Activity

30 days up to

User

Subprojects

Activity

From 09/26/2021 to 10/25/2021

10/25/2021

06:21 PM Bug #6880: Multiple DHCP6 WAN connections leads to multiple dhcp6c clients: Has the fix been merged yet? What's the current status? Can we set the target version appropriately as there is now a... Flole Systems
05:24 PM pfSense Docs Correction #12469: Automatic outbound NAT rules are applied to the WG interface: Brett Keller wrote in #note-8:
> Setting an upstream gateway includes the interface in automatic outbound NAT rule g... Brett Keller
05:04 PM Bug #12486: Editing a network interface: I see now, at some point I must have turned on RAs then turned off IPv6 for the interface I’d turned it on for. Maybe... James Chambers
03:37 PM Bug #12486: Editing a network interface: Sorry but I’ve searched and searched for answers already, the interface tells me to disable router advertisements and... James Chambers
02:33 PM Bug #12486 (Not a Bug): Editing a network interface: This site is not for support or diagnostic discussion.
For assistance in solving problems, please post on the "Net... Jim Pingle
01:24 PM Bug #12486: Editing a network interface: *issue James Chambers
01:23 PM Bug #12486: Editing a network interface: I can get around the issues by temporarily adding an IPv6 configuration. James Chambers
01:12 PM Bug #12486 (Not a Bug): Editing a network interface: I have a network interface just for accessing the pfSense GUI. From this network I can edit other interfaces but I am... James Chambers
12:31 PM pfSense Packages Bug #12399: WireGuard v0.1.5 - Tunnel Will Never Handshake Again After WAN Reset: Just a quick update to let you know I've tested for this issue on the latest community release of OPNsense (21.7.3_3)... Ryan Roosa
10:11 AM Feature #12011: Disable log compression on new installations when ``/var/log`` is a ZFS dataset with compression enabled: I'm fairly certain that's because the 2100 and 1100 have compression off on @/var/log@ by default. You can confirm th... Jim Pingle
10:06 AM Feature #10587 (Resolved): UPnP/NAT-PMP STUN configuration options: Jim Pingle
10:02 AM pfSense Packages Bug #11465 (Closed): Input validation does not prevent multiple conflicting WireGuard peers on a single tunnel from attempting to act as default route: Jim Pingle
09:51 AM Bug #12485 (Rejected): DDNS set to a gateway group does not update on WAN failover: I can't replicate this. I use multi-WAN with DDNS on my edge and it updates properly, I had several failures last wee... Jim Pingle
07:26 AM pfSense Packages Feature #11386 (Resolved): Add WireGuard tunneled networks to vpnaddresses list: Tested on 21.05_p1 and on 22.01-DEVELOPMENT (built on Sun Oct 24 05:22:55 UTC 2021)
I see WireGuard tunnel network i... Azamat Khakimyanov

10/24/2021

08:02 AM pfSense Packages Bug #11682 (Resolved): Certificate Manager page do not show STunnel used certificates: Tested on 21.05.1 and 22.01-DEVELOPMENT (built on Sun Oct 24 05:22:55 UTC 2021)
I still see this Bug on 21.05.1 but ... Azamat Khakimyanov
07:43 AM pfSense Packages Bug #11683 (Resolved): Certificate Manager page doesn't show FreeRADIUS used certificates: Tested on 21.05.1 and 22.01-DEVELOPMENT (built on Sun Oct 24 05:22:55 UTC 2021)
I see FreeRADIUS certificate in 'IN ... Azamat Khakimyanov
07:04 AM pfSense Packages Bug #11687 (Resolved): Fix download URLs for SecuriteInfo.com: Tested on 21.05.1 and 22.01-DEVELOPMENT (Squid: 0.4.45_5).
I saw SecuriteInfo.com ID in /usr/local/pkg/squid_antivir... Azamat Khakimyanov

10/23/2021

06:13 PM Feature #10587: UPnP/NAT-PMP STUN configuration options: Options for setting STUN configuration is present in UPnP/NAT-PMP on 22.01.a.20211023.0500 Jordan G
05:47 PM Feature #12011: Disable log compression on new installations when ``/var/log`` is a ZFS dataset with compression enabled: 2100 on ZFS upgraded to 22.01.a.20211023.0500 shows bzip2 as log compression setting. Set to none, saved and then fac... Jordan G
05:23 PM pfSense Plus Bug #11626: Google LDAP connections fail due to lack of SNI for TLS 1.3: It appears that openldap25-client and openldap25-server are both in freshports for FreeBSD.
https://www.freshpor... Kris Phillips
11:55 AM Feature #12441 (Resolved): Send notification for halt, reboot, and reroot events: Tested in
2.6.0-DEVELOPMENT (amd64)
built on Sat Oct 23 05:23:58 UTC 2021
FreeBSD 12.3-PRERELEASE
I get no... Max Leighton
11:44 AM Todo #12449: Update "DNS Server Override" and "DNS Query Forwarding" help text: Checked in
2.6.0-DEVELOPMENT (amd64)
built on Sat Oct 23 05:23:58 UTC 2021
FreeBSD 12.3-PRERELEASE
The help ... Max Leighton
06:48 AM Bug #12483: GUI creates inconsistent config.xml: The `staticroutes` is just 1 example of many, there are few other configuration keys which are victim of this issue.
... Evren Yurtesen
06:36 AM pfSense Packages Bug #11465: Input validation does not prevent multiple conflicting WireGuard peers on a single tunnel from attempting to act as default route: This ticket can now be closed as the PR has been merged Adam Cooper

10/22/2021

08:42 PM pfSense Docs Correction #12471: AES-XCBC should not be recommended as PRF for IPsec: Thanks for taking this up Jim!
> Originally that was recommended as it would result in the highest performance on ... Kev Kitchens
01:11 PM pfSense Docs Correction #12471 (Feedback): AES-XCBC should not be recommended as PRF for IPsec: Fixed in https://gitlab.netgate.com/docs/pfSense-docs/-/commit/5086c307ec3b213edcc7efbfc82eabf416053ce3 but won't be ... Jim Pingle
12:39 PM pfSense Docs Correction #12471: AES-XCBC should not be recommended as PRF for IPsec: It's also worth noting that the native IPsec client in Android 11 and 12 does support AES-XCBC and has it listed befo... Jim Pingle
09:58 AM pfSense Docs Correction #12471: AES-XCBC should not be recommended as PRF for IPsec: Originally that was recommended as it would result in the highest performance on systems with hardware acceleration f... Jim Pingle
08:24 PM Revision c7a78ad6: Elliptic Curve 25519, 448 bit -> Elliptic Curve 448, 448 bit PH2 rename. Fixes #12350: Viktor Gurov
04:15 PM Bug #12485: DDNS set to a gateway group does not update on WAN failover: I should add that WAN failover happens without issue. The default gateway becomes WAN2 as expected. It's just DDNS th... Max Leighton
04:14 PM Bug #12485 (Rejected): DDNS set to a gateway group does not update on WAN failover: For my test, I observed this in 21.01, and it has been observed in 21.05.1 as well.
It's been reported that DDNS i... Max Leighton
03:04 PM pfSense Packages Bug #12482 (Pull Request Review): Outdated doc links: Jim Pingle
08:59 AM pfSense Packages Bug #12482: Outdated doc links: fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/140 Viktor Gurov
07:06 AM pfSense Packages Bug #12482 (Resolved): Outdated doc links: The HAProxy-devel package (based on haproxy 2.4.x) uses outdated doc links (haproxy 1.7):... Viktor Gurov
03:02 PM Bug #12350 (Pull Request Review): Incorrect label for IPsec DH group 32: Jim Pingle
01:09 AM Bug #12350: Incorrect label for IPsec DH group 32: Alhusein Zawi wrote in #note-5:
> fixed "Elliptic Curve 448" in P1.
>
> still showing up as "Elliptic Curve 25519... Viktor Gurov
03:01 PM Feature #12184 (Pull Request Review): GUI options to configure IKE retransmission behavior: Jim Pingle
01:05 AM Feature #12184: GUI options to configure IKE retransmission behavior: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/438 Viktor Gurov
02:56 PM Bug #12481 (Pull Request Review): Temporary files for firewall rules generated from RADIUS ACL entries are not deleted on unclean shutdown: Jim Pingle
12:56 PM pfSense Packages Bug #12142 (Resolved): XMLRPC replication target configuration: Tested on the:... Danilo Zrenjanin
12:39 PM Bug #12356 (Resolved): Validation when deleting a VIP does not check if the VIP is used by IPsec phase 1 entries: Tested on the:... Danilo Zrenjanin
09:42 AM pfSense Packages Bug #12484 (Duplicate): Unable to remove intermediate CA: It's the same as the other linked issue. Adding that feature will solve this problem as the user could choose the oth... Jim Pingle
09:38 AM pfSense Packages Bug #12484 (Duplicate): Unable to remove intermediate CA: Some client needs to remove intermediate "ISRG Root X1" CA to allow legacy clients to work,
otherwise they will get ... Viktor Gurov
07:54 AM Bug #12483 (New): GUI creates inconsistent config.xml: With pfSense 2.5. If I update the Hostname from the GUI. The config diff shows the normal hostname change, in additio... Evren Yurtesen
02:50 AM Feature #7749 (Resolved): Support ``0`` CIDR mask for IGMP Proxy networks: Viktor Gurov
02:06 AM Feature #7749: Support ``0`` CIDR mask for IGMP Proxy networks: Tested on the:... Danilo Zrenjanin

