Activity

30 days up to

User

Subprojects

Activity

From 02/27/2025 to 03/28/2025

03/28/2025

04:40 PM Feature #16110 (Pull Request Review): Automatically check ``Allow IP options`` when IGMP is selected: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1207 Marcos M
04:26 PM Feature #16110 (Feedback): Automatically check ``Allow IP options`` when IGMP is selected: It's not as clear with IGMPv1 but from the relevant RFCs IGMPv2 requires IP options and IGMPv3 seems to require it as... Marcos M
04:27 PM Regression #15400: IGMP packets are logged when the filter rule has logging disabled: > Is it possible to add some form of indicator in the firewall log as to why the packet was dropped?
See https://red... Marcos M

03/27/2025

09:49 PM Regression #16105: Config access error after changing an interface from DHCP to Static: Thanks for testing! A followup fix can be applied with commit:f51505bf15e7af39c909d63356089d5e247cf781. Marcos M
08:58 PM Regression #16105: Config access error after changing an interface from DHCP to Static: Still seeing this error in 25.03 after applying patch to 3/6 beta. Jay Sols
09:47 PM Revision f51505bf: Explicitly check for numeric ID: $realid may be either an empty string or null.
Followup to 8286c27ca678dbada2d205f606e76fab48885f60. Marcos M
08:50 PM Todo #15258 (Feedback): Update Gandi LiveDNS service with API changes: Fixed in commit:e329a2fbb202af69901d1c2dba7f216f81956a40. Marcos M
08:46 PM Revision e329a2fb: dyndns: update Gandi LiveDNS. Fix #15258: Co-authored-by Jasper Surmont <jasper@surmont.dev> Marcos M
06:45 PM Bug #16103 (Feedback): PPPoE WAN loses IPv4 addresses on ``IPV6CP`` ``LayerDown`` events: Thanks! Fixed in commit:e7f3a037364743a1124c589136e947ce98c1b9ed. Marcos M
06:39 PM Revision e7f3a037: Keep IPv4 addresses on IPv6 ppp-linkdown events. Fix #16103: Co-authored-by David King <8408971+strix-technica@users.noreply.github.com> Marcos M
02:52 PM Revision 90cecb66: if_pppoe: add note about required reboot when changing option: Marcos M
01:58 PM Todo #16060 (Closed): ``pkg`` no longer supports setting ``ALTABI`` manually at run-time: Luiz Souza

03/26/2025

08:47 PM pfSense Packages Feature #7000 (Closed): ntopng historical data needs to be reworked: Christian McDonald
06:14 PM pfSense Packages Feature #7000: ntopng historical data needs to be reworked: This is long dead and may be closed. Denny Page
06:05 PM pfSense Packages Bug #13432: ups driver will not start: I believe this issue should be resolved. If you are still experiencing the issue, please see
https://forum.netgate... Denny Page
06:01 PM pfSense Packages Feature #12281: Add support for Telegram/Pushover notifications: I believe this issue is resolved. Denny Page
05:59 PM pfSense Packages Bug #15845 (Resolved): UPS Settings doesn't display the full list of availabale drivers: Marcos M
05:41 PM pfSense Packages Bug #15845: UPS Settings doesn't display the full list of availabale drivers: This issue is resolved: #15891. Denny Page
05:41 PM pfSense Packages Bug #13691 (Resolved): ldpd - Title link needs updated: Jim Pingle
05:39 PM pfSense Packages Bug #13691: ldpd - Title link needs updated: This issue may be closed as complete. The issue was addressed in https://github.com/pfsense/FreeBSD-ports/commit/bc63... Denny Page
05:37 PM Revision 4ecba170: Bring in Kea enhancements from Plus: Marcos M
05:23 PM pfSense Packages Feature #15891 (Resolved): NUT driver list update: Marcos M
03:17 PM pfSense Packages Feature #15891: NUT driver list update: Hey all, this has been sitting for almost 4 months. Can someone pull this in please? Thanks. Denny Page
05:22 PM pfSense Packages Bug #15976 (Resolved): Fix ntopng listen options: Marcos M
03:15 PM pfSense Packages Bug #15976: Fix ntopng listen options: Hey all, can someone pull this in please? Thanks.
https://github.com/pfsense/FreeBSD-ports/pull/1398 Denny Page
12:57 PM pfSense Plus Bug #16106: Input validation issue with Alias network address: The problem is that when you add a trailing dot it's a valid hostname, not an IP address. Hostnames are allowed in al... Jim Pingle
12:34 PM Bug #16108 (New): LDAP bind password sent in plaintext to frontend: When an LDAP bind password is already set, this value is sent back to the user in plain text in the web UI. The field... Neo Samardzic
09:23 AM pfSense Plus Bug #16101: Kernel Panic with if_qlnxe driver loaded via kldload: I'm rather confused by this panic.
`fault virtual address = 0x0` and `instruction pointer = 0x20:0x0` pretty... Kristof Provost

