Project

General

Profile

Activity

From 10/19/2020 to 11/17/2020

11/17/2020

11:27 PM pfSense Packages Bug #8068 (Resolved): Status Traffic Totals package installation is not recorded in config.xml
it was fixed in #7153
I can see Status_Traffic_Totals under '<installedpackages>':...
Viktor Gurov
11:05 PM Bug #10713 (Duplicate): assigning a virtual IPv6 IP to an interface that has IPv6 PD track interface enabled makes the Virtual IP the primary IP after reboot
Viktor Gurov wrote:
> https://forum.netgate.com/topic/154856/multiple-ipv6-bugs-quirks-in-pfsense:
> Situation: you...
Viktor Gurov
11:02 PM Bug #5999: IPv6 IP Alias prevents Track Interface from working with DHCPv6 and RA
Allen Balaj wrote:
> I can confirm that this seems to resolve the original problem that I was experiencing. Really a...
Viktor Gurov
07:24 PM Bug #3965: dhcp6c started before bridge configured at boot, preventing interface tracking
It seems this is the same issue as https://github.com/opnsense/core/issues/3199
and patch https://github.com/Konte...
Manu Bretelle
06:12 PM Bug #11021 (Resolved): ral(4) driver kernel panics in arm64
The kernel panic here is resolved.
We can open a new bug report if this affects more than just my card.
Steve Wheeler
04:29 PM Bug #11077 (Resolved): Kernel panic when deleting VLAN interfaces
... Niccolò Marchi
04:13 PM Revision 5341fe71: Ticket #6028: Fix path to rules.debug.old
Renato Botelho
04:08 PM Revision 70f5cde9: Ticket #6028: Persist last valid set of rules
Save the last version of a valid set of rules under /cf/conf to make it
to persist on reboot. This allow it to be lo...
Renato Botelho
03:42 PM pfSense Packages Todo #11033: Update OpenVPN Client Export with OpenVPN 2.5.0 installer
Found some cipher list issues, all fixed now: https://github.com/pfsense/FreeBSD-ports/commit/eafeafea69ff0aae39757f4... Jim Pingle
03:21 PM pfSense Docs Correction #8854: [feedback form] Define Broadcast Domain and switch loops
I left a couple comments on the commit in GitLab. Jared Dillard
02:58 PM pfSense Docs Correction #8854 (Resolved): [feedback form] Define Broadcast Domain and switch loops
I rewrote the page and added links to pages with more information (rather than repeating it all there).
https://gi...
Jim Pingle
03:14 PM Revision d16ea02a: Add note about not using bogons on LANs. Issue #10866
Jim Pingle
02:14 PM Bug #11076: delete vlan crash system
Crash report begins. Anonymous machine information:
amd64
12.2-STABLE
FreeBSD 12.2-STABLE f47399e21af(devel-12)...
Niccolò Marchi
02:10 PM Bug #11076 (Rejected): delete vlan crash system
This site is not for support or diagnostic discussion. You have not provided nearly enough information to constitute ... Jim Pingle
02:08 PM Bug #11076 (Rejected): delete vlan crash system
delete vlan crash system Niccolò Marchi
12:40 PM pfSense Docs Correction #11075 (Resolved): Feedback on Packages — ACME package — Obtaining a Certificate
Fixed in the repo, will show up on the site shortly.
Thanks!
Jim Pingle
11:01 AM pfSense Docs Correction #11075 (Resolved): Feedback on Packages — ACME package — Obtaining a Certificate
*Page:* https://docs.netgate.com/pfsense/en/latest/packages/acme/certificate.html
*Feedback:*
This line is inco...
Robert Hirabayashi
10:28 AM pfSense Docs Todo #10866 (Resolved): "block bogon networks" silently blocks IPv6 client solicitations to DHCPv6 Server RA "managed" or "assisted"
https://gitlab.netgate.com/docs/pfSense-book/-/commit/06a28558a249d163f99617ab2f0bae7b0e815e28
* Added warning aga...
Jim Pingle
10:10 AM Bug #6028 (Feedback): no firewall rules loaded after reboot with invalid ruleset
Renato Botelho
08:43 AM pfSense Packages Feature #9563 (Resolved): Syslog-ng TLS support
Tested on 2.5.0-DEVELOPMENT (amd64)
built on Tue Nov 17 01:02:10 EST 2020
FreeBSD 12.2-STABLE
I've run Syslog-ng...
Azamat Khakimyanov
07:24 AM Bug #5476: Does not appear possible to use policy routing for traffic originating from the firewall (self)
Will this be fixed someday ? is it planned to be fixed ? Michael F
05:02 AM Bug #11053 (Resolved): PHP error on services_dhcp_relay.php
Renato Botelho
04:41 AM Bug #6880: Multiple DHCP6 WAN connections leads to multiple dhcp6c clients
We too see this issue. Two upstream DHCP6 lines. The confusing thing is, this works *somehow*, but with intermittent ... Tobias Meyer

11/16/2020

08:27 PM Bug #6880: Multiple DHCP6 WAN connections leads to multiple dhcp6c clients
Just ran into this and #4881 now that our backup ISP also has native v6. Looks like I'll have to work around it by ha... Caleb Carges
08:17 PM Feature #4881: Allow NPt to use dynamic IPv6 networks
Well it took until late 2020 but I finally have two local ISPs providing native /56 IPv6 routes over DHCPv6. It would... Caleb Carges
07:30 PM Revision f32d36c1: Add symlink to accommodate apple-touch-icon-precompressed.png
Steve Beaver
04:18 PM Bug #11053: PHP error on services_dhcp_relay.php
It's ok now thanks Niccolò Marchi
03:52 PM pfSense Docs Correction #11065 (Resolved): Outdated logo in diagrams
Last one: https://gitlab.netgate.com/docs/pfSense-book/-/commit/5f53ea7bc400bd5ad210bdaab5bea66710dde248 Jim Pingle
03:45 PM pfSense Docs Correction #11065: Outdated logo in diagrams
Replaced one of the others:
https://gitlab.netgate.com/docs/pfSense-book/-/commit/bf917211723d0f04167244cf0cf0fd38...
Jim Pingle
01:58 PM pfSense Docs Correction #11065 (In Progress): Outdated logo in diagrams
Replaced the diagram in OpenVPN:
https://gitlab.netgate.com/docs/pfSense-book/-/commit/a9106b92fe579a9d8fea8a62414...
Jim Pingle
01:51 PM Bug #1819: DNS Resolver Not Registering DHCP Server Specified Domain Name
Wouldn't it be a good idea to just add a note somewhere near the option itself, that it doesn't work and probably wil... xander bron
01:08 PM Bug #1819 (New): DNS Resolver Not Registering DHCP Server Specified Domain Name
Anonymous
01:31 PM Feature #11068 (Feedback): Safari 14.0.1 on MacOS 11.0.1 (Big Sur) asked for the favicon apple-touch-icon-precompressed.png instead of apple-touch-icon.png
Added symlink apple-touch-icon-precompressed.png -> apple-touch-icon.png Anonymous
01:13 PM Bug #9136 (New): IPv6 Tracking Interfaces Lose IPv6 Address in Certain Cases
Anonymous
12:11 PM Revision 50b84727: Create poesX interfaces for PPPoE server. Issue #11034
Viktor Gurov
12:10 PM Revision 9447acda: DynDNS status icons. Implements #3229
Viktor Gurov
12:09 PM Revision 3501e0c4: No-IP DynDNS provider API update. Implements #6638
Viktor Gurov
11:48 AM pfSense Packages Bug #11069 (Feedback): Reset Traffic Totals Not Working
Thanks! This looks good and was merged. Should be able to test the change in the next build. Jared Dillard
07:21 AM pfSense Packages Bug #11069 (Pull Request Review): Reset Traffic Totals Not Working
Jim Pingle
10:33 AM pfSense Packages Bug #11074 (Confirmed): bind Zone Settings Zones, Save button opens "Confirmation required to save changes"
possible bug (or annoyance :) ) in bind package?
When I try to hit the Save button in the Package Bind: Zone Setti...
Christian Fertig
07:53 AM pfSense Packages Feature #10242: E2guardian Web filtering package
Viktor is the person who was working on this package Renato Botelho
07:38 AM pfSense Packages Feature #10909: #define MAXVIFS 32 to 64
Louis van Breda wrote:
> OK, I understand. I will rebuild for 32 MAXVIFS. 32 VIFS are plenty for me, but others woul...
Renato Botelho
07:12 AM pfSense Packages Feature #10909: #define MAXVIFS 32 to 64
OK, I understand. I will rebuild for 32 MAXVIFS. 32 VIFS are plenty for me, but others would perhaps like to have mor... Louis B
06:08 AM pfSense Packages Feature #10909: #define MAXVIFS 32 to 64
Louis van Breda wrote:
> I fixed the problem. It was not in the OS. I did compile the PIMD-package in the wrong way ...
Renato Botelho
07:36 AM Bug #11073 (Duplicate): Traffic monitor widget error
Duplicate of #11072 Jim Pingle
07:35 AM Bug #11072 (Confirmed): Setting "Inverse" to "Off" does not save in the Traffic Graphs Dashboard widget
Jim Pingle
07:27 AM pfSense Packages Todo #11033 (Resolved): Update OpenVPN Client Export with OpenVPN 2.5.0 installer
Basic functions work, if anyone has new issues they find, let's move them to the forum and then we can open new issue... Jim Pingle
07:24 AM Todo #11020: Update OpenVPN to 2.5.0
Not nearly enough information, either. Post on the forum to discuss the problem and provide a lot more information ab... Jim Pingle
07:24 AM Feature #11070 (Rejected): Design and Simplicity Changes to High Availability
I don't see most of these as being feasible. Some are more error prone than the current design, others would be quite... Jim Pingle
07:19 AM Bug #11066 (Duplicate): Dashboard: Unit on Traffic Widget not consistent
Duplicate of #10602 Jim Pingle
07:17 AM pfSense Docs Correction #11067: Update status of 802.11ac support
The feedback you submitted was for a documentation update, but the text you entered sounded like a feature request. W... Jim Pingle
06:20 AM Feature #3229: make DynDNS status accessible to the colorblind
Applied in changeset commit:9447acda18c5aaca7699cd66f7aa387cc9ef82b0. Viktor Gurov
06:12 AM Feature #3229 (Feedback): make DynDNS status accessible to the colorblind
PR has been merged. Thanks! Renato Botelho
06:15 AM Todo #6638: Update no-ip DDNS to new API
Applied in changeset commit:3501e0c453b7b1498e1d7faaba324bf01be084c6. Viktor Gurov
06:09 AM Todo #6638 (Feedback): Update no-ip DDNS to new API
PR has been merged. Thanks! Renato Botelho
06:12 AM Bug #11034 (Feedback): poesX interfaces is not created
PR has been merged. Thanks! Renato Botelho
05:09 AM Bug #11006 (Resolved): L2TP Server and Client both use "l2tpX" for interface names
Renato Botelho
02:45 AM Bug #9796: kernel panic after removing interfaces
hello.
I had the same problem on the 11/11/2020 build. i made a video and here are the dumps if you want to watch ...
Anonymous

11/15/2020

08:25 PM Bug #5999: IPv6 IP Alias prevents Track Interface from working with DHCPv6 and RA
I can confirm that this seems to resolve the original problem that I was experiencing. Really appreciate the fix guys... Allen Balaj
05:07 PM Bug #6880: Multiple DHCP6 WAN connections leads to multiple dhcp6c clients
I'm running into the same issue Randy Cross
10:33 AM Bug #8325: UPnP not available for pppoe-Clients
Thanks for taking up this topic again.
My description was not precise enough, as I learn from your answer. I will tr...
Thomas Levi
09:45 AM Bug #11073 (Duplicate): Traffic monitor widget error
On dashboard in traffic monitor widget isn't possible to save inverse "off"
Niccolò Marchi
08:06 AM pfSense Packages Feature #10356 (Resolved): Support for additional Notification Support
Tested on 2.5.0-DEVELOPMENT (amd64)
built on Sun Nov 15 01:02:10 EST 2020
FreeBSD 12.2-STABLE
Telegram notificat...
Azamat Khakimyanov
06:38 AM pfSense Packages Feature #10785 (Resolved): Allow Setting of ldapcachetime
Tested on 2.4.5_p1 and on 2.5.0-DEVELOPMENT (built on Sun Nov 15 01:02:10 EST 2020)
LDAP Cache Time option is now ...
Azamat Khakimyanov
05:04 AM pfSense Packages Feature #10909: #define MAXVIFS 32 to 64
I fixed the problem. It was not in the OS. I did compile the PIMD-package in the wrong way in relation MAXVIFS64. So ... Louis B
02:16 AM Bug #11072: Setting "Inverse" to "Off" does not save in the Traffic Graphs Dashboard widget
Version Is 2.5 Niccolò Marchi
02:15 AM Bug #11072 (Resolved): Setting "Inverse" to "Off" does not save in the Traffic Graphs Dashboard widget
On dashboard in traffic monitor widget isn't possible to save inverse "off" Niccolò Marchi

11/14/2020

07:24 PM pfSense Packages Todo #11033: Update OpenVPN Client Export with OpenVPN 2.5.0 installer
Tested version 1.5_1 on 2.4.5-p1 64-bit installer worked and installed config properly but did present warning during... Jordan G
04:30 PM pfSense Docs New Content #11071 (Resolved): Add documentation for missing configuration items on IPv6 Router Advertisements
*Page:* https://docs.netgate.com/pfsense/en/latest/services/dhcp/ipv6-ra.html
*Feedback:*
Include description f...
Marcos M
03:32 PM Todo #11020: Update OpenVPN to 2.5.0
Niccolò Marchi wrote:
> cipher in ovpn file is always empty
This is likely a misconfiguraiton and not a bug. If t...
Marcos M
05:08 AM Todo #11020: Update OpenVPN to 2.5.0
cipher in ovpn file is always empty Niccolò Marchi
12:02 PM Feature #11070 (Rejected): Design and Simplicity Changes to High Availability
Currently there are several "pitfalls" to setting up an HA pair with pfSense that may benefit from some design change... Kris Phillips
11:22 AM Bug #10812 (Resolved): Traffic graph shows 2X the actual traffic on VLAN interfaces.
Tested on :... Danilo Zrenjanin
10:49 AM pfSense Packages Bug #11069: Reset Traffic Totals Not Working
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/7 Viktor Gurov
10:06 AM pfSense Packages Bug #11069 (Resolved): Reset Traffic Totals Not Working
https://forum.netgate.com/topic/152088/reset-traffic-totals-not-working:
I wanted to reset the data showing in the S...
Viktor Gurov
09:03 AM Feature #11068 (Resolved): Safari 14.0.1 on MacOS 11.0.1 (Big Sur) asked for the favicon apple-touch-icon-precompressed.png instead of apple-touch-icon.png
Safari 14.0.1 on MacOS 11.0.1 (Big Sur) asked for the favicon apple-touch-icon-precompressed.png instead of apple-tou... John Jacobs
07:04 AM pfSense Docs Correction #11067 (New): Update status of 802.11ac support
*Page:* https://docs.netgate.com/pfsense/en/latest/wireless/hardware.html
*Feedback:*
FreeBSD 12.2 does support...
Jurgen Debo
06:36 AM Bug #11066 (Duplicate): Dashboard: Unit on Traffic Widget not consistent
On the pfSense Dashboard the "Traffic Graphs" widget can be set to show "Unit Size" in "Bits" or "Bytes". Positioning... Adrian Zaugg
05:41 AM pfSense Packages Bug #10936: both haproxy/haproxy-devel non-existent option lb-agent-chk
Tested:
haproxy-devel 0.61_2 - "Agent" doesn't appear under Health check method. It's fixed.

HA-Proxy 0.60_...
Danilo Zrenjanin
05:02 AM Feature #10483 (Duplicate): Add UI for EAP configuration for WLAN interfaces
Duplicate of #2400 Viktor Gurov
04:56 AM Bug #11051 (Resolved): Unbound: custom TLS listen port ignored
Tested on:... Danilo Zrenjanin
03:46 AM Todo #6638: Update no-ip DDNS to new API
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/50 Viktor Gurov
03:34 AM Feature #3229: make DynDNS status accessible to the colorblind
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/49 Viktor Gurov
03:34 AM Bug #10270 (Resolved): OMAPI / disableauthoritative / alwaysbroadcast not saved inside dhcpd.conf
Tested on:... Danilo Zrenjanin
02:42 AM Bug #11034: poesX interfaces is not created
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/48 Viktor Gurov
02:29 AM Feature #11057 (Resolved): Add default route indicator to Gateways widget
Viktor Gurov

11/13/2020

10:04 PM Feature #11045 (Resolved): Improve link state visibility on Status > Interfaces
Alhusein Zawi
07:53 PM Feature #11045: Improve link state visibility on Status > Interfaces
applied and showing up as expected Alhusein Zawi
08:20 AM Feature #11045: Improve link state visibility on Status > Interfaces
Applied in changeset commit:f35f9392543100e2b488f1942bfde608047cb4ee. Viktor Gurov
08:12 AM Feature #11045 (Feedback): Improve link state visibility on Status > Interfaces
Status interfaces icon. Implements #11045 Renato Botelho
08:00 AM Feature #11045 (Pull Request Review): Improve link state visibility on Status > Interfaces
Jim Pingle
04:25 AM Feature #11045: Improve link state visibility on Status > Interfaces
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/47 Viktor Gurov
07:32 PM Bug #8325: UPnP not available for pppoe-Clients
I'm unable to reproduce this issue. Steps followed:
1. Create PPPoE interface under Interfaces --> Assignments --...
Kris Phillips
07:25 PM Bug #9626: When deny write permission is assigned to a user, there is no error feedback if the user tries to write something
Can confirm this is definitely what occurs. However, there is a logged event in the System Logs about a write deny, ... Kris Phillips
07:15 PM pfSense Packages Bug #9849 (Rejected): NUT not starting as root? Isn't loading USB drivers?
Marking bug report as rejected, since it is unable to be confirmed as an issue. Kris Phillips
05:48 PM Feature #11057: Add default route indicator to Gateways widget
working and showing up
2.5.0.a.20201113.1250
thanks
Alhusein Zawi
04:15 PM Feature #11057: Add default route indicator to Gateways widget
It was merged after that snapshot. Try one from later today/tomorrow Jim Pingle
03:41 PM Feature #11057: Add default route indicator to Gateways widget

