Project

General

Profile

Activity

From 08/08/2022 to 09/06/2022

09/06/2022

07:45 PM Feature #13474: Don't set ListenPort in wireguard
If you use it as a client only and want the port to be random/dynamic. Flole Systems
07:42 PM Feature #13474: Don't set ListenPort in wireguard
What use case is there for not setting a listening port? Marcos M
07:08 PM Feature #13474 (New): Don't set ListenPort in wireguard
Currently it is not possible to not set the ListenPort setting for wireguard. I suggest to use the special value 0 as... Flole Systems
10:30 AM Todo #13306: Update NUT to version 2.8.0 to match FreeBSD Packages
I've also removed an excess call to send_smtp_message that should have been removed when notify_all_remote was added. Denny Page
07:46 AM Bug #13467: ACME: "Unable to find domain name" error when updating Namesilo
That fix will be picked up naturally the next time we update the acme.sh code from upstream.
Jim Pingle
07:37 AM Bug #11343 (Resolved): Invalid link to pfSense-pkg-bind changelog
Jim Pingle
02:56 AM Feature #13469 (New): Feature/Package request: Wireguard Client/Peer config files export
Hi,
It would be absolutely awesome if one could generate/export wireguard peer config files, to hand out to client...
Jonas R
02:25 AM Regression #11738 (Resolved): SquidGuard 1.16.18_17 Not Filtering Blacklist No-Transparent Mode
Tested on 22.05 with SquidGuard 1.16.18_20
In No-Transparent Mode SquidGuard was successfully blocking FQDNs from ...
Azamat Khakimyanov

09/04/2022

05:24 PM Bug #13432: ups driver will not start
I also had the same issue after doing a fresh install (and restored config) Travis Erdmann
03:40 PM Bug #13467 (Resolved): ACME: "Unable to find domain name" error when updating Namesilo
Issue is documented here:
https://github.com/acmesh-official/acme.sh/issues/4268
Issue text, copied here:
> Gett...
Bryan Guscott

09/03/2022

07:02 PM Bug #13128: Zabbix Agent 6: HA Server Setup
Attaching screenshot Kris Phillips
07:01 PM Bug #13128 (Confirmed): Zabbix Agent 6: HA Server Setup
I see the issue here. It appears that this feature for HA uses semi-colons for HA and uses Commas for multiple serve... Kris Phillips
06:55 PM Bug #11343: Invalid link to pfSense-pkg-bind changelog
changelog link now points to - https://github.com/pfsense/FreeBSD-ports/commits/devel/dns/pfSense-pkg-bind
the page ...
Jordan G
06:51 PM Feature #12859 (Resolved): Add Zabbix 6.0 LTS (agent and proxy) packages
Closing as resolved. Kris Phillips
06:49 PM Bug #13343 (Confirmed): HAproxy cookie protection syntax needs updated
Here is the error message in 2.0 of HAProxy:
_
The 'rspirep' directive is deprecated in favor of 'http-response repla...
Kris Phillips
06:26 PM Bug #11530 (Incomplete): ntopng 4.2 needs to be updated to 4.3, Bug when accessing a host for details
Hello,
Due to lack of response here and the fact that the package was updated to 5.2 in the 22.05 pfSense Plus rep...
Kris Phillips
05:18 PM Bug #13444 (Incomplete): zabbix_proxy : cannot open "/var/log/zabbix-proxy/zabbix_proxy.log": [13] Permission denied
Marking as Incomplete until additional details, per previous request, is provided. Kris Phillips
05:14 PM Bug #13461: Prefix lists help text is not placed correctly
If we're going to change this, it'll have to be changed globally across the board, because this is how the layout is ... Kris Phillips
02:07 PM Bug #13380 (Not a Bug): OpenVPN client options cause "Options error: --proto tcp is ambiguous in this context. Please specify --proto tcp-server or --proto tcp-client"
pfSense has no impact on the entries defined in the custom options. Custom options must be updated manually. Not a bug. Danilo Zrenjanin
03:16 AM Bug #13441 (Confirmed): FRR fails to start with route map on "sequence 0" in configuration
Tested on the:... Danilo Zrenjanin

