Project

General

Profile

Activity

From 04/16/2023 to 05/15/2023

05/15/2023

11:25 PM Feature #14387 (New): Offline config mode
From a forum discussion. Steve deserves credit.
[[https://forum.netgate.com/topic/180107]]
h1. Offline Config Mod...
Mike Leone
07:43 PM Regression #14383 (Resolved): IPv6 CARP VIPs are not configured properly on interfaces, ``ifconfig`` error in system log
Thanks for testing!
Jim Pingle
06:03 PM Regression #14383: IPv6 CARP VIPs are not configured properly on interfaces, ``ifconfig`` error in system log
Jim Pingle wrote in #note-7:
> The URL for that commit is private, it will be in the next build.
>
> You can try ...
Vladimir Suhhanov
05:50 PM Regression #14383: IPv6 CARP VIPs are not configured properly on interfaces, ``ifconfig`` error in system log
The URL for that commit is private, it will be in the next build.
You can try this patch in the meantime, which is...
Jim Pingle
05:41 PM Regression #14383: IPv6 CARP VIPs are not configured properly on interfaces, ``ifconfig`` error in system log
Jim Pingle wrote in #note-5:
> Vladimir Suhhanov wrote in #note-4:
> > Jim Pingle wrote in #note-2:
> > > Fixed in...
Vladimir Suhhanov
04:09 PM Regression #14383: IPv6 CARP VIPs are not configured properly on interfaces, ``ifconfig`` error in system log
Vladimir Suhhanov wrote in #note-4:
> Jim Pingle wrote in #note-2:
> > Fixed in https://gitlab.netgate.com/pfSense/...
Jim Pingle
03:59 PM Regression #14383: IPv6 CARP VIPs are not configured properly on interfaces, ``ifconfig`` error in system log
Jim Pingle wrote in #note-2:
> Fixed in https://gitlab.netgate.com/pfSense/factory/-/commit/7694007e9570faecfd715020...
Vladimir Suhhanov
03:37 PM Regression #14383: IPv6 CARP VIPs are not configured properly on interfaces, ``ifconfig`` error in system log
Not a problem in a release, exclude from release notes. Jim Pingle
02:04 PM Regression #14383 (Feedback): IPv6 CARP VIPs are not configured properly on interfaces, ``ifconfig`` error in system log
Fixed in https://gitlab.netgate.com/pfSense/factory/-/commit/7694007e9570faecfd7150206bd029fba2bb4bf0
There is one...
Jim Pingle
12:48 PM Regression #14383 (Confirmed): IPv6 CARP VIPs are not configured properly on interfaces, ``ifconfig`` error in system log
I can reproduce this here as well:... Jim Pingle
06:58 PM Regression #13895 (Resolved): Early boot hangs on Hyper-V with Gen2 VMs
23.05-RC works correctly with Azure and Windows 11 Hyper-V in all mentioned test cases. If any issues are found after... Marcos M
06:52 PM Regression #14137: pfSense Plus Upgrade repo data remains on the system after upgradng
This works as expected upgrading from 2.6 to 23.01. The correct repo is set after upgrade and the custom repo data is... Steve Wheeler
02:08 PM Bug #14357 (Closed): Making Changes to DNS Resolution Behavior Causes DNS Servers to be Lost
Closing this for now, if you can find a way to reproduce it, check the files in my comment above and see what the con... Jim Pingle
02:01 PM Bug #14385 (Resolved): Unicast CARP VIPs do not communicate using IPv6 Link Local Addresses
Configuring an IPv6 CARP VIP with a link local sync peer address does not appear to function properly. I've tried wit... Jim Pingle
12:57 PM Feature #14348: Add unicast CARP indication and peer address to CARP status
While here, if there is room, the VIP description would also be helpful Jim Pingle

