pfSense

01/15/2025

08:02 PM Bug #15708: The filterdns service won't start

I also ran into this issue. I had to bump my threads past 4096 to get it to work properly. A message on the "Tables" ... Dark Baritone

04:09 PM pfSense Plus Bug #15993: Upgrade fails with NVMe drive installed

Ok have a good day Jim :) Jonathan Lee

04:09 PM pfSense Plus Bug #15993: Upgrade fails with NVMe drive installed

It is the everything bagel 2100-MAX, we can call it the SG-2100-ULTRA edition .. comes with heat sinks a nvme drive, ... Jonathan Lee

04:07 PM pfSense Plus Bug #15993: Upgrade fails with NVMe drive installed

That you managed to make it function partially does not indicate it is "supported". It may have appeared functional, ... Jim Pingle

04:00 PM pfSense Plus Bug #15993: Upgrade fails with NVMe drive installed

@Jim Pringle
I am using a mpcie to nvme adapter on the mpcie slot that was used for wifi. It does work perfectly how... Jonathan Lee

03:35 PM pfSense Packages Bug #15995: Unable to switch to the RELENG_2_7_2 branch

If it's a VM, it should work. Jim Pingle

03:12 PM pfSense Packages Bug #15995: Unable to switch to the RELENG_2_7_2 branch

Jim Pingle wrote in #note-1:
> You're probably checking out the tree on a Windows filesystem, and the repository is ... Maurice Detmers

03:09 PM pfSense Packages Bug #15995 (Not a Bug): Unable to switch to the RELENG_2_7_2 branch

You're probably checking out the tree on a Windows filesystem, and the repository is not compatible with that. Files ... Jim Pingle

02:36 PM pfSense Packages Bug #15995 (Not a Bug): Unable to switch to the RELENG_2_7_2 branch

Hi,
I hope I am posting this in the right spot and hopefully someone can help me with this.
I am trying to switc... Maurice Detmers

06:49 AM Bug #15988 (Resolved): PHP error when saving System Log settings

The patch has been tested and it fixes the issue. aleksei prokofiev

01/14/2025

08:17 PM Feature #14483: Conditionally reconfigure IPsec VTI interfaces only when necessary while applying IPsec changes

Devs,
Is there any hope on the horizon on getting a patch to fix? If one is available, I have no problem providing a... Mike Moore

07:53 PM pfSense Plus Bug #15993 (Rejected): Upgrade fails with NVMe drive installed

There are systems which require NVMe to function as that is their only drive, so disabling it automatically at any po... Jim Pingle

07:01 PM pfSense Plus Bug #15993 (Rejected): Upgrade fails with NVMe drive installed

Hello fellow Redmine community members, I found a bug during upgrade to 25.11 the upgrade fails with my NVMe driver. ... Jonathan Lee

07:31 PM pfSense Packages Bug #15932: HAProxy entries disappear after saving with MIM enabled

I have also experienced this issue.
I can create a frontend with 1 ACL and it's fine. If I add a second ACL then all... Andrew Almond

07:22 PM pfSense Plus Bug #15994 (Resolved): Backup configuration cache is not cleaned automatically

With the introduction of BE2.0, the configuration backup cache is now only trimmed when backups are listed (e.g. by v... Marcos M

07:06 PM Revision 85a27bcb: QNAME minimization default has changed. Fix #15925

Marcos M

04:54 PM pfSense Packages Feature #15981 (Resolved): Add a fresh Suricata 7.0.8 package version in package manager.

PRs merged/picked. Thanks! Jim Pingle

03:50 PM Bug #15925 (Pull Request Review): DNS Resolver option for Query Name Minimization cannot be disabled

Marcos M

01:16 PM pfSense Plus Regression #15992 (Rejected): PHP Shell Permission Issue for User After Upgrade from 23.03 to 23.11

That has never been intended to work, it should only work as root/admin. It may have worked in certain cases by luck,... Jim Pingle

09:07 AM pfSense Plus Regression #15992 (Rejected): PHP Shell Permission Issue for User After Upgrade from 23.03 to 23.11

Hi
Description:
After upgrading from pfSense version 23.04 to 24.11, I encountered an issue where the nagios use... Abdallah Musa

08:23 AM Bug #15982: Limiters do not change values and disappear after reboot if bandwidth set over 5 Gig

But we need bandwidth limiter higher than ~4,3G. We need for example 7.5G or 10G
So changing just the UI is not very... Marco Eberhardt

07:54 AM Bug #15990: Input validation prevents updating a limiter without changing the name

Working great, thanks! Richard Rovelstad

01/13/2025

10:06 PM Feature #15991: Add support for filter rules for IPIP traffic

PR submitted https://github.com/pfsense/pfsense/pull/4723 Eric Johnson

09:58 PM Feature #15991 (New): Add support for filter rules for IPIP traffic

Currently there is no way to create filter rules for IP-in-IP encapsulated (aka IPIP, IPEncap, protocol 4) traffic vi... Eric Johnson

09:24 PM Feature #14130: Add DynDNS Provider - IPv64.net

2 years have passed. Can you give an update here? Dennis Schröder

09:15 PM pfSense Plus Regression #15964 (Feedback): Upgrades on UFS from 23.09.1 to 24.03 or 24.11 Fails

Relevant fixes have been applied/picked. Marcos M

09:13 PM Todo #15975 (Resolved): Additional error handling for invalid certificate configuration

A typo in the patch introduced a regression - fixed with commit:6065058126c6b6fa3380df7a382f9a3a28068119. Marcos M

09:05 PM Bug #15990 (Feedback): Input validation prevents updating a limiter without changing the name

Applied in changeset commit:6bf3e080f56facab1f00e29acd24dff62d5bd707. Marcos M

08:47 PM Bug #15990 (In Progress): Input validation prevents updating a limiter without changing the name

Thank you for reporting the issue. This is due to a patch that was recently included in the System Patches package wh... Marcos M

08:09 PM Bug #15990: Input validation prevents updating a limiter without changing the name

Patch packages through today have been installed. Richard Rovelstad

08:07 PM Bug #15990 (Resolved): Input validation prevents updating a limiter without changing the name

Hello. I was working with limiters (not child queues) today and found whenever I changed a parameter and tried to sav... Richard Rovelstad

08:59 PM Revision 6bf3e080: Only check for limiter name conflicts if the name changed. Fix #15990

While here, rename the variable $queue to $subqueue for clarity. Marcos M

07:30 PM Feature #15986: status_output: increase system log file length, currently limited to 1000 entries

Yes, an increase to 2500 or 5000 would be great.
I would say 5000, unless you have any concerns with that. Thanks. Craig Coonrad

07:11 PM Feature #15986: status_output: increase system log file length, currently limited to 1000 entries

It has to use the function, otherwise if a log was recently rotated it would only get the new/nearly empty file. The ... Jim Pingle

07:03 PM pfSense Docs Todo #15881 (Closed): Update UPNP service docs

Jim Pingle

06:51 PM pfSense Plus Bug #15989 (Feedback): Renaming an alias in MIM does not update firewall and NAT rules with the new alias name

Fixed with 02a8538d86ff96c2da3321264dd9d506f3bb0370. Marcos M

06:26 PM pfSense Plus Bug #15989 (Resolved): Renaming an alias in MIM does not update firewall and NAT rules with the new alias name