Default route icon is not showing up on Gateway dashboard widget.
2.5.0.a.20201113.0650
Alhusein Zawi
08:20 AM Feature #11057: Add default route indicator to Gateways widget
Applied in changeset commit:0630b8315c4eebd304f1557e50de11a1ab21b409. Viktor Gurov
08:12 AM Feature #11057 (Feedback): Add default route indicator to Gateways widget
PR has been merged. Thanks! Renato Botelho
07:59 AM Feature #11057 (Pull Request Review): Add default route indicator to Gateways widget
Jim Pingle
03:21 AM Feature #11057: Add default route indicator to Gateways widget
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/46 Viktor Gurov
02:38 PM pfSense Docs Correction #9370: Update old screenshots
Some more (may overlap the above):... Jim Pingle
02:37 PM pfSense Docs Correction #11065 (Resolved): Outdated logo in diagrams
Similar to #10782, I found a few more instances of diagrams using the old logo:
https://docs.netgate.com/pfsense/e...
Jim Pingle
02:21 PM Feature #11058: In dashboard log widget an option to automatically resolve source or destination names depending whether names exist in private address space would be extremely useful
It would be confusing and of minimal use since the log scrolls dynamically, there is no telling if the resolve would ... Jim Pingle
01:34 PM Feature #11058: In dashboard log widget an option to automatically resolve source or destination names depending whether names exist in private address space would be extremely useful
Hi Jim,
Would a button that does a one shot resolve on the widget be an option?
Thanks,
Andy
And Ritchie
02:12 PM Revision f35f9392: Status interfaces icon. Implements #11045
Viktor Gurov
02:12 PM Revision 0630b831: Gateways widget improvements. Implements #11057
Viktor Gurov
02:11 PM Revision b3cc5117: Backup extra data fixes. Issue #11050
Viktor Gurov
11:01 AM Bug #6321: Problem with connecting l2tp over ipsec from android and windows
Windows settings:
https://docs.microsoft.com/en-us/troubleshoot/windows-server/networking/configure-l2tp-ipsec-serve...
Viktor Gurov
10:58 AM Bug #11006: L2TP Server and Client both use "l2tpX" for interface names
Works fine !
Thanks a lot !!!
Best of the best !!!
Evgeny Korostelev
10:20 AM pfSense Docs Correction #9520 (Closed): Feedback on Routing and Multi-WAN — Gateway Settings
This looks good for the current version. Jared Dillard
10:13 AM pfSense Docs Correction #10643 (Closed): Feedback on Routing and Multi-WAN — Gateway Settings
This looks good. Jared Dillard
10:11 AM pfSense Docs Correction #9570 (Closed): Feedback on Routing and Multi-WAN — Gateway Settings
This looks good. Jared Dillard
09:46 AM Bug #11059 (Resolved): L2TP Server is restarted when administering users
Renato Botelho
09:30 AM Bug #11059: L2TP Server is restarted when administering users
Thanks a lot !!! Evgeny Korostelev
09:27 AM Feature #4278 (Resolved): Mail notification change name of the interface info more readable - pfsense 2.2
Current message includes friendly interface name for years
HA cluster member "(172.16.185.250@em0): (WAN)" has res...
Renato Botelho
09:14 AM Bug #11064 (Feedback): WARNING: write_config() was called without description
Fixed. Renato Botelho
09:02 AM Bug #11064 (In Progress): WARNING: write_config() was called without description
I've changed it on ports but didn't bump PORTREVISION so new packages were not built. I'll take care of that Renato Botelho
08:35 AM Bug #11064 (Resolved): WARNING: write_config() was called without description
found some files with 'write_config()' without description:... Viktor Gurov
08:38 AM Bug #4740: Intel wireless kernel panic in infrastructure mode with WPA
Considering all big FreeBSD changes since 2.2.x I must ask. Is it still happening on current versions? Renato Botelho
08:34 AM pfSense Packages Feature #4335 (Resolved): NUT send notifications via built in smtp notification feature
NUT sends SMTP notification using pfSense main notification settings since 2016 Renato Botelho
08:32 AM Todo #2942 (Rejected): PHP-Growl: Growl Talk Notifications UDP 9887 implementation deprecated. GNTP is the new standard notification protocol.
Growl support was removed on pfSense 2.5.0 Renato Botelho
08:26 AM Bug #11050 (Feedback): "Backup extra data" does not behave properly
PR has been merged. Thanks! Renato Botelho
08:20 AM Bug #11050: "Backup extra data" does not behave properly
Viktor Gurov wrote:
> https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/45
Merged. Thanks!
Renato Botelho
08:11 AM Bug #11050: "Backup extra data" does not behave properly
bsdinstall fix:
https://gitlab.netgate.com/pfSense/FreeBSD-src/-/merge_requests/1
Viktor Gurov

