Activity
From 10/13/2018 to 11/11/2018
11/11/2018
-
06:53 PM pfSense Packages Bug #9108: OpenVPN client without "explicit-exit-notify" does not trigger client-disconnect portion of /usr/local/sbin/openvpn.attributes.sh
- Sorry, forgot the pre tags:...
-
- In relation to Feature Request #9805, to avoid overriding the default client-connect/client-disconnect script I reloc...
-
01:55 PM pfSense Packages Bug #8607: Suricata package fails to prune suricata.log
- This problem is addressed by the pull request https://github.com/pfsense/FreeBSD-ports/pull/592 that updates the GUI ...
-
10:13 AM Bug #8489: DHCPv6 Client Failure to Initialize with "Do not wait for RA"
- Matt _ wrote:
> For the original issue,
>
> [...]
>
> seems to fix this, as well as disabling any checksum off... -
- Renato Botelho wrote:
> FreeBSD r339863 was cherry-picked to RELENG_2_4_4
I updated to the latest snapshot as of ...
11/10/2018
-
05:03 PM Bug #9004: Default gateway IPv4 set to a group fails after restart on 2.4.4
- Daniel Williams wrote:
> This is repeatable.
+1, i have had the same.
Also
https://www.netgate.com/blog/pfsen... -
04:02 AM Bug #7972: Captive portals do not synchronize voucher data in both directions
Renato wrote:
> When voucher is used, disconnected or expired, sync it in both
> directions using HA main infor...
11/09/2018
-
09:12 PM
Bug #9105 (Resolved): WebGUI option toggles that need nginx restart are not triggering when disabled
-
09:12 PM
Bug #9105: WebGUI option toggles that need nginx restart are not triggering when disabled
- Tested on 2.4.5.a.20181109.1326, works as expected.
-
01:42 PM Bug #9107 (Closed): New AutoConfigBackup - Cannot Access Settings When Not Connected to Internet
- I have a router I had an issue with. I am moving it over to new hardware, because the old hardware does not support ...
-
12:45 PM Bug #9106 (Resolved): strongSwan 5.7.1 will not start on some 2.4.4/2.4.5 systems, log shows "charon has quit: integrity test of libstrongswan failed"
- Some users on 2.4.4 and 2.4.5 snapshots with strongSwan 5.7.1 have found that IPsec is not working.
strongSwan will ... -
10:57 AM Revision dfbf0d5f: Fix #9102: Suppress stream_select() undesired warnings
-
-
09:34 AM Bug #9054: Gateway Group slow (or never) to switch back to Tier 1
- Also i noticed in my case helps when restart openvpn client.
After restart OpenVPN, vpn and other traffic switch bac... -
- Did you try restart service dpinger? In my case this helps switch back to WAN1
-
- Set to trigger level "Packet Loss or High Latency"
I will set trigger level "Member Down" and let you know on monday... -
08:10 AM Bug #9054: Gateway Group slow (or never) to switch back to Tier 1
- @VasylSemenchuk Are your gateway groups set to trigger level "Packet Loss or High Latency" or "Member Down"? Does it ...
-
- The same problem on all my devices (20 devices) after upgrading
-
08:09 AM Bug #9049: IPSec statuspage shows both connected and connecting tunnel
- Ges Ture wrote:
> Since bugnumber 8117 has been served off as not a bug, and no further response is given I'd like t... -
07:28 AM Bug #8001 (Feedback): Invalid FQDN in alias causes alias table to fail *silently*
- Should be fixed by the new filterdns (see #8758 too).
If you have issues, please let us know.
-
- Fixed in the new filterdns.
-
- This issue was one of fixes included in the new filterdns (version 2.0).
If you still have issues, please let us k... -
- Applied in changeset commit:e1a6074dc8918d756a73efc8cf251318b735f000.
-
-
11/08/2018
-
- (cherry picked from commit 8207fac69158ad4a56deab4a4b4f6f4c3c361b81)
-
-
-
-
01:30 PM pfSense Packages Bug #9082: freeradius eap-tls CA validation trying to use fields that may not exist
- can confirm. it is working.
-
- Fixed in pkg version 0.15.7
-
- Looks like the config shouldn't put a trailing @/@ on the subject.
Though the more I think about it, I wonder why ... -
08:49 AM pfSense Packages Bug #9082: freeradius eap-tls CA validation trying to use fields that may not exist
it's in the right order :
Auth: tls: Certificate issuer (/C=FR/ST=Ain/L=Jassans-Riottier/O=pfvpn/emailAddress=...-
12:58 PM Feature #8284: Add duplicate option next to OpenVPN servers and clients
- Ivor Kreso wrote:
> It would be very convenient to have a "duplicate" icon next to OpenVPN servers and clients list.... -
- Applied in changeset commit:8207fac69158ad4a56deab4a4b4f6f4c3c361b81.
-
- Some of the option GUI toggles like the WebGUI redirect are supposed to trigger a restart of nginx when they change. ...
-
-
11:21 AM Bug #9067: PHP error when installing first package with empty installedpackages tag
- I've upgraded to:
2.4.5-DEVELOPMENT (ARM)
built on Wed Nov 07 16:23:36 EST 2018
FreeBSD 11.2-RELEASE-p4
Conf... -
- ntopng appears to have removed all of that code. It went from enable-flow-activity to enable-flow-scripts to enable-u...
-
10:28 AM pfSense Packages Todo #9041: update ntopng 3.6.0
- Jim Pingle wrote:
> The activity map is not relevant to this ticket, only the version, which appears to be OK.
>
... -
- The activity map is not relevant to this ticket, only the version, which appears to be OK.
