Asus RT-AC68U

[炒飯俠]

一買即轉俄仔

[antony]

好深
我用原廠firmware都已足夠用啦

受過 RT-N56U 個一野, 我打死都唔用原廠 firmware

我用原廠firmware, 好彩未中過招, 但最重要係用左年幾都好穩定.

[RCHK]

380.60 Beta 1 (ARM)

IMPORTANT: The firmware image file format was changed by Asus.
Starting with 380.60, you will no longer be able to
flash versions older than 380.60, or Asus versions
older than 3.0.0.4.380_3000.

You can currently downgrade by using Firmware Recovery
mode, but there's not guarantee that this will keep
working in the future.

Code: Select all

    - NEW: Merged with GPL 3479.  This includes the new file format
           required for certification purposes.
    - NEW: Option to enable overhead calculation on Traditional QoS
           for DSL users (ARM-only)
    - NEW: Option on System page to disable the new forced 
           redirection to router.asus.com (defaults to disabled)
    - CHANGED: Updated OpenVPN to 2.3.11
    - CHANGED: Allow to specify IPv6 prefixes up to 126 on the IPv6 config
    - CHANGED: Roaming Assistant allow threshold to go as high as -50 (was 
               previously limited to -70)
    - CHANGED: Networkmap will now announce itself as "Asuswrt/networkmap"
               when connecting to LAN's web services.
    - FIXED: OpenVPN server instances weren't properly reporting
             if an error occurred at start time.
    - FIXED: wget was unable to access https site due to not
             having a CA bundle to verify certificates
    - FIXED: odhcp6c was sending bogus preferred prefixes, so
             anything larger than 64 could result in an invalid
             prefix
    - FIXED: Language selector is missing on router set for the
             JP region (reverted Asus change)
    - FIXED: Client names with single quotes couldn't be edited
             in the networkmap client popup (Asus bug)
    - FIXED: Router wouldn't run SMB to provide browser master
             or Wins services if no USB disk was plugged

[RCHK]

380.60 Beta 1 (ARM)

IMPORTANT: The firmware image file format was changed by Asus.
Starting with 380.60, you will no longer be able to
flash versions older than 380.60, or Asus versions
older than 3.0.0.4.380_3000.

You can currently downgrade by using Firmware Recovery
mode, but there's not guarantee that this will keep
working in the future.

Code: Select all

    - NEW: Merged with GPL 3479.  This includes the new file format
           required for certification purposes.
    - NEW: Option to enable overhead calculation on Traditional QoS
           for DSL users (ARM-only)
    - NEW: Option on System page to disable the new forced 
           redirection to router.asus.com (defaults to disabled)
    - CHANGED: Updated OpenVPN to 2.3.11
    - CHANGED: Allow to specify IPv6 prefixes up to 126 on the IPv6 config
    - CHANGED: Roaming Assistant allow threshold to go as high as -50 (was 
               previously limited to -70)
    - CHANGED: Networkmap will now announce itself as "Asuswrt/networkmap"
               when connecting to LAN's web services.
    - FIXED: OpenVPN server instances weren't properly reporting
             if an error occurred at start time.
    - FIXED: wget was unable to access https site due to not
             having a CA bundle to verify certificates
    - FIXED: odhcp6c was sending bogus preferred prefixes, so
             anything larger than 64 could result in an invalid
             prefix
    - FIXED: Language selector is missing on router set for the
             JP region (reverted Asus change)
    - FIXED: Client names with single quotes couldn't be edited
             in the networkmap client popup (Asus bug)
    - FIXED: Router wouldn't run SMB to provide browser master
             or Wins services if no USB disk was plugged

Updated to 380.60 Beta 2 (ARM)

[RCHK]

380.60
There was no non-beta release, due to limited model support
and unsolved WAN stability issues.

[RCHK]

380.61 Beta 2

Code: Select all

380.61 Beta 2 (3-Aug-2016)
   - CHANGED: Reverted a lot of Asus's minidlna customizations in an
              attempt to resolve various issues that aren't occuring
              with the original minidlna.
   - FIXED: Connected OpenVPN clients reporting as disconnected
            on the status page following any wireless config change
            (Asus bug)
   - FIXED: OpenVPN server would report being "Initializing"
            while it already was ready, follwoing any
            wireless config change (Asus bug)

380.61 Beta 1 (31-July-2016)
   - NEW: Merged with GPL 3831.
   - CHANGED: updated dropbear to 2016.74.
   - FIXED: Do not enforce b/g mode as "auto" if wireless mode
            is also set to Auto.

