Activity
From 09/23/2017 to 10/22/2017
10/22/2017
-
08:08 PM Feature #7985: Could support Realtek usb wifi on pfsense feature?
- Thank for your reply.
I hope it will add in the feature. -
11:31 AM Feature #7985 (Needs Patch): Could support Realtek usb wifi on pfsense feature?
- If the driver makes it into FreeBSD, we can include the module, but it has to be accepted in FreeBSD first. I don't s...
-
- I use DLINK DWA171A1 wifi usb card.It's use RTL8821AU chipset.But pfsense can't load this driver.
I use usbconfig.I ... -
07:31 PM Bug #7986 (New): WLAN card no longer properly initialized under 2.4.0
- I have installed pfSense on an APU2C4 (bios 4.0.7) with a 32 GiB mSATA and a Compex WLE200NX (Atheros AR9280).
I d... -
05:19 PM Bug #7981: PPP interfaces with a VLAN parent do not work with new VLAN names
- S
-
-
03:28 AM Bug #1613: OpenVPN LDAP authentication should not modify mail attribute as login.
- This has been configurable for ~4 years; fixed.
https://github.com/pfsense/pfsense/commit/a5cd1c5a4286062b84caf32d... -
-
- Been removed ages ago, like... 2.1.x
-
-
- Looks just fine here with ~435K table and 2.4.x
!https://image.prntscr.com/image/d98Fp3uJSvyUYPemD1doIA.png!
(O... -
-
- Fixed with https://github.com/pfsense/FreeBSD-ports/pull/434
-
- I closed that one out instead, since this one is already setup for the right target.
-
- Apparently this has already been reported in Bug #6241
-
- Replaced by #7946
-
- Duplicate of #7415
-
- Already done.
https://redmine.pfsense.org/issues/7415
https://github.com/pfsense/pfsense/commit/e7d63f568c8e3982e... -
-
- Platform has been gone for over a year in 2.4
https://github.com/pfsense/pfsense/commit/3f4a0df92c1fbb72028e5aa1a6... -
- I put this to https://github.com/pfsense/FreeBSD-ports/pull/441 (the infoblock seemed like a serious overkill for the...
-
- This issue could be be worked around once Bug #6650 is fixed. See https://github.com/pfsense/pfsense/pull/3856 for te...
-
- Got fed up with this... People who are interested in having HSTS optional kindly test this: https://github.com/pfsens...
-
05:04 AM pfSense Packages Todo #7411: LADVD Devices not wide enough
- Sorry about the original post.
I've attached a few screenshots, 1 from pfSense and the other from Wireshark.
Od... -
- https://github.com/pfsense/pfsense/pull/3855
10/21/2017
-
06:11 PM Bug #7984: restarting syslogd service makes sshlockout_pf process orphans
- b.t.w. Using 2.4.1-RC (amd64)
built on Fri Oct 20 05:49:00 CDT 2017
FreeBSD 11.1-RELEASE-p2 -
- restarting syslogd service makes sshlockout_pf process orphans
When syslogd logs something from auth.info;authpriv... -
01:54 PM Bug #7979: Error setting limiter over 2GB/s
- If you print before the bandwidth too large message you get this....
-
- ...
-
- ...
-
-
- Merged.
-
-
- Merged and fixed.
-
- Can you please try again when a new snapshot is available? mpd-5.8_3 contains a fix for that
-
- Applied in changeset commit:5b460fef11eb736e99d0df21ff3b53e303745d06.
-
-
11:35 AM pfSense Packages Bug #7670: Bind : Serial for slave zone is missing in IHM
- yes, you are right. you can close it.
-
- As noted above, this is by design.
-
- Do you have "BSD Crypto Device" selected under System > Advanced, Misc tab, for Cryptographic Hardware? If not, selec...
-
- Cannot see anything truncated here with current package in 2.4.x, plus the unformatted mess posted in the bug descrip...
-
- Please keep support questions on the forum, mailing list, or reddit.
-
02:27 AM pfSense Packages Bug #7983 (Rejected): DHCP on startup
- Hello
I have a APU2C2 Router / Firewall. 3 x Gigabit LAN, Quad Core CPU, 16 GB SSD, 2 GB RAM from Teklager in swe...
10/20/2017
-
09:46 PM Bug #7619 (Closed): Enable Enhanced networking on AWS
- fixed in 2.4
-
- Duplicate of #7981
-
07:36 PM Bug #7982 (Duplicate): PPP over VLAN fails
- Upgraded to development snapshot 2.4.2.a.20171020.0950 and PPPoE over a VLAN is failing...
-
- please have the correct parties educate themselves about fonts.
-
12:26 PM Bug #7980 (Not a Bug): Support widget is displayed in Times New Roman
- The support widget doesn't use the same font as the rest of WebGUI does. I've notice it happen on Windows boxes mostl...
-
- Assigned to Beaver, so he can do the work (-should be trivial-) or re-assign to Pingle or Jones.
-
Code is in 11.1 / 2.4.
https://svnweb.freebsd.org/base?view=revision&revision=300779
GUI needs adaptation.
...-
- That FreeBSD-net posting is 3 years old.
Current code looks better (function: read_bandwidth())
https://svnweb.fr... -
- signed 32bit int max**
-
- Setting a bandwidth limiter over unsigned 32bit int max bps seems to fail.
Found initially when I tried to create ... -
- I am having the same issue when trying to dial PPPoE through a VLAN with the new dotted naming convention:...
-
- Confirmed
-
01:36 PM Bug #7981 (Resolved): PPP interfaces with a VLAN parent do not work with new VLAN names
- Hello,
I Upgraded from 2.4.0 to 2.4.1-RC yesterday, and after the upgrade, the PPPOE interface didn't picked my ... -
- I can't reproduce this as stated, the second delete attempt actually does nothing, rather than deleting anything as t...
-
-
-
- I can't seem to break it now, but I couldn't reproduce the problem before, either, so it's a tough call on this one. ...
-
- Works with English and Dutch now
-
- Applied in changeset commit:9006d84f215c8ea54ecc4bda3296e12aa199824e.
-
05:18 AM Bug #7976 (Resolved): Config History not working when using (dutch) translation
- When using a localised version of the pfSense GUI (Dutch in my case), the diff function between different config vers...
-
- This looks good
-
09:26 AM pfSense Packages Feature #7824: [acme / Let's Encrypt] Bump to the latest acme.sh package
- Thanks. The request is submitted in github (https://github.com/pfsense/FreeBSD-ports/pull/436)
-
- Once the 2.4.x release process winds down I plan on making a pass through the ACME package and adding more providers,...
-
- Apparently this still has some issues:
> Azamat: Created QinQ interface: OPT2 Interface (opt2, igb1_201_666) on SG... -
- I noticed several times in the pfSense GUI that on pages where there no entries yet, the headers of the tables are no...
-
- In the gateway groups edit page (https://192.168.1.1/system_gateway_groups_edit.php)the text explaining the Link Prio...
-
05:21 AM Bug #6396: 504 gateway time out nginx
- And SSH console freezes after admin login. Firewall works, people can access Internet, but reboot is needed to recove...
-
- 502 Bad Gateway happened again.
10/19/2017
-
08:09 PM Bug #7975: ESXi 6.5 UEFI boot stops at framebuffer info
- I tested booting other current freebsd and pfsense ISOs.
Both pfsense 2.4.0 and freebsd 11.1 iso did not stop at the... -
- Booting the pfSense-CE-2.4.1-RC-amd64-20171019-0852.iso on ESXi 6.5 using EFI bios, the boot stops after showing the ...
-
-
08:58 AM Bug #7748: VLAN Priority
- 2.4.1.a.20171019.0413 seems to have resolved the issue on my end. Thanks everyone.
