Activity

30 days up to

User

Subprojects

Activity

From 03/06/2025 to 04/04/2025

04/04/2025

08:01 PM Todo #15799 (Rejected): Remove unnecessary functions.inc.php and functions.php imports in widget files: Jim Pingle
08:00 PM Feature #15221 (Pull Request Review): Make System Tunables table sortable: Jim Pingle
07:58 PM Todo #15798 (Rejected): Remove shellCommand dependency: See notes on PR. Jim Pingle
06:30 PM pfSense Docs Todo #16053 (Closed): Reinstalling pfSense Plus Software Determine Target Drive does not include USB storage: Added info about USB drive targets: https://gitlab.netgate.com/docs/pfsense-platforms/-/commit/19ab1a32c4b33826b21061... Jim Pingle
05:34 PM Bug #16125: "Interface Bound States" dosn't work properly with port forwarding: Jim Pingle wrote in #note-1:
> That is almost certainly a misconfiguration on your system, such as not having a gate... Nazar Mokrynskyi
03:49 PM Bug #16125 (Not a Bug): "Interface Bound States" dosn't work properly with port forwarding: That is almost certainly a misconfiguration on your system, such as not having a gateway defined on the second WAN se... Jim Pingle
11:58 AM Bug #16125 (Not a Bug): "Interface Bound States" dosn't work properly with port forwarding: I have a gateway group with two interfaces (WAN and WAN2), with "Floating States" it works properly and I can reach m... Nazar Mokrynskyi
05:06 PM pfSense Plus Bug #16123: Advertisements from a GUA are ignored: I'm also seeing this same issue, I am using 25.03 BETA. Unfortunately I can currently only recreate this issue when ... John S
02:01 AM pfSense Plus Bug #16123: Advertisements from a GUA are ignored: Appreciate the reply, Marcos.
> NA's are not necessarily restricted to LL addresses and the default ruleset all... quiet lion
04:55 PM Regression #16126 (Feedback): Captive Portal status page lists empty selections when multiple portals exist: Applied in changeset commit:010b97a975c60efd2a889d8081d3c6bfadda5963. Marcos M
04:44 PM Regression #16126 (Waiting on Merge): Captive Portal status page lists empty selections when multiple portals exist: Marcos M
04:31 PM Regression #16126 (Resolved): Captive Portal status page lists empty selections when multiple portals exist: # Create two or more Captive Portals
# Go to Status > Captive Portal
# The drop-down selection list shows blank ent... Marcos M
04:34 PM Revision 010b97a9: Update Status > Captive Portal with correct config path. Fix #16126: While there, show the zone description as well. Marcos M
02:10 AM pfSense Packages Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy: Any updates on this? Is there anything we can do to get Zabbix 7 proxy package in CE? Alex Diamantopulo

04/03/2025

09:14 PM pfSense Plus Bug #16106 (Not a Bug): Input validation issue with Alias network address: The current behavior is intended (not a bug).
Additional input validation could be considered as a feature request. ... Marcos M
08:37 PM pfSense Plus Bug #16106: Input validation issue with Alias network address: Jim Pingle wrote in #note-1:
> The problem is that when you add a trailing dot it's a valid hostname, not an IP addr... Steven C
08:38 PM Bug #16122: Interfaces=>Vlans, ipsecX interfaces are listed in the VLAN parent interface config dropdown menu.: Additional info for reference:... Marcos M
08:37 PM Bug #16111: Set Advanced or standard settings deleted all ipv4 host routes on primary node in HA Cluster: I'm unable to reproduce this between two HA pairs using BGP over VTI; all DUT's were on 25.03. I suggest testing on 2... Marcos M
02:18 PM Bug #16111: Set Advanced or standard settings deleted all ipv4 host routes on primary node in HA Cluster: Hello,
Sorry for the late response...
tThe problem is definitely reproducible. I also discussed it with the PFS... Robert Gladewitz
08:04 PM pfSense Plus Bug #16123 (Incomplete): Advertisements from a GUA are ignored: NA's are not necessarily restricted to LL addresses and the default ruleset allows this. I'm unable to reproduce the ... Marcos M
12:59 PM pfSense Plus Bug #16123: Advertisements from a GUA are ignored: NB: Adding a static route to the first v6 hop allows the NDP to be inserted:
ndp -a
2a02:fb8::11 ... quiet lion
12:47 AM pfSense Plus Bug #16123 (Not a Bug): Advertisements from a GUA are ignored: ISP: Gigaclear (UK)
*Description:*
After exactly 5 minutes v6 connectivity will die. Prefixes are still present... quiet lion
05:42 PM Bug #16124 (New): Kernel Panic on PCI WiFi Passthrough (AC7265): Kernel Panic on ESXi-8.0U3d-24585383-standard if PCI (Passthrough) device is assigned to pfSense:
Dual Band Wirele... Giampiero Di Pietrantonio
04:13 PM Feature #15415 (Resolved): Enhanced firewall log action information display: Works great with that change, now the redundant single associated rule is hidden, but it still shows if there are mul... Jim Pingle
03:55 PM Feature #15415: Enhanced firewall log action information display: Done with commit:823a344d6bbef2a598becaa1820da9981e6a0748 Marcos M
03:53 PM Revision 9be17707: dyndns: add some error handling: Marcos M
03:40 PM Revision 823a344d: Omit matched rule from associated rules in firewall logs: Followup to 738d2703ec4f483ea2d5038d4d6faa2f26a921b2. Marcos M

