in 6.0rc5 (2012-Dec-05 15:22):
*) wireless - advanced rate selection is the only method supported;
*) ssh client - support keyboard-interactive authentication;
*) fix simple queue config upgrade;

What's new in 6.0rc4 (2012-Nov-28 17:16):
*) dhcp server - added two radius string options (24, 25) for use in custom dhcp options;
*) fixed problem - ppp dial-on-demand did not work, it allways dialed in;
*) fixed problem - password was not saved when adding new user;
*) added feature - show last-logged-in in users list;
*) snmp - fix interface table;
*) dhcp ipv6 - added comment fields;
*) dhcp client ipv6 - add/remove default route or ntp server without renew when settings change;
*) ppp clients - set up dns dynamic-servers instead of static ones;
*) fixed problem - Connect button did not work in wireless scanner;
*) dhcp server - added radius framed route support;
*) fixed problem - MetaROUTERs did not work on PowerPC boards (RB800, RB1000, RB1100);
*) fixed problem - check-for-updates stopped working if it didn't find new updates previously;
*) dhcp ipv6 - added dns option support;
*) gre - support all protocol encapsulation, not just ip and ipv6;

What's new in 6.0rc3 (2012-Nov-09 12:59):
*) fixed problem - MetaROUTERs did not work on RB2011s;
*) fixed problem - Realtek 1Gbit ethernet cards did not work;
*) added "/ip settings" menu with following settings: ip-forward, send-redirects, accept-source-route, accept-redirects, secure-redirects, rp-filter, tcp-syncookies;
*) fix some ipv6 firewall matchers;
*) improved performance for eoip,eoipv6,gre,gre6 tunnels, especially on multi core;
*) /queue tree entries with parent=global are performed separately from /queue simple and before /queue simple;
*) snmp - fixed missing OIDs;

What's new in 6.0rc2 (2012-Oct-24 11:27):
*) added generic fast path support on certain interfaces (all ethernets on RB3xx, RB6xx, RB7xx, RB8xx, RB9xx, RB1000, RB11xx, RB2011);
*) added ipv4 fast path, it doubles ipv4 forwarding performance on supported interfaces when no firewall, conntrack, queues.
*) added traffic generator fast path;
*) addedbridge fast path; More info on fast path: http://wiki.mikrotik.com/wiki/Manual:Fast_Path

What's new in 6.0rc1 (2012-Sep-26 14:56):
*) i386 - increased number of supported cores to 64;
*) userman - fix unpaid profile activation while authenticating;
*) dhcp client - custom options;
*) dhcp options - allow mixing different data types;
*) console - "export compact" now is the default, use "export verbose" to get previous behaviour;
*) ntp - make it work again;
*) tftpd - if real-file is a existing directory then prefix request with it;
*) RB333 ethernets are back;
*) dns - rotate servers only on failure;
*) fix M3P (/ip packing);

What's new in 6.0beta3 (2012-Aug-22 12:12):
*) installation - use much less space in storage (works well with 32MiB flash);
*) routerboard package is now merged with system package;
*) userman - use corresponding time zone data when showing date in console;
*) gps - init-string option;
*) ipsec - kill phase1 if ipsec-sa in responder expires due to system time change;
*) ipsec - rekey phase1 before expiration;
*) ipsec - when last ISAKMP-SA is deleted for the remote host remove related IPSec-SAs;
*) ipsec - send delete IPSec-SAs on shutdown/reboot;
*) user manager - fix user's active profile end time if it has unlimited validity, these users now won't be hidden from reports when date filters are in effect;
*) certificate validity is shown using local timezone offset;
*) fixed queue bit rate reporting;
*) fixed ipv6 firewall;
*) upgraded drivers and kernel (to linux-3.3.5);
*) added priority matcher to firewall;
*) added change-dscp from-priority and from-priority-to-high-3-bits options;
*) fixed router crash or hang when rebooting;
*) add snif-tzsp,snif-pc actions to ip/ipv6 firewall mangle;
*) traffic-generator improvements for multi core;

