Project

General

Profile

Activity

From 07/03/2020 to 08/01/2020

08/01/2020

06:25 AM pfSense Packages Feature #10809 (Resolved): IDS/IPS - Notifications when new rule categories are released
Please allow users to enable system notifications when new rule categories appear.
As IDS rules are not enabled as t... e 1/1
04:40 AM Feature #10808 (Rejected): System logs->Firewall->Advanced Log Filter - more UI functionality for choosing interfaces
In Status->System Logs->Firewall->Normal View and Dynamic View please improve the "Interface" field in the Advanced L... e 1/1
04:31 AM Feature #10807 (Rejected): Allow users to show advanced log filter by default in Status->System Logs->Firewall
Please add an option for Status->System Logs->Firewall so that when one opens either "Normal View" or "Dynamic View",... e 1/1

07/31/2020

05:51 PM Bug #10806 (Resolved): armada_thermal fails during device_attach
SG-3100 is unable to read the temperature from sysctl, as the oid doesn't exist, because the driver fails to attach d... Daniel Gordon
03:13 PM Feature #10805 (New): Intel QAT (QuickAssist) encryption support for PfSense
Please consider adding Intel QAT (QuickAssist) acceleration to PfSense. Nearly all of Netgate's hardware supports it ... Adam Goldberg
01:25 PM Bug #10800: Multi WAN Load Balancing does not work on 2.5.0.a.20200729.0650
Dmitry Fill wrote:
> Version: 2.5.0.a.20200729.0650
>
> Tried to follow documentation to setup multi WAN with Lo... Adam Goldberg
12:17 PM Feature #8786: Wireguard VPN
Take as much time as you need to get it right. I would rather have a stable, in-kernel implementation than a buggy, ... Soren Stoutner
11:57 AM Feature #8786: Wireguard VPN
There certainly is reason. We're working on the in-kernel implementation and won't be wasting our time on unstable us... Jim Pingle
11:44 AM Feature #8786: Wireguard VPN
wireguard-go exists on FreeBSD. While it may not be in-kernel, it's a userspace implementation from the same project.... Anonymous
10:29 AM Bug #10803 (Pull Request Review): Invalid rules generated from AVPair on OpenVPN
Jim Pingle
03:49 AM Bug #10803: Invalid rules generated from AVPair on OpenVPN
Pull request: https://github.com/pfsense/pfsense/pull/4411 Marius Rejdak
03:44 AM Bug #10803 (Resolved): Invalid rules generated from AVPair on OpenVPN
AVPair rule:
ip:inacl#1=permit ip 10.1.0.0 255.255.0.0 10.2.0.0 255.255.0.0 range 8000 8001
Expected rule:
pass ... Marius Rejdak
08:56 AM pfSense Plus Feature #10804: Interface Status page information for switch uplinks may be replaced by switch port data when media state monitoring is set
Fixing the subject and adding some notes:
This happens if "Switch Port" on Interfaces > LAN (or whichever interfac... Jim Pingle
08:49 AM pfSense Plus Feature #10804 (Resolved): Interface Status page information for switch uplinks may be replaced by switch port data when media state monitoring is set
Like in #10793#note-9 written status->interface for mvneta1 shows mixed data from mvneta1 and switch port 1.
Make ... Grischa Zengel
08:46 AM Revision c6a9d32e: Fix OpenVPN AVPair network/netmask output. Issue #10803
Marius Rejdak
08:26 AM Bug #10793: SNMP: Netgate SG-3100 shows wrong speed
I agree, it's not a bug.
I forgot that this switch config for tracking ports exists because I only used it once at f... Grischa Zengel
06:33 AM Bug #7020 (Feedback): <Hostname> is omitted when sending logs on syslog
An RFC 5424 option was added to 2.5.0 almost a year ago, you can test it there: #9808 Jim Pingle
02:47 AM Bug #7020: <Hostname> is omitted when sending logs on syslog
Jim Pingle wrote:
> If it's a bug, it's a bug in FreeBSD -- we use their syslogd and that's how it behaves. The defa... Darren Spruell

07/30/2020

05:56 PM Feature #10802 (New): Seperator for DHCP Static Mapped leases
It may be nice to allow the similar separator functionality from the firewall rules page, on the status_dhcp_leases.p... Daniel Johnson
04:20 PM Bug #10800: Multi WAN Load Balancing does not work on 2.5.0.a.20200729.0650
Thank you Jim. I got redirected here after clicking link "Give Feedback" on documentation section of "Multiple WAN Co... Dmitry Fill
07:38 AM Bug #10800 (Rejected): Multi WAN Load Balancing does not work on 2.5.0.a.20200729.0650
There is not enough information here to rule out a configuration issue or a problem with your test methodology. This ... Jim Pingle
12:32 AM Bug #10800 (Rejected): Multi WAN Load Balancing does not work on 2.5.0.a.20200729.0650
Version: 2.5.0.a.20200729.0650
Tried to follow documentation to setup multi WAN with Load Balancing
1. Two WAN... Dmitry Fill
03:57 PM Revision f2b9ea9a: Revise get_services() to include the current service state in the returned array. This saves having to get the list of services three times in order to draw the status_services web page
Steve Beaver
03:13 PM Bug #10793: SNMP: Netgate SG-3100 shows wrong speed
That doesn't happen by default. You probably selected "Port 1" as the switch port to monitor under Interfaces > LAN_1... Jim Pingle
03:06 PM Bug #10793: SNMP: Netgate SG-3100 shows wrong speed
No, no problem.
But you said mvneta1 is always at 2500MBit but pfsense shows 100MBit like picture 2020-07-30 21-24... Grischa Zengel
02:55 PM Bug #10793: SNMP: Netgate SG-3100 shows wrong speed
"LAN Uplink" is mvneta1. The others are the individual switch ports, not mvneta* interfaces.
With the built-in bsn... Jim Pingle
02:29 PM Bug #10793: SNMP: Netgate SG-3100 shows wrong speed
It looks like it reflects speed from 1st switch port or max link speed on switch.
!2020-07-30 21-24-58.png!
!2020... Grischa Zengel
01:43 PM Bug #10793: SNMP: Netgate SG-3100 shows wrong speed
Grischa Zengel wrote:
> Is this relevant?
> mvneta1 supports only 2500MBit but connects with 100MBit.
I do not s... Jim Pingle
01:39 PM Bug #10793 (Resolved): SNMP: Netgate SG-3100 shows wrong speed
Looks good now.... Jim Pingle
02:24 PM Bug #10801 (Not a Bug): Send mail on gw down
Not nearly enough information here to say it's a bug, and this site is not for support or diagnostic discussion.
F... Jim Pingle
02:18 PM Bug #10801 (Not a Bug): Send mail on gw down
Hi.
I used to get email when gw was offline. For example pppoe dropped, gw went down and I got an email.
Now on 2... Greg M
02:19 PM Bug #10773: if_em VLAN interfaces wont pass traffic after reboot
Looks like this fix was just MFCed to 12-stable under MFC r362063. So it should be fixed next time pfSense is rebased. Steve Harrington
11:17 AM Bug #10799: Dynamic DNS auto update
My bad. It is indeed not a bug. The dynamic DNS feature reacts to change of IP on some interface, not on the registra... Ike Doz
07:47 AM Bug #10799: Dynamic DNS auto update
Sorry about that, I posted in the forum. Ike Doz
07:37 AM Bug #10799 (Not a Bug): Dynamic DNS auto update
This site is not for support or diagnostic discussion.
For assistance in solving problems, please post on the "Net... Jim Pingle
07:34 AM Bug #10795 (Pull Request Review): WebGUI "Dashboard -> Services Status" widget issue
Jim Pingle

07/29/2020

04:40 PM Bug #10799 (Not a Bug): Dynamic DNS auto update
I have already asked reddit.com/r/pfsense and IRC but I couldn't solve my issue so I am asking here.
I have set up... Ike Doz
02:57 PM Revision 6947a80a: Captive Portal name validation for XML tags. Fixes #10798
Viktor Gurov
12:02 PM Bug #10793 (Feedback): SNMP: Netgate SG-3100 shows wrong speed
Fixed.
Please test with the next snapshot. Luiz Souza
10:10 AM Bug #10798 (Pull Request Review): Unable to save CP zone named 'VIP'
Jim Pingle
09:59 AM Bug #10798: Unable to save CP zone named 'VIP'
https://github.com/pfsense/pfsense/pull/4410 Viktor Gurov
08:49 AM Bug #10798: Unable to save CP zone named 'VIP'
It's because the zone name is used as an XML tag in the config, but "vip" is a listtag, meaning it gets treated like ... Jim Pingle
08:40 AM Bug #10798: Unable to save CP zone named 'VIP'
config.xml after creating 'VIP' zone:... Viktor Gurov
07:18 AM Bug #10798 (Resolved): Unable to save CP zone named 'VIP'
https://forum.netgate.com/topic/155549/captive-portal-settings-not-saved:
I did more tests, tried to add several cap... Viktor Gurov
08:45 AM Bug #10797 (Pull Request Review): status.php: Sanitize MaxMind GeoIP key
Jim Pingle
07:12 AM Bug #10797: status.php: Sanitize MaxMind GeoIP key
https://github.com/pfsense/pfsense/pull/4409 Viktor Gurov
05:27 AM Bug #10797 (Resolved): status.php: Sanitize MaxMind GeoIP key
maxmind_geoipdb_key - Suricata
maxmind_key - pfBlockerNG, NTOPNG Viktor Gurov
08:42 AM Bug #10594 (Pull Request Review): add QLogic 10 Gigabit Ethernet driver (qlxgb) to the ALTQ-capable list
Jim Pingle
02:26 AM Bug #10594: add QLogic 10 Gigabit Ethernet driver (qlxgb) to the ALTQ-capable list
Correct interface name is 'qlX':
https://github.com/pfsense/pfsense/pull/4408 Viktor Gurov
08:41 AM Bug #10794 (Pull Request Review): HAProxy Stats page credentials are not redacted in status.php
Jim Pingle
02:12 AM Bug #10794: HAProxy Stats page credentials are not redacted in status.php
Sanitize stats_password:
https://github.com/pfsense/pfsense/pull/4407 Viktor Gurov
08:40 AM pfSense Packages Feature #10796 (Pull Request Review): Huawei ME909u-521 support
Jim Pingle
01:00 AM pfSense Packages Feature #10796: Huawei ME909u-521 support
https://github.com/pfsense/FreeBSD-ports/pull/898 Viktor Gurov
01:00 AM pfSense Packages Feature #10796 (Feedback): Huawei ME909u-521 support
Add Huawei ME909u-521 Viktor Gurov
08:11 AM pfSense Packages Feature #10347: Request to add pull-filter
Discussion about --route-nopull:
https://sourceforge.net/p/openvpn/mailman/openvpn-devel/thread/4B3OgL3j077iDP_MhneR... Pippin MMD
07:24 AM Revision 4d0d242b: Correct QLogic interface name in ALTQ-capable list. Issue #10594
Viktor Gurov
07:11 AM Revision 7f11a9a0: Sanitize HAproxy stats_password. Issue #10794
Viktor Gurov
04:36 AM Bug #10784 (Feedback): HA-sync with ssh keys
Unable to reproduce it on 2.4.5-p1 and 2.5.0.a.20200728.1850 HA clusters, ~/.ssh directory owner is OK
Please give u... Viktor Gurov
12:45 AM Bug #9796: kernel panic after removing interfaces
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=248243 Viktor Gurov

