pfSense

03/13/2025

08:37 PM Bug #12922: Classless static routes received on DHCP WAN can override chosen default gateway

As a note, it also showed up once Starlink was connected to the 3rd WAN port. Eduardo Silva

08:36 PM Bug #12922: Classless static routes received on DHCP WAN can override chosen default gateway

Oleksii Tucha wrote in #note-4:
> The issue still exists in 2.7.2, the patch from David works.
It is March 2025, thi... Eduardo Silva

07:16 PM Bug #15411: Hostname missing from logs in certain cases can cause the system log to display in an unexpected manner

This happens after every system upgrade. Marcos M

07:15 PM Feature #16092 (Feedback): Separate IDS/IPS and link-local firewall log entries from default block logging

Applied in changeset commit:b67a4eae7b9b815480789b08aa0c847f5689dede. Marcos M

07:15 PM Bug #16093 (Feedback): Firewall logs mark entries for ``match`` rules the same as ``pass`` rules

Applied in changeset commit:27db374dbca226f0429b1453802ff70764b3102d. Marcos M

06:53 PM Bug #16093 (Pull Request Review): Firewall logs mark entries for ``match`` rules the same as ``pass`` rules

Marcos M

06:52 PM Bug #16093 (In Progress): Firewall logs mark entries for ``match`` rules the same as ``pass`` rules

https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1203 Marcos M

07:15 PM Feature #15415 (Feedback): Enhanced firewall log action information display

Applied in changeset commit:27db374dbca226f0429b1453802ff70764b3102d. Marcos M

08:05 AM pfSense Packages Bug #15644 (Resolved): Snort Status icon disappears

I can confirm that the patch fixes the issue.
I am marking this case as resolved. Danilo Zrenjanin

07:26 AM Bug #15162 (Resolved): Adding Wake-On-LAN entry from ARP table view can incorrectly include OEM text in MAC address field

I tested the patch with the latest version 25.03, and it successfully resolves the reported issue.
I am marking th... Danilo Zrenjanin

03/12/2025

09:09 PM pfSense Packages Bug #16094 (Feedback): pfBlocker-NG null blocking SERVFAIL

https://github.com/pfsense/FreeBSD-ports/pull/1407 Marcos M

08:27 PM pfSense Packages Bug #16094 (Feedback): pfBlocker-NG null blocking SERVFAIL

The key for the dnsblDB dictionary is just q_name, meaning the same dictionary entry is used for all query types. The... Alec Fenichel

07:50 PM pfSense Packages Feature #15853 (Feedback): Add mDNS Bridge (mdns-bridge) package

This is now in dev. After it's been tested working there, it can be picked for 2.8/25.03. Marcos M

07:38 PM Bug #16093 (Resolved): Firewall logs mark entries for ``match`` rules the same as ``pass`` rules

When logging is enabled for a floating match rule:
* Clicking the action icon in the firewall log does not show a ru... Marcos M

06:50 PM Feature #16092 (Pull Request Review): Separate IDS/IPS and link-local firewall log entries from default block logging

https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1203 Marcos M

06:47 PM Feature #16092 (Resolved): Separate IDS/IPS and link-local firewall log entries from default block logging

On systems that use Snort/Suricata and also log the default blocking rules, the firewall logs can be very noisy due t... Marcos M

06:50 PM Feature #15415 (Pull Request Review): Enhanced firewall log action information display

https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1203 Marcos M

04:40 PM Bug #15162: Adding Wake-On-LAN entry from ARP table view can incorrectly include OEM text in MAC address field

Applied in changeset commit:3b45a8f2cdb735ce87661fde6ae14aec60ac0d2b. Christian McDonald

04:35 PM Bug #15162 (Feedback): Adding Wake-On-LAN entry from ARP table view can incorrectly include OEM text in MAC address field

Christian McDonald

02:38 PM Bug #15162 (In Progress): Adding Wake-On-LAN entry from ARP table view can incorrectly include OEM text in MAC address field

Christian McDonald

02:15 PM pfSense Packages Todo #16091 (Resolved): tailscale package requires updates

The tailscale package needs to be updated with some degree of regularity.
Users are going about updating the package... Mike Moore

11:34 AM pfSense Plus Bug #13569: Restarting an OpenVPN server running on a CARP VIP in an HA cluster can disrupt unrelated TCP states

Tested on 24.11 and 25.03-RC
This issue hasn't been fixed yet. I still see TCP traffic discruption during HA failo... Azamat Khakimyanov

03/11/2025

11:36 PM Feature #15415 (In Progress): Enhanced firewall log action information display

Marcos M

08:34 PM Bug #16068 (Needs Patch): Logging of packets with IP options cannot be disabled

Unfortunately there doesn't seem to be a way to match only on the packets with IP options, hence the only way to prev... Marcos M

07:59 PM pfSense Packages Bug #15644: Snort Status icon disappears

i removed the patch and re-applied and can confirm this is working.
The only change I made was to make path strip fr... Mike Moore

07:31 PM pfSense Packages Bug #15644: Snort Status icon disappears

I'm not able to reproduce it with the fix. How exactly are you testing? Perhaps the patch is not being applied correc... Marcos M

06:06 PM pfSense Packages Bug #15644: Snort Status icon disappears

used incognito mode/private on both Chrome and Firefox. Still the same issue persists Mike Moore

04:59 PM pfSense Packages Bug #15644: Snort Status icon disappears

No - make sure it's not a cache issue by testing in a private browser session. Marcos M

04:28 PM pfSense Packages Bug #15644: Snort Status icon disappears

applied the patch but still not looking good(same). Does this require a system reboot? Mike Moore

06:43 PM pfSense Packages Regression #16090 (Resolved): Commit 96e2c21 breaks the cURL source interface setting for pfBlockerNG

Fixed with "b294b91fd751ff48fe3ba734d446402856a34370":https://github.com/pfsense/FreeBSD-ports/commit/b294b91fd751ff4... Marcos M

05:56 PM pfSense Packages Regression #16090 (Resolved): Commit 96e2c21 breaks the cURL source interface setting for pfBlockerNG

This commit:
https://github.com/pfsense/FreeBSD-ports/commit/96e2c2141cf62c6042cf096ce9d6b82309a2ee43#diff-dd5b940... Charles Hamilton

