pfSense » pfSense Packages

03/26/2020

12:57 PM Feature #10377: Allow usage of TOTP (Google-Authenticator) without PIN

Pardon my lack of experience using openvpn, but would this request mean all someone needs is the username? TOTP reall... Ben Cronce

09:10 AM Feature #10377 (New): Allow usage of TOTP (Google-Authenticator) without PIN

Currently it is not possible to create a radius user with TOTP enabled without entering an additional pin.
So to aut... Andreas Heckmann

06:30 AM Feature #9272 (Feedback): Allow multiple IP in ListenIP for Zabbix Agent

Renato Botelho

06:29 AM Bug #10338 (Feedback): FRR OSPF6 Router-ID configuration statement has changed

PR has been merged. Thanks! Renato Botelho

06:29 AM Feature #10357 (Feedback): Add Iperf verbose output option

PR has been merged. Thanks! Renato Botelho

06:24 AM Bug #8774 (Feedback): Whitelist ALC type not supported by ssl_bump

PR has been merged. Thanks! Renato Botelho

06:24 AM Bug #8887 (Feedback): Squid Proxy Interface not assignee to IPv6

PR has been merged. Thanks! Renato Botelho

06:24 AM Bug #10367 (Feedback): squid reverse proxy not starting

PR has been merged. Thanks! Renato Botelho

06:19 AM Bug #8625 (Feedback): PFsense squidGuard faulty URL check

PR has been merged. Thanks! Renato Botelho

03/23/2020

06:06 PM Bug #10370 (New): ntopng Timeseries not send to InfluxDB

When moving timeseries from rrd to influxdb it initial configures the db but does not send data to Influxdb.
Netga... Alex Garcia

02:28 PM Bug #10369: Remote OpenVPN server protocol definition

https://github.com/pfsense/FreeBSD-ports/pull/808 Viktor Gurov

02:25 PM Bug #10369 (Resolved): Remote OpenVPN server protocol definition

An exact definition of the OpenVPN remote server protocol must be present,
Otherwise, it may try to establish a conn... Viktor Gurov

03/22/2020

03:05 PM Bug #8625: PFsense squidGuard faulty URL check

https://github.com/pfsense/FreeBSD-ports/pull/806 Viktor Gurov

01:40 PM Bug #10367: squid reverse proxy not starting

Fix:
https://github.com/pfsense/FreeBSD-ports/pull/805 Viktor Gurov

08:06 AM Bug #10367 (Resolved): squid reverse proxy not starting

FATAL: Bungled /usr/local/etc/squid/squid.conf line 89: http_port Array:80 accel defaultsite=mysite.com vhost
http... Manuel Piovan

03/20/2020

07:45 AM Bug #8887 (Pull Request Review): Squid Proxy Interface not assignee to IPv6

Jim Pingle

06:21 AM Bug #8887: Squid Proxy Interface not assignee to IPv6

Squid IPv6 addresses needs square brackets
Otherwise, you will get:... Viktor Gurov

03/19/2020

03:04 PM Feature #10357 (Pull Request Review): Add Iperf verbose output option

Jim Pingle

01:17 AM Feature #10357: Add Iperf verbose output option

https://github.com/pfsense/FreeBSD-ports/pull/801 Viktor Gurov

01:12 AM Feature #10357 (Resolved): Add Iperf verbose output option

iperf verbose output (-V) shows more detailed information, including TCP MSS, CPU utilization, time and version:
<pr... Viktor Gurov

03:01 PM Feature #10356 (Pull Request Review): Support for additional Notification Support

PR: https://github.com/pfsense/FreeBSD-ports/pull/800 Jim Pingle

02:23 AM Feature #10358 (New): Stage FRR Configuration Changes

Changes made to the configuration on any FRR Component are applied immediate when hitting the save button. If a large... Luki TJ

03/18/2020

08:06 PM Feature #10356 (Resolved): Support for additional Notification Support

Refer to feature #10354 Telegram Notification Support in the main pfsense package.
In order for the service watch... John Kap

03/16/2020

08:06 AM Bug #8774 (Pull Request Review): Whitelist ALC type not supported by ssl_bump

Jim Pingle

03/15/2020

02:02 PM Bug #8774: Whitelist ALC type not supported by ssl_bump

https://github.com/pfsense/FreeBSD-ports/pull/799 Viktor Gurov

10:51 AM Feature #10347 (New): Request to add pull-filter

Since the option --route-nopull is under discussion to be deprecated I would like to propose --pull-filter to be adde... Pippin MMD

