Activity
From 03/13/2018 to 04/11/2018
04/11/2018
-
09:40 PM Bug #8453 (Not a Bug): NAT reflection can't work when NAT port faword set Destination port range
- NAT reflection can't work when NAT port forward set Destination port range.
it can work when setting single NAT p... -
06:35 PM Bug #8417 (Resolved): IPv6 bogon list size now too large to fit in standard maximum table size
-
06:13 PM
Bug #8417: IPv6 bogon list size now too large to fit in standard maximum table size
- Tested on pfSense CE version: 2.4.4 Built On: Wed Apr 11 14:31:44 CDT 2018 .. after upgrading from 2.4.2. Nothing wro...
-
04:19 PM Bug #8452 (Closed): PPPoE :: Interfaces > WAN: [PPPoE Configuration] Service name :: colon not allowed (invalid character)
- I have noticed that a colon is not allowed in the "Service name" of a PPPoE configuration under "Interface > WAN".
O... -
01:15 PM Todo #8451 (Resolved): System Information dashboard widget - Kernel PTI toggle
- When editing the System Information dashboard widget, all sections of the widget can be toggled on or off. Since the ...
-
02:11 AM Bug #8450: High Availability Sync / xmlrpc.php removes "remote system username" on backup cluster member
- OK now we're getting somewhere. I can confirm that there is something to look at here regarding syncing users from th...
-
01:56 AM Bug #8450: High Availability Sync / xmlrpc.php removes "remote system username" on backup cluster member
- No, the xmlrpcsync user does not exist on the primary. However, since the "user manager users and groups" checkbox is...
-
- Does the xmlrpcsync user exist on the primary?
I use a custom user (xmlrpc) for this and it survived the upgrade, ... -
- Two-member cluster:
- Primary: upgraded from 2.4.2-p1 to 2.4.3 using the GUI
- Backup: issue occurs both after an u...
04/10/2018
-
08:05 PM Bug #8076: User can easily apply an unusable interface configuration after restore
- This is exasperated by the fact that in previous versions of pfSense when you got the "reassign interfaces" page afte...
-
-
01:28 PM Bug #7443: Issues Creating IPv6 Static Mappings
- The actual lease works now, so now I am just basically verifying the original bug report. Its cosmetic only but I agr...
-
- Did this ever get fixed? I ended up at this page trying to diagnose static ipv6 mappings.
I have configured static... -
-
12:58 PM pfSense Packages Bug #8440: Suricata 4.0.4_1 disablesid.conf does not disable rule?
- This is not a bug. The rule being triggered was a flowbit rule. Therefore, the disablesid.conf could not disable the ...
-
-
-
03:31 AM Bug #8448: Log size modification broken
- In addition, -after three consecutive size changes- when you start with a very large number, the file doesn't stop gr...
- 12:48 AM Revision 41270b74: Delete loader.conf.local
- 12:48 AM Revision 3173cf70: Delete IF_URNDIS.KO
- 12:48 AM Revision c344add2: rename
- 12:47 AM Revision 072e0e93: Create loader.conf.locat
- 12:46 AM Revision a397fd7a: ndis driver
-
12:16 AM Bug #8426: Mobile IPSec login not working after upgrade from 2.4.2p1
- Seeing the same error ("The VPN Shared Secret is incorrect.") on iOS. Exact same config worked before the update to 2...
04/09/2018
-
-
-
-
07:37 PM pfSense Packages Bug #8425: telegraf not reporting memory
- Can confirm this same behavior. An upstream bug was also filed: https://github.com/influxdata/telegraf/issues/3750
-
07:26 PM
Bug #8410: unable to use registered services by name and unable to define aliases for registered services using their name
- Tested on latest 2.4.4 CE snapshot gitsync'd to master, works as expected. Setting port to other and using the name, ...
-
- Applied in changeset commit:885e9b2a1df256f4d50367f96b4d39c1106b2448.
-
- @is_port()@ from /etc/inc/util.inc tests a string against known services by name to determine validity, not just numb...
-
07:15 PM
Bug #8409: pfsense alias complains about well known name for non well known port
- Tested on latest 2.4.4 CE snapshot gitsync'd to master, works as expected.
-
- Applied in changeset commit:a2405c1a8c366e1ad2ececd4f62c577eed31ab7c.
-
04:01 PM pfSense Packages Bug #8438: haproxy: can't use ACL for cert with http-response actions
- The haproxy_config_init() is a new function added in the second last commit. Not sure why that wouldn't exist after u...
-
03:41 PM pfSense Packages Bug #8438: haproxy: can't use ACL for cert with http-response actions
- Updated and tested all of the above - looks alright.
Only right after the update I encountered one issue:
- I was... -
- Okay 0.56 haproxy-devel package is available now through normal pfSense packages. If you can check 'everything' now w...
-
- Confirmed here as well. It works as it should now. Switching to IPv4+IPv6 disables the gateway edit control, then swi...
-
01:01 PM
Bug #8447: Cannot change Gateway in Firewall > Rules
- Tested on latest CE snapshot gitsynced to master, works as expected. Editing an IPv4+IPv6 rule's gateway is possible ...
-
09:20 AM
Bug #8447: Cannot change Gateway in Firewall > Rules
- Applied in changeset commit:1d523d1e4e7b16519ed3fd9dfb9e6b4dd84b4285.
-
09:07 AM
Bug #8447 (Feedback): Cannot change Gateway in Firewall > Rules
- Should be fixed in the next snapshot. Please confirm here.
-
- Confirmed here, too. Create a new rule, Gateway is changeable. Set Address Family to IPv4+IPv6, Gateway field is disa...
-
- Looking at it more there is something here, but it takes more steps to duplicate than you provided.
It works if yo... -
- I made some alterations to the text, cosmetic only. I made sure all the options work as expected here after, looks go...
-
01:09 PM
Feature #8402: SSH2 Enforced Key and Username+Password Authentication...
- New options show up and each works as expected on latest 2.4.4 CE snapshot gitsync'd to master.
- 02:25 PM Revision 96fa3e36: Cleaner fix for ##8447
- 02:17 PM Revision 62ea1dbd: Merge pull request #3904 from Hobby-Student/master
- 02:06 PM Revision 1d523d1e: Fixed #8447
-
- Also, move the list to a central location so it does not need to be duplicated.
-
-
12:58 PM
Bug #8445: creating an alias named "log" breaks rule processing
- Tested on latest 2.4.4 CE snapshot gitsync'd to master, works as expected.
-
- Applied in changeset commit:b20cfb55125207e21d81a29a107ea77230fbc7fb.
-
- The list of pf keywords was a lot shorter than it should be, but there isn't a documented list that I could see.
I... -
- It's a reserved keyword in pf but isn't in the list.
-
-
12:27 PM
Todo #8423: Update SimplePie to 1.5.1
- Works as expected on 2.4.4.a.20180409.0622.