04:33 AM pfSense Packages Feature #16089: Add packages for Zabbix 7.2 agent and proxy

PR to add the Zabbix 7.2 packages:
https://github.com/pfsense/FreeBSD-ports/pull/1412
PR to force SQLITE instead ... Andrew Almond

04:04 AM pfSense Packages Feature #16089 (Confirmed): Add packages for Zabbix 7.2 agent and proxy

Zabbix 7.2 was released in Dec 2024 and it would be nice to start testing it with pfSense.
I will submit a PR shortly. Andrew Almond

04:02 AM pfSense Packages Feature #16075: Add Zabbix 7.0 packages for 24.03

The PR as already been merged into pfSense/FreeBSD-ports. The comment in 15548 says:
> Jim Pingle wrote in #note-1... Andrew Almond

03/10/2025

10:08 PM pfSense Packages Bug #15644 (Feedback): Snort Status icon disappears

Fixed with "7e461be2dcbba9ca47324d746cdd866d93311621":https://github.com/pfsense/FreeBSD-ports/commit/7e461be2dcbba9c... Marcos M

09:01 PM pfSense Plus Bug #16086 (Incomplete): Reinstall Packages fails on a fresh install

Unable to reproduce using the latest Netgate Installer version. Marcos M

06:10 PM Bug #15679 (Resolved): Multicast with intel NIC

The upstream commit will be in the 25.03 release. Marcos M

05:17 PM Bug #15679: Multicast with intel NIC

Any update or a patch being worked on for this since this is merged to the upstream now? I still did not update to 24... Emre K

05:34 PM Bug #16076 (Feedback): Deleting or adding a firewall rule may result in an unexpected rule order

A fix has been committed for an issue with Ethernet rules ("details on the forum":https://forum.netgate.com/post/1208... Marcos M

04:38 PM pfSense Packages Feature #9141: FRR xmlrpc

Hello, no updates on my side, I think that unless we come up with a pull request, there's no chance to have a fix on ... Julien Bennet

03:02 PM pfSense Packages Feature #9141: FRR xmlrpc

Looking to see if there is an update available? Any hope in getting config sync possible with FRR? Mike Moore

01:02 PM pfSense Plus Bug #16088 (Duplicate): crash after ISP rebooted the fibre modem port

That is this: https://redmine.pfsense.org/issues/14431 Steve Wheeler

10:05 AM pfSense Plus Bug #16088 (Duplicate): crash after ISP rebooted the fibre modem port

ISP rebooted the NBN port (based in Australia)
Router crashed and had to reboot
* NBN is the National Broadband N... Nicholas Alphonso

02:01 AM pfSense Packages Feature #13643: FRR - Display what BGP is advertsing to its neighbors

Just wondering if any further thought was given to this?
Mike Moore

01:53 AM Feature #16087 (New): cancel edit of firewall rule

When creating or editing a firewall or nat rule, provide the ability to cancel at the bottom next to the 'SAVE' butto... Mike Moore

03/09/2025

06:02 PM Feature #9038: Live view of any log file

This would be a very helpful feature. I assume its possible since there is a live view of logs when updating packages... Gary Johnson

05:53 AM pfSense Packages Bug #15644: Snort Status icon disappears

Tested on pfSense 25.03 Beta and snort 4.1.6_24
The issue still persists. aleksei prokofiev

01:13 AM pfSense Plus Bug #16086 (Closed): Reinstall Packages fails on a fresh install

Tested on ... Christopher Cope

03/08/2025

11:56 PM Feature #16085 (New): multiple objects in source or destination fields

I thought i created a ticket for this but i could not find it.
The feature is for the ability to add multiple IPs ... Mike Moore

11:51 PM pfSense Docs Correction #16084 (New): Snort Pass Lists¶ screenshot does not show passlist

As the subject states.
https://docs.netgate.com/pfsense/en/latest/packages/snort/passlist.html
The last photo i... Mike Moore

05:41 PM Bug #16019: Kea can unintentionally attempt to spawn multiple processes and fail

I ran into this on 1 6100. I recently assigned an interface to add a new network and enabled the dhcp server on the i... Jason Montleon

03/07/2025

08:51 PM pfSense Packages Feature #14468 (Rejected): pass along ntopng professional license key

Jim Pingle

08:50 PM pfSense Packages Todo #15294 (Rejected): Naming “Custom Name” of Interface the same as “Interface” on pfSense in “Interface assignment”

Jim Pingle

05:51 PM pfSense Packages Bug #16083 (Resolved): SID MGT modifications remove all conf files

This shares the same root cause as https://redmine.pfsense.org/issues/15989 which has been fixed for the upcoming rel... Marcos M

04:29 PM pfSense Packages Bug #16083 (Resolved): SID MGT modifications remove all conf files

https://forum.netgate.com/topic/196641/sid-mgmt-gui-issue
Any changes to SID MGMT (creating/modifying existing con... Mike Moore

03:40 PM Bug #16076 (Resolved): Deleting or adding a firewall rule may result in an unexpected rule order

Marcos M

03:15 PM Bug #16081 (Feedback): Panic accessing ``sysctl`` OID ``net.inet.ip.nhdispatch`` with an INVARIANTS kernel

This is an assertion, triggered by incorrect sbuf use.
I've pushed the fix to both the plus-devel-main and the 25.03... Kristof Provost

06:35 AM pfSense Packages Feature #16082 (New): Change RefreshActiveChecks allowed values for Zabbix Agent 7.0

Zabbix Agent 6.4 and up support values 1-86400 (default 5) for the RefreshActiveChecks parameter.
Zabbix Agent 6.0 a... Andrew Almond

03/06/2025

11:20 PM Bug #16063 (Resolved): PHP error after saving NTP settings with an interface selected

Marcos M

08:59 PM pfSense Packages Feature #15853 (Pull Request Review): Add mDNS Bridge (mdns-bridge) package

Marcos M

08:58 PM pfSense Packages Feature #16070 (Pull Request Review): Add ANDwatch package

Marcos M

02:47 PM Bug #16081: Panic accessing ``sysctl`` OID ``net.inet.ip.nhdispatch`` with an INVARIANTS kernel

In fact this is only triggered in a debug/invariants kernel.
Can be triggered by running:... Steve Wheeler

02:36 PM Bug #16081 (Feedback): Panic accessing ``sysctl`` OID ``net.inet.ip.nhdispatch`` with an INVARIANTS kernel

