Activity
From 06/15/2017 to 07/14/2017
07/14/2017
-
03:18 PM Bug #7696 (Resolved): Telegraf Package Saving Incorrect Password
- The contents of the password field are not being passed properly to the telegraf.conf file. The password is being en...
07/13/2017
-
06:09 PM Feature #7691 (New): Allow for custom icap services for squid
- We would like to integrate additional icap services into the pfsense squid configuration, but there is no way add the...
07/12/2017
-
07:53 AM Feature #7189: Letsencrypt acme sync in HA environment
- Relevant Commits:
2.4:
https://github.com/pfsense/FreeBSD-ports/commit/119d687658b46a0310a481c22f5a435e5de9625f
... -
07:51 AM Feature #7189 (Resolved): Letsencrypt acme sync in HA environment
- Works on both 2.4 and 2.3.x now.
07/11/2017
-
03:59 PM Feature #7189 (Feedback): Letsencrypt acme sync in HA environment
- Pushed a fix for 2.3.x versions now.
-
03:29 PM Feature #7189 (Assigned): Letsencrypt acme sync in HA environment
- Well, it works on 2.4, needs some adjustments for 2.3.x yet.
-
03:11 PM Feature #7189 (Feedback): Letsencrypt acme sync in HA environment
- I just pushed a new feature to the ACME package, it can now send service restart commands via XMLRPC using the system...
07/10/2017
-
09:44 AM Bug #7681: OpenVPN client export utility - Exporting Android inline configuration can include incorrect client auth method in .ovpn file
- Thank you Jim! Makes sense.
-
07:37 AM Bug #7681: OpenVPN client export utility - Exporting Android inline configuration can include incorrect client auth method in .ovpn file
- I made a different issue entry for the actual underlying problem here: https://redmine.pfsense.org/issues/7685
-
07:36 AM Bug #7681 (Not a Bug): OpenVPN client export utility - Exporting Android inline configuration can include incorrect client auth method in .ovpn file
- It does appear that they are the same, but different versions of OpenSSL or different libraries that are OpenSSL-like...
-
08:29 AM Feature #7686: Add option in HAProxy to configure SSL defaults based on the Mozilla SSL Configuration Generator
- oops, misspelled configure in the subject line
-
08:27 AM Feature #7686 (New): Add option in HAProxy to configure SSL defaults based on the Mozilla SSL Configuration Generator
- Would be nice to have "Modern | Intermediate | Old" options in the configuration of HAProxy for SSL cipher suites, ba...
07/08/2017
-
10:50 PM Feature #7683 (New): Splunk Universal Forwarder Package
- It would be nice to have a Splunk Universal Forwarder package so we can send logs and other monitor capable files e.g...
-
07:40 PM Bug #7681 (Not a Bug): OpenVPN client export utility - Exporting Android inline configuration can include incorrect client auth method in .ovpn file
- Intro:
Hello this is my first bug entry. I hope I have done a good job reporting the specifics of what I believe to ...
07/07/2017
-
03:14 PM Bug #7263 (Resolved): FreeRADIUS - complete lack of input validation
- Seems to be good.
-
02:39 PM Bug #7237 (Resolved): ACME - first table row on certs tab does not autoexpand the fields
- This has been fixed for a while now
07/06/2017
-
02:07 PM Bug #4756 (Not a Bug): OpenVPN Client Export fails when using "real" certificate
- It works fine if you import the chain, see #2800, which would include the case of a public CA (which should still nev...
-
02:00 PM Bug #7170 (Resolved): FreeRADIUS built-in certificate manager defaults to MD5 (!!!), no support for SHA2
- This has all been removed from FreeRADIUS. Cert handling in FreeRADIUS is 100% done in the Cert Manager now on 2.3.4 ...
07/05/2017
-
02:55 PM Bug #7674 (Resolved): Issue Downloading Snort Alert Log Download
- I have found that I am no longer able to download the Alert Logs from the snort_alerts.php page. I have attempted di...
07/02/2017
-
04:53 PM Bug #7670 (Not a Bug): Bind : Serial for slave zone is missing in IHM
- Using bind as slave server, the page https://localhost:8443/pkg.php?xml=bind_zones.xml does not display the zone seri...
