Activity
From 02/23/2019 to 03/24/2019
03/24/2019
-
02:30 PM Bug #9429 (Rejected): When enabling https access to WebConfigurator
- Running pfSense dev 2.5.0.a.20190322.1846 release (though issue is not new).
When I enable https for "System -> Ad... -
12:31 PM Bug #6880: Multiple DHCP6 WAN connections leads to multiple dhcp6c clients
- What's the status here? I'm waiting for the fix, too.
Jim Pingle wrote:
> Changing the dhcp6c process to use a si... -
04:50 AM Bug #9428 (Resolved): Unable to access "System: Authentication servers" if "WebCfg - System: User Password Manager" is set
- Hello,
It seems that defining permission _page-system-usermanager-passwordmg_ completely blocks users from accessi... -
- This issue can be closed.
As doktornotor said, it's been here since a while.
03/23/2019
-
07:36 PM Bug #9427: OpenVPN Server Local User Auth fails
- Windows, iOS, and macOS clients also show the same behavior when trying to login.
-
- Just did a clean install of the latest pfSense-CE-2.5.0-DEVELOPMENT-amd64-20190322-1846.iso
Restored a backup config... -
07:05 AM Feature #9426 (Resolved): Show PPP uptime on the Dashboard - Interfaces Widget
- This is similar to Feature #6032, only for PPP interfaces.
The interfaces widget should show the uptime for PPP inte... -
06:44 AM pfSense Packages Bug #9425 (Not a Bug): DHCP Leases don't show in GUI - Status/DHCP Leases
- My setup has 3 WAN & 3 LAN segments (Green,WiFi & DMZ). All three LAN networks have both statically assigned IPs, as ...
03/22/2019
-
11:52 PM pfSense Packages Bug #9424 (Resolved): arpwatch package logs CARP MAC address changes
- arpwatch on interfaces using CARP logs ethernet mismatch errors like these:...
-
11:15 PM Feature #9423: MTR Port
- I just tried it now, but that package has no options to configure any cmd line arguments...
Running mtr -w -c... -
11:01 PM Feature #9423 (Closed): MTR Port
- mtr is already available as a package for those that want it, as mtr-nox11
-
- Came across this post today:
https://lists.dns-oarc.net/pipermail/dns-operations/2019-March/018493.html
Using t... -
- That is completely unrealistic. It would require an insane amount of effort for very little benefit.
-
- I believe I have seen this in another project (NAS4Free).
The idea is that at the bottom of a configuration page t... -
- Retry with legacy options if new options fail, so we can still
read old style data from previous encryption runs (e.g... -
-
- This seems solved now. On the latest snapshot I can install packages without any issues.
-
- Applied in changeset commit:6765f83ae75ee99141b2cd68c6e5134a51536e09.
-
- Updated subject to match actual underlying issue. Fix inbound.
-
-
- This appears to be from crypt_data(), similar to #9420, so still a syntax issue remaining there.
If you run some d... -
- On 2.5.0 snapshots, if ACB is enabled, the following error is printed in the package install output when it writes co...
-
- Applied in changeset commit:0939f37f1b6d2fae5fde6c1b1e7baa7a6c2e86e8.
-
- According to https://wiki.openssl.org/index.php/Enc the current syntax used by @crypt_data()@ uses the deprecated @-k...
03/21/2019
-
08:40 PM pfSense Packages Bug #9403: Suricata - Checkbox 'Traffic Flows' enables logging for both logging formats
- This is fixed in the latest 4.1.3 version of the Suricata package that -is currently posted for review and merge into...
-
- Almost certainly a duplicate of #9411 and/or #9415
Logs are working fine on the latest snapshot. Once an entry is ... -
- I updated to the most recent pfSense dev release earlier today. Afterwards, it reported that there are no log entrie...
-
- That would take lots more resources that aren't available. It's a lot of work for developers to pick changes all over...
-
- On a number of occasions, I have updated my dev release to find rather serious bugs that are a show stopper.
