Activity
From 03/08/2022 to 04/06/2022
04/06/2022
-
12:55 PM
Bug #13022: HAProxy - Sub Frontends ignore Client verification CA certificates
- Hi, I have entered the line and received the following antowrt:...
-
10:33 AM Bug #13022: HAProxy - Sub Frontends ignore Client verification CA certificates
- Shared frontends certificates are saved to the @/var/etc/haproxy/<frontend>.crt_list@
for example:... -
- Merged:
https://github.com/pfsense/FreeBSD-ports/commit/93b8b43ec23cbe6ae71ad2a792ced07d60589db6 -
11:34 AM Bug #13034 (Pull Request Review): Zabbix6 Agent and Proxy fail to set the PSK from the web GUI in its conf files
-
- fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/209 -
10:58 AM Bug #13034 (Resolved): Zabbix6 Agent and Proxy fail to set the PSK from the web GUI in its conf files
- The Zabbix 6 agent and proxy running on pfSense 2.6.0 fails to set the PSK values from the web GUI in the zabbix conf...
-
- Merged
-
-
- fix:
https://gitlab.netgate.com/pfSense/factory-ports/-/merge_requests/50 -
06:27 AM Bug #13032 (Resolved): openvpn-client-import PHP warning
- Crash report shows:...
04/05/2022
-
12:52 PM Bug #12956 (Confirmed): suricata fails to use pcre in SID management (e.g. dropsid.conf)
- I'm reopening this issue, as the function @preg_quote@ escapes all special characters, rather than just delimiters.
h... -
- Merged:
https://github.com/pfsense/FreeBSD-ports/commit/a3bbd61e6a0376f80674a83b6bf99e74cb013bc5 -
-
- fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/206 -
- Should be fixed in #11098.
Please re-test.
04/04/2022
-
12:14 PM
Bug #13022: HAProxy - Sub Frontends ignore Client verification CA certificates
- I have taken screenshots of my settings. In principle, the Main Frontent is almost empty, since all settings are cove...
-
- Unable to reproduce with pfSense-pkg-haproxy-devel 0.62_9
Could you provide detailed step-by-step instructions to ... -
- Merged to devel for testing in snapshots.
04/03/2022
-
- Tested on @22.05.a.20220403.0600@; works as expected.
-
06:50 AM
Bug #13022 (Feedback): HAProxy - Sub Frontends ignore Client verification CA certificates
- I noticed that when I create sub frontends in HAProxa and enable the "Client verification CA certificates" in them (e...
04/02/2022
-
04:03 AM Feature #12963: Run nmap scans in the background
- I squashed commits since the last review
I reviewed and cleaned up some code readability
Updated the attached patch...
04/01/2022
-
05:59 PM Bug #13018 (New): TLD and DNSBL Safesearch DOH conflict disables TLD block when conflicting DOH FQDN is deselected or whitelisted
- pfBlockerNG-devel 3.1.0_4
If a TLD (example .cn) is blacklisted and conflicts with DNSBL Safesearch DOH blocking (ex... -
- Add No DNS Resolution option for faster scans
Should be completed
Attached patch for pfsense 2.6.0 -
- Updated patch to fix this:
- only kill nmap process using the output file created in GUI
- code formatting -
- Merged
03/31/2022
-
- I modified the code to disable any custom commands.
This is safer since nmap already changed in the past the -o opti... -
12:22 PM Bug #12818 (Resolved): IP block logging not working
-
- Tested and working in...
-
- Merged:
https://github.com/pfsense/FreeBSD-ports/commit/1a4f1fdbd14484e4ea4630fe4cd16ac777a32f5a -
-
- fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/205 -
11:51 AM Bug #12916: pfBlockerNG-devel cron job does not trigger xmlrpc sync
- Marcos Mendoza wrote:
> Tested on pfSense 2.6.0 and pfBlockerNG-devel 3.1.0_1
> pfBlockerNG-devel option "Enable Sy...
03/30/2022
-
- https://forum.netgate.com/topic/170558/bind-package-9-16_12-reads-from-cf-named-but-changes-in-the-gui-are-written-to...
03/29/2022
-
-
-
- Merged:
https://github.com/pfsense/FreeBSD-ports/commit/c1a98faf91dee2303b83b9e1f29500241b2700c5 -
-
- fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/203 -
- Duplicate of #11398
-
08:19 AM Bug #12996 (Duplicate): DNS Resolver needs to run manually after pfBlockerNG-devel package upgrade
- Running system - PfSense Plus 22.01 x64
After upgrading pfBlockerNG-devel from 3.1.0.1 to 3.1.0.2 and from 3.1.0....
03/28/2022
-
11:17 PM Bug #12808: Wireguard Gateways disabled when Wireguard Service is Manually Restarted
- I found this bug after having WireGuard stop passing traffic after a WAN GW went down and came back up. Upon restorat...
-
- After the nodes are in sync, xmlrpc syn completes successfully.
-
- Tested on @22.05.a.20220328.0600@.