07/28/2020

05:24 PM Revision ccbb25fa: Correct description truncate in "Services Status" widget. Fixes #10795
Mikhail Burichenko
04:04 PM Bug #10793: SNMP: Netgate SG-3100 shows wrong speed
Is this relevant?
mvneta1 supports only 2500MBit but connects with 100MBit.... Grischa Zengel
10:54 AM Bug #10793: SNMP: Netgate SG-3100 shows wrong speed
I was able to reproduce this in both bsnmpd and net-snmp, looks like neither one likes the 2.5G uplink speed.
<pre... Jim Pingle
05:55 AM Bug #10793 (Resolved): SNMP: Netgate SG-3100 shows wrong speed
I use check_nwc_health for monitoring network interfaces and it shows always over usage (>100%) on interface mvneta1.... Grischa Zengel
11:33 AM Bug #10795: WebGUI "Dashboard -> Services Status" widget issue
Jim Pingle wrote:
> Can you submit that change as a pull request on Github?
https://github.com/pfsense/pfsense/pu... Mikhail Burichenko
10:18 AM Bug #10795: WebGUI "Dashboard -> Services Status" widget issue
Can you submit that change as a pull request on Github?
https://docs.netgate.com/pfsense/en/latest/development/sub... Jim Pingle
09:35 AM Bug #10795 (Resolved): WebGUI "Dashboard -> Services Status" widget issue
If i use FQDN in description of openvpn service, the description line will be truncated after the first dot because:
... Mikhail Burichenko
10:59 AM Bug #8820: System/Advanced/Misc - "Do not kill connections when schedule expires" UN-checked still leaves existing connections open.
See also: #9615 and #10790 Jim Pingle
10:59 AM Bug #9615 (Duplicate): Connections permitted by a schedule are not killed when that schedule expires.
Duplicate of #8820 Jim Pingle
10:59 AM Bug #10790 (Duplicate): States aren't killed after schedule expires
Duplicate of #8820 Jim Pingle
08:28 AM Bug #10794 (Resolved): HAProxy Stats page credentials are not redacted in status.php
The status_output file generated by status.php does not redact the HAProxy stats page login details:... Steve Wheeler
03:40 AM Bug #10792 (New): Crash when switching interface off and on again in cohesion with multicast
Hello,
There are still crashes when switching off and on (vlan)interfaces. One of those crashes seems to be trigge... Louis B
03:27 AM pfSense Packages Bug #10791 (New): Valid (vlan)interfaces do not get vif reporting "Invalid phyint address"
Hello,
PIMD still not properly working. So I opened tow FeeBSD Bugs. This one is FreeBSD bug 248103.
Also see ht... Louis B
03:12 AM pfSense Packages Bug #10692: PIMD starts twice at boot
Despite that this issue has state "Fixed". it is _*not fixed at all !!*_ So please "reopen" this bug! Louis B

07/27/2020

09:57 PM Bug #10790 (Duplicate): States aren't killed after schedule expires
I have several rules that allow traffic for a certain amount of time (say, 8am-10pm). That rule is immediately follow... John Pozzoli
11:53 AM pfSense Packages Feature #10789 (Feedback): FRR integrated configuration and hitless reloads
Convert FRR to use an integrated configuration file and use frr-reload where possible for hitless configuration chang... Ben Hughes
10:15 AM Bug #9796: kernel panic after removing interfaces
I do have a reproducible bug when switching interfaces off and on. I did open FreeBSD Bugzilla – Bug 248243. I did ad... Louis B
08:31 AM Feature #1337: VLANs with different MAC address than parent interface
I'm not sure that setting the interface in promiscuous mode is the right thing to do here. There will be performance... Luiz Souza
07:43 AM pfSense Packages Bug #10788 (Rejected): ntopng not displaying graphs correctly. Bottom of graphs getting cut off.
That's an issue between ntopng and your browser, not in code we have any control over. If you can still reproduce it ... Jim Pingle

07/26/2020

03:04 PM Feature #6626: Support for IPv6 firewall entries with dynamic delegated prefix and static host address
Hello,
we are also in dire need of this feature. Lack of support for dynamic prefixes makes IPv6 pretty much unusa... Mike Murdoch
11:43 AM pfSense Packages Bug #10788 (Rejected): ntopng not displaying graphs correctly. Bottom of graphs getting cut off.
ntopng graphs are getting cut off where I can not see the time on historical graphs.
To duplicate, I go to Hosts M... Hector Gongora

07/25/2020

10:21 AM Feature #1337: VLANs with different MAC address than parent interface
It's possible to do this by editing /etc/inc/interfaces.inc and adding the lines below, but it would be nice if it co... Wik Joh
12:41 AM pfSense Docs Correction #10787 (Resolved): Feedback on Services — DNS — Performing a DNS Lookup
*Page:* https://docs.netgate.com/pfsense/en/latest/diagnostics/dns.html
*Feedback:* Does not explain the function ... Joseph McGuirl

07/24/2020

12:17 PM Feature #10786 (Rejected): Remotely change gateway priority
There is no reasonable way to accommodate this without a proper API, and that's a much longer-term project.
If you... Jim Pingle
11:50 AM Feature #10786 (Rejected): Remotely change gateway priority
We would like to remotely change the Gateway Priority of a gateway. We have a gateway group and often times we need t... Emmanuel Sedas
09:54 AM Bug #10773: if_em VLAN interfaces wont pass traffic after reboot
PR submitted.
https://github.com/pfsense/FreeBSD-src/pull/34 Steve Harrington
09:09 AM pfSense Packages Feature #10785 (Pull Request Review): Allow Setting of ldapcachetime
Jim Pingle
09:01 AM pfSense Packages Feature #10785: Allow Setting of ldapcachetime
OK, done:
https://github.com/pfsense/FreeBSD-ports/pull/913 Jan Wenzel
08:01 AM pfSense Packages Feature #10785: Allow Setting of ldapcachetime
Please create a pull request in github, that process is much easier for us to review and approve for inclusion. Thanks! Jim Pingle
07:55 AM pfSense Packages Feature #10785 (Resolved): Allow Setting of ldapcachetime
We're using Squid/Squidguard with many (!) ldap based group filters.
This does not scale because squidguard does n... Jan Wenzel
05:10 AM Bug #10784 (Closed): HA-sync with ssh keys
I have two pfsense boxes configured in HA sync. Synchronisation is performed by a seperate user named "ha-sync" with ... Mark De Souza

07/23/2020

10:41 PM Bug #7656: TypeError: n is undefined JavaScript error in status_monitoring.php
I root caused this pretty far as described in this post:
https://forum.netgate.com/post/926097
The step property ... Shaun Currier
06:00 AM Revision 5ed92e19: IPsec Mobile RADIUS Group authentication. Implements #10748
Viktor Gurov

07/22/2020

01:44 PM pfSense Packages Bug #10771 (Pull Request Review): arpwatch: option to not send hourly email notification on cron run
Jim Pingle
05:59 AM pfSense Packages Bug #10771: arpwatch: option to not send hourly email notification on cron run
Fix:
https://github.com/pfsense/FreeBSD-ports/pull/912
see also #8454 Viktor Gurov
01:44 PM pfSense Packages Bug #10770 (Pull Request Review): arpwatch: cannot remove email once it has been entered into settings
Jim Pingle
05:58 AM pfSense Packages Bug #10770: arpwatch: cannot remove email once it has been entered into settings
Fix:
https://github.com/pfsense/FreeBSD-ports/pull/912 Viktor Gurov
01:37 PM pfSense Packages Feature #10779 (Pull Request Review): HAProxy SSL/TLS Compatibility Mode
Jim Pingle
02:05 AM pfSense Packages Feature #10779: HAProxy SSL/TLS Compatibility Mode
https://github.com/pfsense/FreeBSD-ports/pull/911 Viktor Gurov
12:46 PM Feature #2358: NAT64 support
Viktor Gurov wrote:
> https://github.com/pfsense/pfsense/pull/4405
Better late than never :-) We switched to Juni... Dmitri Toubelis
12:20 PM Feature #2358 (Pull Request Review): NAT64 support
Jim Pingle
12:25 AM Feature #2358: NAT64 support
https://github.com/pfsense/pfsense/pull/4405 Viktor Gurov
09:07 AM pfSense Packages Bug #10783 (Closed): NtopNG is very unstable on arm64
NtopNG will start and run after being initially configured even though this error:... Steve Wheeler

07/21/2020

10:24 PM Bug #7656: TypeError: n is undefined JavaScript error in status_monitoring.php
I believe this is related to my issue here that I can reliably reproduce in 2.4.5-RELEASE-p1.
https://forum.netgat... Shaun Currier
05:51 PM Revision ab378cb7: Move build_vip_list() function to util.inc. Fix var ambiguity
Steve Beaver
04:34 PM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
Should the status on this be changed? It says resolved. Brendon Baumgartner
03:57 PM Revision 1ce16cf3: Set net.inet.ip.dummynet sysctl. Fixes #10780
Viktor Gurov
03:16 PM pfSense Docs Correction #10778 (Closed): Feedback on Virtual LANs (VLANs) — pfSense VLAN Configuration
Cela a été corrigé, merci! Jared Dillard
02:53 PM pfSense Docs Correction #10778: Feedback on Virtual LANs (VLANs) — pfSense VLAN Configuration
Translation:
> I am submitting this capture for correction, as I noticed that the igb2 interface is chosen as the ... Jared Dillard
03:13 PM pfSense Docs Correction #10782 (Closed): Outdated pfSense logo is still in use
*Page:* https://docs.netgate.com/pfsense/en/latest/routing/static.html
*Feedback:* A couple diagrams still use the... Jared Dillard
03:06 PM pfSense Docs Correction #10777 (Closed): SG-1100 Product Page mentions HA support
I removed the reference to HA. Thanks! Jared Dillard
03:06 PM Revision 495bfb5d: DNS Resolver restart fix. Issue #10781
Viktor Gurov
01:21 PM Revision ab2c85f0: Disable BARNYARD option for snort
Renato Botelho
01:21 PM Revision 20e3cc08: Disable BARNYARD option for snort
Renato Botelho
10:40 AM Bug #10780 (Pull Request Review): net.inet.ip.dummynet.* values are ignored
Jim Pingle
06:37 AM Bug #10780: net.inet.ip.dummynet.* values are ignored
https://github.com/pfsense/pfsense/pull/4403
see also #6553 Viktor Gurov
06:34 AM Bug #10780 (Resolved): net.inet.ip.dummynet.* values are ignored
If you set any net.inet.ip.dummynet.* values on the System / Advanced / System Tunables page,
they are ignored becau... Viktor Gurov
10:10 AM Bug #10781 (Pull Request Review): Incorrect env variables if admin user logged in via ssh
Jim Pingle
10:08 AM Bug #10781: Incorrect env variables if admin user logged in via ssh
https://github.com/pfsense/pfsense/pull/4404 Viktor Gurov
09:41 AM Bug #10781 (Resolved): Incorrect env variables if admin user logged in via ssh
How to reproduce:
1. ssh in as *admin*@
2. menu entries 16/11
after that running 'echo <any_command> | su -m <an... Viktor Gurov
03:08 AM Bug #10584: SG-3100 with M.2: shutdown instead of reboot
ZTE MF833V USB LTE modem is also used.
reboot from single mode:
https://www.youtube.com/watch?v=1djHrVdG8tg
 Viktor Gurov

