Project

General

Profile

Activity

From 09/16/2017 to 10/15/2017

10/15/2017

11:54 PM Bug #7946: 2.4 Package Manager: Does Not List Installed Packages which have been removed from the repository.
Not a bug.
https://forum.pfsense.org/index.php?topic=133280.0
Kill Bill
07:09 PM Bug #7946 (Resolved): 2.4 Package Manager: Does Not List Installed Packages which have been removed from the repository.
Upon upgrading to pfSense 2.4, I was unable to perform the recommended approach to move from freeradius 2.x to 3.x be... Andrew Barnes
11:00 PM pfSense Packages Bug #7947 (Rejected): freeRadius 3 on pfSense 2.4 not work
Afrer upgrade pfsense to 2.4 and install freeradius v3 -- freeRadius not execute.... Konstantin Ab
05:13 PM Bug #6882: bsnmpd uses all available CPU with hostres module active in some cases
I don't see any mention about memory leaks here but this might be related.
https://forum.pfsense.org/index.php?topic...
Brendon Baumgartner
10:41 AM Bug #6882: bsnmpd uses all available CPU with hostres module active in some cases
Just found this bug report after chasing down the issue on my office's pfsense install that was upgraded to 2.4.
I...
Michael Knowles
05:11 PM pfSense Packages Feature #7945 (Resolved): NET-SNMP - Flooding log entries
Please make a better solution for the NET-SNMP logging. Currently it floods the Genereal Log Entries (System Logs / S... Nonada Nonadz
03:44 PM pfSense Packages Bug #7944 (Resolved): Bind XMLRPC Sync Error
After upgrading to pfsense 2.4.0 syncing Bind is not possible anymore. Each time I update the config I get the follow... Maximilian Sesterhenn
02:00 PM Feature #7943 (Resolved): Overflow scrolling for top navigation drop-down menus in Fixed mode
Some resolutions (16:9 on laptops) don't have the vertical height to display all drop down menu items on items such a... Ken Moini
01:30 PM Bug #7942: QinQ interfaces never show as active
... Steve Wheeler
01:10 PM Bug #7942 (Resolved): QinQ interfaces never show as active
In a fresh 2.4 install QinQ interfaces always show in Status > Interfaces as down even when the parent interface show... Steve Wheeler
12:52 PM pfSense Packages Bug #7941 (Not a Bug): ntop-ng. Unable to reach web page
After installing and enabling ntop-ng with default settings in 2.4 it is not possible to reach the data display page ... Steve Wheeler
10:32 AM Bug #7937 (Assigned): FreeBSD 11 removed legacy ada aliases, some older installs will fail to mount root post-upgrade
The code itself appears to work but it doesn't get triggered unless you start to run the upgrade from the CLI, stop w... Jim Pingle
01:40 AM Bug #7940 (Resolved): disabling LAGG causes system reboot on 2.4
It looks very similar to this - https://redmine.pfsense.org/issues/7119
When Lagg interface goes down:
<6>carp:...
Vladimir Lind

10/14/2017

09:10 PM Bug #7939 (Feedback): Voucher test page produces no output
Applied in changeset commit:0b2d15478ee375c5bb9bde82ac493e1ea38d2eb6. Jim Pingle
08:58 PM Bug #7939: Voucher test page produces no output
Affects both status_captiveportal_test.php and status_captiveportal_expire.php Jim Pingle
08:50 PM Bug #7939 (Resolved): Voucher test page produces no output
The voucher test page does nothing when a value is submitted. Jim Pingle
04:57 PM Feature #6754 (Duplicate): Use of aliases in OpenVPN configuration
Duplicate of #2668 Jim Pingle
03:50 PM Feature #6754: Use of aliases in OpenVPN configuration
Requested on forums also: https://forum.pfsense.org/index.php?topic=137852.0 robi robi
03:49 PM Feature #2668: Support aliases in OpenVPN local/remote/tunnel network fields
Requested on forums also: https://forum.pfsense.org/index.php?topic=137852.0 robi robi
03:38 PM Bug #6882: bsnmpd uses all available CPU with hostres module active in some cases
Judging by some responses on the forum it can also happen on bare metal, not just VMs. The exact conditions are uncle... Jim Pingle
02:44 PM Bug #6882: bsnmpd uses all available CPU with hostres module active in some cases
Please either fix the underlying issue if possible. Or at least commit this workaround that seems to be needed for mo... Pi Ba
11:20 AM pfSense Packages Bug #7932: 2.4.0 & Snort 3.2.9.5_1 Pass Lists
No, it's not directly a Snort issue. It appears to be something that was perhaps inadvertently introduced when the t... Bill Meeks
03:43 AM pfSense Packages Bug #7932: 2.4.0 & Snort 3.2.9.5_1 Pass Lists
Cheers guys, it does disapear after moving pfSense.mo pfSense.mo.old
So not a Snort issue then.
Andy Kniveton
07:04 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
Michael OBrien wrote:
> Is there a reason you're moving this to 2.4.2, or you just need confirmation that it's good ...
Jim Pingle

10/13/2017

09:52 PM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
Jim Pingle wrote:
> FYI- FRR is now available for 2.4, 2.3.5 (snapshots), and 2.3.4 users. Internal tests show that ...
Michael OBrien
03:42 PM Bug #6882: bsnmpd uses all available CPU with hostres module active in some cases
Looks Like KVM has the same issue btw. I am running 2.4.1-DEVELOPMENT (amd64)
built on Fri Oct 13 12:32:36 CDT 2017...
Chris Stocker
09:32 AM Bug #6882: bsnmpd uses all available CPU with hostres module active in some cases
It looks like there is actually a patch for FreeBSD now which might help: https://bugs.freebsd.org/bugzilla/show_bug.... Jim Pingle
03:02 PM Bug #7931 (Duplicate): Error: SyntaxError: Unexpected token < in JSON at position 0
Jim Pingle
10:57 AM Bug #7931: Error: SyntaxError: Unexpected token < in JSON at position 0
This one is actually a duplicate of Bug #6748 and I'm still seeing this randomly. Kill Bill
02:30 PM pfSense Packages Bug #7932: 2.4.0 & Snort 3.2.9.5_1 Pass Lists
Bill Meeks wrote:
> Andy Kniveton wrote:
> UPDATE- an empty string is the cause, now to find out why ???
>
> Bi...
Kill Bill
02:09 PM pfSense Packages Bug #7932: 2.4.0 & Snort 3.2.9.5_1 Pass Lists
Andy Kniveton wrote:
> Ah I don't have an Assigned Alias, so it displays the txt regardless of what ever the locale ...
Bill Meeks
12:29 PM pfSense Packages Bug #7932: 2.4.0 & Snort 3.2.9.5_1 Pass Lists
Ah I don't have an Assigned Alias, so it displays the txt regardless of what ever the locale is set to.
Just creat...
Andy Kniveton
12:22 PM pfSense Packages Bug #7932: 2.4.0 & Snort 3.2.9.5_1 Pass Lists
I've upgraded from 2.3.4-p1 to 2.4.0 and not changed the locale. it's using the default English I guess as I've not s... Andy Kniveton
10:23 AM pfSense Packages Bug #7932: 2.4.0 & Snort 3.2.9.5_1 Pass Lists
I am so far unable to reproduce this problem in my virtual machine test environment. What language/locale is your fi... Bill Meeks
09:46 AM pfSense Packages Bug #7932: 2.4.0 & Snort 3.2.9.5_1 Pass Lists
Thanks for the report. I will look into the problem.
Bill
Bill Meeks
12:10 PM pfSense Packages Bug #7923: 502 Bad Gateway and unresponsive OS with 2.4
This is definitely due to a locking issue with file access in the index.php file for pfBlocker DNSBL. Not sure why it... Jim Pingle
10:50 AM Bug #7748: VLAN Priority
Hey, I'm one of those users thanks for putting this in the queue for 2.4.1.
I did a real quick tcpdump looking for...
Oliver Palmer
09:35 AM Bug #7748: VLAN Priority
Apparently this negatively impacts users on Google Fiber
https://forum.pfsense.org/index.php?topic=137916.msg754579#...
Jim Pingle
10:48 AM pfSense Packages Bug #7935: FFR doesn't save prefix lists to bgpd.conf
There is a pending PR for this, https://github.com/pfsense/FreeBSD-ports/pull/417
We'll be reviewing PRs shortly n...
Jim Pingle
10:44 AM Bug #7937 (Feedback): FreeBSD 11 removed legacy ada aliases, some older installs will fail to mount root post-upgrade
pfSense-upgrade version 0.27_2 on 2.3.x and 0.34 on 2.4.x check for /dev/adN under /etc/fstab and call "/usr/local/sb... Renato Botelho
07:50 AM Bug #7937 (Resolved): FreeBSD 11 removed legacy ada aliases, some older installs will fail to mount root post-upgrade
Some upgrade attempts are failing to mount root after the kernel is upgraded to FreeBSD 11.x due to ada disk driver c... Jim Pingle
10:43 AM Todo #7938 (Feedback): Change pfSense-upgrade to use pkg-static instead of pkg
pfSense-upgrade version 0.27_2 on 2.3.x and 0.34 on 2.4.x are changed Renato Botelho
09:16 AM Todo #7938 (Resolved): Change pfSense-upgrade to use pkg-static instead of pkg
pfSense-upgrade should use pkg-static internally, rather than pkg, to avoid issues with major version upgrades, poten... Jim Pingle
10:37 AM Feature #1557: Add the Interface descriptions to the OS interface descriptions
Hi there,
This would be a great feature for those who use Zabbix or similar.
Thanks
Gareth
Gareth Hay
09:12 AM Bug #7928: LAGG interfaces lose MAC address
Can confirm, this is new behavior and I am able to duplicate it per Steve's steps at a client site. The secondary fir... Arthur Brownlee IV
08:50 AM Bug #7925: VT race condition panic at boot on ESXi 6.5.0U1 and FreeBSD 11.1 base
For reference, at least one person appears to have encountered it on ESX 5.5 as well, though the majority of users ar... Jim Pingle
07:07 AM Bug #7936 (Confirmed): bridge network interface does not support altq on 2.4.0-RELEASE
I thought we had another entry for bridge already but today I don't see it. So I reopened this and changed the subjec... Jim Pingle
03:00 AM Bug #7916: There were error(s) loading the rules: pfctl: ix0: driver does not support altq - The line in question reads [0]: | Intel X520-DA2
Same problem on 2.4.0! Roman Fidi
01:22 AM Bug #4310: Limiters + HA results in hangs on secondary
Sander Naudts wrote:
> Why not change target version to 2.9.9... sorry just little frustrating that this doesn't get...
Lars Jorgensen

