Activity
From 08/16/2017 to 09/14/2017
09/14/2017
-
08:22 PM Bug #7850: Include file containing XML_RPC_encode() missing from snort
- Fix was merged into the Packages respository on 9/14/2017. This bug report can be closed.
Bill -
09:12 AM Bug #7859 (Feedback): FRR doesn't use the raw config setting
- Pushed a fix, will be up shortly.
-
08:37 AM Bug #7859 (Resolved): FRR doesn't use the raw config setting
- FRR package doesn't use the raw config settings because of the bug in the config generation. I guess the XML tag has ...
09/13/2017
-
05:06 PM Bug #7820: 2.4: dnsmasq can no longer handle punycode, compile time options change?
- Jim Pingle wrote:
> We are compiling everything the way it should be, there isn't anything for us to change or fix. ...
09/12/2017
-
09:44 PM Bug #7850: Include file containing XML_RPC_encode() missing from snort
- The fix for this problem has been submitted in a Github pull request. Once that request is approved and merged, this...
09/11/2017
-
03:31 PM Bug #7820: 2.4: dnsmasq can no longer handle punycode, compile time options change?
- We are compiling everything the way it should be, there isn't anything for us to change or fix. If you can replicate ...
-
03:24 PM Bug #7820: 2.4: dnsmasq can no longer handle punycode, compile time options change?
- So I take it 2.4 will ship with this regression?
-
08:57 AM Bug #7851 (Not a Bug): HAProxy Frontend bug - pfSense 2.3.2-RELEASE
- That value works for me, I can't reproduce this at all. I can create new entries with that or edit existing entries. ...
-
08:50 AM Bug #7851: HAProxy Frontend bug - pfSense 2.3.2-RELEASE
- The value I had was/is *1000000*
Is there a limit in the number of entries I can add under the "Actions" section of ... -
07:22 AM Bug #7851 (Feedback): HAProxy Frontend bug - pfSense 2.3.2-RELEASE
- What exact value did the field have?
I can't reproduce any problem here. If I put in a number and save, it saves t... -
07:53 AM Bug #7850 (Confirmed): Include file containing XML_RPC_encode() missing from snort
- Checking the code, I can confirm that the snort package hasn't been adjusted for XMLRPC sync on 2.4. Looking at that ...
09/10/2017
-
11:46 PM Bug #7851: HAProxy Frontend bug - pfSense 2.3.2-RELEASE
- assigned to Pingle for evaluation.
-
11:22 PM Bug #7851 (Not a Bug): HAProxy Frontend bug - pfSense 2.3.2-RELEASE
- Hi Support,
I encountered a bug while trying to add an ACL entry on the HAProxy frontend. When I click save the “... -
10:59 PM Bug #7850: Include file containing XML_RPC_encode() missing from snort
- This did not turn up in my pre-report search: https://forum.pfsense.org/index.php?topic=136388
-
03:11 PM Bug #7850 (Resolved): Include file containing XML_RPC_encode() missing from snort
- Attempting to enable XMLRPC Sync in Snort results in this:
Fatal error: Call to undefined function XML_RPC_encode(...
09/06/2017
-
12:27 PM Bug #7845 (Rejected): Lets Encrypt acme plugin doesn't update webConfigurator certificate
- It certainly does. I'm running it on a dozen systems in my lab and they all update the GUI certificate.
Be sure to... -
12:24 PM Bug #7845 (Rejected): Lets Encrypt acme plugin doesn't update webConfigurator certificate
- Acme renews the Lets Encrypt certificate without any problems. But it never replaces the old certificate with the ren...
09/05/2017
09/03/2017
-
04:46 AM Bug #6378: inline background styles in squidguard package
- Someone kindly merge this PR and call it a day. https://github.com/pfsense/FreeBSD-ports/pull/385
It makes things ... -
04:38 AM Bug #3342: Missing input validation for MAC addresses
- Validation has been there for a while.
https://github.com/pfsense/FreeBSD-ports/pull/308
https://github.com/pfsen... -
03:17 AM Bug #7670: Bind : Serial for slave zone is missing in IHM
- I have no idea what's IHM but there's no serial saved in config.xml for slave zones (you cannot even configure it, th...
