Activity
From 02/05/2019 to 03/06/2019
03/06/2019
- 07:14 PM Revision 632f0dbf: Revert "Remove definitions of conf_mount_r[ow]"
- Leave functions declaration for now to prevent errors during upgrade.
This reverts commit da3ef5a3b359edb27bb9bb2b88... -
04:28 PM pfSense Packages Bug #9368: ACME certificates cannot have more than ~35 SAN entries due to input variable limits
- Should be fixed with this: https://github.com/pfsense/FreeBSD-ports/pull/626
Or would that possibly cause sideeffect... -
09:22 AM pfSense Packages Bug #9368 (Resolved): ACME certificates cannot have more than ~35 SAN entries due to input variable limits
- The way that acme_certificates_edit.php submits data results in a failure to add more SAN entries due to input variab...
-
- As of now, relayd does not function on FreeBSD 12 due to OpenSSL 1.1.x. The port is currently "marked BROKEN":https:/...
-
- On 2.5.0 snapshots, when openvpn starts up, it logs a "Device busy" error, but the error does not appear to harm func...
-
- On 2.5.0 snapshots, when @check_reload_status@ logs a linkup event, the message contains a @$@ before the interface n...
-
- On 2.5.0 snapshots when DHCP lease integration is enabled for the DNS Resolver, the following error is logged at boot...
-
- On 2.5.0 snapshots, bsnmpd logs an error message when the pf module is enabled:...
-
12:35 PM pfSense Docs Correction #9381: FreeRadius 2.X package documentation and CaptivePortal associated documentation are mostly outdated
- Github User, https://github.com/Frotty, commented:
Also perhaps see https://redmine.pfsense.org/issues/8251
I ha... -
- Jimp commented:
I think we've had some discussion about this in the past on the forum. Since we don't support havi... -
- *Github user:* https://github.com/Augustin-FL
*Feedback:*
The FreeRadius 2.X documentation, https://www.netgate... -
- *Page:* https://www.netgate.com/docs/pfsense/cache-proxy/squid-package-tuning.html#caching-windows-updates
*Github... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/interfaces/index.html#limitations
*Github user:* https://github... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/recipes/virtualize-proxmox.html
*Github user:* https://github.c... -
12:07 PM pfSense Packages Feature #6651: Loopback interfaces
- Slava Bendersky wrote:
> Hello Everyone,
> I would like place request add ability manipulate loopback interfaces th... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/monitoring/logs/raw-filter-format.html
*Github user:* https://g... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/monitoring/logs/raw-filter-format.html
*Github user:* https://g... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/packages/acme/index.html
*Github user:* https://github.com/yuri... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/recipes/virtualize-hyper-v.html
*Feedback:*
The Hyper-V tuto... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/services/dns/resolver.html
*Github user:* https://github.com/ja... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/usermanager/authentication-servers.html
*Github user:* https://... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/packages/freeradius-test.html
*Github user:* https://github.com... -
- Here is a list of pages that need updated screenshots:
- [ ] https://docs.netgate.com/pfsense/en/latest/recipes/ip... -
- Create pages for the currently undocumented packages in the Package List, https://docs.netgate.com/pfsense/en/latest/...
03/05/2019
-
-
-
-
-
-
-
- Applied in changeset commit:1d92575e36db5fd0b9bf2cc6a236dde32aba9239.
-
- @smartctl@ is capable of showing a lot more information than the current page supports. Update it to show things like...
- 02:45 PM Revision f403491d: Move PHP to 7.3.x
- 02:44 PM Revision b2aae111: Add support for PHP 7.3.x
- 02:43 PM Revision ccc60c88: Remove PHP 5.x support
- 02:40 PM Revision 5ec87d10: Move PHP to 7.3.x
-
02:00 PM Bug #8465: Lost default gateway after recover from failover with CARP VIP and HA
- Hi all
The problem is still (or again) reproducable.
Best regards
Tom -
- We have a patch that suppresses some "Illegal string offset" PHP errors but if the ones we can spot are easy to fix w...
-
- Two more:...
-
- PHP 7.3 is tightening down on the use of @continue@ in switches. There are instances where the code meant to continue...
