Activity
From 11/07/2020 to 12/06/2020
12/06/2020
-
11:02 PM Bug #10516: FRR Access list
- Alhusein Zawi wrote:
> Access list is working as expected on 2.5 but it is not taking an effect until restarting FRR... -
06:26 PM Bug #11136 (Confirmed): Suricata trashcan icon for interface mapping delete has no effect
- Attempting to delete interfaces using the trashcan icon produces system logs:...
-
05:42 PM Bug #11136 (Resolved): Suricata trashcan icon for interface mapping delete has no effect
- The GUI offers two ways to delete an interface mapping on the Interfaces tab of Suricata.
Clicking the trashcan i... -
02:41 AM Bug #11135: HAproxy OCSP reponse crontab bug
- A more proper fix would be :...
-
- Confirmed that the previous code did work with an older version :
* Old OpenSSL :... -
- Context : I have been using pfSense 2.5.0 development snapshots to get TLS 1.3 support.
I have noticed that the OC...
12/05/2020
-
02:31 PM Bug #11131: pfblockerng-devel 3.0.0_2 logs when logging is disabled
- Does the rule tracking ID match the one from the logs? What happens if you disable the rule - does it still get logged?
-
- Testing with bind 9.16_6 the default control port is still showing as 953 and conflicting with unbound.
12/04/2020
-
10:09 PM Bug #11128: pfblockerng 3.0.0_3 not using upstream proxy for curl feed downloads
- Viktor Gurov wrote:
> fix:
> https://github.com/pfsense/FreeBSD-ports/pull/999
Thank you Viktor, can confirm you... -
- fix:
https://github.com/pfsense/FreeBSD-ports/pull/999 -
09:28 PM Bug #10516: FRR Access list
- Access list is working as expected on 2.5 but it is not taking an effect until restarting FRR bgpd service.
passe... -
- maybe this is #11039 ?
-
05:14 PM Bug #11131 (Resolved): pfblockerng-devel 3.0.0_2 logs when logging is disabled
- I just installed pfblockerng 3.0.0_2 and I'm seeing lots of traffic in the log even though logging is disabled.
A ... -
- RIP can also be used as a workaround for #9204
-
- since the routing daemon is not available in version 2.5, it would be useful to add RIP (+ RIPng?) support to the FRR...
12/03/2020
-
- Hi there,
Not sure when this started happening but none of the feeds are downloading anymore, I have a feeling curl ... -
02:47 PM Bug #10885 (Resolved): HAProxy DNS statistics not working
- Tested on:...
-
- 'The check_cp helpers are crashing too rapidly' fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_reques...
12/02/2020
-
02:49 PM Bug #10935: FRR 0.6.7-6 - BGPD service recycled IPv6 without Route Map
- https://github.com/pfsense/FreeBSD-ports/commit/df52ed6fde08e5360555146cbf5af5517d646c1b#diff-1812ded0ff9970459b22d82...
-
- https://github.com/pfsense/FreeBSD-ports/pull/998
11/30/2020
-
03:52 PM Bug #11107 (Feedback): pfBlockerNG 3.0.0_1 doesn't have some feeds fixes
- PR has been merged. Thanks!
-
08:35 AM Bug #11107 (Pull Request Review): pfBlockerNG 3.0.0_1 doesn't have some feeds fixes
-
- PR has been merged. Thanks!
-
-
-
11/28/2020
-
- Tested in freeradius3 version 0.15.7_20. I see special characters are being converted as expected. This issue can be ...
-
01:06 PM Bug #8306 (Rejected): HAproxy in pfsense 2.42-p1 ha pair generates XMLRPC errors
- Closing this ticket as rejected, since sync should not be enabled on the secondary unit for any HA configuration.
11/27/2020
-
- https://phishing.army/
feed https://phishing.army/download/phishing_army_blocklist.txt
https://oisd.nl/
feed htt... -
- duplicate of https://redmine.pfsense.org/issues/9364#note-4
-
07:11 AM Bug #11111 (Duplicate): Squidguard_configurator bug
- On line 1293 of file squidguard_configurator.inc.
