pfSense » pfSense Packages

02/07/2021

10:44 AM Bug #11381: PHP error after clean Zeek install

https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/46 Viktor Gurov

09:48 AM Bug #11381 (Resolved): PHP error after clean Zeek install

If you press save on the Zeek package configuration page without any options/checkboxes, PHP errors will occur:
<pre... Viktor Gurov

05:40 AM Bug #3085 (Resolved): squidguard: problems when importing a blacklist archive containing soft-links

works as expected, see https://forum.netgate.com/topic/160607/squidguard-ut1-blacklist-support Viktor Gurov

04:00 AM Bug #11334 (Resolved): FRR IPv4 OSPF passive-interface not working

1.1.0_3, /var/etc/frr/frr.conf:... Viktor Gurov

03:28 AM Feature #11199 (Resolved): Minor updates

pfBlockerNG-devel 3.0.0_9 - all OK Viktor Gurov

03:21 AM Bug #11377: FRR deinstall

https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/45 Viktor Gurov

03:03 AM Bug #11377 (Pull Request Review): FRR deinstall

After uninstalling FRR all '<frr*>' entries are still in config.xml
`/var/etc/frr' also contains config files Viktor Gurov

03:00 AM Bug #11376: BGP MD5 keys are not removed on service stop

https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/44 Viktor Gurov

02:56 AM Bug #11376 (Resolved): BGP MD5 keys are not removed on service stop

'setkey -D' keeps showing key association when you stop/disable FRR service.
see also #11325 Viktor Gurov

01:53 AM Bug #11375 (Closed): UPS Type <BLANK> for USB APC

there is no issue Viktor Gurov

01:32 AM Bug #11375 (New): UPS Type <BLANK> for USB APC

https://forum.netgate.com/topic/158235/potential-bug-found-with-apcupsd-package-version-0-3-91_8-and-configuring-it-i... Viktor Gurov

12:08 AM Bug #11373: FRR: BGP neighbor remote-as external doesn't work

fix:
2.5:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/42
2.4.5:
https://gitlab.netgate.... Viktor Gurov

02/06/2021

11:03 PM Bug #11191 (Resolved): Installing and Removing pfBlockerNG Leaves Shell Scripts in webConfigurator Messages

Viktor Gurov

05:19 PM Bug #11191: Installing and Removing pfBlockerNG Leaves Shell Scripts in webConfigurator Messages

Verified that this is no longer a problem. Unchecking the save settings checkbox and then removing the package prope... Kris Phillips

10:14 PM Bug #11343: Invalid link to pfSense-pkg-bind changelog

Anthony Pants wrote:
> If you go to "Installed Packages" (/pkg_mgr_installed.php) or "Available Packages" (/pkg_mgr.... Michael Spears

10:33 AM Feature #10619 (Resolved): Various FRR enhancements

Tested on 21.02-DEVELOPMENT (built on Thu Feb 04 22:53:54 CST 2021)
I see all these enhancements enabled.
This ... Azamat Khakimyanov

10:15 AM Bug #11373 (Resolved): FRR: BGP neighbor remote-as external doesn't work

if you put `external` in the web GUI as the remote-as the generated configuration doesn't include a `neighbor <ip-add... Joel Gallun

04:07 AM Feature #10202 (Resolved): redistribute bgp + route-map filtering in OSPF6

Tested on 21.02-DEVELOPMENT (built on Thu Feb 04 22:53:54 CST 2021)
There are redistribute bgp + route-map filteri... Azamat Khakimyanov

02/05/2021

09:23 AM Bug #11271 (Resolved): Setting default-originate in FRR/BGP Silently Appends a route-map

Renato Botelho

08:03 AM Bug #11271: Setting default-originate in FRR/BGP Silently Appends a route-map

This works as expected for one route map spanning both families. Much better. Thank you. Chris Linstruth

08:31 AM Bug #11346 (Resolved): Raw-Config not working

Jim Pingle

08:29 AM Bug #6818: WAN traffic graph displays inverted bandwidth columns

I was checking traffic today, in a situation of heavy file upload to the internet, and i'm seeing that everything is ... Fernando Rapetti

04:54 AM Feature #11155: SafeSearch AAAA

Renato Botelho wrote:
> PR has been merged. Thanks!
PR 1035 containing this change has been merged. Thanks! Renato Botelho

