Activity
From 03/02/2022 to 03/31/2022
03/31/2022
-
04:04 PM Feature #12963: Run nmap scans in the background
- I modified the code to disable any custom commands.
This is safer since nmap already changed in the past the -o opti... -
12:22 PM Bug #12818 (Resolved): IP block logging not working
-
- Tested and working in...
-
12:14 PM Regression #13002 (Feedback): BIND 9.16_13 could not find existing DNSSEC keys at /cf/named/etc/namedb/keys due to directory change
- Merged:
https://github.com/pfsense/FreeBSD-ports/commit/1a4f1fdbd14484e4ea4630fe4cd16ac777a32f5a -
07:43 AM Regression #13002 (Pull Request Review): BIND 9.16_13 could not find existing DNSSEC keys at /cf/named/etc/namedb/keys due to directory change
-
- fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/205 -
11:51 AM Bug #12916: pfBlockerNG-devel cron job does not trigger xmlrpc sync
- Marcos Mendoza wrote:
> Tested on pfSense 2.6.0 and pfBlockerNG-devel 3.1.0_1
> pfBlockerNG-devel option "Enable Sy...
03/30/2022
-
- https://forum.netgate.com/topic/170558/bind-package-9-16_12-reads-from-cf-named-but-changes-in-the-gui-are-written-to...
03/29/2022
-
-
-
- Merged:
https://github.com/pfsense/FreeBSD-ports/commit/c1a98faf91dee2303b83b9e1f29500241b2700c5 -
-
- fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/203 -
- Duplicate of #11398
-
08:19 AM Bug #12996 (Duplicate): DNS Resolver needs to run manually after pfBlockerNG-devel package upgrade
- Running system - PfSense Plus 22.01 x64
After upgrading pfBlockerNG-devel from 3.1.0.1 to 3.1.0.2 and from 3.1.0....
03/28/2022
-
11:17 PM Bug #12808: Wireguard Gateways disabled when Wireguard Service is Manually Restarted
- I found this bug after having WireGuard stop passing traffic after a WAN GW went down and came back up. Upon restorat...
-
09:34 PM Bug #12995: Installing stunnel only on the primary HA node leads to php crashes and sync issues
- After the nodes are in sync, xmlrpc syn completes successfully.
-
- Tested on @22.05.a.20220328.0600@.
# Install stunnel on primary node
# Force xmlrpc sync
sync fails and the se... -
08:16 AM Bug #12992 (Resolved): error: nbproc is not supported any more since HAProxy 2.5
- On latest 22.05 snaps, HAProxy-devel 0.62_8 pkg will not start, gives the following error "config : parsing [/var/etc...
-
- To disable any code injection risks:
- input is matched against a white list allowing only alphanumeric, spaces (excl... -
- After the last nmap changes, I wanted to harmonize the package with "Packet Capture"
https://github.com/pfsense/Free...
03/27/2022
-
- The commit says it resolves issue #10244. The reasoning given there is:
> The chosen solution was to mimic the curre...
03/25/2022
-
- Should be fixed in pfBlockerNG-devel_3.1.0_3
03/24/2022
-
- Again, noticed the delete icon resource
https://github.com/pfsense/FreeBSD-ports/pull/1152
-
- The Makefile needed an additional fix or it wouldn't compile: https://github.com/pfsense/FreeBSD-ports/commit/d34af18...
-
- PR merged, thanks!
-
11:16 AM Feature #12882: Add the option to specify CURLOPT_INTERFACE in pfBlockerNG IPv4/IPv6 lists
- Sure thing, happy to contribute!
-
- PR merged, thanks!
https://github.com/pfsense/commit/9e7c6e33857e42fa97ae04e57285ee180643440d
https://github.com... -
- Merged:
https://github.com/pfsense/FreeBSD-ports/commit/b7a4f7d12cc68460d75ae7204d0e4f8381d6d162
-
- Merged:
https://github.com/pfsense/commit/dc4f288b66af9b0ffc6dded8fe128aaeca0a9ac6 -
10:16 AM Bug #12772 (Resolved): Syslog-ng writes config.xml on each start
- Tested against:...
-
09:02 AM Bug #12979: Snort Rules Update Process Using Deprecated FreeBSD Subdirectory Name
- *Updated Info:* a decision was made to simply cherry-pick the DEVEL change into the RELENG_2_6_0 branch because the S...
-
- devel PR merged, left a note on the RELENG_2_6_0 PR as there is an issue there that needs resolved first.
