Activity
From 08/08/2018 to 09/06/2018
09/06/2018
-
04:38 PM pfSense Packages Feature #8878 (Resolved): Propagate user's description field into QR code for FreeRADIUS
- Hi,
it is often desirable (esp. when you have more than one identity added in your Google Auth mobile app) to dist... -
04:27 PM Bug #8877 (In Progress): VTI P2 can trigger an endless loop trying to form a P2 ID
- Yeah the mobile case is still a bit undefined. I can shut that down as well. I'm not sure that is feasible since VTI ...
-
04:14 PM Bug #8877: VTI P2 can trigger an endless loop trying to form a P2 ID
- i could configure vti on a 'normal' site-to-site vpn so perhaps its just a 'user issue' :) if so then sorry for the n...
-
- Perhaps the issue was that i made my mobile-ipsec P2 use vti.. perhaps that does not actually make sense to do.?. it ...
-
- I haven't tried setting one up this way but if someone were to have incorrectly selected something like "LAN Network"...
-
- I can maybe see how some combination may lead to a loop here but I can't seem to make it happen on any of mine.
So... -
- Its about the vti and it looping around. see screenshot of a stacktrace.
-
- I suspect it would have done the same for any other additional interface you add there and VTI was a coincidence. May...
-
- agreed that the lines don't 'directly' point to vti.. however only when i enable 'that' interface its runs for a minu...
-
- That doesn't look like it would have anything to do with VTI. The lines you reference are quite different, one is a g...
-
- Enabling a vti OPT1 interface throws me the following errors after a minute while processing the 'apply' button.. lik...
-
03:00 PM Bug #8001: Invalid FQDN in alias causes alias table to fail *silently*
- possibly related bug: https://redmine.pfsense.org/issues/8758
-
- Ok, I've done that. For anyone else who wants an easy way, I made a patch that you can add via System Patches:
https... -
02:34 PM Bug #8527 (Feedback): VLANs losing parent interface on LAGG change
- Waiting the next -RC build.
-
- Fixed the subject to be more general since this is covering more than just CSP at this point.
We had someone askin...
09/05/2018
-
09:26 PM Feature #4821: PPPoE WANs do not take full advantage of NIC driver queues for receiving traffic
- You were probably kidding, but my ISP will propose exactly this (40 gig) in 2-3 years ... at least that's the plan.
... -
- Fix committed, will be in snaps when they are running again.
-
- ...
-
12:15 PM Feature #6742: OAuth2 authentication for OpenVPN (and for FreeRadius)
- +1 on my side as well. We need this in order to properly implement VPN/IPSec/FreeRadius for our remote workers to int...
-
04:03 AM Feature #8737: Let users configure PPPoE multilink over single link
- Confirm option existing in GUI and in device config
!option.png!... -
12:56 AM Bug #8875 (Duplicate): Separator in DHCP Server
- Hi. Having a seperator in DHCP Server would be nice to allocate ip addresses like in Firewall Rules.
09/04/2018
-
09:43 PM Bug #6263: Encryption options for every P2 on a given P1 are written to each P2 individually inside ipsec.conf with multiple P2 entries + split conn entries
- PJ Goodwin wrote:
> Looked into this and the attached patch appears to fix the issue in 2.4.2. The comparable chang... -
02:44 PM
Bug #8806 (Resolved): HA sync : Starting captiveportal doesn't fire ipfw rules on slave, even if HA is enabled.
-
02:25 PM Bug #8806: HA sync : Starting captiveportal doesn't fire ipfw rules on slave, even if HA is enabled.
- Working correctly on the last snapshot
This issue can be marked as resolved. -
09:05 AM Bug #8806: HA sync : Starting captiveportal doesn't fire ipfw rules on slave, even if HA is enabled.
- Applied in changeset commit:7cab6335bb56d2ac372a195719be28c55b2cb252.
-
-
- It's unlikely that is the cause of your problem. Please keep this kind of guesswork/debugging on the forum until a sp...
-
02:38 PM Bug #8874 (Not a Bug): IPSEC Phase 2 Duplicated
- We detect some network issues between some sites. Look at IPSEC status, we can see some of our tunnels with Phase 2 d...
-
02:36 PM
pfSense Packages
Bug #8873 (Feedback): PHP7 warning in squidguard
- Fix pushed. 824d08577196346be0e7d24d925bf3338208bd89
also cherry-picked to 2.4.4 3c1f879caabe7f9059e0a0143689d2d0b3c... -
11:15 AM
pfSense Packages
Bug #8873 (Resolved): PHP7 warning in squidguard
- [02-Sep-2018 21:00:29 Etc/UTC] PHP Warning: Use of undefined constant GIF_BODY - assumed 'GIF_BODY' (this will throw...
-
02:31 PM
pfSense Packages
Bug #8872: PHP7 error in squid
- Cherry-picked to 2.4.4 as well d47455c16c985d3d98fea422855a0dc7bf78c657
-
02:28 PM
pfSense Packages
Bug #8872 (Feedback): PHP7 error in squid
- Fix Pushed 90c367bf2f2fcd61ed631bd3c4fd6634a253b5d6.
-
11:14 AM
pfSense Packages
Bug #8872 (Resolved): PHP7 error in squid
- [02-Sep-2018 21:45:02 Etc/UTC] PHP Fatal error: Uncaught Error: Call to undefined function split() in /usr/local/pkg...
-
- Luke Hamburg wrote:
> I have definitely hit this one - yes it is hard to reproduce. But, if I hit it again, is it wo... -
- I have definitely hit this one - yes it is hard to reproduce. But, if I hit it again, is it worth sending any sort of...
-
09:10 AM
Bug #8758: filterdns stops working on a regular basis.
- Currently unable to reproduce
-
01:31 PM Feature #8160: Accomodate both RADIUS and pool IP addresses in IPsec
- Implementation PR: https://github.com/pfsense/pfsense/pull/3976
-
-
- It works well on latest...
-
- Looks like this is PPPoE related issue. I do not see problem with fragmented IPv6 and logging on Ethernet IPv6 forwar...
-
09:34 AM Bug #8499: IPv6 fragment logging causes panic in some circumstances
- I've never been able to replicate that locally. It's going to be very difficult to test.
-
- Fixed...
-
- Applied in changeset commit:2eeeec06d7b8d719a8913c69095675a695305918.
-
-
02:51 AM pfSense Packages Bug #8871: Suricata: input not validated properly in suricata_rulesets.php results in wrong argument passed to in_array()
- Forgot to set Category -> Suricata.
Running b0703dcab3c(RELENG_2_4_4) (snapshot) with latest Suricata package availa... -
- Spotted this today:...
09/03/2018
-
- In some circumstances the dashboard can report that the system is on the latest version when in fact the pkg system i...
-
- Applied in changeset commit:7fead243f9e6238e0098ea2bdc3c992fa071efeb.
-
-
-
- It does load/parse them to check that they are valid so it can clean out invalid/broken configurations.
It's behav... -
01:36 AM Bug #8866: cleaning backup cache can take VERY long
- You were right as in i increased that setting. By a lot. We edit config quite often, so 30 backups wasn't feasible an...
09/02/2018
-
- It should not let you use a self-generated DH parameter file, but use the stock system DH parameter files which are f...
-
10:20 PM pfSense Packages Feature #8869 (New): HAproxy should use RFC 7919 DH parameter files
- It would be really nice to have a UI option to generate a custom DH parameter file for HAproxy to use.
The origina... -
- One is for DHCPv6, one is for PPPoE. They could be different problems, they could be the same problem, needs more res...
-
- Is this a dupe of #8136?
09/01/2018
-
03:57 PM Feature #8867: interfaces_vlan_edit.php does not display proper interface aliases
- Jim Pingle wrote:
> That is because VLANs are a child of the physical interface, not an assigned interface. The assi... -
- That is because VLANs are a child of the physical interface, not an assigned interface. The assignments and descripti...
-
- On /interfaces_vlan_edit.php (Interfaces>Assignments>VLANs>Add), when the parent interface drop-down list is clicked,...
-
-
01:11 PM
Todo #8860: Change status.php to use "ifconfig -va" for more detail
- On 2.4.4.a.20180831.2010, looks good.
Network-Intefaces shows module information for SFP+... -
01:20 PM Bug #8868 (Not a Bug): multiple php errors on update
- Installed Current Factory System: 2.4.3_1
Added packages: Squid, squidguard, lightsquid, pfblockerng, and Snort
... -
-
04:12 AM Bug #8859: VTI: Some third-party vendors require rightsubnet to have a mask for VTI, rather than address
- On Fri Aug 31 20:10:51 EDT 2018:
Created P2 with VTI remote network, then changed it to remote address - changes a... -
- By default it only keeps 30 backups. There is no way it would have as many files as you state without being manually ...
-
- Hi,
my pfSense is running on rather sparse CPU ressources (Atom N2800). Rebooting takes up to 30 minutes (actually c... -
05:47 AM
Bug #8857 (Resolved): PHP error when saving on vpn_ipsec_settings.php
-
- Reset sg2440 Fri Aug 31 20:10:51 EDT 2018 to factory and then opened vpn_ipsec_settings.php, clicked "save" - no erro...
08/31/2018
-
10:40 PM pfSense Docs Correction #8865 (Rejected): Feedback on Networking Concepts — IPv6 — IPv6 Subnetting
- *Page:* https://www.netgate.com/docs/pfsense/book/network/ipv6-subnets.html
*Feedback:*
IPv6 Subnet Table
IPv6 ... -
04:59 PM Bug #8864: SSH Guard Sensitivity/Whitelist on 2.4.4
- Sorry I meant to put 2.4.4.a.20180831.0830 in the topic after 'SSH Guard on 2.4.4.a.20180831.0830'
-
- I am running 2.4.4.a.20180831.0830 and noticed that my Icinga monitoring started to show issues with SSH. When I loo...
