pfSense » pfSense Packages

08/26/2019

01:22 PM Feature #9399 (Resolved): pkg support for SSH + sudo authentication via LDAP

requested package and options are present. Jim Pingle

09:24 AM Feature #4503: GNUGateKeeper H.323 Proxy Package

Hi guys!
I recently had the case of using a VSX 7000 polycom videoconferencing that necessarily uses the H323 or H46... Wesley Lucio dos Santos

07:50 AM Bug #9681 (Feedback): [Monitoring] New views title are always in lower case.

PR has been merged. Thanks! Renato Botelho

07:13 AM Feature #9701 (Rejected): Squid WPAD/PAC Settings

Since this would turn the firewall web server into a WPAD web server for the local network, it will never be added. T... Jim Pingle

04:48 AM Feature #9701 (Rejected): Squid WPAD/PAC Settings

Adds a new tab to the Squid Server Web GUI to configure WPAD settings and setup a PAC file.
This would give users th... Kyle Klouzal

03:32 AM Feature #9700 (Feedback): Secure Squid HTTPS Proxy

As described here: https://forum.netgate.com/topic/145940/secure-squid-https-proxy
Squid Documentation: http://www.s... Kyle Klouzal

08/21/2019

11:17 AM Bug #9691: Suricata ips_mode Legacy not blocking

This issue was resolved via the Netgate Forum. The user had bypassed the pfSense GUI package installation process and... Bill Meeks

11:11 AM Bug #7595: suricata custom SID Mgmt configuration missing after full system restore

This is no longer an issue with either the Suricata or Snort packages. Both packages now have the SID MGMT lists stor... Bill Meeks

10:24 AM Bug #9352 (Resolved): Duplicate default views in Status Monitoring that can't be removed.

Fixed by #9679 Jim Pingle

08/20/2019

02:49 PM Bug #7595 (Not a Bug): suricata custom SID Mgmt configuration missing after full system restore

Jim Pingle

01:33 PM Bug #9233 (Duplicate): Error adding new status monitoring view

Probably the same issue as #9679 which has been resolved. Jim Pingle

12:20 PM Feature #6508 (Closed): OSPF v3 - Quagga OSPF6d

It won't happen for Quagga, but it's in FRR now and works. Jim Pingle

09:55 AM Bug #7107 (Resolved): IPv6 blocklists generate IPv4 auto-rules

Jim Pingle

09:08 AM Bug #7107: IPv6 blocklists generate IPv4 auto-rules

This is resolved in pfBlockerNG-devel and can be closed. BBcan177 .

08:56 AM Bug #7993 (Closed): zabbix 3.4 agent

Outdated report. Stated version is EOL, and the stated version of Zabbix is no longer available either. Jim Pingle

08:30 AM Bug #9691 (Rejected): Suricata ips_mode Legacy not blocking

This site is not for support or diagnostic discussion.
For assistance in solving problems, please post on the "Net... Jim Pingle

08:09 AM Bug #9691 (Rejected): Suricata ips_mode Legacy not blocking

Good Morning.
I running suricata in pfSense 2.4.4 - p3 in "Legacy" mode, but not blocking.
I noticed in suricata lo... Wesley Peres

08/16/2019

02:45 PM Bug #9355 (Bogus): Telegraf Package - https for InfluxDB Server

Jim Pingle

02:45 PM Bug #8425 (Resolved): telegraf not reporting memory

PR at https://github.com/pfsense/FreeBSD-ports/pull/522 was merged a long time ago. Jim Pingle

02:34 PM Bug #9403 (Resolved): Suricata - Checkbox 'Traffic Flows' enables logging for both logging formats

Jim Pingle

01:42 PM Bug #3708 (Closed): Error with order field while creating the first entry in "groups ACL" for squidGuard package

Old report and no recent recurrences. Lots of things in this area have changed, so most likely it's either fixed no l... Jim Pingle

01:42 PM Bug #6301 (Closed): Error on squidGuard's Common ACL tab after enabling blacklists

Old report and no recent recurrences. Lots of things in this area have changed, so most likely it's either fixed no l... Jim Pingle

01:42 PM Bug #7780 (Closed): Blacklist update doesn't work on Firefox

Old report and no recent recurrences. Lots of things in this area have changed, so most likely it's either fixed no l... Jim Pingle

01:38 PM Bug #7610 (Closed): Squid use all memory ram.

