Activity
From 12/17/2018 to 01/15/2019
01/15/2019
-
11:55 PM Bug #3334: Status/Traffic Graph isn't IPv6 ready
- Jim Pingle wrote:
> The underlying program, rate, still doesn't work with IPv6 as far as I'm aware.
>
> I'd love ... -
09:49 PM Bug #7439: IKE_SA (IKEv2) does not rekey on break before make startegy, just issues IKE_DELETE and connection is closed
- I would like to reopen this thread as I'm experiencing same problem and I'm on 2.4.4-RELEASE (amd64)
My configuratio... -
09:40 PM Revision bd0a29ea: Linode Dynamic DNS syntax fixes
-
-
04:35 PM pfSense Packages Feature #9272 (Resolved): Allow multiple IP in ListenIP for Zabbix Agent
- The web interface for the zabbix-agent service does not allow to add multiple IPs comma separated. The validation rul...
-
- Fix some indenting surrounding the Azure DDNS implementation to be consistent with the rest of the file.
https://g... -
12:38 PM pfSense Packages Feature #8613: pfSense-pkg-acme: acme_certificates_edit.php - Add support for --challenge-alias acme.sh flag
- Markus Barckmann wrote:
>
> It would be very nice to have a UI option to choose between this two (sub)methods.
... -
11:17 AM pfSense Packages Feature #8574: Enable AgentX-support in lldpd using GUI
- The above patch works for me. The Net-SNMP package already adds "master agentx" to /var/etc/netsnmpd.conf by default...
-
09:32 AM Bug #8987: Web GUI main page very slow to load if wan interface is enabled but not connected.
- Hi,
I just test it :
- Loading dashboard normaly takes about 1 second or less.
- Without WAN connectivity, it ... -
07:26 AM Bug #8987: Web GUI main page very slow to load if wan interface is enabled but not connected.
- Hi Luke,
Thanks for the suggestion but I've tried that, same issue.
It looks like whatever is timing out due to... -
06:57 AM Bug #8987: Web GUI main page very slow to load if wan interface is enabled but not connected.
- If you remove all widgets from the dashboard does that help at all? It's probably a widget that's causing this delay.
-
- To add to this bug we've been using pfSense 2.3.5 for an internal project and its been working brilliantly.
We're ...
01/14/2019
-
- https://github.com/pfsense/pfsense/pull/4035
-
10:45 AM Feature #9130: Request ID [#INC-16195]: DHCP - PXE Boot
- I also look for this feature, as described in:
https://forum.netgate.com/topic/138637/ipxe-chainloading
-
07:12 AM pfSense Packages Bug #8873 (Resolved): PHP7 warning in squidguard
-
- i just test it on a fresh install 2.4.4-RELEASE-p2 (amd64)
blank_img works without any error.
Problem solved.
01/13/2019
-
11:02 PM pfSense Packages Bug #9244: FRR Status BGP Summary only shows "IPv4 Unicast Summary"
- Created a pull request.
Changed this on my 2.4.4p2 with FRR 0.2_4
"show ip bgp summary $" to "show bgp summary ... -
01:25 PM Bug #9270 (Resolved): "Remove all states to and from the filtered address" does not remove all states
- Simple use case:
Filter all states for an IP of any device (used my iPhone IP) in *_"Diagnostics"/"States"/"States_"... -
10:45 AM Bug #9269: No Internet after reboot, wrong gateway.
- Forum link: https://forum.netgate.com/topic/139570/no-internet-after-reboot-wrong-gateway
-
-
- sorry Jim, i just tested it before my comment on : 2.4.4-RELEASE-p2 (amd64)
i try " _edit/save options on the squid... -
- That commit is already referenced above. It must be tested and confirmed as fixed.
-
- should be solved since this commit : https://github.com/pfsense/FreeBSD-ports/commit/90c367bf2f2fcd61ed631bd3c4fd6634...
-
- In the forum thread, others who could reproduce it were also on airvpn, so it is likely specific to something that pr...
-
07:58 AM Bug #8142: OpenVPN client does not remove static route for custom monitor IP
- I'm not able to reproduce this on 2.4.4p1. However, I will say I'm also no longer using the same vpn provider. I'm ...
-
- That commit is already referenced in the first comment on this issue.
A fix was committed, but it needs to be test... -
- i bet this issue was solved by this commit https://github.com/pfsense/FreeBSD-ports/commit/824d08577196346be0e7d24d92...
-
-
12:23 AM Bug #1690: PPPoE Server not passing IP from RADIUS server
- Seems to be working as of latest dev release with freeradius (daloradius).
