Activity
From 04/08/2018 to 05/07/2018
05/07/2018
-
08:58 PM Bug #8450 (Resolved): High Availability Sync / xmlrpc.php removes "remote system username" on backup cluster member
-
08:33 PM Bug #8450: High Availability Sync / xmlrpc.php removes "remote system username" on backup cluster member
- Tested on 2.4.4.a.20180507.0753, confirmed resolved.
- 07:50 PM Revision bcb08ced: Also delete scheduler on cleanup
- 07:28 PM Revision 50d4c4f2: Setters and getters for $aqm/sched params (anticipating a review will request that)
-
07:10 PM Revision 15acacb4: Welcome 2.3.5-RELEASE-p2
-
- 05:32 PM Revision edd8c491: Add copyright notice logic
-
-
03:17 PM Feature #6620: CoDel, FQ-CoDel, PIE and FQ-PIE AQMs
- PR: https://github.com/pfsense/pfsense/pull/3941
- 03:12 PM Revision c83123b0: Fixed different warnings and errors for PHP 7.2 Migration Illegal String Offsets and undefined constants
- 02:59 PM Revision 1de72f61: Fix command syntax in format_parameters
- 02:09 PM Revision 254581a5: CRLF
- 02:08 PM Revision 926cdf81: PHP7 - Resolve illegal string offset warning
- 02:08 PM Revision 8ac763a0: Fix newlines back
- 02:05 PM Revision dbf56eb4: - Fix an incorrect assumption where I thought the sysctls were measured in ms. they appear to be microseconds instead (thanks Harvy66)
- - Fix a problem where I was recursively assigning parameters in FormatParameters(), but that was not an ideal method ...
- 01:40 PM Revision 58630347: PHP7 - Resolve count() warning
- 01:20 PM Revision d43354d2: PHP7 - Resolve invalid arguemtn and illegal string offset warnings
- 01:15 PM Revision 965eee64: PHP7 - Resolve illegal string offset warning
- 01:13 PM Revision 5b943d25: PHP7 - Resolve count() warning
-
12:59 PM Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel
- Does pfSense patch freebsd kernel for some custom/not working on plain kernel? It will take some time until somebody ...
- 12:58 PM Revision 1cf76cb0: PHP7 - Resolved "Cannot create references to/from string offsets"
- 12:55 PM Revision 07ada3f1: PHP7 - Resolve error "ese of undefined constant sn"
- 12:51 PM Revision aba7f367: Merge branch 'master' of gitlab.netgate.com:pfsense/pfsense
-
- As we're not having traction here, is there a way to manually trigger the GRE interface restart from the command line...
-
09:31 AM pfSense Packages Bug #8501 (Resolved): Incorrect categorization of status/info messages from suricata
- Hi, When suricata_check_for_rule_updates.php runs, it unnecessarily logs informational messages as errors - thus caus...
-
- Hi, When phpDynDNS runs, it unnecessarily logs informational messages as errors - thus causing pfsense to forward mes...
-
08:24 AM Bug #8499 (Resolved): IPv6 fragment logging causes panic in some circumstances
- From customer ticket #4934.
The system crashes repeatedly with near identical back traces:... -
- This message only appears if you have enabled a non-standard/third-party unofficial pkg repository, which is unsuppor...
- 04:38 AM Revision d237e648: Change back to PHP7 compliance
- 04:20 AM Revision e9685c45: - Fixed a bug where you could not get an ECN-incapable scheduler or AQM to work: noecn was appended in rules.limiter.
- - Made a change to an array reference that was breaking my test
05/06/2018
-
08:54 PM Bug #8429: radvd/IPv6 broken in 2.4.3 when using a LAN bridge
- I have the same issue with LAN bridged over 3 ethernet interfaces. The following error is logged every 16 seconds:
... -
11:26 AM Bug #8497: route errors ("route has not been found") on current 2.4.4 snapshots
- Two reboots since 10am, routes ok.
05/05/2018
-
-
08:36 PM
Bug #8469: DHCP Server configuration page errantly expands Dynamic DNS advanced parameters even when none are configured
- Got it, the Dynamic DNS settings remained collapsed.
-
08:27 PM Bug #8469: DHCP Server configuration page errantly expands Dynamic DNS advanced parameters even when none are configured
- Hello James,
The issue is not whether or not the ddnsdomainkeyalgorithm element contains a value in the config; th... -
04:21 PM
Bug #8469: DHCP Server configuration page errantly expands Dynamic DNS advanced parameters even when none are configured
- Tested on 2.4.3.a.20180308.1837 - from stock pfSense, visited Services > DHCP Server and clicked Save at the bottom. ...
- 07:51 PM Revision eace74f4: Wrote to wrong file.
- 07:43 PM Revision 5fefcdab: Revising my PR as it was not PHP7 compliant.
-
-
04:01 PM
Todo #8394: status.php - Some package password fields are not redacted
- Tested in 2.4.4.a.20180504.1639 .. cannot reproduce, sensitive information is replaced with xxxxx
- 05:19 PM Revision a60a9db9: Add dummynet AQM and scheduler configuration support to pfSense Limiters through the GUI. Only shaper.inc was changed.
- Presently, the traffic shaper is versatile however outbound shaping can be tricky. This patch aims to solve that, al...
-
- FYI - I do have routing issues along with this error following a reboot (initial reboot from install was ok).
Rout... -
03:49 PM
Bug #8457: Packages do not remove on factory default
- On a SG-2440 .. pfSense-CE-memstick-ADI-2.4.3-RELEASE-amd64 installed, Branch set to Latest development snapshots and...
-
02:50 PM
Bug #8457: Packages do not remove on factory default
- In a VM .. pfSense-CE-2.4.4-DEVELOPMENT-amd64-20180503-1839 installed, synced to master, setup wizard clicked through...
-
10:32 AM Bug #8457: Packages do not remove on factory default
- Adding notes: All packages are removed from the menu, but not removed from the system:
stunnel-5.44_1,1 ...