06/30/2017
-
01:58 PM Bug #7669: ACME Certificates
- But we need to have a discussion -- on the forum -- about why that happened before it can be called a bug. The upgrad...
-
01:11 PM Bug #7669: ACME Certificates
- I get that freeradius isn't related to acme. You just rejected the root of my problem which is no CA key for ACME gen...
-
12:18 PM Bug #7669 (Rejected): ACME Certificates
- Please post on a new forum thread and discuss this before opening a bug report. It's possible something else went wro...
-
12:15 PM Bug #7669 (Rejected): ACME Certificates
- version 2.4.0-beta. My letsencrypt certificates are about to expire and my certificates in acme certificates didn't m...
06/28/2017
-
08:09 AM Todo #7664 (Rejected): https filtering in pfsense without configuring proxy settings in client browser .
- What can be done, is already there. Splice to see domains or you have to install CA on clients. Post on the forum, do...
-
08:07 AM Todo #7664 (Rejected): https filtering in pfsense without configuring proxy settings in client browser .
- https filtering in pfsense without configuring proxy settings in client web browser .
06/26/2017
-
11:42 AM Bug #7661 (Resolved): pfBlockerNG doesn't make a rule for Antarctica
- If Antarctica entries with a count > 0 are added to the pfBlockerNG GeoIP, there won't be an Antarctica rule created....
-
10:27 AM Todo #7658: BGP support in Quagga
- OK done. Please see https://redmine.pfsense.org/issues/7660
-
10:25 AM Todo #7658: BGP support in Quagga
- This issue is for BGP only, not other features. Scope creep isn't helpful, that needs to be in a separate feature req...
-
10:22 AM Todo #7658: BGP support in Quagga
- Right now, in the Quagga GUI, there's a single entry for a CARP address to monitor. If you're adding better GUI supp...
-
10:11 AM Todo #7658: BGP support in Quagga
- That is unrelated to the topic on this ticket. It would be a separate feature request.
-
10:10 AM Todo #7658: BGP support in Quagga
- We need to be able to monitor more than one CARP IP for failover. Our config has CARP on the inbound and outbound si...
-
10:27 AM Feature #7660 (Rejected): Please add the ability to monitor more than one CARP address to the Quagga GUI support
- We need to be able to monitor more than one CARP IP for failover. Our config has CARP on the inbound and outbound sid...
-
03:13 AM Feature #7655: Captive portal and squid non transparent
- I have readed all about that link and sorry, but i don't understand anything ?
06/24/2017
-
10:14 AM Todo #7658: BGP support in Quagga
- There is a PR to support using it via raw config, but no GUI yet.
https://github.com/pfsense/FreeBSD-ports/pull/356 -
10:07 AM Todo #7658 (Resolved): BGP support in Quagga
- OpenBGPD pkg on pfsense doesn't seem to be up to date for years (since 2012 probably) - a lot of recently (and may be...
-
07:40 AM Feature #7657: OpenBGPD local-as feature in neighbors context
- UPD: Looks like some commands which are not present in webgui do work when pasting directly in bgp neighbor context i...
-
02:26 AM Feature #7657 (Rejected): OpenBGPD local-as feature in neighbors context
- Please add "local-as" feature in OpenBGPD webgui "neighbors" tab -> "Neighbor Parameters". This command is described ...
06/23/2017
-
11:32 AM Bug #6129: zabbix agent/proxy 2.4 not ported to pfSense 2.3
- Pim Janssen wrote:
> 4.0 LTS Will be added in september 2017. I think having only LTS releases would be enough.
Y... -
11:27 AM Bug #6129: zabbix agent/proxy 2.4 not ported to pfSense 2.3
- 4.0 LTS Will be added in september 2017. I think having only LTS releases would be enough.
-
11:24 AM Bug #6129: zabbix agent/proxy 2.4 not ported to pfSense 2.3
- James Lavoy wrote:
> Therefore this change has caused pfSense to be unable to be used as a proxy if someone is using... -
11:20 AM Bug #6129: zabbix agent/proxy 2.4 not ported to pfSense 2.3
- I apologize, in the future I will be sure to track every version of software released everywhere and update my bug re...
