pfSense

11/05/2024

09:13 PM Bug #15819 (Resolved): PHP error when creating intermediate certificates

When creating an intermediate cert in 24.11-beta:... Steve Wheeler

07:10 PM Feature #15818: Certificate Authorities created in the GUI do not have the Basic Constraints extension marked critical

https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.9 Steve Wheeler

07:10 PM Feature #15818 (Resolved): Certificate Authorities created in the GUI do not have the Basic Constraints extension marked critical

CA certs created and exported from pfSense can fail verification because the Basic Constraints extension is not marke... Steve Wheeler

02:31 PM pfSense Docs Correction #15817 (Closed): AWS password restrictions

Added: https://gitlab.netgate.com/docs/pfsense-platforms/-/commit/10ea22406d60d59fe8ac5430397bb0b6db51cf6d Jim Pingle

12:19 PM pfSense Plus Bug #15396: BE upgrade process deferred pkg install can cause significant delays

fixed in the new versions, reproduced on 23.09.1 -> 24.03,
can't reproduce on 24.03 -> 24.11 BETA
24.11-BETA (amd64... Georgiy Tyutyunnik

11/04/2024

11:06 PM pfSense Docs Correction #15817 (Closed): AWS password restrictions

When configuring an admin password in AWS before deployment the password cannot contain the characters : or =
Thos... Steve Wheeler

07:57 PM pfSense Docs Todo #15816 (Rejected): Feedback on pfSense® software Configuration Recipes — L2TP/IPsec Remote Access VPN Configuration Example

Those settings would break it worse than it already is by prohibiting L2TP from using IPsec, so it wouldn't be encryp... Jim Pingle

07:51 PM pfSense Docs Todo #15816 (Rejected): Feedback on pfSense® software Configuration Recipes — L2TP/IPsec Remote Access VPN Configuration Example

*Page:* https://docs.netgate.com/pfsense/en/latest/recipes/l2tp-ipsec.html
*Feedback:*
create L2TP for Windows ... Artist Gusev

05:44 PM pfSense Packages Bug #15726: Apcupsd dashboard widget warning/critical values are not digits or units as expected

Fixed with https://github.com/pfsense/FreeBSD-ports/commit/72eae841d1731a9be084608d8b83d7d5927ea456 Marcos M

05:19 PM Regression #15810 (Resolved): ntpd can fail to start when unbindable addresses exist

Patch works.
For reference:
https://bugs.ntp.org/show_bug.cgi?id=3928 Marcos M

04:51 PM Regression #15810: ntpd can fail to start when unbindable addresses exist

Patch is in our trees Christian McDonald

04:51 PM Regression #15810 (Feedback): ntpd can fail to start when unbindable addresses exist

Christian McDonald

03:43 PM Regression #15815 (Resolved): PHP error when no WOL entries are defined

Fixed with commit:c495a353b364eaf5ee8da18d846ecd80cae170ea. Marcos M

03:36 PM Regression #15815 (Resolved): PHP error when no WOL entries are defined

... Marcos M

01:45 PM pfSense Docs New Content #15812: Recipe for OpenVPN Site-to-Site SSL/TLS with DCO

The existing recipes are OK, what's missing is a new/separate example dedicated to DCO.
Jim Pingle

01:27 PM Bug #15679: Multicast with intel NIC

Emre K wrote in #note-4:
> Why is this "closed" with "needs patch"? Or it is me who is weird and don't understand th... Jim Pingle

12:50 PM Feature #6626: Support for IPv6 firewall entries with dynamic delegated prefix and static host address

Jan-Jonas Sämann wrote in #note-44:
> In addition to the previous commit, which introduced the basic ability to auto... Bastian Mäuser

11/03/2024

06:39 PM pfSense Docs Todo #15811 (Closed): Feedback on Troubleshooting — Troubleshooting Boot Issues

The installer supports PPPoE. If you believe you've found a bug with DHCP, detailed steps to reproduce it would be he... Marcos M

04:23 PM pfSense Docs Todo #15811: Feedback on Troubleshooting — Troubleshooting Boot Issues

Btw, I was on it about six hours.
And the reaseon for starting this whole thing was another error, the first of fo... Sascha Borer

04:16 PM pfSense Docs Todo #15811: Feedback on Troubleshooting — Troubleshooting Boot Issues

I was tired, Netgate! Sascha Borer

12:46 PM Bug #15752: Montly kernel panic

We were able to perform a first test now:... Sebastian Wagner

11:28 AM Feature #15813: Include alternative TCP stack

Ok, the release after that would still help a lot. Andreas Dekiert

02:13 AM pfSense Packages Bug #15749: BGP advertising all routes and ignoring networks statements.

Here is a set up that i have.
Device: SG-1100
Software: 24.03-RELEASE
Networks local to SG-1100: 192.168.70.0/24, 172... Mike Moore

12:39 AM pfSense Packages Bug #15726: Apcupsd dashboard widget warning/critical values are not digits or units as expected

running 24.11.b.20241031.0600 build on amd64
System with no backup device connected, apcupsd widget's options are ... Jordan G

11/02/2024

10:40 PM Feature #14067 (In Progress): Per-instance options to control Dynamic DNS client Check IP Service behavior

Marcos M

10:36 PM Bug #14605 (Pull Request Review): Dynamic DNS uses the default gateway interface instead of the specified interface

https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1172 Marcos M

10:31 PM Feature #11177 (Pull Request Review): Improve Dynamic DNS client IPv6 support

There is essentially no support for IPv6 requests in the current DDNS service implementation, hence it won't work for... Marcos M

10:17 PM Feature #14610 (Closed): Add source address option to Check IP Services

Closing this since it's best to leave the source selection to DDNS where it's already implemented. Doing it for the C... Marcos M

10:13 PM Feature #13901 (Closed): Update default DDNS check IP service to support IPv6

Closing this since it's easy enough to add others and DDNS doesn't correctly use IPv6 from Check IP services anyway. Marcos M

08:07 PM pfSense Packages Bug #15749: BGP advertising all routes and ignoring networks statements.

only listed networks (in Network Distribution) were advertised in my lab.
Please provide more details about yo... Alhusein Zawi

01:58 PM Feature #15813: Include alternative TCP stack

It's too late for 24.11, though we can look into it after this release. Marcos M

08:01 AM Feature #15813 (Duplicate): Include alternative TCP stack

After extensive research I found out why a Netgate XG1537 is unable to saturate a fiber WAN link. It turns out this i... Andreas Dekiert

01:52 PM pfSense Plus Bug #15006 (Closed): Upgrade Issue to 23.09 Results in Stuck Prompt Mid-upgrade

I'm closing this since it seems this has not been an issue for 24.03. It can be reopened if needed. Marcos M

09:11 AM Bug #15814: Firewall State Policy of Interface Bound States doesn't work with WAN-Type WireGuard-Interface

