[1.49.0] - 2026-04-18
- ADDED: Manual devices — you can now add IP addresses of devices behind another router that are not visible in the ARP table. Added devices appear in device lists and can be used for per-device filtering and MSS clamping. Find it in Settings → Device Filtering. (#185)
- ADDED: Fake payload from domain — new option in
TCPfake settings to generate a fake TLS handshake from any domain you type (e.g.example.com). - REMOVED: Separate device alias file — device names are now part of the main config. The old
mac_aliases.jsonfile is no longer used (aliases are migrated into the config on upgrade). - FIXED: Traffic routing fails on Keenetic routers — routing table IDs could be generated above
255, which is not supported on systems usingBusyBox. Table IDs now stay within the safe range. - FIXED: Fake SYN used the wrong payload — when
Syn Fakewas enabled, the fakeSYNpacket always used a built-in payload instead of the one selected in the set (custom, captured, or domain-generated). - FIXED: GeoSite routing not working with local DNS proxies — when the router forwards DNS through a local proxy like
https-dns-proxy, domains fromGeoSitecategories were not added to routing sets. B4 now intercepts DNS queries earlier so routing works in these setups. - FIXED: Log level "Error" reverted to "Info" after restart — when the log level was set to
Errorin the UI, it was silently changed back toInfoon the next start. - FIXED: MTProto images and files not loading — Telegram uses extra "CDN" data centers (like DC 203) for media that B4 did not know about, so some pictures and files failed to load. B4 now fetches the current Telegram data center list on start (and on demand from Settings → MTProto Proxy → "Refresh Telegram DC list"). (#190)
- IMPROVED: Discovery groups domains more consistently — when one strategy works for all tested domains, they are shown as one group and can be applied together in a single click, instead of being split into separate groups.
- IMPROVED: RST protection catches more fake resets — added extra checks that help tell real resets from injected ones, so fewer connections are killed by DPI.
- FIXED: Packet handling on routers with extra firewall marks — when other services (VPN, QoS, policy routing) set their own marks on packets, B4 did not recognize its own mark. This could cause queued packets to loop and, when traffic routing was enabled, break masquerade on VPN interfaces.
- ADDED: Connections page — Aggregated view — new default view groups packets by device, protocol and domain (or IP when no domain is seen), with an activity chart per group and a side list of devices you can click to filter. The old table is still available under the "Raw feed" tab.
- ADDED: Floating save button in set editor — a save button now stays in the bottom-right corner while editing a set, so you can save without scrolling back to the top.
- ADDED: Reset config to defaults is back — the reset button in Settings → Core Controls has been reworked and returns. Your sets, web server settings, and geo file paths are preserved so the UI stays reachable.
What's Changed
- Add PREROUTING DNS request queue rules for local DNS proxy setups by @chizhanov in #183
- Add support for manual devices in device configuration and DHCP manager by @DanielLavrushin in #186
- feat: add connection details and device management components by @DanielLavrushin in #192
- feat: add configuration reset functionality and UI components by @DanielLavrushin in #193
Full Changelog: v1.48.1...v1.49.0