Activity
From 03/26/2018 to 04/24/2018
04/24/2018
-
03:20 PM Bug #8482 (Closed): Reseting states causes ntop-ng to core dump
- Almost certainly nothing we can do about a crash of that nature. You'll have to take that up with ntopng and/or FreeB...
-
03:17 PM Bug #8482 (Closed): Reseting states causes ntop-ng to core dump
- Not sure if this is somewhat expected, but reseting states through the "diagnostics" menu causes ntopng to core dump....
-
07:56 AM Bug #8425: telegraf not reporting memory
- *UPDATE*: my changes were committed upstream (https://svnweb.freebsd.org/ports?view=revision&revision=468200).
I h... -
- Telegraf 1.6.1 was released yesterday with the updated godeps that fix various issues. I have submitted my patches up...
04/23/2018
-
- As long as we can prove that change will not negatively impact other clients it should be OK to make that change, but...
04/21/2018
-
02:17 PM Bug #8476 (Resolved): OpenVPN Client Export TLS Key Direction Directive Location
pfSense Version: pfSense-CE-memstick-2.4.3-RELEASE-amd64.img.gz ( https://nyifiles.pfsense.org/mirror/downloads/pfS...
04/20/2018
-
11:34 AM Feature #8475 (Closed): syslog-ng TLS configuration support
- For syslog-ng to use TLS, it needs access to certificates, and in particular CA certs. For the local cert/key I can ...
04/19/2018
-
03:39 PM Bug #6339: OpenVPN Client Export package option for "Use Microsoft Certificate Storage" does not specify which certificate to use
- Not sure if it would be easier to implement, but using this works well for me:...
04/17/2018
-
04:33 PM Bug #8438: haproxy: can't use ACL for cert with http-response actions
- Also:
1. Add "path_dir" to the default list of ACL expressions
2. Your current ACLs are case insensitive (-i) by ... -
- I've got one minor feature proposal:
Notes/Description/Comments for each ACL or action entry
Normally if I'd us... -
07:54 AM Bug #8466 (Resolved): radiusd crash
- Radiusd crash when for a user is set a password in plain text containing " (double qoutes)
After this all users get ... -
- *UPDATE*:
Telegraf 1.6.0 final was released today. I have updated the port accordingly, and it includes the memory p...
04/16/2018
-
-
- The updated port is already on 2.4.4 snapshots, try it there. If it still has issues, you'll need to replicate them o...
-
05:54 AM Bug #8461 (Closed): open-vm-tools : bug with version 2.4.3
- Hello,
I have a very specific bug that appeared with version 2.4.3.
When uploading a file to pfSense using vmwa...
04/15/2018
-
12:01 PM Feature #8279: Consider adding a new option to the Rule Order
- Two more options:
1 - in pfBlockerNG, Rule Order add option - "Do not change (preserve) existing order"
or
...
04/14/2018
-
- FWIW: Here is my @port@ setup for the patched Telegraf fixing the memory issue and addressing the new golang deps for...
04/13/2018
-
-
04:02 PM
Bug #8456: Squid shows Warning on package page after installation
- Tested on 2.4.4.a.20180413.1305, fix works.
-
- *Update*: I worked with an InfluxData dev on this issue and it's indeed upstream. @gopsutil@[1], a golang dependency ...
-
09:48 AM Bug #8454: Arpwatch package break email notifications from other sources
- Makes sense since all that sendmail script does is call the internal mail handling.
I see three options:
1. Chang... -
08:56 AM Bug #8277 (Feedback): ntopng service fails to start on 2.4.3
- Done on 2.4.3 and 2.3.5
04/12/2018
-
- Fix pushed
-
01:37 PM
Bug #8456 (Resolved): Squid shows Warning on package page after installation
- Install 2.4.2 CE, upgrad to latest 2.4.4 snapshot. Install Squid package, visit Services > Squid and the text (Warnin...