-
03:09 PM Bug #8863 (Resolved): amdtemp.ko module failed to load
- amdtemp.ko module failed to load with the following error message
KLD amdtemp.ko: depends on amdsmn - not availabl... -
-
- Yes, fsck fixed IPsec issue, now it works, thank you.
** Last Mounted on /
** Root file system
** Phase 1 - Chec... -
- Applied in changeset commit:b5a4633f9ffeb365aba1d8b451f3638b37452b23.
-
- I see some room for improvement in that area of the code, but that error appears to come from a disk issue.
Speaki... -
- on SG3100 Thu Aug 30 00:38:38 EDT 2018
Crash report begins. Anonymous machine information:
arm
11.2-RELEASE-p... -
11:52 AM pfSense Docs Correction #8862 (Resolved): [feedback form] Include configuration examples for IPv6 WANs
- *Page:* https://docs.netgate.com/pfsense/en/latest/interfaces/configure-ipv6.html
*Feedback:* Examples would be ni... -
- Repeated the same test with installed squid, bind packages - all good, no delay's in bootup.
-
- Looking at the output of @ifconfig -v@, there is more info we could be showing on status_interfaces.php.
At a mini... -
- Applied in changeset commit:836ee3aaca674a84dec47dce9a1183b98352ba4f.
-
- @ifconfig -v@ will return more info than the @ifconfig@ alone. For @ix(4)@ interfaces it will print information about...
-
- Applied in changeset commit:da54e84ae79328a87b4a319239bb1b14d7ed2ce6.
-
-
- Some equipment that supports VTI requires the remote address be set to a network and not the default address, or else...
-
- Applied in changeset commit:74e4543842c47efda37e3b078b8e5cc3f54ce9ba.
-
-
- Then code that cleans up deleted/disabled IPsec VTI interfaces can, with certain configurations, delete a valid inter...
-
- Applied in changeset commit:463b52b606d98b72cbaeb2f6d3c348689106c414.
-
-
- From a fresh install with no IPsec configuration, clicking Save on vpn_ipsec_settings.php gives a PHP error:...
-
05:36 AM
pfSense Packages
Bug #8790 (Resolved): getting PHP error regarding HAproxy pkg
-
02:08 AM pfSense Packages Bug #8790: getting PHP error regarding HAproxy pkg
- Hi!
All OK, thanks!
08/30/2018
-
09:53 PM
pfSense Packages
Bug #8829: Keep settings checkbox under Global Settings does not behave as expected
- On a fresh install of 2.4.4.a.20180830.1356, when snort 3.2.9.7_2 is installed the output is :...
-
09:30 PM
pfSense Packages
Bug #8829 (Resolved): Keep settings checkbox under Global Settings does not behave as expected
-
09:17 PM
pfSense Packages
Bug #8829: Keep settings checkbox under Global Settings does not behave as expected
- On version 3.2.9.7_2, installed suricata, configured some settings, unchecked the Keep settings checkbox, uninstalled...
-
11:37 AM
pfSense Packages
Bug #8829 (Feedback): Keep settings checkbox under Global Settings does not behave as expected
- This should now work as expected. c5d12ed2814f7ed5c002fb71fae6d992708bc4f9
Snort version 3.2.9.7_2 -
09:49 PM
pfSense Packages
Bug #8828 (Resolved): Keep settings checkbox under Global Settings does not behave as expected
-
09:49 PM
pfSense Packages
Bug #8828: Keep settings checkbox under Global Settings does not behave as expected
- On a fresh install of 2.4.4.a.20180830.1356, when suricata 4.0.13_8 is installed the output is :...
-
05:50 PM
pfSense Packages
Bug #8828: Keep settings checkbox under Global Settings does not behave as expected
- On version 4.0.13_8, installed suricata, configured some settings, unchecked the Keep settings checkbox, uninstalled ...
-
11:17 AM
pfSense Packages
Bug #8828 (Feedback): Keep settings checkbox under Global Settings does not behave as expected
-
11:17 AM
pfSense Packages
Bug #8828: Keep settings checkbox under Global Settings does not behave as expected
- I found that the code to remove the package forgot to use 'write_config()' after removing the Suricata configurations...
-
- This issues with haproxy should be fixed with current 0.59_11 version. If not please let me know the exact error you ...
-
- Should be fixed with current 0.59_11 version. If not please let me know the exact error you get and when that happens.
-
- Should be fixed with current 0.59_11 version. If not please let me know the exact error you get and when that happens.
-
09:39 AM
Bug #8767 (Resolved): ID handling problem with DNS Forwarder host override management
-
08:43 AM Feature #8855 (Rejected): View Description field on widget for OpenVPN
- Hi!!!
Its useful add on widget for OpenVpN, view the description field too , for get information about a user when c... -
-
- Applied in changeset commit:880107d21f5e69201ba810d553d948ca9009f70d.
-
- Looks like one line of the fix didn't make it into the final commit. Will push a correction momentarily after re-test...
-
-
- Gitsynced, retested - now looks good, no arpwatch duplicated processes
-
- OK to test again after a gitsync or an update to a snapshot which includes my last commit on #8850
-
- Looks like one line of my commit is missing, will push a correction momentarily. The package is OK, the problem is on...
-
- Yup, seeing the same on Wed Aug 29 19:26:24 EDT 2018 with pfSense-pkg-arpwatch-0.1.1:
root 37039 0.0 0.3 ... -
-
-
- On factory 2.4.4.a.20180830.0038, SG-3100
Click System -> Cert. Manager, CAs
Default selection is 'Create an i...
08/29/2018
-
11:33 PM
Bug #8726: Lack of input validation on custom GUI/dashboard settings leads to potential XSS
- On 2.4.4.a.20180829.1926, tried a XSS injection example as the dashboardcolumns value in the pfSense config.xml, relo...
-
11:16 PM
Bug #8845 (Resolved): Recompile PHP with a larger value of FD_SETSIZE.
-
11:15 PM
Bug #8845: Recompile PHP with a larger value of FD_SETSIZE.
- On 2.4.4.a.20180829.1926, ...
-
08:43 PM pfSense Packages Bug #7661: pfBlockerNG doesn't make a rule for Antarctica
- I just tried the latest pfBlockerNG and the is has NOT been resolved!
Please re-open the bug.
-
08:25 PM
pfSense Packages
Bug #8620: arpwatch database page is not accessible
- On 2.4.4.a.20180829.1926 (gitsync'd to master) with arpwatch version 0.1.1,
Seeing one instance of arpwatch for ea... -
- Should be improved by https://github.com/pfsense/FreeBSD-ports/commit/aa78e490fe92d5640a742bbe77012a5ba626b084 but th...
-
07:45 PM
Todo #8851: Change default CA/Cert action to "Create an internal..."
- On 2.4.4.a.20180829.1429 (gitsync'd to master), looks good. Create CA/Cert is the default behavior now.
-
- Applied in changeset commit:b0a5c280a407ac26af2e6f055ac1049304034672.
-
- When the certificate manager was first created, the most common user action was to import and not create. We are long...
-
- *Page:* https://docs.netgate.com/pfsense/en/latest/network/broadcast-domains.html
*Feedback:* The section tells w... -
- *Page:* https://www.netgate.com/docs/pfsense/book/monitoring/firewall-states-gui.html
*Feedback:* What does 0:0 me... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/services/dhcp/ipv4.html
*Feedback:* I am unclear about "Client ... -
03:23 PM Bug #8518: Rule Error On Upgrade 2.4.3 -> 2.4.3-p1
- Steffen Wagner wrote:
> the above commands fixed it for me as well. An official patch for p1 would be good!
Can y... -
03:03 PM
Bug #8767: ID handling problem with DNS Forwarder host override management
- Fixed the illegal string offset error described above. bc91bdffcefd009f4716cce59eab231c2245fb18
I did not notice a... -
02:58 PM
Bug #8850 (Resolved): Packages that start on sync are started multiple times at boot
- Tested with arpwatch installing fresh, configuring and multiple reboots
-
- For an example of the change to make on packages, see https://github.com/pfsense/FreeBSD-ports/commit/aa78e490fe92d56...
-
- Applied in changeset commit:5d4f49000654fae594144abc36fe8a588a028510.
-
-
- When @/etc/rc.start_packages@ is run, for example at boot time, it performs a package sync with @sync_package()@ and ...
-
11:40 AM Feature #8849 (Duplicate): DHCP Custom configuration
- I would suggest a field so we can use additional settings. There is the possibility of making several subnet with use...
-
- The description and behavior are correct for POSIX style zones. See note 9 above. The "Etc/GMT+4" zone means 4 hours ...
-
09:34 AM Bug #7089: Opposite of + or - is occurring when selecting time zone
- Although the description tells how it works, the GMTs are wrong.
The correct GMTs are "+" (before GMT) and "-" (af... -
09:40 AM
Bug #8138 (Resolved): Option <spoofmac> is ignored on interfaces without hwaddr
- Tested on a VM with CE:
2.4.4-DEVELOPMENT (amd64)
built on Wed Aug 29 00:38:57 EDT 2018
FreeBSD 11.2-RELEASE-p2
... -
- Although the description tells how it works, the GMT's on web interface are wrong.
The correct GMTs are "+" (befor... -
- The descriptions of the zones make this very clear, they explain the behavior and whether or not they are ahead of or...
-
- On System > General Setup, timezones GMT[+-]X are reversed.
If set GMT-4 on web interface, it apllies GMT+4 on sys... -
08:08 AM Feature #8644 (Resolved): IPsec mobile clients DNS enhancement
- I check this Bug on old 2.4.4.a.20180801.0114: DNS from /VPN/IPsec/Mobile Clients menu was set up into '/var/etc/ipse...
-
- Greg M wrote:
> I am on:
> 2.4.4-DEVELOPMENT (amd64)
> built on Wed Aug 29 00:38:57 EDT 2018
> FreeBSD 11.2-RELEA... -
- I am on:
2.4.4-DEVELOPMENT (amd64)
built on Wed Aug 29 00:38:57 EDT 2018
FreeBSD 11.2-RELEASE-p2
The system is ... -
- Greg M wrote:
> Hi!
