Project

General

Profile

Activity

From 01/10/2020 to 02/08/2020

02/08/2020

12:02 PM Bug #10245 (Not a Bug): PHP errors in snort package
Running 2.4.5-RC with Snort package.
Crash Reporter is reporting an error in the snort package. Crash report foll...
John Silva
11:59 AM Bug #10244 (Closed): PHP crash: suricata
Running 2.4.5-RC with Suricata package.
Crash Reporter is reporting an error in the suricata package. Crash repor...
John Silva
09:59 AM Bug #9935 (Resolved): hide ECDSA certs for Zabbix
tested on pfSense 2.5.0.a.20200207.2007 with zabbix-agent44 1.0.4_3 and zabbix-proxy44 1.0.4_3
works as expected -...
Viktor Gurov
09:11 AM Feature #10243: rawserial driver for lcdproc
https://github.com/pfsense/FreeBSD-ports/pull/768 Viktor Gurov
09:09 AM Feature #10243 (Resolved): rawserial driver for lcdproc
Rawserial driver has been avalbile since 0.5.7 this will dump raw serial data to the serial port. Hackers/makers can ... Viktor Gurov
08:56 AM Feature #10242: E2guardian Web filtering package
https://github.com/pfsense/FreeBSD-ports/pull/767
initial version - copy of original package with changed director...
Viktor Gurov
08:48 AM Feature #10242 (New): E2guardian Web filtering package
E2guardian Web filtering http://e2guardian.org
original package by Marcello Coutinho (Apache 2 license):
https://...
Viktor Gurov
07:19 AM Feature #7895: Add a script for CARP monitoring to NRPE
fix that adds ${MKDIR} ${STAGEDIR}${PREFIX}/libexec/nagios line to Makefile:
https://github.com/pfsense/FreeBSD-port...
Viktor Gurov
01:12 AM Feature #10220: Add softflow 1.0.0 features - sampling and PSAMP export
This PR fix input validation, to allow select PSAMP protocol version:
https://github.com/pfsense/FreeBSD-ports/pull/...
Viktor Gurov

02/07/2020

11:15 PM Bug #10218 (Resolved): Telegraf: Error creating the telegraf.ca file when you have more then one CA in pfSense
works as expected on pfSense 2.5.0.a.20200207.2007 and 2.4.5.r.20200206.1944
Telegraf 0.9_2
Viktor Gurov
08:06 AM Bug #10218 (Feedback): Telegraf: Error creating the telegraf.ca file when you have more then one CA in pfSense
Pull request has been merged. Thanks! Renato Botelho
11:08 PM Feature #7895: Add a script for CARP monitoring to NRPE
I'm getting a build error with the addition of the script:... Ronald Schellberg
08:39 AM Feature #10140 (Closed): allow to select webserver certificate
we discussed this with BBcan177 - this is unnecessary
I think this can be useful only if the company uses a specia...
Viktor Gurov
08:18 AM Bug #8830: Automatic flowbit resolution setting does not match description
Pull Request only applied on 2.5.0 Renato Botelho
08:16 AM Bug #8830 (Feedback): Automatic flowbit resolution setting does not match description
Pull request has been merged. Thanks! Renato Botelho
08:11 AM Feature #9916 (Feedback): Check allow-transfer in custom option when the zone is slave
Pull request has been merged. Thanks! Renato Botelho
08:08 AM Feature #10220 (Feedback): Add softflow 1.0.0 features - sampling and PSAMP export
Pull request has been merged. Thanks! Renato Botelho
04:51 AM Bug #9934 (New): suricata update kills WAN interface
same issue on XG-1537 (pfSense 2.4.4-p3, suricata 4.1.6_3) with ix interface,
I found that killing suricata process ...
Viktor Gurov

02/06/2020

03:56 PM Feature #8547: fwknop Port Knocking Package
Jim Pingle wrote:
> If you want secure remote access, use a VPN. If someone wants to make a package for this, we cou...
Kurt Yoder
02:24 PM Bug #9934 (Not a Bug): suricata update kills WAN interface
Jim Pingle
01:51 PM Bug #9934: suricata update kills WAN interface
Suricata running with Inline IPS Mode uses the netmap kernel device. When Suricata stops and restarts, that also stop... Bill Meeks
03:38 AM Bug #9934: suricata update kills WAN interface
You can set Suricata to "Live Reload" the new rules without restarting itself.
Enable this global option to preven...
Danilo Zrenjanin

