Activity
From 09/07/2018 to 10/06/2018
10/06/2018
-
09:07 PM Bug #9022 (Not a Bug): Policy Routing an Exception to an IPsec Tunnel Drops Reply Traffic
- Not a bug. You can't policy route around IPsec in tunnel mode. The stack will drop replies because they didn't come v...
-
08:53 PM Bug #9022: Policy Routing an Exception to an IPsec Tunnel Drops Reply Traffic
- -If the IPsec tunnel is disabled on site B, pings instantly start flowing. Enable and reconnect it, they stop again.-...
-
- Site A
Tunnel Local 172.25.234.0/24 Remote 192.168.223.0/24
Site B
Tunnel Local 192.168.223.0/24 Remote 172.25.2... -
02:24 PM pfSense Packages Bug #9020: Impossible to register ACME wildcard certificate regardless documentation
- Jim Pingle wrote:
> You have some kind of configuration error. I tried it again exactly as stated on the page and it... -
- You have some kind of configuration error. I tried it again exactly as stated on the page and it works.
-
- Documentation at https://www.netgate.com/docs/pfsense/certificates/acme-wildcard.html states what needs to be done to...
-
02:21 PM Bug #7609: NTP Status not parsing all NTP Access Restrictions preventing status display when it is actually allowed
- I would also add to not confuse or mix both issue. One was due PHP reading ACLs permissions but no setting them up fo...
-
01:27 PM Bug #9021 (Closed): FreeBSD 11.2 fails to boot on Celeron J1900
- Did not see anything in recent issues covering this. Apologize in advance if duplicate.
On some systems, FreeBSD ... -
01:07 PM Bug #8973: Traffic not going to Limiter queues
- Tried to set a very hard limit on my DownloadLimiter and seems to be shaping properly. Tested with testmy.net
-
- This is only about the icon on the button on the key registration page, and it is working properly now.
-
- This is so true, the UI always gives the "green" response regardless what catastrophic failure occurred, confusing us...
-
- #1 Seems to be OK but could use more confirmation. Traffic from the firewall itself still leaves via WAN as expected....
-
- Due to a problem with FreeBSD 11.2, Hyper-V NICs can't send IPv6 UDP traffic when transmit checksums are enabled.
... -
- Policy routing is working fine here. Most likely you have a problem with your configuration or rules. Please post on ...
-
-
03:12 AM pfSense Packages Bug #8989: [Freeradius] not starting radiusd -X | Errors reading /usr/local/etc/raddb/dictionary: dict_init: /usr/local/etc/raddb/dictionary[6] invalid entry
- Seems good to me. It can be marked as resolved
-
-
- Seems good to me now. It can be marked as resolved
-
- Something is running your system out of RAM. There is not enough detail here to say what, if anything, is to blame.
... -
05:34 AM Bug #9018 (Rejected): swap_pager_getswapspace(): failed
- dns resolver filed , when i locked to console i found this message
swap_pager_getswapspace(1): failed
swap_page... -
07:10 AM Revision df99d3bf: Include zone name in Nas-Identifier
-
- - Logout popup is disabled and no custom logout page is set
- Logout popup is enabled and logout_id is missing -
06:12 AM Bug #8954: hn0: driver does not support altq
- This bug was also before, see isue #7869
https://redmine.pfsense.org/issues/7869#change-38548
-
05:26 AM Bug #8954: hn0: driver does not support altq
- Having exactly the same issue. Fresh install of pfSense under Hyper-V on 2012R2.
-
- I haven't upgraded yet. I think you should open a new bug report.
-
- The reason this field was removed was to standardize how RADIUS authentication was done in each pfSense module. OpenV...
-
- This bug only affects the logout popup and not custom logout pages. I committed a fix: https://github.com/pfsense/pfs...
10/05/2018
-
10:14 PM Bug #9017 (Not a Bug): Policy based Routing is not working
- I have following setup on my firewall.
2 internet gateways
WGW1 and WGW2
2 Vlans
Vlan 10 and Vlan 20
Created ... -
- As of ntp-4.2.6p5, it seems to require 'restrict -4 default' or to use 'restrict localhost' in ACL, what worked for m...
-
07:00 PM Feature #9016 (Rejected): Ability to create vpn user groups
- With a variety of other firewall and vpn solutions, the user is given the ability to create groups of users and gover...
-
- After further testing this appeared to be functioning as expected.
-
06:06 PM
Bug #9015 (Closed): Default gateway doesn't switch as expected
-
05:19 PM Bug #9015 (Closed): Default gateway doesn't switch as expected
- After selecting Gateway Group (WANGW2 tier1 - WANGW1 tier2) under *System/Routing/Gateways* - *Default gateway sectio...
-
- Tried to replicate the issue in 2.4.4-RELEASE.
Under logs, I was getting only "Keep current gateway, its already ... -
- Tested restoring the original problematic config.xml. It did restore successfully but there was no rrddata in the res...
- 03:35 PM Revision dd8a6d75: Added #8976 Allow traffic graph settings to be saved
-
- Can't duplicate this here. Packages install and uninstall fine. Please post on the forum to discuss and diagnose the ...
-
02:12 PM Bug #9014 (Not a Bug): Unable to uninstall any Package via System -> Package Manager
- Trying to Uninstall any package via in the Package Manager hangs at "Please wait while the update system initializes"
-
01:46 PM
Bug #8452 (Closed): PPPoE :: Interfaces > WAN: [PPPoE Configuration] Service name :: colon not allowed (invalid character)
-
-
01:29 PM Bug #8452: PPPoE :: Interfaces > WAN: [PPPoE Configuration] Service name :: colon not allowed (invalid character)
- This issue can be closed as this has been resolved. Please see bug 9002. Thank you.
-
01:17 PM Feature #8976 (Resolved): Status -> Traffic Graph, provide SAVE button for graph settings.
-
12:40 PM Feature #8976: Status -> Traffic Graph, provide SAVE button for graph settings.
- Very Cool! I just tried it out and it works great!
Thank you so much for implementing this feature, I really appre... -
12:20 PM
Feature #8976 (Feedback): Status -> Traffic Graph, provide SAVE button for graph settings.
- Changes added. Commit hash: dd8a6d75e7a7cadc9a182c0306e8d04799a63338
It should now be able to save your settings to ... -
- This was fixed days ago. Update to the latest version of that package.
-
12:24 PM pfSense Packages Bug #9013 (Resolved): pfSense Crash: AVAHI_RCFILE undefined constant
- [04-Oct-2018 04:31:18 America/New_York] PHP Warning: Use of undefined constant AVAHI_RCFILE - assumed 'AVAHI_RCFILE'...
-
- Works now
-
11:25 AM pfSense Packages Bug #9012 (New): Captive Portal authentication in Squid Proxy Server does not work
- Version pfsense 2.4.4-RELEASE (amd64)
I have configured Authentication Method to "Captive Portal" in Squid Proxy Ser... -
-
- The attached patch adds @0.0.0.0/0@ to @rightsubnet@ and @leftsubnet@ which may make some third party devices happy, ...
-
-
12:09 AM Bug #9009: Cannot create Schedule
- pat lechriss wrote:
> Hello, when attempting to add a shedule i always get this php errors. Thx
>
>
> Crash rep... -
- There is no bug here that I can reproduce. I install snort, it's in the menu.
If there is a problem, it is specifi... -
02:38 AM Bug #9011 (Not a Bug): Snort not showing in menu
- Hi
I have an HA setup and on the secondary netgate XG-2758 the snort menu button is not showing after installation... -
-
12:01 AM Bug #9006: Using umlauts in client specific overrides common names field causes restore of old config backup
- verified. Works. thank you!
-
05:29 AM Bug #8998: All Captive Portal zones send only "CaptivePortal" as NAS Identifier
- We also need to get a unique NASID. Please fix this bug. Any solution will suit.
-
04:02 AM Bug #9010: Captive Portal Unable to logout
- Ming-Chang Cheng wrote:
> Version pfsense 2.4.4-RELEASE (amd64)
> I have configured captive portal with radius serv... -
01:51 AM Bug #9010 (Resolved): Captive Portal Unable to logout
- Version pfsense 2.4.4-RELEASE (amd64)
I have configured captive portal with radius server. Enabled "Logout popup win...
10/04/2018
-
08:58 PM Bug #8954: hn0: driver does not support altq
- Windows 10 Pro w/latest updates + Hyper-V.
2.4.3 was/is flawless. Upgraded to 2.4.4 and got this error and can't use... -
- (cherry picked from commit 4c3669ea8a9acf4657cd84e0ae22fb8809302756)
-
-
- (cherry picked from commit 7a97d81d81afa7ea86c8ad79bff8e203bc9457a4)
-
-
- Applied in changeset commit:4c3669ea8a9acf4657cd84e0ae22fb8809302756.
-
- Hello, when attempting to add a shedule i always get this php errors. Thx
Crash report begins. Anonymous machin... - 03:47 PM Revision 8b6aae09: Review fix.
- 03:45 PM Revision 0aa2f5f0: Review fixes.
-
- (cherry picked from commit 6e150fc0d022d231c7dc243ba68f4784f58973d5)
-
-
02:28 PM
Bug #8999: Nat rules do not work in pfsense 2.4.4 on hypervisor xen
- Chris Linstruth wrote:
> Right. And NAT works just fine on 2.4.4 on AWS. Please take this discussion to the pfSense ... -
02:11 PM
Feature #8976: Status -> Traffic Graph, provide SAVE button for graph settings.
-
10:27 AM
Feature #8976 (Assigned): Status -> Traffic Graph, provide SAVE button for graph settings.
- A possible temporary workaround if you haven't tried it already. There is a traffic graphs widget that allows for sav...
-
01:33 PM Bug #8938: Installation of a package that depends on php72 on a version of pfSense older than 2.4.4-RELEASE breaks the pfSense install
- I wonder why 2.4.3 wasnt included in the exclusion list? Unfortunately, now my home router is ruined because of updat...
- 01:22 PM Revision 245bfa55: Disable display of Diagnostics->AutoConfigBackup menu item if config is restored from pfSense < 2.4.4
- Fixed #8959
- 01:02 PM Revision e7299fd8: Add top buttons if table > 24 rows
- 12:51 PM Revision 1d835d94: Enable setting AllowAgentForwarding value
- Fixes #8590
Signed-off-by: Sorin Sbarnea <ssbarnea@redhat.com> - 12:40 PM Revision 84dc4a55: Fix German translation error. Also fixed in Zanata
- 12:24 PM Revision dac4cd09: Fixed #9002 - PPPoE Service Name may contain ':'
-
12:20 PM Revision 75444abd: Add Zabbix4 config options
-
- https://github.com/pfsense/pfsense/pull/3995
https://github.com/pfsense/FreeBSD-ports/pull/580 -
What's new in Zabbix 4.0.0:
https://www.zabbix.com/documentation/4.0/manual/introduction/whatsnew400-
- Applied in changeset commit:7a97d81d81afa7ea86c8ad79bff8e203bc9457a4.