-
09:08 AM pfSense Packages Bug #9364 (Resolved): squidguard int error page does not use https
- Hello,
I'm running these versions on my system(s):
pfSense 2.4.4-RELEASE-p2
squid 0.4.44_7
squidguard 1.16.18_1...
03/04/2019
-
- That only appears if you have Sticky connections enabled, otherwise it's not relevant.
-
07:18 AM
pfSense Docs
Correction #9363 (Closed): Source Tracking Table
- Docs » pfSense » Book » System Monitoring » Firewall States » Reset State Table / Source Tracking Table
The book s...
03/03/2019
-
04:18 AM Bug #9362 (Resolved): rc.dyndns.update: Cloudflare DDNS with proxy enabled doesn't work at all
- When updating the DNS record via services_dyndns_edit.php it works normally, but when it tries to update it automatic...
03/02/2019
-
05:58 PM Revision acfc3643: Allow Dynamic DNS wildcards for Cloudflare #9361
-
- https://github.com/pfsense/pfsense/pull/4053
- hide wildcard and MX checkboxes since neither are used by the Cloud... -
- My comments about Route53 on #9053 likely also apply to Cloudflare here. Assuming so, the solution would differ slig...
-
11:55 AM Bug #9074: Alias URL lists only storing last-most list in config.
- Applied https://github.com/pfsense/pfsense/pull/4002/commits/f5c56bf8189d515af203c398f473c9b3adfff98b and https://git...
-
05:37 AM Bug #9320: Outbound NAT and multiple IPSEC IPs for mobile warriors
- Applied https://github.com/pfsense/pfsense/pull/4049/commits/8897cbce7fc410029ac367eeee7c12261fec896f via system_pat...
03/01/2019
- 07:23 PM Revision ac512a11: Move to python 3.6 as default
-
07:06 PM Bug #9361 (Resolved): Cloudflare Not Allowing "*" Hostname Entry in Dynamic DNS
- Cloudflare allows wildcard A records and the pfSense DDNS page has a wildcard checkbox (since 2.3?), but it will thro...
-
- Python 2.7.x is not long for this world, going EOL on "Jan 1, 2020":https://pythonclock.org/
We need to ensure the... -
09:38 AM Bug #9223: SSHGUARD doesn't work as expected
- FYI
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20798
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CV...
02/28/2019
-
07:52 PM Bug #5999: IPv6 IP Alias prevents Track Interface from working with DHCPv6 and RA
- As far as I can tell there are too many assumptions placed on the order of the addresses on the interfaces.
There ... -
05:48 PM Revision c5663bf5: Comment out all pfSense_fsync() calls until it's properly fixed
-
-
-
-
-
- The OpenVPN 2.4.7 Windows installer is included in OpenVPN Client Export Package version 1.4.18_3, which is available...
-
Entries in the webConfigurator Lockout Table are always listed, whatever the table you select.
Possible fix shou...-
- ovpn configuration file exported from:
2.4.5-DEVELOPMENT (amd64)
built on Wed Feb 13 06:09:38 EST 2019
FreeBSD 11.... - 09:35 AM Revision 9df78d6b: Do not initialize t_address in loop
-
06:10 AM Bug #9358 (Closed): Lost default gateway after recover from failover with CARP VIP and HA
- The same issue #8465 is back on 2.4.4-RELEASE-p2 (amd64) built on Wed Dec 12 07:40:18 EST 2018. Tested with one WAN I...
02/27/2019
-
-
-
-
- pfSense_fsync() is fixed now
This reverts commit cea9d3b7dc6f7ac8450a2a8f4b630b1b6b69827b. -
- The same issue is back in 2.4.4-RELEASE-p2 (amd64) built on Wed Dec 12 07:40:18 EST 2018. Tested with one WAN IP (/30...
-
- On Firewall -> Advanced -> Firewall, when maximumtableentries item
changes, make sure /boot/loader.conf is changed ac... -
- On FreeBSD 12 and newer pf uses this sysctl to define maximum number of
items supported by its allocations. Make sur... -
10:00 AM Bug #9357: rc.newwanipv6 called regardless of REASON
- We probably need something like a "copy" of /usr/local/sbin/pfSense-dhclient-script here, just for IPv6
-
- The dhcp6c_wan_script.sh does not honor the REASON-Variable set by the dhcp6c process. Even though it is RENEW and th...
