Activity
From 07/09/2023 to 08/07/2023
08/07/2023
-
09:24 PM Bug #14659 (New): vlan (add/modify/delete) with pfblockerNG installed - all interfaces flap
- Hard to say if this is a bug per se but its a reproducible problem.
1. create a LAGG with assigned VLANs and those... -
07:13 PM Bug #14654 (Resolved): Can't select BFD Peer for BGP Neighbor in GUI, Route Maps are shown instead
-
06:55 PM Bug #14654: Can't select BFD Peer for BGP Neighbor in GUI, Route Maps are shown instead
- Jim Pingle wrote in #note-4:
> Corrected packages are building now.
Updated, configured and checked on 2.7 - work... -
- It doesn't appear that I introduced an error in the behavior of the function that gathers BFD peers but I did spot an...
-
- I probably made an error when updating all the FRR code for the new config access functions. I'll look into it today.
-
- PR merged
-
03:39 PM Bug #14496: FATAL ERROR: /usr/local/etc/snort/snort_11005_mvneta1/snort.conf(405) Please activate arpspoof before trying to use arpspoof_detect_host.
- This error has returned for some reason
08/06/2023
-
09:14 AM Feature #14652: FRR OSPF6 not working over wireguard
- Correct, I am relying on neighbor discovery. But even if I wanted to define a static neighbor, there would not be any...
-
03:02 AM Regression #14445: HAProxy PHP error /usr/local/www/haproxy/haproxy_global.php:138
- Please see this pull request: https://github.com/pfsense/FreeBSD-ports/pull/1282
08/05/2023
-
11:13 PM Bug #14654: Can't select BFD Peer for BGP Neighbor in GUI, Route Maps are shown instead
confirmed.
BFD option(in BGP Neighbors) does not list BFD peers , it shows Route Map lists.
tested on 2.7 and...-
- FRR package version is 1.3, if that does matter.
It was working in FRR 1.1.1_7 (which is still installed in my 2.6 i... -
- To reproduce:
1. Install FRR
2. Create Route Map
3. Try to select a BFD Peer for BGP Neighbor
!bfd.png!
The se... -
11:10 PM Bug #12899: Suricata doesn't honor Pass List
- This has proven to be a very hard bug to find and fix. The problem is random. I have thus far been unable to reproduc...
-
10:45 PM Bug #14644: Zeek PHP error after upgrade to CE 2.7.0
- Do any issues occur with the package post-upgrade or is just the upgrade PHP errors the only issue?
-
- Hello,
Are you relying on neighbor discovery or do you have neighbors manually programmed in across the link? Typ... -
- Also see https://redmine.pfsense.org/issues/12760
-
- FRR OSPF6 is unable to form neighborship without adding link-local alias to wireguard interface.
Unless i perform:... -
10:20 PM Feature #14653: Update to LCPROC NTP Screen
- Update LCDPROC NTP Screen
* Add time zone
* Improved selection between GPS and PPS
* Add stability parameter for P... -
- Update to LCDPROC NTP Screen
* Add time zone
* Add local PPS stability pps
https://github.com/pfsense/FreeBSD-po... -
10:01 PM Bug #14287 (Feedback): pfBlockerNG does not uninstall cleanly when using RAM disks
- I'm seeing this on 23.05.1 pfBlockerNG 3.2.0_5 across multiple devices. Perhaps you need an existing pfBlockerNG sect...
-
08:45 AM Bug #14287 (Resolved): pfBlockerNG does not uninstall cleanly when using RAM disks
- No PHP errors on 23.05.1 when deleting 3.2.0_5 package with unchecked "keep config"...
-
09:41 AM Regression #14189: pfBlocker-NG: HA-Sync is not working
- the typo fix patch from the forum thread does fix the Sync functional for pfBlockerNG
tested on
Version 23.05.1-RE...
08/04/2023
-
- [04-Aug-2023 09:30:42 US/Pacific] PHP Fatal error: str_ireplace(): Cannot use output buffering in output buffering d...
