Activity
From 12/05/2020 to 01/03/2021
01/03/2021
-
10:04 AM Feature #9833: ACME: add ability to use custom ACME server
- Stanislav Dimov wrote:
> +1. Any progress on this?
+1 on this as well. Have recently setup an ACME server locall... -
08:29 AM Bug #11214 (Resolved): mail reports typo "Define reports to by sent periodically via email. "
- /status_mail_report.php
Email Reports
Define reports to by sent periodically via email.
should be
Define re...
01/02/2021
-
09:07 PM Feature #10818: UDP Broadcast Relay
- Would absolutely love to see this becoming a pfSense package. Thank you Chetan and Garth for taking a shot at this.
-
08:17 PM Feature #11201: Show iTLD Allow IDN domains
- Those don't provide a number of domains per TLD.
-
02:13 PM Bug #11175: FRR OSPFv6 config missing default area
- Fixed
Default Area is added to OSPF6 configuration
router ospf6
area 0.0.0.0 range 684d:1111:222:3333::/64 co... -
11:25 AM Feature #11155: SafeSearch AAAA
- Added description regarding IPv4/IPv6 redirect support by search engines.
https://github.com/pfsense/FreeBSD-ports/p...
01/01/2021
-
11:12 PM Feature #11201: Show iTLD Allow IDN domains
- BBcan177 . wrote:
> Best to edit the iTLD's and add the static IDN between the existing Puny code and the [xxx] coun... -
01:59 PM Feature #11201: Show iTLD Allow IDN domains
- Best to edit the iTLD's and add the static IDN between the existing Puny code and the [xxx] counts. ...
-
02:07 PM Feature #11209: pfBlockerNG soft blocking
- This won't work for HTTPS requests. And no way to do a redirection unless a Proxy is used.
-
08:21 AM Feature #11209 (New): pfBlockerNG soft blocking
- For the high false-positive feeds, or for some specific feeds (like https://1984.sh/covid19-domains-feed.txt) it woul...
-
10:47 AM Feature #11210 (Resolved): 3rd party rulesets
- It would be useful to add the ability to use any additional third party rulesets,
and download/update them just like... -
03:23 AM Feature #10605: Add certificates from Trusted Store to Squid cert store
- "Extra Trusted CA" option to select the CA certificate that is used by the upstream SSL/MITM proxy:
https://gitlab.n...
12/31/2020
-
11:12 PM Bug #11205 (Duplicate): DNSBL SafeSearch redirection doesn't work with DuckDuckGo
- see https://redmine.pfsense.org/issues/11155#note-3
-
01:55 PM Bug #11205 (Duplicate): DNSBL SafeSearch redirection doesn't work with DuckDuckGo
- It's not forcing safe search when using DuckDuckGo search engine.
-
02:46 PM Feature #11206: FRR 7.5
- I've bumped the port version to 0.7.0 for pfSense-pkg-frr because of the changes, but looking back at everything that...
-
02:39 PM Feature #11206: FRR 7.5
- PR: https://github.com/pfsense/FreeBSD-ports/pull/1018
-
02:39 PM Feature #11206 (Closed): FRR 7.5
- Update the FRR port to 7.5 and update pfSense-pkg-frr to use 7.5 new features and other changes and fixes.
- FRR r... -
12:21 PM Bug #11204: Fix net-snmp logging to syslog
- PR: https://github.com/pfsense/FreeBSD-ports/pull/1017
-
12:20 PM Bug #11204 (Resolved): Fix net-snmp logging to syslog
- The net-snmp service command currently is set to log to a file rather than to syslog so log output ends up in file @/...
-
11:05 AM Bug #11175 (Feedback): FRR OSPFv6 config missing default area
- Fix has been merged in the last commit, will be in snapshots soon.
-
12:16 AM Bug #11175: FRR OSPFv6 config missing default area
- https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/17
-
11:04 AM Feature #10665 (Feedback): Manual OSPF neighbor definitions
- There was an issue introduced recently which was not including the neighbor settings in the FRR configuration, I push...
