pfSense

08/11/2020

07:42 PM Revision 55cbdcb0: Improved ACB config update by requiring only a single visit to the system

Steve Beaver

05:27 PM Bug #10827 (Resolved): Cannot add or delete separators when no rules are present

If separators exist without any rules, they will reappear after being deleted and saved. The same behavior can be see... Max Leighton

04:12 PM Revision 6c85268f: Correct CRON functionality and move to pfsense-utils.inc

Steve Beaver

03:26 PM Revision e582c517: Rorganize ACB/Cron functions - phase 1

Steve Beaver

11:59 AM pfSense Packages Bug #10823: named.conf "controls" section missing IPv6 localhost on IPv6 enabled PFsense - breaking rndc

Agreed. Error on my part. Bug is wrong/bad/incorrect. Clean build :... Dave Tickem

02:31 AM pfSense Packages Bug #10823 (Feedback): named.conf "controls" section missing IPv6 localhost on IPv6 enabled PFsense - breaking rndc

unable to reproduce, it uses 127.0.0.1 for server connections by default
from https://www.freebsd.org/cgi/man.cgi?... Viktor Gurov

09:52 AM pfSense Docs Correction #10825 (Resolved): Feedback on Introduction — Common Deployments

Merged Jim Pingle

01:28 AM pfSense Docs Correction #10825: Feedback on Introduction — Common Deployments

https://gitlab.netgate.com/docs/pfSense-book/-/merge_requests/7 Viktor Gurov

09:51 AM pfSense Packages Bug #10824 (Pull Request Review): BIND shutdown - dynamic zones, unclean shutdown causes startup to not load zones

Jim Pingle

03:52 AM pfSense Packages Bug #10824: BIND shutdown - dynamic zones, unclean shutdown causes startup to not load zones

Viktor Gurov wrote:
> Fix:
> https://github.com/pfsense/FreeBSD-ports/pull/917... Dave Tickem

02:50 AM pfSense Packages Bug #10824: BIND shutdown - dynamic zones, unclean shutdown causes startup to not load zones

Fix:
https://github.com/pfsense/FreeBSD-ports/pull/917 Viktor Gurov

09:34 AM pfSense Packages Bug #10737 (Resolved): FRR attempts to cycle IPsec VTI interfaces even when disabled/not running

I couldn't replicate the isuse with the latest FRR 0.6.7_4 Version installed. It works as expected. Danilo Zrenjanin

09:21 AM Feature #10826 (Pull Request Review): Support for Domeneshop DDNS

Jim Pingle

04:17 AM Feature #10826: Support for Domeneshop DDNS

https://github.com/pfsense/pfsense/pull/4420 Viktor Gurov

03:24 AM Feature #10826 (Resolved): Support for Domeneshop DDNS

Domeneshop is the largest registrar for .no (Norway) domains with over 40% of all .no domains. Source (in Norwegian):... Idar Lund

09:14 AM Revision 4d6cc223: Domeneshop DynDNS support. Implements #10826

Viktor Gurov

07:25 AM Bug #9107 (Closed): New AutoConfigBackup - Cannot Access Settings When Not Connected to Internet

no such issue on 2.4.5-p1 and 2.5.0.a.20200811.0050 Viktor Gurov

08/10/2020

02:56 PM pfSense Docs Correction #10825 (Resolved): Feedback on Introduction — Common Deployments

*Page:* https://docs.netgate.com/pfsense/en/latest/book/intro/common-deployments.html#perimeter-firewall
*Feedback... Michael Woolweaver

08:54 AM pfSense Packages Feature #10665 (Pull Request Review): Manual OSPF neighbor definitions

Jim Pingle

02:40 AM pfSense Packages Bug #10426: Filer must validate that File name is uniq

Hi, any update on the issue? DRago_Angel [InV@DER]

02:39 AM pfSense Packages Feature #10600: Add support for pfBlockerNG "Action list" feature

Hi, any update on the issue? Thanks. DRago_Angel [InV@DER]

08/09/2020

02:06 PM Feature #1205: VPN: User-based / Group-based firewall rules

see also #8836 Viktor Gurov

03:16 AM Feature #1205: VPN: User-based / Group-based firewall rules

I think it must be something like https://conexti.com.br/userauth/
I personally need such features for provide netwo... Mikhail Makhin

11:42 AM pfSense Packages Bug #10824: BIND shutdown - dynamic zones, unclean shutdown causes startup to not load zones

Sorry, very poor bug. Affected version is PFSENSE 2.4.5p1 and BIND 9.14_7. Dave Tickem

10:54 AM pfSense Packages Bug #10824 (Resolved): BIND shutdown - dynamic zones, unclean shutdown causes startup to not load zones

Bind is killed quite TERMinally in the /usr/local/etc/rc.d/named.sh script - with a SIGTERM. This causes the server t... Dave Tickem

11:42 AM pfSense Packages Bug #10823: named.conf "controls" section missing IPv6 localhost on IPv6 enabled PFsense - breaking rndc

Sorry, very poor bug. Category is BIND. Affected version is PFSENSE 2.4.5p1 and BIND 9.14_7. Dave Tickem

10:50 AM pfSense Packages Bug #10823 (Resolved): named.conf "controls" section missing IPv6 localhost on IPv6 enabled PFsense - breaking rndc

Generator for {/cf/named}/etc/namedb/named.conf needs updating to include ::1 as well as 127.0.0.1 on PFSense instanc... Dave Tickem

09:20 AM pfSense Packages Bug #10791: Valid (vlan)interfaces do not get vif reporting "Invalid phyint address"

I am testing an early PIMD-3-beta at the moment. I do that in cooperation with the PIMD-maintainer.
Version3 does... Louis B

08:05 AM pfSense Docs Correction #9310: Appliances with internal switch need the MAC Address section of their Getting Started guides updated

This only applies to the SG-1100 and SG-7100 since they are the only devices with a switch port as the WAN by default. Steve Wheeler

08/08/2020

10:15 AM Revision 024a5ff8: OpenVPN copy auth_pass. Fixes #10703

Viktor Gurov

10:04 AM Bug #10822 (New): Deprecated IPv6 prefix won't be announced as deprecated to clients

After a periodic reset, or unplug/plugin of the WAN connection, the old IPv6 prefix won't be announced as deprecated ... Jan Kiele

09:28 AM pfSense Packages Feature #10665: Manual OSPF neighbor definitions

https://github.com/pfsense/FreeBSD-ports/pull/916 Viktor Gurov

08/07/2020

04:18 PM Bug #10176: Multiple duplicate / overlapping phase 2 Child SAs on IPsec tunnels

Ticket is marked for Feedback. Feedback is being provided. Izaac Falken

10:16 AM Bug #10176: Multiple duplicate / overlapping phase 2 Child SAs on IPsec tunnels

If you want to discuss it, take it to the forum. As I said, there are many people using it with success. It doesn't a... Jim Pingle

10:05 AM Bug #10176: Multiple duplicate / overlapping phase 2 Child SAs on IPsec tunnels

Jim Pingle wrote:
> Except that it does work, and thousands of people are using is successfully
Are they? Or are th... Izaac Falken

07:54 AM Bug #10176: Multiple duplicate / overlapping phase 2 Child SAs on IPsec tunnels

Except that it does work, and thousands of people are using is successfully, and pulling it would cause much more har... Jim Pingle

07:38 AM Bug #10176: Multiple duplicate / overlapping phase 2 Child SAs on IPsec tunnels

Did this. Within 48 hours I have six overlapping phase 2s and am in the #11000's in IPsec IDs.
I'm pretty sure it's ... Izaac Falken

02:59 PM pfSense Docs Correction #10821 (New): Use neutral language alternatives

More info: https://www.zdnet.com/article/linux-team-approves-new-terminology-bans-terms-like-blacklist-and-slave/
... Jared Dillard

02:04 PM Bug #10814: OpenVPN UDP multihome fails when connecting to an IP that is not logically closest.

