pfSense » pfSense Plus

06/01/2025

05:31 AM Bug #16219: pfSense IPsec VTI Mode Incompatible with Juniper Traffic Selector Requirements

Thanks for taking care of the ticket.
Let me clarify. I don't intend to use traffic selector under VTI mode.
Th... Henry Zhou

01:43 AM Bug #16219 (Incomplete): pfSense IPsec VTI Mode Incompatible with Juniper Traffic Selector Requirements

If you're using traffic selectors, you want Policy-mode in pfSense Plus. VTIs don't use traffic selectors, so I'm co... Kris Phillips

05/30/2025

06:25 PM Bug #16219 (Incomplete): pfSense IPsec VTI Mode Incompatible with Juniper Traffic Selector Requirements

When configuring an IPsec VPN in VTI (route-based) mode between pfSense (using strongSwan) and Juniper firewalls (e.g... Henry Zhou

05:43 PM Bug #14772: PFsense Plus doesn't work with AWS new Instance Metadata Service (IMDSv2)

Changing from installer category as it isn't related to the installer Reid Linnemann

05:33 PM Bug #16176 (Feedback): Config restored during install can be overwitten by hardware specific default values

This is fixed as of https://gitlab.netgate.com/pfSense/installer/-/commit/7076078812bf56d62a326fec8815e255d32f4b8c Reid Linnemann

05/28/2025

08:02 PM Bug #16214 (Duplicate): Maximum Backup Limit Setting Not Enforced

Marcos M

07:02 PM Bug #16214: Maximum Backup Limit Setting Not Enforced

It appears that the cleanup only occurs when the web UI for the configuration history is loaded. On my system, the b... Robert Jacobson

06:16 PM Bug #16214 (Duplicate): Maximum Backup Limit Setting Not Enforced

*Issue Description:*
The value set under *Diagnostics > Configuration History > Configuration Backup Settings > Ma... Danilo Zrenjanin

05/24/2025

06:23 AM Bug #16200 (Confirmed): KEA DHCPv6 allows for invalid static mapping to be configured, leading to server start failure

I can confirm this behavior, the validation should be added.
Tested on ... Lev Prokofev

12:33 AM Bug #16203 (New): Floating Firewall Rules for ICMP Inconsistently Choose Gateways and May Ignore Routing

When testing Floating rules for ICMP with the interface set to "Any", outbound traffic will choose whatever gateway w... Kris Phillips

05/23/2025

08:16 AM Bug #16200 (Confirmed): KEA DHCPv6 allows for invalid static mapping to be configured, leading to server start failure

(in version 25.03.b.20250515.1415)
I accidently specified a static mapping address in the format used on tracking ... Patrik Stahlman

05/22/2025

08:33 PM Bug #16199 (Resolved): Config warning is logged after config is synced to secondary HA node when MIM is enabled

Fixed with aa82ef9d32f2a3c6924797bc432a9b1dd0a0e851. Marcos M

08:20 PM Bug #16199 (Resolved): Config warning is logged after config is synced to secondary HA node when MIM is enabled

On the primary node, go to Status > Filter Reload and force a config sync. On the secondary node the following is log... Marcos M

05/19/2025

11:42 PM Bug #16176: Config restored during install can be overwitten by hardware specific default values

I think I understand the issue now. The installer lays down the installer settings file which has the installer confi... Reid Linnemann

11:11 PM Bug #16176: Config restored during install can be overwitten by hardware specific default values

There is code in place on the initial boot when importing the installer config to touch the 'assign_complete' file th... Reid Linnemann

05/17/2025

09:57 PM Feature #14743: Add Passkey/Certificate-based Authentication

Jesse Norell wrote in #note-3:
> Sergei Shablovsky wrote in #note-2:
> > UPVOTE THIS
>
> How do you vote, just c... Kris Phillips

05/15/2025

07:58 PM Regression #16187 (Resolved): Alias autocomplete does not work with Ethernet firewall rules

Marcos M

05:31 PM Regression #16187: Alias autocomplete does not work with Ethernet firewall rules

fixed in the latest 25.03 beta
tested on:
25.03-BETA (amd64)
built on Thu May 15 14:15:00 UTC 2025
FreeBSD 15.0-C... Georgiy Tyutyunnik

04:21 PM Feature #14743: Add Passkey/Certificate-based Authentication

Sergei Shablovsky wrote in #note-2:
> UPVOTE THIS
How do you vote, just comment "me too!" or watch the issue or ?... Jesse Norell

05/13/2025

07:12 PM Regression #16187 (Feedback): Alias autocomplete does not work with Ethernet firewall rules

Fixed with commit:f121add4b9bc2905093645494494d54066e909b6. Marcos M

06:54 PM Regression #16187 (Resolved): Alias autocomplete does not work with Ethernet firewall rules

There is no autocomplete when creating or editing an Ethernet firewall rule and typing an alias for the source or des... Marcos M

05/09/2025

10:18 PM Bug #15948: GUI times out when attempting to view large Configuration History

This timeout would not be an issue normally but is much more likely to happen due to https://redmine.pfsense.org/issu... Marcos M

03:33 PM Regression #15880 (Resolved): Upgrade available LED not set before branch is selected.

Only the current branch and release branches are checked for updates. Sounds like it's working as expected given the ... Marcos M

02:14 PM Regression #15880: Upgrade available LED not set before branch is selected.

re-tested on
25.03-BETA (amd64)
built on Wed May 7 16:11:00 UTC 2025
FreeBSD 15.0-CURRENT
issue still present - ... Georgiy Tyutyunnik

05/08/2025

03:41 PM Regression #16179 (Feedback): upgradeconfig php shell script incorrectly replaces running config when Nexus is enabled.

Looks good with that patch. Steve Wheeler

02:41 PM Regression #16179 (Ready To Test): upgradeconfig php shell script incorrectly replaces running config when Nexus is enabled.

https://gitlab.netgate.com/pfSense/factory/-/merge_requests/172 Marcos M

08:43 AM Bug #14894: Password protected console login prompt does not render properly on 4100/6100/8200 serial console

It is still the issue on 25.03Beta built on Tue Apr 29... Lev Prokofev

05/07/2025

05:44 PM Feature #16181 (New): Include Nexus controller PTY log in GUI

In some cases there are logs included in @/var/log/pfnet-controller-pty.log@ which can help when troubleshooting issu... Marcos M

09:00 AM Bug #14168: OpenVPN status GUI cannot display RADIUS ACL Generated Ruleset with usernames containing an ``@`` symbol

Hello, this problem is still occur in version 24.11-RELEASE.
We located that problem is in status_openvpn.php file o... K H

05/05/2025

10:21 AM Bug #16176: Config restored during install can be overwitten by hardware specific default values

confirmed
tested on 6100
netgate-installer-v1.1-BETA-amd64-20250429-0600.img Georgiy Tyutyunnik

05/04/2025

01:29 PM Regression #16179: upgradeconfig php shell script incorrectly replaces running config when Nexus is enabled.

This only happens when Nexus MIM is enabled. Steve Wheeler

01:16 PM Regression #16179 (Feedback): upgradeconfig php shell script incorrectly replaces running config when Nexus is enabled.

When called with two file names the php shell session upgradeconfig is supposed to upgrade the first file and save it... Steve Wheeler

01:12 AM Bug #16080: Issues Upgrading from 24.03 to 24.11 SG-1100 Atheros 9280

Updating Target version to Plus-Next. This will not be fixed for 25.03, as a WiFi bug for an obscure card cannot be ... Kris Phillips