03/23/2022
-
- A fix for this issue has been posted in Pull Requests https://github.com/pfsense/FreeBSD-ports/pull/1149 for RELEASE ...
-
- Beginning around the first of March 2022, the Snort rules update package from the Snort VRT changed the subdirectory ...
-
- Standardize nmap text in description: NMap -> Nmap
https://github.com/pfsense/FreeBSD-ports/pull/1148 -
-
- Loopia is working again, based on a comment left on the Github commit: https://github.com/pfsense/FreeBSD-ports/commi...
03/22/2022
-
- There really isn't enough info to determine what may be happening. The error itself can be normal in some cases.
S... -
- Updated TAB and Button names from ...log to "View Results"
Patch attached above
https://github.com/pfsense/FreeBSD-p... -
- Github link again
https://github.com/pfsense/FreeBSD-ports/pull/1148 -
- The acme.sh project made a new release with the fix, I've updated the ACME package with the new files, should be buil...
-
- Duplicate of #9537 -- This is due to Daylight Saving Time and is a known issue in graphs made from vnstat data.
-
-
06:22 AM Bug #12808: Wireguard Gateways disabled when Wireguard Service is Manually Restarted
- Here are some screenshots for reference.
Note: Disabling Gateway Monitoring and Using Non-local Gateway or using a /... -
- I am the original author of this post https://old.reddit.com/r/PFSENSE/comments/tc8zsx/wireguard_service_not_starting...
03/21/2022
-
-
05:26 PM Feature #10809: IDS/IPS - Notifications when new rule categories are released
- Chiming in to note all is good, notifications are sent when new rule categories appear.
Can be closed. -
- Phil Wardt wrote in #note-3:
> Phil Wardt wrote in #note-2:
> > Add a working test patch that can be copied into Sy... -
- Phil Wardt wrote in #note-2:
> Add a working test patch that can be copied into System Patches package:
Added opt... -
03:35 PM Bug #12969 (Duplicate): Status_Traffic_Totals GUI showing graphical data for the wrong month
- In the GUI for version 2.3.2_2, the Interactive Graph and Date Summary are both showing the current data under the wr...
-
- fixes:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/199
03/20/2022
-
-
- To summarize:
* load the saved @Profile@ value on BFD peer edit
* allow the selection of VIPs for @Local Source Add... -
- Saving the following BFD peer configuration results in no configuration change (checked by looking at @FRR / Status /...
-
- Add a working test patch that can be copied into System Patches package:
-
- Github commit, tested with screen shots:
https://github.com/pfsense/FreeBSD-ports/pull/1148
Note: it properly sup... -
- NMap package cannot actually run from gui because of nginx timeout
This patch adds the following features:
- run ... -
06:14 AM Bug #12808: Wireguard Gateways disabled when Wireguard Service is Manually Restarted
- Also see:
https://old.reddit.com/r/PFSENSE/comments/tc8zsx/wireguard_service_not_starting_on_system/
Can also con...
03/19/2022
-
03:21 PM Bug #12917: LoopiaAPI changed
- Jim Pingle wrote in #note-2:
> Viktor Gurov wrote in #note-1:
> > acme.sh updated to v3.0.2 in #12886
> >
> > Lo... -
01:37 PM Feature #12718: add igc(4) to the list of INLINE mode (iflib/netmap) supported cards
- was able to start suricata inline mode on igc interface (6100) running 22.01 v6.0.4_1
-
09:11 AM Bug #12951: FRR cannot remove IPv6 routes
- https://github.com/FRRouting/frr/issues/10827
-
- 2022/03/19 02:16:50 BGP: can't connect to 2604:8800:60:240::100 fd 34 : Permission denied
2022/03/19 02:16:50 BGP: c... -
- Tested with Stunnel 5.50_10
It writes to config.xml only after config changes. Ticket resoloved.
03/18/2022
-
12:38 AM Bug #12956: suricata fails to use pcre in SID management (e.g. dropsid.conf)
- Indeed, I've found the commit that caused the regression:
https://github.com/pfsense/FreeBSD-ports/commit/9d8801b498... -
- In suricata/suricata.inc, under "Test the SID token for the PCRE: keyword", the match for the regular expression will...
03/17/2022
-
- I cannot reproduce any issues with views in the DNS resolver as described. It's possible there is a local issue in pf...
