Project

General

Profile

Activity

From 12/06/2019 to 01/04/2020

01/04/2020

10:10 PM Revision 01a6ef7b: Remove redundant DNSimple instructions
surrural
08:34 PM pfSense Packages Bug #10162: Cloudflare Challenge Alias
Jim Pingle wrote:
> Looks like you might be using the fields incorrectly or have something amiss in your config. Not...
Ian Corbitt
07:50 PM pfSense Packages Bug #10162 (Not a Bug): Cloudflare Challenge Alias
Looks like you might be using the fields incorrectly or have something amiss in your config. Nothing in the code that... Jim Pingle
04:01 PM pfSense Packages Bug #10162 (Not a Bug): Cloudflare Challenge Alias
When utilizing Cloudflare DNS and challenge alias, the configuration file for the domain is set incorrectly. This cau... Ian Corbitt
07:57 PM Bug #8531 (Pull Request Review): URL Table aliases don't support FQDNs or names that return >1 IP
Jim Pingle
04:52 AM Bug #8531: URL Table aliases don't support FQDNs or names that return >1 IP
https://github.com/pfsense/pfsense/pull/4151 Viktor Gurov
07:54 PM Bug #9829 (Pull Request Review): NTP Status vs. parsing NTP Access Restrictions
Jim Pingle
09:01 AM Bug #9829: NTP Status vs. parsing NTP Access Restrictions
https://github.com/pfsense/pfsense/pull/4152 Viktor Gurov
07:52 PM pfSense Packages Bug #9738 (Pull Request Review): Client IP address validation disallows CIDR notation
Jim Pingle
10:46 AM pfSense Packages Bug #9738: Client IP address validation disallows CIDR notation
https://github.com/pfsense/FreeBSD-ports/pull/745 Viktor Gurov
07:51 PM Bug #10161 (Pull Request Review): Improve renaming of pfSense in non-pfSense builds.
Jim Pingle
12:53 PM Bug #10161 (Resolved): Improve renaming of pfSense in non-pfSense builds.
As discussed in "Minor issues with "non-pfSense" rename logic", having to rename pfSense files in non-netgate builds ... Ronald Schellberg
06:55 PM Revision 0436dfad: Improve building of non pfSense builds
* Remove redirection on jail delete so user receives delete prompt
* Fix editing ports that don't contain a pkg-descr...
Ronald Schellberg
02:57 PM Revision 7faeec07: check ntp acl only for localhost block
Viktor Gurov
11:47 AM pfSense Packages Bug #9652: Squid Proxy Server /var/squid/lib/ssl_db directory not found in squid.inc
Here this issue persists, even replacing squid.inc using the code of the last merge.... Fernando Barros
10:47 AM Revision 477d5b5f: urltable can return >1 IPs
Viktor Gurov
09:24 AM pfSense Packages Feature #8475 (Closed): syslog-ng TLS configuration support
syslog-ng >= 1.15_3 support it
see https://redmine.pfsense.org/issues/9563
Viktor Gurov
09:12 AM pfSense Packages Feature #9523 (Resolved): LADVD: Feature to enable setting interface descriptions
Renato Botelho wrote:
> PR has been merged. Thanks!
tested on pfSense 2.5.0.a.20200103.2159 with LADVD 1.2.2_1
...
Viktor Gurov
09:11 AM Feature #8861: Show SFP module details on ``status_interfaces.php``
also add optional 'description' field,
like...
Viktor Gurov
04:48 AM pfSense Packages Bug #9211: GeoIP broken in pfSense-pkg-ntopng-0.8.13_3
Solved Working now again!!
https://www.youtube.com/watch?v=GkPA4kb3Xoo
Manjot Singh
02:55 AM Bug #1819: DNS Resolver Not Registering DHCP Server Specified Domain Name
+1 on this as I am experiencing the same problem.
Confirmation that this fix is effectively targeted in 2.5 is hig...
Gabriele Gino
01:59 AM Feature #9688 (Resolved): restartallwan - pfSsh.php script to restart all wan interfaces
Renato Botelho wrote:
> PR has been merged. Thanks!
tested on pfSense 2.5.0.a.20200103.2159
works as expected
Viktor Gurov
01:45 AM Feature #9972 (Resolved): cert_build_list(): by default don't show certs without prv key
Renato Botelho wrote:
> PR has been merged. Thanks!
tested on pfSense 2.5.0.a.20200103.2159
works as expected,...
Viktor Gurov
01:39 AM Bug #10151 (Resolved): vpn_ipsec_phase1.php: webgui bugs on latest 2.5
tested on pfSense 2.5.0.a.20200103.2159
no bugs,
Resolved
Viktor Gurov

01/03/2020

11:44 PM Revision 4ddcc5ca: Wait 0.2 seconds after stopping Nginx.
Redmine #10159 A FL
10:31 PM pfSense Packages Feature #10160: Dedicated Maxmind GeoIP package including license registration
It is something we have discussed internally. It's likely to happen, but no ETA. Jim Pingle
08:18 PM pfSense Packages Feature #10160 (New): Dedicated Maxmind GeoIP package including license registration
Given that MaxMind GeoIP package requires License Registration w.e.f. December 30 2019, this will impact all packages... YP Lo
09:59 PM Revision ed6f2195: Revise survey wording
Steve Beaver
08:41 PM Revision c443115a: Remove vestiges of legacy ACB system
(cherry picked from commit 8a6d9d7f82e7a992d2c48910fb4bb847b28f3f45) Steve Beaver
08:27 PM Revision 8a6d9d7f: Remove vestiges of legacy ACB system
Steve Beaver
08:09 PM Bug #9303: HA sync : disabling captive portal HA sync does remove all zones on slave
This issue is actually not fixed
Pull request : https://github.com/pfsense/pfsense/pull/4150
A FL
08:08 PM Bug #8809: HA sync : changing a voucher roll on master does not reset active tickets on slave.
Pull request : https://github.com/pfsense/pfsense/pull/4150 A FL
07:59 PM Feature #97: Captive Portal should sync its database to other members of clusters
Pull Request : https://github.com/pfsense/pfsense/pull/4150 A FL
07:42 PM pfSense Packages Bug #9211: GeoIP broken in pfSense-pkg-ntopng-0.8.13_3
As temporary solution I uploaded latest files on web server, and It seems to be working fine again. Manjot Singh
07:33 PM Revision 20818c23: Remove some outdated references. Issue #10156
(cherry picked from commit 26700efcdf3bbe62cc7893d0f7b765c1a70492fa) Jim Pingle
07:33 PM Revision 26700efc: Remove some outdated references. Issue #10156
Jim Pingle
07:29 PM Revision 2ebebc63: Remove some outdated references. Issue #10156
(cherry picked from commit e48255d5b36fdb953af8afeb775686c619c52500) Jim Pingle
07:29 PM Revision e48255d5: Remove some outdated references. Issue #10156
Jim Pingle
07:15 PM Revision 0865a626: Fix typo
Jim Pingle
07:14 PM Revision d86a9bf9: Fix typo
Jim Pingle
07:08 PM Revision 3ac4b218: Fixed #10154 by revising wizard text
Steve Beaver
05:52 PM Bug #10159: nginx error " 48: Address already in use" sometimes displayed in the logs when reconfiguring captive portal
Pull Request : https://github.com/pfsense/pfsense/pull/4149 A FL
05:50 PM Bug #10159 (Resolved): nginx error " 48: Address already in use" sometimes displayed in the logs when reconfiguring captive portal
This error is sometimes printed in the logs after a captive portal reconfiguration :... A FL
05:03 PM Revision 4eb12fbf: Fix sshguard config/command. Fixes #9971
Also requires sshguard patch Jim Pingle
04:51 PM Revision 77e9f60a: Fix sshguard config/command. Fixes #9971
Also requires sshguard patch Jim Pingle
04:37 PM Revision 0284d79e: This is 2020. Issue #9245
Jim Pingle
04:36 PM Revision 880ed461: This is 2020. Issue #9245
Jim Pingle
02:56 PM Todo #10157: Setup new redirect subdomain and processes
Sounds good. As soon as we get the OK on the subdomain from IT I'll update the URLs Anonymous
02:46 PM Todo #10157: Setup new redirect subdomain and processes
I don't think it actually uses the php file now but nginx redirects, so we might also want to take the opportunity to... Jim Pingle
11:47 AM Todo #10157 (Resolved): Setup new redirect subdomain and processes
We currently use pfsense.org to host a file "j.php" which redirects requests to the appropriate (usually help) resour... Anonymous
02:49 PM Revision 6b44352b: spaces to tabs
Viktor Gurov
02:23 PM Bug #9993 (Duplicate): invalid cipher specified in ipsec config
This is actually a symptom of the change in #9726 which has since been corrected. Jim Pingle
01:59 PM Revision 1cdd7dd2: Revert "strip hash algo if ealgo == *gcm"
This reverts commit 1f8e92a30c1db4f96625b4591a65902492084eb3. Jim Pingle
01:25 PM Revision 4d962f1b: Fix IPsec page issues. Fixes #10151
Jim Pingle
01:12 PM Bug #10158 (Duplicate): Dhcp client hostname request does not go into master in a HA config
This is a known issue -- It's a limitation of ISC DHCPD. Nothing we can do. We are not going to put a full-featured a... Jim Pingle
12:57 PM Bug #10158 (Duplicate): Dhcp client hostname request does not go into master in a HA config
Setup:
two identical pfsense (7100 by netgate) firewalls, using multiple vlans. dhcp, static and dynamic work fine....
s w
12:19 PM pfSense Packages Bug #8062 (Resolved): Fixes to AWS VPC VPN wizard
This has been complete for >1yr now. See factory 342 Jim Pingle
11:56 AM Bug #10155: sshguard is not compatible with RFC 5424 log format
Brief review didn't turn up any options that might help, and I didn't see any similar format messages in the sshguard... Jim Pingle
11:14 AM Bug #10155 (Resolved): sshguard is not compatible with RFC 5424 log format
pfSense 2.5.0 has an option to change the syslog style from the default RFC 3154 format to the new RFC 5424 format. H... Jim Pingle
11:30 AM Todo #9245 (Feedback): Update copyright notices to 2020
This should all be correct now in the repos for CE and factory. Some ports/packages won't show the changes in images ... Jim Pingle
11:06 AM Bug #9971 (Feedback): sshguard error: Logging subprocess <pid> (exec /usr/local/sbin/sshguard) exited with status 1.
Pushed the changes to RELENG_2_4_5 and a variation of the same to master. Note that this needs to be tested on both 2... Jim Pingle
10:38 AM Bug #9971 (In Progress): sshguard error: Logging subprocess <pid> (exec /usr/local/sbin/sshguard) exited with status 1.
Jim Pingle
10:17 AM Bug #9971: sshguard error: Logging subprocess <pid> (exec /usr/local/sbin/sshguard) exited with status 1.
I took another run at this and found a potential fix without patching too much in sshguard. We can set LOGREADER to /... Jim Pingle
09:59 AM Feature #9726: Hash Algorithm configured on child ESP/AH proposals using AES GCM though strongswan strips them
Updated subject to clarify some ambiguity in the original description. Jim Pingle
09:41 AM Feature #9726: Hash Algorithm configured on child ESP/AH proposals using AES GCM though strongswan strips them
right,
fixed, phase 2 strip PR:
https://github.com/pfsense/pfsense/pull/4148
Viktor Gurov
09:05 AM Feature #9726: Hash Algorithm configured on child ESP/AH proposals using AES GCM though strongswan strips them
strongSwan won't load the connection with a valid selection of options with the change applied, so it apparently does... Jim Pingle
08:43 AM Feature #9726: Hash Algorithm configured on child ESP/AH proposals using AES GCM though strongswan strips them
Jim Pingle wrote:
> I reverted this commit. It broke some tunnels:
>
> GUI has:
> * Algo: AES128-GCM
> * Key L...
Viktor Gurov
08:03 AM Feature #9726 (New): Hash Algorithm configured on child ESP/AH proposals using AES GCM though strongswan strips them
I reverted this commit. It broke some tunnels:
GUI has:
* Algo: AES128-GCM
* Key Length: 128 bit
* Hash: AES-X...
Jim Pingle
09:53 AM Revision 28631275: check export key pass length
Viktor Gurov
08:54 AM Bug #10139 (Resolved): IGMPPROXY spamming the main systemlog
The verbose option is present on the main IGMP proxy config page and is working as expected.
The logs for igmpprox...
Jim Pingle
08:28 AM pfSense Packages Bug #10152: Squid: "unexpected operator" error in squid rc script
No particural configurations have been placed.
I tried with and without MITM config, standard and no custom settings...
Stefano Mereghetti
07:34 AM pfSense Packages Bug #10152: Squid: "unexpected operator" error in squid rc script
Stefano Mereghetti wrote:
> Hello
> with the last merge of Squid pkg for pf 2.4.5, if I do a manual restart using G...
Viktor Gurov
03:41 AM pfSense Packages Bug #10152 (Resolved): Squid: "unexpected operator" error in squid rc script
Hello
with the last merge of Squid pkg for pf 2.4.5, if I do a manual restart using GUI interface, the service doesn...
Stefano Mereghetti
08:06 AM pfSense Packages Bug #10146 (Pull Request Review): squid4 obsolete options
Jim Pingle
05:44 AM pfSense Packages Bug #10146: squid4 obsolete options
updated options:
sslproxy_capath - Replaced by tls_outgoing_options capath=.
sslproxy_cipher - Replaced by tls_outg...
Viktor Gurov
08:05 AM Feature #1192 (Pull Request Review): Certificate Manager - Ability to Encrypt Private Keys When Exporting
Jim Pingle
03:58 AM Feature #1192: Certificate Manager - Ability to Encrypt Private Keys When Exporting
Renato Botelho wrote:
> PR merged
The password must be between 3 and 1023 characters long, otherwise you will get...
Viktor Gurov
07:54 AM pfSense Packages Bug #9542 (Closed): FreeRadius with MySQL not started and require mysql-client packet
no such issue on pfSense 2.4.4-p3 and 2.4.5.a.20200102.0720
freeradius3 0.15.7_7
I can see MySQL/PostgreSQL conne...
Viktor Gurov
07:35 AM Bug #10151 (Feedback): vpn_ipsec_phase1.php: webgui bugs on latest 2.5
Applied in changeset commit:4d962f1bc8fc1698d8c4c96a9adb28580e850640. Jim Pingle
07:25 AM Bug #10151 (In Progress): vpn_ipsec_phase1.php: webgui bugs on latest 2.5
The JS fails because the rekeychkbox_change() function listed there does not exist any longer. I've pushed a fix for ... Jim Pingle
03:07 AM Bug #10151 (Resolved): vpn_ipsec_phase1.php: webgui bugs on latest 2.5
Phase 1 Proposal (Encryption Algorithm) is doubled (see screenshot)
also, for some reason, the JavaScript code tha...
Viktor Gurov
07:23 AM pfSense Packages Bug #9750 (Resolved): squidguard_blacklist.php & squidguard_log.php wrong status icon link
tested on pfSense 2.4.5.a.20200102.0720
squid 0.4.44_12 and squidGuard 1.16.18_3
Resolved
Viktor Gurov
07:02 AM Bug #10153 (Rejected): The firewall has enountered an error
This site is not for support or diagnostic discussion.
For assistance in solving problems, please post on the "Net...
Jim Pingle
06:17 AM Bug #10153 (Rejected): The firewall has enountered an error
amd64
12.0-RELEASE-p10
FreeBSD 12.0-RELEASE-p10 fe839027797(RELENG_2_5) pfSense
Crash report details:
PHP Err...
Claudiu Mihai
06:49 AM pfSense Packages Feature #10134 (Feedback): pfSense-pkg-softflowd: Add additional options available in softflowd-1.0.0
PR https://github.com/pfsense/FreeBSD-ports/pull/733 has been merged. Thanks! Renato Botelho
03:12 AM pfSense Packages Bug #7293 (Resolved): dns/bind911 requires TCP_RFC7413 in kernel
Renato Botelho wrote:
> TCP_RFC7413 is part of pfSense kernel on 2.5.0
tested on 2.5.0.a.20200102.0720...
Viktor Gurov
02:56 AM Bug #10150 (New): IGMP Proxy does not scale to hundreds of streams
Attempts to use the pfSense software to distribute multicast streams are finding that igmpproxy consumes CPU to the p... Chris Linstruth

01/02/2020

03:29 PM pfSense Packages Todo #9392: Status_Traffic_Totals needs updated for vnstat 2.0
I committed my progress so far. All of the backend code should be OK now. See the commit message for details.
deve...
Jim Pingle
11:25 AM pfSense Packages Todo #9392 (In Progress): Status_Traffic_Totals needs updated for vnstat 2.0
I'm looking at this. Needs a bit of work, lots of big changes between 1.x and 2.x. Jim Pingle
02:06 PM pfSense Packages Bug #9211: GeoIP broken in pfSense-pkg-ntopng-0.8.13_3
This now broken again due MaxMind require LicenseKeys usage now https://blog.maxmind.com/2019/12/18/significant-chang... DRago_Angel [InV@DER]
01:59 PM Revision 98c26939: Fix options for suricata4
Renato Botelho
01:59 PM Revision 1903de08: Fix options for suricata4
Renato Botelho
01:52 PM Revision 72602bda: Use default python from ports
Renato Botelho
01:45 PM Revision 4bdbb898: Fix syntax errors
Jim Pingle
01:36 PM Revision 13f9b0d2: Fix syntax error
Jim Pingle
12:19 PM Revision 0e4435fb: Bump Copyright to 2020
Renato Botelho
12:19 PM Revision 7a043ad0: Bump Copyright to 2020
Renato Botelho
11:00 AM pfSense Packages Feature #10141 (Feedback): pfBlockerNG - MaxMind License Registration
PR has been merged. Thanks! Renato Botelho
10:38 AM Bug #5413: Reduce disruptions when changing DNS records from DHCP leases in Unbound
There is no patch here to apply. There are some general theories and wishes, but no code. If someone wants to take it... Jim Pingle
10:28 AM Bug #5413: Reduce disruptions when changing DNS records from DHCP leases in Unbound
This is a big problem when using pfblockerng and also registering DHCP leases in the resolver as it causes unbound to... Nick B
09:56 AM Bug #10149 (Resolved): system_gateways.php: PHP error on line 169
Already fixed in commit:4bdbb8987eeb62a41ef6e92c1abf7a9befb90f20 Jim Pingle
09:52 AM Bug #10149 (Resolved): system_gateways.php: PHP error on line 169
Parse error: syntax error, unexpected ')' in /usr/local/www/system_gateways.php on line 169 Claudiu Mihai
09:24 AM Feature #7767 (Pull Request Review): OCSP support for OpenVPN server
Jim Pingle
09:14 AM Feature #7767: OCSP support for OpenVPN server
https://github.com/pfsense/pfsense/pull/4145 Viktor Gurov
09:02 AM Todo #10135: help.php: Update links
Moving this to 2.5.0, it is nice to have but not a release blocker. Jim Pingle
08:41 AM Revision 81157e5c: cosmetic
Viktor Gurov
08:37 AM Revision 0cdb5e95: export aliases to txt file
Viktor Gurov
07:21 AM Bug #10148 (Not a Bug): Pfsense VM restarting indefinitly
That is a filesystem problem in your VM, not a bug.
This site is not for support or diagnostic discussion.
For ...
Jim Pingle
03:30 AM Bug #10148 (Not a Bug): Pfsense VM restarting indefinitly
Hi to all,
Please note that my Pfsense VM on VMWARE is still restarting indefinitly.
Enclosed the debug file.
Than...
Appolinaire ouraga
07:20 AM Feature #10147 (Duplicate): Separators in Nat Outbound view
Duplicate of #7781 Jim Pingle
02:48 AM Feature #10147 (Duplicate): Separators in Nat Outbound view
I consider the use of separators in Rules and Nat very useful.
I would like to ask if it is possible to implement th...
Stefano Mereghetti
07:17 AM pfSense Packages Bug #9652 (Pull Request Review): Squid Proxy Server /var/squid/lib/ssl_db directory not found in squid.inc
Jim Pingle
02:44 AM pfSense Packages Bug #9652: Squid Proxy Server /var/squid/lib/ssl_db directory not found in squid.inc
Ok, it works.
being the version of PORTREVISION still the 12, I copied the code of the last merge of squid.inc by ha...
Stefano Mereghetti
12:13 AM pfSense Packages Bug #9652: Squid Proxy Server /var/squid/lib/ssl_db directory not found in squid.inc
fixed:
https://github.com/pfsense/FreeBSD-ports/pull/740
Viktor Gurov
06:45 AM Feature #9639: Cloudflare DDNS "API Token"
+1 as well to get it, I created workaround to get it work, but native will be better in many ways https://forum.netga... DRago_Angel [InV@DER]
04:40 AM Feature #9985: Build virtio_console.ko
Nux Ro wrote:
> Hello,
>
> Please include the virtio_console.ko kernel module, it's needed by the qemu-guest-agen...
Suriname Clubcard
02:42 AM Feature #9816: firewall_aliases.php: add ability to export list of aliases
https://github.com/pfsense/pfsense/pull/4144 Viktor Gurov
12:32 AM pfSense Packages Bug #10146 (Resolved): squid4 obsolete options
got in squid logs on pfSense 2.4.5:... Viktor Gurov