Yes, ... -
-
- Bill Meeks wrote:
> P Law wrote:
> > Update: I am able to delete Suricata but not add (it back again). I am now wi... -
- P Law wrote:
> Update: I am able to delete Suricata but not add (it back again). I am now without Suricata.
>
> ... -
- Update: I am able to delete Suricata but not add (it back again). I am now without Suricata.
How do I get this fi... -
04:28 PM Bug #9410: Package install fails to run from GUI
- P Law wrote:
> I am unable to reinstall Suricata on pfSense latest 2.5.0.a.20190321.0930 . (Suricata warns, "The fo... -
- I am unable to reinstall Suricata on pfSense latest 2.5.0.a.20190321.0930 . (Suricata warns, "The following input er...
-
- Never mind. My mistake. Your update did fix it. I had inserted some debugging "echo" statements and noted that the...
-
- Bill Meeks wrote:
> Renato:
> Your fix still does not work. The problem appears to be with the argument "%d" in th... -
- Renato:
Your fix still does not work. The problem appears to be with the argument "%d" in the __pkg rquery_ command... -
- Thanks Bill. I've pushed a fix.
-
- I think I found where the problem is with this. It seems to be within the _pfsense-upgrade_ shell script in */usr/li...
-
02:44 PM Revision 7671193b: Use the same regex used in parse_firewall_log_line().
- No functional changes.
-
- Applied in changeset commit:996a1ad90e5682bf881bafd8b75d1b1a7e3f7831.
-
- PHP 7.1 "added support":http://php.net/manual/en/migration71.constants.php for configuring the "LDAP CA/Cert environm...
-
- After #9399 this is one step closer.
-
- This was PR https://github.com/pfsense/pfsense/pull/3240 and was merged years ago.
-
- Fixed long ago.
-
- Fixed long ago.
-
11:23 AM Bug #9416: 2.5 Snapshot upgrade crashes on boot. AMD Ryzen platform.
- Thanks for the answer, just FYI the board is on the latest UEFI from earlier this month. Ill give stock FreeBSD a test.
-
- That appears to be fairly low-level in FreeBSD, not likely something we can do anything about for that platform. It d...
-
- Hi,
I wanted to test out the current snapshots on my AMD Ryzen based platform, mainly to see if the CPU temperatur... -
11:19 AM
pfSense Docs
Correction #9404: Bring RCC install guides up to date
- Confirmed the guides are updated. Looks great, thanks Jim!
-
- Those all pull from the same shared resource guide. It's updated now.
-
- I just pushed a fix for the lcdproc errors. Looks like those @continue@ statements were unnecessary and could be remo...
-
- Tested firewall logs on a variety of platforms, works everywhere now.
-
- This looks good now. I tested on a variety of platforms, both CE and factory, amd64, SG-1000, SG-3100, SG-5100, and m...
-
- Looks good now, I no longer see that error in the system log when (re)starting SNMP
-
03:48 AM Bug #9192: PPPoE daemon selects wrong interface
- Confirmed on 2.4.4-p2, when using a pppoe connection, with an isp who supports native ipv4 and ipv6, multiple times p...
03/20/2019
-
- Two ways they were empty that I found:
* filterlog log entries now have a pid after the process
* CARP/VRRP entries d... -
- Applied in changeset commit:af85efec3afa12c7b623d0f32ca4ed8f5797d903.
-
- On SG-3100 (and likely others), the GUI firewall log is empty. The contents of /var/log/filter.log appear correct, bu...
-
- Fixed.
Please test with the next snapshot. -
-
09:50 AM Feature #3652: OpenVPN - Dynamic IPv6 Tunnel Network
- such a feature would be great!
03/19/2019
-
08:04 PM Bug #9414 (Resolved): Hardware with Intel 82583V interface such as some Watchguard equipment fail to load interface
Per the post https://forum.netgate.com/topic/141709/nics-not-detected-on-watchguard-xcs-call-this-solved
The Int...-
-
- The VLAN driver on 2.5.0 is missing ALTQ support...