04:52 AM Feature #11155 (Feedback): SafeSearch AAAA

PR has been merged. Thanks! Renato Botelho

04:53 AM Feature #11022 (Feedback): Add feeds from Firebog.net to pfBlockerNG

PR 1035 containing this change has been merged. Thanks! Renato Botelho

04:48 AM Feature #11201 (Feedback): Show iTLD Allow IDN domains

PR has been merged. Thanks! Renato Botelho

04:46 AM Feature #11199 (Feedback): Minor updates

PR has been merged. Thanks! Renato Botelho

04:44 AM Bug #11191 (Feedback): Installing and Removing pfBlockerNG Leaves Shell Scripts in webConfigurator Messages

PR has been merged. Thanks! Renato Botelho

02/04/2021

11:03 PM Bug #11345: FRR-OSPF - No "prefix-list" possible

* prefix can be chosen from Route Filtering in OSPF area.
* Configuration is reflected in config. file.
!
rou... Alhusein Zawi

09:29 PM Bug #11346: Raw-Config not working

Issue is fixed
* updated the running config (or created new configuration)
* changed the configuration.
* pre... Alhusein Zawi

12:18 PM Bug #11135: HAproxy OCSP reponse crontab bug

Do not set target version on package tickets Renato Botelho

05:26 AM Bug #11366: Arpwatch Cron Notification every 15 minutes

Viktor Gurov wrote:
> You need to check "Disable Cron emails" option
> see #10771
Option is already checked, I'v... Abdul Khaliq

02/03/2021

11:17 PM Bug #11366 (Rejected): Arpwatch Cron Notification every 15 minutes

You need to check "Disable Cron emails" option
see #10771 Viktor Gurov

10:11 PM Bug #11366 (Resolved): Arpwatch Cron Notification every 15 minutes

Every 15 mins or so I receive an email containing :
Subject Arpwatch Notification : Cron <root@firewall> /etc/rc.f... Abdul Khaliq

02/01/2021

08:24 AM Bug #11333: Incorrect community-list format

2.4.5 PR has been merged. Thanks! Renato Botelho

08:22 AM Bug #11346 (Feedback): Raw-Config not working

PR has been merged. Thanks! Renato Botelho

07:57 AM Bug #11346 (Pull Request Review): Raw-Config not working

Jim Pingle

08:22 AM Bug #11345 (Feedback): FRR-OSPF - No "prefix-list" possible

PR has been merged. Thanks! Renato Botelho

07:55 AM Bug #11345 (Pull Request Review): FRR-OSPF - No "prefix-list" possible

Jim Pingle

08:20 AM Bug #11054 (Feedback): Check Client Certificate CN not working as described

PR has been merged. Thanks! Renato Botelho

07:54 AM Bug #11054 (Pull Request Review): Check Client Certificate CN not working as described

Jim Pingle

08:00 AM Todo #11351 (Not a Bug): updated version to pfsense 2.4.5_1

At this point, the 2.5.0 release is close enough that backporting all the changes is unlikely. Jim Pingle

07:25 AM Feature #9555 (Resolved): pimd package

Tested on 2.4.5_p1 and on 21.02-DEVELOPMENT (built on Mon Feb 01 00:05:45 EST 2021)
Tested with 3 different multic... Azamat Khakimyanov

01/31/2021

09:56 AM Todo #11351 (Not a Bug): updated version to pfsense 2.4.5_1

you did released updated version (1.16.18_14) for pfsense 2.5.devel
but pfsense 2.4.5_1 still at version (1.16.18_... khaled osama

01/30/2021

05:24 PM Feature #6022: Consider MLVPN for bonded VPN

+1 for this feature.
As I understand it (which may be incorrect), pfSense "bonding" only load-balances by number of ... Val Schmidt

05:10 PM Feature #9238: Add support for Zerotier

+1 for this feature!!! Val Schmidt

10:08 AM Bug #11331: FreeRADIUS latest package upgrade broke Plain Mac Authentication

I am not sure whether I tested it correctly, though. I used a LapTop as a client trying to authenticate through FreeR... Danilo Zrenjanin

05:58 AM Bug #11331: FreeRADIUS latest package upgrade broke Plain Mac Authentication

Tested on the latest release. Plain Mac Authentication is not working. When it's enabled, I can log in with the wrong... Danilo Zrenjanin

09:20 AM Bug #11333: Incorrect community-list format

works as expected on 2.5 branch
2.4.5 fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/41 Viktor Gurov

