Activity
From 01/08/2024 to 02/06/2024
02/06/2024
-
07:05 PM Feature #15239: Add to existing rule
- Understood. Thanks for clarifying.
-
06:36 PM Feature #15239 (Rejected): Add to existing rule
- If the ports are together you can already use a range. If the ports are separate you have to use an alias. If the IP ...
-
- First i acknowledge that i do know i can create an alias and group IPs or Ports..
Feature: The ability to add to a... -
04:39 PM Bug #15196: AWS ena interfaces can become unstable/stop responding
- Freeback from Amazon:...
02/05/2024
-
- Updating subject for release notes.
-
06:12 PM Bug #15196: AWS ena interfaces can become unstable/stop responding
- Hmmm 9272e45 committed Dec 28, 2023
ena: Change measurement unit of time since last tx cleanup to ms
This commit:
1.... -
- Understood. Thanks for the quick response Jim.
-
- You can always view the config history, before or after applying, but trying to pick out which specific things in a s...
-
- In a way this should technically be possible as there is already a record of what’s changed AFTER it’s applied when y...
-
- Display proposed changes prior to clicking apply.
Would be great to have multiple engineers (or a single one) make c...
01/31/2024
-
05:25 PM Bug #15196: AWS ena interfaces can become unstable/stop responding
- Closed/Fixed FreeBSD bug that appears similar....
01/30/2024
-
- Confirmed. ...
01/29/2024
-
- This is normal and expected. Any static interface with a sufficient size subnet will appear in the DHCP server as an ...
01/28/2024
-
02:41 AM Bug #14401: Changing from Switchport to Discrete Interface in VGA/Serial Console Breaks Port Status Monitoring
- possibly related? https://redmine.netgate.com/issues/12480
-
- seems present on ARM-based as well, when connecting with 1100 console, this is all we see of the first line after con...
-
- WAN interface currently using IPv4 DHCP type address, switch this interface to static, enter IP, create gateway, save...
01/27/2024
-
10:28 PM Bug #15202 (New): Add Option for Network Portion of Subnet "Wildcard" for IPv6 Rules
- Filtering hosts with IPv6 is extremely difficult when utilizing an upstream provider that is providing a Prefix Deleg...
-
- On AMD Epyc hardware in AWS, pfSense Plus ena interfaces can lose their IP addressing and then stop responding entire...
01/25/2024
-
- Such a test wouldn't be ideal to mix in the settings since there are other required parts for that to work that aren'...
01/24/2024
-
11:57 PM Feature #15186 (New): Test DNS over TLS
- The ability to readily confirm TLS DNS would be established once saved.
-
- Things to keep in mind when testing.
When _inactive_ (disabled or not yet applied):... -
- MR merged:
https://gitlab.netgate.com/pfSense/factory/-/commit/e755ceefc81c7942797459bc1fd6132343ec2cfc
New fil... -
- Looks good on current snapshots, everything appears to be working as expected....
01/23/2024
-
- MR: https://gitlab.netgate.com/pfSense/factory/-/merge_requests/117
01/22/2024
-
- The signed vs. unsigned issue will be fixed in the next snapshot.
The issue in comment 8 is actually expected beha... -
- Per Kristof, the above was an output printing issue in @pflowctl@ and it was correct internally. That will be fixed s...
-
- After testing a bit I discovered what might be a minor issue.
Not that I expect anyone to need to go this high, bu... -
- Module is present now on latest build (24.03.a.20240122.0600) and loads OK.
Had a weird glitch once where I couldn... -
-
- Confirmed working in 24.03.a.20240122.0600.
-
01/19/2024
-
- I forgot to include the module in the image in cross build. That's done now, so the next build will have it.
-
- On 24.03.a.20240117.0600 which should be after this was merged, @pflowctl@ complaints that @pflow.ko@ is not loaded, ...
01/18/2024
-
- I thought I would mention, I also have this issue in 23.09.1 that I just did a reinstall on. 23.09.1 is running on a...
