pfSense » pfSense Packages

12/14/2016

08:54 AM Bug #7009: syslog_ng Log Viewer page didn't get converted to the new 2.3 bootstrap

https://github.com/pfsense/FreeBSD-ports/pull/278 Kill Bill

12/13/2016

12:51 PM Bug #7009 (Resolved): syslog_ng Log Viewer page didn't get converted to the new 2.3 bootstrap

It is not as noticeable on the default theme, but shows up on the dark theme.
page url: syslog-ng_log_viewer.php Jared Dillard

12/12/2016

05:54 AM Bug #6999 (Feedback): ntopng missing preferences menu

PR has been merged, thanks! Renato Botelho

04:19 AM Feature #6480: pfBlockerNG - add ability to force download of a list

Hi - would it be possible to revisit this please? The issue with the method proposed above is that, for a long list,... Andrew -

12/11/2016

09:06 AM Bug #6999: ntopng missing preferences menu

https://github.com/pfsense/FreeBSD-ports/pull/226 Kill Bill

12/10/2016

09:43 AM Feature #7000 (Closed): ntopng historical data needs to be reworked

Reference:
- http://www.ntop.org/ntopng/exploring-historical-data-using-ntopng/
- http://www.ntop.org/ntopng/explor... Kill Bill

05:55 AM Bug #6999: ntopng missing preferences menu

Unable to submit anything via GitHub (server error 500 since yesterday). If it works for someone:... Kill Bill

05:20 AM Bug #6999 (Resolved): ntopng missing preferences menu

This is caused by the admin user not being a member of "administrator" group. Related forum thread: https://forum.pfs... Kill Bill

12/09/2016

11:11 PM Bug #6983: pfBlockerNG-2.1.1_4 requires xmlrpc.inc which is removed or moved

Angel Torres, best to post in the forum for that... Not related to this issue..
Maybe this is causing your issue? ... BBcan177 .

05:21 PM Bug #6987: ntopng needs Google API key for GeoIP map

Result after patching:
!https://s30.postimg.org/m3vi0pxy9/ntopng_geomap.png! Kill Bill

05:18 PM Bug #6987: ntopng needs Google API key for GeoIP map

Well... this additionally need a patch to the ntopng port itself (basically the one from https://github.com/ntop/ntop... Kill Bill

03:51 PM Bug #6987: ntopng needs Google API key for GeoIP map

Please, test the attached patch and report back. (Would like to submit a PR on GitHub, however the only thing that Gi... Kill Bill

09:44 AM Bug #6971 (Closed): Interfaces.php: "Reserved Networks" checkboxes not shown

This issue appears to be limited to FireFox, but also seems to be fixed on pfSense 2.3.3 and later. Anonymous

09:44 AM Feature #4548 (Resolved): syslog-ng interface doesn't allow rule ordering

Renato Botelho

09:06 AM Feature #4548: syslog-ng interface doesn't allow rule ordering

Works. Kill Bill

09:17 AM Bug #6047 (Resolved): syslog-ng does not logrotate

Renato Botelho

08:58 AM Bug #6047: syslog-ng does not logrotate

All working now. Kill Bill

09:17 AM Bug #4518 (Closed): Pfsense 2.2 squid3 + negotiate_kerberos_auth

Renato Botelho

08:57 AM Bug #4518: Pfsense 2.2 squid3 + negotiate_kerberos_auth

2.2.x packages are not maintained, please close. Kill Bill

12/07/2016

08:06 PM Bug #6983: pfBlockerNG-2.1.1_4 requires xmlrpc.inc which is removed or moved

BBcan177 . wrote:
> Workaround here:
> https://forum.pfsense.org/index.php?topic=120040.0
>
That workaround do... Angel Torres

12/06/2016

02:04 PM Bug #5524: bind package is patching /etc/inc/system.inc (syslog configuration)

That was fast, thanks. :) Kill Bill

01:45 PM Bug #5524 (Feedback): bind package is patching /etc/inc/system.inc (syslog configuration)

