Project

General

Profile

Activity

From 02/05/2024 to 03/05/2024

03/05/2024

09:01 PM Bug #15312 (Resolved): Unable to load rules page with no categories selected
PR merged, thanks! Jim Pingle
05:09 PM Bug #15312: Unable to load rules page with no categories selected
A pull request against the RELENG_2_7_2 branch of pfSense CE to correct this bug has been posted here: https://githu... Bill Meeks
03:09 PM Bug #15312 (Resolved): Unable to load rules page with no categories selected
details here: https://forum.netgate.com/topic/186537/unable-to-load-rules-page-if-no-category-is-selected/4?_=170965... Mike Moore
07:53 PM Bug #15313 (Resolved): Zabbix server 6.4.12 requires Zabbix proxies to be version 6.4.12
There seems to be a bug/change with Zabbix server and Zabbix proxy where both need to be running 6.4.12.
If the vers...
Andrew Almond

03/01/2024

02:45 PM Feature #15300 (New): allow changing the value of "forward" key
Currently, if a Zone Type is Forward, the resulting config contains "forward only;" setting and that cannot be change... Alex Kolesnik

02/29/2024

07:35 PM Feature #15198: System_Patches package should advertize on the dashboard, or send notifications, if there are recommended patches available
Well, it will show ALL installed packages, not just those that need updating.
And since most people don't want to sh...
Nazar Mokrynskyi
09:12 AM Bug #15296: WAN Interface cannot added to ntopng if offline-packet loss
Sergei Shablovsky wrote:
>
>
> But LAN interfaces ALL would be ADDED as well even some of them are not connected...
Sergei Shablovsky
06:58 AM Bug #15296 (New): WAN Interface cannot added to ntopng if offline-packet loss
Brilliant pfSense DevTeam !
In multi-WAN pfSense configuration WAN interfaces that pfSense decide in “Offline, Pac...
Sergei Shablovsky

02/28/2024

04:17 PM Bug #15222 (Resolved): HTTP_Inspect Preprocessor Engine: wrong legend on parameters
PR merged, thanks! Jim Pingle
04:17 PM Feature #15260 (Resolved): Snort IPS False Positives and Preprocessor Rules Misconfiguration
PR merged, thanks! Jim Pingle
03:20 PM Todo #15294: Naming “Custom Name” of Interface the same as “Interface” on pfSense in “Interface assignment”
I mean “INT_OFFICE_LAN” *would be much usable and informative* than “igb5” Sergei Shablovsky
03:18 PM Todo #15294 (Rejected): Naming “Custom Name” of Interface the same as “Interface” on pfSense in “Interface assignment”
Brilliant pfSense DevTeam !
Naming “Custom Name” of Interface in ntopng “Interface - Details” the same as “Interfa...
Sergei Shablovsky

02/27/2024

09:02 AM Bug #14676: Listening Port option in the Tailscale configurator is not respected
The same behaviour on
23.09.1-RELEASE (amd64)
built on Tue Jan 30 15:33:00 MST 2024
FreeBSD 14.0-CURRENT
If us...
aleksei prokofiev

02/26/2024

01:49 PM Feature #12658 (Closed): Adding prometheus metrics to darkstat
Jim Pingle
03:41 AM Feature #12658: Adding prometheus metrics to darkstat
I think we can close this out:... Karim Elatov
09:51 AM Bug #15292 (Duplicate): Certificate renewal with 'dns_inwx.sh' not working: Error add txt for domain:_acme-challenge.foo.bar
Hello,
we use Acme-package to obtain a wildcard certificate for our domain. It has always worked well.
Lately, t...
Lorenzo Marroccoli

02/25/2024

07:08 PM Bug #15274: HAProxy Configuration Changes Require pfSense Reboot to Take Effect
Kris Phillips wrote in #note-2:
> Tested this on 23.09.1 with HAProxy 0.63_2. I'm not able to reproduce this. Chan...
Zachary Cohen
03:37 AM Bug #15274 (Incomplete): HAProxy Configuration Changes Require pfSense Reboot to Take Effect
Tested this on 23.09.1 with HAProxy 0.63_2. I'm not able to reproduce this. Changing any frontend or backend settin... Kris Phillips
01:19 AM Bug #15222: HTTP_Inspect Preprocessor Engine: wrong legend on parameters
This fix for this bug has been posted as part of this pull request: https://github.com/pfsense/FreeBSD-ports/pull/134... Bill Meeks
01:18 AM Feature #15260: Snort IPS False Positives and Preprocessor Rules Misconfiguration
The fix for this feature request/bug fix has been posted as part of this pull request: https://github.com/pfsense/Fre... Bill Meeks