07/20/2020

05:40 PM Bug #9413 (Feedback): VLAN driver missing ALTQ support
ALTQ support committed to 2.5 branch.
Please test with the next snapshot. Luiz Souza
02:56 PM Bug #9647 (Resolved): hn0: driver does not support altq
Luiz Souza
02:02 PM pfSense Packages Bug #10775 (Pull Request Review): pfblockerNG SBL_ADs and hpHosts are not reachable anymore
Jim Pingle
03:57 AM pfSense Packages Bug #10775: pfblockerNG SBL_ADs and hpHosts are not reachable anymore
*Remove:*
Abuse Ransomware Tracker:... Viktor Gurov
01:46 AM pfSense Packages Bug #10775: pfblockerNG SBL_ADs and hpHosts are not reachable anymore
Comments:
https://forums.malwarebytes.com/topic/258056-hosts-filenet-domain-lists-are-broken-what-happened/
https:/... Viktor Gurov
02:01 PM pfSense Packages Feature #10769 (Pull Request Review): Prevent users from creating new ACMEv1 keys
Jim Pingle
12:59 PM Bug #9663 (Resolved): panic on boot when IPv6 option "Do not wait for a RA" is enabled
Renato Botelho
12:30 PM Bug #9663: panic on boot when IPv6 option "Do not wait for a RA" is enabled
I can confirm that the issue is gone with 2.5
Can be closed. Michael Geiger
12:02 PM pfSense Packages Feature #10779 (Resolved): HAProxy SSL/TLS Compatibility Mode
Allow to select SSL/TLS Compatibility Mode in the same manner as Squid SSL Proxy Compatibility Mode option.
Interm... Viktor Gurov
11:05 AM Bug #10772 (Not a Bug): Firewall Rules Lan to Floating Rules
This site is not for support or diagnostic discussion.
For assistance in solving problems, please post on the "Net... Jim Pingle
05:27 AM Bug #10772: Firewall Rules Lan to Floating Rules
Hi,
Wrong way, floating block rule have disconnect my lan rules.
D. V. David Verhaeghe
11:03 AM Bug #10776 (Feedback): filterlog: Loopback source/destination sometimes reports 127.0.0.1 as 127.0.01
Bertram,
Can you check and confirm that the form of the address you see in the log is not present on your interfac... Jim Pingle
10:46 AM Bug #10206: VIP alias-ip's disappear from nic (caused by running ifconfig twice.?.)
Jim Pingle wrote:
> FreeBSD dropped the /32 requirement years ago, though, and it's been working fine until recently... Ronald Schellberg
10:07 AM Bug #10206 (Feedback): VIP alias-ip's disappear from nic (caused by running ifconfig twice.?.)
FreeBSD dropped the /32 requirement years ago, though, and it's been working fine until recently. Still feels like a ... Jim Pingle
07:41 AM Bug #10206 (Not a Bug): VIP alias-ip's disappear from nic (caused by running ifconfig twice.?.)
Luiz Souza
07:40 AM Bug #10206: VIP alias-ip's disappear from nic (caused by running ifconfig twice.?.)
Louis van Breda wrote:
> Hello,
>
> Sometime I have the same verdict! If you see what happens during boot, things... Luiz Souza
07:37 AM Bug #10206: VIP alias-ip's disappear from nic (caused by running ifconfig twice.?.)
Ronald Schellberg wrote:
> I can reproduce it here
>
> @[2.5.0-DEVELOPMENT][root@Gateway.localdomain]/root: ifco... Luiz Souza
10:44 AM Bug #9577 (Resolved): radvd send_ra_forall failed on interface / can't join ipv6-allrouters
Jim Pingle
09:47 AM pfSense Docs Correction #10778 (Closed): Feedback on Virtual LANs (VLANs) — pfSense VLAN Configuration
*Page:* https://docs.netgate.com/pfsense/en/latest/book/vlan/pfsense-vlan-configuration.html
*Feedback:*
Bonj... DJIBRIL CISSE
04:55 AM Feature #9527 (Feedback): Add ability for LDAP extended query on groups in RFC2307 containers.
it works only if parent container is selected in the Authentication containers field, i.e.:
Authentication container... Viktor Gurov
01:07 AM Bug #8377 (Resolved): Traffic graph widget mouse over always shows b/s even when the value is in B/s
no such issue on 2.5,
seems to be fixed in #9072
 Viktor Gurov

07/19/2020

01:49 PM pfSense Docs Correction #10777 (Closed): SG-1100 Product Page mentions HA support
Product page for SG-1100 claims support for high-availability. This is a bullet point under the 'grows with you secti... Jordan G
01:37 PM Bug #10206: VIP alias-ip's disappear from nic (caused by running ifconfig twice.?.)
Hello,
Sometime I have the same verdict! If you see what happens during boot, things are beeing started *over and ... Louis B
10:35 AM Bug #10776 (Closed): filterlog: Loopback source/destination sometimes reports 127.0.0.1 as 127.0.01
I'm setting up remote logging of the pfSense filterlog to my ES server, and seems that some of the logs are failing t... Bertram Truong
05:48 AM pfSense Packages Bug #10775 (Resolved): pfblockerNG SBL_ADs and hpHosts are not reachable anymore
Following entries of pfblockerNG pkg are not reachable for a long time, we have some tickets and also I can see some ... Constantine Kormashev
03:55 AM pfSense Packages Bug #10692: PIMD starts twice at boot
As allready reported startup behavoir is not yet ok (pimd starting *5 times !!*). Hereby some info form today bootlog... Louis B

07/17/2020

03:42 PM Revision 14d2f872: Add a system option to handle the queue API usage in hn NICs.
A single queue is used in order to enable the ALTQ support, but some people may
prefer performance over the ALTQ feat... Luiz Souza
03:32 PM Revision b6d6cd61: 'hw.usb.no_pf' is deprecated now.
Luiz Souza
02:56 PM Revision 154a8854: Fix the repeated entries in loader.conf.
Ticket: #9647 Luiz Souza
02:10 PM pfSense Docs New Content #10774 (Resolved): Feedback on Installing and Upgrading — Upgrade Troubleshooting
*Page:* https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html
*Feedback:* Please include the hi... Bouke Henstra
12:52 PM Bug #10773 (Resolved): if_em VLAN interfaces wont pass traffic after reboot
Post the merge of the remote-tracking branch 'origin/stable/12' into devel-12 on Jun 12th. if_em0 interfaces wont pas... Steve Harrington
12:00 PM Bug #10206: VIP alias-ip's disappear from nic (caused by running ifconfig twice.?.)
I can reproduce it here
@[2.5.0-DEVELOPMENT][root@Gateway.localdomain]/root: ifconfig em0
em0: flags=8843<UP,BRO... Ronald Schellberg
11:34 AM Bug #10206 (Feedback): VIP alias-ip's disappear from nic (caused by running ifconfig twice.?.)
I can't reproduce any of the two reported issues with a current 2.5 snapshots.
Repeated ifconfig commands for add ... Luiz Souza
11:46 AM Bug #10745: crashes/panics in pfsense 2.4.x FreeBSD 11.x with enabled IPSec and ipv4 forwarding
Luiz Souza wrote:
> This fix is already merged in our tree.
>
> Thanks!
can you please specify in which versio... Igor G
10:49 AM Bug #10745 (Resolved): crashes/panics in pfsense 2.4.x FreeBSD 11.x with enabled IPSec and ipv4 forwarding
This fix is already merged in our tree.
Thanks! Luiz Souza
11:46 AM Bug #8380: OpenVPN RADIUS password length is not constant
seems related to #4521 Viktor Gurov
11:45 AM Bug #9647: hn0: driver does not support altq
Gitsynced, deleted all entries rebooted twice and it works.
Thanks. Greg M
11:14 AM Bug #9647: hn0: driver does not support altq
Sorry for the breakage, should be fixed now.
I couldn't reproduce the order issue, please let me know if this is s... Luiz Souza
11:25 AM Bug #10687 (Resolved): IPsec / CESA memory issue
Fix merged to 11 based branches.
As mentioned, this is not necessary for 2.5.
Marking as resolved. Luiz Souza
09:27 AM pfSense Packages Feature #10769: Prevent users from creating new ACMEv1 keys
https://github.com/pfsense/FreeBSD-ports/pull/908 Viktor Gurov
08:57 AM Bug #10772 (Not a Bug): Firewall Rules Lan to Floating Rules
"/firewall_rules.php?if=lan"
Hello, long time ago.
I create a rule in the Lan part admitting for example the port... David Verhaeghe
08:06 AM Feature #5461 (Resolved): Add RFC2307bis (LDAP) group membership support to user authentication
Resolved in #9527 Viktor Gurov
08:05 AM Feature #9527 (Resolved): Add ability for LDAP extended query on groups in RFC2307 containers.
works as expected on 2.5.0.a.20200716.1250
tested with FreeIPA server 4.8.4
Search example:... Viktor Gurov
07:32 AM Bug #9577: radvd send_ra_forall failed on interface / can't join ipv6-allrouters
Luiz Souza wrote:
> Fixed in FreeBSD, the port workaround is unnecessary now.
>
> Thanks for all the details Rona... Ronald Schellberg
07:00 AM pfSense Packages Bug #10768 (Rejected): Squidguard overwrites Advanced Config from Squid Proxy in HA Configurations
+ squidGuard doesn't remove Custom Options (Before Auth), Custom Options (After Auth) and Custom Options (SSL/MITM) Viktor Gurov
06:16 AM pfSense Packages Bug #10771 (Resolved): arpwatch: option to not send hourly email notification on cron run
dirty workaround by editing /usr/local/arpwatch/sendmail_proxy.php
< if (false !== $message) {
> if ((false !==... IT IGP
06:10 AM pfSense Packages Bug #10770 (Resolved): arpwatch: cannot remove email once it has been entered into settings
there is currently no way to disable email notifications once you have enabled them by entering a email adress. you s... IT IGP

