Project

General

Profile

Activity

From 09/06/2019 to 10/05/2019

10/05/2019

09:15 PM Bug #9811 (Pull Request Review): apcupsd - can not set BATTERYLEVEL and MINUTES to -1 although these are valid values
Jim Pingle
09:04 PM Bug #9811: apcupsd - can not set BATTERYLEVEL and MINUTES to -1 although these are valid values
Pull request: https://github.com/pfsense/FreeBSD-ports/pull/682 Daniel Baldes
09:01 PM Bug #9811 (Resolved): apcupsd - can not set BATTERYLEVEL and MINUTES to -1 although these are valid values
According to the apcupsd manual [1], BATTERYLEVEL and MINUTES can be set to -1 in order to disable these features.
...
Daniel Baldes

10/04/2019

03:11 AM Bug #9809 (Resolved): postgresql support not compiled

Errors in log after enabling DB logging:
bandwidthd[71947]: Postgresql logging selected but postgresql support is ...
Viktor Gurov

10/03/2019

11:20 AM Bug #9807 (Resolved): Packets Monitoring graphs are being incorrectly scaled
It looks like the data used for the packets logging is being incorrectly multiplied by 8 as though it is assuming a B... Steve Wheeler

09/27/2019

05:51 AM Feature #9798 (New): add ipv4 and ipv6 dnscrypt-resolvers feeds
Lists of public DNSCrypt-enabled DNS resolvers:
https://raw.githubusercontent.com/dyne/dnscrypt-proxy/master/dnscr...
Viktor Gurov

09/26/2019

02:41 PM Bug #9772 (Resolved): can't enable Split ANY-ANY option
Jim Pingle
02:27 PM Bug #9772: can't enable Split ANY-ANY option
This issue can be marked as RESOLVED. The identified problem is fixed in this pull request submitted against pfSense-... Bill Meeks
02:41 PM Bug #9789 (Resolved): snort process stays active after deleting interface
Jim Pingle
02:26 PM Bug #9789: snort process stays active after deleting interface
This issue can be marked as RESOLVED. Pull request 678 has been submitted to teh pfSense-2.5-DEVEL branch here: http... Bill Meeks
11:40 AM Bug #9789: snort process stays active after deleting interface
Corresponded with Jim Pingle about this issue. There is no elegant or simple way for notifying a running package (An ... Bill Meeks
07:32 AM Bug #9795 (Not a Bug): FRR add two or more ipv6 BGP Neighbors will system down
In my lab, I have two interconnected instances of FRR with the same ASN on two neighbor entries and it's stable. It's... Jim Pingle
12:12 AM Bug #9795 (Not a Bug): FRR add two or more ipv6 BGP Neighbors will system down
I found that the problem recurred,If I add two or more ipv6 BGP Neighbors, the Remote AS is the same ASN number. like... yon Liu
06:56 AM Feature #6866: Suricata multiple interfaces
Idar Lund wrote:
> You are only covering the first half of the description - which is of no relevance except giving ...
Bill Meeks
12:41 AM Feature #6866: Suricata multiple interfaces
You are only covering the first half of the description - which is of no relevance except giving you some background ... Idar Lund

09/25/2019

02:42 PM Feature #6785 (Resolved): Allow setting of suricata's meta-field-limt libhtp parameter
Jim Pingle
02:40 PM Feature #6785: Allow setting of suricata's meta-field-limt libhtp parameter
This issue can be closed as RESOLVED. The requested change has been added to the Suricata GUI package in this pull re... Bill Meeks
02:30 PM Feature #6866 (Rejected): Suricata multiple interfaces
Jim Pingle
02:24 PM Feature #6866: Suricata multiple interfaces
No, it is not possible to have Suricata see internal (post-NAT) addresses when it runs on the WAN. Suricata hooks int... Bill Meeks
02:27 PM Bug #7223 (Resolved): IPv4 Rules not working in Inline Mode
Jim Pingle
02:20 PM Bug #7223: IPv4 Rules not working in Inline Mode
This issue can be closed as "RESOLVED". It was caused by an overly broad automatic pass list mechanism that was initi... Bill Meeks
08:13 AM Feature #9793 (Resolved): Add support for HAProxy ACLs "src -f /ipalias.lst" to use pfBlockerNG IP Alias Native
Currently pfBlockerNG is power tool to create any IP aliases you can imagine: from domain resolving, ASNs, parser of ... DRago_Angel [InV@DER]
07:34 AM Bug #9789: snort process stays active after deleting interface
This behavior will impact Barnyard2 and also Suricata (and Barnyard2 in a Suricata setup).
This behavior is also g...
Bill Meeks
05:41 AM Bug #9789: snort process stays active after deleting interface
perhaps the same behavior with barnyard2 Viktor Gurov
06:39 AM Bug #9752 (Feedback): ACME - Actions have no access to additionally generated certificate files.
Renato Botelho
06:35 AM Bug #9752: ACME - Actions have no access to additionally generated certificate files.
PR has been merged. Thanks! Renato Botelho