03/12/2020

01:33 PM Todo #9200: Add DNS support for Google domain to Acme manager

The question is how is certbot doing it using a plugin called dns-google
It is a python plugin Manvir Randhawa

09:13 AM Bug #10338 (Pull Request Review): FRR OSPF6 Router-ID configuration statement has changed

Jim Pingle

03/11/2020

10:13 PM Todo #9200: Add DNS support for Google domain to Acme manager

Google Domains currently does not have any API that allows DNS records to be managed programmatically, so no ACME cli... Jeremy  99

04:09 PM Bug #10338: FRR OSPF6 Router-ID configuration statement has changed

Only a quick fix so submitted a PR.
https://github.com/pfsense/FreeBSD-ports/pull/798 Ben Hughes

03:51 PM Bug #10338 (Resolved): FRR OSPF6 Router-ID configuration statement has changed

Trying out the latest 2.4.5 RC and I noticed that my ospf6 router-id had reverted to the default of picking the highe... Ben Hughes

06:48 AM Bug #10320 (Feedback): lcdproc Crash report begins

PR has been merged. Thanks! Renato Botelho

01:24 AM Feature #10335 (Resolved): Squid IPv6 transparent mode

Add IPv6 transparent mode feature to Squid
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193568#c2:
Your PF... Viktor Gurov

03/10/2020

11:14 AM Bug #10332 (Closed): PFBlockerNG loading GeoLite2-Country.mmdb

Running pfsense 2.4.5.r.20200305.1800 with pfBlockerNG-devel 2.2.5_29
After downloading GeoLite2-Country.tar.gz, p... John Clark

09:47 AM Bug #10326 (Not a Bug): Snort - Blocked Alert - Show IP but Description loss -> "Alert Description No Longer Available"

Jim Pingle

05:34 AM Bug #10330 (Feedback): BIND zone configuration displays wrong DS resource record with inline DNSSEC signing enabled

Hi everybody
The zone GUI for the BIND DNS server helpfully displays the DS resource records to transfer to the pa... Andreas Grommek

03/09/2020

06:48 PM Bug #10326: Snort - Blocked Alert - Show IP but Description loss -> "Alert Description No Longer Available"

This is not a bug. It's caused by the alert log file getting purged by either getting rotated as part of the periodic... Bill Meeks

12:13 PM Bug #10326 (Not a Bug): Snort - Blocked Alert - Show IP but Description loss -> "Alert Description No Longer Available"

Snort v 3.2.9.10
Package Dependencies:
snort-2.9.15  barnyard2-1.13_1
In the blocked tab show data in the IP C... Diego Leon

10:58 AM Feature #9003 (Feedback): Add 'Copy Running to Saved' option to the raw config

PR has been merged. Thanks! Renato Botelho

10:53 AM Feature #8196 (Feedback): pfSense-pkg-LCDproc: add a shutdown/reboot control menu

PR has been merged. Thanks! Renato Botelho

10:52 AM Feature #8198 (Feedback): pfSense-pkg-LCDproc: Add a link status screen for each interface

PR has been merged. Thanks! Renato Botelho

10:45 AM Feature #8574 (Feedback): Enable AgentX-support in lldpd using GUI

PR has been merged. Thanks! Renato Botelho

10:32 AM Bug #8887 (Feedback): Squid Proxy Interface not assignee to IPv6

PR has been merged on 2.4.5 and 2.5.0. Thanks! Renato Botelho

10:28 AM Feature #10297 (Feedback): IPv6 user attributes

PR has been merged. Thanks! Renato Botelho

10:03 AM Feature #9272 (Pull Request Review): Allow multiple IP in ListenIP for Zabbix Agent

Jim Pingle

04:48 AM Feature #9272: Allow multiple IP in ListenIP for Zabbix Agent

Fix + allow to use :: and ::/1 IPv6 addresses:
https://github.com/pfsense/FreeBSD-ports/pull/791 Viktor Gurov

09:56 AM Bug #10320 (Pull Request Review): lcdproc Crash report begins

Jim Pingle

03/07/2020

05:14 PM Bug #10320: lcdproc Crash report begins

for($i = 0; $i < ($lcdpanel_height - 1) && i < count($traffic); $i++)... Manuel Piovan

05:07 PM Bug #10320: lcdproc Crash report begins

the first crash seem to be related to the last option undere screen, Addresses by traffic
i add this information: WA... Manuel Piovan

05:04 PM Bug #10320: lcdproc Crash report begins

if i stop the service lcdproc i have another crash report for a while, i think LCDd is killed but lcdproc took some t... Manuel Piovan