10/21/2021

07:10 PM Bug #12350: Incorrect label for IPsec DH group 32: fixed "Elliptic Curve 448" in P1.
still showing up as "Elliptic Curve 25519, 448 bit" in P2.
2.6.0.a.202110... Alhusein Zawi
05:15 PM pfSense Docs Correction #12471: AES-XCBC should not be recommended as PRF for IPsec: For some further justification, the NIST Guide to IPsec VPNs (SP 800-77) does not list AES-XCBC as an approved PRF al... Kev Kitchens
03:11 PM Revision a96a7151: Delete stale OpenVPN RADIUS ACL generated rules. Fixes #12481: Viktor Gurov
02:02 PM Revision 5a1436da: Tell us the name of the logs tarball so we don't have to go hunting through s3: Brad Davis
01:28 PM Revision 46cdd9ab: Allow to select PPPoE Server authentication protocol. Implements #12438: Viktor Gurov
01:27 PM Revision aa1936ee: DNS check optimization for NDP diag page. Fixes #11512: Viktor Gurov
10:13 AM Bug #12481: Temporary files for firewall rules generated from RADIUS ACL entries are not deleted on unclean shutdown: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/436 Viktor Gurov
09:47 AM Bug #12481 (Closed): Temporary files for firewall rules generated from RADIUS ACL entries are not deleted on unclean shutdown: ovpn_ovpnsX_user_NNN.rules files under /tmp folder are not deleted on unclean shutdown Viktor Gurov
09:41 AM Bug #12335: IPsec DNS inefficiency: Jim Pingle wrote:
> Additionally, look at all calls of @ipsec_get_phase1_dst()@ such as when configuring VTI interfa... Viktor Gurov
08:45 AM Feature #12438 (Feedback): Option to select PPPoE Server authentication protocol: Applied in changeset commit:46cdd9ab8e3f5e22a9178f9bca2d8785f7de38a7. Viktor Gurov
08:01 AM Feature #12438 (Pull Request Review): Option to select PPPoE Server authentication protocol: Jim Pingle
06:12 AM Feature #12438: Option to select PPPoE Server authentication protocol: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/434 Viktor Gurov
08:35 AM Regression #11512 (Feedback): DHCP Leases page and ARP table page fail to load if DNS is not available: Applied in changeset commit:aa1936eefc251b5330e7392f3b1fbc23a006a400. Viktor Gurov
08:30 AM Feature #12441 (Feedback): Send notification for halt, reboot, and reroot events: Applied in changeset commit:138f2dd0087989cfd5cbb2caa71af83529139475. Viktor Gurov
07:59 AM Feature #12441 (Pull Request Review): Send notification for halt, reboot, and reroot events: Jim Pingle
03:28 AM Feature #12441 (New): Send notification for halt, reboot, and reroot events: Send notification on WebGUI reboot/reroot/halt:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/433 Viktor Gurov
08:25 AM Revision 138f2dd0: Send notification on WebGUI reboot/reroot/halt. Implements #12441: Viktor Gurov
08:19 AM Feature #12480: Wake on LAN button to wake all devices: Adding a confirmation prompt would be viable, but I don't see it being a significant enough need to add an option som... Jim Pingle
06:59 AM Feature #12480: Wake on LAN button to wake all devices: It could be a good idea to have the possibilities to move/remove the button "Wake All Devices" or be able to put ... Antoine Graux
06:56 AM Feature #12480 (Resolved): Wake on LAN button to wake all devices: It could be a good idea to have the possibilities to move or remove the button "Wake All Devices".If the administrato... Antoine Graux
08:15 AM Bug #12436: Pppoe server config gui does not allow setting of chap authentication, and sets the network start address for allocation to 0: Viktor Gurov wrote in #note-4:
> Jim Pingle wrote in #note-3:
> > An IP address ending in @.0@ is only invalid when... Jim Pingle
06:31 AM Bug #12436 (New): Pppoe server config gui does not allow setting of chap authentication, and sets the network start address for allocation to 0: Jim Pingle wrote in #note-3:
> An IP address ending in @.0@ is only invalid when used as a part of an actual subnet.... Viktor Gurov
03:48 AM Bug #9344: OpenVPN click NCP Algorithms will always go to DH Parameters website(in Chinese-Taiwan): I've already fixed this issue on https://zanata.netgate.com, but it looks like it's not merged to 2.6.0 Viktor Gurov
12:45 AM Bug #12452: Port forward rules are not created for special networks (pppoe, openvpn): Marcos Mendoza wrote in #note-1:
> This should be tested on 22.01 snapshots as something changed to fix the missing ... Viktor Gurov

10/17/2021

11:04 AM Feature #12318 (Resolved): Display default "Reflection Timeout" value on ``system_advanced_firewall.php``: 2.6.0.a.20211016.0500 - looks good Viktor Gurov
10:02 AM Feature #12318 (Feedback): Display default "Reflection Timeout" value on ``system_advanced_firewall.php``: Viktor Gurov
10:04 AM Bug #8013 (New): IPsec MSS clamping value shared for IPv4 and IPv6: Jim Pingle wrote in #note-3:
> https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/230
This is another fi... Viktor Gurov
10:00 AM Bug #12468: Stopping IPsec daemon on the Status / Services page lead to log files flooding if pcscd daemon is enabled: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/431 Viktor Gurov
09:52 AM Bug #12468 (Resolved): Stopping IPsec daemon on the Status / Services page lead to log files flooding if pcscd daemon is enabled: - PC/SC daemon must be stopped before strongswan, otherwise it will flood log
- There is no needs in PC/SC service e... Viktor Gurov
09:30 AM Bug #12460: Unbound falls back to using all outgoing network interfaces if manually selected outgoing interface(s) are unavailable: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/430 Viktor Gurov
05:50 AM Revision 67fedb90: Use proxy for DDNS Check IP Services. Feature #12342: Viktor Gurov
05:35 AM Bug #12467: CP error on client disconnect after reboot: addition:
for some reason I see .db file of deleted CP zone after reboot (also if 'rm /var/db/captiveportal*'):
<pre... Viktor Gurov
04:56 AM Bug #12467 (Resolved): CP error on client disconnect after reboot: How to reproduce:
1) Create CP zone "mycpzone" with default settings and Local Database authentication (maybe other ... Viktor Gurov
01:30 AM Todo #12431: GUI pages should use ``POST`` for AJAX calls, not ``GET``: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/429 Viktor Gurov
12:52 AM Feature #12342 (New): Dynamic DNS client proxy support: Check IP Services proxy support:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/428 Viktor Gurov
12:30 AM pfSense Packages Feature #12462: Telegraf: Add "devfs" to ignore_fs: https://github.com/pfsense/FreeBSD-ports/pull/1114 Viktor Gurov
12:10 AM Bug #12463 (Duplicate): Unexpected error message after trying to delete a VIP alias: Duplicate of #12442 Viktor Gurov
12:09 AM Todo #12430 (Resolved): Add IPsec phase 2 BINAT subnet size input validation: Viktor Gurov
12:04 AM Bug #12038 (Resolved): System attempts to start inactive services at boot: Viktor Gurov

10/16/2021

10:04 PM Feature #12466 (New): Option to Disable Renegotiation timer in OpenVPN Server: We should add an option to the OpenVPN server webConfigurator so that we can disable renegotiation in OpenVPN. This ... Kris Phillips
10:01 PM pfSense Packages Bug #12381 (Rejected): mOTP with RADIUS drops the VPN connection after 60 minutes: Jim Pingle wrote in #note-1:
> I don't think that's FreeRADIUS, but OpenVPN. IIRC OpenVPN defaults to reconnecting e... Kris Phillips
09:28 PM Bug #12038: System attempts to start inactive services at boot: Tested on 22.01. Looks good and disabled services don't show in the startup as far as I can tell. Kris Phillips
08:36 PM Feature #12169 (New): IPsec keep alive option to initiate phase 2 without using ICMP: I did some further testing on this.
@(substr($status[$ikeid]['p1']['interface'], 0, 4) == "_vip")@ returns a false... Marcos M
07:35 PM pfSense Packages Feature #12465 (New): Add forwardfor advanced usecases: By default haproxy creates new x-forward-for header and do not touch existing one. This could be found in documentati... DRago_Angel [InV@DER]
11:16 AM pfSense Packages Bug #11887 (Resolved): Squid service starts twice by /etc/rc.start_packages: Tested in:
22.01-DEVELOPMENT (amd64)
built on Wed Oct 13 05:25:11 UTC 2021
FreeBSD 12.2-STABLE
Squid: 0.4.45_5 ... Max Leighton
10:36 AM pfSense Packages Todo #12456: Remove zabbix 5.2 packages: I checked in
2.6.0-DEVELOPMENT (amd64)
built on Sat Oct 16 05:24:35 UTC 2021
FreeBSD 12.2-STABLE
And see tha... Max Leighton
10:13 AM Feature #12464: Option to control log level of authentication messages in system logs ("Emergency" vs "Notice" level): https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/427 Steve Wheeler
09:57 AM Feature #12464 (Resolved): Option to control log level of authentication messages in system logs ("Emergency" vs "Notice" level): All authentication logs are send with the Level set as Emergency even when authentication is successful:... Steve Wheeler
10:06 AM Feature #11957 (Resolved): XMLRPC synchronization for DHCP relay settings: Tested in
22.01-DEVELOPMENT (amd64)
built on Wed Oct 13 05:25:11 UTC 2021
FreeBSD 12.2-STABLE
The DHCP Relay... Max Leighton
09:44 AM Bug #12356: Validation when deleting a VIP does not check if the VIP is used by IPsec phase 1 entries: I tested on the:... Danilo Zrenjanin
09:44 AM Bug #12463 (Duplicate): Unexpected error message after trying to delete a VIP alias: There is an unexpected error message after trying to delete a VIP Alias type which is used as an interface for IPsec ... Danilo Zrenjanin
07:58 AM Feature #12416 (Resolved): Support OpenVPN ``client-kill`` to terminate remote clients instead of clearing their session: Tested on the:... Danilo Zrenjanin
07:44 AM Feature #12342 (Resolved): Dynamic DNS client proxy support: Tested on the:... Danilo Zrenjanin
07:23 AM Todo #12430: Add IPsec phase 2 BINAT subnet size input validation: Testet on the:... Danilo Zrenjanin

