pfSense » pfSense Packages

11/10/2020

07:22 PM Bug #11052: Authtype MD5-Password dont work in freeradius3

I tested in menu Diagnostic->authentication Teste Teste

07:20 PM Bug #11052 (Not a Bug): Authtype MD5-Password dont work in freeradius3

system: PFsense 2.5
package: freeradius3
issue: I create a user in *users tab* with option *Password Encription* MD... Teste Teste

07:20 PM Bug #11030 (Resolved): OpenVPN Client Export shows server certs as clients

Tested pkg version 1.5_1 in:... Steve Wheeler

09:52 AM Bug #11030 (Feedback): OpenVPN Client Export shows server certs as clients

I committed a variation of that instead:
https://github.com/pfsense/FreeBSD-ports/commit/0e72ef35bbb0f9dc370141cb9... Jim Pingle

02:37 PM Feature #10909 (In Progress): #define MAXVIFS 32 to 64

right, I'm going to revert it and rebuild pimd and igmoproxy Renato Botelho

01:01 PM Feature #10909: #define MAXVIFS 32 to 64

Renato,
Restore to MAXVIFS 32 is a good idea for two reasons:
- it would allow me to test the actual package beha... Louis B

09:54 AM Todo #11033: Update OpenVPN Client Export with OpenVPN 2.5.0 installer

No negative feedback thus far and further testing I've done has been positive as well. Picked back to 2.4.5 for more ... Jim Pingle

11/09/2020

01:40 PM Feature #11042: Verify backup- / configuration-file after creation

Looks like your actual problem (based on your forum thread) is this: #11050
Under normal conditions on a release, ... Jim Pingle

12:10 PM Feature #11042: Verify backup- / configuration-file after creation

That is true but is also a non-statement. I already explained why that is irrelevant. Jim Pingle

12:01 PM Feature #11042: Verify backup- / configuration-file after creation

Jim, if the software which checks the backup-file when loaded can check if backup is OK, the same software could do ... Louis B

11:03 AM Feature #11042: Verify backup- / configuration-file after creation

Your logic is flawed because if it could detect the backup was bad it could just not make a bad backup. If it generat... Jim Pingle

10:23 AM Feature #11042: Verify backup- / configuration-file after creation

Jim, at the moment you need the backup, *the firewall is probably down*. So *you need to have it fixed as soon as pos... Louis B

07:26 AM Feature #11042 (Needs Patch): Verify backup- / configuration-file after creation

In the unlikely case that a bad backup was generated, it is unlikely anything could be done to repair it in the GUI, ... Jim Pingle

01:24 PM Bug #10911 (Resolved): Bandwidthd iframe not resizing in 2.4.5/2.4.5p1

Tested pfSense-pkg-bandwidthd-0.7.4_3 in Chrome, Edge, Firefox with no sizing issues. Working as expected. Marking th... Max Leighton

10:02 AM Feature #11043: pfSense GUI for iperf3 / perf

Maintaining a list of public servers is outside the scope of the package, and encouraging users to use a high-through... Jim Pingle

09:54 AM Feature #11043: pfSense GUI for iperf3 / perf

Jim Pingle wrote:
> There is already a package for iperf3 with a GUI.
But not useful: no quick servers selection (b... Sergei Shablovsky

07:27 AM Feature #11043 (Rejected): pfSense GUI for iperf3 / perf

There is already a package for iperf3 with a GUI. Jim Pingle

09:57 AM Feature #11044: pfSense GUI for OOKLA Speedtest

No, it is not reasonable. Any speed test run from the firewall is not a valid metric and adding a GUI only encourages... Jim Pingle

09:51 AM Feature #11044: pfSense GUI for OOKLA Speedtest

Jim Pingle wrote:
> There is a CLI speed test package already (py37-speedtest-cli on 2.5.0, similar name on 2.4.5)).... Sergei Shablovsky

07:29 AM Feature #11044 (Rejected): pfSense GUI for OOKLA Speedtest

There is a CLI speed test package already (py37-speedtest-cli on 2.5.0, similar name on 2.4.5)). There are no plans f... Jim Pingle

06:01 AM Feature #10909: #define MAXVIFS 32 to 64

Louis van Breda wrote:
> Almost sure that MAXVIFS 64 does very likely! break the system!
>
> Yesterday, I spend t... Renato Botelho

05:52 AM Feature #11012 (Resolved): Add Zabbix 5.2 (agent and proxy) packages

Renato Botelho

11/08/2020

11:45 PM Feature #11044 (Rejected): pfSense GUI for OOKLA Speedtest

Hi pfSense DevTeam !
We appreciate You work!
Please add the *GUI for OOKLA Speedtest service as pfSense-native pa... Sergei Shablovsky

09:05 PM Feature #11043 (Rejected): pfSense GUI for iperf3 / perf

Hi pfSense DevTeam !
We appreciate You work!
Please add the *GUI for iperf3 / perf as pfSense-native package*.
... Sergei Shablovsky

11:45 AM Feature #11042 (Needs Patch): Verify backup- / configuration-file after creation

