Activity
From 02/22/2023 to 03/23/2023
03/23/2023
-
05:25 AM Feature #14160: Add Search Engine Group in feeds
- This is so we can whitelist search engines "Search Engines IPv4", "Search Engines IPv6"
-
- It would be good to get a search engine feed so you can either block them or use them as a whitelist. I have included...
-
- This group can be used to allow the blocking or whitelisting of google services. I have added what I found along with...
-
- This should include all of the Microsoft services and preferably in separate items. I have included links to the page...
-
- Can you add the netgate bogon feeds.
* https://files.netgate.com/lists/
** https://files.netgate.com/lists/bogon-... -
02:48 AM Bug #13936: PHP error from RRD Graphs when attempting a query a newly created empty database
- Can replicate on ...
03/22/2023
-
03:34 PM Feature #13200: Custom DNS Servers for Alert settings
- One solution would be to deny:
LAN: Deny any != pfblockerng ip TCP/UDP:53
WAN: ANY outgoing TCP/UDP:53
And allow... -
- I find this situation confusing and propose a couple of resolutions:
* If the option 'Block Outside DNS' should stay... -
- I would like to see this so if I want, I can create more human readable connection names which are shown in the OpenV...
-
08:41 AM Bug #14142 (Not a Bug): PHP errors in OpenVPN Client Export package
- This doesn't look like a bug. From the logs, the OpenVPN export package needs to be updated / reinstalled.
If that... -
06:05 AM Bug #14142 (Rejected): PHP errors in OpenVPN Client Export package
- Good moorning after installation last version of pf-sense, system shows Us the follow error related openvpn .
I am... -
- Firewall --> pfBlockerNG --> IP --> IPv4 --> edit/add --> IPv4 Custom_List
the reasons for this are:
* I only hav... -
- When I click on the button from the + button from the reports tab and follow the whitelisting, the default whitelist ...
-
- Firewall --> pfBlockerNG --> IP --> IPv4 --> IPv4 Custom_List
the line ... -
- Firewall --> pfBlockerNG --> IP --> IPv4 --> list
When you edit/create a list you have to select an action type an... -
- I would like the countdown timer of the cron to be active. Like on an aution page of ebay. :)
Firewall --> pfBlock... -
- On the following sections can you:
Firewall --> pfBlockerNG --> IP --> IPv4
*Advanced Inbound Firewall Rule Set... -
- I refer to the rules @ (Firewall --> pfBlockerNG --> IP --> IPv4)
I noticed that when I renamed an alias that the ... -
- When creating an IPv4 outbound permit rule (Firewall --> pfBlockerNG --> Ip --> IPv4) and you leave the **Custom Prot...
03/21/2023
-
07:17 PM Bug #14054: pfBlockerNG can incorrectly modify firewall rules
- It appears this related to the IPv4 IP list being updated, and happens during this step:...
-
06:38 PM Bug #14141 (Rejected): pfsense 2.6.0 -pfSense-pkg-squid installation failed!
- Hi guys,
Any help please.
I'm working on a lab project that is due in the comming days. Everything has worke fine u... -
05:43 PM Todo #9200: Add DNS support for Google domain to Acme manager
- It appears that Google Domains has added support for DNS-01 ACME Challenges using a token generated on Google Domains...
-
01:56 PM Feature #8547: fwknop Port Knocking Package
- I'd like to add a vote here, too. This would be *incredibly* useful.
Port knocking is not an _alternative_ to a VP...
03/20/2023
-
02:03 PM Bug #14116 (Duplicate): Squid Error went I press SAVE button.
- Duplicate of https://redmine.pfsense.org/issues/13984
Missing Squid Reverse config values. -
10:19 AM Bug #14116: Squid Error went I press SAVE button.
Looks like Clamav is the issue, once I disable this services, the error is gone.
This is my config file:
cat...
03/19/2023
-
04:33 PM Regression #14024: PHP error in HAProxy Widget with Show Client Traffic enabled
- I have the same issue but only affecting one of my deployments. As a workaround you can disable the haproxy service t...
-
11:25 AM Feature #14126 (New): Quality monitoring graph scale adjustment
- If possible, it would be nice if the scale of the packet loss side of the onitoring graph was not the same as the lat...
03/18/2023
-
09:36 PM Bug #13985: Telegraf error After Update PFSense to 23.01
- Unable to replicate in pfSense CE 2.7. Possible it's just an issue on Plus for some reason.
-
- Hello,
What settings do you have enabled and what page were you on that you clicked save to cause this issue? I'v...
03/16/2023
-
07:59 PM Bug #12399: WireGuard v0.1.5 - Tunnel Will Never Handshake Again After WAN Reset
- Prime BDE wrote in #note-28:
> Nunya Business wrote in #note-27:
> > This problem has returned with the current ver... -
02:49 AM Feature #14101: Add Zabbix 6.4 packages
- Should there be any help needed, I happen to be the maintainer of all zabbix ports.