FYI: ntopng disabled th... -
12:55 AM pfSense Packages Todo #9041: update ntopng 3.6.0
- On 2.4.5-DEVELOPMENT (arm) built on Mon Nov 05 15:36:37 EST 2018 FreeBSD 11.2-RELEASE-p4:
I don't see activity map o... -
09:57 AM Feature #9104 (Resolved): Add a FAT32 partition to memstick installer images
- Adding a FAT32 partition on the installer image, as we have on ARM recovery images currently, means:
* We can drop... -
-
-
- Seems good to me. This issue be marked as resolved.
-
- Jane Doe wrote:
> The fall back seems not to respect the setting *Use custom captive portal page* as it always shows... -
- This but only applies to installer image, not to installed system. Our memstick installer image uses MBR since May, w...
-
-
11/07/2018
-
- On 2.4.5-DEVELOPMENT (arm) Mon Nov 05 15:36:37 EST 2018 FreeBSD 11.2-RELEASE-p4:
Created a test cert, then opened... -
- On 3100 2.4.5-DEVELOPMENT (arm) сделан Mon Nov 05 15:36:37 EST 2018 changed language to Russian, then logged out and ...
-
08:38 PM Bug #8465: Lost default gateway after recover from failover with CARP VIP and HA
- I'm having the exact same issue with 2.4.4. Using IPs outside the WAN-VIP subnet on the WAN interfaces forces the d...
-
- No negative feedback from testing, time for a wider push.
This helps with third party devices that require 0.0.0.0/0... -
- No negative feedback from testing, time for a wider push.
This helps with third party devices that require 0.0.0.0/0... -
- The default action is to validate the certificate. If the user knows the
server does not have a valid certificate (e.... -
- The default action is to validate the certificate. If the user knows the
server does not have a valid certificate (e.... -
- Seems like the order in which cert fields are presented is also an issue. Still getting error despite matching exactl...
-
- Fixed in pkg version 0.15.6.
Fields left blank will not be added to the subject to validate.
If someone was rel... -
- Applied in changeset commit:5c4aa94a90256b13b19209f11e4c75b2d0e85ece.
-
- Applied in changeset commit:7da466e1c4b6873b9fb80e862faf8f799a6d4531.
-
- Duplicate of #8964 (it came later, but has more detail and comments with additional info)
-
- This was picked back to 2.4.4 last week. Looks good, no complaints or errors encountered.
-
- Looks like that might be something in FreeBSD but needs more research. It doesn't seem to matter if @console="efi,com...
-
- In that case, it is NOT a routed setup, so the document is not relevant to what the user is doing.
-
07:11 AM pfSense Docs Correction #9103 (Rejected): Feedback on Routing — Routing Public IP Addresses
- *Page:* https://www.netgate.com/docs/pfsense/book/routing/routing-public-ip-addresses.html
*Feedback:*
If the u...
11/06/2018
-
- (cherry picked from commit 3fec247042a91642a22a8761d3c8a1f9df119817)
-
-
- (cherry picked from commit 9aa8f6a864905c0e3738c337a51f0772b0c5eb93)
-
-
- (cherry picked from commit ca4456b95c53e89cf6b428a999ae15367b753073)
-
-
- Tested against:
2.4.5-DEVELOPMENT (amd64)
built on Tue Nov 06 11:45:54 EST 2018
After restoring a config with p... -
- Tested against:
2.4.5-DEVELOPMENT (amd64)
built on Tue Nov 06 11:45:54 EST 2018
Repeated above steps. Log setti... -
02:03 PM Bug #9101 (New): Traffic Graphs/Dashboard Slows Downloads Being Performed by the Same Firefox Browser
- Based on a forum post I performed some testing.
If I started a download in Firefox then used the same Firefox brow... -
- The console order appears to be correctly forced:...
-
- Tested against:
2.4.5-DEVELOPMENT (amd64)
built on Tue Nov 06 11:45:54 EST 2018
With serial console enabled loa... -
- Applied in changeset commit:3fec247042a91642a22a8761d3c8a1f9df119817.
-
- In the CA and Cert lists, if an entry has a valid end date after the UNIX timestamp signed 32-bit int rollover time i...
-
- Applied in changeset commit:9aa8f6a864905c0e3738c337a51f0772b0c5eb93.
-
- CA and Certs get the correct/expected end date in the data, but the GUI doesn't show the dates. Moved that to #9100
-
- FreeBSD r339863 was cherry-picked to RELENG_2_4_4
-
11:22 AM pfSense Packages Bug #8607: Suricata package fails to prune suricata.log
- I also got hit by this now when trying to open suricata.log. The crashing suricata.log file was 103MB. Suricata.log o...
-
- Applied in changeset commit:ca4456b95c53e89cf6b428a999ae15367b753073.
-
- If the config.xml contains an empty certificate (@<cert></cert>@) it leads to a PHP error when attempting to add a ne...
-
-
08:51 AM
pfSense Packages
Bug #8491: ACME: DNS-Luadns not working
- Problem is solved.
-
- With the Gateway Group set to "Packet Loss or High Latency" this problem definitely shows up much more often.
-
04:10 AM Bug #9058: Kernel panic during L2TP retransmit
- This seems to be an upstream bug in FreeBSD mpd5 - today I got the same crash on my L2TP Server (FreeBSD 11.2-RELEASE...
11/05/2018
-
- Verified that the checkbox toggles the AllowAgentForwarding in sshd_config and that agent forwarding is both enabled ...
-
- (cherry picked from commit 8bd36425b4bc46e5bbcc940a4d20bfbb2a0011ba)
-
-
- (cherry picked from commit 4c4e294b0f1523827fa21066521674a435c8f670)
-
-
- Avoids foot-shooting by restoring a config with serial enabled.