What's new in 6.0beta2 (2012-Apr-24 10:57):
*) "/ip address set" and "/ipv6 address set" commands did not work properly;
*) fix eoipv6 tunnels, tunnel-ids in packets were shuffled;
*) fix dynamic simple queues;
*) fix /ipv6 firewall connection-state matcher, was crashing router;
*) fix traffic generator, was crashing router when generating traffic on bonding interface;
*) fix wds interfaces;
*) downgrading to v5 was losing wireless interface configuration;
*) fix queue byte and rate statistics;
*) fix ethernet port order on all boards;

What's new in 6.0beta1 (2012-Apr-13 15:26):
*) updated drivers and kernel (to linux-2.6.38.2);
*) improved interface management (scales well for up to thousands of interfaces and more);
*) improved queue management (/queue simple and /queue tree) - easily handles tens of thousands of queues;
*) improved overall router performance when simple queues are used - at least double the performance of v5, even bigger improvements on multicore systems;
*) very small overhead for packets that miss simple queues, but simple queues are present in the system;
*) pcq queue is NAT aware (just like "/queue simple" and "/ip traffic-flow";
*) in "/ip firewall mangle" can specify "new-priority=from-dscp-high-3-bits";
*) new default queue types: pcq-download-default and pcq-upload-default;
*) simple queues have separate priority setting for download/upload/total;
*) slave flag shows up for interfaces that are in bridge,bonding or switch group;
*) global-in, global-out, global-total parent in /queue tree is replaced with global that is equivalent to global-total in v5;
*) simple queues happen in different place - at the very end of postrouting and local-in chains;
*) simple queues target-addresses and interface parameters are joined into one target parameter, now supports multiple interfaces match for one queue;
*) simple queues dst-address parameter is changed to dst and now supports destination interface matching;
*) dns cache logs requests to topics "dns" and "packet";

 RouterOS v5.x

What's new in 5.26 (2013-Sep-04 15:01):
*) ssh - fixed denial of service;

What's new in 5.25 (2013-Apr-25 15:59):
*) web proxy - speed up startup;
*) metarouter - fixed occasional lockups on mipsbe boards;
*) wireless - update required when using small width channel RB2011 RB9xx caveat: update remote end/s before updating AP as both side are required to use new/same version for a link

What's new in 5.24 (2013-Feb-19 15:29):
*) l2tp - fixed problem with reconnects when it added multiple ip addresses;
*) wireless - fixed AES encryption speed issues (upgrade suggested);

What's new in 5.23 (2013-Jan-29 14:07):
*) lcd - changed gamma, which gives greater contrast
*) fix reboot when running on third party hypervisors;
*) ppp client - fixed possible loss of configuration after reboot for some modems;
*) fixed wifi led order on "SXT Lite5";

What's new in 5.22 (2012-Nov-23 09:28):
*) userman - fix PayPal "bad HTTP response";
*) kvm - fixed possible ROS guest incomplete package installation;
*) l2tp server - added keepalive-timeout setting;
*) wireless - fixed RADIUS mac-caching;
*) wireless - fixed rare nv2 link stall;
*) metarouter - fixed system occasional lockup for 12s on RB4xx and RB7xx;
*) metarouter - fixed crash when FPU exception was raised in one of powerpc metarouters;
*) quickset - added HomeAP mode;
*) fixed "export compact" in "ip proxy";

What's new in 5.21 (2012-Oct-12 08:25):
*) route - fix dst-prefix filtering did not return routes when routes with different routing-mark were present;
*) wireless - improved nv2 stability;
*) winbox & webfig - added simple new version downloading & upgrading panel;
*) dhcp server - immediately store to disk changes for lease configuration;
*) lcd - improve graphs screen
*) lcd - improve touch screen (must /lcd reset-calibration)
*) smb - fix smb share mounting on linux systems
*) ovpn - fixed memory leak on disconnects;
*) userman - fix unpaid profile activation while authenticating;
*) sstp - fix high CPU usage on SSL handshake;
*) winbox - added ability to add time & date to dashboard;
*) metarouter - fixed lockups on RB110AH;
*) metarouter - fixed occasional lockups on RB450G;
*) ups - fixed problem connecting to USB device, introduced in 5.20;
*) quickset - added Wireless PTP Bridge mode;
*) fix MPLS MTU configuration usage;
*) dns - fix empty response;

