Activity
From 02/18/2019 to 03/19/2019
03/19/2019
-
08:04 PM Bug #9414 (Resolved): Hardware with Intel 82583V interface such as some Watchguard equipment fail to load interface
Per the post https://forum.netgate.com/topic/141709/nics-not-detected-on-watchguard-xcs-call-this-solved
The Int...-
05:50 PM Revision f30da999: Fix CA/Cert search description. Issue #9412
-
- The VLAN driver on 2.5.0 is missing ALTQ support...
-
02:21 PM Bug #9365: Use of "continue" in switch statements can be ambiguous
- Seeing in lcdproc too. Seems to be working OK though....
-
-
- Luiz offered to look at this
03/18/2019
-
-
-
- (cherry picked from commit b39d615394eabd2d19afef0936219c609ef602e3)
-
-
- Applied in changeset commit:14973058752f8b19f63af5c45b3f7b42560ae432.
-
- The CA and Certificate tabs of the certificate manager can grow quite large and can be difficult to locate items. Add...
-
- On 2.5.0 snapshots, the firewall log at /var/log/filter.log does not contain valid entries....
-
- Attempting to install a package from the GUI fails on the latest 2.5.0 snapshot (2.5.0.a.20190317.1652)
Click "Ins... -
- Applied in changeset commit:0d82f93b68b59ccfcf2bdbc9b73fc5da1d7eb9c7.
-
- Certificates with OCSP stapling are not detected as such on 2.5.0. If a cert with stapling is used as the GUI cert, t...
-
- Applied in changeset commit:b39d615394eabd2d19afef0936219c609ef602e3.
-
- When a system has RAM disks enabled for /var, the /var/crash directory is missing at bootup when the OS attempts to s...
-
- There is an upgrade guide here: https://jquery.com/upgrade-guide/3.0/ which includes instructions on a migration prog...
-
- pfSense has jQuery 1.12.0 which is no longer receiving security updates. 2.x has also been deprecated by jQuery.
W...
03/17/2019
-
- Then you are using ACME incorrectly. Read the previous comments or post on the forum if you have further questions. Y...
-
03:53 PM Bug #9283: Not obvious that HA sync will still sync certs if cert sync disabled but OpenVPN sync enabled
- Even openvpn needs synced certs I would like not to sync them because of ACME certs.
Or skip deleting used ACME ce... -
- Rebooting after restore is the safest way to ensure every setting has been applied. You can't always guarantee that a...
-
02:18 PM Feature #9406 (Rejected): restart necessary to restore config file
- Hi, first of all, I'm from Argentina, excuse me if I don't express myself accurately. I would like to request that pf...
-
12:26 PM pfSense Packages Bug #9204: ospfd: GRE tunnels became unnumbered since 2.4.4
- I think the root of the problem is frr incorrectly detecting that GRE tunnels have /32 netmasks - this makes them unn...
-
- Richard van Dijk wrote:
> It looks like now there is a possible solution of decent quality that can be further built... -
- Here is one I have been manually patching for years. Since ever, resolve_retry() which is used to resolve an IPSec re...
-
08:54 AM pfSense Packages Bug #9352: Duplicate default views in Status Monitoring that can't be removed.
- I can confirm all of this.
Thanks for creating the redmine.
03/16/2019
-
11:19 PM
pfSense Docs
Correction #9404 (Resolved): Bring RCC install guides up to date
- The following guides are in a broken state.
https://docs.netgate.com/platforms/rcc-2758/pfsense.html
https://docs... -
09:04 PM pfSense Packages Feature #9289: Snort enable react
- Snort on pfSense currently runs in what is really IDS mode using libpcap. The "blocking" done by Snort uses a custom...
-
03:43 PM pfSense Packages Bug #9403 (Resolved): Suricata - Checkbox 'Traffic Flows' enables logging for both logging formats
- The checkbox 'Traffic Flows' in 'EVE Output Settings' now enables netflow and flow output. (net)flow logging is quite...
