Project

General

Profile

Activity

From 10/03/2024 to 11/01/2024

11/01/2024

10:10 PM Revision 282d4a80: pfSense-Installer: Fix the issue when only the WAN settings are present.
During the configuration import, if only the WAN settings are present, remove
the LAN settings from the configuration...
Luiz Souza
09:53 PM pfSense Docs New Content #15812 (Resolved): Recipe for OpenVPN Site-to-Site SSL/TLS with DCO
Currently, we have two S2S OpenVPN examples in our docs:
We have this one, which is a Site-to-Multi-site example:
...
Kris Phillips
07:30 PM pfSense Docs Todo #15811 (Closed): Feedback on Troubleshooting — Troubleshooting Boot Issues
*Page:* https://docs.netgate.com/pfsense/en/latest/troubleshooting/boot-issues.html
*Feedback:*
That's a big "N...
Sascha Borer
07:25 PM Regression #15810 (Resolved): ntpd can fail to start when unbindable addresses exist
When IP addresses exist on the system that ntpd cannot bind to it can fail to start and core dump.
For example an ...
Steve Wheeler
05:22 PM Bug #15809 (New): UFS upgrades do not create new log files
Upgrading UFS systems to versions that require additional log files does not create them until a second reboot has ha... Steve Wheeler
12:34 PM pfSense Packages Bug #15733 (Resolved): Changing the account key name does not update respective certificates
reproduced on:
2.7.2-RELEASE (amd64)
built on Mon Mar 4 19:53:00 UTC 2024
FreeBSD 14.0-CURRENT
tested on, fixed...
Georgiy Tyutyunnik
09:31 AM Feature #15808 (Resolved): PREF64 support in Router Advertisements
Please implement RFC8781 Discovering PREF64 in Router Advertisements (IPv6-Mostly Networks) to support IPv6-Mostly Ne... Bart Schapendonk
09:28 AM Feature #15807 (New): RFC8925 IPv6-Only Preferred Option for DHCPv4 (IPv6-Mostly Networks)
Please implement RFC8925 IPv6-Only Preferred Option for DHCPv4 to support IPv6-Mostly Networks
- This is just the ...
Bart Schapendonk
08:47 AM Bug #15685 (Resolved): Mobile IPsec does not automatically switch to failover gateway
Tested against the latest dev release.
The issue is fixed.
I am closing this ticket as resolved.
Danilo Zrenjanin
12:47 AM Revision d376ac6a: Gateways with monitoring disabled may use incorrect address family
When return_gateways_status() processes gateways that have monitoring
disabled, the source IP used is always IPv4 reg...
Marcos M
12:47 AM Revision 055fc19e: Gateways with monitoring disabled may be treated as down
When return_gateways_status() is called with $byname=false, gateways
that have monitoring disabled will be returned a...
Marcos M

10/31/2024

09:09 PM pfSense Packages Todo #15806 (Duplicate): Add WAN export interface for wiregaurd

Can I choose the network interface like openvpn so that I can choose the WAN exit?
yon Liu
08:45 PM pfSense Plus Bug #15740: NAT uses unknown IP address
The dignostic files have been uploaded on the link provided. David G
08:44 PM pfSense Plus Bug #15740: NAT uses unknown IP address
I provided all the information Dylan requested. Why did you change the status to Incomplete? David G
05:33 PM pfSense Plus Bug #15196 (Not a Bug): AWS ena interfaces can become unstable/stop responding
This is not a bug and presents regardless of OS. It's part of the behavior of T3 instance sizes. If an instance excee... Jim Pingle
04:31 PM Feature #15805: DHCP IPv4 and IPv6 KeaMA migration assistant and KeaMA Lease Migration tool
With migration to Kea DHCP eventually coming to being eminent and open-source versions of Kea missing various hooks/f... Jonathan Smolka
04:24 PM Feature #15805 (New): DHCP IPv4 and IPv6 KeaMA migration assistant and KeaMA Lease Migration tool
With migration to Kea DHCP eventually coming to being eminent and open-source versions of Kea missing various hooks/f... Jonathan Smolka
04:22 PM Bug #15795 (Resolved): Removing a route from the High Availability primary node does not remove the entry from the routing table on the secondary node
The issue was resolved by applying the second patch subsequent to the first one.
I am closing this ticket as resol...
Danilo Zrenjanin
04:19 PM Bug #15795: Removing a route from the High Availability primary node does not remove the entry from the routing table on the secondary node
Fixed with commit:05f941f3901ac32cd2bc06c7fb63954be2c44c4b. Marcos M
02:13 PM Bug #15795: Removing a route from the High Availability primary node does not remove the entry from the routing table on the secondary node
I applied the patch to the HA pair operating on the latest development release. However, the issue remains unresolved... Danilo Zrenjanin
04:19 PM pfSense Packages Bug #15804: pfBlockerNG devel ASN list can hang GUI
It's probably a duplicate of https://redmine.pfsense.org/issues/12822 Danilo Zrenjanin
03:24 PM pfSense Packages Bug #15804 (New): pfBlockerNG devel ASN list can hang GUI
in some cases while working with ASN format IP lists in pfBlockerNG devel 3.2.1_19 GUI can hang on the preview list o... Georgiy Tyutyunnik
03:17 PM pfSense Packages Bug #15649 (Resolved): pfBlockerNG can't operate ASN-based Aliases
tested on
24.11-BETA (amd64)
built on Thu Oct 31 7:00:00 CET 2024
FreeBSD 15.0-CURRENT
pfblockerng devel 3.2.1_19
Georgiy Tyutyunnik
03:16 PM pfSense Packages Bug #15649: pfBlockerNG can't operate ASN-based Aliases
ASN-format lists now populate correctly with help of ipinfo token
Georgiy Tyutyunnik
03:00 PM pfSense Packages Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy
Hello,
We also would like to know the estimate, this would be really helpful.
J R
02:56 PM Revision 05f941f3: Apply removed route changes with all routes removed.
Followup to e2eb3e16e9ef63a375718dcc06b54a9765266244 Marcos M
12:51 PM pfSense Plus Bug #15472: potential bug with the ath driver
Does this still happen with the newer drivers in 24.03? That crash is in 23.05.1. Steve Wheeler
01:19 AM pfSense Plus Bug #15472: potential bug with the ath driver
I actually could not resolve this issue even with a new 2nd Compex card installed, the same thing occurred it would g... Jonathan Lee
01:06 AM Feature #8794: NTP authentication support
@Marcos Thank you!!! Jonathan Lee
12:51 AM Feature #8794 (Resolved): NTP authentication support
Marcos M
01:01 AM pfSense Packages Bug #14390: Squid: SECURITY ALERT: Host header forgery detected
Hello, fellow Redmine community members, the Squid-users email system has stated most/almost all of the security vuln... Jonathan Lee
12:50 AM Feature #12522 (Resolved): More GUI options for OpenVPN Client-Specific Overrides
Marcos M
12:49 AM Bug #12938 (Needs Patch): Incorrect warning from ``radvd`` about ``AdvRDNSSLifetime`` value
Marcos M
12:46 AM Bug #15700 (Resolved): Package navigation menus can be duplicated when reinstalling the package
Marcos M
12:46 AM pfSense Packages Feature #15528 (Resolved): Add fix for #15430 to pfSense+ 24.03
Marcos M
12:44 AM Feature #10000 (Resolved): Enable ``@`` support for Azure in Dynamic DNS
Marcos M
12:44 AM Feature #14289 (Resolved): Enable ``@`` support for name.com in Dynamic DNS
Marcos M
12:43 AM Bug #14708 (Resolved): PHP error when the system fails to create an interface
Marcos M
12:41 AM pfSense Packages Bug #14861 (Resolved): PHP error when pings are enabled but no ping hosts are defined
Marcos M
12:36 AM pfSense Plus Bug #15638 (Resolved): BE verification fails after logging in before the boot process finishes
Marcos M
12:33 AM Bug #15684 (Resolved): Panic in ``tcp_m_copym`` with selective ACK enabled
Marcos M
12:30 AM Bug #15685 (Feedback): Mobile IPsec does not automatically switch to failover gateway
Applied in changeset commit:c1edb3ff97b20224858795ce3ef872a1cc9d4f53. Marcos M
12:21 AM Revision c1edb3ff: Reload mobile IPsec on gateway failover. Fix #15685
Marcos M