01/12/2019
-
- There isn't enough here for a valid bug report. Please start a forum thread to discuss and diagnose the issue. If a s...
-
- I'm running pfsense from a USB key that slows down after a few days unless I reboot the box and everything's back to ...
-
09:20 PM
Bug #8142: OpenVPN client does not remove static route for custom monitor IP
- Is this issue still present in the latest development build? If so, what are the specific steps to reproduce the beha...
-
-
09:16 PM Feature #5675: Theme specific textarea background color
- Yep
-
09:13 PM
Feature #5675: Theme specific textarea background color
- Can this be marked resolved?
-
- If you're on 2.4.4 or later, edit/save options on the squid cache settings tab.
-
09:02 PM
pfSense Packages
Bug #8872: PHP7 error in squid
- How to reproduce the issue?
-
- Looks like it would take activating and tripping a squidGuard filter that replaced content with a blank image. If it ...
-
09:03 PM
pfSense Packages
Bug #8873: PHP7 warning in squidguard
- How to reproduce the issue?
-
09:18 PM
Bug #6896: unbound root.key file corruption possibly related to full file system
- Looks like the OP traced the issue, can the report be marked resolved now?
-
- It wasn't really the upgrade that did anything. Only need to test apcupsd on 2.4.4 or later to make sure there are no...
-
09:01 PM
pfSense Packages
Bug #8780: Apcupsd PHP errors in 2.4.4 snapshot
- There is no way to test this, without an instance of pfSense already running 2.4.3 *with* apcupsd already installed.
... -
09:09 PM
Bug #1690: PPPoE Server not passing IP from RADIUS server
- Is this issue still present in the latest development build?
-
09:07 PM
Bug #1575: Limiters are bypassed by local applications injecting rules
- Is this issue still present in the latest development build?
-
08:05 PM
Bug #9264: Disabling "IPv6 over IPv4 Tunneling" breaks config
- On 2.4.5.a.20190111.1435 (stock - factory default), able to reproduce the behavior....
- 01:42 PM Revision 58d009bc: Update gwlb.inc
-
- Let's add support for updating Linode DNS as a Dynamic DNS provider using their v4 REST API and Personal Access Token...
01/11/2019
-
08:05 PM Feature #1831: Captive portal IPv6 support
- PHP RADIUS package (used for RADIUS authentication/accounting) is not IPv6 compatible, which is a captive portal depe...
-
07:06 PM Bug #7801: UDP fragments received over IPsec tunnel are not properly reassembled and forwarded
- Hi, I have been waiting a year for that fix, for us, it's RDS sessions that disconnects randomly when using UDP over ...
- 04:41 PM Revision 67dd34a0: Update gwlb.inc
- Correct BUG 9004 -> set the default gateway when system start and a gateway_group is default IPV4 gateway
-
12:34 PM pfSense Packages Bug #8476: OpenVPN Client Export TLS Key Direction Directive Location
- Tested on:
2.4.4-RELEASE-p2 (amd64)
built on Wed Dec 12 14:40:29 EST 2018
FreeBSD 11.2-RELEASE-p6
client expo... -
11:15 AM Bug #9266: status_monitoring.php : failed to have quality graph
- A direct acccess to https://x.x.x.x/rrd_fetch_json.php display { "error" : "Invalid RRD file" }
Checking if the fi... -
10:16 AM Bug #9004: Default gateway IPv4 set to a group fails after restart on 2.4.4
- I think i found the bug
file /etc/inc/gwlb.inc... -
01:01 AM pfSense Packages Bug #9211: GeoIP broken in pfSense-pkg-ntopng-0.8.13_3
- in the topic mentioned above there has been found a possible cause for this:
> "Using pfSense 2.4.4-RELEASE-p2 wit...
01/10/2019
-
10:25 PM Bug #9267: dhclient does not handle protocol timeouts or script failures correctly
- Also to add, this is seen on version 2.4.4-RELEASE-p1 (amd64),
FreeBSD 11.2-RELEASE-p4, but affects versions back at... -
- pfSense-dhclient-script fails to return nonzero in the case where a DHCP timeout occurs and the cached gateway addres...
-
- (cherry picked from commit 3fcf5ad71216922921801d85d063d360fde5566f)
-
-
01:48 PM Feature #1831: Captive portal IPv6 support
- It's 2019 and guess what: This is still missing, while the fixes were apparently ready years ago....
-
- Hi David,
I just try to reproduce but without any success.
