Security:
- Fix the Security Boa http issue
- Fixed code execution vulnerability
- Fix in french WEB GUI setting Wireless > Professional will show abnormality issue

Please unzip the firmware file, and then verify the checksum.
SHA256: b5dccd5a24645d5bade3ee5ffbb12638fb0c4516ba6954bd9ab33b428afa0067

Bug fixes and enhancements:
- Now supports Feedback > 12 hours Diagnostic xDSL debug log capture feature for non-USB supported models.
- Feedback > WiFi Diagnostic feature change log file name to “WiFi.log” instead of “TCC.log”. xDSL Diagnostic log remains to be “TCC.log”.
- Fixed VPN settings > username/password, if special character “.” used leads to connectivity issue problem.
- Fine tuned Feedback feature.
- Fixed various Web UI related issues.
- Fine tuned OpenVPN Web UI.

Security:
- Enhanced Security for specific Malware/Malicious Script protection.

Please unzip the firmware file first then check the MD5 code.
MD5: f422660eae25222840042a04c15feb5a

DSL:
- VDSL WAN (PTM) QIS manual setting list updated, added Italy ISP Vodafone.
- ADSL WAN (ATM) QIS manual setting list updated, added Lebanon ISP Ogero.

Bug fixes and enhancements:
- Fixed possible invalid Feedback status leads to no logs download link issue(under Feedback sent failure state).
- Fixed Web UI > invalid Android/iOS App icons issue.
- Fine tune Feedback > Diagnostic “No USB disk plug-in” case.
- After Feedback > DSL Line Diagnostic completed, /jffs/ related logs will be cleared to free up space.
- Fine tune Live Update mechanism.
- Fixed failed to work with the OpenVPN profile of Avira issue.
- Fixed pptp client failed to work with ppp-2.4.7 module issue.
- Fixed wrong OpenVPN server state issue.
- OpenVPN server: update default compression to yes.
- Fixed OpenVPN wrong type conversion/ wrong state after client run successfully issue.
- Fixed the problem that PPPoE Username can't use special character '$'.
- Fixed various Web UI related issues.

Security:
- protect_srv: enhanced with lock time backoff. 1) Record each IP address with fail count. 2) Add lock rule for each IP address. 3) Lock all if too many rules at a same time.

Please unzip the firmware file first then check the MD5 code.
MD5: 4736f4113c643f27172c0bff2d1868b3

DSL:
- When ENCAP Mode is selected as "PPPoE LLC" or "PPPoE VC-Mux", now the 802.1Q selection can be selected and displayed.
- Removed DSL Modulation > G.DMT mode auto switch function based on data rate observed.

Bug fixes and enhancements:
- Support new Feedback mechanism.
- PPPD module updated: ppp-2.4.7, fixed possible PPPoE/PPPoA periodic interruption issue.
- Fixed IPTV issue with specific ISP/IPTV service provider.
- Fixed Web UI related issues.
- New input field "ASUS Service No./Case#" added for Feedback form.
- Fixed VoIP service fail issue after Dual WAN fail back occurred.
- Fine tune DHCP leases > expire time display format.
- Dual WAN ping target timeout(3 times), changed to 8.8.8.8 instead.
- Fixed Router app failed to prompt for a new version of firmware for update issue.
- Removed unnecessary debug message from Syslog "==>Set_RadioOn_Proc (ON)”.

Security:
- Fixed command inject in the web-based management interfaceThe security vulnerability.
- Block domain name resolving queries of suspicious servers.
- Fixed CVE-2004-0789 (DNS Response Flooding) vulnerability.
- Fixed malformed DNS packet validation.
- Fixed class/type validation , no more IN/A replies to non-IN/A queries.
- Fixed invalid authoritative replies with fake address.
- Added NotImpl reply to non-IN/A queries.

Please unzip the firmware file first then check the MD5 code.
MD5: a3c73c6908d699b90e0b04dee900f45f

New feature:
- Now supports Feedback > WiFi Diagnostic log capture feature.

