Activity
From 01/05/2022 to 02/03/2022
02/03/2022
-
08:14 AM Bug #12205 (Resolved): Certificate Manager page doesn't show Squid used certificates
- Tested against:...
-
- Tested against:...
-
- Tested against:...
-
- Tested:...
02/02/2022
-
09:48 PM Bug #12751 (New): Improve FRR route restoration after gateway events
- SETUP:
* FRR BGP over IPsec VTI using a localhost interface as update source.
* Check @Diagnostics / Routes@ for ro... -
06:04 PM Feature #10466: Add checkbox to Suricata blocked host view to resolve all resolvable IP's automatically
- Bill Meeks wrote in #note-2:
> I am hesitant about adding this feature. If there are lots of blocked IP entries (whi... -
04:27 PM Feature #10466: Add checkbox to Suricata blocked host view to resolve all resolvable IP's automatically
- I am hesitant about adding this feature. If there are lots of blocked IP entries (which you reference in a different ...
02/01/2022
-
- Wanted to bump this one up since it hasn't had any activity in the last few years.
-
- It's nearly impossible to fish through the blocked page and find something new right now. The only way is to look thr...
01/31/2022
-
02:56 AM Bug #12030 (Resolved): Startup Errors for Avahi Package
-
01:50 AM Feature #12656: NextDNS
- Marcos Mendoza wrote in #note-2:
> What is the advantage of a package versus using their DNS IP addresses as forward...
01/30/2022
-
- What is the advantage of a package versus using their DNS IP addresses as forwarding servers?
-
- The lists included with the package aren't meant to be updated that frequently. You could probably create a second cr...
01/29/2022
-
03:30 PM Bug #12030: Startup Errors for Avahi Package
- Not seeing these messages upon install or startup of Avahi package 2.2_1
01/28/2022
-
06:33 PM Bug #12742: freeRADIUS virtual-server-default: modules dailycounter, monthlycounter, noresetcounter, expire_on_login in authorize section prevent virtual server from loading
- Fix: https://github.com/pfsense/FreeBSD-ports/pull/1142
-
- This is on freeradius3 0.15.7_32
-
- This seems to be along the same line as this older bug https://redmine.pfsense.org/issues/10197
Creating a freeRAD... -
- Merged to 22.01/2.6
01/27/2022
-
09:04 PM Bug #11836: FRR ACCEPTFILTER shows out of order prefix-list
- I am reproducing this issue (constantly changing FRR running configuration leading to inactive routes) and unfortunat...
-
- Merged:
https://github.com/pfsense/FreeBSD-ports/commit/9f6b897648f3df69490fca0105748677f96d41f8 -
08:06 AM Bug #12738 (Pull Request Review): Squid ignores CA Trust Store
-
- fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/175 -
- Squid Proxy uses /usr/local/share/certs/ as a CA path, but not /etc/ssl/certs (system CA Trust Store)
and it's not p... -
- fix:
https://github.com/pfsense/FreeBSD-ports/pull/1141 -
- Using the "Virtual IP Addresses" option on the passlist page, invalid entries are generated:
192.168.34.5/24
192.16... -
- → luckman212 wrote in #note-7:
> So just checking... the fix is only in pfSense 2.7 alpha? Not making it into 2.6 / 2...
01/26/2022
-
11:43 PM Feature #12736 (New): Allow custom cron intervals
- Hello,
Long time pfSense user that just discovered pfBlockerNG - works great.
I would like to request a "30 min... -
09:11 AM Bug #12732 (New): Squid https filtering squidguard acl target list - erratic behaviour
- Bug that could be described as an erratic behaviour in squid https filtering : some websites specified in squidgard t...
-
- Merged
-
07:43 AM Bug #12729: PFBlockerNG random timeouts on connections
- Jim Pingle wrote in #note-1:
> This site is not for support or diagnostic discussion.
>
> For assistance in solvi... -
- This site is not for support or diagnostic discussion.
For assistance in solving problems, please post on the "Net... -
- Hi there, first bug I am reporting here.
Actually since quite a bit we noticed PFBlockerNG causing short timeouts on...