01/17/2024
-
- Added to Plus:
https://gitlab.netgate.com/pfSense/factory/-/commit/3a52d6afc43efcd2e4166a7b23fd15aba6a33dff
-
-
- Each redmine must only be a single request.
There is already a way to make a user read-only, there is a "deny conf...
01/16/2024
-
09:40 PM Bug #15169 (Duplicate): Allowed IP Address does not control incoming speed in captive portal, PF Sense Plus Release 23.xx.x
-
09:30 PM Bug #15169 (Duplicate): Allowed IP Address does not control incoming speed in captive portal, PF Sense Plus Release 23.xx.x
- Hello engineers,
I would like to report a bug that has already been submitted and confirmed but only on the PF CE ... -
- The required OS code has been merged.
pflow configuration is done through `pflowctl`. Use `pflowctl -c` to create... -
- I've merged the upstream pflow code. It'll be part of the next snapshot builds.
It includes support for netflow v5... -
- This is a 2 part request.
1. Have the Firewall rules screen locked. Right an admin can click around firewall rules a... -
- I have not encountered this personally, but can confirm multiple instances of upgrades failing with:...
01/15/2024
-
- This is needed to review the BE status/options of the device as well as troubleshoot potential disk space issues.
...
01/14/2024
-
06:14 AM Bug #15036: Traffic Shaper Wizard Dedicated generates error
- Tested on
24.03-DEVELOPMENT (amd64)
built on Fri Jan 12 6:00:00 UTC 2024
FreeBSD 15.0-CURRENT
The error is pres...
01/13/2024
-
11:06 AM Bug #15036 (Confirmed): Traffic Shaper Wizard Dedicated generates error
- I've replicated the issue on:...
01/11/2024
-
- That is expected behavior in this case, as the Firewall Rules area of the backup/restore selection does not include A...
-
07:56 AM Bug #15151: OpenVPN TAP & BRIDGE
- Jim,
we don't need a forum, we need a contact to people who have real influence on the pfSense code - you don't ha...
01/10/2024
-
11:28 PM Bug #15149: Hardware Crypto showing No Hardware Crypto Acceleration for system with crypto chip installed
- 25.05.01 It has no issues with that ID
-
- @Jim Pingle
@dco_update_peer_stat: invalid peer ID 0 returned by kernel@
shows when using the crypto chip it... -
- Hello fellow Redmine members,
I wanted to report a bug I found in the Backup Restore section of pfSense Plus.
... -
- A tap bridge is only useful for linking L2 which would see MAC addresses, so you reserve hosts in DHCP by MAC address...
-
- I checked what you suggested but from the client side it is also no longer possible to make a bridge with the OpenVPN...
-
- I provided a link with the "official" way to bridge OpenVPN to a LAN.
Third party guides/videos are not good refer... -
- You remain in error.
Somehow it was able to work well for 6 years and I think it was used by many people who use T... -
- Normally with a tap bridge you don't have an interface address / tunnel network on the member interfaces, only on the...
-
- When configuring OpenVPN TAP with a static address pool, there is a problem when configuring the TAP bridge with anot...
-
- I have diagnosed something, so far I know that removing the TAP bridge from the LAN solves the problem above.
Is t...
01/09/2024
-
- This is what I mean by rule id I use it with my LED script. With the new rules when using them with wlan address they...
-
- https://forum.netgate.com/topic/185443/example-of-layer-2-ethernet-firewall-rules
I was able to get it to work how... -
- If it's shown on the dashboard as active, and there is kernel encryption happening on the VPN (e.g. OpenVPN DCO, IPse...
-
- Is there anything I can do because I have the older 2100 that has this chip, I understand the new 2100 does not come ...
-
- The OpenVPN crypto hardware choice is not relevant and hasn't done anything meaningful in years. It should probably b...
-
- New firmware was installed also same issue
-
- https://forum.netgate.com/topic/185411/23-09-01-hardware-crypto-showing-no-hardware-crypto-acceleration-for-system-wi...
-
- The Hardware Crypto is no longer showing up under OpenVPN configuration. My Netgate appliance has a crypto chip insta...
Also available in: Atom