Activity
From 06/12/2019 to 07/11/2019
07/11/2019
-
05:03 PM Feature #9627 (New): Captive Portal only shows authenticated users
- https://forum.netgate.com/topic/144845/captive-portal-only-shows-authenticated-users
Would like to see all users/d... -
09:11 AM Bug #9626 (New): When deny write permission is assigned to a user, there is no error feedback if the user tries to write something
- I believe this would make it clear when someone can;t write config, as currently there is no error and simply the con...
07/10/2019
- 05:52 PM Revision b73d8949: Fixed #9245 updating copyright notices
- 05:26 PM Revision 7ec80e76: Fixed #9586 by detecting if option list includes /0 or not
-
01:00 PM
Todo #9245: Update copyright notices to 2020
- Applied in changeset commit:b73d8949df5fdfa5b6a798d393c685159f6266fd.
-
12:53 PM
Todo #9245 (Feedback): Update copyright notices to 2020
- Updated with find/sed
-
12:35 PM
Bug #9586: Unbound Access List /31 UI Issue
- Applied in changeset commit:7ec80e763f7e8357a4e5b0d2d57546cfd5d0f0f0.
-
12:28 PM
Bug #9586 (Feedback): Unbound Access List /31 UI Issue
- Fixed by detecting if option list includes /0 or not
-
09:22 AM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
- Rudolf Mayerhofer wrote:
> Setting "Aliases Hostnames Resolve Interval" to 30 seconds (which should be the minimum v... -
07:53 AM Bug #9625 (Duplicate): wrong URL in main menu (for User Manager)
- Duplicate of #9541
-
07:47 AM Bug #9625 (Duplicate): wrong URL in main menu (for User Manager)
- https://yadi.sk/i/G2taeIIjyd8bZQ
User Manager in main navbar have wrong URL. Is URL for change password -
04:10 AM Bug #9413: VLAN driver missing ALTQ support
- On an upgrade to the 2.5 dev snapshot, I had multiple messages about this, warning me the em0.90 didnt support altq, ...
-
03:50 AM Bug #9148: PPPoE over a VLAN fails to reconnect.
- Steve Wheeler wrote:
> In some situations PPPoE fails to reconnect after an upstream outage or making a change local...
07/09/2019
-
- We have some diagrams on docs like https://docs.netgate.com/pfsense/en/latest/book/nat/ordering-of-nat-and-firewall-p...
-
02:49 PM pfSense Docs Correction #9624 (Rejected): Feedback on The pfSense Book
- *Page:* https://docs.netgate.com/pfsense/en/latest/book/index.html
*Feedback:*
_*Please add functional flow dia... -
01:24 PM Bug #9615: Connections permitted by a schedule are not killed when that schedule expires.
- UPDATE: The wifi router is behind the pfSense firewall. All devices on the network (including the wifi router) get t...
-
07:36 AM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
- Gavin Stewart wrote:
> Very interesting. I'm not seeing that occur at all (and it was something I was monitoring clo... -
-
- The pages already contain the necessary metadata, it just hadn't been pulled into the privilege files. Should be an e...
-
02:58 AM
Feature #9620 (Resolved): User privilege to manage integrated switch
- I wanted to grant a group/user the privilege to view (and administer) the integrated switch of a XG-7100 but couldn't...
-
- Setup:
WAN - IPv4 PPPoE via re1, IPv6 via SLAAC.
Expected result: Stable IPv6 connectivity
Actual result:
Whe... -
05:42 AM Bug #9622 (Resolved): Changing admins membership does not replicate correctly to HA slave
- To reproduce, on a pfSense 2.4.4-3 HA cluster
* On the master: create a user which is *not* a member of the "admin... -
03:09 AM
Feature #9621 (New): More convenient deletion of single user privileges
- Currently when you remove a single granted attribute from a user (so not those granted via group membership) you get ...
07/08/2019
-
- Screenshot of rules attached.
-
- The first rule is wrong because a prefix list must contain prefixes, thus it should be @0.0.0.0/0@. The second line i...
-
12:32 AM pfSense Packages Bug #9619 (Not a Bug): FRR - Prefix Lists
- PFSense 2.4.4_3
frr 0.5.2
Reproduce:
Services->FRR->Global Settings->Prefix Lists
Add new Prefix List
Name: ...