[RCHK]

380.62 (23-Sept-2016)

Code: Select all

   - NEW: Added nano 2.7.0 (user-friendly text editor)
          Documentation: https://www.nano-editor.org/dist/v2.6/nano.html
          Note that for space reasons, some of its features are disabled
          for the RT-N66U and RT-AC66U.  Entware users might want to
          uninstall the Entware version if they had it installed and want
          to use the built-in version instead.
   - NEW: Option to toggle the display of passwords on the PPTPD and
          OpenVPN server pages.
   - NEW: Allow providing a vendor class on the WAN page (DHCP option 60)
   - NEW: Add option to disable sending a RELEASE request when odhcp6c
          exits, allowing you to retain your received prefix with some
          ISPs.
   - CHANGED: Updated nettle to 3.2 (used for dnssec) and increased
              optimization level.
   - CHANGED: Updated minidlna to 1.1.6
   - CHANGED: Updated OpenVPN to 2.3.12
   - CHANGED: Updated OpenSSL to 1.0.2i
   - CHANGED: Revamped the Wireless Log page:
                - Merged some columns to gain more horizontal space
                - Longer hostname shown (truncated names are now
                  shown in a tooltip)
                - Display clients' IPv6 if they have one
   - CHANGED: Accept up to 250 characters for OpenVPN client's
              username and password (one provider needs 64).
   - CHANGED: Hide the WPA key on the Wireless config page, and only
              reveal it when you click on the field to edit it.
   - FIXED: OpenVPN client shouldn't display policy routing settings
            when using a TAP interface.
   - FIXED: DSL/ATM overhead setting was visible on MIPS models, which
            don't support it.
   - FIXED: Editing OpenVPN or PPTP users with any value longer than
            32 chars could lead to corruption of the user list.
   - FIXED: Custom config file for igmpproxy wasn't working.
   - FIXED: After turning off a Guest network, the next visit to the
            Wireless Settings page would show that guest network's settings
            instead of the parent band settings (Asus bug)
   - FIXED: Smart Connect rules didn't apply on the RT-AC88U (backported
            fix from 380_3941).
   - FIXED: Numerous memory leaks in the networkmap service. (Asus bug)
   - FIXED: Potential buffer overrun in the networkmap service. (Asus bug)
   - FIXED: Broken IPv6 connectivity if enabling SSH brute force
            protection (only MIPS models were affected)
   - FIXED: 5G LED would fail to turn back on when exiting stealth mode.
   - FIXED: Only hostname was used as remote server in an exported
            OpenVPN client config when using Namecheap DDNS.
   - FIXED: Security vulnerability (XSS/CSR) in httpd (backported
            fix from 380_4005).
   - FIXED: Chrome would try to autofill some fields (such as on the
            DDNS configuration page), which could be problematic.
   - FIXED: IPTraffic database was no longer properly named after
            the router's MAC address on the AC88/AC3100/AC5300.
            If you recently enabled it, you will need to either
            re-create a new database, or rename the existing
            database from tomato_cstats_000000000000.gz to
            tomato_cstats_XXXXXXXXXXXX.gz, where "XXXXXXXXXXXX" is
            your MAC as found with "nvram get et2macaddr", in
            lowercase (AC88/AC3100/AC5300 only).

            Regular traffic monitoring (stored in
            tomato_rstats_XXXXXXXXXXXX.gz) is fine.

