DSL-N12U D1

Security:
- Fix the Security Boa http issue
- Fixed code execution vulnerability
- Fix in french WEB GUI setting Wireless > Professional will show abnormality issue

Please unzip the firmware file, and then verify the checksum.
SHA256: 382249bc79e5e915b49fd7a6f7942b91d32ca40be5883122245684ef32354d1b

Bug fixes and enhancements:
- Now supports Feedback > 12 hours Diagnostic xDSL debug log capture feature for non-USB supported models.
- Feedback > WiFi Diagnostic feature change log file name to “WiFi.log” instead of “TCC.log”. xDSL Diagnostic log remains to be “TCC.log”.
- Fixed VPN settings > username/password, if special character “.” used leads to connectivity issue problem.
- Fine tuned Feedback feature.
- Fixed various Web UI related issues.
- Fine tuned OpenVPN Web UI.

Security:
- Enhanced Security for specific Malware/Malicious Script protection.

Please unzip the firmware file first then check the MD5 code.
MD5: 25f3fafae183dced4b203226661f41ba

DSL:
- VDSL WAN (PTM) QIS manual setting list updated, added Italy ISP Vodafone.
- ADSL WAN (ATM) QIS manual setting list updated, added Lebanon ISP Ogero.

Bug fixes and enhancements:
- Fixed possible invalid Feedback status leads to no logs download link issue(under Feedback sent failure state).
- Fixed Web UI > invalid Android/iOS App icons issue.
- Fine tune Feedback > Diagnostic “No USB disk plug-in” case.
- After Feedback > DSL Line Diagnostic completed, /jffs/ related logs will be cleared to free up space.
- Fine tune Live Update mechanism.
- Fixed failed to work with the OpenVPN profile of Avira issue.
- Fixed pptp client failed to work with ppp-2.4.7 module issue.
- Fixed wrong OpenVPN server state issue.
- OpenVPN server: update default compression to yes.
- Fixed OpenVPN wrong type conversion/ wrong state after client run successfully issue.
- Fixed the problem that PPPoE Username can't use special character '$'.
- Fixed various Web UI related issues.

Security:
- protect_srv: enhanced with lock time backoff. 1) Record each IP address with fail count. 2) Add lock rule for each IP address. 3) Lock all if too many rules at a same time.

Please unzip the firmware file first then check the MD5 code.
MD5: 841f5e7828d79fa8458db4813736a83d

DSL:
- When ENCAP Mode is selected as "PPPoE LLC" or "PPPoE VC-Mux", now the 802.1Q selection can be selected and displayed.
- Removed DSL Modulation > G.DMT mode auto switch function based on data rate observed.

Bug fixes and enhancements:
- Support new Feedback mechanism.
- PPPD module updated: ppp-2.4.7, fixed possible PPPoE/PPPoA periodic interruption issue.
- Fixed IPTV issue with specific ISP/IPTV service provider.
- Fixed Web UI related issues.
- New input field "ASUS Service No./Case#" added for Feedback form.
- Fixed VoIP service fail issue after Dual WAN fail back occurred.
- Fine tune DHCP leases > expire time display format.
- Dual WAN ping target timeout(3 times), changed to 8.8.8.8 instead.
- Fixed Router app failed to prompt for a new version of firmware for update issue.
- Removed unnecessary debug message from Syslog "==>Set_RadioOn_Proc (ON)”.

Security:
- Fixed command inject in the web-based management interfaceThe security vulnerability.
- Block domain name resolving queries of suspicious servers.
- Fixed CVE-2004-0789 (DNS Response Flooding) vulnerability.
- Fixed malformed DNS packet validation.
- Fixed class/type validation , no more IN/A replies to non-IN/A queries.
- Fixed invalid authoritative replies with fake address.
- Added NotImpl reply to non-IN/A queries.

Please unzip the firmware file first then check the MD5 code.
MD5: 3ae8625686b6ae8b856c3e9cd87fd7d2

New feature:
- Now supports Feedback > WiFi Diagnostic log capture feature.

