New in v 1.50

ACME

• Minor improvements to ACME - handling some extra order status responses

BGP

• Additional debug for ignored updates

CQM

• Added more stats (total bytes/packet/drops) to CQM XML

Crypto

• PKCS#8 formats now fully accepted and served for RSA and DSA keys

Diagnostics

• Fix TCP download test (was always saying 0 bytes loaded)

DNS

• Changed DNS logic so not simply fallback="true" but fallback-table defined. This means multiple table DNS will default not to fall back now.

General

• Slight performance improvements

IPsec

• Fix duplicate connection problem after roadwarrior client switches from wifi to 3G
• Fix Roadwarrior problems - IPv4 NAT not working and IPv6 routing failing on Apple clients

IPv6

• Changed ICMPv6 (ND/NA) source address in some cases to match scope

L2TP

• Allow L2TP matched incoming sessions to set payload-table
• Added colours to tunnel and session status

pcap

• Improved pcap "self exclude" to only exclude the actual TCP session traffic of the dump, not all traffic to/from the IP of the browser as before

PPPoE

• Minor change to PPPoE timeout logic - could be disrupted by frequent profile changes

RADIUS

• Platform RADIUS server ERX parameters now tagged if part of tagged response

Routing

• Improve some logic where table 0 has no routes and totally mapped via rule-sets (e.g s/w upgrades, etc)

Syslog

• Fix possible syslog buffer overrun

Telnet

• Option to configure custom telnet prompt

TLS

• Fix lockup at end of stream on TLS connections

VoIP

• Separate carrier controls for P-Asserted-Identity, Remote-Party-Id, and Privacy on VoIP carriers. Change of defaults to send PAID and Privacy not RPID
• Added ACR (Anonymous Call reject) feature on telephone config
• Included User-Name in RADIUS auth for VoIP (from From header before @) if not otherwise set (based on config user/carrier)

VRRP

• VRRP low-priority mode (e.g. for profile off) caused flapping

Web control pages

• User setting to hide "save" button in config edit (i.e. has to do "test" first).
• Added Content-Language to avoid some browsers offering to translate control pages
• CSS update
• Adjust initial timeout to allow for slow TLS handshake