pfSense bugtracker

05/14/2024

01:22 PM pfSense Packages Bug #15496: Traffic Totals: empty Data Summary

Kristof Provost wrote in #note-4:
> The relevant package has been installed for a very long time, so it's not a lack... Jim Pingle

12:28 PM pfSense Packages Bug #15496: Traffic Totals: empty Data Summary

I can't reproduce any issue here currently. Seems to be OK on Plus 24.03 amd64 and arm64, and CE 2.8 Snapshots (at le... Jim Pingle

05/13/2024

06:56 PM pfSense Packages Bug #15061 (New): acme.sh nsupdate with challengealias is failing in certain cases

Change reverted.
Jim Pingle

05/10/2024

05:09 PM pfSense Docs Todo #15479 (Closed): Feedback on DNS — Creating Wildcard Records in DNS Forwarder/Resolver

That isn't quite true exactly as stated, but I added some text to clarify what is happening in those cases and how to... Jim Pingle

05:00 PM pfSense Docs Correction #15473 (Closed): Feedback on pfSense® software Configuration Recipes — Blocking External Client DNS Queries: Firefox

It's clear as is -- that's what the "by default" part of that sentence means -- but I added a little more text to mak... Jim Pingle

04:38 PM pfSense Bug #15487 (Not a Bug): Unable to ping nodes in remote side of tailscale

Doesn't seem like there is an actionable bug here. It may just not be compatible with tailscale in the way you're try... Jim Pingle

04:35 PM pfSense Bug #15486 (Duplicate): Unable to run Packet Captures on a tailscale interface in GUI on 2.7.2

It's already fixed in the repo, there is nothing more to fix. We could maybe add a patch for that to system patches f... Jim Pingle

04:34 PM pfSense Feature #15488: Add link from "Tracking ID" when editing a firewall rule to firewall logs filtered for that ID

N.B. whoever implements this, it would have to utilize @usepost@ so it properly submits the form data, it can't just ... Jim Pingle

04:26 PM pfSense Bug #15490: Sanitize RFC 2136 Dynamic DNS update keys in ``status.php`` output

Specifically the tag is @<keydata>@ that should be sanitized. (@dnsupdates/dnsupdate/<idx>/keydata@) Jim Pingle

05/09/2024

01:39 PM pfSense Bug #15482 (Rejected): NTP logic

What you're describing would need to be a change made in the NTP daemon behavior, which is out of our control. Probab... Jim Pingle

01:15 PM pfSense Todo #15483: Update Unbound to 1.22.0

If you "read the details":https://nlnetlabs.nl/news/2024/May/08/unbound-1.20.0-released/ that isn't really a vulnerab... Jim Pingle

12:34 PM pfSense Feature #15478 (Duplicate): Rule Seperators for NAT Rules.

Duplicate of #7781 Jim Pingle

12:33 PM pfSense Bug #15480 (Rejected): IX polling driver

Polling was removed because it was no longer useful on modern hardware the way it worked in the OS, which is still tr... Jim Pingle

05/07/2024

03:32 PM pfSense Bug #15466 (Needs Patch): Kea does not send a subnet mask in its inform response when requested by a client that isn't requesting an address allocation

As far as I can see this may be a bug in Kea itself you may need to report upstream. The configuration appears to be ... Jim Pingle

03:21 PM pfSense Bug #15328 (Confirmed): Changes in Kea DHCP interface pools may invalidate lease database content

This appears to be a known issue in Kea, their documentation even warns about it:
https://kea.readthedocs.io/en/ke... Jim Pingle

02:32 PM pfSense Packages Bug #15459 (Closed): Memory leak affecting ``lcdproc_client.php``, eventually hits PHP memory limit and crashes

I made some optimizations to the LCDProc client code to help here but the memory leak issue is still the primary root... Jim Pingle

02:30 PM pfSense Bug #15471 (Resolved): Memory leak in pfSense module function ``pfSense_get_ifaddrs()``

Moving this over from #15459 since it does not appear to be a problem in LCDProc but in the base system pfSense PHP m... Jim Pingle

05/06/2024

07:19 PM pfSense Packages Regression #15469 (Confirmed): RRD Graphs height is smaller than expected

At some point between Plus 23.09.1 and 24.03 the height of RRD graphs shrank. Might be from the jQuery update but it'... Jim Pingle

06:12 PM pfSense Packages Bug #15459: Memory leak affecting ``lcdproc_client.php``, eventually hits PHP memory limit and crashes

Drilling down into the affected functions above, they all call @pfSense_get_ifaddrs()@ one or more (or many!) times a... Jim Pingle

