Project

General

Profile

Activity

From 04/28/2023 to 05/27/2023

05/27/2023

08:54 PM Bug #14427 (Resolved): LLDPD & LADVD permissions with RAM Disks
LLDPD cannot enable agent-x support with RAM Disks enabled
@May 27 10:55:19 lldpd 3881 Warning: Failed to conne...
Jordan G
05:47 PM Bug #14426 (Resolved): PHP errors in Lightsquid
PHP errors
PHP ERROR: Type: 1, File: /usr/local/www/sqstat/sqstat.php, Line: 137, Message: Uncaught TypeError: Canno...
Jonathan Lee
04:38 PM Bug #12338 (Resolved): RRD Summary does not report data on 3100
Jim Pingle
06:26 AM Bug #12338: RRD Summary does not report data on 3100
I see that it finally got fixed in version 23.05 on my 3100 box. Mihai B

05/26/2023

10:19 PM Feature #14423 (New): haproxy 2.7 QUIC support (+ maybe LUA 5.4?)
Hello,
I appreciate all pfSense+ updates and efforts Team is doing (I am relatively new user, but I am advocating ...
Pawel Piaskowy
08:29 PM Bug #12338: RRD Summary does not report data on 3100
Flole Systems wrote in #note-8:
> There was another bug that was caused when the locale was changed as rrdtool used ...
Jim Pingle
08:20 PM Bug #12338: RRD Summary does not report data on 3100
There was another bug that was caused when the locale was changed as rrdtool used the wrong decimal separator and PHP... Flole Systems
05:26 PM Bug #12338 (Feedback): RRD Summary does not report data on 3100
Fixed in version 2.2 of the package: https://github.com/pfsense/FreeBSD-ports/commit/961bbfe5878928af449b4b91f1e486f8... Jim Pingle
05:19 PM Bug #12338 (In Progress): RRD Summary does not report data on 3100
After some more digging I found that this isn't related directly to Unix timestamps yet but to rrdtool on ARM. For so... Jim Pingle
04:38 PM Bug #13811: Youtube content getting filtered on Squid when none is Selected
https://github.com/pfsense/FreeBSD-ports/pull/1266
Submitted new Pull this is still present in 23.05
Jonathan Lee
12:03 PM Regression #14418: RRD Summary prints zero in all data fields
Denny Page wrote in #note-2:
> The epoch issue appears to be a perverse and long standing (for rrdtool) issue:
>
...
Jim Pingle
05:46 AM Regression #14418: RRD Summary prints zero in all data fields
The epoch issue appears to be a perverse and long standing (for rrdtool) issue:
https://github.com/oetiker/rrdtool...
Denny Page
11:59 AM Bug #14407 (Resolved): pfSense-pkg-syslog-ng package error
Jim Pingle
09:20 AM Bug #14407: pfSense-pkg-syslog-ng package error
Can confirm it working properly on
...
Lev Prokofev
08:50 AM Bug #14407: pfSense-pkg-syslog-ng package error
It is fixed now and the service is working properly. Kaan Kayan
11:54 AM Regression #14389 (Resolved): syslog-ng cannot save config
Tested the package version 1.16.
Config modifications were successfully saved.
I am marking this ticket resolved.
Danilo Zrenjanin