-
- @Christopher Cope
I have tested your patch attached here. Strip level 2
set to 512mb
Hover I am still getting... -
- Amazing, thanks for sharing I appreciate you.
-
- This appears to be functioning OK for the most part but it isn't building with the SNMP option enabled yet. There is ...
-
03:16 PM Bug #12899: Suricata doesn't honor Pass List
- I've also experienced this for quite awhile. I created an alias for a vendor and added all IP addresses and ranges kn...
-
06:23 AM Feature #14032: Neighbor Discovery Proxy (NDproxy)
- NDProxy is the only way we have been able to get IPv6 working for our company network, and that have been possible on...
08/03/2023
-
10:05 PM Regression #14189: pfBlocker-NG: HA-Sync is not working
- Related: "Sync to configured backup server" option does not allow to Save without an IP address in the target below.
... -
08:09 PM Regression #14189: pfBlocker-NG: HA-Sync is not working
- Patch to fix the typo was posted at https://forum.netgate.com/post/1108304
-
08:57 PM Feature #13575 (Feedback): Update to frr 9.0.1
- Merged https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/350
-
- The installed packages Widget did not show there was a new package. Package manage did, but that was when it failed....
-
- Probably best to move it to the forum then, there may be something that needs fixed on your system, but it's not a ge...
-
- checked branch and it set correctly
-
- No issues installing or upgrading it here. Make sure the update branch is set to the appropriate version that matches...
-
- @jimp
new LCDPROC package will not install
WARNING: Current pkg repository has a new PHP major
version. pfSens... -
- Merged in LCDProc package version 0.11.5
-
11:31 AM Feature #9141: FRR xmlrpc
- In simple setups like mine I believe having the same BGP configuration on both Primary and Secondary members is what ...
08/02/2023
-
06:28 PM Bug #14645 (Resolved): Snort interface "External Net" (EXTERNAL_NET) custom IP list should have negation when expanded
- Hello,
I'm not really good with Snort but all my search results confirm that it is common to have @EXTERNAL_NET@ c... -
12:01 PM Bug #14644 (Not a Bug): Zeek PHP error after upgrade to CE 2.7.0
- First login after upgrading to 2.7.0, a couple of PHP error notices are shown, one of them related to Zeek:
@PHP E... -
- First login after upgrading to 2.7.0, a couple of PHP error notices are shown, one of them related to Suricata:
@P...
08/01/2023
-
- Tested in 23.09 by running:...
-
- Can we get nfdump/nfsen package integrated within pfsense? Have sflow send data to nfsen. The built-in collector woul...
-
- Round 3
https://github.com/pfsense/FreeBSD-ports/pull/1278
-
04:54 AM Bug #14638 (Closed): Upgrading from Tailscale 0.1.3.1 to 0.1.4 does not start tailscale after upgrading
- After upgrading Tailscale from 0.1.3.1 to 0.1.4, Tailscale was not running according to the status page.
I was abl...
07/31/2023
-
- See #14635 for details.
The export package will need a change similar to that one from #14635 but it will need to ... -
- Tested files attached
-
- Updated PR
https://github.com/pfsense/FreeBSD-ports/pull/1277 -
-
- The scripting hook described at https://docs.frrouting.org/en/latest/scripting.html seems promising. If nothing else ...
-
- This is specific to FRR, so I moved it to the FRR package.
Base system routing changes of this nature are already ... -
03:57 PM Feature #14633 (Feedback): Cleanup states on dynamic routing changes
- Currently, with FRR, dynamic routing changes does not cleanup old firewall states causing traffic to flow incorrectly...
-
- Worth noting that the old hardcoded default was level 3. When I added the option I made the new default level 2 to al...
-
- Added in LCDProc package v0.11.4_2 which is building now and will be available shortly.
-
- The validation could use some work but it's not completely broken as-is, it can be worked around.