Jim Pingle

01:38 PM Bug #7438 (Closed): Squid 0.4.36_2 Remote Cache Parent not working

Jim Pingle

01:35 PM Feature #8345 (Resolved): pfSense-pkg-softflowd: Added additional options now available in softflowd-0.9.9_1

PR was merged a long time ago. Jim Pingle

01:35 PM Bug #7674 (Resolved): Issue Downloading Snort Alert Log Download

Jim Pingle

01:34 PM Bug #9164 (Resolved): Snort barnyard2 / pfSense 2.4.4-p1 issue

Jim Pingle

01:32 PM Feature #8190 (Resolved): Enhance RRD_Summary package with historical reporting

PR was merged a long time ago. Jim Pingle

01:31 PM Bug #4996 (Closed): Quagga not coming up after pfSense restart on OpenVPN tunnels

Old report and no recent recurrences. Lots of things in this area have changed, so most likely it's either fixed no l... Jim Pingle

01:31 PM Feature #6844 (Closed): Web configuration for quagga ospf6d

If you need OSPF6, use the FRR package. It is in the GUI and works well there. Jim Pingle

01:31 PM Bug #5732 (Closed): Qagga: Different output in ospfd.conf based on order of interfaces.

One of many issues that are handled better in the FRR package. If you still have problems, migrate to FRR. Jim Pingle

01:29 PM Bug #8811 (Resolved): in pfblockerng when change Rule Order generates duplicate all rules.

Jim Pingle

01:29 PM Bug #9050 (Resolved): Antartica does not make a rule

Jim Pingle

01:29 PM Bug #8903 (Resolved): pfBlockerNG: PHP error

PR was merged a long time ago. Jim Pingle

01:29 PM Bug #8844 (Duplicate): PFBlockerNG-Dev

Jim Pingle

01:29 PM Bug #8825 (Resolved): Unable to activate any of the GeoIP blocking lists - keeps getting reset to disabled with PHP errors

PR was merged a long time ago. Jim Pingle

01:29 PM Bug #8318 (Resolved): PFBlockerNG removes alias file when using advanced inverted rule

Jim Pingle

01:29 PM Bug #8699 (Resolved): 3x PHP in pfblockerng.inc (912/915/4687)

Jim Pingle

01:26 PM Bug #7404 (Not a Bug): OpenVPN Client Export with custom DynDNS not working

All you have to do is choose "Other" from the drop-down and then you can put in whatever hostname you like. Jim Pingle

01:26 PM Feature #2050 (Closed): Add IPv6 support to the openbgp package

I doubt this will ever materialize, but you can do IPv6 BGP in the FRR package now. Jim Pingle

01:22 PM Bug #8550 (Closed): OpenBGPd: bgpd is not started at boot

This hasn't been happening for a long time now. Jim Pingle

01:22 PM Bug #7067 (Closed): usbhid-ups - no such file or directory

Jim Pingle

01:17 PM Bug #9185 (Resolved): Mailreport - Cant sending repports if multiple emails addresses in smtpnotifyemailaddress

PR was merged a long time ago. Jim Pingle

01:17 PM Feature #8416 (Resolved): Mailreport - Minute of the Hour

PR was merged a long time ago. Jim Pingle

01:13 PM Feature #8196: pfSense-pkg-LCDproc: add a shutdown/reboot control menu

PR was closed due to timeout - Requested changes were not made. Jim Pingle

01:13 PM Feature #8198: pfSense-pkg-LCDproc: Add a link status screen for each interface

PR was closed due to timeout - Requested changes were not made. Jim Pingle

01:11 PM Bug #6756 (Resolved): Updating cloned backend in WebGUI updates the original backend instead of the cloned backend

Jim Pingle

01:11 PM Bug #6511 (Resolved): In some circumstances the HAProxy clone front-end button can add blank list entries to the front end being cloned resulting in a config that cannot be applied.