-
- Crash report begins. Anonymous machine information:
amd64
14.0-CURRENT
FreeBSD 14.0-CURRENT #1 devel-main-n2558... -
- Hello, I have squid+SG on Pfsense 2.7-dev, testing.
I was trying to do a little change and went I press 'SAVE' butto...
03/15/2023
-
09:45 AM Bug #14113 (Duplicate): PHP Error: /usr/local/pkg/avahi/avahi.inc:76
- Duplicate of #14019
-
02:22 AM Bug #14113 (Duplicate): PHP Error: /usr/local/pkg/avahi/avahi.inc:76
- Just updated my pfsense box to 23.01 from 22.05. Everything was going smoothly, but on my first login i received a no...
03/14/2023
-
01:42 PM Bug #14075: Using the ``Transparent ClientIP`` option in HAproxy results in kernel panics
- I have returned ipfw to development snapshots so we can work on replicating and testing there. It is not possible to ...
-
10:54 AM Bug #14108 (Rejected): Antivirus Bases showing outdated main.cvd with a version dated year 2021
- Per ClamAV's website:
"ClamAV signatures come in a variety of formats, one for each of the distinct detection method...
03/13/2023
-
05:27 PM Feature #14101 (Resolved): Add Zabbix 6.4 packages
- https://www.freshports.org/net-mgmt/zabbix64-agent/
https://www.freshports.org/net-mgmt/zabbix64-proxy/
-
- Hi
I understand that there is an order in how firewall rules are used but my suggestion is not for altering that.
... -
- Also:...
03/12/2023
-
04:02 PM Bug #13043: OSPF over Wireguard interface doesn't populate neighbors after reboot
- Hi,
just wanted to confirm. I can reproduce this issue on all of my installations so far. Mostly PFsense CE 2.6.0 ... -
- Duplicate of #14024
-
01:28 AM Regression #14097 (Duplicate): Upgrade to 23.01: PHP Fatal error: Uncaught TypeError: Unsupported operand types: string / int in /etc/inc/util.inc
- After the upgrade to version 23.01-RELEASE I right away got a message from the Crash reporter:...
03/11/2023
-
- It looks like a recent change in sqlite broke vnstat which leads to Status_Traffic_Totals not working:
https://for... -
02:05 PM Bug #14094: HAProxy "Write to Disk" files not being saved
- Christopher Cope wrote in #note-2:
> The files are not wrote unless HAProxy is enabled, and the backend / frontend a... -
- Ryan V wrote:
> pfSense v2.6.0, HAProxy package v0.61_7.
>
> I am trying to save a map file via the Files tab in ... -
- Replying to add that nothing helpful is showing in the logs found in Status > System Logs:...
-
- pfSense v2.6.0, HAProxy package v0.61_7.
I am trying to save a map file via the Files tab in the HAProxy GUI. I ad... -
-
- Yes, now I could install snort, thanks!!!
03/10/2023
-
- This is likely a bug in ipfw, which was included in 23.01. 23.05 does not contain the ipfw kernel module.
23.01:
... -
- I checked the Suricata port and it still uses luajit:luajit-openresty. Both work now.
-
07:00 AM Bug #14088: pfsense 2.7-dev pfSense-pkg-snort installation failed!
- Christian McDonald wrote in #note-3:
> Thanks Bill for the history, that was helpful.
>
> I set the luajit-openre...
03/09/2023
-
- Thanks Bill for the history, that was helpful.
Honestly one of these days I need to audit the port options that we h... -
- Christian McDonald wrote in #note-1:
> This also impacts 23.05 snapshots.
>
> We currently build nginx with LUA supp... -
- This also impacts 23.05 snapshots.
We currently build nginx with LUA support (which we don't use). Snort also depend... -
- Hello.
I want to test snort on pfsense 2.7-dev latest version
But I receive this error:
>>> Installing pfSen... -
10:57 AM Regression #14043 (Feedback): Netgate Firmware Upgrade fails to mount EFISYS
- Fixed in plus as of 67fef1ab045a. /mnt and /boot/efi are both unmounted prior to mounting the ESP at /mnt.
03/08/2023
-
07:06 AM Feature #14081 (New): Nagios
- Hello,
I have a problem with the netgate in version 23.01 for Nagio monitoring.
After researching the problem of...
03/07/2023
-
08:51 AM Bug #12399: WireGuard v0.1.5 - Tunnel Will Never Handshake Again After WAN Reset
- Nunya Business wrote in #note-27:
> This problem has returned with the current version of the Wireguard package, 1.1...