(cherry picked from commit 5e5df38fcd3116c4d0f3fc716... -
- (cherry picked from commit 2f73f2f9eca656c2de5b836f4d0292186147e788)
-
- Avoids foot-shooting by restoring a config with serial enabled.
-
-
- The default lifetime on a CRL is 9999 days, which currently puts it expiring in 2046. On ARM, this seems to lead to a...
-
02:50 PM Bug #9081: signed long rollover in "Log file size (Bytes)" can cause self-inflicted DoS
- That'll do. I mean, other than actually fixing clog. But that is a whole other ball of wax and just another reason ...
-
- Applied in changeset commit:8bd36425b4bc46e5bbcc940a4d20bfbb2a0011ba.
-
02:36 PM Bug #9097 (Resolved): ECL can't locate config.xml unless device is MBR-partitioned
- Follow-on to #9089, but this one needs to be fixed in code, IMHO:
* GPT devices show up as da1p1, not da1s1, so ca... -
- Applied in changeset commit:4c4e294b0f1523827fa21066521674a435c8f670.
-
- If config.xml contains no log settings, but has an empty syslog section (@<syslog></syslog>@) this can lead to a PHP ...
-
02:17 PM Feature #9096 (Resolved): Login Page: Make pfSense Login Page Tab Name More Unique
- Currently, the tab name (i.e., the name that appears in the tab in Google Chrome and other browsers) for pfSense's Lo...
-
- Fixed.
-
- Applied in changeset commit:5e5df38fcd3116c4d0f3fc71622643e962f982a8.
-
- We have code in source:src/etc/inc/pfsense-utils.inc#L1226 that checks for the MBT models and sets @$hdmi_only@ but t...
-
- Applied in changeset commit:2f73f2f9eca656c2de5b836f4d0292186147e788.
-
- Fixed in php-pfSense-module 0.65
-
- If all of your interfaces are assigned, none are free to be added to a lagg. This is normal and not a bug. Post on th...
-
06:07 AM Bug #9093 (Not a Bug): Blank Parent Interfaces while creating LAGG
- Hi Team,
I am using 2.4.4 physical and 2.4.3 on a VM, while creating a new LAGG I see that the Parent Interfaces s... -
11/04/2018
-
03:16 PM Feature #9092 (Resolved): Option to set interval of forced Dynamic DNS updates
- I use dy.fi dynamic DNS service. It requires refreshing the IP every 7 days (even if it does not change) or it is rel...
-
03:07 PM Feature #9091 (Resolved): Chelsio TOE support using the ``t4_tom`` module
- Please add t4_tom.ko to the kernel so Chelsio cards TOE functionality can be enabled as discussed on this forum post ...
11/03/2018
- 11:31 PM Revision 2dd0ba04: Update src/usr/local/www/vendor/d3/d3.min.js
- Restored d3.min.js
-
06:29 PM
Bug #9066 (Resolved): ecl.php: Checking /config path is not working due to lack of trailing slash
- Tested on pfSense-CE-memstick-ADI-2.4.5-DEVELOPMENT-amd64-20181103-0458, works as expected (config.xml in /config/ on...
-
- The other issue is still open. This is not necessary.
-
02:19 AM Bug #9090 (Duplicate): Traffic graph widget mouse over always shows b/s even when the value is in B/s
- As the description, the mouse over display is always shown as b/s regardless on the bits/Bytes setting.
Same as Bug ... -
- Bug still present on 2.4.4
11/02/2018
-
- The glob() pattern in source:src/etc/ecl.php#L40 's get_disk_slices() implicitly limits the function to finding confi...
-
04:23 PM
Bug #9061 (Resolved): PowerD command parameter validation and escaping
-
04:23 PM
Bug #9061: PowerD command parameter validation and escaping
- Could recreate the behavior on 2.4.4. On 2.4.5.a.20181102.0213, could not reproduce the behavior, received ...
-
03:31 PM Feature #9088: Indication of package upgrades in dashboard widget “System Information”
- Jim Pingle wrote:
> There is a packages widget that checks for package updates. It won't be added to the main system... -
- There is a packages widget that checks for package updates. It won't be added to the main system information widget.
... -
- It would be very helpful if the ”System Information” widget could indicate if packages need to be updated. Currently ...
-
03:09 PM
Todo #8898: Update strongswan to 5.7.1
- On 2.4.5.a.20181102.0213, strongswan version is 5.7.1.
-
- Corey Boyle wrote:
> Why even have the option to disable PTI?
The user may have a use case where the original pro... -
03:05 PM Todo #9026: PTI checkbox wording can be confusing, should give a little more detail and show current PTI status
- Why even have the option to disable PTI?
-
03:05 PM
Bug #8864 (Resolved): SSH Guard Sensitivity/Whitelist on 2.4.4
-
03:04 PM
Bug #8864: SSH Guard Sensitivity/Whitelist on 2.4.4
- On 2.4.5.a.20181102.0213, works as expected. Address(es) added to the whitelist are not subject to SSH Guard detection.
-
12:50 PM Bug #7869: Hyper-v vm traffic shaper error: hn0: driver does not support altq
- altq regressed to broken in hyper-v in 2.4.4, but this is fixed already per this bug report:
https://redmine.pfsense... -
- In case anyone has already upgraded to 2.4.4 and wants to workaround the issue without waiting for a patch or downgra...
-
-
- The fix Renato pushed yesterday has fixed the issue! Traffic shaper starts up no problem now.