04/02/2025

07:12 PM Feature #15415: Enhanced firewall log action information display: Looks good with that change applied.
One possible improvement might be to suppress the "associated rules" output i... Jim Pingle
04:56 PM Bug #16122 (New): Interfaces=>Vlans, ipsecX interfaces are listed in the VLAN parent interface config dropdown menu.: If the system has configured IPsec VTI, the "ipsecX" interface is listed in the dropdown menu of the VLAN parent inte... Lev Prokofev
04:25 PM pfSense Plus Bug #16106: Input validation issue with Alias network address: When Save is clicked, the system could compare the value with the trimmed value but display a yellow warning at the t... Andrew Almond
04:23 PM pfSense Packages Bug #16120 (Confirmed): Zebra RIB doesn't reflect the removal of the static routes until the restart of service: Test environment:
BGP connection with peer 172.32.0.3
Peer advertises the route 172.21.100.0/24
Static route fo... Lev Prokofev
02:13 PM Revision 60f9f432: Stop building Zabbix 5.x ports as they will be EoL in May: https://www.zabbix.com/life_cycle_and_release_policy Brad Davis
02:10 PM Revision a3671d9b: Bump to 2.9.0-DEVELOPMENT: Brad Davis
02:04 PM Bug #16117: DYNDNS using the wrong source interface if Firewall State Policy is set to Interface Bound States: Hello Marcos, thanks for answering.
I'll try to simulate that in my lab, I'll install a new NIC in my server to ma... Marcelo Cury
01:24 PM Bug #16119 (Incomplete): Cannot Find the pool label for 'pfsense': There is not enough information here to say for sure what is happening in your environment. This site is not for supp... Jim Pingle
08:06 AM Bug #16119: Cannot Find the pool label for 'pfsense': System running as VM on an Uraid Server Athanasios Chatzi
08:02 AM Bug #16119 (Incomplete): Cannot Find the pool label for 'pfsense': After upgrade from console and restart , the system is unable to start , with error ,
Solaris: NOTICE: Cannot find ... Athanasios Chatzi
07:14 AM Bug #16073: Nested aliases used with OpenVPN do not always load routes: I've verified every time I reboot the firewall, OpenVPN configuration contains the alias instead of the alias values.... Gerard Alcorlo

04/01/2025

10:27 PM Bug #16118 (New): Expand view of system generated alias in GUI: Expand preview of what is in the system generated alias. Currently you can not view what is in a long alias list of s... Mike Moore
08:27 PM Bug #16117 (Ready To Test): DYNDNS using the wrong source interface if Firewall State Policy is set to Interface Bound States: Please re-test on 2.8.0-BETA - there have been various fixes related to the issue. Marcos M
04:39 PM Bug #16117: DYNDNS using the wrong source interface if Firewall State Policy is set to Interface Bound States: Just a fix to this section:
What actions I did to fix the issue ?
Changed Firewall State Policy from Interface ... Marcelo Cury
04:04 PM Bug #16117 (Ready To Test): DYNDNS using the wrong source interface if Firewall State Policy is set to Interface Bound States: pfSense 2.7.2, all patches applied.
DYNDNS provider -> DUCKDNS
Default gateway of the firewall is a Gateway group i... Marcelo Cury
07:55 PM Bug #16116 (Feedback): Potential XSS in Wake on LAN page and widget: Applied in changeset commit:6a92af14584d22f077e1421e952674f880cd5b6c. Jim Pingle
07:25 PM Bug #16116: Potential XSS in Wake on LAN page and widget: Updated POC Jim Pingle
07:22 PM Revision 6a92af14: Validation and output encoding of WOL interface. Fixes #16116: Jim Pingle
07:13 PM Bug #16102 (Resolved): syslogd fails to release file handlers: Marcos M
07:11 PM Bug #16093: Firewall logs mark entries for ``match`` rules the same as ``pass`` rules: Should be fixed now - see https://redmine.pfsense.org/issues/15415#note-14 Marcos M
07:09 PM Bug #16046 (Resolved): Dynamic DNS IP address may not be updated after changing the interface of a Dynamic DNS entry: Marcos M
07:09 PM Bug #16043 (Resolved): The filtered states shown may include states for interfaces other than the selected interface: Marcos M
07:04 PM Feature #15776 (Resolved): System Aliases for various reserved networks: Marcos M
07:03 PM Bug #15572 (Rejected): Disabling DNSSEC should also disable Harden DNSSEC Data: I think the input validation is sufficient as-is - additional details can be left to the docs if needed. Marcos M
06:55 PM Feature #15321 (Resolved): Kea DHCP Custom Configuration Support (IPv4 and IPv6): Marcos M
06:54 PM Bug #14605 (Resolved): Dynamic DNS uses the default gateway interface instead of the specified interface: Marcos M
06:52 PM Bug #12938 (Resolved): Incorrect warning from ``radvd`` about ``AdvRDNSSLifetime`` value: Marcos M
06:35 PM Bug #16115 (Feedback): Potential XSS in IPsec Phase 1: Applied in changeset commit:0ff75cd0b9fb14c04c94c3585831a9f669be0a5d. Jim Pingle
06:30 PM Bug #16115: Potential XSS in IPsec Phase 1: Updated POC Jim Pingle
06:26 PM Revision 0ff75cd0: Validation and output encoding of IPsec P1 interface. Fixes #16115: Jim Pingle
06:07 PM Feature #11177 (Resolved): Improve Dynamic DNS client IPv6 support: Marcos M
05:46 PM Feature #2358 (Resolved): NAT64 support: Marcos M
05:33 PM Bug #13662 (Resolved): Setting a limiter queue length greater than 100 prevents the limiter from loading: Marcos M
05:27 PM Feature #15808 (Resolved): PREF64 support in Router Advertisements: Marcos M
05:18 PM Todo #15258 (Resolved): Update Gandi LiveDNS service with API changes: Marcos M
05:02 PM Todo #16013 (Resolved): AutoConfigBackup code cleanup and GUI refresh: Marcos M
04:55 PM Bug #16114 (Feedback): Potential XSS in Firewall Schedules: Applied in changeset commit:dfc70e51d556d8c1724bfc7f1fd5fe4b73faab3b. Jim Pingle
04:47 PM Bug #16114: Potential XSS in Firewall Schedules: Updated POC. Jim Pingle
04:20 PM Revision dfc70e51: Improve validation of Firewall Schedules. Fixes #16114: Jim Pingle