>
> Installed, when I open it:
>
> Fatal error: Uncaught Error: Call to undefined function... -
- Hi!
Installed, when I open it:
Fatal error: Uncaught Error: Call to undefined function pfsense_pkg\acme\getarra... -
- Same here.
Haproxy is not installed after this error and services are down.
08/28/2018
-
09:55 PM pfSense Packages Bug #8620: arpwatch database page is not accessible
- I'm interested in a fix for this as well. On 2.4.3-p1 I have the same issues -- multiple emails and nothing in the da...
-
05:45 PM Bug #8847 (Resolved): IPsec status "Show Child SA entries" button only expands and never collapses
- I am using version 2.4.4, I noticed that in ipsec status when clicking (+) Show child SA entries is shown the details...
-
05:29 PM Feature #2358: NAT64 support
- Another upvote. At some point in the future we're going to start having needs for v6-only networks. For some of the...
-
04:51 PM
Bug #8837 (Resolved): PHP error when creating alias URL Table (IPs)
-
04:26 PM Bug #8837: PHP error when creating alias URL Table (IPs)
- This commit seems to have solved the issue.
-
03:35 PM
Bug #8837: PHP error when creating alias URL Table (IPs)
- The `[] operator not supported` error should be fixed in the next snap.
0a906fcc2e120e7dd290ce7faac1ba14a24f731b -
03:55 PM
Bug #8683 (Resolved): Unable to add GIF interface (Hurricane Electric IPv6)
- Tested on 2.4.4-DEVELOPMENT (amd64)
built on Tue Aug 28 08:43:43 EDT 2018
FreeBSD 11.2-RELEASE-p2
Was able to... -
- Result for @gre@ also looks good.
-
08:52 AM
Bug #8683: Unable to add GIF interface (Hurricane Electric IPv6)
- ...
-
03:22 PM
Bug #8824 (Resolved): is_numeric() on PHP 7 no longer validates hexadecimal values
- Tested on: 2.4.4-DEVELOPMENT (amd64)
built on Tue Aug 28 08:43:43 EDT 2018
FreeBSD 11.2-RELEASE-p2
Haven't ... -
03:12 PM
Bug #8823 (Resolved): Dashboard Crash
- Tested on 2.4.4-DEVELOPMENT (amd64)
built on Tue Aug 28 08:43:43 EDT 2018
FreeBSD 11.2-RELEASE-p2
No crashes ... -
- PR merged, should be ready for testing shortly
-
- As long as it doesn't lead to an XSS it should be OK. Try using a typical XSS injection string and then going to a pa...
-
02:43 PM
Bug #8726: Lack of input validation on custom GUI/dashboard settings leads to potential XSS
- Tested the above inputs webguicss, webguifixedmenu, webguihostnamemenu, and dashboardcolumns. and was not able to use...
-
- Applied in changeset commit:4f03ad7a36b6c2f9060f059f167a491b06739acf.
-
-
02:19 AM Bug #8845 (Resolved): Recompile PHP with a larger value of FD_SETSIZE.
- Crash report begins. Anonymous machine information:
amd64
11.2-RELEASE-p2
FreeBSD 11.2-RELEASE-p2 #72 9d6b703bf... -
- In order to be able to install any of the PHP72 related packages you must upgrade to a PHP 7.2 based 2.4.4 snapshot.
-
11:11 AM Feature #6384: Allow IPSEC P1 to have 2 peer remote gateway IP addresses to allow VPN failover faster without requiring DDNS
- Your right. On our side we have our own IPs and BGP with FRR. But our Customers have only one IP from each ISP. Not i...
-
- With 2.4.4 you can use routed IPsec and a routing protocol like OSPF or BGP to accomplish failover. You can build an ...
-
- Cloud is needed more and there is a reliable VPN connection very important. For this case a quick switch on failure i...
-
- All of my hosts that had issues before appear to be OK when upgrading from snaps from early yesterday to the latest a...
-
-
- Jim Pingle wrote:
> I had this happen on my edge firewall which is running a snapshot from earlier this week. The pf... -
-
-
-
- @jimp you can close this
-
04:47 AM Bug #8846 (Resolved): Misleading error message when adding/editing static routes which use a gateway on a disabled interface
- I was adding static route on disabled interface and got the following message:...
-
01:00 AM Feature #8173: dhcp6c - RAW Options
- The improvement request https://redmine.pfsense.org/issues/8173 is essential for IPv6 authentication for Orange (Fran...
08/27/2018
-
10:07 PM pfSense Packages Bug #8844: PFBlockerNG-Dev
- https://www.reddit.com/r/PFSENSE/comments/9a9o8k/php_pfblockerng_related_crashing_in_244development/e4trgk9/
https... -
- Version: pfBlockerNG-devel 2.2.5_10
When enabling GeoIP the selection goes back to 'disabled'.
Firewall -> pfB... -
06:14 PM
Bug #8838 (Resolved): PHP warning when creating an OpenVPN client with invalid setting
-
06:14 PM
Bug #8838: PHP warning when creating an OpenVPN client with invalid setting
- On 2.4.4.a.20180827.1735, cannot reproduce.
-
06:50 AM
Bug #8838: PHP warning when creating an OpenVPN client with invalid setting
- Applied in changeset commit:ce04950d94bab271a9904a8bd8cbbe40d7a7d718.
-
06:43 AM
Bug #8838 (Feedback): PHP warning when creating an OpenVPN client with invalid setting
-
- Sounds good!
-
- It is at https://github.com/pfsense/FreeBSD-ports/blob/devel/net/filterdns/files/filterdns.c but Renato is already lo...
-
- Agree it's less than ideal. But until a proper fix can be found a kludge might be safer than nothing, since aliases n...
-
- That's a rather ugly hack/kludge and it would be better to find out why it's failing and fix it directly.
-
- Hmm. In that case, how about we add some tests to the alias edit php functions to query pfctl directly after a save a...
-
- That is a possible side effect. You can kill the @filterdns@ daemon and then trigger a filter reload from *Status > F...
-
- Would this affect IP alias lists getting "stuck" and not updating? I ran into this last week - editing an Alias, adde...
-
01:47 PM
Bug #8758: filterdns stops working on a regular basis.
-
- I had several hitting this in my lab but only just now getting them onto snaps which included the latest fix. Let's g...
-
-
- Not seen any update issues for a few snaps now on a number of boxes.
-
01:27 PM
Bug #8683 (Feedback): Unable to add GIF interface (Hurricane Electric IPv6)
-
- Steve is working on this one
-
- Even if they were encrypted before being put in there, they are still in plain text in @config.xml@. If you don't lik...
-
10:49 AM Bug #7547: Static routes using aliases are not automatically updated when alias content changes
Also, when you delete a subnet from the alias editing and saving the static alias route doesn't remove the route.
...-
- "Bogus" is a closed/resolved status. It's already been dealt with.
-
- Is there any action from Netgate team requested here?
Can this ticket be marked as resolved? -
09:21 AM Feature #2358: NAT64 support
- TRIPLE UPVOTE!
-
-
- Well, what you are describing is a VLAN-Based captive portal.
There are two kinds of Captive portals in the world:... -
- Looks like this affects all pkgs I got PHP crashes and errors for any pkg install process. Pkgs were installed proper...
-
- Uninstall finished well, but there were some errors during the process, see attachment.
-
- I tried to install pfSense-pkg-aws-wizard-php72 for 244 factory built on Wed May 30 14:47:02 EDT 2018 FreeBSD 11.2-BE...
-
07:41 AM Feature #8841: Floating rules : add interface column
- Indeed it has limitations.
Maybe this could be an on/off feature letting people liberty to activate it depending on... -
- This is not entirely feasible because the floating rule could apply to dozens of interfaces and trying to print them ...
-
- To allow an easier management of floating rules : add the colum inyertrface in the floating rules tab.
For now, AFAI... -
- Create a new button on firewall rules tab allowing to copy multiple firewall rules from one interface to another :
... -
- Duplicate of #8832
-
06:31 AM pfSense Packages Bug #8839 (Duplicate): 2.4.4 Squid/ClamAV C-ICAP 0.5.x not starting
- Workaround:
https://forum.netgate.com/topic/133774/2-4-x-squid-clamav-fix-for-c-icap-0-5-x-not-starting -
- See also: https://forum.netgate.com/topic/133774/2-4-x-squid-clamav-fix-for-c-icap-0-5-x-not-starting
-
- On 2.4.4.a.20180801.0114 when I installed HAproxy I caught the same crash report.
But on 2.4.4.a.20180826.1232 whe... -
- Hello,
view patch https://github.com/opnsense/dhcp6c
his is the WIDE-DHCPv6 client maintained by the OPNsense... -
- I tried to reproduce this issue on 2.4.2:
- I added more then 120 DNS Forwarder host overrides
- I didn't see issue...
08/26/2018
-
11:58 PM
Bug #8519: pfSense update from the webGUI fails
- Can't reproduce in VM from 2.4.3 CE to 2.4.3_1, or 2.4.3_1 to 2.4.4 latest snapshot. Is there a specific device, desi...
-
11:00 PM
Bug #8838 (Resolved): PHP warning when creating an OpenVPN client with invalid setting
- On a recent 2.4.4 snapshot visit VPN > OpenVPN > Client > Add, change Server mode to "Peer to Peer ( Shared Key )" an...
-
- I applied the changes, and I'm still receiving the following PHP error. It looks like the fix got rid of the count() ...
-
11:35 AM
Bug #8837: PHP error when creating alias URL Table (IPs)
- Applied in changeset commit:d6d46650d207cf0d37a2551a8a73a83aaf804672.
