2.4.5 2.4.x maintenance release 99% 168 issues (164 closed — 4 open) Related issues Bug #4674: invalid state table entries after WAN IP change Bug #6195: Cannot set Manual Outbound NAT when Language is pt_BR Bug #6263: Encryption options for every P2 on a given P1 are written to each P2 individually inside ipsec.conf with multiple P2 entries + split conn entries Bug #6846: System misreporting Super Micro C2558 platform as Super Micro C2758 Bug #7186: Unable to use national symbols in password fo ACB package Bug #7359: Status/OpenVPN Page Sorts Incorrectly Bug #7601: Dynamic DNS - Hostname should not be required for DNS-O-Matic Bug #7840: OpenVPN 2.4 Server: Hide Interface when Protocol is Multihome Bug #8014: DynDNS wildcard option doesn't work for provider Loopia Bug #8051: XG-2758 - Wrong Interface Assignment Bug #8443: DHCP relay not starting after ovpnc interface is unchecked - vm 2.4.3 Bug #8531: URL Table aliases don't support FQDNs or names that return >1 IP Bug #8847: IPsec status "Show Child SA entries" button only expands and never collapses Bug #8907: wizard.php - $field['type'] - "Select" doesn't have the attribute "Size" defined Bug #9053: Dynamic DNS will not allow Route 53 wildcard record Bug #9133: "Show all configured leases" does not stay set after deleting a lease Bug #9150: Web authentication RADIUS package shows PHP error if unable to resolve FQDN of RADIUS server Bug #9218: SNMP sysDescr does not display hostname and patch version Bug #9234: Wording consistency in Certificate Management notifications Bug #9243: IPsec ID type keyid not explicitly set Bug #9248: Dynamic dns updates on azure ipv6 service is not working properly Bug #9258: Error deleting tunnel type P2 when mixed with VTI Bug #9259: User with "Deny Config Write" privilege is not fully prevented from creating accounts Bug #9271: Azure DDNS whitespace cleanup Bug #9292: Default route as indicated by "(Default)" does not match the actual default route on the OS. Bug #9296: Rule / Alias FQDN-Resolution broken Bug #9327: Using the character "ยค" in OpenVPN password field creates invalid config.xml Bug #9361: Cloudflare Not Allowing "*" Hostname Entry in Dynamic DNS Bug #9362: rc.dyndns.update: Cloudflare DDNS with proxy enabled doesn't work at all Bug #9407: Update jQuery to current version (3.3.1 or later) Bug #9447: Configuring LAGG at XG-7100 Switch Ports Broken Bug #9448: Dynamic DNS options showing in GUI for IPv6 when not in use Bug #9466: DHCP (IPv4) relay mistakenly listening on upstream interface Bug #9468: Removing the last limiter does not sync to secondary via XMLRPC Bug #9469: Removing the last ATLQ traffic shaper queue does not sync to secondary via XMLRPC Bug #9483: UFS filesystem is not being mounted noatime. Bug #9488: No console when booting CE Memstick UEFI. Bug #9522: Diagnostics > System Activity shows only the header Bug #9540: PHP Uncaught Error in Status/System Logs/Firewall/Dynamic View Bug #9541: Non-admin user with admin rights is given the wrong URL for the user manager Bug #9543: diag_dns.php: Reverse lookup of IPv6 fails with "Host must be a valid hostname or IP address." Bug #9550: New privilege matching method does not allow menu or tab links to anchors (#foo) Bug #9558: GPS NTP source PHP errors Bug #9569: Fix serial console terminal size issues Bug #9580: Dynamic DNS DNSimple client errors Bug #9582: PHP error setting up VLANs from the console Bug #9586: Unbound Access List /31 UI Issue Bug #9595: OpenVPN does not resync when running on a gateway group Bug #9602: Dynamic DNS with DigitalOcean not working Bug #9668: Running /etc/rc.newipsecdns breaks FRR BGP on VTI interfaces Bug #9674: hidden OpenVPN settings are validated and written to file Bug #9684: System Notifications: Asterisks over writing current password causing notifications to stop working. Bug #9692: system_authservers.php: Descriptive name can be changed by removing read-only property via inspect element Bug #9708: /etc/inc/unbound.inc: Pfsense Default Unbound Configuration does not Prevent DNS Rebinding