pfSense » pfSense Packages

05/25/2020

03:56 PM Bug #10476 (Resolved): Services - Acme - Certificates using loopia API

resolved in the latest acme pkg 0.6.8:... Viktor Gurov

05/24/2020

02:44 PM Bug #10502: LLDP spamming errors on Netgate XG-7100

Additionally LLDPd with active NDP (enabled and forced) throw errors if chosen interfaces are parent or child of VLAN... DRago_Angel [InV@DER]

04:27 AM Bug #10502: LLDP spamming errors on Netgate XG-7100

From github:
Sorry for late reply,
Yep, I have lagg on SPF+ ix0 & ix1 for reductant connection.
In the UI I select... DRago_Angel [InV@DER]

10:16 AM Bug #10590 (Closed): pfBlockerNG: Invalid argument supplied for foreach()

Dear
I received this crash report today on my router. Maybe this should be checked.... Kevin Holvoet

05/23/2020

05:12 AM Feature #9315: Add Package: dnscrypt-proxy

And Nginx can be used as DoH server with common DNS server as upstream which can be localhost unbound server. One min... DRago_Angel [InV@DER]

05/22/2020

12:08 PM Bug #10573 (Feedback): Netgate_Coreboot_Upgrade cannot write to flash in 2.4.5

New flashrom fails with `-p internal:ich_spi_force=yes`. It should be fixed on version 0.28 Renato Botelho

10:14 AM Feature #8727 (Pull Request Review): Clone button in cron pkg

Jim Pingle

09:11 AM Feature #8727: Clone button in cron pkg

https://github.com/pfsense/FreeBSD-ports/pull/864 Viktor Gurov

09:35 AM Feature #9874 (Pull Request Review): safesearch enforcing

Jim Pingle

05/21/2020

04:23 PM Bug #9139: telegraf: add ping for default gateway(s)

The current ping plugin works well for pinging external IPs, but it would be really nice if the local gateway(s) were... Ryan Jaeb

09:33 AM Bug #10444: FRR will not start in 2.4.5 aarch64

Jim Pingle wrote:
> Luiz told me he'd work on this
Any news on this? Really looking forward to getting my bgp ba... Zachary McGibbon

03:38 AM Feature #10500: Build HAProxy Package with buildin Prometheus exporter

If someone need how-to, I wrote it here: https://www.reddit.com/r/PFSENSE/comments/gns3qr/haproxy_20_prometheus_monit... DRago_Angel [InV@DER]

03:10 AM Feature #10500: Build HAProxy Package with buildin Prometheus exporter

OK:... Viktor Gurov

03:17 AM Bug #9635 (Resolved): lldpd (and probably ladvd) doesn't work on units with an integrated switch

tested on SG-1100 and XG-7100 - works as expected, lldpd uses the correct interfaces for integrated switches instead ... Viktor Gurov

01:29 AM Feature #9874: safesearch enforcing

Minor WebGUI fix:
https://github.com/pfsense/FreeBSD-ports/pull/863 Viktor Gurov

05/20/2020

12:41 PM Bug #10579 (Rejected): Blinkled segfaults with SEGV_MAPERR

Hello,
blinkled seem to segfault on my pfSense.... Kacper Boström

10:45 AM Feature #10500 (Resolved): Build HAProxy Package with buildin Prometheus exporter

Jim Pingle

10:30 AM Feature #10500: Build HAProxy Package with buildin Prometheus exporter

Tested, build-in exporter works. Thank you. DRago_Angel [InV@DER]

07:41 AM Feature #10500 (Feedback): Build HAProxy Package with buildin Prometheus exporter

PR has been merged. Thanks! Renato Botelho

07:44 AM Bug #10572 (Feedback): STARTTLS option is ignored

PR has been merged. Thanks! Renato Botelho

05/19/2020

11:52 AM Bug #10573 (Resolved): Netgate_Coreboot_Upgrade cannot write to flash in 2.4.5