11/12/2020

11:39 PM Feature #11041 (Resolved): Add hardware interface name to popup hint in Interfaces Dashboard widget
Alhusein Zawi
11:37 PM Feature #11041: Add hardware interface name to popup hint in Interfaces Dashboard widget
applied
when I put the mouse on interface block in dashboard it popups interface name (emx).
example:
LAN > e...
Alhusein Zawi
07:25 AM Feature #11041: Add hardware interface name to popup hint in Interfaces Dashboard widget
Applied in changeset commit:c073d66224cc6ea122cec2a6067b038ed2593043. Viktor Gurov
07:16 AM Feature #11041 (Feedback): Add hardware interface name to popup hint in Interfaces Dashboard widget
PR has been merged. Thanks! Renato Botelho
06:44 PM Bug #11021: ral(4) driver kernel panics in arm64
Testing:... Steve Wheeler
11:40 AM Bug #11021 (Feedback): ral(4) driver kernel panics in arm64
A new fix was committed by bz@ and imported to our tree. Next round of snapshots will have it Renato Botelho
04:59 PM Revision e9119e9a: Catch up with the pfSense-module-0.69 which renamed the interface create function.
Luiz Souza
04:45 PM pfSense Docs Correction #10782 (Closed): Outdated pfSense logo is still in use
This looks good. I added the source locations in this commit: https://gitlab.netgate.com/docs/pfSense-book/-/commit/2... Jared Dillard
03:44 PM pfSense Docs Correction #10782 (Feedback): Outdated pfSense logo is still in use
Addressed in https://gitlab.netgate.com/docs/pfSense-book/-/commit/83082ffa5c605fc424f04ea25bfcde4320892206 Jim Pingle
04:15 PM Revision d0f746e3: Remove old nss_ldap.conf if it exists before symlinking. Fixes #8698
Jim Pingle
04:08 PM Revision e6e6ad5c: Merge pull request #4326 from vktg/voucherviaurl
Renato Botelho
03:44 PM pfSense Docs Correction #10643 (Feedback): Feedback on Routing and Multi-WAN — Gateway Settings
Addressed in https://gitlab.netgate.com/docs/pfSense-book/-/commit/83082ffa5c605fc424f04ea25bfcde4320892206 Jim Pingle
03:44 PM pfSense Docs Correction #9570 (Feedback): Feedback on Routing and Multi-WAN — Gateway Settings
Addressed in https://gitlab.netgate.com/docs/pfSense-book/-/commit/83082ffa5c605fc424f04ea25bfcde4320892206 Jim Pingle
03:43 PM pfSense Docs Correction #9520 (Feedback): Feedback on Routing and Multi-WAN — Gateway Settings
Addressed in https://gitlab.netgate.com/docs/pfSense-book/-/commit/83082ffa5c605fc424f04ea25bfcde4320892206 Jim Pingle
02:49 PM pfSense Packages Bug #10429 (Feedback): Status Traffic Total broken 2.4.5
The diff was applied in this commit and should be testable once the packages rebuild for package version 2.3.2: https... Jared Dillard
01:54 PM Bug #9450: Multiwan gateway group fail-over not working as expected (possible race condition)
I’m not getting desired behavior but I don’t know if it’s caused by changes to this
output of /tmp/rules.debug aft...
Dee D
01:50 PM Revision 2a50b9b4: Fix #11053: Check variable before call implode()
Renato Botelho
01:37 PM Revision 7a8e671f: Merge pull request #4486 from apollo13/patch-2
Renato Botelho
01:29 PM Revision 53ea4b8b: Allow to submit voucher via URL. Implements #1984
Viktor Gurov
01:21 PM Revision 21654184: Fixed #11062 by adding support for fingerprint specification
Steve Beaver
01:20 PM Bug #7307 (Feedback): ZFS installer - shuts down instead of rebooting
Jim Pingle
01:18 PM Revision 8693a501: Do not restart L2TP VPN server when deleting user. Fixes #11059
Viktor Gurov
01:17 PM Revision 298df54d: Unbound custom TLS port fix. Issue #11051
Viktor Gurov
01:15 PM Revision c073d662: Dashboard widget interface name popup hint. Implements #11041
Viktor Gurov
01:13 PM Todo #9417: Convert LDAP TLS setup from environment to LDAP_OPT_X_TLS_* set options
See also: #10704 Jim Pingle
01:13 PM Todo #10704 (Feedback): Work around PHP issues with SSL LDAP and multiple authentication servers
This is technically waiting for feedback on #9417 so I'm changing the status accordingly.
If #9417 has to be backe...
Jim Pingle
12:31 PM Revision b704b6ef: Add a warning when write_config() is called without description
Renato Botelho
12:31 PM Revision e85ae672: Fix #204: Add messages to all write_config() calls
Renato Botelho
12:31 PM Revision 526df36e: Remove commented out lines
Renato Botelho
12:31 PM Revision cffb85bf: Fix indent
Renato Botelho
12:30 PM Bug #6025: Load balancing fails when one gateway has a weight of 1 and another gateway has a weight >1
Fabian Schnelle wrote:
> After this change, policy based routing no longer works.
> The entry in the firewall rule...
Jim Pingle
11:32 AM Feature #11058 (Rejected): In dashboard log widget an option to automatically resolve source or destination names depending whether names exist in private address space would be extremely useful
That would be overkill for a dashboard widget. Someone can resolve via the firewall log view if needed. There are als... Jim Pingle
11:14 AM Bug #11063: PHP error if SMTP notification fails
This happens if an SMTP notification can't be sent (e.g. WAN down, no default route, etc). Not specific to any interf... Jim Pingle
11:06 AM Bug #11063 (Resolved): PHP error if SMTP notification fails
amd64
12.2-STABLE
FreeBSD 12.2-STABLE 573bcbb6506(devel-12) pfSense
Crash report details:
PHP Errors:
[12-No...
Niccolò Marchi
10:20 AM Feature #7467 (Feedback): Add iPhone/Android/Generic USB tethering support
I've enabled it to build on armv7 and arm64 on 2.5.0. Please check next round of snapshots Renato Botelho
09:40 AM Feature #7467: Add iPhone/Android/Generic USB tethering support
I am on the 2.4.5-RELEASE-p1 (arm64), SG-1100
The if_ipheth kernel module is missing:...
Oleg Tyaglo
10:17 AM Feature #8698: LDAP authenticated users should be able to log in via ssh
Looks like the errors some are seeing (including myself) are from @/usr/local/etc/nss_ldap.conf@ not being setup as a... Jim Pingle
04:54 AM Feature #8698: LDAP authenticated users should be able to log in via ssh
pfSense 2.5.0.a.20201111.1850 test with FreeIPA server 4.8.4:
Authentication server configuration:...
Viktor Gurov
10:15 AM Feature #1984: Allow CP Voucher submission via URL so they can be distributed as QR code
Applied in changeset commit:53ea4b8b8b0c4a05c3d11bae8d26504e17e161dd. Viktor Gurov
10:08 AM Feature #1984 (Feedback): Allow CP Voucher submission via URL so they can be distributed as QR code
PR has been merged. Thanks! Renato Botelho
09:51 AM Bug #11037 (Resolved): Change APIs for HE.net Tunnelbroker dynamic DNS update
Tested the patch on the 2.4.5-p1. It works fine.
Ticket resolved.
Danilo Zrenjanin
09:45 AM Revision d2db8e58: Add a comment about CARP in generated rules
Currently the rules.debug file looks like this:
```
# Snort package
block log quick from <snort2c> to any tracker 100...
Florian Apolloner
09:21 AM Bug #6028 (In Progress): no firewall rules loaded after reboot with invalid ruleset
Renato Botelho
08:09 AM Bug #11050: "Backup extra data" does not behave properly
The PR Addresses the last three points but not the first.
Part of the first one will need fixed in the src repo in...
Jim Pingle
07:51 AM Bug #11050 (Pull Request Review): "Backup extra data" does not behave properly
Renato Botelho
02:17 AM Bug #11050: "Backup extra data" does not behave properly
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/45 Viktor Gurov
08:00 AM Bug #11053 (Feedback): PHP error on services_dhcp_relay.php
Applied in changeset commit:2a50b9b49e47e9d2113facd7b97d25478135e3d6. Renato Botelho
07:59 AM Bug #10919: Improve handling of OpenVPN data cipher negotiation options
The changes through comment 12 appear to fix my issue. S Premeau
07:41 AM Bug #11061: CARP rules show up as "part" of the snort package in rules.debug
Thank you very much. Florian Apolloner
07:38 AM Bug #11061 (Feedback): CARP rules show up as "part" of the snort package in rules.debug
PR has been merged. Thanks! Renato Botelho
03:47 AM Bug #11061 (Resolved): CARP rules show up as "part" of the snort package in rules.debug
This is only a cosmetic change, but it adds a header to the generated rules to separate it from the snort package. Se... Florian Apolloner
07:25 AM Bug #11059: L2TP Server is restarted when administering users
Applied in changeset commit:8693a501df0d4c791a0858f7460db1b580fe337d. Viktor Gurov
07:19 AM Bug #11059 (Feedback): L2TP Server is restarted when administering users
PR has been merged. Thanks! Renato Botelho
07:17 AM Bug #11051 (Feedback): Unbound: custom TLS listen port ignored
PR has been merged. Thanks! Renato Botelho
06:35 AM Todo #204: All write_config() statements should include a reason of some sort
Applied in changeset commit:e85ae672e45f0e883478c74b630b1723908998dd. Renato Botelho
06:32 AM Todo #204 (Feedback): All write_config() statements should include a reason of some sort
All write_config() calls on base and ports now have a description. Added a Warning when it's called without it so de... Renato Botelho
02:43 AM pfSense Packages Feature #11060 (Resolved): Block access to consumer Google accounts
WebGUI feature for:
https://support.google.com/a/answer/1668854?hl=en:
To prevent users from signing in to Goog...
Viktor Gurov
12:36 AM Bug #11005 (Closed): IPv6 Prefix Delegation not requested if no interfaces set to track6
This seems to work great now. Thank you.
Chris Linstruth
12:09 AM pfSense Packages Feature #10950 (Resolved): Allow to select only netmap-compatible cards for inline mode
tested
Jordan Greene wrote:
> I was able to add and start an interface using snort with a USB ethernet adapter (...
Viktor Gurov

11/11/2020

11:57 PM Bug #11059: L2TP Server is restarted when administering users
Fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/44
Viktor Gurov
11:18 PM Bug #11059 (Resolved): L2TP Server is restarted when administering users
pfSense 2.5.0 development
When i delete l2tp user on l2tp server, all users are disconnected :(
Please fix it again
Evgeny Korostelev
08:17 PM Bug #10942: LDAP Auth error after update 2.5.0.a.20200930.1303
Testing LDAP authentication in
2.5.0-DEVELOPMENT (amd64)
built on Wed Nov 11 12:59:57 EST 2020
FreeBSD 12.2-STA...
Max Leighton
07:17 PM Feature #11057: Add default route indicator to Gateways widget
Apologies, should be gateways widget in dashboard. And Ritchie
06:48 PM Feature #11057 (Resolved): Add default route indicator to Gateways widget
Routing page under system tab indicates the current default route with an icon.
This would be ideal on the routing w...
And Ritchie
07:01 PM Feature #11058 (Rejected): In dashboard log widget an option to automatically resolve source or destination names depending whether names exist in private address space would be extremely useful
I understand that there may not be a desire based on performance reasons to resolve ip addresses from an external sou... And Ritchie
06:11 PM pfSense Packages Feature #9833: ACME: add ability to use custom ACME server
Michael Long wrote:
> I'll add my voice to this request. I just set up a local step-ca ACME server and would love t...
Stanislav Dimov
06:06 PM Revision 9bf4a147: OpenVPN client fallback cipher variable changed. Fixes #10919
Jim Pingle
05:19 PM Bug #6025: Load balancing fails when one gateway has a weight of 1 and another gateway has a weight >1
After this change, policy based routing no longer works.
The entry in the firewall rule is completely ignored and t...
Fabian Schnelle
03:58 PM Feature #11056 (New): Add option to disable flow-control on interfaces in GUI
Add toggle on/off function for Flow Control on interfaces as alternative to adding lines to loader.conf.local
Requ...
Paighton Bisconer
02:53 PM Revision 85652efd: Retire some packages from pfSense 2.5.0:
OpenBGPd - replaced by FRR
Quagga_OSPF - replaced by FRR
routed - not actively maintained and rarely used
blinkled - ...
Renato Botelho
01:33 PM pfSense Packages Bug #11055 (Resolved): Insecure FreeRADIUS defaults
* "Disable Weak EAP Types" (EAP tab, EAP section) should be enabled by default
* "Default EAP Types" (EAP tab, EAP s...
Anonymous
01:32 PM Feature #8698: LDAP authenticated users should be able to log in via ssh
Testing this with Active Directory, I'm able to successfully log into the webGUI with LDAP credentials, but attemptin... Max Leighton
01:23 PM pfSense Packages Bug #11054 (Assigned): Check Client Certificate CN not working as described
Page: Services / FreeRADIUS
Tab: EAP
Section: EAP-TLS
Option: Check Client Certificate CN
Actual result when en...
Anonymous
01:15 PM Feature #11041 (Pull Request Review): Add hardware interface name to popup hint in Interfaces Dashboard widget
Jim Pingle
12:13 PM Feature #11041: Add hardware interface name to popup hint in Interfaces Dashboard widget
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/43 Viktor Gurov
12:07 PM Bug #10919: Improve handling of OpenVPN data cipher negotiation options
Nice catch, I've pushed a fix. Thanks! Jim Pingle
12:05 PM Bug #10919: Improve handling of OpenVPN data cipher negotiation options
OpenVPN client edit is not saving / loading the Fallback cypher setting.
Looking through /usr/local/www/vpn_openvp...
Anonymous
12:03 PM Bug #11051 (Pull Request Review): Unbound: custom TLS listen port ignored
Jim Pingle
10:34 AM Bug #11051: Unbound: custom TLS listen port ignored
Fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/42
Viktor Gurov
11:42 AM Bug #11053 (Resolved): PHP error on services_dhcp_relay.php

amd64
12.2-STABLE
FreeBSD 12.2-STABLE 573bcbb6506(devel-12) pfSense
Crash report details:
PHP Errors:
[11-...
Niccolò Marchi
10:15 AM pfSense Packages Todo #11033: Update OpenVPN Client Export with OpenVPN 2.5.0 installer
Please post on the forum for assistance. You haven't provided nearly enough information there. Jim Pingle
10:13 AM pfSense Packages Todo #11033: Update OpenVPN Client Export with OpenVPN 2.5.0 installer
i have this problem with the last client_export Niccolò Marchi
10:11 AM pfSense Packages Bug #10579 (Rejected): Blinkled segfaults with SEGV_MAPERR
blinkled package is now retired on 2.5.0 Renato Botelho
10:07 AM pfSense Packages Feature #7660 (Rejected): Please add the ability to monitor more than one CARP address to the Quagga GUI support
Quagga package is now retired on 2.5.0 Renato Botelho
10:06 AM pfSense Packages Feature #4635 (Rejected): openbgpd options applied at group level
OpenBGPD package is now retired on 2.5.0 Renato Botelho
10:06 AM pfSense Packages Feature #6479 (Rejected): Add OpenBGPD config to High Availability Sync option to sync
OpenBGPD package is now retired on 2.5.0 Renato Botelho
10:06 AM pfSense Packages Feature #7657 (Rejected): OpenBGPD local-as feature in neighbors context
OpenBGPD package is now retired on 2.5.0 Renato Botelho
09:43 AM pfSense Packages Feature #10915 (Resolved): security/pfSense-pkg-sudo sudo.inc enhancement for better support of NRPE
Tested on 2.4.5_p1 and on 2.5.0-DEVELOPMENT (built on Wed Nov 11 01:06:53 EST 2020)
With NRPE package installed th...
Azamat Khakimyanov
09:32 AM pfSense Packages Bug #10927 (Resolved): pfBlockerNG-devel fullfill the pfsense config history when RAM disk in use
Tested on 2.4.4_p3, on 2.4.5_p1 and on 2.5.0-DEVELOPMENT (built on Wed Nov 11 01:06:53 EST 2020)
On 2.4.4_p3 I sti...
Azamat Khakimyanov
08:10 AM pfSense Packages Feature #11008: Add option to mail report pkg to skip sending email if no output
The text is correct in the package. When the box is checked, it only sends the e-mail if there is output. Adding the ... Jim Pingle
05:29 AM pfSense Packages Feature #11008 (Resolved): Add option to mail report pkg to skip sending email if no output
Tested on 2.4.5_p1 and on 2.5.0-DEVELOPMENT (built on Wed Nov 11 01:06:53 EST 2020)
There is an option 'Skip If No...
Azamat Khakimyanov
07:27 AM pfSense Packages Feature #10909: #define MAXVIFS 32 to 64
Renato, that ^fixed^ the problem :) I did create a FreeBSD bug report (251047)
Louis B
05:26 AM pfSense Packages Feature #10909 (New): #define MAXVIFS 32 to 64
Done! It's all back to 32 Renato Botelho
12:56 AM pfSense Packages Feature #10909: #define MAXVIFS 32 to 64
Renato, you only have to rebuild the OS. There is no neat to do something with the pfSense pimd package since those a... Louis B
07:09 AM pfSense Packages Bug #11052 (Not a Bug): Authtype MD5-Password dont work in freeradius3
When using hashed options like MD5 the "password" field must be filled with the _pre-hashed_ password, not the actual... Jim Pingle

11/10/2020

07:22 PM pfSense Packages Bug #11052: Authtype MD5-Password dont work in freeradius3
I tested in menu Diagnostic->authentication Teste Teste
07:20 PM pfSense Packages Bug #11052 (Not a Bug): Authtype MD5-Password dont work in freeradius3
system: PFsense 2.5
package: freeradius3
issue: I create a user in *users tab* with option *Password Encription* MD...
Teste Teste
07:20 PM pfSense Packages Bug #11030 (Resolved): OpenVPN Client Export shows server certs as clients
Tested pkg version 1.5_1 in:... Steve Wheeler
09:52 AM pfSense Packages Bug #11030 (Feedback): OpenVPN Client Export shows server certs as clients
I committed a variation of that instead:
https://github.com/pfsense/FreeBSD-ports/commit/0e72ef35bbb0f9dc370141cb9...
Jim Pingle
06:14 PM Revision 16fe7982: OpenVPN compression settings improvements. Issue #11020
* Hide compression options when compression is not allowed
* Omit compression options from the OpenVPN configuration ...
Jim Pingle
04:48 PM Revision 65831b5b: Fix display of OpenVPN dev mode when empty/missing. Issue #10919
Jim Pingle
02:37 PM pfSense Packages Feature #10909 (In Progress): #define MAXVIFS 32 to 64
right, I'm going to revert it and rebuild pimd and igmoproxy Renato Botelho
01:01 PM pfSense Packages Feature #10909: #define MAXVIFS 32 to 64
Renato,
Restore to MAXVIFS 32 is a good idea for two reasons:
- it would allow me to test the actual package beha...
Louis B
11:35 AM Bug #8611: unable to receive IPv6 RA's on SG-1000, default route lost
looks like bxe(4) driver bug, see #8324 Viktor Gurov
09:54 AM pfSense Packages Todo #11033: Update OpenVPN Client Export with OpenVPN 2.5.0 installer
No negative feedback thus far and further testing I've done has been positive as well. Picked back to 2.4.5 for more ... Jim Pingle
09:33 AM Bug #11051: Unbound: custom TLS listen port ignored
More context: running on bare metal Celeron 3160 with 8gb RAM. Landing page reports:
> 2.4.5-RELEASE-p1 (amd64)
>...
Brad Edmondson
09:31 AM Bug #11051 (Resolved): Unbound: custom TLS listen port ignored
Using latest stable pfSense: 2.4.5-RELEASE-p1 (amd64)
Attempting to configure two-tier DNS cache, using either BIN...
Brad Edmondson

11/09/2020

09:06 PM Revision 1cc93005: Improve OpenVPN Duplicate Connections option description. Fixes #10363
Jim Pingle
08:48 PM Revision c948bc45: Change default config domain to home.arpa. Implements #10533
Jim Pingle
06:24 PM Revision 3adc4134: Fix display of OpenVPN data cipher when NCP is disabled. Issue #10919
Jim Pingle
03:45 PM Bug #10363 (Resolved): Clarify behavior of OpenVPN server option for Duplicate Connections
This looks good! Jared Dillard
03:15 PM Bug #10363 (Feedback): Clarify behavior of OpenVPN server option for Duplicate Connections
Applied in changeset commit:1cc930053c02a9768494980bf70b9faf2fb46ee1. Jim Pingle
03:44 PM Revision 924eeefb: OpenVPN Data Cipher changes. Fixes #10919
* Change handling of data ciphers so they work properly for TLS and
shared key
* Move some duplicate code to a functi...
Jim Pingle
03:01 PM Revision 29f185b1: Merge pull request #4484 from emes/he-net-tunnelbroker-update-api
Renato Botelho
02:55 PM Todo #10533 (Feedback): Change default domain for new installations from "localdomain" to "home.arpa"
Applied in changeset commit:c948bc45f6f70ff35074129858a2dfa4e3f64a37. Jim Pingle
02:42 PM Todo #10533: Change default domain for new installations from "localdomain" to "home.arpa"