Looks like the firs... -
- Set it to Future until a new patch is submitted
-
11/01/2018
-
11:51 PM Bug #9087 (New): Traffic Graph Widget Legend Not Updating
- This issue was first posted to the Netgate Forums, but no solution was posted.
The traffic graph widget shows a le... -
-
-
-
-
-
-
- I pushed a fix on FreeBSD-src. Please try next round of 2.4.5 snapshots
-
- I've created a new "System Tunable" with : hw.hn.use_if_start with value of 1 Then rebooted the VM.
Output of s... -
- Ben T wrote:
> On psense 2.4.4 running as vm gen2 on windows 10 build 1803 Hyper-V, the output of the command: (scre... -
- On psense 2.4.4 running as vm gen2 on windows 10 build 1803 Hyper-V, the output of the command: (screenshot also atta...
-
-
- Jon Gav wrote:
> > hyper-v 2016
> > gen1 and gen2
>
> Issue persistent in 2.4.5.development as well
can you p... -
- A user reported this problem on a pt_BR group. After changing language it stopped working. I noted it is storing tran...
-
08:44 AM Bug #9064: voucher to device binding
- Jim Pingle wrote:
> If you add a pass-through MAC, the time on the voucher is irrelevant. Don't set it that long.
... -
- If you add a pass-through MAC, the time on the voucher is irrelevant. Don't set it that long.
-
- Jim Pingle wrote:
> If the voucher adds a pass-thru MAC, then you could also make the voucher only last 1 minute. Sm... -
- A FL wrote:
> This is actually not a bug.
>
> If the MAC address of the previous computer has been added as pass-... -
- If the voucher adds a pass-thru MAC, then you could also make the voucher only last 1 minute. Smaller window for abus...
-
- This is actually not a bug.
If the MAC address of the previous computer has been added as pass-through, "Disable c... -
- json-c upgrade was not necessary since we don't have plans to import a new quarterly to 2.4.4 branch.
-
-
- Both 5.7.0 and 5.7.1 commits were cherry-picked to 2.4.4 branch
-
- yes it's always the same (except the hex addresses)...
-
- OK, and is the backtrace in the crash report always the same?
I have not seen a recurrence of this on my local set... -
- Thanks for waiting. My pfsense crashed two times in the last two days. From the monitoring (telegraf, 300s interval) ...
- 05:17 AM Revision 125ae17e: Update src/usr/local/www/vendor/d3/d3.min.js
- make sure to only pass valid options when supported by the browser
- 04:33 AM Revision 36742b46: Removed js warnings
10/31/2018
-
- I'm running pfSense 2.4.4 and the Windows openVPN 2.4.6 client.
I was trying to get the openVPN server to log *use... - 05:07 PM Revision e65a15e4: Add help text to sshguard whitelist
- Reduce delete button size
Change label text to "Add address"
(cherry picked from commit 5514e368421171482e3e5b945f4c... -
- (cherry picked from commit 024e5de242661219bb8a62f183b1601cec44aa3c)
-
- 02:34 PM Revision 5514e368: Add help text to sshguard whitelist
- Reduce delete button size
Change label text to "Add address" -
-
-
- Applied in changeset commit:024e5de242661219bb8a62f183b1601cec44aa3c.
-
- An older configuration will fail to upgrade with an incomplete or empty IPsec Phase 1 section:...
-
- The Gateway Group was set as Trigger Level: Packet Loss or High Latency. I changed that to "Member Down" and now the...
-
- Duplicate of #9080 which is already fixed in the repo.
-
10:45 AM Bug #9084 (Duplicate): PHP crash after deleting NAT 1:1 rule
- There was only one rule on the NAT 1:1 list. After deleting it the the crash occurred. This happened several times an...
-
- Applied in changeset commit:ef4a242c0df1b69b3348997165afc8555471202c.
10/30/2018
-
- This issue is reproduced in this thread: https://forum.netgate.com/topic/137168/freeradius-ca-validation-broken-2-4-5...
-
- (cherry picked from commit 42ad3b8b51e12b9e4c89b94e2a191495318f42dc)
-
- 02:18 PM Revision f5c56bf8: Fix issue where Alias URL lists are not correctly stored
-
- That certainly sounds fun. I'll have a look.
-
- Values between 2147483648 and 4294967295 and cause fire-y disk-full death at the hands of @clog -i -s@
-
- Applied in changeset commit:42ad3b8b51e12b9e4c89b94e2a191495318f42dc.
-
-
- ...
-
- It's not clear there is anything we can do at all here. This is most likely an issue in ntopng itself, not something ...
-
09:22 AM pfSense Packages Bug #9079: High CPU usage of ntopng even during IDLE and no network traffic
- TOP shows that the ntopng process is in the only one in nanslp (nanosleep) mode if this helps.
-
- With pfSense version 2.4.4 and the usage of ntopng package the CPU is constantly on a high load.
Reducing ntopng tas... -
09:21 AM Bug #9074: Alias URL lists only storing last-most list in config.
- Submitted pull request:
https://github.com/pfsense/pfsense/pull/4002 -
- Cherry picked a270651cc45b428b5f8167d1d533c50e5ee958c2 to devel. If it's OK on 2.4.5 we can consider picking it back ...
10/29/2018
-
- explicit-exit-notify looks like it can greatly speed up recovery time on OpenVPN process restarts and potentially HA ...
-
- This reverts commit 2e618c0d285a242b8cc8004f0907ddbb227ecfe9.
-
09:13 AM Feature #9032: RADIUS MAC Authentication: display the login page when MAC auth failed
- The fall back seems not to respect the setting *Use custom captive portal page* as it always shows the default login ...
