pfSense » pfSense Packages

01/17/2025

10:19 PM Bug #15996 (Resolved): pfBlockerNG can clobber unbound file permissions

Fixed with https://github.com/pfsense/FreeBSD-ports/commit/8d632447c10537dc99e9ab3aa1ac66768fa55829. Marcos M

01/16/2025

08:18 PM Bug #15996 (Resolved): pfBlockerNG can clobber unbound file permissions

To reproduce:
# Use a ZFS system.
# Install pfBlockerNG-devel and set it up DNSBL in Unbound python mode.
# Set up... Marcos M

01/15/2025

03:35 PM Bug #15995: Unable to switch to the RELENG_2_7_2 branch

If it's a VM, it should work. Jim Pingle

03:12 PM Bug #15995: Unable to switch to the RELENG_2_7_2 branch

Jim Pingle wrote in #note-1:
> You're probably checking out the tree on a Windows filesystem, and the repository is ... Maurice Detmers

03:09 PM Bug #15995 (Not a Bug): Unable to switch to the RELENG_2_7_2 branch

You're probably checking out the tree on a Windows filesystem, and the repository is not compatible with that. Files ... Jim Pingle

02:36 PM Bug #15995 (Not a Bug): Unable to switch to the RELENG_2_7_2 branch

Hi,
I hope I am posting this in the right spot and hopefully someone can help me with this.
I am trying to switc... Maurice Detmers

01/14/2025

07:31 PM Bug #15932: HAProxy entries disappear after saving with MIM enabled

I have also experienced this issue.
I can create a frontend with 1 ACL and it's fine. If I add a second ACL then all... Andrew Almond

04:54 PM Feature #15981 (Resolved): Add a fresh Suricata 7.0.8 package version in package manager.

PRs merged/picked. Thanks! Jim Pingle

01/11/2025

04:23 PM Bug #10936 (Resolved): both haproxy/haproxy-devel non-existent option lb-agent-chk

It's no longer there. I tested against haproxy 0.63_9.
This is how it looked:
!clipboard-202501111721-dhbm2.p... Danilo Zrenjanin

03:50 AM Bug #10936: both haproxy/haproxy-devel non-existent option lb-agent-chk

Danilo Zrenjanin wrote in #note-7:
> Tested on:
>
> [...]
>
> The check method "lb-agent-chk" is still listed... Kris Phillips

03:53 AM Regression #15967 (Incomplete): pfsense duplicated WAN firewall rules

I'm unable to recreate this issue in pfBlockerNG. Changing the rule order for me properly removes and re-adds the ru... Kris Phillips

01/10/2025

10:50 PM Feature #9141: FRR xmlrpc

Jim - Any hope we can get it implemented? There is a high degree of interest in making our pfsense deployments highly... Mike Moore

10:57 AM Feature #9141: FRR xmlrpc

also interested on this,
is implementing this feature consists in changing which keys should be merged/copied in _x... Julien Bennet

12:57 AM Feature #12860: add mmc-utils package to all images

Has there been any progress on including @mmc-utils@ in the base image or as a package?
I've experienced several f... Andrew Almond

01/09/2025

10:36 PM Feature #15981: Add a fresh Suricata 7.0.8 package version in package manager.

I have submitted Pull Requests against the pfSense packages repo to update the Suricata binary to the latest 7.0.8 ve... Bill Meeks

11:46 AM Feature #15981: Add a fresh Suricata 7.0.8 package version in package manager.

Lev Prokofev wrote:
> The fresh port is available
>
> https://www.freshports.org/security/suricata
Vulnerabili... Tapio Ryhänen

10:32 AM Feature #15981 (Resolved): Add a fresh Suricata 7.0.8 package version in package manager.

The fresh port is available
https://www.freshports.org/security/suricata Lev Prokofev

02:43 PM Feature #14729: OpenVPN Client Export - Support PLAP on Windows

I have this setup manually however get the error "waiting for management interface to come up" - Craig Messer

01/08/2025

07:11 PM Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy

The GUI packages were picked back there but failed to build because the actual underlying Zabbix 7 ports are not in t... Jim Pingle

07:01 PM Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy

Maurice Detmers wrote in #note-43:
> To be clear and if I am correct (please correct me if I am wrong), the Zabbix p... Gio M

01/07/2025

06:57 PM Bug #15976 (Resolved): Fix ntopng listen options

If both IPv4 and IPv6 server listen are enabled, the IPv4 address will not work. While the current version of ntopng ... Denny Page

01/06/2025

01:24 PM Bug #15965 (Not a Bug): pfSense UI fails to execute Surricata IPS/IDS cmds

Jim Pingle

09:46 AM Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy

To be clear and if I am correct (please correct me if I am wrong), the Zabbix packages for PFSense are (primarily) co... Maurice Detmers

01/04/2025

06:01 PM Feature #15971 (New): Add CautiousConnect IPv6 feed

Add CautiousConnect IPv6 blocker feed:
[[https://sixint.io/products/cc_docs/about.html]]
Github PR here:
[[h... Robert Beverly

02:13 PM Bug #15965: pfSense UI fails to execute Surricata IPS/IDS cmds

This sounds very much like a situation where the OP had a duplicate Suricata instance running on the interface. I cal... Bill Meeks

01/03/2025

06:56 PM Bug #15944 (Closed): ACME Script Places _acme-challenge TXT Records in the Wrong Zone

Jim Pingle

06:54 PM Bug #15944: ACME Script Places _acme-challenge TXT Records in the Wrong Zone

It's working again and as expected. I saw a hint about the zone IDs in a reddid thread: https://www.reddit.com/r/PFSE... Manuel M.