PRs have been merged. Thanks! Renato Botelho

09:43 AM Bug #5524: bind package is patching /etc/inc/system.inc (syslog configuration)

Plus https://github.com/pfsense/FreeBSD-ports/pull/223 Kill Bill

09:10 AM Bug #5524: bind package is patching /etc/inc/system.inc (syslog configuration)

https://github.com/pfsense/pfsense/pull/3254 Kill Bill

11:37 AM Bug #6473 (Resolved): OpenVPN Client Export package - depends on vulnerable p7zip version (CVE-2016-2334, CVE-2016-2335)

Jim Pingle

11:36 AM Bug #6473 (Rejected): OpenVPN Client Export package - depends on vulnerable p7zip version (CVE-2016-2334, CVE-2016-2335)

Not vulnerable to those. It was patched in the ports tree by FreeBSD back in July.... Jim Pingle

10:05 AM Feature #6176: Privilege for OpenVPN Client Export

Alexandre Paradis wrote:
> Would it be logical to Have a dropdown menu directly for Openvpn, and when clicked it wou... Kill Bill

09:23 AM Bug #5940 (Resolved): Squid Local Authentication fails with passwords >8 characters

Jim Pingle

09:22 AM Bug #5940: Squid Local Authentication fails with passwords >8 characters

Hi Jim,
I´ve tested with a recent version of the Squid package on amd64 and i386 (I know i386 is nearly dead).
Bo... Markus Brungs

08:17 AM Bug #5940 (Feedback): Squid Local Authentication fails with passwords >8 characters

Jim Pingle

08:09 AM Bug #5940: Squid Local Authentication fails with passwords >8 characters

Appears to be fixed: https://github.com/pfsense/FreeBSD-ports/blob/devel/www/pfSense-pkg-squid/files/usr/local/pkg/sq... Kill Bill

08:47 AM Bug #6484 (Rejected): pfsense 2.3.1_1 does not accept haproxy advanced parameters

Jim Pingle

08:46 AM Bug #6484: pfsense 2.3.1_1 does not accept haproxy advanced parameters

OSI layer-8 problem as noted above, can be closed. Kill Bill

08:01 AM Bug #6019 (Closed): Squid service runs but doesn't process requests after reboot

Jim Pingle

07:58 AM Bug #6019: Squid service runs but doesn't process requests after reboot

Duplicate of #5594. Squid won't work with CP. Kill Bill

07:56 AM Bug #6636 (Feedback): Squid Reverse Proxy with Additional IP and compatibility="Intermediate" writes bad squid.conf

Jim Pingle

07:50 AM Bug #6636: Squid Reverse Proxy with Additional IP and compatibility="Intermediate" writes bad squid.conf

Fixed by https://github.com/pfsense/FreeBSD-ports/commit/a6d15b81474396a043df664c2c645356d7718601 AFAICT, please test... Kill Bill

07:56 AM Bug #6612 (Closed): squid Multi segmented downloading is broken

Jim Pingle

07:46 AM Bug #6612: squid Multi segmented downloading is broken

In case you enabled "Cache Dynamic Content" and defined something there, then either disable it altogether or pick up... Kill Bill

07:27 AM Bug #5736 (Closed): Squid did not authorize user with Captive Portal

Jim Pingle

07:18 AM Bug #5736: Squid did not authorize user with Captive Portal

No idea what's this patching, certainly not the current code @ https://github.com/pfsense/FreeBSD-ports/blob/devel/ww... Kill Bill

07:25 AM Bug #6083: Suqid Realtime Monitor / Squid Cache Table not diplaying correctly

I have no idea why's Squidguard logging something into Squid cache log. This is not a bug in Squid package, and given... Kill Bill

07:16 AM Bug #5506 (Closed): Gateway restart stops service and does not restart Squid

Jim Pingle

07:09 AM Bug #5506: Gateway restart stops service and does not restart Squid

Please close this. With Squid disabled, it won't ever start, let alone automatically restart. Kill Bill

06:41 AM Bug #6419 (Resolved): RRD_Summary reports incorrect bandwidth statistics.