Edit: SNAT is disabled between the two Peers in this S2S-VPN. Bob Dig

09:05 AM Bug #15814 (New): Firewall State Policy of Interface Bound States doesn't work with WAN-Type WireGuard-Interface

A port-forward coming in to a WAN-Type WireGuard-Interface from one fully patched pfSense CE 2.7.2 to another isn't w... Bob Dig

05:01 AM pfSense Docs Todo #15811: Feedback on Troubleshooting — Troubleshooting Boot Issues

Netgear??
Mike Moore

04:21 AM Bug #15679: Multicast with intel NIC

Why is this "closed" with "needs patch"? Or it is me who is weird and don't understand the workflow. Emre K

11/01/2024

09:53 PM pfSense Docs New Content #15812 (Resolved): Recipe for OpenVPN Site-to-Site SSL/TLS with DCO

Currently, we have two S2S OpenVPN examples in our docs:
We have this one, which is a Site-to-Multi-site example:
... Kris Phillips

07:30 PM pfSense Docs Todo #15811 (Closed): Feedback on Troubleshooting — Troubleshooting Boot Issues

*Page:* https://docs.netgate.com/pfsense/en/latest/troubleshooting/boot-issues.html
*Feedback:*
That's a big "N... Sascha Borer

07:25 PM Regression #15810 (Resolved): ntpd can fail to start when unbindable addresses exist

When IP addresses exist on the system that ntpd cannot bind to it can fail to start and core dump.
For example an ... Steve Wheeler

05:22 PM Bug #15809 (New): UFS upgrades do not create new log files

Upgrading UFS systems to versions that require additional log files does not create them until a second reboot has ha... Steve Wheeler

12:34 PM pfSense Packages Bug #15733 (Resolved): Changing the account key name does not update respective certificates

reproduced on:
2.7.2-RELEASE (amd64)
built on Mon Mar 4 19:53:00 UTC 2024
FreeBSD 14.0-CURRENT
tested on, fixed... Georgiy Tyutyunnik

09:31 AM Feature #15808 (Resolved): PREF64 support in Router Advertisements

Please implement RFC8781 Discovering PREF64 in Router Advertisements (IPv6-Mostly Networks) to support IPv6-Mostly Ne... Bart Schapendonk

09:28 AM Feature #15807 (New): RFC8925 IPv6-Only Preferred Option for DHCPv4 (IPv6-Mostly Networks)

Please implement RFC8925 IPv6-Only Preferred Option for DHCPv4 to support IPv6-Mostly Networks
- This is just the ... Bart Schapendonk

08:47 AM Bug #15685 (Resolved): Mobile IPsec does not automatically switch to failover gateway

Tested against the latest dev release.
The issue is fixed.
I am closing this ticket as resolved. Danilo Zrenjanin

10/31/2024

09:09 PM pfSense Packages Todo #15806 (Duplicate): Add WAN export interface for wiregaurd

Can I choose the network interface like openvpn so that I can choose the WAN exit? yon Liu

08:45 PM pfSense Plus Bug #15740: NAT uses unknown IP address

The dignostic files have been uploaded on the link provided. David G

08:44 PM pfSense Plus Bug #15740: NAT uses unknown IP address

I provided all the information Dylan requested. Why did you change the status to Incomplete? David G

05:33 PM pfSense Plus Bug #15196 (Not a Bug): AWS ena interfaces can become unstable/stop responding

This is not a bug and presents regardless of OS. It's part of the behavior of T3 instance sizes. If an instance excee... Jim Pingle

04:31 PM Feature #15805: DHCP IPv4 and IPv6 KeaMA migration assistant and KeaMA Lease Migration tool

With migration to Kea DHCP eventually coming to being eminent and open-source versions of Kea missing various hooks/f... Jonathan Smolka

04:24 PM Feature #15805 (New): DHCP IPv4 and IPv6 KeaMA migration assistant and KeaMA Lease Migration tool

With migration to Kea DHCP eventually coming to being eminent and open-source versions of Kea missing various hooks/f... Jonathan Smolka

04:22 PM Bug #15795 (Resolved): Removing a route from the High Availability primary node does not remove the entry from the routing table on the secondary node

The issue was resolved by applying the second patch subsequent to the first one.
I am closing this ticket as resol... Danilo Zrenjanin

04:19 PM Bug #15795: Removing a route from the High Availability primary node does not remove the entry from the routing table on the secondary node

Fixed with commit:05f941f3901ac32cd2bc06c7fb63954be2c44c4b. Marcos M

02:13 PM Bug #15795: Removing a route from the High Availability primary node does not remove the entry from the routing table on the secondary node

I applied the patch to the HA pair operating on the latest development release. However, the issue remains unresolved... Danilo Zrenjanin

04:19 PM pfSense Packages Bug #15804: pfBlockerNG devel ASN list can hang GUI

It's probably a duplicate of https://redmine.pfsense.org/issues/12822 Danilo Zrenjanin

03:24 PM pfSense Packages Bug #15804 (New): pfBlockerNG devel ASN list can hang GUI

in some cases while working with ASN format IP lists in pfBlockerNG devel 3.2.1_19 GUI can hang on the preview list o... Georgiy Tyutyunnik

03:17 PM pfSense Packages Bug #15649 (Resolved): pfBlockerNG can't operate ASN-based Aliases

tested on
24.11-BETA (amd64)
built on Thu Oct 31 7:00:00 CET 2024
FreeBSD 15.0-CURRENT
pfblockerng devel 3.2.1_19 Georgiy Tyutyunnik

03:16 PM pfSense Packages Bug #15649: pfBlockerNG can't operate ASN-based Aliases

ASN-format lists now populate correctly with help of ipinfo token
Georgiy Tyutyunnik

03:00 PM pfSense Packages Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy

Hello,
We also would like to know the estimate, this would be really helpful. J R

12:51 PM pfSense Plus Bug #15472: potential bug with the ath driver

Does this still happen with the newer drivers in 24.03? That crash is in 23.05.1. Steve Wheeler

01:19 AM pfSense Plus Bug #15472: potential bug with the ath driver

I actually could not resolve this issue even with a new 2nd Compex card installed, the same thing occurred it would g... Jonathan Lee

01:06 AM Feature #8794: NTP authentication support

@Marcos Thank you!!! Jonathan Lee

12:51 AM Feature #8794 (Resolved): NTP authentication support

Marcos M

01:01 AM pfSense Packages Bug #14390: Squid: SECURITY ALERT: Host header forgery detected

Hello, fellow Redmine community members, the Squid-users email system has stated most/almost all of the security vuln... Jonathan Lee

12:50 AM Feature #12522 (Resolved): More GUI options for OpenVPN Client-Specific Overrides

Marcos M

12:49 AM Bug #12938 (Needs Patch): Incorrect warning from ``radvd`` about ``AdvRDNSSLifetime`` value

Marcos M

12:46 AM Bug #15700 (Resolved): Package navigation menus can be duplicated when reinstalling the package

