Activity
From 05/29/2023 to 06/27/2023
06/27/2023
-
10:22 PM Bug #14514 (Duplicate): SNORT randomly starts blocking the IP address on the interface that it is residing on
- Hello fellow pfsense Redmine team members,
I have found an issue where SNORT starts to block out my ip address th... -
03:01 PM Feature #14512 (New): Basic Auth through GUI
- Add the ability through the GUI to provide basic authentication for either frontend or backend pools
You can hack ...
06/26/2023
-
10:03 PM Bug #14510 (New): match rpki invalid What is actually executed is match rpki valid
- when i setup match rpki invalid for deny, then actually executed is match rpki valid for deny.
please your check a... -
06:50 PM Bug #14509 (Not a Bug): PHP Error in ``vpn_openvpn_export.php``
- When clicking 'VPN >> OpenVPN >> Client Export' the following issue occurs (Intel Celeron 1005M):
----------------... -
12:27 PM Feature #12502 (Resolved): Option to include Syslog-ng Configuration Library (scl)
06/25/2023
-
04:48 AM Todo #12351: Remove non-functional feeds
- https://cybercrime-tracker.net/fuckerz.php - 500 server error
https://cybercrime-tracker.net/all.php - 500 server er... -
04:32 AM Feature #12502: Option to include Syslog-ng Configuration Library (scl)
- Looks good in syslog-ng v1.16, radio box is present at bottom of config
!clipboard-202306242332-gmfwm.png!
06/24/2023
-
06:25 PM Bug #14364: APCUPSD unable to process date string
- Kris Phillips wrote in #note-1:
> Tested with an APC UPS on 23.05 with the latest apcupsd package. Unable to reprod...
06/23/2023
-
05:15 PM Bug #14496: FATAL ERROR: /usr/local/etc/snort/snort_11005_mvneta1/snort.conf(405) Please activate arpspoof before trying to use arpspoof_detect_host.
- Thanks for all you do, I appreciate you.
-
03:33 PM Bug #14496 (Resolved): FATAL ERROR: /usr/local/etc/snort/snort_11005_mvneta1/snort.conf(405) Please activate arpspoof before trying to use arpspoof_detect_host.
- PR Merged
-
01:55 PM Bug #14496: FATAL ERROR: /usr/local/etc/snort/snort_11005_mvneta1/snort.conf(405) Please activate arpspoof before trying to use arpspoof_detect_host.
- A fix for this issue has been submitted in Pull Request 1269: https://github.com/pfsense/FreeBSD-ports/pull/1269. Thi...
-
03:32 PM Bug #14469 (Resolved): Snort Advanced config pass-through encodes entries
- PR Merged
-
01:55 PM Bug #14469: Snort Advanced config pass-through encodes entries
- A fix for this issue has been submitted in Pull Request 1269: https://github.com/pfsense/FreeBSD-ports/pull/1269. Thi...
-
03:32 PM Bug #14475 (Resolved): PHP Error: suricata_check_for_rule_updates.php:820
- PR Merged
-
01:53 PM Bug #14475: PHP Error: suricata_check_for_rule_updates.php:820
- A fix for this has been submitted in Pull Request 1271: https://github.com/pfsense/FreeBSD-ports/pull/1271. This issu...
-
08:23 AM Bug #14504 (Incomplete): FTP_Client_Proxy package doesn't create firewall rule
- I've installed FTP_Client_Proxy 0.3_8 on pfSense plus 23.05. I enabled the FTP client proxy services, but it doesn't ...
06/22/2023
-
11:17 PM Bug #14469: Snort Advanced config pass-through encodes entries
- I was able to replicate this issue. It is caused by a misplaced early Base64 decode of a config parameter. A fix will...
-
10:24 PM Bug #14475: PHP Error: suricata_check_for_rule_updates.php:820
- Not sure exactly why the input string is too long in this case, but I did find in the PHP interpreter source code tha...
-
12:46 PM Bug #14496: FATAL ERROR: /usr/local/etc/snort/snort_11005_mvneta1/snort.conf(405) Please activate arpspoof before trying to use arpspoof_detect_host.