-
09:37 AM Feature #11155 (New): SafeSearch AAAA
- DuckDuckGo fix:
https://github.com/pfsense/FreeBSD-ports/pull/1016 -
09:19 AM Feature #11202 (Resolved): Antivirus feature update
- 1) Remove Google Safe Browsing feature as it's deprecated/outdated,
see https://blog.clamav.net/2020/06/the-future-o... -
07:38 AM Feature #11201: Show iTLD Allow IDN domains
- https://github.com/pfsense/FreeBSD-ports/pull/1015
-
07:34 AM Feature #11201 (Resolved): Show iTLD Allow IDN domains
- Show IDN(UTF8) translated domains in addition to punnycode-encoded domains
see screenshots -
04:02 AM Feature #11199: Minor updates
- https://github.com/pfsense/FreeBSD-ports/pull/1014
-
02:50 AM Feature #11199 (Resolved): Minor updates
- 1) Alerts page - add Yandex.DNS (https://dns.yandex.com);
2) Threat lookup page - add Kaspersky and InterServer.net ... -
03:50 AM Feature #11200 (New): Squid reverse proxy + multiple ssl certificates
- https://forum.netgate.com/topic/94878/squid-reverse-proxy-multiple-ssl-certificates:
I recently have installes som... -
02:45 AM Feature #11178: Filer do not ask what to do with previous filename
- Also same applies on deletion of entry - when you delete files managed by filer - files doesn't removes. This can be ...
-
01:49 AM Feature #11178: Filer do not ask what to do with previous filename
- User interaction isn't fine fit in general, maybe this can be parameter in per-file settings and be set by default to...
-
02:43 AM Bug #11180: Filer run action for files on sync that wan't been modified
- Hi Viktor, thank you. Fix for this bug working. Tested:
1. modified file without script action - another files actio... -
02:11 AM Bug #11180: Filer run action for files on sync that wan't been modified
- DRago_Angel [InV@DER] wrote:
> Hi Viktor, can you please provide diff -u ? I can check fix and provide feedback. Tha... -
01:49 AM Bug #11180: Filer run action for files on sync that wan't been modified
- Hi Viktor, can you please provide diff -u ? I can check fix and provide feedback. Thank you for fix and also wish you...
-
01:41 AM Bug #11180: Filer run action for files on sync that wan't been modified
- Fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/18 -
02:07 AM Bug #11191: Installing and Removing pfBlockerNG Leaves Shell Scripts in webConfigurator Messages
- BBcan177 . wrote:
> Before you uninstall, you need to uncheck "Keep Settings" in the General Tab.
it doesn't help
... -
12:46 AM Bug #11108: pfsense 2.5.0-DEVELOPMENT (amd64) pfBlockerNG-devel 3.0.0_1
- DRago_Angel [InV@DER] wrote:
> It not pushed to 2.5.0. Last version on pfSense 2.5.0 is 3.0.0_1. Please fix this. Or...
12/30/2020
-
11:51 PM Bug #11185 (Pull Request Review): Redis service stopping before NtopNg
-
05:00 PM Bug #10935: FRR 0.6.7-6 - BGPD service recycled IPv6 without Route Map
- 0.6.8 has a *lot* of changes in it, so it's probably not directly relevant.
That config should work though so you'... -
04:55 PM Bug #11158: FRR Prefix Lists
- As long as the configuration is getting generated correctly this is probably an FRR bug, I've run into various 'stran...
-
04:52 PM Bug #11175: FRR OSPFv6 config missing default area
- There's a typo in @frr_ospf6.inc@, I'll put a PR in that fixes it shortly.
-
01:53 PM Bug #11135 (Feedback): HAproxy OCSP reponse crontab bug
- PR has been merged. Thanks!
-
01:47 PM Bug #5168: squid doesn't function during/after HA failover
- Hello
I tested the HA and Squid on the last Dev snapshot version:
2.5.0-DEVELOPMENT (amd64)
built on Wed Dec 30 ... -
09:15 AM Bug #11194 (Rejected): ACME DNS challenge for dynu.com not deleting all DNS TXT records upon completion
- We don't have control over that code, you'd report that upstream to the acme.sh project directly: https://github.com/...
12/29/2020
-
11:46 PM Bug #11194 (Rejected): ACME DNS challenge for dynu.com not deleting all DNS TXT records upon completion
- I've had this issue and finally got around to tracking it down this afternoon. I use the ACME package in pfSense to ...
