Activity

30 days up to

User

Subprojects

Activity

From 05/27/2022 to 06/25/2022

06/25/2022

07:01 PM pfSense Docs Correction #11223 (Resolved): Azure Marketplace links are invalid: Chris W
07:01 PM pfSense Docs Correction #11223: Azure Marketplace links are invalid: Looks like this was fixed. The corrected links point to https://azuremarketplace.microsoft.com/en-us/marketplace/apps... Chris W
05:47 PM Bug #12544: OpenSSH vulnerabilities: This bug report can be closed. pfSense Plus 22.05 comes with OpenSSH 8.8p1, which is not vulnerable to any of these ... Kris Phillips
05:42 PM Bug #8207: 2.4 cannot boot as a Xen VM with more than 7 NICs: Due to lack of confirmation, this bug report should be rejected unless it can be verified that there is a problem on ... Kris Phillips
05:41 PM Bug #9626: When deny write permission is assigned to a user, there is no error feedback if the user tries to write something: Can confirm this is still an issue in 22.05 of pfSense Plus. There is no visual feedback or an error notification du... Kris Phillips
05:39 PM Bug #7996: Unnecessary link tag in login page: This is still present in pfSense Plus 22.05. Kris Phillips
05:38 PM pfSense Packages Bug #10602 (Resolved): Dashboard->Traffic Graphs bandwidth designations on hover pop-ups: Tested this on pfSense Plus 22.05. Not sure when this was fixed, but this looks to be resolved. Closing out this bu... Kris Phillips
05:34 PM pfSense Plus Bug #11626: Google LDAP connections fail due to lack of SNI for TLS 1.3: Jim Pingle wrote in #note-15:
> Nudge this ahead so we have more time to ensure there aren't any regressions from th... Kris Phillips
05:30 PM pfSense Plus Feature #12546: Add 2FA Support to pfSense Plus Local Database Authentication: Further expounding on this, it appears that Viscosity has native capability to add prompts in the client config.
... Kris Phillips
05:03 PM Feature #12466: Option to Disable Renegotiation timer in OpenVPN Server: Jim Pingle wrote in #note-9:
> Marcos Mendoza wrote in #note-7:
> > I created https://redmine.pfsense.org/issues/13... Kris Phillips
05:00 PM Bug #13003: Malicious Driver Detection event on ``ixl(4)`` driver: Christoph Vieten wrote in #note-5:
> Kris Phillips wrote in #note-3:
> > Christoph Vieten wrote in #note-2:
> > > ... Kris Phillips
03:25 PM pfSense Docs Todo #12770: Feedback on Firewall — Configuring firewall rules: Merge request:
https://gitlab.netgate.com/docs/pfSense-docs/-/merge_requests/42 Chris W
10:59 AM pfSense Packages Bug #11572: Auto created firewall rules have IPv4 as protocol only - even for IPv6 lists.: Still an issue in 2.6.0
Why not remove pfblockerNG from Repo if it's no more fixed and maintained anyway? Saves ti... Beat Siegenthaler
05:41 AM Bug #13301 (Duplicate): Bug #13239 = (?) = #12645 appease not fixed - ipv6 based ipsec vpn tunnel bug found with fqdn remote host: Hi,
I reported the bug earlier : https://redmine.pfsense.org/issues/13239#change-61632
ipv6 based ipsec vpn tun... Alex Zaykov
05:33 AM Bug #12645: ``filterdns`` does not monitor remote IPsec gateways for IPv6 address changes: tested on the latest built 22.05-RC (amd64) built on Fri Jun 17 06:34:36 UTC 2022
the bug is not fixed, Ipsec tunnel... Alex Zaykov

06/24/2022

10:10 PM Feature #13296: Add support for DHCP6 OPTION_PD_EXCLUDE (RFC 6603): It's where the bug entries are for FreeBSD ports are, and where a feature request can be submitted. Marcos M
04:16 PM Bug #9471 (Resolved): GIF tunnel not added to interface group after reboot: added GIF,LAN,PPPoE and GRE to the group of interfaces, GIF is added to the interface group after reboot
ifconfi... Alhusein Zawi
03:09 PM Revision 3222c70a: Omit VIPs from interface address selection. Fixes #11545: Add function get_interface_addresses() which wraps around pfSense_get_ifaddrs() and
filters VIPs before selecting an ... Reid Linnemann
02:50 PM pfSense Packages Bug #13261 (Feedback): Input validation rejects empty ``sudo`` command list, but GUI text says it can be empty: Merged: https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/commit/a056c1984a174248da0a0f8c541d9441678a2339 Christopher Cope
01:23 PM pfSense Packages Bug #13261 (Pull Request Review): Input validation rejects empty ``sudo`` command list, but GUI text says it can be empty: https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/251 Christopher Cope
11:31 AM pfSense Docs Correction #13300 (Resolved): Corrected Silabs driver URL: Jim Pingle
11:20 AM pfSense Docs Correction #13300 (Resolved): Corrected Silabs driver URL: Current link in the Windows tab of the Connecting to the Console Port pages for Netgate firewalls (excluding 1100 and... Chris W
11:21 AM pfSense Packages Bug #13299 (Resolved): Cron package needs basic input validation and output encoding: Tested and working as expected on... Christopher Cope
10:18 AM pfSense Packages Bug #13299 (Feedback): Cron package needs basic input validation and output encoding: Fixed: https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/commit/1a8a2f338592428dd46e543a884b1758b68198c9 Jim Pingle
10:09 AM pfSense Packages Bug #13299 (Resolved): Cron package needs basic input validation and output encoding: The cron package does not validate its inputs nor does it encode its output. This can lead to a potential stored XSS.... Jim Pingle
10:25 AM Regression #11545: Primary interface address is not always used when VIPs are present: I believe I have a fix for this issue. I created a variation on pfSense_get_interface_addresses() named pfSense_get_i... Reid Linnemann
10:15 AM Regression #11545 (Feedback): Primary interface address is not always used when VIPs are present: Applied in changeset commit:3222c70aaf783336901f7b1225727b5973ba865a. Reid Linnemann
07:47 AM Bug #13298: Dynv6 Dynamic DNS client does not check the response code when updating: PR: https://github.com/pfsense/pfsense/pull/4605 Jim Pingle
07:16 AM Feature #12466: Option to Disable Renegotiation timer in OpenVPN Server: Marcos Mendoza wrote in #note-7:
> I created https://redmine.pfsense.org/issues/13293 for that. Given that @auth-gen... Jim Pingle

06/23/2022

08:49 PM Revision adfb1d2b: fix: Dynv6 checkIP: Check return of update to release check IP Tiago d'Avila
07:49 PM pfSense Packages Bug #8454: Arpwatch package break email notifications from other sources: Is this still current as of 22.05? I just started playing with Arpwatch. What exactly does the "Disable Cron emails" ... → luckman212
04:01 PM Bug #13298: Dynv6 Dynamic DNS client does not check the response code when updating: *Testing*
Tested with https://dynv6.com Tiago Beling d'Avila
03:58 PM Bug #13298 (Resolved): Dynv6 Dynamic DNS client does not check the response code when updating: Check return of update to release check IP Tiago Beling d'Avila
12:04 PM Feature #13297 (New): Support for Gateway Groups as Static Route destinations: It could be interesting to have the possibility to use a group of gateways with static routes in a failover scenario.... Vincent D.
07:06 AM Regression #11316: Unbound crashes with signal 11 when reloading: Why is this closed ??
All was ok for my pfsense until a power outage.
I have pfsense 2.6 up to date and it has been... mururoa mururoa
01:31 AM Bug #13003: Malicious Driver Detection event on ``ixl(4)`` driver: Kris Phillips wrote in #note-3:
> Christoph Vieten wrote in #note-2:
> > Same happened on 2.6.0 with Intel x710-T4 ... Christoph Vieten

