Activity
From 07/02/2022 to 07/31/2022
07/31/2022
-
11:21 AM Bug #11681 (Resolved): FRR generates invalid BFD configuration after removing interfaces
- Tested on 22.05
I wasn't able to reproduce this issue. After deleting interface which were chosen for BFD peer, I ...
07/30/2022
-
09:38 PM Bug #13368: IPsec Profile Wizard/Windows: Cannot generate a script for IKEv2 VPN using GCM ciphers when mobile P2 has no hash algorithms selected
- I tried to recreate this and got a different error message with the same Phase 1 settings:
Phase 1 Hash Algorithm ... -
09:20 PM Bug #13380: OpenVPN client options cause "Options error: --proto tcp is ambiguous in this context. Please specify --proto tcp-server or --proto tcp-client"
- Can confirm the OpenVPN Export Utility does not specify tcp-client in it's config for clients to use, but instead def...
07/29/2022
-
05:49 AM Regression #13002 (Resolved): BIND 9.16_13 could not find existing DNSSEC keys at /cf/named/etc/namedb/keys due to directory change
- Tested:...
-
04:39 AM Bug #12869 (Resolved): Bind DNS Package AAAA filtering Broken on new ZFS Installs
- Tested:...
07/28/2022
-
05:29 AM Bug #13380 (Not a Bug): OpenVPN client options cause "Options error: --proto tcp is ambiguous in this context. Please specify --proto tcp-server or --proto tcp-client"
- Find that if the OpenVPN client has the "TCP" option of the remote (--remote host [port] [proto])
Example
@rem...
07/26/2022
-
04:13 PM Bug #12475 (New): OpenVPN Client Export does not show certificate without private key
- I'm reopening this. The comments above about the $settings and $cert variable are correct. A symptom of this is that ...
-
04:03 AM Regression #12160 (Resolved): An invalid configuration is generated when choosing TLS as the default protocol
- Tested on 22.05 and on 22.09-DEV
There was no problem using TLS as a default protocol for syslog-ng. I was able su...
07/25/2022
-
06:54 AM Bug #12114 (Resolved): syslog-ng only binds to the last specified interface
- I can't reproduce this issue on 22.05 and on 22.09-DEV.
After choose several interfaces for Syslog-ng, in 'netstat... -
01:33 AM Bug #13098 (Resolved): HAProxy Virtual IP broken link under Frontend setup
- I was able to reproduce this issue on 21.05_2 (HAproxy 0.61_3) but since then on 22.01/22.05 and on 22.09-DEV "Virtua...
07/24/2022
-
05:18 PM Bug #13360: Not All AS Prefixes are returned by WHOIS
- Danilo Zrenjanin wrote in #note-3:
> I recommend trying with the pfBlockerNG-devel. Here is the list I got on the de...
07/23/2022
-
07:22 PM Bug #12706: pfBlockerNG and unbound does not work after switching /var to RAM disk
- unable to recreate in the current dev build 22.09.a.20220722.0600
-
05:31 PM Feature #13361: Add Zabbix 6.2 (agent and proxy) packages
- This is present in FreshPorts.
https://www.freshports.org/net-mgmt/zabbix62-agent/
07/22/2022
-
07:44 AM Bug #13360: Not All AS Prefixes are returned by WHOIS
- I recommend trying with the pfBlockerNG-devel. Here is the list I got on the devel version:...
-
05:51 AM Bug #13034 (Resolved): Zabbix6 Agent and Proxy fail to set the PSK from the web GUI in its conf files
- Tested:...
07/21/2022
-
05:57 PM Feature #13370: Wireguard Dashboard status
- Ideally, it would be nice to see which Peers are connected, similar to the status of the OpenVPN widget.
This is a s...
07/20/2022
-
09:09 PM Feature #13370: Wireguard Dashboard status
- What detail specifically?
-
08:31 PM Feature #13370 (New): Wireguard Dashboard status
- It would be nice if the WireGuard widget would give a little more detail on the Dashboard.
-
11:20 AM Bug #13368 (Resolved): IPsec Profile Wizard/Windows: Cannot generate a script for IKEv2 VPN using GCM ciphers when mobile P2 has no hash algorithms selected
- The following P1 cipher suite is supported by Windows natively, yet the wizard prevents it:
AES256-GCM | 128 bits ...
07/18/2022
-
08:02 AM Feature #13361 (Resolved): Add Zabbix 6.2 (agent and proxy) packages
- New release from zabbix. Please add this new version.
https://www.zabbix.com/rn/rn6.2.0
https://www.freshports.or... -
07:53 AM Feature #12859: Add Zabbix 6.0 LTS (agent and proxy) packages
- zabbix proxy 6 is available but i am unable to close the issue.