Marcos M

12:46 AM pfSense Packages Feature #15528 (Resolved): Add fix for #15430 to pfSense+ 24.03

Marcos M

12:44 AM Feature #10000 (Resolved): Enable ``@`` support for Azure in Dynamic DNS

Marcos M

12:44 AM Feature #14289 (Resolved): Enable ``@`` support for name.com in Dynamic DNS

Marcos M

12:43 AM Bug #14708 (Resolved): PHP error when the system fails to create an interface

Marcos M

12:41 AM pfSense Packages Bug #14861 (Resolved): PHP error when pings are enabled but no ping hosts are defined

Marcos M

12:36 AM pfSense Plus Bug #15638 (Resolved): BE verification fails after logging in before the boot process finishes

Marcos M

12:33 AM Bug #15684 (Resolved): Panic in ``tcp_m_copym`` with selective ACK enabled

Marcos M

12:30 AM Bug #15685 (Feedback): Mobile IPsec does not automatically switch to failover gateway

Applied in changeset commit:c1edb3ff97b20224858795ce3ef872a1cc9d4f53. Marcos M

10/30/2024

11:47 PM pfSense Packages Feature #15674 (Resolved): Support custom IP and Port variables for interfaces

Marcos M

11:46 PM Bug #15704 (Resolved): Automatic EDNS value may be lower than expected

Marcos M

11:45 PM Bug #15708: The filterdns service won't start

This limitation is documented here:
https://docs.netgate.com/pfsense/en/latest/troubleshooting/filterdns-thread-erro... Marcos M

11:39 PM Bug #15711 (Feedback): Special characters in the ACB configuration change description can cause PHP errors

Marcos M

10:00 PM Todo #15728 (Resolved): Improve Thermal Sensors Dashboard widget refresh code

Marcos M

09:59 PM Bug #15738 (Rejected): xml parsing: whitespace causes errors.

There are long-term plans that can help with the root issue here, but manual modification of the configuration file i... Marcos M

09:51 PM pfSense Plus Bug #15740 (Incomplete): NAT uses unknown IP address

Marcos M

09:23 PM pfSense Packages Bug #15760 (Resolved): Typo in Snort Important Preproc Information

Fixed with d837e531ca20823dcc96b5c7b67769bda8d73633. Marcos M

08:51 PM Bug #15770 (Incomplete): Limiter Limits Whole Gateway instead of Single IP

Marcos M

08:50 PM Bug #15772: Captive Portal zones can fail to start due to ID conflict

Applied in changeset commit:d23f3e6ce5b59b14a47c4159b3b1a71f9a9f9535. Marcos M

08:49 PM Bug #15772 (Feedback): Captive Portal zones can fail to start due to ID conflict

Should be fixed with commit:d23f3e6ce5b59b14a47c4159b3b1a71f9a9f9535. Marcos M

07:59 PM pfSense Packages Bug #15773 (Incomplete): Lightsquid stoped gererating reports after upgrade do pfSense 2.7.2

Marcos M

07:54 PM Bug #15802 (Resolved): Dynamic DNS attempts to resolve entries with disabled interfaces

This is working on 24.11.
The commit ID can be used to apply it - see:
https://docs.netgate.com/pfsense/en/latest... Marcos M

05:18 PM Bug #15795 (Feedback): Removing a route from the High Availability primary node does not remove the entry from the routing table on the secondary node

Fixed with commit:e2eb3e16e9ef63a375718dcc06b54a9765266244. Marcos M

05:13 PM Bug #15795 (In Progress): Removing a route from the High Availability primary node does not remove the entry from the routing table on the secondary node

Marcos M

08:57 AM pfSense Packages Feature #8547: fwknop Port Knocking Package

Upvote as well Alex Kolesnik

10/29/2024

09:49 PM Feature #2358: NAT64 support

An 11 year old feature request........outstanding. Mike Moore

09:38 PM Feature #2358: NAT64 support

Upvote / Bump Can we get a status on this? Scott Howard

08:26 PM Bug #15802: Dynamic DNS attempts to resolve entries with disabled interfaces

Thanks Marcos!
Is this available as a system patch to test on 24.03 or do I need to wait for 24.11 to be released? Andrew Almond

07:49 PM Bug #14977 (Feedback): Kea fails to restart due to race between process termination and startup

I think(tm) we have a fix for this. Christian McDonald

11:45 AM pfSense Packages Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy

Hello,
Could you please let us know the estimate ?
Thank you
Aytek A.

10/28/2024

08:55 PM Bug #15802 (Feedback): Dynamic DNS attempts to resolve entries with disabled interfaces

The GUI issue can be left to:
https://redmine.pfsense.org/issues/15803
I've pushed commit:e6597954c11c9481a806cc89d8... Marcos M

07:48 PM Bug #15802: Dynamic DNS attempts to resolve entries with disabled interfaces

Opened this as a separate redmine as suggested by Marcos M. https://redmine.pfsense.org/issues/15800#note-1 Andrew Almond

07:47 PM Bug #15802 (Resolved): Dynamic DNS attempts to resolve entries with disabled interfaces

When Dynamic DNS has an entry that refers to a disabled interface, Dynamic DNS still tries to look up the IP address ... Andrew Almond

08:32 PM pfSense Packages Bug #15726 (Feedback): Apcupsd dashboard widget warning/critical values are not digits or units as expected

Fixed with https://github.com/pfsense/FreeBSD-ports/commit/0d1ede3a2837252bbe753b05df3efef209b5524c Marcos M

08:13 PM pfSense Packages Bug #15726 (In Progress): Apcupsd dashboard widget warning/critical values are not digits or units as expected

Marcos M

08:30 PM pfSense Packages Bug #15733 (Feedback): Changing the account key name does not update respective certificates

Fixed with https://github.com/pfsense/FreeBSD-ports/commit/465a958caba162c61d6f315b1c354955668a44b9 Marcos M

07:50 PM pfSense Packages Bug #15733 (In Progress): Changing the account key name does not update respective certificates

Marcos M

08:29 PM pfSense Plus Bug #15396: BE upgrade process deferred pkg install can cause significant delays

Snort and Suricata have been updated to work around this issue:
* https://github.com/pfsense/FreeBSD-ports/commit/57... Marcos M

07:57 PM Feature #15803 (New): Inconsistent handling of disabled interfaces and gateways in the GUI

In several areas of the GUI, disabled interfaces are hidden/not selectable (such as DynamicDNS and Gateway Groups). H... Andrew Almond

07:40 PM Feature #15801 (New): Gateway of a disabled interface cannot be configured in System > Routing

Scenario: An interface and gateway are configured, and the gateway is added to a gateway group. The interface is then... Andrew Almond

06:59 PM Bug #15800 (Not a Bug): Gateway of a disabled interface cannot be configured in System > Routing or Dynamic DNS