DSL:
- Fixed applying wrong DSL setting by wrong attribute issue.
- ADSL WAN (ATM) QIS manual setting list updated.
Add Turkey ISP TTNET, ADSL+IPTV service.
Add Turkey ISP D-Smart Net(Smile ADSL), ADSL+IPTV service.
Add Turkey ISP Doping, ADSL+IPTV service.
Add Turkey ISP Turkcell Superonline, ADSL+IPTV service.

Bug fixes and enhancements:
- Fixed Dual WAN, Primary/ Secondary WAN switching issue.
- Fixed when applying ISP Specific Setting, it failed to take effect issue.
- Fixed ASUS Router app related issue.
- Fixed various UI related issues.
- When Dual WAN is enabld, now at DDNS page could select WAN unit.

Security:
- Fixed WPA2 security vulnerability issue.
- Fixed UI security vulnerability.

Please unzip the firmware file first then check the MD5 code.
MD5: fd9f1a08cbdc7a412e6c421aafaffc8d

Bug fixes and enhancements:
- Fixed possible UI failed to login issue.
- Fixed LAN > LAN IP settings failed to take effect issue.
- Fine tune web server.
- Fixed upload Settings file via IE11 would fail issue.
- Fine tune FAQ link.
- Fine tune QoS default rule list.
- Fixed various UI related issues.


Please unzip the firmware file first then check the MD5 code.
MD5: 2e723ee2377bf07160ab302f3b4b2d9e

DSL:
- ADSL WAN (ATM) QIS manual setting list updated,
Add Turkey ISP TurkNet.

Bug fixes and enhancements:
- Adopt UI login enhancement.
- Fixed various UI related issues.
- Fine tune FAQ URL links.
- Added Ethernet WAN mode Link Up/Down info for Syslog.


Please unzip the firmware file first then check the MD5 code.
MD5: 3d8ff757cd407b92aed7c2f21bc4ce08

Security improvements:
- This product not affected by KRACKs Security Vulnerabilities, as do not support Client Mode nor Repeater mode and do not support 802.11r.
- Upgrade dnsmasq from v2.75 to v2.78, includes Security Vulnerabilities patches from Google Security team.
Thanks to Victor Calvo (Aetsu) for raise following security issues,
- Fixed “Reflected Cross Site Scripting” Security Vulnerability issue, now request URI will be checked(Chrome not affected as blocked by XSS_AUDITOR).
- Fixed AiCloud Security Vulnerability issues.
- Fixed the issue that boa does not verify the token in certain case.
- HTTPd server multiple Security Vulnerabilities - token generator, refine token generator algorithm.

DSL:
- ADSL WAN (ATM) QIS manual setting list updated,
Add Kuwait ISP Qualitynet (PPPoE)
Modify Kuwait ISP Qualitynet (PPPoA)

Bug fixes and enhancements:
- Fixed possible Settings file corrupt leads to boot up failure issue.
- Fixed possible fail to login from WAN side network with ASUS DDNS issue.
- Fixed multicast stability issue.
- ASUS Router APP, fine tune the check_passwd_strength.
- Fine tune Feedback > DSL Diagnostic feature.
- For Feedback sent fail case such as SMTP port 25 blocked, now debug log link added for users to download and send manually.
- Now supports off-line Feedback.
- Fixed various UI related issues.

MD5: 98cfddc2ad57c87046af0b45020b89f6

New features:
- Support Internet Detection feature, options available PPP Echo/ Disable(WAN > Internet Connection > Account Settings).
- Now supports WAN Reconnect Scheduler feature. (Administration > System)
- Add IGMP parameter configuration/ Add IGMP Snooping, specifically for Turkey IPTV service.
- Support Dual WAN Failover Guest Network control feature(WAN > Dual WAN > Guest Network Terminate Switch).
- Now supports Access Log feature, display client info(IP, MAC, Hostname, Connection started/ finished time).
- Support DOMAINS.GOOGLE.COM DDNS Service.
- Support URL Filter for Guest Network.
- Support auto-detect Germany ISP Deutsche Telekom: BNG service for IPTV.
- Support allow specified IP address to access device, via SSH, Telnet or UI.

