Activity
From 07/12/2019 to 08/10/2019
08/10/2019
-
12:26 PM Feature #9661: Increase the number of DHCP/DHCPv6 NTP server options to three (or more)
- I am referring to the number of NTP servers that pfSense send to DHCP clients as part of a DHCP exchange; I am not ta...
-
10:49 AM Feature #9661: Increase the number of DHCP/DHCPv6 NTP server options to three (or more)
- you are talking about NTP servers but the client need only one address, you can configure the server to have as many ...
08/09/2019
-
09:26 PM Bug #9677 (New): Dashboard hangs when widget needs data from a remote host which is down
- The pfsense dashboard will take a very long time to load (30sec to 1minute) when it contains a widget that needs data...
-
01:11 PM Bug #9466: DHCP (IPv4) relay mistakenly listening on upstream interface
- See also #9669 for another problem that appears to be related, and which also appears to be fixed by this patch.
-
- That's great! I think it's fairly safe to say that this can be closed out as a duplicate of #9466 (different symptoms...
-
01:08 PM Bug #9669: dhcrelay stops working after certain time
- After more than 80 hours of service uptime for dhcrelay, I've restarted the Server and the address assignment process...
08/08/2019
-
06:35 AM pfSense Packages Bug #9676 (New): AS lookup fails
- Using pfBlockerNG-devel 2.2.5_23
Trying to permit AS8786 gives no results (Other ASN works):... -
12:09 AM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
- Justin J: I took your advice and posted on the forum and was promptly referred back here. Here's the link in case y...
08/07/2019
-
-
- I was already in there fixing something else which, as it turns out, had a similar root cause, so it all worked out.
... -
02:50 PM pfSense Packages Bug #9675: ACME package "domain alias mode" is ignored
- Jim Pingle wrote:
> This should be fixed in ACME pkg version 0.6.2, which is building now.
That was quick! Update... -
- This should be fixed in ACME pkg version 0.6.2, which is building now.
-
- The domain alias mode check box seems to have no affect.
Expected result: --domain-alias added to to the acme.sh c... -
- (cherry picked from commit 6e0d47510ee553f5219c08c097c32d377985822b)
-
-
08:29 AM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
- That sounds like it might be something else Tom. Check your output from the CLI with: pfctl -T show -t ALIASNAME
If...
08/06/2019
-
05:06 PM pfSense Packages Feature #7449: feature request for openvpn-client-export package, add the support for openvpn up and down script, for mapping network drive
- Pippin MMD wrote:
> This seems like not so good idea to me.
> One could setup a "Free VPN service" and execute scri... -
- Most of you are more experienced at this than me so please be tolerant if this is a dumb question.
I added a Fir... -
04:10 AM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
- I second Justins message / question. pfSense is completely unusable after 2.4.4 initial release. With filterdns not w...
-
- This should be fixed in ACME pkg version 0.6 which will be up as soon as it builds.
-
10:37 AM Bug #9674 (Resolved): hidden OpenVPN settings are validated and written to file
- I had two instances where configurations not visible on the OpenVPN server creation window were affecting saving the ...
-
-
02:39 AM pfSense Packages Feature #7794: FRR pkg pfsense no metric-type option in OSPF redistribute section of web-interface
- Tried latest stable 2.4.4-p3 with 6.0.2, everything is fine, I can assign metric type on any types of redistributed r...
-
-
- Tried on latest stable 2.4.4-p3 with 6.0.2, it works fine, stub areas are handled by cisco router without issue.
-
- Thanks, I'll try it out and report back in a few of days.
-
02:06 AM pfSense Packages Bug #8811: in pfblockerng when change Rule Order generates duplicate all rules.
- I experienced this bug in an even worse manner. It duplicated all rules until my pfSense installation crashed with an...
08/05/2019
-
- Also experiencing this issue on 2.4.4-p2 and now 2.4.4-p3. If FQDNs are remove the table updates correctly. Due to ...