Renato Botelho

06:34 AM Bug #6419: RRD_Summary reports incorrect bandwidth statistics.

Fixed by https://github.com/pfsense/FreeBSD-ports/pull/185, can be closed. Kill Bill

01:57 AM Bug #6988 (New): SNORT Package PHP memory error

Crash report begins. Anonymous machine information:
amd64
10.3-RELEASE-p9
FreeBSD 10.3-RELEASE-p9 #1 5fc1b... Zeev Zalessky

12/05/2016

10:42 PM Bug #6987 (Closed): ntopng needs Google API key for GeoIP map

ntopng needs to be updated to a version that supports use of a Google API key and the ntopng settings page needs a fi... Stuart Wyatt

08:46 PM Bug #6983: pfBlockerNG-2.1.1_4 requires xmlrpc.inc which is removed or moved

Workaround here:
https://forum.pfsense.org/index.php?topic=120040.0
Will try to push a fix as time permits. BBcan177 .

04:03 AM Bug #6983 (Resolved): pfBlockerNG-2.1.1_4 requires xmlrpc.inc which is removed or moved

Hello,
I'm testing 2.4-BETA x64. Faced an issue with subject package installation:
@Warning: require_once(xmlrpc.... Dmitriy K

01:59 PM Bug #3962: LADVD interface handling issues with lagg and bridge

As noted in the linked commit, it's not fixable in any reasonable way: https://github.com/pfsense/FreeBSD-ports/commi... Kill Bill

01:59 PM Bug #6389 (Resolved): Suricata typo under interface rules tab

Jim Pingle

01:53 PM Bug #6389: Suricata typo under interface rules tab

Fixed in 3.0_10, please close. Kill Bill

01:52 PM Bug #5515 (Closed): Squid3 change log URL leads to a 404 error

Jim Pingle

01:51 PM Bug #5515: Squid3 change log URL leads to a 404 error

Obsolete unmaintained 2.2.x stuff, please close. Kill Bill

12/04/2016

05:42 PM Bug #6378: inline background styles in squidguard package

Anyone filling bugs about this package should consider a bounty to get it rewritten from scratch. I guess nothing sho... Kill Bill

06:24 AM Bug #6473: OpenVPN Client Export package - depends on vulnerable p7zip version (CVE-2016-2334, CVE-2016-2335)

Bump, this is still not fixed. Please, upgrade to 16.02. Kill Bill

12/02/2016

09:24 AM Bug #6878 (Resolved): how to use snort, squid and squid_guard with a ram disk

Seems to be working. Jim Pingle

11/30/2016

10:45 PM Feature #4548: syslog-ng interface doesn't allow rule ordering

Thanks, that's a better solution. ;) Kill Bill

07:04 AM Feature #4548 (Feedback): syslog-ng interface doesn't allow rule ordering

I've pushed a fix Renato Botelho

07:06 AM Bug #6547 (Feedback): syslog-ng log browser only shows the first few lines

PR has been merged Renato Botelho

04:05 AM Bug #6763: Squid ClamAv wrong redirect URL

Frank Pineau wrote:
> I'm seeing the same redirect behavior.
Exact my problem.
So please reopen the issue. @... Richard Eberhard

11/29/2016

07:34 PM Bug #6763: Squid ClamAv wrong redirect URL

I'm seeing the same redirect behavior. I can confirm that changing the GUI does update the squidclamav.conf file as i... Frank Pineau

10:50 AM Bug #6603: pfblockerng's Unbound modifications leave system broken post-config restore

It's still a problem on 2.3 and 2.4... Jim Pingle

11/28/2016

10:09 PM Bug #6968: Snort VRT Rules Fail to automatically update SSL read error

Well, apparently not a package bug. Kill Bill

05:31 PM Bug #6968: Snort VRT Rules Fail to automatically update SSL read error

Kill Bill wrote:
> You have pfBNG installed and Amazon S3 blocked?
Nope only package I have installed is snort.
... rub man