12/28/2020
-
08:54 AM Bug #11191: Installing and Removing pfBlockerNG Leaves Shell Scripts in webConfigurator Messages
- Is there a compelling reason to keep the shell scripts around even if the user didn't choose that? Typically a user w...
-
06:21 AM Bug #10700 (Resolved): not all VPN IPs added with vpnaddresses option
12/27/2020
-
10:45 AM Bug #11191: Installing and Removing pfBlockerNG Leaves Shell Scripts in webConfigurator Messages
- Before you uninstall, you need to uncheck "Keep Settings" in the General Tab.
-
08:40 AM Feature #10818: UDP Broadcast Relay
- I just came here to say the same, and saw your post Garth. I'm a programmer by profession, but have never built any P...
-
08:19 AM Bug #11108: pfsense 2.5.0-DEVELOPMENT (amd64) pfBlockerNG-devel 3.0.0_1
- It not pushed to 2.5.0. Last version on pfSense 2.5.0 is 3.0.0_1. Please fix this. Or this can be another issue that ...
12/26/2020
-
07:49 PM Bug #11175: FRR OSPFv6 config missing default area
- To work around the issue for now
add the Area to the interface
Services>FRR>OSPF6>Edit>Interfaces:OSPF6 Interfac... -
05:50 PM Bug #11191: Installing and Removing pfBlockerNG Leaves Shell Scripts in webConfigurator Messages
- Manually removing the two .sh files removes them from the UI, so it appears they are not cleaned up properly on unins...
-
05:41 PM Bug #11191 (Resolved): Installing and Removing pfBlockerNG Leaves Shell Scripts in webConfigurator Messages
- On reboot after installing and then uninstalling pfBlockerNG, a few shell scripts remain in the shutdown/reboot messa...
-
01:46 AM Feature #10818: UDP Broadcast Relay
- I have found this tool really handy for me so I want to help to make it happen, unfortunately I don't have the progra...
12/25/2020
-
09:07 AM Bug #10429: Status Traffic Total broken 2.4.5
- Tested on the latest release.
Traffic Totals version - 2.3.2_1
Its functionality is fixed. There are minor com... -
08:43 AM Bug #10413 (Resolved): BIND plugins are not copied into chroot
- Tested on the latest release.
Bind version 9.16_6. Plugins are automatically copied into /cf/named/usr/local/lib/n...
12/24/2020
-
12:21 PM Bug #8688 (Resolved): Pass List Snort
- Tested on Snort 4.1.2_2 and 4.1.2_4. I see all of my IPsec v4 and v6 addresses in my pass list as well as OpenVPN add...
-
11:57 AM Bug #10700: not all VPN IPs added with vpnaddresses option
- Tested in Suricata 5.0.4_1 and 6.0.0_4. I'm seeing all of the relevant VPN IPs added to the list.
12/23/2020
-
02:55 PM Bug #11000: haproxy deprecated trick suggested
- It was been deprecated from HAproxy 1.8 if trust manual: https://cbonte.github.io/haproxy-dconv/1.8/configuration.htm...
-
01:55 PM Bug #11185: Redis service stopping before NtopNg
- I wrote basic patch which fix issue in my case:...
12/22/2020
-
12:21 PM Feature #11186 (Pull Request Review): Allow lo0/Loopback as a valid interface in OSPF/OSPF6
-
12:09 PM Feature #11186 (Closed): Allow lo0/Loopback as a valid interface in OSPF/OSPF6
- PR: https://github.com/pfsense/FreeBSD-ports/pull/1011
-
11:14 AM Bug #11185: Redis service stopping before NtopNg
- To note, if run:
if rune something like kill -15 `pgrep ntopng` then ntopng correctly shutting down via SIGTERM and ... -
10:00 AM Bug #11185 (Resolved): Redis service stopping before NtopNg
- Redis is dependency for NtopNG. It must stop after NtopNG, but it don't. In result when you stop NtopNG via pfSense w...
-
10:58 AM Bug #11108 (Resolved): pfsense 2.5.0-DEVELOPMENT (amd64) pfBlockerNG-devel 3.0.0_1
- Tested on the latest snapshot.
pfBlockerNG version 3.0.0_7.
It works fine.
Ticket resolved. -
10:28 AM Feature #6651: Loopback interfaces
- PR Review:
https://github.com/pfsense/FreeBSD-ports/pull/1011
This might not completely solve every use-case, b...