-
03:45 AM Bug #12952 (Closed): After update to v. 22.01 DNS Resolver Custom Options for bypassing PfBlockerNG not working
Immediately after updating PfSense+ on Netgate 7100 from v. 21.05.2 to 22.01 the bypass setting for PfBlockerNG sto...-
pfsense 2.6 system
frr log show:
2022/03/16 21:46:42 ZEBRA: [EC 100663303] kernel_rtm: 2606:2800:e004::/48: r...
03/16/2022
-
- When mixing AE ciphers in a P2 with AEAD ciphers (e.g. AES with AES128-GCM), the wizard will generate a script with t...
03/14/2022
-
08:55 AM Bug #12808: Wireguard Gateways disabled when Wireguard Service is Manually Restarted
- I have the same issue. One side of the Wireguard VPN is disabled after reboot. Both sides of the VPN appear to have t...
03/13/2022
-
08:17 PM Feature #9833: ACME: add ability to use custom ACME server
- +1 for this as well.
Just started looking into sorting out the self-signed cert and thought there would be a better ... -
- This works again on 0.7_4.
03/12/2022
-
- Installed HAproxy on the:...
03/11/2022
-
06:51 PM Bug #12933 (Resolved): Vulnerability in ClamAV Engine Used by Squid
- https://www.tenable.com/plugins/nessus/156698
pfSense CE 2.6 and pfSense Plus 22.01 use ClamAV 0.104.1,1, which is... -
11:42 AM Bug #12924: DNS Resolver WireGuard ACL Inconsistency
- Christian McDonald wrote in #note-2:
> Hi Kevin,
>
> I am having a hard time replicating this based on your initi... -
09:20 AM Bug #12924: DNS Resolver WireGuard ACL Inconsistency
- Hi Kevin,
I am having a hard time replicating this based on your initial issue description. Can you please outline... -
11:08 AM Feature #12932 (New): pfblockerng per user whitelist
- Have the ability to not have DNS blocking applied to certain IPs. Right now this can be written into Unbound using cu...
03/10/2022
-
03:42 PM Bug #12623: acme.sh package | DNS-ISPConfig settings
- This one fixes the issue: https://github.com/acmesh-official/acme.sh/commit/01ace11293f4cf27f8e761114f48148bbcbad063
-
- Leaving the Allow Insecure blank, results in a different error:...
-
- I should add, I tested the script and it is placing the correct variables into the environment and the script does se...
-
- The upstream code still has a problem. If you leave "Allow Insecure" blank now it should at least get past that part,...
-
- I'm on 0.7_4 now and still see the exact same error - so no, still not fixed
-
- Viktor Gurov wrote in #note-1:
> acme.sh updated to v3.0.2 in #12886
>
> Looks like we need to update acme.sh mon... -
- acme.sh updated to v3.0.2 in #12886
Looks like we need to update acme.sh monthly/quarterly. -
- This is correct behavior.
The "Raw Config" tab is used for custom configuration:
https://docs.netgate.com/pfsense... -
- about FRR，When using vtysh to save the configuration, any changes to the webgui are invalid.
Because there are man...
03/09/2022
-
- Merged to devel and 22.01/2.6
-
-
- regression: https://forum.netgate.com/topic/170558/bind-package-9-16_12-reads-from-cf-named-but-changes-in-the-gui-ar...
-
- Initially, I had two pfsense nodes connected via the WireGuard package. My tunnel network was 10.0.3.0/30 for p2p. I ...
-
- FreeBSD-ports merge:
https://github.com/pfsense/FreeBSD-ports/commit/da9ed529f30212fd826aebc3b7e896fce7a15217 -
- Applied in changeset pfsense:commit:07fe3d3d60a61621171fbc0a1a5e42c1462fb5ed.
03/07/2022
-
- I faced an issue similar to this with the Snort and Suricata packages some time back. I handled it there by always ch...
-
- The base system has no way to scan/inform packages about an interface being removed, it's up to the admin to maintain...
-
09:30 AM Bug #12907: PIMD: Nonexistent interfaces should be hidden/disabled in pimd.conf before bringing up the service
- Jim Pingle wrote in #note-1:
> PIMD has options to not behave that way.
>
> Sounds like what you really want is t... -
- PIMD has options to not behave that way.
Sounds like what you really want is to have PIMD set to "Bind to None" an... -
- When pfBlockerNG-devel syncs its settings (e.g. custom IPv4 list) to a secondary firewall, the settings on the second...
