pfSense » pfSense Plus

07/16/2023

11:45 AM Bug #13348 (Resolved): Error when deleting ZFS Boot Environment created from duplicate of non-default entry

Christian McDonald

02:45 AM Bug #13348: Error when deleting ZFS Boot Environment created from duplicate of non-default entry

Tested on July 10th builds of 23.09. Following Marcos' steps, I'm not able to reproduce this bug, so looking fixed. Kris Phillips

02:37 AM Bug #14531: Traffic Graph widget doesn't show traffic counts for OpenVPN interfaces since 23.05.1 upgrade.

I tested this with AES-128-GCM and DCO enabled and the Status --> Traffic Graphs still show traffic normally for me. ... Kris Phillips

07/15/2023

09:04 PM Bug #14005: SFP Interfaces not available with Traffic Shaper in v23.01

I presume you're booting between different ZFS snapshots, correct? If you upgrade or reflash to 23.05.1, does it beha... Chris W

07:45 PM Bug #13348: Error when deleting ZFS Boot Environment created from duplicate of non-default entry

I was able to create a new boot environment, clone it and remove the original as described above on 23.09.a.20230710.... Jordan G

07:26 PM Regression #14436: Upgrades from 23.05-RC/beta/dev fail server authentication

seeing some different choices in the branch selection just when cycling Jordan G

08:29 AM Bug #14531: Traffic Graph widget doesn't show traffic counts for OpenVPN interfaces since 23.05.1 upgrade.

I ran another test and this time, I disabled DCO. The traffic Graph widget was showing traffic.
The problem only oc... Danilo Zrenjanin

06:58 AM Bug #14563 (Resolved): System Log - General Log Order Setting is not being respected when using Raw Logs

Tested the patch against:... Danilo Zrenjanin

07/12/2023

09:38 AM Bug #14531: Traffic Graph widget doesn't show traffic counts for OpenVPN interfaces since 23.05.1 upgrade.

In my case:
DCO enabled
Tun mode
Platform 5100
Lev Prokofev

07/10/2023

01:15 PM Bug #14563 (Feedback): System Log - General Log Order Setting is not being respected when using Raw Logs

Applied in changeset pfsense:commit:7f7d0165a37f0d7d2e0e8e5d1bd4ab2e35fc8ab8. Christopher Cope

07/08/2023

09:34 PM Bug #14563 (Pull Request Review): System Log - General Log Order Setting is not being respected when using Raw Logs

https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1046 Christopher Cope

09:29 PM Bug #14563 (Confirmed): System Log - General Log Order Setting is not being respected when using Raw Logs

Thank you for that detail! I was able to confirm that behavior. I'll get the patch submitted shortly. Christopher Cope

08:58 PM Bug #14563: System Log - General Log Order Setting is not being respected when using Raw Logs

Thank you for your reply. I have just noticed that the problem happens when using "Raw Logs" format in combination wi... Fred Lear

06:09 PM Bug #14563: System Log - General Log Order Setting is not being respected when using Raw Logs

I am unable to reproduce this. I have a fresh 23.05.1 install and changing the global option instantly affects all lo... Christopher Cope

05:58 PM Bug #14563 (Resolved): System Log - General Log Order Setting is not being respected when using Raw Logs

No matter what the "Forward/Reverse Display" option in general System Log settings is set to, the logs are always dis... Fred Lear

07/07/2023

05:08 PM Bug #14175: LDAP authentication for SSH fails

With @Use Authentication Server for Shell Authentication@ checked, this issue can prevent the firewall from booting c... Marcos M

02:33 PM Regression #14378: Packages are not removed when using the hardware reset button

Also happens when using the console menu to restore to defaults. Or at least, they are not removed, not sure which. ... Steve Y

11:59 AM Bug #13348 (Feedback): Error when deleting ZFS Boot Environment created from duplicate of non-default entry

Fixed: https://gitlab.netgate.com/pfSense/FreeBSD-src/-/commit/2a3ce72f2163aa8bc0cd4224354a43c8067569c7 Christian McDonald

01:40 AM Bug #13348: Error when deleting ZFS Boot Environment created from duplicate of non-default entry

https://reviews.freebsd.org/D40903
Christian McDonald

07/06/2023

06:12 PM Feature #14555: Display Overridden Interface Names On Interface and VLAN Setup Pages

Alternatively, you could just hide the internal device names altogether for those specific areas previously mentioned... John Uplink

06:01 PM Feature #14555 (New): Display Overridden Interface Names On Interface and VLAN Setup Pages

Please reference overridden interface names in various places in the pfSense web management UI. It seems that in some... John Uplink

07/05/2023

12:23 PM Bug #14531: Traffic Graph widget doesn't show traffic counts for OpenVPN interfaces since 23.05.1 upgrade.

It would help to know a few things, such as:
* Is DCO enabled or disabled?
* Is OpenVPN in tap or tun mode?
* Ha... Jim Pingle

07/01/2023

11:45 PM Bug #14531: Traffic Graph widget doesn't show traffic counts for OpenVPN interfaces since 23.05.1 upgrade.

What is being done to reproduce this? I have two OpenVPN Client interfaces and the widget on the dashboard shows tra... Kris Phillips

06:24 AM Bug #14531 (Confirmed): Traffic Graph widget doesn't show traffic counts for OpenVPN interfaces since 23.05.1 upgrade.