Querying net.inet.ip.ip_direct_nh_dispatch via sysctl in a kernel with INVARIANTS set results in a panic:... Steve Wheeler

02:01 PM pfSense Plus Bug #16079 (Resolved): Separators for Ethernet rules span past the actions column

Marcos M

01:52 PM pfSense Plus Bug #16080 (New): Issues Upgrading from 24.03 to 24.11 SG-1100 Atheros 9280

I receive the below crash when upgrading my SG-1100 to 24.11. See attached upgrade log.
Refer to: https://forum.ne... Nick K

03/05/2025

08:12 PM Feature #2358 (Feedback): NAT64 support

Marcos M

05:05 PM Bug #16076: Deleting or adding a firewall rule may result in an unexpected rule order

There's an additional issue here when adding a rule at the top (i.e. when using the "up arrow Add" button) - the rule... Marcos M

01:12 AM Bug #15162: Adding Wake-On-LAN entry from ARP table view can incorrectly include OEM text in MAC address field

this still happens with the field for MAC address when creating a WOL entry from Diagnostics>ARP Table menu using pfS... Jordan G

03/04/2025

11:01 PM Bug #16029 (Pull Request Review): When using LDAP group filter, group has to be in the same LDAP container as the user

https://github.com/pfsense/pfsense/pull/4725 Marcos M

09:04 PM pfSense Plus Bug #16079 (Resolved): Separators for Ethernet rules span past the actions column

Separators created under the Ethernet firewall rules tab span an extra column on the rules table. Marcos M

07:48 PM Bug #15643: Deleting one pre-installed package may delete other pre-installed packages

This is resolved with the Netgate Installer version 1.1. Marcos M

06:52 PM pfSense Plus Feature #14945: Allow IPsec VTI ``ipsecX`` interfaces to be added to interface groups

Interface Groups is akin to Security Zones so coming up with a consistent policy for my IPsec VTI interfaces would be... Mike Moore

11:06 AM Feature #15904: Add native support for Captive Portal API (RFC8908)

RE: the change of category from DHCP to captive portal.
As the captive portal is already associated with an interfac... Dale Harron

08:46 AM Feature #16078 (New): Add a option to round robin system DNS

I have diagnostic monitoring on my DNS severs and I noticed when I have ASN reporting turned on in pfBlocker my pfSen... Alex Simmons

04:02 AM pfSense Packages Feature #16075: Add Zabbix 7.0 packages for 24.03

Jordan G wrote in #note-1:
> that error can be indicative of a library dependency issue which one would expect when ... Andrew Almond

03/03/2025

11:24 PM Regression #15898 (Resolved): Changes to the ``admins`` user group are not synced to the secondary node

Marcos M wrote in #note-3:
> Applied in changeset commit:6ad2d8ff9f7d954f92c1dc0163b38a5cf2fa802b.
Tested. Succes... Craig Coonrad

10:00 PM Regression #15898 (Feedback): Changes to the ``admins`` user group are not synced to the secondary node

Applied in changeset commit:6ad2d8ff9f7d954f92c1dc0163b38a5cf2fa802b. Marcos M

11:18 PM Bug #16076 (Feedback): Deleting or adding a firewall rule may result in an unexpected rule order

This regressed after the fix for https://redmine.pfsense.org/issues/15935 which added the call to @filter_rules_sort(... Marcos M

11:15 PM Bug #16076 (In Progress): Deleting or adding a firewall rule may result in an unexpected rule order

Marcos M

05:43 PM Feature #15562: Add support for OpenID

This is a desired feature of mine for using our OIDC provider as the primary login for users including all sysadmin/IT. Anonymous

01:10 PM Bug #16077 (Incomplete): dpinger not reliable - ping request/replies

There isn't nearly enough information here to identify any specific problem. It's most likely _not_ dpinger but some... Jim Pingle

09:04 AM Bug #16077 (Incomplete): dpinger not reliable - ping request/replies

The running dpinger process, seems to be stall for no reason, hence reporting the gateway as down, but it is not:
... Stefan Bauer

08:57 AM pfSense Packages Bug #15939 (Resolved): An empty IPv4/v6 and DNSBL entry is added if it’s not saved

Tested on 25.07-DEV (built on Fri Feb 28 6:00:00 UTC 2025)
When I pressed Add IPv4/IPv6 and DNSBL group entries an... Azamat Khakimyanov

03/02/2025

05:54 AM Bug #16076: Deleting or adding a firewall rule may result in an unexpected rule order

Sorry, 2.png should = 1,2,3,4,5,6,7*,8,9,10 Craig .

05:51 AM Bug #16076 (Resolved): Deleting or adding a firewall rule may result in an unexpected rule order

There seems to be an issue with firewall rules being re-ordered after using the red (multiple) "Delete" button, even ... Craig .

04:55 AM Bug #16073: Nested aliases used with OpenVPN do not always load routes

Tested on 24.11, I can confirm this. aleksei prokofiev

04:05 AM Bug #16063: PHP error after saving NTP settings with an interface selected

with patch applied changing ntp can be changed between single or multiple server(s) without issue. looks good from here Jordan G

03:25 AM pfSense Packages Feature #16075: Add Zabbix 7.0 packages for 24.03

that error can be indicative of a library dependency issue which one would expect when installing packages with the b... Jordan G

03/01/2025

09:45 PM pfSense Plus Bug #16037 (Incomplete): New CoDel limiters are no longer created with any default values

Jordan G

09:44 PM pfSense Plus Bug #16037: New CoDel limiters are no longer created with any default values

thanks for confirming that it seems to be working for you now and please feel free to update if you are able to isola... Jordan G

06:29 PM pfSense Packages Feature #14630: FRR script hook for clearing states on routing changes

Can we get some guidance from the developers on this.
What should be the proper way of handling this? Mike Moore

05:05 PM pfSense Packages Bug #12444 (Closed): ntopng throws errors when viewing single host

Christopher Cope

05:03 PM pfSense Packages Bug #12260 (Closed): Update popup and version missmatch?