05/04/2018
-
11:31 PM Bug #8498 (Not a Bug): cloudflare Dynamic DNS is not working
- cloudflare Dynamic DNS is not working
-
- 05:57 PM Revision 769ae881: PHP7 - Resolve illegal offset error
- 05:52 PM Revision 3987186c: PHP7 - Resolve illegal offset error
- 05:51 PM Revision ee6649b0: PHP7 - Resolve illegal offset error
- 05:50 PM Revision 1a5e85f6: PHP7 - Resolve illegal offset error
- 05:49 PM Revision 7272b169: PHP7 - Resolve illegal offset warnings
-
-
-
-
-
-
11:14 AM
Bug #8494: pressing Enter in pftop filter field redirects to another page
- The issue is not present on latest 2.4.4 snap (2.4.4.a.20180504.0747).
-
-
11:12 AM
Bug #8495: /etc/rc.reboot does not work on latest 2.4.4 snapshot
- Works successfully on latest 2.4.4 snap (2.4.4.a.20180504.0747).
-
- During boot, the console logs numerous identical errors:...
05/03/2018
- 09:10 PM Revision caf4d712: Merge pull request #3781 from PiBa-NL/20170712-defaultgateway-group
- 09:05 PM Revision 65cde57f: Merge pull request #3918 from RepositPower/default-route-preference-in-radvd.conf
- 09:02 PM Revision 1761c8a2: Merge pull request #3927 from peterberbec/master
- 09:02 PM Revision 53a72784: Delete loader.conf.local
- 09:02 PM Revision f8227fe2: Delete IF_URNDIS.KO
- 09:02 PM Revision 267cf2d6: rename
- 09:02 PM Revision 7cb4c2ae: Create loader.conf.locat
- 09:02 PM Revision 7a3cdc11: ndis driver
- 09:02 PM Revision feae1ba4: Add array check
- Even though I now set `$ns` equal to `array_unique(get_nameservers()`, just to be safe we check with `is_array($ns)` ...
- 09:02 PM Revision 0637a69b: scope error?
- Error on reboot.
```
[04-Apr-2018 02:21:54 EST5EDT] PHP Warning: in_array() expects parameter 2 to be array, null g... - 09:02 PM Revision 2d0f86ba: Fixing debug errors.
- 09:02 PM Revision 43a1b4bd: hideCheckbox. The 'o' is important. And use js instead of php like we're supposed to.
- 09:02 PM Revision b458b3d3: Change array index to use php-style
- 09:02 PM Revision 1e238af4: Add fixed suggested by jim-p
- 09:02 PM Revision 0877fe87: Moved out of my root directory :(
- 09:02 PM Revision 80f95a62: Allow ocsp-staple to override
- Enable ocsp stapling to on if forced that way through configuration
- 09:02 PM Revision 4bdc654b: Change option text
- Make it a force-on option
Hide option if ocsp is enabled - 09:02 PM Revision 5067844c: Use cert_get_ocspstaple
- Use cert_get_ocspstaple during nginx configuration generation
- 09:02 PM Revision 0276ff2e: add cert_get_ocspstaple
- 09:02 PM Revision b7a4321c: Create get_dns_nameservers function
- Put code in a function since it gets called in two places.
- 09:02 PM Revision 8d76d71a: Steal resolvconf
- Steal the nameserver generation code from the resolvconf code
- 09:02 PM Revision d7a0bbbe: Improve description, reorder
- make ordering proper
- 09:02 PM Revision 63a0cb97: Use option properly
- Use the option created by the config to control stapling
(and add a missed semicolon!) - 09:02 PM Revision 895a7b90: Add OCSP option in config
- 09:02 PM Revision 2bf437ba: Beginings of enabling SSL Stapling
- Add the option. Default to enable
-
08:05 PM
Feature #8496 (Duplicate): Allow user to backup multiple sections of their configuration
- At Diagnostics > Backup & Restore, the user is able to select All or one specific section of the config to back up.
... -
- (cherry picked from commit 21fdf72c0b3caf960512373ad903fe03ccc578ff)
-
- (cherry picked from commit 21fdf72c0b3caf960512373ad903fe03ccc578ff)
-
-
- (cherry picked from commit 63642806eb11d2a1d8b203d85252f4afa15876ce)
-
-
- (cherry picked from commit 3e1b29c7ba3a586cb94268d76ecb78874c2f5007)
-
-
-
- Applied in changeset commit:21fdf72c0b3caf960512373ad903fe03ccc578ff.
-
- This reverts commit e33c96162a33b52a9152ce0b05dba8b25f1dc2b4.
- 02:45 PM Revision 6fb33591: Enforce array type for PHP 7.2 Migration
-
- (cherry picked from commit e2654541019b59f544cda76fb0e63ea7a4a5d040)
-
-
- Applied in changeset commit:22b43392c24ef1c8fd165a5fa6b30098d127c010.
-
- /etc/rc.reboot calls "/sbin/reboot now" and apparently that has been disabled in 11.2-PRE, see https://github.com/fre...
-
- After talking with others this is all up to the target server. AD respects the space, for example, while OpenLDAP doe...
-
-
10:05 AM Bug #8493: Assigned OpenVPN interface does not send traffic via right route until reboot
- Got it, no more questoins
-
- It's noted in "book section on assignment":https://portal.pfsense.org/docs/book/openvpn/assigning-openvpn-interfaces....
-
- Did not know about OpenVPN restart. Perhaps we need some hook for autorestart or warning there, because this is not o...
-
- After assignment, you must restart the VPN manually so OpenVPN can reapply the interface setttings which are stripped...
-
- In case of using several OpenVPN instances, e.g. Client (has its own default route) and Server on pfsense, assigned O...
-
- Applied in changeset commit:e2654541019b59f544cda76fb0e63ea7a4a5d040.
-
-
- If I press Enter in pftop filter field system redirects me to another page instead showing result in Output frame.
...
05/02/2018
- 08:51 PM Revision 714c15d7: Cleaner fix for ##8447
- (cherry picked from commit 96fa3e3616c1b46cbd23593df8c08cceb23a61e6)
- 08:51 PM Revision e3dfbd9c: Fixed #8447
- (cherry picked from commit 1d523d1e4e7b16519ed3fd9dfb9e6b4dd84b4285)
-
- (cherry picked from commit a2e92e18a35112ec59d18d3555f89668d9e07a11)
- 07:52 PM Revision 8228ea91: fix #8441;
- ipfw rules must be deleted before cp record delete.
