pfSense

06/29/2024

09:50 PM Bug #14083: Adding MSS and MTU values on a LAGG VLAN interface breaks connectivity

Patch is working as tested on 41/61/7100 hardware Jordan G

09:48 PM Bug #9453: Reconfiguring a parent LAGG interface breaks its VLANs

The patch from https://redmine.pfsense.org/issues/14083 works to prevent the connectivity issues experienced as a res... Jordan G

07:42 PM pfSense Docs Todo #12756: Add information on correct MTU to use with WireGuard

I've seen multiple statements that the Wireguard default MTU is 1420. However I can't find that specified in any WG d... Craig Coonrad

07:24 PM pfSense Plus Bug #15581 (Closed): OpenVPN wizard generates PHP error

Tracked in NG#16837. Marcos M

05:23 AM pfSense Plus Bug #15581: OpenVPN wizard generates PHP error

I can confirm this behavior ... Lev Prokofev

07:21 PM Revision f2f4b7cc: Config access regression in OpenVPN wizard

Marcos M

06:10 PM Bug #15373 (Confirmed): Firewall Logs Dashboard widget update interval does not behave as expected

Tested against:... Danilo Zrenjanin

05:12 PM Bug #15584 (Confirmed): Redacting description at Interfaces=>LAGGs section cause LAGG interface rebuild.

Tested against:
@24.03-RELEASE (amd64)
built on Mon May 13 15:17:00 MSK 2024
FreeBSD 15.0-CURRENT@
Yes, I can c... Danilo Zrenjanin

04:28 PM Bug #15098: Wireguard crashes on boot if PPPoE is the default gateway

I have the same issue, which I think is related to PPPoE.
At the moment, I created a bash script that is running eve... Claudio Scavazza

04:18 PM Bug #15588: The picking of CA in the LDAP config is inconsistent.

Even after restarting PHP and GUI, the behavior was inconsistent, I set the wrong cert (R3), saved, restarted PHP and... Lev Prokofev

01:04 PM Bug #15588: The picking of CA in the LDAP config is inconsistent.

As mentioned in the troubleshooting section, you may need to restart PHP and the GUI for the changes to take effect.
... Christopher Cope

10:03 AM Bug #15588 (Duplicate): The picking of CA in the LDAP config is inconsistent.

It appears that the picking of the CA is inconsistent, I have various CAs, and only one is valid for the communicatio... Lev Prokofev

06/28/2024

10:58 PM Revision 7f34387a: Additional support for repo name in config

Marcos M

02:59 PM pfSense Packages Feature #15585: Add OpenVPN Option for manually MTU setting

Jonathan Lee wrote in #note-3:
> So the Users on the forum didn’t need to set custom settings for OpenVPN configurat... Christopher Cope

05:44 AM pfSense Packages Feature #15585: Add OpenVPN Option for manually MTU setting

So the Users on the forum didn’t need to set custom settings for OpenVPN configuration export system? The way I under... Jonathan Lee

09:46 AM Bug #15110: pfSense hangs when rebooting

#2694043009 The latest test shows _Khelp module "ertt" can't unload until its refcount drops from 5 to 0._
<... Lev Prokofev

12:22 AM Bug #15110: pfSense hangs when rebooting

#2694043009 A 4100 using a Transcend TS128GMTE452T, but doesn't show the same "can't unload" message. This instead lo... Chris W

06/27/2024

11:23 PM pfSense Packages Feature #15585: Add OpenVPN Option for manually MTU setting

Jonathan Lee wrote in #note-1:
> It would be nice to have this as a non custom option a GUI based option for users.
... Christopher Cope

10:54 PM pfSense Packages Feature #15585: Add OpenVPN Option for manually MTU setting

It would be nice to have this as a non custom option a GUI based option for users. Jonathan Lee

10:53 PM pfSense Packages Feature #15585 (New): Add OpenVPN Option for manually MTU setting

Ref:
https://forum.netgate.com/topic/148161/how-to-change-mtu-mssfix-values-for-openvpn-in-pfsense
I started to r... Jonathan Lee

11:15 PM Todo #15586 (Feedback): Query for SMART data only on root disk devices

Applied in changeset commit:37043243eeecd35a0e9a2b7ae64dd1a9aab97ebc. Marcos M

11:06 PM Todo #15586 (Resolved): Query for SMART data only on root disk devices

The drive list for querying SMART data contains "sub-devices". Only "root" devices should be queried.
For example,... Marcos M

11:09 PM Revision 37043243: Query for SMART data only on root disk devices. Fix #15586

Marcos M

07:27 PM Revision 8d784257: Fix vertical text alignment on `Display Advanced` buttons

Christian McDonald

04:17 PM Todo #15583: Add documentation for VPN to WAN leakage issue and recommended solution

Jim, could a link to https://docs.netgate.com/pfsense/en/latest/recipes/rfc1918-egress.html be added to the pages htt... Andrew Almond

12:58 PM Todo #15583 (Rejected): Add documentation for VPN to WAN leakage issue and recommended solution

This already exists: https://docs.netgate.com/pfsense/en/latest/recipes/rfc1918-egress.html Jim Pingle

04:11 PM Feature #15582: Add option to automatically create rules to block VPN networks from existing via WAN interfaces

Jim, thanks for the explanation. Now, I understand the complexity of this issue better.
The simplest improvement w... Andrew Almond

01:06 PM Feature #15582: Add option to automatically create rules to block VPN networks from existing via WAN interfaces

I thought we already had an issue for this open but I'm not seeing one. We've talked about doing this before, but it'... Jim Pingle

09:08 AM Bug #15584 (Confirmed): Redacting description at Interfaces=>LAGGs section cause LAGG interface rebuild.

If you decide to change the description for existed LAGG interface at Interfaces=>LAGGs it will cause the link down/u... Lev Prokofev

06:58 AM Regression #15578: Saving an existing certificate authority creates a duplicate

The patch fixes the issue.
I tested the patch against:
@24.08-DEVELOPMENT (amd64)
built on Tue Jun 25 6:00:00 U... Danilo Zrenjanin

06/26/2024

11:09 PM Revision 417ee25e: Config access regression in wireless interfaces

Marcos M

10:26 PM Revision eafb47d3: Config access regression in interface groups

Marcos M

09:10 PM Feature #15582: Add option to automatically create rules to block VPN networks from existing via WAN interfaces

Ok it's great that it's already documented.
However, I've read the documentation a lot (particularly the VPN setup... Andrew Almond

08:55 PM Feature #15582: Add option to automatically create rules to block VPN networks from existing via WAN interfaces

The issue is documented, as well as the workarounds, in the online documentation: https://docs.netgate.com/pfsense/en... Christopher Cope

08:39 PM Feature #15582 (New): Add option to automatically create rules to block VPN networks from existing via WAN interfaces

It's a known issue that traffic intended for VPN networks can be sent out the WAN interfaces if the VPN tunnel is dow... Andrew Almond

08:43 PM Todo #15583 (Rejected): Add documentation for VPN to WAN leakage issue and recommended solution

https://redmine.pfsense.org/issues/15582
VPN networks can be sent out the WAN interfaces if the VPN tunnel is down... Andrew Almond

08:13 PM Revision e2a6b6b5: Add scrolling when dislaying overflow columns for NTP status

Marcos M

06:51 PM pfSense Packages Bug #15574: Stunnel: Error resolving "r11.o.lencr.org": Address family for nodename not supported (EAI_ADDRFAMILY)

Hi, I went through several rounds of testing and I beleive that this is a bug somewhere in pfsense, stunnel.
Curr... A Schnee

05:59 PM pfSense Packages Bug #15457 (Resolved): HAproxy disable zero copy forwarding

Jim Pingle

05:56 PM pfSense Packages Bug #15457: HAproxy disable zero copy forwarding

The forum comments indicate that the new version, 2.9.7, addresses the issue that was raised in this Redmine. We can ... Danilo Zrenjanin

05:33 PM pfSense Plus Bug #15581 (Closed): OpenVPN wizard generates PHP error

The system throws a PHP error after defining an OpenVPN server using the wizard on a stock configuration.
Tested ... Danilo Zrenjanin

