v6.40.9 [bugfix] is released!

Announcements
41

I can see problem with web server over https. After file download it gets unaccesible.
Anyway I’ve enabled http over CLI and that works.

42

I was told by MikroTik support that the OSPFv3 fix (improved link local flooding from 6.43rc) was supposed to be included in the next bugfix and current release. However I do not see the ospf fix in the changelog. Is it there and it the changelog didn’t mention it, or was it not included for some reason? We were hoping for this to be included since without it our OSPFv3 is very unstable, if there is an outage it often will not recover properly.

43

Fix will be included in next version.

44

OK, thanks! :smiley:

45

I agree that the way the patch notes were written made it look way more urgent than it was.
Compared to how the WinBox vulnerability was mentioned in v6.40.8 [bugfix], it makes it looks like the CVE vulnerabilities were much more important.

Changing the way you announce vulnerabilities in patch notes is ok, but you scared everyone by posting the suddenly very huge vulnerability warning with no information in the patch notes.
Writing something simple like you used to do is better. For example:
“!) Webfig: Fixed vulnerabilities allowing a logged in user (even read-only user) to crash the router.”

Then after the blog entry was posted, you could add the CVE id numbers and links to the blog entry in the opening post.

46

I can’t explain this:
I have this code in ipv4 mangle:

add action=mark-connection chain=postrouting comment="QoS_4_5 Small-Large HTTP\
    -S, FTP, SSH, Telnet, SMTP, POP3-S, IMAP-S, SMTP-S" connection-mark=\
    no-mark new-connection-mark=QoS_4_5-UP out-interface=all-ppp passthrough=\
    yes port=20,21,22,23,25,80,110,143,443,465,587,993,995,8080 protocol=tcp
add action=mark-packet chain=postrouting connection-bytes=0-5000000 \
    connection-mark=QoS_4_5-UP new-packet-mark=QoS_4-UP passthrough=no
add action=mark-packet chain=postrouting connection-bytes=5000000-0 \
    connection-mark=QoS_4_5-UP new-packet-mark=QoS_5-UP passthrough=no

I have queue tree with one parent (global) and the QoS_4 and 5 as childs.
When I open ~20tabs in firefox i have average ~30s page load.

Now i put at the end (if i add it before i have the same result) of the code this code:

add action=mark-connection chain=prerouting comment="QoS_DW All Download" \
    in-interface=all-ppp new-connection-mark=QoS-DW passthrough=yes
add action=mark-packet chain=prerouting connection-mark=QoS-DW \
    new-packet-mark=QoS-DW passthrough=no

No i have normal page load average ~10-15ms.

The above code also work perfect without packet mark in download.
The above code also work if i have disable the QoS-DW in tree.
The above code also work if i mark something that its not present in tree.

The problem its not appear if i write the code like that (with chain postrouting):

  1. I start with packet only marks.
  2. I make jumps for connections with nomark and packets for mark connections with out-interface.
  3. In jump connections, I mark them with no passthrough and nothing in out-interface.
  4. In jump packet, I mark them with no passthrough and nothing in out-interface.

Where is the problem with the first solution?
Is it some bug;

47

Is your problem new for 6.40.9? If not, then please do not discuss it in this topic but make your own new topic.

48

I dont know if the problem is new or old.
I check it only in v6.40.9 [bugfix]

49

Hi.

I tried to downgrade an RB750GL from 6.42.7 to 6.40.9. After reboot, I lost connectivity to router. No winbox, no ssh, no mac-telnet, no nothing… No ping reply, no DHCP-serving on any ports.
I must hard reset to wipe off my config. (Probably the hardware offloaded bridge…)
After hard reset, I can mac-telnet, downgrade (to 6.40.6, because I have backup at this version), and restore old config without bridge, with only master/slave switching on ports.
Then I can upgrade to 6.40.9 successfully.

So avoid to downgrade with bridge hw-offload active, the result may be full loss of connectivity.

Best regards: CsXen

50

Cant downgrade a CCR-1036-8G-S2+ EM from 6.43 to 6.40.9.

Currently on 6.43. Reset config. Then upload os. In winbox->package Downgrade. After reboot Router Shows “starting Services” and is not accessible. Has to be netinstalled.

51

This is written in the 6.41 release notes. To downgrade across the 6.40-6.41 border you need to netinstall and reconfigure or load a backup you made on 6.40 or slightly before.

52

You called 6.40.X versions as “Long-Term”. How long-term it will be? One year? 2 years ?

53

Just noticed on this version that RB3011 display screen no longer scrolls during bandwidth monitor. Has anyone else had touch screen issue where its locked up on 6.40.9 ? It was working in earlier versions of 6.40.x

54

+1

Is it just a name change, or a serious strategy change?
Please MT, portrait clearly what is in store for the future with regards to config-stability.

Official info about this would be greatly appreciated.

55

Possible bug:
I have installed a fresh CHR with 6.40.9; the SIP helper port config is completely missing in webfig. It is present (and was enabled by default) in the ROS cli.

56

Anyone running 6.40.9 + the 3.41 firmware on a CCR-1072 ?
If so, have you come across any issues (other than the webserver issue).

57

New version 6.42.9 has been released in long-term RouterOS channel:

http://forum.mikrotik.com/t/v6-42-9-long-term-is-released/123813/1