(cherry picked from commit 29a272f7361689c87dd7ad9fc1c903e843a1c... -
- (cherry picked from commit 6ad146e0445961ccba5323cccadcdfddc98e7d55)
-
- (cherry picked from commit a2405c1a8c366e1ad2ececd4f62c577eed31ab7c)
-
- (cherry picked from commit 885e9b2a1df256f4d50367f96b4d39c1106b2448)
- 07:51 PM Revision a8ad9098: Cleaner fix for ##8447
- (cherry picked from commit 96fa3e3616c1b46cbd23593df8c08cceb23a61e6)
- 07:51 PM Revision ca0ca1c5: Fixed #8447
- (cherry picked from commit 1d523d1e4e7b16519ed3fd9dfb9e6b4dd84b4285)
-
- Also, move the list to a central location so it does not need to be duplicated.
(cherry picked from commit b20cfb551... - 07:51 PM Revision 1ed92658: fixed code style
- (cherry picked from commit a7e859b80d55abfbdcae1918065aaf59baba4900)
- 07:51 PM Revision 2d6255e1: avoid firwall rules for proxyarp addresses
- (cherry picked from commit 7c0e431a878d63fdb0440dbd2c1fad1e7d379f8c)
- 04:48 PM Revision 6dde4c10: Type check for array, Part of php 7.2 migration
- 04:12 PM Revision e3df164a: Added a check to make sure ['ipsec'] was an array, Part of PHP 7.2 Migration
-
-
- (cherry picked from commit be4693a1e79d89cfc6ea797fcb7fb56b5052c26d)
- 03:41 PM Revision bb24d66e: PHP7 Resolve count() parameter warning
-
- What's there now is enough for this purpose. I haven't yet been able to come up with a good way to represent the data...
-
- Applied in changeset commit:ff13ca0dfe2e016cb21141f0dbd7cdad44e55a46.
-
- PR Link: https://github.com/pfsense/FreeBSD-ports/pull/518
-
- This is in the package and working OK now
05/01/2018
-
- 06:22 PM Revision f1552738: PHP7 - Resolev undefined constant warning
- 05:47 PM Revision 72f363ed: Fixed #8486 via htmlspecialchars()
- (cherry picked from commit 687e50fd439179ba61a518c7b68c91b168e56e50)
- 05:47 PM Revision 8d7458f6: Fixed #8485 by POSTing fixed string and looking up the required file name
- (cherry picked from commit c29a1fe90f89c1ae392df2ef2092207e282ddc37)
- 05:46 PM Revision 5c856a1d: Fixed #8486 via htmlspecialchars()
- (cherry picked from commit 687e50fd439179ba61a518c7b68c91b168e56e50)
- 05:46 PM Revision 9d918214: Fixed #8485 by POSTing fixed string and looking up the required file name
- (cherry picked from commit c29a1fe90f89c1ae392df2ef2092207e282ddc37)
- 05:46 PM Revision b662c5e4: Fixed #8486 via htmlspecialchars()
- (cherry picked from commit 687e50fd439179ba61a518c7b68c91b168e56e50)
- 05:46 PM Revision 48f8b5ad: Fixed #8485 by POSTing fixed string and looking up the required file name
- (cherry picked from commit c29a1fe90f89c1ae392df2ef2092207e282ddc37)
-
- Applied in changeset commit:a2e92e18a35112ec59d18d3555f89668d9e07a11.
-
11:37 AM Bug #8492 (Duplicate): Enable setting PKCS#12 export password in Certificate Manager
- Several use cases exist for using an exported keypair as a .p12 archive, but are complicated by pfSense not setting a...
-
08:04 AM
pfSense Packages
Bug #8491 (Resolved): ACME: DNS-Luadns not working
- Hello,
I'm using acme 0.2.8_2 with LuaDNS. If I want to obtain a certificate with the DNS-Luadns method, I should ...
04/30/2018
-
08:14 PM pfSense Packages Feature #8490: pfSense-pkg-acme: acme_certificates_edit.php - Add ability to specify (vs generate) private key
- Scott Smith wrote:
> * Like other user-entered data, the user-entered _Private Key_ text would be stored in the co... -
-
-
-
05:27 AM Bug #6880: Multiple DHCP6 WAN connections leads to multiple dhcp6c clients
- Luke Hamburg wrote:
> Thanks. I first checked out master and didn't find that commit... then drank some coffee & re... -
03:39 AM Bug #6223: IPsec + OpenBGPD fails with "PF_KEY socket: No buffer space available"
- Just finish to migrate to FRRouting
IPV4 OK but IPV6 bad dream... fortunately there is a great thing called vtysh ...
04/28/2018
-
05:29 PM pfSense Packages Feature #8490 (Resolved): pfSense-pkg-acme: acme_certificates_edit.php - Add ability to specify (vs generate) private key
- I was unable to find a bug/issue/etc on this specific topic, so I'm submitting it as a Feature request.
When a use... -
04:58 PM Bug #8489: DHCPv6 Client Failure to Initialize with "Do not wait for RA"
- Here is a post reboot log file with debug enabled.
Apr 28 14:51:55 dhcp6c 9814 reset a timer on hn1, state=SOLICIT...
04/27/2018
-
- I should also add that I am using the "Do not wait for a RA" feature.
-
- Since snapshot 2.4.4-DEVELOPMENT (amd64) built on Thu Apr 26 14:32:50 CDT 2018, the DHCPv6 Client will not initialize...
- 04:58 PM Revision 687e50fd: Fixed #8486 via htmlspecialchars()
- 04:52 PM Revision c29a1fe9: Fixed #8485 by POSTing fixed string and looking up the required file name
-
- Unable to reproduce with the fix applied. Looks good to me.
-
12:00 PM
Bug #8485 (Feedback): pkg_mgr_install.php: Arbitrary files can be read by an authenticated user via logfilename sent in POST
- Applied in changeset commit:c29a1fe90f89c1ae392df2ef2092207e282ddc37.
-
- Unable to reproduce with the fix applied. Looks good to me.