-
- There still appeared to be some odd behaviour with the change I did above where it was not always appending the array...
-
- There is not enough detail here to reproduce or identify a problem. Aliases are working fine in lab and production se...
-
04:06 AM Bug #9075 (Not a Bug): Firewall rules with aliases are not applied in upgraded 2.4.4
- HI,
I have an upgraded pfsense from 2.4.3 to 2.4.4 and then all the firewall rules with aliases are not applied co... -
- This needs discussion on the forum. It's working fine for thousands and thousands of installs. If there is an issue h...
-
04:44 AM Bug #9076 (Not a Bug): DHCP RENEW PROBLEM
- Hello,
Since two weeks we have a problem on our DHCP Server with dhcp adress renew on our clients.
All 24 hours, ... -
06:06 AM pfSense Packages Feature #9077 (New): haproxy UI: Add seperator lines
- When having lots of ACL rules and action rules it would be nice if it was possible to insert seperator lines with a n...
10/28/2018
-
-
- Looks good here. Thanks.
-
-
- Works as expected. Thank you.
-
- When creating an Alias URL list under Firewall->Aliases->URLs, only the IP's from the last-most URL in the list is wh...
10/27/2018
-
01:35 PM Bug #9073: "private-domain" in custom options results in invalid config (syntax error)
- Thanks, Jim! It didn't occur to me that the @server@ block could be specified twice. Can confirm the config now che...
-
- With custom options it is up to the user to ensure the config is in the correct section of the config. For example in...
-
- Ahah, I think the actual issue is that *Custom options* are being after the @forward-zone@ directive, which means the...
-
- Adding the following to the DNS Resolver *Custom options* field:...
-
- OK, we'll wait for some more feedback here to see what happens.
-
- After a few more crashes with different error messages, I ran a memory test, which showed errors. RAM is replaced and...
10/26/2018
-
11:51 AM
Bug #8937 (New): LAGG shows wrong ether address
- From a quick look at utils.inc:get_interface_list() this would require the addition of some logic;
if $IFACE is me... -
09:37 AM
Bug #8937 (In Progress): LAGG shows wrong ether address
-
10:42 AM Bug #9072 (Resolved): RRD graph mouseover information shows up as Mb when unit size is set to MB
- The dashboard traffic graph widget shows mouse over information in Mb when the unit size is set to MB
-
- To make things even more complicated, in the workaround mentioned above, the routing actually changes back to the Tie...
-
- Tested on a fresh SG-1000 and SG-3100 after a recovery install and then config restore. In both cases, no packages we...
-
05:27 AM Bug #8954: hn0: driver does not support altq
- > hyper-v 2016
> gen1 and gen2
Issue persistent in 2.4.5.development as well
10/25/2018
-
- (cherry picked from commit bfd3334b4bc9ae0d3c43f69e8305c83b0da3aa58)
-
-
- Sounds like symptoms that others saw when using Hyper-V.
If you are using Hyper-V then this is a duplicate of #9019 -
06:15 PM Bug #9070 (Closed): After performing in-place upgrade from 2.4.3-RELEASE-p1 to 2.4.4 DHCPV6 client fails to retireve a WAN address
- I upgraded my system a few days ago and realized last night that the hosts were no longer receiving IPV6 addresses. ...
-
- Duplicate of #8994 which is already fixed for 2.4.4-p1.
-
05:56 PM Bug #9069 (Duplicate): Config import not validated properly
- I just imported a config file generated on another pfsense host onto a fresh install. Somehow that file ended up cont...
-
- (cherry picked from commit c688c59b47a3ce138ffe094794d01f1e6fcc00df)
-
-
- I can't reproduce this here at all on 2.4.4 or 2.4.5 snapshots.
It may be specific to the combination of OS+Browse... -
- When I export a configuration, everything is normal until the last line, which reads...
-
- Applied in changeset commit:bfd3334b4bc9ae0d3c43f69e8305c83b0da3aa58.
-
- If the configuration contains only @<installedpackages></installedpackages>@ then installing a package will fail with...
-
- Applied in changeset commit:c688c59b47a3ce138ffe094794d01f1e6fcc00df.
-
- At source:src/etc/ecl.php#L59 the locations for the external config locator (ECL) script are defined, but @/config@ d...
-
- The problem with this change is that people don't who do not know the numbers will want to find them by name, and wit...
-
05:21 AM Bug #9065 (Rejected): Well known ports: order them by number instead of name
- As a sysadmin, I always know the port I'm handling, but a lot of times I don't remember the +exact+ name of the servi...
10/24/2018
-
- !
-
- dear all,
in version 2.4.4 we cant enforce one voucher per same device always. some naughty user switch from one to ... -
- Please update the dynamic DNS client feature to allow specification of the Check IP service to use at the individual ...
-
01:31 AM Bug #8758: filterdns stops working on a regular basis.
- Dear All
i am affected with same problem
it happens every day approx.
i must kill filterdns service and restart ...
10/23/2018
-
- All the 'all' group to the list of groups at the end, rather than the
start. This way it will be considered no matter... -
- All the 'all' group to the list of groups at the end, rather than the
start. This way it will be considered no matter... -
- (cherry picked from commit 3be699295e5cb7be24cc5361700be1a8b759e26c)
-
-
- Applied in changeset commit:4de15854384e28004b0dc571dc8a40fda7eae694.
-
01:07 PM Feature #9062 (Rejected): Add "email notification" when the WAN interface change its public IP
- It would be helpful if an email is send when the WAN interface change its public IP.
Here is an example: https://www... -
- Applied in changeset commit:3be699295e5cb7be24cc5361700be1a8b759e26c.