If you enter the... -
- If such extensions were possible those would require developing new features to accommodate them, adding the new func...
-
- Hi Jim,
Thanks for responding to this quickly, and thanks for the floating-rule idea. I get that it can help mitigat... -
- There is no event or mechanism by which that situation could be identified and acted upon.
If it were a built-in W... -
- I have been chasing an issue of dropped traffic, and finally found the issue. A client is repeatedly sending traffic ...
-
- There isn't nearly enough information here. Do you mean the @sysutils/flock@ port from FreeBSD? Or something else?
... -
11:50 AM Feature #14632 (Rejected): Add flock pacakage to pfsense repository
- i would like to use flock with cron jobs
Thanks -
-
07:53 AM Feature #14468: pass along ntopng professional license key
- Hi, I thought I was the only one with this issue. I need to install my NTOPNG Pro license on Ver 23.05.1 but even if ...
07/30/2023
-
- Another options might be to allow changing the log level
ReportLevel=3
ReportLevel = LEVEL
Sets the reporting lev... -
- Currently there is no way via the package config GUI to disable messages getting written to the /var/log/system.log....
-
10:48 AM Bug #14572: Unused DNSBL files may not be removed
- Hi,
this is stable branch.
-
- Hello,
Is this with the devel or stable branch of pfBlockerNG? -
- I'm no longer able to recreate this in 23.05.1. If someone else can also confirm no more issues, we can mark this as...
-
- HAProxy 2.8.1 is in the stable package in 23.09 of Plus.
Current version in 23.05.1 is 2.2.29.
07/29/2023
-
- confirmed, now working with lldpd 0.9.11_2
-
12:30 PM Bug #14484: lldpd php error on saving with no interface selected
- Tested on 23.05.1 and 2.7.0 ...
-
- The same behavior is on FRR v1.2_3
-
04:40 PM Bug #14627 (New): FRR prefix list creation failure
- If you try to create a Prefix List with multiple Prefix List Entries and you check the checkbox Any in the last row, ...
-
- updated the lcdproc_client.php and lcdproc_screens.php to include NTP screen
https://github.com/pfsense/FreeBSD-po... -
- Tested against FRR Package v1.3.
It's fixed.
I am marking this ticket resolved. -
- Tested against FRR Package v1.3.
It's fixed.
I am marking this ticket resolved. -
- Tested against FRR Package v1.3. It's fixed.
I am marking this ticket resolved. -
- No more errors with the 1.3 package, marked it resolved.
-
- No more errors, with the 1.3 package, marked it resolved.
07/28/2023
-
-
08:30 PM Bug #14606: Deleting Last BFD Profile in FRR Package Causes PHP Fatal Error
- Jim Pingle wrote in #note-4:
> Fixed in FRR Package v1.3, which is building now and will be available shortly.
I ... -
- Fixed in FRR Package v1.3, which is building now and will be available shortly.
-
- This should be fixed in FRR Package v1.3, which is building now and will be available shortly.
-
- Fixed in FRR Package v1.3, which is building now and will be available shortly.
-
- Fixed in FRR Package v1.3, which is building now and will be available shortly.
-
- Fixed in FRR Package v1.3, which is building now and will be available shortly.
-
- Fixed in FRR Package v1.3, which is building now and will be available shortly.
07/26/2023
-
- The FRR package is built with SNMP support but it doesn't appear to be loading the module somehow.
The vtysh CLI l... -
12:22 PM Bug #14491: FRR not starting with AgentX enabled
- Jim Pingle wrote in #note-3:
> For those hitting this error, do you have the NET-SNMP package installed and active?
... -
- For those hitting this error, do you have the NET-SNMP package installed and active?
The AgentX integration is int... -
- I can confirm this behavior.
Tested against:... -
- I added screens for both APCUPSD and NUT to LCDProc. The option only appears (and will only work) when the correspond...
-
- I pushed a fix, it is building now and will be available shortly in lldpd pkg version 0.9.11_2 on Plus 23.05.1 and CE...