07/16/2020

10:40 PM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
Luiz Souza wrote:
> Please test the new version (filterdns-2.0_4) and let me know if the problem persists.
This... Gavin Stewart
02:04 PM Revision fb5cd351: Merge pull request #4401 from vktg/binat6rdfix
Renato Botelho
11:33 AM pfSense Packages Bug #10768: Squidguard overwrites Advanced Config from Squid Proxy in HA Configurations
> If you are using a PFsense HA configuration with a virtual HA_IP, you have to add these HA virtual IP to the advanc... Viktor Gurov
10:47 AM pfSense Packages Bug #10768 (Rejected): Squidguard overwrites Advanced Config from Squid Proxy in HA Configurations
If you are using a PFsense HA configuration with a virtual HA_IP, you have to add these HA virtual IP to the advanced... Andreas Tillwicks
11:29 AM pfSense Packages Feature #10769 (Resolved): Prevent users from creating new ACMEv1 keys
It's better to prevent users from creating new ACMEv1 keys in order to avoid errors, such as:... Viktor Gurov
09:08 AM Feature #9527: Add ability for LDAP extended query on groups in RFC2307 containers.
See also #5461 Viktor Gurov
09:07 AM pfSense Packages Bug #10763 (Feedback): Incorrect link to frr_bgp.xml
PR has been merged. Thanks! Renato Botelho
09:07 AM pfSense Packages Feature #9913 (Feedback): Adding note Squid Traffic Managment Settings about feature limit
PR has been merged. Thanks! Renato Botelho
09:05 AM Feature #5461: Add RFC2307bis (LDAP) group membership support to user authentication
See https://redmine.pfsense.org/issues/9527#note-8 Viktor Gurov
09:04 AM Bug #10757 (Feedback): IPv6: NPt rules on 6rd enabled WAN interfaces don't get bound to wan_stf
PR has been merged. Thanks! Renato Botelho
07:24 AM Feature #4035 (Resolved): AutoConfigBackup - selective deletion of automatic and manual backups
Anonymous
07:15 AM Bug #9917 (Closed): Widget Refresh Logic Flawed
Anonymous
07:14 AM Bug #10733 (Resolved): return_gateways_array() is called too many times
Anonymous
02:39 AM pfSense Packages Bug #10692: PIMD starts twice at boot
I did retest today e.g. using a clean install. Still bizar how many times pimd is started and stopped during boot. On... Louis B
12:39 AM Bug #9647: hn0: driver does not support altq
After 2 reboots file looks like this:... Greg M
12:06 AM pfSense Packages Bug #10767 (Rejected): squidGuard still not upgrading
stop Squid service first,
then ... Viktor Gurov

07/15/2020

10:50 PM pfSense Packages Bug #10767 (Rejected): squidGuard still not upgrading
Just upgraded squid to 0.4.44_29, it did not confirm a successful upgrade as I am used to but after a reboot it showe... Marcel Beerli
05:40 PM Revision 6b9f638a: Fix syntax error.
Jim Pingle
01:43 PM Revision 2360abcc: Fix #9647.
Instead of forcing the defaults in the OS driver (introducing yet another
change), set the default to enable ALTQ sup... Luiz Souza
12:49 PM Revision a039347b: Merge pull request #4402 from vktg/bnxtaltq
Ticket: #10762
* 'bnxtaltq' of https://github.com/vktg/pfsense:
add Broadcom NetXtreme to ALTQ-capable list. Implem... Luiz Souza
12:42 PM Bug #9647: hn0: driver does not support altq
And some more info...
This does NOT work:
kern.cam.boot_delay=10000
kern.ipc.nmbclusters="1000000"
kern.ipc.n... Greg M
12:31 PM Bug #9647: hn0: driver does not support altq
It works.
But did few reboots and there are MANY same settings added to loader.conf
Additional syntax error occur... Greg M
09:00 AM Bug #9647 (Feedback): hn0: driver does not support altq
Applied in changeset commit:2360abcc392bcca1fb7c0a9126a37d77a0e8f03d. Luiz Souza
12:41 PM Bug #10766 (Resolved): Syntax error
Fixed in commit:6b9f638a7a9d1cb3bcdc8b9ae7e79d00949c6ab4 Jim Pingle
12:25 PM Bug #10766 (Resolved): Syntax error
https://forum.netgate.com/topic/155303/latest-snap-broken
 Greg M
11:04 AM Bug #10765 (New): Ampersands in ldap_extended_query are escaped twice
Hello,
I recently ran into an issue with an LDAP server whose Query field contained an ampersand.
The field is se... Louis Sautier
07:53 AM Feature #10762 (Feedback): add Broadcom NetXtreme to ALTQ-capable list
Committed. Thanks Viktor. Luiz Souza
07:40 AM Feature #10762 (Pull Request Review): add Broadcom NetXtreme to ALTQ-capable list
Jim Pingle
01:02 AM Feature #10762: add Broadcom NetXtreme to ALTQ-capable list
https://github.com/pfsense/pfsense/pull/4402 Viktor Gurov
12:38 AM Feature #10762 (Resolved): add Broadcom NetXtreme to ALTQ-capable list
After adding bnxt(4) driver to pfSense (see #9155),
it must be added to the ALTQ-capable list Viktor Gurov
07:48 AM pfSense Packages Feature #9913 (Pull Request Review): Adding note Squid Traffic Managment Settings about feature limit
Jim Pingle
07:19 AM pfSense Packages Feature #9913: Adding note Squid Traffic Managment Settings about feature limit
https://github.com/pfsense/FreeBSD-ports/pull/906 Viktor Gurov
07:41 AM pfSense Packages Bug #10763 (Pull Request Review): Incorrect link to frr_bgp.xml
Jim Pingle
02:24 AM pfSense Packages Bug #10763: Incorrect link to frr_bgp.xml
https://github.com/pfsense/FreeBSD-ports/pull/904 Viktor Gurov
02:22 AM pfSense Packages Bug #10763 (Resolved): Incorrect link to frr_bgp.xml
If you are trying to access the menu item Services / FRR BGP, for example, from Services / Snort / Interfaces,
you'l... Viktor Gurov
07:29 AM pfSense Packages Bug #10764 (Not a Bug): FRR 0.6.7_1 does not work
That message is not a bug, it's output from the FreeBSD package installation and can be ignored. If you have a proble... Jim Pingle
07:24 AM pfSense Packages Bug #10764 (Not a Bug): FRR 0.6.7_1 does not work
After update to FRR 0.6.7_1 ospf stop working
Message from frr7-7.3.1:
--
FRR's OSPF daemons tries to allocate... Ilian Cheneshev
06:37 AM pfSense Packages Bug #10445: BIND crashed when added RPZ. rpz is not a master or slave zone.
Typo fix:
https://github.com/pfsense/FreeBSD-ports/pull/905 Viktor Gurov
06:20 AM pfSense Packages Feature #10619: Various FRR enhancements
Ben Hughes wrote:
> Yes I had a look back at the FRR commit history and found only that as well.
>
> It will fai... Renato Botelho
06:01 AM Revision a92ec4b1: add Broadcom NetXtreme to ALTQ-capable list. Implements #10762
Viktor Gurov
12:34 AM Feature #9155: Add driver bnxt for Broadcom NetXtreme interfaces
tested on 2.5.0.a.20200709.1250:... Viktor Gurov

07/14/2020

02:04 PM pfSense Packages Feature #10619: Various FRR enhancements
Yes I had a look back at the FRR commit history and found only that as well.
It will fail to start complaining ab... Ben Hughes
01:12 PM pfSense Packages Feature #10619: Various FRR enhancements
Ben Hughes wrote:
> Argh i've had a bit of a freudian slip there, I meant @libunwind@.
What is the error you see ... Renato Botelho
11:48 AM pfSense Packages Feature #10619: Various FRR enhancements
Argh i've had a bit of a freudian slip there, I meant @libunwind@. Ben Hughes
11:47 AM pfSense Packages Feature #10619: Various FRR enhancements
Ben Hughes wrote:
> No problem, glad to get it in there!
>
> I've just been re-reviewing this looking forward to ... Renato Botelho
09:42 AM pfSense Packages Feature #10619: Various FRR enhancements
No problem, glad to get it in there!
I've just been re-reviewing this looking forward to getting off my custom pac... Ben Hughes
08:09 AM pfSense Packages Feature #10619 (Feedback): Various FRR enhancements
PR has been merged. Thanks! Renato Botelho
01:33 PM pfSense Packages Bug #10692: PIMD starts twice at boot
I just did a clean install (built on Tue Jul 14 09:23:16 EDT 2020) and PIMD 0.03 Significant issues left, but the boo... Louis B
01:26 PM Revision c271375e: 6RD/6to4 NAT rules fix. Issue #10757
Viktor Gurov
12:18 PM Revision 94be51d7: Merge pull request #4399 from vktg/dyndnsbackup
Renato Botelho
12:18 PM Revision b79526df: Merge pull request #4398 from vktg/limiterbackup
Renato Botelho
12:18 PM Revision d5cd602e: Merge pull request #4397 from vktg/cpvoucherrestore
Renato Botelho
11:37 AM Bug #9647: hn0: driver does not support altq
So I did some more digging...
Added /boot/loader.conf.local with contents:... Greg M
11:24 AM pfSense Packages Bug #10741 (Closed): Fails with CARP VIP Status - SQUID
Viktor Gurov
11:12 AM pfSense Packages Bug #10741: Fails with CARP VIP Status - SQUID
Thiago Orico wrote:
> adjusted the setting and it looks like it worked.
>
> We will monitor new tests.
Case so... Thiago Orico
09:27 AM Bug #10757 (Pull Request Review): IPv6: NPt rules on 6rd enabled WAN interfaces don't get bound to wan_stf
Jim Pingle
08:30 AM Bug #10757: IPv6: NPt rules on 6rd enabled WAN interfaces don't get bound to wan_stf
Fix:
https://github.com/pfsense/pfsense/pull/4401 Viktor Gurov
07:26 AM Bug #10757 (New): IPv6: NPt rules on 6rd enabled WAN interfaces don't get bound to wan_stf
pfctl creates binat rule only for the first binat rule interface, i.e.:... Viktor Gurov
07:31 AM Feature #3559: add option for backup ddns ( dynamic dns ) in restore area
thanks Luis Couto
07:19 AM Feature #3559 (Feedback): add option for backup ddns ( dynamic dns ) in restore area
PR has been merged. Thanks! Renato Botelho
07:19 AM Feature #4763 (Feedback): Restore from backup that contains only area Traffic Shaper doesn't restore Limiters
PR has been merged. Thanks! Renato Botelho
07:18 AM Bug #3128 (Feedback): Active voucher status not restored from backup
PR has been merged. Thanks! Renato Botelho
07:15 AM pfSense Packages Bug #10507 (Feedback): Unable to use forwarders
PR has been merged. Thanks! Renato Botelho
06:24 AM pfSense Packages Bug #10697 (Resolved): Missing New Line After NCP Parameter in Client Config
1.4.23_1, fixed:... Viktor Gurov
05:04 AM Bug #10730 (Resolved): Unable to use IDN symbols in DNS Resolver ACL
OK on 2.5.0.a.20200709.1250 Viktor Gurov
05:03 AM Bug #10742 (Resolved): unable to save DNS ACL in non-English interface
tested with Russian and French
works as expected on 2.5.0.a.20200709.1250 Viktor Gurov
04:59 AM Bug #9933 (Resolved): Captive Portal + Voucher not keeping auto-added "Pass-through MAC Auto Entry"
works as expected on 2.5.0.a.20200709.1250 Viktor Gurov
04:25 AM Bug #10724 (Resolved): Allowed Hostnames adds/deletes only one A entry
works as expected on 2.5.0.a.20200709.1250 Viktor Gurov