-
- FreeBSD 12 introduced a new sysctl, @net.pf.request_maxcount@, which must be set in loader.conf (or loader.conf.local...
02/26/2019
-
-
-
-
10:57 AM pfSense Packages Bug #9355 (Bogus): Telegraf Package - https for InfluxDB Server
- Setup Telegraf to send stats to InfluxDB
When trying https:// in url no stats until http:// used.
Would prefer to... -
- OpenVPN 2.4.7 released last week, needs updated in the OpenVPN client export package: https://openvpn.net/community-d...
-
-
12:05 AM pfSense Packages Bug #9345: Quagga Ospf MD5 interface password truncated to 15 characters
- Tested for FRR OSPF (version 0.2_7). Thank you for the quick fix.
02/25/2019
-
04:15 PM Bug #9353 (New): PHPSession errors from limited access to dashboard and widgets
- If you login with a user who has privilege 'WebCfg - System: Login / Logout / Dashboard' and you have widgets on the ...
-
04:04 PM pfSense Packages Bug #9352 (Resolved): Duplicate default views in Status Monitoring that can't be removed.
- Ended up with multiple "Default" views under status monitoring that could not be removed. When attempting to create a...
-
03:15 PM Bug #9351: need option for repeated DHCP retries
- the cable modem (Arris/Moto SB6183) has no ip, its a bridge, the gateway is somewhere at my ISP. the modem stays al...
-
02:59 PM
Bug #9351: need option for repeated DHCP retries
- "propose you add an option to keep retrying DHCP renews on the WAN when the gateway becomes inaccessible." - Based on...
-
- every time my cable company has an outage of more than a few minutes, pfsense ends up with no IP address on WAN, and ...
-
-
-
-
02:26 PM
Bug #6876 (Resolved): Firewall alias issue after adding a wrong alias
-
02/24/2019
- 04:38 PM Revision 3cd21b4e: Routing, actually show the "(default)" mark on the default route as it is present on the OS
- Most obvious problem was when manually switching from WANGW1 to WANGW2 it showed both as (default) after saving the s...
02/23/2019
-
11:41 AM pfSense Packages Bug #9350 (Resolved): not appear proxy config
- This problem is observed when using "squid" and "squidguard" packages together. If you enter values in the "blacklist...
-
11:24 AM Bug #9349: IPSec service start/stop/restart fails after settings change
- Hi.
I mixed the logs (stop/restart) but the problem is the same and I understand your explanation. Nevertheless th... -
- The mode on that says "stop", not restart.
Try a different browser, you may see a more informative error message.
... -
- Hi Jim,
I do not think so. I captured the network traffic in the browser and can see the following request being s... -
- This is most likely because your browser is refusing to refresh the page to update the controls because it would invo...
-
- There seems to be some weird behaviour when changing things on the advance IPsec servie settings tab. As soon as you ...
02/22/2019
-
12:08 PM pfSense Packages Bug #9348 (New): Results of Acme certificate issuance/renewal are not properly formatted
- The results of an Acme certificate issuance/renewal aren't properly formatted. Even when there are no errors the resu...
-
- This happens because those options have drop-down selectors without a 'none' option (since it's required for their re...
-
- The domain SAN list displays "Key Algorithm: HMAC-MD5, API Endpoint: portal.nexcess.net" regardless of the update met...
-
- There is a @</a>@ in the code, see source:src/usr/local/www/vpn_openvpn_server.php#L862 -- but it's run through @spri...
-
12:29 AM Bug #9344: OpenVPN click NCP Algorithms will always go to DH Parameters website(in Chinese-Taiwan)
- I found the problem.
HTML
請參閱〈a href="https://doc.pfsense.org/index.php/DH_Parameters"〉維基百科文章。
it's should add... -
- Fix pushed. Will be available once the packages rebuild.
-
- The code in the quagga was cutting it down to 15 characters, and that code was copied to FRR. Easy fix, will be up sh...
-
- The same seems to be true for the FRR Ospfd package.
-
- I am working with the quagga_ospf package for pfsense and noticed that the Web-GUI seems to cut of MD5 password strin...
-
- Issues on this tracker must be reported in English only.
Running the text through a translator, it looks like a su... -
04:38 AM Bug #9346 (Not a Bug): Problem Check_MK port 6556
- Hallo,
habe check_mk seit vielen Jahren im Einsatz, läuft zu 100%.