- The code used to generate the @snort.conf@ file for an interface should validate one of the ARP preprocessor options ...
06/21/2023
-
11:56 PM Bug #14498 (New): php errors when looking at snort active rules
- Hello Fellow Redmine community members,
I found another php error when I go to look at active rules with Snort fo... -
09:57 PM Bug #14495 (Not a Bug): Snort does not contain DetectorFini() function
-
07:53 PM Bug #14495: Snort does not contain DetectorFini() function
- I did not know this. Thanks for the reply. I have attached this for future reference should someone search for the sa...
-
07:11 PM Bug #14495: Snort does not contain DetectorFini() function
- This is not a bug. This is due to having incorrect user-supplied text rules for the current version of the OpenAppID ...
-
04:06 PM Bug #14495 (Not a Bug): Snort does not contain DetectorFini() function
- Detector cisco_content_group_dummy_detectors.lua: does not contain DetectorFini() function
I have been getting t... -
07:35 PM Bug #14496: FATAL ERROR: /usr/local/etc/snort/snort_11005_mvneta1/snort.conf(405) Please activate arpspoof before trying to use arpspoof_detect_host.
- I had to enable unicast Arp checks for the error to stop. After that it never returned. I was under the impression th...
-
07:28 PM Bug #14496: FATAL ERROR: /usr/local/etc/snort/snort_11005_mvneta1/snort.conf(405) Please activate arpspoof before trying to use arpspoof_detect_host.
- I am unable to replicate this issue. I installed the latest 2.7.0-BETA of CE on a virtual machine, enabled the ARP Sp...
-
04:54 PM Bug #14496 (Resolved): FATAL ERROR: /usr/local/etc/snort/snort_11005_mvneta1/snort.conf(405) Please activate arpspoof before trying to use arpspoof_detect_host.
- Hello fellow redmine team can you please help I am getting some weird bug errors. I have apr spoof detection enabled ...
-
12:07 PM Regression #14493: FRR,PHP errors when deleting neighbor
- Additional note.
If you disable the FRR service - you can delete anything without errors. -
06:47 AM Regression #14493: FRR,PHP errors when deleting neighbor
- I can confirm that error
Tested on... -
06:11 AM Regression #14493 (Resolved): FRR,PHP errors when deleting neighbor
- Steps to reproduce:
Go to Services=>FRR=>BGP=>Neighbors
1)Add new neighbor
2)Set IP\name
3)Set remote AS
4)S... -
12:07 PM Regression #14494: FRR,PHP errors when deleting AS-path
- Additional note.
If you disable the FRR service - you can delete anything without errors. -
11:59 AM Regression #14494 (Resolved): FRR,PHP errors when deleting AS-path
- Steps to reproduce:
1)Create AS-path list
2)Delete As-path list
Looks like related to https://redmine.pfsense.... -
11:39 AM Bug #13873: PHP Errors on FRR Global Settings
- I get this error on 23.05, without any config except enabling the service and setting the password. PHP error log att...
-
12:33 AM Bug #14480: Faulty IDS rules can prevent Snort from starting
- side note: I think found out why my codespaces environment won't run, I have the free account. It is similar to https...
06/20/2023
-
06:43 PM Bug #14491 (Confirmed): FRR not starting with AgentX enabled
- After upgrading to pfSense 2.7.0 Beta, FRR wont't start with AgentX enabled in the configuration.
Syslog...
06/19/2023
-
09:06 AM Bug #14489 (New): FRR needs delayed startup
- Hi,
FRR is currently started before completing Wireguard tunnels initialization:
[FRR startup]
*2023-06-17 18... -
05:24 AM Bug #14480: Faulty IDS rules can prevent Snort from starting
- I have attached a very simple example of a Java version of try catch. I am positive you know try catch very well. My ...
-
04:35 AM Bug #14480: Faulty IDS rules can prevent Snort from starting
- https://github.com/pfsense/FreeBSD-ports/tree/devel/security/snort
Thanks for the reply again,
I wanted to as...
