Activity

30 days up to

User

Subprojects

Activity

From 12/15/2021 to 01/13/2022

01/13/2022

07:02 PM Revision 3c98c881: Using DEVEL URL: (cherry picked from commit a47a5edd25a11971659a53fbcaf69ab97a1d9a71) Renato Botelho
07:02 PM Revision a50dd4dc: Small fixes missed on last commit to devel repo: (cherry picked from commit 1903b56a2b000da37447f70ce4b79d57dd454c8b) Renato Botelho
07:01 PM Revision 3d4d08ab: Using DEVEL URL: (cherry picked from commit a47a5edd25a11971659a53fbcaf69ab97a1d9a71) Renato Botelho
07:00 PM Revision a47a5edd: Using DEVEL URL: Renato Botelho
06:59 PM Revision 1903b56a: Small fixes missed on last commit to devel repo: Renato Botelho
06:58 PM Revision ac8d840e: Small fixes missed on last commit to devel repo: Renato Botelho
06:48 PM Revision 5474d583: Fix repository config files: Add a new repo called next to point to 2.6.0-RC and reduce differences
between branches Renato Botelho
06:43 PM Revision 8f8b00ee: Rework pkg repositories: Keep 3 main files reflecting what users see today on 2.5.2 and add
2.6.0-RC as Next Release Candidate, setting it as ... Renato Botelho
06:43 PM Revision 68afc597: Improve OpenVPN Data Cipher handling. Fixes #12677: (cherry picked from commit 78ce96a9af3b2ab5159ef6623078bfc4b15f8a89) Jim Pingle
06:41 PM Revision c216e94b: Rework repository config: Leave all branches with the same repo definitions Renato Botelho
06:36 PM Revision 78ce96a9: Improve OpenVPN Data Cipher handling. Fixes #12677: Jim Pingle
02:58 PM Revision 4199a5d9: build: Fix pkg.txz.sig link: When pkg transitioned from .txz to .pkg extension we enabled an option
to keep a symlink of old extension around and ... Renato Botelho
02:33 PM Regression #12057: 21.09/2.6.0 - High CPU usage and slowness with ``pfctl -ss``: Tested in
2.6.0-RC (amd64)
built on Wed Jan 12 20:10:43 UTC 2022
FreeBSD 12.3-STABLE
no High CPU usage or slo... Christopher Cope
01:57 PM Revision 9a51687d: Fix typo in warning text.Issue #12680: Danilo-Z
12:50 PM Bug #12677 (Feedback): OpenVPN form validation issues: Applied in changeset commit:78ce96a9af3b2ab5159ef6623078bfc4b15f8a89. Jim Pingle
12:31 PM Feature #12518 (Feedback): Restore RRD and extra data from configuration backups when restoring during installation: Merged Viktor Gurov
08:23 AM Bug #12680 (Feedback): Typo in the warning text: Merged:
https://github.com/pfsense/pfsense/commit/9a51687d08bbb62e6a21fa9f0da4b8d79dcaa969 Viktor Gurov
07:55 AM Bug #12680 (Pull Request Review): Typo in the warning text: Viktor Gurov
08:12 AM pfSense Packages Todo #12354: Update haproxy-devel to mitigate CVE-2021-40346: Hi I want to ask is you implemented mentioned "Temporary workaround"?
> No need to add this if version of haproxy ... DRago_Angel [InV@DER]
08:02 AM pfSense Packages Bug #12670 (Feedback): ACME package writes credentials to system log: Merged:
https://github.com/pfsense/FreeBSD-ports/commit/deff5ad17b0809521d0c083ebbe619ebfd089d6f Viktor Gurov
07:20 AM pfSense Packages Bug #12670 (Pull Request Review): ACME package writes credentials to system log: Jim Pingle
06:23 AM pfSense Packages Bug #12670: ACME package writes credentials to system log: WebGUI debug option:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/169 Viktor Gurov
07:21 AM Feature #12682 (Duplicate): RADIUS authentication fallback for pfSense GUI: The other issue already covers "authentication servers" which would include both LDAP and RADIUS. No need for a secon... Jim Pingle
04:25 AM Feature #12682: RADIUS authentication fallback for pfSense GUI: same for LDAP - #10843 Viktor Gurov
05:13 AM Regression #12288: GRE and GIF tunnel inside addresses are missing at the OS level after applying changes on assigned interfaces: This is 2.6 only regression fix, related to #6507 changes Viktor Gurov
04:34 AM pfSense Packages Bug #12683: snort_get_vpns_list() does not include OpenVPN CSO: fix:
https://github.com/pfsense/FreeBSD-ports/pull/1135 Viktor Gurov
04:24 AM pfSense Packages Bug #12683 (Resolved): snort_get_vpns_list() does not include OpenVPN CSO: "Pass List -> Auto-Generated IP Addresses -> VPN Addresses" does not include OpenVPN Client Specific Override.
Danilo Zrenjanin
04:23 AM pfSense Packages Feature #11879: Add support for SSL.com ACME server: SSL.com and ZeroSSL.com support added to acme.sh - https://github.com/acmesh-official/acme.sh/releases/tag/3.0.0:
"Z... Viktor Gurov
04:20 AM pfSense Packages Bug #12623: acme.sh package | DNS-ISPConfig settings: Fix is merged to the upstream acme.sh repository Viktor Gurov
04:13 AM pfSense Packages Bug #12642 (Resolved): suricata_get_vpns_list() does not include OpenVPN CSO: Tested against:... Danilo Zrenjanin
02:40 AM Regression #12660: High CPU usage due to incorrect gateway on some policy routed states: MR (devel-12): https://gitlab.netgate.com/pfSense/FreeBSD-src/-/merge_requests/46
MR (RELENG_2_6_0): https://gitlab.... Kristof Provost

01/12/2022

10:29 PM pfSense Packages Feature #12658: Adding prometheus metrics to darkstat: It looks like a commit had been made to the main branch: https://cgit.freebsd.org/ports/commit/?id=038bcb21cbd11930ab... Karim Elatov
08:17 PM Feature #12682 (Duplicate): RADIUS authentication fallback for pfSense GUI: Feature request to allow specifying multiple RADIUS servers with a fallback database for authentication when logging ... Chris W
07:31 PM Revision 37f83ddb: Fix FREEBSD_BRANCH: Glen Barber
03:39 PM Regression #12660: High CPU usage due to incorrect gateway on some policy routed states: I booted a kernel with the patch and ran for over 5 hours without any problems. Looks like that took care of the prob... Jim Pingle
03:37 PM pfSense Docs Todo #12639 (Closed): Feedback on System Monitoring — System Logs: Jim Pingle
03:37 PM pfSense Docs Correction #12598 (Closed): Alias use with static routes: Jim Pingle
03:37 PM pfSense Docs Todo #12596 (Closed): OpenVPN Site to Site configuration examples should note to change the inactive value: Jim Pingle
03:29 PM Revision fd2740b3: Update master to 2.7.0: Glen Barber
03:25 PM Revision 3b283c27: Revert "Update master to 2.7.0": This reverts commit ac7ec30f39a3069d3192a73b78e5977fc834482e. Glen Barber
03:16 PM Revision ac7ec30f: Update master to 2.7.0: Glen Barber
02:51 PM pfSense Docs New Content #12681 (Closed): WireGuard Site-to-Multisite Recipe: Reviewed, merged & deployed Jim Pingle
01:27 PM pfSense Docs New Content #12681 (Pull Request Review): WireGuard Site-to-Multisite Recipe: MR: https://gitlab.netgate.com/docs/pfSense-docs/-/merge_requests/29 Christian McDonald
01:20 PM pfSense Docs New Content #12681 (Closed): WireGuard Site-to-Multisite Recipe: Adds new recipe for WireGuard site-to-multisite configurations. Christian McDonald
02:44 PM Bug #5592 (Closed): fsck sometimes fails to repair filesystem automatically, resulting in Panic: ufs_dirbad bad dir ino ... mangled entry: Nothing we can really do for this. We have changed the default filesystem type to ZFS, and fsck is not relevant there... Jim Pingle
02:41 PM Bug #5383 (Closed): CODELQ Traffic Shaper Causes Panic and Reboot During Speed Test: Doesn't seem to be an issue anymore, and there is a lack of detail here (no details of the config, not even if it's A... Jim Pingle
02:31 PM Regression #12622 (Resolved): Kernel panic when using ``fq_pie`` limiter scheduler: Thanks for testing. I'll assume the issue is resolved, please reopen if the crash pops up again. Mateusz Guzik
01:58 PM Revision f1654805: Switch configurations to point to 2.6.0.: Reviewed by: garga Glen Barber
01:58 PM Revision 89b2a39f: Update repo configurations for 2.6.0.: Reviewed by: garga Glen Barber
01:19 PM Revision 03a43ff3: Rework repository config files: Instead of use version on file names, just call them repo, repo-devel
and repo-previous. Also, do not keep relying o... Renato Botelho
12:21 PM Bug #12604 (Resolved): IPv6 interface prefix change not reflected in RADVD configuration: Danilo Zrenjanin
12:20 PM Bug #12604: IPv6 interface prefix change not reflected in RADVD configuration: Tested on:... Danilo Zrenjanin
07:34 AM Bug #12678 (Pull Request Review): Applying firewall rule changes does not clear dirty flag for aliases subsystem: Jim Pingle
02:59 AM Bug #12678: Applying firewall rule changes does not clear dirty flag for aliases subsystem: same issue with the NAT and Shaper pages
fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/553 Viktor Gurov
02:17 AM Bug #12678 (Resolved): Applying firewall rule changes does not clear dirty flag for aliases subsystem: How to reproduce:
1) Change Aliases
2) You'll see a message on top of the page:... Viktor Gurov
06:05 AM Bug #12680: Typo in the warning text: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/555 Danilo Zrenjanin
05:48 AM Bug #12680 (Resolved): Typo in the warning text: If setting the DNS Resolver in forwarding mode and DNS servers were not previously defined under System>General, the ... Danilo Zrenjanin
04:37 AM Feature #12679: Remind user to update DHCPv6 range when changing interface IPv6 prefix: see also #12527 Viktor Gurov
04:17 AM Feature #12679 (New): Remind user to update DHCPv6 range when changing interface IPv6 prefix: Having a reminder to update the DHCPv6 range (address pool) after changing the IPv6 prefix under an interface with DH... Danilo Zrenjanin
02:21 AM Bug #12635 (Resolved): PHP: Error generated when backing up a config file with SSH disabled: Tested against:... Danilo Zrenjanin