03/21/2025

11:50 PM Feature #15089 (Feedback): Support LuaDNS provider: Applied in changeset commit:2c8747875db7d07da26ffca5d00b11e7792feff6. Aaron Sierra
11:43 PM Revision 41fa97a2: Merge pull request #4663 from aaron-sierra/dyndns-luadns: Marcos M
07:16 PM Bug #16102 (Feedback): syslogd fails to release file handlers: Fix cherry-picked to 2.8 and 25.03. Luiz Souza
02:36 PM Bug #16102 (Resolved): syslogd fails to release file handlers: Syslogd appears to be failing to release file handlers at rotation (or otherwise) resulting in increasing file system... Steve Wheeler
06:16 PM Bug #16103: PPPoE WAN loses IPv4 addresses on ``IPV6CP`` ``LayerDown`` events: A proposed fix is available at https://github.com/pfsense/pfsense/pull/4729 Strix Technica
05:04 PM Bug #16103 (Feedback): PPPoE WAN loses IPv4 addresses on ``IPV6CP`` ``LayerDown`` events: A dual-stack pfSense instance that uses PPP on its WAN interface (PPPoE in my case) loses its v4 address if IPV6CP sh... Strix Technica
04:07 AM Revision f178fa48: When the PPPoE client backend is changed, show the reboot message.: (cherry picked from commit 615713329278baf93d4712321d3e4a497061a315) Luiz Souza
04:02 AM Revision e0dbc5d2: Fix the last commit.: Pointy hat to: loos
(cherry picked from commit 55b33420d65aa7d47d4469a96f315fb271021967) Luiz Souza
03:59 AM Revision c59f5e21: Fix the ppp uptime with if_pppoe.: Based on a patch from Stevew.
(cherry picked from commit 240965405915259e2d724c8add11fd76dd34db18) Luiz Souza
03:59 AM Revision 98c25d78: Add the description (interface name) to the if_pppoe interfaces.: (cherry picked from commit 2cd86e498122da4b43feb041f442967efebdcdba) Luiz Souza
03:59 AM Revision aff7e91b: Change the mpd5/if_pppoe knob back to a global setting.: They cannot cooexist, so makes no sense have it as a per connection setting.
Enforce a few protections and warnings ... Luiz Souza
03:59 AM Revision 48a44422: Do not allow the selection of more than one NIC with if_pppoe.: Effectively disable the MLPPP support with if_pppoe.
(cherry picked from commit 00c6e25f2ce6d793680dbe01053ec84c7cba... Luiz Souza
03:59 AM Revision fdd8e2dd: Handle the differences in the 'Advanced Options' section for if_pppoe.: (cherry picked from commit ee4539ba7331fab0225df1ed03346adc944eb49c) Luiz Souza
03:59 AM Revision 258e764e: Change the knob to select mpd5/kernel PPPoE to a per-connection setting.: Replaces the original global setting.
Ticket: #18294
(cherry picked from commit e52a8eda6fa90e613f940553cfe438baafc7... Luiz Souza
03:59 AM Revision e45b3215: Revert "pppoe: Add knob to move it back to mpd5": This reverts commit 0bf19af7d0b9222ea24899103c64819b0d08160a.
This knob will be per connection and not a global sett... Luiz Souza
03:59 AM Revision 6af889e5: pppoe: Apply scrub mss when using if_pppoe: mpd5 has an option called tcpmssfix, on by default, that adjusts MSS
according with the interface MTU. When using if... Renato Botelho
03:59 AM Revision 363b0276: pppoe: Configure syslog: Configure syslog to save all messages starting with prefix "if_pppoe: "
to /var/log/ppp.log
(cherry picked from comm... Renato Botelho
03:59 AM Revision 0f78a966: pppoe: Configure PPPoE interface using if_pppoe: Introduce the new kernel module if_pppoe and start using it by default
to configure PPPoE client interfaces.
(cherry... Renato Botelho
03:59 AM Revision ac2eea65: pppoe: Add new pppoe-handler script: Add a new script, pppoe-handler, that will be called by devd when proper
events happen on pppoe interfaces.
(cherry ... Renato Botelho
03:59 AM Revision a5ac05e8: pppoe: Destroy PPPoE interface when using if_pppoe: Change interface_bring_down() to destroy pppoe interface instead of
dealing with mpd stuff if system is using if_pppo... Renato Botelho
03:59 AM Revision 90eda87f: pppoe: Add knob to move it back to mpd5: A new PPPoE implementation, using if_pppoe kernel module, is going to be
introduced soon and will be used by default.... Renato Botelho

03/20/2025

08:42 PM Bug #15940: Static DHCP Binding not working and DHCP Leases not showing with 24.11 Release: The problem is still there.
DHCP lease is provided sometime and other time it is not provided.
Please let me know... Shabahat Malik
08:18 PM Revision 2c874787: dyndns: Add LuaDNS provider. Implement #15089: Support the LuaDNS v1 API (https://www.luadns.com/api.html) for Dynamic
DNS updates. This complements the ACME suppor... Aaron Sierra
06:53 PM pfSense Plus Bug #16101 (New): Kernel Panic with if_qlnxe driver loaded via kldload: Customer reported that when loading the kernel driver for if_qlnxe on a QLogic 2x25GE QL41232HQCU, it causes a kernel... Kris Phillips
03:01 PM Todo #16016 (Resolved): Change AutoConfigBackup default key generation format: Jim Pingle
03:01 PM Bug #15927 (Resolved): Potential XSS in AutoConfigBackup backup list on ``services_acb.php``: Jim Pingle

03/19/2025

05:54 PM pfSense Packages Bug #16096 (Resolved): Day of week description does not reflect input validation: Description updated: https://github.com/pfsense/FreeBSD-ports/commit/0379ed9e77e6b3b262ee504769d4c7a7e5784b3f Marcos M
05:39 PM Bug #16076 (Resolved): Deleting or adding a firewall rule may result in an unexpected rule order: Marcos M
03:24 PM pfSense Docs Correction #16099 (Rejected): Interface Groups naming to Security Zones in Documentation: They are not the same concept, and that's not a change we're going to make.
They may share some similar aspects, b... Jim Pingle
12:12 AM pfSense Docs Correction #16099 (Rejected): Interface Groups naming to Security Zones in Documentation: Update the following page to indicate the modern nomenclature of 'Security Zones'
https://docs.netgate.com/pfsense... Mike Moore
03:22 PM Bug #8087: Provide Calling-Station-ID to RADIUS backed VPN connections: Erich Weiler wrote in #note-10:
> Beautiful, thank you so much! It works like a charm. This is so great. Thanks a... Brandon Verkada
01:42 PM Bug #8087: Provide Calling-Station-ID to RADIUS backed VPN connections: Beautiful, thank you so much! It works like a charm. This is so great. Thanks a million! Erich Weiler
10:27 AM Bug #8087: Provide Calling-Station-ID to RADIUS backed VPN connections: We have three patches now that do the trick:
* duofix.sh... Brandon Verkada
03:17 PM pfSense Packages Bug #16100 (Not a Bug): net-snmp config.xml format issue causing problems: That formatting is fine and doesn't cause any problems, it's been there for ages. It just means the tab text has brac... Jim Pingle
05:34 AM pfSense Packages Bug #16100: net-snmp config.xml format issue causing problems: This may just be a format inconsistency. Tried removing from user config and didn't resolve problem. Craig Coonrad
01:04 AM pfSense Packages Bug #16100 (Not a Bug): net-snmp config.xml format issue causing problems: pfSense version: 24.11
net-snmp version: 0.1.5_13
The following line observed in config.xml contains 3 square bra... Craig Coonrad
02:26 PM pfSense Plus Bug #15948: GUI times out when attempting to view large Configuration History: Jim Pingle wrote in #note-3:
> The config history on Plus also looks into ZFS BE entries, so the more boot environme... Seth Cummings
02:10 PM Revision 1c8e836c: ACB: uncheck the device key warning by default: Marcos M
09:18 AM Bug #16095 (Resolved): Firewall generates invalid rules for IPsec tunnels with descriptions containing special symbols: I tested against the latest dev version.
The issue has been fixed.
I am marking this ticket as resolved. Danilo Zrenjanin