-
- Looks like this isn't just specific to BGP. In the forum thread linked above, it is happening on multiple amd64 VMs t...
-
- The zebra daemon in FRR 4.0 won't stay running with a BGP configuration. It crashes on startup. OSPF alone seems to b...
-
- Problematic test cluster has no errors on a snapshot containing the fix. Looks good here.
-
- From UI, status_log_filter.php.
I want to increase the size of filter.log from 500K to 5G (as an example).
From... -
-
-
- Yeah that does appear to be a limitation. For a site to site, tap should work the same as tun in most cases though, s...
-
07:33 AM Bug #8426: Mobile IPSec login not working after upgrade from 2.4.2p1
- Yes, I can confirm this issue. Mobile Client ("Roadwarrior") IPSec access no longer works after upgrading to 2.4.3 (w...
-
06:01 AM Feature #8140: Feature Request: Zone Firewall between interfaces
- It is high time to move away from interface-based firewalling and move to zone-based firewalling. Zone-based firewall...
04/08/2018
-
- Are you sure you are not creating an IPv4+IPv6 rule? You cannot (and have never been able to) set a gateway on those....
-
11:39 PM Bug #8447 (Resolved): Cannot change Gateway in Firewall > Rules
- Open any rule or create a new rule. In the Advanced options, the Gateway cannot be selected. This was working in 2....
-
07:35 PM Bug #8446 (Resolved): QinQ interfaces are assigned incorrectly
- When creating a QinQ interface in 2.4.3 it is stored in the config correctly and created as an interface as expected:...
-
03:44 PM Bug #8445 (Resolved): creating an alias named "log" breaks rule processing
- i created an ip alias, and named it "log". upon the rules reloading, an error occurred:
There were error(s) loadi... -
02:04 PM Bug #8429: radvd/IPv6 broken in 2.4.3 when using a LAN bridge
- Same Problem:
RADVD regression on 2.4.3 / radvd can not run on bridge Interface anymore...
https://forum.pfsense.or... -
12:13 AM Bug #8429: radvd/IPv6 broken in 2.4.3 when using a LAN bridge
- Same issue for me too ....
Netgate SG-4860 - Serial: ********* - Netgate Device ID: *********
*** Welcome to pf... -
- 2. found&fixed
The plugin 'injects' extra stylesheets, and the setCSSdisplay function searches for a particular st... -
- Re 2: I usually use Firefox @ Windows 10 and yes with some blockers such as NoScript, uBlock and few user scripts in ...
-
- Thanks for testing and reporting about these issues.
1. found&fixed
2. these items seem to work properly for me o... -
- This appears to be the expected behaviour as isc-dhcpd cannot bind to adapters with no MAC address.
However you can ... -
07:32 AM Bug #8335: System hang with LACP downlink to UniFi switch
- Some new information:
* It happens when LAGG Protocol is set to Failover.
* It happens when one of the two netwo...
04/07/2018
-
08:04 PM Bug #8429: radvd/IPv6 broken in 2.4.3 when using a LAN bridge
- Agreed, I'm facing the same issue. Please fix this in the next Dev & Rel version. Thanks.
========================... -
- It seems to be fine, good.
While I'm at it, few more glitches I found:
1. *Backend: Timeout / retry settings*
... -
- If you can perhaps test/validate my changes again haproxy-devel version that would be great.
Either the full thing (... -
- Re regex - yes you're right.
I was living with the false assumption (based on some tests that I remember from the pa... -
- Petr H wrote:
> >http-response set-var(txn.txnhost) hdr(host)
> That seems to set that variable only during the res... -
07:00 AM Bug #8444 (Not a Bug): ovpnc as upstream dhcp relay interface
- Not directly related to Bug 8443, but has something in common:
Following setup to pass DHCP relay requests via Op... -
- DHCP relay started only with disabled openvpn client. Wit enabled openvpn client dhcp relay doesn't start. But after ...
-
- Assigned ovpnc interface was chosen as relay interface, config was saved. DHCP relay claimed this interface to be not...
04/06/2018
-
10:02 PM
Bug #8391: OpenVPN Wizard creates WAN rule with TCP4 instead of protocol TCP, it creates error when loading firewall rules
- Tested on 2.4.4.a.20180406.1258, completed wizard and selected TCP for IPv4 only and the firewall rule on WAN was cre...
-
09:55 PM
Bug #8417: IPv6 bogon list size now too large to fit in standard maximum table size
- Tested on 2.4.4.a.20180406.1258, warning appears stating that the Firewall Maximum Table Entries value in System / Ad...
-
- >http-response set-var(txn.txnhost) hdr(host)
That seems to set that variable only during the response processing. I... -
- Actually that the condition is added to all actions in the frontend probably is the 'right thing' to do.. (my previou...
-
- Ok thanks can reproduce it now. Ill check why that happens.
-
- Attached sample haproxy.cfg that demonstrates the problem. With this file the warnings occur at lines 48 and 49:
<pr... -
- Can you show/attach the complete haproxy.conf itself? I'm not yet seeing when this would occur.. And or perhaps a scr...
-
09:02 PM
Feature #8030: Unbound: Add support for DNS over TLS to internal clients
- Tested on on 2.4.4.a.20180406.1258, works as expected.
-
- Applied in changeset commit:1fa69c27ee153fe439c2ba9a9809a28e452811ea.
-
-
05:40 PM pfSense Packages Feature #8442 (Rejected): ACME - custom script for DNS validation
- Please add ability to upload custom script for DNS validation.
I have provider for which I have script to update DNS... -
03:46 PM
Bug #8389 (Not a Bug): OpenVPN servise status does not update
-
03:46 PM
Bug #8389: OpenVPN servise status does not update
- Thanks. I'll mark as resolved.
-
03:44 PM Bug #8389: OpenVPN servise status does not update
- My apologies for being unclear :(
I don't see the initial problem I reported.
I stopped VPN server and saw it's m... -
03:36 PM
Bug #8389: OpenVPN servise status does not update
- You don't see what?
A) You don't see a problem any more, it updates correctly
B) You still don't see the widget ... -
- I do not see it on the latest release.
-
03:28 PM
Bug #8389: OpenVPN servise status does not update
- You don't see it update, or you don't see this issue?
-
- Well, I don't see it on 2.4.3-RELEASE
-
-
01:37 PM pfSense Packages Bug #8421: AutoConfigBackup v1.51 Option to Ignore Captive Portal Vouchers not working
- I can now confirm the package is available for 2.4.3 and the fix works as expected.
Thank you all for your time. -
- It should show up for 2.4.3 users momentarily.
-
- After a few days waiting for the package to show up on the update list, I went to look at the FreeBSD-ports repositor...
-
- The infra cache stats appear to be good. It might be nice if they updated via ajax but they do not appear to change f...
-
- Works.
-
- Works
-
- Works
-
- When a captive portal user is manually disconnected their entry is removed from the portal database, but the entry re...
-
- I'm not sure if this started in Suricata 4.0.4_1, but I recently found a rule in my disablesid.conf which was still t...