03:38 PM pfSense Docs Correction #15467 (Rejected): Feedback on pfSense® software Configuration Recipes — Configuring CoDel Limiters for Bufferbloat

1. There are many other protocols besides TCP/IP which can consume large amounts of bandwidth, such as ESP for IPsec.... Jim Pingle

01:22 PM pfSense Feature #14437 (Pull Request Review): Add DynDNS Provider - Hetzner

Jim Pingle

12:51 PM pfSense Feature #15461 (Needs Patch): Support GRE Tunnel Key

Support for GRE keys is not complete in FreeBSD at this time. FreeBSD GRE allows configuring an outbound key but not ... Jim Pingle

12:21 PM pfSense Plus Bug #15460 (Not a Bug): Kernel routing SPD Database gets “supenetted” wrong from multiple P2’s

There are two things that could be a factor here and either one could be affecting it, but neither is a bug.
1. Th... Jim Pingle

05/03/2024

07:24 PM pfSense Packages Bug #15459: Memory leak affecting ``lcdproc_client.php``, eventually hits PHP memory limit and crashes

MR: https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/395 Jim Pingle

07:21 PM pfSense Packages Bug #15459 (Closed): Memory leak affecting ``lcdproc_client.php``, eventually hits PHP memory limit and crashes

There is a memory leak affecting @lcdproc_client.php@ leading it to eventually running out of RAM and dying with a PH... Jim Pingle

05:43 PM pfSense Packages Feature #15393 (Feedback): Return to the ga version of NUT

PR merged into devel, should be in snapshots when the next build happens.
Jim Pingle

03:29 PM pfSense Bug #15456 (Not a Bug): KEA DHCP allows entering static mappings with no IP address defined

Entries with a MAC address but not an IP address are valid. They define entries for "Deny Unknown Clients" which can ... Jim Pingle

02:59 PM pfSense Bug #14977 (New): Kea fails to restart due to race between process termination and startup

Yuri Weinstein wrote in #note-4:
> I have experienced the same problem today 2 days after updating to 24.03-RELEASE
... Jim Pingle

05/02/2024

12:13 PM pfSense Packages Feature #15375 (Resolved): Update ntopng package

Jim Pingle

05/01/2024

05:50 PM pfSense Bug #15454 (Resolved): Certificate Manager GUI inconsistency in Revocation tab titles

Jim Pingle

01:00 PM pfSense Bug #15454 (Feedback): Certificate Manager GUI inconsistency in Revocation tab titles

Applied in changeset commit:7cbbda697adeabca5eaad369099ea995a4c2cd42. Jim Pingle

03:48 PM pfSense Bug #15440 (Resolved): CA certificates are not added to the Trust Store

Jim Pingle

12:47 PM pfSense Bug #15440: CA certificates are not added to the Trust Store

Georgiy Tyutyunnik wrote in #note-3:
> tested the patch:
> seems like imported ca is correctly recognised post-imp... Jim Pingle

12:58 PM pfSense Bug #15453 (Not a Bug): Assignment of OpenVPN port to an Interface shuts down OpenVPN access to Netgate 1100/2100

After assigning an OpenVPN interface you must edit/save the OpenVPN instance to properly reinitialize the underlying ... Jim Pingle

04/30/2024

06:53 PM pfSense Docs Todo #15450 (Closed): Feedback on High Availability

Info added.
https://gitlab.netgate.com/docs/pfSense-docs/-/commit/b83e51d63a71013f568e8f7314993fcde182fd49 Jim Pingle

01:18 PM pfSense Feature #15422 (Resolved): Show current boot method in System Information Dashboard widget

Jim Pingle

12:15 PM pfSense Packages Bug #15451 (Incomplete): Cannot remove package

There isn't nearly enough information here to go on, and this isn't the correct platform to diagnose the issue. Pleas... Jim Pingle

04/29/2024

05:01 PM pfSense Packages Bug #15229 (Resolved): ACME DNS-Selfhost verification issues

Fixed in ACME pkg v0.8 Jim Pingle

03:43 PM pfSense Packages Bug #15229 (In Progress): ACME DNS-Selfhost verification issues

Jim Pingle

05:01 PM pfSense Packages Bug #15061 (Resolved): acme.sh nsupdate with challengealias is failing in certain cases

Fixed in ACME pkg v0.8 Jim Pingle

03:25 PM pfSense Packages Bug #15061 (In Progress): acme.sh nsupdate with challengealias is failing in certain cases

Jim Pingle

05:01 PM pfSense Packages Bug #14815 (Resolved): ACME.sh ingnores Certificates in Trust Store