-
02:21 PM Bug #9365: Use of "continue" in switch statements can be ambiguous
- Seeing in lcdproc too. Seems to be working OK though....
-
-
- Luiz offered to look at this
03/18/2019
-
-
-
- (cherry picked from commit b39d615394eabd2d19afef0936219c609ef602e3)
-
-
- Applied in changeset commit:14973058752f8b19f63af5c45b3f7b42560ae432.
-
- The CA and Certificate tabs of the certificate manager can grow quite large and can be difficult to locate items. Add...
-
- On 2.5.0 snapshots, the firewall log at /var/log/filter.log does not contain valid entries....
-
- Attempting to install a package from the GUI fails on the latest 2.5.0 snapshot (2.5.0.a.20190317.1652)
Click "Ins... -
- Applied in changeset commit:0d82f93b68b59ccfcf2bdbc9b73fc5da1d7eb9c7.
-
- Certificates with OCSP stapling are not detected as such on 2.5.0. If a cert with stapling is used as the GUI cert, t...
-
- Applied in changeset commit:b39d615394eabd2d19afef0936219c609ef602e3.
-
- When a system has RAM disks enabled for /var, the /var/crash directory is missing at bootup when the OS attempts to s...
-
- There is an upgrade guide here: https://jquery.com/upgrade-guide/3.0/ which includes instructions on a migration prog...
-
- pfSense has jQuery 1.12.0 which is no longer receiving security updates. 2.x has also been deprecated by jQuery.
W...
03/17/2019
-
- Then you are using ACME incorrectly. Read the previous comments or post on the forum if you have further questions. Y...
-
03:53 PM Bug #9283: Not obvious that HA sync will still sync certs if cert sync disabled but OpenVPN sync enabled
- Even openvpn needs synced certs I would like not to sync them because of ACME certs.
Or skip deleting used ACME ce... -
- Rebooting after restore is the safest way to ensure every setting has been applied. You can't always guarantee that a...
-
02:18 PM Feature #9406 (Rejected): restart necessary to restore config file
- Hi, first of all, I'm from Argentina, excuse me if I don't express myself accurately. I would like to request that pf...
-
12:26 PM pfSense Packages Bug #9204: ospfd: GRE tunnels became unnumbered since 2.4.4
- I think the root of the problem is frr incorrectly detecting that GRE tunnels have /32 netmasks - this makes them unn...
-
- Richard van Dijk wrote:
> It looks like now there is a possible solution of decent quality that can be further built... -
- Here is one I have been manually patching for years. Since ever, resolve_retry() which is used to resolve an IPSec re...
-
08:54 AM pfSense Packages Bug #9352: Duplicate default views in Status Monitoring that can't be removed.
- I can confirm all of this.
Thanks for creating the redmine.
03/16/2019
-
11:19 PM
pfSense Docs
Correction #9404 (Resolved): Bring RCC install guides up to date
- The following guides are in a broken state.
https://docs.netgate.com/platforms/rcc-2758/pfsense.html
https://docs... -
- Snort on pfSense currently runs in what is really IDS mode using libpcap. The "blocking" done by Snort uses a custom...
-
03:43 PM pfSense Packages Bug #9403 (Resolved): Suricata - Checkbox 'Traffic Flows' enables logging for both logging formats
- The checkbox 'Traffic Flows' in 'EVE Output Settings' now enables netflow and flow output. (net)flow logging is quite...
-
10:32 AM Revision 665cbe2a: do not look for other servers when an auth is successful
- fix #9255
03/15/2019
-
05:21 PM Bug #9402: Netgate "DNS over TLS with pfSense" Blog Post recommends configuration vulnerable to MITM attacks from self signed certificates
- Jim, thanks for the quick response. You replied so quickly that I was late in adding that I hadn't actually verified ...