07/07/2019
-
- Sorry for the remark on default rules. I noticed that the logfile settings have options for that.
Log packets mat... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/monitoring/logs/firewall.html
*Feedback:*
- I assume that an A...
07/06/2019
-
03:22 PM Feature #9617: PPPoE Static IP Configuration in GUI
- I did not mean to submit this as a bug, it is a feature request.
-
- Hello,
I recently had a little bit of trouble with PPPoE configuration, specifically under the circumstance of a s... -
11:08 AM pfSense Packages Feature #9616 (New): Package for Docs
- Cen you please provide the docs as a package, so they can be accessed offline.
07/05/2019
-
- On the /system_advanced_misc.php page, under Schedule States it states that "By default, when a schedule expires, con...
-
- Not enough information here for a valid bug report. Something generated a huge page, but that's likely localized to y...
-
12:20 AM pfSense Packages Bug #9614 (Not a Bug): Crash report begins. Anonymous machine information:
- amd64
11.2-RELEASE-p10
FreeBSD 11.2-RELEASE-p10 #9 4a2bfdce133(RELENG_2_4_4): Wed May 15 18:54:42 EDT 2019 root...
07/04/2019
-
- Duplicate of #9541
-
- When I'm logged in as admin, the System -> User Manager menu takes me to /system_usermanager.php, but when I log in a...
07/03/2019
-
-
- Full details at https://www.freebsd.org/security/advisories/FreeBSD-SA-19:10.ufs.asc but long story short, on UFS fil...
-
- Applied in changeset commit:40caec85cc115fa3249a08c328026c2c0749980a.
-
- First boot after a new install on a 2.5.0 snapshot or after factory reset has this error in the boot log:...
-
08:03 AM Feature #9531: [IPSEC] Add additional curve-based DH Groups (31+)
- Just as feedback: we had the first two tunnels set up with EC25519 / DH31 as Phase1 (and in one case Phase2, too) and...
07/02/2019
-
03:08 PM Bug #9043: openvpn 2.4.3-p1 -> 2.4.4, failed
- Thanks for the information, I will try out with OS debian stable, version 2.4.x openvpn.
pfSense software 2.4.4-RE... -
02:37 PM Bug #9043: openvpn 2.4.3-p1 -> 2.4.4, failed
- I ended up moving over to OPNSense, which works flawlessly with Mikrotik. They're using an OpenVPN version which is o...
-
- There is no pfSense bug here. Either it's a Mikrotik issue or a config issue. Post on the forum for assistance.
-
- Hello everyone,
We have the same problems after the upgrade pfSense software from 2.3.x to 2.4.x.
We use Remote...
07/01/2019
-
- * Sanitize user input before using as path/filenames
* Use a more accurate method of determining image type on read
*... -
- * Sanitize user input before using as path/filenames
* Use a more accurate method of determining image type on read
*... -
- (cherry picked from commit d31362b69d5d52dc196dc72f66e830cd1e6e9a4f)
-
-
- Applied in changeset commit:2c544ac61ce98f716d50b8e5961d7dfba66804b5.
-
- I was able to replicate the problem.
To reproduce with cURL:
1. Login:... -
05:39 AM Bug #9610 (Resolved): picture.widget.php: Arbitrary file read/write
- in `/widgets/widgets/picture.widget.php`, when we post a widgetkey and upload a image , we can create or read a arbit...
-
- Applied in changeset commit:d31362b69d5d52dc196dc72f66e830cd1e6e9a4f.
-
- I was able to replicate the problem, but there are a couple notable exceptions left out above:
1. There must be at... -
- in `services_captiveportal_mac.php` parameter username and parameter delmac be displayed without any filter.
!http... -
- 0.5.2 is not the latest version. The latest version is 0.6, which is what I said in my comment. FRR pkg version 0.6 i...
-
12:42 AM pfSense Packages Feature #7794 (Assigned): FRR pkg pfsense no metric-type option in OSPF redistribute section of web-interface
- I updated to latest FRR version: 0.5.2 which is based on frr6-6.0.2_1 and there is still not External type metrics se...
