Activity
From 01/26/2018 to 02/24/2018
02/24/2018
-
11:05 PM
Bug #6400: assign_interfaces.php issues with large numbers of interfaces
- Retested With CE 2.4.3.a.20180224.1921 memstick installer and the interface names changed to match the NIC driver bei...
-
10:17 PM
Bug #6400: assign_interfaces.php issues with large numbers of interfaces
- Tried logging out, WebGUI hung. Tried console menu options 11/16 to get the WebGUI back to no avail.
-
09:59 PM
Bug #6400: assign_interfaces.php issues with large numbers of interfaces
- With the attached config's (1000-interface-config.xml) interfaces restored to 2.4.3.a.20180224.1542 running with 4G m...
-
10:33 PM
Bug #7308: ZFS installer - check storage capabilities
- Tested with pfSense-CE-2.4.3-DEVELOPMENT-amd64-20180224-1921.iso and got the attached error with 2G memory, 4G storag...
-
08:22 PM Revision 40a530a1: Filter vm.pmap.pti entries on loader.conf when necessary.
- https://forum.pfsense.org/index.php?topic=144390.msg786182#msg786182
02/23/2018
-
09:30 PM Revision 93e287df: Merge remote-tracking branch 'upstream/master'
-
- Replaces the current auth-user-pass-verify directive with the new plugin
call in the config-file generation code.
Al... -
-
- Note that the event_wait signal, the MULTI_sva, and the WARNING do not appear if the auth request fails.
-
- I'm really close to having this working on the 2.4.2-RELEASE code base, however, I'm running into an issue and I'm ho...
-
07:39 AM Feature #8346 (New): Allow pfSense to act as an IPsec VPN client
- It would be useful to let pfSense act as a VPN client itself and let it share a mobile style VPN connection to a remo...
02/22/2018
-
07:50 PM pfSense Packages Feature #8345 (Resolved): pfSense-pkg-softflowd: Added additional options now available in softflowd-0.9.9_1
- See pull request: https://github.com/pfsense/FreeBSD-ports/pull/501
---
Updated package version to 1.2.3
Inc... -
05:59 PM Revision e0ed03f3: Update translation files
-
-
01:49 PM Bug #8056: Bridge + CARP crashes/freezes pfSense
- I also have exactly the same issue on netgate appliances 8860. I first thought it is a hardware problem and migrated ...
-
-
-
-
10:08 AM Bug #8337 (Resolved): System Authservers page Authentication Containers field should be marked required
- Field is marked required now
-
- Prints the correct server now
-
- PR has been merged
02/21/2018
- 08:26 PM Revision 40fd222c: Merge pull request #3906 from phil-davis/system_authservers-authentication-containers-01
- 08:26 PM Revision e8f6e66e: Merge pull request #3907 from phil-davis/auth-server-test-output-01
-
- Works fine
-
-
- Everyone should have 1.2.4 now
-
- PR is at https://github.com/pfsense/pfsense/pull/3906 and has been merged
-
- PR is at https://github.com/pfsense/pfsense/pull/3907 and has been merged
-
- Current snapshots are fine with zfs. Most likely your last update from before this snapshot wiped that out, not the c...
-
11:41 AM Bug #8344: zfs mountroot still broken in 2.4.3.a.20180221.0835
- (might also have eaten load_dummynet, for the folks who have active limiters)
-
- loos' recent commit hosed loader.conf; systems fail reboot at mountroot> b/c opensolaris & zfs ko's don't get loaded....
-
07:29 AM Feature #7321: DynDNS - Add DreamHost DNS support
- Dreamhost is not an option in the ACME package. However, I was able to get around this by using the "standalone HTTP ...
-
03:39 AM Feature #8289: OpenVPN - configurable username as common name
- Greg M wrote:
> Hi!
>
> See here: https://forum.pfsense.org/index.php?topic=136533.msg778977#msg778977
>
> The...
02/20/2018
-
04:34 PM Feature #7321: DynDNS - Add DreamHost DNS support
- @corey I saw your note about adding this to the ACME package. Were you able to do this? I did not see Dreamhost in th...
-
03:24 PM Bug #8341: NAT Port forwarding issues (port collision from internal host)
- Tried to reproduce in lab. Not successful. Some additional factor must be involved.
-
- Jim Pingle wrote:
>the only time you'd have a collision is if you forward a port and both the local source port, loc... -
- There isn't a way to automatically detect or predict that scenario to prevent it.
Outbound NAT uses random ports a... -
- I think this should be omitted by design:
Found following constellation who troubled me for many hours:
PortNAT: ... -
- We're aware, we'll have it updated soon.
In the meantime, consider switching to the FRR package. -
11:58 AM pfSense Packages Bug #8339: quagga: ospfd crashes with assertion since upgrade to quagga-1.2.3
- quagga 1.2.4 with the fix has been released:
https://savannah.nongnu.org/forum/forum.php?forum_id=9099
https://www.... -
11:12 AM Bug #8336: ESXi 6.5u1 displays superfluous error message with Netgate OVA iamge
- Confirming that it occurs (as expected) in 2.4.2_1. Warning text does not change.