05/25/2023

10:23 PM Bug #14405: PHP Crash report
Will do. Thanks. Jens Kristensen
07:33 PM Regression #14418 (Feedback): RRD Summary prints zero in all data fields
Fixed in version 2.1 of the package: https://github.com/pfsense/FreeBSD-ports/commit/0049587898b2c192d95b2d1359941daf... Jim Pingle
06:26 PM Regression #14418 (Resolved): RRD Summary prints zero in all data fields
When RRD Summary tries to fetch data for specific time ranges, the commands it runs fail.
For example it tries to ...
Jim Pingle
07:24 PM Bug #12338: RRD Summary does not report data on 3100
This is because the 3100 is armv7 which is a 32-bit platform and there are some issues with Unix timestamps on there ... Jim Pingle
06:32 PM Bug #14419 (Closed): PHP error when trying to access pfBlockerNG configuration
... Marcos M
06:27 PM Bug #14326 (Rejected): RRD Summary 2.0_2 is not showing any data
I can't reproduce this here but given that the interface name you show is printed in lower case I'm guessing it was m... Jim Pingle
05:48 PM Feature #12502 (Feedback): Option to include Syslog-ng Configuration Library (scl)
Implemented in pkg version 1.16: https://github.com/pfsense/FreeBSD-ports/commit/d848b6da1957d728a867b9010ed3795d946b... Jim Pingle
05:04 PM Feature #12502 (In Progress): Option to include Syslog-ng Configuration Library (scl)
Jim Pingle
05:48 PM Regression #14389 (Feedback): syslog-ng cannot save config
Fixed in pkg version 1.16: https://github.com/pfsense/FreeBSD-ports/commit/d848b6da1957d728a867b9010ed3795d946b68c4 Jim Pingle
05:03 PM Regression #14389 (In Progress): syslog-ng cannot save config
Jim Pingle
04:43 PM Regression #14389: syslog-ng cannot save config
I can reproduce it here on a clean install.
Better format of the error message:...
Jim Pingle
05:48 PM Bug #14407 (Feedback): pfSense-pkg-syslog-ng package error
Fixed in pkg version 1.16: https://github.com/pfsense/FreeBSD-ports/commit/d848b6da1957d728a867b9010ed3795d946b68c4 Jim Pingle
05:04 PM Bug #14407 (In Progress): pfSense-pkg-syslog-ng package error
Jim Pingle
04:59 PM Bug #8295 (Closed): syslog-ng logrotates tls files
This is quite old and the regex has changed since this was put in. No recent complaints/updates. Closing. Jim Pingle
04:56 PM Bug #8229 (Closed): syslog-ng stops parsing logs after logrotate run
Very old report and no recent updates, lots of changes since then. If you can reproduce it on a current version, plea... Jim Pingle
04:55 PM Bug #8180 (Closed): syslog-ng default log file
This appears to be working on the current package, I see it setup logrotate with a config file and cron job. It was l... Jim Pingle
04:53 PM Bug #8705 (Closed): Syslog-NG error in latest snapshot
Probably similar to #14389 but this is so old and lacks detail it's hard to say. Jim Pingle
04:02 PM Regression #14024 (Feedback): PHP error in HAProxy Widget with Show Client Traffic enabled
Pushed a fix for the widget error and also fixed some broken logic in the widget that was working by accident. New ve... Jim Pingle
03:51 PM Regression #14024 (In Progress): PHP error in HAProxy Widget with Show Client Traffic enabled
Jim Pingle
10:15 AM Bug #14199: ACME - Issue with corrupted cert
Problem continues after update to 23.05 Juan Francisco Rodriguez Garcia

05/24/2023

06:37 PM Bug #14413 (Duplicate): After upgrade to 23.05 RELEASE, Syslog-NG won't start
Duplicate of #14389 Jim Pingle
06:08 PM Bug #14413 (Duplicate): After upgrade to 23.05 RELEASE, Syslog-NG won't start
Low priority for me, but thought I'd mention. Cannot start manually, un/reinstalled no difference.
Running *servic...
Richard Rovelstad
12:24 PM Bug #14411 (Duplicate): syslog-ng cannot start on 23.05
The error in that thread already has an open issue: #14389 Jim Pingle
06:17 AM Bug #14411 (Duplicate): syslog-ng cannot start on 23.05
Syslog-ng can no longer start after upgrading to 23.05. It throws a parsing error that seems to relate to faylt gener... Tue Madsen
01:13 AM Bug #14409: pfBlockerNG Cron Redundantly Updates pfSense Configuration When DNSBL is Disabled Due to Faulty Virtual IP Count
Another quirk seems to be that there is some other bug that writes to config on cron until you toggle some DNSBL sett... LTC Tech
12:15 AM Bug #14409 (New): pfBlockerNG Cron Redundantly Updates pfSense Configuration When DNSBL is Disabled Due to Faulty Virtual IP Count
pfBlockerNG: 3.2.0_4
pfSense Plus: 23.01
Related forum post:
https://forum.netgate.com/topic/174231/pfblockerng-...
LTC Tech