The result is force to : $rdr_path = "$guiproto://$guiip:$guipor... -
- https://github.com/pfsense/FreeBSD-ports/pull/996
-
- Fix:
https://github.com/pfsense/FreeBSD-ports/pull/995
11/26/2020
-
11:42 PM Bug #11108 (Resolved): pfsense 2.5.0-DEVELOPMENT (amd64) pfBlockerNG-devel 3.0.0_1
- after install pfblockerng 3.0.0_1 on pfsense 2.5.0-dev
i got the following crash report
Crash report begins. Ano... -
- some fixes from the previous PRs is not merged to 3.0.0_1:
#10933 - Lashback LB_BL - host not found
#10930 - correc... -
- You have to append...
-
- regression fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/12 -
- https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/11
11/25/2020
-
- the latest version of squid for FreeBSD 11 is 4.13:
https://www.freshports.org/www/squid/ -
- In order to pass mpd specific attributes from Freeradius to, for example, provide rate limits to PPPoE clients a dict...
-
- I was not able to reproduce the issue either:...
-
- I can't replicate this by simply attempting to backup /root.
The backup file is not included in the .tgz.
Testi... -
- https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/10
-
- If the "Enable Forwarding" checkbox is enabled, and a Forwarder IP is defined, and there is no semicolon at the end, ...
-
- Tested on:...
-
- It would be nice to allow using DNSBL blocking by schedule to enable/disable it during school hours.
maybe improve p...
11/24/2020
-
01:35 PM Bug #11098 (Resolved): Backup Files and Directories plugin crashes firewall if /root specified as backup location
- The Backup Files and Directories plugin crashes firewall if @/root@ specified as backup location. The plugin creates ...
-
- PR has been merged. Thanks!
-
- PR has been merged. Thanks!
11/23/2020
-
-
07:15 AM Bug #11094 (Not a Bug): HAProxy Stick on SSL-Session-ID Doesn't Work
- Diff'ing the generated HAProxy configuration before and after enabling SSL-Session-ID on a backend doesn't alter the ...
11/21/2020
-
05:19 PM Feature #10141 (Resolved): pfBlockerNG - MaxMind License Registration
- License registration is required and the appropriate links and information for this are included in the user interfac...
-
- pfBlockerNG-devel 2.2.5_37 on pfSense 2.4.5p1 only allows elements to be selected in the drop down and I did not appe...
-
- Using pfBlockerNG python integration it's possible to create DNS tunneling detector using regexp,
see https://www.gi... -
- https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/9
11/20/2020
-
-
- https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/8
-
- https://forum.netgate.com/topic/103370/named-bind-service-is-started-when-disabled:
If I configure the bind DNS serv... -
09:16 AM Feature #11088: populate ifAlias snmp attribute
- great ! can surely wait until 2.5.0 !
-
- Actually I take that back, we added the GUI interface descriptions to the OS interfaces in #1557 which lets them show...
-
- Wouldn't be possible with the built-in SNMP (bsnmpd). Doubtful it can be done with NET-SNMP directly either, but perh...
-
- When responding to snmp queries, populate IF-MIB::ifAlias.n snmp attribute with gui configurated interface descriptio...
11/18/2020
-
- It's not in FreeBSD ports, it would need to be added there first.
-
05:17 PM Feature #11080 (Needs Patch): Original SpeedTest Ookla for FeeBSD
- is possible add this packet?
pkg update && pkg install -g libidn2 ca_root_nss
pkg add "https://bintray.com/ookla/... -
- Found a couple more edge cases that needed addressing:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/commit/9... -
07:38 AM
Bug #7267: Status Traffic Totals - Stacked Bar - Scale not high enough
- This functionality is provided by a library that would need to be updated, but which appears to be no longer maintained.
-
-
- Tested on:...
11/17/2020
-
- it was fixed in #7153
I can see Status_Traffic_Totals under '<installedpackages>':... -
- Found some cipher list issues, all fixed now: https://github.com/pfsense/FreeBSD-ports/commit/eafeafea69ff0aae39757f4...
-
08:43 AM Feature #9563 (Resolved): Syslog-ng TLS support
- Tested on 2.5.0-DEVELOPMENT (amd64)
built on Tue Nov 17 01:02:10 EST 2020
FreeBSD 12.2-STABLE
I've run Syslog-ng...
11/16/2020
-
11:48 AM Bug #11069 (Feedback): Reset Traffic Totals Not Working
- Thanks! This looks good and was merged. Should be able to test the change in the next build.