-
- Since it's OK on 2.4.4, we can copy back the new ntopng to 2.4.3 now
-
12:38 PM
Bug #8277: ntopng service fails to start on 2.4.3
- Tested on 2.4.4.a.20180412.1121, service starts and can be accessed.
-
- I wouldn't say those are broken. Those cron notifications didn't work at all without the symlink setup by arpwatch. F...
-
- Arpwatch replaces /usr/sbin/sendmail with a symlink to a PHP script that specifically mentioned Arpwatch in the messa...
04/10/2018
-
-
12:58 PM Bug #8440: Suricata 4.0.4_1 disablesid.conf does not disable rule?
- This is not a bug. The rule being triggered was a flowbit rule. Therefore, the disablesid.conf could not disable the ...
04/09/2018
-
- Can confirm this same behavior. An upstream bug was also filed: https://github.com/influxdata/telegraf/issues/3750
-
04:01 PM Bug #8438: haproxy: can't use ACL for cert with http-response actions
- The haproxy_config_init() is a new function added in the second last commit. Not sure why that wouldn't exist after u...
-
- Updated and tested all of the above - looks alright.
Only right after the update I encountered one issue:
- I was... -
- Okay 0.56 haproxy-devel package is available now through normal pfSense packages. If you can check 'everything' now w...
-
- Looks like this isn't just specific to BGP. In the forum thread linked above, it is happening on multiple amd64 VMs t...
-
- The zebra daemon in FRR 4.0 won't stay running with a BGP configuration. It crashes on startup. OSPF alone seems to b...
04/08/2018
-
- 2. found&fixed
The plugin 'injects' extra stylesheets, and the setCSSdisplay function searches for a particular st... -
- Re 2: I usually use Firefox @ Windows 10 and yes with some blockers such as NoScript, uBlock and few user scripts in ...
-
- Thanks for testing and reporting about these issues.
1. found&fixed
2. these items seem to work properly for me o...
04/07/2018
-
- It seems to be fine, good.
While I'm at it, few more glitches I found:
1. *Backend: Timeout / retry settings*
... -
- If you can perhaps test/validate my changes again haproxy-devel version that would be great.
Either the full thing (... -
- Re regex - yes you're right.
I was living with the false assumption (based on some tests that I remember from the pa... -
- Petr H wrote:
> >http-response set-var(txn.txnhost) hdr(host)
> That seems to set that variable only during the res...
04/06/2018
-
- >http-response set-var(txn.txnhost) hdr(host)
That seems to set that variable only during the response processing. I... -
- Actually that the condition is added to all actions in the frontend probably is the 'right thing' to do.. (my previou...
-
- Ok thanks can reproduce it now. Ill check why that happens.
-
- Attached sample haproxy.cfg that demonstrates the problem. With this file the warnings occur at lines 48 and 49:
<pr... -
- Can you show/attach the complete haproxy.conf itself? I'm not yet seeing when this would occur.. And or perhaps a scr...
-
05:40 PM Feature #8442 (Rejected): ACME - custom script for DNS validation
- Please add ability to upload custom script for DNS validation.
I have provider for which I have script to update DNS... -
-
01:37 PM Bug #8421: AutoConfigBackup v1.51 Option to Ignore Captive Portal Vouchers not working
- I can now confirm the package is available for 2.4.3 and the fix works as expected.
Thank you all for your time. -
- It should show up for 2.4.3 users momentarily.
-
- After a few days waiting for the package to show up on the update list, I went to look at the FreeBSD-ports repositor...
-
- I'm not sure if this started in Suricata 4.0.4_1, but I recently found a rule in my disablesid.conf which was still t...
04/05/2018
-
- pfSense 2.4.3, pfSense-pkg-haproxy 0.54_2, haproxy 1.7.10
1. Primary frontend used by other shared ones
2. SSL-en... -
- This is not a support platform, please post your question on the forum, pfSense subreddit, or mailing list.