Firewall and NAT rules reference the old alias name after the alias has been renamed. To reproduce:
# Enable MIM
# ... Marcos M

04:30 PM pfSense Docs Todo #15985 (Closed): Missing the word have

There were some other wording/phrasing problems in that doc as well. I went through and reworded things a bit. Should... Jim Pingle

03:55 PM Bug #15988 (Feedback): PHP error when saving System Log settings

Applied in changeset commit:48b2525bae3addc43e99444869aa19ed60b8c443. Jim Pingle

03:47 PM Bug #15988: PHP error when saving System Log settings

I pushed a fix for the PHP error on this, that other message was a leftover debug print from #15874 and I removed it. Jim Pingle

06:07 AM Bug #15988 (Confirmed): PHP error when saving System Log settings

Tested on 24.11
I can reproduce this Bug.
And it's interesting but on 25.03-BETA (built on Wed Jan 8 1:56:00 UT... Azamat Khakimyanov

05:16 AM Bug #15988 (Resolved): PHP error when saving System Log settings

Tested on
24.11-RELEASE (amd64)
built on Wed Nov 27 18:22:00 UTC 2024
FreeBSD 15.0-CURRENT
Steps to reproduce
... aleksei prokofiev

03:45 PM Revision 48b2525b: Fix PHP error in Firewall log settings. Fixes #15988

Jim Pingle

03:45 PM Revision 4fe48229: Remove debug print from issue #15874

Jim Pingle

03:37 PM Revision 4f6e55a9: Check value when setting config root

$value should always be an array when setting the configuration root. Marcos M

03:12 PM Revision 60650581: Typo: Additional error handling for invalid cert config. Fix #15975

Christian McDonald

03:09 PM Feature #15987 (Rejected): Add Wireguard to Diagnostics --> Backup & Restore --> Backup Area

WireGuard is a package, so it can't be added there directly.
For that to happen we would need to engineer some way... Jim Pingle

08:04 AM Bug #15973: Kea DHCP server crashes on 3100 (32bit ARM) every 10 days or so post 24.11 upgrade

Loh Phat wrote:
> The DHCP server dies with the following log entry:
>
> [...]
>
> And then 5 minutes or so later ... Björn Bylander

01/12/2025

07:45 PM Feature #15987 (Rejected): Add Wireguard to Diagnostics --> Backup & Restore --> Backup Area

pfSense backup/restore currently handles IPsec and Openvpn as distinct backup and restore areas.
Would be a nice fea... Craig Coonrad

07:24 PM Feature #15986 (New): status_output: increase system log file length, currently limited to 1000 entries

For troubleshooting purposes it would be nice for the system.log captured with status.php to gather more than 1000 li... Craig Coonrad

06:30 PM Bug #12552: "Pull DNS" option within OpenVPN client does not cause pfSense to use DNS servers assigned by remote OpenVPN server

Solution
under general dns server settings add the express VPN dns server (i got this from their support, must sa... gcw wil

05:16 AM pfSense Docs Todo #15985 (Closed): Missing the word have

https://docs.netgate.com/pfsense/en/latest/development/freebsd-issues.html
Missing the word *have* .... Antoine Beaubien

03:39 AM pfSense Docs Todo #15881: Update UPNP service docs

staged document accurately reflects the new options and settings presented in the UPnP IGD & PCP services menu (v25.0... Jordan G

03:34 AM Bug #15598 (Resolved): Input validation for duplicate remote gateways does not work when using the duplicate P1 button

dylan mendez

03:33 AM Bug #15598: Input validation for duplicate remote gateways does not work when using the duplicate P1 button

Issue resolved after patch.

!clipboard-202501112133-jfmrr.png!
dylan mendez

03:10 AM Bug #15925: DNS Resolver option for Query Name Minimization cannot be disabled

this behavior persists in 25.03.b.20250108.0156, GUI selection for q-name minimization has no effect when querying wi... Jordan G

02:11 AM Bug #15977 (Resolved): Incorrect color in button text within disabled rows

Tested on... Christopher Cope

01/11/2025

04:23 PM pfSense Packages Bug #10936 (Resolved): both haproxy/haproxy-devel non-existent option lb-agent-chk

It's no longer there. I tested against haproxy 0.63_9.
This is how it looked:
!clipboard-202501111721-dhbm2.p... Danilo Zrenjanin

03:50 AM pfSense Packages Bug #10936: both haproxy/haproxy-devel non-existent option lb-agent-chk

Danilo Zrenjanin wrote in #note-7:
> Tested on:
>
> [...]
>
> The check method "lb-agent-chk" is still listed... Kris Phillips

03:53 AM pfSense Packages Regression #15967 (Incomplete): pfsense duplicated WAN firewall rules

I'm unable to recreate this issue in pfBlockerNG. Changing the rule order for me properly removes and re-adds the ru... Kris Phillips

01:04 AM Feature #15984 (New): Can we have a way to start smartd on bootup?

I'm able to install smartmontools on my SG2100 but I see that smartd does not start when it boots. I can start it via... Craig Leres

12:43 AM Bug #12947: Old IPv6 addresses may continue to be used after DHCP or RA changes

The bug is still present.
I am able to reproduce this on our Netgate 6100 running 24.11 with an "AVM Fritz!Box 6850 L... Manuel Gayer

01/10/2025

10:50 PM pfSense Packages Feature #9141: FRR xmlrpc

Jim - Any hope we can get it implemented? There is a high degree of interest in making our pfsense deployments highly... Mike Moore

10:57 AM pfSense Packages Feature #9141: FRR xmlrpc

also interested on this,
is implementing this feature consists in changing which keys should be merged/copied in _x... Julien Bennet

10:38 PM pfSense Plus Bug #15983 (Confirmed): Unicode Escaped Characters in Client ID for Kea Cause No Start Condition

I can confirm and reproduce this issue. As a note the hostname already has entry verification, but it seems the clien... Christopher Cope

10:20 PM pfSense Plus Bug #15983 (Confirmed): Unicode Escaped Characters in Client ID for Kea Cause No Start Condition

If a dash is present in the Client ID field for a DHCP Reservation, this will cause Kea to fail with the following er... Kris Phillips

06:07 PM Revision 837c16fb: Fix toggleNATrule() always returning 'enabled' for a single rule

When toggleNATrule() was modified to accept a list of NAT rules, the default
case for a single 'id' in the postdata w... Reid Linnemann

02:21 PM Bug #15982: Limiters do not change values and disappear after reboot if bandwidth set over 5 Gig

Lev Prokofev wrote in #note-2:
> 'Line 34: bandwidth too large'
The bandwidth on a limiter can't be over the maxi... Jim Pingle

12:29 PM Bug #15982: Limiters do not change values and disappear after reboot if bandwidth set over 5 Gig

Update:
Can confirm the above on 24.03
Logs shows: ... Lev Prokofev

11:41 AM Bug #15982: Limiters do not change values and disappear after reboot if bandwidth set over 5 Gig

confirmed.
update: after reboot if the test limiter is applied as a pipe in the firewall rule the rule stops working... Georgiy Tyutyunnik

11:33 AM Bug #15982 (New): Limiters do not change values and disappear after reboot if bandwidth set over 5 Gig