-
12:10 PM
Bug #8486 (Feedback): pkg_mgr_install.php: output variable not encoded before display
- Applied in changeset commit:687e50fd439179ba61a518c7b68c91b168e56e50.
-
- This ticket isn't relevant to 2.4.3. See #8426 for details and a patch.
-
01:27 PM Bug #4806: Mobile IPSec Broken on iOS devices after 2.2.3 Upgrade from 2.2.2
- Hi,
I am running two pfSense firewalls on version 2.4.3 and I think this issue is still there. On both machines, I... -
-
-
- Duplicate of #8039
Update to a current version, that was fixed several months ago. -
08:20 AM Bug #8488 (Duplicate): Erro to create new NAT Rule
- Hello!!!
When I try to create a NAT rule, I get this error message.
"The following input errors were detected:
...
04/26/2018
-
11:59 PM Bug #8429: radvd/IPv6 broken in 2.4.3 when using a LAN bridge
- Jason Smith wrote:
> Agreed, I'm facing the same issue. Please fix this in the next Dev & Rel version. Thanks.
>
... - 08:58 PM Revision bf905930: PHP7 - Resolve undefined constant warning in dyndns.class
- 07:22 PM Revision 68ba7d89: PHP7 - Resolve Warning: A non-numeric value encountered in /usr/local/bin/dhcpd_gather_stats.php
- 07:19 PM Revision f156083a: PHP7 - services->DHCP resolve warning
- 07:10 PM Revision d93d8c9c: PHP7 system.php - resolve ngettext() expects parameter 3 to be integer, string given
- 07:02 PM Revision 33d28154: PHP7 system.php Resolve min/max undefined constants
- 06:48 PM Revision 82db8285: PHP7 - Resolve warning in interdaces_ppps
- 06:44 PM Revision 8a78fdc0: PHP7 - Revise vpn_l2tp warning resolution
- 06:37 PM Revision d45b79cf: PHP7 - Resolve warning in ipsec_keys_edit.php
- 04:03 PM Revision f3a6e4cd: PHP7 resolve system->wol->edit invalid offset warning
- 03:50 PM Revision 3f01e023: PHP7 System->WOL resolve invalid string offset warning
-
- Fix pushed (plist was missing entries)
-
03:25 PM pfSense Packages Bug #8487 (Resolved): pfSense-pkg-acme 0.2.8: dns_acmedns not working because of missing file pkg/acme/dnsapi/dns_acmedns.sh
- I upgraded pfSense-pkg-acme from 0.2.7 to 0.2.8 to use the new "dns_acmedns" Provider.
But validation failed because... - 03:45 PM Revision 489eca27: PHP7 Resolved Services->uPNP integer value warning
-
03:31 PM
Bug #7439 (Closed): IKE_SA (IKEv2) does not rekey on break before make startegy, just issues IKE_DELETE and connection is closed
- Marking this closed due to lack of feedback. If you believe this should be reopened, please let us know.
-
03:30 PM
pfSense Packages
Bug #6690 (Closed): SURICATA IPS Issue - Kills VLANS & Traffic Shaper
- Marking this closed due to lack of feedback. If you believe this should be reopened, please let us know.
-
03:30 PM
Bug #7079 (Closed): ClamAV C-ICAP causing Kernel Panic and System Crash
- Marking this closed due to lack of feedback. If you believe this should be reopened, please let us know.
-
03:29 PM
Bug #7480 (Closed): pkg framework - textarea on rowhelperfield errors
- Marking this closed due to lack of feedback. If you believe this should be reopened, please let us know.
- 01:24 PM Revision 99f43876: PHP7 system gateways edit - Resolve illegail string constant warning
- 01:18 PM Revision 5aa0c748: PHP7 - system->Gateays resolve illegal string offset error
- 01:08 PM Revision 7c150530: PHP7 - Resolve vpn_l2tp undefined constant warning
- 12:56 PM Revision 6298695a: PHP7 - Resolve Warning: Use of undefined constant “p” in System->Update
- 12:46 PM Revision 3837d1aa: PHP7 - Resolve MultiCheckboxGroupAdd compatibility warning
- 12:33 PM Revision 73210129: PHP7 - Resolve "Illegal string offset" in interfaces.php
- 12:16 PM Revision 7d343bc4: PHP7 - Resolver "must be countable" warning
- 12:04 PM Revision c1fac94d: PHP7 - Resolve setParent wanring
-
- It is possible to inject arbitrary html/JS into pkg_mgr_install.php on POST through the output parameter, which is no...
-
- logfilename is taken from POST and can be used to read arbitrary text files from the firewall.
The logfilename par... -
- Duplicate of #8187 (which has a patch available on a PR to test)
Also, bug reports against outdated versions such ... -
10:45 AM Bug #8484 (Duplicate): [2.3.3_1] New default gateway when the first default gateway is down
- In Pfsense 2.3.3_p1 when i turn off the default gateway the expected gateway don't takes over.
* Steps to reproduc... -
08:38 AM pfSense Packages Bug #8425: telegraf not reporting memory
- *Anyone home?!*
https://github.com/pfsense/FreeBSD-ports/pull/517#issuecomment-384642655
04/25/2018
-
-
-
-
-
06:15 PM pfSense Packages Bug #8438: haproxy: can't use ACL for cert with http-response actions
- Another one on the web interface consistency:
There are several different ways how to reorder certain entries depe... -
- One more minor issue:
In the Shared Frontend configuration, the Default Backend option shouldn't be configurable.
... -
05:02 PM
Feature #8483 (New): Allow user to choose order of Queues status
- Allow user to switch Queues order from Alphabetical to ascending, in order of priority at Status > Queues.
-
-
- Added to Avahi pkg v 1.12
-
10:52 AM Feature #4632: Support for Multipath TCP (MPTCP)
- https://www.freebsdfoundation.org/project/multipath-tcp-for-freebsd/
-
09:04 AM Feature #3474: Openvpn client-specific-overrides ip conflicts
- Hello,
Can someone tell me if this issue is solved in 2.4 ?
04/24/2018
-
- Almost certainly nothing we can do about a crash of that nature. You'll have to take that up with ntopng and/or FreeB...