06/30/2019
-
- This should be possible with FRR pkg version 0.6: https://forum.netgate.com/topic/144572/frr-0-6-coming-big-changes-t...
-
- This should be possible with FRR pkg version 0.6: https://forum.netgate.com/topic/144572/frr-0-6-coming-big-changes-t...
-
07:37 AM pfSense Docs New Content #9608 (Duplicate): Add note about disabling secure boot when configuring a Hyper-V Gen 2 VM
- *Page:* https://docs.netgate.com/pfsense/en/latest/recipes/virtualize-hyper-v.html
*Feedback:*
Just to add to t...
06/29/2019
-
03:42 AM Bug #9577: radvd send_ra_forall failed on interface / can't join ipv6-allrouters
- Now I have this as well:
Jun 29 07:17:29 radvd 62926 can't join ipv6-allrouters on hn0.10
Jun 29 07:15:22 rad...
06/28/2019
-
-
-
11:48 AM Revision c2b091b9: Start building snort3 binary
-
- Applied in changeset commit:aa618753171d9fe8d7f3c46f49a1ea16832e138b.
-
- Now that it's 2019 and we have OpenSSL 1.1.x we can play a bit of musical TLS versions for nginx.
Captive Portal c... -
07:12 AM Bug #9606 (Not a Bug): Realtek 8168/8111 NIC unstable driver
- Dear Developers,
at one of our customer pfSense showed "re1: watchdog timeout" everytime a specific page was loade... -
06:28 AM Feature #9605 (Duplicate): Support custom CIDR on IPSEC Auto-Exclude LAN Address
- Hi. In my scenario, i have multiple LANs, and all of them need dhcp-relay(Netgate forum example - https://forum.netga...
06/27/2019
-
10:14 PM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
- Mark Monaghan wrote:
> The crontab entries as mentioned in #11 didn't run as they were just keeping on adding new fi... -
- This isn't a bug we can fix, it's how FRR behaves on point-to-point links. The other attempts you made to get a route...
06/26/2019
-
05:25 PM pfSense Packages Bug #9604 (Not a Bug): FRR cannot redistribute route to OpenVPN network
- FRR will not redistribute the exact route to a local OpenVPN network as either;
* A sub network selecting the OpenVP... -
03:56 PM Todo #9603: Strongswan stroke is deprecated, move to swanctl/vici
- I submitted a private comment and it changed the bug to private. Since his comment was on a public list there is no r...
-
- Aside from the deprecated status of ipsec/stroke we have seen what appear to be random instances of strongswan saying...
-
- Strongswan says:
Management Commands¶
The powerful swanctl command starts, stops and monitors IPsec connect... -
02:11 PM Bug #9602 (Resolved): Dynamic DNS with DigitalOcean not working
- After activating Dynamic DNS for Digital Ocean, I see this in the logs:...
-
08:42 AM pfSense Packages Feature #9521: Upgrade to HAProxy 1.9
- Torben Hørup wrote:
> haproxy 2.0 LTS has beeen released. better to use that one instead.
Right. 1.9 is a stable ... -
07:35 AM pfSense Packages Feature #9521: Upgrade to HAProxy 1.9
- haproxy 2.0 LTS has beeen released. better to use that one instead.
06/25/2019
- 06:35 PM Revision 59385e04: Keep "Show all configured leases" enabled after deleting DHCP leases.
-
-
- The crontab entries as mentioned in #11 didn't run as they were just keeping on adding new filterdns processes, event...
-
- Pushed a fix in Status_Monitoring version 1.7.8.
Before:... -
- If @rrd_fetch()@ produces an error, this error is sent back in JSON without any processing. If the user creates a spe...
-
- Applied in changeset commit:980e3e500340af6f90ce75602c376d78fa344575.
-
06:57 AM Bug #9600 (Resolved): Add athp to wireless device regex list
- the gui to configure the athp wireless interface does not show options to configure it
please add athp to "wireless... -
01:49 AM pfSense Packages Feature #8982: HAproxy ACL support for map in configuration UI
- Further comments.
I have stumbled upon a case where I need to match the contents of an attribute in an SSL certifi... -
- I would like to raise a feature request for a "peers" section for sharing sticky tables between hosts in High Avail. ...