Attacks Against Localhost Bug #9719: system_certmanager.php - Descriptive name field disappeared when adding certificate for user Bug #9720: vpn_ipsec_phase2.php - no remote network field in VTI mode Bug #9722: services_captiveportal_vouchers.php wrong status icon link Bug #9727: status.php: Sanitize influx_pass Bug #9728: status.php: Sanitize tinc private key Bug #9729: status.php: Sanitize zabbix-agent tlspsk key Bug #9736: status.php: Sanitize oinkcode and etprocode of snort/surricata Bug #9741: interfaces_ppps_edit.php: WebGUI don't show local ip / gateway ip values Bug #9747: IPsec widget - Missing escape of domain backslash Bug #9748: openvpn_wizard.xml: DH 15360 and 16384 fall back to 1024 Bug #9756: vpn_openvpn_(client|server).php: js issue when selecting multiple NCP Bug #9763: Trying to set VLAN Priority causes error Bug #9764: status.php: Sanitize barnyard_dbpwd Bug #9767: Interesting Traffic Will not Initiate an IPsec VTI tunnel. Bug #9770: XML-based Packages do not activate shortcuts Bug #9778: Inconsistent update check results Bug #9779: Dynamic DNS class constructor uses deprecated function name Bug #9780: PHP warning in diag_dump_states.php Bug #9781: Fix IPsec VTI interface creation logic Bug #9784: status.php: Sanitize bandwidthd db password Bug #9801: VTI IPv6 addresses don't get assigned Bug #9819: Captive portal: Change order redirect page is selected Bug #9829: NTP Status vs. parsing NTP Access Restrictions Bug #9840: PHP7: Uninitialised array in upgrade_config.inc Bug #9851: PHP error in logs Bug #9867: Packet Capture IPv6 rejects all packets if CARP type is set in Protocol field Bug #9873: Switching the System Update to Development renders the system unbootable Bug #9898: DNS over TLS hostname verification does not save Bug #9921: Limiters allow invalid delay values Bug #9931: 0.pfsense.pool.ntp.org doesn't work on IPv6 only installations Bug #9938: Queue stats parser broken if bytes > 9999999999 Bug #9945: wizard error on clean install Bug #9946: package install failed: unset the 'vital' flag with: pkg set -v 0 pfSense Bug #9953: no meta.txz, Unable to retrieve package information Bug #9954: status_ipsec.php: Unable to manually connect P2 when P1 is up but not P2 Bug #9961: status_upnp: UPnP status not showing rules when using override WAN address option Bug #9963: DNS servers assigned dynamically are omitted if also assigned manually when override is disallowed Bug #9969: static route remain in the OS routing table after deletion Bug #9971: sshguard error: Logging subprocess <pid> (exec /usr/local/sbin/sshguard) exited with status 1. Bug #9975: PHP error on upgrade from 2.4.4-p3 to 2.4.5 Bug #9977: Enabling Captive Portal on 2.4.5 breaks network connectivity Bug #9984: PHP error in 2.4.5 services_dyndns_edit.php Bug #10139: IGMPPROXY spamming the main systemlog Bug #10159: nginx error " 48: Address already in use" sometimes displayed in the logs when reconfiguring captive portal Bug #10168: firewall_rules_edit.php: Firewall GUI allows selecting 'not' and 'any' for source/destination which is invalid Bug #10172: A few places in the UI still refer to "SSL" instead of "SSL/TLS" Bug #10183: diag_packet_capture.php: Capture for 'pfsync' fails Bug #10184: Shaper Add Child Scheduler options Codel wrong description link Bug #10189: pfsense calculates wrong ip header checksum when reassambling packages with different mtu Bug #10195: radvd spamming routing log with "IPv6 forwarding on interface seems to be disabled, but continuing anyway" Bug #10196: Cloudflare dyndns not working (Invalid TTL) Feature #3244: Check that OpenVPN tunnel network does not overlap any other subnet Feature #3473: Allow configuration of OpenVPN keepalive Feature #3792: Group name size limit too restrictive on Active Directory Users Feature #5851: Add copy action to OpenVPN client / server Feature #7537: Include mellanox mlx4 and mlx5 ethernet driver Feature #7791: include /usr/bin/strings in core pfSense Feature #8703: Allow user to search firewall alerts by tracking ID Feature #9030: Allow