Activity
From 06/30/2016 to 07/29/2016
07/28/2016
-
12:08 PM Bug #6655 (Not a Bug): Installing sudo package breaks webGUI system update capabilities and Package Manager on 2.3.1-RELEASE-p1
- The problem isn't the sudo package at all. It's that pkg was upgraded and the GUI doesn't understand the output of th...
-
11:57 AM Bug #6655: Installing sudo package breaks webGUI system update capabilities and Package Manager on 2.3.1-RELEASE-p1
- I forgot to mention that removing the sudo package via ssh had no change aside from removing the package, the bugs st...
-
11:56 AM Bug #6655 (Not a Bug): Installing sudo package breaks webGUI system update capabilities and Package Manager on 2.3.1-RELEASE-p1
- After installing the *sudo* package through the System > Package Manager menu, our firewalls are no longer able to ch...
-
11:24 AM Bug #6654: siproxyd Table issue
- System: Netgate SG-2440 (amd64)
-
11:20 AM Bug #6654 (Resolved): siproxyd Table issue
- Under services-> siproxyd -> Registered phones
Table is not aligned correctly and not showing correct number of re... -
12:20 AM Feature #6651: Loopback interfaces
- For dynamic routing protocol.
As example border router supply originate option ( default gateway ) and use of lo* to...
07/27/2016
-
10:50 PM Feature #6651: Loopback interfaces
- I'm curious, what use case do you have for additional lo* interfaces?
-
10:31 PM Feature #6651: Loopback interfaces
- major think is create additional lo* interface as right now we can define LAN or WAN.
-
10:10 PM Feature #6651: Loopback interfaces
- you can already do that with virtual IPs on localhost. That doesn't allow cloning lo0 to lo1, though I don't think an...
-
09:44 PM Feature #6651: Loopback interfaces
- Assign additional ip addresses like...
-
09:11 PM Feature #6651: Loopback interfaces
- manipulate loopback interfaces in what way? You can already set static routes to lo0 to null route, and add VIPs on l...
-
08:59 PM Feature #6651 (Resolved): Loopback interfaces
- Hello Everyone,
I would like place request add ability manipulate loopback interfaces through web ui.
Use cases wh...
07/25/2016
-
10:24 AM Feature #5434: Let's Encrypt pfSense support
- Sory, but now it's working via some simple manual steps...
https://thedevops.party/lets-encrypt-ssl-certificate-on...
07/24/2016
-
06:16 PM Feature #6196 (Closed): APU2 Thermal sensor
- patch is already upstream (by us, not OPNsense).
-
01:19 AM Feature #6196: APU2 Thermal sensor
- This has already been committed upstream:
https://github.com/freebsd/freebsd/commit/cf2857955cc43bf478bbb4716641d1...
07/21/2016
-
09:50 PM Bug #6636 (Resolved): Squid Reverse Proxy with Additional IP and compatibility="Intermediate" writes bad squid.conf
- I use a CARP config, actual IP on this box is x.x.x.135, Virtual IP x.x.x.133. When compatibility="Intermediate" the...
07/20/2016
-
07:55 PM Bug #6632 (Confirmed): siproxd hosts_allow_reg should be configurable
- if you open siproxd on WAN in firewall rules, you get what you're asking for security-wise. No shortage of potential ...
-
05:09 PM Bug #6632 (Resolved): siproxd hosts_allow_reg should be configurable
- siproxd is providing a configuration option "hosts_allow_reg" which
implements a positive access control list for ho... -
10:44 AM Todo #6443 (Resolved): Add ntopng package back into pfSense 2.3.x
- ntopng will be in the pfSense 2.3.2 release. New tickets should be opened if there are issues with the package upon r...
07/18/2016
-
07:44 PM Bug #6571: NUT service can not start sometimes after boot when SNMP UPS interface is down
- The new NUT package allows for a nut supported way to retry the startup of the driver.
07/15/2016
-
05:50 PM Feature #6204: Integrate ntopng with pfSense - assistance required by ntopng developer
- Wow, this would be incredible (being able to mark traffic based on ntop filters) - did not even know that was theoret...
-
05:04 AM Bug #6616 (Duplicate): Client Export list empty when using intermediate CA
- Certificate setup:
A Root CA which has signed a VPN CA certificate.
This VPN CA signed the VPN server certificate... -
04:29 AM Bug #6571: NUT service can not start sometimes after boot when SNMP UPS interface is down
- I think the reason why this feature is not implemented by NUT team is because it should be implemented on the OS side...
07/14/2016
-
11:27 PM Bug #6571: NUT service can not start sometimes after boot when SNMP UPS interface is down
- I've taken a look at this, and this behavior appears to be an intentional choice on the part of the NUT team. I agree...
-
10:38 PM Feature #3685 (Resolved): haproxy listener ip from alias
-
02:11 PM Todo #6443: Add ntopng package back into pfSense 2.3.x
- Rich Murphey wrote:
> I've installed snapshot 2.3.2.a.20160606.1543, and ntopng via the web UI package manager.
>
...
07/13/2016
-
07:43 PM Bug #6612: squid Multi segmented downloading is broken
- likely an issue in squid itself that should be reported there. They don't seem fond of download managers
-
07:22 PM Bug #6612 (Closed): squid Multi segmented downloading is broken
- it looks like that squid Multi segmented downloading is broken again in squid.
TCP_MISS_ABORTED/206
It was fixe... -
01:49 AM Todo #6443: Add ntopng package back into pfSense 2.3.x
- I'm still having the issue with ntopng not restarting after a reboot, with the following errors in the log.
Jul 13... -
01:40 AM Feature #6204: Integrate ntopng with pfSense - assistance required by ntopng developer
- Hi
I think this ticket is different to #6443.