-
-
- I've been unable to reproduce this in the 2.4 stream, so please close either with CAN'T REPRODUCE or FIXED IN 2.4 (or...
-
09:04 AM Bug #8343 (Resolved): Gateway Routes (Default Routes) not removed in Kernel when removed from GUI
- When I disable the Gateway (default) in System > Routing > Gateways it is still visible as a static route in Diagnost...
-
- Changed installer to request more space to install on ZFS
02/19/2018
-
05:43 PM pfSense Packages Bug #8340 (Rejected): Status_Traffic_Totals Error
- While checking in on my traffic totals using the Status_Traffic_Totals package I've gotten an error that I can't fix....
-
- If the CN is already an FQDN on the given domain, this prevents the
domain from being present in the record twice (e.... -
- Hi, ospfd crashes with an assertion since I upgraded to 1.2.3 (upgraded Quagga_OSPF to 0.6.20_2):...
-
-
- Wizard now has all of the current protocol choices and defaults to the correct selection (UDP on IPv4 only).
-
- Tunnel networks are calculated properly with /31 now
-
- Parameters are changing with RAM size as expected, seems to work OK.
-
10:52 AM Bug #7772: Regression of Bug #906
- Steve Beaver wrote:
> Can you provide simple steps to reproduce please?
I eventually fixed the issue of the left ... -
- Seems to work OK but needed a minor tweak in the script, see commit:e6e7b00c5c
-
- Works
-
- Tested and working
-
-
- Fabrizio Pappolla wrote:
> Before open a new ticket, i will try here since the error looks really similar. My pfSens... -
05:29 AM Bug #4310: Limiters + HA results in hangs on secondary
- Before open a new ticket, i will try here since the error looks really similar. My pfSense got bootloop, the problem ...
-
02/18/2018
-
- Because I did something out of order?
-
- Switched to printf over echo to ensure strict POSIX compliance. Also
added some comments regarding the source of two ... -
- Initial pass at new auth script which will be called by an openvpn
plugin. See https://github.com/pdemonaco/auth-scri... -
- Switched to printf over echo to ensure strict POSIX compliance. Also
added some comments regarding the source of two ... -
- Initial pass at new auth script which will be called by an openvpn
plugin. See https://github.com/pdemonaco/auth-scri...
02/17/2018
-
- Pointy-hat to: me
-
11:40 AM Revision 34925626: Report correct auth server host when testing LDAP auth server
-
10:47 AM Bug #7604: Bug #6594 is not resolved: Waiting for Internet connection to update pkg metadata and finish package reinstallation
- I've just come across this bug now. Most.. infuriating .. nonsense. In my case I have a working WAN, but you can't se...
-
-
- To reproduce:
1) Add a few authentication servers (some Radius, at least 1 LDAP that is not the first entry in the l... -
- Actually the box for entering the container data has the "background" text "*Containers"
02/16/2018
-
10:10 PM Bug #7469: local_sync_accounts() slowness can trigger GUI/XMLRPC failures with many accounts
- Tested on Current Base System 2.4.3.a.20180216.1415
Syncing 106 users and adding a 107th took maybe two seconds, n... -
- Applied in changeset commit:dc3bc1f8c9f5040762953b38df499ea5f86d13d5.
-
09:58 PM
Feature #8186: ipsec, allow configuration of multiple ike phase1 encryption ciphers #3711
- Tested on 2.4.3.a.20180216.1415, works as expected.
-
06:16 PM
Bug #8266: Bogus error message occurs on killing OPenVPN connection
- tested on 2.4.3.a.20180216.1415, no error.
-
- Oops. Can someone fix my typo in the title, please?
-
- No functional impact.
When pfSense-CE-2.4.2-RELEASE-amd64.ova is deployed and booted on an ESXi 6.5u1 host, the VM... -
- Sort users / groups alphabetically on config.xml
-
-
-
02:04 PM Bug #8335 (New): System hang with LACP downlink to UniFi switch
- I have an RCC-VE 2440 (2015) with igb1 and igb2 aggregated into lagg0 and connected to a UniFi switch. UniFi supports...
-
01:49 PM Bug #8334: Forwarding broadcast through firewall can cause broadcast storm
- All that I understood, the part I think was a bug was it continuing to accept the packet on the WAN interface when th...
-
- The firewall in this case does not have any knowledge that the packet is broadcast. It does not know the subnet direc...
-
- I had a secondary IP on a windows system to test connectivity to a proprietary system. When it was added to windows,...
-
- PR was merged back in December
-
- PR was merged a month ago
-
- PR was merged two weeks ago
-
- When the interface of a Dynamic DNS entry is set to a gateway group and the default route is down, the update may fai...