04:12 PM Regression #15967 (Incomplete): pfsense duplicated WAN firewall rules

in order to replicate this behaiveur.
1- Passing floating rules in pfBlockerNG from Enable to disable (check box in ... Michel Feria

01:27 PM Bug #15965 (Incomplete): pfSense UI fails to execute Surricata IPS/IDS cmds

Please post on the forum for assistance with troubleshooting. Jim Pingle

05:29 AM Bug #15965 (Not a Bug): pfSense UI fails to execute Surricata IPS/IDS cmds

Suricata was installed successfully but when we tried to Disable/Enable Suricata with Rule configuration changes - it... Anuj Saxena

08:19 AM Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy

Gio M wrote in #note-41:
> Also looking to see this on CE RELENG_2_7_2.
>
> I see here it was added, then remove... Arvid Johansson

07:54 AM Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy

Also looking to see this on CE RELENG_2_7_2.
I see here it was added, then removed https://redmine.pfsense.org/pr... Gio M

01/02/2025

09:53 PM Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy

when will this be available on Community Edition ? steve pretlove

05:42 PM Bug #15917 (Rejected): In OpenVPN export package, the option Automagic Multi-WAN IPs (port forward targets) does not working as expected

I can't reproduce this here. The exported configuration correctly ends up with two @remote@ lines, one for each WAN.
... Jim Pingle

03:48 PM Feature #15960 (New): NTOP Port Configuration in WebUI feature request

Environment:
OS name: pfSense+
OS version: 24.11-RELEASE (FreeBSD 15.0-CURRENT)
Architecture: amd64
ntopng vers... Benjamin Coussement

03:28 PM Bug #15957 (Rejected): NTOPNG generates duplicate variable in CONF file when using advanced configuration lines on pfsense+

That is expected. There is no feature in the package that would detect and skip duplicate configuration lines like th... Jim Pingle

12/31/2024

04:45 PM Bug #15957 (Rejected): NTOPNG generates duplicate variable in CONF file when using advanced configuration lines on pfsense+

Environment:
OS name: pfSense+
OS version: 24.11-RELEASE (FreeBSD 15.0-CURRENT)
Architecture: amd64
ntopng vers... Benjamin Coussement

12/27/2024

08:36 PM Bug #15917 (Confirmed): In OpenVPN export package, the option Automagic Multi-WAN IPs (port forward targets) does not working as expected

I can duplicate that behavior.
Tested against 24.11
Steps to reproduce.
# Define the OpenVPN server on... Danilo Zrenjanin

12/22/2024

02:01 AM Bug #15932 (Incomplete): HAProxy entries disappear after saving with MIM enabled

Tested this on 24.11 with the latest HAProxy. I'm not able to reproduce this. I have three ACLs with two different ... Kris Phillips

12:53 AM Bug #15933 (Closed): pfBlockerNG crashes after updating to latest version on 12/16/2024

There was an issue here previously that's since been resolved in the package. It's also possible that the update bran... Marcos M

12:34 AM Feature #14423: haproxy 2.7 QUIC support (+ maybe LUA 5.4?)

Hello,
Time flies and we have now OpenSSL 3.4 which will be supported till 22nd October 2026. That date is past Open... Pawel Piaskowy

12/21/2024

07:51 PM Bug #15933: pfBlockerNG crashes after updating to latest version on 12/16/2024

No problem. I went back and looked the logs. The error started to occur after upgrading pfBlockerNG. Here is the l... Shawn Masters

07:28 PM Bug #15933: pfBlockerNG crashes after updating to latest version on 12/16/2024

Shawn Masters wrote in #note-2:
> I was on the 24.03 stable version. Since then I have upgraded to 24.11 and the pr... Christopher Cope

07:09 PM Bug #15933: pfBlockerNG crashes after updating to latest version on 12/16/2024

I was on the 24.03 stable version. Since then I have upgraded to 24.11 and the problem does not exist with that conf... Shawn Masters

05:49 PM Bug #15933: pfBlockerNG crashes after updating to latest version on 12/16/2024

I am not seeing this on 24.11 and the latest version of pfBlockerNG stable. Can you confirm if you are using the stab... Christopher Cope

12:01 PM Bug #15944 (Closed): ACME Script Places _acme-challenge TXT Records in the Wrong Zone

Since the latest update to pfSense 24.11 and ACME 0.9_1, it seems there is an issue with the challenge response. When... Manuel M.

12/19/2024

08:35 PM Feature #13905: Introduce GUI knob for controlling ```--snat-subnet-routes``` tailscaled option

Any updates from https://github.com/tailscale/tailscale/issues/5573 that could be implemented in pfsense? Mike Moore

02:43 PM Bug #15027 (Resolved): Bind DNS Server cannot reorder zones

Tested against:... Danilo Zrenjanin