Security improvements:
- Check the referrer field in HTTP GET for getting *.CFG.
- Set Telnet/SSH idle timeout as 20 min by default.
- Prevent Brute Force/Dictionary attacks, now SSH/Telnet/UI would block attempted logins, 5 failed attempts leads to malicious access blocked for 5 minutes(LAN/WAN counter separated)/ with related syslog output.
- Check referrer of some web pages in GET command.
- Remove WLAN key in wps_info() for ensure security.
- Smartsync: Verifies the authenticity of the server's certificate.
- Smartsync: Set iptables rules only accept packages from local IP to smartsync port.
- Update SSH dropbear version to 2016.74/ integrate with Protection Server.
- SSH Authkeys length extended to 1023.
- Samba Security Release: CVE-2017-7494.

DSL:
- For QIS > UK > ISP Sky Broadband, remove username/password fields, proper solution adopted.
- Modify QIS > UK ISP BT - Infinity 2 to BT - Infinity.
- Update YouView IPTV Box settings for UK ISP Talk Talk.
- Support Turkey ISP Turk Telekom - Tivibu IPTV service. (thanks to the support from Tecnics / Emre Kalay)
- ADSL WAN (ATM) QIS manual setting list updated,
Add Kuwait ISP Fasttelco
Modify Russia Балашиха ISP Домолинк (0/35)
Add Russia Балашиха ISP Домолинк(35/33)
Add Spain ISP Ocean
Add Turkey ISP Superonline
Add Nepal NTC
Add Germany ISP Deutsche Telekom (VLAN ID 7)

Bug fixes and enhancements:
- Fixed UI related issues.
- Fine tune region selection list.
- Reduce UI page loading time.
- Update igmpproxy module / fixed IGMP parameter sometimes cannot be configured via UI issue.
- Fixed multicast related issues.
- Fixed possible web server buffer overflow issue.
- Add text/xml in MIME content-type.
- Fixed ATM default QoS bandwidth value display as NaN issue.
- Fixed NAS devices UPnP failed to work issue.
- Fixed Ethernet WAN connection problem with 802.1Q enabled.
- Fixed possible WiFi Guest Network SSID disappear issue.
- Remove option 42 in DHCP request option in non-default route WAN.
- Fixed kernel: ICV Error.
- Fixed WebHistory filter rule issue/ caused by ACCEPT from Network Services Filter(IP Filter) before Web History rule.
- Fixed setting such as static IP/http/https/both and port change leads to system hang(web server crash).
- Add "Auto select channel including channel 12, 13" checkbox for 2.4GHz auto channel selection.
- Fixed tunnel 6in4 not work in bridge mode issue.
- Update AiCloud to v2.0.2.3/ fixed fail to get wan_ip in dual-wan mode.
- Fixed possible USB Application page hang(stuck with upgrading) issue.
- Fixed USB disks mounted via hub, cannot add download task/ add the USB notify function to the programs when partitions are mounted/unmounted.
- Fixed Samba related issue.
- Update Dropbox API.
- Fixed Android USB tethering function works incorrectly issue, plus fixed issue caused by USB modem of ethX type.
- USB Modem should not be enabled by default.
- Fixed Smartsync > FTP Sync can't sync with the server that supports SSL/TLS.
- Fixed Smartsync > asuswebstorage status is ERROR->INITIAL->Finish->Download when rule is Downloadonly.
- Fixed Smartsync > asuswebstorage, when failed to upload some files, the final status should be Error instead of Finish.


Please unzip the firmware file first then check the MD5 code.
MD5: dfd63abfb610cc7bbd1e4a7e7fed5880

New features:
- Now supports Web History feature(Traffic Manager > Web History).
- Support ASUS router app which make it very easy to monitor and manage router status and client devices and more.
- URL Filter now supports HTTPS sites blocking.
- Guest Network with additional Bandwidth Limiter feature.
- AiCloud > Smart Sync supports additional Provider options, Dropbox/ FTP server/ Samba.
- Support System Log > Active Connections feature.
- New IPTV design for ADSL/ Ethernet WAN.
- QIS now supports Germany ISP ADSL profiles. With specific settings for specific ISP, for both Internet/ IPTV services.
- Now supports URL Filter - White List/ Black List setting.
- Now supports built-in release note info, display if new/ beta firmware detected. With additional Get Beta Firmware option.