-
- Any users using LoopiaAPI can't issue or renew certificates. This has been fixed upstream at the below link.
https... -
- Tested on pfSense 2.6.0 and pfBlockerNG-devel 3.1.0_1
pfBlockerNG-devel option "Enable Sync" with "Sync to host(s) d... -
- Fix merged, will be in ACME pkg v 0.7_4.
In the meantime, check the debug option on a certificate and it should wo... -
- Creating a new certificate in ACME is not working properly. The GUI output only shows that it generates the private k...
-
- If we try this again as a debug option we must test this better, at a minimum:
* Creating a new account key should... -
- The debug option added broke several things. It broke the ability to create account keys, and it is breaking new ACME...
-
- Convert the GeoIP lookup feature available on the ALERTS tab in the Suricata package to use the local GeoIP2 database...
-
- They are still putting out 2.2.x releases and it's a smaller and therefore safer jump. If that is OK then after a whi...
03/06/2022
-
05:41 PM Feature #9833: ACME: add ability to use custom ACME server
- Manny Tew wrote in #note-5:
> + 1 for this as well. This is critical for proper security in a homelab in 2021+ Inval... -
- At this point, pimd is unaware of nonexistent interfaces. This can lead to a kernel panic.
(My case: I removed newly... -
04:31 AM Feature #11827: Please include acme deploy folder/scripts
- +1 for this as well. Note, the certs seem to be stored in a non-standard acme.sh way under /conf/acme, so more work m...
-
- Kris Phillips wrote in #note-2:
> Viktor Gurov wrote in #note-1:
> > HAProxy-devel is already 2.4 (2026-Q2 (LTS))
...
03/05/2022
-
-
- Patch works to correct Apcupsd widget link to status page - applied to 22.01 and 22.05.a.20220305.0600
-
- Sish Kitane wrote in #note-4:
> I can reproduce this in VMs for both 2.5.2 and 2.6. I don't think the new 5.0 packag... -
- Viktor Gurov wrote in #note-1:
> HAProxy-devel is already 2.4 (2026-Q2 (LTS))
>
> HAProxy-stable update to 2.2 ve... -
- HAProxy-devel is already 2.4 (2026-Q2 (LTS))
HAProxy-stable update to 2.2 version (2025-Q2 (LTS)):
https://gitlab...
03/04/2022
-
- It sometimes blocks the hosts defined in the selected Pass List. No matter whether you used IP subnet or Alias under ...
-
- The version of HAProxy in stable is very old and due to be unsupported at the end of the year. We should really move...
-
- cherry-picked to 22.01/2.6
-
- Merged to 2.7/22.05:
https://github.com/pfsense/FreeBSD-ports/commit/fb702643e590f7545cbbaf5bd4e5060f9ab293cc -
- cherry-picked to 22.01/2.6
-
- Merged to 2.7/22.05:
https://github.com/pfsense/FreeBSD-ports/commit/a6943737bb6b2df2dcc050bd0db5ebf127be2df4
03/03/2022
-
11:16 PM Bug #12706: pfBlockerNG and unbound does not work after switching /var to RAM disk
- This bug causes a delay in boot processing when the ramdisk option is enabled. If the option is disabled, no delay i...
-
- >Thanks for the contribution! Its appreciated!
Sure thing! This solves a big problem for me :-)
Your revisions ... -
02:03 PM Feature #12882: Add the option to specify CURLOPT_INTERFACE in pfBlockerNG IPv4/IPv6 lists
- Great Thanks.
I have done some limited testing and it seems to be ok.
I made some minor formatting changes in ... -
- Ok, all done! https://github.com/pfsense/FreeBSD-ports/pull/1146
-
- Commit: https://github.com/pfsense/FreeBSD-ports/commit/29bab84437fcdde206f205610d341302093fa4f3
Package update is... -
- Fix merged.
-
- This approach is a more comprehensive fix: https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/193
-
-
- fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/192 -
- Merged
03/02/2022
-
04:56 PM Bug #12891 (Resolved): Trailing space in Acme Account Keys "name" breaks UI functions
- If any ACME account key is entered into the UI with a trailing space in the name, the pfSense UI becomes unable to ha...
-
-
-
- The latest version of the ACME package now includes the new CAs.
-
- The fix for this is now in the latest ACME package. Please update and test it again to see if it works.
-
- No problems I can find so far. I picked it back to 22.01/2.6.0 for wider testing. Can tackle new issues as they come.
-
- Sure thing! I'll close the other pull request, thanks!
-
- i need setup this. but frr webgui cant add
https://team-cymru.com/community-services/bogon-reference/bogon-refer...
Also available in: Atom