-
-
04:25 PM pfSense Docs Correction #9673 (Closed): Feedback on Installing and Upgrading — Download Installation Media
- *Page:* https://docs.netgate.com/pfsense/en/latest/book/install/download-installer-image.html
*Feedback:*
Custo... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/backup/autoconfigbackup.html
*Feedback:*
Page needs to be up... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/hardware/selection.html
*Feedback:*
"The SG-1000 firewall is... -
- Not an ideal solution but it does ensure that FRR routes function after
an IPsec event. -
- *Page:* https://docs.netgate.com/pfsense/en/latest/backup/index.html
*Feedback:*
Reference to pfSense Gold Subs... -
- commit:f427d68dbca5ed9941b3bc01be1c4d81417c134f is the one for RELENG_2_4_4
-
- Thank you for the quick response.
I can try out the Patch, but the issue is to minor to switch to a development re... -
- Can you test this, at least temporarily, on a 2.5.0 snapshot? Changes were made for #9466 which might affect this beh...
-
- Edit:
Found some other reports on the Forum:
https://forum.netgate.com/topic/136135/pfsense-2-4-4-dhcp-relay-i... -
- dhcrelay service stops working after a few days runtime of the process.
I have one host connected to igb5.8 (opt1) w... -
- Second solution is better but still not ideal. Rather than restarting all packages, when IPsec is reloaded via rc.new...
-
- Applied in changeset commit:15701e03e36051907a23ddbe5ab04f42c94c0944.
-
- Not an FRR issue. The IPsec interface goes away and comes back, and it never latches back on. FRR needs to be restart...
-
03:36 AM Bug #9668: Running /etc/rc.newipsecdns breaks FRR BGP on VTI interfaces
- Confirmed same behavior on latest 2.5.0 snapshots.
-
- Running /etc/rc.newipsecdns breaks FRR BGP on VTI interfaces
Create a simple FRR BGP session across an IPsec VTI
... -
- There is not enough information here for a valid bug report. This site is not for support or diagnostic discussion.
... -
12:28 AM Bug #9666 (Rejected): RADIUS Accounting Failed
- Radius Accounting failure after update. No problem with previous version (2.4.4-P2)
-
05:49 AM Bug #9634: rc.newwanipv6 is called although dhcp6c should discard Request messages
- Seems to work just fine.
(I had to disable the periodic reset of the PPPoE-(WAN-)Interface for the test to work, bec... -
03:00 AM Bug #9667 (Duplicate): Dynamic DNS is not updated when used with a Multi WAN gateway group
- Hi.
I have recently upgraded my pfSense installation from a custom Supermicro server (old 2.1 version) to a NetGat...
08/04/2019
-
04:00 PM pfSense Packages Bug #9665 (Resolved): acme.sh deleting A record for domain along with TXT record for _acme-challenge
- I was trying to set up a LetsEncrypt certificate for my domain using Linode's v4 DNS API. I was able to generate the ...
08/03/2019
-
10:00 AM Bug #9664 (New): DynDNS and Dual-wan problem with CloudFlare (works with No-Ip)
- I have a simple setup with dual-wan links and dynamic IPs. I use a No-ip Round Robin setup like this...
-
06:26 AM Bug #9663 (Resolved): panic on boot when IPv6 option "Do not wait for a RA" is enabled
- When pfsense reboots, it hangs in a boot loop because of a kernel panic.
It is reproducable that it occurs when the...
08/02/2019
-
04:24 AM Feature #1682: second MAC address for one IP address
- Just tested this on the most recent release (2.4.4-RELEASE-p3) and it is not a problem anymore to have the same IP an...
-
03:02 AM pfSense Packages Bug #9662 (New): PfblockerNG do not update after pfsense reboot and wait for next cron task
- After rebooting pfsense, pfblockerNG do not launch cron process to update and wait for next cron time.
While next ...
08/01/2019
-
10:18 PM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
- Netgate SG-4860 running 2.4.4-RELEASE-p3 (amd64). At least twice I've experienced issues, I assume involving filterd...
-
- It is considered a general best practice to use at least three NTP servers to help identify "falsetickers" (bad clock...
