Jump to content

TRB255 Firmware Downloads: Difference between revisions

No edit summary
(26 intermediate revisions by 3 users not shown)
Line 4: Line 4:
| series      = TRB2
| series      = TRB2
<!-----------------------LATEST FW--------------------->
<!-----------------------LATEST FW--------------------->
| latest_fw    = TRB2_R_00.02.06
| latest_fw    = TRB2_R_00.07.02.1
| latest_date  = 2020.12.31
| latest_date  = 2022.06.06
| latest_md5  = dee686ddd4c4861f088121f98ff6d5bd
| latest_md5  = f2e5beb3572b4a72b6130ef1bf447273
<!-----------------------FACTORY FW-------------------->
<!-----------------------FACTORY FW-------------------->
| factory_fw  = TRB2_R_00.02.05.2
| factory_fw  = TRB2_R_00.07.01.2
| factory_date = 2020.11.19
| factory_date = 2022.01.04
| factory_md5  = 976377b1f46d9cbd37d6085f742ce868
| factory_md5  = 734c77671933eded76ca6656aad37eca
}}
}}


==Changelog==
==Changelog==


===<b>[[Media:TRB2_R_00.02.06_WEBUI.bin|TRB2_R_00.02.06]]</b> | 2020.12.28===
===<b>[[Media:TRB2_R_00.07.02.1_WEBUI.bin|TRB2_R_00.07.02.1]]</b> | 2022.06.06===


* New features:
* Improvements:
** Improved GSM related messages in Troubleshoot logs
 
* Fixes:
** Fixed IGMP Proxy menu item not appearing after package installation
** Fixed default mobile network configuration generation
** Fixed MODBUS write requests and Mobile Utils option setting
 
===<b>[[Media:TRB2_R_00.07.02_WEBUI.bin|TRB2_R_00.07.02]]</b> | 2022.05.23===
 
* <b>New features</b>
** Overview side widget
** IGMP Proxy
** Privileged Access Management (PAM)
** AWS Greengrass support
** HTTPS certificate and key upload feature
** SSH public keys edit box
** License page
** WAN Failover
** DNP3 data for Data to Server
 
* <b>Improvements</b>
** Updated busybox to version: 1.34.1
** Updated curl to version 7.79.1
** Added iptables filter package for string filtering
** Added CHAP authentication for L2TP VPN
** Added IPv6 support for L2TPv3 VPN
** Added EAP-MSCHAPV2 authentication method for IPsec VPN
** Added IPv6 support to Auto Reboot
** Added 'Save to flash' and 'Test configuration' button to DNP3 configuration page
** Updated SNMP version 5.9.1
** Added OpenSSL authentication options to SNMPv3
** Added support for OSPF redistribution options and OSPF neighbors
** Added password field to BGP Peers page
** Extended BGP "AS" field validation to accept integers up to 4294967295
** Added "DHE+RSA" to OpenVPN cipher selections
** Increased OpenVPN max password length from 128 bytes to 512 bytes
** Made HMAC key direction initial value dependent on the role of the instance (client or server)
** Made HMAC key and HMAC authentication key upload fields required
** Added DES to IPsec encryption algorithms selections
** Added special character support for CHAP secrets
** Added validation requirements for PPTP user list username field
** Added option to manually enter Public key in Wireguard configuration
** Made generating Wireguard  keys possible only while in auto mode
** Added Events Log database to troubleshoot archive
** Added RFC1918 filter field
** Added the possibility to unblock multiple blocked devices at once
** Added 'Port' column to blocked login attempts table
** Added Speedtest server refresh
** Updated Speedtest server list
** Added asterisk option to Site Blocking
** Added MD5 and SHA256 checksums to package validation page
** Changed certificate requirements to only require client key file if client certificate is used
** Added pagination and data retention between table pages
** Added pagination functionality to tables when there are more than 10 records
** Improved table sorting by saving user provided sort settings in the browser
** Improved drag and drop functionality
** Added the possibility to drag and drop files onto upload components
** Moved 'Root CA' from the 'Access Control' page to the 'Certificates' page
** Added 'Strict-Transport-Security' response header for HTTPS
** Added 'breadcrumbs' to modal windows
** Improved initial WebUI loading after login
** Added mobile bytes sent and bytes received SNMP OIDs
** Added mobile LED turn off feature ('System -> Administration'  page)
** Added 'iot.1nce.net', 'internet', 'VZWINTERNET' and Truphone APNs to APN database
** Updated mobile usage data point calculation logic
** Added the possibility to manually enter operator number
** Improved obtain mobile cell ID process
** Added modem restart if SIM card is removed during APN database fetching process
** Added unauthorized call logging
** Added space character support in SMS commands
** Disabled SMS modem storage configuration form when SIM is not inserted
** Changed SMS '%wi' parameter value to return IP address of any currently used WAN interface (not only wired)
** Added external modem SMS limit Overview card and widget
** Made in-use APNs visible next to mobile interface configurations (before clicking the 'Edit' button)
** Added duplicate value check for list configuration options
** Changed mobile card instance design
** Fixed 'Mobile Data usage reset' SMS rule
** Fixed the default state parameter of SMS list POST/GET command
** Added AVL "Static Navigation" flag
** Added GSV parsing for NMEA collecting
** Added newline and GPS location actions to I/O Juggler
** Added I/O SNMP trap
** Added ISO 8601 time format to I/O Juggler's '%ts' parameter
** Added device name parameter '%pc' to I/O Juggler
** Added ACL or ADC SNMP trap notification on enter/exit/both
** Added ACL MQTT topic
** Added PPPoE VLAN priority support
** Made VRRP ping section dependent on main instance
** Added CRC verification support to MODBUS and RS232/RS485
 