TLS Key Direction with OpenVPN Feature #9078: Investigate adding knobs for explicit-exit-notify in OpenVPN Feature #9111: Add IPsec VTI interface MTU support Feature #9251: DNS Resolver (Unbound) Python Integration Feature #9256: adjust frequency of geom rebuild notifications. Feature #9268: Add Linode Dynamic DNS support Feature #9280: Add AAAA record type support for DynDNS with Digital Ocean Feature #9285: Add an option to disable the ping-check in dhcpd Feature #9323: Option to hide 'Kernel PTI' from sysinfo widget Feature #9412: Add sorting and search/filtering to CA/Certificates Feature #9452: Add Gandi LiveDNS DynDNS client. Feature #9532: GUI indication and options for MDS mitigation Feature #9590: RFE: Add additional prefix delegation size entries to dropdown-list Feature #9620: User privilege to manage integrated switch Feature #9693: Bypass automatic backups Feature #9694: Redact ACB encryption password from status.php Feature #9695: Add Ability to Force NAT-T Encapsulation on IKEv2 Peers Feature #9705: Add kernel memory usage to status.php Feature #9757: DH groups 25,26,27 not listed for phase1 & phase2 Feature #9766: diag_packet_capture.php: allow to input multiple tcp/udp ports Feature #9791: Ability to filter Diagnostics ARP Table by IP range (DHCP) Feature #9816: firewall_aliases.php: add ability to export list of aliases Feature #9831: diag_packet_capture.php: print packet capture start time Feature #9905: ospf / ospv3 packet capture Feature #9911: Show confirmation box before disconnecting PPPoE Feature #9966: allow to disable APIPA blocking Feature #10166: Add DNS-over-TLS as option to source/destination port range when creating a firewall rule Todo #9245: Update copyright notices to 2020 Todo #9864: Set autocomplete=new-password for user/password fields in forms Todo #9868: Add clientAuth EKU to Server type certificates Todo #9976: strongswan: Update to 5.8.2 Todo #10157: Setup new redirect subdomain and processes pfSense Packages - Bug #8139: LADVD not working on LAGG interfaces pfSense Packages - Bug #9583: Freeradius 3 auth error on OTP (only on PFSense 2.5-dev) pfSense Packages - Bug #9635: lldpd (and probably ladvd) doesn't work on units with an integrated switch pfSense Packages - Bug #9807: Packets Monitoring graphs are being incorrectly scaled pfSense Packages - Bug #10146: squid4 obsolete options pfSense Packages - Todo #9392: Status_Traffic_Totals needs updated for vnstat 2.0
2.5.0 Future Release 55% 229 issues (107 closed — 122 open) Related issues Bug #1375: Captive portal logs: mixed with logs from other sources (squid, php) Bug #1605: DHCP Server should group known clients by interface Bug #1819: DNS Resolver Not Registering DHCP Server Specified Domain Name Bug #3334: Status/Traffic Graph isn't IPv6 ready Bug #3500: DHCP Leases List Not Showing Hostname in Some Cases Bug #3956: Check for invalid CA on generating new certificate Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel Bug #4521: Issue with OpenVPN certificate depth validation and long certificate subjects Bug #6025: Load balancing fails when one gateway has a weight of 1 and another gateway has a weight >1 Bug #6028: no firewall rules loaded after reboot with invalid ruleset Bug #6030: Duplicated tracker IDs on block private networks rules Bug #6167: IPsec IPComp not working Bug #6186: race conditions in service startup Bug #6277: RRD graphs are not created correctly for interfaces using CODELQ Bug #6333: Bootup starts/restarts dpinger multiple times Bug #6579: IPv6 CARP VIPs lost upon config sync where they include non-significant zeros Bug #6868: Interface MTU Setting not applied to all IPv6 routes Bug #7198: nginx-error.log is not circular and can fill filesystem Bug #7307: ZFS installer - shuts down instead of rebooting Bug #7384: DHCPv6 doesn't merge IPv6 prefix with the input submitted in DNS servers field when using Track Interface IPv6 configuration parameter for the LAN interface. Bug #7389: Limiter does not work with transparent proxy Bug #7614: Port forwards where the