10/30/2024

11:47 PM pfSense Packages Feature #15674 (Resolved): Support custom IP and Port variables for interfaces
Marcos M
11:46 PM Bug #15704 (Resolved): Automatic EDNS value may be lower than expected
Marcos M
11:45 PM Bug #15708: The filterdns service won't start
This limitation is documented here:
https://docs.netgate.com/pfsense/en/latest/troubleshooting/filterdns-thread-erro...
Marcos M
11:39 PM Bug #15711 (Feedback): Special characters in the ACB configuration change description can cause PHP errors
Marcos M
11:35 PM Revision f0c5b768: Fix parsing for ACB change reason. Fix #15711
Fix it by delimiting on the last occurrence of the delimiter. Marcos M
10:00 PM Todo #15728 (Resolved): Improve Thermal Sensors Dashboard widget refresh code
Marcos M
09:59 PM Bug #15738 (Rejected): xml parsing: whitespace causes errors.
There are long-term plans that can help with the root issue here, but manual modification of the configuration file i... Marcos M
09:51 PM pfSense Plus Bug #15740 (Incomplete): NAT uses unknown IP address
Marcos M
09:23 PM pfSense Packages Bug #15760 (Resolved): Typo in Snort Important Preproc Information
Fixed with d837e531ca20823dcc96b5c7b67769bda8d73633. Marcos M
08:51 PM Bug #15770 (Incomplete): Limiter Limits Whole Gateway instead of Single IP
Marcos M
08:50 PM Bug #15772: Captive Portal zones can fail to start due to ID conflict
Applied in changeset commit:d23f3e6ce5b59b14a47c4159b3b1a71f9a9f9535. Marcos M
08:49 PM Bug #15772 (Feedback): Captive Portal zones can fail to start due to ID conflict
Should be fixed with commit:d23f3e6ce5b59b14a47c4159b3b1a71f9a9f9535. Marcos M
08:42 PM Revision d23f3e6c: Always use the highest existing zone ID when creating a new one. Fix #15772
Marcos M
07:59 PM pfSense Packages Bug #15773 (Incomplete): Lightsquid stoped gererating reports after upgrade do pfSense 2.7.2
Marcos M
07:54 PM Bug #15802 (Resolved): Dynamic DNS attempts to resolve entries with disabled interfaces
This is working on 24.11.
The commit ID can be used to apply it - see:
https://docs.netgate.com/pfsense/en/latest...
Marcos M
05:18 PM Bug #15795 (Feedback): Removing a route from the High Availability primary node does not remove the entry from the routing table on the secondary node
Fixed with commit:e2eb3e16e9ef63a375718dcc06b54a9765266244. Marcos M
05:13 PM Bug #15795 (In Progress): Removing a route from the High Availability primary node does not remove the entry from the routing table on the secondary node
Marcos M
05:12 PM Revision e2eb3e16: Apply removed route changes to secondary HA node. Fix #15795
Marcos M
05:09 PM Revision 23db45f6: Specify the interface when applying static route changes during OpenVPN reloads
Marcos M
08:57 AM pfSense Packages Feature #8547: fwknop Port Knocking Package
Upvote as well Alex Kolesnik

10/29/2024

09:49 PM Feature #2358: NAT64 support
An 11 year old feature request........outstanding. Mike Moore
09:38 PM Feature #2358: NAT64 support
Upvote / Bump Can we get a status on this? Scott Howard
08:26 PM Bug #15802: Dynamic DNS attempts to resolve entries with disabled interfaces
Thanks Marcos!
Is this available as a system patch to test on 24.03 or do I need to wait for 24.11 to be released?
Andrew Almond
07:49 PM Bug #14977 (Feedback): Kea fails to restart due to race between process termination and startup
I think(tm) we have a fix for this. Christian McDonald
07:30 PM Revision 04225f6f: dhcp: give dhcp daemons a chance to shutdown before restarting
Christian McDonald
07:03 PM Revision 31316310: Revert "pfSense-rc: Relocate the removal of /var/run/booting to the very end"
This reverts commit 21063272df73ef90bb060449a7baca83b2a8f5ed. Christian McDonald
05:57 PM Revision 5f98a46f: Replace lingering /var/run/booting checks with `is_platform_booting`
Christian McDonald
11:45 AM pfSense Packages Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy
Hello,
Could you please let us know the estimate ?
Thank you
Aytek A.

10/28/2024

08:55 PM Bug #15802 (Feedback): Dynamic DNS attempts to resolve entries with disabled interfaces
The GUI issue can be left to:
https://redmine.pfsense.org/issues/15803
I've pushed commit:e6597954c11c9481a806cc89d8...
Marcos M
07:48 PM Bug #15802: Dynamic DNS attempts to resolve entries with disabled interfaces
Opened this as a separate redmine as suggested by Marcos M. https://redmine.pfsense.org/issues/15800#note-1 Andrew Almond
07:47 PM Bug #15802 (Resolved): Dynamic DNS attempts to resolve entries with disabled interfaces
When Dynamic DNS has an entry that refers to a disabled interface, Dynamic DNS still tries to look up the IP address ... Andrew Almond
08:53 PM Revision e6597954: Skip DDNS on disabled interfaces. Fix #15802
Marcos M
08:32 PM pfSense Packages Bug #15726 (Feedback): Apcupsd dashboard widget warning/critical values are not digits or units as expected
Fixed with https://github.com/pfsense/FreeBSD-ports/commit/0d1ede3a2837252bbe753b05df3efef209b5524c Marcos M
08:13 PM pfSense Packages Bug #15726 (In Progress): Apcupsd dashboard widget warning/critical values are not digits or units as expected
Marcos M
08:30 PM pfSense Packages Bug #15733 (Feedback): Changing the account key name does not update respective certificates
Fixed with https://github.com/pfsense/FreeBSD-ports/commit/465a958caba162c61d6f315b1c354955668a44b9 Marcos M
07:50 PM pfSense Packages Bug #15733 (In Progress): Changing the account key name does not update respective certificates
Marcos M
08:29 PM pfSense Plus Bug #15396: BE upgrade process deferred pkg install can cause significant delays
Snort and Suricata have been updated to work around this issue:
* https://github.com/pfsense/FreeBSD-ports/commit/57...
Marcos M
07:57 PM Feature #15803 (New): Inconsistent handling of disabled interfaces and gateways in the GUI
In several areas of the GUI, disabled interfaces are hidden/not selectable (such as DynamicDNS and Gateway Groups). H... Andrew Almond
07:40 PM Feature #15801 (New): Gateway of a disabled interface cannot be configured in System > Routing
Scenario: An interface and gateway are configured, and the gateway is added to a gateway group. The interface is then... Andrew Almond
06:59 PM Bug #15800 (Not a Bug): Gateway of a disabled interface cannot be configured in System > Routing or Dynamic DNS
> The system log will contain messages similar to:
Those are informational and expected.
> Attempting to disable wit...
Marcos M
05:36 PM Bug #15800 (Not a Bug): Gateway of a disabled interface cannot be configured in System > Routing or Dynamic DNS
Scenario: An interface and gateway are configured, and the gateway is added to a gateway group. The interface is then... Andrew Almond
01:19 PM pfSense Docs Todo #15797 (Closed): Feedback on pfSense® software Configuration Recipes — Configuring DNS over TLS
The SAN list on their certificate will match any of the following hostnames:... Jim Pingle
01:08 PM Bug #15552: NTP option "DNS Resolution" has no effect when using NTP pool hostnames
Jordan G wrote in #note-5:
> the info/tip below NTP's DNS resolution option currently states it has no affect on poo...
Jim Pingle
01:07 PM Revision 5ae3f264: Fix NTP pool DNS note. Fixes 15552
Jim Pingle
11:08 AM Todo #15799: Remove unnecessary functions.inc.php and functions.php imports in widget files
Connected to https://redmine.pfsense.org/issues/7385 GChuf 6
11:05 AM Todo #15799 (Rejected): Remove unnecessary functions.inc.php and functions.php imports in widget files
PR: https://github.com/pfsense/pfsense/pull/4712
functions.inc file is deprecated and should not be included everywh...
GChuf 6
10:17 AM Todo #15798 (Rejected): Remove shellCommand dependency
PR: https://github.com/pfsense/pfsense/pull/4711
The dependency is only used in 1 file: src/usr/local/pfSense/incl...
GChuf 6