-
-
- Clicking VPN -> OpenVPN -> Servers
selecting: CSC Overrides
add new client and set as Common Name a word with u... -
- Not a known issue I'm aware of but probably not difficult to solve in a future release. Open a new issue with the spe...
-
- Too bad. Pfsense has problems with common names containing umlauts (ö ä ü) this way. Is this a known problem and work...
-
- Sir, you're awesome! This is exactly what i was looking for! ;) You deserve a cookie!
thank you very much! -
- You can still do that by making an override named @DEFAULT@ with blocking checked, and then define overrides for the ...
-
- Your overwrite idea is generally good, but a blacklisting makes no sense in this case. Only whitelisting is secure. W...
-
- You can already do this with overrides.
**VPN > OpenVPN**, **Client Specific Overrides** tab. Add a new entry with... -
- We're having enterprise internal CA and imported CA into pfsense. Having a single CA allows all certs that are not re...
-
- Applied in changeset commit:6e150fc0d022d231c7dc243ba68f4784f58973d5.
-
- I just pushed a change that should hopefully take care of this, under the assumption that some mismatch in how index....
-
-
08:54 AM Bug #9004 (Resolved): Default gateway IPv4 set to a group fails after restart on 2.4.4
- We set the default gateway IPv4 to be a group, called WAN_Failover. That group consists of WAN1 Fiber at tier 1 and ...
-
08:25 AM
Bug #8959: Restoring a <2.4.4 config with legacy gold auto backup package re-adds the menu option under Diagnostics
- Applied in changeset commit:245bfa559b5d8ebcb13b21feceaa58257ee194da.
-
08:24 AM
Bug #8959 (Feedback): Restoring a <2.4.4 config with legacy gold auto backup package re-adds the menu option under Diagnostics
- Diagnostics->AutoConfigBackup menu item suppressed
-
08:18 AM
Bug #9002 (Resolved): [Interfaces :: WAN :: PPPoE] The service name contains invalid characters
-
- Steve Beaver wrote:
> Service name may now contain ':' (and other non-alphanumerics)
I just edited the file on my... -
07:30 AM
Bug #9002: [Interfaces :: WAN :: PPPoE] The service name contains invalid characters
- Applied in changeset commit:dac4cd09699bdafa5bcf1cf7b699438e5f669b26.
-
07:27 AM
Bug #9002 (Feedback): [Interfaces :: WAN :: PPPoE] The service name contains invalid characters
- Service name may now contain ':' (and other non-alphanumerics)
-
06:49 AM
Bug #9002: [Interfaces :: WAN :: PPPoE] The service name contains invalid characters
-
- I am able to add a colon in the "service name" when I configure "PPPoE" using the "Setup Wizard".
I am not able to... -
08:05 AM
Feature #8943 (Feedback): Additions to wake on lan section
- Top buttons are added if the table is > 24 rows
Items 2) and 3) may be addressed in a later release.
-
07:41 AM
Bug #8970 (Feedback): Queues Menu item ends with ":"
- Error was in de_DE translation file. Fixed there and in Zanata
-
07:37 AM
Bug #8970 (In Progress): Queues Menu item ends with ":"
-
07:34 AM
Bug #8970 (Feedback): Queues Menu item ends with ":"
-
- Far more likely is that it is working properly but just not showing the traffic in the queues in the diagnostic outpu...
-
-
- mpd5-5.8_8 imported
-
06:51 AM pfSense Packages Feature #9003 (Resolved): Add 'Copy Running to Saved' option to the raw config
- Would be possible to add these buttons to the raw config page as the Quagga package does, i'm slowly moving over to u...
-
01:11 AM Bug #8998: All Captive Portal zones send only "CaptivePortal" as NAS Identifier
- Another weight for the first Option: If i Restore a Backup from an old Version (also in case of update) the field is ...
10/03/2018
-
- Right. And NAT works just fine on 2.4.4 on AWS. Please take this discussion to the pfSense forum at https://forum.net...
-
09:58 PM
Bug #8999: Nat rules do not work in pfsense 2.4.4 on hypervisor xen
- Chris Linstruth wrote:
> My entire test VM lab is currently XenServer 6.5. Nothing there changed from 2.4.3_1 to 2.4... -
- My entire test VM lab is currently XenServer 6.5. Nothing there changed from 2.4.3_1 to 2.4.4 through the entire 2.4....
-
02:58 PM
Bug #8999: Nat rules do not work in pfsense 2.4.4 on hypervisor xen
- just think for a moment that it may be the first report. in larger communities i had to make the first report before,...
-
- You need to post on the forum and discuss the issue in depth there before jumping to a conclusion that it's a bug and...
-
01:59 PM
Bug #8999: Nat rules do not work in pfsense 2.4.4 on hypervisor xen
- Jim Pingle wrote:
> There is not enough data here to suggest it's actually a problem in pfSense. Please post on the ... -
- There is not enough data here to suggest it's actually a problem in pfSense. Please post on the forum and discuss the...
-
10:00 AM
Bug #8999 (Not a Bug): Nat rules do not work in pfsense 2.4.4 on hypervisor xen
- After upgrading from pfsense 2.4.3_1 to 2.4.4, nat rules in the firewall do not allow packets to pass through.
npt w... -
- This is weird, but if configuring Limiters with CoDel AQM and QFQ Scheduler, it works. Problems exists with default A...
-
- (cherry picked from commit 9386784480f27d6b04ebf013f691522130a7f013)
-
-
- (cherry picked from commit 45ff6b8f1d574b3786d25286abc4978427675974)
-
-
- Also add a few new tags to be masked. See Factory #1170
(cherry picked from commit 9858a361b81daa9465e61a93c205bfd98... -
- Also add a few new tags to be masked. See Factory #1170
-
06:11 PM Bug #8977: Dynamic DNS - Custom (V6) - Throws Error "php-fpm: /services_dyndns_edit.php: phpDynDNS: (ERROR!) No Hostname Provided."
- I can provide some feedback, that I manually edited the file in the same manner as the patch on the same day I submit...
-
- Applied in changeset commit:45ff6b8f1d574b3786d25286abc4978427675974.
-
-
- Applied in changeset commit:9386784480f27d6b04ebf013f691522130a7f013.
-
- The rrddata case is special because of the way the backup process injects the data into the config before serving the...
-
12:01 AM Bug #8994: Two RRDDATA Sections in Restored Config Breaks Unit
- I don't think this is limited to <rrddata>, any duplicate tag in the config will break imports, I've confirmed with <...
-
02:34 PM Bug #8995: MTU Trouble with Orange is back
- France Orange OK :)
pppoe2: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> metric 0 mtu 1492
inet 81.2... -
- Eugene Grosbein - 2 hours ago
Thank you, these logs were very useful. Here is one more patch chunk missing from pr... -
- pfSense 2.4.4 uses mpd5-5.8_7. You can check that running `pkg info mpd5` on console. The only differences from FreeB...
-
- As discuss here https://sourceforge.net/p/mpd/bugs/62/?page=1 I have MTU trouble with the last 2.4.4.
Eugene is aski... -
- Confirmed fixed by other forum users who hit the same issue: https://forum.netgate.com/topic/136288/squidguard-and-mu...
-
- Fix pushed in squidGuard pkg version 1.16.18_1 which will be up shortly.
-
- Probably something similar to what I fixed yesterday in ACLs. I'll take a look.
-
08:17 AM pfSense Packages Bug #8997 (Resolved): squidGuard Times does not accept more than one value
- squidGuard Times does not accept more than one value. (PFSense 2.4.4, squid 0.4.44_5, squidGuard 1.16.18)
On the... -
11:12 AM Bug #8954: hn0: driver does not support altq
- Dmitry Ivanov wrote:
> hyper-v 2016
> gen1 and gen2
same here, using windows server 2016 on pfsense 2.4.4 -
- Some mail servers do not use a certificate that can be validated by the current code (e.g. custom self-signed CA or c...
-
10:06 AM
Bug #9000 (Not a Bug): Haproxy does not send ipv6 traffic to backend after updating to Pfsense 2.4.4
- After the update, the accesses from ipv6 addresses do not work in any case. Before the update worked perfectly.
Ac... -
09:46 AM pfSense Packages Bug #8945: SquidGuard ACL blacklists
- I had to make a clean install, but it is working for me as well ! Thanks a lot for your support guys
-
-
01:16 AM pfSense Packages Bug #8945: SquidGuard ACL blacklists
- Works again. Thank you
-
12:33 AM pfSense Packages Bug #8945: SquidGuard ACL blacklists
- Great Thanks a lot. It works fine in my pfsense
-
- Before 2.4.4, each Captive Portal zone had a configurable NAS Identifier. With multiple zones, each instance could us...
-
-
07:57 AM pfSense Packages Bug #8996: pfBlockerNG not like CloudFlare DNS
- Sorry - issue already resolved in devel version.
-
- Hi all, pfBlockerNG use IP 1.1.1.1 is list of IPs is NULL, so any time list is null CloudFlare DNS can be banned, fil...
-
- I got exactly the same error inside the crash reporter, including the max memory size even if my pfsense machine has ...
-
- New version merged to 2.4.4 branch
10/02/2018
-
10:03 PM Bug #8935: IGMP Proxy not starting with PPPoE IF
- I can say that the vlans are working again.
Thanks ! -
- Replicated in 2.4.4-RELEASE
Steps to replicate:
Configure Gateway Group with 2 WANs
Start Tier 1 down, Tier 2 up... -
- (cherry picked from commit 5a7035523e9f70fa568d688915bf4aed2f0aac41)
-
-
-
-
- I added a note to the upgrade guide pointing back here and offering a workaround. Thanks for confirming the details!
-
03:21 PM Bug #8507: FreeBSD 11.2-BETA dhclient always uses server MTU value
- I suspect that might be happening to people. Thank you for being so attentive on this.
-
- If you check the box and save, it will overwrite the default DHCP values with what is in the boxes for **Protocol Tim...
-
- Is it possible that just toggling the visibility of the advanced settings box to on and then saving and applying woul...
-
- No, that setting would not do it on its own, as it is handled in a different way.
It only happens when @adv_dhcp_c... -
- So a setting to reject leases from the cable modem itself in *DHCP Client Configuration* might cause this too, as wou...
-
- No, I mean settings in the **DHCP Client Configuration** box on the WAN when **Advanced Configuration** is set, like ...
-
- Got it, thank you.
By advanced DHCP client options, do you mean specifying an MTU for the interface? If that wo... -
- It's @\t@ for a tab, then supersede.
-
- I think I see a typo in your diff. "tsupersede".
-
- Looks like there may be two ways this could happen:
#1: If you used advanced DHCP client options that clobber the ... -
- My copy of /etc/inc/interfaces.inc matches, and contains the line.