-
10:32 AM Revision 665cbe2a: do not look for other servers when an auth is successful
- fix #9255
03/15/2019
-
05:21 PM Bug #9402: Netgate "DNS over TLS with pfSense" Blog Post recommends configuration vulnerable to MITM attacks from self signed certificates
- Jim, thanks for the quick response. You replied so quickly that I was late in adding that I hadn't actually verified ...
-
- One more remark. While I cited that blog post, I haven't actually taken the time to verify that this protects against...
-
- That doesn't actually verify anything. It logs that it does, but doesn't fail validation if the host doesn't match.
... -
- There is a typo in my original report. The post should say:
server:
tls-cert-bundle: /usr/local/share/certs/ca-ro... -
- Users should be told to set these options in unbound:
server:
tls-cert-bundle: /usr/local/share/certs/ca-root-nss... -
- If you make an OpenVPN interface name with 26 to 31 characters (in my case, I made them with exactly 26 and 31 charac...
- 04:15 PM Revision b7be92c5: Make it possible to fix armv6 -> armv7 config files
- 04:10 PM Revision 08acb533: Make it possible to fix armv6 -> armv7 config files
- 04:01 PM Revision 9d91dd67: Prepare repo templates for 2.5.0 based on FreeBSD 12
-
-
- This also appears to affect rc.carpmaster (and rc.carpbackup), which is also run through pfSctl...
-
- Applied in changeset commit:d36cf2c9444fe01a504c1f36bccb6999f0ec329a.
-
- On current 2.5.0 snapshots, systems may see the following error at boot time:...
-
- nss_ladp and LDAP-enabled sudo are both now present on 2.5.0 snapshots.
-
08:08 AM Bug #9388 (Feedback): Update ntpd
- 4.2.8p13 imported to devel branch
03/14/2019
-
-
- Applied in changeset pfsense:commit:7db5a396d398b010bfb70048881a6cec0577338f.
-
- Considering we already build pam_ldap I'm not sure why nss_ldap was omitted, so I added it to the build list for 2.5....
-
12:15 PM pfSense Packages Feature #9399 (Resolved): pkg support for SSH + sudo authentication via LDAP
- Hi Folks,
You have a very usable and user-friendly webUI configuration tool for setting up LDAP authorization for ... -
02:52 PM Feature #4881: Allow NPt to use dynamic IPv6 networks
- This will be required for most consumer internet providers that give dynamic IPv6 addresses.
Verizon FiOS just en... -
- The dyndns.org updater has only used HTTPS for as long as it's been in pfSense.
Current code: https://github.com/p... -
- It's not happening anymore
https://lists.freebsd.org/pipermail/freebsd-current/2017-January/064370.html -
09:12 AM Todo #7091: Write upgrade code to rename igb devices to em
- Maybe note this in release notes before snapshots go live
03/13/2019
- 07:44 PM Revision e078d316: Update obsoleted files from FreeBSD 11 -> 12
- 07:34 PM Revision 64d2dd61: Add missing obsoleted files
- 07:34 PM Revision b05d99e2: Add missing obsoleted files
-
- It is not available on FreeBSD 12 with OpenSSL 1.1.x.
Users can migrate to the HAProxy package. -
03:48 PM Revision 749dfdb7: Fix the spamming of warnings about ttyv0 not being available on ARM64 devices.
- While here, use a more meaningful name for the function.
-
-
- I haven't seen any of these for a while. The patch that suppressed them is back, and the most common ones are corrected.
-
- Applied in changeset commit:586c623a943f59486a461c1af9873dd6cc11a3b3.
03/12/2019
-
- (cherry picked from commit 9146639e722b4d437d19b5ade1157ae01849a313)
-
-
- (cherry picked from commit 555a9ab5c01101ddab7daa41f35d379d1c39b26e)
-
- (cherry picked from commit 7a68df5efc35b6d1ee514bb87a2298f5180de001)
-
-
-
- (cherry picked from commit 397d9fff6df234d98ef2353b0b29912a14777442)
-
-
04:49 PM pfSense Packages Feature #9387: Update telegraf to 1.9.3 from ports
- Sounds good, thanks.
