cdbmoa
@uu.net
| BEFSX41 FW 1.50.9 Mar 17, 04
I haven't tried it yet but it looks like they have been busy.
from
»www.linksys.com/download/vertxt/···_ver.txt
Linksys- A Division of Cisco System, Inc.
Firmware Date : March 17,2004
Current Firmware : Version 1.50.9
Product Part No. : BEFSX41
Ver #. Date Description
--------------------------------------------------------------------------------
1.50.9 Mar 17, 04 1. Fixed NetBIOS broadcast not working under IKE tunnel
2. Fixed PPTP will not pass through WAN to LAN, if PPTP
server is behind the router
3. Added Firmware downgrade version check
4. Fixed VPN can not establish between two sx41,
1(fixed IP with remote security gateway set
to DDNS) and 2(pppoe with remote security gateway
set to any)
5. Added SMTP function for log in e-mail alert
6. Added new Internet type selection in L2TP
7. Added Enable/Disable Internal NAT redirection
to block internel LAN from accessing services
behind the router
8. Fixed multi-pptp passthrough support
9. Revised echo timer to detect the Internet
connection status
10. Fixed IPsec fragmented packet can not
pass from wan to lan
11. Modified Viewlog to show proper title
12. Fixed NTP time
13. Fixed Specify a MAC Address behind the DMZ port
14. Fixed Firewall showing incorrect log
15. Fixed VPN tunnel will not disconnect automatically,
when there is no traffic between two group
16. Fixed TZO client not updating when IP changed
17. Fixed When try to establish a VPN tunnel,
the router may reboot
18. Fixed When NTP time is the same as Restrict
Access time, it fails
19. Fixed Restrict Access Deny whether should
let Website Blocking un-writable
20. Added user defined NTP server
21. Fixed MSN 6.1 to 6.1 will not work using
netmeeting and voice
22. Fixed PADT attack will reboot the router
23. Fixed IPSec fragmentation will cause the
router to reboot
24. Fixed IPSec passthrough disabled option
that allowed ESP packets to go through
25. Modified the product name in the User interface
26. Added security feature to prevent users entering
invalid input in URL string instead of UI input
27. Fixed MAC clone disable function
28. Added Diagnostic screen to do ping test
29. Modified to new web User interface style
30. Fixed Filter Multicast option to stop
broadcasting when "leave igmp" packet is sent
31. Fixed restrict access will not allow or deny
at a specific time or day
32. Fixed Enter policy does not save with a name
with two words, it truncates after the space
33. Fixed Allow option for restrict user fails
for any settings
34. Fixed Block services does not block services
35. Fixed Blocking key word or URL does not work
36. Fixed problem changing MTU
37. Fixed adding new “Blocked Services”
38. Fixed DMZ specify by MAC behind DMZ port
can’t be saved
39. Fixed When LAN IP not default, Login User
Interface by UPnP will fail
40. Modified user interface to avoid errors entries
41. Modified VPN Keylife time shouldn’t allow
save the value less than 120
42. Fixed fragmented packets not arriving to
destination in correct sequence. Affected some
IPsec connections
43. Fixed When IPSec passthrough disable, client
Nslookup domain will fail
44. Fixed CGI issue where an out of range value
could not be saved
45. Fixed a vulnerability with DHCP server function
46. Fixed VPN screen where "Manual” for key
management hides”View Log” button
47. Fixed When MTU option set disable, default MTU
and server MRU can not work properly
48. Fixed Restrict Access always have 1 minute
delay to valid selection
49. Fixed When restrict time access set midnight
12:00 can not work correctly
50. Fixed When DMZ enable, PPTP, PPPoE passthrough
will fail
51. Fixed UPnP Forward setting by UPnP IGD, if delete
all or modify about 8 entry will cause reboot |
|
MrMoke
join:2002-06-06
Austin, TX
| One step forward forward, two steps back.
So far the only problem I've found is in getting a previously working VPN session to work with Safenet client from a remote laptop.
During initial negotiation, the sx41 sends a
*(HASH, NOTIFY:PAYLOAD_MALFORMED) message to the client.
This VPN configuration was working in 1.44.11t and 1.45.7 |
|
td911
join:2002-12-06
New Rochelle, NY
1 edit |  I'm unable to get the password changes to stick. Clicking SAVE SETTINGS does nothing.
Also when I sent up the PORT FORWARDING, when I go to save the settings I get an ACCESS pop-up asking for username/password and it craps out after 3 attempts.
UPDATE:
Yes, the pages are slow loading, choking on UI-##.gif.
I'm going back and let others beta(alpha?) test this.