09:43 AM Bug #6968: Snort VRT Rules Fail to automatically update SSL read error

You have pfBNG installed and Amazon S3 blocked? Kill Bill

08:54 AM Bug #6968 (Rejected): Snort VRT Rules Fail to automatically update SSL read error

pfsense version: 2.3.2-RELEASE-p1 (amd64)
Snort Version: 3.2.9.1_14
Automatic update fails with following errors... rub man

09:14 PM Bug #6971 (Closed): Interfaces.php: "Reserved Networks" checkboxes not shown

Using Windows 10 snap window function to resize Firefox to half the display size causes the checkboxes on Reserve Net... Bart K

08:57 PM Bug #6603: pfblockerng's Unbound modifications leave system broken post-config restore

JimP, please verify, and if not valid, close.
If valid, please hand-off to bbcan117 Jim Thompson

11/27/2016

06:31 PM Bug #6763: Squid ClamAv wrong redirect URL

And as for "the GUI does nothing":
!https://s15.postimg.org/fk5zywtsr/clamav_redirect_empty.png!... Kill Bill

06:04 PM Bug #6763: Squid ClamAv wrong redirect URL

The default URL is set to the pfSense GUI URL on package install. Simply because that's the only sensible default. Th... Kill Bill

02:40 PM Bug #6763: Squid ClamAv wrong redirect URL

See: https://forum.pfsense.org/index.php?topic=115323.0 Richard Eberhard

02:39 PM Bug #6763: Squid ClamAv wrong redirect URL

Kill Bill wrote:
> Richard Eberhard wrote:
> > I also tried adding a redirect command in the custom squid config: n... Richard Eberhard

08:28 AM Bug #6763 (Not a Bug): Squid ClamAv wrong redirect URL

Jim Pingle

04:08 AM Bug #6763: Squid ClamAv wrong redirect URL

No bug here, let alone "very high" severity, can be closed. This is configurable in the GUI as shown above. Kill Bill

05:53 PM Bug #6562: Bug/Wrong description in the squid settings

Yes, set CN property surprisingly sets CN property. Sigh. Because that's exactly the purpose of the feature. Set != s... Kill Bill

02:46 PM Bug #6562: Bug/Wrong description in the squid settings

Kill Bill wrote:
> Sorry, but browser thinking a certificate is valid when it's not is NOT a Squid issue. Stop doing... Richard Eberhard

08:30 AM Bug #6562 (Not a Bug): Bug/Wrong description in the squid settings

Jim Pingle

04:16 AM Bug #6562: Bug/Wrong description in the squid settings

Sorry, but browser thinking a certificate is valid when it's not is NOT a Squid issue. Stop doing HTTPS MITM if you h... Kill Bill

08:34 AM Bug #5701 (Not a Bug): Sarg does not delete cron entry

Jim Pingle

08:04 AM Bug #5701: Sarg does not delete cron entry

Ale Feltes wrote:
> I can't see issue's status control. I can only add comments.
That was aimed @pfSense guys. :) Kill Bill

07:06 AM Bug #5701: Sarg does not delete cron entry

I can't see issue's status control. I can only add comments. Ale Feltes

04:35 AM Bug #5701: Sarg does not delete cron entry

Package no longer exists in 2.3+, use lightsquid.
Please, close.
Kill Bill

08:34 AM Bug #3986 (Closed): BandwidthD can break php-fpm in unknown rare edge case

Jim Pingle

04:56 AM Bug #3986: BandwidthD can break php-fpm in unknown rare edge case

Package gone, please close. Kill Bill

08:33 AM Feature #2170 (Closed): Enable AirPrint mdns via Avahi

Jim Pingle

04:43 AM Feature #2170: Enable AirPrint mdns via Avahi

This already works with Avahi as noted above. Please, close this. Kill Bill

08:32 AM Bug #4676 (Rejected): Avahi & .local domain in config file

Jim Pingle

04:41 AM Bug #4676: Avahi & .local domain in config file

Cannot be reproduced plus concerns obsolete 2.2.x PBI stuff.
Please, close. Kill Bill