Tested on 24.11 and 25.03BETA
Creating a limiter with a bandwidth of 4250
!clipboard-202501101424-otblj.png!
... Lev Prokofev

12:57 AM pfSense Packages Feature #12860: add mmc-utils package to all images

Has there been any progress on including @mmc-utils@ in the base image or as a package?
I've experienced several f... Andrew Almond

01/09/2025

11:51 PM Bug #12938 (Feedback): Incorrect warning from ``radvd`` about ``AdvRDNSSLifetime`` value

radvd 2.20 is now in snapshots which should resolve this warning even with increased logging. Marcos M

11:50 PM Feature #15808 (Feedback): PREF64 support in Router Advertisements

Applied in changeset commit:5d3bf10347ebee416770437cf5163b5e143f8511. Marcos M

11:47 PM pfSense Plus Regression #15979 (Resolved): Saving DHCPv6 Server settings results in a PHP error

Fixed with b46064eda3b89d99b3f623924de313d5b8ea1bdb. Marcos M

02:49 PM pfSense Plus Regression #15979: Saving DHCPv6 Server settings results in a PHP error

It's in Plus only. Marcos M

08:54 AM pfSense Plus Regression #15979: Saving DHCPv6 Server settings results in a PHP error

I could not replicate the issue.
I configured a static IPv6 address on the LAN and encountered no errors after se... Danilo Zrenjanin

12:54 AM pfSense Plus Regression #15979 (Resolved): Saving DHCPv6 Server settings results in a PHP error

With Kea enabled, saving the DHCPv6 Server settings results in a PHP error.... Marcos M

11:29 PM Revision 5d3bf103: PREF64 support. Implement #15808

Marcos M

11:29 PM Revision 25a17c38: Allow up to 4 RDNSS addresses

Marcos M

10:36 PM pfSense Packages Feature #15981: Add a fresh Suricata 7.0.8 package version in package manager.

I have submitted Pull Requests against the pfSense packages repo to update the Suricata binary to the latest 7.0.8 ve... Bill Meeks

11:46 AM pfSense Packages Feature #15981: Add a fresh Suricata 7.0.8 package version in package manager.

Lev Prokofev wrote:
> The fresh port is available
>
> https://www.freshports.org/security/suricata
Vulnerabili... Tapio Ryhänen

10:32 AM pfSense Packages Feature #15981 (Resolved): Add a fresh Suricata 7.0.8 package version in package manager.

The fresh port is available
https://www.freshports.org/security/suricata Lev Prokofev

09:14 PM Revision 9b5d5a6c: Remove zabbix 6.4 as it is now EoL

Brad Davis

02:43 PM pfSense Packages Feature #14729: OpenVPN Client Export - Support PLAP on Windows

I have this setup manually however get the error "waiting for management interface to come up" - Craig Messer

09:22 AM Bug #15980 (New): Certain schedulers seem not support weight parameter in child queues

Tested on ... Lev Prokofev

01/08/2025

10:30 PM Todo #15975 (Feedback): Additional error handling for invalid certificate configuration

Applied in changeset commit:0eb37ce10db6f12a6c2269347c1c5f5e98ad9f20. Marcos M

10:23 PM Revision 0eb37ce1: Additional error handling for invalid cert config. Fix #15975

Marcos M

07:11 PM pfSense Packages Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy

The GUI packages were picked back there but failed to build because the actual underlying Zabbix 7 ports are not in t... Jim Pingle

07:01 PM pfSense Packages Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy

Maurice Detmers wrote in #note-43:
> To be clear and if I am correct (please correct me if I am wrong), the Zabbix p... Gio M

11:55 AM Bug #15911 (Resolved): PHP error on save with very long configuration change descriptions

I was able to reproduce the issue on 24.11
Tested against the latest dev build.
The issue is fixed. Danilo Zrenjanin

08:34 AM Bug #15977: Incorrect color in button text within disabled rows

I tried to apply the patch to 24.11 and the latest dev build.
The patch didn't apply correctly and the issue pers... Danilo Zrenjanin

05:20 AM Bug #15949: Hardware offload settings not applying to interface used for PPPoE WAN on boot.

I would but I dont have a plus license, so unable to do that. I will check it again whenever 2.8.0 is released. Chris Collins

01/07/2025

11:06 PM pfSense Plus Bug #15978 (Not a Bug): Unable to get SMART data from 4200 onboard storage

That is expected; unfortunately the embedded drive in the Netgate 4200 does not support S.M.A.R.T. nor health checks ... Marcos M

10:35 PM pfSense Plus Bug #15978 (Not a Bug): Unable to get SMART data from 4200 onboard storage

The SMART status for onboard storage on the Netgate 4200 cannot be queried using the builtin SMART status viewer or t... Andrew Almond

10:05 PM Bug #15977 (Feedback): Incorrect color in button text within disabled rows

Applied in changeset commit:9c6818d93aba725673398e46dc26c476f0cec1a1. Marcos M

10:00 PM Bug #15977 (In Progress): Incorrect color in button text within disabled rows

Before / after:
!clipboard-202501071600-xxs2z.png!
Marcos M

09:56 PM Bug #15977 (Resolved): Incorrect color in button text within disabled rows

Buttons may be included within table rows. For example, the ACME package shows the @Issue/Renew@ button inside the ro... Marcos M

09:59 PM Revision 9c6818d9: Don't override the button text color in disabled rows. Fix #15977

Marcos M

08:40 PM Bug #15956: Kea DHCP static mappings requires lease expiry before taking effect

i just ran into the same problem, under different circumstances, i change mac addresses on a static assignment using ... James Starowitz

06:57 PM pfSense Packages Bug #15976 (Resolved): Fix ntopng listen options

If both IPv4 and IPv6 server listen are enabled, the IPv4 address will not work. While the current version of ntopng ... Denny Page

05:13 PM pfSense Plus Bug #15968 (Closed): Updating to development versions with pfBlockerNG-devel installed causes 50x error on GUI (Dashboard)

This is a symptom of a build version issue in recent snapshots which has been resolved. Marcos M

05:07 PM Feature #15808 (Waiting on Merge): PREF64 support in Router Advertisements

https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1182 Marcos M

04:49 PM Bug #15949 (Feedback): Hardware offload settings not applying to interface used for PPPoE WAN on boot.

This is likely already fixed. A useful test to confirm would be to reproduce on 2.7.2, upgrade to Plus 24.11, and re-... Marcos M

04:46 PM pfSense Plus Regression #15964 (In Progress): Upgrades on UFS from 23.09.1 to 24.03 or 24.11 Fails

Marcos M

04:27 PM Regression #15961 (Resolved): Warning message in logs when changing firewall rules after setting Require Firewall Interface

Jim Pingle

04:23 PM Todo #15975 (Resolved): Additional error handling for invalid certificate configuration

* TypeError: Cannot access offset of type string on string in /etc/inc/certs.inc:110 https://forum.netgate.com/topic/... Marcos M

02:22 PM Revision 03dbbe3f: Bump up the year in the Copyright notice of README.md.

Luiz Souza

02:11 PM Revision 37d60e23: Bump up the year in the Copyright notice.

Luiz Souza

02:07 PM pfSense Docs Correction #15974 (Closed): AWS High Availability help link.