02/03/2020

07:41 AM Bug #8830 (Pull Request Review): Automatic flowbit resolution setting does not match description
Jim Pingle
04:33 AM Feature #10227 (Resolved): ACME: Do not show passwords
Those DNS validation methods that uses ordinary username/password for authentication (such as DNS-GratisDNS) should n... Torben Hørup

02/01/2020

06:19 AM Bug #8830: Automatic flowbit resolution setting does not match description
This PR simply sets the default value for this checkbox to on when adding a new interface:
https://github.com/pfsens...
Viktor Gurov

01/31/2020

09:38 PM Feature #9238: Add support for Zerotier
Package has been updated to run on 2.4.4-RELEASE-p3. Still some work to be done on setting up the interfaces, right n... Gregory Moore
08:33 AM Bug #8538 (Closed): arpwatch missing ethercodes.dat
already in 0.2.0:... Viktor Gurov

01/30/2020

09:26 AM Feature #10165: Add High-Availability tracking to avahi package.
Renato Botelho wrote:
> PR has been merged on 2.5.0 and 2.4.5 branches. Thanks!
do you plan to merge it on 2.4.4 ...
Viktor Gurov
08:03 AM Feature #7895 (Pull Request Review): Add a script for CARP monitoring to NRPE
Jim Pingle
05:43 AM Feature #7895: Add a script for CARP monitoring to NRPE
https://github.com/pfsense/FreeBSD-ports/pull/759 Viktor Gurov
06:56 AM Bug #8194 (Closed): BIND fails to respond after interface goes down
no such issue on pfSense 2.4.5.r.20200128.2345 with BIND 9.14_1 Viktor Gurov
06:12 AM Bug #8400 (Closed): FreeRadius 3 EAP-TLS Missing O.U. Option
Duplicate of https://redmine.pfsense.org/issues/8224 Viktor Gurov
05:14 AM Bug #8195 (Closed): BIND packages launches two instances of /usr/local/sbin/named on boot
no such issue with BIND package 9.14_1
tested on pfSense 2.4.5.r.20200128.2118 and 2.5.0.a.20200129.1414
Viktor Gurov
02:31 AM Feature #9916: Check allow-transfer in custom option when the zone is slave
updated PR:
https://github.com/pfsense/FreeBSD-ports/pull/758
Viktor Gurov

01/29/2020

07:18 AM Feature #10220 (Pull Request Review): Add softflow 1.0.0 features - sampling and PSAMP export
Jim Pingle
03:58 AM Feature #10220: Add softflow 1.0.0 features - sampling and PSAMP export
https://github.com/pfsense/FreeBSD-ports/pull/757 Viktor Gurov
03:14 AM Feature #10220 (Resolved): Add softflow 1.0.0 features - sampling and PSAMP export
Add sampling configuration to softflowd package:... Viktor Gurov
07:16 AM Bug #10218 (Pull Request Review): Telegraf: Error creating the telegraf.ca file when you have more then one CA in pfSense
Jim Pingle
12:46 AM Bug #10218: Telegraf: Error creating the telegraf.ca file when you have more then one CA in pfSense
https://github.com/pfsense/FreeBSD-ports/pull/756 Viktor Gurov

01/28/2020

03:43 PM Bug #10218 (Resolved): Telegraf: Error creating the telegraf.ca file when you have more then one CA in pfSense
I'm running the 2.4.5-RC with Telegraf package 0.9_1 and found that Telegraf wouldn't start when I have more then one... Grimson Gretzleburg

01/27/2020

12:18 PM Bug #10212 (Not a Bug): Don't show services not running when they are disabled
That is only true of system services, not packages. Packages have no central enable/disable mechanism for services, s... Jim Pingle
12:00 PM Bug #10212 (Not a Bug): Don't show services not running when they are disabled
If I disable DNSBL it still reports that the service isn't running, as the documentation says:
"A service is also ...
Patrik Baat
12:18 PM Bug #10213 (Not a Bug): Don't show services not running when they are disabled
That is only true of system services, not packages. Packages have no central enable/disable mechanism for services, s... Jim Pingle
12:02 PM Bug #10213 (Not a Bug): Don't show services not running when they are disabled
If I disable Antivirus it still reports that the services (clam and icap) isn't running, as the documentation says:
...
Patrik Baat