03/31/2025

09:06 PM Feature #15415 (Feedback): Enhanced firewall log action information display: The following splits the rules found into "Matched Rule" and "Associated Rules". The matched rule shows the closest m... Marcos M
02:13 PM Feature #15415 (In Progress): Enhanced firewall log action information display: Found a hiccup with the current output.
Sometimes a rule in the rules.debug gets expanded into multiple rules in p... Jim Pingle
08:52 PM Revision 738d2703: Improve firewall log action information display: Split the rules found into "Matched Rule" and "Associated Rules". The
matched rule shows the closest match of the rul... Marcos M
08:52 PM Revision bf84ef5b: Handle PHP error with PPP interfaces: Marcos M
06:19 PM Bug #16116: Potential XSS in Wake on LAN page and widget: Attached is a small proof of concept script which can trigger the problem. Ensure there is no WOL entry named "XSS Te... Jim Pingle
06:17 PM Bug #16116 (Resolved): Potential XSS in Wake on LAN page and widget: The page at @services_wol_edit.php@ does not perform sufficient validation on the @interface@ value submitted by user... Jim Pingle
06:13 PM Bug #16115: Potential XSS in IPsec Phase 1: Attached is a small proof of concept script which can trigger the problem. Ensure there is no IPsec Phase 1 named "XS... Jim Pingle
06:12 PM Bug #16115 (Resolved): Potential XSS in IPsec Phase 1: The page at @vpn_ipsec_phase1.php@ does not perform sufficient validation on the @interface@ value submitted by users... Jim Pingle
06:08 PM Bug #16114: Potential XSS in Firewall Schedules: Attached is a small proof of concept script which can trigger the problem. Ensure there is no schedule named @XSS_Tes... Jim Pingle
06:04 PM Bug #16114 (Resolved): Potential XSS in Firewall Schedules: The page at @firewall_schedule_edit.php@ does not perform sufficient validation on the @schedule@ values submitted by... Jim Pingle
02:26 PM Feature #16113: Firewall rule line numbers: Can you highlight where specifically in the firewall rules page where i can search for tracking IDs?
Perhaps its bee... Mike Moore
02:24 PM Feature #16113 (Rejected): Firewall rule line numbers: That's what the tracking IDs are for. They never need adjusting, they're always easier. Jim Pingle
02:20 PM Feature #16113 (Rejected): Firewall rule line numbers: When having large rule sets its often easier to locate rules by rule/line number. Easier identification when searchin... Mike Moore
01:49 PM Bug #16111 (Incomplete): Set Advanced or standard settings deleted all ipv4 host routes on primary node in HA Cluster: I can't replicate this here. I create a host route and it's there both before and after applying settings?
We'll n... Jim Pingle
07:44 AM Bug #16111 (Incomplete): Set Advanced or standard settings deleted all ipv4 host routes on primary node in HA Cluster: I have noticed that when using host routes in an HA cluster, the problem occurs that the host routes (only the host r... Robert Gladewitz
09:39 AM Bug #16112 (In Progress): Mythic Beasts DynDNS: Hi Team,
Curious if there's a way to update the DynDNS for the Mythic Beasts API.
The only reference I could fin... Mauro Sahanaja

03/30/2025

02:09 AM pfSense Plus Bug #16101: Kernel Panic with if_qlnxe driver loaded via kldload: Kristof Provost wrote in #note-2:
> I'm rather confused by this panic.
>
> `fault virtual address = 0x0` and `i... Kris Phillips

03/29/2025

09:14 PM Bug #16093: Firewall logs mark entries for ``match`` rules the same as ``pass`` rules: Tested on... Christopher Cope
08:35 PM Regression #16105: Config access error after changing an interface from DHCP to Static: Success, appears to be working in 25.03beta and 24.11. It should be noted, both patches above need to be applied in ... Jay Sols
05:21 PM pfSense Packages Bug #9537: One month offset in displayed data between time changes: I can report that this issue is still reproducible on pfSense 24.03-RELEASE with Traffic Totals 2.3.2_4.
Similar t... Brian Lunardini

03/28/2025

04:40 PM Feature #16110 (Pull Request Review): Automatically check ``Allow IP options`` when IGMP is selected: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1207 Marcos M
04:26 PM Feature #16110 (Feedback): Automatically check ``Allow IP options`` when IGMP is selected: It's not as clear with IGMPv1 but from the relevant RFCs IGMPv2 requires IP options and IGMPv3 seems to require it as... Marcos M
04:27 PM Regression #15400: IGMP packets are logged when the filter rule has logging disabled: > Is it possible to add some form of indicator in the firewall log as to why the packet was dropped?
See https://red... Marcos M

03/27/2025

09:49 PM Regression #16105: Config access error after changing an interface from DHCP to Static: Thanks for testing! A followup fix can be applied with commit:f51505bf15e7af39c909d63356089d5e247cf781. Marcos M
08:58 PM Regression #16105: Config access error after changing an interface from DHCP to Static: Still seeing this error in 25.03 after applying patch to 3/6 beta. Jay Sols
09:47 PM Revision f51505bf: Explicitly check for numeric ID: $realid may be either an empty string or null.
Followup to 8286c27ca678dbada2d205f606e76fab48885f60. Marcos M
08:50 PM Todo #15258 (Feedback): Update Gandi LiveDNS service with API changes: Fixed in commit:e329a2fbb202af69901d1c2dba7f216f81956a40. Marcos M
08:46 PM Revision e329a2fb: dyndns: update Gandi LiveDNS. Fix #15258: Co-authored-by Jasper Surmont <jasper@surmont.dev> Marcos M
06:45 PM Bug #16103 (Feedback): PPPoE WAN loses IPv4 addresses on ``IPV6CP`` ``LayerDown`` events: Thanks! Fixed in commit:e7f3a037364743a1124c589136e947ce98c1b9ed. Marcos M
06:39 PM Revision e7f3a037: Keep IPv4 addresses on IPv6 ppp-linkdown events. Fix #16103: Co-authored-by David King <8408971+strix-technica@users.noreply.github.com> Marcos M
02:52 PM Revision 90cecb66: if_pppoe: add note about required reboot when changing option: Marcos M
01:58 PM Todo #16060 (Closed): ``pkg`` no longer supports setting ``ALTABI`` manually at run-time: Luiz Souza