05:20 PM Bug #15328: Changes in Kea DHCP interface pools may invalidate lease database content

Applied in changeset commit:f774120b7dbf9811f574c056193d6b45246fa986. Christian McDonald

05:14 PM Bug #15328: Changes in Kea DHCP interface pools may invalidate lease database content

I believe I've got this sorted out now.
Fix will be included in the next build. Christian McDonald

05:14 PM Bug #15328 (Feedback): Changes in Kea DHCP interface pools may invalidate lease database content

Christian McDonald

05:11 PM Revision f774120b: kea: enable lease sanity checks to ensure data consistency. Fix: #15328

Christian McDonald

04:45 PM Regression #15578 (Feedback): Saving an existing certificate authority creates a duplicate

Applied in changeset commit:980546213d010e8c57d750671e41015dbd0a992e. Marcos M

04:31 PM Regression #15578 (In Progress): Saving an existing certificate authority creates a duplicate

Marcos M

12:10 PM Regression #15578 (Confirmed): Saving an existing certificate authority creates a duplicate

Jim Pingle

08:13 AM Regression #15578: Saving an existing certificate authority creates a duplicate

I can confirm this behavior
!clipboard-202406261114-v0r5a.png!
Lev Prokofev

04:35 PM Revision 98054621: Config access regression in CAs. Fix #15578

Marcos M

03:19 PM pfSense Packages Bug #13405: Wireguard: The webgui becomes excessively slow to respond with a large number of peers

Hello,
any updates?
I notice that the culprit is this line:
https://github.com/pfsense/FreeBSD-ports/blob/08d3... Federico Foschini

03:12 PM pfSense Packages Bug #15580 (New): Squidguard ACL order issue

If you edit either Target Categories or Group ACL entries they are put on top of the list after saving the entry.
... Jonathan Lee

12:31 PM pfSense Packages Regression #15540: Cannot create new System Patches package custom entry on Plus 24.08/CE 2.8.0 Snapshots

The fetch button is working properly here as well on the same system where it failed previously, so that issue does a... Jim Pingle

08:08 AM pfSense Packages Regression #15540 (Resolved): Cannot create new System Patches package custom entry on Plus 24.08/CE 2.8.0 Snapshots

Tested against:... Danilo Zrenjanin

01:39 AM pfSense Plus Bug #15196: AWS ena interfaces can become unstable/stop responding

Re: comment #38, I requested a before and after `ps -Hauxf` from the user.
Another case came in HS# 2879061611. No... Craig Coonrad

06/25/2024

09:53 PM Feature #15579 (New): Authenticated NTP Improvements

Per discussions in #8794, "PR #4658":https://github.com/pfsense/pfsense/pull/4658, and "this forum discussion":https:... Matthew Ray

09:45 PM Regression #15578 (Resolved): Saving an existing certificate authority creates a duplicate

Steps to reproduce on version 24.08.a.20240624.0600
On version 24.03 this is not a problem.
1) Create two certi... dylan mendez

06:40 PM pfSense Plus Bug #15196: AWS ena interfaces can become unstable/stop responding

Okay, so the issue is believed to be associated with an increase in thread count. That's new information. It would be... Kristof Provost

06:08 PM pfSense Plus Bug #15196: AWS ena interfaces can become unstable/stop responding

Re: https://redmine.pfsense.org/issues/15196#note-35
User has a script in place that kicks off a reboot when the d... Craig Coonrad

05:42 PM pfSense Docs Todo #15577 (Closed): Implement group tabs

Done for both pfSense and TNSR product manuals.
There were no multiple tab groups on the same page in the main doc... Jim Pingle

05:07 PM pfSense Docs Todo #15577 (Closed): Implement group tabs

Using this as an example:
https://docs.netgate.com/pfsense/en/latest/solutions/netgate-4200/connect-to-console.htm... Chris Linstruth

02:16 PM Bug #15328 (In Progress): Changes in Kea DHCP interface pools may invalidate lease database content

The fix for this will be included in the next significant update to Kea integration, which is still planned for 24.08. Christian McDonald

12:11 PM Bug #15576 (Rejected): FreeRadius3 cannot be installed

Those versions are all older and unsupported, problem reports are only acceptable against the latest releases of pfSe... Jim Pingle

04:45 AM Bug #15576 (Rejected): FreeRadius3 cannot be installed

Hi all,
I have just installed PFSense 2.6.0 on a server and I tried to download and install FreeRadius3 from the A... Vasilis Stefanou

06/24/2024

09:26 PM pfSense Packages Bug #14523 (Resolved): PHP error when using an unsupported alias type in Advanced Rule Settings

Typo is now fixed. Marcos M

08:59 PM Feature #15575 (Resolved): Kea High Availability Support (IPv4 and IPv6)

Christian McDonald

07:52 PM pfSense Packages Todo #15281: Upgrade Tailscale to 1.6.0

Matt Keys wrote in #note-6:
> I reported a TS routing issue here 3 months ago: https://redmine.pfsense.org/issues/14... Elvis Impersonator

11:01 AM pfSense Packages Todo #15281: Upgrade Tailscale to 1.6.0

Elvis Impersonator wrote in #note-5:
> So I updated CE 2.7.2 to tailscale 1.68.1
> Seems to be working.
I repo... Matt Keys

07:23 PM pfSense Packages Feature #14453: Expand prefix list entry window

https://forum.netgate.com/topic/188850/gui-frr?_=1719256774819
Is it possible to get this rendered correctly on pf... Mike Moore

02:48 PM pfSense Packages Bug #15574: Stunnel: Error resolving "r11.o.lencr.org": Address family for nodename not supported (EAI_ADDRFAMILY)

Thank you for the quick reply.
I opened this bug after doing a full clean install of pfsense 2.7.2 and experienced t... A Schnee

02:10 PM pfSense Packages Bug #15574 (Not a Bug): Stunnel: Error resolving "r11.o.lencr.org": Address family for nodename not supported (EAI_ADDRFAMILY)

Seems more like a local cert issue than a bug in stunnel. The usual way to fix such things is to delete the stale CA ... Jim Pingle

02:06 PM pfSense Packages Bug #15574 (Not a Bug): Stunnel: Error resolving "r11.o.lencr.org": Address family for nodename not supported (EAI_ADDRFAMILY)

I have an issue with the stunnel package in pfsense 2.7.2. Since my certificate renewed a few days ago, I cannot conn... A Schnee

12:32 PM Feature #15570: More Colors for Seperators in Firewall rules

The current implementation of separators is tied to the default bootstrap colors for info/success/danger/warning so i... Jim Pingle

06/23/2024

08:37 PM Bug #15098: Wireguard crashes on boot if PPPoE is the default gateway

Tested it with a fresh install, sadly it still keeps happening to me, but only after a reboot.
Wireguard will start... Oskar Stroka

10:45 AM pfSense Packages Feature #15573 (New): Enable tmpfs when ramdisk is used.