08:43 AM Feature #11349 (Resolved): Allow to set minimum TLS version

EAP methods allows to set 'tls_min_version',
which is 1.0 by default
WebGUI dropdown option needed to select betw... Viktor Gurov

07:57 AM Bug #7271 (Resolved): Co-existence of unbound and BIND/named

this fix is only for clean BIND install
9.16_9 works as expected Viktor Gurov

06:51 AM Bug #7271: Co-existence of unbound and BIND/named

Tested on the latest release. Bind package version 9.16_9. It's still not fixed. Please check. Danilo Zrenjanin

07:42 AM Bug #11001 (Resolved): freeradius lose sql lib every pfsense update

works as expected Viktor Gurov

05:38 AM Bug #11321 (Resolved): Clamd service fails to start upon reboot when Block PUA option is checked on Squid Proxy Server Package

0.4.45_2 fixed Viktor Gurov

04:20 AM Bug #11346: Raw-Config not working

fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/40 Viktor Gurov

03:32 AM Bug #11346 (Resolved): Raw-Config not working

https://forum.netgate.com/topic/160365/frr-raw-config-not-working:
since an update it seems not to be possible to us... Viktor Gurov

03:42 AM Bug #11345: FRR-OSPF - No "prefix-list" possible

same issue with Access lists
fix: https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/39 Viktor Gurov

03:21 AM Bug #11345 (Resolved): FRR-OSPF - No "prefix-list" possible

https://forum.netgate.com/topic/160363/frr-ospf-no-prefix-list-possible:
currently it is not possible for me to conf... Viktor Gurov

03:17 AM Bug #11054: Check Client Certificate CN not working as described

more fixes:
- Fixes SQL backend user existing check;
- Fixes counters issue (`$varsqlconfauthcounters` lines)
http... Viktor Gurov

01:16 AM Bug #11343 (Resolved): Invalid link to pfSense-pkg-bind changelog

If you go to "Installed Packages" (/pkg_mgr_installed.php) or "Available Packages" (/pkg_mgr.php), there is a link to... Anthony Pants

12:22 AM Bug #11325 (Resolved): BGP MD5 Keys Dropping Unintentionally

Viktor Gurov

01/29/2021

11:19 PM Bug #11234 (Resolved): Filer not create missing necessary folders

Viktor Gurov

10:02 PM Bug #11234: Filer not create missing necessary folders

I was able to create a folder ,
Example:
/var/folder/test1/test2
folder >> folder.
test1 >> folder.
test2... Alhusein Zawi

09:41 PM Bug #11325: BGP MD5 Keys Dropping Unintentionally

pressing "save" is not interrupting the adjacency. (fixed).
2.5.0.a.20210129.1122 Alhusein Zawi

08:06 AM Bug #11325 (Feedback): BGP MD5 Keys Dropping Unintentionally

PR has been merged. Thanks! Renato Botelho

07:32 AM Bug #11325 (Pull Request Review): BGP MD5 Keys Dropping Unintentionally

Jim Pingle

06:01 AM Bug #11325: BGP MD5 Keys Dropping Unintentionally

- restart setkey only if parameters are changed;
- start setkey on service startup (frr.sh rc file fix);

https:/... Viktor Gurov

12:09 AM Bug #11325: BGP MD5 Keys Dropping Unintentionally

pressing "save" interrupts the adjacency.
2.5.0.a.20210127.2350
Alhusein Zawi

09:36 AM Bug #10429: Status Traffic Total broken 2.4.5

Patch works for me
2.4.5-RELEASE-p1 (amd64)
built on Tue Jun 02 17:51:17 EDT 2020
FreeBSD 11.3-STABLE
Status... Andres Mora

08:57 AM Bug #11334 (Feedback): FRR IPv4 OSPF passive-interface not working

Pushed a fix which works for me.
https://github.com/pfsense/FreeBSD-ports/commit/e1a9a4159ad577877ff378bf288cd8ec9... Jim Pingle

08:51 AM Bug #11334 (Resolved): FRR IPv4 OSPF passive-interface not working

In frr_ospf.inc the list of passive interfaces is built by frr_generate_config_ospf_interfaces(), but that is run aft... Jim Pingle

