Activity
From 11/05/2023 to 12/04/2023
12/04/2023
-
05:57 PM Bug #15061 (New): acme.sh nsupdate with challengealias is failing in certain cases
- When using nsupdate with challengealias the wrong filename is used, therefore the script fails....
-
05:38 PM Feature #14630 (New): FRR script hook for clearing states on routing changes
-
- Though the behavior can be worked around in FRR specifically with a script hook, the issue itself is more general and...
12/03/2023
-
05:19 PM Regression #14452: Prometheus node_exporter generates errors with the default config
- I enabled FreeBSD repos on 23.09 and installed node_exporter-1.6.1. Same error, does not resolve the issue.
-
01:31 AM Todo #15058 (Resolved): Remove Zabbix 4 Agent and Proxy
- Zabbix 4 is EOL and the packages will be removed upstream in a few weeks. We should remove these from the repos in a...
-
- There are also updated versions of zabbix-agent6, zabbix-proxy6, zabbix-agent5, zabbix-proxy5, zabbix-agent4, zabbix-...
-
- Confirmed that the version in Plus 23.09, 23.09.1, and 2.7.X are all the vulnerable 6.4.5 version.
Freshports has ... -
- Squid is deprecated as a package in pfSense CE and Plus. It's recommended that users remove this package as soon as ...
-
- Squid is planned to be removed as an available package in the next version of pfSense CE and Plus.
https://www.n...
12/02/2023
-
03:30 AM Bug #14523: PHP error when using an unsupported alias type in Advanced Rule Settings
- I have narrowed it down to situation where 'Custom Source' alias name cannot be saved when using 'Host' type aliases ...
12/01/2023
-
08:32 PM Feature #15056: Feature Request: Donate to Package Maintainer Button
- https://forum.netgate.com/topic/184100/how-are-packages-supported
Lots of talk has started on this today, and man... -
- Maybe the packages, should have a button so donate button to send some money to maintainers. I recently learned that ...
11/29/2023
-
- Still not working with pfSense 23.09 and node_exporter-1.5.0_6. I tested FreeBSD 14.0-RELEASE w/node_exporter-1.6.1. ...
-
03:30 PM Bug #11802: FreeRADIUS sync
- A checkbox list like the one under the system's High Availability setup interface would be ideal. This behavior chang...
-
11:23 AM Bug #11802: FreeRADIUS sync
- We're also hit by the same issue after pfSense upgrade, and that's pretty annoying. Our certificate configs are getti...
-
09:47 AM Bug #15048 (New): Snort large memory consumption when updating
Snort since the last updates uses a lot of memory when updating and it has a big impact. Can this be improved?
T...-
05:01 AM Bug #14287: pfBlockerNG does not uninstall cleanly when using RAM disks
- I wonder if this will fix the slow startup time for pfBlockerNG-dev with RAM disks enabled.
There's a long delay (... -
01:26 AM Bug #14491: FRR not starting with AgentX enabled
- I see this issue is now assigned, just for reference here are some probably heavily related tickets:
https://gith...
11/28/2023
-
- Jordan G wrote in #note-21:
> quite similar, both ends of the spectrum though - https://redmine.pfsense.org/issues/1...
11/27/2023
-
09:50 PM Bug #14861: PHP error when pings are enabled but no ping hosts are defined
- Hi, not sure what to tell you. I was using the telegraf plugin on 2.7.x sending stats to an influxdb. I don't recall ...
-
- Fixed in version 3.2.0_7: https://github.com/pfsense/FreeBSD-ports/commit/bd3ae22c8740dad7db80a893038990c83b55700f
-
02:06 PM Todo #12806 (Closed): Update node_exporter to 1.3.1
-
02:05 AM Todo #12806: Update node_exporter to 1.3.1
- Logan Marchione wrote:
> Sorry if this isn't the right place to ask. I wasn't sure if pfSense published package upda... -
-
- That is the kind of error you'll get if there is a conflicting route already in the table which prevents it from conf...
-
07:26 AM Bug #15018: Suricata 7.0.2 service stop problem
- Service_Watchdog is not (and was never) installed on affected systems. What I don't understand how can a "suricata.sh...
11/26/2023
-
11:04 PM Bug #14986: Snort's Legacy Blocking Mode custom plugin code causes a Signal 11 and core dump when "kill states" option is enabled
- The fix has deployed in package updates to both CE 2.7.1 and Plus 23.09. User feedback on the Netgate Forum indicates...
-
- Verified.