-
- 1.9.0 is available on pfSense 2.5.0 snapshots (which are not yet public)
That is the most recent release in the 20... -
03:51 PM pfSense Docs Correction #9394 (Closed): Feedback on Services — DNS — Configuring the DNS Resolver
- *Page:* https://docs.netgate.com/pfsense/en/latest/services/dns/resolver.html
*Feedback:*
Does not explain how ... -
- PR Link: https://github.com/pfsense/FreeBSD-ports/pull/624
-
- Applied in changeset commit:9146639e722b4d437d19b5ade1157ae01849a313.
-
- I can't reproduce this as stated, but I can see how it might happen since the variable is used without being initiali...
-
- Sounds good on paper, but doesn't work in practice.
We can't automatically track a branch because a base system pa... -
- Joshua Sign wrote:
> As it could be very interresting to have sshguard blocking ip by services, i just worked on it.... -
- sshguard 2.3.1 is now present on 2.5.0 snapshots being tested. It has the extra GUI table code removed.
Associated... -
- I pushed a change to remove the cron job. Additional changes are coming shortly.
03/11/2019
-
09:40 PM Feature #9393 (Resolved): Improved support for USB interfaces that may not always be present
- Currently if you have a USB 4g modem or any other removable interface you need to manually delete it or otherwise you...
-
Two reports of success with the committed patch, for different issues as well:
https://forum.netgate.com/post/82...-
- Then that is where you need to direct your attention. Comment there and let the FreeBSD developers know that it's a p...
-
03:04 PM Bug #7020: <Hostname> is omitted when sending logs on syslog
- A bug is already opened upstream, see https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=194231
-
- In the FreeBSD ports repository, vnstat has been upgraded to vnstat 2.0 (from 1.15).
vnstat 2.0 does not appear to... -
- Duplicate of #9316 -- already fixed in the repository, but there are no more 2.4.5 snapshots.
-
10:17 AM Bug #9391 (Duplicate): Can't access Backup & Restore Page
- pfSense Version: 2.4.5.a.20190213.0609
I cannot access the Backup & Restore page at all from GUI. instead i get er... -
01:40 AM pfSense Packages Bug #9322: telegraf "Additional configuration for Telegraf" lost configuration after reboot
- additional issue： running configurations will ALSO be lost after sometime, you'll have to re-click SAVE in "PackageSe...
03/10/2019
-
- (cherry picked from commit 4015b03d4b184e546cb3590430fee6f9953ce23e)
-
-
- Applied in changeset commit:4015b03d4b184e546cb3590430fee6f9953ce23e.
-
- You're entitled to your opinion but I disagree. Output buffering can cause other issues with downloading other than t...
-
05:54 PM Bug #9390: diag_backup.php: Backup output generation failure with CSRF script tag inserted into XML
- Look at PR 4055: https://github.com/pfsense/pfsense/pull/4055
-
- That is a bad solution, performing unnecessary complexity, when turning off the flag prior to outputting the payload ...
-
- That PR is the wrong fix.
I haven't been able to reproduce this here, but it appears to be due to output buffering... -
- PR #4055 Created
-
05:35 PM
Bug #9390: diag_backup.php: Backup output generation failure with CSRF script tag inserted into XML
- I can't reproduce this.
[2.4.4-RELEASE-p2 (amd64)
built on Wed Dec 12 07:40:18 EST 2018
FreeBSD 11.2-RELEASE-p6... -
- Since the last update (ie: *2.4.4_2*), backups fail to restore; previously generated backups will restore, but new ba...
-
- If it's a bug, it's a bug in FreeBSD -- we use their syslogd and that's how it behaves. The default behavior is to ge...
-
- This is clearly a bug, as PfSense is not sending valid syslog messages. It also affects Graylog (3.0). We have to use...
-
- I've been noticing that the release package repo lags far behind the quarterly ports tree releases and the official p...
-
01:01 PM Bug #9388 (Resolved): Update ntpd
- Ran pkg audit new install of 2.4.4-p2:...
-
- Telegraf port in pfsense (1.6.3) is substantially behind upstream FreeBSD ports tree (1.9.3). 1.9.3 has support for ...
03/09/2019
-
07:40 PM Bug #8987: Web GUI main page very slow to load if wan interface is enabled but not connected.