-
-
10:33 AM Bug #11074 (Confirmed): bind Zone Settings Zones, Save button opens "Confirmation required to save changes"
- possible bug (or annoyance :) ) in bind package?
When I try to hit the Save button in the Package Bind: Zone Setti... -
- Viktor is the person who was working on this package
-
- Louis van Breda wrote:
> OK, I understand. I will rebuild for 32 MAXVIFS. 32 VIFS are plenty for me, but others woul... -
07:12 AM Feature #10909: #define MAXVIFS 32 to 64
- OK, I understand. I will rebuild for 32 MAXVIFS. 32 VIFS are plenty for me, but others would perhaps like to have mor...
-
- Louis van Breda wrote:
> I fixed the problem. It was not in the OS. I did compile the PIMD-package in the wrong way ... -
- Basic functions work, if anyone has new issues they find, let's move them to the forum and then we can open new issue...
11/15/2020
-
- Tested on 2.5.0-DEVELOPMENT (amd64)
built on Sun Nov 15 01:02:10 EST 2020
FreeBSD 12.2-STABLE
Telegram notificat... -
- Tested on 2.4.5_p1 and on 2.5.0-DEVELOPMENT (built on Sun Nov 15 01:02:10 EST 2020)
LDAP Cache Time option is now ... -
- I fixed the problem. It was not in the OS. I did compile the PIMD-package in the wrong way in relation MAXVIFS64. So ...
11/14/2020
-
- Tested version 1.5_1 on 2.4.5-p1 64-bit installer worked and installed config properly but did present warning during...
-
- https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/7
-
- https://forum.netgate.com/topic/152088/reset-traffic-totals-not-working:
I wanted to reset the data showing in the S... -
- Tested:
haproxy-devel 0.61_2 - "Agent" doesn't appear under Health check method. It's fixed.
HA-Proxy 0.60_...
11/13/2020
-
- Marking bug report as rejected, since it is unable to be confirmed as an issue.
-
- NUT sends SMTP notification using pfSense main notification settings since 2016
11/12/2020
-
- The diff was applied in this commit and should be testable once the packages rebuild for package version 2.3.2: https...
-
- WebGUI feature for:
https://support.google.com/a/answer/1668854?hl=en:
To prevent users from signing in to Goog... -
- tested
Jordan Greene wrote:
> I was able to add and start an interface using snort with a USB ethernet adapter (...
11/11/2020
-
06:11 PM Feature #9833: ACME: add ability to use custom ACME server
- Michael Long wrote:
> I'll add my voice to this request. I just set up a local step-ca ACME server and would love t... -
01:33 PM
Bug #11055 (Resolved): Insecure FreeRADIUS defaults
- * "Disable Weak EAP Types" (EAP tab, EAP section) should be enabled by default
* "Default EAP Types" (EAP tab, EAP s... -
01:23 PM
Bug #11054 (Assigned): Check Client Certificate CN not working as described
- Page: Services / FreeRADIUS
Tab: EAP
Section: EAP-TLS
Option: Check Client Certificate CN
Actual result when en... -
- Please post on the forum for assistance. You haven't provided nearly enough information there.
-
- i have this problem with the last client_export
-
- blinkled package is now retired on 2.5.0
-
- Quagga package is now retired on 2.5.0
-
- OpenBGPD package is now retired on 2.5.0
-
- OpenBGPD package is now retired on 2.5.0
-
- OpenBGPD package is now retired on 2.5.0
-
- Tested on 2.4.5_p1 and on 2.5.0-DEVELOPMENT (built on Wed Nov 11 01:06:53 EST 2020)
With NRPE package installed th... -
- Tested on 2.4.4_p3, on 2.4.5_p1 and on 2.5.0-DEVELOPMENT (built on Wed Nov 11 01:06:53 EST 2020)
On 2.4.4_p3 I sti... -
- The text is correct in the package. When the box is checked, it only sends the e-mail if there is output. Adding the ...
-
- Tested on 2.4.5_p1 and on 2.5.0-DEVELOPMENT (built on Wed Nov 11 01:06:53 EST 2020)
There is an option 'Skip If No... -
- Renato, that ^fixed^ the problem :) I did create a FreeBSD bug report (251047)
-
- Done! It's all back to 32
-
- Renato, you only have to rebuild the OS. There is no neat to do something with the pfSense pimd package since those a...
