Activity
From 08/23/2018 to 09/21/2018
09/21/2018
-
10:57 PM Feature #8926: WOL page selects first interface alphabetically, instead of LAN
- PR
https://github.com/pfsense/pfsense/pull/3989 -
- Small convenience fix. Currently when entering WOL page, the first interface (alphabetically) is selected. This is us...
-
08:33 PM Feature #8929 (New): Scroll bar css dark theme
- In my opinion the dark themes would be better if the white scroll bar would be changed to keep with the theme.
Addin... -
03:10 PM Bug #8927 (Resolved): PFsense 2.4.4 FreeRadius and Captive Portal Quota Problems
- Please I think the developers should look at the pfsense Captive Portal and FreeRadius Authentication very well. Apa...
-
01:11 PM Bug #8765 (Resolved): Per-user firewall rules for IPsec do not work
- Looks good.
Added this to RADIUS user reply attributes:... -
-
-
07:19 AM Todo #7024 (Resolved): Replace copy of radius.inc by pear-Auth_RADIUS
- The main move is done. Specific possible bugs found should have new tickets
-
12:15 AM Bug #8925 (Not a Bug): IPv6 RA Prefix Doesn't Match Interface Prefix ID
- To summarize:
I have one WAN and one LAN interface. The LAN (igb) interface also has an OPT interface for VLAN...
09/20/2018
-
09:10 PM Bug #8527 (Resolved): VLANs losing parent interface on LAGG change
- I tested this in 2.4.4r and was unable to replicate the issue.
I created and assigned a 3 interface LAGG and adde... -
- Why would that matter now? What loss of functionality is there? You can select it specifically, or setup a gateway gr...
-
06:30 PM Bug #8910: DHCP default gateway undefined
- Sadly now i cant move my fiber gateway above the old adsl wan interface anymore.. I know i want it, but the gui wont ...
-
- You did 'apply' the new settings? (And refresh the page perhaps once after.?, it might lag a little bit while setting...
-
- This seems to fix it: https://github.com/pfsense/pfsense/pull/3987
-
- Added some logging:...
-
- In a clean 2.4.4 saved the repo to give this config:...
-
02:57 PM Bug #8693: Filter rules error after deleting VIP
- FYI, I just got caught by this same problem, also on 2.4.3-p1. However in my case it was on my WAN interface where I...
-
02:35 PM Bug #8924 (Resolved): FreeDNS Dynamic DNS update needs IP
- FreeDNS currently is set for not needing ip, therefore pfSense just calls the update url with the user given record t...
-
01:14 PM Todo #6647: Enable Additional Security Headers
- This 2016 presentation by two security researchers at Google might be useful when considering a CSP:
https://speak... -
- Duplicate of #7604 which is fixed in 2.4.4.
-
- This is with SG-3100 appliance, 2.4.3p1
For testing purposes, I want to restore config from XML where the WAN inte... -
- PR: https://github.com/pfsense/pfsense/pull/3985
-
- I found some bugs with system.inc and system.php while troubleshooting a recent issue.
quick repro (2 different bu...
09/19/2018
-
- Using 2.4.4-RC (amd64) built on Tue Sep 18 17:52:29 EDT 2018
I've installed a new pfSense VM with 3 wan interfac... -
06:44 PM pfSense Packages Feature #8613: pfSense-pkg-acme: acme_certificates_edit.php - Add support for --challenge-alias acme.sh flag
- Thanks for this nifty feature. It works well in most cases.
I've seen an issue with some DNS-Providers which are n... -
- Applied in changeset commit:e2f60597df488cf073d14913d8a523cbb447f733.
-
- Edit the first user in the list on system_usermanager.php and add a certificate. When finishing the certificate add, ...
-
11:55 AM Feature #6240: vxlan driver
- +1
-
- Applied in changeset commit:124ca365049368460598621f962ad0b4f5459d7a.
-
- When saving on DHCP or DHCPv6 relay when the settings tag is empty (e.g. @<dhcrelay></dhcrelay>@), PHP errors are enc...
-
- Fix coming in OpenVPN Client Export package version 1.4.17_2
-
- When attempting to export a VPN configuration for a user, if that user's ID is 0 then the username is not added to th...
-
- This looks good on current snaps. The case I had that broke repeatedly before now comes up with the expected WAN gate...
-
-
- > 2.4.4-DEVELOPMENT (amd64)
> built on Tue Sep 04 10:04:12 EDT 2018
> FreeBSD 11.2-RELEASE-p2
That snapshot is v... -
07:22 AM Bug #8912: User Certificate error
- It worked after a complete shutdown.
09/18/2018
-
10:49 PM pfSense Packages Bug #8904: Shellcmd: pfBlocker's earlyshellcmd is being removed at boot
- Added *Shellcmd package* functionality to *pfBlockerNG-devel* here:
https://github.com/pfsense/FreeBSD-ports/pull/56... -
- A previous fix to shellcmd to address PHP errors changed it from using references to using a copy of the config, whic...
-
- 2.4.4-DEVELOPMENT (amd64)
built on Tue Sep 04 10:04:12 EDT 2018
FreeBSD 11.2-RELEASE-p2
PHP ERROR: Type: 1, F... -
- Applied in changeset commit:51c3546dd77b9efbd53ace478b991ea530bc0a98.
-
-
- If you have a DHCP dynamic gateway set as the default in 2.4.3 you may or may not have an entry for it in the <gatewa...
-
04:43 PM Bug #8905: status_logs_settings.php PHP errors on 2.4.4 snapshots
- Perfect. That one liner fixes the issue I saw.
Jim, thanks for the quick fix!
Steve, thanks for the QA check! -
03:53 PM
Bug #8905 (Resolved): status_logs_settings.php PHP errors on 2.4.4 snapshots
- Tested with an older version of 2.4.4 and was able to reproduce the error. Upgraded to 2.4.5 current and no longer se...
-
- Applied in changeset commit:508c66ace779a6021b217d055b53587fdb021fec.
-
- ...and as soon as I posted that, I managed to reproduce it with an empty syslog section here. The patch did fix it fo...
-
- I still can't reproduce that here but can you try the attached patch? Apply it either by making the edit by hand or u...
-
04:37 PM
Bug #8913 (Resolved): system_update_settings.php - PHP Error
- Tried on latest with gitsync and no errors seen when toggling the disable dashboard check. Moving to resolved.
-
- Applied in changeset commit:30213bb09a6be9769352700e9bdf32f8be6f9b61.
-
-
12:49 PM Bug #8913 (Resolved): system_update_settings.php - PHP Error
- Getting PHP Error when I try disabling the dashboard check under System > Update > Update Settings.
Running 2.4.4 ... -
- In some cases a crash report is presented at first login after upgrading but the report contains no crash data and no...
-
- There is no easy way to prevent these warnings to show up on console. We are going to alert users about it in release...
-
- When a gateway failure/defgw switch event occurs, there seem to be some code paths that get iterated over dozens of t...
-
- Applied in changeset commit:0430b1b4ea7de0ce5d10b202af218140c59b9ecd.
-
- When restoring a config file from an older version of pfSense into a newer version it's possible to end up with the p...
-
- Something in your config or parameters is incorrect, but more importantly, you are several versions out of date. Upda...
-
- Hello,
I'm trying to create a new user for VPN access, I have tried creating cert within user creation and from cert... -
- Thanks, looks good to me, PR merged.
-
- on RC 2.4.4.r.20180917.0837 - there was a glitch with this. I created PR#3982 to fix:
https://github.com/pfsense/pfs... -
05:51 AM pfSense Packages Bug #8909 (New): tinc package makes /rc.newwanip looping forever
- I just realizd that each time the tincd(8) daemon is started, pfSense detects the new IP address on its dedicated int...
