Activity
From 01/07/2018 to 02/05/2018
02/05/2018
-
10:45 PM Bug #8165: Fragmented at source IPv6 packets (UDP + ICMP Ping) are not forwarded / v2.4.2 AMD64
- Mike Nichols wrote:
> This issue came to light when I encountered a problem with a SIP phone not receiving SIP Invit... -
09:55 PM Revision 40f2c5d9: Add cxgbe to ALTQ list. Fixes #8314
- 08:26 PM Revision 0f5bd6f8: Fixed #8091 Force Integers in GUI
- It will use the ceil() function to always use the ceiling after loading a config.
Also onchange of bandwidth will cal... -
07:02 PM pfSense Packages Bug #8315 (Closed): Mail Report mail_report_send() behavior different than notify_via_smtp()
- @notify_via_smtp()@ correctly supports both SMTPS SSL and SMTP+StartTLS.
Mail Report @mail_report_send()@ supports S... -
05:47 PM Bug #6263: Encryption options for every P2 on a given P1 are written to each P2 individually inside ipsec.conf with multiple P2 entries + split conn entries
- Looked into this and the attached patch appears to fix the issue in 2.4.2. The comparable change also corrected a 2....
-
- Applied in changeset commit:40f2c5d909220dd5aaa23515d25a04916438304d.
-
03:56 PM Bug #8314: cxgbe missing from ALTQ interface list
- T5 cards are called cxl; T4 cards are called cxgbe
... ref cxgbe(4) "*here*":https://www.freebsd.org/cgi/man.cgi?qu... -
- patchset added 'cxl' ... line 5680 of src/etc/inc/interfaces.inc also needs 'cxgbe'
thanks,
R.
-
- That code is not ours but that of the Net_SMTP Pear package: https://pear.php.net/package/Net_SMTP -- That package do...
-
03:26 PM Bug #8313 (Not a Bug): STARTTLS auto detection not working
- When attempting to setup SMTP notifications to a mailserver which supports STARTTLS the following error occurrs:
Co... -
02:55 PM
Bug #8226 (Resolved): Pass-through MAC automatic additions adds duplicate
-
06:46 AM Bug #8226: Pass-through MAC automatic additions adds duplicate
- Its indeed solved. Thanks for the quick fix.
-
02:40 PM
Bug #8091 (Feedback): Limiters with fractional bandwidth values are not loaded correctly
- Applied in changeset commit:0f5bd6f8ecf2a755cf2cef689e1e3bead04cc058.
-
01:13 PM Bug #7425 (Confirmed): dhclient not sending option 77
- Option 77 works on 2.4.3 snapshots, I'm checking what we can do about the VLAN priority.
-
11:24 AM Feature #8186 (Feedback): ipsec, allow configuration of multiple ike phase1 encryption ciphers #3711
- PR has been merged. Thanks!
-
11:08 AM Feature #336: Option to create lagg under assign interfaces
- +1
Absolute impossible to create a LAGG on the CLI :/ -
- It works fine here, it looks like it's something in your configuration, probably a problem with the key. If it can't ...
-
05:09 AM pfSense Packages Bug #8312: Can not init api (error code: 3)
- Relevant portion from acme_issuecert.log:...
-
- pfSense: 2.3.5_p1 (on amd64)
Acme Package: 0.1.34
Trying to manually renew our certificate, but getting error bel... -
07:19 AM Bug #7905: OpenVPN Authentication Against Backend Stalls All Server Traffic
- Would a solution like Keepalived on the authentication servers back-end (if they are of the same type, e.g. RADIUS)wo...
02/04/2018
-
09:02 PM pfSense Packages Feature #8311 (Rejected): Suricata persistent blocks
- Please make blocks with suricata persistent through reboot.
-
- Set target.
-
01:04 PM pfSense Packages Bug #8307: HAproxy in pfsense 2.42-p1 creating a new frontend with a Shared Frontend issues invalid ip error
- The haproxy-devel 0.55_2 package will be build after the pull request is 'accepted' by official pfSense developers..
...
02/03/2018
-
11:34 AM Bug #8310 (Not a Bug): Firewall ACL fails to parse / validate host alias entries after tenth entry in alias
- This can be recreated 100% of the time.
When writing an ACL on the firewall, if I use a host alias as source or de... -
10:13 AM
Bug #8056: Bridge + CARP crashes/freezes pfSense
- The previous patch works well on 2.3.x. Is it possible to apply the same patch for 2.4.x while FreeBSD folks decide w...
-
01:07 AM Bug #1819: DNS Resolver Not Registering DHCP Server Specified Domain Name
- I just started a bounty thread on the pfSense forums:
https://forum.pfsense.org/index.php?topic=143579.0
Essent...