-
- I suspect that a prior hard setting of MTU on the interface may be interfering with the propagation of the fix in dhc...
-
- https://github.com/pfsense/pfsense/blob/master/src/etc/inc/interfaces.inc#L4990
The line should always be there by... -
- All I know is that I needed to affirmatively set "supersede interface-mtu 0" in the option modifiers for the WAN conf...
-
- We already set that (see the linked commit above).
My edge firewall failed horribly because my ISP sent the MTU ev... -
- This is still causing problems in pfSense 2.4.4-RELEASE.
I believe that the upstream patches to FreeBSD introduce ... -
- Fixed in squidGuard pkg v 1.16.18 which will show up shortly.
-
-
- (cherry picked from commit 67807c9536ae1810a067155049c96e8d2b634777)
-
-
- Temporarily, If I wanted to edit the files that choose the default options for the graph, which file would I need to ...
-
- Had a user present a configuration backup with two rrddata sections.
Looked like this:
<rrddata></rrddata>
<rr... -
-
- Tested on 2.4.3_1 - I was able to see Acme package which depends on php72 but wasn't able to install it.
Tested on ... -
10:24 AM Bug #8980: Disabling hardware checksums does not disable IPv6 transmit checksum
- -- drive by coder --
What it looks like is that in pfSense.c (FreeBSD-Ports) the IFCAP_RXCSUM_IPV6 & IFCAP_TXCSUM_... -
09:46 AM
Feature #8947 (Resolved): Cron based ACB option
- While there are more simple ways to configure the timing, there is no more flexible way than direct crontab entry. If...
-
- Functionality to perform config backups via cron instead of on every change is added and works as expected. Tested in...
-
- Applied in changeset commit:67807c9536ae1810a067155049c96e8d2b634777.
-
- ...
-
- It is not a bug because HA requires both nodes to be on matching versions, and this error could only happen if they d...
-
- Why is it not a bug?
I upgraded from 2.4.3 to 2.4.4 and directly (!) i get the errors on the dashboard. Every secord... -
- Your 2.4.3 system may have tried to call that function on the 2.4.4 system, where that function no longer exists.
... -
- After Update go 2.4.4 i get a lot of errors shown:
PHP ERROR: Type: 1, File: /usr/local/www/xmlrpc.php(140) : eval... -
08:51 AM Bug #8954: hn0: driver does not support altq
- Das gleiche Problem mit Hyper-V 2012, gen1
-
- If you read through https://forum.netgate.com/topic/112527/playing-with-fq_codel-in-2-4/ that appears to be harmless....
-
08:30 AM Bug #8991 (Not a Bug): Codel limiter generating error in system log and console
- After configuring Codel limiters like shown on the Netgate YouTube video for 2.4.4 I noticed this message constantly ...
-
- To make sure someone doesn't get the wrong idea based on that last note:
The errors mentioned above are covered in... -
- Multiple users have negative feedback (see #8989 ).
I submited another PR to fix the issue : https://github.com/p... -
- Steve Wheeler wrote:
> You can test this in a 2.4.5 snapshot. Just choose the development branch in Update Settings.... -
- Florian Apolloner wrote:
> I have acme, Cron, haproxy, Netgate_Coreboot_Upgrade and openvpn client export installed.... -
07:47 AM Bug #8933: diagnostics -> backup/restore -> reinstall packages hangs
- I have acme, Cron, haproxy, Netgate_Coreboot_Upgrade and openvpn client export installed. Can you link me the patch? ...
-
- Nothing unusual on the boxes where I could reproduce this. Common things like ACME, nmap, OpenVPN client export, sudo...
-
07:02 AM Bug #8933: diagnostics -> backup/restore -> reinstall packages hangs
- You can test this in a 2.4.5 snapshot. Just choose the development branch in Update Settings.
However I was not ab... -
- PR merged
-
04:28 AM pfSense Packages Bug #8989: [Freeradius] not starting radiusd -X | Errors reading /usr/local/etc/raddb/dictionary: dict_init: /usr/local/etc/raddb/dictionary[6] invalid entry
- See https://forum.netgate.com/topic/135894/solved-freeradius-doesn-t-start-after-a-pfsense-2-4-4-fresh-install-and-re...
-
- This is my fault. I have to appologize for this error, sorry.
see #8927 -and https://github.com/pfsense/FreeBSD-p... -
- Same here - Radius won't start after Update anymore
-
02:48 AM Bug #8990 (Resolved): Additional BOOTP/DHCP Options per host
- Hello,
I do not find option to add additional boottp option *per host*. I have system that get custom option via DHC...
10/01/2018
-
10:24 PM pfSense Packages Bug #8989 (Resolved): [Freeradius] not starting radiusd -X | Errors reading /usr/local/etc/raddb/dictionary: dict_init: /usr/local/etc/raddb/dictionary[6] invalid entry
- freeradius is not starting after latest update, i figured out the issue.
radiusd -X show:
@Errors reading /usr/... -
07:34 PM Bug #8956: traffic shaper after upgrade to 2.4.4 not showing queue under each limiter
- Dir Jim,
i attached the requested data -
- This does not affect all users on 2.4.4, or all users who upgraded, and the priority reflects that. We intend to have...
-
07:29 PM Bug #8988: just updated to latest version 2.4.4 Crash report!
- Jim Pingle wrote:
> Either these are harmless errors from the upgrade process, or you might have a problem with the ... -
- Either these are harmless errors from the upgrade process, or you might have a problem with the pfBlockerNG package. ...
-
- Crash report begins. Anonymous machine information:
amd64
11.2-RELEASE-p3
FreeBSD 11.2-RELEASE-p3 #17 e6b497fa0... -
- Ok in both cases it was using v6 localhost as source, ::1/128.
Using that I was able to duplicate the original bug... -
- I'm unable to duplicate the original issue in 2.4.4 or 2.3.5p1.
In both 2.4.4 and 2.4.5 setting a custom ACL does ... -
- Looks good.
Tested in:... -
- In 2.4.4 the monitor IP of another gateway is shown:...
-
- PR merged. Thanks!
-
- As mentioned on the forum ( https://forum.netgate.com/topic/135679/pfsense-2-4-4-freeradius-mac-address-authenticatio...
-
- Fixed in:...
-
- I've cherry-picked recent changes from FreeBSD ports tree. 0.2.1_1,1 will be available in the next round of 2.4.5-DEV...
-
-
- Unable to replicate this in either 2.4.4 or in:...
-
- There are several things on the dashboard that need working DNS and connectivity, like the update check, packages wid...
-
12:22 PM Bug #8987 (Resolved): Web GUI main page very slow to load if wan interface is enabled but not connected.
- Hi,
I noticed this annoying bug in pfSense 2.4.4:
by configuring the wan interface and leaving it disconnected,
t... -
- It looks like they are hitting #8945 -- but yes, it has nothing to do with this bug. Rather than opening a new issue,...
-
12:22 PM Bug #8518: Rule Error On Upgrade 2.4.3 -> 2.4.3-p1
- vishant kamboj wrote:
> am not able to set target rules in squidguard proxy filter. once we add rule after apply the... -
12:12 PM Bug #8518: Rule Error On Upgrade 2.4.3 -> 2.4.3-p1
- am not able to set target rules in squidguard proxy filter. once we add rule after apply then we check these rules it...
-
- Nothing intelligible here. Most likely a duplicate of #8945
Post to the forum if that is not the case. -
11:06 AM pfSense Packages Bug #8986 (Duplicate): Clear SQUID GUARD
- No set options list access squidguard
clear error !!! save button -
10:56 AM
pfSense Packages
Bug #8984 (Feedback): stunnel: Illegal string offset and other PHP hiccups (due to PHP upgrade)
- This was corrected in stunnel 5.37
-
- There is some ongoing work happening on the stunnel package, this is likely already fixed in the development version ...
-
08:27 AM pfSense Packages Bug #8984 (Resolved): stunnel: Illegal string offset and other PHP hiccups (due to PHP upgrade)
- The last major upgrade of the PHP packages caused this: ...
-
-
09:10 AM pfSense Packages Bug #8871: Suricata: input not validated properly in suricata_rulesets.php results in wrong argument passed to in_array()
- The variable _$enabled_rulesets_array_ is populated by the PHP code as it reads the config.xml configuration for the ...
-
- Seems to have been fixed silently, or through a different component or such, but no updates recorded here...
-
- At the moment, to support storing additional data in an array of disks or just a single storage media, we must levera...
-
07:29 AM Feature #8983 (Duplicate): Possibility of using alias/fqdn in the GRE tunnel peer identity
- At the moment, one must define remote GRE peer by IP. Would it be possible to also use alias/fqdn? This would allow f...
-
- Marcel Beerli wrote:
> Then it looks like its in pfSense 2.4.4 not in the packages.
> Lets hope it gets addressed i... -
- Then it looks like its in either of the 2 packages. (squid or squidGuard), probably squidGuard
-
- I was on release 2.4.3-RELEASE-p1 (amd64) and did package updates to
squidGuard -> 1.16.17_3
squid -> 0.4.44_5
... -
03:22 AM pfSense Packages Feature #8982 (New): HAproxy ACL support for map in configuration UI
- When defining ACLs with the GUI, it would be nice to have support for matching against a map for "Host matches:" type...
09/30/2018
-
09:45 PM Bug #8981 (Resolved): Uncheck DHCP registration does not clear entries
Uncheck the DHCP registration box in Unbound setting GUI should clear the contents of /var/unbound/dhcpleases_entri...-
09:05 PM Bug #8864: SSH Guard Sensitivity/Whitelist on 2.4.4
- Is it possible to simply disable sshguard?
-
06:01 PM Bug #8935: IGMP Proxy not starting with PPPoE IF
- Tim Balmer wrote:
> I now replaced the default igmpproxy binary on pfSense 2.4.4 by this version https://pkg.opnsens... -
- Looks like we'd have to check like they did on FreeNAS, if @sysctl -n machdep.bootmethod@ returns UEFI then we can se...
-
- The loader values 'console="vidconsole"'or 'console="vidconsole,comconsole"'are invalid for systems booted UEFI where...
-
- Duplicate of #8967, already fixed for the next release.
-
11:36 AM Bug #8979 (Duplicate): DNS Forwarder broken in 2.4.4
- After upgrading to 2.4.4 Services / DNS Forwarder seems broken:
Crash report begins. Anonymous machine information... -
- system_advanced_network.php, checking "Disable hardware checksum offload" disables most checksum options but not TXCS...
-
- Looks good. Functions as expected:...
-
-
- This looks good now. Tested in:...
-
- Your issue is different. You need to start a thread on the "forum":https://forum.netgate.com to discuss it and diagno...
-
07:38 AM Bug #8971: filterdns doesn't start after upgrade from 2.4.3 to 2.4.4
- Not sure if this is the best place to post, but the symptom in the original poster’s screenshot is also what we’re se...