08:05 AM Bug #11333 (Feedback): Incorrect community-list format

PR has been merged. Thanks! Renato Botelho

07:36 AM Bug #11333 (Pull Request Review): Incorrect community-list format

Jim Pingle

07:20 AM Bug #11333: Incorrect community-list format

fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/37 Viktor Gurov

06:34 AM Bug #11333 (Resolved): Incorrect community-list format

/var/log/frr/frr-reload.log:... Viktor Gurov

08:04 AM Bug #11321 (Feedback): Clamd service fails to start upon reboot when Block PUA option is checked on Squid Proxy Server Package

PR has been merged. Thanks! Renato Botelho

07:26 AM Bug #11321 (Pull Request Review): Clamd service fails to start upon reboot when Block PUA option is checked on Squid Proxy Server Package

Jim Pingle

01:26 AM Bug #11321: Clamd service fails to start upon reboot when Block PUA option is checked on Squid Proxy Server Package

fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/35
Viktor Gurov

08:01 AM Bug #11331 (Feedback): FreeRADIUS latest package upgrade broke Plain Mac Authentication

PR has been merged. Thanks! Renato Botelho

07:25 AM Bug #11331 (Pull Request Review): FreeRADIUS latest package upgrade broke Plain Mac Authentication

Jim Pingle

01:06 AM Bug #11331: FreeRADIUS latest package upgrade broke Plain Mac Authentication

fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/34 Viktor Gurov

01:01 AM Bug #11331 (Feedback): FreeRADIUS latest package upgrade broke Plain Mac Authentication

https://forum.netgate.com/topic/160323/freeradius-latest-package-upgrade:
From system logs:... Viktor Gurov

01/28/2021

11:17 AM Bug #11325 (Feedback): BGP MD5 Keys Dropping Unintentionally

PR has been merged. Thanks! Renato Botelho

06:47 AM Bug #11325: BGP MD5 Keys Dropping Unintentionally

Great thanks! Christian McDonald

01:10 AM Bug #11325: BGP MD5 Keys Dropping Unintentionally

fix: https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/32 Viktor Gurov

11:15 AM Feature #11320 (Feedback): Update NAS client type

PR has been merged. Thanks! Renato Botelho

11:12 AM Bug #11054 (Feedback): Check Client Certificate CN not working as described

PR has been merged. Thanks! Renato Botelho

07:11 AM Bug #11054: Check Client Certificate CN not working as described

fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/33 Viktor Gurov

11:03 AM Bug #11001 (Feedback): freeradius lose sql lib every pfsense update

PR has been merged. Thanks! Renato Botelho

12:11 AM Bug #11001 (Confirmed): freeradius lose sql lib every pfsense update

see https://forum.netgate.com/topic/149828/freeradius3-0-15-7_9-2020-01-20-its-stops-can-t-find-libmysqlclient-so-20/... Viktor Gurov

11:01 AM Bug #8466 (Feedback): radiusd crash

PR has been merged. Thanks! Renato Botelho

10:01 AM Bug #4088 (Feedback): Buggy squidgurd config file is created

PR has been merged. Thanks! Renato Botelho

10:01 AM Bug #3085 (Feedback): squidguard: problems when importing a blacklist archive containing soft-links

PR has been merged. Thanks! Renato Botelho

10:01 AM Feature #11248 (Feedback): SafeSearch update

PR has been merged. Thanks! Renato Botelho

09:51 AM Bug #11274 (Feedback): ntopng https web server does not present full certificate chain

PR has been merged. Thanks! Renato Botelho

09:49 AM Feature #11060 (Feedback): Block access to consumer Google accounts

PR has been merged. Thanks! Renato Botelho

09:47 AM Bug #11234 (Feedback): Filer not create missing necessary folders

PR has been merged. Thanks! Renato Botelho

09:35 AM Feature #11301 (Feedback): Switch FRR to use default rc file as a service control base

PR has been merged. Thanks! Renato Botelho

09:35 AM Bug #11271 (Feedback): Setting default-originate in FRR/BGP Silently Appends a route-map

PR has been merged. Thanks! Renato Botelho

08:34 AM Bug #11261: pfBlockerNG ASN numbers in IPv4 (/IPv6) Custom_List generate error(s) "Invalid numeric literal at line 1, column 7"

The error may appear when the ASN is empty. See:
[ AS36229_v4 ] Downloading update .parse error: Invalid num... P L

03:57 AM Bug #11259 (Closed): pfBlockerNG-devel fails to update all IP addresses for ASN using IPv4 Source Definitions