-
12:57 AM Feature #8908 (Closed): setting default gateway using lower Tier in case gateway group is set as default
- *Current behavior.* I have 3 GW and create GW group from 2 them with different Tiers. E.g. GW3 is marked as @(default...
-
- Do not observe the issue on 245-dev...
-
- And also GW obtained from DHCP are always at bottom regardless name. I mean *WAN_DHCP* is lower than manually added *...
-
- I've checked on 245, it works, I do not observe extra GW 0 and php warning:...
09/17/2018
-
- > Does your config.xml have a @<syslog>...</syslog>@ section? If so, what is in it?
Hmm, this is rather strange. ... -
- I can't reproduce that here. I took a system that had never had syslog settings changed on it since the last factory ...
-
- Also, I should probably redo this patch in pure PHP and use *dns_get_record()* http://php.net/manual/en/function.dns-...
-
07:14 PM Bug #7609: NTP Status not parsing all NTP Access Restrictions preventing status display when it is actually allowed
- Pull request https://github.com/pfsense/pfsense/pull/3981
-
03:21 PM Bug #8070: IKEv2 IPSec tunnel under load crashes pfSense when AES-NI is enabled
- Paul Youngberg wrote:
> Jan Jurkus wrote:
> > I want to refer you to this forumpost: https://forum.pfsense.org/inde... -
- On install, shellcmd imports the items from the earlyshellcmd tags and reformats them into the shellcmd package setti...
-
- This commit was not cherry-picked from master branch. Can you validate the fix on a 2.4.5 snapshot? I did the cherry-...
-
11:05 AM Bug #8527: VLANs losing parent interface on LAGG change
- Please check again with a newer image.
-
- Done
-
- Fixed in commit:59e2c01227cc on factory-ports, aws-wizard pkg version 0.7_2 will contain the fix when it builds.
-
- A FL wrote:
> I found a small issue with RADIUS bw limits however : pfsense-Bandwidth-Max-Up/Down have to be written... -
- Tested it again here and it works.
User in FreeRADIUS has:... -
-
01:58 AM pfSense Packages Bug #8508: Haproxy: Selecting mode tcp with SSL in backend does not activate SSL in the server config
- Yes, this seems to be fixed for a while now (the upgrade was fun since it broke my workaround :D)). Thanks!
-
- Sorry, you're right, this is the -devel package. I'd forgotten I'd installed that.
I agree the earlyshellcmd issue... -
04:22 AM pfSense Packages Feature #8523: make cookie inserted by haproxy secure
- Thank you! I do see the secure option in haproxy version 0.59_9.
Where did you add another options?
09/16/2018
-
- The file wizard.php - $field['type'] option "Select" doesn't have the attribute "Size" defined.
From:... -
- Posted two PR to fix these issues and add other improvements.
https://github.com/pfsense/FreeBSD-ports/pull/567
h... -
- Steve, Are you sure this is not from pfBlockerNG-devel?
https://github.com/pfsense/FreeBSD-ports/blob/devel/net/pf... -
- This error looks to be triggering an unrequired config update:...
-
- Sorry clipped the line in the copy there. Actual warning is:...
-
- Seeing this on a clean install of pfSense-2.4.4.r.20180914.1530 and restoring an existing config....
-
- Info:
Working on testing the latest snapshots and I'm unable to add remote syslog on 2.4.4 snapshot (pfSense-2.4.4... -
- The Shellcmd package is incorrectly removing the pfBlocker early shellcmd entry at each boot....
-
08:16 AM pfSense Packages Bug #8902: HAproxy package not use custom DNS for lookup on apply new config
- Pi Ba wrote:
> Hmm, i suppose your right.
>
> You could add below to the 'global advanced pass thru', that should... -
- Hmm, i suppose your right.
You could add below to the 'global advanced pass thru', that should solve the issue.
<... -
- Package Version:
haproxy-devel net 0.59_9
Package Dependencies:
haproxy-devel-1.8.13
cat /etc/version
2.4.3... -
07:54 AM Todo #7024: Replace copy of radius.inc by pear-Auth_RADIUS
- Well, I made some tests :
h2. Basic RADIUS auth (Diag > Auth test)
-> Good (working correctly)
h2. GUI RADI... -
- Keep it open until checking on next build, which contains current patch.
-
-
- Latest 14 Sep RC snapshot does not contain commit @a155dc5ec2278e0a344afa221127b8503d4e225e@ with this patch. But iss...
09/15/2018
-
- Fixed: https://github.com/pfsense/FreeBSD-ports/pull/567
-
04:05 PM pfSense Packages Bug #8900 (Resolved): pfBlockerNG
- Crash report begins. Anonymous machine information:
Current Base System 2.4.4.r.20180914.1544
amd64
11.2-RELE... -
- ran arpping package 1.2.2_1, executed ping to mac, hover menu's don't populate, no crash recorded
ran package iperf ... -
- 2.4.4-RC (amd64)
built on Fri Sep 14 15:45:39 EDT 2018
FreeBSD 11.2-RELEASE-p3
Factory install aws-wizard: F... -
11:57 AM
Bug #7892: AutoConfigBackup status reported incorrectly
- This seems to be presenting in another way also, where System Log will show a successful backup, despite the backup n...
-
- I've added a bunch of cookie options.. Does it work for you?
-
- The server configuration now allows separate activation of ssl for regular traffic and for health-checks. That should...
-
-
- I am no longer seeing these errors.
09/14/2018
-
- You are right that one page is inconsistent with the rest. They should all be done the same way. Not going to hold ba...
-
- I can't reproduce this. I setup a GRE interface and static routes, rebooted 10 times and every time the routes were t...
-
01:35 AM Bug #8896 (Not a Bug): Static routes are not added after reboot
- Hello,
Version tested: 2.4.3-RELEASE-p1 (amd64)
Steps to reproduce:
1. Add a GRE tunnel
2. Add some static ro... -
- RADIUS auth works fine when configured correctly. The subject is incorrect, or at least misleading. It works with the...
-
04:19 AM Bug #8897 (Not a Bug): RADIUS WebUI login with RADIUS does not work
- Hi all,
I setup FreeRADIUS as a RADIUS server and try to login to the WebUI then.
It is not working since the retur... -
- Update strongswan to 5.7.0
-
- Rajil Saraswat wrote:
> I am seeing the same crash on pfSense-CE-memstick-2.4.4-DEVELOPMENT-amd64-20180904-1004.img ... -
- Applied in changeset commit:352d49787dc5742ea53dd81ff82fef5f37b246db.
09/13/2018
-
10:31 PM Bug #8895 (Resolved): You MUST recompile PHP with a larger value of FD_SETSIZE. It is set to 2048, but you have descriptors numbered at least as high as 2161.
- Deleted issue #8894. This is similar to #8845 but insists on 3172, not 2048.
-
- The change above substitutes '_' with '_<wbr>' which is the same method used on other NAT pages. The '<wbr>' signals ...
-
- It's done deliberately to avoid long aliases preventing wrapping. #7249
-
- I notice that underscores are being replaced with spaces in alias names on Firewall > NAT > Outbound.
It's not consi... -
-
07:59 PM
Bug #8892: 2.3.5_2 does not offer update to 2.4.4-RC
- Tested 2.3.5_2 -> 2.4.4-RC without any manual intervention. Looks good.
-
- pfSense-upgrade 0.51 (2.4.x) and 0.27_14 (2.3.5) are fixed
-
- After selecting stable 2.4.x updates:...
-
01:26 PM
Bug #8892 (Resolved): 2.3.5_2 does not offer update to 2.4.4-RC
- A user on 2.3.5, who upgrades to 2.3.5_2, then tries to upgrade to 2.4.4-RC is not able to see 2.4.4-RC.