Fixed in ACME pkg v0.8 Jim Pingle

03:22 PM pfSense Packages Bug #14815 (In Progress): ACME.sh ingnores Certificates in Trust Store

Jim Pingle

05:00 PM pfSense Packages Bug #14796 (Resolved): ACME for domain registrar INWX in Germany

Fixed in ACME pkg version ACME pkg v0.8 Jim Pingle

03:20 PM pfSense Packages Bug #14796 (In Progress): ACME for domain registrar INWX in Germany

Jim Pingle

03:28 PM pfSense Packages Bug #15414 (Rejected): Program Loops on invalid domains

Looks like it's looping inside acme.sh and not code we maintain, so you'd need to report that upstream. Jim Pingle

03:26 PM pfSense Packages Bug #15292 (Duplicate): Certificate renewal with 'dns_inwx.sh' not working: Error add txt for domain:_acme-challenge.foo.bar

Likely a duplicate of #14796 Jim Pingle

03:18 PM pfSense Packages Bug #12623 (Closed): acme.sh package | DNS-ISPConfig settings

This has been fixed for a long time now. Jim Pingle

03:16 PM pfSense Packages Bug #7453 (Closed): DNS-ovh need to save or display consumer key

This field has been in the GUI for years. Jim Pingle

03:15 PM pfSense Feature #15422 (Feedback): Show current boot method in System Information Dashboard widget

Applied in changeset commit:b891c3a33aff74f4ded6176a78b22ed84821036a. Jim Pingle

03:07 PM pfSense Feature #15422 (In Progress): Show current boot method in System Information Dashboard widget

Jim Pingle

01:44 PM pfSense Plus Bug #15421: Netgate 3100 boot loader lacks Lua support but is trying to read loader.conf.lua

Kris Phillips wrote in #note-2:
> Oddly, I'm getting a similar, but not the same error message on an x86 KVM VM. Se... Jim Pingle

01:35 PM pfSense Bug #15448: ``miniupnpd`` lacks IGDv2 support

The choice between v1 and v2 is a compile-time option so we can't make it a GUI selection, however, given the age of ... Jim Pingle

12:49 PM pfSense Bug #15442 (Resolved): CLI password check exits with a write access error when checking is a read-only operation

Jim Pingle

04/26/2024

07:59 PM pfSense Bug #15434 (Resolved): DNS Forwarder ignores "Use remote DNS Servers, ignore local DNS" setting

dylan mendez wrote in #note-6:
> This patch seems to work, however, I had to manually re-save the config on the Gene... Jim Pingle

05:59 PM pfSense Packages Bug #15365 (Resolved): pfBlockerNG PHP error when editing a list

PR merged, updated package should be available now on 24.03. Jim Pingle

04:01 AM pfSense Packages Bug #15444 (Duplicate): Since this update 24.03-RELEASE was installed, PFBlockerNG has not been functioning correctly.

Jim Pingle

04/25/2024

11:50 PM pfSense Packages Bug #15443 (Duplicate): PHP Crash: pfBlockerNG/DNSBL/DNSBL Groups, attempt to add list

Jim Pingle

07:48 PM pfSense Docs Todo #15436 (Closed): Update notes for if-bound state policy

I was thinking that but I wasn't certain if there was still some other issue hanging out there. I removed the note, i... Jim Pingle

05:52 PM pfSense Regression #15439: Incorrect icon on collapsed dashboard widgets

In source:src/usr/local/www/js/pfSenseHelpers.js#L486 the code that handles collapse/expand is adding/removing the fa... Jim Pingle

05:40 PM pfSense Bug #15440 (Feedback): CA certificates are not added to the Trust Store

Applied in changeset commit:27fc5a3020fe981b7a5bc98fc9b1660e8773fc7d. Jim Pingle

05:32 PM pfSense Bug #15440 (In Progress): CA certificates are not added to the Trust Store

Looks like the behavior of @certctl rehash@ changed and now it wipes out the contents of that directory when it did n... Jim Pingle

05:36 PM pfSense Docs Todo #15441 (Rejected): Update "Security Gateway Manual SG-2100", chapter 7

The current docs are already saying most of that -- the only new bits are the driver, which already says "if needed" ... Jim Pingle

05:30 PM pfSense Bug #15442 (Feedback): CLI password check exits with a write access error when checking is a read-only operation

Applied in changeset commit:90c4a2fe6db1bafc8bb4bc038cf3e3664ac6db47. Jim Pingle

05:23 PM pfSense Bug #15442 (Resolved): CLI password check exits with a write access error when checking is a read-only operation