03/18/2025

10:46 PM Revision cd3925b3: miniupnpd: Generate miniupnpd config using more explicit bools: The miniupnp config section has boolean flags that are either true with the value
'on', and are inferred to be false ... Reid Linnemann
05:44 PM Regression #16045 (Resolved): Dynamic DNS IPv6 tries to use IPv4 address: Marcos M
04:06 PM Feature #15659: Kea option for ``reservations-out-of-pool`` and associated input validation (IPv4 and IPv6): It is now easy to test these Kea options in a way that doesn't require patching the base system (and they are backed ... Christian McDonald
01:21 PM Feature #15659: Kea option for ``reservations-out-of-pool`` and associated input validation (IPv4 and IPv6): I didn't understand the real use limitations of teh options.
The most important for me is to be able to make reserva... Phil Wardt
03:38 PM Bug #16098 (Duplicate): Crash report: Duplicate of #15157
You can install the "System Patches package":https://docs.netgate.com/pfsense/en/latest/develo... Jim Pingle
03:24 PM Bug #16098 (Duplicate): Crash report: I was greeted wit a banner message that a crash of pfsense CE had occurred. Paddy Glaister

03/17/2025

10:45 PM Bug #16095 (Feedback): Firewall generates invalid rules for IPsec tunnels with descriptions containing special symbols: Applied in changeset commit:c74c5c61a51aa17a399fe5f8d25a9a183187c0e2. Marcos M
10:39 PM Bug #16095 (In Progress): Firewall generates invalid rules for IPsec tunnels with descriptions containing special symbols: Marcos M
10:34 PM Revision c74c5c61: Fix rule label for default IPsec rules. Fix #16095: Marcos M
10:09 PM Bug #8087: Provide Calling-Station-ID to RADIUS backed VPN connections: Just a followup on this item... I also would love for this to work. I can verify that @Brandon Verkada is right, it... Erich Weiler
07:15 PM Feature #16097 (New): copy dhcp static mapping: In @services_dhcp.php@ ( _Services/DHCP Server/<interface>_ ) should be very useful to me (and I suppose to many othe... Carlo Tognetti
06:26 PM pfSense Packages Feature #14630: FRR script hook for clearing states on routing changes: Fantastic, that is the guidance we we're looking for.
Can we get an update in the documentation to reflect this? Mike Moore
06:22 PM pfSense Packages Feature #14630: FRR script hook for clearing states on routing changes: I first wanted to confirm that stateful filtering worked with dynamic routing. To test, I set up FRR with BGP/BFD ove... Marcos M
11:58 AM Bug #16019: Kea can unintentionally attempt to spawn multiple processes and fail: Hello all,
I just had the same behavior on my Netgate 4200 without playing around with pfsense nor changing anything... John Doe

03/16/2025

05:38 PM Feature #12551: Add ability to set DNS resolver search domain list: Until or if ever this exists, I found that it _does_ work to encode the domain list in hex and add it under DHCP Serv... → luckman212
05:42 AM pfSense Packages Bug #15594: ERROR when IP are with " " at the start or end of address: Tested on 25.03-BETA (amd64)
built on Tue Feb 4 4:23:00 +04 2025
Looks like the issue still there aleksei prokofiev

03/15/2025

07:55 PM pfSense Packages Bug #16096: Day of week description does not reflect input validation: this seems accurate, names should not be in the tool tip for acceptable entries, I was not able to find anything othe... Jordan G
04:03 PM pfSense Packages Bug #16096: Day of week description does not reflect input validation: Marcos M wrote in #note-1:
> That functionality was removed as part of:
> https://redmine.pfsense.org/issues/13299
... Eduardo Mozart de Oliveira
07:42 PM Bug #16076: Deleting or adding a firewall rule may result in an unexpected rule order: with above patch applied (on 24.11) and MIM disabled, deleting multiple firewall rules by selecting desired rules and... Jordan G
04:02 PM Bug #16095 (Confirmed): Firewall generates invalid rules for IPsec tunnels with descriptions containing special symbols: Tested and confirmed on... Christopher Cope
03:53 PM pfSense Plus Bug #16086 (Closed): Reinstall Packages fails on a fresh install: I can confirm testing with... Christopher Cope

03/14/2025

09:18 PM pfSense Packages Bug #16096 (Confirmed): Day of week description does not reflect input validation: That functionality was removed as part of:
https://redmine.pfsense.org/issues/13299 Marcos M
08:51 PM pfSense Packages Bug #16096 (Resolved): Day of week description does not reflect input validation: Hello,
I was unable to found the repository of Cron package, so I'm reporting it here.
I was unable to use "wed" to... Eduardo Mozart de Oliveira
05:22 PM Revision 2442a02e: Fix new log preference checkboxes: Marcos M
04:21 PM Revision 81430ea6: Fix regression from 7dc6055725cd400c04ead94560cda876de3f253d: Marcos M
02:00 PM pfSense Plus Bug #15959 (Resolved): MIM GUI is unable to write IPv6 aliases: Marcos M
12:39 PM Bug #16095 (Resolved): Firewall generates invalid rules for IPsec tunnels with descriptions containing special symbols: IPSec tunnel description accepts special symbols, but creates an error in filter reload since Filter rules don't acce... Georgiy Tyutyunnik

