Activity
From 06/29/2019 to 07/28/2019
07/28/2019
-
07:37 PM Bug #9362: rc.dyndns.update: Cloudflare DDNS with proxy enabled doesn't work at all
- Underlying problem is /etc/inc/dyndns.class line 799. The value of dnsProxied is passed directly to Cloudflare.
<p... -
03:37 PM Bug #9649: IPv6 6RD Tunnel
- Aaron Unpublished wrote:
> IPv6 6rd doesn't work on any 2.5.X versions at the moment.
>
> Have cable internet. ... -
03:20 PM pfSense Packages Bug #9655 (Not a Bug): NUT missing from netgate UI
- After installing the nut package from the package manager on a new netgate system with the built-in theme, the NUT se...
-
02:53 PM Bug #9654 (New): After reboot, the DNS resolver must be restarted before it will advertise the ipv6 DNS address of the router.
- When pfsense ipv6 is configured with DHCPv6 disabled and RA in "Unmanaged" mode, then after reboot, until the resolve...
-
02:20 PM Bug #7209: Something is seriously wrong with firewall aliases
- I just hit this bug today on a fully updated 2.4.4-p3 firewall.
There was an IP Alias named "h_whitelist" containi... -
09:36 AM Feature #9653 (Rejected): Assign Alias from MAC address
- No, aliases are for pf and it does not support filtering by MAC address.
-
04:14 AM Feature #9653: Assign Alias from MAC address
- Also, allows me to to assign ipv6 address alias when I have dynamic ipv6 gateway
-
- Can you change Alias assignment to use MAC addresses as well as IP addresses?
So I can have a Xbox which dynamically...
07/27/2019
-
05:07 PM pfSense Packages Bug #9652 (Resolved): Squid Proxy Server /var/squid/lib/ssl_db directory not found in squid.inc
- When using the Squid Proxy Server package and Enabling SSL filtering in pfSense 2.5.0, I create an internal-CA and as...
-
11:37 AM pfSense Docs Correction #9651: Feedback on Services — DHCP — Configuring the DHCPv6 Server
- Ugh.
It looks like the range here should be changed to FC07:1010:1010:*FF00*:: to FC07:1010:1010:FFF0:: (16 /60s) ... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/dhcp/dhcpv6-server.html
*Feedback:*
For example, if FC07:101... -
07:14 AM Bug #9650 (New): IPv6 connection drops (ir-)regular on Kabelvodafone (German cable ISP)...
- *Background information*
Kabel Vodafone is the successor of Kabeldeutschland, among other services they offer Busine... -
06:44 AM Bug #9649 (Resolved): IPv6 6RD Tunnel
- IPv6 6rd doesn't work on any 2.5.X versions at the moment.
Have cable internet. Upgraded to the 2.5 and it brok...
07/25/2019
- 08:03 PM Revision 57b2f317: Only redirects the user to the default page if no specific page page was set in the querystring
-
04:44 PM
Bug #9541 (Resolved): Non-admin user with admin rights is given the wrong URL for the user manager
- On 20190725-0909, unable to reproduce the bad behavior.
-
04:37 PM
Bug #9611 (Resolved): PHP error on fresh 2.5.0 install or after factory reset
-
04:37 PM
Bug #9611: PHP error on fresh 2.5.0 install or after factory reset
- On 20190725-0909, the error is no longer present, new install and resets both work as expected.
-
04:35 PM
Feature #9620 (Resolved): User privilege to manage integrated switch
- On 20190725-0909, the Switch options are present and work as expected.
-
- XMLRPC is not designed to be used with more than one node. It does, on occasion, but only by accident.
-
10:00 AM pfSense Packages Feature #9648 (New): Multiple node Sync HAProxy configuration to backup CARP members via XMLRPC.
- We have a cluster of 3x PFSense Firewalls running in 3 AZs on AWS.
FW-A (AZ-A) is configured to sync to FW-B (AZ-B... -
04:37 AM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
- I think I have a similar problem.
My inbound rule did not work with an FQDN in the Alias. (Whitelist for source addr...
07/24/2019
-
- I can confirm this, but it is not specific to OpenVPN.
OpenSSL 1.1.1 doesn't list AES-NI or the BSD crypto dev, ev... -
07:25 AM Bug #9646 (Resolved): OpenSSL 1.1.1 does not list engines for AES-NI or BSD crypto
- Cannot select BSD Crypto Device under OPENVPN clients - Hardware Crypto, it only has No Hardware Crypto Acceleration.
