Updated a CCR1009 and hAP AC2 from 6.44 to 6.44.1
Lots of connections are suddenly getting dropped by my DROP INVALID Forwarding rule.
Pings between the 2 routers on VPN show timeouts that never did before.
How can I downgrade and hAP AC when the Files Directory doesn’t show enough space to put in the packages.
Files menu calculate space on flash memory (16MB)
However, root folder in file menu is actually ramdisk which has usually more than enough free space - as long as your RAM (128MB) is not completely full.
Therefore, as long as you load the downgrade files into root folder instead of “flash” folder, you shouldn’t have any issue, even if it is larger than displayed “free space”.
ps: about your drop rules - is it possible that these are just connections which were established before you reset your device and now, they are considered invalid because they are not in conntrack anymore? If that is the case, it will likely happen with any version after reboot.
The device is not properly setting connections as new then established. So it flags the connection as invalid. Then the router drops it on the next pass at invalid or dumps it on my drop all.
Been using this firewall for a couple of years now. This is new behavior.
When I’m testing, I like to update the MikroTik, update the firmware, them reset it without any configuration. Then I add back in my own script. That seems to fix issues others seem to have. Try that, then see if you still have found a bug.
Maybe MT firmware is getting tired of people like me that didnt understand why some people write config correctly but long windedly using new in all FW rules and is putting the hammer down on shortcuts LOL.
From now on I promise to put new on all FW rules that come after established related LOL.