The adi_flash_util binary appears to be handing bad parameters to flashrom in pfSense 2.4.5.
It can read the flash... Steve Wheeler

10:16 AM Bug #10572 (Pull Request Review): STARTTLS option is ignored

Jim Pingle

08:46 AM Bug #10572: STARTTLS option is ignored

https://github.com/pfsense/FreeBSD-ports/pull/862 Viktor Gurov

08:44 AM Bug #10572 (Feedback): STARTTLS option is ignored

STARTTLS option ($usetls or "-ZZ") is never used as arg for _basic_ldap_auth_ Viktor Gurov

10:12 AM Feature #10570: OpenVPN Export for iOS should use .ovpn12 for certs and private key

If we change anything at all, it should only affect the Viscosity bundle export format. Nothing else.
If Apple uti... Jim Pingle

03:04 AM Feature #10570 (New): OpenVPN Export for iOS should use .ovpn12 for certs and private key

https://forum.netgate.com/topic/144204/openvpn-export-for-ios-should-use-ovpn12-for-certs-and-private-key:
Have a ... Viktor Gurov

08:39 AM Feature #10500: Build HAProxy Package with buildin Prometheus exporter

Kilian Ries wrote:
> I'm also interested in the haproxy prometheus exporter - if you need a tester just let me know.... DRago_Angel [InV@DER]

07:34 AM Feature #10500: Build HAProxy Package with buildin Prometheus exporter

I'm also interested in the haproxy prometheus exporter - if you need a tester just let me know... Kilian Ries

04:06 AM Feature #10500: Build HAProxy Package with buildin Prometheus exporter

Hi @Viktor can I test it on my pfsense 2.4.5? And if yes - then how? I have System Patcher but doesn't know if it can... DRago_Angel [InV@DER]

03:57 AM Feature #10500: Build HAProxy Package with buildin Prometheus exporter

https://github.com/pfsense/pfsense/pull/4320 Viktor Gurov

04:26 AM Feature #10571: Add zabbix-proxy50 and zabbix-agent50 packages

sorry, tried search before create ticket and doesn't saw this one. DRago_Angel [InV@DER]

04:15 AM Feature #10571 (Rejected): Add zabbix-proxy50 and zabbix-agent50 packages

duplicate of #10557 Viktor Gurov

04:09 AM Feature #10571 (Rejected): Add zabbix-proxy50 and zabbix-agent50 packages

Hi, there is some days ago was been released new version of Zabbix LTS 5.0, could you please add packages for it to p... DRago_Angel [InV@DER]

04:18 AM Feature #10557: Add Zabbix 5.0 LTS (agent and proxy) packages

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=246447 Viktor Gurov

05/18/2020

09:56 AM Feature #10479 (Feedback): Keep settings after deinstall option

PR has been merged. Thanks! Renato Botelho

09:56 AM Bug #9635 (Feedback): lldpd (and probably ladvd) doesn't work on units with an integrated switch

PR has been merged. Thanks! Renato Botelho

05/15/2020

01:52 PM Bug #7654 (Resolved): Can't use a LDAP search filter containing an accent

Supplied string is saved as expected and without error. Jim Pingle

11:11 AM Feature #10500 (Pull Request Review): Build HAProxy Package with buildin Prometheus exporter

Jim Pingle

10:57 AM Feature #10500: Build HAProxy Package with buildin Prometheus exporter

https://github.com/pfsense/FreeBSD-ports/pull/861 Viktor Gurov

08:35 AM Bug #9635 (Pull Request Review): lldpd (and probably ladvd) doesn't work on units with an integrated switch

Jim Pingle

08:34 AM Bug #10502 (Pull Request Review): LLDP spamming errors on Netgate XG-7100

Jim Pingle

05/14/2020

10:15 AM Bug #4497 (Resolved): Using a specific password within FreeRADIUS user management causes pfSense to restore a backup!