Even on t... -
07:04 PM Feature #1189: Gateway: Multiple monitor ips
- Openwrt mwan3 package has multiple monitors which can be tracked, https://wiki.openwrt.org/doc/howto/mwan3#interface_...
-
10:55 AM Feature #1189: Gateway: Multiple monitor ips
- Just going to add to the chorus here.
We encountered routing issues (their side, whole country affected) with one ... -
- I am seeing the same crash on pfSense-CE-memstick-2.4.4-DEVELOPMENT-amd64-20180904-1004.img running on Supermicro C35...
-
- Can't reproduce any errors on gateway status in the latest RC build, even without @<gateway></gateway>@ tags in the c...
-
- Fix tests OK with a gitsync to RELENG_2_4_4, but the fix is not yet in the RC images, will be in -RELEASE.
-
- Fixed on latest RC snap.
-
- Blank entries are not displayed on current RC snap and they do not cause PHP errors.
-
- Invalid combinations mentioned here are rejected on current RC snap
-
- Can't reproduce on RC snap on the same box where it happened previously. Looks good.
-
-
-
- Still waiting on someone that can reproduce it to confirm if it still happens. May be fixed, but we won't know for ce...
-
- No feedback after a month, we do not have accounts there to test. Assuming it's OK based on lack of complaints.
09/12/2018
-
07:37 PM Bug #8890: Register DHCP leases in the DNS Resolver has no effect
- Also content in /var/unbound/dhcpleases_entries.conf stays unchanged after uncheck the boxes and save, so unbound can...
-
- Jim Pingle wrote:
> Those directives are always present. The contents of those files are what matter.
OK, I looke... -
- Those directives are always present. The contents of those files are what matter.
-
- uncheck "DHCP Registration" and "Static DHCP" in WebGUI doesn't change unbound's behavior.
@# Static host entries... -
05:31 PM
Bug #8888: Memory Leak/loop 99% used Ramdisk band aid.
- You should post in the forums.
Something else is wrong with your setup, this affects only you, thus us in the commun... -
11:24 AM Bug #8888: Memory Leak/loop 99% used Ramdisk band aid.
- Jim Pingle wrote:
> Looks like it's all configuration issues there, not a memory leak, but there is not enough detai... -
- Looks like it's all configuration issues there, not a memory leak, but there is not enough detail to call it a bug by...
-
- Sorry those screen shot above turned out like crap
Better one's.
[[https://ibb.co/fMe2X9]]
[[https://ibb.co/mUUf... -
- I am Ruining 2.4.3-p1. I have tried every thing from No Plugins, to Ramdisk Via var. I can Control it if I running a ...
-
- If a CRL contains no certificates, a PHP error appears in the contents of the page...
-
- Applied in changeset commit:7c15c19d76eac725c42133012488cb97e4dcd885.
-
- If you remove LAN and then add it back, then run the Setup Wizard, a PHP error will result.
Removing the LAN remov... -
11:40 AM
Bug #8868: multiple php errors on update
- Upgrading to 2.4.4-RC from Sept 11, the php errors are still present.
https://netgate.slack.com/files/U32BGSZBP/FC...
09/11/2018
-
- A while ago I added a code on pfSense-upgrade to cleanup crash report when PHP major version changes. I couldn't repr...
-
- Steve Wheeler wrote:
> Still seeing one of those PHP warning updating to todays image:
>
> [...]
This one shou... -
- Still seeing one of those PHP warning updating to todays image:...
-
- For fix this issue maybe better not add IP at all if look to documentation: http://www.squid-cache.org/Versions/v3/3....
-
- Package Version:
squid www 0.4.43_1
Package Dependencies:
squid-3.5.27_3
cat /etc/version
2.4.3-RELEASE
c... -
03:20 PM Todo #8886 (Not a Bug): Update downloads page once hybrid iso/img installers are implemented
- Once hybrid iso/img installers are implemented, we can remove the ISO and just have the hybrid memstick option for t...
-
-
-
- Package Version:
haproxy-devel net 0.59_9
Package Dependencies:
haproxy-devel-1.8.13
cat /etc/version
2.4.... -
-
-
- Needs more thought/testing than we'll have time for to make 2.4.4. There are workarounds on the linked forum thread f...
-
- Applied in changeset commit:59c2e21d4f903ebaed3af861aeecab9b7e94d037.
-
07:53 AM Bug #8883: Default route order set in Routing not honored
- Though, as food for thought: ...
-
- Thanks for your time. I'll just keep the changes locally.
-
- It may appear to "work" for you but it is not a general fix that will work across all platforms, and may not behave c...
-
- I have created a fix (above) so clearly there can be something done in your code. The fix does not break current conf...
-
- Having two interfaces in the same subnet is not supported, nor is having two interfaces with the same gateway.
The... -
- I propose the following fix on /etc/int/system.inc line 755:...
-
- this is on amd64, by the way.
-
- I have two interfaces:
- xn0: 10.0.0.253, gateway 10.0.0.1 (WAN)
- xn1: 10.0.0.254, gateway 10.0.0.1 (WAN2)
If I... -
06:05 AM
Bug #8880: [PHP7] warning on system_gateways.php and extra item in gateways table
- Applied in changeset commit:a155dc5ec2278e0a344afa221127b8503d4e225e.
-
- Applied in changeset commit:885cf6a751f076f43fa89167ba2a79f779244f1b.
-
- Applied in changeset commit:b54a1af45c5add4e57253bfa0b562dadf3ae10f7.
09/10/2018
-
- I'm running pfsense in AWS and I'm trying to route out of xn1 (second interface) instead of xn0 (using it as a sync i...
-
02:01 PM
Bug #8880 (Feedback): [PHP7] warning on system_gateways.php and extra item in gateways table
-
- Configs for reproducing bug _only Netgate has access_ https://drive.google.com/file/d/1N8hgWGgN4ccwUB0ldBpjGQFZdRo96m...
-
- 244-RC...
-
01:21 PM
Bug #8815 (In Progress): IP addresses are removed from interfaces when link is lost and either IPv4 or IPv6 is dynamic
-
01:21 PM
Bug #8815: IP addresses are removed from interfaces when link is lost and either IPv4 or IPv6 is dynamic
-
12:51 PM pfSense Packages Bug #8139: LADVD not working on LAGG interfaces
- Based on the discussion in the repo (https://github.com/sspans/ladvd/issues/36), the FreeBSD port has been updated: h...
-
- This apparently fails despite previous reports of manual edits working. See
https://forum.netgate.com/post/788458
... -
04:37 AM pfSense Packages Feature #8232: different ssl options based on the sni name
- Hi Pi Ba,
looks like this patch not work with the most recent version of pfsense 2.4.3 P1. Can you check please?...
09/09/2018
-
- The creator of the LADVD package is saying this is likely fixed in his 1.1.2 implementation, and PFSense is still usi...
-
08:06 AM Bug #8527: VLANs losing parent interface on LAGG change
- I still saw this issue on 2.4.4.r.20180905.2249
09/08/2018
-
- Should have something up on Monday to try with gitsync at least, hopefully an RC as well.
-
- Okay thanks. So wait for a RC build now or gitsync to test.? Seems snapshots don't get updated a.t.m. .
-
- Created issue to track in official repo:
https://github.com/sspans/ladvd/issues/36
09/07/2018
-
- Yep I hit this one a couple of days ago, on whatever snap was latest as of 9/5
pkg goes braindead in some way if t... -
-
- Issue can be closed, already merged on GitHub
https://github.com/pfsense/FreeBSD-ports/commit/b7c4da7878f8da6169c5... -
- pfSense uses ISC DHCPD for DHCP, not dnsmasq. ISC DHCPD doesn't have a way to force an option in quite that same mann...