# Install stunnel on primary node
# Force xmlrpc sync
sync fails and the se... -
08:16 AM Bug #12992 (Resolved): error: nbproc is not supported any more since HAProxy 2.5
- On latest 22.05 snaps, HAProxy-devel 0.62_8 pkg will not start, gives the following error "config : parsing [/var/etc...
-
- To disable any code injection risks:
- input is matched against a white list allowing only alphanumeric, spaces (excl... -
- After the last nmap changes, I wanted to harmonize the package with "Packet Capture"
https://github.com/pfsense/Free...
03/27/2022
-
- The commit says it resolves issue #10244. The reasoning given there is:
> The chosen solution was to mimic the curre...
03/25/2022
-
- Should be fixed in pfBlockerNG-devel_3.1.0_3
03/24/2022
-
- Again, noticed the delete icon resource
https://github.com/pfsense/FreeBSD-ports/pull/1152
-
- The Makefile needed an additional fix or it wouldn't compile: https://github.com/pfsense/FreeBSD-ports/commit/d34af18...
-
- PR merged, thanks!
-
11:16 AM Feature #12882: Add the option to specify CURLOPT_INTERFACE in pfBlockerNG IPv4/IPv6 lists
- Sure thing, happy to contribute!
-
- PR merged, thanks!
https://github.com/pfsense/commit/9e7c6e33857e42fa97ae04e57285ee180643440d
https://github.com... -
- Merged:
https://github.com/pfsense/FreeBSD-ports/commit/b7a4f7d12cc68460d75ae7204d0e4f8381d6d162
-
- Merged:
https://github.com/pfsense/commit/dc4f288b66af9b0ffc6dded8fe128aaeca0a9ac6 -
10:16 AM Bug #12772 (Resolved): Syslog-ng writes config.xml on each start
- Tested against:...
-
09:02 AM Bug #12979: Snort Rules Update Process Using Deprecated FreeBSD Subdirectory Name
- *Updated Info:* a decision was made to simply cherry-pick the DEVEL change into the RELENG_2_6_0 branch because the S...
-
- devel PR merged, left a note on the RELENG_2_6_0 PR as there is an issue there that needs resolved first.
03/23/2022
-
- A fix for this issue has been posted in Pull Requests https://github.com/pfsense/FreeBSD-ports/pull/1149 for RELEASE ...
-
- Beginning around the first of March 2022, the Snort rules update package from the Snort VRT changed the subdirectory ...
-
- Standardize nmap text in description: NMap -> Nmap
https://github.com/pfsense/FreeBSD-ports/pull/1148 -
-
- Loopia is working again, based on a comment left on the Github commit: https://github.com/pfsense/FreeBSD-ports/commi...
03/22/2022
-
- There really isn't enough info to determine what may be happening. The error itself can be normal in some cases.
S... -
- Updated TAB and Button names from ...log to "View Results"
Patch attached above
https://github.com/pfsense/FreeBSD-p... -
- Github link again
https://github.com/pfsense/FreeBSD-ports/pull/1148 -
- The acme.sh project made a new release with the fix, I've updated the ACME package with the new files, should be buil...
-
- Duplicate of #9537 -- This is due to Daylight Saving Time and is a known issue in graphs made from vnstat data.
-
-
06:22 AM Bug #12808: Wireguard Gateways disabled when Wireguard Service is Manually Restarted
- Here are some screenshots for reference.
Note: Disabling Gateway Monitoring and Using Non-local Gateway or using a /... -
- I am the original author of this post https://old.reddit.com/r/PFSENSE/comments/tc8zsx/wireguard_service_not_starting...
03/21/2022
-
-
05:26 PM Feature #10809: IDS/IPS - Notifications when new rule categories are released
- Chiming in to note all is good, notifications are sent when new rule categories appear.
Can be closed. -
- Phil Wardt wrote in #note-3:
> Phil Wardt wrote in #note-2:
> > Add a working test patch that can be copied into Sy... -
- Phil Wardt wrote in #note-2:
> Add a working test patch that can be copied into System Patches package:
Added opt... -
03:35 PM Bug #12969 (Duplicate): Status_Traffic_Totals GUI showing graphical data for the wrong month
- In the GUI for version 2.3.2_2, the Interactive Graph and Date Summary are both showing the current data under the wr...
-
- fixes:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/199
03/20/2022
-
-
- To summarize:
* load the saved @Profile@ value on BFD peer edit
* allow the selection of VIPs for @Local Source Add... -
- Saving the following BFD peer configuration results in no configuration change (checked by looking at @FRR / Status /...
-
- Add a working test patch that can be copied into System Patches package:
-
- Github commit, tested with screen shots:
https://github.com/pfsense/FreeBSD-ports/pull/1148
Note: it properly sup... -
- NMap package cannot actually run from gui because of nginx timeout
This patch adds the following features:
- run ... -
06:14 AM Bug #12808: Wireguard Gateways disabled when Wireguard Service is Manually Restarted
- Also see:
https://old.reddit.com/r/PFSENSE/comments/tc8zsx/wireguard_service_not_starting_on_system/
Can also con...