Added and tested, works fine here from each of the tabs in the package.
https://gitlab.netgate.com/docs/pfSense-do... Jim Pingle

01/06/2025

10:33 PM pfSense Docs Correction #15974 (Closed): AWS High Availability help link.

link https://docs.netgate.com/pfsense/en/latest/solutions/aws-vpn-appliance/ha.html to *Package> AWS High Availabil... Alhusein Zawi

03:04 PM pfSense Docs Todo #15972 (Rejected): Feedback on Troubleshooting — Troubleshooting Website Access

That is not a common problem on its own, not enough to warrant calling that much attention to it at that high a level... Jim Pingle

02:34 PM Feature #15808: PREF64 support in Router Advertisements

radvd 2.20 has been released with PREF64 support https://github.com/radvd-project/radvd/releases... Bart Schapendonk

01:24 PM pfSense Packages Bug #15965 (Not a Bug): pfSense UI fails to execute Surricata IPS/IDS cmds

Jim Pingle

09:46 AM pfSense Packages Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy

To be clear and if I am correct (please correct me if I am wrong), the Zabbix packages for PFSense are (primarily) co... Maurice Detmers

04:58 AM Bug #15973 (Confirmed): Kea DHCP server crashes on 3100 (32bit ARM) every 10 days or so post 24.11 upgrade

The DHCP server dies with the following log entry:... Loh Phat

01:51 AM pfSense Plus Regression #15964 (Confirmed): Upgrades on UFS from 23.09.1 to 24.03 or 24.11 Fails

Steve Wheeler

01/05/2025

03:04 AM Todo #15953 (Resolved): Link to release information on the system update page

I can also confirm this patch shows links to patch notes for all releases. Marking as Resolved. Kris Phillips

02:40 AM pfSense Plus Bug #15968: Updating to development versions with pfBlockerNG-devel installed causes 50x error on GUI (Dashboard)

Maybe it's the HA component but which I didn't try yet but with just one instance and default settings except for hav... Chris W

12:15 AM pfSense Plus Bug #15968: Updating to development versions with pfBlockerNG-devel installed causes 50x error on GUI (Dashboard)

Installed KVM VM completely from scratch with factory default settings and 25.03.a.20250103.1624 ONLY installed pfBlo... dylan mendez

01/04/2025

11:29 PM pfSense Plus Bug #15968: Updating to development versions with pfBlockerNG-devel installed causes 50x error on GUI (Dashboard)

Tested on standalone pfSense with 0 custom settings, was able to reproduce. Just installing pfBlockerNG-devel causes ... dylan mendez

11:26 PM pfSense Plus Bug #15968: Updating to development versions with pfBlockerNG-devel installed causes 50x error on GUI (Dashboard)

It seems like just by installing pfBlockerNG-devel causes the crash report
!clipboard-202501041726-t7gfw.png!
!clip... dylan mendez

07:14 PM pfSense Plus Bug #15968: Updating to development versions with pfBlockerNG-devel installed causes 50x error on GUI (Dashboard)

I tested the update from version 24.11 with pfBlocker-devel running to version 25.03.a.20250103.1624 and was unable t... Danilo Zrenjanin

10:55 PM Regression #15961: Warning message in logs when changing firewall rules after setting Require Firewall Interface

Success here as well. Thank you. Jay Sols

08:22 PM Regression #15961: Warning message in logs when changing firewall rules after setting Require Firewall Interface

Applied patch on... Christopher Cope

08:26 PM pfSense Docs Todo #15972 (Rejected): Feedback on Troubleshooting — Troubleshooting Website Access

*Page:* https://docs.netgate.com/pfsense/en/latest/troubleshooting/website-access-issues.html
*Feedback:*
Greet... Carmen Jessica Myer

06:11 PM Todo #15953: Link to release information on the system update page

with the above patch applied to 24.11, navigating to the system>update>system update page now presents a link to http... Jordan G

06:04 PM Todo #15969: Improve the system load impact from Dashboard widgets

After applying these patches to a 4100 on 24.11 the dashboard indicated cpu usage dropped around 30% when just leavin... Jordan G

06:01 PM pfSense Packages Feature #15971 (New): Add CautiousConnect IPv6 feed

Add CautiousConnect IPv6 blocker feed:
[[https://sixint.io/products/cc_docs/about.html]]
Github PR here:
[[h... Robert Beverly

02:13 PM pfSense Packages Bug #15965: pfSense UI fails to execute Surricata IPS/IDS cmds

This sounds very much like a situation where the OP had a duplicate Suricata instance running on the interface. I cal... Bill Meeks

01/03/2025

10:35 PM Bug #15911: PHP error on save with very long configuration change descriptions

Applied in changeset pfsense:commit:46238320e89caa44bbb525849ab170bab6937619. Marcos M

10:30 PM Bug #15911 (Feedback): PHP error on save with very long configuration change descriptions

The revision description was not meant to be included in the translation. Marcos M

10:29 PM Revision 46238320: Don't translate the change description. Fix #15911

Revert to the previous behavior of not translating change descriptions. Marcos M

10:16 PM Bug #15970 (Duplicate): IPSEC phase1 deletion causes incorrect phase2 deletions

Marcos M

10:12 PM Bug #15970 (Duplicate): IPSEC phase1 deletion causes incorrect phase2 deletions

I recently deleted an IPSEC phase1 entry named "marty", which the configuration file says was ikeid 3. Then I receive... Drew Stemen

10:07 PM Todo #15969 (Feedback): Improve the system load impact from Dashboard widgets

Marcos M

09:49 PM Todo #15969: Improve the system load impact from Dashboard widgets

Adjust the refresh intervals to be more reasonable for each widget:
https://github.com/pfsense/pfsense/commit/7de19c3... Marcos M

09:49 PM Todo #15969 (In Progress): Improve the system load impact from Dashboard widgets

Marcos M

09:42 PM Todo #15969 (Resolved): Improve the system load impact from Dashboard widgets

The widget refresh behavior changed in 24.11 which can result in an increase in system load; see: https://redmine.pfs... Marcos M

09:49 PM Revision 648eb64f: Skip loading widgets that are not on the dashboard

Part of https://redmine.pfsense.org/issues/15969 Marcos M

07:50 PM Regression #15961 (Feedback): Warning message in logs when changing firewall rules after setting Require Firewall Interface

Applied in changeset commit:714ecd70d2db2fc45273cbf44e9ea6a6008e828b. Marcos M

07:34 PM Regression #15961 (In Progress): Warning message in logs when changing firewall rules after setting Require Firewall Interface

Marcos M

07:36 PM Revision 714ecd70: Don't try getting interface config without an interface. Fix #15961

Marcos M

06:56 PM pfSense Packages Bug #15944 (Closed): ACME Script Places _acme-challenge TXT Records in the Wrong Zone

Jim Pingle

06:54 PM pfSense Packages Bug #15944: ACME Script Places _acme-challenge TXT Records in the Wrong Zone

It's working again and as expected. I saw a hint about the zone IDs in a reddid thread: https://www.reddit.com/r/PFSE... Manuel M.