-
11:31 AM
Bug #8837 (Feedback): PHP error when creating alias URL Table (IPs)
-
11:30 AM
Bug #8837 (In Progress): PHP error when creating alias URL Table (IPs)
-
- I was trying to follow the procedure described here to create a Netflix ipv6 alias.
https://forum.netgate.com/topi... -
- On current 2.4.4-DEV (20180825) I'm able to see "X-Forwarded-For" option when remote client behind proxy connects to ...
-
07:53 AM pfSense Packages Feature #8836 (New): Define ldap group vlan assignment in users file
- There should be a solution to configure vlan-id's for ldap groups.
Something like this: http://lists.freeradius.or... -
- If a user is created in the FreeRadius GUI the password is stored as cleartext in "/usr/local/etc/raddb/users".
Th... -
- I checked on 2.4.3_p1 - I saw HTTP_REFERER check fails after changing interface IP address
Then I checked it on 2.4....
08/25/2018
-
09:38 PM Feature #6626: Support for IPv6 firewall entries with dynamic delegated prefix and static host address
- Same issue as Frederick described - I can't seem to be able to effectively block inter-vlan traffic for IPv6 as the a...
-
05:53 PM
Feature #1337: VLANs with different MAC address than parent interface
- James Dekker [6:49 PM]
With SG-5100 and XG-2758 on `2.4.4.a.20180824.1144` (which isn't the *latest* build, but shou... -
03:32 PM
Bug #8834 (Resolved): NAT > NPt address fields do not match the hover text
-
03:32 PM
Bug #8834: NAT > NPt address fields do not match the hover text
- On 2.4.4.a.20180825.0917 (gitsync'd to master) looks good. Hover text accurately reflects the description (shown in t...
-
- Applied in changeset commit:c1004c847324888fff7252607384f7f39926e815.
-
03:08 PM
Bug #8834 (Resolved): NAT > NPt address fields do not match the hover text
- Visit Firewall > NAT > NPt, click add, hover over each Address field.
Notice that the first Address field descri... -
02:58 PM
Feature #8812 (Resolved): Add "Select All" to Firewall/NAT rule lists
-
02:58 PM
Feature #8812: Add "Select All" to Firewall/NAT rule lists
- Select all works as expected on Firewall > NAT > Port Forward/1:1/Outbound/NPt and at Firewall > Rules on 2.4.4.a.201...
-
08:16 AM
Feature #8812 (Feedback): Add "Select All" to Firewall/NAT rule lists
- Rule table given ID so selectall control can find it
-
-
- The control is now present on NAT rules but does not seem to actually function. Clicking 'select all' does not select...
-
- Went to Suricata, went to SID management, Enable Automatic SID State Management, no error displayed
Current Base Sy... -
- tested on image 2.4.4.a.20180825.0917 this is no longer happening,
Using the OpenVPN wizard as described in this i... -
02:05 PM
Bug #7425 (Resolved): dhclient not sending option 77
-
02:04 PM
Bug #7425: dhclient not sending option 77
- On 2.4.4.a.20180824.1144, DHCP option 77 (user-class) is sent successfully.
-
11:19 AM
Bug #8816 (Resolved): User login does not record the authentication source
-
11:18 AM
Bug #8816: User login does not record the authentication source
- On 2.4.4.a.20180825.0917, when the user logs in, the dashboard and console indicate the IP of the user logging in and...
-
10:38 AM Feature #4821: PPPoE WANs do not take full advantage of NIC driver queues for receiving traffic
- As i understood from Intel specification on various chipsets, non-ip traffic like pppoe can't be hashed for RSS to wo...
-
- fix kinda pending.. but discussion raised is delaying it being pulled.
https://github.com/pfsense/FreeBSD-ports/pull... -
- On update to latest snapshot HA Proxy service fails to start.
Fatal error: Cannot redeclare getarraybyref() (previ... -
- Looks good to me in:...
08/24/2018
-
- This will be fixed in the next pfBlockerNG-devel v2.2.5_11 once its merged.
https://github.com/pfsense/FreeBSD-por... -
07:30 PM pfSense Packages Bug #8832 (Resolved): c-icap for Squid 5.1 on 2.4.4 Developer not starting
- See: https://forum.netgate.com/topic/133774/2-4-x-squid-clamav-fix-for-c-icap-0-5-x-not-starting.
Verified his fix w... -
06:07 PM Bug #8831 (Closed): Radvd causes latency spikes
- As already mentioned in this thread https://forum.netgate.com/topic/123554/new-latency-every-30-seconds-with-2-4-2-ca...
-
05:59 PM
pfSense Packages
Bug #8830 (Resolved): Automatic flowbit resolution setting does not match description
- On 2.4.4.a.20180824.1624, install snort (version 3.2.9.7_1), visit Global Settings, enable some rulesets, visit Updat...
-
-
- Tested on ARM and x86. Looks good, Suricata running correctly after reboot.
pfSense-base: 2.4.4.a.20180823.1619 ->... -
04:06 PM pfSense Packages Bug #8716: Suricata package does not survive pfSense upgrade.
- I have done upgrade at SG-3100 to 2.4.4.a.20180824.1144 base system. Suricata has survived.
-
04:23 PM
pfSense Packages
Bug #8829 (Resolved): Keep settings checkbox under Global Settings does not behave as expected
- On 2.4.4.a.20180824.0955, install Snort, visit Services > Snort. Go to the Global Settings tab, enable some rulesets,...
-
04:16 PM
pfSense Packages
Bug #8828 (Resolved): Keep settings checkbox under Global Settings does not behave as expected
- On 2.4.4.a.20180824.0955, install Suricata, visit Services > Suricata. Go to the Global Settings tab, enable some rul...
-
04:01 PM
pfSense Packages
Bug #8799 (Resolved): Automatic flowbit resolution setting does not match description
-
04:01 PM
pfSense Packages
Bug #8799: Automatic flowbit resolution setting does not match description
- On suricata 4.0.13_17, works as expected.
-
-
-
-
- This also affects GRE interfaces
-
- Squid running in bump mode. Though that should not affect this.
When configuring Common or Group ACLs or applying ... -
06:02 AM
Bug #8826 (Closed): PHP7: ACB error at upgrade.
-
- ix driver seems to be affected also :
dev.ix.0.queue1.rx_packets: 67
dev.ix.0.queue1.tx_packets: 4107155
dev.ix....
08/23/2018
-
-
- Working fine for me with vouchers & with Authentication Server
This issue can be marked as resolved ! -
- PR merged
-
-
- @jimP this can be closed
-
-
- https://github.com/pfsense/pfsense/pull/3640 fixes this
This issue can be marked as resolved -
- We probably need to test this across an upgrade where the suricata package version doesn't change to be sure.
-
-
-
- Added a call to ldconfig start on suricata startup script. It should be enough to make sure libraries cache will be u...
-
- That's already been fixed but the fix didn't make it into a factory snapshot until after the image you're on. Next on...
-
- Upgrading pfSense-kernel-pfSense-SG-3100 from 2.4.4.a.20180822.1157 to 2.4.4.a.20180823.1533...
-
04:34 PM pfSense Packages Bug #8251: Captiveportal + FreeRadius "Last activity" resets to Session start
- Thanks for the reply Augustin.
I'm still having this issue, perhaps I will try your idea when I upgrade the next tim... -
- This issue is likely comming from the way pfSense and FreeRadius are talking to each other when performing accounting...
-
04:30 PM pfSense Packages Bug #8825 (Resolved): Unable to activate any of the GeoIP blocking lists - keeps getting reset to disabled with PHP errors
- pfSense version 2.4.4.a.20180822.1157
pfBlockerNG-Deve version 2.2.5_10
Attempting to enable *any* of the GeoIP c... -
02:32 PM
pfSense Packages
Bug #8797 (Resolved): Visiting Flow/Stream causes a php error to be be shown
- Confirmed, looks good in latest suricata package version.
-
- I have tested this issue at SG-4860 | 2.4.4.a.20180823.0720 base system. I can confirm that php warning doesn't appea...
-
02:29 PM
pfSense Packages
Bug #8798 (Resolved): Visiting App Parsers causes a php error to be be shown
-
02:28 PM
pfSense Packages
Bug #8798: Visiting App Parsers causes a php error to be be shown
- Looks good in the latest version of suricata.
-
- Applied in changeset commit:2c1d7c12fa4f41a69d6c9267a34b1b767a1da522.
-
-
-
-
01:51 PM
pfSense Packages
Bug #8799 (Feedback): Automatic flowbit resolution setting does not match description
- This should be fixed now. 53261ab40f32f234e3432e15f5633f149b36863d
Version 4.0.13_7 -
01:08 PM
pfSense Packages
Bug #8799 (In Progress): Automatic flowbit resolution setting does not match description
-
12:42 PM
pfSense Packages
Bug #8799: Automatic flowbit resolution setting does not match description
- On a fresh install of pfSense-CE-memstick-2.4.4-DEVELOPMENT-amd64-20180823-0720, install suricata (version 4.0.13_5),...
-
01:27 PM
Bug #8800 (Resolved): Interface group member cannot be deleted, after it's been disabled
-
01:27 PM
Bug #8800: Interface group member cannot be deleted, after it's been disabled
- On 2.4.4.a.20180823.0720, the disabled interface is still shown in the interface group, rather than removed.
-
- @ssbarnea@ please resubmit your PR to the master branch
-
10:29 AM pfSense Packages Bug #8620: arpwatch database page is not accessible
- Its been two months now.. are there any news?
-
09:01 AM
pfSense Packages
Bug #8795: PHP issues - illegal string; undef modules; init modules
- Yes it does. Most of the work that is specific to 2.4.4, particularly accommodating PHP7, has been added to the -deve...
-
08:58 AM pfSense Packages Bug #8795: PHP issues - illegal string; undef modules; init modules
- pfB still shows latest as 2.1.4_8?
maybe your update hasn't pushed to be visible yet.
does pfB-devel work witho...
08/22/2018
-
- Why was this resolved? There are still no Antartica rules generated when selecting items that have a number > 0 on t...
-
-
- This can be closed
-
- I'm not sure what you mean by "interfaces available". The problem is that there are no options for the L2TP interfac...