→ luckman212 wrote:
> I'd suggest one of the following instead, since many pfSense installs are not used in home env...
Jim Pingle
02:51 PM Bug #9385 (Closed): OpenVPN logs a "Device busy" error when opening tap interfaces, but continues to function
Doesn't appear to affect anything and I can find similar messages in logs going back several years, so it's not new i... Jim Pingle
02:15 PM Revision ca8459cd: LDAP shell authentication. Implements #8698
Viktor Gurov
01:56 PM Revision 34a06728: interfaces_vlan_configure_mtu(): Style fixes
Renato Botelho
01:52 PM Revision be732dba: Set child interfaces MTU fix. Issue #11035
Viktor Gurov
01:51 PM Revision 8f09cee9: IKEv2 vtimap creation fix. Issue #9592
Viktor Gurov
01:50 PM Revision 05af3262: Auto add static routes for PPP interfaces. Fixes #10407
Viktor Gurov
01:49 PM Revision 967d16ae: VXLAN bootup fix. Issue #10960
Viktor Gurov
01:42 PM Bug #11021 (Confirmed): ral(4) driver kernel panics in arm64
Tested:... Steve Wheeler
05:47 AM Bug #11021 (Feedback): ral(4) driver kernel panics in arm64
I've merged recent stable/12 which contains a fix for that. Please test it again on when a new round of snapshots is... Renato Botelho
01:40 PM pfSense Packages Feature #11042: Verify backup- / configuration-file after creation
Looks like your actual problem (based on your forum thread) is this: #11050
Under normal conditions on a release, ...
Jim Pingle
12:10 PM pfSense Packages Feature #11042: Verify backup- / configuration-file after creation
That is true but is also a non-statement. I already explained why that is irrelevant. Jim Pingle
12:01 PM pfSense Packages Feature #11042: Verify backup- / configuration-file after creation
Jim, if the software which checks the backup-file when loaded can check if backup is OK, the same software could do ... Louis B
11:03 AM pfSense Packages Feature #11042: Verify backup- / configuration-file after creation
Your logic is flawed because if it could detect the backup was bad it could just not make a bad backup. If it generat... Jim Pingle
10:23 AM pfSense Packages Feature #11042: Verify backup- / configuration-file after creation
Jim, at the moment you need the backup, *the firewall is probably down*. So *you need to have it fixed as soon as pos... Louis B
07:26 AM pfSense Packages Feature #11042 (Needs Patch): Verify backup- / configuration-file after creation
In the unlikely case that a bad backup was generated, it is unlikely anything could be done to repair it in the GUI, ... Jim Pingle
01:31 PM Bug #11050 (Resolved): "Backup extra data" does not behave properly
When backup up with "Backup Extra Data" checked, there are a few problems:
* Tags are not removed during every res...
Jim Pingle
01:24 PM pfSense Packages Bug #10911 (Resolved): Bandwidthd iframe not resizing in 2.4.5/2.4.5p1
Tested pfSense-pkg-bandwidthd-0.7.4_3 in Chrome, Edge, Firefox with no sizing issues. Working as expected. Marking th... Max Leighton
12:06 PM Feature #1984: Allow CP Voucher submission via URL so they can be distributed as QR code
Viktor, could you please update PR with changes suggested by jimp? Renato Botelho
10:02 AM pfSense Packages Feature #11043: pfSense GUI for iperf3 / perf
Maintaining a list of public servers is outside the scope of the package, and encouraging users to use a high-through... Jim Pingle
09:54 AM pfSense Packages Feature #11043: pfSense GUI for iperf3 / perf
Jim Pingle wrote:
> There is already a package for iperf3 with a GUI.
But not useful: no quick servers selection (b...
Sergei Shablovsky
07:27 AM pfSense Packages Feature #11043 (Rejected): pfSense GUI for iperf3 / perf
There is already a package for iperf3 with a GUI. Jim Pingle
09:57 AM pfSense Packages Feature #11044: pfSense GUI for OOKLA Speedtest
No, it is not reasonable. Any speed test run from the firewall is not a valid metric and adding a GUI only encourages... Jim Pingle
09:51 AM pfSense Packages Feature #11044: pfSense GUI for OOKLA Speedtest
Jim Pingle wrote:
> There is a CLI speed test package already (py37-speedtest-cli on 2.5.0, similar name on 2.4.5))....
Sergei Shablovsky
07:29 AM pfSense Packages Feature #11044 (Rejected): pfSense GUI for OOKLA Speedtest
There is a CLI speed test package already (py37-speedtest-cli on 2.5.0, similar name on 2.4.5)). There are no plans f... Jim Pingle
09:50 AM Bug #10919 (Feedback): Improve handling of OpenVPN data cipher negotiation options
Applied in changeset commit:924eeefb45222ee5bbf813b8d3d0b3ab704fcede. Jim Pingle
07:33 AM Bug #10919 (In Progress): Improve handling of OpenVPN data cipher negotiation options
Jim Pingle
09:38 AM Feature #11049 (Rejected): Improving GUI for Interfaces Assignment by adding Graphics View of physical port
There is no viable way to make this happen in a maintainable way, and it's largely unnecessary.
Please submit thes...
Jim Pingle
09:34 AM Feature #11049 (Rejected): Improving GUI for Interfaces Assignment by adding Graphics View of physical port
Hi pfSense DevTeam !
We appreciate You work!
Please Improve GUI for *Interfaces Assignment* by adding graphics vi...
Sergei Shablovsky
09:38 AM Feature #11048 (Rejected): Improving GUI for Interfaces by adding Graphics View of physical port
There is no viable way to make this happen in a maintainable way, and it's largely unnecessary.
Please submit thes...
Jim Pingle
09:19 AM Feature #11048 (Rejected): Improving GUI for Interfaces by adding Graphics View of physical port
Hi pfSense DevTeam !
We appreciate You work!
Please *Improve GUI for Interfaces by adding graphics view of physic...
Sergei Shablovsky
09:14 AM Feature #11047 (Rejected): Add Encryption Password suggestions and Restriction
That is way too much text to add to the GUI. There is a help link if anyone wants to follow it. Maybe a small note wi... Jim Pingle
09:10 AM Feature #11047: Add Encryption Password suggestions and Restriction
Sergei Shablovsky wrote:
> *Warning*
> 1. *Do not use online password generators* (You never know and control who...
Sergei Shablovsky
09:07 AM Feature #11047 (Rejected): Add Encryption Password suggestions and Restriction
Hi pfSense DevTeam !
We appreciate You work!
Please add to the
WebUI *Services* / *Auto Configuration Backup* /...
Sergei Shablovsky
09:02 AM Bug #11037 (Feedback): Change APIs for HE.net Tunnelbroker dynamic DNS update
PR has been merged. Thanks! Renato Botelho
08:25 AM Feature #8698: LDAP authenticated users should be able to log in via ssh
Applied in changeset commit:ca8459cdafafd225fbc07edbc32679b8301298fc. Viktor Gurov
08:16 AM Feature #8698 (Feedback): LDAP authenticated users should be able to log in via ssh
PR has been merged. Thanks! Renato Botelho
08:00 AM Bug #10407: L2TP static route not re-added after connection down/up
Applied in changeset commit:05af32629d9259817070a72f388a7d4c4835d76d. Viktor Gurov
07:51 AM Bug #10407 (Feedback): L2TP static route not re-added after connection down/up
PR has been merged. Thanks! Renato Botelho
07:53 AM Bug #11035 (Feedback): PPPoE: can't remove hook
PR has been merged. Thanks! Renato Botelho
07:15 AM Bug #11035 (Pull Request Review): PPPoE: can't remove hook
Jim Pingle
07:52 AM Bug #9592 (Feedback): VTI interface down because interface number created is greater than ipsec32768
PR has been merged. Thanks! Renato Botelho
07:50 AM Bug #10960 (Feedback): Bring up VXLANs correctly at boot
PR has been merged. Thanks! Renato Botelho
07:16 AM Bug #10960 (Pull Request Review): Bring up VXLANs correctly at boot
Jim Pingle
07:33 AM Bug #11046 (Duplicate): Openvpn missing cipher option inside config file
Already being worked on: #10919 Jim Pingle
05:30 AM Bug #11046: Openvpn missing cipher option inside config file
ncp-ciphers also missing
Version 2.5.0-DEVELOPMENT (amd64)
built on Sun Nov 08 13:03:56 EST 2020
FreeBSD 12.2-ST...
Manuel Piovan
04:29 AM Bug #11046 (Duplicate): Openvpn missing cipher option inside config file
latest snapshot
openvpn not connecting anymore between pfsense 2.5.0 and 2.4.5-p1
log full of ...
Manuel Piovan
07:31 AM Feature #11045: Improve link state visibility on Status > Interfaces
It shouldn't rely only on iconography on that page. It would be OK to add the icons alongside the text, but the text ... Jim Pingle
01:17 AM Feature #11045: Improve link state visibility on Status > Interfaces
Sergei Shablovsky wrote:
> Please change in GUI for Interface on Status / Interfaces page the items:
> Status
> DH...
Sergei Shablovsky
12:24 AM Feature #11045 (Resolved): Improve link state visibility on Status > Interfaces
Hi pfSense DevTeam !
We appreciate You work!
Please change in GUI for Interface on Status / Interfaces page the i...
Sergei Shablovsky
06:01 AM pfSense Packages Feature #10909: #define MAXVIFS 32 to 64
Louis van Breda wrote:
> Almost sure that MAXVIFS 64 does very likely! break the system!
>
> Yesterday, I spend t...
Renato Botelho
05:52 AM pfSense Packages Feature #11012 (Resolved): Add Zabbix 5.2 (agent and proxy) packages
Renato Botelho

11/08/2020

11:45 PM pfSense Packages Feature #11044 (Rejected): pfSense GUI for OOKLA Speedtest
Hi pfSense DevTeam !
We appreciate You work!
Please add the *GUI for OOKLA Speedtest service as pfSense-native pa...
Sergei Shablovsky
09:05 PM pfSense Packages Feature #11043 (Rejected): pfSense GUI for iperf3 / perf
Hi pfSense DevTeam !
We appreciate You work!
Please add the *GUI for iperf3 / perf as pfSense-native package*.
...
Sergei Shablovsky
12:25 PM Revision 02fb642f: Fix a typo.
Obtained from: FE Luiz Souza
11:45 AM pfSense Packages Feature #11042 (Needs Patch): Verify backup- / configuration-file after creation
I have been facing corrupt configuration files when using the file (loaded on an usb-stick) during an new installatio... Louis B
04:49 AM pfSense Packages Feature #10909: #define MAXVIFS 32 to 64
Almost sure that MAXVIFS 64 does very likely! break the system!
Yesterday, I spend the whole day! , together with ...
Louis B

11/07/2020

09:18 PM Feature #10280: DHCP Leases widget
Jim Pingle wrote:
> The author needs to submit that as a pull request. And that repository has not been updated in s...
Sergei Shablovsky
09:04 PM Feature #11041 (Resolved): Add hardware interface name to popup hint in Interfaces Dashboard widget
Hi dear pfsense devteam!
Please add appropriate BSD network port name (i.e. *igb3*, *bce1*, etc) to popup hint 90:...
Sergei Shablovsky
07:39 PM Bug #10919: Improve handling of OpenVPN data cipher negotiation options
The issue does also occur if ncp negotiation is enabled. I could not get any ciphers into the openvpn config file wi... S Premeau
07:31 PM Bug #10919: Improve handling of OpenVPN data cipher negotiation options
This change set does not appear to be writing cipher or data-ciphers to the openvpn configuration file.
Here's my ...
S Premeau
05:08 PM Bug #6880: Multiple DHCP6 WAN connections leads to multiple dhcp6c clients
Confirmation that issue is still present in 2.4.5p1.
Log messages:
dhcp6c 4633 Sending Solicit
dhcp6c 38399...
Kris Phillips
02:38 PM pfSense Packages Feature #10950: Allow to select only netmap-compatible cards for inline mode
I was able to add and start an interface using snort with a USB ethernet adapter (ue0) on SG-5100
2.5.0-DEVELOPMEN...
Jordan G
01:44 PM pfSense Packages Bug #11040: pfb_filter core faults when clearing firewall log
Jim Pingle wrote:
> That instance of the program is from pfBlockerNG, not the base system.
>
> Nothing to fix in ...
John Jacobs
12:47 PM pfSense Packages Bug #11040: pfb_filter core faults when clearing firewall log
That instance of the program is from pfBlockerNG, not the base system.
Nothing to fix in the base system since the...
Jim Pingle
12:40 PM pfSense Packages Bug #11040: pfb_filter core faults when clearing firewall log
Adding: clog_pfb drops the core, pfb_filter stops. John Jacobs
12:37 PM pfSense Packages Bug #11040 (New): pfb_filter core faults when clearing firewall log
The clog_pfb drops a core when the firewall log is cleared. I can replicate this on demand. Clearing the log from Sta... John Jacobs
06:51 AM Bug #11035: PPPoE: can't remove hook
Set child interfaces MTU fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/41
Viktor Gurov
02:39 AM Bug #11035: PPPoE: can't remove hook
partially fixed in #9154 - on 2.5 I can get this error only when MTU is changed Viktor Gurov
04:42 AM pfSense Packages Feature #11012: Add Zabbix 5.2 (agent and proxy) packages
https://www.zabbix.com/life_cycle_and_release_policy
The sad part about the proxy is that they are not backwards com...
Pim Janssen
04:29 AM pfSense Packages Bug #8264: Radiusd restart on WAN change results in freeradius not running (and possible solution)
see also #11013 Viktor Gurov
12:15 AM pfSense Packages Bug #11039: route-map not working if Address Family is enabled.
no such issue on 2.5 branch (frr 0.6.8_8),
fixed in #10789
Viktor Gurov

11/06/2020

08:54 PM Revision 189edaf3: OpenVPN data cipher negotiation updates. Fixes #10919
* Rename "NCP Algorithms" to "Data Encryption Algorithms" to reflect the change in OpenVPN (frontend and backend, e.g... Jim Pingle
08:42 PM pfSense Packages Feature #11012: Add Zabbix 5.2 (agent and proxy) packages
Zabbix 5 (agent and proxy) have been added to packages.
Note: package manager list many Zabbix version , is there ...
Alhusein Zawi
07:14 AM pfSense Packages Feature #11012 (Feedback): Add Zabbix 5.2 (agent and proxy) packages
Thanks Danilo! Packages added to 2.5.0 and 2.4.5 Renato Botelho
06:29 PM pfSense Packages Bug #11039 (Resolved): route-map not working if Address Family is enabled.
enabling Address Family (Allow neighbor to advertise and receive routes for both IPv4 and IPv6) under BGP Neighbors w... Alhusein Zawi
03:25 PM Revision 56e031a7: OpenVPN compression options update. Issue #11020
* Add new "Allow Compression" option for OpenVPN 2.5.0. Defaults to asymmetric
(Decompress incoming packets, do not...
Jim Pingle
03:05 PM Bug #10919: Improve handling of OpenVPN data cipher negotiation options
Applied in changeset commit:189edaf33bb2b21761d9ace0b3fd0119955f8726. Jim Pingle
02:58 PM Bug #10919 (Feedback): Improve handling of OpenVPN data cipher negotiation options
I pushed a commit which implements everything above except for the warning message. It'll be set to feedback by the c... Jim Pingle
11:56 AM Bug #10919: Improve handling of OpenVPN data cipher negotiation options
Sounds like a good plan! Arne Schwabe
10:11 AM Bug #10919 (In Progress): Improve handling of OpenVPN data cipher negotiation options
Just a note to myself before I start on this:
The OpenVPN 2.5.0 changes doc and some info on the links above do st...
Jim Pingle
01:29 PM Todo #11020 (Feedback): Update OpenVPN to 2.5.0
The remaining items which need updated are all related to Data Ciphers (Formerly known as NCP) which have a separate ... Jim Pingle
09:28 AM Todo #11020: Update OpenVPN to 2.5.0
I pushed a commit to update the compression options to match changes in OpenVPN 2.5.0:
* Add new "Allow Compressio...
Jim Pingle
01:26 PM pfSense Packages Bug #11036: HAproxy ACL
I was able to reproduce this on pfSense 2.5 with haproxy-devel 0.61_1. Marcos M
01:00 PM Revision 482ffce8: Enable zabbix 5.2 packages
(cherry picked from commit 779cb929fb962c119150c7f8b57dca2b1d3fce74) Renato Botelho
01:00 PM Revision 779cb929: Enable zabbix 5.2 packages
Renato Botelho
12:58 PM Revision 5773fa70: Add Zabbix 5.2 config options
(cherry picked from commit 0fb3a92f80a9c3dfc5c54b27400819dea9f3434a) Danilo Baio
12:57 PM Revision 47a0afad: Merge pull request #4485 from dbaio/zabbix52
Renato Botelho
11:25 AM Bug #7547: Static routes using aliases are not automatically updated when alias content changes
See also: #9743, #11038 Jim Pingle
11:25 AM Bug #9743 (Duplicate): Missing dependency check(s) on aliases in static routes
There was already an issue for this: #7547 Jim Pingle
11:21 AM Bug #9743: Missing dependency check(s) on aliases in static routes
Jens Groh wrote:
> forgot the "pre" tags around the example so just ignore the strike-through ;) Can't edit the orig...
Kris Phillips
11:21 AM Bug #11038 (Duplicate): Editing Alias Used in Static Route Doesn't Update Routing Table
Duplicate of #7547 Jim Pingle
11:18 AM Bug #11038 (Duplicate): Editing Alias Used in Static Route Doesn't Update Routing Table
If you add an IP or subnet to an alias that is used in a static route, you have to edit and re-save the static route ... Kris Phillips
10:40 AM Bug #10407 (Pull Request Review): L2TP static route not re-added after connection down/up
Jim Pingle
05:12 AM Bug #10407: L2TP static route not re-added after connection down/up
Fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/39
Viktor Gurov
10:39 AM Bug #11037 (Pull Request Review): Change APIs for HE.net Tunnelbroker dynamic DNS update
Jim Pingle
10:06 AM Bug #9592 (Pull Request Review): VTI interface down because interface number created is greater than ipsec32768
Viktor Gurov
08:33 AM Bug #9592 (New): VTI interface down because interface number created is greater than ipsec32768
First IPsec IKEv2 creates bogus vtimap entry:... Viktor Gurov
05:08 AM pfSense Packages Feature #10612 (Resolved): Add pfSense package for Zeek (formerly Bro) Network Security Monitor
Thanks! I'll mark this one as resolved. Bugs found on new package should have their own tickets. Renato Botelho
12:31 AM Bug #11035: PPPoE: can't remove hook
see also https://forum.netgate.com/topic/135920/pfsense-2-4-4-fails-all-pppoe-s-after-disabling-one
and #9148
Viktor Gurov

11/05/2020

10:36 PM Revision 0fb3a92f: Add Zabbix 5.2 config options
Danilo Baio
10:15 PM Bug #10660 (Resolved): PHP errors in the traffic shaper wizard
Tested patch in 2.4.5p1 and in 2.5.0-DEVELOPMENT built on Thu Nov 05 19:03:52 EST 2020
Seems to be working as expe...
Max Leighton
09:13 PM Revision 4af6affa: Remove OpenVPN tun server IPv4 tunnel network requirement. Issue #11020
No longer required on OpenVPN 2.5.0 Jim Pingle
08:20 PM Revision f8690774: Style fixes
Renato Botelho
07:51 PM Revision a8627e2c: Remove redundant isset() check
Renato Botelho
07:51 PM Revision 2d3cd379: Do not unset() variables that were never defined
Renato Botelho
07:48 PM Revision 75a42ff7: Simplify logic
Renato Botelho
07:47 PM Revision a94ab4b8: Style fixes
Renato Botelho
07:36 PM Revision f03f4cc3: mwexec() 2nd parameter default value is false. Remove it from caller
Renato Botelho
07:34 PM Revision cc0618e2: Change client endpoint update API for he.net tunnelbroker dynamic dns
Michael Smith
05:25 PM pfSense Packages Feature #11012: Add Zabbix 5.2 (agent and proxy) packages
https://github.com/pfsense/pfsense/pull/4485
https://github.com/pfsense/FreeBSD-ports/pull/985
Danilo Baio
04:47 PM pfSense Packages Feature #10612: Add pfSense package for Zeek (formerly Bro) Network Security Monitor
the package has been added to pfSense Available Packages.
Installed smoothly.
Alhusein Zawi
08:20 AM pfSense Packages Feature #10612: Add pfSense package for Zeek (formerly Bro) Network Security Monitor
Applied in changeset pfsense:commit:13d19df75f52d18f67172b3cd6a4bdfd982d9d24. Renato Botelho
08:19 AM pfSense Packages Feature #10612 (Feedback): Add pfSense package for Zeek (formerly Bro) Network Security Monitor
Done! Renato Botelho
03:16 PM Todo #11020: Update OpenVPN to 2.5.0
I pushed a commit which removes the IPv4 tunnel network requirement from the GUI and backend code. I was able to make... Jim Pingle
02:39 PM Revision 29131ce9: Track Interface / PD improvements. Issue #5999
Viktor Gurov
02:37 PM Revision bf9d8809: HA Sync input validation message fix. Issue #11017
Viktor Gurov
02:37 PM Revision c150479c: Different interface name for L2TP VPN. Fixes #11006
Viktor Gurov
02:35 PM Revision 7ccff001: CBQ borrow option input validation. Issue #7915