-
09:11 AM Feature #8879 (New): DHCP options ADD force options
- DHCP server offer the possiblilty to add DHCP options.
Maybe add for options the possibility to force the options (w... -
- I just pushed another bit of input validation to prevent VTI from being selected on mobile IPsec. That should hopeful...
09/06/2018
-
04:38 PM pfSense Packages Feature #8878 (Resolved): Propagate user's description field into QR code for FreeRADIUS
- Hi,
it is often desirable (esp. when you have more than one identity added in your Google Auth mobile app) to dist... -
- Yeah the mobile case is still a bit undefined. I can shut that down as well. I'm not sure that is feasible since VTI ...
-
- i could configure vti on a 'normal' site-to-site vpn so perhaps its just a 'user issue' :) if so then sorry for the n...
-
- Perhaps the issue was that i made my mobile-ipsec P2 use vti.. perhaps that does not actually make sense to do.?. it ...
-
- I haven't tried setting one up this way but if someone were to have incorrectly selected something like "LAN Network"...
-
- I can maybe see how some combination may lead to a loop here but I can't seem to make it happen on any of mine.
So... -
- Its about the vti and it looping around. see screenshot of a stacktrace.
-
- I suspect it would have done the same for any other additional interface you add there and VTI was a coincidence. May...
-
- agreed that the lines don't 'directly' point to vti.. however only when i enable 'that' interface its runs for a minu...
-
- That doesn't look like it would have anything to do with VTI. The lines you reference are quite different, one is a g...
-
- Enabling a vti OPT1 interface throws me the following errors after a minute while processing the 'apply' button.. lik...
-
- possibly related bug: https://redmine.pfsense.org/issues/8758
-
- Ok, I've done that. For anyone else who wants an easy way, I made a patch that you can add via System Patches:
https... -
- Waiting the next -RC build.
-
- Fixed the subject to be more general since this is covering more than just CSP at this point.
We had someone askin...
09/05/2018
-
09:26 PM Feature #4821: PPPoE WANs do not take full advantage of NIC driver queues for receiving traffic
- You were probably kidding, but my ISP will propose exactly this (40 gig) in 2-3 years ... at least that's the plan.
... -
- Fix committed, will be in snaps when they are running again.
-
- ...
-
12:15 PM Feature #6742: OAuth2 authentication for OpenVPN (and for FreeRadius)
- +1 on my side as well. We need this in order to properly implement VPN/IPSec/FreeRadius for our remote workers to int...
-
- Confirm option existing in GUI and in device config
!option.png!... -
12:56 AM Bug #8875 (Duplicate): Separator in DHCP Server
- Hi. Having a seperator in DHCP Server would be nice to allocate ip addresses like in Firewall Rules.
09/04/2018
-
09:43 PM Bug #6263: Encryption options for every P2 on a given P1 are written to each P2 individually inside ipsec.conf with multiple P2 entries + split conn entries
- PJ Goodwin wrote:
> Looked into this and the attached patch appears to fix the issue in 2.4.2. The comparable chang... -
02:44 PM
Bug #8806 (Resolved): HA sync : Starting captiveportal doesn't fire ipfw rules on slave, even if HA is enabled.
-
- Working correctly on the last snapshot
This issue can be marked as resolved. -
- Applied in changeset commit:7cab6335bb56d2ac372a195719be28c55b2cb252.
-
-
- It's unlikely that is the cause of your problem. Please keep this kind of guesswork/debugging on the forum until a sp...
-
02:38 PM Bug #8874 (Not a Bug): IPSEC Phase 2 Duplicated
- We detect some network issues between some sites. Look at IPSEC status, we can see some of our tunnels with Phase 2 d...
-
02:36 PM
pfSense Packages
Bug #8873 (Feedback): PHP7 warning in squidguard
- Fix pushed. 824d08577196346be0e7d24d925bf3338208bd89
also cherry-picked to 2.4.4 3c1f879caabe7f9059e0a0143689d2d0b3c... -
11:15 AM
pfSense Packages
Bug #8873 (Resolved): PHP7 warning in squidguard
- [02-Sep-2018 21:00:29 Etc/UTC] PHP Warning: Use of undefined constant GIF_BODY - assumed 'GIF_BODY' (this will throw...
-
02:31 PM
pfSense Packages
Bug #8872: PHP7 error in squid
- Cherry-picked to 2.4.4 as well d47455c16c985d3d98fea422855a0dc7bf78c657
-
02:28 PM
pfSense Packages
Bug #8872 (Feedback): PHP7 error in squid
- Fix Pushed 90c367bf2f2fcd61ed631bd3c4fd6634a253b5d6.
-
11:14 AM
pfSense Packages
Bug #8872 (Resolved): PHP7 error in squid
- [02-Sep-2018 21:45:02 Etc/UTC] PHP Fatal error: Uncaught Error: Call to undefined function split() in /usr/local/pkg...
-
- Luke Hamburg wrote:
> I have definitely hit this one - yes it is hard to reproduce. But, if I hit it again, is it wo... -
- I have definitely hit this one - yes it is hard to reproduce. But, if I hit it again, is it worth sending any sort of...
-
09:10 AM
Bug #8758: filterdns stops working on a regular basis.
- Currently unable to reproduce
-
01:31 PM Feature #8160: Accomodate both RADIUS and pool IP addresses in IPsec
- Implementation PR: https://github.com/pfsense/pfsense/pull/3976
-
-
- It works well on latest...
-
- Looks like this is PPPoE related issue. I do not see problem with fragmented IPv6 and logging on Ethernet IPv6 forwar...
-
- I've never been able to replicate that locally. It's going to be very difficult to test.
-
- Fixed...
-
- Applied in changeset commit:2eeeec06d7b8d719a8913c69095675a695305918.
-
-
02:51 AM pfSense Packages Bug #8871: Suricata: input not validated properly in suricata_rulesets.php results in wrong argument passed to in_array()
- Forgot to set Category -> Suricata.
Running b0703dcab3c(RELENG_2_4_4) (snapshot) with latest Suricata package availa... -
- Spotted this today:...
09/03/2018
-
- In some circumstances the dashboard can report that the system is on the latest version when in fact the pkg system i...
-
- Applied in changeset commit:7fead243f9e6238e0098ea2bdc3c992fa071efeb.
-
-
-
- It does load/parse them to check that they are valid so it can clean out invalid/broken configurations.
It's behav... -
01:36 AM Bug #8866: cleaning backup cache can take VERY long
- You were right as in i increased that setting. By a lot. We edit config quite often, so 30 backups wasn't feasible an...
09/02/2018
-
- It should not let you use a self-generated DH parameter file, but use the stock system DH parameter files which are f...
-
10:20 PM pfSense Packages Feature #8869 (New): HAproxy should use RFC 7919 DH parameter files
- It would be really nice to have a UI option to generate a custom DH parameter file for HAproxy to use.
The origina... -
- One is for DHCPv6, one is for PPPoE. They could be different problems, they could be the same problem, needs more res...
-
- Is this a dupe of #8136?
09/01/2018
-
03:57 PM Feature #8867: interfaces_vlan_edit.php does not display proper interface aliases
- Jim Pingle wrote:
> That is because VLANs are a child of the physical interface, not an assigned interface. The assi... -
- That is because VLANs are a child of the physical interface, not an assigned interface. The assignments and descripti...
-
- On /interfaces_vlan_edit.php (Interfaces>Assignments>VLANs>Add), when the parent interface drop-down list is clicked,...
-
-
01:11 PM
Todo #8860: Change status.php to use "ifconfig -va" for more detail
- On 2.4.4.a.20180831.2010, looks good.