02/02/2018
- 08:41 PM Revision 76ca1bc5: Fix config version # arrising from merging older PR
- 08:26 PM Revision d205ac7a: Merge pull request #3711 from PiBa-NL/20170427-ipsec-multiple-P1-algo
- 08:17 PM Revision 3490784c: Merge branch 'master' of gitlab.netgate.com:pfsense/pfsense
-
- Unfortunately, it looks like it keeps getting kicked down the road a bit. This would be a really nice bit of polish...
-
08:13 PM Bug #1819: DNS Resolver Not Registering DHCP Server Specified Domain Name
- is there an ETA on this one?
-
07:05 PM pfSense Packages Bug #8307: HAproxy in pfsense 2.42-p1 creating a new frontend with a Shared Frontend issues invalid ip error
- Pi Ba wrote:
> Perhaps you could send me 'PiBa' a PM on the forum?
Pi
Other then manually patching the code. ... -
- The new package 0.55_2 should skip the check on 'secondary' frontends.
https://github.com/pfsense/FreeBSD-ports/pull... -
- Perhaps you could send me 'PiBa' a PM on the forum?
-
- Pi Ba wrote:
> Would be nice to know what your config looks like. As it doesn't seem to happen here. Can you share t... - 05:57 PM Revision 67784aa6: Add DDNS client update option to DHCPv4 configuraiton
-
- On d9b05eb490a the way aliases containing a mix of IP address and FQDNs
works has changed and all items were added to... -
04:50 PM Feature #8309 (New): Include apuled driver to add support for LEDs on PC Engines APU boards
- Driver for adding support for LEDs and mode switch on PC engines APU boards.
See here for details: https://bugs.fr... -
- On d9b05eb490a the way aliases containing a mix of IP address and FQDNs
works has changed and all items were added to... - 04:45 PM Revision a464eaf7: Fixed #8226 Check for MAC duplicates
- loop through auto pass MAC addresses for duplicates
before automatically adding a pass thru. -
04:20 PM Feature #7216: Allow user to choose date display format
- I think a text field allowing standard PHP date() format would be ideal. https://secure.php.net/manual/en/function.da...
-
- Pi Ba wrote:
> Sync should be disabled on haproxy on the backup machine, can you check that is indeed the case?
P... -
- Sync should be disabled on haproxy on the backup machine, can you check that is indeed the case?
-
- Pi Ba wrote:
> Could it be that youve got sync configuration enabled in haproxy, but dont have it configured in pfSe... -
- Well now the haproxy usecase is broken both ways. start by 'apply config', and by 'restart service' neither fills the...
-
- Applied in changeset commit:1c1613c532cfca62724b490f44989dbbff3a170b.
-
12:00 PM
Bug #7131 (Feedback): DHCP v4&v6 DDNS missing options
- DHCP client updates option added DHCP v4
ddns-update-style interim may be added later -
11:00 AM
Bug #8226 (Feedback): Pass-through MAC automatic additions adds duplicate
- Applied in changeset commit:a464eaf72bb970cc3a26cef9b322f1ee9918cf9f.
-
09:47 AM
Bug #8226 (Assigned): Pass-through MAC automatic additions adds duplicate
- Disregard that last message I was able to reproduce it.
-
09:39 AM
Bug #8226 (Feedback): Pass-through MAC automatic additions adds duplicate
- Could we get more details on how to reproduce this? I do not see duplicate entries when logging in from different tab...
-
09:41 AM pfSense Packages Bug #8308 (Resolved): FRR OSPF6D: interfaces not assigned to areas if they only have a link-local address
- frr_ospf6d.inc:...
-
09:34 AM
Bug #3932 (Closed): Captive portal with greater than 9000 permanent MAC addresses causes timeout in loading CP
- It is unreasonable to keep kicking this down the road to target_version++ Closing and recording it for future conside...
-
09:31 AM
Bug #6031 (Closed): Anti-Lockoug Rule Not Effective Against Canned Interface Block Rules
- No one has been able to work on this in two years, and there is a work-around. Closing and recording for future consi...
-
09:27 AM
Bug #6578 (Closed): Filter reload hangs with IPsec hostnames that don't resolve configured
- This will not be addressed in the next version or two, so is being shelved and recorded for future consideration.
-
09:12 AM
Bug #7082: pkg_edit.php - impossible to use default_value with rowhelperfield
- This will not be addressed in 2.4.3 :( We are looking at alternative ways of providing this functionality.
-
-
12:19 AM pfSense Packages Bug #7965: freeradius 3 with MySQL
- THX! It's worked!
02/01/2018
-
- Could it be that youve got sync configuration enabled in haproxy, but dont have it configured in pfSense itself?
-
- I have a number of http(s) sites setup under haproxy using a shared ssl cert .
After cloning an existing config I... -
- Would be nice to know what your config looks like. As it doesn't seem to happen here. Can you share the <haproxy> sec...
