I applied this to our 2860 and the result was general loss of internet speed and complete failure for most secure sites - banking for example....

We have reverted to a much earlier firmware and it all works again!

admin wrote: Well, I don't know what the bug is (and probably best not to say here) but is it actually a security risk that can't be mitigated? I'm surprised they'd tell you to downgrade otherwise.”

There are certainly features you can turn off that get rid of the problem and that is what I've done. But the advice I received from Draytek, is that which I quoted in my earlier message, namely: "Downgrade to 3.8.2.3"

I have heard nothing further from them - other than an automated message, saying they were closing the case! I of course protested at this, but their email system bounced my message back at me (550:invalid DNS MX or A/AAAA resource record).

(I subsequently received the same bulletin as everyone else, telling me to Upgrade - but as I said before, the firmware in that list (3.8.4.3) does NOT fix the problem.)

I have no idea if they are actually working on a fix or not.

Well, I'm not sure how you re-open a case, but you could always open a new one and reference the previous and and just ask if it's been reported for fix if it's a confirmed bug.... but I'd still upgrade and disable the feature, or secure it or whatever is needed.

I attempted to upgrade to Firmware v2860_3843_BT yesterday and spent the whole day firefighting.
The main issue being the extremely slow loading of website pages, or pages not loading at all. Lots of unhappy users.
I ended up reverting to the previous version and all is back to normal. Very annoying. Draytek need to sort this.

RaddersRed wrote: The main issue being the extremely slow loading of website pages, or pages not loading at all.

Turn OFF hardware acceleration...

Turning off hardware acceleration seemed to work for me.