06/18/2023
-
09:43 PM Bug #14486 (Duplicate): FRR - Changes to VTI tunnels bounce all eBGP peers
-
09:13 PM Bug #14486 (Duplicate): FRR - Changes to VTI tunnels bounce all eBGP peers
- Please reference Bug #14483
I have the option "Ignore IPsec Restart" enabled under Global Settings in FRR.
Any... -
06:29 PM Bug #14480 (Not a Bug): Faulty IDS rules can prevent Snort from starting
-
05:32 PM Bug #14480: Faulty IDS rules can prevent Snort from starting
- The Snort package on pfSense is an open source volunteer maintained contribution. The source code for both the GUI an...
-
02:35 AM Bug #14484 (Resolved): lldpd php error on saving with no interface selected
- use ctrl + click and deselect any interface (previously) highlighted and attempt to save lldpd settings...
06/17/2023
-
11:59 PM Bug #14284 (Incomplete): Wen changing frontend type, there will be invissible leftovers, disturbing defining the new type
- Hello,
What "leftovers" are you referring to? Please provide reproduction step-by-step with what you expect and w... -
03:25 PM Bug #14480: Faulty IDS rules can prevent Snort from starting
- I'll chime in with another view point that I find disturbing. Not classifying this as a bug, or at the least a securi...
-
05:14 AM Bug #14480: Faulty IDS rules can prevent Snort from starting
- Thanks for the reply Bill Meeks,
Please let me attempt to pitch this one more time as a bug and not a feature to y... -
02:53 AM Bug #14480: Faulty IDS rules can prevent Snort from starting
- This is not a bug. The problem described here was caused by a faulty rules update file produced and distributed by a ...
-
12:58 AM Bug #14480: Faulty IDS rules can prevent Snort from starting
- Main issue: Snort fails completely open within this situation. Snort does not function at all during this.
-
05:16 AM Feature #14481: Add Smartphone Base Splice Support Groups Radio Button in "SSL Man In the Middle Filtering"
- Note: some of the regex expressions were mixed up when posting this please ref the screen shots.
-
01:43 AM Feature #14481 (New): Add Smartphone Base Splice Support Groups Radio Button in "SSL Man In the Middle Filtering"
- https://support.google.com/work/android/answer/10513641?hl=en
https://support.apple.com/en-gb/HT210060
Each of ...
06/16/2023
-
09:26 PM Bug #14480: Faulty IDS rules can prevent Snort from starting
- To quote bemeeks,
" _This will have to be fixed by the Emerging Threats rule writers. They will release an updated... -
09:17 PM Bug #14480: Faulty IDS rules can prevent Snort from starting
- To quote valete3. . .
_"Emerging threats released out of band rules update to resolve.
https://community.emergi... -
09:13 PM Bug #14480 (Not a Bug): Faulty IDS rules can prevent Snort from starting
- FATAL ERROR: /usr/local/etc/snort/snort_4851_ix0/rules/snort.rules:19567: Can't use flow: stateless option with other...
-
06:20 PM Bug #10436: softflowd no longer sends flow data after upgrade (v0.9.9_1 -> v1.0.0)
- fyi.. after upgrading to pfsense 23.05 & softflowd 1.2.6_1, stability has returned.. two weeks of uptime so far.
-
09:11 AM Regression #14441: Zabbix Proxy package version 6.0.15 doesn't work in 23.05
- Can confirm, the service is running but there is no traffic sent to the Zabbix server. Works fine on 23.01
Tested ...
06/14/2023
-
10:08 PM Bug #14475 (Resolved): PHP Error: suricata_check_for_rule_updates.php:820
- PHP Error from Suricata when updating:...
06/13/2023
-
07:16 AM Bug #14460: PHP Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/haproxy/haproxy.inc:2158
- Thanks for creating this issue.
Could it be that the lua-script used in the HAproxy-config triggers these errors?
...