The FreeBSD patch has been merged into head (on FreeBSD), will be MFCd soon so it's probably safe to put a 2.5.0 targ... Jim Pingle

10:02 AM Bug #7132 (Pull Request Review): PPPoE IP Alias

Jim Pingle

03:48 AM Bug #7132: PPPoE IP Alias

Extra input validation:
https://github.com/pfsense/pfsense/pull/4419 Viktor Gurov

08:37 AM Revision d96e6808: Virtual IPs interface type/mode check. Issue #7132

Viktor Gurov

05:09 AM Feature #4632: Support for Multipath TCP (MPTCP)

Telekom has started offering MTCP in Germany, and given the abysmal situation with broadband in the country we would ... Yury Zaytsev

08/06/2020

03:45 PM Bug #10820: Extremely low speeds to vm's when using paravirtualized (xn*) interfaces on XenServer/XCP-ng

Hi,
A new update. the networks were configured for vlans configured at hetzner while using hetzner vswitch.
Creat... Ricardo Mendes

02:35 PM Bug #10820: Extremely low speeds to vm's when using paravirtualized (xn*) interfaces on XenServer/XCP-ng

Hi Jim thank you for your quick reply.
Regarding my configuration/environment, its a new setup with XCP-ng 8.1 at ... Ricardo Mendes

01:52 PM Bug #10820 (Needs Patch): Extremely low speeds to vm's when using paravirtualized (xn*) interfaces on XenServer/XCP-ng

If the patches get accepted into FreeBSD, they will make their way into pfSense down the road. Though I find it diffi... Jim Pingle

01:35 PM Bug #10820 (Needs Patch): Extremely low speeds to vm's when using paravirtualized (xn*) interfaces on XenServer/XCP-ng

Hi,
I am experiencing an issue where I have extremely low speeds while accessing vm's behind a pfsense on a virtua... Ricardo Mendes

02:58 PM Bug #10819: Gateway group configuration for multi-wan ignored after upgrade to 2.5.0-DEVELOPMENT image

Jim Pingle wrote:
> The bug you linked is already fixed in 2.4.5-p1 and it was unlikely to be related to anything ex... Adrian G

10:53 AM Bug #10819 (Rejected): Gateway group configuration for multi-wan ignored after upgrade to 2.5.0-DEVELOPMENT image

The bug you linked is already fixed in 2.4.5-p1 and it was unlikely to be related to anything except accessing the GU... Jim Pingle

10:27 AM Bug #10819 (Rejected): Gateway group configuration for multi-wan ignored after upgrade to 2.5.0-DEVELOPMENT image

Hello! I recently upgraded to 2.5.0-DEV to overcome this issue: https://redmine.pfsense.org/issues/8987, which was to... Adrian G

10:13 AM pfSense Packages Feature #10818 (Resolved): UDP Broadcast Relay

Current packages like Avahi and PIMD can help users cast across VLANs, which is great for HOME/GUEST to IOT type scen... Mark Whitworth

05:45 AM Feature #6240: vxlan driver

The PR is trivial but incomplete. It just adds the kernel module.
Unless someone work on the GUI part, this featu... Luiz Souza

08/05/2020

08:58 PM Bug #10610: Package upgrade or reinstall hangs indefintely on the console

Stefan Beckers wrote:
> Same issue here. I can reproduce this reliably (any of upgrade, reinstall or fresh install) ... Christian Borchert

07:23 PM pfSense Packages Bug #10817 (Duplicate): FRR upgrade/install process hangs

Duplicate of #10610 Jim Pingle

06:28 PM pfSense Packages Bug #10817 (Duplicate): FRR upgrade/install process hangs

Installing or upgrading to FRR 0.6.7_4 results in a process hang, see attached photos
CLI hang is shown after the ... Christian Borchert

02:42 PM pfSense Packages Feature #10816 (Feedback): Allow FRR BGP Neighbors to be active in both IPv4 and IPv6

Added in https://github.com/pfsense/FreeBSD-ports/commit/cae5ee237cfabc90ea5ef4dfd480acfc9055e26f Jim Pingle

02:36 PM pfSense Packages Feature #10816 (Resolved): Allow FRR BGP Neighbors to be active in both IPv4 and IPv6

BGP can carry routes for both IPv4 and IPv6 to a single neighbor of either type. Currently the code only activates th... Jim Pingle

09:09 AM Bug #7379 (Pull Request Review): Virtual IPs/Proxy ARP: Not defined pid file on starting choparp.

Jim Pingle

08/04/2020

04:07 PM Revision 18208c61: FRR SNMP module. Fixes #10815

Viktor Gurov

02:01 PM Revision e984ff68: Restart choparp on VIP change. Fixes #7379

Viktor Gurov

11:24 AM pfSense Packages Bug #10815 (Pull Request Review): FRR with SNMP AgentX option failed to start

Jim Pingle

11:21 AM pfSense Packages Bug #10815: FRR with SNMP AgentX option failed to start

FRR SNMP module for 2.4.5 branch:
https://github.com/pfsense/pfsense/pull/4418 Viktor Gurov

11:02 AM pfSense Packages Bug #10815 (Resolved): FRR with SNMP AgentX option failed to start

https://forum.netgate.com/topic/155795/frr-0-6-7_3-enable-snmp-agentx
frr for pfSense 2.4.5-p1 doesn't have snmp m... Viktor Gurov

10:17 AM Bug #7132: PPPoE IP Alias

PPPoE requires a destination address:... Viktor Gurov

09:02 AM Bug #7379: Virtual IPs/Proxy ARP: Not defined pid file on starting choparp.

aLexander Panfilov wrote:
> New Bug after applying the patch:
> There are several PoxyARP VIPs. Open one of them to... Viktor Gurov

08:35 AM Bug #8156 (Pull Request Review): Prefix not being included in DNS entry registered by DHCP6 server

Jim Pingle

03:36 AM Bug #8156: Prefix not being included in DNS entry registered by DHCP6 server

https://github.com/pfsense/pfsense/pull/4416 Viktor Gurov

08:33 AM Bug #9097 (Pull Request Review): ECL can't locate config.xml unless device is MBR-partitioned

Jim Pingle

02:29 AM Bug #9097: ECL can't locate config.xml unless device is MBR-partitioned

https://github.com/pfsense/pfsense/pull/4415 Viktor Gurov

08:31 AM Revision 47f05aa1: Full IPv6 host address for DHCP6 static entries. Fixes #8156

Viktor Gurov

08:21 AM Bug #10814 (Needs Patch): OpenVPN UDP multihome fails when connecting to an IP that is not logically closest.

Jim Pingle

08:16 AM Bug #10814 (Needs Patch): OpenVPN UDP multihome fails when connecting to an IP that is not logically closest.

If you connect to the external WAN IP from an OpenVPN client on an internal interface of a pfSense install running an... Steve Wheeler

07:18 AM Revision 681d099c: ECL GPT partitions support. Fixes #9097

Viktor Gurov

02:51 AM Feature #3559 (Resolved): add option for backup ddns ( dynamic dns ) in restore area

works as expected on 2.5.0.a.20200803.1850 Viktor Gurov

02:34 AM Revision 708b2b0b: Update wizardapp.inc

These are the ports needed for any xbox live platform.
https://support.microsoft.com/en-us/help/4026770/xbox-open-the... Joseph Turner

08/03/2020

04:37 PM Revision 9edd02bb: status.php: Add DNS Resolver configuration. Implements #10635

Viktor Gurov

03:51 PM Bug #10813: Dashboard - dynamic CPU speed element disappears and reappears [cosmetic / annoying]

OK, that makes some amount of sense to me. But it still results in the text in the dashboard regularly shifting up an... Braden McGrath

03:36 PM Bug #10813 (Not a Bug): Dashboard - dynamic CPU speed element disappears and reappears [cosmetic / annoying]

It's done that way on purpose because it's redundant to show the CPU speed when it's at maximum, since the max CPU sp... Jim Pingle

03:32 PM Bug #10813 (Not a Bug): Dashboard - dynamic CPU speed element disappears and reappears [cosmetic / annoying]

I've only tested this on 2.4.5-p1 but I believe it's been around for a while. I am on amd64 arch, with an Atom C2558.... Braden McGrath

12:30 PM Feature #10807: Allow users to show advanced log filter by default in Status->System Logs->Firewall

Jim Pingle wrote:
> Already possible. System > General, check "Log Filter". Also possible in per-user settings.
S... e 1/1

10:01 AM Feature #10807 (Rejected): Allow users to show advanced log filter by default in Status->System Logs->Firewall

Already possible. System > General, check "Log Filter". Also possible in per-user settings. Jim Pingle

12:27 PM Feature #10808: System logs->Firewall->Advanced Log Filter - more UI functionality for choosing interfaces

Jim Pingle wrote:
> Doing a drop down is not going to scale well and also prevent users from using things like regex... e 1/1

10:11 AM Feature #10808 (Rejected): System logs->Firewall->Advanced Log Filter - more UI functionality for choosing interfaces

Doing a drop down is not going to scale well and also prevent users from using things like regex in the box to match ... Jim Pingle

11:14 AM Bug #10812 (Resolved): Traffic graph shows 2X the actual traffic on VLAN interfaces.