07/13/2020

08:35 PM pfSense Packages Feature #10421 (Resolved): suricata unix_stream support for telegraf
Jim Pingle
07:41 PM pfSense Packages Feature #10421: suricata unix_stream support for telegraf
Support for the requested feature has been added to the latest version of the Suricata GUI package, version 5.0.3. Th... Bill Meeks
08:35 PM pfSense Packages Bug #10751 (Resolved): Incorrect syslog() params on Suricata 5 pkg
Jim Pingle
07:39 PM pfSense Packages Bug #10751: Incorrect syslog() params on Suricata 5 pkg
This bug has been corrected in the latest version of the Suricata GUI package, version 5.0.3. The pull request has be... Bill Meeks
03:07 PM Revision c5c8893b: Add build_mask_rules for scheduler
before:
sched 7 config pipe 7 type fq_codel target 5ms interval 100ms quantum 300 limit 20480 flows 65535 noecn
afte... bonald
02:38 PM Revision 071c4ee8: Merge pull request #4395 from vktg/binatsrcfix
Renato Botelho
02:17 PM Bug #9577: radvd send_ra_forall failed on interface / can't join ipv6-allrouters
"One additional change FreeBSD-src that would make the #2878 Leave_group call unnecessary would be to eliminate the e... Ronald Schellberg
08:38 AM Bug #9577: radvd send_ra_forall failed on interface / can't join ipv6-allrouters
Don't know that anyone has noticed but the build system has stopped posting snaps since 7/9 00:50, which makes it mor... Ronald Schellberg
02:12 PM Feature #3559 (Pull Request Review): add option for backup ddns ( dynamic dns ) in restore area
Jim Pingle
02:11 PM Feature #4763 (Pull Request Review): Restore from backup that contains only area Traffic Shaper doesn't restore Limiters
Jim Pingle
02:10 PM Bug #3128 (Pull Request Review): Active voucher status not restored from backup
Jim Pingle
01:53 PM pfSense Packages Bug #10741: Fails with CARP VIP Status - SQUID
adjusted the setting and it looks like it worked.
We will monitor new tests. Thiago Orico
01:14 PM pfSense Packages Bug #10741: Fails with CARP VIP Status - SQUID
Symptoms persist.
Details:
inside the squid packet, the advanced rule of port 3128 of the proxy does not automa... Thiago Orico
10:31 AM Bug #10708: ZFS bootpool boot symlink issue
Reading this symlink issue I do remember that in the past days I did notice messages, indication that some files coul... Louis B
09:39 AM Bug #10752 (Feedback): 1:1 NAT issue if Internal IP has VIPs
PR has been merged. Thanks! Renato Botelho
08:29 AM Feature #10748 (Pull Request Review): Add support for limiting IPsec VPN access per user group via RADIUS
Jim Pingle
08:29 AM Bug #10758: Group Authentication is never used
If I remember right, it was used with the old Racoon IPsec implementation and may have been left out when we moved to... Jim Pingle
08:04 AM Bug #10755 (Rejected): NAT rules not updating.
I can't reproduce this. If the user had selected "<interface name> address" e.g. "WAN Address" in the rules, the conf... Jim Pingle
06:19 AM Bug #9796: kernel panic after removing interfaces
Hello,
I have crashes when switching interfaces off and on again. Especially when pimd is installed. That might be... Louis B
02:14 AM Feature #6544: RFC 3046 DHCP Option 82 support (and RFC 3315/4649/4580 for IPv6)
comment from https://forum.netgate.com/topic/64792/usd-50-dhcp-option-82-on-status_dhcp_leases-php-page/12:
Please s... Viktor Gurov

07/12/2020

02:07 PM pfSense Packages Feature #10761: Multiple domains in one SAN entry would be very useful
Thanks Jim, I used the wrong terminology re domains/SANs.
The intention is still valid - would be good to have a s... Eduard Rozenberg
12:57 PM pfSense Packages Feature #10761 (Rejected): Multiple domains in one SAN entry would be very useful
That's not how Let's Encrypt/ACME works. Let's Encrypt must verify all entries separately. There is no way to put all... Jim Pingle
12:48 PM pfSense Packages Feature #10761: Multiple domains in one SAN entry would be very useful
For now I just gave up and used a wildcard, let the hackers have at it. Eduard Rozenberg
12:46 PM pfSense Packages Feature #10761: Multiple domains in one SAN entry would be very useful
I was referring to multiple domains inside a *single* SAN - otherwise the same DNS keys, API tokens, etc are copied m... Eduard Rozenberg
12:40 PM pfSense Packages Feature #10761: Multiple domains in one SAN entry would be very useful
Hello -
Please post to the forum for assistance. There is an ACME-specific category at https://forum.netgate.com/c... Chris Linstruth
12:22 PM pfSense Packages Feature #10761 (Rejected): Multiple domains in one SAN entry would be very useful
In the Domain SAN list, I'm not currently able to add multiple domains in the 'Domainname' box, for ex. cannot use:
... Eduard Rozenberg

07/11/2020

10:46 PM Bug #9796: kernel panic after removing interfaces
There's been some activity around miniupnpd over on #7727. There's a new version built in now, wonder if this could h... → luckman212
04:54 PM Revision fb3b20c3: Backup/Restore DynDNS. Implements #3559
Viktor Gurov
04:53 PM pfSense Packages Bug #10760: pfSense BIND 9.14.12 server terminates due to assertion failure
Secondary question, is there is method to configure pfSense to auto-restart named on failure? Jeffrey Altman
04:34 PM pfSense Packages Bug #10760: pfSense BIND 9.14.12 server terminates due to assertion failure
The assertion failure is in ns_client_error() which means that its impossible to file a reasonable report upstream wi... Jeffrey Altman
04:02 PM pfSense Packages Bug #10760 (New): pfSense BIND 9.14.12 server terminates due to assertion failure
BIND is periodically terminating and not automatically restarted. The system log shows:
Jul 6 13:13:21 named 6... Jeffrey Altman
04:49 PM Revision b9d689e7: Backup/restore Limiters. Implements #4763
Viktor Gurov
03:43 PM Feature #855: Ability to selectively kill states on gateway recovery
+1 - this is a badly needed feature with multi WAN where one connection is truly a "backup only" connection. High co... Marc H
03:38 PM Revision f21d4f79: Active voucher restore from backup. Implements #3128
Viktor Gurov
12:51 PM pfSense Packages Feature #6831: Snort does not support aliases containing FQDN
It can be a one-time name resolution, like HAproxy ACL (network/url/urltable aliases),
see #9793 for example Viktor Gurov
12:33 PM pfSense Packages Bug #10647 (Resolved): FRR BGP Advanced > Aggregated Addresses ignores ipv6 subnets
works as expected:... Viktor Gurov
12:24 PM pfSense Packages Feature #10618 (Resolved): Set sysDescr the same as bsnmpd unless overriden with net-snmp
works as expected:... Viktor Gurov
11:54 AM Feature #3559: add option for backup ddns ( dynamic dns ) in restore area
https://github.com/pfsense/pfsense/pull/4399 Viktor Gurov
11:51 AM Feature #4763: Restore from backup that contains only area Traffic Shaper doesn't restore Limiters
Backup/restore Limiters:
https://github.com/pfsense/pfsense/pull/4398 Viktor Gurov
10:50 AM Bug #3128: Active voucher status not restored from backup
https://github.com/pfsense/pfsense/pull/4397 Viktor Gurov
10:09 AM Bug #10759: HSFC traffic shaper error
Sorry didn`t see it.
Gitsynced and it`s working just fine.
But still cant use it because of https://redmine.pfs... Greg M
07:06 AM Bug #10759 (Rejected): HSFC traffic shaper error
Fixed in https://redmine.pfsense.org/issues/1353#note-9
Please wait for the next snapshot Viktor Gurov
06:45 AM Bug #10759 (Rejected): HSFC traffic shaper error
Hi!
Version:
2.5.0-DEVELOPMENT (amd64)
built on Thu Jul 09 01:01:26 EDT 2020
FreeBSD 12.1-STABLE
Create new ... Greg M
10:08 AM Bug #9647: hn0: driver does not support altq
Hi!
Is there anything else to try? Greg M
07:46 AM pfSense Packages Bug #10749: squid + captive portal authentication not working
I have same problem (WPAD + explicit Squid with Captive Portal authentication) since I update pfSense to 2.4.5 and sq... Christophe PLUMEL
06:06 AM Feature #10545: RADIUS authenticated users should be able to log in via ssh
see also #935 Viktor Gurov
05:24 AM Feature #10748: Add support for limiting IPsec VPN access per user group via RADIUS
Relates to #935, which was apparently already requested 10 years ago, and implemented 5 years ago, but then got lost ... Yury Zaytsev
05:05 AM Feature #10748: Add support for limiting IPsec VPN access per user group via RADIUS
https://github.com/pfsense/pfsense/pull/4396 Viktor Gurov
04:08 AM Feature #10756 (Closed): Captive Portal Active Vouchers Restore
dup of #3128 Viktor Gurov
02:32 AM Feature #10756 (Closed): Captive Portal Active Vouchers Restore
https://forum.netgate.com/topic/152863/captive-portal-active-card-restore-100/
i want to restore active cards to be ... Viktor Gurov
03:48 AM Bug #10758 (Closed): Group Authentication is never used
IPsec / Mobile Clients -> 'Group Authentication' is never used on the 2.4.5-p1 or 2.5 pfSense:... Viktor Gurov
03:18 AM Bug #10757 (Rejected): IPv6: NPt rules on 6rd enabled WAN interfaces don't get bound to wan_stf
Fixed in #7142 Viktor Gurov
02:53 AM Bug #10757 (Resolved): IPv6: NPt rules on 6rd enabled WAN interfaces don't get bound to wan_stf
I believe there is a bug in the handling of NPt rules when they need to be applied to 6rd enabled interfaces (which a... Adam Risoldi