06/23/2019
-
- There is not enough information here for a valid bug report.
This site is not for support or diagnostic discussion... -
01:39 AM Bug #9598: nat rule disappear
- I have added 3 nat rule with "Add a new NAT base on this one" option and I moved the rows of each rule together and i...
-
- I have added 3 nat rule with "Add a new NAT base on this one" option and I moved the rows of each rule together and i...
06/22/2019
-
- Christoforos Tsoukaris wrote:
> Based on what Rudolf wrote, I changed the value of "Aliases Hostnames Resolve Interv... -
10:02 PM Bug #1819: DNS Resolver Not Registering DHCP Server Specified Domain Name
- Lynn Dixon wrote:
> I am still wishing this would get fixed as well. Not much traction on my bounty thread either.
... -
09:33 PM Bug #1819: DNS Resolver Not Registering DHCP Server Specified Domain Name
- I am still wishing this would get fixed as well. Not much traction on my bounty thread either.
-
- That issue is planned for 2.5.0, but is it already available?
I've just tested the latest 2.5.0 development versio...
06/21/2019
-
- Not a bug. You have a filesystem or hardware issue.
This site is not for support or diagnostic discussion.
For ... -
02:21 PM Bug #9597: pfsense bug
- I install pfsense from month ago and every things was ok after that the system cant boot and I reinstall it, so I hav...
-
- Crash report begins. Anonymous machine information:
amd64
11.2-RELEASE-p10
FreeBSD 11.2-RELEASE-p10 #9 4a2bfdce...
06/20/2019
-
09:00 AM Feature #9155: Add driver bnxt for Broadcom NetXtreme interfaces
- I got these nics to work by simply copying the file via scp(From a FreeBSD 11.2 ISO image - /boot/kernel/if_bnxt.ko)...
-
05:00 AM Bug #9596 (Resolved): DHCPv6 Range should not be mandatory if Stateless DHCP selected as router mode
- I'm using Stateless DHCP router mode, as described in docs:
"The firewall will send out RA packets and addresses c...
06/19/2019
-
02:20 PM Bug #9595: OpenVPN does not resync when running on a gateway group
- PR: https://github.com/pfsense/pfsense/pull/4072
-
- When OpenVPN clients/servers are running on a gateway group interface, they should always bind to the most preferable...
-
- Implementation now checks if OpenVPN client/server running on gateway group should resync when IP changes occur or if...
- 03:10 AM Revision 23dfe5ad: Merge remote-tracking branch 'upstream/master'
- 03:01 AM Revision f93ec385: openvpn: cleaning default case handling in switch statements
06/18/2019
-
- Jim,
Since you indicate not to open wordfiles hereby a picture of the firewall log.
Sincerely,
Louis -
- Feel free to discuss the issue more in depth on the forum if you think there might be something else going on. We don...
-
- Jim,
At best I only partly agree with you. We can argue about if it is yes or no useful to check for bogon networ... -
- Bogons is not intended to be used on local interfaces. You should only pass in from your specific local networks on l...
-
- Hello,
When defining rules for Simple Service Discovery Protocol (SSDP), I discovered a serious bug. Luckily with ... -
- You have a network design or configuration problem. This site is not for support or diagnostic discussion.
For ass... -
- Hello,
I divided my network in multiple subnets. There is traffic between those subnets passing the LAN gateways a... -
05:43 AM Feature #9155: Add driver bnxt for Broadcom NetXtreme interfaces
- This module has been tested by several users and seems stable. It would be nice to have it included.
06/17/2019
-
09:58 PM Bug #9592: VTI interface down because interface number created is greater than ipsec32768
- Suggested fix in pull request: https://github.com/pfsense/pfsense/pull/4071
-
- In some conditions, when creating a VTI interface for routed IP, the interface number allocated is very high.
<opt... -
11:22 AM Feature #9591 (New): Add under firewall rules a search box
- I was thinking on a search box under firewall rules tab, which can filter rules by origin, destination or description...
-
- I can confirm this, but it doesn't have an obvious cause. If I change line 241 to have a minimum of 1, then /32 stays...