-
-
07:35 AM Todo #6647: Enable Additional Security Headers
- While I am by no means an expert on what specific headers are appropriate... And the webgui really should be limited ...
02/15/2018
-
-
- This has been present and working as of commit:1c2ef5f22ff76419ff7f4ba620a02b8a14dc3078
-
- Global declaration is present now.
-
- Works fine now. If the interface is disabled or otherwise has no address, then bypasslan is omitted.
-
- Works properly now. A cert with a CN containing a space does not get an invalid SAN entry.
-
- Option is present and functional.
-
- OK now.
-
- Option is present and working
-
- Works now, the prompt only appears when expected.
-
- Input validation works properly now, an IP address is rejected when FQDN is selected.
-
- Works
-
- Works
-
- Code is there on current snaps.
-
-
- Delayed compression is in sshd_config on current snaps.
-
- This has been working great since it was merged.
-
- Seems OK here, too.
-
- Current code is better but is not putting the users back into matching order on both units. Renato is working on an i...
-
-
- Every widget I've tried still works, it's been in snaps for two weeks and no other complaints, I'd say it's resolved.
-
- Problematic function call is not present on current snaps. Looks OK here.
-
- Works on current snaps.
-
-
-
-
-
-
03:16 AM Bug #8321: IPv6 LAN Network missing from IPsec LAN bypass list
- Looks good: bypasslan: child: 172.25.236.0/24|/0 2001:470:beef:7e01::/64|/0 === 172.25.236.0/24|/0 2001:470:beef:7...
-
-
- Tested. Looks like it is doing the right thing.
-
-
- Ticket: #8331
-
11:38 AM pfSense Packages Todo #8332 (Resolved): pfBlockerNG doesn't include L2TP interface in outbound floating rules
- pfBlockerNG needs an option on the General tab for "L2TP Interface" similar to the "OpenVPN Interface" and "IPSec Int...
-
- Fixed.
Thanks!
02/14/2018
-
- Copyright year shows 2018 once logged in but on login page it still shows 2017
Confirmed in 2.4.3-DEV Current Base... -
- Confirmed working on Current Base System 2.4.3.a.20180213.0339 built on Tue Feb 13 03:39:40 CST 2018
-
- * Rename local_sync_accounts() to local_reset_accounts() and keep it
only being used /etc/rc.bootup
* Reimplement l... -
- Push for 2.4.4
-
12:26 PM Bug #8135: pfSense deletes itself after upgrade from 2.2.6 to 2.3.5 with haproxy installed
- I have the same problem.
Any news about it?
Is it possible to upgrade to a previous version than 2.3.5 and then go ... -
- Applied in changeset commit:79f7bc7f61a9026cca8770d60d27cde15dd6f26a.
-
09:46 AM Feature #8330 (New): add options for ddns-local-address statements
- For Dynamic DNS updates please allow the option to select from ddns-local-address statements.
https://www.isc.or... -
08:59 AM Bug #8165: Fragmented at source IPv6 packets (UDP + ICMP Ping) are not forwarded / v2.4.2 AMD64
- Having done some more research it appears the problem has previously come up in FreeBSD, fixed and then come back in ...
-
05:59 AM
pfSense Packages
Bug #8291 (Resolved): Auto Config Backup ACB Reports Success on invalid credentials then an error notice is logged
-
05:57 AM
pfSense Packages
Bug #8291: Auto Config Backup ACB Reports Success on invalid credentials then an error notice is logged
>
02/13/2018
-
08:32 AM pfSense Packages Bug #8329 (Closed): Cellular Package Change link to symlink
- Ticket for PR:
https://github.com/pfsense/FreeBSD-ports/pull/500 -
05:19 AM Bug #8117: IPSec statuspage shows both connected and connecting tunnel
- It is set to respond only! (but I think previously it was set to initiate!)
This did not happen in the previous ve... -
05:12 AM Bug #8328 (Rejected): username/password not used by proxy support
- Hello,
I open a new ticket because I have no news about ticket #8124. Can you tell me if you need more informati...
02/12/2018
-
-
- Verify if pipes were created in current system before attempt to remove
them -
-
- To be used later on a fix for ticket #8317 just return the array
containing pipes to be removed without removing them... -
- I'm actively working on implementing this in my pfSense environment. Currently I have a fork of the workaround linked...
-
- Applied in changeset commit:356f29a03f7a7c770cbd8492c20347f615e3fdd7.
-
- I added a note to Azure in ACME pkg version 0.2.0.3 with that link.
-
05:26 AM Bug #8056: Bridge + CARP crashes/freezes pfSense
- I have exactly the same issue with my pfSense setup on a Netgate Physical Appliance. Is there any ETA when this will ...
-
04:47 AM Bug #8327: VLAN net, Default Deny and spoofed packets
- I just want to add that in old version 2.1.2-RELEASE (i386), spoofed packets are correctly blocked on a VLAN interfac...