06/22/2022

09:31 PM Feature #13296: Add support for DHCP6 OPTION_PD_EXCLUDE (RFC 6603): @mmendoza was that last link you posted supposed to show something related? for me it just appears to be a list of ev... → luckman212
05:54 PM Feature #13296: Add support for DHCP6 OPTION_PD_EXCLUDE (RFC 6603): It's http://wide-dhcpv6.sourceforge.net/
See:
https://github.com/pfsense/FreeBSD-ports/tree/devel/net/dhcp6
http... Marcos M
04:47 PM Feature #13296: Add support for DHCP6 OPTION_PD_EXCLUDE (RFC 6603): I'm still hazy on exactly which dhcp6c implementation is currently shipping. I _thought_ it was the "hrs-allbsd/wide-... → luckman212
04:01 PM Feature #13296 (New): Add support for DHCP6 OPTION_PD_EXCLUDE (RFC 6603): Some ISPs are rolling out IPv6 and not directly providing a globally routable WAN address via DHCPv6. Instead, they a... Anonymous
09:04 PM Regression #11570: Gateway monitoring services is not always restarted on interface events, which may prevent a WAN from recovering back to an online state: hello guys
Configurator (Scope):
Interfaces: WAN-DHCP4|WAN2-DHCP4
Gateway Group: Failover (WAN_DHCP Gateway: 192... Alefe Ortiz
06:06 PM Feature #13294: Change gateway name: There's no functionality to rename the gateway/group and update all of the places where it could be used. That could ... Marcos M
10:27 AM Feature #13294 (New): Change gateway name: After clicking on a gateway on system_gateways_edit.php, which takes the user to e.g., system_gateways_edit.php?id=0,... Kay Avila
05:19 PM Revision d55e0d4b: fix func params for get_dpinger_status() call in gwlb.inc: → luckman212
04:15 PM Revision 7e9a12e9: Centralize the branches into builder_defaults.sh to simplify and eliminate overwriting the variables: Brad Davis
12:26 PM Bug #13295 (Resolved): Incorrect function parameters for ``get_dpinger_status()`` call in ``gwlb.inc``: There seems to be an error in @gwlb.inc@ around line 479. The call to @get_dpinger_status()@ has the @$action_disable... → luckman212
02:12 AM Revision 5ecee3d7: scrubing -> scrubbing: → luckman212

06/21/2022

03:47 PM Revision 098cdb61: Add version config for use by pfSense-repo: Brad Davis
02:37 PM Feature #12466: Option to Disable Renegotiation timer in OpenVPN Server: I created https://redmine.pfsense.org/issues/13293 for that. Given that @auth-gen-token@ handles the issue with frequ... Marcos M
02:35 PM Feature #13293 (New): Option to set auth-gen-token in OpenVPN GUI: This option is useful to avoid having to frequently manually re-authenticate when using MFA.
> --auth-gen-token [lif... Marcos M
12:06 PM pfSense Packages Feature #13292 (New): Separator: It'd be really nice if there was a way to add a separator to the certificates list in the ACME package. Nothing fanc... Marc Mapplebeck
10:22 AM pfSense Docs Todo #13291 (Duplicate): Notification documentation: I know there is documentation here on how to setup notification
https://docs.netgate.com/pfsense/en/latest/config/... Meme meme
01:00 AM Bug #13210: PPPoE server panics with multiple client connections: Sorry, wanted to add it here for documentation purpose but forgot to make it yesterday:... Jens Groh

06/20/2022

06:01 PM Regression #13290 (Feedback): Error ``dummynet: bad switch 21!`` when using Captive Portal with Limiters: There's not enough info here to troubleshoot this. Discussion of the issue may be continued on the forums: https://fo... Marcos M
02:25 PM Regression #13290 (Resolved): Error ``dummynet: bad switch 21!`` when using Captive Portal with Limiters: After upgrading from 2.6.0 to 2.7.0, my Captives Portal users are dropped randomly, having to re-authenticate... Ther... Rafael Ferreira
04:20 PM Bug #13210 (Resolved): PPPoE server panics with multiple client connections: Customer which was previously frequently hitting this issue reports it's been resolved after updating to the RC. Marcos M
04:04 PM Bug #10352: RADIUS authentication fails with MSCHAPv1 or MSCHAPv2 when passwords contain international characters: The issue is still present on 22.01-RELEASE
Any foreseen planning to fix this issue ?
Is someone working on it ? ma... Patrick Vander Linden
01:03 PM Feature #13286: webConfigurator does not redirect to requested page after login: I understand.
To be honest, one of my main reasons for wanting this merged was because my dashboard takes so darn l... → luckman212
12:52 PM Feature #13286: webConfigurator does not redirect to requested page after login: Some pages require parameters to load the right view, so stripping the parameters isn't helpful.
It is not going t... Jim Pingle
10:18 AM Feature #13286: webConfigurator does not redirect to requested page after login: But, again- nothing prevents a logged in user from bookmarking a page or recalling one from history that actions some... → luckman212
10:15 AM Feature #13286: webConfigurator does not redirect to requested page after login: Doesn't have to be an attack, they could also do it unintentionally by bookmarking or hitting a page from their histo... Jim Pingle
10:07 AM Feature #13286: webConfigurator does not redirect to requested page after login: Not sure I follow how this makes it any less secure than it already is. If a user is logged in already, they can stil... → luckman212
08:49 AM Feature #13286 (Rejected): webConfigurator does not redirect to requested page after login: This is done on purpose for security reasons. Until the entire GUI is purged of any page that takes action on GET, th... Jim Pingle
08:34 AM Feature #13286: webConfigurator does not redirect to requested page after login: PR: https://github.com/pfsense/pfsense/pull/4599 → luckman212
08:33 AM Feature #13286 (Rejected): webConfigurator does not redirect to requested page after login: Something that has bugged me for a while now is that if you are logged out of pfSense, and request a "deep" page e.g.... → luckman212
10:46 AM Bug #13289 (Resolved): Attempting to restore a 0 byte ``config.xml`` prints an error that the file cannot be read: When attempting to restore an empty config.xml file (0 bytes) the GUI prints an error saying the file cannot be read ... Jim Pingle
10:36 AM Bug #13288 (New): Encode FreeRADIUS Custom Options: Currently, fields in the FreeRADIUS package such as @varusersreplyitemsadditionaloptions@ are not encoded in config.x... Marcos M
10:33 AM Feature #13287 (New): Encode OpenVPN Custom Options: The @custom_options@ field for OpenVPN configurations is currently not encoded. This should be encoded in base64. Marcos M
07:46 AM Feature #12466: Option to Disable Renegotiation timer in OpenVPN Server: Both @auth-gen-token@ and @reneg-sec@ are useful in different ways, we should expose and (optionally) use both. Thoug... Jim Pingle
07:21 AM Bug #13285: Uncaught ArgumentCountError to function openvpn_kill_client(): Okay, thank you Jim for test and quick feedback. DRago_Angel [InV@DER]
07:20 AM Bug #13285 (Duplicate): Uncaught ArgumentCountError to function openvpn_kill_client(): There are no errors when terminating clients on the status page or widget on 22.05/2.7.0 snapshots. Jim Pingle
07:11 AM Bug #13285: Uncaught ArgumentCountError to function openvpn_kill_client(): Sorry, found https://redmine.pfsense.org/issues/12817 but it not mention status page, not sure 12817 also resolve Ope... DRago_Angel [InV@DER]
07:09 AM Bug #13285 (Duplicate): Uncaught ArgumentCountError to function openvpn_kill_client(): Killing session for user using OpenVPN Dashboard Widget or using OpenVPN Status page do not works.
On Widget next er... DRago_Angel [InV@DER]