[RCHK]

380.63

Code: Select all

- NEW: QoS Statistics page, showing the amount of traffic assigned to
          each available classes, as well as the current throughput.
   - NEW: Charts added to various Traffic Monitor pages.
          Note that you can click on legend items to reveal/hide the
          DL/UL data.  Hovering over a bar or a pie slice will
          display the exact value for that item.
   - NEW: Added pc_delete() to the helper script (patch by john95287)
   - NEW: IPv6 firewall now supports fixed interface ID (EUI64) ipv6
          destination addresses (Patch by john9527)
   - CHANGED: Updated Tor to 0.2.8.9
   - CHANGED: Updated OUI database.
   - CHANGED: ipset was updated to version 6.29 on ARM models.
              IMPORTANT: this means you will probably need to
              update your script to the new syntax.  You need to
              load the xt_set.ko module at the start of your script.
              There has been no change to MIPS models, due to their
              older kernel.  (original code by Shibby and Victek,
              Asuswrt port by john9527) (ARM only)
  - CHANGED: OpenVPN policy rules now start at prio 10000 instead of 1000
  - CHANGED: Added help popups to various settings that are unique to
             Asuswrt-Merlin.
  - FIXED: Custom group/shadow/passwd weren't applied at boot time.
  - FIXED: CVE-2016-5195 (Dirty COW) vulnerability in kernel
           (patches by blackfuel and Joseph A. Yasi)
  - FIXED: Network Service Filter rules would only apply to clients
           under Parental Control if that was enabled (original
           debugging by john9527) (Asus bug)
  - FIXED: A few memory leaks in httpd and rc services.

[RCHK]

380.63_2

Code: Select all

- CHANGED: Added detection for iPhone 7 models in networkmap
              (patch by Andrei Coman).
   - CHANGED: Enabled --dns-loop-detect support in dnsmasq
   - CHANGED: Move Dual WAN static routes to a lower priority, so VPN
              policy rules will have priority over them
   - FIXED: Traditional QoS labels were off by one on the Stats page.
   - FIXED: Adaptive QoS upload stats couldn't be retrieved because
            qosd seems to be hardcoded to always set up classes on eth0
            rather than on the real WAN interface.
   - FIXED: USB driver was removed too early at shutdown time on the
            RT-AC56U and RT-AC87U (fix by john9527)

[RCHK]

380.64

Code: Select all

 - NEW: New firmware availability notification.  The router will
          notify you if a new firmware is available, and will also
          let you view the changelog before sending you to the
          download page (the update process remains manual).

          Note that the automated check will only report new
          final releases.  The Check button on the Firmware Upgrade
          will immediately check for final releases or beta (if you
          select that option), but not both at the same time.
   - NEW: Added iptables MASK support on MIPS kernel (patch
          by john9527)
   - NEW: Webui warning shown in the notification area if running
          low on free nvram.
   - CHANGED: Updated nano to 2.7.1.
   - CHANGED: Updated OpenVPN to 2.3.14.
   - CHANGED: Updated curl to 7.51.0, resolving numerous security
              and stability issues.
   - CHANGED: Tor clients will now route other TCP ports than just
              80/443, and drop UDP and ICMP traffic (patch by
              blackfuel)
   - CHANGED: QoS Stats info will automatically refresh every
              3 seconds (user-configurable)
   - CHANGED: IPTraffic charts now show sorted slices, so the
              clients with the least traffic will get grouped
              under "Others" if truncating the list of shown
              clients.
   - CHANGED: Enabled IPv6 support in curl.
   - CHANGED: Improved webui performance, by caching large static
              Javascript files such as jquery, and increased cache
              life from 5 mins to 1 hour.
   - CHANGED: No longer include Download Master packages in the
              firmware for those models that still included them,
              reducing firmware size by a few megabytes.
              Those were always outdated, the router will download
              the latest versions from Asus's servers at install
              time.
   - CHANGED: Improved webui protection against CSS/XSS attacks
              (backport from GPL 4164)
   - FIXED: Web server crash if importing an ovpn file with an
            invalid key or certificate (Asus bug)
   - FIXED: App icon at the top wouldn't work on Firefox,
            generating a Javascript error (Asus bug)
   - FIXED: Firefox would sometime fail to display the client
            list, reporting a JSON parsing error in the console.
   - FIXED: HMAC setting not properly set when importing an ovpn
            file for a config based on TLS authentication mode.
            (backport from GPL 4164)