01/11/2022

07:39 PM Revision 3e5fa898: Redirect user to / if Plus and attempting to directly access system_register.php: Steve Beaver
07:17 PM Regression #12622: Kernel panic when using ``fq_pie`` limiter scheduler: I tested the latest community edition 2.6.0.b.20220111.0600 on two different machines and everything is working good.... Anonymous
03:46 PM Regression #12622: Kernel panic when using ``fq_pie`` limiter scheduler: Ok I don't have Netgate hardware so I won't be able to test any Pfsense plus versions. Anonymous
02:49 PM Regression #12622: Kernel panic when using ``fq_pie`` limiter scheduler: This snapshot contains the fix: https://firmware-nyi.netgate.com/beta/snapshots/installer/pfSense-plus-22.01-BETA-amd... Mateusz Guzik
07:13 PM Revision 5895065c: Make registration process contingent on PLus vs CE to accommodate automatic CE -> Plus merging: Steve Beaver
06:26 PM Revision b8fd0558: netgate-ca.pem is now in the base image at /usr/local/share/${product_name}/ssl/netgate-ca.pem: Steve Beaver
03:00 PM Revision a02e2cf8: Merge remote-tracking branch 'origin/master' into CE_Plus_Upgrade: Luiz Souza
02:59 PM Revision 73141a42: Update the git protocol.: For more details see: https://github.blog/2021-09-01-improving-git-protocol-security-github/ Luiz Souza
10:44 AM pfSense Packages Feature #12658: Adding prometheus metrics to darkstat: FreeBSD ports bug created: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=261123 Karim Elatov
09:35 AM Bug #12677 (Pull Request Review): OpenVPN form validation issues: Jim Pingle
09:20 AM Bug #12677: OpenVPN form validation issues: MR: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/550 Jim Pingle
09:15 AM Bug #12677 (Closed): OpenVPN form validation issues: There are a few issues with how we currently handle the data cipher list in OpenVPN client and server pages, includin... Jim Pingle
05:52 AM Feature #12676 (New): Add the Tagged option on the Port Forward rules edit page: When editing the firewall rules, we can see the following note under the Tag option:
"A packet matching this rule ca... Viktor Gurov

01/10/2022

09:03 PM pfSense Plus Bug #12607: Instability with Snort Inline with AWS Instances: https://github.com/pfsense/FreeBSD-src/commit/7dbcef9536b410426e8b391e721e5800f5d503b5
@* Netmap support for ENAv3... Marcos M
08:27 PM Revision 95960701: Only setup the certificates for the pkg repo access when the Plus Upgrade branch is selected.: Luiz Souza
06:34 PM Regression #12622: Kernel panic when using ``fq_pie`` limiter scheduler: Apologies for late reply, I somehow did not get notification of your response.
I pushed the patch to pfSense, shou... Mateusz Guzik
03:05 PM Revision 26c55656: Merge remote-tracking branch 'origin/master' into CE_Plus_Upgrade: Luiz Souza
03:04 PM Revision 94850c8a: Remove stray white spaces.: No functional changes. Luiz Souza
02:21 PM Revision fe5ba225: Use /conf/restore_config_data trigger file to restore extra data on install. Feature #12518: Viktor Gurov
02:00 PM Feature #12267: OpenVPN option to limit concurrent connections per user: Jim Pingle wrote in #note-14:
> Phil Wardt wrote in #note-12:
> > Note: I have the option "Strict User-CN Matching"... Phil Wardt
07:41 AM Feature #12267: OpenVPN option to limit concurrent connections per user: Phil Wardt wrote in #note-12:
> Note: I have the option "Strict User-CN Matching" enabled, not sure if each certific... Jim Pingle
01:20 PM Regression #12660: High CPU usage due to incorrect gateway on some policy routed states: Can you test this patch? It should prevent simultaneous access in pf_map_addr(), hopefully (and expected) without maj... Kristof Provost
12:33 PM Regression #12660: High CPU usage due to incorrect gateway on some policy routed states: I already talked with Kristof about this on Slack, but so it's also on Redmine:
> Would you be able to test if the... Jim Pingle
08:30 AM Regression #12660: High CPU usage due to incorrect gateway on some policy routed states: I think I see where the problem happens and it's indeed in the PF_POOL_ROUDROBIN case of pf_map_addr().
In get_addr:... Kristof Provost
03:48 AM Regression #12660: High CPU usage due to incorrect gateway on some policy routed states: Would you be able to test if the problem occurs if the rule doesn't use round-robin but uses random or source-hash in... Kristof Provost
12:35 PM pfSense Plus Bug #12669 (Duplicate): Improvements to pkg update handling: Duplicate of #10464 which already had a similar planned solution in mind. Jim Pingle
10:42 AM pfSense Plus Bug #11626: Google LDAP connections fail due to lack of SNI for TLS 1.3: Nudge this ahead so we have more time to ensure there aren't any regressions from the change. Jim Pingle
10:06 AM Feature #12675 (Resolved): Move command line history to a GUI option stored in ``config.xml`` rather than a manual flag file: Currently the CLI history is retained if the file .keephistory is present.
It would be nice if that option was ret... Steve Wheeler
09:19 AM pfSense Packages Feature #12674 (Feedback): Redistribute RIP to BGP: Merged Viktor Gurov
08:11 AM pfSense Packages Feature #12674 (Pull Request Review): Redistribute RIP to BGP: Jim Pingle
04:48 AM pfSense Packages Feature #12674: Redistribute RIP to BGP: https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/167 Viktor Gurov
04:19 AM pfSense Packages Feature #12674 (Resolved): Redistribute RIP to BGP: Current version only support redistributing OSPF to BGP, but not RIP Viktor Gurov
08:56 AM pfSense Packages Todo #12354 (Feedback): Update haproxy-devel to mitigate CVE-2021-40346: Marcos Mendoza wrote in #note-9:
> This patch results in the following warning when starting @haproxy@:
> [...]
> ... Viktor Gurov
08:51 AM Feature #12518 (Pull Request Review): Restore RRD and extra data from configuration backups when restoring during installation: Jim Pingle
08:34 AM Feature #12518: Restore RRD and extra data from configuration backups when restoring during installation: Improved:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/549
https://gitlab.netgate.com/pfSense/Fr... Viktor Gurov
08:15 AM Bug #12672 (Pull Request Review): GleSYS Dynamic DNS responses are not parsed properly: Jim Pingle
05:20 AM Bug #12672: GleSYS Dynamic DNS responses are not parsed properly: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/547 Viktor Gurov
08:14 AM Bug #12661 (Needs Patch): Increase Maximum Allowable Bandwidth on Limiters: Since this is blocked on an upstream limitation, there isn't anything we can do here at the moment. Once it's fixed i... Jim Pingle
04:55 AM Bug #12661: Increase Maximum Allowable Bandwidth on Limiters: current limiter maximums is 4Gb/s, see #7979
related FreeBSD issue: https://bugs.freebsd.org/bugzilla/show_bug.cgi?i... Viktor Gurov
08:10 AM Bug #1849: Traffic shaper - By Queue view needs to show/use friendly inerface names: It shows the friendly names these days but it doesn't show the root queues still, so this can remain open. Jim Pingle
08:03 AM Feature #9393 (Pull Request Review): Improved support for USB interfaces that may not always be present: Jim Pingle
04:08 AM Feature #9393: Improved support for USB interfaces that may not always be present: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/506 Viktor Gurov
07:55 AM pfSense Packages Bug #12668: Clear System OS Boot Log removes Cypto information on Status Page: Jim Pingle wrote in #note-4:
> This is normal and expected. That information is obtained by inspecting the OS boot l... Jim Middleton
07:34 AM pfSense Packages Bug #12668 (Not a Bug): Clear System OS Boot Log removes Cypto information on Status Page: This is normal and expected. That information is obtained by inspecting the OS boot log and if you clear it, there is... Jim Pingle
07:21 AM pfSense Packages Bug #12668: Clear System OS Boot Log removes Cypto information on Status Page: Local network with 3 users. Its not an office with a bazillion VLAN's, etc. Jim Middleton
07:20 AM pfSense Packages Bug #12668: Clear System OS Boot Log removes Cypto information on Status Page: Viktor Gurov wrote in #note-1:
> Please provide more information about your configuration -
>
> unable to reprod... Jim Middleton
05:49 AM pfSense Packages Bug #12668 (Feedback): Clear System OS Boot Log removes Cypto information on Status Page: Please provide more information about your configuration -
unable to reproduce on 2.6.0.b.20220109.0600
fixed ... Viktor Gurov
07:45 AM Regression #12666 (Resolved): Default password warning is not displayed for new installs: Jim Pingle
07:04 AM pfSense Packages Bug #11836 (Feedback): FRR ACCEPTFILTER shows out of order prefix-list: Unable to reproduce on FRR 1.1.1_2:... Viktor Gurov
05:55 AM pfSense Packages Feature #10818: UDP Broadcast Relay: build pkg:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/548 Viktor Gurov
05:39 AM Bug #12654 (Resolved): Nat issue after 20211220 version: works as expected on 22.01.b.20220109.0600 Viktor Gurov
05:01 AM Bug #12671 (Rejected): Load balancing stop working...: This site is not for support or diagnostic discussion.
For assistance in solving problems, please post on the "Net... Viktor Gurov
04:15 AM Bug #12497 (Duplicate): OpenVPN Server assignes random IPv4 addresses to active clients even if FreeRadius has configured Framed-IP for all these remote clients: Duplicate of #12076 Viktor Gurov
04:11 AM pfSense Packages Bug #12443 (Resolved): DNSBL Category ```Enable All``` button not working: Viktor Gurov
04:11 AM Bug #12452 (Resolved): Port forward rules are not created for special networks (pppoe, openvpn): Viktor Gurov
01:26 AM Bug #12673: Firewall Logs Dashboard Widget is slow and may fail to update: This is being discussed here
https://forum.netgate.com/topic/168895/please-help-firewall-logs-dashboard-widget-not... JohnPoz _

01/09/2022

06:16 PM Bug #12095: Memory leak in pcscd: Not sure there's a lot of value in my post, if this service has now been set to disabled by default..
I just wante... Simon Quigley
04:28 PM Bug #12673: Firewall Logs Dashboard Widget is slow and may fail to update: Tested:... Steve Wheeler
04:28 PM Bug #12673 (Resolved): Firewall Logs Dashboard Widget is slow and may fail to update: As stated the firewall logs dashboard widget fails to update at all if you set an update interval below 5 seconds.
... Steve Wheeler
07:22 AM Bug #12672 (Resolved): GleSYS Dynamic DNS responses are not parsed properly: Expected response from GLeSYS is wrong in _checkStatus
pfsense/src/etc/inc/dyndns.class
if (preg_match('/Recor... Martin Pegler
06:59 AM Bug #12671 (Rejected): Load balancing stop working...: Hello,
I have this issue since long time ago but never put so much effort into it... I mostly use Failover but now... Atanas Paunoff
06:31 AM pfSense Packages Bug #12670: ACME package writes credentials to system log: It is probably due to https://github.com/pfsense/FreeBSD-ports/blob/94457075a991331b9c0bcee44ea7d4fd9427ab36/security... Florian Apolloner
06:26 AM pfSense Packages Bug #12670 (New): ACME package writes credentials to system log: The acme renewal cron currently dumps the config into the system log:... Florian Apolloner