05/14/2023

03:11 PM Regression #14383 (Resolved): IPv6 CARP VIPs are not configured properly on interfaces, ``ifconfig`` error in system log
https://forum.netgate.com/topic/180051/ipv6-carp-seems-broken-on-23-05/4
Let's say you have a LAN with both IPV6 a...
Vladimir Suhhanov
01:42 AM Bug #14357: Making Changes to DNS Resolution Behavior Causes DNS Servers to be Lost
Jordan Greene wrote in #note-3:
> Not able to reproduce this either. Does the DNS server override pull different ser...
Kris Phillips
01:38 AM Bug #14357: Making Changes to DNS Resolution Behavior Causes DNS Servers to be Lost
Not able to reproduce this either. Does the DNS server override pull different servers on your ATT interface? Jordan G
12:42 AM Bug #14357: Making Changes to DNS Resolution Behavior Causes DNS Servers to be Lost
I'm no longer able to reproduce this. I was able to reliably get this to happen when flipping between between "Use R... Kris Phillips
12:49 AM Bug #14329: DDNS IPv6 update PHP error
Tested on pfSense Plus 23.05 RC from May 13th. This is present in this build and confirmed. Kris Phillips

05/12/2023

12:59 PM Regression #14378: Packages are not removed when using the hardware reset button
Observed the same thing on the 2100 using the reset button. Steve Wheeler
12:41 AM Regression #14378 (Confirmed): Packages are not removed when using the hardware reset button
More precisely it appears that packages are re-installed after rebooting into the new config.
This does not happen...
Steve Wheeler

05/08/2023

01:48 PM Bug #14357 (Feedback): Making Changes to DNS Resolution Behavior Causes DNS Servers to be Lost
I can't reproduce this here. Where exactly are they missing from?
If I change that mode from the default (use local,...
Jim Pingle

05/07/2023

02:42 AM Bug #14357 (Closed): Making Changes to DNS Resolution Behavior Causes DNS Servers to be Lost
If DNS servers are define by DHCP in pfSense Plus 23.05 and you change the DNS Resolution Behavior under System --> G... Kris Phillips

05/06/2023

01:57 PM Regression #14137 (Feedback): pfSense Plus Upgrade repo data remains on the system after upgradng
Fixed in the latest pfSense-upgrade. Luiz Souza
06:59 AM Feature #13227: Group-based Mobile IPsec Virtual Address Pool assignment via RADIUS
Christopher de Haas wrote in #note-3:
> I very much hope to see this in an upcoming version. We currently have to us...
Tue Madsen

05/05/2023

10:19 PM Regression #14137: pfSense Plus Upgrade repo data remains on the system after upgradng
aleksei prokofiev wrote in #note-1:
> Also, if package manager unavailable, may help next solution
> Check and then...
Grant Macdonald
09:54 PM Feature #13227: Group-based Mobile IPsec Virtual Address Pool assignment via RADIUS
I very much hope to see this in an upcoming version. We currently have to use openvpn instances or full pfSense insta... Christopher de Haas
07:39 PM Bug #8600: "snmpd SIOCGIFDESCR (e6000sw0port1): Device not configured"
Jim Pingle wrote in #note-12:
> Martin Stockzell wrote in #note-11:
> > Jim Pingle wrote in #note-10:
> > > See #1...
Martin Stockzell
07:38 PM Bug #8600: "snmpd SIOCGIFDESCR (e6000sw0port1): Device not configured"
Martin Stockzell wrote in #note-11:
> Jim Pingle wrote in #note-10:
> > See #13976 -- it's already fixed on 23.05 s...
Jim Pingle
07:36 PM Bug #8600: "snmpd SIOCGIFDESCR (e6000sw0port1): Device not configured"
Jim Pingle wrote in #note-10:
> See #13976 -- it's already fixed on 23.05 snapshots
My bad I actually thought it ...
Martin Stockzell
07:28 PM Bug #8600: "snmpd SIOCGIFDESCR (e6000sw0port1): Device not configured"
See #13976 -- it's already fixed on 23.05 snapshots Jim Pingle
07:27 PM Bug #8600: "snmpd SIOCGIFDESCR (e6000sw0port1): Device not configured"
Unfortunatly it's back...
@May 5 21:20:06 snmpd 15562 SIOCGIFDESCR (e6000sw0port3): Device not configured
May 5 21:2...
Martin Stockzell
07:27 PM Feature #14339: Sort interfaces by name/custom order
I meant to add, if you just want the cosmetic sorting there is an option for that under System > General and it can b... Jim Pingle
06:39 PM Bug #14340 (Resolved): Unicast CARP XMLRPC sync does not adjust CARP peer address when sycnrhonizing
Jim Pingle
06:39 PM Bug #14340: Unicast CARP XMLRPC sync does not adjust CARP peer address when sycnrhonizing
tested on:
Version
23.05-BETA (amd64)
built on Wed May 03 06:05:00 UTC 2023
FreeBSD 14.0-CURRENT
patches succe...
Georgiy Tyutyunnik