Field is CDATA escaped in the config. Password @W!f!4c3ss.@ was saved without error and present in the config after. Jim Pingle

08:40 AM Bug #10502: LLDP spamming errors on Netgate XG-7100

https://github.com/pfsense/FreeBSD-ports/pull/860 Viktor Gurov

08:39 AM Bug #9635: lldpd (and probably ladvd) doesn't work on units with an integrated switch

https://github.com/pfsense/FreeBSD-ports/pull/860 Viktor Gurov

05:17 AM Bug #9635 (New): lldpd (and probably ladvd) doesn't work on units with an integrated switch

After I manually changed it to:
>
> After I manually changed it to:
> /usr/local/sbin/lldpd -l -I 'lagg0.4089' -C... Viktor Gurov

06:45 AM Feature #10557: Add Zabbix 5.0 LTS (agent and proxy) packages

The latest FreeBSD ports version is 4.4.7:
http://pkg.freebsd.org/freebsd:12:x86:64/latest/All/zabbix44-agent-4.4.7.... Viktor Gurov

05:31 AM Feature #10557 (Resolved): Add Zabbix 5.0 LTS (agent and proxy) packages

New release from zabbix. Please add this new version.
https://www.zabbix.com/rn/rn5.0.0 Pim Janssen

05/12/2020

10:52 AM Bug #10552 (Resolved): Typo in OpenBGPD's settings page

There's a typo in OpenBGPD's settings page. Below "General Options" it says "Router IP" when in fact it should be say... Tim Wolter

05/11/2020

08:51 AM Feature #10479 (Pull Request Review): Keep settings after deinstall option

Jim Pingle

05/10/2020

08:10 PM Feature #10547 (New): Add package addrwatch. Addrwatch is like arpwatch but works with ipv4 and ipv6

From the developer website:
> This is a tool similar to arpwatch. It main purpose is to monitor network and log di... Rick Coats

05/09/2020

10:00 AM Feature #10541 (Feedback): Squid failover and load balancing

https://forum.netgate.com/topic/97328/work-in-progress-squid-failover-and-load-balancing-for-pfsense:
I'm seeking a ... Viktor Gurov

08:57 AM Feature #10479: Keep settings after deinstall option

also remove /usr/local/etc/raddb on package uninstall:
https://github.com/pfsense/FreeBSD-ports/pull/859 Viktor Gurov

08:51 AM Bug #10445: BIND crashed when added RPZ. rpz is not a master or slave zone.

I found that the issue was occurring for me because the *response-policy* setting was defined in the global *options*... Brandon Rock

03:00 AM Bug #10522 (Resolved): Telegraf, Netstat fails (missing lsof)

Good:... Viktor Gurov

05/08/2020

07:51 PM Bug #10503: Flapping any GW in multi-WAN influences restating all IPsec tunnels in FRR which leads to dropping all IPsec VTI static routes and related BGP issues

Working around the issue by splitting FRR from Vti
- Add new VIPs to Local host. (one to each side , do not use th... Alhusein Zawi

07:28 AM Bug #10536 (Not a Bug): Haproxy doesnt start and exits with error Lua init: table index is nil

That has to be something in your configuration, it's not a problem with the package in general. This site is not for ... Jim Pingle

04:42 AM Bug #10536 (Not a Bug): Haproxy doesnt start and exits with error Lua init: table index is nil

I have just downgraded my SG-3100 from 2.4.5 to 2.4.4-p3 (due to the blocking cpu causing a bit lag.) I made a backup... Hector Sanchez

05/06/2020

01:22 PM Feature #9874 (Resolved): safesearch enforcing

pfBlockerNG 2.2.5_32
works as expected Viktor Gurov

01:09 PM Feature #9833: ACME: add ability to use custom ACME server

I'll add my voice to this request. I just set up a local step-ca ACME server and would love to use it with pfSense. Michael Long

10:33 AM Todo #10528 (Resolved): OpenVPN client export - 2.4.9

All done and tested. Exported installer is 2.4.9 and it works (installs, connects, etc) as expected. Jim Pingle