-
03:04 AM Bug #7271: Co-existence of unbound and BIND/named
- Test this please.
https://github.com/pfsense/FreeBSD-ports/pull/416
09/02/2017
-
06:53 AM Bug #7836: FreeRADIUS - certain chars in clients shared secret result in broken configuration
- https://github.com/pfsense/FreeBSD-ports/pull/415
-
06:50 AM Bug #7836 (Resolved): FreeRADIUS - certain chars in clients shared secret result in broken configuration
- See https://forum.pfsense.org/index.php?topic=135980.msg744283#msg744283 and following.
E.g., having a shared secr...
08/31/2017
-
12:16 PM Bug #7835: freeradius unit wrong for varusersmaxbandwidthup and varusersmaxbandwidthdown
- May I suggest "Enter the maximum bandwidth for download in Kbps" and moving on?
-
12:09 PM Bug #7835: freeradius unit wrong for varusersmaxbandwidthup and varusersmaxbandwidthdown
- Then we can change the description to say kibibit instead. Changing the multiplier would result in people having an u...
-
11:51 AM Bug #7835: freeradius unit wrong for varusersmaxbandwidthup and varusersmaxbandwidthdown
- Jim Pingle wrote:
> There are 1024 bits in a kilobit. Not 1000. I'll fix the "in in" typo.
Freebsd uses 1000 bits... -
09:36 AM Bug #7835 (Not a Bug): freeradius unit wrong for varusersmaxbandwidthup and varusersmaxbandwidthdown
- There are 1024 bits in a kilobit. Not 1000. I'll fix the "in in" typo.
-
09:31 AM Bug #7835 (Not a Bug): freeradius unit wrong for varusersmaxbandwidthup and varusersmaxbandwidthdown
- When we add a new radius user, we can set Maximum Bandwidth Down/Up and in the help we can read:
*Enter the maximum ...
08/30/2017
-
05:39 AM Bug #7782 (Resolved): FreeRADIUS 3 - temporary FreeRADIUS CA/certificate generated on each package reinstall
-
02:03 AM Bug #7782: FreeRADIUS 3 - temporary FreeRADIUS CA/certificate generated on each package reinstall
- Confirmed fixed, certificate/CA saved in config and no duplicates generated on reinstall. Thanks.
08/29/2017
-
02:31 PM Bug #7829 (Confirmed): Unable to expand the "Advanced Server Settings" in ACME certificate edit
- OK. I see what you're talking about now.
Those settings do not exist for DNS-Manual. The fact that it displays any... -
02:14 PM Bug #7829 (Not a Bug): Unable to expand the "Advanced Server Settings" in ACME certificate edit
- Not enough detail here (what "Method" is selected? What + button?)
The only method with a "Key Type" is nsupdate, ... -
01:49 PM Bug #7829 (Duplicate): Unable to expand the "Advanced Server Settings" in ACME certificate edit
- Under Services\Acme\Certificate options: Edit, under Domain SAN List, clicking on the + icon next to "Key Type..." ap...
-
02:14 PM Bug #7782 (Feedback): FreeRADIUS 3 - temporary FreeRADIUS CA/certificate generated on each package reinstall
- This should, I hope, be fixed with 0.13 of the FreeRADIUS3 package.
-
11:23 AM Bug #7826 (Rejected): rule to open port 4500 udp for ipsec/ikev2 ignored and blocked
- There must be something different about the packet causing it to be dropped. Please post on the forum, list, or reddi...
-
11:02 AM Bug #7826 (Rejected): rule to open port 4500 udp for ipsec/ikev2 ignored and blocked
- Hello,
on a pfsense 2.3.4_1 installed on a vm ( vmware ), i create a ikev2 ipsec server.