-
06:59 AM Bug #7308: ZFS installer - check storage capabilities
- error is still there for me on SG-2220 with 2.4.4 CE
Even when I reduce the swap to 0. -
06:53 AM Bug #8956: traffic shaper after upgrade to 2.4.4 not showing queue under each limiter
- Priority "Normal"? This issue is a desaster for the QoS of the complete network! Is there any workaround which can be...
09/29/2018
-
- The Dynamic DNS - Custom (v6) when it runs, throws the following error, even though it successfully updated:
php-fpm... -
-
- I noticed that the GUI is now allowing me to save values higher than 7 for PRIQ! I also see that you can now save a v...
-
I like to view the traffic graph often as a quick way to view which host is using bandwidth and how much.
Howe...-
10:30 AM pfSense Packages Bug #8909: tinc package makes /rc.newwanip looping forever
- I temporary blocked the loop by disabling the OPT interface associated with tap0:...
-
- Yes, the fix is in release and it is currently working on our test systems. If you still have a problem, start a thre...
-
02:40 AM Bug #8603: PPP WANs do not work on VLANs on current snapshots
- Did this fix made it in the 2.4.4 release? I just upgraded to 2.4.4 stock and it looks like i’m hitting this issue, m...
-
01:35 AM Bug #8489: DHCPv6 Client Failure to Initialize with "Do not wait for RA"
- For the original issue,...
-
12:15 AM Bug #2218: CARP VIPs can become master too early at boot time
- Hi there, is see the point of @Seb A,. I am prepare two pfsense with CARP IPs for our data center. We made some tests...
09/28/2018
-
- Just some additional feedback.
I reinstalled squid, did not work.
then I uninstalled squid.
then I installed squid... -
- There is no longer a general problem here. Read the last comment on #8832 again.
Uninstall the package and then in... -
- Running on PC Engines APU2, pfSense 2.4.4, squid 0.4.44_5 and squidGuard 1.16.17_3
Service c-icap is not starting ... -
- Any indication when this is getting fixed?
Its in PackageProxy filter SquidGuard: Common Access Control List (ACL)Co... -
- (cherry picked from commit 32a7f1612b79ad04cc252d0a5e217c857b00024d)
-
-
- Remove redundant settings stored in the wrong place
Store all ssh settings in the same place
Initialize this array be... -
- Remove redundant settings stored in the wrong place
Store all ssh settings in the same place
Initialize this array be... -
06:13 PM Revision 6038cba7: break out of foreach as soon as multiwan > 1
-
03:00 PM Feature #8947: Cron based ACB option
- And the ability to use both scheduled and automatic backup after each change.
-
02:59 PM
Feature #8947: Cron based ACB option
- Would be more intuitive if the configuration options for scheduling backups used dropdowns or some other input method...
-
- Applied in changeset commit:ec439957ce0f70778d89f57eba9553e2afba874a.
-
- A few other notes:
* @$config['system']['sshd']@ appears to be redundant, the setting stored under @$config['syste... -
- The @sshdkeyonly@ setting is a bit confused about where it should be. Some references have $config['system']['ssh'] a...
-
- (cherry picked from commit 988b786d0bc8753a7427aaa693effd6018658770)
-
- (cherry picked from commit fd4dc22e73a43c644e8972923c98abb86a27889c)
-
-
- Typo fix for this as well commit:f31ef5aa0e777c236fb175778e63b9e26a9d2627
-
11:03 AM Bug #8868: multiple php errors on update
- Jim Pingle wrote:
> If you saw these errors while still on 2.4.3, it's more likely due to an issue such as #8938 and... -
- OK, so your issue is not with filterdns, and this is not a bug, it's a side effect of your real root issue.
We can... -
10:40 AM Bug #8971: filterdns doesn't start after upgrade from 2.4.3 to 2.4.4
- On my CE system running in a VM, /var/run/booting does not exist. filterdns did not show up in processes. when sav...
-
- I do not believe this is a widespread problem. In part due to the fact that if it were, we'd see a lot more feedback ...
-
- Adrien Carlyle wrote:
> I can add that I'm running 1 CE instance in a VM that appears to have the process running bu... -
- So on my SG-3100, I tried to run the process manually and the following output happens. ...
-
- This bug may be related to #8956
But it's a different situation...
To get around bug #8956 I just manually delete... -
10:08 AM Bug #8489: DHCPv6 Client Failure to Initialize with "Do not wait for RA"
- And to which other issue is it related?...
-
- That's a different error than the others, and most likely a separate issue.
-
- i have the same problem since 2.4.3
my pfsense is running on bare metal
here a few logs:... -
-
-
-
- The moment you give a user any control over 2, it starts trying to replace 3. 2 should just be completely hand-off au...
-
- Uninstall squid and then reinstall. If it still won't start, then it's not this issue. Start a new thread on the foru...
-
- This is most likely a hardware/chipset quirk on your environment and not a bug per se.
I run several boxes like th... -
02:35 AM Bug #8972: VLANs on LAN and no VLAN on WAN --> pfsense "crashes" respectivly not operable
- Edit: Setting the network speed to a fixed value (100 half/full duplex or 1000 half/full duplex) on the ports at pfse...
-
- Maybe a bug, I don't know - found a solution too...
Hardware for pfsense (since 2.2.x):
Intel Celeron J1900 with ... -
-
02:23 AM
pfSense Packages
Bug #8966: Patches page uses GET instead of POST when performing actions
- It seems to be fixed now. Thanks for the quick turnaround.
-
- (cherry picked from commit f31ef5aa0e777c236fb175778e63b9e26a9d2627)
-
-
02:10 AM Bug #8964: IPsec async cryptography advanced setting - TCP traffic not passing through
- Repeated the same tests with different combination of HW:
SG4860 <--> SG2440 with enabled Async crypto on both sid...
09/27/2018
-
- upgraded to squid 0.4.44_5 but c-icap is still not starting.
-
- I'm not too sure on that, I'm running an intel based system here at my house which has similar problems.
Actual... -
08:24 PM
Bug #8971: filterdns doesn't start after upgrade from 2.4.3 to 2.4.4
- Adrien Carlyle wrote:
> I can add that I'm running 1 CE instance in a VM that appears to have the process running bu... -
- I can add that I'm running 1 CE instance in a VM that appears to have the process running but it's filterdns process ...
-
08:02 PM
Bug #8971: filterdns doesn't start after upgrade from 2.4.3 to 2.4.4
- I can't reproduce this on my setup (2.4.4 running x64 under KVM)
I added a test host, added a rule that allowed it... -
- After upgrading firewalls to 2.4.4 I'm noticing that any FW rules which use an alias with an FQDN name are not workin...
-
- Yeah that was due to a syntax error I made in the previous commit. Fix has been pushed, update and try again
-
06:42 PM
pfSense Packages
Bug #8966: Patches page uses GET instead of POST when performing actions
- I'm not entirely sure this related, but I just upgraded a system to 2.4.4 which picked up the new System Patches v1.2...
-
- Fixed in System Patches v1.2, which will show up shortly.
-
11:53 AM pfSense Packages Bug #8966 (Resolved): Patches page uses GET instead of POST when performing actions
- When the patches page system_patches.php is used to apply or revert a patch, the link in the cookie trail area of tha...
-
-
- (cherry picked from commit 651b4dcb4ed2dc1404cd532a2a53190e77cbcbc4)
-
-
04:15 PM Bug #8910: DHCP default gateway undefined
- Behavior of 1 and 3 are clearly defined (i think), no argument there.
But 2 'automatic' still needs some informati... -
- Pi Ba wrote:
> Control over 'gateway switching' ~= 'automatic' is done by the order of the list. Not having control ... -
- Control over 'gateway switching' ~= 'automatic' is done by the order of the list. Not having control over that order ...
-
- Pi Ba wrote:
> Jim Pingle wrote:
> > Automatic should just be like the old gateway switching option going down the ... -
- Jim Pingle wrote:
> Automatic should just be like the old gateway switching option going down the list of gateways l... -
- But that's what the gateway group is for. I don't see any good reason to have two mechanisms to do the same thing. Th...
-
- I'm sure you remember the old 'gateway switching' option? It used the gateways in order they were listed as well.. (w...
-
- There shouldn't be an "order of importance" on the list of gateways though. That's what the default gateway group is ...
-
- I'm not intending things to be 'alphabetically', i want them to be in the order of importance. As for saving things, ...
-
- But moving something to the top by ordering it alphabetically is a kludge. I don't think we should go out of our way ...
-
- Forgot to 'watch' this issue, so replying a little late (thanks for the github question/copy i did get notified by).
... -
03:43 PM Bug #8970 (Resolved): Queues Menu item ends with ":"
- At least in the German translation, the Status -> Queues Items (Warteschlangen) ends with a : sign. I would expect it...
-
- - "IP" -> "IP address"
- don't specify gw on route delete (not needed as per jim-p
- helptext: remove '.' for consist... -
- Not enough info here. Probably you have hit an issue with pfBlockerNG-devel -- see https://forum.netgate.com/topic/13...
-
03:03 PM Bug #8969 (Rejected): pfSense has detected a crash report or programming bug
- After upgrade to version 2.4.4-RELEASE (amd64) appear errors:
Crash report begins. Anonymous machine information:... -
- Patches imported from FreeBSD releng/11.2 into RELENG_2_4_4
-
- ACL issue is a duplicate of #8945
icap issue is a duplicate of #8832 -
- Hi,
running with pfsense 2.4.4 with squid 0.4.44_4 and squidguard 1.16.17_3
when Squid Guard Proxy Filter - Group A... -
-
12:55 PM pfSense Packages Bug #8945: SquidGuard ACL blacklists
- I had to rollback too...
-
- Applied in changeset commit:651b4dcb4ed2dc1404cd532a2a53190e77cbcbc4.
-
- https://www.reddit.com/r/PFSENSE/comments/9je1ar/244_php_error/...
- 12:33 PM Revision bb7cabdb: Simplify schedule validation
-
- submitted in the form data.
(cherry picked from commit c818076d474c45d5da283d20baab6f8a0d67a540) -
-
- (cherry picked from commit 2e49073226a9795667c79c9f09f0111895b4f2be)
-
- Effectively override any default setting.
(cherry picked from commit c2d8c3c8e3e21540f093f69d2ccba6020bc413d0) -
- (cherry picked from commit e0f12d6bfd604c79ac9bf8f7dce5daa68b8c0d1a)
-
- Reported in redmine https://redmine.pfsense.org/issues/7609
(cherry picked from commit d73918f2a241f5b072a8b9fd2e29b... -
-
11:52 AM Revision 0a72eb0b: enable ip send for FreeDNS DynDNS update
- without this, only legacy IP records get updated correctly.
redmi ticket: https://redmine.pfsense.org/issues/8924
(... -
-
- move conditional before platform_booting
and join w && instead of indenting
(cherry picked from commit b974f79a368b2... -
- and gateway failure events. Try to make the logs readable again,
while still allowing verbose logging if needed via a... -
-
09:35 AM Feature #8965 (Resolved): GUI interface for switchable security mitigations
- With the constellation of tunable workarounds for hardware-based security bugs, it might be helpful to build a table ...