Viktor Gurov
02:32 PM Bug #11035: PPPoE: can't remove hook
Is this the problem?
> kernel vlan2: changing name to 'igb4.7'
Grischa Zengel
02:31 PM Bug #11035: PPPoE: can't remove hook
I replayed this bug again:... Grischa Zengel
12:01 PM Bug #11035 (Resolved): PPPoE: can't remove hook
I have seen this with 2 Pfsense.
After changing a single RAW interface (change from none to staticIP on igb4/opt11 o...
Grischa Zengel
02:16 PM Revision 13d19df7: Fix #10612: Add pfSense-pkg-zeek
Renato Botelho
02:03 PM Bug #11017 (Resolved): Incorrect synchronizetoip value causing XMLRPC errors
Tested the patch on 2.4.5-p1. It works fine. Danilo Zrenjanin
08:38 AM Bug #11017: Incorrect synchronizetoip value causing XMLRPC errors
PR has been merged. Thanks! Renato Botelho
12:06 AM Bug #11017: Incorrect synchronizetoip value causing XMLRPC errors
error message fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/36
Viktor Gurov
01:57 PM Revision 94cd71a4: Merge pull request #4483 from emes/he-net-tunnelbroker-ipfix
Renato Botelho
01:54 PM Bug #11037: Change APIs for HE.net Tunnelbroker dynamic DNS update
PR: https://github.com/pfsense/pfsense/pull/4484 Michael Smith
01:53 PM Bug #11037 (Resolved): Change APIs for HE.net Tunnelbroker dynamic DNS update
Currently using a deprecated client update API for HE.net Tunnelbroker dynamic DNS (https://ipv4.tunnelbroker.net/ipv... Michael Smith
01:32 PM pfSense Packages Bug #11036 (New): HAproxy ACL
If you try to edit an existing Access Control list on already defined TCP type Frontend, an unsupported Expression li... Danilo Zrenjanin
01:14 PM Bug #11024 (Resolved): Dynamic DNS update for HE.net Tunnelbroker always sets IP address of default WAN interface
Renato Botelho
12:46 PM Bug #11024: Dynamic DNS update for HE.net Tunnelbroker always sets IP address of default WAN interface
Tested and works as expected. Michael Smith
07:57 AM Bug #11024 (Feedback): Dynamic DNS update for HE.net Tunnelbroker always sets IP address of default WAN interface
PR has been merged. Thanks! Renato Botelho
10:48 AM Bug #9072: RRD graph mouseover information shows up as Mb when unit size is set to MB
I can't reproduce, did you toggle the *Unit Size* from *Bits* to *Bytes* and back again (hitting *Save* each time) on... Jared Dillard
08:45 AM Bug #11006: L2TP Server and Client both use "l2tpX" for interface names
Applied in changeset commit:c150479cc4476b07460a7b3578fba5cac7c6b30b. Viktor Gurov
08:37 AM Bug #11006 (Feedback): L2TP Server and Client both use "l2tpX" for interface names
PR has been merged. Thanks! Renato Botelho
03:46 AM Bug #11006: L2TP Server and Client both use "l2tpX" for interface names
Jim Pingle wrote:
> I see what you mean and have adjusted the subject to match. Both the L2TP Server and L2TP interf...
Viktor Gurov
08:39 AM Bug #5999: IPv6 IP Alias prevents Track Interface from working with DHCPv6 and RA
PR has been merged. Thanks! Renato Botelho
08:36 AM Bug #7915 (Feedback): CBQ Child queue set bandwidth does not apply correctly
PR has been merged. Thanks! Renato Botelho
08:27 AM Bug #7915: CBQ Child queue set bandwidth does not apply correctly
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/38 Viktor Gurov
07:43 AM Bug #10998 (Resolved): traffic shaper php error
Renato Botelho
12:51 AM Bug #10998: traffic shaper php error
It's ok now thanks. Niccolò Marchi
06:01 AM Bug #11034 (Resolved): poesX interfaces is not created
PPPoE Server creates "ngX" interfaces instead of "poesX"
"POESX" tab on services_dhcpv6.php page does not work as ex...
Viktor Gurov

11/04/2020

03:35 PM pfSense Packages Todo #11033 (Feedback): Update OpenVPN Client Export with OpenVPN 2.5.0 installer
Committed to devel (pfSense 2.5.0) for further testing
https://github.com/pfsense/FreeBSD-ports/commit/b7a70d0c6ff...
Jim Pingle
03:16 PM pfSense Packages Todo #11033 (Closed): Update OpenVPN Client Export with OpenVPN 2.5.0 installer
OpenVPN 2.5.0 is out and needs added to the client export package.
* OpenVPN 2.5.0 has separate 64-bit and 32-bit ...
Jim Pingle
03:35 PM Todo #11020 (In Progress): Update OpenVPN to 2.5.0
Jim Pingle
03:33 PM Todo #11020 (Feedback): Update OpenVPN to 2.5.0
Jim Pingle
03:27 PM Revision bf4c4d12: Traffic shaper wizard fix. Issue #10998
Viktor Gurov
03:06 PM Revision 1c3a5b0b: HA sync synchronizetoip input validation. Issue #11017
Viktor Gurov
02:34 PM Revision a62b14a7: Set correct cat command path. Fixes #11032
Viktor Gurov
11:37 AM Bug #5999: IPv6 IP Alias prevents Track Interface from working with DHCPv6 and RA
fixes/improvements:
- Show Track6IP correctly if there is no VIPs on the interface;
- Show PD on the `services_dhc...
Viktor Gurov
11:09 AM pfSense Packages Bug #11031 (Resolved): FRR: PHP error in frr_bgp.inc
Tested in pkg 0.6.8_8
Looks good. Starts at boot correctly. No errors generated.
Steve Wheeler
05:18 AM pfSense Packages Bug #11031 (Feedback): FRR: PHP error in frr_bgp.inc
PR has been merged. Thanks! Renato Botelho
03:32 AM pfSense Packages Bug #11031: FRR: PHP error in frr_bgp.inc
Fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/5
Viktor Gurov
10:58 AM Revision da637044: IPv6 Port Forward 6RD/6to4 interface support. Feature #10984
Viktor Gurov
10:28 AM Bug #11032 (Resolved): Setting Log compression to None disables all entries in log view
Tested the patch. It fixes the issue. Ticket resolved. Danilo Zrenjanin
08:40 AM Bug #11032: Setting Log compression to None disables all entries in log view
Applied in changeset commit:a62b14a7c729331383e94f086fb3d569726d1830. Viktor Gurov
08:34 AM Bug #11032 (Feedback): Setting Log compression to None disables all entries in log view
PR has been merged. Thanks! Renato Botelho
08:17 AM Bug #11032 (New): Setting Log compression to None disables all entries in log view
Fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/33
Viktor Gurov
05:42 AM Bug #11032 (Rejected): Setting Log compression to None disables all entries in log view
Viktor Gurov
09:27 AM Bug #10998 (Feedback): traffic shaper php error
Renato Botelho
09:09 AM Bug #10998 (Pull Request Review): traffic shaper php error
Jim Pingle
01:09 AM Bug #10998: traffic shaper php error
Fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/31
Viktor Gurov
09:20 AM pfSense Packages Bug #11030 (Pull Request Review): OpenVPN Client Export shows server certs as clients
Jim Pingle
09:16 AM pfSense Packages Bug #11030: OpenVPN Client Export shows server certs as clients
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/6 Viktor Gurov
09:07 AM Bug #11017 (Feedback): Incorrect synchronizetoip value causing XMLRPC errors
PR has been merged. Thanks! Renato Botelho
08:37 AM Bug #11017: Incorrect synchronizetoip value causing XMLRPC errors
`synchronizetoip` input validation to avoid XMLRPC errors:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_reques...
Viktor Gurov
07:09 AM Bug #10960 (In Progress): Bring up VXLANs correctly at boot
I'll work on this one Renato Botelho
05:22 AM Feature #10984 (Feedback): Port Forward IPv6
PR has been merged. Thanks! Renato Botelho
05:00 AM Feature #10984 (New): Port Forward IPv6
6RD/6to4 interfaces support:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/32
Viktor Gurov
12:43 AM Bug #9054: Gateway Group slow (or never) to switch back to Tier 1
Jörn Greszki wrote:
> Now tested with 2.5.0.a.20201101.1850
>
> I still get for unknown reasons sometimes partial...
Viktor Gurov

11/03/2020

11:39 PM Bug #11025 (Duplicate): traffic shaper PHP error
Duplicate of #10998#note-5 Viktor Gurov
11:32 PM Todo #11020: Update OpenVPN to 2.5.0
+ Add ability to create IPv6-only OpenVPN networks
from https://github.com/OpenVPN/openvpn/blob/release/2.5/Change...
Viktor Gurov
07:11 PM Revision ce9d7ba1: Allow shell users to enable history. Implements #11029
Jim Pingle
06:02 PM Bug #11032 (Resolved): Setting Log compression to None disables all entries in log view
If Log compression is set to "None" all entries in all logs are hidden (not deleted).
To reproduce:
- Go to Statu...
T Toft
05:43 PM pfSense Packages Bug #11031 (Resolved): FRR: PHP error in frr_bgp.inc
I am seeing an error at boot triggered by FRR:... Steve Wheeler
04:18 PM pfSense Packages Bug #11030: OpenVPN Client Export shows server certs as clients
Once upon a time it used to work, they must have locked that down at some point.
Back in the day, all certs were "...
Jim Pingle
04:12 PM pfSense Packages Bug #11030: OpenVPN Client Export shows server certs as clients
Tested in openvpn-client-export 1.4.23_2
Installed in:...
Steve Wheeler
04:04 PM pfSense Packages Bug #11030 (Resolved): OpenVPN Client Export shows server certs as clients
If you have an SSL/TLS only remote access OpenVPN server coinfigured the Client Export tab will show exportable confi... Steve Wheeler
01:20 PM Feature #11029 (Feedback): Enable command history in the shell
Applied in changeset commit:ce9d7ba143c968e672abb4265cca19f93d851e7e. Jim Pingle
10:18 AM Feature #11029 (Resolved): Enable command history in the shell
Historically we disabled shell command history tracking primarily because embedded/NanoBSD had a read-only filesystem... Jim Pingle
01:04 PM Bug #10875: PPP periodic reset does not fully restore gateway group round-robin functionality
seems related to #10716 Viktor Gurov
12:08 PM Bug #11023: route_get('default', 'inet') always returns empty
Jim Pingle wrote:
> That is not relevant to this bug report, and is likely a problem in the script maintained by acm...
Christian Knop
12:02 PM Bug #11023: route_get('default', 'inet') always returns empty
Stop posting to this bug report. The one single issue for this report is resolved. If you have some other issue, it d... Jim Pingle
11:59 AM Bug #11023: route_get('default', 'inet') always returns empty
ow to fix cURL error 60: SSL certificate problem
Narendra Vaghela
Narendra Vaghela
Sep 1, 2016·1 min read
Somet...
Christian Knop
11:54 AM Bug #11023: route_get('default', 'inet') always returns empty
I tried the following https://chasingcode.dev/blog/fix-curl-error-60-ssl-certificate-problem/. The entry in the php.i... Christian Knop
11:29 AM Bug #11023: route_get('default', 'inet') always returns empty
That is not relevant to this bug report, and is likely a problem in the script maintained by acme.sh and not us. Jim Pingle
11:20 AM Bug #11023: route_get('default', 'inet') always returns empty
All 3 domains are with Namecheap. 3 different endings .net, .fit and .vip. It doesn't matter in which order the domai... Christian Knop
11:12 AM Bug #11023: route_get('default', 'inet') always returns empty
Many thanks for the support. The gateway ip is now correctly recognized.
I have now found the other bug. The 1st d...
Christian Knop
07:26 AM Bug #11023 (Resolved): route_get('default', 'inet') always returns empty
The specific error "No Source IP specified for Namecheap API" was due to a bug in the routing code as I mentioned. It... Jim Pingle
06:34 AM Bug #11023: route_get('default', 'inet') always returns empty
I just looked to see if the same error existed under ubuntu. Christian Knop
05:48 AM Bug #11023: route_get('default', 'inet') always returns empty
Christian Knop wrote:
> Under Ubuntu I entered my public ip by hand in the config and was able to solve the problem ...
Renato Botelho
10:52 AM Bug #10947 (Resolved): Virtual interface assignment can't be done in CLI interface assignment
Tested on:... Danilo Zrenjanin
10:22 AM pfSense Docs New Content #11010: Feedback on Hardware — Hardware Tuning and Troubleshooting
I will check on 2.5. Though reading this:
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=237166
If it has chan...
Marcos M
06:07 AM pfSense Docs New Content #11010: Feedback on Hardware — Hardware Tuning and Troubleshooting
not working for me, 2.5.0, maybe they are valid for 2.4.5 but I can't test on it.
if it's only for 2.4.5 it will bec...
Manuel Piovan
07:27 AM pfSense Docs Correction #11028 (Duplicate): Feedback on Hardware — Hardware Sizing Guidance
Duplicate of #9228
We'll be removing the list entirely and linking to the store/site data instead so it's always c...
Jim Pingle
07:12 AM pfSense Docs Correction #11028 (Duplicate): Feedback on Hardware — Hardware Sizing Guidance
*Page:* https://docs.netgate.com/pfsense/en/latest/hardware/size.html
*Feedback:*
Can the SG-2100 be added to t...
Chris Macmahon
05:46 AM pfSense Packages Bug #11013: FreeRADIUS does not start after a package reload or a router bootup/reboot
Michael Klein wrote:
> Hi Renato, I tested the fix on both SG-3100's and it works very well. I'm glad that this issu...
Renato Botelho
04:36 AM pfSense Packages Bug #11013 (Resolved): FreeRADIUS does not start after a package reload or a router bootup/reboot
Tested with 0.15.7_20 FreeRADIUS version on SG-3100.
The issue has been solved. Ticket resolved.
Danilo Zrenjanin

11/02/2020

09:02 PM Bug #8870 (Resolved): Webgui incorrectly reports "The system is on the latest version".
Tested in
2.5.0-DEVELOPMENT (amd64)
built on Thu Oct 29 07:01:19 EDT 2020
FreeBSD 12.2-STABLE
Received "Unabl...
Max Leighton
05:25 PM pfSense Packages Bug #11013: FreeRADIUS does not start after a package reload or a router bootup/reboot
Hi Renato, I tested the fix on both SG-3100's and it works very well. I'm glad that this issue has finally been resol... Michael Klein
03:18 PM pfSense Packages Bug #11013: FreeRADIUS does not start after a package reload or a router bootup/reboot
Renato, thank you for all your help. I look forward to the new version and will provide feedback. I'm not sure why Ji... Michael Klein
06:24 AM pfSense Packages Bug #11013 (Feedback): FreeRADIUS does not start after a package reload or a router bootup/reboot
This should be fixed in 0.15.7_20 Renato Botelho
04:27 AM pfSense Packages Bug #11013 (New): FreeRADIUS does not start after a package reload or a router bootup/reboot
I'll take this one Renato Botelho
03:53 PM Revision b1558574: Ticket #10955: Fix "default" case
Make a string check to cover "default" gateway Renato Botelho
02:10 PM Bug #11023: route_get('default', 'inet') always returns empty
Under Ubuntu I entered my public ip by hand in the config and was able to solve the problem with it.
However, the...
Christian Knop
02:05 PM Bug #11023: route_get('default', 'inet') always returns empty
I am surprised that it is not ACME. I tested ACME on Ubuntu 20.04.1 and sometimes the same problem. I suspect a probl... Christian Knop
09:56 AM Bug #11023 (Feedback): route_get('default', 'inet') always returns empty
Actually this isn't a problem in ACME, it's a problem in a base system function which only exists on 2.5.0.
@route...
Jim Pingle
10:22 AM Bug #11024 (Pull Request Review): Dynamic DNS update for HE.net Tunnelbroker always sets IP address of default WAN interface
Jim Pingle
07:33 AM Todo #11020 (In Progress): Update OpenVPN to 2.5.0
2.5.0 was cherry-picked to devel ports tree Renato Botelho
07:25 AM Todo #11020: Update OpenVPN to 2.5.0
We already plan on updating OpenVPN to 2.5.0, and it was added to FreeBSD ports over the weekend.
But those other ...
Jim Pingle
07:21 AM pfSense Packages Feature #11026: Feedback on Packages — FreeRADIUS package
That is not a documentation problem, or a bug. It's a feature you want that does not yet exist. Jim Pingle
04:09 AM pfSense Packages Feature #11026 (New): Feedback on Packages — FreeRADIUS package
*Page:* https://docs.netgate.com/pfsense/en/latest/packages/freeradius.html
*Feedback:*
This file is not preser...
pf Driver
07:15 AM Bug #11027 (Duplicate): traffic shaper php error
Duplicate of #11025 Jim Pingle
07:11 AM Bug #11027 (Duplicate): traffic shaper php error

amd64
12.2-STABLE
FreeBSD 12.2-STABLE 2841d41b090(devel-12) pfSense
Crash report details:
PHP Errors:
[0...
Niccolò Marchi
07:09 AM Bug #9058: Kernel panic during L2TP retransmit
Mark, it crashed again after Luiz pushed 2c7ab6a3c3f on devel-12 branch Renato Botelho
07:03 AM Bug #10812: Traffic graph shows 2X the actual traffic on VLAN interfaces.
Fixed by commit 2841d41b090 on branch devel-12 of FreeBSD-src repository Renato Botelho
06:32 AM Bug #10812 (Feedback): Traffic graph shows 2X the actual traffic on VLAN interfaces.
Fix committed.
The fix is a bit different with the new code.
Luiz Souza
06:58 AM pfSense Packages Bug #10936 (Feedback): both haproxy/haproxy-devel non-existent option lb-agent-chk
PR has been merged. Thanks! Renato Botelho
06:58 AM pfSense Packages Bug #10885 (Feedback): HAProxy DNS statistics not working
PR has been merged. Thanks! Renato Botelho
06:29 AM Bug #6528 (Resolved): The captive portal cannot be used on interface lan since it is part of a bridge but works anyway
Renato Botelho
04:51 AM Bug #10998 (New): traffic shaper php error
Renato Botelho
04:30 AM Bug #10965 (Resolved): rtsold not starting dhcp6c when managed bit is set
Renato Botelho
04:29 AM pfSense Packages Bug #11014 (Resolved): sudo update failure
Renato Botelho
04:10 AM Bug #9054: Gateway Group slow (or never) to switch back to Tier 1
Now tested with 2.5.0.a.20201101.1850
I still get for unknown reasons sometimes partial or full loss for alive-pin...
Jörn Greszki
04:08 AM Bug #10546: Gateways removed from routing groups based on low alert thresholds
Now tested with 2.5.0.a.20201101.1850
I still get for unknown reasons sometimes partial or full loss for alive-pin...
Jörn Greszki
04:00 AM Bug #9450: Multiwan gateway group fail-over not working as expected (possible race condition)
I get for unknown reasons sometimes partial or full loss, but this is not the issue.
Nov 2 10:37:56 dpinger 1623...
Jörn Greszki
01:11 AM Feature #2622: Allow DHCP without a range so that only static mappings may be used on an interface
+1 B D

11/01/2020

04:13 PM Bug #4510 (Resolved): Crash & reboot loop when configure PPPoE server on PPPoE client interface
Tested in
2.5.0-DEVELOPMENT (amd64)
built on Sun Nov 01 13:02:32 EST 2020
FreeBSD 12.2-STABLE
Fix works as e...
Max Leighton
02:05 PM pfSense Packages Bug #10885: HAProxy DNS statistics not working
Should be fixed in haproxy 0.61.1
PR: https://github.com/pfsense/FreeBSD-ports/pull/984
Pi Ba
02:03 PM pfSense Packages Bug #10936: both haproxy/haproxy-devel non-existent option lb-agent-chk
In haproxy-devel package 0.61.1 this 'Agent' health-check method should no longer be visible (unless already configur... Pi Ba
09:08 AM Bug #11025 (Duplicate): traffic shaper PHP error
amd64
12.2-STABLE
FreeBSD 12.2-STABLE 2841d41b090(devel-12) pfSense
Crash report details:
PHP Errors:
[01-No...
Niccolò Marchi
05:48 AM Bug #10998: traffic shaper php error
amd64
12.2-STABLE
FreeBSD 12.2-STABLE 2841d41b090(devel-12) pfSense
Crash report details:
PHP Errors:
[01-No...
Niccolò Marchi

10/31/2020

10:59 PM Revision 048d4cdb: HE.net Tunnelbroker dynamic dns not supplying ip address parameter
Michael Smith
07:15 PM pfSense Packages Bug #11014: sudo update failure
sudo 0.3_5 is installed on 2.4.5-p1 Alhusein Zawi
11:21 AM pfSense Packages Bug #11014: sudo update failure
Issue fixed in 0.3_5, thank you. James Baker
06:57 PM Bug #10965: rtsold not starting dhcp6c when managed bit is set
Tested for several weeks and works as expected. Michael Smith
06:21 PM Bug #11023: route_get('default', 'inet') always returns empty
can the domain cause the problem? a .net works and a .fit and a .vip cause the error. Christian Knop
05:48 AM Bug #11023 (Resolved): route_get('default', 'inet') always returns empty
ip address is missing [NAMECHEAP_SOURCEIP]
test.com
Renewing certificate
account: testing
server: letsencry...
Christian Knop
06:07 PM Bug #11024: Dynamic DNS update for HE.net Tunnelbroker always sets IP address of default WAN interface
PR https://github.com/pfsense/pfsense/pull/4483 Michael Smith
05:58 PM Bug #11024 (Resolved): Dynamic DNS update for HE.net Tunnelbroker always sets IP address of default WAN interface