-
-
- It looks resolved - tested on built on Thu Apr 05 19:51:37 CDT 2018
-
- I have tried various ways to encode spaces but the LDAP server itself (OpenLDAP, in this case) appears to find the tr...
-
- When a user attempts to authenticate with LDAP, if they incorrectly enter their username with a trailing space the LD...
04/05/2018
- 08:37 PM Revision 423ce46d: Merge pull request #3453 from plumbeo/traffic-quota
- 08:36 PM Revision 9f85da7f: Merge pull request #3933 from PiBa-NL/20180405-widget-invert
-
-
- (cherry picked from commit c6ebe69d2c0838bc76957b22f98547311c68e700)
-
-
-
- pfSense 2.4.3, pfSense-pkg-haproxy 0.54_2, haproxy 1.7.10
1. Primary frontend used by other shared ones
2. SSL-en... -
- Rules like below can be generated with the outbound-nat settings:
nat on $LANI proto icmp from fd:1:2:3::/64 to any... - 03:31 PM Revision 0019e3dd: Merge pull request #3932 from robjarsen/tweak/rm-whitespace
-
- Caused by: https://redmine.pfsense.org/issues/8302
Fixable by: https://github.com/pfsense/pfsense/pull/3933 -
-
- I was finally able to replicate this and confirm the fix, PR merged, thanks!
-
01:36 PM Revision 066335a3: Captive portal: Add custom RADIUS dictionary with the new pfSense vendor-specific attributes
-
- Automatically upgrade config to preserve old RADIUS bandwidth limits behaviour on existing installations.
-
- This is not a support platform, please post your question on the forum, pfSense subreddit, or mailing list.
-
01:09 PM pfSense Packages Bug #8436 (Rejected): I have the problem of User authentication and password in my proxy, when I intend to update the packages using pkg upgrade and pkg update
- Hello, I am new using pfsense 2.4.2, I have the same problem of User authentication and password in my proxy, I have ...
-
-
- Add an option to enable retrieving a user's traffic quota from RADIUS. The code uses a new vendor-specific attribute ...
-
- Add a new option to disconnect users after they exceed a traffic quota (sum of downloaded data and uploaded data).
-
-
01:18 PM pfSense Packages Todo #8433: Upgrade NRPE-SSL Package to NRPE3
- Oh sorry I wasn't aware it was already done in the snapshots, haven't used them in a long time.
-
- It is already switched to nrpe3 on 2.4.4 snapshots because the nrpe2 and nrpe-ssl ports were removed from the FreeBSD...
-
12:37 PM Bug #8435 (New): DHCPv6 unusable in certain circumstances (US AT&T Fiber, etc.)
- pfSense's implementation of DHCPv6 prefix delegation is unusable in edge ISP configurations. AT&T Fiber in the United...
-
11:15 AM Revision 3d706897: Do not remove unbound testing config when it fails to make it easier to debug
-
11:08 AM Bug #7969: md5 bgp sessions fail in 2.4.0
- bkraptor - wrote:
> I have already opened #8407 for this issue, so feel free to continue the conversation there.
> ... -
08:12 AM Bug #6481: loading EAP_RADIUS method failed
- This bug is still present on the 2.4.3 release.
-
02:57 AM Bug #8434: Chelsio T4/T5 CXGBE drivers not loaded as ALTq capable in the PfSense UI
- Also see https://redmine.pfsense.org/issues/8314
Jim Pingle (It's possible that either the man page is wrong or i... -
- ( Please reference https://redmine.pfsense.org/issues/6830 & https://redmine.pfsense.org/issues/7607 ) Information be...
-
- This is still not functional.
2.4.4-DEVELOPMENT (amd64)
built on Wed Apr 04 19:00:45 CDT 2018
FreeBSD 11.1-REL... -
02:08 AM Bug #8417: IPv6 bogon list size now too large to fit in standard maximum table size
- With this error I also noticed a really weird subtle error which took me almost an hour to figure out:
Some Firewall...
04/04/2018
-
- net-mgmt/nrpe-ssl (https://www.freshports.org/net-mgmt/nrpe-ssl/) has been depreciated and removed since January. Can...
- 10:03 PM Revision b223b6e2: Merge branch 'master' of https://github.com/pfsense/pfsense into tweak/rm-whitespace
-
- 07:35 PM Revision aa9971a3: Whitespace Removal
- * src\etc\sshd
- 07:27 PM Revision db0050f0: Add array check
- Even though I now set `$ns` equal to `array_unique(get_nameservers()`, just to be safe we check with `is_array($ns)` ...
- 06:24 PM Revision 9ec128f0: Merge pull request #3922 from reb00tz/reb00tz-sshd_key_and_password-patch-1
-
06:13 PM Revision 923f05c4: Enhanced sshdkeyonly Drop-Down List for Clarity...
- Enhanced sshdkeyonly drop-down list for clarity, as per https://github.com/pfsense/pfsense/pull/3922#pullrequestrevie...
-
- Enhanced sshdkeyonly drop-down list for clarity, as per https://github.com/pfsense/pfsense/pull/3922#pullrequestrevie...
-
- Changes to allow key and password combination (in contrast to key OR password) i.e. if selected in the Admin>Advanced...
-
- Changes to allow key and password combination (in contrast to key OR password) i.e. if selected in the Admin>Advanced...
-
-
-
05:30 PM Bug #8417: IPv6 bogon list size now too large to fit in standard maximum table size
- Yes. I ran into the same issue as Ryan Jaeb . It took me awhile to figure that out. Very confusing.
- 05:25 PM Revision 726a9fa5: Merge pull request #3931 from robjarsen/tweak/rm-whitespace
-
-
- Hello Jim Pingle , I am new using pfsense 2.4.2, I have the same problem of User authentication and password in my pr...
-
- Applied in changeset commit:f39ba24b36d2eaf725b552aefff3b05ceba49edb.
-
- Using @forward-tls-upstream@ in a forward-zone will trigger unbound to send queries to that server using SSL/TLS. Sin...
-
12:55 PM Bug #8432 (New): Dynamic DNS Client gives an error that it can't find IPv6 address when WAN interface is a LAGG
- Hi,
I'm trying to get the Dynamic DNS to update my ipv6 address with Amazon's Route 53 service. However, I'm seein... -
- Applied in changeset commit:547e51b887a88d97569e587de26e029674c5d5f0.
-
- Of note, a couple changes compared to other examples:
1. We already set @do-tcp: yes@, so adding it again was unne... -
- Applied in changeset commit:cd73821986dd854afbff4b1f63c7fa2bc88ed9a2.
-
- On second thought, this is different. The other ticket is for providing DNS over TLS to local clients, this is for up...
-
- Duplicate of #8030
-
- We can fetch some useful status data from unbound using @unbound-control -c /var/unbound/unbound.conf <command>@, and...