01/01/2020

11:05 PM pfSense Packages Bug #7616 (Closed): Barnyard2 webui configuration updates result in ****** written to the config for the password
no such issue on latest snort 4.0_10
tested on pfSense 2.4.4-p3 and pfSense 2.5.0.a.20191230.2321
Viktor Gurov
10:14 PM pfSense Docs Correction #10145: Feedback on Packages — Installing FreeBSD Packages
Update:
That's correct for 2.3 but there is no 2.4 section for FreeBSD11
Paighton Bisconer
10:08 PM pfSense Docs Correction #10145 (Resolved): Feedback on Packages — Installing FreeBSD Packages
*Page:* https://docs.netgate.com/pfsense/en/latest/packages/installing-freebsd-packages.html
*Feedback:*
This is ...
Paighton Bisconer
05:11 PM pfSense Packages Feature #10141: pfBlockerNG - MaxMind License Registration
https://forum.netgate.com/topic/149343/pfblockerng-maxmind-registration-required-to-continue-to-use-the-geoip-functio... BBcan177 .
04:52 PM pfSense Packages Feature #10141: pfBlockerNG - MaxMind License Registration
The PRs have not yet been merged, so nothing can be done yet. Soon. Jim Pingle
12:56 PM pfSense Packages Feature #10141: pfBlockerNG - MaxMind License Registration
where are those steps on how to migrate?! Julian G
04:51 PM Bug #9488 (Resolved): No console when booting CE Memstick UEFI.
OK, we'll mark this resolved for now, can revisit if it turns out to be a general issue. Jim Pingle
12:56 PM Bug #9488: No console when booting CE Memstick UEFI.
Updating the BIOS to MNW2MAX1.X64.0101.R01.1908071815 did not help.
The only thing different on that box is a 120G...
Steve Wheeler
12:06 PM Bug #9488: No console when booting CE Memstick UEFI.
If course it helps if you test the right image.....
Tested: pfSense-CE-memstick-2.4.5-DEVELOPMENT-amd64-20191231-1...
Steve Wheeler

12/31/2019

06:47 PM Feature #10144 (New): Default Sort Order, DHCP Leases
Hi,
Very minor issue, but it would be nice to have the DHCP Leases table sort by (ascending) IP address - as a def...
Russell Morris
05:54 PM Revision 03f7009d: Fix syntax error
Jim Pingle
05:35 PM Bug #9488 (New): No console when booting CE Memstick UEFI.
Is the behavior the same on 2.5.0? Or is this only on 2.4.5? Jim Pingle
04:57 PM Bug #9488: No console when booting CE Memstick UEFI.
Tested: pfSense-netgate-memstick-2.4.5-DEVELOPMENT-amd64-20191231-1310 on MBT-4220
The installer image boots and p...
Steve Wheeler
03:17 PM Bug #9778 (Resolved): Inconsistent update check results
This has been in and working for a while now. Jim Pingle
03:16 PM Bug #9747 (Resolved): IPsec widget - Missing escape of domain backslash
No feedback from OP but the widget is working fine in general, so likely fixed. Jim Pingle
03:15 PM Revision 5323ce24: Fix copyright header on rc.package_reinstall_all. Issue #9245
Jim Pingle
03:14 PM Feature #9452 (Resolved): Add Gandi LiveDNS DynDNS client.
Not a service we can test internally, and no response from OP or other consumers of the service in question, so closi... Jim Pingle
03:14 PM Bug #9602 (Resolved): Dynamic DNS with DigitalOcean not working
Not a service we can test internally, and no response from OP or other consumers of the service in question, so closi... Jim Pingle
03:14 PM Bug #9580 (Resolved): Dynamic DNS DNSimple client errors
Not a service we can test internally, and no response from OP or other consumers of the service in question, so closi... Jim Pingle
03:14 PM Bug #9362 (Resolved): rc.dyndns.update: Cloudflare DDNS with proxy enabled doesn't work at all
Not a service we can test internally, and no response from OP or other consumers of the service in question, so closi... Jim Pingle
03:14 PM Feature #9280 (Resolved): Add AAAA record type support for DynDNS with Digital Ocean
Not a service we can test internally, and no response from OP or other consumers of the service in question, so closi... Jim Pingle
03:14 PM Bug #9248 (Resolved): Dynamic dns updates on azure ipv6 service is not working properly
Not a service we can test internally, and no response from OP or other consumers of the service in question, so closi... Jim Pingle
03:14 PM Bug #8014 (Resolved): DynDNS wildcard option doesn't work for provider Loopia
Not a service we can test internally, and no response from OP or other consumers of the service in question, so closi... Jim Pingle
03:09 PM Bug #7601 (Resolved): Dynamic DNS - Hostname should not be required for DNS-O-Matic
Though I cannot confirm the DNS-O-Matic service accepts the request, the GUI no longer requires the hostname. Jim Pingle
03:08 PM Bug #9361 (Resolved): Cloudflare Not Allowing "*" Hostname Entry in Dynamic DNS
Jim Pingle
03:07 PM Revision b8e599fc: Add help for missing pages. Issue #10135
Jim Pingle
03:07 PM Bug #9720 (Resolved): vpn_ipsec_phase2.php - no remote network field in VTI mode
Looks good on current 2.4.5 snapshots Jim Pingle
03:06 PM Revision 0e73ead7: Add help for missing pages. Issue #10135
Jim Pingle
02:59 PM Bug #9612 (New): Run fsck with -z for ufs on upgrade to address FreeBSD-SA-19:10.ufs
This fix does not appear to be getting triggered. There is no sign of the expected messages during the upgrade process. Jim Pingle
02:56 PM Bug #9595 (Resolved): OpenVPN does not resync when running on a gateway group
Client changes WAN bindings at the expected times as gateways fail/recover on 2.4.5. Jim Pingle
02:52 PM Bug #4674 (Resolved): invalid state table entries after WAN IP change
No feedback from OP or previous commenters, and at least with a quick test here it appears to be doing the right thin... Jim Pingle
02:52 PM Revision e63373a6: Fix function case. Issue #10139
Jim Pingle
02:52 PM Revision 7fa8c0dd: Relocate IGMP proxy verbose setting. Fixes #10139
Jim Pingle
02:44 PM Revision 7f5cb422: Relocate IGMP proxy verbose setting. Fixes #10139
Jim Pingle
02:33 PM Bug #10143 (New): System hostname DNS entry is assigned to the wrong IP on multi-wan setups
According to the official "docs":https://docs.netgate.com/pfsense/en/latest/interfaces/interface-settings.html#interf... Daniel Pereira
02:27 PM Revision e50335e9: Move igmpproxy logs to routing.log. Fixes #10139
Jim Pingle
02:21 PM Revision d30d2108: Move igmpproxy logs to routing.log. Fixes #10139
Jim Pingle
02:11 PM Revision 1cd960a8: Merge pull request #4132 from vktg/hidenoprvcerts
Renato Botelho
02:10 PM Revision a5b927e5: Merge pull request #4142 from vktg/routedelete
Renato Botelho
01:58 PM Bug #10142 (Rejected): Using LAN interface for WAN leads to weird behaviors
The leases bit is likely not a bug, there may actually be a lease in the lease database that matches the stated confi... Jim Pingle
01:47 PM Bug #10142 (Rejected): Using LAN interface for WAN leads to weird behaviors
According to the official "docs":https://docs.netgate.com/pfsense/en/latest/interfaces/interface-settings.html#interf... Daniel Pereira
01:29 PM Bug #9610: picture.widget.php: Arbitrary file read/write
See also: #9731 Jim Pingle
01:28 PM Bug #9610 (Resolved): picture.widget.php: Arbitrary file read/write
Re-confirmed against 2.4.4-p3 and then confirmed fixed against 2.4.5 and 2.5.0. Jim Pingle
01:29 PM Bug #9731 (Duplicate): Path Traversal vulnerability in picture widget
Though this had a separate fix applied, I believe it's really the same issue as #9610 Jim Pingle
01:21 PM Feature #9693 (Resolved): Bypass automatic backups
Looks good now. Jim Pingle
01:20 PM Bug #9804 (Resolved): services_captiveportal.php: Image upload does not validate file type
That should be good enough. I also cannot upload anything but a valid image in those fields on 2.5.0, so it would app... Jim Pingle
01:14 PM Bug #9609 (Resolved): Reflective xss in services_captiveportal_mac.php
Looks good here. Re-verified against 2.4.4-p3 and confirmed fixed against 2.4.5 and 2.5.0:
2.4.4-p3:...
Jim Pingle
11:48 AM pfSense Packages Bug #9652 (New): Squid Proxy Server /var/squid/lib/ssl_db directory not found in squid.inc
Jim Pingle
11:39 AM pfSense Packages Bug #9652: Squid Proxy Server /var/squid/lib/ssl_db directory not found in squid.inc
I tried to completely remove the squid package from gui and filesystem... probably thinking about some misconfigurati... Stefano Mereghetti
10:48 AM pfSense Packages Bug #9652: Squid Proxy Server /var/squid/lib/ssl_db directory not found in squid.inc
Hello, thanks.
just tested with the last merge (2.4.5.a.20191231.0928) and squid package (0.4.44_12) and after the...
Stefano Mereghetti
09:46 AM pfSense Packages Bug #6339 (Pull Request Review): OpenVPN Client Export package option for "Use Microsoft Certificate Storage" does not specify which certificate to use
Jim Pingle
09:37 AM pfSense Packages Bug #6339: OpenVPN Client Export package option for "Use Microsoft Certificate Storage" does not specify which certificate to use
https://github.com/pfsense/FreeBSD-ports/pull/739 Viktor Gurov
09:45 AM Todo #9245: Update copyright notices to 2020
Just pushed commits to bring everything up to 2019, which will then make it easy to match it all when changing to 202... Jim Pingle
09:17 AM Todo #9245 (In Progress): Update copyright notices to 2020
May as well re-use this to fix the headers for 2020 and packages. Jim Pingle
09:44 AM Bug #10139: IGMPPROXY spamming the main systemlog
When you toggle the setting on services_igmpproxy.php and save it will offer to apply changes as with any other chang... Jim Pingle
09:33 AM Bug #10139: IGMPPROXY spamming the main systemlog
Hello Jim Pingle,
Great to see that you already taken action. I have overlooked the option under Status > System L...
Roy Krikke
09:00 AM Bug #10139 (Feedback): IGMPPROXY spamming the main systemlog
Applied in changeset commit:7f5cb42263a0d2e8f3b752cd8e0453874c117a86. Jim Pingle
08:39 AM Bug #10139 (In Progress): IGMPPROXY spamming the main systemlog
On second thought I'm also going to move the igmpproxy verbose logging option to services_igmpproxy.php since it make... Jim Pingle
08:35 AM Bug #10139 (Feedback): IGMPPROXY spamming the main systemlog
Applied in changeset commit:d30d2108d88f8270264b1eeaf353d60156a40c3f. Jim Pingle
07:45 AM Bug #10139: IGMPPROXY spamming the main systemlog
There is already a verbose setting for it under Status > System Logs on the Settings tab. Try unchecking the box ther... Jim Pingle
05:13 AM Bug #10139 (Resolved): IGMPPROXY spamming the main systemlog
Igmpproxy is massivly spamming the main systemlog making it "completly" unusable.
This bug is connected to:
https...
Roy Krikke
08:56 AM pfSense Packages Feature #10141 (Resolved): pfBlockerNG - MaxMind License Registration
As per MaxMind:
https://blog.maxmind.com/2019/12/18/significant-changes-to-accessing-and-using-geolite2-databases/
...
BBcan177 .
08:12 AM Feature #9972 (Feedback): cert_build_list(): by default don't show certs without prv key
PR has been merged. Thanks! Renato Botelho
08:10 AM Bug #10001 (Feedback): incorrect route deletion on 2.5
PR has been merged. Thanks! Renato Botelho
12:07 AM Bug #10001: incorrect route deletion on 2.5
Jim Pingle wrote:
> It is possible this may fix itself once we move to a 12.1 base, it may be a problem specific to ...
Viktor Gurov
07:35 AM pfSense Packages Feature #10140 (Pull Request Review): allow to select webserver certificate
Jim Pingle
05:54 AM pfSense Packages Feature #10140 (Closed): allow to select webserver certificate
This feature allow user to select certificate for internal webserver of pfBlocker (lighttpd)
It saves the old /var/u...
Viktor Gurov
07:33 AM Bug #10138 (Duplicate): FW rules - Manual State timeout settings
It's already there for TCP, others are already mentioned in #1635 Jim Pingle
04:12 AM Bug #10138 (Duplicate): FW rules - Manual State timeout settings
Hi Team,
Any chance you could add a feature to specify/adjust the UDP and TCP state timeouts for a particular host...
matt s
07:29 AM pfSense Packages Bug #9204 (Needs Patch): ospfd: GRE tunnels became unnumbered since 2.4.4
Looks like it's already been raised upstream with FRR, and the issue is still open: https://github.com/FRRouting/frr/... Jim Pingle
01:18 AM pfSense Packages Bug #9204: ospfd: GRE tunnels became unnumbered since 2.4.4
Jim Pingle wrote:
> Can you test this with the current version of FRR (preferably on 2.5.0, if 2.4.4 doesn't work)?
...
Viktor Gurov
06:55 AM pfSense Packages Bug #9322 (Feedback): telegraf "Additional configuration for Telegraf" lost configuration after reboot
PR has been merged. Thanks! Renato Botelho
06:39 AM pfSense Packages Bug #9322: telegraf "Additional configuration for Telegraf" lost configuration after reboot
https://github.com/pfsense/FreeBSD-ports/pull/737 Viktor Gurov
06:46 AM Revision 5a24d994: fixes
Viktor Gurov
06:12 AM pfSense Packages Bug #9750 (Feedback): squidguard_blacklist.php & squidguard_log.php wrong status icon link
PR has been merged to 2.5.0 and 2.4.5
Thanks
Renato Botelho
05:25 AM Revision 4e8cb2fc: parenthesis fix
Viktor Gurov