10/15/2021

09:37 PM pfSense Packages Bug #11592: Node exporter can not read system statistics: The issue is that in "node_collector v1.0.0":https://github.com/prometheus/node_exporter/blob/master/CHANGELOG.md#100... Daniel Kimsey
09:19 PM pfSense Packages Feature #11163: Preferred Chain option: I submitted a PR to implement this option as I found one my clients needed it for a particular cert I was issuing.
P... Daniel Kimsey
08:56 PM pfSense Packages Bug #12399: WireGuard v0.1.5 - Tunnel Will Never Handshake Again After WAN Reset: Ryan Roosa wrote in #note-12:
> Samuel Hanna wrote in #note-11:
> > The problem still persist on wireguard 0.1.5_1.... Samuel Hanna
08:55 PM pfSense Packages Bug #12399: WireGuard v0.1.5 - Tunnel Will Never Handshake Again After WAN Reset: Thank you for the detailed report here. This is immensely helpful. I will continue to poke at this next week and repo... Christian McDonald
05:18 PM pfSense Packages Bug #12399: WireGuard v0.1.5 - Tunnel Will Never Handshake Again After WAN Reset: Samuel Hanna wrote in #note-11:
> The problem still persist on wireguard 0.1.5_1.
> even after changing the keys and ... Ryan Roosa
08:52 PM Feature #9617: PPPoE Static IP Configuration in GUI: any update on this feature??
it would be great to have this option in pppoe interface gui, it's very useful if i h... Samuel Hanna
06:44 PM pfSense Packages Feature #12462 (Pull Request Review): Telegraf: Add "devfs" to ignore_fs: The Netgate XG-1537 has the following disk paths at 100% utilization:
* /dev
* /var/dhcpd/dev
* /var/unbound/dev
... Offstage Roller
03:47 PM pfSense Docs Todo #12461 (Resolved): Improve macOS Serial Command Instructions: Many of the devices no longer just show "/dev/cu.usbserial" for their path in macOS. For example the SG-5100 with th... Kris Phillips
01:27 PM Feature #7749: Support ``0`` CIDR mask for IGMP Proxy networks: The address for gitlab is in the private range. I can't tell if you want me to see the update or not, but I have no a... Juan Abonia
09:57 AM Bug #12460 (Resolved): Unbound falls back to using all outgoing network interfaces if manually selected outgoing interface(s) are unavailable: How to reproduce:
1) Configure OpenVPN client and assign OpenVPN interface
2) Select OpenVPN interface in `Outgoi... Viktor Gurov
09:35 AM Todo #12459 (New): Add IP Alias subnet input validation: From https://docs.netgate.com/pfsense/en/latest/firewall/virtual-ip-address-comparison.html#ip-alias:
- Can be in a ... Viktor Gurov
08:18 AM Feature #12458 (New): Use "unixHomeDirectory" instead of "homeDirectory" when LDAP authentication server is Active Directory: In many Active Directory environments, @homeDirectory@ is a UNC path to an SMB/CIFS shared folder, e.g.,... Charles Hamilton
03:28 AM Feature #12433: Icon for traffic direction on floating rules tab: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/426 Viktor Gurov
03:00 AM Feature #4769: IPv6 support in the Traffic Shaper Wizard: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/425 Viktor Gurov

10/14/2021

07:30 PM Bug #12408 (Resolved): Input validation prevents creating 1:1 NAT rules on OpenVPN: able to create 1:1 NAT on openvpn int.
2.6.0.a.20211013.0500
Alhusein Zawi
03:41 PM Revision 35c4d4fd: Ticket #12456: Retire Zabbix 5.2 packages: Renato Botelho
02:19 PM Bug #12410 (Resolved): 1:1 NAT edit page lists incorrect entries in the Destination field: fixed
2.6.0.a.20211013.0500
Alhusein Zawi
12:53 PM pfSense Docs Todo #12457 (New): Add UPS Configuration Recipes for apcupsd and nut UPS Packages with Common Brand Units: A customer requested that we add some basic "how to" recipes to the pfSense docs for basic operations in the apcupsd ... Kris Phillips
10:16 AM pfSense Packages Todo #12456 (Feedback): Remove zabbix 5.2 packages: Done Renato Botelho
10:15 AM pfSense Packages Todo #12456 (Resolved): Remove zabbix 5.2 packages: zabbix 5.2 were removed from FreeBSD ports because they are unsupported by upstream. Remove pfSense packages as well Renato Botelho
09:55 AM pfSense Packages Bug #10431 (Resolved): pfBlockerNG Cron Job wrong - Clear IP / DNSBL Statistics: no such issue with pfBlockerNG-devel 3.1.0 (fixed):... Viktor Gurov
09:48 AM pfSense Packages Feature #9798: add ipv4 and ipv6 dnscrypt-resolvers feeds: actual link:
https://download.dnscrypt.net/dnscrypt-resolvers/json/public-resolvers.json Viktor Gurov
09:42 AM pfSense Packages Bug #11817 (Closed): Enabling Firewall / pfBlockerNG / DNSBL / IPv6 DNSBL blocks radvd from starting: Viktor Gurov
08:38 AM Feature #8908 (Closed): setting default gateway using lower Tier in case gateway group is set as default: no such issue on 2.6.0.a.20211013.0500 -
If I set GW group in Default gateway IPv4 then, after pressing 'apply', low... Viktor Gurov
04:05 AM Bug #12455: Captive Portal online user statistics data is not cleared on unclean shutdown: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/424 Viktor Gurov
03:57 AM Bug #12455 (Resolved): Captive Portal online user statistics data is not cleared on unclean shutdown: `/var/db/captiveportal_online_users` (used for RRD) can contain incorrect data on unclean shutdown
and should be cle... Viktor Gurov
03:10 AM Bug #12355: Captive Portal database and ``ipfw`` rules are out of sync after unclean shutdown: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/423 Viktor Gurov
12:25 AM Feature #7749: Support ``0`` CIDR mask for IGMP Proxy networks: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/422 Viktor Gurov
12:14 AM Todo #12454: Suppress kernel messages when loading ``dummynet`` and thermal sensor modules: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/421 Viktor Gurov
12:09 AM Todo #12454 (Resolved): Suppress kernel messages when loading ``dummynet`` and thermal sensor modules: There is a console spam on boot after loading dummynet.ko:
https://github.com/pfsense/pfsense/blob/fd331bdcdee813f67... Viktor Gurov

10/13/2021

06:41 PM pfSense Docs Todo #12453 (Closed): Support for translation: Hi
Can you give translation support for pfSense docs? I take a look in Readthedocs project and a way to bring supp... Claudio Ferreira
05:10 PM Revision e0019dfd: Added registration page and repo cert handling logic for CE -> Plus upgrade: Steve Beaver
02:47 PM pfSense Packages Bug #12251: Wireguard 0.1.5 - ignores "KeepAlive" parameter if empty (instead of disabling): → luckman212 wrote in #note-3:
> Hmm, seems like 86400 is not a valid value after all. It got silently accepted but ... Adam Cooper
01:51 PM Bug #12075 (Resolved): Changes to an existing IPsec configuration are not applied on HA secondary after XMLRPC sync: Tested on 22.01.a.20211010.0500 with configuration that I originally experienced the issue in. It works correctly now. Marcos M
01:45 PM Feature #12169 (Resolved): IPsec keep alive option to initiate phase 2 without using ICMP: Tested on 22.01.a.20211010.0500. Still works well. Marcos M
01:34 PM pfSense Packages Bug #12258: Copy key buttons only work in HTTPS mode: Created PR 150 to resolve this.
Tested on local dev instance with HTTP only access and it fallsback, does a consol... Adam Cooper
10:56 AM Bug #12452 (Resolved): Port forward rules are not created for special networks (pppoe, openvpn): https://forum.netgate.com/topic/167150/dns-redirect-on-pppoe-clients-failing:
"I have a pfSense server running suces... Viktor Gurov
10:53 AM Bug #12361 (Resolved): NAT rule overlap detection does not check special networks: Tested on 22.01.a.20211010.0500. Looks good. Marcos M
10:06 AM Bug #12451 (New): deleteVIP() does not check RFC2136 Update Source: It is possible to delete the Virtual IP that is used by RFC 2136 Dynamic DNS client in the 'Update Source' field
Viktor Gurov
09:17 AM pfSense Docs Todo #12428 (Closed): Feedback on Services — DNS Resolver — Host Overrides: + Viktor Gurov
09:08 AM pfSense Docs Correction #12450 (Closed): Typo in the Phase 2 proposal (Child SA) section.: Here is the link:
https://docs.netgate.com/pfsense/en/latest/vpn/ipsec/configure.html#phase-2-proposal-child-sa
... Danilo Zrenjanin
09:06 AM pfSense Packages Bug #12443: DNSBL Category ```Enable All``` button not working: fix:
https://github.com/pfsense/FreeBSD-ports/pull/1113 Viktor Gurov
05:46 AM Revision fd331bdc: Dynamic DNS proxy option. Fixes #12342: Viktor Gurov
05:13 AM Revision b9fbc36a: Slack Notifications. Feature #12291: Viktor Gurov
05:10 AM Revision a3e79766: NAT 1:1 pseudo-interface input validation fix. Issue #12408: Viktor Gurov
04:47 AM Todo #12449: Update "DNS Server Override" and "DNS Query Forwarding" help text: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/420 Viktor Gurov
04:36 AM Todo #12449 (Resolved): Update "DNS Server Override" and "DNS Query Forwarding" help text: after implementing the 'Pull DNS' option for OpenVPN client
(Allow the firewall to use DNS servers provided to an Op... Viktor Gurov
03:36 AM Bug #12448: Set OpenVPN Gateway Creation value to "Both" by default for new instances: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/419 Viktor Gurov
03:32 AM Bug #12448 (Resolved): Set OpenVPN Gateway Creation value to "Both" by default for new instances: The ```Create Gateway``` radio button is unchecked by default, but the text below it says it should:
"If you assign ... Viktor Gurov
03:11 AM pfSense Packages Feature #12447 (Rejected): Acme add dnsapi dns_cpanel.sh: Hello,
Please add the following feature to the acme package:
https://github.com/acmesh-official/acme.sh/blob/mast... Akos Tomaschik
01:35 AM Bug #12350: Incorrect label for IPsec DH group 32: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/418 Viktor Gurov
01:23 AM Regression #11512: DHCP Leases page and ARP table page fail to load if DNS is not available: Ronald Schellberg wrote in #note-8:
> Noticed when executing a ndp diagnostic query, that _getHostName() is now decl... Viktor Gurov
12:55 AM Feature #12342 (Feedback): Dynamic DNS client proxy support: Applied in changeset commit:fd331bdcdee813f67ee111c43029d360febb79b1. Viktor Gurov
12:40 AM pfSense Docs Todo #12418 (Closed): AutoConfigBackup Menu Structure Documentation: Viktor Gurov
12:40 AM Bug #12446 (Duplicate): IPsec dashboard widget description: duplicate of #11910 Viktor Gurov
12:37 AM Feature #12291 (Feedback): Support for Slack notifications: Merged Viktor Gurov
12:36 AM Bug #12408 (Feedback): Input validation prevents creating 1:1 NAT rules on OpenVPN: Merged Viktor Gurov
12:10 AM Todo #12406 (Feedback): Remove unused functions: Merged Viktor Gurov
12:09 AM Bug #12410 (Feedback): 1:1 NAT edit page lists incorrect entries in the Destination field: Merged Viktor Gurov
12:08 AM Todo #12430 (Feedback): Add IPsec phase 2 BINAT subnet size input validation: Merged Viktor Gurov
12:06 AM Feature #12416 (Feedback): Support OpenVPN ``client-kill`` to terminate remote clients instead of clearing their session: Merged Viktor Gurov