07/10/2020

07:40 PM Bug #10755 (Rejected): NAT rules not updating.
if I restore the configuration from old file , translation address (Outbound NAT rules) will be the wan address of ol... Alhusein Zawi
07:26 PM Bug #10754 (Rejected): NAT rules not updating.
Will be re-done. Chris Linstruth
07:05 PM Bug #10754 (Rejected): NAT rules not updating.
if I restore the configuration from old file , translation address (Outbound NAT rules) will be the wan address of ol... Alhusein Zawi
06:40 PM Revision 3a0b772f: Merge pull request #4394 from vktg/get_interface_subnet_fix
Renato Botelho
06:39 PM Revision a32a5230: Merge pull request #4393 from vktg/cpidn
Renato Botelho
06:39 PM Revision 43d47ed6: Merge pull request #4392 from Rooke/google-stadia-wiz
Renato Botelho
06:38 PM Revision 79e8fe7e: Merge pull request #4391 from vktg/dhcp6leasesprefixpage
Renato Botelho
06:38 PM Revision 0f0c406a: Merge pull request #4384 from vktg/hwchksumrebootnotify
Renato Botelho
06:37 PM Revision 75cd7b7d: Merge pull request #4389 from vktg/unboundidnacl
Renato Botelho
06:37 PM Revision 388f9d64: Merge pull request #4388 from vktg/limmbits
Renato Botelho
06:36 PM Revision 2365982c: Merge pull request #4387 from vktg/priqonlychk
Renato Botelho
06:36 PM Revision a2910d05: Merge pull request #4386 from vktg/captivednsmultiip
Renato Botelho
06:35 PM Revision f390a3f3: Merge pull request #4383 from vktg/gwdownpolfix
Renato Botelho
06:35 PM Revision cfb78e2d: Fix unparenthesized expression deprecation notice
Renato Botelho
06:33 PM Revision 75307f69: Merge pull request #4381 from vktg/voucherconlogopt
Renato Botelho
06:32 PM Revision a71671f4: Merge pull request #4382 from vktg/wizardipv6dns
Renato Botelho
04:47 PM Revision 2922c1d1: 1:1 NAT net fix. Issue #10752
Viktor Gurov
02:46 PM Bug #10740 (Resolved): Console menu shows static subnet for dhcp connections.
Yup that got it!... Steve Wheeler
01:40 PM Bug #10740 (Feedback): Console menu shows static subnet for dhcp connections.
PR has been merged. Thanks! Renato Botelho
07:48 AM Bug #10740 (Pull Request Review): Console menu shows static subnet for dhcp connections.
Jim Pingle
06:56 AM Bug #10740: Console menu shows static subnet for dhcp connections.
Fix:
https://github.com/pfsense/pfsense/pull/4394 Viktor Gurov
02:24 PM Bug #10752 (Pull Request Review): 1:1 NAT issue if Internal IP has VIPs
Jim Pingle
11:54 AM Bug #10752: 1:1 NAT issue if Internal IP has VIPs
https://github.com/pfsense/pfsense/pull/4395 Viktor Gurov
11:30 AM Bug #10752 (Resolved): 1:1 NAT issue if Internal IP has VIPs
If you set 'Internal IP' on the firewall_nat_1to1_edit.php to net (OPT1 net, for example)
and OPT1 interface has any... Viktor Gurov
02:12 PM pfSense Packages Bug #10330 (Feedback): BIND zone configuration displays wrong DS resource record with inline DNSSEC signing enabled
PR has been merged. Thanks! Renato Botelho
02:12 PM pfSense Packages Bug #10445 (Feedback): BIND crashed when added RPZ. rpz is not a master or slave zone.
PR has been merged. Thanks! Renato Botelho
02:12 PM pfSense Packages Bug #10506 (Feedback): Recursion not working on fresh BIND install
PR has been merged. Thanks! Renato Botelho
02:12 PM pfSense Packages Bug #7271 (Feedback): Co-existence of unbound and BIND/named
PR has been merged. Thanks! Renato Botelho
02:04 PM pfSense Packages Bug #10692 (Feedback): PIMD starts twice at boot
PR has been merged. Thanks! Renato Botelho
02:02 PM pfSense Packages Feature #10725 (Feedback): Squid disable multiple login sessions
PR has been merged. Thanks! Renato Botelho
02:01 PM pfSense Packages Bug #10737 (Feedback): FRR attempts to cycle IPsec VTI interfaces even when disabled/not running
PR has been merged. Thanks! Renato Botelho
02:00 PM pfSense Packages Bug #10656 (Feedback): Acme letsencrypt doesn't change private key type
PR has been merged. Thanks! Renato Botelho
01:39 PM Feature #10747 (Feedback): Captive Portal IDN hostname support
PR has been merged. Thanks! Renato Botelho
07:46 AM Feature #10747 (Pull Request Review): Captive Portal IDN hostname support
Jim Pingle
03:17 AM Feature #10747: Captive Portal IDN hostname support
https://github.com/pfsense/pfsense/pull/4393 Viktor Gurov
01:12 AM Feature #10747 (Resolved): Captive Portal IDN hostname support
Currently it's not possible to add IDN hostnames on the 'Allowed Hostnames' tab Viktor Gurov
01:39 PM Feature #10743 (Feedback): Traffic shaper wizard: Add Google Stadia port range
PR has been merged. Thanks! Renato Botelho
01:38 PM Bug #7443 (Feedback): Issues Creating IPv6 Static Mappings
PR has been merged. Thanks! Renato Botelho
01:38 PM Feature #3031 (Feedback): Message is false after changing Hardware Checksum Offloading setting
PR has been merged. Thanks! Renato Botelho
01:37 PM Bug #10730 (Feedback): Unable to use IDN symbols in DNS Resolver ACL
PR has been merged. Thanks! Renato Botelho
01:37 PM Feature #10727 (Feedback): Limiter bw type in Mbit/s
PR has been merged. Thanks! Renato Botelho
01:37 PM Bug #1353 (Feedback): Number of queues possible
PR has been merged. Thanks! Renato Botelho
01:36 PM pfSense Packages Feature #10753: Acme DNS-01 for Hurricane Electric needs to be updated for new dynamic update methods
Thanks for the insight. I've opened https://github.com/acmesh-official/acme.sh/issues/3038 which will hopefully lead... Howard Holm
12:55 PM pfSense Packages Feature #10753: Acme DNS-01 for Hurricane Electric needs to be updated for new dynamic update methods
Has the new method been updated in acme.sh upstream? ( https://github.com/acmesh-official/acme.sh ) -- If not, it mus... Jim Pingle
12:48 PM pfSense Packages Feature #10753 (Closed): Acme DNS-01 for Hurricane Electric needs to be updated for new dynamic update methods
Hurricane Electric has added (as of two days ago - see http://dns.he.net) dynamic DNS support for TXT records allow f... Howard Holm
01:36 PM Bug #10724 (Feedback): Allowed Hostnames adds/deletes only one A entry
PR has been merged. Thanks! Renato Botelho
01:35 PM Bug #10716 (Feedback): Policy routing rules are not written correctly for a down gateway
PR has been merged. Thanks! Renato Botelho
01:35 PM Feature #9432 (Feedback): Block additional Captive Portal Logins
PR has been merged. Thanks! Renato Botelho
01:32 PM Bug #10720 (Feedback): Setup Wizard DNS Server validation JavaScript incorrectly claims IPv6 address is invalid
PR has been merged. Thanks! Renato Botelho
01:30 PM Bug #10750: (vlan)interfaces not properly handled in relation multicast (e.g. triggered by pimd)
The correct place for this is the forum, not a bug report. Keep it on the forum. Opening issues without concrete info... Jim Pingle
01:03 PM Bug #10750: (vlan)interfaces not properly handled in relation multicast (e.g. triggered by pimd)
Jim,
This is not the first time you make me angry! You consequently refuse to accept issues which are clearly the... Louis B
12:55 PM Bug #10750 (Rejected): (vlan)interfaces not properly handled in relation multicast (e.g. triggered by pimd)
Please keep these kinds of things on the forum until a more definite issue can be identified here. Far too much specu... Jim Pingle
08:35 AM Bug #10750 (Rejected): (vlan)interfaces not properly handled in relation multicast (e.g. triggered by pimd)
Hello,
As known I try to get pimd running, but up to now that does not work. Interfaces are not treated correctly ... Louis B
11:55 AM Revision e5c60be1: get_interface_subnet() improvement. Fixes #10740
Viktor Gurov
10:11 AM pfSense Packages Bug #10751: Incorrect syslog() params on Suricata 5 pkg
Fix:
https://github.com/pfsense/FreeBSD-ports/pull/899 Viktor Gurov
09:58 AM pfSense Packages Bug #10751 (Resolved): Incorrect syslog() params on Suricata 5 pkg
If you don't select any rules for the interface and click the "Save" button:... Viktor Gurov
09:08 AM Bug #8013: IPsec MSS clamping value shared for IPv4 and IPv6
See also #10493 Viktor Gurov
08:15 AM Revision 5e3ed2be: Captive Portal IDN hostname support. Implements #10747
Viktor Gurov
07:45 AM pfSense Packages Feature #10746 (Rejected): FRR OSPF network
What you describe is already possible in the current FRR GUI.
This site is not for support or diagnostic discussio... Jim Pingle
06:35 AM pfSense Packages Bug #10749 (Resolved): squid + captive portal authentication not working
https://forum.netgate.com/topic/155148/squid-captive-portal-authentication:
Since the last update (2.4.5-RELEASE-p1)... Viktor Gurov
06:13 AM Feature #10748 (Resolved): Add support for limiting IPsec VPN access per user group via RADIUS
Hello,
We've set up an IPsec VPN for road warriors with RADIUS auth, but, unfortunately, it seems that there is cu... Yury Zaytsev
05:53 AM Bug #10713: assigning a virtual IPv6 IP to an interface that has IPv6 PD track interface enabled makes the Virtual IP the primary IP after reboot
@Louis
The "corresponding application" here would be the DHCPv6 relay that forwards to a DHCPv6 server that gives ... Robby Moeyaert
02:30 AM Bug #10713: assigning a virtual IPv6 IP to an interface that has IPv6 PD track interface enabled makes the Virtual IP the primary IP after reboot
I do not understand this remark. Muliple address are only relevant (I think) if there are related to corresponding ap... Louis B
01:14 AM Bug #3128 (New): Active voucher status not restored from backup
still an issue,
as a workaround '/var/db/voucher_*.db' files can be backed up,
See https://forum.netgate.com/topic/... Viktor Gurov

