pfSense » pfSense Plus

07/05/2022

01:51 PM Bug #13338 (Pull Request Review): OpenVPN DCO panics with short UDP packets

Marcos M

12:59 PM Bug #13338: OpenVPN DCO panics with short UDP packets

That looks to be the result of a short UDP packet. Short enough that it doesn't contain an openvpn header.
https:/... Kristof Provost

10:31 AM Bug #13338 (Resolved): OpenVPN DCO panics with short UDP packets

If a UDP packet directed towards an active OpenVPN socket is received which is too short to contain an OpenVPN header... Marcos M

07:43 AM Bug #12607 (Closed): Instability with Snort Inline with AWS Instances

Jim Pingle

07/04/2022

11:15 AM Bug #13334 (Not a Bug): Configuration Auto Backup broken after v22.05 fresh install

I was able to upload backups successfully. Likely a temporary service outage. If it continues to happen, I'd suggest ... Marcos M

07/03/2022

06:06 PM Bug #13334 (Not a Bug): Configuration Auto Backup broken after v22.05 fresh install

Multiple errors (30) generated with the same message:
3:33:24 An error occurred while uploading the encrypted confi... Rick Strangman

07/02/2022

09:05 PM Bug #12607: Instability with Snort Inline with AWS Instances

This can likely be closed as I've seen zero complaints on newer Plus releases for Snort Inline in AWS. Likely these ... Kris Phillips

06/29/2022

02:03 PM Bug #13320: IP aliases with a CARP VIP parent are not available as VIP choices for gateway groups

Looks like it's because the group drop-downs filter based on the VIP interface and it sees the CARP VIP as the interf... Jim Pingle

01:47 PM Bug #13320 (Resolved): IP aliases with a CARP VIP parent are not available as VIP choices for gateway groups

Configuration is an HA pair of 6100's with a failover gateway group, one ISP per gateway.
The intention is for IPs... Chris W

06/28/2022

12:04 PM Todo #13189 (Resolved): Input validation should reject the combination of DCO and P2P mode

Jim Pingle

12:04 PM Regression #13183 (Resolved): ZFS module is loaded on systems without ZFS

Jim Pingle

06/27/2022

07:23 AM Bug #11626: Google LDAP connections fail due to lack of SNI for TLS 1.3

Not up to me, it'll need to be handled by Luiz or Brad once things start moving for 22.09 but it's already on the radar. Jim Pingle

06/25/2022

05:34 PM Bug #11626: Google LDAP connections fail due to lack of SNI for TLS 1.3

Jim Pingle wrote in #note-15:
> Nudge this ahead so we have more time to ensure there aren't any regressions from th... Kris Phillips

05:30 PM Feature #12546: Add 2FA Support to pfSense Plus Local Database Authentication

Further expounding on this, it appears that Viscosity has native capability to add prompts in the client config.
... Kris Phillips

06/19/2022

06:42 PM Bug #13283 (Not a Bug): PBR forcing traffic out one WAN and back into another WAN with NAT Reflection Fails

Tested this.
With that PBR in place, even traffic that is being NAT'ed from the NAT Reflection rule will be caught... Marcos M

06/18/2022

05:48 PM Bug #13283 (Not a Bug): PBR forcing traffic out one WAN and back into another WAN with NAT Reflection Fails

Assuming the following configuration:
2 WAN interfaces WAN1 and WAN2
One LAN interface with Host A and Host B.
H... Kris Phillips

06/12/2022

11:14 AM Bug #13074: AES-GCM with SafeXcel on Netgate 2100 causes MBUF overload

I believe I have hit this as well, 2100 to 7100 GCM tunnel. Is there an upstream FreeBSD bugreport? I believe the fac... → luckman212

06/11/2022

07:01 PM Bug #13206: SG-3100 LED GPIO hangs

Daniel Subert wrote in #note-2:
> Hi Jim,
>
> Thanks for the update.
>
> As this issue is already being tracked int... Kris Phillips