-
- Actually it's a duplicate of #8388 (for upstream forwarders), #8030 is for acting as a DNS over TLS server to local c...
-
- Duplicate of #8030
-
- See also: #8415 and #8388
- 06:30 AM Revision aca98ca8: scope error?
- Error on reboot.
```
[04-Apr-2018 02:21:54 EST5EDT] PHP Warning: in_array() expects parameter 2 to be array, null g... - 02:07 AM Revision b28c9acc: Fixing debug errors.
04/03/2018
-
-
- Duplicate of: https://redmine.pfsense.org/issues/8391
Was fixed here: https://github.com/pfsense/pfsense/commit/5ac4... -
04:40 PM Bug #8428 (Duplicate): Filter reload nofication
- On every filter reload (also in background) we are getting the notification window as attached.
ex.
rc.bootup: Ne... -
- Looks like a problem in your browser. I can't replicate it here across multiple firewalls. Please post on the forum o...
-
- Under VPN - IPSEC, configuring a P1 session under the Phase 1 proposal section the web configurator miss the dropdown...
-
06:49 PM Bug #8429 (Resolved): radvd/IPv6 broken in 2.4.3 when using a LAN bridge
- Due to the fix for #6974 included in 2.4.3 (commits "1":https://github.com/pfsense/FreeBSD-ports/commit/1857d3d89d2ef...
- 05:27 PM Revision 493e4284: Remove Whitespace
- * src\etc\inc\dyndns.class
* src\etc\inc\simplepie\simplepie.inc
* src\usr\local\www\services_dyndns_edit.php -
04:36 PM Bug #8390: Input validation does not prevent removing a gateway used by a DNS server
- my config.xml file had <dns5gw>NORDVPN_DHCP</dns5gw>
despite having no DNS entries in System/Advanced
changed it ... - 03:57 PM Revision a6cae015: hideCheckbox. The 'o' is important. And use js instead of php like we're supposed to.
-
03:47 PM
Bug #7969: md5 bgp sessions fail in 2.4.0
- I have already opened #8407 for this issue, so feel free to continue the conversation there.
@Matthew Fields: that... -
03:43 PM Bug #7969: md5 bgp sessions fail in 2.4.0
- Can someone reopen this bug, it certainly doesn't seem like it has been resolved based on multiple people testing
-
- bkraptor, where is the "Enable Hardware Checksum Support" listed at? I could not seem to find it except for a checkbo...
- 03:27 PM Revision c7652dc1: Change array index to use php-style
- 03:25 PM Revision e10fba08: Add fixed suggested by jim-p
- 02:46 PM Revision 2f846a99: Moved out of my root directory :(
-
02:46 PM Bug #8426 (Resolved): Mobile IPSec login not working after upgrade from 2.4.2p1
- Since performing the upgrade from 2.4.2p1 to 2.4.3, users have been unable to connect; OS X clients get an error sugg...
- 02:40 PM Revision d91153df: Allow ocsp-staple to override
- Enable ocsp stapling to on if forced that way through configuration
- 02:40 PM Revision 070bee71: Change option text
- Make it a force-on option
Hide option if ocsp is enabled - 02:40 PM Revision 5a107548: Use cert_get_ocspstaple
- Use cert_get_ocspstaple during nginx configuration generation
- 02:40 PM Revision da31993a: add cert_get_ocspstaple
- 02:40 PM Revision 4a424643: Create get_dns_nameservers function
- Put code in a function since it gets called in two places.
- 02:40 PM Revision 089cfcda: Steal resolvconf
- Steal the nameserver generation code from the resolvconf code
- 02:40 PM Revision 29a6d3f3: Improve description, reorder
- make ordering proper
- 02:40 PM Revision 7f6fdef2: Use option properly
- Use the option created by the config to control stapling
(and add a missed semicolon!) - 02:40 PM Revision 2196cecd: Add OCSP option in config
- 02:40 PM Revision 7312dbec: Beginings of enabling SSL Stapling
- Add the option. Default to enable
-
01:48 PM
pfSense Packages
Bug #8421 (Feedback): AutoConfigBackup v1.51 Option to Ignore Captive Portal Vouchers not working
- Fix committed b95ecbc9a9f4d87e77079dbf023ddb346460bdb1. It should show up as a package update for AutoConfigBackup wh...
-
- The message looks like the same from here
(system)@172.xx.x.xx: Captive Portal Voucher database synchronized wit... -
01:14 PM
pfSense Packages
Bug #8421: AutoConfigBackup v1.51 Option to Ignore Captive Portal Vouchers not working
- What is the reason you see for the backup? under Diagnostics > AutoConfigBackup > Restore I want to make sure I am se...
-
- I've been using pfSense in a HA configuration for a while now, and just recently started using the captive portal fea...
-
-
- (cherry picked from commit 0e0adbc9be72c96723f002910453fc8b022ddf59)
- 01:18 PM Revision 83a08996: Merge pull request #3926 from martgras/azureddns
- 12:46 PM Revision 96e04d74: remove whitespace - pt. 2
- (cherry picked from commit 523849d312daae129a287f9cf43cbdeadafd1fcb)
-
-
12:21 PM pfSense Packages Bug #8425 (Resolved): telegraf not reporting memory
- Since installing 2.4.3, telegraf isn't reporting memory anymore. Everything else is reporting as usual.
-
11:38 AM Bug #8422 (Feedback): Switching VLAN mode removes the switch port settings from the config.
- Fixed.
Please check with the next snapshot. -
- On devices with a built in switch changing the switch VLAN mode removes the port state settings from the config resul...
-
11:16 AM Bug #6167: IPsec IPComp not working
- Is there any progress on this, other than that the target version moves to the next version each time a new version i...
-
- If you have a downstream interface configured to use a dhcpv6-pd assigned prefix (my isp gives a /56) and you have VI...
-
- Update SimplePie to 1.5.1
Ticket for tracking. Update was complete in commit:0e0adbc9be -
05:35 AM pfSense Packages Bug #7293: dns/bind911 requires TCP_RFC7413 in kernel
- This should be fixed building the kernel with "options TCP_RFC7413" and enabling fastopen sysctl.
-
05:10 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- just make upgrade to 2.4.3-RELEASE (amd64) built on Mon Mar 26 18:02:04 CDT 2018
I have openbgp (ok i ll move to F... -
03:36 AM Bug #8420 (Not a Bug): Not possible setting up voucher configuration. On save, the form is asking to fill in the synchronization data.
- Hi,
On a new 2.4.3 deployment, on initial configuration, when trying to save the Captive Portal Voucher configurat...
04/02/2018
-
-
- 08:41 PM Revision 523849d3: remove whitespace - pt. 2
-
-
-
- changing some advanced settings and switching to udp solved my problem.
-
- webgui, when menubar is fixed to the top of the screen, the last items of long menus cannot be seen/used.
fix: htt... -
05:14 PM Bug #8417: IPv6 bogon list size now too large to fit in standard maximum table size
- I think there's also mistake in the description on the settings page that could mislead people. If you've overridden...