-
- One more remark. While I cited that blog post, I haven't actually taken the time to verify that this protects against...
-
- That doesn't actually verify anything. It logs that it does, but doesn't fail validation if the host doesn't match.
... -
- There is a typo in my original report. The post should say:
server:
tls-cert-bundle: /usr/local/share/certs/ca-ro... -
- Users should be told to set these options in unbound:
server:
tls-cert-bundle: /usr/local/share/certs/ca-root-nss... -
- If you make an OpenVPN interface name with 26 to 31 characters (in my case, I made them with exactly 26 and 31 charac...
- 04:15 PM Revision b7be92c5: Make it possible to fix armv6 -> armv7 config files
- 04:10 PM Revision 08acb533: Make it possible to fix armv6 -> armv7 config files
- 04:01 PM Revision 9d91dd67: Prepare repo templates for 2.5.0 based on FreeBSD 12
-
-
- This also appears to affect rc.carpmaster (and rc.carpbackup), which is also run through pfSctl...
-
- Applied in changeset commit:d36cf2c9444fe01a504c1f36bccb6999f0ec329a.
-
- On current 2.5.0 snapshots, systems may see the following error at boot time:...
-
- nss_ladp and LDAP-enabled sudo are both now present on 2.5.0 snapshots.
-
- 4.2.8p13 imported to devel branch
03/14/2019
-
-
- Applied in changeset pfsense:commit:7db5a396d398b010bfb70048881a6cec0577338f.
-
- Considering we already build pam_ldap I'm not sure why nss_ldap was omitted, so I added it to the build list for 2.5....
-
12:15 PM pfSense Packages Feature #9399 (Resolved): pkg support for SSH + sudo authentication via LDAP
- Hi Folks,
You have a very usable and user-friendly webUI configuration tool for setting up LDAP authorization for ... -
02:52 PM Feature #4881: Allow NPt to use dynamic IPv6 networks
- This will be required for most consumer internet providers that give dynamic IPv6 addresses.
Verizon FiOS just en... -
- The dyndns.org updater has only used HTTPS for as long as it's been in pfSense.
Current code: https://github.com/p... -
- It's not happening anymore
https://lists.freebsd.org/pipermail/freebsd-current/2017-January/064370.html -
09:12 AM Todo #7091: Write upgrade code to rename igb devices to em
- Maybe note this in release notes before snapshots go live
03/13/2019
- 07:44 PM Revision e078d316: Update obsoleted files from FreeBSD 11 -> 12
- 07:34 PM Revision 64d2dd61: Add missing obsoleted files
- 07:34 PM Revision b05d99e2: Add missing obsoleted files
-
- It is not available on FreeBSD 12 with OpenSSL 1.1.x.
Users can migrate to the HAProxy package. -
- While here, use a more meaningful name for the function.
-
-
- I haven't seen any of these for a while. The patch that suppressed them is back, and the most common ones are corrected.
-
- Applied in changeset commit:586c623a943f59486a461c1af9873dd6cc11a3b3.
03/12/2019
-
- (cherry picked from commit 9146639e722b4d437d19b5ade1157ae01849a313)
-
-
- (cherry picked from commit 555a9ab5c01101ddab7daa41f35d379d1c39b26e)
-
- (cherry picked from commit 7a68df5efc35b6d1ee514bb87a2298f5180de001)
-
-
-
- (cherry picked from commit 397d9fff6df234d98ef2353b0b29912a14777442)
-
-
04:49 PM pfSense Packages Feature #9387: Update telegraf to 1.9.3 from ports
- Sounds good, thanks.
-
- 1.9.0 is available on pfSense 2.5.0 snapshots (which are not yet public)
That is the most recent release in the 20... -
03:51 PM pfSense Docs Correction #9394 (Closed): Feedback on Services — DNS — Configuring the DNS Resolver
- *Page:* https://docs.netgate.com/pfsense/en/latest/services/dns/resolver.html
*Feedback:*
Does not explain how ... -
- PR Link: https://github.com/pfsense/FreeBSD-ports/pull/624
-
- Applied in changeset commit:9146639e722b4d437d19b5ade1157ae01849a313.