Network-Intefaces shows module information for SFP+... -
- Installed Current Factory System: 2.4.3_1
Added packages: Squid, squidguard, lightsquid, pfblockerng, and Snort
... -
-
04:12 AM Bug #8859: VTI: Some third-party vendors require rightsubnet to have a mask for VTI, rather than address
- On Fri Aug 31 20:10:51 EDT 2018:
Created P2 with VTI remote network, then changed it to remote address - changes a... -
- By default it only keeps 30 backups. There is no way it would have as many files as you state without being manually ...
-
- Hi,
my pfSense is running on rather sparse CPU ressources (Atom N2800). Rebooting takes up to 30 minutes (actually c... -
05:47 AM
Bug #8857 (Resolved): PHP error when saving on vpn_ipsec_settings.php
-
- Reset sg2440 Fri Aug 31 20:10:51 EDT 2018 to factory and then opened vpn_ipsec_settings.php, clicked "save" - no erro...
08/31/2018
-
10:40 PM pfSense Docs Correction #8865 (Rejected): Feedback on Networking Concepts — IPv6 — IPv6 Subnetting
- *Page:* https://www.netgate.com/docs/pfsense/book/network/ipv6-subnets.html
*Feedback:*
IPv6 Subnet Table
IPv6 ... -
04:59 PM Bug #8864: SSH Guard Sensitivity/Whitelist on 2.4.4
- Sorry I meant to put 2.4.4.a.20180831.0830 in the topic after 'SSH Guard on 2.4.4.a.20180831.0830'
-
- I am running 2.4.4.a.20180831.0830 and noticed that my Icinga monitoring started to show issues with SSH. When I loo...
-
03:09 PM Bug #8863 (Resolved): amdtemp.ko module failed to load
- amdtemp.ko module failed to load with the following error message
KLD amdtemp.ko: depends on amdsmn - not availabl... -
-
- Yes, fsck fixed IPsec issue, now it works, thank you.
** Last Mounted on /
** Root file system
** Phase 1 - Chec... -
- Applied in changeset commit:b5a4633f9ffeb365aba1d8b451f3638b37452b23.
-
- I see some room for improvement in that area of the code, but that error appears to come from a disk issue.
Speaki... -
- on SG3100 Thu Aug 30 00:38:38 EDT 2018
Crash report begins. Anonymous machine information:
arm
11.2-RELEASE-p... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/interfaces/configure-ipv6.html
*Feedback:* Examples would be ni... -
- Repeated the same test with installed squid, bind packages - all good, no delay's in bootup.
-
- Looking at the output of @ifconfig -v@, there is more info we could be showing on status_interfaces.php.
At a mini... -
- Applied in changeset commit:836ee3aaca674a84dec47dce9a1183b98352ba4f.
-
- @ifconfig -v@ will return more info than the @ifconfig@ alone. For @ix(4)@ interfaces it will print information about...
-
- Applied in changeset commit:da54e84ae79328a87b4a319239bb1b14d7ed2ce6.
-
-
- Some equipment that supports VTI requires the remote address be set to a network and not the default address, or else...
-
- Applied in changeset commit:74e4543842c47efda37e3b078b8e5cc3f54ce9ba.
-
-
- Then code that cleans up deleted/disabled IPsec VTI interfaces can, with certain configurations, delete a valid inter...
-
- Applied in changeset commit:463b52b606d98b72cbaeb2f6d3c348689106c414.
-
-
- From a fresh install with no IPsec configuration, clicking Save on vpn_ipsec_settings.php gives a PHP error:...
-
05:36 AM
pfSense Packages
Bug #8790 (Resolved): getting PHP error regarding HAproxy pkg
-
02:08 AM pfSense Packages Bug #8790: getting PHP error regarding HAproxy pkg
- Hi!
All OK, thanks!
08/30/2018
-
09:53 PM
pfSense Packages
Bug #8829: Keep settings checkbox under Global Settings does not behave as expected
- On a fresh install of 2.4.4.a.20180830.1356, when snort 3.2.9.7_2 is installed the output is :...
-
09:30 PM
pfSense Packages
Bug #8829 (Resolved): Keep settings checkbox under Global Settings does not behave as expected
-
09:17 PM
pfSense Packages
Bug #8829: Keep settings checkbox under Global Settings does not behave as expected
- On version 3.2.9.7_2, installed suricata, configured some settings, unchecked the Keep settings checkbox, uninstalled...
-
11:37 AM
pfSense Packages
Bug #8829 (Feedback): Keep settings checkbox under Global Settings does not behave as expected
- This should now work as expected. c5d12ed2814f7ed5c002fb71fae6d992708bc4f9
Snort version 3.2.9.7_2 -
09:49 PM
pfSense Packages
Bug #8828 (Resolved): Keep settings checkbox under Global Settings does not behave as expected
-
09:49 PM
pfSense Packages
Bug #8828: Keep settings checkbox under Global Settings does not behave as expected
- On a fresh install of 2.4.4.a.20180830.1356, when suricata 4.0.13_8 is installed the output is :...
-
05:50 PM
pfSense Packages
Bug #8828: Keep settings checkbox under Global Settings does not behave as expected
- On version 4.0.13_8, installed suricata, configured some settings, unchecked the Keep settings checkbox, uninstalled ...
-
11:17 AM
pfSense Packages
Bug #8828 (Feedback): Keep settings checkbox under Global Settings does not behave as expected
-
11:17 AM
pfSense Packages
Bug #8828: Keep settings checkbox under Global Settings does not behave as expected
- I found that the code to remove the package forgot to use 'write_config()' after removing the Suricata configurations...
-
- This issues with haproxy should be fixed with current 0.59_11 version. If not please let me know the exact error you ...
-
- Should be fixed with current 0.59_11 version. If not please let me know the exact error you get and when that happens.
-
- Should be fixed with current 0.59_11 version. If not please let me know the exact error you get and when that happens.
-
09:39 AM
Bug #8767 (Resolved): ID handling problem with DNS Forwarder host override management
-
08:43 AM Feature #8855 (Rejected): View Description field on widget for OpenVPN
- Hi!!!
Its useful add on widget for OpenVpN, view the description field too , for get information about a user when c... -
-
- Applied in changeset commit:880107d21f5e69201ba810d553d948ca9009f70d.
-
- Looks like one line of the fix didn't make it into the final commit. Will push a correction momentarily after re-test...
-
-
- Gitsynced, retested - now looks good, no arpwatch duplicated processes
-
- OK to test again after a gitsync or an update to a snapshot which includes my last commit on #8850
-
- Looks like one line of my commit is missing, will push a correction momentarily. The package is OK, the problem is on...
-
- Yup, seeing the same on Wed Aug 29 19:26:24 EDT 2018 with pfSense-pkg-arpwatch-0.1.1:
root 37039 0.0 0.3 ... -
-
-
- On factory 2.4.4.a.20180830.0038, SG-3100
Click System -> Cert. Manager, CAs
Default selection is 'Create an i...
08/29/2018
-
11:33 PM
Bug #8726: Lack of input validation on custom GUI/dashboard settings leads to potential XSS
- On 2.4.4.a.20180829.1926, tried a XSS injection example as the dashboardcolumns value in the pfSense config.xml, relo...
-
11:16 PM
Bug #8845 (Resolved): Recompile PHP with a larger value of FD_SETSIZE.
-
11:15 PM
Bug #8845: Recompile PHP with a larger value of FD_SETSIZE.
- On 2.4.4.a.20180829.1926, ...
-
08:43 PM pfSense Packages Bug #7661: pfBlockerNG doesn't make a rule for Antarctica
- I just tried the latest pfBlockerNG and the is has NOT been resolved!
Please re-open the bug.
