Activity
From 05/19/2019 to 06/17/2019
06/17/2019
-
09:58 PM Bug #9592: VTI interface down because interface number created is greater than ipsec32768
- Suggested fix in pull request: https://github.com/pfsense/pfsense/pull/4071
-
08:34 PM Bug #9592 (Resolved): VTI interface down because interface number created is greater than ipsec32768
- In some conditions, when creating a VTI interface for routed IP, the interface number allocated is very high.
<opt... -
11:22 AM Feature #9591 (New): Add under firewall rules a search box
- I was thinking on a search box under firewall rules tab, which can filter rules by origin, destination or description...
-
10:16 AM Bug #9586 (Confirmed): Unbound Access List /31 UI Issue
- I can confirm this, but it doesn't have an obvious cause. If I change line 241 to have a minimum of 1, then /32 stays...
-
07:46 AM Feature #9590 (Resolved): RFE: Add additional prefix delegation size entries to dropdown-list
- With current implementation of pfSenses "DHCPv6 Prefix Delegation size" dropdown selection it's impossible to match t...
-
- There does not appear to be enough information here for a valid bug report. This site is not for support or diagnosti...
06/16/2019
-
07:22 PM Bug #9589 (Not a Bug): pfSense not getting WAN IP when WAN interface is LAGG (lacp)
- pfSense not getting WAN IP when WAN interface is LAGG (lacp).
This seems to be an issue with 2.4.4-RELEASE-p3 (amd... -
03:17 PM pfSense Packages Feature #9588 (Duplicate): New package: node_exporter
- I have opened a PR on Github to add a package for the Prometheus node_exporter: https://github.com/pfsense/FreeBSD-po...
-
01:53 PM Feature #9587 (Duplicate): ZFS Mirror status dashboard widget
- Please? It shouldn't be too hard to mirror the old GEOM status, right?
-
11:21 AM Bug #8142: OpenVPN client does not remove static route for custom monitor IP
- Hi,
I'm able to reproduce the issue at 100% with an OpenVPN client on pfSense 2.4.4-p3 and OpenVPN server on one of ...
06/15/2019
-
11:48 PM Bug #9586: Unbound Access List /31 UI Issue
- http://prntscr.com/o2947p
http://prntscr.com/o293k5
http://prntscr.com/o293zg -
- Forum Topic: https://forum.netgate.com/topic/144193/bug-dns-resolver-access-list-31-ui-issue\
Consider the below l...
06/14/2019
-
08:10 PM pfSense Packages Feature #6022: Consider MLVPN for bonded VPN
- If someone would add something to my Bounty maybe we will get it faster?
https://forum.netgate.com/topic/144050/mult... -
06:46 PM Bug #9447: Configuring LAGG at XG-7100 Switch Ports Broken
- Jim Pingle wrote:
> I pushed a fix for this, will be in snaps soon
Thank you very much. Any chance a patch can be... -
12:14 PM Feature #6240: vxlan driver
- +1
-
-
07:58 AM pfSense Packages Bug #9581: pfSense-pkg-suricata upgrade destroys default suricata rules
- Yeah, there
John Silva wrote:
> Confirmed that the rules are clobbered as expected when upgrading to 4.1.4_4. Th... -
06:14 AM Bug #9585: 6RD: Unable to reach hosts on within same 6rd-domain
- Added the WAN configuration
-
- Arghh.. Unable to correct my typos :O
-
- There seem to be a bug in the implementation of 6RD on pfSense as it is unable to pass traffic to hosts within the sa...
06/13/2019
-
09:53 PM pfSense Packages Bug #9581: pfSense-pkg-suricata upgrade destroys default suricata rules
- Confirmed that the rules are clobbered as expected when upgrading to 4.1.4_4. Thanks for the quick fix, Bill!
-
- This fix for this issue has been posted in this pull request: https://github.com/pfsense/FreeBSD-ports/pull/651.
... -
- (cherry picked from commit fe482ccc1eaf59137b29008bc040faaad25088f0)
-
-
- Applied in changeset commit:fe482ccc1eaf59137b29008bc040faaad25088f0.
-
- If legacy settings are configured in ACB, there is a potential XSS vector in services_acb.php via the @hostname@ para...
-
05:09 AM pfSense Packages Bug #9583 (Resolved): Freeradius 3 auth error on OTP (only on PFSense 2.5-dev)
- Freeradius 3 on PFSense 2.5-dev using OTP (Google auth) fail auth (works correctly on simple autentication not OTP).
... -
03:34 AM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
- Rudolf Mayerhofer wrote:
> Setting "Aliases Hostnames Resolve Interval" to 30 seconds (which should be the minimum v... -
12:17 AM pfSense Packages Bug #9211: GeoIP broken in pfSense-pkg-ntopng-0.8.13_3
- Louis van Breda wrote:
> Hello,
>
>
> I just installed and tested the package on 244 r3 and it is simply not wo...