> The system log will contain messages similar to:
Those are informational and expected.
> Attempting to disable wit... Marcos M

05:36 PM Bug #15800 (Not a Bug): Gateway of a disabled interface cannot be configured in System > Routing or Dynamic DNS

Scenario: An interface and gateway are configured, and the gateway is added to a gateway group. The interface is then... Andrew Almond

01:19 PM pfSense Docs Todo #15797 (Closed): Feedback on pfSense® software Configuration Recipes — Configuring DNS over TLS

The SAN list on their certificate will match any of the following hostnames:... Jim Pingle

01:08 PM Bug #15552: NTP option "DNS Resolution" has no effect when using NTP pool hostnames

Jordan G wrote in #note-5:
> the info/tip below NTP's DNS resolution option currently states it has no affect on poo... Jim Pingle

11:08 AM Todo #15799: Remove unnecessary functions.inc.php and functions.php imports in widget files

Connected to https://redmine.pfsense.org/issues/7385 GChuf 6

11:05 AM Todo #15799 (Rejected): Remove unnecessary functions.inc.php and functions.php imports in widget files

PR: https://github.com/pfsense/pfsense/pull/4712
functions.inc file is deprecated and should not be included everywh... GChuf 6

10:17 AM Todo #15798 (Rejected): Remove shellCommand dependency

PR: https://github.com/pfsense/pfsense/pull/4711
The dependency is only used in 1 file: src/usr/local/pfSense/incl... GChuf 6

10/27/2024

07:31 AM pfSense Packages Bug #15726: Apcupsd dashboard widget warning/critical values are not digits or units as expected

Can confirm it on 24.03 aleksei prokofiev

10/26/2024

11:36 PM Bug #15552: NTP option "DNS Resolution" has no effect when using NTP pool hostnames

the info/tip below NTP's DNS resolution option currently states it has no affect on pools. This should be updated if ... Jordan G

10:50 PM pfSense Packages Bug #15733: Changing the account key name does not update respective certificates

pfSense + 24.03 editing the acme account key name used by an existing certificate, still shows the previous key name ... Jordan G

10:25 PM Feature #15437: Use natural sorting when sorting interfaces

once alphabetical sort has been enabled the interface description sort adheres to alphanumerical ascending list order... Jordan G

10:05 PM pfSense Docs Todo #15797 (Closed): Feedback on pfSense® software Configuration Recipes — Configuring DNS over TLS

*Page:* https://docs.netgate.com/pfsense/en/latest/recipes/dns-over-tls.html
*Feedback:*
I believe the DNS Host... Ben Miller

12:06 PM Todo #15483: Update Unbound to 1.22.0

We're now on 1.22.0. Marcos M

10/25/2024

01:58 PM pfSense Docs Correction #15678: Update IPsec documentation

I can understand that this issue takes time to unravel and fix. What i don't understand is why there is no notificati... Mike Moore

01:20 PM pfSense Docs Todo #15796: Feeback on Client Routing and Gateway Considerations

That is probably worth mentioning there, with appropriate warnings about the source being lost. It should be a last r... Jim Pingle

07:49 AM pfSense Packages Bug #15756 (Confirmed): NTOPNG db sits in ramdisk on pfsense, filling it up and crashing pfsense

I was able to replicate the observed behavior.
Tested against:... Danilo Zrenjanin

06:53 AM Bug #15767 (Confirmed): Clicking the picture widget image downloads the image with an invalid filename instead of showing it inline

I successfully replicated the reported behavior. When I click on the image imported into the widget, it downloads wit... Danilo Zrenjanin

06:37 AM Bug #15795 (Confirmed): Removing a route from the High Availability primary node does not remove the entry from the routing table on the secondary node

I have replicated this behavior.
Tested on PVE, pfSense Plus version 24.03. Danilo Zrenjanin

10/24/2024

09:28 PM pfSense Docs Todo #15796 (New): Feeback on Client Routing and Gateway Considerations

https://docs.netgate.com/pfsense/en/latest/vpn/ipsec/client-routing.html
Outbound NAT is not listed as an option w... Andrew Almond

09:17 PM pfSense Docs Correction #15678: Update IPsec documentation

I've also learned this the hard way - it's especially disruptive when changing the Mobile IPsec tunnel and everyone g... Andrew Almond

05:52 PM pfSense Plus Bug #15196: AWS ena interfaces can become unstable/stop responding

The customer agreed to test the newer version of the driver. I created a version for 24.03 specifically for them to d... Mateusz Guzik

05:45 PM Bug #12056 (Pull Request Review): Filterlog says "Unknown Option %u"

It does look like a bug. For reference:
https://github.com/pfsense/FreeBSD-ports/pull/1229 Marcos M

05:31 PM Bug #12056: Filterlog says "Unknown Option %u"

Mhm, you really think this is a feature request and not a bug? Florian Apolloner

11:22 AM pfSense Packages Bug #15744 (Resolved): Suricata LOGS MGMT feature shows ``enabled`` by default on a green-field install when it should instead default to ``disabled``

latest suricata version (7.0.7_4) has this fix implemented
tested on
24.11-ALPHA (amd64)
built on Fri Oct 18 8:00:... Georgiy Tyutyunnik

10/23/2024

10:44 PM pfSense Plus Bug #15196: AWS ena interfaces can become unstable/stop responding

T2.medium is 2C haswell/broadwell and non-ENA
T3.medium is 2C skylake/canyon lake but has ENA
both get 24 CPU credit... Jim Thompson

06:40 PM Regression #15768 (Resolved): OpenVPN Windows Client fails to connect

Fixed with commit:f57bd4ddb0110f5be5486fe00a8336398270e67d. Marcos M

05:17 PM Bug #15601 (Feedback): Routes with IPv6 Address as Next Hop for IPv4 Destination Causes Kernel Panic

Jim Pingle

05:00 PM Bug #15601: Routes with IPv6 Address as Next Hop for IPv4 Destination Causes Kernel Panic

The customer was shipped with 2 kernels. First added some debug and another added a workaround for the suspected issu... Mateusz Guzik

01:43 AM Bug #15795 (Resolved): Removing a route from the High Availability primary node does not remove the entry from the routing table on the secondary node

Version: 24.03-RELEASE
Platform: PVE, 6100
Example:
Primary (netstat -nr)... Craig Coonrad

12:46 AM Bug #15353: Crashes Every ~8-12 Hours in New 2.7.2 Install with Unbound, Suricata, and pfBlockerNG

I wanted to update and say we see a similar issue with a router locking up randomly. Weirdly, it is mainly affecting ... Steven Brown

10/22/2024

11:36 PM pfSense Packages Bug #13214 (Resolved): AttributeError: 'NoneType' object has no attribute 'text'