The Telegraf package config disables tmpfs which prevents the ramdisks /var and /log to be monitored.... Sebastian mzb

08:38 AM Bug #15518: Kea does not send configured TFTP server name

It seems that I experienced the same issue: wiht kea DCHP cannot netboot raspberry pi. Switched back to ISC DHCP for ... A Schnee

08:07 AM Bug #15572 (Rejected): Disabling DNSSEC should also disable Harden DNSSEC Data

Tested on 24.03
After disabling DNSSEC when I tried to change DNS Resolver Advanced Settings (change logging level... Azamat Khakimyanov

03:34 AM pfSense Plus Feature #14387: Offline config mode

Testing on version 24.03 I have not noticed any improvements from last versions when booting up a WAN interface witho... dylan mendez

03:17 AM pfSense Plus Bug #15545: traffic shaper (Limiter) causes kernel panic -> random reboot

Created a Limiter on both 24.03 and 24.08. Unable to recreate any panic. Per Jim's reply, please provide a crash dump. Kris Phillips

03:13 AM Bug #15404: Captive Portal logo fails to load after authenticated redirect

Tested on 24.08 6-21-2024 snapshot. Issue appears to still be present. Kris Phillips

12:49 AM Bug #13687: Cannot add limiters named ``new``

I can replicate this on CE 2.7.2 and 24.03-RELEASE
!clipboard-202406221846-blbfy.png!
dylan mendez

12:16 AM pfSense Packages Bug #14523: PHP error when using an unsupported alias type in Advanced Rule Settings

The patch is working on:... Christopher Cope

06/22/2024

08:12 PM Bug #15534: pfSense’s installer not table to see ZFS-formatted internal drive

latest version of the installer is able to see drives that are part of a ZFS pool, trying to install to them will pre... Jordan G

07:42 PM pfSense Packages Todo #15281: Upgrade Tailscale to 1.6.0

1.68.1 is available with client security fixes
https://www.freshports.org/security/tailscale
https://pkgs.org/downlo... Elvis Impersonator

07:32 PM pfSense Plus Bug #15421: Netgate 3100 boot loader lacks Lua support but is trying to read loader.conf.lua

Jim Pingle wrote in #note-3:
> Kris Phillips wrote in #note-2:
> > Oddly, I'm getting a similar, but not the same e... Kris Phillips

07:32 PM pfSense Plus Bug #15571 (New): Loader.lua errors on VM when smbios.planar.product is not present

See attached screenshot when booting. It appears the syntax for loader.lua expects this value and errors without it,... Kris Phillips

06:58 PM Feature #15570 (New): More Colors for Seperators in Firewall rules

I wish to have more colors for the separators in the Firewall rules.
I have a very complex structure and a bunch ... Manuel M.

08:52 AM Bug #15551: New Kea DHCP breaks my PXE booting

It could be related to https://redmine.pfsense.org/issues/15518 Lev Prokofev

07:22 AM Feature #13293: Option to set auth-gen-token in OpenVPN GUI

I've just opened a feature request to add details about this feature to our docs.
https://redmine.pfsense.org/issue... Danilo Zrenjanin

07:18 AM pfSense Docs New Content #15569 (New): auth-gen-token

Please add the details below about this feature in the OpenVPN Custom Configuration Options documentation.
https://... Danilo Zrenjanin

05:19 AM pfSense Plus Bug #14531: Traffic Graph widget doesn't show traffic counts for OpenVPN interfaces since 23.05.1 upgrade.

This bug also affects SNMP. DCO enabled, Cacti graphs stopped populating. DCO disabled, traffic graphs.
24.03-RELE... Cody Gee

06/21/2024

08:53 PM pfSense Plus Feature #15568 (New): firewall rules tagging

I got this FR idea from Palo Alto firewalls.
There is a feature where you can create an alias (address groups) and a... Mike Moore

08:42 PM pfSense Packages Bug #15567 (New): Continent Alias Lost at Start of pfBlockerNG

I am using the pfblockerNG created continent aliases e.g. "pfB_Europe_v4" in my firewall rules.
Unfortunately they a... Sebastian mzb

06:27 PM Revision fcbf1499: Fix PHP error regression when listing system users

Marcos M

06:15 PM Bug #15518: Kea does not send configured TFTP server name

This is strange because as per Kea documentation:
> Note that either name or code is required; there is no need to... Christian McDonald

05:52 PM pfSense Plus Bug #15566 (Resolved): Update Intel microcode pacakge

Current version on 24.03:... Chris W

05:50 PM Feature #8794: NTP authentication support

Applied in changeset commit:abdf94d9b09a6378b771a210bd57df65ce038843. Marcos M

05:44 PM Feature #8794 (Feedback): NTP authentication support

Implemented with commit:abdf94d9b09a6378b771a210bd57df65ce038843. Marcos M

05:45 PM Bug #15565: System proxy credentials with certain characters may fail to authenticate

Applied in changeset commit:529683187672cabc7db6b1ada2a9a3c77c35b6a7. Marcos M

05:36 PM Bug #15565 (Feedback): System proxy credentials with certain characters may fail to authenticate

Fixed in commit:529683187672cabc7db6b1ada2a9a3c77c35b6a7 Marcos M

05:07 PM Bug #15565 (Resolved): System proxy credentials with certain characters may fail to authenticate

The system proxy password should be URL-encoded, otherwise auth requests may fail. Additionally, input validation sho... Marcos M

05:39 PM Revision abdf94d9: Merge pull request #4658 from MatthewA1/ntp-authentication-feature-8794

Add support for NTP authentication. Implement #8794
Initial implementation allows for one auth key between all servers. Marcos M

05:16 PM Revision 52968318: URL encode HTTP_PROXY username and password. Fix #15565

Also enclose the fields with CDATA in config Marcos M

03:44 PM pfSense Packages Regression #15540 (Feedback): Cannot create new System Patches package custom entry on Plus 24.08/CE 2.8.0 Snapshots

Fixed with commit:4026d8132d10ec4702b1de6850c49b7723ec04e2. Marcos M

02:42 PM pfSense Packages Regression #15540 (Confirmed): Cannot create new System Patches package custom entry on Plus 24.08/CE 2.8.0 Snapshots

Looks like the fetch action isn't storing anything in the patch entry, probably a similar issue to the problem creati... Jim Pingle

10:00 AM pfSense Packages Regression #15540: Cannot create new System Patches package custom entry on Plus 24.08/CE 2.8.0 Snapshots

I tested against the version which seems to have the patch applied:... Danilo Zrenjanin

03:21 PM pfSense Packages Todo #15563 (Resolved): Remove unsupported dh_file configuration in FreeRADIUS

Marcos M

03:14 PM pfSense Packages Todo #15563 (In Progress): Remove unsupported dh_file configuration in FreeRADIUS

FreeRADIUS fails to start now if the configuration contains dh_file:
> /usr/local/etc/raddb/mods-enabled/eap: dh_fil... Marcos M

12:44 PM pfSense Docs Todo #15564 (Rejected): docs.netgate.com website not reachable on ipv6, only ipv4.

This site isn't intended for that sort of problem report, but I've passed it along to our IT crew. Thanks! Jim Pingle

09:32 AM pfSense Docs Todo #15564 (Rejected): docs.netgate.com website not reachable on ipv6, only ipv4.

IP docs.netgate.com/2610:160:11:11::4 is pingable but when I try to connect via webbrowser over ipv6 to docs.netgate.... Terje Strand

09:16 AM Bug #15537 (Confirmed): Separator positions are incorrect when copying interface group rules

Tested against:... Danilo Zrenjanin

06/20/2024

08:38 PM Revision f57da1e9: Use the repo name when saving the branch selection

https://redmine.pfsense.org/issues/15560 Marcos M

08:38 PM Revision ebc8e942: Remove redundant system link step

This code regressed at some point, making $repo equal e.g.:
'/usr/local/etc/pfSense/pkg/repos/pfSense-repo-0000.conf/... Marcos M

08:20 PM pfSense Plus Feature #15412 (Resolved): Improve error feedback from pfSense-upgrade

Marcos M

05:13 PM pfSense Plus Bug #15538 (Resolved): RAM disks trigger boot failure warning when using ZFS

Fixed with commit:4c51991f916720c07d451d5282f4c097b2f8139f Marcos M

05:04 PM Bug #15516 (Resolved): Per-rule byte counter values lost across a filter reload

Marcos M

04:56 PM Bug #15516: Per-rule byte counter values lost across a filter reload

Looks good with the patched kernel:... Steve Wheeler

04:55 PM Bug #15516 (Feedback): Per-rule byte counter values lost across a filter reload

Fixed in https://gitlab.netgate.com/pfSense/FreeBSD-src/-/commit/5c71199c72c42a9836ed6f36521a7ff95e169e0b
Steve an... Mateusz Guzik

03:29 PM Revision 4c51991f: rc.embedded: ensure /var/run is available early

Christian McDonald

06/19/2024

09:09 PM pfSense Packages Bug #15131 (Confirmed): OpenVPN client export issues with iPhone and IPV6 connections

I was able to replicate this on 24.03, removing the 4 at the end of udp4 allowed the config from the export package t... Jordan G

08:53 PM pfSense Packages Todo #15563 (Resolved): Remove unsupported dh_file configuration in FreeRADIUS