Even on a fresh install 2.4.4-RELEASE-p2 (amd64) or an... -
- Problem :
---------------------------------------------------------
Status, Monitoring, failed to display the quali... -
- Applied in changeset commit:3fcf5ad71216922921801d85d063d360fde5566f.
-
07:19 AM pfSense Packages Feature #9265 (Resolved): Add options to configure TIMEOUTclose and debug on stunnel package
- Hello all...
This PR[1] add options to configure TIMEOUTclose and debug (log level) and also fix package doc URL o...
01/09/2019
-
06:12 PM Bug #9264: Disabling "IPv6 over IPv4 Tunneling" breaks config
- lower urgency now.
I fixed my local config with viconfig.
The setting that got stick is 'ipvnat'
It looked l... -
- Raising urgency of bug, as it seems it does actually prevent toggling other settings on the networking page. Until I...
-
- missed step 4 which is hit save and apply again.
-
- Steps that may possibly reproduce.
1 - enable "IPv6 over IPv4 Tunneling" and set an ip address in the "ipv4 addres... -
- Even when downloading a too large capture it will fail..... (it just has to be large enough).
-
- I don't see the advantage by installing it by default, the whole purpose of packages is to make the base system not t...
01/08/2019
-
04:57 PM Bug #9123: Adding/configuring vlan on ixl-devices causes aq_add_macvlan err -53, aq_error 14
- Not sure about the similarity of conditions yet, but I'm seeing this message being logged on my FreeNAS box with the ...
-
03:04 PM Bug #9263: Incorrect ICMP reply when using limiters
- Relevant forum topics:
https://forum.netgate.com/post/815824
https://forum.netgate.com/topic/137090/traceroute-omit... -
- My setup is as follows. pfSense 2.4.4_p2, it maintains a L2TP tunnel to my ISP and all the traffic is configured to g...
-
12:41 PM pfSense Packages Bug #9261: haproxy GUI failure
- The acl "Traffic is ssl (no value needed)" is using the actual haproxy option: "req.ssl_ver gt 0" this is one that on...
-
11:23 AM pfSense Packages Bug #9261 (New): haproxy GUI failure
- The GUI is misbehaving. I'm unable to add a specific ACL via the GUI. Simply adding "http-request redirect scheme htt...
-
11:37 AM Feature #9262 (Duplicate): Strongswan DHCP plugin
- Would it be possible for the DHCP plugin for Strongswan to be implemented? (https://wiki.strongswan.org/projects/stro...
-
12:56 AM Feature #9260: ssh_tunnel_shell: Disable console message output
- It’s worse than that. If I’m looking at the right source, that binary does nothing but chatter at the poor user.
...
01/07/2019
-
- * Add changes as requested by @jim-p
-
- * DNS Resolver python integration
-
- +1 : good feature !
nice work! -
- The final code for mounting the /bin and /lib folders has been submitted for review (Services.inc):
https://github.c... -
01:59 PM Revision 0d869333: Disable RUST option for aarch64 as well
-
-
-
-
-
-
01:09 PM Feature #8511: Dynamic DNS: Cloudflare Add TTL option
- +1 I suggest allowing the TTL setting to be a configurable value, as it is for other Dynamic DNS clients, such as Azu...
-
- +1 I'm surprised this isn't already a feature. I noticed this today when we our primary connection came back online, ...
-
-
-
-
-
-
-
- The only way you can see that "Deny Config Write" message is if your user, or a group they are in, has the "Deny Conf...
-
11:04 AM Bug #9259: User with "Deny Config Write" privilege is not fully prevented from creating accounts
- That is not the case. I just have tried another system, where this issue does not show. My latest install does behave...
-
- You must have incorrectly added the "User - Config: Deny Config Write" privilege to your admin group, which is common...
-
- I do log into the web GUI as a user "myuser" with admin group membership (other than the builtin admin/root). I used ...
-
- Users with only the "User - System: SSH Tunneling" privilege get the @ssh_tunnel_shell@ program as their shell. When ...
-
01:19 AM Bug #9258: Error deleting tunnel type P2 when mixed with VTI
- Edit:
Workaround:
1. disable vti interface
2. remove all unwanted p2
3. enable vti interface -
- When trying to delete a (tunnel mode) phase 2 entry were both "tunnel" and "vti" modes are mixed the GUI is respondin...