31.13.71.50 is in
https://api.bgpview.io/asn/32934/prefixes:... Viktor Gurov

01/27/2021

04:09 PM Bug #11325 (Resolved): BGP MD5 Keys Dropping Unintentionally

FRR 1.0.0 on latest v2.5 snapshots.
I'm peering with an upstream that requires a neighbor password.
If I run 's... Christian McDonald

09:16 AM Feature #11320 (Pull Request Review): Update NAS client type

Jim Pingle

03:47 AM Feature #11320: Update NAS client type

https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/30 Viktor Gurov

03:09 AM Feature #11320 (Resolved): Update NAS client type

Client Type field needs update,
Current list of NAT types:
cisco
computone
livingston
max40xx
multitech
nets... Viktor Gurov

08:03 AM Bug #9542: FreeRadius with MySQL not started and require mysql-client packet

see #11001 Viktor Gurov

08:02 AM Bug #10976: Freeradius dont start with SQL configuration

see #11001 Viktor Gurov

06:39 AM Bug #11321 (Resolved): Clamd service fails to start upon reboot when Block PUA option is checked on Squid Proxy Server Package

The Clamd service fails to start upon reboot when Block PUA option is checked on Squid Proxy Server Package with the ... RED SKULL

01/25/2021

11:39 AM Bug #11271: Setting default-originate in FRR/BGP Silently Appends a route-map

I know you _can_ but why limit the configuration in such a fashion?
Checkbox for enabling default-originate IPv4 w... Chris Linstruth

11:28 AM Bug #11271: Setting default-originate in FRR/BGP Silently Appends a route-map

Chris Linstruth wrote:
> Shouldn't there be a separate route map selection for each address family?
You can match... Ben Hughes

08:00 AM Bug #11271: Setting default-originate in FRR/BGP Silently Appends a route-map

Shouldn't there be a separate route map selection for each address family? Chris Linstruth

07:19 AM Bug #11271 (Pull Request Review): Setting default-originate in FRR/BGP Silently Appends a route-map

Jim Pingle

09:56 AM Feature #11310: Adding a widget to apcupsd plug-in

Link to pull request: https://github.com/pfsense/FreeBSD-ports/pull/1034 Andrew S

09:45 AM Feature #11310 (Resolved): Adding a widget to apcupsd plug-in

I was inspired to create a widget for the apcupsd plug-in that is included with pfSense and I would like to contribut... Andrew S

07:49 AM Bug #8466 (Pull Request Review): radiusd crash

Jim Pingle

07:45 AM Feature #11301 (Pull Request Review): Switch FRR to use default rc file as a service control base

Jim Pingle

01/24/2021

12:09 AM Feature #10816 (Resolved): Allow FRR BGP Neighbors to be active in both IPv4 and IPv6

Tested on 21.02-DEVELOPMENT (amd64)
built on Sat Jan 23 00:06:39 EST 2021
FreeBSD 12.2-STABLE
Checkbox "Address ... Azamat Khakimyanov

12:04 AM Feature #11202 (Resolved): Antivirus feature update

Tested on 21.02-DEVELOPMENT (amd64)
built on Sat Jan 23 00:06:39 EST 2021
FreeBSD 12.2-STABLE
All these new feat... Azamat Khakimyanov

01/23/2021

03:32 PM Bug #8047: XG-2758 - Coreboot Upgrade - Different ROM size

Renato Botelho wrote:
> According ADI engineers XG-2758 requires a physical power cycle after upgrade coreboot and b... Arthur Brownlee IV

11:38 AM Bug #8466: radiusd crash

Fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/29 Danilo Zrenjanin

09:20 AM Feature #11301: Switch FRR to use default rc file as a service control base

PR: https://github.com/pfsense/FreeBSD-ports/pull/1033 Ben Hughes

09:20 AM Feature #11301 (Feedback): Switch FRR to use default rc file as a service control base

Switch FRR to use default rc file as a service control base

- Set rc.conf.d/frr for watchfrr service action su... Ben Hughes

08:35 AM Feature #11102 (Resolved): Include a dictionary for mpd5 in Freeradius

dictionary.mpd is included Viktor Gurov

01/22/2021

11:48 PM Feature #11295 (Resolved): DNSBL IDN support

Add IDN domains support to:
- DNSBL Whitelist
- DNSBL Custom_List
- Python no AAAA List
- IPv4 Custom_List (domai... Viktor Gurov