* <b>Fixes</b>
** Fixed CVE-2021-20322, CVE-2021-4197, CVE-2022-1011, CVE-2022-0847 kernel vulnerabilities
** Fixed CVE-2022-28391 busybox vulnerability
** Fixed CVE-2018-16789 shellinabox vulnerability
** Fixed CVE-2021-44543, CVE-2021-44542 privoxy vulnerabilities
** Fixed CVE-2021-43618 GNU Multiple Precision Arithmetic Library vulnerability
** Fixed zlib backport security issue
** Fixed Wireguard firewall zone assignment
** Fixed queued packages disappearing from list after FW upgrade with keep settings
** Fixed error message display for multiple input validation rules
** Fixed incorrect DHCP validation range for start and limit fields
** Removed 'Bring up on boot' option from network interface configuration pages
** Fixed coma-separated DHCP options disappearing after save
** Fixed exclude and listen interfaces
** Fixed 'Use broadcast flag' option saving
** Fixed firewall zone assignment when creating new interfaces
** Fixed OpenVPN 'Netmask' and 'IP address' field validations
** Fixed OpenVPN TAP configuration saving issue
** Fixed OpenVPN switching to TUN mode when uploading a configuration from file
** Fixed dynamic BGP route state display
** Fixed BGP peer enable in edit page
** Fixed issue when no L2TP client instance could be bound to IPsec
** Fixed firewall rule and zone behavior related to config section creation
** Added default value for L2TPv3 netmask, which is now written to config after save
** Fixed passthrough option saving to IPsec file
** Fixed DMVPN issue where instance configuration could not be saved
** Fixed Wireguard peer could not be saved issue
** Fixed NTP client time synchronization after factory reset
** Fixed device time display with selected time zone
** Fixed MODBUS TCP indexation missing bracket issue
** Fixed initial MODBUS TCP request count validation
** Fixed PIN 3/4 direction switching over MODBUS TCP
** Fixed MODBUS data to MQTT socket closing issue when connection fails
** Fixed MODBUS alarm configuration deletion
** Fixed DNP3 master not working after FW upgrade with 'keep settings'
** Fixed DNP outstation not returning error messages
** Added missing SNMP objects: mobile IP, data sent/received today
** Fixed MQTT Publisher 'Remote address' field validation
** Fixed long interface name support for Azure IoT Hub
** Increased maximum Azure IoT Hub 'Connection String' length to 4096 characters
** Fixed missing sent/received data issue
** Fixed URL input field length validation
** Fixed admin login issue after upload of backup from a device with older firmware versions
** Fixed MAC address formatting in Events reporting messages
** Fixed Events reporting DHCP lease message spam, when no new lease is added
** Fixed logging crashing after downloading Troubleshoot file
** Made Wake on LAN visible only on devices with Ethernet ports
** Fixed Traffic log file transfer to FTP server
** Fixed Web Filter service reloading after a host list file is uploaded
** Fixed access denied messages when sending JSON-RPC requests from root user
** Fixed error message display about duplicated intervals in Profile scheduler
** Fixed FW upgrade with 'keep settings' migration issue for Access Control's 'Fail count' and 'Device port' fields
** Corrected OSPF Routing card values, value positions and names
** Fixed global secret instances not being removed when there are no IPsec instances
** Fixed uploaded file remove icon not staying in position on hover
** Fixed Overview card collapse issue that made it unresponsive after too many clicks
** Removed WAN6 interface from the Overview page
** Fixed mobile IPv6 display in Events Reporting status messages
** Fixed Bridge mode when DNS2 is not available
** Fixed PAP/CHAP username and password fields not saving in interface edit window
** Fixed sending email without secure connection for providers that support such an option
** Fixed 'N/A' parameter showing up in SMS Utilities monitoring status message
** Fixed Call Utilities Events Log message for reboot rule
** Fixed SMS command validation for no-authorization option
** Fixed MODBUS SMS alarms 'Enable' option saving
** Fixed running RMS with no SIM card inserted issue
** Fixed firmware available on server version checking issue
** Fixed CVE-2020-15078 openvpn vulnerability
** Fixed storage calculation for packages
** SMS Utilities: enhanced service security
** Fixed firmware deletion after leaving the page
** Fixed setup wizard redirect after LAN IP change
** Fixed various validation bugs, typos, option hints & alignments
** Fixed multiple IPv6 configuration field validations
** Fixed unnecessary SIM switch issue when Multi-APN is configured
** Fixed MODBUS TCP slave modem not starting after switching SIM cards
** Fixed restoring GPS HTTPS options after FW upgrade with 'keep settings'
** Fixed missing NMEA sentences
** Fixed NMEA cache sentence calculation
** Fixed 'outside/inside range' condition for AVL I/O Analog input trigger
** Fixed relay output value display in I/O Juggler condition page
** Fixed I/O Juggler's WiFi rule not enabling or disabling WiFi interfaces
** Fixed I/O Juggler's double delete issue on I/O Juggler action and condition instances
** Fixed I/O Juggler's incorrect I/O status messages
** Fixed automatic port open after RS232/RS485 Over IP server & bidirect configuration changes
** Fixed 'iostatus' SMS rule
** Added multiwan support for Wireguard default route
 