-
11:18 AM Bug #6129: zabbix agent/proxy 2.4 not ported to pfSense 2.3
- Information in a ticket needs to be precise and specific no matter when it's read. It is unreasonable to expect anyon...
-
11:14 AM Bug #6129: zabbix agent/proxy 2.4 not ported to pfSense 2.3
- Jim Pingle wrote:
> If that is the case, it was not stated clearly anywhere on the problem description or even in th... -
11:06 AM Bug #6129 (New): zabbix agent/proxy 2.4 not ported to pfSense 2.3
- If that is the case, it was not stated clearly anywhere on the problem description or even in the comments. Maybe if ...
-
10:52 AM Bug #6129: zabbix agent/proxy 2.4 not ported to pfSense 2.3
- @Jim
The issue is here because the 3.0 proxy is NOT backwards compatible. For that reason it would be good to have a... -
10:44 AM Bug #6129 (Resolved): zabbix agent/proxy 2.4 not ported to pfSense 2.3
-
10:26 AM Bug #6129: zabbix agent/proxy 2.4 not ported to pfSense 2.3
- Looks like a done case.
Currently zabbix agent and proxy 3.0 LTS is available in pfsense-2.3
06/21/2017
-
04:18 PM Feature #7655: Captive portal and squid non transparent
- Kindly read https://redmine.pfsense.org/issues/5594#note-11.
-
01:39 AM Feature #7655 (Bogus): Captive portal and squid non transparent
- Hi.
When we configure squid in non-transparent mode and in the browser we configure the proxy address and the port, ...
06/20/2017
-
02:08 PM Bug #7524 (Resolved): Squid MITM/SSL-Bump broken with Chrome due to missing SAN in generated certificates
- This works for me now. I can browse secure sites through squid HTTPS MITM with Chrome and there are no certificate er...
-
07:20 AM Bug #7654 (Resolved): Can't use a LDAP search filter containing an accent
- Hi,
I use a virtual machine with pfSense 2.3.4 (amd64) with Squid package v0.4.37 (including squid 3.5.26).
I h...
06/19/2017
-
02:36 PM Bug #7524: Squid MITM/SSL-Bump broken with Chrome due to missing SAN in generated certificates
- Packages are up for 2.4 and 2.3.4, 2.3.x snapshots will be up next time a snapshot runs. Test and let us know if it i...
-
01:58 PM Bug #7524 (Feedback): Squid MITM/SSL-Bump broken with Chrome due to missing SAN in generated certificates
-
01:54 PM Bug #7524: Squid MITM/SSL-Bump broken with Chrome due to missing SAN in generated certificates
- I'm getting 3.5.26 pulled into the package branches right now, should be building and up soon.
06/17/2017
-
06:31 AM Bug #7617: OpenBGP not restarting on new WAN IP or firewall reload
- Thank you, again. _shellcmd_ package was the answer.
Perhaps someone could close this now. (I can't see any way t... -
05:18 AM Bug #7617: OpenBGP not restarting on new WAN IP or firewall reload
- Yeah I'd say it's no longer needed since WAN IP change will trigger @filter_configure()@ on its own.
-
05:11 AM Bug #7617: OpenBGP not restarting on new WAN IP or firewall reload
- Many thanks for that. Tested and works.
I didn't know that _shellcmd_ even had that option. I've never used it b... -
03:59 AM Bug #7617: OpenBGP not restarting on new WAN IP or firewall reload
- Phil Biggs wrote:
> The table is successfully reloaded on new WAN IP but it doesn't work after a firewall rule chang... -
03:39 AM Bug #7617: OpenBGP not restarting on new WAN IP or firewall reload
- It's a horrible hack but I added a line to openbgpd.inc:...
06/15/2017
-
10:31 AM Feature #7621 (Resolved): OpenVPN Client Export name whens is a windows installer have the same name its a bit confused
-
10:30 AM Bug #7533 (Resolved): HAProxy 1.7.3+ Breaks with DNS Resolvers configured (UNIX stats sockets fail)
- Workaround is in place and functioning OK. Next HAProxy release will have it included without needing a local patch. ...
Also available in: Atom