11:46 PM Feature #9249 (Resolved): [siproxd] Add config for siptrunk plugin

Viktor Gurov

11:13 PM Feature #9249: [siproxd] Add config for siptrunk plugin

The configuration has been added to /usr/local/etc/siproxd.conf after Enabling SIP Trunk Plugin
load_plugin=plugin... Alhusein Zawi

03:17 PM Bug #11271: Setting default-originate in FRR/BGP Silently Appends a route-map

Chris Linstruth wrote:
> I suggest a checkbox to enable default-originate and a pulldown that lists the route maps f... Ben Hughes

03:15 PM Bug #11271: Setting default-originate in FRR/BGP Silently Appends a route-map

PR: https://github.com/pfsense/FreeBSD-ports/pull/1032 Ben Hughes

02:46 PM Bug #11271: Setting default-originate in FRR/BGP Silently Appends a route-map

I suggest a checkbox to enable default-originate and a pulldown that lists the route maps for OPTIONAL inclusion. Chris Linstruth

01:36 PM Bug #11271: Setting default-originate in FRR/BGP Silently Appends a route-map

George Phillips wrote:
> Basically, that drop-down menu should be empty unless the user defines their own route-maps... Ben Hughes

01:35 PM Bug #11271: Setting default-originate in FRR/BGP Silently Appends a route-map

Yeh it's a bug, if you select IPv4+IPv6 then it'll work as expected but everything else it'll interpret at a route ma... Ben Hughes

12:14 PM Bug #11271: Setting default-originate in FRR/BGP Silently Appends a route-map

Basically, that drop-down menu should be empty unless the user defines their own route-maps. The ipv4, ipv6, and ipv... George Phillips

01:34 PM Bug #8466: radiusd crash

I tested on the latest snapshot. It still allows entering " as the first character.
e.g., entering the password _... Danilo Zrenjanin

10:43 AM Bug #11054: Check Client Certificate CN not working as described

see http://freeradius.1045715.n5.nabble.com/user-name-and-EAP-TLS-td5714550.html:... Viktor Gurov

10:05 AM Bug #11055 (Resolved): Insecure FreeRADIUS defaults

Tested on the latest snapshot. It's fixed. Ticket resolved. Danilo Zrenjanin

01/21/2021

09:42 AM Bug #11274 (Pull Request Review): ntopng https web server does not present full certificate chain

Jim Pingle

08:04 AM Bug #11274: ntopng https web server does not present full certificate chain

fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/28 Viktor Gurov

06:50 AM Bug #11274 (Resolved): ntopng https web server does not present full certificate chain

The https protected web frontend (port 3000) of ntopng 0.8.13_6 (tested on pfSense CE 2.4.5_1) does not work correctl... Martin Bartosch

08:08 AM Bug #11271: Setting default-originate in FRR/BGP Silently Appends a route-map

Looks like 2.5.0 still appends a route-map to me.... Chris Linstruth

07:52 AM Bug #11273 (Not a Bug): ntopng password reset does not work

unable to reproduce - I can successfully update admin password
you need to use pfSense WebGUI to change password, no... Viktor Gurov

06:45 AM Bug #11273 (Not a Bug): ntopng password reset does not work

Modifying the admin password in the ntopng settings does not seem to work.
Versions: ntopng 0.8.13_6 on pfSense CE... Martin Bartosch

12:46 AM Bug #11261: pfBlockerNG ASN numbers in IPv4 (/IPv6) Custom_List generate error(s) "Invalid numeric literal at line 1, column 7"

no such issue with pfBlockerNG-devel 3.0.0_8 - I can successfully add AS number to IPv4/IPv6 Custom_List and see no e... Viktor Gurov

01/20/2021

11:25 PM Bug #11271: Setting default-originate in FRR/BGP Silently Appends a route-map

> Selecting IPv4+IPv6 announces the route but it is counter-intuitive for someone creating an IPv4-only peer to selec... Viktor Gurov

08:12 PM Bug #11271 (Resolved): Setting default-originate in FRR/BGP Silently Appends a route-map

When setting default-priginate on a BGP neighbor thew user is presented with four choices by default:
* No
* IPv4... Chris Linstruth

11:16 PM Feature #10789 (Feedback): FRR integrated configuration and hitless reloads

Merged Viktor Gurov

09:46 AM Bug #11269 (Duplicate): FRR BGP neighbors missing after update

We are aware -- it's not a problem in FRR, but in the base system. See #11267 Jim Pingle