The check for enabled rules currently only checks for ET Open, Snort VRT, ET Pro, and Extra Rules as shown... -
02:11 AM Bug #15033 (Resolved): Suricata rule lists can't be manually updated unless the ETOpen Emerging Threats list is enabled
- To reproduce on a system that's never had Suricata installed before:
- Install it, enable an interface and start the... -
- Robert Karsai wrote in #note-4:
> Hello Bill, Thanks for looking into this issue. I've managed to reproduce the probl... -
- Hello Bill, Thanks for looking into this issue. I've managed to reproduce the problem on a Netgate 4100 cluster maste...
-
- Continuing to try and gather data about this issue. I have not been able to reproduce it in my local testing machines...
-
- Editing redmine to correct title.
-
05:27 AM Bug #14287: pfBlockerNG does not uninstall cleanly when using RAM disks
- quite similar, both ends of the spectrum though - https://redmine.pfsense.org/issues/13679
can I ask if you have IPv... -
- Tested on 2.7.1. I'm still not able to recreate this bug report. Marking as Incomplete until exact replication step...
11/23/2023
-
06:40 PM Bug #14668: FRR BGP route is not making into kernel route table after WireGuard's peer change is applied
- updated to CE 2.7.1, FRR 2.0.2, WireGuard 0.2.1 - the issue is still persist.
-
06:26 PM Bug #15028 (Not a Bug): OpenVPN + FRR BGP routing failure(Unable to contact daemon/Service not running?)
- Up to version 2.6.0, it works normally without bugs. The new versions 2.7.0 and 2.7.1 report inconsistency according ...
-
12:36 PM Bug #15027 (Resolved): Bind DNS Server cannot reorder zones
- Hello all,
Since 23.09 and 23.05 re-ordering zones and saving has no effect, returning to the zone definitions aft...
11/21/2023
-
10:29 AM Bug #14986: Snort's Legacy Blocking Mode custom plugin code causes a Signal 11 and core dump when "kill states" option is enabled
- The relevant changes have been merged to 2.7.1 and 23.09.
The 23.09 build is currently failing due to unrelated ch...
11/20/2023
-
- The Subject is "Suricata 7.0.2 service stop problem" not "Suricata 7.0.12" of course
-
- Hello,
I can't reliably stop Suricata service using Services / Suricata / Interfaces / <interface> / stop icon. I'...
11/19/2023
-
06:38 AM Bug #14861: PHP error when pings are enabled but no ping hosts are defined
- Tested upgrade from 2.6.0 to 2.7.0 with installed telegraf 0.9_6, no issue
2.6.0-RELEASE (amd64)
built on Mon Jan ... -
- RAM disks are in use in my environment, for the record.
-
- are you testing with RAM disks enabled prior to installing pfBlockerNG? that seems to be the necessary catalyst to re...
-
01:53 AM Feature #14468: pass along ntopng professional license key
- Mike
No, wrong link, go to this one.
https://packages.ntop.org/FreeBSD/
As mentioned, use Putty as admin, cu...
11/18/2023
-
06:11 PM Feature #14468: pass along ntopng professional license key
- Found this link here in the documentation
Is this what you mean?
https://www.ntop.org/guides/ntopng/third_party_... -
- Mike, I can send details no problem at all, however, pfsense have released an updated Plus Version 23.09 based on the...
-
03:07 AM Todo #14795: Transition to nut-devel
- If it will work, I have a PR prepared: https://github.com/pfsense/FreeBSD-ports/pull/1329. Thanks.
11/17/2023
-
- Russ - Can you provide the documentation on how you did it?
There really needs to be an "approved" Netgate way of ... -
- Are you saying that if we republish the package as 2.8.1_2 it would work, even though a 2.8.2 has been previously pub...
-
- I missed that since the dependency tracking version is by git commits (which don't necessarily align with the release...
-
- I'm sorry, but the minor version bump was not correct. The pfSense package numbering is intended to align with the NU...
-
- The minor version bump is correct; the version needed to be bumped for the notification tweak to be picked up. There'...
-
- Guys, the version number for the released package is wrong. It's not in my original PR, but when the notification twe...
-
- This issue is revolved in the pull request posted for review and merge here: https://github.com/pfsense/FreeBSD-ports...
-
- When attempting to download a single SID MGMT conf file using the action icon, a 502 Bad Gateway error is encountered.
-
- The fix for this issue is posted in pull request https://github.com/pfsense/FreeBSD-ports/pull/1327.
Once the pull... -
- This bug has likely been traced to the particular version of the @libpfctl@ library bundled with pfSense CE 2.7.0, 2....
-
- This bug has likely been traced to the particular version of the @libpfctl@ library bundled with pfSense CE 2.7.0, 2....
