pfSense » pfSense Packages

09/18/2020

02:54 PM Todo #9158 (Feedback): Updates for Squid 4.x

AFAIK it's been working for some time now. Move to feedback! Renato Botelho

11:33 AM Feature #10915 (Pull Request Review): security/pfSense-pkg-sudo sudo.inc enhancement for better support of NRPE

Jim Pingle

10:19 AM Feature #10915: security/pfSense-pkg-sudo sudo.inc enhancement for better support of NRPE

Pull request:
https://github.com/pfsense/FreeBSD-ports/pull/936 Infra Weavers

10:06 AM Feature #10915 (Resolved): security/pfSense-pkg-sudo sudo.inc enhancement for better support of NRPE

We have a requirement to permit NRPE to run custom commands as root so that we can, for instance, monitor VPN connect... Infra Weavers

09:03 AM Feature #10909: #define MAXVIFS 32 to 64

do i need to open another request for the pimd part? xavier Lemaire

09:01 AM Feature #10909 (Pull Request Review): #define MAXVIFS 32 to 64

Jim Pingle

12:50 AM Feature #10909: #define MAXVIFS 32 to 64

https://github.com/pfsense/FreeBSD-src/pull/37
see also https://www.freebsd.org/cgi/man.cgi?query=multicast&apro... Viktor Gurov

08:24 AM Feature #10893 (Feedback): TFTP package improvements

PR has been merged. Thanks! Renato Botelho

08:24 AM Bug #10884 (Feedback): wrong link on haproxy-devel

PR has been merged. Thanks! Renato Botelho

04:53 AM Feature #10913 (Resolved): Allow disabling caching in Squid completly

We use Squid as a proxy to audit access to websites (or reject as needed). We disabled the disk cache and set the mem... Florian Apolloner

09/17/2020

11:10 AM Bug #10911 (Resolved): Bandwidthd iframe not resizing in 2.4.5/2.4.5p1

Forum thread from several posters: https://forum.netgate.com/topic/152323/bandwidthd-in-pfsense-2-4-5
Looking at 2... Steve Y

09:38 AM Feature #10909: #define MAXVIFS 32 to 64

Moving the feature request since it's requesting a change to the kernel. Jim Pingle

08:55 AM Feature #10909 (New): #define MAXVIFS 32 to 64

as discussed in this thread https://forum.netgate.com/topic/156398/deploy-disk-images-with-inter-vlans-mulicast/7
Is... xavier Lemaire

08:34 AM Feature #10908 (Feedback): FreeRADIUS server certificate not using full CA chain

https://forum.netgate.com/topic/153316/freeradius-acme-built-in-cert-manager-workarounds-with-intermediate-certificat... Viktor Gurov

03:07 AM Bug #10905 (Resolved): Integration between captive portal and squid. Usernames are not showing in access.log file

https://forum.netgate.com/topic/147868/integration-between-captive-portal-and-squid-usernames-are-not-showing-in-acce... Viktor Gurov

09/16/2020

07:19 AM Bug #5168 (Assigned): squid doesn't function during/after HA failover

I've tested it on 2.4.4_p3 - HA cluster with simple Squid config (Transparent mode) so Squid is active on both Primar... Azamat Khakimyanov

05:35 AM Feature #10689 (Resolved): Squid Reverse proxy IPv6 and HA support

tested on:
2.5.0-DEVELOPMENT (amd64)
built on Wed Sep 16 01:00:40 EDT 2020
FreeBSD 12.2-PRERELEASE
Ticket reso... Azamat Khakimyanov

09/14/2020

07:58 AM Feature #10893 (Pull Request Review): TFTP package improvements

Jim Pingle

12:49 AM Bug #10900: /packages/backup/backup.php?a=download&t=backup HTTP 504, or Sends PHP Error Message as ASCII/Text file Named pfsense.bak.tgz

- directory/file to backup: /
- size (of backup file): ~800MB
- filesystem space utilization: ~19% before backup, ~... R M