01/06/2019
-
- +1
-
- Pull Request : https://github.com/pfsense/pfsense/pull/4054
-
- Pull Request : https://github.com/pfsense/pfsense/pull/4056
-
- -Pull Request : https://github.com/pfsense/pfsense/pull/4031-
Netgate choosed to fix this issue in another way. ne... -
- Support for that is already in ACME 0.5, available on 2.4.5 snapshots. If stable, it will be made available for 2.4.4...
-
- Hi,
The Security Researcher Scott Helme has just blogged about an alternative to Let's Encrypt; https://scotthelme... -
02:56 AM Revision 7e114786: making sure my tabs align with upstream
-
- When a geom rebuild is occurring, this script by default notices that the device status has changed every time the re...
01/05/2019
-
- When a geom rebuild is occurring, the gmirror_status_check script by default notices that the device status has chang...
-
- Use a real proxy like HAProxy if your needs exceed what is possible in the stock load balancer. As you have seen, it ...
-
12:35 AM Feature #9254 (Rejected): Easily allow load balancing of servers on same subnet as the client
- I have been trying to setup load balancing for servers on my internal network, where the clients also live.
I hav... -
- When using multiple authentication servers, pfSense is checking all of them regardless if an authentication succeeded...
01/04/2019
-
02:19 PM Feature #9253: RFE: True View-Only WebCFG options
- Jim Pingle wrote:
> There is not currently a privilege that will deny a user from performing actions.
Thanks, tha... -
- Starting and stopping services are not config writes, they are state changes. The "Deny Config Write" privilege does ...
-
- Joshua Sign wrote:
> maybe this can help you : https://redmine.pfsense.org/issues/9252#note-1
Joshua, Thanks for ... -
- maybe this can help you : https://redmine.pfsense.org/issues/9252#note-1
-
- Currently pfSense allows a number of options for WebCfg Status pages to grant access to (e.g. Captive Portal, load, G...
-
- This reverts commit 616089d861af8deb7111be009367ab798c5df3b3.
-
10:23 AM Feature #7974: ZFS RAID Monitor Not available
- It would be great to have this - after moving to new firewalls with zfs mirror configuration, we no longer have a way...
-
I am not able to test this because i dont use this service.
I was just trying to help about this subject to find t...-
08:44 AM
Bug #3500: DHCP Leases List Not Showing Hostname in Some Cases
- Hi Joshua,
ok, so do you want me to close the current PR. I guess that you can make new PR with your implementation? -
08:30 AM Bug #9252: wol-only user can delete WOL records
- Thank you Jim, I awaited something like this :)
-
- That is normal behavior. A user with access to a page can perform any action offered by that page. It is not a means ...
-
- A user, which has only "wol" privileges, can delete WOL records by clicking on the bin icon.
The same time, the us... -
-
06:22 AM Bug #9193: firewall_nat.php: PHP error deleting an imported NAT rule with no firewall rules present
- On 2.4.5-dev 20 Nov:
Repeated steps 1 and 2 in bug description - after that triggered PHP error by NAT rule deleti... -
07:46 AM Bug #7801: UDP fragments received over IPsec tunnel are not properly reassembled and forwarded
- Hi, I also have a similar issue with fragmented packets and IPsec tunnels (noticed with ICMP traffic).
Incoming fra... -
-
01/03/2019
-
- Add the python module integration to the DNS Resolver (Unbound)
The only remaining function, would be to mount the... -
-
04:29 PM
Bug #9214 (Resolved): Packages fail to reinstall after restoring config.xml from the installer
-
04:28 PM
Bug #9214: Packages fail to reinstall after restoring config.xml from the installer
- Tested on 2.4.5.a.20190102.0952, works as expected.
-
-
03:28 PM
pfSense Packages
Feature #9250 (Resolved): Adjust download buttons and labels in OpenVPN Client Export
- Adjust download buttons and labels in OpenVPN Client Export, according to https://redmine.pfsense.org/issues/8671?iss...
-
03:14 PM pfSense Packages Feature #9249 (Resolved): [siproxd] Add config for siptrunk plugin
- I use a sip trunk and it didn't work out of the box.
After adding these four lines to /usr/local/etc/siproxd.conf ... -
-
-
-
11:19 AM Feature #9130: Request ID [#INC-16195]: DHCP - PXE Boot
- Vote: +1
-
-
- I replicated the issue on:
SG-3100
2.4.4-RELEASE-p1 (arm)
built on Thu Nov 29 14:06:34 EST 2018
FreeBSD 11.2... -
- Hi Totio,
As i didn't find a way to correctly handle '\r' or '\n' with awk or sed, i switch to perl which can play...