Christopher Cope

05:02 PM pfSense Packages Bug #9079 (Closed): High CPU usage of ntopng even during IDLE and no network traffic

Christopher Cope

05:01 PM pfSense Packages Bug #11530 (Closed): ntopng 4.2 needs to be updated to 4.3, Bug when accessing a host for details

Christopher Cope

07:10 AM Bug #16063: PHP error after saving NTP settings with an interface selected

I was able to reproduce this on 24.11, the patch appears to fix it. Lev Prokofev

05:27 AM pfSense Packages Feature #16075 (Rejected): Add Zabbix 7.0 packages for 24.03

The Zabbix 7.0 packages were added for 24.11 in "15548":https://redmine.pfsense.org/issues/15548 and work great.
The... Andrew Almond

02/28/2025

10:33 PM pfSense Packages Bug #10783 (Closed): NtopNG is very unstable on arm64

Marcos M

10:18 PM pfSense Packages Bug #10783: NtopNG is very unstable on arm64

This issue is stale and can be closed Denny Page

10:28 PM pfSense Packages Bug #15115 (Closed): NUT Package Functionality

Marcos M

10:04 PM pfSense Packages Bug #15115: NUT Package Functionality

This issue is stale and can be closed. Denny Page

10:26 PM pfSense Packages Bug #13972 (Closed): nut on pfsense spams console every 5 minutes "UPS ups is unavailable" against cyberpower snmp rmcard205

Marcos M

10:07 PM pfSense Packages Bug #13972: nut on pfsense spams console every 5 minutes "UPS ups is unavailable" against cyberpower snmp rmcard205

This issue is stale and can be closed Denny Page

10:26 PM pfSense Packages Bug #13886 (Closed): NUT Server Package

Marcos M

10:08 PM pfSense Packages Bug #13886: NUT Server Package

This issue is stale and can be closed Denny Page

10:26 PM pfSense Packages Bug #9143 (Closed): ntopng not displaying values in historical correctly

Marcos M

10:08 PM pfSense Packages Bug #9143: ntopng not displaying values in historical correctly

This issue is stale and can be closed Denny Page

10:18 PM pfSense Packages Bug #9079: High CPU usage of ntopng even during IDLE and no network traffic

This issue is very stale and can be closed Denny Page

10:17 PM pfSense Packages Bug #11530: ntopng 4.2 needs to be updated to 4.3, Bug when accessing a host for details

This issue is stale and can be closed Denny Page

10:16 PM pfSense Packages Bug #12260: Update popup and version missmatch?

This issue is stale and can be closed Denny Page

10:16 PM pfSense Packages Bug #12444: ntopng throws errors when viewing single host

This issue is stale and can be closed Denny Page

10:16 PM pfSense Packages Feature #14468: pass along ntopng professional license key

The pfSense ntopng package uses the open source variant of ntopng. In order to use the commercial version, you have t... Denny Page

10:14 PM pfSense Packages Todo #15294: Naming “Custom Name” of Interface the same as “Interface” on pfSense in “Interface assignment”

The interface assignments you are referring to are internal to ntopng. pfSense has no control of, or insight into, as... Denny Page

10:11 PM pfSense Packages Feature #15960: NTOP Port Configuration in WebUI feature request

Neither http-port nor https-port should not be added to the advanced configuration section. The http/https setting fo... Denny Page

10:06 PM pfSense Packages Bug #14951: Tripplite Smart1500LCD UPS

This issue is stale and can be closed Denny Page

07:07 PM pfSense Plus Regression #16074 (Not a Bug): States view doesn't populate Rule ID field if opening a new tab

It's not a bug. Clicking the link is the only intended behavior there as that specific link has the @usepost@ attribu... Jim Pingle

07:01 PM pfSense Plus Regression #16074 (Not a Bug): States view doesn't populate Rule ID field if opening a new tab

There is an inconsistency when viewing the Diagnostics > States page. For example, on the Firewall > LAN page, when ... Steve Y

06:30 PM Feature #15776: System Aliases for various reserved networks

Done with commit:15709960f5057fe0b1281a645a41b8958a8926a8. Marcos M

06:17 PM pfSense Packages Feature #14630: FRR script hook for clearing states on routing changes

For anyone still tracking, there is a solution as documented in forum post - https://forum.netgate.com/topic/196577/... Mike Moore

05:48 PM Feature #16038 (Feedback): Add options for custom dynamic DNS update frequencies and disabling caching

Without the cache, there would be a lot of unnecessary DDNS requests. Setting the default behavior to force would int... Marcos M

05:46 PM Bug #16046: Dynamic DNS IP address may not be updated after changing the interface of a Dynamic DNS entry

Yes, and no. I've commented with more details on the relevant redmine. Marcos M

04:54 PM Bug #16046: Dynamic DNS IP address may not be updated after changing the interface of a Dynamic DNS entry

I opened redmine "16038":https://redmine.pfsense.org/issues/16038 to address a similar issue of dynamic DNS IP addres... Andrew Almond

04:38 PM Bug #13624: Only one alias in local network of OpenVPN Server works in 2.6.0

Kris Phillips wrote in #note-8:
> Reproduced this with a customer. The root of the issue appears to be that OpenVPN... Chris W

04:36 PM Bug #16073 (New): Nested aliases used with OpenVPN do not always load routes

Given:
- Alias @AliasParent@ contains various other aliases @AliasChild1@, @AliasChild2@, etc., however all children... Chris W

03:21 PM pfSense Docs Correction #16072 (New): Disable reply-to for advanced routing scnerios

This is related to redmine #14630
Today within the forums, a solution was found - https://forum.netgate.com/topic/... Mike Moore

04:48 AM Feature #16071 (New): SAML/SSO authentication for Captive Portal and OpenVPN

I've been looking for a way to allow my users to authenticate via Entra ID SSO in Captive portal and for VPN access t... Ajan T

02/27/2025

11:43 PM pfSense Packages Feature #16070 (Pull Request Review): Add ANDwatch package

ANDwatch is a modern replacement for arpwatch. When contrasted with arpwatch, ANDwatch offers the following enhanceme... Denny Page

09:13 PM Bug #16069 (Resolved): The monitoring IP address for dynamic gateways may be unexpectedly routed via a different gateway

The reported issue should be fixed with commit:3b5f0ecbfc2d952891dbe227e9afbf9d2ed0ebd4. Marcos M

09:13 PM Bug #16069 (Resolved): The monitoring IP address for dynamic gateways may be unexpectedly routed via a different gateway