-
-
- I can reproduce it on 23.05.1, probably the "No interface selected" warning message is needed here....
-
- Perhaps this issue is related to the https://redmine.pfsense.org/issues/14592
I couldn't recreate any of the repo... -
-
- I can reproduce it on 23.05.1, error doesn't come if the BFD daemon is disabled, but occurs immediately when you enab...
07/24/2023
-
- To reproduce:
1. Enable BFD in FRR.
2. Create a BFD profile (only requires a profile name).
3. Delete the BFD pr...
07/23/2023
-
- Hello,
Do you mean it doesn't create a rule from the inside interface outbound for FTP traffic? If so, typically ... -
- still seeing this on 7100 running 23.05.1 lldpd 0.9.11_1 - set all protocol support to active, save...
-
12:55 AM Bug #14498: php errors when looking at snort active rules
- Jonathan Lee wrote in #note-16:
> @Christopher Cope
> I wanted to also take the time to message you and say I am so...
07/22/2023
-
-
- I couldn't reproduce any of the listed issues on the 0.7.5 Acme package.
I am marking this case resolved. -
- I can confirm this behavior.
Tested on:... -
- Not sure if its possible to do with the package but if multiple categories are selected and the action is blocked, th...
-
- Package > SquidGuard > Logs
The ability to search through the logs in the GUI. Right now there is no ability to do...
07/21/2023
-
- For the record, I now have an LCD with buttons and the fix I committed last week did correct the errors.
-
- Stated differently, it is not possible to restore FreeRADIUS settings unless one has at some point clicked the Save b...
-
- forum thread: https://forum.netgate.com/topic/181594/restore-missing-freeradius-config
A new install of FreeRADIUS... -
02:03 PM Bug #14315 (Resolved): Routes are not exposed on Tailscale when an empty route entry exists in the GUI
-
- Tested on 23.05.1 and CE 2.7.0, looks like it has been fixed, I could not reproduce.
23.05.1-RELEASE (amd64)
built ...
07/20/2023
-
04:08 PM Feature #14529: eBPFShield
- https://github.com/generic-ebpf/generic-ebpf
should do the job adds kernel/user space tools
Generic eBPF run... -
-
Tested package 4.1 on ...-
09:12 AM Bug #14554: PHP Fatal error: Uncaught TypeError: Cannot access offset of type string on string
- I do have some customizations in unbound, but they're not connected with dhcp (private-domain, local-zone, forward-zo...
-
- I set up DHCP Static Mappings in the DHCP server but couldn't replicate the issue with a fresh pfBlocker installation...
-
- I can confirm this behavior.
This seems to be a duplicate of https://redmine.pfsense.org/issues/14493
-
- Tested on the:...
07/19/2023
-
- Commit: https://github.com/pfsense/FreeBSD-ports/commit/2b3c7e925fed1d53763e6d2eee5e5ab2289b4116
Packages are buil... -
- There are some problems with private key handling in the ACME package that appear to have been ongoing for a while.
... -
- Looking at the PHP code blocks you showed above, something must not have updated in your setup. Lines were added to i...
-
-
12:51 PM Feature #10462: CPU Temp Screen
- Works well! Thank you very much!
-
- I didn't merge the original PR since other work on the package caused conflicts and made a lot of the changes unneces...
-
- This report is quite old and the package has had significant work done to it since then. Please try it again on pfSen...
-
- It should be OK to add that in, but it would need to be made conditional. By that I mean the option for the screen sh...
-
- The error as originally stated in this issue is solved. If you still have problems starting LCDProc, please post a ne...
-
02:26 AM Feature #14588 (Resolved): Add FRR diagnostic status output plugin
- Since FRR is a package and the status output does not generate information for packages, it would be really helpful f...
07/18/2023
-
07:15 PM Bug #14585: Fatal error editing acme certificates
- I just edited config.xml and added actions to my items.