- Looks like Pieter and I have come to the same conclusion (see comment 10), hopefully a fix isn't too far out.
-
02:50 PM Bug #8987: Web GUI main page very slow to load if wan interface is enabled but not connected.
- Hmm, nice find Pieter!
Maybe we need a function like *haveWorkingDns()* that returns a bool if DNS is working, and... -
01:08 PM Bug #8987: Web GUI main page very slow to load if wan interface is enabled but not connected.
- We had the same issue. It's a pfSense 2.4.4p2 installation in an air-gapped environment and has never touched the int...
03/08/2019
-
- PR Merged
03/07/2019
-
05:49 PM Bug #8987: Web GUI main page very slow to load if wan interface is enabled but not connected.
- could you confirm that adding DNS entries can be a workaround ? (if you can try to do it for testing purpose)
How ma... -
01:20 PM Bug #8987: Web GUI main page very slow to load if wan interface is enabled but not connected.
- This is affecting our company's setup as well. Static public IPs /29 (total 5 available IPs) with one hooked up with ...
03/06/2019
- 07:14 PM Revision 632f0dbf: Revert "Remove definitions of conf_mount_r[ow]"
- Leave functions declaration for now to prevent errors during upgrade.
This reverts commit da3ef5a3b359edb27bb9bb2b88... -
04:28 PM pfSense Packages Bug #9368: ACME certificates cannot have more than ~35 SAN entries due to input variable limits
- Should be fixed with this: https://github.com/pfsense/FreeBSD-ports/pull/626
Or would that possibly cause sideeffect... -
- The way that acme_certificates_edit.php submits data results in a failure to add more SAN entries due to input variab...
-
- As of now, relayd does not function on FreeBSD 12 due to OpenSSL 1.1.x. The port is currently "marked BROKEN":https:/...
-
- On 2.5.0 snapshots, when openvpn starts up, it logs a "Device busy" error, but the error does not appear to harm func...
-
- On 2.5.0 snapshots, when @check_reload_status@ logs a linkup event, the message contains a @$@ before the interface n...
-
- On 2.5.0 snapshots when DHCP lease integration is enabled for the DNS Resolver, the following error is logged at boot...
-
- On 2.5.0 snapshots, bsnmpd logs an error message when the pf module is enabled:...
-
12:35 PM pfSense Docs Correction #9381: FreeRadius 2.X package documentation and CaptivePortal associated documentation are mostly outdated
- Github User, https://github.com/Frotty, commented:
Also perhaps see https://redmine.pfsense.org/issues/8251
I ha... -
- Jimp commented:
I think we've had some discussion about this in the past on the forum. Since we don't support havi... -
- *Github user:* https://github.com/Augustin-FL
*Feedback:*
The FreeRadius 2.X documentation, https://www.netgate... -
- *Page:* https://www.netgate.com/docs/pfsense/cache-proxy/squid-package-tuning.html#caching-windows-updates
*Github... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/interfaces/index.html#limitations
*Github user:* https://github... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/recipes/virtualize-proxmox.html
*Github user:* https://github.c... -
12:07 PM pfSense Packages Feature #6651: Loopback interfaces
- Slava Bendersky wrote:
> Hello Everyone,
> I would like place request add ability manipulate loopback interfaces th... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/monitoring/logs/raw-filter-format.html
*Github user:* https://g... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/monitoring/logs/raw-filter-format.html
*Github user:* https://g... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/packages/acme/index.html
*Github user:* https://github.com/yuri... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/recipes/virtualize-hyper-v.html
*Feedback:*
The Hyper-V tuto... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/services/dns/resolver.html
*Github user:* https://github.com/ja... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/usermanager/authentication-servers.html
*Github user:* https://... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/packages/freeradius-test.html
*Github user:* https://github.com... -
- Here is a list of pages that need updated screenshots:
- [ ] https://docs.netgate.com/pfsense/en/latest/recipes/ip... -
- Create pages for the currently undocumented packages in the Package List, https://docs.netgate.com/pfsense/en/latest/...