-
08:25 PM
pfSense Packages
Bug #8620: arpwatch database page is not accessible
- On 2.4.4.a.20180829.1926 (gitsync'd to master) with arpwatch version 0.1.1,
Seeing one instance of arpwatch for ea... -
- Should be improved by https://github.com/pfsense/FreeBSD-ports/commit/aa78e490fe92d5640a742bbe77012a5ba626b084 but th...
-
07:45 PM
Todo #8851: Change default CA/Cert action to "Create an internal..."
- On 2.4.4.a.20180829.1429 (gitsync'd to master), looks good. Create CA/Cert is the default behavior now.
-
- Applied in changeset commit:b0a5c280a407ac26af2e6f055ac1049304034672.
-
- When the certificate manager was first created, the most common user action was to import and not create. We are long...
-
- *Page:* https://docs.netgate.com/pfsense/en/latest/network/broadcast-domains.html
*Feedback:* The section tells w... -
- *Page:* https://www.netgate.com/docs/pfsense/book/monitoring/firewall-states-gui.html
*Feedback:* What does 0:0 me... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/services/dhcp/ipv4.html
*Feedback:* I am unclear about "Client ... -
03:23 PM Bug #8518: Rule Error On Upgrade 2.4.3 -> 2.4.3-p1
- Steffen Wagner wrote:
> the above commands fixed it for me as well. An official patch for p1 would be good!
Can y... -
03:03 PM
Bug #8767: ID handling problem with DNS Forwarder host override management
- Fixed the illegal string offset error described above. bc91bdffcefd009f4716cce59eab231c2245fb18
I did not notice a... -
02:58 PM
Bug #8850 (Resolved): Packages that start on sync are started multiple times at boot
- Tested with arpwatch installing fresh, configuring and multiple reboots
-
- For an example of the change to make on packages, see https://github.com/pfsense/FreeBSD-ports/commit/aa78e490fe92d56...
-
- Applied in changeset commit:5d4f49000654fae594144abc36fe8a588a028510.
-
-
- When @/etc/rc.start_packages@ is run, for example at boot time, it performs a package sync with @sync_package()@ and ...
-
11:40 AM Feature #8849 (Duplicate): DHCP Custom configuration
- I would suggest a field so we can use additional settings. There is the possibility of making several subnet with use...
-
- The description and behavior are correct for POSIX style zones. See note 9 above. The "Etc/GMT+4" zone means 4 hours ...
-
09:34 AM Bug #7089: Opposite of + or - is occurring when selecting time zone
- Although the description tells how it works, the GMTs are wrong.
The correct GMTs are "+" (before GMT) and "-" (af... -
09:40 AM
Bug #8138 (Resolved): Option <spoofmac> is ignored on interfaces without hwaddr
- Tested on a VM with CE:
2.4.4-DEVELOPMENT (amd64)
built on Wed Aug 29 00:38:57 EDT 2018
FreeBSD 11.2-RELEASE-p2
... -
- Although the description tells how it works, the GMT's on web interface are wrong.
The correct GMTs are "+" (befor... -
- The descriptions of the zones make this very clear, they explain the behavior and whether or not they are ahead of or...
-
- On System > General Setup, timezones GMT[+-]X are reversed.
If set GMT-4 on web interface, it apllies GMT+4 on sys... -
- I check this Bug on old 2.4.4.a.20180801.0114: DNS from /VPN/IPsec/Mobile Clients menu was set up into '/var/etc/ipse...
-
- Greg M wrote:
> I am on:
> 2.4.4-DEVELOPMENT (amd64)
> built on Wed Aug 29 00:38:57 EDT 2018
> FreeBSD 11.2-RELEA... -
- I am on:
2.4.4-DEVELOPMENT (amd64)
built on Wed Aug 29 00:38:57 EDT 2018
FreeBSD 11.2-RELEASE-p2
The system is ... -
- Greg M wrote:
> Hi!
>
> Installed, when I open it:
>
> Fatal error: Uncaught Error: Call to undefined function... -
- Hi!
Installed, when I open it:
Fatal error: Uncaught Error: Call to undefined function pfsense_pkg\acme\getarra... -
- Same here.
Haproxy is not installed after this error and services are down.
08/28/2018
-
09:55 PM pfSense Packages Bug #8620: arpwatch database page is not accessible
- I'm interested in a fix for this as well. On 2.4.3-p1 I have the same issues -- multiple emails and nothing in the da...
-
05:45 PM Bug #8847 (Resolved): IPsec status "Show Child SA entries" button only expands and never collapses
- I am using version 2.4.4, I noticed that in ipsec status when clicking (+) Show child SA entries is shown the details...
-
05:29 PM Feature #2358: NAT64 support
- Another upvote. At some point in the future we're going to start having needs for v6-only networks. For some of the...
-
04:51 PM
Bug #8837 (Resolved): PHP error when creating alias URL Table (IPs)
-
04:26 PM Bug #8837: PHP error when creating alias URL Table (IPs)
- This commit seems to have solved the issue.
-
03:35 PM
Bug #8837: PHP error when creating alias URL Table (IPs)
- The `[] operator not supported` error should be fixed in the next snap.
0a906fcc2e120e7dd290ce7faac1ba14a24f731b -
03:55 PM
Bug #8683 (Resolved): Unable to add GIF interface (Hurricane Electric IPv6)
- Tested on 2.4.4-DEVELOPMENT (amd64)
built on Tue Aug 28 08:43:43 EDT 2018
FreeBSD 11.2-RELEASE-p2
Was able to... -
- Result for @gre@ also looks good.
-
08:52 AM
Bug #8683: Unable to add GIF interface (Hurricane Electric IPv6)
- ...
-
03:22 PM
Bug #8824 (Resolved): is_numeric() on PHP 7 no longer validates hexadecimal values
- Tested on: 2.4.4-DEVELOPMENT (amd64)
built on Tue Aug 28 08:43:43 EDT 2018
FreeBSD 11.2-RELEASE-p2
Haven't ... -
03:12 PM
Bug #8823 (Resolved): Dashboard Crash
- Tested on 2.4.4-DEVELOPMENT (amd64)
built on Tue Aug 28 08:43:43 EDT 2018
FreeBSD 11.2-RELEASE-p2
No crashes ... -
- PR merged, should be ready for testing shortly
-
- As long as it doesn't lead to an XSS it should be OK. Try using a typical XSS injection string and then going to a pa...
-
02:43 PM
Bug #8726: Lack of input validation on custom GUI/dashboard settings leads to potential XSS
- Tested the above inputs webguicss, webguifixedmenu, webguihostnamemenu, and dashboardcolumns. and was not able to use...
-
- Applied in changeset commit:4f03ad7a36b6c2f9060f059f167a491b06739acf.
-
-
- Crash report begins. Anonymous machine information:
amd64
11.2-RELEASE-p2
FreeBSD 11.2-RELEASE-p2 #72 9d6b703bf... -
- In order to be able to install any of the PHP72 related packages you must upgrade to a PHP 7.2 based 2.4.4 snapshot.
-
- Your right. On our side we have our own IPs and BGP with FRR. But our Customers have only one IP from each ISP. Not i...
-
- With 2.4.4 you can use routed IPsec and a routing protocol like OSPF or BGP to accomplish failover. You can build an ...
-
- Cloud is needed more and there is a reliable VPN connection very important. For this case a quick switch on failure i...
-
- All of my hosts that had issues before appear to be OK when upgrading from snaps from early yesterday to the latest a...
-
-
- Jim Pingle wrote:
> I had this happen on my edge firewall which is running a snapshot from earlier this week. The pf... -
-
-
-
- @jimp you can close this
-
04:47 AM Bug #8846 (Resolved): Misleading error message when adding/editing static routes which use a gateway on a disabled interface
- I was adding static route on disabled interface and got the following message:...