It worked. I immediately got access to those items in pfS... -
- Thanks. I'm going to try this tonight.
Perfect. -
- Phil Tull wrote in #note-6:
> ok one more question please.
> Is it possible for me to edit the live config.xml and ... -
- ok one more question please.
Is it possible for me to edit the live config.xml and put in the actions (presumable to... -
- Phil Tull wrote in #note-4:
> I'm considering your suggestion to reinstall acme.
In this case I doubt it would ma... -
- I'm considering your suggestion to reinstall acme.
Would that require me to rebuild all my acme settings?
I wonder ... -
- OK, you mean no actions defined in the list in the cert entry -- I thought you meant they showed no action icons in t...
-
- Yes, I'm in the config.xml and it looks perfectly normal to me. I'll attach an example entry.
Consider this...
<p... -
- Sounds like you have a corrupted/incomplete certificate entry in the configuration that is leading to the errors, but...
-
- After updating pfSense from 2.6.0 to 2.7.0, cannot manage acme certificates IF the certificate has NO actions.
Acme ... -
- Request merged.
-
- In my opinion, I don't believe this package, essentially being a video conference server, is a good fit for running o...
-
07/17/2023
-
- Soren Pedersen wrote in #note-7:
> @Jim Pringle:
>
> I installed the updated version of LCDProc on PFsense 2.7.0 ... -
04:33 PM Bug #14571: PHP Error prevents LCDProc client from working properly due to empty VIP tags in config.xml
- @Jim Pringle:
I installed the updated version of LCDProc on PFsense 2.7.0 and the service still refuses to start. Re... -
03:14 PM Feature #14583: Add LiveKit package
- PR link => https://github.com/pfsense/FreeBSD-ports/pull/1273
-
- This is to add the LiveKit server as a pfSense package and configuration UI.
I created a pull request in GitHub wi... -
- I'm experiencing this regression on CE 2.7 when trying to de-activate HA Proxy. If I then refresh the browser, I am a...
-
02:27 AM Bug #14532: Error is logged every time a domain in the DNSBL is temporarily unlocked or re-locked
- After doing some more testing on this, I also get the results you reported, i.e., nothing gets logged to py_errors.lo...
07/16/2023
-
is there a specific configuration in OSPF/BGP?-
- Thank you for the bug report. I have tested and confirmed the issue. A merge request is created so this fix will be a...
07/15/2023
-
- the package is added .
23.05.1-RELEASE (amd64)
built on Wed Jun 28 03:57:27 UTC 2023
FreeBSD 14.0-CURRENT -
06:39 PM Bug #14532 (Not a Bug): Error is logged every time a domain in the DNSBL is temporarily unlocked or re-locked
- What pfSense and pfBlocker versions are you using?
I'm unable to replicate this on pfSense Plus 23.05.1 with pfBlo... -
07/14/2023
-
- This should be fixed now. I don't have a panel with buttons to test it (yet, it's on the way) but I see why it was fa...
-
- I have some ideas on why the button calls are hitting that error, I'll work on it some more.
Good to know the othe... -
02:51 AM Bug #14571: PHP Error prevents LCDProc client from working properly due to empty VIP tags in config.xml
- I've updated to the newest package and life is good again. thank you
-
-
05:51 AM Bug #13343: HAproxy cookie protection syntax needs updated
- Hello,
it works now together with the haproxy version 0.61_11.
Thanks!
-
01:02 AM Feature #14032: Neighbor Discovery Proxy (NDproxy)
- There is a growing need for this with more providers sticking us with /64. It's understandable that this wouldn't be ...
07/13/2023
-
10:45 PM Bug #14571: PHP Error prevents LCDProc client from working properly due to empty VIP tags in config.xml
- Seeing some errors when trying to use the Reboot or Shutdown functions from the LCD buttons:...
-
- Fixed in the new version of the package I just committed. Will be available once the package builds finish.
