Activity
From 03/04/2018 to 04/02/2018
04/02/2018
-
10:10 PM Revision bc12317e: Catch up with ports rename
-
- 08:41 PM Revision 523849d3: remove whitespace - pt. 2
-
07:42 PM Revision 37e1aecf: Fix function name typo
-
-
06:13 PM Bug #8363: OpenVPN Client Has Needs to be restarted after pfsense restart to be connectable
- changing some advanced settings and switching to udp solved my problem.
-
05:36 PM Bug #8419 (New): webgui, when menubar is fixed to the top of the screen, the last items of long menus cannot be seen/used.
- webgui, when menubar is fixed to the top of the screen, the last items of long menus cannot be seen/used.
fix: htt... -
05:14 PM Bug #8417: IPv6 bogon list size now too large to fit in standard maximum table size
- I think there's also mistake in the description on the settings page that could mislead people. If you've overridden...
-
- Applied in changeset commit:2d113b128f270302cc5380669f257e8bd1cb3a15.
-
- The IPv6 bogon list has grown to the point where it can no longer fit inside the stock value for maximum table size (...
-
- - Changed default value for Maximum Table Entries to 400000 in order to
make bogonsv6 to work
- Added code to upgra... -
- - Changed default value for Maximum Table Entries to 400000 in order to
make bogonsv6 to work
- Added code to upgra... -
02:24 PM Bug #8165: Fragmented at source IPv6 packets (UDP + ICMP Ping) are not forwarded / v2.4.2 AMD64
- Mike Nichols wrote:
> Johannes - thanks for you comments.
>
> AFAIK pf is an integral part of FreeBSD so we sti... - 12:14 PM Revision 85b10a47: Add copyright version param
-
11:45 AM Feature #8418: OCSP Stapling
- Peter Berbec wrote:
> With Letsencrypt offering wildcard, people may get in a situation where the certificate they u... -
- With Letsencrypt offering wildcard, people may get in a situation where the certificate they use has been "ocsp must ...
- 11:17 AM Revision 139598eb: Remove Whitespace
- I'm aware this is a very large commit. Let me know if you'd rather have it broken down by file type (ie: PHP/shell sc...
-
-
10:19 AM pfSense Packages Bug #8414: ntopng fails to start with Disable Alerts option
- For what it's worth I had found other report. I reported a new issue because #8277 was pre-release and indicates that...
-
- Duplicate of #8277
-
- Ntopng fails to start (core dumps) with the "Disable Alerts" (-H) option enabled. It starts fine without the option s...
-
08:28 AM pfSense Packages Feature #8416 (Resolved): Mailreport - Minute of the Hour
- Any chance of adding *Minute of the Hour* as an option in the schedule, I'd like a bit more granularity if possible.
... -
- A new version of ntopng is available now on 2.4.4 snapshots which should address this issue. Try it there and let us ...
-
03:15 AM Bug #6668: IPSec tunnel + L2TP/IPSec VPN - wrong PSK chosen by pfSense
- I tried the patch, without success.
*ipsec.secrets (without patch):*
<WANIP> @<DN> : PSK 0s<PSK-01>
: PSK 0s<PS... -
12:48 AM Feature #8415 (Duplicate): Add DNS over TLS (RFC 7858) fonctionality to dns resolver and forwarder
- See https://tools.ietf.org/html/rfc7858 for the proposed standard. The benefit to the user is out of the box DNS priv...
04/01/2018
-
07:34 PM Bug #7719: Dynamic DNS updates not working on interface failover
- This is working fine for me both on my edge and in my lab HA setup using he.net DDNS. You might want to take your con...
-
06:41 PM Revision 1ac3c88a: Redmine # 7769: Add support for Azure DNS to DynamicDNS
-
- Try the patch on the other ticket and add comments there.
-
- Same behavior as described in #6668
As long as the second (side-to-side) is aktiv, the only PSK that will match is... -
02:57 PM Bug #8165: Fragmented at source IPv6 packets (UDP + ICMP Ping) are not forwarded / v2.4.2 AMD64
- Johannes - thanks for you comments.
AFAIK pf is an integral part of FreeBSD so we still have to wait for the Fre... -
07:10 AM Bug #8165: Fragmented at source IPv6 packets (UDP + ICMP Ping) are not forwarded / v2.4.2 AMD64
- a possible hint:
Could it be a pf firewalling problem in handling ICMP?
While disabling pf via _pfctl -d_ the tra... -
- I also get following error message on first connection try after reboot (when connection fails):
@ioctl(TUNSIFMODE... -
12:39 PM Bug #8413: Virtual IP on PPPOE interface no longer working with 2.4.3
- Not sure this is a duplicate as it also affects PPPOE interfaces and not just on startup. Also happens when trying to...