12/30/2019

11:02 PM Revision 1b492ac7: Ignore the flash devices during the scan for config files at boot.
(cherry picked from commit 99a641df363bfc9c1e62474180598a770ff22385) Luiz Souza
11:02 PM Revision 99a641df: Ignore the flash devices during the scan for config files at boot.
Luiz Souza
09:48 PM Revision eeaf998c: Update some old doc URLs
(cherry picked from commit b9c73e94fecf41e6d3a8854ba51d8e3bbc7dd5d4) Jim Pingle
09:48 PM Revision b9c73e94: Update some old doc URLs
Jim Pingle
09:21 PM Revision daa19dce: help.php book URL updates. Issue #10135
Jim Pingle
09:19 PM Revision eeae77c9: help.php book URL updates. Issue #10135
Jim Pingle
09:04 PM Revision db1f9fe5: Merge pull request #4143 from vktg/ipsecgcmnoah
Renato Botelho
09:03 PM Revision f6d8ae5a: Merge pull request #4129 from luckman212/dns-v6-options-patch-2
Renato Botelho
08:59 PM Revision 7682eeeb: Merge pull request #4137 from vktg/multicrl
Renato Botelho
08:58 PM Revision 309e5f11: fix vti localid hiding in WebGUI
(cherry picked from commit 16ed13478daeceb1ad6a2b180dba7506574d4480) Viktor Gurov
08:58 PM Revision defdc5a5: Merge pull request #4140 from vktg/unhidevtiremoteid
Renato Botelho
08:43 PM Revision 3b7d8533: Another layer of help.php URL redirects. Issue #10135
Like an onion.
Also remove some non-existent pages.
Jim Pingle
08:42 PM Revision 0fca685f: Another layer of help.php URL redirects. Issue #10135
Like an onion.
Also remove some non-existent pages.
Jim Pingle
08:11 PM Revision 21abbc87: Update help.php current post-redirect URLs. Issue #10135
URLs were still pointing at the retired docs server URLs, update to
current targets after redirecting.
Jim Pingle
08:10 PM Revision ebed725a: Update help.php current post-redirect URLs. Issue #10135
URLs were still pointing at the retired docs server URLs, update to
current targets after redirecting.
Jim Pingle
06:26 PM Bug #10136: PHP Warning: PHP Startup: Unable to load dynamic library 'readline.so' & 'intl.so'
Indeed after another reboot the message is gone. Sean McBride
03:20 PM Bug #10136 (Duplicate): PHP Warning: PHP Startup: Unable to load dynamic library 'readline.so' & 'intl.so'
That is the same issue. The errors are harmless side effects of the upgrade process unless they recur after the next ... Jim Pingle
03:01 PM Bug #10136 (Duplicate): PHP Warning: PHP Startup: Unable to load dynamic library 'readline.so' & 'intl.so'
I updated from 2.4.4-p3 to 2.4.5-devel and got this:
-------------
Crash report begins. Anonymous machine inform...
Sean McBride
05:16 PM Feature #10137 (New): net-mgmt/arpwatch: Update to 3.0
This is needed for this pull request: https://github.com/pfsense/FreeBSD-ports/pull/730 Craig Leres
03:41 PM Todo #10135 (In Progress): help.php: Update links
The concerns raised in #10011 - #10133 should all be addressed now, though there are still >200 URLs that point to th... Jim Pingle
12:59 PM Todo #10135 (Resolved): help.php: Update links
Most page-specific links in source:src/usr/local/www/help.php point to old URLs and not the new URLs.
This replace...
Jim Pingle
03:13 PM pfSense Packages Bug #9652 (Feedback): Squid Proxy Server /var/squid/lib/ssl_db directory not found in squid.inc
PR has been merged. Thanks! Renato Botelho
03:04 PM Feature #9726 (Feedback): Hash Algorithm configured on child ESP/AH proposals using AES GCM though strongswan strips them
PR has been merged. Thanks Renato Botelho
09:22 AM Feature #9726 (Pull Request Review): Hash Algorithm configured on child ESP/AH proposals using AES GCM though strongswan strips them
Jim Pingle
03:03 PM Feature #9302 (Feedback): radvd always advertises DNS servers and Domain Search List regardless of M or O flag
PR has been merged. Thanks! Renato Botelho
02:59 PM Feature #3258 (Feedback): Allow multiple certificates to be revoked in a single step
PR has been merged. Thanks! Renato Botelho
02:58 PM Bug #9720 (Feedback): vpn_ipsec_phase2.php - no remote network field in VTI mode
PR has been merged. Thanks Renato Botelho
08:40 AM Bug #9720 (Pull Request Review): vpn_ipsec_phase2.php - no remote network field in VTI mode
Jim Pingle
02:52 PM pfSense Packages Feature #9563 (Feedback): Syslog-ng TLS support
PR has been merged. Thanks! Renato Botelho
08:42 AM pfSense Packages Feature #9563 (Pull Request Review): Syslog-ng TLS support
Jim Pingle
02:50 PM pfSense Packages Feature #9523 (Feedback): LADVD: Feature to enable setting interface descriptions
PR has been merged. Thanks! Renato Botelho
08:56 AM pfSense Packages Feature #9523 (Pull Request Review): LADVD: Feature to enable setting interface descriptions
Jim Pingle
12:55 PM Feature #10034 (Closed): Update interfaces_gif_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10033 (Closed): Update interfaces_gif.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10032 (Closed): Update interfaces_gre_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10031 (Closed): Update interfaces_gre.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10030 (Closed): Update interfaces_ppps_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10029 (Closed): Update interfaces_ppps.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10028 (Closed): Update interfaces_qinq.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10027 (Closed): Update interfaces_qinq.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10026 (Closed): Update interfaces_vlan_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10025 (Closed): Update interfaces_vlan.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10024 (Closed): Update interfaces_wireless_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10023 (Closed): Update interfaces_wireless.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10022 (Closed): Update interfaces_groups_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10021 (Closed): Update interfaces_groups.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10020 (Closed): Update interfaces_groups.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10019 (Closed): Update interfaces.php?if= to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10018 (Closed): Update interfaces_assign.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10017 (Closed): Update system_advanced_sysctl.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10016 (Closed): Update system_advanced_sysctl.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10015 (Closed): Update system_advanced_misc.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10014 (Closed): Update system_advanced_network.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10013 (Closed): Update system_advanced_network.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10012 (Closed): Update system_advanced_firewall.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:55 PM Feature #10011 (Closed): Update system_advanced_admin.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10133 (Closed): Update status_carp.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10132 (Closed): Update status_captiveportal_vouchers.php?zone= to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10131 (Closed): Update status_captiveportal.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10130 (Closed): Update wizard.php?xml=openvpn_wizard.xml to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10129 (Closed): Update vpn_openvpn_csc.php?act=new to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10128 (Closed): Update vpn_openvpn_csc.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10127 (Closed): Update vpn_openvpn_client.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10126 (Closed): Update vpn_openvpn_server.php?act=new to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10125 (Closed): Update vpn_openvpn_server.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10124 (Closed): Update vpn_l2tp_users.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10123 (Closed): Update vpn_l2tp.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10122 (Closed): Update vpn_ipsec_settings.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10121 (Closed): Update vpn_ipsec_keys.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10120 (Closed): Update vpn_ipsec_mobile.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10119 (Closed): Update vpn_ipsec_phase2.php?ikeid= to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10118 (Closed): Update vpn_ipsec_phase1.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10117 (Closed): Update vpn_ipsec.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10116 (Closed): Update services_wol_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10115 (Closed): Update services_wol_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10114 (Closed): Update services_wol.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10113 (Closed): Update pkg_edit.php?xml=miniupnpd.xml to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10112 (Closed): Update services_snmp.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10111 (Closed): Update services_pppoe_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10110 (Closed): Update services_pppoe.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10109 (Closed): Update services_ntpd_pps.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10108 (Closed): Update services_ntpd_gps.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10107 (Closed): Update services_ntpd_acls.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10106 (Closed): Update services_ntpd.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10105 (Closed): Update load_balancer_setting.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:54 PM Feature #10104 (Closed): Update load_balancer_monitor_edit.php?id= to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10103 (Closed): Update load_balancer_monitor.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10102 (Closed): Update load_balancer_virtual_server_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10101 (Closed): Update load_balancer_virtual_server.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10100 (Closed): Update load_balancer_pool_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10099 (Closed): Update load_balancer_pool.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10098 (Closed): Update services_igmpproxy_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10097 (Closed): Update services_igmpproxy.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10096 (Closed): Update services_checkip_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10095 (Closed): Update services_checkip.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10094 (Closed): Update services_rfc2136_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10093 (Closed): Update services_rfc2136.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10092 (Closed): Update services_dyndns_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10091 (Closed): Update services_dyndns.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10090 (Closed): Update services_unbound_acls.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10089 (Closed): Update services_unbound_advanced.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10088 (Closed): Update services_unbound.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10087 (Closed): Update services_dnsmasq.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10086 (Closed): Update services_router_advertisements.php?if= to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10085 (Closed): Update services_dhcpv6.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10084 (Closed): Update services_dhcpv6_relay.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10083 (Closed): Update services_dhcp.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10082 (Closed): Update services_dhcp_relay.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10081 (Closed): Update services_captiveportal_filemanager.php?zone= to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10080 (Closed): Update services_captiveportal_vouchers.php?zone= to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10079 (Closed): Update services_captiveportal_hostname_edit.php?zone=&act=add to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10078 (Closed): Update services_captiveportal_hostname.php?zone= to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10077 (Closed): Update services_captiveportal_ip_edit.php?zone=&act=add to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10076 (Closed): Update services_captiveportal_ip.php?zone= to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10075 (Closed): Update services_captiveportal_mac_edit.php?zone=&act=add to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10074 (Closed): Update services_captiveportal_mac.php?zone= to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10073 (Closed): Update services_captiveportal_zones_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10072 (Closed): Update services_captiveportal_zones.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10071 (Closed): Update services_acb_backup.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10070 (Closed): Update services_acb_backup.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10069 (Closed): Update services_acb.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10068 (Closed): Update services_acb_settings.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10067 (Closed): Update firewall_virtual_ip_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10066 (Closed): Update firewall_virtual_ip.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10065 (Closed): Update wizard.php?xml=traffic_shaper_wizard*.xml to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10064 (Closed): Update firewall_shaper_wizards.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10063 (Closed): Update firewall_shaper_vinterface.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10062 (Closed): Update firewall_shaper_queues.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10061 (Closed): Update firewall_shaper.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10060 (Closed): Update firewall_schedule_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10059 (Closed): Update firewall_schedule.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10058 (Closed): Update firewall_rules_edit.php?id= to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10057 (Closed): Update firewall_rules.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10056 (Closed): Update firewall_nat_npt_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10055 (Closed): Update firewall_nat_npt.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10054 (Closed): Update firewall_nat_out_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10053 (Closed): Update firewall_nat_out.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10052 (Closed): Update firewall_nat_1to1_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10051 (Closed): Update firewall_nat_1to1.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10050 (Closed): Update firewall_nat_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10049 (Closed): Update firewall_nat.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10048 (Closed): Update firewall_aliases_import.php?tab=all to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10047 (Closed): Update firewall_aliases_edit.php?tab=all to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10046 (Closed): Update firewall_aliases_edit.php?tab=url to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10045 (Closed): Update firewall_aliases.php?tab=url to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10044 (Closed): Update firewall_aliases_import.php?tab=port to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10043 (Closed): Update firewall_aliases_edit.php?tab=port to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10042 (Closed): Update firewall_aliases.php?tab=port to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10041 (Closed): Update firewall_aliases_import.php?tab=ip to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10040 (Closed): Update firewall_aliases_edit.php?tab=ip to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10039 (Closed): Update firewall_aliases.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10038 (Closed): Update interfaces_lagg_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:53 PM Feature #10037 (Closed): Update interfaces_lagg.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:52 PM Feature #10036 (Closed): Update interfaces_bridge_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:52 PM Feature #10035 (Closed): Update interfaces_bridge.php to include a link to The pfSense Book, rather than the community maintained documentation
Jim Pingle
12:16 PM Bug #9270: "Remove all states to and from the filtered address" does not remove all states
It is still in a "new" state, so no, it has not yet been addressed. Jim Pingle
12:01 PM Bug #9270: "Remove all states to and from the filtered address" does not remove all states
Is this fix part of current development snapshot ? Yuri Weinstein
11:06 AM pfSense Packages Feature #10134 (Resolved): pfSense-pkg-softflowd: Add additional options available in softflowd-1.0.0
*DEPENDS* on FreeBSD ports issue https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=242960
pfSense PR: https://gith...
Ross Williams
10:06 AM Bug #9993 (Feedback): invalid cipher specified in ipsec config
Can you check what changed in your config.xml between the non-working and working configuration?
And can you possi...
Jim Pingle
09:34 AM pfSense Packages Feature #10002 (Pull Request Review): allow to use lo0 interface for web-server
Jim Pingle
09:20 AM Bug #10001 (Pull Request Review): incorrect route deletion on 2.5
It is possible this may fix itself once we move to a 12.1 base, it may be a problem specific to 12.0. Jim Pingle
09:00 AM Bug #6868 (Pull Request Review): Interface MTU Setting not applied to all IPv6 routes
Jim Pingle
08:44 AM pfSense Packages Feature #9217 (Pull Request Review): Squid LDAP Authentication - spaces in ldif values
Jim Pingle
08:39 AM pfSense Packages Bug #9750 (Pull Request Review): squidguard_blacklist.php & squidguard_log.php wrong status icon link
Jim Pingle
08:35 AM Bug #7609: NTP Status not parsing all NTP Access Restrictions preventing status display when it is actually allowed
The original problem was resolved, the later report is a slightly different edge case. The new issue is not the origi... Jim Pingle

12/28/2019

10:59 PM Feature #10133 (Closed): Update status_carp.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at status_carp.php, there is a help button (circle with question mark inside of it) that links to the publ... Anonymous
10:58 PM Feature #10132: Update status_captiveportal_vouchers.php?zone= to include a link to The pfSense Book, rather than the community maintained documentation
The above applies for all Tabs under Status > Captive Portal (Active Users, Active Vouchers, Voucher Rolls, Test Vouc... Anonymous
10:58 PM Feature #10132 (Closed): Update status_captiveportal_vouchers.php?zone= to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at status_captiveportal_vouchers.php?zone=, there is a help button (circle with question mark inside of it... Anonymous
10:58 PM Feature #10131 (Closed): Update status_captiveportal.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at wizard.php?xml=openvpn_wizard.xml, there is a help button (circle with question mark inside of it) that... Anonymous
10:57 PM Feature #10130 (Closed): Update wizard.php?xml=openvpn_wizard.xml to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at wizard.php?xml=openvpn_wizard.xml, there is a help button (circle with question mark inside of it) that... Anonymous
10:57 PM Feature #10129 (Closed): Update vpn_openvpn_csc.php?act=new to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at vpn_openvpn_csc.php?act=new, there is a help button (circle with question mark inside of it) that links... Anonymous
10:57 PM Feature #10128 (Closed): Update vpn_openvpn_csc.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at vpn_openvpn_csc.php, there is a help button (circle with question mark inside of it) that links to the ... Anonymous
10:57 PM Feature #10127 (Closed): Update vpn_openvpn_client.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at vpn_openvpn_client.php, there is a help button (circle with question mark inside of it) that links to t... Anonymous
10:56 PM Feature #10126 (Closed): Update vpn_openvpn_server.php?act=new to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at vpn_openvpn_server.php?act=new, there is a help button (circle with question mark inside of it) that li... Anonymous
10:56 PM Feature #10125 (Closed): Update vpn_openvpn_server.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at vpn_openvpn_server.php, there is a help button (circle with question mark inside of it) that links to t... Anonymous
10:56 PM Feature #10124 (Closed): Update vpn_l2tp_users.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at vpn_l2tp_users.php, there is a help button (circle with question mark inside of it) that links to the p... Anonymous
10:56 PM Feature #10123 (Closed): Update vpn_l2tp.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at vpn_l2tp.php, there is a help button (circle with question mark inside of it) that links to the public,... Anonymous
10:55 PM Feature #10122 (Closed): Update vpn_ipsec_settings.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at vpn_ipsec_settings.php, there is a help button (circle with question mark inside of it) that links to t... Anonymous
10:55 PM Feature #10121 (Closed): Update vpn_ipsec_keys.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at vpn_ipsec_keys.php, there is a help button (circle with question mark inside of it) that links to the p... Anonymous
10:54 PM Feature #10120 (Closed): Update vpn_ipsec_mobile.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at vpn_ipsec_mobile.php, there is a help button (circle with question mark inside of it) that links to the... Anonymous
10:54 PM Feature #10119 (Closed): Update vpn_ipsec_phase2.php?ikeid= to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at vpn_ipsec_phase2.php?ikeid=, there is a help button (circle with question mark inside of it) that links... Anonymous
10:54 PM Feature #10118 (Closed): Update vpn_ipsec_phase1.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at vpn_ipsec_phase1.php, there is a help button (circle with question mark inside of it) that links to the... Anonymous
10:54 PM Feature #10117 (Closed): Update vpn_ipsec.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at vpn_ipsec.php, there is a help button (circle with question mark inside of it) that links to the public... Anonymous
10:54 PM Feature #10116 (Closed): Update services_wol_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_wol_edit.php, there is a help button (circle with question mark inside of it) that links to th... Anonymous
10:53 PM Feature #10115 (Closed): Update services_wol_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_wol_edit.php, there is a help button (circle with question mark inside of it) that links to th... Anonymous
10:53 PM Feature #10114 (Closed): Update services_wol.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_wol.php, there is a help button (circle with question mark inside of it) that links to the pub... Anonymous
10:53 PM Feature #10113 (Closed): Update pkg_edit.php?xml=miniupnpd.xml to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at pkg_edit.php?xml=miniupnpd.xml, there is a help button (circle with question mark inside of it) that li... Anonymous
10:52 PM Feature #10112 (Closed): Update services_snmp.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_snmp.php, there is a help button (circle with question mark inside of it) that links to the pu... Anonymous
10:52 PM Feature #10111 (Closed): Update services_pppoe_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_pppoe_edit.php, there is a help button (circle with question mark inside of it) that links to ... Anonymous
10:52 PM Feature #10110 (Closed): Update services_pppoe.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_pppoe.php, there is a help button (circle with question mark inside of it) that links to the p... Anonymous
10:52 PM Feature #10109 (Closed): Update services_ntpd_pps.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_ntpd_pps.php, there is a help button (circle with question mark inside of it) that links to th... Anonymous
10:52 PM Feature #10108 (Closed): Update services_ntpd_gps.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_ntpd_gps.php, there is a help button (circle with question mark inside of it) that links to th... Anonymous
10:51 PM Feature #10107 (Closed): Update services_ntpd_acls.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_ntpd_acls.php, there is a help button (circle with question mark inside of it) that links to t... Anonymous
10:51 PM Feature #10106 (Closed): Update services_ntpd.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_ntpd.php, there is a help button (circle with question mark inside of it) that links to the pu... Anonymous
10:51 PM Feature #10105 (Closed): Update load_balancer_setting.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at load_balancer_setting.php, there is a help button (circle with question mark inside of it) that links t... Anonymous
10:50 PM Feature #10104 (Closed): Update load_balancer_monitor_edit.php?id= to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at load_balancer_monitor_edit.php?id=, there is a help button (circle with question mark inside of it) tha... Anonymous
10:50 PM Feature #10103 (Closed): Update load_balancer_monitor.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at load_balancer_monitor.php, there is a help button (circle with question mark inside of it) that links t... Anonymous
10:50 PM Feature #10102 (Closed): Update load_balancer_virtual_server_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at load_balancer_virtual_server_edit.php, there is a help button (circle with question mark inside of it) ... Anonymous
10:50 PM Feature #10101 (Closed): Update load_balancer_virtual_server.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at load_balancer_virtual_server.php, there is a help button (circle with question mark inside of it) that ... Anonymous
10:49 PM Feature #10100 (Closed): Update load_balancer_pool_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at load_balancer_pool_edit.php, there is a help button (circle with question mark inside of it) that links... Anonymous
10:49 PM Feature #10099 (Closed): Update load_balancer_pool.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at load_balancer_pool.php, there is a help button (circle with question mark inside of it) that links to t... Anonymous
10:49 PM Feature #10098 (Closed): Update services_igmpproxy_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_igmpproxy_edit.php, there is a help button (circle with question mark inside of it) that links... Anonymous
10:48 PM Feature #10097 (Closed): Update services_igmpproxy.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_igmpproxy.php, there is a help button (circle with question mark inside of it) that links to t... Anonymous
10:48 PM Feature #10096 (Closed): Update services_checkip_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_checkip_edit.php, there is a help button (circle with question mark inside of it) that links t... Anonymous
10:47 PM Feature #10095 (Closed): Update services_checkip.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_checkip.php, there is a help button (circle with question mark inside of it) that links to the... Anonymous
10:47 PM Feature #10094 (Closed): Update services_rfc2136_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_rfc2136_edit.php, there is a help button (circle with question mark inside of it) that links t... Anonymous
10:47 PM Feature #10093 (Closed): Update services_rfc2136.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_rfc2136.php, there is a help button (circle with question mark inside of it) that links to the... Anonymous
10:46 PM Feature #10092 (Closed): Update services_dyndns_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_dyndns_edit.php, there is a help button (circle with question mark inside of it) that links to... Anonymous
10:46 PM Feature #10091 (Closed): Update services_dyndns.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_dyndns.php, there is a help button (circle with question mark inside of it) that links to the ... Anonymous
10:45 PM Feature #10090 (Closed): Update services_unbound_acls.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_unbound_acls.php, there is a help button (circle with question mark inside of it) that links t... Anonymous
10:45 PM Feature #10089 (Closed): Update services_unbound_advanced.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_unbound_advanced.php, there is a help button (circle with question mark inside of it) that lin... Anonymous
10:45 PM Feature #10088 (Closed): Update services_unbound.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_unbound.php, there is a help button (circle with question mark inside of it) that links to the... Anonymous
10:45 PM Feature #10087 (Closed): Update services_dnsmasq.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_dnsmasq.php, there is a help button (circle with question mark inside of it) that links to the... Anonymous
10:44 PM Feature #10086 (Closed): Update services_router_advertisements.php?if= to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_router_advertisements.php?if=, there is a help button (circle with question mark inside of it)... Anonymous
10:44 PM Feature #10085 (Closed): Update services_dhcpv6.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_dhcpv6.php, there is a help button (circle with question mark inside of it) that links to the ... Anonymous
10:44 PM Feature #10084 (Closed): Update services_dhcpv6_relay.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_dhcpv6_relay.php, there is a help button (circle with question mark inside of it) that links t... Anonymous
10:44 PM Feature #10083 (Closed): Update services_dhcp.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_dhcp.php, there is a help button (circle with question mark inside of it) that links to the pu... Anonymous
10:43 PM Feature #10082 (Closed): Update services_dhcp_relay.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_dhcp_relay.php, there is a help button (circle with question mark inside of it) that links to ... Anonymous
10:43 PM Feature #10081 (Closed): Update services_captiveportal_filemanager.php?zone= to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_captiveportal_filemanager.php?zone=, there is a help button (circle with question mark inside ... Anonymous
10:43 PM Feature #10080 (Closed): Update services_captiveportal_vouchers.php?zone= to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_captiveportal_vouchers.php?zone=, there is a help button (circle with question mark inside of ... Anonymous
10:43 PM Feature #10079 (Closed): Update services_captiveportal_hostname_edit.php?zone=&act=add to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_captiveportal_hostname_edit.php?zone=, there is a help button (circle with question mark insid... Anonymous
10:42 PM Feature #10078 (Closed): Update services_captiveportal_hostname.php?zone= to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_captiveportal_hostname.php?zone=, there is a help button (circle with question mark inside of ... Anonymous
10:42 PM Feature #10077 (Closed): Update services_captiveportal_ip_edit.php?zone=&act=add to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_captiveportal_ip_edit.php?zone=&act=add, there is a help button (circle with question mark ins... Anonymous
10:42 PM Feature #10076 (Closed): Update services_captiveportal_ip.php?zone= to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_captiveportal_ip.php?zone=, there is a help button (circle with question mark inside of it) th... Anonymous
10:42 PM Feature #10075 (Closed): Update services_captiveportal_mac_edit.php?zone=&act=add to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_captiveportal_mac_edit.php?zone=&act=add, there is a help button (circle with question mark in... Anonymous
10:41 PM Feature #10074 (Closed): Update services_captiveportal_mac.php?zone= to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_captiveportal_mac.php?zone=, there is a help button (circle with question mark inside of it) t... Anonymous
10:41 PM Feature #10073 (Closed): Update services_captiveportal_zones_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_captiveportal_zones_edit.php, there is a help button (circle with question mark inside of it) ... Anonymous
10:41 PM Feature #10072 (Closed): Update services_captiveportal_zones.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_captiveportal_zones.php, there is a help button (circle with question mark inside of it) that ... Anonymous
10:41 PM Feature #10071 (Closed): Update services_acb_backup.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_acb_backup.php, there is a help button (circle with question mark inside of it) that links to ... Anonymous
10:40 PM Feature #10070 (Closed): Update services_acb_backup.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_acb_backup.php, there is a help button (circle with question mark inside of it) that links to ... Anonymous
10:40 PM Feature #10069 (Closed): Update services_acb.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at services_acb.php, there is a help button (circle with question mark inside of it) that links to the pub... Anonymous
10:40 PM Feature #10068 (Closed): Update services_acb_settings.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_virtual_ip_edit.php, there is a help button (circle with question mark inside of it) that link... Anonymous
10:39 PM Feature #10067 (Closed): Update firewall_virtual_ip_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_virtual_ip_edit.php, there is a help button (circle with question mark inside of it) that link... Anonymous
10:39 PM Feature #10066 (Closed): Update firewall_virtual_ip.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_virtual_ip.php, there is a help button (circle with question mark inside of it) that links to ... Anonymous
10:39 PM Feature #10065 (Closed): Update wizard.php?xml=traffic_shaper_wizard*.xml to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at wizard.php?xml=traffic_shaper_wizard*.xml, there is a help button (circle with question mark inside of ... Anonymous
10:38 PM Feature #10064 (Closed): Update firewall_shaper_wizards.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_shaper_wizards.php, there is a help button (circle with question mark inside of it) that links... Anonymous
10:38 PM Feature #10063 (Closed): Update firewall_shaper_vinterface.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_shaper_vinterface.php, there is a help button (circle with question mark inside of it) that li... Anonymous
10:38 PM Feature #10062 (Closed): Update firewall_shaper_queues.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_shaper_queues.php, there is a help button (circle with question mark inside of it) that links ... Anonymous
10:38 PM Feature #10061 (Closed): Update firewall_shaper.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_shaper.php, there is a help button (circle with question mark inside of it) that links to the ... Anonymous
10:37 PM Feature #10060 (Closed): Update firewall_schedule_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_schedule_edit.php, there is a help button (circle with question mark inside of it) that links ... Anonymous
10:37 PM Feature #10059 (Closed): Update firewall_schedule.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_schedule.php, there is a help button (circle with question mark inside of it) that links to th... Anonymous
10:37 PM Feature #10058 (Closed): Update firewall_rules_edit.php?id= to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_rules_edit.php?id=, there is a help button (circle with question mark inside of it) that links... Anonymous
10:37 PM Feature #10057 (Closed): Update firewall_rules.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_rules.php, there is a help button (circle with question mark inside of it) that links to the p... Anonymous
10:36 PM Feature #10056 (Closed): Update firewall_nat_npt_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_nat_npt_edit.php, there is a help button (circle with question mark inside of it) that links t... Anonymous
10:36 PM Feature #10055 (Closed): Update firewall_nat_npt.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_nat_npt.php, there is a help button (circle with question mark inside of it) that links to the... Anonymous
10:36 PM Feature #10054 (Closed): Update firewall_nat_out_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_nat_out_edit.php, there is a help button (circle with question mark inside of it) that links t... Anonymous
10:35 PM Feature #10053 (Closed): Update firewall_nat_out.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_nat_out.php, there is a help button (circle with question mark inside of it) that links to the... Anonymous
10:35 PM Feature #10052 (Closed): Update firewall_nat_1to1_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_nat_1to1_edit.php, there is a help button (circle with question mark inside of it) that links ... Anonymous
10:35 PM Feature #10051 (Closed): Update firewall_nat_1to1.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_nat_1to1.php, there is a help button (circle with question mark inside of it) that links to th... Anonymous
10:35 PM Feature #10050 (Closed): Update firewall_nat_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_nat_edit.php, there is a help button (circle with question mark inside of it) that links to th... Anonymous
10:34 PM Feature #10049 (Closed): Update firewall_nat.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_nat.php, there is a help button (circle with question mark inside of it) that links to the pub... Anonymous
10:34 PM Feature #10048 (Closed): Update firewall_aliases_import.php?tab=all to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_aliases_import.php?tab=all, there is a help button (circle with question mark inside of it) th... Anonymous
10:34 PM Feature #10047 (Closed): Update firewall_aliases_edit.php?tab=all to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_aliases_edit.php?tab=all, there is a help button (circle with question mark inside of it) that... Anonymous
10:34 PM Feature #10046 (Closed): Update firewall_aliases_edit.php?tab=url to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_aliases_edit.php?tab=url, there is a help button (circle with question mark inside of it) that... Anonymous
10:32 PM Feature #10045 (Closed): Update firewall_aliases.php?tab=url to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_aliases.php?tab=url, there is a help button (circle with question mark inside of it) that link... Anonymous
10:32 PM Feature #10044 (Closed): Update firewall_aliases_import.php?tab=port to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_aliases_import.php?tab=port, there is a help button (circle with question mark inside of it) t... Anonymous
10:32 PM Feature #10043 (Closed): Update firewall_aliases_edit.php?tab=port to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_aliases_edit.php?tab=port, there is a help button (circle with question mark inside of it) tha... Anonymous
10:32 PM Feature #10042 (Closed): Update firewall_aliases.php?tab=port to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_aliases.php?tab=port, there is a help button (circle with question mark inside of it) that lin... Anonymous
10:31 PM Feature #10041 (Closed): Update firewall_aliases_import.php?tab=ip to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_aliases_import.php?tab=ip, there is a help button (circle with question mark inside of it) tha... Anonymous
10:24 PM Feature #10040 (Closed): Update firewall_aliases_edit.php?tab=ip to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_aliases_edit.php?tab=ip, there is a help button (circle with question mark inside of it) that ... Anonymous
10:24 PM Feature #10039 (Closed): Update firewall_aliases.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at firewall_aliases.php, there is a help button (circle with question mark inside of it) that links to the... Anonymous
10:23 PM Feature #10038 (Closed): Update interfaces_lagg_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at interfaces_lagg_edit.php, there is a help button (circle with question mark inside of it) that links to... Anonymous
10:23 PM Feature #10037 (Closed): Update interfaces_lagg.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at interfaces_lagg.php, there is a help button (circle with question mark inside of it) that links to the ... Anonymous
10:23 PM Feature #10036 (Closed): Update interfaces_bridge_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at interfaces_bridge_edit.php, there is a help button (circle with question mark inside of it) that links ... Anonymous
10:22 PM Feature #10035 (Closed): Update interfaces_bridge.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at interfaces_bridge.php, there is a help button (circle with question mark inside of it) that links to th... Anonymous
10:22 PM Feature #10034 (Closed): Update interfaces_gif_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at interfaces_gif_edit.php, there is a help button (circle with question mark inside of it) that links to ... Anonymous
10:22 PM Feature #10033 (Closed): Update interfaces_gif.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at interfaces_gif.php, there is a help button (circle with question mark inside of it) that links to the p... Anonymous
10:22 PM Feature #10032 (Closed): Update interfaces_gre_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at interfaces_gre_edit.php, there is a help button (circle with question mark inside of it) that links to ... Anonymous
10:21 PM Feature #10031 (Closed): Update interfaces_gre.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at interfaces_gre.php, there is a help button (circle with question mark inside of it) that links to the p... Anonymous
10:21 PM Feature #10030 (Closed): Update interfaces_ppps_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at interfaces_ppps_edit.php, there is a help button (circle with question mark inside of it) that links to... Anonymous
10:21 PM Feature #10029 (Closed): Update interfaces_ppps.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at interfaces_ppps.php, there is a help button (circle with question mark inside of it) that links to the ... Anonymous
10:20 PM Feature #10028 (Closed): Update interfaces_qinq.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at interfaces_qinq_edit.php, there is a help button (circle with question mark inside of it) that links to... Anonymous
10:20 PM Feature #10027 (Closed): Update interfaces_qinq.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at interfaces_qinq.php, there is a help button (circle with question mark inside of it) that links to the ... Anonymous
10:20 PM Feature #10026 (Closed): Update interfaces_vlan_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at interfaces_vlan_edit.php, there is a help button (circle with question mark inside of it) that links to... Anonymous
10:19 PM Feature #10025 (Closed): Update interfaces_vlan.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at interfaces_vlan.php, there is a help button (circle with question mark inside of it) that links to the ... Anonymous
10:19 PM Feature #10024 (Closed): Update interfaces_wireless_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at interfaces_wireless_edit.php, there is a help button (circle with question mark inside of it) that link... Anonymous
10:19 PM Feature #10023 (Closed): Update interfaces_wireless.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at interfaces_wireless.php, there is a help button (circle with question mark inside of it) that links to ... Anonymous
10:18 PM Feature #10022 (Closed): Update interfaces_groups_edit.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at interfaces_groups_edit.php, there is a help button (circle with question mark inside of it) that links ... Anonymous
10:18 PM Feature #10021 (Closed): Update interfaces_groups.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at interfaces_groups.php, there is a help button (circle with question mark inside of it) that links to th... Anonymous
10:17 PM Feature #10020 (Closed): Update interfaces_groups.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at interfaces_groups.php, there is a help button (circle with question mark inside of it) that links to th... Anonymous
10:17 PM Feature #10019 (Closed): Update interfaces.php?if= to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at interfaces.php?if=, there is a help button (circle with question mark inside of it) that links to the p... Anonymous
10:17 PM Feature #10018 (Closed): Update interfaces_assign.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at interfaces_assign.php, there is a help button (circle with question mark inside of it) that links to th... Anonymous
10:16 PM Feature #10017 (Closed): Update system_advanced_sysctl.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at system_advanced_notifications.php, there is a help button (circle with question mark inside of it) that... Anonymous
10:16 PM Feature #10016 (Closed): Update system_advanced_sysctl.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at system_advanced_sysctl.php, there is a help button (circle with question mark inside of it) that links ... Anonymous
10:16 PM Feature #10015 (Closed): Update system_advanced_misc.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at system_advanced_misc.php, there is a help button (circle with question mark inside of it) that links to... Anonymous
10:15 PM Feature #10014 (Closed): Update system_advanced_network.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at system_advanced_network.php, there is a help button (circle with question mark inside of it) that links... Anonymous
10:15 PM Feature #10013 (Closed): Update system_advanced_network.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at system_advanced_network.php, there is a help button (circle with question mark inside of it) that links... Anonymous
10:15 PM Feature #10012 (Closed): Update system_advanced_firewall.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at system_advanced_firewall.php, there is a help button (circle with question mark inside of it) that link... Anonymous
10:14 PM Feature #10011 (Closed): Update system_advanced_admin.php to include a link to The pfSense Book, rather than the community maintained documentation
Presently, at system_advanced_admin.php, there is a help button (circle with question mark inside of it) that links t... Anonymous
10:13 PM Feature #10010 (Resolved): Update infoblock on the Dashboard to include a link to The pfSense Book, rather than the community maintained documentation
Presently, on the Dashboard, there is a help button (circle with question mark inside of it) that links to the public... Anonymous
10:04 PM pfSense Docs New Content #10009 (Closed): Feedback on System Monitoring
*Page:* https://docs.netgate.com/pfsense/en/latest/book/monitoring/index.html
*Feedback:* Please add a section sim...
Anonymous
09:43 PM pfSense Docs New Content #10008 (Closed): Feedback on IPsec
*Page:* https://docs.netgate.com/pfsense/en/latest/book/ipsec/index.html
*Feedback:* Please add a section similar ...
Anonymous
09:06 PM pfSense Docs New Content #10007 (Closed): Feedback on Services — Dynamic DNS
*Page:* https://docs.netgate.com/pfsense/en/latest/services/dyndns/index.html
*Feedback:* Add equivalent informati...
Anonymous
08:32 PM pfSense Docs Correction #10006 (Closed): Feedback on Backup and Recovery — Using the AutoConfigBackup Package
*Page:* https://docs.netgate.com/pfsense/en/latest/backup/autoconfigbackup.html
*Feedback:* Legacy gold is expired...
Anonymous
04:04 PM pfSense Docs Correction #10005 (Closed): Feedback on Installing and Upgrading — Upgrading pfSense Software Installations
*Page:* https://docs.netgate.com/pfsense/en/latest/install/upgrading-pfsense-software-installations.html
*Feedback...
Anonymous
03:49 PM pfSense Docs Correction #10004 (Closed): Feedback on Packages
*Page:* https://docs.netgate.com/pfsense/en/latest/book/packages/index.html
*Feedback:* There is a note about Nano...
Anonymous
03:13 PM Bug #9819 (Resolved): Captive portal: Change order redirect page is selected
Jim Pingle
12:25 PM Bug #9819: Captive portal: Change order redirect page is selected
this issue can be marked as resolved A FL
03:13 PM pfSense Packages Bug #10003 (Duplicate): Visiting VPN > Apple IPsec Profile renders the navigation dropdown buttons useless
Duplicate of #8502 Jim Pingle
03:05 PM pfSense Packages Bug #10003 (Duplicate): Visiting VPN > Apple IPsec Profile renders the navigation dropdown buttons useless
On pfSense 2.4.5.a.20191227.1746, running ipsec-profile-wizard v0.12, when the user visits VPN > Apple IPsec Profile,... Anonymous
02:35 PM pfSense Packages Bug #9811 (Resolved): apcupsd - can not set BATTERYLEVEL and MINUTES to -1 although these are valid values
Tested apcupsd version 0.3.91_8, works as expected. Anonymous
01:56 PM Revision 3ae60408: cosmetic
Viktor Gurov
01:41 PM Revision 1f8e92a3: strip hash algo if ealgo == *gcm
Viktor Gurov
11:02 AM Revision 988e6c59: fix route delete code
Viktor Gurov
10:52 AM pfSense Packages Feature #10002 (Closed): allow to use lo0 interface for web-server
By default pfBlocker uses LAN interface for internal web-server and VIP alias, and do not allow to use Loopback for i... Viktor Gurov
10:32 AM Revision 853c97a7: fix route delete code
Viktor Gurov
08:33 AM Bug #10001: incorrect route deletion on 2.5
no such issue on clean FreeBSD 12.1
need to test on clean FreeBSD 12.0
is there any special patches in pfSense 2....
Viktor Gurov
05:13 AM Bug #10001: incorrect route deletion on 2.5
https://github.com/pfsense/pfsense/pull/4142 Viktor Gurov
05:11 AM Bug #10001 (Resolved): incorrect route deletion on 2.5
All code that uses “delete route” must use the full format with GW, i.e.
incorrect:...
Viktor Gurov
07:48 AM Feature #9726: Hash Algorithm configured on child ESP/AH proposals using AES GCM though strongswan strips them
https://github.com/pfsense/pfsense/pull/4143 Viktor Gurov
02:28 AM Bug #6868: Interface MTU Setting not applied to all IPv6 routes
https://github.com/pfsense/pfsense/pull/4141 Viktor Gurov