04:59 PM pfSense Plus Bug #15968: Updating to development versions with pfBlockerNG-devel installed causes 50x error on GUI (Dashboard)

I'm running HA, also. dylan mendez

04:58 PM pfSense Plus Bug #15968 (Closed): Updating to development versions with pfBlockerNG-devel installed causes 50x error on GUI (Dashboard)

pfBlockerNG-devel-3.2.1_20
pfSense 25.03.a.20241231.1206
This has been happening consistently on the last two upd... dylan mendez

04:50 PM Todo #15953 (Feedback): Link to release information on the system update page

Applied in changeset commit:5780d8f41632725f55ba456a36f848609fa3512f. Marcos M

04:43 PM Todo #15953 (In Progress): Link to release information on the system update page

Marcos M

04:40 PM Revision 5780d8f4: Link to release info on the update page. Implement #15953

Marcos M

04:40 PM Bug #15598 (Feedback): Input validation for duplicate remote gateways does not work when using the duplicate P1 button

Applied in changeset commit:51eae36f722f003fdaddb4db7e77b239cab2cd3d. Marcos M

04:34 PM Bug #15598 (In Progress): Input validation for duplicate remote gateways does not work when using the duplicate P1 button

Marcos M

04:34 PM Revision 51eae36f: Use posted config when checking for duplicates. Fix #15598

The duplicate check for remote IPsec P1 entries should be done against
the posted config instead of the saved config. Marcos M

04:12 PM pfSense Packages Regression #15967 (Incomplete): pfsense duplicated WAN firewall rules

in order to replicate this behaiveur.
1- Passing floating rules in pfBlockerNG from Enable to disable (check box in ... Michel Feria

03:39 PM Bug #15966: Kea DHCP - Changing Deny Unknown Clients from Allow Known to Unknown Requires Reboot

The issue is we do not have enough information to act on anything stated here. I'm not saying it didn't happen, or th... Jim Pingle

03:22 PM Bug #15966: Kea DHCP - Changing Deny Unknown Clients from Allow Known to Unknown Requires Reboot

Jim Pingle wrote in #note-5:
> It's not a bug _with this setting_ as stated, and there isn't enough information here... Steven Cedrone

02:02 PM Bug #15966: Kea DHCP - Changing Deny Unknown Clients from Allow Known to Unknown Requires Reboot

It's not a bug _with this setting_ as stated, and there isn't enough information here to identify what that actual un... Jim Pingle

01:32 PM Bug #15966: Kea DHCP - Changing Deny Unknown Clients from Allow Known to Unknown Requires Reboot

Jim Pingle wrote in #note-3:
> Sounds more like something is keeping your daemon from reloading with the new setting... Steven Cedrone

01:25 PM Bug #15966 (Incomplete): Kea DHCP - Changing Deny Unknown Clients from Allow Known to Unknown Requires Reboot

Sounds more like something is keeping your daemon from reloading with the new settings, not a bug specific to that pa... Jim Pingle

01:19 PM Bug #15966: Kea DHCP - Changing Deny Unknown Clients from Allow Known to Unknown Requires Reboot

Lev Prokofev wrote in #note-1:
> Not able to replicate, tested on
>
> [...]
>
> 1)Set Deny Unknown Clients to "Allo... Steven Cedrone

01:18 PM Bug #15966: Kea DHCP - Changing Deny Unknown Clients from Allow Known to Unknown Requires Reboot

Not able to replicate, tested on... Lev Prokofev

12:07 PM Bug #15966 (Incomplete): Kea DHCP - Changing Deny Unknown Clients from Allow Known to Unknown Requires Reboot

Changed DHCP "Deny Unknown Clients" from " Allow Known..." to "Allow All" caused the service to stop answering reques... Steven Cedrone

01:27 PM pfSense Packages Bug #15965 (Incomplete): pfSense UI fails to execute Surricata IPS/IDS cmds

Please post on the forum for assistance with troubleshooting. Jim Pingle

05:29 AM pfSense Packages Bug #15965 (Not a Bug): pfSense UI fails to execute Surricata IPS/IDS cmds

Suricata was installed successfully but when we tried to Disable/Enable Suricata with Rule configuration changes - it... Anuj Saxena

08:19 AM pfSense Packages Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy

Gio M wrote in #note-41:
> Also looking to see this on CE RELENG_2_7_2.
>
> I see here it was added, then remove... Arvid Johansson

07:54 AM pfSense Packages Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy

Also looking to see this on CE RELENG_2_7_2.
I see here it was added, then removed https://redmine.pfsense.org/pr... Gio M

12:40 AM pfSense Plus Regression #15964 (Closed): Upgrades on UFS from 23.09.1 to 24.03 or 24.11 Fails

Upgrading either from Serial/SSH console or the webConfigurator while running on UFS are failing from 23.09.1 with a ... Kris Phillips

01/02/2025

10:35 PM Feature #15963 (New): DynDNS provider SelfHost does support IPv6 updates

This patch adds DynDNS IPv6 update support for provider SelfHost.
Patch can also be found here
https://github.com... Jan-Jonas Sämann

09:53 PM pfSense Packages Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy

when will this be available on Community Edition ? steve pretlove

06:28 PM Bug #15962 (Not a Bug): Block bogon networks issue

The blocks you are seeing are unrelated, out of state packets from killed or closed connections.
See https://docs... Jim Pingle

06:11 PM Bug #15962 (Not a Bug): Block bogon networks issue

running pfsense 2.7.2
When checking on WAN to block bogon networks and applying, it seems to start blocking LAN pa... John Beaudoin

05:42 PM pfSense Packages Bug #15917 (Rejected): In OpenVPN export package, the option Automagic Multi-WAN IPs (port forward targets) does not working as expected

I can't reproduce this here. The exported configuration correctly ends up with two @remote@ lines, one for each WAN.
... Jim Pingle

04:53 PM Regression #15961 (Resolved): Warning message in logs when changing firewall rules after setting Require Firewall Interface

When Require Firewall Interface is set in General setup the following error is logged when opening the firewall rules... Steve Wheeler

03:48 PM pfSense Packages Feature #15960 (New): NTOP Port Configuration in WebUI feature request

Environment:
OS name: pfSense+
OS version: 24.11-RELEASE (FreeBSD 15.0-CURRENT)
Architecture: amd64
ntopng vers... Benjamin Coussement

03:28 PM pfSense Packages Bug #15957 (Rejected): NTOPNG generates duplicate variable in CONF file when using advanced configuration lines on pfsense+

That is expected. There is no feature in the package that would detect and skip duplicate configuration lines like th... Jim Pingle

03:23 PM Bug #15956 (Rejected): Kea DHCP static mappings requires lease expiry before taking effect

I can't reproduce this here. I tested this extensively before the last release. As soon as I enter a static mapping a... Jim Pingle

02:45 PM Feature #15952 (Needs Patch): User Auth RADIUS Client Secure Protocols

We are limited by what is supported in the underlying upstream PHP RADIUS libraries, which lack such support. If an a... Jim Pingle

02:38 PM Bug #15907: PHP error in Captive Portal with undefined zone interface list

Gertjan KROEB wrote in #note-6:
> See also here : https://forum.netgate.com/topic/195520/issues-after-update-from-24... Jim Pingle

02:38 PM Bug #15874 (Resolved): Users with Deny Config Write privilege can trigger logging operations

services no longer hang after being started/stopped by a user with no config write privilegies
tested on:
25.03-DEV... Georgiy Tyutyunnik

02:16 PM pfSense Plus Bug #15948: GUI times out when attempting to view large Configuration History

The config history on Plus also looks into ZFS BE entries, so the more boot environments you have, the longer it will... Jim Pingle