10/27/2024

07:31 AM pfSense Packages Bug #15726: Apcupsd dashboard widget warning/critical values are not digits or units as expected
Can confirm it on 24.03 aleksei prokofiev

10/26/2024

11:36 PM Bug #15552: NTP option "DNS Resolution" has no effect when using NTP pool hostnames
the info/tip below NTP's DNS resolution option currently states it has no affect on pools. This should be updated if ... Jordan G
10:50 PM pfSense Packages Bug #15733: Changing the account key name does not update respective certificates
pfSense + 24.03 editing the acme account key name used by an existing certificate, still shows the previous key name ... Jordan G
10:25 PM Feature #15437: Use natural sorting when sorting interfaces
once alphabetical sort has been enabled the interface description sort adheres to alphanumerical ascending list order... Jordan G
10:05 PM pfSense Docs Todo #15797 (Closed): Feedback on pfSense® software Configuration Recipes — Configuring DNS over TLS
*Page:* https://docs.netgate.com/pfsense/en/latest/recipes/dns-over-tls.html
*Feedback:*
I believe the DNS Host...
Ben Miller
12:06 PM Todo #15483: Update Unbound to 1.22.0
We're now on 1.22.0. Marcos M

10/25/2024

09:28 PM Revision 21063272: pfSense-rc: Relocate the removal of /var/run/booting to the very end
Christian McDonald
06:25 PM Revision 22cf3609: Add more detail to config path warnings
Marcos M
04:41 PM Revision 9970b06f: Fix some config path warnings
Marcos M
01:58 PM pfSense Docs Correction #15678: Update IPsec documentation
I can understand that this issue takes time to unravel and fix. What i don't understand is why there is no notificati... Mike Moore
01:20 PM pfSense Docs Todo #15796: Feeback on Client Routing and Gateway Considerations
That is probably worth mentioning there, with appropriate warnings about the source being lost. It should be a last r... Jim Pingle
07:49 AM pfSense Packages Bug #15756 (Confirmed): NTOPNG db sits in ramdisk on pfsense, filling it up and crashing pfsense
I was able to replicate the observed behavior.
Tested against:...
Danilo Zrenjanin
06:53 AM Bug #15767 (Confirmed): Clicking the picture widget image downloads the image with an invalid filename instead of showing it inline
I successfully replicated the reported behavior. When I click on the image imported into the widget, it downloads wit... Danilo Zrenjanin
06:37 AM Bug #15795 (Confirmed): Removing a route from the High Availability primary node does not remove the entry from the routing table on the secondary node
I have replicated this behavior.
Tested on PVE, pfSense Plus version 24.03.
Danilo Zrenjanin

10/24/2024

09:28 PM pfSense Docs Todo #15796 (New): Feeback on Client Routing and Gateway Considerations
https://docs.netgate.com/pfsense/en/latest/vpn/ipsec/client-routing.html
Outbound NAT is not listed as an option w...
Andrew Almond
09:17 PM pfSense Docs Correction #15678: Update IPsec documentation
I've also learned this the hard way - it's especially disruptive when changing the Mobile IPsec tunnel and everyone g... Andrew Almond
07:27 PM Revision 25a0f534: Decrease the number of config requests when deleting filter rules
Marcos M
05:52 PM pfSense Plus Bug #15196: AWS ena interfaces can become unstable/stop responding
The customer agreed to test the newer version of the driver. I created a version for 24.03 specifically for them to d... Mateusz Guzik
05:45 PM Bug #12056 (Pull Request Review): Filterlog says "Unknown Option %u"
It does look like a bug. For reference:
https://github.com/pfsense/FreeBSD-ports/pull/1229
Marcos M
05:31 PM Bug #12056: Filterlog says "Unknown Option %u"
Mhm, you really think this is a feature request and not a bug? Florian Apolloner
03:37 PM Revision dcc4d84d: Only import the Netgate Installer settings when trigger_initial_wizard is set.
Remove the references to 'trigger_virt_setup' since it is not used on CE. Luiz Souza
11:22 AM pfSense Packages Bug #15744 (Resolved): Suricata LOGS MGMT feature shows ``enabled`` by default on a green-field install when it should instead default to ``disabled``
latest suricata version (7.0.7_4) has this fix implemented
tested on
24.11-ALPHA (amd64)
built on Fri Oct 18 8:00:...
Georgiy Tyutyunnik

10/23/2024

10:44 PM pfSense Plus Bug #15196: AWS ena interfaces can become unstable/stop responding
T2.medium is 2C haswell/broadwell and non-ENA
T3.medium is 2C skylake/canyon lake but has ENA
both get 24 CPU credit...
Jim Thompson
06:40 PM Regression #15768 (Resolved): OpenVPN Windows Client fails to connect
Fixed with commit:f57bd4ddb0110f5be5486fe00a8336398270e67d. Marcos M
06:27 PM Revision f57bd4dd: Fix OpenVPN CSO options upgrade
Previous config versions set these options in the config but only
considered them enabled if their value is 'yes'. Th...
Marcos M
05:17 PM Bug #15601 (Feedback): Routes with IPv6 Address as Next Hop for IPv4 Destination Causes Kernel Panic
Jim Pingle
05:00 PM Bug #15601: Routes with IPv6 Address as Next Hop for IPv4 Destination Causes Kernel Panic
The customer was shipped with 2 kernels. First added some debug and another added a workaround for the suspected issu... Mateusz Guzik
01:43 AM Bug #15795 (Resolved): Removing a route from the High Availability primary node does not remove the entry from the routing table on the secondary node
Version: 24.03-RELEASE
Platform: PVE, 6100
Example:
Primary (netstat -nr)...
Craig Coonrad
12:46 AM Bug #15353: Crashes Every ~8-12 Hours in New 2.7.2 Install with Unbound, Suricata, and pfBlockerNG
I wanted to update and say we see a similar issue with a router locking up randomly. Weirdly, it is mainly affecting ... Steven Brown

10/22/2024

11:36 PM pfSense Packages Bug #13214 (Resolved): AttributeError: 'NoneType' object has no attribute 'text'
Marcos M
11:33 PM pfSense Packages Feature #13063 (Resolved): Improve modem support
Marcos M
08:36 PM Todo #15780: Speed up MBUF Usage command in system information widget
Updated the code.
More info on github.
GChuf 6
07:16 PM Feature #15221: Make System Tunables table sortable
Created a PR here:
https://github.com/pfsense/pfsense/pull/4709
GChuf 6
05:01 PM Todo #15779 (Resolved): Update Dynamic DNS API URL for porkbun.com
Marcos M
04:04 AM Todo #15779: Update Dynamic DNS API URL for porkbun.com
Emanuel Persson wrote:
> Got a email today from Porkbun regarding their URL change for API from "porkbun.com" to "ap...
Nita Vesa
04:57 PM Revision 4bd35ebb: Merge pull request #4708 from WereCatf/porkbun_update
Marcos M
04:47 PM pfSense Packages Bug #13811 (Closed): Youtube content getting filtered on Squid when none is Selected
Marcos M
02:19 PM pfSense Packages Bug #13811: Youtube content getting filtered on Squid when none is Selected
@Marcos M
This was merged in https://github.com/pfsense/FreeBSD-ports/commit/bd93b039663782e42721656ed50653086e611...
Jonathan Lee
06:55 AM pfSense Packages Bug #13811: Youtube content getting filtered on Squid when none is Selected
Can close this as this is now resolved in https://github.com/pfsense/FreeBSD-ports/commit/bd93b039663782e42721656ed50... Maharsh Patel
02:16 PM pfSense Packages Bug #15381: Update deprecated options
https://redmine.pfsense.org/issues/13811
@Maharsh Patel
I think you mean this one.
Jonathan Lee
06:56 AM pfSense Packages Bug #15381: Update deprecated options
Can you also close this issue as well this is now no longer valid: https://redmine.pfsense.org/issues/15381 Maharsh Patel
01:46 PM Feature #2479: Allow reordering of the traffic graphs on the dashboard
Mike Moore wrote in #note-4:
> 12 years open for this ticket?!?
PRs accepted
Christian McDonald
01:20 PM Feature #2479: Allow reordering of the traffic graphs on the dashboard
12 years open for this ticket?!? Mike Moore
12:06 PM Feature #2479: Allow reordering of the traffic graphs on the dashboard
I will add myself to the list too. Jürgen Echter
12:58 PM pfSense Packages Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy
Any estimate on when this will be available? We use the proxy on several units, and I really need to get these upgrad... Justin w
08:52 AM Bug #15757: Incorrect dashboard column spacing when using five columns
Issue is due to code in index.php:... GChuf 6
03:30 AM Revision b4258a0d: DynDNS: change Porkbun to use api.porkbun.com instead of porkbun.com
Changes the dynDNS provider 'Porkbun' to use the domain `api.porkbun.com`
instead of `porkbun.com` as accessing the A...
Nita Vesa