10/12/2017

11:42 PM Bug #6882: bsnmpd uses all available CPU with hostres module active in some cases
It should be noted that when upgrading, if the host resources MIB was already selected BEFORE the upgrade, it will re... Stéphane Lapie
09:51 PM Bug #7936: bridge network interface does not support altq on 2.4.0-RELEASE
That is true, but all interfaces assigned to bridge0 are igbx, will retest tomorrow John Schneider
09:13 PM Bug #7936 (Rejected): bridge network interface does not support altq on 2.4.0-RELEASE
bridge0 is not igbX. Jim Pingle
09:07 PM Bug #7936 (Resolved): bridge network interface does not support altq on 2.4.0-RELEASE
The bridge interface is currently not being built with altq support enabled. This leads to a situation where the user... John Schneider
07:28 PM pfSense Packages Bug #7935 (Resolved): FFR doesn't save prefix lists to bgpd.conf
Prefix lists referenced in route-maps or directly do not work with bgp when created using the webui. Have to copy the... Louis McLennan
05:47 PM Bug #7925: VT race condition panic at boot on ESXi 6.5.0U1 and FreeBSD 11.1 base
For information, the same problem occurs in Workstation 12.5.7 (build 5813279), vm hardware version 11.
It happened ...
Gianluca Toso
09:18 AM Bug #7925: VT race condition panic at boot on ESXi 6.5.0U1 and FreeBSD 11.1 base
For anyone experiencing this crash in the meantime, adding @kern.vty=sc@ to @/boot/loader.conf.local@ is confirmed to... Jim Pingle
04:38 PM Feature #7934: format support phone# for international use
Assigned to sdavis. This is a server-side issue Anonymous
04:10 PM Feature #7934 (New): format support phone# for international use
In the new 2.4.0 release, the Netgate Services and Support dashboard gadget shows the phone# to call. (Good idea, bt... Adam Thompson
02:47 PM Feature #7643: Send notification when boot completed
I also think that would be very useful function. Luca Moncelli
02:26 PM Bug #7933: There were error(s) loading the rules: pfctl: vtnet0: driver does not support altq - The line in question reads [0]:
Doesn't make a difference, still the same bug on the same version. If it was closed, you might have a point but it's ... Jim Pingle
02:23 PM Bug #7933: There were error(s) loading the rules: pfctl: vtnet0: driver does not support altq - The line in question reads [0]:
Maybe, but the bugs remains on release 2.4.0-RELEASE (amd64), that was for 2.4 BETA and 2.4 RC. Albert Lightware
02:18 PM Bug #7933 (Duplicate): There were error(s) loading the rules: pfctl: vtnet0: driver does not support altq - The line in question reads [0]:
Duplicate of #7594 Jim Pingle
02:03 PM Bug #7933: There were error(s) loading the rules: pfctl: vtnet0: driver does not support altq - The line in question reads [0]:
To let you now my configuration was working nice on 2.3.4-RELEASE-p1 Albert Lightware
02:01 PM Bug #7933 (Duplicate): There were error(s) loading the rules: pfctl: vtnet0: driver does not support altq - The line in question reads [0]:
After a clean installation to have zfs filesystem, I restored my configuration, and there is no internet connection c... Albert Lightware
02:19 PM Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel
Michael OBrien wrote:
> Any chance 2.4.0, with the FreeBSD 11.1 ipsec changes, may resolve this?
Just loaded up 2...
Michael OBrien
12:03 PM pfSense Packages Bug #7932: 2.4.0 & Snort 3.2.9.5_1 Pass Lists
https://forum.pfsense.org/index.php?topic=137921.0 Andy Kniveton
12:02 PM pfSense Packages Bug #7932: 2.4.0 & Snort 3.2.9.5_1 Pass Lists
Please also post that in the IDS/IPS board of the forum so the package maintainer has a higher chance of seeing it:
...
Jim Pingle
11:53 AM pfSense Packages Bug #7932 (Resolved): 2.4.0 & Snort 3.2.9.5_1 Pass Lists
The following appears under Assigned Alias header :-
Project-Id-Version: PACKAGE VERSION Report-Msgid-Bugs-To: POT...
Andy Kniveton
11:48 AM Bug #7931 (Not a Bug): Error: SyntaxError: Unexpected token < in JSON at position 0
Most likely it was old/cached data in your browser and the refresh let it pick up new copies. We have added some prot... Jim Pingle
11:46 AM Bug #7931: Error: SyntaxError: Unexpected token < in JSON at position 0
After a refresh the error is gone btw Christian M.
11:44 AM Bug #7931 (Duplicate): Error: SyntaxError: Unexpected token < in JSON at position 0
After Upgrading to 2.4.0 this error is shown in the Traffic Graph Widget on the Dashboard
@Error: SyntaxError: Une...
Christian M.
11:15 AM Feature #7930 (Rejected): Upgrade notification
Sending an e-mail notification for that from the firewall itself isn't really a good idea. There are many other ways ... Jim Pingle
11:13 AM Feature #7930 (Rejected): Upgrade notification
It would be nice if there was some sort of alerting or notification when pfSense has a new upgrade available (via ema... Joshua Craft
10:55 AM Bug #4310: Limiters + HA results in hangs on secondary
We expected to have more time before 2.4.1 but we need to have it out in a week or so, there isn't time to get to thi... Jim Pingle
10:53 AM Bug #4310: Limiters + HA results in hangs on secondary
Why not change target version to 2.9.9... sorry just little frustrating that this doesn't get fixed. Sander Naudts
10:36 AM Feature #7926: limit clog -f look-back size
You'd be surprised, there are a number of them out there on CF, USB sticks and the like, and some of them have opted ... Jim Pingle
10:33 AM Feature #7926: limit clog -f look-back size
Thanks, Jim. That would be a perfectly acceptable solution, with a whole bunch of side benefits.
Especially since I...
Adam Thompson
10:28 AM Bug #7786: traffic shaping queue on WAN wont allow total of all child to be 100%
i think this requires some php code changes only as the web gui doesnt allow, the shaper itself is fine with it when ... Bipin Chandra
09:46 AM Bug #7786: traffic shaping queue on WAN wont allow total of all child to be 100%
Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated. Jim Pingle
10:23 AM Bug #7474 (Resolved): Problems adding gateway from interface edit
Jim Pingle
10:09 AM Bug #4031: Notifications mail bomb in some gateway failure circumstances
Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated. Jim Pingle
10:02 AM Bug #6420 (Resolved): Monitoring graphs last sample being zero
Jim Pingle
10:01 AM Feature #7823: Pull request: Add support for dynamic DNS provider ClouDNS
conflict is fixed. Wagner Sartori Junior
09:46 AM Feature #7823: Pull request: Add support for dynamic DNS provider ClouDNS
The PR has conflicts that need resolved.
Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated.
Jim Pingle
09:55 AM Bug #7079: ClamAV C-ICAP causing Kernel Panic and System Crash
This should be re-tested on 2.4.0-RELEASE, the newer FreeBSD 11.1 base has a patch for that crash, I believe. Also it... Jim Pingle
09:52 AM Bug #7213 (Feedback): Hyper-V install, no disk found
Please retry this on 2.4.0-RELEASE which uses a FreeBSD 11.1 base and it has several fixes for Hyper-V. Jim Pingle
09:51 AM Bug #7412: rtsold will not run on VLAN interfaces
Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated. Jim Pingle
09:51 AM Bug #7413: status_dhcpv6_leases.php: Some DHCPv6 leases are not displayed in the GUI
Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated. Jim Pingle
09:51 AM Bug #7425: dhclient not sending option 77
Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated. Jim Pingle
09:49 AM Bug #7439: IKE_SA (IKEv2) does not rekey on break before make startegy, just issues IKE_DELETE and connection is closed
There is a new version of strongSwan on 2.4.0-RELEASE, please make this is still happening there.
Moving target to 2...
Jim Pingle
09:48 AM Feature #7467: Add iPhone/Android/Generic USB tethering support
Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated. Jim Pingle
09:48 AM Bug #7469: local_sync_accounts() slowness can trigger GUI/XMLRPC failures with many accounts
Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated. Jim Pingle
09:47 AM Bug #7480: pkg framework - textarea on rowhelperfield errors
Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated. Jim Pingle
09:47 AM Bug #7481: pkg-framework - rowhelper ignores <advancedfield/>
Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated. Jim Pingle
09:47 AM Bug #7532: SG-1000 autonegotiation 10baseT speed and duplex
Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated. Jim Pingle
09:47 AM Bug #7605: State Killing on Gateway Success
Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated. Jim Pingle
09:47 AM Feature #7623: Allow L2TP user passwords to contain special characters
Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated. Jim Pingle
09:46 AM Bug #7714: NTP Widget Time Display
Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated. Jim Pingle
09:46 AM Todo #7762: Add uid check to pfSense-upgrade and exit unless it is run as uid=0
Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated. Jim Pingle
09:46 AM Bug #7774: No TCP Reply State Established on GRE in IPsec Transport
Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated. Jim Pingle
09:46 AM Bug #7801: UDP fragments received over IPsec tunnel are not properly reassembled and forwarded
Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated. Jim Pingle
09:46 AM Bug #7856: IPsec status does not show all connected mobile clients
Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated. Jim Pingle
09:46 AM Feature #7882: Seperator feature in DHCP Static mapping for this feature
Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated. Jim Pingle
09:46 AM Bug #7885: Cert. Manager should validate EKUs on importing a certificate authority
Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated. Jim Pingle
09:46 AM Bug #7905: OpenVPN Authentication Against Backend Stalls All Server Traffic
Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated. Jim Pingle
06:31 AM Feature #7321 (Resolved): DynDNS - Add DreamHost DNS support
Renato Botelho
01:43 AM Bug #7929 (Resolved): IPSec CA certificate name corrupt if multiple RDNs of the same type are in subject name
When the CA certificate subject is converted to OSF style, but multiple RDN components of the same type are in the su... Daniel Sands

