RUTM30 Firmware Downloads

Main Page > RUTM Routers > RUTM30 > RUTM30 Firmware Downloads

This page contains firmware files for RUTM30 devices. Look to the table below or the changelog to find download links.

Stable firmware - this version has been tested through both internal QA processes and large-scale user deployments. All known issues have been resolved based on user reports and testing feedback. Stable firmware is currently used as the default for updates and is also deployed in mass production. To upgrade firmware using WebUI, follow the instructions in RUTM30 Firmware.
Latest firmware - this is the most recent firmware release, featuring the latest updates, features, and fixes. While it has passed internal testing, it has not yet undergone widespread deployment or user validation. It may still contain undiscovered issues. We recommend testing on a small number of devices before considering broader updates.

Note: packages for Package Manager are independent from firmware and can be downloaded in the Package Downloads page.

RUTM30

File	Type	Release date	Size	MD5	Links
RUTM_R_00.07.18.3_WEBUI.bin	Stable FW	2025.10.30	27 MB	ba26b6110a119bddf16d89a4e21fb6ce	Changelog API
RUTM_R_00.07.19.2_WEBUI.bin	Latest FW	2025.11.26	27 MB	7653b58200f02514a5936c2a0461bb49	Changelog API
RUTM_R_GPL_00.07.19.2.tar.gz	SDK	2025.11.26	46 MB	37a4477e0b598f18c43c96398be59700

FW checksums

Checksums for firmware files can be found here.

