FreshTomato v2018.1

🗓️ Released Saturday, April 14^th, 2018

This was the first stable, public release to be rebranded as FreshTomato and introduced a new versioning scheme for stable public releases.

FreshTomato stable public releases shall henceforth be assigned a two-part “MAJOR.MINOR” numeric identifier that ensures all releases are unique and clearly distinguishable from one another. According to this scheme, each version identifier is composed of two unsigned (positive) integer values, MAJOR and MINOR, which are separated by a full stop (period), and where:

• MAJOR is equivalent to the Gregorian calendar year during which the release occurs, and
• MINOR is a monotonically incrementing integer that returns to the value 1 upon any change to the MAJOR component.

• Connectivity Watchdog: Increase curl timeout from 3 to 5 seconds in ckcurl function to prevent false positives on heavily-loaded 3G connections
• FTP: Fix connection failure from WAN when port is not 21
• GUI:
  • Status ▻ Overview: Invert default Ethernet port order for ASUS RT-AC3200 and NETGEAR R8000
  • Basic ▻ Network: Add possibility to change default IP (198.51.100.1) where DNS queries send to trigger connect-on-demand (commit 6d47b63)
  • Basic ▻ Network: Fix channel scan function for WiFi
  • Advanced ▻ VLAN: Fix problem with passing Tagged/Untagged on same port when using default VLAN
  • Advanced ▻ Wireless: Air Time Fairness support for NETGEAR R7000 and R8000 models
• LED: Preliminary support for 2nd 5Ghz LED on NETGEAR R8000

• Adminer: Update to v4.6.2 (changes)
• Dnsmasq: Update to v2.80test1 (changes)
• Dropbear: Update to v2018.76 (changes)
• MiniDLNA: Update to v1.2.1 (changes)
• MiniUPnPd: Update to v2.0.20180412
  • Change service configuration to enumerate scopes by interface names rather than network IPs/netmasks
• Nettle: Update to v3.4 (changes)
• Nginx: Update to v1.13.12 (changes)
• OpenSSL: Update to v1.0.2o (changes)
• OpenVPN Connect: Update to v2.4.5 (changes)
• PCRE: Update to v8.42 (changes)
• PHP: Update to v7.2.4 (changes)
  • Replace MySQL extension (removed during transition to v7.0.0) with MySQLi (MySQL “improved”)
• SQLite: Update to v3.23.1 (changes)
• Tor: Update to v0.3.2.10 (changes)
• Transmission: Update to v2.93 (changes)
• Vorbis: Update to v1.3.6 (changes)
• e2fsprogs: Update to v1.44.1 (changes)
• ipset: Update to v6.36 (changes)
• libcurl: Update to v7.59.0 (changes)
  • Update CA certificates bundle as of 2018-03-07
• libusb: Update to v1.0.22 (changes)
• nano: Update to v2.9.5 (changes)
• ncurses: Update to v6.1 (changes)
• usb_modeswitch: Update to v2.5.2 (changes)
• xl2tpd: Update to v1.3.11 (changes)

• 📂 drivers/net/
  • New wireless driver for SDK7 with Key Reinstallation Attack (KRACK) vulnerability fix
  • Update kernel modules (commits 72befb9 & fb421ca)
• 📂 router/
  • 📂 cstats/
    • 📄 cstats.h: Fix IP Traffic Monitoring generating excess I/O and reduce console spam (commit 709e23e)
  • 📂 dnscrypt/
    • 📂 contrib/
      • 📄 dnscrypt-update-resolvers.sh.in: Modify DNSCrypt script to process DNSCrypt v2 protocol
  • 📂 others/
    • 📄 entware-install-{ARM,MIPS}.sh: Update Entware installation scripts
  • 📂 rc/
    • 📄 init.c: Enable Airtime Fairness by default on NETGEAR R7000 & R8000 routers
    • 📄 services.c:
      • Connect-on-Demand no longer works as designed due to 1.1.1.1 becoming Cloudflare public DNS server, so a different IP address was chosen for this purpose
      • Fix issues with httpd
      • SIGINT issued too soon against Dnsmasq, add one second sleep before doing so
    • 📄 wan.c:
      • Remove “Bump WAN state file on connect (don't wait for watchdog result)”
      • Fix Dnsmasq process receiving second SIGINT signal; instead of triggering another DNSSEC time check, it was killing process
  • 📂 www/
    • Default theme - original 'usbblue'
    • 📄 basic-network.asp: LCP Echo (Interval|Link fail limit) is used also with PPTP, L2TP and PPP3G so let's make it possible to modify
  • 📄 Makefile:
    • Disable RAID (mdadm binary)
    • Enable mini-gmp, saving 4KB

• BusyBox:
  • Add CONFIG_FEATURE_NETSTAT_PRG to configuration, for netstat -p functionality
  • Change uname
• Clean-up of unused Makefiles and components from the tree
• Kernel: Several patches in SDK6 & SDK7
• MultiWAN: Introduce forgotten kernel updates from previous SDK7 changes
• Tor: Fix build on some devices
• libid3tag: Fix build/link error on Ubuntu and some additional improvements