Activity
From 03/03/2024 to 04/01/2024
04/01/2024
-
11:34 PM Feature #14712: CrowdSec package
- I have been testing this for several months now and like it as another layer of security that uses very little resour...
-
11:25 PM Bug #15365: pfBlockerNG PHP error when editing a list
- I can also confirm this behavior. I corrected it in my setup by editing line 391 of /usr/local/www/pfblockerng/pfbloc...
-
10:07 PM Feature #15374: Use of cachemgr.cgi within secure lightsquid access
- Of course you can't access it with a GUI login session to light squid, is this something anyone wants to research at ...
-
10:05 PM Feature #15374 (New): Use of cachemgr.cgi within secure lightsquid access
- Hello fellow pfSense redline members,
Can we please add Squid's cachemgr.cgi to the lightsquid package.
Please... -
05:29 PM Bug #15313: Zabbix server 6.4.12 requires Zabbix proxies to be version 6.4.12
- Zabbix server 6.4.13 is out now and I have confirmed that it works correctly with older proxies, including 6.4.1 that...
-
08:47 AM Feature #8547: fwknop Port Knocking Package
- Also upvote.
Because *bruteforcing by thousands of IoT devices* (fridges, smart bulbs, smart locks, smart tvs, Al...
03/31/2024
-
06:59 AM Bug #15131: OpenVPN client export issues with iPhone and IPV6 connections
- https://forum.netgate.com/topic/185475/new-bogon-hitting-the-openvpn-port-1194
-
06:59 AM Bug #15131: OpenVPN client export issues with iPhone and IPV6 connections
- Unrelated but if you’re not logging and locking down your VPN use make sure you do.
-
06:53 AM Bug #15131: OpenVPN client export issues with iPhone and IPV6 connections
- remote f.q.d.n 1194 udp4
to
remote f.q.d.n 1194 udp
I am opening a redmine for this as the iPhone uses ipv6 an... -
06:48 AM Bug #15131: OpenVPN client export issues with iPhone and IPV6 connections
- My original test was from a cellphone iOS iPhone SE latest SE from cell network remote connection to DSL IPv4 only IS...
-
04:00 AM Bug #12907: PIMD: Nonexistent interfaces should be hidden/disabled in pimd.conf before bringing up the service
- 0.0.3_6 pimd on 24.03 beta seems to function correctly with regards to bindings and interface selection and the statu...
03/30/2024
-
11:32 PM Bug #15131: OpenVPN client export issues with iPhone and IPV6 connections
- Just tested a config with udp4 in the remote host line on OpenVPN Connect on Android. The config imported just fine....
-
11:31 PM Bug #15131: OpenVPN client export issues with iPhone and IPV6 connections
- I tested this on 24.03 and am unable to reproduce this. The config file on a new multihome config spits out with udp...
-
11:20 PM Bug #15313: Zabbix server 6.4.12 requires Zabbix proxies to be version 6.4.12
- Checked on the latest 24.03 BETA builds. This is still on the older version: zabbix64-proxy-6.4.10_1
03/29/2024
-
01:08 AM Feature #14032: Neighbor Discovery Proxy (NDproxy)
- Bump! ndproxy has been patched and now builds on FreeBSD 14 - see commit history:
https://www.freshports.org/net/ndp...
03/28/2024
-
08:51 AM Bug #15365 (Confirmed): pfBlockerNG PHP error when editing a list
- I can confirm this behavior.
!clipboard-202403280951-tqfxp.png!...
03/27/2024
-
09:45 PM Regression #14189: pfBlocker-NG: HA-Sync is not working
- Linking in https://forum.netgate.com/topic/179060/pfblockerng-sync-not-working/54 which says in part:
"All you nee... -
03:47 PM Bug #15365 (Resolved): pfBlockerNG PHP error when editing a list
- When editing an IPv4 list item I hit:...
03/23/2024
-
07:55 PM Bug #13654: Wireguard does not fail back failover WAN setup.
- Tested/confirmed on 4100 hardware, pfSense Plus 23.09.1.
Dual ISP in gateway group with tier 1/2.
Wireguard traffic... -
03:42 PM Bug #11614: ACME certificate renewal/creation fails with multiple DNS providers
- 3 years later and I ran into the same issue and the fix is actually extremely simple.
The logic in the function <c... -
12:08 AM Todo #15270 (Closed): ENUMER STUN
- That feed isn't enabled by default and we don't maintain it. The pfBlockerNG developer includes the ability to one-cl...
03/22/2024
-
03:30 PM Todo #15281 (Confirmed): Upgrade Tailscale to 1.6.0
- This is not currently available in the 24.03-BETA. We're still on 1.56.