Changelog

RUTM_R_00.07.19.2 | 2025.11.26

Fix
- System
  - Update Firmware: fixed firmware download cancellation

RUTM_R_00.07.19.1 | 2025.11.12

Fix
- System
  - WebUI: fixed unresponsive navigation after password change

RUTM_R_00.07.19 | 2025.11.06

New
- Network
  - Mobile: added "web.unomobile.it" APN for "1Mobile" operator to APN database
Improvements
- Network
  - DHCP server: added message to Events Log when there are no available DHCP addresses
  - Firewall: added status to Traffic Rule page
  - Firewall: added status to Port Forwards page
  - Firewall: added status to NAT page
  - Firewall: added status to DMZ page
  - Firewall: updated status page to have chain and rule tables for better searchability
  - Firewall: added shortcuts from firewall rules in status page to firewall configurations that created them
  - HTTPS DNS Proxy: disabled field requirements when service is disabled
  - Mobile: improved mobile operator parsing for connection establishment
  - Mobile: added support for eSIM to Mobile Usage page
  - Mobile: updated default SIM selection in Mobile General page
  - Mobile: added switch to disable local DHCPv4 leases when operating in bridge mode
  - Mobile: added more information about SIM state changes in logs
  - Mobile: improved error handling during mobile data connection bringup
  - NAT64: added status to NAT64 page
  - Network: improved DHCP client and server related fields
- Services
  - Cloud of Things: changed communication from HTTP to MQTT
  - Cumulocity: changed communication from HTTP to MQTT
  - Data to Server: added new parameters (Custom name and pin value) in I/O input plugin
  - EoIP: added IPv6 support
  - Event juggler: added `io_reset` option
  - GRE: added IPv6 support
  - Impulse Counter: increased status loading speed
  - MQTT Modbus Gateway: added validation to discard responses with invalid ID or function code
  - OpenVPN: improved page load speed by removing duplicate data request
  - SNMP: added SET support for universal gateway tag value table
  - Stunnel: added support for using IPv6 addresses in the connect IPs field
  - Wireguard: added wireguard watchdog support
  - cURL: updated version to 8.16.0
  - OpenVPN: updated version to 2.6.14
- System
  - Custom Scripts: added page loading spinner
  - Speed Test: added support for custom server url
  - Update Firmware: improved FOTA communication and caching logic
  - WebUI: improved usability on small screens
  - Kernel: updated version to 6.6.108
  - PAM: updated version to 1.7.1
Fix
- Network
  - DHCP server: fixed DHCPv6 server reload when changing VLAN
  - DNS: fixed "Static addresses" and "Custom redirect" field required validation
  - Dynamic routes: fixed services other than EIGRP restarting on network change
  - Firewall: added IPsec and OpenConnect configurations as possible networks
  - Firewall: fixed NAT extra custom rules not applying after FW upgrade
  - HTTPS DNS Proxy: fixed DNS requests failing after obtaining new IP
  - Mobile: fixed informational messages when SIM configuration is not found
  - Mobile: fixed configuration files after ESIM deletion
  - Mobile: fixed IPv4/IPv6 type mobile reconnection loop if one type has unsuccessful connection
  - Mobile: fixed updating modem firmware when custom root CA is configured
  - Mobile: fixed eSIM profile display for profiles without provider value
  - Mobile: fixed missing modem firmware version after modem firmware update
  - Multi WAN: fixed Multi WAN interface creation
  - Wireless: fixed invalid mesh interface encryption data reporting
  - Wireless: fixed excessive Wi-Fi service log file creation due to service restarts
  - Wireless: fixed "Allow legacy 802.11b rates" option not working properly