01/02/2019
-
05:13 PM Bug #9248 (Resolved): Dynamic dns updates on azure ipv6 service is not working properly
- When using the azure v6 dynamics dns update there is an issue that the dns entry is showing up at the azure dns manag...
-
04:44 PM pfSense Packages Bug #9247 (New): HAProxy multiple server selection on stats pages doesn't work
- Hi,
When selecting multiple servers to perform an action on in the Stats or Stats FS pages, the action performed o... -
- That PR hasn't been merged yet, probably should be its own ticket since it isn't related to this v83 change.
-
02:45 PM
pfSense Packages
Todo #8671: Add "V83" to Yealink T38G (2) download label
- On 2.4.5.a.20190102.0951 with pfSense-pkg-openvpn-client-export-1.4.18, seeing...
- 02:50 PM Revision 0b4c14a4: Update copyright notices to 2019. Happy New Year
-
12:06 PM
Bug #3500: DHCP Leases List Not Showing Hostname in Some Cases
- Well, I agree, but at least my proposal doesn't break the overall logic, the current code base already strips the # s...
-
08:34 AM Bug #9246 (Closed): dhcp configuration v4/v6 ignores VLAN priority configuration
- When submitting interface configuration, the DHCP 802.1p settings becomes overwritten by DHCP_Config_File_Advanced or...
-
08:05 AM
Todo #9245 (Resolved): Update copyright notices to 2020
01/01/2019
-
- ON the FRR status pages, Services / FRR / Status, On the All and BGP tabs.
BGP Summary contains no info about IPv6... -
05:36 PM Bug #9243 (Resolved): IPsec ID type keyid not explicitly set
- Identifier type is set to "Key ID tag" on both sides. Sonicwall says in log: "VPN Policy: Local ID type: KEY ID; Remo...
-
- Retested and got *the same results* as Joshua. I must have messed up something with IPs or Safari browser got stuck d...
-
03:13 PM Bug #9242 (Resolved): MBT-4220/2220 not recognized by pfsense correctly after UEFI upgraded to 1.00
- In BIOS Released by intel there were system identyfier change.
pfSense installer expects
Product Name: Minnowboard ... -
- Phillip Davis wrote:
> It could all be done in a PHP loop instead of using "awk".
It should be better and easier...
12/31/2018
-
- Just noticed, it looks like Unbound (DNS Resolver) supports DNS64 as well (plus BIND/named if you want to use that), ...
-
08:36 PM Bug #9241 (New): Ethernet link cycles up/down if "auto-negotiate" is explicitly selected in interface configuration
- I have Celeron J1900-based SBC with Intel 82573V NIC's using the Intel PRO/1000 driver.
I'm running 2.4.4-RELEAS... -
04:35 PM
Bug #3500: DHCP Leases List Not Showing Hostname in Some Cases
- This bug with the } symbol in some UID fields and the missing hostname in the Web UI is still presented in version 2....
-
03:02 PM pfSense Packages Feature #9240 (Rejected): allow users to define custom ipsec configuration using web-page for ipsec
- Just like in OpenVPN configuration page, where users can add custom options (Advanced Configuration -- Custom options...
-
01:22 PM pfSense Packages Feature #9238: Add support for Zerotier
- Minimal functionality required would be joining and leaving networks. The controller service is not necessary as that...
-
- Excerpt from https://zerotier.com/blog/2018-05-04-128.shtml...
-
- Either or both of those should be fairly simple to do..
-
11:18 AM Bug #9239 (Resolved): WebGUI: Diagnostics > Packet Capture will try to display any size of pcap file.
- The diag_packet_capture.php p[age will try to display any size of pcap when the capture is stopped regardless of how ...
12/30/2018
-
- Adding support for ZeroTier with its multi-path feature, would give pfS a better position in the SD-WAN market.
12/29/2018
-
02:14 PM
pfSense Docs
Correction #9237 (Resolved): Remove references to pfSense Virtual VMware Appliance
- At https://docs.netgate.com/pfsense/en/latest/solutions/vmware/index.html, there is a "VMware READY" logo at the top ...
-
02:02 PM
pfSense Docs
Correction #9216 (Resolved): pfSense Firewall/VPN/Router for Azure » Support Resources Outdated link
- All relevant URLs on the page are now corrected.
-
- We don't have any control over that, it comes from FreeBSD as a part of the ports tree. The ports tree also contains ...
-
- Hello,
Because of the 'japanese/prn' directory, users with windows 10 systems can't fetch repository.
