pfSense bugtracker: Issueshttps://redmine.pfsense.org/https://redmine.pfsense.org/favicon.ico?16780521162024-03-25T09:20:00ZpfSense bugtracker
Redmine pfSense Plus - Bug #15361 (New): Error in virtual IP aliases when using IPv6 "network" / "broadca...https://redmine.pfsense.org/issues/153612024-03-25T09:20:00ZMathis Cavalli
<p>There is no network address in IPv6, nor broadcasts like IPv4<br />When adding / editing an IP alias and putting there an address like fd00::/64 it shows the following error : "The network address cannot be used for this VIP" <br />It happened on my pfSense+ box but it seems the CE 2.7.2 is also affected.</p> pfSense Plus - Bug #15332 (New): Kea doesn't start without any logs when upload config with addit...https://redmine.pfsense.org/issues/153322024-03-12T13:17:13Zaleksei prokofiev
<p>If the config has additioan DHCP pool with extra parametrs configured, such default-lease-time or max-lease-time, then KEA won't start with out any logs. To fix that need delete from config those extra option. Or just resave affected pool without any changes, it will lead rewrite config without extra options. <br />For example <br /><pool><br /> <range><br /> <from>192.168.6.2</from><br /> <to>192.168.6.48</to><br /> </range><br /> <descr><![CDATA[NTP Server]]></descr><br /> <defaultleasetime>600</defaultleasetime><br /> <maxleasetime>3600</maxleasetime><br />After resave it will deleted<br /><pool><br /> <range><br /> <from>192.168.6.2</from><br /> <to>192.168.6.48</to><br /> </range><br /> <descr><![CDATA[NTP Server]]></descr><br /> <defaultleasetime></defaultleasetime><br /> <maxleasetime></maxleasetime></p> pfSense Plus - Bug #15316 (Confirmed): OpenVPN Clients with Gateway Group Interface on DHCP Exits...https://redmine.pfsense.org/issues/153162024-03-06T17:08:29ZKris Phillips
<p>By default with DHCP gateways, they are not populated into the config as <gateway_item>, but can be present in a <gateway_group>. Because of this, when assigning a gateway group to an OpenVPN client that has an interface go down in the current, active tier, OpenVPN will not properly fail over. Instead, it will hang for a long time, produce errors stating that it's "unable to bind" to the interface (because it's unplugged and the gateway disappears), give an error about being unable to delete a route, and then exits on "Error 1".</p>
<p>If you go into each gateway item under System --> Routing, edit the gateway items without making any changes, save, and apply, the gateways will become present in the config.xml, they'll show as "Pending" in gateway statuses (rather than disappearing entirely), and OpenVPN will fail over as expected.</p>
<p>Either we should be adding a <gateway_item> for each gateway that is present in a <gateway_group> or we should fix OpenVPN so that it doesn't bomb out when a gateway disappears rather than transitioning to Pending.</p> pfSense Plus - Bug #15303 (New): dpinger service does not always switch from Pending to Onlinehttps://redmine.pfsense.org/issues/153032024-03-02T17:07:07ZKris Phillips
<p>There are several situations where dpinger will not detect a gateway that is available when it should, forcing a restart of the dpinger service to "trigger" it to recheck.</p>
<p>Known situations, but there may be more:</p>
<p>1. Adding a new VTI tunnel as an interface<br />2. A release/renew of an IPv6 gateway (IPv4 gateway will show up, but IPv6 will not until a dpinger restart)<br />3. Adding an OpenVPN client/server as an interface</p>
<p>Related documentation redmine: <a class="external" href="https://redmine.pfsense.org/issues/15230">https://redmine.pfsense.org/issues/15230</a></p> pfSense Plus - Bug #15262 (New): Captive Portal Has High CPU Interrupts With Large Number of Usershttps://redmine.pfsense.org/issues/152622024-02-15T19:33:29ZKris Phillips