-
- PR merged
-
- PR merged
-
- PR merged
-
- PR merged
- 03:15 AM Revision c9216659: Fix typo in error msg
-
- Test setup:
Windows <-> SG2220 2.4.4-rel <---IPSEC---> SG3100 2.4.4-rel <-> Windows
IPsec (tunnel mode) with fo... -
01:24 AM Bug #8963: 2.4.4 Limiters don't work after CARP fail-over
- For those of us on WAN connections who pay for bandwidth consumed over our limit, bursting to my WAN circuit's 300Mbp...
-
- Limiters are not applied when using HA, states are being synced with pfsync, and a CARP fail over occurs.
When Fir...
09/26/2018
-
09:55 PM Revision fe49c700: Use poudriere_bulk.$TARGET_ARCH instead of poudriere_bulk.$TARGET.$TARGET_ARCH for the arch bulk list.
- (cherry picked from commit bd936941a3cb5e381c4bba8f9245a748cf93206d)
-
-
- (cherry picked from commit deb5f1dacf9579052dd275c93035adbf4ae1814e)
-
-
- (cherry picked from commit 157aff9e256aa235ba68ccc2168c61fc61e90072)
-
-
- This bug causes the Monitor IP to appear even when a gateway
is unmonitored. The monitor IP from the last gateway in ... -
-
- Also, i18n
(cherry picked from commit 42c059894a4a521415c35dc048952658f61fad65) -
-
06:43 PM Bug #8489: DHCPv6 Client Failure to Initialize with "Do not wait for RA"
- Just updated to 2.4.4 and lost IPv6...
I am also running pfsense as a Gen2 hyper-v guest.
My NIC is an Intel I... -
- Hyper-V appears to be the common factor but as far as I can see, nobody has attempted to take the exact same config/e...
-
12:47 AM Bug #8489: DHCPv6 Client Failure to Initialize with "Do not wait for RA"
- More people get this bug now in the 2.4.4 release. It seems the common part is that pfsense is running as hyper-v VM....
- 06:41 PM Revision ebbc9e97: Default ACB schedule to every day at midnight
- 03:48 PM Revision e46ea2c6: Fixes #8949 Looks like there was 2 variable names for the same variable shownetboot and netboot. It now just uses the variable name netboot
- 03:28 PM Revision a1aa91de: Added scheduled config backup
- Fixed: #8947
-
- Applied in changeset commit:157aff9e256aa235ba68ccc2168c61fc61e90072.
-
- A gateway description with double quotes breaks the JSON used to form the gateway drop-down options, resulting in a b...
-
- PR merged
-
- PR merged
-
- PR:
https://github.com/pfsense/pfsense/pull/3992 -
- I found a bug and some cobwebs in *status_gateways.php*
The bug causes the *Monitor IP* to displayed incorrect inf... -
02:42 PM Bug #8935: IGMP Proxy not starting with PPPoE IF
- Johannes Wanink wrote:
>Thx!
>Tried the binary, and looks good! Seems to be working.
> (Binary is much bigger than... -
02:25 PM Bug #8935: IGMP Proxy not starting with PPPoE IF
- Tim Balmer wrote:
> I now replaced the default igmpproxy binary on pfSense 2.4.4 by this version https://pkg.opnsens... -
- I now replaced the default igmpproxy binary on pfSense 2.4.4 by this version https://pkg.opnsense.org/FreeBSD:11:amd6...
-
09:18 AM Bug #8935: IGMP Proxy not starting with PPPoE IF
- Alexandre Paradis wrote:
> Vlan/sub-interface are also affected.
Same issue with "bridge" interface.
-
- With the release of 2.4.4 we enabled `Asynchronous Cryptography` by default, we are seeing cases where traffic does n...
-
- move conditional before platform_booting
and join w && instead of indenting -
-
11:56 AM Bug #8949: DHCPv6 Server Network Booting fails to be set
- I have confirmed that this now works as expected. Thank you for the quick fix.
-
10:50 AM
Bug #8949 (Feedback): DHCPv6 Server Network Booting fails to be set
- Applied in changeset commit:e46ea2c60986c62371966025ab3068466217fefa.
-
08:42 AM
Bug #8949 (Assigned): DHCPv6 Server Network Booting fails to be set
-
11:34 AM Bug #8957: Prefix ID for IPv6 tracked interfaces cannot be set
- Ahh.. Sorry for the false bug. Trying to set this all up and I missed it.
-
- That means you did not set the WAN *DHCPv6 Prefix Delegation size* properly, it may be at the default of /64 when it ...
-
- After a painful, ultimately unsuccessful in-place upgrade to 2.4.4 from 2.4.3-p1, I needed to rebuild my config by ha...
-
- Please read the upgrade guide notes for 2.4.4, specifically the last few points:
https://www.netgate.com/docs/pfse... -
10:59 AM Bug #8960 (Resolved): VGA console won't boot in 2.4.4 upgrade - Bug
- when upgrading to 2.4.4 the VGA console freezes, the system still boots in the background.
you can use webconfigurat... -
10:30 AM
Feature #8947: Cron based ACB option
- Applied in changeset commit:a1aa91dec887ba929be08c993170803396a669b2.
-
10:28 AM
Feature #8947 (Feedback): Cron based ACB option
-
10:27 AM
Feature #8947 (In Progress): Cron based ACB option
-
09:15 AM Bug #8864: SSH Guard Sensitivity/Whitelist on 2.4.4
- Alexander Müller wrote:
> I found following workaround:
>
> * create whitelist file for sshguard following sshgua... -
05:39 AM Bug #8864: SSH Guard Sensitivity/Whitelist on 2.4.4
- I found following workaround:
* create whitelist file for sshguard following sshguards file format (https://www.ss... -
04:35 AM Bug #8864: SSH Guard Sensitivity/Whitelist on 2.4.4
- Well... I'm using the default check_ssh plugin of nagios. This plugin connects to the ssh server and checks before au...
-
08:56 AM Bug #8959 (Resolved): Restoring a <2.4.4 config with legacy gold auto backup package re-adds the menu option under Diagnostics
- I was forced to do a fresh install of 2.4.4 as updating packages before the base OS broke my system. After a fresh in...
-
08:48 AM Feature #8958: Dynamic DNS - CARP Address
- Eg:
Scenario with two firewalls in HA
Subnet x.x.x.224 / 27
CARP address: x.x.x.230 / 27
pfsense 1:
WAN ad... -
- Currently the WAN also has the static address
In any case, I update the Dynamic from the PFSense so if I had to chan... -
- In High Available it is useful when you want to update / modify DNS from a single point without having to move to the...
-
- CARP addresses will always be static. What purpose will this serve?
If it's for Multi-WAN failover, pick the CARP ... -
- In the Dynamic DNS section It's not possible to update an address with the CARP address, IT's only possible to update...
-
- Duplicate of #855
-
07:54 AM Bug #7605: State Killing on Gateway Success
- Just to reference the same issues / feature requests previously opened:
https://redmine.pfsense.org/issues/855
ht... -
- See also: #7605
-
- Duplicated by #8956 -- It was entered after this one, but has better details.
-
02:07 AM Bug #8955 (Duplicate): Limiters after updating to 2.4.4
- in 2.4.3 was created limiters with queues.
After updating to 2.4.4 there are no queues in the limiters.
just add th... -
- See also: #7869
-
- hyper-v 2016
gen1 and gen2 -
06:37 AM pfSense Packages Bug #8945: SquidGuard ACL blacklists
- lahoucine El kamel wrote:
> Hello,
>
> When editing the Squid Guard Proxy Filter I noticed that the settings afte... -
06:00 AM pfSense Packages Bug #8945: SquidGuard ACL blacklists
- lahoucine El kamel wrote:
> Hello,
>
> When editing the Squid Guard Proxy Filter I noticed that the settings afte... -
- Hello,
I have updated Squid and the ACL issue is still there.
When editing the Squid Guard Proxy Filter I noticed... -
- This bug causes the Monitor IP to appear even when a gateway
is unmonitored. The monitor IP from the last gateway in ... -
- traffic shaper after upgrade to 2.4.4 not showing queue under each limiter
i tried to create test limiter and added ... -
02:43 AM Feature #8936: QuickAssist in pfSense
- I can't see any mention of QuickAssist on redmine.
-
- same error (hn0: driver does not support altq) after upgrade to 2.4.4
09/25/2018
-
- submitted in the form data.
-
- Vlan/sub-interface are also affected.
I had to use a physical interface to make igmp proxy to work.
do we h... -
- Not sure this is the same issue as I reported in #8950, because in that bug IGMPProxy is not crashing (it runs untill...
-
- See also: #8950 (has more logs)
-
- I request a Button to copy a DNS entry in the Dynamic DNS (for both, RFC 2136 and Dynamic DNS Clients) Function. When...
-
- If #8948 is not a bug, then this is:
In the overview there is a Hostname shown when you write one into the hostnam... -
- Duplicate of #8935
-
- After upgrade from 2.4.3-p1 to 2.4.4 IGMPProxy (which is upgraded during the 2.4.4 upgrade) seems to be broken. When ...
-
- There isn't a way to set a whitelist currently. But if your monitoring system relies on a probe that is triggering an...
-
- I just want to chime in on this. I just updated my pfsense to 2.4.4 and very soon after I got notifications from my n...
-
Checking "Enable Network Booting" under "Display Advanced" and clicking Save doesn't record ...-
- Should I open a Bug then instead, that in the overview there is a Hostname shown when you write one into the hostname...
-
- With custom types you form the entire query in the Update URL, it doesn't do parameter substitution.
-
- When I add a custom URL for the Dynamic DNS Updater, I am unable to set the Hostname. Instead, I have to set it befor...
-
01:56 PM
Feature #8947 (Resolved): Cron based ACB option
- Provide a way to perform config backups via cron instead of on every change.
-
- How should I test this?
-
01:53 PM
Bug #8933 (Feedback): diagnostics -> backup/restore -> reinstall packages hangs
- Fixed in updater version 0.54
-
06:43 AM
Bug #8933 (In Progress): diagnostics -> backup/restore -> reinstall packages hangs
-
- This should be fixed now. Update the squid package and it should pick up the c-icap update and then work as expected....
-
- Attached is a patch to fix the c-icap FreeBSD port default config to use the correct current syntax.
-
- The upstream port is _not_ fine. See the file I linked. The FreeBSD port is explicitly adding the ListenAddress direc...
-
10:33 AM pfSense Packages Bug #8832: c-icap for Squid 5.1 on 2.4.4 Developer not starting
- Hi Jim,
the guy from the mailing list is me.
The "Listen" directive was removed from 0.4 to 0.5.