-
- Applied in changeset commit:2d113b128f270302cc5380669f257e8bd1cb3a15.
-
- The IPv6 bogon list has grown to the point where it can no longer fit inside the stock value for maximum table size (...
-
- - Changed default value for Maximum Table Entries to 400000 in order to
make bogonsv6 to work
- Added code to upgra... -
- - Changed default value for Maximum Table Entries to 400000 in order to
make bogonsv6 to work
- Added code to upgra... -
02:24 PM Bug #8165: Fragmented at source IPv6 packets (UDP + ICMP Ping) are not forwarded / v2.4.2 AMD64
- Mike Nichols wrote:
> Johannes - thanks for you comments.
>
> AFAIK pf is an integral part of FreeBSD so we sti... - 12:14 PM Revision 85b10a47: Add copyright version param
-
11:45 AM Feature #8418: OCSP Stapling
- Peter Berbec wrote:
> With Letsencrypt offering wildcard, people may get in a situation where the certificate they u... -
- With Letsencrypt offering wildcard, people may get in a situation where the certificate they use has been "ocsp must ...
- 11:17 AM Revision 139598eb: Remove Whitespace
- I'm aware this is a very large commit. Let me know if you'd rather have it broken down by file type (ie: PHP/shell sc...
-
-
10:19 AM pfSense Packages Bug #8414: ntopng fails to start with Disable Alerts option
- For what it's worth I had found other report. I reported a new issue because #8277 was pre-release and indicates that...
-
- Duplicate of #8277
-
- Ntopng fails to start (core dumps) with the "Disable Alerts" (-H) option enabled. It starts fine without the option s...
-
08:28 AM pfSense Packages Feature #8416 (Resolved): Mailreport - Minute of the Hour
- Any chance of adding *Minute of the Hour* as an option in the schedule, I'd like a bit more granularity if possible.
... -
- A new version of ntopng is available now on 2.4.4 snapshots which should address this issue. Try it there and let us ...
-
03:15 AM Bug #6668: IPSec tunnel + L2TP/IPSec VPN - wrong PSK chosen by pfSense
- I tried the patch, without success.
*ipsec.secrets (without patch):*
<WANIP> @<DN> : PSK 0s<PSK-01>
: PSK 0s<PS... -
12:48 AM Feature #8415 (Duplicate): Add DNS over TLS (RFC 7858) fonctionality to dns resolver and forwarder
- See https://tools.ietf.org/html/rfc7858 for the proposed standard. The benefit to the user is out of the box DNS priv...
04/01/2018
-
- This is working fine for me both on my edge and in my lab HA setup using he.net DDNS. You might want to take your con...
-
06:41 PM Revision 1ac3c88a: Redmine # 7769: Add support for Azure DNS to DynamicDNS
-
- Try the patch on the other ticket and add comments there.
-
- Same behavior as described in #6668
As long as the second (side-to-side) is aktiv, the only PSK that will match is... -
02:57 PM Bug #8165: Fragmented at source IPv6 packets (UDP + ICMP Ping) are not forwarded / v2.4.2 AMD64
- Johannes - thanks for you comments.
AFAIK pf is an integral part of FreeBSD so we still have to wait for the Fre... -
07:10 AM Bug #8165: Fragmented at source IPv6 packets (UDP + ICMP Ping) are not forwarded / v2.4.2 AMD64
- a possible hint:
Could it be a pf firewalling problem in handling ICMP?
While disabling pf via _pfctl -d_ the tra... -
- I also get following error message on first connection try after reboot (when connection fails):
@ioctl(TUNSIFMODE... -
12:39 PM Bug #8413: Virtual IP on PPPOE interface no longer working with 2.4.3
- Not sure this is a duplicate as it also affects PPPOE interfaces and not just on startup. Also happens when trying to...
-
- Duplicate of #8393
-
- When upgrading from 2.4.2 to 2.4.3 the IP aliases on the PPPOE interface stopped working.
Before upgrading they we... -
- FYI: RFC 5280 obsoletes RFC 3280, but provides the same guidance. I wasn't consistent previously, my apologies.
-
- Hi, the fix to this bug breaks radvd for bridge interfaces, which subsequently breaks IPv6 routing within/out of the ...
-
- Try "Enable Compression (stub)" which is the closest equivalent in the updated syntax.
Our code is formatting thin... -
04:51 AM Bug #8412 (Rejected): OpenVPN compression setting ignored
- Compression setting in the GUI is ignored. Always expects comp-lzo no matter what you select.
Log entry with "No L... -
- Open PR for this issue: https://github.com/pfsense/pfsense/pull/3922
03/31/2018
-
-
- It should be rejecting that input rather than switching to 'any'. The only text allowed in those boxes should be vali...
-
- related to some degree to bug 8409, i've found that i'm unable to create aliases for registered services using their ...
-
- IIRC it is checking well-known and registered ports, basically anything in /etc/services which are considered keyword...
-
-
- when attempting to add a new port alias [firewall -> aliases -> ports -> add], for example, for mdns [udp port 5353],...
-
- Looks like host overrides might need some adjustments with dnsmasq 2.79. It is not in builds yet but once master swit...
-
-
-
- Works for me. Thanks Luiz!
-
05:02 PM Bug #7719: Dynamic DNS updates not working on interface failover
- I have tested Dynamic DNS on 2.4.3 to see if dynamic DNS would finally work for the several multi WAN with HA sites w...
-
- Tested with 2.3.4 - IPsec still does not fail back to primary until reauth.
A checkbox that forced IPsec to rebuil... -
- Understood.
The usual reason is that is what pfBlockerNG's DNSBL does by default - places a 10.10.10.X IP Alias VI... -
02:51 PM Bug #6799: Negating ``<interface> net`` when a VIP exists on the interface results in unintended behavior
- LAN Interface: 172.25.232.1/24
IP Alias VIP on LAN: 10.10.10.10/32
You’ve defined LAN here to include both.
S... -
- The following rule is generated due to a IPv6 alias being present, this is supposed to fill a array of vips6 , but ad...
-
12:00 PM
Bug #8407 (Resolved): FRR BGP MD5 support is broken
- This is a continuation of #7969
I recently upgraded some systems from 2.3.5 to 2.4.3 and found that FRR BGP MD5 su... -
11:56 AM Bug #8406 (New): DDNS IPV6 Cloudflare Client does not detect PPOE address
- The ISP uses PPPoE for connectivity. The Cloudflare DDNS client properly detects the PPPoE IPv4 address. The Cloudfla...
-
11:52 AM
Bug #7969: md5 bgp sessions fail in 2.4.0
- I recently upgraded some systems from 2.3.5 to 2.4.3 and found that FRR BGP MD5 support is now broken. When the outgo...
-
- Looks like the same issue as #8393
-
06:59 AM pfSense Packages Bug #8405 (Duplicate): pfSense 2.4.3 breaks HAProxy if using VIP
- If using a VIP for HAProxy instead of localhost, the upgrade to 2.4.3 creates the following error. Changing from the ...