Microsoft u... -
06:51 AM pfSense Packages Bug #9233: Error adding new status monitoring view
- I was able to avoid the problem: I saved a configuration file, located the <savedviews> etc </ savedviews> section th...
-
- Hi Danilo,
I'am not agree with your test.
I just test again to be sure about it, and i can confirm that if your...
12/28/2018
-
07:14 PM Bug #9235 (Resolved): pfsense does not send ICMP redirect
- Hi,
This is a clone of
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=221137
In FreeBSD >=11, ICMP redirect... -
06:20 PM Bug #9234 (Resolved): Wording consistency in Certificate Management notifications
- When creating a new certificate, the Distinguished Name (common name) is a required field. Omitting the common name r...
-
05:26 PM Bug #9004: Default gateway IPv4 set to a group fails after restart on 2.4.4
- Same here on 2.4.5.a.20181221.1732.
-
- I have reproduced the bug on SG-3100:
2.4.4-RELEASE-p1 (arm)
built on Thu Nov 29 14:06:34 EST 2018
FreeBSD 11.2-... -
- sorry, my bad, i was talking about : https://github.com/pfsense/FreeBSD-ports/pull/604
i correct my precedent post -
- I don't think so....I can in fact do updates on default view. My problem is different...It can not ADD new VIEWS afte...
-
- Hello,
Maybe you experienced this issue : https://redmine.pfsense.org/issues/9194
If so, you can try this patch... -
- Now I can no more add a new "Monitoring View". After choose "Add View" I get the message "The name-of-my-view view ha...
-
- i redo a correct PR : https://github.com/pfsense/FreeBSD-ports/pull/604
-
- the PR is now ok : https://github.com/pfsense/FreeBSD-ports/pull/603
12/27/2018
-
- (cherry picked from commit 2c5d3b1e5002598cb799a182ccc1d6e66d3aac5d)
-
-
05:20 PM Bug #9232 (Duplicate): pfSense cant connect to hosts on the internet using non-local gateway via interface specific route after reboot
- After upgrading to 2.4.4_p1, pfSense cannot connect to hosts on the internet anymore. Clients in the LAN behind the p...
-
- Applied in changeset commit:2c5d3b1e5002598cb799a182ccc1d6e66d3aac5d.
-
- When creating or editing an alias, input validation is performed against pf keywords to prevent them from being used ...
-
02:41 PM Feature #9230: The ability to port forward across an IPSEC site to site vpn
- The configuration in the office is already set to do 0.0.0.0/0 routing (all traffic from the office is tunneled out v...
-
- With tunneled IPsec if you use 0.0.0.0/0 as the remote on IPsec this can work, but it's not ideal. All traffic will b...
-
- I should mention both firewalls are 7100s. Same model. Colo firewall has upgraded ram and 10gig copper.
-
- In my environment, have a 7100 in a colo, and it is attached to a remote office via a site-to-site ipsec vpn link.
I... -
10:36 AM pfSense Packages Bug #9229 (New): Tinc package: no way of specifying multiple critical configuration parameters from web interface
- Hello,
After installing the *Tinc package* provided in the official pfSense repository, there is *no apparent way ... -
10:22 AM pfSense Docs Correction #9228 (Resolved): Feedback on Hardware — Hardware Sizing Guidance
- *Page:* https://docs.netgate.com/pfsense/en/latest/hardware/size.html
*Feedback:*
Customer noticed that all of ... -
- *Tinc* software ([[https://tinc-vpn.org/]]) is an excellent and easy way of configuring *SSL tunnels* to various othe...
-
- Hello and thanks! :)
I've tested all this in the very latest version of pfSense, namely 2.4.4-p1, which I've down... -
05:52 AM Bug #8831: Radvd causes latency spikes
- Can confirm that the bug exists in 2.4.4-RELEASE-p1 (amd64)CE.
LAGG protocol is LACP and vlan on the LAGG, pretty ... -
03:28 AM Feature #9226 (New): zfs GUI functionality - alerts
- *some* way of seeing the status in GUI, and most importantly, *alerts* for degraded
it looks like the dashboard alre...
12/26/2018
-
01:42 PM Revision ce4224ff: Fix test $g['product_version_string']
-
10:54 AM Bug #9004: Default gateway IPv4 set to a group fails after restart on 2.4.4
- Seeing this issue as well. No default gateway is created.