09:57 AM Todo #10528 (In Progress): OpenVPN client export - 2.4.9

Jim Pingle

05/05/2020

10:28 AM Bug #10522: Telegraf, Netstat fails (missing lsof)

Thanks very much for the quick action! Russell Morris

10:14 AM Bug #10522 (Feedback): Telegraf, Netstat fails (missing lsof)

PR has been merged. Thanks! Renato Botelho

08:22 AM Bug #10522 (Pull Request Review): Telegraf, Netstat fails (missing lsof)

Jim Pingle

05:14 AM Bug #10522: Telegraf, Netstat fails (missing lsof)

correct, see https://github.com/influxdata/telegraf/blob/master/plugins/inputs/net/NETSTAT_README.md:... Viktor Gurov

08:24 AM Todo #10528 (Resolved): OpenVPN client export - 2.4.9

OpenVPN client 2.4.9 was released.
It would be cool to have it updated: https://openvpn.net/community-downloads/
... Greg M

05/04/2020

02:11 PM Bug #10522: Telegraf, Netstat fails (missing lsof)

Yes, it works for me as well - after I manually install lsof. The reason I raised this is that lsof should be include... Russell Morris

01:57 PM Bug #10522: Telegraf, Netstat fails (missing lsof)

can't reproduce, it work for me
[2.4.5-RELEASE][root@pfSense.trmultiservice.lab]/root: telegraf --test --input-filte... Manuel Piovan

02:02 PM Bug #7654 (Feedback): Can't use a LDAP search filter containing an accent

Jim Pingle

08:59 AM Bug #10526: Package pfBlockerNG Crashes on Alert view

Looks like your alert log was allowed to grow too large.
Post on https://forum.netgate.com/category/62/pfblockerng... Jim Pingle

08:54 AM Bug #10526 (New): Package pfBlockerNG Crashes on Alert view

Error Message:
Fatal error: Allowed memory size of 536870912 bytes exhausted (tried to allocate 513799651 bytes) in ... Larry Westfall

05/03/2020

07:09 PM Bug #10487: Telegraf package not sending logs to influxdb server

I confirm that I encounter the same issue with telegraf version 0.9_3 and pfsense 2.4.5 (on a Netgate SG-1100) device Joseph jk

05/02/2020

10:27 PM Bug #10522 (Resolved): Telegraf, Netstat fails (missing lsof)

Enabling netstat from the web interface (as part of Telegraf) ... fails. The error message can be seen from a command... Russell Morris

05/01/2020

10:26 AM Feature #9874 (Feedback): safesearch enforcing

PR has been merged. Thanks! Renato Botelho

07:27 AM Feature #9874 (Pull Request Review): safesearch enforcing

Jim Pingle

12:53 AM Feature #9874: safesearch enforcing

Grimson Gretzleburg wrote:
> You forgot to add "/www/pfblockerng/pfblockerng_safesearch.php" to the package meta dat... Viktor Gurov

08:27 AM Bug #9537: One month offset in displayed data between time changes

The underlying vnstat correctly reports the monthly data when run from the command line.
This is from vnstat:
v... Randall Barth

03:54 AM Bug #10475 (Resolved): pfSense-pkg-arpwatch unconditinally clobbers the arpwatch database files on upgrade

arpwatch 0.2.0_3 - OK Viktor Gurov

03:42 AM Feature #10479 (Resolved): Keep settings after deinstall option

0.15.7_15 works as expected Viktor Gurov

02:05 AM Bug #9424 (Resolved): arpwatch package logs CARP MAC address changes

works fine on 2.4.5/2.5 and arpwatch pkg 0.2.0_3 Viktor Gurov

04/30/2020

09:17 PM Bug #10516 (New): FRR Access list

When using Access list on BGP neighbor> Peer Filtering (in/out) , All routes will be blocked even if the rule was per... Alhusein Zawi

06:29 PM Feature #9874: safesearch enforcing

You forgot to add "/www/pfblockerng/pfblockerng_safesearch.php" to the package meta data, so it's not included in the... Grimson Gretzleburg