10/12/2021

08:07 PM Bug #11481 (Closed): NAT Reflection does not work when "NAT Reflection mode for port forwards" is set to "pure nat": Closing as it's not an issue on 22.01. Marcos M
01:55 PM Bug #11481: NAT Reflection does not work when "NAT Reflection mode for port forwards" is set to "pure nat": This looks to be fixed in 2.6/22.01 without this PR.
Outbound NAT rules are added as expected when NAT reflection i... Steve Wheeler

10/11/2021

12:39 PM pfSense Packages Bug #12444: ntopng throws errors when viewing single host: https://redmine.pfsense.org/issues/11530 - same/same? Jordan G
12:00 PM Bug #12446 (Duplicate): IPsec dashboard widget description: Hello,
looks like description of the tunnel is wrong on the IPsec dashboard.
Consider the following:
IPsec Phase... Gabriele Villa
08:21 AM pfSense Packages Bug #12126: freeradius3 0.15.7_31: Ok thanks for the info.
Any chance to have freeradius3 package update for 2.5.2 release? Alexis Pellicier
08:14 AM pfSense Packages Bug #12126: freeradius3 0.15.7_31: This looks to be a bug in Freeradius 3.0.22. See the 3.0.23 release notes:
https://github.com/FreeRADIUS/freeradius-... Steve Wheeler
05:17 AM pfSense Packages Feature #11310 (Resolved): Adding a widget to apcupsd plug-in: Renato Botelho

10/10/2021

07:11 PM pfSense Docs Todo #12445 (Rejected): Feedback on pfSense Configuration Recipes: *Page:* https://docs.netgate.com/pfsense/en/latest/recipes/index.html
*Feedback:*
Your ebook won't open with ei... Jerry Lumpkins
11:16 AM Bug #12361 (Feedback): NAT rule overlap detection does not check special networks: Marcos M
09:53 AM Bug #12366 (Resolved): Rotation settings for individual log files do not take effect after saving: Marcos M
09:42 AM Regression #11512: DHCP Leases page and ARP table page fail to load if DNS is not available: Noticed when executing a ndp diagnostic query, that _getHostName() is now declared in both diag_ndp.php and system.in... Ronald Schellberg

10/09/2021

09:08 PM pfSense Packages Bug #12444 (Closed): ntopng throws errors when viewing single host: Users have reports that when navigating to Hosts>Hosts and clicking to view a single host within the ntopNG settings ... Max Leighton
07:27 PM pfSense Packages Bug #11886 (Resolved): WireGuard: PHP error in vpn_wg_peers_edit.php: No longer able to reproduce this in 22.01 of pfSense Plus. Closing as Resolved. Kris Phillips
07:19 PM pfSense Packages Bug #12101 (Assigned): ArpWatch Suppression Mac for "flip-flop" not suppressing: Moving status back to Assigned as this hasn't been confirmed as fixed in updated package. Kris Phillips
07:11 PM Bug #12356: Validation when deleting a VIP does not check if the VIP is used by IPsec phase 1 entries: Can confirm this hasn't been merged into the Oct 9th build of pfSense Plus 22.01. We need to patch this in pfSense P... Kris Phillips
01:09 PM Bug #12356: Validation when deleting a VIP does not check if the VIP is used by IPsec phase 1 entries: Yes, I tested again in the latest build of 2.6 and it works as expected.
2.6.0-DEVELOPMENT (amd64)
built on Sat ... Max Leighton
12:08 PM Bug #12356: Validation when deleting a VIP does not check if the VIP is used by IPsec phase 1 entries: Max Leighton wrote in #note-4:
> I tested this in:
>
> 22.01-DEVELOPMENT (amd64)
> built on Sat Oct 09 05:27:30... Viktor Gurov
11:42 AM Bug #12356: Validation when deleting a VIP does not check if the VIP is used by IPsec phase 1 entries: I tested this in:
22.01-DEVELOPMENT (amd64)
built on Sat Oct 09 05:27:30 UTC 2021
FreeBSD 12.2-STABLE
And I c... Max Leighton
07:04 PM Bug #10304: ``radvd`` only responds to the first Router Solicitation received after each multicast Router Advertisement: FWIW, this seems to have resolved at some point on the 2.6 nightlies Kev Kitchens
07:02 PM Bug #12366: Rotation settings for individual log files do not take effect after saving: Tested this in the latest build of pfSense Plus 22.01 and it seems to properly rotate logging. Looks good. Kris Phillips
06:24 PM pfSense Docs Todo #12418: AutoConfigBackup Menu Structure Documentation: Jim,
Looks good. This can be closed out. Kris Phillips
04:47 PM Feature #12416: Support OpenVPN ``client-kill`` to terminate remote clients instead of clearing their session: They were able to test that patch and confirmed it was working as expected. Max Leighton
02:58 AM Feature #12416: Support OpenVPN ``client-kill`` to terminate remote clients instead of clearing their session: Kris Phillips wrote in #note-3:
> Customer in internal ticket 96721 tested this. Their results seem to be that this... Viktor Gurov
04:34 PM pfSense Packages Bug #12399: WireGuard v0.1.5 - Tunnel Will Never Handshake Again After WAN Reset: The problem still persist on wireguard 0.1.5_1.
even after changing the keys and ports nothing seems to help.
wish ... Samuel Hanna
02:04 PM Bug #12075: Changes to an existing IPsec configuration are not applied on HA secondary after XMLRPC sync: This seems to work for me. When I make changes to an existing tunnel's encryption settings, interface, local ID, etc,... Max Leighton
01:41 PM pfSense Packages Bug #4615: /var/logs/c-icap/server.log & access.log growing without being rotated: Hi,
so I took a look: /var/log/c-icap/access.log - 272MB
the mentioned bugfix was meant for squid, I think?
... Stephan Berger
12:05 PM Feature #9633: PPPoE/L2TP Server Status Page: Any news ?
Evgeny Korostelev
11:39 AM Regression #12442: Unexpected error message after trying to delete a CARP VIP: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/416 Viktor Gurov
06:22 AM Regression #12442 (Resolved): Unexpected error message after trying to delete a CARP VIP: There is an unexpected error message after trying to delete a CARP VIP which is used as a parent interface for VIP Al... Danilo Zrenjanin
11:24 AM Regression #12288: GRE and GIF tunnel inside addresses are missing at the OS level after applying changes on assigned interfaces: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/415 Viktor Gurov
11:04 AM pfSense Packages Bug #12443 (Resolved): DNSBL Category ```Enable All``` button not working: https://forum.netgate.com/topic/167094/dnsbl-catagory-bug:
"I dunno if i'm doing something wrong but under Blacklist... Viktor Gurov
10:37 AM Bug #11430: PHP console spam after Assigning Interfaces: @mute_kernel_msg()@/@unmute_kernel_msg()@ can be used to avoid these messages Viktor Gurov
09:58 AM pfSense Packages Bug #12153 (Resolved): Incorrect Outgoing Network Interface on clean install: Viktor Gurov
07:52 AM pfSense Packages Bug #12153: Incorrect Outgoing Network Interface on clean install: on clean install of 0.4.45_5 the default outgoing network interface shows as "Default (auto)" upon first visit to Ser... Jordan G
09:58 AM Bug #12362 (Resolved): Validation when deleting a VIP does not prevent deleting a CARP VIP used as a parent for an IP Aliases VIP: Viktor Gurov
06:24 AM Bug #12362: Validation when deleting a VIP does not prevent deleting a CARP VIP used as a parent for an IP Aliases VIP: Tested on the:... Danilo Zrenjanin
09:43 AM Revision 1004053d: OpenVPN Generated RADIUS ACL Ruleset for status_output. Implements #12316: Viktor Gurov
08:16 AM Revision 61eb637d: Modal window to see RADIUS ACL generated rules on the status_openvpn.php page. Implements #12321: Viktor Gurov
07:37 AM Revision 253b9b62: IPsec PH2 BINAT subnet size input validation. Todo #12430: Viktor Gurov
07:35 AM Revision 59724429: Do not check subnet overlapping on 6RD interfaces. Fixes #12371: Viktor Gurov
07:35 AM pfSense Packages Feature #11310: Adding a widget to apcupsd plug-in: Dashboard widget for APCUPSD is available after installing and configuring package. Status, line voltage, load, batte... Jordan G
05:50 AM pfSense Packages Todo #12354: Update haproxy-devel to mitigate CVE-2021-40346: Viktor Gurov wrote in #note-6:
> You can try to apply the attached patch
No need to add this if version of haproxy w... DRago_Angel [InV@DER]
05:48 AM pfSense Packages Todo #12354: Update haproxy-devel to mitigate CVE-2021-40346: DRago_Angel [InV@DER] wrote in #note-3:
> Hi, this is serious CVE, and still no updates? Even it possible to workaro... Viktor Gurov
05:45 AM Bug #12388 (Resolved): Captive Portal input validation for "After authentication Redirection URL" and "Blocked MAC address redirect URL" is swapped: Tested on the:... Danilo Zrenjanin
05:36 AM Bug #12371: Remove subnet overlap check on LAN interfaces when using 6rd: Daniel Porsch wrote:
> Hello,
>
> Can the subnet overlapping check on the lan interfaces be removed if using 6rd?... Viktor Gurov
02:45 AM Bug #12371 (Feedback): Remove subnet overlap check on LAN interfaces when using 6rd: Applied in changeset commit:5972442910d7c6a7657810e35ee3d9975061a925. Viktor Gurov
05:03 AM Bug #12419 (Resolved): Console boot output includes ``Configuring IPsec VTI interfaces`` when no VTI interfaces are configured: Tested on the:... Danilo Zrenjanin
05:01 AM Feature #12441: Send notification for halt, reboot, and reroot events: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/414 Viktor Gurov
04:55 AM Feature #12441 (Resolved): Send notification for halt, reboot, and reroot events: Currently @notify_all_remote()@ is only used on boot:
https://github.com/pfsense/pfsense/blob/1004053d3ae9c350e20249... Viktor Gurov
04:50 AM Feature #12316 (Feedback): Include firewall rules generated from OpenVPN RADIUS ACL entries in status output: Applied in changeset commit:1004053d3ae9c350e20249d65783b6c4a63b0e58. Viktor Gurov
03:25 AM pfSense Packages Feature #11972 (Resolved): Arpwatch - Add support for Telegram notifications: there is no
Alhusein Zawi wrote in #note-4:
> there is no option to add Telegram in Arpwatch page.
>
> Tested... Viktor Gurov
03:25 AM Feature #12321 (Feedback): Pop-up window to view firewall rules generated from RADIUS ACL entries on the OpenVPN status page: Applied in changeset commit:61eb637d00c921d2ae64f9edc66dfa9611fec35c. Viktor Gurov
03:24 AM Bug #12389 (Resolved): Help text for RAM disk settings does not mention Captive Portal data: Tested on the:... Danilo Zrenjanin
03:18 AM Bug #12435 (Resolved): "6RD Prefix" field does not have input validation: Tested on the:... Danilo Zrenjanin
02:59 AM Bug #12439 (Resolved): "Default preferred lifetime" field for IPv6 RA does not have input validation: Tested on the:... Danilo Zrenjanin
02:17 AM Bug #12440: Zero-value prefix IPv6 addresses are mishandled: Steve Wheeler wrote:
> IPv6 addresses of that format appear to be deprecated though pf itself appears to be able to ... Viktor Gurov