When the option @Static route@ is unchecked, it's expected that the monitoring IP address for a dynamic gateway is al... Marcos M

09:09 PM Bug #16068 (Needs Patch): Logging of packets with IP options cannot be disabled

Logging of packets with options (IGMP) was added/fixed as mentioned in redmine "15400":https://redmine.pfsense.org/is... Andrew Almond

09:05 PM Feature #15904: Add native support for Captive Portal API (RFC8908)

The implementation of this is exceptionally simple:
Construct the same information strings as you would enter into... Dale Harron

08:57 PM Todo #15429 (Resolved): Clarify descriptions for gateway recovery options

I've updated the option descriptions:
* commit:0c43c9f7398c7b3ab234ac831eda3a5db85dc240
* commit:7d2ad4a05139669fbf... Marcos M

08:35 PM Regression #16031 (Resolved): Some older ISA-based uart consoles do not function on development snapshots around 25.03 or later

Note added to 25.03 docs: https://gitlab.netgate.com/docs/pfSense-docs/-/commit/d78ded2d4e13701fd557522d7a8ccb8604d83... Jim Pingle

07:44 PM Bug #16066 (Duplicate): When I configure the captive portal as below, captive Portal gives a used port number.

Marcos M

11:58 AM Bug #16066 (Duplicate): When I configure the captive portal as below, captive Portal gives a used port number.

here dont checking zoneid if exist
https://github.com/pfsense/pfsense/blob/ec956d343e6cd2db69caa23ba647a19d18fd... sezer h

05:47 PM pfSense Plus Bug #15994 (Resolved): Backup configuration cache is not cleaned automatically

Marcos M

12:02 PM Feature #16067 (New): OpenVPN tls-crypt-v2 support

Customer asks for native support of tls-crypt-v2 feature in future pfSense releases.
Currently he managed to make it... Georgiy Tyutyunnik

11:37 AM Feature #15776: System Aliases for various reserved networks

Jim Pingle wrote in #note-7:
> This looks good but I can't help wondering if we should have "46" variants with all o... Jens Groh

03:44 AM Bug #16022: Static lease DNS records are incorrectly removed when backing lease expires

Is there a system patch available for this issue by chance? Thanks Denny Page

03:38 AM Regression #15898: Changes to the ``admins`` user group are not synced to the secondary node

Version: 24.11
I observed this as well on several HA deployments.
Since root is not in the admins group on the... Craig Coonrad

02/26/2025

07:58 PM pfSense Plus Bug #16058 (Rejected): NTPD issue with authenticated update since upgrade

The authenticated NTP feature was implemented with pfSense+ 24.11. It may be that the configuration applied during th... Marcos M

07:35 PM Bug #16063 (Feedback): PHP error after saving NTP settings with an interface selected

Applied in changeset pfsense:commit:7573eafea9025f1a895886cf24d20fc5762c7b7d. Marcos M

07:01 PM Bug #16063 (Confirmed): PHP error after saving NTP settings with an interface selected

To reproduce:
# Enable MIM
# Go to Services > NTP
# Select Localhost for @Interface@ then click @Save@ Marcos M

06:42 PM pfSense Packages Bug #16065: pfblockerng python mode causing errors in Unbound

Forum discussion: https://forum.netgate.com/topic/195601 Marcos M

12:58 PM Feature #6742: OAuth2 authentication for OpenVPN (and for FreeRadius)

Is there any native support for Oauth or SAML or OIDC is implemented in PfSense?
I'm have been searching for so lon... Ajan T

02/25/2025

11:38 PM Bug #15923: After restoring the backup, PHP produce the errors.

This is fixed in 24.11 and 2.8.
2.7.2, 23.09 and 24.03 hit it. Steve Wheeler

11:08 PM Bug #16064 (Feedback): Boot loader is not upgraded on UFS installs

Christian McDonald

12:58 AM Bug #16064 (Feedback): Boot loader is not upgraded on UFS installs

At pfSense upgrade the bootloader is checked and updated if necessary but this process is skipped for UFS installs.
... Steve Wheeler

10:19 PM pfSense Packages Bug #15939 (Feedback): An empty IPv4/v6 and DNSBL entry is added if it’s not saved

Should be fixed with https://github.com/pfsense/FreeBSD-ports/commit/aaf683d62794327bddd8ca0c75e10a31a51f34dd. Marcos M

05:44 PM pfSense Packages Bug #16065 (New): pfblockerng python mode causing errors in Unbound

[90474:3] error: pythonmod: Exception occurred in function operate, event: module_event_new
[90474:3] error: pytho... Raffi T

12:09 AM Bug #16063: PHP error after saving NTP settings with an interface selected

Ok, sorry for the update but - easier steps to repro
Works OK first time displaying Services>NTP. Do it again and 5... steven warner

02/24/2025

11:04 PM Bug #16063: PHP error after saving NTP settings with an interface selected

Update:
Issue occurs when editing the sole existing server and not adding a new one... steven warner

10:57 PM Bug #16063 (Resolved): PHP error after saving NTP settings with an interface selected

System had one NTP server defined. Entered info for another NTP server by ip address, and selected save.
Gets "50x... steven warner

07:59 PM pfSense Docs Todo #16017 (Feedback): Update AutoConfigBackup docs to account for new changes

This should finish it up:
https://gitlab.netgate.com/docs/pfSense-docs/-/commit/4ab9d396b2235d93111fb89ee5126e8867... Jim Pingle

07:15 PM Bug #16057 (Resolved): The package ``post-install`` script does not run with a system upgrade on ZFS

pkg has been patched locally for now:
https://github.com/pfsense/FreeBSD-ports/commit/629f859694af769c7239bb9a32e5d1... Marcos M

05:46 AM Feature #15022: Allow overriding text scrolling during package install/uninstall

Thank you this worked when I did a new upgrade also, I could check back with it. (my upgrade failed because of my 210... Jonathan Lee

03:53 AM pfSense Plus Bug #15595 (Resolved): ``pftop`` core dump with ICMP states

version: 25.03-RC
platform: 4200
On 24.11 I couldn't get pftop to crash consistently. Until I initiated some pings, ... Craig Coonrad

01:21 AM Todo #16060 (Feedback): ``pkg`` no longer supports setting ``ALTABI`` manually at run-time

