Activity
From 09/15/2021 to 10/14/2021
10/14/2021
-
10:16 AM Todo #12456 (Feedback): Remove zabbix 5.2 packages
- Done
-
10:15 AM Todo #12456 (Resolved): Remove zabbix 5.2 packages
- zabbix 5.2 were removed from FreeBSD ports because they are unsupported by upstream. Remove pfSense packages as well
-
09:55 AM Bug #10431 (Resolved): pfBlockerNG Cron Job wrong - Clear IP / DNSBL Statistics
- no such issue with pfBlockerNG-devel 3.1.0 (fixed):...
-
09:48 AM Feature #9798: add ipv4 and ipv6 dnscrypt-resolvers feeds
- actual link:
https://download.dnscrypt.net/dnscrypt-resolvers/json/public-resolvers.json -
09:42 AM Bug #11817 (Closed): Enabling Firewall / pfBlockerNG / DNSBL / IPv6 DNSBL blocks radvd from starting
10/13/2021
-
02:47 PM Bug #12251: Wireguard 0.1.5 - ignores "KeepAlive" parameter if empty (instead of disabling)
- → luckman212 wrote in #note-3:
> Hmm, seems like 86400 is not a valid value after all. It got silently accepted but ... -
01:34 PM Bug #12258: Copy key buttons only work in HTTPS mode
- Created PR 150 to resolve this.
Tested on local dev instance with HTTP only access and it fallsback, does a consol... -
09:06 AM Bug #12443: DNSBL Category ```Enable All``` button not working
- fix:
https://github.com/pfsense/FreeBSD-ports/pull/1113 -
03:11 AM Feature #12447 (Rejected): Acme add dnsapi dns_cpanel.sh
- Hello,
Please add the following feature to the acme package:
https://github.com/acmesh-official/acme.sh/blob/mast...
10/11/2021
-
12:39 PM Bug #12444: ntopng throws errors when viewing single host
- https://redmine.pfsense.org/issues/11530 - same/same?
-
08:21 AM Bug #12126: freeradius3 0.15.7_31
- Ok thanks for the info.
Any chance to have freeradius3 package update for 2.5.2 release? -
08:14 AM Bug #12126: freeradius3 0.15.7_31
- This looks to be a bug in Freeradius 3.0.22. See the 3.0.23 release notes:
https://github.com/FreeRADIUS/freeradius-... -
05:17 AM Feature #11310 (Resolved): Adding a widget to apcupsd plug-in
10/09/2021
-
09:08 PM Bug #12444 (Closed): ntopng throws errors when viewing single host
- Users have reports that when navigating to Hosts>Hosts and clicking to view a single host within the ntopNG settings ...
-
07:27 PM Bug #11886 (Resolved): WireGuard: PHP error in vpn_wg_peers_edit.php
- No longer able to reproduce this in 22.01 of pfSense Plus. Closing as Resolved.
-
07:19 PM Bug #12101 (Assigned): ArpWatch Suppression Mac for "flip-flop" not suppressing
- Moving status back to Assigned as this hasn't been confirmed as fixed in updated package.
-
04:34 PM Bug #12399: WireGuard v0.1.5 - Tunnel Will Never Handshake Again After WAN Reset
- The problem still persist on wireguard 0.1.5_1.
even after changing the keys and ports nothing seems to help.
wish ... -
01:41 PM Bug #4615: /var/logs/c-icap/server.log & access.log growing without being rotated
- Hi,
so I took a look: /var/log/c-icap/access.log - 272MB
the mentioned bugfix was meant for squid, I think?
... -
11:04 AM Bug #12443 (Resolved): DNSBL Category ```Enable All``` button not working
- https://forum.netgate.com/topic/167094/dnsbl-catagory-bug:
"I dunno if i'm doing something wrong but under Blacklist... -
09:58 AM Bug #12153 (Resolved): Incorrect Outgoing Network Interface on clean install
-
07:52 AM Bug #12153: Incorrect Outgoing Network Interface on clean install
- on clean install of 0.4.45_5 the default outgoing network interface shows as "Default (auto)" upon first visit to Ser...
-
07:35 AM Feature #11310: Adding a widget to apcupsd plug-in
- Dashboard widget for APCUPSD is available after installing and configuring package. Status, line voltage, load, batte...