09:20 AM pfSense Plus Bug #15959 (Confirmed): MIM GUI is unable to write IPv6 aliases

I can confirm this behavior.
Tested against the latest dev build. Danilo Zrenjanin

12:53 AM pfSense Plus Bug #15959 (Resolved): MIM GUI is unable to write IPv6 aliases

When creating an Alias (either Host or Network) using the new Multi-Instance-Management (MIM) interface, it is imposs... Jacques Bourdeau

04:31 AM pfSense Plus Bug #15740 (Not a Bug): NAT uses unknown IP address

dylan mendez

01/01/2025

08:38 PM Bug #15015 (Not a Bug): Static routes not working

Setting a gateway to an assigned interface changes the route-to/reply-to behavior for traffic passing the interface. ... Marcos M

07:17 PM pfSense Plus Feature #15958 (New): Need to be able to disable referrals in pam_ldap.conf

We discovered that when one of our offices was offline we could not ssh to a firewall that used nss_ldap authenticati... Orion Poplawski

01:38 PM Bug #15332 (Resolved): Kea fails to start if DHCP pool configuration contains default lease time or max lease time

Georgiy Tyutyunnik

01:38 PM Bug #15332: Kea fails to start if DHCP pool configuration contains default lease time or max lease time

reproduced the behavior on switch between ISC with pool with default-lease-time or max-lease-time to KEA
can't repro... Georgiy Tyutyunnik

12/31/2024

06:35 PM Bug #15956: Kea DHCP static mappings requires lease expiry before taking effect

Log snippet... Kevin Thorne

04:16 PM Bug #15956 (Rejected): Kea DHCP static mappings requires lease expiry before taking effect

See original issue here: https://www.reddit.com/r/PFSENSE/comments/1hqaf28/bug_report_kea_dhcp_static_mappings_ignore... Kevin Thorne

04:45 PM pfSense Packages Bug #15957 (Rejected): NTOPNG generates duplicate variable in CONF file when using advanced configuration lines on pfsense+

Environment:
OS name: pfSense+
OS version: 24.11-RELEASE (FreeBSD 15.0-CURRENT)
Architecture: amd64
ntopng vers... Benjamin Coussement

04:42 PM pfSense Plus Bug #15955 (Not a Bug): L2TP -> IPsec Routing Issue

Marcos M

04:26 PM pfSense Plus Bug #15955: L2TP -> IPsec Routing Issue

I think this is actually user error on my part using an insufficiently configured IPsec tunnel configuration; sorry f... Wyatt Childers

02:33 PM pfSense Plus Bug #15955 (Not a Bug): L2TP -> IPsec Routing Issue

When processing routes from the L2TP gateway IP, IPsec introduced routes are not considered.
e.g. with:
- the L... Wyatt Childers

04:28 PM Bug #15954 (Duplicate): L2TP Enable GUI Resets

Marcos M

02:27 PM Bug #15954 (Duplicate): L2TP Enable GUI Resets

When enabling the L2TP server in the VPN -> L2TP -> Configuration section after pressing save, navigating back to the... Wyatt Childers

12/30/2024

03:44 PM pfSense Plus Bug #15262: Captive Portal Has High CPU Interrupts With Large Number of Users

Kris Phillips wrote in #note-4: [[
> Marking this as confirmed, as we have multiple instances of people reporting iss... Muhammad Waseem Ul Haq

12/29/2024

11:15 PM Bug #13687 (Resolved): Cannot add limiters named ``new``

Marcos M

12/28/2024

11:52 PM pfSense Plus Bug #15303 (Confirmed): dpinger service does not always switch from Pending to Online

Moving this to confirmed, as several people have replied with the same issue. Kris Phillips

11:05 PM pfSense Plus Bug #15262 (Confirmed): Captive Portal Has High CPU Interrupts With Large Number of Users

Marking this as confirmed, as we have multiple instances of people reporting issues with high CPU usage with a high n... Kris Phillips

11:00 PM Bug #15914 (Resolved): PHP error when a queue is added with the same name as a limiter

Jordan G wrote in #note-9:
> with patch applied, attempting to create a child queue with the same (name) as the pare... Kris Phillips

04:41 PM Bug #15914: PHP error when a queue is added with the same name as a limiter

with patch applied, attempting to create a child queue with the same (name) as the parent produces an error stating t... Jordan G

10:59 PM Bug #13687: Cannot add limiters named ``new``

Tested this on 25.03-DEVELOPMENT builds from today and I was able to enable both a limiter with the name "new" and "n... Kris Phillips

04:57 PM Bug #13687: Cannot add limiters named ``new``

with above patch applied, it seems to correct the issue with the green '+ New Limiter' opening a new queue page inste... Jordan G

05:22 PM Todo #15865 (Resolved): Make the UPnP IGD & PCP STUN port optional

Tested on... Christopher Cope

05:19 PM Todo #15864 (Resolved): Update UPnP IGD & PCP GUI text

Tested on... Christopher Cope

02:34 PM Bug #15949: Hardware offload settings not applying to interface used for PPPoE WAN on boot.

I couldn't reproduce this on 24.11 pfSense Plus. Even the interface with PPPoE correctly applies/removes TSO and LRO ... Danilo Zrenjanin

12/27/2024

08:36 PM pfSense Packages Bug #15917 (Confirmed): In OpenVPN export package, the option Automagic Multi-WAN IPs (port forward targets) does not working as expected

I can duplicate that behavior.
Tested against 24.11
Steps to reproduce.
# Define the OpenVPN server on... Danilo Zrenjanin

12/26/2024

05:07 PM Todo #15953 (Resolved): Link to release information on the system update page

A link to the Release Notes for things like breaking changes, new features, and more would be helpful on the System -... Kris Phillips

02:54 PM Bug #15949: Hardware offload settings not applying to interface used for PPPoE WAN on boot.

I can confirm running the commend in /etc/rc.local works properly which suggests if this is done later in the boot pr... Chris Collins

12:14 PM Feature #15934: Kea Lease Reclamation and Affinity Options (IPv4 and IPv6)

Lease Affinity provides a way to have IP/MAC association persist beyond expiry but it does not survive a reboot.
ht... Dale Harron

12/24/2024

04:18 PM Feature #15952 (Needs Patch): User Auth RADIUS Client Secure Protocols

In response to Blast-RADIUS (CVE-2024-3596), we need more secure options for User Authentication via RADIUS. Ideally,... Matthew Ross

12/23/2024

11:45 PM pfSense Plus Bug #15948: GUI times out when attempting to view large Configuration History

v 24.11: I have been receiving the same issue too. Unable to get to Config history, just get crash reporter. I have... Jeff Kuehl

05:45 PM Bug #14648 (Feedback): Values obtained from ``sysctl`` are sometimes unexpectedly empty, leading to PHP and other math errors

Added some additional logging.
It should be possible to see a log entry when the error occurs.
Please let us kn... Luiz Souza

05:39 PM Revision 302d1e99: Improve the logging on get_sysctl().

