pfSense » pfSense Plus

Steps to reproduce.

1. Use boot environments I went to test out 23.09 again with the latest Snort update. I started that environment and installed my latest config file. Once packages installed and Snort activated I lost access to the GUI menu. I rebooted and disabled Snort blocking and it worked.

2. Go back to the stable version 23.05.01 the version where snort works with the old .12 snort without core dumps.

3. Attempted to change a rule from wifi interface pcie card to block guest WiFi to secure side interference from address to subnet.

4. Safe and go back to snort check blocks restarted snort on WAN.

5. Log out

6. I logged in and lost GUI it would not log in anymore for 23.05.01.

7. Restore old config fix ACL rule and GUI restored for stable version 23.05.01 with Snort .12

23.09 is not stable for Snort it just doesn't work with it on ARM.

took from 2019 until 23.05.01 for this to be stable

23.09 on arm processor is not stable with Snort active .14 version

None of that is relevant if you cannot reproduce the PHP error while you are on a stock/unmodified 23.09. If you only see the PHP error on 23.05.1 then it's probably already been fixed.

Thank you open source community for all you do.

wrt snort, the issue with killing states is resolved; see https://forum.netgate.com/topic/184112/important-snort-and-suricata-package-announcement-probable-bug-in-legacy-blocking-module

I had to uninstall Snort to access the web GUI. It does not work for my configuration you see above at all. I am stuck with 23.05.01 that's ok that is the most stable version I have ever had on the SG2100. I think that is where my system will die at. I can not get past the SNORT issues, they are so bad it blocks me from even accessing the GUI. I accessed it with console I was able to remove SNORT package and it has GUI access again. However many devices will no longer connect to the firewall with the 23.09 version. Thanks for looking into this I suspect this is an ARM processor issue for SNORT. I can no longer move past 23.05.01 that is it for me. I posted this to showcase how good it was and how the new version no longer is functional at all.

NogBadTheBad
also stated issues with the ".14 fix" Snort update however the thread was locked right after he reported it. I also state it is not fixed

https://forum.netgate.com/topic/184377/4-1-6_14-snort-23-09-issue-arm

TAC ticket number is: 2113707645

23.05.01 with squid was the everything bagel of open source community firewall software... 🥯