10/08/2021

07:30 PM Feature #12416: Support OpenVPN ``client-kill`` to terminate remote clients instead of clearing their session: Customer in internal ticket 96721 tested this. Their results seem to be that this patch breaks the OpenVPN client ki... Kris Phillips
05:44 PM Bug #12440 (Resolved): Zero-value prefix IPv6 addresses are mishandled: Zero-value prefix IPv6 addresses on the type ::/96 are mishandled when used in pfSense firewall or NAT rules.
For ... Steve Wheeler
04:56 PM Revision 9a18668d: Display default Reflection Timeout value. Feature #12318: Viktor Gurov
03:51 PM Revision 44a4215f: 1:1 NAT destination entries description fix. Issue #12410: Viktor Gurov
03:50 PM Revision e33311fe: DNS check optimization. Fixes #11512: Viktor Gurov
03:49 PM Revision 1ab2ec0a: IPv6 Port Forwarding Proxy+NAT input validation. Fixes #12319: Viktor Gurov
03:48 PM Revision ff90368d: fix #11734 NAT overlap validation does not check special networks: Marcos M
03:44 PM Revision 42259176: deleteVIP() IPsec PH1 input validation. Fixes #12356: Viktor Gurov
03:42 PM Revision 3e968849: Correct input validation on deleting a CARP VIP which is referenced by an IP Alias. Fixes #12362: Viktor Gurov
03:36 PM Revision b5332117: Improve XMLRPC Sync for dhcpd. Fixes #10955: Marcos M
03:36 PM Revision 83afa41a: Reload syslogd on log Rotation Size / Retention Count change. Fixes #12366: Viktor Gurov
03:35 PM Revision 08ef78ac: Allow to halt OpenVPN client on status page. Issue #12416: Viktor Gurov
03:34 PM Revision ed1ff340: Do not show Configuring IPsec VTI interfaces message at boot if no VTIs are configured. Fixes #12419.: Viktor Gurov
03:34 PM Revision 14e080ab: Swap Captive Portal Redirection URL and Blocked MAC redirect URL input validation messages. Fixes #12388: Viktor Gurov
03:33 PM Revision d9793efc: Update help text for RAM disk settings. Fixes #12389: Viktor Gurov
03:30 PM Revision 79b8b049: Remove unused function from pfsense-utils.inc. Todo #12406: Viktor Gurov
03:26 PM Revision b8cfee9d: 6RD Prefix input validation. Fixes #12435: Viktor Gurov
12:22 PM Revision 7cf69c98: Default preferred lifetime input validation. Fixes #12439: Viktor Gurov
12:09 PM pfSense Docs Todo #12418 (Feedback): AutoConfigBackup Menu Structure Documentation: Fixed (plus a few other changes):
https://gitlab.netgate.com/docs/pfSense-docs/-/commit/160898325eff3f21fa77b9fc67... Jim Pingle
10:59 AM pfSense Docs Todo #12418 (In Progress): AutoConfigBackup Menu Structure Documentation: Jim Pingle
11:11 AM pfSense Docs Todo #11812 (Feedback): Feedback on pfSense Configuration Recipes — Configuring IPv6 Through A Tunnel Broker Service: Updated the doc and added the reboot advice.
https://gitlab.netgate.com/docs/pfSense-docs/-/commit/465c63a97708665... Jim Pingle
11:00 AM Regression #11512 (Feedback): DHCP Leases page and ARP table page fail to load if DNS is not available: Applied in changeset commit:e33311fefd11f5b30c6822c298cf9d12adbb164e. Viktor Gurov
11:00 AM Bug #12319 (Feedback): NAT reflection does not work for IPv6 port forwarding rules when configured for NAT+Proxy mode: Applied in changeset commit:1ab2ec0a269f03dd7e865d21787331a7a2cb6f3f. Viktor Gurov
10:50 AM Bug #12356 (Feedback): Validation when deleting a VIP does not check if the VIP is used by IPsec phase 1 entries: Applied in changeset commit:42259176d0c0a4ca49099ef5cdbcbfdacdd64589. Viktor Gurov
10:50 AM Bug #12362 (Feedback): Validation when deleting a VIP does not prevent deleting a CARP VIP used as a parent for an IP Aliases VIP: Applied in changeset commit:3e968849be516d138cad7f021ee2d8df11bea202. Viktor Gurov
10:50 AM Bug #10955 (Feedback): XMLRPC sync results in an error when a failover peer IP address is specified in DHCP server settings for an unconfigured interface: Applied in changeset commit:b5332117fd5b675d9d7f81b9c2895ab452f3d610. Marcos M
10:45 AM Bug #12366 (Feedback): Rotation settings for individual log files do not take effect after saving: Applied in changeset commit:83afa41acfafdfd90fb71d8cdd5542a826bef315. Viktor Gurov
10:35 AM Regression #12288: GRE and GIF tunnel inside addresses are missing at the OS level after applying changes on assigned interfaces: This also applies to GIF interfaces. Additionally, it doesn't happen on assignment but any time changes are applied. Jim Pingle
10:35 AM Bug #12419 (Feedback): Console boot output includes ``Configuring IPsec VTI interfaces`` when no VTI interfaces are configured: Applied in changeset commit:ed1ff34051aa52395e91c84b7e4d2beb0f2e9b91. Viktor Gurov
10:35 AM Bug #12388 (Feedback): Captive Portal input validation for "After authentication Redirection URL" and "Blocked MAC address redirect URL" is swapped: Applied in changeset commit:14e080ab41419b4006130432c1e128deaaffdee0. Viktor Gurov
10:35 AM Bug #12389 (Feedback): Help text for RAM disk settings does not mention Captive Portal data: Applied in changeset commit:d9793efc0cb9d13aa812141ab509d288455f1f62. Viktor Gurov
10:35 AM Bug #12435 (Feedback): "6RD Prefix" field does not have input validation: Applied in changeset commit:b8cfee9dbaec99fc20ed0d816bb3cbe79943b150. Viktor Gurov
07:41 AM Bug #12435 (Pull Request Review): "6RD Prefix" field does not have input validation: Jim Pingle
12:49 AM Bug #12435: "6RD Prefix" field does not have input validation: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/411 Viktor Gurov
12:42 AM Bug #12435 (Resolved): "6RD Prefix" field does not have input validation: ```6RD Prefix``` field on the interfaces.php page has no input validation and allows any value to be entered Viktor Gurov
10:35 AM Bug #12439 (Feedback): "Default preferred lifetime" field for IPv6 RA does not have input validation: Applied in changeset commit:7cf69c985d73a2a3a418832bf9e6314a05f8efbe. Viktor Gurov
07:42 AM Bug #12439 (Pull Request Review): "Default preferred lifetime" field for IPv6 RA does not have input validation: Jim Pingle
07:23 AM Bug #12439: "Default preferred lifetime" field for IPv6 RA does not have input validation: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/412 Viktor Gurov
07:13 AM Bug #12439 (Resolved): "Default preferred lifetime" field for IPv6 RA does not have input validation: The "Default preferred lifetime" field allows to enter any value, including non-numeric Viktor Gurov
07:40 AM Bug #12371 (Pull Request Review): Remove subnet overlap check on LAN interfaces when using 6rd: Jim Pingle
12:36 AM Bug #12371: Remove subnet overlap check on LAN interfaces when using 6rd: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/410 Viktor Gurov
07:36 AM Feature #9827 (Duplicate): Add default route indicator to gateways dashboard widget to indicate which interface is currently selected as default in a gateways group scenario: duplicate of #11057 Viktor Gurov
07:24 AM Bug #12437 (Rejected): Firewall logs block item from appearing in logs creates an alias such as EasyRuleBlockHostsOPT10. OPT10 was renamed to e.g. “wirelessly when interface was created there is no way to find original OPTX from gui: Given the free-form nature of interface descriptions that isn't viable, and they would also not update if an interfac... Jim Pingle
03:19 AM Bug #12437 (Rejected): Firewall logs block item from appearing in logs creates an alias such as EasyRuleBlockHostsOPT10. OPT10 was renamed to e.g. “wirelessly when interface was created there is no way to find original OPTX from gui: Once interfaces have been renamed there does not seem to be an easy way to identify which OPTX interface it used to b... And Ritchie
07:21 AM Bug #12436 (Not a Bug): Pppoe server config gui does not allow setting of chap authentication, and sets the network start address for allocation to 0: An IP address ending in @.0@ is only invalid when used as a part of an actual subnet. In point-to-point interfaces li... Jim Pingle
03:55 AM Bug #12436: Pppoe server config gui does not allow setting of chap authentication, and sets the network start address for allocation to 0: Hi Victor,
This behaviour causes assigned client ip address to be 0 thus invalid.
E.g. 192.168.1.0 is not a valid ... And Ritchie
03:43 AM Bug #12436: Pppoe server config gui does not allow setting of chap authentication, and sets the network start address for allocation to 0: And Ritchie wrote:
> It is not possible to enable chap authentication via the gui. The service config file is genera... Viktor Gurov
03:08 AM Bug #12436 (New): Pppoe server config gui does not allow setting of chap authentication, and sets the network start address for allocation to 0: It is not possible to enable chap authentication via the gui. The service config file is generated with pap authentic... And Ritchie
07:13 AM Bug #12159 (Resolved): "Default preferred lifetime" router advertisement validation check uses incorrect variable: The original issue from the PR is resolved in 21.09.r.20210923.2242
but the "Default preferred lifetime" field all... Viktor Gurov
06:47 AM Regression #11938 (Resolved): DNS Resolver does not add PTR record for OpenVPN clients: Tested on the:... Danilo Zrenjanin
05:27 AM Regression #12233 (Resolved): VIP network addresses are not expanded on Port Forward rules: Tested on the:... Danilo Zrenjanin
03:40 AM Feature #12438 (Resolved): Option to select PPPoE Server authentication protocol: It is not possible to enable chap authentication via the gui. The service config file is generated with pap authentic... Viktor Gurov

