For a while, the only changelog for Gargoyle was the revision log in the SVN repository. However, as of v1.0.12, a change log is being provided with each new release. Below is a complete changelog, including versions for which a changelog was not initially provided, reconstructed from the revision log in the SVN repository.

Between v1.0.0 Beta4 and v1.0.0 Final, “bleeding edge” releases were provided, so users could easily try the latest code, even though a new major version had not been released. However, the lack of version numbers to differentiate the bleeding edge firmware caused some problems. So, after v1.0.0 it was announced that the 1.X.0 releases would be major, stable releases while 1.X.Y, where Y is nonzero would be equivalent to the less stable bleeding edge firmware.

However, this system caused problems as well since this is not a typical version numbering scheme and everyone automatically upgraded to the latest version. When significant experimental changes were introduced in version 1.0.5 (in particular a new implementation of the bandwidth monitor) most people went ahead and upgraded, and ran into problems. The problems were rapidly identified and fixed, but larger experimental changes such as this should not be introduced into what everyone considers the latest stable version.

Therefore, this numbering scheme has changed yet again. No more large, experimental changes will be introduced into the 1.0.X releases. 1.0.X will be considered stable. A new branch, 1.1.X has been created and should be considered experimental. All large changes will be introduced into this branch. More generally, Gargoyle will adopt a version system where 1.Y.X releases are stable if Y is even, and experimental if Y is odd. (So 1.0.X, 1.2.X, 1.4.X etc. will be stable while 1.1.X, 1.3.X, 1.5.X etc. will be experimental.)

One of the most-requested features for a while has been support for a Guest Wireless Network. This feature is now implemented in 1.7.1.

Two important limitations exist with this feature, as currently implemented in 1.7.1:

(1) Unlike some implementations of this feature, there isn't a separate subnet defined for the guest network, the hosts are isolated using ebtables rules instead of using a separate subnet which means that the guest network shares the same range of IP addresses as the primary access point. The downside to this is that you can't match only guest-network IPs very easily with quotas/qos etc. Further releases will implement ways to match only the guest network in the Quotas and QoS sections but for now this is not possible.

(2) I don't recommend trying to use ap+client mode if you're going to enable the guest network. My experience is that it will work for a while and then become very unstable. I will investigate to see if there is a way to fix this, but I may disable enabling the guest network altogether when in ap+client mode.

In addition to guest network support, there are numerous bugfixes in this release, for issues identified in 1.7.0. Most of the minor (and one or two more major issues) that were identified after moving to the Barrier Breaker branch of OpenWRT have now been addressed.

New in 1.7.1: Guest Network Support Support for WAN connection via QMI Fixes several bugs preventing OpenVPN from working properly Fixes display of second 5GHz band SSID on Status/Overview page of dual band routers Fixes USB Printer Support Fixes Button Handlers Fixes 3G support by fixing test to determine whether 3G device exists Fixes issue with restarting minidlna Add citynetwork.se ddns provider Fixes issue with throttling hosts exceeding quotas being assigned the wrong QoS class

based on OpenWRT Barrier Breaker is now officially released.

Do NOT try to preserve settings between previous releases and 1.7.0 – The new configuration files for Barrier Breaker are different than previous versions of OpenWRT and you will likely brick your router!

This released focused merely on updating the functionality available on 1.6.2 to run on the more recent version of OpenWRT, and the primary benefit you will see is newer wireless drivers and the availability of Gargoyle for a much larger range of router models.

One important note: Wireless AC capability is not supported in this release. The hardware of some supported models has this capability, but software support is currently not available for Gargoyle.

There was a recent patch contributed that will enable guest network support – that is not included in this release, but now that porting to Barrier Breaker is complete this will be merged and will be available in the next release.

This release marks the first release in a the new 1.7.x Experimental branch, and may be buggier than previous releases in the 1.6.x stable branch. I have tried to test well, but I anticipate there may be a few bugs remaining. Please report any bugs – in particular bugs that were not present in previous releases – in the thread below.