03/21/2024
-
06:03 PM Bug #15334 (Resolved): Interface Description not updated properly when add/creating new interface in Snort
- PR merged, thanks!
-
06:02 PM Bug #15351 (Resolved): Snort does not honor user-specified PHP memory limit setting if user specifies a value greater than 384 MB
- PR merged, thanks!
-
06:02 PM Bug #15333 (Resolved): Interface Description not updated properly when add/creating new interface in Suricata
- PR merged, thanks!
-
06:02 PM Bug #15350 (Resolved): Suricata does not honor user-specified PHP memory limit setting if user specifies a value greater than 512 MB
- PR merged, thanks!
-
06:00 PM Feature #15355 (New): Logging Verbosity Change via patch for miniupnpd
- Please see https://forum.netgate.com/post/1158297
For those that wish to ingest miniupnpd (UPNP) firewall and nat ...
03/20/2024
-
07:12 PM Bug #15334: Interface Description not updated properly when add/creating new interface in Snort
- A pull request has been submitted against the RELENG_2_7_2 branch of pfSense CE to correct this issue: https://github...
-
07:12 PM Bug #15351: Snort does not honor user-specified PHP memory limit setting if user specifies a value greater than 384 MB
- A pull request has been submitted against the RELENG_2_7_2 branch of pfSense CE to correct this issue: https://github...
-
06:46 PM Bug #15351 (Resolved): Snort does not honor user-specified PHP memory limit setting if user specifies a value greater than 384 MB
- Recently pfSense added a new PHP Memory Limit parameter in the *Advanced Settings* tab under the SYSTEM menu. Prior t...
-
06:32 PM Bug #15333: Interface Description not updated properly when add/creating new interface in Suricata
- A pull request containing the fix for this issue has been posted against the RELENG_2_7_2 pfSense CE branch here: htt...
-
06:31 PM Bug #15350: Suricata does not honor user-specified PHP memory limit setting if user specifies a value greater than 512 MB
- A pull request containing the fix for this issue has been posted against the RELENG_2_7_2 pfSense CE branch here: htt...
-
02:18 PM Bug #15350 (Resolved): Suricata does not honor user-specified PHP memory limit setting if user specifies a value greater than 512 MB
- Recently pfSense added a new PHP Memory Limit parameter in the *Advanced Settings* tab under the SYSTEM menu. Prior t...
03/17/2024
-
06:21 PM Todo #14073: Shalla block list is offline but still available in pfBlocker
- Kris we know what the issue is but how does it get cleaned up?
Seems like something someone internal can push the m... -
02:53 AM Todo #14073: Shalla block list is offline but still available in pfBlocker
- This still affects 23.09.1 and 24.03's builds of pfBlockerNG as of today. This source should be removed as soon as p...
-
02:58 AM Bug #15296: WAN Interface cannot added to ntopng if offline-packet loss
- Sergei Shablovsky wrote in #note-1:
> Sergei Shablovsky wrote:
> >
> >
> > But LAN interfaces ALL would be ADDED as...
03/16/2024
-
09:43 PM Bug #15333 (Confirmed): Interface Description not updated properly when add/creating new interface in Suricata
- Similar behavior as seen with Snort (#15334). Differences are:
- When you change the dropdown selection of an inte... -
05:53 PM Bug #15334 (Confirmed): Interface Description not updated properly when add/creating new interface in Snort
- To be clear, what you're looking for is to select any interface in Snort (and Suricata) and have the Description form...
03/15/2024
-
03:18 PM Bug #15313: Zabbix server 6.4.12 requires Zabbix proxies to be version 6.4.12
- Zabbix has now added a note to the upgrade notes and release notes that warns of the issue with 6.4.12:
https://www.... -
02:52 PM Feature #15340 (New): provide the ability to deactivate actions in Gui
- When using the webUI to push changes there are times when i need to deactivate a portion of the config. For example, ...
-
07:22 AM Bug #14460 (Resolved): PHP Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/haproxy/haproxy.inc:2158
- I am closing this case because it appears to be more of a configuration issue rather than a bug.