01/08/2022

06:21 PM Feature #12267: OpenVPN option to limit concurrent connections per user: There could be additional code to address the behavior with certs differently, however it wouldn't be "instead of" si... Marcos M
01:25 PM Feature #12267: OpenVPN option to limit concurrent connections per user: Jim Pingle wrote in #note-11:
> Commit reverted. We can revisit this in the next release.
Instead of this shell h... Phil Wardt
05:21 PM pfSense Packages Bug #12443: DNSBL Category ```Enable All``` button not working: Enable All and Disable All buttons appear to function as desired (compared to 21.05.2) for these blacklists on 22.01.... Jordan G
05:02 PM Bug #5253: 3gstats.php 100% CPU: Unable to reproduce this issue. The Status --> Interfaces tab shows proper data and the CPU usage does not hit 100% ... Kris Phillips
04:56 PM Bug #1849: Traffic shaper - By Queue view needs to show/use friendly inerface names: Not sure what this bug report is for as the friendly name for interfaces is shown for traffic shapers and for the que... Kris Phillips
04:35 PM Regression #12666: Default password warning is not displayed for new installs: The default password banner is present on 22.01.b.20220108.0600 Jordan G
04:25 PM Bug #12661: Increase Maximum Allowable Bandwidth on Limiters: I can confirm that setting a limiter of 5 gigabit produces the following error in the system logs:
/rc.filter_con... Kris Phillips
04:17 PM pfSense Plus Bug #12669 (Duplicate): Improvements to pkg update handling: Currently when a new pfSense release comes out pkg updates the repo files immediately so that the current stable rele... Kris Phillips
03:53 PM Revision 145b0a99: Final text string for product registration: Steve Beaver
03:21 PM Revision 22ef0707: Add product field to registration chec so that CE can be distinguished from Plus: Steve Beaver
01:03 PM Feature #12567 (Resolved): Add Dynamic DNS support for Name.com: Name.com is listed in Dynamic DNS
2.6.0.b.20220107.0600
Alhusein Zawi
06:24 AM pfSense Packages Bug #12668 (Not a Bug): Clear System OS Boot Log removes Cypto information on Status Page: When I clear the System Log OS Boot and return to the System Status page Crypto information changes from "AES-NI CPU ... Jim Middleton
05:53 AM pfSense Packages Bug #12260: Update popup and version missmatch?: Possible workaround: Use a web-browser plugin like 'uBlock Origin' to select this 'popup' (it's a div actually) eleme... R. B.
01:27 AM Revision 2d5e802f: Add $cafile and $cafilesrc into the global variables list.: Luiz Souza
01:14 AM Revision 8fa84573: Copy the Netgate CA file to the proper place before start.: Luiz Souza

01/07/2022

08:15 PM pfSense Packages Bug #12260: Update popup and version missmatch?: +1 for this, if only to get rid of the unavoidable notification on every page load. Matt D
03:52 PM Revision 526e8425: Add help menu upgrade link: Steve Beaver
03:03 PM Revision 5165bfa5: Fix default password warning check. Fixes #12666: Use the existing function to check the password to avoid duplicating
effort. Jim Pingle
02:52 PM Regression #12605: ``diag_dump_states.php`` no longer filters by rule ID: Updating subject for release notes. Jim Pingle
02:46 PM Revision 3b067d80: Validate repo definition files before saving: Steve Beaver
01:04 PM Bug #12452: Port forward rules are not created for special networks (pppoe, openvpn): Input validation prevented me to create a port forward with destination ANY on all interfaces( WAN,LAN....) and all... Alhusein Zawi
09:30 AM Feature #12665: Ability to add custom pf rules from the GUI: ... Having thought further, I'm not sure merely appending the custom rules would give users the versality they need. ... Andrew -
05:01 AM Feature #12665 (New): Ability to add custom pf rules from the GUI: I'd be grateful if you could please consider adding the ability to specify custom pf rules from the GUI.
I'm envis... Andrew -
09:18 AM pfSense Packages Bug #12667 (Bogus): Firewall Crashed After Upgrading Wireguard: Upgraded wireguard from 0.1.5 to 0.1.5_3 and after the upgrade was complete firewall crashed. Kyle Sampson
09:15 AM Regression #12666 (Feedback): Default password warning is not displayed for new installs: Applied in changeset commit:5165bfa5e5e029c75239204b8cffff8d9d5ab6c5. Jim Pingle
09:05 AM Regression #12666: Default password warning is not displayed for new installs: Not a problem in a release, so exclude from release notes. Jim Pingle
08:57 AM Regression #12666 (In Progress): Default password warning is not displayed for new installs: Jim Pingle
08:56 AM Regression #12666 (Resolved): Default password warning is not displayed for new installs: Since the change to SHA-512 hash passwords in #10298 the warning banner that alerts the user they are using the defau... Jim Pingle
07:35 AM Bug #12664 (Rejected): URL table never updates: There isn't enough detail here to say what might be happening, and this site is not for support or diagnostic discuss... Jim Pingle
04:25 AM Bug #12664 (Rejected): URL table never updates: Hello,
I waited over 48 hours but my URL tables don't update anymore. When I manually click save without editing a... Bas de Vet

01/06/2022

06:56 PM Regression #12660: High CPU usage due to incorrect gateway on some policy routed states: To confirm the NAT hypothesis I added a NAT rule on that interface and the problem disappeared. So this appears to on... Jim Pingle
12:00 PM Regression #12660: High CPU usage due to incorrect gateway on some policy routed states: Further testing with Load Balancing showed the problem happens at a 3:2 and even a 1:1 ratio of weights for load bala... Jim Pingle
11:14 AM Regression #12660: High CPU usage due to incorrect gateway on some policy routed states: I made a commit which should make this a non-issue for failover groups (one gateway per tier) but it does still happe... Jim Pingle
04:26 PM Revision be84a4a4: Improve solo weighted GW in Failover. Issue #12660: If there is only one gateway to add in a macro definition, there is
no point in repeating the string based on the gat... Jim Pingle
03:02 PM Bug #12663 (Rejected): IPV6 Neighbor Solicitation not answered => No IPV6 possilbe ! TrueNas or pfSense?: This site is not for support or diagnostic discussion.
For assistance in solving problems, please post on the "Net... Jim Pingle
02:54 PM Bug #12663 (Rejected): IPV6 Neighbor Solicitation not answered => No IPV6 possilbe ! TrueNas or pfSense?: Hello,
I have multiple vlans between an TrueNAS-core system and pfSense. IPV6 does not work, due to a failing Neig... Louis B
02:42 PM pfSense Docs Correction #12662 (Closed): Interface Types and Configuration -> Limitations | Grammar: Fixed: https://gitlab.netgate.com/docs/pfSense-docs/-/commit/2b2dfe70d64391b4331d1d9552645450c8766b93 Jim Pingle
12:46 PM pfSense Docs Correction #12662: Interface Types and Configuration -> Limitations | Grammar: https://docs.netgate.com/pfsense/en/latest/interfaces/index.html Christopher Cope
12:44 PM pfSense Docs Correction #12662 (Closed): Interface Types and Configuration -> Limitations | Grammar: The following sentence should have the bold section added.
"For example, the firewall may take much longer *to* c... Christopher Cope

01/05/2022

06:20 PM Revision ebd1a3e3: Update copyright year: Steve Beaver
06:17 PM Revision 23a71d17: Merge remote-tracking branch 'origin/master' into CE_Plus_Upgrade: Steve Beaver
03:47 PM Regression #12605 (Resolved): ``diag_dump_states.php`` no longer filters by rule ID: This looks good in the current snapshots. The link(s) works. The states are filtered as expected.
Tested:... Steve Wheeler
08:31 AM Regression #12605: ``diag_dump_states.php`` no longer filters by rule ID: For interested parties, the issue was caused by network byte order backpedaling being moved into libpfctl for state e... Christian McDonald
08:19 AM Regression #12605 (Feedback): ``diag_dump_states.php`` no longer filters by rule ID: Christian McDonald
02:14 PM pfSense Plus Bug #11626: Google LDAP connections fail due to lack of SNI for TLS 1.3: Looks like the ports tree is setup to where we can define the version to use without much fuss. It _may_ be as simple... Jim Pingle
02:09 PM Bug #12604: IPv6 interface prefix change not reflected in RADVD configuration: I couldn't replicate the issue on:... Danilo Zrenjanin
10:51 AM pfSense Plus Bug #12545 (Not a Bug): /etc/inc/led.inc functions are not doing the right thing on 6100: The LEDs on the 6100 and several other models are diven by GPIO and adjusted via a special script. They do not use th... Jim Pingle
08:53 AM Feature #12518 (New): Restore RRD and extra data from configuration backups when restoring during installation: This can be activated unintentionally on upgrade the way it is now. It looks like the installer made @/conf/installer... Jim Pingle
08:21 AM Regression #12660: High CPU usage due to incorrect gateway on some policy routed states: This appears to be related to the gateway "weight" advanced parameter. When the problem happens, the gateway in quest... Jim Pingle