Jim Pingle

01:10 PM Bug #6182 (Resolved): HAProxy not supporting ALPN

Jim Pingle

01:10 PM Bug #7523 (Resolved): HAproxy widget settings panel does not open

2.3.x is no longer supported, so the issue is moot. Jim Pingle

01:08 PM Bug #8307 (Resolved): HAproxy in pfsense 2.42-p1 creating a new frontend with a Shared Frontend issues invalid ip error

Jim Pingle

01:07 PM Feature #8523 (Resolved): make cookie inserted by haproxy secure

Jim Pingle

01:06 PM Bug #8932 (Resolved): Upgrade to HaProxy 0.59_11 fails on 2.4.3

Jim Pingle

01:05 PM Bug #8833 (Resolved): haproxy getarraybyref error

Jim Pingle

01:01 PM Feature #8031: FreeRADIUS copy entry function

Updated subject to reflect the request Jim Pingle

12:59 PM Bug #8047 (Resolved): XG-2758 - Coreboot Upgrade - Different ROM size

Jim Pingle

12:58 PM Bug #8193 (Resolved): Cellular Package Update

PR was merged long ago. Jim Pingle

12:57 PM Bug #8189 (Resolved): JavaScript does not work to disable/enable form elements

PR was merged long ago. Jim Pingle

12:55 PM Bug #8366 (Resolved): Avahi: "Publish DNS Servers" option does nothing

PR was merged long ago. Jim Pingle

07:03 AM Bug #9211: GeoIP broken in pfSense-pkg-ntopng-0.8.13_3

Added how to https://forum.netgate.com/topic/141150/ntop-geo-map/6 DRago_Angel [InV@DER]

08/15/2019

04:22 PM Bug #9681: [Monitoring] New views title are always in lower case.

PR https://github.com/pfsense/FreeBSD-ports/pull/662 Manuel Piovan

08/14/2019

02:30 PM Bug #9486: ifindex values used for softflowd are incorrect

Not sure there is a viable way for the softflowd to do that. The linked function is a C function in FreeBSD, but the ... Jim Pingle

02:30 PM Feature #9529 (Resolved): Version upgrade for FRR package and support new faster OSPF convergence features

It's not clear what version is being talked about here, but FRR is up at 6.0.x on 2.4.4-pX and 7.0.x on 2.5.0 snapsho... Jim Pingle

02:30 PM Feature #9530 (Duplicate): FRR package add sync function to HA / backup firewall

Duplicate of #9141 Jim Pingle

01:19 PM Feature #9227 (Rejected): Please include Tinc in base pfSense, as a standard way of configuring tunnels

There is no advantage to importing it into the base system. It can remain a package and do all it needs to do. Any im... Jim Pingle

12:59 PM Bug #9194 (Resolved): pfSense-Status_Monitoring - Can't Save default view

PR was merged several months ago. Jim Pingle

12:16 PM Bug #8900 (Resolved): pfBlockerNG

PR merged long ago. Jim Pingle

10:56 AM Feature #8547: fwknop Port Knocking Package

If you want secure remote access, use a VPN. If someone wants to make a package for this, we could review a PR for it... Jim Pingle

10:52 AM Feature #8442 (Rejected): ACME - custom script for DNS validation

Too much to go wrong with a custom script function like that. There have been numerous improvements in ACME provider ... Jim Pingle

10:31 AM Bug #8115 (Duplicate): After update 2.3.4_1-> 2.4.0 ospf over gre looks broken

Duplicate of #9204 Jim Pingle

09:56 AM Bug #8209 (Closed): Suricat Inline netmap bad packet errors

This report is rather old and several pfSense and Suricata versions ago. If it's still a problem, gather more detail ... Jim Pingle

04:45 AM Bug #9204: ospfd: GRE tunnels became unnumbered since 2.4.4

I doubt this is fixed since the offending code (frr/zebra/connected.c) has not been touched, but I'll give this a try... Firstname Surname

08/13/2019

08:07 PM Feature #9682 (Rejected): Please supply Emacs

The base install includes vi and ee, and you can edit remotely via scp.
It's meant to be a firewall not a general ... Jim Pingle

07:59 PM Feature #9682 (Rejected): Please supply Emacs

Emacs is not installed by default, and is not available as a package for installation. For emacs users, pfSense is ef... Jeffrey Walton

06:50 PM Feature #4503: GNUGateKeeper H.323 Proxy Package

Jim Pingle, this is very good news, I'm really looking forward to this package, but I'm not sure that this package pr... Aleksei Aksenov

12:53 PM Feature #4503: GNUGateKeeper H.323 Proxy Package

If someone wants to package that up properly and submit a PR, we can consider it for inclusion as a package. Jim Pingle