01/25/2020

11:34 AM Bug #10209: Canceling Status - Monitoring - Add View results in duplicate Default Views which can't be deleted
Jim Pingle wrote:
> The duplicate and case issues are both resolved in the current version of the status monitoring ...
mastr boy
11:07 AM Bug #10209: Canceling Status - Monitoring - Add View results in duplicate Default Views which can't be deleted
I just tried it with the command: pkg upgrade -y pfSense-Status_Monitoring
Then the most elegant temporary solution ...
Fabián Burbano
09:55 AM Bug #10209: Canceling Status - Monitoring - Add View results in duplicate Default Views which can't be deleted
The duplicate and case issues are both resolved in the current version of the status monitoring code (there are separ... Jim Pingle
09:49 AM Bug #10209: Canceling Status - Monitoring - Add View results in duplicate Default Views which can't be deleted
I ask:
If it is marked as a duplicate of a resolved bug, is this bug considered resolved?
It is definitely not re...
Fabián Burbano
09:01 AM Bug #10209 (Duplicate): Canceling Status - Monitoring - Add View results in duplicate Default Views which can't be deleted
Duplicate of #9679 Jim Pingle
08:49 AM Bug #10209: Canceling Status - Monitoring - Add View results in duplicate Default Views which can't be deleted
mastr boy wrote:
> Canceling Status - Monitoring - Add View results in duplicate Default Views which can't be delete...
Fabián Burbano
06:42 AM Bug #10209 (Duplicate): Canceling Status - Monitoring - Add View results in duplicate Default Views which can't be deleted
Canceling Status - Monitoring - Add View results in duplicate Default Views which can't be deleted:
!https://i.imgur...
mastr boy
04:15 AM Bug #10197 (Resolved): freeRADIUS virtual-server-default: modules daily, weekly, monthly, forever in authorize section prevent virtual server from loading
tested on 2.4.5.a.20200124.0853 with freeradius3 0.15.7_10
works as expected
Viktor Gurov

01/24/2020

03:34 PM Feature #10207 (Rejected): OpenBGPD - Prefix Filter
OpenBGPD won't be receiving any new development. Use FRR instead. Jim Pingle
03:27 PM Feature #10207 (Rejected): OpenBGPD - Prefix Filter
Add an option to limit the allowed prefixes in OpenBGP.
It would be a global option, but would be located at the ...
Kevin Wier
02:48 PM Feature #9555: pimd package
This is also now available to install and test on 2.4.4-p3. Jim Pingle
10:06 AM Bug #10188: Reputation tab is not working
No this page is built by the MaxMind GeoIP update process since the "Reputation" functionality requires GeoIP Data. T... BBcan177 .
09:08 AM Feature #10165 (Resolved): Add High-Availability tracking to avahi package.
Renato Botelho wrote:
> PR has been merged on 2.5.0 and 2.4.5 branches. Thanks!
works as expected - start/stop on...
Viktor Gurov
07:55 AM Feature #10202 (Feedback): redistribute bgp + route-map filtering in OSPF6
Everything we can do in OSPF6 here is now in pkg v 0.6.4, which will show up soon for everyone.
Due to limitations...
Jim Pingle

01/23/2020

02:49 PM Feature #10202 (In Progress): redistribute bgp + route-map filtering in OSPF6
Jim Pingle
03:05 AM Feature #10202 (Resolved): redistribute bgp + route-map filtering in OSPF6
Add ability to redistribute routes from BGP
and filter redistributed data with route-map (distribute-list is not sup...
Viktor Gurov
02:21 PM Feature #9555: pimd package
This is now available to install on 2.4.5 and 2.5.0 snapshots, and is ready for testing.
Forum thread for feedback...
Jim Pingle
11:07 AM Bug #10197 (Feedback): freeRADIUS virtual-server-default: modules daily, weekly, monthly, forever in authorize section prevent virtual server from loading
PR has been merged. Thanks! Renato Botelho
07:28 AM Bug #10197 (Pull Request Review): freeRADIUS virtual-server-default: modules daily, weekly, monthly, forever in authorize section prevent virtual server from loading
Jim Pingle
01:45 AM Bug #10197: freeRADIUS virtual-server-default: modules daily, weekly, monthly, forever in authorize section prevent virtual server from loading
That's correct, see https://fossies.org/linux/freeradius-server/raddb/mods-available/README.rst:
_Conditional Modu...
Viktor Gurov
10:28 AM Feature #10165 (Feedback): Add High-Availability tracking to avahi package.
PR has been merged on 2.5.0 and 2.4.5 branches. Thanks! Renato Botelho
04:44 AM Bug #9836 (Resolved): OpenBGPD package deamon starts twice
tested 2.5.0.a.20200122.2323 on with OpenBGPD 0.11_11
starts fine
Viktor Gurov
01:52 AM Bug #10198 (Closed): Zabbix agents: Not listening on IPsec VTI interface
Alex Diamantopulo wrote:
> Attempt to make Zabbix agent or proxy listen on IPsec VTI interface fails with following ...
Viktor Gurov