-
03:17 PM pfSense Packages Bug #8482 (Closed): Reseting states causes ntop-ng to core dump
- Not sure if this is somewhat expected, but reseting states through the "diagnostics" menu causes ntopng to core dump....
-
-
- function to return instead
-
10:17 AM Bug #8481 (Duplicate): Editing multiple entries in multiple browser tabs causes problems or doesn't work
- In various places in the web interface, trying to edit multiple entries in browser tabs and saving them one by one do...
-
- *UPDATE*: my changes were committed upstream (https://svnweb.freebsd.org/ports?view=revision&revision=468200).
I h... -
- Telegraf 1.6.1 was released yesterday with the updated godeps that fix various issues. I have submitted my patches up...
-
04:45 AM Bug #8480 (Resolved): common/user name not expaned in openvpn.attributes.php (when doing per-user fw rules)
- As requested on forums (https://forum.pfsense.org/index.php?topic=146908.0) opening bug report.
It seems there are... -
02:30 AM Bug #8429: radvd/IPv6 broken in 2.4.3 when using a LAN bridge
- I'm seeing a similar issue, but I am using a USB ethernet device for the LAN connection:
ioctl(SIOCGIFMEDIA) failed... -
12:13 AM Revision ba1f99cd: Improve/add help messages warning about bad security choices
04/23/2018
- 08:14 PM Revision 3f576469: Merge pull request #3938 from CampinCarl/master
- 08:13 PM Revision 2c588398: Merge pull request #3940 from GrantSheehan/add_do_dyndns
-
07:39 PM Revision 43a9b03d: Gateways, allow for configuring a gatewaygroup as the default gateway.
- -Avoid changing routes by just visiting a webgui page.
-Avoid change some unneeded events when nothing changed. -
- Duplicate of #8391 and #6028
And in the future, if you believe you have found a security problem, the correct proc... -
04:04 PM Bug #8479 (Duplicate): Firewall stops working (all the traffic passes!) due to an error caused by OpenVPN wizard.
- Originally published at https://forum.pfsense.org/index.php?topic=147068.0
Guyz, today I've discovered *a very dan... -
09:47 AM Feature #7890 (Rejected): Support for Intel/AMD CPU microcode updates
-
- As long as we can prove that change will not negatively impact other clients it should be OK to make that change, but...
- 02:29 AM Revision 32cb54c3: Merge branch 'master' into add_do_dyndns
04/22/2018
- 10:27 PM Revision 544674ad: Add DigitalOcean DynDNS client
-
09:04 PM Feature #8478: Add DynDNS client for DigitalOcean DNS
- PR is posted: https://github.com/pfsense/pfsense/pull/3940
-
- Add a DynDNS client for DigitalOcean's DNS service.
-
- When a gateway alarm is triggered or cleared is is reported in the system log using milliseconds (ms) but the gateway...
04/21/2018
-
02:17 PM pfSense Packages Bug #8476 (Resolved): OpenVPN Client Export TLS Key Direction Directive Location
pfSense Version: pfSense-CE-memstick-2.4.3-RELEASE-amd64.img.gz ( https://nyifiles.pfsense.org/mirror/downloads/pfS...
04/20/2018
-
07:56 PM
Bug #8463: Performance Regression in 2.4.3 under KVM
- If I change the cards from being vtnet to em0 (i.e. remove the VirtIO ethernet card in Proxmox and replace it with th...
-
-
- tested on today's snap: 2.4.4.a.20180420.1016
removed item from the captive portal status page.
was removed from ip... -
-
-
- Was able to confirm fix worked.
-
11:34 AM pfSense Packages Feature #8475 (Closed): syslog-ng TLS configuration support
- For syslog-ng to use TLS, it needs access to certificates, and in particular CA certs. For the local cert/key I can ...
04/19/2018
-
11:52 PM Feature #8474 (New): Easier Conversion to HA Pair from Existing Non-HA Firewall
- Requesting perhaps a guided wizard built-in to convert an existing well established pfsense 2.4.x configuration (such...
-
03:39 PM pfSense Packages Bug #6339: OpenVPN Client Export package option for "Use Microsoft Certificate Storage" does not specify which certificate to use
- Not sure if it would be easier to implement, but using this works well for me:...
-
- I'm not inclined to split off those options to their own page. There aren't that many, and I also don't like the idea...
-
12:29 PM Bug #8473 (Closed): Not a bug: a feature patch that's been part implemented.
- In the last couple of weeks there's been news on DNS privacy. I was JUST about to submit a PR for a bunch of Unbound ...
-
11:09 AM Bug #8472 (Resolved): IPsec with "Split connections" enabled (multiple P2's) - new added P2's are not coming up (between two pfsense's 2.4.3)
- When a new P2 is created it is not appearing in active SA's.
For example - P2 is added for 10.200.136.0/24|/0 === ... -
- Docs adjusted. It used to work that way (button on either page) in 2.2.x, but in 2.4 the button only shows on the Mob...
-
- You have some other configuration issue there. Captive Portal works well on 2.4.3, unless you are hitting #8441 in wh...
-
09:59 AM Bug #8471 (Rejected): Captive portal version 2.4.3
- After updating from 2.4.2 to 2.4.3, captive portal does not work.
Any user is allowed to use the network, even if th... -
04:04 AM
Bug #8463: Performance Regression in 2.4.3 under KVM
- As suggested on reddit I have also done a fresh install of 2.4.3 and then applied the backed up configuration. This ...
04/18/2018
-
-
04:28 PM Bug #8470 (Closed): IKEv2 EAP-MSCHAPv2 inconsistent as option (documentation or fix)
- Only if you create a tunnel from the Mobile Clients page instead of from the Tunnels page does the EAP-MSCHAPv2 optio...
-
03:33 PM Bug #8413: Virtual IP on PPPOE interface no longer working with 2.4.3
- This is not duplicate of #8393 - I've applied the patches of #8393 and it does not resolve the issue
-
- Pull Request: https://github.com/pfsense/pfsense/pull/3938
-
- When saving DHCP Server configuration settings, the Dynamic DNS Key algorithm drop down box (under advanced Dynamic D...
-
01:38 PM Bug #8468 (Rejected): Status / Queues show mostly NaN
- While using shaping on multiple interfaces (and only priq in my situation), many of the columns only show NaN.