05/23/2023

09:32 PM Bug #12808: Wireguard Gateways disabled when Wireguard Service is Manually Restarted
+1 for this bug still existing, through googling it appears to be associated with people who have PPPoE WAN connections. mrpops2ko .
06:58 PM Bug #14405: PHP Crash report
I dont see anything odd in the logs. If this PHP error returns, try to review the log for the event so we can see wha... BBcan177 .
06:09 PM Bug #14405: PHP Crash report
I am by no means a pfSense or BSD expert, but I managed to get the filter.log files (there are several) attached.
...
Jens Kristensen
04:40 PM Bug #14405: PHP Crash report
If this error persists, we need to get the line in the firewall log "/var/log/filter.log" that corresponds to the err... BBcan177 .
09:55 AM Bug #14405: PHP Crash report
I'm using BSD. Don't think I ever changed any logging settings. Jens Kristensen
03:11 AM Bug #14405: PHP Crash report
What firewall log type are you using? "syslog" or "BSD"?
For some reason there are "\x00" characters in the pfSens...
BBcan177 .
02:48 PM Bug #14407 (Resolved): pfSense-pkg-syslog-ng package error
Syslog-ng package throws an error during the installation like below.
New packages to be INSTALLED:
pfSense-pk...
Kaan Kayan
12:46 AM Bug #14406: Squid Proxy version 0.4.46 Missing Error subfolder and files for "en" or "en-usa" and all other languages.
Path I have taken to correct:
1. full remove and reinstall of Squid and Squidguard package error returned
2. copie...
Jonathan Lee
12:43 AM Bug #14406 (Resolved): Squid Proxy version 0.4.46 Missing Error subfolder and files for "en" or "en-usa" and all other languages.
After 23.05 update and new Squid version 0.4.46 installed errors started showing,
"ERROR: loading file 9;/usr/lo...
Jonathan Lee

05/22/2023

11:27 PM Bug #14405: PHP Crash report
... Jim Pingle
10:18 PM Bug #14405 (New): PHP Crash report
Report attached. All I have. Let me know if you need more.
ver. 23.01.
Jens Kristensen
02:13 AM Regression #13978 (Feedback): PHP errors with squidGuard
Fixed on squid 0.4.46 and squidGuard 1.16.19; these should be available on the next ports build. Marcos M
02:10 AM Regression #13984 (Feedback): PHP errors with squid
Fixed on squid 0.4.46 and squidGuard 1.16.19; these should be available on the next ports build. Marcos M

05/21/2023

04:43 PM Regression #13978: PHP errors with squidGuard
I just found the problem and the solution.
*Problem:*
PHP ERROR: Type: 1, File: /usr/local/pkg/squidguard.inc, ...
EDUARDO RODRIGUEZ ROMERO
09:18 AM Regression #13984: PHP errors with squid
I just found the problem and the solution.
Problem:
The squidguardtime settings it's empty
Solution:
...
EDUARDO RODRIGUEZ ROMERO
06:45 AM Regression #13984: PHP errors with squid
Can please somebody help me. This is really important for me because at this moment i dont have any restriction for t... EDUARDO RODRIGUEZ ROMERO
06:43 AM Regression #13984: PHP errors with squid
I have the same problem with the squidguard package, i try to reinstall the squidguard package and i received the err... EDUARDO RODRIGUEZ ROMERO

05/20/2023

10:52 AM Bug #14369: DNSBL Parsing error when DNSBL Mode "Unbound python mode".
I can't reproduce the errors on 23.01 with pfBlocker 3.2.0_4
Reload went without errors.
Lev Prokofev
10:32 AM Regression #14389: syslog-ng cannot save config
I couldn't reproduce it on:... Danilo Zrenjanin

05/19/2023

05:08 PM Bug #14398 (New): ONBATT Status Missing in apcupsd.widget.php
Description:
The file apcupsd.widget.php is currently lacking the "ONBATT" status. Due to this, when the system is o...
Nick ...
07:57 AM Feature #14101: Add Zabbix 6.4 packages
https://github.com/pfsense/FreeBSD-ports/pull/1263
Looking for a review and hopefully a quick merge into 12.05
Valentin A