Marcos M

11:33 PM pfSense Packages Feature #13063 (Resolved): Improve modem support

Marcos M

08:36 PM Todo #15780: Speed up MBUF Usage command in system information widget

Updated the code.
More info on github. GChuf 6

07:16 PM Feature #15221: Make System Tunables table sortable

Created a PR here:
https://github.com/pfsense/pfsense/pull/4709 GChuf 6

05:01 PM Todo #15779 (Resolved): Update Dynamic DNS API URL for porkbun.com

Marcos M

04:04 AM Todo #15779: Update Dynamic DNS API URL for porkbun.com

Emanuel Persson wrote:
> Got a email today from Porkbun regarding their URL change for API from "porkbun.com" to "ap... Nita Vesa

04:47 PM pfSense Packages Bug #13811 (Closed): Youtube content getting filtered on Squid when none is Selected

Marcos M

02:19 PM pfSense Packages Bug #13811: Youtube content getting filtered on Squid when none is Selected

@Marcos M
This was merged in https://github.com/pfsense/FreeBSD-ports/commit/bd93b039663782e42721656ed50653086e611... Jonathan Lee

06:55 AM pfSense Packages Bug #13811: Youtube content getting filtered on Squid when none is Selected

Can close this as this is now resolved in https://github.com/pfsense/FreeBSD-ports/commit/bd93b039663782e42721656ed50... Maharsh Patel

02:16 PM pfSense Packages Bug #15381: Update deprecated options

https://redmine.pfsense.org/issues/13811
@Maharsh Patel
I think you mean this one. Jonathan Lee

06:56 AM pfSense Packages Bug #15381: Update deprecated options

Can you also close this issue as well this is now no longer valid: https://redmine.pfsense.org/issues/15381 Maharsh Patel

01:46 PM Feature #2479: Allow reordering of the traffic graphs on the dashboard

Mike Moore wrote in #note-4:
> 12 years open for this ticket?!?
PRs accepted Christian McDonald

01:20 PM Feature #2479: Allow reordering of the traffic graphs on the dashboard

12 years open for this ticket?!? Mike Moore

12:06 PM Feature #2479: Allow reordering of the traffic graphs on the dashboard

I will add myself to the list too. Jürgen Echter

12:58 PM pfSense Packages Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy

Any estimate on when this will be available? We use the proxy on several units, and I really need to get these upgrad... Justin w

08:52 AM Bug #15757: Incorrect dashboard column spacing when using five columns

Issue is due to code in index.php:... GChuf 6

10/21/2024

10:52 PM pfSense Packages Bug #15381: Update deprecated options

Thanks for looking at this, and the YouTube issue. Jonathan Lee

10:27 PM pfSense Packages Bug #15381 (Closed): Update deprecated options

I've merged the above comments into one to help with readability.
The proposed changes from the posted PRs are sim... Marcos M

07:39 PM Todo #15781 (Resolved): Remove deprecated HTTP/1.0 Pragma header

Marcos M

07:23 PM Bug #15729 (Resolved): Session cookie warnings

The treegrid cookies for the Disk and ZFS widgets have been removed. With the widget-specific cookies removed, treegr... Marcos M

05:19 PM Feature #15794 (New): RFC 3527 option for DHCP Relay

Certain DHCP server relay scenarios can benefit from using RFC 3527 behavior for the gateway IP address in a relayed ... Jim Pingle

03:23 PM pfSense Plus Bug #15262: Captive Portal Has High CPU Interrupts With Large Number of Users

Any Update ? Aytek A.

10/20/2024

10:14 PM pfSense Packages Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy

Andrew Almond wrote:
> Zabbix 7.0 has been released. https://www.zabbix.com/rn/rn7.0.0
>
> This might be a good oppo... Wesley Sena

01:33 AM Bug #15752: Montly kernel panic

Sebastian Wagner wrote in #note-2:
> Thank you for the response. There doesn't seem to be a memtest included, so the... Jordan G

01:17 AM pfSense Plus Bug #14401: Changing from Switchport to Discrete Interface in VGA/Serial Console Breaks Port Status Monitoring

Kris Phillips wrote in #note-4:
>
> Jordan,
>
> Did you test moving from a switchport with a switchport number ... Jordan G

10/19/2024

08:11 PM Bug #15725 (Resolved): Dashboard widgets refresh at unintended intervals

Tested on... Christopher Cope

07:56 PM Bug #15373 (Resolved): Firewall Logs Dashboard widget update interval does not behave as expected

Tested on... Christopher Cope

02:38 AM Bug #15732: miniupnpd stops responding after a few minutes

It's been over a month and there is absolutely no response from the netgate or superuser community on this, probably ... Chris F

10/18/2024

11:43 PM Bug #15791: No default route after boot

Fixed with commit:d34e5ee278dfed1f0cd85b5c6d09562352989bab Marcos M

11:43 PM Bug #15791 (Resolved): No default route after boot

Marcos M

03:51 PM Bug #15791 (Resolved): No default route after boot

Some systems / configurations can end up with no default route after boot-up is complete.
Most systems that hit th... Steve Wheeler

10:22 PM pfSense Docs Todo #15792: Feedback on pfSense® software Configuration Recipes — Accessing a CPE/Modem from Inside the Firewall

In my example vmx0 is the parent NIC for the PPPoE connection and you can see I have also been able to assign vmx0 as... Steve Wheeler

10:09 PM pfSense Docs Todo #15792: Feedback on pfSense® software Configuration Recipes — Accessing a CPE/Modem from Inside the Firewall

Hi Steve -- Does vtnet0 show up under "Available network ports:"?
Please see my system:
!clipboard-202410181808... Christopher Moriarty

10:05 PM pfSense Docs Todo #15792 (Not a Bug): Feedback on pfSense® software Configuration Recipes — Accessing a CPE/Modem from Inside the Firewall

I can't replicate that on any version. I'm able to assign the parent interface separately without errors in every cas... Steve Wheeler

07:44 PM pfSense Docs Todo #15792 (Not a Bug): Feedback on pfSense® software Configuration Recipes — Accessing a CPE/Modem from Inside the Firewall

*Page:* https://docs.netgate.com/pfsense/en/latest/recipes/modem-access.html#configure-a-new-interface
*Feedback... Christopher Moriarty

07:33 PM Bug #15657 (Resolved): State table entries printed on ``diag_dump_states.php`` may contain an unexpected interface

Georgiy Tyutyunnik

07:32 PM Bug #15657: State table entries printed on ``diag_dump_states.php`` may contain an unexpected interface

tested, reproduced on
24.03-RELEASE (amd64)
built on Wed Aug 21 17:32:00 CEST 2024
FreeBSD 15.0-CURRENT
curren... Georgiy Tyutyunnik

06:24 PM pfSense Packages Bug #15771 (Resolved): RPKI cannot be configured

Marcos M

05:01 PM Bug #14933 (Resolved): Traffic Graph widget displays bandwidth usage values which are half the actual usage amount

fix works in
24.11-ALPHA (amd64)
built on Fri Oct 18 8:00:00 CEST 2024
FreeBSD 15.0-CURRENT Georgiy Tyutyunnik