10/11/2017

07:27 PM Feature #7321: DynDNS - Add DreamHost DNS support
OK - I do see that it made it into the 2.4.0 Git branch. I didn't see it listed at https://redmine.pfsense.org/versi... Frank Gruman
06:08 PM Bug #7928 (Resolved): LAGG interfaces lose MAC address
LAGG interfaces lose their MAC address, normally inherited from the first member, if all links are disconnected and t... Steve Wheeler
03:03 PM Bug #7927 (Closed): (filterdns), uid 0: exited on signal 11 (core dumped)
#Problem:
With 2.4, and also with 2.4.1, I am seeing frequent error messages
> kernel: pid 12918 (filterdns),...
Chase Turner
02:21 PM Bug #7015: IPsec not working behind NAT
The problem I reported above occurs when the Phase 2 IPv6 Tunnel "Local Network" is set to "LAN subnet", and therefor... David Myers
12:57 PM Feature #7926: limit clog -f look-back size
The way clog reads the records it has to figure out where the start is and then unwind it from there, so it doesn't e... Jim Pingle
12:47 PM Feature #7926: limit clog -f look-back size
FWIW, I'm thinking of "tail -f"'s behaviour, where it only tail's the last ~10 lines (I think most implementations de... Adam Thompson
12:44 PM Feature #7926 (Closed): limit clog -f look-back size
I've configured the system log files to be substantially larger than normal, in order to get some reasonable retentio... Adam Thompson
12:51 PM Bug #7925 (Feedback): VT race condition panic at boot on ESXi 6.5.0U1 and FreeBSD 11.1 base
The fix is already merge and will be available on next snapshot. Luiz Souza
09:21 AM Bug #7925 (Resolved): VT race condition panic at boot on ESXi 6.5.0U1 and FreeBSD 11.1 base
Some users occasionally encounter a panic during OS hardware detection on 2.4 running under ESXi 6.5.0 U1 (Build 6765... Jim Pingle
12:24 PM pfSense Packages Bug #7923: 502 Bad Gateway and unresponsive OS with 2.4
If it's happening on 2.4.0 and started around that time, it's likely related to the FreeBSD 11.1 change and not the I... Jim Pingle
10:53 AM pfSense Packages Bug #7923: 502 Bad Gateway and unresponsive OS with 2.4
Jim Pingle wrote:
> The affected code was on 2.4.0 for a couple days but is no longer there now. Current 2.4.0-RC sn...
Chad Brandenburg
10:35 AM pfSense Packages Bug #7923: 502 Bad Gateway and unresponsive OS with 2.4
The affected code was on 2.4.0 for a couple days but is no longer there now. Current 2.4.0-RC snapshots and the actua... Jim Pingle
10:28 AM pfSense Packages Bug #7923: 502 Bad Gateway and unresponsive OS with 2.4
Jim Pingle wrote:
> At the moment, the only change in 2.4.1 that isn't in 2.4.0 that might be relevant is #7856
>
...
Chad Brandenburg
07:13 AM pfSense Packages Bug #7923: 502 Bad Gateway and unresponsive OS with 2.4
At the moment, the only change in 2.4.1 that isn't in 2.4.0 that might be relevant is #7856
And since we already k...
Jim Pingle
06:21 AM pfSense Packages Bug #7923 (Resolved): 502 Bad Gateway and unresponsive OS with 2.4
Multiple users complaining that following the infamous 502 Bad Gateway, they eventually are unable to do anything wit... Kill Bill
08:36 AM Bug #7924 (Rejected): DHCP Server fails to start after updating to 2.4.0.r.20171009.1758
You must have upgraded to a snapshot that was broken before that one. You'll need to fix your local installation manu... Jim Pingle
08:29 AM Bug #7924 (Rejected): DHCP Server fails to start after updating to 2.4.0.r.20171009.1758
After upgrading to 2.4.0.r.20171009.1758, the DHCP server fails with the following error message:
Can't attach int...
Jeff Wischkaemper
07:17 AM Bug #7856 (Assigned): IPsec status does not show all connected mobile clients
It looks like this change caused a regression, see #7923
Also one person on the forum reported that the status bre...
Jim Pingle
02:21 AM Bug #7272: 6rd not functioning on 2.4.0-BETA
I can confirm that my issue has been fixed (Altibox Norway ISP). Thank you very much! Paal Andreas Lindsetmo

10/10/2017

06:36 PM Feature #7922 (New): Add the option to select the ISP IPv6 Delegated Prefix as a destination in firewall rules
It would be useful to have the option to use the ISP delegated prefix (/48, /56, etc) from DHCPv6-PD as a destination... Scott D
06:13 PM Bug #7921: Reset All States on WAN IP Change does not stay unchecked when disabled in GUI
Current Base System 2.4.0.r.20171009.1800 Paighton Bisconer
06:12 PM Bug #7921 (Resolved): Reset All States on WAN IP Change does not stay unchecked when disabled in GUI
Under System > Advanced > Networking, the new option to reset all sates when a WAN IP changes does not stay unchecked... Paighton Bisconer
05:22 AM Bug #7779: Traffic crossing a site-to-site OpenVPN tunnel fails to fragment.
We were able to disprove the situation with OpenVPN disabled. The initial description still holds. Steve Wheeler
05:15 AM Bug #7920 (Not a Bug): Logos Missing and wrong size
Renato Botelho
03:20 AM Bug #7920: Logos Missing and wrong size
Resolved
Browser cache... duh!
Martin Wasley
02:43 AM Bug #7920: Logos Missing and wrong size
Forgot to add this is on 2.4.1.a.20171009.1853 Martin Wasley
02:42 AM Bug #7920 (Not a Bug): Logos Missing and wrong size
pfSense logo is the wrong size on the login screen, appears far too large. It's missing completely from the other pag... Martin Wasley
04:15 AM Bug #7841: CARP Sync Issue - when no internet on standby
Hi Jim,
I had the same issue when using a PfSense cluster with CARP with a /32 Public IP Allocation. I think lot o...
Yann Tintignac

10/09/2017

01:47 PM Bug #7919 (Resolved): Logging not working
Luiz pushed some fixes to clog to correct this, next new snapshot we're testing internally is good. Jim Pingle
10:55 AM Bug #7919: Logging not working
https://forum.pfsense.org/index.php?topic=137672.msg752928#msg752928
Kill Bill
08:40 AM Bug #7919: Logging not working
It's also possible syslogd is writing bad data to the file which breaks the clog format, so maybe the syslogd clog pa... Jim Pingle
08:38 AM Bug #7919 (Confirmed): Logging not working
It looks like clog is failing to recognize its own file header somehow.... Jim Pingle
08:36 AM Bug #7919 (Resolved): Logging not working
On new installs logging is failing with:... Steve Wheeler
12:49 PM Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel
Any chance 2.4.0, with the FreeBSD 11.1 ipsec changes, may resolve this? Michael OBrien
11:39 AM Bug #7907: Cannot edit IPv4 and IPv6 Local Networks after tunnel creation
You can open a new bug report for that with an appropriate title/description, rather than re-using this one which was... Jim Pingle
09:38 AM Bug #7015: IPsec not working behind NAT
I’m still seeing problems with IPv6 tunneling over an IPv4 IPsec connection, but the symptoms are different from what... David Myers
04:07 AM Bug #7917: GUI shows "There are no packages currently installed" when repos are unreachable
Stephane Debreuil wrote:
> Same issue. It appears after upgrade to 2.4.0.r.20171007.0850 (from 2.4.0.r.20171004.xxxx...
Kill Bill
01:57 AM Bug #7917: GUI shows "There are no packages currently installed" when repos are unreachable
Same issue. It appears after upgrade to 2.4.0.r.20171007.0850 (from 2.4.0.r.20171004.xxxx).
S. Debreuil
03:32 AM Bug #7918 (Not a Bug): Nightly error reloading rules
A while ago, I started getting the same notice in my logs every night at the same time. Most of my external servers r... Michael Lustfield

10/08/2017

11:14 PM Bug #7907: Cannot edit IPv4 and IPv6 Local Networks after tunnel creation
I figured out what the issue is. When "redirect gateway" option is checked the fields for local networks are hidden,... John Silva
05:33 PM Bug #6852: Commit 8f86722 breaks DHCPv6 leases status page
Duplicate of Bug #7413 Kill Bill
04:59 PM Bug #7917 (Resolved): GUI shows "There are no packages currently installed" when repos are unreachable
!https://image.prntscr.com/image/O75ZDOwbT8KKiypUxRhaWQ.png!... Kill Bill
03:36 PM Bug #7413: status_dhcpv6_leases.php: Some DHCPv6 leases are not displayed in the GUI
Jim Pingle wrote:
> I agree, but last I looked OMAPI didn't quite do everything we need. ... That may have changed ...
Kill Bill
02:17 PM Bug #7413: status_dhcpv6_leases.php: Some DHCPv6 leases are not displayed in the GUI
I agree, but last I looked OMAPI didn't quite do everything we need, plus it required making a program in C to interf... Jim Pingle
02:04 PM Bug #7413: status_dhcpv6_leases.php: Some DHCPv6 leases are not displayed in the GUI
Am I the only one thinking that this absolutely unreadable regex madness needs to go to /dev/null and ISC DHCP server... Kill Bill
10:54 AM Feature #7814: Unbound serve-expired please add to GU as tickbox
yeah I should have updated, martin did the work. Chris Collins
05:45 AM Feature #7814: Unbound serve-expired please add to GU as tickbox
https://github.com/pfsense/pfsense/pull/3817
Kill Bill
10:44 AM Feature #7321: DynDNS - Add DreamHost DNS support
Frank Gruman wrote:
> I'm pretty interested in finally seeing this delivered. The pull request was accepted into ma...
Kill Bill
08:36 AM Bug #6420: Monitoring graphs last sample being zero
Been fixed with https://github.com/pfsense/FreeBSD-ports/commit/5b20ed3661e6dc6d8b8d3c78aab5784556cc0dc3 almost a yea... Kill Bill
05:15 AM Bug #6848: Do not create an IPv4/6 gateway for an interface without according IPv4/6 address
Related forum discussion and PR:
https://forum.pfsense.org/index.php?topic=137317.0
https://github.com/pfsense/pfse...
Kill Bill
04:55 AM Bug #6860: Monitoring (RRD) graphs return "unknown" step value
Jared Dillard wrote:
> Needs step 1800 added: https://forum.pfsense.org/index.php?topic=117036.msg695224#msg695224
...
Kill Bill

10/07/2017

05:20 PM Bug #7916: There were error(s) loading the rules: pfctl: ix0: driver does not support altq - The line in question reads [0]: | Intel X520-DA2
Please try a recent 2.4 snapshot. Jim Thompson
04:59 PM Bug #7916 (Duplicate): There were error(s) loading the rules: pfctl: ix0: driver does not support altq - The line in question reads [0]: | Intel X520-DA2
Today i installed a new pfSense Firewall with an Intel X520-DA2 10GB Adapter. After setup the traffic shaper i got th... Roman Fidi
03:17 PM Bug #7913 (Resolved): Applying wizard for creating Traffic Shapers with PRIQ and Prioritize VoIP traffic doesn't create qVoIP and Floating Rule
Fixed in current snapshots Jim Pingle