<p>When 700+ Captive Portal users are in use, CPU interrupts will cause high load averages to occur. This can lead to connectivity problems, such as packet loss on WAN uplinks, webConfigurator responsiveness issues, etc.</p>
<p>Tested with a customer who had load averages of 14-16 with Captive Portal on with 1400+ users. Once Captive Portal was turned off, load averages dropped to 0.5.</p>
<p>Load seems higher for Captive Portal when there is significant numbers of users since the transition to pf from ipfw.</p> pfSense Plus - Bug #15202 (New): Add Option for Network Portion of Subnet "Wildcard" for IPv6 Ruleshttps://redmine.pfsense.org/issues/152022024-01-27T22:28:27ZKris Phillips
<p>Filtering hosts with IPv6 is extremely difficult when utilizing an upstream provider that is providing a Prefix Delegation via DHCPv6 because the Prefix Delegation can change, which invalidates existing rules.</p>
<p>If there was a way to detect the interface PD for firewall rules, similar to how the DHCPv6 server currently detects the delegated prefix, users could assign rules based on only the host portion of the subnet and have the firewall filter rule automatically fill in the delegated prefix network ID portion before feeding it to pf.</p>
<p>This solves the following two scenarios:</p>
<p>1. A static DHCPv6 lease is assigned, but the delegated prefix changes<br />2. Clients configured via SLAAC typically will have the same host portion of an address, regardless of the network portion discovered by RAs, unless they are utilizing privacy extensions.</p>
<p>Obviously, this won't help in cases where SLAAC is used with RFC4941, but in many cases when creating rules like this it's possible to disable privacy extensions optionally in most operating systems.</p> pfSense Plus - Bug #15196 (Confirmed): AWS ena interfaces can become unstable/stop respondinghttps://redmine.pfsense.org/issues/151962024-01-27T01:01:22ZKris Phillips
<p>On AMD Epyc hardware in AWS, pfSense Plus ena interfaces can lose their IP addressing and then stop responding entirely.</p>
<p>The following log messages are present when this occurs:</p>
<p>Jan 16 18:34:35 np-aws-001 kernel: ena0: <ENA adapter> mem 0x80404000-0x80407fff at device 5.0 on pci0<br />Jan 16 18:34:35 np-aws-001 kernel: ena0: Elastic Network Adapter (ENA)ena v2.6.2<br />Jan 16 18:34:35 np-aws-001 kernel: ena0: Unable to allocate LLQ bar resource. LLQ mode won't be used.<br />Jan 16 18:34:35 np-aws-001 kernel: ena0: ena_com_validate_version() [TID:100000]: ENA device version: 0.10<br />Jan 16 18:34:35 np-aws-001 kernel: ena0: ena_com_validate_version() [TID:100000]: ENA controller version: 0.0.1 implementation version 1<br />Jan 16 18:34:35 np-aws-001 kernel: ena0: LLQ is not supported. Fallback to host mode policy.<br />Jan 16 18:34:35 np-aws-001 kernel: ena0: Ethernet address: 06:ba:32:98:fd:07<br />Jan 16 18:34:35 np-aws-001 kernel: ena0: [nm] netmap attach<br />Jan 16 18:34:35 np-aws-001 kernel: ena0: netmap queues/slots: TX 2/1024, RX 2/1024</p>
<p>and</p>
<p>Jan 19 03:49:07 kernel ena0: Found a Tx that wasn't completed on time, qid 1, index 925. 180522704 usecs have passed since last cleanup. Missing Tx timeout value 5000 msecs.<br />Jan 19 03:49:07 kernel ena0: Found a Tx that wasn't completed on time, qid 1, index 924. 179482704 usecs have passed since last cleanup. Missing Tx timeout value 5000 msecs.<br />Jan 19 03:49:07 kernel ena0: Found a Tx that wasn't completed on time, qid 1, index 923. 178472704 usecs have passed since last cleanup. Missing Tx timeout value 5000 msecs.<br />Jan 19 03:48:54 kernel ena0: Found a Tx that wasn't completed on time, qid 1, index 922. 167002704 usecs have passed since last cleanup. Missing Tx timeout value 5000 msecs.</p> pfSense Plus - Bug #15157 (Incomplete): Problem in Restore Backuphttps://redmine.pfsense.org/issues/151572024-01-12T23:35:22ZRamon Alonso Costa