The update uri does not include the dynamic DNS IP address, but relies on the tunnel client endpoint update API to de... Michael Smith
03:37 PM Bug #6528: The captive portal cannot be used on interface lan since it is part of a bridge but works anyway
* Created captive portal server(interface is LAN)
* Created openvpn server.
* Assigned interface for openvpn.
wh...
Alhusein Zawi
11:41 AM pfSense Packages Bug #11013: FreeRADIUS does not start after a package reload or a router bootup/reboot
Sorry to hear you couldn't recreate this issue which affects both of our *Netgate SG-3100* appliances. The insertion ... Michael Klein
10:39 AM pfSense Packages Bug #11013 (Rejected): FreeRADIUS does not start after a package reload or a router bootup/reboot
Kris Phillips
10:39 AM pfSense Packages Bug #11013 (Feedback): FreeRADIUS does not start after a package reload or a router bootup/reboot
Michael Klein wrote:
> The FreeRADIUS package is the _only_ package that does not startup after the router reboots o...
Kris Phillips
11:24 AM pfSense Docs Correction #11019: Feedback on pfSense Configuration Recipes — Configuring a Single Multi-Purpose OpenVPN Instance
Indeed a rewrite would be good.
The remote IPv4 Remote field is missing from the Remote Access server mode which w...
Marcos M
11:19 AM pfSense Packages Bug #10983: pfBlockerNG not cleaning everything behind it
Given this seems to be VM and sounds similar to issues that can happen when interfaces disappear or otherwise change ... Marcos M
10:58 AM pfSense Packages Bug #8340 (Rejected): Status_Traffic_Totals Error
Unable to reproduce and reported that the issue was resolved by disabling and re-enabling graphing. Likely a file co... Kris Phillips
10:46 AM pfSense Packages Bug #6736 (Closed): Snort fails to start after upgrade to 2.3.2-RELEASE
Closing this very old bug report out, as this issue is from an unsupported version of pfSense and there is no issues ... Kris Phillips

10/30/2020

08:36 PM pfSense Packages Feature #11022: Add feeds from Firebog.net to pfBlockerNG
Pull Request to 2.4.5 branch: https://github.com/pfsense/FreeBSD-ports/pull/983
Pull Request to devel: https://git...
Matthew Hildebrand
07:44 PM pfSense Packages Feature #11022 (Resolved): Add feeds from Firebog.net to pfBlockerNG
Add additional dnsbl feeds listed at firebog.net to feeds.json. Only add green and blue without strikethrough (strike... Matthew Hildebrand
07:10 PM Revision acb79de0: Ticket #8136: Make sure dpinger is configured
Improve solution applied in 37194aa24e calling setup_gateways_monitor()
instead of running rc.newwanipv6
Renato Botelho
06:33 PM Revision 37194aa2: Ticket #8136: Reconfigure dpinger when IPv6 reconnects
When SLAAC interface is disconnected and reconnected, rc.newwanipv6 is
never executed because dhcp6c is the only trig...
Renato Botelho
06:17 PM Bug #11021 (Resolved): ral(4) driver kernel panics in arm64
Testing with an RT2700e card:... Steve Wheeler
06:11 PM Revision c909609c: Disable accept_rtadv flag when remove IPv6 from interface
Renato Botelho
06:02 PM Revision bf335b2b: Revert "Remove non captive-portal logs from Local4 syslog facility."
This reverts commit 6960993dc53c559619fe3f8d8ea903e7730b4fa6. Renato Botelho
05:21 PM Revision f1fcc3ce: Revert "Adjust some missing ident on syslog"
This reverts commit 12719a87e3ba77f5459938a4cfec7f007bbe0c4a. Renato Botelho
05:21 PM Revision ac40d093: Revert "Add rtsold logs to dhcpd.log"
This reverts commit c37ea049dcc8ea490278fe4414847012300c4e96. Renato Botelho
04:02 PM Todo #11020 (Resolved): Update OpenVPN to 2.5.0
Update OpenVPN to 2.5.0 and make necessary adjustments, including:
* Add ability to create network interfaces for VL...
Matthew Ray
03:45 PM pfSense Docs Correction #11019 (Rejected): Feedback on pfSense Configuration Recipes — Configuring a Single Multi-Purpose OpenVPN Instance
That whole thing needs rewritten for subnet topology, it has several outdated techniques. If routes need to be added ... Jim Pingle
03:38 PM pfSense Docs Correction #11019 (Rejected): Feedback on pfSense Configuration Recipes — Configuring a Single Multi-Purpose OpenVPN Instance
*Page:* https://docs.netgate.com/pfsense/en/latest/recipes/openvpn-multi-purpose.html
*Feedback:*
On the "OpenVPN...
Marcos M
03:20 PM Bug #11018 (Resolved): Hostname is ignored when DNS Lookup calculates response time
When performing a DNS Lookup from diag_dns.php, the page performs a response time test by using @drill@, but the vari... Jim Pingle
01:50 PM pfSense Packages Feature #11008: Add option to mail report pkg to skip sending email if no output
2.4.5 PR has also been merged. Thanks! Renato Botelho
01:34 PM pfSense Packages Feature #11008: Add option to mail report pkg to skip sending email if no output
Pull Request to 2.4.5. https://github.com/pfsense/FreeBSD-ports/pull/976 Matthew Hildebrand
01:45 PM Revision 664fcdcc: Remove line commented out in 2015
Renato Botelho
01:41 PM Revision af6be5f3: Remove dhcp6c without RA script when not used
Renato Botelho
01:36 PM Bug #8136 (Feedback): dpinger for WAN DHCPv6 gets fails to update gateway IP
This problem should not happen in this case if you check the option "Use IPv4 connectivity as parent interface". Cou... Renato Botelho
08:24 AM Bug #8136 (In Progress): dpinger for WAN DHCPv6 gets fails to update gateway IP
Renato Botelho
01:33 PM Bug #9349 (Confirmed): IPSec service start/stop/restart fails after settings change
I can still reproduce this on 2.5.0.
* Navigate to VPN > IPsec > Advanced
* Make a change, click Save
* Try to s...
Jim Pingle
01:21 PM Revision 13fde8fa: Fix #11005: Allow to request PD with no track ifs
Allow DHCP6 to solicit PD even when no interfaces are tracking Renato Botelho
01:21 PM Revision 81ed0cf5: Check correct value and fix regression introduced by 9eae3005e1200319a14d6ebafe92c52885bf1cfd
Renato Botelho
01:19 PM Feature #9768 (Duplicate): IPsec for site-to-site scenario where one side has dynamic ip
Jim Pingle
01:13 PM Revision dd2fd981: Revert "Fix monitor address on correct variable"
This reverts commit 9eae3005e1200319a14d6ebafe92c52885bf1cfd. Renato Botelho
12:57 PM Revision ab03cc9a: Revert "Revert "Request PD even if no interfaces are set to track6 (Bug #4544)""
This reverts commit 51d1aca9859f980ca53f606c9f3696e7b9901125. Renato Botelho
10:54 AM pfSense Docs New Content #10774 (Resolved): Feedback on Installing and Upgrading — Upgrade Troubleshooting
Jim Pingle
10:52 AM pfSense Docs New Content #10774 (New): Feedback on Installing and Upgrading — Upgrade Troubleshooting
Jim Pingle
09:53 AM Bug #11017: Incorrect synchronizetoip value causing XMLRPC errors
noticed now but can be the same reason as/a duplicate of
https://redmine.pfsense.org/issues/11014
Manuel Piovan
06:13 AM Bug #11017: Incorrect synchronizetoip value causing XMLRPC errors
https://forum.netgate.com/topic/157998/error-installing-stunnel-package
https://forum.netgate.com/topic/158001/upgra...
Manuel Piovan
06:12 AM Bug #11017 (Resolved): Incorrect synchronizetoip value causing XMLRPC errors
install or updating stunnel 5.50_5
was working on the previus version...
Manuel Piovan
09:33 AM Bug #10986 (Resolved): dynamic interface address for 1:1 NAT works incorrectly in some dual-stack cases
Tested on:... Danilo Zrenjanin
09:22 AM Bug #8377 (Duplicate): Traffic graph widget mouse over always shows b/s even when the value is in B/s
Jim Pingle
08:30 AM Bug #11005: IPv6 Prefix Delegation not requested if no interfaces set to track6
Applied in changeset commit:13fde8fabb8e7ad6bc588b13504ad1068e4c45ba. Renato Botelho
08:24 AM Bug #11005: IPv6 Prefix Delegation not requested if no interfaces set to track6
Resolved now. Renato Botelho
08:23 AM Bug #4544 (Resolved): PD not requested if no interfaces set to track6
Patch was re-applied and this ticket remains the same Renato Botelho
08:17 AM Bug #10325 (New): System/Advanced/Notifications/E-Mail - SMTP Notification E-Mail auth password Unexpected Bahaviour
Jim Pingle
08:12 AM Bug #10325: System/Advanced/Notifications/E-Mail - SMTP Notification E-Mail auth password Unexpected Bahaviour
Tested on:... Danilo Zrenjanin
07:53 AM Feature #11016 (Rejected): Openvpn remove "status" file after service close
It's an unsupported directive. Code won't be added to pfSense to manage a file for it.
Use the management interfac...
Jim Pingle
07:02 AM Bug #10968 (Resolved): Mixed & Upper case Alias table names broken.
Tested on:... Danilo Zrenjanin
12:55 AM Bug #11015: Unable to use double quotes in openvpn custom options
Well, yes you are right. But it's confusing as openvpn's config file format has no semicolons, the example also has n... Todor K

10/29/2020

09:05 PM Bug #10240 (Resolved): Incorrect interface assignment after switching from PPPoE
Tested in
2.5.0-DEVELOPMENT (amd64)
built on Thu Oct 29 13:03:15 EDT 2020
FreeBSD 12.2-STABLE
Works as expec...
Max Leighton
08:11 PM Bug #11015 (Rejected): Unable to use double quotes in openvpn custom options
Did you separate lines with semicolons as instructed?
This should probably be taken to the forum to determine if t...
Chris Linstruth
05:42 PM Bug #11015 (Rejected): Unable to use double quotes in openvpn custom options
If double quotes are used in openvpn custom options field, the service breaks and does not start.
Example:
Adding s...
Todor K
06:54 PM Feature #9260: ssh_tunnel_shell: Disable console message output
Steps:
* created a user.
* Assigned "User - System: SSH tunneling" as Privilege.
* Used putty to SSH.
* logged ...
Alhusein Zawi
06:07 PM Feature #11016 (Rejected): Openvpn remove "status" file after service close
I have "status" file option added to openvpn "custom options" like so:... Todor K
03:17 PM pfSense Packages Feature #11012: Add Zabbix 5.2 (agent and proxy) packages
Your correct, copy paste error Pim Janssen
09:12 AM pfSense Packages Feature #11012: Add Zabbix 5.2 (agent and proxy) packages
Waiting for Zabbix ports on FreeBSD... and this is not a LTS release, it's a Standard release. Danilo Baio
02:13 PM pfSense Packages Bug #11014 (Resolved): sudo update failure
Updating sudo package on 2.4.5-p1 from 0.3_3 to 0.3_4 fails with XML_RPC2_InvalidUriException.
Post-failure system...
James Baker
02:11 PM pfSense Packages Feature #11008: Add option to mail report pkg to skip sending email if no output
Matthew Hildebrand wrote:
> Will this be automagically cherry-picked to RELENG_2_4_5 branch (for mailreport package ...
Renato Botelho
01:54 PM pfSense Packages Feature #11008: Add option to mail report pkg to skip sending email if no output
Will this be automagically cherry-picked to RELENG_2_4_5 branch (for mailreport package version 3.5.x), or do I need ... Matthew Hildebrand
08:40 AM pfSense Packages Feature #11008 (Feedback): Add option to mail report pkg to skip sending email if no output
PR has been merged. Thanks! Renato Botelho
01:14 PM Bug #11005: IPv6 Prefix Delegation not requested if no interfaces set to track6
This still does not work. Looking at that patch looks like the exact behavior I am describing was added again, checki... Chris Linstruth
11:55 AM Bug #11002 (Resolved): OpenVPN Clients registration does not clear DNS entries
Tested in
2.5.0-DEVELOPMENT (amd64)
built on Thu Oct 29 07:01:19 EDT 2020
FreeBSD 12.2-STABLE
Working as expe...
Max Leighton

10/28/2020

10:51 PM pfSense Packages Bug #11013 (Resolved): FreeRADIUS does not start after a package reload or a router bootup/reboot
The FreeRADIUS package is the _only_ package that does not startup after the router reboots or a package reload is do... Michael Klein
06:49 PM Revision 51d1aca9: Revert "Request PD even if no interfaces are set to track6 (Bug #4544)"
This reverts commit b0837cebf9836c4cdd5873b3e463f1afb8403811. Renato Botelho
05:35 PM Revision c37ea049: Add rtsold logs to dhcpd.log
Renato Botelho
05:20 PM Revision 9c16f166: Fix radvd-dns checkbox after save
Renato Botelho
04:37 PM pfSense Packages Feature #11012 (Resolved): Add Zabbix 5.2 (agent and proxy) packages
New release from zabbix. Please add this new version.
https://www.zabbix.com/rn/rn5.2.0
Pim Janssen
02:45 PM pfSense Packages Bug #11011: frr routing php unexpected character
https://github.com/pfsense/FreeBSD-ports/commit/f704edf8024c3ed86d8f642d4c3618930ebd6495 Jim Pingle
02:45 PM pfSense Packages Bug #11011 (Resolved): frr routing php unexpected character
I fixed this earlier today. Will show up along with new snapshots soon. Jim Pingle
02:32 PM pfSense Packages Bug #11011 (Resolved): frr routing php unexpected character
[28-Oct-2020 18:35:42 Etc/UTC] PHP Warning: Unexpected character in input: ' in /usr/local/pkg/frr/inc/frr_bgp.inc ... Cédric Junger
02:14 PM Bug #11005: IPv6 Prefix Delegation not requested if no interfaces set to track6
Thanks. I'll check the next build.
> It could be changed again but what's the point of requesting a PD if nothing ...
Chris Linstruth
01:50 PM Bug #11005 (Feedback): IPv6 Prefix Delegation not requested if no interfaces set to track6
It should be fixed after reverting #4544 Renato Botelho
01:57 PM pfSense Docs New Content #11010 (Resolved): Feedback on Hardware — Hardware Tuning and Troubleshooting
*Page:* https://docs.netgate.com/pfsense/en/latest/hardware/tune.html
*Feedback:*
Multi-queue allows network perf...
Marcos M
01:51 PM Bug #4544 (New): PD not requested if no interfaces set to track6
I've reverted this change in order to fix #11005. A new approach should be used for that case Renato Botelho

10/27/2020

05:50 PM Revision 2ef2ffee: Revert "Do not set IA-PD if there is no interface set to track it"
This reverts commit a31ccbef87003ce9967dda894391eab2364491da. Renato Botelho
03:47 PM Revision 12719a87: Adjust some missing ident on syslog
Renato Botelho
03:47 PM Revision a31ccbef: Do not set IA-PD if there is no interface set to track it
Renato Botelho
03:47 PM Revision 9eae3005: Fix monitor address on correct variable
Renato Botelho
03:22 PM Revision 74beebea: Fix diag_dns.php hostname usage
(cherry picked from commit 1efc9177b4a91c2bf76464437b8aaa13b3ef12e9) Jim Pingle
03:22 PM Revision 1efc9177: Fix diag_dns.php hostname usage
Jim Pingle
11:24 AM pfSense Packages Feature #10897 (Resolved): SNMPV3-trap/inform Add Snmpv3 trap/inform Field
Azamat Khakimyanov
11:24 AM pfSense Packages Feature #10897: SNMPV3-trap/inform Add Snmpv3 trap/inform Field
Tested on 2.4.5_p1 and on 2.5.0-DEVELOPMENT (built on Tue Oct 27 07:03:51 EDT 2020)
There are SNMPv3 traps and inf...
Azamat Khakimyanov
11:14 AM pfSense Packages Bug #11009 (Resolved): Module Hetzner-DNS does not save API Key
Jim Pingle
10:56 AM pfSense Packages Bug #11009: Module Hetzner-DNS does not save API Key
Jim Pingle wrote:
> Should be fixed in ACME 0.6.9_1 which will be available shortly.
Tested and works perfect. Th...
Marcus Groß
08:41 AM pfSense Packages Bug #11009 (Feedback): Module Hetzner-DNS does not save API Key
Should be fixed in ACME 0.6.9_1 which will be available shortly. Jim Pingle
07:16 AM pfSense Packages Bug #11009 (Resolved): Module Hetzner-DNS does not save API Key
When using Module "Hetzner-DNS" I'm not able to set the API key.
The edit field is empty after reopening configura...
Marcus Groß
09:35 AM pfSense Packages Feature #11008 (Pull Request Review): Add option to mail report pkg to skip sending email if no output
Jim Pingle
12:17 AM pfSense Packages Feature #11008: Add option to mail report pkg to skip sending email if no output
Pull request: https://github.com/pfsense/FreeBSD-ports/pull/971 Matthew Hildebrand
09:31 AM pfSense Packages Feature #10789 (Pull Request Review): FRR integrated configuration and hitless reloads
Jim Pingle
08:50 AM Bug #10176: Multiple duplicate / overlapping phase 2 Child SAs on IPsec tunnels
This is the response from Amazon. Since they weren't sure about 'Make before break' I will try the other settings the... Todd Blum

10/26/2020

11:34 PM pfSense Packages Feature #11008 (Resolved): Add option to mail report pkg to skip sending email if no output
Provide an option to skip sending the scheduled email if there is no command output or log content generated by the r... Matthew Hildebrand
07:46 PM Revision 2100cd0b: Revert "Prevent possible race condition, fixes #9450"
This reverts commit 5affb137561c74bb5559f0706c86c28a85b14557. Renato Botelho
07:44 PM Revision ab726b58: Revert "Fix #9450"
This reverts commit 0de6758e2893e4390acfa0b55e31b1dece231618. Renato Botelho
07:37 PM Revision 6701a859: Fix #8870
When it's not possible to check if a new version is available for any
reason, show a proper message instead of keep u...
Renato Botelho
05:03 PM Revision 120f3169: Style fixes
Renato Botelho
03:33 PM Bug #9296 (New): Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
Luiz, can you please take a look? Renato Botelho
02:44 PM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries
Brendon Baumgartner wrote:
> Should the status on this be changed? It says resolved.
Definitely not resolved. It'...
Eduard Rozenberg
02:53 PM Bug #9450 (Feedback): Multiwan gateway group fail-over not working as expected (possible race condition)
I've reverted the cache changes and it should be fine now Renato Botelho
02:45 PM Bug #8870 (Feedback): Webgui incorrectly reports "The system is on the latest version".
Applied in changeset commit:6701a859a27e1d654ee9018cdc9925b980782227. Renato Botelho
01:45 PM Revision c3b39cc4: Clear OpenVPN clients DNS entries fix. Issue #11002
Viktor Gurov
01:26 PM pfSense Packages Feature #10403 (Resolved): Add Proxy support to ACME package
Jim Pingle
01:26 PM pfSense Packages Bug #10405 (Resolved): Additional instances of ACME Domain SAN list entries with passwords are rendered as checkboxes
Jim Pingle
01:26 PM pfSense Packages Feature #10753 (Closed): Acme DNS-01 for Hurricane Electric needs to be updated for new dynamic update methods
Closed upstream. If their assessment is incorrect, raise the issue there again with more details. If they fix it, we'... Jim Pingle
01:18 PM Bug #10812: Traffic graph shows 2X the actual traffic on VLAN interfaces.
It regressed before as we can see on #7751 and fix was committed to 2.4.4 branch on FreeBSD-src... Renato Botelho
12:29 PM Bug #10812: Traffic graph shows 2X the actual traffic on VLAN interfaces.
Luiz enabled ALTQ on if_vlan.c few time before this ticket was opened. He is going to check if his commit re-introdu... Renato Botelho
12:44 PM Revision 25acab5e: Enable sysutils/memtester build
Renato Botelho
12:44 PM Revision bbae6ace: Enable sysutils/memtester build
Renato Botelho
10:02 AM Bug #10842 (Resolved): Not destroying VTI interfaces when booting before creating a new one
Renato Botelho
09:02 AM Bug #10842: Not destroying VTI interfaces when booting before creating a new one
Successfully tested !
Thanks !
Martin VENÇON
09:56 AM Bug #8136: dpinger for WAN DHCPv6 gets fails to update gateway IP
Hi Renato, please see my comment in ticket # 9324. Maybe these two issues are related? Kristopher Kolpin
09:54 AM Bug #9324: IPv6 on top of a PPPOE ipv4 interface assigns parent interface to default route, not pppoe interface
Is there a similar fix for DHCP6?
i.e. $dhcp6usev4iface parameter?
Maybe this is related to ticket #8136 ?
Kristopher Kolpin
09:52 AM pfSense Packages Feature #10909 (Feedback): #define MAXVIFS 32 to 64
pimd package 2.3.2_1 contains a patch changing MAXVIFS to 64 to match kernel. pfSense-pkg-pimd-0.0.3_1 will require ... Renato Botelho
08:46 AM Bug #11002 (Feedback): OpenVPN Clients registration does not clear DNS entries
PR has been merged. Thanks! Renato Botelho
07:41 AM pfSense Packages Feature #11007 (Rejected): Manager "users", "mac" and "NAS/clients" TAB in freeradius with data armazened in database SQL
The FreeRADIUS pfSense GUI is not going to manage your SQL database. Jim Pingle