-
- I am not sure this needs an option? Aren't the interfaces available?
-
- Please report back if this issue can be closed. Thanks!
-
- This should be fixed in the latest pfBlockerNG version.
-
- This should be fixed in the latest pfBlockerNG version.
-
- Please update to the latest pfBlockerNG version, and preferably pfBlockerNG-devel and report back if this repeats.
-
- Please update to pfBlockerNG-devel and report back if the same issue repeats.
-
12:22 PM
pfSense Packages
Bug #8799 (Feedback): Automatic flowbit resolution setting does not match description
- Fix Pushed: c5901e3e38a7cefdc46f74734586f2f4b868a33f
The checkbox should now default to being checked. -
11:52 AM
pfSense Packages
Bug #8799 (In Progress): Automatic flowbit resolution setting does not match description
-
10:22 AM
pfSense Packages
Bug #8790 (Feedback): getting PHP error regarding HAproxy pkg
-
10:22 AM
pfSense Packages
Bug #8790 (In Progress): getting PHP error regarding HAproxy pkg
-
10:15 AM
Bug #8823: Dashboard Crash
- Applied in changeset commit:e8d4004cb491c0eb87edff4db2508d0adcebd465.
-
10:09 AM
Bug #8823 (Feedback): Dashboard Crash
- Hard to imagine how this error could be triggered in normal operation, but a file_exists check has been added just in...
-
10:12 AM
Feature #8644 (Feedback): IPsec mobile clients DNS enhancement
- PR Merged
-
- interfaces.php is fixed in commit:b6f6210a220bb206fd22ac34b306f007afedb01f -- I can now set a prefix ID of %0%, %1%, ...
-
-
- http://php.net/manual/en/function.is-numeric.php
> 7.0.0 Strings in hexadecimal (e.g. 0xf4c3b00c) notation are no...
08/21/2018
-
03:25 PM
Bug #8800 (Feedback): Interface group member cannot be deleted, after it's been disabled
- Applied in changeset commit:7dc56c76972cc3d7834572c9d676e3f729f45ad6.
-
01:32 PM
Bug #8800 (In Progress): Interface group member cannot be deleted, after it's been disabled
-
- Fix pushed, will be up shortly in syslog-ng v 1.15_1
-
02:45 PM Bug #8823 (Resolved): Dashboard Crash
- Crash report begins. Anonymous machine information:
amd64
11.2-RELEASE-p2
FreeBSD 11.2-RELEASE-p2 #77 d5d0b259d... -
- It is now possible to set the VLAN Priority for DHCP requests (the same way that is done in DHCPv6).
Please test w... -
-
01:35 PM
Bug #7425 (Feedback): dhclient not sending option 77
-
- Applied in changeset commit:5b93a1f4d1069200ad0a530d4c56edf877d1721d.
-
-
- If you access the GUI from the LAN and change the LAN interface IP address, then after changing the interface IP addr...
-
11:08 AM
pfSense Packages
Bug #8796 (Feedback): Enabling Automatic SID State Management causes php warning
- Fix pushed d4e48c1aefc9cf254a3883bbd49933831a995212
Version: 4.0.13_4 -
09:23 AM
pfSense Packages
Bug #8796 (In Progress): Enabling Automatic SID State Management causes php warning
-
- The bug reported by Constantine happens when "Add MAC addresses as pass-through" is checked but "include username in ...
-
-
- Constantine Kormashev wrote:
> I do not see the issue with doubling message, but see 2 different MACs which use the ... -
- I do not see the issue with doubling message, but see 2 different MACs which use the same voucher...
-
11:07 AM
pfSense Packages
Bug #8797 (Feedback): Visiting Flow/Stream causes a php error to be be shown
- Fix pushed d4e48c1aefc9cf254a3883bbd49933831a995212
Version: 4.0.13_4 -
09:26 AM
pfSense Packages
Bug #8797: Visiting Flow/Stream causes a php error to be be shown
-
11:07 AM
pfSense Packages
Bug #8798 (Feedback): Visiting App Parsers causes a php error to be be shown
- Fix pushed d4e48c1aefc9cf254a3883bbd49933831a995212
Version: 4.0.13_4 -
09:25 AM
pfSense Packages
Bug #8798: Visiting App Parsers causes a php error to be be shown
-
11:04 AM
Bug #8803 (Resolved): PHP errors thrown in traffic shaper wizard multi
-
10:27 AM Bug #8803: PHP errors thrown in traffic shaper wizard multi
- Updated to the latest snap shot this morning and retested. The traffic shaper wizard now works as expected with no ...
-
08:56 AM
Bug #8803: PHP errors thrown in traffic shaper wizard multi
- I have retested and don't see any problems. Since I pushed the update in two commits an hour apart, it is possible yo...
-
- Verified with the latest snapshot that all steps are able to be completed in the traffic shaper wizard with no PHP er...
-
- Growl appears to be abandoned upstream. No updates in ~5 years, and few if any users on pfSense.
At this point it ... -
- Everything I'm reading says it can't be fixed in implementations since it's a protocol flaw. At this point I believe ...
-
- This appears to be working now. With vouchers disabled, I can load the login page and there is only username/password...
-
- Do not observe the issue, new roll is active after creation without additional actions.
-
- Code is not changing any interface that doesn't have `hwaddr` item. I'm working on a fix to save original mac address...
-
-
- Applied in changeset commit:80dbe344983666310a762ceab1520d578e3f2722.
-
- Actually if it shows "(/)" after the name I'd say that isn't fine. Somehow the authentication source is entirely empt...
-
- Feature works fine:
User admin@172.21.41.249 (/) -
08:29 AM Bug #6880: Multiple DHCP6 WAN connections leads to multiple dhcp6c clients
- In a similar vein, but a bit different: it's also important to be able to have multiple <code class=text>id-assoc pd ...
-
06:47 AM
Feature #8812 (Feedback): Add "Select All" to Firewall/NAT rule lists
- Control has been added to all NAT pages
-
-
- New feature works fine for:
@firewall_nat.php@
@firewall_rules.php@
But does not exist for:
@firewall_nat_1to1.... -
08/20/2018
-
08:41 PM Bug #8820 (New): System/Advanced/Misc - "Do not kill connections when schedule expires" UN-checked still leaves existing connections open.
- Orignal bug, marked as resolved but seems to be only partially resolved.
https://redmine.pfsense.org/issues/3558
... -
06:07 PM
Bug #8803: PHP errors thrown in traffic shaper wizard multi
- Please confirm that this change eliminates the PHP error messages. The Wizard should now test to see if a required $c...
-
06:00 PM
Bug #8803 (Feedback): PHP errors thrown in traffic shaper wizard multi
- Applied in changeset commit:a34bab9f4b93091e147bcae18b79e6349c60496c.
-
05:10 PM
Bug #8803: PHP errors thrown in traffic shaper wizard multi
- The offending command is: $thisvar = &$config['ezshaper']['step4']['enable'];
-
- Sorry, forgot to mention the step… If I check enable for step 3 The “penalty box” and press “next“, that’s where th...
-
04:49 PM
Bug #8803: PHP errors thrown in traffic shaper wizard multi
- Thanks for the extra detail. I was able to reproduce this after your clarification.
-
- Just to be clear, the error(s) that I encountered which I thought perhaps could be a bug, occurred if any checkbox i...
-
- Steve, Were you able to get through the entire shaper wizard with no errors when selecting to prioritize other prot...
-
03:59 PM
Bug #8803 (Feedback): PHP errors thrown in traffic shaper wizard multi
- I am unable to reproduce this.
New VM running "out of the box" pfSense 2.4.4 snapshot from today
Number of wan ... -
03:46 PM
Bug #8803: PHP errors thrown in traffic shaper wizard multi
-
- This is on the APU4
-
- Sensor widget is stucking in updating loop since 2.4.4 but worked fine in 2.4.3
-
- Applied in changeset commit:1ec79365df1315b51542ec7344e4161d29e6b17f.
-
- Fix for this is coming. It affected more than just the OpenVPN wizard. The OpenVPN wizard, cert manager, and User Man...
-
- Applied in changeset commit:b3cd2eb41666e8c2e35c5ea1d2dea0862d12e6c8.
-
- I have replicated this in em(4) and re(4) (on an APU) but not on mvneta(4).
All on the latest 2.4.4 snapshot. -
- When an interface loses link the IPv4 addresses, including VIPs, can disappear from the interface. If the link is dow...
-
- Applied in changeset commit:0fa7e6bfb5c8dfd07d9f5cf65c834d38d6198393.
-
-
- Add support to the system information widget to show the login name and source for the currently logged in GUI user v...
-
- Applied in changeset commit:d629601ab0a8a27a3b799062e16596c7683610bf.
-
-
- When a user logs in, there is no indication if the user logged in locally or from a remote authentication source. Kno...
-
- Applied in changeset commit:d629601ab0a8a27a3b799062e16596c7683610bf.
-
-
- When a user logs into the GUI through a proxy, only the proxy IP address is logged. If the HTTP request headers inclu...
-
11:50 AM
Bug #8805 (Feedback): Enabling vouchers on the captive portal voucher page does not regenerate captiveportal login template
- Applied in changeset commit:619e1950fdd96b606d3bbe8125476ea76a6190d0.
-
11:08 AM
Bug #8805 (In Progress): Enabling vouchers on the captive portal voucher page does not regenerate captiveportal login template
-
- login *template (sorry for my spelling)
-
- I created HA cluster on 2.4.3_p1 and after changing WAN CARP VIP Outbound NAT rules don't import new value. So I lost...
-
- Still seeing this. On ARM for example:...
-
- PR https://github.com/pfsense/pfsense/pull/3972 has been merged.
-
07:10 AM
Feature #8812: Add "Select All" to Firewall/NAT rule lists
- Applied in changeset commit:e969408dc18a109c224da3feef4bcc69626f25dd.