<p>I am having the following issue when trying to update the DNS Resolver backup. Below is the file with the error.</p> pfSense Plus - Bug #15036 (Confirmed): Traffic Shaper Wizard Dedicated generates errorhttps://redmine.pfsense.org/issues/150362023-11-27T05:56:41ZAzamat Khakimyanov
<p>I can reproduce it on 23.01, 23.05_1 and 23.09</p>
<p>All the time I run <strong>Traffic Shaper Wizard Dedicated</strong> with HFSC queueing I got this message<br />__ There were error(s) loading the rules: pfctl: linkshare sc exceeds parent's sc - The line in question reads [0]:</p>
<p>Running <strong>Traffic Shaper Wizard Dedicated</strong> with PRIQ/CBQ queueing and running <strong>Traffic Shaper Wizard Multi All</strong> with HFSC queueing work normal (without any error message)</p>
<p>It might be the same issue as <a class="external" href="https://redmine.pfsense.org/issues/2308">https://redmine.pfsense.org/issues/2308</a>, which is 11y old.</p> pfSense Plus - Bug #15006 (New): Upgrade Issue to 23.09 Results in Stuck Prompt Mid-upgradehttps://redmine.pfsense.org/issues/150062023-11-17T19:50:02ZKris Phillips
<p>Symptom: <br />Devices get stuck at a "Enter full pathname of the shell or RETURN for /bin/sh:" prompt mid-upgrade. Rebooting the appliance causes it to be stuck at a "-sh: /etc/rc.initial: not found" prompt after asking for credentials.</p>
<p>This does not appear to be an arch problem as amd64 and aarch64 are both seemingly affected.</p>
<p>Relevant errors during bootup captured from an 1100 that failed to upgrade properly:</p>
<p>[113/168] Extracting php82-pear-Net_URL2-2.2.1: .......... done</p>
<p>Warning: foreach() argument must be of type array|object, null given in Command.php on line 249</p>
<p>Warning: foreach() argument must be of type array|object, null given in Command.php on line 249</p>
<p>Warning: foreach() argument must be of type array|object, null given in Command.php on line 249</p>
<p>Warning: foreach() argument must be of type array|object, null given in Command.php on line 249</p>
<p>Warning: foreach() argument must be of type array|object, null given in Command.php on line 249</p>
<p>Warning: foreach() argument must be of type array|object, null given in Command.php on line 249</p>
<p>Warning: foreach() argument must be of type array|object, null given in Command.php on line 249</p>
<p>Warning: foreach() argument must be of type array|object, null given in Command.php on line 249</p>
<p>Warning: foreach() argument must be of type array|object, null given in Command.php on line 249</p>
<p>Warning: foreach() argument must be of type array|object, null given in Command.php on line 249</p>
<p>Warning: foreach() argument must be of type array|object, null given in Command.php on line 249</p>
<p>Warning: Trying to access array offset on value of type null in Role.php on line 250</p>
<p>Warning: Trying to access array offset on value of type null in Role.php on line 251</p>
<p>Warning: Trying to access array offset on value of type null in Role.php on line 250</p>
<p>Warning: Trying to access array offset on value of type null in Role.php on line 251</p>
<p>Warning: Trying to access array offset on value of type null in Role.php on line 250</p>
<p>Warning: Trying to access array offset on value of type null in Role.php on line 251</p>
<p>Warning: Trying to access array offset on value of type null in Role.php on line 250</p>
<p>Warning: Trying to access array offset on value of type null in Role.php on line 251</p>
<p>Warning: Trying to access array offset on value of type null in Role.php on line 250</p>