-
08:13 AM Bug #9647 (Resolved): hn0: driver does not support altq
- As subject says, hn0 on 2.5.0 does not support ALTQ.
You get error after traffic shaper wizard starts to reload rule... -
- Hmmm OK, I have Hyper-V, 2.5.0 and pppoe.
But weird is, that on when applied on IN direction on LAN it works ok. -
- The two cannot be related. ALTQ is not used for limiters.
I have also seen a similar situation on 2.5 where limite... -
- Hi again.
I restored config on 2.4.4-p3 and this are working just fine there.
I believe this on is related to h... -
- Please open a new issue with specific error messages and reference this one there.
-
- Restored to 2.4.4-p3 and output is: hw.hn.use_if_start: 1
Clean install 2.5.0 snapshot: hw.hn.use_if_start: 0
07/23/2019
-
03:39 PM Revision 84a5e2db: Revert "Disable snort3 on armv7. It's broken"
- This reverts commit 987377b0c968f588997d111d5d4bc88293550d3b.
-
-
09:09 AM Bug #9645: "Bypass firewall rules for traffic on the same interface" does not work as expected
- Perhaps the order or the length of the filters?
Or a race condition (https://lists.freebsd.org/pipermail/freebsd-net... -
- Your manual rule is functionally identical to the automatic rule. Something else must have changed.
There is no bu... -
- Hello!
This one is back in 2.5.0 snapshots.
07/22/2019
-
- Here are my rules for this interface:...
-
- I have to use asymmetric routing. P1 (default gateway) routes to P2 on the same subnet. ICMP redirect doesn't work be...
-
- Adding these log snippets. They are groups of dpinger gateway logs followed by the system logs for the corresponding ...
-
04:09 PM Bug #9577: radvd send_ra_forall failed on interface / can't join ipv6-allrouters
- Greg M wrote:
> Now I don`t have above any more but I have this (but everything is working just fine):
>
IPv6 fo... -
- Now I don`t have above any more but I have this (but everything is working just fine):
Jul 22 14:44:54 radvd 406... -
02:09 PM pfSense Docs Correction #9644 (Closed): Feedback on Network Address Translation — Accessing Port Forwards from Local Networks
- *Page:* https://docs.netgate.com/pfsense/en/latest/nat/accessing-port-forwards-from-local-networks.html
*Feedback:... -
10:05 AM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
- Rudolf Mayerhofer wrote:
> As a follow up: With 30 seconds resolve interval things are still working fine one month ... -
- Hi all!
Discussion here: https://forum.netgate.com/topic/145091/quick-question-about-limiters
I think there is ...
07/21/2019
-
03:53 PM Feature #6626: Support for IPv6 firewall entries with dynamic delegated prefix and static host address
- A global variable with the current delegated IPv6 prefix in CIDR form, which could be used in firewall aliases would ...
-
11:40 AM Feature #9642: Add DDNS support for dynv6.com
- Correction from above:
To update an A record use the following url:
https://ipv4.dynv6.com/api/update?hostname=yo... -
- Dynv6.com (https://dynv6.com/) provides dynamic DNS for A and AAAA records free of charge. The API is documented here...
-
- I inadvertently opened this ticket while I was still in the process of creating it. Please disregard the original sub...
-
- I get the following error when trying to update the AAAA record for a 6rd tunnel interface:
_/services_dyndns_edit...
07/19/2019
-
- Fix is in FRR pkg version 0.6.2, which will be available shortly.
-
- Setting a route map on the redistribution options does not work.
In vtysh, doing a 'show' on the route map says OS... -
09:47 AM Bug #9295: IPv6 PD does not work with PPPOE (Server & Client)
- Seems like IPv6 is not on the priority list of the currently active devs, or nobody fully understands it. There are q...
-
07:40 AM Feature #4881: Allow NPt to use dynamic IPv6 networks
- Any update here? We need dynamic Prefix support for IPv6 Multi WAN.
07/18/2019
-
10:47 PM Bug #8235: The browser must support cookies to login
- I have the same problem under different circumstances. I bought a new firewall to upgrade hardware. Pfsense web ui wo...
-
- You can port forward now in a handful of clicks, it's simple and not at all complicated. Listening on multiple ports ...
-
08:47 PM Feature #6414: SSHD listening on multiple ports
- Jim Pingle wrote:
> Never expose SSH to WAN. Security by obscurity is not obscurity.
The purpose of this is to we... -
- Never expose SSH to WAN. Security by obscurity is not obscurity.