-
- The powerd parameters @powerd_ac_mode@, @powerd_battery_mode@, and @powerd_normal_mode@ are not validated against the...
-
08:39 AM Feature #9060 (New): add rule name filtering field for firewall log viewer
- It would be very helpful to have a field available in the firewall log filter to search on matched rule name (i.e. Ev...
-
- Unbound 1.8.1 has fixed a few memory leaks, notably one in DNS over TLS that causes unbound to consume all memory and...
-
- Right now it happens at least once a day, but at random times. I'll check if the amount of traffic might be related.
-
- I saw a crash with a backtrace like that once on a test VM with an L2TP WAN but only one time, not repeatedly, so I c...
-
- I'm using a Multilink L2TP WAN. After a fresh reinstall of 2.4.4 and completely new config (no import) it crashes reg...
-
- Create a new LAGG with some interfaces and save it. Once thats done, edit that LAGG and on everything interface name ...
10/22/2018
-
11:48 PM Bug #9051: Privileges on 'all' group are not being honored
- removed the 'all' from both files and got access again, also admin is disabled using different user as admin
-
- I just upgraded and got no page assigned
-
- (cherry picked from commit 74a8a219d33c9b87ab4b6b4026d247f0f6bdcaa6)
-
-
06:36 PM pfSense Docs Correction #9057 (Resolved): [feedback form] Missing info on advanced networking page
- *Page*: https://docs.netgate.com/pfsense/en/latest/config/advanced-networking.html
*Feedback*: Missing info on the... - 05:35 PM Revision aa733351: gateway monitoring, wait for apinger to terminate or remove its pid file when restarting it.
- (cherry picked from commit 66491555711182d9176f6292fd58397c65e4b2af)
-
05:35 PM Revision 8e823a93: generate a flag even if trying to perform RADIUS MAC authentication on a non-RADIUS server.
- (cherry picked from commit 22e328743170b62b55d6e18b593c4005e8d6f892)
-
- (cherry picked from commit 774ff51ba07f944a39fdc6859ec7d258b95315bf)
-
- (cherry picked from commit 2d7ed31e3227566d0474929a3aed84509247f91e)
-
- 03:28 PM Revision 8be7aff9: Merge pull request #3987 from PiBa-NL/20180920-apinger-wait-for-terminate
- 03:22 PM Revision 768eccf9: Merge pull request #4000 from Augustin-FL/patch-cp-3
-
- Applied in changeset commit:74a8a219d33c9b87ab4b6b4026d247f0f6bdcaa6.
-
- If a user has allowed DHCP override of DNS servers but there are no DCHP WANs, the search domain list will be empty.
... -
- If I set the Tier 1 gateway as "Mark Gateway as Down" then turn that setting back off, the routing will correct itsel...
-
- See https://forum.netgate.com/topic/136852/2-4-4-gateway-group-slow-or-never-to-switch-back-to-tier-1. (No responses...
-
- Applied in changeset commit:2d7ed31e3227566d0474929a3aed84509247f91e.
-
- If we determine that there is a use case for allowing the other method, we can setup GUI controls for it later as a s...
-
- With IKEv2, the EAP Identity does not necessarily match the @rightid@ supplied by the client. For most common use cas...
-
10:36 AM Bug #8964: IPsec async cryptography advanced setting - TCP traffic not passing through
- I'm seeing this bug occur on my SG-3100s when using one of the AES-GCM based algorithms for my IPSEC Phase2 with asyn...
-
10:29 AM
Bug #8921: dpinger without .pid files.?. 'pending' status
- PR tested and applied. Thanks.
-
10:28 AM
Bug #8921 (Feedback): dpinger without .pid files.?. 'pending' status
-
10:26 AM
Bug #8937 (Feedback): LAGG shows wrong ether address
- Please provide some more details of this issue. It is not clear from the description what the problem is. Where do yo...
-
10:23 AM
Feature #9032 (Feedback): RADIUS MAC Authentication: display the login page when MAC auth failed
10/21/2018
-
09:26 PM Bug #8555: Selectively killing states on WAN failure
- don't kill states when failover gateway is down:
https://github.com/pfsense/pfsense/pull/4159 -
12:09 PM pfSense Packages Bug #9050: Antartica does not make a rule
- I am not actively working on the previous release.
The devel version will be the next release version in a short p... -
10:23 AM pfSense Packages Bug #8909: tinc package makes /rc.newwanip looping forever
- I guess I found a workaround: define a static IP address into the interface, then enable it and use in firewall and o...
10/20/2018
-
11:02 PM Bug #9053 (Resolved): Dynamic DNS will not allow Route 53 wildcard record
- When configuring a dynamic DNS client to update Route 53 (AWS) records, the web form will not validate a hostname tha...
-
08:15 PM pfSense Packages Bug #9050: Antartica does not make a rule
- How long does it take to make it to the main version? It's been months and multiple releases since it says it was fi...
-
- This is fixed in the pfBlockerNG-devel version.
-
- Font Awesome in pfSense is using version (4.5.0). v4.x has been marked as End-of-life:
https://github.com/pfsense/... -
10:15 AM Bug #9051: Privileges on 'all' group are not being honored
- Should be easy to replicate, I just added a new user to admins group.
In the attached config I had added "page-d... -
- That should not have been caused by this but I'll test it some more.
This should have only _added_ privileges to t... -
- Jim Pingle wrote:
> All users are a member of the "All Users" group (actual group name internally: @all@).
>
> Pr...
10/19/2018
-
- (cherry picked from commit fe1afbb7549907e0d1cdfbf85d5f36d075a6a916)
-
-
- It's actually already at 3.6 on 2.4.5 snapshots, and trying to pick back changes proved to be a bit of a challenge. I...