-
- This has existing since 2.3.x and has been worked around for some time.
We use a haproxy shared frontend for a com... - 05:33 PM Revision 12f16196: Fixed #8303
- 04:15 PM Revision ce7b40ce: Fixed #8301 CSRF Enabled on all widgets.
- Enabled CSRF on all widgets.
-
-
03:08 PM
Bug #7195: pkg_edit.php - <checkenablefields> tag has no effect on fields other than checkbox/input
- We hope to provide an alternative means of achieving this, but it won't make it in 2.4.3, so ++target_version :(
-
12:46 PM
Bug #7801: UDP fragments received over IPsec tunnel are not properly reassembled and forwarded
- ++target_version
-
12:36 PM
Bug #7905: OpenVPN Authentication Against Backend Stalls All Server Traffic
- Sorry to have to kick this to ++version but the work required cannot be squeezed into the 2.4.3 schedule
-
12:03 PM
Bug #8263: Cannot create a nonlinear `Link Share` service curve because of: "the sum of the child bandwidth higher than parent"
- Rescheduled for release 2.4.4
-
12:02 PM
Bug #7413: status_dhcpv6_leases.php: Some DHCPv6 leases are not displayed in the GUI
- Re-assigned for testing
-
11:57 AM
Bug #7480 (Feedback): pkg framework - textarea on rowhelperfield errors
- Is there an existing package where this behavior can be seen?
-
11:51 AM
Bug #7481 (Rejected): pkg-framework - rowhelper ignores <advancedfield/>
- The advancedfield tag is no longer supported in the rowhelper section. This may be addressed in the future, but more ...
-
11:48 AM
Bug #7599: System->Update unavailable in WebGUI after connection failure during update
- Stephen. - Would you please retest and confirm this issue still exists?
-
11:40 AM
Bug #8303: Undefined Function
- Applied in changeset commit:12f1619688ce2dc92e63e808cda3cd9317e96c13.
-
11:34 AM
Bug #8303 (Feedback): Undefined Function
- Fixed.
That function has not been required for a number of years. -
11:10 AM
Bug #8303 (Confirmed): Undefined Function
-
11:09 AM
Bug #7772 (Feedback): Regression of Bug #906
- Can you provide simple steps to reproduce please?
-
10:30 AM
Bug #8301 (Feedback): Dashboard Widgets may no longer need CSRF disabled
- Applied in changeset commit:ce7b40ce96bbd9e94d36d1779807bbe6b8efd356.
-
- There should not be any need for manual corrections on the current version. The counters should be handled properly.
...
01/31/2018
-
- Thank you! It remains to fix "daily" in config to run freeradius
With "daily(and etc...)" in config freeradius not s... -
- Fixed in commit:a5d0e15340e1975a86fb5fe48f93032b3c574934 - pkg version 0.15.4
-
-
- (cherry picked from commit a0f991ecb8247688bfc91b11176c0442e8d7327b)
-
- (cherry picked from commit 77a6cafbc02c0bbd4075237cca849841561bf6b3)
-
- (cherry picked from commit 10a8b5eea62e71aedc76e9eb3fc9630b73247a31)
-
-
-
-
-
- The underlying FreeBSD bug is still open:
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200319
The previous p... -
06:43 AM Bug #8056: Bridge + CARP crashes/freezes pfSense
- Confirmed - We have 2 Netgate 8860 1u appliances setup with CARP + Bridge and when upgrading from 2.3.4 to 2.4.2_1 we...
01/30/2018
-
- The two crash reports in the submission from that IP address are different and at very low levels of code in the oper...
-
03:43 PM Bug #8304: pfSense locks up when Android device connects to L2TP/IPsec VPN that uses forces SHA-256 in phase 2
- Ah, I see. I'm a bit new to bug reporting.
My WAN IP was 158.174.30.59.
I didn't make a Reddit post or anything... -
- Is there a forum thread or reddit post with more detail? There isn't anything that stands out in what you have posted...
-
- I noticed I wasn't 100% clear on the conditions: The Android connection works just fine if I set for MD5 or SHA1 hash...
-
- Discovered this by trying to follow this tutorial and messing with the encryption settings.
[[https://doc.pfsense.or... -
- Ran into this bug as well, though it appears to break things if you have too many phase 2 entries. After a certain n...
-
05:46 AM pfSense Packages Bug #8305 (Resolved): acme: "Key Size" value is not passed to acme.sh
- Setting a "Key Size" in acme_certificates_edit.php has no effect. This variable is not passed on to the /usr/local/pk...