03/05/2019
-
-
-
-
-
-
-
- Applied in changeset commit:1d92575e36db5fd0b9bf2cc6a236dde32aba9239.
-
- @smartctl@ is capable of showing a lot more information than the current page supports. Update it to show things like...
- 02:45 PM Revision f403491d: Move PHP to 7.3.x
- 02:44 PM Revision b2aae111: Add support for PHP 7.3.x
- 02:43 PM Revision ccc60c88: Remove PHP 5.x support
- 02:40 PM Revision 5ec87d10: Move PHP to 7.3.x
-
02:00 PM Bug #8465: Lost default gateway after recover from failover with CARP VIP and HA
- Hi all
The problem is still (or again) reproducable.
Best regards
Tom -
- We have a patch that suppresses some "Illegal string offset" PHP errors but if the ones we can spot are easy to fix w...
-
- Two more:...
-
- PHP 7.3 is tightening down on the use of @continue@ in switches. There are instances where the code meant to continue...
-
09:08 AM pfSense Packages Bug #9364 (Resolved): squidguard int error page does not use https
- Hello,
I'm running these versions on my system(s):
pfSense 2.4.4-RELEASE-p2
squid 0.4.44_7
squidguard 1.16.18_1...
03/04/2019
-
- That only appears if you have Sticky connections enabled, otherwise it's not relevant.
-
07:18 AM
pfSense Docs
Correction #9363 (Closed): Source Tracking Table
- Docs » pfSense » Book » System Monitoring » Firewall States » Reset State Table / Source Tracking Table
The book s...
03/03/2019
-
04:18 AM Bug #9362 (Resolved): rc.dyndns.update: Cloudflare DDNS with proxy enabled doesn't work at all
- When updating the DNS record via services_dyndns_edit.php it works normally, but when it tries to update it automatic...
03/02/2019
-
-
- https://github.com/pfsense/pfsense/pull/4053
- hide wildcard and MX checkboxes since neither are used by the Cloud... -
- My comments about Route53 on #9053 likely also apply to Cloudflare here. Assuming so, the solution would differ slig...
-
11:55 AM Bug #9074: Alias URL lists only storing last-most list in config.
- Applied https://github.com/pfsense/pfsense/pull/4002/commits/f5c56bf8189d515af203c398f473c9b3adfff98b and https://git...
-
05:37 AM Bug #9320: Outbound NAT and multiple IPSEC IPs for mobile warriors
- Applied https://github.com/pfsense/pfsense/pull/4049/commits/8897cbce7fc410029ac367eeee7c12261fec896f via system_pat...
03/01/2019
- 07:23 PM Revision ac512a11: Move to python 3.6 as default
-
07:06 PM Bug #9361 (Resolved): Cloudflare Not Allowing "*" Hostname Entry in Dynamic DNS
- Cloudflare allows wildcard A records and the pfSense DDNS page has a wildcard checkbox (since 2.3?), but it will thro...
-
- Python 2.7.x is not long for this world, going EOL on "Jan 1, 2020":https://pythonclock.org/
We need to ensure the... -
- FYI
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20798
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CV...
02/28/2019
-
07:52 PM Bug #5999: IPv6 IP Alias prevents Track Interface from working with DHCPv6 and RA
- As far as I can tell there are too many assumptions placed on the order of the addresses on the interfaces.
There ... -
-
-
-
-
-
- The OpenVPN 2.4.7 Windows installer is included in OpenVPN Client Export Package version 1.4.18_3, which is available...
-
Entries in the webConfigurator Lockout Table are always listed, whatever the table you select.
Possible fix shou...-
- ovpn configuration file exported from:
2.4.5-DEVELOPMENT (amd64)
built on Wed Feb 13 06:09:38 EST 2019
FreeBSD 11.... - 09:35 AM Revision 9df78d6b: Do not initialize t_address in loop
-
06:10 AM Bug #9358 (Closed): Lost default gateway after recover from failover with CARP VIP and HA
- The same issue #8465 is back on 2.4.4-RELEASE-p2 (amd64) built on Wed Dec 12 07:40:18 EST 2018. Tested with one WAN I...