What's new in 5.20 (2012-Aug-15 13:04):
*) manual upgrade to NEW beta poe controller firmware v2.0 for RB750UP and OmniTIK UPA; more info at http://wiki.mikrotik.com/wiki/Manual:PoE-Out
*) fix RB951-2n wireless issues;
*) ups - fixed resource leak;

What's new in 5.19 (2012-Jul-16 10:51):
*) ssh - added /ip ssh regenerate-host-key which will regenerate current host key;
*) dhcpv6 client - fix multiple advertise handling;
*) snmp - fix v3 engineID discovery;
*) fix ticking sound on RB411UAHL;
*) user manager - fixed byte to KiB, MiB and GiB conversion (digit after decimal point was incorectly calculated);
*) fix routerboard firmware upgrade on RB951-2n;
*) sniffer/torch + simple queues sometimes could crash router;

What's new in 5.18 (2012-Jun-21 17:20):
*) fixed upgrade problem when it failed with error "disk is too small" while there was plenty of space left;
*) fix health and poe access reliability on OmniTIK UPA and RB750UP boards;
*) sstp - improve initial handshake to better handle many new connections;
*) wireless - do not use bridge and WDS mode on AP-AP links, causes loops;
*) dhcp ipv6 pd client - fixed ipv6 pool creation after reboot;
*) dhcp ipv6 pd client - added option add-default-route;
*) sstp - fixed connection idle time reporting;
*) fix bad block count not to increase on Samsung K9F1208U0C nand;
*) snmp - fix dhcp lease table, snmp reported an incorrect information when a static lease had configured different address than current active address, this should also solve problem with dude polling same leases over and over again;
*) fix RB1100 crash on interface disable/l2mtu change/reboot;
*) dns could not resolve some domain names, was ignoring replies with DNAME RRs;
*) fix firewall log action - sometimes was not logging mac addr;

What's new in 5.17 (2012-May-28 12:34):
*) files - fixed problem when directories disappeared after reboot on usb or sd flash;
*) webfig - make QuickSet scan list work in Firefox v12;
*) webfig - fixed problem in QuickSet when changing country or channel-width in AP mode would enable NV2 protocol;
*) webfig - fixed skins when hiding first tab may make other tabs inaccessible;
*) winbox - fixed packet raw data view in packet sniffer;
*) winbox - fixed problem when router could be DoS attacked through winbox port;
*) ports - add option "/port firmware ignore-directip-modem" which will ignore modems ip interface and modem's serial ports will be made accessible to users;
*) ipv6 pool - allow pools with prefix equal to prefix length;
*) ping times improved on Nv2 high data rate wireless links;
*) tool email - added starttls option;
*) snmp - allow multiple ip ranges for each community;
*) serial console - added channel support;

What's new in 5.16 (2012-May-09 17:23):
*) webfig - fixed problem when new item addition to status page in design skin mode did not work;
*) add pw-type option for BGP VPLS;
*) fixed mac telnet - sometimes did not work if more than one mac level path to destination;
*) user - fixed problem when adding new users from console it's password was not set;
*) reset packet mark when encapsulating/decapsulating from eoip,ipip,gre,eoipv6,ipipv6,gre6 tunnels

What's new in 5.15 (2012-Apr-20 13:11):
*) ssh - added option "/ip ssh always-allow-password-login" which will allow password based login for users using public key;
*) snmp - moved disk oids shown in console from "/system resoure" to "/store disk";
*) certificate manager - added PKCS#8 support for key import;
*) lte - support for modems which utilize sierra_net driver with product ID 0x68a3, serial interface is no longer accesable for those modems;
*) quickset - added AP mode;
*) smb - fixed authorization problems, shares should now be browsable;
*) dhcp client - revert NTP settings on dhcp client disable;
*) dhcp server - use DNS server from DHCP client (broken in v5.13);
*) sstp - made it working on Pentium 4 again;
*) added support for usb forwarding over tcp;
*) webfig - fixed uptime column in hotspot active users list (and other places as well) ;
*) webfig - hide design skin button if user does not have sensitive & policy permissions;
*) webfig - do not allow to upload/download files without write/read & ftp permisions;
*) webfig - fixed blank page when logout, undo, redo, hide-menu or safe-mode were hidden in skin,
*) winbox - show connection tracking max entries properly;
*) winbox - make interface name sorting more stable;
*) winbox - do not reset user password when changing it's properties;
*) rb1200 ether6,ether7,ether8 did not support big packets when linked at 10/100Mbps;