New in 1.6.2:

• OpenSSL updated again, with some more critical fixes
• OpenWRT version updated to include latest fixes in Attitude Adjustment branch
• Some minor tweaks to enhance wireless performance – ANI is now disabled by default, and dissoc_low_ack set to 0
• Search results from thepiratebay torrent tracker added to web search monitoring tool (thanks to Kim Bratzel for this patch)
• Update Dropbear SSH server to latest version
• Fix removal of hostname when static IP addresse is removed in DHCP section
• Alix builds now boot with GRUB2 instead of GRUB

Version 1.6.1 is primarily a bugfix release. A fix for the recent heartbleed openssl bug is included, along with several other non-security related fixes and improvements.

Only routers that were using the Tor or OpenVPN functionality in Gargoyle were vulnerable to the heartbleed bug. Anyone who is using either of these applications is strongly advised to upgrade.

Also, functionality to clear out old OpenVPN keys and certificates has been introduced (disable OpenVPN, then click “Clear All Existing OpenVPN keys”). It is strongly recommended that anyone running an OpenVPN server on a router that was potentially vulnerable to heartbleed, take advantage of this functionality and regenerate all of their keys and certificates. The primary reason for the slight delay in this release from when heartbleed was first disclosed was to implement this functionality. Since OpenVPN is one of only two vulnerable applications, it made sense to make sure the ability to clear old, vulnerable keys was implemented along with the fix for the bug itself.

New in 1.6.1: Fixes “heartbleed” bug in OpenSSL, OpenSSL upgraded to 1.0.1g which is not vulnerable Ability to clear old keys and certificates when OpenVPN is disabled implemented New option to explicitly block nonOpenVPN traffic in OpenVPN Client, preventing problems if OpenVPN connection dies Notice of OpenVPN status added to login page when OpenVPN client is active Fixes implementation of DMZ, should now work with port forwarding again Improved identification of default ping target for QoS ACC Tor version upgraded to latest stable 0.2.4.21 Add German Translation (Thanks to Thomas Knepper)

New in 1.6.0:

• New Norwegian Translation
• Multiple improvements to other translations, in particular to plugin translations
• Support for TP-Link WR1043ND v2 including support for access via WAN port in failsafe mode
• Support for 16MB/64MB Hornet Board, branded Gargoyle Pocket Router v2
• New Dynamic DNS Providers strato.com, oray.com and 3322.org were added to those available
• Display Drive Name as well as device path in USB storage Configuration
• Fixes display/redirect of root login page in Chrome when connecting via https
• Fix display of incorrect key size of Blowfish Ciphers in OpenVPN client configuration

New in 1.5.11:

• Support for multiple languages and translations (“i18n support”)
• Relatively complete support for English, Polish, Russian, Spanish and Chinese languages
• Minimal support for Portugese and Arabic languages (these translations still need a lot of work)
• Minidlna media server included on routers with at least 64M of memory and at least 16M of flash
• Webcam support for routers with at least 64M of memory and at least 16M of flash
• Fixes installation of kernel module packages via gpkg
• Tor can now be configured to save files to a USB drive instead of storing everything in memory
• Tor removed from binaries for smaller router with less than 64M of memory or less than 16M of flash
• Tor version updated 0.2.4.17-rc
• PPTP plugin now available
• Update OpenWRT Attitude Adjustment branch code to SVN r38347 to include latest wireless fixes
• Two new themes available: Horchata and Dementoid
• Updated to use latest version of dropbear SSH server
• Add favicon to webui

New in 1.5.10:

• OpenWrt updated to final version of Attitude Adjustment
• New backend plugin manager, gpkg
• New plugins wifi-schedule (thanks BashfulBladder), logread and webshell
• OpenVPN server bugfixes
• Support for Tp-Link MR3220 v2 and MR34220 v2
• Fixes for 3g usb wireless support
• Multiple improvements to QoS
• Updated tor and miniupnp to latest versions
• Display switch information indicating witch lan ports are up and connected on overview page
• Some optimization of image files to save space
• Fixed some file permissions issues with ftp access to usb storage
• Numerous typo/cosmetic fixes