10/21/2024

10:52 PM pfSense Packages Bug #15381: Update deprecated options
Thanks for looking at this, and the YouTube issue. Jonathan Lee
10:27 PM pfSense Packages Bug #15381 (Closed): Update deprecated options
I've merged the above comments into one to help with readability.
The proposed changes from the posted PRs are sim...
Marcos M
07:39 PM Todo #15781 (Resolved): Remove deprecated HTTP/1.0 Pragma header
Marcos M
07:30 PM Revision 4045b7ab: Merge pull request #4704 from GChuf/removePragmaHeader
Marcos M
07:23 PM Bug #15729 (Resolved): Session cookie warnings
The treegrid cookies for the Disk and ZFS widgets have been removed. With the widget-specific cookies removed, treegr... Marcos M
07:08 PM Revision 03186e6d: Merge pull request #4705 from GChuf/disksCookies
Marcos M
05:19 PM Feature #15794 (New): RFC 3527 option for DHCP Relay
Certain DHCP server relay scenarios can benefit from using RFC 3527 behavior for the gateway IP address in a relayed ... Jim Pingle
03:23 PM pfSense Plus Bug #15262: Captive Portal Has High CPU Interrupts With Large Number of Users
Any Update ? Aytek A.

10/20/2024

10:14 PM pfSense Packages Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy
Andrew Almond wrote:
> Zabbix 7.0 has been released. https://www.zabbix.com/rn/rn7.0.0
>
> This might be a good oppo...
Wesley Sena
01:33 AM Bug #15752: Montly kernel panic
Sebastian Wagner wrote in #note-2:
> Thank you for the response. There doesn't seem to be a memtest included, so the...
Jordan G
01:17 AM pfSense Plus Bug #14401: Changing from Switchport to Discrete Interface in VGA/Serial Console Breaks Port Status Monitoring
Kris Phillips wrote in #note-4:
>
> Jordan,
>
> Did you test moving from a switchport with a switchport number ...
Jordan G

10/19/2024

08:11 PM Bug #15725 (Resolved): Dashboard widgets refresh at unintended intervals
Tested on... Christopher Cope
07:56 PM Bug #15373 (Resolved): Firewall Logs Dashboard widget update interval does not behave as expected
Tested on... Christopher Cope
02:38 AM Bug #15732: miniupnpd stops responding after a few minutes
It's been over a month and there is absolutely no response from the netgate or superuser community on this, probably ... Chris F

10/18/2024

11:43 PM Bug #15791: No default route after boot
Fixed with commit:d34e5ee278dfed1f0cd85b5c6d09562352989bab Marcos M
11:43 PM Bug #15791 (Resolved): No default route after boot
Marcos M
03:51 PM Bug #15791 (Resolved): No default route after boot
Some systems / configurations can end up with no default route after boot-up is complete.
Most systems that hit th...
Steve Wheeler
10:47 PM Revision 6bf58d65: Fix PHP error when saving PPP settings without an interfaces selected
Marcos M
10:22 PM pfSense Docs Todo #15792: Feedback on pfSense® software Configuration Recipes — Accessing a CPE/Modem from Inside the Firewall
In my example vmx0 is the parent NIC for the PPPoE connection and you can see I have also been able to assign vmx0 as... Steve Wheeler
10:09 PM pfSense Docs Todo #15792: Feedback on pfSense® software Configuration Recipes — Accessing a CPE/Modem from Inside the Firewall
Hi Steve -- Does vtnet0 show up under "Available network ports:"?
Please see my system:
!clipboard-202410181808...
Christopher Moriarty
10:05 PM pfSense Docs Todo #15792 (Not a Bug): Feedback on pfSense® software Configuration Recipes — Accessing a CPE/Modem from Inside the Firewall
I can't replicate that on any version. I'm able to assign the parent interface separately without errors in every cas... Steve Wheeler
07:44 PM pfSense Docs Todo #15792 (Not a Bug): Feedback on pfSense® software Configuration Recipes — Accessing a CPE/Modem from Inside the Firewall
*Page:* https://docs.netgate.com/pfsense/en/latest/recipes/modem-access.html#configure-a-new-interface
*Feedback...
Christopher Moriarty
07:33 PM Bug #15657 (Resolved): State table entries printed on ``diag_dump_states.php`` may contain an unexpected interface
Georgiy Tyutyunnik
07:32 PM Bug #15657: State table entries printed on ``diag_dump_states.php`` may contain an unexpected interface
tested, reproduced on
24.03-RELEASE (amd64)
built on Wed Aug 21 17:32:00 CEST 2024
FreeBSD 15.0-CURRENT
curren...
Georgiy Tyutyunnik
06:24 PM pfSense Packages Bug #15771 (Resolved): RPKI cannot be configured
Marcos M
05:01 PM Bug #14933 (Resolved): Traffic Graph widget displays bandwidth usage values which are half the actual usage amount
fix works in
24.11-ALPHA (amd64)
built on Fri Oct 18 8:00:00 CEST 2024
FreeBSD 15.0-CURRENT
Georgiy Tyutyunnik
04:30 PM Bug #15565 (Resolved): System proxy credentials with certain characters may fail to authenticate
fixed, tested in
24.11-ALPHA (amd64)
built on Fri Oct 18 8:00:00 CEST 2024
FreeBSD 15.0-CURRENT
Georgiy Tyutyunnik
04:23 PM Revision d34e5ee2: Configure routes after DHCP WAN during boot. Fix #15791
Marcos M
02:18 PM Revision be54a703: pfSense-Installer: Import the network settings from the Netgate Installer.
Read a JSON file with the Netgate Installer settings on the first boot and set
up the LAN and WAN.
Ticket: #13129
Luiz Souza
12:32 PM Todo #15483 (Resolved): Update Unbound to 1.22.0
Latest snapshots contain unbound-1.21.1 - confirmed Georgiy Tyutyunnik
11:56 AM Bug #15789 (Not a Bug): Adding IPv4 hostnames using the DNS Forwarder catches A record requests to the host's FQDN but not AAAA record requests
That is not a bug, it's a configurable behavior. It depends on the value of the system domain local zone type.
See...
Jim Pingle
03:01 AM Bug #15789 (Not a Bug): Adding IPv4 hostnames using the DNS Forwarder catches A record requests to the host's FQDN but not AAAA record requests
I have an IPv4-only VLAN that is adding hostnames to DNS using the features available under the DNS Forwarder tab.
...
Nathan Ladwig
06:35 AM Bug #15518 (Resolved): Kea does not send configured TFTP server name
The issue appears to be fixed in 24.11. I successfully boot devices using legacy and EFI PXE. I marked it as resolved... Lev Prokofev

10/17/2024

07:30 PM pfSense Packages Todo #15788: add drop-internet-community support
According to official instructions, you need to add the drop-internet-community parameter to filter the bgp community yon Liu
07:29 PM pfSense Packages Todo #15788 (New): add drop-internet-community support

根据官方的指示需要添加 drop-internet-community 参数进行过滤bgp community
bgp community-list standard drop-internet-community seq ...
yon Liu
07:24 PM pfSense Packages Bug #15749: BGP advertising all routes and ignoring networks statements.