<p>Warning: Trying to access array offset on value of type null in Role.php on line 251</p>
<p>Warning: Trying to access array offset on value of type null in Role.php on line 250</p>
<p>Warning: Trying to access array offset on value of type null in Role.php on line 251</p>
<p>Warning: Trying to access array offset on value of type null in Role.php on line 250</p>
<p>Warning: Trying to access array offset on value of type null in Role.php on line 251</p>
<p>Warning: Trying to access array offset on value of type null in Role.php on line 250</p>
<p>Warning: Trying to access array offset on value of type null in Role.php on line 251</p>
<p>Warning: Trying to access array offset on value of type null in Role.php on line 250</p>
<p>Warning: Trying to access array offset on value of type null in Role.php on line 251</p>
<p>Warning: Trying to access array offset on value of type null in Role.php on line 250</p>
<p>Warning: Trying to access array offset on value of type null in Role.php on line 251</p>
<p>Warning: Undefined array key "honorsbaseinstall" in Role.php on line 173</p>
<p>Warning: Undefined array key "honorsbaseinstall" in Role.php on line 173</p>
<p>Warning: Undefined array key "honorsbaseinstall" in Role.php on line 173</p>
<p>Warning: Undefined array key "honorsbaseinstall" in Role.php on line 173</p>
<p>Warning: Undefined array key "honorsbaseinstall" in Role.php on line 173</p>
<p>Warning: Undefined array key "honorsbaseinstall" in Role.php on line 173</p>
<p>Warning: Undefined array key "honorsbaseinstall" in Role.php on line 173</p>
<p>Warning: Undefined array key "honorsbaseinstall" in Role.php on line 173</p>
<p>Warning: Undefined array key "honorsbaseinstall" in Role.php on line 173</p>
<p>Warning: Undefined array key "honorsbaseinstall" in Role.php on line 173</p>
<p>Warning: Undefined array key "installable" in Role.php on line 139</p>
<p>Warning: Undefined array key "installable" in Role.php on line 139</p>
<p>Warning: Undefined array key "installable" in Role.php on line 139</p>
<p>Warning: Undefined array key "installable" in Role.php on line 139</p>
<p>Warning: Undefined array key "installable" in Role.php on line 139</p>
<p>Warning: Undefined array key "installable" in Role.php on line 139</p>
<p>Warning: Undefined array key "installable" in Role.php on line 139</p>
<p>Warning: Undefined array key "installable" in Role.php on line 139</p>
<p>Warning: Undefined array key "installable" in Role.php on line 139</p>
<p>Warning: Undefined array key "installable" in Role.php on line 139</p>
<p>Warning: Undefined array key "phpfile" in Role.php on line 204</p>
<p>Warning: Undefined array key "phpfile" in Role.php on line 204</p>
<p>Warning: Undefined array key "phpfile" in Role.php on line 204</p>
<p>Warning: Undefined array key "phpfile" in Role.php on line 204</p>
<p>Warning: Undefined array key "phpfile" in Role.php on line 204</p>
<p>Warning: Undefined array key "phpfile" in Role.php on line 204</p>
<p>Warning: Undefined array key "phpfile" in Role.php on line 204</p>
<p>Warning: Undefined array key "phpfile" in Role.php on line 204</p>
<p>Warning: Undefined array key "phpfile" in Role.php on line 204</p>
<p>Warning: Undefined array key "phpfile" in Role.php on line 204</p>
<p>Warning: Undefined array key "config_vars" in Role.php on line 46</p>
<p>Warning: Undefined array key "config_vars" in Role.php on line 46</p>
<p>Warning: Undefined array key "config_vars" in Role.php on line 46</p>
<p>Warning: Undefined array key "config_vars" in Role.php on line 46</p>
<p>Warning: Undefined array key "config_vars" in Role.php on line 46</p>
<p>Warning: Undefined array key "config_vars" in Role.php on line 46</p>
