pfSense » pfSense Plus

11/15/2023

11:49 PM Bug #14992 (Not a Bug): PHP Startup: Unable to load dynamic library 'ldap.so'

You somehow have a mix of 23.05.1 and 23.09 files on your system, either from a failed upgrade or from some other com... Jim Pingle

10:00 PM Bug #14992 (Not a Bug): PHP Startup: Unable to load dynamic library 'ldap.so'

Crash report begins. Anonymous machine information:
amd64
14.0-CURRENT
FreeBSD 14.0-CURRENT #1 plus-RELENG_23_0... Amin Sadeghi

11/14/2023

03:54 PM Bug #14975 (Not a Bug): Dynamic DNS client cloudflare not update ip double wan-opt1

Jim Pingle

11:12 AM Bug #14975: Dynamic DNS client cloudflare not update ip double wan-opt1

It turned out that suricata (inline mode) was enabled on the wan port, and disabled on the wan2 port. As soon as I en... Stepan Afonin

11/13/2023

11:03 PM Bug #14973: pfSense as AP's Wireless Interface no longer seen in DHCP tabs

Thank you it was very late and my kid was sick last week, I went to make a guest network really fast and I couldn't g... Jonathan Lee

01:17 PM Bug #14973 (Not a Bug): pfSense as AP's Wireless Interface no longer seen in DHCP tabs

There is no bug, your Wireless interface in the screenshot has a /32 CIDR, so there isn't any room in that "subnet" f... Jim Pingle

03:36 PM Feature #14976 (New): Cleaner way to know if an interface failed

When an interface status changes from UP to DOWN or is flapping, there are other syslog messages that get generated b... Mike Moore

01:18 PM Regression #14972 (Not a Bug): DNS Resolver GUI not showing Static DHCP and DHCP Registration seleectors after moving to KEA DHCP

This is a known issue which is mentioned in the release notes as a limitation for this release:
https://docs.netga... Jim Pingle

01:01 PM Bug #14975: Dynamic DNS client cloudflare not update ip double wan-opt1

For clarification. In this config, everything works fine, it updates in both directions. Stepan Afonin

12:54 PM Bug #14975 (Not a Bug): Dynamic DNS client cloudflare not update ip double wan-opt1

Hello. There is a group of gateways wan and opt1(wan2), the problem is that if Default gateway wan is the priority, t... Stepan Afonin

11/12/2023

05:22 PM Bug #14973: pfSense as AP's Wireless Interface no longer seen in DHCP tabs

Can this please be patched as I can not update past 23.09 for this hardware do to Squid use restrictions. I have no a... Jonathan Lee

05:20 PM Bug #14973: pfSense as AP's Wireless Interface no longer seen in DHCP tabs

This is for an Official Netgate 2100-Max purchased from Netgate Website in 2019 Jonathan Lee

05:19 PM Bug #14973 (Not a Bug): pfSense as AP's Wireless Interface no longer seen in DHCP tabs

Hello fellow Redmine Members,
We have lost the DHCP tabs for Wireless clients when use of a internal Wireless card... Jonathan Lee

03:03 PM Regression #14972: DNS Resolver GUI not showing Static DHCP and DHCP Registration seleectors after moving to KEA DHCP

Replying to self here.
Just read posts https://forum.netgate.com/topic/183970/does-static-mapping-work-in-kea-dhcp/1... Eloi Chayer

12:49 PM Regression #14972 (Not a Bug): DNS Resolver GUI not showing Static DHCP and DHCP Registration seleectors after moving to KEA DHCP

After moving from ISC DHCP to KEA DHCP in System -> Advanced -> Networking, the "Static DHCP" and "DHCP Registration"... Eloi Chayer

02:05 AM Bug #14968: Google LDAP fail to bind

I can confirm this behavior with Google LDAPS. It seems that everything "works" when manually querying LDAP, but som... Kris Phillips

11/11/2023

10:05 PM Regression #14828: QAT is not being used by some daemons

in 23.09 I am seeing that after enabling IIMB, regardless of whether AES-NI or QAT is set for cryptographic hardware ... Jordan G

01:11 PM Bug #14968 (New): Google LDAP fail to bind

Even with a freshly created cert and Bind user login/pass it fails to bind with the message:
_/system_authservers.... Lev Prokofev

11/10/2023

04:56 AM Regression #14964 (Not a Bug): SG-3100: iscsi support removed from 23.09 kernel

I used to use it to easily store larger service logs (e.g. from squid) on a NAS and can probably live without, but si... Jürgen Rühle

11/06/2023

06:03 PM Regression #14946 (Rejected): Kea DHCP GUI DHCP custom options area removed

This is a known limitation and will be addressed in the next release. It's mentioned in the release notes. Jim Pingle

06:03 PM Regression #14946 (Rejected): Kea DHCP GUI DHCP custom options area removed

Hello fellow pfSense Redmine community members,
I noticed that custom dhcp options are no longer accessible in the... Jonathan Lee