12:11 AM Bug #10900: /packages/backup/backup.php?a=download&t=backup HTTP 504, or Sends PHP Error Message as ASCII/Text file Named pfsense.bak.tgz

package: Backup
Please provide more information:
- directory/file to backup
- size
- filesystem space utilization Viktor Gurov

09/13/2020

04:17 PM Bug #10900 (Not a Bug): /packages/backup/backup.php?a=download&t=backup HTTP 504, or Sends PHP Error Message as ASCII/Text file Named pfsense.bak.tgz

h2. ISSUE
Unable to download pfsense.bak.tgz backup file via web GUI.
h2. STEPS TO REPRODUCE
# Go to */packa... R M

04:39 AM Feature #10897: SNMPV3-trap/inform Add Snmpv3 trap/inform Field

Viktor Gurov wrote:
> http://www.net-snmp.org/docs/man/snmpd.conf.html:
> [...]
I didn't understand, do u meant th... Depressed Admin

04:23 AM Feature #10897: SNMPV3-trap/inform Add Snmpv3 trap/inform Field

http://www.net-snmp.org/docs/man/snmpd.conf.html:... Viktor Gurov

03:29 AM Feature #10897 (Resolved): SNMPV3-trap/inform Add Snmpv3 trap/inform Field

There is no Field for snmpv3 trap/inform host , port .there is only snmpV2c/v1 trap,inform field
Plz add Depressed Admin

09/12/2020

11:19 AM Feature #10893: TFTP package improvements

https://github.com/pfsense/FreeBSD-ports/pull/928 Viktor Gurov

04:59 AM Feature #10893 (Resolved): TFTP package improvements

https://forum.netgate.com/topic/115198/tftp-package-only-works-through-the-gui/2:
My suggestions for improving this ... Viktor Gurov

04:27 AM Bug #10815 (Resolved): FRR with SNMP AgentX option failed to start

You need to uninstall/install (not reinstall or update!) current FRR package to get frr7 with compiled-in snmp featur... Viktor Gurov

09/11/2020

10:23 AM Bug #9895: snort reinstallation failed

Unable to reproduce this on 2.5.0.a.20200910.1250. Michael Spears

09/10/2020

10:43 PM Bug #10815: FRR with SNMP AgentX option failed to start

enabling agentx option made the system stuck and after 2 or 3 reboots system crashed.
agentx option enabled on Z... Alhusein Zawi

12:08 PM Feature #10816: Allow FRR BGP Neighbors to be active in both IPv4 and IPv6

This has nothing to do with networks to distribute or similar route controls. This only controls whether or not BGP w... Jim Pingle

06:29 AM Bug #10770 (Resolved): arpwatch: cannot remove email once it has been entered into settings

Renato Botelho

12:00 AM Bug #10770: arpwatch: cannot remove email once it has been entered into settings

I did not receive Email notifications.
email added.
there was a change in arp database
no notification.
I was... Alhusein Zawi

04:08 AM Feature #9521 (Resolved): Upgrade to HAProxy 1.9

Tested on :
2.4.5-RELEASE-p1 (amd64)
built on Tue Jun 02 17:51:17 EDT 2020
FreeBSD 11.3-STABLE
and
2.5.0-DEVELOP... Azamat Khakimyanov

03:55 AM Feature #10441 (Resolved): Integration of bfd daemon

Tested on :
2.5.0-DEVELOPMENT (amd64)
built on Thu Sep 10 01:03:22 EDT 2020
FreeBSD 12.2-PRERELEASE
- integrate b... Azamat Khakimyanov

09/09/2020

10:19 PM Feature #10816: Allow FRR BGP Neighbors to be active in both IPv4 and IPv6

it does not Redistribute connected networks(IPv6) and Kernel(IPv6) . Alhusein Zawi

10:16 PM Feature #10816: Allow FRR BGP Neighbors to be active in both IPv4 and IPv6

it is working if the network(IPv6) added to "Networks to Distribute" Alhusein Zawi