06/19/2022

11:11 PM Bug #5413: Reduce disruptions when changing DNS records from DHCP leases in Unbound: Hey Netgate - I get the feeling this affects far more customers than you think.
Can this be assigned to someone to a... O E
09:34 PM Bug #12947: Old IPv6 addresses may continue to be used after DHCP or RA changes: Just updated "PR #4595":https://github.com/pfsense/pfsense/pull/4595 with the new mitigation changes. Testers & feedb... → luckman212
12:20 PM Bug #12947: Old IPv6 addresses may continue to be used after DHCP or RA changes: It appears we are out of luck on having @devd@ fire events for IP address changes. There is a commit: https://reviews... → luckman212
06:42 PM pfSense Plus Bug #13283 (Not a Bug): PBR forcing traffic out one WAN and back into another WAN with NAT Reflection Fails: Tested this.
With that PBR in place, even traffic that is being NAT'ed from the NAT Reflection rule will be caught... Marcos M
05:53 PM Bug #13243 (Pull Request Review): OpenVPN status for multi-user VPN shows info icon to display RADIUS rules when there are none to display: Marcos M
02:18 PM Bug #13243: OpenVPN status for multi-user VPN shows info icon to display RADIUS rules when there are none to display: This fixes the original issue:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/821
Reiner Keller wr... Marcos M
05:52 PM Feature #12466: Option to Disable Renegotiation timer in OpenVPN Server: It's better to implement @--auth-gen-token [lifetime]@
> --auth-gen-token [lifetime]
> After successful user/passwo... Marcos M
05:38 PM Feature #12982: Add support for RFC7499 in RADIUS library.: So are you saying that pfsense/freeRadius will not be able to go more then 68 rules? any software you know would be ... Frank Lee
03:58 PM Feature #12982: Add support for RFC7499 in RADIUS library.: I was able to replicate this with a simpler setup by adding a custom option to the @Additional RADIUS Attributes (REP... Marcos M
12:10 PM pfSense Packages Feature #13284 (New): Option to define "Issuer" in OPT configuration.: All QR codes are presently identifying as "FreeRADIUS(username).
Please add an optional variable in user->One-Time... Jakob Nordgarden
11:11 AM Bug #13280: Entries for ``net.link.ifqmaxlen`` duplicated in ``/boot/loader.conf``: I'm seeing this as well on a VM with @22.05.r.20220609.1919@.... Marcos M

06/18/2022

05:48 PM pfSense Plus Bug #13283 (Not a Bug): PBR forcing traffic out one WAN and back into another WAN with NAT Reflection Fails: Assuming the following configuration:
2 WAN interfaces WAN1 and WAN2
One LAN interface with Host A and Host B.
H... Kris Phillips
02:34 PM Bug #9296: Alias content is sometimes incomplete when an alias contains both FQDN and IP address entries: It seems this issue has gotten worse somewhere along the line similar to how others are describing it. Tables now lo... Kris Phillips
02:25 PM Bug #13282 (Resolved): Alias content is sometimes incomplete if the firewall cannot resolve an FQDN in the alias: If an invalid FQDN is present in an alias before a valid one, the entire table will be empty.
For an example, if... Kris Phillips

06/17/2022

07:24 PM Bug #13281 (Duplicate): Crash Reporter: Duplicate, and already fixed: #12817 Jim Pingle
06:49 PM Bug #13281 (Duplicate): Crash Reporter: Crash report begins. Anonymous machine information:
amd64
12.3-STABLE
FreeBSD 12.3-STABLE plus-RELENG_22_01-n20... Ilan Birman
04:10 PM Revision 3f4ee315: Template the versions as well: Brad Davis
03:31 PM Bug #13280 (Resolved): Entries for ``net.link.ifqmaxlen`` duplicated in ``/boot/loader.conf``: Using 22.05-RC 22.05.r.20220617.0613 Duplicate entries appear in /boot/loader.conf
Here are the contents of my loa... Keith Townsend
08:36 AM Bug #13243: OpenVPN status for multi-user VPN shows info icon to display RADIUS rules when there are none to display: Additional to this "informal" bug the ruleset given by Radius parameter isn't stored and when the renegiotion is done... Reiner Keller
07:34 AM Bug #13278 (Needs Patch): OpenVPN dynamic gateway created incorrectly when not pulling routes or server pushes no routes: We're aware of this, but it's an OpenVPN bug, not a bug in our code. As you see, the variables are unpopulated even w... Jim Pingle
01:10 AM Bug #13278: OpenVPN dynamic gateway created incorrectly when not pulling routes or server pushes no routes: This appears to be happening because OpenVPN doesn't populate these environment variables when either option is selec... Adrien Carlyle
07:09 AM Bug #13279 (New): DHCP config override affects Gateway installation.: If you check Configuration Override on the interface in the DHCP Client Configuration section, then open Status => In... Lev Prokofev
07:02 AM Regression #13274 (Resolved): OpenVPN override IPv4 tunnel network field changing value improperly: Working as expected on the latest build. The exact tunnel network address and mask remain, and the resulting @ifconfi... Jim Pingle

06/16/2022

11:54 PM Bug #12947: Old IPv6 addresses may continue to be used after DHCP or RA changes: @dem I believe I'm facing this exact issue, take a look at https://forum.netgate.com/topic/172849/rtsold-not-running-... → luckman212
10:31 PM Bug #13278 (Needs Patch): OpenVPN dynamic gateway created incorrectly when not pulling routes or server pushes no routes: IF: I configure OpenVPN client and set the "Don't pull routes" check box
OR
IF: I include the advanced option: pull... Adrien Carlyle
09:30 PM Regression #13167: DigitalOcean Dynamic DNS update fails with a "bad request" error: +1 Also having this problem : 2.6.0-RELEASE (amd64) Emmanuel Rosado
07:50 PM Bug #13277 (Duplicate): IGMP Proxy webConfigurator Page Always Produces Error: Whether your IGMP Proxy settings are correct or not, there is always an error stating "There was a problem applying t... Kris Phillips
07:48 PM Bug #13276 (New): IGMP Proxy Error Message for Logging Links to System Log Instead of Routing Log: If you try to apply a setting that won't apply in IGMP Proxy, it will state "There was a problem applying the changes... Kris Phillips

06/15/2022

03:16 PM Revision 230b2303: Fix OpenVPN override TN handling. Fixes #13274: Jim Pingle
10:42 AM pfSense Docs New Content #13211: OpenVPN DCO Documentation: Updates: https://gitlab.netgate.com/docs/pfSense-docs/-/commit/989cfa8946010d913fddeebc8d8fe740ba409390 Jim Pingle
10:25 AM Regression #13274 (Feedback): OpenVPN override IPv4 tunnel network field changing value improperly: Applied in changeset commit:230b23033a898633681ef0dde4df8f63a2b7258c. Jim Pingle
10:13 AM Regression #13274 (Resolved): OpenVPN override IPv4 tunnel network field changing value improperly: For an override on a subnet topology VPN, the mask on the tunnel network in the override has to reflect the subnet ma... Jim Pingle
03:44 AM Bug #11629: PPPoE WAN IP address different than expected when set static by ISP: We've installed 22.05 on our Netgate 2100 appliance and it's still assigning the wrong IP address to the WAN interfac... Dan Rice

06/14/2022

01:14 PM pfSense Packages Bug #13154: pfBlocker causing excessive CPU load: That one change looks to have solved the issue for me.
Testing in:... Steve Wheeler
01:04 PM pfSense Packages Bug #13154: pfBlocker causing excessive CPU load: Well... seeing that would have saved me a bunch of debugging... Denny Page
12:41 PM pfSense Packages Bug #13154: pfBlocker causing excessive CPU load: For reference, the redmine for that issue is here:
https://redmine.pfsense.org/issues/13156 Marcos M
12:19 PM pfSense Packages Bug #13154: pfBlocker causing excessive CPU load: The issue apparently stems from the output of "pfctl -vvsr" changing in 22.05. Due to the change in output, pfBlockNG... Denny Page
11:07 AM Bug #13273 (New): dhclient can use conflicting recorded leases: dhclient will attempt to use a previously successful recorded lease if it cannot contact a dhcp server.
However it w... Steve Wheeler
08:00 AM pfSense Packages Bug #13180: High CPU Utilization with pfb_filter since pfBlockerNG update to devel 3.1.0_4: Looks like a duplicate or related to #13154 Michael Novotny
06:53 AM Regression #13265 (Resolved): Authentication using Voucher cause SQLite3 syntax error: No errors on the latest snapshot. Voucher is accepted, no PHP error, voucher shows in active users and active voucher... Jim Pingle