09/24/2019

11:33 AM Bug #9789 (Resolved): snort process stays active after deleting interface
after deleting interface on Interfaces / Interface Assignments page,
snort process stays active and you can't disabl...
Viktor Gurov
10:12 AM Todo #9787 (Feedback): Update Mail Reports to deal with clog deprecation
Fixed in Mail Reports pkg version 3.6, for 2.5.0 only. Jim Pingle
09:48 AM Todo #9787 (Resolved): Update Mail Reports to deal with clog deprecation
Since clog is deprecated, the Mail Reports package needs adjusted to handle the new log functions.
See Also: #8350
Jim Pingle
10:12 AM Bug #8315 (Feedback): Mail Report mail_report_send() behavior different than notify_via_smtp()
This may have already been fixed since the patch didn't match the current code, but I removed the explicit set of SMT... Jim Pingle

09/23/2019

11:42 AM Feature #9315: Add Package: dnscrypt-proxy
The package 'unbound', used by FreeBSD, supports and uses DNScrypt from version 1.9.1
See: https://github.com/NLne...
Carlo Hoffmann
11:19 AM Bug #9752 (Pull Request Review): ACME - Actions have no access to additionally generated certificate files.
Jim Pingle
11:17 AM Bug #9752: ACME - Actions have no access to additionally generated certificate files.
Pull request: https://github.com/pfsense/FreeBSD-ports/pull/675 Sebastian Fiebig

09/21/2019

02:16 AM Bug #8404: IPSec pre-shared key
I have tried 2.4.4_3 today, but it shows the same behavior.
Still need to disable the VPN dashboard plugin to access...
Lasse not relevant

09/20/2019

09:52 AM Bug #9776 (Resolved): Wrong function in squidguard_log.php
There is an error on squidguard_log.php
This function needs to be changed...
2S Suchorski GAPLS
03:52 AM Feature #9774 (New): Squid logs / remote logs
it would be nice to have a button for downloading squid logs like access.log
and / or
it would be nice to have it ...
Manuel Piovan

09/19/2019

12:54 PM Feature #9773 (Duplicate): pimd to replace IGMP Proxy
Duplicate of #9555 Jim Pingle
12:19 PM Feature #9773 (Duplicate): pimd to replace IGMP Proxy
I have had zero luck with IGMP proxy and have been told/found out that it is busted on the later releases of PFSense.... Forrest McMean
11:40 AM Bug #9772 (Resolved): can't enable Split ANY-ANY option
If you enable *Split ANY-ANY* option on interface page is not enabled,
and it's disabled in config.xml:...
Viktor Gurov
07:20 AM Bug #7293 (Feedback): dns/bind911 requires TCP_RFC7413 in kernel
TCP_RFC7413 is part of pfSense kernel on 2.5.0 Renato Botelho

09/18/2019

09:35 AM Feature #9751 (Resolved): Need an "inclusive" and "exclusive" method of specifying ports
Jim Pingle
09:31 AM Feature #9751: Need an "inclusive" and "exclusive" method of specifying ports
Works great now! Thanks! George Phillips
01:08 AM Feature #9751: Need an "inclusive" and "exclusive" method of specifying ports
Good change Jim Denny Page

09/17/2019

10:04 AM Bug #7471 (Rejected): Cellular pkg errors on install
Probably it was fixed by other changes but today package can be installed/deinstalled and upgraded without any issues... Renato Botelho
08:00 AM Bug #9760 (Resolved): FRR: "Log Adjacency Changes" Option in "OSPF Settings" not working.
Jim Pingle
07:52 AM Bug #9760: FRR: "Log Adjacency Changes" Option in "OSPF Settings" not working.
I tested the fix and it works well.
Thank you very much!
Bruno Solal