07/31/2019
-
08:16 AM pfSense Packages Bug #9619: FRR - Prefix Lists
- thank you for your willingness to find out what i could have meant,
but really my problem was:
i really could not u... -
- Jarek Nowak wrote:
> Also i did not ask for you validating my rules, if so your answer would be wrong because allowi... -
- Jim Pingle wrote:
> The first rule is wrong because a prefix list must contain prefixes, thus it should be @0.0.0.0/... -
- You are using ZFS, those instructions are for UFS. You might have some other unrelated issue here, but this site is n...
-
02:36 AM Bug #9659 (Not a Bug): Failed to remount in single user mode when trying to reset password
- We were using pfSense CE 2.4.4. Since we accidentally
forgot our console admin password, we followed the instruction... -
05:50 AM
Bug #9660 (Resolved): Syslogd keeps using old IP address after interface IP address change
- - Have syslog configured to send log messages using a particular LAN interface
- Check Diagnostics > Sockets, you se... -
05:19 AM
Bug #9658: Gateway monitor IPs are being put into the routing table
- In scenario 1, the firewall is sending traffic out to interfaces it's not supposed to do.
In scenario 2, the monit...
07/30/2019
-
07:05 PM pfSense Packages Bug #9655: NUT missing from netgate UI
- Wow ... yes it is; thank you! ;)
-
07:01 AM pfSense Packages Bug #9655: NUT missing from netgate UI
- Its in your Screenshot as "UPS".
-
12:58 PM Bug #9561: PPPoe 6RD broken in 2.5
- Created a pull request to FreeBSD-src to apply the 6RD changes to 2.5
-
- Created a pull request to FreeBSD-src to apply the 6RD changes to 2.5
-
- This is by design. It has to be that way, or it can't be sure that the monitor address will ping via the correct inte...
-
11:17 AM
Bug #9658 (Not a Bug): Gateway monitor IPs are being put into the routing table
- As the subject says, fpsense puts the IP addresses that are configured as monitor IPs for gateways in the routing tab...
-
11:47 AM Feature #9393: Improved support for USB interfaces that may not always be present
- See: https://forum.netgate.com/topic/141347/option-to-hot-plug-some-interfaces
-
- Should hopefully be fixed in pkg version 5.50. I removed one way it could have failed unexpectedly, potentially fixed...
-
- In some circumstances the STunnel package fails to generate a default certificate as part on it's install script and ...
-
- There isn't enough information here for a proper bug report.
For assistance in solving problems, please post on th... -
06:46 AM Bug #9656 (Rejected): DHCPv6 Leases Allowed Memory Size Exhausted
- Hi, I have encountered a bug with the DHCPv6 Leases page under Status in pfSense.
The page crashes after a while of ... -
-
- Hi Karl,
thanks for pointing this out! In that case this is fixed in 2.4.4-p3 and it was simply not marked fixed h... -
- Version 2.4.4-p3 has the following dhcp6c_wan_script.sh which should already ignore the RENEW reason:...
-
- I am now testing the following, modified /var/etc/dhcp6c_wan_script.sh:...
07/29/2019
-
- I've tried uninstalling, then installing, and "reinstalling" without success:
*Reinstallation log:*... -
- You just need to reinstall the package. Somehow it isn't fully installed, and there isn't enough information here to ...
-
05:50 PM Revision 38809d47: Fix copyright message years to reflect BSDP -> ESF -> Netgate
-
05:44 PM Bug #9362: rc.dyndns.update: Cloudflare DDNS with proxy enabled doesn't work at all
- Nathan Hand wrote:
> Underlying problem is /etc/inc/dyndns.class line 799. The value of dnsProxied is passed directl... -
-
10:57 AM Bug #9649: IPv6 6RD Tunnel
- Ronald Schellberg wrote:
> Aaron Unpublished wrote:
> > IPv6 6rd doesn't work on any 2.5.X versions at the moment. ...
07/28/2019
-
07:37 PM Bug #9362: rc.dyndns.update: Cloudflare DDNS with proxy enabled doesn't work at all
- Underlying problem is /etc/inc/dyndns.class line 799. The value of dnsProxied is passed directly to Cloudflare.