-
- Corey Doss wrote:
> No luck for me (Google Fiber) on snapshot 2.4.1.a.20171018.1713. Maybe the next available buil... -
-
- Applied in changeset commit:93a3b29649ca500aa17450213d69974e723e6091.
-
- I just migrated to pfSense 2.4.0 and the latest acme package 0.1.20. That version bumped to a newer acme.sh version, ...
-
03:19 PM Bug #7966: Live traffic graphs appear to have sampling errors
- Chris Linstruth wrote:
> The Status > Traffic Graphs function and the Traffic Graph widget appear to have a regressi... -
- There have been some IPsec widget fixes here which may be relevant, since it is so difficult to reproduce, it is diff...
-
- A new version of pfBlockerNG has been released containing a fix for this problem.
-
- There have been some fixes here in the IPsec widget and pfBlocker which may help - moving this forward in case there ...
-
01:00 PM Feature #7974 (New): ZFS RAID Monitor Not available
- pfsense currently has a widget that allow you to see the status of a GEOM Mirror after setting up a GEOM RAID. It wo...
-
11:50 AM Bug #7918: Nightly error reloading rules
- Still present on 2.4.0.
edit: and 2.4.1
edit: and 2.4.2 -
-
- The "VLAN Prio Set" option on firewall rules is supposed to alter the VLAN priority flag in 802.1q packets as they le...
-
- If you upgrade to 2.4.1 snapshot and keep seeing bsnmpd consuming high CPU please add a comment in #6882 so it can be...
-
02:36 AM Bug #7970: Used Maximum Ram and freeze in new Version
- Hey OP, I was reading into this further and found Bug #6882 https://redmine.pfsense.org/issues/6882 you might find in...
-
- Sorry for the update spam, before I rebooted it this time I sent an NMI from ESXi and it generated a textdump in /var...
-
- Hello,
I came to this tracker to look for similar reports to what I am experiencing and this is very similar.
I... -
02:07 AM Bug #7970 (Duplicate): Used Maximum Ram and freeze in new Version
- hi
i am upgrade my PFsense to newer Version . After do it pfsense used all memory (4GB). i am increase to 8GB but to... -
05:04 AM Bug #7972 (Resolved): Captive portals do not synchronize voucher data in both directions
- Hi,
I have a master and slave Captive portals. They synchronized well the data in both directions and immediately ... -
- Hi,
Would it be possible to implement possibility to allow import/export (e.g. in CSV format) of allowed/disallowe... -
03:19 AM Bug #7426: UDP packet drops
- *An important note*
The issue can be found on:
* sg1k for ordinary data transmission
* 3100 for VPN data transmi... -
- During investigation 27001 found some important things:
# Looks like the issue affects 100BaseTX
# Changing from au... -
01:30 AM Bug #7925: VT race condition panic at boot on ESXi 6.5.0U1 and FreeBSD 11.1 base
- Jim Pingle wrote:
> For reference, at least one person appears to have encountered it on ESX 5.5 as well, though the...
10/18/2017
-
10:09 PM Bug #7969 (Resolved): md5 bgp sessions fail in 2.4.0
- Upgraded to 2.4.0 from 2.3.4 and my bgp sessions which were secured via TCP md5 configurations in openbgpd & the new ...
-
- Luiz Souza wrote:
> Found the regression. Please test the next snapshot.
No luck for me (Google Fiber) on snapsh... -
07:34 PM Bug #7748 (Feedback): VLAN Priority
- Found the regression. Please test the next snapshot.
-
07:06 PM Bug #7927: (filterdns), uid 0: exited on signal 11 (core dumped)
- As of 2.4.1.a.20171018.1438, I am not seeing further reports of a core dump by filterdns.
-
- So I just tried again... this must be the most braindead thing ever....
-
03:29 PM Feature #7968 (Resolved): Display NDI on shell menu
- The NDI is displayed in the webGUI but not the shell menu. This forces customers to access the webGUI before they can...
-
- The LDAP user naming attribute is read from the configuration and CN is not hardcoded, so it can only be from somethi...
-
02:14 PM Bug #7967: LDAP User Naming Attribuite override isn't used in pfSense 2.4
- I have been unable to duplicate this. A configured LDAP server here uses uid and the query is properly-filtered with ...
-
01:33 PM
Bug #7967 (Not a Bug): LDAP User Naming Attribuite override isn't used in pfSense 2.4
- Version 2.4 Authentication Servers page, User Naming Attribute is set to something other than CN. In my case the LDA...
-
- I ran some more tests:
kern.vty=sc ADDED to /boot/loader.conf.local: 72 reboots (6 VMs, 12 reboots each), no crash... -
- To rule that out we should setup the kern.vty=sc workaround and continue testing for a bit to see if it still crashes...
-
- Ok, I see now the two different crashes on the OP post.
While I take back part of what I said before, It still doe... -
- The recent crashes seems unrelated to the original crash in VT.
They actually seem to happen quite late in the ker... -
- Ditto, I see a similar crash. I had to reboot 5 VMs a few times before one of them failed.
!Selection_709.png! -
- Tried on 2 different esxi hosts latest 2.4.1 ova rebooted 20 times each VM. Once got error for 2nd VM.
!vm_bug.png... -
- +1 for updating the openbgpd package so that it can support local-as.
Current package version will give me a syn... -
- Sure, that should work fine
-
- Jim Pingle wrote:
> Looks like one viable method might be to echo with @&@, capture the pid of that process, sleep f... -
- Well yes I think there's something broken about c-icap in general, the named pipe (fifo) should vanish once the servi...
-
- Looks like one viable method might be to echo with @&@, capture the pid of that process, sleep for a moment, and then...
-
- OK, that does make a difference. If there are stale PID files it seems to get stuck because "/bin/sh /usr/local/etc/r...
-
- Jim Pingle wrote:
> I setup squid and enabled clamav, so I have squid, clamav, and c-icap services running. I manual... -
- I can't seem to replicate this as-is but there could be something I haven't quite triggered yet.
I setup squid and... -
- Works now, the last item delete gets synchronized as expected.
-
- Applied in changeset commit:2a781563c6acf925a45e74d6c2f72d0e9b4173f9.
-
- After the fix for #6882 this is no longer necessary.
-
- This looks good now. After upgrading to the latest snap, I can have a wireless WAN assigned and working, and also edi...
-
- After importing the FreeBSD patch, this appears to be OK. CPU usage is back to normal, no sign of a memory leak, and ...
-
07:53 AM Bug #7964: Restart openvpn on gateway switching
- perhaps this would help: --remap-usr1 SIGHUP
I don't know how you handle openvpn exactly. Have you send SIGUSR1? At ... -
-
04:11 AM pfSense Packages Bug #7965: freeradius 3 with MySQL
- hmmm.... will this commit fall into the repository? or nothing?
how can I help? -
- There is nothing for testing (beyond reverting that commit). The linked commit is potentially a *source* of the issue...
-
- where its apply for testing?
-
- This commit: https://github.com/pfsense/FreeBSD-ports/commit/eafa6ca5d0b89a3e6a9110dfea8e2a89fe24d245
- The hunk s... -
- The Status > Traffic Graphs function and the Traffic Graph widget appear to have a regression (#7515 ? ).
The samp... -
- The reason of UDP drop is packet processing slowdown which happens on ARM devices (1k, 3100). I observed ~2-7% for di...
10/17/2017
-
- i use freeradius for Plain MAC Authentication
-
- sorry, I will duplicate issue 7947, BUT i think this is a 100% bug. Please, let's take it seriously.
I'm upgrading... -
- After the PPPoE interface is up, the openvpn clients still use Tier2 and didn't fall back to Tier1.
-
- I have 2 openvpn clients with GW Group configured.