05/17/2023

10:23 AM Bug #14390: Squid: SECURITY ALERT: Host header forgery detected
I've written a small Python script to help reliably reproduce and demonstrate this issue.
To simulate an application...
Simon Byrnand

05/16/2023

09:27 AM Bug #14390: Squid: SECURITY ALERT: Host header forgery detected
I can't seem to edit my initial post but wanted to clarify the Squid debug option should be *debug_options ALL,1 rota... Simon Byrnand
09:19 AM Bug #14390 (New): Squid: SECURITY ALERT: Host header forgery detected
In Squid version 3.2 in 2012 a "fix" for a potential security vulnerability involving host header forgery was added, ... Simon Byrnand

05/15/2023

11:38 PM Regression #14389 (Resolved): syslog-ng cannot save config
Trying to save the configuration, even with the default values, in syslog-ng results in an error:... Steve Wheeler
02:12 AM Bug #12808: Wireguard Gateways disabled when Wireguard Service is Manually Restarted
Hi everyone, I know this is closed but I am also experiencing the same issue. Netgate 6100. Just updated to 23.01 (... Allan Dresner

05/14/2023

09:11 AM Bug #14369: DNSBL Parsing error when DNSBL Mode "Unbound python mode".
Thanks for checking it. Hopefully it's fixed then. I'll wait and see what 23.05 does, and come back, if it's still th... Jens Kristensen
02:38 AM Bug #14369: DNSBL Parsing error when DNSBL Mode "Unbound python mode".
Attempted to recreate this in pfSense Plus 23.05 RC with pfBlocker 3.2.0_5. Unable to recreate. Kris Phillips

05/11/2023

05:17 PM Bug #14287: pfBlockerNG does not uninstall cleanly when using RAM disks
No joy with the new 2.2.2 system patches:... Loh Phat
10:08 AM Feature #14372 (New): More advanced filter options on snort interface rules
Hello community,
I think it would make sense to integrate a text search field for the interface rules filter, which ...
Fabian Winzinger

05/10/2023

12:19 PM Bug #14366 (Resolved): Enabling IPv6 DNSBL pfb_dnsbl service startup failure
Jim Pingle
02:37 AM Bug #14366: Enabling IPv6 DNSBL pfb_dnsbl service startup failure
The patch works for me. The DNSBL now starts again. Thank you! Glenn Hall

05/09/2023

09:58 PM Bug #14369: DNSBL Parsing error when DNSBL Mode "Unbound python mode".
pfBlockerNG-devel ver 3.2.0_4 Jens Kristensen
09:50 PM Bug #14369 (Closed): DNSBL Parsing error when DNSBL Mode "Unbound python mode".
Hi,
First, Thank you for this EXCELLENT package!
This may very well be a user-error. In that case I apologize.
...
Jens Kristensen
06:34 PM Bug #14366: Enabling IPv6 DNSBL pfb_dnsbl service startup failure
Patch is in place for development branches and cherry-picked to 23.05. Christian McDonald
06:24 PM Bug #14366 (Feedback): Enabling IPv6 DNSBL pfb_dnsbl service startup failure
Christian McDonald
03:42 PM Bug #14366 (Resolved): Enabling IPv6 DNSBL pfb_dnsbl service startup failure
https://forum.netgate.com/topic/179874/failure-when-starting-pfb_dnsbl-service?lang=en-US Christian McDonald
08:50 AM Bug #14364 (Confirmed): APCUPSD unable to process date string
Hi,
After upgrading on a new install from 2.6.0 to + v23.01 (on amd64 if relevant) I'm unable to use the apcupsd w...
Lloyd Collins

05/07/2023

12:39 PM Feature #9721 (Resolved): add squidclient -h 127.0.0.1 mgr:info output to Diagnostics / Squid and status.php
Tested on 23.01
There is /Services/Squid/Status page and this page has correct /status_squid.php address
I marked t...
Azamat Khakimyanov