10/06/2017

11:17 PM Bug #7915 (Resolved): CBQ Child queue set bandwidth does not apply correctly
Example:
LAN interface -> create 2 direct children qLink for the local traffic then qInternet that will house more c...
Pushapraj Bhamra
11:03 PM Bug #7645: SG-1000 VLAN interfaces do not work without promisc mode
Confirmed. VLANs are functional again on the latest snapshot without needing to use promisc mode. Jim Pingle
08:03 PM Bug #7645: SG-1000 VLAN interfaces do not work without promisc mode
Fixed in the latest snapshot. Luiz Souza
09:41 AM Bug #7645: SG-1000 VLAN interfaces do not work without promisc mode
Upgraded to latest release candidate
2.4.0-RC (arm)
built on Thu Oct 05 21:17:11 CDT 2017
FreeBSD 11.1-RELEASE-p...
Christian Carrier
09:18 PM Feature #7321: DynDNS - Add DreamHost DNS support
I'm pretty interested in finally seeing this delivered. The pull request was accepted into master 5 months ago. Is ... Frank Gruman
08:07 PM Bug #7015: IPsec not working behind NAT
Please re-test with a recent 2.4.0-RC image based on FreeBSD 11.1.
There are significant improvements in this area...
Luiz Souza
03:44 PM Bug #7914 (Resolved): External Config Locator does not trigger a package sync or clear the wizard, so it does not result in a functional and expected restore
Restoring a configuration via the External Config Locator (ECL) does not trigger a package sync, so if the restore co... Jim Pingle
09:00 AM Bug #7913 (Feedback): Applying wizard for creating Traffic Shapers with PRIQ and Prioritize VoIP traffic doesn't create qVoIP and Floating Rule
Applied in changeset commit:10e93284be3cd62fe871710205e61de0e36dcc2f. Jim Pingle
08:58 AM Bug #7913: Applying wizard for creating Traffic Shapers with PRIQ and Prioritize VoIP traffic doesn't create qVoIP and Floating Rule
This was caused by commit:7798eb1e6ac48963a2785b449306cb49c942381f - I just pushed a fix that changes the tests a bit... Jim Pingle
08:22 AM Bug #7913 (Resolved): Applying wizard for creating Traffic Shapers with PRIQ and Prioritize VoIP traffic doesn't create qVoIP and Floating Rule
For 2.3.4_p1 traffic shaper wizard with PRIQ and enabling VoIP creates qVoIP and Floating Rule
pfctl -sa ALTQ:
queu...
Azamat Khakimyanov

10/05/2017

05:22 AM Bug #7912 (Resolved): LDAP Test Results modal doesn't comply with theming
Under "System > User Manager > Settings > Save & Test", there are sections that seem to only partially comply with th... Zachary Hill

10/04/2017

01:49 PM Todo #7911: Suricata missing dropsid sample file in SID Mgmt
Dan Collins wrote:
> Try a fresh install and none of the sample files are there.
That did not work, they are stil...
Kill Bill
01:21 PM Todo #7911: Suricata missing dropsid sample file in SID Mgmt
Try a fresh install and none of the sample files are there. Dan Collins
01:13 PM Todo #7911 (Rejected): Suricata missing dropsid sample file in SID Mgmt
Jim Pingle
01:11 PM Todo #7911: Suricata missing dropsid sample file in SID Mgmt
Not really.
!https://image.prntscr.com/image/3cJ2VqXiSTmxQxOSiBZEDw.png!
Please post to the forums until you ha...
Kill Bill
11:56 AM Todo #7911 (Rejected): Suricata missing dropsid sample file in SID Mgmt
Suricata - sample dropsid_sample.conf file no longer included in SID Mgmt files. Dan Collins
11:52 AM Feature #7910 (Duplicate): Notification GUI
I would like to see a GUI showing a list of alerts and the ability to turn them on/off from sending email. Dan Collins
10:15 AM Bug #7629 (Resolved): FreeBSD PR affecting pfsense
Moving target to 2.4.0 as this appears to be fixed by FreeBSD 11.1, which is now used by 2.4.0 Jim Pingle
10:10 AM Bug #7839: IPv6 ICMPv6 Type 3 Code 0 (hop limit exceeded in transit) reply uses wrong address.
Moving target to 2.4.0 as this appears to be fixed by FreeBSD 11.1, which is now used by 2.4.0 Jim Pingle
07:53 AM Bug #7825: missing "BACKUP" in CARP status with IPv6
I just tried this again and the procedure you list still doesn't result in the same outcome here. Try it again on 2.4... Jim Pingle
07:52 AM Bug #7909 (Duplicate): XMLRPC: missing "BACKUP" in CARP status with IPv6
Duplicate of #7825
Don't open a duplicate bug, the other one is still open, just in a feedback state.
Jim Pingle
01:45 AM Bug #7909 (Duplicate): XMLRPC: missing "BACKUP" in CARP status with IPv6
Hi everyone,
as i am not able to reopen the ticket #7825 -- here we go again ;)
The descriptive text ("BACKUP") n...
Helge Wiethoff

10/03/2017

06:49 PM Feature #7904: Automatic Bandwidth Limiter on Dummynet
Thanks Jim(s) ;)
A bounty has been created for this project to be completed and submitted to be added to pfSense. ...
duev s
09:23 AM Bug #7908: "Kill filtered states" button has no effect
Yes, unless you are killing states from a serial or VGA console, your own IP address will always show up as you're co... Jim Pingle
09:20 AM Bug #7908: "Kill filtered states" button has no effect
Erm, eh... you'll need to NOT refresh... like, you are recreating those states when you refresh the page. Kill Bill
09:06 AM Bug #7908: "Kill filtered states" button has no effect
There is my own IP address in the box.
Effectively, if I specify another IP address, it works. But not with my own.
Alban Cousinié
08:46 AM Bug #7908 (Rejected): "Kill filtered states" button has no effect
What exactly did you have in the box? It only kills properly if you enter an IP address or subnet. The description ma... Jim Pingle
08:35 AM Bug #7908 (Rejected): "Kill filtered states" button has no effect
In pfsense 2.4.0-RC, when I attempt to kill states using the "Kill filtered states" button in the Diagnostics / State... Alban Cousinié

10/02/2017

12:27 PM Bug #7907 (Not a Bug): Cannot edit IPv4 and IPv6 Local Networks after tunnel creation
I can't reproduce anything like that here. The fields show up when editing existing tunnels that can push. Perhaps th... Jim Pingle
11:57 AM Bug #7907 (Not a Bug): Cannot edit IPv4 and IPv6 Local Networks after tunnel creation
IPv4 and IPv6 Local Networks may be specified when tunnel is created but is not exposed when editing existing tunnel ... John Silva
10:26 AM Bug #7754 (Not a Bug): Cannot access "WebCfg - OpenVPN: Client Export Utility" without also granting access to "WebCfg - OpenVPN: Servers"
It's working as designed. The export package has no menu entry, so they can't see any menu entry for it.
Users wil...
Jim Pingle
10:25 AM Bug #7754: Cannot access "WebCfg - OpenVPN: Client Export Utility" without also granting access to "WebCfg - OpenVPN: Servers"
tqwqllrm tqwqllrm wrote:
> I tried to create a local group for admins with limited access and I only want that group...
tqwqllrm tqwqllrm
08:15 AM Bug #7906: Dashboard Version Info Inconsistency
I'll post on the forum then, but it's still a bug, if perhaps one of a different color: the GUI System Update reporte... Jeff Morris
08:08 AM Bug #7906 (Not a Bug): Dashboard Version Info Inconsistency
Some component failed in your upgrade. Please post on the forum, mailing list, or reddit and someone can help you get... Jim Pingle
08:07 AM Bug #7906: Dashboard Version Info Inconsistency
Apologies, please disregard my original dashboard screenshot, I unintentionally captured it while it was still displa... Jeff Morris
08:04 AM Bug #7906 (Not a Bug): Dashboard Version Info Inconsistency
I was previously running pfSense-CE-2.3.3-RELEASE-4g-i386-nanobsd and used System Update from the GUI to upgrade to 2... Jeff Morris
07:59 AM Bug #7905: OpenVPN Authentication Against Backend Stalls All Server Traffic
Looks like it's a known issue with the nature of auth-user-pass-verify that OpenVPN does not plan to address: https:/... Jim Pingle
03:54 AM pfSense Packages Feature #7895: Add a script for CARP monitoring to NRPE
Little fix, the current plugin did not set the return code upon exiting. Stéphane Lapie

10/01/2017

05:29 PM Feature #7904 (Needs Patch): Automatic Bandwidth Limiter on Dummynet
It's possible in some specific circumstances, but I don't see one of those being a way that would work properly with ... Jim Pingle
12:00 PM Feature #7904: Automatic Bandwidth Limiter on Dummynet
Thanks Jim!
I really think this would be a highlight feature for pfSense.
It would be very effective traffic ...
duev s
11:22 AM Feature #7904: Automatic Bandwidth Limiter on Dummynet
Actually, it seems completely possible. Van Jacobson’s “pathchar” showed so 20 years ago.
https://www.caida.org/t...
Jim Thompson
11:03 AM Feature #7904: Automatic Bandwidth Limiter on Dummynet
The idea isn't to use a speedtest.net to monitor actual bandwidth, but to monitor ping latency to see if the dummynet... duev s
10:49 AM Feature #7904 (Rejected): Automatic Bandwidth Limiter on Dummynet
It's not possible. The firewall has no way to determine the actual circuit speed, it must be set manually. A speed te... Jim Pingle
09:33 AM Feature #7904 (Needs Patch): Automatic Bandwidth Limiter on Dummynet
Add an automatic bandwidth limiter to pfSense that dynamically limits Down and Up speeds on WAN based on latency in o... duev s
04:13 PM Bug #7905 (Resolved): OpenVPN Authentication Against Backend Stalls All Server Traffic
When authenticating an OpenVPN Remote Access server against an authentication backend such as RADIUS, all traffic on ... Chris Linstruth

09/30/2017

10:53 AM pfSense Packages Feature #7903 (New): Duo ssh package
When trying to compile the Duo ssh package I get errors. After fixing these, I cannot get the sshd configs to stick o... Jaosn Beitler
08:23 AM Feature #7881: OpenVPN client - add support for multiple server entries
Brendon Baumgartner wrote:
> I think to implement this is by setting the server to Other towards the top and leaving...
Jim Pingle
02:00 AM Feature #7881: OpenVPN client - add support for multiple server entries
I think to implement this is by setting the server to Other towards the top and leaving the field blank. Then using t... Brendon Baumgartner
04:45 AM pfSense Packages Bug #6129: zabbix agent/proxy 2.4 not ported to pfSense 2.3
Brendon Baumgartner wrote:
> Zabbix proxies have to match the version of the Zabbix server so just supporting LTS he...
Pim Janssen
02:02 AM pfSense Packages Bug #6129: zabbix agent/proxy 2.4 not ported to pfSense 2.3
Zabbix agents can be any version.
Zabbix proxies have to match the version of the Zabbix server so just supporting...
Brendon Baumgartner