While Tier1 interface (PPPoE) was going down the two openvpn cras... -
06:15 PM pfSense Packages Bug #7963: Unable to upgrade pfSense v2.3.4-RELEASE to v2.3.4-RELEASE-p1 via web admin site. Clicking 'y' on console continues upgrade successfully.
- Steve Tanti wrote:
> Jim Pingle wrote:
> > Be sure to go to System > Update, Update Settings tab. Set the branch to... -
- Jim Pingle wrote:
> Be sure to go to System > Update, Update Settings tab. Set the branch to Security/Errata Only an... -
- Be sure to go to System > Update, Update Settings tab. Set the branch to Security/Errata Only and then try again.
-
- When I trigger an upgrade via the web console it hangs stating:
>>> Downloading upgrade packages...
I left it f... -
- Looks good as far as I can see, with hostapd and wpa_supplicant are updated and running as expected.
-
- I've tested with ath0 and run0 as AP and BSS mode, both run the appropriate binaries from ports and appear to be OK.
-
- Start using hostapd / wpa_supplicant from ports on 2.4.1 and 2.3.5. Next round of snapshots should be OK
-
- The XMLRPC error is gone but the affected section does not sync when empty.
You can never delete the last virtual ... -
- Fix pushed
-
- The Auto (UFS) behavior with a single drive works well
-
- Added in 2.4.0 installer already. When Auto (UFS) is selected, if there is only one available disk it's automatically...
-
01:55 PM Feature #7962: Support for Intel 553 network card
- Hi,
could also be easier as this here:
https://lwn.net/Articles/735126/ or in more detail this: https://revie... -
- Hi,
just tried to get a Intel 553 network card running in pfsense 2.4, but it does not work.
Issue https://red... -
- It looks good with a gitsync, but needs another test once it's in snapshots.
-
- Fix committed to FreeBSD-src and exceptions removed from GUI
-
- The GUI control properly reflects the state of the option in the configuration, and changes are saved properly.
-
- Testing and expiring works now.
-
-
- Verified that the correct combination of aesni.ko and cryptodev.ko are present after a reboot and that cryptodev is o...
-
- Looks to me like all of the references in the pfSense-upgrade code now call pkg-static so this is done.
-
- Latest fix did the trick. I can now start with a VM with a legacy style fstab and the upgrade completes and boots up ...
-
- I've added it to pfSense-repo package post-install script
-
- I can't reproduce this on 2.4.1 snapshots but it was so random before that doesn't give me much confidence.
Anyone... -
- Works
-
- We've tested this a bit and it's working.
-
12:01 PM Feature #7814: Unbound serve-expired please add to GU as tickbox
- Martin informed this has been accepted and merged.
-
07:45 AM
Feature #7814 (Feedback): Unbound serve-expired please add to GU as tickbox
-
- Please, test again when the next snapshot is ready.
It is fixed and updated to use the same name format as VLANs.
... -
11:11 AM pfSense Packages Feature #7895: Add a script for CARP monitoring to NRPE
- Here is a fixed version, I tested it based on your above output.
It now gives the following result :... -
- Ah, I think I see. I did not handle the case of multiple VHIDs on one interface, I will fix it right now.
-
10:11 AM pfSense Packages Feature #7895: Add a script for CARP monitoring to NRPE
- I agree that it would be very helpful if there was a way to monitor carp status via SNMP.
I ran your script on my ... -
- Applied in changeset commit:93d3a065260441dcb32fcd69cf4cb806d1021eea.
-
- At least with some wireless devices, they send a link up event to the OS when they associate successfully. This trigg...
-
11:06 AM
pfSense Packages
Bug #7961 (Resolved): JS Error on Status > Monitoring
- If you go to Status > Monitoring click Settings > Display Advanced > add view and then click cancel you get this cons...
-
10:17 AM pfSense Packages Bug #7959 (Not a Bug): Dpinger - Probe Interval
- Dear Team
We are working with WAN satellite connections limited in bandwidth data per month.
The maximum probe inte... -
- OK. Now have a look at the forum.
It looks like filterdns stops working and after a big change a second one will be ... -
- If it ever worked, it was by luck alone.
When I try to resolve www.google.de, I only receive two responses (one I... -
- It was a test with google ...
The point is, that the other address are not shown.
And before update it worked as ... -
- You cannot rely on alias resolution for domains which return random sets of addresses. That will never work properly ...
-
- Some more info:
I'm using Domain Overrides.
I put www.google.de and a host from my Domain Overrides into a table ... -
- It works fine here on several firewalls and there is nowhere near enough detail here or on the linked thread to sugge...
-
- I'm not alone with this problem so I decide to open a issue an this:
https://forum.pfsense.org/index.php?topic=13817... -
08:47 AM Bug #7856: IPsec status does not show all connected mobile clients
- I did some tests with SG-2220 (2.4.1-DEVELOPMENT (amd64)) and IPsec widget was on Dashboard, but there wasn't any IPs...
-
07:45 AM Bug #7748: VLAN Priority
- Downgraded last night to 2.3.4, packets are now being properly tagged again. Here are some examples:...
-
06:58 AM Feature #7957 (New): GUI theme - separate "colour" from "compact/normal" in theme dropdown
- At the moment one can choose themes such as normal, dark, and compact-RED.
There is also a colour selector with a wi... -
- Sample favicons attached
-
- I'm finding that with multiple pfSense routers in use, choosing the right tab in the browser would be a lot easier if...
-
- In previous versions, when upgrading, the activity textbox displays what's happening. At the end it said something li...
10/16/2017
-
- Fixes for KRACK now in FreeBSD Ports tree: https://github.com/freebsd/freebsd-ports/commit/e0ec9d45b57b88487440141915...
-
- We need to import the FreeBSD fixes for wpa_supplicant and hostapd related to the recently-disclosed key reinsertion ...
-
05:43 PM Bug #6455: Can't delete Virtual IP "referenced by a least one gateway" if gateway outside interface subnet
- Thanks! Just ran into this and changed the mast to /32 and I was then able to delete it. I thought it was a 2.4.0 bug...
-
-
03:34 PM
Bug #7884: Unbound refusing non-recursive/iterative queries even from localhost
- On pfSense-netgate-memstick-ADI-2.4.1-DEVELOPMENT-amd64-20171016-1127.img "dig google.com +trace" and "drill -T googl...
-
- Great, thanks for testing!
-
- Looks good here, only usable CAs are being offered in the Squid GUI with 0.4.42. Thanks!
-
- OK I added two different sets of protection:
1. Input validation to warn if a user selected a CA without a private... -
- So you have a package and the service is not running. Trying to upgrade/reinstall produces the following:...
-
- When attempting to sync an empty section (e.g. VIPs are set to sync, but no VIPs are defined), the following error is...
-
- Applied in changeset commit:f96376a378211155181a02a053cbb7ff9a700056.
-
- There is still some debate as to whether or not this is even necessary or would ever help, but it should be simple to...
-
- There isn't enough really to go on here, please start a forum thread so we can discuss and diagnose the issue. Also, ...
-
- i edit /usr/local/etc/raddb/sites-enabled/default
i comment:... -
- i use EAP section
and freeRadius2 worked in 2.3.4
2.4 + FR3 = not worked -
- Applied in changeset commit:a69a9182278bab4843f3215a1b484f9452558884.
-
- Great, thanks for testing!
-
12:06 PM pfSense Packages Feature #7945: NET-SNMP - Flooding log entries
- Jim Pingle wrote:
> I just pushed a fix for this, it will show up shortly to install.
Updated and tested. Looks g... -
- I just pushed a fix for this, it will show up shortly to install.
-
- It seems to be anything it can't validate against the current repository (offline or online). It should list them all...
-
- Well yes, the inability to produce/take into account any offline results is indeed a bug.
-
- It may still be a bug though. The package is indeed gone from the server-side database but it's still installed local...