  - Wireless: fixed missing background scan data in learn mode
- Services
  - DLMS: fixed access error when reading an empty sort object attribute on a generic profile object
  - DLMS: fixed "Entries" not being clamped for "Profile generic" COSEM type
  - DMVPN: fixed custom changes in IPsec, GRE and NHRP pages being reverted when saving DMVPN instance
  - DNP3 Client: fixed dnp3 test function printing analog values in wrong format
  - DNP3 Client: fixed always shown warning notification by displaying status hints for affected requests
  - Dynamic DNS: fixed "Check interval" and "Force interval" validation issues
  - Email to SMS: fixed process hang during email handling
  - Impulse Counter: fixed duplicate values in 'GPIO pin' dropdown
  - Impulse Counter: fixed deleting impulse counter data records
  - IPsec: fixed an issue where connections could be re-initiated even while being active
  - IPsec: fixed authentication issue when using multiple instances with the PSK authentication method
  - IPsec: fixed Xauth connections not establishing when identifiers are set
  - IPsec: fixed wrong active client information when using certificates
  - IPsec: fixed incorrect uptime display when using multiple responder instances
  - L2TP: fixed L2TP over IPsec connection issue
  - L2TPv3: fixed parameter validation for IPv6 addresses in configuration
  - Modbus Client: fixed email and MQTT alarm actions running longer than intended
  - Modbus Client: fixed always shown warning notification by displaying status hints for affected requests
  - Modbus Client: fixed test request endpoints failing if 'broadcast' option is not provided
  - MQTT Broker: fixed TLSv1.1 configuration
  - OpenConnect: fixed 'Get server fingerprint' feature on IPv6 servers
  - OpenConnect: fixed displaying IPv6 address under Tunnel IP address
  - OpenVPN: fixed parsing uploaded custom OpenVPN configuration
  - OpenVPN: fixed issues with parsed fields being displayed after config deletion
  - OpenVPN: fixed configuration parsing issues related to security options
  - SMS Forwarding: fixed certificate verification disabling
  - Wireguard: fixed creation of routes to endpoint host when default route is not set
- System
  - Access Control: fixed displaying certificates in "HTTPS" edit modal after page refresh
  - Administration: fixed incorrect creation date of user's default configuration
  - API Core: fixed API error on 'DELETE' request with bad payload structure
  - Events Log: fixed sorting reset functionality of table columns and "Event group" column issues
  - Setup Wizard: fixed redirect of "RMS" step
  - System Users: fixed multiple network pages working improperly with non-root users
  - WebUI: fixed "visible columns" button to be clickable for users without "write" permissions
  - WebUI: removed bell notifications from modals
  - WebUI: fixed length validation for custom input values in select lists
  - WebUI: fixed active state of filters on tables
CVE Patches
- CVE-2025-4373 - 4.8 (MEDIUM)
- CVE-2025-6020 - 7.8 (HIGH)
- CVE-2025-6052 - 7.5 (HIGH)

RUTM_R_00.07.18.3 | 2025.10.30

Improvements
- System
  - ubus: updated version to 2025-10-19
Fix
- System
  - Backup: fixed issues uploading older backup files

RUTM_R_00.07.18.2 | 2025.10.22

Fix
- Services
  - IPsec: fixed issue where IPsec connections failed during WAN failover
  - OpenVPN: fixed status issue after firmware upgrade

RUTM_R_00.07.18.1 | 2025.10.13

Fix
- Network
  - Mobile: fixed operator selection under specific conditions

RUTM_R_00.07.18 | 2025.10.01

Note: This firmware version has been withdrawn due to an issue with incorrect mobile operator selection under specific conditions.