I have been facing corrupt configuration files when using the file (loaded on an usb-stick) during an new installatio... Louis B

04:49 AM Feature #10909: #define MAXVIFS 32 to 64

Almost sure that MAXVIFS 64 does very likely! break the system!
Yesterday, I spend the whole day! , together with ... Louis B

11/07/2020

02:38 PM Feature #10950: Allow to select only netmap-compatible cards for inline mode

I was able to add and start an interface using snort with a USB ethernet adapter (ue0) on SG-5100
2.5.0-DEVELOPMEN... Jordan G

01:44 PM Bug #11040: pfb_filter core faults when clearing firewall log

Jim Pingle wrote:
> That instance of the program is from pfBlockerNG, not the base system.
>
> Nothing to fix in ... John Jacobs

12:47 PM Bug #11040: pfb_filter core faults when clearing firewall log

That instance of the program is from pfBlockerNG, not the base system.
Nothing to fix in the base system since the... Jim Pingle

12:40 PM Bug #11040: pfb_filter core faults when clearing firewall log

Adding: clog_pfb drops the core, pfb_filter stops. John Jacobs

12:37 PM Bug #11040 (New): pfb_filter core faults when clearing firewall log

The clog_pfb drops a core when the firewall log is cleared. I can replicate this on demand. Clearing the log from Sta... John Jacobs

04:42 AM Feature #11012: Add Zabbix 5.2 (agent and proxy) packages

https://www.zabbix.com/life_cycle_and_release_policy
The sad part about the proxy is that they are not backwards com... Pim Janssen

04:29 AM Bug #8264: Radiusd restart on WAN change results in freeradius not running (and possible solution)

see also #11013 Viktor Gurov

12:15 AM Bug #11039: route-map not working if Address Family is enabled.

no such issue on 2.5 branch (frr 0.6.8_8),
fixed in #10789 Viktor Gurov

11/06/2020

08:42 PM Feature #11012: Add Zabbix 5.2 (agent and proxy) packages

Zabbix 5 (agent and proxy) have been added to packages.
Note: package manager list many Zabbix version , is there ... Alhusein Zawi

07:14 AM Feature #11012 (Feedback): Add Zabbix 5.2 (agent and proxy) packages

Thanks Danilo! Packages added to 2.5.0 and 2.4.5 Renato Botelho

06:29 PM Bug #11039 (Resolved): route-map not working if Address Family is enabled.

enabling Address Family (Allow neighbor to advertise and receive routes for both IPv4 and IPv6) under BGP Neighbors w... Alhusein Zawi

01:26 PM Bug #11036: HAproxy ACL

I was able to reproduce this on pfSense 2.5 with haproxy-devel 0.61_1. Marcos M

05:08 AM Feature #10612 (Resolved): Add pfSense package for Zeek (formerly Bro) Network Security Monitor

Thanks! I'll mark this one as resolved. Bugs found on new package should have their own tickets. Renato Botelho

11/05/2020

05:25 PM Feature #11012: Add Zabbix 5.2 (agent and proxy) packages

https://github.com/pfsense/pfsense/pull/4485
https://github.com/pfsense/FreeBSD-ports/pull/985
Danilo Baio

04:47 PM Feature #10612: Add pfSense package for Zeek (formerly Bro) Network Security Monitor

the package has been added to pfSense Available Packages.
Installed smoothly. Alhusein Zawi

08:20 AM Feature #10612: Add pfSense package for Zeek (formerly Bro) Network Security Monitor

Applied in changeset pfsense:commit:13d19df75f52d18f67172b3cd6a4bdfd982d9d24. Renato Botelho

08:19 AM Feature #10612 (Feedback): Add pfSense package for Zeek (formerly Bro) Network Security Monitor

Done! Renato Botelho

01:32 PM Bug #11036 (New): HAproxy ACL

If you try to edit an existing Access Control list on already defined TCP type Frontend, an unsupported Expression li... Danilo Zrenjanin

11/04/2020

03:35 PM Todo #11033 (Feedback): Update OpenVPN Client Export with OpenVPN 2.5.0 installer

Committed to devel (pfSense 2.5.0) for further testing
https://github.com/pfsense/FreeBSD-ports/commit/b7a70d0c6ff... Jim Pingle

03:16 PM Todo #11033 (Closed): Update OpenVPN Client Export with OpenVPN 2.5.0 installer

OpenVPN 2.5.0 is out and needs added to the client export package.
* OpenVPN 2.5.0 has separate 64-bit and 32-bit ... Jim Pingle

11:09 AM Bug #11031 (Resolved): FRR: PHP error in frr_bgp.inc

Tested in pkg 0.6.8_8
Looks good. Starts at boot correctly. No errors generated. Steve Wheeler

05:18 AM Bug #11031 (Feedback): FRR: PHP error in frr_bgp.inc

PR has been merged. Thanks! Renato Botelho

03:32 AM Bug #11031: FRR: PHP error in frr_bgp.inc

Fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/5 Viktor Gurov

09:20 AM Bug #11030 (Pull Request Review): OpenVPN Client Export shows server certs as clients