05/04/2023

05:01 PM Feature #14348 (Resolved): Add unicast CARP indication and peer address to CARP status
On *Status > CARP* (@status_carp.php@) the status of each VHID is printed along with other info about the VIPs.
It...
Jim Pingle
01:01 PM Bug #14344 (Duplicate): No PHP errors found
Duplicate of #13938 Jim Pingle
10:06 AM Bug #14344 (Duplicate): No PHP errors found
Crash report begins. Anonymous machine information:
amd64
14.0-CURRENT
FreeBSD 14.0-CURRENT #0 plus-RELENG_23_0...
hamza başak
01:00 PM Bug #14342 (Rejected): Packages not working
This site is not for support or diagnostic discussion.
For assistance in solving problems, please post on the "Net...
Jim Pingle
08:54 AM Bug #14342 (Rejected): Packages not working
Hello,
I upgraded from community version to plus and the packages do not work.
*Install package:* * Unable to r...
Andrei Lazarescu

05/03/2023

07:40 PM Bug #14340 (Feedback): Unicast CARP XMLRPC sync does not adjust CARP peer address when sycnrhonizing
Fixed by the following commits:
* https://gitlab.netgate.com/pfSense/factory/-/commit/8d52ac6d5cdfc7173c03ce106ead...
Jim Pingle
07:21 PM Bug #14340 (Resolved): Unicast CARP XMLRPC sync does not adjust CARP peer address when sycnrhonizing
When XMLRPC sync is enabled for VIPs and the primary has a unicast CARP VIP configured, the VIP is copied to the seco... Jim Pingle
02:37 PM Regression #13895: Early boot hangs on Hyper-V with Gen2 VMs
I never could replicate the original hang here, but my Hyper-V test VM (Gen2, ZFS) upgraded fine from 23.01 to 23.05 ... Jim Pingle
02:18 PM Bug #13976: SNMP logs "Device not configured" error message when queries involve built-in switch port interfaces
Before upgrading to the current snapshot:... Jim Pingle
01:53 PM Bug #13976 (Resolved): SNMP logs "Device not configured" error message when queries involve built-in switch port interfaces
Christian McDonald
01:53 PM Feature #14308 (Resolved): Support for Ethernet (L2) filtering rules
Latest snapshot has the updated help text and experimental note. Christian McDonald
11:36 AM Feature #14339 (Rejected): Sort interfaces by name/custom order
The interface order is significant and must be maintained. Allowing this safely would require significant changes to ... Jim Pingle

05/02/2023

10:09 PM Feature #14339: Sort interfaces by name/custom order
This also applies to the VLAN page, where the vlans are listed in the order they were added. There is a way to sort t... douglas meyer
10:05 PM Feature #14339 (Rejected): Sort interfaces by name/custom order
On the interfaces > assignments page, interfaces are displayed in the order I added them to my pfSense unit, instead ... douglas meyer
05:21 PM Regression #14137 (In Progress): pfSense Plus Upgrade repo data remains on the system after upgradng
Luiz said he and Steve W. will work together on solving this. Jim Pingle
03:38 PM Feature #14308 (Feedback): Support for Ethernet (L2) filtering rules
Option text updated in https://gitlab.netgate.com/pfSense/factory/-/commit/3bc930fcb786a4b0fa264c093150f3d27b31f1ae
...
Jim Pingle
02:49 PM Feature #14308 (In Progress): Support for Ethernet (L2) filtering rules
To me for a tiny change, going to add a warning to the enable option marking this as beta/experimental for this relea... Jim Pingle
03:12 PM Bug #13976 (Feedback): SNMP logs "Device not configured" error message when queries involve built-in switch port interfaces
Fixed. Luiz Souza