03:33 PM Bug #10320 (Resolved): lcdproc Crash report begins

Crash report begins. Anonymous machine information:
amd64
12.0-RELEASE-p10
FreeBSD 12.0-RELEASE-p10 ce9563d5729(... Manuel Piovan

12:26 PM Bug #6690: SURICATA IPS Issue - Kills VLANS & Traffic Shaper

Tenzen Tunkman wrote:
> This issue is still not solved - Inline filtering will break traffic shaping as well as for ... Bill Meeks

08:19 AM Bug #6690: SURICATA IPS Issue - Kills VLANS & Traffic Shaper

This issue is still not solved - Inline filtering will break traffic shaping as well as for example traffic graph fun... Tenzen Tunkman

03/06/2020

06:05 AM Bug #8729 (Resolved): IPv6 - FRR BGP issue with Redistribute connected networks

tested on 2.5.0.a.20200305.2255 with frr 0.6.4_2
works as expected - address family sections now looks good
Viktor Gurov

03/02/2020

12:58 PM Bug #10309 (Rejected): frr in pf2.4.5

Most of these are not bugs but just a fact of how the FRR package works. Configuring FRR manually in Linux (or even F... Jim Pingle

12:45 PM Bug #10309 (Rejected): frr in pf2.4.5

1.when i deleted an Neighbor via web gui, but this session still run in frr. i have to restart pf system.
2.when i c... yon Liu

11:03 AM Bug #10185 (Closed): Suricata 'Alert Log View Filter' undesirably port matches substrings instead of exact port

Jim Pingle

11:03 AM Feature #9848 (Closed): file-store retention limits

Jim Pingle

11:03 AM Bug #10244 (Closed): PHP crash: suricata

Jim Pingle

03/01/2020

06:07 PM Bug #10279: pfSense's OpenVM Tools on ESXi 6.7 no longer provides guest vm functionality

Thanks for the info! Looking ahead, ESXi 7.0 is headed toward a launch at VMworld late August 2020. That said, if 2... Travis McMurry

02/29/2020

09:19 PM Bug #10185: Suricata 'Alert Log View Filter' undesirably port matches substrings instead of exact port

The requested feature has been added to the Filter Panel on the ALERTS tab of the latest Suricata GUI package release... Bill Meeks

09:16 PM Feature #9848: file-store retention limits

This feature has been added to the LOGS MGMT tab in Suricata and also code was added to the logs and space management... Bill Meeks

09:13 PM Bug #10244: PHP crash: suricata

This is addressed by the latest posted versions of the Suricata GUI packages for pfSense 2.4.5-RC and 2.5-DEVEL. The ... Bill Meeks

02/28/2020

10:09 AM Bug #10302: LIGHTSQUID - Running When Squid Disabled - 2.4

Reporting bugs against outdated versions is not allowed, either.
Post on a forum thread for assistance, not here. Jim Pingle

10:03 AM Bug #10302: LIGHTSQUID - Running When Squid Disabled - 2.4

2.4.3-RELEASE
been up for 13 days
lightsquid package version has not been updated in a while
Lightsquid www 3.... Web Dawg

09:56 AM Bug #10302: LIGHTSQUID - Running When Squid Disabled - 2.4

I can stop it from services. I can't reboot this router to test right now. Web Dawg

09:54 AM Bug #10302 (Rejected): LIGHTSQUID - Running When Squid Disabled - 2.4

There is not nearly enough information here for a proper bug report.
This site is not for support or diagnostic di... Jim Pingle

09:52 AM Bug #10302 (Rejected): LIGHTSQUID - Running When Squid Disabled - 2.4

I have my squid proxy disabled:
@
7445/tcp open ssl/http lighttpd 1.4.48
| http-auth:
| HTTP/1.1 401 Unauth... Web Dawg

08:14 AM Feature #8196 (Pull Request Review): pfSense-pkg-LCDproc: add a shutdown/reboot control menu

Jim Pingle

12:36 AM Feature #8196: pfSense-pkg-LCDproc: add a shutdown/reboot control menu

fixed/resolved PR:
https://github.com/pfsense/FreeBSD-ports/pull/784 Viktor Gurov

08:05 AM Feature #8198 (Pull Request Review): pfSense-pkg-LCDproc: Add a link status screen for each interface

Jim Pingle

12:08 AM Feature #8198: pfSense-pkg-LCDproc: Add a link status screen for each interface

fixed/resolved PR:
https://github.com/pfsense/FreeBSD-ports/pull/783 Viktor Gurov