destination is a network alias can create invalid refection rules if multiple subnets are in that alias. Bug #7772: Regression of Bug #906 Bug #7801: UDP fragments received over IPsec tunnel are not properly reassembled and forwarded Bug #8015: IPsec VPN Not Reconnecting until complete reboot Bug #8100: pfsync Initially Deletes States on Primary for Connections Established through Secondary Bug #8136: dpinger for WAN DHCPv6 gets fails to update gateway IP Bug #8192: dpinger - Change in ISP link-local IPv6 address drops connectivity Bug #8248: Pfsense hangs - non pingable when removing traffic shaper from interface(s) Bug #8263: Cannot create a nonlinear `Link Share` service curve because of: "the sum of the child bandwidth higher than parent" Bug #8273: IPv6 GRE tunnel over PPPoE fails on startup Bug #8472: IPsec with "Split connections" enabled (multiple P2's) - new added P2's are not coming up (between two pfsense's 2.4.3) Bug #8611: unable to receive IPv6 RA's on SG-1000, default route lost Bug #8616: When reconfiguring a captiveportal, connected users get disconnected and can't login back Bug #8815: IPv4 addresses disappear from interfaces when link is lost Bug #8870: Webgui incorrectly reports "The system is on the latest version". Bug #8922: Static routes set by system.inc for DNS gateway bindings are not removed Bug #8964: IPsec async cryptography advanced setting - TCP traffic not passing through Bug #9023: is_fqdn() validation Bug #9058: crash in l2tp retransmit Bug #9074: Alias URL lists only storing last-most list in config. Bug #9136: IPv6 Tracking Interfaces Lose IPv6 Address in Certain Cases Bug #9148: PPPoE over a VLAN fails to reconnect. Bug #9154: Editing a VLAN parent interface causes all VLANs to be reconfigured, which can lead to problems Bug #9208: The wrong session timeout value can be used for some captive portal users Bug #9209: RADIUS: Set NAS Identifer to webConfigurator when logging in the UI Bug #9225: Gateway group routing not updated on OpenVPN client reconnect Bug #9255: Potential performance issue when using multiple authentication servers in a zone Bug #9267: dhclient does not handle protocol timeouts or script failures correctly Bug #9270: "Remove all states to and from the filtered address" does not remove all states Bug #9320: Outbound NAT and multiple IPSEC IPs for mobile warriors Bug #9324: IPv6 on top of a PPPOE ipv4 interface assigns parent interface to default route, not pppoe interface Bug #9331: Parallel Rekey fails for multiple Child SAs Bug #9344: OpenVPN click NCP Algorithms will always go to DH Parameters website(in Chinese-Taiwan) Bug #9349: IPSec service start/stop/restart fails after settings change Bug #9353: PHPSession errors from limited access to dashboard and widgets Bug #9365: Use of "continue" in switch statements can be ambiguous Bug #9366: "Illegal string offset" PHP errors Bug #9382: SNMP Undefined symbol "pf_altq" Bug #9383: dhcpleases kqueue error Bug #9384: devd putting "$" before variable contents when using single quotes Bug #9385: OpenVPN logs a "Device busy" error when opening tap interfaces, but continues to function Bug #9400: PHP scandir() error at boot Bug #9405: IPsec IPv6 dynamic FQDN Remote Gateways / util.inc resolve_retry() IPv6 support Bug #9408: OCSP stapling detection broken on 2.5.0 Bug #9410: Package install fails to run from GUI Bug #9411: Firewall log does not contain valid entries Bug #9413: VLAN driver missing ALTQ support Bug #9414: Hardware with Intel 82583V interface such as some Watchguard equipment fail to load interface Bug #9415: Firewall log is empty in the GUI Bug #9420: crypt_data() uses deprecated openssl syntax for passphrase Bug #9421: crypt_data() needs to support stronger key derivation Bug #9428: Unable to access "System: Authentication servers" if "WebCfg - System: User Password Manager" is set Bug #9431: Upgrading to 2.5.0 with devel/aws-sdk-php installed fails Bug #9441: Setting Crypto HW breaks IPSec CBC Bug #9443: Captive Portal Vouchers feature is broken in 2.5.0 Bug #9449: Empty