06/12/2019
-
08:00 AM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
- Setting "Aliases Hostnames Resolve Interval" to 30 seconds (which should be the minimum value) in System/Advanced/Fir...
06/11/2019
-
- Thank you for this report. I have added it to my To-Do list for the Suricata GUI package.
-
- (cherry picked from commit 45f95753963e497b5ce14493f9cca05336d75c7b)
-
-
- Applied in changeset commit:45f95753963e497b5ce14493f9cca05336d75c7b.
-
- If a config contains @<vlans></vlans>@ then setting up VLANs at the console may fail with a PHP error:...
-
- I pushed a fix for this, will be in snaps soon
-
-
04:04 AM pfSense Packages Feature #9576: FRR: box missing for staticd.conf when using raw configuration files
- I tested the upgrade to the new package (0.5.2) and it works well.
I also tested the upgrade (0.2_8 ==> 0.5.2) on a ...
06/10/2019
-
- Issue: Upgrade of pfSense-pkg-suricata removes default suricata events rules installed by the base suricata package (...
-
05:38 PM Revision 6c7d0571: Fix handing of DNSimple API response
- It seems DNSimple started using HTTP/2, which broke the regex the dnsimple updater was using to check for success. I ...
-
- PR: https://github.com/pfsense/pfsense/pull/4070
-
- It seems DNSimple recently updated their web server to use HTTP/2 for their API. The curl response handling code in t...
-
- Looks OK for the most part, though I do have one weird device that doesn't match in the leases database vs what is di...
06/09/2019
-
05:48 PM Bug #9572: uPNP not working - miniupnpd needs an update, reporting "interface index not matching", which has been fixed upstream
- Tim Harman wrote:
> @[2.4.4-RELEASE][admin@x.com]/var/log: cat /etc/version.patch
> 3
> [2.4.4-RELEASE][admin@x.co... -
11:10 AM Bug #9579: Upgrade from 2.4.4_2 > 2.4.4_3 failed upon reboot
- Jim Pingle wrote:
> Looks more like a hardware issue to me.
Didn't do the same thing on p1 or p2 with the only di... -
- Looks more like a hardware issue to me....
-
- Recently upgraded my stable 2.4.4_2 instance (on physical hardware not VM) to 2.4.4_3 which didn't work. Rebuilt from...
06/08/2019
-
-
12:23 PM pfSense Packages Bug #9553: ACME package menus do not appear for user other than "admin"
- Tested. Looks good.
-
09:00 AM pfSense Packages Bug #9211: GeoIP broken in pfSense-pkg-ntopng-0.8.13_3
- Hello,
I just installed and tested the package on 244 r3 and it is simply not working.
It realize that is pos... -
07:14 AM Bug #9577: radvd send_ra_forall failed on interface / can't join ipv6-allrouters
- ipv6 gateway disappear from connected clients and ipv6 is not working anymore, i need to restart radvd to make it wor...
06/07/2019
- 06:25 PM Revision 82887eb0: Build net/ng_etf-kmod
-
-
- Implemented in FRR pkg version 0.5.2.
-
- Implemented in FRR pkg version 0.5.2.
-
- This should only affect cleartext passwords, not MD5.
https://forum.netgate.com/topic/143950/frr-ospf-interface-md... -
- Applied in changeset commit:8d4f79cd5fdfe1c5c47f39bc0f92f63268b4593e.
-
- I don't believe there is anything we can do here. That's between FRR and the OS.
You could try a 2.5.0 snapshot wh... -
11:14 AM pfSense Packages Bug #9578 (Not a Bug): Zebra Doesn't detect VIP on lo0 has been removed
- I am using FRR to advertise IP's located on lo0. Previously when using the Quagga package, when changing a VIP to a d...
-
- https://forum.netgate.com/topic/142363/ipv6-broken-radvd-can-t-join-ipv6-allrouters-on-interface/19
log is full of...
06/06/2019
-
- I did not do a lot of research trying to figure out the logic of the Suricata Radix Tree code, but only certain combi...
-
04:23 PM pfSense Packages Bug #9031: Suricata fails to start with interface with /31 mask
- Bill Meeks wrote:
> Okay. Found the source of this bug and it is fixed in this pull request: https://github.com/pf... -
- On PfSense 2.4.4-RELEASE-p3 (amd64), I updated frr package from 0.2_8 (frr 5.0.2) to 0.5.1_1 (frr 6.0.2).
frr static... -
12:48 PM Feature #3792: Group name size limit too restrictive on Active Directory Users
- Still an issue. Since this is a remote group, not sure what the issue with increasing the length would be.
- 10:41 AM Revision 85cbd521: Merge pull request #4061 from evantill/master
-
09:32 AM Feature #9538 (Feedback): add support for athp(4) driver
- ALQ added to all pfSense kernels
-
- PR has been merged. Thanks!
06/05/2019
-
- Thanks!
-
- Okay. Found the source of this bug and it is fixed in this pull request: https://github.com/pfsense/FreeBSD-ports/p...