According to "FreeRADIUS":https://github.com/FreeRADIUS/freeradius-server/blob/db3d1924d9a2e8d37c43872932621f69cfdbb0... Markus *

07:53 AM Bug #12922: Classless static routes received on DHCP WAN can override chosen default gateway

The issue still exists in 2.7.2, the patch from David works. Oleksii Tucha

06/18/2024

11:52 PM Feature #15562 (New): Add support for OpenID

The idea have been discussed in the forum 2 years ago and the author said he would create a feature request about it.... Jacques Bourdeau

06:20 PM Bug #15561 (New): wireguardd stop command exits with error

Version: 24.03-RELEASE
Platform: KVM Guest
pfSense reboot (diag_reboot.php) calls ... Craig Coonrad

08:54 AM pfSense Plus Bug #15196: AWS ena interfaces can become unstable/stop responding

Craig Coonrad wrote in #note-34:
> dtrace submitted based on: https://redmine.pfsense.org/issues/15196#note-21
> HS... Kristof Provost

06/17/2024

05:17 PM pfSense Plus Bug #15196: AWS ena interfaces can become unstable/stop responding

dtrace submitted based on: https://redmine.pfsense.org/issues/15196#note-21
HS# 2755313440... Craig Coonrad

12:31 PM pfSense Plus Bug #15196: AWS ena interfaces can become unstable/stop responding

`can't allocate llinfo` is logged by arpresolve_full(), when lltable_alloc_entry() returns NULL. lltable_alloc_entry(... Kristof Provost

02:24 PM Feature #13293: Option to set auth-gen-token in OpenVPN GUI

!clipboard-202406171622-03s2h.png!
Just add "auth-gen-token;" to custom options during the server configuration. Gianni Binomio

02:14 PM Regression #15556 (Closed): Net installer fails (24.06-beta-6) to set vlan tag for PPPoE

Luiz Souza

01:05 PM Revision 5cac5bc4: Revert "Add dns/powerdns to poudriere_bulk"

This reverts commit f30a1955ce187e3b66d15dce6f4270aee606bd71. Christian McDonald

12:42 PM pfSense Docs Correction #15559 (Closed): Typo in "Contact with Netgate Servers"

Fixed, thanks! Jim Pingle

12:21 PM Feature #15371 (Duplicate): Add MAP-E support

Jim Pingle

10:54 AM pfSense Packages Regression #11634 (Resolved): bind hangs when pfsense is reconnecting as an openvpn client to a TUN openvpn server

I was able to reproduce this issue on 2.5.0 CE (Bind 9.16_10).
With active and working Bind, so I was able to reso... Azamat Khakimyanov

08:24 AM Feature #7781: Please Enable Rule Separators on Manual Outbound NAT

Can someone handle this feature request?
Without separators, managing complex configurations becomes really hard. Gianni Binomio

06/16/2024

08:44 AM Bug #15536: still generate XMLRPC Error even after checkbox Synchronize states is set to OFF

Jim Pingle wrote in #note-1:
> State synchronization is an entirely separate protocol from XMLRPC configuration sync... Sergei Shablovsky

08:42 AM Feature #10467: Email alert functionality for system health

tasty ratz wrote:
> Email alerting is not well documented and not very inclusive.
>
> I recently experienced an i... Sergei Shablovsky

08:35 AM Feature #14558: Feature Request: GUI options to Unbound Resolver's new DoH abilities

+ upvote for this!
Using DoT/DoH already are the standard nowadays (at the first because most used browsers Safar... Sergei Shablovsky

01:17 AM Feature #11901: Add MAP-T/MAP-E support to pfSense

Many components of MAP-E are in FreeBSD now. See for an example: https://github.com/pfsense/FreeBSD-src/commit/2aa21... Kris Phillips

01:12 AM Feature #15371: Add MAP-E support

This should be closed as a duplicate and comments added to the original redmine. Creating duplicates intentionally i... Kris Phillips

06/15/2024

02:56 PM pfSense Docs Correction #15559: Typo in "Contact with Netgate Servers"

(I'm really just testing the bug reporting process but I thought I'd share this one typo I happened upon.) Nick Weber

02:54 PM pfSense Docs Correction #15559 (Closed): Typo in "Contact with Netgate Servers"

https://docs.netgate.com/pfsense/en/latest/general/netgate-servers.html
The first paragraph of this page contain... Nick Weber

06:20 AM Regression #15556: Net installer fails (24.06-beta-6) to set vlan tag for PPPoE

It is fixed in pfSense-plus-installer-24.06-BETA7-amd64-latest.img the issue can be marked as resolved. Lev Prokofev

06/14/2024

10:36 PM Bug #15133 (Resolved): PHP error with OpenVPN server certificate verification if the certificate has multiple ``CN`` attributes

Marcos M

05:29 PM Bug #15133: PHP error with OpenVPN server certificate verification if the certificate has multiple ``CN`` attributes

reproduced on 23.09, 24.03
tested on
24.08-DEVELOPMENT (amd64)
built on Fri Jun 14 9:02:00 +03 2024
FreeBSD 15... Georgiy Tyutyunnik

04:13 PM pfSense Plus Bug #15196: AWS ena interfaces can become unstable/stop responding

Kristof Provost wrote in #note-31:
> Are the users affected by `kernel: arpresolve: can't allocate llinfo` running a... Christopher Cope

03:27 PM pfSense Plus Bug #15196: AWS ena interfaces can become unstable/stop responding

Are the users affected by `kernel: arpresolve: can't allocate llinfo` running a routing daemon (openbgpd, frr, ...)?
... Kristof Provost

01:43 PM pfSense Plus Bug #15196: AWS ena interfaces can become unstable/stop responding

Kristof Provost wrote in #note-29:
> Was there a `kernel: arpresolve: can't allocate llinfo ` in HS# 2828658261?
> ... Christopher Cope

07:39 AM pfSense Plus Bug #15196: AWS ena interfaces can become unstable/stop responding

Was there a `kernel: arpresolve: can't allocate llinfo ` in HS# 2828658261?
What sort of connection issues is it see... Kristof Provost

01:14 AM pfSense Plus Bug #15196: AWS ena interfaces can become unstable/stop responding

A fresh deployment of 24.03 on a t3.small. HS# 2828658261. No unusual CPU load.... Chris W

01:49 PM Bug #15557 (New): Dynamic DNS Cloudflare update fails with UNKNOWN ERROR, because get_failover_interface returns an interface without configured IP

Dynamic DNS service configured for Cloudflare DNS fails when WAN IP is configured with DHCP on bridge0 (vtnet0 + vtne... Theo Logan

07:54 AM Regression #15556 (Closed): Net installer fails (24.06-beta-6) to set vlan tag for PPPoE

It was working before on pfSense-plus-installer-24.10-DEVELOPMENT-amd64-20240531-0600.img but now on pfSense-plus-ins... Lev Prokofev

04:18 AM Bug #15555: Coredumps not functional for non-root processes.

Thanks for reviewing this. Jonathan Lee

06/13/2024

05:05 PM Revision f30a1955: Add dns/powerdns to poudriere_bulk

Christian McDonald

01:37 PM Bug #15555: Coredumps not functional for non-root processes.

This is not a Squid specific issue. Services/processes running as non-root users fail to create a core file. Steve Wheeler

02:50 AM Bug #15555 (New): Coredumps not functional for non-root processes.