03/26/2025

08:47 PM pfSense Packages Feature #7000 (Closed): ntopng historical data needs to be reworked: Christian McDonald
06:14 PM pfSense Packages Feature #7000: ntopng historical data needs to be reworked: This is long dead and may be closed. Denny Page
06:05 PM pfSense Packages Bug #13432: ups driver will not start: I believe this issue should be resolved. If you are still experiencing the issue, please see
https://forum.netgate... Denny Page
06:01 PM pfSense Packages Feature #12281: Add support for Telegram/Pushover notifications: I believe this issue is resolved. Denny Page
05:59 PM pfSense Packages Bug #15845 (Resolved): UPS Settings doesn't display the full list of availabale drivers: Marcos M
05:41 PM pfSense Packages Bug #15845: UPS Settings doesn't display the full list of availabale drivers: This issue is resolved: #15891. Denny Page
05:41 PM pfSense Packages Bug #13691 (Resolved): ldpd - Title link needs updated: Jim Pingle
05:39 PM pfSense Packages Bug #13691: ldpd - Title link needs updated: This issue may be closed as complete. The issue was addressed in https://github.com/pfsense/FreeBSD-ports/commit/bc63... Denny Page
05:37 PM Revision 4ecba170: Bring in Kea enhancements from Plus: Marcos M
05:23 PM pfSense Packages Feature #15891 (Resolved): NUT driver list update: Marcos M
03:17 PM pfSense Packages Feature #15891: NUT driver list update: Hey all, this has been sitting for almost 4 months. Can someone pull this in please? Thanks. Denny Page
05:22 PM pfSense Packages Bug #15976 (Resolved): Fix ntopng listen options: Marcos M
03:15 PM pfSense Packages Bug #15976: Fix ntopng listen options: Hey all, can someone pull this in please? Thanks.
https://github.com/pfsense/FreeBSD-ports/pull/1398 Denny Page
12:57 PM pfSense Plus Bug #16106: Input validation issue with Alias network address: The problem is that when you add a trailing dot it's a valid hostname, not an IP address. Hostnames are allowed in al... Jim Pingle
12:34 PM Bug #16108 (New): LDAP bind password sent in plaintext to frontend: When an LDAP bind password is already set, this value is sent back to the user in plain text in the web UI. The field... Neo Samardzic
09:23 AM pfSense Plus Bug #16101: Kernel Panic with if_qlnxe driver loaded via kldload: I'm rather confused by this panic.
`fault virtual address = 0x0` and `instruction pointer = 0x20:0x0` pretty... Kristof Provost

03/21/2025

11:50 PM Feature #15089 (Feedback): Support LuaDNS provider: Applied in changeset commit:2c8747875db7d07da26ffca5d00b11e7792feff6. Aaron Sierra
11:43 PM Revision 41fa97a2: Merge pull request #4663 from aaron-sierra/dyndns-luadns: Marcos M
07:16 PM Bug #16102 (Feedback): syslogd fails to release file handlers: Fix cherry-picked to 2.8 and 25.03. Luiz Souza
02:36 PM Bug #16102 (Resolved): syslogd fails to release file handlers: Syslogd appears to be failing to release file handlers at rotation (or otherwise) resulting in increasing file system... Steve Wheeler
06:16 PM Bug #16103: PPPoE WAN loses IPv4 addresses on ``IPV6CP`` ``LayerDown`` events: A proposed fix is available at https://github.com/pfsense/pfsense/pull/4729 Strix Technica
05:04 PM Bug #16103 (Feedback): PPPoE WAN loses IPv4 addresses on ``IPV6CP`` ``LayerDown`` events: A dual-stack pfSense instance that uses PPP on its WAN interface (PPPoE in my case) loses its v4 address if IPV6CP sh... Strix Technica
04:07 AM Revision f178fa48: When the PPPoE client backend is changed, show the reboot message.: (cherry picked from commit 615713329278baf93d4712321d3e4a497061a315) Luiz Souza
04:02 AM Revision e0dbc5d2: Fix the last commit.: Pointy hat to: loos
(cherry picked from commit 55b33420d65aa7d47d4469a96f315fb271021967) Luiz Souza
03:59 AM Revision c59f5e21: Fix the ppp uptime with if_pppoe.: Based on a patch from Stevew.
(cherry picked from commit 240965405915259e2d724c8add11fd76dd34db18) Luiz Souza
03:59 AM Revision 98c25d78: Add the description (interface name) to the if_pppoe interfaces.: (cherry picked from commit 2cd86e498122da4b43feb041f442967efebdcdba) Luiz Souza
03:59 AM Revision aff7e91b: Change the mpd5/if_pppoe knob back to a global setting.: They cannot cooexist, so makes no sense have it as a per connection setting.
Enforce a few protections and warnings ... Luiz Souza
03:59 AM Revision 48a44422: Do not allow the selection of more than one NIC with if_pppoe.: Effectively disable the MLPPP support with if_pppoe.
(cherry picked from commit 00c6e25f2ce6d793680dbe01053ec84c7cba... Luiz Souza
03:59 AM Revision fdd8e2dd: Handle the differences in the 'Advanced Options' section for if_pppoe.: (cherry picked from commit ee4539ba7331fab0225df1ed03346adc944eb49c) Luiz Souza
03:59 AM Revision 258e764e: Change the knob to select mpd5/kernel PPPoE to a per-connection setting.: Replaces the original global setting.
Ticket: #18294
(cherry picked from commit e52a8eda6fa90e613f940553cfe438baafc7... Luiz Souza
03:59 AM Revision e45b3215: Revert "pppoe: Add knob to move it back to mpd5": This reverts commit 0bf19af7d0b9222ea24899103c64819b0d08160a.
This knob will be per connection and not a global sett... Luiz Souza
03:59 AM Revision 6af889e5: pppoe: Apply scrub mss when using if_pppoe: mpd5 has an option called tcpmssfix, on by default, that adjusts MSS
according with the interface MTU. When using if... Renato Botelho
03:59 AM Revision 363b0276: pppoe: Configure syslog: Configure syslog to save all messages starting with prefix "if_pppoe: "
to /var/log/ppp.log
(cherry picked from comm... Renato Botelho
03:59 AM Revision 0f78a966: pppoe: Configure PPPoE interface using if_pppoe: Introduce the new kernel module if_pppoe and start using it by default
to configure PPPoE client interfaces.
(cherry... Renato Botelho
03:59 AM Revision ac2eea65: pppoe: Add new pppoe-handler script: Add a new script, pppoe-handler, that will be called by devd when proper
events happen on pppoe interfaces.
(cherry ... Renato Botelho
03:59 AM Revision a5ac05e8: pppoe: Destroy PPPoE interface when using if_pppoe: Change interface_bring_down() to destroy pppoe interface instead of
dealing with mpd stuff if system is using if_pppo... Renato Botelho
03:59 AM Revision 90eda87f: pppoe: Add knob to move it back to mpd5: A new PPPoE implementation, using if_pppoe kernel module, is going to be
introduced soon and will be used by default.... Renato Botelho