10/07/2021

11:28 PM Feature #12094 (Resolved): Suppress kernel messages for ``lo0`` configuration during boot: there is no kernel messages for ``lo0``
Starting Secure Shell Services...done.
Setting up interfaces microco... Alhusein Zawi
06:17 PM Bug #12434 (Resolved): Multiple cURL Vulnerabilities: Vulnerabilities outlined here:
https://www.tenable.com/plugins/nessus/153812
CVEs Here:
https://cve.mitre.org/c... Kris Phillips
04:38 PM Feature #12433 (Resolved): Icon for traffic direction on floating rules tab: It’d be helpful to see the configured direction(s) for rules on the floating rule page without having to click on the... James Chambers
03:13 PM pfSense Docs Todo #11743 (Feedback): Feedback on Virtual Private Networks — VPN Scaling: Done:
https://gitlab.netgate.com/docs/pfSense-docs/-/commit/54c876ea107be13ffe3fcdfad3e8e27990c1f86c Jim Pingle
02:56 PM pfSense Docs Todo #11743 (In Progress): Feedback on Virtual Private Networks — VPN Scaling: https://docs.netgate.com/pfsense/en/latest/hardware/cryptographic-accelerators.html covers it in much more detail but... Jim Pingle
12:01 PM Bug #11481 (Pull Request Review): NAT Reflection does not work when "NAT Reflection mode for port forwards" is set to "pure nat": Jim Pingle
11:44 AM Bug #11481: NAT Reflection does not work when "NAT Reflection mode for port forwards" is set to "pure nat": https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/409 Viktor Gurov
10:34 AM pfSense Docs New Content #12432 (Feedback): Add documentation for DNS Resolver Status page: Added:
https://gitlab.netgate.com/docs/pfSense-docs/-/commit/b82cfce672ea111e49044889d08af69f47f52f86
https://git... Jim Pingle
10:10 AM pfSense Docs New Content #12432 (Closed): Add documentation for DNS Resolver Status page: The DNS Resolver status page ( *Status > DNS Resolver* , @status_unbound.php@) is not currently documented or referen... Jim Pingle
09:42 AM pfSense Packages Bug #12423: Dashboard shows "SQLite database missing, Force Reload DNSBL to recover!": Viktor, thanks for improving the error message. Two comments:
1. putting the full path might be even better. I assu... Sean McBride
12:41 AM pfSense Packages Bug #12423: Dashboard shows "SQLite database missing, Force Reload DNSBL to recover!": fix:
https://github.com/pfsense/FreeBSD-ports/pull/1112 Viktor Gurov
08:18 AM Regression #12382: Certificate Depth checking creates OpenVPN micro-outages every time a user authenticates after 2.5.2 upgrade: So this bug is affecting us too. We need to route all our VPN clients traffic through the VPN and this bug is causing... Joao Assad
08:16 AM pfSense Docs Todo #12428 (Feedback): Feedback on Services — DNS Resolver — Host Overrides: Fixed:
https://gitlab.netgate.com/docs/pfSense-docs/-/commit/86556c7171b5d22b3e2ce34cca2d9d98d98072b2
Jim Pingle
12:28 AM pfSense Docs Todo #12428 (Closed): Feedback on Services — DNS Resolver — Host Overrides: *Page:* https://docs.netgate.com/pfsense/en/latest/services/dns/resolver-host-overrides.html
*Feedback:*
"IP Ad... Viktor Gurov
08:16 AM pfSense Docs Todo #12429 (Feedback): Feedback on Bridging: Fixed:
https://gitlab.netgate.com/docs/pfSense-docs/-/commit/1c0e9ed82c951f12336c502ed9be7eabde30cab9
Jim Pingle
03:10 AM pfSense Docs Todo #12429 (Closed): Feedback on Bridging: *Page:* https://docs.netgate.com/pfsense/en/latest/bridges/index.html
*Feedback:*... Viktor Gurov
07:40 AM Todo #12431: GUI pages should use ``POST`` for AJAX calls, not ``GET``: True. May as well fix them all. Updated subject/category. Jim Pingle
07:36 AM Todo #12431: GUI pages should use ``POST`` for AJAX calls, not ``GET``: also:
pkg.php
services_captiveportal_vouchers.php
vendorstatus_graph.php
vpn_ipsec_phase1.php
status_graph.php... Viktor Gurov
07:24 AM Todo #12431 (Resolved): GUI pages should use ``POST`` for AJAX calls, not ``GET``: The AJAX buttons on the OpenVPN status page submit values using @GET@ when they should use @POST@. The variables used... Jim Pingle
07:37 AM Todo #12430 (Pull Request Review): Add IPsec phase 2 BINAT subnet size input validation: Jim Pingle
06:06 AM Todo #12430: Add IPsec phase 2 BINAT subnet size input validation: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/408 Viktor Gurov
04:36 AM Todo #12430 (Resolved): Add IPsec phase 2 BINAT subnet size input validation: from https://docs.netgate.com/pfsense/en/latest/vpn/ipsec/phase-2-nat.html#nat-types:
"NAT+IPsec cannot be configure... Viktor Gurov
07:29 AM pfSense Packages Todo #12354 (Pull Request Review): Update haproxy-devel to mitigate CVE-2021-40346: Jim Pingle
02:40 AM pfSense Packages Todo #12354: Update haproxy-devel to mitigate CVE-2021-40346: https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/136 Viktor Gurov
07:18 AM pfSense Packages Bug #12420 (Pull Request Review): rc file is not deleted: Jim Pingle
01:41 AM pfSense Packages Bug #12420: rc file is not deleted: fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/135 Viktor Gurov
04:19 AM pfSense Packages Bug #1620: Can't use transparent proxy when using bridge.: transparent mode on bridge works fine on pfSense 2.6.0.a.20211006.2213 with net.link.bridge.pfil_bridge=1 and net.lin... Viktor Gurov
12:25 AM pfSense Docs Correction #11121 (Resolved): Feedback on Services — DNS Resolver: OpenVPN Clients info added Viktor Gurov