12/27/2019

07:48 AM pfSense Packages Bug #9635 (Resolved): lldpd (and probably ladvd) doesn't work on units with an integrated switch
no such issue on SG-3100 with pfSense 2.4.4-p3
lldpd updated to version 1.0.4 on 2.4.5/2.5
tested on pfSense ...
Viktor Gurov
01:38 AM pfSense Packages Feature #9523: LADVD: Feature to enable setting interface descriptions
https://github.com/pfsense/FreeBSD-ports/pull/731 Viktor Gurov
01:06 AM pfSense Packages Bug #9273 (Closed): missing Include=/usr/local/etc/zabbix4/zabbix_agentd.conf.d in /usr/local/etc/zabbix40/zabbix_agentd.conf
You can manually add line ... Viktor Gurov

12/26/2019

11:58 PM pfSense Packages Bug #8139 (Resolved): LADVD not working on LAGG interfaces
ladvd updated to 1.1.2 on pfSense 2.4.5 and 2.5
tested on pfSense 2.5.0.a.20191226.0326 and 2.4.5.a.20191209.0732
...
Viktor Gurov
01:28 PM Feature #10000: Enable ``@`` support for Azure in Dynamic DNS
*Left off test steps:
When an @ is provided, invalid character error is thrown in UI
When an empty field is provi...
Ty Mote
01:27 PM Feature #10000 (Resolved): Enable ``@`` support for Azure in Dynamic DNS
Unable to provide "@" or empty string for hostname field in the Azure DNS dynamic DNS setup. Any other record works c... Ty Mote
12:25 PM Feature #9996 (Resolved): fix Help -> pfSense book link
This has been fixed on the pfsense.org server. Thanks Viktor, for taking the time to point out the problem and submit... Jared Dillard
10:19 AM pfSense Packages Feature #9217: Squid LDAP Authentication - spaces in ldif values
https://github.com/pfsense/FreeBSD-ports/pull/729 Viktor Gurov
09:20 AM Bug #9840 (Resolved): PHP7: Uninitialised array in upgrade_config.inc
Jim Pingle
08:17 AM Revision 16ed1347: fix vti localid hiding in WebGUI
Viktor Gurov
05:47 AM pfSense Packages Feature #9563: Syslog-ng TLS support
https://github.com/pfsense/FreeBSD-ports/pull/728 Viktor Gurov
02:21 AM Bug #9720: vpn_ipsec_phase2.php - no remote network field in VTI mode
https://github.com/pfsense/pfsense/pull/4140 Viktor Gurov
01:41 AM Bug #9790 (Resolved): firewall aliases table with fqdn stays in system after deleting
Viktor Gurov
12:17 AM pfSense Packages Bug #9676: AS lookup fails
for some reason all online AS databases shows zero prefixes for this AS:
https://api.hackertarget.com/aslookup/?q=AS...
Viktor Gurov

12/25/2019

11:59 PM pfSense Packages Bug #9750: squidguard_blacklist.php & squidguard_log.php wrong status icon link
https://github.com/pfsense/FreeBSD-ports/pull/727 Viktor Gurov
03:04 PM Bug #7609: NTP Status not parsing all NTP Access Restrictions preventing status display when it is actually allowed
Running 2.4.4-RELEASE-p3 (amd64). robi robi
03:03 PM Bug #7609: NTP Status not parsing all NTP Access Restrictions preventing status display when it is actually allowed
Can anyone share the solution/patch for this?
We're using pfSense as a GPS-based NTP server which is part of pool.nt...
robi robi
08:10 AM pfSense Packages Bug #9999: unbound fatal error if System Domain in DNSBL and System Domain Local Zone Type is Redirect
https://github.com/pfsense/FreeBSD-ports/pull/726 Viktor Gurov
12:22 AM pfSense Packages Bug #9999 (New): unbound fatal error if System Domain in DNSBL and System Domain Local Zone Type is Redirect
On System / General Setup I have configured <MYHOST> as hostname and mywire.org (dynu.com dyndns provider) as domain ... Viktor Gurov
05:36 AM Feature #9878 (Resolved): IPsec PKCS#11 authentication
Renato Botelho wrote:
> PR has been merged. Thanks!
tested on pfSense 2.5.0.a.20191223.2203 with Yubikey 4 (FIPS)...
Viktor Gurov
02:42 AM Bug #5413: Reduce disruptions when changing DNS records from DHCP leases in Unbound
Is there any update here? Apparently there has been a fix available for over 2 years? Jason NA
02:05 AM Bug #9840: PHP7: Uninitialised array in upgrade_config.inc
tested on pfSense 2.4.5.a.20191209.0732
no any crash reports
Resolved
Viktor Gurov

12/24/2019

02:00 PM Bug #9567: Unbound DNS Resolver does not start up when using IPv6 DHHCPv6 WAN DHCPv6 LAN coupled with v6 Prefix Delegation
Jim -- Further analysis done, and studying interfaces changes during boot (those initially assigned), and later throu... Eric Veum
01:57 PM Bug #9998 (Resolved): DHCP6c and Unbound DNS Server Boot-Up Configuration Failure
When running my router with ‘Track Interface’ and dual IPv4/IPv6, using unbound as a local DNS server bound to only i... Eric Veum

12/23/2019

07:58 PM Revision 1f53547a: Fix syntax error in services_dyndns_edit.php, reformat statement.
(cherry picked from commit 1c11171b19ee8cabcbdaa5ffa433238033c510a2) Jim Pingle
04:38 PM Bug #9997 (Not a Bug): WAN connection dropping
There isn't nearly enough information here to suggest that it's a bug in pfSense. Please post on the forum and be sur... Jim Pingle
02:43 PM Bug #9997 (Not a Bug): WAN connection dropping
After WAN connection setting change, even changing in same state.
WAN connection stay jumping between 0.0.0.0 and ri...
Mika Pirinen
04:31 PM Bug #8051 (Resolved): XG-2758 - Wrong Interface Assignment
Jim Pingle
12:30 PM Bug #8051: XG-2758 - Wrong Interface Assignment
Here's what I get with a recent 2.4.5 memstick ADI CE install:
Netgate XG-2758 - Serial: Redacted - Netgate Device...
Chris Linstruth
09:27 AM Feature #9996: fix Help -> pfSense book link
This needs fixed on the server (In pfsense.org/j.php) Jim Pingle
09:03 AM Feature #9996: fix Help -> pfSense book link
https://github.com/pfsense/pfsense/pull/4139 Viktor Gurov
06:01 AM Feature #9996 (Resolved): fix Help -> pfSense book link
Help -> pfSense Book points to https://www.pfsense.org/j.php?jumpto=book,
which redirects to https://www.netgate.co...
Viktor Gurov
08:47 AM Feature #9995 (Duplicate): PFSense as DHCP Server for non routed Networks
Duplicate of #2323 Jim Pingle
03:09 AM Feature #9995 (Duplicate): PFSense as DHCP Server for non routed Networks
Hi pfsense Team
I wan't to implement a Layer 3 Switch for routing my VLANs. As DHCP Server should PFsense act.
So t...
Stefan Bühler
08:46 AM pfSense Packages Bug #9994 (Rejected): Siproxd can not working
There isn't enough information here to suggest that it's a bug in pfSense, rather than a limitation in siproxd. There... Jim Pingle
01:02 AM pfSense Packages Bug #9994 (Rejected): Siproxd can not working
User voip not registration through the siproxd when amount user equal or bigger 130 user quoctu nguyen