-
01:24 PM Feature #9575 (New): RFC 7078 - Distributing Address Selection Policy Using DHCPv6
- Hi,
would it be possible to implement RFC 7078 in pfSense? I guess most of the client systems don't support it yet... -
-
01:15 AM pfSense Packages Feature #7793: FRR pkg pfsense web interface checking for RID is setup in OSPF6 section
- I checked latest 0.5 it works fine, I got appropriate error if I did not set RID...
-
- JS was hiding inputs, but now that the hidden inputs are global, the entire form was being hidden.
06/04/2019
-
- This is fixed on 2.5.0, see #9111
The problem is not with FRR, but with IPsec VTI MTU handling.
- 07:59 PM Revision 8cc419b0: Speedup build running all in parallel
- 07:59 PM Revision 2d0b7245: Speedup build running all in parallel
-
-
- A fix for this issue has been incorporated into the Suricata GUI package in version 4.1.4_2. The pull request is pos...
-
-
- This issue is resolved in Suricata package version 4.1.4_2 on pfSense-2.5-DEVEL. The pull request is here: [https:/...
-
- I don't mean to say the /31 netmask is invalid. I was multitasking at the time and now I'm not sure now what I saw w...
-
- Bill Meeks wrote:
> I can only reproduce this issue when I assign an invalid IP address to the interface for the giv... -
- Admittedly I'm very late responding to this bug report, but I just tested on Suricata 4.1.4_1 on pfSense-2.5-DEVEL. ...
- 04:50 PM Revision db999614: Merge pull request #4041 from gitdevmod/master
- 04:41 PM Revision bf11d650: Allow MAKE_JOBS for slow ports
- 04:41 PM Revision 61794d51: Allow MAKE_JOBS for slow ports
- 01:33 PM Revision 1db0bff9: Remove duplicate function
- 01:33 PM Revision 00e3e638: Ticket #3500: Simplify dhcpd_gather_stats.php using system_get_dhcpleases()
- 01:33 PM Revision 55342b60: Ticket #3500: Simplify diag_arp.php using system_get_dhcpleases()
- 01:33 PM Revision 1e76ee45: Remove unused functions
- 01:33 PM Revision c4c730b5: Ticket #3500: Simplify status_dhcp_leases.php using system_get_dhcpleases()
- 01:33 PM Revision 88326a6b: Ticket #3500: Implement system_get_dhcpleases()
- 01:33 PM Revision 626c7734: Move dhcpd_date_adjust_gmt() to util.inc
- 01:33 PM Revision 923eb50e: Move array_remove_duplicate() to util.inc
- 01:33 PM Revision 71be9443: Do not unset undefined variable
-
- PR has been merged. Thanks!
-
- This is still happening on FreeBSD 12/pfSense 2.5.0. Same backtrace:...
-
-
- I just tested this with the most recent version of the Suricata package, version 4.1.4_1, and cannot reproduce this i...
-
- I've reimplemented the function that parses dhcpd.leases
-
07:46 AM Revision edfe22f8: Add Gandi LiveDNS DynDNS client.
-
03:04 AM Bug #9043: openvpn 2.4.3-p1 -> 2.4.4, failed
- Hi,
I'm experiencing the same issues after upgrading pfSense from 2.3.x to 2.4.2 and the problem is still there in...
06/03/2019
-
- Hmm... looks like it is getting pulled in as a dependency, probably with a library.
No matter, you still do not us... -
09:47 PM pfSense Packages Bug #9573: GeoIP database FAIL to download - Suricata package
- Hi, Bill
I´m sorry but suricata is the one installing package GeoIP-1.6.12.
Only the following packages are i... -
09:24 PM Revision 1a26a88b: Update services.inc
-
-
- 06:23 PM Revision 6624a6be: Use system_get_arp_table()
-
- (cherry picked from commit 3334f9c4cd7111c624ba2395b91c065d7dd338b1)
- 06:07 PM Revision 7a5ab2bd: Remove unused variable $pools
- 06:00 PM Revision 38897f40: Remove unused array item 'online'
- 05:47 PM Revision ccc6bd4d: Use system_get_arp_table()
- 05:38 PM Revision b12f00ed: Remove unused variable
- 05:34 PM Revision cda4e23e: Use system_get_arp_table()
- 05:07 PM Revision 5a41b18c: Unbreak interfaces.php defining global $form
- 05:07 PM Revision bd4e8db9: Remove unused variables
- 05:07 PM Revision 65c9fdc6: Use system_get_arp_table()
- 05:07 PM Revision 16ee6ca2: Implement system_get_arp_table()
-
- No config changes or UI changes, it is handled automatically.
(cherry picked from commit f427d68dbca5ed9941b3bc01be1... -
- No config changes or UI changes, it is handled automatically.
- 04:20 PM Revision 086cc72c: Merge pull request #4002 from PaulW/9074-aliasurls
-
-
- 01:41 PM Revision f9ed545d: Update translation files
-
- Applied in changeset commit:affe8a552ef1f7b8e59f3b60fd1421aa46f45b03.