09:39 AM Bug #11269: FRR BGP neighbors missing after update

Just found a crash report too:... Zachary McGibbon

09:37 AM Bug #11269 (Duplicate): FRR BGP neighbors missing after update

Just upgraded to beta 2.5.0.a.20210119.2350 and my bgp neighbors are missing their IP address. If I try and add the ... Zachary McGibbon

01/19/2021

07:06 AM Bug #11185: Redis service stopping before NtopNg

Yes, because patched version is 0.8.13_8 if nothing changed
I really doesn't understand when packages are pushed t... DRago_Angel [InV@DER]

06:30 AM Bug #11185 (Assigned): Redis service stopping before NtopNg

Tested on 2.4.5_p1 (2 versions of NtopNG: 0.8.13_5 and 0.8.13_6) and on 2.5-DEVELOPMENT (built on Tue Jan 19 00:05:03... Azamat Khakimyanov

01/18/2021

05:02 PM Bug #11259: pfBlockerNG-devel fails to update all IP addresses for ASN using IPv4 Source Definitions

I may not be able to reproduce this bug now. P L

03:39 PM Bug #11259 (Closed): pfBlockerNG-devel fails to update all IP addresses for ASN using IPv4 Source Definitions

pfBlockerNG-devel v3.0.0_8
pfBlockerNG-devel fails to update all IP addresses for ASN using IPv4 Source Definition... P L

05:00 PM Bug #11261 (New): pfBlockerNG ASN numbers in IPv4 (/IPv6) Custom_List generate error(s) "Invalid numeric literal at line 1, column 7"

If AS numbers are entered in IPv4 Custom_List or IPv6 Custom_List, an error message, "Invalid numeric literal at line... P L

03:46 PM Feature #11260 (New): pfBlockerNG: predefined ASN groups for Google, Facebook, Apple, etc with useful selections

pfBlockerNG has the useful feature to create Aliases of IP addresses using ASN number(s).
This is useful for defin... P L

03:00 PM Feature #11233 (Closed): Add 'Allow IP options' interface fw rule note

Jim Pingle

01/16/2021

02:29 PM Feature #11233: Add 'Allow IP options' interface fw rule note

The Note has been added.
2.5.0.a.20210115.2350 pimd 0.0.3_4
Alhusein Zawi

06:38 AM Bug #4088: Buggy squidgurd config file is created

> 1) Do not write out sources for disabled ACLs, or squidguard treats these
sources as "always pass"!
fix:
https... Viktor Gurov

03:39 AM Bug #11252 (Duplicate): Error importing UT1 blacklist

Duplicate of #3085 Viktor Gurov

01:53 AM Bug #11252 (Duplicate): Error importing UT1 blacklist

errors on importing ftp://ftp.ut-capitole.fr/pub/reseau/cache/squidguard_contrib/blacklists.tar.gz DB (used by pfBloc... Viktor Gurov

03:38 AM Bug #3085: squidguard: problems when importing a blacklist archive containing soft-links

https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/26 Viktor Gurov

01:39 AM Bug #6378 (Resolved): inline background styles in squidguard package

works as expected Viktor Gurov

01:39 AM Bug #9364 (Resolved): squidguard int error page does not use https

works as expected:... Viktor Gurov

12:44 AM Feature #7903: Duo ssh package

duo_unix is already in the port collection:
https://www.freshports.org/security/duo/ Viktor Gurov

01/15/2021

04:32 PM Feature #11186: Allow lo0/Loopback as a valid interface in OSPF/OSPF6

Just enable connected redistribution and they’ll be redistributed into OSPF. Then use route-map/access-list to filter... Ben Hughes

09:40 AM Bug #11247 (Rejected): pfBlockerNG DNSBL service refused to start

This site is not for support or diagnostic discussion.
For assistance in solving problems, please post on the "Net... Jim Pingle

04:38 AM Bug #11247: pfBlockerNG DNSBL service refused to start

khaled osama wrote:
> pfBlockerNG DNSBL service refused to start
>
> [2.5.0-DEVELOPMENT]/root: /usr/local/etc/rc... khaled osama

05:32 AM Bug #11236 (Resolved): A Link to the Virtual IP setup doesn't work under Frontend setup