Tested on SG-3100 23.05.1 release. I can confirm this behavior. Danilo Zrenjanin

06/30/2023

04:48 PM Bug #14531 (Confirmed): Traffic Graph widget doesn't show traffic counts for OpenVPN interfaces since 23.05.1 upgrade.

The Traffic Graph widget doesn't show the in\out traffic for the OpenVPN interfaces.
!clipboard-202306302045-mzwyk... Lev Prokofev

06/29/2023

05:14 PM Bug #14526 (Rejected): 23.05.01 can't normal boot

This site is not for support or diagnostic discussion.
For assistance in solving problems, please post on the "Net... Jim Pingle

05:12 PM Bug #14526 (Rejected): 23.05.01 can't normal boot

i am upgrade from 23.05 to 23.05.01. it is installed frr. the 23.05.01 can't normal work.
!clipboard-20230... yon Liu

07:26 AM Bug #14515 (Resolved): Ethernet rule Action field hint text lists "reject" option which is not compatible with Ethernet rules

Tested the patched file. The help text on Ethernet rules says only "Choose what to do with packets that match the cri... Danilo Zrenjanin

03:14 AM Bug #14515: Ethernet rule Action field hint text lists "reject" option which is not compatible with Ethernet rules

Thanks for looking into this small detail. I appreciate you. Jonathan Lee

06/28/2023

03:04 PM Bug #14515: Ethernet rule Action field hint text lists "reject" option which is not compatible with Ethernet rules

Updating subject and fixing project/target. Jim Pingle

02:17 PM Bug #14515 (Feedback): Ethernet rule Action field hint text lists "reject" option which is not compatible with Ethernet rules

Thanks.
pf(4) only supports pass/block action semantics for L2 rule processing, reject/match are not supported.
I h... Christian McDonald

06/27/2023

10:25 PM Bug #14515 (Resolved): Ethernet rule Action field hint text lists "reject" option which is not compatible with Ethernet rules

Hello fellow pfsense redmine members,
I wanted to post this under the experimental layer 2 access control list are... Jonathan Lee

06/26/2023

12:26 PM Bug #14507 (Not a Bug): CPU hog with 23.05

Given that the thread in question is from iflib this seems more like busy hardware or an upstream driver issue and no... Jim Pingle

06/25/2023

04:15 PM Bug #14507: CPU hog with 23.05

If there is a bug, it's more likely to be upstream. FWIW a debug kernel is available in the pfSense repo:... Marcos M

07:49 AM Bug #14507: CPU hog with 23.05

Kris Phillips wrote in #note-1:
> I'm unable to reproduce this on 23.05 on an amd64 system.
>
> kernel{if_io_tq... Juraj Lutter

01:55 AM Bug #14507: CPU hog with 23.05

I'm unable to reproduce this on 23.05 on an amd64 system.
kernel{if_io_tqg_1} would be interface processing from... Kris Phillips

06/24/2023

07:32 AM Bug #14507 (Not a Bug): CPU hog with 23.05

I’ve started to observe a CPU hog of one CPU core on APU2 box running pfSense 23.05.
dtrace showed:... Juraj Lutter

06/23/2023

02:32 PM Bug #14385 (Resolved): Unicast CARP VIPs do not communicate using IPv6 Link Local Addresses

Confirmed fixed here as well. I can set an LL on the VIP peer and it communicates as expected and reflects the proper... Jim Pingle

12:54 PM Bug #14385: Unicast CARP VIPs do not communicate using IPv6 Link Local Addresses

23.05.1 fixes the issue
tested on:
Version 23.05.1-RC (amd64)
built on Wed Jun 21 19:31:48 UTC 2023
FreeBSD 14.0-... Georgiy Tyutyunnik

06/20/2023

08:42 AM Bug #13569: Restarting an OpenVPN server running on a CARP VIP in an HA cluster can disrupt unrelated TCP states

I don't think those two are related. Florian Apolloner

06/19/2023

10:36 PM Bug #13569: Restarting an OpenVPN server running on a CARP VIP in an HA cluster can disrupt unrelated TCP states

Potentially related to https://redmine.pfsense.org/issues/11556 Marcos M

04:57 PM Bug #14478: Ethernet rules using ``(self)`` as a source or destination make the ruleset fail to load

The issue here is that pfctl is not correctly parsing the case where the L3 host spec is a dynamic host, that is @(se... Christian McDonald

07:59 AM Bug #14385: Unicast CARP VIPs do not communicate using IPv6 Link Local Addresses

So the fix was already in 2.7 BETA, and was also cherry-picked to the plus-RELENG_23_05 branch in case of future poin... Kristof Provost

06/18/2023

02:51 AM Regression #14436: Upgrades from 23.05-RC/beta/dev fail server authentication

Still unable to hit this again when switching update branch or add/removing packages. Lets verify what branches shoul... Jordan G

06/17/2023

03:48 PM Bug #14385: Unicast CARP VIPs do not communicate using IPv6 Link Local Addresses

I tested against the latest Plus DEVELOPMENT built.
The behavior is consistent with the explanation provided. It a... Danilo Zrenjanin