- 01:39 PM Revision 4ef54ac3: Regenerate pot
- 01:39 PM Revision aceaf968: Use Netgate zanata server
- 12:19 PM Revision 3b7af5d0: Revert "Set Hyperscan to default to native arch"
- This reverts commit 960a3893b6951dd4835bada0ef0ac6a92e0ab2f2.
- 12:18 PM Revision 8eb3570b: Revert "Remove hyperscan"
- This reverts commit 164272dab61580f74a287bf970c5ae09fcd89281.
-
- Applied in changeset commit:f427d68dbca5ed9941b3bc01be1c4d81417c134f.
-
- All the ones we have found so far are now fixed. If new ones pop up, open new issues for them.
-
-
- PR has been merged. Thanks!
-
07:56 AM pfSense Packages Bug #5168: squid doesn't function during/after HA failover
- Hello,
any updates with this issue?
i have 200 vlans on my firewall and adding 200 lines with http_port is not g... -
- Matthew Fine wrote:
> Add AAAA record type support for DynDNS with Digital Ocean
>
> Updated dyndns.class, servic...
06/02/2019
-
-
- This issue is resolved and this ticket can be closed.
-
-
- This issue is resolved in the latest Suricata 4.1.4 package.
-
- You do not need to do anything to use the free GeoIP2 Lite database with Suricata on pfSense. It is automatically se...
-
- Hi, to everyone
Suricata v4.1.4 on pfSense 2.4.4-RELEASE-p3 (amd64)
Brand new suricata install, trying to get ... -
03:38 PM
Bug #9572: uPNP not working - miniupnpd needs an update, reporting "interface index not matching", which has been fixed upstream
- @[2.4.4-RELEASE][admin@x.com]/var/log: cat /etc/version.patch
3
[2.4.4-RELEASE][admin@x.com]/var/log: pkg info | gr... -
11:24 AM Bug #9484: With proper timing on boot dhclient won't be started for WAN without manual intervention
- Short note for the future reference. It still works, but I found out that it won't work for default protocol timings ...
-
04:35 AM Feature #9574 (New): Show changelog at package upgrade
- Hello,
it would be useful if we can show a short changelog description on package upgrade page.
Thank you!
06/01/2019
-
- 2.5.0 snaps have FRR 7 now and it appears to be running OK
-
-
12:58 PM Bug #9443: Captive Portal Vouchers feature is broken in 2.5.0
- I can confirm that the changeset is working correctly.
This issue can be marked as resolved -
-
- I can confirm it's working well.
This issue can be marked as resolved -
-
- I can confirm it's working well.
This issue can be marked as resolved -
03:33 PM Revision 1643d2f4: Captive portal: fix locking when reinitialising rules
- Don't take the lock in captiveportal_init_rules() if
captiveportal_configure_zone() has already taken it. -
-
-
05/31/2019
-
10:49 PM Feature #9293: Custom message text for the login screen
- I would love to see this as well. I added it manually to my system, it would be easy to add to the core product. You ...
-
-
- Looks good. Thanks.
-
- Fixed in FRR pkg version 0.5.0
- 07:23 PM Revision 00d2fe90: Merge pull request #4069 from chewrocca/master
- 07:21 PM Revision a1d30d0e: Merge pull request #4038 from emmtbot/ddns-route53
- 07:20 PM Revision d1b75079: Merge pull request #4036 from emmtbot/azure-whitespace
- 07:00 PM Revision 4fb93ea1: Use --libxo to get /usr/sbin/arp results
-
- miniupnpd is reporting "interface index not matching 10 != 2", which was fixed in commit https://github.com/miniupnp/...
-
03:25 PM Revision 0b230bb2: Allow Dynamic DNS wildcards for Route53 #9053
-
- 02:55 PM Revision 8b3e2e26: Update services_dyndns_edit.php
- 02:48 PM Revision 443a8b1b: Update services.inc
- 02:46 PM Revision 0c43f825: Update dyndns.class
- 02:38 PM Revision 5a410280: Merge pull request #4053 from emmtbot/ddns-cloudflare
- 02:35 PM Revision 1e005a02: Merge pull request #4037 from heper/patch-1
- 02:27 PM Revision 0c5b50d6: Merge pull request #3998 from NanoCaiordo/patch-is_fqdn
-
- PR has been merged. Thanks!
-
- PR has been merged. Thanks!
- 02:22 PM Revision 2446347d: Merge pull request #4043 from artooro/pingcheck
-
- PR has been merged. Thanks!