<p... -
- Aaron Unpublished wrote:
> IPv6 6rd doesn't work on any 2.5.X versions at the moment.
>
> Have cable internet. ... -
- After installing the nut package from the package manager on a new netgate system with the built-in theme, the NUT se...
-
02:53 PM Bug #9654 (New): After reboot, the DNS resolver must be restarted before it will advertise the ipv6 DNS address of the router.
- When pfsense ipv6 is configured with DHCPv6 disabled and RA in "Unmanaged" mode, then after reboot, until the resolve...
-
02:20 PM Bug #7209: Something is seriously wrong with firewall aliases
- I just hit this bug today on a fully updated 2.4.4-p3 firewall.
There was an IP Alias named "h_whitelist" containi... -
- No, aliases are for pf and it does not support filtering by MAC address.
-
04:14 AM Feature #9653: Assign Alias from MAC address
- Also, allows me to to assign ipv6 address alias when I have dynamic ipv6 gateway
-
- Can you change Alias assignment to use MAC addresses as well as IP addresses?
So I can have a Xbox which dynamically...
07/27/2019
-
05:07 PM pfSense Packages Bug #9652 (Resolved): Squid Proxy Server /var/squid/lib/ssl_db directory not found in squid.inc
- When using the Squid Proxy Server package and Enabling SSL filtering in pfSense 2.5.0, I create an internal-CA and as...
-
- Ugh.
It looks like the range here should be changed to FC07:1010:1010:*FF00*:: to FC07:1010:1010:FFF0:: (16 /60s) ... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/dhcp/dhcpv6-server.html
*Feedback:*
For example, if FC07:101... -
07:14 AM Bug #9650 (New): IPv6 connection drops (ir-)regular on Kabelvodafone (German cable ISP)...
- *Background information*
Kabel Vodafone is the successor of Kabeldeutschland, among other services they offer Busine... -
- IPv6 6rd doesn't work on any 2.5.X versions at the moment.
Have cable internet. Upgraded to the 2.5 and it brok...
07/25/2019
- 08:03 PM Revision 57b2f317: Only redirects the user to the default page if no specific page page was set in the querystring
-
04:44 PM
Bug #9541 (Resolved): Non-admin user with admin rights is given the wrong URL for the user manager
- On 20190725-0909, unable to reproduce the bad behavior.
-
04:37 PM
Bug #9611 (Resolved): PHP error on fresh 2.5.0 install or after factory reset
-
04:37 PM
Bug #9611: PHP error on fresh 2.5.0 install or after factory reset
- On 20190725-0909, the error is no longer present, new install and resets both work as expected.
-
04:35 PM
Feature #9620 (Resolved): User privilege to manage integrated switch
- On 20190725-0909, the Switch options are present and work as expected.
-
- XMLRPC is not designed to be used with more than one node. It does, on occasion, but only by accident.
-
10:00 AM pfSense Packages Feature #9648 (New): Multiple node Sync HAProxy configuration to backup CARP members via XMLRPC.
- We have a cluster of 3x PFSense Firewalls running in 3 AZs on AWS.
FW-A (AZ-A) is configured to sync to FW-B (AZ-B... -
04:37 AM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
- I think I have a similar problem.
My inbound rule did not work with an FQDN in the Alias. (Whitelist for source addr...
07/24/2019
-
- I can confirm this, but it is not specific to OpenVPN.
OpenSSL 1.1.1 doesn't list AES-NI or the BSD crypto dev, ev... -
07:25 AM Bug #9646 (Resolved): OpenSSL 1.1.1 does not list engines for AES-NI or BSD crypto
- Cannot select BSD Crypto Device under OPENVPN clients - Hardware Crypto, it only has No Hardware Crypto Acceleration.
-
08:13 AM Bug #9647 (Resolved): hn0: driver does not support altq
- As subject says, hn0 on 2.5.0 does not support ALTQ.
You get error after traffic shaper wizard starts to reload rule... -
- Hmmm OK, I have Hyper-V, 2.5.0 and pppoe.
But weird is, that on when applied on IN direction on LAN it works ok. -
- The two cannot be related. ALTQ is not used for limiters.