09/29/2017

02:15 PM pfSense Packages Feature #7902 (New): allow vpn client export of other to be a blank field
Under: OpenVPN -> Client Export -> Host Name Resolution -> Other
The Host Name field that appears requires a valu...
Brendon Baumgartner
11:51 AM pfSense Packages Bug #7729 (Resolved): pfBlockerNG orders NAT licked rules to the bottom of firewall rules
Jim Pingle
11:34 AM pfSense Packages Bug #7729: pfBlockerNG orders NAT licked rules to the bottom of firewall rules
Merged and fixed since 2.1.1_9 Kill Bill
10:12 AM Bug #4723 (Resolved): Can't forward UDP fragmented packets with scrubbing enabled.
Thanks! Renato Botelho
09:57 AM Bug #4723: Can't forward UDP fragmented packets with scrubbing enabled.
I made the lab in order to reproduce the issue. But could not reproduce one.
I tried to use 2KB frames, and the fram...
Constantine Kormashev
10:04 AM pfSense Packages Bug #7893: Kernel Panic Suricata Inline
Additional warning text has been added to the Group Help displayed in the Blocking Mode section of the INTERFACE SETT... Bill Meeks
10:01 AM Bug #7592 (Resolved): SG-1000: Unbound not always restarting properly after changes in /etc/hosts
Anonymous
06:28 AM Bug #7592: SG-1000: Unbound not always restarting properly after changes in /etc/hosts
I found there are error messages in logs, but I can see unbound works fine on latest FW on sg1000
Error messages a...
Constantine Kormashev
10:00 AM Bug #7889: The dropdown tabs replacement fallback needs to be limited to certain pages
Pull requests have been submitted for removing the use of the <no_drop_down> tag on the SYNC tab in both the Snort an... Bill Meeks
08:57 AM Bug #7901 (Rejected): Cannot Import Valid SSL Certificate with Private Key
That message means the public key on the certificate does not match the public key stored with the private key. Post ... Jim Pingle
08:41 AM Bug #7901 (Rejected): Cannot Import Valid SSL Certificate with Private Key
I have a wildcard SSL certificate from a vendor using my own private key. This wildcard SSL certificate was successfu... Jarrad S
08:28 AM Bug #7900 (Not a Bug): DynamicDNS Amazon Route53 Not Working
Jim Pingle
06:39 AM Bug #7900: DynamicDNS Amazon Route53 Not Working
It looks like the settings for the HostZonedID input were changed (previously needed to specify a region and hosted z... George 77
06:15 AM Bug #7900 (Not a Bug): DynamicDNS Amazon Route53 Not Working
DynamicDNS Provider Route53 is not updating. Despite the failure, the error detection code doesn't catch that a failu... George 77
07:06 AM Bug #7272 (Resolved): 6rd not functioning on 2.4.0-BETA
Looks like the main problem here is fixed. If any specific problem is found, please open a new ticket with details Renato Botelho
07:05 AM Bug #7719 (Resolved): Dynamic DNS updates not working on interface failover
Works Renato Botelho
07:05 AM Bug #7750 (Resolved): unbound refuses ipv6 queries after reboot
Works Renato Botelho

09/28/2017

09:16 AM Bug #7899: a floating 'match' rule on LAN does not put traffic from a broswer on a clientpc into a shaper queue
Note, I was using PRIQ. Kristopher Kolpin
09:16 AM Bug #7899 (New): a floating 'match' rule on LAN does not put traffic from a broswer on a clientpc into a shaper queue
Seeing bug 7116 (https://redmine.pfsense.org/issues/7116) again with squid and any other traffic originating from the... Kristopher Kolpin
09:13 AM Bug #7116: a floating 'match' rule on LAN does not put traffic from a broswer on a clientpc into a shaper queue
Seeing bug 7116 again with squid and any other traffic originating from the firewall. Cannot place it into any kind ... Kristopher Kolpin
09:13 AM Bug #7272 (Feedback): 6rd not functioning on 2.4.0-BETA
We will keep an eye on this issue, for now it seems to be working.
Thanks everybody.
Luiz Souza
08:32 AM Bug #7889: The dropdown tabs replacement fallback needs to be limited to certain pages
Steve Beaver wrote:
> Yes; it should be nuked. I'd like to wait until after the 2.4 release before doing that, howev...
Kill Bill
08:22 AM Bug #7889 (Resolved): The dropdown tabs replacement fallback needs to be limited to certain pages
Anonymous
08:22 AM Bug #7889: The dropdown tabs replacement fallback needs to be limited to certain pages
Yes; it should be nuked. I'd like to wait until after the 2.4 release before doing that, however. Anonymous
08:18 AM Bug #7889: The dropdown tabs replacement fallback needs to be limited to certain pages
That works (for the pkg.php/pkg_edit.php as well) provided the limit stays high-enough.
Should the no-op no_drop_...
Kill Bill
08:00 AM Bug #7889 (Feedback): The dropdown tabs replacement fallback needs to be limited to certain pages
Applied in changeset commit:5f63cb40ca75f055f85427e78d9e2348b65b05c4. Anonymous
07:17 AM Bug #7898: PFsense 2.4 RC 9/28/17 update - Traffic Shaper HFSC Priority field missing
It was removed deliberately as a part of PR https://github.com/pfsense/pfsense/pull/3795 but in #1994 luiz says HFSC ... Jim Pingle
05:05 AM Bug #7898: PFsense 2.4 RC 9/28/17 update - Traffic Shaper HFSC Priority field missing
thats because HFSC doesnt use priorities Bipin Chandra
07:09 AM pfSense Packages Bug #7716 (Resolved): Suricata - Barnyard2 webui configuration updates result in base64-encoded value written to the config for the password
Jim Pingle
03:21 AM pfSense Packages Bug #7716: Suricata - Barnyard2 webui configuration updates result in base64-encoded value written to the config for the password
Fixed. Kill Bill
07:09 AM pfSense Packages Bug #7756 (Resolved): suricata suricata_check_dir_size_limit() needs to be improved
Jim Pingle
03:21 AM pfSense Packages Bug #7756: suricata suricata_check_dir_size_limit() needs to be improved
Fixed. Kill Bill
07:08 AM pfSense Packages Bug #7578 (Resolved): Suricata -- Removing Hosts from Block Table via Alerts
Jim Pingle
03:13 AM pfSense Packages Bug #7578: Suricata -- Removing Hosts from Block Table via Alerts
Fixed. Kill Bill
07:08 AM pfSense Packages Bug #5996 (Closed): Snort service does not start back after rules update
Jim Pingle
02:49 AM pfSense Packages Bug #5996: Snort service does not start back after rules update
Certainly not a general issue plus insufficient info here to identify any bug. Kill Bill
06:29 AM pfSense Packages Bug #7736: Crahs with Quagga OSPF and the latest 2.4 Beta
bump Jim Thompson
06:29 AM pfSense Packages Bug #6456 (Not a Bug): vm-bhyve not correctly detecting the modules in kernel
Jim Thompson
03:30 AM pfSense Packages Bug #6456: vm-bhyve not correctly detecting the modules in kernel
As noted above, long fixed. Kill Bill
05:50 AM Feature #7888: Add a button in package manager GUI to upgrade all packages
And on that note, one to remove them all would help as well. Kill Bill

09/27/2017

11:52 PM Bug #7898 (Closed): PFsense 2.4 RC 9/28/17 update - Traffic Shaper HFSC Priority field missing
See attached screenshot of HFSC shaper parent and qInternet Child which i already setup traffic shaper on 2.3 when i ... Pushapraj Bhamra
06:32 PM Bug #7272: 6rd not functioning on 2.4.0-BETA
this time around it took a bit for it to come up, but it did....
[2.4.1-DEVELOPMENT][ler@home-fw.lerctr.org]/tmp: ...
Larry Rosenman
05:55 PM Bug #7272: 6rd not functioning on 2.4.0-BETA
I can also confirm that it works with the current release (2.4.0.r.20170927.1221).
Only difference (when it comes to...
Morten Freberg
03:21 PM Bug #7272: 6rd not functioning on 2.4.0-BETA
DHCP / WAN (passthrough from my NVG-599).
It's consistently (at least now) getting a route by default (I've moved...
Larry Rosenman
03:16 PM Bug #7272: 6rd not functioning on 2.4.0-BETA
The only way I found to reproduce this problem (no default gateway at boot) was using DHCP on WAN and I intentionally... Luiz Souza
05:08 PM Bug #7846 (Duplicate): Hyper-v vm traffic shaper error: hn0: driver does not support altq
Jim Pingle
04:01 PM Bug #7846: Hyper-v vm traffic shaper error: hn0: driver does not support altq
Duplicate of Bug #7869 and fixed. Kill Bill
05:08 PM pfSense Packages Bug #7850 (Resolved): Include file containing XML_RPC_encode() missing from snort
Jim Pingle
03:53 PM pfSense Packages Bug #7850: Include file containing XML_RPC_encode() missing from snort
Fixed. Kill Bill
05:08 PM Bug #7839 (Resolved): IPv6 ICMPv6 Type 3 Code 0 (hop limit exceeded in transit) reply uses wrong address.
Jim Pingle
04:50 PM Bug #7839: IPv6 ICMPv6 Type 3 Code 0 (hop limit exceeded in transit) reply uses wrong address.
Fixed in 2.4.1 Kill Bill
01:15 PM pfSense Packages Feature #6022: Consider MLVPN for bonded VPN
Has there been any traction with this? I have been looking for something like this too. I'll add to the kitty for t... Mike T
12:04 PM Feature #7897 (Rejected): User Dashboard
Nothing will be available without logging in. That is not a secure means of accomplishing that goal. You can make res... Jim Pingle
11:54 AM Feature #7897: User Dashboard
This could be useful for Diags on remote sites that users can check.
Also for putting on a Plasma/Monitor on the ...
Philip Hadfield
11:50 AM Feature #7897 (Rejected): User Dashboard
Having a Dashboard that can show stats without logging in.
Traffic, Link status, EG all the widgets without any of...
Philip Hadfield
10:13 AM Bug #7763 (Resolved): IX driver - fails to recognize media type with SFP after link drop
Closing this issue as the driver is working as intended.
The media options will not be detected until you restart ...
Luiz Souza
09:28 AM Bug #7896 (Resolved): picture_widget.php
Hi everyone,
First of all, thanks a bunch for such an effort you put on developing this awesome application. While...
Valentin Bajrami
07:59 AM Bug #6499: pf fragment states not purged
The specific bug on this ticket is fixed on version 2.3.2 and later. Your system may legitimately have a lot of fragm... Jim Pingle
07:56 AM Bug #6499: pf fragment states not purged
Chris Buechler wrote:
> fixed
Every so often I am seeing "[zone: pf frag entries] PF frag entries limit reached" ...
Hillie Sample
05:16 AM pfSense Packages Feature #7895 (Resolved): Add a script for CARP monitoring to NRPE
I have deployed several CARP clusters at work, but I realized there is no real good way to monitor CARP status :
* S...
Stéphane Lapie
01:12 AM pfSense Packages Bug #7893: Kernel Panic Suricata Inline
The “generic_XXXXXX” in one of your screenshots shows you’re not running s netmap-capable NIC. (You’re getting the e... Jim Thompson