#3314 is back again on, as of today, latest snapshot... Nano Caiordo

10:26 AM Bug #10176: Multiple duplicate / overlapping phase 2 Child SAs on IPsec tunnels

Side 1: IKEv2, Rekey configured, Reauth disabled, child SA close action set to restart/reconnect
Side 2: IKEv2, Reke... Jim Pingle

08:04 AM Bug #10176: Multiple duplicate / overlapping phase 2 Child SAs on IPsec tunnels

So is there a final, required set of baseline versions and recommended configuration which can do into the docs? Or ... Izaac Falken

10:22 AM Feature #10635 (Pull Request Review): status.php: Add DNS Resolver configuration

Jim Pingle

08:29 AM Feature #10811 (Closed): Randomize time of scheduled AutoConfigBackup runs

It looks like the backup server is becoming occasionally overloaded on the hour because all backups around the world ... Chris Linstruth

04:59 AM Bug #10792: Crash when switching interface off and on again in cohesion with multicast

I did retest interface stability. The situation is much better now. I can not reproduce crashes any more. Louis B

04:57 AM Feature #10747 (Resolved): Captive Portal IDN hostname support

works as expected on 2.5.0.a.20200802.1850 Viktor Gurov

01:33 AM pfSense Packages Bug #10763 (Resolved): Incorrect link to frr_bgp.xml

menu entry link is OK in the latest FRR pkg Viktor Gurov

08/02/2020

10:05 PM Bug #10810 (Rejected): LoadBalancer Virtual Servers Edit web form does not allow entry of Port Alias text

The built-in load balancer has been deprecated. It has already been removed from 2.5.0, it will not receive further d... Jim Pingle

10:01 PM Bug #10810 (Rejected): LoadBalancer Virtual Servers Edit web form does not allow entry of Port Alias text

Edit Load Balancer - Virtual Server Entry web form problem.
Trying to enter in a port alias as directed, however, on... Patrick Best

01:19 PM Bug #10671: pfsense 2.4.5_1 does not boot on Gen2 2012R2 HyperV VM

The old kernel can be booted as Jan stated by entering
boot kernel.old
when system is stuck in bootloader.
M... Ernesto Rey

12:30 PM Bug #10671: pfsense 2.4.5_1 does not boot on Gen2 2012R2 HyperV VM

Stumbled into the same issue. Ernesto Rey

09:40 AM Feature #10635: status.php: Add DNS Resolver configuration

https://github.com/pfsense/pfsense/pull/4413 Viktor Gurov

04:01 AM Bug #10758 (Closed): Group Authentication is never used

see fix in #10748 Viktor Gurov

02:47 AM Feature #2358: NAT64 support

IPFW NAT64 kernel support:
https://github.com/pfsense/FreeBSD-src/pull/35 Viktor Gurov

12:18 AM Bug #10803: Invalid rules generated from AVPair on OpenVPN

also fixed in #10454 Viktor Gurov

08/01/2020

06:25 AM pfSense Packages Feature #10809 (Resolved): IDS/IPS - Notifications when new rule categories are released

Please allow users to enable system notifications when new rule categories appear.
As IDS rules are not enabled as t... e 1/1

04:40 AM Feature #10808 (Rejected): System logs->Firewall->Advanced Log Filter - more UI functionality for choosing interfaces

In Status->System Logs->Firewall->Normal View and Dynamic View please improve the "Interface" field in the Advanced L... e 1/1

04:31 AM Feature #10807 (Rejected): Allow users to show advanced log filter by default in Status->System Logs->Firewall

Please add an option for Status->System Logs->Firewall so that when one opens either "Normal View" or "Dynamic View",... e 1/1

07/31/2020

05:51 PM Bug #10806 (Resolved): armada_thermal fails during device_attach

SG-3100 is unable to read the temperature from sysctl, as the oid doesn't exist, because the driver fails to attach d... Daniel Gordon

03:13 PM Feature #10805 (New): Intel QAT (QuickAssist) encryption support for PfSense

Please consider adding Intel QAT (QuickAssist) acceleration to PfSense. Nearly all of Netgate's hardware supports it ... Adam Goldberg

01:25 PM Bug #10800: Multi WAN Load Balancing does not work on 2.5.0.a.20200729.0650

Dmitry Fill wrote:
> Version: 2.5.0.a.20200729.0650
>
> Tried to follow documentation to setup multi WAN with Lo... Adam Goldberg

12:17 PM Feature #8786: Wireguard VPN

Take as much time as you need to get it right. I would rather have a stable, in-kernel implementation than a buggy, ... Soren Stoutner

11:57 AM Feature #8786: Wireguard VPN

There certainly is reason. We're working on the in-kernel implementation and won't be wasting our time on unstable us... Jim Pingle

11:44 AM Feature #8786: Wireguard VPN

wireguard-go exists on FreeBSD. While it may not be in-kernel, it's a userspace implementation from the same project.... Anonymous

10:29 AM Bug #10803 (Pull Request Review): Invalid rules generated from AVPair on OpenVPN

Jim Pingle

03:49 AM Bug #10803: Invalid rules generated from AVPair on OpenVPN

Pull request: https://github.com/pfsense/pfsense/pull/4411 Marius Rejdak

03:44 AM Bug #10803 (Resolved): Invalid rules generated from AVPair on OpenVPN

AVPair rule:
ip:inacl#1=permit ip 10.1.0.0 255.255.0.0 10.2.0.0 255.255.0.0 range 8000 8001
Expected rule:
pass ... Marius Rejdak

08:56 AM pfSense Plus Feature #10804: Interface Status page information for switch uplinks may be replaced by switch port data when media state monitoring is set

Fixing the subject and adding some notes:
This happens if "Switch Port" on Interfaces > LAN (or whichever interfac... Jim Pingle

08:49 AM pfSense Plus Feature #10804 (Resolved): Interface Status page information for switch uplinks may be replaced by switch port data when media state monitoring is set

Like in #10793#note-9 written status->interface for mvneta1 shows mixed data from mvneta1 and switch port 1.
Make ... Grischa Zengel

08:46 AM Revision c6a9d32e: Fix OpenVPN AVPair network/netmask output. Issue #10803

Marius Rejdak

08:26 AM Bug #10793: SNMP: Netgate SG-3100 shows wrong speed

I agree, it's not a bug.
I forgot that this switch config for tracking ports exists because I only used it once at f... Grischa Zengel

06:33 AM Bug #7020 (Feedback): <Hostname> is omitted when sending logs on syslog

An RFC 5424 option was added to 2.5.0 almost a year ago, you can test it there: #9808 Jim Pingle

02:47 AM Bug #7020: <Hostname> is omitted when sending logs on syslog

Jim Pingle wrote:
> If it's a bug, it's a bug in FreeBSD -- we use their syslogd and that's how it behaves. The defa... Darren Spruell

07/30/2020

05:56 PM Feature #10802 (New): Seperator for DHCP Static Mapped leases

It may be nice to allow the similar separator functionality from the firewall rules page, on the status_dhcp_leases.p... Daniel Johnson

04:20 PM Bug #10800: Multi WAN Load Balancing does not work on 2.5.0.a.20200729.0650

Thank you Jim. I got redirected here after clicking link "Give Feedback" on documentation section of "Multiple WAN Co... Dmitry Fill

07:38 AM Bug #10800 (Rejected): Multi WAN Load Balancing does not work on 2.5.0.a.20200729.0650

There is not enough information here to rule out a configuration issue or a problem with your test methodology. This ... Jim Pingle

12:32 AM Bug #10800 (Rejected): Multi WAN Load Balancing does not work on 2.5.0.a.20200729.0650

Version: 2.5.0.a.20200729.0650
Tried to follow documentation to setup multi WAN with Load Balancing
1. Two WAN... Dmitry Fill

03:57 PM Revision f2b9ea9a: Revise get_services() to include the current service state in the returned array. This saves having to get the list of services three times in order to draw the status_services web page

Steve Beaver

03:13 PM Bug #10793: SNMP: Netgate SG-3100 shows wrong speed

That doesn't happen by default. You probably selected "Port 1" as the switch port to monitor under Interfaces > LAN_1... Jim Pingle

03:06 PM Bug #10793: SNMP: Netgate SG-3100 shows wrong speed

No, no problem.
But you said mvneta1 is always at 2500MBit but pfsense shows 100MBit like picture 2020-07-30 21-24... Grischa Zengel