Jim Pingle

09:16 AM Bug #11030: OpenVPN Client Export shows server certs as clients

https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/6 Viktor Gurov

11/03/2020

05:43 PM Bug #11031 (Resolved): FRR: PHP error in frr_bgp.inc

I am seeing an error at boot triggered by FRR:... Steve Wheeler

04:18 PM Bug #11030: OpenVPN Client Export shows server certs as clients

Once upon a time it used to work, they must have locked that down at some point.
Back in the day, all certs were "... Jim Pingle

04:12 PM Bug #11030: OpenVPN Client Export shows server certs as clients

Tested in openvpn-client-export 1.4.23_2
Installed in:... Steve Wheeler

04:04 PM Bug #11030 (Resolved): OpenVPN Client Export shows server certs as clients

If you have an SSL/TLS only remote access OpenVPN server coinfigured the Client Export tab will show exportable confi... Steve Wheeler

05:46 AM Bug #11013: FreeRADIUS does not start after a package reload or a router bootup/reboot

Michael Klein wrote:
> Hi Renato, I tested the fix on both SG-3100's and it works very well. I'm glad that this issu... Renato Botelho

04:36 AM Bug #11013 (Resolved): FreeRADIUS does not start after a package reload or a router bootup/reboot

Tested with 0.15.7_20 FreeRADIUS version on SG-3100.
The issue has been solved. Ticket resolved. Danilo Zrenjanin

11/02/2020

05:25 PM Bug #11013: FreeRADIUS does not start after a package reload or a router bootup/reboot

Hi Renato, I tested the fix on both SG-3100's and it works very well. I'm glad that this issue has finally been resol... Michael Klein

03:18 PM Bug #11013: FreeRADIUS does not start after a package reload or a router bootup/reboot

Renato, thank you for all your help. I look forward to the new version and will provide feedback. I'm not sure why Ji... Michael Klein

06:24 AM Bug #11013 (Feedback): FreeRADIUS does not start after a package reload or a router bootup/reboot

This should be fixed in 0.15.7_20 Renato Botelho

04:27 AM Bug #11013 (New): FreeRADIUS does not start after a package reload or a router bootup/reboot

I'll take this one Renato Botelho

07:21 AM Feature #11026: Feedback on Packages — FreeRADIUS package

That is not a documentation problem, or a bug. It's a feature you want that does not yet exist. Jim Pingle

04:09 AM Feature #11026 (New): Feedback on Packages — FreeRADIUS package

*Page:* https://docs.netgate.com/pfsense/en/latest/packages/freeradius.html
*Feedback:*
This file is not preser... pf Driver

06:58 AM Bug #10936 (Feedback): both haproxy/haproxy-devel non-existent option lb-agent-chk

PR has been merged. Thanks! Renato Botelho

06:58 AM Bug #10885 (Feedback): HAProxy DNS statistics not working

PR has been merged. Thanks! Renato Botelho

04:29 AM Bug #11014 (Resolved): sudo update failure

Renato Botelho

11/01/2020

02:05 PM Bug #10885: HAProxy DNS statistics not working

Should be fixed in haproxy 0.61.1
PR: https://github.com/pfsense/FreeBSD-ports/pull/984 Pi Ba

02:03 PM Bug #10936: both haproxy/haproxy-devel non-existent option lb-agent-chk

In haproxy-devel package 0.61.1 this 'Agent' health-check method should no longer be visible (unless already configur... Pi Ba

10/31/2020

07:15 PM Bug #11014: sudo update failure

sudo 0.3_5 is installed on 2.4.5-p1 Alhusein Zawi

11:21 AM Bug #11014: sudo update failure

Issue fixed in 0.3_5, thank you. James Baker

11:41 AM Bug #11013: FreeRADIUS does not start after a package reload or a router bootup/reboot

Sorry to hear you couldn't recreate this issue which affects both of our *Netgate SG-3100* appliances. The insertion ... Michael Klein

10:39 AM Bug #11013 (Rejected): FreeRADIUS does not start after a package reload or a router bootup/reboot

Kris Phillips

10:39 AM Bug #11013 (Feedback): FreeRADIUS does not start after a package reload or a router bootup/reboot

Michael Klein wrote:
> The FreeRADIUS package is the _only_ package that does not startup after the router reboots o... Kris Phillips

11:19 AM Bug #10983: pfBlockerNG not cleaning everything behind it

Given this seems to be VM and sounds similar to issues that can happen when interfaces disappear or otherwise change ... Marcos M

10:58 AM Bug #8340 (Rejected): Status_Traffic_Totals Error

Unable to reproduce and reported that the issue was resolved by disabling and re-enabling graphing. Likely a file co... Kris Phillips

10:46 AM Bug #6736 (Closed): Snort fails to start after upgrade to 2.3.2-RELEASE

Closing this very old bug report out, as this issue is from an unsupported version of pfSense and there is no issues ... Kris Phillips

10/30/2020

08:36 PM Feature #11022: Add feeds from Firebog.net to pfBlockerNG

Pull Request to 2.4.5 branch: https://github.com/pfsense/FreeBSD-ports/pull/983
Pull Request to devel: https://git... Matthew Hildebrand