-
- Scenario:
VLAN interface 172.31.22.251/24
Rules for VLAN interface:
PASS Prot. IPv4 *; source VLAN_net, port *; ...
02/11/2018
-
07:02 PM Bug #8138: Option <spoofmac> is ignored on interfaces without hwaddr
- I did this:...
-
01:51 AM pfSense Packages Feature #8326: Acme.sh package - Add support for Azure DNS
- Just noticed that jim-p implemented it in already https://github.com/pfsense/FreeBSD-ports/commit/329605fc469f7ba2e4a...
-
- UI support in the acme package for Azure DNS
See Azure DNS Support
Support in acme.sh was added with https://gith...
02/09/2018
-
08:46 PM Bug #8324: bxe cards require promisc for OSPF
- bxe seems to want IFF_ALLMULTI set, and something isn't setting it.
https://github.com/freebsd/freebsd/blob/master... -
- Confirmed option available in Current Base System 2.4.3.a.20180209.1614 built on Fri Feb 09 16:14:19 CST 2018.
-
07:42 AM Feature #1826: PPPoE server IPv6 support
- Delegation of a full prefixes or parts of the prefixes received on WAN to pppoe-Clients is needed.
Will there be any... -
07:19 AM Bug #7958: Upgrade 2.4.0: IP alias with FQDN doesn't work any more
- I have the same issue. filterdns appears to hang and must be killed for this to function. If not, any host based alia...
-
- Dear pfsense-Team,
I use pfsense on the current version and want to activate UPnP (Services / UPnp & NAT-PMP), but...
02/08/2018
-
06:12 PM Revision 236a198c: Fixing filename. Thanks Renato
-
11:17 AM Bug #8324 (New): bxe cards require promisc for OSPF
- Since at least 2.4.1, when using either Quagga or FRR, bxe cards require promisc to be enabled in order to receive OS...
-
- Verified on pfSense-netgate-kvm-2.4.3-DEVELOPMENT-amd64-20180207-1106.qcow2.gz
DDNS DHCP Client Updates show under...
02/07/2018
-
- Allow "Both" to be selected for IPv4/IPv6 on IPsec P1, in the config use both addresses as "left =" if they both exis...
-
- 05:27 PM Revision b96b2ca0: Merge pull request #3905 from pulcov/master
- 05:23 PM Revision 031570c6: Merge branch 'master' of gitlab.netgate.com:pfsense/pfsense
-
- (cherry picked from commit 0136888bde4e23ba99533d72de5f0b96545abb97)
-
- (cherry picked from commit 0136888bde4e23ba99533d72de5f0b96545abb97)
-
- (cherry picked from commit 0136888bde4e23ba99533d72de5f0b96545abb97)
-
-
- Applied in changeset commit:d1f69741f57f9f049f80040a93278591c424a4cc.
- 01:35 PM Revision b0e29e62: Fixed #8322 to accommodate case where no VIPs are defined
-
- Applied in changeset commit:1dc6392b93b9baf869ad9437b9a01baf922a0b5a.
-
- PR looks good to me. I had a number of leases on my edge firewall that were not showing before, and now they all show...
-
11:40 AM
Bug #8322: PPP UI error
- Applied in changeset commit:b0e29e62c9fad8650d20dbc997af69c4fbe150ee.
-
07:38 AM
Bug #8322 (Feedback): PPP UI error
- Fixed by initializing VIP array in interfaces.inc
-
07:07 AM
Bug #8322 (Resolved): PPP UI error
- Warning: array_merge(): Argument #2 is not an array in /etc/inc/interfaces.inc on line 6664 Catchable fatal error: Ar...
-
- Applied in changeset commit:0136888bde4e23ba99533d72de5f0b96545abb97.
-
-
08:09 AM Bug #8323 (Resolved): Remote Logging Options and IPv6
- I dare say that I have found a bug in version 2.4.2-RELEASE (amd64).
When setting up syslog forwarding in the "Rem...
02/06/2018
-
-
-
03:35 PM pfSense Packages Bug #8251: Captiveportal + FreeRadius "Last activity" resets to Session start
- Any help?
-
02:56 PM Revision 8e461d38: extended GUI to manage new feature
-
- Apparently it's not supported by the driver, despite what the man page claims.
This reverts commit 40f2c5d909220dd5a... -
- The original bug here was fixed long ago. The other parts are covered by #7774 and #8321
-
- From #7015 comment 21.
When bypasslan is enabled, it only covers IPv4, not IPv6. When an IPsec tunnel is setup usi... -
-
- Applied in changeset commit:b2605914777a8026910bf8ce8b324fce61803ad2.
-
- Also: This problem was introduced over 4 years ago when a contributor added the IP address check instead of removing ...
-
- As the discussion in some of those former tickets and posts implied, the IP address can be reused as well as the host...