-
- Duplicate of #8393
-
- When upgrading from 2.4.2 to 2.4.3 the IP aliases on the PPPOE interface stopped working.
Before upgrading they we... -
11:46 AM Bug #8381: Cert manager requires fields that aren't necessary
- FYI: RFC 5280 obsoletes RFC 3280, but provides the same guidance. I wasn't consistent previously, my apologies.
-
11:22 AM Bug #6974: radvd enabled on a disconnected interface kills RA completely on all interfaces
- Hi, the fix to this bug breaks radvd for bridge interfaces, which subsequently breaks IPv6 routing within/out of the ...
-
- Try "Enable Compression (stub)" which is the closest equivalent in the updated syntax.
Our code is formatting thin... -
04:51 AM Bug #8412 (Rejected): OpenVPN compression setting ignored
- Compression setting in the GUI is ignored. Always expects comp-lzo no matter what you select.
Log entry with "No L... -
- Open PR for this issue: https://github.com/pfsense/pfsense/pull/3922
03/31/2018
-
-
- It should be rejecting that input rather than switching to 'any'. The only text allowed in those boxes should be vali...
-
02:42 PM Bug #8410 (Resolved): unable to use registered services by name and unable to define aliases for registered services using their name
- related to some degree to bug 8409, i've found that i'm unable to create aliases for registered services using their ...
-
- IIRC it is checking well-known and registered ports, basically anything in /etc/services which are considered keyword...
-
-
- when attempting to add a new port alias [firewall -> aliases -> ports -> add], for example, for mdns [udp port 5353],...
-
- Looks like host overrides might need some adjustments with dnsmasq 2.79. It is not in builds yet but once master swit...
-
-
05:36 PM Bug #8393 (Resolved): IPAlias VIPs on localhost are not applied at boot.
-
- Works for me. Thanks Luiz!
-
05:02 PM Bug #7719: Dynamic DNS updates not working on interface failover
- I have tested Dynamic DNS on 2.4.3 to see if dynamic DNS would finally work for the several multi WAN with HA sites w...
-
- Tested with 2.3.4 - IPsec still does not fail back to primary until reauth.
A checkbox that forced IPsec to rebuil... -
- Understood.
The usual reason is that is what pfBlockerNG's DNSBL does by default - places a 10.10.10.X IP Alias VI... -
02:51 PM Bug #6799: Negating ``<interface> net`` when a VIP exists on the interface results in unintended behavior
- LAN Interface: 172.25.232.1/24
IP Alias VIP on LAN: 10.10.10.10/32
You’ve defined LAN here to include both.
S... -
- The following rule is generated due to a IPv6 alias being present, this is supposed to fill a array of vips6 , but ad...
-
12:00 PM
Bug #8407 (Resolved): FRR BGP MD5 support is broken
- This is a continuation of #7969
I recently upgraded some systems from 2.3.5 to 2.4.3 and found that FRR BGP MD5 su... -
11:56 AM Bug #8406 (New): DDNS IPV6 Cloudflare Client does not detect PPOE address
- The ISP uses PPPoE for connectivity. The Cloudflare DDNS client properly detects the PPPoE IPv4 address. The Cloudfla...
-
11:52 AM
Bug #7969: md5 bgp sessions fail in 2.4.0
- I recently upgraded some systems from 2.3.5 to 2.4.3 and found that FRR BGP MD5 support is now broken. When the outgo...
-
- Looks like the same issue as #8393
-
06:59 AM pfSense Packages Bug #8405 (Duplicate): pfSense 2.4.3 breaks HAProxy if using VIP
- If using a VIP for HAProxy instead of localhost, the upgrade to 2.4.3 creates the following error. Changing from the ...
-
- After upgrading from 2.4.2_p1 to 2.4.3, just the last added (active) IPSec tunnel <PSK> matches in PHASE-1.
All ot... -
- IP aliases can be used with CARP vhids too.
Reported by: PiBa
Ticket: #8393
(cherry picked from commit b... -
- IP aliases can be used with CARP vhids too.
Reported by: PiBa
Ticket: #8393 -
03:17 AM Revision deb4dba6: Enhanced sshdkeyonly Drop-Down List for Clarity...
- Enhanced sshdkeyonly drop-down list for clarity, as per https://github.com/pfsense/pfsense/pull/3922#pullrequestrevie...
-
- Enhanced sshdkeyonly drop-down list for clarity, as per https://github.com/pfsense/pfsense/pull/3922#pullrequestrevie...
03/30/2018
- 11:01 PM Revision 179377b0: Remove Whitespace
- I'm aware this is a very large commit. Let me know if you'd rather have it broken down by file type (ie: PHP/shell sc...
-
- /usr/local/www/system_advanced_admin.php uses incorrect/inconsistent $config sshdkeyonly references.
- lines 106-1... -
- Incorrect target version - should be 2.4.5.
