Activity
From 03/04/2020 to 04/02/2020
04/02/2020
-
09:50 PM Feature #10415: FreeRADIUS Package: Add option to enter NT or MD5 prehashed passwords in configuration
- Link to pull request: https://github.com/pfsense/FreeBSD-ports/pull/822 Implements #10415 Adds prehashed NT-Password ...
-
- The FreeRADIUS Package currently provides the option to use 'Cleartext-Password' and only hashing option - 'MD5-Passw...
-
03:19 PM Bug #10413 (Pull Request Review): BIND plugins are not copied into chroot
- PR: https://github.com/pfsense/FreeBSD-ports/pull/816
-
02:55 PM Bug #10413 (Resolved): BIND plugins are not copied into chroot
- BIND 9.13.5 introduced a new plugin system, and the filter-aaaa support was moved to a plugin, so we need to copy the...
-
03:07 PM Bug #10378: Add IPv6 network to Squid localnet
- Fix:
https://github.com/pfsense/FreeBSD-ports/pull/817 -
01:07 PM Bug #10411: ACME only uses DoH, Broken renewal
- Jim Pingle wrote:
> Still seems like acme.sh should handle that more gracefully without relying on such a long timeo... -
- Still seems like acme.sh should handle that more gracefully without relying on such a long timeout, or have an option...
-
- Thank you for reviewing Jim.
I have been researching further and found closed issues on the acme.sh github:
https... -
- That will need to be raised as an issue directly with acme.sh not here.
-
- The issue is described on the forum here:
> https://forum.netgate.com/topic/150984/doh-verification-method
DoH ap... -
- PR 814 was merged
04/01/2020
-
-
- This has been implemented in ACME package version 0.6.6
I tested it against a local squid instance and it worked. ... -
- The ACME package does not utilize the system proxy settings when making outbound queries.
Though there is not spec... -
- This is fixed in ACME package version 0.6.6
-
- When adding more than one Domain SAN list entry to an ACME certificate, password type fields are rendered as checkbox...
-
01:33 AM Bug #10379: squid not authenticate LDAP/RADIUS
- Ismael Peixoto Azambuja wrote:
> O 71 wrote:
> > Hi Ismael,
> >
> > Can you give me the line write in the squid...
03/31/2020
-
06:29 PM Bug #10379: squid not authenticate LDAP/RADIUS
- O 71 wrote:
> Hi Ismael,
>
> Can you give me the line write in the squid.conf file ?
> If you check or uncheck "... -
-
- Fix: https://github.com/pfsense/FreeBSD-ports/pull/814
-
- I test and it works if I modify the file /usr/local/pkg/squid.inc like this :...
-
- Hi Ismael,
Can you give me the line write in the squid.conf file ?
If you check or uncheck "LDAP follow referrals... -
- available update: 0.4.44_16, here all work perfect now.
do not know who to thank, but thanks for the correction! -
10:33 AM Bug #10385: Pb with Username authorized characters when OTP is disabled
- There is also an issue with being able to user MAC addresses in the FreeRadius username in the XX:XX:XX:XX:XX:XX beca...
03/30/2020
-
- Hello,
I update to 0.4.44_16, I use LDAP Authentification. The password is ok, but it doesn't work correctly with ... -
- PR was merged
-
-
02:53 PM Bug #10393 (Resolved): Syslog-ng TLS support is broken
- The TLS support currently is broken because the CA certificate file name is not correct. For this reason the clients ...
-
-
-
- Since the user enters the PIN alongside the randomly generated OTP code (password=PIN+CODE) I am not seeing how any c...
-
11:36 AM Feature #10377: Allow usage of TOTP (Google-Authenticator) without PIN
- Thanks for your answers.
I would agree, generally the 4 digit pin + totp makes the system safer.
Here are our t... -
- While the GA script allows omitting the PIN I don't see why you'd want to reduce the security in that way. Part of th...
-
04:19 AM Bug #10261: Arpwatch fails to download ethercodes.dat
- This is still a issue !!
I have all vendors as unknown.
I fix it and after a while it get broken again.
Us...
03/29/2020
-
- O 71 wrote:
> I have the same problem after update.
>
> I think the problem comes from the -w parameter. It shoul... -
- A picture of my test to illustrate
-
- I have the same problem after update.