For... -
03:18 AM Bug #8467: Certificate Manager Cannot Delete/Export
- hmm... the issue disappeard. Now exporting the certificate works. The problem might have been related to an upgrade f...
04/17/2018
-
- Assigned to PM for future reassignment.
-
- Assigned to PM for further re-assignment.
-
- Can't reproduce it here, either. All entries export fine. Must be a local problem or something wrong with that instal...
-
05:41 PM
Bug #8467 (Feedback): Certificate Manager Cannot Delete/Export
- I am unable to reproduce. The functionality works as expected for me. Please ensure you have JavaScript enabled, and ...
-
- Exporting a Certificate Authority is not working. There is no error message. The page just gets reloaded and not down...
-
- Also:
1. Add "path_dir" to the default list of ACL expressions
2. Your current ACLs are case insensitive (-i) by ... -
- I've got one minor feature proposal:
Notes/Description/Comments for each ACL or action entry
Normally if I'd us... -
09:04 AM Feature #8316: expiration date when creating new rules
- I also would welcome this feature.
-
07:54 AM pfSense Packages Bug #8466 (Resolved): radiusd crash
- Radiusd crash when for a user is set a password in plain text containing " (double qoutes)
After this all users get ... -
07:05 AM Feature #4688: Missing TFC Traffic Flow Confidentiality support
- Jim Pingle wrote:
> The IPsec stack in FreeBSD was overhauled between FreeBSD 10.x and FreeBSD 11.1, so it's possibl... -
- *UPDATE*:
Telegraf 1.6.0 final was released today. I have updated the port accordingly, and it includes the memory p... -
04:21 AM Bug #8465 (Resolved): Lost default gateway after recover from failover with CARP VIP and HA
- Both boxes works with SuperMicro Boards which have two interfaces on board and an additional i350 4 Port network card...
-
- Wireless USB card on Realtek RTL8192SU chipset in BSS mode does not connect to WiFi until wilreless interface is set ...
04/16/2018
-
04:53 PM Bug #8424: IPv6 stops working completely for interfaces that use interface tracking and have VIPs configured on them
- Apparently after more testing, the issue does not manifest after modifying the max table size to mitigate the bogon t...
-
04:00 PM
Bug #8463: Performance Regression in 2.4.3 under KVM
- I should also point out under 2.4.3 that IBRS isn't enabled:...
-
01:58 PM
Bug #8463 (Closed): Performance Regression in 2.4.3 under KVM
- Since upgrading my install to 2.4.3 I have noticed a decrease in the results I get from speedtest.net and fast.com
I... - 01:45 PM Revision e3957306: Merge pull request #3937 from Bg-Tek/cp_disconnect_not_remove_ipfw_rules
- 01:28 PM Revision 7be90df1: Merge pull request #3912 from mhalden/nat_ifgroups
- 01:25 PM Revision 9ba58425: Merge pull request #3935 from Firminator/patch-1
-
-
- The IPsec stack in FreeBSD was overhauled between FreeBSD 10.x and FreeBSD 11.1, so it's possible that the behavior i...
- 11:13 AM Revision 29a272f7: fix #8441;
- ipfw rules must be deleted before cp record delete.
-
- The small gear icon/animation that appears in the dashboard update widget is not centered, so the animation is a bit ...
-
- As implemented, this script would only be run when the OpenVPN client configuration is re-written, which happens when...
-
- The updated port is already on 2.4.4 snapshots, try it there. If it still has issues, you'll need to replicate them o...
-
05:54 AM pfSense Packages Bug #8461 (Closed): open-vm-tools : bug with version 2.4.3
- Hello,
I have a very specific bug that appeared with version 2.4.3.
When uploading a file to pfSense using vmwa... -
09:00 AM
Bug #8441 (Feedback): Manually disconnecting a captive portal user leaves the IPFW table entry
- Applied in changeset commit:29a272f7361689c87dd7ad9fc1c903e843a1c593.
04/15/2018
-
12:01 PM pfSense Packages Feature #8279: Consider adding a new option to the Rule Order
- Two more options:
1 - in pfBlockerNG, Rule Order add option - "Do not change (preserve) existing order"
or
... - 01:57 AM Revision 70e0b547: Update system_advanced_admin.php
04/14/2018
-
- Did FreeBSD get TFC support in the last 2 years?
-
- FWIW: Here is my @port@ setup for the patched Telegraf fixing the memory issue and addressing the new golang deps for...
-
07:02 AM Feature #5544: DHCP static mapping from RADIUS
- Michael F wrote:
> it will be a brilliant to set the static DHCP mapping only one time on a RADIUS server & use it f... -
02:28 AM Bug #8122: openvpn client is unable to use OTP (temporary) passwords
- I attached a screenshot of the initial implementation as it would make easier to review it.
I know that there are ...
04/13/2018
-
07:55 PM
Bug #7604: Bug #6594 is not resolved: Waiting for Internet connection to update pkg metadata and finish package reinstallation
- Still hitting this in 2.4.3.
-
-
04:02 PM
pfSense Packages
Bug #8456: Squid shows Warning on package page after installation
- Tested on 2.4.4.a.20180413.1305, fix works.
-
- *Update*: I worked with an InfluxData dev on this issue and it's indeed upstream. @gopsutil@[1], a golang dependency ...
-
11:02 AM Bug #8460: Ntopng and default SNMP daemon issues
- Hello Jim,
Thank you for the reply. Will ping bsd bug tracker. -
- Nothing we can do about that. Take it up with bsnmpd in FreeBSD if you want to pursue the issue. You already found th...
-
- Pcap captures of snmpwalk and when adding pfsense from ntopng interface.
-
- Hello,
When adding pfsense as a SNMP monitored target in ntopng an error message appears. Switching to net-SNMP fi... -
- It's not at all clear what you're referring to here. Please post on a discussion platform such as the forum, pfSense ...
-
08:53 AM Bug #8459 (Rejected): Duplicating IP Addresses on Dhcp Server
- I am using Version 2.4.3-RELEASE (amd64)
I use pfsense as a dhcp server on my network, I noticed that after upgradin... -
09:48 AM pfSense Packages Bug #8454: Arpwatch package break email notifications from other sources
- Makes sense since all that sendmail script does is call the internal mail handling.