01/25/2022
-
06:39 PM Feature #9700: Secure Squid HTTPS Proxy
- /usr/local/etc/squid/squid.conf output
before enabling 'transparent' mode:
> # This file is automatically generat... -
- Then why not have a separate devel branch like other packages do?
https://www.freshports.org/www/squid-devel/ looks ...
01/24/2022
-
- After upgrading, I was able to correctly save the backend. Before, I was not able to save without the multiple input ...
-
- Merged to 22.01/2.6
-
03:22 PM Bug #12705: IPsec Profile Wizard/Apple: IKEv2 VPN with ECDSA server certificate does not connect using generated profile
- Hmmm, interesting. So maybe it is because of the old macOS 10.13 client. Best case, we'll be able to update the pfse...
-
- I can't reproduce that here. So long as I have the CA imported to the client, I can use either kind of certificate. I...
-
- That was just the workaround to suppress the error -- the longer term fix needs more thought on how NUT can send thes...
-
- Merged:
https://github.com/pfsense/FreeBSD-ports/commit/3364533d7d08cd73ee8253bf979c71f3e7fcbe13 -
- https://github.com/pfsense/FreeBSD-ports/pull/1140
-
- add igc(4) to the list of INLINE mode (netmap) supported cards (pfSense 2.6/22.01):
https://github.com/pfsense/FreeB... -
- https://github.com/pfsense/FreeBSD-ports/pull/1139
-
- add igc(4) to the list of INLINE mode (netmap) supported cards (pfSense 2.6/22.01):
https://github.com/pfsense/FreeB... -
- > This would involve adding a new configuration block inside Services->Squid->General after "Squid General Settings" ...
-
- Currently FreeBSD 12-14 only support amd64 version of squid, but not ARM:
https://www.freshports.org/www/squid/
01/23/2022
-
- Squid is still actively updated and under development
http://www.squid-cache.org/Versions/v5/ChangeLog.html
Time to... -
- Google DNS is different from Google Domains. +1 for Google Domain support here..
-
- Selecting 'transparent' mode adds the 'https_port' directive into configs but also adds 'intercept' which is undesire...
01/21/2022
-
- So my CA was created as follows:
- descriptive name: `MyCo IPSec CA`
- method: `create an internal CA`
- Trust S... -
- NUT tries to send notifications from an unprivileged user and can't do so because of the permissions on @/var/db/noti...
-
- Fix pushed, will be available whenever the next build happens.
-
- This has caused a problem, it's impossible to export a config now for a non-TLS RA config ("Remote Access (User Auth)...
-
- https://github.com/pfsense/FreeBSD-ports/pull/1137
-
- Added support for the InfluxDB V2 protocol and made some improvements to the UI
-
- fix:
https://github.com/pfsense/FreeBSD-ports/pull/1138
01/20/2022
-
08:14 PM Bug #12692: Haproxy backend issue
- So just checking... the fix is only in pfSense 2.7 alpha? Not making it into 2.6 / 22.01 ?
Is there way to pull it i... -
- Danilo Zrenjanin wrote in #note-5:
>
> All those fields should be using default values if nothing was defined. Ple... -
- How to reproduce:
1) Install pfBlockerNG-devel, and configure DNSBL in python mode
2) Enable RAM disk for /var
3) ... -
- In fact this started as a forum post, but there were no replies:
https://forum.netgate.com/topic/169207/ecdsa-cert... -
- There isn't enough information here, need a lot more info about your CA, cert, and P1 settings. Probably best to keep...
-
- I have a working IPSec VPN. But my CA and cert are expiring soon so I thought I'd use the more modern ECDSA instead o...
01/19/2022
-
- Tested against:...
-
- This site is not for support or diagnostic discussion.
For assistance in solving problems, please post on the "Net... -
04:17 AM Bug #12695 (Not a Bug): pfsense 2.5.2 vs ntopng 5.1
- Hello
Can i have an tutorial for install ntopng on pfsense correctly pls
I followed the link on ntop site official ...