Nun beim Kunden eine neue SG-3100 aufgestellt,... -
03:48 AM Bug #9338: igmpproxy ignoring downstream vlan interface
- And it also ignores IGMPs from GRE interfaces:...
02/21/2019
-
- OS:2.4.4-RELEASE-p2
When I using Chinese-Taiwan language.
And edit OpenVPN settings.
When click NCP Algorithms... -
07:01 PM pfSense Packages Bug #9211: GeoIP broken in pfSense-pkg-ntopng-0.8.13_3
- Any ETA on this please?
-
- (cherry picked from commit 3b3e31c248b8185372251f8bd2fbc2a95652a7ec)
-
-
01:07 PM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
- I've also ruled out some other possibilities below -
Not the issue:
https://docs.netgate.com/pfsense/en/latest/fi... -
- I can confirm my issue is the same as described by the other posters on this bug.
Logs show that filterdns claims ... -
12:42 PM pfSense Packages Bug #9340: Buypass CA does not support wildcard
- At Let's encrypt:
acme1: https://acme-staging.api.letsencrypt.org/directory
acme2: https://acme-staging-v02.api.let... -
02:07 AM
Bug #8463: Performance Regression in 2.4.3 under KVM
- In the end I moved to FQ_CODEL so this ticket, while probably still an issue, can be closed.
-
01:41 AM Bug #9343: diag_arp.php times out with large DHCPD leases table
- I'm seeing slow or timed out page loads on systems with 10,000+ leases in the dhcpd file, 3.3mb+ in size. I'd review...
-
- the diag_arp.php file is reading and parsing the full dhcpd file for many items that it doesn't use or need.
02/20/2019
-
- Shortly after I posted my problem above 20 days ago, it started working again on its own.
Then today, it is again ... -
- Either a forum thread or open a support case at https://go.netgate.com -- It's definitely not typical, I ssh to the W...
-
05:50 PM Bug #9342: SSH To Public IP Of pfSense Router Bricks Firewall Until Restart On XG-7100
- @Tim:
Alright thanks for the response, sorry for clogging up your bug system! -
05:32 PM
Bug #9342: SSH To Public IP Of pfSense Router Bricks Firewall Until Restart On XG-7100
- I would suggest moving this to the forums. This certainly isn't a common/reproducible bug otherwise we'd all be stuf...
-
- To clarify what I mean by brick is that all network related functionality seems to cease, my openvpn connection goes ...
-
- Coreboot version: ADI_PLCC-01.00.00.10
pfSense version: 2.4.4-RELEASE-p2
Issue:
While doing some pen-testing o... -
02:19 PM Feature #9341 (Resolved): Support DNS Made Easy authentication without a username
- Currently, pfSense's help says that the username field should hold the "Dynamic DNS ID" (the same as the hostname), w...
-
- We can remove the "ACME v2" label from Buypass but the error message you quote doesn't appear to come from this packa...
-
- The BuyPass server is listed as "acmev2":
BuyPass Production ACME v2 (Applies rate limits to certificate requests)
...
02/19/2019
-
09:33 PM pfSense Packages Bug #9339 (Resolved): Misc typos in pfsense/FreeBSD-ports
- I'm not entirely sure where this belongs, but I wanted to point out a cross-post of mine for fixing some typos in the...
-
02:18 PM pfSense Packages Bug #9322: telegraf "Additional configuration for Telegraf" lost configuration after reboot
- I can confirm the same issue.
-
-
09:20 AM Bug #1943: PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
- Seems the bug is still present in 2.4.4 (running on SG-2220).
We got a wan interruption (they cut the cable while do... -
07:40 AM Revision 8897cbce: Outbound NAT and multiple IPSEC IPs for mobile warriors
-
- Hi,
following config doesn't accept any IGMP joins on VLAN 13 interface:...
02/18/2019
-
- This reverts commit d73d911c2a545d4485a3d752dd31759d4b96a445.
-
- This reverts commit b018b7afc71b26a75699a920c2434459546e5254.
-
- This reverts commit 6b2acc671a16a00d7cc2ee3813a65cccb2729a2f.
-
- This reverts commit bc16670bdf5147e46ea155004d7d540ab21b4fba.