===<b>[[Media:TRB2_R_00.07.01.4_WEBUI.bin|TRB2_R_00.07.01.4]]</b> | 2022.02.25===
 
* <b>Improvements</b>
** Increased Port Forwards rule max name length
** Added a new '%it' parameter for UTC time in ISO 8601 format to I/O Juggler
** Improved RS232 Port and Timeout validation
 
* <b>Fixes</b>
** Added missing bracket to the end of MODBUS messages
** Fixed preserving the contents of /etc/luci-uploads/ after FW upgrade with the 'Keep all settings' option
** Fixed IPv4-Gateway column showing empty values in the Status -> Routes page
** Fixed firewall extra option validation
** Fixed usage of custom headers in I/O Juggler HTTP action
** Fixed 'verify' option parsing for I/O Juggler
** Changed the logic of uploading files to the modem
** Fixed OpenVPN server configuration with password authentication
** Fixed NTP interval length validation
** Fixed network interface enable after Drag & Drop
** Updated NTP client interval to 24h
** Fixed connection to whitelist carriers
** Fixed Passthrough mode when DHCP is disabled
** Fixed 'Deny data roaming' feature
** Fixed mobile blocking dependency on region
** Disabled Ping To DNS functionality when Bridge/Passthrough mode is enabled
 
===<b>[[Media:TRB2_R_00.07.01.2_WEBUI.bin|TRB2_R_00.07.01.2]]</b> | 2022.01.04===
 
* <b>New features</b>
** DFOTA modem upgrade system for Quectel modems
 
* <b>Improvements</b>
** Removed L2TP section title prefixes
 
* <b>Fixes</b>
** Fixed IPSec crashing issue using mobile
** Fixed FW flashing when chip is in unknown state
** Fixed CPU usage percentage display in the Overview page
** Fixed FOTA timeout issue when server does not respond
** Fixed installation of backup packages
** Fixed mobile data limit display after profile change
** Fixed Bridge mode without multi-APN
** Fixed multi mobile interface checking
** Fixed error handling when the modem is not responding
** Prolonged autoconnect setting timeout
 
===<b>TRB2_R_00.07.01</b> | 2021.11.18===
<b>Note:</b> Firmware version TRB2_R_00.07.01 released on 2021.11.18 was removed due to an issue with IPsec tunnel while using mobile connection.
----
* <b>New features</b>
** Tinc VPN
** German language support
** Manual-Auto operator select
 
