New Features and Enhancements

1. Support DGS-3200-10 for D-Link ZoneDefense feature.
The ZoneDefense feature has been extended to support the new DGS-3200-10 switch model. Required switch firmware is R1.10-B06 or later.

2. TXT records can be inserted in the e-mail header using X-Spam-TXT-Records header for a SPAM-tagged e-mail.

Problems Resolved

1. The TCP pseudo reassembly didn't take the window scale option into consideration.

2. Generating new SSH server host keys made it impossible to login until the system was rebooted. When new SSH host keys are generated, the SSH server(s) are restarted and initialized with the new keys.

3. It was sometimes not possible to upload e.g. upgrade firmware packages and certificates using the WebUI through HTTPS.

4. Deletion of parent objects in the configuration didn't update the navigation tree in the WebUI.

5. Web Content Filter override feature blocked web content even though they had been overridden by user. The WCF override functionality has been changed. When a user overrides a "restricted site notice"-page, the user is allowed to browse all blocked sites for a limited amount of time. All blocked URLs requested by the user are still logged.

6. DNS servers returning multiple record types in responses got handled improperly. DNS client will now sort out the wanted record type.

7. SIP-ALG failed to parse SIP requests based on the predecessor of SIP RFC 3261. SIP RFC 2543 compliance has been added.

8. Pure IPSec Transport Mode with multiple clients behind a NAT did not work when the clients used the same port. The port number is now used in the lookup so that the return traffic from the firewall can be sent to the right client.

9. IKE and IPSec lifetimes are no longer set to default values in case of incorrect settings. Lifetimes shorter than 300 seconds for IPSec SAs and 600 seconds for IKE lifetimes could cause inconsistency of IKE and IPSec SAs in large systems (>1000 tunnels). Configuration with shorter IKE lifetimes than IPSec lifetimes and with delta time less than 300 seconds between IKE and IPSec lifetimes could also cause inconsistency. In case of invalid settings a cfg warning will be issued.

10. It was sometimes not possible to use a configured OSPF Aggregate in other parts of the configuration.

11. IP addresses with suffixes .0 and/or .255 could incorrectly be assigned to IPSec Config-mode clients.

12. Some log strings containing space characters were not quoted as required for proper interpretation by some log receivers.

13. A possible memory violation in the user authentication module could cause the firewall to abort. Validation of the memory reference has been added to address this issue.

14. When using L2TP over IPSec the dynamically added route was not removed when using Windows Vista behind a NAT device.

15. Interface routes were incorrectly added to the main routing table which resulted in faulty IPSec behavior.

16. The descriptions for "send" and "receive" in the WebUI texts for DHCP relay options had been mixed up.

17. The SIP-ALG did not always send responses to SIP requests to the correct port. The SIP-ALG sent responses to the port from where it received the request. Now, responses are sent to the port advertised by the SIP client.

18. Log ID: 1800211 contained incorrect English. The typo has been corrected and the revision changed to 2.

Упс, точно.

Firmware upload failed. There is something wrong with the firmware package.
Please download the firmware image from the D-Link support website and try again.

Новую прошивку не могу залить на DFL-800:(
Выдаёт ошибку: Прошивку брал с ftp.dlink.ru.

PS. На DFL-210 обновилась нормально.

Заливайте через http а не https.

Все работает, проверенно...

Видите отсутствие пробела перед url=?

Не понял?..

Мониторинг точно обещают в следующей прошивке, это примерно 2-3 месяца.