-
- That's not a discussion relevant to the bug, but in brief: The ONLY supported use of XMLRPC sync in any area is for H...
-
10:03 AM Bug #8317: Captive Portal Sync Errors
- Jim Pingle wrote:
> Using vouchers with a "central" host is not an approved or supported use of the voucher sync sys... -
- Using vouchers with a "central" host is not an approved or supported use of the voucher sync system, but the problem ...
-
-
- We have a CP setup running at a customer's site which uses a central pfSense VM as CP Voucher Sync target for central...
-
- I can't reproduce this with host or network aliases. I tried up to 50 entries in an alias and every entry worked as e...
-
- We do not maintain that code, please report the problem to the acme.sh project: https://github.com/Neilpang/acme.sh
-
09:21 AM pfSense Packages Bug #8320: acme: dns_yandex plugin is broken at least on amd64 platform due to different sed behavior
- The plugin dns_yandex is broken due to to different sed behavior.
The error resides within PDD_get_domain() functi... -
- The plugin dns_yandex is broken due to to different sed behavior.
The error resides within _PDD_get_domain() func... -
- It's possible that either the man page is wrong or it's been disabled in our driver for stability reasons. I'll take ...
-
- well this is odd.
altq(4) clearly "*indicates*":https://www.freebsd.org/cgi/man.cgi?altq that cxgbe(4) is supporte... -
06:53 AM pfSense Packages Bug #8318 (Resolved): PFBlockerNG removes alias file when using advanced inverted rule
- I'm running 2 PFSense boxes in HA setup. Version 2.4.2-RELEASE-p1 (amd64) with PFBlockerNG version 2.1.2_2 . The mast...
-
04:35 AM Feature #8316 (New): expiration date when creating new rules
- Sometimes i want to create rules, that should only applied for a some days / weeks.
At the moment i only can create ... -
01:43 AM Bug #6295: Crash upon applying CODELQ to untagged parent interface when also applied to daughter VLAN
- Hi all.
Just a heads up that this issue still exists in 2.4.2 (amd64).
Cheers.
Shaun.
02/05/2018
-
10:45 PM Bug #8165: Fragmented at source IPv6 packets (UDP + ICMP Ping) are not forwarded / v2.4.2 AMD64
- Mike Nichols wrote:
> This issue came to light when I encountered a problem with a SIP phone not receiving SIP Invit... -
- 08:26 PM Revision 0f5bd6f8: Fixed #8091 Force Integers in GUI
- It will use the ceil() function to always use the ceiling after loading a config.
Also onchange of bandwidth will cal... -
07:02 PM pfSense Packages Bug #8315 (Closed): Mail Report mail_report_send() behavior different than notify_via_smtp()
- @notify_via_smtp()@ correctly supports both SMTPS SSL and SMTP+StartTLS.
Mail Report @mail_report_send()@ supports S... -
05:47 PM Bug #6263: Encryption options for every P2 on a given P1 are written to each P2 individually inside ipsec.conf with multiple P2 entries + split conn entries
- Looked into this and the attached patch appears to fix the issue in 2.4.2. The comparable change also corrected a 2....
-
- Applied in changeset commit:40f2c5d909220dd5aaa23515d25a04916438304d.
-
- T5 cards are called cxl; T4 cards are called cxgbe
... ref cxgbe(4) "*here*":https://www.freebsd.org/cgi/man.cgi?qu... -
- patchset added 'cxl' ... line 5680 of src/etc/inc/interfaces.inc also needs 'cxgbe'
thanks,
R.
-
- That code is not ours but that of the Net_SMTP Pear package: https://pear.php.net/package/Net_SMTP -- That package do...
-
03:26 PM Bug #8313 (Not a Bug): STARTTLS auto detection not working
- When attempting to setup SMTP notifications to a mailserver which supports STARTTLS the following error occurrs:
Co... -
02:55 PM
Bug #8226 (Resolved): Pass-through MAC automatic additions adds duplicate
-
06:46 AM Bug #8226: Pass-through MAC automatic additions adds duplicate
- Its indeed solved. Thanks for the quick fix.
-
02:40 PM
Bug #8091 (Feedback): Limiters with fractional bandwidth values are not loaded correctly
- Applied in changeset commit:0f5bd6f8ecf2a755cf2cef689e1e3bead04cc058.
-
- Option 77 works on 2.4.3 snapshots, I'm checking what we can do about the VLAN priority.
-
- PR has been merged. Thanks!
-
11:08 AM Feature #336: Option to create lagg under assign interfaces
- +1
Absolute impossible to create a LAGG on the CLI :/ -
- It works fine here, it looks like it's something in your configuration, probably a problem with the key. If it can't ...
-
05:09 AM pfSense Packages Bug #8312: Can not init api (error code: 3)
- Relevant portion from acme_issuecert.log:...