01/22/2020

03:43 PM Feature #9555 (Feedback): pimd package
Should be available to install as a package on 2.5.0 and 2.4.5 snapshot builds soon. Jim Pingle
03:06 PM Feature #9555: pimd package
I've been tinkering with this and just about have it ready. Will commit soon. Jim Pingle
05:53 AM Bug #10198 (Closed): Zabbix agents: Not listening on IPsec VTI interface
Attempt to make Zabbix agent or proxy listen on IPsec VTI interface fails with following error (GUI):
The followin...
Alex Diamantopulo
02:31 AM Bug #10197 (Resolved): freeRADIUS virtual-server-default: modules daily, weekly, monthly, forever in authorize section prevent virtual server from loading
When using freeRADIUS 3 package with mysql enabled for accounting only and using pfsense gui for users/authorization,... Michael Lazernik

01/21/2020

07:40 AM Bug #6684 (Resolved): Setting IKEv2 Phase 2 in Mobile Config appears to generate invalid Apple Profile
Jim Pingle
02:31 AM Bug #6684: Setting IKEv2 Phase 2 in Mobile Config appears to generate invalid Apple Profile
tested on pfSense 2.4.5.a.20200120.1342 with ipsec-profile-wizard 0.12
no such issue - you can set DH group in bot...
Viktor Gurov
12:08 AM Bug #9738 (Resolved): Client IP address validation disallows CIDR notation
Renato Botelho wrote:
> PR has been merged. Thanks!
tested on 2.5.0.a.20200119.2335 with freeradius30.15.7_9
w...
Viktor Gurov

01/20/2020

02:44 PM Bug #9583 (Resolved): Freeradius 3 auth error on OTP (only on PFSense 2.5-dev)
Works fine on _9. Jim Pingle

01/17/2020

01:01 PM Bug #10187: Insertion of ZERO_WIDTH_SPACE into IPv6 addresses make it impossible to use browser find functionality
Izaac Falken wrote:
> Bill Meeks wrote:
> > You are welcome to submit a modification to the PHP code that works bet...
Bill Meeks
09:52 AM Bug #10187 (Needs Patch): Insertion of ZERO_WIDTH_SPACE into IPv6 addresses make it impossible to use browser find functionality
Jim Pingle
09:27 AM Bug #10187: Insertion of ZERO_WIDTH_SPACE into IPv6 addresses make it impossible to use browser find functionality
Bill Meeks wrote:
> You are welcome to submit a modification to the PHP code that works better.
'k.
Izaac Falken
10:35 AM Bug #9601 (Resolved): Status_Monitoring rrd_fetch_json.php does not encode errors returned by the RRD module.
This is OK on 2.4.5 and 2.5.0, the call returns the escaped version. Jim Pingle
10:12 AM Bug #9583 (Feedback): Freeradius 3 auth error on OTP (only on PFSense 2.5-dev)
I knew GA had a python 3.x issue but just hadn't got around to fixing it yet. It was a simple change:
2.5.0: https...
Jim Pingle
03:15 AM Bug #9583: Freeradius 3 auth error on OTP (only on PFSense 2.5-dev)
mOTP is ok
this is python3.7 code issue:...
Viktor Gurov
02:11 AM Bug #9583: Freeradius 3 auth error on OTP (only on PFSense 2.5-dev)
issue for both Google Authenticator and mOTP
on the latest 2.4.5 and 2.5...
Viktor Gurov
07:09 AM Bug #9738 (Feedback): Client IP address validation disallows CIDR notation
PR has been merged. Thanks! Renato Botelho