-
01:00 AM Feature #8173: dhcp6c - RAW Options
- The improvement request https://redmine.pfsense.org/issues/8173 is essential for IPv6 authentication for Orange (Fran...
08/27/2018
-
- https://www.reddit.com/r/PFSENSE/comments/9a9o8k/php_pfblockerng_related_crashing_in_244development/e4trgk9/
https... -
- Version: pfBlockerNG-devel 2.2.5_10
When enabling GeoIP the selection goes back to 'disabled'.
Firewall -> pfB... -
06:14 PM
Bug #8838 (Resolved): PHP warning when creating an OpenVPN client with invalid setting
-
06:14 PM
Bug #8838: PHP warning when creating an OpenVPN client with invalid setting
- On 2.4.4.a.20180827.1735, cannot reproduce.
-
06:50 AM
Bug #8838: PHP warning when creating an OpenVPN client with invalid setting
- Applied in changeset commit:ce04950d94bab271a9904a8bd8cbbe40d7a7d718.
-
06:43 AM
Bug #8838 (Feedback): PHP warning when creating an OpenVPN client with invalid setting
-
- Sounds good!
-
- It is at https://github.com/pfsense/FreeBSD-ports/blob/devel/net/filterdns/files/filterdns.c but Renato is already lo...
-
- Agree it's less than ideal. But until a proper fix can be found a kludge might be safer than nothing, since aliases n...
-
- That's a rather ugly hack/kludge and it would be better to find out why it's failing and fix it directly.
-
- Hmm. In that case, how about we add some tests to the alias edit php functions to query pfctl directly after a save a...
-
- That is a possible side effect. You can kill the @filterdns@ daemon and then trigger a filter reload from *Status > F...
-
- Would this affect IP alias lists getting "stuck" and not updating? I ran into this last week - editing an Alias, adde...
-
01:47 PM
Bug #8758: filterdns stops working on a regular basis.
-
- I had several hitting this in my lab but only just now getting them onto snaps which included the latest fix. Let's g...
-
-
- Not seen any update issues for a few snaps now on a number of boxes.
-
01:27 PM
Bug #8683 (Feedback): Unable to add GIF interface (Hurricane Electric IPv6)
-
- Steve is working on this one
-
- Even if they were encrypted before being put in there, they are still in plain text in @config.xml@. If you don't lik...
-
10:49 AM Bug #7547: Static routes using aliases are not automatically updated when alias content changes
Also, when you delete a subnet from the alias editing and saving the static alias route doesn't remove the route.
...-
- "Bogus" is a closed/resolved status. It's already been dealt with.
-
- Is there any action from Netgate team requested here?
Can this ticket be marked as resolved? -
- TRIPLE UPVOTE!
-
-
- Well, what you are describing is a VLAN-Based captive portal.
There are two kinds of Captive portals in the world:... -
- Looks like this affects all pkgs I got PHP crashes and errors for any pkg install process. Pkgs were installed proper...
-
- Uninstall finished well, but there were some errors during the process, see attachment.
-
- I tried to install pfSense-pkg-aws-wizard-php72 for 244 factory built on Wed May 30 14:47:02 EDT 2018 FreeBSD 11.2-BE...
-
07:41 AM Feature #8841: Floating rules : add interface column
- Indeed it has limitations.
Maybe this could be an on/off feature letting people liberty to activate it depending on... -
- This is not entirely feasible because the floating rule could apply to dozens of interfaces and trying to print them ...
-
- To allow an easier management of floating rules : add the colum inyertrface in the floating rules tab.
For now, AFAI... -
- Create a new button on firewall rules tab allowing to copy multiple firewall rules from one interface to another :
... -
- Duplicate of #8832
-
06:31 AM pfSense Packages Bug #8839 (Duplicate): 2.4.4 Squid/ClamAV C-ICAP 0.5.x not starting
- Workaround:
https://forum.netgate.com/topic/133774/2-4-x-squid-clamav-fix-for-c-icap-0-5-x-not-starting -
- See also: https://forum.netgate.com/topic/133774/2-4-x-squid-clamav-fix-for-c-icap-0-5-x-not-starting
-
- On 2.4.4.a.20180801.0114 when I installed HAproxy I caught the same crash report.
But on 2.4.4.a.20180826.1232 whe... -
- Hello,
view patch https://github.com/opnsense/dhcp6c
his is the WIDE-DHCPv6 client maintained by the OPNsense... -
- I tried to reproduce this issue on 2.4.2:
- I added more then 120 DNS Forwarder host overrides
- I didn't see issue...
08/26/2018
-
11:58 PM
Bug #8519: pfSense update from the webGUI fails
- Can't reproduce in VM from 2.4.3 CE to 2.4.3_1, or 2.4.3_1 to 2.4.4 latest snapshot. Is there a specific device, desi...
-
11:00 PM
Bug #8838 (Resolved): PHP warning when creating an OpenVPN client with invalid setting
- On a recent 2.4.4 snapshot visit VPN > OpenVPN > Client > Add, change Server mode to "Peer to Peer ( Shared Key )" an...
-
- I applied the changes, and I'm still receiving the following PHP error. It looks like the fix got rid of the count() ...
-
11:35 AM
Bug #8837: PHP error when creating alias URL Table (IPs)
- Applied in changeset commit:d6d46650d207cf0d37a2551a8a73a83aaf804672.
-
11:31 AM
Bug #8837 (Feedback): PHP error when creating alias URL Table (IPs)
-
11:30 AM
Bug #8837 (In Progress): PHP error when creating alias URL Table (IPs)
-
- I was trying to follow the procedure described here to create a Netflix ipv6 alias.
https://forum.netgate.com/topi... -
- On current 2.4.4-DEV (20180825) I'm able to see "X-Forwarded-For" option when remote client behind proxy connects to ...
-
07:53 AM pfSense Packages Feature #8836 (New): Define ldap group vlan assignment in users file
- There should be a solution to configure vlan-id's for ldap groups.
Something like this: http://lists.freeradius.or... -
- If a user is created in the FreeRadius GUI the password is stored as cleartext in "/usr/local/etc/raddb/users".
Th... -
- I checked on 2.4.3_p1 - I saw HTTP_REFERER check fails after changing interface IP address
Then I checked it on 2.4....
08/25/2018
-
09:38 PM Feature #6626: Support for IPv6 firewall entries with dynamic delegated prefix and static host address
- Same issue as Frederick described - I can't seem to be able to effectively block inter-vlan traffic for IPv6 as the a...
-
05:53 PM
Feature #1337: VLANs with different MAC address than parent interface
- James Dekker [6:49 PM]
With SG-5100 and XG-2758 on `2.4.4.a.20180824.1144` (which isn't the *latest* build, but shou... -
03:32 PM
Bug #8834 (Resolved): NAT > NPt address fields do not match the hover text
-
03:32 PM
Bug #8834: NAT > NPt address fields do not match the hover text
- On 2.4.4.a.20180825.0917 (gitsync'd to master) looks good. Hover text accurately reflects the description (shown in t...
-
- Applied in changeset commit:c1004c847324888fff7252607384f7f39926e815.
-
03:08 PM
Bug #8834 (Resolved): NAT > NPt address fields do not match the hover text
- Visit Firewall > NAT > NPt, click add, hover over each Address field.
Notice that the first Address field descri... -
02:58 PM
Feature #8812 (Resolved): Add "Select All" to Firewall/NAT rule lists
-
02:58 PM
Feature #8812: Add "Select All" to Firewall/NAT rule lists
- Select all works as expected on Firewall > NAT > Port Forward/1:1/Outbound/NPt and at Firewall > Rules on 2.4.4.a.201...