01:34 PM Bug #10886 (Closed): NAT64 allows to bypass pfBlockerNG IPv4 feed list

If NAT64 is used, the firewall first checks the rules and then translates IPv6 to IPv4.
In this case, if IPv4 feeds ... Viktor Gurov

07:46 AM Bug #10884 (Pull Request Review): wrong link on haproxy-devel

Jim Pingle

04:30 AM Bug #10884: wrong link on haproxy-devel

PR https://github.com/pfsense/FreeBSD-ports/pull/926 Manuel Piovan

04:13 AM Bug #10884 (Resolved): wrong link on haproxy-devel

haproxy-devel
if you click on
"related log entries"
https://*/status_pkglogs.php?pkg=haproxy-devel
lead to ... Manuel Piovan

05:33 AM Feature #8216: Add prometheus output for telegraf

wait, its already there and works!
no need to do anything, except perhaps adding some hint to the Web UI at _Servi... Bernd Klaus

05:20 AM Feature #8216: Add prometheus output for telegraf

this would be really nice cause it obsoletes running a InfluxDB server just to get the metrics viewable in Grafana.
... Bernd Klaus

04:19 AM Bug #10885: HAProxy DNS statistics not working

package is haproxy-devel Manuel Piovan

04:18 AM Bug #10885 (Resolved): HAProxy DNS statistics not working

if you click on Stat / DNS statistic
the table is not working
/haproxy/haproxy_stats.php?showstatresolvers=globalre... Manuel Piovan

09/08/2020

02:00 PM Bug #9809 (Feedback): postgresql support not compiled

PR has been merged. Thanks! Renato Botelho

08:22 AM Bug #9809 (Pull Request Review): postgresql support not compiled

Jim Pingle

01:56 PM Feature #10871 (Feedback): Extra time period counters for SQL backend

PR has been merged. Thanks! Renato Botelho

08:16 AM Feature #10871 (Pull Request Review): Extra time period counters for SQL backend

Jim Pingle

09/07/2020

03:25 AM Bug #9809: postgresql support not compiled

Remove feature from package:
https://github.com/pfsense/FreeBSD-ports/pull/925 Viktor Gurov

09/06/2020

10:48 AM Feature #10872 (Resolved): Add adjustable notification for Severity Alert

As of know Surricata package requires a syslog software to allow for notification of an alert. Please integrate this ... Anton Palmgard

03:40 AM Feature #10871: Extra time period counters for SQL backend

https://github.com/pfsense/FreeBSD-ports/pull/924 Viktor Gurov

03:32 AM Feature #10871 (Feedback): Extra time period counters for SQL backend

Enable extra SQL time period counters from /usr/local/etc/raddb/mods-config/sql/counter/*sql/:
dailycounter - Max-Da... Viktor Gurov

09/05/2020

11:00 AM Bug #10867 (Duplicate): squidGuard Package Hangs on Uninstall or Upgrade

Same root issue as #10610, it's a problem in pkg that Renato is already investigating. Jim Pingle

10:55 AM Bug #10867 (Resolved): squidGuard Package Hangs on Uninstall or Upgrade

Tested on two different appliances (SG-1100 and XG-7100), but likely affects all appliances. If you try to upgrade s... Kris Phillips

01:21 AM Feature #10865: squidGuard lacks options to send traffic action logs to syslog server

This is supported only by squidGuard-1.5-beta, see https://fossies.org/linux/www/squidGuard-1.5-beta.tar.gz/squidGuar... Viktor Gurov

12:18 AM Feature #10858 (Resolved): OpenVPN Client silent install

1.4.23_2 - works as expected Viktor Gurov

09/04/2020

09:55 PM Feature #10865 (Rejected): squidGuard lacks options to send traffic action logs to syslog server

squidGuard has options to send logs to squid's logs, but these don't seem to arrive at a syslog server and are only l... Kris Phillips