-
- After upgrading from 2.4.2_p1 to 2.4.3, just the last added (active) IPSec tunnel <PSK> matches in PHASE-1.
All ot... -
- IP aliases can be used with CARP vhids too.
Reported by: PiBa
Ticket: #8393
(cherry picked from commit b... -
- IP aliases can be used with CARP vhids too.
Reported by: PiBa
Ticket: #8393 -
- Enhanced sshdkeyonly drop-down list for clarity, as per https://github.com/pfsense/pfsense/pull/3922#pullrequestrevie...
-
- Enhanced sshdkeyonly drop-down list for clarity, as per https://github.com/pfsense/pfsense/pull/3922#pullrequestrevie...
03/30/2018
- 11:01 PM Revision 179377b0: Remove Whitespace
- I'm aware this is a very large commit. Let me know if you'd rather have it broken down by file type (ie: PHP/shell sc...
-
- /usr/local/www/system_advanced_admin.php uses incorrect/inconsistent $config sshdkeyonly references.
- lines 106-1... -
- Incorrect target version - should be 2.4.5.
-
- To allow key _and_ username+password combination (in contrast to key OR password) i.e. if selected in the System>Adva...
-
- I was looking forward to running 2.4.3 to see if dynamic DNS would work.
My latest testing on 2.4.3 is ddns still ... -
- I was looking forward t0 running 2.4.3 to see if dynamic DNS would finally work.
My latest testing on 2.4.3 is ddn... -
- I forgot about these, I had the 'CARP isn't a interface anymore' thinking in my head.
Should be fixed now.
Thanks! -
- Hi Luiz,
To have multiple highly available IP's on 1 interface its possible to configure a vip of type "alias" and... -
- Can you please elaborate PiBa ?
-
- Seems now a IPalias under a CARP parent is not applied.?
-
- 06:47 PM Revision 49c1dfc0: Merge pull request #3915 from cxcv/proxyarp
- 06:46 PM Revision 8d26774f: Merge pull request #3916 from robjarsen/tweak/cf-spelling
- 06:45 PM Revision cd4ee470: Merge pull request #3919 from PiBa-NL/20180329-copyright-showonce
-
- A recent change changed the IP alias setup to only happen on enabled interfaces. As the loopback interfaces do not h...
-
- Changes to allow key and password combination (in contrast to key OR password) i.e. if selected in the Admin>Advanced...
-
- Changes to allow key and password combination (in contrast to key OR password) i.e. if selected in the Admin>Advanced...
-
- A recent change changed the IP alias setup to only happen on enabled interfaces. As the loopback interfaces do not h...
-
11:06 AM Bug #8401 (New): Issues related to keys representing alphabetic characters specific to Scandinavian languages and to some other keys.
- *Description of problem:* Issues related to keys representing alphabetic characters specific to Scandinavian language...
-
11:00 AM pfSense Packages Bug #8400 (Closed): FreeRadius 3 EAP-TLS Missing O.U. Option
- Under Services-->FreeRADIUS-->EAP-->EAP-TLS
The Organizational Unit (O.U.) is missing from the option for:
"Che... -
09:04 AM Bug #8396: Upgrade 2.4.2_1p to 2.4.3 Fails
- Sniffer trace showed that files00.netgate.com will resolve to both IPv4 and IPv6. The IPv6 side of that server is no...
-
- Most likely something specific to your system/setup/hardware. Please post on the forum, pfSense subreddit, or mailing...
-
- I can add them to the redacted field list.
That said, these are from packages and the base system status.php can't... -
-
- OK, but if you can reproduce the original missing route problem, gather as much detail as you can before restarting t...
-
- It looks OpenVPN server" > "Advanced Configuration" > "gateway creation" was unrelated to missing routes. Probably o...
-
- On SG-1000 - OpenVPN server" > "Advanced Configuration" > "gateway creation" defaults to "Both"
There was no any rou... -
- Netgate 701 is this issue exactly.
-
05:37 AM Bug #8399 (Duplicate): Coreboot
- We have a report of a user with this issue:
The upgrade went smoothly here, but I'm wondering if anyone else is havi... -
-
06:15 AM Bug #8397: after upgrade 2.4.2 -> 2.4.3 gui error
- the source guardion encoder component has broken. i removed. we can close..
-
- Fatal error: Cannot redeclare index_groups() (previously declared in /etc/inc/auth.inc:238) in /etc/inc/auth.inc on l...
03/29/2018
-
09:28 PM pfSense Packages Feature #8362: Snort and Suricata Package - Allow for changing URLs, Ports, and Protocols to allow for local Repo of Signature Updates
- This feature was added in the Suricata GUI package v4.0.4_1 pull request posted on GitHub here: https://github.com/pf...
-
- The gui fails with no real messages, the CLI just freezes, it appears to be failing at:
arj: 3.10.22_5 -> 3.10.22_7... -
07:02 PM
Bug #8395: #6677 broke IP Aliases on loopback interfaces
- Duplicate of #8393.
-
06:28 PM
Bug #8395 (Duplicate): #6677 broke IP Aliases on loopback interfaces
- The fix for #6677 broke IP Aliases on loopback interfaces (type "Localhost") in that they no longer come up on reboot...
-
-
04:47 PM
Bug #8393 (Assigned): IPAlias VIPs on localhost are not applied at boot.
-
- Works fine for me too, no need to go back into the VIPs and resave.
-
- That works here.
-
04:16 PM
Bug #8393: IPAlias VIPs on localhost are not applied at boot.
- We're testing the patch now.
Patch resolves the issue. -
- I've noticed that to, can you try the patch?: https://github.com/pfsense/pfsense/pull/3920
-
- An VIP configured like:...
-
04:31 PM Bug #8247: When in bridge / transparent mode, pfSense blocks UDP/4500 & ESP traffic regardless of origin
- Fast Forward to a new pfSense 2.4.3 installation in *routed* mode and the same behavior occurs:
* Only one rule in... -
- Raised an issue with support to do with 2.4.3 and an issue at boot time https://redmine.pfsense.org/issues/8393
Wa... -
- I can confirm that this is still an issue on pfSense 2.4.3-RELEASE and UnFi firmware -3.9.21.8191- 3.9.27.8537.
-
- We have previously seen this on VMs when run as HA.
When the on-board switch is segregated using VLANs to provide ... -
-
- This reverts commit 663c7586393c9d4bcd17c3312a24088ee3a3eac9.
-
-
- This reverts commit 72fcd11a4c5f743990eb2f62789fb292e52bbde5.
-
-
- This reverts commit 5c1132bf0d796295b9b56fd93631c606f8ccd660.
-
-
- This reverts commit 29c5272404bdb35a3ac64e6bfcefae02c56e9466.
-
- PR was merged months ago, submitter has tested and confirmed it works.