-
- I can't reproduce this as stated, but I can see how it might happen since the variable is used without being initiali...
-
- Sounds good on paper, but doesn't work in practice.
We can't automatically track a branch because a base system pa... -
- Joshua Sign wrote:
> As it could be very interresting to have sshguard blocking ip by services, i just worked on it.... -
- sshguard 2.3.1 is now present on 2.5.0 snapshots being tested. It has the extra GUI table code removed.
Associated... -
- I pushed a change to remove the cron job. Additional changes are coming shortly.
03/11/2019
-
09:40 PM Feature #9393 (Resolved): Improved support for USB interfaces that may not always be present
- Currently if you have a USB 4g modem or any other removable interface you need to manually delete it or otherwise you...
-
Two reports of success with the committed patch, for different issues as well:
https://forum.netgate.com/post/82...-
- Then that is where you need to direct your attention. Comment there and let the FreeBSD developers know that it's a p...
-
03:04 PM Bug #7020: <Hostname> is omitted when sending logs on syslog
- A bug is already opened upstream, see https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=194231
-
- In the FreeBSD ports repository, vnstat has been upgraded to vnstat 2.0 (from 1.15).
vnstat 2.0 does not appear to... -
- Duplicate of #9316 -- already fixed in the repository, but there are no more 2.4.5 snapshots.
-
10:17 AM Bug #9391 (Duplicate): Can't access Backup & Restore Page
- pfSense Version: 2.4.5.a.20190213.0609
I cannot access the Backup & Restore page at all from GUI. instead i get er... -
01:40 AM pfSense Packages Bug #9322: telegraf "Additional configuration for Telegraf" lost configuration after reboot
- additional issue： running configurations will ALSO be lost after sometime, you'll have to re-click SAVE in "PackageSe...
03/10/2019
-
- (cherry picked from commit 4015b03d4b184e546cb3590430fee6f9953ce23e)
-
-
- Applied in changeset commit:4015b03d4b184e546cb3590430fee6f9953ce23e.
-
- You're entitled to your opinion but I disagree. Output buffering can cause other issues with downloading other than t...
-
05:54 PM Bug #9390: diag_backup.php: Backup output generation failure with CSRF script tag inserted into XML
- Look at PR 4055: https://github.com/pfsense/pfsense/pull/4055
-
- That is a bad solution, performing unnecessary complexity, when turning off the flag prior to outputting the payload ...
-
- That PR is the wrong fix.
I haven't been able to reproduce this here, but it appears to be due to output buffering... -
- PR #4055 Created
-
05:35 PM
Bug #9390: diag_backup.php: Backup output generation failure with CSRF script tag inserted into XML
- I can't reproduce this.
[2.4.4-RELEASE-p2 (amd64)
built on Wed Dec 12 07:40:18 EST 2018
FreeBSD 11.2-RELEASE-p6... -
- Since the last update (ie: *2.4.4_2*), backups fail to restore; previously generated backups will restore, but new ba...
-
- If it's a bug, it's a bug in FreeBSD -- we use their syslogd and that's how it behaves. The default behavior is to ge...
-
- This is clearly a bug, as PfSense is not sending valid syslog messages. It also affects Graylog (3.0). We have to use...
-
- I've been noticing that the release package repo lags far behind the quarterly ports tree releases and the official p...
-
01:01 PM Bug #9388 (Resolved): Update ntpd
- Ran pkg audit new install of 2.4.4-p2:...
-
- Telegraf port in pfsense (1.6.3) is substantially behind upstream FreeBSD ports tree (1.9.3). 1.9.3 has support for ...
03/09/2019
-
07:40 PM Bug #8987: Web GUI main page very slow to load if wan interface is enabled but not connected.