Jun 12 19:02:08 kernel pid 80887 (squid), jid 0, uid 0: exited on signal 6 (no core dump - bad address)
Jun 12 19... Jonathan Lee

11:57 AM pfSense Plus Feature #11920: SAML Authentication for pfSense (VPN and webConfigurator)

That would be great, I'm changing my LOCAL AD to Microsoft Entra ID and I now need to authenticate my VPN with it. Wagner Ferreira

05:50 AM Feature #4632: Support for Multipath TCP (MPTCP)

+1
z z

06/12/2024

11:12 PM pfSense Packages Feature #15554 (New): CARP enabled Wireguard Failover

I am writing to propose two new features for pfSense that would greatly enhance the reliability, usability, and manag... Daewon Kim

08:18 PM pfSense Docs Todo #15553 (Duplicate): Feedback on pfSense® software Configuration Recipes — WireGuard Site-to-Site VPN Configuration Example

*Page:* https://docs.netgate.com/pfsense/en/latest/recipes/wireguard-s2s.html
*Feedback:*
Because the WireGuard... Ross Williams

12:27 PM Bug #15552: NTP option "DNS Resolution" has no effect when using NTP pool hostnames

Point 1 isn't relevant -- that has no effect on anything other than the firewall rules being able to pass IPv6, it do... Jim Pingle

01:40 AM Bug #15552 (Resolved): NTP option "DNS Resolution" has no effect when using NTP pool hostnames

This issue happened in the past on #10322. It appears it was corrected but has come back.
Details
# System -> ... Travis McMurry

06/11/2024

11:57 PM pfSense Packages Bug #15457 (Ready To Test): HAproxy disable zero copy forwarding

HAProxy package has been updated to 2.9.7 which includes the zero copy forwarding fix. Steve Wheeler

11:09 PM pfSense Packages Feature #12711: Add InfluxDB V2 support

I did not encounter any issues with the Telegraf config being overwritten.
I did experience Telegraf going down. So ... Craig Coonrad

09:16 PM pfSense Packages Feature #12711: Add InfluxDB V2 support

> [...] there is a problem when Telegraf restart so the config gets overwritten
Please open a new redmine (or fol... Marcos M

10:05 PM pfSense Plus Bug #15511 (Closed): Factory resetting the configuration removes WireGuard

Luiz Souza

09:09 PM pfSense Packages Bug #9138 (Closed): telegraf: add section for custom config lines

Custom configuration can already be added in current versions. Marcos M

09:09 PM pfSense Packages Feature #8099 (Closed): Add more configuration flexibility to Telegraf

Custom configuration can already be added in current versions. Marcos M

09:01 PM pfSense Packages Bug #9337 (Closed): Telegraf ping input fails

Current available version is 1.30.3 Marcos M

08:57 PM pfSense Packages Bug #14861 (Feedback): PHP error when pings are enabled but no ping hosts are defined

Marcos M

05:19 PM pfSense Packages Bug #14523 (Feedback): PHP error when using an unsupported alias type in Advanced Rule Settings

Marcos M

05:19 PM pfSense Packages Bug #14572 (Resolved): Unused DNSBL files may not be removed

Marcos M

05:08 PM Revision 429312ff: Update text references to UPnP protocols

Marcos M

04:26 PM Regression #15094 (In Progress): Updates fail against an authenticated upstream proxy

https://github.com/freebsd/pkg/pull/2286 Steve Wheeler

12:59 PM pfSense Packages Bug #11563 (Confirmed): BIND GUI writes TXT records > 255 characters

I tested it on 24.03-RELEASE (Bind 9.17) and on 24.08-DEVELOPMENT (Bind 9.18)
When I added some text with more than ... Azamat Khakimyanov

06/10/2024

10:09 PM Bug #15493: Kea sometimes provides an IP from the DHCP pool despite static mappings

Not a bug, the client ID differs and there is an option to ignore the client ID, which you most likely haven't set. Flole Systems

07:38 PM pfSense Packages Feature #12711: Add InfluxDB V2 support

Hi mmendoza / marcos-ng
It would be nice if you can update to the latest Telegraf version and update the package and... Marc Walter

05:50 PM Bug #15551 (Incomplete): New Kea DHCP breaks my PXE booting

There isn't nearly enough information here and this site is not for support or diagnostic discussion.
For assistan... Jim Pingle

05:22 PM Bug #15551 (Incomplete): New Kea DHCP breaks my PXE booting

When I have Kea DHCP turned on I can no longer build my PCS via PXE using Windows WD deploy server
Attached are lo... david scanlon

05:44 PM pfSense Packages Feature #15527 (New): IPSec Profile Wizard/Windows: Filter User Certificate by Issuer

Marcos M

04:55 PM pfSense Packages Feature #15527: IPSec Profile Wizard/Windows: Filter User Certificate by Issuer

Marcos M wrote in #note-1:
> Try applying the following patch using the "System Patches":https://docs.netgate.com/pfs... Alex Bryant

03:20 PM Bug #15516: Per-rule byte counter values lost across a filter reload

I agree with the analysis.
The entire thing however showed up because of performance problems on the 3100.
It v... Mateusz Guzik

12:25 PM Bug #15516: Per-rule byte counter values lost across a filter reload

I believe I see what's happening.
When rules are re-loaded we explicitly copy the counter state from the previous ... Kristof Provost

01:15 PM Feature #15550: Support using aliases/macros for sources when creating a block rule with ``easyrule`` in the CLI

This isn't a bug but a missing feature. Using an alias works for pass rules, but not for block rules.
Though I'm n... Jim Pingle

04:34 AM Feature #15550: Support using aliases/macros for sources when creating a block rule with ``easyrule`` in the CLI

I can replicate this on 24.03.
Documentation indicates an alias should work. dylan mendez

12:00 AM Feature #15550 (New): Support using aliases/macros for sources when creating a block rule with ``easyrule`` in the CLI

If I type from cli:... David Moo

12:56 PM pfSense Packages Feature #15549 (Rejected): Sending E-mail about system processes

That is way out of scope. This package doesn't monitor logs for strings and notify like that, and the items you menti... Jim Pingle

12:50 PM pfSense Packages Regression #15540: Cannot create new System Patches package custom entry on Plus 24.08/CE 2.8.0 Snapshots

Without the patch from the PR it happens on all of mine, but all of mine had existing patch entries. It's possible it... Jim Pingle

06/09/2024

05:15 PM pfSense Packages Bug #15088: BIND does not start after a config restore

Tested on 23.05.1 Bind 9.17 (Bind916-9.16.39), on 23.09.1 Bind 9.17 (Bind916-9.16.42)
and on 24.08-DEV Bind 9.18 (Bi... Azamat Khakimyanov

10:04 AM pfSense Packages Feature #15549 (Rejected): Sending E-mail about system processes

It would be nice to add the ability to send e-mails about hardware statuses and other system processes. Ene As

12:49 AM pfSense Plus Regression #15494: Reinstall Packages button reports another instance of ``pfSense-upgrade`` is running

Still seeing the same on... Christopher Cope

12:46 AM pfSense Packages Feature #15548 (Confirmed): Add packages for Zabbix 7.0 Agent and Proxy

Confirmed not available in 24.03 or 24.08. Kris Phillips

12:36 AM pfSense Packages Bug #15529: The path on the AWS High Availability page doesen't show the current tab

Also confirmed on 24.03. Kris Phillips

06/08/2024

10:06 PM Bug #15098: Wireguard crashes on boot if PPPoE is the default gateway

Tested in 2.7.2
single WAN with PPPoE Gateway and a Wireguard Tunnel.
Tunnel came up without issues, PPPoE sess... dylan mendez

08:21 PM pfSense Packages Bug #15027 (Feedback): Bind DNS Server cannot reorder zones

Azamat Khakimyanov

08:20 PM pfSense Packages Bug #15027: Bind DNS Server cannot reorder zones

Tested on 24.08-DEV (built on Mon Jun 3 6:00:00 UTC 2024) with Bind 9.18
Reordering zones works as it should: after ... Azamat Khakimyanov

07:58 PM pfSense Packages Regression #15540: Cannot create new System Patches package custom entry on Plus 24.08/CE 2.8.0 Snapshots

I'm not seeing this issue on the following version, which doesn't have the pull request above merged yet.... Christopher Cope

07:13 PM pfSense Packages Feature #15548 (Resolved): Add packages for Zabbix 7.0 Agent and Proxy

Zabbix 7.0 has been released. https://www.zabbix.com/rn/rn7.0.0
This might be a good opportunity to address the Za... Andrew Almond

07:11 PM Bug #13723: dpinger doesn't renew Gateway Monitoring IP address for IPsec VTi after changing IPsec VTi subnet

Retested on latest 24.08 (built on Fri Jun 7 18:50:00 UTC 2024)
I still saw exactly the same behavior: after chang... Azamat Khakimyanov