03/13/2025

08:47 PM Revision 58e567d1: Move IPv4 link-locak firewall logs into a separate log preference. Implement #16092: Fix a type while here as well. Marcos M
08:37 PM Bug #12922: Classless static routes received on DHCP WAN can override chosen default gateway: As a note, it also showed up once Starlink was connected to the 3rd WAN port. Eduardo Silva
08:36 PM Bug #12922: Classless static routes received on DHCP WAN can override chosen default gateway: Oleksii Tucha wrote in #note-4:
> The issue still exists in 2.7.2, the patch from David works.
It is March 2025, thi... Eduardo Silva
07:16 PM Bug #15411: Hostname missing from logs in certain cases can cause the system log to display in an unexpected manner: This happens after every system upgrade. Marcos M
07:15 PM Feature #16092 (Feedback): Separate IDS/IPS and link-local firewall log entries from default block logging: Applied in changeset commit:b67a4eae7b9b815480789b08aa0c847f5689dede. Marcos M
07:15 PM Bug #16093 (Feedback): Firewall logs mark entries for ``match`` rules the same as ``pass`` rules: Applied in changeset commit:27db374dbca226f0429b1453802ff70764b3102d. Marcos M
06:53 PM Bug #16093 (Pull Request Review): Firewall logs mark entries for ``match`` rules the same as ``pass`` rules: Marcos M
06:52 PM Bug #16093 (In Progress): Firewall logs mark entries for ``match`` rules the same as ``pass`` rules: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1203 Marcos M
07:15 PM Feature #15415 (Feedback): Enhanced firewall log action information display: Applied in changeset commit:27db374dbca226f0429b1453802ff70764b3102d. Marcos M
07:11 PM Revision 53484903: Activate snort2c log preference: Followup to b67a4eae7b9b815480789b08aa0c847f5689dede. Marcos M
08:05 AM pfSense Packages Bug #15644 (Resolved): Snort Status icon disappears: I can confirm that the patch fixes the issue.
I am marking this case as resolved. Danilo Zrenjanin
07:26 AM Bug #15162 (Resolved): Adding Wake-On-LAN entry from ARP table view can incorrectly include OEM text in MAC address field: I tested the patch with the latest version 25.03, and it successfully resolves the reported issue.
I am marking th... Danilo Zrenjanin

03/12/2025

09:09 PM pfSense Packages Bug #16094 (Feedback): pfBlocker-NG null blocking SERVFAIL: https://github.com/pfsense/FreeBSD-ports/pull/1407 Marcos M
08:27 PM pfSense Packages Bug #16094 (Feedback): pfBlocker-NG null blocking SERVFAIL: The key for the dnsblDB dictionary is just q_name, meaning the same dictionary entry is used for all query types. The... Alec Fenichel
07:50 PM pfSense Packages Feature #15853 (Feedback): Add mDNS Bridge (mdns-bridge) package: This is now in dev. After it's been tested working there, it can be picked for 2.8/25.03. Marcos M
07:40 PM Revision b67a4eae: Move snort2c firewall logs into a separate log preference. Implement #16092: Marcos M
07:40 PM Revision 27db374d: Include reason for firewall log actions. Implement #15415, Fix #16093: Marcos M
07:38 PM Bug #16093 (Resolved): Firewall logs mark entries for ``match`` rules the same as ``pass`` rules: When logging is enabled for a floating match rule:
* Clicking the action icon in the firewall log does not show a ru... Marcos M
06:50 PM Feature #16092 (Pull Request Review): Separate IDS/IPS and link-local firewall log entries from default block logging: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1203 Marcos M
06:47 PM Feature #16092 (Resolved): Separate IDS/IPS and link-local firewall log entries from default block logging: On systems that use Snort/Suricata and also log the default blocking rules, the firewall logs can be very noisy due t... Marcos M
06:50 PM Feature #15415 (Pull Request Review): Enhanced firewall log action information display: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1203 Marcos M
06:41 PM Revision eb0acb5a: Show the rule for packets dropped due to IP options: When clicking the Action icon for a firewall rule log, the rule is not
shown when it's a "pass" rule that dropped the... Marcos M
06:41 PM Revision f8713e51: Refactor firewall logging preferences: Move the firewall logging preferences to a single string[] variable and
make it a global. No functional changes. Marcos M
06:41 PM Revision d050c9dc: Move log preferences to a separate form section: Marcos M
06:41 PM Revision f3899adb: Revise log preferences descriptions: Marcos M
05:08 PM Revision f5412832: Add mDNS Bridge packages: Marcos M
04:40 PM Bug #15162: Adding Wake-On-LAN entry from ARP table view can incorrectly include OEM text in MAC address field: Applied in changeset commit:3b45a8f2cdb735ce87661fde6ae14aec60ac0d2b. Christian McDonald
04:35 PM Bug #15162 (Feedback): Adding Wake-On-LAN entry from ARP table view can incorrectly include OEM text in MAC address field: Christian McDonald
02:38 PM Bug #15162 (In Progress): Adding Wake-On-LAN entry from ARP table view can incorrectly include OEM text in MAC address field: Christian McDonald
04:11 PM Revision 3b45a8f2: Strip manufacturer from MAC field passed to WoL from ARP table. Fixes #15162: Christian McDonald
02:15 PM pfSense Packages Todo #16091 (Resolved): tailscale package requires updates: The tailscale package needs to be updated with some degree of regularity.
Users are going about updating the package... Mike Moore
11:34 AM pfSense Plus Bug #13569: Restarting an OpenVPN server running on a CARP VIP in an HA cluster can disrupt unrelated TCP states: Tested on 24.11 and 25.03-RC
This issue hasn't been fixed yet. I still see TCP traffic discruption during HA failo... Azamat Khakimyanov