03/06/2023
-
- The current text is correct. There is no need to suppress anything, it's clearly explained in the result string.
E... -
- the purpose of the debug button is...
03/05/2023
-
- Report from a Netgate 7100 after upgrading to @23.01@.
Before disabling the @Transparent ClientIP@ option in hapro... -
01:52 PM Bug #14058: Update vendor=on triggers installation failure
- Thanks Chris. Let’s wait and see then.
03/04/2023
-
08:17 PM Todo #14073 (Confirmed): Shalla block list is offline but still available in pfBlocker
- The Shalla Services blocklist went offline permanently in January 2022. It's still available as a list option in the ...
-
- Tested on 2.2_4. I don't see reproduction steps, so I'm assuming this was triggered on install or when navigating to...
-
- Yep very sure.
I even ran it through truss and watched the fetch calls be made and return successfully.
I waa a... -
- Are you sure you selected „update vendor list“ in the arpwatch settings before trying to reproduce it?
03/03/2023
-
05:40 PM Bug #13421: Stunnel certificate does not refresh
- Thanks for the work. Added to my pfsense and will see at the next refresh in a few days if it is working.
-
-
- Attached here is the updated package with the fix.
We are testing another fix that is blocking publishing updated ... -
- Fixed.
https://github.com/pfsense/FreeBSD-ports/commit/78cff659895de3b5244c650fa74eec2fd975387e
Look for package ve... -
06:24 AM Regression #14064: Upgrading to 23.01 breaks Tailscale on the SG-3100 on 23.01
- Exactly the same thing happening here on my SG-3100
Mar 3 07:10:40 php-fpm 27594 /pkg_edit.php: The command '/u... -
01:54 AM Regression #14064 (Resolved): Upgrading to 23.01 breaks Tailscale on the SG-3100 on 23.01
- Users are reporting that Tailscale will not start/operate on the NetGate SG-3100 appliance after upgrading to pfSense...
-
- I pushed a fix, it will be in the next build of the package.
03/02/2023
-
04:40 PM Bug #13421: Stunnel certificate does not refresh
- I have experienced this problem in pfSense plus 22.05 / stunnel 5.50_11.
I "solved" it via brute force, but making t... -
04:38 PM Feature #14063 (New): FileBeats for pfsense
- Is it possible to create the GUI for the filebeat package in order to export suricata/snort logs to a SIEM stack or a...
-
- I am not able to reproduce this on 23.05 snapshots. I'm not sure it is worth the effort in fixing if it already works...
-
-
- Marking as bogus until upstream supports this on FreeBSD
-
-
- Marking bogus as this is now quite old. WireGuard upgrades seem to be working fine.
-
-
06:53 AM Bug #10436: softflowd no longer sends flow data after upgrade (v0.9.9_1 -> v1.0.0)
- I suppose that this redmine issue 10436 could be closed if Netgate make available the previous version (from pfsense ...
03/01/2023
-
07:28 PM Feature #12502: Option to include Syslog-ng Configuration Library (scl)
- I didn't want to wait and did this:...
-
- I am getting the same problem even though "Disable cron" is on and is correctly referenced in the PHP. It reappeared ...
-
- the custom_php_install command fails during pkg upgrade/install if the "Update Vendor" config option is on....
-
- Error is no longer relevant to current code base.
-
- PR merged, thanks!
-
- PR merged, thanks!
-
- I downgraded softflowd, so I'm not using 1.2.6_1, this is the reason for it not showing in my package manager.
I'm us...
02/28/2023
-
11:01 PM Bug #10436: softflowd no longer sends flow data after upgrade (v0.9.9_1 -> v1.0.0)
- Mark Hassman wrote in #note-11:
> Marcelo Cury wrote in #note-10:
> > Can someone test this with 23.01 snaps on the... -
- I tested and noticed that softflowd processes are dying.
So, I decided to test an older version, but doing this not r... -
- Marcelo Cury wrote in #note-10:
> Can someone test this with 23.01 snaps on the SG-3100 ?
Confirmed - softflowd i... -
- Some minutes after configuring a firewall rule, the pfBlockerNG cron job ran and incorrectly modified one of the floa...
-
-
-
-
-
-
-
- A pull request containing the fix for this issue has been submitted here: https://github.com/pfsense/FreeBSD-ports/pu...
-
- A pull request containing the fix for this issue has been submitted here: https://github.com/pfsense/FreeBSD-ports/pu...
02/27/2023
-
- A default UFS install also mounts the EFI partition by default:...
-
- The Netgate Firmware Upgrade package can on 4100/6100/8200 if the EFI partition is already mounted.
The webgui outpu... -
- Additional report:...
-
01:16 PM Bug #10692: PIMD starts twice at boot
- I still see things which are strange running the actual 2.7 build in combination with the latest pimd beta from githu...