08:44 AM Bug #13723: dpinger doesn't renew Gateway Monitoring IP address for IPsec VTi after changing IPsec VTi subnet

Tested on 24.03, the monitoring IP changes immediately after applying the changes. Lev Prokofev

09:19 AM Bug #15546: when trafic sphaper; delimiters are applied do not work in linux client over nat

Chris W wrote in #note-1:
> What are you changing about the firewall rule which makes it work, and which pipe are yo... sezer h

06/07/2024

07:24 PM Bug #15423 (Resolved): PHP error when applying interface settings if the ``/tmp/.interfaces.apply`` file is present but empty

Marcos M

04:05 PM Bug #15423: PHP error when applying interface settings if the ``/tmp/.interfaces.apply`` file is present but empty

reproduce on 24.03 by manually creating empty file /tmp/.interfaces.apply
tested on
24.08-DEVELOPMENT (amd64)
bu... Georgiy Tyutyunnik

05:11 PM Bug #15546: when trafic sphaper; delimiters are applied do not work in linux client over nat

What are you changing about the firewall rule which makes it work, and which pipe are you using (In or Out)? Pf doesn... Chris W

10:31 AM Bug #15546 (New): when trafic sphaper; delimiters are applied do not work in linux client over nat

when i set limiters from trafic shapers 10Mbit/s source address the nat rule not working correctly for just linux cl... sezer h

04:26 PM pfSense Plus Bug #15196: AWS ena interfaces can become unstable/stop responding

fresh dtrace didn't produce meaningful results.
asked client to work with affected firewall instead of restoring it ... Georgiy Tyutyunnik

03:59 PM Revision 11b34dac: Correct config_get_path -> config_set_path in shaper.inc

Reid Linnemann

03:59 PM Revision 65db621a: Add defaults to config_get_path where needed in select files

Some calls to config_get_path may introduce errors if the key does not exist and
the default of null is returned. Thi... Reid Linnemann

02:24 PM Bug #15547 (Not a Bug): Filter rule association incorrectly displayed when editing a port forward

This is actually the expected behaviour.
The shown 'Rule NAT' is confusing if no descriptions are added. Otherwise... Steve Wheeler

02:05 PM Bug #15547 (Not a Bug): Filter rule association incorrectly displayed when editing a port forward

When editing an existing port forward the value shown for 'Filter rule association' is 'Rule NAT' which is not valid ... Steve Wheeler

12:23 PM pfSense Plus Bug #15545 (Incomplete): traffic shaper (Limiter) causes kernel panic -> random reboot

Please attach the full crash dump including the backtrace. Without that information there isn't enough to go on here ... Jim Pingle

07:54 AM pfSense Plus Bug #15545: traffic shaper (Limiter) causes kernel panic -> random reboot

Fatal trap 12: page fault while in kernel mode Evgeny Korostelev

07:37 AM pfSense Plus Bug #15545 (Incomplete): traffic shaper (Limiter) causes kernel panic -> random reboot

After update Pfsense Plus on version 24.03 random reboots appeared.
Canceling the use of a limiter in the rules so... Evgeny Korostelev

06/06/2024

09:03 PM Revision 2cb1f506: Fix RRD script syntax regression

Marcos M

07:03 PM pfSense Plus Bug #15535: Outgoing packets with Private source IP on WAN

I don’t use NAT in such a way that it would try to make two connections use the same conflicting information
There a... David G

04:01 PM Feature #15544 (New): Add hostname to Slack notifications

If multiple pfSense instances are using the same Slack channel, there's currently no way to tell which instance is se... Chris W

03:48 PM pfSense Packages Bug #15457: HAproxy disable zero copy forwarding

I'm not sure this kernel panic is related to the zero-copy-forwarding issue in HAProxy 2.9.1. Steve Wheeler

02:04 PM pfSense Packages Bug #15457: HAproxy disable zero copy forwarding

Backtrace:... Steve Wheeler

03:44 PM pfSense Packages Regression #15540 (Pull Request Review): Cannot create new System Patches package custom entry on Plus 24.08/CE 2.8.0 Snapshots

https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/397 Marcos M

12:53 PM Feature #15543 (Duplicate): FREE DISK SPACE and /var/log LIGS SIZE NOTIFICATION

Already covered by other existing requests such as #10467 Jim Pingle

12:14 AM Feature #15543: FREE DISK SPACE and /var/log LIGS SIZE NOTIFICATION

Sorry for misstyping:) Sergei Shablovsky

12:13 AM Feature #15543 (Duplicate): FREE DISK SPACE and /var/log LIGS SIZE NOTIFICATION

Brilliant pfSense DevTeam!
Using pfSense’s IDS/IPS both Snort/Suricata and Ntopng GROWING EACH 6-8month since v.2.... Sergei Shablovsky

12:42 PM Bug #14083: Adding MSS and MTU values on a LAGG VLAN interface breaks connectivity

This patch resolved an issue I was having as well. lagg0 assigned, enabled, and unnumbered, MTU 9000 set on it, and s... Chris Linstruth

06/05/2024

11:15 PM Bug #14435 (Incomplete): PHP error with limiters

Reproducible steps or more context is needed for this to be investigated further. Marcos M

06:19 PM pfSense Plus Feature #15412 (Pull Request Review): Improve error feedback from pfSense-upgrade

It's not really practical to implement root cause tests in this case, but we can expose what part of the process fail... Marcos M

05:18 PM pfSense Packages Feature #15542 (Not a Bug): Default route withdrawal

This site is not for support or diagnostic discussion.
For assistance in solving problems, please post on the "Net... Jim Pingle

05:12 PM pfSense Packages Feature #15542 (Not a Bug): Default route withdrawal

I am running a PFSense FW with one WAN interface and one LAN interface. The WAN is our internet connection and the L... Chuck Slayton

02:13 PM Bug #15471 (Resolved): Memory leak in pfSense module function ``pfSense_get_ifaddrs()``

Tested on a system where I could reproduce the problem before with LCDProc and even after 17 hours there is zero incr... Jim Pingle

06/04/2024

09:30 PM Bug #14708 (Feedback): PHP error when the system fails to create an interface

Applied in changeset commit:ac39332caa1050ee56574395b73b4359d4218999. Marcos M

09:30 PM Bug #15133 (Feedback): PHP error with OpenVPN server certificate verification if the certificate has multiple ``CN`` attributes

Applied in changeset commit:70defd0f1a465b46754faecdc2fc96a0ef7cd279. Marcos M

09:23 PM Revision ac39332c: Handle failures to create an interface. Fix #14708

The function pfSense_interface_create2() may fail to create the
requested interface, in which case it returns the arr... Marcos M

09:21 PM Revision 70defd0f: Handle certificates with multiple CNs. Fix #15133

Multiple CNs are not supported. For compatibility, default to using
the first CN in the certificate instead of return... Marcos M

09:20 PM Bug #15423 (Feedback): PHP error when applying interface settings if the ``/tmp/.interfaces.apply`` file is present but empty

Applied in changeset commit:82e22457b04bf44c55cc1c4c6df91670ddb3e77c. Marcos M

09:12 PM Revision 82e22457: Add a helper function for unserialize(). Fix #15423

For calls to unserialize() which do not check for errors, use the
helper function instead. Marcos M

07:41 PM pfSense Packages Feature #15541 (New): CRON: option to enable/disable task

Check the possibility of creating an option to activate/deactivate tasks in cron.
!clipboard-202406041639-qmd5p.pn... Fabio Rafael Kochhann

07:35 PM pfSense Docs Todo #15497 (Closed): Add a bit more context to Gateway monitoring Action

I added a more info in the block for that setting, should hopefully be more informative now. Jim Pingle

07:14 PM pfSense Packages Regression #15540 (Resolved): Cannot create new System Patches package custom entry on Plus 24.08/CE 2.8.0 Snapshots

At some point between May 14th snapshots and June 2nd snapshots, something broke the ability to create new System Pat... Jim Pingle