- 02:14 PM Revision 57263c0a: Merge pull request #4035 from emmtbot/ddns-linode
- 02:02 PM Revision d1fe5303: Merge pull request #4025 from kantlivelong/nas_identifier_webui
- 01:58 PM Revision f8a73738: Merge pull request #4024 from plumbeo/fix-session-timeout
-
- pfSense 2.4.4 is using FRR 6 as expected. Still waiting on a new snapshot to check on pfSense 2.5.0/FRR 7
-
- 2.4.4 now uses FRR 6.x and 2.5.0 moved to 7.x
-
- I added some input validation for prefix lists in the latest version of the FRR package. (pkg version 0.5.0)
-
- I removed all but the normal and stub types in FRR pkg version 0.5.0, the underlying FRR was also upgraded so I left ...
-
- Fixed in FRR pkg version 0.5.0
-
- Added in FRR pkg version 0.5.0
-
- Fixed in FRR pkg version 0.5.0
-
- Disabled area..range statements in FRR pkg version 0.5.0
Doesn't look like they are supported even on FRR 7. -
-
- Fixed in FRR pkg version 0.5.0
- 12:22 PM Revision d67604df: Merge pull request #4021 from demospace/hyperscan-native
-
- P Law wrote:
> Possibly a separate issue, but I am unable to resolve warnings that "app-layer-events.rules seems to ... -
- This has been in and working for a while
-
- PR has been merged. Thanks!
-
- PR has been merged. Thanks!
-
- PR has been merged. Thanks!
-
- PR has been merged. Thanks!
-
- PR has been merged. Thanks
-
- PR has been merged. Thanks!
-
- PR has been merged. Thanks!
-
08:30 AM Revision b1c85ec0: requested changes
-
- Superseded by #9449
-
- I recently updated our XG-7100 and before attempting to apply the patch in the associated forum post I checked the ex...
05/30/2019
-
- It looks like the configuration file in /var/etc/frr needs to be removed when the element (ospf, bgp, etc) is disable...
- 10:08 PM Revision 164272da: Remove hyperscan
- 09:18 PM Revision 6b858da1: Merge pull request #4054 from Augustin-FL/save-users-accross-reboot
- 09:13 PM Revision b6129dc4: Merge pull request #4060 from PeterFeicht/fix_layout
-
07:31 PM pfSense Packages Bug #9195: Suricata (latest): very large number of rules cause errors due to unknown reference keys on Rebuild with Interface SID Management List Assignments
- Uninstall without keeping settings and re-install restored the missing rules. Much work ahead to restore to its prev...
-
- Possibly a separate issue, but I am unable to resolve warnings that "app-layer-events.rules seems to be missing!!! Pl...
-
06:37 PM Revision 7b80e743: Restore connected users on boot when associated setting is enabled
- Implement redmine #5644
-
- Implement redmine #5644
-
- Implement redmine #5644
-
- Implement redmine #5644
- 05:43 PM Revision 48fee584: Merge pull request #4044 from PiBa-NL/20190127-actually-show-current-default-route
- 05:25 PM Revision b6b4b5d0: Merge pull request #4058 from Augustin-FL/patch-usermanager-menu
- 05:23 PM Revision 76ac3231: Merge pull request #4059 from PeterFeicht/ppp_uptime
- 05:17 PM Revision 7a123866: Merge pull request #4056 from Augustin-FL/patch-captiveportal-multiserver-perf
- 04:53 PM Revision fb20f0ba: Merge pull request #4064 from tylerszabo/patch-1
-
- Hello,
One question : this issue is similar to #9221 ( https://github.com/pfsense/pfsense/pull/4057 )
Is PR 405... -
- PR has been merged. Thanks!
-
- PR has been merged. Thanks!
-
-
- This issue is now fixed in both the RELEASE and DEVEL branches of pfSense. In pfSense 2.4.4.x the fixed package vers...
-
- For sh/.profile, run "resizewin -z" at login which will set the terminal
type only when empty, which is kind to remot... -
- For sh/.profile, run "resizewin -z" at login which will set the terminal
type only when empty, which is kind to remot... -
- Feedback at https://forum.netgate.com/post/845699 confirms it is now fixed
-
- PR has been merged. Thanks!
-
- PR has been merged. Thanks!
-
- PR has been merged. Thanks!
-
- PR has been merged. thanks!
- 12:07 PM Revision a0e644e5: Revert "Enable TARGETBASED option for snort"
- This reverts commit 3bd04067983f3cfdad473a9c72f5e7e1133ef8d1.
- 11:54 AM Revision 3bd04067: Enable TARGETBASED option for snort
-
- PR has been merged. Thanks!
-
11:09 AM pfSense Docs Correction #9570 (Closed): Feedback on Routing and Multi-WAN — Gateway Settings
- *Page:* https://docs.netgate.com/pfsense/en/latest/routing/gateway-configure.html
*Feedback:*
Please add docume... -
10:34 AM Bug #9488: No console when booting CE Memstick UEFI.
- The FreeBSD 12 memstick also stalls in the same place. Good call!
Tested this image: https://download.freebsd.org/... -
- Steve Wheeler wrote:
> The ISO image behaves exactly the same. There is no output after root is mounted other than t... -
- Applied in changeset commit:1dc4afdc6657e83e824be43b27eff8a5f35ea4f3.
