Tomato ARM 139 - @kille72

Forked off from Tomato-ARM by Shibby, builds compiled by @kille72
PL: https://openlinksys.info/forum/viewthread.php?thread_id=20829
EN: https://www.linksysinfo.org/index.php?threads/fork-tomato-by-shibby-compiled-by-kille72.73397
Source code: https://bitbucket.org/kille72/tomato-arm-kille72
Downloads: https://mega.nz/#F!bAcVXCSY!DgPc0zfhunujKblc1qsQ0w

*Disclaimer: I am not responsible for any bricked routers nor do I encourage other people to flash alternative firmwares on their routers. Use at your own risk!

139
- AdBlock: Autoupdate will be randomly launch between 2:00-2.59 AM every day (to reduce server load at the same time)
- kernel-arm: Disable router anycast address for /127 and /128 prefixes - https://goo.gl/BvNfzq
- dnsmasq: reverting rfc2131.c to previous version - https://goo.gl/N8xNUS
- nano: Updated to 2.8.1
- libcurl: Updated to 7.54.0
- tinc: Add daemon poll option to check if the daemon is running, similar to OpenVPN - https://goo.gl/YHfAaz
- fix "Enable DSCP Fix", and make it MultiWan aware - https://goo.gl/7oQQh9
- Cleaned/Modified UI files according to the Web Consortium W3C standard 1/2
- Added extended 4G signal info to log, corrected watchdog script, fixed wan-up problems on 4G modems, improved vpnrouting script logic, other small changes
- Possibility to select LTE band and roaming in 4G/LTE connection
- tomatoanon: auto update feature changed to check for new versions by kille72
- tor: updated to 0.3.0.6
- httpd: Updated gencert.sh script - https://goo.gl/uA769V
- router/Makefile: Following AsusWRT on OpenSSL compilation https://goo.gl/ntqfq1
- OpenSSL: clean sources version 1.0.2k (No more hacks)
- OpenSSL: Added -startdate & -enddate arguments in req command - https://goo.gl/YZtDS1
- mssl: Copied AsusWRT code, has some more allowedCiphers defined https://goo.gl/LdbMpz
- mssl: disable all 3DES ciphers - https://goo.gl/S45mWR
- Updated basic-network.asp so with LTE modem using qmi_wwan module one can only choose 'Auto' or '4G Only' network type
- Changed on openvpn client configuration page 'tls-remote' option to 'remote-cert-tls', because 'tls-remote' name is DEPRECATED in newest openvpn 2.4.x versions
- Fixed Save button on basic-static.asp page
- Cosmetics in tools-shell.asp script (line break in results)
- UI cosmetics

138.14
- OpenVPN: updated to 2.4.1
- OpenVPN: upgrade bundled LZ4 library to 1.7.5
- /rom/etc/trust-anchors.conf: Added new digest ID
- stop_transmission.sh: Added additional logging and modified SIGTERM/SIGKILL logic
- xl2tpd: Re-apply Tomato-specific hacks (fixed problem with L2TP in v138.13)
- tinc: updated to 1.1pre14
- sqlite: Updated to 3.18.0
- nano: Updated to 2.8.0
- Patched kernel against CVE-2016-10229
- nginx: updated to 1.10.3
- AdBlock: Autoupdate will be launch on 2:00AM every day (changed value due to slow downloads at 1.00AM)
- about.asp: changed link to my forum thread https://openlinksys.info/forum/viewthread.php?thread_id=20829
- TomatoAnon: changed Tomato MOD information to "Kille72"
- GUI: Added information: "by Kille72 - forked off from Tomato-ARM by Shibby"
- Cosmetics

138.13
- security update for samba, CVE-2012-0870
- security update for samba, CVE-2015-5252
- usb_modeswitch: updated usb-modeswitch-data package to 2017-02-05
- sqlite: Updated to 3.17.0
- zlib: Updated to 1.2.11
- libjson-c: Updated to 0.12.1
- libiconv: Updated to 1.15
- ipset: Updated to 6.31
- libcurl: Updated to 7.53.0
- Add -N flag to httpd (always send no-cache)
- nano: Updated to 2.7.5
- e2fsprogs: Updated to 1.43.4
- libcurl: Updated to 7.53.1
- tor: Updated to 0.2.9.10
- Tor: make fw GeoIP friendly This make link from /usr/share/tor to /tmp/tor
- fix full OpenSSL build
- ipset: Updated to 6.32
- xl2tpd: Updated to 1.3.9
- stealthMode and Optware no longer to be installed
- libsodium: Updated to 1.0.12
- Collection of patches from M_ars to hopefully correct IPTraffic/Bandwidth monitor
- Ensure both UDP and TCP DNS requests are intercepted for all LAN interfaces
- Don't send AT+CGDCONT if APN field is empty
- kernel: (backport) fix reuse-after-free in DCCP
- R1D: Turn off USB 3.0 option
- Updated mymotd script
- USB: Cleanup and tweaks
- dnsmasq: Many changes ported from upstream
- Cosmetics
Info for developers:
- router/Makefile: Added autoreconf to libnfsidmap
- router/Makefile: Added autoreconf to dnscrypt and sqlite
- ~/router/Makefile: add PARALLEL_BUILD directive to OpenSSL and xl2tpd
- router/Makefile: fix udpxy rebuild / install
- router/Makefike: remove --enable-all for nano
- libcurl: Remove /docs/* directories and related stuff out of compiling process to resolve compilation issues
- rc: remove deprecated Tor options This will make tor config more flexible
- fix build on ubuntu
- Workaround to fix VPN build