When running @usermgrpasswd -c@ to check the current user password it exits with an error message saying the user lac... Jim Pingle

04/24/2024

07:57 PM pfSense Regression #15430: Interface-bound state policy does not handle IPsec VTI traffic as expected when filtering on ``enc0`` interface

I added notes about this to the docs about state policy in general (and in the release notes): https://docs.netgate.c... Jim Pingle

01:43 PM pfSense Regression #15430: Interface-bound state policy does not handle IPsec VTI traffic as expected when filtering on ``enc0`` interface

If you do not have **any** tunnel mode IPsec (no site to site tunnel mode P2s, no mobile IPsec) you could change the ... Jim Pingle

01:31 PM pfSense Regression #15430: Interface-bound state policy does not handle IPsec VTI traffic as expected when filtering on ``enc0`` interface

IPsec is fundamentally different in how it's handled compared to things like WireGuard/OpenVPN/OpenVPN+DCO. IPsec can... Jim Pingle

12:58 PM pfSense Regression #15430: Interface-bound state policy does not handle IPsec VTI traffic as expected when filtering on ``enc0`` interface

What type of IPsec VPN, policy-based or VTI? Since you mention BGP, I'm guessing VTI, but it needs to be confirmed.
... Jim Pingle

07:50 PM pfSense Bug #15434 (Feedback): DNS Forwarder ignores "Use remote DNS Servers, ignore local DNS" setting

Applied in changeset commit:247909ff5387200fb31c76f13e7702a8fbdc06f4. Jim Pingle

07:43 PM pfSense Bug #15434 (In Progress): DNS Forwarder ignores "Use remote DNS Servers, ignore local DNS" setting

OK, I can also reproduce this with the DNS Forwarder. I also have a fix coming. Looks like some parenthesis around th... Jim Pingle

05:31 PM pfSense Bug #15434 (Not a Bug): DNS Forwarder ignores "Use remote DNS Servers, ignore local DNS" setting

I can't reproduce that here.
Before:... Jim Pingle

06:17 PM pfSense Docs Todo #15432 (Closed): Feedback on Installing and Upgrading — Online Network Installer

This is corrected now, the document contains appropriate links to the relevant store pages.
Jim Pingle

04:02 PM pfSense Docs Todo #15432: Feedback on Installing and Upgrading — Online Network Installer

Yes, that is due to be replaced. Things are still settling into their final places but I can put in the current locat... Jim Pingle

06:16 PM pfSense Plus Regression #15433 (Resolved): ``smartmontools`` is not present on ARM builds (64 or 32 bit)

Looks good here.
Users don't need to reinstall or re-upgrade, they can fix it a couple different ways:
Either t... Jim Pingle

05:04 PM pfSense Plus Regression #15433 (Resolved): ``smartmontools`` is not present on ARM builds (64 or 32 bit)

The @smartmontools@ package is not present on 64-bit ARM builds (1100, 2100) or 32-bit ARM builds (3100). It is still... Jim Pingle

01:02 PM pfSense Bug #15431 (Duplicate): Interface Bound Firewall State Policy Breaks IPsec VTI

Usually states would only disappear like that if the traffic is not being matched in both directions and then times o... Jim Pingle

12:54 PM pfSense Plus Bug #15126 (Resolved): SG-1100 pfSense+ recovery results in non aligned disk slices

This may not have been fixed specifically but happens to be handled better in the new installer from the start. The o... Jim Pingle

04/23/2024

04:11 PM pfSense Bug #15299 (Resolved): Old auto-added MAC addresses are not pruned for non-concurrent Captive Portal sessions

Jim Pingle

04:11 PM pfSense Bug #15156 (Resolved): Fragmented packets delayed by limiters are lost

Jim Pingle

04:11 PM pfSense Regression #15076 (Resolved): DHCP leases may not be restored from older configuration backups

Jim Pingle

04:11 PM pfSense Bug #15032 (Resolved): Kea DHCP sends wrong bootloader file for UEFI

Jim Pingle

04:11 PM pfSense Feature #14728 (Resolved): Support for CD/DVD drives in the External Configuration Locator (ECL)

Jim Pingle

04:11 PM pfSense Regression #14431 (Resolved): Sending IPv6 traffic on a disabled interface can trigger a kernel panic

Jim Pingle

04:11 PM pfSense Bug #14312 (Resolved): MSS clamping on VPN traffic does not work on IPsec IPv6 mobile VPNs

Jim Pingle

04:11 PM pfSense Bug #14290 (Resolved): ICMPv6 Path MTU Discovery breaks with NPT

Jim Pingle

04:11 PM pfSense Todo #13263 (Resolved): Reduce log spam when deleting a static DHCP entry