06/13/2022

08:16 PM pfSense Packages Regression #13156: pfBlockerNG IP block stats do not work: Even with changing the rule to use the pfBlockerNG aliases directly, the issue persists - that is I'm not seeing any ... Marcos M
06:16 PM pfSense Packages Bug #13154 (Confirmed): pfBlocker causing excessive CPU load: Still seeing this in 2.7/22.05 so it seems unlikely to be a symptom of #12827 which is mostly fixed there.
The CPU... Steve Wheeler
02:04 PM Revision 8ba70cfc: Set CP pipeno consistently when null. Fixes #13265: Jim Pingle
11:29 AM Feature #12982: Add support for RFC7499 in RADIUS library.: Ok, so do you know roughly when "someone" can look at this issue further? Frank Lee
10:37 AM Feature #12982: Add support for RFC7499 in RADIUS library.: I can't find where @[ciscoavpair]@ is being set in the code - the only reference I could find was in @pear-Auth_RADIU... Marcos M
11:11 AM Bug #13262 (Resolved): File browser on ``diag_edit.php`` does not encode filenames before display: Tested on... Christopher Cope
10:27 AM Bug #13272 (Pull Request Review): Voucher CSV output has leading space before voucher code: MR: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/818
Diff attached for wider testing.
Jim Pingle
10:14 AM Bug #13272 (Resolved): Voucher CSV output has leading space before voucher code: When downloading a CSV file for a voucher roll, each voucher has a leading space, so when copying and pasting it gets... Jim Pingle
09:33 AM Regression #13265: Authentication using Voucher cause SQLite3 syntax error: Merged into Plus and CE master branches and picked back into 22.05. Jim Pingle
09:10 AM Regression #13265 (Feedback): Authentication using Voucher cause SQLite3 syntax error: Applied in changeset commit:8ba70cfcf6c86db2c52577bf543a6b72fc2da9e7. Jim Pingle
08:11 AM Regression #13265 (In Progress): Authentication using Voucher cause SQLite3 syntax error: It should be noted that the authentication succeeds and the user can get out, is listed on the active vouchers tab, b... Jim Pingle
08:23 AM pfSense Packages Bug #12992 (Resolved): error: nbproc is not supported any more since HAProxy 2.5: Jim Pingle
08:17 AM pfSense Docs New Content #13270: OpenVPN client gateway is incorrect when the server does not push routes: This has always been the case with OpenVPN. It doesn't populate the environment variables because it doesn't think it... Jim Pingle
05:06 AM pfSense Packages Bug #13271 (Bogus): I got 'The WireGuard service is not running.' after I upgraded my pfSense VM from 22.05.r.20220604.1403 -> 22.05.r.20220609.1919: I've got this issue on one of my pfSense VM after upgrade from 22.05.r.20220604.1403 -> 22.05.r.20220609.1919 ('upgra... Azamat Khakimyanov

06/12/2022

10:32 PM Todo #13268: Dynamically adjust the interface name maximum width in the login banner: I wanted to auto size the columns based on the terminal width, but the shell doesn't seem to export the @$COLUMNS@ va... → luckman212
05:09 PM Todo #13268 (Resolved): Dynamically adjust the interface name maximum width in the login banner: small change to add some width and better align things if interface names are longer than just "WAN", "WAN2" etc.
... → luckman212
07:14 PM pfSense Docs New Content #13270 (Resolved): OpenVPN client gateway is incorrect when the server does not push routes: If @IPv4 Local network(s)@ is empty on the server (and no custom options exist to push routes), the client @ovpn-link... Marcos M
02:48 PM Bug #13267 (New): dpinger continues to run on OpenVPN gateway after OpenVPN service is stopped.: Tested on @22.05.r.20220609.1919@.
# Configure OpenVPN client on pfSense
# Assign an interface to the OpenVPN cli... Marcos M
01:44 PM Bug #13258: Hidden menu option ``100`` incorrectly handles HTTPS detection: * removed @case 111)@
* consistency of single/double quotes
* removed a couple of stray @;@ s → luckman212
01:21 PM Bug #12920: Gateway behavior differs when the gateway does not exist in the configuration: Updating OP with new symptoms. Marcos M
01:00 PM Revision f185e661: a few updates for the console menu: add full pathnames to all binaries (before some were and some weren't)
less forking for process checking, instead of ... → luckman212
11:22 AM Feature #12973: Playback script to perform a configuration upgrade on an arbitrary ``config.xml`` file: Just noting for anyone looking, the script is named @upgradeconfig@ not @updateconfig@ as in Chris' OP. → luckman212
11:14 AM pfSense Plus Bug #13074: AES-GCM with SafeXcel on Netgate 2100 causes MBUF overload: I believe I have hit this as well, 2100 to 7100 GCM tunnel. Is there an upstream FreeBSD bugreport? I believe the fac... → luckman212
11:11 AM Bug #13252: reduce frequency of php-fpm socket connection attempts from check_reload_status: I may have also experienced this on an SG-2100 yesterday. Upgraded from 21.05.1 to 22.05-RC.
After the upgrade, CP... → luckman212
08:45 AM pfSense Packages Bug #12992: error: nbproc is not supported any more since HAProxy 2.5: This should be closed since it's been merged → luckman212
12:04 AM Regression #11570: Gateway monitoring services is not always restarted on interface events, which may prevent a WAN from recovering back to an online state: Pushed more updates to my "PR #4595":https://github.com/pfsense/pfsense/pull/4595 (see over there for details).
I... → luckman212

06/11/2022

07:01 PM pfSense Plus Bug #13206: SG-3100 LED GPIO hangs: Daniel Subert wrote in #note-2:
> Hi Jim,
>
> Thanks for the update.
>
> As this issue is already being tracked int... Kris Phillips
06:45 PM Revision 08e9bcfd: add waning infobox if duplicate IP is entered in DHCP staticmaps: → luckman212
05:43 PM Regression #13265: Authentication using Voucher cause SQLite3 syntax error: Here is the crash report from my firewall:
Crash report begins. Anonymous machine information:
amd64
12.3-STA... Kris Phillips
05:41 PM Regression #13265: Authentication using Voucher cause SQLite3 syntax error: I can confirm this issue is present in the RC3 build of 22.05. Kris Phillips
05:08 AM Regression #13265 (Resolved): Authentication using Voucher cause SQLite3 syntax error: Errors:
Crash report begins. Anonymous machine information:
amd64
12.3-STABLE
FreeBSD 12.3-STABLE plus-RELEN... Lev Prokofev
05:43 PM Revision b707f4d8: fix log spew when deleting static DHCP maps not in arp table, redmine #13263: → luckman212
04:51 PM Feature #13256: Better handling of duplicate IP addresses in static DHCP assignments: Looks good to me. Marcos M
01:50 PM Feature #13256: Better handling of duplicate IP addresses in static DHCP assignments: I pushed a revised version, looks like this now
!clipboard-202206111450-srubn.png!
→ luckman212
02:17 PM pfSense Packages Regression #13156: pfBlockerNG IP block stats do not work: BBcan177 . wrote in #note-3:
> There seems to have been a change in the pfctl -vvsr output.
>
> The patch below seem... B. B.
09:11 AM pfSense Packages Regression #13156: pfBlockerNG IP block stats do not work: Is there a particular reason for that? I'm using a custom alias to keep rule management easier, and to avoid filter l... Marcos M
09:02 AM pfSense Packages Regression #13156: pfBlockerNG IP block stats do not work: Marcos Mendoza wrote in #note-7:
> > @256 block drop in log quick on ixv5 inet from any to <h_blocklist:19320> label... BBcan177 .