02:55 PM Bug #10793: SNMP: Netgate SG-3100 shows wrong speed

"LAN Uplink" is mvneta1. The others are the individual switch ports, not mvneta* interfaces.
With the built-in bsn... Jim Pingle

02:29 PM Bug #10793: SNMP: Netgate SG-3100 shows wrong speed

It looks like it reflects speed from 1st switch port or max link speed on switch.
!2020-07-30 21-24-58.png!
!2020... Grischa Zengel

01:43 PM Bug #10793: SNMP: Netgate SG-3100 shows wrong speed

Grischa Zengel wrote:
> Is this relevant?
> mvneta1 supports only 2500MBit but connects with 100MBit.
I do not s... Jim Pingle

01:39 PM Bug #10793 (Resolved): SNMP: Netgate SG-3100 shows wrong speed

Looks good now.... Jim Pingle

02:24 PM Bug #10801 (Not a Bug): Send mail on gw down

Not nearly enough information here to say it's a bug, and this site is not for support or diagnostic discussion.
F... Jim Pingle

02:18 PM Bug #10801 (Not a Bug): Send mail on gw down

Hi.
I used to get email when gw was offline. For example pppoe dropped, gw went down and I got an email.
Now on 2... Greg M

02:19 PM Bug #10773: if_em VLAN interfaces wont pass traffic after reboot

Looks like this fix was just MFCed to 12-stable under MFC r362063. So it should be fixed next time pfSense is rebased. Steve Harrington

11:17 AM Bug #10799: Dynamic DNS auto update

My bad. It is indeed not a bug. The dynamic DNS feature reacts to change of IP on some interface, not on the registra... Ike Doz

07:47 AM Bug #10799: Dynamic DNS auto update

Sorry about that, I posted in the forum. Ike Doz

07:37 AM Bug #10799 (Not a Bug): Dynamic DNS auto update

This site is not for support or diagnostic discussion.
For assistance in solving problems, please post on the "Net... Jim Pingle

07:34 AM Bug #10795 (Pull Request Review): WebGUI "Dashboard -> Services Status" widget issue

Jim Pingle

07/29/2020

04:40 PM Bug #10799 (Not a Bug): Dynamic DNS auto update

I have already asked reddit.com/r/pfsense and IRC but I couldn't solve my issue so I am asking here.
I have set up... Ike Doz

02:57 PM Revision 6947a80a: Captive Portal name validation for XML tags. Fixes #10798

Viktor Gurov

12:02 PM Bug #10793 (Feedback): SNMP: Netgate SG-3100 shows wrong speed

Fixed.
Please test with the next snapshot. Luiz Souza

10:10 AM Bug #10798 (Pull Request Review): Unable to save CP zone named 'VIP'

Jim Pingle

09:59 AM Bug #10798: Unable to save CP zone named 'VIP'

https://github.com/pfsense/pfsense/pull/4410 Viktor Gurov

08:49 AM Bug #10798: Unable to save CP zone named 'VIP'

It's because the zone name is used as an XML tag in the config, but "vip" is a listtag, meaning it gets treated like ... Jim Pingle

08:40 AM Bug #10798: Unable to save CP zone named 'VIP'

config.xml after creating 'VIP' zone:... Viktor Gurov

07:18 AM Bug #10798 (Resolved): Unable to save CP zone named 'VIP'

https://forum.netgate.com/topic/155549/captive-portal-settings-not-saved:
I did more tests, tried to add several cap... Viktor Gurov

08:45 AM Bug #10797 (Pull Request Review): status.php: Sanitize MaxMind GeoIP key

Jim Pingle

07:12 AM Bug #10797: status.php: Sanitize MaxMind GeoIP key

https://github.com/pfsense/pfsense/pull/4409 Viktor Gurov

05:27 AM Bug #10797 (Resolved): status.php: Sanitize MaxMind GeoIP key

maxmind_geoipdb_key - Suricata
maxmind_key - pfBlockerNG, NTOPNG Viktor Gurov

08:42 AM Bug #10594 (Pull Request Review): add QLogic 10 Gigabit Ethernet driver (qlxgb) to the ALTQ-capable list

Jim Pingle

02:26 AM Bug #10594: add QLogic 10 Gigabit Ethernet driver (qlxgb) to the ALTQ-capable list

Correct interface name is 'qlX':
https://github.com/pfsense/pfsense/pull/4408 Viktor Gurov

08:41 AM Bug #10794 (Pull Request Review): HAProxy Stats page credentials are not redacted in status.php

Jim Pingle

02:12 AM Bug #10794: HAProxy Stats page credentials are not redacted in status.php

Sanitize stats_password:
https://github.com/pfsense/pfsense/pull/4407 Viktor Gurov

08:40 AM pfSense Packages Feature #10796 (Pull Request Review): Huawei ME909u-521 support

Jim Pingle

01:00 AM pfSense Packages Feature #10796: Huawei ME909u-521 support

https://github.com/pfsense/FreeBSD-ports/pull/898 Viktor Gurov

01:00 AM pfSense Packages Feature #10796 (Feedback): Huawei ME909u-521 support

Add Huawei ME909u-521 Viktor Gurov

08:11 AM pfSense Packages Feature #10347: Request to add pull-filter

Discussion about --route-nopull:
https://sourceforge.net/p/openvpn/mailman/openvpn-devel/thread/4B3OgL3j077iDP_MhneR... Pippin MMD

07:24 AM Revision 4d0d242b: Correct QLogic interface name in ALTQ-capable list. Issue #10594

Viktor Gurov

07:11 AM Revision 7f11a9a0: Sanitize HAproxy stats_password. Issue #10794

Viktor Gurov

04:36 AM Bug #10784 (Feedback): HA-sync with ssh keys

Unable to reproduce it on 2.4.5-p1 and 2.5.0.a.20200728.1850 HA clusters, ~/.ssh directory owner is OK
Please give u... Viktor Gurov

12:45 AM Bug #9796: kernel panic after removing interfaces

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=248243 Viktor Gurov

07/28/2020

05:24 PM Revision ccbb25fa: Correct description truncate in "Services Status" widget. Fixes #10795

Mikhail Burichenko

04:04 PM Bug #10793: SNMP: Netgate SG-3100 shows wrong speed

Is this relevant?
mvneta1 supports only 2500MBit but connects with 100MBit.... Grischa Zengel

10:54 AM Bug #10793: SNMP: Netgate SG-3100 shows wrong speed

I was able to reproduce this in both bsnmpd and net-snmp, looks like neither one likes the 2.5G uplink speed.
<pre... Jim Pingle

05:55 AM Bug #10793 (Resolved): SNMP: Netgate SG-3100 shows wrong speed

I use check_nwc_health for monitoring network interfaces and it shows always over usage (>100%) on interface mvneta1.... Grischa Zengel

11:33 AM Bug #10795: WebGUI "Dashboard -> Services Status" widget issue

Jim Pingle wrote:
> Can you submit that change as a pull request on Github?
https://github.com/pfsense/pfsense/pu... Mikhail Burichenko

10:18 AM Bug #10795: WebGUI "Dashboard -> Services Status" widget issue

Can you submit that change as a pull request on Github?
https://docs.netgate.com/pfsense/en/latest/development/sub... Jim Pingle

09:35 AM Bug #10795 (Resolved): WebGUI "Dashboard -> Services Status" widget issue

If i use FQDN in description of openvpn service, the description line will be truncated after the first dot because:
... Mikhail Burichenko

10:59 AM Bug #8820: System/Advanced/Misc - "Do not kill connections when schedule expires" UN-checked still leaves existing connections open.

See also: #9615 and #10790 Jim Pingle

10:59 AM Bug #9615 (Duplicate): Connections permitted by a schedule are not killed when that schedule expires.