-
- This was an issue with the rules on that one system and not a problem with ntopng.
-
- I see those errors here but it appears they happen during install or boot when it gets stopped/started a couple times...
-
- We have received a report that exported OpenVPN client package is flagged by a few AV's.
https://forum.pfsense.or... -
09:40 AM
Bug #7896 (Feedback): picture_widget.php
- Applied in changeset commit:dc91c9490a61c374b4358a3a328019f3e0e150ab.
-
09:10 AM
Bug #7714: NTP Widget Time Display
- Applied in changeset commit:7f9b448ff7d926c4c5b69ada8625e728c3f5c715.
-
09:00 AM
Bug #7714 (Feedback): NTP Widget Time Display
- Applied in changeset commit:893b609111be502233a7a4ad6804fff1e4779a03.
-
- That does look almost identical to #7119, we should check to see if those patches need any adjustments for FreeBSD 11.1.
-
- See also: #7946
-
07:40 AM
Bug #7921 (Feedback): Reset All States on WAN IP Change does not stay unchecked when disabled in GUI
- Applied in changeset commit:5fce3e8e905c3a2029475293cf760ee2c2a51074.
-
- Please start a new thread on the forum with was much detail as possible. There is not enough to go by here, and some ...
-
- after upgrade from 2.3.4 pfsense periodically fall in black screen
you can enter letters from the keyboard, but th... -
- It's working fine here. Are all of the daemons running?
Does running one of the status commands at the CLI work?
<... -
06:59 AM pfSense Packages Bug #7950 (Closed): Quagga not displaying status messages on 2.4-rel
- See attached screenshot. Quagga is working but no status messages are displayed.
-
- PR has been merged
-
- PR has been merged
-
- Applied in changeset commit:9d775c7500e1ba09417e106f2ddc81b2cc8e67dc.
-
- DHCP Server has places to define 3 files for netboot (BIOS, UEFI 32 and UEFI 64). When these options are configured i...
10/15/2017
-
- Not a bug.
https://forum.pfsense.org/index.php?topic=133280.0 -
07:09 PM Bug #7946 (Resolved): 2.4 Package Manager: Does Not List Installed Packages which have been removed from the repository.
- Upon upgrading to pfSense 2.4, I was unable to perform the recommended approach to move from freeradius 2.x to 3.x be...
-
- Afrer upgrade pfsense to 2.4 and install freeradius v3 -- freeRadius not execute....
-
- I don't see any mention about memory leaks here but this might be related.
https://forum.pfsense.org/index.php?topic... -
10:41 AM Bug #6882: bsnmpd uses all available CPU with hostres module active in some cases
- Just found this bug report after chasing down the issue on my office's pfsense install that was upgraded to 2.4.
I... -
- Please make a better solution for the NET-SNMP logging. Currently it floods the Genereal Log Entries (System Logs / S...
-
03:44 PM pfSense Packages Bug #7944 (Resolved): Bind XMLRPC Sync Error
- After upgrading to pfsense 2.4.0 syncing Bind is not possible anymore. Each time I update the config I get the follow...
-
02:00 PM Feature #7943 (Resolved): Overflow scrolling for top navigation drop-down menus in Fixed mode
- Some resolutions (16:9 on laptops) don't have the vertical height to display all drop down menu items on items such a...
-
01:30 PM Bug #7942: QinQ interfaces never show as active
- ...
-
- In a fresh 2.4 install QinQ interfaces always show in Status > Interfaces as down even when the parent interface show...
-
- After installing and enabling ntop-ng with default settings in 2.4 it is not possible to reach the data display page ...
-
- The code itself appears to work but it doesn't get triggered unless you start to run the upgrade from the CLI, stop w...
-
- It looks very similar to this - https://redmine.pfsense.org/issues/7119
When Lagg interface goes down:
<6>carp:...
10/14/2017
-
- Applied in changeset commit:0b2d15478ee375c5bb9bde82ac493e1ea38d2eb6.
-
- Affects both status_captiveportal_test.php and status_captiveportal_expire.php
-
- The voucher test page does nothing when a value is submitted.
-
- Duplicate of #2668
-
03:50 PM Feature #6754: Use of aliases in OpenVPN configuration
- Requested on forums also: https://forum.pfsense.org/index.php?topic=137852.0
-
- Requested on forums also: https://forum.pfsense.org/index.php?topic=137852.0
-
- Judging by some responses on the forum it can also happen on bare metal, not just VMs. The exact conditions are uncle...
-
- Please either fix the underlying issue if possible. Or at least commit this workaround that seems to be needed for mo...
-
11:20 AM pfSense Packages Bug #7932: 2.4.0 & Snort 3.2.9.5_1 Pass Lists
- No, it's not directly a Snort issue. It appears to be something that was perhaps inadvertently introduced when the t...
-
- Cheers guys, it does disapear after moving pfSense.mo pfSense.mo.old
So not a Snort issue then. -
- Michael OBrien wrote:
> Is there a reason you're moving this to 2.4.2, or you just need confirmation that it's good ...
10/13/2017
-
09:52 PM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Jim Pingle wrote:
> FYI- FRR is now available for 2.4, 2.3.5 (snapshots), and 2.3.4 users. Internal tests show that ... -
03:42 PM Bug #6882: bsnmpd uses all available CPU with hostres module active in some cases
- Looks Like KVM has the same issue btw. I am running 2.4.1-DEVELOPMENT (amd64)
built on Fri Oct 13 12:32:36 CDT 2017... -
- It looks like there is actually a patch for FreeBSD now which might help: https://bugs.freebsd.org/bugzilla/show_bug....
-
-
- This one is actually a duplicate of Bug #6748 and I'm still seeing this randomly.
-
- Bill Meeks wrote:
> Andy Kniveton wrote:
> UPDATE- an empty string is the cause, now to find out why ???
>
> Bi... -
- Andy Kniveton wrote:
> Ah I don't have an Assigned Alias, so it displays the txt regardless of what ever the locale ... -
- Ah I don't have an Assigned Alias, so it displays the txt regardless of what ever the locale is set to.
Just creat... -
- I've upgraded from 2.3.4-p1 to 2.4.0 and not changed the locale. it's using the default English I guess as I've not s...
-
- I am so far unable to reproduce this problem in my virtual machine test environment. What language/locale is your fi...
-
- Thanks for the report. I will look into the problem.
Bill -
- This is definitely due to a locking issue with file access in the index.php file for pfBlocker DNSBL. Not sure why it...
-
- Hey, I'm one of those users thanks for putting this in the queue for 2.4.1.
I did a real quick tcpdump looking for... -
- Apparently this negatively impacts users on Google Fiber
https://forum.pfsense.org/index.php?topic=137916.msg754579#... -
- There is a pending PR for this, https://github.com/pfsense/FreeBSD-ports/pull/417
We'll be reviewing PRs shortly n... -
- pfSense-upgrade version 0.27_2 on 2.3.x and 0.34 on 2.4.x check for /dev/adN under /etc/fstab and call "/usr/local/sb...
-
- Some upgrade attempts are failing to mount root after the kernel is upgraded to FreeBSD 11.x due to ada disk driver c...
-
- pfSense-upgrade version 0.27_2 on 2.3.x and 0.34 on 2.4.x are changed
-
- pfSense-upgrade should use pkg-static internally, rather than pkg, to avoid issues with major version upgrades, poten...
-
10:37 AM Feature #1557: Add the Interface descriptions to the OS interface descriptions
- Hi there,
This would be a great feature for those who use Zabbix or similar.
Thanks
Gareth -
09:12 AM Bug #7928: LAGG interfaces lose MAC address
- Can confirm, this is new behavior and I am able to duplicate it per Steve's steps at a client site. The secondary fir...
-
- For reference, at least one person appears to have encountered it on ESX 5.5 as well, though the majority of users ar...