03/20/2025

08:42 PM Bug #15940: Static DHCP Binding not working and DHCP Leases not showing with 24.11 Release: The problem is still there.
DHCP lease is provided sometime and other time it is not provided.
Please let me know... Shabahat Malik
08:18 PM Revision 2c874787: dyndns: Add LuaDNS provider. Implement #15089: Support the LuaDNS v1 API (https://www.luadns.com/api.html) for Dynamic
DNS updates. This complements the ACME suppor... Aaron Sierra
06:53 PM pfSense Plus Bug #16101 (New): Kernel Panic with if_qlnxe driver loaded via kldload: Customer reported that when loading the kernel driver for if_qlnxe on a QLogic 2x25GE QL41232HQCU, it causes a kernel... Kris Phillips
03:01 PM Todo #16016 (Resolved): Change AutoConfigBackup default key generation format: Jim Pingle
03:01 PM Bug #15927 (Resolved): Potential XSS in AutoConfigBackup backup list on ``services_acb.php``: Jim Pingle

03/19/2025

05:54 PM pfSense Packages Bug #16096 (Resolved): Day of week description does not reflect input validation: Description updated: https://github.com/pfsense/FreeBSD-ports/commit/0379ed9e77e6b3b262ee504769d4c7a7e5784b3f Marcos M
05:39 PM Bug #16076 (Resolved): Deleting or adding a firewall rule may result in an unexpected rule order: Marcos M
03:24 PM pfSense Docs Correction #16099 (Rejected): Interface Groups naming to Security Zones in Documentation: They are not the same concept, and that's not a change we're going to make.
They may share some similar aspects, b... Jim Pingle
12:12 AM pfSense Docs Correction #16099 (Rejected): Interface Groups naming to Security Zones in Documentation: Update the following page to indicate the modern nomenclature of 'Security Zones'
https://docs.netgate.com/pfsense... Mike Moore
03:22 PM Bug #8087: Provide Calling-Station-ID to RADIUS backed VPN connections: Erich Weiler wrote in #note-10:
> Beautiful, thank you so much! It works like a charm. This is so great. Thanks a... Brandon Verkada
01:42 PM Bug #8087: Provide Calling-Station-ID to RADIUS backed VPN connections: Beautiful, thank you so much! It works like a charm. This is so great. Thanks a million! Erich Weiler
10:27 AM Bug #8087: Provide Calling-Station-ID to RADIUS backed VPN connections: We have three patches now that do the trick:
* duofix.sh... Brandon Verkada
03:17 PM pfSense Packages Bug #16100 (Not a Bug): net-snmp config.xml format issue causing problems: That formatting is fine and doesn't cause any problems, it's been there for ages. It just means the tab text has brac... Jim Pingle
05:34 AM pfSense Packages Bug #16100: net-snmp config.xml format issue causing problems: This may just be a format inconsistency. Tried removing from user config and didn't resolve problem. Craig Coonrad
01:04 AM pfSense Packages Bug #16100 (Not a Bug): net-snmp config.xml format issue causing problems: pfSense version: 24.11
net-snmp version: 0.1.5_13
The following line observed in config.xml contains 3 square bra... Craig Coonrad
02:26 PM pfSense Plus Bug #15948: GUI times out when attempting to view large Configuration History: Jim Pingle wrote in #note-3:
> The config history on Plus also looks into ZFS BE entries, so the more boot environme... Seth Cummings
02:10 PM Revision 1c8e836c: ACB: uncheck the device key warning by default: Marcos M
09:18 AM Bug #16095 (Resolved): Firewall generates invalid rules for IPsec tunnels with descriptions containing special symbols: I tested against the latest dev version.
The issue has been fixed.
I am marking this ticket as resolved. Danilo Zrenjanin

03/18/2025

10:46 PM Revision cd3925b3: miniupnpd: Generate miniupnpd config using more explicit bools: The miniupnp config section has boolean flags that are either true with the value
'on', and are inferred to be false ... Reid Linnemann
05:44 PM Regression #16045 (Resolved): Dynamic DNS IPv6 tries to use IPv4 address: Marcos M
04:06 PM Feature #15659: Kea option for ``reservations-out-of-pool`` and associated input validation (IPv4 and IPv6): It is now easy to test these Kea options in a way that doesn't require patching the base system (and they are backed ... Christian McDonald
01:21 PM Feature #15659: Kea option for ``reservations-out-of-pool`` and associated input validation (IPv4 and IPv6): I didn't understand the real use limitations of teh options.
The most important for me is to be able to make reserva... Phil Wardt
03:38 PM Bug #16098 (Duplicate): Crash report: Duplicate of #15157
You can install the "System Patches package":https://docs.netgate.com/pfsense/en/latest/develo... Jim Pingle
03:24 PM Bug #16098 (Duplicate): Crash report: I was greeted wit a banner message that a crash of pfsense CE had occurred. Paddy Glaister

03/17/2025

10:45 PM Bug #16095 (Feedback): Firewall generates invalid rules for IPsec tunnels with descriptions containing special symbols: Applied in changeset commit:c74c5c61a51aa17a399fe5f8d25a9a183187c0e2. Marcos M
10:39 PM Bug #16095 (In Progress): Firewall generates invalid rules for IPsec tunnels with descriptions containing special symbols: Marcos M
10:34 PM Revision c74c5c61: Fix rule label for default IPsec rules. Fix #16095: Marcos M
10:09 PM Bug #8087: Provide Calling-Station-ID to RADIUS backed VPN connections: Just a followup on this item... I also would love for this to work. I can verify that @Brandon Verkada is right, it... Erich Weiler
07:15 PM Feature #16097 (New): copy dhcp static mapping: In @services_dhcp.php@ ( _Services/DHCP Server/<interface>_ ) should be very useful to me (and I suppose to many othe... Carlo Tognetti
06:26 PM pfSense Packages Feature #14630: FRR script hook for clearing states on routing changes: Fantastic, that is the guidance we we're looking for.
Can we get an update in the documentation to reflect this? Mike Moore
06:22 PM pfSense Packages Feature #14630: FRR script hook for clearing states on routing changes: I first wanted to confirm that stateful filtering worked with dynamic routing. To test, I set up FRR with BGP/BFD ove... Marcos M
11:58 AM Bug #16019: Kea can unintentionally attempt to spawn multiple processes and fail: Hello all,
I just had the same behavior on my Netgate 4200 without playing around with pfsense nor changing anything... John Doe