There is an option no bgp network import-check. When you do not add this option parameter, it will check the local ...
yon Liu
07:16 PM pfSense Packages Bug #15771: RPKI cannot be configured
Does it need to add service startup options, because in Linux system it needs to be added in daemons file ?
bgpd_o...
yon Liu
07:12 PM Todo #15787 (New): Add ECC certificates support
https://letsencrypt.org/
https://letsencrypt.org/certificates/
It fully supports ECC certificates. I got an ECC c...
yon Liu
12:43 PM Bug #15786 (Duplicate): Kea DHCP - Failed to initialize Kea server - Failed to convert string to address
Duplicate of #14991 Jim Pingle
12:38 PM Bug #15786 (Duplicate): Kea DHCP - Failed to initialize Kea server - Failed to convert string to address
System|Advanced|Networking:
When you switch from ISC DHCP to Kea DHCP, the configuration is migrated. Unfortunately,...
Willy Tenner
06:00 AM pfSense Packages Todo #15785 (New): upgrade to frr10
FreeBSD has released the frr 10 major version update, please follow up and upgrade to the latest version.
https://...
yon Liu

10/16/2024

06:38 PM Todo #15782 (Resolved): Use minified nvd3 vendor files
Marcos M
06:25 PM Todo #15782 (Feedback): Use minified nvd3 vendor files
Applied in changeset commit:94fa4e28e1c7b97469748930c6ea2a47d7cf9cdd. Marcos M
06:12 PM Revision 94fa4e28: Use minified nvd3 vendor files. Implement #15782
Marcos M
06:12 PM Revision fda3be28: Add minified nvd3 vendor files
Marcos M
05:25 PM Todo #14190 (Duplicate): Update nvd3 (web ui dependency) to 1.8.6
Marcos M
11:38 AM pfSense Packages Feature #15498: Add speedtest-cli to packages
Although i understand the reason to reject the request, i do think there is no need to be more Catholic then the Pope... Leon Straathof
10:30 AM Feature #11302: WireGuard XMLRPC sync
We are also very interested in adding synchronisation of tunnels and peers settings, as doing it manually is not comf... Vitalii Moisieiev

10/15/2024

06:44 PM Revision b8f18410: Remove unnecessary config_init_path() calls
Marcos M
06:36 PM Revision 4440238c: Reduce config fetches when displaying filter logs
Marcos M
04:55 PM pfSense Packages Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy
Arvid Johansson wrote in #note-2:
> Any update?
Any Update?
Pablo Fernando Schutz
12:56 PM pfSense Plus Bug #15783 (Rejected): NTP server broken
I cannot reproduce any problem with the NTP client on 24.03 with a default install. It is properly synchronizing with... Jim Pingle
11:23 AM pfSense Plus Bug #15783 (Rejected): NTP server broken
System Netgate 1100
Serial: NTG2309000948
Netgate Device ID: de164b1be6d099b1117e
BIOS Vendor: U-Boot
Version: 20...
Terje Rosenlund
11:50 AM Feature #15784 (New): Poor contrast between enabled and disabled firewall rules
!{width: 640px;}.clipboard-202410151242-5immj.png!
h1. The Issue
As you can see in the image I have some rules ...
Jon Brown
11:45 AM Bug #15708: The filterdns service won't start
I've reproduced this locally, and got this error message:
> filterdns: could not start host thread for www744.sigs...
Kristof Provost
11:39 AM Bug #14977: Kea fails to restart due to race between process termination and startup
I switched back to ISC on my systems affected by this issue.
robi robi
08:20 AM Feature #8173: dhcp6c - RAW Options
Hello,
I confirm some ISP actually require to send specific raw options to be able to get an IPv6. 4 solutions to re...
eeee cccc

10/14/2024

09:12 PM Todo #15782: Use minified nvd3 vendor files
Additionally - the minified files now produce a "source map error" in the browser console:... GChuf 6
08:57 PM Todo #15782: Use minified nvd3 vendor files
This issue can be closed now as v1.8.6 is already included: https://redmine.pfsense.org/issues/14190 GChuf 6
08:44 PM Todo #15782 (Resolved): Use minified nvd3 vendor files
PR: https://github.com/pfsense/pfsense/pull/4707
Creating another issue as suggested.
I wasn't sure if the PR/iss...
GChuf 6
07:42 PM Revision 35c1ebd0: Also show system aliases when listing all aliases
Marcos M
07:39 PM Revision 80cf7a33: Improve system alias descriptions
Marcos M
07:16 PM pfSense Plus Regression #15424: Image label file is incorrect.
Moving this ahead but since the installer image is decoupled from pfSense releases this isn't necessarily tied to a g... Jim Pingle
07:11 PM pfSense Plus Regression #15424: Image label file is incorrect.
This is still incorrect in current 24.11 images. There both memstick images show with the file named:... Steve Wheeler
06:17 PM Revision cbf54e55: Silence alias errors with ruleset generation while booting
Dynamically-configured system aliases can be set up late in the boot
process. Silence related alerts during ruleset g...
Marcos M
03:18 PM Feature #1979 (Resolved): Allow user-defined rules to utilize built-in system aliases
Jim Pingle
03:16 PM Todo #13537: Update vendor files
It might be something to look at in the future, but it would have to be pulled in directly from an upstream source an... Jim Pingle
03:13 PM Todo #15781 (Pull Request Review): Remove deprecated HTTP/1.0 Pragma header
Jim Pingle
03:11 PM Todo #15780: Speed up MBUF Usage command in system information widget
See my comments on the PR for an alternate method since the one used isn't viable as-is. Jim Pingle
02:55 PM Bug #15778 (Feedback): Interface group members are not validated on load/save on ``interfaces_groups_edit.php``, and are printed without encoding on ``interfaces_groups.php``
Applied in changeset commit:9a843098cf3f28c27c3e615c4c788c84bd29df6f. Jim Pingle
02:43 PM Bug #15778 (Confirmed): Interface group members are not validated on load/save on ``interfaces_groups_edit.php``, and are printed without encoding on ``interfaces_groups.php``
In the future, please submit security concerns privately via the process documented at https://www.netgate.com/securi... Jim Pingle
02:44 PM Revision 9a843098: Interface group member validation/encoding. Fixes #15778
Jim Pingle
11:51 AM Bug #12199: ipsec pre-shared keys are stored in cleartext
Hi Jim. Is there a chance to hide passwords from the Pre-shared keys page (/vpn_ipsec_keys.php)? I'd suggest to add c... Alex Kolesnik

10/13/2024

03:57 PM Feature #1979: Allow user-defined rules to utilize built-in system aliases
This looks good on the latest build.
!clipboard-202410130957-wlooi.png!
dylan mendez
10:10 AM Bug #15767: Clicking the picture widget image downloads the image with an invalid filename instead of showing it inline
I should also add that I have the "System Patches" package and applied all recommended system patches, I have no othe... Manuel Carrera
09:59 AM Bug #15767: Clicking the picture widget image downloads the image with an invalid filename instead of showing it inline
dylan mendez wrote in #note-1:
> What browser are you using? What pfSense version? I'm unable to replicate on 24.03 ...
Manuel Carrera
12:54 AM Todo #15705 (Resolved): Clarify console menu option 0 description
Looks good on... Christopher Cope

10/12/2024

11:59 PM Bug #15767: Clicking the picture widget image downloads the image with an invalid filename instead of showing it inline
What browser are you using? What pfSense version? I'm unable to replicate on 24.03 Chrome and Firefox dylan mendez
09:31 PM Feature #1979: Allow user-defined rules to utilize built-in system aliases
That issue along with some others from other feedback has been fixed for the next build. Marcos M
06:22 PM Feature #1979: Allow user-defined rules to utilize built-in system aliases
Tested against:... Danilo Zrenjanin
09:14 PM Feature #15437: Use natural sorting when sorting interfaces
after enabling "Sort Alphabetically"
LAN
VLAN1
VLAN12
VLAN120
VLAN24
VlAN240
WAN
24.11-ALPHA (amd64)
bui...
Alhusein Zawi
09:14 PM Revision bd00203a: Fix rule generation and display for system aliases
This is a followup to 52e512c0555d9f5a91732907e524364358d3f70c
- Update system alias comments and descriptions.
- Imp...
Marcos M
08:57 PM Bug #15729: Session cookie warnings
disks.widget.php has some additional cookie code that is causing the warning.
Since the cookies seem to be handled i...
GChuf 6
02:06 PM Bug #15729 (Confirmed): Session cookie warnings
Tested on... Christopher Cope
08:54 PM Revision ec0d9221: Remove additional cookie config from disks.widget.php
GChuf 6
08:35 PM Todo #13537: Update vendor files
Would you consider replacing nv.d3.js file with a minified version?
Currently, on my dashboard, this is the biggest ...
GChuf 6
08:26 PM Revision 45777c10: Remove deprecated pragma header. Implement #15781
This removes adding pragma header which is now deprecated. Cache control is used instead. GChuf 6
08:24 PM Todo #15781 (Resolved): Remove deprecated HTTP/1.0 Pragma header
PR: https://github.com/pfsense/pfsense/pull/4704
This removes deprecated "Pragma" header. "Cache control" is used ...
GChuf 6
08:17 PM Todo #15780 (Pull Request Review): Speed up MBUF Usage command in system information widget
PR: https://github.com/pfsense/pfsense/pull/4703
Possibly linked to: https://redmine.pfsense.org/issues/6614
...
GChuf 6
06:44 PM Todo #15779 (Resolved): Update Dynamic DNS API URL for porkbun.com
Got a email today from Porkbun regarding their URL change for API from "porkbun.com" to "api.porkbun.com". Deadline 2... Emanuel Persson
05:24 PM Bug #15708: The filterdns service won't start
Was able to recreate this with a customer. Was working fine on 23.09.1, but once they upgraded to 24.03 they were no... Kris Phillips
06:42 AM Bug #15778 (Closed): Interface group members are not validated on load/save on ``interfaces_groups_edit.php``, and are printed without encoding on ``interfaces_groups.php``
When submitting interface group members on @interfaces_groups_edit.php@ the member list is not validated before it is... zhao mouren