-
05:50 AM Todo #12354: Update haproxy-devel to mitigate CVE-2021-40346
- Viktor Gurov wrote in #note-6:
> You can try to apply the attached patch
No need to add this if version of haproxy w... -
05:48 AM Todo #12354: Update haproxy-devel to mitigate CVE-2021-40346
- DRago_Angel [InV@DER] wrote in #note-3:
> Hi, this is serious CVE, and still no updates? Even it possible to workaro... -
03:25 AM Feature #11972 (Resolved): Arpwatch - Add support for Telegram notifications
- there is no
Alhusein Zawi wrote in #note-4:
> there is no option to add Telegram in Arpwatch page.
>
> Tested...
10/07/2021
-
09:42 AM Bug #12423: Dashboard shows "SQLite database missing, Force Reload DNSBL to recover!"
- Viktor, thanks for improving the error message. Two comments:
1. putting the full path might be even better. I assu... -
12:41 AM Bug #12423: Dashboard shows "SQLite database missing, Force Reload DNSBL to recover!"
- fix:
https://github.com/pfsense/FreeBSD-ports/pull/1112 -
07:29 AM Todo #12354 (Pull Request Review): Update haproxy-devel to mitigate CVE-2021-40346
-
02:40 AM Todo #12354: Update haproxy-devel to mitigate CVE-2021-40346
- https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/136
-
07:18 AM Bug #12420 (Pull Request Review): rc file is not deleted
-
01:41 AM Bug #12420: rc file is not deleted
- fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/135 -
04:19 AM Bug #1620: Can't use transparent proxy when using bridge.
- transparent mode on bridge works fine on pfSense 2.6.0.a.20211006.2213 with net.link.bridge.pfil_bridge=1 and net.lin...
10/06/2021
-
07:14 AM Bug #12365 (Not a Bug): PFBlockerNG - Unbound fails to start 3.1.0
- No worries, thanks for following up and letting us know. Those kinds of problems can be quite frustrating to track down.
-
04:54 AM Bug #12365: PFBlockerNG - Unbound fails to start 3.1.0
- Seems this was down to a hard to find memory problem that gave random errors.
Apologies -
07:02 AM Todo #12427 (New): ha-proxy: action order in the GUI is not keeped in the resulting ha-proxy configuration
- If there are (for example) 'Use Backend' and 'http-request redirect' actions are defined in the GUI in a specific ord...
10/04/2021
-
01:53 PM Bug #12424 (Pull Request Review): OpenVPN silent install uses incorrect parameters
-
01:37 PM Bug #12424: OpenVPN silent install uses incorrect parameters
- https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/133
-
01:07 PM Bug #12424 (Resolved): OpenVPN silent install uses incorrect parameters
- The @.exe@ and @.msi@ installers require different parameters for a silent install. Currently, the same parameter is ...
10/03/2021
-
06:54 PM Bug #12423 (Resolved): Dashboard shows "SQLite database missing, Force Reload DNSBL to recover!"
- See screenshot. The message tells to 'force reload' which I did, yet the error persists.
There's one post on the ... -
03:53 PM Feature #10739: Update HAproxy-devel package to 2.2 and HAproxy to 2.0
- Hi, here many points are still undone.
-
03:34 PM Todo #12354: Update haproxy-devel to mitigate CVE-2021-40346
- Hi, this is serious CVE, and still no updates? Even it possible to workaround issue by adding own check, I sure most ...
10/02/2021
-
05:58 PM Bug #12188: client export breaks multi remote configurations
- Based on reviewing the bug report with OpenVPN there doesn't appear to be anything that needs to be done here. They'...
-
05:52 PM Bug #12365 (Feedback): PFBlockerNG - Unbound fails to start 3.1.0
- Completed the following tests:
1. Installed pfBlockerNG-dev
2. Ran a force update and reload
3. Monitored loggin... -
05:41 PM Bug #12030: Startup Errors for Avahi Package
- Jim Pingle wrote in #note-11:
> It's a package, not a part of the base system, so updates are not tied to any releas... -
03:37 PM Bug #11768 (Resolved): FRR OSPF - Comment field within the ospf interfaces gets longer and longer
- Tested with FRR 1.1.0_15
Looks to be fixed. The description only matches the interface that it is actually set on... -
08:27 AM Bug #11465: Input validation does not prevent multiple conflicting WireGuard peers on a single tunnel from attempting to act as default route
- Submitted PR 19 (https://github.com/theonemcdonald/pfSense-pkg-WireGuard/pull/149).