06/10/2022

10:47 PM pfSense Packages Regression #13156: pfBlockerNG IP block stats do not work: > @256 block drop in log quick on ixv5 inet from any to <h_blocklist:19320> label "USER_RULE: pfb_blocklist" label "i... Marcos M
07:49 PM pfSense Packages Regression #13156: pfBlockerNG IP block stats do not work: Marcos Mendoza wrote in #note-4:
> Tested change on @22.05@ RC with pfBlockerNG-devel @3.1.0_4@; floating block rule... BBcan177 .
04:29 PM Feature #13264 (New): IPSec Phase2 select multiple PFS key groups: A user can currently select multiple IPSec encryption and hash algorithms, so it would make sense to add the ability ... Lars Pedersen
12:56 PM Revision 1b5919c7: Encode filename browser.php. Fixes #13262: Jim Pingle
11:36 AM Regression #11570: Gateway monitoring services is not always restarted on interface events, which may prevent a WAN from recovering back to an online state: I've been running with the PR above for 2 days now, it's survived multiple reboots, and unplug/replug of the secondar... → luckman212
11:18 AM Todo #13263: Reduce log spam when deleting a static DHCP entry: I made and tested this small patch: https://github.com/pfsense/pfsense/pull/4597 → luckman212
10:55 AM Todo #13263 (Resolved): Reduce log spam when deleting a static DHCP entry: This is not a huge priority, but when deleting static DHCP mappings for devices that are offline / not on network and... → luckman212
10:18 AM Bug #13258 (Pull Request Review): Hidden menu option ``100`` incorrectly handles HTTPS detection: Jim Pingle
08:05 AM Bug #13262 (Feedback): File browser on ``diag_edit.php`` does not encode filenames before display: Applied in changeset commit:1b5919c769ba736b44819f71ee1ddce06e2a50c5. Jim Pingle
07:56 AM Bug #13262 (Resolved): File browser on ``diag_edit.php`` does not encode filenames before display: The file browser on @diag_edit.php@ does not encode filenames before display.
A user who can create files with arb... Jim Pingle
03:39 AM pfSense Packages Bug #13261 (Resolved): Input validation rejects empty ``sudo`` command list, but GUI text says it can be empty: The help text says, " By default the command is "ALL" meaning the user can run any commands. Leaving the commands fi... Danilo Zrenjanin

06/09/2022

11:20 PM pfSense Packages Regression #13156: pfBlockerNG IP block stats do not work: The patch works for me on LAN and WAN rules on 22.05 RC using pfBlockerNG-devel 3.1.0_4. I don't have floating rules ... Glenn Hall
11:08 PM pfSense Packages Regression #13156: pfBlockerNG IP block stats do not work: Tested change on @22.05@ RC with pfBlockerNG-devel @3.1.0_4@; floating block rule on tagged traffic with description ... Marcos M
09:58 PM pfSense Packages Regression #13156: pfBlockerNG IP block stats do not work: There seems to have been a change in the pfctl -vvsr output.
The patch below seems to fix the issue, but would be ... BBcan177 .
02:51 PM Bug #13258: Hidden menu option ``100`` incorrectly handles HTTPS detection: Ok I updated the PR to bring back the hidden option 100 / links browser. I think this is good. Unfortunately when I t... → luckman212
01:31 PM Bug #13258: Hidden menu option ``100`` incorrectly handles HTTPS detection: I haven't used @links@ against in the GUI in quite some time so I'm not sure if it still works. If it does we may as ... Jim Pingle
01:28 PM Bug #13258: Hidden menu option ``100`` incorrectly handles HTTPS detection: PR: https://github.com/pfsense/pfsense/pull/4596 → luckman212
11:44 AM Bug #13258: Hidden menu option ``100`` incorrectly handles HTTPS detection: I can't think of any benefit from fixing it; better to remove it. Marcos M
02:07 PM Feature #10446: VIP address is not shown in firewall rules: Marcos Mendoza wrote in #note-5:
> Better to stick with using aliases. VIPs are more for service bindings.
This wil... Silmor Senedlen
11:38 AM Feature #10446: VIP address is not shown in firewall rules: Silmor Senedlen wrote in #note-4:
> Silmor Senedlen wrote in #note-2:
> > I think it would be nice to be able to ... Marcos M
02:04 PM Feature #13260 (New): Add support for OpenVPN static-challenge: When using Multi Factor authentication most OpenVPN clients offer a static-challenge option to make the client ask fo... Diego Cortassa
01:32 PM Feature #13256: Better handling of duplicate IP addresses in static DHCP assignments: I wanted to make the warning display in a "Yellow Box" too but I looked through the code and couldn't see an easy way... → luckman212
12:41 PM Feature #13256: Better handling of duplicate IP addresses in static DHCP assignments: I don't think we should change the default behavior/add extra steps to reach the current behavior.
Something that ... Jim Pingle
12:36 PM Feature #13256: Better handling of duplicate IP addresses in static DHCP assignments: Thank you for the contributions!
In general, it's best to avoid first/second person perspective. A yellowish warni... Marcos M
07:07 AM Regression #11570 (Pull Request Review): Gateway monitoring services is not always restarted on interface events, which may prevent a WAN from recovering back to an online state: Jim Pingle
01:42 AM pfSense Packages Bug #12765 (Resolved): AutoConfigBackup should ignore Lightsquid/lightparser cron changes: I tested with Lightsquid version 3.0.6_9.
It works fine.
I am marking this ticket resolved. Danilo Zrenjanin

06/08/2022

11:17 PM Regression #11570: Gateway monitoring services is not always restarted on interface events, which may prevent a WAN from recovering back to an online state: I submitted a PR: https://github.com/pfsense/pfsense/pull/4595 that may help some of the cases being hit here. → luckman212
05:02 PM pfSense Packages Bug #13259 (Not a Bug): Reply-to rules are not created with wireguard 0.1.6_1: Jim Pingle
04:57 PM pfSense Packages Bug #13259: Reply-to rules are not created with wireguard 0.1.6_1: Sorry, stupid mistake on my side, it is required to set an upstream gateway on the interface config in order for the ... JB Fuzier
04:53 PM pfSense Packages Bug #13259 (Not a Bug): Reply-to rules are not created with wireguard 0.1.6_1: Hello,
I have noticed that reply-to rules are not created for rules in a wireguard interface even if it is assigne... JB Fuzier
03:33 PM Feature #10446: VIP address is not shown in firewall rules: Silmor Senedlen wrote in #note-2:
> I think it would be nice to be able to select VIP address from list(which autom... Silmor Senedlen
01:35 PM pfSense Packages Bug #12808 (Resolved): Wireguard Gateways disabled when Wireguard Service is Manually Restarted: Christian McDonald
10:02 AM pfSense Packages Bug #12808: Wireguard Gateways disabled when Wireguard Service is Manually Restarted: Cherry picked this commit to RELENG_2_6_0 ports tree. Look for a package update.
Edit: v0.1.6_2 is available in CE 2... Christian McDonald
09:31 AM pfSense Packages Bug #12808: Wireguard Gateways disabled when Wireguard Service is Manually Restarted: → luckman212 wrote in #note-13:
> @Valmor if you add the System Patches package and then add a patch using this url:... Val Mor
07:54 AM pfSense Packages Bug #12808: Wireguard Gateways disabled when Wireguard Service is Manually Restarted: @Valmor if you add the System Patches package and then add a patch using this url:
https://github.com/theonemcdona... → luckman212
07:46 AM pfSense Packages Bug #12808: Wireguard Gateways disabled when Wireguard Service is Manually Restarted: I have similar issue on pfSense 2.6.0-RELEASE.
Configured WireGuard tunnel and set a static route.
After reboot of ... Val Mor
12:40 PM pfSense Packages Bug #13050 (Resolved): ACME update EasyDNS inline api sign-up link: It looks fine on Acme package version 0.7.1_1.
I am marking this ticket resolved. Danilo Zrenjanin
12:04 PM Bug #13258 (Resolved): Hidden menu option ``100`` incorrectly handles HTTPS detection: I was poking around in @/etc/rc.initial@ to try to fix something else and I noticed a hidden menu item 100
This op... → luckman212
10:38 AM Bug #13257: Exporting a PKCS#12 file from the certificate manager does not use the intended encryption algorithm: See also: #13255 Jim Pingle
10:35 AM Bug #13257 (Resolved): Exporting a PKCS#12 file from the certificate manager does not use the intended encryption algorithm: In source:src/usr/local/www/system_certmanager.php#L198 or thereabouts it sets a parameter @encrypt_key_cipher@ inten... Jim Pingle
09:54 AM Feature #13256 (Resolved): Better handling of duplicate IP addresses in static DHCP assignments: summary:
In 2018 code that prevented duplicate IPs from being used as static DHCP mappings was removed. There are ... → luckman212
09:15 AM Bug #13088: Rapidly clicking certain options on OpenVPN Client Overrides can cause hide/show field behavior to invert: I replicated the issue with inverted results when repeating clicks too quickly on 22.05.r.20220604.1403.
After app... Danilo Zrenjanin
08:52 AM Regression #13167: DigitalOcean Dynamic DNS update fails with a "bad request" error: I reproduced the issue on 22.01 and 22.05.r.20220604.1403 with the same logs. Danilo Zrenjanin
08:36 AM pfSense Packages Todo #13255 (Resolved): Set PKCS#12 algorithm when exporting OpenVPN ZIP or Windows bundles: Currently when crafting a PKCS#12 archive the OpenVPN Client Export package does not set a specific encryption algori... Jim Pingle
07:48 AM Bug #13254 (Resolved): DNS resolver does not update its configuration or reload during link down events: How to reproduce:
1) Configure the interface with Static IPv4
2) Select this interface in the "Network Interfaces... Danilo Zrenjanin