Jim Pingle

04:11 PM pfSense Bug #13090 (Resolved): OpenVPN NetBIOS Node Type and Scope ID options are not pushed to clients

Jim Pingle

04:11 PM pfSense Feature #13085 (Resolved): OpenVPN NBDD server options

Jim Pingle

04:11 PM pfSense Bug #12947 (Resolved): Old IPv6 addresses may continue to be used after DHCP or RA changes

Jim Pingle

04:11 PM pfSense Bug #12920 (Resolved): Gateway behavior differs when the gateway does not exist in the configuration

Jim Pingle

04:11 PM pfSense Bug #12673 (Resolved): Firewall Logs Dashboard Widget is slow and may fail to update

Jim Pingle

04:11 PM pfSense Bug #9453 (Resolved): Reconfiguring a parent LAGG interface breaks its VLANs

Jim Pingle

04:10 PM pfSense Plus Regression #15387 (Resolved): Boot failure detection tripping on config reset button during boot

Jim Pingle

04:10 PM pfSense Plus Feature #15280 (Closed): Boot Environments 2.0

Closing, it's in the release, any issues can be opened separately going forward. Jim Pingle

12:30 PM pfSense Packages Feature #15427 (Duplicate): Create file that can be imported into the Wireguard Apps (on the Android, Windows etc)

Duplicate of #13469 Jim Pingle

12:29 PM pfSense Bug #15428 (Not a Bug): UI appears to put incorrect CARP parameters into the low level NIC configurations

A skew of 254 indicates a problem in your setup not a problem with how the settings were applied. Either they are in ... Jim Pingle

04/22/2024

04:45 PM pfSense Bug #15423 (Resolved): PHP error when applying interface settings if the ``/tmp/.interfaces.apply`` file is present but empty

If the @/tmp/.interfaces.apply@ file is present but empty it can lead to a PHP error when applying interface settings... Jim Pingle

03:27 PM pfSense Feature #15422 (Resolved): Show current boot method in System Information Dashboard widget

It would be helpful to include the contents of the @machdep.bootmethod@ sysctl in the System Information widget most ... Jim Pingle

04/19/2024

06:22 PM pfSense Docs Correction #15403 (Closed): openvpn client speciffic overrides, local networks clarification

Info added: https://gitlab.netgate.com/docs/pfSense-docs/-/commit/9011224272ea0934535d8530da838580f91c988b Jim Pingle

04/18/2024

07:42 PM pfSense Bug #15417 (Not a Bug): static mappings for the ISC DHCP IPv4 server are ignored when the IP Address field is left blank

Seems there is a bit of a misunderstanding. When you omit the IP address it's not a "static" mapping it's defining a ... Jim Pingle

12:12 PM pfSense Bug #15416 (Duplicate): Php Error when moving IPsec-Phase2 entries

Duplicate of #15157 and #15384 -- Both already fixed. Jim Pingle

04/17/2024

04:28 PM pfSense Feature #15415: Enhanced firewall log action information display

For users hitting #15400 who want to see the reason code ("ip-options" in that problem case), this diff will add it t... Jim Pingle

04:27 PM pfSense Feature #15415 (Resolved): Enhanced firewall log action information display

Currently hovering over the action icon on a firewall log entry shows a small tooltip with the action text and the ru... Jim Pingle

04/16/2024

03:01 PM pfSense Bug #15411: Hostname missing from logs in certain cases can cause the system log to display in an unexpected manner

Dug more into this and the problem is that somehow at boot the hostname was not being printed in the system logs on j... Jim Pingle

01:07 PM pfSense Bug #15411 (New): Hostname missing from logs in certain cases can cause the system log to display in an unexpected manner

With the system log set to show ~500 lines the system log tab will also show most if not all of the kernel boot messa... Jim Pingle

04/15/2024

05:59 PM pfSense Todo #15408 (New): Reduce inconsistencies between Configuration History with/without ZFS Boot Environments

The Configuration History page has diverged a bit between Plus w/Boot Environments and CE which is making it confusin... Jim Pingle

01:33 PM pfSense Docs New Content #15191 (Closed): Document new Packet Flow Data functionality (Plus Only)

Jim Pingle

12:29 PM pfSense Feature #15402: A new approach to rc.start_packages

It might be viable but you have the logic a bit backward. The base system should not have specific knowledge of any p... Jim Pingle

12:24 PM pfSense Bug #15405 (Needs Patch): leap seconds update server has changed

That file is part of the NTP package (@ntp.org@), Netgate does not maintain that code. It should be reported upstream... Jim Pingle