-
- I thought we had another entry for bridge already but today I don't see it. So I reopened this and changed the subjec...
-
03:00 AM Bug #7916: There were error(s) loading the rules: pfctl: ix0: driver does not support altq - The line in question reads [0]: | Intel X520-DA2
- Same problem on 2.4.0!
-
01:22 AM Bug #4310: Limiters + HA results in hangs on secondary
- Sander Naudts wrote:
> Why not change target version to 2.9.9... sorry just little frustrating that this doesn't get...
10/12/2017
-
- It should be noted that when upgrading, if the host resources MIB was already selected BEFORE the upgrade, it will re...
-
09:51 PM Bug #7936: bridge network interface does not support altq on 2.4.0-RELEASE
- That is true, but all interfaces assigned to bridge0 are igbx, will retest tomorrow
-
- bridge0 is not igbX.
-
- The bridge interface is currently not being built with altq support enabled. This leads to a situation where the user...
-
07:28 PM pfSense Packages Bug #7935 (Resolved): FFR doesn't save prefix lists to bgpd.conf
- Prefix lists referenced in route-maps or directly do not work with bgp when created using the webui. Have to copy the...
-
05:47 PM Bug #7925: VT race condition panic at boot on ESXi 6.5.0U1 and FreeBSD 11.1 base
- For information, the same problem occurs in Workstation 12.5.7 (build 5813279), vm hardware version 11.
It happened ... -
- For anyone experiencing this crash in the meantime, adding @kern.vty=sc@ to @/boot/loader.conf.local@ is confirmed to...
-
04:38 PM
Feature #7934: format support phone# for international use
- Assigned to sdavis. This is a server-side issue
-
04:10 PM Feature #7934 (New): format support phone# for international use
- In the new 2.4.0 release, the Netgate Services and Support dashboard gadget shows the phone# to call. (Good idea, bt...
-
02:47 PM Feature #7643: Send notification when boot completed
- I also think that would be very useful function.
-
- Doesn't make a difference, still the same bug on the same version. If it was closed, you might have a point but it's ...
-
02:23 PM Bug #7933: There were error(s) loading the rules: pfctl: vtnet0: driver does not support altq - The line in question reads [0]:
- Maybe, but the bugs remains on release 2.4.0-RELEASE (amd64), that was for 2.4 BETA and 2.4 RC.
-
- Duplicate of #7594
-
- To let you now my configuration was working nice on 2.3.4-RELEASE-p1
-
- After a clean installation to have zfs filesystem, I restored my configuration, and there is no internet connection c...
-
- Michael OBrien wrote:
> Any chance 2.4.0, with the FreeBSD 11.1 ipsec changes, may resolve this?
Just loaded up 2... -
- https://forum.pfsense.org/index.php?topic=137921.0
-
- Please also post that in the IDS/IPS board of the forum so the package maintainer has a higher chance of seeing it:
... -
- The following appears under Assigned Alias header :-
Project-Id-Version: PACKAGE VERSION Report-Msgid-Bugs-To: POT... -
- Most likely it was old/cached data in your browser and the refresh let it pick up new copies. We have added some prot...
-
11:46 AM Bug #7931: Error: SyntaxError: Unexpected token < in JSON at position 0
- After a refresh the error is gone btw
-
- After Upgrading to 2.4.0 this error is shown in the Traffic Graph Widget on the Dashboard
@Error: SyntaxError: Une... -
- Sending an e-mail notification for that from the firewall itself isn't really a good idea. There are many other ways ...
-
11:13 AM Feature #7930 (Rejected): Upgrade notification
- It would be nice if there was some sort of alerting or notification when pfSense has a new upgrade available (via ema...
-
- We expected to have more time before 2.4.1 but we need to have it out in a week or so, there isn't time to get to thi...
-
10:53 AM Bug #4310: Limiters + HA results in hangs on secondary
- Why not change target version to 2.9.9... sorry just little frustrating that this doesn't get fixed.
-
- You'd be surprised, there are a number of them out there on CF, USB sticks and the like, and some of them have opted ...
-
- Thanks, Jim. That would be a perfectly acceptable solution, with a whole bunch of side benefits.
Especially since I... -
10:28 AM Bug #7786: traffic shaping queue on WAN wont allow total of all child to be 100%
- i think this requires some php code changes only as the web gui doesnt allow, the shaper itself is fine with it when ...
-
- Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated.
-
-
- Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated.
-
-
10:01 AM Feature #7823: Pull request: Add support for dynamic DNS provider ClouDNS
- conflict is fixed.
-
- The PR has conflicts that need resolved.
Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated. -
- This should be re-tested on 2.4.0-RELEASE, the newer FreeBSD 11.1 base has a patch for that crash, I believe. Also it...
-
- Please retry this on 2.4.0-RELEASE which uses a FreeBSD 11.1 base and it has several fixes for Hyper-V.
-
- Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated.
-
- Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated.
-
- Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated.
-
- There is a new version of strongSwan on 2.4.0-RELEASE, please make this is still happening there.
Moving target to 2... -
- Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated.
-
- Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated.
-
- Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated.
-
- Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated.
-
- Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated.
-
- Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated.
-
- Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated.
-
- Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated.
-
- Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated.
-
- Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated.
-
- Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated.
-
- Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated.
-
- Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated.
-
- Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated.
-
- Moving target to 2.4.2 as we need 2.4.1 sooner than anticipated.
-
-
01:43 AM Bug #7929 (Resolved): IPSec CA certificate name corrupt if multiple RDNs of the same type are in subject name
- When the CA certificate subject is converted to OSF style, but multiple RDN components of the same type are in the su...
10/11/2017
-
07:27 PM Feature #7321: DynDNS - Add DreamHost DNS support
- OK - I do see that it made it into the 2.4.0 Git branch. I didn't see it listed at https://redmine.pfsense.org/versi...
-
- LAGG interfaces lose their MAC address, normally inherited from the first member, if all links are disconnected and t...
-
- #Problem:
With 2.4, and also with 2.4.1, I am seeing frequent error messages
> kernel: pid 12918 (filterdns),... -
02:21 PM Bug #7015: IPsec not working behind NAT
- The problem I reported above occurs when the Phase 2 IPv6 Tunnel "Local Network" is set to "LAN subnet", and therefor...
-
- The way clog reads the records it has to figure out where the start is and then unwind it from there, so it doesn't e...
-
- FWIW, I'm thinking of "tail -f"'s behaviour, where it only tail's the last ~10 lines (I think most implementations de...
-
- I've configured the system log files to be substantially larger than normal, in order to get some reasonable retentio...
-
- The fix is already merge and will be available on next snapshot.
-
- Some users occasionally encounter a panic during OS hardware detection on 2.4 running under ESXi 6.5.0 U1 (Build 6765...
-
- If it's happening on 2.4.0 and started around that time, it's likely related to the FreeBSD 11.1 change and not the I...
-
10:53 AM pfSense Packages Bug #7923: 502 Bad Gateway and unresponsive OS with 2.4
- Jim Pingle wrote:
> The affected code was on 2.4.0 for a couple days but is no longer there now. Current 2.4.0-RC sn... -
- The affected code was on 2.4.0 for a couple days but is no longer there now. Current 2.4.0-RC snapshots and the actua...
-
- Jim Pingle wrote:
> At the moment, the only change in 2.4.1 that isn't in 2.4.0 that might be relevant is #7856
>
... -
- At the moment, the only change in 2.4.1 that isn't in 2.4.0 that might be relevant is #7856
And since we already k... -
- Multiple users complaining that following the infamous 502 Bad Gateway, they eventually are unable to do anything wit...
-
- You must have upgraded to a snapshot that was broken before that one. You'll need to fix your local installation manu...