01/29/2018
-
- (cherry picked from commit 7f054ea0b387cd8db372d92e04aed1a9c2ef028a)
-
-
- (cherry picked from commit c083e1e49af4902d15173d412feebd8b86a616ee)
-
- (cherry picked from commit e7b5b82b121c76c4c6bf57229bfef0ea3bc33d5b)
-
-
- (cherry picked from commit 9ee5030eecc99dd1e7a747f23870663715dfc21f)
-
-
- (cherry picked from commit c083e1e49af4902d15173d412feebd8b86a616ee)
-
- (cherry picked from commit c083e1e49af4902d15173d412feebd8b86a616ee)
-
-
02:24 PM
Bug #8303 (Resolved): Undefined Function
- While looking over the widgets I noticed in the Gateways widget if you change the display type you get a Javascript e...
-
- Applied in changeset commit:7f054ea0b387cd8db372d92e04aed1a9c2ef028a.
-
- Applied in changeset commit:e7b5b82b121c76c4c6bf57229bfef0ea3bc33d5b.
-
- traffic_graphs.widget.php does not perform input validation on its settings, which can lead to a potential XSS due to...
-
- Applied in changeset commit:c083e1e49af4902d15173d412feebd8b86a616ee.
-
- The @top@ command output is printed to the user without encoding, so if a malicious process is started which contains...
-
- CSRF is deliberately disabled in some widgets stuch as traffic_graphs.widget.php but it's unclear if that is still ne...
-
10:25 AM Revision 3b41c8f3: Fix dyndns update with gateway group
-
- I can also add that when two RADIUS servers are declared as backend authenticators and the first on the list fails (e...
-
- The previous PR was reverted. Current PR is https://github.com/pfsense/pfsense/pull/3896 and it was merged on Jan 17.
-
- The acme.sh client supports ocsp must-staple;
if [ "$Le_OCSP_Staple" ] || [ "$Le_OCSP_Stable" ]; then
_savedo...
01/27/2018
-
11:28 AM Bug #8298 (Resolved): OpenVPN Wizard protocol defaults to "UDP IPv4 and IPv6 on all interfaces" causing problems
- The OpenVPN Wizard's default protocol is "UDP IPv4 and IPv6 on all interfaces (multihome). However, when you are bin...
-
09:39 AM Feature #2358: NAT64 support
- UPVOTE!!
at the moment I have to use an external router to do this!
01/26/2018
- 07:37 PM Revision d69a55e3: Fixed #8297 If user has no page permissions it will automatically log them out so they don't get stuck on the logout page
-
- Works better now, thanks!
-
01:47 PM
Bug #8297 (Feedback): User with no privileges cannot logout.
- Commit pushed. d69a55e3d647795477606e844f79bb94fc127f24
-
01:08 PM
Bug #8297 (Resolved): User with no privileges cannot logout.
- If there is a created user and they have no permissions they will see a page that says: "No page assigned to this use...
-
- Looks good now. SG-1000 with a VLAN WAN pulls an IPv6 address and default gateway now, without the "Do not wait for R...
-
12:00 PM pfSense Packages Bug #8229: syslog-ng stops parsing logs after logrotate run
- Well, tried syslog-ng-3.13.2_1 from http://pkg.freebsd.org/FreeBSD:11:amd64/latest/All/ but that went crazy after a c...
-
10:09 AM Feature #8257: pfSense Diagnostics -> Packet Capture support for loopback interface
- Tested build 2.4.3.a.20180126.0706
Navigated to Diagnostics -> Packet Capture
Localhost is available in interfa... -
06:17 AM Bug #8056: Bridge + CARP crashes/freezes pfSense
- Confirmed - I can also replicate this easily. CARP on a bridged interface, tested on 2.4.2 and 2.4.2_1 with no change...
-
- No functional change.
-
01/25/2018
-
-
- Ticket #6677
-
- No functional change.
-
- Fixed in radvd-2.17_4.
Disconnected interfaces will be properly ignored. -
02:04 PM pfSense Packages Bug #8291: Auto Config Backup ACB Reports Success on invalid credentials then an error notice is logged
- Looks better. Thank you.
-
- This looks OK now. It only works via POST and trying to POST without CSRF results in a failure.
-
- After switching to use tls for forwarded log traffic this seems even worse. It requires several attempts to restart ...
-
- Fixed.
Please check with the next snapshot. -
- Should be fixed in the next snapshot.
-
- Already fixed in 2.4.2-p1.
-
-
- I'm closing this bug because I believe it was fixed already.
It was caused by a bug in interface queue use, which ... -
04:37 AM pfSense Packages Bug #8277: ntopng service fails to start on 2.4.3
- I could be wrong but libcap is a linux specific library to support capabilities as supported by the linux kernel.
... - 03:19 AM Revision c7027903: Fixed #8296
01/24/2018
-
09:30 PM
Bug #8296: status_services.php: AJAX requests via GET can control services without CSRF validation
- Applied in changeset commit:c7027903d4ba68cf33d7d601c9a9d2efd476f79f.
