RouterOS v6.25

[normis]

What’s new in 6.25 (2015-Jan-19 10:11):

*) certificates - fix SCEP RA operation and SCEP client when operating with RA;
*) ppp - report authentication failure cause like in v6.6;
*) ovpn server - added support for address lists;
*) improved boot times;
*) api - fixed missing return values of some commands;
*) ntp - fixed vulnerabilities;
*) mpls/vpls have improved per core balancing on CCRs;
*) fixed queue tree no-mark matching (was broken since 6.24);
*) fixed nested simple queues (was broken since 6.24);
*) fixed occasional crash when ipv6 was used;
*) fixed route cache overflow (ipv4/ipv6 stops working) if ipsec is used;
*) fixed Omnitik upgrade from v5 where wireless config was not correctly saved
*) fixed Webfig Design Skin where some skin changes were not saved
*) WPS support added to CM2 wireless package

Simply click “Check for updates” in QuickSet, Webfig or Winbox packages menu. It should also work from v5

[honzam]

@normis

*) improved boot times;

More info about that? It is improvement for all routerboards?

[normis]

@honzam

@normis

*) improved boot times;

More info about that? It is improvement for all routerboards?

all devices have faster boot time, but on x86 it will be not so easy to see. more significant on devices that previously booted longer

[santa]

*) ovpn server - added support for address lists;

Any details about this one?

[DjM]

*) ntp - fixed vulnerabilities;

Any details on this point, please?

• Is the fix related to NTP server?
• Which bugs were fixed?

Thank you

[mars]

does upgrade from thedude not work anymore

[jarda]

Any mention about ethernets behaviour improvement on rb133? Why not to note all changes that were done in each version?

[boen_robot]

*) api - fixed missing return values of some commands;

Could you give at least one example of a command that was previously affected?

[santa]

Will the new NTP package be integrated with standard upgrade package?

[thegreatone]

For X86 with upgrade directly from System->Packages I was not able to access the router from Public IP, WAN connected via PPPoE. But I was able to access from neighbor router with mac-telnet. Rebooted and still can’t access the router from public IP address.

UPDATE: I disabled the IP adress that was mannualy set to WAN interface and I was able to access the router with Public IP address.

Also there is an warning in the log, it says

system,warning omitting package openflow-6.6: newer package openflow-6.25 is already installed

[normis]

@DjM

*) ntp - fixed vulnerabilities;

Any details on this point, please?

• Is the fix related to NTP server?
• Which bugs were fixed?
  Thank you

we simply upgraded our NTP to avoid one of the problems described here: https://ics-cert.us-cert.gov/advisories/ICSA-14-353-01A

@thegreatone

Also there is an warning in the log, it says

please delete the extra openflow package from your device, you have a very old 6.6 version in there that will not install

does upgrade from thedude not work anymore

RouterOS changed package format in around 6.18, but Dude was not updated, so it will not work properly until new Dude

Will the new NTP package be integrated with standard upgrade package?

Sorry but I don’t understand what you mean. When you upgrade RouterOS, all installed packages are upgraded too

[santa]

@normis

Will the new NTP package be integrated with standard upgrade package?

Sorry but I don’t understand what you mean. When you upgrade RouterOS, all installed packages are upgraded too

OK, so I have to check this again. I was pretty sure, that after upgrading from 6.24 to 6.25rc there was no package ntp installed. I will let you know.

[normis]

@santa

@normis

Will the new NTP package be integrated with standard upgrade package?

Sorry but I don’t understand what you mean. When you upgrade RouterOS, all installed packages are upgraded too

OK, so I have to check this again. I was pretty sure, that after upgrading from 6.24 to 6.25rc there was no package ntp installed. I will let you know.

NTP client is built into RouterOS and there is no separate package. NTP package is only needed for NTP server

[santa]

Yes, this is a small misunderstanding. I am speaking about NTP server package, of course. I am just wondering, if it will be integrated into the standard upgrade package.

I’ve noticed, that after upgrading ROS, I have to install NTP server package once again. Maybe I messed something with that . I will test this once again.

[mars]

well ros 6.24 still worked fine with thedude upgrading

so when will the dude be upgraded then?

[ste]

@santa

Yes, this is a small misunderstanding. I am speaking about NTP server package, of course. I am just wondering, if it will be integrated into the standard upgrade package.

I’ve noticed, that after upgrading ROS, I have to install NTP server package once again. Maybe I messed something with that . I will test this once again.

NTP Server package is not included into the standard package. So you have to install it with every upgrade. It is only needed on NTP-Servers which are quite seldom beasts ). It would be wasteful to put it onto every ROS-Device.

[noyo]

@boen_robot

*) api - fixed missing return values of some commands;

Could you give at least one example of a command that was previously affected?

more details

[boscolee]

Hello,

After upgrade to 6.24, my router is changed to bridge mode.

I have disabled the bridge-local in interface (this interface is enable before 6.24), then it have switched to router mode. But, it cannot show the IP address for WAN when it is set automatic.

[plisken]

Not working link?
http://www.mikrotik.com/download/share/all_files_6latest.zip

[honzam]

@plisken

Not working link?
http://www.mikrotik.com/download/share/all_files_6latest.zip

Now there is no RC build (6.26rc). Wait few days…