-
- To allow key _and_ username+password combination (in contrast to key OR password) i.e. if selected in the System>Adva...
-
- I was looking forward to running 2.4.3 to see if dynamic DNS would work.
My latest testing on 2.4.3 is ddns still ... -
- I was looking forward t0 running 2.4.3 to see if dynamic DNS would finally work.
My latest testing on 2.4.3 is ddn... -
- I forgot about these, I had the 'CARP isn't a interface anymore' thinking in my head.
Should be fixed now.
Thanks! -
- Hi Luiz,
To have multiple highly available IP's on 1 interface its possible to configure a vip of type "alias" and... -
- Can you please elaborate PiBa ?
-
- Seems now a IPalias under a CARP parent is not applied.?
-
- 06:47 PM Revision 49c1dfc0: Merge pull request #3915 from cxcv/proxyarp
- 06:46 PM Revision 8d26774f: Merge pull request #3916 from robjarsen/tweak/cf-spelling
- 06:45 PM Revision cd4ee470: Merge pull request #3919 from PiBa-NL/20180329-copyright-showonce
-
- A recent change changed the IP alias setup to only happen on enabled interfaces. As the loopback interfaces do not h...
-
- Changes to allow key and password combination (in contrast to key OR password) i.e. if selected in the Admin>Advanced...
-
- Changes to allow key and password combination (in contrast to key OR password) i.e. if selected in the Admin>Advanced...
-
- A recent change changed the IP alias setup to only happen on enabled interfaces. As the loopback interfaces do not h...
-
11:06 AM Bug #8401 (New): Issues related to keys representing alphabetic characters specific to Scandinavian languages and to some other keys.
- *Description of problem:* Issues related to keys representing alphabetic characters specific to Scandinavian language...
-
11:00 AM pfSense Packages Bug #8400 (Closed): FreeRadius 3 EAP-TLS Missing O.U. Option
- Under Services-->FreeRADIUS-->EAP-->EAP-TLS
The Organizational Unit (O.U.) is missing from the option for:
"Che... -
09:04 AM Bug #8396: Upgrade 2.4.2_1p to 2.4.3 Fails
- Sniffer trace showed that files00.netgate.com will resolve to both IPv4 and IPv6. The IPv6 side of that server is no...
-
- Most likely something specific to your system/setup/hardware. Please post on the forum, pfSense subreddit, or mailing...
-
- I can add them to the redacted field list.
That said, these are from packages and the base system status.php can't... -
-
- OK, but if you can reproduce the original missing route problem, gather as much detail as you can before restarting t...
-
07:07 AM Bug #8398: No route for openvpn tunnel addresses
- It looks OpenVPN server" > "Advanced Configuration" > "gateway creation" was unrelated to missing routes. Probably o...
-
- On SG-1000 - OpenVPN server" > "Advanced Configuration" > "gateway creation" defaults to "Both"
There was no any rou... -
- Netgate 701 is this issue exactly.
-
05:37 AM Bug #8399 (Duplicate): Coreboot
- We have a report of a user with this issue:
The upgrade went smoothly here, but I'm wondering if anyone else is havi... -
-
06:15 AM Bug #8397: after upgrade 2.4.2 -> 2.4.3 gui error
- the source guardion encoder component has broken. i removed. we can close..
-
- Fatal error: Cannot redeclare index_groups() (previously declared in /etc/inc/auth.inc:238) in /etc/inc/auth.inc on l...
03/29/2018
-
09:28 PM pfSense Packages Feature #8362: Snort and Suricata Package - Allow for changing URLs, Ports, and Protocols to allow for local Repo of Signature Updates
- This feature was added in the Suricata GUI package v4.0.4_1 pull request posted on GitHub here: https://github.com/pf...
-
- The gui fails with no real messages, the CLI just freezes, it appears to be failing at:
arj: 3.10.22_5 -> 3.10.22_7... -
07:02 PM
Bug #8395: #6677 broke IP Aliases on loopback interfaces
- Duplicate of #8393.
-
06:28 PM
Bug #8395 (Duplicate): #6677 broke IP Aliases on loopback interfaces
- The fix for #6677 broke IP Aliases on loopback interfaces (type "Localhost") in that they no longer come up on reboot...
-
-
04:47 PM
Bug #8393 (Assigned): IPAlias VIPs on localhost are not applied at boot.
-
- Works fine for me too, no need to go back into the VIPs and resave.
-
04:18 PM Bug #8393: IPAlias VIPs on localhost are not applied at boot.
- That works here.
-
04:16 PM
Bug #8393: IPAlias VIPs on localhost are not applied at boot.
- We're testing the patch now.
Patch resolves the issue. -
- I've noticed that to, can you try the patch?: https://github.com/pfsense/pfsense/pull/3920
-
- An VIP configured like:...