And if you use key-only auth, the rest doesn't ma... -
- One use case for this is exposing ssh on the WAN on a non-standard high port so as to minimise exposure to random dri...
-
12:59 PM Feature #9639 (Resolved): Cloudflare DDNS "API Token"
- Request to add support for new Cloudflare API Token to allow for managed access and permissions for DDNS updates.
> ... -
-
- The entire script is broken, even RENEW should be ignored and just REBIND should actually matter. See #9357 for a pat...
-
09:18 AM pfSense Docs Correction #9638 (Resolved): Feedback on High Availability — Configuring High Availability
- *Page:* https://docs.netgate.com/pfsense/en/latest/highavailability/configuring-high-availability.html
*Feedback:*... -
09:11 AM Bug #9295: IPv6 PD does not work with PPPOE (Server & Client)
- Sadly nobody is taking care of handling this bug... My ticket is 6 month old now.
-
08:49 AM Bug #9295: IPv6 PD does not work with PPPOE (Server & Client)
- Do I get this bug right?
If my upstream WAN connection is PPPoE and I try to delegate prefixes via DHCPv6 it won't w... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/book/highavailability/example-redundant-configuration.html
*Fee... -
- That sounds like a problem with your config or environment. I can't reproduce it here.
For assistance in solving p... -
- if i try to uninstall any package
Package Removal
Please wait while the update system initializes
nothing else... -
03:35 AM Feature #6240: vxlan driver
- +1
07/17/2019
-
- Doesn't appear that "pfSense patch stf_6rd.diff", ticket 7272 (commit cb59ac304d30d5009537d7de0429792fb33d3db0 which ...
-
06:22 PM pfSense Packages Bug #9635 (Resolved): lldpd (and probably ladvd) doesn't work on units with an integrated switch
- It appears the GUI configuration doesn't probably figure out what interface is selected. For example,
No matter wh...
07/16/2019
-
04:10 PM pfSense Packages Bug #5168: squid doesn't function during/after HA failover
- Zeev Zalessky wrote:
> Hello,
>
> any updates with this issue?
> i have 200 vlans on my firewall and adding 200... -
06:45 AM pfSense Packages Feature #9521: Upgrade to HAProxy 1.9
- haproxy 2.0 is available in ports 2019Q3
07/15/2019
-
03:59 PM Bug #9634 (Resolved): rc.newwanipv6 is called although dhcp6c should discard Request messages
- pfsense sends DHCPv6 Request messsages to ff02::1:2 on its WAN interface at an interval of about 7 seconds. As this i...
-
- MPD includes a built-in web server that can be used to poll status information. There is also a telnet console, but t...
-
06:25 AM Bug #9632: DynDNS not updating IP address for DNSExit
- 2.4.4-RELEASE-p3 (amd64) built on Wed May 15 18:53:44 EDT 2019 FreeBSD 11.2-RELEASE-p10
-
- When using the DNSExit dynamic DNS service, the IP address changes and the "Save & Force Update" button is clicked, t...
07/14/2019
-
02:06 PM Feature #6626: Support for IPv6 firewall entries with dynamic delegated prefix and static host address
- Same issue here. I need the ability to filter/firewall some hosts IPV6 traffic just the same as IPV4 traffic. Right n...
-
01:03 PM Bug #9631: Multicast-Routing realy supported in actual pfSense !!??
Discussion- https://forum.netgate.com/topic/139218/sonos-speakers-and-applications-on-different-subnets-vlan-s-
08:26 AM Bug #9631 (Closed): Multicast-Routing realy supported in actual pfSense !!??
- Hello,
After realy huge effort trying to make multicast across subnets work, I seriously doubt if multicast is ena... -
- I had same configuration that worked in 2.4.4. I had Codel limiters set in floating rule to limit users for QOS. I h...
07/13/2019
-
- example: Firewall log: block bogon IPv6 network from WAN(11000) 100.68.208.12:47142
img attached
07/12/2019
-
02:38 PM Feature #7861: Make "Descriptive name" of certificates editable
- Lars Möller wrote:
> Is there any chance you will add this feature? Is there anything I can do?
>
> Lars Möller
... -
08:52 AM Bug #9628: DHCP bind all interfaces even if not selected
- Hi Jim, why not, binding services on different interfaces?
-
- That is expected. You cannot run both at the same time.