138.12
- OpenSSL: Updated to 1.0.2k
- kernel-arm: Fix Broadcom nvram_commit() function (ported from DD-WRT) (Broadcom bug)
- tor: updated to 0.2.9.9
- dnscrypt: updated to 1.9.4
- about.asp: Cosmetics
- pcre: updated to 8.40
- usb_modeswitch: updated to 2.50, and data package to 2017-01-20
- router/Makefile: Tor - disable unit-tests
- AdBlock: improvements (problem with downloading blacklists after reboot)

138.11
- sqlite: updated to 3.16.2
- dnscrypt: updated to 1.9.1
- nano: updated to 2.7.4
- tor: updated to 0.2.9.8
- Fix some display issues in wireless rates
- libcurl: updated CA certificate bundle as of 2017-01-18
- Fix for "Dead loop on virtual device" message
- Fix lack of BWM stats for WAN when using PPPoE
- Add job control and $RANDOM to Busybox shell
- Samba Patch - Denial of service - CPU loop and memory allocation

138.10
- root's authorized_keys should be perm 0600 (u=rw)
- Add generation/use of ECDSA keys for SSH/Dropbear
- Fixup for 25acdf: restore per-VIF adjustment
- OpenVPN: default port for server 2 changed to 1195, so both servers on default settings can be started at the same time
- OpenVPN: updated to 2.4.0
- Confirm dhcpv6 IP/prefix address has actually changed before restarting dnsmasq/httpd.
- Remove hard coded rapid-commit option. Rapid-commit reduces the messages required for dhcpv6 leases from 4 to 2.
- Fix several ARM nvram utility bugs, nvram save/nvram restore/nvram usage syntax
- sqlite: updated to 3.15.2
- libcurl: updated to 7.52.1
- gmp: updated to 6.1.2
- dnscrypt: updated to 1.8.1
- nano: updated to 2.7.2
- tor: updated to 0.2.8.12

138.9
- OpenVPN: updated to 2.3.14
- tor: updated to 0.2.8.11
- QoS: Fix inbound QoS problem (transmission control)
- Make browser caching much longer
- Heavily increase caching of static assets like CSS, SVG, GIF, PNG, JPG, etc...
- Simplify handling + enable caching for favicon.ico
- nginx: updated to 1.10.2

138.8
- tor: updated to 0.2.8.10
- sqlite: updated to 3.15.1
- nettle: updated to 3.3
- libcurl: updated CA certificate bundle as of 2016-11-02
- Fixed invalid redirect after uploading new "Captive Portal" HTML page
- Add support for user-defined interfaces for Samba

138.7
- OpenVPN: updated to 2.3.13
- OpenVPN: Change the "default" sever Encryption cipher from BF-CBC to more secure AES-128-CBC
- busybox: update to 1.25.1
- revert "fix" in busybox (CONFIG_ASH_EXPAND_PRMT=y)
- Advanced-wireless: Transmit Power changed to 0 (hardware default)
- OUI Lookup changed to macvendors.com
- nano: updated to 2.7.1
- ipset: updated to 6.30
- libcurl: updated to 7.51.0

138.6
- nginx: remove duplicated line in nginx.c
- sqlite: updated to 3.15.0
- libnfsidmap: updated to 0.26
- dropbear: disable MD5 support, for security reasons
- kernel-arm: Patched against CVE-2016-5195 (Dirty Cow)
- tor: updated to 0.2.8.9

138.5
- ~/router/rc/mysql.c: Fix typo
- ~/router/nfs-utils/nfs.rc: Fix typo
- udev: Deleted test directory (There are symlinks that result in a recursion loop)
- udev: Removing test stuff and udevstart code and references
- nettle: Increase optimization level to -O2, to speed up crypto for dnssec validation
- igmpproxy: Reverted to previous version. IGMPv3 implementation seems to break existing IGMPv2 clients
- pcre: updated to 8.39
- libcurl: Add CA bundle support
- libcurl: updated CA certificate bundle as of 2016-09-14

138.4
- tor: updated to 0.2.8.8
- OpenSSL: updated to 1.0.2j
- libcurl: updated to 7.50.3
- MiniDLNA: updated to 1.1.6
- sqlite: updated to 3.14.1
- libsodium: updated to 1.0.11
- gmp: updated to 6.1.1
- DNScrypt: updated to 1.7.0
- usb_modeswitch: updated to 20160803 - http://www.draisberghof.de/usb_modeswitch/ChangeLogData

138.3
- Changes in the Busybox configuration to get the Midnight Commander work properly - (CONFIG_ASH_EXPAND_PRMT=y)

138.2
- TOR: updated to 0.2.8.7

138.1
- Fixed VLAN
- OpenVPN: updated to 2.3.12