pfSense » pfSense Plus

07/26/2023

02:53 PM Bug #14586 (Confirmed): Adding an IP Alias VIP using a unicast CARP VIP as its parent changes the CARP VIP to multicast at the OS level

Ok, that was my bad. I've checked only the GUI status. After checking the ifconfig output, I realized that it reverts... Danilo Zrenjanin

08:10 AM Bug #14586: Adding an IP Alias VIP using a unicast CARP VIP as its parent changes the CARP VIP to multicast at the OS level

I backed out my patch and rebooted. Looking at just LAN:... James George

07:42 AM Bug #14586: Adding an IP Alias VIP using a unicast CARP VIP as its parent changes the CARP VIP to multicast at the OS level

Interesting, I'm definitely seeing this on 23.05.1 (just noticed I selected the wrong version in the bug - I'll fix t... James George

07:34 AM Bug #14586: Adding an IP Alias VIP using a unicast CARP VIP as its parent changes the CARP VIP to multicast at the OS level

I've tested against:... Danilo Zrenjanin

12:06 PM Feature #14612 (Rejected): Show egress interface in firewall logs

The log entries have no concept of anything other than the interface which triggered the rule and trying to calculate... Jim Pingle

01:50 AM Feature #14612 (Rejected): Show egress interface in firewall logs

As the subject states could we add egress interface within the firewall logs?
There is a column for ingress and anot... Mike Moore

07/25/2023

06:10 PM Feature #14611 (Rejected): tracking flows and added context

That's what ntop/softflowd/netflow in general are for. That sort of data storage and drill-down shouldn't be happenin... Jim Pingle

05:58 PM Feature #14611 (Rejected): tracking flows and added context

pfSense does not have a cleaner way to track flows going through the firewall.
Seeing if a packet matches a rule i... Mike Moore

07/23/2023

09:32 AM Regression #14171: High Availability Setup with Gateway to secondary pfSense not working - No Internet

I know it's not a bug but maybe this is affecting other areas since the FreeBSD route command (as of pfSense 2.7.0) b... Kyouko M

02:30 AM Feature #14594: VDOM on pfsense

Kris Phillips wrote in #note-1:
> VDOM seems like a marketing rebrand for a VRF on Fortinet. TNSR currently has thi... Conor Dang

01:59 AM Feature #14594: VDOM on pfsense

VDOM seems like a marketing rebrand for a VRF on Fortinet. TNSR currently has this, but pfSense Plus does not. Kris Phillips

01:52 AM Bug #14531: Traffic Graph widget doesn't show traffic counts for OpenVPN interfaces since 23.05.1 upgrade.

So I retested this today and now I'm seeing the same results with DCO enabled. The odd thing is that there is still ... Kris Phillips

07/20/2023

09:01 AM Bug #14531: Traffic Graph widget doesn't show traffic counts for OpenVPN interfaces since 23.05.1 upgrade.

Can confirm if DCO is not active, the widget shows the correct graphs Lev Prokofev

07:01 AM Bug #14531: Traffic Graph widget doesn't show traffic counts for OpenVPN interfaces since 23.05.1 upgrade.

The sole distinction lies in whether the DCO option was activated or deactivated on the server. ... Danilo Zrenjanin

06:59 AM Bug #14531: Traffic Graph widget doesn't show traffic counts for OpenVPN interfaces since 23.05.1 upgrade.

I tested again on a VM hosted on ProxMox with the factory default config file and the OpenVPN configured through the ... Danilo Zrenjanin

12:58 AM Feature #14594 (New): VDOM on pfsense

I do not see this feature in any of the open requests but having a similar functionality to VDOM (virtual domain) on ... Conor Dang

07/18/2023

03:09 PM Feature #14582 (Not a Bug): Interfaces/Interface Assignments wireless MAC missing

That is intentional. Those are not wireless interfaces directly, but virtual "clones" of a wireless interface (VAPs).... Jim Pingle

12:57 PM Bug #14531: Traffic Graph widget doesn't show traffic counts for OpenVPN interfaces since 23.05.1 upgrade.