04:30 PM Bug #15565 (Resolved): System proxy credentials with certain characters may fail to authenticate

fixed, tested in
24.11-ALPHA (amd64)
built on Fri Oct 18 8:00:00 CEST 2024
FreeBSD 15.0-CURRENT Georgiy Tyutyunnik

12:32 PM Todo #15483 (Resolved): Update Unbound to 1.22.0

Latest snapshots contain unbound-1.21.1 - confirmed Georgiy Tyutyunnik

11:56 AM Bug #15789 (Not a Bug): Adding IPv4 hostnames using the DNS Forwarder catches A record requests to the host's FQDN but not AAAA record requests

That is not a bug, it's a configurable behavior. It depends on the value of the system domain local zone type.
See... Jim Pingle

03:01 AM Bug #15789 (Not a Bug): Adding IPv4 hostnames using the DNS Forwarder catches A record requests to the host's FQDN but not AAAA record requests

I have an IPv4-only VLAN that is adding hostnames to DNS using the features available under the DNS Forwarder tab.
... Nathan Ladwig

06:35 AM Bug #15518 (Resolved): Kea does not send configured TFTP server name

The issue appears to be fixed in 24.11. I successfully boot devices using legacy and EFI PXE. I marked it as resolved... Lev Prokofev

10/17/2024

07:30 PM pfSense Packages Todo #15788: add drop-internet-community support

According to official instructions, you need to add the drop-internet-community parameter to filter the bgp community yon Liu

07:29 PM pfSense Packages Todo #15788 (New): add drop-internet-community support

根据官方的指示需要添加 drop-internet-community 参数进行过滤bgp community
bgp community-list standard drop-internet-community seq ... yon Liu

07:24 PM pfSense Packages Bug #15749: BGP advertising all routes and ignoring networks statements.

There is an option no bgp network import-check. When you do not add this option parameter, it will check the local ... yon Liu

07:16 PM pfSense Packages Bug #15771: RPKI cannot be configured

Does it need to add service startup options, because in Linux system it needs to be added in daemons file ？
bgpd_o... yon Liu

07:12 PM Todo #15787 (New): Add ECC certificates support

https://letsencrypt.org/
https://letsencrypt.org/certificates/
It fully supports ECC certificates. I got an ECC c... yon Liu

12:43 PM Bug #15786 (Duplicate): Kea DHCP - Failed to initialize Kea server - Failed to convert string to address

Duplicate of #14991 Jim Pingle

12:38 PM Bug #15786 (Duplicate): Kea DHCP - Failed to initialize Kea server - Failed to convert string to address

System|Advanced|Networking:
When you switch from ISC DHCP to Kea DHCP, the configuration is migrated. Unfortunately,... Willy Tenner

06:00 AM pfSense Packages Todo #15785 (New): upgrade to frr10

FreeBSD has released the frr 10 major version update, please follow up and upgrade to the latest version.
https://... yon Liu

10/16/2024

06:38 PM Todo #15782 (Resolved): Use minified nvd3 vendor files

Marcos M

06:25 PM Todo #15782 (Feedback): Use minified nvd3 vendor files

Applied in changeset commit:94fa4e28e1c7b97469748930c6ea2a47d7cf9cdd. Marcos M

05:25 PM Todo #14190 (Duplicate): Update nvd3 (web ui dependency) to 1.8.6

Marcos M

11:38 AM pfSense Packages Feature #15498: Add speedtest-cli to packages

Although i understand the reason to reject the request, i do think there is no need to be more Catholic then the Pope... Leon Straathof

10:30 AM Feature #11302: WireGuard XMLRPC sync

We are also very interested in adding synchronisation of tunnels and peers settings, as doing it manually is not comf... Vitalii Moisieiev

10/15/2024

04:55 PM pfSense Packages Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy

Arvid Johansson wrote in #note-2:
> Any update?
Any Update? Pablo Fernando Schutz

12:56 PM pfSense Plus Bug #15783 (Rejected): NTP server broken

I cannot reproduce any problem with the NTP client on 24.03 with a default install. It is properly synchronizing with... Jim Pingle

11:23 AM pfSense Plus Bug #15783 (Rejected): NTP server broken

System Netgate 1100
Serial: NTG2309000948
Netgate Device ID: de164b1be6d099b1117e
BIOS Vendor: U-Boot
Version: 20... Terje Rosenlund

11:50 AM Feature #15784 (New): Poor contrast between enabled and disabled firewall rules

!{width: 640px;}.clipboard-202410151242-5immj.png!
h1. The Issue
As you can see in the image I have some rules ... Jon Brown

11:45 AM Bug #15708: The filterdns service won't start

I've reproduced this locally, and got this error message:
> filterdns: could not start host thread for www744.sigs... Kristof Provost

11:39 AM Bug #14977: Kea fails to restart due to race between process termination and startup

I switched back to ISC on my systems affected by this issue.
robi robi

08:20 AM Feature #8173: dhcp6c - RAW Options

Hello,
I confirm some ISP actually require to send specific raw options to be able to get an IPv6. 4 solutions to re... eeee cccc

10/14/2024

09:12 PM Todo #15782: Use minified nvd3 vendor files

Additionally - the minified files now produce a "source map error" in the browser console:... GChuf 6

08:57 PM Todo #15782: Use minified nvd3 vendor files

This issue can be closed now as v1.8.6 is already included: https://redmine.pfsense.org/issues/14190 GChuf 6

08:44 PM Todo #15782 (Resolved): Use minified nvd3 vendor files

PR: https://github.com/pfsense/pfsense/pull/4707
Creating another issue as suggested.
I wasn't sure if the PR/iss... GChuf 6

07:16 PM pfSense Plus Regression #15424: Image label file is incorrect.

Moving this ahead but since the installer image is decoupled from pfSense releases this isn't necessarily tied to a g... Jim Pingle

07:11 PM pfSense Plus Regression #15424: Image label file is incorrect.