12/22/2019

05:01 PM Bug #9804: services_captiveportal.php: Image upload does not validate file type
I tested this and was unable to upload a small php script named phpinfo.gif into the picture widget.
I also tried ...
Chris Linstruth
04:23 PM Bug #9938 (Resolved): Queue stats parser broken if bytes > 9999999999
Jim Pingle
04:21 PM Bug #9938: Queue stats parser broken if bytes > 9999999999
Status_queues looks fine here:
[ pkts: 90492841 bytes: 71051952021 dropped pkts: 82974 bytes: 62613863 ]
...
Chris Linstruth
04:23 PM Bug #9447 (Resolved): Configuring LAGG at XG-7100 Switch Ports Broken
Jim Pingle
03:13 PM Bug #9447: Configuring LAGG at XG-7100 Switch Ports Broken
Setting 7 and 8 to lagg group 1 results in:
laggroup0:
members 9,10
laggroup1:
members 7,8
Setting 5 and 6 t...
Chris Linstruth
04:23 PM Bug #9548: Do not use VLANMTU flag to decide if interface supports to run VLAN
The only way to really try it is to track down a bit of hardware that didn't allow VLANs before, but does now.
But...
Jim Pingle
02:06 PM Bug #9548: Do not use VLANMTU flag to decide if interface supports to run VLAN
Evaluated this but could not figure out how to test it in the negative sense. Tried to make existing NICs drop the VL... Chris Linstruth
04:21 PM Bug #9668 (Resolved): Running /etc/rc.newipsecdns breaks FRR BGP on VTI interfaces
Jim Pingle
01:42 PM Bug #9668: Running /etc/rc.newipsecdns breaks FRR BGP on VTI interfaces
In addition to using this patch on a couple of customer sites with success, I just specifically tested this again bet... Chris Linstruth
07:13 AM Bug #9992: CCP: parameter negotiation failed
Thanks for looking at this, however, I'm not alone. Please see the forum: https://forum.netgate.com/topic/147120/malf... simon lock
07:06 AM Bug #9993: invalid cipher specified in ipsec config
What seems to fix it is toggling between ciphers (switch to aes in both duplicated tabs, save,edit again, select init... Florin Samareanu
06:58 AM Bug #9993 (Duplicate): invalid cipher specified in ipsec config
Seems something broke in latest 2.5.0 dev. Configuring ipsec p1 using aes-128-gcm and xcbc leads to this:
Dec 22 1...
Florin Samareanu

12/21/2019

03:39 PM Bug #9992 (Rejected): CCP: parameter negotiation failed
There isn't anything here to suggest this is an actionable bug in pfSense. Please post on the forum for assistance wi... Jim Pingle
01:08 PM Bug #9992 (Rejected): CCP: parameter negotiation failed
I am interconnecting via L2TP PFSense Over AWS to my Local GW. The connection is OK, as I try to move very large file... MMaxymo Mora
10:32 AM Bug #9991 (Rejected): wol sends invalid data 2.4.4-p3
I can't reproduce this. I tried on 2.4.4-p3, 2.4.5, and 2.5.0. A proper WOL packet was shown in Wireshark each time. ... Jim Pingle
08:47 AM Bug #9991 (Rejected): wol sends invalid data 2.4.4-p3
When issuing a wol command from pfsense to a pc running wireshark (directly connected and not via a switch) the corru... simon lock
09:12 AM Bug #9873 (Resolved): Switching the System Update to Development renders the system unbootable
Jim Pingle
05:34 AM Bug #9873: Switching the System Update to Development renders the system unbootable
tested on pfSense 2.4.5.a.20191220.1407
Resolved
Viktor Gurov
09:12 AM Bug #9924 (Resolved): crl_contains_cert() does not correctly report revoked status for intermediate CAs
Jim Pingle
05:29 AM Bug #9924: crl_contains_cert() does not correctly report revoked status for intermediate CAs
tested on pfSense 2.5.0.a.20191220.1354
works as expected,
Resolved
Viktor Gurov
09:09 AM Bug #9296 (Resolved): Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
Jim Pingle
01:11 AM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
Jim Pingle wrote:
> Needs checked and/or tested again on 2.4.5 snapshots
tested on pfSense 2.4.5.a.20191220.1407
...
Viktor Gurov
09:09 AM pfSense Packages Bug #9962 (Resolved): HAproxy Upgrade needed HTTP/2 CVE-2019-19330
Jim Pingle
12:43 AM pfSense Packages Bug #9962: HAproxy Upgrade needed HTTP/2 CVE-2019-19330
Jim Pingle wrote:
> The packages will show up on 2.4.4 immediately, they are already there:
> [...]
>
> For 2.4....
Viktor Gurov
09:08 AM Bug #9674 (Resolved): hidden OpenVPN settings are validated and written to file
Jim Pingle
12:38 AM Bug #9674: hidden OpenVPN settings are validated and written to file
tested on pfSense 2.4.5.a.20191220.1407
works as expected,
Resolved
Viktor Gurov
09:08 AM Bug #9292 (Resolved): Default route as indicated by "(Default)" does not match the actual default route on the OS.
Jim Pingle
12:24 AM Bug #9292: Default route as indicated by "(Default)" does not match the actual default route on the OS.
Jim Pingle wrote:
> Needs checked and/or tested again on 2.4.5 snapshots
tested on pfSense 2.4.5.a.20191220.1407
...
Viktor Gurov
09:08 AM Bug #9969 (Resolved): static route remain in the OS routing table after deletion
Jim Pingle
12:04 AM Bug #9969: static route remain in the OS routing table after deletion
tested on pfSense 2.4.5.a.20191220.1407
works, Resolved
Viktor Gurov
09:08 AM Bug #8907 (Resolved): wizard.php - $field['type'] - "Select" doesn't have the attribute "Size" defined
Jim Pingle
12:03 AM Bug #8907: wizard.php - $field['type'] - "Select" doesn't have the attribute "Size" defined
tested on pfSense 2.4.5.a.20191220.1407
Resolved
Viktor Gurov
09:07 AM Todo #9245: Update copyright notices to 2020
Those are all pulled in from non-base packages built from the freebsd-ports repository, too.
They do need updated,...
Jim Pingle
12:33 AM Todo #9245: Update copyright notices to 2020
Jim Pingle wrote:
> That's a package, this issue only covers the base OS.
tested on pfSense 2.4.5.a.20191220.1407...
Viktor Gurov
05:17 AM pfSense Packages Bug #9807 (Resolved): Packets Monitoring graphs are being incorrectly scaled
tested on pfSense 2.4.5.a.20191220.1407
works,
Resolved
Viktor Gurov
03:59 AM Bug #9349: IPSec service start/stop/restart fails after settings change
works fine on pfSense 2.5.0.a.20191220.0438
with Chromium 78.0.3904.108 and Firefox 68.2
Viktor Gurov
03:35 AM Bug #9483: UFS filesystem is not being mounted noatime.
force noatime mount option:
https://github.com/pfsense/pfsense/pull/4138
Viktor Gurov

12/20/2019

10:18 PM Feature #9970: Captive Portal and SAML2 Integration
The PR is actually great but it would be better to integrate SAML auth mechanism with the user manager A FL
06:52 PM Revision 7cafdb92: Fix manual backup flag
(cherry picked from commit 0bdd1774a1666852e35452ea3f17bb9dc075ecec) Steve Beaver
04:04 PM Revision 64031495: Update copyright notice years. Issue #9245
Jim Pingle
03:18 PM Bug #9977: Enabling Captive Portal on 2.4.5 breaks network connectivity
Luiz is looking into this one Jim Pingle
03:15 PM pfSense Packages Feature #9973 (New): Nagios NRPE package isn't IPv6 capable
That PR didn't turn out to be necessary. IPv6 addresses are accepted in the GUI already. If they are rejected for you... Jim Pingle
02:46 PM Bug #9582 (Resolved): PHP error setting up VLANs from the console
No errors on 2.4.5.a.20191220.0501 when starting with the stated problem config. Jim Pingle
02:42 PM Bug #9801 (Resolved): VTI IPv6 addresses don't get assigned
VTI IPv6 is assigned as expected and works on 2.4.5.a.20191220.0501... Jim Pingle
02:40 PM Feature #9111 (Resolved): Add IPsec VTI interface MTU support
VTI MTU is applied as expected and survives reboot on 2.4.5.a.20191220.0501 Jim Pingle
02:28 PM Bug #9781 (Resolved): Fix IPsec VTI interface creation logic
VTI interfaces are created as expected when creating a tunnel and at reboot.
2.4.5.a.20191220.0501
Jim Pingle
02:27 PM Revision 47799389: check that revokeserial is not empty
Viktor Gurov
02:23 PM Bug #9258 (Resolved): Error deleting tunnel type P2 when mixed with VTI
Deleting a "tunnel" type P2 when a VTI P2 exists is now allowed as expected.
2.4.5.a.20191220.0501
Jim Pingle
02:11 PM Revision ff0b9aff: check every value for ASN.1
Viktor Gurov
02:04 PM Revision 8471df75: fixed incorrect serial checking
Viktor Gurov
01:46 PM Revision bcb5dfad: Merge pull request #4136 from vktg/hidecertexppass
Renato Botelho
01:40 PM Bug #9243 (Resolved): IPsec ID type keyid not explicitly set
Keyid now has the appropriate prefix, and works as expected on 2.4.5.a.20191220.0501... Jim Pingle
01:31 PM pfSense Packages Bug #9220 (Resolved): STunnel: Tunnel list does not show certificate
Looks good on stunnel 5.50_4 Jim Pingle
07:44 AM pfSense Packages Bug #9220 (Feedback): STunnel: Tunnel list does not show certificate
PR has been merged. Thanks! Renato Botelho
01:25 PM Todo #9245: Update copyright notices to 2020
That's a package, this issue only covers the base OS. Jim Pingle
10:16 AM Todo #9245: Update copyright notices to 2020
2.4.5 looks OK, still had some stragglers on 2.5.0. Jim Pingle
01:24 PM Bug #9558 (Resolved): GPS NTP source PHP errors
I've unplugged/replugged the GPS and stopped/started NTPD in various combinations while watching the status, no PHP e... Jim Pingle
01:18 PM Bug #6846 (Resolved): System misreporting Super Micro C2558 platform as Super Micro C2758
No response from the OP after the fix was committed. Looks OK to me. Jim Pingle
01:10 PM Bug #9584 (Resolved): Potential XSS in services_acb.php via hostname parameter with legacy settings
The affected code has been completely removed from 2.4.5 and later, so this has become moot. Jim Pingle
01:02 PM Revision 67b49e4c: hide exportpass field on cert import
Viktor Gurov
12:54 PM Feature #9693 (Feedback): Bypass automatic backups
Cherry picked commit:0bdd1774a1666852e35452ea3f17bb9dc075ecec which fixed it on master.
I tested the @NoReMoTeBaCk...
Jim Pingle
12:50 PM Feature #9693 (In Progress): Bypass automatic backups
Manual backups with a reason entered by the user aren't getting the correct string appended, so MaNuAlBaCkUp is showi... Jim Pingle
11:49 AM Bug #9961 (Resolved): status_upnp: UPnP status not showing rules when using override WAN address option
UPnP rules show as expected in both scenarios now, with and without the customized external address.
2.4.5.a.2019122...
Jim Pingle
11:48 AM pfSense Packages Bug #9652: Squid Proxy Server /var/squid/lib/ssl_db directory not found in squid.inc
Looks like the new program called 'security_file_certgen' replace ssl_crtd in the latest version of squid.
Exist 1 ...
Peter Moreno
10:32 AM pfSense Packages Bug #9652: Squid Proxy Server /var/squid/lib/ssl_db directory not found in squid.inc
Hello
I modified squid.inc adding security_file_certgen instead ssl_crtd (PF ver 2.4.5) but the result is:...
Stefano Mereghetti
10:35 AM Feature #9285 (Resolved): Add an option to disable the ping-check in dhcpd
Option is now present in the GUI and appears to work as expected on a per-subnet basis.
2.4.5.a.20191220.0501
Jim Pingle
10:31 AM pfSense Packages Bug #9986: Squid package Transparent Mode MITM
This issue is closed since it was a duplicate report of another issue. If you have information to add, add it as a co... Jim Pingle
10:30 AM pfSense Packages Bug #9986: Squid package Transparent Mode MITM
Hello
I modified squid.inc in my installation 2.4.5 but the result is:...
Stefano Mereghetti
10:30 AM Bug #9150 (Resolved): Web authentication RADIUS package shows PHP error if unable to resolve FQDN of RADIUS server
I still was not able to reproduce this, even on 2.4.4-p3, but it all works as expected on 2.4.5. Auth appears to fail... Jim Pingle
10:05 AM pfSense Packages Feature #9982: basic_ldap_auth TLS connection
updated:
https://github.com/pfsense/FreeBSD-ports/pull/725
Viktor Gurov
10:02 AM Bug #6195 (Resolved): Cannot set Manual Outbound NAT when Language is pt_BR
When set to pt_BR, I can now save manual outbound NAT as expected and it sticks. Jim Pingle
09:53 AM Feature #9966 (Resolved): allow to disable APIPA blocking
Option is present and works as expected on 2.4.5.a.20191220.0501 Jim Pingle
03:38 AM Feature #9966 (Feedback): allow to disable APIPA blocking
PR has been merged. Thanks! Renato Botelho
09:52 AM Feature #9256 (Resolved): adjust frequency of geom rebuild notifications.
Tested on 2.4.5.a.20191220.0501, notifications only happened at status change, 25/50/75/100% as expected. Jim Pingle
09:37 AM Revision e3ad0988: cosmetic
(cherry picked from commit f1c43228ab62ffae24dd6059049d2d03dbee10a8) Viktor Gurov
09:37 AM Revision 9ba3d307: fix
(cherry picked from commit 2edf9abaacbecbc173262bccc8d797b9553096ca) Viktor Gurov
09:37 AM Revision 02d79fcc: allow to disable APIPA blocking
(cherry picked from commit 09b6735d1c936ad7962d66af17a32f8a0bb9f9ed) Viktor Gurov
09:37 AM Revision b7144f55: Merge pull request #4128 from vktg/disableapipa
Renato Botelho
08:21 AM Bug #9779 (Resolved): Dynamic DNS class constructor uses deprecated function name
Other DynDNS tests have passed. If this was going to be a problem, DynDNS would be completely broken by it. Jim Pingle
08:19 AM pfSense Packages Feature #9989: Add FreeBSD port and pfSense plugin for HoneyTrap
Might be something we could consider but I do not like the idea of running a service like this on a firewall. Deliber... Jim Pingle
08:08 AM pfSense Packages Feature #9989 (Rejected): Add FreeBSD port and pfSense plugin for HoneyTrap
Ezri Mudde
08:16 AM Bug #9053 (Resolved): Dynamic DNS will not allow Route 53 wildcard record
Thanks for testing! Jim Pingle
08:14 AM Bug #9053: Dynamic DNS will not allow Route 53 wildcard record
Tested in a current snapshot of 2.4.5 and was able to create a Route53 wildcard entry Tom Embt
08:09 AM Feature #3258 (Pull Request Review): Allow multiple certificates to be revoked in a single step
Jim Pingle
08:07 AM Feature #3258: Allow multiple certificates to be revoked in a single step
tested on pfSense 2.5.0.a.20191220.0438
invalid input validation, multiple serials not allowed
fixed:
https://gi...
Viktor Gurov
08:06 AM Bug #9361: Cloudflare Not Allowing "*" Hostname Entry in Dynamic DNS
That is likely a good enough test, but I'll hold this open for a bit yet in case someone can do a functional test aga... Jim Pingle
08:05 AM Bug #9361: Cloudflare Not Allowing "*" Hostname Entry in Dynamic DNS
Testing in a current 2.4.5 snapshot. I don't have a Cloudflare account to see if the update happens, but the pfSense... Tom Embt
08:05 AM Bug #9271 (Resolved): Azure DDNS whitespace cleanup
Thanks for testing! Jim Pingle
08:01 AM Bug #9271: Azure DDNS whitespace cleanup
This looks good to me in the latest snapshot of 2.4.5. This has no functional changes but formatting appears correct... Tom Embt
08:04 AM Feature #3792 (Resolved): Group name size limit too restrictive on Active Directory Users
Works as expected on 2.4.5.a.20191218.2354
Long group names are allowed when adding or editing a group set to Remo...
Jim Pingle
08:02 AM Bug #9541 (Resolved): Non-admin user with admin rights is given the wrong URL for the user manager
Works as expected on 2.4.5.a.20191218.2354
Jim Pingle
07:57 AM Feature #9268 (Resolved): Add Linode Dynamic DNS support
Thanks for testing! Jim Pingle
07:55 AM Feature #9268: Add Linode Dynamic DNS support
This is working correctly for me in the latest snapshot of 2.4.5 Tom Embt
07:46 AM Feature #1192 (Feedback): Certificate Manager - Ability to Encrypt Private Keys When Exporting
PR merged Renato Botelho
07:18 AM Feature #1192 (Pull Request Review): Certificate Manager - Ability to Encrypt Private Keys When Exporting
Jim Pingle
07:04 AM Feature #1192: Certificate Manager - Ability to Encrypt Private Keys When Exporting
works ok, but it should hide exportpass field on non-edit (certificate import) page:
https://github.com/pfsense/pfse...
Viktor Gurov
07:41 AM Bug #9984 (Resolved): PHP error in 2.4.5 services_dyndns_edit.php
Thanks for testing! Jim Pingle
07:41 AM Bug #9984: PHP error in 2.4.5 services_dyndns_edit.php
Can confirm - the issue is fixed in a newer snapshot Tom Embt
07:32 AM pfSense Packages Bug #9988 (Duplicate): Squid - SSL Inspection
Duplicate of #9652 Jim Pingle
05:31 AM pfSense Packages Bug #9988 (Duplicate): Squid - SSL Inspection
Hello
with 2.4.5 snapshot, I tried to enable SSL inspection using an OLD CA and a new CA.
The result is:...
Stefano Mereghetti
07:25 AM pfSense Packages Bug #9962: HAproxy Upgrade needed HTTP/2 CVE-2019-19330
The packages will show up on 2.4.4 immediately, they are already there:... Jim Pingle
06:14 AM pfSense Packages Bug #9962: HAproxy Upgrade needed HTTP/2 CVE-2019-19330
pfSense find it =) DRago_Angel [InV@DER]
06:02 AM pfSense Packages Bug #9962: HAproxy Upgrade needed HTTP/2 CVE-2019-19330
Renato Botelho wrote:
> 2.0.10 / 1.8.23 and 1.7 .12 were pushed to proper branches
Thanks, how can I trigger upgr...
DRago_Angel [InV@DER]
05:56 AM pfSense Packages Bug #9962 (Feedback): HAproxy Upgrade needed HTTP/2 CVE-2019-19330
2.0.10 / 1.8.23 and 1.7 .12 were pushed to proper branches Renato Botelho
03:49 AM pfSense Packages Bug #9962 (In Progress): HAproxy Upgrade needed HTTP/2 CVE-2019-19330
Renato Botelho
07:19 AM Feature #7861 (Resolved): Make "Descriptive name" of certificates editable
Jim Pingle
06:38 AM Feature #7861: Make "Descriptive name" of certificates editable
tested on pfSense 2.5.0.a.20191219.1908
works, Resolved
Viktor Gurov
07:19 AM Feature #4068 (Resolved): CAs present on CERT manager are not trusted from pfSense
Jim Pingle
06:44 AM Feature #4068: CAs present on CERT manager are not trusted from pfSense
tested on pfSense 2.5.0.a.20191219.1908
works, Resolved
Viktor Gurov
07:18 AM Bug #9979 (Resolved): status_ipsec.php missing information
Jim Pingle
06:47 AM Bug #9979: status_ipsec.php missing information
tested on pfSense 2.5.0.a.20191220.0438
Rekey timer (only reauth is printed) - ok
Encryption algorithm key size (...
Viktor Gurov
07:17 AM pfSense Packages Feature #9875 (Resolved): add extra engines safe search
The note is correct when I just installed the package, and it's correct in all the right branches of the repository. ... Jim Pingle
12:22 AM pfSense Packages Feature #9875: add extra engines safe search
Renato Botelho wrote:
> PR has been merged. Thanks!
Tested on pfSense 2.5.0.a.20191219.1908 with squidGuard 1.16....
Viktor Gurov