* <b>Improvements</b>
** Improved WebUI functionality when multiple browser tabs are open
** Updated base to OpenWrt version 21.02
** Updated kernel to version 5.4.141
** Updated mtd-utils to version 2.1.2
** Updated busybox to version 1.33.1
** Updated ubus to version 2021-06-3
** Updated ubox to version 2020-10-25
** Updated rpcd to version 2021-03-11
** Updated opkg to version 2021-06-13
** Updated fstools to version 2021-01-04
** Updated wwan to version 2019-04-29
** Updated ethtool to version 5.10
** Updated uhttpd to version 2021-03-21
** Updated ppp to version 2020-10-03
** Updated odhcpd to version 2021-07-18
** Updated hostapd to version 2020-06-08
** Updated dropbear to version 2020.81
** Updated dnsmasq to version 2.85
** Updated netifd to version 2021-07-26
** Updated firewall3 to version 2021-03-23
** Updated libjson-c to version 0.15
** Updated libevent2 to version 2.1.12
** Updated mac80211 to version 5.10.42-1
** Updated wireless-regdb to version 2021.04.21
** Updated binutils to version 2.35.1
** Updated gdb to version 10.1
** Updated strace to version 5.10
** Updated trace-cmd to version 2.9.1
** Updated valgrind to version 3.16.1
** Updated ath10k-ct-firmware to version 2020-11-08
** Updated procd to version 2021-02-23
** Updated iw to version 5.9.8
** Updated iproute2 to version 5.11.0
** Updated iptables to version 1.8.7
** Updated nettle to version 3.6
** Updated libpcap to version 1.9.1 rel3
** Updated elfutils to version 0.180
** Updated cryptodev-linux to version 1.11
** Updated linux-firmware to version 20201118
** Updated util-linux to version 2.36.1
** Updated openwrt-keyring to version 2021-02-20
** Updated mtd to version rel26
** Updated fwtool to version 2019-11-12
** Updated ca-certificates to version 20210119
** Updated wireguard-tools to version 1.0.20210223
** Updated iwinfo to version 2021-04-30
** Updated ipset to version 7.6
** Updated gre to version rel12
** Updated wolfssl to version 4.7.0
** Updated ustream-ssl to version 2020-12-10
** Updated uclient to version 2021-05-14
** Updated readline to version 8.1
** Updated mbedtls to version 2.16.11
** Updated libusb to version 1.0.24
** Updated libunwind to version 1.5.0
** Updated libubox to version 2021-05-16
** Updated libnl-tiny to version 2020-08-05
** Updated libnftnl to version 1.1.8
** Updated libiconf-full to version 1.16
** Updated libbsd to version 0.10.0
** Updated gmp to version 6.2.1
** Updated ulogd to version rel6
** Updated sqm-scripts to version 1.5.0
** Updated ntpclient to version rel14
** Updated nmap to version 7.80
** Updated curl to version 7.77.0
** Updated zerotier to version 1.6.5
** Updated xtables-addons to version 3.13
** Updated xl2tpd to version 1.3.16
** Updated stunnel to version 5.59
** Updated strongswan to version 1.0.13
** Updated sstp-client to version 1.0.13
** Updated pptpd to version rel5
** Updated openvpn to version 2.5.3 rel2
** Updated ntpd to version rel3
** Updated net-snmp to version rel2
** Updated mosquitto to version 2.0.11
** Updated miniupnpd to version 2.2.1 rel 3
** Updated etherwake to version rel5
** Updated libzip to version 1.7.3
** Updated libgpg-error to version 1.39
** Updated glib2 to version 2.66.4
** Updated libnetfilter-conntrack to version 1.0.8
** Updated libnetfilter-log to version rel3
** Updated lzo to version rel4
** Updated nghttp2 to version 1.43.0
** Updated openvpn-easy-rsa to version 3.0.8 rel3
** Updated iperf to version rel2
** Updated iperf3 to version 3.10.1
** Updated e2fsprogs to version 1.45.6
** Updated fuse to version 2.9.9
** Updated udprelay to version 2020-02-26
** Updated qmicli to version 1.28.2
** Updated pcre to version 8.45
** Updated libsmpp34 to version 1.14.1
** Updated libiwinfo to version 2.1
** Added netifd library for additional information related to network interfaces
** Updated openssl to version 1.1.1l
** Updated privoxy to version 3.0.32
** Added ACL reload method for sessions
** Added 'Advertisement interval' field to the VRRP configuration window
** Added a PPTP-to-WAN Zone Forwarding rule when default route is enabled on PPTP client
** Added email user group validation for sendind test emails with Events reporting
** Added an event logging feature for Ping Reboot events
** Improved file/section deletion logic: now files are also deleted after deleting a related config section
** Improved package deletion logic
** Added the possibility to configure multiple reboot times in one Reboot Scheduler configuration instance
** Updated 'External system log server' field validation to accept IPv6 addresses
** Added redirect to Overview page after login
** Added WebUI session timeout after user inactivity
** Added placeholder text to dropdown menus
** Improved multi-select design and functionality
** Added Unix timestamp, local ISO time, UTC time to Modbus
** Added info message when selected file cannot be uploaded
** Improved IPsec throughtput
** Added IPSec "Compatibility mode" configuration support
** Made SNMP 'Community name' option editable
** Added the option to delete configurations to the SMS Utilities 'UCI' rule
** Added 'hour', 'week day', 'month day' slelection options to SMS Limit configuration
** Added Lithuanian and Verizon APNs
** Added modem selection for the 'Send SMS' option in Auto Reboot settings
** Added the possibility to get total data usage value without specifying time interval via ubus
** Added return SIM count command
** Added an indication to the GPS map when GPS service is disabled
** Added I/O support to SNMP
** Removed ubus list method due to security reasons
** Added MODBUS "%I, %T, %S, %r, %n" support to MODBUS Data Sender
** Removed search engine site crawling
** Improved IPSec "Local/Remote source" validation
** Added Firewall "all" and "custom" protocol options
** Added Backup file size limit of 2 MB
** Improved basic/advanced mode changing
** Improved Wireguard "IP Addresses" field validation
** Added language download support from language selection section
** Added PPTP "Client to client" configuration support
** Made DDNS "username", "password", "host" fields optional
** Added SSTP "Default route" configuration support
** Added SMS Limit hour, week day and month day support
** Added Passthrough "Leasetime" and "Unit" configuration support
** Added Call Utilities "Active Timeout" configuration support
** Added support for PL2303GC serial to USB chip
** Added GPS AVL "Don't Contain Connection" and "Retry on Fail" configuration support
 