#6443 is simply about getting ntopng back into pfSense 2.3, follo...
07/12/2016
-
11:08 PM Bug #4634 (Resolved): Still broken openbgpd config generation logic in 2.2
- fixed last year
-
11:07 PM Bug #3605 (Closed): Dansguardian not saving groups config files with correct PICS paths.
- package no longer exists, and Dansguardian itself is not maintained
-
11:07 PM Bug #3439 (Closed): TFTP - cannot start or restart from Status -> Services
- package no longer exists
-
11:00 PM Bug #2920 (Not a Bug): OSPF on interfaces with IP Alias and carp unpredictable
-
10:53 PM Feature #6204 (Duplicate): Integrate ntopng with pfSense - assistance required by ntopng developer
- duplicate of #6443
-
05:23 AM Bug #6603: pfblockerng's Unbound modifications leave system broken post-config restore
- Oh, and - the original problem is much worse on nanobsd - no config restore needed. This breaks on every system upgra...
-
05:17 AM Bug #6603: pfblockerng's Unbound modifications leave system broken post-config restore
- Rather than such ad hoc hacks - cannot we get something like the sanity checking from pfBNG to Unbound itself? Like, ...
07/11/2016
-
11:19 PM Bug #6603: pfblockerng's Unbound modifications leave system broken post-config restore
- It can get complicated if a user adds other *include: /blah/blah.conf* lines, but splits it into two lines.... For th...
-
11:13 PM Bug #6603: pfblockerng's Unbound modifications leave system broken post-config restore
- Yes, this is a known issue... I can't fix it in the package as it needs to be addressed in unbound.inc.
I can add ... -
05:22 PM Bug #6603 (Resolved): pfblockerng's Unbound modifications leave system broken post-config restore
- pfblocker's "include: /var/unbound/pfb_dnsbl.conf" in the Unbound config leaves you with a broken system after config...
07/09/2016
-
02:31 PM Bug #6592: squid does NOT use EDH and EECDH cipher suites because "tls-dh" is not configured and so these ciphers are silently dropped - see squid documentation
- Seems to focus oon reverse proxy only.
-
12:56 PM Bug #6592: squid does NOT use EDH and EECDH cipher suites because "tls-dh" is not configured and so these ciphers are silently dropped - see squid documentation
- Already covered by https://github.com/pfsense/FreeBSD-ports/pull/110 when someone gets to it.
-
11:05 AM Bug #6592 (Resolved): squid does NOT use EDH and EECDH cipher suites because "tls-dh" is not configured and so these ciphers are silently dropped - see squid documentation
- Here it is documented how "http_port" can be configured:
http://www.squid-cache.org/Doc/config/http_port/
EDH and... -
12:48 PM Feature #6593: squid: allow user to configure DH key size, SINGLE_DH_USE, NO-SSLv3, Cipher-Suites - performance improvement hint
- Alexander Wilke wrote:
> For the user it would be good to have the possibility to modify "NO_SSLv3" using the WebUI ... -
11:18 AM Feature #6593 (Resolved): squid: allow user to configure DH key size, SINGLE_DH_USE, NO-SSLv3, Cipher-Suites - performance improvement hint
- Squid has some additional options set like:
options=NO_SSLv2,NO_SSLv3,SINGLE_DH_USE (and should have "SINGLE_ECDH_...
07/08/2016
07/07/2016
-
08:34 AM Bug #5713 (Rejected): SSHDCond package broken - Incorrect path in /etc/sshd file
- sshdcond package was deprecated in pfSense 2.3
-
01:12 AM Bug #6246 (Resolved): pfBlockerNG - filter rule error if all entries in a block list de-dupe out
- thanks BBcan
07/06/2016
-
11:19 PM Bug #6246: pfBlockerNG - filter rule error if all entries in a block list de-dupe out
- Can be closed
-
08:07 PM Todo #6443 (Assigned): Add ntopng package back into pfSense 2.3.x
-
12:51 AM Bug #6084: Snort custom rule page does not update on apply
- Thanks Bill
-
12:51 AM Bug #6084 (Resolved): Snort custom rule page does not update on apply
07/02/2016
-
12:11 PM Bug #6571 (Resolved): NUT service can not start sometimes after boot when SNMP UPS interface is down
- If NUT is started with SNMP UPS configured and UPS network or card is currently down, an error message appears
"ER...
07/01/2016
-
12:26 AM Feature #6141: Convert apcupsd package to 2.3
- I'm working on catching up on PRs, this one coming soon.
06/30/2016
-
11:49 PM Feature #6141: Convert apcupsd package to 2.3
- Apparently someone has updated the package and it's been waiting on approval here for over a month: https://github.co...
-
09:14 PM Bug #5511 (Feedback): quagga zebra.conf and openvpn interface
- fix pushed
-
09:05 AM Feature #6555: Support IEEE 1588
- See also [[https://redmine.pfsense.org/issues/6554]]
-
09:01 AM Feature #6555: Support IEEE 1588
- Here is how I get around the lack of GUI integration at the moment.
(Requires mode7 support on loopback is re-enable... -
02:46 AM Bug #6562: Bug/Wrong description in the squid settings
- Screenshot Author: http://docs.diladele.com/
-
02:39 AM Bug #6562 (Not a Bug): Bug/Wrong description in the squid settings
- I think there is a wrong description or maybe a bug in the "certificate adapt" option in the squid https settings. He...
-
02:41 AM Bug #6563 (Resolved): Squid still accepts sha1 certificates
- Squid still accepts sha1 certificates.(Man in the middle proxy) I think this should be blocked by default for securit...
Also available in: Atom