Added
- Firewall tab on the device page. Open a device and choose Firewall to read its Filter, NAT, Mangle and Raw rules in the order the device applies them, grouped by chain, with the packets and bytes each rule has matched. Conditions are shown as short tags, the target of each action (address list, NAT address, mark) sits under the action, and disabled and dynamic rules can be hidden. Type in the filter box to find a rule by comment, address, port or list. When FastTrack is enabled, the tab explains that fast-tracked traffic skips the rest of the firewall, so later rules and their counters see only part of it. The tab only reads the rules; it does not change them.
Fixed
- A webhook's signing secret is no longer shown after it is saved. When you edit a webhook the field stays empty: leave it that way to keep the secret, type a new one to replace it, or tick Remove the secret and stop signing. If you manage webhooks through the API, send
clearSecret: trueto remove a secret; an empty value now keeps it. - A command's result can be fetched through the API by the ID returned when it was started, once it has finished on every device. This also applies to template deployments.
- Asking an AI assistant for the problems of one site no longer lists CVEs and backup problems from other sites.
- Live traffic for one device keeps flowing when a live chart for another device on the same connection is closed.