-
- Serial consoles do not have the correct size set (rows, cols) based on the user's terminal, since serial doesn't have...
-
- I can't reproduce this here. I run a few VMs this way and the resolver starts as expected.
Please post on the "For...
05/29/2019
-
09:18 PM pfSense Packages Bug #9568 (New): UFSSwapDir::openLog: Failed to open swap log.
- After a 3 days of been stopped Squid and SquidGuard, once started again Squid cannot start and the message is:
UFS... -
-
04:31 PM Bug #9567 (Not a Bug): Unbound DNS Resolver does not start up when using IPv6 DHHCPv6 WAN DHCPv6 LAN coupled with v6 Prefix Delegation
- When operating with a dual IPv4/IPv6 stack, on a consumer modem (Comcast),
with WAN DHCP single internet-routable... -
01:52 PM Bug #9565: Too many redirects error in /services_unbound_acls.php
- Yes, sorry, it looks to be machine-specific. It did it when I'd rebooted and started without addons, tried over diffe...
-
- Can't duplicate it here.
Please post to the forum and include more details about your configuration for that tab t... -
- Reproducible in Safari 12.1.1. I don't remember what previous release I had worked with before where it loaded succes...
-
01:46 PM Bug #9566 (New): Traffic graph displays traffic incorrectly
- A computer is connected to a netgate SG-2440 device
6 Mbps upstream traffic started on the computer (traffic rate ve... -
- Applied in changeset commit:84bbc6373afeb929a6ca7663c8fbc8e1ab03e125.
-
- Confrimed here as well. It appears to only affect Namecheap, my others are working as expected. The status on service...
-
- 2.5.0-DEVELOPMENT - running the current dev branch
-
- On the service dashboard, the 'Dynamic DNS status' is not printing the correct IPv4. The underlying service appears t...
- 12:53 PM Revision de0e62a1: Rename pfSense-pkg-bind9 to pfSense-pkg-bind
- 12:53 PM Revision 478d5fc8: Rename pfSense-pkg-bind9 to pfSense-pkg-bind
-
- This issue is fixed in the upcoming snort-2.9.13_1 package that will be available for pfSense-2.5-DEVEL in the near f...
-
- I've checked on current version and it's not happening anymore
-
- Renamed port from pfSense-pkg-bind9 to pfSense-pkg-bind, which matches PORTNAME that is used to construct Changelog URL
-
-
01:37 AM Bug #9562: User manager problem
- Sorry! This bug already submitted before - https://redmine.pfsense.org/issues/9541
-
- Think I was finding some issue with user manager. I was performed clean install the last pfsense (2.4.4-release-p3), ...
-
02:28 AM pfSense Packages Feature #9563 (Resolved): Syslog-ng TLS support
- Hi,
I'm trying to send syslog over TLS. Added syslog-ng package and configure TLS. But syslog-ng does not start. I...
05/28/2019
-
- Snort3 rules are incompatible with Suricata 4.x. If you install those rules, they will overwrite some critical confi...
-
- I ran into this issue as well after having tried the Snort3 rules and reverted to 2.9 - Suricata is far pickier about...
-
-
- (cherry picked from commit c92dbfc189ee4cc66726d817f47e5473f8ffe147)
-
-
04:31 PM Bug #9561 (Duplicate): PPPoe 6RD broken in 2.5
- Been using 2.5 for a while when I noticed that I had disabled ipv6 on 2.4 before upgrading. Tried enabling a Centuryl...
-
- Applied in changeset commit:5c3db9609d3a8705090b60a822ae2b66dda3bbbe.
-
- On 2.5.0, SMART tests are not working. Input validation claims the test is invalid no matter what is submitted by the...
-
- Applied in changeset commit:c92dbfc189ee4cc66726d817f47e5473f8ffe147.
-
- The output from a non-sync'd GPS set as an NTP source produces PHP errors in the NTP status. Both the main status pag...
-
- *Page:* https://docs.netgate.com/pfsense/en/latest/book/l2tp/l2tp-server-configuration.html
*Feedback:*
In this... -
- FRR 6.0.x seems to be OK on pfSense 2.5.0, so we need to play a bit of musical FRR upgrades:
* Copy FRR 6.0.x back... -
- "Not a Bug" is a closed state so it's all good as-is.
-
10:50 AM Todo #8886: Update downloads page once hybrid iso/img installers are implemented
- Ah. Should this be closed then? (Doesn't seem I have the option to close it in status options...)
-
- We won't unify memstick and ISO images in order to preserve the FAT partition we added to memstick that can be used t...
-
- Fix is in apcupsd 0.3.91_5
-
- apcupsd_status.php does not validate input or encode user input before use, leading to potential abuse (XSS, ACE).