01/04/2022

09:13 PM Bug #12661 (Needs Patch): Increase Maximum Allowable Bandwidth on Limiters: This is a continuation from the topic discussed on the forum here:
https://forum.netgate.com/topic/168866/maximum-... Timo M
06:20 PM Bug #9277 (Feedback): MBT-4220/2220: pfSense hangs when running sysctl -a: Tested this against 2.6 beta:... Steve Wheeler
03:23 PM Bug #9277 (Resolved): MBT-4220/2220: pfSense hangs when running sysctl -a: I committed a patch to hide the problematic sysctls when running sysctl -a, which should be good enough for the time ... Mateusz Guzik
05:44 PM Regression #12605: ``diag_dump_states.php`` no longer filters by rule ID: MR: https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/165 Christian McDonald
04:56 PM pfSense Packages Feature #12658: Adding prometheus metrics to darkstat: Are you referring to following this process to submit a patch:
https://docs.freebsd.org/en/books/porters-handbook/... Karim Elatov
03:11 PM Bug #12548 (Resolved): Kernel panic in ``nd6_dad_timer()``: Pushed to devel-12 and plus-devel-12. Mateusz Guzik
03:06 PM Bug #12548: Kernel panic in ``nd6_dad_timer()``: I applied the change on top of devel-12 (needed minor editing because patch somehow failed to apply some of it).
h... Mateusz Guzik
02:48 PM Regression #12660 (Resolved): High CPU usage due to incorrect gateway on some policy routed states: It's not clear why, but sometimes pf is putting the interface address as the gateway on a state instead of the actual... Jim Pingle
02:20 PM Bug #12657 (Closed): "Skip rules when gateway is down" doesn't function on gateway down events until state is reset: Yes, that's still as expected. Once a state is established the state passes the traffic. Rules are not consulted agai... Jim Pingle
01:24 PM Bug #12657: "Skip rules when gateway is down" doesn't function on gateway down events until state is reset: Jim Pingle wrote in #note-2:
> This is almost certainly expected behavior. States are not touched when events happen... Kris Phillips
01:37 PM Revision f922a6b4: Update file name in comment: Steve Beaver
01:21 PM Revision 90f370a6: Merge branch 'mvc_refactor' of gitlab.netgate.com:pfsense/pfsense into mvc_refactor: Steve Beaver
01:20 PM Revision 8b8573cb: Merge recent changes in master: 2 Steve Beaver
01:18 PM Revision 552b7b52: Refactor OpenVPNServer edit/duplicate for MVC: Steve Beaver
01:15 PM Revision 51077882: OpenVPNServer code refactored for MVC: Steve Beaver
01:15 PM Revision 2b11b002: Revert commit test: Steve Beaver
01:15 PM Revision e65562bb: Parse cert by passing index rather than cert.: Steve Beaver
01:15 PM Revision 837cf752: Initial refactoring of system_certmanager: Steve Beaver
01:15 PM Revision 3a8663f0: Commit test: Steve Beaver
12:07 PM Feature #4242: Two Factor or OTP Authentication for Admin Interface: That can be accomplished using the FreeRadius package.
# Install the FreeRADIUS package and configure it for OT... Danilo Zrenjanin
11:48 AM Bug #12584 (Resolved): ``rc.carpmaster`` only sends notifications via SMTP: Tested:... Danilo Zrenjanin
03:31 AM Bug #12588 (Resolved): Automatic rule tracker IDs incorrect after multiple filter reloads: Tested:... Danilo Zrenjanin
02:04 AM pfSense Packages Bug #11696 (Resolved): SquidGuard Disable "Groups ACL" no work: Tested on 21.05.2
I've created 10 different Group ACLs for 3 VM PCs I had (Ubuntu, Windows10 and Xubuntu).
After ... Azamat Khakimyanov

01/03/2022

06:40 PM Revision 283f9e8c: Disable DNS Resolver recursion if the selected outgoing interfaces are not available. Fixes #12460: Originally-By: Viktor Gurov Jim Pingle
06:31 PM Revision 1f3baf61: Revert "Use OpenVPN async client-connect, clear stale rules, add option to limit connections per user. Implements #12407 and #12332 and #12267": This reverts commit 7aaa20d95a345c4688e8786c755c7d0433451688. Jim Pingle
05:50 PM Revision fc53bed4: Fix "assignement" typo. Fixes #12383: Jim Pingle
04:17 PM Feature #11927 (Feedback): Allow DHCP not to serve a gateway - small fix: This appears to be complete in 2.5.2.
A new feature request should be opened for similar function in Static Mappin... Steve Wheeler
02:11 PM Regression #12622: Kernel panic when using ``fq_pie`` limiter scheduler: Never done it before but I should be able to. I have a test setup I can run it on. Anonymous
12:32 PM Regression #12622: Kernel panic when using ``fq_pie`` limiter scheduler: I diagnosed the problem and wrote a patch for it, but don't heavy easy means to test:... Mateusz Guzik
12:50 PM Bug #12460: Unbound falls back to using all outgoing network interfaces if manually selected outgoing interface(s) are unavailable: Applied in changeset commit:283f9e8cbe7274db84aeb31e0c6166608c2ff087. Jim Pingle
12:45 PM Bug #12460 (Feedback): Unbound falls back to using all outgoing network interfaces if manually selected outgoing interface(s) are unavailable: New MR: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/544
Merged. Jim Pingle
12:49 PM Feature #12407 (New): Use deferred client connections in OpenVPN: Jim Pingle
12:45 PM Feature #12407 (Feedback): Use deferred client connections in OpenVPN: Applied in changeset commit:1f3baf61c1647ffcfbc6b6e26132d3ce56abeb96. Jim Pingle
12:36 PM Feature #12407: Use deferred client connections in OpenVPN: Commit reverted. We can revisit this in the next release. Jim Pingle
12:23 PM Feature #12407 (New): Use deferred client connections in OpenVPN: The commit for this, commit:7aaa20d95a345c4688e8786c755c7d0433451688 , broke static IP address assignments from RADIUS. Jim Pingle
12:37 PM Bug #12076 (Feedback): OpenVPN RADIUS-based firewall rules do not use expected value for RADIUS-assigned IP addresses: The above commit has been reverted. Please test this issue again on the next new snapshot, or on a snapshot with that... Jim Pingle
12:23 PM Bug #12076: OpenVPN RADIUS-based firewall rules do not use expected value for RADIUS-assigned IP addresses: The static addresses were broken by commit:7aaa20d95a345c4688e8786c755c7d0433451688 which is related to #12407 / #123... Jim Pingle
12:36 PM Bug #12332: OpenVPN does not clear old Cisco-AVPair anchor rules in some cases: Commit reverted. We can revisit this in the next release. Jim Pingle
12:22 PM Bug #12332 (New): OpenVPN does not clear old Cisco-AVPair anchor rules in some cases: The commit for this, commit:7aaa20d95a345c4688e8786c755c7d0433451688 , broke static IP address assignments from RADIUS. Jim Pingle
12:36 PM Feature #12267: OpenVPN option to limit concurrent connections per user: Commit reverted. We can revisit this in the next release. Jim Pingle
12:22 PM Feature #12267 (New): OpenVPN option to limit concurrent connections per user: The commit for this, commit:7aaa20d95a345c4688e8786c755c7d0433451688 , broke static IP address assignments from RADIUS. Jim Pingle
12:00 PM Bug #12383: Typos in interfaces_assign.php configuration change description strings: Applied in changeset commit:fc53bed4c086866394771950b4e5b51ad953d59e. Jim Pingle
11:52 AM Bug #12383 (Feedback): Typos in interfaces_assign.php configuration change description strings: Fixed in a new PR: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/542
Jim Pingle
11:58 AM Regression #12549: Per-user Mobile IPsec settings are not applied to connecting mobile clients: A user testing this patch mentioned that after some days, the client received a different IP assigned reserved for a ... Marcos M
11:58 AM Todo #12431: GUI pages should use ``POST`` for AJAX calls, not ``GET``: Need more comprehensive testing. Jim Pingle
11:41 AM Feature #12518 (Feedback): Restore RRD and extra data from configuration backups when restoring during installation: Already merged. Jim Pingle
11:40 AM Bug #12635 (Feedback): PHP: Error generated when backing up a config file with SSH disabled: Already merged. Jim Pingle
09:31 AM Regression #12605: ``diag_dump_states.php`` no longer filters by rule ID: Looks like we are passing in the ruleid to the @pfSense_get_pf_states();@ function in the pfSense module correctly, b... Jim Pingle
08:28 AM pfSense Docs Correction #12659 (Resolved): Correct inaccuracies in configuring Flow Control for ``ix`` and ``ixl`` interfaces: *Page:* https://docs.netgate.com/pfsense/en/latest/hardware/tune.html
*Feedback:*
The entry for Flow Control for ... Andreas Gunnarsson
07:54 AM pfSense Packages Feature #12658: Adding prometheus metrics to darkstat: If the FreeBSD port for Darkstat is out of date, the proper procedure is to ask the FreeBSD port maintainer to update... Jim Pingle
07:50 AM Bug #12657 (Feedback): "Skip rules when gateway is down" doesn't function on gateway down events until state is reset: This is almost certainly expected behavior. States are not touched when events happen unless the user has enabled the... Jim Pingle
07:47 AM Bug #9572 (Closed): uPNP not working - miniupnpd needs an update, reporting "interface index not matching", which has been fixed upstream: Jim Pingle
07:47 AM Bug #6369 (Closed): Config without mouse not possible: Jim Pingle
07:05 AM Bug #12654 (Feedback): Nat issue after 20211220 version: This looks to have been an edge case caused by enabling RSS. Possibly a race condition.
RSS is now disabled in curre... Steve Wheeler

01/02/2022

03:56 PM pfSense Packages Feature #12658 (Closed): Adding prometheus metrics to darkstat: I wanted to get *darkstat* metrics in *prometheus* and it looks like a new commit (in 2017) has been created in the o... Karim Elatov
11:41 AM pfSense Packages Todo #12354 (Pull Request Review): Update haproxy-devel to mitigate CVE-2021-40346: This patch results in the following warning when starting @haproxy@:... Marcos M
01:05 AM Revision 8f2f85c3: Update the Copyright year of the files owned by Rubicon/Netgate.: Luiz Souza

01/01/2022

11:13 AM Bug #12657: "Skip rules when gateway is down" doesn't function on gateway down events until state is reset: The plot thickens:
When I kill the gateway and look at my firewall rules for matches, it's not actually matching o... Kris Phillips
10:47 AM Bug #12657 (Closed): "Skip rules when gateway is down" doesn't function on gateway down events until state is reset: Testing environment:
Inside subnet: 192.168.5.0/24
Host: 192.168.5.20
System --> Advanced --> Misc --> "Skip rul... Kris Phillips
12:31 AM Feature #7626: Add IPoE support for WAN: Does anyone know if selecting using DHCP will solve the need to select IPoE?
Or is there an IPoE option in the works... Anonymous