01/16/2020

11:00 PM Bug #10188: Reputation tab is not working
... Viktor Gurov
10:46 PM Bug #10188 (New): Reputation tab is not working
got error page after clicking on Reputation tab:... Viktor Gurov
08:44 PM Bug #10187: Insertion of ZERO_WIDTH_SPACE into IPv6 addresses make it impossible to use browser find functionality
Izaac Falken wrote:
> No, I am not viewing raw HTML. I'm hitting Ctrl-F in Firefox. Find-in-page breaks on breaks.
...
Bill Meeks
12:52 PM Bug #10187: Insertion of ZERO_WIDTH_SPACE into IPv6 addresses make it impossible to use browser find functionality
No, I am not viewing raw HTML. I'm hitting Ctrl-F in Firefox. Find-in-page breaks on breaks.
While I appreciate t...
Izaac Falken
09:34 AM Bug #10187 (Not a Bug): Insertion of ZERO_WIDTH_SPACE into IPv6 addresses make it impossible to use browser find functionality
Jim Pingle
09:02 AM Bug #10187: Insertion of ZERO_WIDTH_SPACE into IPv6 addresses make it impossible to use browser find functionality
This was done by design to preserve the page display asthetics. When you copy-paste using the pfSense GUI or do other... Bill Meeks
02:53 AM Bug #10187 (Needs Patch): Insertion of ZERO_WIDTH_SPACE into IPv6 addresses make it impossible to use browser find functionality
Yes, seriously. For some bizarre reason a ZERO_WIDTH_SPACE is inserted after every colon in an IPv6 address on both ... Izaac Falken
11:01 AM Bug #9854: pfBlockerNG Message: Allowed memory size of 536870912 bytes exhausted
at the same time:... Viktor Gurov

01/15/2020

12:28 PM Bug #10185: Suricata 'Alert Log View Filter' undesirably port matches substrings instead of exact port
Sean McBride wrote:
> Or even just adding some text under the input fields to specify that it takes regexes.
Yeah...
Bill Meeks
09:53 AM Bug #10185: Suricata 'Alert Log View Filter' undesirably port matches substrings instead of exact port
Or even just adding some text under the input fields to specify that it takes regexes. Sean McBride
09:30 AM Bug #10185: Suricata 'Alert Log View Filter' undesirably port matches substrings instead of exact port
The alerts log filtering tool uses Perl regular expression syntax. If you want to find say just Port 25, then try thi... Bill Meeks

01/14/2020

04:19 PM Bug #10185 (Closed): Suricata 'Alert Log View Filter' undesirably port matches substrings instead of exact port
See attached screenshot. When I put a port number, like "25" in the 'destination port' field, I would expect to get ... Sean McBride
12:10 PM Todo #9392 (Resolved): Status_Traffic_Totals needs updated for vnstat 2.0
Totals match up with expectations on pkg v 2.3.1. Jim Pingle
08:34 AM Todo #9392 (Feedback): Status_Traffic_Totals needs updated for vnstat 2.0
Try again once pkg 2.3.1 is available with the next snapshot run. Jim Pingle
08:16 AM Todo #9392: Status_Traffic_Totals needs updated for vnstat 2.0
I have a fix for this. Values are coming in Bytes by default, old base was KiB, so it needs adjusted to match. Jim Pingle
08:11 AM Todo #9392 (In Progress): Status_Traffic_Totals needs updated for vnstat 2.0
I'm seeing that now as well. The command line shows what appears to be more accurate data.... Jim Pingle
01:35 AM Todo #9392: Status_Traffic_Totals needs updated for vnstat 2.0
something is off in units on 2.5 at least since up date from 12:00 to 2:30 in morning and on 18M dsl its already show... Michael Kellogg

01/11/2020

01:20 AM Bug #10146 (Resolved): squid4 obsolete options
tested on 2.5.0.a.20200110.1822 with squid-0.4.44_13
works as expected
Viktor Gurov

01/10/2020

02:45 PM Todo #9392 (Resolved): Status_Traffic_Totals needs updated for vnstat 2.0
I've tried this on a variety of 2.4.5 and 2.5.0 systems both CE and Factory and with pkg version 2.3 it seems to be O... Jim Pingle
07:03 AM Todo #9392 (Feedback): Status_Traffic_Totals needs updated for vnstat 2.0
Jared pushed the remaining required fixes yesterday, so it should be ready to test once that's in snapshots Jim Pingle
07:10 AM Bug #10146 (Feedback): squid4 obsolete options
This was merged a few days ago Jim Pingle
06:29 AM Bug #10152 (Resolved): Squid: "unexpected operator" error in squid rc script
Jim Pingle
06:05 AM Bug #10152: Squid: "unexpected operator" error in squid rc script
Hello
With the last merge and in a new fresh install... no issues.
Stefano Mereghetti
 

Also available in: Atom