Tested on the latest snapshot. It works fine. Ticket resolved. Danilo Zrenjanin

04:12 AM Feature #11248: SafeSearch update

https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/24 Viktor Gurov

03:45 AM Feature #11248 (Resolved): SafeSearch update

Add Ecosia and Onesearch safesearch support
see also https://github.com/serv-inc/safe-search Viktor Gurov

03:44 AM Bug #11246 (Closed): Squid Reverse proxy 'https_port option cert=' startup error

Manual squid configuration issue Viktor Gurov

03:42 AM Feature #11060: Block access to consumer Google accounts

https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/23 Viktor Gurov

01/14/2021

11:12 PM Bug #11234: Filer not create missing necessary folders

recursive mkdir fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/22
> Also here is question... Viktor Gurov

11:10 PM Bug #11247 (Rejected): pfBlockerNG DNSBL service refused to start

pfBlockerNG DNSBL service refused to start
[2.5.0-DEVELOPMENT]/root: /usr/local/etc/rc.d/pfb_dnsbl.sh restart
2... khaled osama

08:19 AM Bug #11185 (Feedback): Redis service stopping before NtopNg

PR has been merged. Thanks! Renato Botelho

07:42 AM Bug #11055 (Feedback): Insecure FreeRADIUS defaults

PR has been merged. Thanks! Renato Botelho

07:34 AM Feature #11202 (Feedback): Antivirus feature update

PR has been merged. Thanks! Renato Botelho

04:43 AM Feature #11202: Antivirus feature update

https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/21 Viktor Gurov

07:34 AM Feature #10541 (Feedback): Squid failover and load balancing

PR has been merged. Thanks! Renato Botelho

06:45 AM Bug #11246 (Closed): Squid Reverse proxy 'https_port option cert=' startup error

https://forum.netgate.com/topic/159859/squid-version-4-10-cant-start-service:... Viktor Gurov

06:25 AM Feature #11233 (Feedback): Add 'Allow IP options' interface fw rule note

PR has been merged. Thanks! Renato Botelho

06:11 AM Bug #11236 (Feedback): A Link to the Virtual IP setup doesn't work under Frontend setup

PR has been merged. Thanks! Renato Botelho

01/13/2021

01:14 PM Feature #11233: Add 'Allow IP options' interface fw rule note

I've added the note.
https://github.com/pfsense/FreeBSD-ports/pull/1027 Danilo Zrenjanin

04:41 AM Feature #10541: Squid failover and load balancing

https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/20 Viktor Gurov

01/12/2021

11:04 PM Feature #11113 (Resolved): New phishing feeds

Viktor Gurov

06:14 AM Todo #11215 (Resolved): Update NtopNG to 4.2

Renato Botelho

03:56 AM Todo #11215: Update NtopNG to 4.2

Thank you DRago_Angel [InV@DER]

02:09 AM Bug #11101 (Resolved): Bind DNS Server won't start

Tested on 2.4.5_p1 and on 2.5-DEVELOPMENT (built on Mon Jan 11 11:12:41 EST 2021).
On 2.4.5_p1 (Bind package versi... Azamat Khakimyanov

01/11/2021

11:53 AM Todo #11215 (Feedback): Update NtopNG to 4.2

It happened automagically when I merged 2021Q1 quarterly branch into FreeBSD-ports Renato Botelho

10:40 AM Bug #10749 (Resolved): squid + captive portal authentication not working

Tested on 2.4.5_p1 (Squid package: 0.4.44_36) and on 2.5-DEV (built on Thu Jan 07 21:49:58 EST 2021) (Squid package: ... Azamat Khakimyanov

08:58 AM Bug #11236 (Pull Request Review): A Link to the Virtual IP setup doesn't work under Frontend setup

Jim Pingle

03:25 AM Feature #10665 (Resolved): Manual OSPF neighbor definitions

Retested on 2.5-DEVELOPMENT (built on Thu Jan 07 21:49:58 EST 2021)
'Non-broadcast' mode works for me too now.
... Azamat Khakimyanov

01/09/2021

09:42 PM Bug #11098: Backup Files and Directories plugin crashes firewall if /root specified as backup location

Attempted creating backup for '/' on XG-7100 on ZFS
received following
PHP ERROR: Type: 1, File: /usr/local/ww... Jordan G

09:15 PM Feature #11113: New phishing feeds

see these listed feeds plus other updates
2.4.5p1 w/ pfBlockerNG 3.0.0_8 Jordan G