03/11/2025

11:36 PM Feature #15415 (In Progress): Enhanced firewall log action information display: Marcos M
08:34 PM Bug #16068 (Needs Patch): Logging of packets with IP options cannot be disabled: Unfortunately there doesn't seem to be a way to match only on the packets with IP options, hence the only way to prev... Marcos M
07:59 PM pfSense Packages Bug #15644: Snort Status icon disappears: i removed the patch and re-applied and can confirm this is working.
The only change I made was to make path strip fr... Mike Moore
07:31 PM pfSense Packages Bug #15644: Snort Status icon disappears: I'm not able to reproduce it with the fix. How exactly are you testing? Perhaps the patch is not being applied correc... Marcos M
06:06 PM pfSense Packages Bug #15644: Snort Status icon disappears: used incognito mode/private on both Chrome and Firefox. Still the same issue persists Mike Moore
04:59 PM pfSense Packages Bug #15644: Snort Status icon disappears: No - make sure it's not a cache issue by testing in a private browser session. Marcos M
04:28 PM pfSense Packages Bug #15644: Snort Status icon disappears: applied the patch but still not looking good(same). Does this require a system reboot? Mike Moore
06:43 PM pfSense Packages Regression #16090 (Resolved): Commit 96e2c21 breaks the cURL source interface setting for pfBlockerNG: Fixed with "b294b91fd751ff48fe3ba734d446402856a34370":https://github.com/pfsense/FreeBSD-ports/commit/b294b91fd751ff4... Marcos M
05:56 PM pfSense Packages Regression #16090 (Resolved): Commit 96e2c21 breaks the cURL source interface setting for pfBlockerNG: This commit:
https://github.com/pfsense/FreeBSD-ports/commit/96e2c2141cf62c6042cf096ce9d6b82309a2ee43#diff-dd5b940... Charles Hamilton
04:33 AM pfSense Packages Feature #16089: Add packages for Zabbix 7.2 agent and proxy: PR to add the Zabbix 7.2 packages:
https://github.com/pfsense/FreeBSD-ports/pull/1412
PR to force SQLITE instead ... Andrew Almond
04:04 AM pfSense Packages Feature #16089 (Confirmed): Add packages for Zabbix 7.2 agent and proxy: Zabbix 7.2 was released in Dec 2024 and it would be nice to start testing it with pfSense.
I will submit a PR shortly. Andrew Almond
04:02 AM pfSense Packages Feature #16075: Add Zabbix 7.0 packages for 24.03: The PR as already been merged into pfSense/FreeBSD-ports. The comment in 15548 says:
> Jim Pingle wrote in #note-1... Andrew Almond

03/10/2025

10:08 PM pfSense Packages Bug #15644 (Feedback): Snort Status icon disappears: Fixed with "7e461be2dcbba9ca47324d746cdd866d93311621":https://github.com/pfsense/FreeBSD-ports/commit/7e461be2dcbba9c... Marcos M
09:48 PM Revision fd13dd06: Remove references to old CSS classes: Marcos M
09:01 PM pfSense Plus Bug #16086 (Incomplete): Reinstall Packages fails on a fresh install: Unable to reproduce using the latest Netgate Installer version. Marcos M
06:10 PM Bug #15679 (Resolved): Multicast with intel NIC: The upstream commit will be in the 25.03 release. Marcos M
05:17 PM Bug #15679: Multicast with intel NIC: Any update or a patch being worked on for this since this is merged to the upstream now? I still did not update to 24... Emre K
05:34 PM Bug #16076 (Feedback): Deleting or adding a firewall rule may result in an unexpected rule order: A fix has been committed for an issue with Ethernet rules ("details on the forum":https://forum.netgate.com/post/1208... Marcos M
05:13 PM Revision cd2d21a6: Refactor filter_rules_compare(): Improve readability and avoid code duplication. Marcos M
04:38 PM pfSense Packages Feature #9141: FRR xmlrpc: Hello, no updates on my side, I think that unless we come up with a pull request, there's no chance to have a fix on ... Julien Bennet
03:02 PM pfSense Packages Feature #9141: FRR xmlrpc: Looking to see if there is an update available? Any hope in getting config sync possible with FRR? Mike Moore
01:02 PM pfSense Plus Bug #16088 (Duplicate): crash after ISP rebooted the fibre modem port: That is this: https://redmine.pfsense.org/issues/14431 Steve Wheeler
10:05 AM pfSense Plus Bug #16088 (Duplicate): crash after ISP rebooted the fibre modem port: ISP rebooted the NBN port (based in Australia)
Router crashed and had to reboot
* NBN is the National Broadband N... Nicholas Alphonso
02:01 AM pfSense Packages Feature #13643: FRR - Display what BGP is advertsing to its neighbors: Just wondering if any further thought was given to this?
Mike Moore
01:53 AM Feature #16087 (New): cancel edit of firewall rule: When creating or editing a firewall or nat rule, provide the ability to cancel at the bottom next to the 'SAVE' butto... Mike Moore

03/09/2025

06:02 PM Feature #9038: Live view of any log file: This would be a very helpful feature. I assume its possible since there is a live view of logs when updating packages... Gary Johnson
05:53 AM pfSense Packages Bug #15644: Snort Status icon disappears: Tested on pfSense 25.03 Beta and snort 4.1.6_24
The issue still persists. aleksei prokofiev
01:13 AM pfSense Plus Bug #16086 (Closed): Reinstall Packages fails on a fresh install: Tested on ... Christopher Cope

03/08/2025

11:56 PM Feature #16085 (New): multiple objects in source or destination fields: I thought i created a ticket for this but i could not find it.
The feature is for the ability to add multiple IPs ... Mike Moore
11:51 PM pfSense Docs Correction #16084 (New): Snort Pass Lists¶ screenshot does not show passlist: As the subject states.
https://docs.netgate.com/pfsense/en/latest/packages/snort/passlist.html
The last photo i... Mike Moore
05:41 PM Bug #16019: Kea can unintentionally attempt to spawn multiple processes and fail: I ran into this on 1 6100. I recently assigned an interface to add a new network and enabled the dhcp server on the i... Jason Montleon