-
- Mike Moore wrote in #note-12:
> I did add the sym link as suggested earlier up in the thread: ln -s /usr/local/sbin/... -
- I did add the sym link as suggested earlier up in the thread: ln -s /usr/local/sbin/frr-reload.py /usr/local/lib/frr/...
-
- The upstream fix was merged/picked and should be in package repositories for 23.09 and 2.7.1
-
02:13 PM Bug #14730: FreeRADIUS package has wrong/old internal_name specified in backup xml causing package reinstall failure on backup restore
- Jim Pingle wrote in #note-6:
> For what it's worth, I just restored a backup on 23.09 which had FreeRADIUS3 installe... -
-
- The SO rules are not available on ARM hardware because the Snort Vulnerability Research Team does not produce the pre...
11/16/2023
-
- This would make SSL inspection easy for small office networks. Tools like this would break the caste system of enterp...
-
- Lot's of enterprise class firewalls have certificate issued proxy use for deep packet inspections/submissions.
Squ... -
- Can we please get the Squid package to use the latests version of Squid??
This version has many security fixes
-
- https://redmine.pfsense.org/issues/14997
-
- Thanks I did not know that. So it has no code to work with ARM processors yet...
I should make this a feature requ... -
-
- This is not a bug. This behavior is expected and per design.
The user has an SG-2100 MAX appliance which uses an ARM... -
- usr/local/etc/snort/rules
Contains no so.rules on 2100 max anymore for some reason. No custom scrips used. -
- Working with Bill on this today we found that *.so.rulea are not downloading into the rule set folder.
-
- I just learned that *.so.rules or shared object rules do not function on ARM architecture appliances.
The SG-2100... -
- Thank you kindly
-
- The updated package with the revised date format should be available in 23.09/2.7.1 soon.
-
- This bug is still under active investigation. I have experienced it three times over two days of running Snort in a C...
-
- pid 56711 (snort), jid 0, uid 0: exited on signal 11 (core dumped)
Also occurs on SG2100 Max now
-
- Kris Phillips wrote in #note-5:
> Users on the forums seem to have worked around the issue and seem to believe it's a... -
- Users on the forums seem to have worked around the issue and seem to believe it's a Hyperscan issue.
https://for... -
-
10:25 AM Bug #14994: mailreport - authentication failure
- Error fixed. In my postfix, the authentication mechanisms was : CRAM-MD5 DIGEST-MD5 LOGIN PLAIN. Normally, authentica...
-
- Hello,
I use pfSense 23.05.1-RELEASE and mailreport 3.6.4_1 package.
I first configured SMTP (System | Advanced... -
10:51 AM Bug #14995 (Resolved): SID Management List Actions download leads to 502 Bad Gateway
- If I try to download SID Management Configuration Lists in the WebUI, it will bring up an error page with nginx "502 ...
-
- Issue still present on 23.09 of Plus. Customer reported this issue today on the latest Plus release.
11/15/2023
-
- I tested this both on 23.05.1 and 23.09 but have not managed to replicate it. Both of the reported errors
> PHP ERROR... -
- It appears the changes in this commit approximately two weeks ago: https://github.com/pfsense/FreeBSD-ports/commit/4f...
11/14/2023
-
09:50 PM Bug #14748: FRR reload script is not executed properly
- https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=275095
-
- We are looking into it here. Christian said he sees the issue in port and is looking into a fix.
-
- Im impacted as well
Jim - Who is supposed to follow up with any upstream issue? -
- Looks like that's an upstream bug in the @frr9@ or @frr9-pythontools@ port(s).
The script at @/usr/local/sbin/frr-... -
12:19 PM Bug #14748: FRR reload script is not executed properly
- We had the same issue when using FRR OSPF. It seems that the "frr-reload" script that is used to communicate config c...
-
- Hey all, I've got a good dozen testers that have reported successful results with 2.8.1. Reported tests include local...
-
- PR Merged, thanks!
-
- Two different pull requests have been submitted to correct this bug: 1 each for the 2.7.0 CE Release and 2.8.0 CE DEV...
-
- The recent 4.1.6_12 Snort GUI package update contained a typo in @/usr/local/pkg/snort/snort_generate_conf@ . A backs...
11/13/2023
-
- PR merged, thanks!
-
- PR merged, thanks!
-
- PR merged, thanks!
-
- PR merged, thanks!
-
- PR merged, thanks!
-
06:34 PM Bug #14645: Snort interface "External Net" (EXTERNAL_NET) custom IP list should have negation when expanded
- Hi Bill,
main problem is when you have some static IPs outside of your network (let's say your work IPs or your VP... -
01:45 PM Todo #14971: Add text about the limit to use only Network type alias for Custom Destination
- Thanks.