08:31 AM Bug #4301 (Closed): arpwatch not sending email reports on 2.2

Jim Pingle

04:37 AM Bug #4301: arpwatch not sending email reports on 2.2

Package no longer exists in 2.3+, please close. Kill Bill

08:31 AM Feature #6141 (Resolved): Convert apcupsd package to 2.3

Jim Pingle

04:33 AM Feature #6141: Convert apcupsd package to 2.3

Been already done, can be closed.
https://github.com/pfsense/FreeBSD-ports/commits/devel/sysutils/pfSense-pkg-apcupsd Kill Bill

08:30 AM Bug #6252 (Not a Bug): Can't access darkstat if webgui is on HTTPS.

Jim Pingle

04:25 AM Bug #6252: Can't access darkstat if webgui is on HTTPS.

Darkstat does not support HTTPS. Cannot be fixed in the package. The issue is HSTS headers set by pfSense nginx. Best... Kill Bill

08:30 AM Bug #6485 (Rejected): Squid garbage collection is a blocking thread and stops all network traffic

Jim Pingle

04:20 AM Bug #6485: Squid garbage collection is a blocking thread and stops all network traffic

Upstream bug tracker for Squid is at http://bugs.squid-cache.org/describecomponents.cgi?product=Squid - the pfSense p... Kill Bill

08:29 AM Bug #6497 (Closed): Squid3 web GUI page not saving settings for users in custom system privileged groups in v 2.2.2

Jim Pingle

04:13 AM Bug #6497: Squid3 web GUI page not saving settings for users in custom system privileged groups in v 2.2.2

2.2.x is dead, plus this would not be a Squid package bug at all. Please, close this. Kill Bill

08:28 AM Bug #6814 (Not a Bug): pfBlockerNG cannot define table pfB_Europe_v6 after pfsense upgrade to 2.3.2-RELEASE (amd64)

Jim Pingle

04:05 AM Bug #6814: pfBlockerNG cannot define table pfB_Europe_v6 after pfsense upgrade to 2.3.2-RELEASE (amd64)

No bug here, can be closed. Kill Bill

06:32 AM Feature #6965 (Resolved): suricata + snort - making custom passlist additive to the default one

It'd seriously help to have a checkbox that'd simply _add_ whatever custom alias(es) to the default passlist, instead... Kill Bill

11/26/2016

09:15 PM Bug #6047: syslog-ng does not logrotate

Well, this still does not work properly at least with bzip2, because:... Kill Bill

04:18 PM Bug #6690: SURICATA IPS Issue - Kills VLANS & Traffic Shaper

There's already #6023 for netmap + shaping. Kill Bill

12:21 PM Bug #6964 (Resolved): Host OS Policy Assignment broken when using "Import" or "Aliases" buttons

The policy always gets assigned to the first instance (normally probably WAN) when you either
- use the Import butto... Kill Bill

06:44 AM Bug #6389: Suricata typo under interface rules tab

https://github.com/pfsense/FreeBSD-ports/pull/220 Kill Bill

06:38 AM Bug #5938: Link for Signing up for ETPro account got changed - Suricata

This got broken again. Together with some other cosmetics, this is fixed by https://github.com/pfsense/FreeBSD-ports/... Kill Bill

11/24/2016

12:21 PM Bug #6547: syslog-ng log browser only shows the first few lines

Kinda difficult to come with "pfSense native firewall"-like GUI, considering there's no pattern about what's going to... Kill Bill

11:26 AM Feature #4548: syslog-ng interface doesn't allow rule ordering

See https://github.com/pfsense/FreeBSD-ports/pull/218 Kill Bill

07:22 AM Bug #6492 (Resolved): Syslog-ng configuration file warning is treated as syntax error

Renato Botelho

07:05 AM Bug #6492: Syslog-ng configuration file warning is treated as syntax error

Already fixed by https://github.com/pfsense/FreeBSD-ports/commit/5f79e53dcae89bb185279ba2164a99891bb70dfd Kill Bill

11/22/2016

08:37 AM Feature #6951 (Resolved): Disable Auto Config Backup without uninstalling