-
09:21 PM
Bug #8296 (Feedback): status_services.php: AJAX requests via GET can control services without CSRF validation
-
- Using a GET request to status_services.php with a sepcially-crafted URL, services can be controlled by visiting a URL...
-
09:08 PM
Feature #7781: Please Enable Rule Separators on Manual Outbound NAT
- There is a lot of work in this, and even more testing required. It's on my list, but it will probably be a few weeks ...
-
08:40 PM Feature #7781: Please Enable Rule Separators on Manual Outbound NAT
- Does anyone know if this will be acknowledged to be added into the interface. With tons of nat rules, it becomes very...
-
- Properly detect the master host based on CARP skew at setup time when used with HA.
-
- The crash is fixed on the last snapshot.
Tests are welcome. -
- Issue 3292 is back, because the options in the syslog-ng manual now suggest using option names like "key-file" instea...
01/23/2018
-
-
- Thank you!
Confirmed fixed.
2.4.3-DEVELOPMENT (amd64)
built on Tue Jan 23 04:03:53 CST 2018
FreeBSD 11.1-RELE... -
12:18 PM Revision d2a8a7e7: first change for extending mobile connection
-
12:16 PM
pfSense Packages
Bug #8291 (Feedback): Auto Config Backup ACB Reports Success on invalid credentials then an error notice is logged
- Changes pushed. Commit Hash 30b86fd147b2df9eb9f629251066baa0f1f0b386
-
09:13 AM Bug #8294 (Not a Bug): Icmp redirect doesn't use CARP IP
- When you configure two pfsense servers in high availability using CARP, every icmps redirect generated use the physic...
-
06:28 AM Feature #8292: IPsec mobile clients with different (virtual) IP addresses by (EAP) identity
- pull request on github: https://github.com/pfsense/pfsense/pull/3904
-
- Extending the mobile clients with IP's on a per user basis / EAP identity. This enables managing different users with...
-
06:21 AM Bug #8293 (Not a Bug): Backup does not store the selected Repo Path
- In my 2.3.5_1 (i386) Version of pfsense the firmware branch "Legacy stable version (Security/Errata only 2.3.x)" is s...
-
-
01/22/2018
-
-
- Committed. Thanks!
-
- If invalid credentials are provided to Auto Config Backup then Backup Now is pressed, a green bar is presented that s...
-
- Affects: 2.4.2p1 amd64 (and probably previous versions).
Haproxy: 0.55_1 (and probably previous versions).
Progr... -
- filter.inc, make filter_expand_alias_array() return consistent results between first and second call.
Currently th... -
- Works for me :).
Now if someone can change qstats to provide similar numbers that might perform better than the ph... -
- Hm.. I found the leak.
Should be fixed in php56-pfSense-module-0.58.
Thank you! -
-
- I don't have a means to test IPv6 over PPPoE, but I tried this with DHCPv6 with LAN set to track and the same behavio...
-
- Duplicate of #3473
-
03:30 AM Feature #8288 (Duplicate): OpenVPN - configurable keepalive
- Hi!
It would be nice to have configurable keepalive options instead of hard coded 30/60. -
- Hi!
See here: https://forum.pfsense.org/index.php?topic=136533.msg778977#msg778977
There are use cases and it`s...
01/19/2018
-
03:41 PM Bug #8287: /var/unbound/test/unbound_server.pem: No such file or directory
- I am unable to reproduce it as well.
This occurred while configuring the DNS Resolver after upgrading to 2.4.2_1.
A... -
- I cannot reproduce this as stated using services_unbound.php on SG-1000 or amd64.
What page do you see this error ... -
- 2.4.2-RELEASE-p1 (arm) on SG1000
"The following input errors were detected:
The generated config file cannot be p... - 03:34 PM Revision 71cf75cb: Merge pull request #3902 from stensonb/fix-typo
-
-
-
-
-
09:35 AM Revision 19e87bb3: fix typos
-
- 2.4.2-RELEASE-p1 (arm) on SG1000
"The following input errors were detected:
The generated config file cannot be p...
01/18/2018
-
- Memory usage of pfSense_getall_interface_addresses("em0")...
-
12:54 AM Bug #8276: Virtual IPs considered primary when using interface tracking for ipv6
- The problem of pfsense considering a VIP over the actual tracked interface IPv6 and never switching is still an issue...
01/17/2018
-
11:43 PM Feature #8286 (Duplicate): IPsec on Multiwan fail back to Tier1 WAN after it is back UP
- IPsec is running on a top of failover gateway group interface. DynDNS client entry updates on behalf of failover gate...
- 10:05 PM Revision b1c01d80: Merge pull request #6400 from loonylion/master
-
- Ok found at least part of the leak / function call causing it (on my development/test machine)..