I think the problem comes from the -w parameter. It should be done like this... -
- Ismael Peixoto Azambuja wrote:
> Hi, i test this fix, but dont work here...
I have successfully tested this PR w...
03/28/2020
-
- Viktor Gurov wrote:
> Local and RADIUS auth works fine
>
> LDAP auth fix:
> https://github.com/pfsense/FreeBSD-p... -
- Local and RADIUS auth works fine
LDAP auth fix:
https://github.com/pfsense/FreeBSD-ports/pull/811 -
- I have not found the problem yet, but I did test on an outdated server, 2.4.4p3 squid 0.4.44_8 and everything works p...
-
12:58 PM Bug #10385: Pb with Username authorized characters when OTP is disabled
- Hi, thanks for your fast answer.
So I have modifief the file /usr/local/pkg/freeradius.inc, line 3668 and 3669 wit... -
- need to revert back https://github.com/pfsense/FreeBSD-ports/pull/775/
and cherry-pick https://redmine.pfsense.org... -
- Hi,
I have done the update to the 2.4.5 version of pfsense, with the update of the last package of freeradius3.
... -
- works as expected on pfSense 2.4.5 with freeradius3 0.15.7_11
-
- https://forum.netgate.com/topic/151725/freeradius-ipv6-framed-ip-issue-with-2-4-5:...
03/27/2020
-
- Cache.log
[2.4.4-RELEASE][admin@PFLog01.intra.uergs.rs]/var/squid/logs: cat cache.log
2020/03/27 10:29:52 kid1| S... -
- Apparently everything is right in the configuration, when I type user and password, in the log appears users. In this...
-
- Ismael Peixoto Azambuja wrote:
> pfsense 2.4.4p3 with all packages updated, using squid with LDAP authentication wa... -
- seems regression by https://redmine.pfsense.org/issues/9217
-
- pfsense 2.4.4p3 with all packages updated, using squid with LDAP authentication was working perfectly, server with 2 ...
-
- works as expected on 2.5.0.a.20200326.1148 with squid 0.4.44_15
-
- tested on 2.4.5 with squid 0.4.44_15
reverse proxy starts successfully -
- tested on 2.4.5 with squid 0.4.44_15
works as expected -
- Currently, the “Allow users in the interface” option only adds the IPv4 interface subnet to the list of allowed subne...
-
- tested on 2.4.5 with squid 0.4.44_15
now it works as expected -
- works as expected on 2.4.5 with iperf 3.0.2_4
-
- works as expected on 2.4.5 with zabbix-agent44 1.0.4_4
03/26/2020
-
12:57 PM Feature #10377: Allow usage of TOTP (Google-Authenticator) without PIN
- Pardon my lack of experience using openvpn, but would this request mean all someone needs is the username? TOTP reall...
-
- Currently it is not possible to create a radius user with TOTP enabled without entering an additional pin.
So to aut... -
06:30 AM Feature #9272 (Feedback): Allow multiple IP in ListenIP for Zabbix Agent
-
- PR has been merged. Thanks!
-
- PR has been merged. Thanks!
-
- PR has been merged. Thanks!
-
- PR has been merged. Thanks!
-
- PR has been merged. Thanks!
-
- PR has been merged. Thanks!
03/23/2020
-
06:06 PM Bug #10370 (New): ntopng Timeseries not send to InfluxDB
- When moving timeseries from rrd to influxdb it initial configures the db but does not send data to Influxdb.
Netga... -
- https://github.com/pfsense/FreeBSD-ports/pull/808
-
- An exact definition of the OpenVPN remote server protocol must be present,
Otherwise, it may try to establish a conn...
03/22/2020
-
- https://github.com/pfsense/FreeBSD-ports/pull/806
-
- Fix:
https://github.com/pfsense/FreeBSD-ports/pull/805 -
08:06 AM Bug #10367 (Resolved): squid reverse proxy not starting
- FATAL: Bungled /usr/local/etc/squid/squid.conf line 89: http_port Array:80 accel defaultsite=mysite.com vhost
http...
03/20/2020
-
-
- Squid IPv6 addresses needs square brackets
Otherwise, you will get:...