06/12/2023
-
09:18 PM Bug #14469 (Resolved): Snort Advanced config pass-through encodes entries
- When attempting to add a custom snort.conf config line using the Snort Advanced Configuration Pass-Through feature, t...
-
11:59 AM Todo #9200 (Resolved): Add DNS support for Google domain to Acme manager
06/11/2023
-
10:50 PM Feature #14468 (Rejected): pass along ntopng professional license key
- Provide a way through the ntop settings GUI to pass along the ability to upgrade to the Pro version. Perhaps have an ...
-
04:24 PM Feature #13863: squidguard auto update blacklist
- Hello,
will the function be built in?
The function is already available in other Firewalls.
It would be really ... -
04:23 PM Regression #13984: PHP errors with squid
- +https://redmine.pfsense.org/issues/14426+
Hello Marcos I found you some more PHP issues with this under Squid rep... -
01:14 AM Todo #9200: Add DNS support for Google domain to Acme manager
- I just created a cert using this earlier today, works like a charm! Thank you!
06/10/2023
-
08:48 PM Todo #9200: Add DNS support for Google domain to Acme manager
- the drop down and token field for Google Domains (DNS API) is present in ACME 0.7.4 - don't have valid credentials I ...
-
05:56 PM Bug #14364 (Incomplete): APCUPSD unable to process date string
- Tested with an APC UPS on 23.05 with the latest apcupsd package. Unable to reproduce this error. Can you please pro...
06/09/2023
-
05:27 PM Bug #14199 (Feedback): ACME - Issue with corrupted cert
- Fixed in ACME pkg v0.7.4
-
05:10 PM Bug #14199 (In Progress): ACME - Issue with corrupted cert
-
05:27 PM Todo #9200 (Feedback): Add DNS support for Google domain to Acme manager
- Added in ACME pkg v0.7.4
-
05:10 PM Todo #9200 (In Progress): Add DNS support for Google domain to Acme manager
-
05:08 PM Feature #13608 (Not a Bug): ACME Not Recognizing new .au domain on wildcard
- There is *no special handling* of anything under "*.au" in this package or in @acme.sh@. Looking at the error in the ...
-
01:16 PM Feature #14464 (Duplicate): BGP ECMP
- Duplicate of #9545
-
03:43 AM Feature #14464 (Duplicate): BGP ECMP
- Enable the ability to have bgp perform ECMP (multipath).
I see it as possible in the frr documentation. Would be gre...
06/08/2023
-
08:44 PM Bug #14426: PHP errors in Lightsquid
- 2100-MAX
Crash report begins. Anonymous machine information:
arm64
14.0-CURRENT
FreeBSD 14.0-CURRENT #1 plus... -
12:29 PM Bug #14460: PHP Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/haproxy/haproxy.inc:2158
- Here is the configuration that triggers PHP errors....
-
12:18 PM Bug #14460: PHP Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/haproxy/haproxy.inc:2158
- Here is the forum thread https://forum.netgate.com/post/1109155
-
11:31 AM Bug #14460 (Resolved): PHP Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/haproxy/haproxy.inc:2158
- ...
06/07/2023
-
04:54 AM Bug #14406: Squid Proxy version 0.4.46 Missing Error subfolder and files for "en" or "en-usa" and all other languages.
- Jonathan Lee wrote in #note-5:
> Hi Marcos, I wanted to confirm that this issue was not present until inplace upgrad...
06/06/2023
-
06:09 PM Bug #14406: Squid Proxy version 0.4.46 Missing Error subfolder and files for "en" or "en-usa" and all other languages.
- Hi Marcos, I wanted to confirm that this issue was not present until inplace upgrade to 23.05
06/05/2023
-
03:13 PM Feature #14453 (New): Expand prefix list entry window
- Within FRR configuration, to add a prefix list entries, the windows are too small to see if you are typing in the cor...
-
01:59 PM Regression #14452: Prometheus node_exporter generates errors with the default config
- Full metrics output attached.
Note that both 'uname' and 'os' report failure:... -
01:58 PM Regression #14452 (Resolved): Prometheus node_exporter generates errors with the default config
- Installing and enabling the node exporter generates errors whenever it is queried. ...