12/31/2021

06:02 PM Bug #9572: uPNP not working - miniupnpd needs an update, reporting "interface index not matching", which has been fixed upstream: pfSense Plus 21.05.2, which is our current stable release, runs the following version:
miniupnpd 2.2.1 Oct 20 2021... Kris Phillips
05:58 PM pfSense Packages Bug #8516: FreeRADIUS requires settings re-saved after pfSense upgrade: Is FreeRADIUS communicating on a VIP in your configuration or using the actual interface IP? There is a bug for VIPs... Kris Phillips
05:55 PM Bug #8113: MTU setting on bridge, openvpn clients ignored: OpenVPN's MTU is set by a command passed to the client/server, not on the interface itself.
As for bridge interfac... Kris Phillips
05:47 PM Bug #7400: Traffic Graphs show bad data on 2.3.3_1: I'm not able to reproduce any issues here in pfSense Plus 21.05.2 or pfSense CE 2.5.2. Graphs look normal to me. Kris Phillips
05:44 PM Bug #6993: OpenVPN status error during CARP state transition: If this is still relevant, you can likely work around this by setting the VIP that you're using for OpenVPN to also b... Kris Phillips
05:40 PM Bug #7113: Interface name in Traffic Graphs: Not sure this is a bug. This seems to be by design that the "friendly name" would be displayed. What purpose would h... Kris Phillips
05:36 PM Bug #6369: Config without mouse not possible: Tested in Firefox on pfSense Plus 21.05.2. I can select all of these fields with just the keyboard and change them wi... Kris Phillips
05:30 PM Bug #4345: Traffic Shaping doesn't work with Xen netfront driver: This should be retested. There is a lot of kernel changes and Xen improvements in the FreeBSD kernel in the last 6 ye... Kris Phillips
05:21 PM Bug #5629: Allow for IPsec configuration using certs without a CA: This is only necessary for self-signed certs. Not sure what the functional benefit of removing the CA requirements w... Kris Phillips
04:19 PM pfSense Packages Feature #11130: FRR RIP support: After performing the workaround in https://redmine.pfsense.org/issues/12653, I am able to successfully exchange route... Max Leighton
03:42 PM pfSense Packages Bug #11391 (Resolved): Zeek crashes on 2.5.0: Tested with Zeek 3.0.6_3
The service starts successfully without any crashes. Marking the ticket resolved. Max Leighton
01:20 PM Bug #12632: Changing an interface IP address and gateway at the console does not save the new gateway if one already exists for the interface: I tested again, against the same version:... Danilo Zrenjanin
10:35 AM Bug #12632 (Feedback): Changing an interface IP address and gateway at the console does not save the new gateway if one already exists for the interface: Danilo Zrenjanin
06:09 AM Bug #12632 (Resolved): Changing an interface IP address and gateway at the console does not save the new gateway if one already exists for the interface: Tested against:... Danilo Zrenjanin
01:06 PM pfSense Packages Bug #12423: Dashboard shows "SQLite database missing, Force Reload DNSBL to recover!": So is this in pfBlockerNG-devel 3.1.0 or not yet released? Sean McBride
10:27 AM pfSense Packages Feature #12656 (New): NextDNS: NetDNS package and the the ability to change setting, especially the configuration file via the web gui.
Abdul Khaliq
04:54 AM Bug #12637 (Resolved): Incorrect SSH key permission after restore: Tested against:... Danilo Zrenjanin

12/30/2021

08:01 PM Revision 7034ac09: Create port forward rules for PPPoE Servers interface. Fixes #12452: Viktor Gurov
05:51 PM pfSense Packages Bug #12655 (New): telegraf, wireguard plugin failing: Hi,
I'm trying to use the Wireguard plugin for telegraf, more info on the plugin here,
https://github.com/influxd... Russell Morris
02:51 PM pfSense Packages Bug #12443 (Feedback): DNSBL Category ```Enable All``` button not working: Merged Viktor Gurov
02:50 PM pfSense Packages Bug #12423 (Feedback): Dashboard shows "SQLite database missing, Force Reload DNSBL to recover!": Merged Viktor Gurov
02:49 PM pfSense Packages Bug #12414 (Feedback): DNSBL SafeSearch page displays input validation error if DoH / DoT blocking is not enabled: Merged Viktor Gurov
02:33 PM pfSense Packages Feature #10818: UDP Broadcast Relay: MILO MEDIN wrote in #note-7:
> Is there any work going on to integrate this? I have a problem with chromecast audio... Axel Taferner
12:20 PM pfSense Packages Feature #10818: UDP Broadcast Relay: Is there any work going on to integrate this? I have a problem with chromecast audio groups that this would fix (tha... MILO MEDIN
02:25 PM Bug #12452 (Feedback): Port forward rules are not created for special networks (pppoe, openvpn): Applied in changeset commit:7034ac0946c63f77708f28643f5efc8fb0fe96a1. Viktor Gurov
02:02 PM Bug #12452 (Pull Request Review): Port forward rules are not created for special networks (pppoe, openvpn): Jim Pingle
12:12 PM Bug #12452: Port forward rules are not created for special networks (pppoe, openvpn): extra fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/541 Viktor Gurov
01:26 PM Bug #12626: Router Advertisement DNS search domain from one interface may unintentionally be used by other interfaces: Updating subject for release notes. Jim Pingle
01:20 PM Feature #11750: Support for network interfaces using the ``qlnxe`` driver: Updating subject for release notes. Jim Pingle
01:19 PM Regression #12631: Dynamic DNS may not use the correct interface when updating during failover: Updating subject for release notes. Jim Pingle
01:06 PM pfSense Packages Bug #12482 (Resolved): Outdated doc links: Tested against:... Danilo Zrenjanin
12:43 PM Bug #12585 (Resolved): ``rc.notify_message`` only sends notifications via SMTP: Tested against:... Danilo Zrenjanin
11:40 AM Bug #12651: ``nginx`` logs an error that the port is already in use when restarting Captive Portal services: fixed in https://gitlab.netgate.com/pfSense/pfSense/-/commit/86b5382c97fd8cb965a7dc74cd12d94ab3a3af9c#a8c0c118e374175... Viktor Gurov
11:19 AM pfSense Packages Feature #12646 (Resolved): FRR: Feature request: Expose "nht resolve-via-default" in GUI: Tested against:... Danilo Zrenjanin
10:35 AM pfSense Docs Todo #12627 (Closed): Feedback on pfSense Configuration Recipes — WireGuard Site-to-Site VPN Configuration Example: Merged this a few days ago Jim Pingle
09:40 AM pfSense Packages Bug #12206 (Feedback): Certificate Manager page doesn't show Net-SNMP used certificates: Merged Viktor Gurov
08:57 AM pfSense Packages Bug #12206 (Pull Request Review): Certificate Manager page doesn't show Net-SNMP used certificates: Jim Pingle
09:37 AM Bug #12654: Nat issue after 20211220 version: This appears to affect any traffic using outbound NAT from an IP on the firewall itself. So, for example, localhost:
... Steve Wheeler
08:49 AM Bug #12654 (Resolved): Nat issue after 20211220 version: Upgrading to version 20211220+ results in loss of pfSense box internet connection *if Outbound NAT Source "any" is us... Viktor Gurov
09:10 AM pfSense Packages Bug #12623: acme.sh package | DNS-ISPConfig settings: upstream fix:
https://github.com/acmesh-official/acme.sh/pull/3868 Viktor Gurov
08:37 AM pfSense Packages Regression #12653 (Feedback): RIP related startup error: Merged Viktor Gurov
07:31 AM pfSense Packages Regression #12653 (Pull Request Review): RIP related startup error: Jim Pingle
04:35 AM pfSense Packages Regression #12653: RIP related startup error: workaround:... Viktor Gurov
04:23 AM pfSense Packages Regression #12653 (Resolved): RIP related startup error: ... Viktor Gurov
07:36 AM Bug #11984 (Pull Request Review): Automatic Outbound NAT mode can create incorrect rules in some cases: Jim Pingle
06:22 AM Bug #11984: Automatic Outbound NAT mode can create incorrect rules in some cases: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/540 Viktor Gurov
07:31 AM Bug #12652 (Not a Bug): Firewall Alias: Fatal Error - Upgrade from 2.5.0 to 2.5.2: You have a problem with your installation, that isn't from a bug.
This site is not for support or diagnostic discu... Jim Pingle
03:58 AM Bug #12652 (Not a Bug): Firewall Alias: Fatal Error - Upgrade from 2.5.0 to 2.5.2: After upgrading, I saw some errors in the notifications (Attached screenshots).
I can no longer edit my existing A... Kyle Keagy
07:29 AM Regression #12183: Changing MAC address for PPP parent interface stopped working: That page doesn't mention spoofing the MAC now, and needing to spoof it with PPPoE is so rare I don't think that it's... Jim Pingle
03:55 AM Regression #12183: Changing MAC address for PPP parent interface stopped working: Jim Pingle wrote in #note-1:
> That was changed in #11387 to prevent the field from being set on interfaces which do... Viktor Gurov
04:45 AM Bug #12638: Telegram notification is broken: related to https://forum.netgate.com/topic/168768/nat-issue-after-20211220-version Viktor Gurov
04:17 AM Bug #6289: IPv6 address not given to track6 interfaces on create: dhcp6c needs to be restarted to add and a new track interface to dhcp6c.conf Viktor Gurov
04:06 AM Bug #9471 (Feedback): GIF tunnel not added to interface group after reboot: Could you test it on the latest development snapshot? Viktor Gurov
04:00 AM Bug #11872: gif interfaces reporting incorrect traffic counters: Maybe related to #11759 Viktor Gurov
04:00 AM Bug #11759: Traffic graphs on dashboard double upload on pppoe links: net blues wrote in #note-3:
> It happens when comparing pppoe traffic and physical interface. Physical shows correct... Viktor Gurov
03:44 AM pfSense Packages Regression #12643: Rule categories are cleared after clicking the save button on the Global Settings page: Marcos Mendoza wrote in #note-4:
> I still see the following issue noted in the related bug report:
> 1) The @Delet... Viktor Gurov

12/29/2021

06:44 PM Revision 50907bc8: Revise OpenVPN server save functions for MVC: Steve Beaver
04:06 PM Revision f840fb17: Refactor OpenVPNServer edit/duplicate for MVC: Steve Beaver
02:17 PM Revision 7161c4e0: OpenVPNServer code refactored for MVC: Steve Beaver
01:50 PM Feature #11790 (Rejected): Support hiding interface groups via special tag: Closing in response to discussion in the github merge request. Christian McDonald
01:43 PM Bug #11494 (Rejected): Wireguard interface sends ICMP Redirect when routing between two peers: Unable to replicate.
We can revisit if someone can demonstrate that this issue is still valid. Christian McDonald
11:55 AM Bug #12651 (Closed): ``nginx`` logs an error that the port is already in use when restarting Captive Portal services: After restarting Captive Portal on the Status / Services page or via clicking the restart icon, an error occurs:
<pr... Viktor Gurov
10:21 AM pfSense Packages Feature #12646 (Feedback): FRR: Feature request: Expose "nht resolve-via-default" in GUI: Merged Viktor Gurov
09:53 AM Revision 49eba660: Fix SSH keys permissions on restore. Fixes #12637: Viktor Gurov
09:36 AM pfSense Packages Bug #10937 (Feedback): HAProxy frontend and backend entry limit: Merged Viktor Gurov
07:51 AM pfSense Packages Bug #10937 (Pull Request Review): HAProxy frontend and backend entry limit: Jim Pingle
04:14 AM pfSense Packages Bug #10937: HAProxy frontend and backend entry limit: fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/159 Viktor Gurov
06:06 AM pfSense Packages Feature #11130 (Feedback): FRR RIP support: Merged Viktor Gurov
06:03 AM pfSense Packages Bug #12386 (Feedback): ```bgp as-path``` and ```bgp community-list``` are present in configuration even when BGP daemon is not enabled: Merged Viktor Gurov
04:57 AM pfSense Plus Bug #12607: Instability with Snort Inline with AWS Instances: Need to test with the latest 22.01/2.6 snapshot - ena(4) updated from 2.2.0 to 2.4.1 in FreeBSD 12.3
see https://www... Viktor Gurov
04:39 AM pfSense Packages Bug #12205 (Feedback): Certificate Manager page doesn't show Squid used certificates: Merged Viktor Gurov
04:33 AM pfSense Packages Bug #12339 (Feedback): SyslogNG PHP errors after starting the service: Merged Viktor Gurov
04:00 AM Bug #12637 (Feedback): Incorrect SSH key permission after restore: Applied in changeset commit:49eba6609d52d9fca416fd487937c37f1daf98dc. Viktor Gurov
03:54 AM Bug #12649: Allowed IP/Hostname "Direction" option is never used: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/539 Viktor Gurov