12/21/2020
-
11:50 AM Bug #11182 (New): NRPE in HA syncs the bind IP
- When using a local interface IP as the bind IP in NPRE 3.1_4, once the primary node resumes master after a failover e...
-
08:34 AM Bug #11180: Filer run action for files on sync that wan't been modified
- Sorry "wan't been modified" -> "wasn't been modified" typo.
-
08:33 AM Bug #11180 (Feedback): Filer run action for files on sync that wan't been modified
- You have for example 2 files:
1. unbound mod.py which then run command: `unbound-control -c /var/unbound/unbound.con... -
05:22 AM Feature #11178 (New): Filer do not ask what to do with previous filename
- When you create file via Filer plugin and after this rename this file you in most cases wait that previous file was b...
12/19/2020
-
10:42 PM Bug #11175 (Resolved): FRR OSPFv6 config missing default area
- Configuring default area in OSPF6 main page is not reflecting in configuration *Services>FRR>OSPF6> OSPF6*
route...
12/18/2020
-
02:34 PM Bug #11173: Status>Monitoring parameters are hidden by the interactive graph
- Not a new problem, it's been like that for a while. Though I don't see an existing entry for it.
-
02:29 PM Bug #11173 (Resolved): Status>Monitoring parameters are hidden by the interactive graph
- There is text underneath the graph in Status>Monitoring which should show the system name, time period, resolution, a...
-
06:47 AM Bug #10507 (Resolved): Unable to use forwarders
- Tested on the latest snapshot.
It doesn't add _'zone "." { }'_ anymore, if recursion is set to Yes and there are ... -
04:10 AM Bug #10506 (Resolved): Recursion not working on fresh BIND install
- Tested on the latest snapshot. It works fine. Ticket resolved.
12/16/2020
-
07:04 AM Feature #6651: Loopback interfaces
- Any movement on this?
This would be really useful. Currently I'm having to create a dummy vlan on a physical nic ... -
03:58 AM Bug #11128 (Resolved): pfblockerng 3.0.0_3 not using upstream proxy for curl feed downloads
- Tested on:...
-
03:46 AM Bug #11152 (Resolved): rsync pkg not installed
- Tested on:...
12/15/2020
-
12:06 PM Bug #11166 (Rejected): OpenVPN Client installer behaviour when OpenVPN 2.5 is already installed
- The OpenVPN client Windows installer changed to an MSI, nothing we can do about that. Request changes upstream in Ope...
-
11:45 AM Bug #11166 (Rejected): OpenVPN Client installer behaviour when OpenVPN 2.5 is already installed
- Former versions of OpenVPN Client Export allowed for the distribution of the installer that handled pre-existing inst...
-
11:36 AM Feature #11165 (New): OpenVPN Exporter - Allow for name customization
- The Exporter Module creates client configurations that show up in the client workstation with the Netgate/pfSense hos...
-
07:22 AM Bug #11135 (Pull Request Review): HAproxy OCSP reponse crontab bug
-
07:14 AM Bug #11135: HAproxy OCSP reponse crontab bug
- fix:
https://github.com/pfsense/FreeBSD-ports/pull/1006 -
05:27 AM Feature #11155 (Feedback): SafeSearch AAAA
- PR haws been merged. Thanks!
-
05:27 AM Bug #11152 (Feedback): rsync pkg not installed
- PR haws been merged. Thanks!
-
05:24 AM Bug #11107 (Resolved): pfBlockerNG 3.0.0_1 doesn't have some feeds fixes
- OK in pfBlockerNG-devel 3.0.0_5
12/14/2020
-
11:42 PM Feature #11163 (Closed): Preferred Chain option
- Add WebGUI option to select Preferred Chain,
see https://github.com/acmesh-official/acme.sh/wiki/Preferred-Chain
-
05:07 AM Feature #11148 (Closed): Snort Inline mode note
- already there after pressing the 'save' button
-
01:31 AM Feature #11155: SafeSearch AAAA
- Google, Youtube and Pixabay IPv6 (AAAA) SafeSearch:
https://github.com/pfsense/FreeBSD-ports/pull/1005
12/12/2020
-
06:02 PM Bug #11158 (New): FRR Prefix Lists
- Adding any value to *Minimum Prefix box* on Prefix Lists will stop receiving/sending the routes from/to the neighbor ...