If i try to connect with...
08/28/2017
-
12:52 PM Bug #7820: 2.4: dnsmasq can no longer handle punycode, compile time options change?
- Jim Pingle wrote:
> dnsmasq on 2.4 is compiled with NLS enabled
Hmmmm...... -
12:10 PM Bug #7820: 2.4: dnsmasq can no longer handle punycode, compile time options change?
- Jim Pingle wrote:
> dnsmasq on 2.4 is compiled with NLS enabled, which in turn sets up a dependency for IDN2 and use... -
09:01 AM Bug #7820 (Feedback): 2.4: dnsmasq can no longer handle punycode, compile time options change?
- dnsmasq on 2.4 is compiled with NLS enabled, which in turn sets up a dependency for IDN2 and uses -DHAVE_LIBIDN2. It ...
-
12:00 PM Feature #7824 (Resolved): [acme / Let's Encrypt] Bump to the latest acme.sh package
- Our domain names are managed by Gandi, and we cannot use the Gandi Live API for the verification of the domain name o...
08/27/2017
-
12:56 PM Bug #7820: 2.4: dnsmasq can no longer handle punycode, compile time options change?
- Just noticed this change in dnsmasq 2.77, new in 2.4:
> Remove historic automatic inclusion of IDN support when bu... -
12:49 PM Bug #7820 (Closed): 2.4: dnsmasq can no longer handle punycode, compile time options change?
- I've used dnsmasq with a custom hosts file for years, with mappings including the following:
> 0.0.0.0 r7---sn-vgq... -
08:57 AM Feature #6436 (Resolved): Add Stunnel binaries to the pfSense repository
-
03:04 AM Feature #6436: Add Stunnel binaries to the pfSense repository
- Merged, can be closed.
-
08:56 AM Bug #6948 (Resolved): HAproxy files tab input validation nonsense - impossible to save files
-
03:15 AM Bug #6948: HAproxy files tab input validation nonsense - impossible to save files
- Can be closed.
08/25/2017
-
02:45 PM Bug #7696 (Resolved): Telegraf Package Saving Incorrect Password
-
09:23 AM Bug #7696: Telegraf Package Saving Incorrect Password
- Fixed in 0.3
-
02:45 PM Bug #6603 (Resolved): pfblockerng's Unbound modifications leave system broken post-config restore
-
09:22 AM Bug #6603: pfblockerng's Unbound modifications leave system broken post-config restore
- The above is included in 2.1.1_10.
-
01:42 PM Bug #7797: Squid Reverse Proxy alternating between destinations
- Kill Bill wrote:
> As noted on another bug (Bug #7752), the reverse proxy part of Squid is pretty much unmaintained....
08/24/2017
-
04:29 AM Bug #6563: Squid still accepts sha1 certificates
- https://github.com/pfsense/FreeBSD-ports/pull/402 since pretty much any decent browser nags about these nowadays.
-
03:16 AM Feature #7691: Allow for custom icap services for squid
- You can integrate any of them by putting them to _Custom Options (After Auth)_ (or pretty much any of the advanced cu...
08/22/2017
-
04:42 PM Bug #7438: Squid 0.4.36_2 Remote Cache Parent not working
- As noted above, this needs to go to the forums to identify the problem.
-
04:17 PM Bug #7674: Issue Downloading Snort Alert Log Download
- This problem is fixed in the Snort package update to version 3.2.9.5. This ticket can be closed when the pull reques...
-
02:24 PM Bug #7610: Squid use all memory ram.
- This is an upstream bug with no fix and no good workaround for 3.5.x - cf. http://bugs.squid-cache.org/show_bug.cgi?i...
-
01:20 PM Bug #7797: Squid Reverse Proxy alternating between destinations
- As noted on another bug (Bug #7752), the reverse proxy part of Squid is pretty much unmaintained. I'd strongly sugges...