-
07:01 AM
Feature #8812 (Feedback): Add "Select All" to Firewall/NAT rule lists
-
- Not a bug, but a feature request. That page has not had a select all mechanism that I could see. Checked back to 2.1.
-
02:34 AM Feature #8812 (Resolved): Add "Select All" to Firewall/NAT rule lists
- pfSense does not have select all (Firewall -> Rules).
cannot select all rows in firewall rules.
imagine firewall ru... -
- in pfblockerng when change Rule Order generates duplicate all firewall rules.
08/19/2018
-
- Ooops
I meant these two files are not created on *salve in */var/etc
and also despite public and private keys b... -
- When HA and vouchers are enabled, vouchers can't be used on the slave because the files used by @/usr/local/bin/vouch...
-
- Oh
My bad then...
I didn't understand the point of this feature. I appologize.
you could close this todo then. -
- These options are with the vouchers because they have to be setup on the secondary and not the primary. The secondary...
-
- related to #8420
-
- When using High Avaliablity, some inconsistant logs are displayed...
-
- Made a PR that 'kinda' incorporates this.. A little different than proposed though. It now supports a different chall...
-
- I wonder if this might be the same root cause as #8721
An XMLRPC sync used to trigger filter_configure via XMLRPC ... -
- When a CP zone is enabled, slave does not start the captive portal (despite "enabled" setting appear checked on the s...
-
- I just tested on two old release (x64-2.1-RELEASE and i386-2.1.5-RELEASE. That's the only deprecated release i could ...
-
-
- Do not observe the issue with IPAlias on CARP after interface down/up via un/plug cable aliases are able to handle tr...
-
- The package is there, but what we need is more functional testing. We need to make sure not only that RADIUS authenti...
-
- It seems ok on latest 244
*php72-pear-Auth_RADIUS-1.1.0_4 PEAR wrapper classes for the RADIUS PECL* -
- root: pkg info | grep RADIUS
hostapd-2.6_1 IEEE 802.11 AP, IEEE 802.1X/WPA/WPA2/EAP/RADIUS Authenti... -
-
- Can see rules:...
-
-
- Can see creds in HTTP request:
!screen.png!
Packets in .cap file -
-
- This looks fixed on image Current Base System 2.4.4.a.20180819.0052:
2.4.4-DEVELOPMENT][root@pfSense.localdomain]/... -
- FreeBSD pf1k.lab 11.2-RELEASE-p2 FreeBSD 11.2-RELEASE-p2 #60 da8baa0ffd8(factory-RELENG_2_4_4): Sun Aug 19 01:19:48 E...
-
12:23 PM Bug #8603: PPP WANs do not work on VLANs on current snapshots
- Solved on 2.4.4.a.20180818.2240.
Thanks for fixing this bug. -
-
- I am able to reproduce the issue on VM with latest dev factory
VLANs have not parent after changing MTU to 9000 on... -
- CE test base xml, and images attached.
base image: https://snapshots.pfsense.org/amd64/pfSense_master/installer/pf... -
- Changing the number of tickets in an existing roll is supposed to reset active tickets by flushing the active voucher...
-
- Deleting a captiveportal zone on master does not delete the captiveportal on the slave.
-
- Clicking on "save" button of the voucher page does not enable vouchers on the login page.
you currently need to clic... -
- Tested both the multi network and dedicated traffic shaper wizards and it appears that this issue is still occurring...
08/18/2018
-
07:19 PM Bug #8804 (New): Netgate SG-1000 PPPoE Keepalives not prioritized, internet drops
- Hello, I have the Netgate SG-1000 and have Zen VDSL2+ internet in the UK. I have 80Mbps down, 20Mbps up. I am current...
-
03:45 PM
Feature #8793 (Resolved): Captive Portal HTML Design and Usability Improvements
- On 2.4.4.a.20180817.2128, works as expected.
-
- Just tested the new changes...It seems fine :)
Maybe i would set a @text-align:center;@ instead of a @text-align:... -
- Thanks Dmitry!
The fix is committed, I'll send the instructions.
-
06:12 AM Bug #7532 (Feedback): SG-1000 autonegotiation 10baseT speed and duplex
-
- Hi Luiz!
Would you provide instruction to upload the commit?
devel-11 branch?
Thanks,
-Dmitry -
- Steve Wheeler, thank you for the idea with switch issue.
This solution resolve issue with transmit (TX) clocking (in... -
- When attempting to save changes in order to proceed to the next step in the wizard following prioritizing VoIP, the ...
-
09:10 AM Bug #8603: PPP WANs do not work on VLANs on current snapshots
- I can confirm this too. Many thanks
-
- It's working on the latest snapshot, PPPoE connected, interface is up and passing traffic. Thanks!
-
- I would vote for a "reject"/"won't fix".
What you want is to update pfSense settings using a script, which is comp... -
-
12:15 AM
Bug #8801 (Resolved): OpenVPN Wizard, User Manager, Cert Manager will place CA CN in the Country Code field of a Certificate
- Go to System Cert Manager > CAs and make a new CA. Go to VPN > OpenVPN and click Wizards. On the first step choose lo...
-
05:55 AM Feature #8802 (Rejected): DNS Resolver cannot use host alias for IP Address
- https://<pfsense>/services_unbound_host_edit.php
The "Host Override Options" "IP Address" option should accept host ... -
-
01:30 AM Bug #8792: OpenVPN wizard PHP error
- UPD.
If you create CA without Country Code (left it as NONE) and in wizard trying to create new server certificate, ... -
- Created bunch of tunnels with wizard. Used internal server certificates and faced no issue.
-
04:24 AM Bug #8434: Chelsio T4/T5 CXGBE drivers not loaded as ALTq capable in the PfSense UI
2.4.4-DEVELOPMENT (amd64)
built on Fri Aug 17 20:20:38 EDT 2018
FreeBSD 11.2-RELEASE-p2
Still dead. :(
-
- On 2.4.4 Fri Aug 17 21:29:09 EDT 2018
When testing host edit/delete actions with host overrides in dns forwarder w... -
-
- On 2.4.3-p1:
Enabled RA, set Router Priority to Low (also tested with High and Normal):
radvd.conf left unchang... -
- On 2.4.4 Fri Aug 17 21:29:09 EDT 2018:
Azure DynDNS client present for both IPv4/v6 - configured it with fake acco... -
- On 2.4.4 Fri Aug 17 21:29:09 EDT 2018:
Shell Output - pkg info | grep RADIUS
freeradius3-3.0.17 Fre... -
- On 2.4.4 Fri Aug 17 21:29:09 EDT 2018:
Created new interface, assigned ipv6, enabled, then verified both dhcp6 and... -
- I can't replicate also - created 3 vlan's on a top of Lagg, assigned vlan's and Lagg interfaces, enabled, assigned IP...
-
- On 2.4.3-p1:
nat on $LAN_VLAN11 from 2607:fd48:300::/56 to any -> 192.168.51.1/32 port 1024:65535
On 2.4.4 Fri... -
- On SG4860 2.4.4 build Tue Aug 14 16:55:58 EDT 2018 - restored config.xml, disabled WAN facing switchport, device boot...
-
12:17 AM
pfSense Packages
Bug #8798: Visiting App Parsers causes a php error to be be shown
- screenshot
-
12:16 AM
Bug #8800: Interface group member cannot be deleted, after it's been disabled
- screenshots.
08/17/2018
-
11:58 PM
Bug #8527: VLANs losing parent interface on LAGG change
- Following the same steps as Luiz, I am also unable to recreate the issue on 2.4.4.a.20180817.2020.
-
- I can't reproduce this, tested on 2.4.3 and 2.4.4.
Steps:
1 - Create LAGG;
2 - Add VLANs to LAGG;
3 - Edit LA... -
11:48 PM
Bug #8800 (Resolved): Interface group member cannot be deleted, after it's been disabled
- On 2.4.4.a.20180817.2020, make a VLAN, assign it as an interface, add the interface to a interface group. Edit the in...
-
11:35 PM
pfSense Packages
Bug #8799 (Resolved): Automatic flowbit resolution setting does not match description
- On 2.4.4.a.20180817.2020, install suricata (version 4.0.13_3), add an interface, visit the Categories tab and see tha...
-
11:24 PM
pfSense Packages
Bug #8716: Suricata package does not survive pfSense upgrade.
- Install 2.4.4.a.20180810.1914 recovery snapshot for SG-3100. Install Suricata, enable some sources, update, add and e...
-
- I couldn't reproduce this issue. Steve, do you still see issues when upgrade?
-
11:04 PM
pfSense Packages
Bug #8798 (Resolved): Visiting App Parsers causes a php error to be be shown
- On 2.4.4.a.20180817.2128, install suricata (version 4.0.13_3), add an interface, visit the WAN App Parsers tab, the p...
-
11:01 PM
pfSense Packages
Bug #8797 (Resolved): Visiting Flow/Stream causes a php error to be be shown
- On 2.4.4.a.20180817.2128, install suricata (version 4.0.13_3), add an interface, visit the Flow/Stream tab, the php w...
-
10:53 PM
pfSense Packages
Bug #8796 (Resolved): Enabling Automatic SID State Management causes php warning
- On 2.4.4.a.20180817.2128, install suricata (version 4.0.13_3), go to Services > Suricata > SID Mgmt, check the box to...
-
- pfS latest (2.4.4.a.20180817.1117) has PHP broken for pfBng v2.1.4_8
thanks,
R.
-----
Crash report begi... -
- I Just tested the changes, the second authentication is working well.
However i faced another issue : @$PORTAL_MES... -
12:34 PM
Feature #8793: Captive Portal HTML Design and Usability Improvements
- I just found out it does unselect using cmd+click on mac. So perhaps it is not an issue I just didn't know how to uns...
-
- (Edit : Sorry my comment was off topic. You was probably referring to the login HTML page, not to the WebGUI settings...