- Looks like Pieter and I have come to the same conclusion (see comment 10), hopefully a fix isn't too far out.
-
02:50 PM Bug #8987: Web GUI main page very slow to load if wan interface is enabled but not connected.
- Hmm, nice find Pieter!
Maybe we need a function like *haveWorkingDns()* that returns a bool if DNS is working, and... -
01:08 PM Bug #8987: Web GUI main page very slow to load if wan interface is enabled but not connected.
- We had the same issue. It's a pfSense 2.4.4p2 installation in an air-gapped environment and has never touched the int...
03/08/2019
-
- PR Merged
03/07/2019
-
05:49 PM Bug #8987: Web GUI main page very slow to load if wan interface is enabled but not connected.
- could you confirm that adding DNS entries can be a workaround ? (if you can try to do it for testing purpose)
How ma... -
01:20 PM Bug #8987: Web GUI main page very slow to load if wan interface is enabled but not connected.
- This is affecting our company's setup as well. Static public IPs /29 (total 5 available IPs) with one hooked up with ...
03/06/2019
- 07:14 PM Revision 632f0dbf: Revert "Remove definitions of conf_mount_r[ow]"
- Leave functions declaration for now to prevent errors during upgrade.
This reverts commit da3ef5a3b359edb27bb9bb2b88... -
04:28 PM pfSense Packages Bug #9368: ACME certificates cannot have more than ~35 SAN entries due to input variable limits
- Should be fixed with this: https://github.com/pfsense/FreeBSD-ports/pull/626
Or would that possibly cause sideeffect... -
- The way that acme_certificates_edit.php submits data results in a failure to add more SAN entries due to input variab...
-
- As of now, relayd does not function on FreeBSD 12 due to OpenSSL 1.1.x. The port is currently "marked BROKEN":https:/...
-
- On 2.5.0 snapshots, when openvpn starts up, it logs a "Device busy" error, but the error does not appear to harm func...
-
- On 2.5.0 snapshots, when @check_reload_status@ logs a linkup event, the message contains a @$@ before the interface n...
-
- On 2.5.0 snapshots when DHCP lease integration is enabled for the DNS Resolver, the following error is logged at boot...
-
- On 2.5.0 snapshots, bsnmpd logs an error message when the pf module is enabled:...
-
12:35 PM pfSense Docs Correction #9381: FreeRadius 2.X package documentation and CaptivePortal associated documentation are mostly outdated
- Github User, https://github.com/Frotty, commented:
Also perhaps see https://redmine.pfsense.org/issues/8251
I ha... -
- Jimp commented:
I think we've had some discussion about this in the past on the forum. Since we don't support havi... -
- *Github user:* https://github.com/Augustin-FL
*Feedback:*
The FreeRadius 2.X documentation, https://www.netgate... -
- *Page:* https://www.netgate.com/docs/pfsense/cache-proxy/squid-package-tuning.html#caching-windows-updates
*Github... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/interfaces/index.html#limitations
*Github user:* https://github... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/recipes/virtualize-proxmox.html
*Github user:* https://github.c... -
12:07 PM pfSense Packages Feature #6651: Loopback interfaces
- Slava Bendersky wrote:
> Hello Everyone,
> I would like place request add ability manipulate loopback interfaces th... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/monitoring/logs/raw-filter-format.html
*Github user:* https://g... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/monitoring/logs/raw-filter-format.html
*Github user:* https://g... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/packages/acme/index.html
*Github user:* https://github.com/yuri... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/recipes/virtualize-hyper-v.html
*Feedback:*
The Hyper-V tuto... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/services/dns/resolver.html
*Github user:* https://github.com/ja... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/usermanager/authentication-servers.html
*Github user:* https://... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/packages/freeradius-test.html
*Github user:* https://github.com... -
- Here is a list of pages that need updated screenshots:
- [ ] https://docs.netgate.com/pfsense/en/latest/recipes/ip... -
- Create pages for the currently undocumented packages in the Package List, https://docs.netgate.com/pfsense/en/latest/...