05/01/2023

07:16 PM Bug #13976: SNMP logs "Device not configured" error message when queries involve built-in switch port interfaces
It _looks_ like this would be a current equivalent change:... Jim Pingle
07:12 PM Bug #13976: SNMP logs "Device not configured" error message when queries involve built-in switch port interfaces
The last time we fixed this appears to be in src commit b33b6cb8a704be9c4053ca4f050357cd9eb0a13d (Internal link: http... Jim Pingle
06:21 PM Regression #14233 (Resolved): pfSense installer crashes on the 7100
This is fixed in current 23.05 snaps. The Apr 3rd snap panics at every boot, current snaps boot and install fine.
...
Steve Wheeler
05:13 PM Regression #14233: pfSense installer crashes on the 7100
was able to install to m.2 on 7100 using memstick-serial-23.05-DEVELOPMENT-amd64-20230427-0208.img without issue Jordan G
04:52 PM Regression #14233: pfSense installer crashes on the 7100
Does this 7100 have any expansion cards in it?
M.2 or eMMC?
Does it happen with a more recent BETA snapshot?
Jim Pingle
04:48 PM Bug #13455: Serial console output fails to render properly in certain cases on 4100, 6100, and 8200.
Moving forward, still no leads on a cause here.
Jim Pingle
04:03 PM Regression #14320 (Resolved): ``ifconfig -a`` prints CARP information for interfaces that do not have CARP configured
This is fixed on current snapshots. CARP info is only printed for interfaces which actually contain CARP VIPs now.
Jim Pingle
03:51 PM Regression #14334 (Closed): 2100/1100 PCIe bus devices are not recognized
Copying from NG 9622 so it will get a release notes entry. This is already confirmed to be resolved on 23.05.
In 2...
Jim Pingle

04/30/2023

11:55 PM Bug #14329 (New): DDNS IPv6 update PHP error
Dynamic DNS updates to DigitalOcean for IPv6 fail with a PHP error. This error appears in both the GUI's crash report... Ryan H

04/29/2023

03:16 PM Feature #14308: Support for Ethernet (L2) filtering rules
Tested on an ATT connection. 802.1X traffic passed with the new filtering rules perfectly and without incident. See... Kris Phillips
12:49 AM Feature #14323 (Resolved): Print ZFS Boot Environment status in console menu banner
Tested on... Christopher Cope

04/28/2023

03:16 PM Feature #14323: Print ZFS Boot Environment status in console menu banner
Updating subject for release notes. Jim Pingle
02:53 PM Feature #14323 (Resolved): Print ZFS Boot Environment status in console menu banner
Christian McDonald
03:12 PM Feature #14308: Support for Ethernet (L2) filtering rules
Updating subject for release notes. Jim Pingle
12:34 PM Regression #14320 (Feedback): ``ifconfig -a`` prints CARP information for interfaces that do not have CARP configured
The fix has been pushed upstream and merged into our branched. It'll be in the next snapshots.
The issue was that ...
Kristof Provost

04/27/2023

02:29 PM Regression #14320: ``ifconfig -a`` prints CARP information for interfaces that do not have CARP configured
Just to note, this only happens on 23.05 snapshots so it is likely related to unicast CARP changes. Jim Pingle
02:28 PM Regression #14320 (Resolved): ``ifconfig -a`` prints CARP information for interfaces that do not have CARP configured
On a system with five interfaces configured, I have CARP VIPs on two of them (vtnet0, vtnet1) and yet @ifconfig -a@ p... Jim Pingle
12:21 PM Bug #14319 (Rejected): PHP Fatal error bytes exhausted guiconfig.in
Not enough information here for a valid bug report. This site is not for support or diagnostic discussion.
For ass...
Jim Pingle
12:20 PM Bug #14319 (Rejected): PHP Fatal error bytes exhausted guiconfig.in
Crash report begins. Anonymous machine information:
amd64
14.0-CURRENT
FreeBSD 14.0-CURRENT #0 plus-RELENG_23_0...
Michael Pelley
11:19 AM Feature #14308 (Feedback): Support for Ethernet (L2) filtering rules
MR was merged, it's in snapshots for testing. Jim Pingle