06/07/2022

08:55 PM Regression #11570: Gateway monitoring services is not always restarted on interface events, which may prevent a WAN from recovering back to an online state: Tested on 22.05 RC.
I was not able to replicate this initially with WAN1 as DHCP and WAN2 as static. After testing a... Marcos M
10:00 AM Regression #11570: Gateway monitoring services is not always restarted on interface events, which may prevent a WAN from recovering back to an online state: I experienced this this morning, on 22.05.b.20220531.0600
- dpinger showed my DHCP6 gateway as "down"
- I ran @pgre... → luckman212
01:04 PM Regression #13167: DigitalOcean Dynamic DNS update fails with a "bad request" error: +1 Having this issue since 16th May on two separate boxes CE. Upgraded to 2.6 and still the same. switch to DynDns an... r a
08:50 AM Regression #13167: DigitalOcean Dynamic DNS update fails with a "bad request" error: +1 Also having this problem David Grenier
12:25 AM pfSense Packages Bug #10436: softflowd no longer sends flow data after upgrade (v0.9.9_1 -> v1.0.0): I'm starting down a path that involves softflowd. Does anyone know if this issue persists with the latest snaps? → luckman212

06/06/2022

11:17 PM Regression #13167: DigitalOcean Dynamic DNS update fails with a "bad request" error: any updates on this? I am getting the same error too Pan Teparak
06:55 PM pfSense Packages Feature #12963: Run nmap scans in the background: I can't think of a privacy issue for either - both locations are readable by everyone. The Packet Capture page is in ... Marcos M
02:55 PM pfSense Packages Feature #12963: Run nmap scans in the background: Marcos Mendoza wrote in #note-24:
> Looks good from the testing I've done. Only suggestion I have is that the result... Phil Wardt
02:58 PM Bug #13253 (Resolved): ``dhcp6c`` is not restarted when applying settings when multiple WANs are configured for DHCP6: After #6880 it seems that when applying settings on multiple WANs, @dhcp6c@ is not restarted so the new configuration... Jim Pingle
02:55 PM Bug #13061 (Resolved): Gateway events for IPv6 affect IPv4 OpenVPN instances and vice versa: Seems to be doing the right thing. IPv6 OpenVPN tunnel kept going when the IPv4 gateway went down and back up. We can... Jim Pingle
02:35 PM Bug #12733 (Resolved): Value of ``net.inet.ip.dummynet.*`` OIDs in ``sysctl`` are ignored: The code for @dummynet_load_module()@ in source:src/etc/inc/util.inc#L3937 ensures the module is loaded before popula... Jim Pingle
01:06 PM Bug #13252 (New): reduce frequency of php-fpm socket connection attempts from check_reload_status: When troubleshooting an issue, I discovered that my system logs were rotating every couple of minutes, due to many of... Royce Williams
12:45 PM Bug #13251: pfTop bugs - backspace key vs CTRL_H, states column, rnr not functional: Ok, fair enough but I do wonder - does backspace work for _anyone_ in this case? Because it appears undefined or at l... → luckman212
12:37 PM Bug #13251 (Not a Bug): pfTop bugs - backspace key vs CTRL_H, states column, rnr not functional: backspace vs ^H is almost always a terminal issue with your client and what it sends. Some things send ^H for backspa... Jim Pingle
12:32 PM Bug #13251 (Not a Bug): pfTop bugs - backspace key vs CTRL_H, states column, rnr not functional: I am not 100% sure but I believe there are bugs in the currently bundled version of pfTop. I opened a thread about th... → luckman212
07:32 AM Todo #13250 (Resolved): Clean up DHCP Server option language: Several options on the page have awkward or inconsistent wording
* "Denied clients will be ignored rather than rej... Jim Pingle
07:03 AM Bug #12878 (Incomplete): Traffic shaping by interface, route queue bandwidth inbound, out by a large factor.: Jim Pingle
07:02 AM Bug #13249: Running playback comands multiple times results in PHP error: That is known and expected, they aren't designed to run more than once in the same session the way you are doing it. ... Jim Pingle
05:41 AM Bug #12645: ``filterdns`` does not monitor remote IPsec gateways for IPv6 address changes: It's under IKE Endpoint Configuration ----> Remote Gateway (IPV6), to check if FQDN for AAAA record can be used to es... Alex Zaykov
04:17 AM Bug #12645 (Resolved): ``filterdns`` does not monitor remote IPsec gateways for IPv6 address changes: Tested on 22.05-RC (built on Sat Jun 04 14:22:59 UTC 2022)
I'm not sure what to test here but there is no *add_hos... Azamat Khakimyanov

06/05/2022

08:10 PM Bug #13249 (New): Running playback comands multiple times results in PHP error: Using the console, enter option 12 then run @playback svc restart unbound@ twice. On the second run, the following is... Marcos M
07:38 PM Regression #13248 (New): IPv6 Router Advertisements runs when config.xml does not contain an entry for the interface: After installing @22.05.b.20220531.0600@, I noticed that the @System / Routing@ logs showed the following:
* @2001... Marcos M
07:09 PM pfSense Packages Bug #13247 (Confirmed): Open-VM-Tools service actions do not work: Installing the package @Open-VM-Tools@ creates two entries under @Status / Services@: @vmware-guestid@ and @vmware-km... Marcos M
06:51 PM pfSense Packages Feature #13246 (New): iperf3 service controls do not work: After installing the @iperf3@ package, an entry is created under @Status / Services@ which includes @Start@, @Stop@, ... Marcos M
06:17 PM pfSense Packages Feature #12963: Run nmap scans in the background: Looks good from the testing I've done. Only suggestion I have is that the results file may be best placed in @/tmp@. Marcos M
04:10 PM pfSense Plus Bug #12974: Typing anything into 1100/2100 recovery installer causes process to stop: Marcos Mendoza wrote in #note-6:
> The wording has been addressed with NG 7431. This issue can be left open to track... Ryan Coleman
08:23 AM Regression #12821 (Confirmed): Intel e1000 driver (``em``, ``igb``) cannot pass packets tagged with VLAN ``0``: Steve Wheeler

06/04/2022

08:15 PM Regression #12821: Intel e1000 driver (``em``, ``igb``) cannot pass packets tagged with VLAN ``0``: Tested ix interfaces as well. They are not subject to this bug. Based on the fact that Broadcom NICs and Intel ix/i... Kris Phillips
07:54 PM Regression #11545: Primary interface address is not always used when VIPs are present: This bug definitely doesn't just happen with PPPoE interfaces. It is also not consistent and seems to be an "orderin... Kris Phillips
07:50 PM Bug #12878: Traffic shaping by interface, route queue bandwidth inbound, out by a large factor.: Unless further feedback is provided on this redmine, it can likely be closed due to lack of information in Rejected s... Kris Phillips
09:21 AM Feature #13245 (Resolved): Type column on Alias lists: Small QoL addition that adds a Type column to the Alias list views. I was recently cleaning up my aliases and being a... → luckman212