-
04:31 PM Bug #8247: When in bridge / transparent mode, pfSense blocks UDP/4500 & ESP traffic regardless of origin
- Fast Forward to a new pfSense 2.4.3 installation in *routed* mode and the same behavior occurs:
* Only one rule in... -
- Raised an issue with support to do with 2.4.3 and an issue at boot time https://redmine.pfsense.org/issues/8393
Wa... -
02:26 PM Bug #8335: System hang with LACP downlink to UniFi switch
- I can confirm that this is still an issue on pfSense 2.4.3-RELEASE and UnFi firmware -3.9.21.8191- 3.9.27.8537.
-
- We have previously seen this on VMs when run as HA.
When the on-board switch is segregated using VLANs to provide ... -
-
- This reverts commit 663c7586393c9d4bcd17c3312a24088ee3a3eac9.
-
-
- This reverts commit 72fcd11a4c5f743990eb2f62789fb292e52bbde5.
-
-
- This reverts commit 5c1132bf0d796295b9b56fd93631c606f8ccd660.
-
-
- This reverts commit 29c5272404bdb35a3ac64e6bfcefae02c56e9466.
-
- PR was merged months ago, submitter has tested and confirmed it works.
03/28/2018
-
- (cherry picked from commit 5ac478f23b69d42b29ce7f960ba48b2f425f0754)
-
-
- Applied in changeset commit:5ac478f23b69d42b29ce7f960ba48b2f425f0754.
-
- OpenVPN Wizard creates WAN rule with TCP4 instead of protocol TCP, it creates error when loading firewall rules
-
12:30 PM Bug #7995: pfSense Certificate Manager Issues Blank Certificates
- We are also seeing this issue in production. I posted to the subreddit, but everything seems to be exactly the same ...
-
02:15 AM Bug #8226: Pass-through MAC automatic additions adds duplicate
- I'm running the latest pfsense version for PCEngines_APU-45 "2.3.5-RELEASE-p1" can we get this backported please?
03/27/2018
-
06:44 PM Bug #8389: OpenVPN servise status does not update
- Definitely see it on 2.4.2-RELEASE-p1 will test after next update
-
- 05:21 AM Revision 6aefdd43: Patch for specifying router preference for the default ipv6 route pushed by radvd.conf
-
- I was pleaeed to see this bug get reported and reported as fixed, but Dynamic DNS for me in multiple sites simply doe...
-
- I too have major Dynamic DNS issues. It quite simply doesn't work. We have pfSense clustered in mutiple sites, with W...
03/26/2018
-
-
- 07:28 PM Revision a6cbe5e4: Remove the possessive
- 11:49 AM Revision f957f765: Move copyright notice to /conf
- 11:49 AM Revision 70bc2608: Fix copyright typo
- 11:49 AM Revision e04f2e13: Further copyright updates
- 11:49 AM Revision 95eaeea8: Revisions to copyright text
-
- Works OK now, and no PHP errors when the picture is missing.
-
07:47 AM
Feature #8371 (Feedback): Reduce config.xml size by removing picture widget images to file system
-
- Tested and resolved.
-
- It works OK here for me, but I do not have a cisco device to test against, only other FRR/Quagga/OpenBGPD instances.
... -
-
- This doesn't seem viable to support, but maybe in the future. The current page and its text-based operation will not ...
-
07:02 AM
Bug #8389 (Feedback): OpenVPN servise status does not update
- Have tested this on a number of different systems but unable to reproduce.
Please update to latest snap and retest. -
- I partially fixed the issue by adding dns 2620:fe::fe and then deleting it.
Now I only see one error message at bo... -
- Hi,
I often see following log entries that I didn't see before removing HE.net tunnel in latest RC build.
78.46.2...
03/25/2018
- 08:40 PM Revision ef7e8885: Move copyright notice to /conf
-
- Confirmed. MAC spoofing is broken on bridge interfaces and still broken in 2.4.4a. Testing on CE amd64.
Initially:...
03/24/2018
- 06:33 PM Revision 1ea2a37e: Fix copyright typo
- 12:49 PM Revision 6fb38a04: Further copyright updates
- 12:44 PM Revision c0debf5b: Revisions to copyright text
-
- On the pfSense Dashboard => Service status, see OpenVPN service status.
Regardless if OpenVPN is on or off, status... -
08:22 AM Feature #8388 (Resolved): Add DNS over TLS for upstream forwarders to the DNS Resolver
- GUI options to set DNS over TLS.
Currently you can do this by adding a stanza to the custom options on unbound.
...
03/23/2018
-
- 03:33 PM Revision 6ae6d723: Change reported version to installed version rather than product version for more detail
-
-
10:40 AM
Bug #8387 (Closed): Cannot use large CRLs
- Attempting to import CRL data for certificate authorities via the "System > Cert. Manager > Certificate Revocation" w...