03/19/2022
-
03:21 PM Bug #12917: LoopiaAPI changed
- Jim Pingle wrote in #note-2:
> Viktor Gurov wrote in #note-1:
> > acme.sh updated to v3.0.2 in #12886
> >
> > Lo... -
01:37 PM Feature #12718: add igc(4) to the list of INLINE mode (iflib/netmap) supported cards
- was able to start suricata inline mode on igc interface (6100) running 22.01 v6.0.4_1
-
09:11 AM Bug #12951: FRR cannot remove IPv6 routes
- https://github.com/FRRouting/frr/issues/10827
-
- 2022/03/19 02:16:50 BGP: can't connect to 2604:8800:60:240::100 fd 34 : Permission denied
2022/03/19 02:16:50 BGP: c... -
- Tested with Stunnel 5.50_10
It writes to config.xml only after config changes. Ticket resoloved.
03/18/2022
-
12:38 AM Bug #12956: suricata fails to use pcre in SID management (e.g. dropsid.conf)
- Indeed, I've found the commit that caused the regression:
https://github.com/pfsense/FreeBSD-ports/commit/9d8801b498... -
- In suricata/suricata.inc, under "Test the SID token for the PCRE: keyword", the match for the regular expression will...
03/17/2022
-
- I cannot reproduce any issues with views in the DNS resolver as described. It's possible there is a local issue in pf...
-
03:45 AM Bug #12952 (Closed): After update to v. 22.01 DNS Resolver Custom Options for bypassing PfBlockerNG not working
Immediately after updating PfSense+ on Netgate 7100 from v. 21.05.2 to 22.01 the bypass setting for PfBlockerNG sto...-
pfsense 2.6 system
frr log show:
2022/03/16 21:46:42 ZEBRA: [EC 100663303] kernel_rtm: 2606:2800:e004::/48: r...
03/16/2022
-
- When mixing AE ciphers in a P2 with AEAD ciphers (e.g. AES with AES128-GCM), the wizard will generate a script with t...
03/14/2022
-
08:55 AM Bug #12808: Wireguard Gateways disabled when Wireguard Service is Manually Restarted
- I have the same issue. One side of the Wireguard VPN is disabled after reboot. Both sides of the VPN appear to have t...
03/13/2022
-
08:17 PM Feature #9833: ACME: add ability to use custom ACME server
- +1 for this as well.
Just started looking into sorting out the self-signed cert and thought there would be a better ... -
- This works again on 0.7_4.
03/12/2022
-
- Installed HAproxy on the:...
03/11/2022
-
06:51 PM Bug #12933 (Resolved): Vulnerability in ClamAV Engine Used by Squid
- https://www.tenable.com/plugins/nessus/156698
pfSense CE 2.6 and pfSense Plus 22.01 use ClamAV 0.104.1,1, which is... -
11:42 AM Bug #12924: DNS Resolver WireGuard ACL Inconsistency
- Christian McDonald wrote in #note-2:
> Hi Kevin,
>
> I am having a hard time replicating this based on your initi... -
09:20 AM Bug #12924: DNS Resolver WireGuard ACL Inconsistency
- Hi Kevin,
I am having a hard time replicating this based on your initial issue description. Can you please outline... -
11:08 AM Feature #12932 (New): pfblockerng per user whitelist
- Have the ability to not have DNS blocking applied to certain IPs. Right now this can be written into Unbound using cu...
03/10/2022
-
03:42 PM Bug #12623: acme.sh package | DNS-ISPConfig settings
- This one fixes the issue: https://github.com/acmesh-official/acme.sh/commit/01ace11293f4cf27f8e761114f48148bbcbad063
-
- Leaving the Allow Insecure blank, results in a different error:...
-
- I should add, I tested the script and it is placing the correct variables into the environment and the script does se...
-
- The upstream code still has a problem. If you leave "Allow Insecure" blank now it should at least get past that part,...
-
- I'm on 0.7_4 now and still see the exact same error - so no, still not fixed
-
- Viktor Gurov wrote in #note-1:
> acme.sh updated to v3.0.2 in #12886
>
> Looks like we need to update acme.sh mon... -
- acme.sh updated to v3.0.2 in #12886
Looks like we need to update acme.sh monthly/quarterly. -
- This is correct behavior.
The "Raw Config" tab is used for custom configuration:
https://docs.netgate.com/pfsense... -
- about FRR，When using vtysh to save the configuration, any changes to the webgui are invalid.
Because there are man...
03/09/2022
-
- Merged to devel and 22.01/2.6
-
-
- regression: https://forum.netgate.com/topic/170558/bind-package-9-16_12-reads-from-cf-named-but-changes-in-the-gui-ar...
-
- Initially, I had two pfsense nodes connected via the WireGuard package. My tunnel network was 10.0.3.0/30 for p2p. I ...
-
- FreeBSD-ports merge:
https://github.com/pfsense/FreeBSD-ports/commit/da9ed529f30212fd826aebc3b7e896fce7a15217 -
- Applied in changeset pfsense:commit:07fe3d3d60a61621171fbc0a1a5e42c1462fb5ed.
Also available in: Atom