-
- Fixed in ACME 0.5.8
-
- Fixed in ACME 0.5.8
05/27/2019
- 07:54 PM Revision ad1d975a: Fix #9443: Use phpseclib to create RSA key
- OpenSSL doesn't allow to create a 64 RSA key anymore. Use phpseclib to
do it using PHP. -
05:36 PM Bug #9362: rc.dyndns.update: Cloudflare DDNS with proxy enabled doesn't work at all
- Berzerker Berzerker wrote:
> Chiming in that this is broken for me as well, as described in the original description... - 04:45 PM Revision ffa8f605: Retire now unused is_jumbo_capable()
- 04:43 PM Revision 08fe7601: Fix #9548: Do not rely on VLANMTU flag
- Do not consider VLAN capable only interfaces that have VLANMTU flag.
This flag is used to determine if that interface... -
- Applied in changeset commit:ad1d975acce7a0b7562baca0a6cadab2629de51e.
- 02:00 PM Revision 1842cd92: Bump Copyright to 2019
- 01:50 PM Revision 1ead3516: Fix #8821: Deprecate Growl Notifications
- Growl appears to be abandoned upstream. No updates in ~5 years, and few if
any users on pfSense - 01:37 PM Revision b4f499f0: Remove code commented out in 2013
-
- Applied in changeset commit:08fe7601ef535aa354255658215475223a23ddee.
-
- Clinton,
Can you check if it's still happening on 2.5.0 snapshots? -
- already moved to 1.10.1
-
- Already done. Python 2.x is not required anymore
-
- Applied in changeset commit:1ead351615ad1fc8f78684fb0ffff83c9e4355a7.
-
- Both versions were removed
-
07:48 AM pfSense Packages Feature #9555 (Resolved): pimd package
- Folks - as it seems that IGMP Proxy is "broken" and pimd works is it possible to add (or replace) IGMP Proxy with pim...
-
01:36 AM Bug #9054: Gateway Group slow (or never) to switch back to Tier 1
- Vasyl Semenchuk wrote:
> Did you try restart service dpinger? In my case this helps switch back to WAN1
Actually ... -
- Mitch Claborn wrote:
> @VasylSemenchuk Are your gateway groups set to trigger level "Packet Loss or High Latency" or... -
- Generally same problem here, BUT EVEN HAVE PROBLEM WHEN THE GATEWAY GROUP ISN'T PFSENSE DEFAULT GATEWAY. After diggin...
05/26/2019
-
- hello,
this is a duplicate of #8616 and #5644
fix are available and have been published as pull requests. Waiti... -
- hello,
this is a duplicate of #8616 and #5644
fix are available and have been published as pull requests. wait... -
- See also: https://lists.freebsd.org/pipermail/freebsd-net/2019-February/052894.html
This appears to have been comm...
05/25/2019
-
- In the future, do not report security issues via Redmine. See https://www.netgate.com/security/
-
04:05 PM pfSense Packages Bug #9554 (Resolved): Stored XSS in ACME Package (version 0.5.7_1) /acme/acme_accountkeys_edit.php
- Stored XSS vulnerability occurs due to input validation errors in "Name" and "Description" fields when adding new acc...
-
- Example Screenshot
-
- ACME package menus do not appear for user other than "admin"
-
- There is not enough information here for a valid bug report. Please discuss the issue on a forum until a more specifi...
-
01:44 PM Bug #9552 (Rejected): DNS lookups intermittently timing out
- Using DNS Resolver, DNS lookups by clients intermittently timing out and or extremely delayed in receiving response s...
-
-
09:12 AM pfSense Packages Feature #9551: Add py-speedtest-cli to package repo
- And it has always been there, next time I will be more diligent. Anyway, needed to use py27-speedtest-cli on 2.4.x an...
-
- Just a simple request to add py-speedtest-cli to the package repo
https://www.freshports.org/net/py-speedtest-cli/
05/24/2019
-
- Attempts to detect a special case where a file does not actually
exist, and yet should be allowed since it is used by... -
- Attempts to detect a special case where a file does not actually
exist, and yet should be allowed since it is used by... -
- Applied in changeset commit:bdbd8534eef5b93370065340de225a1cd5e5faa8.
-
- The new privilege matching method does not allow menu or tab links to anchors, such as @#foo@. Since these are not pa...
-
-
- It looks that with version *2.4.4-RELEASE-p3* problem no longer exists.
-
- Without preempt, you'll get systems with a mix of MASTER/BACKUP status or nothing will trigger a failover. That isn't...
-
01:54 PM Feature #9549 (Rejected): Carp alters for backup after secondary link crash.
- Greetings,
Today when working with CARP with several links we have a problem where the master detects the down of ... -
- Today there is a function called is_jumbo_capable() that detects if VLANMTU flag is supported by interface and this f...
-
- Duplicate of #9413
-
07:54 AM Bug #9547: altq on vlan interfaces not supported
- btw - on XG-1541
-
- on 2.5.0-DEVELOPMENT (amd64)
built on Thu May 23 20:41:57 EDT 2019
FreeBSD 12.0-RELEASE-p4
There were error(s...