02/27/2019
-
-
-
-
- pfSense_fsync() is fixed now
This reverts commit cea9d3b7dc6f7ac8450a2a8f4b630b1b6b69827b. -
- The same issue is back in 2.4.4-RELEASE-p2 (amd64) built on Wed Dec 12 07:40:18 EST 2018. Tested with one WAN IP (/30...
-
- On Firewall -> Advanced -> Firewall, when maximumtableentries item
changes, make sure /boot/loader.conf is changed ac... -
- On FreeBSD 12 and newer pf uses this sysctl to define maximum number of
items supported by its allocations. Make sur... -
10:00 AM Bug #9357: rc.newwanipv6 called regardless of REASON
- We probably need something like a "copy" of /usr/local/sbin/pfSense-dhclient-script here, just for IPv6
-
- The dhcp6c_wan_script.sh does not honor the REASON-Variable set by the dhcp6c process. Even though it is RENEW and th...
-
- FreeBSD 12 introduced a new sysctl, @net.pf.request_maxcount@, which must be set in loader.conf (or loader.conf.local...
02/26/2019
-
-
-
-
10:57 AM pfSense Packages Bug #9355 (Bogus): Telegraf Package - https for InfluxDB Server
- Setup Telegraf to send stats to InfluxDB
When trying https:// in url no stats until http:// used.
Would prefer to... -
- OpenVPN 2.4.7 released last week, needs updated in the OpenVPN client export package: https://openvpn.net/community-d...
-
-
12:05 AM pfSense Packages Bug #9345: Quagga Ospf MD5 interface password truncated to 15 characters
- Tested for FRR OSPF (version 0.2_7). Thank you for the quick fix.
02/25/2019
-
- If you login with a user who has privilege 'WebCfg - System: Login / Logout / Dashboard' and you have widgets on the ...
-
04:04 PM pfSense Packages Bug #9352 (Resolved): Duplicate default views in Status Monitoring that can't be removed.
- Ended up with multiple "Default" views under status monitoring that could not be removed. When attempting to create a...
-
03:15 PM Bug #9351: need option for repeated DHCP retries
- the cable modem (Arris/Moto SB6183) has no ip, its a bridge, the gateway is somewhere at my ISP. the modem stays al...
-
02:59 PM
Bug #9351: need option for repeated DHCP retries
- "propose you add an option to keep retrying DHCP renews on the WAN when the gateway becomes inaccessible." - Based on...
-
- every time my cable company has an outage of more than a few minutes, pfsense ends up with no IP address on WAN, and ...
-
-
-
-
02:26 PM
Bug #6876 (Resolved): Firewall alias issue after adding a wrong alias
-
02/24/2019
- 04:38 PM Revision 3cd21b4e: Routing, actually show the "(default)" mark on the default route as it is present on the OS
- Most obvious problem was when manually switching from WANGW1 to WANGW2 it showed both as (default) after saving the s...
02/23/2019
-
11:41 AM pfSense Packages Bug #9350 (Resolved): not appear proxy config
- This problem is observed when using "squid" and "squidguard" packages together. If you enter values in the "blacklist...
-
11:24 AM Bug #9349: IPSec service start/stop/restart fails after settings change
- Hi.
I mixed the logs (stop/restart) but the problem is the same and I understand your explanation. Nevertheless th... -
- The mode on that says "stop", not restart.
Try a different browser, you may see a more informative error message.
... -
- Hi Jim,
I do not think so. I captured the network traffic in the browser and can see the following request being s... -
- This is most likely because your browser is refusing to refresh the page to update the controls because it would invo...
-
- There seems to be some weird behaviour when changing things on the advance IPsec servie settings tab. As soon as you ...
02/22/2019
-
12:08 PM pfSense Packages Bug #9348 (New): Results of Acme certificate issuance/renewal are not properly formatted
- The results of an Acme certificate issuance/renewal aren't properly formatted. Even when there are no errors the resu...
-
- This happens because those options have drop-down selectors without a 'none' option (since it's required for their re...
-
- The domain SAN list displays "Key Algorithm: HMAC-MD5, API Endpoint: portal.nexcess.net" regardless of the update met...