07:44 PM Feature #11022 (Resolved): Add feeds from Firebog.net to pfBlockerNG

Add additional dnsbl feeds listed at firebog.net to feeds.json. Only add green and blue without strikethrough (strike... Matthew Hildebrand

01:50 PM Feature #11008: Add option to mail report pkg to skip sending email if no output

2.4.5 PR has also been merged. Thanks! Renato Botelho

01:34 PM Feature #11008: Add option to mail report pkg to skip sending email if no output

Pull Request to 2.4.5. https://github.com/pfsense/FreeBSD-ports/pull/976 Matthew Hildebrand

10/29/2020

03:17 PM Feature #11012: Add Zabbix 5.2 (agent and proxy) packages

Your correct, copy paste error Pim Janssen

09:12 AM Feature #11012: Add Zabbix 5.2 (agent and proxy) packages

Waiting for Zabbix ports on FreeBSD... and this is not a LTS release, it's a Standard release. Danilo Baio

02:13 PM Bug #11014 (Resolved): sudo update failure

Updating sudo package on 2.4.5-p1 from 0.3_3 to 0.3_4 fails with XML_RPC2_InvalidUriException.
Post-failure system... James Baker

02:11 PM Feature #11008: Add option to mail report pkg to skip sending email if no output

Matthew Hildebrand wrote:
> Will this be automagically cherry-picked to RELENG_2_4_5 branch (for mailreport package ... Renato Botelho

01:54 PM Feature #11008: Add option to mail report pkg to skip sending email if no output

Will this be automagically cherry-picked to RELENG_2_4_5 branch (for mailreport package version 3.5.x), or do I need ... Matthew Hildebrand

08:40 AM Feature #11008 (Feedback): Add option to mail report pkg to skip sending email if no output

PR has been merged. Thanks! Renato Botelho

10/28/2020

10:51 PM Bug #11013 (Resolved): FreeRADIUS does not start after a package reload or a router bootup/reboot

The FreeRADIUS package is the _only_ package that does not startup after the router reboots or a package reload is do... Michael Klein

04:37 PM Feature #11012 (Resolved): Add Zabbix 5.2 (agent and proxy) packages

New release from zabbix. Please add this new version.
https://www.zabbix.com/rn/rn5.2.0 Pim Janssen

02:45 PM Bug #11011: frr routing php unexpected character

https://github.com/pfsense/FreeBSD-ports/commit/f704edf8024c3ed86d8f642d4c3618930ebd6495 Jim Pingle

02:45 PM Bug #11011 (Resolved): frr routing php unexpected character

I fixed this earlier today. Will show up along with new snapshots soon. Jim Pingle

02:32 PM Bug #11011 (Resolved): frr routing php unexpected character

[28-Oct-2020 18:35:42 Etc/UTC] PHP Warning: Unexpected character in input: ' in /usr/local/pkg/frr/inc/frr_bgp.inc ... Cédric Junger

10/27/2020

11:24 AM Feature #10897 (Resolved): SNMPV3-trap/inform Add Snmpv3 trap/inform Field

Azamat Khakimyanov

11:24 AM Feature #10897: SNMPV3-trap/inform Add Snmpv3 trap/inform Field

Tested on 2.4.5_p1 and on 2.5.0-DEVELOPMENT (built on Tue Oct 27 07:03:51 EDT 2020)
There are SNMPv3 traps and inf... Azamat Khakimyanov

11:14 AM Bug #11009 (Resolved): Module Hetzner-DNS does not save API Key

Jim Pingle

10:56 AM Bug #11009: Module Hetzner-DNS does not save API Key

Jim Pingle wrote:
> Should be fixed in ACME 0.6.9_1 which will be available shortly.
Tested and works perfect. Th... Marcus Groß

08:41 AM Bug #11009 (Feedback): Module Hetzner-DNS does not save API Key

Should be fixed in ACME 0.6.9_1 which will be available shortly. Jim Pingle

07:16 AM Bug #11009 (Resolved): Module Hetzner-DNS does not save API Key

When using Module "Hetzner-DNS" I'm not able to set the API key.
The edit field is empty after reopening configura... Marcus Groß

09:35 AM Feature #11008 (Pull Request Review): Add option to mail report pkg to skip sending email if no output

Jim Pingle

12:17 AM Feature #11008: Add option to mail report pkg to skip sending email if no output

Pull request: https://github.com/pfsense/FreeBSD-ports/pull/971 Matthew Hildebrand

09:31 AM Feature #10789 (Pull Request Review): FRR integrated configuration and hitless reloads

Jim Pingle

10/26/2020

11:34 PM Feature #11008 (Resolved): Add option to mail report pkg to skip sending email if no output

Provide an option to skip sending the scheduled email if there is no command output or log content generated by the r... Matthew Hildebrand

01:26 PM Feature #10403 (Resolved): Add Proxy support to ACME package

Jim Pingle

01:26 PM Bug #10405 (Resolved): Additional instances of ACME Domain SAN list entries with passwords are rendered as checkboxes