<p>Warning: Undefined array key "config_vars" in Role.php on line 46</p>
<p>Warning: Undefined array key "config_vars" in Role.php on line 46</p>
<p>Warning: Undefined array key "config_vars" in Role.php on line 46</p>
<p>Warning: Undefined array key "config_vars" in Role.php on line 46<br />XML Extension not found<br />pkg-static: POST-INSTALL script failed<br />[114/168] Installing boost-libs-1.82.0_1...<br />[114/168] Extracting boost-libs-1.82.0_1: .......pid 518 (pkg-static), jid 0, uid 0, was killed: failed to reclaim memory<br />Child process pid=518 terminated abnormally: Killed</p>
<blockquote><blockquote><blockquote>
<p>Unlocking package pfSense-pkg-aws-wizard... done.<br />Unlocking package pfSense-pkg-ipsec-profile-wizard... done.</p>
</blockquote></blockquote></blockquote>
<p>Fatal error: Uncaught Error: Call to undefined function gettext() in /etc/inc/certs.inc:48<br />Stack trace:<br />#0 /etc/inc/functions.inc(34): require_once()<br />#1 /etc/rc.ecl(25): require_once('/etc/inc/functi...')<br /><a class="issue tracker-1 status-3 priority-4 priority-default closed parent" title="Bug: Gateway not added when switching from DHCP to static (Resolved)" href="https://redmine.pfsense.org/issues/2">#2</a> {main}<br /> thrown in /etc/inc/certs.inc on line 48<br />Launching the init system...<br />Fatal error: Uncaught Error: Failed opening required 'Net/IPv6.php' (include_path='.:/etc/inc:/usr/local/pfSense/include:/usr/local/pfSense/include/www:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg:/usr/local/www/classes:/usr/local/www/classes/Form:/usr/local/share/pear:/usr/local/share/openssl_x509_crl/') in /etc/inc/util.inc:28<br />Stack trace:<br />#0 /etc/inc/config.lib.inc(29): require_once()<br />#1 /etc/inc/auth.inc(31): require_once('/etc/inc/config...')<br /><a class="issue tracker-1 status-3 priority-4 priority-default closed parent" title="Bug: Gateway not added when switching from DHCP to static (Resolved)" href="https://redmine.pfsense.org/issues/2">#2</a> /etc/inc/captiveportal.inc(29): require_once('/etc/inc/auth.i...')<br /><a class="issue tracker-1 status-3 priority-4 priority-default closed" title="Bug: VPN negation rules not added in 2.0 (Resolved)" href="https://redmine.pfsense.org/issues/3">#3</a> /etc/inc/service-utils.inc(25): require_once('/etc/inc/captiv...')<br /><a class="issue tracker-4 status-3 priority-4 priority-default closed" title="Todo: Remove hard coded VLAN supported interfaces list (Resolved)" href="https://redmine.pfsense.org/issues/4">#4</a> /etc/inc/pkg-utils.inc(26): require_once('/etc/inc/servic...')<br /><a class="issue tracker-4 status-3 priority-4 priority-default closed" title="Todo: Don't sync on every filter reload (Resolved)" href="https://redmine.pfsense.org/issues/5">#5</a> /etc/rc.bootup(27): require_once('/etc/inc/pkg-ut...')<br /><a class="issue tracker-1 status-3 priority-4 priority-default closed" title="Bug: Status -> Wireless display bugs (Resolved)" href="https://redmine.pfsense.org/issues/6">#6</a> {main}<br /> thrown in /etc/inc/util.inc on line 28<br />Starting CRON... done.</p>
<p>Fatal error: Uncaught Error: Call to undefined function gettext() in /etc/inc/certs.inc:48<br />Stack trace:<br />#0 /etc/inc/functions.inc(34): require_once()<br />#1 /etc/inc/notices.inc(26): require_once('/etc/inc/functi...')<br /><a class="issue tracker-1 status-3 priority-4 priority-default closed parent" title="Bug: Gateway not added when switching from DHCP to static (Resolved)" href="https://redmine.pfsense.org/issues/2">#2</a> /etc/inc/config.inc(51): require_once('/etc/inc/notice...')<br /><a class="issue tracker-1 status-3 priority-4 priority-default closed" title="Bug: VPN negation rules not added in 2.0 (Resolved)" href="https://redmine.pfsense.org/issues/3">#3</a> /etc/rc.start_packages(25): require_once('/etc/inc/config...')