* <b>Fixes</b>
** Made RMS 'Connect' button disabled when a connection attempt is already in progress
** Added validation for TLS Clients 'Private network' option
** Fixed the validation range for MTU fields
** Fixed removing firmware image file after leaving the fimware upgrade page
** Fixed network selection list for Traffic Logging - added all available LAN networks
** Fixed DHCP Options validation
** Fixed configuration profile date display
** Fixed blank page after invalid URL in login page
** Fixed TR-069 related firewall rule loading
** Fixed remote subnet netmask validation issues for the GRE Tunnel configuration
** Fixed WebUI section toggle
** Fixed package installation modal layout
** Fixed current page values showing up in login page username field
** Fixed the possibility to create section with a name that is already in use in the same config file
** Fixed OpenVPN username and password deletion when deleting configuration instance
** Fixed session closing issue for the user whose password was just changed
** Updated MODBUS credential validation
** Updated MQTT credential validation
** Fixed DNS 'Rebind protection' setting when switch is disabled
** Updated libgcrypt to version 1.9.3 to fix CVE-2021-33560
** Fixed CVE-2021-33624, CVE-2021-29648 vulnerabilities
** Fixed DHCP 'Lease time' and 'Unit' option saving over the Setup Wizard LAN page
** Fixed Reboot Scheduler not removing crontab file after disabling the rule
** Fixed OpenVPN 'Extra options' field validation to allow a space character
** Added table drag and drop functionality to the Firewall's Traffic Rules page
** Fixed DNP3 Outstation crash caused by non-void function returning no value
** Fixed RMS 'Copy' button functionality
** Fixed gsmd deamon crashing after modem restart
** Fixed gsm memory leak
** Fixed WCDMA band names for MEIG modules
** Fixed SMS Gateway loading screen issue when sending an SMS message
** Fixed mobile data database error after upgrading firmware with the 'Keep settings' option
** Fixed rpcd memory leak issue
** Fixed network information gathering
** Fixed 3G LED not being active in 3G mode
** Fixed data limit accuracy issue
** Fixed SIM Switch back to default SIM crash loop when SIM1 is disabled
** Removed unused SIM Switch struct objects
** Fixed NTP GPS Synchronization swith to enable GPS service
** Fixed MODBUS Serial Master crash when requesting a 4-byte datatype from a 2-byte data payload
** Added a check if DNP3 is installed for 'Serial type' option
** Fixed SMS Utilities not working
** Fixed I/O Juggler hour condition interval issue
** Removed 'Memory Expansion' and 'Printer Server' from the Status -> Services page
** Patched CVE-2021-40528 vulnerability
** Patched CVE-2021-40490 vulnerability
** Patched CVE-2020-16120 vulnerability
** Fixed VLAN section creation
** Returned Interfaces "Port priority" option
** Fixed missing Content-Type header to initial WebUI response
** Fixed RIP information parsing in status page
** Fixed OpenVPN IPv6 netmask validation
** Fixed SNMP Trap Settings Host/IP field validation
** Fixed Cumulocity authentication reset
** Fixed Events Reporting rule saving
 
===<b>[[Media:TRB2_R_00.07.00_WEBUI.bin|TRB2_R_00.07.00]]</b> | 2021.07.16===
 
* <b>New features</b>
** New WebUI based on Vue.js 2.6.12
** RutOS updated to OpenWrt 19.07.7 base
** DNP3 Master and DNP3 Oustation
** 'Restore to user's defaults' SMS Utilities rule
 