Fixed in the latest pfSense-upgrade. Luiz Souza

02/22/2025

11:30 PM Bug #16043: The filtered states shown may include states for interfaces other than the selected interface

testing with 25.03.r.20250221.0254 the diagnostics>states page seems to produce results more in-line with what one wo... Jordan G

10:31 PM Todo #16050 (Resolved): Update cpu-microcode-intel to version 20250211 for multiple CVE mitigations

... Christopher Cope

10:24 PM pfSense Plus Regression #15494 (Resolved): Reinstall Packages button reports another instance of ``pfSense-upgrade`` is running

Working for me as well on... Christopher Cope

04:01 PM pfSense Plus Regression #15494: Reinstall Packages button reports another instance of ``pfSense-upgrade`` is running

reinstall packages button seems to be functional again when testing on 25.03.r.20250221.0254 Jordan G

07:59 AM Feature #16062 (New): Assign devices to Users

Feature Request to assign multiple devices to users (users without admin access to the firewall settings) to improve ... Ben Newport

02/21/2025

10:12 PM Todo #16050 (Feedback): Update cpu-microcode-intel to version 20250211 for multiple CVE mitigations

Marcos M

10:11 PM Bug #16047 (Resolved): Cannot kill states using the post-NAT address

Now works as intended in snapshots. The fix has been picked to 25.03. Marcos M

10:00 PM Feature #15321: Kea DHCP Custom Configuration Support (IPv4 and IPv6)

I've created a quick-start guide for this on the forum:
https://forum.netgate.com/topic/196513 Marcos M

12:51 AM Feature #15321: Kea DHCP Custom Configuration Support (IPv4 and IPv6)

No doubt
But what it does do is provide the flexibility *now* for people that really need it while we take the next ... Christian McDonald

08:21 PM pfSense Docs Todo #16017: Update AutoConfigBackup docs to account for new changes

More Progress:
https://gitlab.netgate.com/docs/pfSense-docs/-/commit/cd4a16b91743e13809b8f6a71ecb2d495cfd5c42
Stage... Jim Pingle

06:49 PM Bug #16057 (Needs Patch): The package ``post-install`` script does not run with a system upgrade on ZFS

This is an issue since 24.03. The root cause here is due to a bug with pkg. It was supposed to be fixed but the upstr... Marcos M

02/20/2025

11:43 PM Feature #15321: Kea DHCP Custom Configuration Support (IPv4 and IPv6)

I can already forsee the numerous support posts. Are we relying on the user to correctly identify the spacing issues ... Mike Moore

09:09 PM Feature #15321: Kea DHCP Custom Configuration Support (IPv4 and IPv6)

The subject of this issue has been reworded to more accurately reflect the current direction we are taking with the f... Christian McDonald

05:02 PM Feature #15321 (Feedback): Kea DHCP Custom Configuration Support (IPv4 and IPv6)

Christian McDonald

09:08 PM pfSense Docs Todo #16017: Update AutoConfigBackup docs to account for new changes

More progress: https://gitlab.netgate.com/docs/pfSense-docs/-/commit/050b05e642c93ebad98548507392ebce8d60daea Jim Pingle

08:16 PM pfSense Plus Feature #16061: Automatic Site-to-Site VPN

There is no full public road map but there is a page with more information: https://www.netgate.com/multi-instance-ma... Jim Pingle

08:09 PM pfSense Plus Feature #16061: Automatic Site-to-Site VPN

You just made my year. Is there a public roadmap? I checked the roadmap tab in Redmine but I didn't see anything. Andrew Collings

01:42 PM pfSense Plus Feature #16061 (Duplicate): Automatic Site-to-Site VPN

This is already planned as a part of multi-instance management, so no need for a separate feature request. Jim Pingle

03:42 AM pfSense Plus Feature #16061 (Duplicate): Automatic Site-to-Site VPN

Would it be feasible to implement a solution similar to Ubiquiti's Site Magic? We have 12 locations with Netgate appl... Andrew Collings

06:14 PM Bug #16047 (Ready To Test): Cannot kill states using the post-NAT address

https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/commit/8bc7ad06d91d330aaa14ced38c6b0925e18a1503
https://gitlab.ne... Kristof Provost

01:23 PM Bug #16059 (Resolved): RAM Disk cron jobs are not saved correctly

fixed in the latest 25.03 build
tested on:
25.03-BETA (amd64)
built on Mon Feb 17 20:02:00 UTC 2025
FreeBSD 15.0-... Georgiy Tyutyunnik

12:19 AM Bug #16059 (Feedback): RAM Disk cron jobs are not saved correctly

Fixed with commit:35dab7fc85caaa9b2b55c8525c3a753e83e8a599 and commit:7d9da7bef6f638ea676c8330883742c2d0414a67. Marcos M

03:19 AM pfSense Packages Bug #13654: Wireguard does not fail back failover WAN setup.

I'm having this issue in 24.11 with 6 different 6100s. It fails over flawlessly but will not fail back. I can go into... Andrew Collings

02:46 AM Bug #16039: Gateway does not go down when packet loss threshold is set to 100%

Thanks for looking into it and for the heads up. I can't believe I completely missed that option. Andrew Collings

12:33 AM Todo #16060 (Closed): ``pkg`` no longer supports setting ``ALTABI`` manually at run-time

When pkg is run on the latest snapshot, the following is shown:... Marcos M

12:28 AM pfSense Plus Bug #15994 (Pull Request Review): Backup configuration cache is not cleaned automatically

https://gitlab.netgate.com/pfSense/factory/-/merge_requests/165 Marcos M

02/19/2025

11:38 PM Bug #16059 (Resolved): RAM Disk cron jobs are not saved correctly

After enabling RAM Disks at @System > Advanced > Miscellaneous@ the related cron jobs are saved to the configuration ... Marcos M

09:03 PM pfSense Docs Todo #16017 (In Progress): Update AutoConfigBackup docs to account for new changes

WIP commit: https://gitlab.netgate.com/docs/pfSense-docs/-/commit/1e9da8bc640a6bd02618f75bc557cfa494978a36
Jim Pingle

08:38 PM pfSense Packages Bug #15976: Fix ntopng listen options

Hey all, this is a pretty simple change. Can someone have a look at pulling this in please? Thanks. Denny Page

08:37 PM pfSense Packages Feature #15891: NUT driver list update

Hey all, this is a pretty simple change. Can someone have a look at pulling this in please? Thanks. Denny Page