-
10:38 AM
Feature #8793: Captive Portal HTML Design and Usability Improvements
- I re-integrated the changes for the second authentication type for the login. # 15064e4fbffaf89b340f7df5c13bb5143d769...
-
- One comment on the initial commit points out that the new HTML (accidentally?) removed the secondary authentication s...
-
- The Captive Portal HTML/CSS is very dated and could use an update, plus it's difficult to customize for new users unf...
-
01:43 PM Feature #8794 (Resolved): NTP authentication support
- NIST 800.53, specifically CM-6, requires network devices sync their time source using authenticated NTP. I'd like to ...
-
-
- I missed one branch while I was cherry-picking this fix. It will be available on next CE snapshot.
-
- This still does not appear to be working, my PPPoE on VLAN test still fails. The @ng_ether_attach@ error is gone, but...
-
- Since that last commit, systems that were not experiencing problems before now fail to track the updates. They print ...
-
-
- >> in this doc: https://www.ti.com/lit/ug/spruh73p/spruh73p.pdf
>> AM335x TRM
>14.3.6 RGMII Interface
>>The CPRG... -
- Therefore receiving by SG-1000 is working on 10Mb and transmitting isn't working.
-
- I checked the clocks on PHY.
GTX_CLK (which output from AM3358)
> when 1Gb is set = 125MHz,
> when 100Mb ~ 25MHz
... -
-
-
- Tested on latest snap on 3100 and 7100 - looks good, thanks!
08/16/2018
-
- Duplicate of #8793 + Fixed in Changeset https://github.com/pfsense/pfsense/commit/748372bc76d4f1794115204b13cf8cdef08...
-
03:59 PM Bug #7423: Special characters in a password cause problems
- The issue was reproducible with Microsoft IAS server on old Windows server 2003 but now we have updated the OS to Win...
-
- It's entirely possible the changes to the underlying RADIUS code helped here. There was a similar problem in the past...
-
- It's not a captiveportal issue.
Radius Auth is working fine with £ in the username and/or in the user password. I... -
- I committed our old fix for now, once the kp@ fix on the PR is tested I'll apply his fix.
Please check with the ne... -
-
- The warning is now silenced.
Please test with the next snapshot. -
-
- I confirm that LDAP is working correctly now
This issue can be marked as resolved -
-
- Pull request is working, warning is gone.
This issue can be marked as resolved -
- PR merged
-
-
- Applied in changeset commit:82a3d3e9a8e73896f9da02f77742ca8389b1dc83.
-
-
- In certain cases the OpenVPN wizard can result in a PHP error when selecting a server certificate:...
-
- The details of this issue have been publicly announced by CERT: https://www.kb.cert.org/vuls/id/857035
See also:
... -
- Applied in changeset commit:75cf92ffe93c7ea71cd5b432c369860b6e66a0d3.
-
-
-
- "RFC 4861":https://tools.ietf.org/html/rfc4861#section-4.1 states in section 4.1 that during neighbor discovery a dev...
-
-
- Duplicate of #3377
-
-
- Multiple things here :
A Pass-Trough MAC address is a MAC address that will bypass the captiveportal. Therefore... -
-
- It can already be done by creating a custom login page with some javascript on it...
-
- On 2.4.4 buildtime - Tue Aug 14 16:55:58 EDT 2018
Crash report begins. Anonymous machine information:
amd64
1...
08/15/2018
-
-
- I confirm that the fix is working. Accounting updates are now sent when using latest snapshot.
This issue can be... -
-
- I confirm that the fix is working. Name of the user is now recorded in captiveportal status and logs on last snapshot...
-
-
- I confirm that the fix is working.
@NAS-Identifier@ now has a value based on the service that triggered a RADIUS re... -
-
03:49 PM
Feature #8788: Disable compression by default for OpenVPN
- On 2.4.4.a.20180815.1003 (gitsync'd to master), OpenVPN (server and client) default to "Disable Compression, retain c...
-
- Applied in changeset 3892257442d732c601c9f5e889327fb59d375437.
-
-
02:18 PM
Feature #8788 (Resolved): Disable compression by default for OpenVPN
- In light of the voracle attack, this feature request is to disable compression by default for OpenVPN in pfSense.
-
-
- I confirm that the fix is working.
@Called-Station-ID@ and @Calling-Station-ID@ are now following RFC3580 (see http... -
- Pull request here : https://github.com/pfsense/pfsense/pull/3971
-
- I got a warning while testing new Captive Portal settings....
-
03:11 PM Bug #8707: New PHP Error [/etc/inc/gwlb.inc]
- Maybe I spoke too soon? This is simply nutty...
So, everything was working, and I went to change the monitor ip o... -
- I'll mark this resolved for now then. If you can manage to reproduce it again, let us know.
-
- I can buy that reasoning, considering the pita that the php7 upgrade has appeared to be with bugs.
After I posted,... -
- It's entirely possible that the underlying bug was fixed between the original report and now, and that this was a sid...
-
- Well, this is wackado. I replaced gwlb.inc with a fresh new repo copy and restarted php-fpm, and proceeded to start ...
-
- That gw group also includes wan as [5], I'm not sure why it didn't show for you? They are dynamic though and are all...
-
- The only potential problem there that I see is that one of your gateway groups consists entirely of gateways that are...
-
- PR Merged
-
- We have discontinued the OVA so there won't be any opportunity to fix this.
Installing from ISO is the correct pat... -
12:56 PM Bug #8787 (Closed): vmware Appliance OVA template creates VMs that VEEAM cannot backup and restore successfully
- Affected version: every version we've tested so far, at least as far back as ~2.2.0, right through current 2.4 releas...
-
01:33 PM Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel
- Interested to know why do you (or pfSense) think this is not a high priority.
On my point of view (that I know doe... -
01:12 PM
Bug #8138 (New): Option <spoofmac> is ignored on interfaces without hwaddr
-
09:01 AM
Bug #8138 (In Progress): Option <spoofmac> is ignored on interfaces without hwaddr
-
-
- Applied in changeset pfsense:commit:3a6273a960ea42c03a54ea0bf6002d4df4b5a696.
-
- This is working now. After saving the correct rules are still present. Thanks!
-
08:56 AM
Bug #8783 (Feedback): Saving Captive Portal Zone removes Captive Portal rules
- An update has been made to the pfSense PHP module to correct another issue. It is likely to have fixed this one too.
... -
11:56 AM
Bug #8745 (Resolved): Adding a bridge generates a crash report.
-
11:56 AM
Bug #8745: Adding a bridge generates a crash report.
- On 2.4.4.a.20180815.1003, cannot reproduce.
-
07:55 AM
Bug #8745: Adding a bridge generates a crash report.
- Applied in changeset commit:71de53e3203095e3a1b99baf8d27bfb63814b9b8.
-
07:50 AM
Bug #8745 (Feedback): Adding a bridge generates a crash report.
-
07:47 AM
Bug #8745 (In Progress): Adding a bridge generates a crash report.
-
-
- I confirm, it's fixed.
This can be marked as resolved. -
08:31 AM
Bug #8744 (Feedback): Re-configuring an enabled captiveportal cause ipfw to drop all traffic, pfSense_ipfw_tables_list() is to blame (PHP 7 related?)
- Fix should be in the next snapshot.
Thanks for your detective work. It made finding this issue a great deal easier! -
08:24 AM
Bug #8744 (In Progress): Re-configuring an enabled captiveportal cause ipfw to drop all traffic, pfSense_ipfw_tables_list() is to blame (PHP 7 related?)
-
11:52 AM
Feature #8772 (Resolved): Add GUI option for async crypto
-
11:51 AM
Feature #8772: Add GUI option for async crypto
- On 2.4.4.a.20180814.1656, enabling "Use asynchronous mode to parallelize multiple cryptography jobs" shows a noticeab...
-
- Looks good in package 0.3.7_3. No warnings seen.
-
09:12 AM pfSense Packages Feature #6022: Consider MLVPN for bonded VPN
- any news?
we would also really love to have this! -
- PR merged
-
-
- Too early closed - still errors.
Thu Aug 02 10:54:34 EDT 2018
Crash report begins. Anonymous machine informat... -
- PR merged
-
-
-
- PR merged
-
-
- Fix upstreamed and merged to 2.4.4 branch.
https://svnweb.freebsd.org/base?view=revision&revision=337844 -
- Looks like, this Bug was solved.
On 2.4.3_p1 I see this Bug, but on 2.4.4-DEV everything works fine: with Inverse ... -
- That won't happen until they make a secure, stable, and audited release. See https://forum.netgate.com/topic/132375/i...
-
01:14 AM Feature #8786 (Resolved): Wireguard VPN
- Hi
Please integrate wireguard VPN wireguard.com
Thx -
- On 2.4.4 Tue Aug 14 16:55:58 EDT 2018 repeated steps - _install net-snmp package, visit Services > SNMP (NET-SNMP)...
-
- On 2.4.3-p1:
Shell Output - nslookup net10.rebindtest.com
Server: 127.0.0.1
Address: 127.0.0.1#53
Non-author...
08/14/2018
-
09:02 PM Bug #8489: DHCPv6 Client Failure to Initialize with "Do not wait for RA"
- I'm disappointed this bug is being punted. On the forum, I offered my system (via teamviewer) if anyone wants to take...
-
- And ye shall receive. Note that VPN2 (opt6) is the gateway and interface that's disabled.
-
- Nothing in there seems like it should cause any issues. I'm wondering if maybe you have a stray empty gateway tag in ...
-
- I can sort of reproduce this but not exactly in the way described. For example, if you stop and start (not restart) I...
-
- Sorry, the two mentioned URL above are not correct anymore due to recent captiveportal.inc changes on master.
Here... -
- Possibly related to #8783
-
03:17 PM pfSense Packages Bug #8785 (Resolved): Fail config authentication on squid
- When configuring squid for ldap authentication the same does not accept in the 'Authentication Prompt' field accents ...
-
- Please open a new one in english.
-
- Ao configurar o squid para autenticação com ldap o mesmo não aceita no campo "Athentication Prompt" acentos do tipo c...