Few queries on the PR regardin... -
01:07 AM Bug #12420 (Resolved): rc file is not deleted
- /usr/local/etc/rc.d/pimd.sh file is not deleted after disabling the service
10/01/2021
-
11:53 AM Bug #12058: pfBlockerNG / "Cannot allocate memory" from Geo blocking IP list
- Indeed increasing that has eliminated the "Cannot allocate memory" messages.
Could the error message be improved t... -
04:42 AM Bug #12033: maxmindb and _sqlite3 modules not found
- How to resolve:...
-
04:26 AM Bug #12033: maxmindb and _sqlite3 modules not found
- see the same error on SG-3100 with pfSense-21.09.r.20210923.2242 and pfBlockerNG-3.1.0:...
-
12:23 AM Bug #12414: DNSBL SafeSearch page displays input validation error if DoH / DoT blocking is not enabled
- fix:
https://github.com/pfsense/FreeBSD-ports/pull/1111 -
12:12 AM Bug #12414 (Resolved): DNSBL SafeSearch page displays input validation error if DoH / DoT blocking is not enabled
- You need to enable DoH/DoT Blocking and select entries in the DoH/DoT Blocking List, otherwise you'll see:...
09/29/2021
09/27/2021
-
08:10 AM Bug #12030: Startup Errors for Avahi Package
- It's a package, not a part of the base system, so updates are not tied to any release.
It could be updated any tim... -
06:39 AM Bug #12365: PFBlockerNG - Unbound fails to start 3.1.0
- php-fpm 52285 /status_services.php: The command '/usr/local/sbin/unbound -c /var/unbound/unbound.conf' returned exi...
09/25/2021
-
09:05 PM Bug #12030: Startup Errors for Avahi Package
- Tested on RC3 of 21.09. Still present. Is this going to make it into 21.09 before it's pushed public?
-
03:15 PM Feature #12297: Suricata: show actual GID:SID rule on click
- GID:SID is clickable using suricata 6.0.3_2 on 21.09.r.20210923.1842
-
12:00 AM Feature #11320 (Resolved): Update NAS client type
09/24/2021
-
10:18 PM Feature #11320: Update NAS client type
clients are added to clients type list
2.5.2
-
08:36 PM Bug #12399: WireGuard v0.1.5 - Tunnel Will Never Handshake Again After WAN Reset
- Christian McDonald wrote in #note-9:
> Thanks.
>
> We might need to hook the gateway alarm and trigger WireGuard se... -
06:46 PM Bug #12399: WireGuard v0.1.5 - Tunnel Will Never Handshake Again After WAN Reset
- Thanks.
We might need to hook the gateway alarm and trigger WireGuard service to be restarted when gateway status... -
05:35 PM Bug #12399: WireGuard v0.1.5 - Tunnel Will Never Handshake Again After WAN Reset
- Christian McDonald wrote in #note-7:
> Interesting... I can replicate this if my WAN is using DHCP, but as soon as I... -
05:26 PM Bug #12399: WireGuard v0.1.5 - Tunnel Will Never Handshake Again After WAN Reset
- Interesting... I can replicate this if my WAN is using DHCP, but as soon as I switch to a static address I can unplug...
-
05:13 PM Bug #12399: WireGuard v0.1.5 - Tunnel Will Never Handshake Again After WAN Reset
- Christian McDonald wrote in #note-5:
> Ryan, out of curiosity, are you using DHCP are static addressing on your WAN?... -
05:09 PM Bug #12399: WireGuard v0.1.5 - Tunnel Will Never Handshake Again After WAN Reset
- Ryan, out of curiosity, are you using DHCP are static addressing on your WAN?
-
05:03 PM Bug #12399: WireGuard v0.1.5 - Tunnel Will Never Handshake Again After WAN Reset
- Just tested this on my 2100. I will test more next week.
I have a WireGuard tunnel to Mullvad.