DSL:
- Fixed applying wrong DSL setting by wrong attribute issue.
- ADSL WAN (ATM) QIS manual setting list updated.
Add Turkey ISP TTNET, ADSL+IPTV service.
Add Turkey ISP D-Smart Net(Smile ADSL), ADSL+IPTV service.
Add Turkey ISP Doping, ADSL+IPTV service.
Add Turkey ISP Turkcell Superonline, ADSL+IPTV service.

Bug fixes and enhancements:
- Fixed Dual WAN, Primary/ Secondary WAN switching issue.
- Fixed when applying ISP Specific Setting, it failed to take effect issue.
- Fixed ASUS Router app related issue.
- Fixed various UI related issues.
- When Dual WAN is enabld, now at DDNS page could select WAN unit.

Security:
- Fixed WPA2 security vulnerability issue.
- Fixed UI security vulnerability.

Please unzip the firmware file first then check the MD5 code.
MD5: 795cf02ab7f11d00912dd86d9b1259d9

Bug fixes and enhancements:
- Fixed possible UI failed to login issue.
- Fixed LAN > LAN IP settings failed to take effect issue.
- Fine tune web server.
- Fixed upload Settings file via IE11 would fail issue.
- Fine tune FAQ link.
- Fine tune QoS default rule list.
- Fixed various UI related issues.


Please unzip the firmware file first then check the MD5 code.
MD5: 7c8e9f2b7a13c237acf000a41a1f4e54

DSL:
- ADSL WAN (ATM) QIS manual setting list updated,
Add Turkey ISP TurkNet.

Bug fixes and enhancements:
- Adopt UI login enhancement.
- Fixed various UI related issues.
- Fine tune FAQ URL links.
- Added Ethernet WAN mode Link Up/Down info for Syslog.


Please unzip the firmware file first then check the MD5 code.
MD5: c361cc8bbc09ce6919fc0750a2e47110

Security improvements:
- This product not affected by KRACKs Security Vulnerabilities, as do not support Client Mode nor Repeater mode and do not support 802.11r.
- Upgrade dnsmasq from v2.75 to v2.78, includes Security Vulnerabilities patches from Google Security team.
Thanks to Victor Calvo (Aetsu) for raise following security issues,
- Fixed “Reflected Cross Site Scripting” Security Vulnerability issue, now request URI will be checked(Chrome not affected as blocked by XSS_AUDITOR).
- Fixed AiCloud Security Vulnerability issues.
- Fixed the issue that boa does not verify the token in certain case.
- HTTPd server multiple Security Vulnerabilities - token generator, refine token generator algorithm.

DSL:
- ADSL WAN (ATM) QIS manual setting list updated,
Add Kuwait ISP Qualitynet (PPPoE)
Modify Kuwait ISP Qualitynet (PPPoA)

Bug fixes and enhancements:
- Fixed possible Settings file corrupt leads to boot up failure issue.
- Fixed possible fail to login from WAN side network with ASUS DDNS issue.
- Fixed multicast stability issue.
- ASUS Router APP, fine tune the check_passwd_strength.
- Fine tune Feedback > DSL Diagnostic feature.
- For Feedback sent fail case such as SMTP port 25 blocked, now debug log link added for users to download and send manually.
- Now supports off-line Feedback.
- Fixed various UI related issues.


Please unzip the firmware file first then check the MD5 code.
MD5: 9c3cd486ed20c9c7f4f889d630667208

New features:
- Support Internet Detection feature, options available PPP Echo/ Disable(WAN > Internet Connection > Account Settings).
- Now supports WAN Reconnect Scheduler feature. (Administration > System)
- Add IGMP parameter configuration/ Add IGMP Snooping, specifically for Turkey IPTV service.
- Support Dual WAN Failover Guest Network control feature(WAN > Dual WAN > Guest Network Terminate Switch).
- Now supports Access Log feature, display client info(IP, MAC, Hostname, Connection started/ finished time).
- Support DOMAINS.GOOGLE.COM DDNS Service.
- Support URL Filter for Guest Network.
- Support auto-detect Germany ISP Deutsche Telekom: BNG service for IPTV.
- Support allow specified IP address to access device, via SSH, Telnet or UI.