-
- Version: 2.4.4-RELEASE-p3 (amd64)
If I enable dhcp only on one interface, the daemon binds all the interfaces:
d... -
- Oleg Novikov wrote:
> +1
+1
Dirk Bongard wrote:
> +1
Oleg Novikov wrote:
> +1
+1
07/11/2019
-
05:03 PM Feature #9627 (New): Captive Portal only shows authenticated users
- https://forum.netgate.com/topic/144845/captive-portal-only-shows-authenticated-users
Would like to see all users/d... -
09:11 AM Bug #9626 (New): When deny write permission is assigned to a user, there is no error feedback if the user tries to write something
- I believe this would make it clear when someone can;t write config, as currently there is no error and simply the con...
07/10/2019
- 05:52 PM Revision b73d8949: Fixed #9245 updating copyright notices
- 05:26 PM Revision 7ec80e76: Fixed #9586 by detecting if option list includes /0 or not
-
01:00 PM
Todo #9245: Update copyright notices to 2020
- Applied in changeset commit:b73d8949df5fdfa5b6a798d393c685159f6266fd.
-
12:53 PM
Todo #9245 (Feedback): Update copyright notices to 2020
- Updated with find/sed
-
12:35 PM
Bug #9586: Unbound Access List /31 UI Issue
- Applied in changeset commit:7ec80e763f7e8357a4e5b0d2d57546cfd5d0f0f0.
-
12:28 PM
Bug #9586 (Feedback): Unbound Access List /31 UI Issue
- Fixed by detecting if option list includes /0 or not
-
09:22 AM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
- Rudolf Mayerhofer wrote:
> Setting "Aliases Hostnames Resolve Interval" to 30 seconds (which should be the minimum v... -
- Duplicate of #9541
-
07:47 AM Bug #9625 (Duplicate): wrong URL in main menu (for User Manager)
- https://yadi.sk/i/G2taeIIjyd8bZQ
User Manager in main navbar have wrong URL. Is URL for change password -
04:10 AM Bug #9413: VLAN driver missing ALTQ support
- On an upgrade to the 2.5 dev snapshot, I had multiple messages about this, warning me the em0.90 didnt support altq, ...
-
03:50 AM Bug #9148: PPPoE over a VLAN fails to reconnect.
- Steve Wheeler wrote:
> In some situations PPPoE fails to reconnect after an upstream outage or making a change local...
07/09/2019
-
- We have some diagrams on docs like https://docs.netgate.com/pfsense/en/latest/book/nat/ordering-of-nat-and-firewall-p...
-
- *Page:* https://docs.netgate.com/pfsense/en/latest/book/index.html
*Feedback:*
_*Please add functional flow dia... -
01:24 PM Bug #9615: Connections permitted by a schedule are not killed when that schedule expires.
- UPDATE: The wifi router is behind the pfSense firewall. All devices on the network (including the wifi router) get t...
-
07:36 AM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
- Gavin Stewart wrote:
> Very interesting. I'm not seeing that occur at all (and it was something I was monitoring clo... -
-
- The pages already contain the necessary metadata, it just hadn't been pulled into the privilege files. Should be an e...
-
02:58 AM
Feature #9620 (Resolved): User privilege to manage integrated switch
- I wanted to grant a group/user the privilege to view (and administer) the integrated switch of a XG-7100 but couldn't...
-
- Setup:
WAN - IPv4 PPPoE via re1, IPv6 via SLAAC.
Expected result: Stable IPv6 connectivity
Actual result:
Whe... -
05:42 AM Bug #9622 (Resolved): Changing admins membership does not replicate correctly to HA slave
- To reproduce, on a pfSense 2.4.4-3 HA cluster
* On the master: create a user which is *not* a member of the "admin... -
03:09 AM
Feature #9621 (New): More convenient deletion of single user privileges
- Currently when you remove a single granted attribute from a user (so not those granted via group membership) you get ...
07/08/2019
-
- Screenshot of rules attached.
-
- The first rule is wrong because a prefix list must contain prefixes, thus it should be @0.0.0.0/0@. The second line i...
-
12:32 AM pfSense Packages Bug #9619 (Not a Bug): FRR - Prefix Lists
- PFSense 2.4.4_3
frr 0.5.2
Reproduce:
Services->FRR->Global Settings->Prefix Lists
Add new Prefix List
Name: ...
07/07/2019
-
- Sorry for the remark on default rules. I noticed that the logfile settings have options for that.
Log packets mat... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/monitoring/logs/firewall.html
*Feedback:*
- I assume that an A...
07/06/2019
-
03:22 PM Feature #9617: PPPoE Static IP Configuration in GUI
- I did not mean to submit this as a bug, it is a feature request.