03/07/2025

08:51 PM pfSense Packages Feature #14468 (Rejected): pass along ntopng professional license key: Jim Pingle
08:50 PM pfSense Packages Todo #15294 (Rejected): Naming “Custom Name” of Interface the same as “Interface” on pfSense in “Interface assignment”: Jim Pingle
05:51 PM pfSense Packages Bug #16083 (Resolved): SID MGT modifications remove all conf files: This shares the same root cause as https://redmine.pfsense.org/issues/15989 which has been fixed for the upcoming rel... Marcos M
04:29 PM pfSense Packages Bug #16083 (Resolved): SID MGT modifications remove all conf files: https://forum.netgate.com/topic/196641/sid-mgmt-gui-issue
Any changes to SID MGMT (creating/modifying existing con... Mike Moore
03:40 PM Bug #16076 (Resolved): Deleting or adding a firewall rule may result in an unexpected rule order: Marcos M
03:15 PM Bug #16081 (Feedback): Panic accessing ``sysctl`` OID ``net.inet.ip.nhdispatch`` with an INVARIANTS kernel: This is an assertion, triggered by incorrect sbuf use.
I've pushed the fix to both the plus-devel-main and the 25.03... Kristof Provost
06:35 AM pfSense Packages Feature #16082 (New): Change RefreshActiveChecks allowed values for Zabbix Agent 7.0: Zabbix Agent 6.4 and up support values 1-86400 (default 5) for the RefreshActiveChecks parameter.
Zabbix Agent 6.0 a... Andrew Almond

03/06/2025

11:20 PM Bug #16063 (Resolved): PHP error after saving NTP settings with an interface selected: Marcos M
08:59 PM pfSense Packages Feature #15853 (Pull Request Review): Add mDNS Bridge (mdns-bridge) package: Marcos M
08:58 PM pfSense Packages Feature #16070 (Pull Request Review): Add ANDwatch package: Marcos M
02:47 PM Bug #16081: Panic accessing ``sysctl`` OID ``net.inet.ip.nhdispatch`` with an INVARIANTS kernel: In fact this is only triggered in a debug/invariants kernel.
Can be triggered by running:... Steve Wheeler
02:36 PM Bug #16081 (Feedback): Panic accessing ``sysctl`` OID ``net.inet.ip.nhdispatch`` with an INVARIANTS kernel: Querying net.inet.ip.ip_direct_nh_dispatch via sysctl in a kernel with INVARIANTS set results in a panic:... Steve Wheeler
02:01 PM pfSense Plus Bug #16079 (Resolved): Separators for Ethernet rules span past the actions column: Marcos M
01:52 PM pfSense Plus Bug #16080 (New): Issues Upgrading from 24.03 to 24.11 SG-1100 Atheros 9280: I receive the below crash when upgrading my SG-1100 to 24.11. See attached upgrade log.
Refer to: https://forum.ne... Nick K

03/05/2025

08:12 PM Feature #2358 (Feedback): NAT64 support: Marcos M
08:05 PM Revision e1885867: Add GUI support for NAT64 rules with route-to: https://redmine.pfsense.org/issues/2358 Marcos M
05:05 PM Bug #16076: Deleting or adding a firewall rule may result in an unexpected rule order: There's an additional issue here when adding a rule at the top (i.e. when using the "up arrow Add" button) - the rule... Marcos M
04:32 PM Revision 6664dd6d: Insert rules at the correct index when adding it at the top. Fix #16076: Marcos M
02:54 PM Revision 1875c89d: Fix the mount(8) return value checking.: With the fix the system will not try to remount a successful mounted slice
with another file system type.
Restore th... Luiz Souza
01:12 AM Bug #15162: Adding Wake-On-LAN entry from ARP table view can incorrectly include OEM text in MAC address field: this still happens with the field for MAC address when creating a WOL entry from Diagnostics>ARP Table menu using pfS... Jordan G

03/04/2025

11:01 PM Bug #16029 (Pull Request Review): When using LDAP group filter, group has to be in the same LDAP container as the user: https://github.com/pfsense/pfsense/pull/4725 Marcos M
09:04 PM pfSense Plus Bug #16079 (Resolved): Separators for Ethernet rules span past the actions column: Separators created under the Ethernet firewall rules tab span an extra column on the rules table. Marcos M
07:48 PM Bug #15643: Deleting one pre-installed package may delete other pre-installed packages: This is resolved with the Netgate Installer version 1.1. Marcos M
06:52 PM pfSense Plus Feature #14945: Allow IPsec VTI ``ipsecX`` interfaces to be added to interface groups: Interface Groups is akin to Security Zones so coming up with a consistent policy for my IPsec VTI interfaces would be... Mike Moore
06:38 PM Revision d801b01c: Fix typo in upgrade_238_to_239(): Marcos M
11:06 AM Feature #15904: Add native support for Captive Portal API (RFC8908): RE: the change of category from DHCP to captive portal.
As the captive portal is already associated with an interfac... Dale Harron
08:46 AM Feature #16078 (New): Add a option to round robin system DNS: I have diagnostic monitoring on my DNS severs and I noticed when I have ASN reporting turned on in pfBlocker my pfSen... Alex Simmons
04:02 AM pfSense Packages Feature #16075: Add Zabbix 7.0 packages for 24.03: Jordan G wrote in #note-1:
> that error can be indicative of a library dependency issue which one would expect when ... Andrew Almond

03/03/2025

11:24 PM Regression #15898 (Resolved): Changes to the ``admins`` user group are not synced to the secondary node: Marcos M wrote in #note-3:
> Applied in changeset commit:6ad2d8ff9f7d954f92c1dc0163b38a5cf2fa802b.
Tested. Succes... Craig Coonrad
10:00 PM Regression #15898 (Feedback): Changes to the ``admins`` user group are not synced to the secondary node: Applied in changeset commit:6ad2d8ff9f7d954f92c1dc0163b38a5cf2fa802b. Marcos M
11:18 PM Bug #16076 (Feedback): Deleting or adding a firewall rule may result in an unexpected rule order: This regressed after the fix for https://redmine.pfsense.org/issues/15935 which added the call to @filter_rules_sort(... Marcos M
11:15 PM Bug #16076 (In Progress): Deleting or adding a firewall rule may result in an unexpected rule order: Marcos M
11:10 PM Revision c181ebe1: Add a sequence number to each rule during rule sort. Fix #16076: The 'for' loop first checks if the rule at that iteration exists and
breaks if not. When the rules array contains a g... Marcos M
09:39 PM Revision 6ad2d8ff: Sync admin group changes. Fix #15898: The admin group needs to be removed and readded for its settings to sync.
This reverts commit 3e0facb20fa46a13bf7b70... Marcos M
05:43 PM Feature #15562: Add support for OpenID: This is a desired feature of mine for using our OIDC provider as the primary login for users including all sysadmin/IT. Anonymous
01:10 PM Bug #16077 (Incomplete): dpinger not reliable - ping request/replies: There isn't nearly enough information here to identify any specific problem. It's most likely _not_ dpinger but some... Jim Pingle
09:04 AM Bug #16077 (Incomplete): dpinger not reliable - ping request/replies: The running dpinger process, seems to be stall for no reason, hence reporting the gateway as down, but it is not:
... Stefan Bauer
08:57 AM pfSense Packages Bug #15939 (Resolved): An empty IPv4/v6 and DNSBL entry is added if it’s not saved: Tested on 25.07-DEV (built on Fri Feb 28 6:00:00 UTC 2025)
When I pressed Add IPv4/IPv6 and DNSBL group entries an... Azamat Khakimyanov