08:34 PM pfSense Plus Regression #15494 (Feedback): Reinstall Packages button reports another instance of ``pfSense-upgrade`` is running

Fix has been committed and picked to 25.03. Marcos M

06:58 PM pfSense Plus Regression #15494 (In Progress): Reinstall Packages button reports another instance of ``pfSense-upgrade`` is running

Marcos M

07:57 PM Feature #15022 (Resolved): Allow overriding text scrolling during package install/uninstall

Testing this with installing/uninstalling Snort I see the auto-scroll checkbox works as expected while packages are b... Marcos M

07:35 PM Bug #15643 (Resolved): Deleting one pre-installed package may delete other pre-installed packages

Jim Pingle

07:29 PM Bug #15643: Deleting one pre-installed package may delete other pre-installed packages

can't reproduce on latest dev, fixed
tested on:
Version 25.07-DEVELOPMENT (amd64)
built on Mon Feb 17 22:46:00 UTC... Georgiy Tyutyunnik

05:49 AM pfSense Plus Bug #16058 (Rejected): NTPD issue with authenticated update since upgrade

Hi there,
I have happily setup authenticated NTPD using a sha256 key a while ago, and it was working quite happi... Eric Nguyen

01:20 AM pfSense Plus Bug #16051: Limiters saved while MIM is enabled disappear after reboot

On upgrades to 25.03, existing invalid configuration should be automatically fixed. Alternatively, the following coul... Marcos M

12:40 AM Bug #16052 (Closed): UPNP does not apply unless saved again on reboot

For reference, there's also an issue with it on the current 25.03-BETA which results in the service crashing. A fix w... Marcos M

12:33 AM Bug #16057 (Resolved): The package ``post-install`` script does not run with a system upgrade on ZFS

As an example, the freeradius package defines the following in its xml:... Marcos M

02/18/2025

11:29 PM Bug #16052: UPNP does not apply unless saved again on reboot

Good evening. You can close the ticket. It seems only to happen if plex is already connected to a port like 15478 an... Dwight Northwood

04:43 PM Bug #16052: UPNP does not apply unless saved again on reboot

I can't reproduce this here on the latest beta build. From a fresh boot I can immediately open a port mapping and it ... Jim Pingle

08:50 PM pfSense Docs Todo #16056 (New): Add hardware compatibility information to Multi-Instance Management page

link: https://docs.netgate.com/pfsense/en/latest/mim/index.html
Add bullet point to "WARNING" section with somethi... Craig Coonrad

05:10 PM pfSense Plus Bug #16037: New CoDel limiters are no longer created with any default values

I tested again on the device that I was creating the blank limiters, and now it is creating them correctly with defau... Andrew Almond

05:01 PM pfSense Plus Bug #16054 (New): Many arpresolve errors in system log for gateways that are down

When a gateway goes down, the system log is filled with messages similar to
@Feb 18 08:40:50 kernel arpresolve: can... Andrew Almond

02:39 PM Todo #16049 (Resolved): Update nginx to 1.26.3

Latest beta build for 25.03 has @nginx-1.26.3,3@ and appears to be working fine. Jim Pingle

12:53 PM pfSense Plus Bug #15595: ``pftop`` core dump with ICMP states

I've pushed a fix for pftop crashes (specifically seen with `pftop -f icmp`) to the 25.03 and plus-devel-main branche... Kristof Provost

02/17/2025

04:50 PM Todo #16050: Update cpu-microcode-intel to version 20250211 for multiple CVE mitigations

I've pushed updates so sysutils/cpu-microcode-intel is now at the 2025-02-11 release and sysutils/cpu-microcode-amd i... Kristof Provost

03:03 PM Todo #16049: Update nginx to 1.26.3

I've updated nginx on plus-RELENG_25_03 to 1.26.3.
I've not touched the plus-devel-main (ie 25.07-DEV) branch. That'... Kristof Provost

10:55 AM pfSense Docs Todo #16053 (Closed): Reinstalling pfSense Plus Software Determine Target Drive does not include USB storage

In the Netgate Physical Appliances documentation, there is often a How-To Guide for Reinstalling pfSense Plus Softwar... Jared Silva

02/16/2025

02:42 AM Bug #16052: UPNP does not apply unless saved again on reboot

The service is started on my system but not creating the port forwards until I click on save. Minor issue as it is a... Dwight Northwood

01:21 AM Bug #16052 (Incomplete): UPNP does not apply unless saved again on reboot

Dwight Northwood wrote:
> Noticed my plex was being blocked on beta 25.03 as the UPNP was not working correctly.
> ... Kris Phillips

01:05 AM Todo #16049 (Confirmed): Update nginx to 1.26.3

25.07-DEV is also running 1.26.2. Christopher Cope

02/15/2025

11:17 PM Bug #16052 (Closed): UPNP does not apply unless saved again on reboot

Noticed my plex was being blocked on beta 25.03 as the UPNP was not working correctly.
I would go into the option ... Dwight Northwood

10:56 PM pfSense Plus Bug #16051 (Resolved): Limiters saved while MIM is enabled disappear after reboot

I can't replicate this on the Feb 12 build. On reboot I still have the two test limiters.... Chris W

07:15 PM pfSense Plus Bug #16051 (Feedback): Limiters saved while MIM is enabled disappear after reboot

Marcos M

09:55 PM Bug #15110: pfSense hangs when rebooting

Same here with a 5100 after change the original 8GB eMMC to a 128 GB SSD. It never reboots without removing the power... Daniel van der Wal

03:25 PM Bug #15110: pfSense hangs when rebooting

The issue persisted in 24.11. Danilo Zrenjanin

07:38 PM pfSense Plus Bug #15959: MIM GUI is unable to write IPv6 aliases

The issue persisted in:... Danilo Zrenjanin

07:18 PM Bug #15930 (Not a Bug): Mobile IPsec clients can't connect after gateway failover

This is not a bug. We have verified that it operates as intended in the customer's environment as well. Accordingly, ... Danilo Zrenjanin

02/14/2025

10:57 PM Bug #15982: Limiters do not change values and disappear after reboot if bandwidth set over 5 Gig

Thanks for the report. I've opened a separate issue here: https://redmine.pfsense.org/issues/16051 Marcos M