-
- Hello,
I recently had a little bit of trouble with PPPoE configuration, specifically under the circumstance of a s... -
11:08 AM pfSense Packages Feature #9616 (New): Package for Docs
- Cen you please provide the docs as a package, so they can be accessed offline.
07/05/2019
-
- On the /system_advanced_misc.php page, under Schedule States it states that "By default, when a schedule expires, con...
-
- Not enough information here for a valid bug report. Something generated a huge page, but that's likely localized to y...
-
12:20 AM pfSense Packages Bug #9614 (Not a Bug): Crash report begins. Anonymous machine information:
- amd64
11.2-RELEASE-p10
FreeBSD 11.2-RELEASE-p10 #9 4a2bfdce133(RELENG_2_4_4): Wed May 15 18:54:42 EDT 2019 root...
07/04/2019
-
- Duplicate of #9541
-
- When I'm logged in as admin, the System -> User Manager menu takes me to /system_usermanager.php, but when I log in a...
07/03/2019
-
-
- Full details at https://www.freebsd.org/security/advisories/FreeBSD-SA-19:10.ufs.asc but long story short, on UFS fil...
-
- Applied in changeset commit:40caec85cc115fa3249a08c328026c2c0749980a.
-
- First boot after a new install on a 2.5.0 snapshot or after factory reset has this error in the boot log:...
-
08:03 AM Feature #9531: [IPSEC] Add additional curve-based DH Groups (31+)
- Just as feedback: we had the first two tunnels set up with EC25519 / DH31 as Phase1 (and in one case Phase2, too) and...
07/02/2019
-
03:08 PM Bug #9043: openvpn 2.4.3-p1 -> 2.4.4, failed
- Thanks for the information, I will try out with OS debian stable, version 2.4.x openvpn.
pfSense software 2.4.4-RE... -
02:37 PM Bug #9043: openvpn 2.4.3-p1 -> 2.4.4, failed
- I ended up moving over to OPNSense, which works flawlessly with Mikrotik. They're using an OpenVPN version which is o...
-
- There is no pfSense bug here. Either it's a Mikrotik issue or a config issue. Post on the forum for assistance.
-
- Hello everyone,
We have the same problems after the upgrade pfSense software from 2.3.x to 2.4.x.
We use Remote...
07/01/2019
-
- * Sanitize user input before using as path/filenames
* Use a more accurate method of determining image type on read
*... -
- * Sanitize user input before using as path/filenames
* Use a more accurate method of determining image type on read
*... -
- (cherry picked from commit d31362b69d5d52dc196dc72f66e830cd1e6e9a4f)
-
-
- Applied in changeset commit:2c544ac61ce98f716d50b8e5961d7dfba66804b5.
-
- I was able to replicate the problem.
To reproduce with cURL:
1. Login:... -
05:39 AM Bug #9610 (Resolved): picture.widget.php: Arbitrary file read/write
- in `/widgets/widgets/picture.widget.php`, when we post a widgetkey and upload a image , we can create or read a arbit...
-
- Applied in changeset commit:d31362b69d5d52dc196dc72f66e830cd1e6e9a4f.
-
- I was able to replicate the problem, but there are a couple notable exceptions left out above:
1. There must be at... -
- in `services_captiveportal_mac.php` parameter username and parameter delmac be displayed without any filter.
!http... -
- 0.5.2 is not the latest version. The latest version is 0.6, which is what I said in my comment. FRR pkg version 0.6 i...
-
12:42 AM pfSense Packages Feature #7794 (Assigned): FRR pkg pfsense no metric-type option in OSPF redistribute section of web-interface
- I updated to latest FRR version: 0.5.2 which is based on frr6-6.0.2_1 and there is still not External type metrics se...
06/30/2019
-
- This should be possible with FRR pkg version 0.6: https://forum.netgate.com/topic/144572/frr-0-6-coming-big-changes-t...
-
- This should be possible with FRR pkg version 0.6: https://forum.netgate.com/topic/144572/frr-0-6-coming-big-changes-t...
-
07:37 AM pfSense Docs New Content #9608 (Duplicate): Add note about disabling secure boot when configuring a Hyper-V Gen 2 VM
- *Page:* https://docs.netgate.com/pfsense/en/latest/recipes/virtualize-hyper-v.html
*Feedback:*
Just to add to t...
06/29/2019
-
- Now I have this as well:
Jun 29 07:17:29 radvd 62926 can't join ipv6-allrouters on hn0.10
Jun 29 07:15:22 rad...
Also available in: Atom