07:40 AM Feature #11003 (Rejected): add missing options for dhcp server failover
Adding a control to DHCP in general or per-interface for this seems like it would be excessive and confusing. Not via... Jim Pingle
07:38 AM pfSense Packages Feature #10789: FRR integrated configuration and hitless reloads
Found a few more things to fixup: https://github.com/pfsense/FreeBSD-ports/pull/970 Ben Hughes
07:37 AM Bug #11006: L2TP Server and Client both use "l2tpX" for interface names
I see what you mean and have adjusted the subject to match. Both the L2TP Server and L2TP interfaces use "l2tpX" for ... Jim Pingle
07:24 AM Bug #11005: IPv6 Prefix Delegation not requested if no interfaces set to track6
It could be changed again but what's the point of requesting a PD if nothing can use it? The DHCPv6 client won't do a... Jim Pingle
07:22 AM Feature #11004: DHCP reservations with no IP address show entries in DHCP leases
It's actually expected because the static section is not parsed from the lease database, but pulled from the configur... Jim Pingle
07:17 AM pfSense Packages Bug #10749 (Feedback): squid + captive portal authentication not working
Viktor Gurov wrote:
> small improvement - Use IP as username for allowedip hosts:
> https://gitlab.netgate.com/pfSe...
Renato Botelho
07:14 AM Bug #10224: DHCP DDNS does not add zone entries for keys when using static host DDNS definitions
Viktor Gurov wrote:
> Cosmetic js fix - hide DDNS key algorithm field if DDNS is not used:
> https://gitlab.netgate...
Renato Botelho
07:13 AM pfSense Packages Bug #4247 (Resolved): Changes not saved when expression list becomes empty
Renato Botelho
07:10 AM pfSense Packages Bug #10775 (Resolved): pfblockerNG SBL_ADs and hpHosts are not reachable anymore
Renato Botelho
07:07 AM Bug #9592 (Resolved): VTI interface down because interface number created is greater than ipsec32768
Renato Botelho

10/25/2020

06:01 PM pfSense Packages Bug #10983: pfBlockerNG not cleaning everything behind it
Hi guys,
I understand that you tried to reproduce the bug without success. FYI, I am pretty sure this guy had the ...
Jacques Bourdeau
04:23 PM pfSense Packages Bug #10983: pfBlockerNG not cleaning everything behind it
I agree with Viktor. I have tried to replicate this in the latest devel and stable versions of pfBlockerNG and cannot... Max Leighton
10:17 AM pfSense Packages Feature #11007 (Rejected): Manager "users", "mac" and "NAS/clients" TAB in freeradius with data armazened in database SQL
Although freeradius package has SQL support (configure by SQL TAB), the freeradius package dont manipule users, mac a... Teste Teste
08:24 AM Feature #11003: add missing options for dhcp server failover
remove the need for carp or make it an option to let different configuration able to run
there could be a scenario w...
Manuel Piovan
04:16 AM Bug #11006: L2TP Server and Client both use "l2tpX" for interface names
Every type (server or client) of connection has name l2tpX
on the same digital index, the connection name may coinci...
Evgeny Korostelev
12:52 AM Bug #11006 (Resolved): L2TP Server and Client both use "l2tpX" for interface names
Sorry for my english :(
When pfSense have role L2TP server and L2TP client and have some count of every type connect...
Evgeny Korostelev

10/24/2020

10:48 PM pfSense Packages Bug #4247: Changes not saved when expression list becomes empty
it could be saved even if all category are empty.
ver. 1.16.18_9
Alhusein Zawi
10:38 PM Bug #10375 (Resolved): Double zfs entry in loader.conf
No sign of duplicate ZFS entry on multiple versions of 2.5DEV (w/ ZFS install obv) Jordan G
05:50 PM Feature #10934 (Resolved): Add ral(4) to arm64
Device is recognised and driver attaches:... Steve Wheeler
04:58 PM Bug #10943: boot fail after upgrade to the latest snapshot 20201001.0050. if bios is set to efi
some other reports popped out on FreeBSD
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=244906
https://bugs.free...
Manuel Piovan
01:08 PM Bug #10926 (Resolved): Secondary RADIUS Server is never used
Tested on:... Danilo Zrenjanin
12:41 PM Revision fe640412: Hide DDNS key algorithm if DDNS is not used. Issue #10224
Viktor Gurov
10:16 AM Bug #11005 (Closed): IPv6 Prefix Delegation not requested if no interfaces set to track6
Like #4544.
It appears that the bits to request a PD from upstream are not placed into /var/etc/dhcp6c_wan.conf un...
Chris Linstruth
07:42 AM Bug #10224: DHCP DDNS does not add zone entries for keys when using static host DDNS definitions
Cosmetic js fix - hide DDNS key algorithm field if DDNS is not used:
https://gitlab.netgate.com/pfSense/pfSense/-/me...
Viktor Gurov
07:22 AM Feature #11004 (New): DHCP reservations with no IP address show entries in DHCP leases
So if create a dhcp reservation, allowing IP to be pulled from pool vs specific IP not in pool.
You get 2 entries ...
JohnPoz _
06:21 AM pfSense Packages Feature #10969 (Resolved): Add Sekhan/TheGreatWall DoH feeds
Tested on:... Danilo Zrenjanin
05:53 AM pfSense Packages Bug #10775: pfblockerNG SBL_ADs and hpHosts are not reachable anymore
Tested on:... Danilo Zrenjanin
05:21 AM Feature #10988 (Resolved): Queue bw type in Mbit/s
Tested on:... Danilo Zrenjanin
04:55 AM pfSense Packages Bug #10905 (Resolved): Integration between captive portal and squid. Usernames are not showing in access.log file
fixed in #10749... Viktor Gurov
04:31 AM Feature #11003 (Rejected): add missing options for dhcp server failover
under dhcp server settings
add a way to change failover from secondary; to primary;
add mclt and split field when ...
Manuel Piovan
04:10 AM Bug #10998 (Resolved): traffic shaper php error
works as expected on 2.5.0.a.20201023.1850
now it's possible to create any number of nested queues without errors
Viktor Gurov
03:10 AM pfSense Packages Bug #10749 (New): squid + captive portal authentication not working
small improvement - Use IP as username for allowedip hosts:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge...
Viktor Gurov
12:35 AM pfSense Packages Bug #10749 (Resolved): squid + captive portal authentication not working
pfSense-pkg-squid 0.4.44_34
works as expected
https://github.com/pfsense/FreeBSD-ports/commit/7d4ffb8ea5f1798bb88...
Viktor Gurov
01:16 AM Bug #11002: OpenVPN Clients registration does not clear DNS entries
same DHCP issue: #8981
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/29
Viktor Gurov
01:08 AM Bug #11002 (Resolved): OpenVPN Clients registration does not clear DNS entries
After disabling 'Register connected OpenVPN clients in the DNS Resolver' option, /var/unbound/openvpn.client.ovpn.ipv... Viktor Gurov
01:02 AM Feature #10999 (Resolved): Allow to register OpenVPN Remote Access (User Auth) client in DNS Resolver
Kris Phillips wrote:
> Tested this and it doesn't appear to work. We have a client who applied this patch to 2.4.5p1...
Viktor Gurov
12:19 AM Bug #9592: VTI interface down because interface number created is greater than ipsec32768
Chris Linstruth wrote:
> I created enough tunnels to get over what used to be 32768. Along the way I created two VTI...
Viktor Gurov

10/23/2020

07:18 PM pfSense Packages Feature #10859: Add avahi filtering feature to pfSense
+1 B D
05:05 PM Feature #10999: Allow to register OpenVPN Remote Access (User Auth) client in DNS Resolver
Tested this and it doesn't appear to work. We have a client who applied this patch to 2.4.5p1 and enabled both the Co... Kris Phillips
08:20 AM Feature #10999: Allow to register OpenVPN Remote Access (User Auth) client in DNS Resolver
Applied in changeset commit:3b88d9712b187602e946faeecc5f4902904b6d4c. Viktor Gurov
08:13 AM Feature #10999 (Feedback): Allow to register OpenVPN Remote Access (User Auth) client in DNS Resolver
PR has been merged. Thanks! Renato Botelho
04:42 PM Bug #10812: Traffic graph shows 2X the actual traffic on VLAN interfaces.
Jim Pingle wrote:
> Last time this came up it was due to VLAN traffic counting twice on the parent. In https://redmi...
Marcos M
04:26 PM Bug #9592: VTI interface down because interface number created is greater than ipsec32768
I created enough tunnels to get over what used to be 32768. Along the way I created two VTI tunnels. They were given ... Chris Linstruth
03:52 PM pfSense Packages Bug #10933: Retired / Invalid IPv4 lists in pfBlockerNG
Another retired one:
EasyList Adware Filter EasyList_Adware
https://easylist-downloads.adblockplus.org/adwarefilte...
Marcos M
02:29 PM Bug #9054: Gateway Group slow (or never) to switch back to Tier 1
Viktor Gurov wrote:
> no such issue on 2.5.0.a.20201022.1850, resolved in #10716
> failover and load-balance gw gro...
alex alex
12:26 PM Bug #9054 (Resolved): Gateway Group slow (or never) to switch back to Tier 1
no such issue on 2.5.0.a.20201022.1850, resolved in #10716
failover and load-balance gw groups tested
Viktor Gurov
09:01 AM Bug #9054: Gateway Group slow (or never) to switch back to Tier 1
I have the same issue here.
Once pfSense switches to the Tier 2 gateway, the only way to make it come back to the T...
Rodrigo Gonçalves
02:07 PM pfSense Packages Feature #9793 (Resolved): Add support for HAProxy ACLs "src -f /ipalias.lst" to use pfBlockerNG IP Alias Native
Renato Botelho
02:07 PM pfSense Packages Feature #9793: Add support for HAProxy ACLs "src -f /ipalias.lst" to use pfBlockerNG IP Alias Native
Can be changed to Resolved. DRago_Angel [InV@DER]
02:02 PM pfSense Packages Feature #10739: Update HAproxy-devel package to 2.2 and HAproxy to 2.0
Please, can somebody check this? This important and big update. DRago_Angel [InV@DER]
01:04 PM Revision 3b88d971: Allow to register OpenVPN Remote Access (User Auth) client in DNS Resolver. Implements #10999
Viktor Gurov
01:04 PM Revision a6e1c192: Save OMAPI settings in dhcpd.conf. Issue #10270
Viktor Gurov
11:30 AM Bug #10551 (Duplicate): gateway group not restoring the higher tier gateway
Renato Botelho
11:06 AM Bug #10551: gateway group not restoring the higher tier gateway
seems duplicate of #9054 Viktor Gurov
10:50 AM pfSense Packages Bug #10749 (Feedback): squid + captive portal authentication not working
PR merged. Thanks! Renato Botelho
10:36 AM pfSense Packages Bug #10749 (Pull Request Review): squid + captive portal authentication not working
Jim Pingle
10:29 AM pfSense Packages Bug #10749: squid + captive portal authentication not working
Fixes/improvements in this PR:
- Regexp for STDIN
- Checks all enabled CP DBs
- Checks if client's IP is in 'Allow...
Viktor Gurov
06:00 AM pfSense Packages Bug #10749: squid + captive portal authentication not working
It appears that squid is passing an extra "-" after the ip address to check_ip.php
e.g. 10.10.10.10 -
I am not prof...
Brendan Gallagher
09:18 AM Bug #10943: boot fail after upgrade to the latest snapshot 20201001.0050. if bios is set to efi
It's a Virtualbox issue and not a blocker for 2.5.0. People that need to run on VirtualBox should use BIOS instead o... Renato Botelho
09:09 AM Bug #9384 (Confirmed): devd putting "$" before variable contents when using single quotes
Pingle's workaround is enough for now. Move ticket to next release and wait a proper fix from upstream Renato Botelho
08:28 AM Bug #3945 (Resolved): BOOTP lease end status is mis-parsed
no such issue on 2.4.5 and 2.5 snapshots
seems regexp improved
Example:...
Viktor Gurov
08:13 AM Bug #10998 (Feedback): traffic shaper php error
PR has been merged. Thanks! Renato Botelho
08:13 AM Bug #10270 (Feedback): OMAPI / disableauthoritative / alwaysbroadcast not saved inside dhcpd.conf
PR has been merged. Thanks! Renato Botelho
07:12 AM Feature #10984 (Resolved): Port Forward IPv6
Work as expected according people at forum Renato Botelho
06:10 AM pfSense Packages Bug #11001 (Resolved): freeradius lose sql lib every pfsense update
every update of pfsense 2.5 the freeradius package stops working and i must uninstall and reinstall the package.
Th...
Teste Teste
03:41 AM Bug #8248 (Closed): Pfsense hangs - non pingable when removing traffic shaper from interface(s)
no such issue on 2.4.5-p1 and 2.5.0.a.20201022.1850
I can add/remove/enable/disable CODELQ on any interface in any o...
Viktor Gurov
03:16 AM pfSense Packages Bug #9895: snort reinstallation failed
same on 2.5.0.a.20201022.1850... Viktor Gurov
12:50 AM Bug #10690 (Resolved): Not possible to make UFS install on ZFS formatted drive
no such issue with pfSense-CE-2.5.0-DEVELOPMENT-amd64-20201006-1250.iso
I can successfully make UFS install on ZFS f...
Viktor Gurov

10/22/2020

05:51 PM pfSense Packages Bug #11000 (New): haproxy deprecated trick suggested
haproxy-devel
under backend
the description for "Http check version" say:...
Manuel Piovan
03:01 PM Revision a330a2da: Nested queues input validatin fix. Issue #10998
Viktor Gurov
10:40 AM Bug #10270: OMAPI / disableauthoritative / alwaysbroadcast not saved inside dhcpd.conf
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/28 Viktor Gurov
10:06 AM Bug #10998: traffic shaper php error
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/27 Viktor Gurov
09:58 AM Feature #10999: Allow to register OpenVPN Remote Access (User Auth) client in DNS Resolver
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/26 Viktor Gurov
09:10 AM Feature #10999 (Resolved): Allow to register OpenVPN Remote Access (User Auth) client in DNS Resolver
Starting from 2.4.5 OpenVPN server supports "Username as Common Name" (#8289) option:... Viktor Gurov
08:42 AM Bug #10585 (Resolved): auth.inc: Exception calling XMLRPC method restore_config_section #-1 : Authentication failed: Invalid username or password
Tested in
2.5.0-DEVELOPMENT (amd64)
built on Thu Oct 22 01:05:07 EDT 2020
FreeBSD 12.2-STABLE
I was able to r...
Max Leighton
07:18 AM Bug #10375 (Feedback): Double zfs entry in loader.conf
Fixed Renato Botelho
07:08 AM pfSense Packages Bug #10886 (Closed): NAT64 allows to bypass pfBlockerNG IPv4 feed list
All good, no needs to change pfBlockerNG
https://github.com/pfsense/pfsense/pull/4405#issuecomment-708721849:
<pr...
Viktor Gurov
07:00 AM Bug #10744 (Closed): Unable to kill IPv6 client connection
works fine with the latest chromium and firefox, seems like browser/plugin/cache issue,
unable to reproduce
Viktor Gurov
04:22 AM pfSense Packages Bug #10429: Status Traffic Total broken 2.4.5
Attached is a patch that can be applied with the system patches plugin that incorporates the fixes needed to fix the ... Chris R
03:13 AM Feature #10322 (Resolved): Force ipv4/ipv6 DNS resolution for NTP servers
works as expected on 2.5.0.a.20201021.1850
If I set force to IPv4:
ntp.ix.ru - 194.190.168.1
If I set force to I...
Viktor Gurov
12:51 AM Feature #8786: Wireguard VPN
Jim Pingle wrote:
> There certainly is reason. We're working on the in-kernel implementation and won't be wasting ou...
Erik Hennerfors
12:22 AM Bug #7912 (Resolved): LDAP Test Results modal doesn't comply with theming
Looks good on 2.5.0.a.20201021.1850 Viktor Gurov
12:03 AM pfSense Packages Bug #10447 (Resolved): Framed-IP-Address with plus sign is deprecated
Viktor Gurov

10/21/2020

11:20 PM pfSense Packages Bug #10447: Framed-IP-Address with plus sign is deprecated
when I enter + (192.0.2.32+) I receive an error The "Pv4 Address' field must contain a valid IPv4 address."
Alhusein Zawi
04:55 PM Revision 569ca219: Port Forward IPv6 alias fix. Issue #10984
Viktor Gurov
04:31 PM Revision 28b16209: Fix #10997: Retire m0n0wall config compatibility
Renato Botelho
04:24 PM Revision c959928e: Remove leftover RRD code for SpamD
Renato Botelho
01:27 PM pfSense Packages Bug #10932 (Resolved): wrong link on haproxy
Renato Botelho
01:17 PM pfSense Packages Bug #10932: wrong link on haproxy
when click on Status> HAProxy Stats. it works
link:
http://*/haproxy/haproxy_stats.php?haproxystats=1
Alhusein Zawi
11:54 AM pfSense Packages Bug #10932 (Feedback): wrong link on haproxy
Viktor Gurov
01:26 PM Bug #9136 (Assigned): IPv6 Tracking Interfaces Lose IPv6 Address in Certain Cases
This does not look to be fixed. Created several Track6 VLAN interfaces on vtnet0, a track6 interface on vtnet0, and a... Chris Linstruth
12:50 PM Bug #10998 (Resolved): traffic shaper php error
2.5.0-DEVELOPMENT (amd64)
built on Tue Oct 20 13:03:46 EDT 2020
FreeBSD 12.2-STABLE
Crash report begins. Anonymo...
Michael Kellogg
11:56 AM Feature #10984: Port Forward IPv6
Viktor Gurov wrote:
> Fixes IPv6 aliases issue, see https://forum.netgate.com/topic/157759/can-t-use-alias-anymore-o...
Renato Botelho
11:54 AM Feature #10984: Port Forward IPv6
Fixes IPv6 aliases issue, see https://forum.netgate.com/topic/157759/can-t-use-alias-anymore-on-nat-port-forward/5
...
Viktor Gurov
06:35 AM Feature #10984: Port Forward IPv6
PR has been merged. Thanks! Renato Botelho
04:53 AM Feature #10984: Port Forward IPv6
Alias using fix, see https://forum.netgate.com/topic/157759/can-t-use-alias-anymore-on-nat-port-forward
https://gi...
Viktor Gurov
11:40 AM Todo #10997 (Feedback): Retire m0n0wall config support
Applied in changeset commit:28b162099f8ce4c927d8f2f2eeaeb9ce1c219409. Renato Botelho
11:26 AM Todo #10997 (Resolved): Retire m0n0wall config support
Historically, m0n0wall users were able to upgrade to pfSense old versions and it was possible to import m0n0wall conf... Renato Botelho
10:47 AM Bug #10674 (Closed): Port Forward Address Fields not becoming active in Safari
Looks good in Safari 14.0 on 10.15.7.
Setting as target version 2.5.0 for release notes or cherry-picking if neces...
Chris Linstruth
09:46 AM Revision 7007341b: IPv6 Port Forward alias fix. Issue #10984
Viktor Gurov
07:49 AM pfSense Packages Bug #3704 (Closed): spamd whitelist/blacklist bug
spamd is gone for years Renato Botelho
07:38 AM Bug #2564 (Closed): Import from m0n0wall breaks pfSense if dashes are in an alias
m0n0wall is dead for a long time Renato Botelho
07:34 AM Feature #8698 (Pull Request Review): LDAP authenticated users should be able to log in via ssh
Jim Pingle
06:10 AM Feature #8698: LDAP authenticated users should be able to log in via ssh
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/24 Viktor Gurov
07:21 AM Feature #1368 (Closed): DHCP Leases - description column
Description column is already available Renato Botelho
07:18 AM Feature #982 (Closed): External Storage
nanobsd is dead and with current installer users can setup disks/partitions with any desired layout Renato Botelho
07:17 AM Bug #981 (Closed): SSH shell Putty Function Keys
We have ee native and vim-console package available for installation. Beyond that, all tty framework was rewritten o... Renato Botelho
07:11 AM Feature #697 (Closed): Updateprocedure in the GUI
Upgrade interface was completely rewritten when we moved to pkg Renato Botelho
07:04 AM Feature #3385 (Closed): Accommodate static routes for PPTP connections
PPTP is gone since 2.3 Renato Botelho
07:04 AM Bug #4624 (Closed): VPN PPTP via Virtual IPs
PPTP is gone since 2.3 Renato Botelho
07:02 AM Todo #208 (Closed): Need PPTP helper
PPTP is gone since 2.3 Renato Botelho
07:00 AM Todo #34 (Closed): PPTP users integration with user manager
PPTP is gone since 2.3 Renato Botelho
06:55 AM Bug #144 (Closed): Syslog messages violate RFC 3164
All pfsense logs on 2.5.0 contains hostname after timestamp Renato Botelho
06:51 AM Bug #1421 (Rejected): Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
PPTP was removed from pfSense since 2.3 Renato Botelho
06:47 AM Feature #1392 (Rejected): XMPP (Jabber) Notifications/Alerts
Things changes in the last 9 years and XMPP is not that relevant anymore. We have Telegram notifications Renato Botelho
06:34 AM Bug #10996 (Duplicate): unable to use alias anymore on nat port forward
It's caused by changes applied on Feature #10984. Lets keep discussion there. Renato Botelho