03/19/2020
-
-
- https://github.com/pfsense/FreeBSD-ports/pull/801
-
- iperf verbose output (-V) shows more detailed information, including TCP MSS, CPU utilization, time and version:
<pr... -
- PR: https://github.com/pfsense/FreeBSD-ports/pull/800
-
02:23 AM Feature #10358 (New): Stage FRR Configuration Changes
- Changes made to the configuration on any FRR Component are applied immediate when hitting the save button. If a large...
03/18/2020
-
08:06 PM Feature #10356 (Resolved): Support for additional Notification Support
- Refer to feature #10354 Telegram Notification Support in the main pfsense package.
In order for the service watch...
03/16/2020
03/15/2020
-
- https://github.com/pfsense/FreeBSD-ports/pull/799
-
10:51 AM Feature #10347 (New): Request to add pull-filter
- Since the option --route-nopull is under discussion to be deprecated I would like to propose --pull-filter to be adde...
03/12/2020
-
01:33 PM Todo #9200: Add DNS support for Google domain to Acme manager
- The question is how is certbot doing it using a plugin called dns-google
It is a python plugin -
03/11/2020
-
10:13 PM Todo #9200: Add DNS support for Google domain to Acme manager
- Google Domains currently does not have any API that allows DNS records to be managed programmatically, so no ACME cli...
-
04:09 PM Bug #10338: FRR OSPF6 Router-ID configuration statement has changed
- Only a quick fix so submitted a PR.
https://github.com/pfsense/FreeBSD-ports/pull/798 -
- Trying out the latest 2.4.5 RC and I noticed that my ospf6 router-id had reverted to the default of picking the highe...
-
- PR has been merged. Thanks!
-
- Add IPv6 transparent mode feature to Squid
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193568#c2:
Your PF...
03/10/2020
-
11:14 AM Bug #10332 (Closed): PFBlockerNG loading GeoLite2-Country.mmdb
- Running pfsense 2.4.5.r.20200305.1800 with pfBlockerNG-devel 2.2.5_29
After downloading GeoLite2-Country.tar.gz, p... -
-
05:34 AM Bug #10330 (Feedback): BIND zone configuration displays wrong DS resource record with inline DNSSEC signing enabled
- Hi everybody
The zone GUI for the BIND DNS server helpfully displays the DS resource records to transfer to the pa...
03/09/2020
-
06:48 PM Bug #10326: Snort - Blocked Alert - Show IP but Description loss -> "Alert Description No Longer Available"
- This is not a bug. It's caused by the alert log file getting purged by either getting rotated as part of the periodic...
-
12:13 PM Bug #10326 (Not a Bug): Snort - Blocked Alert - Show IP but Description loss -> "Alert Description No Longer Available"
- Snort v 3.2.9.10
Package Dependencies:
snort-2.9.15 barnyard2-1.13_1
In the blocked tab show data in the IP C... -
- PR has been merged. Thanks!
-
- PR has been merged. Thanks!
-
- PR has been merged. Thanks!
-
- PR has been merged. Thanks!
-
- PR has been merged on 2.4.5 and 2.5.0. Thanks!
-
- PR has been merged. Thanks!
-
-
- Fix + allow to use :: and ::/1 IPv6 addresses:
https://github.com/pfsense/FreeBSD-ports/pull/791 -
03/07/2020
-
- for($i = 0; $i < ($lcdpanel_height - 1) && i < count($traffic); $i++)...
-
- the first crash seem to be related to the last option undere screen, Addresses by traffic
i add this information: WA... -
- if i stop the service lcdproc i have another crash report for a while, i think LCDd is killed but lcdproc took some t...
-
- Crash report begins. Anonymous machine information:
amd64
12.0-RELEASE-p10
FreeBSD 12.0-RELEASE-p10 ce9563d5729(... -
- Tenzen Tunkman wrote:
> This issue is still not solved - Inline filtering will break traffic shaping as well as for ... -
08:19 AM Bug #6690: SURICATA IPS Issue - Kills VLANS & Traffic Shaper
- This issue is still not solved - Inline filtering will break traffic shaping as well as for example traffic graph fun...
03/06/2020
-
- tested on 2.5.0.a.20200305.2255 with frr 0.6.4_2
works as expected - address family sections now looks good
Also available in: Atom