03/02/2025

05:54 AM Bug #16076: Deleting or adding a firewall rule may result in an unexpected rule order: Sorry, 2.png should = 1,2,3,4,5,6,7*,8,9,10 Craig .
05:51 AM Bug #16076 (Resolved): Deleting or adding a firewall rule may result in an unexpected rule order: There seems to be an issue with firewall rules being re-ordered after using the red (multiple) "Delete" button, even ... Craig .
04:55 AM Bug #16073: Nested aliases used with OpenVPN do not always load routes: Tested on 24.11, I can confirm this. aleksei prokofiev
04:05 AM Bug #16063: PHP error after saving NTP settings with an interface selected: with patch applied changing ntp can be changed between single or multiple server(s) without issue. looks good from here Jordan G
03:25 AM pfSense Packages Feature #16075: Add Zabbix 7.0 packages for 24.03: that error can be indicative of a library dependency issue which one would expect when installing packages with the b... Jordan G

03/01/2025

09:45 PM pfSense Plus Bug #16037 (Incomplete): New CoDel limiters are no longer created with any default values: Jordan G
09:44 PM pfSense Plus Bug #16037: New CoDel limiters are no longer created with any default values: thanks for confirming that it seems to be working for you now and please feel free to update if you are able to isola... Jordan G
06:29 PM pfSense Packages Feature #14630: FRR script hook for clearing states on routing changes: Can we get some guidance from the developers on this.
What should be the proper way of handling this? Mike Moore
05:05 PM pfSense Packages Bug #12444 (Closed): ntopng throws errors when viewing single host: Christopher Cope
05:03 PM pfSense Packages Bug #12260 (Closed): Update popup and version missmatch?: Christopher Cope
05:02 PM pfSense Packages Bug #9079 (Closed): High CPU usage of ntopng even during IDLE and no network traffic: Christopher Cope
05:01 PM pfSense Packages Bug #11530 (Closed): ntopng 4.2 needs to be updated to 4.3, Bug when accessing a host for details: Christopher Cope
07:10 AM Bug #16063: PHP error after saving NTP settings with an interface selected: I was able to reproduce this on 24.11, the patch appears to fix it. Lev Prokofev
05:27 AM pfSense Packages Feature #16075 (Rejected): Add Zabbix 7.0 packages for 24.03: The Zabbix 7.0 packages were added for 24.11 in "15548":https://redmine.pfsense.org/issues/15548 and work great.
The... Andrew Almond

02/28/2025

10:33 PM pfSense Packages Bug #10783 (Closed): NtopNG is very unstable on arm64: Marcos M
10:18 PM pfSense Packages Bug #10783: NtopNG is very unstable on arm64: This issue is stale and can be closed Denny Page
10:28 PM pfSense Packages Bug #15115 (Closed): NUT Package Functionality: Marcos M
10:04 PM pfSense Packages Bug #15115: NUT Package Functionality: This issue is stale and can be closed. Denny Page
10:26 PM pfSense Packages Bug #13972 (Closed): nut on pfsense spams console every 5 minutes "UPS ups is unavailable" against cyberpower snmp rmcard205: Marcos M
10:07 PM pfSense Packages Bug #13972: nut on pfsense spams console every 5 minutes "UPS ups is unavailable" against cyberpower snmp rmcard205: This issue is stale and can be closed Denny Page
10:26 PM pfSense Packages Bug #13886 (Closed): NUT Server Package: Marcos M
10:08 PM pfSense Packages Bug #13886: NUT Server Package: This issue is stale and can be closed Denny Page
10:26 PM pfSense Packages Bug #9143 (Closed): ntopng not displaying values in historical correctly: Marcos M
10:08 PM pfSense Packages Bug #9143: ntopng not displaying values in historical correctly: This issue is stale and can be closed Denny Page
10:18 PM pfSense Packages Bug #9079: High CPU usage of ntopng even during IDLE and no network traffic: This issue is very stale and can be closed Denny Page
10:17 PM pfSense Packages Bug #11530: ntopng 4.2 needs to be updated to 4.3, Bug when accessing a host for details: This issue is stale and can be closed Denny Page
10:16 PM pfSense Packages Bug #12260: Update popup and version missmatch?: This issue is stale and can be closed Denny Page
10:16 PM pfSense Packages Bug #12444: ntopng throws errors when viewing single host: This issue is stale and can be closed Denny Page
10:16 PM pfSense Packages Feature #14468: pass along ntopng professional license key: The pfSense ntopng package uses the open source variant of ntopng. In order to use the commercial version, you have t... Denny Page
10:14 PM pfSense Packages Todo #15294: Naming “Custom Name” of Interface the same as “Interface” on pfSense in “Interface assignment”: The interface assignments you are referring to are internal to ntopng. pfSense has no control of, or insight into, as... Denny Page
10:11 PM pfSense Packages Feature #15960: NTOP Port Configuration in WebUI feature request: Neither http-port nor https-port should not be added to the advanced configuration section. The http/https setting fo... Denny Page
10:06 PM pfSense Packages Bug #14951: Tripplite Smart1500LCD UPS: This issue is stale and can be closed Denny Page
07:07 PM pfSense Plus Regression #16074 (Not a Bug): States view doesn't populate Rule ID field if opening a new tab: It's not a bug. Clicking the link is the only intended behavior there as that specific link has the @usepost@ attribu... Jim Pingle
07:01 PM pfSense Plus Regression #16074 (Not a Bug): States view doesn't populate Rule ID field if opening a new tab: There is an inconsistency when viewing the Diagnostics > States page. For example, on the Firewall > LAN page, when ... Steve Y
06:30 PM Feature #15776: System Aliases for various reserved networks: Done with commit:15709960f5057fe0b1281a645a41b8958a8926a8. Marcos M
06:29 PM Revision 15709960: Add combined IPv4/6 system aliases: https://redmine.pfsense.org/issues/15776 Marcos M
06:17 PM pfSense Packages Feature #14630: FRR script hook for clearing states on routing changes: For anyone still tracking, there is a solution as documented in forum post - https://forum.netgate.com/topic/196577/... Mike Moore
05:48 PM Feature #16038 (Feedback): Add options for custom dynamic DNS update frequencies and disabling caching: Without the cache, there would be a lot of unnecessary DDNS requests. Setting the default behavior to force would int... Marcos M
05:46 PM Bug #16046: Dynamic DNS IP address may not be updated after changing the interface of a Dynamic DNS entry: Yes, and no. I've commented with more details on the relevant redmine. Marcos M
04:54 PM Bug #16046: Dynamic DNS IP address may not be updated after changing the interface of a Dynamic DNS entry: I opened redmine "16038":https://redmine.pfsense.org/issues/16038 to address a similar issue of dynamic DNS IP addres... Andrew Almond
04:38 PM Bug #13624: Only one alias in local network of OpenVPN Server works in 2.6.0: Kris Phillips wrote in #note-8:
> Reproduced this with a customer. The root of the issue appears to be that OpenVPN... Chris W
04:36 PM Bug #16073 (New): Nested aliases used with OpenVPN do not always load routes: Given:
- Alias @AliasParent@ contains various other aliases @AliasChild1@, @AliasChild2@, etc., however all children... Chris W
03:21 PM pfSense Docs Correction #16072 (New): Disable reply-to for advanced routing scnerios: This is related to redmine #14630
Today within the forums, a solution was found - https://forum.netgate.com/topic/... Mike Moore
04:48 AM Feature #16071 (New): SAML/SSO authentication for Captive Portal and OpenVPN: I've been looking for a way to allow my users to authenticate via Entra ID SSO in Captive portal and for VPN access t... Ajan T