Jim Pingle

01:26 PM Feature #10753 (Closed): Acme DNS-01 for Hurricane Electric needs to be updated for new dynamic update methods

Closed upstream. If their assessment is incorrect, raise the issue there again with more details. If they fix it, we'... Jim Pingle

09:52 AM Feature #10909 (Feedback): #define MAXVIFS 32 to 64

pimd package 2.3.2_1 contains a patch changing MAXVIFS to 64 to match kernel. pfSense-pkg-pimd-0.0.3_1 will require ... Renato Botelho

07:41 AM Feature #11007 (Rejected): Manager "users", "mac" and "NAS/clients" TAB in freeradius with data armazened in database SQL

The FreeRADIUS pfSense GUI is not going to manage your SQL database. Jim Pingle

07:38 AM Feature #10789: FRR integrated configuration and hitless reloads

Found a few more things to fixup: https://github.com/pfsense/FreeBSD-ports/pull/970 Ben Hughes

07:17 AM Bug #10749 (Feedback): squid + captive portal authentication not working

Viktor Gurov wrote:
> small improvement - Use IP as username for allowedip hosts:
> https://gitlab.netgate.com/pfSe... Renato Botelho

07:13 AM Bug #4247 (Resolved): Changes not saved when expression list becomes empty

Renato Botelho

07:10 AM Bug #10775 (Resolved): pfblockerNG SBL_ADs and hpHosts are not reachable anymore

Renato Botelho

10/25/2020

06:01 PM Bug #10983: pfBlockerNG not cleaning everything behind it

Hi guys,
I understand that you tried to reproduce the bug without success. FYI, I am pretty sure this guy had the ... Jacques Bourdeau

04:23 PM Bug #10983: pfBlockerNG not cleaning everything behind it

I agree with Viktor. I have tried to replicate this in the latest devel and stable versions of pfBlockerNG and cannot... Max Leighton

10:17 AM Feature #11007 (Rejected): Manager "users", "mac" and "NAS/clients" TAB in freeradius with data armazened in database SQL

Although freeradius package has SQL support (configure by SQL TAB), the freeradius package dont manipule users, mac a... Teste Teste

10/24/2020

10:48 PM Bug #4247: Changes not saved when expression list becomes empty

it could be saved even if all category are empty.
ver. 1.16.18_9 Alhusein Zawi

06:21 AM Feature #10969 (Resolved): Add Sekhan/TheGreatWall DoH feeds

Tested on:... Danilo Zrenjanin

05:53 AM Bug #10775: pfblockerNG SBL_ADs and hpHosts are not reachable anymore

Tested on:... Danilo Zrenjanin

04:55 AM Bug #10905 (Resolved): Integration between captive portal and squid. Usernames are not showing in access.log file

fixed in #10749... Viktor Gurov

03:10 AM Bug #10749 (New): squid + captive portal authentication not working

small improvement - Use IP as username for allowedip hosts:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge... Viktor Gurov

12:35 AM Bug #10749 (Resolved): squid + captive portal authentication not working

pfSense-pkg-squid 0.4.44_34
works as expected
https://github.com/pfsense/FreeBSD-ports/commit/7d4ffb8ea5f1798bb88... Viktor Gurov

10/23/2020

07:18 PM Feature #10859: Add avahi filtering feature to pfSense

+1 B D

03:52 PM Bug #10933: Retired / Invalid IPv4 lists in pfBlockerNG

Another retired one:
EasyList Adware Filter EasyList_Adware
https://easylist-downloads.adblockplus.org/adwarefilte... Marcos M

02:07 PM Feature #9793 (Resolved): Add support for HAProxy ACLs "src -f /ipalias.lst" to use pfBlockerNG IP Alias Native

Renato Botelho

02:07 PM Feature #9793: Add support for HAProxy ACLs "src -f /ipalias.lst" to use pfBlockerNG IP Alias Native

Can be changed to Resolved. DRago_Angel [InV@DER]

02:02 PM Feature #10739: Update HAproxy-devel package to 2.2 and HAproxy to 2.0

Please, can somebody check this? This important and big update. DRago_Angel [InV@DER]

10:50 AM Bug #10749 (Feedback): squid + captive portal authentication not working

PR merged. Thanks! Renato Botelho

10:36 AM Bug #10749 (Pull Request Review): squid + captive portal authentication not working

Jim Pingle

10:29 AM Bug #10749: squid + captive portal authentication not working

Fixes/improvements in this PR:
- Regexp for STDIN
- Checks all enabled CP DBs
- Checks if client's IP is in 'Allow... Viktor Gurov

06:00 AM Bug #10749: squid + captive portal authentication not working

It appears that squid is passing an extra "-" after the ip address to check_ip.php
e.g. 10.10.10.10 -
I am not prof... Brendan Gallagher

06:10 AM Bug #11001 (Resolved): freeradius lose sql lib every pfsense update

every update of pfsense 2.5 the freeradius package stops working and i must uninstall and reinstall the package.
Th... Teste Teste