-
-
- PR looks like it was merged
-
- Should be fixed in the ACME pkg update I just pushed, 0.5.4
-
07:28 AM pfSense Packages Bug #9318: Acme - standalone validation takes long time to start internal server
- Fixed: https://github.com/Neilpang/acme.sh/commit/97147b594b185786ef1d69ce0d85b70a91f0ccc9
:) -
11:49 AM Feature #9336: Make Dynamic DNS update notification e-mail optional
- Jim Pingle wrote:
> Many do, but they don't necessarily change every day. But usually if someone has dynamic DNS the... -
- Many do, but they don't necessarily change every day. But usually if someone has dynamic DNS they want to know that i...
-
- Jim Pingle wrote:
> And you are wrong about what the majority of users wants. We've had numerous requests over the y... -
- Blocking on the server side is possible for many (e.g. sieve on self-hosted servers, gmail filtering, etc). Most mail...
-
- Jim Pingle wrote:
> Removed "useless" from the subject and reworded.
>
> You could also filter this easily on you... -
- Removed "useless" from the subject and reworded.
You may not want it, that does not make it useless. There are man... -
- I'd like to keep pfsense email notifications enabled, unfortunately we have a dynamic ip that changes every day and w...
-
- The telegraf ping input does not work correctly as it appears to use Linux specific command line parameters for the p...
-
10:19 AM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
- I've just downgraded a test-machine to 2.4.4 release, and that works fine. Keeping it there for a while.
-
- 2.4.4-RELEASE-p2, I've had this multiple times. At the moment I can even sort of reproduce it.
When adding hosts to ... -
- That is exactly what the GUI option will put into the config but you have to ensure:
1. That you check the "Enable... -
- fix committed in haproxy pkg v 0.59_16 and haproxy-devel pkg v 0.59_17
* https://github.com/pfsense/FreeBSD-ports/... -
- There is a stored XSS on haproxy_listeners.php via parameters submitted on haproxy_listeners_edit.php:
The followi... -
07:55 AM Bug #9325: problem with flexible limiter in multiWAN environment
- EDIT:
I found a workaround, i.e. I've set up floating rules (direction = in; attached to LAN interfaces; GW = GW1 fo... -
- This is a closed/resolved issue. If you have problems with filterdns, they are likely already covered by #9296 -- add...
-
- 2.4.4-RELEASE-p2, I've had this multiple times. At the moment I can even sort of reproduce it.
When adding hosts to ... -
- filterdns has been rewritten since this bug report. If there is an issue now, it is likely covered by #9296
-
- We're running 2.4.4-RELEASE-p2 (amd64), but the issue is still there for us. Over the last two weeks I've had two occ...
-
- Doesn't matter what you choose for the interface, overlapping subnets and duplicate gateways are not supported.
-
02:54 AM Bug #9328: Static routes set by system.inc for DNS gateway bindings are not binded on the good NICs
- Hello,
I discovered that this behaviour was related to the current settings, with 2 gateways on the same subnet, s...
02/17/2019
-
10:23 PM Bug #9334 (Resolved): bogus dialogue on Limiter deletion
- When deleting the last row of the Limiter config - an error "The last row may not be deleted." appears.
Clicking O... -
- When any Limiter(s) is updated /tmp/rule.limiter is regenerated on Apply Changes.
Why doesn't a Diagnostics / Stat... -
- If there are no connections it isn't "active" -- It may be in the list, but if nothing is using it, then it isn't "ac...
-
- Thanks Jim
There were no active connections.
Regardless as per your suggestion I nuked the state table yet the... -
- After making any change to limiters you must reset the state table, or old connections could still be active on the o...
-
- Summary
Using limiters for network testing - it appears that modifying config of limiters so that they are inactive ... -
- Thanks for the feedback about the pull request. I deleted the old one and added the sustained solution.
https://gi...
02/16/2019
-
- Not really an error we can fix there. A command or bit of code run manually on that page used too much memory.
-
04:20 PM Bug #9332 (Not a Bug): PHP Fatal error: Allowed memory size of 536870912 bytes exhausted
- I have a Netgate XG-7100 at home and I noticed this php memory allocation error.
amd64
11.2-RELEASE-p6
FreeBSD ... -
- Pull request added https://github.com/pfsense/pfsense/pull/4051
-
- We are running a IKEv1 VPN connection towards a Watchguard firewall cluster. It has 10 Tunnel definitions. Whenever t...