10/06/2021

03:38 PM pfSense Docs Todo #12261 (Closed): Feedback on pfSense Configuration Recipes — WireGuard VPN Client Configuration Example: Jim Pingle
03:38 PM pfSense Docs New Content #12417 (Closed): Add section to IPsec troubleshooting for VTI tunnels not reconnecting: Jim Pingle
03:36 PM pfSense Docs Correction #11176 (Feedback): Feedback on Services — DNS Resolver: DNS Resolver docs have been updated and now include the requested content.
https://gitlab.netgate.com/docs/pfSense... Jim Pingle
03:36 PM pfSense Docs Todo #11417 (Feedback): Feedback on Services — DNS Resolver — DNS Resolver Advanced Options: DNS Resolver docs have been updated and now include the requested content.
https://gitlab.netgate.com/docs/pfSense... Jim Pingle
03:35 PM pfSense Docs Correction #11121 (Feedback): Feedback on Services — DNS Resolver: DNS Resolver docs have been updated and now include the requested content.
https://gitlab.netgate.com/docs/pfSense... Jim Pingle
03:35 PM pfSense Docs Correction #9373 (Feedback): Feedback on Services — DNS — Configuring the DNS Resolver: DNS Resolver docs have been updated and now include the requested content.
https://gitlab.netgate.com/docs/pfSense... Jim Pingle
07:17 AM Bug #12426 (Rejected): Captive portal not working with 5 vlan interface in version 2.5: There is not enough information here to classify this as a bug, and this site is not for support or diagnostic discus... Jim Pingle
03:27 AM Bug #12426: Captive portal not working with 5 vlan interface in version 2.5: The same configuration on 2.4.5-RELEASE-p1 works without issue.
the issue on 2.5.x Mohamed Ahmed
03:14 AM Bug #12426 (Rejected): Captive portal not working with 5 vlan interface in version 2.5: I use captive portal with 4 vlan interface, it works flawlessly. The problem is that when I activate the captive port... Mohamed Ahmed
07:14 AM pfSense Packages Bug #12365 (Not a Bug): PFBlockerNG - Unbound fails to start 3.1.0: No worries, thanks for following up and letting us know. Those kinds of problems can be quite frustrating to track down. Jim Pingle
04:54 AM pfSense Packages Bug #12365: PFBlockerNG - Unbound fails to start 3.1.0: Seems this was down to a hard to find memory problem that gave random errors.
Apologies D B
07:02 AM pfSense Packages Todo #12427 (New): ha-proxy: action order in the GUI is not keeped in the resulting ha-proxy configuration: If there are (for example) 'Use Backend' and 'http-request redirect' actions are defined in the GUI in a specific ord... Thomas Eckardt

10/05/2021

12:23 PM pfSense Docs Correction #9394 (Feedback): Feedback on Services — DNS — Configuring the DNS Resolver: Additional updates:
1. Added a new section to the DNS Lookup page which describes how it selects servers to test.
... Jim Pingle
08:23 AM Regression #12069: Panic in ``pfctl`` with large numbers of states: So can we close it now? Mateusz Guzik
07:33 AM Feature #12425 (Rejected): Remove DHCP Leases automatically: That is not a typical requirement for DHCP as it will automatically recycle expired leases with the appropriate setti... Jim Pingle
05:25 AM Feature #12425 (Rejected): Remove DHCP Leases automatically: Hello,
We use Pfsense's DHCP server to assign IP addresses on a WIFI network used with lots of users and BYOD. We ... Nicolas Pissard

10/04/2021

03:33 PM pfSense Docs Correction #9394 (In Progress): Feedback on Services — DNS — Configuring the DNS Resolver: There are multiple items here that aren't directly related:
1. The DNS test page reports times for configured serv... Jim Pingle
01:53 PM pfSense Packages Bug #12424 (Pull Request Review): OpenVPN silent install uses incorrect parameters: Jim Pingle
01:37 PM pfSense Packages Bug #12424: OpenVPN silent install uses incorrect parameters: https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/133 Marcos M
01:07 PM pfSense Packages Bug #12424 (Resolved): OpenVPN silent install uses incorrect parameters: The @.exe@ and @.msi@ installers require different parameters for a silent install. Currently, the same parameter is ... Marcos M
07:20 AM Bug #12419 (Pull Request Review): Console boot output includes ``Configuring IPsec VTI interfaces`` when no VTI interfaces are configured: Jim Pingle

10/03/2021

08:47 PM Bug #11432: status_dhcp_leases.php doesn't load: This is likely a duplicate of https://redmine.pfsense.org/issues/11512. Marcos M
06:54 PM pfSense Packages Bug #12423 (Resolved): Dashboard shows "SQLite database missing, Force Reload DNSBL to recover!": See screenshot. The message tells to 'force reload' which I did, yet the error persists.
There's one post on the ... Sean McBride
03:53 PM pfSense Packages Feature #10739: Update HAproxy-devel package to 2.2 and HAproxy to 2.0: Hi, here many points are still undone. DRago_Angel [InV@DER]
03:34 PM pfSense Packages Todo #12354: Update haproxy-devel to mitigate CVE-2021-40346: Hi, this is serious CVE, and still no updates? Even it possible to workaround issue by adding own check, I sure most ... DRago_Angel [InV@DER]

10/02/2021

05:58 PM pfSense Packages Bug #12188: client export breaks multi remote configurations: Based on reviewing the bug report with OpenVPN there doesn't appear to be anything that needs to be done here. They'... Kris Phillips
05:52 PM pfSense Packages Bug #12365 (Feedback): PFBlockerNG - Unbound fails to start 3.1.0: Completed the following tests:
1. Installed pfBlockerNG-dev
2. Ran a force update and reload
3. Monitored loggin... Kris Phillips
05:41 PM pfSense Packages Bug #12030: Startup Errors for Avahi Package: Jim Pingle wrote in #note-11:
> It's a package, not a part of the base system, so updates are not tied to any releas... Kris Phillips
03:37 PM pfSense Packages Bug #11768 (Resolved): FRR OSPF - Comment field within the ospf interfaces gets longer and longer: Tested with FRR 1.1.0_15
Looks to be fixed. The description only matches the interface that it is actually set on... Max Leighton
01:30 PM Bug #12168 (Resolved): 1:1 NAT rule with internal IP address of "Any" results in an invalid firewall rule: Tested on the:... Danilo Zrenjanin
11:45 AM Regression #12398 (Resolved): "Expiration and Replacement" section is shown twice when editing a mobile IPsec phase 2 entry: I checked and saw it in 21.09. The fix works. The Expiration and Replacement section only appears once in 22.01:
2... Max Leighton
08:44 AM Bug #12421 (New): IPV6 limiter bug: I attempted to set a IPV6 limiter along with an IPV4 limiter. I had previously had a QOS setup which was deleted, and... Juan Abonia
08:27 AM pfSense Packages Bug #11465: Input validation does not prevent multiple conflicting WireGuard peers on a single tunnel from attempting to act as default route: Submitted PR 19 (https://github.com/theonemcdonald/pfSense-pkg-WireGuard/pull/149).
Few queries on the PR regardin... Adam Cooper
01:07 AM pfSense Packages Bug #12420 (Resolved): rc file is not deleted: /usr/local/etc/rc.d/pimd.sh file is not deleted after disabling the service Viktor Gurov
12:38 AM Bug #12419: Console boot output includes ``Configuring IPsec VTI interfaces`` when no VTI interfaces are configured: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/407 Viktor Gurov
12:21 AM Bug #12419 (Resolved): Console boot output includes ``Configuring IPsec VTI interfaces`` when no VTI interfaces are configured: I am seeing VTI interface while I do not have any IPsec configuration:... Viktor Gurov
12:22 AM Bug #12002 (Resolved): Boot messages contain entries about configuring LAGG/VLAN/QinQ interfaces even when no entries of those types are configured: Alhusein Zawi wrote in #note-6:
> I am seeing VTI interface while I do not have any IPsec configuration in tested vm... Viktor Gurov

10/01/2021

11:32 PM Bug #12002: Boot messages contain entries about configuring LAGG/VLAN/QinQ interfaces even when no entries of those types are configured: I am seeing VTI interface while I do not have any IPsec configuration in tested vm
Configuring loopback interf... Alhusein Zawi
09:13 PM Bug #12039 (Resolved): Gateway alarm always triggers IPsec restart: /etc/rc.ipsec is created
/etc/rc.gateway_alarm:
/usr/local/sbin/pfSctl \
-c "service reload dyndns ${GW... Alhusein Zawi
07:14 PM pfSense Docs Todo #12418 (Closed): AutoConfigBackup Menu Structure Documentation: Documentation here states to use Diagnostics --> AutoConfigBackup to reach the service's configuration. It's actuall... Kris Phillips
11:53 AM pfSense Packages Bug #12058: pfBlockerNG / "Cannot allocate memory" from Geo blocking IP list: Indeed increasing that has eliminated the "Cannot allocate memory" messages.
Could the error message be improved t... Sean McBride
10:45 AM pfSense Docs New Content #12417 (Feedback): Add section to IPsec troubleshooting for VTI tunnels not reconnecting: Done:
https://gitlab.netgate.com/docs/pfSense-docs/-/commit/0a4089d8298e230db7ef3c9ab146bca409521a7e
http://sta... Jim Pingle
10:37 AM pfSense Docs New Content #12417 (Closed): Add section to IPsec troubleshooting for VTI tunnels not reconnecting: Add section to IPsec troubleshooting for VTI tunnels not reconnecting. The new periodic check keep alive option in P2... Jim Pingle
08:05 AM Feature #12416 (Pull Request Review): Support OpenVPN ``client-kill`` to terminate remote clients instead of clearing their session: Jim Pingle
03:44 AM Feature #12416: Support OpenVPN ``client-kill`` to terminate remote clients instead of clearing their session: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/406 Viktor Gurov
01:25 AM Feature #12416 (Resolved): Support OpenVPN ``client-kill`` to terminate remote clients instead of clearing their session: Killing a user remote access vpn session from the firewall through the pfsense GUI only works temporarily.
Less the... Viktor Gurov
06:05 AM Feature #4881: Allow NPt to use dynamic IPv6 networks: Hi,
So the CARP fixing is broken as of yet: the script founds the old CARP address as interface address and fixes ... Csoban Kesmarki
04:42 AM pfSense Packages Bug #12033: maxmindb and _sqlite3 modules not found: How to resolve:... Viktor Gurov
04:26 AM pfSense Packages Bug #12033: maxmindb and _sqlite3 modules not found: see the same error on SG-3100 with pfSense-21.09.r.20210923.2242 and pfBlockerNG-3.1.0:... Viktor Gurov
12:23 AM pfSense Packages Bug #12414: DNSBL SafeSearch page displays input validation error if DoH / DoT blocking is not enabled: fix:
https://github.com/pfsense/FreeBSD-ports/pull/1111 Viktor Gurov
12:12 AM pfSense Packages Bug #12414 (Resolved): DNSBL SafeSearch page displays input validation error if DoH / DoT blocking is not enabled: You need to enable DoH/DoT Blocking and select entries in the DoH/DoT Blocking List, otherwise you'll see:... Viktor Gurov
12:16 AM pfSense Docs Todo #12415 (Rejected): Feedback on pfSense Configuration Recipes: *Page:* https://docs.netgate.com/pfsense/en/latest/recipes/index.html
*Feedback:*
https://forum.netgate.com/top... Viktor Gurov