* <b>Improvements</b>
** Updated firewall to release 3
** Updated kernel to version 4.14.221
** Updated uhttpd to version 2020-10-01
** Updated xtables-addons to release 9
** Updated mwan to version 2.8.14
** Updated pcre to version 8.44
** Updated curl to version 7.74
** Updated sqlite to version 3.33
** Updated ncurses to version 6.2
** Updated OpenSSL to version 1.1.1k
** Added full MODBUS register address expansion specifier for Data to Server
** Added full MODBUS register address legend
** Added Client ID option for the MQTT protocol in Data to Server
** Improved Data to Server sleeping accuracy
** Improved Data to Server username validation; now space is allowed
** Added firmware version OID to the SNMP service
** Added IP address family option field to the SNMP page
** Added SNMPv6 section to the SNMP Communities page
** Renamed the 'System -> Users' page to 'System -> System Users'
** Moved password changing option to the 'System -> System Users' page
** Switched to ar8216 driver
** Added IPsec XAUTH support
** Improved OpenVPN updown, init scripts to write info about instance in JSON
** Added AES-256-GCM encryption support to OpenVPN
** Added extra configuration parameters to DMVPN
** Added PSK conversion to DMVPN and single PSK types
** Improved Package Manager package installation, deletion and dependencies
** Improved Package Manager download process over FOTA
** Added new Input/Output values manageable over RMS
** Added IPv6 traffic logging
** Made 'Network -> Failover' and 'Network -> Interfaces' page data draggable on multiple browsers
** Added Input/Output Post/Get URL parameter t_time changing delay and time to seconds or miliseconds
** Added message storage management by config value
** Improved QMI error handling and status tracking
** Turned on modem in preinit for correct power-on sequence
** Added Post/Get feature to turn mobile data on/off
** Added the possibility to use 2gonly/3gonly/4gonly arguments for cellular service command alongside current 2g/3g/lte arguments
** Added "Phone number" and "Message" fields for "Send SMS" option
** Added "Host to ping from SIM1" and "Host to ping from SIM2" fields
** Added option to switch back to primary SIM card after timeout
** Added "send analog input" option to TAVL settings
 
* <b>Fixes</b>
** Added glib2 patch to fix CVE-2019-13012 vulnerability
** Added ntfs-3g patch to fix CVE-2019-9755 vulnerability
** Added WolfSSL patch to fix CVE-2021-3336 vulnerability
** Added Busybox patch to fix CVE-2018-1000500 vulnerability
** Added netifd, odhcp6c IPv6 routing loop on point-to-point links patches to fix CVE-2021-22161 vulnerability
** Fixed Android clients IPsec MTU/MSS size
** Fixed wrong IPsec DPD value saving
** Changed IPsec PSK maximum length to 128 symbols
** Fixed SSTP remaining up after package removal
** Fixed DMVPN crypto_proposal write to config
** Fixed I/O Juggler's SMS sending to correct group
** Fixed I/O Scheduler's relay state issue
** Added I/O direction check while changing IOs via I/O Post/Get
** Fixed float endianness mismatch on some devices MODBUS TCP Master, MODBUS Serial Master
** Fixed UPnP issue that caused config changes to apply only after service restart
** Fixed WebUI files caching when upgrading firmware
** Fixed WebUI date display format
** Fixed MODBUS returning incomplete MAC address data
** Fixed depleting IPv6 RA timeout when the ISP doesn't send RA updates
** Added "Transaction timed out" error handling
** Fixed PPPOE connection loss when wrong session PADT packet arrives
** Added gcont object tracking and info update if this service is restarted
** Fixed default SMS storage
** Fixed SMS warning sending after Mobile Data Limit change
** Fixed DHCP relaying over mobile networks
** Changed PIN code maximum length to 8 symbols
** Fixed 'I/O status' message to include correct Input/Output name based on info in ubus ioman objects
** Fixed 'Over IP' serial type's UDP issue in client mode
 
===<b>[[Media:TRB2_R_00.02.06.1_WEBUI.bin|TRB2_R_00.02.06.1]]</b> | 2021.02.10===
 
* <b>Fixes</b>
** Added dnsmasq patch CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25684, CVE-2020-25685, CVE-2020-25686, CVE-2020-25687
** Fixed SSH reachable over SIM IP in early boot
** Fixed modem status after failed network scan
** Fixed mbncfg function and PIN check logic
** Fixed PPTP server interface naming
** Fixed correct client PPTP interface name selection for route creation
** Fixed adding helper to firewall's wan zone when enabling PPTP configuration
** Added package size checking when manually installing a package
** Fixed 'New Firmware Available' message display after firmware upgrade
 