03:16 AM Bug #9895: snort reinstallation failed

same on 2.5.0.a.20201022.1850... Viktor Gurov

10/22/2020

05:51 PM Bug #11000 (New): haproxy deprecated trick suggested

haproxy-devel
under backend
the description for "Http check version" say:... Manuel Piovan

07:08 AM Bug #10886 (Closed): NAT64 allows to bypass pfBlockerNG IPv4 feed list

All good, no needs to change pfBlockerNG
https://github.com/pfsense/pfsense/pull/4405#issuecomment-708721849:
<pr... Viktor Gurov

04:22 AM Bug #10429: Status Traffic Total broken 2.4.5

Attached is a patch that can be applied with the system patches plugin that incorporates the fixes needed to fix the ... Chris R

12:03 AM Bug #10447 (Resolved): Framed-IP-Address with plus sign is deprecated

Viktor Gurov

10/21/2020

11:20 PM Bug #10447: Framed-IP-Address with plus sign is deprecated

when I enter + (192.0.2.32+) I receive an error The "Pv4 Address' field must contain a valid IPv4 address."
Alhusein Zawi

01:27 PM Bug #10932 (Resolved): wrong link on haproxy

Renato Botelho

01:17 PM Bug #10932: wrong link on haproxy

when click on Status> HAProxy Stats. it works
link:
http://*/haproxy/haproxy_stats.php?haproxystats=1
Alhusein Zawi

11:54 AM Bug #10932 (Feedback): wrong link on haproxy

Viktor Gurov

07:49 AM Bug #3704 (Closed): spamd whitelist/blacklist bug

spamd is gone for years Renato Botelho

10/20/2020

12:36 PM Bug #9854 (Closed): pfBlockerNG Message: Allowed memory size of 536870912 bytes exhausted

I've come across this error before on older versions of pfBlockerNG. Updating to the -devel branch (as suggested by t... Marcos M

11:47 AM Feature #10913 (Resolved): Allow disabling caching in Squid completly

Tested on 2.4.5_p1 and on 2.5.0-DEVELOPMENT (built on Tue Oct 20 07:03:54 EDT 2020)
There is an option to disable ... Azamat Khakimyanov

11:09 AM Bug #10994 (New): SquidGuard Blacklists Restore Default button does not work

If SquidGuard/Blacklists Blacklist Update field is empty then clicking Restore Default restores nothing and generates... Constantine Kormashev

10:01 AM Bug #10771 (Resolved): arpwatch: option to not send hourly email notification on cron run

Tested on 2.4.5_p1 and on 2.5.0-DEVELOPMENT (built on Tue Oct 20 01:00:50 EDT 2020)
There is an option to disable ... Azamat Khakimyanov

05:47 AM Bug #10749: squid + captive portal authentication not working

Hello,
I have the same problem on a fresh new installation with versions :
- pfSense 2.4.4-RELEASE-p1
- Squid 0.4.... Bruno Le Fellic

05:23 AM Feature #10909: #define MAXVIFS 32 to 64

Louis van Breda wrote:
> Renato, I am running an early pimdv3 here. Not for release yet, however working properly ..... Renato Botelho

10/19/2020

11:01 AM Feature #10789: FRR integrated configuration and hitless reloads

Ben Hughes wrote:
> Yes, Jim's right. I'm forgetting i've build my test packages for 2.4.5 on a FreeBSD 11 build VM ... Chris Evans

10:39 AM Feature #10789: FRR integrated configuration and hitless reloads

Yes, Jim's right. I'm forgetting i've build my test packages for 2.4.5 on a FreeBSD 11 build VM with matching librari... Ben Hughes

10:37 AM Feature #10789: FRR integrated configuration and hitless reloads

Do not install packages across versions like that. Either upgrade to 2.5.0 completely or wait for it to be merged. An... Jim Pingle

10:36 AM Feature #10789: FRR integrated configuration and hitless reloads

@pkg install json-c@ should do the job, 0.14 is in the 2.4.5 repos. I have expected @pkg@ to have picked that up itse... Ben Hughes

09:42 AM Feature #10789: FRR integrated configuration and hitless reloads

Ben Hughes wrote:
> Always like a nice easy fix!
>
> I've only just starting doing anything with pfsense dev wise... Chris Evans

09:23 AM Feature #10789: FRR integrated configuration and hitless reloads

Always like a nice easy fix!
I've only just starting doing anything with pfsense dev wise but from github it seems... Ben Hughes

09:12 AM Feature #10789: FRR integrated configuration and hitless reloads

Ben Hughes wrote:
> Just a thought, which version of pfSense is this with? And which version of the FRR plugin is in... Chris Evans

09:09 AM Feature #10789: FRR integrated configuration and hitless reloads

Just a thought, which version of pfSense is this with? And which version of the FRR plugin is installed? It should be... Ben Hughes

08:35 AM Feature #10789: FRR integrated configuration and hitless reloads

Ben Hughes wrote:
> Chris Evans wrote:
> > I'm just going in and adding/removing a fake neighbor to see if it would... Chris Evans

10:10 AM Bug #10990: net-snmp IPv6 listen address needs to be wrapped in square brackets