New in 1.5.9:

• New Plugin Interface (System/Plugins)
• Bump OpenWrt version to Attitude Adjustment RC-1
• Multiple minor fixes for usb-storage implementation
• Fixes bug that can (sometimes) cause bandwidth monitor to reset if network restarts
• Fixes bug in bandwidth monitor display that can cause a single month to show up multiple times after a time-zone change
• Fixes bug in OpenVpn client mode when configured to use TCP

New in 1.5.8:

• USB Storage Section now supports sharing files via FTP
• USB Storage Section now supports sharing a subdirectory on a drive instead of the whole drive
• USB Storage Section now supports configuration of multiple users
• Fixes 3G Support (broken in 1.5.7)
• Fixes use of non-standard DNS servers (broken in 1.5.7)
• Fixes printer sharing (broken in 1.5.7)
• Fixes bug from blocking of MAC addresses assigned a static IP that connect from a different IP, when appropriate setting is checked
• New Dynamic DNS services: no-ip.pl and dtdns.com (Thanks to Cezary Jackiewicz for this patch)
• Fixes bug preventing NTP daemon from starting properly after time settings are saved (Thanks to Chris Nesbit for this patch)
• Fixes Display of DNS servers in overview section
• Display router hardware model in overview section
• OpenWrt version upgraded to Attitude Adjustment Beta 2 (1.5.7 was based on Beta 1)

New in 1.5.7:

• Underlying OpenWRT upgraded to newer “Attitude Adjustment” Branch
• Significantly improved hardware support
• Fix handling of direction property of OpenVPN tls-auth
• Allow building of only one profile for a given architecture by running e.g. “make ar71xx.usb_large” to build usb_large profile instead of all ar71xx profiles

• Numerous bug-fixes for OpenVPN including fix for bug preventing server from activating if any port-forwards are active.
• New Status/OpenVPN section for displaying hosts connected to OpenVPN server
• Option to track total OpenVPN bandwidth in Status/Bandwidth section
• Configure Server with OpenVPN TLS-Auth key, for additional security, and allow setting of TLS-Auth in OpenVPN Config controls
• Include .ovpn file (which is identical in all but name to .conf file) in OpenVPN client configuration zip files, for better interaction with Windows Client
• Inform user if saving a OpenVPN client config that expects different subnet than what router has configured, and give user the option to automatically switch subnets to the new one.
• Bump Tor to 0.2.3.19-rc, and fix bug causing Tor bandwidth to be double-counted
• Special build for D-Link DIR-825-b1, without Tor. While this router has 8MB of flash, layout is such that not all of it can't be used, and including Tor exceeds maximum.
• Fix necessary time settings ayutomatically when upgrading from versions ⇐ 1.5.5 and preserving settings
• Make sure new ntpd daemon gets built on Alix systems

• OpenVPN GUI for routers with 8MB+ flash and 32MB+ memory
• Fixes several major bugs that can prevent Tor from starting when router is rebooted
• Improved UPNP GUI in port forwarding section
• Several performance improvements/tweaks for QoS were added
• Fixes bug in code for starting Tor on a per-IP basis
• A bug in code for forcing use of router DNS servers was corrected
• Downloading of bandwidth csv file should now work correctly
• Moved from using old 3rd party NTP time synchronization utility to busybox NTP utility
• Fixes a bug that can prevent write access to shared CIFS drives
• Add dynamic dns provider joker.com
• Fixes a bug in usb disk formatting code when volume numbers are non-sequential
• Fixes a bug preventing more than one MAC address from being blocked under the Static IP section of the DHCP screen