I think it will be good to add a category of UI, for both the text and visuals of UI. -
- Wolfgang Thegreat wrote in #note-2:
> I didn't find a more suitable place to ask for it. Can you direct me?
It's ... -
- I didn't find a more suitable place to ask for it. Can you direct me?
-
- This is asking for a change to the GUI, not the documentation.
-
11/12/2023
-
- The widget has the following for the default entries in the warning/critical values by default, or possibly from a pr...
11/11/2023
-
11:56 PM Regression #14764: HAProxy local syslog not working
- Discussion thread: https://forum.netgate.com/topic/182508/haproxy-local-syslog-not-working
-
- Not sure where the date format is being pulled from, I'm using an older bn700 APC UPS and my date format is mm/dd/yyy...
-
- Hello,
At the UI path of pfBlockerNG > IP > IPv4 > edit of a table object > the section of "Advanced Inbound Firew... -
09:56 AM Bug #14638: Upgrading from Tailscale 0.1.3.1 to 0.1.4 does not start tailscale after upgrading
- I couldn't replicate it either.
There are no complaints from anyone else.
As a result, I recommend that we pro...
11/10/2023
-
- This issue is corrected by Snort package update 4.1.6_12 posted for review and merge here: https://github.com/pfsense...
-
- Sorry to be late replying to this ticket.
First, the double brackets is a bug and will be corrected in a forthcoming... -
- This issue is corrected by Snort package update 4.1.6_12 posted for review and merge here: https://github.com/pfsense...
-
- Beginning with PHP 8.x specific ASCII control characters should be wrapped with @chr()@ to insure they are interprete...
11/09/2023
-
- The requested feature has been added in code associated with Pull Request 1313 posted here for review and merge: http...
-
- I am working on adding this feature to a forthcoming GUI package update.
-
- Add an option to the INTERFACE SETTINGS tab to allow the use to enable or disable Ethernet (MAC) addresses to the EVE...
-
- This issue is resolved by Pull Request 1313 posted for review and merging here: https://github.com/pfsense/FreeBSD-po...
-
- I will address this problem in a forthcoming GUI package update.
-
- A line containing a number of consecutive spaces in either the @alerts.log@ or @blocks.log@ files will cause a fatal ...
-
- This issue is resolved with Pull Request 1313 posted for review and merge here: https://github.com/pfsense/FreeBSD-po...
-
- I am addressing this problem in a forthcoming GUI package update.
-
- The Suricata GUI code generates invalid syslog priority values in the @suricata.yaml@ file for several drop-down list...
-
- I may have found the culprit here (quite by accident I will admit). I think this commit by @kprovost might have fixed...
-
- I have not been able to reliably reproduce this crash, but I am testing on pfSense 2.7.0 CE with the latest Suricata ...
-
- Thank you!
-
- Sure, see attached.
-
- Thank you Marcos. Can you also post the ARM version please?
-
- # Install @nut@ from the package manager GUI
# Upload the attached file to the firewall
# Remove the old dependency...
11/08/2023
-
- Thank you Marcos for the hint about the VIP. I am investigating. The crash is happening within a portion of the custo...
-
- Almost certainly the same as other similar recent reports. Some driver/OS change is causing this device to need root ...
-
04:19 AM Bug #14951 (Duplicate): Tripplite Smart1500LCD UPS
- I wanted to create this incident ticket to advise the pfsense development team that when I had pfsense version 2.6, I...
-
- Can we get this package cleaned up at least with the removal of the list.
Its causing confusion from users.
11/07/2023
-
04:48 PM Bug #14932: mailreport 3.6.4_1 doesn't handle name address format "Name <email@domain.com>" in sender
- From examining mail server logs it looks like mailreport sends the email but it sets the from address in the header t...
11/06/2023
-
08:58 PM Feature #14712: CrowdSec package
- I created a PR for the package at https://github.com/pfsense/FreeBSD-ports/pull/1311
-
- Pretty sure there isnt an official maintainer for Squid in pfSense. Assume that the package will not receive any bug ...
11/05/2023
-
- Tested on
23.05.1-RELEASE (amd64)
built on Wed Jun 28 03:57:27 UTC 2023
FreeBSD 14.0-CURRENT
I can confirm such... -
- Tested on
23.05.1-RELEASE (amd64)
built on Wed Jun 28 03:57:27 UTC 2023
FreeBSD 14.0-CURRENT
mailreport 3.6.4...
Also available in: Atom