-
08:19 AM Bug #7958: Upgrade 2.4.0: IP alias with FQDN doesn't work any more
- Edgardo Rodriguez wrote:
> Hi,
> I am also having the same issue, and it's quite annoying...
> In my case, filterd... -
07:21 AM pfSense Packages Feature #5052: Avahi Proxy Package: Add option to disable/control cache size.
- could you please add an option to set cache-entries-max=0 (or other arbitrary avahi config options?) - see below, it ...
03/22/2018
-
- #define ENODEV 19 /* Operation not supported by device */
if (memcmp(&(f-... -
04:53 PM Bug #8386 (Not a Bug): Virtual IPs not considered as part of interface net
- Every network interface with ips configured has a variable "INTERFACE net" which can be used in firewall rules to sel...
- 02:56 PM Revision 8062e6a4: Change reported version to installed version rather than product version for more detail
-
02:09 PM Bug #8179: Incorrect reverse DNS zone in DHCP server config for non-octet-aligned subnet mask
- Alfred Barnat wrote:
>
> This should have been:
> zone 208-209.24.172.in-addr.arpa {
> primary 127.0.0.1;
>}... -
- OpenVPN is extremely useful for providing authentication and encryption for remote branch locations and individual ro...
-
12:12 PM Bug #8355: Upgrades and packages unavailable after upgrade from 2.3.3_1 to 2.3.4_1
- 2018-03-22@17:11:25 (Thu) Have encountered exactly the same problem :-(
- 11:55 AM Revision ae78f278: Simplify copyright notice display
-
05:57 AM Feature #8384 (Rejected): Pushbullet notifications would be nice
03/21/2018
- 07:35 PM Revision a1ec79f3: Simplify copyright notice display
-
03:05 PM Bug #8383 (Duplicate): OpenBGPD not working with MD5 passwords
- I am using OpenBGPD on 2.3.5 and am peering using an MD5 password to a Cisco device, when I upgraded to 2.4.2, the MD...
-
- I am using OpenBGPD on 2.3.5 and am peering using an MD5 password to a Cisco device, when I upgraded to 2.4.2, the MD...
- 02:28 PM Revision 00a1311e: Update obsoleted files
- 02:28 PM Revision 3a910ee1: Make copyright notice downloadable from server
- Trigger cpyright notice on completion of setup wizard
- 02:25 PM Revision e84812a1: Update obsoleted files
- 02:11 PM Revision c8c15bf5: Make copyright notice downloadable from server
- Trigger cpyright notice on completion of setup wizard
03/20/2018
-
- (cherry picked from commit 45b421561d969e73b7df4ab23a3256acce5929eb)
-
03/19/2018
-
- Clarifying that last line:
RFC 3280 defines how the subject of a certificate or CA must be specified. Ideally, the... -
- Attempting to generate a CA or certificate via the cert management tool in the web GUI yields the following error:
... -
-
01:28 PM Bug #8380 (New): OpenVPN RADIUS password length is not constant
- Hi there,
I've been running a production OpenVPN server on pfSense for the past year and I have recently switched ... -
03:08 AM
Bug #8379: rules with DSCP never match
- Post removed, apologies, will post in forum.
Edit: Now I understand my mistake, I agree, this is #notabug -
- This is not a discussion forum. Please start a topic at https://forum.pfsense.org/
I expect this will be closed as... -
02:27 AM
Bug #8379: rules with DSCP never match
- Thanks for the followup Chris.
I will do some more testing - I am using VirtIO/vtnet interfaces, is it possible that... -
- Could not duplicate on 2.4.2_1:
Set laptop switchport to set dscp 14
Set floating rule to match AF13 and log
... -
02:53 AM Todo #765: Patch: Add custom DHCP configuration
- It seems this is still not integrated in pfSense 2.4.
- 12:09 AM Revision 07a84ece: missed a few
03/18/2018
-
11:02 PM
Bug #8379: rules with DSCP never match
- erno rubbik wrote:
> Hello
>
> I am aware this looks like a duplicate of bug 3726 https://redmine.pfsense.org/iss... -
05:03 PM Bug #8379: rules with DSCP never match
Hello
I am aware this looks like a duplicate of bug 3726 https://redmine.pfsense.org/issues/3726 but it's not
...-
- Hello
I am aware this looks like a duplicate of bug 3726 https://redmine.pfsense.org/issues/3726 but it's not
I... - 08:14 PM Revision c5e1ce90: Change CloudFlare to Cloudflare
- This commit also includes misc. whitespace removal on the affected files.
-
- I have tested this. I could easily trigger it in 2.4.2_1 but could not in current snaps. It looks to be solved.
An... -
- currently, the webconfigurator listens on all network interfaces. please implement a mechanism to allow this to be c...
-
- As the description, the mouse over display is always shown as b/s regardless on the bits/Bytes setting.