-
07:54 PM Bug #14406: Squid Proxy version 0.4.46 Missing Error subfolder and files for "en" or "en-usa" and all other languages.
- Hello,
I wanted to add an issue I am experiencing with Squid plugin version 0.4.46.
I am not sure if this iss... -
- PR merged, thanks!
Packages are building for Plus 23.05.1 and CE 2.7.0, they will be available shortly.
-
- This has been available for Plus 23.05.1 and CE 2.7.0 for several days with no reports of trouble.
We can open new... -
- This has been available for Plus 23.05.1 and CE 2.7.0 for several days with no reports of trouble.
We can open new... -
- This has been available for Plus 23.05.1 and CE 2.7.0 for several days with no reports of trouble.
We can open new... -
- Geo Rou wrote:
> Hi,
>
> I'd like to add a new screen to LCDproc that reads the UPS information from NUT.
Jus...
07/12/2023
-
- Hi,
I get the following crash report:... -
- Updated package committed on devel branches and also to RELENG_2_7_0, should be available soon on CE 2.7.0 and in dev...
-
- Some care will be needed here since CE 2.7.0 apparently has the OS package nrpe-4.1.0 while Plus 23.05.1 has nrpe3-3....
-
- Since the latest pfSense update, the LCDproc client is unable to connect to the LCDproc server. I can confirm LCDproc...
-
- Confirmed this also affects the 2.7 package:
https://forum.netgate.com/topic/180575/node_exporter-is-not-working-pr...
07/11/2023
-
- We are up to Tailscale v1.44.
> Tailscale 1.30.1 has been released which includes the fix for this issue. The upda... -
- I am still seeing this error in 2.7.0-RELEASE....
-
09:10 AM Bug #14554: PHP Fatal error: Uncaught TypeError: Cannot access offset of type string on string
- By reading /usr/local/pkg/pfblockerng/pfblockerng.inc it seems a few more lines down this part might be affected as w...
07/10/2023
-
08:13 PM Bug #14560: NRPE does not function properly on Plus 23.09 / CE 2.7.0
- Thank you all!
> So to re-summarize, these -5- 6 changes appear to restore 100% functionality from the previous rele... -
05:25 PM Bug #14560: NRPE does not function properly on Plus 23.09 / CE 2.7.0
- @TomTheOne: I'd suggest rebooting after making the five changes I listed above. nrpe3.sh definitely seems to get gene...
-
- Ok, I think I've got this figured out... nrpe3.sh gets automatically generated, so disregard my previous comment rega...
-
- In my case, nrpe is already running by manually starting the service via start-script in /usr/local/etc/rc.d/nrpe.
I... -
- Sorry for the confusion Tom. Those changes do indeed fix it on my system, but after seeing your comment I just did so...
-
- Thank you
> So in summary, these 4 changes appear to restore 100% functionality from the previous release:
>
> /... -
- Two more notes:
(1) At least on my system, the command="/usr/local/sbin/nrpe" change had to be made to /usr/local/... -
- In addition to the daemon name being changed from nrpe3 to nrpe, I've noticed that the associated check command has a...
-
07:27 PM Bug #14566 (Confirmed): Softlflowd package don't send ICMP flows
- I am using the softflowd package v.1.2.6_1 on pfsense v.2.7.0
Apparently icmp traffic is not sent from the sensor to... -
07/09/2023
-
08:03 AM Bug #14364: APCUPSD unable to process date string
- Perfect, thanks Kris :-)
-
- Yeah we should add a date format option to the widget so that it properly displayed depending on user input.
-
- pfSense Plus 23.09 has the latest ClamAV 1.1.0, which is not vulnerable:
/usr/local/sbin/clamd --version
ClamAV 1... -
- The project appears to be primarily written for Debian-based Linux and the Summer of Code project from 2020 doesn't a...
-
- Tested on 23.09. Confirmed this behavior.
Editing /usr/local/etc/rc.d/nrpe to change this allows the service to...
Also available in: Atom