09/02/2022

07:40 AM Bug #13461 (New): Prefix lists help text is not placed correctly
!clipboard-202209021438-1vffe.png!
Under 'Services/FRR/Global Settings/Edit/Prefix Lists,' the help text should ...
Danilo Zrenjanin

09/01/2022

01:33 PM Bug #13432: ups driver will not start
I cannot reproduce this after it started working. Even uninstalling and reinstalling the nut package does not seem t... Scott Lampert

08/31/2022

06:16 PM Todo #13349 (Resolved): Add note in WireGuard GUI regarding routing behavior for Allowed IPs
Merged. Should be available on the next version. Marcos M

08/30/2022

10:33 PM Feature #8547: fwknop Port Knocking Package
I'm adding my vote here as well, I'd like port knocking to be possible within pfSense either natively or as a separat... Geoff Hilton
06:58 PM Bug #13154 (Pull Request Review): pfBlocker causing excessive CPU load
See fix here https://redmine.pfsense.org/issues/13156#note-18 Marcos M
06:57 PM Regression #13156: pfBlockerNG IP block stats do not work
Here's the patch to test - use the System Patches package and copy/paste the contents of the attached file. Apply the... Marcos M
06:55 PM Regression #13156 (Pull Request Review): pfBlockerNG IP block stats do not work
Fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/261
This also handles cases where a rule u...
Marcos M
04:56 PM Bug #10436: softflowd no longer sends flow data after upgrade (v0.9.9_1 -> v1.0.0)
If you set the Netflow version to PSAMP, it seems to work but I don't have a collector to analyze the data.
All other...
Marcelo Cury

08/29/2022

12:53 PM Feature #9852 (Resolved): show File-Store directory listing
Jim Pingle

08/28/2022

04:22 AM Bug #12338: RRD Summary does not report data on 3100
Tested on 3100 with RRD Summary package version 2.0_2 on 22.05 pfSense release and I see the same issue aleksei prokofiev

08/27/2022

09:15 PM Bug #13404 (Not a Bug): LDAP authentication does not working
Ettore Caprella wrote in #note-3:
> Hello,
> yes, I can't find the right options that allow me to configure ldap auth...
Kris Phillips
08:54 PM Bug #13432: ups driver will not start
Scott Lampert wrote in #note-3:
> It seems to be the same as this issue: https://redmine.pfsense.org/issues/9849
> ...
Kris Phillips
08:53 PM Bug #13444: zabbix_proxy : cannot open "/var/log/zabbix-proxy/zabbix_proxy.log": [13] Permission denied
Hello Steve,
Which version of the Zabbix package are you seeing this behavior? There are several.
Kris Phillips
06:30 PM Feature #9852: show File-Store directory listing
new 'Files' submenu available on Suricata 6.0.6 - looks good Jordan G
06:13 PM Bug #12423: Dashboard shows "SQLite database missing, Force Reload DNSBL to recover!"
current version is 3.1.0_4 so it should be included - I have not hit this on that release, please update if you're st... Jordan G
05:56 PM Bug #10692: PIMD starts twice at boot
still seeing this start 2x on 22.05 following reboot Jordan G
04:07 PM Bug #12475: OpenVPN Client Export does not show certificate without private key
Denis Grilli wrote in #note-13:
> Could you tell in more detail what is your use scenario? From the error you are ge...
Charles Sprickman
04:42 AM Bug #13451 (New): Update the Default Router ID help text link under FRR Global Setting
The Wikipedia link directs to the OSPF Wiki page. Since this is the Global FRR settings page it has more sense to cha... Danilo Zrenjanin

08/26/2022

02:34 PM Feature #12963: Run nmap scans in the background
Marcos M wrote in #note-26:
> I can't think of a privacy issue for either - both locations are readable by everyone....
Phil Wardt

08/25/2022

08:05 AM Bug #13444 (Incomplete): zabbix_proxy : cannot open "/var/log/zabbix-proxy/zabbix_proxy.log": [13] Permission denied
Hi
I frequently come across this issue when trying to investigate why a Zabbix agent isn't communicating successfu...
Steve Scotter