01:36 PM Feature #9874 (Feedback): safesearch enforcing

PR has been merged. Thanks! Renato Botelho

12:48 PM Bug #10444: FRR will not start in 2.4.5 aarch64

Luiz told me he'd work on this Jim Pingle

09:25 AM Feature #10479 (Feedback): Keep settings after deinstall option

PR has been merged. Thanks! Renato Botelho

08:57 AM Feature #10479 (Pull Request Review): Keep settings after deinstall option

Jim Pingle

06:28 AM Feature #10479: Keep settings after deinstall option

small fix:
https://github.com/pfsense/FreeBSD-ports/pull/855 Viktor Gurov

09:22 AM Bug #9211 (Pull Request Review): GeoIP broken in pfSense-pkg-ntopng-0.8.13_3

Jim Pingle

09:17 AM Bug #9211: GeoIP broken in pfSense-pkg-ntopng-0.8.13_3

https://forum.netgate.com/topic/153105/ntopng-update-to-v0-8-13_4-crashes
clean install fix:
https://github.com/p... Viktor Gurov

07:33 AM Bug #9211 (Feedback): GeoIP broken in pfSense-pkg-ntopng-0.8.13_3

PR has been merged. Thanks! Renato Botelho

07:33 AM Bug #10475 (Feedback): pfSense-pkg-arpwatch unconditinally clobbers the arpwatch database files on upgrade

PR has been merged. Thanks! Renato Botelho

04/29/2020

12:29 AM Bug #10507 (Resolved): Unable to use forwarders

When setting the forwarders in the settings tabs, the forwarders are added under the general "options" section.
Howe... Jocelyn Viau

04/28/2020

11:58 PM Bug #10506 (Resolved): Recursion not working on fresh BIND install

I just installed BIND for the first time on a pfSense 2.4.5. After installation, despite the fact that I created a Vi... Jocelyn Viau

02:38 PM Bug #10475: pfSense-pkg-arpwatch unconditinally clobbers the arpwatch database files on upgrade

So the bug is the clear database checkbox was not being honored ever? "oops" Craig Leres

02:32 PM Bug #10475 (Pull Request Review): pfSense-pkg-arpwatch unconditinally clobbers the arpwatch database files on upgrade

Jim Pingle

10:09 AM Bug #10475 (New): pfSense-pkg-arpwatch unconditinally clobbers the arpwatch database files on upgrade

fix for https://github.com/pfsense/FreeBSD-ports/pull/844
to correctly check 'clear_database' value
otherwise arpwa... Viktor Gurov

12:22 PM Bug #10429: Status Traffic Total broken 2.4.5

I can't replicate anything like this. It's been working solid here, and the data is sane.
The only thing I did not... Jim Pingle

08:46 AM Bug #9211 (Pull Request Review): GeoIP broken in pfSense-pkg-ntopng-0.8.13_3

Jim Pingle

03:31 AM Bug #9211: GeoIP broken in pfSense-pkg-ntopng-0.8.13_3

Fix:
https://github.com/pfsense/FreeBSD-ports/pull/853 Viktor Gurov

08:24 AM Bug #10503 (New): Flapping any GW in multi-WAN influences restating all IPsec tunnels in FRR which leads to dropping all IPsec VTI static routes and related BGP issues

There are 2 nodes with a multi-WAN setup: 2 WANs, 2 Gateways. The are 2 IPsec VTI tunnel every working through its ow... Constantine Kormashev

04/27/2020

01:26 PM Bug #10502: LLDP spamming errors on Netgate XG-7100

I'm on 2.4.5 now. This error message appears for each ix0-4 and repeat each minute. Lldpd work, at least I can see my... DRago_Angel [InV@DER]

12:07 PM Bug #10502: LLDP spamming errors on Netgate XG-7100

Please provide more information about this issue.
Seems like https://redmine.pfsense.org/issues/9635
Viktor Gurov