12/19/2019

10:44 PM pfSense Packages Todo #9392: Status_Traffic_Totals needs updated for vnstat 2.0
Affects both 2.5.0 and 2.4.5 Jim Pingle
10:44 PM pfSense Packages Bug #9987 (Duplicate): Bug #9759 from 2.5 is repro'ing on 2.4.5 as well
Duplicate of #9392 Jim Pingle
09:58 PM pfSense Packages Bug #9987 (Duplicate): Bug #9759 from 2.5 is repro'ing on 2.4.5 as well
I'm guessing the same new version of vnstat is now also being used on 2.4.5 and so the vnstat -u command no longer wo... Richard Powell
08:35 PM pfSense Packages Bug #9652: Squid Proxy Server /var/squid/lib/ssl_db directory not found in squid.inc
This will need picked back to RELENG_2_4_5 when merged. Jim Pingle
08:35 PM pfSense Packages Bug #9986 (Duplicate): Squid package Transparent Mode MITM
Duplicate of #9652 Jim Pingle
08:10 PM pfSense Packages Bug #9986 (Duplicate): Squid package Transparent Mode MITM
This issue is related to squid version 4.9.x, this new version no longer use ssl_crtd now is called 'security_file_ce... Peter Moreno
07:38 PM Revision 96701431: Fix #9285: Move ping-check option from global to per-subnet
(cherry picked from commit 5197e3e3a3b0ee048785e2ffb4222d7cba4e6c74) Renato Botelho
07:38 PM Revision 0e0797a1: use disablepingcheck as option name
(cherry picked from commit a0541b292d4cde76b9e95c1d8cbd99f5f26afee5) Arthur Wiebe
07:38 PM Revision 583433e5: add an option to the DHCP server to disable the ping check feature
(cherry picked from commit 7847e55fa2cd5813adb1ee4aa888b694957109b9) Arthur Wiebe
07:37 PM Revision c11240ac: Revert "Fix #9285: Move ping-check option from global to per-subnet"
This reverts commit 9133e01dc049920d716b045a86e78a9a05d98354. Jim Pingle
07:18 PM Revision 8f58f8e5: Update copyright notice years. Issue #9245
Jim Pingle
07:09 PM Revision 21aaa00b: Update copyright notice years. Issue #9245
Jim Pingle
03:50 PM Revision 6df12a8e: Add Gandi LiveDNS DynDNS client.
(cherry picked from commit edfe22f8bae894eb678f3e7060cc91cea6f664da) Eric VANTILLARD
03:50 PM Revision e248f02f: Add back inadvertently removed line
(cherry picked from commit 946238ef46e766e46392b7b9aed444cbc3a43909) Jim Pingle
03:50 PM Revision 0d6be361: Fix syntax error in services_dyndns_edit.php, reformat statement.
(cherry picked from commit 1c11171b19ee8cabcbdaa5ffa433238033c510a2) Jim Pingle
03:32 PM Bug #9466 (Resolved): DHCP (IPv4) relay mistakenly listening on upstream interface
Runs as expected with the new correct parameters on 2.4.5.a.20191218.2354 Jim Pingle
03:32 PM Bug #8443 (Resolved): DHCP relay not starting after ovpnc interface is unchecked - vm 2.4.3
As expected, OpenVPN interfaces are not available for selection in DHCP Relay on 2.4.5.a.20191218.2354 Jim Pingle
03:02 PM Feature #7537 (Resolved): Include mellanox mlx4 and mlx5 ethernet driver
Drivers are in the kernel on 2.4.5.a.20191218.2354... Jim Pingle
03:00 PM Bug #9543 (Resolved): diag_dns.php: Reverse lookup of IPv6 fails with "Host must be a valid hostname or IP address."
Works as expected on 2.4.5.a.20191218.2354
Jim Pingle
01:41 PM Feature #9285 (Feedback): Add an option to disable the ping-check in dhcpd
Should be OK now:
* commit:c11240ac15bfeb65f5ceec4173223f9b7ab9b39b
* commit:583433e5a69aae9b997057c650b8fcf1a9db...
Jim Pingle
01:36 PM Feature #9285 (In Progress): Add an option to disable the ping-check in dhcpd
It looks like the main part of this PR was not picked back, only a later commit
PR link: https://github.com/pfsens...
Jim Pingle
01:32 PM Bug #9684 (Resolved): System Notifications: Asterisks over writing current password causing notifications to stop working.
Looks OK on 2.4.5.a.20191219.0146 Jim Pingle
01:31 PM Feature #9620 (Resolved): User privilege to manage integrated switch
Privilege is present and works as expected on 2.4.5.a.20191219.0146 Jim Pingle
01:26 PM Todo #9245 (Feedback): Update copyright notices to 2020
Updated those (and more I found) here and in factory. Should all be set now. Jim Pingle
01:05 PM Todo #9245 (New): Update copyright notices to 2020
Still lots of files in the 2.4.5 branch with old years:... Jim Pingle
01:23 PM Feature #3473 (Resolved): Allow configuration of OpenVPN keepalive
Options are present and appear to work as intended.
2.4.5.a.20191218.2354
Jim Pingle
01:22 PM Bug #7359 (Resolved): Status/OpenVPN Page Sorts Incorrectly
Sort order looks good on 2.4.5.a.20191218.2354
Jim Pingle
01:22 PM Feature #9078 (Resolved): Investigate adding knobs for explicit-exit-notify in OpenVPN
Options are present and appear to work as intended.
2.4.5.a.20191218.2354
Jim Pingle
01:14 PM Bug #9234 (Resolved): Wording consistency in Certificate Management notifications
Errors are correct on 2.4.5.a.20191218.2354
Jim Pingle
01:01 PM Bug #9259 (Resolved): User with "Deny Config Write" privilege is not fully prevented from creating accounts
Works as expected on 2.4.5.a.20191218.2354
GUI user is not presented with options to add an account. If they do ma...
Jim Pingle
12:57 PM Bug #9327 (Resolved): Using the character "¤" in OpenVPN password field creates invalid config.xml
The problem password saves as expected on 2.4.5.a.20191218.2354 -- Field is CDATA protected and does not result in an... Jim Pingle
12:53 PM Bug #9407 (Resolved): Update jQuery to current version (3.3.1 or later)
3.4.1 is present on 2.4.5.a.20191218.2354, no problems observed so far. Can reopen or open new issues if JS problems ... Jim Pingle
12:51 PM Bug #9550 (Resolved): New privilege matching method does not allow menu or tab links to anchors (#foo)
Privileges work as expected in the stated scenario on 2.4.5.a.20191218.2354 Jim Pingle
12:49 PM Feature #9590 (Resolved): RFE: Add additional prefix delegation size entries to dropdown-list
The additional delegation sizes are present on 2.4.5.a.20191218.2354
Jim Pingle
12:44 PM Bug #9767 (Resolved): Interesting Traffic Will not Initiate an IPsec VTI tunnel.
Close Action option is present in the GUI and is working as expected in 2.4.5.a.20191218.2354
Jim Pingle
12:29 PM Bug #9782 (Resolved): XMLRPC auth error message format is inconsistent with GUI auth error message
Error message is correct on 2.4.5.a.20191219.0146 Jim Pingle
12:26 PM Bug #9780 (Resolved): PHP warning in diag_dump_states.php
Works as expected on 2.4.5.a.20191219.0146 Jim Pingle
12:23 PM Bug #9851 (Resolved): PHP error in logs
No sign of this error during upgrade or any time after on multiple 2.4.5 systems. Jim Pingle
12:23 PM Bug #9898 (Resolved): DNS over TLS hostname verification does not save
Works as expected on 2.4.5.a.20191219.0146 Jim Pingle
12:23 PM Bug #9963 (Resolved): DNS servers assigned dynamically are omitted if also assigned manually when override is disallowed
Works as expected on 2.4.5.a.20191219.0146 Jim Pingle
11:57 AM Todo #9976 (Resolved): strongswan: Update to 5.8.2
... Jim Pingle
10:50 AM Feature #9985 (Resolved): Build virtio_console.ko
Hello,
Please include the virtio_console.ko kernel module, it's needed by the qemu-guest-agent (open-vm-tools of t...
Nux Ro
10:12 AM Bug #9971: sshguard error: Logging subprocess <pid> (exec /usr/local/sbin/sshguard) exited with status 1.
Since 2.4.5 is still using clog, at least there the only option appears to be patching out the error/exit. Jim Pingle
10:02 AM Bug #9984 (Feedback): PHP error in 2.4.5 services_dyndns_edit.php
Jim Pingle
09:54 AM Bug #9984: PHP error in 2.4.5 services_dyndns_edit.php
I applied all the missing commits from master (including the ones you mentioned, plus commit:edfe22f8bae894eb678f3e70... Jim Pingle
09:38 AM Bug #9984 (In Progress): PHP error in 2.4.5 services_dyndns_edit.php
Jim Pingle
09:05 AM Bug #9984: PHP error in 2.4.5 services_dyndns_edit.php
Seen in:
2.4.5-DEVELOPMENT (amd64)
built on Wed Dec 18 23:54:57 EST 2019
Tom Embt
09:03 AM Bug #9984 (Resolved): PHP error in 2.4.5 services_dyndns_edit.php
RELENG_2_4_5 has a PHP syntax error when trying to add a Dynamic DNS client (just clicking the green Add button will ... Tom Embt
09:54 AM Feature #9452: Add Gandi LiveDNS DynDNS client.
I picked this back as a part of fixing #9984 Jim Pingle
07:41 AM Feature #8786: Wireguard VPN
Thats sad, I really hope WireGuard could be implemented in pfSense as soon as possible. The performance and security ... Ter Ted

12/18/2019

09:27 PM Revision 9701089e: Rework IPsec P1 Lifetime GUI options. Fixes #9983
Jim Pingle
03:35 PM Bug #9983 (Feedback): Reauth vs Rekey UI and behavior for swanctl
Applied in changeset commit:9701089ebd5151593390749ddae090a6afe7f360. Jim Pingle
03:27 PM Bug #9983: Reauth vs Rekey UI and behavior for swanctl
Looks like using lifetime=>reauth_time is best, due to POLA and maintaining consistent behavior. Users can always cho... Jim Pingle
02:41 PM Bug #9983 (Resolved): Reauth vs Rekey UI and behavior for swanctl
The IPsec P1 GUI has one "lifetime" box and separate checkboxes to disable reauth and rekey, though as far as I can s... Jim Pingle
03:17 PM Revision f1c43228: cosmetic
Viktor Gurov
09:06 AM Revision 2edf9aba: fix
Viktor Gurov
08:00 AM pfSense Packages Feature #9973 (Pull Request Review): Nagios NRPE package isn't IPv6 capable
Jim Pingle
07:52 AM pfSense Packages Feature #9973: Nagios NRPE package isn't IPv6 capable
Jim Pingle wrote:
> Not a bug, but a missing feature.
binding IP: I can only give one IP. For Dual Stack I need t...
Viktor Gurov
07:52 AM Feature #3244 (Resolved): Check that OpenVPN tunnel network does not overlap any other subnet
Works as expected on 2.4.5.a.20191217.2126, exact matches are rejected. Jim Pingle
07:52 AM Feature #9030 (Resolved): Allow TLS Key Direction with OpenVPN
Works as expected for both clients and servers on 2.4.5.a.20191217.2126 Jim Pingle
07:51 AM Bug #9133 (Resolved): "Show all configured leases" does not stay set after deleting a lease
Works as expected on 2.4.5.a.20191217.2126 Jim Pingle
07:38 AM Revision cb74fa6b: some mistake
Viktor Gurov
07:36 AM Revision 9bb0e987: fix
Viktor Gurov
07:34 AM Revision 2ff3a3d7: fix
Viktor Gurov
07:32 AM Revision d250c48b: fix
Viktor Gurov
06:49 AM pfSense Packages Feature #9824 (Resolved): Add support for DuckDuckGo's Safe Search
Tested on pfSense 2.5.0.a.20191217.2217, squid 0.4.44_9
Resolved
Viktor Gurov
06:41 AM Bug #9907 (Resolved): Do not show incompatible ECDSA certs for DNS Resolver
Jim Pingle
03:17 AM Bug #9907: Do not show incompatible ECDSA certs for DNS Resolver
Renato Botelho wrote:
> PR has been merged. Thanks!
Tested on pfSense 2.5.0.a.20191217.2217
Resolved
Viktor Gurov
06:40 AM Feature #9842 (Resolved): Add CA/certificate renewal function
Jim Pingle
03:25 AM Feature #9842: Add CA/certificate renewal function
Renato Botelho wrote:
> PR has been merged. Thanks!
Tested on pfSense 2.5.0.a.20191217.2217
Resolved
Viktor Gurov
06:40 AM pfSense Packages Feature #9982 (Pull Request Review): basic_ldap_auth TLS connection
Jim Pingle
05:47 AM pfSense Packages Feature #9982 (Feedback): basic_ldap_auth TLS connection
Allow to use -Z option by basic_ldap_auth for TLS LDAP connection
see:
http://www.squid-cache.org/Versions/v3/3.2...
Viktor Gurov
06:34 AM Feature #9943 (Duplicate): status_ipsec.php: show encr-keysize
Superseded by #9979 Jim Pingle
03:40 AM Feature #9943: status_ipsec.php: show encr-keysize
can be closed
https://redmine.pfsense.org/issues/9979
Viktor Gurov
06:09 AM pfSense Packages Bug #9962: HAproxy Upgrade needed HTTP/2 CVE-2019-19330
any update of status? DRago_Angel [InV@DER]
03:14 AM pfSense Packages Bug #9219 (Resolved): STunnel: .pem files are created with incorrect permissions.
Renato Botelho wrote:
> PR has been merged. Thanks!
Tested on pfSense 2.5.0.a.20191217.2217 with stunnel 5.50_3
...
Viktor Gurov