New
- Network
  - Mobile: added historical signal information display
  - Mobile: added "internet" APN for "Telenor" operator to APN database
  - Starlink: added Starlink management support
Improvements
- Network
  - Channel Analysis: aligned X axis ticks to 5GHz channels
  - Channel Analysis: removed low contrast color from possible figure colors
  - Channel Analysis: added diamond decoration showing primary channel position
  - DHCP server: added option 82 support to DHCP relay
  - Mobile: added SIM switch historical data
  - Mobile: improved SIM switch status information
  - SSHFS: updated mount point location
  - Dnsmasq: updated version to 2.90
  - Iperf3: updated version to 3.19.1
- Services
  - DLMS: improved COSEM value reading speed
  - DNP3 Client: added DNP3 client support for universal gateway
  - DNP3 Outstation: increased status report responsiveness
  - Input/Output: added "time" and "delay" options to I/O state change API endpoint
  - IPsec: added requirement for local certificate and key fields when X.509 authentication method is selected
  - IPsec: added improvements for IPv6 support
  - Modbus Client: increased test button and status report responsiveness
  - Modbus Client: made number zero as valid server ID
  - Modbus Client: added broadcast support
  - Modbus Server: increased status report responsiveness
  - Modbus Server: added broadcast support
  - MQTT Modbus Gateway: added broadcast support
  - OpenVPN: removed disabled state from "logs" and "active clients" when user has no write permissions
  - OpenVPN: improved error messages
  - OpenVPN: added user and password options for export client configuration
  - SMS Utilities: added a warning about enabled SMS limit
- System
  - Access Control: added JSON-RPC enable toggle
  - JSON-RPC: moved to Package Manager
  - Update Firmware: added event log item about modem firmware update
  - WebUI: added indicators when a form input inside an inactive tab was changed or invalid
  - WebUI: added "Skip to main content" accessibility feature
  - WebUI: improved multi select design
  - WebUI: improved styles of drag hint on smaller screens
  - WebUI: improved consistent formatting across all hints
Fix
- Network
  - 802.1X Server: fixed redirect link to "Radius" page
  - 802.1X Server: fixed unsupported Guest VLAN option being displayed
  - Channel Analysis: fixed 20 and 160 MHz width parsing
  - Channel Analysis: fixed inconsistent figure widths between same width channels
  - Channel Analysis: centered figures using center channels instead of primary ones
  - Channel Analysis: fixed chart display when signal goes below -100 dBm
  - Mobile: fixed excessive SIM switching after changing configuration
  - Mobile: fixed segmentation fault during SIM switching
  - Mobile: fixed APN database backup and restore functionality
  - Multi WAN: fixed incorrect log trigger
  - Network: fixed interface settings change when framed routing is enabled
  - Network usage: fixed table columns visual bugs
  - Wireless: fixed VHT operation IE values for 20MHz channel width to be the same regardless static/automatic channel configuration
- Services
  - Call Utilities: fixed answer action not triggering on second call
  - Data to Server: fixed Modbus input raw data sending when data type is Modbus PDU
  - Hotspot: fixed console errors that occurred in certain scenarios when enabling or disabling an instance
  - Hotspot 2.0: removed OSU provider
  - IPsec: fixed field validation to support % in custom options
  - Modbus Client: fixed PDU data type data collection
  - OpenVPN: fixed permissions for using IP Block
  - RMS: fixed RMS authentication under poor internet conditions
  - SMS Utilities: fixed mobile data usage display when mobile data is turned off
  - SMS Utilities: fixed incorrect 'Firmware on server' status message shown without internet connection
  - Stunnel: fixed disabled state of "enable" switch in overview page
  - Zerotier: fixed excessive ARP flooding on Zerotier interfaces
- System
  - Administration: fixed "User group" input validation
  - API Core: fixed double quoted boundary parsing
  - Kernel: fixed compilation of 'fs-cifs' kernel module package
  - Profiles: fixed endpoint response when calling from internal API
  - UI Core: fixed 'Save & Apply' button reachability on mobile devices
  - Update Firmware: fixed incorrect FOTA address in SDK
  - WebUI: fixed text-area width issues on small screen devices
CVE Patches
- CVE-2025-6021
- CVE-2025-32415
- CVE-2025-49794
- CVE-2025-49796