Duplicate of #8820 Jim Pingle

10:59 AM Bug #10790 (Duplicate): States aren't killed after schedule expires

Duplicate of #8820 Jim Pingle

08:28 AM Bug #10794 (Resolved): HAProxy Stats page credentials are not redacted in status.php

The status_output file generated by status.php does not redact the HAProxy stats page login details:... Steve Wheeler

03:40 AM Bug #10792 (New): Crash when switching interface off and on again in cohesion with multicast

Hello,
There are still crashes when switching off and on (vlan)interfaces. One of those crashes seems to be trigge... Louis B

03:27 AM pfSense Packages Bug #10791 (New): Valid (vlan)interfaces do not get vif reporting "Invalid phyint address"

Hello,
PIMD still not properly working. So I opened tow FeeBSD Bugs. This one is FreeBSD bug 248103.
Also see ht... Louis B

03:12 AM pfSense Packages Bug #10692: PIMD starts twice at boot

Despite that this issue has state "Fixed". it is _*not fixed at all !!*_ So please "reopen" this bug! Louis B

07/27/2020

09:57 PM Bug #10790 (Duplicate): States aren't killed after schedule expires

I have several rules that allow traffic for a certain amount of time (say, 8am-10pm). That rule is immediately follow... John Pozzoli

11:53 AM pfSense Packages Feature #10789 (Feedback): FRR integrated configuration and hitless reloads

Convert FRR to use an integrated configuration file and use frr-reload where possible for hitless configuration chang... Ben Hughes

10:15 AM Bug #9796: kernel panic after removing interfaces

I do have a reproducible bug when switching interfaces off and on. I did open FreeBSD Bugzilla – Bug 248243. I did ad... Louis B

08:31 AM Feature #1337: VLANs with different MAC address than parent interface

I'm not sure that setting the interface in promiscuous mode is the right thing to do here. There will be performance... Luiz Souza

07:43 AM pfSense Packages Bug #10788 (Rejected): ntopng not displaying graphs correctly. Bottom of graphs getting cut off.

That's an issue between ntopng and your browser, not in code we have any control over. If you can still reproduce it ... Jim Pingle

07/26/2020

03:04 PM Feature #6626: Support for IPv6 firewall entries with dynamic delegated prefix and static host address

Hello,
we are also in dire need of this feature. Lack of support for dynamic prefixes makes IPv6 pretty much unusa... Mike Murdoch

11:43 AM pfSense Packages Bug #10788 (Rejected): ntopng not displaying graphs correctly. Bottom of graphs getting cut off.

ntopng graphs are getting cut off where I can not see the time on historical graphs.
To duplicate, I go to Hosts M... Hector Gongora

07/25/2020

10:21 AM Feature #1337: VLANs with different MAC address than parent interface

It's possible to do this by editing /etc/inc/interfaces.inc and adding the lines below, but it would be nice if it co... Wik Joh

12:41 AM pfSense Docs Correction #10787 (Resolved): Feedback on Services — DNS — Performing a DNS Lookup

*Page:* https://docs.netgate.com/pfsense/en/latest/diagnostics/dns.html
*Feedback:* Does not explain the function ... Joseph McGuirl

07/24/2020

12:17 PM Feature #10786 (Rejected): Remotely change gateway priority

There is no reasonable way to accommodate this without a proper API, and that's a much longer-term project.
If you... Jim Pingle

11:50 AM Feature #10786 (Rejected): Remotely change gateway priority

We would like to remotely change the Gateway Priority of a gateway. We have a gateway group and often times we need t... Emmanuel Sedas

09:54 AM Bug #10773: if_em VLAN interfaces wont pass traffic after reboot

PR submitted.
https://github.com/pfsense/FreeBSD-src/pull/34 Steve Harrington

09:09 AM pfSense Packages Feature #10785 (Pull Request Review): Allow Setting of ldapcachetime

Jim Pingle

09:01 AM pfSense Packages Feature #10785: Allow Setting of ldapcachetime

OK, done:
https://github.com/pfsense/FreeBSD-ports/pull/913 Jan Wenzel

08:01 AM pfSense Packages Feature #10785: Allow Setting of ldapcachetime

Please create a pull request in github, that process is much easier for us to review and approve for inclusion. Thanks! Jim Pingle

07:55 AM pfSense Packages Feature #10785 (Resolved): Allow Setting of ldapcachetime

We're using Squid/Squidguard with many (!) ldap based group filters.
This does not scale because squidguard does n... Jan Wenzel

05:10 AM Bug #10784 (Closed): HA-sync with ssh keys

I have two pfsense boxes configured in HA sync. Synchronisation is performed by a seperate user named "ha-sync" with ... Mark De Souza

07/23/2020

10:41 PM Bug #7656: TypeError: n is undefined JavaScript error in status_monitoring.php

I root caused this pretty far as described in this post:
https://forum.netgate.com/post/926097
The step property ... Shaun Currier

06:00 AM Revision 5ed92e19: IPsec Mobile RADIUS Group authentication. Implements #10748

Viktor Gurov

07/22/2020

01:44 PM pfSense Packages Bug #10771 (Pull Request Review): arpwatch: option to not send hourly email notification on cron run

Jim Pingle

05:59 AM pfSense Packages Bug #10771: arpwatch: option to not send hourly email notification on cron run

Fix:
https://github.com/pfsense/FreeBSD-ports/pull/912
see also #8454 Viktor Gurov

01:44 PM pfSense Packages Bug #10770 (Pull Request Review): arpwatch: cannot remove email once it has been entered into settings

Jim Pingle

05:58 AM pfSense Packages Bug #10770: arpwatch: cannot remove email once it has been entered into settings

Fix:
https://github.com/pfsense/FreeBSD-ports/pull/912 Viktor Gurov

01:37 PM pfSense Packages Feature #10779 (Pull Request Review): HAProxy SSL/TLS Compatibility Mode

Jim Pingle

02:05 AM pfSense Packages Feature #10779: HAProxy SSL/TLS Compatibility Mode

https://github.com/pfsense/FreeBSD-ports/pull/911 Viktor Gurov

12:46 PM Feature #2358: NAT64 support

Viktor Gurov wrote:
> https://github.com/pfsense/pfsense/pull/4405
Better late than never :-) We switched to Juni... Dmitri Toubelis

12:20 PM Feature #2358 (Pull Request Review): NAT64 support

Jim Pingle

12:25 AM Feature #2358: NAT64 support

https://github.com/pfsense/pfsense/pull/4405 Viktor Gurov

09:07 AM pfSense Packages Bug #10783 (Closed): NtopNG is very unstable on arm64

NtopNG will start and run after being initially configured even though this error:... Steve Wheeler

07/21/2020

10:24 PM Bug #7656: TypeError: n is undefined JavaScript error in status_monitoring.php

I believe this is related to my issue here that I can reliably reproduce in 2.4.5-RELEASE-p1.
https://forum.netgat... Shaun Currier

05:51 PM Revision ab378cb7: Move build_vip_list() function to util.inc. Fix var ambiguity

Steve Beaver

04:34 PM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries

Should the status on this be changed? It says resolved. Brendon Baumgartner

03:57 PM Revision 1ce16cf3: Set net.inet.ip.dummynet sysctl. Fixes #10780

Viktor Gurov

03:16 PM pfSense Docs Correction #10778 (Closed): Feedback on Virtual LANs (VLANs) — pfSense VLAN Configuration

Cela a été corrigé, merci! Jared Dillard

02:53 PM pfSense Docs Correction #10778: Feedback on Virtual LANs (VLANs) — pfSense VLAN Configuration

Translation:
> I am submitting this capture for correction, as I noticed that the igb2 interface is chosen as the ... Jared Dillard

03:13 PM pfSense Docs Correction #10782 (Closed): Outdated pfSense logo is still in use

*Page:* https://docs.netgate.com/pfsense/en/latest/routing/static.html
*Feedback:* A couple diagrams still use the... Jared Dillard

03:06 PM pfSense Docs Correction #10777 (Closed): SG-1100 Product Page mentions HA support

I removed the reference to HA. Thanks! Jared Dillard

03:06 PM Revision 495bfb5d: DNS Resolver restart fix. Issue #10781

Viktor Gurov

01:21 PM Revision ab2c85f0: Disable BARNYARD option for snort

Renato Botelho

01:21 PM Revision 20e3cc08: Disable BARNYARD option for snort

Renato Botelho

10:40 AM Bug #10780 (Pull Request Review): net.inet.ip.dummynet.* values are ignored

Jim Pingle

06:37 AM Bug #10780: net.inet.ip.dummynet.* values are ignored

https://github.com/pfsense/pfsense/pull/4403
see also #6553 Viktor Gurov

06:34 AM Bug #10780 (Resolved): net.inet.ip.dummynet.* values are ignored

If you set any net.inet.ip.dummynet.* values on the System / Advanced / System Tunables page,
they are ignored becau... Viktor Gurov

10:10 AM Bug #10781 (Pull Request Review): Incorrect env variables if admin user logged in via ssh

Jim Pingle

10:08 AM Bug #10781: Incorrect env variables if admin user logged in via ssh

https://github.com/pfsense/pfsense/pull/4404 Viktor Gurov

09:41 AM Bug #10781 (Resolved): Incorrect env variables if admin user logged in via ssh

How to reproduce:
1. ssh in as *admin*@
2. menu entries 16/11
after that running 'echo <any_command> | su -m <an... Viktor Gurov