I have also seen a similar situation on 2.5 where limite... -
- Hi again.
I restored config on 2.4.4-p3 and this are working just fine there.
I believe this on is related to h... -
- Please open a new issue with specific error messages and reference this one there.
-
- Restored to 2.4.4-p3 and output is: hw.hn.use_if_start: 1
Clean install 2.5.0 snapshot: hw.hn.use_if_start: 0
07/23/2019
-
- This reverts commit 987377b0c968f588997d111d5d4bc88293550d3b.
-
-
09:09 AM Bug #9645: "Bypass firewall rules for traffic on the same interface" does not work as expected
- Perhaps the order or the length of the filters?
Or a race condition (https://lists.freebsd.org/pipermail/freebsd-net... -
- Your manual rule is functionally identical to the automatic rule. Something else must have changed.
There is no bu... -
- Hello!
This one is back in 2.5.0 snapshots.
07/22/2019
-
- Here are my rules for this interface:...
-
- I have to use asymmetric routing. P1 (default gateway) routes to P2 on the same subnet. ICMP redirect doesn't work be...
-
- Adding these log snippets. They are groups of dpinger gateway logs followed by the system logs for the corresponding ...
-
- Greg M wrote:
> Now I don`t have above any more but I have this (but everything is working just fine):
>
IPv6 fo... -
- Now I don`t have above any more but I have this (but everything is working just fine):
Jul 22 14:44:54 radvd 406... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/nat/accessing-port-forwards-from-local-networks.html
*Feedback:... -
10:05 AM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
- Rudolf Mayerhofer wrote:
> As a follow up: With 30 seconds resolve interval things are still working fine one month ... -
- Hi all!
Discussion here: https://forum.netgate.com/topic/145091/quick-question-about-limiters
I think there is ...
07/21/2019
-
03:53 PM Feature #6626: Support for IPv6 firewall entries with dynamic delegated prefix and static host address
- A global variable with the current delegated IPv6 prefix in CIDR form, which could be used in firewall aliases would ...
-
11:40 AM Feature #9642: Add DDNS support for dynv6.com
- Correction from above:
To update an A record use the following url:
https://ipv4.dynv6.com/api/update?hostname=yo... -
- Dynv6.com (https://dynv6.com/) provides dynamic DNS for A and AAAA records free of charge. The API is documented here...
-
- I inadvertently opened this ticket while I was still in the process of creating it. Please disregard the original sub...
-
- I get the following error when trying to update the AAAA record for a 6rd tunnel interface:
_/services_dyndns_edit...
07/19/2019
-
- Fix is in FRR pkg version 0.6.2, which will be available shortly.
-
- Setting a route map on the redistribution options does not work.
In vtysh, doing a 'show' on the route map says OS... -
- Seems like IPv6 is not on the priority list of the currently active devs, or nobody fully understands it. There are q...
-
07:40 AM Feature #4881: Allow NPt to use dynamic IPv6 networks
- Any update here? We need dynamic Prefix support for IPv6 Multi WAN.
07/18/2019
-
10:47 PM Bug #8235: The browser must support cookies to login
- I have the same problem under different circumstances. I bought a new firewall to upgrade hardware. Pfsense web ui wo...
-
- You can port forward now in a handful of clicks, it's simple and not at all complicated. Listening on multiple ports ...
-
08:47 PM Feature #6414: SSHD listening on multiple ports
- Jim Pingle wrote:
> Never expose SSH to WAN. Security by obscurity is not obscurity.
The purpose of this is to we... -
- Never expose SSH to WAN. Security by obscurity is not obscurity.
And if you use key-only auth, the rest doesn't ma... -
- One use case for this is exposing ssh on the WAN on a non-standard high port so as to minimise exposure to random dri...
-
12:59 PM Feature #9639 (Resolved): Cloudflare DDNS "API Token"
- Request to add support for new Cloudflare API Token to allow for managed access and permissions for DDNS updates.
> ... -
-
- The entire script is broken, even RENEW should be ignored and just REBIND should actually matter. See #9357 for a pat...