02:59 PM Bug #15982: Limiters do not change values and disappear after reboot if bandwidth set over 5 Gig

Running into a similar issue
https://forum.netgate.com/topic/196432/limiter-config-disappered/2
Albiet, my con... Mike Moore

10:57 PM pfSense Plus Bug #16051 (In Progress): Limiters saved while MIM is enabled disappear after reboot

This is resolved in 25.03, though existing configurations are not automatically fixed on upgrade. Marcos M

10:54 PM pfSense Plus Bug #16051 (Resolved): Limiters saved while MIM is enabled disappear after reboot

# Enable MIM
# Create two limiters, @test-1@ and @test-2@ both with @50@ Mb bandwidth
# Reboot Marcos M

09:40 PM Todo #16049: Update nginx to 1.26.3

Mike Moore wrote in #note-1:
> Will this be through the system update package OR through a firmware upgrade?
This... Kris Phillips

09:33 PM Todo #16049: Update nginx to 1.26.3

Will this be through the system update package OR through a firmware upgrade? Mike Moore

09:23 PM Todo #16049 (Resolved): Update nginx to 1.26.3

Vulnerabilities in nginx have been discovered in CVE-2025-23419. Plus 24.11 and 25.03-BETA runs 1.26.2, which is vul... Kris Phillips

09:31 PM Todo #16050 (Resolved): Update cpu-microcode-intel to version 20250211 for multiple CVE mitigations

Multiple Intel CPU vulnerabilities have been reported here in FreeBSD:
https://vuxml.freebsd.org/freebsd/d598266d-77... Kris Phillips

07:20 PM pfSense Plus Regression #16048: Checking the "Force all traffic thru VPN" within OpenVPN wizard or server configuration does(may?) not add outgoing NAT rule.

Okay, gotcha! I wasn't sure if that was the issue. Thanks for the quick reply! Stephen Trotter

03:25 PM pfSense Plus Regression #16048 (Rejected): Checking the "Force all traffic thru VPN" within OpenVPN wizard or server configuration does(may?) not add outgoing NAT rule.

Manual NAT rules will never be added automatically unless you're switching from Auto or Hybrid over to Manual. This i... Jim Pingle

03:04 PM pfSense Plus Regression #16048: Checking the "Force all traffic thru VPN" within OpenVPN wizard or server configuration does(may?) not add outgoing NAT rule.

I just wanted to add the reasoning that I believe it may be a regression.
It's because of the numerous guides (and... Stephen Trotter

03:01 PM pfSense Plus Regression #16048 (Rejected): Checking the "Force all traffic thru VPN" within OpenVPN wizard or server configuration does(may?) not add outgoing NAT rule.

I was attempting to set up an OpenVPN tunnel so I could connect my phone thru my home network.
The desired behavior ... Stephen Trotter

02:40 PM Bug #16046 (Feedback): Dynamic DNS IP address may not be updated after changing the interface of a Dynamic DNS entry

Applied in changeset commit:de695c0e4bd4e9b2bfb34ae2d557509865ccf9f5. Marcos M

02:27 PM Regression #16045 (Feedback): Dynamic DNS IPv6 tries to use IPv4 address

Marcos M

01:09 PM Regression #13622: QinQ ethertype tags changed

Is there any timeline to resolve this one? Double stacked 802.1q packets are far more common than 802.1ad in my exper... Chris Rowe

02/13/2025

11:05 PM Bug #16047 (Resolved): Cannot kill states using the post-NAT address

To reproduce:
# Start a continuous ping to a public address from a device behind the LAN.... Marcos M

10:38 PM Bug #16046 (Resolved): Dynamic DNS IP address may not be updated after changing the interface of a Dynamic DNS entry

To reproduce:
# Configure two WANS, WAN1 and WAN2.
# Create a DDNS config using WAN1.
# Check that the domain now ... Marcos M

03:52 PM Regression #16045 (In Progress): Dynamic DNS IPv6 tries to use IPv4 address

Please try the following patch:
{{collapse... Marcos M

10:12 AM Regression #16045: Dynamic DNS IPv6 tries to use IPv4 address

This patch fixes some things and at first glance it looks to work?
*But most likely its broken in more places.* Look... Bart Schapendonk

07:58 AM Regression #16045: Dynamic DNS IPv6 tries to use IPv4 address

Sorry, my cat slapped the submit button whith his tail before I could finish.
This is on: "25.03-BETA (amd64) built ... Bart Schapendonk

07:54 AM Regression #16045 (Resolved): Dynamic DNS IPv6 tries to use IPv4 address

@Feb 13 08:49:54 php-fpm 34382 /services_dyndns_edit.php: Dynamic DNS: updatedns() starting
Feb 13 08:49:54 php-... Bart Schapendonk

10:49 AM Bug #16007: Dynamic DNS, Porkbun, "@.mydomain.xyz"

Mustache Mustache wrote in #note-6:
> Ben Woods wrote in #note-5:
> > Could this be caused by porkbun moving the UR... Emanuel Persson

04:34 AM pfSense Docs Correction #16044 (New): Add 4200 eMMC monitoring notice to Troubleshooting Disk Lifetime

The onboard eMMC storage on the 4200 cannot be monitored by mmc-utils or any other method. A note needs to be added t... Andrew Almond

04:27 AM pfSense Plus Bug #15978: Unable to get SMART data from 4200 onboard storage

@mmendoza The ability to monitor the storage health is a critical part of the basic operation of a firewall, especial... Andrew Almond

02/12/2025

07:25 PM Bug #16043 (Feedback): The filtered states shown may include states for interfaces other than the selected interface

Applied in changeset commit:ba43ae3191b64ff05a60f1faca79a6ad0d127abc. Marcos M

06:55 PM Bug #16043 (Resolved): The filtered states shown may include states for interfaces other than the selected interface

In Diagnostics > States the option is given to select an interface for filtering the displayed states. The states dis... Marcos M

04:14 PM Bug #16019 (Feedback): Kea can unintentionally attempt to spawn multiple processes and fail

A mitigation has been added for this. Christian McDonald

03:46 PM pfSense Plus Bug #15989: Renaming an alias in MIM does not update firewall and NAT rules with the new alias name

Related:
* https://redmine.pfsense.org/issues/15932
* https://redmine.pfsense.org/issues/16083 Marcos M