02/27/2025

11:43 PM pfSense Packages Feature #16070 (Pull Request Review): Add ANDwatch package: ANDwatch is a modern replacement for arpwatch. When contrasted with arpwatch, ANDwatch offers the following enhanceme... Denny Page
11:14 PM Revision c47f6dc2: Bump the default go version to 1.23: Brad Davis
09:13 PM Bug #16069 (Resolved): The monitoring IP address for dynamic gateways may be unexpectedly routed via a different gateway: The reported issue should be fixed with commit:3b5f0ecbfc2d952891dbe227e9afbf9d2ed0ebd4. Marcos M
09:13 PM Bug #16069 (Resolved): The monitoring IP address for dynamic gateways may be unexpectedly routed via a different gateway: When the option @Static route@ is unchecked, it's expected that the monitoring IP address for a dynamic gateway is al... Marcos M
09:09 PM Bug #16068 (Needs Patch): Logging of packets with IP options cannot be disabled: Logging of packets with options (IGMP) was added/fixed as mentioned in redmine "15400":https://redmine.pfsense.org/is... Andrew Almond
09:05 PM Feature #15904: Add native support for Captive Portal API (RFC8908): The implementation of this is exceptionally simple:
Construct the same information strings as you would enter into... Dale Harron
08:57 PM Todo #15429 (Resolved): Clarify descriptions for gateway recovery options: I've updated the option descriptions:
* commit:0c43c9f7398c7b3ab234ac831eda3a5db85dc240
* commit:7d2ad4a05139669fbf... Marcos M
08:44 PM Revision 3b5f0ecb: Fall back to routing via the interface for dynamic gateway monitoring IPs: It's possible that when setup_gateways_monitor() is called, the gateway
address is not yet available. To avoid routin... Marcos M
08:35 PM Regression #16031 (Resolved): Some older ISA-based uart consoles do not function on development snapshots around 25.03 or later: Note added to 25.03 docs: https://gitlab.netgate.com/docs/pfSense-docs/-/commit/d78ded2d4e13701fd557522d7a8ccb8604d83... Jim Pingle
07:44 PM Bug #16066 (Duplicate): When I configure the captive portal as below, captive Portal gives a used port number.: Marcos M
11:58 AM Bug #16066 (Duplicate): When I configure the captive portal as below, captive Portal gives a used port number.: here dont checking zoneid if exist
https://github.com/pfsense/pfsense/blob/ec956d343e6cd2db69caa23ba647a19d18fd... sezer h
05:47 PM pfSense Plus Bug #15994 (Resolved): Backup configuration cache is not cleaned automatically: Marcos M
12:02 PM Feature #16067 (New): OpenVPN tls-crypt-v2 support: Customer asks for native support of tls-crypt-v2 feature in future pfSense releases.
Currently he managed to make it... Georgiy Tyutyunnik
11:37 AM Feature #15776: System Aliases for various reserved networks: Jim Pingle wrote in #note-7:
> This looks good but I can't help wondering if we should have "46" variants with all o... Jens Groh
03:44 AM Bug #16022: Static lease DNS records are incorrectly removed when backing lease expires: Is there a system patch available for this issue by chance? Thanks Denny Page
03:38 AM Regression #15898: Changes to the ``admins`` user group are not synced to the secondary node: Version: 24.11
I observed this as well on several HA deployments.
Since root is not in the admins group on the... Craig Coonrad

Also available in: Atom

Project

General

Profile

pfSense

Activity

Activity

03/28/2025

03/27/2025

03/26/2025

03/25/2025

03/24/2025

03/23/2025

03/22/2025

03/21/2025

03/20/2025

03/19/2025

03/18/2025

03/17/2025

03/16/2025

03/15/2025

03/14/2025

03/13/2025

03/12/2025

03/11/2025

03/10/2025

03/09/2025

03/08/2025

03/07/2025

03/06/2025

03/05/2025

03/04/2025

03/03/2025

03/02/2025

03/01/2025

02/28/2025

02/27/2025