I see three options:
1. Chang... -
- Done on 2.4.3 and 2.3.5
-
08:41 AM Feature #8458 (New): Allow reordering of interface widget
- It would be nice to be able to reorder the interfaces in the Interface widget.
- 02:25 AM Revision 9886c24b: Update system_advanced_admin.php
- * upper and lowercase fixes
* added missing space
04/12/2018
-
07:07 PM
Bug #8048: DHCPv6 Configured for LAN without LAN interface
- Still hitting this issue in 2.4.4.a.20180412.1121. Can't tell why the <dhcpdv6> section is being added to the configu...
-
- also tested via menu option 4. the Packages I Installed (acme, Nut Ladvd) were not removed
-
- Tested 2.4.4, hardware reset did not clear the packages like it did on 2.4.3.
Hardware reset worked on 2.4.3, but ... -
02:41 PM
Bug #8457 (Resolved): Packages do not remove on factory default
- Install 2.4.2 CE. Upgrade to latest 2.4.4 snap. Install Squid. Factory Default the appliance. The package will remain...
-
- (cherry picked from commit af7c0311b89656198e00ded91c1a2a87f34c331b)
-
-
- Reflection rules are created properly for port ranges. Please post on the forum, pfSense subreddit, or mailing list f...
-
- Fix pushed
-
01:37 PM
pfSense Packages
Bug #8456 (Resolved): Squid shows Warning on package page after installation
- Install 2.4.2 CE, upgrad to latest 2.4.4 snapshot. Install Squid package, visit Services > Squid and the text (Warnin...
-
- Since it's OK on 2.4.4, we can copy back the new ntopng to 2.4.3 now
-
12:38 PM
pfSense Packages
Bug #8277: ntopng service fails to start on 2.4.3
- Tested on 2.4.4.a.20180412.1121, service starts and can be accessed.
-
11:36 AM Bug #8426: Mobile IPSec login not working after upgrade from 2.4.2p1
- I tested the diff and can confirm it works again. Thank you so much for fixing this so quickly Jim!
-
- Applied in changeset commit:af7c0311b89656198e00ded91c1a2a87f34c331b.
-
- Well, ipsec.secrets is written out identically on both a working (2.4.2) and non-working (2.4.3, 2.4.4, 2.3.6) setup ...
-
- Looks like the PSK for another tunnel is being used instead of the more exact match. It works when it is the only ent...
-
- I wouldn't say those are broken. Those cron notifications didn't work at all without the symlink setup by arpwatch. F...
-
- Arpwatch replaces /usr/sbin/sendmail with a symlink to a PHP script that specifically mentioned Arpwatch in the messa...
-
- Please post on the forum or pfSense subreddit for assistance. Most likely this is not related to IPsec at all, but a ...
-
07:29 AM Bug #8455 (Not a Bug): IPsec site2site connection not working after upgrade to 2.4.3
- Since the upgrade from 2.4.2p1 to 2.4.3, the connection to the remote ipsec endpoint fails with 04[NET] error writing...
-
06:47 AM Bug #8429: radvd/IPv6 broken in 2.4.3 when using a LAN bridge
- just to confirm. Having the same problem.
[Apr 12 11:43:32] radvd (88189): polling for 0 second(s), next iface is ...
04/11/2018
-
09:40 PM Bug #8453 (Not a Bug): NAT reflection can't work when NAT port faword set Destination port range
- NAT reflection can't work when NAT port forward set Destination port range.
it can work when setting single NAT p... -
-
06:13 PM
Bug #8417: IPv6 bogon list size now too large to fit in standard maximum table size
- Tested on pfSense CE version: 2.4.4 Built On: Wed Apr 11 14:31:44 CDT 2018 .. after upgrading from 2.4.2. Nothing wro...
-
04:19 PM Bug #8452 (Closed): PPPoE :: Interfaces > WAN: [PPPoE Configuration] Service name :: colon not allowed (invalid character)
- I have noticed that a colon is not allowed in the "Service name" of a PPPoE configuration under "Interface > WAN".
O... -
01:15 PM Todo #8451 (Resolved): System Information dashboard widget - Kernel PTI toggle
- When editing the System Information dashboard widget, all sections of the widget can be toggled on or off. Since the ...
-
02:11 AM Bug #8450: High Availability Sync / xmlrpc.php removes "remote system username" on backup cluster member
- OK now we're getting somewhere. I can confirm that there is something to look at here regarding syncing users from th...
-
01:56 AM Bug #8450: High Availability Sync / xmlrpc.php removes "remote system username" on backup cluster member
- No, the xmlrpcsync user does not exist on the primary. However, since the "user manager users and groups" checkbox is...
-
- Does the xmlrpcsync user exist on the primary?
I use a custom user (xmlrpc) for this and it survived the upgrade, ... -
- Two-member cluster:
- Primary: upgraded from 2.4.2-p1 to 2.4.3 using the GUI
- Backup: issue occurs both after an u...
04/10/2018
-
08:05 PM Bug #8076: User can easily apply an unusable interface configuration after restore
- This is exasperated by the fact that in previous versions of pfSense when you got the "reassign interfaces" page afte...
-
-
01:28 PM Bug #7443: Issues Creating IPv6 Static Mappings
- The actual lease works now, so now I am just basically verifying the original bug report. Its cosmetic only but I agr...
-
- Did this ever get fixed? I ended up at this page trying to diagnose static ipv6 mappings.
I have configured static... -
-
12:58 PM pfSense Packages Bug #8440: Suricata 4.0.4_1 disablesid.conf does not disable rule?
- This is not a bug. The rule being triggered was a flowbit rule. Therefore, the disablesid.conf could not disable the ...
-
-
-
03:31 AM Bug #8448: Log size modification broken
- In addition, -after three consecutive size changes- when you start with a very large number, the file doesn't stop gr...
- 12:48 AM Revision 41270b74: Delete loader.conf.local
- 12:48 AM Revision 3173cf70: Delete IF_URNDIS.KO
- 12:48 AM Revision c344add2: rename
- 12:47 AM Revision 072e0e93: Create loader.conf.locat
- 12:46 AM Revision a397fd7a: ndis driver
-
12:16 AM Bug #8426: Mobile IPSec login not working after upgrade from 2.4.2p1
- Seeing the same error ("The VPN Shared Secret is incorrect.") on iOS. Exact same config worked before the update to 2...