RUTM_R_00.07.17.5 | 2025.09.30

Improvements
- Network
  - Mobile: added ability to download eSIM profiles via Setup Wizard
Fix
- Network
  - Mobile: fixed possible hang when downloading eSIM profile
  - Network: fixed assigning interface to incorrect firewall zone when changing its settings
- Services
  - Ledman: fixed possible undefined LED behavior

RUTM_R_00.07.17.4 | 2025.09.17

Fix
- System
  - Profiles: fixed keep-settings execution for older profiles

RUTM_R_00.07.17.3 | 2025.09.05

Improvements
- Services
  - Tailscale: updated version to 1.86.2
Fix
- Services
  - Web Filter: fixed host blocking with hotspot interfaces

RUTM_R_00.07.17.2 | 2025.09.02

Improvements
- Network
  - iwinfo: updated version to 2025-02-06
Fix
- Network
  - DNS: fixed saving of DNS server IPs
  - Mobile: fixed SIM switch rule triggering unexpectedly due to NTP time adjustments
- Services
  - Tailscale: fixed dns resolution errors caused by enabling MagicDNS
- System
  - Backup: fixed keep-settings execution for older backups

RUTM_R_00.07.17.1 | 2025.08.19

Fix
- Network
  - Multi WAN: fixed failover startup after reboot

RUTM_R_00.07.17 | 2025.08.12

Note: This firmware was removed due an issue with Failover functionality.

New
- Network
  - Mobile: added "du.soracom.io" APN for "Soracom" carrier to APN database
  - Mobile: added "m2m" APN for "Cellhire IoT" operator to APN database
  - Mobile: added "internet" APN for "Cellhire" operator to APN database
  - Mobile: added "tis.com" APN for "Sparkle" operator to APN database
- System
  - RutOS: added instructions for creating a simple package using the SDK
Improvements
- Network
  - 802.1X Server: simplified new instance creation
  - 802.1X Server: added alert to notify when the 802.1X server no longer manages VLANs
  - Mobile: added IPv4 or IPv6 data connection information in event log
  - Mobile: added signal data collection
  - Multi WAN: added drag & drop operation for the "Failover" mode
  - Realtime Traffic: added ability to see up to 1 hour of live data
  - VRF: added VPN selection support in the WebUI
  - hostapd: updated version to 2025-05-23
  - Iperf3: updated version to 3.19
- Services
  - Auto Reply: increased SMS text length from 3 to 8 messages
  - Call Utilities: increased SMS text length from 3 to 8 messages
  - Email Relay: simplified new instance creation
  - Event juggler: added call action functionality to hang up the call after a specified time
  - Event juggler: increased SMS text length from 3 to 8 messages
  - Event juggler: added live character counter for SMS messages
  - Hotspot 2.0: deprecated OSU provider
  - Mobile Utilities: added WebUI notifications for received messages and triggered SMS rules
  - Mobile Utilities: added UCI ACL rules
  - Package Manager: added confirmation modal when removing multiple packages
  - SMS Utilities: increased SMS text length from 3 to 8 messages
  - Traffic Logging: improved Hotspot data stream retrieval
- System
  - Administration: added notifications and alerts display toggles
  - Administration: updated certificates page
  - Package Manager: added WebUI notifications for successful and failed package installations
  - UI Core: changed all chart styles
  - WebUI: updated brand color palette
  - WebUI: added sensitive information hiding feature for 'IMSI', 'ICCID' and 'IP address' fields for lower privilege users
  - WebUI: added truncation and hover tooltips for long side widget card titles
  - WebUI: unified the "Change Password" page title
  - Kernel: updated version to 6.6.96
Fix
- Network
  - 802.1X Server: fixed EAP "SUCCESS" response when authentication fails due to not being able to find the RADIUS requested VLAN
  - Data limit: fixed interface data limit not being reset when interface is down
  - DHCP server: fixed DHCPv6 server reload when changing VLAN
  - DHCP server: fixed wrong DHCPv4 server conflict message being displayed when both interfaces have no device assigned
  - HTTPS DNS Proxy: fixed typo in the configuration page
  - Mobile: fixed issue where auto subnet selection used incorrect subnet mask in Bridge or Passthrough modes
  - Mobile: fixed modem driver network stats cleanup on modem restart
  - Mobile: fixed mobile connection loop on unsuccessful ping
  - VLAN: fixed a missing validation message in the WebUI when VLAN migration is restricted
  - Wireless: fixed default cipher not being returned from the API
  - Wireless: fixed an API error that occurred when joining a mesh network while a client network was present
  - Wireless: fixed wireless radio page loading incorrectly when user has limited permissions
- Services
  - Data to Server: fixed configuration clearing when plugin packages are deleted
  - DLMS: fixed missing API validation message for 'server_addr' option
  - DLMS: fixed service crashing when using "Register activation", "Activity calendar" and "Profile generic" COSEM types
  - DNP3 Client: fixed 'index' option API error in the 'requests' endpoints
  - Event juggler: fixed issue with enabling/disabling the WiFi interfaces
  - Hotspot: fixed redirect to custom success url with the same domain as landing page
  - Hotspot: fixed 'reset' button functionality and template input styles in 'Landing pages' page
  - I/O Juggler: fixed minor validation bugs
  - I/O Juggler: fixed log generation on reboot action
  - Impulse Counter: fixed duplicate query parameter validation
  - Impulse Counter: fixed input re-initiation
  - Input/Output: fixed incorrect assigning of input/output pins
  - IPsec: fixed intermittent errors when checking IPsec status
  - Modbus Client: fixed timeout behavior to not include serial device acquisition time
  - Modbus Server: fixed custom register block not working if count is more than 128 registers
  - SMS Utilities: fixed incorrect status in 5G operation mode
  - Tailscale: fixed routing issue with failover enabled
  - Wireguard: fixed incorrect route towards other peer being added
  - Wireguard: fixed Wireguard not re-adding default routes after deleting instance
- System
  - Access Control: fixed duplicate query parameter validation
  - Access Control: fixed HTTP WAN remote switch is shown as disabled after the "WAN to LAN" action
  - Administration: fixed device usage duplicate query parameter validation
  - Administration: fixed issue of "delete" button not being disabled on "System users" page when user has no write permissions
  - Events Log: fixed duplicate query parameter validation
  - IP Block: fixed MAC blocking interface validation
  - NTP Client: fixed fail count when operator synchronization is enabled
  - Package Manager: updated "View packages repository" link
  - Profiles: fixed issue that allowed deletion of profiles in use by the scheduler
  - Setup Wizard: fixed "Setup Wizard" access issues with lower privilege users
  - WebUI: fixed notifications disappearing on page navigation
  - WebUI: fixed validation for fields using "url" rule
CVE Patches
- CVE-2023-53154
- CVE-2024-31578
- CVE-2024-52533