-
- There is a @</a>@ in the code, see source:src/usr/local/www/vpn_openvpn_server.php#L862 -- but it's run through @spri...
-
12:29 AM Bug #9344: OpenVPN click NCP Algorithms will always go to DH Parameters website(in Chinese-Taiwan)
- I found the problem.
HTML
請參閱〈a href="https://doc.pfsense.org/index.php/DH_Parameters"〉維基百科文章。
it's should add... -
- Fix pushed. Will be available once the packages rebuild.
-
- The code in the quagga was cutting it down to 15 characters, and that code was copied to FRR. Easy fix, will be up sh...
-
- The same seems to be true for the FRR Ospfd package.
-
- I am working with the quagga_ospf package for pfsense and noticed that the Web-GUI seems to cut of MD5 password strin...
-
- Issues on this tracker must be reported in English only.
Running the text through a translator, it looks like a su... -
04:38 AM Bug #9346 (Not a Bug): Problem Check_MK port 6556
- Hallo,
habe check_mk seit vielen Jahren im Einsatz, läuft zu 100%.
Nun beim Kunden eine neue SG-3100 aufgestellt,... -
03:48 AM Bug #9338: igmpproxy ignoring downstream vlan interface
- And it also ignores IGMPs from GRE interfaces:...
02/21/2019
-
- OS:2.4.4-RELEASE-p2
When I using Chinese-Taiwan language.
And edit OpenVPN settings.
When click NCP Algorithms... -
07:01 PM pfSense Packages Bug #9211: GeoIP broken in pfSense-pkg-ntopng-0.8.13_3
- Any ETA on this please?
-
- (cherry picked from commit 3b3e31c248b8185372251f8bd2fbc2a95652a7ec)
-
-
01:07 PM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
- I've also ruled out some other possibilities below -
Not the issue:
https://docs.netgate.com/pfsense/en/latest/fi... -
- I can confirm my issue is the same as described by the other posters on this bug.
Logs show that filterdns claims ... -
12:42 PM pfSense Packages Bug #9340: Buypass CA does not support wildcard
- At Let's encrypt:
acme1: https://acme-staging.api.letsencrypt.org/directory
acme2: https://acme-staging-v02.api.let... -
02:07 AM
Bug #8463: Performance Regression in 2.4.3 under KVM
- In the end I moved to FQ_CODEL so this ticket, while probably still an issue, can be closed.
-
01:41 AM Bug #9343: diag_arp.php times out with large DHCPD leases table
- I'm seeing slow or timed out page loads on systems with 10,000+ leases in the dhcpd file, 3.3mb+ in size. I'd review...
-
- the diag_arp.php file is reading and parsing the full dhcpd file for many items that it doesn't use or need.
02/20/2019
-
- Shortly after I posted my problem above 20 days ago, it started working again on its own.
Then today, it is again ... -
- Either a forum thread or open a support case at https://go.netgate.com -- It's definitely not typical, I ssh to the W...
-
05:50 PM Bug #9342: SSH To Public IP Of pfSense Router Bricks Firewall Until Restart On XG-7100
- @Tim:
Alright thanks for the response, sorry for clogging up your bug system! -
05:32 PM
Bug #9342: SSH To Public IP Of pfSense Router Bricks Firewall Until Restart On XG-7100
- I would suggest moving this to the forums. This certainly isn't a common/reproducible bug otherwise we'd all be stuf...
-
- To clarify what I mean by brick is that all network related functionality seems to cease, my openvpn connection goes ...
-
- Coreboot version: ADI_PLCC-01.00.00.10
pfSense version: 2.4.4-RELEASE-p2
Issue:
While doing some pen-testing o... -
02:19 PM Feature #9341 (Resolved): Support DNS Made Easy authentication without a username
- Currently, pfSense's help says that the username field should hold the "Dynamic DNS ID" (the same as the hostname), w...
-
- We can remove the "ACME v2" label from Buypass but the error message you quote doesn't appear to come from this packa...
-
- The BuyPass server is listed as "acmev2":
BuyPass Production ACME v2 (Applies rate limits to certificate requests)
...