The only way to disable the auto config backup package after the credentials have been entered is to uninstall it. Th... Steve Wheeler

08:32 AM Bug #6950 (Resolved): Auto Config Backup always reports success

The 'Backup Now' function always reports 'Backup completed successfully.' even if the backup to the server failed. If... Steve Wheeler

06:44 AM Bug #6410 (Resolved): when PFSENSE after server restart,openvpn+motp not login

Fixed by #6900 Jim Pingle

02:23 AM Bug #6410: when PFSENSE after server restart,openvpn+motp not login

SOLVED: Did update with Version freeradius2 1.7.4 and everything runs fine now Johannes Goldynia

11/21/2016

10:13 AM Bug #6939 (Resolved): HAproxy - backend server list broken with recent 2.3.3 snapshots

Renato Botelho

09:52 AM Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots

Fixed. Dragging below/above the visible window in FW rules works, HAproxy and Status_Traffic_Totals still have the re... Kill Bill

09:50 AM Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots

Applied in changeset pfsense:commit:f6973634c34b34908644e2df17154274d2ab12be. Anonymous

09:40 AM Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots

Applied in changeset pfsense:commit:dd455f50b7be7957428b0733b5b2c93ccba9e284. Anonymous

09:37 AM Bug #6939 (Feedback): HAproxy - backend server list broken with recent 2.3.3 snapshots

The scroll gimmick CSS has been removed from the master CSS file, and added only to firewall_rues.php and firewall_na... Anonymous

11/20/2016

01:02 PM Bug #6948: HAproxy files tab input validation nonsense - impossible to save files

Hmmm... So, that's caused by the bogus empty file at the top, which I never placed there in the first place. NFC how ... Kill Bill

12:56 PM Bug #6948 (Resolved): HAproxy files tab input validation nonsense - impossible to save files

No idea what's this bootstrap nonsense validating where yet again. It is absolutely impossible to input anything ther... Kill Bill

11/19/2016

03:36 PM Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots

I quoted a wrong post, however, both the HAproxy and the Status_Traffic_Totals have been fixed by reverting the offen... Kill Bill

03:05 PM Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots

Kill Bill wrote:
> I'm not one of those bootstrap guys. :/ Perhaps @sbeaver could help. As for excessively wide drop... Kill Bill

11/18/2016

04:08 PM Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots

I'll take care of it Anonymous

03:44 PM Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots

I'm not one of those bootstrap guys. :/ Perhaps @sbeaver could help. As for excessively wide dropdowns, perhaps this ... Kill Bill

03:17 PM Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots

Yah shortening the field lengths would likely help.. but how to do that in a bootstrapped kinda way.?. Pi Ba

02:59 PM Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots

Not sure either, the "port" field could definitely be shrunk quite a bit, for starters, though that'd only mitigate t... Kill Bill

02:36 PM Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots

There used to be a scrollbar.. Thats hidden now by this fix: https://redmine.pfsense.org/issues/6895
Reverting htt... Pi Ba

11/17/2016

02:34 PM Feature #6831: Snort does not support aliases containing FQDN

Reading this would help to understand why it's not supported.
https://forum.pfsense.org/index.php?topic=87211.msg514... Kill Bill

12:55 PM Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots

P.S. Cannot make the window any wider, it's already fullscreen on a full HD monitor, not even F11 helps. :-D Kill Bill

12:54 PM Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots

That's the same image I'm running, so it's most likely a problem with the package in general. It's possible there was... Jim Pingle

12:51 PM Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots

Well, not sure what's current. The box has been upgraded about ~2 hours ago. ... Kill Bill

12:46 PM Bug #6939: HAproxy - backend server list broken with recent 2.3.3 snapshots

Is this still the same on a current snapshot? Is it the same if you force a page reload to clear the cache? Make the ... Jim Pingle

12:29 PM Bug #6939 (Resolved): HAproxy - backend server list broken with recent 2.3.3 snapshots

This definitely used to work, however it got badly broken recently. The SSL checkbox and weight fields are completely... Kill Bill