Yo estaba igual.
He leido el foro y pensaba escribir a Pepephone para preguntar al respecto, porque la lista de cambios es importante:
ASUS DSL-N14U Firmware version v1.1.2.3_438
List of differences over version 1.1.2.2_17
New features :
- Support Internet Detection feature, options available PPP Echo/ Disable(WAN > Internet Connection > Account Settings).
- Now supports WAN Reconnect Scheduler feature. (Administration > System)
- Add IGMP parameter configuration/ Add IGMP Snooping, specifically for Turkey IPTV service.
- Support Dual WAN Failover Guest Network control feature(WAN > Dual WAN > Guest Network Terminate Switch).
- Now supports Access Log feature, display client info(IP, MAC, Hostname, Connection started/ finished time).
- Support DOMAINS.GOOGLE.COM DDNS Service.
- Support URL Filter for Guest Network.
- Support auto-detect Germany ISP Deutsche Telekom: BNG service for IPTV.
- Support allow specified IP address to access device, via SSH, Telnet or UI.
- Now supports Web History feature(Traffic Manager > Web History).
- Support ASUS router app which make it very easy to monitor and manage router status and client devices and more.
- URL Filter now supports HTTPS sites blocking.
- Guest Network with additional Bandwidth Limiter feature.
- AiCloud > Smart Sync supports additional Provider options, Dropbox/ FTP server/ Samba.
- Support System Log > Active Connections feature.
- New IPTV design for ADSL/ Ethernet WAN.
- QIS now supports Germany ISP ADSL profiles. With specific settings for specific ISP, for both Internet/ IPTV services.
- Now supports URL Filter - White List/ Black List setting.
- Now supports built-in release note info, display if new/ beta firmware detected. With additional Get Beta Firmware option.
Security improvements:
- This product not affected by KRACKs Security Vulnerabilities, as do not support Client Mode nor Repeater mode and do not support 802.11r.
- Upgrade dnsmasq from v2.75 to v2.78, includes Security Vulnerabilities patches from Google Security team.
- Fixed “Reflected Cross Site Scripting” Security Vulnerability issue, now request URI will be checked(Chrome not affected as blocked by XSS_AUDITOR).
- Fixed AiCloud Security Vulnerability issues.
- Fixed the issue that boa does not verify the token in certain case.
- HTTPd server multiple Security Vulnerabilities - token generator, refine token generator algorithm.
- Check the referrer field in HTTP GET for getting *.CFG.
- Set Telnet/SSH idle timeout as 20 min by default.
- Prevent Brute Force/Dictionary attacks, now SSH/Telnet/UI would block attempted logins, 5 failed attempts leads to malicious access blocked for 5 minutes(LAN/WAN counter separated)/ with related syslog output.
- Check referrer of some web pages in GET command.
- Remove WLAN key in wps_info() for ensure security.
- Smartsync: Verifies the authenticity of the server's certificate.
- Smartsync: Set iptables rules only accept packages from local IP to smartsync port.
- Update SSH dropbear version to 2016.74/ integrate with Protection Server.
- SSH Authkeys length extended to 1023.
- Samba Security Release: CVE-2017-7494.
- Enhanced the login authentication strength and fixed CSRF related issues.
- Added protection mechanism for GUI login brute-force attack for login username and password.
- Updated SSH Dropbear from ver.0.52 to ver.2016.73.
- Added authentication checking in HTTP POST packets.
- Fixed LPR buffer overflow issue.
- Fixed Samba Badlock CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP).
- Fixed Samba Badlock CVE-2016-2111 (NETLOGON Spoofing Vulnerability).
- Fixed page redirect/ XSS security related issues.
- Remote DHCP information disclosure.
Bug fixes and enhancements:
- Fixed possible Settings file corrupt leads to boot up failure issue.
- Fixed possible fail to login from WAN side network with ASUS DDNS issue.
- Fixed multicast stability issue.
- ASUS Router APP, fine tune the check_passwd_strength.
- Fine tune Feedback > DSL Diagnostic feature.
- For Feedback sent fail case such as SMTP port 25 blocked, now debug log link added for users to download and send manually.
- Now supports off-line Feedback.
- Fixed various UI related issues.
- Fixed UI related issues.
- Fine tune region selection list.
- Reduce UI page loading time.
- Update igmpproxy module / fixed IGMP parameter sometimes cannot be configured via UI issue.
- Fixed multicast related issues.
- Fixed possible web server buffer overflow issue.
- Add text/xml in MIME content-type.
- Fixed ATM default QoS bandwidth value display as NaN issue.
- Fixed NAS devices UPnP failed to work issue.
- Fixed Ethernet WAN connection problem with 802.1Q enabled.
- Fixed possible WiFi Guest Network SSID disappear issue.
- Remove option 42 in DHCP request option in non-default route WAN.
- Fixed kernel: ICV Error.
- Fixed WebHistory filter rule issue/ caused by ACCEPT from Network Services Filter(IP Filter) before Web History rule.
- Fixed setting such as static IP/http/https/both and port change leads to system hang(web server crash).
- Add "Auto select channel including channel 12, 13" checkbox for 2.4GHz auto channel selection.
- Fixed tunnel 6in4 not work in bridge mode issue.
- Update AiCloud to v2.0.2.3/ fixed fail to get wan_ip in dual-wan mode.
- Fixed possible USB Application page hang(stuck with upgrading) issue.
- Fixed USB disks mounted via hub, cannot add download task/ add the USB notify function to the programs when partitions are mounted/unmounted.
- Fixed Samba related issue.
- Support extended firmware version.
- Added deny ports in the miniupnpd configuration file. Avoid upnp misuse the ports added by other applications.
- Restart upnp when the iptables reserved ports were added or deleted.
- Fine tune IPv6 support, address related issues.
- Extend Parental Controls rule limit from 7 to 32.
- Fixed Bandwidth Limiter upload limit can't work on ATM mode/ buffer overflow issue.
- Fixed QIS(Quick Internet Setup) related issues.
- Add UDP port 68 for WAN DHCP mode.
MD5: 547022ec42274b0c294e0719a7082eb1
2018/01/24
Pero luego lo he pensado mejor, y viendo que la tónica general de operadores y fabricantes es pasar bastante del tema de actualizaciones, he preferido hacer un reseteo y meterle el último firmware disponible, que tener que rogar y esperar a que Pepephone quiera hacerlo.
El enlace de CristianPD a la página de Asus detalla el procedimiento. Es muy fácil y en pocos minutos tienes el router actualizado, y listo para actualizaciones futuras ( si salieran).
Saludos...