I need to be able to forward ports for my UT2K4 sever. |
|
bluezanetti
Premium
join:2003-10-04
1 edit | Re: BEFSX41 FW 1.50.9 Mar 17, 04
said by td911  :
I'm unable to get the password changes to stick. Clicking SAVE SETTINGS does nothing.
This worked OK for me. No problem on saving settings.
However, is it me or do the admin pages load incredibly slow? There seems to be partial loading lock-ups of the pages occasionally. IE is bad. Opera is OK, and from Opera it looks like some of the gratuitous images aren't loading. At least that's my interpretation.
The interface is slick when it's working, although that's not much help when the page doesn't reload properly.
Blue
Just a bit of an update - when a page has difficulty loading hopping to another page and back again generally helps in my case. I have no idea why loading the admin pages appears dodgy - maybe it's just my setup.... |
|
Flogator
Premium,MVM
join:2003-01-19
Cantley, QC
 ·Acanac
 ·Videotron
| reply to cdbmoa
Re: BEFSX41 FW 1.50.9 Mar 17, 04
Hmm... I had access to this firmware since March 17th and honestly, I flashed back to 1.45.7 right away. I'm even surprised Linksys released that firmware so quickly. I did not do intensive testing but in the two hours I tested it, here is what I found:
- The "TCP SYN/RST Replies on DoS" bug that was fixed in 1.45.x is not broken again in 1.50.x 
- The GUI has been reworked (very nice)
- You can now specify your own NTP server (however you can only specify ONE server)
- There are new goodies such as SMTP alert and ping test
Linksys did fixed a few bugs in this firmware but unfortunately, new ones got introduced as well. As for myself, I was expecting VPN improvement in this new firmware which did not take place. Worst, some bug fixes were broken again.
I must admin that this new firmware look good. That's why I'm hoping the next one will better. |
|
frangus
join:2001-10-24
West Covina, CA | So port forwarding is not working at all? |
|
Prespd
join:2004-03-10
San Diego, CA
| I flashed the updated firmware and reconfiged my router to the settings as close as I could get to the 1.45.7 firmware. GRC.com with firmware 1.45.7: "perfect stealth".
with 1.50.0: "Failed". Was able to stealth IDENT port 113 with forwarding to ip 192.168.1.254, but noticed that ports 1000 or so through 1055 showed up as closed and not stealthed. What's the deal with that? Even tried forwarding the whole range. didn't changed the closed status to stealthed. |
|
sgkent
join:2002-04-15
Sacramento, CA
| reply to frangus
I say this candidly and not meaning disrespect. Almost 3 years ago I lost my job as a support and software test engineer to offshoring. I hope to God that the person who finished this version and released it is an American. If you are an American you are forgiven, if not then I will scream absolute bloody murder that I am the one testing the software for this router and not getting paid for two fricking hours of my time.
The VPN fails to work using IP/FQDN or ANY. There are two issues as far as I can tell.
1. There is no "Apply" Button. The prior version required hitting "Apply" before "Connect" to work because "Connect" does not save the data. One needs to confirm that this is by design and not an omission. In this version I saved the data in the different VPN fields by opening up the "Advanced Settings" and using the Save there after filling everything out before going into advanced.
2. In hacked V1.45.7 the VPN tunnels work fine. NOTHING I can do will get it to connect BEFSX41 to BEFSX41 in this version. One is running 1.50.9 and the one in Florida 1.45.7 if that has any issue but I don't think so.
ALSO:
Fill out page for Static IP. When you get to custom NTP server fill it out too. When it opens you will have to go back and redo all the static IP data as it will have been erased by the NTP changing. Suggest programmer make an automatic save when the field to fill in a custom NTP server is clicked on.
I have no idea how this version could get out of quality control without the MAIN reason most of buy this model working - the VPN tunnels. I am back to the hacked 1.45.7 version and EXTREMELY frustrated that Cisco/Linksys management would not have respect for others' time before releasing updates. By the way, while it has nothing directly to do with this release, it has everything to do with problems like this - I joined the IT Union today - WA-TECH. Just tired of how little Wall Street values our skills.
To those who will use this version - make sure to print all the pages on the old screens before because the new screens are quite different and you will need the settings again. Also, make sure you have a copy of the old firmware on hand before you begin so you can flash it back if the new version fails to meet your needs. 1.45.7 is a hacked version available from somewhere on this site. !.50.9 is available from Linksys on their driver/firmware support pages. |
|
xxx1
@194.165.x.x
| Re: BEFSX41 FW 1.50.9 Mar 17, 04
----
1. There is no "Apply" Button. The prior version required hitting "Apply" before "Connect" to work because "Connect" does not save the data. One needs to confirm that this is by design and not an omission. In this version I saved the data in the different VPN fields by opening up the "Advanced Settings" and using the Save there after filling everything out before going into advanced.