Running the code ... -
04:04 PM
Bug #8231 (Closed): Undefined function while restoring config from older version
-
03:48 PM Bug #8231: Undefined function while restoring config from older version
- I can't close this, but it has been fixed with this commit: https://github.com/pfsense/pfsense/commit/61b6c22a5082eb6...
- 12:24 PM Revision 61b6c22a: Merge pull request #3898 from alistair23/alistair/master
01/16/2018
-
08:08 PM Bug #8285 (New): Actions on stale data may result in catastrophic results
- It seems that a number of pages in pfSense use links that specify only the index of an item in its category rather th...
-
- (cherry picked from commit 4cad9a5bd1666c9bd5ce32b82f9b897dbbe5a5bf)
-
- (cherry picked from commit 4cad9a5bd1666c9bd5ce32b82f9b897dbbe5a5bf)
-
- (cherry picked from commit 4cad9a5bd1666c9bd5ce32b82f9b897dbbe5a5bf)
-
-
-
- (cherry picked from commit 618faaf26212de6d2d44627bbe41f0a683f34bed)
-
-
03:28 PM Bug #8113: MTU setting on bridge, openvpn clients ignored
- It's not immediately clear to me what you are doing here. What interfaces make up the bridge? OpenVPN tap (layer2 end...
-
- (cherry picked from commit 163255d64c021508224140f08fb2c261265e465e)
-
- (cherry picked from commit 163255d64c021508224140f08fb2c261265e465e)
-
- (cherry picked from commit 163255d64c021508224140f08fb2c261265e465e)
-
-
- PR 3768 was merged a while back and it's working well. Could use some additional testing/feedback but it looks good t...
-
- This appears to be fixed by other changes to the IPsec status code in recent versions. No new reports of this being c...
-
- Still waiting on feedback/new testing on current versions of pfSense and suricata
-
- PR was merged several weeks ago
-
- Still waiting on testing/confirmation feedback on a current version
-
- We need confirmation that this is still a problem on current versions of strongSwan
-
01:42 PM Bug #8249: pid 77785 (php-fpm), uid 0, was killed: out of swap space
- I can make a new patch so its back to max 500 requests before a child process is forcibly restarted, although martin ...
-
- Applied in changeset commit:4cad9a5bd1666c9bd5ce32b82f9b897dbbe5a5bf.
-
- I don't have access to a wildcard certificate to verify this but it's unlikely to be related. Changing a certificate ...
-
- FYI- The PFI/Restore feature was put back in the installer, but this RRD issue likely still persists. It needs retest...
-
- Fixed in commit:0ea7b83e8e976469c926140af76a2d29ab0f57a6
See also: #6830 -
- Could be a potential problem with the solution in the PR, see #8249
-
- PR https://github.com/pfsense/pfsense/pull/3881 was merged a few weeks ago
-
- Duplicate of #8125
-
- Seems more like a configuration issue. pfSense doesn't care if it's running on a VM or bare metal, IPsec wouldn't hav...
-
- Given the output I'm not sure it's a bug at all. The main connection could accept another remote, given its configura...
-
- PR was merged a few weeks ago
-
- PR was merged a few weeks ago
-
- PR was merged a few weeks ago
-
- I'm not sure we've ever officially endorsed that type of setup. The behavior is at best undefined. It's going to need...
-
- Applied in changeset commit:900663a44f41de0af780614df18cc432f8c9eaab.
-
- Applied in changeset commit:618faaf26212de6d2d44627bbe41f0a683f34bed.
01/15/2018
- 08:37 PM Revision 8dc33488: Merge pull request #3889 from kangtastic/master
- 08:37 PM Revision f5d55ac6: Merge pull request #3899 from PiBa-NL/20180111-bootup-step-messages
- 08:36 PM Revision 0fc473ad: Merge pull request #3900 from PiBa-NL/20180111-pf-busy
- 08:35 PM Revision d23d1a06: Merge pull request #3901 from earlchew/issue-7357
-
- No. It already works fine with all other services that we're aware of, including HAProxy.
-
03:19 PM pfSense Packages Bug #8281: letsencrypt cert ca isn't recognised by openvpn client
- you're right, It's better using own CA for private vpn
but the issue is about ACME client to put the bundled LE CA... -
- Never use a public/globally trusted cert with your VPN. You will allow anyone anywhere with a cert from the same CA a...
-
- using LE generated cert for openvpn config
openvpn client can't connect stopping at... -
03:24 PM Feature #8284 (Duplicate): Add duplicate option next to OpenVPN servers and clients
- It would be very convenient to have a "duplicate" icon next to OpenVPN servers and clients list. Just like the one ne...