RUTM_R_00.07.16.6 | 2025.09.17

Fix
- System
  - Profiles: fixed keep-settings execution for older profiles

RUTM_R_00.07.16.3 | 2025.07.28

Fix
- System
  - System Status: fixed SIM 1 and SIM 2 LEDs not working

RUTM_R_00.07.16.2 | 2025.07.24

New
- Services
  - SNMP: added wireless interfaces' clients' table OID
  - SNMP: added LAN clients' table OID
Fix
- Services
  - OpenVPN: fixed connectivity issues when using WAN failover

RUTM_R_00.07.16.1 | 2025.07.17

New
- Services
  - DNP3 Outstation: added support for data conversion from other industrial protocols
  - FreeRADIUS: added package
  - SNMP: added Universal Gateway support for Modbus and M-Bus protocols
Improvements
- Network
  - DHCP server: added excluded address count to Leased IPs status
  - Firewall: added attack prevention option to log detected flood events
  - Mobile: improved provider name parsing when it is not returned by the module
  - Mobile: changed "telstra.wap" APN for "Telstra" operator to "telstra.internet" in APN database
  - Mobile: improved validation to prevent SMS sending when SIM is removed
  - Wireless: improved FT roaming performance in STA mode
  - libpcap: updated version to 1.10.5
  - tcpdump: updated version to 4.99.5
- Services
  - SNMP: added access points' and meshes' clients' count OID
  - Data to Server: updated collection and input card design
  - Data to Server: added support for specifying multiple minute values in one row for the "Scheduler"
  - Data to Server: added support for Base64 data encoding
  - Data to Server: added warning message for Lua format example script
  - Data to Server: improved example format Lua script
  - DLMS: added filtering query parameters to database API endpoint
  - DNP3 Client: added filtering query parameters to database API endpoint
  - Event juggler: updated event and action card design
  - Event juggler: updated modem selection to include external modems
  - Event juggler: updated "Key-value arguments" to allow duplicates in "Script" and "HTTP" actions
  - Event juggler: increased maximum "Key-value arguments" count in "Script" and "HTTP" actions
  - Event juggler: improved configuration creation in WebUI
  - L2TP: added support for custom ports
  - L2TPv3: improved validation for multiple fields
  - Messages: increased allowed SMS length from 3 to 8 messages
  - Mobile Utilities: added explanatory message to disabled "Storage" options
  - Modbus Client: added filtering query parameters to database API endpoint
  - Modbus Server: added multi value support in data source selection
  - OPC UA Client: added filtering query parameters to database API endpoint
  - OpenConnect: added certificate authentication support
  - OpenConnect: added support for storing keys in TPM2.0
  - Stunnel: added TPM2.0 key support
  - libtasn1: updated version to 4.20.0
- System
  - Troubleshoot: added support for capturing packets via the NFLOG interface
  - WebUI: updated icon sizes
  - WebUI: added long hold to drag on mobile for draggable cards
  - WebUI: improved layout and functionality of log modals
  - WebUI: added indication to 'System' status page if modem is unreachable
  - WebUI: added information about 'Branch' to 'System' page
  - dropbear: updated version to 2025.88
  - Kernel: updated version to 6.6.92
  - tpm2-openssl: updated version to 1.3.0
Fix
- Network
  - DHCP server: fixed calculating DHCP address range when changing subnet mask
  - DHCP server: fixed the incorrectly displayed error for server status
  - Mobile: fixed IPv6 prefix delegation option to stop delegating prefix when option is disabled
  - Mobile: fixed an issue of data connection failure after many interface reloads
  - Network: fixed incorrect IP address netmask validation
  - Realtime Traffic: fixed data usage show for interfaces with PPPoE protocol
  - RelayD: fixed API wrongly suggesting and accepting "lan_mark" as an internal network
  - RelayD: fixed page not functioning for users with limited access
  - Topology: fixed issue where scan buttons were not clickable on mobile devices
  - Wireless: fixed LAN network interface being removed after related WiFi interface is deleted
- Services
  - Data to Server: fixed dnp3 package offline installation bug
  - Data to Server: fixed GPS data formatting
  - Data to Server: fixed SIM card support count in Mobile Usage
  - DLMS: fixed COSEM attribute filtering
  - DMVPN: fixed DMVPN routes not showing up in Static Routes
  - DNP3 Client: fixed requests API error when incorrect 'index' option value was provided
  - Dynamic DNS: fixed Cloudflare authentication type, username saving errors
  - Event juggler: added missing I/O pins for "Copy pin state" option
  - Event juggler: fixed minor I/O validation bugs
  - Hotspot: added SNMP Hotspot trap removal when Hotspot package is removed
  - Hotspot: fixed some LAN traffic being forwarded to Hotspot interface when using VLANs
  - Hotspot: fixed purple.ai configuration profile
  - IPsec: fixed incorrect IPsec restarts when used with Multi WAN
  - Modbus Server: fixed issue where data sources with write permission would not work
  - Modbus Server: fixed regfile uniqueness validation between instances
  - Modbus Server: fixed regression of writing single coil/register always failing
  - OpenVPN: fixed connection checking when using IPv6
  - Tailscale: fixed DNS configuration acceptance from the Tailscale console
  - TR-069: fixed device name generation
  - Wifi Scanner: fixed some wireless interfaces not getting added or removed from scanning list
- System
  - NTP: adjusted modem time synchronization to handle daylight saving time correctly

RUTM_R_00.07.15.4 | 2025.07.11

Improvements
- Network
  - Mobile: improved handling of ESM reject causes #33, #50, #51, and #52
Fix
- System
  - Backup: fixed internal firmware metadata not updating after applying backup

RUTM_R_00.07.15.2 | 2025.06.27

Improvements
- System
  - Update Firmware: optimized firmware validation through caching
Fix
- Network
  - Wireless: fixed WPA3-SAE fast transition configuration
- Services
  - Data to Server: fixed MBus database path bug
  - L2TP: fixed memory leak issue with invalid packets
- System
  - Package Manager: fixed possible config migration issues on the PM installed packages
  - System Status: fixed display of MAC address
  - WebUI: fixed subscribe processes not exiting when UHTTPD is killed