----
I have got a 'save settings' button on the main vpn page - see screenshot |
|
xxx1
@194.165.x.x | reply to cdbmoa
secret pages - /auto_nego.htm, /MacFilterTable.htm, /FirewallTable.htm and /BackupnRestoreCfg.htm are gone too. |
|
bilbusb
join:2003-04-10
Tucker, GA | reply to cdbmoa
Re: BEFSX41 FW 1.50.9 Mar 17, 04
anyone know if snmp works wtith this one?
also if mrtg is capable of running with this FW, i have had problems with previus versions |
|
bluezanetti
Premium
join:2003-10-04
| said by bilbusb :
anyone know if snmp works wtith this one?
I did a quick test just now - I'm running PRTG - seems to work just fine. I had to fiddle with things since I apparently didn't save my configuration with SNMP enabled last night (it's disabled by default).
Blue |
|
MrMoke
join:2002-06-06
Austin, TX
2 edits | reply to sgkent
Hey, sgkent!:) I think that it's OK to be disrespectful to a company that has so little respect for their customers that they refuse to get a working version of firmware for a product that's been out for this amount of time. One of the most consistently broken features in this VPN router product is the VPN functionality. How monumentally incompetent is that?
The nicest thing that Flogator, who I very much respect, could say is that the new interface was pretty. Of course, it also eliminates some of the features, like backup and restore, that we like to use. I actually like the fact that due to the new interface, Cisco now appears responsible for this mess. I guess the big question is, "Do they actually have any control?" An even scarier thought, "I wonder if the Linksys team is writing the firmware for Cisco products now?"
Back to 1.45.7, broken but better... |
|
Flogator
Premium,MVM
join:2003-01-19
Cantley, QC | reply to Prespd
Prespd, that's precisely what the "TCP SYN/RST Replies on DoS" was all about. Linksys fixed this bug in 1.45.3 and they broke it again in 1.50.9. |
|
Flogator
Premium,MVM
join:2003-01-19
Cantley, QC
·Acanac
·Videotron
| reply to sgkent
To sgkent and all, BEFSX41 firmware 1.45.7 is not a hack, it is a valid beta version from Linksys. As usual, their beta material is in a much better shape than their released version. It looks to me as if Linksys listen to our complain when they do beta but when they release something they simply screw up. |
|
Flogator
Premium,MVM
join:2003-01-19
Cantley, QC | reply to xxx1
Re: BEFSX41 FW 1.50.9 Mar 17, 04
The Connect button will disappear on you if you are configuring your VPN tunnel in manual keying. Simply apply your settings with manual keying and you will see the Connect button gone. |
|
Flogator
Premium,MVM
join:2003-01-19
Cantley, QC | reply to bilbusb
Re: BEFSX41 FW 1.50.9 Mar 17, 04
bilbusb, yes SNMP is working. However, you have to manually enable the feature. It is hiding somewhere in the Administrative tab. As you can see, SNMP is now an option where as before it was a given (when not broken of course). |
|
MrMoke
join:2002-06-06
Austin, TX
| Hey Flogator- I did eventually get the standard VPN session to work with this version. I was able to get a network drive assigned through the tunnel. I then turned on SX41 SNMP, and the tunnel stopped working. Tried deactivating and reactivating from remote, but didn't work. Turned off SNMP, did the deactivate/reactivate from the remote, and tunnel was back again.
I noticed that MTU is set to "Off" in this version of firmware, so I set it to "On", and 1500. This version doesn't appear to have the same MTU flaw that 1.45.x had with the XP box that I use for VPN passthru, but I should probably test a little more. |
|
Flogator
Premium,MVM
join:2003-01-19
Cantley, QC
·Acanac
·Videotron
| More and more that I think about it, I am wondering if 1.50.9 isn't based on 1.44.11t instead of 1.45.7. That would explain a lot of things. Still, my interest for 1.50.9 is very low right now for the feature I can use with 1.45.7. I'll wait until the next beta firmware (which should be more robust anyways  ).
Mind you, I'm very interested as to what you guys find about 1.50.9. Keep on doing the good work. |
|
VTOLfreak
@net4all.net | Looks like the main features I bought this router for are working in 1.50.9:
-Dynamic DNS works again.
-The filters work again.
-UPnP is working like normal. |
|