03/14/2024
-
09:13 PM Bug #15313 (Confirmed): Zabbix server 6.4.12 requires Zabbix proxies to be version 6.4.12
-
01:35 PM Bug #15100: Tailscale IPv6 Exit Node uses first LAN interface when WAN is set to Only Request Prefix
- There is a feature request:
https://redmine.pfsense.org/issues/15177
03/12/2024
-
03:37 PM Bug #15334 (Resolved): Interface Description not updated properly when add/creating new interface in Snort
*Brilliant pfSense DevTeam!*
*WHERE*
in *Services / Suricata* package
on *Interfaces*
*ISSUE*
Interface ...-
03:30 PM Bug #15333 (Resolved): Interface Description not updated properly when add/creating new interface in Suricata
- *Brilliant pfSense DevTeam!*
*WHERE*
in *Services / Suricata* package
on *Interfaces*
*ISSUE*
Interface *De... -
01:06 PM Bug #14556: Tailscale dropping routes from FIB
- Chris Linstruth wrote:
> Attempted to duplicate this by adding a tailnet to 4 pfSense nodes with routes and two devic... -
03:05 AM Regression #15158: XMLRPC Timeout won't save if over 150
- I was able to replicate this on 24.03.b.20240311.0600, pfBlockerNG 3.2.0_8
03/11/2024
-
03:53 PM Feature #15243: CARP causes tinc termination
- I have only one tincd process (which is in no way related to any VIP managed by CARP) and it is "stopped" (i.e. event...
-
02:39 PM Feature #15243: CARP causes tinc termination
- By "kills tinc" it means tinc stops functioning completely or just on the CARP interface?
If you have the Local IP... -
12:58 PM Bug #15250 (Resolved): Potential XSS in HAProxy GUI when editing frontend listener actions or backend pool ACL actions.
- That is the latest version for 23.09.1. The version on dev snaps had already had a port revision bump for a change th...
-
04:48 AM Feature #8547: fwknop Port Knocking Package
- There are vpn technologies now using crypto based port knocking for just this reason. In my view it’s a reasonable fe...
03/10/2024
-
01:35 AM Bug #13409 (Pull Request Review): Copy button for Optional pre-shared key for this tunnel works in HTTPS mode only
- Still an issue on...
-
01:03 AM Bug #14995 (Resolved): SID Management List Actions download leads to 502 Bad Gateway
- Closing this one out as Resolved since this has been merged and the package is available.
-
12:59 AM Bug #15250: Potential XSS in HAProxy GUI when editing frontend listener actions or backend pool ACL actions.
- Updated 0.63_3 package is available in 24.03 repos, but has not yet been merged into 23.09.1. Package 0.63_2 is stil...
-
12:47 AM Bug #14934 (Resolved): haproxy-devel: "Warning: process cannot be trusted anymore!" since pfSense Plus Upgrade to
- Testing this on 23.09.1, I'm not able to reproduce this. Since 23.09.1 is release and 23.05.X is no longer supported...
03/09/2024
-
09:10 PM Regression #14452: Prometheus node_exporter generates errors with the default config
- The FreeBSD repos contain a newer version of node_exporter: node_exporter-1.6.1_2
I downloaded this pkg copied it to... -
09:02 PM Feature #12711: Add InfluxDB V2 support
- *pfSense* : 23.09.1-RELEASE
*Telegraf* : 0.9_6
Telegraf can be configured to provide influxdb v2 metrics. Under ...
03/08/2024
-
06:50 PM Bug #15182 (Confirmed): Changing backend port - status remains down
- I can confirm this behaviour. ...
-
12:54 AM Bug #15319: TailScale widget shows wrong status (green instead of red)
- Open a feature request for a Tailscale widget.
This issue as reported is not a bug, this is just how pfSense servic... -
12:49 AM Bug #15319: TailScale widget shows wrong status (green instead of red)
- Not a bug?!
It’s useless if it actually does not reflect the real TS status 😕 -
12:45 AM Bug #15319 (Not a Bug): TailScale widget shows wrong status (green instead of red)
- The service status checks if the tailscaled process is running, not if it's actually logged in and connected. This is...
03/07/2024
-
08:38 PM Bug #15319 (Not a Bug): TailScale widget shows wrong status (green instead of red)
- Please see this thread for details: https://forum.netgate.com/topic/177265/tailscale-is-not-online-problem?_=17098346...
03/05/2024
-
09:01 PM Bug #15312 (Resolved): Unable to load rules page with no categories selected
- PR merged, thanks!
-
05:09 PM Bug #15312: Unable to load rules page with no categories selected
- A pull request against the RELENG_2_7_2 branch of pfSense CE to correct this bug has been posted here: https://githu...
-
03:09 PM Bug #15312 (Resolved): Unable to load rules page with no categories selected
- details here: https://forum.netgate.com/topic/186537/unable-to-load-rules-page-if-no-category-is-selected/4?_=170965...
-
07:53 PM Bug #15313 (Resolved): Zabbix server 6.4.12 requires Zabbix proxies to be version 6.4.12
- There seems to be a bug/change with Zabbix server and Zabbix proxy where both need to be running 6.4.12.
If the vers...
Also available in: Atom