Also take into account the sysctl(8) return code when checking for errors.
This is not yet a fix, but the log output... Luiz Souza

10:48 AM Bug #15907: PHP error in Captive Portal with undefined zone interface list

See also here : https://forum.netgate.com/topic/195520/issues-after-update-from-24-03-to-24-11/14
and here : https:/... Gertjan KROEB

10:15 AM pfSense Plus Regression #15928 (Resolved): OpenVPN DCO clients fail to reconect

fixed in the latest dev:
25.03.a.20241223.0600 Georgiy Tyutyunnik

12/22/2024

05:10 PM Bug #15318 (Resolved): Users with Deny Config Write privilege can trigger some QinQ interface operations

Jim Pingle

04:05 PM pfSense Plus Bug #15740: NAT uses unknown IP address

Based on this:
"There was a recent IP address change on the PPPoE interface to 78.131.44.xx, but the state was again... dylan mendez

03:53 PM Bug #15912 (Resolved): Errors on the console when starting/stopping services

Georgiy Tyutyunnik

03:52 PM Bug #15912: Errors on the console when starting/stopping services

reproduced, is fixed in the latest dev
tested on:
25.03-DEVELOPMENT (amd64)
built on Fri Dec 20 7:00:00 CET 2024
... Georgiy Tyutyunnik

03:16 PM pfSense Plus Bug #15945 (Incomplete): When specifying an exit gateway, the ipv4 route is empty.

Please provide more information, it's not clear what the issue is.
Policy routes will not show on the firewall's r... dylan mendez

03:10 PM Bug #15598: Input validation for duplicate remote gateways does not work when using the duplicate P1 button

This issue is still present on latest 25.03 development versions. dylan mendez

12:06 PM Bug #15949 (Feedback): Hardware offload settings not applying to interface used for PPPoE WAN on boot.

Running 2.7.2, dont know how long the problem has existed as I dont reboot very often.
After a fresh boot of the f... Chris Collins

02:47 AM Bug #15896 (Incomplete): Dpinger state reset

Marking as Incomplete, as there isn't enough information here. What does "still" mean, for example? Is there an exi... Kris Phillips

02:01 AM pfSense Packages Bug #15932 (Incomplete): HAProxy entries disappear after saving with MIM enabled

Tested this on 24.11 with the latest HAProxy. I'm not able to reproduce this. I have three ACLs with two different ... Kris Phillips

01:50 AM pfSense Plus Bug #15948 (Confirmed): GUI times out when attempting to view large Configuration History

Tested on both 24.11 and 25.03-DEVELOPMENT. Unable to recreate this problem. However, when loading on my box with s... Kris Phillips

12:53 AM pfSense Packages Bug #15933 (Closed): pfBlockerNG crashes after updating to latest version on 12/16/2024

There was an issue here previously that's since been resolved in the package. It's also possible that the update bran... Marcos M

12:42 AM Bug #13687 (Feedback): Cannot add limiters named ``new``

Fixed with commit:2b324392cddc24906f1d4dc203089de8d6065439. Marcos M

12:39 AM Bug #13687 (In Progress): Cannot add limiters named ``new``

Marcos M

12:41 AM Bug #15914 (Feedback): PHP error when a queue is added with the same name as a limiter

Fixed with commit:2b324392cddc24906f1d4dc203089de8d6065439. Marcos M

12:40 AM Bug #15914 (In Progress): PHP error when a queue is added with the same name as a limiter

Marcos M

12:38 AM Revision 2b324392: Fix limiter input validation

- Fix adding new limiter pipes, followup Fix #13158
- Handle limiters named "new". Fix #13687
- Correctly detect limi... Marcos M

12:34 AM pfSense Packages Feature #14423: haproxy 2.7 QUIC support (+ maybe LUA 5.4?)

Hello,
Time flies and we have now OpenSSL 3.4 which will be supported till 22nd October 2026. That date is past Open... Pawel Piaskowy

12/21/2024

11:47 PM pfSense Plus Bug #15948 (Confirmed): GUI times out when attempting to view large Configuration History

Hi,
Whenever I click Diagnostic / Backup & Restore / tab Configuration History I am getting "unanswering browser" ... Pawel Piaskowy

07:51 PM pfSense Packages Bug #15933: pfBlockerNG crashes after updating to latest version on 12/16/2024

No problem. I went back and looked the logs. The error started to occur after upgrading pfBlockerNG. Here is the l... Shawn Masters

07:28 PM pfSense Packages Bug #15933: pfBlockerNG crashes after updating to latest version on 12/16/2024

Shawn Masters wrote in #note-2:
> I was on the 24.03 stable version. Since then I have upgraded to 24.11 and the pr... Christopher Cope

07:09 PM pfSense Packages Bug #15933: pfBlockerNG crashes after updating to latest version on 12/16/2024

I was on the 24.03 stable version. Since then I have upgraded to 24.11 and the problem does not exist with that conf... Shawn Masters

05:49 PM pfSense Packages Bug #15933: pfBlockerNG crashes after updating to latest version on 12/16/2024

I am not seeing this on 24.11 and the latest version of pfBlockerNG stable. Can you confirm if you are using the stab... Christopher Cope

07:40 PM Bug #15930: Mobile IPsec clients can't connect after gateway failover

I conducted another test and obtained identical results.
The logs below indicate that client1 (192.168.33.12), w... Danilo Zrenjanin

05:02 PM Feature #15946 (New): Alias list reordering

If an Alias list already has over 50 lines and a new line is added, it appears at the bottom of the list. This makes ... TCI User

03:55 PM pfSense Plus Feature #15941: /etc/rc.dumpon

We have also tested with swap0 and swapUSB labels and only adding swapUSB partition label to the fstab, doing so resu... Jonathan Lee

01:12 PM pfSense Plus Bug #15945 (Incomplete): When specifying an exit gateway, the ipv4 route is empty.

I have installed pfsense and used WG and OPENVPN. Of course, when I set up a firewall or static routing, for exampl... yon Liu

12:01 PM pfSense Packages Bug #15944 (Closed): ACME Script Places _acme-challenge TXT Records in the Wrong Zone

Since the latest update to pfSense 24.11 and ACME 0.9_1, it seems there is an issue with the challenge response. When... Manuel M.

09:53 AM pfSense Plus Regression #15928 (Ready To Test): OpenVPN DCO clients fail to reconect

That fix has been merged in, so this can be tested on the next build. Kristof Provost

02:38 AM Bug #15914 (Confirmed): PHP error when a queue is added with the same name as a limiter

Jordan G

12/20/2024

10:53 PM Feature #15943 (New): Host overrides for DNS resolver and IPV6

Currently there is no way to automatically apply a host override in the DNS resolver for IPV6 that has the dynamicall... Juan Abonia

10:23 PM Bug #15907 (Resolved): PHP error in Captive Portal with undefined zone interface list

Marcos M

10:23 PM Bug #15926 (Resolved): Captive Portal does not function with MAC filtering disabled

Marcos M

08:42 PM Revision b8b8428d: Ensure consistent results between the DDNS page and widget

Use the same IPv6 DDNS logic in the DDNS widget. Marcos M

08:34 PM Revision 70ee40f9: Remove redundant calls in get_request_source_address()

Marcos M

08:34 PM Revision a665634d: Remove redundant calls in get_dpinger_status()

Don't call running_dpinger_processes() and get_gateways() in
get_dpinger_status() since it's already done in the call... Marcos M