08/23/2022

06:18 AM Bug #12475: OpenVPN Client Export does not show certificate without private key
Charles Sprickman wrote in #note-12:
> Marcos M wrote in #note-11:
> > I'm reopening this. The comments above about...
Denis Grilli

08/22/2022

09:00 PM Bug #13441 (Confirmed): FRR fails to start with route map on "sequence 0" in configuration
Creating a route map in FRR global configuration and assigning a network to sequence 0 prevents FRR/BGP from loading
...
Paighton Bisconer
08:13 PM Bug #12475: OpenVPN Client Export does not show certificate without private key
Marcos M wrote in #note-11:
> I'm reopening this. The comments above about the $settings and $cert variable are corr...
Charles Sprickman

08/21/2022

07:25 AM Bug #13432: ups driver will not start
It seems to be the same as this issue: https://redmine.pfsense.org/issues/9849
This was on a completely new instal...
Scott Lampert

08/20/2022

09:58 PM Bug #13432: ups driver will not start
Actually, I tested this with an APC unit just now and the nut package and was able to connect with the generic usbhid... Kris Phillips
09:42 PM Bug #13432: ups driver will not start
Hello,
I tested and was unable to reproduce this, but I don't have a Cyberpower UPS. It seems this shouldn't be l...
Kris Phillips
04:19 AM Bug #13409: Copy button for Optional pre-shared key for this tunnel works in HTTPS mode only
The same behavior on 22.09-DEVELOPMENT (amd64)built on Fri Jul 29 06:14:54 UTC 2022
Lev Prokofev

08/19/2022

02:43 PM Bug #13432 (Incomplete): ups driver will not start
I cannot get a USB-connected UPS to be recognized unless the nut usb driver is started with the "-u root" option.
...
Scott Lampert

08/18/2022

11:44 PM Bug #10693: pfSense Bind Zone Editor UI does not update zone serial number when a change is made
Andrzej Milewski wrote in #note-3:
> I have BIND version 9.16-11 package and pfSense version 2.5.2. Serial number no...
Gabriel Millerd

08/16/2022

11:28 PM Bug #13412: SquidGuard, Rewrite rules, only one sub-rule will work if more than one sub-rule defined
Here's a workaround for this issue however seems the workaround will not stay after network disconnection etc.or some... UserPfbUg User
09:11 PM Bug #13421 (New): Stunnel certificate does not refresh
I use stunnel with ACME certificates which expires every 90 days. When the certificate is 6í days old ACME auto refre... A Schnee

08/15/2022

09:54 AM Bug #12130 (Closed): Zeek fails to start
Jim Pingle
12:54 AM Bug #12130: Zeek fails to start
I've tested on 22.05 pfsense release and Zeek (3.0.6_3) is started with out any issue. The file local.zeek is present... aleksei prokofiev
09:53 AM Bug #13415: Pushing WireGuard traffic out a specific GW using static routes crashes the WireGuard Service
Seems highly unlikely it's related to policy routing, but maybe the way the service is restarted or the conditions at... Jim Pingle

08/14/2022

03:30 AM Bug #13415 (New): Pushing WireGuard traffic out a specific GW using static routes crashes the WireGuard Service
This relates to Bug #11613 and Bug #12811
Trying to work around Bug #12811 I set up a Gateway Group containing 2 ...
Oskar Stroka
02:31 AM Bug #13404: LDAP authentication does not working
Hello,
yes, I can't find the right options that allow me to configure ldap authentication when you don't have admin ...
Ettore Caprella

08/13/2022

06:43 PM Bug #13404: LDAP authentication does not working
Hello,
The virtual-server-default config file is generated from the webConfigurator in freeRADIUS. You shouldn't ...
Kris Phillips
06:31 PM Bug #13409 (Confirmed): Copy button for Optional pre-shared key for this tunnel works in HTTPS mode only
Confirmed on 22.05. Pressing the button does nothing in HTTP mode. Switches back to HTTPS and it functioned as expe... Kris Phillips
06:28 PM Bug #13410: ClamAV 0.104.2 is subject to several vulnerabilies
The latest is on Freshports. We should probably bump the pfSense squid package up a version and pull in the updated ... Kris Phillips
01:13 PM Bug #12506 (Resolved): Only selected instance is restarted on suppress list change
Tested against:... Danilo Zrenjanin
09:29 AM Bug #12036: Certificate Manager page do not show Zabbix used certificates
Tested:... Danilo Zrenjanin
01:25 AM Bug #13412: SquidGuard, Rewrite rules, only one sub-rule will work if more than one sub-rule defined
https://forum.netgate.com/topic/174018/squidguard-rewrite-rule-bug
If manually modify the squidguard configuration f...
UserPfbUg User
01:21 AM Bug #13412 (New): SquidGuard, Rewrite rules, only one sub-rule will work if more than one sub-rule defined