This is still incorrect in current 24.11 images. There both memstick images show with the file named:... Steve Wheeler

03:18 PM Feature #1979 (Resolved): Allow user-defined rules to utilize built-in system aliases

Jim Pingle

03:16 PM Todo #13537: Update vendor files

It might be something to look at in the future, but it would have to be pulled in directly from an upstream source an... Jim Pingle

03:13 PM Todo #15781 (Pull Request Review): Remove deprecated HTTP/1.0 Pragma header

Jim Pingle

03:11 PM Todo #15780: Speed up MBUF Usage command in system information widget

See my comments on the PR for an alternate method since the one used isn't viable as-is. Jim Pingle

02:55 PM Bug #15778 (Feedback): Interface group members are not validated on load/save on ``interfaces_groups_edit.php``, and are printed without encoding on ``interfaces_groups.php``

Applied in changeset commit:9a843098cf3f28c27c3e615c4c788c84bd29df6f. Jim Pingle

02:43 PM Bug #15778 (Confirmed): Interface group members are not validated on load/save on ``interfaces_groups_edit.php``, and are printed without encoding on ``interfaces_groups.php``

In the future, please submit security concerns privately via the process documented at https://www.netgate.com/securi... Jim Pingle

11:51 AM Bug #12199: ipsec pre-shared keys are stored in cleartext

Hi Jim. Is there a chance to hide passwords from the Pre-shared keys page (/vpn_ipsec_keys.php)? I'd suggest to add c... Alex Kolesnik

10/13/2024

03:57 PM Feature #1979: Allow user-defined rules to utilize built-in system aliases

This looks good on the latest build.
!clipboard-202410130957-wlooi.png!
dylan mendez

10:10 AM Bug #15767: Clicking the picture widget image downloads the image with an invalid filename instead of showing it inline

I should also add that I have the "System Patches" package and applied all recommended system patches, I have no othe... Manuel Carrera

09:59 AM Bug #15767: Clicking the picture widget image downloads the image with an invalid filename instead of showing it inline

dylan mendez wrote in #note-1:
> What browser are you using? What pfSense version? I'm unable to replicate on 24.03 ... Manuel Carrera

12:54 AM Todo #15705 (Resolved): Clarify console menu option 0 description

Looks good on... Christopher Cope

10/12/2024

11:59 PM Bug #15767: Clicking the picture widget image downloads the image with an invalid filename instead of showing it inline

What browser are you using? What pfSense version? I'm unable to replicate on 24.03 Chrome and Firefox dylan mendez

09:31 PM Feature #1979: Allow user-defined rules to utilize built-in system aliases

That issue along with some others from other feedback has been fixed for the next build. Marcos M

06:22 PM Feature #1979: Allow user-defined rules to utilize built-in system aliases

Tested against:... Danilo Zrenjanin

09:14 PM Feature #15437: Use natural sorting when sorting interfaces

after enabling "Sort Alphabetically"
LAN
VLAN1
VLAN12
VLAN120
VLAN24
VlAN240
WAN
24.11-ALPHA (amd64)
bui... Alhusein Zawi

08:57 PM Bug #15729: Session cookie warnings

disks.widget.php has some additional cookie code that is causing the warning.
Since the cookies seem to be handled i... GChuf 6

02:06 PM Bug #15729 (Confirmed): Session cookie warnings

Tested on... Christopher Cope

08:35 PM Todo #13537: Update vendor files

Would you consider replacing nv.d3.js file with a minified version?
Currently, on my dashboard, this is the biggest ... GChuf 6

08:24 PM Todo #15781 (Resolved): Remove deprecated HTTP/1.0 Pragma header

PR: https://github.com/pfsense/pfsense/pull/4704
This removes deprecated "Pragma" header. "Cache control" is used ... GChuf 6

08:17 PM Todo #15780 (Pull Request Review): Speed up MBUF Usage command in system information widget

PR: https://github.com/pfsense/pfsense/pull/4703
Possibly linked to: https://redmine.pfsense.org/issues/6614
... GChuf 6

06:44 PM Todo #15779 (Resolved): Update Dynamic DNS API URL for porkbun.com

Got a email today from Porkbun regarding their URL change for API from "porkbun.com" to "api.porkbun.com". Deadline 2... Emanuel Persson

05:24 PM Bug #15708: The filterdns service won't start

Was able to recreate this with a customer. Was working fine on 23.09.1, but once they upgraded to 24.03 they were no... Kris Phillips

06:42 AM Bug #15778 (Closed): Interface group members are not validated on load/save on ``interfaces_groups_edit.php``, and are printed without encoding on ``interfaces_groups.php``

When submitting interface group members on @interfaces_groups_edit.php@ the member list is not validated before it is... zhao mouren

10/11/2024

07:06 PM Bug #15777 (Resolved): ``resizewin`` occasionally gets fed a spurious line feed over certain serial console+client combinations

This issue is for tracking purposes only so it gets an entry in the release notes. It was on the internal Redmine as ... Jim Pingle

06:51 PM pfSense Packages Bug #15773: Lightsquid stoped gererating reports after upgrade do pfSense 2.7.2

After I realized the problem and tried several recovery methods, the system started working again the next day, but i... Suporte Suporte

04:10 PM Feature #1979: Allow user-defined rules to utilize built-in system aliases

I moved the additional new system alias definition part to a new issue: #15776 Jim Pingle

03:40 PM Feature #1979: Allow user-defined rules to utilize built-in system aliases

The current system aliases such as @bogons@ can now be used in the GUI. Additional ones (such as the given examples) ... Marcos M

07:10 AM Feature #1979 (Feedback): Allow user-defined rules to utilize built-in system aliases

Applied in changeset commit:52e512c0555d9f5a91732907e524364358d3f70c. Marcos M

04:07 PM Feature #15776 (Resolved): System Aliases for various reserved networks

#1979 added a System Aliases facility users can utilize to make rules with the built-in system aliases, and it would ... Jim Pingle

03:27 PM pfSense Packages Feature #15548 (In Progress): Add packages for Zabbix 7.0 Agent and Proxy

Christian McDonald

02:31 PM pfSense Packages Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy

Can anyone give some insights on why it takes more than half a year to get a new zabbix version in PFSense?
When I ta... Maurice Detmers

12:58 PM pfSense Packages Bug #15775 (New): Freeradius + LDAP authentification conditions

Probably I missed this part in the GUI, however, it looks like it was really not implemented.
If you going to authe... Lev Prokofev

12:06 AM Bug #15772 (Confirmed): Captive Portal zones can fail to start due to ID conflict

I am able to reproduce this on... Christopher Cope

10/10/2024

09:53 PM Feature #15774 (Duplicate): Add user-accessible system aliases

Probably best to use the existing issue for this: #1979 Jim Pingle

09:46 PM Feature #15774 (Duplicate): Add user-accessible system aliases

There are a number of pf table names (aka "system aliases") reserved for system use:
https://github.com/pfsense/pfse... Marcos M

07:34 PM pfSense Packages Bug #15773 (Incomplete): Lightsquid stoped gererating reports after upgrade do pfSense 2.7.2

After upgrading pfSense to version 2.7.2, the Lightsquid package stopped generating daily reports.
The Lightsquid ve... Suporte Suporte

07:22 PM Bug #15723 (Resolved): ``unbound-checkconf`` fails with python mode enabled

patch fixes the issue
tested and reproduced on
24.08-DEVELOPMENT (amd64)
built on Fri Aug 23 8:00:00 CEST 2024
Fr... Georgiy Tyutyunnik

07:08 PM Feature #15562: Add support for OpenID

+1, we are implementing OIDC across the board and pfsense's lack of support is a notable omission. Ross Tajvar