-
08:29 AM Bug #7924 (Rejected): DHCP Server fails to start after updating to 2.4.0.r.20171009.1758
- After upgrading to 2.4.0.r.20171009.1758, the DHCP server fails with the following error message:
Can't attach int... -
- It looks like this change caused a regression, see #7923
Also one person on the forum reported that the status bre... -
02:21 AM Bug #7272: 6rd not functioning on 2.4.0-BETA
- I can confirm that my issue has been fixed (Altibox Norway ISP). Thank you very much!
10/10/2017
-
06:36 PM Feature #7922 (New): Add the option to select the ISP IPv6 Delegated Prefix as a destination in firewall rules
- It would be useful to have the option to use the ISP delegated prefix (/48, /56, etc) from DHCPv6-PD as a destination...
-
06:13 PM Bug #7921: Reset All States on WAN IP Change does not stay unchecked when disabled in GUI
- Current Base System 2.4.0.r.20171009.1800
-
- Under System > Advanced > Networking, the new option to reset all sates when a WAN IP changes does not stay unchecked...
-
- We were able to disprove the situation with OpenVPN disabled. The initial description still holds.
-
-
03:20 AM Bug #7920: Logos Missing and wrong size
- Resolved
Browser cache... duh! -
- Forgot to add this is on 2.4.1.a.20171009.1853
-
- pfSense logo is the wrong size on the login screen, appears far too large. It's missing completely from the other pag...
-
04:15 AM Bug #7841: CARP Sync Issue - when no internet on standby
- Hi Jim,
I had the same issue when using a PfSense cluster with CARP with a /32 Public IP Allocation. I think lot o...
10/09/2017
-
- Luiz pushed some fixes to clog to correct this, next new snapshot we're testing internally is good.
-
- https://forum.pfsense.org/index.php?topic=137672.msg752928#msg752928
-
- It's also possible syslogd is writing bad data to the file which breaks the clog format, so maybe the syslogd clog pa...
-
- It looks like clog is failing to recognize its own file header somehow....
-
- On new installs logging is failing with:...
-
- Any chance 2.4.0, with the FreeBSD 11.1 ipsec changes, may resolve this?
-
- You can open a new bug report for that with an appropriate title/description, rather than re-using this one which was...
-
- I’m still seeing problems with IPv6 tunneling over an IPv4 IPsec connection, but the symptoms are different from what...
-
- Stephane Debreuil wrote:
> Same issue. It appears after upgrade to 2.4.0.r.20171007.0850 (from 2.4.0.r.20171004.xxxx... -
- Same issue. It appears after upgrade to 2.4.0.r.20171007.0850 (from 2.4.0.r.20171004.xxxx).
-
- A while ago, I started getting the same notice in my logs every night at the same time. Most of my external servers r...
10/08/2017
-
11:14 PM Bug #7907: Cannot edit IPv4 and IPv6 Local Networks after tunnel creation
- I figured out what the issue is. When "redirect gateway" option is checked the fields for local networks are hidden,...
-
- Duplicate of Bug #7413
-
- !https://image.prntscr.com/image/O75ZDOwbT8KKiypUxRhaWQ.png!...
-
- Jim Pingle wrote:
> I agree, but last I looked OMAPI didn't quite do everything we need. ... That may have changed ... -
- I agree, but last I looked OMAPI didn't quite do everything we need, plus it required making a program in C to interf...
-
- Am I the only one thinking that this absolutely unreadable regex madness needs to go to /dev/null and ISC DHCP server...
-
- yeah I should have updated, martin did the work.
-
- https://github.com/pfsense/pfsense/pull/3817
-
- Frank Gruman wrote:
> I'm pretty interested in finally seeing this delivered. The pull request was accepted into ma... -
- Been fixed with https://github.com/pfsense/FreeBSD-ports/commit/5b20ed3661e6dc6d8b8d3c78aab5784556cc0dc3 almost a yea...
-
- Related forum discussion and PR:
https://forum.pfsense.org/index.php?topic=137317.0
https://github.com/pfsense/pfse... -
- Jared Dillard wrote:
> Needs step 1800 added: https://forum.pfsense.org/index.php?topic=117036.msg695224#msg695224
...
10/07/2017
-
- Please try a recent 2.4 snapshot.
-
- Today i installed a new pfSense Firewall with an Intel X520-DA2 10GB Adapter. After setup the traffic shaper i got th...
-
- Fixed in current snapshots
10/06/2017
-
11:17 PM Bug #7915 (Resolved): CBQ Child queue set bandwidth does not apply correctly
- Example:
LAN interface -> create 2 direct children qLink for the local traffic then qInternet that will house more c... -
- Confirmed. VLANs are functional again on the latest snapshot without needing to use promisc mode.
-
- Fixed in the latest snapshot.
-
09:41 AM Bug #7645: SG-1000 VLAN interfaces do not work without promisc mode
- Upgraded to latest release candidate
2.4.0-RC (arm)
built on Thu Oct 05 21:17:11 CDT 2017
FreeBSD 11.1-RELEASE-p... -
- I'm pretty interested in finally seeing this delivered. The pull request was accepted into master 5 months ago. Is ...
-
- Please re-test with a recent 2.4.0-RC image based on FreeBSD 11.1.
There are significant improvements in this area... -
- Restoring a configuration via the External Config Locator (ECL) does not trigger a package sync, so if the restore co...
-
- Applied in changeset commit:10e93284be3cd62fe871710205e61de0e36dcc2f.
-
- This was caused by commit:7798eb1e6ac48963a2785b449306cb49c942381f - I just pushed a fix that changes the tests a bit...
-
- For 2.3.4_p1 traffic shaper wizard with PRIQ and enabling VoIP creates qVoIP and Floating Rule
pfctl -sa ALTQ:
queu...
10/05/2017
-
05:22 AM Bug #7912 (Resolved): LDAP Test Results modal doesn't comply with theming
- Under "System > User Manager > Settings > Save & Test", there are sections that seem to only partially comply with th...
10/04/2017
-
- Dan Collins wrote:
> Try a fresh install and none of the sample files are there.
That did not work, they are stil... -
01:21 PM Todo #7911: Suricata missing dropsid sample file in SID Mgmt
- Try a fresh install and none of the sample files are there.
-
-
- Not really.
!https://image.prntscr.com/image/3cJ2VqXiSTmxQxOSiBZEDw.png!
Please post to the forums until you ha... -
- Suricata - sample dropsid_sample.conf file no longer included in SID Mgmt files.
-
- I would like to see a GUI showing a list of alerts and the ability to turn them on/off from sending email.
-
- Moving target to 2.4.0 as this appears to be fixed by FreeBSD 11.1, which is now used by 2.4.0
-
- Moving target to 2.4.0 as this appears to be fixed by FreeBSD 11.1, which is now used by 2.4.0
-
- I just tried this again and the procedure you list still doesn't result in the same outcome here. Try it again on 2.4...
-
- Duplicate of #7825
Don't open a duplicate bug, the other one is still open, just in a feedback state. -
01:45 AM Bug #7909 (Duplicate): XMLRPC: missing "BACKUP" in CARP status with IPv6
- Hi everyone,
as i am not able to reopen the ticket #7825 -- here we go again ;)
The descriptive text ("BACKUP") n...
10/03/2017
-
06:49 PM Feature #7904: Automatic Bandwidth Limiter on Dummynet
- Thanks Jim(s) ;)
A bounty has been created for this project to be completed and submitted to be added to pfSense. ... -
- Yes, unless you are killing states from a serial or VGA console, your own IP address will always show up as you're co...
-
- Erm, eh... you'll need to NOT refresh... like, you are recreating those states when you refresh the page.
-
09:06 AM Bug #7908: "Kill filtered states" button has no effect
- There is my own IP address in the box.
Effectively, if I specify another IP address, it works. But not with my own. -
- What exactly did you have in the box? It only kills properly if you enter an IP address or subnet. The description ma...