There is likely some other configuration factor contributing here then, such as tun/tap, subnet size, topology, etc. ... Jim Pingle

05:30 AM Bug #14586 (Resolved): Adding an IP Alias VIP using a unicast CARP VIP as its parent changes the CARP VIP to multicast at the OS level

Adding IP Alias to a unicast CARP VIP results in the CARP VIP being reconfigured to multicast. Reapplying (i.e. savin... James George

07/17/2023

08:06 AM Bug #14005: SFP Interfaces not available with Traffic Shaper in v23.01

Hi Chris, Yes, I was booting between different snapshots v22.05 and then 23.01. The Netgates have been updated to 23.... Brendon Flint

02:06 AM Feature #14582 (Not a Bug): Interfaces/Interface Assignments wireless MAC missing

hello fellow redmine members,
I noticed that wireless interfaces do not list their mac address. Please see attached. Jonathan Lee

07/16/2023

11:45 AM Bug #13348 (Resolved): Error when deleting ZFS Boot Environment created from duplicate of non-default entry

Christian McDonald

02:45 AM Bug #13348: Error when deleting ZFS Boot Environment created from duplicate of non-default entry

Tested on July 10th builds of 23.09. Following Marcos' steps, I'm not able to reproduce this bug, so looking fixed. Kris Phillips

02:37 AM Bug #14531: Traffic Graph widget doesn't show traffic counts for OpenVPN interfaces since 23.05.1 upgrade.

I tested this with AES-128-GCM and DCO enabled and the Status --> Traffic Graphs still show traffic normally for me. ... Kris Phillips

07/15/2023

09:04 PM Bug #14005: SFP Interfaces not available with Traffic Shaper in v23.01

I presume you're booting between different ZFS snapshots, correct? If you upgrade or reflash to 23.05.1, does it beha... Chris W

07:45 PM Bug #13348: Error when deleting ZFS Boot Environment created from duplicate of non-default entry

I was able to create a new boot environment, clone it and remove the original as described above on 23.09.a.20230710.... Jordan G

07:26 PM Regression #14436: Upgrades from 23.05-RC/beta/dev fail server authentication

seeing some different choices in the branch selection just when cycling Jordan G

08:29 AM Bug #14531: Traffic Graph widget doesn't show traffic counts for OpenVPN interfaces since 23.05.1 upgrade.

I ran another test and this time, I disabled DCO. The traffic Graph widget was showing traffic.
The problem only oc... Danilo Zrenjanin

06:58 AM Bug #14563 (Resolved): System Log - General Log Order Setting is not being respected when using Raw Logs

Tested the patch against:... Danilo Zrenjanin

07/12/2023

09:38 AM Bug #14531: Traffic Graph widget doesn't show traffic counts for OpenVPN interfaces since 23.05.1 upgrade.

In my case:
DCO enabled
Tun mode
Platform 5100
Lev Prokofev

07/10/2023

01:15 PM Bug #14563 (Feedback): System Log - General Log Order Setting is not being respected when using Raw Logs

Applied in changeset pfsense:commit:7f7d0165a37f0d7d2e0e8e5d1bd4ab2e35fc8ab8. Christopher Cope

07/08/2023

09:34 PM Bug #14563 (Pull Request Review): System Log - General Log Order Setting is not being respected when using Raw Logs

https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1046 Christopher Cope

09:29 PM Bug #14563 (Confirmed): System Log - General Log Order Setting is not being respected when using Raw Logs

Thank you for that detail! I was able to confirm that behavior. I'll get the patch submitted shortly. Christopher Cope

08:58 PM Bug #14563: System Log - General Log Order Setting is not being respected when using Raw Logs

Thank you for your reply. I have just noticed that the problem happens when using "Raw Logs" format in combination wi... Fred Lear

06:09 PM Bug #14563: System Log - General Log Order Setting is not being respected when using Raw Logs

I am unable to reproduce this. I have a fresh 23.05.1 install and changing the global option instantly affects all lo... Christopher Cope

05:58 PM Bug #14563 (Resolved): System Log - General Log Order Setting is not being respected when using Raw Logs

No matter what the "Forward/Reverse Display" option in general System Log settings is set to, the logs are always dis... Fred Lear