01:41 PM Feature #7903: Duo ssh package

See also: #6556 Jim Pingle

11:10 AM Bug #8251: Captiveportal + FreeRadius "Last activity" resets to Session start

Really? I checked the changelogs before and didn't see anything too interesting.
Also since I am somewhat afraid of ... Frotty Zaoldyeck

09:37 AM Bug #8251 (Feedback): Captiveportal + FreeRadius "Last activity" resets to Session start

There have been lots of Captive Portal changes since this was opened, you should re-test on a 2.5.0 snapshot to see i... Jim Pingle

10:04 AM Bug #9573 (Rejected): GeoIP database FAIL to download - Suricata package

Jim Pingle

10:00 AM Bug #9573: GeoIP database FAIL to download - Suricata package

I do not believe this represents an actual bug in the Suricata package. The user was attempting to follow one of the... Bill Meeks

10:02 AM Feature #4581 (Closed): Add dshield-sensor port to pfPorts

Jim Pingle

09:57 AM Feature #4687 (Duplicate): OpenVPN Client Export - Use the VPN description when producing the exported file (instead of host-proto-port combination)

Something like this was implemented long ago. Jim Pingle

09:57 AM Bug #4473 (Closed): Still can't run EGP and IGP on the same system

This is possible with FRR. Jim Pingle

09:57 AM Bug #7862 (Duplicate): package zabbix lts

Jim Pingle

09:50 AM Feature #7655 (Bogus): Captive portal and squid non transparent

Jim Pingle

09:50 AM Bug #7617 (Closed): OpenBGP not restarting on new WAN IP or firewall reload

Jim Pingle

09:33 AM Bug #8619 (Resolved): Domains improperly checked when registering DHCP static mappings

PR was merged over a year ago. Jim Pingle

09:33 AM Feature #8574: Enable AgentX-support in lldpd using GUI

Can you submit those patches as a PR? Jim Pingle

09:25 AM Bug #9108 (Closed): OpenVPN client without "explicit-exit-notify" does not trigger client-disconnect portion of /usr/local/sbin/openvpn.attributes.sh

Jim Pingle

09:25 AM Feature #9240 (Rejected): allow users to define custom ipsec configuration using web-page for ipsec

This isn't really viable, since there wouldn't be way for it to be useful to most people. It might get close if you h... Jim Pingle

09:15 AM Bug #9481 (Closed): traffic totals documentation link goes to 404 page

Either this has been fixed or I just can't reproduce it. Link goes to the main docs page since there is no specific p... Jim Pingle

09:15 AM Bug #9339 (Resolved): Misc typos in pfsense/FreeBSD-ports

PR was merged months ago Jim Pingle

09:08 AM Bug #9204 (Feedback): ospfd: GRE tunnels became unnumbered since 2.4.4

Can you test this with the current version of FRR (preferably on 2.5.0, if 2.4.4 doesn't work)?
FRR OSPF underwent... Jim Pingle

09:03 AM Bug #9451 (Resolved): Add Zabbix 4.2 (agent and proxy) packages

Jim Pingle

09:03 AM Feature #7179 (Resolved): Package Filer into 2.3

Jim Pingle

09:03 AM Feature #8731 (Resolved): FreeIPA support in FreeRADIUS package

Jim Pingle

09:03 AM Bug #6305 (Closed): Quagga problems updating routes / mistakenly showing "kernel"-routes while they are not

Jim Pingle

09:03 AM Bug #6350 (Closed): Auto Config Backup - Uncaught Exception

Jim Pingle

09:03 AM Bug #7161 (Resolved): pfSense-pkg-bind9 changelog pointing to non-existent location

Jim Pingle

09:00 AM Todo #9354 (Resolved): Update OpenVPN Client Export with OpenVPN 2.4.7

Jim Pingle

09:00 AM Feature #8610 (Resolved): FRR BGP "no bgp default ipv4-unicast" option.