10/11/2024

07:06 PM Bug #15777 (Resolved): ``resizewin`` occasionally gets fed a spurious line feed over certain serial console+client combinations
This issue is for tracking purposes only so it gets an entry in the release notes. It was on the internal Redmine as ... Jim Pingle
06:54 PM Revision 3fd54641: Reserved table names are lower-case
Update related comments while there. Marcos M
06:51 PM pfSense Packages Bug #15773: Lightsquid stoped gererating reports after upgrade do pfSense 2.7.2
After I realized the problem and tried several recovery methods, the system started working again the next day, but i... Suporte Suporte
05:19 PM Revision 294957aa: Bump config version
Marcos M
05:19 PM Revision 7f75451f: Introduce function to detect and resolve conflicting aliase names
Marcos M
04:10 PM Feature #1979: Allow user-defined rules to utilize built-in system aliases
I moved the additional new system alias definition part to a new issue: #15776 Jim Pingle
03:40 PM Feature #1979: Allow user-defined rules to utilize built-in system aliases
The current system aliases such as @bogons@ can now be used in the GUI. Additional ones (such as the given examples) ... Marcos M
07:10 AM Feature #1979 (Feedback): Allow user-defined rules to utilize built-in system aliases
Applied in changeset commit:52e512c0555d9f5a91732907e524364358d3f70c. Marcos M
04:07 PM Feature #15776 (Resolved): System Aliases for various reserved networks
#1979 added a System Aliases facility users can utilize to make rules with the built-in system aliases, and it would ... Jim Pingle
03:27 PM pfSense Packages Feature #15548 (In Progress): Add packages for Zabbix 7.0 Agent and Proxy
Christian McDonald
02:31 PM pfSense Packages Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy
Can anyone give some insights on why it takes more than half a year to get a new zabbix version in PFSense?
When I ta...
Maurice Detmers
12:58 PM pfSense Packages Bug #15775 (New): Freeradius + LDAP authentification conditions
Probably I missed this part in the GUI, however, it looks like it was really not implemented.
If you going to authe...
Lev Prokofev
07:02 AM Revision 52e512c0: Expose system aliases to the GUI. Implement #1979
Marcos M
12:06 AM Bug #15772 (Confirmed): Captive Portal zones can fail to start due to ID conflict
I am able to reproduce this on... Christopher Cope

10/10/2024

10:35 PM Revision fad8d3c0: Refactor system_alias_info_popup()
It now supports any alias name. Additionally check for html characters. Marcos M
09:53 PM Feature #15774 (Duplicate): Add user-accessible system aliases
Probably best to use the existing issue for this: #1979 Jim Pingle
09:46 PM Feature #15774 (Duplicate): Add user-accessible system aliases
There are a number of pf table names (aka "system aliases") reserved for system use:
https://github.com/pfsense/pfse...
Marcos M
09:20 PM Revision 839ae1c2: Refactor get_alias_list()
It now uses CSVs for multiple types instead of an array. Marcos M
07:34 PM pfSense Packages Bug #15773 (Incomplete): Lightsquid stoped gererating reports after upgrade do pfSense 2.7.2
After upgrading pfSense to version 2.7.2, the Lightsquid package stopped generating daily reports.
The Lightsquid ve...
Suporte Suporte
07:22 PM Bug #15723 (Resolved): ``unbound-checkconf`` fails with python mode enabled
patch fixes the issue
tested and reproduced on
24.08-DEVELOPMENT (amd64)
built on Fri Aug 23 8:00:00 CEST 2024
Fr...
Georgiy Tyutyunnik
07:08 PM Feature #15562: Add support for OpenID
+1, we are implementing OIDC across the board and pfsense's lack of support is a notable omission. Ross Tajvar
06:50 PM pfSense Packages Bug #15715 (Resolved): Tailscale fails to start
Christian McDonald
06:01 PM pfSense Packages Bug #15715: Tailscale fails to start
reproduced on:
24.08-DEVELOPMENT (amd64)
built on Fri Aug 23 8:00:00 CEST 2024
FreeBSD 15.0-CURRENT
fixed in:
24...
Georgiy Tyutyunnik
06:46 PM Bug #15518 (Feedback): Kea does not send configured TFTP server name
Christian McDonald
06:33 PM pfSense Packages Bug #15771: RPKI cannot be configured
Fix committed, new package should be available on Plus when it finishes building.
Jim Pingle
06:30 PM Bug #15552 (Feedback): NTP option "DNS Resolution" has no effect when using NTP pool hostnames
Applied in changeset commit:26a06fbad188a772f862c830d3918fb5588a2002. Jim Pingle
06:24 PM Revision 26a06fba: Fix NTP DNS resolution option for pools. Fixes #15552
Jim Pingle
06:10 PM Todo #15483 (Feedback): Update Unbound to 1.22.0
Latest snapshots contain @unbound-1.21.1@ Jim Pingle
06:05 PM Bug #14977: Kea fails to restart due to race between process termination and startup
Without some way to reliably reproduce the conditions in which this happens I'm hesitant to blindly commit something ... Jim Pingle
05:59 PM Regression #15094 (Feedback): Updates fail against an authenticated upstream proxy
Has this been tested lately? The relevant commits to fix this have been in our pkg port for a couple months now.
T...
Jim Pingle
05:47 PM Bug #15657 (Feedback): State table entries printed on ``diag_dump_states.php`` may contain an unexpected interface
This was merged a couple months ago Jim Pingle
05:26 PM Bug #15081: Upgrade fails due to undersized EFI filesystem
This is still an issue but I'm not sure what, if anything, we could do about it at this stage beyond warning like we ... Jim Pingle
04:51 PM Bug #15083 (Resolved): Installing to ZFS mirror does not format or populate EFI partition on additional disks
Using the latest Netgate installer, a freshly installed mirror contains the appropriate EFI partition contents on bot... Jim Pingle
04:33 PM Bug #15084 (Resolved): Upgrading an EFI system installed to ZFS mirror does not upgrade EFI loader on additional disks
Not seeing that issue from my last comment anymore.
This also appears to be OK in general. I installed an old vers...
Jim Pingle
04:23 PM pfSense Packages Bug #13405: Wireguard: The webgui becomes excessively slow to respond with a large number of peers
Thanks for the fix here. This solved my issue. I only have 10 peers and it does take some considerable time to load b... Mike Moore
03:13 PM pfSense Packages Bug #13405: Wireguard: The webgui becomes excessively slow to respond with a large number of peers
I also have a 24.03 pfsense that I tested on and only added 24 peers on and experience the delay. On that test machin... Clayton Dirkschneider
03:10 PM Feature #15651 (Resolved): Kea DNS Resolver (Unbound) Integration (IPv4 and IPv6)
Christian McDonald
03:10 PM Bug #15495 (Closed): Upgrade fails on upstream bectl bug
I haven't heard any reports of this (beyond this one). Christian McDonald
03:08 PM Regression #14410 (Resolved): Behavior of ``earlyshellcmd`` changed, ``ngeth`` interfaces cannot be initiated early enough to pass assignment check
Christian McDonald
02:44 PM Revision 7961830d: Merge pull request #4695 from Self-Hosting-Group/remove-interface
Marcos M
12:29 PM Bug #15772 (Resolved): Captive Portal zones can fail to start due to ID conflict
There seems to be a bug inside services_captiveportal.php which allows, under specific circumstances, the creation of... Paul Kutzer
09:14 AM Bug #15770: Limiter Limits Whole Gateway instead of Single IP
Hello Marius,
Kindly provide detailed information regarding your setup. We require clear, step-by-step instruction...
Danilo Zrenjanin
12:00 AM Revision 81ca1f72: UPnP IGD & PCP: Improve descriptions
Self-Hosting-Group