05/23/2019
-
- YP Lo wrote:
> Found out recently that ntopng v3.6 is already using GeoLite2 database, and hooked up the remaining G... -
07:32 AM pfSense Packages Bug #9211: GeoIP broken in pfSense-pkg-ntopng-0.8.13_3
- Found out recently that ntopng v3.6 is already using GeoLite2 database, and hooked up the remaining GeoLite2 update s...
-
03:16 PM pfSense Packages Bug #9546 (Resolved): Snort fails to load/start with host_attribute_table
- Using the PfSense gui to load and import an attribute table will cause Snort to error on startup. It will not start.
... -
04:17 AM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
- I know it's targeted for 2.5.0, but still I'd like to inform people here that 2.4.4_3 does indeed NOT fix this, makin...
05/22/2019
-
08:50 PM pfSense Packages Feature #9238: Add support for Zerotier
- I think it would be pretty awesome if PF supported this. ZT is a great and simple way of securing devices in a virtua...
-
- While here, add option to disable PTI display in sysinfo widget.
Implements #9323
(cherry picked from commit 42c48ef... -
- While here, add option to disable PTI display in sysinfo widget.
Implements #9323 -
- (cherry picked from commit 912562c4d76e9b629e99d44c56b363147d9ded0d)
-
-
- Applied in changeset commit:42c48efe1c326273079ac38176098a1993f8ae88.
-
-
- Applied in changeset commit:42c48efe1c326273079ac38176098a1993f8ae88.
-
-
- Now that @ROUTE_MPATH@ is in the default kernel on FreeBSD 14 and @net.route.multipath@ is on (@1@), enable the MULTI...
-
- Add ROUTE_MPATH to the kernel, assuming it does not cause any conflicts with existing options we need.
-
- Applied in changeset commit:912562c4d76e9b629e99d44c56b363147d9ded0d.
-
- Attempting to reverse resolve an IPv6 address on diag_dns.php fails with the error "Host must be a valid hostname or ...
-
02:52 AM Feature #6626: Support for IPv6 firewall entries with dynamic delegated prefix and static host address
- I think this issue really needs to be adressed ASAP. If I understand this correctly it means that today the best work...
05/21/2019
-
- (cherry picked from commit cf529cbe33ae53f3f95b37a227da141b97465f20)
-
- 05:49 PM Revision e905762d: Add sysutils/ccze to the repo
- 05:49 PM Revision e82e602d: Add sysutils/ccze to the repo
-
02:45 PM Bug #9539: HA: admin user's authorized key(s) won't get synced
- Discussion ongoing in PR 4068 - https://github.com/pfsense/pfsense/pull/4068
-
- Applied in changeset commit:cf529cbe33ae53f3f95b37a227da141b97465f20.
-
- Looks like it's due to an instance of an incorrect usage of a wildcard when attempting to patch the page. The new str...
-
07:47 AM Bug #9541: Non-admin user with admin rights is given the wrong URL for the user manager
- Also get https://x.x.x.x/system_usermanager_passwordmg.php when you use FreeRadius for the user auth.
05/20/2019
-
09:46 PM pfSense Packages Bug #9542 (Closed): FreeRadius with MySQL not started and require mysql-client packet
- Hello!
Freedaius start log (with Mysql-enable)
> Could not link driver rlm_sql_mysql: Shared object "libmysqlclient... -
- In 2.4.4p3 a user with admin rights that is not the admin user is given when opening the user manager:
https://x.x.x... -
- This is to do with how users are synced in /usr/local/www/xmlrpc.php
In this file one will find:... -
03:54 AM Bug #9539 (Resolved): HA: admin user's authorized key(s) won't get synced
- Follow up from the forums: https://forum.netgate.com/topic/143452/admin-user-not-fully-synced/3
We had that tested... -
- While here, fix save descriptions.
(cherry picked from commit 303641f8283016a88f53c7743c962e16ba683579) -
- While here, fix save descriptions.
-
- Applied in changeset commit:303641f8283016a88f53c7743c962e16ba683579.
-
- I can't reproduce this on 2.5.0 or 2.4.4-p3. I can change the setting every which way, no errors. That said, I can so...
-
09:19 AM Bug #9540 (Resolved): PHP Uncaught Error in Status/System Logs/Firewall/Dynamic View
- I clicked the wrench in the upper-right corner to change the display to reverse order (newest first) and I got this f...
-
08:14 AM Bug #9362: rc.dyndns.update: Cloudflare DDNS with proxy enabled doesn't work at all
- Chiming in that this is broken for me as well, as described in the original description.
2.4.4-p2
05/19/2019
-
-
-
- It would be great to get the athp driver into a 2.5 snapshot for testing. what we need is kernel with option ALQ and ...
-
05:43 AM
pfSense Packages
Bug #9537 (New): One month offset in displayed data between time changes
- There is a bug in the Status > Traffic Totals package with a one-month offset in displaying data. The offset occurs a...
Also available in: Atom