-
- In pfsense 2.4.0-RC, when I attempt to kill states using the "Kill filtered states" button in the Diagnostics / State...
10/02/2017
-
- I can't reproduce anything like that here. The fields show up when editing existing tunnels that can push. Perhaps th...
-
- IPv4 and IPv6 Local Networks may be specified when tunnel is created but is not exposed when editing existing tunnel ...
-
- It's working as designed. The export package has no menu entry, so they can't see any menu entry for it.
Users wil... -
10:25 AM Bug #7754: Cannot access "WebCfg - OpenVPN: Client Export Utility" without also granting access to "WebCfg - OpenVPN: Servers"
- tqwqllrm tqwqllrm wrote:
> I tried to create a local group for admins with limited access and I only want that group... -
08:15 AM Bug #7906: Dashboard Version Info Inconsistency
- I'll post on the forum then, but it's still a bug, if perhaps one of a different color: the GUI System Update reporte...
-
- Some component failed in your upgrade. Please post on the forum, mailing list, or reddit and someone can help you get...
-
- Apologies, please disregard my original dashboard screenshot, I unintentionally captured it while it was still displa...
-
- I was previously running pfSense-CE-2.3.3-RELEASE-4g-i386-nanobsd and used System Update from the GUI to upgrade to 2...
-
- Looks like it's a known issue with the nature of auth-user-pass-verify that OpenVPN does not plan to address: https:/...
-
- Little fix, the current plugin did not set the return code upon exiting.
10/01/2017
-
- It's possible in some specific circumstances, but I don't see one of those being a way that would work properly with ...
-
- Thanks Jim!
I really think this would be a highlight feature for pfSense.
It would be very effective traffic ... -
- Actually, it seems completely possible. Van Jacobson’s “pathchar” showed so 20 years ago.
https://www.caida.org/t... -
- The idea isn't to use a speedtest.net to monitor actual bandwidth, but to monitor ping latency to see if the dummynet...
-
- It's not possible. The firewall has no way to determine the actual circuit speed, it must be set manually. A speed te...
-
- Add an automatic bandwidth limiter to pfSense that dynamically limits Down and Up speeds on WAN based on latency in o...
-
- When authenticating an OpenVPN Remote Access server against an authentication backend such as RADIUS, all traffic on ...
09/30/2017
-
10:53 AM pfSense Packages Feature #7903 (New): Duo ssh package
- When trying to compile the Duo ssh package I get errors. After fixing these, I cannot get the sshd configs to stick o...
-
- Brendon Baumgartner wrote:
> I think to implement this is by setting the server to Other towards the top and leaving... -
- I think to implement this is by setting the server to Other towards the top and leaving the field blank. Then using t...
-
04:45 AM pfSense Packages Bug #6129: zabbix agent/proxy 2.4 not ported to pfSense 2.3
- Brendon Baumgartner wrote:
> Zabbix proxies have to match the version of the Zabbix server so just supporting LTS he... -
- Zabbix agents can be any version.
Zabbix proxies have to match the version of the Zabbix server so just supporting...
09/29/2017
-
- Under: OpenVPN -> Client Export -> Host Name Resolution -> Other
The Host Name field that appears requires a valu... -
-
- Merged and fixed since 2.1.1_9
-
- Thanks!
-
- I made the lab in order to reproduce the issue. But could not reproduce one.
I tried to use 2KB frames, and the fram... -
- Additional warning text has been added to the Group Help displayed in the Blocking Mode section of the INTERFACE SETT...
-
10:01 AM
Bug #7592 (Resolved): SG-1000: Unbound not always restarting properly after changes in /etc/hosts
-
- I found there are error messages in logs, but I can see unbound works fine on latest FW on sg1000
Error messages a... -
- Pull requests have been submitted for removing the use of the <no_drop_down> tag on the SYNC tab in both the Snort an...
-
- That message means the public key on the certificate does not match the public key stored with the private key. Post ...
-
08:41 AM Bug #7901 (Rejected): Cannot Import Valid SSL Certificate with Private Key
- I have a wildcard SSL certificate from a vendor using my own private key. This wildcard SSL certificate was successfu...
-
-
06:39 AM Bug #7900: DynamicDNS Amazon Route53 Not Working
- It looks like the settings for the HostZonedID input were changed (previously needed to specify a region and hosted z...
-
- DynamicDNS Provider Route53 is not updating. Despite the failure, the error detection code doesn't catch that a failu...
-
- Looks like the main problem here is fixed. If any specific problem is found, please open a new ticket with details
-
- Works
-
- Works
09/28/2017
-
09:16 AM Bug #7899: a floating 'match' rule on LAN does not put traffic from a broswer on a clientpc into a shaper queue
- Note, I was using PRIQ.
-
- Seeing bug 7116 (https://redmine.pfsense.org/issues/7116) again with squid and any other traffic originating from the...
-
- Seeing bug 7116 again with squid and any other traffic originating from the firewall. Cannot place it into any kind ...
-
- We will keep an eye on this issue, for now it seems to be working.
Thanks everybody. -
- Steve Beaver wrote:
> Yes; it should be nuked. I'd like to wait until after the 2.4 release before doing that, howev... -
08:22 AM
Bug #7889 (Resolved): The dropdown tabs replacement fallback needs to be limited to certain pages
-
08:22 AM
Bug #7889: The dropdown tabs replacement fallback needs to be limited to certain pages
- Yes; it should be nuked. I'd like to wait until after the 2.4 release before doing that, however.
-
- That works (for the pkg.php/pkg_edit.php as well) provided the limit stays high-enough.
Should the no-op no_drop_... -
08:00 AM
Bug #7889 (Feedback): The dropdown tabs replacement fallback needs to be limited to certain pages
- Applied in changeset commit:5f63cb40ca75f055f85427e78d9e2348b65b05c4.
-
- It was removed deliberately as a part of PR https://github.com/pfsense/pfsense/pull/3795 but in #1994 luiz says HFSC ...
-
- thats because HFSC doesnt use priorities
-
-
- Fixed.
-
-
- Fixed.
-
-
- Fixed.
-
-
- Certainly not a general issue plus insufficient info here to identify any bug.
-
- bump
-
-
- As noted above, long fixed.
-
- And on that note, one to remove them all would help as well.
09/27/2017
-
- See attached screenshot of HFSC shaper parent and qInternet Child which i already setup traffic shaper on 2.3 when i ...
-
06:32 PM Bug #7272: 6rd not functioning on 2.4.0-BETA
- this time around it took a bit for it to come up, but it did....
[2.4.1-DEVELOPMENT][ler@home-fw.lerctr.org]/tmp: ... -
05:55 PM Bug #7272: 6rd not functioning on 2.4.0-BETA
- I can also confirm that it works with the current release (2.4.0.r.20170927.1221).
Only difference (when it comes to... -
- DHCP / WAN (passthrough from my NVG-599).
It's consistently (at least now) getting a route by default (I've moved... -
- The only way I found to reproduce this problem (no default gateway at boot) was using DHCP on WAN and I intentionally...
-
-
- Duplicate of Bug #7869 and fixed.
-
-
- Fixed.
-
-
- Fixed in 2.4.1
-
01:15 PM pfSense Packages Feature #6022: Consider MLVPN for bonded VPN
- Has there been any traction with this? I have been looking for something like this too. I'll add to the kitty for t...
-
- Nothing will be available without logging in. That is not a secure means of accomplishing that goal. You can make res...
-
11:54 AM Feature #7897: User Dashboard
- This could be useful for Diags on remote sites that users can check.
Also for putting on a Plasma/Monitor on the ... -
- Having a Dashboard that can show stats without logging in.
Traffic, Link status, EG all the widgets without any of... -
- Closing this issue as the driver is working as intended.