-
10:29 AM Feature #9330 (Closed): Failover automatically invokes Failback
- Possible to request that the ability to automatically Failback post restoration of Primary is roadmapped or catered f...
02/15/2019
-
- Hello,
We are running a POC with 2 WAN gateways which use their own DNS servers on a per-FAI basis.
The 2 gatew... -
- Tested on:
2.4.5-DEVELOPMENT (amd64)
built on Wed Feb 13 06:09:38 EST 2019
FreeBSD 11.2-RELEASE-p8
No warnin... -
- It happens because that password field is not CDATA escaped or encoded with base64 in config.xml -- The character you...
-
03:22 AM Bug #9327 (Resolved): Using the character "¤" in OpenVPN password field creates invalid config.xml
- Hi!
Maybe you guys want to know about this one. First post for me to this bugtracker. Hope I'm doing things right he... -
07:23 AM Bug #9004: Default gateway IPv4 set to a group fails after restart on 2.4.4
- Renato Botelho wrote:
> PR has been merged, thanks
Thanks! -
- Doesn't work on 2.4.4, but on 2.4.4-P1 is fine.
02/14/2019
- 08:16 PM Revision 9ce9391a: Update gwlb.inc
- (cherry picked from commit 58d009bc41137e77d799e53a8ce8c02215274eac)
- 08:16 PM Revision e8a6717c: Update gwlb.inc
- Correct BUG 9004 -> set the default gateway when system start and a gateway_group is default IPV4 gateway
(cherry pi... -
-
- This is almost certainly a duplicate of #9270
-
- I checked the changes and found nothing that could fix this behaviour and considered all the changes not worth updati...
-
- Please do not report bugs from anything but the current version, which is 2.4.4-p2.
-
- It's been in there since quite a while, I never reported it though. It's definitely in 2.4.4-RELEASE-p1.
-
02:42 PM
Bug #9326: Clearing states for specific IP won't work
- Everyone can just guess which version you're reporting this against?
-
- When I use the Webinterface to filter for a specific IP and then click on "clear all states" they are still staying t...
-
- PR has been merged, thanks
-
11:32 AM Bug #7425: dhclient not sending option 77
- Luiz Souza wrote:
> It is now possible to set the VLAN Priority for DHCP requests (the same way that is done in DHCP... -
- It IS bug, reported upstream: https://github.com/Neilpang/acme.sh/issues/2096
https://forum.netgate.com/topic/1405... -
- Hi,
I'm observing serious problems with flexible limiters set using floating rules. Let me start from the beginnin... -
02:49 AM Bug #9324: IPv6 on top of a PPPOE ipv4 interface assigns parent interface to default route, not pppoe interface
- https://gist.github.com/tandyuk/acc330c69f466177ba7877c7b7728d69
-
- Hi,
Have been seeing this since at least 2.4, and persists in 2.4.4-p2
WAN: vdsl, via modem on em1
ipv4 config:... -
02:41 AM Feature #9323 (Resolved): Option to hide 'Kernel PTI' from sysinfo widget
- https://github.com/pfsense/pfsense/pull/4050
02/13/2019
-
07:39 PM Revision 2944e2f7: Revert "Fix the build of net-mgmt/net-snmp on 12, disable the TLS support for now."
- This reverts commit 39d77ff1985789c7edb352ba4697355e591b7622.
-
07:11 PM pfSense Packages Bug #9322 (Resolved): telegraf "Additional configuration for Telegraf" lost configuration after reboot
- Version: 2.4.5.a.20190211.0331
after reboot, the "Additional configuration for Telegraf" appending configurations ... -
- The PADLOCK cannot be fetched.
-
-
-
- This should allow the build of the broken ports (no OpenSSL 1.1.0 support).
-
- Traffic Graph is not loading at all when GRE, OpenVPN or IPSec graphs are enabled because it doesn't receive data for...
-
- This reverts commit 683a0581699f2654c9673a73dec696c929238a32.
-
- This reverts commit 81041332b295b383d85ee3057d5d4d626c73cdc2.