-
07:46 AM Feature #9590 (Resolved): RFE: Add additional prefix delegation size entries to dropdown-list
- With current implementation of pfSenses "DHCPv6 Prefix Delegation size" dropdown selection it's impossible to match t...
-
- There does not appear to be enough information here for a valid bug report. This site is not for support or diagnosti...
06/16/2019
-
07:22 PM Bug #9589 (Not a Bug): pfSense not getting WAN IP when WAN interface is LAGG (lacp)
- pfSense not getting WAN IP when WAN interface is LAGG (lacp).
This seems to be an issue with 2.4.4-RELEASE-p3 (amd... -
03:17 PM pfSense Packages Feature #9588 (Duplicate): New package: node_exporter
- I have opened a PR on Github to add a package for the Prometheus node_exporter: https://github.com/pfsense/FreeBSD-po...
-
01:53 PM Feature #9587 (Duplicate): ZFS Mirror status dashboard widget
- Please? It shouldn't be too hard to mirror the old GEOM status, right?
-
11:21 AM Bug #8142: OpenVPN client does not remove static route for custom monitor IP
- Hi,
I'm able to reproduce the issue at 100% with an OpenVPN client on pfSense 2.4.4-p3 and OpenVPN server on one of ...
06/15/2019
-
11:48 PM Bug #9586: Unbound Access List /31 UI Issue
- http://prntscr.com/o2947p
http://prntscr.com/o293k5
http://prntscr.com/o293zg -
- Forum Topic: https://forum.netgate.com/topic/144193/bug-dns-resolver-access-list-31-ui-issue\
Consider the below l...
06/14/2019
-
08:10 PM pfSense Packages Feature #6022: Consider MLVPN for bonded VPN
- If someone would add something to my Bounty maybe we will get it faster?
https://forum.netgate.com/topic/144050/mult... -
06:46 PM Bug #9447: Configuring LAGG at XG-7100 Switch Ports Broken
- Jim Pingle wrote:
> I pushed a fix for this, will be in snaps soon
Thank you very much. Any chance a patch can be... -
12:14 PM Feature #6240: vxlan driver
- +1
-
-
07:58 AM pfSense Packages Bug #9581: pfSense-pkg-suricata upgrade destroys default suricata rules
- Yeah, there
John Silva wrote:
> Confirmed that the rules are clobbered as expected when upgrading to 4.1.4_4. Th... -
06:14 AM Bug #9585: 6RD: Unable to reach hosts on within same 6rd-domain
- Added the WAN configuration
-
- Arghh.. Unable to correct my typos :O
-
- There seem to be a bug in the implementation of 6RD on pfSense as it is unable to pass traffic to hosts within the sa...
06/13/2019
-
09:53 PM pfSense Packages Bug #9581: pfSense-pkg-suricata upgrade destroys default suricata rules
- Confirmed that the rules are clobbered as expected when upgrading to 4.1.4_4. Thanks for the quick fix, Bill!
-
- This fix for this issue has been posted in this pull request: https://github.com/pfsense/FreeBSD-ports/pull/651.
... -
- (cherry picked from commit fe482ccc1eaf59137b29008bc040faaad25088f0)
-
-
- Applied in changeset commit:fe482ccc1eaf59137b29008bc040faaad25088f0.
-
- If legacy settings are configured in ACB, there is a potential XSS vector in services_acb.php via the @hostname@ para...
-
05:09 AM pfSense Packages Bug #9583 (Resolved): Freeradius 3 auth error on OTP (only on PFSense 2.5-dev)
- Freeradius 3 on PFSense 2.5-dev using OTP (Google auth) fail auth (works correctly on simple autentication not OTP).
... -
03:34 AM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
- Rudolf Mayerhofer wrote:
> Setting "Aliases Hostnames Resolve Interval" to 30 seconds (which should be the minimum v... -
12:17 AM pfSense Packages Bug #9211: GeoIP broken in pfSense-pkg-ntopng-0.8.13_3
- Louis van Breda wrote:
> Hello,
>
>
> I just installed and tested the package on 244 r3 and it is simply not wo...
06/12/2019
-
- Setting "Aliases Hostnames Resolve Interval" to 30 seconds (which should be the minimum value) in System/Advanced/Fir...
Also available in: Atom