# Started a persiste... -
08:13 AM Bug #12205 (Pull Request Review): Certificate Manager page doesn't show Squid used certificates
-
05:07 AM Bug #12205: Certificate Manager page doesn't show Squid used certificates
- https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/130
-
07:37 AM Bug #12403 (Resolved): WireGuard tunnel and peer edit pages do not prevent browser auto-fill
- The WireGuard tunnel (@vpn_wg_tunnels_edit.php@) and peer (@vpn_wg_peers_edit.php@) edit pages do not prevent the bro...
09/23/2021
-
10:57 PM Feature #11972: Arpwatch - Add support for Telegram notifications
there is no option to add Telegram in Arpwatch page.
Tested :
2.6.0.a.20210923.0100
&
21.05.1-
02:36 PM Bug #12399: WireGuard v0.1.5 - Tunnel Will Never Handshake Again After WAN Reset
- In rebooting my ISP modem many times and tracking the behavior of pfSense and WireGuard, I observed that when the mod...
-
10:55 AM Bug #12399: WireGuard v0.1.5 - Tunnel Will Never Handshake Again After WAN Reset
- Christian McDonald wrote in #note-1:
> Thanks for the tag, I will investigate this and circle back.
Awesome! Grea... -
10:35 AM Bug #12399: WireGuard v0.1.5 - Tunnel Will Never Handshake Again After WAN Reset
- Thanks for the tag, I will investigate this and circle back.
-
09:26 AM Bug #12399 (Resolved): WireGuard v0.1.5 - Tunnel Will Never Handshake Again After WAN Reset
- Hi Christian,
Really appreciate your work on the Wireguard package for pfSense :)
Sadly, there seems to be a show...
09/22/2021
-
03:29 AM Feature #9833: ACME: add ability to use custom ACME server
- +1 Would be nice to have this. Invalid certs are just not cool anymore with ACME available. Should be possible to sel...
09/20/2021
09/18/2021
-
01:38 PM Bug #11695 (Resolved): PHP error in the last step of the wizard
- Tested in:
21.09-RC (amd64)
built on Wed Sep 15 09:10:53 EDT 2021
FreeBSD 12.2-STABLE
The wizard completes su... -
11:10 AM Todo #12351: Remove non-functional feeds
- I checked with pfBlockerNG-devel 3.1.0. Some of the feeds listed above are removed, but some are still there.
http...
09/17/2021
-
11:38 PM Bug #11888: FreeRADIUS starts twice by /etc/rc.start_packages
seems fixed
[2.5.2-RELEASE][root@pfSense.home.arpa]/root: /etc/rc.start_packages
Starting package FRR...done.
...
09/16/2021
-
10:25 PM Bug #11961: FRR OSPF add unwanted area 0 authentication to router ospf
adding Authentication Type in area tab works (peering)
!
interface em0
ip ospf authentication
ip ospf au...-
09:38 AM Bug #12167: BGP TCP setkey not set if neighbor is in peer group
- Testing this I notice the following:
There is no way to inherit the MD5 settings from the peer group. It must be s... -
09:25 AM Bug #12167: BGP TCP setkey not set if neighbor is in peer group
- Target package version: v1.1.0_14
-
07:26 AM Bug #12386 (Pull Request Review): ```bgp as-path``` and ```bgp community-list``` are present in configuration even when BGP daemon is not enabled
-
12:51 AM Bug #12386: ```bgp as-path``` and ```bgp community-list``` are present in configuration even when BGP daemon is not enabled
- fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/127 -
12:34 AM Bug #12386 (Resolved): ```bgp as-path``` and ```bgp community-list``` are present in configuration even when BGP daemon is not enabled
- This breaks config loading:...
09/15/2021
-
09:58 AM Bug #12381: mOTP with RADIUS drops the VPN connection after 60 minutes
- I don't think that's FreeRADIUS, but OpenVPN. IIRC OpenVPN defaults to reconnecting every 60 minutes, but can be chan...
-
09:46 AM Bug #12381 (Rejected): mOTP with RADIUS drops the VPN connection after 60 minutes
- from https://forum.netgate.com/topic/165967/2fa-mfa-with-radius-drops-the-vpn-connection-after-60-minutes:...
Also available in: Atom