12/28/2021

08:52 PM pfSense Packages Regression #12643: Rule categories are cleared after clicking the save button on the Global Settings page: Tested the patch and it works well; the categories no longer reset.
I still see the following issue noted in the r... Marcos M
01:17 PM Bug #12649 (Closed): Allowed IP/Hostname "Direction" option is never used: The "Direction" (@dir@ in config) is never used in the @captiveportal_allowedip_configure_entry()@:
https://github.c... Viktor Gurov
12:50 PM Revision 1fa4c473: Do not update Dynamic DNS if the public IP address cannot be determined. Fixes #12617: Viktor Gurov
11:55 AM Bug #11285 (Closed): Kernel crash on ALTQ-enabled wg interfaces: The current validation logic in traffic shaper prevents enabling traffic shaping on tun_wgN interfaces built by the W... Christian McDonald
11:41 AM Bug #11613 (Rejected): Pushing WireGuard traffic out a specific GW using static routes requires a reboot to revert.: This is no longer an issue. Christian McDonald
11:41 AM Bug #11450 (Rejected): Problem with IPv6 netmask /128 in WireGuard: Unable to reproduce with current WireGuard implementation. Christian McDonald
10:44 AM Bug #12648: Undocumented variables 'listenporthttp' and 'listenporthttps': another port overlap issue - #5786 Viktor Gurov
10:06 AM Bug #12648: Undocumented variables 'listenporthttp' and 'listenporthttps': I seem to recall that was intentional, as it let people who really needed to adjust it do so by altering config.xml b... Jim Pingle
09:59 AM Bug #12648 (New): Undocumented variables 'listenporthttp' and 'listenporthttps': It's not possible to set the variables 'listenporthttp' and 'listenporthttps' via WebGUI
and there is no mention in ... Viktor Gurov
07:28 AM pfSense Docs Correction #12647 (Rejected): Feedback on Virtual Private Networks — IPsec — IPsec Configuration: Already fixed in the staged docs a while ago.
http://stage-v22.01.docs.netgate.com/pfsense/en/latest/vpn/ipsec/con... Jim Pingle
03:49 AM pfSense Docs Correction #12647: Feedback on Virtual Private Networks — IPsec — IPsec Configuration: https://gitlab.netgate.com/docs/pfSense-docs/-/merge_requests/28 Viktor Gurov
03:40 AM pfSense Docs Correction #12647: Feedback on Virtual Private Networks — IPsec — IPsec Configuration: see https://redmine.pfsense.org/projects/pfsense/repository/1/revisions/81949bee72813bbd8b57b75563cd40b9cdaf68e0 Viktor Gurov
03:38 AM pfSense Docs Correction #12647 (Rejected): Feedback on Virtual Private Networks — IPsec — IPsec Configuration: *Page:* https://docs.netgate.com/pfsense/en/latest/vpn/ipsec/configure.html
*Feedback:*... Viktor Gurov
07:25 AM pfSense Packages Feature #12646 (Pull Request Review): FRR: Feature request: Expose "nht resolve-via-default" in GUI: Jim Pingle
04:19 AM pfSense Packages Feature #12646: FRR: Feature request: Expose "nht resolve-via-default" in GUI: https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/158 Viktor Gurov
07:25 AM Regression #12617 (Feedback): Dynamic DNS client updates using a private IP address when it cannot determine the public IP address: Applied in changeset commit:1fa4c4731bca54652becfb6737bdc3ea8851d6b7. Viktor Gurov
07:11 AM Regression #12617 (Pull Request Review): Dynamic DNS client updates using a private IP address when it cannot determine the public IP address: Jim Pingle
06:52 AM Regression #12617: Dynamic DNS client updates using a private IP address when it cannot determine the public IP address: same fix for DynDNS (non-RFC2136):
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/538 Viktor Gurov
07:12 AM Todo #12624 (Pull Request Review): Reorganize UPnP options: Jim Pingle
05:58 AM Todo #12624: Reorganize UPnP options: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/537 Viktor Gurov

12/27/2021

11:40 PM pfSense Packages Feature #12646 (Resolved): FRR: Feature request: Expose "nht resolve-via-default" in GUI: Multiple scenarios exist where frr.conf needs to contain
@!
ip nht resolve-via-default
ipv6 nht resolve-via-def... M Felden
03:28 PM Bug #12645 (Pull Request Review): ``filterdns`` does not monitor remote IPsec gateways for IPv6 address changes: Jim Pingle
01:35 PM Bug #12645: ``filterdns`` does not monitor remote IPsec gateways for IPv6 address changes: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/535 Viktor Gurov
01:18 PM Bug #12645 (Resolved): ``filterdns`` does not monitor remote IPsec gateways for IPv6 address changes: if Internet Protocol = IPv6 and Remote Gateway is FQDN, IPv6 address changes are not tracked
@add_hostname_to_watch(... Viktor Gurov
03:02 PM Revision dd00c97d: Remove keeping old packages: We thought this would be useful if we needed to switch back to an
older version of the repo, but we have never used i... Brad Davis
02:36 PM Revision c3474eef: Ignore DynDNS requestif for non-custom providers. Fixes #12631: Viktor Gurov
02:25 PM Revision 8a6fea89: Use installer_copied_config as an extra data restore trigger. Issue #12518: Viktor Gurov
02:08 PM pfSense Docs Todo #12639 (Feedback): Feedback on System Monitoring — System Logs: I cleaned up quite a few outdated clog references and other related info, and updated things to refer to plain text l... Jim Pingle
12:23 PM pfSense Packages Bug #12424 (Resolved): OpenVPN silent install uses incorrect parameters: Works well - tested on Windows 10x64. Marcos M
12:16 PM pfSense Packages Bug #12642 (Feedback): suricata_get_vpns_list() does not include OpenVPN CSO: Merged Viktor Gurov
04:16 AM pfSense Packages Bug #12642: suricata_get_vpns_list() does not include OpenVPN CSO: https://github.com/pfsense/FreeBSD-ports/pull/1132 Viktor Gurov
03:49 AM pfSense Packages Bug #12642 (Resolved): suricata_get_vpns_list() does not include OpenVPN CSO: "Pass List -> Auto-Generated IP Addresses -> VPN Addresses" does not include OpenVPN Client Specific Override
sam... Viktor Gurov
12:16 PM pfSense Packages Regression #12643 (Feedback): Rule categories are cleared after clicking the save button on the Global Settings page: Merged Viktor Gurov
05:54 AM pfSense Packages Regression #12643: Rule categories are cleared after clicking the save button on the Global Settings page: fix:
https://github.com/pfsense/FreeBSD-ports/pull/1133 Viktor Gurov
04:25 AM pfSense Packages Regression #12643 (Resolved): Rule categories are cleared after clicking the save button on the Global Settings page: After clicking the save button on the Global Settings page all rule categories are removed from all interfaces
and I... Viktor Gurov
10:15 AM Regression #12631 (Feedback): Dynamic DNS may not use the correct interface when updating during failover: Applied in changeset commit:c3474eef834d4b77631e961c5569254a8094b12f. Viktor Gurov
08:14 AM Regression #12631 (Pull Request Review): Dynamic DNS may not use the correct interface when updating during failover: Jim Pingle
10:06 AM pfSense Docs Todo #12634 (Closed): Feedback on Services — DNS Resolver — Host Overrides: Fixed: https://gitlab.netgate.com/docs/pfSense-docs/-/commit/5e6d2a97ad2cf84ff4cbdef07da85799285572e7 Jim Pingle
09:32 AM pfSense Docs Correction #12540 (Duplicate): Feedback on pfSense Configuration Recipes — WireGuard Site-to-Site VPN Configuration Example: Will be tracking as https://redmine.pfsense.org/issues/12627
Closing as duplicate. Christian McDonald
09:28 AM pfSense Docs Todo #12627 (Pull Request Review): Feedback on pfSense Configuration Recipes — WireGuard Site-to-Site VPN Configuration Example: Christian McDonald
09:28 AM pfSense Docs Todo #12627: Feedback on pfSense Configuration Recipes — WireGuard Site-to-Site VPN Configuration Example: Fixed here: https://gitlab.netgate.com/docs/pfSense-docs/-/merge_requests/27
Also added some clarification in respon... Christian McDonald
08:49 AM pfSense Docs Todo #12627: Feedback on pfSense Configuration Recipes — WireGuard Site-to-Site VPN Configuration Example: That does appear to be a typo, thanks for letting us know! Jim Pingle
09:26 AM pfSense Docs Correction #12644 (Duplicate): WireGuard S2S Recipe Corrections: (Closed as duplicate of https://redmine.pfsense.org/issues/12627) Christian McDonald
09:11 AM pfSense Docs Correction #12644: WireGuard S2S Recipe Corrections: https://gitlab.netgate.com/docs/pfSense-docs/-/merge_requests/27 Christian McDonald
09:09 AM pfSense Docs Correction #12644 (Duplicate): WireGuard S2S Recipe Corrections: # Fixed some typos concerning the tunnel subnet.
# Added a few notes concerning RFC5737 addresses and routing. Christian McDonald
08:41 AM pfSense Plus Bug #12641 (Not a Bug): OpenVPN GUI Config Editor removes newlines of "Custom options" field in parsing: This is expected behavior and not a bug. As stated in the text under that field and in the documentation, directives ... Jim Pingle
08:29 AM Feature #12636 (Pull Request Review): Automatically create DNS Resolver ACLs for OpenVPN CSO entries: Jim Pingle
08:20 AM Bug #12637 (Pull Request Review): Incorrect SSH key permission after restore: Jim Pingle
08:18 AM Feature #12518 (Pull Request Review): Restore RRD and extra data from configuration backups when restoring during installation: Jim Pingle
08:17 AM Bug #12635 (Pull Request Review): PHP: Error generated when backing up a config file with SSH disabled: Jim Pingle
08:15 AM Bug #12633 (Pull Request Review): Gateway monitoring should mark gateway as "offline" on PPPoE parent interface disconnect: Jim Pingle
08:12 AM Bug #12630 (Not a Bug): States are always created on the default gateway interface.: This is the expected behavior. The outgoing interface is chosen by the operating system routing table and can't be in... Jim Pingle
08:00 AM Feature #9544: Enable ``ROUTE_MPATH`` multipath routing: If that is the case, then we'll pick it up naturally when we rebase onto 13.x or later and we can close this at that ... Jim Pingle
07:55 AM Bug #12628 (Pull Request Review): OpenVPN re-synchronization also synchronizes override entries unnecessarily in some cases: Jim Pingle
07:52 AM Feature #12392 (Pull Request Review): Allow the selection of "any" interface in floating rules: Jim Pingle
07:51 AM Bug #11864 (Pull Request Review): OpenVPN stays bound to previous IP address after interface changes: Jim Pingle
07:47 AM Feature #8861 (Pull Request Review): Show SFP module details on ``status_interfaces.php``: Jim Pingle
03:28 AM Bug #12640 (Duplicate): problem with ssh host key permissions after restore from backup, sshd fails to start: Duplicate of #12637 Viktor Gurov