06/04/2023
-
04:20 PM Bug #14406: Squid Proxy version 0.4.46 Missing Error subfolder and files for "en" or "en-usa" and all other languages.
- The issue is likely caused by https://redmine.pfsense.org/issues/13776
-
05:38 AM Bug #14406: Squid Proxy version 0.4.46 Missing Error subfolder and files for "en" or "en-usa" and all other languages.
- Thank you for taking the time to look into this
-
03:39 PM Feature #10818 (Resolved): UDP Broadcast Relay
06/03/2023
-
10:25 PM Bug #14406 (Confirmed): Squid Proxy version 0.4.46 Missing Error subfolder and files for "en" or "en-usa" and all other languages.
- Can confirm on both a fresh installation of 23.05 with Squid 0.4.46, and one which was upgraded from 23.01 with Squid...
-
10:09 PM Bug #14287: pfBlockerNG does not uninstall cleanly when using RAM disks
- Loh Phat wrote in #note-10:
> No joy with the new 2.2.2 system patches:
>
> [...]
Please retest this on 23.05 ... -
09:59 PM Bug #14108: Antivirus Bases showing outdated main.cvd with a version dated year 2021
- Tested on 23.05-RELEASE and this issue is still present.
-
09:56 PM Bug #14021 (Not a Bug): Squid ClamAV showing bytecode errors for version 334
- Closing as Not a Bug
-
08:55 PM Feature #14447 (Resolved): Update haproxy from 2.6 to 2.8 lts
- A few days ago, haproxy 2.8 was released. It is an LTS release with support until Q2 2028.
Its a pretty useful rel... -
08:03 PM Feature #10818: UDP Broadcast Relay
installed the package on 2.7 and the service is working
2.7.0-DEVELOPMENT (amd64)
built on Fri May 26 06:04:59...-
11:07 AM Regression #14445 (Resolved): HAProxy PHP error /usr/local/www/haproxy/haproxy_global.php:138
- On upgrade from 23.01 to 23.05...
-
02:45 AM Todo #9200: Add DNS support for Google domain to Acme manager
- Upstream support has been merged and released: https://github.com/acmesh-official/acme.sh/pull/4542
There is a PR at...
06/02/2023
-
02:29 PM Bug #14405: PHP Crash report
- It returned. Let me know what you need.
-
01:41 PM Feature #9833: ACME: add ability to use custom ACME server
- +1 here as well. I also have set up Step CA as an internal CA with ACME. I want to be able to set up a custom ACME se...
06/01/2023
-
12:00 PM Regression #14441 (New): Zabbix Proxy package version 6.0.15 doesn't work in 23.05
- All the items in the package are impacted.
It seems to be a regression. It worked fine in the 23.01
05/31/2023
-
12:27 PM Bug #14438 (Not a Bug): The db5 port currently does not have a maintainer
- That is a message from the FreeBSD ports system about the state of that dependency port in the FreeBSD ports system. ...
-
01:22 AM Bug #14438 (Not a Bug): The db5 port currently does not have a maintainer
- When reinstalling or installing Squidguard URL blocker I just started to see this today. Is this of concern for using...
-
01:53 AM Regression #13984: PHP errors with squid
- If this is fixed can this be closed?
05/30/2023
-
12:50 PM Todo #9200: Add DNS support for Google domain to Acme manager
- Nathan Stansell wrote in #note-11:
> Can this be reopened as google now has api access?
> https://domains.google/le... -
12:49 PM Bug #14369 (Closed): DNSBL Parsing error when DNSBL Mode "Unbound python mode".
-
12:18 PM Feature #14101: Add Zabbix 6.4 packages
- Zabbix 6.2 is not supported anymore... So can you add FreshPort 6.4 packages ?
05/29/2023
-
11:07 AM Bug #14369: DNSBL Parsing error when DNSBL Mode "Unbound python mode".
- It seems to be fixed in 23.05. Please close or delete it. Thank you.
Also available in: Atom