-
- When using hashed options like MD5 the "password" field must be filled with the _pre-hashed_ password, not the actual...
11/10/2020
-
07:22 PM Bug #11052: Authtype MD5-Password dont work in freeradius3
- I tested in menu Diagnostic->authentication
-
- system: PFsense 2.5
package: freeradius3
issue: I create a user in *users tab* with option *Password Encription* MD... -
- Tested pkg version 1.5_1 in:...
-
- I committed a variation of that instead:
https://github.com/pfsense/FreeBSD-ports/commit/0e72ef35bbb0f9dc370141cb9... -
- right, I'm going to revert it and rebuild pimd and igmoproxy
-
- Renato,
Restore to MAXVIFS 32 is a good idea for two reasons:
- it would allow me to test the actual package beha... -
- No negative feedback thus far and further testing I've done has been positive as well. Picked back to 2.4.5 for more ...
11/09/2020
-
- Looks like your actual problem (based on your forum thread) is this: #11050
Under normal conditions on a release, ... -
- That is true but is also a non-statement. I already explained why that is irrelevant.
-
- Jim, if the software which checks the backup-file when loaded can check if backup is OK, the same software could do ...
-
- Your logic is flawed because if it could detect the backup was bad it could just not make a bad backup. If it generat...
-
- Jim, at the moment you need the backup, *the firewall is probably down*. So *you need to have it fixed as soon as pos...
-
- In the unlikely case that a bad backup was generated, it is unlikely anything could be done to repair it in the GUI, ...
-
- Tested pfSense-pkg-bandwidthd-0.7.4_3 in Chrome, Edge, Firefox with no sizing issues. Working as expected. Marking th...
-
- Maintaining a list of public servers is outside the scope of the package, and encouraging users to use a high-through...
-
09:54 AM Feature #11043: pfSense GUI for iperf3 / perf
- Jim Pingle wrote:
> There is already a package for iperf3 with a GUI.
But not useful: no quick servers selection (b... -
- There is already a package for iperf3 with a GUI.
-
- No, it is not reasonable. Any speed test run from the firewall is not a valid metric and adding a GUI only encourages...
-
- Jim Pingle wrote:
> There is a CLI speed test package already (py37-speedtest-cli on 2.5.0, similar name on 2.4.5)).... -
- There is a CLI speed test package already (py37-speedtest-cli on 2.5.0, similar name on 2.4.5)). There are no plans f...
-
- Louis van Breda wrote:
> Almost sure that MAXVIFS 64 does very likely! break the system!
>
> Yesterday, I spend t... -
11/08/2020
-
- Hi pfSense DevTeam !
We appreciate You work!
Please add the *GUI for OOKLA Speedtest service as pfSense-native pa... -
- Hi pfSense DevTeam !
We appreciate You work!
Please add the *GUI for iperf3 / perf as pfSense-native package*.
... -
- I have been facing corrupt configuration files when using the file (loaded on an usb-stick) during an new installatio...
-
- Almost sure that MAXVIFS 64 does very likely! break the system!
Yesterday, I spend the whole day! , together with ...
11/07/2020
-
- I was able to add and start an interface using snort with a USB ethernet adapter (ue0) on SG-5100
2.5.0-DEVELOPMEN... -
01:44 PM Bug #11040: pfb_filter core faults when clearing firewall log
- Jim Pingle wrote:
> That instance of the program is from pfBlockerNG, not the base system.
>
> Nothing to fix in ... -
- That instance of the program is from pfBlockerNG, not the base system.
Nothing to fix in the base system since the... -
- Adding: clog_pfb drops the core, pfb_filter stops.
-
- The clog_pfb drops a core when the firewall log is cleared. I can replicate this on demand. Clearing the log from Sta...
-
04:42 AM Feature #11012: Add Zabbix 5.2 (agent and proxy) packages
- https://www.zabbix.com/life_cycle_and_release_policy
The sad part about the proxy is that they are not backwards com... -
- see also #11013
-
- no such issue on 2.5 branch (frr 0.6.8_8),
fixed in #10789
Also available in: Atom