03/16/2025

05:38 PM Feature #12551: Add ability to set DNS resolver search domain list: Until or if ever this exists, I found that it _does_ work to encode the domain list in hex and add it under DHCP Serv... → luckman212
05:42 AM pfSense Packages Bug #15594: ERROR when IP are with " " at the start or end of address: Tested on 25.03-BETA (amd64)
built on Tue Feb 4 4:23:00 +04 2025
Looks like the issue still there aleksei prokofiev

03/15/2025

07:55 PM pfSense Packages Bug #16096: Day of week description does not reflect input validation: this seems accurate, names should not be in the tool tip for acceptable entries, I was not able to find anything othe... Jordan G
04:03 PM pfSense Packages Bug #16096: Day of week description does not reflect input validation: Marcos M wrote in #note-1:
> That functionality was removed as part of:
> https://redmine.pfsense.org/issues/13299
... Eduardo Mozart de Oliveira
07:42 PM Bug #16076: Deleting or adding a firewall rule may result in an unexpected rule order: with above patch applied (on 24.11) and MIM disabled, deleting multiple firewall rules by selecting desired rules and... Jordan G
04:02 PM Bug #16095 (Confirmed): Firewall generates invalid rules for IPsec tunnels with descriptions containing special symbols: Tested and confirmed on... Christopher Cope
03:53 PM pfSense Plus Bug #16086 (Closed): Reinstall Packages fails on a fresh install: I can confirm testing with... Christopher Cope

03/14/2025

09:18 PM pfSense Packages Bug #16096 (Confirmed): Day of week description does not reflect input validation: That functionality was removed as part of:
https://redmine.pfsense.org/issues/13299 Marcos M
08:51 PM pfSense Packages Bug #16096 (Resolved): Day of week description does not reflect input validation: Hello,
I was unable to found the repository of Cron package, so I'm reporting it here.
I was unable to use "wed" to... Eduardo Mozart de Oliveira
05:22 PM Revision 2442a02e: Fix new log preference checkboxes: Marcos M
04:21 PM Revision 81430ea6: Fix regression from 7dc6055725cd400c04ead94560cda876de3f253d: Marcos M
02:00 PM pfSense Plus Bug #15959 (Resolved): MIM GUI is unable to write IPv6 aliases: Marcos M
12:39 PM Bug #16095 (Resolved): Firewall generates invalid rules for IPsec tunnels with descriptions containing special symbols: IPSec tunnel description accepts special symbols, but creates an error in filter reload since Filter rules don't acce... Georgiy Tyutyunnik

03/13/2025

08:47 PM Revision 58e567d1: Move IPv4 link-locak firewall logs into a separate log preference. Implement #16092: Fix a type while here as well. Marcos M
08:37 PM Bug #12922: Classless static routes received on DHCP WAN can override chosen default gateway: As a note, it also showed up once Starlink was connected to the 3rd WAN port. Eduardo Silva
08:36 PM Bug #12922: Classless static routes received on DHCP WAN can override chosen default gateway: Oleksii Tucha wrote in #note-4:
> The issue still exists in 2.7.2, the patch from David works.
It is March 2025, thi... Eduardo Silva
07:16 PM Bug #15411: Hostname missing from logs in certain cases can cause the system log to display in an unexpected manner: This happens after every system upgrade. Marcos M
07:15 PM Feature #16092 (Feedback): Separate IDS/IPS and link-local firewall log entries from default block logging: Applied in changeset commit:b67a4eae7b9b815480789b08aa0c847f5689dede. Marcos M
07:15 PM Bug #16093 (Feedback): Firewall logs mark entries for ``match`` rules the same as ``pass`` rules: Applied in changeset commit:27db374dbca226f0429b1453802ff70764b3102d. Marcos M
06:53 PM Bug #16093 (Pull Request Review): Firewall logs mark entries for ``match`` rules the same as ``pass`` rules: Marcos M
06:52 PM Bug #16093 (In Progress): Firewall logs mark entries for ``match`` rules the same as ``pass`` rules: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1203 Marcos M
07:15 PM Feature #15415 (Feedback): Enhanced firewall log action information display: Applied in changeset commit:27db374dbca226f0429b1453802ff70764b3102d. Marcos M
07:11 PM Revision 53484903: Activate snort2c log preference: Followup to b67a4eae7b9b815480789b08aa0c847f5689dede. Marcos M
08:05 AM pfSense Packages Bug #15644 (Resolved): Snort Status icon disappears: I can confirm that the patch fixes the issue.
I am marking this case as resolved. Danilo Zrenjanin
07:26 AM Bug #15162 (Resolved): Adding Wake-On-LAN entry from ARP table view can incorrectly include OEM text in MAC address field: I tested the patch with the latest version 25.03, and it successfully resolves the reported issue.
I am marking th... Danilo Zrenjanin