Upstream port... -
12:29 PM Bug #8429: radvd/IPv6 broken in 2.4.3 when using a LAN bridge
- This is still happening with 2.4.4 when using ue0 (USB ethernet) as the LAN interface.
ioctl(SIOCGIFMEDIA) failed on... -
-
- Fixed in 2.4.4 as reported by original submitter
-
06:29 AM Bug #8165: Fragmented at source IPv6 packets (UDP + ICMP Ping) are not forwarded / v2.4.2 AMD64
- Update - 25th September 2018 - applied upgrade to pfSense 2.4.4 which is built on FreeBSD v11.2. Confirmed that the ...
-
- When DHCP6 is enabled on an interface and Prefix Delegation is requested, there is nowhere in the GUI to see:
* wh... -
- pfSense-upgrade 0.53 will prevent users from installing / upgrading additional packages when there is a new major PHP...
-
- See also: #8944
-
- Duplicate of #8938
-
04:47 AM pfSense Packages Bug #8944 (Duplicate): attemp of installing pfblocker brakes system on 2.4.3
- Any attempt to install pfblocker on clean 2.4.3-p1 breaks system.
Errors during installation:... -
- If you saw these errors while still on 2.4.3, it's more likely due to an issue such as #8938 and not these errors spe...
-
- Jim Pingle wrote:
> In nearly all cases the messages during the upgrade are harmless. There may be some actual probl... -
- Not enough here for a valid bug report. Your WAN connectivity wouldn't have any correlation to DNS.
Start a post o... -
01:57 AM Bug #8941 (Not a Bug): After upgrading to 2.4.4, my primary gateway lost connectivity when used with Quad9 DNS
- Hi there.
After upgrading to 2.4.4 I suddenly lost all internet access. However, I noticed that my secondary gate... -
- Duplicate of #8849
-
03:36 AM Todo #8942: DHCP config
- *Is it possible to adding own lines to the configuration file of the dhcp server directly in the configuration of the...
-
- In some cases, you may need to add additional partitions to the dhcpd configuration file. Now I do it through editing...
-
- The i-cap issue is covered under #8832
-
- Hello,
When editing the Squid Guard Proxy Filter I noticed that the settings after saving are not loaded.
Example... -
-
- *3) it would be very convenient to divide the computers into groups in this menu in order to switch on the computers ...
-
- 1) In the WOL section I have about 200 lines. In order to add another entry (PC) you need to scroll down the entire l...
09/24/2018
-
- Duplicate of #8832
-
- After the upgrade I had a crash report but it seemed to run. But on a new restart of the pcengines APU2 it would not ...
-
- If it wasn't empty, then it was not this issue. This issue is specifically about an empty crash report.
-
- Just did the upgrade from 2.4.3-1 to 2.4.4 on a PC Engines APU2 and had this issue as well. Not an empty crash report...
-
- Harmless errors from the PHP 5.6 to 7.2 upgrade process. This was mentioned in the release announcement, the release ...
-
09:21 PM Bug #8939 (Not a Bug): Error upgrading Netgate SG-3100 to 2.4.4
- Error file generated after upgrade from 2.4.3-RELEASE-p1 to 2.4.4 on Netgate SG-3100 gateway device. The upgrade appe...
-
09:19 PM
Bug #8938 (Resolved): Installation of a package that depends on php72 on a version of pfSense older than 2.4.4-RELEASE breaks the pfSense install
- Install pfSense 2.4.3 and upgrade to 2.4.3_1, go to Available packages and see that the acme package version 0.3.2_3 ...
-
- If the FreeBSD port is wrong, though, it should be fixed upstream. Then we wouldn't need to make any changes.
Some... -
- Suggested fix: https://github.com/stephenw10/FreeBSD-ports/commit/d21954ad3b4e44e4df6e43e88ac22d589d8cf1b7
-
- This is a problem in the FreeBSD c-icap port. The port itself contains a patch that adds the ListenAddress line.
h... -
- Confirmed the above fix is still functional in 2.4.4r but the default package is still broken.
As a workaround you... -
- This still exists in 2.4.4
-
- I am using a LACP Bond over 4 Interfaces. When I look into the LAGG configuration, I am seeing the ether instead of h...
-
- Please add QuickAssist support to pfSense.
It has been coming soon for a while now and is even listed on SG-5100 pro... -
- I can reproduce this here on a couple different systems. I don't see any sign of @pkg@ running or any log entries sug...
-
- Trying to reinstall all system packages via diagnostic hangs at "Please wait while the update system initializes" in ...
-
- After upgrade from 2.4.3 to 2.4.4 IGMP Proxy will not start anymore.
Stops with following Error:... -
- Need to pull in the patches from r338406
See https://lists.freebsd.org/pipermail/freebsd-net/2018-September/051681... -
- Ah, I forgot that it automatically probes the "latest stable" repo which automatically points you to 2.4.4/RELENG_2_4...
-
- I can confirm that upgrading to 2.4.4 fixes it, as well as downgrading haproxy to 0.59_9 via: pkg add -f https://file...
-
- I agree "it shouldnt be". But i'm seeing my 2.4.3 box offer to install haproxy 0.59_11 .. which at least isn't availa...
-
- It shouldn't be, they are on different branches (RELENG_2_4_3 vs RELENG_2_4_4), the commit may have been manually che...
-
- It seems like 2.4.3 is automatically pulling in the 2.4.4 repository files..?? Even though the 2.4.3 files still exis...
-
- Well it sounds as if https://github.com/pfsense/FreeBSD-ports/pull/555#discussion_r212271252 got into 2.4.3?
-
- No, each release has its own branch. It's possible that an edit intended to only stay on 2.4.4 was picked back to 2.4...
-
- Are you saying that packages are served from one repo only and will more or less immediately break if a new release o...
-
- Upgrade to 2.4.4 and try again.
-
- I cannot upgrade to haproxy 0.59_11 because getarraybyref() no longer exists:...
-
- In nearly all cases the messages during the upgrade are harmless. There may be some actual problems discovered after ...
-
- Renato Botelho wrote:
> There is no easy way to prevent these warnings to show up on console. We are going to alert ... -
- Fix committed in Service Watchdog pkg version 1.8.6, which will be up shortly after 2.4.4-RELEASE
-
08:07 AM Bug #4584: Static Mapped clients on one LAN get a DHCP IP from another LAN even when Deny unknown clients is checked on the other LAN
- Hi,
I would like to bring this bug from the grave.
This still applies in latest versions and it's definitely a bi... -
04:29 AM Bug #8925: IPv6 RA Prefix Doesn't Match Interface Prefix ID
- Hi Jim,
Thanks for taking the time to try and reproduce this issue. I did create a forum issue last week (found he...
09/23/2018
-
- After hitting that uninstalling I'm unable to re-install:...
-
PHP errors
PHP ERROR: Type: 1, File: /usr/local/pkg/servicewatchdog.inc, Line: 83, Message: Uncaught Error: ...-
- The symptoms may be similar but the issue is not the same. Post to the forum or pfSense subreddit to discuss in detail.
-
01:45 PM Bug #7645: SG-1000 VLAN interfaces do not work without promisc mode
- After forcing promisc on cpsw1 vlan routing starts working so it seems the same as the issue from the ticket.
I can ... -
- This specific issue was resolved over a year ago. If you are having an issue, it's not likely to be this problem.
... -
- Has this issue been resolved? I have the same problem in the latest stable version of my SG-1000:
2.4.3-RELEASE-p1... -
- Just in case. So not see the issue on latest...
-
- Pi Ba wrote:
> You did 'apply' the new settings? (And refresh the page perhaps once after.?, it might lag a little b...
09/22/2018
-
- I can't reproduce this here. I have three local interfaces all set to track WAN with index 0, 1, 2 from a /60 delegat...
09/21/2018
-
- PR
https://github.com/pfsense/pfsense/pull/3989 -
- Small convenience fix. Currently when entering WOL page, the first interface (alphabetically) is selected. This is us...
-
08:33 PM Feature #8929 (New): Scroll bar css dark theme
- In my opinion the dark themes would be better if the white scroll bar would be changed to keep with the theme.
Addin... -
03:10 PM Bug #8927 (Resolved): PFsense 2.4.4 FreeRadius and Captive Portal Quota Problems
- Please I think the developers should look at the pfsense Captive Portal and FreeRadius Authentication very well. Apa...
-
- Looks good.
Added this to RADIUS user reply attributes:... -
-
-
- The main move is done. Specific possible bugs found should have new tickets
-
- To summarize:
I have one WAN and one LAN interface. The LAN (igb) interface also has an OPT interface for VLAN...
09/20/2018
- 09:49 PM Revision 66491555: gateway monitoring, wait for apinger to terminate or remove its pid file when restarting it.
-
- I tested this in 2.4.4r and was unable to replicate the issue.
I created and assigned a 3 interface LAGG and adde... -
- Why would that matter now? What loss of functionality is there? You can select it specifically, or setup a gateway gr...
-
- Sadly now i cant move my fiber gateway above the old adsl wan interface anymore.. I know i want it, but the gui wont ...
-
- without this, only legacy IP records get updated correctly.
redmi ticket: https://redmine.pfsense.org/issues/8924 -
- You did 'apply' the new settings? (And refresh the page perhaps once after.?, it might lag a little bit while setting...
-
- This seems to fix it: https://github.com/pfsense/pfsense/pull/3987
-
- Added some logging:...
-
- In a clean 2.4.4 saved the repo to give this config:...
-
02:57 PM Bug #8693: Filter rules error after deleting VIP
- FYI, I just got caught by this same problem, also on 2.4.3-p1. However in my case it was on my WAN interface where I...
-
- FreeDNS currently is set for not needing ip, therefore pfSense just calls the update url with the user given record t...
-
01:14 PM Todo #6647: Enable Additional Security Headers
- This 2016 presentation by two security researchers at Google might be useful when considering a CSP:
https://speak... -
-
-
-
-
-
-
- Duplicate of #7604 which is fixed in 2.4.4.
-
- This is with SG-3100 appliance, 2.4.3p1
For testing purposes, I want to restore config from XML where the WAN inte... -
-
- PR: https://github.com/pfsense/pfsense/pull/3985
-
- I found some bugs with system.inc and system.php while troubleshooting a recent issue.
quick repro (2 different bu...
09/19/2018
-
-
-
-
-
- Using 2.4.4-RC (amd64) built on Tue Sep 18 17:52:29 EDT 2018
I've installed a new pfSense VM with 3 wan interfac... -
06:44 PM pfSense Packages Feature #8613: pfSense-pkg-acme: acme_certificates_edit.php - Add support for --challenge-alias acme.sh flag
- Thanks for this nifty feature. It works well in most cases.
I've seen an issue with some DNS-Providers which are n... -
- (cherry picked from commit e2f60597df488cf073d14913d8a523cbb447f733)
-
-
- (cherry picked from commit 124ca365049368460598621f962ad0b4f5459d7a)
-
-
- Applied in changeset commit:e2f60597df488cf073d14913d8a523cbb447f733.