03/28/2018
-
- (cherry picked from commit 5ac478f23b69d42b29ce7f960ba48b2f425f0754)
-
-
- Applied in changeset commit:5ac478f23b69d42b29ce7f960ba48b2f425f0754.
-
- OpenVPN Wizard creates WAN rule with TCP4 instead of protocol TCP, it creates error when loading firewall rules
-
12:30 PM Bug #7995: pfSense Certificate Manager Issues Blank Certificates
- We are also seeing this issue in production. I posted to the subreddit, but everything seems to be exactly the same ...
-
02:15 AM Bug #8226: Pass-through MAC automatic additions adds duplicate
- I'm running the latest pfsense version for PCEngines_APU-45 "2.3.5-RELEASE-p1" can we get this backported please?
03/27/2018
-
- Definitely see it on 2.4.2-RELEASE-p1 will test after next update
-
- 05:21 AM Revision 6aefdd43: Patch for specifying router preference for the default ipv6 route pushed by radvd.conf
-
- I was pleaeed to see this bug get reported and reported as fixed, but Dynamic DNS for me in multiple sites simply doe...
-
- I too have major Dynamic DNS issues. It quite simply doesn't work. We have pfSense clustered in mutiple sites, with W...
03/26/2018
-
-
- 07:28 PM Revision a6cbe5e4: Remove the possessive
- 11:49 AM Revision f957f765: Move copyright notice to /conf
- 11:49 AM Revision 70bc2608: Fix copyright typo
- 11:49 AM Revision e04f2e13: Further copyright updates
- 11:49 AM Revision 95eaeea8: Revisions to copyright text
-
- Works OK now, and no PHP errors when the picture is missing.
-
07:47 AM
Feature #8371 (Feedback): Reduce config.xml size by removing picture widget images to file system
-
- Tested and resolved.
-
- It works OK here for me, but I do not have a cisco device to test against, only other FRR/Quagga/OpenBGPD instances.
... -
-
- This doesn't seem viable to support, but maybe in the future. The current page and its text-based operation will not ...
-
07:02 AM
Bug #8389 (Feedback): OpenVPN servise status does not update
- Have tested this on a number of different systems but unable to reproduce.
Please update to latest snap and retest. -
- I partially fixed the issue by adding dns 2620:fe::fe and then deleting it.
Now I only see one error message at bo... -
- Hi,
I often see following log entries that I didn't see before removing HE.net tunnel in latest RC build.
78.46.2...
03/25/2018
- 08:40 PM Revision ef7e8885: Move copyright notice to /conf
-
- Confirmed. MAC spoofing is broken on bridge interfaces and still broken in 2.4.4a. Testing on CE amd64.
Initially:...
03/24/2018
- 06:33 PM Revision 1ea2a37e: Fix copyright typo
- 12:49 PM Revision 6fb38a04: Further copyright updates
- 12:44 PM Revision c0debf5b: Revisions to copyright text
-
- On the pfSense Dashboard => Service status, see OpenVPN service status.
Regardless if OpenVPN is on or off, status... -
08:22 AM Feature #8388 (Resolved): Add DNS over TLS for upstream forwarders to the DNS Resolver
- GUI options to set DNS over TLS.
Currently you can do this by adding a stanza to the custom options on unbound.
...
03/23/2018
-
- 03:33 PM Revision 6ae6d723: Change reported version to installed version rather than product version for more detail
-
-
10:40 AM
Bug #8387 (Closed): Cannot use large CRLs
- Attempting to import CRL data for certificate authorities via the "System > Cert. Manager > Certificate Revocation" w...
-
08:19 AM Bug #7958: Upgrade 2.4.0: IP alias with FQDN doesn't work any more
- Edgardo Rodriguez wrote:
> Hi,
> I am also having the same issue, and it's quite annoying...
> In my case, filterd... -
07:21 AM pfSense Packages Feature #5052: Avahi Proxy Package: Add option to disable/control cache size.
- could you please add an option to set cache-entries-max=0 (or other arbitrary avahi config options?) - see below, it ...
03/22/2018
-
- #define ENODEV 19 /* Operation not supported by device */
if (memcmp(&(f-... -
04:53 PM Bug #8386 (Not a Bug): Virtual IPs not considered as part of interface net
- Every network interface with ips configured has a variable "INTERFACE net" which can be used in firewall rules to sel...
- 02:56 PM Revision 8062e6a4: Change reported version to installed version rather than product version for more detail
-
02:09 PM Bug #8179: Incorrect reverse DNS zone in DHCP server config for non-octet-aligned subnet mask
- Alfred Barnat wrote:
>
> This should have been:
> zone 208-209.24.172.in-addr.arpa {
> primary 127.0.0.1;
>}... -
- OpenVPN is extremely useful for providing authentication and encryption for remote branch locations and individual ro...
-
12:12 PM Bug #8355: Upgrades and packages unavailable after upgrade from 2.3.3_1 to 2.3.4_1
- 2018-03-22@17:11:25 (Thu) Have encountered exactly the same problem :-(
- 11:55 AM Revision ae78f278: Simplify copyright notice display
-
05:57 AM Feature #8384 (Rejected): Pushbullet notifications would be nice
03/21/2018
- 07:35 PM Revision a1ec79f3: Simplify copyright notice display
-
- I am using OpenBGPD on 2.3.5 and am peering using an MD5 password to a Cisco device, when I upgraded to 2.4.2, the MD...
-
- I am using OpenBGPD on 2.3.5 and am peering using an MD5 password to a Cisco device, when I upgraded to 2.4.2, the MD...
- 02:28 PM Revision 00a1311e: Update obsoleted files
- 02:28 PM Revision 3a910ee1: Make copyright notice downloadable from server
- Trigger cpyright notice on completion of setup wizard
- 02:25 PM Revision e84812a1: Update obsoleted files
- 02:11 PM Revision c8c15bf5: Make copyright notice downloadable from server
- Trigger cpyright notice on completion of setup wizard
03/20/2018
-
- (cherry picked from commit 45b421561d969e73b7df4ab23a3256acce5929eb)
-
03/19/2018
-
- Clarifying that last line:
RFC 3280 defines how the subject of a certificate or CA must be specified. Ideally, the... -
- Attempting to generate a CA or certificate via the cert management tool in the web GUI yields the following error:
... -
-
01:28 PM Bug #8380 (New): OpenVPN RADIUS password length is not constant
- Hi there,
I've been running a production OpenVPN server on pfSense for the past year and I have recently switched ... -
03:08 AM
Bug #8379: rules with DSCP never match
- Post removed, apologies, will post in forum.
Edit: Now I understand my mistake, I agree, this is #notabug -
- This is not a discussion forum. Please start a topic at https://forum.pfsense.org/
I expect this will be closed as... -
02:27 AM
Bug #8379: rules with DSCP never match
- Thanks for the followup Chris.