05:21 PM Feature #14945: Allow IPsec VTI ``ipsecX`` interfaces to be added to interface groups

This should be possible so long as the IPsec Filter Mode (VPN > IPsec, Advanced Settings tab) is set to filter VTI on... Jim Pingle

04:54 PM Feature #14945 (New): Allow IPsec VTI ``ipsecX`` interfaces to be added to interface groups

Provide the ability to add IPsecX interfaces that are set up for VTI and filtering enabled, to be part of an Interfac... Mike Moore

02:39 PM Bug #14705 (Closed): Changes in Ethernet ruleset can lead to incorrect rule and separator order

Jim Pingle

01:26 PM Bug #14944 (Not a Bug): IPv6 only works while saving interface settings

To update Track6 on an interface you have to save/apply the interface being tracked (WAN in this case), the settings ... Jim Pingle

08:00 AM Bug #14944: IPv6 only works while saving interface settings

Also, every time i save settings on the WAN interface, the web-interface is unresponsive after Applying. I hae to go ... Chris Fokkenrood

07:58 AM Bug #14944 (Not a Bug): IPv6 only works while saving interface settings

When changing IPv6 interface settings from None into Track Interface, i have to reboot in order to get this to work. ... Chris Fokkenrood

01:24 PM Bug #14943 (Not a Bug): Authentication server LDAPs Unknown CA

Jim Pingle

11/05/2023

09:10 PM Bug #14943: Authentication server LDAPs Unknown CA

Fixed by connecting to the console and ran menu options 16 then 11 as suggested in https://docs.netgate.com/pfsense/e... Marcelo Cury

06:58 PM Bug #14943: Authentication server LDAPs Unknown CA

Weird, it seems that this only happens in the Dashboard.
Even when I remove the authentication server entirely and r... Marcelo Cury

06:44 PM Bug #14943 (Not a Bug): Authentication server LDAPs Unknown CA

Found that if you configure an authentication server without authentication (Standard TCP 389), and after that you ch... Marcelo Cury

01:07 PM Bug #14467: Temperature sensor reading is abnormally high on some systems

This is probably what I am experiencing on a Xeon D-1736NT (Ice Lake) on 23.09-RC (23.09.r.20231027.0151)... Rob A

11/03/2023

12:44 PM Bug #14939 (Not a Bug): Version info displayed in dashboard seems incorrect

Something likely happened on your system and one or more underlying packages didn't get fully updated so it's having ... Jim Pingle

11/02/2023

08:35 PM Bug #14939 (Not a Bug): Version info displayed in dashboard seems incorrect

Last night upgraded from 23.05.1 to 23.09.r.20231027.0151
On the main dashboard the version is still displayed as ... Jon Hrabowyj

11/01/2023

07:12 AM Bug #14106: arc4random: WARNING: initial seeding bypassed the cryptographic random device because it was not yet seeded and the knob 'bypass_before_seeding' was enabled.

module firmware already present!
real memory = 3602862080 (3435 MB)
avail memory = 3462979584 (3302 MB)
Starting C... Jonathan Lee

10/30/2023

04:17 PM Bug #14925: /etc/regdomain.xml file ver low max power limit set

https://github.com/freebsd/freebsd-src/pull/880
Added a pull to set them to 40 Jonathan Lee

10/27/2023

06:48 PM Feature #14928 (New): FEATURE REQUEST: Wireless ath0 and MAC address controls

@ifconfig ath0_wlan0 list mac@
This has the ability to have a ACL lists added. Can we please have the ability to m... Jonathan Lee

03:07 PM Bug #14927 (Not a Bug): Wireless Interfaces Speed and Duplex settings will not save

You don't set those yourself on Wireless interfaces, they are determined by the chosen standard and other settings. Jim Pingle

02:09 PM Bug #14927 (Not a Bug): Wireless Interfaces Speed and Duplex settings will not save

Hello fellow PfSense Redmine community members,
I recently noticed that the Speed and Duplex settings will not sta... Jonathan Lee

12:05 AM Bug #14925 (Rejected): /etc/regdomain.xml file ver low max power limit set

That file is from FreeBSD -- if you want to suggest changes, propose them upstream:
https://github.com/freebsd/fre... Jim Pingle

12:00 AM Bug #14925: /etc/regdomain.xml file ver low max power limit set

<maxpower>17</maxpower>
<maxpower>30</maxpower>
<maxpower>23</maxpower>
Does others feel this is very restri... Jonathan Lee

10/26/2023

11:58 PM Bug #14925 (Rejected): /etc/regdomain.xml file ver low max power limit set

Hello Fellow pfSense Redmine members,
I wanted to bring this to your attention. I noticed and learned that the reg... Jonathan Lee

10/25/2023

06:08 PM Bug #14440 (Closed): Firewall rule traffic counters show invalid values on 32bit platforms

Closing this since armv7 support is being dropped upstream, so there won't be any way to resolve this. Jim Pingle

05:57 PM Bug #13455 (Resolved): Serial console output fails to render properly in certain cases on 4100, 6100, and 8200.