-
- Edit the first user in the list on system_usermanager.php and add a certificate. When finishing the certificate add, ...
-
11:55 AM Feature #6240: vxlan driver
- +1
-
- Applied in changeset commit:124ca365049368460598621f962ad0b4f5459d7a.
-
- When saving on DHCP or DHCPv6 relay when the settings tag is empty (e.g. @<dhcrelay></dhcrelay>@), PHP errors are enc...
-
- Fix coming in OpenVPN Client Export package version 1.4.17_2
-
- When attempting to export a VPN configuration for a user, if that user's ID is 0 then the username is not added to th...
-
- This looks good on current snaps. The case I had that broke repeatedly before now comes up with the expected WAN gate...
-
-
- > 2.4.4-DEVELOPMENT (amd64)
> built on Tue Sep 04 10:04:12 EDT 2018
> FreeBSD 11.2-RELEASE-p2
That snapshot is v... -
07:22 AM Bug #8912: User Certificate error
- It worked after a complete shutdown.
09/18/2018
-
10:49 PM pfSense Packages Bug #8904: Shellcmd: pfBlocker's earlyshellcmd is being removed at boot
- Added *Shellcmd package* functionality to *pfBlockerNG-devel* here:
https://github.com/pfsense/FreeBSD-ports/pull/56... -
- A previous fix to shellcmd to address PHP errors changed it from using references to using a copy of the config, whic...
-
-
-
- 2.4.4-DEVELOPMENT (amd64)
built on Tue Sep 04 10:04:12 EDT 2018
FreeBSD 11.2-RELEASE-p2
PHP ERROR: Type: 1, F... -
- and gateway failure events. Try to make the logs readable again,
while still allowing verbose logging if needed via a... - 06:27 PM Revision da266efd: Don't allow deletion when spoofing another userkey
- (cherry picked from commit 3fd4f32c344573addea1dbb44dddef63b0e793e3)
- 06:27 PM Revision b1aa3932: Fixed #8901
- (cherry picked from commit d33560e8dcba496a553f33c50113877778c3274b)
- 06:19 PM Revision 8c60e7ef: JimP already fixed it
- Revert "Fixed #8913"
This reverts commit fc575f17b66cab903b1241a060180295788e4728. - 06:14 PM Revision fc575f17: Fixed #8913
-
-
- (cherry picked from commit 26e1525c153a672457a92d65f9c05d45b43a204d)
-
- Applied in changeset commit:51c3546dd77b9efbd53ace478b991ea530bc0a98.
-
-
- If you have a DHCP dynamic gateway set as the default in 2.4.3 you may or may not have an entry for it in the <gatewa...
-
04:43 PM Bug #8905: status_logs_settings.php PHP errors on 2.4.4 snapshots
- Perfect. That one liner fixes the issue I saw.
Jim, thanks for the quick fix!
Steve, thanks for the QA check! -
03:53 PM
Bug #8905 (Resolved): status_logs_settings.php PHP errors on 2.4.4 snapshots
- Tested with an older version of 2.4.4 and was able to reproduce the error. Upgraded to 2.4.5 current and no longer se...
-
- Applied in changeset commit:508c66ace779a6021b217d055b53587fdb021fec.
-
- ...and as soon as I posted that, I managed to reproduce it with an empty syslog section here. The patch did fix it fo...
-
- I still can't reproduce that here but can you try the attached patch? Apply it either by making the edit by hand or u...
-
04:37 PM
Bug #8913 (Resolved): system_update_settings.php - PHP Error
- Tried on latest with gitsync and no errors seen when toggling the disable dashboard check. Moving to resolved.
-
- Applied in changeset commit:30213bb09a6be9769352700e9bdf32f8be6f9b61.
-
-
12:49 PM Bug #8913 (Resolved): system_update_settings.php - PHP Error
- Getting PHP Error when I try disabling the dashboard check under System > Update > Update Settings.
Running 2.4.4 ... -
-
-
- without this, clicking edit on existing CA goes to wrong screen
and breaks Save button
(cherry picked from commit 33... -
-
- without this, clicking edit on existing CA goes to wrong screen
and breaks Save button -
- In some cases a crash report is presented at first login after upgrading but the report contains no crash data and no...
-
- There is no easy way to prevent these warnings to show up on console. We are going to alert users about it in release...
-
- When a gateway failure/defgw switch event occurs, there seem to be some code paths that get iterated over dozens of t...
-
- (cherry picked from commit 508c66ace779a6021b217d055b53587fdb021fec)
-
-
- Applied in changeset commit:0430b1b4ea7de0ce5d10b202af218140c59b9ecd.
-
- When restoring a config file from an older version of pfSense into a newer version it's possible to end up with the p...
-
- Something in your config or parameters is incorrect, but more importantly, you are several versions out of date. Upda...
-
- Hello,
I'm trying to create a new user for VPN access, I have tried creating cert within user creation and from cert... -
- Thanks, looks good to me, PR merged.
-
- on RC 2.4.4.r.20180917.0837 - there was a glitch with this. I created PR#3982 to fix:
https://github.com/pfsense/pfs... -
- I just realizd that each time the tincd(8) daemon is started, pfSense detects the new IP address on its dedicated int...
-
- *Current behavior.* I have 3 GW and create GW group from 2 them with different Tiers. E.g. GW3 is marked as @(default...
-
- Do not observe the issue on 245-dev...
-
-
- Effectively override any default setting.
-
- And also GW obtained from DHCP are always at bottom regardless name. I mean *WAN_DHCP* is lower than manually added *...
-
- I've checked on 245, it works, I do not observe extra GW 0 and php warning:...
-
09/17/2018
-
- Reported in redmine https://redmine.pfsense.org/issues/7609
-
- > Does your config.xml have a @<syslog>...</syslog>@ section? If so, what is in it?
Hmm, this is rather strange. ... -
- I can't reproduce that here. I took a system that had never had syslog settings changed on it since the last factory ...
-
- 08:22 PM Revision 3fd4f32c: Don't allow deletion when spoofing another userkey
- 08:05 PM Revision d33560e8: Fixed #8901
-
- Also, I should probably redo this patch in pure PHP and use *dns_get_record()* http://php.net/manual/en/function.dns-...
-
- Pull request https://github.com/pfsense/pfsense/pull/3981
- 04:55 PM Revision 23b2c59e: Revise async_crypto setting
- 04:53 PM Revision 382fa81d: Fixed #8880
-
03:21 PM Bug #8070: IKEv2 IPSec tunnel under load crashes pfSense when AES-NI is enabled
- Paul Youngberg wrote:
> Jan Jurkus wrote:
> > I want to refer you to this forumpost: https://forum.pfsense.org/inde... -
- Reported by: stevew
Ticket: #8906
Pointy-hat to: loos
(cherry picked from commit 0285d8e5c721491c7e8ae8d... -
- Reported by: stevew
Ticket: #8906
Pointy-hat to: loos -
- On install, shellcmd imports the items from the earlyshellcmd tags and reformats them into the shellcmd package setti...
-
- This commit was not cherry-picked from master branch. Can you validate the fix on a 2.4.5 snapshot? I did the cherry-...
-
- Please check again with a newer image.
-
- Done
-
- Fixed in commit:59e2c01227cc on factory-ports, aws-wizard pkg version 0.7_2 will contain the fix when it builds.
-
- A FL wrote:
> I found a small issue with RADIUS bw limits however : pfsense-Bandwidth-Max-Up/Down have to be written... -
- Tested it again here and it works.
User in FreeRADIUS has:... -
-
- Yes, this seems to be fixed for a while now (the upgrade was fun since it broke my workaround :D)). Thanks!
-
- Sorry, you're right, this is the -devel package. I'd forgotten I'd installed that.
I agree the earlyshellcmd issue... -
04:22 AM pfSense Packages Feature #8523: make cookie inserted by haproxy secure
- Thank you! I do see the secure option in haproxy version 0.59_9.
Where did you add another options?
09/16/2018
-
- The file wizard.php - $field['type'] option "Select" doesn't have the attribute "Size" defined.
From:... -
- Posted two PR to fix these issues and add other improvements.
https://github.com/pfsense/FreeBSD-ports/pull/567
h... -
- Steve, Are you sure this is not from pfBlockerNG-devel?
https://github.com/pfsense/FreeBSD-ports/blob/devel/net/pf... -
- This error looks to be triggering an unrequired config update:...
-
- Sorry clipped the line in the copy there. Actual warning is:...
-
- Seeing this on a clean install of pfSense-2.4.4.r.20180914.1530 and restoring an existing config....
-
- Info:
Working on testing the latest snapshots and I'm unable to add remote syslog on 2.4.4 snapshot (pfSense-2.4.4... -
- The Shellcmd package is incorrectly removing the pfBlocker early shellcmd entry at each boot....
-
- Pi Ba wrote:
> Hmm, i suppose your right.
>
> You could add below to the 'global advanced pass thru', that should... -
- Hmm, i suppose your right.
You could add below to the 'global advanced pass thru', that should solve the issue.
<... -
- Package Version:
haproxy-devel net 0.59_9
Package Dependencies:
haproxy-devel-1.8.13
cat /etc/version
2.4.3... -
- Well, I made some tests :
h2. Basic RADIUS auth (Diag > Auth test)
-> Good (working correctly)
h2. GUI RADI... -
- Keep it open until checking on next build, which contains current patch.
-
-
- Latest 14 Sep RC snapshot does not contain commit @a155dc5ec2278e0a344afa221127b8503d4e225e@ with this patch. But iss...
09/15/2018
-
- Fixed: https://github.com/pfsense/FreeBSD-ports/pull/567
-
- Crash report begins. Anonymous machine information:
Current Base System 2.4.4.r.20180914.1544
amd64
11.2-RELE... -
- ran arpping package 1.2.2_1, executed ping to mac, hover menu's don't populate, no crash recorded
ran package iperf ... -
- 2.4.4-RC (amd64)
built on Fri Sep 14 15:45:39 EDT 2018
FreeBSD 11.2-RELEASE-p3
Factory install aws-wizard: F... -
11:57 AM
Bug #7892: AutoConfigBackup status reported incorrectly
- This seems to be presenting in another way also, where System Log will show a successful backup, despite the backup n...
-
- I've added a bunch of cookie options.. Does it work for you?
-
- The server configuration now allows separate activation of ssl for regular traffic and for health-checks. That should...
-
-
- I am no longer seeing these errors.
09/14/2018
-
- (cherry picked from commit 1ef4cbdbb03791f5c3541df44da5a61d00db6e46)
-
- (cherry picked from commit fe7523cbbdee119bf71abb93009f44a9f8e47963)
-
- The know variables should be used as prefix not as literals.
(cherry picked from commit 21bacf010021d34012f6869ce1d5... -
-
-
- The know variables should be used as prefix not as literals.