So, SquidGuard - Rewrites
If we create a new rewrite rule, add 1 rewrite condition and save it, Apply, it works ...
UserPfbUg User

08/12/2022

08:02 AM Bug #13410 (New): ClamAV 0.104.2 is subject to several vulnerabilies
The current ClamAV pkg: clamav-0.104.2,1 is subject to a number of new vulnerabilites:
https://blog.clamav.net/2022/...
Steve Wheeler
06:35 AM Bug #13409 (Pull Request Review): Copy button for Optional pre-shared key for this tunnel works in HTTPS mode only
Under *VPN/WireGuard/Peers/Edit* - *Optional pre-shared key for this tunnel* Copy button works only when the GUI runs... Danilo Zrenjanin
06:29 AM Bug #12258 (Resolved): Copy key buttons only work in HTTPS mode
Tested against:... Danilo Zrenjanin
02:36 AM Bug #13404: LDAP authentication does not working
I can add moreover that I don't have any admin privileges on the ldap server and the ldap doesn't store any password ... Ettore Caprella

08/11/2022

03:29 PM Bug #13395 (Rejected): pfBlockerNG changes firewall URLs to unparseable
The @<br />@ shown there is done on purpose - this affects the alias details when hovering over an alias on the firew... Marcos M
09:12 AM Bug #13405 (New): Wireguard: The webgui becomes excessively slow to respond with a large number of peers
Webgui pages that include data from Wireguard can become very slow to respond with a large number of elements present... Steve Wheeler
07:50 AM Bug #12414 (Resolved): DNSBL SafeSearch page displays input validation error if DoH / DoT blocking is not enabled
Tested:... Danilo Zrenjanin
04:51 AM Bug #13404 (Not a Bug): LDAP authentication does not working
Hi all,
has anyone encountered this particular issue with Freeradius3 0.15.7_33 with LDAP when a user tries to authe...
Ettore Caprella
04:35 AM Feature #13403 (New): Option to suppress graphing for individual thermal zones
As in many systems the thermal_tz1 and thermal_tz0 are invariant (not really present) it would be nice if they could ... odo maitre

08/10/2022

03:34 PM Feature #13402 (New): Monitor graph thermal sensors F option vs just C
So the thermal widget allows showing temps in F, but if you look at the monitor graph it is only in C.
Allow for t...
JohnPoz _
06:37 AM Bug #13395: pfBlockerNG changes firewall URLs to unparseable
pfSense 22.05
pfBlockerNG-devel 3.1.0_4
Steps to recreate:
Run wizard and (re)create the default setup.
It mi...
Per-Arne Hellarvik
06:16 AM Bug #13395: pfBlockerNG changes firewall URLs to unparseable
I couldn't replicate the issue on the 22.05 pfSense release.
I tested against:...
Danilo Zrenjanin

08/09/2022

07:47 AM Bug #12206 (Resolved): Certificate Manager page doesn't show Net-SNMP used certificates
Azamat Khakimyanov

08/08/2022

11:52 AM Bug #12206 (Assigned): Certificate Manager page doesn't show Net-SNMP used certificates
Tested on 22.05
After configuring CA and Certificate for Net-SNMP, and choosing 'Interface Binding: TLS/TCP' I saw N...
Azamat Khakimyanov
06:58 AM Bug #11746 (Resolved): Second LDAP server configuration misses the ipaNThash control attribute
Tested on 22.05
Both LDAP server configurations have ipaNThash control attribute.
I marked this Bug as resolved.
Azamat Khakimyanov
 

Also available in: Atom