09/16/2019

12:51 PM Bug #9760 (Feedback): FRR: "Log Adjacency Changes" Option in "OSPF Settings" not working.
You are correct, that test was wrong. I pushed a fix. Thanks! Jim Pingle
11:08 AM Feature #9765: Update iperf package to iperf3
Didn't add any options yet, only converted the existing setup to iperf3. If it works as expected, then we can look at... Jim Pingle
11:07 AM Feature #9765 (Feedback): Update iperf package to iperf3
Jim Pingle
09:41 AM Feature #9765 (Resolved): Update iperf package to iperf3
iperf2 is obsolete at this point and iperf3 contains a number of useful additional features such as reverse testing a... Steve Wheeler

09/14/2019

09:50 AM Feature #9762 (Pull Request Review): Squid Reverse Proxy Change redir domain(s) to use regex
Jim Pingle
07:05 AM Feature #9762 (Resolved): Squid Reverse Proxy Change redir domain(s) to use regex
Change the ACL for reverse proxy redirects from using the rather limited "dstdomain" to using "dstdom_rexex".
This m...
Johan Samuelsson

09/13/2019

05:43 PM Bug #9760 (Resolved): FRR: "Log Adjacency Changes" Option in "OSPF Settings" not working.
When the option "Log Adjacency Changes" is selected in the GUI in "OSPF Settings" tab, no changes are made in frr con... Bruno Solal
12:05 PM Bug #9759 (Duplicate): new vnstat doesn't work on latest 2.5, need script update
Duplicate of #9392 Jim Pingle
12:04 PM Bug #9759 (Duplicate): new vnstat doesn't work on latest 2.5, need script update
After pressing "Enable Graphing" button got error:
Error: Unable to open database "/var/db/vnstat/vnstat.db": No s...
Viktor Gurov
11:01 AM Feature #9751 (Feedback): Need an "inclusive" and "exclusive" method of specifying ports
Implemented in Avahi pkg version 2.1. Jim Pingle
10:52 AM Feature #9751: Need an "inclusive" and "exclusive" method of specifying ports
Looks like Avahi fails to parse the line when the total length of the line (including "allow-interfaces=") is greater... Jim Pingle
10:20 AM Bug #8067 (Closed): Avahi can't be stopped from registering on unassigned interfaces
Since Avahi pkg version 2.0.x, it switched to using whitelisting, so this is no longer relevant. Jim Pingle
10:20 AM Bug #7755 (Closed): Avahi package is not secure by default
Since Avahi pkg version 2.0.x, it switched to using whitelisting, so this is no longer relevant. Jim Pingle

09/12/2019

02:53 PM Bug #9752 (Resolved): ACME - Actions have no access to additionally generated certificate files.
The additionally generated certificate files are only available after the actions ("postscripts") have been run. This... Sebastian Fiebig
01:41 PM Feature #9751 (Resolved): Need an "inclusive" and "exclusive" method of specifying ports
At this time, Avahi doesn't seem to like to run if the "allow-interfaces" config item contains more than 33 interface... George Phillips
11:29 AM Bug #9750 (Resolved): squidguard_blacklist.php & squidguard_log.php wrong status icon link
If you are on page Package / SquidGuard / Blacklists or Package / SquidGuard / Logs
and press status icon
you got /...
Viktor Gurov
10:33 AM Feature #9749 (New): 95th percentile missing for quality in monitoring
95th percentile missing for quality also old graphs use to draw a line for 95th percentile Michael Kellogg

09/10/2019

11:50 PM Feature #8547: fwknop Port Knocking Package
Just started using pfSense recently and I'm really surprised fwknop is not available. I can install fwknop on OpenWrt... William Evans
10:48 AM Feature #9742 (Resolved): Print Patch ID in log while patching
that would be very useful for support and security perspective.
for now it only run ACB backup while patching.
Viktor Gurov
04:41 AM Bug #9740 (Resolved): empty Status / Tinc VPN page on latest 2.5
Simple p2p connection between pfSense-2.4.4-p3 and pfSense-2.5.0
tinc-1.0.35 on both
nothing on Status / Tinc VPN...
Viktor Gurov

09/09/2019

01:36 PM Bug #9738 (Resolved): Client IP address validation disallows CIDR notation
Hi,
As specified in the FreeRADIUS documentation, `ipaddr` can be supplied in CIDR format when defining clients:
...
Tom Whitwell
 

Also available in: Atom