-
- You are right that one page is inconsistent with the rest. They should all be done the same way. Not going to hold ba...
-
- I can't reproduce this. I setup a GRE interface and static routes, rebooted 10 times and every time the routes were t...
-
- Hello,
Version tested: 2.4.3-RELEASE-p1 (amd64)
Steps to reproduce:
1. Add a GRE tunnel
2. Add some static ro... -
-
-
- RADIUS auth works fine when configured correctly. The subject is incorrect, or at least misleading. It works with the...
-
04:19 AM Bug #8897 (Not a Bug): RADIUS WebUI login with RADIUS does not work
- Hi all,
I setup FreeRADIUS as a RADIUS server and try to login to the WebUI then.
It is not working since the retur... -
- Update strongswan to 5.7.0
-
- Rajil Saraswat wrote:
> I am seeing the same crash on pfSense-CE-memstick-2.4.4-DEVELOPMENT-amd64-20180904-1004.img ... -
- Applied in changeset commit:352d49787dc5742ea53dd81ff82fef5f37b246db.
-
- Also, i18n
09/13/2018
-
- Deleted issue #8894. This is similar to #8845 but insists on 3172, not 2048.
-
- The change above substitutes '_' with '_<wbr>' which is the same method used on other NAT pages. The '<wbr>' signals ...
-
- It's done deliberately to avoid long aliases preventing wrapping. #7249
-
- I notice that underscores are being replaced with spaces in alias names on Firewall > NAT > Outbound.
It's not consi... -
-
07:59 PM
Bug #8892: 2.3.5_2 does not offer update to 2.4.4-RC
- Tested 2.3.5_2 -> 2.4.4-RC without any manual intervention. Looks good.
-
- pfSense-upgrade 0.51 (2.4.x) and 0.27_14 (2.3.5) are fixed
-
- After selecting stable 2.4.x updates:...
-
01:26 PM
Bug #8892 (Resolved): 2.3.5_2 does not offer update to 2.4.4-RC
- A user on 2.3.5, who upgrades to 2.3.5_2, then tries to upgrade to 2.4.4-RC is not able to see 2.4.4-RC.
Even on t... -
07:04 PM Feature #1189: Gateway: Multiple monitor ips
- Openwrt mwan3 package has multiple monitors which can be tracked, https://wiki.openwrt.org/doc/howto/mwan3#interface_...
-
10:55 AM Feature #1189: Gateway: Multiple monitor ips
- Just going to add to the chorus here.
We encountered routing issues (their side, whole country affected) with one ... -
- I am seeing the same crash on pfSense-CE-memstick-2.4.4-DEVELOPMENT-amd64-20180904-1004.img running on Supermicro C35...
-
- Can't reproduce any errors on gateway status in the latest RC build, even without @<gateway></gateway>@ tags in the c...
-
- Fix tests OK with a gitsync to RELENG_2_4_4, but the fix is not yet in the RC images, will be in -RELEASE.
-
- Fixed on latest RC snap.
-
- Blank entries are not displayed on current RC snap and they do not cause PHP errors.
-
- Invalid combinations mentioned here are rejected on current RC snap
-
- Can't reproduce on RC snap on the same box where it happened previously. Looks good.
-
-
-
- Still waiting on someone that can reproduce it to confirm if it still happens. May be fixed, but we won't know for ce...
-
- No feedback after a month, we do not have accounts there to test. Assuming it's OK based on lack of complaints.
09/12/2018
-
- Rather than assume they are present, create the arrays before use.
(cherry picked from commit 7c15c19d76eac725c42133... -
- Rather than assume they are present, create the arrays before use.
-
- Also content in /var/unbound/dhcpleases_entries.conf stays unchanged after uncheck the boxes and save, so unbound can...
-
- Jim Pingle wrote:
> Those directives are always present. The contents of those files are what matter.
OK, I looke... -
- Those directives are always present. The contents of those files are what matter.
-
- uncheck "DHCP Registration" and "Static DHCP" in WebGUI doesn't change unbound's behavior.
@# Static host entries... -
- (cherry picked from commit d9064f0b92452daeaf0cb7f0a0e74561f246ed5b)
-
-
05:31 PM
Bug #8888: Memory Leak/loop 99% used Ramdisk band aid.
- You should post in the forums.
Something else is wrong with your setup, this affects only you, thus us in the commun... -
11:24 AM Bug #8888: Memory Leak/loop 99% used Ramdisk band aid.
- Jim Pingle wrote:
> Looks like it's all configuration issues there, not a memory leak, but there is not enough detai... -
- Looks like it's all configuration issues there, not a memory leak, but there is not enough detail to call it a bug by...
-
- Sorry those screen shot above turned out like crap
Better one's.
[[https://ibb.co/fMe2X9]]
[[https://ibb.co/mUUf... -
- I am Ruining 2.4.3-p1. I have tried every thing from No Plugins, to Ramdisk Via var. I can Control it if I running a ...
-
- If a CRL contains no certificates, a PHP error appears in the contents of the page...
-
- Applied in changeset commit:7c15c19d76eac725c42133012488cb97e4dcd885.
-
- If you remove LAN and then add it back, then run the Setup Wizard, a PHP error will result.
Removing the LAN remov... -
11:40 AM
Bug #8868: multiple php errors on update
- Upgrading to 2.4.4-RC from Sept 11, the php errors are still present.
https://netgate.slack.com/files/U32BGSZBP/FC...
09/11/2018
-
- A while ago I added a code on pfSense-upgrade to cleanup crash report when PHP major version changes. I couldn't repr...
-
- Steve Wheeler wrote:
> Still seeing one of those PHP warning updating to todays image:
>
> [...]
This one shou... -
- Still seeing one of those PHP warning updating to todays image:...
-
- (cherry picked from commit 3b55fc639cdea2be20d55113055fd511ba193866)
-
-
-
-
-
-
- For fix this issue maybe better not add IP at all if look to documentation: http://www.squid-cache.org/Versions/v3/3....
-
- Package Version:
squid www 0.4.43_1
Package Dependencies:
squid-3.5.27_3
cat /etc/version
2.4.3-RELEASE
c... -
03:20 PM Todo #8886 (Not a Bug): Update downloads page once hybrid iso/img installers are implemented
- Once hybrid iso/img installers are implemented, we can remove the ISO and just have the hybrid memstick option for t...
-
-
-
- Package Version:
haproxy-devel net 0.59_9
Package Dependencies:
haproxy-devel-1.8.13
cat /etc/version
2.4.... -
-
-
- Needs more thought/testing than we'll have time for to make 2.4.4. There are workarounds on the linked forum thread f...
-
- Applied in changeset commit:59c2e21d4f903ebaed3af861aeecab9b7e94d037.
-
07:53 AM Bug #8883: Default route order set in Routing not honored
- Though, as food for thought: ...
-
- Thanks for your time. I'll just keep the changes locally.
-
- It may appear to "work" for you but it is not a general fix that will work across all platforms, and may not behave c...
-
- I have created a fix (above) so clearly there can be something done in your code. The fix does not break current conf...
-
- Having two interfaces in the same subnet is not supported, nor is having two interfaces with the same gateway.
The... -
- I propose the following fix on /etc/int/system.inc line 755:...
-
- this is on amd64, by the way.
-
- I have two interfaces:
- xn0: 10.0.0.253, gateway 10.0.0.1 (WAN)
- xn1: 10.0.0.254, gateway 10.0.0.1 (WAN2)
If I... -
06:05 AM
Bug #8880: [PHP7] warning on system_gateways.php and extra item in gateways table
- Applied in changeset commit:a155dc5ec2278e0a344afa221127b8503d4e225e.
-
- Applied in changeset commit:885cf6a751f076f43fa89167ba2a79f779244f1b.
-
- Applied in changeset commit:b54a1af45c5add4e57253bfa0b562dadf3ae10f7.
09/10/2018
-
- I'm running pfsense in AWS and I'm trying to route out of xn1 (second interface) instead of xn0 (using it as a sync i...
- 07:00 PM Revision a155dc5e: Fixed #8880
- 06:58 PM Revision ccabd09f: Merge branch 'master' of gitlab.netgate.com:pfsense/pfsense
-
- This reverts commit da54e84ae79328a87b4a319239bb1b14d7ed2ce6.
-
- This reverts commit da54e84ae79328a87b4a319239bb1b14d7ed2ce6.
-
02:01 PM
Bug #8880 (Feedback): [PHP7] warning on system_gateways.php and extra item in gateways table
-
- Configs for reproducing bug _only Netgate has access_ https://drive.google.com/file/d/1N8hgWGgN4ccwUB0ldBpjGQFZdRo96m...
-
- 244-RC...
-
01:21 PM
Bug #8815 (In Progress): IP addresses are removed from interfaces when link is lost and either IPv4 or IPv6 is dynamic
-
01:21 PM
Bug #8815: IP addresses are removed from interfaces when link is lost and either IPv4 or IPv6 is dynamic
-
12:51 PM pfSense Packages Bug #8139: LADVD not working on LAGG interfaces
- Based on the discussion in the repo (https://github.com/sspans/ladvd/issues/36), the FreeBSD port has been updated: h...
-
- This apparently fails despite previous reports of manual edits working. See
https://forum.netgate.com/post/788458
... -
04:37 AM pfSense Packages Feature #8232: different ssl options based on the sni name
- Hi Pi Ba,
looks like this patch not work with the most recent version of pfsense 2.4.3 P1. Can you check please?...
09/09/2018
-
- The creator of the LADVD package is saying this is likely fixed in his 1.1.2 implementation, and PFSense is still usi...
-
08:06 AM Bug #8527: VLANs losing parent interface on LAGG change
- I still saw this issue on 2.4.4.r.20180905.2249
09/08/2018
-
- Should have something up on Monday to try with gitsync at least, hopefully an RC as well.
-
- Okay thanks. So wait for a RC build now or gitsync to test.? Seems snapshots don't get updated a.t.m. .
-
- Created issue to track in official repo:
https://github.com/sspans/ladvd/issues/36
09/07/2018
-
- Yep I hit this one a couple of days ago, on whatever snap was latest as of 9/5
pkg goes braindead in some way if t... -
-
- Issue can be closed, already merged on GitHub
https://github.com/pfsense/FreeBSD-ports/commit/b7c4da7878f8da6169c5... -
- (cherry picked from commit 885cf6a751f076f43fa89167ba2a79f779244f1b)
-
-
- pfSense uses ISC DHCPD for DHCP, not dnsmasq. ISC DHCPD doesn't have a way to force an option in quite that same mann...
-
09:11 AM Feature #8879 (New): DHCP options ADD force options
- DHCP server offer the possiblilty to add DHCP options.
Maybe add for options the possibility to force the options (w... -
- I just pushed another bit of input validation to prevent VTI from being selected on mobile IPsec. That should hopeful...
Also available in: Atom