RUTM_R_00.07.15.1 | 2025.06.17

Fix
- Network
  - Realtime Traffic: fixed data collection in rare cases
- Services
  - Event juggler: fixed the execution of user scripts
  - Hotspot: fixed users scripts execution
  - Hotspot: fixed user scripts migration after upgrade with keep settings
  - SMS Utilities: fixed the execution of user scripts
- System
  - Backup: fixed missing root and admin user restoration during backup apply

RUTM_R_00.07.15 | 2025.06.06

New
- Network
  - Mobile: added "iot.t-mobile.com" APN for "T-Mobile" operator to APN database
- System
  - WebUI: added default HTTP redirect to HTTPS
Improvements
- Network
  - DHCP server: included static leases to "Leased IPs" status that are outside of DHCP pool range but are inside interface subnet range
  - Dynamic routes: improved mobile interface handling
  - Dynamic routes: added support for selecting VPN interfaces
  - Firewall: disabled Allow-ICMPv6-Forward rule
  - IGMP Proxy: added VPN interface support
  - Mobile: improved SIM switch behavior when its configuration is changed
  - Mobile: added ability to change measurement units in "Mobile Usage" page
  - Mobile: added ability to export mobile usage data to CSV file
  - Mobile: added more statistical parameters to "Mobile Usage" page
  - Mobile: changed "fast.t-mobile.com" APN PDP type from IPv6 to IPv4v6
  - Mobile: updated LAN port reset behavior during bridge/passthrough setup
  - Multi WAN: updated configuration interface
  - Multi WAN: added manual member configuration
  - Multi WAN: added expanded Multi WAN interface statuses
  - Network: updated network interface statuses to be more detailed and easier to understand
  - Network: improved 802.1p priority configuration fields
  - Wireless: updated wireless client status with new "Obtaining IP" state
  - Wireless: simplified radio transmit power selection
  - Wireless: added status for current radio transmit power
  - iw: updated version to 6.9
  - mac80211: updated version to 6.12.6
  - mt76: updated version to 2025-01-22
- Services
  - AWS IoT Core: updated "AWS provisioning" configuration parameter list
  - BACnet: added support for devices with USB adapters and devices with no rs485 interface
  - Call Utilities: updated "Get status" action "Text message" parameter list
  - Data to Server: added support for receiving and sending data via SMS
  - Data to Server: added support for receiving I/O data
  - Data to Server: added FTP, SMTP, Socket, and Lua script support for data transmission
  - Data to Server: updated "Collection configuration" edit, "Input configuration" edit, "Format string" and "Tag expansion" parameter lists
  - Data to Server: added support for ISO 8601 date format
  - DLMS: added API endpoints to get the current value of a configured group or group value
  - DNP3 Client: added API endpoints to get the current value of a configured request
  - Dynamic DNS: added DNS server field
  - Dynamic DNS: reduced service restarts when mobile is used
  - Email to SMS: improved email handling by deleting emails over 61440 bytes
  - Event juggler: added call action support
  - Event juggler: implemented a retry mechanism for actions in case of failure
  - Event juggler: updated "Send email", "Send SMS", "MQTT", "Script" and "HTTP" action "Text message" parameter list
  - Event juggler: added delete icon on "Remove action" button
  - Event juggler: removed "Startup" event type from event configuration due to duplication
  - Events Reporting: updated "Message text on event" parameter list
  - I/O Juggler: updated "Send SMS", "MQTT" and "Script" action "Text message" parameter list
  - Modbus Client: updated "Modbus TCP Client" and "Modbus Serial Client" configuration "MQTT message" and "Email" action "JSON format" parameter list
  - OPC UA Client: added API endpoints to get the current value of a configured group, group value or server node
  - SMS Forwarding: updated enable option help messages
  - SMS Gateway: updated "Auto reply" "Message text" parameter list
  - SMS Utilities: updated "Reboot", "Send status" action, "Text message" parameter and "SMS rule description" lists
  - Mosquitto: updated version to 2.0.21
  - ovpn-dco: updated version to 0.2.20241216
- System
  - Access Control: added ability to specify WAN port
  - Access Control: improved HTTPS certificate validation
  - API Core: added preflight OPTIONS method support
  - Certificates: changed certificate signing to use RSA-PSS padding scheme
  - Speed Test: added functionality to find any country servers by using search
  - TCP dump: added suggestions for host and port filters
  - Troubleshoot: separated troubleshooting into individual configuration tabs