03:08 AM Bug #10584: SG-3100 with M.2: shutdown instead of reboot

ZTE MF833V USB LTE modem is also used.
reboot from single mode:
https://www.youtube.com/watch?v=1djHrVdG8tg
Viktor Gurov

07/20/2020

05:40 PM Bug #9413 (Feedback): VLAN driver missing ALTQ support

ALTQ support committed to 2.5 branch.
Please test with the next snapshot. Luiz Souza

02:56 PM Bug #9647 (Resolved): hn0: driver does not support altq

Luiz Souza

02:02 PM pfSense Packages Bug #10775 (Pull Request Review): pfblockerNG SBL_ADs and hpHosts are not reachable anymore

Jim Pingle

03:57 AM pfSense Packages Bug #10775: pfblockerNG SBL_ADs and hpHosts are not reachable anymore

*Remove:*
Abuse Ransomware Tracker:... Viktor Gurov

01:46 AM pfSense Packages Bug #10775: pfblockerNG SBL_ADs and hpHosts are not reachable anymore

Comments:
https://forums.malwarebytes.com/topic/258056-hosts-filenet-domain-lists-are-broken-what-happened/
https:/... Viktor Gurov

02:01 PM pfSense Packages Feature #10769 (Pull Request Review): Prevent users from creating new ACMEv1 keys

Jim Pingle

12:59 PM Bug #9663 (Resolved): panic on boot when IPv6 option "Do not wait for a RA" is enabled

Renato Botelho

12:30 PM Bug #9663: panic on boot when IPv6 option "Do not wait for a RA" is enabled

I can confirm that the issue is gone with 2.5
Can be closed. Michael Geiger

12:02 PM pfSense Packages Feature #10779 (Resolved): HAProxy SSL/TLS Compatibility Mode

Allow to select SSL/TLS Compatibility Mode in the same manner as Squid SSL Proxy Compatibility Mode option.
Interm... Viktor Gurov

11:05 AM Bug #10772 (Not a Bug): Firewall Rules Lan to Floating Rules

This site is not for support or diagnostic discussion.
For assistance in solving problems, please post on the "Net... Jim Pingle

05:27 AM Bug #10772: Firewall Rules Lan to Floating Rules

Hi,
Wrong way, floating block rule have disconnect my lan rules.
D. V. David Verhaeghe

11:03 AM Bug #10776 (Feedback): filterlog: Loopback source/destination sometimes reports 127.0.0.1 as 127.0.01

Bertram,
Can you check and confirm that the form of the address you see in the log is not present on your interfac... Jim Pingle

10:46 AM Bug #10206: VIP alias-ip's disappear from nic (caused by running ifconfig twice.?.)

Jim Pingle wrote:
> FreeBSD dropped the /32 requirement years ago, though, and it's been working fine until recently... Ronald Schellberg

10:07 AM Bug #10206 (Feedback): VIP alias-ip's disappear from nic (caused by running ifconfig twice.?.)

FreeBSD dropped the /32 requirement years ago, though, and it's been working fine until recently. Still feels like a ... Jim Pingle

07:41 AM Bug #10206 (Not a Bug): VIP alias-ip's disappear from nic (caused by running ifconfig twice.?.)

Luiz Souza

07:40 AM Bug #10206: VIP alias-ip's disappear from nic (caused by running ifconfig twice.?.)

Louis van Breda wrote:
> Hello,
>
> Sometime I have the same verdict! If you see what happens during boot, things... Luiz Souza

07:37 AM Bug #10206: VIP alias-ip's disappear from nic (caused by running ifconfig twice.?.)

Ronald Schellberg wrote:
> I can reproduce it here
>
> @[2.5.0-DEVELOPMENT][root@Gateway.localdomain]/root: ifco... Luiz Souza

10:44 AM Bug #9577 (Resolved): radvd send_ra_forall failed on interface / can't join ipv6-allrouters

Jim Pingle

09:47 AM pfSense Docs Correction #10778 (Closed): Feedback on Virtual LANs (VLANs) — pfSense VLAN Configuration

*Page:* https://docs.netgate.com/pfsense/en/latest/book/vlan/pfsense-vlan-configuration.html
*Feedback:*
Bonj... DJIBRIL CISSE

04:55 AM Feature #9527 (Feedback): Add ability for LDAP extended query on groups in RFC2307 containers.

it works only if parent container is selected in the Authentication containers field, i.e.:
Authentication container... Viktor Gurov

01:07 AM Bug #8377 (Resolved): Traffic graph widget mouse over always shows b/s even when the value is in B/s

no such issue on 2.5,
seems to be fixed in #9072
Viktor Gurov

07/19/2020

01:49 PM pfSense Docs Correction #10777 (Closed): SG-1100 Product Page mentions HA support

Product page for SG-1100 claims support for high-availability. This is a bullet point under the 'grows with you secti... Jordan G

01:37 PM Bug #10206: VIP alias-ip's disappear from nic (caused by running ifconfig twice.?.)

Hello,
Sometime I have the same verdict! If you see what happens during boot, things are beeing started *over and ... Louis B

10:35 AM Bug #10776 (Closed): filterlog: Loopback source/destination sometimes reports 127.0.0.1 as 127.0.01

I'm setting up remote logging of the pfSense filterlog to my ES server, and seems that some of the logs are failing t... Bertram Truong

05:48 AM pfSense Packages Bug #10775 (Resolved): pfblockerNG SBL_ADs and hpHosts are not reachable anymore

Following entries of pfblockerNG pkg are not reachable for a long time, we have some tickets and also I can see some ... Constantine Kormashev

03:55 AM pfSense Packages Bug #10692: PIMD starts twice at boot

As allready reported startup behavoir is not yet ok (pimd starting *5 times !!*). Hereby some info form today bootlog... Louis B

07/17/2020

03:42 PM Revision 14d2f872: Add a system option to handle the queue API usage in hn NICs.

A single queue is used in order to enable the ALTQ support, but some people may
prefer performance over the ALTQ feat... Luiz Souza

03:32 PM Revision b6d6cd61: 'hw.usb.no_pf' is deprecated now.

Luiz Souza

02:56 PM Revision 154a8854: Fix the repeated entries in loader.conf.

Ticket: #9647 Luiz Souza

02:10 PM pfSense Docs New Content #10774 (Resolved): Feedback on Installing and Upgrading — Upgrade Troubleshooting

*Page:* https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html
*Feedback:* Please include the hi... Bouke Henstra

12:52 PM Bug #10773 (Resolved): if_em VLAN interfaces wont pass traffic after reboot

Post the merge of the remote-tracking branch 'origin/stable/12' into devel-12 on Jun 12th. if_em0 interfaces wont pas... Steve Harrington

12:00 PM Bug #10206: VIP alias-ip's disappear from nic (caused by running ifconfig twice.?.)

I can reproduce it here
@[2.5.0-DEVELOPMENT][root@Gateway.localdomain]/root: ifconfig em0
em0: flags=8843<UP,BRO... Ronald Schellberg

11:34 AM Bug #10206 (Feedback): VIP alias-ip's disappear from nic (caused by running ifconfig twice.?.)

I can't reproduce any of the two reported issues with a current 2.5 snapshots.
Repeated ifconfig commands for add ... Luiz Souza

11:46 AM Bug #10745: crashes/panics in pfsense 2.4.x FreeBSD 11.x with enabled IPSec and ipv4 forwarding

Luiz Souza wrote:
> This fix is already merged in our tree.
>
> Thanks!
can you please specify in which versio... Igor G

10:49 AM Bug #10745 (Resolved): crashes/panics in pfsense 2.4.x FreeBSD 11.x with enabled IPSec and ipv4 forwarding

This fix is already merged in our tree.
Thanks! Luiz Souza

11:46 AM Bug #8380: OpenVPN RADIUS password length is not constant

seems related to #4521 Viktor Gurov

11:45 AM Bug #9647: hn0: driver does not support altq

Gitsynced, deleted all entries rebooted twice and it works.
Thanks. Greg M

11:14 AM Bug #9647: hn0: driver does not support altq

Sorry for the breakage, should be fixed now.
I couldn't reproduce the order issue, please let me know if this is s... Luiz Souza

11:25 AM Bug #10687 (Resolved): IPsec / CESA memory issue

Fix merged to 11 based branches.
As mentioned, this is not necessary for 2.5.
Marking as resolved. Luiz Souza