Security improvements:
- Enhanced the login authentication strength and fixed CSRF related issues.
- Added protection mechanism for GUI login brute-force attack for login username and password.
- Updated SSH Dropbear from ver.0.52 to ver.2016.73.
- Added authentication checking in HTTP POST packets.
- Fixed LPR buffer overflow issue.
- Fixed Samba Badlock CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP).
- Fixed Samba Badlock CVE-2016-2111 (NETLOGON Spoofing Vulnerability).
- Fixed page redirect/ XSS security related issues.
- Remote DHCP information disclosure.

DSL:
- ADSL WAN (ATM) QIS manual setting list updated,
- Add Australia ISP, Dodo (PPPoE).
- Add Australia ISP, Dodo (PPPoA).
- Add Italy ISP, EOLO.
- Add Italy ISP, TIM (PPPoE).
- Modify Italy ISP, TIN -> TIM (PPPoA).
- Add Greece ISP, Otenet, ADSL+IPTV service.
- Add Greece ISP HOL, ADSL+IPTV service.
- Add United Kingdom ISP, Origin Broadband.
- Add United Kingdom ISP, Kcom.
- Add South Africa ISP, Vanilla.
- Add South Africa ISP, Imaginet.
- Add South Africa ISP option, Other ISP.
- Add South Africa ISP, Crystal Web.
- Add Iran ISP, Bistnet.
- Add Iran ISP, TCT.
- Add Iran ISP, Shahrad.
- Add Iran ISP, TCI.
- Add Iran ISP, Hiweb.
- Add Iran ISP, Mci.
- Add Iran ISP, Mokhaberat.
- Add Iran ISP, Tcmnet.
- Add New Zealand ISP, TrustPower.
- Add Germany ISP, Deutsche Telekom, ADSL+IPTV service.
- Add Germany ISP, Vodafone, ADSL+IPTV service.
- Add India ISP, Reliance (PPPoE).
- Add India ISP, Reliance (MER).
- Add Algeria ISP, Jawab.
- Add Poland ISP, Orange.
- Add Uganda ISP, PoolDeep.
- Add Faroe Islands ISP, Foroya Tele.

Bug fixes and Enhancements:
- Support extended firmware version.
- Added deny ports in the miniupnpd configuration file. Avoid upnp misuse the ports added by other applications.
- Restart upnp when the iptables reserved ports were added or deleted.
- Fine tune IPv6 support, address related issues.
- Extend Parental Controls rule limit from 7 to 32.
- Fixed Bandwidth Limiter upload limit can't work on ATM mode/ buffer overflow issue.
- Fixed QIS(Quick Internet Setup) related issues.
- Add UDP port 68 for WAN DHCP mode.
- Added patch for 3G/4G APN Configuration support.
- HW NAT will false learning when pptp/l2tp client enabled. Now disable hw_nat when pptp/l2tp is enabled and vice versa.
- Default set WPS to PBC mode.
- Fixed various UI related issues.
- ASUS member registration link added.
- Fixed Download Master/ Media Server related issues.
- Support "Connection Status" could auto refresh for PPTP.
- Fixed no default route issue in certain case.
- Redirect to error page as IP conflicting in USB modem mode.
- Fixed after enable AiDisk wizard, FTP Server can't use issue.
- Fixed PPTP server cannot be disabled issue.
- Fixed possible Bandwidth Limiter can’t work after system reboot issue.
- Remove debug message of DDNS retry mechanism.
- Fixed the issue that igmpproxy and udpproxy sometimes not executed issue

MD5: f694a6d7b32c193d403d3fc608482cc4

DSL-N12U D1 First firmware 1.1.1.3 release