lines in various forms Bug #9450: Multiwan gateway group fail-over not working as expected (possible race condition) Bug #9459: patch pf: silence a runtime warning pfr_update_stats: assertion failed. Bug #9460: OpenVPN local auth failing due to fcgicli output Bug #9467: vmx(4) interfaces do not have ALTQ support on pfSense 2.5, they had ALTQ support on 2.4 Bug #9476: pfSense 2.4.x sending ARP replies with non-CARP source MAC address Bug #9478: Unable to check for updates from the GUI when using a proxy with authentication Bug #9548: Do not use VLANMTU flag to decide if interface supports to run VLAN Bug #9560: SMART tests not working Bug #9564: Dynamic DNS Status - IPv4 format error for 'Cached IP' Bug #9577: radvd send_ra_forall failed on interface / can't join ipv6-allrouters Bug #9600: Add athp to wireless device regex list Bug #9611: PHP error on fresh 2.5.0 install or after factory reset Bug #9634: rc.newwanipv6 is called although dhcp6c should discard Request messages Bug #9643: Limiters do not function properly on 2.5 snapshots Bug #9646: OpenSSL 1.1.1 does not list engines for AES-NI or BSD crypto Bug #9649: IPv6 6RD Tunnel Bug #9663: panic on boot when IPv6 option "Do not wait for a RA" is enabled Bug #9715: Call to undefined function sort_related_log_files Bug #9730: newsyslog cron job not present after every upgrade Bug #9744: fatal error if ECDH Curve not default Bug #9745: can't add ECDSA certificate key when signing CSR Bug #9758: dhcpleases does not handle spaces in DHCP lease hostnames Bug #9785: ACB permits manual backup attempt when disabled Bug #9790: firewall aliases table with fqdn stays in system after deleting Bug #9796: kernel panic after removing interfaces Bug #9802: status_logs_settings.php: "Reset log files" does not clear all log files Bug #9806: Undefined variables in filter.inc openvpn aliases section Bug #9855: CSRF error at login when clicking the 'sign in' button multiple times Bug #9872: Error during build when compiling a non pfSense software Bug #9879: PHP Warning: count(): Parameter must be an array or an object that implements Countable in /usr/local/www/system_crlmanager.php Bug #9887: Rule separator positions change when deleting multiple rules Bug #9917: Widget Refresh Logic Flawed Bug #9920: system_crlmanager.php: CRL export file is empty if CA key type is ECDSA Bug #9924: crl_contains_cert() does not correctly report revoked status for intermediate CAs Bug #9936: zombie alias check errors if no alises exist Bug #9979: status_ipsec.php missing information Bug #9983: Reauth vs Rekey UI and behavior for swanctl Bug #9998: DHCP6c and Unbound DNS Server Boot-Up Configuration Failure Bug #10001: incorrect route deletion on 2.5 Bug #10149: system_gateways.php: PHP error on line 169 Bug #10151: vpn_ipsec_phase1.php: webgui bugs on latest 2.5 Bug #10155: sshguard is not compatible with RFC 5424 log format Bug #10178: crypt.inc: crypt_data() legacy mode using wrong message digest Bug #10179: incorrect encrypted backup restore error handling Bug #10190: can't disable Phase 1 when Phase 2 is VTI Bug #10200: DHCPv6 domain-search list not sent to clients Bug #10206: VIP alias-ip's disappear from nic (caused by running ifconfig twice.?.) Feature #790: Advanced options for dnsclient (resolv.conf) Feature #855: More flexible options for state killing based on WAN status Feature #1192: Certificate Manager - Ability to Encrypt Private Keys When Exporting Feature #1257: Handle encypted CA/Certificate private keys Feature #1337: VLANs with different MAC address than parent interface Feature #3258: Allow multiple certificates to be revoked in a single step Feature #3377: OAuth2 authentication in captive portal Feature #4068: CAs present on CERT manager are not trusted from pfSense Feature #4405: Traffic shaping doesn't work when applied to a bridge interface Feature #4991: WebGUI does not support ECDSA certificates for IPSec Stage 1 Feature #5644: Captive Portal retain logins across reboot Feature #6324: Improve IKEv2 multiple traffic selector per SA configuration