-
01:09 PM Bug #8436 (Rejected): I have the problem of User authentication and password in my proxy, when I intend to update the packages using pkg upgrade and pkg update
- Hello, I am new using pfsense 2.4.2, I have the same problem of User authentication and password in my proxy, I have ...
-
01:18 PM Todo #8433: Upgrade NRPE-SSL Package to NRPE3
- Oh sorry I wasn't aware it was already done in the snapshots, haven't used them in a long time.
-
- It is already switched to nrpe3 on 2.4.4 snapshots because the nrpe2 and nrpe-ssl ports were removed from the FreeBSD...
04/04/2018
-
- net-mgmt/nrpe-ssl (https://www.freshports.org/net-mgmt/nrpe-ssl/) has been depreciated and removed since January. Can...
04/03/2018
-
01:48 PM
Bug #8421 (Feedback): AutoConfigBackup v1.51 Option to Ignore Captive Portal Vouchers not working
- Fix committed b95ecbc9a9f4d87e77079dbf023ddb346460bdb1. It should show up as a package update for AutoConfigBackup wh...
-
- The message looks like the same from here
(system)@172.xx.x.xx: Captive Portal Voucher database synchronized wit... -
01:14 PM
Bug #8421: AutoConfigBackup v1.51 Option to Ignore Captive Portal Vouchers not working
- What is the reason you see for the backup? under Diagnostics > AutoConfigBackup > Restore I want to make sure I am se...
-
- I've been using pfSense in a HA configuration for a while now, and just recently started using the captive portal fea...
-
12:21 PM Bug #8425 (Resolved): telegraf not reporting memory
- Since installing 2.4.3, telegraf isn't reporting memory anymore. Everything else is reporting as usual.
-
05:35 AM Bug #7293: dns/bind911 requires TCP_RFC7413 in kernel
- This should be fixed building the kernel with "options TCP_RFC7413" and enabling fastopen sysctl.
04/02/2018
-
10:19 AM Bug #8414: ntopng fails to start with Disable Alerts option
- For what it's worth I had found other report. I reported a new issue because #8277 was pre-release and indicates that...
-
- Duplicate of #8277
-
- Ntopng fails to start (core dumps) with the "Disable Alerts" (-H) option enabled. It starts fine without the option s...
-
08:28 AM Feature #8416 (Resolved): Mailreport - Minute of the Hour
- Any chance of adding *Minute of the Hour* as an option in the schedule, I'd like a bit more granularity if possible.
... -
- A new version of ntopng is available now on 2.4.4 snapshots which should address this issue. Try it there and let us ...
04/01/2018
-
- Try the patch on the other ticket and add comments there.
-
05:57 PM Bug #8404: IPSec pre-shared key
- Same behavior as described in #6668
As long as the second (side-to-side) is aktiv, the only PSK that will match is...
03/31/2018
-
- Looks like the same issue as #8393
-
06:59 AM Bug #8405 (Duplicate): pfSense 2.4.3 breaks HAProxy if using VIP
- If using a VIP for HAProxy instead of localhost, the upgrade to 2.4.3 creates the following error. Changing from the ...
-
- After upgrading from 2.4.2_p1 to 2.4.3, just the last added (active) IPSec tunnel <PSK> matches in PHASE-1.
All ot...
03/30/2018
-
11:00 AM Bug #8400 (Closed): FreeRadius 3 EAP-TLS Missing O.U. Option
- Under Services-->FreeRADIUS-->EAP-->EAP-TLS
The Organizational Unit (O.U.) is missing from the option for:
"Che...
03/29/2018
-
09:28 PM Feature #8362: Snort and Suricata Package - Allow for changing URLs, Ports, and Protocols to allow for local Repo of Signature Updates
- This feature was added in the Suricata GUI package v4.0.4_1 pull request posted on GitHub here: https://github.com/pf...
Also available in: Atom