-
03:13 PM Bug #7413: status_dhcpv6_leases.php: Some DHCPv6 leases are not displayed in the GUI
- The PR has been updated with a second patch addressing the
requested changes and includes further amends e.g. visual... -
11:47 AM Bug #8283 (Rejected): multi-wan gateway group with openvpn clients
- Prereqs:
1) Need at least 3+ VPN providers
2) at least one of the VPN providers needs to use the TLS private key co... -
10:42 AM Bug #8282 (Resolved): Enabling CODELQ on virtual interface VLAN crashes appliance
- I was working to reduce buffer bloat on a client's SG-4860 and I enabled CODELQ on a virtual interface for one of the...
-
04:51 AM Bug #8280 (Duplicate): Captive Portal Voucher Sync
- Hi all,
we just got back from a debug session of a client, which had problems with Voucher Sync of the CP instance...
01/14/2018
-
- Notes:
* Those able to check a proper failover configured system please check if
the Pool Staus table shows up in the... -
03:04 PM pfSense Packages Feature #8279: Consider adding a new option to the Rule Order
- Use case for illustration:
There are two rules to make sure that LAN IPs access pfSense router DNS and not be able... -
- There are situations when firewall rules order should be either preserved (kept unchanged) or when pfSense rules are ...
- 04:34 AM Revision 247f5719: [services_dyndns_edit] Clarify use of @ for Cloudflare
- Add GUI prompts corresponding to #7357 that allows users to
enter @ for the hostname, and have it replaced with an em... -
- This affects the dhcpv6 server as well. Logic needs to be applied to never consider a VIP a primary address.
01/13/2018
-
05:00 PM pfSense Packages Bug #8277: ntopng service fails to start on 2.4.3
- By the way, I think there's an additional issue in that this warning is triggered on start up:
ntopng has not been... -
- Thanks. Yes, looking at the ntopng prefs.cpp on GitHub it looks like that command line option has been removed in 3.2...
-
04:01 PM pfSense Packages Bug #8277: ntopng service fails to start on 2.4.3
- maybe find some help in forums? https://forum.pfsense.org/index.php?topic=142576.0
-
- Since the upgrade of the ports tree to ntopng-3.2.2017.12.06, the ntopng service no longer starts.
The system log ... -
- Using the local directive in the nsupdate can cause breakage in certain scenarios where the source address of the upd...
-
- On boot, if you have VIPs configured on an interface that uses interface tracking for its primary IP, the primary ipv...
01/12/2018
-
- (cherry picked from commit 19a1cf348b07dbaf8fe4d81b8cfc8292b61fd8c3)
-
- (cherry picked from commit 19a1cf348b07dbaf8fe4d81b8cfc8292b61fd8c3)
-
- (cherry picked from commit 19a1cf348b07dbaf8fe4d81b8cfc8292b61fd8c3)
-
-
- All branches have updated packages and they are all working as expected with the fix in place.
-
- Applied in changeset commit:19a1cf348b07dbaf8fe4d81b8cfc8292b61fd8c3.
-
- I'm sorry, I completely missed that there's a dropdown that can be used to specify the record type.
-
- The user specifies the SAN type when making entries in the SAN list. If you choose "IP Address" it makes proper entri...
-
- As we're all aware, changes to how Chrome (and possibly other browsers in the future) disregard the common name field...
-
02:00 PM Feature #7618: Add support for user-supplied Host-Uniq tag and handle PADM messages in Netgraph PPPoE
- We’ll pull the support for this in as soon as FreeBSD accepts it. (It’s too big to carry.)
-
-
08:06 AM pfSense Packages Bug #8214: HOME_NET includes all locally attached Networks
- This bug has been resoved in version 4.0.3 of the Suricata package which was moved to release January 12, 2018.
Bill
01/11/2018
-
-
-
-
04:57 PM Feature #8274 (New): Reverse Inverse Traffic Graph View
- The live traffic graph inverse view (on the dashboard and in status - traffic graph) by default shows inbound traffic...
-
-
- Some fresh numbers from a clean install, wan(dhcp)/lan(static) ssh enabled and thats it..:
After reboot 27MB per pro... -
- p.s. As for widget refresh every second.. thats normal.. once a second 'a' widget is refreshed.. delete all your othe...
-
- I might have edited some things.. (its my pfSense testmachine i also develop things on..) so i cant tell for sure if ...
-
- I created the original patch to increase the fpm processes, and my processes dont use anywhere near 500meg of ram res...
-
09:16 AM Bug #8273 (Confirmed): IPv6 GRE tunnel over PPPoE fails on startup
- I have a XS4ALL FTTH pppoe connection that provides IPv6. IPv6 works perfectly, however GRE doesn't during initializa...
-
09:15 AM pfSense Packages Bug #7462: HAproxy not rebinding properly after WAN DHCP IP change
- I am experiencing the same issue on 2.4.2-RELEASE-p1 with HAproxy 0.54_2. I have changed frontend binding from "WAN a...