GUI Feature #6742: OAuth2 authentication for OpenVPN (and for FreeRadius) Feature #6775: Strongswan PKCS#11 Support Feature #6787: NTP GUI sync/poll interval Feature #6960: Consider replacing ISC DHCP server with KEA DHCP Feature #7016: system_information_widget.php - Indicate adaptive state timeout status when active Feature #7304: DHCP: Enable OMAPI Config Feature #7332: Provide certificate expiry warning Feature #7467: Add iPhone/Android/Generic USB tethering support Feature #7671: Gateway Monitoring Via Custom Script or Telnet. Feature #7767: OCSP support for OpenVPN server Feature #7861: Make "Descriptive name" of certificates editable Feature #8160: Accomodate both RADIUS and pool IP addresses in IPsec Feature #8289: OpenVPN - configurable username as common name Feature #8645: Upload certificate file instead of pasting Feature #8861: Show more detail on status_interfaces.php Feature #9152: Sort diag_states_summary.php by states Feature #9206: OpenVPN+RADIUS+Cisco AVPair ACL Enhancements/BugFixes Feature #9260: ssh_tunnel_shell: Disable console message output Feature #9274: CP - trim() username post_value Feature #9297: Log and Graph Temperatures Feature #9302: radvd always advertises DNS servers and Domain Search List regardless of M or O flag Feature #9426: Show PPP uptime on the Dashboard - Interfaces Widget Feature #9439: Poll Interval For GPS and PPS Feature #9527: Add ability for LDAP extended query on groups in RFC2307 containers. Feature #9531: [IPSEC] Add additional curve-based DH Groups (31+) Feature #9538: add support for athp(4) driver Feature #9544: Enable RADIX_MPATH Feature #9661: Increase the number of DHCP/DHCPv6 NTP server options to three (or more) Feature #9688: restartallwan - pfSsh.php script to restart all wan interfaces Feature #9706: Increased number of colors for login screen Feature #9716: Italian translation Feature #9718: Make diag_states_summary table sortable Feature #9726: Hash Algorithm configured on child ESP/AH proposals using AES GCM though strongswan strips them Feature #9754: Add separate authentication log Feature #9771: diag_reboot.php: add ability to reroot and reboot with fsck to WebGUI Feature #9788: Display number of connections in status_openvpn.php Feature #9825: Requirements for trusted certificates in iOS 13 and macOS 10.15 Feature #9842: Add CA/certificate renewal function Feature #9843: allow to generate cert/csr with ECDSA key Feature #9862: Add support for waiting between ping-packages on diag_ping.php Feature #9869: Allow CRL entries to be made by serial number Feature #9878: IPsec PKCS#11 authentication Feature #9883: Allow CAs to use randomized serials when signing Feature #9884: Add support for OpenVPN --x509-username-field Feature #9896: Add poly1305-chacha20 to the TLSv1.2 cipher list in nginx Feature #9907: do not show incompatible ECDSA certs for DNS Resolver Feature #9923: Add select_source compatible output to cert_build_list() Feature #9942: Give pfSense the possibility to change the keyboard Layout for console users Feature #9972: cert_build_list(): by default don't show certs without prv key Feature #10186: Ability to do inverse matching of tags in floating rules Todo #8350: Remove clog in favor of standard syslogd or syslogd alternative with rotation via newsyslog or logrotate Todo #8821: Remove Growl Notifications Todo #9052: Update Font-Awesome Todo #9356: Find optimal default for net.pf.request_maxcount Todo #9360: Switch to Python 3.x Todo #9367: Update SMART Page with new capabilities Todo #9386: Deprecate built-in relayd Load Balancer Todo #9482: Remove zabbix 3.2 and 3.4 from pfSense Todo #9603: Strongswan stroke is deprecated, move to swanctl/vici Todo #9607: Update web server TLS versions for 2.5.0 Todo #9711: Add GUI options to control log rotation Todo #9712: Add code for packages to set their own log rotation parameters Todo #9713: Review log rotation behavior Todo #9714: Add page to view "other" logs Todo #9734: Re-evaluate log size, line defaults, and limits Todo #9808: status_logs_settings.php: Add GUI option for syslog format Todo #9856: Add certificate detail infoblock to CA list Todo #9897: Warn user when using incompatible ECDSA cert curves for WebGUI Todo #9903: Rename IPsec "RSA" options to more generic "Certificate" options Todo #9915: Convert OpenVPN to CAPath Todo #10135: help.php: Update links to use The pfSense Book pfSense Packages - Bug #7161: pfSense-pkg-bind9 changelog pointing to non-existent location pfSense Packages - Bug #7267: Status Traffic Totals - Stacked Bar - Scale not high enough pfSense Packages - Bug #7293: dns/bind911 requires TCP_RFC7413 in kernel pfSense Packages - Bug #9135: Suricata in inline modus blocks some downloads pfSense Packages - Bug #9657: STunnel fails to generate an rc script pfSense Packages - Bug #9740: empty Status / Tinc VPN page on latest 2.5 pfSense Packages - Feature #9265: Add options to configure TIMEOUTclose and debug on stunnel package pfSense Packages - Feature #9387: Update telegraf to 1.9.3 from ports pfSense Packages - Feature #9545: Enable MULTIPATH in FRR pfSense Packages - Feature #9820: Add Zabbix 4.4 (agent and proxy) packages pfSense Packages - Feature #9974: Add pfSense package for sysutils/node_exporter pfSense Packages - Todo #9158: Updates for Squid 4.x pfSense Packages - Todo #9787: Update Mail Reports to deal with clog deprecation
Future Items for an indeterminate later release 5% 108 issues (6 closed — 102 open) Related issues Bug #1675: Captive portal logout problems with pop-up blockers. Bug #3132: Gateway events for IPv6 affect IPv4 services and vice versa Bug #4154: RADIUS authentication not working over IPv6 Bug #4406: ALTQ problems with wireless cloned interfaces Bug #4716: "DNS Resolver" lacks SOA for ".local" domain setups Bug #5367: Safari repeatedly tries to reload dashboard Bug #5786: Check WebConfigurator port for conflicts Bug #5826: Auto-exclude LAN address feature only works for the LAN interface Bug #6696: Add configure link to Status > Queues error message if traffic shaping not configured Bug #6880: Multiple DHCP6 WAN connections leads to multiple dhcp6c clients Bug #7082: pkg_edit.php - impossible to use default_value with rowhelperfield Bug #7138: Pfsense wide dhcpv6 client doesn't recognise ifid statement Bug #7195: pkg_edit.php - <checkenablefields> tag has no effect on fields other than checkbox/input Bug #7222: Encryption No Longer Enforced for Email Notifications Bug #7288: The field 'Distinguished name Organization' contains invalid characters Bug #7841: CARP Sync Issue - when no internet on standby Bug #8013: IPsec MSS clamping value shared for IPv4 and IPv6 Bug #8502: main (top) menu items do not drop down in some cases Bug #8576: pfSense stops passing traffic after some time when using Outbound NAT pool w/ Sticky Address Bug #8614: Cannot remove Additional BOOTP/DHCP Options Bug #8818: Thermal Sensor Bug #8820: System/Advanced/Misc - "Do not kill connections when schedule expires" UN-checked still leaves existing connections open. Bug #8987: Web GUI main page very slow to load if wan interface is enabled but not connected. Bug #9282: suggestion for DHCP Server Bug #9755: package description wrong link https://www.freshports.org/security/openvpn-client-export Bug #9933: Captive Portal + Voucher not keeping auto-added "Pass-through MAC Auto Entry" Feature #84: Nightly Filter Summary E-Mail Feature #96: Add "All local networks" to source and destination drop down boxen in firewall rules Feature #97: Captive Portal should sync its database to other members of clusters Feature #286: Backup/restore users individually Feature #290: Add Multi-WAN awareness to UPnP Feature #521: Group manager Assigned Permissions Feature #701: Interface groups with NAT Feature #746: Add interface group to source/dest drop downs Feature #885: Show gateway/group IPs on mouseover Feature #939: Ability to restore specific areas of configuration backup from full config backup Feature #946: Allow aliases to be used to define IPsec phase 2 networks Feature #1268: Allow mass renewing of certs Feature #1831: Captive portal IPv6 support Feature #1979: Add some default read-only system aliases Feature #2024: RRD Graphs for packages Feature #2358: NAT64 Support Feature #2386: Bridge member that is not an assigned interface Feature #2424: Allow masking of pass-thru MACs Feature #2479: Allow reordering of the traffic graphs on the dashboard Feature #2593: sync NTPD, SNMP config between HA members Feature #2668: Allow Alias network names in OpenVPN local/remote/tunnel networks Feature #2676: Reply-to option in firewall rule Feature #2965: Mac Firewalling Feature #3115: Traffic shaping for multi WAN Feature #3185: Accommodate a DHCPv6 failover-like mechanism Feature #3559: add option for backup ddns ( dynamic dns ) in restore area Feature #3652: OpenVPN - Dynamic IPv6 Tunnel Network Feature #3696: Multiple items backup/restore Feature #3697: New backup/restore area: Certificates Feature #3882: Add OUI database to the base system, remove dependency on nmap Feature #4098: Add option to force a password change on login Feature #4195: Aliases: sections Feature #4234: allow for strict user <> cn validation of mobile ipsec users when using rsa+xauth Feature #4259: Port forward NAT rules with "any" protocol Feature #4632: Support for Multipath TCP (MPTCP) Feature #4724: Captive Portal Status Add Client Hostname Feature #4881: allow dynamic IPs-nets for NPt Feature #5307: Add logarithmic scale option to RRD graphs Feature #5510: Need a simple way to enable/disable package-installed services Feature #5619: Curl with ARES support Feature #5735: Automaticaly add DHCP leases to alias list or make it readable in selected fields Feature #5835: Improve OpenVPN client gateway detection in edge cases where the remote does not send gateway information Feature #5950: DHCPv6 Server support for PD of PD-obtained networks Feature #6457: Allow ability to configure AWS EC2 AMI via userdata Feature #6728: Route53 API mod and Geolocation Feature #7077: Display negotiated cipher for NCP OpenVPN connections in Status->OpenVPN Feature #7078: Allow reordering of client specific overrides in OpenVPN Feature #7181: Add Top and Add Bottom on Seperator Feature #7182: Break up System Widget on the Dashboard Feature #7244: Publish pfsense as a Vagrant Basebox Feature #7260: Source OS / p0f Database Missing Modern Operating Systems Feature #7410: IPSEC multiple dynamic IP remote clients Feature #7416: Dhclient does not support supersede statement for option 54 Feature #7783: Support for hosting VMs on pfSense using bhyve Feature #7847: USB NIC not loading (TP-Link UE300 RTL8153) Feature #7852: Add views support to Unbound GUI Feature #8316: expiration date when creating new rules Feature #8346: Let pFSense act as an IPSec XAuth VPN Client Feature #8474: Easier Conversion to HA Pair from Existing Non-HA Firewall Feature #8511: Dynamic DNS: Cloudflare Add TTL option Feature #8694: Client CA Auth for PFSense WebGui Feature #8712: QOS on ipsec links Feature #8775: Use SRV record for LDAP Authentication Feature #8879: DHCP options ADD force options Feature #8946: Add field to show IA_PD to DHCP6 Server page Feature #9536: Support dynamic prefix in DHCPv6 Server Feature #9574: Show changelog at package upgrade Feature #9680: Seperate DHCP Server and relay per interface Feature #9717: Search box for pfsense ? Feature #9768: IPsec for site-to-site scenario where one side has dynamic ip Feature #10204: Possible clarification of Track IPv6 Interface Subnet ID Todo #32: PPPoE Server users integration with user manager Todo #33: L2TP users integration with user manager Todo #204: All write_config() statements should include a reason of some sort Todo #1521: Investigate FreeBSD route metric support for future versions Todo #5902: Use a common place for default values Todo #6647: Enable Additional Security Headers Todo #6697: White squares around the numeric values in the Status / Queues page Todo #6727: Missing file apple-touch-icon-precomposed.png ? Todo #9417: Convert LDAP TLS setup from environment to LDAP_OPT_X_TLS_* set options