6.3 Released

What’s new in 6.3 (2013-Sep-03 12:25):

*) ssh - fixed denial of service;
*) traceroute - show mpls labels as well;
*) bug fix - sometimes some new interfaces could not be created properly any more (f.e. some pppoe clients could not connect);
*) console - added ‘/console clear-history’ command that clears command-line
history for all users, requires ‘policy’ policy;
*) sstp - limit packet queue for each device;
*) RB2011L - fixed occasional gigabit switch-chip lockup;
*) user manager - will warn on 1MB and stop before reaching minimum of 500KB disk space;
*) hotspot - do not account traffic to local hotspot pages;
*) ppp, hotspot - added ability to specify where to insert rate limiting queue,
it’s parent and type;
*) pptp, l2tp, sstp - allow to specify server via dns name;
*) dhcp - added ability to specify where to insert rate limiting queue;
*) www proxy - support ipv6 parent proxy;
*) webfig - fixed problem when opening quickset page country
was automaticly changed to etsi;
*) traceroute - added mtr like pinging;
*) fix queues - correct queue was not installed when last child removed;
*) fix simple queues - sometimes some simple queues would stop
working after configuration changes;
*) console - fixed issue with local variables having non-empty value
before first assignment;
*) console - fixed command “:global name” without second argument to not
create or change global variable “name”, only effect is to make “name”
refer to global variable.
*) console - fixed passing local variables as argument to function;
*) RB1200 - fixed crash when receiving over l2mtu size packets
on some ethernet interfaces;

Ok, I’ll try this one. I hope its better than previous release of v.6.
At this moment, i still recommend using v5.25 for solid network services.

*) pptp, l2tp, sstp - allow to specify server via dns name;

This is very very important small feature for my region :slight_smile: - lets say goodbye to some significant scripting

*) pptp, l2tp, sstp - allow to specify server via dns name;

OpenVPN ?

do I simply need to put a host name in the ‘Connect to:’ field or how can we use it?

yes, you place hostname there and when tunnel has to be created it will be resolved (if possible) and tunnel established

and have /ip dns configured.

*) user manager - will warn on 1MB and stop before reaching minimum of 500KB disk space

It sounds like it is not solving the main problem - disk space constantly filling sometimes (see Ticket#2013090266001555 and graph in screenshot here - from ROS 6.2), but just avoiding the symptom. Yes, it is better to stop User Manager than complete crash of router (netinstall was needed, see Ticket#2013053066000493), but please, fix User Manager completely.
mikrotik-hdd-space-running-out.png

any issues on ccr yet?

http://packetstormsecurity.com/files/123081/Mikrotik-RouterOS-5.x-6.x-SSHd-Heap-Corruption.html

Is it fixed in 6.3? This is critical problem. SSH login can be bypassed remotely.

That image was taken before we released v6.3, it shows September 2. Did you upgrade to the version we released on the web Today ?

First of all, ssh can NOT be bypassed remotely, this is all made up. Please read the official response here: http://forum.mikrotik.com/t/denial-of-ssh-service-was-fulldisclosure-post/69247/5

Second: Did you read the changelog?

Any notes about non-saving interface graphs error that started with verison 6?
Otherwise I keep running on 5.25.

Yes, you are right! I will upgrade today evening (now it is working), but… I just wrote: “it sounds like it’s not solving the main problem”, where “it” is referring to “will warn .. and stop”. From that words I expect that after upgrade, space will still be running out sometimes and the service will be stopped. Perhaps you have fixed that and just not writing about it in changelog? That would be fine. I can’t test it in short term, because the problem was appearing very occasionally - once per (few?) month(s) - and it is unpredictable. Well, I will hope it is fixed now! :wink:

Mikrotik, are these new builds adding to the performance of the CCR, specifically around sharing load over cores?

How many users do you have? Check “/tool user-manager database print”, which database is the one taking up space?

I seem to have a problem with Netinstall 6.3 on Windows 8.

When I select either the configuration script or the package source directory, neither the “browse for folder” and “select script” dialog windows show mapped network drives - that is, I can see drive C: (boot/OS drive) and E: (Blu-Ray), but not drives H:, M:, P:, Q: and V:.

If I use the network path to the script or package directory (e.g. \myserver\routeros\packages\ and \myserver\routeros\installscript.rsc), netinstall accepts these.

Regardless of how the files are selected (local c: drive or network share), when I click 'Install, I get the following error:

“Installation failed: Could not open temporary file.”

Does anybody have any ideas?

Watchdog still NOT work on MIPSle devices. Ticket - Reported from version 6.0
today 6.3 - still not work :frowning:
watchdog.jpg

Broken multiple Paste comands in v6.3 CCR (in v6.2 all works fine)

I copy commands below(for example)

/interface vlan add arp=reply-only interface=ether3 name=TEST vlan-id=3000 
/ip address add address=10.250.255.1/24 interface=TEST
/ip pool add name=pool_TEST ranges=10.250.255.2-10.250.255.254
/ip dhcp-server add add-arp=yes address-pool=pool_TEST disabled=no interface=TEST lease-time=1h name=DHCP_TEST

Paste in terminal and get the error.

[admin@Mikrotik] > /interface vlan add arp=reply-only interface=ether3 name=TEST vlan-id=3000 
[admin@Mikrotik] > /ip address add address=10.250.255.1/24 interface=TEST
[admin@Mikrotik] > /ip pool add name=pool_TEST ranges=10.250.255.2-10.250.255.254
[admin@Mikrotik] > /ip dhcp-server add add-arp=yes address-pool=pool_TEST disabled=no interface=TEST lease-time=1h name=DHCP_TEST
input does not match any value of interface

Enter one-by-one and all ok:

[admin@Mikrotik] > 
[admin@Mikrotik] > /interface vlan add arp=reply-only interface=ether3 name=TEST vlan-id=3000                                           
[admin@Mikrotik] > 
[admin@Mikrotik] > /ip address add address=10.250.255.1/24 interface=TEST                                                               
[admin@Mikrotik] > 
[admin@Mikrotik] > /ip pool add name=pool_TEST ranges=10.250.255.2-10.250.255.254                                                       
[admin@Mikrotik] > 
[admin@Mikrotik] > /ip dhcp-server add add-arp=yes address-pool=pool_TEST disabled=no interface=TEST lease-time=1h name=DHCP_TEST       
[admin@Mikrotik] >

Why?

I found a problem with the new traceroute tool. My backbone provider uses an MPLS network with private addresses and this means I can’t ‘see’ the network from another router other than the border router. The new ‘mtr’ behaviour is stopping the tracing after 3 lost hops.

Thanks in advance!

Carlos Strauch
2013-09-04_090817.png
2013-09-04_090857.png