01:49 PM Feature #10858 (Feedback): OpenVPN Client silent install

PR has been merged. Thanks! Renato Botelho

09:38 AM Feature #10858 (Pull Request Review): OpenVPN Client silent install

Jim Pingle

08:58 AM Feature #10858: OpenVPN Client silent install

https://github.com/pfsense/FreeBSD-ports/pull/922 Viktor Gurov

09/01/2020

12:20 PM Feature #10859 (Resolved): Add avahi filtering feature to pfSense

Two parts to the issue;
1) Package needs to be updated from upstream to get new filtering feature added in avahi ... Joachim Tingvold

08/31/2020

12:51 PM Feature #10779 (Feedback): HAProxy SSL/TLS Compatibility Mode

PR has been merged. Thanks! Renato Botelho

07:31 AM Feature #10779 (Pull Request Review): HAProxy SSL/TLS Compatibility Mode

Jim Pingle

03:27 AM Feature #10779: HAProxy SSL/TLS Compatibility Mode

Improvement:
https://github.com/pfsense/FreeBSD-ports/pull/921 Viktor Gurov

12:05 PM Feature #10858 (Resolved): OpenVPN Client silent install

Allow to use openvpn client export windows installers for unattended deploy
Currently it's possible to create sile... Viktor Gurov

08/26/2020

07:45 AM Bug #10824 (Resolved): BIND shutdown - dynamic zones, unclean shutdown causes startup to not load zones

Jim Pingle

02:48 AM Bug #10824: BIND shutdown - dynamic zones, unclean shutdown causes startup to not load zones

Renato Botelho wrote:
> PR has been merged. Thanks!
Updated to bind 9.14_8, which includes this fix - rc.d scrip... Dave Tickem

07:45 AM Bug #10823 (Resolved): named.conf "controls" section missing IPv6 localhost on IPv6 enabled PFsense - breaking rndc

Jim Pingle

02:45 AM Bug #10823: named.conf "controls" section missing IPv6 localhost on IPv6 enabled PFsense - breaking rndc

Renato Botelho wrote:
> PR has been merged. Thanks!
Updated to bind 9.14_8, which includes this fix - works as r... Dave Tickem

07:45 AM Bug #10832 (Resolved): Bind DNSSEC validation "deselected" not disabling DNSSEC validation

Jim Pingle

02:44 AM Bug #10832: Bind DNSSEC validation "deselected" not disabling DNSSEC validation

Renato Botelho wrote:
> PR has been merged. Thanks!
Updated to bind 9.14_8, which includes this fix - works as r... Dave Tickem

08/24/2020

10:16 AM Bug #10845: apcupsd doesn't stop when not enabled

This is repeatable after rebooting the pfSense host. Dan Langille

07:26 AM Todo #10851 (Rejected): Snort PORTVERSION Changed

Thanks, but the snort package maintainer will update it as needed when it's appropriate to do so. Jim Pingle

02:18 AM Todo #10851 (Rejected): Snort PORTVERSION Changed

PORTVERSION= 2.9.16 is obsolete,
Snort website port version is snort-2.9.16.1
Please check Snort Site Sreekumar PM

08/20/2020

11:50 AM Bug #10845: apcupsd doesn't stop when not enabled

To be clear, this is not blocking / hindering anything for me. Dan Langille

11:50 AM Bug #10845: apcupsd doesn't stop when not enabled

I'm happy to try things here. Dan Langille

11:19 AM Bug #10845: apcupsd doesn't stop when not enabled

I can't seem to reproduce that here on 2.4.5-p1 (arm, network UPS), 2.5.0 (amd64, network UPS), or 2.5.0 (amd64, USB ... Jim Pingle

11:07 AM Bug #10845 (New): apcupsd doesn't stop when not enabled

I'm running pfSense 2.4.5-p1 and apcupsd 0.3.91_8
Attempts to stop apcupsd fail.
To reproduce:
# visit /pkg_... Dan Langille