Seen in: p...
03/17/2018
-
- Ermal says there is code in Darwin that addresses this.
-
- currently, characters in alias names are restricted to "a-z, A-Z, 0-9 and _". this is annoying because it's common t...
- 07:22 PM Revision a7e859b8: fixed code style
-
- when configuring email notifications, and enabling encryption, message notifications fail if the certificate provided...
-
- the email notification settings page [system -> advanced -> notifications -> e-mail], system_advanced_notifications.p...
-
- the system root certificate store [/usr/local/share/certs/ca-root-nss.crt] includes a default set of certificates, bu...
-
- status -> system logs -> firewall -> dynamic view [status_logs_filter_dynamic.php] appears to refresh approximately e...
- 02:47 PM Revision d038a5dd: Don't read picture file if it does not exist
03/16/2018
- 07:22 PM Revision 12b8f3c9: Don't read picture file if it does not exist
- 04:30 PM Revision 7c0e431a: avoid firwall rules for proxyarp addresses
-
-
-
-
-
-
-
-
- Upgraded with a picture in the widget and it was broken after the upgrade. No sign of the image in /conf/
Missing ... -
- new VM, setup picture, downloaded a backup. reset to factory defaults, restored backup, no Image in the widget: Scree...
-
10:51 AM
Feature #8371 (Resolved): Reduce config.xml size by removing picture widget images to file system
- Images now saved in /conf
Upgrade_config function writes any images out to file system and truncates the config.xml ... - 01:23 PM Revision 1f0bbb13: Revise picture widget to store image on file system, not in XML config
- 01:20 PM Revision 9099582c: Merge branch 'master' of gitlab.netgate.com:pfsense/pfsense
- 01:08 PM Revision ee28e293: Revise picture widget to store inamge on file system, not in XML config
-
01:05 PM Feature #4821: PPPoE WANs do not take full advantage of NIC driver queues for receiving traffic
- I will but I was hoping that pfSense people would also push FreeBSD on it, since I'm sure they have a much stronger a...
-
- Since this is a missing feature in FreeBSD networking, you should lobby there for it to be addressed, not here:
ht... -
- Now that the Spectre and Meltdown patches are coming out on various OSes this becomes even more critical to fix becau...
-
- The part of this that was broken in pfSense is OK now, but it looks like haproxy will need to implement its own funct...
-
- Tested and working.
03/15/2018
-
- Inspired by: https://svnweb.freebsd.org/base?view=revision&revision=331015
-
-
11:56 AM Feature #8370 (Closed): Add port number to predefined port drop-down list in NAT Rules
- Hi
I'm missing the port numbers for the predefined ports when creating a NAT rule.
When creating a firewall rul... -
- This appears to have been triggered by a DNS issue, so if there is any problem it is likely the same as #7413.
-
-
-
03/14/2018
-
-
-
10:13 PM Bug #8208: Restoring a config in 2.4.2 with 2.3.X Security/Errata Only repo selected breaks PHP
- 2.3.4 Config with 2.3.X Errata Repo restored to 2.4 systems will break.
2.3.4 Config with 2.4.X Repo restored to 2.4... -
-
- 01:50 PM Revision f9b1c128: Fix case where $_POST['if'] == 0 in sprint_info_box()
-
- This issue seems to be fixed (again) in my local tests.
Please check with tomorrow's snapshot. -
- Until it's proven to be a bug on pfSense (after discussion on the forum, subreddit, etc) then it doesn't belong here....
-
12:38 PM Bug #8368: Cannot log into webConfigurator from Firefox/Linux after fresh install
- I would agree about this being a client side issue if logins were to fail for every web site I visit. However, this i...
-
12:08 PM Feature #6457: Allow ability to configure AWS EC2 AMI via userdata
- A means of running a shell script in some manner as root at first launch would be helpful, a la `fetch -o - $USER_SCR...
03/13/2018
-
- This kind of thing should be discussed on the actual forum at https://forum.pfsense.org, on the pfSense subreddit, or...
-
11:30 PM Bug #8369 (Rejected): Setting password complexity
- Hi All,
This is my first post on this forum, not very sure this is the right page I have to mention this topic.
... -
- There is no such problem with pfSense itself. That is a client side issue.
-
- Since this is a live system (on which I rely for Internet access), I cannot easily reproduce the issue with the same ...
-
- To reproduce:
* Install pfSense 2.4.2 from scratch.
* Assign interfaces, configure an IP address and DHCP server ... -
05:54 PM Bug #8367 (Resolved): Traffic Graph widget shows Inverse view, even when Inverse is set to Off.
- Tested in 2.4.3.a.20180313.0000.
When setting the Traffic Graph widget for Inverse=Off, the graph still displays i... -
-
- This feature has been implemented using code submitted by a package contributer. This issue can be closed.