05/06/2023

07:57 PM Regression #13984: PHP errors with squid
Thanks for your reply.
For those logs you reviewed the user could not reinstall the package as it would not fully...
Jonathan Lee
04:37 PM Regression #13984: PHP errors with squid
The patch can't be applied to non-existent files, hence (re)installing the package will trigger issues resolved by th... Marcos M
08:42 AM Bug #12705 (Resolved): IPsec Profile Wizard/Apple: IKEv2 VPN with ECDSA server certificate does not connect using generated profile
Tested EAP-TLS using ECDSA certs - works fine
Tested EAP-RADIUS using ECDSA certs - works fine
I am marking this ...
Danilo Zrenjanin
06:52 AM Bug #13632 (Resolved): tailscale does not survive reboot on pfsense with ram disk in use
Danilo Zrenjanin
06:51 AM Bug #13632: tailscale does not survive reboot on pfsense with ram disk in use
Tested against:... Danilo Zrenjanin

05/05/2023

08:36 PM Regression #13984: PHP errors with squid

This patch fixed the issue with the other user ben and the HA use, but the other user Hugo still has issues reinsta...
Jonathan Lee
05:36 AM Bug #14349 (Closed): The ClamAV 0.105.1 got a few vulnerabilities

Current ClamAV 0.105.1 got a few vulnerabilities:
https://blog.clamav.net/2023/02/clamav-01038-01052-and-101-pat...
Lev Prokofev
03:27 AM Feature #10818: UDP Broadcast Relay
I can verify that pkg install *pfSense-pkg-udpbroadcastrelay-1.0.pkg* doesn't work on pfSense 2.6
It would be nice i...
I W

05/04/2023

03:45 PM Feature #10818: UDP Broadcast Relay
Idealy the port would be updated upstream in FreeBSD rather than having to run a pfSense-specific build.
For those a...
Marcos M
04:32 AM Feature #10818: UDP Broadcast Relay
The upstream was updated to add additional features to include options such as --allowcidr and --blockcidr:
https://...
James G
02:02 PM Feature #9749: 95th percentile missing for quality in monitoring
Would still like to see this fixed or implemented Michael Kellogg
12:11 AM Bug #14341 (New): Squid Cache Table Logs Showing incorrect date
Squid - Cache Logs
Date-Time Message
31.12.1969 16:00:00
31.12.1969 16:00:00
31.12.1969 16:00:00
31.12.1969 1...
Jonathan Lee
12:07 AM Regression #13984: PHP errors with squid
Thanks, I appreciate you. I posted the information about this to the Netgate forum again. Jonathan Lee

05/03/2023

11:43 PM Regression #13984: PHP errors with squid
This should resolve the error, thanks! Marcos M
10:19 PM Regression #13984: PHP errors with squid
I got another user https://forum.netgate.com/user/hugoeyng to test with their PHP errors this was his result.
@jona...
Jonathan Lee
08:42 PM Regression #13984: PHP errors with squid
Installed and no errors so far. System running.
Thank you. This is with the change you made.
Jonathan Lee
03:00 PM Regression #13984: PHP errors with squid
Thanks for the test (no need to post patch details). Feel free to try again with the updated squidGuard patch. Marcos M
06:16 AM Regression #13984: PHP errors with squid
It just dawned on me I use both modes on Squid transparently and SSL Intercept is this a problem with me using this p... Jonathan Lee
06:01 AM Regression #13984: PHP errors with squid
Other Patch debug does not show 64 in debug Jonathan Lee
06:00 AM Regression #13984: PHP errors with squid
<removed patch success details> Jonathan Lee
05:52 AM Regression #13984: PHP errors with squid
I ran into an error and had to revert back. Attached is the error. Jonathan Lee
05:47 AM Regression #13984: PHP errors with squid
One error after reboot
Jonathan Lee
05:34 AM Regression #13984: PHP errors with squid
I appreciate all you do. Testing attached patches, I noticed you adjusted clam AV or Squids antivirus to store on the... Jonathan Lee
03:41 AM Regression #13984 (Pull Request Review): PHP errors with squid
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/337
Patch for both squid and squidGuiard are att...
Marcos M
08:38 PM Regression #13958 (Resolved): Snort exits with signal 10 on arm32
This looks good in current snaps:
pfSense-23.05.b.20230503.0600
pfSense-pkg-snort-4.1.6_7
snort-2.9.20_3
Steve Wheeler
04:04 AM Bug #14287: pfBlockerNG does not uninstall cleanly when using RAM disks
Chris W wrote in #note-7:
> It looks like the issue you're seeing is due to a greater PHP problem as a result of u...
Loh Phat