05/30/2022

04:59 PM Bug #13093: LDAP authentication fails with extended query and RFC2307 group lookups enabled: Extended query works.
RFC2307 groups work.
Authentication fails when both are enabled.
The site I'm testing ... Chris Linstruth
04:57 PM Bug #13093: LDAP authentication fails with extended query and RFC2307 group lookups enabled: I think this is probably still not right. Chris Linstruth
04:02 PM Bug #12923 (Resolved): DHCP "Ignore denied clients" option with MAC Deny list set causes DHCP server to not start: Working correctly on... Christopher Cope
03:54 PM pfSense Plus Bug #13233: OpenVPN DCO connection fails with Auth Digest Algorithm set to SHA512: Thanks for pointing out the RA-only restriction. I see that stephenw10 has replied in the original forum string that... Steve Wilson
09:32 AM pfSense Plus Bug #13233: OpenVPN DCO connection fails with Auth Digest Algorithm set to SHA512: Try to reproduce it with OpenVPN Server in Remote Access mode, Peer-to-Peer is not supported - see https://redmine.pf... Marcos M
12:28 PM pfSense Plus Bug #13074: AES-GCM with SafeXcel on Netgate 2100 causes MBUF overload: I mean to say it's not a SafeXcel issue specifically. Thank you for confirming it's only on the 2100 (ARM) platform. Marcos M
12:15 PM pfSense Plus Bug #13074: AES-GCM with SafeXcel on Netgate 2100 causes MBUF overload: Marcos Mendoza wrote in #note-3:
> Note that the issue may not be specific to SafeXcel - e.g. it could happen with In... Chris S
11:06 AM pfSense Plus Bug #13074: AES-GCM with SafeXcel on Netgate 2100 causes MBUF overload: Note that the issue may not be specific to SafeXcel - e.g. it could happen with Intel QAT as well. Marcos M
12:25 PM Feature #12982: Add support for RFC7499 in RADIUS library.: The issue needs to be narrowed down further. Apply the following patch, reproduce the issue, then submit the /tmp/_DE... Marcos M
10:56 AM pfSense Packages Regression #12140 (Closed): DNSBL https webserver not working: Could not reproduce on 22.05 with pfBlockerNG-devel 3.1.0_4. The no logging of IP addresses has already been resolved... Marcos M
10:40 AM pfSense Packages Feature #10242 (New): E2guardian Web filtering package: Viktor Gurov
10:29 AM pfSense Packages Regression #12476 (Resolved): Suricata 6.0.3_3 Pass List ignores all single IPs: Marcos M
03:30 AM pfSense Packages Feature #11385 (Resolved): Add WireGuard tunneled networks to vpnaddresses list: Tested on 22.01 and on 22.05-BETA (built on Fri May 27 06:21:09 UTC 2022)
When I created Pass List with 'VPN Addre... Azamat Khakimyanov
02:00 AM pfSense Packages Bug #11892 (Resolved): WireGuard: dpinger does not start correctly on a WireGuard gateway at boot: Tested on 21.05_2, 22.01 and on 22.05-BETA (built on Fri May 27 06:21:09 UTC 2022)
I saw no issue with dpinger and... Azamat Khakimyanov

05/29/2022

10:57 PM Feature #12982: Add support for RFC7499 in RADIUS library.: Any new update? Frank Lee
08:31 PM Bug #13230 (Feedback): Floating rules on VPN interfaces: More information is needed to understand the issue. Is this occurring with an OpenVPN Server or Client configuration ... Marcos M
07:56 PM pfSense Plus Bug #13233: OpenVPN DCO connection fails with Auth Digest Algorithm set to SHA512: Hopefully this will be reproducible:
1. Set up Non-DCO OpenVPN server and client with follwing config options: pe... Steve Wilson
06:31 PM pfSense Plus Bug #13233 (Feedback): OpenVPN DCO connection fails with Auth Digest Algorithm set to SHA512: Tested on @22.05.b.20220524.0600@.
I was unable to reproduce this issue using OpenVPN RA TLS+User auth. Taking an ... Marcos M
07:00 PM Bug #12878 (Feedback): Traffic shaping by interface, route queue bandwidth inbound, out by a large factor.: Please test 22.05 BETA when possible and let us know if the issue persists. Details on the Traffic Shaping config and... Marcos M
06:56 PM Bug #12877 (Feedback): Cloudflare DynDNS fails to update more than two addresses: If possible, please re-test after applying the available patch found with the System_Patches package. Marcos M
06:49 PM pfSense Plus Bug #13041 (Closed): DNS resolution of internal network names when logged in via OpenVPN requires workaround: Marcos M
06:38 PM pfSense Plus Bug #13232 (Duplicate): Restoring Config with OpenVPN Custom Options Removes Carriage Returns: This seems more like a feature than a bug, considering that the description and documentation both say to separate wi... Marcos M
06:17 PM Bug #13234 (Not a Bug): Separator locations pushed down when pfSense is rebooted: pfBlockerNG's auto rule creation will affect the placement of separators - this is likely what's happening. If you di... Marcos M
10:29 AM Bug #13234 (Not a Bug): Separator locations pushed down when pfSense is rebooted: This happens when I place a separator at the top of the floating rules and reboot the router. I have not checked othe... Jon Brown
05:34 PM Feature #8173: dhcp6c - RAW Options: Please let us have these features added to pfSense. Half of france is using OPNsense because nothing happens on this ... Tue Madsen
02:09 PM pfSense Docs Todo #13236 (Resolved): Document link speed limitations with igc and ix on 6100/4100: > The I225 built-in phy doesn't support fixed operation, so a speed/duplex setting is emulated by selecting that sing... Marcos M
12:09 PM pfSense Packages Feature #10818: UDP Broadcast Relay: There's no GUI for it, but it can be installed on 22.05/2.7:... Marcos M
11:21 AM pfSense Packages Bug #13153 (Resolved): Static routes bound to WireGuard interfaces are not restored after down / up events: Tested on 22.01 and on 22.05-BETA (built on Fri May 27 06:21:09 UTC 2022)
I wasn't able to reproduce this issue. A... Azamat Khakimyanov
11:07 AM Bug #13235 (Not a Bug): URL in firewall rule hover does nothing: There is URL present in the modal box you get when you hover over a rule. This URL does nothing.
* Should this URL... Jon Brown
06:38 AM pfSense Packages Bug #12251 (Resolved): Wireguard 0.1.5 - ignores "KeepAlive" parameter if empty (instead of disabling): Tested on 22.01
When I used empty 'Keep Alive' field, I got in config: _*PersistentKeepalive = 0*_
When I tried... Azamat Khakimyanov
03:49 AM pfSense Packages Feature #12719 (Resolved): add igc(4) to the list of INLINE mode (iflib/netmap) supported cards: Tested on 22.01
Interface *igc* was added into 'Supported drivers' list: _Supported drivers: bnxt, cc, cxgbe, cxl, e... Azamat Khakimyanov
03:48 AM pfSense Packages Feature #11560 (Resolved): add ena(4) to the list of INLINE mode (netmap) supported cards: Tested on 22.01
Interface *ena* was added into 'Supported drivers' list: _Supported drivers: bnxt, cc, cxgbe, cxl, e... Azamat Khakimyanov