-
- PR merged
-
- PR merged
-
- PR merged
-
- PR merged
-
- PR merged
-
- Possibly related to #8744
-
01:35 PM
Bug #8783: Saving Captive Portal Zone removes Captive Portal rules
-
- When saving a Captive Portal zone, the rules disappear. Only way I've seen to bring them back is a reboot. After savi...
-
01:22 PM
pfSense Packages
Bug #8779 (Resolved): PHP7: Cron package. PHP Warnings
-
01:21 PM
pfSense Packages
Bug #8670 (Assigned): HAProxy PHP error
-
- We were able to reproduce it and a fix was pushed at commit:1d8cd2215b2a0131f69d2879f77c01204b7928c5
-
- Errors relevant to apcupsd are now fixed in commit:6b631073482b (apcupsd pkg version 0.3.91_4)
Tested and working,... -
- I'll take this, I need to look over the UPS packages anyhow.
-
09:44 AM Bug #8782 (Resolved): Custom dyndns issue: username and password is not sent
- I tried to use a custom DynDNS provider, one that I host myself but whose API is a clone of dyndns.org and I was surp...
-
09:02 AM Feature #8775: Use SRV record for LDAP Authentication
- Thank you for the thoughtful response. I'll submit the feature to php-ldap!
08/13/2018
-
05:49 PM pfSense Packages Bug #8781 (Resolved): Suricata PHP error in 2.4.4 snapshot
- Suricata gave the following error when upgrading from 2.4.3 to 2.4.4,
Crash report begins. Anonymous machine info... -
- If you have a 6in4 tunnel with a lower MTU, then the lower MTU would go on the 6in4 tunnel, not the pfSense WAN. The ...
-
10:03 AM Bug #8413: Virtual IP on PPPOE interface no longer working with 2.4.3
- Same (error in log) happening here, but already on version 2.4.1-RELEASE (amd64) . PPOE-interface with virtual IPs (v...
-
08:43 AM Bug #6938: DNS with OpenVPN gateway specified is routed through wrong interface. 2.4 regression.
- OK, that seems to be a workable solution.
Adding "8.8.8.8/32, 8.8.4.4/32" to "IPv4 Remote network(s)", results in ... -
- That isn't a bug. You can't use static routes (like DNS server gateway selection) with OpenVPN.
If you want to rou... -
- This issue persists with pfSense 2.4.3_1 openvpn-2.4.4_1.
It has not been resolved as in bug #6883.
DNS servers... -
- I did an upgrade from 2.4.3 to 2.4.4 and recieved a bunch of errors for APCUPSD,
Crash report begins. Anonymous m...
08/12/2018
-
- There's a PR for this at https://github.com/pfsense/FreeBSD-ports/pull/549
-
- In Cron package version 0.3.7_2...
-
08:07 AM Feature #4354: Allow dpinger to ping more than one destination for a gateway.
- At the risk of bumping a closed topic, I have an edge use case that could be considered if a gateway monitoring daemo...
08/11/2018
-
- It is highly unlikely we'd be able to dedicate any resources toward adding this feature internally.
-
03:39 PM Feature #4821: PPPoE WANs do not take full advantage of NIC driver queues for receiving traffic
- Jim Pingle wrote:
> If you'd like to configure that, you can set it as a system tunable under *System > Advanced*,... -
02:24 PM
Feature #1933 (Resolved): Support for interface groups in NAT screens
-
02:24 PM
Feature #1933: Support for interface groups in NAT screens
- On 2.4.4.a.20180810.1552, was able to create an Interface Group, then a NAT Port Forward using the newly created Inte...
-
- Before this gets closed out, can the PR 32 for the dpinger.c update get merged as well so everything is consistent (ms)?
-
-
- Tested on 2.4.4-DEVELOPMENT (arm) built on Thu Aug 02 10:54:34 EDT 2018
Looks good.
GW log:
Aug 10 14:25:12... -
- Created a gateway and then set it on an interface with "none" gateway - applied successfully
Tested on 2.4.4-DEVEL... -
-
- The following notes are now on the ipsec p1 page:
Note: Blowfish, 3DES, CAST128, MD5, SHA1, and DH groups 1, 2, 22... -
- Got warning on 2.4.4-DEVELOPMENT (arm) built on Fri Aug 10 19:14:45 EDT 2018 when creating alias 'test_alias' with v...
-
-
- Looks good on 2.4.4-DEVELOPMENT (arm) built on Thu Aug 02 10:54:34 EDT 2018
-
07:08 AM Feature #8777 (Duplicate): DHCPD - WebGUI Permit Classes and Matches If
- Permit from pfsense dhcp server gui to assign pools with classes and match if statements. For example for vendor-clas...
-
05:51 AM
pfSense Packages
Bug #8491: ACME: DNS-Luadns not working
- Issue still exists in Version 0.3.1_1.
08/10/2018
-
04:14 PM pfSense Packages Bug #8749: OSPF6 nssa not working
- Update:
It doesn't seem like FRR supports the NSSA area type. In fact, according to the documentation, it looks like... -
- We have set it to @deferred@ in the past on i386 to avoid a crash it otherwise encountered, but we do not explicitly ...
-
- pfSense is at the mercy of the PHP LDAP module here, which itself uses OpenLDAP.
There isn't a way I could see to ... -
- PR URL: https://github.com/pfsense/pfsense/pull/3946
-
- PR merged
-
- To re-create the problem, I entered a network with a prefix of X, a minimum prefix equal to X and a maximum prefix eq...
-
- If the UI validation is wrong that could still be a bug. What did it allow you to enter incorrectly, and where? It wo...
-
- I found the issue. This is not a bug but more a UI validation issue.
When things are entered as expected by FRR, it ... -
- PR merged
-
- PR merged
08/09/2018
-
- Maybe it is me, but, using an SRV record to resolve to either SSL or TLS LDAP server doesn't work. IMO, this would p...
-
- There has been a flurry of activity on this freebsd bug post. It sounds like the issue is a hardware limitation in t...
-
01:01 PM pfSense Packages Bug #8774 (Resolved): Whitelist ALC type not supported by ssl_bump
- The general purpose whitelist (@/var/squid/acl/whitelist.acl@) uses a @dstdom_regex@ ACL. @dstdomain@ ACLs do not wor...
-
- Need to add a page to the docs about VPN throughput tuning
Example info that needs to go on the page:
* Use AES-N... -
- I had this happen on my edge firewall which is running a snapshot from earlier this week. The pf tables with entries ...
-
09:00 AM Bug #7801: UDP fragments received over IPsec tunnel are not properly reassembled and forwarded
- Hi,
I have a similar issue with fragmented packets send/received over IPsec tunnel.
Finally, I manage to update _/... -
- System was running a modified version.
-
05:47 AM Bug #8736: default gateway not working after upgrade to 2.4.3-RELEASE-p1
- Wow, it feels to you like support request? Well the border between that and bug report is nonexistant, so I undertsta...
08/08/2018
-
05:13 PM Bug #8618: 2.4.4 *possible bug* with Intel C3858 and Interface Auto-Detection on 10Gb interfaces
- Clinton Cory wrote:
> This appears to be working now.
Thank you for helping get this Ironed out for the new platf... -
05:10 PM Bug #8618 (Closed): 2.4.4 *possible bug* with Intel C3858 and Interface Auto-Detection on 10Gb interfaces
- This appears to be working now.
-
- 2.4.4 pfSense installer will enable OPT IX interfaces by default rather than just assigning the IX interface to OPT*
... -
- Applied in changeset commit:912445421161939847112a21ae1114269dc4b882.
-
- We pulled in patches for net.inet.ipsec.async_crypto which allows multi-threading for IPsec crypto jobs, but there is...
-
- Pi Ba wrote:
> The error no longer happens on 2.4.4-DEVELOPMENT (amd64) built on Wed Aug 08 12:58:30 EDT 2018
> So ... -
- The error no longer happens on 2.4.4-DEVELOPMENT (amd64) built on Wed Aug 08 12:58:30 EDT 2018
So in that regard it ... -
- After more days of running, you sir are accurate, my idea is a non-start fail but you knew that. :)
With your patc... -
11:15 AM Bug #8771: OpenVPN "custom options" box in GUI loses CR/LF (linefeeds) on save/reload meaning that OpenVPN then fails to start
- Ok thanks - though semicolon in OpenVPN conf files designates a comment. Anyone cutting and pasting options and comm...
-
- The CR/LF inconsistency is why the custom options must be separated by a semicolon (@;@) and *not* a CR/LF. This is s...
-
- Apologies if I've missed it, but I couldn't see this issue has already been reported.
If you enter multiple custom... -
08:44 AM Bug #8759: Apply changes cause openVpn Client disconnect to OpenVpn Server
- Ok solved,
I have unchecked "State Killing on Gateway Failure" in system > Advanced > Miscellanous.
I have a backup... -
- Ok , I managed to fix the Sync error, but the Site to Site still restart after "apply changes"
I have other 3 firewa... -
- In current 2.4.4 snapshots QinQ interface always appear to be UP and show carrier even when the parent interface (and...
-
-
- Changed title and other info -- this would need to be a new feature in the FreeRADIUS package and not a part of the b...
-
07:17 AM pfSense Packages Feature #8769: Allow FreeRADIUS users to change their own Passwords and Pins
- Please correct spelling of FreeRadius in title
-
- Also request confirmation fields for password, pins and the like.
-
- Request ability to have Group Permissions which allow a regular radius user (not privileged) to change their own pass...
-
- Strongly Request feature.
We just lost a lot of time because this isn't implemented on SG-4860s.
On our REMOT... -
-
- The newest pfSense HAProxy package installs 1.7.11 now. Can this be closed now?
-
-
02:49 AM Bug #3720: Captive portal on httpS redirect to a http page
- As this was a bug 4 years ago, I think it is fixed now because I also don't have the issue anymore in the latest vers...
Also available in: Atom