12/26/2021

03:22 PM pfSense Plus Bug #12641 (Not a Bug): OpenVPN GUI Config Editor removes newlines of "Custom options" field in parsing: # Create an OpenVPN Server using the UI with multiple "custom options", e.g. two Push directives like... Sebastian Wagner
09:09 AM Bug #12640 (Duplicate): problem with ssh host key permissions after restore from backup, sshd fails to start: _figured this should be on redmine, so this is a xpost from https://forum.netgate.com/topic/168618/22-01-problem-with... → luckman212
08:46 AM pfSense Docs Todo #12639 (Closed): Feedback on System Monitoring — System Logs: *Page:* https://docs.netgate.com/pfsense/en/latest/monitoring/logs/index.html
*Feedback:*
The content of the 3r... Steve Tremayne

12/25/2021

02:42 PM pfSense Packages Feature #6651: Loopback interfaces: lo0/Loopback is added
https://redmine.pfsense.org/issues/11186 Alhusein Zawi
12:34 PM pfSense Docs Correction #12469 (Resolved): Automatic outbound NAT rules are applied to the WG interface: Tested against:... Danilo Zrenjanin
11:01 AM Feature #11750 (Resolved): Support for network interfaces using the ``qlnxe`` driver: Tested against:... Danilo Zrenjanin
07:16 AM Bug #12632: Changing an interface IP address and gateway at the console does not save the new gateway if one already exists for the interface: seems to be fixed in #11581
please test on the latest development snapshot Viktor Gurov

12/24/2021

12:38 PM Bug #12638 (Closed): Telegram notification is broken: not an issue, something wrong with my appliance Viktor Gurov
12:31 PM Bug #12638: Telegram notification is broken: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/534 Viktor Gurov
12:27 PM Bug #12638 (Closed): Telegram notification is broken: Error message:... Viktor Gurov
11:11 AM Feature #12636: Automatically create DNS Resolver ACLs for OpenVPN CSO entries: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/533 Viktor Gurov
10:27 AM Feature #12636 (Resolved): Automatically create DNS Resolver ACLs for OpenVPN CSO entries: DNS Resolver creates ACLs OpenVPN client/server IPv4/IPv6 tunnel networks entries,
but not for Client Specific Overr... Viktor Gurov
10:53 AM Bug #12637: Incorrect SSH key permission after restore: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/532 Viktor Gurov
10:49 AM Bug #12637 (Resolved): Incorrect SSH key permission after restore: restore_sshdata() must set 600 permission mode for *_key files:... Viktor Gurov
09:24 AM pfSense Packages Feature #6651 (Feedback): Loopback interfaces: Merged Viktor Gurov
09:23 AM pfSense Packages Bug #12420 (Resolved): rc file is not deleted: Tested with PIMD 0.0.3_5
/usr/local/etc/rc.d/pimd.sh is removed when the service is disabled. Marking the ticket r... Max Leighton
08:49 AM Feature #12518: Restore RRD and extra data from configuration backups when restoring during installation: fix:
https://gitlab.netgate.com/pfSense/FreeBSD-src/-/merge_requests/43
https://gitlab.netgate.com/pfSense/pfSe... Viktor Gurov
07:03 AM Feature #12518: Restore RRD and extra data from configuration backups when restoring during installation: bsdinstaller does not create the '/cf/conf/trigger_restore_config_after_bsdinstall' file for some reason (https://git... Viktor Gurov
05:57 AM pfSense Packages Bug #12206: Certificate Manager page doesn't show Net-SNMP used certificates: https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/157 Viktor Gurov
01:33 AM Revision 407c9036: Merge branch 'pfsense:master' into master: Harley Peters

12/18/2021

04:59 PM Bug #7152: Unbound / DNS Resolver issue if "Register DHCP static mappings in the DNS Resolver" set before wildcard DNS custom options: Tested this on 2.5.2. Unable to reproduce issue any longer. This was likely resolved in a previous unbound update. Kris Phillips
04:41 PM Bug #5849: Routing fail on CARP IPsec: I haven't been able to reproduce this on the latest pfSense versions. Perhaps this functionality was improved in new... Kris Phillips
04:38 PM pfSense Packages Bug #12260: Update popup and version missmatch?: Freshports has 5.0 available in it. We should update ntop to the new version. Kris Phillips
04:32 PM Bug #7235: 4860 has not got significant IPsec performance rising with enabled HW acceleration: Sean McBride wrote in #note-2:
> I have a 4860 running newest pfsense, and I use IPSec. How could I do performance ... Kris Phillips
04:15 PM pfSense Packages Feature #11022: Add feeds from Firebog.net to pfBlockerNG: pfBlockerNG does not have a feeds section, but pfBlockerNG-devel 3.1.0 has a feeds list which now include firebog - S... Jordan G
02:58 PM Feature #12316 (Resolved): Include firewall rules generated from OpenVPN RADIUS ACL entries in status output: Tested on
2.6.0-BETA (amd64)
built on Fri Dec 17 17:03:58 UTC 2021
FreeBSD 12.3-STABLE
I see the OpenVPN-Gene... Max Leighton
02:56 PM Feature #12321 (Resolved): Pop-up window to view firewall rules generated from RADIUS ACL entries on the OpenVPN status page: Tested on
2.6.0-BETA (amd64)
built on Fri Dec 17 17:03:58 UTC 2021
FreeBSD 12.3-STABLE
I can see the RADIUS A... Max Leighton
11:12 AM Bug #12614 (Resolved): Pushover notifications fail: Tested against the:... Danilo Zrenjanin

12/17/2021

09:33 PM Feature #12342 (Resolved): Dynamic DNS client proxy support: check box is shown up if Proxy URL is added in Proxy Support.
2.6.0.b.20211217.1435
Alhusein Zawi
01:59 PM Revision 4dde40ec: Pushover notifications fix. Issue #12614: Viktor Gurov
01:44 PM Bug #12374 (Resolved): Update python to address vulnerabilities < 3.8.12: 22.01.b.20211216.1427 and 2.6.0.b.20211217.1435 uses python38-3.8.12_1 Viktor Gurov
01:42 PM Bug #12434 (Resolved): Multiple cURL Vulnerabilities: Viktor Gurov
01:32 PM Bug #12614 (Feedback): Pushover notifications fail: Merged Viktor Gurov
08:22 AM Bug #12614 (Pull Request Review): Pushover notifications fail: Jim Pingle
08:00 AM Bug #12614: Pushover notifications fail: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/514 Viktor Gurov
07:41 AM Bug #12614 (Resolved): Pushover notifications fail: https://forum.netgate.com/topic/168178/pushover-notifications-fail-to-work:... Viktor Gurov
12:24 PM Regression #12617 (Closed): Dynamic DNS client updates using a private IP address when it cannot determine the public IP address: Under some conditions the dyndns up client can send a private IP address even though 'Use public IP' is set.
For e... Steve Wheeler
11:28 AM Feature #12616: Option to filter state table contents by rule ID: See also: https://redmine.pfsense.org/issues/12092 Utilize new ``pfctl`` ability to kill states by label Steve Wheeler
11:28 AM Feature #12616 (Resolved): Option to filter state table contents by rule ID: The Diag > States page can already filter by ruleid but only when the page is called with that via the firewall rules... Steve Wheeler
10:49 AM Bug #12585: ``rc.notify_message`` only sends notifications via SMTP: Updating subject for release notes. Jim Pingle
10:48 AM Bug #12589: Dynamic DNS updates do not respect certificate authority trust store: Updating subject for release notes. Jim Pingle
10:47 AM Bug #12352: Update Dynamic DNS code for one.com to use their new login process: Updating subject for release notes. Jim Pingle
09:36 AM Regression #12615: MAC passthrough does not work on the latest snapshot: ipfw show output:... Viktor Gurov
09:01 AM Regression #12615 (Resolved): MAC passthrough does not work on the latest snapshot: CP login page always appears
config.xml is ok:... Viktor Gurov
08:46 AM Bug #11142: rc.newwanip restarts VPN services when the IP matches: original user issue:
"We've noticed every X hours that services restart on our pfSense FW and this results in people... Viktor Gurov
08:31 AM Bug #12590 (Pull Request Review): Dynamic DNS custom IPv6 service fails on 6rd tunnels: Jim Pingle
08:25 AM Bug #12590: Dynamic DNS custom IPv6 service fails on 6rd tunnels: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/515 Viktor Gurov
07:37 AM Bug #12612 (Pull Request Review): DNS Resolver is restarted during every ``rc.newwanip`` event even for interfaces not used in the resolver: Jim Pingle
06:46 AM Bug #12612: DNS Resolver is restarted during every ``rc.newwanip`` event even for interfaces not used in the resolver: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/513 Viktor Gurov
06:33 AM Bug #12612 (Resolved): DNS Resolver is restarted during every ``rc.newwanip`` event even for interfaces not used in the resolver: Regardless of the use of the interface in the DNS Resolver configuration, it's restarted at every rc.newwanip event
... Viktor Gurov
07:36 AM Bug #12611 (Pull Request Review): SNMP daemon is restarted during every ``rc.newwanip`` event: Jim Pingle
06:29 AM Bug #12611: SNMP daemon is restarted during every ``rc.newwanip`` event: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/512 Viktor Gurov
05:41 AM Bug #12611 (Resolved): SNMP daemon is restarted during every ``rc.newwanip`` event: Regardless of the use of the interface in the SNMP daemon configuration, it's restarted at every rc.newwanip event
... Viktor Gurov
07:35 AM Bug #12610 (Pull Request Review): Dynamic DNS services are restarted at every rc.newwanip event, regardless of whether the IP is changed or not: Jim Pingle
05:34 AM Bug #12610: Dynamic DNS services are restarted at every rc.newwanip event, regardless of whether the IP is changed or not: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/511 Viktor Gurov
05:27 AM Bug #12610 (Duplicate): Dynamic DNS services are restarted at every rc.newwanip event, regardless of whether the IP is changed or not: They should only run on the new/changed IP address Viktor Gurov
07:32 AM Bug #12609 (Pull Request Review): IGMP Proxy server is restarted during every ``rc.newwanip`` event: Jim Pingle
05:25 AM Bug #12609: IGMP Proxy server is restarted during every ``rc.newwanip`` event: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/510 Viktor Gurov
03:51 AM Bug #12609 (Resolved): IGMP Proxy server is restarted during every ``rc.newwanip`` event: Regardless of the use of the interface in the IGMP Proxy configuration, it's restarted at every rc.newwanip event
... Viktor Gurov
07:25 AM Bug #12613 (Resolved): DNS Resolver does not restart during link up/down events on a static IP address interface: How to reproduce:
1) Configure the interface with Static IPv4
2) Select this interface in the "Network Interfaces... Viktor Gurov