Security improvements:
- Check the referrer field in HTTP GET for getting *.CFG.
- Set Telnet/SSH idle timeout as 20 min by default.
- Prevent Brute Force/Dictionary attacks, now SSH/Telnet/UI would block attempted logins, 5 failed attempts leads to malicious access blocked for 5 minutes(LAN/WAN counter separated)/ with related syslog output.
- Check referrer of some web pages in GET command.
- Remove WLAN key in wps_info() for ensure security.
- Smartsync: Verifies the authenticity of the server's certificate.
- Smartsync: Set iptables rules only accept packages from local IP to smartsync port.
- Update SSH dropbear version to 2016.74/ integrate with Protection Server.
- SSH Authkeys length extended to 1023.
- Samba Security Release: CVE-2017-7494.

DSL:
- For QIS > UK > ISP Sky Broadband, remove username/password fields, proper solution adopted.
- Modify QIS > UK ISP BT - Infinity 2 to BT - Infinity.
- Update YouView IPTV Box settings for UK ISP Talk Talk.
- Support Turkey ISP Turk Telekom - Tivibu IPTV service. (thanks to the support from Tecnics / Emre Kalay)
- ADSL WAN (ATM) QIS manual setting list updated,
Add Kuwait ISP Fasttelco
Modify Russia Балашиха ISP Домолинк (0/35)
Add Russia Балашиха ISP Домолинк(35/33)
Add Spain ISP Ocean
Add Turkey ISP Superonline
Add Nepal NTC
Add Germany ISP Deutsche Telekom (VLAN ID 7)
Add Germany ISP Deutsche Telekom (VLAN ID 7)

Bug fixes and enhancements:
- Fixed UI related issues.
- Fine tune region selection list.
- Reduce UI page loading time.
- Update igmpproxy module / fixed IGMP parameter sometimes cannot be configured via UI issue.
- Fixed multicast related issues.
- Fixed possible web server buffer overflow issue.
- Add text/xml in MIME content-type.
- Fixed ATM default QoS bandwidth value display as NaN issue.
- Fixed NAS devices UPnP failed to work issue.
- Fixed Ethernet WAN connection problem with 802.1Q enabled.
- Fixed possible WiFi Guest Network SSID disappear issue.
- Remove option 42 in DHCP request option in non-default route WAN.
- Fixed kernel: ICV Error.
- Fixed WebHistory filter rule issue/ caused by ACCEPT from Network Services Filter(IP Filter) before Web History rule.
- Fixed setting such as static IP/http/https/both and port change leads to system hang(web server crash).
- Add "Auto select channel including channel 12, 13" checkbox for 2.4GHz auto channel selection.
- Fixed tunnel 6in4 not work in bridge mode issue.
- Update AiCloud to v2.0.2.3/ fixed fail to get wan_ip in dual-wan mode.
- Fixed possible USB Application page hang(stuck with upgrading) issue.
- Fixed USB disks mounted via hub, cannot add download task/ add the USB notify function to the programs when partitions are mounted/unmounted.
- Fixed Samba related issue.
- Update Dropbox API.
- Fixed Android USB tethering function works incorrectly issue, plus fixed issue caused by USB modem of ethX type.
- USB Modem should not be enabled by default.
- Fixed Smartsync > FTP Sync can't sync with the server that supports SSL/TLS.
- Fixed Smartsync > asuswebstorage status is ERROR->INITIAL->Finish->Download when rule is Downloadonly.
- Fixed Smartsync > asuswebstorage, when failed to upload some files, the final status should be Error instead of Finish.


Please unzip the firmware file first then check the MD5 code.
MD5: 479d8aa8f053fbc96079d348499c33b6

New Features
- Now supports Web History feature(Traffic Manager > Web History).
- Support ASUS router app which make it very easy to monitor and manage router status and client devices and more.
- URL Filter now supports HTTPS sites blocking.
- Guest Network with additional Bandwidth Limiter feature.
- AiCloud > Smart Sync supports additional Provider options, Dropbox/ FTP server/ Samba.
- Support System Log > Active Connections feature.
- New IPTV design for ADSL/ Ethernet WAN.
- QIS now supports Germany ISP ADSL profiles. With specific settings for specific ISP, for both Internet/ IPTV services.
- Now supports URL Filter - White List/ Black List setting.
- Now supports built-in release note info, display if new/ beta firmware detected. With additional Get Beta Firmware option.