-
- pfSense: 2.3.5_p1 (on amd64)
Acme Package: 0.1.34
Trying to manually renew our certificate, but getting error bel... -
07:19 AM Bug #7905: OpenVPN Authentication Against Backend Stalls All Server Traffic
- Would a solution like Keepalived on the authentication servers back-end (if they are of the same type, e.g. RADIUS)wo...
02/04/2018
-
09:02 PM pfSense Packages Feature #8311 (Rejected): Suricata persistent blocks
- Please make blocks with suricata persistent through reboot.
-
- Set target.
-
01:04 PM pfSense Packages Bug #8307: HAproxy in pfsense 2.42-p1 creating a new frontend with a Shared Frontend issues invalid ip error
- The haproxy-devel 0.55_2 package will be build after the pull request is 'accepted' by official pfSense developers..
...
02/03/2018
-
11:34 AM Bug #8310 (Not a Bug): Firewall ACL fails to parse / validate host alias entries after tenth entry in alias
- This can be recreated 100% of the time.
When writing an ACL on the firewall, if I use a host alias as source or de... -
10:13 AM
Bug #8056: Bridge + CARP crashes/freezes pfSense
- The previous patch works well on 2.3.x. Is it possible to apply the same patch for 2.4.x while FreeBSD folks decide w...
-
01:07 AM Bug #1819: DNS Resolver Not Registering DHCP Server Specified Domain Name
- I just started a bounty thread on the pfSense forums:
https://forum.pfsense.org/index.php?topic=143579.0
Essent...
02/02/2018
- 08:41 PM Revision 76ca1bc5: Fix config version # arrising from merging older PR
- 08:26 PM Revision d205ac7a: Merge pull request #3711 from PiBa-NL/20170427-ipsec-multiple-P1-algo
- 08:17 PM Revision 3490784c: Merge branch 'master' of gitlab.netgate.com:pfsense/pfsense
-
- Unfortunately, it looks like it keeps getting kicked down the road a bit. This would be a really nice bit of polish...
-
08:13 PM Bug #1819: DNS Resolver Not Registering DHCP Server Specified Domain Name
- is there an ETA on this one?
-
07:05 PM pfSense Packages Bug #8307: HAproxy in pfsense 2.42-p1 creating a new frontend with a Shared Frontend issues invalid ip error
- Pi Ba wrote:
> Perhaps you could send me 'PiBa' a PM on the forum?
Pi
Other then manually patching the code. ... -
- The new package 0.55_2 should skip the check on 'secondary' frontends.
https://github.com/pfsense/FreeBSD-ports/pull... -
- Perhaps you could send me 'PiBa' a PM on the forum?
-
- Pi Ba wrote:
> Would be nice to know what your config looks like. As it doesn't seem to happen here. Can you share t... - 05:57 PM Revision 67784aa6: Add DDNS client update option to DHCPv4 configuraiton
-
- On d9b05eb490a the way aliases containing a mix of IP address and FQDNs
works has changed and all items were added to... -
04:50 PM Feature #8309 (New): Include apuled driver to add support for LEDs on PC Engines APU boards
- Driver for adding support for LEDs and mode switch on PC engines APU boards.
See here for details: https://bugs.fr... -
- On d9b05eb490a the way aliases containing a mix of IP address and FQDNs
works has changed and all items were added to... - 04:45 PM Revision a464eaf7: Fixed #8226 Check for MAC duplicates
- loop through auto pass MAC addresses for duplicates
before automatically adding a pass thru. -
04:20 PM Feature #7216: Allow user to choose date display format
- I think a text field allowing standard PHP date() format would be ideal. https://secure.php.net/manual/en/function.da...
-
- Pi Ba wrote:
> Sync should be disabled on haproxy on the backup machine, can you check that is indeed the case?
P... -
- Sync should be disabled on haproxy on the backup machine, can you check that is indeed the case?
-
- Pi Ba wrote:
> Could it be that youve got sync configuration enabled in haproxy, but dont have it configured in pfSe... -
- Well now the haproxy usecase is broken both ways. start by 'apply config', and by 'restart service' neither fills the...
-
- Applied in changeset commit:1c1613c532cfca62724b490f44989dbbff3a170b.
-
12:00 PM
Bug #7131 (Feedback): DHCP v4&v6 DDNS missing options
- DHCP client updates option added DHCP v4
ddns-update-style interim may be added later -
11:00 AM
Bug #8226 (Feedback): Pass-through MAC automatic additions adds duplicate
- Applied in changeset commit:a464eaf72bb970cc3a26cef9b322f1ee9918cf9f.
-
09:47 AM
Bug #8226 (Assigned): Pass-through MAC automatic additions adds duplicate
- Disregard that last message I was able to reproduce it.
-
09:39 AM
Bug #8226 (Feedback): Pass-through MAC automatic additions adds duplicate
- Could we get more details on how to reproduce this? I do not see duplicate entries when logging in from different tab...