07/17/2022
-
09:34 AM Bug #13360: Not All AS Prefixes are returned by WHOIS
- Kris Phillips wrote in #note-1:
> I can confirm that subnet should be part of that ASN. However, I cannot recreate ... -
04:45 AM Bug #13343: HAproxy cookie protection syntax needs updated
- Hello,
the bug is there if the haproxy package installation dependency is set to use
haproxy22-2.2.22 (no more "rs...
07/16/2022
-
08:32 PM Bug #13343: HAproxy cookie protection syntax needs updated
- Hello,
Is this present on the stable or devel branch? Or both? -
08:21 PM Bug #13360: Not All AS Prefixes are returned by WHOIS
- I can confirm that subnet should be part of that ASN. However, I cannot recreate this in pfBlockerNG. Are you runni...
-
03:27 PM Bug #13360 (New): Not All AS Prefixes are returned by WHOIS
- If you set up a rule to do WHOIS on AS4917, these are the prefixes returned by pfBlockerNG:
• 12.187.160.0/24
•... -
12:05 PM Todo #13349 (Pull Request Review): Add note in WireGuard GUI regarding routing behavior for Allowed IPs
- https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/254
07/15/2022
-
02:00 PM Bug #13154: pfBlocker causing excessive CPU load
- Michael Novotny wrote in #note-11:
> Interesting... I reinstalled pfBlocker (pfBlockerNG-devel 3.1.0_4) as I was not ... -
01:08 PM Bug #13154: pfBlocker causing excessive CPU load
- Denny Page wrote in #note-10:
> Probably should confirm that the patch applied correctly. Assuming that you are runni... -
12:45 PM Bug #13154: pfBlocker causing excessive CPU load
- Michael Novotny wrote in #note-9:
> The high cpu is still occurring with this patch applied and running on 22.05, re... -
08:17 AM Bug #13154: pfBlocker causing excessive CPU load
- The high cpu is still occurring with this patch applied and running on 22.05, reboot, reloading package, etc. As sta...
07/14/2022
-
08:42 AM Feature #12748: Suricata blocked page timestamp breakout to it's own sortable column
- Thanks so much, Bill! Appreciate your efforts.
-
08:30 AM Feature #12748: Suricata blocked page timestamp breakout to it's own sortable column
- The pull request has been merged to correct this issue and it can be marked "Resolved".
-
08:31 AM Bug #12956: suricata fails to use pcre in SID management (e.g. dropsid.conf)
- The pull request has been merged to correct this issue and it can be marked "Resolved".
-
08:30 AM Bug #13333: PHP error when saving Suricata rulesets
- The pull request has been merged to correct this issue and it can be marked "Resolved".
07/13/2022
-
06:24 PM Bug #12956: suricata fails to use pcre in SID management (e.g. dropsid.conf)
- The logic has been changed back to the original behavior by removing the _preg_quote()_ wrapping of the PCRE keyword ...
-
06:22 PM Feature #12748: Suricata blocked page timestamp breakout to it's own sortable column
- Sortable columns have been added to the BLOCKS tab in the latest _pfSense-pkg-suricata-6.0.6_ version of the GUI pack...
-
06:20 PM Bug #13333: PHP error when saving Suricata rulesets
- This issue has been addressed in the new _pfSense-pkg-suricata-6.0.6_ update. Pull request posted here: https://githu...
07/11/2022
-
06:49 PM Bug #13354 (New): Tinc VPN causes constant gateway up/down events, packages restarts and filter reloads
- The latest pfSense Plus version broke the tinc VPN: When tinc connects it generates an event:...
-
06:31 PM Regression #13156: pfBlockerNG IP block stats do not work
- luc Willems wrote in #note-15:
> found the issue why it was not working for me. the patch above, it was not "clear" ... -
07:43 AM Bug #10608 (Closed): Update squid port to 4.11-p2
-
03:59 AM Bug #13209: Parsing Filter log by pfBlockerNG creates IP Block log with Source/Destination mixed up or wrong Direcion
- Any news on a solution for this issue?
07/10/2022
-
11:18 AM Todo #13349 (Resolved): Add note in WireGuard GUI regarding routing behavior for Allowed IPs
- As specified here:
https://docs.netgate.com/pfsense/en/latest/vpn/wireguard/settings.html#wireguard-settings-peer
... -
04:05 AM Regression #13156: pfBlockerNG IP block stats do not work
- found the issue why it was not working for me. the patch above, it was not "clear" for me it had to be ' _<space>_ '...
07/09/2022
-
06:50 PM Bug #10900: /packages/backup/backup.php?a=download&t=backup HTTP 504, or Sends PHP Error Message as ASCII/Text file Named pfsense.bak.tgz
- This is very similar to https://redmine.pfsense.org/issues/11098 - testing covered using both "/root" and "/" as back...