What's new in 5.14 (2012-Feb-22 12:04):
*) winbox - fixed problem when changing main winbox window size and some of the inner windows become hidden;
*) backup - backup file creation failed if router identity name had / in it;
*) wireless - improved nv2 link stability to reduce control frame timeouts, only AP requires update;
*) fixed rare configuration retention problems on RB1100AHx2;
*) certificate manager - fixed building certificate trust chain which caused certificate validation problems for some programs (VPN, SSTP etc) when downgrading from this version to older version please run "/certificate reset-certificate-cache" to maintain correct trust chain;

What's new in 5.13 (2012-Feb-14 08:18):
*) firewall - to-address can be specified as ip address with mask in addition to ip range;
*) traffic-generator - fix crash on multicore systems;
*) smb - fixes and improvements;
*) sstp - added RC4 cipher support to fix interoperability issues introduced in MS KB2585542 security update. from now on RC4 is the preferred cipher and AES will be used only if peer does not advertise RC4;
*) dhcp client - revert DNS settings on dhcp client disable;
*) quickset - country & channel-width can now be specified;
*) quickset - added support for configuring pppoe client on wireless interface;
*) bridge - fixed problem where arp reply-only or disabled mode didn't work and disabled bridge interfaces didn't have X flag;
*) webfig - fixed problem where none of table entries were shown if table filter was left to 'all';
*) webfig - show login page if autologin fails;
*) user manager - don't store backups in active store, always use path relative to /;

What's new in 5.12 (2012-Jan-19 14:31):
*) console - allow to specify blank interval on x86 screens;
*) console - changed 'password' command, now can be used from scripts and api;
*) winbox - reorganized window layout to match console better;
*) ssh - fixed interoperability problem with psftp based clients;
*) implemented simple SMB (windows file sharing) server;
*) fixed ovpn-client - client stopped working if it was enabled/disabled at wrong time;
*) fixed ipv6 - ipv6 neighbor discovery stopped working when interface arp setting wasn't set to enabled;
*) console - minor fixes and improvements;
*) console - added support for compact export;
*) hotspot - added login redirect through http status 302;
*) leds - added default configuration for R5SHPn wireless card;
*) ppp - fixed problem were remote-ipv6-prefix was not given to user if remote-ipv6-pool was provided;
*) winbox, webfig - sort ethernet interfaces properly when more than 10 exist;
*) added QuickSet to RBSXT, RB411, RB711;
*) user manager - command to create and assign user profile from console;
*) added support for LTE modems (cdc ethernet type);
*) fix gre tunnels on x86 and other little endian machines;

What's new in 5.11 (2011-Dec-12 11:05):
*) hotspot - fixed https login (broken in v5.9);
*) eoip: swap tunnel id bytes to be compatible with previous versions;
*) eoip,gre: fix setting config

What's new in 5.10 (2011-Dec-09 11:49):
*) snmp - provide extended interface statistics when availabe;
*) dhcpv6 client - use link-scoped multicast address;
*) dhcp client - renew dhcp lease on ethernet link up event;
*) ipv6 gre tunnel added (/interface gre6) supports ip and ipv6 encapsulation;
*) ip gre tunnel supports ipv6 encapsulation;
*) allow setting bigger trafflow cache;
*) improved RB1200 stability when using ether9,ether10;
*) fixed RB1200 stability issues when using crypto hardware acceleration;