02/19/2019
-
09:33 PM pfSense Packages Bug #9339 (Resolved): Misc typos in pfsense/FreeBSD-ports
- I'm not entirely sure where this belongs, but I wanted to point out a cross-post of mine for fixing some typos in the...
-
02:18 PM pfSense Packages Bug #9322: telegraf "Additional configuration for Telegraf" lost configuration after reboot
- I can confirm the same issue.
-
-
09:20 AM Bug #1943: PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
- Seems the bug is still present in 2.4.4 (running on SG-2220).
We got a wan interruption (they cut the cable while do... -
07:40 AM Revision 8897cbce: Outbound NAT and multiple IPSEC IPs for mobile warriors
-
- Hi,
following config doesn't accept any IGMP joins on VLAN 13 interface:...
02/18/2019
-
- This reverts commit d73d911c2a545d4485a3d752dd31759d4b96a445.
-
- This reverts commit b018b7afc71b26a75699a920c2434459546e5254.
-
- This reverts commit 6b2acc671a16a00d7cc2ee3813a65cccb2729a2f.
-
- This reverts commit bc16670bdf5147e46ea155004d7d540ab21b4fba.
-
-
- PR looks like it was merged
-
- Should be fixed in the ACME pkg update I just pushed, 0.5.4
-
07:28 AM pfSense Packages Bug #9318: Acme - standalone validation takes long time to start internal server
- Fixed: https://github.com/Neilpang/acme.sh/commit/97147b594b185786ef1d69ce0d85b70a91f0ccc9
:) -
11:49 AM Feature #9336: Make Dynamic DNS update notification e-mail optional
- Jim Pingle wrote:
> Many do, but they don't necessarily change every day. But usually if someone has dynamic DNS the... -
- Many do, but they don't necessarily change every day. But usually if someone has dynamic DNS they want to know that i...
-
- Jim Pingle wrote:
> And you are wrong about what the majority of users wants. We've had numerous requests over the y... -
- Blocking on the server side is possible for many (e.g. sieve on self-hosted servers, gmail filtering, etc). Most mail...
-
- Jim Pingle wrote:
> Removed "useless" from the subject and reworded.
>
> You could also filter this easily on you... -
- Removed "useless" from the subject and reworded.
You may not want it, that does not make it useless. There are man... -
- I'd like to keep pfsense email notifications enabled, unfortunately we have a dynamic ip that changes every day and w...
-
- The telegraf ping input does not work correctly as it appears to use Linux specific command line parameters for the p...
-
10:19 AM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
- I've just downgraded a test-machine to 2.4.4 release, and that works fine. Keeping it there for a while.
-
- 2.4.4-RELEASE-p2, I've had this multiple times. At the moment I can even sort of reproduce it.
When adding hosts to ... -
- That is exactly what the GUI option will put into the config but you have to ensure:
1. That you check the "Enable... -
- fix committed in haproxy pkg v 0.59_16 and haproxy-devel pkg v 0.59_17
* https://github.com/pfsense/FreeBSD-ports/... -
- There is a stored XSS on haproxy_listeners.php via parameters submitted on haproxy_listeners_edit.php:
The followi... -
07:55 AM Bug #9325: problem with flexible limiter in multiWAN environment
- EDIT:
I found a workaround, i.e. I've set up floating rules (direction = in; attached to LAN interfaces; GW = GW1 fo... -
- This is a closed/resolved issue. If you have problems with filterdns, they are likely already covered by #9296 -- add...
-
- 2.4.4-RELEASE-p2, I've had this multiple times. At the moment I can even sort of reproduce it.
When adding hosts to ... -
- filterdns has been rewritten since this bug report. If there is an issue now, it is likely covered by #9296
-
- We're running 2.4.4-RELEASE-p2 (amd64), but the issue is still there for us. Over the last two weeks I've had two occ...
-
- Doesn't matter what you choose for the interface, overlapping subnets and duplicate gateways are not supported.
-
02:54 AM Bug #9328: Static routes set by system.inc for DNS gateway bindings are not binded on the good NICs
- Hello,
I discovered that this behaviour was related to the current settings, with 2 gateways on the same subnet, s...
Also available in: Atom