I will do some more testing - I am using VirtIO/vtnet interfaces, is it possible that... -
- Could not duplicate on 2.4.2_1:
Set laptop switchport to set dscp 14
Set floating rule to match AF13 and log
... -
02:53 AM Todo #765: Patch: Add custom DHCP configuration
- It seems this is still not integrated in pfSense 2.4.
- 12:09 AM Revision 07a84ece: missed a few
03/18/2018
-
11:02 PM
Bug #8379: rules with DSCP never match
- erno rubbik wrote:
> Hello
>
> I am aware this looks like a duplicate of bug 3726 https://redmine.pfsense.org/iss... -
05:03 PM Bug #8379: rules with DSCP never match
Hello
I am aware this looks like a duplicate of bug 3726 https://redmine.pfsense.org/issues/3726 but it's not
...-
- Hello
I am aware this looks like a duplicate of bug 3726 https://redmine.pfsense.org/issues/3726 but it's not
I... - 08:14 PM Revision c5e1ce90: Change CloudFlare to Cloudflare
- This commit also includes misc. whitespace removal on the affected files.
-
- I have tested this. I could easily trigger it in 2.4.2_1 but could not in current snaps. It looks to be solved.
An... -
- currently, the webconfigurator listens on all network interfaces. please implement a mechanism to allow this to be c...
-
- As the description, the mouse over display is always shown as b/s regardless on the bits/Bytes setting.
Seen in: p...
03/17/2018
-
- Ermal says there is code in Darwin that addresses this.
-
- currently, characters in alias names are restricted to "a-z, A-Z, 0-9 and _". this is annoying because it's common t...
- 07:22 PM Revision a7e859b8: fixed code style
-
- when configuring email notifications, and enabling encryption, message notifications fail if the certificate provided...
-
- the email notification settings page [system -> advanced -> notifications -> e-mail], system_advanced_notifications.p...
-
- the system root certificate store [/usr/local/share/certs/ca-root-nss.crt] includes a default set of certificates, bu...
-
- status -> system logs -> firewall -> dynamic view [status_logs_filter_dynamic.php] appears to refresh approximately e...
- 02:47 PM Revision d038a5dd: Don't read picture file if it does not exist
03/16/2018
- 07:22 PM Revision 12b8f3c9: Don't read picture file if it does not exist
- 04:30 PM Revision 7c0e431a: avoid firwall rules for proxyarp addresses
-
-
-
-
-
-
-
-
- Upgraded with a picture in the widget and it was broken after the upgrade. No sign of the image in /conf/
Missing ... -
- new VM, setup picture, downloaded a backup. reset to factory defaults, restored backup, no Image in the widget: Scree...
-
10:51 AM
Feature #8371 (Resolved): Reduce config.xml size by removing picture widget images to file system
- Images now saved in /conf
Upgrade_config function writes any images out to file system and truncates the config.xml ... - 01:23 PM Revision 1f0bbb13: Revise picture widget to store image on file system, not in XML config
- 01:20 PM Revision 9099582c: Merge branch 'master' of gitlab.netgate.com:pfsense/pfsense
- 01:08 PM Revision ee28e293: Revise picture widget to store inamge on file system, not in XML config
-
01:05 PM Feature #4821: PPPoE WANs do not take full advantage of NIC driver queues for receiving traffic
- I will but I was hoping that pfSense people would also push FreeBSD on it, since I'm sure they have a much stronger a...
-
- Since this is a missing feature in FreeBSD networking, you should lobby there for it to be addressed, not here:
ht... -
- Now that the Spectre and Meltdown patches are coming out on various OSes this becomes even more critical to fix becau...
-
- The part of this that was broken in pfSense is OK now, but it looks like haproxy will need to implement its own funct...
-
- Tested and working.
03/15/2018
-
- Inspired by: https://svnweb.freebsd.org/base?view=revision&revision=331015
-
-
11:56 AM Feature #8370 (Closed): Add port number to predefined port drop-down list in NAT Rules
- Hi
I'm missing the port numbers for the predefined ports when creating a NAT rule.
When creating a firewall rul... -
- This appears to have been triggered by a DNS issue, so if there is any problem it is likely the same as #7413.
-
-
-
03/14/2018
-
-
-
10:13 PM Bug #8208: Restoring a config in 2.4.2 with 2.3.X Security/Errata Only repo selected breaks PHP
- 2.3.4 Config with 2.3.X Errata Repo restored to 2.4 systems will break.
2.3.4 Config with 2.4.X Repo restored to 2.4... -
-
- 01:50 PM Revision f9b1c128: Fix case where $_POST['if'] == 0 in sprint_info_box()
-
- This issue seems to be fixed (again) in my local tests.
Please check with tomorrow's snapshot. -
- Until it's proven to be a bug on pfSense (after discussion on the forum, subreddit, etc) then it doesn't belong here....
-
12:38 PM Bug #8368: Cannot log into webConfigurator from Firefox/Linux after fresh install
- I would agree about this being a client side issue if logins were to fail for every web site I visit. However, this i...
-
12:08 PM Feature #6457: Allow ability to configure AWS EC2 AMI via userdata
- A means of running a shell script in some manner as root at first launch would be helpful, a la `fetch -o - $USER_SCR...
03/13/2018
-
- This kind of thing should be discussed on the actual forum at https://forum.pfsense.org, on the pfSense subreddit, or...
-
11:30 PM Bug #8369 (Rejected): Setting password complexity
- Hi All,
This is my first post on this forum, not very sure this is the right page I have to mention this topic.
... -
- There is no such problem with pfSense itself. That is a client side issue.
-
- Since this is a live system (on which I rely for Internet access), I cannot easily reproduce the issue with the same ...
-
- To reproduce:
* Install pfSense 2.4.2 from scratch.
* Assign interfaces, configure an IP address and DHCP server ... -
05:54 PM Bug #8367 (Resolved): Traffic Graph widget shows Inverse view, even when Inverse is set to Off.
- Tested in 2.4.3.a.20180313.0000.
When setting the Traffic Graph widget for Inverse=Off, the graph still displays i... -
-
- This feature has been implemented using code submitted by a package contributer. This issue can be closed.
Bill -
-
- This issue has been resoved in the 3.2.9.6 Snort package versions. The bogus text was coming from an attempt to use ...
-
- I will look at adding this feature to both packages. It would likely be just a text box where the admin could enter ...
-
- Agreed, Bill. It's not worth the trouble to make them persist.
-
- This is not going to happen as there is no need for all the necessary overhead persisting blocks would require. If S...
-
- James Dekker wrote:...
-
05:54 AM Bug #8333: Dynamic DNS updates may fail when using a gateway group as the interface when the default route is down
- Well. I setup new one 2440 with latest 2.4.3 And 2 GW with Active/Passive GW group. Looks like DDNS should work becau...
-
05:46 AM Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel
- For reference, the upstream bug opened by Eric: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=226411
-
- +1
Just bumped into the need to do a fresh install of a LAGG+VLAN setup and could not do it via CLI.
Also available in: Atom