<br /><a class="issue tracker-4 status-3 priority-4 priority-default closed" title="Todo: Remove hard coded VLAN supported interfaces list (Resolved)" href="https://redmine.pfsense.org/issues/4">#4</a> {main}<br /> thrown in /etc/inc/certs.inc on line 48<br />.: cannot open /etc/rc.be_functions.sh: No such file or directory<br />Enter full pathname of shell or RETURN for /bin/sh:</p> pfSense Plus - Bug #14968 (New): Google LDAP fail to bindhttps://redmine.pfsense.org/issues/149682023-11-11T13:11:11ZLev Prokofev
<p>Even with a freshly created cert and Bind user login/pass it fails to bind with the message:</p>
<p><em>/system_authservers.php: ERROR! ldap_get_user_ous() could not bind to server.</em></p>
<p>It seems the TLS talk between the client and server went smoothly (packet capture attached)</p>
<p>Ticket for reference #2067635022</p> pfSense Plus - Bug #14894 (New): Password protected console login prompt does not render properly...https://redmine.pfsense.org/issues/148942023-10-18T19:47:24ZJim Pingle
<p>After resolving other console issues with the 4100/6100/8200 in <a class="issue tracker-1 status-3 priority-4 priority-default closed" title="Bug: Serial console output fails to render properly in certain cases on 4100, 6100, and 8200. (Resolved)" href="https://redmine.pfsense.org/issues/13455">#13455</a> a problem remains with the login prompt.</p>
<p>It is not printing a newline before the FreeBSD version string nor is it printing a newline before the password prompt:</p>
<pre>
[...])FreeBSD/amd64 (pfsense.home.arpa) (ttyu0)
login: rootPassword:
Netgate 4100 [...]
</pre>
<p>It should look like this:</p>
<pre>
FreeBSD/amd64 (pfsense.home.arpa) (ttyu0)
login: root
Password:
Netgate 4100 [...]
</pre>
<p>Changing the console type doesn't have any effect, nor does changing various aspects of the TTY (e.g. setting it to <code>xterm</code> or <code>cons25w</code> instead of <code>vt100</code>, or using <code>std</code> instead of <code>3wire</code>).</p> pfSense Plus - Bug #14824 (New): OpenVPN instance on IPv6 PPPoE interface does not always start a...https://redmine.pfsense.org/issues/148242023-09-30T01:13:08Zyon Liuinfo@ipv6china.com
<p>openvpn use ipv6 WAN, When pfsense restarts the system, openvpn ipv6 can't autostart. It must be started manually. After successful startup, the gateway corresponding to pfsense is not restored. The gateway must be manually resaved to restore it.</p> pfSense Plus - Bug #14401 (New): Changing from Switchport to Discrete Interface in VGA/Serial Con...https://redmine.pfsense.org/issues/144012023-05-21T02:29:00ZKris Phillips
<p>If you have an interface on a switchport device, like the 7100, and reassign the interface to a discrete interface like an igb interface using the VGA or Serial console, the Status --> Dashboard and Status --> Interfaces pages will continue to use the old switchport monitor setting until you save and apply the interface, thus always showing the port as down after moving the cable. Since the Interfaces --> WAN/LAN/OPT/etc selection does not show a port monitor setting if it's using a discrete interface, there is no way to eliminate it without just saving the interface and applying.</p> pfSense Plus - Bug #14005 (New): SFP Interfaces not available with Traffic Shaper in v23.01https://redmine.pfsense.org/issues/140052023-02-21T13:45:15ZBrendon Flint
<p>I have dual Netgate 1541 in HA mode. The SFP interfaces LAN (cxl1) and WAN (cxl0) are not available for configuration in v23.01. If I boot one of the Netgate's in to v22.05, both interfaces are available for configuration, but not when it boots to v23.01.</p>
<p>The problem exists with both Netgate 1541.</p>