03/12/2025

09:09 PM pfSense Packages Bug #16094 (Feedback): pfBlocker-NG null blocking SERVFAIL: https://github.com/pfsense/FreeBSD-ports/pull/1407 Marcos M
08:27 PM pfSense Packages Bug #16094 (Feedback): pfBlocker-NG null blocking SERVFAIL: The key for the dnsblDB dictionary is just q_name, meaning the same dictionary entry is used for all query types. The... Alec Fenichel
07:50 PM pfSense Packages Feature #15853 (Feedback): Add mDNS Bridge (mdns-bridge) package: This is now in dev. After it's been tested working there, it can be picked for 2.8/25.03. Marcos M
07:40 PM Revision b67a4eae: Move snort2c firewall logs into a separate log preference. Implement #16092: Marcos M
07:40 PM Revision 27db374d: Include reason for firewall log actions. Implement #15415, Fix #16093: Marcos M
07:38 PM Bug #16093 (Resolved): Firewall logs mark entries for ``match`` rules the same as ``pass`` rules: When logging is enabled for a floating match rule:
* Clicking the action icon in the firewall log does not show a ru... Marcos M
06:50 PM Feature #16092 (Pull Request Review): Separate IDS/IPS and link-local firewall log entries from default block logging: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1203 Marcos M
06:47 PM Feature #16092 (Resolved): Separate IDS/IPS and link-local firewall log entries from default block logging: On systems that use Snort/Suricata and also log the default blocking rules, the firewall logs can be very noisy due t... Marcos M
06:50 PM Feature #15415 (Pull Request Review): Enhanced firewall log action information display: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1203 Marcos M
06:41 PM Revision eb0acb5a: Show the rule for packets dropped due to IP options: When clicking the Action icon for a firewall rule log, the rule is not
shown when it's a "pass" rule that dropped the... Marcos M
06:41 PM Revision f8713e51: Refactor firewall logging preferences: Move the firewall logging preferences to a single string[] variable and
make it a global. No functional changes. Marcos M
06:41 PM Revision d050c9dc: Move log preferences to a separate form section: Marcos M
06:41 PM Revision f3899adb: Revise log preferences descriptions: Marcos M
05:08 PM Revision f5412832: Add mDNS Bridge packages: Marcos M
04:40 PM Bug #15162: Adding Wake-On-LAN entry from ARP table view can incorrectly include OEM text in MAC address field: Applied in changeset commit:3b45a8f2cdb735ce87661fde6ae14aec60ac0d2b. Christian McDonald
04:35 PM Bug #15162 (Feedback): Adding Wake-On-LAN entry from ARP table view can incorrectly include OEM text in MAC address field: Christian McDonald
02:38 PM Bug #15162 (In Progress): Adding Wake-On-LAN entry from ARP table view can incorrectly include OEM text in MAC address field: Christian McDonald
04:11 PM Revision 3b45a8f2: Strip manufacturer from MAC field passed to WoL from ARP table. Fixes #15162: Christian McDonald
02:15 PM pfSense Packages Todo #16091 (Resolved): tailscale package requires updates: The tailscale package needs to be updated with some degree of regularity.
Users are going about updating the package... Mike Moore
11:34 AM pfSense Plus Bug #13569: Restarting an OpenVPN server running on a CARP VIP in an HA cluster can disrupt unrelated TCP states: Tested on 24.11 and 25.03-RC
This issue hasn't been fixed yet. I still see TCP traffic discruption during HA failo... Azamat Khakimyanov

03/11/2025

11:36 PM Feature #15415 (In Progress): Enhanced firewall log action information display: Marcos M
08:34 PM Bug #16068 (Needs Patch): Logging of packets with IP options cannot be disabled: Unfortunately there doesn't seem to be a way to match only on the packets with IP options, hence the only way to prev... Marcos M
07:59 PM pfSense Packages Bug #15644: Snort Status icon disappears: i removed the patch and re-applied and can confirm this is working.
The only change I made was to make path strip fr... Mike Moore
07:31 PM pfSense Packages Bug #15644: Snort Status icon disappears: I'm not able to reproduce it with the fix. How exactly are you testing? Perhaps the patch is not being applied correc... Marcos M
06:06 PM pfSense Packages Bug #15644: Snort Status icon disappears: used incognito mode/private on both Chrome and Firefox. Still the same issue persists Mike Moore
04:59 PM pfSense Packages Bug #15644: Snort Status icon disappears: No - make sure it's not a cache issue by testing in a private browser session. Marcos M
04:28 PM pfSense Packages Bug #15644: Snort Status icon disappears: applied the patch but still not looking good(same). Does this require a system reboot? Mike Moore
06:43 PM pfSense Packages Regression #16090 (Resolved): Commit 96e2c21 breaks the cURL source interface setting for pfBlockerNG: Fixed with "b294b91fd751ff48fe3ba734d446402856a34370":https://github.com/pfsense/FreeBSD-ports/commit/b294b91fd751ff4... Marcos M
05:56 PM pfSense Packages Regression #16090 (Resolved): Commit 96e2c21 breaks the cURL source interface setting for pfBlockerNG: This commit:
https://github.com/pfsense/FreeBSD-ports/commit/96e2c2141cf62c6042cf096ce9d6b82309a2ee43#diff-dd5b940... Charles Hamilton
04:33 AM pfSense Packages Feature #16089: Add packages for Zabbix 7.2 agent and proxy: PR to add the Zabbix 7.2 packages:
https://github.com/pfsense/FreeBSD-ports/pull/1412
PR to force SQLITE instead ... Andrew Almond
04:04 AM pfSense Packages Feature #16089 (Confirmed): Add packages for Zabbix 7.2 agent and proxy: Zabbix 7.2 was released in Dec 2024 and it would be nice to start testing it with pfSense.
I will submit a PR shortly. Andrew Almond
04:02 AM pfSense Packages Feature #16075: Add Zabbix 7.0 packages for 24.03: The PR as already been merged into pfSense/FreeBSD-ports. The comment in 15548 says:
> Jim Pingle wrote in #note-1... Andrew Almond