01/18/2022
-
- Merged:
https://github.com/pfsense/FreeBSD-ports/commit/0ef44539d3e10f6839ea577873b97756131a92a5 -
-
- fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/171 -
- https://forum.netgate.com/topic/168944/haproxy-backend-issue:
It seems that when not setting HSTS value to something... -
- no such issue on pfSense-pkg-haproxy-devel 0.62_7
it may be related to the non-devel haproxy pkg -
01/17/2022
-
- for some reason unbound does not terminated in 30s:...
-
01/16/2022
01/15/2022
-
- Seeing the noted changes, fixes and additions on suricata-6.0.4
-
-
11:25 AM Feature #12674: Redistribute RIP to BGP
"Redistribute RIP" option is added to OSPF and BGP GUI
2.6.0.r.20220113.1926
01/13/2022
-
08:12 AM Todo #12354: Update haproxy-devel to mitigate CVE-2021-40346
- Hi I want to ask is you implemented mentioned "Temporary workaround"?
> No need to add this if version of haproxy ... -
- Merged:
https://github.com/pfsense/FreeBSD-ports/commit/deff5ad17b0809521d0c083ebbe619ebfd089d6f -
-
- WebGUI debug option:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/169 -
- fix:
https://github.com/pfsense/FreeBSD-ports/pull/1135 -
- "Pass List -> Auto-Generated IP Addresses -> VPN Addresses" does not include OpenVPN Client Specific Override.
-
- SSL.com and ZeroSSL.com support added to acme.sh - https://github.com/acmesh-official/acme.sh/releases/tag/3.0.0:
"Z... -
- Fix is merged to the upstream acme.sh repository
-
- Tested against:...
01/12/2022
-
10:29 PM Feature #12658: Adding prometheus metrics to darkstat
- It looks like a commit had been made to the main branch: https://cgit.freebsd.org/ports/commit/?id=038bcb21cbd11930ab...
01/11/2022
-
- FreeBSD ports bug created: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=261123
01/10/2022
-
- Merged
-
-
- https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/167
-
- Current version only support redistributing OSPF to BGP, but not RIP
-
- Marcos Mendoza wrote in #note-9:
> This patch results in the following warning when starting @haproxy@:
> [...]
> ... -
07:55 AM Bug #12668: Clear System OS Boot Log removes Cypto information on Status Page
- Jim Pingle wrote in #note-4:
> This is normal and expected. That information is obtained by inspecting the OS boot l... -
- This is normal and expected. That information is obtained by inspecting the OS boot log and if you clear it, there is...
-
- Local network with 3 users. Its not an office with a bazillion VLAN's, etc.
-
- Viktor Gurov wrote in #note-1:
> Please provide more information about your configuration -
>
> unable to reprod... -
- Please provide more information about your configuration -
unable to reproduce on 2.6.0.b.20220109.0600
fixed ... -
- Unable to reproduce on FRR 1.1.1_2:...
-
- build pkg:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/548 -
01/09/2022
-
06:31 AM Bug #12670: ACME package writes credentials to system log
- It is probably due to https://github.com/pfsense/FreeBSD-ports/blob/94457075a991331b9c0bcee44ea7d4fd9427ab36/security...
-
- The acme renewal cron currently dumps the config into the system log:...
01/08/2022
-
- Enable All and Disable All buttons appear to function as desired (compared to 21.05.2) for these blacklists on 22.01....
-
- When I clear the System Log OS Boot and return to the System Status page Crypto information changes from "AES-NI CPU ...
-
05:53 AM Bug #12260: Update popup and version missmatch?
- Possible workaround: Use a web-browser plugin like 'uBlock Origin' to select this 'popup' (it's a div actually) eleme...
01/07/2022
-
08:15 PM Bug #12260: Update popup and version missmatch?
- +1 for this, if only to get rid of the unavoidable notification on every page load.
-
09:18 AM Bug #12667 (Bogus): Firewall Crashed After Upgrading Wireguard
- Upgraded wireguard from 0.1.5 to 0.1.5_3 and after the upgrade was complete firewall crashed.
Also available in: Atom