-
08:16 AM
Feature #8812 (Feedback): Add "Select All" to Firewall/NAT rule lists
- Rule table given ID so selectall control can find it
-
-
- The control is now present on NAT rules but does not seem to actually function. Clicking 'select all' does not select...
-
- Went to Suricata, went to SID management, Enable Automatic SID State Management, no error displayed
Current Base Sy... -
- tested on image 2.4.4.a.20180825.0917 this is no longer happening,
Using the OpenVPN wizard as described in this i... -
02:05 PM
Bug #7425 (Resolved): dhclient not sending option 77
-
02:04 PM
Bug #7425: dhclient not sending option 77
- On 2.4.4.a.20180824.1144, DHCP option 77 (user-class) is sent successfully.
-
11:19 AM
Bug #8816 (Resolved): User login does not record the authentication source
-
11:18 AM
Bug #8816: User login does not record the authentication source
- On 2.4.4.a.20180825.0917, when the user logs in, the dashboard and console indicate the IP of the user logging in and...
-
10:38 AM Feature #4821: PPPoE WANs do not take full advantage of NIC driver queues for receiving traffic
- As i understood from Intel specification on various chipsets, non-ip traffic like pppoe can't be hashed for RSS to wo...
-
- fix kinda pending.. but discussion raised is delaying it being pulled.
https://github.com/pfsense/FreeBSD-ports/pull... -
- On update to latest snapshot HA Proxy service fails to start.
Fatal error: Cannot redeclare getarraybyref() (previ... -
- Looks good to me in:...
08/24/2018
-
- This will be fixed in the next pfBlockerNG-devel v2.2.5_11 once its merged.
https://github.com/pfsense/FreeBSD-por... -
07:30 PM pfSense Packages Bug #8832 (Resolved): c-icap for Squid 5.1 on 2.4.4 Developer not starting
- See: https://forum.netgate.com/topic/133774/2-4-x-squid-clamav-fix-for-c-icap-0-5-x-not-starting.
Verified his fix w... -
06:07 PM Bug #8831 (Closed): Radvd causes latency spikes
- As already mentioned in this thread https://forum.netgate.com/topic/123554/new-latency-every-30-seconds-with-2-4-2-ca...
-
05:59 PM
pfSense Packages
Bug #8830 (Resolved): Automatic flowbit resolution setting does not match description
- On 2.4.4.a.20180824.1624, install snort (version 3.2.9.7_1), visit Global Settings, enable some rulesets, visit Updat...
-
-
- Tested on ARM and x86. Looks good, Suricata running correctly after reboot.
pfSense-base: 2.4.4.a.20180823.1619 ->... -
04:06 PM pfSense Packages Bug #8716: Suricata package does not survive pfSense upgrade.
- I have done upgrade at SG-3100 to 2.4.4.a.20180824.1144 base system. Suricata has survived.
-
04:23 PM
pfSense Packages
Bug #8829 (Resolved): Keep settings checkbox under Global Settings does not behave as expected
- On 2.4.4.a.20180824.0955, install Snort, visit Services > Snort. Go to the Global Settings tab, enable some rulesets,...
-
04:16 PM
pfSense Packages
Bug #8828 (Resolved): Keep settings checkbox under Global Settings does not behave as expected
- On 2.4.4.a.20180824.0955, install Suricata, visit Services > Suricata. Go to the Global Settings tab, enable some rul...
-
04:01 PM
pfSense Packages
Bug #8799 (Resolved): Automatic flowbit resolution setting does not match description
-
04:01 PM
pfSense Packages
Bug #8799: Automatic flowbit resolution setting does not match description
- On suricata 4.0.13_17, works as expected.
-
-
-
-
- This also affects GRE interfaces
-
- Squid running in bump mode. Though that should not affect this.
When configuring Common or Group ACLs or applying ... -
06:02 AM
Bug #8826 (Closed): PHP7: ACB error at upgrade.
-
- ix driver seems to be affected also :
dev.ix.0.queue1.rx_packets: 67
dev.ix.0.queue1.tx_packets: 4107155
dev.ix....
08/23/2018
-
-
- Working fine for me with vouchers & with Authentication Server
This issue can be marked as resolved ! -
- PR merged
-
-
- @jimP this can be closed
-
-
- https://github.com/pfsense/pfsense/pull/3640 fixes this
This issue can be marked as resolved -
- We probably need to test this across an upgrade where the suricata package version doesn't change to be sure.
-
-
-
- Added a call to ldconfig start on suricata startup script. It should be enough to make sure libraries cache will be u...
-
- That's already been fixed but the fix didn't make it into a factory snapshot until after the image you're on. Next on...
-
- Upgrading pfSense-kernel-pfSense-SG-3100 from 2.4.4.a.20180822.1157 to 2.4.4.a.20180823.1533...
-
04:34 PM pfSense Packages Bug #8251: Captiveportal + FreeRadius "Last activity" resets to Session start
- Thanks for the reply Augustin.
I'm still having this issue, perhaps I will try your idea when I upgrade the next tim... -
- This issue is likely comming from the way pfSense and FreeRadius are talking to each other when performing accounting...
-
04:30 PM pfSense Packages Bug #8825 (Resolved): Unable to activate any of the GeoIP blocking lists - keeps getting reset to disabled with PHP errors
- pfSense version 2.4.4.a.20180822.1157
pfBlockerNG-Deve version 2.2.5_10
Attempting to enable *any* of the GeoIP c... -
02:32 PM
pfSense Packages
Bug #8797 (Resolved): Visiting Flow/Stream causes a php error to be be shown
- Confirmed, looks good in latest suricata package version.
-
- I have tested this issue at SG-4860 | 2.4.4.a.20180823.0720 base system. I can confirm that php warning doesn't appea...
-
02:29 PM
pfSense Packages
Bug #8798 (Resolved): Visiting App Parsers causes a php error to be be shown
-
02:28 PM
pfSense Packages
Bug #8798: Visiting App Parsers causes a php error to be be shown
- Looks good in the latest version of suricata.
-
- Applied in changeset commit:2c1d7c12fa4f41a69d6c9267a34b1b767a1da522.
-
-
-
-
01:51 PM
pfSense Packages
Bug #8799 (Feedback): Automatic flowbit resolution setting does not match description
- This should be fixed now. 53261ab40f32f234e3432e15f5633f149b36863d
Version 4.0.13_7 -
01:08 PM
pfSense Packages
Bug #8799 (In Progress): Automatic flowbit resolution setting does not match description
-
12:42 PM
pfSense Packages
Bug #8799: Automatic flowbit resolution setting does not match description
- On a fresh install of pfSense-CE-memstick-2.4.4-DEVELOPMENT-amd64-20180823-0720, install suricata (version 4.0.13_5),...
-
01:27 PM
Bug #8800 (Resolved): Interface group member cannot be deleted, after it's been disabled
-
01:27 PM
Bug #8800: Interface group member cannot be deleted, after it's been disabled
- On 2.4.4.a.20180823.0720, the disabled interface is still shown in the interface group, rather than removed.
-
- @ssbarnea@ please resubmit your PR to the master branch
-
10:29 AM pfSense Packages Bug #8620: arpwatch database page is not accessible
- Its been two months now.. are there any news?
-
09:01 AM
pfSense Packages
Bug #8795: PHP issues - illegal string; undef modules; init modules
- Yes it does. Most of the work that is specific to 2.4.4, particularly accommodating PHP7, has been added to the -deve...
-
08:58 AM pfSense Packages Bug #8795: PHP issues - illegal string; undef modules; init modules
- pfB still shows latest as 2.1.4_8?
maybe your update hasn't pushed to be visible yet.
does pfB-devel work witho...
Also available in: Atom