-
11:18 AM
Feature #8946: Add field to show IA_PD to DHCP6 Server page
- PR was closed. Awaiting new PR(s)
-
- Applied in changeset commit:fe1afbb7549907e0d1cdfbf85d5f36d075a6a916.
-
- All users are a member of the "All Users" group (actual group name internally: @all@).
Privileges can be added to ... -
08:16 AM Bug #7905: OpenVPN Authentication Against Backend Stalls All Server Traffic
- Unfortunately, with pfSense version 2.4.4, the fallback to an alternative RADIUS server is still not operational.
...
10/18/2018
-
- Just because two bugs affect the same subsystem doesn't mean they are related, though. Limiters work fine for many pe...
-
03:06 PM Bug #8956: traffic shaper after upgrade to 2.4.4 not showing queue under each limiter
- Yes, of course! I might not have been clear, I totally understand that these are bugs in two different areas of code....
-
- They are unrelated, the only thing they have in common is that they are both limiter issues. One is a GUI parsing pro...
-
- Ok, great - I'm glad you've seen it.
FWIW, I would vote for those two issues to go out together. While fixing the... -
- Eliminates inaccurate shell exec/grep/preg_match syntax issues.
(cherry picked from commit 5142c80abbaa7b2dd219c03ed... -
- Eliminates inaccurate shell exec/grep/preg_match syntax issues.
-
- If Antarctica entries with a count > 0 are added to the pfBlockerNG GeoIP, there won't be an Antarctica rule created....
-
11:30 AM Bug #8555: Selectively killing states on WAN failure
- Well it still could be worth submitting the PR to get some other eyes on it.
Also, having it up on Github would ma... -
- Applied in changeset commit:5142c80abbaa7b2dd219c03edd60c4f675d2fb62.
-
- I'd rather not change one funky regex matching pattern for another. I have a better fix. Push incoming.
-
- Did you ever submit a PR for this?
-
- Since bugnumber 8117 has been served off as not a bug, and no further response is given I'd like to re-open this bug....
10/17/2018
-
- Unfortunately, I never really had the opportunity to create a proper complete build or run this outside a virtual env...
-
- Steven, pretty impressive work you've done there. How have these patches been working for you? Have you gotten any ot...
-
- The memstick installers use GPT but they only include three partitions and not four. This can cause a problem when wr...
- 01:51 PM Revision 5baf07c8: Simplify schedule validation
- (cherry picked from commit bb7cabdb20e7bad06263d5b3888c71415d6861c1)
- 01:50 PM Revision 619f9e51: Added #8976 Allow traffic graph settings to be saved
- (cherry picked from commit dd8a6d75e7a7cadc9a182c0306e8d04799a63338)
- 01:50 PM Revision 4bc2dab8: Disable display of Diagnostics->AutoConfigBackup menu item if config is restored from pfSense < 2.4.4
- Fixed #8959
(cherry picked from commit 245bfa559b5d8ebcb13b21feceaa58257ee194da) - 01:50 PM Revision 613fa52d: Add top buttons if table > 24 rows
- (cherry picked from commit e7299fd8c5ad6998aab372dc40f033f1dcb8d605)
- 01:50 PM Revision 96101eb4: Fix German translation error. Also fixed in Zanata
- (cherry picked from commit 84dc4a557c911d0a53a861d66021ff7f65400e87)
- 01:50 PM Revision 050599fa: Fixed #9002 - PPPoE Service Name may contain ':'
- (cherry picked from commit dac4cd09699bdafa5bcf1cf7b699438e5f669b26)
- 01:50 PM Revision bf6a27e4: Fix typo in error msg
- (cherry picked from commit c921665902c0a0bccd2376437a1ab1118009f86f)
- 01:50 PM Revision 1b1aef35: Default ACB schedule to every day at midnight
- (cherry picked from commit ebbc9e97a62464650684033df7f9cd7c3d32e609)
- 01:50 PM Revision 68cba33c: Fixes #8949 Looks like there was 2 variable names for the same variable shownetboot and netboot. It now just uses the variable name netboot
- (cherry picked from commit e46ea2c60986c62371966025ab3068466217fefa)
- 01:50 PM Revision b35a897b: Added scheduled config backup
- Fixed: #8947
(cherry picked from commit a1aa91dec887ba929be08c993170803396a669b2) -
- I've seen it but it isn't directly relevant to this specific bug. This was only about the queues not showing.
-
- Hey Jim. Glad to see this issue is getting fixed - that's great!
However, I want to be sure you've seen #8973, whi... -
- Also relevant/related: commit:8038c4e807c88fda4e1bb5b37ac31c9dbb8395fe
-
- This has already been fixed while addressing another issue, see #8974
-
12:22 PM Bug #9047 (Duplicate): SSH port is not being saved properly
- Hi guys,
After upgrading from 2.4.3-RELEASE (amd64) to 2.4.4-RELEASE, I noticed that my config wasn't generated prop... -
- (cherry picked from commit 6b15f2c16b2a5396855751edf2983bcc2d12520e)
-
-
10:46 AM pfSense Packages Feature #8869: HAproxy should use RFC 7919 DH parameter files
- Understood.
I now remember where I had stumbled upon this idea in the first place, it goes back to a few years bac... -
- Accommodating SSL testers that have no concept of proper security procedures isn't something we should aspire to do. ...
-
- If you did not need the patch, does adding the patch affect it negatively in any way? That is also an important quest...