2.4.4-p1 -
09:29 AM Bug #9225 (Closed): Gateway group routing not updated on OpenVPN client reconnect
- Setup: PFSense 2.3.5 p1, or PFSense 2.4.4-p1
WAN1 - (PPPOE)
WAN2 - VPNV4 - Openvpn client in TUN mode connected v... -
- Tested: pfSense-pkg-openvpn-client-export-1.4.18
Username is added to the file for userID 0, the admin user:
<pre... -
-
- This issue has been fixed in September 2018 by Renato in commit 7cab6335bb
Could it be marked as resolved ? -
- Hello,
Please can you tell us the pfsense version you use ?
I got 2.4.4_1 and there is "Static IPv6 Configuration... -
- Hello,
*On current version of pfSense, one cannot configure STATIC IPv6 addresses* allocated by our ISP (R... -
- Sshguard implementation in pfsense broke the way that sshguard should work.
I notice that blocking IP for a while ... -
- Actually systems logs show us when sshguard is blocking an IP, but we never known when it release this IP.
It should...
12/25/2018
-
- This happens in few pages, such as system_authservers.php or services_captiveportal_vouchers.php
!https://www.pi...
12/24/2018
-
- It is also not showing the locations (other than home location) and flows om the maps page
-
- Tested:
2.4.4-RELEASE-p2 (arm64)
built on Wed Dec 12 06:32:09 EST 2018
FreeBSD 11.2-RELEASE-p6
Calling station ... -
- Tested in current package version: pfSense-pkg-Service_Watchdog-1.8.6
No errors. -
- Replicated in 2.4.4p1:...
-
- Jim Pingle wrote:
> Given that issue, this is almost certainly a duplicate of #3334
The underlying problem was re...
12/23/2018
-
- This looks better:
https://github.com/pfsense/FreeBSD-ports/pull/605 -
- Testing: pfSense-pkg-openvpn-client-export-1.4.18
Button labeling is correct. Though the alignment could be better. -
- No php errors in current package: pfSense-pkg-stunnel-5.47_1
-
- Tested: pfSense-pkg-stunnel-5.47_1
In the list of defined tunnels shown in /pkg.php?xml=stunnel.xml the certificat... -
- After defining a new tunnel with a non-default certificate the resulting .pem file is readable by any user resulting ...
-
- Tested:...
-
- Check swap is one of the selectable commands included by default in package version: 3.1
-
- No errors in current versions.
-
- Fixed in current packages versions:...
-
- No errors in current package: 4.0.13_11
-
-
- This now looks to have been surpassed:...
-
- Tested against: ...
-
- We have gone down the road of having multiple OpenSSL instances on the firewall before and it was a pain to maintain,...
-
- if you guys want this before pfsense 2.5, you only need to compile unbound against openssl 1.1, the system binary can...
-
- this has been pushed back a lot, it would be nice if it got implemented, as a work around I have been using fe80::1:1...
12/22/2018
-
- Hooo Thank you Jim !
I didn't know "convert_seconds_to_dhms()":https://github.com/pfsense/pfsense/blob/master/src/et... -
02:29 AM pfSense Packages Bug #9108: OpenVPN client without "explicit-exit-notify" does not trigger client-disconnect portion of /usr/local/sbin/openvpn.attributes.sh
- Thank you everyone.
I dropped the session duration out of my log records. It didn't seem to provide any added val...
12/21/2018
- 11:51 PM Revision 369c8d1e: Merge branch 'master' into patch-is_fqdn
-
- We already have a time conversion function :-)
"convert_seconds_to_dhms()":https://github.com/pfsense/pfsense/blob... -
- I just :
- add the format_byte to bytes values
- add the duration time
- change format to be like others "openvpn ... -
-
- Correction pushed. The forum URL was also broken, and there were outdated links to the (now retired) mailing list. I ...
-
- https://github.com/gitdevmod/pfsense/commit/adc6ddbdbbb465fd3cb58d931465ac93b1fdedb6#diff-23f22aca2e953811c28d5b034d3...
-
- Hi,
With this command ...
12/20/2018
-
- Thank you very much Jim for your reply.
I can play with these variables now.
I'll post a feedback later about it ... -
- If OU value or another ldif unit contains spaces, for example OU=all users, squid ldap auth works only if to put the ...
12/19/2018
-
08:22 PM
pfSense Docs
Correction #9216 (Resolved): pfSense Firewall/VPN/Router for Azure » Support Resources Outdated link
- At https://www.netgate.com/docs/pfsense/solutions/azure-appliance/support.html the current URL to obtain a support su...
-
05:18 PM Bug #5476: Does not appear possible to use policy routing for traffic originating from the firewall (self)
- Anything new on this or is this still an upstream issue?