07/07/2023

05:08 PM Bug #14175: LDAP authentication for SSH fails

With @Use Authentication Server for Shell Authentication@ checked, this issue can prevent the firewall from booting c... Marcos M

02:33 PM Regression #14378: Packages are not removed when using the hardware reset button

Also happens when using the console menu to restore to defaults. Or at least, they are not removed, not sure which. ... Steve Y

11:59 AM Bug #13348 (Feedback): Error when deleting ZFS Boot Environment created from duplicate of non-default entry

Fixed: https://gitlab.netgate.com/pfSense/FreeBSD-src/-/commit/2a3ce72f2163aa8bc0cd4224354a43c8067569c7 Christian McDonald

01:40 AM Bug #13348: Error when deleting ZFS Boot Environment created from duplicate of non-default entry

https://reviews.freebsd.org/D40903
Christian McDonald

07/06/2023

06:12 PM Feature #14555: Display Overridden Interface Names On Interface and VLAN Setup Pages

Alternatively, you could just hide the internal device names altogether for those specific areas previously mentioned... John Uplink

06:01 PM Feature #14555 (New): Display Overridden Interface Names On Interface and VLAN Setup Pages

Please reference overridden interface names in various places in the pfSense web management UI. It seems that in some... John Uplink

07/05/2023

12:23 PM Bug #14531: Traffic Graph widget doesn't show traffic counts for OpenVPN interfaces since 23.05.1 upgrade.

It would help to know a few things, such as:
* Is DCO enabled or disabled?
* Is OpenVPN in tap or tun mode?
* Ha... Jim Pingle

07/01/2023

11:45 PM Bug #14531: Traffic Graph widget doesn't show traffic counts for OpenVPN interfaces since 23.05.1 upgrade.

What is being done to reproduce this? I have two OpenVPN Client interfaces and the widget on the dashboard shows tra... Kris Phillips

06:24 AM Bug #14531 (Confirmed): Traffic Graph widget doesn't show traffic counts for OpenVPN interfaces since 23.05.1 upgrade.

Tested on SG-3100 23.05.1 release. I can confirm this behavior. Danilo Zrenjanin

06/30/2023

04:48 PM Bug #14531 (Confirmed): Traffic Graph widget doesn't show traffic counts for OpenVPN interfaces since 23.05.1 upgrade.

The Traffic Graph widget doesn't show the in\out traffic for the OpenVPN interfaces.
!clipboard-202306302045-mzwyk... Lev Prokofev

06/29/2023

05:14 PM Bug #14526 (Rejected): 23.05.01 can't normal boot

This site is not for support or diagnostic discussion.
For assistance in solving problems, please post on the "Net... Jim Pingle

05:12 PM Bug #14526 (Rejected): 23.05.01 can't normal boot

i am upgrade from 23.05 to 23.05.01. it is installed frr. the 23.05.01 can't normal work.
!clipboard-20230... yon Liu

07:26 AM Bug #14515 (Resolved): Ethernet rule Action field hint text lists "reject" option which is not compatible with Ethernet rules

Tested the patched file. The help text on Ethernet rules says only "Choose what to do with packets that match the cri... Danilo Zrenjanin

03:14 AM Bug #14515: Ethernet rule Action field hint text lists "reject" option which is not compatible with Ethernet rules

Thanks for looking into this small detail. I appreciate you. Jonathan Lee

06/28/2023

03:04 PM Bug #14515: Ethernet rule Action field hint text lists "reject" option which is not compatible with Ethernet rules

Updating subject and fixing project/target. Jim Pingle

02:17 PM Bug #14515 (Feedback): Ethernet rule Action field hint text lists "reject" option which is not compatible with Ethernet rules

Thanks.
pf(4) only supports pass/block action semantics for L2 rule processing, reject/match are not supported.
I h... Christian McDonald

06/27/2023

10:25 PM Bug #14515 (Resolved): Ethernet rule Action field hint text lists "reject" option which is not compatible with Ethernet rules

Hello fellow pfsense redmine members,
I wanted to post this under the experimental layer 2 access control list are... Jonathan Lee