04/26/2023

05:12 PM Regression #14137: pfSense Plus Upgrade repo data remains on the system after upgradng
aleksei prokofiev wrote in #note-1:
> Also, if package manager unavailable, may help next solution
> Check and then...
Gabriel Zellmer

04/25/2023

04:26 PM Feature #14308 (Pull Request Review): Support for Ethernet (L2) filtering rules
https://gitlab.netgate.com/pfSense/factory/-/merge_requests/102 Christian McDonald
12:27 PM Feature #14308 (Resolved): Support for Ethernet (L2) filtering rules
Christian McDonald
10:21 AM Regression #14235 (Resolved): Undersized CESA TDMA descriptor pools can be exhausted, leading to errors
Christian McDonald
10:20 AM Bug #14204 (Resolved): System Information Dashboard widget stops showing CPU details on aarch64
Christian McDonald
10:18 AM Feature #14293 (Resolved): Package plugin hook for pf Ethernet rules
Currently no consumers of this feature, but it's simple enough that it should work. Christian McDonald
10:18 AM Feature #13511 (Resolved): Priority Code Point (PCP) option on interface configuration
This seems to work as expected. Christian McDonald
10:17 AM Bug #13348: Error when deleting ZFS Boot Environment created from duplicate of non-default entry
Going to punt this to 23.09. Bigger fish to fry for 23.05 release. Christian McDonald

04/24/2023

09:10 PM Bug #13875 (Duplicate): Boot after upgrade form 22.05 to 23.01 hangs
This looks like the issue reported here which is fixed for 23.05: https://redmine.pfsense.org/issues/13895 Marcos M
05:30 PM Bug #13875: Boot after upgrade form 22.05 to 23.01 hangs
I'm also experiencing this issue @jimp. Host OS is Hyper-V 2022.
This post on reddit summarizes the issue exactl...
Travis McMurry
07:34 PM Regression #13895 (Feedback): Early boot hangs on Hyper-V with Gen2 VMs
Marcos M
07:26 PM Regression #13895: Early boot hangs on Hyper-V with Gen2 VMs
For reference:
Early boot hang fixes which resolve serial console issues in Azure/Hyper-V
https://github.com/pfsense...
Marcos M
07:12 AM Regression #14300 (Duplicate): Re: ``mmcsd0`` controller timeout/system hang on 1100
The previous issue (#14181) is closed because it's either solved on *23.05* or it's hardware. So either it's already ... Jim Pingle

04/22/2023

09:41 PM Regression #14300: Re: ``mmcsd0`` controller timeout/system hang on 1100
Typically these messages indicate eMMC controller or storage chip failure. It is unlikely to be a bug. Are you able... Kris Phillips
08:22 PM Regression #14300 (Duplicate): Re: ``mmcsd0`` controller timeout/system hang on 1100
[the original issue is closed so I can no longer post to it!?!]
I'm still on 23.01, running my spare SG-1100, and ...
Craig Leres
07:59 PM Feature #14295 (Resolved): Promiscuous Mode option on interface configuration
Tested on... Christopher Cope
12:27 AM Feature #14297: Add Option for Vendor Class ID in DHCP Client
With only option 60 there could be a caveat described here https://redmine.pfsense.org/issues/13279
You also need to...
Lev Prokofev