05/28/2022

07:16 PM pfSense Plus Bug #13233 (Feedback): OpenVPN DCO connection fails with Auth Digest Algorithm set to SHA512: OpenVPN DCO configurations specifying an auth digest algorithm of SHA512 fail to connect. Changing the algorithm to ... Steve Wilson
06:50 PM Bug #12875: Import zabbix-agent6 and zabbix-proxy6 from FreeBSD Ports: Discussed with engineering. This will get brought over in the next repo sync. Kris Phillips
03:19 PM pfSense Plus Bug #13232 (Duplicate): Restoring Config with OpenVPN Custom Options Removes Carriage Returns: If you back up a config on one device and then restore it in another, if you have an OpenVPN client (potentially serv... Kris Phillips
03:06 PM Regression #12821: Intel e1000 driver (``em``, ``igb``) cannot pass packets tagged with VLAN ``0``: Tested this on igc interfaces and it appears this only affects e1000-based NICs. Other Intel NICs would seem to be f... Kris Phillips
02:13 PM pfSense Docs New Content #13211: OpenVPN DCO Documentation: Much more clear to me, thanks! Marcos M
02:10 PM Regression #11570: Gateway monitoring services is not always restarted on interface events, which may prevent a WAN from recovering back to an online state: I cannot test 22.05, I'm on community edition. Sage Badolato
01:13 PM Regression #11570: Gateway monitoring services is not always restarted on interface events, which may prevent a WAN from recovering back to an online state: I suggest testing on 22.05 BETA if possible. If the issue persists there, it may be related to https://redmine.pfsens... Marcos M
02:01 PM Regression #13203 (Resolved): Floating rules without an interface are not loaded: Marcos M
01:47 PM pfSense Plus Bug #12974: Typing anything into 1100/2100 recovery installer causes process to stop: The wording has been addressed with NG 7431. This issue can be left open to track the behavior issue itself, as it sh... Marcos M
01:14 PM Bug #13228: Recovering interface gateway may not be added back into gateway groups and rules when expected: May be related to https://redmine.pfsense.org/issues/12920. Marcos M
12:59 PM Bug #13231 (Not a Bug): OpenVPN custom options may fail after save/restore: Sometimes after restoring a backup XML file, custom options get formatted improperly. That prevents the OpenVPN servi... Danilo Zrenjanin
12:45 PM Feature #4259 (Resolved): Port forward NAT rules with "any" protocol: Danilo Zrenjanin
12:45 PM Feature #4259: Port forward NAT rules with "any" protocol: Tested:... Danilo Zrenjanin
06:03 AM pfSense Packages Feature #10818: UDP Broadcast Relay: Hi.
Any news on this?
Eagerly awaiting this one Øystein Gåsdal

05/27/2022

11:54 PM Bug #13230 (Not a Bug): Floating rules on VPN interfaces: With floating rules on OpenVPN and WireGuard interfaces, matching traffic doesn’t seem to return with rules that pass... James Chambers
09:44 PM pfSense Packages Feature #12658: Adding prometheus metrics to darkstat: I think the package is in the FreeBSD ports:... Karim Elatov
07:31 PM Regression #11570: Gateway monitoring services is not always restarted on interface events, which may prevent a WAN from recovering back to an online state: I can also confirm that I can replicate this exact issue on my PFSense. Both as a VM and as bare metal.
Using a H... Sage Badolato
03:04 PM pfSense Docs Todo #13229 (Feedback): Update documentation for IPFW to PF transition for Limiters and Captive Portal: Relevant commits:
https://gitlab.netgate.com/docs/pfSense-docs/-/commit/47dd08cc24bb4ffbd476b2d4aebacdb6ccbce895
... Jim Pingle
02:59 PM pfSense Docs Todo #13229 (Resolved): Update documentation for IPFW to PF transition for Limiters and Captive Portal: Adding for tracking.
Docs are updated to reflect that IPFW is no longer used, it's all in PF now. Jim Pingle
01:59 PM pfSense Docs New Content #13223 (Feedback): Document new gateway state killing behavior: This should complete the relevant updates (and then some):
https://gitlab.netgate.com/docs/pfSense-docs/-/commit/7... Jim Pingle
01:15 PM Revision e5d97d7c: Update CARP status state sync note. Fixes #12701: Jim Pingle
10:58 AM Bug #13228 (Resolved): Recovering interface gateway may not be added back into gateway groups and rules when expected: When an interface/gateway recovers and rc.newwanip runs, the gateway may not end up in the ruleset in groups or rules... Jim Pingle
10:15 AM pfSense Plus Feature #13227: Group-based Mobile IPsec Virtual Address Pool assignment via RADIUS: I Should mention you can use my modifcation afterwards by creating the groups identifier and IP pool needed, by creat... Tue Madsen
10:09 AM pfSense Plus Feature #13227 (Resolved): Group-based Mobile IPsec Virtual Address Pool assignment via RADIUS: Currently you cannot create additional Virtual IP Pools to assign mobile users IP addresses from, if you are using EA... Tue Madsen
08:55 AM Todo #12701 (Feedback): Reorganize CARP status page: Applied in changeset commit:e5d97d7ce8bd3346ef8fa6f5477182331d2174b4. Jim Pingle
08:03 AM Todo #12701 (In Progress): Reorganize CARP status page: This could use one small change, to add a note/link in the info block saying the user can set a custom filter host ID... Jim Pingle
08:01 AM Todo #12701 (Resolved): Reorganize CARP status page: Jim Pingle
05:12 AM Todo #12701: Reorganize CARP status page: Tested.... Danilo Zrenjanin
08:00 AM Regression #11545 (New): Primary interface address is not always used when VIPs are present: That other issue could solve it for PPP type interfaces but it's happening on systems without PPP interfaces and thos... Jim Pingle
02:53 AM Regression #11545 (Feedback): Primary interface address is not always used when VIPs are present: Viktor Gurov
02:52 AM Regression #11545: Primary interface address is not always used when VIPs are present: Should be fixed in #11629
Please re-test on the latest 22.05/2.7 snapshots. Viktor Gurov
06:29 AM Bug #13226 (Confirmed): Disconnecting a user from Captive Portal may allow previously established connections to continue: Able to reproduce.
It looks like @pfSense_kill_status()@ and @pfSense_kill_src states()@ are successfully kill TCP... Viktor Gurov
05:11 AM Bug #13226: Disconnecting a user from Captive Portal may allow previously established connections to continue: It looks like @pfSense_kill_states()@ and @pfSense_kill_srcstates()@ does not work properly:
https://github.com/pfse... Viktor Gurov
05:02 AM Bug #13226 (Resolved): Disconnecting a user from Captive Portal may allow previously established connections to continue: Steps to reproduce:
1. Connect to the network through the CP portal.
2. Establish OpenVPN forcing all traffic thr... Danilo Zrenjanin
05:25 AM Bug #13218: GIF-based interface MTU is assigned to parent interface on boot when parent interface is a LAGG: I've applied it and it looks to do the job. I will keep an eye on it and throw in a couple of reboots over the weeken... Graeme Bragg
02:59 AM Bug #13218: GIF-based interface MTU is assigned to parent interface on boot when parent interface is a LAGG: Graeme Bragg wrote in #note-3:
> Thanks for looking at this so quickly. Please let me know if you need/want me to te... Viktor Gurov
05:21 AM Bug #13225: Bridges with QinQ interfaces not properly set up at boot: fix:
https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/810 Viktor Gurov
03:14 AM Bug #13225 (Resolved): Bridges with QinQ interfaces not properly set up at boot: We have a setup that includes several OpenVPN tunnels, some of them using QinQ. When system is configured using WebUI... Lauri Liuhto
01:58 AM Bug #13224 (Duplicate): Email notification flood when UPS (NUT) and WAN send notifications: When my UPS (monitored with NUT) and one of my WAN (PPPoE) both send email notifications close to each other, it star... Riccardo Ambrosi

Also available in: Atom

Project

General

Profile

pfSense

Activity

Activity

06/25/2022

06/24/2022

06/23/2022

06/22/2022

06/21/2022

06/20/2022

06/19/2022

06/18/2022

06/17/2022

06/16/2022

06/15/2022

06/14/2022

06/13/2022

06/12/2022

06/11/2022

06/10/2022

06/09/2022

06/08/2022

06/07/2022

06/06/2022

06/05/2022

06/04/2022

06/03/2022

06/02/2022

06/01/2022

05/31/2022

05/30/2022

05/29/2022

05/28/2022

05/27/2022