02/23/2024

05:24 PM Bug #15008 (Resolved): SID MGMT list action to download a single conf file leads to a 502 Bad Gateway error
Jim Pingle
05:03 PM Bug #15008: SID MGMT list action to download a single conf file leads to a 502 Bad Gateway error
This issue has been resolved. Please mark this issue RESOLVED.
Thanks, Bill
Bill Meeks
03:27 PM Bug #15048: Snort large memory consumption when updating
You state _"Snort since the last updates uses a lot of memory when updating..."_ . What updates specifically? Updates... Bill Meeks

02/21/2024

08:49 PM Todo #15281 (Resolved): Upgrade Tailscale to 1.6.0
Plus 24.03 has tailscale-1.56.1 available in the Package Manager. Would be great to pull in 1.6.0 if possible. Chris W
01:55 PM Feature #9141: FRR xmlrpc
No progress here obviously, just wanted to add that in the mean time I'm using a workaround: every time i change some... Adrian Dascalu

02/20/2024

11:44 PM Feature #12918: pfBlockerNG-devel changes from xmlrpc sync do not take effect immediately
did anyone figure out how to manually fix this my editing the code ? Israel Goldstein
09:54 PM Bug #15274: HAProxy Configuration Changes Require pfSense Reboot to Take Effect
Zachary Cohen wrote:
> As originally reported here (https://forum.netgate.com/topic/172972/haproxy-config-changes-not...
Zachary Cohen
09:51 PM Bug #15274 (New): HAProxy Configuration Changes Require pfSense Reboot to Take Effect
As originally reported here (https://forum.netgate.com/topic/172972/haproxy-config-changes-not-loaded-pfsense-restart... Zachary Cohen
09:53 PM Bug #15182: Changing backend port - status remains down
Potentially related to #15274 Zachary Cohen

02/19/2024

06:41 PM Todo #15270 (Closed): ENUMER STUN
Hello,
Recently I reviewed my network activity and found lot of requests to the file http://enumer.org/public-stun...
Oleg Khovayko

02/15/2024

07:01 PM Feature #15260: Snort IPS False Positives and Preprocessor Rules Misconfiguration
Roberto@ IT and General wrote in #note-3:
> Hello Bill,
>
> The more general writeup about why rules are in specific...
Bill Meeks
05:44 PM Feature #15260: Snort IPS False Positives and Preprocessor Rules Misconfiguration
Hello Bill,
Thank you very much for your comment. I didn't perceive your message as an attempt to be argumentative...
Roberto@ IT and General
03:02 PM Feature #15260: Snort IPS False Positives and Preprocessor Rules Misconfiguration
I am the volunteer package maintainer for Snort on pfSense. The method you described above for removing rules (disabl... Bill Meeks
11:31 AM Feature #15260: Snort IPS False Positives and Preprocessor Rules Misconfiguration
Above, there is a list of the preprocessor rules and decoder rules that should be enabled/disabled for each of the th... Roberto@ IT and General
11:15 AM Feature #15260 (Resolved): Snort IPS False Positives and Preprocessor Rules Misconfiguration
Greetings to all from IT And General.
I would like to point out an issue that we are experiencing with the Snort p...
Roberto@ IT and General
03:50 PM Bug #15190 (Resolved): PHP error from RRD Graphs when resolution is null
It works fine on today's release:
I will close this ticket as resolved.
Danilo Zrenjanin

02/14/2024

08:54 AM Bug #14409: pfBlockerNG Cron Redundantly Updates pfSense Configuration When DNSBL is Disabled Due to Faulty Virtual IP Count
> I've come up with a patch that sets @$vip_count@ to @0@ if DNSBL is disabled. This causes the Virtual IP counts to ... Sima Xi

02/12/2024

02:32 PM Bug #15190 (Feedback): PHP error from RRD Graphs when resolution is null
MR merged. Jim Pingle

02/10/2024

11:36 PM Bug #15190 (Pull Request Review): PHP error from RRD Graphs when resolution is null
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/387 Christopher Cope