-
02:11 PM Bug #10608: Update squid port to 4.11-p2
- [22.05-RELEASE][admin@pfSense.home.arpa]/root: pkg info squid
squid-5.4.1
Name : squid
Version ... -
10:43 AM Bug #13347: Setting BGP default-originate route map does not prepend the AS path
- Side note I quickly tested setting a community using a route map on the default-originate statement and it worked. Se...
-
10:32 AM Bug #13347 (New): Setting BGP default-originate route map does not prepend the AS path
- Setting a route-map on the default-originate statement or outbound routes to a BGP peer does not properly prepend the...
07/08/2022
-
05:59 AM Regression #13156: pfBlockerNG IP block stats do not work
- same for me
using
pfsense+ V22.05
pfblockerNG-devel V3.1.0_4
basic setup using wizard.
manually edit the pf...
07/06/2022
-
11:03 AM Bug #13343 (Resolved): HAproxy cookie protection syntax needs updated
- A bug has been found after UPdate to pfSense plus 22.05: the generated code by HaProxy-GUI...
07/05/2022
-
01:46 PM Bug #13332: HAProxy Broken after v22.05 and HAProxy v0.61_3
- Johannes Goldynia
Please open a new bug report for the HSTS / Cookie protection issue. -
07:59 AM Bug #13332 (Rejected): HAProxy Broken after v22.05 and HAProxy v0.61_3
- There is no way the package can possibly track and warn about custom configuration directives. By definition it does ...
-
08:09 AM Bug #13336 (Rejected): BGP packets not being sent to OpenVPN cloud connections
- This is almost certainly a configuration problem with your OpenVPN setup and/or FRR settings. This site is not for su...
-
08:07 AM Bug #13328 (Not a Bug): Wireguard Site-to-Site broken after upgrade to 22.05
- This is unlikely to be a bug, but something in your configuration or environment. It's working for many others in sim...
07/04/2022
-
08:14 PM Bug #13336 (Rejected): BGP packets not being sent to OpenVPN cloud connections
- Scenario:
OpenVPN cloud is utilized to connect two pfsense routers behind CGNAT to allow for site to site connectivi... -
11:04 AM Bug #11098 (Resolved): Backup Files and Directories plugin crashes firewall if /root specified as backup location
- I'll close this given that the original issue (crash) no longer happens. There's still the issue of the package locki...
-
10:32 AM Bug #13333: PHP error when saving Suricata rulesets
- Marcos Mendoza wrote in #note-2:
> It happened a while ago as you can tell from the timestamp, unfortunately I don't...
07/03/2022
-
11:35 PM Bug #11098: Backup Files and Directories plugin crashes firewall if /root specified as backup location
- my apologies, I did misunderstand the initial report
in case of specifying "/root/" as path, the backup button produ... -
06:42 PM Bug #13333: PHP error when saving Suricata rulesets
- It happened a while ago as you can tell from the timestamp, unfortunately I don't remember the exact details to repro...
-
04:14 PM Bug #13333: PHP error when saving Suricata rulesets
- Can you add a little more detail for this statement: " _This was triggered when existing rules were auto-enabled by ...
-
12:59 PM Bug #13333 (Resolved): PHP error when saving Suricata rulesets
- In some cases, @$enabled_rulesets_array@ in @suricata_rulesets.php@ may not be an array which results in the followin...
-
12:20 PM Bug #13332: HAProxy Broken after v22.05 and HAProxy v0.61_3
- Hello,
updating the pass-trough rules to... -
02:58 AM Bug #13328: Wireguard Site-to-Site broken after upgrade to 22.05
- After reading through here, I think this might be related to this
https://redmine.pfsense.org/issues/12808
I never h...
07/02/2022
-
11:34 PM Bug #13332 (Rejected): HAProxy Broken after v22.05 and HAProxy v0.61_3
- If you are using HAProxy deprecated rspidel directive on your frontends or the option option httpchk on backends, HAP...
-
08:41 PM Bug #11098: Backup Files and Directories plugin crashes firewall if /root specified as backup location
- Jordan Greene wrote in #note-11:
> attempted creation of backup for "/" - after creating the entry and using the back... -
05:14 PM Bug #11098: Backup Files and Directories plugin crashes firewall if /root specified as backup location
- attempted creation of backup for "/" - after creating the entry and using the backup button, I'm eventually given 504...
-
10:58 AM Regression #13156: pfBlockerNG IP block stats do not work
- This fix doesn't work for me, I still can't get any logging of IP blocks, even though the dashboard counter shows it ...
-
04:02 AM Bug #13328 (Not a Bug): Wireguard Site-to-Site broken after upgrade to 22.05
- Hi,
I upgraded from 22.01 to 22.05. Everything went fine.
Plus home license on virtualized system
On Upgrade the...
Also available in: Atom