PR: https://github.com/pfsense/FreeBSD-ports/pull/965 Jim Pingle

10:09 AM Bug #10990 (Pull Request Review): net-snmp IPv6 listen address needs to be wrapped in square brackets

Jim Pingle

06:52 AM Feature #9721 (Feedback): add squidclient -h 127.0.0.1 mgr:info output to Diagnostics / Squid and status.php

PR has been merged. Thanks! Renato Botelho

06:42 AM Feature #9721 (Pull Request Review): add squidclient -h 127.0.0.1 mgr:info output to Diagnostics / Squid and status.php

Renato Botelho

06:50 AM Bug #6378 (Feedback): inline background styles in squidguard package

PR has been merged. Thanks! Renato Botelho

10/18/2020

07:42 AM Feature #10841: Allow per Source/VLAN/Network individual black&whitelists

Viktor Gurov wrote:
> can be realized with "views": https://forum.netgate.com/topic/129365/bypassing-dnsbl-for-speci... Stefan Bauer

06:31 AM Bug #10990 (Resolved): net-snmp IPv6 listen address needs to be wrapped in square brackets

With net-snmp v5.7 (current 2.4.5) snmpd will accept an IPv6 listen address without square brackets, with v5.9 (2.5.0... Ben Hughes

10/17/2020

04:06 PM Bug #10989: Snort alert page has hidden characters in IPv6 address

Oh. I searched for Snort bugs. Steve Y

03:41 PM Bug #10989: Snort alert page has hidden characters in IPv6 address

Suricata issue #10187 Viktor Gurov

12:10 PM Bug #10989 (New): Snort alert page has hidden characters in IPv6 address

It looks like Snort has hidden characters in IPv6 addresses on its alert page. This makes it difficult to search for... Steve Y

05:14 AM Feature #9721 (New): add squidclient -h 127.0.0.1 mgr:info output to Diagnostics / Squid and status.php

Adds Squid status top menu entry:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/2 Viktor Gurov

04:37 AM Feature #9721 (Resolved): add squidclient -h 127.0.0.1 mgr:info output to Diagnostics / Squid and status.php

Tested on:... Danilo Zrenjanin

04:59 AM Bug #9809 (Resolved): postgresql support not compiled

Tested on :... Danilo Zrenjanin

03:08 AM Bug #9211 (Resolved): GeoIP broken in pfSense-pkg-ntopng-0.8.13_3

Tested on :... Danilo Zrenjanin

10/16/2020

11:58 PM Bug #10964 (Resolved): pfSense-pkg-frr 0.6.8_4 does not use default ospf area if one is not defined on the interface.

Viktor Gurov

09:57 PM Bug #10964: pfSense-pkg-frr 0.6.8_4 does not use default ospf area if one is not defined on the interface.

interfaces use default ospf area if it is not defined on the interface.
interface em0
ip ospf area 0.0.0.0
inte... Alhusein Zawi

04:42 PM Bug #6378: inline background styles in squidguard package

https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/1 Viktor Gurov

10:47 AM Feature #10909: #define MAXVIFS 32 to 64

Renato, I am running an early pimdv3 here. Not for release yet, however working properly .... (maintainer is working ... Louis B

12:49 AM Bug #10983 (Feedback): pfBlockerNG not cleaning everything behind it

Unable to reproduce it on the latest pfBlockerNG-devel-2.2.5_37 - virtualip is successfully removed during uninstall Viktor Gurov

10/15/2020

08:36 PM Bug #10983 (Rejected): pfBlockerNG not cleaning everything behind it

I moved from PI-Hole to pfBlockerNG for a while. I chose to move back to PI-Hole and stopped using pfBlockerNG. After... Jacques Bourdeau

01:02 PM Feature #10969 (Feedback): Add Sekhan/TheGreatWall DoH feeds

PR has been merged. Thanks! Renato Botelho

01:02 PM Bug #10927 (Feedback): pfBlockerNG-devel fullfill the pfsense config history when RAM disk in use

PR has been merged. Thanks! Renato Botelho

12:56 PM Bug #4247 (Feedback): Changes not saved when expression list becomes empty

PR has been merged. Thanks! Renato Botelho

07:22 AM Bug #4247: Changes not saved when expression list becomes empty

https://github.com/pfsense/FreeBSD-ports/pull/964 Viktor Gurov

12:54 PM Bug #10447: Framed-IP-Address with plus sign is deprecated

PR has been merged. Thanks! Renato Botelho

10/14/2020

01:29 PM Bug #10332 (Closed): PFBlockerNG loading GeoLite2-Country.mmdb

Indeed it does! Marcos M

10:20 AM Bug #10976 (Rejected): Freeradius dont start with SQL configuration

no such issue on pfSense 2.5.0.a.20201013.1850 with FreeRADIUS pkg 0.15.7_18:... Viktor Gurov

07:08 AM Bug #10976 (Rejected): Freeradius dont start with SQL configuration

My Pfsense is 2.5
I tried run freeradius with mysql suport but the freeradius dont start. the follow error occur:
... Teste Teste