===<b>[[Media:TRB2_R_00.02.06_WEBUI.bin|TRB2_R_00.02.06]]</b> | 2020.12.31===
 
* <b>New features</b>
** Operator Whitelist/Blacklist
** Operator Whitelist/Blacklist
** Web Filter
** Web Filter
Line 23: Line 552:
** Partial and full modem control support from RS bus
** Partial and full modem control support from RS bus


* Improvements:
* <b>Improvements</b>
** Updated base to OpenWrt 19.07.4
** Updated base to OpenWrt 19.07.4
** Added Phone Groups as possible SMS recipients to SMS Post/Get
** Added Phone Groups as possible SMS recipients to SMS Post/Get
Line 32: Line 561:
** Fixed parsing user uploaded custom OpenVPN configuration files containing carriage returns
** Fixed parsing user uploaded custom OpenVPN configuration files containing carriage returns
** Added iptables conntrack flush on WAN Failover if IPsec is enabled
** Added iptables conntrack flush on WAN Failover if IPsec is enabled
** Optimized package responsible for sending/receiving GRE Tunnel keepalive packets
** Improved Package Manager build system
** Added extra error checking to Package Manager when downloading packages
** Added extra error checking to Package Manager when downloading packages
** Added data usage info for both SIM cards to RMS JSON
** Added data usage info for both SIM cards to RMS
** Added logging to syslog when Ping/Wget Reboot "Action" is set to 'None'
** Added logging to syslog when Ping/Wget Reboot "Action" is set to 'None'
** Improved display of configuration tables when a lot of information is shown
** Improved display of configuration tables when a lot of information is shown
Line 50: Line 577:
** Improved SMS Utilities VPN status rule to support custom configurations
** Improved SMS Utilities VPN status rule to support custom configurations
** Added SMS storage limit check after inserting a SIM card
** Added SMS storage limit check after inserting a SIM card
** Added "Modem" type to modem related events
** Changed modem name from primary to internal if device has only one built-in modem
** Changed modem name from primary to internal if device has only one built-in modem
** Improved SIM count check during init
** Improved SIM count check during init
** Renamed mobile service mode "M1+NB only" to "Auto"
** Renamed mobile service mode "M1+NB only" to "Auto"
** Added serial 1000000 bps baud rate option
** Added serial 1000000 bps baud rate option
** Refactored GPS code


* Fixes:
* <b>Fixes</b>
** Fixed IPsec Passthrough subnet/ip value parsing to make it dynamic for leftsubnet
** Fixed IPsec Passthrough subnet/ip value parsing to make it dynamic for leftsubnet
** Fixed occasions when error messages overlap buttons
** Fixed occasions when error messages overlap buttons
** Fixed I/O state saving after revert back to original state
** Fixed I/O state saving after revert back to original state
** Optimized script for downloading Package Manager packages after firmware upgrade
** Optimized script for downloading Package Manager packages after firmware upgrade
** Fixed wireguard package
** Fixed IPsec connection after reboot
** Fixed IPsec connection problems after reboot
** Fixed bridged interface configuration for L2TPv3
** Fixed bridged interface configuration for L2TPv3
** Removed trailing newlines in returned SNMP strings
** Removed trailing newlines in returned SNMP strings
Line 87: Line 611:
** Fixed modem SIM card checking
** Fixed modem SIM card checking
** Fixed multi SMS handling on SMS Limit
** Fixed multi SMS handling on SMS Limit
** Mobile: fixed single sim sending as last SMS on limit (ID: 2102)
** Fixed Call Utilities multiple SMS sending per received call
** Fixed Call Utilities multiple SMS sending per received call
** Fixed SMS storage limit check on device reboot
** Fixed SMS storage limit check on device reboot
Line 95: Line 618:
===<b>[[Media:TRB2_R_00.02.05.2_WEBUI.bin|TRB2_R_00.02.05.2]]</b> | 2020.11.19===
===<b>[[Media:TRB2_R_00.02.05.2_WEBUI.bin|TRB2_R_00.02.05.2]]</b> | 2020.11.19===


* Fixes:
* <b>Fixes</b>
** Randomized the global rate limiter to mitigate "SAD DNS" attack
** Randomized the global rate limiter to mitigate "SAD DNS" attack


===<b>[[Media:TRB2_R_00.02.05.1_WEBUI.bin|TRB2_R_00.02.05.1]]</b> | 2020.09.30===
===<b>[[Media:TRB2_R_00.02.05.1_WEBUI.bin|TRB2_R_00.02.05.1]]</b> | 2020.09.30===


* New features:
* <b>New features</b>
** DLNA media server
** DLNA media server
** iptables NETMAP extension
** iptables NETMAP extension
Line 110: Line 633:
** GPS time synchronization
** GPS time synchronization