02/09/2024

07:32 PM Bug #15250: Potential XSS in HAProxy GUI when editing frontend listener actions or backend pool ACL actions.
Updated packages are now available. Jim Pingle
05:47 PM Bug #15250 (Feedback): Potential XSS in HAProxy GUI when editing frontend listener actions or backend pool ACL actions.
Fixed in https://github.com/pfsense/FreeBSD-ports/commit/953068694131b523e8906ee70b444c59c53d3eff
Fix also merged ...
Jim Pingle
05:32 PM Bug #15250 (Resolved): Potential XSS in HAProxy GUI when editing frontend listener actions or backend pool ACL actions.
Both haproxy_listeners_edit.php and haproxy_pool_edit.php define a custom cell drawing function which, unlike the sta... Jim Pingle
06:41 PM Feature #15249: Ability to adjust MTU & MSS on tailscale interface
Edited to specify the desire for both MTU & MSS. Christopher Cope
03:52 PM Feature #15249 (In Progress): Ability to adjust MTU & MSS on tailscale interface
Easy to add a knob to set TS_DEBUG_MTU in the tailscale environment. Will add it next week. Christian McDonald
03:48 PM Feature #15249 (In Progress): Ability to adjust MTU & MSS on tailscale interface
Tailscale itself has an environment variable to adjust this TS_DEBUG_MTU. However, it does seem to be primarily for t... Christopher Cope
06:22 PM Feature #15242 (Resolved): Optimize calls to write_config() function in Suricata GUI to prevent creation of unnecessary config.xml backups when possible
PR merged. Jim Pingle
06:22 PM Bug #15241 (Resolved): Suricata Dashboard Widget needs the same fix applied as the ALERTS tab code from Redmine #14955.
PR merged. Jim Pingle
06:21 PM Bug #15240 (Resolved): Suricata GeoIP2 database download and update broken due to recent change in MaxMind API
PR merged. Jim Pingle

02/08/2024

10:56 PM Feature #15242: Optimize calls to write_config() function in Suricata GUI to prevent creation of unnecessary config.xml backups when possible
A pull request containing the fix for this issue has been posted to the RELENG_2_7_2 branch of FreeBSD-ports here: ht... Bill Meeks
10:55 PM Bug #15241: Suricata Dashboard Widget needs the same fix applied as the ALERTS tab code from Redmine #14955.
A pull request containing the fix for this issue has been posted to the RELENG_2_7_2 branch of FreeBSD-ports here: ht... Bill Meeks
10:55 PM Bug #15240: Suricata GeoIP2 database download and update broken due to recent change in MaxMind API
A pull request containing the fix for this issue has been posted to the RELENG_2_7_2 branch of FreeBSD-ports here: ht... Bill Meeks

02/07/2024

08:36 PM Todo #15119: Update nut-devel version and update startup script
Thank you Denny Page
06:54 PM Todo #15119: Update nut-devel version and update startup script
The new version has been picked back to 2.7.2 and 23.09.1 - it should show up on the next build. Marcos M
04:00 PM Bug #15190: PHP error from RRD Graphs when resolution is null
Danilo Zrenjanin wrote in #note-8:
> I tested the patch against:
>
> [...]
>
> After clicking the "Update Grap...
Christopher Cope
11:11 AM Bug #15190: PHP error from RRD Graphs when resolution is null
I tested the patch against:... Danilo Zrenjanin
08:45 AM Feature #15243 (New): CARP causes tinc termination
Obviously, using CARP (rc.carpbackup from the logs) kills tinc on the router that CARP considers backup. However, thi... Michael Lipp

02/06/2024

11:24 PM Bug #14855 (Resolved): suricata_Getdirsize issue after PHP 8
Jim Pingle
11:06 PM Bug #14855: suricata_Getdirsize issue after PHP 8
This fix was merged into production on October 16, 2023, but apparently this ticket escaped being closed as a result.... Bill Meeks
11:13 PM Feature #15242 (Resolved): Optimize calls to write_config() function in Suricata GUI to prevent creation of unnecessary config.xml backups when possible
Examine all calls to @write_config()@ function to see when it is appropriate to set @$backup@ parameter to @false@ to... Bill Meeks
11:09 PM Bug #15241 (Resolved): Suricata Dashboard Widget needs the same fix applied as the ALERTS tab code from Redmine #14955.
The same bug exists in the Suricata Dashboard Widget code for converting log file timestamps into EventTime objects a... Bill Meeks
10:08 PM Bug #15240 (Resolved): Suricata GeoIP2 database download and update broken due to recent change in MaxMind API
The MaxMind GeoIP2 geolocation database download/update procedure in the Suricata package was broken by a recent API ... Bill Meeks
06:43 PM Bug #15190 (Feedback): PHP error from RRD Graphs when resolution is null
MR merged. Jim Pingle

02/05/2024

01:38 PM Bug #15190: PHP error from RRD Graphs when resolution is null
The change should be OK to test, though since this is a patch in the ports tree you'll need to copy paste the diff an... Jim Pingle
 

Also available in: Atom