07:09 PM pfSense Docs Todo #15522 (Closed): Feedback on Routing — Gateway Groups

Fixed that (plus one more on @multiwan/requirements@). Thanks! Jim Pingle

07:05 PM pfSense Docs Todo #15515 (Closed): Feedback on pfSense® software Configuration Recipes — WireGuard Site-to-Multisite VPN Configuration Example

You are right that wouldn't be valid for multiple clients in the same subnet. I updated the diagram and references in... Jim Pingle

07:02 PM pfSense Plus Regression #15539 (Resolved): PF syntax error when ``pflow`` is present on ``block`` rules

Fixed with 91628a2ed3d32140a2ee66806504590a65e2654f. Marcos M

06:54 PM pfSense Plus Regression #15539 (In Progress): PF syntax error when ``pflow`` is present on ``block`` rules

Marcos M

06:43 PM pfSense Plus Regression #15539 (Resolved): PF syntax error when ``pflow`` is present on ``block`` rules

Something either changed in rule generation or pf that is now triggering a syntax error for rules which have the @pfl... Jim Pingle

06:58 PM Revision 91628a2e: Only apply state tracking to pass rules

State tracking only applies to pass rules. This was broken with the
refactor of 3e28d716. Marcos M

06:36 PM pfSense Docs Correction #15514 (Closed): Add Netgate 4200 Pre-POST Light States

Added: https://gitlab.netgate.com/docs/pfsense-platforms/-/commit/d3056385ee5b1ccf0b20a1a70b55b30dbf27e30a Jim Pingle

04:46 PM Bug #15531: VLANs not cleared in console configuration despite warning

I can replicate this, when doing changes on the console without using the GUI and restarting, it keeps asking to conf... dylan mendez

12:24 PM pfSense Plus Bug #15446 (Resolved): Kernel panic with pflow configured and active

Jim Pingle

03:36 AM pfSense Plus Bug #15446: Kernel panic with pflow configured and active

I booted to the 24.08 dev build and ran IPFIX for about 8-10 hours.
No kernel panics. This appears resolved. Thanks. Craig Coonrad

12:08 AM pfSense Plus Bug #15538: RAM disks trigger boot failure warning when using ZFS

This actually fails the same way if you enable RAM disks after upgrading. Steve Wheeler

12:03 AM pfSense Plus Bug #15538 (Resolved): RAM disks trigger boot failure warning when using ZFS

Upgrades from 24.03 to 24.08-dev builds fail at first boot after rebooting into the new BE for the upgrade.... Steve Wheeler

06/03/2024

10:39 PM pfSense Plus Bug #13964 (Resolved): PHP syntax error in ``ec2_setup.php``

This is fixed with the config access work in 24.08. Marcos M

10:34 PM pfSense Packages Regression #13970: PHP error in apcupsd widget from UTF-8 string handling

Further feedback/issues would be best left to separate redmine reports with steps to reproduce. Marcos M

10:32 PM pfSense Packages Regression #13970 (Resolved): PHP error in apcupsd widget from UTF-8 string handling

Marcos M

10:32 PM pfSense Packages Regression #13970 (Closed): PHP error in apcupsd widget from UTF-8 string handling

Marcos M

10:30 PM pfSense Packages Bug #13985 (Duplicate): Telegraf error After Update PFSense to 23.01

Marcos M

10:27 PM Regression #13988 (Duplicate): PHP error with OpenVPN if the server certificate subject has duplicate components

Marcos M

10:21 PM pfSense Packages Bug #14419 (Closed): PHP error when trying to access pfBlockerNG configuration

With the move to pfBlockerNG v3 (from v2), pfblockerng.xml is no longer used to define the package GUI. The error is ... Marcos M

10:03 PM pfSense Packages Bug #14523 (Pull Request Review): PHP error when using an unsupported alias type in Advanced Rule Settings

https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/400
This adds input validation to make sure the ... Marcos M

09:28 PM pfSense Packages Bug #14572 (Pull Request Review): Unused DNSBL files may not be removed

https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/400
The error is related to removing unused DNSB... Marcos M

08:14 PM Bug #14708 (Pull Request Review): PHP error when the system fails to create an interface

https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1157
This is not specific to 6rd. This can happen when... Marcos M

06:45 PM pfSense Packages Regression #14850 (Pull Request Review): Unreadable alerts file results in PHP error

This indicates that the Snort UUID alert file exists but was not readable for some reason. The root cause of that can... Marcos M

06:30 PM pfSense Packages Bug #14861 (Pull Request Review): PHP error when pings are enabled but no ping hosts are defined

This happens when pings are enabled but no ping hosts are defined - simply disable pings to work around the PHP error... Marcos M

06:14 PM pfSense Plus Bug #15196: AWS ena interfaces can become unstable/stop responding

So the log in comment 23 has "kernel: arpresolve: can't allocate llinfo for 172.21.253.1 on ena1". So I'm wondering i... Kristof Provost

07:24 AM pfSense Plus Bug #15196: AWS ena interfaces can become unstable/stop responding

Here's dtrace from HS# 2785863048. This is the ticket Chris mentioned: https://redmine.pfsense.org/issues/15196#note-23 Azamat Khakimyanov

06:13 PM Bug #15133 (Pull Request Review): PHP error with OpenVPN server certificate verification if the certificate has multiple ``CN`` attributes

https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1156
We can handle multiple CNs by simply only using t... Marcos M

12:23 PM Feature #15323 (Pull Request Review): Display server description when WOL is sent using mac url or power-on button

Jim Pingle

12:22 PM pfSense Plus Bug #15535 (Not a Bug): Outgoing packets with Private source IP on WAN

If you use NAT in such a way that it would try to make two connections use the same conflicting information, it will ... Jim Pingle

12:18 PM pfSense Plus Bug #15418 (Incomplete): Incorrect links to edit static mapping and WOL on DHCPv6 leases (status_dhcpv6_leases.php). URL parameter values missing.

Jim Pingle

12:16 PM Bug #15536 (Not a Bug): still generate XMLRPC Error even after checkbox Synchronize states is set to OFF

State synchronization is an entirely separate protocol from XMLRPC configuration sync. State syncrhonization uses the... Jim Pingle

01:07 AM pfSense Packages Feature #9833: ACME: add ability to use custom ACME server

+1 for this as well. Javier Ramirez

06/02/2024

06:31 PM Bug #15537 (Resolved): Separator positions are incorrect when copying interface group rules

This is a bug similar to #14691 and #14619, but seems to only occur on interface groups.
h1. Steps to reproduce
... Christopher Jung

05:46 PM Bug #15536 (Not a Bug): still generate XMLRPC Error even after checkbox Synchronize states is set to OFF

ISSUE
Generating ERROR both in log and Notice WbGUI
XMLRPC Error
* A communications error occurred while atte... Sergei Shablovsky

05:38 PM pfSense Packages Bug #15296: WAN Interface cannot added to ntopng if offline-packet loss

Kris Phillips wrote in #note-2:
> Sergei Shablovsky wrote in #note-1:
> > Sergei Shablovsky wrote:
> > >
> > >
... Sergei Shablovsky

03:59 PM pfSense Plus Bug #15196: AWS ena interfaces can become unstable/stop responding

They do not appear to be seeing noticeably-high CPU load. Chris Linstruth

02:35 PM pfSense Plus Bug #15196: AWS ena interfaces can become unstable/stop responding

Another user is seeing similar behavior on an m5.xlarge with 24.03.
Main symptom there is pfSense static routes de... Chris Linstruth

01:45 AM Feature #15323: Display server description when WOL is sent using mac url or power-on button

the described behavior is also present in the current version of pfSense+ as well (24.03) Jordan G

06/01/2024

09:34 PM pfSense Docs Todo #15497: Add a bit more context to Gateway monitoring Action

Adding additional color to the documentation isnt a bad thing especially when questions about gateway monitoring come... Mike Moore

09:04 PM pfSense Docs Todo #15497: Add a bit more context to Gateway monitoring Action

Seems good to document that it can be beneficial in the case of a single WAN connection or alternatively that it's us... Jordan G

01:30 AM pfSense Docs Todo #15497: Add a bit more context to Gateway monitoring Action