07/09/2020

11:54 PM pfSense Packages Feature #10746 (Rejected): FRR OSPF network
Add feature to specify which network should be adverting to OSPF .
if I choose Route Redistribution (such as Conne... Alhusein Zawi
04:04 PM Bug #10745 (Resolved): crashes/panics in pfsense 2.4.x FreeBSD 11.x with enabled IPSec and ipv4 forwarding
please this forum thread:
https://forum.netgate.com/topic/151329/pfsense-active-carp-member-crashed-aesni_process-c... Igor G
01:18 PM Revision 05a15216: Add Google Stadia ports to traffic shaper wizard
- According to https://support.google.com/stadia/answer/9595943?hl=en-CA Google Stadia uses "traffic on ports in the ... Mike Rooke
01:13 PM Revision 417c2438: Match case of button text put through gettext in unbound ACL save. Fixes #10742
(cherry picked from commit 7da6d332599d01b058740d9c8f48642a63c04e6d) Jim Pingle
01:12 PM Revision 7da6d332: Match case of button text put through gettext in unbound ACL save. Fixes #10742
Jim Pingle
01:08 PM Revision aa97d3a0: DHCPv6 Leases prefix display fix. Issue #7443
Viktor Gurov
10:49 AM pfSense Packages Bug #10741: Fails with CARP VIP Status - SQUID
Viktor Gurov wrote:
> squid pkg 0.4.44_28 on 2.4.5-p1 (clean install) - no such issue, HA works as expected
> it se... Thiago Orico
05:09 AM pfSense Packages Bug #10741: Fails with CARP VIP Status - SQUID
squid pkg 0.4.44_28 on 2.4.5-p1 (clean install) - no such issue, HA works as expected
it seems something incorrect i... Viktor Gurov
10:15 AM Bug #10744: Unable to kill IPv6 client connection
The same with IPv4 client
outdated ajax code?
tested on Chromium 80.0.3987.162 and Firefox 68.10.0esr (Debian 10) Viktor Gurov
09:43 AM Bug #10744 (Closed): Unable to kill IPv6 client connection
Unable to kill client connection on status_openvpn.php page if it's connected via IPv6,
'Kill client connection' but... Viktor Gurov
09:15 AM Bug #10742: unable to save DNS ACL in non-English interface
Applied in changeset commit:7da6d332599d01b058740d9c8f48642a63c04e6d. Jim Pingle
09:02 AM Bug #10742 (Feedback): unable to save DNS ACL in non-English interface
I pushed a fix for this, it will show up once the repos sync in a bit. Jim Pingle
08:12 AM Bug #10742 (In Progress): unable to save DNS ACL in non-English interface
Jim Pingle
02:05 AM Bug #10742 (Resolved): unable to save DNS ACL in non-English interface
https://forum.netgate.com/topic/153501/resolved-but-there-is-a-bug-in-the-french-interface-dns-resolver-and-access-li... Viktor Gurov
08:39 AM Feature #10743 (Pull Request Review): Traffic shaper wizard: Add Google Stadia port range
PR: https://github.com/pfsense/pfsense/pull/4392 Jim Pingle
08:17 AM Feature #10743 (Resolved): Traffic shaper wizard: Add Google Stadia port range
This feature adds support in the traffic shaping wizard for the port range used by Google Stadia. According to https:... Mike Rooke
08:16 AM Bug #7443 (Pull Request Review): Issues Creating IPv6 Static Mappings
Jim Pingle
08:14 AM Bug #7443: Issues Creating IPv6 Static Mappings
Daryl Morse wrote:
> There are a few issues creating IPv6 static mappings.
> ..
>
> However, Status / DHCPv6 Lea... Viktor Gurov
08:12 AM Bug #9577 (Feedback): radvd send_ra_forall failed on interface / can't join ipv6-allrouters
Fixed in FreeBSD, the port workaround is unnecessary now.
Thanks for all the details Ronald. Luiz Souza
07:59 AM pfSense Packages Bug #10737 (Pull Request Review): FRR attempts to cycle IPsec VTI interfaces even when disabled/not running
Jim Pingle
01:29 AM pfSense Packages Bug #10737: FRR attempts to cycle IPsec VTI interfaces even when disabled/not running
Fix:
https://github.com/pfsense/FreeBSD-ports/pull/897 Viktor Gurov
07:55 AM pfSense Packages Todo #10419 (Closed): Update haproxy ports
Jim Pingle
03:07 AM pfSense Packages Todo #10419: Update haproxy ports
All works fine on 2.0.14 DRago_Angel [InV@DER]
07:30 AM Revision 5d882f71: Reboot message after changing Hardware Checksum Offloading setting. Implements #3031
Viktor Gurov
03:55 AM Bug #10726: Sticky-connections option is bugged - sticky-address cannot be redefined
https://github.com/pfsense/FreeBSD-src/blob/devel-12/sbin/pfctl/parse.y#L4133-L4137:... Viktor Gurov
02:50 AM Feature #10723: Disable "Hardware Checksum Offloading" if VM is detected
Jim Pingle wrote:
> See my note on the PR, but that seems far too broad/general. It should only be disabled on the s... Viktor Gurov

07/08/2020

10:12 PM pfSense Packages Bug #10741 (Closed): Fails with CARP VIP Status - SQUID
Tests with CARP protocol, using CARP VIP option Squid status activated, the CARP IP type does not assume in the secon... Thiago Orico
08:24 AM Bug #10740 (Resolved): Console menu shows static subnet for dhcp connections.
The interfaces list shown in the console will show a subnet value from the config file if it is present for a DHCP co... Steve Wheeler
05:04 AM pfSense Packages Feature #10739 (Feedback): Update HAproxy-devel package to 2.2 and HAproxy to 2.0
Announced new stable version of HAproxy 2.2: https://www.haproxy.com/blog/announcing-haproxy-2-2/
There is bunch of ... DRago_Angel [InV@DER]
12:36 AM Bug #6370: IPSEC bound to WAN gateway group and Dynamic DNS doesn't to fail back tunnel to WAN on DDNS update
This is a real problem when backup WAN is a high cost or low capacity link such as LTE/3G mobile. The objective is t... Marc H

07/07/2020

11:51 PM pfSense Packages Bug #10738 (Duplicate): ipsec apply issue
Duplicate of #10737 (and #10736) Jim Pingle
08:28 PM pfSense Packages Bug #10738 (Duplicate): ipsec apply issue
Note: I suspect this is related to the fix for bug #10351 or related to the bug itself however it is marked resolved.... Andrew Johnson
06:43 PM Feature #9536: Support dynamic prefix in DHCPv6 Server
This would be a very useful feature.
The prefix delegations handed out by the DHCPv6 Server are currently static o... Steve Wheeler
02:44 PM Bug #10736: Phase 2 VTI mode, causes GUI to time out.
This is actually an FRR bug, not a VTI bug. Moved to #10737 Jim Pingle
02:14 PM Bug #10736 (Not a Bug): Phase 2 VTI mode, causes GUI to time out.
I can't reproduce this as stated on 2.4.5-p1 amd64. I can create a VTI P2 and then make other actions in the GUI on t... Jim Pingle
09:34 AM Bug #10736 (Not a Bug): Phase 2 VTI mode, causes GUI to time out.
After creating a phase 2 in VTI mode, all other changes related to the IPsec setup causes GUI to timeout.
Changes ... Danilo Zrenjanin
02:43 PM pfSense Packages Bug #10737 (Resolved): FRR attempts to cycle IPsec VTI interfaces even when disabled/not running
If FRR is installed but disabled or otherwise not running, @frr_ipsec_reload()@ will still attempt to send an FRR con... Jim Pingle
01:21 PM Bug #10730 (Pull Request Review): Unable to use IDN symbols in DNS Resolver ACL
Jim Pingle
01:20 PM pfSense Packages Bug #7271 (Pull Request Review): Co-existence of unbound and BIND/named
Jim Pingle
01:12 PM pfSense Packages Bug #10507 (Pull Request Review): Unable to use forwarders
Jim Pingle
01:07 PM pfSense Packages Bug #10506 (Pull Request Review): Recursion not working on fresh BIND install
Jim Pingle
12:57 PM pfSense Packages Bug #10445 (Pull Request Review): BIND crashed when added RPZ. rpz is not a master or slave zone.
Jim Pingle
12:56 PM pfSense Packages Bug #10330 (Pull Request Review): BIND zone configuration displays wrong DS resource record with inline DNSSEC signing enabled
Jim Pingle
12:50 PM Bug #10542: Exclamation marks in the description field of a floating rule result in a filter reload error.
That makes sense, many parsers treat @\@ at the end of a line as an instruction to join it with the following line.
... Jim Pingle
12:46 PM Feature #10727 (Pull Request Review): Limiter bw type in Mbit/s
Jim Pingle
12:45 PM Bug #1353 (Pull Request Review): Number of queues possible
Jim Pingle
12:43 PM pfSense Packages Feature #10725 (Pull Request Review): Squid disable multiple login sessions
Jim Pingle
12:29 PM pfSense Packages Bug #10692 (Pull Request Review): PIMD starts twice at boot
Jim Pingle
12:19 PM Bug #10724 (Pull Request Review): Allowed Hostnames adds/deletes only one A entry
Jim Pingle
12:16 PM Feature #10723 (Pull Request Review): Disable "Hardware Checksum Offloading" if VM is detected
See my note on the PR, but that seems far too broad/general. It should only be disabled on the specific platforms whe... Jim Pingle
12:13 PM Feature #3031 (Pull Request Review): Message is false after changing Hardware Checksum Offloading setting
Jim Pingle
12:09 PM Bug #10716 (Pull Request Review): Policy routing rules are not written correctly for a down gateway
Jim Pingle
10:01 AM Bug #10720 (Pull Request Review): Setup Wizard DNS Server validation JavaScript incorrectly claims IPv6 address is invalid
Jim Pingle
08:51 AM Bug #10734 (Rejected): PFsense don't use wrong proposals
It must be in your settings but there is not nearly enough information to say for sure.
This site is not for suppo... Jim Pingle
07:57 AM Bug #10735 (Not a Bug): Track Interface for 2nd LAN IPv6 Fails
There is no bug. Your WAN interface delegation size setting is wrong.
This site is not for support or diagnostic d... Jim Pingle
04:21 AM Bug #10735 (Not a Bug): Track Interface for 2nd LAN IPv6 Fails
Virtualbox running PfSense 2.5.0 latest
Setup IPv6 on LAN1 to TrackInterface - only option allowed is 0 for IPv6 pre... Rick McGonegal

07/06/2020

10:39 PM Bug #10734 (Rejected): PFsense don't use wrong proposals
Hello.
I use pfsense + miktorik
Configured IPSec (v1):
phase 1 int L2TP 10.100.0.132 main 3DES SHA1 2 (10... DeeZ A
07:55 PM Revision 1cf01478: Revise default gateway handling for speed
Steve Beaver
03:43 PM Feature #10728: Request - widen the columns in VPN > IPSEC > Status > Overview
See #9979 Jim Pingle
03:41 PM Feature #10728 (Closed): Request - widen the columns in VPN > IPSEC > Status > Overview
That page has already been redesigned on 2.5.0 with less columns and this is most likely no longer an issue there.
... Jim Pingle
03:25 PM Bug #10722 (Duplicate): Update jQuery to 3.5.1
Already done: #10676 Jim Pingle
02:44 PM Revision a2ec7b0a: Move gateway interface friendly name functionality to gwlb.inc
Steve Beaver
02:39 PM Bug #8502: main (top) menu items do not drop down in some cases
FYI- This no longer affects the IPsec Profile Wizard package as of v 1.0, since it has been changed to use a traditio... Jim Pingle
02:39 PM pfSense Packages Bug #10003: Visiting VPN > Apple IPsec Profile renders the navigation dropdown buttons useless
FYI- This is now moot on IPsec Profile Wizard pkg v 1.0, since it has been changed to use a traditional GUI page and ... Jim Pingle
01:33 PM Bug #10733 (Resolved): return_gateways_array() is called too many times
This is a large and expensive function which really only needs to be called once on loading the page, not eight times... Anonymous
10:16 AM Bug #9270: "Remove all states to and from the filtered address" does not remove all states
@jim This is very annoying bug and makes troubleshooting more difficult. Any chance to address it in the next point ... Yuri Weinstein
05:56 AM Bug #9577: radvd send_ra_forall failed on interface / can't join ipv6-allrouters
Hi,
I installed the patch and a lot of messages where gone. What was in the log after reboot is
Jul 6 12:31:08 pf... Louis B
05:41 AM Feature #10732 (New): Warning banner for secondary HA node
It would be good if the secondary HA node has a banner with a warning all management actions have to be performed on ... Constantine Kormashev
05:38 AM Feature #10731 (New): XML-sync primary/secondary config flag
To prevent XML-sync misconfiguring on a HA cluster, it would be good to make a config flag that can be used for disti... Constantine Kormashev