What's new in 5.9 (2011-Nov-29 14:32):
*) ssh - fix mempry leak when client uses public key authentication;
*) ppp - added support for new RADIUS attribute MT-Delegated-IPv6-Pool (#22);
*) ntp client - faster initial synchronization;
*) ppp - added support for dhcpv6 pd;
*) wireless - nv2 improvements for 11n cards;
*) hotspot - fixed login page to better handle big load;
*) wireless - change default rate-selection to advanced;
*) snmp - fix simple queue table;
*) webfig - fixed problem were users wihtout sensitive permission could download senstive files (like backups);
*) webfig - fixed problem were table filters did not work allways as expected;
*) metarouter - fixed problem where local routeros instances did not boot;
*) dhcpv6 - client and server moved to respective /ipv6 dhcp- entry;
*) dhcpv6 server - changed how bindings are defined, users should add missing static binding information after upgrade;
*) sms - send sms now uses channel from config if it's not specified in the command;

What's new in 5.8 (2011-Nov-01 10:14):
*) snmp - fixed problem where some rows were missed in a few tables when walking them;
*) ipv6 - added support for router address assignment from ipv6 pools;
*) routerboard - fix RB400/RB700 bootloader upgrade problem
*) radius - respond to CoA & Disconnect requests with the same ip address it was received to;
*) improved webfig look;
*) webfig - do not allow to show secret passwords if user does not have sensitive permission;
*) webfig - allow to customize all item names in skins;
*) updated timezone information;
*) lcd - added support for new ax93304 model and nexcom LCDs;
*) ppp - added support for ipv6 pools;
*) ppp - added support for Framed-IPv6-Pool radius attribute;
*) dhcp client - fix high CPU usage when interface is disabled;
*) snmp - trap interface filter, multiple trap targets;
*) dhcp - added server support for IPv6 prefix delegation from /ipv6 pool, client support is also added;
*) ipsec - support authorization with raw RSA keys;
*) added ipv6 prefix pools;
*) winbox - now copied item in ordered list is added right after it's original;
*) pcq - fixed possible crash;

What's new in 5.7 (2011-Sep-14 10:54):
*) ovpn client - fixed crash when user name or password together were longer than 11 symbols;
*) sstp client - added an option to skip server address verification from certificate;
*) fixed problem - router crashed sometimes when using USB modem;
*) userman - show overall totals, show user totals if user has more than one entry;
*) lcd - retrieving '/system lcd page' configuration did not work with hundreds of interfaces;
*) webfig - added ability to reorder fields in skins;
*) webfig - added ability to add/remove new tabs & separators in skins;
*) webfig - added ability to add any field to special status page;
*) webfig - fixed problem when user sometimes got logged out with message "internal server error";
*) webfig - logout didn't log user out from router;
*) webfig - added System/Password for changing user's own password;
*) system reset-configuration - if keep-users is specified ssh user keys are preserved as well;
*) ipsec - new exchange mode (main-l2tp) for l2tp tunnel users to allow FQDN as a peer ID with preshared key authorization in main mode;
*) ssh - fix possible server crash when connection is interrupted;
*) improved ipv4 forwarding performance on all boards with simple configuration by up to 30%;
*) add passthrough setting to change-dscp, change-ttl, change-mss, strip-ipv4-options, change-hop-limit mangle targets;
*) ipsec - fixed problem of RB1200 rebooting when large amount of UDP traffic is sent through IPsec;
*) sniffer - added more useful packet filtering options, also available as quick mode command parameters;

What's new in 5.6 (2011-Aug-02 14:45):
*) ipsec - fix a problem which could silently remove a manual policy from the kernel if the peer configuration has 'generate-policy' set to 'yes' and if the policy matches with the traffic selector of a SA being removed on the responder side, also fix a problem that some generated policies may stay in kernel after relevant SA was removed;
*) profiler - correctly show idle task on RB1200;
*) webfig - fix dual nstreme interface setting lists;
*) webfig - fix Wireless Access/Connect List editing;
*) webfig - fix bitrate presentation in simple queues (show 1.5M as 1500k);
*) fixed micro-sd access on RB400 not to stop everything else;
*) sstp - when server certificate verification is enabled for sstp client, it will additionally compare IP addresses found in certificate's subjectAltName and subject CN to the real address, DNS names are ignored;
*) tftp - optional block counter roll-over support;
*) hotspot - fixed possible crash in case of multiple Radius CoA requests;
*) userman - speedup user deletion with big log size, note that first userman startup after this update may take few minutes if the log size is in hundreds of MB;
*) mpls - added support for enabling/disabling control word usage for BGP based VPLS tunnels (both - Cisco and RFC 4761 based);
*) mpls - added support for auto-discovery of VPLS NLRI encoding method for Cisco BGP based VPLS tunnels;
*) winbox - sometimes after disconnecting, winbox could not connect back;
*) gre,ipip tunnels - new dscp parameter (0..63 or inherit);
*) ping - new dscp parameter;