09/26/2017

10:45 PM Bug #7894 (Not a Bug): Open VPN not redirecting traffic over tunnel. Remote IPV6 shows as public IP when "Force all client generated traffic through the tunnel." option is enabled and all IPV6 through pfsense is blocked
Yeah that would have to be on the client side. It might even be using its own IPv6 tunneling protocol like Teredo Jim Pingle
10:10 PM Bug #7894: Open VPN not redirecting traffic over tunnel. Remote IPV6 shows as public IP when "Force all client generated traffic through the tunnel." option is enabled and all IPV6 through pfsense is blocked
So after a bit more trouble shooting, I am leaning against this being a bug in PfSense and possibly in my linux build... Shawn Moss
09:51 PM Bug #7894 (Not a Bug): Open VPN not redirecting traffic over tunnel. Remote IPV6 shows as public IP when "Force all client generated traffic through the tunnel." option is enabled and all IPV6 through pfsense is blocked
Hello All,
I just updated to the newest dev build and connected to it remotely and had a shocking supprise. For...
Shawn Moss
06:30 PM pfSense Packages Bug #7893: Kernel Panic Suricata Inline
Thanks for the info, you guys might want to get the package maintainer to put some info under the inline selection, i... Ken Sim
06:22 PM pfSense Packages Bug #7893 (Needs Patch): Kernel Panic Suricata Inline
Inline/Netmap is known to have issues with certain hardware (real or virtual). It's still somewhat of an experimental... Jim Pingle
06:12 PM pfSense Packages Bug #7893: Kernel Panic Suricata Inline
I rebooted the VM a few times, and it appears to have stopped it's panic reboot cycle. When I went in to view Suricat... Ken Sim
06:01 PM pfSense Packages Bug #7893 (Needs Patch): Kernel Panic Suricata Inline
I have been playing around with the 2.4.0/1 snapshots, and have found that when Suricata is enabled with inline block... Ken Sim
01:55 PM Bug #7889: The dropdown tabs replacement fallback needs to be limited to certain pages
Found it. Had to go back and think about it a minute. It's in the pkg_edit.php file in this code near the bottom of... Bill Meeks
10:20 AM Bug #7889: The dropdown tabs replacement fallback needs to be limited to certain pages
Which line are the comments on? I don't see any. Anonymous
01:41 PM Bug #7763: IX driver - fails to recognize media type with SFP after link drop
The actual bug reported in this ticket is already fixed.
There was a bug in the driver that would fail to add the ...
Luiz Souza
11:40 AM Bug #7763 (Assigned): IX driver - fails to recognize media type with SFP after link drop
Renato Botelho
10:28 AM Bug #7763: IX driver - fails to recognize media type with SFP after link drop
Loaded the latest snapshot from today on a XG-2758. The interface media type displayed properly:
ix0: flags=8843<UP,...
Clinton Cory
12:15 PM Bug #7606: Using limiters and VLANs on Supermicro Xeon D boards crashes with kernel panic
For now it appears my issue has been resolved on 2.4.0.r.20170926.1006.
Side note though, floating rule still does...
putzomatic none
08:51 AM Bug #7877 (Resolved): Crash when enabling traffic shaper on more than 1 port
People on forum report it's fixed Renato Botelho
08:49 AM Bug #3710 (Resolved): Adding static DHCP leases doesn't cause BIND zones to update
Renato Botelho
08:48 AM Bug #7869 (Resolved): Hyper-v vm traffic shaper error: hn0: driver does not support altq
Renato Botelho
02:56 AM Bug #7869: Hyper-v vm traffic shaper error: hn0: driver does not support altq
Solved! Works for me, thanks! Nadav Rak
08:47 AM Bug #7879 (Resolved): traffic shaper crashes with hfsc_dequeue
Renato Botelho

09/25/2017

08:40 PM Bug #7889: The dropdown tabs replacement fallback needs to be limited to certain pages
Thanks Bill. I will try to determine why that change was made. Anonymous
08:09 PM Bug #7889: The dropdown tabs replacement fallback needs to be limited to certain pages
To add another note to the conversation. There is a parameter in the _display_top_tabs()_ function that is supposed ... Bill Meeks
05:32 PM Bug #7879: traffic shaper crashes with hfsc_dequeue
After initial testing with and pushing some traffic through my queue's which seemed like a sure way to crash it befor... Pi Ba
03:17 PM Bug #7879 (Feedback): traffic shaper crashes with hfsc_dequeue
Found and fixed, a new commit was made to address this issue.
Please test again on the next snapshot.
Thanks!
Luiz Souza
03:18 PM Bug #7877 (Feedback): Crash when enabling traffic shaper on more than 1 port
(duplicate from #7879): Found and fixed, a new commit was made to address this issue.
Please test again on the nex...
Luiz Souza
01:44 PM Bug #7833: ipfw will not limit download speed - captiveportal
Works here as well. Thanks. Kill Bill
11:35 AM Bug #7833 (Resolved): ipfw will not limit download speed - captiveportal
Renato Botelho
11:18 AM Bug #7833: ipfw will not limit download speed - captiveportal
Confirmed, this looks fixed.
I see limiters created and traffic going into them both up and down:...
Steve Wheeler
09:46 AM Bug #7833: ipfw will not limit download speed - captiveportal
[2.4.1-DEVELOPMENT][admin@pf6.localdomain]/root: ipfw table all list
--- table(cp_ifaces), set(0) ---
vmx1 2100 147...
Vladimir Lind
09:42 AM Bug #7833: ipfw will not limit download speed - captiveportal
Renato Botelho wrote:
> Kill Bill wrote:
> > This got reverted yet again. Sigh.
>
> Yes, because kernel was fixe...
Kill Bill
08:57 AM Bug #7833: ipfw will not limit download speed - captiveportal
Kill Bill wrote:
> This got reverted yet again. Sigh.
Yes, because kernel was fixed.
Renato Botelho
12:41 PM Bug #7819: php-fpm crashing
The problem stated on this ticket is resolved. If you still have an issue, it's something different. Just because you... Jim Pingle
12:24 PM Bug #7819: php-fpm crashing
I am still getting 502 Bad Gateway every day, so bad its about once an hour.. Here is what I can get when its locked ... Chad Brandenburg
11:36 AM Bug #7813: Missing download statistics on captive portal with MAC filtering enabled
Confirmed:... Steve Wheeler
10:29 AM Bug #7813 (Resolved): Missing download statistics on captive portal with MAC filtering enabled
Renato Botelho
10:07 AM Bug #7813: Missing download statistics on captive portal with MAC filtering enabled
2.4.1-DEVELOPMENT (amd64)
built on Sun Sep 24 21:37:23 CDT 2017
With enabled MAC filtering:
--- table(teaget...
Vladimir Lind
11:25 AM Bug #7834: Disabling captiveportal will not flush the ipfw pipes
Confirmed dynamic Limiters are removed as expected:... Steve Wheeler
10:29 AM Bug #7834 (Resolved): Disabling captiveportal will not flush the ipfw pipes
Renato Botelho
09:56 AM Bug #7834: Disabling captiveportal will not flush the ipfw pipes
Looks good after disabling CP:
[2.4.1-DEVELOPMENT][admin@pf6.localdomain]/root: ipfw table all list ; echo ; ipfw ...
Vladimir Lind
11:22 AM Bug #7807: sg-1000 random reboot when traffic shaping enabled
ok ill try to get crash log again, on apu2 it crashes as soon as u enable shaping on more than 1 interface and on sg-... Bipin Chandra
10:54 AM Bug #7807 (Duplicate): sg-1000 random reboot when traffic shaping enabled
Neither of those logs contain useful information, the most important parts are before those logs start. If you captur... Jim Pingle
10:37 AM Bug #7807: sg-1000 random reboot when traffic shaping enabled
crash log attached Bipin Chandra
08:57 AM pfSense Packages Bug #7891 (Rejected): (suricata), uid 0: exited on signal 11 (core dumped) latest 2.4.0-RC
This does not appear to be a general issue with suricata, but may be specific to your configuration or installation. ... Jim Pingle
06:27 AM Feature #4242: Two Factor or OTP Authentication for Admin Interface
This feature will be really helpful to meet the specifications from the PCI-DSS / ISO27001 or another security certs. Florent A

09/24/2017

10:11 PM Bug #7763 (Feedback): IX driver - fails to recognize media type with SFP after link drop
Seems like you have found a real bug in the driver.
It is fixed in pfSense 2.4-RC, please try the next snapshot.
...
Luiz Souza
09:06 PM pfSense Packages Bug #7891: (suricata), uid 0: exited on signal 11 (core dumped) latest 2.4.0-RC
Did a fresh reinstall and restored the backup and still got same issue. rub man
04:20 PM pfSense Packages Bug #7891: (suricata), uid 0: exited on signal 11 (core dumped) latest 2.4.0-RC
I found the core dump file.
I couldn't upload the .core file here as it is huge...
so I upload it to my dropbox:
...
rub man
03:49 PM pfSense Packages Bug #7891 (Rejected): (suricata), uid 0: exited on signal 11 (core dumped) latest 2.4.0-RC
Hi,
Just upgraded from latest stable to next major version 2.4.0-RC today via gui.
Only major problem I have is s...
rub man
04:50 PM Bug #7892 (Closed): AutoConfigBackup status reported incorrectly
Around 12PM Central time (9/24/17), AutoConfigBackup showed some alerts about unsuccessfully backing up the config.
...
Anonymous
12:30 PM Bug #7879: traffic shaper crashes with hfsc_dequeue
I tried 2.4.1 with 'em' E1000 nics on ESXi.. that crashes to..
Version 2.4.1-DEVELOPMENT (amd64)
built on Sat Sep ...
Pi Ba
06:53 AM Bug #7272: 6rd not functioning on 2.4.0-BETA
Larry Rosenman wrote:
> with the current code a straight reboot has the IPv6 default installed.
>
> However, on ...
Jim Thompson
06:47 AM Bug #7272: 6rd not functioning on 2.4.0-BETA
with the current code a straight reboot has the IPv6 default installed.
However, on the upgrade to this code did ...
Larry Rosenman
06:38 AM Bug #7272: 6rd not functioning on 2.4.0-BETA
Well I'm just saying that the results of your testing appear to be completely random and unrelated to any versions. H... Kill Bill
06:30 AM Bug #7272: 6rd not functioning on 2.4.0-BETA
just reporting what I'm seeing. I update to each RC and when I get IPv6 default route working I post, and when I see... Larry Rosenman
06:27 AM Bug #7272: 6rd not functioning on 2.4.0-BETA
Larry Rosenman wrote:
> Broke again at:
> 2.4.0-RC (amd64)
> built on Sat Sep 23 22:28:05 CDT 2017
> FreeBSD 11...
Kill Bill
06:14 AM Bug #7272: 6rd not functioning on 2.4.0-BETA
Broke again at:
2.4.0-RC (amd64)
built on Sat Sep 23 22:28:05 CDT 2017
FreeBSD 11.0-RELEASE-p12
Larry Rosenman
04:36 AM Bug #7833: ipfw will not limit download speed - captiveportal
This got reverted yet again. Sigh. Kill Bill
01:02 AM Bug #6911: no network on hyperv-v 2012 R1
resolved in 2.4.1 Dmitry Ivanov