-
-
-
-
- (cherry picked from commit 354b1c750d9eeb9ccf0dc22033c9c813ec88e6f3)
-
- (cherry picked from commit e0b32eb9e6b040fd14025b5c32644959ba67250e)
-
- Affects multiple devices.
Ticket #1547
(cherry picked from commit c91af4ac6a6b501b59a542acb4ace05e2b10e3ea) -
-
-
-
12:04 PM Bug #9320 (Resolved): Outbound NAT and multiple IPSEC IPs for mobile warriors
- https://github.com/pfsense/pfsense/pull/4049
Normally all IPs are added to the automatic outbound NAT. With the ch... -
- Duplicate of #9283 which is already fixed.
-
- Certificates and CA's are still being synced from primary to secondary even with disabled Sync option - "Certificate ...
-
- Applied in changeset commit:354b1c750d9eeb9ccf0dc22033c9c813ec88e6f3.
-
-
12:48 AM Bug #9317 (Resolved): Warning/crash when adding a new user and choosing to generate a certificate
- User and certificate are created fine, but this crash is reported, running 2.4.5.a.20190212.1501
Crash report begi... -
- Applied in changeset commit:e0b32eb9e6b040fd14025b5c32644959ba67250e.
-
-
- No configuration can be backed up or restored due to this crash.
-
- Running 2.4.5.a.20190212.1501
Crash report begins. Anonymous machine information:
amd64
11.2-RELEASE-p8
Free... -
- Not seeing a bug there. Please keep the discussion on the forum unless something specific can be identified. That's a...
-
- Hi!
As per post here: https://forum.netgate.com/topic/140537/certificate-long-time-to-issue
I have ACME in stan...
02/12/2019
-
10:59 PM pfSense Packages Bug #8067: Avahi can't be stopped from registering on unassigned interfaces
- I'm also impacted by this issue.
https://forum.netgate.com/topic/137256/avahi-openvpn-missing-from-deny-interfaces -
- Affects multiple devices.
Ticket #1547 -
- (cherry picked from commit d0e9c310708fe7be6de86fe082f57e1fc27ce143)
-
-
- (cherry picked from commit 069585172e6408195b16bbe3090aeba56699ee51)
-
-
- Applied in changeset commit:069585172e6408195b16bbe3090aeba56699ee51.
-
- OK, I was able to reproduce it following your procedure, hitting a URL for a queue that had already been deleted.
...
02/11/2019
-
04:34 PM
Bug #9313: PHP Fatal error: Uncaught Error: Call to a member function addGlobal() on null in /usr/local/www/firewall_shaper_vinterface.php:415
- Extra note:
The next line shows that I did get from the queue "delete" action to the "show" action of the same que... -
04:27 PM
Bug #9313: PHP Fatal error: Uncaught Error: Call to a member function addGlobal() on null in /usr/local/www/firewall_shaper_vinterface.php:415
- I looked at the code - I guess that $sform is null.
By default $dontshow is false. So by default it will expect $... -
-
- There must be something unique to your configuration triggering this. It does not appear to be a general issue affect...
02/10/2019
-
04:50 PM pfSense Packages Feature #9315 (New): Add Package: dnscrypt-proxy
- !https://i.ibb.co/1GdDyGs/dnscrypt-proxy.png!
Hi all,
I've lately been manually installing the awesome GitHub p... -
- That can only happen if you have the menu set to stay in the browser window when you scroll. Change it to stay at the...
-
02:41 PM Bug #9314 (Not a Bug): if interface list is longer then the browser window is high you cant manage all interfaces
- Hi!
We just added another 30 interfaces to our pfSense setup (Alot of VLAN) and i noticed that if the list of inte... -
11:02 AM
Bug #9313 (Resolved): PHP Fatal error: Uncaught Error: Call to a member function addGlobal() on null in /usr/local/www/firewall_shaper_vinterface.php:415
- Crash report begins. Anonymous machine information:
arm
11.2-RELEASE-p6
FreeBSD 11.2-RELEASE-p6 #4 ed5153fb2b9(...
02/09/2019
-
- Duplicate of #8502
-
01:54 PM
pfSense Packages
Bug #9312 (Duplicate): Once nmap package completes a scan, the pfSense menu becomes unresponsive
- On latest 2.4.5 snapshot, with nmap package version 1.4.4_1, once a user runs a scan in the WebGUI with nmap, the pfS...