-
- Redundancies from acronyms can be annoying at times, and other times necessary due to familiar terminology or technic...
01/10/2018
-
10:03 PM Bug #8271 (Closed): <sendpacket> sendmsg on cpsw0: Permission denied
- My connectionion went down today. I'm waiting to hear from ISP to see if it's the PPoE server on their end. While tro...
- 05:41 PM Revision af17dba1: Fixed #8268
-
-
04:06 PM Todo #8270 (New): Fix grammatically erroneous repetition
- The pfSense web interface has some grammatically incorrect repetition due to, what I suspect to be, a very lackadaisi...
-
- Fixed pushed to 2.4.x and 2.3.x
pfSense/FreeBSD-ports
devel: commit https://github.com/pfsense/FreeBSD-ports/co... -
- Passing an invalid RRD file to rrd_fetch_json.php via the left= parameter in POST prints the supplied name without en...
-
12:42 PM Bug #7604: Bug #6594 is not resolved: Waiting for Internet connection to update pkg metadata and finish package reinstallation
- Can't believe this is still a issue. :( At the very least can we just decrease the timeout to like 3mins? I would thi...
-
11:50 AM
Bug #8268: RAMdisk warning pop-up appears when no changes have been made
- Applied in changeset commit:af17dba166c9dda46a1974841a6cb0ad44af397c.
-
11:49 AM
Bug #8268 (Feedback): RAMdisk warning pop-up appears when no changes have been made
- Resolved by correcting before/after logic
-
11:39 AM
Bug #8268 (Resolved): RAMdisk warning pop-up appears when no changes have been made
- https://forum.pfsense.org/index.php?topic=141402.new;topicseen#new
Looks like an error introduced in PR #3776 -
- Applied in changeset commit:498f7e20b630ae1429c1e6892402a0256e8859ba.
-
- When using a bridged tap configuration, routing through tap to the Internet or other subnets outside of the bridged i...
-
- Commit 0869605131ba3e5d7e502af7a799e54f27d2e7f6 removed the
restore_rrd() function. To avoid errors when restoring ol...
01/09/2018
-
- I sent a PR to fix this: https://github.com/pfsense/pfsense/pull/3898
- 04:33 PM Revision 016260fe: Fixed #8266 by removing JS alerts
-
03:51 PM Bug #8150: upgrade from 2.3* to 2.4* caused new self signed ssl cert to be selected for WebConfig
- Who's arguing? No me.
I was trying to point out that something was not working "quite right". Trying to help.
... -
- Arguing won't help anyone. You won't convince anyone by acting that way, and there is nothing to "win". Clearly you a...
-
- > I use ACME/Let's Encrypt certs where the certificate has SANs for both nodes + hostname(s) for the CARP VIP, and it...
-
- I use ACME/Let's Encrypt certs where the certificate has SANs for both nodes + hostname(s) for the CARP VIP, and it w...
-
- Just to clarify...no certs are generated on the pfsense machines here...These are proper certs signed by a CA. Would ...
-
- It's still not a bug. You didn't update the certificate on the secondary properly. The two units share a certificate ...
-
- Please reopen this bug, because I have managed to reproduce it with more detail.
While replacing the SSLs on this ... -
10:40 AM
Bug #8266 (Feedback): Bogus error message occurs on killing OPenVPN connection
- Applied in changeset commit:016260fe433772839a06233d821992808d80f8cd.
-
10:31 AM
Bug #8266 (Resolved): Bogus error message occurs on killing OPenVPN connection
- https://forum.pfsense.org/index.php?topic=139073.0
-
- Tanks for the explanation. That is a good idea, because in the gui it says "A port alias listed in Firewall -> Aliase...
01/08/2018
-
06:50 PM Revision 87489e5c: re-adding changes made to fix bug#6400, includes fixes for bug#8222 and bug#8223 that were introduced with the initial commit of this code.
- original pull request was #3868
-
- relayd does not support port ranges, only single ports, but there isn't any input validation that checks for that inv...
-
- Hi,
i just configured a load balancer via relayd and used a port range which i defined via the firewall - alias ta... -
- Can confirm it is still present in 2.4.2-RELEASE-p1 (amd64). This is really sad, the bug exists for more than 4 years...
-
09:26 AM pfSense Packages Bug #8264 (New): Radiusd restart on WAN change results in freeradius not running (and possible solution)
- With a PPPoE WAN that sometimes goes down and up, we found each time the radius service stopped.
Our guess is that...
01/07/2018
-
- Progress: 100%
-
02:26 PM Bug #8263 (New): Cannot create a nonlinear `Link Share` service curve because of: "the sum of the child bandwidth higher than parent"
- *Problem:*
* Cannot create a nonlinear service curve using `m1` and `d` variables with HFSC Scheduler. Traffic shape...
Also available in: Atom