-
09:18 AM pfSense Docs Correction #9638 (Resolved): Feedback on High Availability — Configuring High Availability
- *Page:* https://docs.netgate.com/pfsense/en/latest/highavailability/configuring-high-availability.html
*Feedback:*... -
09:11 AM Bug #9295: IPv6 PD does not work with PPPOE (Server & Client)
- Sadly nobody is taking care of handling this bug... My ticket is 6 month old now.
-
08:49 AM Bug #9295: IPv6 PD does not work with PPPOE (Server & Client)
- Do I get this bug right?
If my upstream WAN connection is PPPoE and I try to delegate prefixes via DHCPv6 it won't w... -
- *Page:* https://docs.netgate.com/pfsense/en/latest/book/highavailability/example-redundant-configuration.html
*Fee... -
- That sounds like a problem with your config or environment. I can't reproduce it here.
For assistance in solving p... -
- if i try to uninstall any package
Package Removal
Please wait while the update system initializes
nothing else... -
03:35 AM Feature #6240: vxlan driver
- +1
07/17/2019
-
- Doesn't appear that "pfSense patch stf_6rd.diff", ticket 7272 (commit cb59ac304d30d5009537d7de0429792fb33d3db0 which ...
-
06:22 PM pfSense Packages Bug #9635 (Resolved): lldpd (and probably ladvd) doesn't work on units with an integrated switch
- It appears the GUI configuration doesn't probably figure out what interface is selected. For example,
No matter wh...
07/16/2019
-
04:10 PM pfSense Packages Bug #5168: squid doesn't function during/after HA failover
- Zeev Zalessky wrote:
> Hello,
>
> any updates with this issue?
> i have 200 vlans on my firewall and adding 200... -
06:45 AM pfSense Packages Feature #9521: Upgrade to HAProxy 1.9
- haproxy 2.0 is available in ports 2019Q3
07/15/2019
-
- pfsense sends DHCPv6 Request messsages to ff02::1:2 on its WAN interface at an interval of about 7 seconds. As this i...
-
- MPD includes a built-in web server that can be used to poll status information. There is also a telnet console, but t...
-
06:25 AM Bug #9632: DynDNS not updating IP address for DNSExit
- 2.4.4-RELEASE-p3 (amd64) built on Wed May 15 18:53:44 EDT 2019 FreeBSD 11.2-RELEASE-p10
-
- When using the DNSExit dynamic DNS service, the IP address changes and the "Save & Force Update" button is clicked, t...
07/14/2019
-
02:06 PM Feature #6626: Support for IPv6 firewall entries with dynamic delegated prefix and static host address
- Same issue here. I need the ability to filter/firewall some hosts IPV6 traffic just the same as IPV4 traffic. Right n...
-
01:03 PM Bug #9631: Multicast-Routing realy supported in actual pfSense !!??
Discussion- https://forum.netgate.com/topic/139218/sonos-speakers-and-applications-on-different-subnets-vlan-s-
08:26 AM Bug #9631 (Closed): Multicast-Routing realy supported in actual pfSense !!??
- Hello,
After realy huge effort trying to make multicast across subnets work, I seriously doubt if multicast is ena... -
- I had same configuration that worked in 2.4.4. I had Codel limiters set in floating rule to limit users for QOS. I h...
07/13/2019
-
- example: Firewall log: block bogon IPv6 network from WAN(11000) 100.68.208.12:47142
img attached
07/12/2019
-
02:38 PM Feature #7861: Make "Descriptive name" of certificates editable
- Lars Möller wrote:
> Is there any chance you will add this feature? Is there anything I can do?
>
> Lars Möller
... -
08:52 AM Bug #9628: DHCP bind all interfaces even if not selected
- Hi Jim, why not, binding services on different interfaces?
-
- That is expected. You cannot run both at the same time.
-
- Version: 2.4.4-RELEASE-p3 (amd64)
If I enable dhcp only on one interface, the daemon binds all the interfaces:
d... -
- Oleg Novikov wrote:
> +1
+1
Dirk Bongard wrote:
> +1
Oleg Novikov wrote:
> +1
+1
Also available in: Atom