12/17/2019

09:57 PM Revision 8af4e81e: Include more information in status_ipsec.php. Fixes #9979
Jim Pingle
08:29 PM pfSense Packages Bug #9980: Fresh install of Suricata 4.1.5 package warns about CVE-2015-3152; need newer MySQL
Thanks for the fast response!
I don't use Barnyard2, so that's good news for me.
But for others... is this ther...
Sean McBride
08:21 PM pfSense Packages Bug #9980: Fresh install of Suricata 4.1.5 package warns about CVE-2015-3152; need newer MySQL
The MySQL dependency is actually being pulled in by Barnyard2 and not Suricata itself. So long as you do not configur... Bill Meeks
06:17 PM pfSense Packages Bug #9980 (Closed): Fresh install of Suricata 4.1.5 package warns about CVE-2015-3152; need newer MySQL
5 minutes ago I installed Suricata 4.1.5 package on pfSense 2.4.4-RELEASE-p3 (both newest at this time). It output a... Sean McBride
08:24 PM pfSense Packages Bug #9981: Suricata "Use IP Reputation Lists on this interface." actually defaults to ON, despite incorrect comment.
Internal bug tracking list? Should I be filing somewhere else than here? Sean McBride
08:22 PM pfSense Packages Bug #9981: Suricata "Use IP Reputation Lists on this interface." actually defaults to ON, despite incorrect comment.
I'll look into this and add it to my internal bug tracking list for Suricata. Bill Meeks
06:32 PM pfSense Packages Bug #9981 (Resolved): Suricata "Use IP Reputation Lists on this interface." actually defaults to ON, despite incorrect comment.
See attached.
Despite the comment, that option is *ON* by default. I just did a fresh install.
Sean McBride
07:27 PM Revision 795ec316: Keep "Show all configured leases" enabled after deleting DHCP leases.
(cherry picked from commit 59385e0413d77079c8acaf796868429475865603) nanocaiordo
07:22 PM Revision 952c8812: Fix tlsauth_keydir read on vpn_openvpn_server.php. Fixes #9030
(cherry picked from commit 20cb21ee5b71be43b16280b337bb24bcf5a1d17d) Jim Pingle
07:22 PM Revision 20cb21ee: Fix tlsauth_keydir read on vpn_openvpn_server.php. Fixes #9030
Jim Pingle
07:16 PM Revision f8e25fe8: Fix tlsauth_keydir save on vpn_openvpn_server.php. Fixes #9030
(cherry picked from commit 7dca65a19d08393cdb36f22fe98b847b46d9caf9) Jim Pingle
07:15 PM Revision 7dca65a1: Fix tlsauth_keydir save on vpn_openvpn_server.php. Fixes #9030
Jim Pingle
06:58 PM Revision 9449906b: Prevent OpenVPN tunnel network reuse. Fixes #3244
Ensures that a submitted tunnel network is not already in use on other
OpenVPN client or server instances, to avoid c...
Jim Pingle
05:50 PM Revision f8f84bc6: Add IPFW table contents to status.php
(cherry picked from commit 47f555e2e0718a188bc86d4dac801d32645d8a05) Jim Pingle
05:50 PM Revision 47f555e2: Add IPFW table contents to status.php
Jim Pingle
04:51 PM Revision 1e8b2c9c: Use full path for pkg-static
Renato Botelho
04:51 PM Revision cd91a57c: Use full path for pkg-static
Renato Botelho
04:48 PM Revision dc2eed4e: Use full path for pkg-static
Renato Botelho
04:05 PM Bug #9979 (Feedback): status_ipsec.php missing information
Applied in changeset commit:8af4e81eb530af959e43cfa1afcc6446a7969b28. Jim Pingle
03:57 PM Bug #9979 (Resolved): status_ipsec.php missing information
status_ipsec.php is missing some available information. It's in the IPsec status we receive from strongSwan, but not ... Jim Pingle
03:31 PM Revision 09646aef: Remove superfluous ( )'s
→ luckman212
02:31 PM Revision 29b21d38: Fix GUI display of CARP capture contents. Issue #9867
(cherry picked from commit dd79aac6bfe13ee93177fcd0664115e7cfa25562) Jim Pingle
02:31 PM Revision dd79aac6: Fix GUI display of CARP capture contents. Issue #9867
Jim Pingle
02:27 PM Bug #9978 (Duplicate): Error on XML while updating pfsense from multiple sources
Duplicate of #8285
Jim Pingle
02:16 PM Bug #9978 (Duplicate): Error on XML while updating pfsense from multiple sources
While adding rules, editing alias, NAT, Packages.. etc. from different computers at the same time a bug comes up, rul... Andres Noriega
02:24 PM Revision c58e56fb: 3rd try - change config names
→ luckman212
02:23 PM Bug #7037: CPU frequency in System Information
Is there any chance of reconsidering this? The problem is the whole rest of the column continually jumping up and do... Steve Russell
02:16 PM Bug #9954 (Resolved): status_ipsec.php: Unable to manually connect P2 when P1 is up but not P2
Button behaves as intended on 2.4.5.a.20191217.0637
If I manually disconnect all IPsec children, the button appear...
Jim Pingle
02:14 PM Bug #9921 (Resolved): Limiters allow invalid delay values
Limiter delay value is correctly enforced on 2.4.5.a.20191217.0637 Jim Pingle
02:13 PM Bug #9931 (Resolved): 0.pfsense.pool.ntp.org doesn't work on IPv6 only installations
... Jim Pingle
02:11 PM Feature #9911 (Resolved): Show confirmation box before disconnecting PPPoE
Looks good on 2.4.5.a.20191217.0637
Buttons are red and trigger the JS confirmation dialog. Canceling the dialog r...
Jim Pingle
02:08 PM Todo #9864 (Resolved): Set autocomplete=new-password for user/password fields in forms
This appears to be working as intended and it doing a nice job. Pages that were particularly annoying before (like sy... Jim Pingle
02:06 PM Todo #9799 (Resolved): Create custom CSRF callback page with proper theme & more warnings
This is working as intended on 2.4.5.a.20191217.0637
If a client triggers a CSRF failure, they are presented with ...
Jim Pingle
02:04 PM Feature #9791 (Resolved): Ability to filter Diagnostics ARP Table by IP range (DHCP)
Search and sort works on all the pages listed in the commit on 2.4.5.a.20191217.0637. Jim Pingle
02:00 PM Bug #9770 (Resolved): XML-based Packages do not activate shortcuts
Shortcuts are activated for packages on 2.4.5.a.20191217.0637
The only package currently using shortcuts is iperf,...
Jim Pingle
01:58 PM Revision 2c6e3337: Enable build of node_exporter
Renato Botelho
01:57 PM Bug #9708 (Resolved): /etc/inc/unbound.inc: Pfsense Default Unbound Configuration does not Prevent DNS Rebinding Attacks Against Localhost
New value is present on 2.4.5.a.20191217.0637... Jim Pingle
01:55 PM Feature #9705 (Resolved): Add kernel memory usage to status.php
Information is present in status.php output on 2.4.5.a.20191217.0637 Jim Pingle
01:54 PM Bug #9692 (Resolved): system_authservers.php: Descriptive name can be changed by removing read-only property via inspect element
Changes are rejected when attempted in this manner on 2.4.5.a.20191217.0637 Jim Pingle
01:51 PM Bug #9569 (Resolved): Fix serial console terminal size issues
Looks good on 2.4.5.a.20191217.0644 Jim Pingle
01:49 PM Bug #9540 (Resolved): PHP Uncaught Error in Status/System Logs/Firewall/Dynamic View
Looks good on 2.4.5.a.20191217.0637 Jim Pingle
01:47 PM Feature #9532 (Resolved): GUI indication and options for MDS mitigation
Works as expected. The mitigation can be enabled or disabled via system_advanced_misc.php and the status is correctly... Jim Pingle
01:45 PM Feature #9531 (Resolved): [IPSEC] Add additional curve-based DH Groups (31+)
Group 31 can be selected and works when chosen on 2.4.5.
2.4.5.a.20191217.0637
Jim Pingle
01:43 PM Bug #9448 (Resolved): Dynamic DNS options showing in GUI for IPv6 when not in use
When saving on services_dhcpv6.php without any DDNS options entered, the section stays collapsed as expected now.
...
Jim Pingle
01:41 PM Bug #9522 (Resolved): Diagnostics > System Activity shows only the header
On 2.4.5, the display shows the large process list and updates as expected.
2.4.5.a.20191217.0637
Jim Pingle
01:38 PM Feature #9323 (Resolved): Option to hide 'Kernel PTI' from sysinfo widget
PTI and MDS display in the system info widget can be disabled individually (or together) as expected on 2.4.5 and 2.5... Jim Pingle
01:38 PM Revision d237ba46: Add exit notify to OpenVPN servers/clients. Implements #9078
(cherry picked from commit 7591a72a5108a2ac28d28745cec43ea282869aae) Jim Pingle
01:36 PM Bug #9218 (Resolved): SNMP sysDescr does not display hostname and patch version
Works as intended now on 2.4.5 and 2.5.0, all the expected information is present. For good measure I applied it agai... Jim Pingle
01:29 PM Bug #9133: "Show all configured leases" does not stay set after deleting a lease
The commit for this wasn't cherry-picked to RELENG_2_4_5. I just picked it back.
I applied the change manually and...
Jim Pingle
01:25 PM Feature #9030 (Feedback): Allow TLS Key Direction with OpenVPN
Applied in changeset commit:7dca65a19d08393cdb36f22fe98b847b46d9caf9. Jim Pingle
01:23 PM Feature #9030: Allow TLS Key Direction with OpenVPN
Value was also not read properly on page load, but I've pushed a fix for that as well. Jim Pingle
01:15 PM Feature #9030 (New): Allow TLS Key Direction with OpenVPN
The value does not get stored when changed on the server settings. I'll push a fix shortly. Jim Pingle
01:12 PM Revision bc18c480: Merge pull request #4109 from vktg/p11ipsec
Renato Botelho
01:08 PM Revision 50ceeac3: Ticket #9878: Add OPTIONS for opensc
Renato Botelho
01:06 PM Bug #8847 (Resolved): IPsec status "Show Child SA entries" button only expands and never collapses
When clicked, the button disappears and the child list is expanded, which is the intended behavior.
2.4.5.a.20191217...
Jim Pingle
01:04 PM Bug #7840 (Resolved): OpenVPN 2.4 Server: Hide Interface when Protocol is Multihome
Control shows and hides as expected on 2.4.5 snapshots. Jim Pingle
01:04 PM Feature #7791 (Resolved): include /usr/bin/strings in core pfSense
@/usr/bin/strings@ is present and works on 2.4.5 snapshots. Jim Pingle
01:02 PM Revision e9063651: Merge pull request #4115 from vktg/unboundecdsa
Renato Botelho
01:02 PM Feature #5851 (Resolved): Add copy action to OpenVPN client / server
Seems to work fine for me on 2.4.5 snaps. The icon is there, I can make copies, they save and run OK.
I was able t...
Jim Pingle
01:00 PM Revision 79fc17f9: Merge pull request #4122 from vktg/ecdsarenew
Renato Botelho
12:59 PM Feature #3244: Check that OpenVPN tunnel network does not overlap any other subnet
Picked this back to 2.4.5, since #5851 is already on 2.4.5 and this error will be more common with that available. Jim Pingle
12:58 PM Revision 68bd425e: DigitalOcean DynDNS description update. Close #9602
The description for DigitalOcean dynamic DNS is incorrect. The documentation currently states to "Enter @ as the host... karlhaworth
12:57 PM Revision f46036d1: Merge pull request #4131 from karlhaworth/pfsense-kh-patch-1
Renato Botelho
12:56 PM Revision 592b06fa: escapeshellarg()
(cherry picked from commit 6ad0603b9fc9a65a9bd10390976676ae48b3fbd0) Viktor Gurov
12:56 PM Revision 87417401: escapeshellarg()
(cherry picked from commit e43f0619b0f0937689ad78c023dfe077b1f84a10) Viktor Gurov
12:56 PM Revision 46b8e221: more readable
(cherry picked from commit c1c375e6fab9b334af8c290912324bf6aa42591b) Viktor Gurov
12:56 PM Revision c987c982: full cmd: route delete $fml $tgt $gw
(cherry picked from commit 3e20d17562406d1735720fe6b083e702cfc43de3) Viktor Gurov
12:56 PM Revision d1e3dcb2: Merge pull request #4130 from vktg/delstaticroutes
Renato Botelho
11:56 AM Revision 37d7a4d4: Calculate poudriere PARALLEL_JOBS based on hw.ncpu
Renato Botelho
11:56 AM Revision 3023bc21: Calculate poudriere PARALLEL_JOBS based on hw.ncpu
Renato Botelho
11:56 AM Revision 0e491fe2: Calculate poudriere PARALLEL_JOBS based on hw.ncpu
Renato Botelho
10:56 AM Revision dd580dd8: allow ca cert without prv for ipsec&ovpn
Viktor Gurov
10:53 AM Feature #9970 (Pull Request Review): Captive Portal and SAML2 Integration
Jim Pingle
10:49 AM Feature #9970: Captive Portal and SAML2 Integration
Pull request: https://github.com/pfsense/pfsense/pull/4133 Mauro Braggio
10:42 AM Revision e43c71ce: do not show certs without prv by default
Viktor Gurov
10:01 AM Bug #9977 (Resolved): Enabling Captive Portal on 2.4.5 breaks network connectivity
Enabling Captive Portal on 2.4.5 breaks connectivity even on interfaces which are not involved in Captive Portal. The... Jim Pingle
09:40 AM Todo #9976 (Feedback): strongswan: Update to 5.8.2
Renato Botelho
09:40 AM Todo #9976 (Resolved): strongswan: Update to 5.8.2
strongswan 5.8.2 was released Renato Botelho
09:32 AM Bug #9975 (Resolved): PHP error on upgrade from 2.4.4-p3 to 2.4.5
The following PHP errors come up when upgrading from 2.4.4-p3 to 2.4.5. They are not harmful, but are due to the libr... Jim Pingle
08:01 AM pfSense Packages Feature #9974 (Feedback): Add pfSense package for sysutils/node_exporter
PR has been manually merged. Thanks! Renato Botelho
08:00 AM pfSense Packages Feature #9974 (Resolved): Add pfSense package for sysutils/node_exporter
PR: https://github.com/pfsense/FreeBSD-ports/pull/653 Renato Botelho
07:58 AM pfSense Packages Bug #9807: Packets Monitoring graphs are being incorrectly scaled
This was picked back to 2.4.5 as well, so needs testing there. Jim Pingle
06:28 AM pfSense Packages Bug #9807 (Feedback): Packets Monitoring graphs are being incorrectly scaled
PR has been merged. Thanks! Renato Botelho
07:41 AM Feature #9078: Investigate adding knobs for explicit-exit-notify in OpenVPN
Applies cleanly to 2.4.5, so I picked it back. Jim Pingle
07:28 AM Feature #9972 (Pull Request Review): cert_build_list(): by default don't show certs without prv key
Jim Pingle
04:50 AM Feature #9972 (Resolved): cert_build_list(): by default don't show certs without prv key
by default don't show certs without prv key
allow to show it with using extra $noprv arg (can be used for CA certs)
...
Viktor Gurov
07:28 AM pfSense Packages Feature #9973: Nagios NRPE package isn't IPv6 capable
Not a bug, but a missing feature. Jim Pingle
04:54 AM pfSense Packages Feature #9973 (New): Nagios NRPE package isn't IPv6 capable
In pfSense 2.4.4p3 Nagios NRPE package lacks IPv6 capabilities.
1. binding IP: I can only give one IP. For Dual St...
Pim Pish
07:18 AM Feature #9111: Add IPsec VTI interface MTU support
I applied this patch to my 2.4.4 machines. They have been running for a while without issue. When I change the MTU it... Mix Room
07:13 AM Feature #9878 (Feedback): IPsec PKCS#11 authentication
PR has been merged. Thanks! Renato Botelho
07:02 AM Bug #9907 (Feedback): Do not show incompatible ECDSA certs for DNS Resolver
PR has been merged. Thanks! Renato Botelho
07:01 AM Feature #9842 (Feedback): Add CA/certificate renewal function
PR has been merged. Thanks! Renato Botelho
06:58 AM Bug #9602 (Feedback): Dynamic DNS with DigitalOcean not working
PR has been merged. Thanks! Renato Botelho
06:56 AM Bug #9969 (Feedback): static route remain in the OS routing table after deletion
PR has been merged. Thanks! Renato Botelho
06:19 AM pfSense Packages Bug #9219 (Feedback): STunnel: .pem files are created with incorrect permissions.
PR has been merged. Thanks! Renato Botelho
06:16 AM Bug #9873: Switching the System Update to Development renders the system unbootable
I've added a workaround on pfSense-repo post-install script to replace the call to `pkg info` by `pkg-static info` on... Renato Botelho

12/16/2019

11:52 PM Revision 9f6432f0: 2nd try
change config option to avoid positive checkbox = negative option → luckman212
10:18 PM Feature #9695 (Resolved): Add Ability to Force NAT-T Encapsulation on IKEv2 Peers
Jim Pingle
08:50 PM Feature #9695: Add Ability to Force NAT-T Encapsulation on IKEv2 Peers
Looks good in 2.4.5: WAN udp 172.25.228.9:4500 -> 172.25.228.13:4500 MULTIPLE:MULTIPLE 29 / 29 3 KiB / 3 KiB Chris Linstruth
08:30 PM Revision 8bd02833: Revise jquery/jquery-ui in csrf_error page, which needs its own copy
(cherry picked from commit fb249aefa378172d6c246e62d15a8da40d80c5b6) Steve Beaver
08:30 PM Revision fecb3f60: Correct jQuery include
(cherry picked from commit bb31e48e2c1eea6a7a3925f5398bce17c19f3af4) Steve Beaver
08:30 PM Revision 4398e08f: Renamed jQuery-ui files for consistency with jQuery naming
(cherry picked from commit b1a3d89a0278ff16c270b86fca8621e5457c05fd) Steve Beaver
08:30 PM Revision 16eae2f4: Fixed #9407
(cherry picked from commit df4262d0e1d8d460ba93b9fcde16476306ee21f6) Steve Beaver
06:09 PM Revision 88a34f7a: Add 2.4.5-DEVELOPMENT repository
Renato Botelho
06:07 PM Revision f02260ac: Add 2.4.5-DEVELOPMENT repository
Renato Botelho
05:33 PM Revision f645d52a: Token -> PKCS#11
Viktor Gurov
05:28 PM Revision 6ad0603b: escapeshellarg()
Viktor Gurov
05:27 PM Revision e43f0619: escapeshellarg()
Viktor Gurov
03:36 PM Bug #9971: sshguard error: Logging subprocess <pid> (exec /usr/local/sbin/sshguard) exited with status 1.
Looks like in https://bitbucket.org/sshguard/sshguard/commits/600ce84ff6ab745d5507b3b147f37890a1451a7e they changed i... Jim Pingle
02:59 PM Bug #9971 (Resolved): sshguard error: Logging subprocess <pid> (exec /usr/local/sbin/sshguard) exited with status 1.
sshguard logs an error repeatedly on recent snapshots:... Jim Pingle
02:44 PM Bug #9407: Update jQuery to current version (3.3.1 or later)
I picked this back to 2.4.5, needs tested there, too. Move back to 2.5.0 after for good measure, though if it was goi... Jim Pingle
12:22 PM Revision 24df8e83: Revert "Fix the build of miniupnpd in 12, disable CHECK_PORTINUSE."
This reverts commit e79fdf50be24375840011100440c9edee8c978dd. Renato Botelho
12:22 PM Revision ea4f5078: Revert "Fix the build of miniupnpd in 12, disable CHECK_PORTINUSE."
This reverts commit b761d75c2edc056576c669d36574793c5d13bdda. Renato Botelho
10:32 AM Bug #9969 (Pull Request Review): static route remain in the OS routing table after deletion
Jim Pingle
10:24 AM Bug #9602 (Pull Request Review): Dynamic DNS with DigitalOcean not working
Jim Pingle
10:23 AM pfSense Packages Bug #9220 (Pull Request Review): STunnel: Tunnel list does not show certificate
Jim Pingle
09:01 AM pfSense Packages Bug #9220: STunnel: Tunnel list does not show certificate
https://github.com/pfsense/FreeBSD-ports/pull/720 Viktor Gurov
10:23 AM pfSense Packages Bug #9652 (Pull Request Review): Squid Proxy Server /var/squid/lib/ssl_db directory not found in squid.inc
Jim Pingle
10:23 AM pfSense Packages Bug #9219 (Pull Request Review): STunnel: .pem files are created with incorrect permissions.
Jim Pingle
10:22 AM pfSense Packages Bug #9807 (Pull Request Review): Packets Monitoring graphs are being incorrectly scaled
Jim Pingle
09:00 AM Feature #9970 (New): Captive Portal and SAML2 Integration
Adding a section in Captive Portal to perform authentication against a remote IdP via SAML.
I'd propose to use OneLo...
Mauro Braggio
07:24 AM Todo #9603: Strongswan stroke is deprecated, move to swanctl/vici
Don't post anything here, but start a thread at https://forum.netgate.com/category/78/2-5-development-snapshots with ... Jim Pingle
01:52 AM Revision fe7a2304: DigitalOcean DynDNS description update. Close #9602
The description for DigitalOcean dynamic DNS is incorrect. The documentation currently states to "Enter @ as the host... karlhaworth

12/15/2019

07:56 PM Bug #9602: Dynamic DNS with DigitalOcean not working
Submitted PR : https://github.com/pfsense/pfsense/pull/4131 Crusty Cheeze
04:50 PM Bug #9602: Dynamic DNS with DigitalOcean not working
I got this same message.
The information inside pfsense is bad. "Cloudflare and DigitalOcean: Enter @ as the hostn...
Crusty Cheeze
12:49 PM Bug #8413: Virtual IP on PPPOE interface no longer working with 2.4.3
Hi,
I am getting this exact same error when my PPPoE connection drops and pfSense tries to reestablish it.
At l...
Nick R

12/14/2019

11:47 PM Todo #9603: Strongswan stroke is deprecated, move to swanctl/vici
Jim Pingle wrote:
> Applied in changeset commit:c6220dcf7faf3492713c6c30bb86d3971b2772a9.
Hello,
My setup has ...
Florin Samareanu
04:48 PM Revision c1c375e6: more readable
Viktor Gurov
04:32 PM Revision 3e20d175: full cmd: route delete $fml $tgt $gw
Viktor Gurov
02:48 PM Revision e194f002: gui renaming pkcs11 -> token + show ID
Viktor Gurov
02:10 PM Revision efacf294: cert on token check
Viktor Gurov
02:10 PM Revision 367d8609: cert on token check
Viktor Gurov
11:07 AM Revision 403add46: cosmetic
Viktor Gurov
11:03 AM Revision 3edfe694: working
Viktor Gurov
10:37 AM Bug #9969: static route remain in the OS routing table after deletion
https://github.com/pfsense/pfsense/pull/4130 Viktor Gurov
09:57 AM Revision e881843a: pcscd service
Viktor Gurov
02:00 AM pfSense Packages Bug #9652: Squid Proxy Server /var/squid/lib/ssl_db directory not found in squid.inc
https://github.com/pfsense/FreeBSD-ports/pull/719 Viktor Gurov

12/13/2019

11:37 PM pfSense Packages Bug #9219: STunnel: .pem files are created with incorrect permissions.
https://github.com/pfsense/FreeBSD-ports/pull/718 Viktor Gurov
08:19 PM Revision 5f143b6e: some progress
Viktor Gurov
06:39 PM Revision 58264457: Fix #9873: Use pkg-static
When pkg repo points to a new major version pkg is updated, use
pkg-static binary to check PHP version and make sure ...
Renato Botelho
06:36 PM Revision b71df062: Fix #9873: Use pkg-static
When pkg repo points to a new major version pkg is updated, use
pkg-static binary to check PHP version and make sure ...
Renato Botelho
06:34 PM Revision 6cadca6b: Fix #9873: Use pkg-static
When pkg repo points to a new major version pkg is updated, use
pkg-static binary to check PHP version and make sure ...
Renato Botelho
01:38 PM Bug #9123: Adding/configuring vlan on ixl-devices causes aq_add_macvlan err -53, aq_error 14
Hi,
As I explained in the forum : this is my currently working solution while runing 2.4.4p3:
- Using lagg in fai...
Eric Machabert
01:38 PM Revision ef30c0a7: Move syslog format var to syslog.inc. Issue #9808
In some cases, PHP is unhappy with calls to gettext() in globals.inc Jim Pingle
12:45 PM Bug #9873 (Feedback): Switching the System Update to Development renders the system unbootable
Applied in changeset commit:6cadca6b1665260f7feac90e8c2345234ab66154. Renato Botelho
10:23 AM Bug #9969 (Resolved): static route remain in the OS routing table after deletion
after deleting static route on System / Routing / Static Routes page and/or deleting gateway on System / Routing / Ga... Viktor Gurov
10:04 AM Bug #9968: Configuration of assigned interfaces is deployed to unassigned ones
For good measure, I decided to try it out. Made a VM on ESX 6.7 with 10 NICs. Installed, configured 5 of them, left t... Jim Pingle
08:01 AM Bug #9968 (Not a Bug): Configuration of assigned interfaces is deployed to unassigned ones
This looks more like an issue with your config.xml or environment, and more discussion and detail is necessary. For e... Jim Pingle
07:56 AM Bug #9968 (Not a Bug): Configuration of assigned interfaces is deployed to unassigned ones
*Background:*
We are running pfSense virtualized on VMware vSphere platform with 10 vmxnet3 NICs (vmx0-vmx9), hardwa...
Marek Částek
01:41 AM Revision e26ad76e: Add opts to services_dhcpv6.php and services_router_advertisements.php
Adds config options to disable pushing DNS server options to dhcp6
clients via dhcpd or radvd. Fixes an issue when us...
→ luckman212

12/12/2019

08:47 PM Feature #9302: radvd always advertises DNS servers and Domain Search List regardless of M or O flag
I only stumbled onto this issue after I had already found my own need for it and made a small patch for it. It's not ... → luckman212
07:25 PM Revision b16c3a12: Add option for RFC5424 syslog format. Implements #9808
Jim Pingle
03:50 PM Revision ce1ff928: small fixes
Viktor Gurov
01:35 PM Todo #9808 (Feedback): status_logs_settings.php: Add GUI option for syslog format
Applied in changeset commit:b16c3a12c61c117e9c8140b115efc7f9acea96c5. Jim Pingle
01:28 PM pfSense Packages Bug #9807: Packets Monitoring graphs are being incorrectly scaled
https://github.com/pfsense/FreeBSD-ports/pull/717 Viktor Gurov
07:02 AM pfSense Packages Bug #9807: Packets Monitoring graphs are being incorrectly scaled
They are a part of the Status_Monitoring package (which is included in the base install), so the files are in the fre... Jim Pingle
06:41 AM pfSense Packages Bug #9807: Packets Monitoring graphs are being incorrectly scaled
for some reason there is no rrd_fetch_json.php and status_monitoring.php files on github
fixed version:...
Viktor Gurov
07:04 AM Todo #9903 (Resolved): Rename IPsec "RSA" options to more generic "Certificate" options
Jim Pingle
01:41 AM Todo #9903: Rename IPsec "RSA" options to more generic "Certificate" options
Jim Pingle wrote:
> Applied in changeset commit:d1f5587d48af48817336fdf8644ea7d7679cf037.
tested on 2.5.0.a.20191...
Viktor Gurov
07:04 AM Bug #9879 (Resolved): PHP Warning: count(): Parameter must be an array or an object that implements Countable in /usr/local/www/system_crlmanager.php
Jim Pingle
01:39 AM Bug #9879: PHP Warning: count(): Parameter must be an array or an object that implements Countable in /usr/local/www/system_crlmanager.php
Jim Pingle wrote:
> Applied in changeset commit:a6487fc84dc85113354730ffe7f1d4a1141cf0c5.
tested on 2.5.0.a.20191...
Viktor Gurov