12/11/2020
-
10:19 AM Feature #11156 (New): Add an option include subdomains for the noAAAA feature
- Thanks for including the noAAAA feature into pfBlockerNG, it works almost as good as the old python script.
But it's... -
09:23 AM Feature #11155 (Resolved): SafeSearch AAAA
- SafeSearch DNS redirection doesn't work for AAAA queries,
must be added/fixed:
forcesafesearch.google.com - 200... -
07:11 AM Bug #11101: Bind DNS Server won't start
- https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/16
-
05:17 AM Bug #11152: rsync pkg not installed
- https://github.com/pfsense/FreeBSD-ports/pull/1003
-
04:15 AM Bug #11152 (Resolved): rsync pkg not installed
- It's no possible to use RSYNC format feeds because rsync pkg is not installed:...
-
03:59 AM Bug #11136 (Resolved): Suricata trashcan icon for interface mapping delete has no effect
- Tested on:...
12/10/2020
-
09:27 AM Bug #8466: radiusd crash
- able to reproduce:...
-
06:09 AM Bug #8466: radiusd crash
- Same here on 2.4.5-RELEASE-p1 (amd64) - a nice way of locking yourself out of pfSense :-(
-
06:32 AM Feature #11113 (Feedback): New phishing feeds
- PR has been merged. Thanks!
-
06:32 AM Bug #11128 (Feedback): pfblockerng 3.0.0_3 not using upstream proxy for curl feed downloads
- PR has been merged. Thanks!
-
12:59 AM Feature #11148 (Closed): Snort Inline mode note
- It would be better to add a note about Inline mode rule actions,
from https://forum.netgate.com/topic/143812/snort-p...
12/07/2020
-
10:05 AM Bug #11136: Suricata trashcan icon for interface mapping delete has no effect
- 2.4.5 fix:
https://github.com/pfsense/FreeBSD-ports/pull/1001 -
07:28 AM Bug #11136 (Feedback): Suricata trashcan icon for interface mapping delete has no effect
- PR has been merged. Thanks!
-
01:43 AM Bug #11136: Suricata trashcan icon for interface mapping delete has no effect
- Fix:
https://github.com/pfsense/FreeBSD-ports/pull/1000 -
08:28 AM Feature #11138 (New): new WebGUI checkboxes needed
- New WebGUI checkboxes needed for these files:
/usr/local/etc/raddb/mods-config/files/authorize
/usr/local/etc/raddb... -
01:13 AM Bug #7271: Co-existence of unbound and BIND/named
- Max Leighton wrote:
> Testing with bind 9.16_6 the default control port is still showing as 953 and conflicting wit...
12/06/2020
-
11:02 PM Bug #10516: FRR Access list
- Alhusein Zawi wrote:
> Access list is working as expected on 2.5 but it is not taking an effect until restarting FRR... -
06:26 PM Bug #11136 (Confirmed): Suricata trashcan icon for interface mapping delete has no effect
- Attempting to delete interfaces using the trashcan icon produces system logs:...
-
05:42 PM Bug #11136 (Resolved): Suricata trashcan icon for interface mapping delete has no effect
- The GUI offers two ways to delete an interface mapping on the Interfaces tab of Suricata.
Clicking the trashcan i... -
02:41 AM Bug #11135: HAproxy OCSP reponse crontab bug
- A more proper fix would be :...
-
02:31 AM Bug #11135: HAproxy OCSP reponse crontab bug
- Confirmed that the previous code did work with an older version :
* Old OpenSSL :... -
02:12 AM Bug #11135 (Feedback): HAproxy OCSP reponse crontab bug
- Context : I have been using pfSense 2.5.0 development snapshots to get TLS 1.3 support.
I have noticed that the OC...
12/05/2020
-
02:31 PM Bug #11131: pfblockerng-devel 3.0.0_2 logs when logging is disabled
- Does the rule tracking ID match the one from the logs? What happens if you disable the rule - does it still get logged?
-
01:43 PM Bug #7271: Co-existence of unbound and BIND/named
- Testing with bind 9.16_6 the default control port is still showing as 953 and conflicting with unbound.
Also available in: Atom