-
03:10 AM Feature #6960: Introduce Kea DHCP as an alternative DHCP server for IPv4 and IPv6
- Any progress on Kea dhcp? It looks like ISC has allocated more resources to Kea and put the legacy ISC dhcp in the ba...
-
01:29 AM Bug #9311 (Resolved): Captive Portal continues to limit per-user bandwidth when not enabled
- In a Captive Portal, this bug occurs after using the "Enable per-user bandwidth restriction" feature and specifying d...
02/08/2019
-
03:07 PM
Bug #6876: Firewall alias issue after adding a wrong alias
- Tried to reproduce on latest 2.4.5 snapshot:
Made a couple of aliases, one for the machine I am using to connect t... -
01:25 PM
pfSense Docs
Correction #9310: Appliances with internal switch need the MAC Address section of their Getting Started guides updated
- For SG-1100 where the user wants to spoof the MAC address for WAN in a single-WAN configuration, the user can assign ...
-
-
- tested on CE built on Thu Feb 07 19:44:20 EST 2019 <--> factory built on Thu Feb 07 18:13:07 EST 2019
tested web ... -
07:12 AM Bug #9004: Default gateway IPv4 set to a group fails after restart on 2.4.4
- Normally work on 2.4.4 p1 & p2 for sure, maybe 2.4.4
try this :... -
- Ioannis Kampolis wrote:
> jonathan's fix works.
>
> Thank you very much!
Tried on 2.4.4-RELEASE and the code g...
02/07/2019
-
09:14 PM
pfSense Docs
Correction #9310 (Closed): Appliances with internal switch need the MAC Address section of their Getting Started guides updated
- At https://docs.netgate.com/pfsense/en/latest/solutions/sg-1100/getting-started.html#mac-address
https://docs.netg... -
-
-
- If authentication is based on IP Address yes, if it would be based on MAC Address then no.
If it's not MAC based t... -
-
-
-
-
-
-
-
-
02:29 PM Feature #9309: Allow manual selection of IPsec IKE Pseudo-Random Function (PRF)
- Thanks Jim for pointing out the documentation - but the documentation does not match the implementation:
The docum... -
- That's what AES-XCBC is for:
https://docs.netgate.com/pfsense/en/latest/vpn/ipsec/configuring-a-site-to-site-ipsec... -
- If you want to use AES-GCM, you don't need an integrity algorithm, but you do need a pseudo random function.
See h... -
- Fix works for me here, will re-test once it's in a snapshot.
-
- Applied in changeset commit:a2b80f4510faf81850c7d51ba6ed7aacf978433c.
-
- Country codes list used when creating CAs and certs is obtained from /etc/ca_countries instead of Country list from I...
02/06/2019
-
- Requires Unbound 1.9.0_1 from pfsense/freebsd-ports, which fixes a bug
in Unbound 1.9.0 which did not fully implement... -
- Jim Pingle wrote:
> Probably a configuration issue or it isn't matching the identifier as expected. Post on the foru... -
- Additional observation:
- On the status page under "Leases", it shows both pools, but 192.168.7.0 is never used.
- ... -
- Probably a configuration issue or it isn't matching the identifier as expected. Post on the forum unless a specific b...
-
- For most of my road warriors, I want to have different firewall rules than for e.g. me.
Therefore, I assigned a defa... -
- The next build that includes unbound 1.9.0_1 and the changes referenced on this issue will be ready for testing. Usin...
-
- Applied in changeset commit:7e8bfed216304b37342a0800eb35ef7c29546f5d.
-
- Unbound 1.9.0 added support for verifying hosts on OpenSSL 1.0.2, but it still doesn't seem to work. Unbound 1.9.0 is...
-
08:17 AM Bug #9306 (Duplicate): DNS Made Easy client on PPPoE interface not working
- To recreate, setup a DNS Made Easy DDNS client on a DHCP WAN interface and confirm that it works. Then switch the int...
02/05/2019
-
11:52 AM pfSense Docs Correction #9305 (Resolved): Feedback on Virtual LANs (VLANs) — pfSense VLAN Configuration
- *Page:* https://www.netgate.com/docs/pfsense/book/vlan/pfsense-vlan-configuration.html
*Feedback:* In the section ...
Also available in: Atom