09:27 AM pfSense Packages Feature #10769: Prevent users from creating new ACMEv1 keys

https://github.com/pfsense/FreeBSD-ports/pull/908 Viktor Gurov

08:57 AM Bug #10772 (Not a Bug): Firewall Rules Lan to Floating Rules

"/firewall_rules.php?if=lan"
Hello, long time ago.
I create a rule in the Lan part admitting for example the port... David Verhaeghe

08:06 AM Feature #5461 (Resolved): Add RFC2307bis (LDAP) group membership support to user authentication

Resolved in #9527 Viktor Gurov

08:05 AM Feature #9527 (Resolved): Add ability for LDAP extended query on groups in RFC2307 containers.

works as expected on 2.5.0.a.20200716.1250
tested with FreeIPA server 4.8.4
Search example:... Viktor Gurov

07:32 AM Bug #9577: radvd send_ra_forall failed on interface / can't join ipv6-allrouters

Luiz Souza wrote:
> Fixed in FreeBSD, the port workaround is unnecessary now.
>
> Thanks for all the details Rona... Ronald Schellberg

07:00 AM pfSense Packages Bug #10768 (Rejected): Squidguard overwrites Advanced Config from Squid Proxy in HA Configurations

+ squidGuard doesn't remove Custom Options (Before Auth), Custom Options (After Auth) and Custom Options (SSL/MITM) Viktor Gurov

06:16 AM pfSense Packages Bug #10771 (Resolved): arpwatch: option to not send hourly email notification on cron run

dirty workaround by editing /usr/local/arpwatch/sendmail_proxy.php
< if (false !== $message) {
> if ((false !==... IT IGP

06:10 AM pfSense Packages Bug #10770 (Resolved): arpwatch: cannot remove email once it has been entered into settings

there is currently no way to disable email notifications once you have enabled them by entering a email adress. you s... IT IGP

07/16/2020

10:40 PM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries

Luiz Souza wrote:
> Please test the new version (filterdns-2.0_4) and let me know if the problem persists.
This... Gavin Stewart

02:04 PM Revision fb5cd351: Merge pull request #4401 from vktg/binat6rdfix

Renato Botelho

11:33 AM pfSense Packages Bug #10768: Squidguard overwrites Advanced Config from Squid Proxy in HA Configurations

> If you are using a PFsense HA configuration with a virtual HA_IP, you have to add these HA virtual IP to the advanc... Viktor Gurov

10:47 AM pfSense Packages Bug #10768 (Rejected): Squidguard overwrites Advanced Config from Squid Proxy in HA Configurations

If you are using a PFsense HA configuration with a virtual HA_IP, you have to add these HA virtual IP to the advanced... Andreas Tillwicks

11:29 AM pfSense Packages Feature #10769 (Resolved): Prevent users from creating new ACMEv1 keys

It's better to prevent users from creating new ACMEv1 keys in order to avoid errors, such as:... Viktor Gurov

09:08 AM Feature #9527: Add ability for LDAP extended query on groups in RFC2307 containers.

See also #5461 Viktor Gurov

09:07 AM pfSense Packages Bug #10763 (Feedback): Incorrect link to frr_bgp.xml

PR has been merged. Thanks! Renato Botelho

09:07 AM pfSense Packages Feature #9913 (Feedback): Adding note Squid Traffic Managment Settings about feature limit

PR has been merged. Thanks! Renato Botelho

09:05 AM Feature #5461: Add RFC2307bis (LDAP) group membership support to user authentication

See https://redmine.pfsense.org/issues/9527#note-8 Viktor Gurov

09:04 AM Bug #10757 (Feedback): IPv6: NPt rules on 6rd enabled WAN interfaces don't get bound to wan_stf

PR has been merged. Thanks! Renato Botelho

07:24 AM Feature #4035 (Resolved): AutoConfigBackup - selective deletion of automatic and manual backups

Anonymous

07:15 AM Bug #9917 (Closed): Widget Refresh Logic Flawed

Anonymous

07:14 AM Bug #10733 (Resolved): return_gateways_array() is called too many times

Anonymous

02:39 AM pfSense Packages Bug #10692: PIMD starts twice at boot

I did retest today e.g. using a clean install. Still bizar how many times pimd is started and stopped during boot. On... Louis B

12:39 AM Bug #9647: hn0: driver does not support altq

After 2 reboots file looks like this:... Greg M

12:06 AM pfSense Packages Bug #10767 (Rejected): squidGuard still not upgrading

stop Squid service first,
then ... Viktor Gurov

07/15/2020

10:50 PM pfSense Packages Bug #10767 (Rejected): squidGuard still not upgrading

Just upgraded squid to 0.4.44_29, it did not confirm a successful upgrade as I am used to but after a reboot it showe... Marcel Beerli

05:40 PM Revision 6b9f638a: Fix syntax error.

Jim Pingle

01:43 PM Revision 2360abcc: Fix #9647.

Instead of forcing the defaults in the OS driver (introducing yet another
change), set the default to enable ALTQ sup... Luiz Souza

12:49 PM Revision a039347b: Merge pull request #4402 from vktg/bnxtaltq

Ticket: #10762
* 'bnxtaltq' of https://github.com/vktg/pfsense:
add Broadcom NetXtreme to ALTQ-capable list. Implem... Luiz Souza

12:42 PM Bug #9647: hn0: driver does not support altq

And some more info...
This does NOT work:
kern.cam.boot_delay=10000
kern.ipc.nmbclusters="1000000"
kern.ipc.n... Greg M

12:31 PM Bug #9647: hn0: driver does not support altq

It works.
But did few reboots and there are MANY same settings added to loader.conf
Additional syntax error occur... Greg M

09:00 AM Bug #9647 (Feedback): hn0: driver does not support altq

Applied in changeset commit:2360abcc392bcca1fb7c0a9126a37d77a0e8f03d. Luiz Souza

12:41 PM Bug #10766 (Resolved): Syntax error

Fixed in commit:6b9f638a7a9d1cb3bcdc8b9ae7e79d00949c6ab4 Jim Pingle

12:25 PM Bug #10766 (Resolved): Syntax error

https://forum.netgate.com/topic/155303/latest-snap-broken
Greg M

11:04 AM Bug #10765 (New): Ampersands in ldap_extended_query are escaped twice

Hello,
I recently ran into an issue with an LDAP server whose Query field contained an ampersand.
The field is se... Louis Sautier

07:53 AM Feature #10762 (Feedback): add Broadcom NetXtreme to ALTQ-capable list

Committed. Thanks Viktor. Luiz Souza

07:40 AM Feature #10762 (Pull Request Review): add Broadcom NetXtreme to ALTQ-capable list

Jim Pingle

01:02 AM Feature #10762: add Broadcom NetXtreme to ALTQ-capable list

https://github.com/pfsense/pfsense/pull/4402 Viktor Gurov

12:38 AM Feature #10762 (Resolved): add Broadcom NetXtreme to ALTQ-capable list

After adding bnxt(4) driver to pfSense (see #9155),
it must be added to the ALTQ-capable list Viktor Gurov

07:48 AM pfSense Packages Feature #9913 (Pull Request Review): Adding note Squid Traffic Managment Settings about feature limit

Jim Pingle

07:19 AM pfSense Packages Feature #9913: Adding note Squid Traffic Managment Settings about feature limit

https://github.com/pfsense/FreeBSD-ports/pull/906 Viktor Gurov

07:41 AM pfSense Packages Bug #10763 (Pull Request Review): Incorrect link to frr_bgp.xml

Jim Pingle

02:24 AM pfSense Packages Bug #10763: Incorrect link to frr_bgp.xml

https://github.com/pfsense/FreeBSD-ports/pull/904 Viktor Gurov

02:22 AM pfSense Packages Bug #10763 (Resolved): Incorrect link to frr_bgp.xml

If you are trying to access the menu item Services / FRR BGP, for example, from Services / Snort / Interfaces,
you'l... Viktor Gurov

07:29 AM pfSense Packages Bug #10764 (Not a Bug): FRR 0.6.7_1 does not work

That message is not a bug, it's output from the FreeBSD package installation and can be ignored. If you have a proble... Jim Pingle

07:24 AM pfSense Packages Bug #10764 (Not a Bug): FRR 0.6.7_1 does not work

After update to FRR 0.6.7_1 ospf stop working
Message from frr7-7.3.1:
--
FRR's OSPF daemons tries to allocate... Ilian Cheneshev

06:37 AM pfSense Packages Bug #10445: BIND crashed when added RPZ. rpz is not a master or slave zone.

