UniFi Security Gateway Firmware Release Notes: 4.3.49, 4.3.60, 4.4.12, 4.4.18

by davemackey · January 26, 2018

From 4.4.12 to 4.4.18

Official release notes are here.
Fixed crash in “mcad” when there were DHCP leases with hardware addresses longer than an actual MAC address.
Included more packages with debug symbols available to help diagnose crashes from submitted core files.
Fixed crash in ubnt-util.
Fixed crash in “redirector”.
Removed GeoIP back end because of variety of problems, will be reintroduced once these issues are fixed.
Fixed DHCPv6 client problem causing renewal failures in some circumstances.
Made DDNS back end updates in preparation for expanding DDNS support in controller.
L2TP VPN permitted encryption algorithms tightened to remove weak ciphers.
Made additions to UnIFi reporting back end for IPv6.
USG-XG-8 Specific
- Made several display-related fixes and improvements.
- Made improvements to fan control to reduce noise reduction when fans are operating at low speeds.
- Made additions to Bluetooth backend.

Official release notes are here.
Implemented route metric changing on load-balance status changes.
- Fixes WAN failover issues with L3 adopted USGs and improves multi-WAN failover functionality generally.
Fixed multi-WAN regressions in 4.3.46 to 4.3.49 picked up from EdgeRouter 1.9.7.
Implemented new local web UI on USG.
- Fixes a variety of long-standing bugs with old UI and adds ability to configure LAN IP and DHCP server.
Updated ISC DHCP version.
- May fix problems in some edge cases with multiple DHCP WANs and recovery after ethernet link loss.
Added back end for custom host-uniq for PPPoE.
Implemented fixes for some uses of multiple routing tables (only impacts some config.gateway.json VPN configurations).

Official release notes are here.
Updated additional load-balance components from latest EdgeRouter which fixed part of multi-WAN regressions in 4.3.46-4.3.48.
Fixed source NAT over-matching from port-foreward hairpin-nat.
- Previously all traffic sourced from the LAN subnet leaving the LAN interface would be translated, now narrowed to match only port forward hairpin traffic.
Send PADT on PPPoE disconnect which fixes an edge case where PPPoE fails to reconnect when an ISP is using a buggy PPPoE relay that doesn’t detect loss of PPP session.
Added contiguous option to back end for firewall rule schedules.
Removed unnecessary character restrictions on site to site IPsec pre-shared keys.
Fixed “dpi.dpi_pktinfo_send(): failure to send UGW wevent” log spam.