Activity
From 10/12/2022 to 11/10/2022
11/10/2022
-
02:41 PM Feature #13649 (Resolved): Support for ChaCha20-Poly1305 and AES-128-GCM encryption with OpenVPN DCO
- Copying from NG Redmine.
The @if_ovpn@ driver (in plus) and OpenVPN userspace now support ChaCha20-Poly1305 and AE...
11/02/2022
-
07:27 PM Feature #13511: Priority Code Point (PCP) option on interface configuration
- An alternative GUI interface to enable setting the VLAN to zero is, to allow the VLAN to be set to zero in the GUI.
...
10/31/2022
-
01:22 PM Regression #13613 (Resolved): OpenVPN crashes due to if_tuntap changes
- Tested patch - issue now fixed.
-
12:34 PM Regression #13613 (Ready To Test): OpenVPN crashes due to if_tuntap changes
- https://gitlab.netgate.com/pfSense/factory/-/commit/47923705f62711ff1764e8eac21607f2bdd07401
-
- Tested on @pfSense-23.01.a.20221031.0600@.
Client/Server (no DCO) crashes only after a reboot - starting it manual... -
- The @dco_set_ifmode@ issue has been resolved after updating to @pfSense-23.01.a.20221031.0600@.
-
- Tested and it works well - thanks!
10/28/2022
-
- https://gitlab.netgate.com/pfSense/factory/-/merge_requests/81
Your analysis is spot on. We can resolve this probl... -
- `dco_set_ifmode: failed to set ifmode=00008002: Operation not supported (errno=45)` happened because the openvpn user...
10/27/2022
-
- Tested on @pfSense-23.01.a.20221026.0600@.
Client/Server crashes with DCO enabled:
> dco_set_ifmode: failed to se... -
- If OpenVPN crashes with DCO enabled, it doesn't remove the interface which prevents it from starting again. The inter...
10/24/2022
10/22/2022
-
01:31 PM Bug #13577: Network Time Protocol (NTP) Mode 6 Scanner
- Checking /var/etc/ntpd.conf on 22.05, the proper "notrap" and "nomodify" config line items are present
restrict defa...
10/19/2022
-
03:29 PM Bug #13577: Network Time Protocol (NTP) Mode 6 Scanner
- The remote NTP server responds to mode 6 queries. Devices that respond to these queries have the potential to be used...
-
- Im running a Nessuss scan against my pfsense+ firewall version pfsense+ 22.05-RELEASE (amd64) and it reports that pfs...
-
10/18/2022
-
- Additional notes while working with cjl:
Commenting out the line @/sbin/pfctl -i $1 -Fs@ in @/usr/local/sbin/ovpn-lin... -
04:38 PM Bug #13572: SG-3100 switch wrong behavior
- The problem has been solved with the help of stephenw10 and johnpoz
Details can be found here:
https://forum.netg... -
- Disregard that VLAN199 in the topology, that doesn't exist anymore.
Follows a pcap made in host 192.168.255.251:
-
- Problem description: Connections going to host 192.168.255.253 are being sent to 192.168.255.251
*VLAN100 LAN: 192...
10/17/2022
-
- A few points here after working with cjl a bit trying to narrow it down:
* The states that disappear are not direc... -
06:48 AM Bug #13569: Restarting an OpenVPN server running on a CARP VIP in an HA cluster can disrupt unrelated TCP states
- Verified. Running OpenVPN server bound to Localhost and port forwarding an IP Alias/CARP VIP to it looks like a reaso...
-
03:43 AM Bug #13569: Restarting an OpenVPN server running on a CARP VIP in an HA cluster can disrupt unrelated TCP states
- forgot to add: without OpenVPN running on VIP or even with OpenVPN runnning on WAN, there is no problem with TCP stre...
-
- Our customer (Ticket #1161128024) pointed out on possible problem with HA cluster and TCP streams. During troubleshoo...
Also available in: Atom