-
- I will work on this and submit a pull request containing the fix.
-
- On the PASS LIST tab, user-generated custom Pass Lists are denoted as "Assigned" when the Pass List name is assigned ...
-
- I will work on this and submit a pull request containing the fix.
-
- Some time back the Pass List logic in Suricata was changed to allow the addition of multiple custom IPs and/or aliase...
-
08:24 AM Bug #13997: NUT Package and 23.01
- I have applied the workaround for now per https://forum.netgate.com/topic/102959/nut-package/1072?_=1677507452044&lan...
-
- Also related forum thread https://forum.netgate.com/topic/102959/nut-package/1052?lang=en-US
02/25/2023
-
10:10 PM Todo #14038: Make more informative counter of selected interfaces
- P.s.
The dimension of this drop-down selectors in WebGUI allow to do this without breaking whole interface view on... -
- Hi pfSense team!
In WebGUI -> in “DNS Resolver” package -> “General settings” -> both selectors: “Network Interfac... -
09:35 PM Bug #10692: PIMD starts twice at boot
- *not* seeing this happen with pimd 0.0.3_6 on 23.05.a.20230224.0600
-
- updating APCUPSd package to 0.3.92_1 does not produce this issue any longer when battery charge <100%
-
- Fix merged, will be in builds soon (might be a couple days)
-
- I was able to reproduce this by forcing the battery charge < 100. Not sure what the original logic is trying to do th...
-
- Fix merged, will be in builds soon (might be a couple days)
-
- This is from the degree symbol the package adds into the temperature string. At some point it changed and is now hand...
-
12:16 PM Feature #14032: Neighbor Discovery Proxy (NDproxy)
- Yuki Hiramatsu wrote:
> ISPs around the world are making effective use of IPv6.
> DHCPv6-PD and others are already ... -
- ISPs around the world are making effective use of IPv6.
DHCPv6-PD and others are already supported, but pfsense has ... -
- Seeing same bug / issue...
-
- PR merged, thanks!
02/24/2023
-
- A pull request containing the fix for this issue has been submitted here: https://github.com/pfsense/FreeBSD-ports/pu...
-
- Config array reference variables are used in the post-install migration code of the package to iterate configured int...
-
-
10:15 AM Regression #13978: PHP errors with squidGuard
- see the crash log below...
-
- This also impacts pfblocker-ng and squid. I suspect it has to do with what appears to be an incompatibility with php ...
-
- As of 2-24-23 this has been resolved with . . .
"Empty script bytecode-334.cdiff, need to download entire databas... -
- This error is also present on package reinstall of Squid Proxy
02/23/2023
-
-
03:50 PM Regression #13884: pfBlockerNG DNSBL TLD option causes reloads to take a long time
- Should be resolved in v3.2.0_3
-
-
- Should be resolved in v3.2.0_3
-
04:48 PM Regression #14024: PHP error in HAProxy Widget with Show Client Traffic enabled
- It is only afecting the Dashboard Widget.
-
- After updating to pfsense plus 23.01 the haproxy dashboard widget is broken when acessing the pfsense web gui behind ...
-
- This error is still present after 24hrs ClamAV will not update currently, This is what Squid is using for Antivirus s...
-
- Side Note: I recently learned to use
cp /tmp/squidGuard_blacklist_update.sh /usr/local/bin/;/usr/local/bin/squidG...
02/22/2023
-
- Squids ClamAV Freshclam update will not complete and displays error for database version 334. This just started to oc...
-
- In 23.01-REL:...
-
02:58 PM Bug #14018: Service Watchdog keeps monitoring services after thy had been removed
- The items were removed from Service Watchdog, but it still was sending notifications.
Do you have any control over... -
- There is nothing the package can do about that. You added the entry manually, you have to remove it manually.
-
- I suspect it's true for any package, but I tested on pfBlockerNG
Steps:
Have `pfBlockerNG` monitored by `Servic... -
11:50 AM Regression #13970: PHP error in apcupsd widget from UTF-8 string handling
- I'm seeing a similar issue. apcupsd is gathering data from the UPS. The widget is throwing this error after upgrading...
-
- Based on the error in the screenshots this is a duplicate of #13970
-
11:31 AM Bug #14014 (Duplicate): APCUPSD widget not working after pfSense + update to v.23.01
- I opened an new issue on suggestion from rcoleman-netgate in link: https://forum.netgate.com/topic/178106/apcupsd-wid...
-
11:00 AM Bug #14003: Reports/Alerts Issue with IPv6 Addresses
- Still seeing them after removing ip_cache.sqlite.
-
It could be that the old records are in the sqlite cache file?
sqlite3 /var/db/pfblockerng/ip_cache.sqlite ....-
- Still occurring after 3.2.0_3
Also available in: Atom