The media options will not be detected until you restart ... -
09:28 AM Bug #7896 (Resolved): picture_widget.php
- Hi everyone,
First of all, thanks a bunch for such an effort you put on developing this awesome application. While... -
- The specific bug on this ticket is fixed on version 2.3.2 and later. Your system may legitimately have a lot of fragm...
-
07:56 AM Bug #6499: pf fragment states not purged
- Chris Buechler wrote:
> fixed
Every so often I am seeing "[zone: pf frag entries] PF frag entries limit reached" ... -
- I have deployed several CARP clusters at work, but I realized there is no real good way to monitor CARP status :
* S... -
- The “generic_XXXXXX” in one of your screenshots shows you’re not running s netmap-capable NIC. (You’re getting the e...
09/26/2017
-
- Yeah that would have to be on the client side. It might even be using its own IPv6 tunneling protocol like Teredo
-
10:10 PM Bug #7894: Open VPN not redirecting traffic over tunnel. Remote IPV6 shows as public IP when "Force all client generated traffic through the tunnel." option is enabled and all IPV6 through pfsense is blocked
- So after a bit more trouble shooting, I am leaning against this being a bug in PfSense and possibly in my linux build...
-
- Hello All,
I just updated to the newest dev build and connected to it remotely and had a shocking supprise. For... -
06:30 PM pfSense Packages Bug #7893: Kernel Panic Suricata Inline
- Thanks for the info, you guys might want to get the package maintainer to put some info under the inline selection, i...
-
- Inline/Netmap is known to have issues with certain hardware (real or virtual). It's still somewhat of an experimental...
-
- I rebooted the VM a few times, and it appears to have stopped it's panic reboot cycle. When I went in to view Suricat...
-
- I have been playing around with the 2.4.0/1 snapshots, and have found that when Suricata is enabled with inline block...
-
- Found it. Had to go back and think about it a minute. It's in the pkg_edit.php file in this code near the bottom of...
-
10:20 AM
Bug #7889: The dropdown tabs replacement fallback needs to be limited to certain pages
- Which line are the comments on? I don't see any.
-
- The actual bug reported in this ticket is already fixed.
There was a bug in the driver that would fail to add the ... -
-
- Loaded the latest snapshot from today on a XG-2758. The interface media type displayed properly:
ix0: flags=8843<UP,... -
12:15 PM Bug #7606: Using limiters and VLANs on Supermicro Xeon D boards crashes with kernel panic
- For now it appears my issue has been resolved on 2.4.0.r.20170926.1006.
Side note though, floating rule still does... -
- People on forum report it's fixed
-
-
-
02:56 AM Bug #7869: Hyper-v vm traffic shaper error: hn0: driver does not support altq
- Solved! Works for me, thanks!
-
09/25/2017
-
08:40 PM
Bug #7889: The dropdown tabs replacement fallback needs to be limited to certain pages
- Thanks Bill. I will try to determine why that change was made.
-
- To add another note to the conversation. There is a parameter in the _display_top_tabs()_ function that is supposed ...
-
- After initial testing with and pushing some traffic through my queue's which seemed like a sure way to crash it befor...
-
- Found and fixed, a new commit was made to address this issue.
Please test again on the next snapshot.
Thanks! -
- (duplicate from #7879): Found and fixed, a new commit was made to address this issue.
Please test again on the nex... -
- Works here as well. Thanks.
-
-
- Confirmed, this looks fixed.
I see limiters created and traffic going into them both up and down:... -
- [2.4.1-DEVELOPMENT][admin@pf6.localdomain]/root: ipfw table all list
--- table(cp_ifaces), set(0) ---
vmx1 2100 147... -
- Renato Botelho wrote:
> Kill Bill wrote:
> > This got reverted yet again. Sigh.
>
> Yes, because kernel was fixe... -
- Kill Bill wrote:
> This got reverted yet again. Sigh.
Yes, because kernel was fixed. -
- The problem stated on this ticket is resolved. If you still have an issue, it's something different. Just because you...
-
- I am still getting 502 Bad Gateway every day, so bad its about once an hour.. Here is what I can get when its locked ...
-
- Confirmed:...
-
-
- 2.4.1-DEVELOPMENT (amd64)
built on Sun Sep 24 21:37:23 CDT 2017
With enabled MAC filtering:
--- table(teaget... -
- Confirmed dynamic Limiters are removed as expected:...
-
-
- Looks good after disabling CP:
[2.4.1-DEVELOPMENT][admin@pf6.localdomain]/root: ipfw table all list ; echo ; ipfw ... -
- ok ill try to get crash log again, on apu2 it crashes as soon as u enable shaping on more than 1 interface and on sg-...
-
- Neither of those logs contain useful information, the most important parts are before those logs start. If you captur...
-
- crash log attached
-
- This does not appear to be a general issue with suricata, but may be specific to your configuration or installation. ...
-
06:27 AM Feature #4242: Two Factor or OTP Authentication for Admin Interface
- This feature will be really helpful to meet the specifications from the PCI-DSS / ISO27001 or another security certs.
09/24/2017
-
- Seems like you have found a real bug in the driver.
It is fixed in pfSense 2.4-RC, please try the next snapshot.
... -
09:06 PM pfSense Packages Bug #7891: (suricata), uid 0: exited on signal 11 (core dumped) latest 2.4.0-RC
- Did a fresh reinstall and restored the backup and still got same issue.
-
- I found the core dump file.
I couldn't upload the .core file here as it is huge...
so I upload it to my dropbox:
... -
- Hi,
Just upgraded from latest stable to next major version 2.4.0-RC today via gui.
Only major problem I have is s... -
04:50 PM
Bug #7892 (Closed): AutoConfigBackup status reported incorrectly
- Around 12PM Central time (9/24/17), AutoConfigBackup showed some alerts about unsuccessfully backing up the config.
... -
- I tried 2.4.1 with 'em' E1000 nics on ESXi.. that crashes to..
Version 2.4.1-DEVELOPMENT (amd64)
built on Sat Sep ... -
- Larry Rosenman wrote:
> with the current code a straight reboot has the IPv6 default installed.
>
> However, on ... -
- with the current code a straight reboot has the IPv6 default installed.
However, on the upgrade to this code did ... -
- Well I'm just saying that the results of your testing appear to be completely random and unrelated to any versions. H...
-
- just reporting what I'm seeing. I update to each RC and when I get IPv6 default route working I post, and when I see...
-
- Larry Rosenman wrote:
> Broke again at:
> 2.4.0-RC (amd64)
> built on Sat Sep 23 22:28:05 CDT 2017
> FreeBSD 11... -
- Broke again at:
2.4.0-RC (amd64)
built on Sat Sep 23 22:28:05 CDT 2017
FreeBSD 11.0-RELEASE-p12 -
- This got reverted yet again. Sigh.
-
01:02 AM Bug #6911: no network on hyperv-v 2012 R1
- resolved in 2.4.1
09/23/2017
-
- https://github.com/pfsense/pfsense/pull/3828 for sysutils/devcpu-data and the kernel bits. Adding the GUI toggle to b...
-
- It'd be useful to include support for Intel/AMD CPU microcode updates.
https://www.freebsd.org/doc/en/books/faq/co... -
- What are the chances of getting this fixed for 2.4-RELEASE? Similar bugs (https://redmine.pfsense.org/issues/7869) s...
-
- And it works again at:
2.4.0-RC (amd64)
built on Fri Sep 22 20:41:05 CDT 2017
FreeBSD 11.0-RELEASE-p12 -
- J L wrote:
> can this be considered as a request to have this automated ?
Stick it as earlyshellcmd to Shellcmd p... -
- AFAICT, this was designed to aid systems with lots of interfaces, and intended for places such as Firewall - Rules. I...
Also available in: Atom