10/09/2024

08:29 PM pfSense Packages Bug #15771: RPKI cannot be configured
The customer that was hitting this issue confirmed that the above patch fixed the issue for him. Christopher Cope
04:36 PM pfSense Packages Bug #15771 (Feedback): RPKI cannot be configured
There are a couple problems here.
Issue #1: The check to see if RPKI is enabled isn't right so it's not defining t...
Jim Pingle
01:13 AM Revision f810afab: Merge pull request #4702 from S33G/hotfix/correct-author
Marcos M

10/08/2024

11:04 PM pfSense Packages Feature #9141: FRR xmlrpc
Any updates? Mike Moore
11:03 PM pfSense Packages Bug #15771: RPKI cannot be configured
Confirmed as well.
There are a couple of modules in FRR (pfsense) that arent working
RPKI and AgentX
I think the...
Mike Moore
10:37 PM pfSense Packages Bug #15771 (Resolved): RPKI cannot be configured
Customer concerned that enabling/changing RPKI is not working.
When the RPKI configuration is changed, the changes...
Chris Linstruth
09:00 PM Revision 3e314680: Improve error message for duplicated aliases
C J
05:14 PM Bug #15750 (Resolved): Hostnames for ISC DHCP leases are not removed from Unbound when switching to Kea
This was solved by removing the reference to the old leases file from unbound.conf.
After switching to Kea from I...
Steve Wheeler
03:26 PM Todo #14888: Exclude non-release branches from general update checks
The update check will now only process release branches. Marcos M
03:25 PM pfSense Packages Regression #14850 (Resolved): Unreadable alerts file results in PHP error
Marcos M
02:33 PM Bug #15770 (Incomplete): Limiter Limits Whole Gateway instead of Single IP
When Using an Trafic Limiter in combination with an gateway Group the limiter limits the whole gateway instead of the... Marius Hentschke

10/07/2024

07:33 PM Feature #13422 (Duplicate): Add a 'type' field to the DHCPv6 server Additional BOOTP/DHCP Options
Covered by #15321 Jim Pingle
07:16 PM Bug #15755 (Closed): Mobile IPsec sends incorrect DNS attribute IDs
Looks good on a current snapshot, the config has the right values and the client appears to be receiving and processi... Jim Pingle
06:42 PM pfSense Plus Bug #15769 (New): IPsec DNS gateway changes causes all tunnel restarts
Following issue is troubleshooted and outlined in the forum post
https://forum.netgate.com/topic/190426/frr-seeing...
Mike Moore
04:00 PM Todo #15705 (Feedback): Clarify console menu option 0 description
Applied in changeset commit:898df056052d0d793d7eb894ed70ca992972b293. Liam Riley
03:37 PM pfSense Packages Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy
Any update on when Zabbix 7.0 packages will be available for 24.03 or 24.08? Andrew Almond
03:36 PM pfSense Packages Bug #15313: Zabbix server 6.4.12 requires Zabbix proxies to be version 6.4.12
Is there any update on whether Zabbix packages >=6.4.13 will be released for 24.03? Andrew Almond
03:26 PM Feature #14483: Conditionally reconfigure IPsec VTI interfaces only when necessary while applying IPsec changes
Adding a new forum post to this as to document a new behavior seen
https://forum.netgate.com/topic/190426/frr-seei...
Mike Moore
03:21 PM Revision c48865bc: Improve error message for duplicated aliases
Marcos M
03:16 PM Revision 02b8bbee: Merge pull request #4696 from lriley2020/edit-menu
Marcos M
01:24 AM Regression #15768 (Resolved): OpenVPN Windows Client fails to connect
Version 24.08.a.20240925.0600
1) OpenVPN server in Subnet Mode ...
dylan mendez

10/06/2024

09:42 PM Revision 898df056: Clarify console menu option 0 description. Implement #15705
Liam Riley
01:36 PM Bug #15767 (Resolved): Clicking the picture widget image downloads the image with an invalid filename instead of showing it inline
I use the picture widget on the dashboard to show a map of the network, of course the widget is too small so I click ... Manuel Carrera
01:32 PM Bug #5413: Reduce disruptions when changing DNS records from DHCP leases in Unbound

uh uh uh !!
MUST HAVE THIS FIX !
Please please please provide patch, or a URL for the snapshot mentioned. I w...
Michael Damsgaard
09:11 AM Bug #15752: Montly kernel panic
Thank you for the response. There doesn't seem to be a memtest included, so the best option is to use the bootable me... Sebastian Wagner
01:51 AM Bug #15752 (Incomplete): Montly kernel panic
Have you tested the RAM on your appliance to verify this isn't a memory issue? Page faults are typically an issue wi... Kris Phillips
08:24 AM pfSense Packages Bug #15644: Snort Status icon disappears
Tested on 24.03 and Snort 4.1.6_17
I can confirm that.
aleksei prokofiev
08:15 AM pfSense Packages Bug #15760: Typo in Snort Important Preproc Information
Tested on 24.03 the same typo
!clipboard-202410061115-tywac.png!
aleksei prokofiev
03:48 AM Bug #15750: Hostnames for ISC DHCP leases are not removed from Unbound when switching to Kea
after changing to kea, the entries in /var/unbound/dhcpleases_entries.conf are still present
build 24.08.a.2024100...
Jordan G
03:19 AM Feature #5080 (Resolved): Settings tab for global Kea DHCP server options

setting tab is added .
24.08-DEVELOPMENT (amd64)
built on Thu Oct 3 19:31:00 PDT 2024
FreeBSD 15.0-CURRENT
Alhusein Zawi
02:38 AM pfSense Plus Regression #15494: Reinstall Packages button reports another instance of ``pfSense-upgrade`` is running
still present in build 24.08.a.20241004.0231 Jordan G
01:55 AM pfSense Plus Bug #15566 (Confirmed): Update Intel microcode pacakge
Verified that the outdated microcode package is still present in 24.03. All 24.08 dev snapshots have the updated pac... Kris Phillips
01:52 AM pfSense Plus Bug #15693 (Incomplete): Bug #13423 still present in 24.03-RELEASE version
Marking as Incomplete until we have that information. Kris Phillips
01:46 AM pfSense Plus Bug #15639 (Resolved): Automatic boot verification shows negative timer
No longer seeing this as well when testing. Closing as Resolved. Kris Phillips
01:13 AM Feature #14208: Automatic Split-DNS for 1:1 NAT
Is there anything specific keeping this from being merged? Yehuda Katz

10/05/2024

09:03 PM Bug #15624 (Resolved): Skip Packages option for Configuration Backups fails with large configurations
Not seeing this in... Christopher Cope
08:39 PM Bug #15757 (Confirmed): Incorrect dashboard column spacing when using five columns
I'm also seeing this on... Christopher Cope
05:43 PM Bug #15633: Limiters applied to OpenVPN interface do not apply for download traffic
Tested on 24.03
Some comments about OpenVPN + Limiters:
1. with 'Allow any any' firewall rule on the "OpenVPN" de...
Azamat Khakimyanov
03:51 AM Bug #15098: Wireguard crashes on boot if PPPoE is the default gateway
Can confirm that I also have this issue
System :
2.7.2-RELEASE (amd64)
built on Fri Dec 8 15:55:00 EST 2023
FreeBSD...
Remi Roy
12:40 AM Bug #15729 (Feedback): Session cookie warnings
Applied in changeset commit:61e5c10b7a3ae5a32db123668ada6fdcc67e7a00. GChuf 6
12:26 AM Revision b0dbe23b: Merge pull request #4700 from GChuf/sameSiteCookiesAttribute
Marcos M