12/11/2019

11:42 PM pfSense Packages Bug #9967 (Rejected): SSL Filter enable stopped Squid Proxy and guard filter services
Please post on the forum to discuss and identify the issue. There is not enough information here to know what the iss... Jim Pingle
10:12 PM pfSense Packages Bug #9967 (Rejected): SSL Filter enable stopped Squid Proxy and guard filter services
ear in pf sense 2.4.4-DEVELOPMENT (AMD64) when squid proxy sever enable the squid SSL Filtering option for block secu... Noman Akbar
06:06 PM Revision 6c665431: Update status.php to read swanctl.conf, not ipsec.conf
Also ensure that secrets are redacted, and change the strongswan.conf
command to match.
Jim Pingle
04:45 PM Revision aa689bbc: Fix 2.4.5 repo ports branch (take 2)
Renato Botelho
04:38 PM Revision fa463ace: Fix 2.4.5 repo ports branch
Renato Botelho
04:35 PM Revision 686068b0: Fix 2.5.0/2.4.5 repo configs
Renato Botelho
04:08 PM Revision 09b6735d: allow to disable APIPA blocking
Viktor Gurov
10:25 AM Feature #9966 (Pull Request Review): allow to disable APIPA blocking
Jim Pingle
10:13 AM Feature #9966 (Resolved): allow to disable APIPA blocking
allow to disable APIPA blocking,
some providers may utilize APIPA space for interconnect interfaces
see also htt...
Viktor Gurov
10:22 AM Bug #9873 (In Progress): Switching the System Update to Development renders the system unbootable
Renato Botelho
10:09 AM Bug #2073: APIPA broadcasts forwarded by route-to
https://github.com/pfsense/pfsense/pull/4128 Viktor Gurov
08:13 AM pfSense Packages Bug #9965 (Resolved): Since 0.15.7_2, legit LDAP server certs cannot be selected anymore
Thanks for testing! Jim Pingle
08:00 AM pfSense Packages Bug #9965: Since 0.15.7_2, legit LDAP server certs cannot be selected anymore
Excellent; thank you very much! I can confirm this is fixed here! Didier Raboud
07:50 AM pfSense Packages Bug #9965 (Feedback): Since 0.15.7_2, legit LDAP server certs cannot be selected anymore
Fixed in 0.15.7_7 Jim Pingle
05:29 AM pfSense Packages Bug #9965 (Resolved): Since 0.15.7_2, legit LDAP server certs cannot be selected anymore
It seems that https://github.com/pfsense/FreeBSD-ports/commit/8cbbd84a374f4942e082c5898e93040c5ac65bbb broke the `/pk... Didier Raboud
07:53 AM pfSense Packages Bug #9962: HAproxy Upgrade needed HTTP/2 CVE-2019-19330
The new versions are in the ports tree in master, but need picked back to devel, RELENG_2_4_4, and RELENG_2_4_5 Jim Pingle
07:25 AM Feature #9754 (Resolved): Add separate authentication log
OpenVPN authentication is already placed in the auth log.... Jim Pingle
04:47 AM Feature #9754: Add separate authentication log
Jim Pingle wrote:
> I'm still not seeing a viable way to get the IPsec logs out when strongSwan handles the authenti...
Viktor Gurov
07:22 AM Bug #9764 (Resolved): status.php: Sanitize barnyard_dbpwd
Jim Pingle
06:38 AM Bug #9764: status.php: Sanitize barnyard_dbpwd
Jim Pingle wrote:
> Needs checked and/or tested again on 2.4.5 snapshots
tested on 2.4.5.a.20191209.0732
Resolved
Viktor Gurov
07:22 AM Bug #9727 (Resolved): status.php: Sanitize influx_pass
Jim Pingle
06:38 AM Bug #9727: status.php: Sanitize influx_pass
Jim Pingle wrote:
> Needs checked and/or tested again on 2.4.5 snapshots
tested on 2.4.5.a.20191209.0732
Resolved
Viktor Gurov
07:21 AM Bug #9728 (Resolved): status.php: Sanitize tinc private key
Jim Pingle
06:37 AM Bug #9728: status.php: Sanitize tinc private key
Jim Pingle wrote:
> Needs checked and/or tested again on 2.4.5 snapshots
tested on 2.4.5.a.20191209.0732
Resolved
Viktor Gurov
07:21 AM Bug #9729 (Resolved): status.php: Sanitize zabbix-agent tlspsk key
Jim Pingle
06:36 AM Bug #9729: status.php: Sanitize zabbix-agent tlspsk key
Jim Pingle wrote:
> Needs checked and/or tested again on 2.4.5 snapshots
tested on 2.4.5.a.20191209.0732
Resolved
Viktor Gurov
07:21 AM Bug #9784 (Resolved): status.php: Sanitize bandwidthd db password
Jim Pingle
06:36 AM Bug #9784: status.php: Sanitize bandwidthd db password
Jim Pingle wrote:
> Needs checked and/or tested again on 2.4.5 snapshots
tested on 2.4.5.a.20191209.0732
Resolved
Viktor Gurov
07:16 AM Bug #9744 (Resolved): fatal error if ECDH Curve not default
Jim Pingle
04:41 AM Bug #9744: fatal error if ECDH Curve not default
Jim Pingle wrote:
> I pushed an update in commit:ca3cddbec4 to change the OpenVPN curve list to match IPsec
teste...
Viktor Gurov
07:16 AM Bug #9936 (Resolved): zombie alias check errors if no alises exist
Jim Pingle
04:38 AM Bug #9936: zombie alias check errors if no alises exist
Jim Pingle wrote:
> Applied in changeset commit:e99c638b78540efa478dbb3360943c67de72c1af.
tested on 2.5.0.a.20191...
Viktor Gurov
07:16 AM Feature #9771 (Resolved): diag_reboot.php: add ability to reroot and reboot with fsck to WebGUI
Jim Pingle
04:14 AM Feature #9771: diag_reboot.php: add ability to reroot and reboot with fsck to WebGUI
Renato Botelho wrote:
> PR has been merged. Thanks
tested on 2.5.0.a.20191210.1722
Resolved
Viktor Gurov
07:16 AM Bug #9964 (Duplicate): first step wizard error on SG-1000
That syntax error was fixed over a month ago, and the build issue that led to it being a problem in snapshots was fix... Jim Pingle
05:10 AM Bug #9964 (Duplicate): first step wizard error on SG-1000
After setting the admin password, I received a CSRF verification error, and after refreshing the page:... Viktor Gurov

12/10/2019

02:20 PM Revision 9998e8d7: Don't dedup DNS from dyn sources if override is disabled. Fixes #9963
(cherry picked from commit f829d7e2967d170f09756937e9076e87d5f9e2d7) Jim Pingle
02:20 PM Revision f829d7e2: Don't dedup DNS from dyn sources if override is disabled. Fixes #9963
Jim Pingle
01:09 PM Revision 12bce795: traffic-graphs, don't stop drawing graphs when a interface is disabled
traffic-graphs, don't stop drawing graphs when a interface is disabled
(cherry picked from commit 176c7256bd1b13f401...
Pi Ba
01:09 PM Revision 7259987c: Merge pull request #4119 from PiBa-NL/patch-1
Renato Botelho
01:08 PM Revision 868b035e: simplify queue stats parser
(cherry picked from commit 5a0f6513bfe2ba1da87505dbb7b97c6b4479bf34) Lucas Held
01:08 PM Revision f6c2c75d: support variable value length in queue stats parser
(cherry picked from commit e5deede539e4164256e5243b22f3ee963fc35ea7) Lucas Held
01:08 PM Revision 88a8d5cf: Merge pull request #4123 from lucasheld/fix-queue-stats
Renato Botelho
01:06 PM Revision a043fdbd: "don't" -> "doesn't" (typo fix for help text)
(cherry picked from commit 9d6adc62d78f7c0e6dcb6865edf5fb3ca60db1b0) something-big
01:06 PM Revision f15934a3: Merge pull request #4124 from github-pedant-VomYzatg2NB2AG01TaWyNpiW0/master
Renato Botelho
09:44 AM Bug #9963: DNS servers assigned dynamically are omitted if also assigned manually when override is disallowed
Easiest way to reproduce:
* Enable forwarding in the DNS Resolver (Or forwarder, behavior is likely the same but I...
Jim Pingle
08:30 AM Bug #9963 (Feedback): DNS servers assigned dynamically are omitted if also assigned manually when override is disallowed
Applied in changeset commit:f829d7e2967d170f09756937e9076e87d5f9e2d7. Jim Pingle
08:15 AM Bug #9963: DNS servers assigned dynamically are omitted if also assigned manually when override is disallowed
This seems to primarily be a problem just after unchecking the DNS Server Override box, as later the servers are prev... Jim Pingle
08:12 AM Bug #9963 (Resolved): DNS servers assigned dynamically are omitted if also assigned manually when override is disallowed
If:
* A name server is manually configured, such as 8.8.8.8, under System > General
* That same name server is al...
Jim Pingle
08:11 AM pfSense Packages Bug #9962 (Resolved): HAproxy Upgrade needed HTTP/2 CVE-2019-19330
[https://nvd.nist.gov/vuln/detail/CVE-2019-19330]
Haproxy 1.8 need be updated to 1.8.23 (RD: 2019/11/25) from 1.8....
DRago_Angel [InV@DER]
07:29 AM Feature #8786: Wireguard VPN
We are fully aware. It's good news for them, but that does not mean much of anything for its implementation or stabil... Jim Pingle
12:05 AM Feature #8786: Wireguard VPN
For those who might not be following it, WireGuard is going to be integrated into the Linux kernel 5.6 release, which... Soren Stoutner
07:08 AM Bug #9938 (Feedback): Queue stats parser broken if bytes > 9999999999
PR has been merged. Thanks! Renato Botelho

12/09/2019

02:00 PM Revision 8c439c68: Search filter log by tracker ID. Implements #8703
(cherry picked from commit 6270bfe22ce283cca18855c5e79a1f4714505177) Jim Pingle
01:59 PM Revision 6270bfe2: Search filter log by tracker ID. Implements #8703
Jim Pingle
01:45 PM Revision d3b8d587: Fix UPnP status when using an alternate interface address. Fixes #9961
(cherry picked from commit a8183b25c6bab388206f18acf679d96cd8b60f0e) Jim Pingle
01:44 PM Revision a8183b25: Fix UPnP status when using an alternate interface address. Fixes #9961
Jim Pingle
12:54 PM Bug #9736 (Resolved): status.php: Sanitize oinkcode and etprocode of snort/surricata
Tested on 2.4.5.a.20191209.0732, works as expected. Anonymous
12:26 PM Bug #9946 (Resolved): package install failed: unset the 'vital' flag with: pkg set -v 0 pfSense
Right, it works now. Anonymous
12:21 PM Feature #8703 (Resolved): Allow user to search firewall alerts by tracking ID
Tested on 2.4.5.a.20191209.0732, works as expected. Thanks Jim! Anonymous
08:10 AM Feature #8703 (Feedback): Allow user to search firewall alerts by tracking ID
Applied in changeset commit:6270bfe22ce283cca18855c5e79a1f4714505177. Jim Pingle
08:00 AM Feature #8703 (In Progress): Allow user to search firewall alerts by tracking ID
Jim Pingle
07:55 AM Bug #9961 (Feedback): status_upnp: UPnP status not showing rules when using override WAN address option
Applied in changeset commit:a8183b25c6bab388206f18acf679d96cd8b60f0e. Jim Pingle
07:43 AM Bug #9961 (In Progress): status_upnp: UPnP status not showing rules when using override WAN address option
Jim Pingle

12/08/2019

11:52 AM Revision 0f5300a7: Add %%REPO_BRANCH_PREFIX%% to jail name
Renato Botelho

12/07/2019

02:02 PM Revision 8c120b1f: conflicts resolved, needs testing
Viktor Gurov
08:25 AM Bug #9586 (Resolved): Unbound Access List /31 UI Issue
Jim Pingle
12:34 AM Bug #9586: Unbound Access List /31 UI Issue
Jim Pingle wrote:
> Needs checked and/or tested again on 2.4.5 snapshots
tested on 2.4.5.a.20191205.1442_3
Res...
Viktor Gurov
08:25 AM Feature #9694 (Resolved): Redact ACB encryption password from status.php
Jim Pingle
12:32 AM Feature #9694: Redact ACB encryption password from status.php
Jim Pingle wrote:
> Needs checked and/or tested again on 2.4.5 snapshots
tested on 2.4.5.a.20191205.1442_3:
<enc...
Viktor Gurov
08:24 AM Feature #9412 (Resolved): Add sorting and search/filtering to CA/Certificates
Jim Pingle
12:31 AM Feature #9412: Add sorting and search/filtering to CA/Certificates
Jim Pingle wrote:
> Needs checked and/or tested again on 2.4.5 snapshots
tested on 2.4.5.a.20191205.1442_3
Res...
Viktor Gurov
08:24 AM Bug #7186 (Resolved): Unable to use national symbols in password fo ACB package
Jim Pingle
12:28 AM Bug #7186: Unable to use national symbols in password fo ACB package
Jim Pingle wrote:
> Applied in changeset commit:9d4ace0bf544b3190d31484cac684bca4dac2a0b.
tested 2.4.5.a.20191205...
Viktor Gurov
08:24 AM Bug #9741 (Resolved): interfaces_ppps_edit.php: WebGUI don't show local ip / gateway ip values
Jim Pingle
12:25 AM Bug #9741: interfaces_ppps_edit.php: WebGUI don't show local ip / gateway ip values
Jim Pingle wrote:
> Needs checked and/or tested again on 2.4.5 snapshots
tested on 2.4.5.a.20191205.1442_3
ok,...
Viktor Gurov

12/06/2019

11:47 PM Bug #9961 (Resolved): status_upnp: UPnP status not showing rules when using override WAN address option
When using the override WAN address option (say for a CARP VIP), the Status / UPnP & NAT-PMP page shows NO entries, e... Christian McDonald
10:40 PM pfSense Packages Bug #9960 (Rejected): SSL Filter enable stopped Squid Proxy and guard filter services
Do not open issues here for this. Post on the forum to discuss and diagnose the problem and obtain more information. ... Jim Pingle
10:38 PM pfSense Packages Bug #9960 (Rejected): SSL Filter enable stopped Squid Proxy and guard filter services
dear in pf sense 2.5.0-DEVELOPMENT (AMD64) when squid proxy sever enable the squid SSL Filtering option for block sec... Noman Akbar
10:32 PM pfSense Packages Feature #9959 (Rejected): SSL Filter enable stopped Squid Proxy and guard filter services
Please post on the forum to discuss and identify the issue. There is not enough information here. 2.5.0 is in develop... Jim Pingle
10:29 PM pfSense Packages Feature #9959 (Rejected): SSL Filter enable stopped Squid Proxy and guard filter services
dear in pf sense 2.5.0-DEVELOPMENT (AMD64) when squid proxy sever enable the squid SSL Filtering option for block sec... Noman Akbar
03:41 PM Bug #9938: Queue stats parser broken if bytes > 9999999999
PR link: https://github.com/pfsense/pfsense/pull/4123 Jim Pingle
03:12 PM Todo #9245: Update copyright notices to 2020
See also: commit:38809d476acd3939b64bf3f3317792b99e5a1b9f Jim Pingle
01:02 PM Revision 62bac37e: Lower default_cert_expiredays warning threshold to 27 days
Even at 28, ACME still sometimes warns unnecessarily just before renewal. Jim Pingle
12:59 PM Revision c01a28ac: OpenVPN server cert default lifetime 825 days
(cherry picked from commit c576842887ac696dd5faf9d86d5447538d316069) Viktor Gurov
12:59 PM Revision 07f51b2f: Merge pull request #4126 from vktg/ovpnwiz825
Jim Pingle
09:24 AM Bug #9954 (Resolved): status_ipsec.php: Unable to manually connect P2 when P1 is up but not P2
On status_ipsec.php, if IKE (P1) is up but Child SAs (P2s) are not connected, there is no way to connect them without... Jim Pingle
08:16 AM Revision c5768428: OpenVPN server cert default lifetime 825 days
Viktor Gurov
07:38 AM Bug #9763 (Resolved): Trying to set VLAN Priority causes error
Jim Pingle
07:33 AM Bug #9763: Trying to set VLAN Priority causes error
Jim Pingle wrote:
> Needs checked and/or tested again on 2.4.5 snapshots
tested on 2.4.5.a.20191205.1442_3
ok,...
Viktor Gurov
07:31 AM Bug #9867 (Resolved): Packet Capture IPv6 rejects all packets if CARP type is set in Protocol field
Jim Pingle
07:31 AM Bug #9867: Packet Capture IPv6 rejects all packets if CARP type is set in Protocol field
Jim Pingle wrote:
> Needs checked and/or tested again on 2.4.5 snapshots
tested on 2.4.5.a.20191205.1442_3
ok,...
Viktor Gurov
07:30 AM Todo #9868 (Resolved): Add clientAuth EKU to Server type certificates
Jim Pingle
07:29 AM Todo #9868: Add clientAuth EKU to Server type certificates
Jim Pingle wrote:
> Needs checked and/or tested again on 2.4.5 snapshots
tested on 2.4.5.a.20191205.1442_3:
...
...
Viktor Gurov
06:58 AM Feature #9825 (Resolved): Requirements for trusted certificates in iOS 13 and macOS 10.15
Viktor Gurov wrote:
> Change default GUI cert lifetime to 825 days - *OK*
That's all that needed testing, so it's...
Jim Pingle
03:55 AM Feature #9825: Requirements for trusted certificates in iOS 13 and macOS 10.15

mark certificates with lifetime > 825 days:
https://github.com/pfsense/pfsense/pull/4127
Viktor Gurov
02:29 AM Feature #9825: Requirements for trusted certificates in iOS 13 and macOS 10.15

reduce OpenVPN wizard server cert lifetime to 825:
https://github.com/pfsense/pfsense/pull/4126
Viktor Gurov
02:28 AM Feature #9825: Requirements for trusted certificates in iOS 13 and macOS 10.15
Jim Pingle wrote:
> The default GUI cert lifetime of 825 days needs checked on 2.4.5 snapshots. If it's OK, move tar...
Viktor Gurov
06:58 AM Bug #9953 (Not a Bug): no meta.txz, Unable to retrieve package information
It's expected to happen since we didn't make packages public yet while we do first round of tests Renato Botelho
12:37 AM Bug #9953 (Not a Bug): no meta.txz, Unable to retrieve package information
got 'Unable to retrieve package information.' error on package manager page
in console:...
Viktor Gurov
06:56 AM Bug #9748 (Resolved): openvpn_wizard.xml: DH 15360 and 16384 fall back to 1024
Jim Pingle
02:05 AM Bug #9748: openvpn_wizard.xml: DH 15360 and 16384 fall back to 1024
Jim Pingle wrote:
> Needs checked and/or tested again on 2.4.5 snapshots
tested on 2.4.5.a.20191205.1442_3
ok,...
Viktor Gurov
06:56 AM Bug #9719 (Resolved): system_certmanager.php - Descriptive name field disappeared when adding certificate for user
Jim Pingle
01:57 AM Bug #9719: system_certmanager.php - Descriptive name field disappeared when adding certificate for user
Jim Pingle wrote:
> Needs checked and/or tested again on 2.4.5 snapshots
tested on 2.4.5.a.20191205.1442_3
ok,...
Viktor Gurov
06:56 AM Bug #9722 (Resolved): services_captiveportal_vouchers.php wrong status icon link
Jim Pingle
01:34 AM Bug #9722: services_captiveportal_vouchers.php wrong status icon link
Jim Pingle wrote:
> Needs checked and/or tested again on 2.4.5 snapshots
tested on 2.4.5.a.20191205.1442_3
ok,...
Viktor Gurov
06:56 AM Bug #9756 (Resolved): vpn_openvpn_(client|server).php: js issue when selecting multiple NCP
Jim Pingle
01:30 AM Bug #9756: vpn_openvpn_(client|server).php: js issue when selecting multiple NCP
Jim Pingle wrote:
> Needs checked and/or tested again on 2.4.5 snapshots
tested on 2.4.5.a.20191205.1442_3
ok,...
Viktor Gurov
06:13 AM Bug #9946: package install failed: unset the 'vital' flag with: pkg set -v 0 pfSense
James Dekker wrote:
> With the proper test repo pointing at 2.4.5, the packages install successfully.
gitsync is ...
Renato Botelho
04:15 AM Bug #9944: cron package tries to send out mail with non-existing sendmail tool
Thanks for the explanation. In that case it would be nice to somehow utilize pfSense's notification settings (System/... Alex Kolesnik
01:59 AM Bug #9790: firewall aliases table with fqdn stays in system after deleting
Renato Botelho wrote:
> PR has been merged. Thanks!
tested on 2.5.0.a.20191205.1852
works, Resolved
Viktor Gurov
 

Also available in: Atom