07/05/2020

04:13 PM Revision 1b54754b: IDN symbols in DNS Resolver ACL. Fixes #10730
Viktor Gurov
02:14 PM Feature #9717: Search box for pfsense ?
I would also like to suggest a search function be added to the PFsense GUI.
Perhaps right on the top menu should be ... Tony Burns
11:14 AM Bug #10730: Unable to use IDN symbols in DNS Resolver ACL
https://github.com/pfsense/pfsense/pull/4389 Viktor Gurov
11:08 AM Bug #10730 (Resolved): Unable to use IDN symbols in DNS Resolver ACL
https://forum.netgate.com/topic/153501/dns-resolver-and-access-list-access-list-entry-is-not-saved:
It's the first t... Viktor Gurov
11:04 AM pfSense Packages Bug #10688 (Resolved): Remove Zabbix 4.2 ports
removed from 2.4 and 2.5 repo Viktor Gurov
10:59 AM pfSense Packages Bug #9813 (Resolved): Fails saving accountkeys if name contains non-English characters
Fixed in #10442 Viktor Gurov
10:55 AM pfSense Packages Bug #7271: Co-existence of unbound and BIND/named
https://github.com/pfsense/FreeBSD-ports/pull/896 Viktor Gurov
10:40 AM pfSense Packages Bug #8254 (Resolved): BIND, Register DHCP static mappings and Subzones
no such issue with 9.16_1, https://github.com/pfsense/FreeBSD-ports/blob/devel/dns/pfSense-pkg-bind/files/usr/local/p... Viktor Gurov
10:14 AM pfSense Packages Bug #10507: Unable to use forwarders
Fix:
https://github.com/pfsense/FreeBSD-ports/pull/895 Viktor Gurov
07:51 AM Bug #10716: Policy routing rules are not written correctly for a down gateway
Tested the new patch with gateway group rules again 2.4.5p1. Seems to work as expected in all conditions.
Tested g... Steve Wheeler
06:55 AM pfSense Packages Bug #10506: Recursion not working on fresh BIND install
fix:
https://github.com/pfsense/FreeBSD-ports/pull/894 Viktor Gurov
06:10 AM pfSense Packages Bug #10445: BIND crashed when added RPZ. rpz is not a master or slave zone.
Fixes:
https://github.com/pfsense/FreeBSD-ports/pull/893 Viktor Gurov
02:52 AM pfSense Packages Bug #10330: BIND zone configuration displays wrong DS resource record with inline DNSSEC signing enabled
Fix:
https://github.com/pfsense/FreeBSD-ports/pull/892 Viktor Gurov
01:12 AM Bug #10729 (New): Certificate verification failed for pkg.freebsd.org
https://forum.netgate.com/topic/155037/pkg-add-authentication-error-connecting-to-pkg-freebsd-org-let-s-encrypt-cert:... Viktor Gurov
12:40 AM Bug #10542: Exclamation marks in the description field of a floating rule result in a filter reload error.
seems related to https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=182819 Viktor Gurov

07/04/2020

10:10 PM Feature #10728 (Closed): Request - widen the columns in VPN > IPSEC > Status > Overview
I am finding that sometimes, the width of the element that encompasses all the columns isn't enough to show the "conn... A P
08:30 PM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
Thanks for the detailed instructions Gavin.
I pushed a fix which should do the right thing in this case.
Please... Luiz Souza
03:21 PM Bug #10726: Sticky-connections option is bugged - sticky-address cannot be redefined
It looks like, that bug has not been resolved since 8 years..
https://redmine.pfsense.org/issues/2493 Fritz Lakritz
08:11 AM Bug #10726: Sticky-connections option is bugged - sticky-address cannot be redefined
seems pfctl icmp-type + sticky-address issue,
but only if you select icmp message types (icmp any works fine),
same... Viktor Gurov
07:22 AM Bug #10726 (New): Sticky-connections option is bugged - sticky-address cannot be redefined
As already described in https://forum.netgate.com/topic/154821/strange-firewall-rules-behaviour-with-sticky-connectio... Fritz Lakritz
02:02 PM Revision 9544cf66: Gateway down policy rule fix. Issue #10716
Viktor Gurov
01:03 PM Revision c4fc5142: Limiter default bw type in Mbit/s. Implements #10727
Viktor Gurov
12:11 PM pfSense Packages Bug #10693: pfSense Bind Zone Editor UI does not update zone serial number when a change is made
Viktor Gurov wrote:
> > The broken behavior is observed with Bind package 9.14_4
>
> did it work differently befo... Jeffrey Altman
11:47 AM pfSense Packages Bug #10693: pfSense Bind Zone Editor UI does not update zone serial number when a change is made
> The broken behavior is observed with Bind package 9.14_4
did it work differently before?
you need to manually c... Viktor Gurov
12:06 PM pfSense Packages Feature #8188 (Resolved): Support response policy zones in bind package
merged in 9.12 Viktor Gurov
10:47 AM Feature #10696 (Resolved): status.php: Add config history
works as expected on 2.5.0.a.20200703.1850
Config History file content:... Viktor Gurov
10:31 AM Revision 00bf92ce: Shaper check prio only for CBQ/FAIRQ/PRIQ. Issue #1353
Viktor Gurov
08:05 AM Feature #10727: Limiter bw type in Mbit/s
https://github.com/pfsense/pfsense/pull/4388 Viktor Gurov
07:47 AM Feature #10727 (Resolved): Limiter bw type in Mbit/s
https://forum.netgate.com/topic/154812/limiter-bandwidth-type-default:
Just a suggestion, might make the default Mbi... Viktor Gurov
05:33 AM Bug #1353: Number of queues possible
Check for priority value duplication only for CBQ/FAIRQ/PRIQ queues:
https://github.com/pfsense/pfsense/pull/4387
... Viktor Gurov
04:28 AM pfSense Packages Feature #10725: Squid disable multiple login sessions
https://github.com/pfsense/FreeBSD-ports/pull/891 Viktor Gurov
12:27 AM pfSense Packages Feature #10725 (Resolved): Squid disable multiple login sessions
https://forum.netgate.com/topic/154741/squid-disable-multiple-sessions:
Hello, I want to set a server running pfsens... Viktor Gurov
04:04 AM pfSense Packages Bug #10692: PIMD starts twice at boot
Viktor,
"many thanks!!"
I did install PIMD again and will test it as soon as the fix is in the snapshots
... Louis B
02:50 AM pfSense Packages Bug #10692: PIMD starts twice at boot
Louis van Breda wrote:
> Hello,
>
> I just discoverd a critical error in the pfSense boot sequence.
> - Indepen... Viktor Gurov
03:00 AM Bug #7378 (Resolved): pfctl: ix0: driver does not support altq
Tested okay on SG-5100. Luiz Souza
01:40 AM Bug #9383 (Feedback): dhcpleases kqueue error
Fixed in dhcpleases-0.5. Luiz Souza
12:43 AM Revision c968ef7e: Make sure dhcpleases is killed before writing the hosts file.
Needs to happen before fopen($hosts, "w") as it is going to truncate the file
and that breaks the tracking of hosts s... Luiz Souza

07/03/2020

04:43 PM Revision 5fe8efc2: Allowed Hostnames add/delete multiple A entries. Fixes #10724
Viktor Gurov
03:41 PM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
I just ran into this today. I was using IP addresses for the bookkeeper. She finally got a hostname with DynDNS.
... Rob Shiras
11:46 AM Bug #10724: Allowed Hostnames adds/deletes only one A entry
https://github.com/pfsense/pfsense/pull/4386 Viktor Gurov
11:41 AM Bug #10724 (Resolved): Allowed Hostnames adds/deletes only one A entry
If you add a hostname on services_captiveportal_hostname.php page,
it adds only single IP (A entry) from DNS answer,... Viktor Gurov
10:03 AM Bug #10716: Policy routing rules are not written correctly for a down gateway
But it sets the value of the gateway variable to 'empty' as Jim commented above so that's OK. Steve Wheeler
09:47 AM Bug #10716: Policy routing rules are not written correctly for a down gateway
Tested this patch. It corrects the 'Skip rules when gateway is down' setting but not the default 'omit gateway from t... Steve Wheeler
02:44 AM Bug #10716: Policy routing rules are not written correctly for a down gateway
Jim Pingle wrote:
> Having @$GWGW2@ on the rule when the content of @$GWGW2@ is empty is fine. That effectively mean... Viktor Gurov
09:05 AM Bug #3039 (Feedback): New vouchers doesn't sync with CARP slave
already merged Viktor Gurov
07:11 AM Feature #9876: PFsense on KVM: Web interface hint to disable "Hardware Checksum Offloading"
https://github.com/pfsense/pfsense/pull/4384
see also #10723 Viktor Gurov
07:11 AM Feature #10723: Disable "Hardware Checksum Offloading" if VM is detected
https://github.com/pfsense/pfsense/pull/4385 Viktor Gurov
07:07 AM Feature #10723 (Resolved): Disable "Hardware Checksum Offloading" if VM is detected
It would be better to disable "Hardware Checksum Offloading" on first boot if a VM system is detected
 Viktor Gurov
06:30 AM Feature #3031: Message is false after changing Hardware Checksum Offloading setting
https://github.com/pfsense/pfsense/pull/4384 Viktor Gurov
06:01 AM Revision 6fab11cc: Setup Wizard DNS IPv6 support. Fixes #10720
Viktor Gurov
03:20 AM pfSense Packages Feature #9852: show File-Store directory listing
+ https://www.joesandbox.com/
+ https://opentip.kaspersky.com/ Viktor Gurov
01:05 AM Bug #10720: Setup Wizard DNS Server validation JavaScript incorrectly claims IPv6 address is invalid
Fix:
https://github.com/pfsense/pfsense/pull/4382
TODO #3087 Viktor Gurov
 

Also available in: Atom