Jim Pingle

08:59 AM Bug #9657 (Resolved): STunnel fails to generate an rc script

Jim Pingle

08:59 AM Bug #9640 (Resolved): FRR redistribution route maps not functional

Jim Pingle

08:58 AM Bug #9554 (Resolved): Stored XSS in ACME Package (version 0.5.7_1) /acme/acme_accountkeys_edit.php

Jim Pingle

08:58 AM Bug #9556 (Resolved): Encoding/validation issues in apcupsd_status.php

Jim Pingle

08:58 AM Bug #8308 (Resolved): FRR OSPF6D: interfaces not assigned to areas if they only have a link-local address

Jim Pingle

08:58 AM Bug #8749 (Resolved): OSPF6 nssa not working

Jim Pingle

08:58 AM Bug #8751 (Resolved): FRR prefix lists issues

Jim Pingle

08:58 AM Todo #8662 (Resolved): FFR OSPF Cleartext Password Lengths

Jim Pingle

08:58 AM Todo #8433 (Resolved): Upgrade NRPE-SSL Package to NRPE3

Jim Pingle

08:58 AM Bug #9340 (Resolved): Buypass CA does not support wildcard

Jim Pingle

08:58 AM Feature #9498 (Resolved): ACME Package: Sorting on name, expiration, etc

This has been in and working fine for a while. Jim Pingle

08:51 AM Bug #8167 (Resolved): FRR OSPF6 range problem (subnet not advertized)

Ended up adding this back, AFAIR it was an issue with the ordering of the statements. It's been fixed (properly) for ... Jim Pingle

08/12/2019

01:08 PM Bug #9681: [Monitoring] New views title are always in lower case.

At older systems I still have titles with mixed case. But new titles are in lower case. Grischa Zengel

01:03 PM Bug #9681 (Resolved): [Monitoring] New views title are always in lower case.

If I add "CamelCase" I will get "camelcase" as title.
With mixed upper and lower case the titles are more readable.
Grischa Zengel

12:58 PM Bug #9679 (Resolved): [Monitoring] Add View does not work

Great, thanks for testing! Jim Pingle

12:57 PM Bug #9679: [Monitoring] Add View does not work

There a no more new default tabs and removed the old one successfully with viconfig.
Thank you!
You can close t... Grischa Zengel

12:07 PM Bug #9679 (Feedback): [Monitoring] Add View does not work

I pushed a fix to avoid creating those extra "default" views, though they still cannot be deleted. You will have to m... Jim Pingle

11:50 AM Bug #9679 (In Progress): [Monitoring] Add View does not work

Jim Pingle

11:33 AM Bug #9679: [Monitoring] Add View does not work

The first bug is fixed. Thank you!
On cancel I still get new "default" views:... Grischa Zengel

10:40 AM Bug #9679 (Feedback): [Monitoring] Add View does not work

I was able to reproduce the problem here.
I pushed a new version of Status_Monitoring which corrects the usage of ... Jim Pingle

07:31 AM Bug #9679: [Monitoring] Add View does not work

That XML result looks like what happens when there is an attempt by the code to use an uninitialized array. Shouldn't... Jim Pingle

05:45 AM Bug #9679 (Resolved): [Monitoring] Add View does not work

I added "WAN" as new View and got "wan" in lower letters. Why lower letters?
I removed it and now I can't add a new ... Grischa Zengel

12:28 AM Bug #8811: in pfblockerng when change Rule Order generates duplicate all rules.

Its best to move to pfBlockerNG-devel which has this issue fixed plus many other improvements. These changes are not ... BBcan177 .

12:22 AM Bug #9662: PfblockerNG do not update after pfsense reboot and wait for next cron task

If you are using RAMdisks, its not recommend for packages that store data in the /var folder as that folder is wiped ... BBcan177 .

12:20 AM Bug #9676: AS lookup fails

The pkg uses the following service for ASN information:
https://api.bgpview.io/asn/8786/prefixes
Also BGP HE:
ht... BBcan177 .