-
01:09 PM Bug #7797 (Feedback): Squid Reverse Proxy alternating between destinations
- Hello,
It's pretty hard to explain this bug, but it seems to be very old bug. This post explain it perfectly: http... -
11:39 AM Bug #7752: Squid 3 reverse proxy - HTTPS==>HTTP fails
- The way the reverse proxy part of the Squid package is written, it will only redirect HTTPS to HTTPS and HTTP to HTTP...
-
11:39 AM Bug #7391 (Not a Bug): 0.4.36_1 localnet ACL missing
-
11:31 AM Bug #7391: 0.4.36_1 localnet ACL missing
- As noted in https://redmine.pfsense.org/issues/7391#note-7 the OpenVPN interfaces are not added by design since it ad...
-
11:37 AM Bug #7431 (Resolved): BIND (9.11-2) Log shortcut needs to be updated.
-
11:24 AM Bug #7431: BIND (9.11-2) Log shortcut needs to be updated.
- Merged long ago, can be closed.
-
11:08 AM Bug #7696: Telegraf Package Saving Incorrect Password
- https://github.com/pfsense/FreeBSD-ports/pull/399/
-
07:59 AM Feature #7792: FRR pkg pfsense can not wok as ABR with stub areas (no stub area bit)
- The "Disable FIB Updates" option is the only GUI control to setup stub areas but it is global, not per interface/netw...
-
01:26 AM Feature #7792 (Resolved): FRR pkg pfsense can not wok as ABR with stub areas (no stub area bit)
- Setup pfsense as ABR with several areas and found one does not work properly if one of areas is stub. There are two m...
-
07:53 AM Feature #7794 (Assigned): FRR pkg pfsense no metric-type option in OSPF redistribute section of web-interface
- The OSPF metric option under Route Maps, "Metric" in the drop-down "Metric Action". The options there are the only op...
-
03:14 AM Feature #7794 (Resolved): FRR pkg pfsense no metric-type option in OSPF redistribute section of web-interface
- There is not @metric-type@ option in OSPF redistribute section of web-interface. By default FRR makes redistribution ...
-
07:40 AM Feature #7793: FRR pkg pfsense web interface checking for RID is setup in OSPF6 section
- The input validation is weak to nonexistent all throughout FRR, it's all on my todo list yet.
As it is made now, i... -
01:46 AM Feature #7793 (Resolved): FRR pkg pfsense web interface checking for RID is setup in OSPF6 section
- There is not any checking for RID in OSPF6 section in web interface now, but one must be, because in case there is no...
08/18/2017
-
11:40 AM Bug #7782 (Resolved): FreeRADIUS 3 - temporary FreeRADIUS CA/certificate generated on each package reinstall
- The code is pretty good to avoid user confusion and get things working out of the box, however it should set the conf...
-
10:36 AM Bug #6603: pfblockerng's Unbound modifications leave system broken post-config restore
- Fed up with this issue. It breaks fresh 2.4 installs exactly as noted in the above comment - see https://redmine.pfse...
08/17/2017
-
08:54 AM Bug #7780 (Closed): Blacklist update doesn't work on Firefox
- When I click in Download it does nothing. It works on Chrome.
Firefox 55.0.1 x86_64 on Arch Linux.
08/16/2017
-
04:21 PM Bug #7756: suricata suricata_check_dir_size_limit() needs to be improved
- This bug is fixed in GUI package version 4.0.0 using the code submitted by the OP.
-
04:17 PM Bug #7716: Suricata - Barnyard2 webui configuration updates result in base64-encoded value written to the config for the password
- This bug was fixed in GUI package version 3.2.2_3 via a Pull Request submitted by the OP.
-
04:12 PM Bug #7578: Suricata -- Removing Hosts from Block Table via Alerts
- This bug is fixed in GUI package version 4.0.0.
Also available in: Atom