Bill -
-
- This issue has been resoved in the 3.2.9.6 Snort package versions. The bogus text was coming from an attempt to use ...
-
- I will look at adding this feature to both packages. It would likely be just a text box where the admin could enter ...
-
- Agreed, Bill. It's not worth the trouble to make them persist.
-
- This is not going to happen as there is no need for all the necessary overhead persisting blocks would require. If S...
-
- James Dekker wrote:...
-
05:54 AM Bug #8333: Dynamic DNS updates may fail when using a gateway group as the interface when the default route is down
- Well. I setup new one 2440 with latest 2.4.3 And 2 GW with Active/Passive GW group. Looks like DDNS should work becau...
-
05:46 AM Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel
- For reference, the upstream bug opened by Eric: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=226411
-
- +1
Just bumped into the need to do a fresh install of a LAGG+VLAN setup and could not do it via CLI.
03/12/2018
-
11:44 PM pfSense Packages Bug #8366: Avahi: "Publish DNS Servers" option does nothing
- https://github.com/pfsense/FreeBSD-ports/pull/504
-
- The "Publish DNS Servers" option is not being used when generating the avahi config which causes the DNS servers to a...
-
- When restoring backup, delete packages not present in new config.xml
-
- When restoring backup, set default pkg repository
-
- When restoring backup, do not call pfSense-upgrade on boot
-
-
-
-
-
-
- Applied in changeset commit:a55718c848d8534ba0e0dc87dd50a027aad64512.
-
- We have our own internal controls to handle refererring URLS, so that header isn't desirable.
Reading about X-XSS-... -
-
-
-
- Confirmed working by multiple tests and users.
-
-
06:37 AM Bug #7600: Unable to save DNS Resolver settings
- I have also just faced this problem on my 2.3.5-RELEASE-p1 (i386) nanobsd (2g). Interesting is, that adding Host Over...
03/11/2018
-
08:49 AM Feature #8365 (Resolved): Button to copy rules from one interface to another
- Hello,
I just wanted to request a feature that i think is very helpful and almost necessary to have. I recently ad...
03/10/2018
-
04:57 PM
Bug #8364: Multiple IPsec child SA entries
- ...
-
- Current Base System 2.4.3.a.20180309.1836
Connecting IPSec creates multiple ChildSA's:
Shell Output - ipsec sta... -
01:02 PM pfSense Packages Bug #8340: Status_Traffic_Totals Error
- An update note:
If I go into the package settings and disable graphing, then re-enable it, the problem appears sol... -
- Hi,
This is a weird bug I encountered in last couple of the dev 2.4.3 builds.
The openvpn client interface at b... -
- Unable to duplicate after testing most of the day, multiple versions, multiple rule changes and configurations, multi...
03/09/2018
-
-
-
-
01:54 PM
Feature #8356: igmp, Add option to disable the igmp service
- Works as expected. With the checkbox unchecked, igmp proxy is disabled and not running. With the checkbox checked, ig...
-
- Applied in changeset commit:ca5270b6540f374ea63fff912807a07ce2ef99eb.
-
-
01:06 PM
Feature #8356: igmp, Add option to disable the igmp service
- With igmp proxy configured on 2.4.2(or p1), upgrade to 2.4.3 (running 2.4.3.a.20180308.1837 here). The config keeps i...
-
11:54 AM
Bug #8048: DHCPv6 Configured for LAN without LAN interface
- Hit this on 2.4.3.a.20180308.1837. Workaround works.
-
- Works
-
- It was already fixed in commit ee4701adf85a6b5cb2f8d37f5fdeb7a5668eb674 almost a month ago. I forgot to update the ti...
-
07:52 AM pfSense Packages Feature #8362 (Closed): Snort and Suricata Package - Allow for changing URLs, Ports, and Protocols to allow for local Repo of Signature Updates
- We should have the ability to change the URLs, ports, and protocols used (perhaps even include option for SCP/SFTP) s...
-
-
-
- Tested on Current Base System 2.4.3.a.20180308.0950
Confirmed no issues with users in captive portal creating ACB ... -
12:50 AM Revision 46ffb68f: Migrate firewall rules to create_interface_list()
-
03/08/2018
-
06:44 PM Feature #3882: Add OUI database to the base system, remove dependency on nmap
- Why not reuse this: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=blob_plain;f=manuf;hb=HEAD the license...
-
05:49 PM
Feature #8191: IPv6 - Support for configuring multiple DUID types
- The different DUID types also appear to be formatted and stored in config.xml correctly for each respective option.
... - 05:04 PM Revision 1dfb84de: Merge pull request #3911 from PiBa-NL/20180304-igmp-disable
-
-
-
-
- This will be a larger factor when it is time for PHP 7
-
-
- PR has been merged
-
-
01:45 PM
Bug #8302: traffic_graphs.widget.php potential XSS via settings
- On 2.4.2 CE, added traffic graph widget to dash, set refresh interval to 1s, saved, backed up config and edited the c...