-
09:41 AM pfSense Packages Bug #8308 (Resolved): FRR OSPF6D: interfaces not assigned to areas if they only have a link-local address
- frr_ospf6d.inc:...
-
09:34 AM
Bug #3932 (Closed): Captive portal with greater than 9000 permanent MAC addresses causes timeout in loading CP
- It is unreasonable to keep kicking this down the road to target_version++ Closing and recording it for future conside...
-
09:31 AM
Bug #6031 (Closed): Anti-Lockoug Rule Not Effective Against Canned Interface Block Rules
- No one has been able to work on this in two years, and there is a work-around. Closing and recording for future consi...
-
09:27 AM
Bug #6578 (Closed): Filter reload hangs with IPsec hostnames that don't resolve configured
- This will not be addressed in the next version or two, so is being shelved and recorded for future consideration.
-
09:12 AM
Bug #7082: pkg_edit.php - impossible to use default_value with rowhelperfield
- This will not be addressed in 2.4.3 :( We are looking at alternative ways of providing this functionality.
-
-
12:19 AM pfSense Packages Bug #7965: freeradius 3 with MySQL
- THX! It's worked!
02/01/2018
-
- Could it be that youve got sync configuration enabled in haproxy, but dont have it configured in pfSense itself?
-
- I have a number of http(s) sites setup under haproxy using a shared ssl cert .
After cloning an existing config I... -
- Would be nice to know what your config looks like. As it doesn't seem to happen here. Can you share the <haproxy> sec...
-
- This has existing since 2.3.x and has been worked around for some time.
We use a haproxy shared frontend for a com... - 05:33 PM Revision 12f16196: Fixed #8303
- 04:15 PM Revision ce7b40ce: Fixed #8301 CSRF Enabled on all widgets.
- Enabled CSRF on all widgets.
-
-
03:08 PM
Bug #7195: pkg_edit.php - <checkenablefields> tag has no effect on fields other than checkbox/input
- We hope to provide an alternative means of achieving this, but it won't make it in 2.4.3, so ++target_version :(
-
12:46 PM
Bug #7801: UDP fragments received over IPsec tunnel are not properly reassembled and forwarded
- ++target_version
-
12:36 PM
Bug #7905: OpenVPN Authentication Against Backend Stalls All Server Traffic
- Sorry to have to kick this to ++version but the work required cannot be squeezed into the 2.4.3 schedule
-
12:03 PM
Bug #8263: Cannot create a nonlinear `Link Share` service curve because of: "the sum of the child bandwidth higher than parent"
- Rescheduled for release 2.4.4
-
12:02 PM
Bug #7413: status_dhcpv6_leases.php: Some DHCPv6 leases are not displayed in the GUI
- Re-assigned for testing
-
11:57 AM
Bug #7480 (Feedback): pkg framework - textarea on rowhelperfield errors
- Is there an existing package where this behavior can be seen?
-
11:51 AM
Bug #7481 (Rejected): pkg-framework - rowhelper ignores <advancedfield/>
- The advancedfield tag is no longer supported in the rowhelper section. This may be addressed in the future, but more ...
-
11:48 AM
Bug #7599: System->Update unavailable in WebGUI after connection failure during update
- Stephen. - Would you please retest and confirm this issue still exists?
-
11:40 AM
Bug #8303: Undefined Function
- Applied in changeset commit:12f1619688ce2dc92e63e808cda3cd9317e96c13.
-
11:34 AM
Bug #8303 (Feedback): Undefined Function
- Fixed.
That function has not been required for a number of years. -
11:10 AM
Bug #8303 (Confirmed): Undefined Function
-
11:09 AM
Bug #7772 (Feedback): Regression of Bug #906
- Can you provide simple steps to reproduce please?
-
10:30 AM
Bug #8301 (Feedback): Dashboard Widgets may no longer need CSRF disabled
- Applied in changeset commit:ce7b40ce96bbd9e94d36d1779807bbe6b8efd356.
-
- There should not be any need for manual corrections on the current version. The counters should be handled properly.
...
01/31/2018
-
- Thank you! It remains to fix "daily" in config to run freeradius
With "daily(and etc...)" in config freeradius not s... -
- Fixed in commit:a5d0e15340e1975a86fb5fe48f93032b3c574934 - pkg version 0.15.4
-
-
- (cherry picked from commit a0f991ecb8247688bfc91b11176c0442e8d7327b)
-
- (cherry picked from commit 77a6cafbc02c0bbd4075237cca849841561bf6b3)
-
- (cherry picked from commit 10a8b5eea62e71aedc76e9eb3fc9630b73247a31)
-
-
-
-
-
- The underlying FreeBSD bug is still open:
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200319
The previous p... -
06:43 AM Bug #8056: Bridge + CARP crashes/freezes pfSense
- Confirmed - We have 2 Netgate 8860 1u appliances setup with CARP + Bridge and when upgrading from 2.3.4 to 2.4.2_1 we...