05/02/2023

07:48 PM Regression #13958 (Feedback): Snort exits with signal 10 on arm32
patches for armv7 are now in our tree. Christian McDonald
04:36 PM Regression #13984: PHP errors with squid
Additional errors:... Marcos M
12:21 PM Feature #14314: Keep DDNS entries on config change
https://github.com/pfsense/FreeBSD-ports/pull/1256 Andreas Pross

05/01/2023

03:28 PM Todo #14333 (New): Reduce config writes
When the service is started, multiple config writes are performed. System logs (reversed) show:... Marcos M
12:40 PM Bug #14330: Arpwatch - Cron "Broken pipe" Errors
Jim Pingle wrote in #note-1:
> Not a bug in arpwatch, it's from #14016 -- see that issue for details. There is a fix...
James Blanton
12:28 PM Bug #14330 (Rejected): Arpwatch - Cron "Broken pipe" Errors
Not a bug in arpwatch, it's from #14016 -- see that issue for details. There is a fix in the recommended patches area... Jim Pingle
12:26 PM Bug #14330 (Rejected): Arpwatch - Cron "Broken pipe" Errors
I've got 11 XG-7100 1U's that I've upgraded to 23.01, all of which have Arpwatch installed. Since upgrading them, I'm... James Blanton

04/30/2023

04:40 PM Bug #14287: pfBlockerNG does not uninstall cleanly when using RAM disks
23.01 is the current stable release for my Netgate 3100
Version 23.01-RELEASE (arm)
built on Fri Feb 10 20:06:58...
Loh Phat
08:40 AM Bug #14315: Routes are not exposed on Tailscale when an empty route entry exists in the GUI
Tested on 23.01 and I can confirm that. aleksei prokofiev

04/29/2023

10:32 PM Bug #14287: pfBlockerNG does not uninstall cleanly when using RAM disks
How did you arrive at 23.01, from a previous CE or Plus version?
I'm not able to reproduce this on a 23.01 Plus inst...
Chris W
07:21 PM Bug #12705: IPsec Profile Wizard/Apple: IKEv2 VPN with ECDSA server certificate does not connect using generated profile
Tested on the MacOS Monterey, Version 12.6.3.
I defined certs on pfSense using ECDSA instead of RSA. IPsec Authe...
Danilo Zrenjanin
04:06 PM Bug #14326 (Rejected): RRD Summary 2.0_2 is not showing any data
Tested on 22.01, 22.05 and 23.01 - all with RRD Summary version 2.0_2
During several weeks I tried but RRD Summary...
Azamat Khakimyanov
04:03 PM Bug #11563: BIND GUI writes TXT records > 255 characters
It seems a bit outdated but I am currently working on a fix for that.
It just needs some testing.
https://github.com...
Andreas Pross
03:13 PM Todo #12865 (Resolved): RRD Summary improvements
Tested on 23.01
I saw correct time period and interface names with 'OPTx' in brackets.
I marked this ToDo as ...
Azamat Khakimyanov
10:33 AM Bug #13878 (Resolved): IPsec Profile Wizard/Apple: Generated profile does not contain the correct ``AuthenticationMethod`` for IKEv2 EAP configurations
Danilo Zrenjanin
10:33 AM Bug #13878: IPsec Profile Wizard/Apple: Generated profile does not contain the correct ``AuthenticationMethod`` for IKEv2 EAP configurations
Tested on: ... Danilo Zrenjanin

04/28/2023

03:11 PM Feature #14324 (New): pfBlockerNG to use geoLite "country" instead of "registered_country"
Hello,
Explanations here: https://forum.netgate.com/topic/179567/country-vs-registered-country/4?_=1682682466761
...
Pierre Chopot
02:28 PM Feature #11719: ACME - Create script for DNSExit API
After a few years updating TXT records manually every 2 months I finally could (with the help of chat gpt) setup my c... drun kly
12:34 PM Feature #14321 (Closed): Add UPS information to LCDproc screen
Hi,
I'd like to add a new screen to LCDproc that reads the UPS information from NUT.
Should show the current U...
Geo Rou
 

Also available in: Atom