-
04:57 AM Bug #8859: VTI: Some third-party vendors require rightsubnet to have a mask for VTI, rather than address
- Jim Pingle wrote:
> #1 Seems to be OK but could use more confirmation. Traffic from the firewall itself still leaves... -
- I added it to the list and bumped the package version to trigger a rebuild. It's up now for 2.4.4 and will go up with...
-
- Looks like it was never added to the port build list at https://github.com/pfsense/pfsense/blob/master/tools/conf/pfP...
-
- Where is the Filer package?
"PR #277":https://github.com/pfsense/FreeBSD-ports/pull/277 says "Merged" but I don't se...
10/16/2018
-
- I understand the intent behind the stock DH parameter files, however some SSL testers raise known DH parameters as so...
-
08:16 PM pfSense Packages Feature #9046 (New): telegraf feature request
- we want to monitor the ntp service in pfsense, Now I manully add lines into telegraf.conf then manually start it, it ...
-
- The AQM defaults to droptail when empty, but empty was being rejected as
invalid even though it was handled in the co... -
- The AQM defaults to droptail when empty, but empty was being rejected as
invalid even though it was handled in the code. -
- (cherry picked from commit 84963037949aaf5225ae664cfe9b4e3b037beee0)
-
-
- Applied in changeset commit:cd3cde526a9215e914c2f420c7e9c74b059a2ad0.
-
02:47 PM Bug #8964: IPsec async cryptography advanced setting - TCP traffic not passing through
- System -> Cryptographic:
AES-NI and BSD Crypto Device (aesni, cryptodev)
IPSec -> Advanced Settings -> Asynchrono... -
- @Jim I mean "AES-NI and BSD Crypro Device"
-
- Applied in changeset commit:84963037949aaf5225ae664cfe9b4e3b037beee0.
-
- rc.bootup triggers a rc.package_reinstall_all in the background with a delay, to reinstall all packages in the config...
-
-
-
07:38 AM pfSense Packages Feature #9008: Add Zabbix 4 (agent and proxy) packages
- This can be closed.
Thanks! -
- It's entirely possible that the fixes referenced in the original description were only fully/completely integrated in...
-
01:27 AM Bug #8070: IKEv2 IPSec tunnel under load crashes pfSense when AES-NI is enabled
- Interestingly, it is seemingly working in 2.4.4-RELEASE. /var/etc/ipsec/ipsec.conf included for your entertainment:
...
10/15/2018
-
10:00 PM Bug #8964: IPsec async cryptography advanced setting - TCP traffic not passing through
- @luke they’re not for sale yet
@clinton please be more specific
@vladimir please explain how you enabled aes-ni on ... -
- Whoa, SG-1100 is out? Where do I get one?
-
- I see the same issues on a SG-1100.
-
- (cherry picked from commit e738a4c9b2607ad3561a0fce89d903535ca71249)
-
-
- This reverts commit bdb6021f79f222b2c7d732436800e96cb34ea973.
(cherry picked from commit dba7debb2e6be1ef469d99fa5e9... -
- This reverts commit bdb6021f79f222b2c7d732436800e96cb34ea973.
-
-
- (cherry picked from commit 89b4d4f30576908e36d5c6b70701db2f5e7363e6)
-
-
-
- Please re-read https://redmine.pfsense.org/issues/8956#note-3 and gather the requested information.
-
- Applied in changeset commit:5ae720be09a8976834cc424ead5c720f5fa2e64e.
-
- This should be a one-line fix but I had a follow-up question about the devices (nvd vs nvme) since their examples wer...
10/14/2018
-
07:21 PM Bug #8956: traffic shaper after upgrade to 2.4.4 not showing queue under each limiter
- I just wanted to add that I am experiencing an issue with my limiter as well after upgrading to 2.4.4, but im not sur...
-
- Not enough info here for a valid bug report.
Please post on the forum at https://forum.netgate.com/ -- There are s... -
06:38 AM Bug #9043 (Not a Bug): openvpn 2.4.3-p1 -> 2.4.4, failed
- hi
After the update has stopped working normally openvpn for Pfsense + mikrotik v6.43.2 (Protocol TCP and Device mod... -
09:00 AM pfSense Packages Feature #9044 (New): Add SoftEther
- It would be nice if you can add SoftEther program. It supports OpenVPN and it has more functions than the simple Open...
10/13/2018
-
11:34 PM
Bug #8959 (Resolved): Restoring a <2.4.4 config with legacy gold auto backup package re-adds the menu option under Diagnostics
- On 2.4.5.a.20181012.2248, restoring a config with AutoConfigBackup installed does not result in a system with Diagnos...
-
09:31 PM Bug #9004: Default gateway IPv4 set to a group fails after restart on 2.4.4
- I thought I was going crazy, because I have this same configuration 2 wans (1 cable, 1 4G/LTE) in a gateway group. T...
-
- It looks like it's only looking for ad, ada or da devices:
https://github.com/pfsense/pfsense/blob/c0787ee92aeaa51ce... -
- > Samir Patel wrote
> ...Try Codel/Round-Robin. This seems to work and has been stable a couple of days now.
Than... -
01:28 PM Bug #8973: Traffic not going to Limiter queues
- Samir Patel wrote:
> Terence Kent wrote:
> > At this point, I've just disabled the limiters / queues. It's better f... -
- update ntoping to 3.6.0
and enable activity map
the latest version of pfsense seems dos not enable activity ... -
-
07:03 AM Bug #9040: Invalid status for OpenVPN Point-to-Point Links
- *Update*
- After trying on a fresh install on my VM, the issue seems to no longer be present.
Please disregard th... -
- *Background:*
If one defines multiple OpenVPN servers in a tun point-to-point mode (i.e. use a /30 subnet in the IPv...
Also available in: Atom