04/09/2018
-
-
-
-
- Can confirm this same behavior. An upstream bug was also filed: https://github.com/influxdata/telegraf/issues/3750
-
07:26 PM
Bug #8410: unable to use registered services by name and unable to define aliases for registered services using their name
- Tested on latest 2.4.4 CE snapshot gitsync'd to master, works as expected. Setting port to other and using the name, ...
-
- Applied in changeset commit:885e9b2a1df256f4d50367f96b4d39c1106b2448.
-
- @is_port()@ from /etc/inc/util.inc tests a string against known services by name to determine validity, not just numb...
-
07:15 PM
Bug #8409: pfsense alias complains about well known name for non well known port
- Tested on latest 2.4.4 CE snapshot gitsync'd to master, works as expected.
-
- Applied in changeset commit:a2405c1a8c366e1ad2ececd4f62c577eed31ab7c.
-
- The haproxy_config_init() is a new function added in the second last commit. Not sure why that wouldn't exist after u...
-
- Updated and tested all of the above - looks alright.
Only right after the update I encountered one issue:
- I was... -
- Okay 0.56 haproxy-devel package is available now through normal pfSense packages. If you can check 'everything' now w...
-
- Confirmed here as well. It works as it should now. Switching to IPv4+IPv6 disables the gateway edit control, then swi...
-
01:01 PM
Bug #8447: Cannot change Gateway in Firewall > Rules
- Tested on latest CE snapshot gitsynced to master, works as expected. Editing an IPv4+IPv6 rule's gateway is possible ...
-
09:20 AM
Bug #8447: Cannot change Gateway in Firewall > Rules
- Applied in changeset commit:1d523d1e4e7b16519ed3fd9dfb9e6b4dd84b4285.
-
09:07 AM
Bug #8447 (Feedback): Cannot change Gateway in Firewall > Rules
- Should be fixed in the next snapshot. Please confirm here.
-
- Confirmed here, too. Create a new rule, Gateway is changeable. Set Address Family to IPv4+IPv6, Gateway field is disa...
-
- Looking at it more there is something here, but it takes more steps to duplicate than you provided.
It works if yo... -
- I made some alterations to the text, cosmetic only. I made sure all the options work as expected here after, looks go...
-
01:09 PM
Feature #8402: SSH2 Enforced Key and Username+Password Authentication...
- New options show up and each works as expected on latest 2.4.4 CE snapshot gitsync'd to master.
- 02:25 PM Revision 96fa3e36: Cleaner fix for ##8447
- 02:17 PM Revision 62ea1dbd: Merge pull request #3904 from Hobby-Student/master
- 02:06 PM Revision 1d523d1e: Fixed #8447
-
- Also, move the list to a central location so it does not need to be duplicated.
-
-
12:58 PM
Bug #8445: creating an alias named "log" breaks rule processing
- Tested on latest 2.4.4 CE snapshot gitsync'd to master, works as expected.
-
- Applied in changeset commit:b20cfb55125207e21d81a29a107ea77230fbc7fb.
-
- The list of pf keywords was a lot shorter than it should be, but there isn't a documented list that I could see.
I... -
- It's a reserved keyword in pf but isn't in the list.
-
-
12:27 PM
Todo #8423: Update SimplePie to 1.5.1
- Works as expected on 2.4.4.a.20180409.0622.
-
- Looks like this isn't just specific to BGP. In the forum thread linked above, it is happening on multiple amd64 VMs t...
-
- The zebra daemon in FRR 4.0 won't stay running with a BGP configuration. It crashes on startup. OSPF alone seems to b...
-
- Problematic test cluster has no errors on a snapshot containing the fix. Looks good here.
-
- From UI, status_log_filter.php.
I want to increase the size of filter.log from 500K to 5G (as an example).
From... -
-
-
- Yeah that does appear to be a limitation. For a site to site, tap should work the same as tun in most cases though, s...
-
- Yes, I can confirm this issue. Mobile Client ("Roadwarrior") IPSec access no longer works after upgrading to 2.4.3 (w...
-
- It is high time to move away from interface-based firewalling and move to zone-based firewalling. Zone-based firewall...
04/08/2018
-
- Are you sure you are not creating an IPv4+IPv6 rule? You cannot (and have never been able to) set a gateway on those....
-
11:39 PM Bug #8447 (Resolved): Cannot change Gateway in Firewall > Rules
- Open any rule or create a new rule. In the Advanced options, the Gateway cannot be selected. This was working in 2....
-
- When creating a QinQ interface in 2.4.3 it is stored in the config correctly and created as an interface as expected:...
-
03:44 PM Bug #8445 (Resolved): creating an alias named "log" breaks rule processing
- i created an ip alias, and named it "log". upon the rules reloading, an error occurred:
There were error(s) loadi... -
02:04 PM Bug #8429: radvd/IPv6 broken in 2.4.3 when using a LAN bridge
- Same Problem:
RADVD regression on 2.4.3 / radvd can not run on bridge Interface anymore...
https://forum.pfsense.or... -
12:13 AM Bug #8429: radvd/IPv6 broken in 2.4.3 when using a LAN bridge
- Same issue for me too ....
Netgate SG-4860 - Serial: ********* - Netgate Device ID: *********
*** Welcome to pf... -
- 2. found&fixed
The plugin 'injects' extra stylesheets, and the setCSSdisplay function searches for a particular st... -
- Re 2: I usually use Firefox @ Windows 10 and yes with some blockers such as NoScript, uBlock and few user scripts in ...
-
- Thanks for testing and reporting about these issues.
1. found&fixed
2. these items seem to work properly for me o... -
- This appears to be the expected behaviour as isc-dhcpd cannot bind to adapters with no MAC address.
However you can ... -
07:32 AM Bug #8335: System hang with LACP downlink to UniFi switch
- Some new information:
* It happens when LAGG Protocol is set to Failover.
* It happens when one of the two netwo...
Also available in: Atom