06:50 PM pfSense Packages Bug #15715 (Resolved): Tailscale fails to start

Christian McDonald

06:01 PM pfSense Packages Bug #15715: Tailscale fails to start

reproduced on:
24.08-DEVELOPMENT (amd64)
built on Fri Aug 23 8:00:00 CEST 2024
FreeBSD 15.0-CURRENT
fixed in:
24... Georgiy Tyutyunnik

06:46 PM Bug #15518 (Feedback): Kea does not send configured TFTP server name

Christian McDonald

06:33 PM pfSense Packages Bug #15771: RPKI cannot be configured

Fix committed, new package should be available on Plus when it finishes building.
Jim Pingle

06:30 PM Bug #15552 (Feedback): NTP option "DNS Resolution" has no effect when using NTP pool hostnames

Applied in changeset commit:26a06fbad188a772f862c830d3918fb5588a2002. Jim Pingle

06:10 PM Todo #15483 (Feedback): Update Unbound to 1.22.0

Latest snapshots contain @unbound-1.21.1@ Jim Pingle

06:05 PM Bug #14977: Kea fails to restart due to race between process termination and startup

Without some way to reliably reproduce the conditions in which this happens I'm hesitant to blindly commit something ... Jim Pingle

05:59 PM Regression #15094 (Feedback): Updates fail against an authenticated upstream proxy

Has this been tested lately? The relevant commits to fix this have been in our pkg port for a couple months now.
T... Jim Pingle

05:47 PM Bug #15657 (Feedback): State table entries printed on ``diag_dump_states.php`` may contain an unexpected interface

This was merged a couple months ago Jim Pingle

05:26 PM Bug #15081: Upgrade fails due to undersized EFI filesystem

This is still an issue but I'm not sure what, if anything, we could do about it at this stage beyond warning like we ... Jim Pingle

04:51 PM Bug #15083 (Resolved): Installing to ZFS mirror does not format or populate EFI partition on additional disks

Using the latest Netgate installer, a freshly installed mirror contains the appropriate EFI partition contents on bot... Jim Pingle

04:33 PM Bug #15084 (Resolved): Upgrading an EFI system installed to ZFS mirror does not upgrade EFI loader on additional disks

Not seeing that issue from my last comment anymore.
This also appears to be OK in general. I installed an old vers... Jim Pingle

04:23 PM pfSense Packages Bug #13405: Wireguard: The webgui becomes excessively slow to respond with a large number of peers

Thanks for the fix here. This solved my issue. I only have 10 peers and it does take some considerable time to load b... Mike Moore

03:13 PM pfSense Packages Bug #13405: Wireguard: The webgui becomes excessively slow to respond with a large number of peers

I also have a 24.03 pfsense that I tested on and only added 24 peers on and experience the delay. On that test machin... Clayton Dirkschneider

03:10 PM Feature #15651 (Resolved): Kea DNS Resolver (Unbound) Integration (IPv4 and IPv6)

Christian McDonald

03:10 PM Bug #15495 (Closed): Upgrade fails on upstream bectl bug

I haven't heard any reports of this (beyond this one). Christian McDonald

03:08 PM Regression #14410 (Resolved): Behavior of ``earlyshellcmd`` changed, ``ngeth`` interfaces cannot be initiated early enough to pass assignment check

Christian McDonald

12:29 PM Bug #15772 (Resolved): Captive Portal zones can fail to start due to ID conflict

There seems to be a bug inside services_captiveportal.php which allows, under specific circumstances, the creation of... Paul Kutzer

09:14 AM Bug #15770: Limiter Limits Whole Gateway instead of Single IP

Hello Marius,
Kindly provide detailed information regarding your setup. We require clear, step-by-step instruction... Danilo Zrenjanin

10/09/2024

08:29 PM pfSense Packages Bug #15771: RPKI cannot be configured

The customer that was hitting this issue confirmed that the above patch fixed the issue for him. Christopher Cope

04:36 PM pfSense Packages Bug #15771 (Feedback): RPKI cannot be configured

There are a couple problems here.
Issue #1: The check to see if RPKI is enabled isn't right so it's not defining t... Jim Pingle

10/08/2024

11:04 PM pfSense Packages Feature #9141: FRR xmlrpc

Any updates? Mike Moore

11:03 PM pfSense Packages Bug #15771: RPKI cannot be configured

Confirmed as well.
There are a couple of modules in FRR (pfsense) that arent working
RPKI and AgentX
I think the... Mike Moore

10:37 PM pfSense Packages Bug #15771 (Resolved): RPKI cannot be configured

Customer concerned that enabling/changing RPKI is not working.
When the RPKI configuration is changed, the changes... Chris Linstruth

05:14 PM Bug #15750 (Resolved): Hostnames for ISC DHCP leases are not removed from Unbound when switching to Kea

This was solved by removing the reference to the old leases file from unbound.conf.
After switching to Kea from I... Steve Wheeler

03:26 PM Todo #14888: Exclude non-release branches from general update checks

The update check will now only process release branches. Marcos M

03:25 PM pfSense Packages Regression #14850 (Resolved): Unreadable alerts file results in PHP error

Marcos M

02:33 PM Bug #15770 (Incomplete): Limiter Limits Whole Gateway instead of Single IP

When Using an Trafic Limiter in combination with an gateway Group the limiter limits the whole gateway instead of the... Marius Hentschke

10/07/2024

07:33 PM Feature #13422 (Duplicate): Add a 'type' field to the DHCPv6 server Additional BOOTP/DHCP Options

Covered by #15321 Jim Pingle

07:16 PM Bug #15755 (Closed): Mobile IPsec sends incorrect DNS attribute IDs

Looks good on a current snapshot, the config has the right values and the client appears to be receiving and processi... Jim Pingle

06:42 PM pfSense Plus Bug #15769 (New): IPsec DNS gateway changes causes all tunnel restarts

Following issue is troubleshooted and outlined in the forum post
https://forum.netgate.com/topic/190426/frr-seeing... Mike Moore

04:00 PM Todo #15705 (Feedback): Clarify console menu option 0 description

Applied in changeset commit:898df056052d0d793d7eb894ed70ca992972b293. Liam Riley

03:37 PM pfSense Packages Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy

Any update on when Zabbix 7.0 packages will be available for 24.03 or 24.08? Andrew Almond

03:36 PM pfSense Packages Bug #15313: Zabbix server 6.4.12 requires Zabbix proxies to be version 6.4.12

Is there any update on whether Zabbix packages >=6.4.13 will be released for 24.03? Andrew Almond

03:26 PM Feature #14483: Conditionally reconfigure IPsec VTI interfaces only when necessary while applying IPsec changes

Adding a new forum post to this as to document a new behavior seen
https://forum.netgate.com/topic/190426/frr-seei... Mike Moore

01:24 AM Regression #15768 (Resolved): OpenVPN Windows Client fails to connect

Version 24.08.a.20240925.0600
1) OpenVPN server in Subnet Mode ... dylan mendez