Typo fix:
https://github.com/pfsense/FreeBSD-ports/pull/905 Viktor Gurov

06:20 AM pfSense Packages Feature #10619: Various FRR enhancements

Ben Hughes wrote:
> Yes I had a look back at the FRR commit history and found only that as well.
>
> It will fai... Renato Botelho

06:01 AM Revision a92ec4b1: add Broadcom NetXtreme to ALTQ-capable list. Implements #10762

Viktor Gurov

12:34 AM Feature #9155: Add driver bnxt for Broadcom NetXtreme interfaces

tested on 2.5.0.a.20200709.1250:... Viktor Gurov

07/14/2020

02:04 PM pfSense Packages Feature #10619: Various FRR enhancements

Yes I had a look back at the FRR commit history and found only that as well.
It will fail to start complaining ab... Ben Hughes

01:12 PM pfSense Packages Feature #10619: Various FRR enhancements

Ben Hughes wrote:
> Argh i've had a bit of a freudian slip there, I meant @libunwind@.
What is the error you see ... Renato Botelho

11:48 AM pfSense Packages Feature #10619: Various FRR enhancements

Argh i've had a bit of a freudian slip there, I meant @libunwind@. Ben Hughes

11:47 AM pfSense Packages Feature #10619: Various FRR enhancements

Ben Hughes wrote:
> No problem, glad to get it in there!
>
> I've just been re-reviewing this looking forward to ... Renato Botelho

09:42 AM pfSense Packages Feature #10619: Various FRR enhancements

No problem, glad to get it in there!
I've just been re-reviewing this looking forward to getting off my custom pac... Ben Hughes

08:09 AM pfSense Packages Feature #10619 (Feedback): Various FRR enhancements

PR has been merged. Thanks! Renato Botelho

01:33 PM pfSense Packages Bug #10692: PIMD starts twice at boot

I just did a clean install (built on Tue Jul 14 09:23:16 EDT 2020) and PIMD 0.03 Significant issues left, but the boo... Louis B

01:26 PM Revision c271375e: 6RD/6to4 NAT rules fix. Issue #10757

Viktor Gurov

12:18 PM Revision 94be51d7: Merge pull request #4399 from vktg/dyndnsbackup

Renato Botelho

12:18 PM Revision b79526df: Merge pull request #4398 from vktg/limiterbackup

Renato Botelho

12:18 PM Revision d5cd602e: Merge pull request #4397 from vktg/cpvoucherrestore

Renato Botelho

11:37 AM Bug #9647: hn0: driver does not support altq

So I did some more digging...
Added /boot/loader.conf.local with contents:... Greg M

11:24 AM pfSense Packages Bug #10741 (Closed): Fails with CARP VIP Status - SQUID

Viktor Gurov

11:12 AM pfSense Packages Bug #10741: Fails with CARP VIP Status - SQUID

Thiago Orico wrote:
> adjusted the setting and it looks like it worked.
>
> We will monitor new tests.
Case so... Thiago Orico

09:27 AM Bug #10757 (Pull Request Review): IPv6: NPt rules on 6rd enabled WAN interfaces don't get bound to wan_stf

Jim Pingle

08:30 AM Bug #10757: IPv6: NPt rules on 6rd enabled WAN interfaces don't get bound to wan_stf

Fix:
https://github.com/pfsense/pfsense/pull/4401 Viktor Gurov

07:26 AM Bug #10757 (New): IPv6: NPt rules on 6rd enabled WAN interfaces don't get bound to wan_stf

pfctl creates binat rule only for the first binat rule interface, i.e.:... Viktor Gurov

07:31 AM Feature #3559: add option for backup ddns ( dynamic dns ) in restore area

thanks Luis Couto

07:19 AM Feature #3559 (Feedback): add option for backup ddns ( dynamic dns ) in restore area

PR has been merged. Thanks! Renato Botelho

07:19 AM Feature #4763 (Feedback): Restore from backup that contains only area Traffic Shaper doesn't restore Limiters

PR has been merged. Thanks! Renato Botelho

07:18 AM Bug #3128 (Feedback): Active voucher status not restored from backup

PR has been merged. Thanks! Renato Botelho

07:15 AM pfSense Packages Bug #10507 (Feedback): Unable to use forwarders

PR has been merged. Thanks! Renato Botelho

06:24 AM pfSense Packages Bug #10697 (Resolved): Missing New Line After NCP Parameter in Client Config

1.4.23_1, fixed:... Viktor Gurov

05:04 AM Bug #10730 (Resolved): Unable to use IDN symbols in DNS Resolver ACL

OK on 2.5.0.a.20200709.1250 Viktor Gurov

05:03 AM Bug #10742 (Resolved): unable to save DNS ACL in non-English interface

tested with Russian and French
works as expected on 2.5.0.a.20200709.1250 Viktor Gurov

04:59 AM Bug #9933 (Resolved): Captive Portal + Voucher not keeping auto-added "Pass-through MAC Auto Entry"

works as expected on 2.5.0.a.20200709.1250 Viktor Gurov

04:25 AM Bug #10724 (Resolved): Allowed Hostnames adds/deletes only one A entry

works as expected on 2.5.0.a.20200709.1250 Viktor Gurov

07/13/2020

08:35 PM pfSense Packages Feature #10421 (Resolved): suricata unix_stream support for telegraf

Jim Pingle

07:41 PM pfSense Packages Feature #10421: suricata unix_stream support for telegraf

Support for the requested feature has been added to the latest version of the Suricata GUI package, version 5.0.3. Th... Bill Meeks

08:35 PM pfSense Packages Bug #10751 (Resolved): Incorrect syslog() params on Suricata 5 pkg

Jim Pingle

07:39 PM pfSense Packages Bug #10751: Incorrect syslog() params on Suricata 5 pkg

This bug has been corrected in the latest version of the Suricata GUI package, version 5.0.3. The pull request has be... Bill Meeks

03:07 PM Revision c5c8893b: Add build_mask_rules for scheduler

before:
sched 7 config pipe 7 type fq_codel target 5ms interval 100ms quantum 300 limit 20480 flows 65535 noecn
afte... bonald

02:38 PM Revision 071c4ee8: Merge pull request #4395 from vktg/binatsrcfix

Renato Botelho

02:17 PM Bug #9577: radvd send_ra_forall failed on interface / can't join ipv6-allrouters

"One additional change FreeBSD-src that would make the #2878 Leave_group call unnecessary would be to eliminate the e... Ronald Schellberg

08:38 AM Bug #9577: radvd send_ra_forall failed on interface / can't join ipv6-allrouters

Don't know that anyone has noticed but the build system has stopped posting snaps since 7/9 00:50, which makes it mor... Ronald Schellberg

02:12 PM Feature #3559 (Pull Request Review): add option for backup ddns ( dynamic dns ) in restore area

Jim Pingle

02:11 PM Feature #4763 (Pull Request Review): Restore from backup that contains only area Traffic Shaper doesn't restore Limiters

Jim Pingle

02:10 PM Bug #3128 (Pull Request Review): Active voucher status not restored from backup

Jim Pingle

01:53 PM pfSense Packages Bug #10741: Fails with CARP VIP Status - SQUID

adjusted the setting and it looks like it worked.
We will monitor new tests. Thiago Orico

01:14 PM pfSense Packages Bug #10741: Fails with CARP VIP Status - SQUID

Symptoms persist.
Details:
inside the squid packet, the advanced rule of port 3128 of the proxy does not automa... Thiago Orico

10:31 AM Bug #10708: ZFS bootpool boot symlink issue

Reading this symlink issue I do remember that in the past days I did notice messages, indication that some files coul... Louis B

09:39 AM Bug #10752 (Feedback): 1:1 NAT issue if Internal IP has VIPs

PR has been merged. Thanks! Renato Botelho

08:29 AM Feature #10748 (Pull Request Review): Add support for limiting IPsec VPN access per user group via RADIUS

Jim Pingle

08:29 AM Bug #10758: Group Authentication is never used

If I remember right, it was used with the old Racoon IPsec implementation and may have been left out when we moved to... Jim Pingle

08:04 AM Bug #10755 (Rejected): NAT rules not updating.

I can't reproduce this. If the user had selected "<interface name> address" e.g. "WAN Address" in the rules, the conf... Jim Pingle

06:19 AM Bug #9796: kernel panic after removing interfaces

Hello,
I have crashes when switching interfaces off and on again. Especially when pimd is installed. That might be... Louis B

02:14 AM Feature #6544: RFC 3046 DHCP Option 82 support (and RFC 3315/4649/4580 for IPv6)

comment from https://forum.netgate.com/topic/64792/usd-50-dhcp-option-82-on-status_dhcp_leases-php-page/12:
Please s... Viktor Gurov