08/08/2019

06:35 AM Bug #9676 (New): AS lookup fails

Using pfBlockerNG-devel 2.2.5_23
Trying to permit AS8786 gives no results (Other ASN works):... Rolf Larsen

08/07/2019

02:55 PM Bug #9675 (Resolved): ACME package "domain alias mode" is ignored

I was already in there fixing something else which, as it turns out, had a similar root cause, so it all worked out.
... Jim Pingle

02:50 PM Bug #9675: ACME package "domain alias mode" is ignored

Jim Pingle wrote:
> This should be fixed in ACME pkg version 0.6.2, which is building now.
That was quick! Update... Jonathan Grande

01:21 PM Bug #9675 (Feedback): ACME package "domain alias mode" is ignored

This should be fixed in ACME pkg version 0.6.2, which is building now. Jim Pingle

11:56 AM Bug #9675 (Resolved): ACME package "domain alias mode" is ignored

The domain alias mode check box seems to have no affect.
Expected result: --domain-alias added to to the acme.sh c... Jonathan Grande

08/06/2019

05:06 PM Feature #7449: feature request for openvpn-client-export package, add the support for openvpn up and down script, for mapping network drive

Pippin MMD wrote:
> This seems like not so good idea to me.
> One could setup a "Free VPN service" and execute scri... MIchael K

03:52 PM Bug #9665 (Feedback): acme.sh deleting A record for domain along with TXT record for _acme-challenge

This should be fixed in ACME pkg version 0.6 which will be up as soon as it builds. Jim Pingle

07:12 AM Feature #7794 (Resolved): FRR pkg pfsense no metric-type option in OSPF redistribute section of web-interface

Jim Pingle

02:39 AM Feature #7794: FRR pkg pfsense no metric-type option in OSPF redistribute section of web-interface

Tried latest stable 2.4.4-p3 with 6.0.2, everything is fine, I can assign metric type on any types of redistributed r... Constantine Kormashev

07:12 AM Feature #7792 (Resolved): FRR pkg pfsense can not wok as ABR with stub areas (no stub area bit)

Jim Pingle

04:15 AM Feature #7792: FRR pkg pfsense can not wok as ABR with stub areas (no stub area bit)

Tried on latest stable 2.4.4-p3 with 6.0.2, it works fine, stub areas are handled by cisco router without issue. Constantine Kormashev

02:06 AM Bug #8811: in pfblockerng when change Rule Order generates duplicate all rules.

I experienced this bug in an even worse manner. It duplicated all rules until my pfSense installation crashed with an... Jens Rauch

08/04/2019

04:00 PM Bug #9665 (Resolved): acme.sh deleting A record for domain along with TXT record for _acme-challenge

I was trying to set up a LetsEncrypt certificate for my domain using Linode's v4 DNS API. I was able to generate the ... Ronnie Thomas

08/02/2019

03:02 AM Bug #9662 (New): PfblockerNG do not update after pfsense reboot and wait for next cron task

After rebooting pfsense, pfblockerNG do not launch cron process to update and wait for next cron time.
While next ... Laurent BONNIN

07/31/2019

08:16 AM Bug #9619: FRR - Prefix Lists

thank you for your willingness to find out what i could have meant,
but really my problem was:
i really could not u... Jarek Nowak

07:13 AM Bug #9619: FRR - Prefix Lists

Jarek Nowak wrote:
> Also i did not ask for you validating my rules, if so your answer would be wrong because allowi... Jim Pingle

02:12 AM Bug #9619: FRR - Prefix Lists

Jim Pingle wrote:
> The first rule is wrong because a prefix list must contain prefixes, thus it should be @0.0.0.0/... Jarek Nowak

07/30/2019

07:05 PM Bug #9655: NUT missing from netgate UI

Wow ... yes it is; thank you! ;) Richard Davis

07:01 AM Bug #9655: NUT missing from netgate UI

Its in your Screenshot as "UPS". Flole Systems

10:03 AM Bug #9657 (Feedback): STunnel fails to generate an rc script

Should hopefully be fixed in pkg version 5.50. I removed one way it could have failed unexpectedly, potentially fixed... Jim Pingle

08:00 AM Bug #9657 (Resolved): STunnel fails to generate an rc script

In some circumstances the STunnel package fails to generate a default certificate as part on it's install script and ... Steve Wheeler

07/29/2019

06:50 PM Bug #9655: NUT missing from netgate UI

I've tried uninstalling, then installing, and "reinstalling" without success:
*Reinstallation log:*... Richard Davis

07:17 AM Bug #9655 (Not a Bug): NUT missing from netgate UI

You just need to reinstall the package. Somehow it isn't fully installed, and there isn't enough information here to ... Jim Pingle

07/28/2019

03:20 PM Bug #9655 (Not a Bug): NUT missing from netgate UI

After installing the nut package from the package manager on a new netgate system with the built-in theme, the NUT se... Richard Davis