02/27/2020

02:26 PM Bug #10299: Snort - Blocked Alert - Description loss -> Alert Description No Longer Available

Bill Meeks wrote:
> Diego Leon wrote:
> > Snort v 3.2.9.10
> >
> > Package Dependencies:
> > snort-2.9.15  ... Diego Leon

12:54 PM Bug #10299 (Not a Bug): Snort - Blocked Alert - Description loss -> Alert Description No Longer Available

Jim Pingle

12:54 PM Bug #10299: Snort - Blocked Alert - Description loss -> Alert Description No Longer Available

Diego Leon wrote:
> Snort v 3.2.9.10
>
> Package Dependencies:
> snort-2.9.15  barnyard2-1.13_1
>
> The S... Bill Meeks

10:19 AM Bug #10299 (Not a Bug): Snort - Blocked Alert - Description loss -> Alert Description No Longer Available

Snort v 3.2.9.10
Package Dependencies:
snort-2.9.15  barnyard2-1.13_1
The Snort first report in Blocked ta... Diego Leon

01:02 PM Bug #10292: Suricata not respecting SID Mgmt list

There were zero changes to that part of the Suricata code in version 4.1.6_3. In fact, both updates to 4.1.6_2 and 4.... Bill Meeks

10:12 AM Bug #10265: Adding a Note with malformed title will force system restore

It is not viable to set that list up dynamically, since if a user removes the package, the value is still in the conf... Jim Pingle

10:10 AM Bug #10265: Adding a Note with malformed title will force system restore

Jim Pingle wrote:
>
> Yes that's a general issue with XML storage but it's unrelated to this specific bug. We use ... Viktor Gurov

08:03 AM Feature #8574 (Pull Request Review): Enable AgentX-support in lldpd using GUI

Jim Pingle

05:35 AM Feature #8574: Enable AgentX-support in lldpd using GUI

https://github.com/pfsense/FreeBSD-ports/pull/782 Viktor Gurov

07:31 AM Feature #9989 (Pull Request Review): Add FreeBSD port and pfSense plugin for HoneyTrap

PR: https://github.com/pfsense/FreeBSD-ports/pull/772 Jim Pingle

07:24 AM Feature #10297 (Pull Request Review): IPv6 user attributes

Jim Pingle

03:24 AM Feature #10297: IPv6 user attributes

https://github.com/pfsense/FreeBSD-ports/pull/781 Viktor Gurov

01:09 AM Feature #10297 (Assigned): IPv6 user attributes

Add IPv6 related attributes no the user configuration page in the same way as existing IPv4 Network Configuration:
F... Viktor Gurov

05:34 AM Feature #9249 (Feedback): [siproxd] Add config for siptrunk plugin

PR has been merged. Thanks! Renato Botelho

05:32 AM Feature #8878 (Feedback): Propagate user's description field into QR code for FreeRADIUS

PR has been merged. Thanks! Renato Botelho

05:28 AM Bug #8729 (Feedback): IPv6 - FRR BGP issue with Redistribute connected networks

PR has been merged. Thanks! Renato Botelho

05:21 AM Bug #4497 (Feedback): Using a specific password within FreeRADIUS user management causes pfSense to restore a backup!

Renato Botelho

02/26/2020

02:03 PM Bug #10291 (Resolved): Export using DDNS hostnames (port forward targets) does not include domain name for split DDNS types

Works as expected now. Full hostname is observed in @remote@ statements which only had the short hostname before. Ent... Jim Pingle

11:08 AM Bug #10294 (New): FRR Route Counts Incorrect on Status Page

Something is still truncating the route counts on the FRR status pages. Seems to be intermittent.
Zebra Routes D... Chris Linstruth

10:02 AM Feature #9249 (Pull Request Review): [siproxd] Add config for siptrunk plugin

Jim Pingle

04:37 AM Feature #9249: [siproxd] Add config for siptrunk plugin

from siproxd.conf.example:... Viktor Gurov

09:57 AM Feature #8878 (Pull Request Review): Propagate user's description field into QR code for FreeRADIUS

Jim Pingle

03:27 AM Feature #8878: Propagate user's description field into QR code for FreeRADIUS

https://github.com/pfsense/FreeBSD-ports/pull/779 Viktor Gurov

03:43 AM Bug #8885 (Closed): HAProxy "Log hostname parameter broke local syslog

no such issue with haproxy-devel 0.60_3 on pfSense 2.4.5.r.20200225.2100 and 2.5.0.a.20200225.0859
- hostname field... Viktor Gurov