Security improvements:
- Enhanced the login authentication strength and fixed CSRF related issues.
- Added protection mechanism for GUI login brute-force attack for login username and password.
- Updated SSH Dropbear from ver.0.52 to ver.2016.73.
- Added authentication checking in HTTP POST packets.
- Fixed LPR buffer overflow issue.
- Fixed Samba Badlock CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP).
- Fixed Samba Badlock CVE-2016-2111 (NETLOGON Spoofing Vulnerability).
- Fixed page redirect/ XSS security related issues.
- Remote DHCP information disclosure.

DSL:
- ADSL WAN (ATM) QIS manual setting list updated,
- Add Australia ISP, Dodo (PPPoE).
- Add Australia ISP, Dodo (PPPoA).
- Add Italy ISP, EOLO.
- Add Italy ISP, TIM (PPPoE).
- Modify Italy ISP, TIN -> TIM (PPPoA).
- Add Greece ISP, Otenet, ADSL+IPTV service.
- Add Greece ISP HOL, ADSL+IPTV service.
- Add United Kingdom ISP, Origin Broadband.
- Add United Kingdom ISP, Kcom.
- Add South Africa ISP, Vanilla.
- Add South Africa ISP, Imaginet.
- Add South Africa ISP option, Other ISP.
- Add South Africa ISP, Crystal Web.
- Add Iran ISP, Bistnet.
- Add Iran ISP, TCT.
- Add Iran ISP, Shahrad.
- Add Iran ISP, TCI.
- Add Iran ISP, Hiweb.
- Add Iran ISP, Mci.
- Add Iran ISP, Mokhaberat.
- Add Iran ISP, Tcmnet.
- Add New Zealand ISP, TrustPower.
- Add Germany ISP, Deutsche Telekom, ADSL+IPTV service.
- Add Germany ISP, Vodafone, ADSL+IPTV service.
- Add India ISP, Reliance (PPPoE).
- Add India ISP, Reliance (MER).
- Add Algeria ISP, Jawab.
- Add Poland ISP, Orange.
- Add Uganda ISP, PoolDeep.
- Add Faroe Islands ISP, Foroya Tele.

Bug fixes and Enhancements:
- Support extended firmware version.
- Added deny ports in the miniupnpd configuration file. Avoid upnp misuse the ports added by other applications.
- Restart upnp when the iptables reserved ports were added or deleted.
- Fine tune IPv6 support, address related issues.
- Extend Parental Controls rule limit from 7 to 32.
- Fixed Bandwidth Limiter upload limit can't work on ATM mode/ buffer overflow issue.
- Fixed QIS(Quick Internet Setup) related issues.
- Add UDP port 68 for WAN DHCP mode.
- Added patch for 3G/4G APN Configuration support.
- HW NAT will false learning when pptp/l2tp client enabled. Now disable hw_nat when pptp/l2tp is enabled and vice versa.
- Default set WPS to PBC mode.
- Fixed various UI related issues.
- ASUS member registration link added.
- Fixed Download Master/ Media Server related issues.
- Support "Connection Status" could auto refresh for PPTP.
- Fixed no default route issue in certain case.
- Redirect to error page as IP conflicting in USB modem mode.
- Fixed after enable AiDisk wizard, FTP Server can't use issue.
- Fixed PPTP server cannot be disabled issue.
- Fixed possible Bandwidth Limiter can’t work after system reboot issue.
- Remove debug message of DDNS retry mechanism.
- Fixed the issue that igmpproxy and udpproxy sometimes not executed issue.

MD5: 8a8f2debd31863da0881f8ce4ce545c4

The first version of firmware for DSL-N14U B1