03/05/2019
-
-
-
-
-
-
-
- Applied in changeset commit:1d92575e36db5fd0b9bf2cc6a236dde32aba9239.
-
- @smartctl@ is capable of showing a lot more information than the current page supports. Update it to show things like...
- 02:45 PM Revision f403491d: Move PHP to 7.3.x
- 02:44 PM Revision b2aae111: Add support for PHP 7.3.x
- 02:43 PM Revision ccc60c88: Remove PHP 5.x support
- 02:40 PM Revision 5ec87d10: Move PHP to 7.3.x
-
02:00 PM Bug #8465: Lost default gateway after recover from failover with CARP VIP and HA
- Hi all
The problem is still (or again) reproducable.
Best regards
Tom -
- We have a patch that suppresses some "Illegal string offset" PHP errors but if the ones we can spot are easy to fix w...
-
- Two more:...
-
- PHP 7.3 is tightening down on the use of @continue@ in switches. There are instances where the code meant to continue...
-
09:08 AM pfSense Packages Bug #9364 (Resolved): squidguard int error page does not use https
- Hello,
I'm running these versions on my system(s):
pfSense 2.4.4-RELEASE-p2
squid 0.4.44_7
squidguard 1.16.18_1...
03/04/2019
-
- That only appears if you have Sticky connections enabled, otherwise it's not relevant.
-
07:18 AM
pfSense Docs
Correction #9363 (Closed): Source Tracking Table
- Docs » pfSense » Book » System Monitoring » Firewall States » Reset State Table / Source Tracking Table
The book s...
03/03/2019
-
04:18 AM Bug #9362 (Resolved): rc.dyndns.update: Cloudflare DDNS with proxy enabled doesn't work at all
- When updating the DNS record via services_dyndns_edit.php it works normally, but when it tries to update it automatic...
03/02/2019
-
-
- https://github.com/pfsense/pfsense/pull/4053
- hide wildcard and MX checkboxes since neither are used by the Cloud... -
- My comments about Route53 on #9053 likely also apply to Cloudflare here. Assuming so, the solution would differ slig...
-
11:55 AM Bug #9074: Alias URL lists only storing last-most list in config.
- Applied https://github.com/pfsense/pfsense/pull/4002/commits/f5c56bf8189d515af203c398f473c9b3adfff98b and https://git...
-
05:37 AM Bug #9320: Outbound NAT and multiple IPSEC IPs for mobile warriors
- Applied https://github.com/pfsense/pfsense/pull/4049/commits/8897cbce7fc410029ac367eeee7c12261fec896f via system_pat...
03/01/2019
- 07:23 PM Revision ac512a11: Move to python 3.6 as default
-
07:06 PM Bug #9361 (Resolved): Cloudflare Not Allowing "*" Hostname Entry in Dynamic DNS
- Cloudflare allows wildcard A records and the pfSense DDNS page has a wildcard checkbox (since 2.3?), but it will thro...
-
- Python 2.7.x is not long for this world, going EOL on "Jan 1, 2020":https://pythonclock.org/
We need to ensure the... -
- FYI
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20798
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CV...
02/28/2019
-
07:52 PM Bug #5999: IPv6 IP Alias prevents Track Interface from working with DHCPv6 and RA
- As far as I can tell there are too many assumptions placed on the order of the addresses on the interfaces.
There ... -
-
-
-
-
-
- The OpenVPN 2.4.7 Windows installer is included in OpenVPN Client Export Package version 1.4.18_3, which is available...
-
Entries in the webConfigurator Lockout Table are always listed, whatever the table you select.
Possible fix shou...-
- ovpn configuration file exported from:
2.4.5-DEVELOPMENT (amd64)
built on Wed Feb 13 06:09:38 EST 2019
FreeBSD 11.... - 09:35 AM Revision 9df78d6b: Do not initialize t_address in loop
-
06:10 AM Bug #9358 (Closed): Lost default gateway after recover from failover with CARP VIP and HA
- The same issue #8465 is back on 2.4.4-RELEASE-p2 (amd64) built on Wed Dec 12 07:40:18 EST 2018. Tested with one WAN I...