  - Troubleshoot: improved logging size configuration and log size limits
  - WebUI: reduced size of the navigation menu and some form elements
  - WebUI: updated table selected rows actions design
  - WebUI: added HTTPS certificate expiration warning and renew functionality
  - WebUI: unified styles of first login and renew expired password modals
  - WebUI: updated Japanese translations
  - Linux: updated version to 6.6.87
Fix
- Network
  - 802.1X Client: fixed warning message of different port configurations sometimes appearing when closing modal
  - 802.1X Client: fixed 802.1X (client) page access not being controlled by the "Network > Ports" entry
  - 802.1X Server: fixed 802.1X (server) page access not being controlled by the "Network > Ports" entry
  - DHCP server: fixed DHCPv4 server shutdown when multiple LANs use the same interface and one of them disables DHCPv4
  - Firewall: fixed duplicate VPN zone creation
  - Firewall: fixed HTTP and HTTPS ports migration for DMZ port forwards rules
  - Firewall: removed redundant "Internal zone" field from port forward configuration
  - Mobile: fixed issue where neighbor IP address was not reachable in Bridge/Passthrough modes
  - Mobile: fixed SMS grouping error when old SMS are never deleted
  - Network: fixed incorrect network type shown for LAN with only WiFi interface
  - Network: fixed system crash when using modem data under low memory conditions
  - Static Routes: fixed GRE tunnel name display when its name has special symbols
  - Topology: fixed issue of duplicated WAN interface being displayed under certain configurations
  - VLAN: fixed new port based VLAN creation when untagged ports are provided
  - Wireless: fixed trailing whitespace being ignored in SSID or password
  - Wireless: fixed enterprise client configuration not showing all certificates and keys generated with SCEP
  - Wireless: fixed enterprise client configuration requiring password for unencrypted certificate key
  - Wireless: fixed an error when radio (5GHz or 2GHz) gets duplicated on default interfaces (Wireless SSIDs) or some custom interfaces
- Services
  - Data to Server: fixed "SIM Card" option select list in "Mobile usage" data input
  - DLMS: fixed COSEM attribute filtering
  - DLNA: fixed option list of "Interfaces"
  - DMVPN: fixed displaying NAT rules
  - Dynamic DNS: fixed IPv6 support in bind-nsupdate
  - Dynamic DNS: fixed logs showing IPv6 expansion errors when no IP is found
  - Event juggler: fixed "SIM Card" option select list in "SIM switch" and "Connection" actions
  - Event juggler: fixed Reboot via SMS Log event
  - Event juggler: fixed duplicated names validation
  - Event juggler: fixed an issue affecting GSM event stability
  - Event juggler: fixed inability to select all available pins in the I/O condition configuration
  - Event juggler: fixed HTTP action when secure connection is chosen
  - Event juggler: fixed condition deletion not working in some edge cases
  - Hotspot: fixed SSL certificates permissions
  - IPsec: fixed connection issues with %any as identifier
  - L2TP: fixed authentication credentials validation
  - Modbus Client: fixed label for 'no_bracket' option in requests
  - MQTT Broker: fixed incorrect "Local port" hint
  - RMS: fixed 'Next connection after' timer display
  - RMS: fixed transition from 'Standby' to 'Enabled' mode
  - SMPP: fixed sequence number in DELIVER_SM packets
  - SMS Gateway: fixed connecting to Gmail with TLS certificate validity verification in Email to SMS
  - SMS Utilities: fixed "SIM Card" option select list in "Change mobile settings" rule
  - Stunnel: fixed issue of global settings sometimes not being displayed
  - Stunnel: made "Certificate File" and "Private Key" fields required when server mode is configured
  - Tailscale: fixed tailscale logging out after a reboot when using an authentication key
  - Wireguard: fixed peer allowed IPs select dropdown to show IPv6 options and added the ability to include custom values
  - Wireguard: fixed MTU issues when default route is used
  - Wireguard: fixed tunnel not re-establishing when failover is used
- System
  - Access Control: fixed HTTPS certificates validation to not allow RSA key length less than 1024 bits and ECC key length less than 160 bits
  - API Core: fixed session validation issues
  - Certificates: fixed SCEP certificate enrollment compatibility issues with certain servers
  - System Status: removed bootloader version information if it does not exist
  - WebUI: fixed inconsistent spacing between page elements
  - WebUI: fixed warnings still being displayed after removing uploaded certificates
  - WebUI: fixed issues with SDK API path recognition

RUTM_R_00.07.14.3 | 2025.05.26

Initial firmware release