09/23/2017

11:12 PM Feature #7890: Support for Intel/AMD CPU microcode updates
https://github.com/pfsense/pfsense/pull/3828 for sysutils/devcpu-data and the kernel bits. Adding the GUI toggle to b... Kill Bill
11:08 PM Feature #7890 (Rejected): Support for Intel/AMD CPU microcode updates
It'd be useful to include support for Intel/AMD CPU microcode updates.
https://www.freebsd.org/doc/en/books/faq/co...
Kill Bill
11:58 AM Bug #7594: "vtnet: driver does not support altq" following upgrade to 2.4 (worked in pfSense 2.3)
What are the chances of getting this fixed for 2.4-RELEASE? Similar bugs (https://redmine.pfsense.org/issues/7869) s... John Silva
09:49 AM Bug #7272: 6rd not functioning on 2.4.0-BETA
And it works again at:
2.4.0-RC (amd64)
built on Fri Sep 22 20:41:05 CDT 2017
FreeBSD 11.0-RELEASE-p12
Larry Rosenman
09:27 AM Feature #7847: USB NIC not loading (TP-Link UE300 RTL8153)
J L wrote:
> can this be considered as a request to have this automated ?
Stick it as earlyshellcmd to Shellcmd p...
Kill Bill
05:58 AM Bug #7889 (Resolved): The dropdown tabs replacement fallback needs to be limited to certain pages
AFAICT, this was designed to aid systems with lots of interfaces, and intended for places such as Firewall - Rules. I... Kill Bill

09/22/2017

08:53 PM Bug #7272: 6rd not functioning on 2.4.0-BETA
And it *BROKE* again on:
2.4.0-RC (amd64)
built on Fri Sep 22 11:35:27 CDT 2017
FreeBSD 11.0-RELEASE-p12
Larry Rosenman
02:43 PM Bug #7865 (Resolved): User groups -> Assigned Privileges doesn't work
Fixed Jim Pingle
12:44 PM Feature #7847 (Needs Patch): USB NIC not loading (TP-Link UE300 RTL8153)
Jim Pingle
12:44 PM pfSense Packages Bug #7278 (Resolved): Suricata Service - Advanced Configuration Pass-Through not working
Jim Pingle
11:53 AM Feature #7888 (New): Add a button in package manager GUI to upgrade all packages
Dunno, am I'm the only one who's missing this? Kill Bill
11:37 AM Bug #7869 (Feedback): Hyper-v vm traffic shaper error: hn0: driver does not support altq
There is a new knob to enable the support and now it is enabled by default in pfSense.
Will be available on the ne...
Luiz Souza
01:37 AM Bug #7813 (Feedback): Missing download statistics on captive portal with MAC filtering enabled
Fixed. Please try the next snapshot (will be available on tomorrow's snapshot). Luiz Souza
01:36 AM Bug #7833 (Feedback): ipfw will not limit download speed - captiveportal
Fixed. Please try the next snapshot (will be available on tomorrow's snapshot). Luiz Souza
12:12 AM Feature #4796: Support Multiple FIBs in pfSense
I just stumbled upon a case where it would be nice to have the webConfigurator in a separate FIB, because of routing ... Stéphane Lapie

09/21/2017

05:24 PM Bug #7887 (Not a Bug): User permissions do not protect firewall rules
It is working as designed. If you have permissions for a page, you can do anything on that page. The "Edit" page edit... Jim Pingle
05:10 PM Bug #7887: User permissions do not protect firewall rules
Michael Newton wrote:
> Javascript should have no bearing on it, since the permissions (should) get checked on the s...
Kill Bill
05:04 PM Bug #7887: User permissions do not protect firewall rules
Kill Bill wrote:
> Michael Newton wrote:
> > 6. Right click on Save button, inspect in browser's tools and remove "...
Michael Newton
04:55 PM Bug #7887: User permissions do not protect firewall rules
Michael Newton wrote:
> 6. Right click on Save button, inspect in browser's tools and remove "disabled" attribute
...
Kill Bill
04:30 PM Bug #7887 (Not a Bug): User permissions do not protect firewall rules
User permissions have only cosmetic effect on the firewall page, if any, and are trivially easy to bypass.
Steps t...
Michael Newton
12:37 PM Bug #7886: PRIQ, priority of 0 cannot be saved in GUI, GUI attempts to save a 0 value but actually ends up storing it as the default of 1
I also noticed that if you reorder and change the names of the priorities, and you have P2P catch-all set (default qu... jake xanaro
12:34 PM Bug #7886 (Resolved): PRIQ, priority of 0 cannot be saved in GUI, GUI attempts to save a 0 value but actually ends up storing it as the default of 1
PRIQ, priority of 0 cannot be saved in GUI, GUI attempts to save a 0 value but actually ends up storing it as the def... jake xanaro
12:06 PM Bug #7885 (Resolved): Cert. Manager should validate EKUs on importing a certificate authority
Currently, you can import any certificate as a CA, even ones that are actually unusable as a CA. Subsequently, you ca... Kill Bill
11:40 AM Bug #7856 (Feedback): IPsec status does not show all connected mobile clients
Applied in changeset commit:1144e24cabeda458b266b9874b827746f4c0f8a0. Anonymous
11:20 AM Bug #4723: Can't forward UDP fragmented packets with scrubbing enabled.
I am no longer able to troubleshoot this issue, I switched over to IPSec to resolve my SIP/UPD issue. I was working ... ryon m
11:13 AM Bug #7884 (Confirmed): Unbound refusing non-recursive/iterative queries even from localhost
PR looks good and the change lets @dig +trace@ and @drill -T@ work locally. Jim Pingle
09:42 AM Bug #7884 (Resolved): Unbound refusing non-recursive/iterative queries even from localhost
This is so much secure that it's annoying and getting in the way of normal work for not exactly any good reason.
<...
Kill Bill
11:08 AM Bug #7500 (Resolved): Upgrade From 2.3.3_p1 to 2.4 Fails (libssl.so.8 not found)
Jim Pingle
10:57 AM Bug #7500: Upgrade From 2.3.3_p1 to 2.4 Fails (libssl.so.8 not found)
I'm no longer seeing this error on recent upgrades, please close the ticket.
For documentation, the following co...
ryon m
07:45 AM Bug #7883 (Not a Bug): Aliases can only be deleted by some users
Most likely they had the 'deny config write' privilege which will do exactly this, and it's expected. On 2.4 it will ... Jim Pingle
04:25 AM Bug #7883: Aliases can only be deleted by some users
So, new insights (and the bug in that form can be closed):
- alias generation was not automatic but user triggered
...
Felix Wolfsteller
03:57 AM Bug #7883 (Not a Bug): Aliases can only be deleted by some users
We have following setup:
- pfsense 2.3.4-RELEASE-p1
- one default admin user
- one user with all privileges assign...
Felix Wolfsteller
02:39 AM Feature #7882 (Rejected): Seperator feature in DHCP Static mapping for this feature
Under Firewall -> Rules you have the possibility to seperate the rules with a seperator, this is a nice feature and i... Arian olde Kalter

09/20/2017

02:54 PM Bug #7819 (Resolved): php-fpm crashing
This looks good with 0.50, it no longer crashes on either system I could reproduce the crash on originally. Jim Pingle
01:55 PM Bug #7819 (Feedback): php-fpm crashing
php56-pfSense-module version 0.50 should fix this Renato Botelho
02:35 PM Bug #7878 (Resolved): GUI lag in Edit Phase 1 ipsec
This works now for Chrome on OS X. Jim Pingle
02:32 PM pfSense Packages Bug #7876 (Resolved): Potential XSS in status_monitoring.php
Confirmed fixed on the latest snapshot. Jim Pingle
02:30 PM Bug #7864 (Resolved): OpenVPN (tun/tap) is not showing
This works now. The wizard is now correctly populating the appropriate variables for the VPN. Jim Pingle
12:28 PM Bug #7880: 504 Gateway Time-out
Yes, because the certificate verification and authentication is handled in PHP. If you have more questions, please po... Jim Pingle
12:24 PM Bug #7880: 504 Gateway Time-out
is there any reason vpn server not accepting incoming vpn connections? Nikos Kastanas
08:01 AM Bug #7880 (Not a Bug): 504 Gateway Time-out
If a command never terminates, it will run until something stops it (e.g. PHP execution timeout).
There is no way ...
Jim Pingle
04:08 AM Bug #7880: 504 Gateway Time-out
Yeah nothing happens because the command will never return. It will keep pinging forever. PEBKAC. Kill Bill
03:18 AM Bug #7880 (Not a Bug): 504 Gateway Time-out
it is checked on different hardware with the same pfsense version 2.3.4-RELEASE-p1.
If try to run a command (eg ping...
Nikos Kastanas
10:32 AM Feature #1205 (Closed): VPN: User-based / Group-based firewall rules
This has been in place since pfSense 2.1. It uses the same syntax as cisco inacl/outacl, for example "permit tcp from... Jim Pingle
10:07 AM Feature #1205: VPN: User-based / Group-based firewall rules
Ermal Luçi wrote:
> The user based rules are supported if they come from radius.
>
> Locally to pfSense they stil...
Adrien Carlyle
09:46 AM Feature #6457: Allow ability to configure AWS EC2 AMI via userdata
Internal redmine ticket related to one of the user data options:
https://redmine.netgate.com/issues/162
Clinton Cory
06:51 AM Feature #7881 (New): OpenVPN client - add support for multiple server entries
OpenVPN in client mode supports multiple "remote" directives, these can be used for redundancy, if the first server f... robi robi
05:05 AM Bug #6406: Web process becomes unresponsive producing 502 Bad Gateway nginx
Chris Collins wrote:
> As an experiment I manually adjusted the php-fpm server configuration so there is more childr...
Kill Bill
04:18 AM Bug #7813: Missing download statistics on captive portal with MAC filtering enabled
See Bug #7833 and kindly re-instate the AWOL fix. Kill Bill