• Bumps OpenWrt version to latest Backfire version for latest wireless fixes and support of multiple switch models in Buffalo WZR-HP-G300NH routers
• New improved version of Active Congestion Controller.
• Implements ability to configure router as a Tor Relay/Bridge including ability to configure an Obfsproxy bridge (for routers that support Tor)
• Implements ability to connect to Tor bridge (including Obfsproxy bridge) instead of directly to a relay (for routers that support Tor)
• Allows monitoring of total Tor Bandwidth usage (for routers that support Tor)
• Allows access to Tor hidden service addresses from all hosts (toggled and untoggled) when Tor is active and separately toggled for each host (for routers that support Tor)
• Allows monitoring of bandwidth to/from router itself, which was before included in the “Total” categories, but not recorded seperately
• Option to attempt to save configuration when upgrading. Some versions may still be incompatible.
• Fixes monitoring of web history/searches for ranges of IPs
• Some fixes for mounting/formatting of USB drives
• Fixes security issue – bandwidth.csv is no longer visible if not logged in
• Adds two new optional date formats: dd.mm.yy and yyyy-mm-dd
• Enable ps wide output in busybox – allows more accurate listing of running processes when logged in via SSH
• Sets cron loglevel to 9 so syslog doesn't show every time a cronjob runs (which can quickly clutter up the system log)

• More wireless fixes, bump OpenWrt to latest Backfire version
• Implements ability to format USB disk with swap / ext4 in web interface
• Fix bug causing USB Storage plugin to handle ext3 and ext2 drives incorrectly
• Implement ability to access TOR Hidden Services
• Fix bug causing TOR to leak DNS requests
• Add Tor, USB Storage and USB Printer plugins to Alix build
• Add selfhost.de dynamic dns service
• Update theme by Matei to latest version

• Fixes bug causing router crash when installing packages via opkg
• Allows selection of several DNS server options, including OpenDNS and Google DNS servers from a dropdown without the need to enter IPs manually
• Enables resolution of NameCoin and OpenNIC alternate root domains by default
• Automatically mounts swap partitions on attached USB drives
• Tor is disabled on routers with less than 64MB of memory (including swap space)
• Fixes error in updating namecheap.com domains via dynamic DNS
• Some improvements in looking up host IP for dynamic DNS – rotating pool of servers for lookups is now used
• Bumps OpenWrt Backfire version to 10.03.1 final
• Time initialized to be Jan 1st, 2001 instead of 1970 before NTP started, so timezone shift never puts it before unix epoch
• QoS accounting improved for PPPoE connections which will improve overall QoS performance on these systems.

• Increments OpenWrt Backfire version to include latest wireless driver fixes
• 3G wireless connection now configurable on routers with USB port when a 3G modem is plugged in
• USB Printer configuration
• Tor anonymizer configuration for ar71xx routers with memory >= 32MB and >=8MB of flash space (see here for more info on Tor)
• Implements user defined ping limits to QoS congestion controller
• 5GHz and 2.4GHz SSIDS displayed seperately on overview page
• Fixes bug causing dyanmic DNS daemon not to update properly
• Fixes bug preventing freedns.afraid.org dynamic DNS updates on some platforms
• Revert to simpler OpenDNS configuration settings, should be less confusing and should work now
• Set freedns.afraid.org as default dynamic DNS provider (top of list)
• Add images for Netgear WNDR3800, TP-Link WR740N and MR3420

• 5GHz wireless client and wireless bridge modes can now be used on dual band routers
• Enables scanning of 5GHz Channels on dual band routers
• Separate channel width controls for each band on dual band routers
• Compressed javascript for smaller final image sizes
• QoS connection bytes now measured in KB, not MB
• Fixes Wired-Dhcp mode on single port router such as Gargoyle Pocket Router (MR3201A)
• Fixes dnsomatic.com dynamic DNS configuration and adds gratisdns.dk dynamic DNS configuration (thanks to Thomas Markussen)
• Fixes “Monitor Only” option in web usage monitor
• Fixes bug that can cause a crash when restarting web usage monitor
• Add Poland to UTC+1 timezone list
• Rename field for labeling port forwarding rules from “Application” to “Description”, allowing longer descriptions than 10 characters
• Update httpd_gargoyle to do a better job of preventing page caching
• Fixes erroneous display of errors in httpd_gargoyle startup
• Increments OpenWrt Backfire version to include latest wireless driver fixes