-
04:54 PM Bug #9004: Default gateway IPv4 set to a group fails after restart on 2.4.4
- I had the same problem at a customer of mine. He has two WANs, one fiber and one LTE (configured as Backup-WAN - not ...
-
- Fixed https://www.netgate.com/docs/pfsense/book/multiwan/verifying-functionality.html
And a bonus fix on https://w... -
02:59 PM
pfSense Docs
Correction #9215 (Closed): Multi-WAN - Verifying functionality - Check IP sites need updated
- At https://www.netgate.com/docs/pfsense/book/multiwan/verifying-functionality.html#verifying-http-load-balancing, htt...
-
- Change committed to freebsd-src repo, should be in 2.4.5 snaps when they run next.
-
- When restoring a config.xml file in the installer, the script sets
@${BSDINSTALL_CHROOT}/cf/conf/needs_package_syn... -
01:27 PM Feature #3473: Allow configuration of OpenVPN keepalive
- Ran into the problem. Found out that you can comment-out or change the way the keepalive directive is added to new op...
-
10:12 AM
pfSense Packages
Bug #9181: Spelling error in gwled package (0.2.4_1)
- Confirmed resolved in pfSense-pkg-gwled 0.2.4_2
-
- Duplicated by #8187 which was implemented in 2.4.4.
12/18/2018
-
-
05:11 PM Bug #9212 (Not a Bug): OpenVPN Client can't connect over IPv6 in "multihome"
- When the protocol option is set to "UDP IPv4 and IPv6 on all interfaces (multihome)", the OpenVPN Client will fail to...
-
04:35 PM pfSense Packages Bug #9211 (Resolved): GeoIP broken in pfSense-pkg-ntopng-0.8.13_3
- Since upgrading ntopng (from previous to latest version), GeoIP support is broken. No flags are shown, listing by cou...
-
04:30 PM Revision 76bfc872: Captive portal: fix per-user traffic quotas
- Don't overwrite the global traffic quota value with a user's radius-provided value
that would then be reused in the s... -
- Don't overwrite the global session timeout value with a user's radius-provided timeout
that would then be reused in t... -
- ...
-
-
- I wouldn't use @${bytes_sent} bytes@ or @${bytes_received} bytes@
Run them through "format_bytes()":https://github... -
- Thank you, i'll correct it.
I don't know where you find the "fucking manual" for these variables, if you got a link ... -
- (cherry picked from commit 701728c0778cbb4ccf95ebfad30bf56339d1a7e3)
-
- (cherry picked from commit d188b7251a83b4a8a39ba50dfaf9a1cba35cad17)
-
-
- PR: https://github.com/pfsense/pfsense/pull/4025
-
- Currently pfSense sets the RADIUS NAS Identifier to the hostname when logging into the web ui and is not very useful....
-
- PR: https://github.com/pfsense/pfsense/pull/4024
-
- When "Use RADIUS Session-Timeout attributes" is enabled the wrong session timeout value is used for users without a R...
-
08:53 AM Bug #9207: Phase1s created before pfSense 2.1.0 no longer work after upgrade to 2.4.3: IPsec ERROR: Could not find phase 1 source for connection [redacted]. Omitting from configuration file.
- Looks good to me, thanks for the quick fix!
-
- Applied in changeset commit:d188b7251a83b4a8a39ba50dfaf9a1cba35cad17.
-
- It would be better in a new upgrade code function, but that is certainly possible.
In the mean time, a simple edit... -
- Hi,
Before commit:e79b24ab3534ac2af7d832038155a99902bc2c49, a phase1 did not have a @protocol@ attribute. This a pro...
12/17/2018
-
- PR: https://github.com/pfsense/pfsense/pull/4026
-
- Hello,
I've fixed a race condition where disconnecting and reconnecting a session when using AVPair ACLs would res... -
01:19 PM pfSense Packages Feature #9085: OpenVPN connect/disconnect scripts
- The default for pfS is keepalive 10 60 on server side and will be automatically pushed to clients.
Please see "--k... -
12:58 PM pfSense Packages Bug #9195: Suricata (latest): very large number of rules cause errors due to unknown reference keys on Rebuild with Interface SID Management List Assignments
- I have made at least a couple of posts on the pfSense IDS/IPS forum about this: _snortrules-snapshot-3000.tar.gz (14...
-
04:11 AM Bug #9004: Default gateway IPv4 set to a group fails after restart on 2.4.4
- +1 had this on a system after a reboot but on a other system with multiple vlan interfaces i had to change the ip of ...
Also available in: Atom