08:34 PM Revision 7de19c38: Bump default widget intervals

Marcos M

03:37 PM Feature #15942 (New): Add ability to copy TrackerID

For reference, the forum post: https://forum.netgate.com/topic/195687/rule-tracker-id-gone-missing/8?_=1734707399124... Mike Moore

12/19/2024

11:23 PM pfSense Plus Feature #15941: /etc/rc.dumpon

https://forum.netgate.com/topic/195681/unofficial-guide-run-swap-over-usb-drive-in-pfsense Jonathan Lee

11:22 PM pfSense Plus Feature #15941 (New): /etc/rc.dumpon

Rc.dumpon does not account for when a user configures an external swap, and or has different drives and users uses .e... Jonathan Lee

08:56 PM pfSense Docs Todo #15881 (Feedback): Update UPNP service docs

Docs updated to match GUI changes: https://gitlab.netgate.com/docs/pfSense-docs/-/commit/fbb02bafee6ceb5fa6748b6191b7... Jim Pingle

08:55 PM Todo #15864 (Feedback): Update UPnP IGD & PCP GUI text

Applied in changeset commit:bf07823ba7f4d8f65e0af447a8aa1ee75442d7d2. Jim Pingle

08:47 PM Todo #15864 (In Progress): Update UPnP IGD & PCP GUI text

When I was updating the docs I wasn't really happy with how the options flowed now and some of the text. I also chang... Jim Pingle

08:47 PM Revision bf07823b: Update UPnP IGD & PCP GUI text. Implements #15864

Jim Pingle

08:35 PM pfSense Packages Feature #13905: Introduce GUI knob for controlling ```--snat-subnet-routes``` tailscaled option

Any updates from https://github.com/tailscale/tailscale/issues/5573 that could be implemented in pfsense? Mike Moore

05:20 PM Bug #15912 (Feedback): Errors on the console when starting/stopping services

Applied in changeset commit:0d40856c780520b97f618252d9dfb0e6719e1944. Marcos M

05:11 PM Bug #15861 (Duplicate): Assign Interface IP and Restart GUI Console Menu Items Present PID Errors

Marcos M

05:10 PM Revision 0d40856c: Avoid printing pkill internal errors. Fix #15912

Also remove the file check from isvalidpid() since pkill can handle it. Marcos M

03:25 PM Bug #15679: Multicast with intel NIC

To update on this issue a commit has been merged on FreeBSD :
* https://github.com/freebsd/freebsd-src/pull/1545
* ... Max Pal

02:43 PM pfSense Packages Bug #15027 (Resolved): Bind DNS Server cannot reorder zones

Tested against:... Danilo Zrenjanin

02:10 PM Bug #15940 (Incomplete): Static DHCP Binding not working and DHCP Leases not showing with 24.11 Release

Can't reproduce this or anything like it. There isn't enough detail in this report to identify any issues or make any... Jim Pingle

12:23 AM Bug #15940 (Incomplete): Static DHCP Binding not working and DHCP Leases not showing with 24.11 Release

Static DHCP leases show up in DHCP Leases but that static address is not being provided to the device, instead it jus... Shabahat Malik

12/18/2024

11:03 PM Bug #15912 (In Progress): Errors on the console when starting/stopping services

Marcos M

10:05 PM Feature #9293 (Resolved): Custom message text for the login screen

Marcos M

09:19 PM Feature #9293: Custom message text for the login screen

Fantastic work Marcos.
Applied and works without issue. As a test i used the provided custom message in the OPs redm... Mike Moore

06:30 PM Feature #9293 (Feedback): Custom message text for the login screen

Applied in changeset commit:06d95c3cdc8aff6bab976529ddb4934ebf2aabf0. Marcos M

05:19 PM Feature #9293 (Pull Request Review): Custom message text for the login screen

Marcos M

07:09 PM Bug #15844 (Resolved): Dashboard ``widgetkey`` values are not validated on save or load, can lead to configuration corruption or other problems

reproduced on 24.11
latest dev has the issue fixed
tested on:
25.03-DEVELOPMENT (amd64)
built on Tue Dec 17 7:00:... Georgiy Tyutyunnik

06:26 PM Regression #15882 (Resolved): L2TP server settings are not saved correctly

Georgiy Tyutyunnik

06:05 PM Revision 06d95c3c: Add an option to display text on the login page. Implement #9293

Marcos M

03:53 PM pfSense Plus Regression #15928 (In Progress): OpenVPN DCO clients fail to reconect

Having poked it a bit more it looks like the problem is slightly different.
OpenVPN now closes the socket and opens ... Kristof Provost

12:49 PM pfSense Plus Regression #15928: OpenVPN DCO clients fail to reconect

Initial observations:
We've updated from OpenVPN 2.6.8 to 2.6.12.
Secondly, the error message `Failed to set k... Kristof Provost

05:52 AM pfSense Packages Bug #15939 (Resolved): An empty IPv4/v6 and DNSBL entry is added if it’s not saved

Tested on 24.11 and on 25.03-DEVELOPMENT (built on Fri Dec 13 6:00:00 UTC 2024)
If to press Add for adding IPv4 or... Azamat Khakimyanov

05:41 AM pfSense Packages Bug #15938 (New): It's possible to add DNSBL Virtual IP with subnet mask if to use Restore Configuration option in Diagnostics -> Backup&Restore

Tested on 24.11 (pfBlockerNG 3.2.0_16)
If to use incorrect DNSBL Virtual IP in config.xml file ('DNSBL VIP with su... Azamat Khakimyanov

12/17/2024

08:34 PM Bug #15924 (In Progress): SCTP states not purged causing subsequent SCTP INIT to be blocked

Thanks. That makes sense. I've pushed that into FreeBSD and it'll turn up in our tree on the next upstream merge. Tha... Kristof Provost

07:46 PM Feature #14067 (Resolved): Per-instance options to control Dynamic DNS client Check IP Service behavior

Jim Pingle

03:52 PM Bug #7329: DHCP Not Updating DNS

I'm running into what seems to be the same issue, PFSense+ on a Netgate 3100. 23.09-RELEASE (arm)
built on Tue Oct 3... Brenden Walker

02:25 PM Bug #15937: Unable to assign CA issued certificate to a web configurator 24.03 Azure appliance

The certificate appears to be perfectly fine and works on the other instance. However, it is not working on the new i... Abhi B

01:36 PM Bug #15937 (Incomplete): Unable to assign CA issued certificate to a web configurator 24.03 Azure appliance

There isn't nearly enough information here to even speculate about what might be happening, but the most likely expla... Jim Pingle

01:05 PM Bug #15937 (Incomplete): Unable to assign CA issued certificate to a web configurator 24.03 Azure appliance

The issued certificate from external CA is showing incompatible that means it is not available to assign, this issue ... Abhi B

11:12 AM Regression #15936 (Resolved): Tracking information for firewall rules is not shown when editing the rule

reproduced, patch fixes the issue
tested on
24.11-RELEASE (amd64)
built on Wed Nov 27 19:22:00 CET 2024
FreeBSD 1... Georgiy Tyutyunnik

11:10 AM Feature #15904: Add native support for Captive Portal API (RFC8908)

Improved comments and removed test code from index.php Dec 17, 2024 Dale Harron

11:10 AM pfSense Plus Feature #15854: Lost Captive Portal User Logins when DHCP Leases are Cleared

Improved comments and removed test code from index.php Dec 17, 2024
Dale Harron