04/21/2023

04:59 PM Feature #14297: Add Option for Vendor Class ID in DHCP Client
It is possible to do this already using the Send Options field in the advanced dhcp client options.
However a sepa...
Steve Wheeler
03:07 PM Feature #14297 (New): Add Option for Vendor Class ID in DHCP Client
Some ISPs require a Vendor Class ID be sent (option 60) when requesting DHCP. This can currently be accomplished in ... Kris Phillips
12:27 PM Feature #14173: QAT driver does not attach to QAT virtual function devices passed through to VM on Xeon D-2146NT
Thank you for responding.
I'm aware of the hardware you are selling. Now that the next generation of Atom and Xeon...
name name
11:06 AM Feature #14173: QAT driver does not attach to QAT virtual function devices passed through to VM on Xeon D-2146NT
We make sure that QAT works on hardware we sell: C3000, C2000, and the add-on CPIC cards in the Netgate shop. Support... Jim Pingle
10:51 AM Feature #14173: QAT driver does not attach to QAT virtual function devices passed through to VM on Xeon D-2146NT
I was informed by Intel that there will be no QAT support in FreeBSD 14.0 for any chips other than those belonging to... name name
09:19 AM Feature #14295 (Resolved): Promiscuous Mode option on interface configuration
Christian McDonald

04/20/2023

02:53 PM Feature #13511: Priority Code Point (PCP) option on interface configuration
Updating subject for release notes. Jim Pingle
09:46 AM Feature #13511 (Feedback): Priority Code Point (PCP) option on interface configuration
Christian McDonald
02:51 PM Regression #14102: Console menu incorrectly shows option ``99`` on some ARMv7/ARM64 installations
Updating subject for release notes. Jim Pingle
08:12 AM Regression #14102 (Resolved): Console menu incorrectly shows option ``99`` on some ARMv7/ARM64 installations
After the latest Plus commit for this issue from Luiz (d470b17c454abb59f48846d361a260191655f1fe) it appears to be OK ... Jim Pingle
11:11 AM Feature #14293: Package plugin hook for pf Ethernet rules
https://gitlab.netgate.com/pfSense/factory/-/commit/738ac108364a4abbcd2b6c918b34ff9e7511c7ca Christian McDonald
11:10 AM Feature #14293 (Resolved): Package plugin hook for pf Ethernet rules
Packages can now add pf ether rules using the @<filter_rules_needed>package_rules</filter_rules_needed>@ mechanism.
...
Christian McDonald
09:53 AM Regression #14292 (Resolved): Status LEDs on the Netgate 1100 do not function properly
The 1100 status LED is created with a different name after the DTS change in 23.01.
It is now @/dev/led/led2@ and ...
Jim Pingle
09:51 AM Feature #14291 (Closed): Support for cryptographic acceleration using the Multi-Buffer Crypto for IPsec Library (IPsec-MB, IIMB)
The kernel module for the Intel® Multi-Buffer Crypto for IPsec Library (a.k.a. IPsec-MB or IIMB) has been added in th... Jim Pingle
07:52 AM Regression #14181 (Closed): ``mmcsd0`` controller timeout/system hang on 1100
Another update after another 2 weeks on 23.05 with my 1100, still have yet to see another timeout. It was happening f... Jim Pingle

04/19/2023

10:56 AM Feature #13511: Priority Code Point (PCP) option on interface configuration
This is ready to land: https://gitlab.netgate.com/pfSense/factory/-/merge_requests/99 Christian McDonald
10:56 AM Feature #13511 (Pull Request Review): Priority Code Point (PCP) option on interface configuration
Christian McDonald

04/17/2023

02:55 PM Bug #13497: unbound process looks like stuck periodically
Yaroslav Semenenko wrote:
> Hello,
>
> I have Netgate 2100.
> Unbound service is needed to restart sometimes due...
Ketul Patel
10:44 AM Regression #14235: Undersized CESA TDMA descriptor pools can be exhausted, leading to errors
Updating subject for release notes. Jim Pingle
10:00 AM Regression #13993: Switch ports on 7100/1100/2100 do not have Auto MDI-X support enabled
Updating subject for release notes. Jim Pingle
09:49 AM Bug #14204: System Information Dashboard widget stops showing CPU details on aarch64
Updating subject for release notes. Jim Pingle

04/16/2023

05:51 AM Bug #13975: when assigning a vlan to wan interface configured mac address is not used
Hi Chris,
I've opened two tac cases (as I have a primary fw as a whitebox, and the sg-3100 as backup). I did a rec...
Oscar Muntenaar
 

Also available in: Atom