If the gateway monitoring action is disabled, but it's still being monitored, the gateway won't be changed from up to... Kris Phillips

09:07 PM pfSense Packages Regression #15469: RRD Graphs height is smaller than expected

confirmed, resetting RRD data does not seem to provide any change in display scale Jordan G

07:49 PM pfSense Packages Bug #15529 (Confirmed): The path on the AWS High Availability page doesen't show the current tab

Confirmed on:... Christopher Cope

06:59 PM pfSense Packages Regression #14764 (Confirmed): HAProxy local syslog not working

I can confirm that logging into the local syslog is not functioning as expected.
The recommended workaround has re... Danilo Zrenjanin

06:22 PM Bug #15534: pfSense’s installer not table to see ZFS-formatted internal drive

Christopher Cope wrote in #note-1:
> Testing locally and the installer is able to see previously ZFS formatted drive... Sergei Shablovsky

06:19 PM Bug #15534: pfSense’s installer not table to see ZFS-formatted internal drive

Christopher Cope wrote in #note-1:
Thank You for answering!
> I originally misread the report. Please provide a... Sergei Shablovsky

03:09 PM Bug #15534 (New): pfSense’s installer not table to see ZFS-formatted internal drive

Christopher Cope

03:05 PM Bug #15534 (Duplicate): pfSense’s installer not table to see ZFS-formatted internal drive

I originally misread the report. Please provide a step-by-step to reproduce this issue, so we can attempt to recreate... Christopher Cope

01:10 PM pfSense Plus Bug #15535: Outgoing packets with Private source IP on WAN

After stopping and starting the SIP traffic the processing is correct:
Host is sending the same UDP packets with s... David G

06:40 AM pfSense Plus Bug #15535 (Incomplete): Outgoing packets with Private source IP on WAN

Capture on the WAN interface shows, that there are some packets leaving towards the Internet with Private RFC1918 sou... David G

01:21 AM pfSense Packages Bug #15313: Zabbix server 6.4.12 requires Zabbix proxies to be version 6.4.12

Checked in 24.03 release. Zabbix is still at 6.4.10. Kris Phillips

01:12 AM pfSense Plus Bug #15418: Incorrect links to edit static mapping and WOL on DHCPv6 leases (status_dhcpv6_leases.php). URL parameter values missing.

This should be marked as Incomplete until more information can be provided on how this is reproduced. I don't see a ... Kris Phillips

12:26 AM pfSense Packages Feature #15527 (Ready To Test): IPSec Profile Wizard/Windows: Filter User Certificate by Issuer

-Try applying the following patch using the "System Patches":https://docs.netgate.com/pfsense/en/latest/development/s... Marcos M

12:23 AM pfSense Packages Bug #15385 (Pull Request Review): PHP crash when exporting Apple profile, while IPsec P1 authentication method set to "Mutual Certificate"

https://gitlab.netgate.com/pfSense/factory-ports/-/merge_requests/104 Marcos M

05/31/2024

10:15 PM Bug #15534 (New): pfSense’s installer not table to see ZFS-formatted internal drive

Brilliant pfSense DevTeam!
*CONDITIONS*
Installing pfSense CE 2.7.2-REL from USB-flash (Transcend 16Gb USB 2.0, ... Sergei Shablovsky

10:09 PM Bug #15423 (Pull Request Review): PHP error when applying interface settings if the ``/tmp/.interfaces.apply`` file is present but empty

https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1155 Marcos M

09:46 PM pfSense Plus Bug #15533 (New): Boot verification script over matches

The boot verification script for ZFS boot environments can over match against other processes and fail to run due to ... Steve Wheeler

09:42 PM pfSense Plus Bug #14685: Kernel panic on reroot

Since this bug is triggered by unloading the zfs module incorrectly on systems that do not require it also see: https... Steve Wheeler

09:11 PM pfSense Plus Bug #14685 (Feedback): Kernel panic on reroot

I fixed it, see https://gitlab.netgate.com/pfSense/FreeBSD-src/-/commit/17758247bb690c60c7e1dbdbded2f21ad61d1f82 Mateusz Guzik

07:10 PM Bug #15449: IPsec VTI static routes may not be added after the system boots

The patch is working, confirmed in ticket #2703470963 and on my test device. The issue can be marked as resolved. Lev Prokofev

06:05 PM Bug #15449 (Resolved): IPsec VTI static routes may not be added after the system boots

Marcos M

04:40 PM Bug #15449 (Feedback): IPsec VTI static routes may not be added after the system boots

Applied in changeset commit:487d7d5e322993703716439422e3d032e40b61b4. Marcos M

04:05 PM Bug #15449 (Ready To Test): IPsec VTI static routes may not be added after the system boots

The inconsistency of the issue seems to stem from the @Gateway Monitoring@ setting. When unchecked (default), the rou... Marcos M

06:44 PM Bug #15362: Config upgrade error with empty gateway interval tags.

Fixed with @de9a3545ce34089e971947fd285522a406fce01f@ Marcos M

06:41 PM Bug #15362 (Resolved): Config upgrade error with empty gateway interval tags.

Marcos M

06:40 PM pfSense Packages Feature #15532: Update NUT status widget

Implemented in pull request 1374 (https://github.com/pfsense/FreeBSD-ports/pull/1374). Denny Page

06:37 PM pfSense Packages Feature #15532 (Resolved): Update NUT status widget

Update usability of the NUT status widget as follows:
* Add color coded icon for Summary status.
* Add line voltage... Denny Page

06:40 PM Revision de9a3545: Handle empty values during config upgrade. Fix #15362

The config may have an empty string - use 'empty()' instead of
'isset()' since '0' is not valid in this case. Marcos M

06:30 PM Bug #14859 (Resolved): Config upgrade error: upgrade_config.inc:6135

These should be resolved with the config access work for 24.08. Marcos M

06:28 PM Bug #14742 (Resolved): Several PHP errors in upgrade_config.inc

These should be resolved with the config access work for 24.08. Marcos M

05:25 PM Regression #15430 (Resolved): Interface-bound state policy does not handle IPsec VTI traffic as expected when filtering on ``enc0`` interface

Great, thanks for confirming! Marcos M

05:09 PM Regression #15430: Interface-bound state policy does not handle IPsec VTI traffic as expected when filtering on ``enc0`` interface

For validation i see my bgp peers haven't dropped. Mike Moore

04:41 PM Regression #15430: Interface-bound state policy does not handle IPsec VTI traffic as expected when filtering on ``enc0`` interface

There was an additional change after that, use the following instead; this should hopefully be included in the System... Marcos M

03:58 PM Regression #15430: Interface-bound state policy does not handle IPsec VTI traffic as expected when filtering on ``enc0`` interface

Patch applied.
Should i undo my previous changes of floating policy? Mike Moore

04:31 PM Revision 487d7d5e: Update the interface cache when configuring IPsec. Fix #15449

Marcos M

11:04 AM Bug #15531 (New): VLANs not cleared in console configuration despite warning

When configuration that includes VLANs is restored to different hardware (different NIC type), pfSense will show Inte... Jernej Simončič

09:28 AM pfSense Packages Bug #15530 (Rejected): pfBlockerNG Sync Tab helptext

Under *Firewall/pfBlockerNG/Sync*, the help text under the *Enable Sync* dropdown menu is unclear. ... Danilo Zrenjanin

09:09 AM pfSense Packages Regression #14189: pfBlocker-NG: HA-Sync is not working

!clipboard-202405311108-n6kth.png!
Danilo Zrenjanin

09:06 AM pfSense Packages Regression #14189 (Confirmed): pfBlocker-NG: HA-Sync is not working

Danilo Zrenjanin

09:06 AM pfSense Packages Regression #14189: pfBlocker-NG: HA-Sync is not working

I defined GeoIP IPv4 entry for France on the Primary.
I can confirm that the configuration doesn't get replicated f... Danilo Zrenjanin

07:50 AM pfSense Packages Bug #15529 (Confirmed): The path on the AWS High Availability page doesen't show the current tab

No matter which tab you select (IPs, Routes, or Elastic IPs) the path at the top left corner remains *Package/AWS Hig... Danilo Zrenjanin