Looks good on latest build. 4100 and 6100 loader/BE menus no longer have any extra non-printable/random odd character... Jim Pingle

10/24/2023

02:54 PM Feature #14915 (New): MAC-aliasses / Lists with MAC-addresses would be very helpfull

I would like to create a MAC-filter using the Ethernet layer firewall and it is absolutely not practical / a good i... Louis B

01:52 PM Bug #13569: Restarting an OpenVPN server running on a CARP VIP in an HA cluster can disrupt unrelated TCP states

Same issue on pfsense 2.7,
I confirm that ... Sebastiano Degan

10/23/2023

02:32 PM Regression #14912: WAN Interfaces No Longer Able to Use Gateway Outside Subnet

Jim Pingle wrote in #note-1:
> I can't replicate this as stated. If I add a new route that is outside the subnet (e.... Kris Phillips

02:15 PM Regression #14912 (Rejected): WAN Interfaces No Longer Able to Use Gateway Outside Subnet

I can't replicate this as stated. If I add a new route that is outside the subnet (e.g. by setting the interface as a... Jim Pingle

02:34 AM Regression #14912 (Rejected): WAN Interfaces No Longer Able to Use Gateway Outside Subnet

In pfSense Plus 23.09 BETA there seems to be a regression of this former bug:
https://redmine.pfsense.org/issues/972... Kris Phillips

10/22/2023

11:28 AM Regression #14828: QAT is not being used by some daemons

I've just tried 23.09.b.20231020.0600 on qat_200xx equipped hardware (Xeon D-1736NT) and I can see that the revision ... Rob A

09:45 AM Regression #14828: QAT is not being used by some daemons

Hi Kris,
No change with 23.09 BETA, including 23.09.b.20231020.0600 for QAT on C3xxx QAT hardware (Netgate 6100 in... Rob A

10/21/2023

10:06 PM Bug #14818 (Confirmed): StatusTraffic Graph In/Out traffic misplaced in Graph but correct in text table

It looks like this happens when the Sort By dropdown is set to Bandwidth Out. Using pfSense as an iperf server and a ... Chris W

08:17 PM Regression #14828: QAT is not being used by some daemons

Rob A wrote in #note-3:
> I still see demonstrable difference between 23.05 and 23.09 dev with QAT. QAT is active o... Kris Phillips

06:47 PM Feature #14387: Offline config mode

Tested on 23.05.1 and 23.09 there is still significant boot times for the WAN interface being down and the webConfigu... Kris Phillips

02:41 PM Feature #14387: Offline config mode

Can you confirm you are still having this issue on 23.05.1?
The original redmine is resolved and testing with 23.0... Christopher Cope

10/20/2023

08:10 PM Bug #14902 (Not a Bug): Package Manager available list empty

This site is not for support or diagnostic discussion.
For assistance in solving problems, please post on the "Net... Jim Pingle

07:23 PM Bug #14902 (Not a Bug): Package Manager available list empty

This seem to have happened after pfSense Plus 23.05.1 upgrade. Although I don't know the exact time frame. I am unabl... Jimmy Chen

10/19/2023

02:01 PM Bug #14705: Changes in Ethernet ruleset can lead to incorrect rule and separator order

Thanks for looking into this Jonathan Lee

07:57 AM Bug #14705 (Feedback): Changes in Ethernet ruleset can lead to incorrect rule and separator order

I was finally able to replicate this issue fairly consistently (albeit not every single time). A fix is now in place ... Marcos M

10/18/2023

07:48 PM Bug #13455: Serial console output fails to render properly in certain cases on 4100, 6100, and 8200.

I created a separate issue for the remaining login prompt problem: #14894 Jim Pingle

06:36 PM Bug #13455: Serial console output fails to render properly in certain cases on 4100, 6100, and 8200.

Chris Mirchandani wrote in #note-16:
> This Redmine was specifically opened for the password protected issue. In the... Jim Pingle

06:33 PM Bug #13455: Serial console output fails to render properly in certain cases on 4100, 6100, and 8200.

This Redmine was specifically opened for the password protected issue. In the process of looking into that issue you ... Chris Mirchandani

06:17 PM Bug #13455 (Feedback): Serial console output fails to render properly in certain cases on 4100, 6100, and 8200.

Fix committed: https://gitlab.netgate.com/pfSense/factory/-/commit/69b321f6d5153ed0e8146abf716cee6f8cd98646 Jim Pingle

06:09 PM Bug #13455 (In Progress): Serial console output fails to render properly in certain cases on 4100, 6100, and 8200.

The unusual characters in the loader clear up if we set the console to @efi@ explicitly on affected platforms (4100, ... Jim Pingle

07:47 PM Bug #14894 (New): Password protected console login prompt does not render properly on 4100/6100/8200 serial console

After resolving other console issues with the 4100/6100/8200 in #13455 a problem remains with the login prompt.
It... Jim Pingle