02/27/2019
-
-
-
-
- pfSense_fsync() is fixed now
This reverts commit cea9d3b7dc6f7ac8450a2a8f4b630b1b6b69827b. -
- The same issue is back in 2.4.4-RELEASE-p2 (amd64) built on Wed Dec 12 07:40:18 EST 2018. Tested with one WAN IP (/30...
-
- On Firewall -> Advanced -> Firewall, when maximumtableentries item
changes, make sure /boot/loader.conf is changed ac... -
- On FreeBSD 12 and newer pf uses this sysctl to define maximum number of
items supported by its allocations. Make sur... -
10:00 AM Bug #9357: rc.newwanipv6 called regardless of REASON
- We probably need something like a "copy" of /usr/local/sbin/pfSense-dhclient-script here, just for IPv6
-
- The dhcp6c_wan_script.sh does not honor the REASON-Variable set by the dhcp6c process. Even though it is RENEW and th...
-
- FreeBSD 12 introduced a new sysctl, @net.pf.request_maxcount@, which must be set in loader.conf (or loader.conf.local...
02/26/2019
-
-
-
-
10:57 AM pfSense Packages Bug #9355 (Bogus): Telegraf Package - https for InfluxDB Server
- Setup Telegraf to send stats to InfluxDB
When trying https:// in url no stats until http:// used.
Would prefer to... -
- OpenVPN 2.4.7 released last week, needs updated in the OpenVPN client export package: https://openvpn.net/community-d...
-
-
12:05 AM pfSense Packages Bug #9345: Quagga Ospf MD5 interface password truncated to 15 characters
- Tested for FRR OSPF (version 0.2_7). Thank you for the quick fix.
02/25/2019
-
- If you login with a user who has privilege 'WebCfg - System: Login / Logout / Dashboard' and you have widgets on the ...
-
04:04 PM pfSense Packages Bug #9352 (Resolved): Duplicate default views in Status Monitoring that can't be removed.
- Ended up with multiple "Default" views under status monitoring that could not be removed. When attempting to create a...
-
03:15 PM Bug #9351: need option for repeated DHCP retries
- the cable modem (Arris/Moto SB6183) has no ip, its a bridge, the gateway is somewhere at my ISP. the modem stays al...
-
02:59 PM
Bug #9351: need option for repeated DHCP retries
- "propose you add an option to keep retrying DHCP renews on the WAN when the gateway becomes inaccessible." - Based on...
-
- every time my cable company has an outage of more than a few minutes, pfsense ends up with no IP address on WAN, and ...
-
-
-
-
02:26 PM
Bug #6876 (Resolved): Firewall alias issue after adding a wrong alias
-
02/24/2019
- 04:38 PM Revision 3cd21b4e: Routing, actually show the "(default)" mark on the default route as it is present on the OS
- Most obvious problem was when manually switching from WANGW1 to WANGW2 it showed both as (default) after saving the s...
02/23/2019
-
11:41 AM pfSense Packages Bug #9350 (Resolved): not appear proxy config
- This problem is observed when using "squid" and "squidguard" packages together. If you enter values in the "blacklist...
-
11:24 AM Bug #9349: IPSec service start/stop/restart fails after settings change
- Hi.
I mixed the logs (stop/restart) but the problem is the same and I understand your explanation. Nevertheless th... -
- The mode on that says "stop", not restart.
Try a different browser, you may see a more informative error message.
... -
- Hi Jim,
I do not think so. I captured the network traffic in the browser and can see the following request being s... -
- This is most likely because your browser is refusing to refresh the page to update the controls because it would invo...
-
- There seems to be some weird behaviour when changing things on the advance IPsec servie settings tab. As soon as you ...
Also available in: Atom