01/30/2018
-
- The two crash reports in the submission from that IP address are different and at very low levels of code in the oper...
-
03:43 PM Bug #8304: pfSense locks up when Android device connects to L2TP/IPsec VPN that uses forces SHA-256 in phase 2
- Ah, I see. I'm a bit new to bug reporting.
My WAN IP was 158.174.30.59.
I didn't make a Reddit post or anything... -
- Is there a forum thread or reddit post with more detail? There isn't anything that stands out in what you have posted...
-
- I noticed I wasn't 100% clear on the conditions: The Android connection works just fine if I set for MD5 or SHA1 hash...
-
- Discovered this by trying to follow this tutorial and messing with the encryption settings.
[[https://doc.pfsense.or... -
- Ran into this bug as well, though it appears to break things if you have too many phase 2 entries. After a certain n...
-
05:46 AM pfSense Packages Bug #8305 (Resolved): acme: "Key Size" value is not passed to acme.sh
- Setting a "Key Size" in acme_certificates_edit.php has no effect. This variable is not passed on to the /usr/local/pk...
01/29/2018
-
- (cherry picked from commit 7f054ea0b387cd8db372d92e04aed1a9c2ef028a)
-
-
- (cherry picked from commit c083e1e49af4902d15173d412feebd8b86a616ee)
-
- (cherry picked from commit e7b5b82b121c76c4c6bf57229bfef0ea3bc33d5b)
-
-
- (cherry picked from commit 9ee5030eecc99dd1e7a747f23870663715dfc21f)
-
-
- (cherry picked from commit c083e1e49af4902d15173d412feebd8b86a616ee)
-
- (cherry picked from commit c083e1e49af4902d15173d412feebd8b86a616ee)
-
-
02:24 PM
Bug #8303 (Resolved): Undefined Function
- While looking over the widgets I noticed in the Gateways widget if you change the display type you get a Javascript e...
-
- Applied in changeset commit:7f054ea0b387cd8db372d92e04aed1a9c2ef028a.
-
- Applied in changeset commit:e7b5b82b121c76c4c6bf57229bfef0ea3bc33d5b.
-
- traffic_graphs.widget.php does not perform input validation on its settings, which can lead to a potential XSS due to...
-
- Applied in changeset commit:c083e1e49af4902d15173d412feebd8b86a616ee.
-
- The @top@ command output is printed to the user without encoding, so if a malicious process is started which contains...
-
- CSRF is deliberately disabled in some widgets stuch as traffic_graphs.widget.php but it's unclear if that is still ne...
-
10:25 AM Revision 3b41c8f3: Fix dyndns update with gateway group
-
- I can also add that when two RADIUS servers are declared as backend authenticators and the first on the list fails (e...
-
- The previous PR was reverted. Current PR is https://github.com/pfsense/pfsense/pull/3896 and it was merged on Jan 17.
-
- The acme.sh client supports ocsp must-staple;
if [ "$Le_OCSP_Staple" ] || [ "$Le_OCSP_Stable" ]; then
_savedo...
01/27/2018
-
11:28 AM Bug #8298 (Resolved): OpenVPN Wizard protocol defaults to "UDP IPv4 and IPv6 on all interfaces" causing problems
- The OpenVPN Wizard's default protocol is "UDP IPv4 and IPv6 on all interfaces (multihome). However, when you are bin...
-
09:39 AM Feature #2358: NAT64 support
- UPVOTE!!
at the moment I have to use an external router to do this!
01/26/2018
- 07:37 PM Revision d69a55e3: Fixed #8297 If user has no page permissions it will automatically log them out so they don't get stuck on the logout page
-
- Works better now, thanks!
-
01:47 PM
Bug #8297 (Feedback): User with no privileges cannot logout.
- Commit pushed. d69a55e3d647795477606e844f79bb94fc127f24
-
01:08 PM
Bug #8297 (Resolved): User with no privileges cannot logout.
- If there is a created user and they have no permissions they will see a page that says: "No page assigned to this use...
-
- Looks good now. SG-1000 with a VLAN WAN pulls an IPv6 address and default gateway now, without the "Do not wait for R...
-
12:00 PM pfSense Packages Bug #8229: syslog-ng stops parsing logs after logrotate run
- Well, tried syslog-ng-3.13.2_1 from http://pkg.freebsd.org/FreeBSD:11:amd64/latest/All/ but that went crazy after a c...
-
10:09 AM Feature #8257: pfSense Diagnostics -> Packet Capture support for loopback interface
- Tested build 2.4.3.a.20180126.0706
Navigated to Diagnostics -> Packet Capture
Localhost is available in interfa... -
06:17 AM Bug #8056: Bridge + CARP crashes/freezes pfSense
- Confirmed - I can also replicate this easily. CARP on a bridged interface, tested on 2.4.2 and 2.4.2_1 with no change...
-
- No functional change.
-
Also available in: Atom