04:04 AM Feature #9742 (Resolved): Print Patch ID in log while patching

Tested on :... Danilo Zrenjanin

03:16 AM Bug #10447: Framed-IP-Address with plus sign is deprecated

Danilo Zrenjanin wrote:
> Tested on :
> [...]
>
> I still can enter 192.0.2.32+ with no complaints from pfSense.... Viktor Gurov

02:53 AM Bug #10447: Framed-IP-Address with plus sign is deprecated

Tested on :... Danilo Zrenjanin

03:03 AM Bug #10927: pfBlockerNG-devel fullfill the pfsense config history when RAM disk in use

Fix:
https://github.com/pfsense/FreeBSD-ports/pull/962 Viktor Gurov

01:17 AM Bug #10502: LLDP spamming errors on Netgate XG-7100

Renato Botelho wrote:
> DRago_Angel [InV@DER] wrote:
> > So maybe we can track this issue https://github.com/vincen... Viktor Gurov

01:06 AM Feature #10969: Add Sekhan/TheGreatWall DoH feeds

https://github.com/pfsense/FreeBSD-ports/pull/961 Viktor Gurov

10/13/2020

04:32 PM Bug #10502 (In Progress): LLDP spamming errors on Netgate XG-7100

There is no PR waiting for review Renato Botelho

04:28 PM Bug #10502: LLDP spamming errors on Netgate XG-7100

DRago_Angel [InV@DER] wrote:
> So maybe we can track this issue https://github.com/vincentbernat/lldpd/issues/394 an... Renato Botelho

11:04 AM Feature #10134 (Resolved): pfSense-pkg-softflowd: Add additional options available in softflowd-1.0.0

Tested on 2.4.5_p1 and on 2.5.0-DEVELOPMENT (built on Tue Oct 13 07:05:06 EDT 2020)
MAC Address Flow Tracking Leve... Azamat Khakimyanov

10:55 AM Feature #10893 (Resolved): TFTP package improvements

Tested on 2.4.5_p1 and on 2.5.0-DEVELOPMENT (built on Tue Oct 13 07:05:06 EDT 2020).
"Write access" and "Logging" ... Azamat Khakimyanov

07:32 AM Bug #10964 (Feedback): pfSense-pkg-frr 0.6.8_4 does not use default ospf area if one is not defined on the interface.

Renato Botelho

07:31 AM Feature #10789: FRR integrated configuration and hitless reloads

PR has been merged. Thanks! Renato Botelho

04:04 AM Feature #10789: FRR integrated configuration and hitless reloads

Chris Evans wrote:
> I'm just going in and adding/removing a fake neighbor to see if it would cause my valid BGP nei... Ben Hughes

07:26 AM Feature #10909 (Needs Patch): #define MAXVIFS 32 to 64

FreeBSD changes are merged. Waiting for pimd patch Renato Botelho

07:25 AM Feature #10909: #define MAXVIFS 32 to 64

xavier Lemaire wrote:
> do i need to open another request for the pimd part?
Please do it Renato Botelho

10/12/2020

10:59 PM Feature #10789: FRR integrated configuration and hitless reloads

Ben Hughes wrote:
> Chris Evans wrote:
> > I'm still seeing BGP neighbor resets when changes are being made, I beli... Chris Evans

03:34 AM Feature #10789: FRR integrated configuration and hitless reloads

Chris Evans wrote:
> I'm still seeing BGP neighbor resets when changes are being made, I believed this effort was to... Ben Hughes

10:44 AM Feature #10769 (Resolved): Prevent users from creating new ACMEv1 keys

Tested on 2.4.5_p1 and on 2.5.0-DEVELOPMENT (built on Mon Oct 12 07:05:15 EDT 2020)
There is no option to create L... Azamat Khakimyanov

07:45 AM Bug #7797 (Feedback): Squid Reverse Proxy alternating between destinations

PR has been merged Renato Botelho

07:44 AM Bug #9211 (Feedback): GeoIP broken in pfSense-pkg-ntopng-0.8.13_3

PR has been merged Renato Botelho

07:42 AM Feature #9588 (Duplicate): New package: node_exporter

Duplicate of #9974 Renato Botelho

07:40 AM Feature #9902 (Resolved): add sticky filter for Alert Log please

Already resolved Renato Botelho

07:39 AM Bug #9981 (Resolved): Suricata "Use IP Reputation Lists on this interface." actually defaults to ON, despite incorrect comment.

Already resolved Renato Botelho

07:37 AM Bug #10447 (Feedback): Framed-IP-Address with plus sign is deprecated

PR was merged months ago Renato Botelho

07:29 AM Feature #9721 (Feedback): add squidclient -h 127.0.0.1 mgr:info output to Diagnostics / Squid and status.php

PR has been merged. Thanks! Renato Botelho

07:26 AM Feature #10950 (Feedback): Allow to select only netmap-compatible cards for inline mode

PR has been merged. Thanks! Renato Botelho

07:26 AM Bug #10911 (Feedback): Bandwidthd iframe not resizing in 2.4.5/2.4.5p1

PR has been merged. Thanks! Renato Botelho