05:55 AM Bug #10996: unable to use alias anymore on nat port forward
Alias using fix, see https://forum.netgate.com/topic/157759/can-t-use-alias-anymore-on-nat-port-forward
https://gi...
Viktor Gurov
03:46 AM Feature #10987: Add support for secure boot
I think FreeBSD already supports this up to the bootloader so pfsense could implement this feature right now up to th... Anonymous

10/20/2020

09:23 PM Revision 6ddd28f7: CBQ queue prio check fix. Issue #1353
Viktor Gurov
08:25 PM Revision c1e1cf6c: LDAP test pop-up style fix. Issue #7912
Viktor Gurov
07:32 PM Revision 76b3ae4e: Merge pull request #4482 from cpick/cloudflare-token-query-zone
Renato Botelho
07:28 PM Revision 391ffd74: Return correct Track IPv6 address. Fixes #5999
Viktor Gurov
06:52 PM Revision 26efb813: Fix number format
Steve Beaver
06:51 PM Bug #10996 (Duplicate): unable to use alias anymore on nat port forward
https://forum.netgate.com/topic/157759/can-t-use-alias-anymore-on-nat-port-forward
if I try to use "single host or...
Manuel Piovan
04:36 PM Feature #795 (Closed): disable acpi on alix
Alix hardware mentioned here is really old and I don't believe we need to disable ACPI on any modern hardware Renato Botelho
04:35 PM Feature #130 (Closed): Add color picker to rules / nat rows
We have colored labels that can be used to organize rules since 2.3.x Renato Botelho
04:33 PM Bug #1505 (Closed): usb 3g 760 modem doesn't respond
I'm not sure if this modem is still relevant these days. If yes, please re-test on 2.5.0 snapshots to make sure prob... Renato Botelho
04:33 PM Feature #1504 (Closed): Verizon 3g usb760
I'm not sure if this modem is still relevant these days. If yes, please re-test on 2.5.0 snapshots to make sure prob... Renato Botelho
04:31 PM Bug #1569 (Duplicate): USB760 CD not recognized
Duplicate of #1504 Renato Botelho
04:29 PM Bug #1311 (Closed): Cosmetic problem
All pages look completely different these days Renato Botelho
04:26 PM Bug #66 (Closed): Nanobsd does not work on WRAP
nanobsd is dead for a long time Renato Botelho
04:23 PM Bug #1353 (Feedback): Number of queues possible
PR has bene merged. Thanks! Renato Botelho
03:49 PM Bug #7912 (Feedback): LDAP Test Results modal doesn't comply with theming
PR has been merged. Thanks! Renato Botelho
03:22 PM Bug #7912: LDAP Test Results modal doesn't comply with theming
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/22 Viktor Gurov
03:37 PM Revision e66582b4: Removed debuggery
Steve Beaver
03:20 PM Revision 72c21050: Added Ajax handler to scaled state table display
Steve Beaver
03:11 PM Feature #7016 (Resolved): system_information_widget.php - Indicate adaptive state timeout status when active
Looks good after a gitsync Jim Pingle
01:54 PM Feature #7016: system_information_widget.php - Indicate adaptive state timeout status when active
Number format corrected Anonymous
01:08 PM Feature #7016: system_information_widget.php - Indicate adaptive state timeout status when active
I'm still only seeing the label and color change if I reload the page with a high state count. If I change the state ... Jim Pingle
10:31 AM Feature #7016: system_information_widget.php - Indicate adaptive state timeout status when active
Functionality has been finalized by adding the required data and providing the needed Ajax logic. Anonymous
09:04 AM Feature #7016: system_information_widget.php - Indicate adaptive state timeout status when active
Seems to also be susceptible to a PHP error, the code can end up dividing by 0: #10993 Jim Pingle
07:05 AM Feature #7016: system_information_widget.php - Indicate adaptive state timeout status when active
Logic has been updated but only on initial page load. Once this has been tested and confirmed as satisfactory I will ... Anonymous
02:35 PM Bug #5999: IPv6 IP Alias prevents Track Interface from working with DHCPv6 and RA
Applied in changeset commit:391ffd740ff73339a00ab4b988660e12bfa69cfe. Viktor Gurov
02:29 PM Bug #5999 (Feedback): IPv6 IP Alias prevents Track Interface from working with DHCPv6 and RA
PR has been merged. Thanks! Renato Botelho
12:56 PM Bug #5999 (Pull Request Review): IPv6 IP Alias prevents Track Interface from working with DHCPv6 and RA
Renato Botelho
12:49 PM Bug #5999: IPv6 IP Alias prevents Track Interface from working with DHCPv6 and RA
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/21 Viktor Gurov
02:33 PM Feature #10992 (Feedback): Cloudflare DDNS query Zone ID with token
PR has been merged. Thanks! Renato Botelho
09:10 AM Feature #10992 (Pull Request Review): Cloudflare DDNS query Zone ID with token
Jim Pingle
12:53 PM Bug #10406 (Resolved): Interfaces.php PPPoE selection display inappropriate "Toggle All" button when periodic reset set to "pre-set"
Renato Botelho
12:21 PM Bug #10406: Interfaces.php PPPoE selection display inappropriate "Toggle All" button when periodic reset set to "pre-set"
Tested this in
2.5.0-DEVELOPMENT (amd64)
built on Tue Oct 20 07:02:36 EDT 2020
FreeBSD 12.2-STABLE
Currently...
Max Leighton
12:36 PM pfSense Packages Bug #9854 (Closed): pfBlockerNG Message: Allowed memory size of 536870912 bytes exhausted
I've come across this error before on older versions of pfBlockerNG. Updating to the -devel branch (as suggested by t... Marcos M
12:18 PM pfSense Docs Correction #10979 (Closed): Status Light on XG-7100
Moving to the internal Redmine for product docs. Jim Pingle
11:47 AM pfSense Packages Feature #10913 (Resolved): Allow disabling caching in Squid completly
Tested on 2.4.5_p1 and on 2.5.0-DEVELOPMENT (built on Tue Oct 20 07:03:54 EDT 2020)
There is an option to disable ...
Azamat Khakimyanov
11:40 AM Feature #10995 (New): Remove VMware MSI-X from the PCI blacklist.
it would be nice to see it ported to FreeBSD 12
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=203874
https://...
Manuel Piovan
11:09 AM pfSense Packages Bug #10994 (New): SquidGuard Blacklists Restore Default button does not work
If SquidGuard/Blacklists Blacklist Update field is empty then clicking Restore Default restores nothing and generates... Constantine Kormashev
10:56 AM Revision f8cc5da5: Allow to select virtual interfaces in CLI interface assignment. Fixes #10947
Viktor Gurov
10:55 AM Revision 9abbcb4b: Default queue bw scale in Mbit/s. Feature #10988
Viktor Gurov
10:54 AM Revision 8e3b81f2: 1:1 NAT fix dual-stack. Fixes #10986
Viktor Gurov
10:52 AM Revision 55d340b8: Do not create queue RRD if there are no queues. Fixes #6277
Viktor Gurov
10:50 AM Revision fce8a99b: Port Forward IPv6. Implements #10984
Viktor Gurov
10:49 AM Revision bdb26b26: Force NTP peers DNS resolution protocol. Implements #10322
Viktor Gurov
10:01 AM pfSense Packages Bug #10771 (Resolved): arpwatch: option to not send hourly email notification on cron run
Tested on 2.4.5_p1 and on 2.5.0-DEVELOPMENT (built on Tue Oct 20 01:00:50 EDT 2020)
There is an option to disable ...
Azamat Khakimyanov
09:03 AM Bug #10993 (Duplicate): PHP Error
This is due to changes for #7016 which is ongoing. Closing in favor of that one. Jim Pingle
05:32 AM Bug #10993 (Duplicate): PHP Error
[20-Oct-2020 12:27:09 Europe/Rome] PHP Warning: Division by zero in /usr/local/www/widgets/widgets/system_informatio... Niccolò Marchi
06:05 AM Bug #10947: Virtual interface assignment can't be done in CLI interface assignment
Applied in changeset commit:f8cc5da51d95f36eb323202633294c130102d211. Viktor Gurov
05:56 AM Bug #10947 (Feedback): Virtual interface assignment can't be done in CLI interface assignment
PR has been merged. Thanks! Renato Botelho
06:00 AM Bug #10986: dynamic interface address for 1:1 NAT works incorrectly in some dual-stack cases
Applied in changeset commit:8e3b81f2efba0693ee5d4a11ffc0501832f747fa. Viktor Gurov
05:55 AM Bug #10986 (Feedback): dynamic interface address for 1:1 NAT works incorrectly in some dual-stack cases
PR has been merged. Thanks! Renato Botelho
06:00 AM Bug #6277: RRD graphs are not created correctly for interfaces using CODELQ
Applied in changeset commit:55d340b8d9f045c7e409a4db021d37468c00db73. Viktor Gurov
05:53 AM Bug #6277 (Feedback): RRD graphs are not created correctly for interfaces using CODELQ
PR has been merged. Thanks! Renato Botelho
05:55 AM Feature #10988 (Feedback): Queue bw type in Mbit/s
PR has been merged. Thanks! Renato Botelho
05:55 AM Feature #10984: Port Forward IPv6
Applied in changeset commit:fce8a99bffae47c965c692dbe763ae9732092f95. Viktor Gurov
05:50 AM Feature #10984 (Feedback): Port Forward IPv6
PR has been merged. Thanks! Renato Botelho
05:55 AM Feature #10322: Force ipv4/ipv6 DNS resolution for NTP servers
Applied in changeset commit:bdb26b26cabb3770cbd306f48728cf459b6f9253. Viktor Gurov
05:50 AM Feature #10322 (Feedback): Force ipv4/ipv6 DNS resolution for NTP servers
PR has been merged. Thanks! Renato Botelho
05:47 AM pfSense Packages Bug #10749: squid + captive portal authentication not working
Hello,
I have the same problem on a fresh new installation with versions :
- pfSense 2.4.4-RELEASE-p1
- Squid 0.4....
Bruno Le Fellic
05:23 AM pfSense Packages Feature #10909: #define MAXVIFS 32 to 64
Louis van Breda wrote:
> Renato, I am running an early pimdv3 here. Not for release yet, however working properly .....
Renato Botelho

10/19/2020

08:09 PM Feature #10992: Cloudflare DDNS query Zone ID with token
Pull request here: https://github.com/pfsense/pfsense/pull/4482 Chris Pick
08:04 PM Feature #10992 (Resolved): Cloudflare DDNS query Zone ID with token
In May Cloudflare [improved their API](https://community.cloudflare.com/t/bug-zone-detail-by-name-requires-zone-list-... Chris Pick
07:14 PM Revision 42d5da9d: Revise scaling factor calculation
Steve Beaver
07:11 PM Revision 88d878f2: Support omitting Cloudflare Zone ID for dynamic DNS
In May, Cloudflare
[improved their API](https://community.cloudflare.com/t/bug-zone-detail-by-name-requires-zone-list...
Chris Pick
06:46 PM Bug #10991: Unbound as a DNS over TLS forwarder can be quite unresponsive seems to stop working
Isn't there a way in the settings to make this less likely to happen? Unbound devs didn't even comment on the bug yet. Anonymous
06:20 PM Bug #10991 (Needs Patch): Unbound as a DNS over TLS forwarder can be quite unresponsive seems to stop working
Nothing we can do about that, since it's a problem in Unbound itself. When it gets fixed in Unbound, the fix will mak... Jim Pingle
05:57 PM Bug #10991 (Needs Patch): Unbound as a DNS over TLS forwarder can be quite unresponsive seems to stop working
Unbound as a DNS over TLS forwarder can be quite unreliable and stop resolving anything with the right DNS servers.
...
Anonymous
03:20 PM Bug #10974: pfSense showing unspecified DHCP assignment range
That's why the forum is the best place to discuss and diagnose the issue. This isn't the place to bring up "unexpecte... Jim Pingle
03:07 PM Bug #10974: pfSense showing unspecified DHCP assignment range
Jim Pingle wrote:
> This site is not for support or diagnostic discussion.
>
> For assistance in solving problems...
Mark Whitworth
09:09 AM Bug #10974 (Rejected): pfSense showing unspecified DHCP assignment range
This site is not for support or diagnostic discussion.
For assistance in solving problems, please post on the "Net...
Jim Pingle
01:32 PM Bug #9796: kernel panic after removing interfaces
Luiz, up to a couple of month ago, I had lots! of interface related stability problems (crashes). However, since a co... Louis B
01:24 PM Bug #9796 (Feedback): kernel panic after removing interfaces
Based on FreeBSD issue, this issues seems to be fixed.
Can someone confirm this ?
Luiz Souza
01:31 PM Feature #7016 (In Progress): system_information_widget.php - Indicate adaptive state timeout status when active
A few problems as it is implemented:
1. It doesn't work because it's checking @$curentries@ not @$pfstatetext@
2....
Jim Pingle
01:16 PM Feature #9260 (Feedback): ssh_tunnel_shell: Disable console message output
Silenced all the output of ssh_tunnel_shell.
Looks way better now, let me know if I have missed something.
Luiz Souza
01:02 PM Bug #7772 (Resolved): Regression of Bug #906
I can't reproduce it either. When removing an interface, rules on that interface are also removed. Thus deleting the ... Jim Pingle
12:55 PM pfSense Docs Correction #10973 (Resolved): Feedback on Services — DHCPv6 Server
Changed to @FFF0@ as suggested Jim Pingle
12:30 PM Revision 82479cdc: Minor refinements to state table size display
Steve Beaver
11:15 AM Bug #10610 (Resolved): Package upgrade or reinstall hangs indefintely on the console
No problems on current version of pkg, on CE or factory, on 2.4.5-p1 or 2.5.0. Everything appears to be OK now. Jim Pingle
11:01 AM pfSense Packages Feature #10789: FRR integrated configuration and hitless reloads
Ben Hughes wrote:
> Yes, Jim's right. I'm forgetting i've build my test packages for 2.4.5 on a FreeBSD 11 build VM ...
Chris Evans
10:39 AM pfSense Packages Feature #10789: FRR integrated configuration and hitless reloads
Yes, Jim's right. I'm forgetting i've build my test packages for 2.4.5 on a FreeBSD 11 build VM with matching librari... Ben Hughes
10:37 AM pfSense Packages Feature #10789: FRR integrated configuration and hitless reloads
Do not install packages across versions like that. Either upgrade to 2.5.0 completely or wait for it to be merged. An... Jim Pingle
10:36 AM pfSense Packages Feature #10789: FRR integrated configuration and hitless reloads
@pkg install json-c@ should do the job, 0.14 is in the 2.4.5 repos. I have expected @pkg@ to have picked that up itse... Ben Hughes
09:42 AM pfSense Packages Feature #10789: FRR integrated configuration and hitless reloads
Ben Hughes wrote:
> Always like a nice easy fix!
>
> I've only just starting doing anything with pfsense dev wise...
Chris Evans
09:23 AM pfSense Packages Feature #10789: FRR integrated configuration and hitless reloads
Always like a nice easy fix!
I've only just starting doing anything with pfsense dev wise but from github it seems...
Ben Hughes
09:12 AM pfSense Packages Feature #10789: FRR integrated configuration and hitless reloads
Ben Hughes wrote:
> Just a thought, which version of pfSense is this with? And which version of the FRR plugin is in...
Chris Evans
09:09 AM pfSense Packages Feature #10789: FRR integrated configuration and hitless reloads
Just a thought, which version of pfSense is this with? And which version of the FRR plugin is installed? It should be... Ben Hughes
08:35 AM pfSense Packages Feature #10789: FRR integrated configuration and hitless reloads
Ben Hughes wrote:
> Chris Evans wrote:
> > I'm just going in and adding/removing a fake neighbor to see if it would...
Chris Evans
10:59 AM Bug #8870: Webgui incorrectly reports "The system is on the latest version".
Issue still exists Anonymous
10:29 AM Todo #10704: Work around PHP issues with SSL LDAP and multiple authentication servers
There is still likely to be a technical / non-documentation way to address this.
Some of that depends on the outco...
Jim Pingle
10:21 AM Bug #6277 (Pull Request Review): RRD graphs are not created correctly for interfaces using CODELQ
Jim Pingle
03:18 AM Bug #6277: RRD graphs are not created correctly for interfaces using CODELQ
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/20 Viktor Gurov
10:20 AM Bug #10982 (Resolved): Primary/Secondary DNS Server field validation issue in Setup Wizard
The default config (With DNS Resolver enabled and in Resolver mode) does not require any DNS servers to be present un... Jim Pingle
10:10 AM pfSense Packages Bug #10990: net-snmp IPv6 listen address needs to be wrapped in square brackets
PR: https://github.com/pfsense/FreeBSD-ports/pull/965 Jim Pingle
10:09 AM pfSense Packages Bug #10990 (Pull Request Review): net-snmp IPv6 listen address needs to be wrapped in square brackets
Jim Pingle
10:05 AM Feature #10988 (Pull Request Review): Queue bw type in Mbit/s
Jim Pingle
10:03 AM Feature #4405 (In Progress): Traffic shaping doesn't work when applied to a bridge interface
Luiz Souza
10:03 AM Bug #9643 (In Progress): Limiters do not function properly on 2.5 snapshots
Luiz Souza
10:02 AM Feature #10322 (Pull Request Review): Force ipv4/ipv6 DNS resolution for NTP servers
Jim Pingle
10:02 AM Bug #7389 (In Progress): Limiter does not work with transparent proxy
Luiz Souza
09:54 AM Feature #10987 (Needs Patch): Add support for secure boot
Must be implemented in FreeBSD first: https://wiki.freebsd.org/SecureBoot Jim Pingle
09:53 AM Bug #10986 (Pull Request Review): dynamic interface address for 1:1 NAT works incorrectly in some dual-stack cases
Jim Pingle
09:44 AM Feature #10984 (Pull Request Review): Port Forward IPv6
Jim Pingle
09:39 AM Bug #10980: ``/etc/rc.local`` script content is executed at login instead of during boot sequence
Only the @rc.local@ parts are relevant here.
Non-root/admin users don't need the menu since most of its options wo...
Jim Pingle
09:36 AM Bug #10978: rc.initial tries to execute rc.local.running even if it doesn't exist, and even if it is already running.
I did create another issue for it a few days ago as requested.
https://redmine.pfsense.org/issues/10980
alzee bum
09:34 AM Bug #10978: rc.initial tries to execute rc.local.running even if it doesn't exist, and even if it is already running.
.profile is expected to be executed at each login, which it is.
.profile runs rc.initial during an interactive ses...
Jim Pingle
09:29 AM Bug #10947 (Pull Request Review): Virtual interface assignment can't be done in CLI interface assignment
Jim Pingle
09:24 AM Bug #10236 (Rejected): Cannot add more than 2 VMXNET3 Adapters in vSphere
Adding NICs to a hot/running VM has never worked and isn't expected to work. Shut down the VM (power off, not warm bo... Jim Pingle
09:20 AM Bug #10902 (Rejected): 2.5.0. Authentication logging
The beep is from the system console logging the high level syslog message, not a script. If something causes that to ... Jim Pingle
09:15 AM Bug #9136: IPv6 Tracking Interfaces Lose IPv6 Address in Certain Cases
I haven't seen this in a while, but cjl saw it more than I did. Reassigning to him for feedback since he could reprod... Jim Pingle
08:50 AM Todo #10464: Don't change the current update repo when new releases are available
While not a bug per se, it is something we could improve. It would prevent some accidental breakage if users couldn't... Jim Pingle
08:48 AM Feature #10970: UI/GUI has an issue scrolling while drop menue is clicked/open
This is the nature of the way the user has set the menu in the preferences.
Under System > General, if "Top Naviga...
Jim Pingle
08:45 AM Bug #10971 (Rejected): OpenLDAP + group member attribute other than memberUid
This site is not for support or diagnostic discussion.
For assistance in solving problems, please post on the "Net...
Jim Pingle
08:43 AM Bug #10675: DHCPv6 config not all directives start on a new line as expected
Looks good to me as well, including the DNS server.... Jim Pingle
08:41 AM Bug #8390 (Confirmed): Input validation does not prevent removing a gateway used by a DNS server
Their problem is different from the ones linked.
When you remove a gateway, there can still be entries in the DNS ...
Jim Pingle
06:52 AM pfSense Packages Feature #9721 (Feedback): add squidclient -h 127.0.0.1 mgr:info output to Diagnostics / Squid and status.php
PR has been merged. Thanks! Renato Botelho
06:42 AM pfSense Packages Feature #9721 (Pull Request Review): add squidclient -h 127.0.0.1 mgr:info output to Diagnostics / Squid and status.php
Renato Botelho
06:50 AM pfSense Packages Bug #6378 (Feedback): inline background styles in squidguard package
PR has been merged. Thanks! Renato Botelho
06:42 AM Bug #1353 (Pull Request Review): Number of queues possible
Renato Botelho
 

Also available in: Atom