12/16/2021

07:06 PM Revision 7054b63f: Use Trusted Store CAs for Dynamic DNS. Fixes #12589: Viktor Gurov
05:57 PM Revision da836151: Bounce dipinger when bringing down interface that has a gateway: Christian McDonald
05:12 PM Revision fc31c0dd: Restart RADVD on interface IPv6 address change. Fixes #12604: Viktor Gurov
04:47 PM Revision 5cf7119e: Fix autoloader paths: Without this change composer will put this in autoloader_static:
'pfSense\\' => array($baseDir . '/../../../../../..... Brad Davis
03:46 PM Bug #11142: rc.newwanip restarts VPN services when the IP matches: Pretty sure this breaks gateway monitoring when the WAN comes back on the same IP.
See https://redmine.pfsense.org... Scott Silver
03:46 PM Regression #11570: Gateway monitoring services is not always restarted on interface events, which may prevent a WAN from recovering back to an online state: Note that https://redmine.pfsense.org/issues/11142 was the bug that someone fixed that tries to solve some other prob... Scott Silver
01:03 PM Regression #11570: Gateway monitoring services is not always restarted on interface events, which may prevent a WAN from recovering back to an online state: I think I may have tracked down one of the problems here. It seems that pfSense is forgetting to reset the gateway mo... Scott Silver
03:14 PM pfSense Packages Bug #12608 (New): WireGuard tunnels monitored by dpinger causing system to stop routing completely in certain situations: Current workaround is to disable gateway monitoring on WireGuard tunnel gateways.
(I will be noting observations h... Christian McDonald
02:34 PM Regression #12581: Non Link-Local IPv6 CARP address does not get advertised to endpoints with RADVD: Please note: RFC compliant clients *must not* accept a router unless it is a link-local address (see "RFC4861 section... znerol znerol
01:15 PM pfSense Plus Bug #12607 (Closed): Instability with Snort Inline with AWS Instances: The ena driver seems to have instability when enabling inline snort. Because AWS is behind NAT Legacy mode is not vi... Kris Phillips
01:15 PM Bug #12589 (Feedback): Dynamic DNS updates do not respect certificate authority trust store: Applied in changeset commit:7054b63fc56fec307577c978d10f88e552141e53. Viktor Gurov
12:35 PM Bug #12589 (Pull Request Review): Dynamic DNS updates do not respect certificate authority trust store: Jim Pingle
12:31 PM Bug #12589: Dynamic DNS updates do not respect certificate authority trust store: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/509 Viktor Gurov
12:42 PM Bug #11416: OpenVPN IPv4 Tunnel Network incorrectly allows hostnames: Yes, I can confirm it's not fixed yet.
Tested against:... Danilo Zrenjanin
12:33 PM Feature #12325 (Resolved): IPv6 support for base system SNMP service: Tested against:... Danilo Zrenjanin
12:07 PM Bug #11764 (Pull Request Review): IPv6 link local gateway default status not indicated in GUI: Jim Pingle
11:58 AM Bug #11764: IPv6 link local gateway default status not indicated in GUI: it's better to have a separate fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/508 Viktor Gurov
05:01 AM Bug #11764: IPv6 link local gateway default status not indicated in GUI: fix in https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/336#note_46591 Viktor Gurov
11:20 AM Bug #12604 (Feedback): IPv6 interface prefix change not reflected in RADVD configuration: Applied in changeset commit:fc31c0dd22d5212c22696ec24f8ab174f22279bb. Viktor Gurov
10:30 AM Bug #12604 (Pull Request Review): IPv6 interface prefix change not reflected in RADVD configuration: Jim Pingle
06:06 AM Bug #12604: IPv6 interface prefix change not reflected in RADVD configuration: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/505 Viktor Gurov
05:23 AM Bug #12604 (Resolved): IPv6 interface prefix change not reflected in RADVD configuration: https://forum.netgate.com/topic/168410/ipv6-prefix-change-not-reflected-in-ra-messages:
"This may pre-date 20211210,... Viktor Gurov
11:18 AM Bug #11960: Gateway Monitoring Traffic Goes Out Default Gateway: James Blanton wrote in #note-3:
> UPDATE! Bug only exists upon "link down"
Unable to reproduce on 22.01.b.2021121... Viktor Gurov
10:10 AM Bug #12606: ``devd`` is not configured to act on USB interface attach/detach events: A WAN connectivity failure shouldn't cause the ue0 interface to disappear and reappear, though. Unless that's a new m... Jim Pingle
09:24 AM Bug #12606: ``devd`` is not configured to act on USB interface attach/detach events: Jim Pingle wrote in #note-1:
> Since we do not support hotplugging interfaces and a USB interface couldn't be assign... Viktor Gurov
08:25 AM Bug #12606: ``devd`` is not configured to act on USB interface attach/detach events: Since we do not support hotplugging interfaces and a USB interface couldn't be assigned and unplug/replug like that, ... Jim Pingle
08:20 AM Bug #12606 (Resolved): ``devd`` is not configured to act on USB interface attach/detach events: There us no rc.linkup events on USB modem attach/detach:
Detach:... Viktor Gurov
08:24 AM pfSense Plus Feature #12546: Add 2FA Support to pfSense Plus Local Database Authentication: Yes please! Eyvind Baadnes
08:23 AM Feature #4242: Two Factor or OTP Authentication for Admin Interface: We would like to see this implemented. This year we have seen a big increase from companies requiring this feature. A... Eyvind Baadnes
07:47 AM Regression #12605 (Resolved): ``diag_dump_states.php`` no longer filters by rule ID: The webgui state table output can be filtered by rule ID by calling it directly, for example:
https://26dev.stevew.l... Steve Wheeler
05:11 AM Feature #12416 (Resolved): Support OpenVPN ``client-kill`` to terminate remote clients instead of clearing their session: Tested again. This time against:... Danilo Zrenjanin
04:36 AM Bug #11662 (Resolved): QinQ using OpenVPN ``ovpn`` interface as a parent is not configured at boot time: I have overseen the fact that OpenVPN must be in TAP mode.
Tested QinQ with OpenVPN in TAP mode as a parent interf... Danilo Zrenjanin
03:17 AM Bug #11662: QinQ using OpenVPN ``ovpn`` interface as a parent is not configured at boot time: I replicated the issue on the following:... Danilo Zrenjanin
03:27 AM Feature #11496 (Resolved): Support for NTP Peer mode: Tested against:... Danilo Zrenjanin
02:50 AM Bug #10513: State issues with policy routing and HA failover: Tested in 2.5.2. This seems to still be a big issue.
pfSync is basically useless on a Multi-WAN setup, all states fr... Jose Duarte

12/15/2021

04:38 PM Revision e7de40d5: One.com DDNS update. Issue #12352: (cherry picked from commit 9a84d3b0b5e4709a5bde99d3edf4f8e89524b602) Viktor Gurov
03:25 PM Revision 26671c4d: Ensure we always save logs to S3, even when the built pkg list is the same: Brad Davis
01:08 PM Bug #12352 (Feedback): Update Dynamic DNS code for one.com to use their new login process: Merged Viktor Gurov
12:28 PM Todo #12601 (Pull Request Review): Optimize fw rules load on boot: Jim Pingle
12:20 PM Todo #12601: Optimize fw rules load on boot: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/504 Viktor Gurov
10:53 AM Todo #12601: Optimize fw rules load on boot: see also #12335 Viktor Gurov
10:53 AM Todo #12601 (Closed): Optimize fw rules load on boot: https://github.com/pfsense/pfsense/blob/master/src/etc/rc.bootup#L268-L274:... Viktor Gurov
11:00 AM Feature #12602 (New): DHCPv6 should allow DDNS Client updates for hosts: There is already a DDNS Option in the DHCPv6-Server but it can't be used together with the DDNS Client(s) in services... Bob Dig
10:45 AM Feature #12600 (New): allow custom mask for a network alias created from a FQDN: This is not IPv6 specific:
It would be nice if a network alias created from a FQDN could have a mask other then /128... Bob Dig
06:23 AM Bug #12003: Pie and ``fq_pie`` are missing options and do not handle floating point number input correctly: https://github.com/pfsense/pfsense/pull/4548 Viktor Gurov
06:23 AM Bug #12579: Utilize ``dnctl(8)`` to apply limiter changes without a filter reload: 1) #12003 should be merged first
2) Converting ipfw -> dnctl is not that difficult, but @dnctl(8)@ needs the "-f" op... Viktor Gurov

Also available in: Atom

Project

General

Profile

pfSense

Activity

Activity

01/13/2022

01/12/2022

01/11/2022

01/10/2022

01/09/2022

01/08/2022

01/07/2022

01/06/2022

01/05/2022

01/04/2022

01/03/2022

01/02/2022

01/01/2022

12/31/2021

12/30/2021

12/29/2021

12/28/2021

12/27/2021

12/26/2021

12/25/2021

12/24/2021

12/23/2021

12/22/2021

12/21/2021

12/20/2021

12/19/2021

12/18/2021

12/17/2021

12/16/2021

12/15/2021