* Improvements
* <b>Improvements</b>
** Improved WebUI page loading speed
** Improved WebUI page loading speed
** Added Basic/Advanced mode selection in Setup Wizard
** Added Basic/Advanced mode selection in Setup Wizard
Line 157: Line 680:
** Removed incorrect GPS analog input option from GPS HTTPS settings
** Removed incorrect GPS analog input option from GPS HTTPS settings


* Fixes:
* <b>Fixes</b>
** Fixed DDNS freeze issues
** Fixed DDNS freeze issues
** Fixed Firewall Traffic Rules Source and Destination address field validations
** Fixed Firewall Traffic Rules Source and Destination address field validations
Line 226: Line 749:
===<b>[[Media:TRB2XX_R_00.02.04.3_WEBUI.bin|TRB2XX_R_00.02.04.3]]</b> | 2020.07.31===
===<b>[[Media:TRB2XX_R_00.02.04.3_WEBUI.bin|TRB2XX_R_00.02.04.3]]</b> | 2020.07.31===


* New features:
* <b>New features</b>
** Backup archive MD5 & SHA256 checksum calculation to help user identify altered backup archives
** Backup archive MD5 & SHA256 checksum calculation to help user identify altered backup archives
** Package signature check to verify that a package comes from Teltonika
** Package signature check to verify that a package comes from Teltonika


* Improvements:    
* <b>Improvements</b>    
** Updated APN database
** Updated APN database


* Fixes:
* <b>Fixes</b>
** Fixed CVE-2019-17367
** Fixed CVE-2019-17367
** Fixed hiding of configuration pages that users of a specific group don't have read access to
** Fixed hiding of configuration pages that users of a specific group don't have read access to
Line 240: Line 763:
===<b>[[Media:TRB2XX_R_00.02.04.1_WEBUI.bin|TRB2XX_R_00.02.04.1]]</b> | 2020.07.02 ===
===<b>[[Media:TRB2XX_R_00.02.04.1_WEBUI.bin|TRB2XX_R_00.02.04.1]]</b> | 2020.07.02 ===


* New features:
* <b>New features</b>
** Added GPS support
** Added GPS support
** Added 'Mobile Passthrough mode'
** Added 'Mobile Passthrough mode'
Line 253: Line 776:
** During this release a new package was released - [[TRB255 Package Manager#Available packages|WireGuard]]
** During this release a new package was released - [[TRB255 Package Manager#Available packages|WireGuard]]


* Improvements:
* <b>Improvements</b>
** Improved mobile interface creation
** Improved mobile interface creation
** Improved 'Profile Scheduler' with minute accuracy
** Improved 'Profile Scheduler' with minute accuracy
Line 268: Line 791:
** General web responsiveness improvements
** General web responsiveness improvements


* Fixes:
* <b>Fixes</b>
** Fixed incorrect voltage multiplier; used to return 2x higher voltage values
** Fixed incorrect voltage multiplier; used to return 2x higher voltage values
** Power button LED fix
** Power button LED fix
Line 297: Line 820:
===<b>[[Media:TRB2XX_R_00.02.03.1_WEBUI.bin|TRB2XX_R_00.02.03.1]]</b> | 2020.05.15===
===<b>[[Media:TRB2XX_R_00.02.03.1_WEBUI.bin|TRB2XX_R_00.02.03.1]]</b> | 2020.05.15===


* New features:
* <b>New features</b>
** Responsive WebUI design
** Responsive WebUI design
** New Access Control window for managing IP access
** New Access Control window for managing IP access
Line 319: Line 842:
** NTPD version 4.2.8p14
** NTPD version 4.2.8p14


* Improvements:
* <b>Improvements</b>
** Added HMAC configurations for OpenVPN
** Added HMAC configurations for OpenVPN
** Added AES ciphers support for OpenVPN
** Added AES ciphers support for OpenVPN
Line 332: Line 855:
** Added pin information for iostatus SMS rule
** Added pin information for iostatus SMS rule
** Removed modem traps if no modem is present
** Removed modem traps if no modem is present
** Optimised section toggling logic, removing all toggling associated flags required prior optimisation
** Optimized section toggling logic, removing all toggling associated flags required prior optimization
** Standardized section edit page headers in WebUI Services
** Standardized section edit page headers in WebUI Services
** Improved the look of error pages and messages
** Improved the look of error pages and messages
Line 354: Line 877:
** Fixed grammar errors in Mobile page
** Fixed grammar errors in Mobile page


* Fixes:
* <b>Fixes</b>
** Added name validation in the Firewall → Port Forward page, fixed custom protocol value selection and display
** Added name validation in the Firewall → Port Forward page, fixed custom protocol value selection and display
** Added validation for GRE 'Remote subnet IP' option
** Added validation for GRE 'Remote subnet IP' option