03/10/2025

10:08 PM pfSense Packages Bug #15644 (Feedback): Snort Status icon disappears: Fixed with "7e461be2dcbba9ca47324d746cdd866d93311621":https://github.com/pfsense/FreeBSD-ports/commit/7e461be2dcbba9c... Marcos M
09:48 PM Revision fd13dd06: Remove references to old CSS classes: Marcos M
09:01 PM pfSense Plus Bug #16086 (Incomplete): Reinstall Packages fails on a fresh install: Unable to reproduce using the latest Netgate Installer version. Marcos M
06:10 PM Bug #15679 (Resolved): Multicast with intel NIC: The upstream commit will be in the 25.03 release. Marcos M
05:17 PM Bug #15679: Multicast with intel NIC: Any update or a patch being worked on for this since this is merged to the upstream now? I still did not update to 24... Emre K
05:34 PM Bug #16076 (Feedback): Deleting or adding a firewall rule may result in an unexpected rule order: A fix has been committed for an issue with Ethernet rules ("details on the forum":https://forum.netgate.com/post/1208... Marcos M
05:13 PM Revision cd2d21a6: Refactor filter_rules_compare(): Improve readability and avoid code duplication. Marcos M
04:38 PM pfSense Packages Feature #9141: FRR xmlrpc: Hello, no updates on my side, I think that unless we come up with a pull request, there's no chance to have a fix on ... Julien Bennet
03:02 PM pfSense Packages Feature #9141: FRR xmlrpc: Looking to see if there is an update available? Any hope in getting config sync possible with FRR? Mike Moore
01:02 PM pfSense Plus Bug #16088 (Duplicate): crash after ISP rebooted the fibre modem port: That is this: https://redmine.pfsense.org/issues/14431 Steve Wheeler
10:05 AM pfSense Plus Bug #16088 (Duplicate): crash after ISP rebooted the fibre modem port: ISP rebooted the NBN port (based in Australia)
Router crashed and had to reboot
* NBN is the National Broadband N... Nicholas Alphonso
02:01 AM pfSense Packages Feature #13643: FRR - Display what BGP is advertsing to its neighbors: Just wondering if any further thought was given to this?
Mike Moore
01:53 AM Feature #16087 (New): cancel edit of firewall rule: When creating or editing a firewall or nat rule, provide the ability to cancel at the bottom next to the 'SAVE' butto... Mike Moore

03/09/2025

06:02 PM Feature #9038: Live view of any log file: This would be a very helpful feature. I assume its possible since there is a live view of logs when updating packages... Gary Johnson
05:53 AM pfSense Packages Bug #15644: Snort Status icon disappears: Tested on pfSense 25.03 Beta and snort 4.1.6_24
The issue still persists. aleksei prokofiev
01:13 AM pfSense Plus Bug #16086 (Closed): Reinstall Packages fails on a fresh install: Tested on ... Christopher Cope

03/08/2025

11:56 PM Feature #16085 (New): multiple objects in source or destination fields: I thought i created a ticket for this but i could not find it.
The feature is for the ability to add multiple IPs ... Mike Moore
11:51 PM pfSense Docs Correction #16084 (New): Snort Pass Lists¶ screenshot does not show passlist: As the subject states.
https://docs.netgate.com/pfsense/en/latest/packages/snort/passlist.html
The last photo i... Mike Moore
05:41 PM Bug #16019: Kea can unintentionally attempt to spawn multiple processes and fail: I ran into this on 1 6100. I recently assigned an interface to add a new network and enabled the dhcp server on the i... Jason Montleon

03/07/2025

08:51 PM pfSense Packages Feature #14468 (Rejected): pass along ntopng professional license key: Jim Pingle
08:50 PM pfSense Packages Todo #15294 (Rejected): Naming “Custom Name” of Interface the same as “Interface” on pfSense in “Interface assignment”: Jim Pingle
05:51 PM pfSense Packages Bug #16083 (Resolved): SID MGT modifications remove all conf files: This shares the same root cause as https://redmine.pfsense.org/issues/15989 which has been fixed for the upcoming rel... Marcos M
04:29 PM pfSense Packages Bug #16083 (Resolved): SID MGT modifications remove all conf files: https://forum.netgate.com/topic/196641/sid-mgmt-gui-issue
Any changes to SID MGMT (creating/modifying existing con... Mike Moore
03:40 PM Bug #16076 (Resolved): Deleting or adding a firewall rule may result in an unexpected rule order: Marcos M
03:15 PM Bug #16081 (Feedback): Panic accessing ``sysctl`` OID ``net.inet.ip.nhdispatch`` with an INVARIANTS kernel: This is an assertion, triggered by incorrect sbuf use.
I've pushed the fix to both the plus-devel-main and the 25.03... Kristof Provost
06:35 AM pfSense Packages Feature #16082 (New): Change RefreshActiveChecks allowed values for Zabbix Agent 7.0: Zabbix Agent 6.4 and up support values 1-86400 (default 5) for the RefreshActiveChecks parameter.
Zabbix Agent 6.0 a... Andrew Almond

03/06/2025

11:20 PM Bug #16063 (Resolved): PHP error after saving NTP settings with an interface selected: Marcos M
08:59 PM pfSense Packages Feature #15853 (Pull Request Review): Add mDNS Bridge (mdns-bridge) package: Marcos M
08:58 PM pfSense Packages Feature #16070 (Pull Request Review): Add ANDwatch package: Marcos M
02:47 PM Bug #16081: Panic accessing ``sysctl`` OID ``net.inet.ip.nhdispatch`` with an INVARIANTS kernel: In fact this is only triggered in a debug/invariants kernel.
Can be triggered by running:... Steve Wheeler
02:36 PM Bug #16081 (Feedback): Panic accessing ``sysctl`` OID ``net.inet.ip.nhdispatch`` with an INVARIANTS kernel: Querying net.inet.ip.ip_direct_nh_dispatch via sysctl in a kernel with INVARIANTS set results in a panic:... Steve Wheeler
02:01 PM pfSense Plus Bug #16079 (Resolved): Separators for Ethernet rules span past the actions column: Marcos M
01:52 PM pfSense Plus Bug #16080 (New): Issues Upgrading from 24.03 to 24.11 SG-1100 Atheros 9280: I receive the below crash when upgrading my SG-1100 to 24.11. See attached upgrade log.
Refer to: https://forum.ne... Nick K

Also available in: Atom

Project

General

Profile

pfSense

Activity

Activity

04/04/2025

04/03/2025

04/02/2025

04/01/2025

03/31/2025

03/30/2025

03/29/2025

03/28/2025

03/27/2025

03/26/2025

03/25/2025

03/24/2025

03/23/2025

03/22/2025

03/21/2025

03/20/2025

03/19/2025

03/18/2025

03/17/2025

03/16/2025

03/15/2025

03/14/2025

03/13/2025

03/12/2025

03/11/2025

03/10/2025

03/09/2025

03/08/2025

03/07/2025

03/06/2025