What's new in 5.6:
*) bgp - allow parallel operation of RFC4761 "l2vpn" and draft-ietf-l2vpn-signaling "l2vpn-cisco" BGP VPLS variants inside single peering session.
*) console - ":resolve" command now returns IPv6 address for domain names that have only IPv6 address records;
*) snmp - provide ups alarms for bad or low battery or for ups overload;
*) route - fixed SNMP getnext queries, were failing to find next prefix in the OID order;

What's new in 5.5 (2011-Jun-20 14:43):
*) console - resolved problem that appeared in version 5.4. it caused 'sup-output' command to crash console on systems with many ethernet interfaces or very long interface names.
*) serial console - do not automatically send login prompt to attached usb modem if no other serial port exists;
*) winbox - fixed scrolling in terminal window;
*) webfig - encrypt whole session even in non https mode;
*) do not show contents of skin files to users without 'sensitive' permission;

What's new in 5.4 (2011-May-27 13:18):
*) webfig - do not try to open many windows if first open was blocked by browser;
*) RB4xx ether1 port flapping fixed;

What's new in 5.3 (2011-Apr-29 15:05):
*) snmp - fix table get next with partial row keys;
*) snmp - respond from correct source address when multiple exist;
*) snmp - fix possible interface disappearing when walking ipNetToMediaTable;
*) snmp - fix possible memory leak;
*) ipsec - flush SAs and inform peer when rebooting or shutting down;
*) openvpn - fixed crash;
*) implemented terminal in WebFig;
*) implemented Skin mode in WebFig;
*) added support for more Broadcom Tigon3 based ethernet cards;
*) winbox - fixed byte to KiB, MiB and GiB conversion (digit after decimal point could be a bit off);
*) console - align numbers right in tabular print output;
*) fixed RB450G, RB750G switch chip slow ethernet problem;
*) fix vlan disable not taking effect;
*) userman - fix Authorize.Net payment bypass;
*) userman - added profile option to overwrite shared users option in user settings when profile is activated;
*) userman - fix db backup if it's size exceeds 2G;
*) wireless - merged ht-extension-channels in to channel-width;

What's new in 5.2 (2011-Apr-21 09:36):
*) fixed webfig;
*) console - fixed problem with supout file generation and export that appeared in version 5.1, it was causing console to enter busy loop on some boards;
*) ssh client - added source address and remote command options;
*) user manager - added /tool usermanager profile;

What's new in 5.1 (2011-Apr-08 12:55):
*) ipsec - fix SA lifetime display when timezone offset does not equal 0;
*) ipsec - now default DPD interval is 2 min for new configurations;
*) webfig - make bandwidth-test work;
*) fixed problem - wireless package got disabled after upgrading from v4;
*) sstp - fix problems on multicore systems;

What's new in 5.0 (2011-Mar-31 11:33):
*) route - fixed cause of crashes when handling multipath routes;
*) route - fixed limit on maximum active IPv6 route count, was causing issues with more than 2000 active routes;
*) ipsec - added command kill-connections under remote-peers;
*) ipsec - fix responder side phase2 negotiation problem which prevented more than one Windows7 host to initiate SA;
*) fixed vrrp - interface was invalid after undoing remove;
*) winbox - added more detailed /interface ethernet stats;
*) winbox - added ability to send e-mail;
*) winbox - added missing 'set-metric' parameter in 'Routing/Prefix List';
*) wireless - 802.11 dynamic distance fix;
*) fixed problem - packages could not be uninstalled if disk was full;
*) fixed problem - some of the RouterBOARDS did not reboot properly sometimes;
*) fixed problem - VLANs on bridge interface did not work;
*) ssh - client supports public key authentication;