09/30/2021

03:16 PM pfSense Docs Todo #12412 (Closed): Feedback on Virtual Private Networks — IPsec — Routed IPsec (VTI): Fixed (plus a bunch more that were out of date):
https://gitlab.netgate.com/docs/pfSense-docs/-/commit/d7496cc5e09... Jim Pingle
11:41 AM pfSense Docs Todo #12412 (Closed): Feedback on Virtual Private Networks — IPsec — Routed IPsec (VTI): *Page:* https://docs.netgate.com/pfsense/en/latest/vpn/ipsec/routed-vti.html
*Feedback:*
"The Hangouts Archive ... Viktor Gurov
03:16 PM pfSense Docs Todo #12413 (Closed): Feedback on Services — SNMP: Fixed (plus a bunch more that were out of date):
https://gitlab.netgate.com/docs/pfSense-docs/-/commit/d7496cc5e09... Jim Pingle
11:43 AM pfSense Docs Todo #12413 (Closed): Feedback on Services — SNMP: *Page:* https://docs.netgate.com/pfsense/en/latest/services/snmp.html
*Feedback:*
"The Hangouts Archive contain... Viktor Gurov
07:30 AM Regression #12398: "Expiration and Replacement" section is shown twice when editing a mobile IPsec phase 2 entry: It won't show on 2.5.2, only on recent builds of 2.6.0 (after I introduced the bug and before I fixed it) and on curr... Jim Pingle
03:21 AM Regression #12398: "Expiration and Replacement" section is shown twice when editing a mobile IPsec phase 2 entry: I tested on the 2.5.2-RELEASE (amd64). With all defaults settings under Phase 2, I couldn't replicate it.
Is there... Danilo Zrenjanin
04:37 AM pfSense Plus Bug #12341 (Resolved): Gateway Monitoring Percentage Not Decreasing After Gateway Packet Loss Event: I tested on XG-7100 latest RC.
I can confirm it works as expected. I am resolving this ticket. Danilo Zrenjanin
04:03 AM Regression #12377 (Resolved): NAT Rule Reorder: I couldn't replicate it on the latest pfSense plus RC nor the latest CE version. It may be closed. Danilo Zrenjanin

09/29/2021

10:39 AM pfSense Docs Todo #12411 (Resolved): Feedback on High Availability — pfSense XML-RPC Config Sync Overview: *Page:* https://docs.netgate.com/pfsense/en/latest/highavailability/xmlrpc-sync.html
*Feedback:*
A description ... Viktor Gurov
09:19 AM Todo #12235 (Resolved): ``pfSense-upgrade`` should reinstall all packages on new version upgrades: Fixed now Renato Botelho
07:30 AM Todo #12406 (Pull Request Review): Remove unused functions: Jim Pingle
03:06 AM Todo #12406: Remove unused functions: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/405 Viktor Gurov
07:22 AM Bug #12410 (Pull Request Review): 1:1 NAT edit page lists incorrect entries in the Destination field: Jim Pingle
02:56 AM Bug #12410: 1:1 NAT edit page lists incorrect entries in the Destination field: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/404 Viktor Gurov
01:36 AM Bug #12410 (Resolved): 1:1 NAT edit page lists incorrect entries in the Destination field: Destination type doesn't have "net" suffix:... Viktor Gurov
07:19 AM Bug #12408 (Pull Request Review): Input validation prevents creating 1:1 NAT rules on OpenVPN: Jim Pingle
12:56 AM Bug #12408: Input validation prevents creating 1:1 NAT rules on OpenVPN: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/403 Viktor Gurov
12:02 AM pfSense Packages Feature #12297 (Resolved): Suricata: show actual GID:SID rule on click: Viktor Gurov

09/28/2021

10:13 AM Todo #12235 (Feedback): ``pfSense-upgrade`` should reinstall all packages on new version upgrades: Fixed by pfSense-upgrade 1.0_6 Renato Botelho
09:45 AM Todo #12235 (In Progress): ``pfSense-upgrade`` should reinstall all packages on new version upgrades: There were some reports of crash logs showing up after upgrade and also PHP complaining about libpfctl missing during... Renato Botelho
09:27 AM pfSense Docs Correction #12405 (Closed): Wireguard Docs Spelling Error: Merged & Deployed. Jim Pingle

09/27/2021

07:15 PM Feature #12267: OpenVPN option to limit concurrent connections per user: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/402 Marcos M
03:33 PM pfSense Docs Correction #12405 (Waiting on Merge): Wireguard Docs Spelling Error: MR: https://gitlab.netgate.com/docs/pfSense-docs/-/merge_requests/24 Christian McDonald
03:04 PM pfSense Docs Todo #12182 (Feedback): Update IPsec to match recent changes: Additional updates:
* https://gitlab.netgate.com/docs/pfSense-docs/-/commit/9f424c44b6c9f95f8728e3699db4f9b47fb6e699... Jim Pingle
02:30 PM pfSense Docs New Content #11862 (Closed): Document High Availability IPSec: I suspect mostly you were hitting bugs in IPsec that are fixed in 2.6.0/21.09. HA IPsec was covered already, at https... Jim Pingle
10:24 AM Bug #12409: Automatic-default-gateway-mode selects OpenVPN-Server interfaces: What is this mode made for? As long as there are only valid internet gateways it is safe to use. But as soon as there... Lars Möller
09:47 AM Bug #12409 (Not a Bug): Automatic-default-gateway-mode selects OpenVPN-Server interfaces: That's the nature of the default "automatic" mode -- when left to select it will select whatever gateway is the first... Jim Pingle
09:39 AM Bug #12409 (Not a Bug): Automatic-default-gateway-mode selects OpenVPN-Server interfaces: If the gateway selection is in automatic mode, the default gateway is switched from the monitored WAN gateway to an O... Lars Möller
08:57 AM Regression #11570: Gateway monitoring services is not always restarted on interface events, which may prevent a WAN from recovering back to an online state: We are having the same problem on SG-3100, XG-7100, SG-5100. It occours on 21.* up to 21.05.1. On 2.4.5 everything wa... Lars Möller
08:45 AM Bug #12408: Input validation prevents creating 1:1 NAT rules on OpenVPN: I worked around the issue temporarily by adding opt-interfaces to the array,
$vpn_and_ppp_ifs = array("l2tp", "p... Chriss E
07:30 AM Bug #12408: Input validation prevents creating 1:1 NAT rules on OpenVPN: The problem seems to be that the array value of 'openvpn' does not reflect the actual value sent by firewall_nat_1to1... Chriss E
04:33 AM Bug #12408: Input validation prevents creating 1:1 NAT rules on OpenVPN: Tested on Netgate pfSense Plus 21.05.1-RELEASE (amd64) Chriss E
04:31 AM Bug #12408 (Resolved): Input validation prevents creating 1:1 NAT rules on OpenVPN: Maybe related to https://redmine.pfsense.org/issues/11751 but for 1:1 NAT rules with OpenVPN interface selected
Wh... Chriss E
08:10 AM pfSense Packages Bug #12030: Startup Errors for Avahi Package: It's a package, not a part of the base system, so updates are not tied to any release.
It could be updated any tim... Jim Pingle
06:39 AM pfSense Packages Bug #12365: PFBlockerNG - Unbound fails to start 3.1.0: php-fpm 52285 /status_services.php: The command '/usr/local/sbin/unbound -c /var/unbound/unbound.conf' returned exi... D B

09/26/2021

05:44 PM Bug #12332: OpenVPN does not clear old Cisco-AVPair anchor rules in some cases: I've submitted a new merge request which solves this issue. The solution is dependent on #12407
https://gitlab.netg... Marcos M
05:42 PM Feature #12407: Use deferred client connections in OpenVPN: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/402 Marcos M
05:16 PM Feature #12407 (Resolved): Use deferred client connections in OpenVPN: New in OpenVPN 2.5 is the ability to use deferred client-connect. See @Deferred client-connect@:
https://github.com/... Marcos M

Also available in: Atom

Project

General

Profile

pfSense

Activity

Activity

10/25/2021

10/24/2021

10/23/2021

10/22/2021

10/21/2021

10/20/2021

10/19/2021

10/18/2021

10/17/2021

10/16/2021

10/15/2021

10/14/2021

10/13/2021

10/12/2021

10/11/2021

10/10/2021

10/09/2021

10/08/2021

10/07/2021

10/06/2021

10/05/2021

10/04/2021

10/03/2021

10/02/2021

10/01/2021

09/30/2021

09/29/2021

09/28/2021

09/27/2021

09/26/2021