10/04/2024

08:33 PM pfSense Plus Feature #15766 (New): Restore previous queries
I want to request a new feature or an addition to an existing feature.
When one expands the advanced filter accord...
Alexander Snyder
07:35 PM Revision 61e5c10b: Add samesite attribute to cookies. Implement #15729
GChuf 6
07:08 PM Bug #1819 (Duplicate): DNS Resolver Not Registering DHCP Server Specified Domain Name
This is implemented as a part of #15651 -- Kea DHCP DNS Registration respects the domain name on DHCP settings as wel... Jim Pingle
06:54 PM Feature #15261 (Not a Bug): comcast DHCP issues
Jim Pingle
06:33 PM Revision 8b32975d: Adjust widget refresh intervals
Now that the refresh interval works as expected, decrease the refresh
frequency to more closely match the previous be...
Marcos M
05:40 PM Bug #5413 (Resolved): Reduce disruptions when changing DNS records from DHCP leases in Unbound
This has been working well in snapshots. Records are updated on-the-go, no restarts. Jim Pingle
05:38 PM Feature #15437 (Feedback): Use natural sorting when sorting interfaces
Marcos M
05:09 PM Feature #15437 (Pull Request Review): Use natural sorting when sorting interfaces
Marcos M
05:36 PM Regression #12581: Non Link-Local IPv6 CARP address does not get advertised to endpoints with RADVD
To add one thing I didn't see noted above, you can and should be making a *Link-Local* IPv6 CARP address for these pu... Jim Pingle
05:30 PM Bug #14933 (Feedback): Traffic Graph widget displays bandwidth usage values which are half the actual usage amount
Applied in changeset commit:3ebe5bc73331be9ca9aa9867867257e0942aca6d. Marcos M
05:20 PM Bug #14933 (Waiting on Merge): Traffic Graph widget displays bandwidth usage values which are half the actual usage amount
Marcos M
05:26 PM Feature #5080: Settings tab for global Kea DHCP server options
We did add a settings tab, but it's Kea-specific, so note that in the title so it's more clear in the release notes. Jim Pingle
05:23 PM Revision 3ebe5bc7: Display correct bandwidth usage. Fix #14933
Marcos M
05:06 PM Revision 7455432c: Merge pull request #4683 from FloFaber/improve_alphabetic_interface_sorting
Marcos M
04:55 PM Feature #10000 (Feedback): Enable ``@`` support for Azure in Dynamic DNS
Applied in changeset commit:33626a940a92ba93c6f21c6241603c41a8e07bbd. Marcos M
04:47 PM Feature #10000 (In Progress): Enable ``@`` support for Azure in Dynamic DNS
Marcos M
04:55 PM Feature #14289 (Feedback): Enable ``@`` support for name.com in Dynamic DNS
Applied in changeset commit:60a5fd09e14bf64aca79efd9a27a42164e872c90. Marcos M
04:49 PM Feature #14289 (In Progress): Enable ``@`` support for name.com in Dynamic DNS
Marcos M
04:47 PM Feature #15593 (Duplicate): Enable ``@`` support for Azure in Dynamic DNS
Marcos M
04:46 PM Revision 33626a94: Allow apex records for Azure DDNS. Implement #10000
Marcos M
04:45 PM Revision 60a5fd09: Allow apex records for name.com DDNS. Implement #14289
Marcos M
04:32 PM Revision 88e4113b: Improve code readability for DDNS checks
Marcos M
04:00 PM Bug #15490 (Feedback): Sanitize RFC 2136 Dynamic DNS update keys in ``status.php`` output
Applied in changeset commit:2d9db4c6bfe1e437eb8f074dae79817728533761. Jim Pingle
03:42 PM Revision 2d9db4c6: Sanitize RFC2136 key data in status output. Fixes #15490
Jim Pingle
03:39 PM Todo #15705 (Pull Request Review): Clarify console menu option 0 description
Marcos M
03:35 PM Bug #15725 (Feedback): Dashboard widgets refresh at unintended intervals
Applied in changeset commit:ee615d9d982e94fdb9f5a88207f53990e6e86c1d. GChuf 6
03:35 PM Todo #15728 (Feedback): Improve Thermal Sensors Dashboard widget refresh code
Applied in changeset commit:b0cd23ab5e2d218f2af54739dd483cf21f6e8c5a. GChuf 6
03:35 PM Bug #15373 (Feedback): Firewall Logs Dashboard widget update interval does not behave as expected
Applied in changeset commit:3d89c2dbe73fb081833700c49fec7004b120cd6a. GChuf 6
03:26 PM Revision 8c0b5014: Merge pull request #4699 from GChuf/logWidgetFix
Marcos M
03:25 PM Revision 62f646f3: Merge pull request #4698 from GChuf/thermalSensorWidgetImprovement
Marcos M
03:22 PM Revision 042b7347: Merge pull request #4697 from GChuf/WidgetRefreshRework
Marcos M
02:46 PM Bug #15702 (Resolved): IPv4 DHCP client responses may be routed unexpectedly out unrelated WANs
Seems to be behaving on current snapshots on everything in my lab. It's also in the most recent public snapshot, and ... Jim Pingle
02:44 PM Todo #13508: Uncouple RAM Disk size from available kernel memory
Since the only real affected platform is EOL and this doesn't seem to be a widespread issue, it isn't a priority. If ... Jim Pingle
08:22 AM Revision ee615d9d: Refresh widgets at specified intervals. Fix #15725
GChuf 6
08:00 AM Revision 87d75fe7: Remove old code references in thermal widget
Originally removed in https://redmine.pfsense.org/issues/5369 GChuf 6
08:00 AM Revision b0cd23ab: Improve thermal widget refresh code. Implement #15728
Only replace values instead of entire DOM elements. GChuf 6
07:47 AM Revision 108cb5f2: Display seconds in firewall log widget
GChuf 6
07:46 AM Revision 3d89c2db: Respect user-specified interval for log widget. Fix #15373
GChuf 6

10/03/2024

11:23 PM Regression #15762 (Resolved): Captive Portal concurrent login setting does not work
Fixed in commit:c3939d63ad846097e0111faf75b1dc9a632b9a94. Marcos M
11:17 PM Regression #15762 (Resolved): Captive Portal concurrent login setting does not work
When set to @Last login@, the user is able to have multiple active sessions. Marcos M
11:20 PM Revision c3939d63: Config access regression. Fix #15762
Marcos M
08:36 PM Feature #15761 (New): Tailscale failover

Tailscale does not support fail-over, it would be helpful if it runs automatically on backup server in case primary...
Alhusein Zawi
07:43 PM Feature #15321: Kea DHCP Custom Configuration Support (IPv4 and IPv6)
After a lot of experimentation and help from Marcos, I discovered it is important to know if the option is already de... Dale Harron
04:32 PM Todo #15728 (Pull Request Review): Improve Thermal Sensors Dashboard widget refresh code
Marcos M
02:14 PM Bug #15751 (Resolved): Declining to reset the admin account via the console menu still prompts to change the password
Jim Pingle
02:02 PM Bug #15751: Declining to reset the admin account via the console menu still prompts to change the password
reproduced on Sept 28 build, it is fixed in the latest
tested on
24.08-DEVELOPMENT (amd64)
built on Wed Oct 2 16:1...
Georgiy Tyutyunnik
01:03 PM Bug #15754: log file size growing despite settings
I understand. Thank you for your effort. Tomas B.
12:54 PM Bug #15754 (Not a Bug): log file size growing despite settings
OK, there does not appear to be a bug in how the settings themselves are handled. Your configuration is broken. Eithe... Jim Pingle
06:46 AM Bug #15754: log file size growing despite settings
Hi
this is what it contains.
!clipboard-202410030846-hynuo.png!
Tomas B.
07:58 AM pfSense Packages Bug #15758: openVPN client exporting for another user and fails to work with ldap.
Finally, there's one more file that should be changed; /usr/local/pkg/... npr .
03:45 AM Bug #12708: Alias with non-resolving FQDN entry breaks underlying PF table
Hello, just meet this issue again on pfsense CE 2.7.2-RELEASE (amd64) Enoch Lau
01:49 AM pfSense Packages Bug #15760 (Resolved): Typo in Snort Important Preproc Information
Hello,
I am letting you know that there is a typo,
located in the Important Preprocessor Information message.
I ...
Matthew Zscherpel
 

Also available in: Atom