-
01:13 PM Bug #7604: Bug #6594 is not resolved: Waiting for Internet connection to update pkg metadata and finish package reinstallation
- G Black wrote:
> At the moment booting appears to stop with this error, hit Ctrl+C to break out of the process
> ... -
-
11:40 AM
Bug #8300: diag_system_activity.php: Potential XSS due to encoding of process output
- Running
grep -r '<script>alert(1)</script>' /
from shell on 2.4.2 generated an alert on Diag > System Activity... -
- Applied in changeset commit:2e08a64666620c8e0dd28eb7c14393bee7b2bfa8.
-
- I have a working prototype for Azure DNS in my fork:
The updated files are /etc/inc/dyndns.class, /etc/inc/services.... -
-
05:06 AM Bug #7502: Cannot set router lifetime to 0 in radvd
- Tested router lifetime configuration under services_router_advertisements.php
2.4.2_p1 return an error message
2... -
-
- Tested under 2.4.3
Dashboard: Current date/time Thu Mar 8 13:48:09 IST 2018
NTP Status Widget: Server Time 13:48... -
03/07/2018
-
- Confirmed not working in 2.4.2-p1, confirmed working on Système de base actuel 2.4.3.a.20180224.1931
Can be closed -
- Thanks for testing!
-
01:34 PM pfSense Packages Bug #8352: Write certificates to file system after renew not working for ACME v2
- Jim Pingle wrote:
> Fixed in ACME package version 0.2.3
I updated my package and confirmed this is resolved.
The... -
- Fixed in ACME package version 0.2.3
-
- This was a bug upstream in acme.sh that only affects ACME v2. After processing the certificates, the script unintenti...
-
- Attached patch should fix it, waiting for confirmation before committing.
-
09:40 AM Feature #8361 (Resolved): Add entered name to captive portal status and logs
- When using the captive portal with "Authentication: None", it would be useful to log the name the person enters in th...
-
- Fixed in ACME package version 0.2.3
-
07:23 AM Bug #8335: System hang with LACP downlink to UniFi switch
- Mike Pastore wrote:
> Jeff Wischkaemper wrote:
> > I have an HP unmanaged switch on the LAN side of the network
> ...
03/06/2018
-
- Jeff Wischkaemper wrote:
> I have an HP unmanaged switch on the LAN side of the network
Can you try a different s... -
- Very similar to #2883
I have been unable to duplicate this but have seen enough tickets/forum posts to warrant a l... -
03:27 PM Bug #7774: No TCP Reply State Established on GRE in IPsec Transport
- For what it is worth, I have reproduced this on stock 12-CURRENT.
-Eric -
- For what it is worth, I have reproduced this on stock 12-CURRENT.
-Eric -
-
-
09:46 AM Feature #7495: Ability to set TTL for local for Unbound host overrides and dhcp leases
- Nothing? This came up in a thread again someone asking how to modify this.
https://forum.pfsense.org/index.php?top...
03/05/2018
-
- Tested on 2.4.3.a.20180305.1550
Was able to sync expired vouchers in both directions, resolved. -
-
01:06 PM Feature #4821: PPPoE WANs do not take full advantage of NIC driver queues for receiving traffic
- Not as of a couple of months ago. I contacted pfSense tech support (since I was using their hardware) and was basica...
-
03:56 AM Feature #4821: PPPoE WANs do not take full advantage of NIC driver queues for receiving traffic
- Took me a while to land on this issue. I'm facing similar issues not being able to utilize my full PPPoE WAN speed. U...
-
- It is working fine here sourcing from a CARP VIP, you likely have some other configuration error causing this (like u...
-
10:33 AM Bug #8359 (Not a Bug): Packets from phase1 bound to CARP VIP do not have the right source address
- Hello,
I have a cluster with one member having a wan IP of 192.168.0.1. I have configured a CARP VIP of 192.168.0.10... -
- (cherry picked from commit 9aa103bac303899471ac71205f0bc078f0718939)
-
-
-
02:48 AM Bug #8357 (Resolved): Static mapping of dhcp leases on bridge interfaces links to the real interface.
- Hello everyone,
I've just discovered pfsense and it's such a great tool that i decided to replace my old dd-wrt ro...
03/04/2018
-
-
-
- Add option to disable the igmp service
https://github.com/pfsense/pfsense/pull/3911 -
01:25 AM Bug #8355 (Not a Bug): Upgrades and packages unavailable after upgrade from 2.3.3_1 to 2.3.4_1
- I was running PFSense 2.3.2 and via the Dashboard, opted to upgrade to the release presented: 2.3.3_1. It wound up u...
Also available in: Atom