09/19/2017

07:41 PM Bug #7272: 6rd not functioning on 2.4.0-BETA
upgraded today to:
2.4.0-RC (amd64)
built on Tue Sep 19 18:30:48 CDT 2017
FreeBSD 11.0-RELEASE-p12
and 6RD...
Larry Rosenman
07:03 PM Bug #7879: traffic shaper crashes with hfsc_dequeue
Possible duplicate of #7877 Jim Thompson
12:57 PM Bug #7879 (Resolved): traffic shaper crashes with hfsc_dequeue
Today i experienced several crashes in 2.4RC i think there were at least 5.
Ive submitted the crash report a few tim...
Pi Ba
03:47 PM Bug #7778: DHCP relay not working correctly with bridges
Any updates on this issue? Do you agree this is a bug or is there a good reason why the bridge interface isn't added ... Sander Peterse
12:48 PM Bug #7878 (Feedback): GUI lag in Edit Phase 1 ipsec
JavaScript changed to eliminate lag Anonymous
11:33 AM Bug #7878: GUI lag in Edit Phase 1 ipsec
Seems to be isolated to only Chrome and only on OS X.
Firefox on OS X is fine. Chrome on Linux and Windows is fine...
Jim Pingle
11:15 AM Bug #7878 (Resolved): GUI lag in Edit Phase 1 ipsec
There appears to be a lag when selecting options for Authentication Method when editing Phase 1 for IPSec. Please se... Matthew Fine
12:30 PM Bug #7834 (Feedback): Disabling captiveportal will not flush the ipfw pipes
Applied in changeset commit:b2c926239223ed959a800ddf0c799e7650696d2e. Renato Botelho
10:41 AM pfSense Packages Bug #7876 (Feedback): Potential XSS in status_monitoring.php
Fixes pushed to the freebsd-ports repo:
FreeBSD-ports/devel "f044c1e4e3f647028c57ae1a572dc6377e555f...
Jim Pingle
09:45 AM pfSense Packages Bug #7876 (Resolved): Potential XSS in status_monitoring.php
The "view" variable in status_monitoring.php is taken from $_GET and used in a hidden input ("view-title") without en... Jim Pingle
10:17 AM Bug #7877 (Resolved): Crash when enabling traffic shaper on more than 1 port
https://forum.pfsense.org/index.php?topic=136733.0 Anonymous

09/18/2017

09:39 PM pfSense Packages Bug #7875 (Rejected): HAProxy Frontend bug - pfsense 2.3.4-RELEASE-p1 (amd64)
This is not a platform for discussion or asking support questions. Please post on the forum, mailing list, reddit, et... Jim Pingle
08:40 PM pfSense Packages Bug #7875 (Rejected): HAProxy Frontend bug - pfsense 2.3.4-RELEASE-p1 (amd64)
Hi Support,
This issue is related to ticket #7851 .We are advise to upgrade to the latest version 2.3.4-RELEASE-p1...
Peter Omolo
01:09 PM Feature #7874 (Rejected): Change OpenVPN Help
The current example is valid. Your example does something different and more complicated that is not what the average... Jim Pingle
01:03 PM Feature #7874 (Rejected): Change OpenVPN Help
Currently the OpenVPN text reads:
@EXAMPLE: push "route 10.0.0.0 255.255.255.0"@
This should be updated to
@EXAM...
Christian M.
09:00 AM Bug #7864 (Feedback): OpenVPN (tun/tap) is not showing
Applied in changeset commit:95a8ebeb5b7d73e7e72eba27c22d2b2b312f92de. Jim Pingle
08:10 AM Bug #7865 (Feedback): User groups -> Assigned Privileges doesn't work
Applied in changeset commit:7af38087fef168f213c6880c6782153630c13386. Jim Pingle
08:03 AM Bug #7868: bsmtpd hostres feature should not be active when running on esx/proxmox/virtualbox
PR looks OK but we can't commit to making sure it's in 2.4-RELEASE at the moment. We'll talk it over internally. Jim Pingle
06:24 AM pfSense Packages Bug #7872 (Not a Bug): Edits not saving
Also, don't manually edit the config files. The GUI will always overwrite them on purpose. That's what the GUI is for... Jim Pingle
03:05 AM pfSense Packages Bug #7872: Edits not saving
Noone is fixing packages in outdated versions that you should not be using in the first place. There were multiple HA... Kill Bill
02:50 AM pfSense Packages Bug #7872: Edits not saving
Is it a known issue? Will upgrading fix? Don't want to upgrade and encounter the same. David Maina
02:40 AM pfSense Packages Bug #7872: Edits not saving
How about upgrading your pfSense? Kill Bill
02:28 AM pfSense Packages Bug #7872: Edits not saving
Am on *2.3.2-RELEASE-p1 (amd64)* David Maina
02:26 AM pfSense Packages Bug #7872 (Not a Bug): Edits not saving
Am editing */var/etc/haproxy/haproxy.cfg* but looks like changes are getting cleared if someone uses *Services/HAProx... David Maina
04:50 AM Bug #7873 (Closed): When upgrading, some services/packages do not come back online on the first reboot (but do on the second)
I am using pfSense on virtual machines on VMware, and noticed the following services do not start properly on the fir... Stéphane Lapie
03:08 AM Feature #3013: Better upgrading for a CARP cluster
I have seen this improvement, so first of all, thank you so much.
However, the problem still remains that the CARP...
Stéphane Lapie

09/17/2017

06:39 PM pfSense Packages Bug #7871: Add squid validation for selected CA when MITM is enabled
P.S. There's https://github.com/pfsense/FreeBSD-ports/pull/402 that's been sitting there for about a month, would be ... Kill Bill
06:32 PM pfSense Packages Bug #7871 (Resolved): Add squid validation for selected CA when MITM is enabled
Obviously, this needs to be a CA we have a private key to so that it can issue certificates on the fly to prevent PEB... Kill Bill
02:21 PM Bug #7870 (Not a Bug): Traffic Shaper Wizard produces rules that causes a fatal crash. Specifically, qLink:qInternet:qACK:qP2P:qGames:qOthersHigh:qOthersLow N:U:U:U:U:U:U:U' returned exit code '1'
A crash+reboot when activating the shaper is not something that happens to everyone with the shaper. Those errors are... Jim Pingle
01:16 PM Bug #7870 (Not a Bug): Traffic Shaper Wizard produces rules that causes a fatal crash. Specifically, qLink:qInternet:qACK:qP2P:qGames:qOthersHigh:qOthersLow N:U:U:U:U:U:U:U' returned exit code '1'
When running the traffic shaper wizard, after the filter refreshes the system crashes and does a forced reboot. Below... Hy Diep

09/16/2017

07:52 PM Feature #2358: NAT64 support
Seems FreeBSD 11.1 now has NAT64. This is what "we" were waiting on right?
https://www.freebsd.org/releases/11.1R/...
Brandon Jackson
07:05 PM Bug #7865 (Confirmed): User groups -> Assigned Privileges doesn't work
The assign privileges control should be hidden when creating a group, but it's showing too soon.
Not critical enou...
Jim Pingle
09:41 AM Bug #7865 (Resolved): User groups -> Assigned Privileges doesn't work
When you try to add a new usergroup (system_groupmanager.php?act=new) then you can assign privileges on this group an... Arian olde Kalter
06:57 PM Bug #7867 (Duplicate): Dynamic DNS provider password containing special character %
This is a duplicate of #6688, it has been fixed on 2.4, not 2.3.x. Jim Pingle
01:15 PM Bug #7867: Dynamic DNS provider password containing special character %
Login to the service openDNS failed then the password contained the special character %. The "Dynamic DNS Clients" GU... Olof Söderström
01:13 PM Bug #7867 (Duplicate): Dynamic DNS provider password containing special character %
Login to the service openDNS failed then the password contained the special character %. The "Dynamic DNS Clients" GU... Olof Söderström
06:48 PM Bug #7866 (Rejected): snort version 3.2.9.5_1 shows WAN status as stopped
Jim Pingle
06:46 PM Bug #7866: snort version 3.2.9.5_1 shows WAN status as stopped
... Kill Bill
04:25 PM Bug #7866: snort version 3.2.9.5_1 shows WAN status as stopped
Here is snippet from the system log:... Yuri Weinstein
11:53 AM Bug #7866: snort version 3.2.9.5_1 shows WAN status as stopped
Ok posted on forum
So no bugs against snort are to be logged ?
What is unclear from this issue ?
Thx
Yuri Weinstein
11:32 AM Bug #7866: snort version 3.2.9.5_1 shows WAN status as stopped
Please use forums [1] for support. There's no info here to identify any bug, plus there were no changes whatsoever re... Kill Bill
10:02 AM Bug #7866 (Rejected): snort version 3.2.9.5_1 shows WAN status as stopped
After updating to snort version 3.2.9.5_1 status for WAN is always shown as stopped via Services/Snort/Interfaces
...
Yuri Weinstein
03:45 PM Bug #7869 (Resolved): Hyper-v vm traffic shaper error: hn0: driver does not support altq
after applying traffic shaper in a clean and new installed 2.4RC on a Hyper-v vm I got this message:
There were er...
Nadav Rak
01:32 PM Bug #7868 (Resolved): bsmtpd hostres feature should not be active when running on esx/proxmox/virtualbox
Even though the message on services/smtp page says:
"The hostres module is not compatible with VMware virtual machin...
Pi Ba
10:03 AM Bug #7864: OpenVPN (tun/tap) is not showing
I found out that when it was maked through the wizard option, this will happen. Arian olde Kalter
09:32 AM Bug #7864 (Resolved): OpenVPN (tun/tap) is not showing
In the description of the OpenVPN Servers there was the information of it was an (tun) or (tap) tunnel.
Now it only ...
Arian olde Kalter
07:26 AM Bug #7594: "vtnet: driver does not support altq" following upgrade to 2.4 (worked in pfSense 2.3)
I can confirm that Traffic Shaping is broken on VTNET Interfaces.
If active the Firewall / PortForward Rules don't w...
T S
07:22 AM Bug #6028: no firewall rules loaded after reboot with invalid ruleset
Another example making no rulesloaded (vtnet doesnt support altq): https://redmine.pfsense.org/issues/7594 Pi Ba
05:13 AM Bug #7863 (New): The "WebCfg - All pages" permission inclueds the "User - System: Shell account access" even though that is not a WebCofg page.
If this is intended that is fine but it just seems wrong to me. David B
03:46 AM pfSense Packages Bug #7862: package zabbix lts
Duplicate of Bug #6129. Kill Bill
 

Also available in: Atom