Project

General

Profile

Roadmap

2.9.0

open

pfSense CE software release

99%

219 issues   (217 closed — 2 open)

Related issues
Bug #14741: PHP error in DNS Forwarder host overrides when the language is set to French Actions
Bug #15017: DHCP relay does not respect configured CARP VIP status Actions
Bug #15087: IPsec Keep Alive does not update the gateway status Actions
Bug #15346: Cannot add Port Forward with an unassociated filter rule Actions
Bug #15411: Log entries without a hostname can cause the system log to display in an unexpected manner Actions
Bug #15770: Using a Limiter on a rule with a gateway group limits all traffic through that gateway instead of the host IP address Actions
Bug #16141: RRD data fails to restore via the ECL Actions
Bug #16142: XMLRPC requests fail due to incorrect request path Actions
Bug #16153: ECL can modify a discovered config file Actions
Bug #16216: PPPoE interfaces using ``if_pppoe`` increase error counters due to normal ALTQ traffic shaping operations Actions
Bug #16218: All-Inkl Dynamic DNS responses are not parsed correctly Actions
Bug #16248: QLink/Marvell 41000 NIC bug Actions
Bug #16264: Captive Portal Ethernet rules can block ARP Actions
Bug #16266: Thermal Sensors widget does not respect per-sensor threshold vales Actions
Bug #16272: Input validation text for deleting an IP Alias VIP within a CARP VIP subnet may reference incorrect VIP Actions
Bug #16290: ``diag_authentication.php`` crashes with a core dump if RADIUS client Shared Secret value is not correct Actions
Bug #16312: ``sshguard`` does not trigger for GUI logins from usernames containing unexpected characters Actions
Bug #16314: GUI login events from usernames containing special characters or long strings can cause ambiguous or confusing log messages Actions
Bug #16322: Gateway monitoring daemon can unexpectedly use a CARP VIP as the source IP address Actions
Bug #16339: Captive Portal ``backwardsyncpassword`` value not sanitized in status output Actions
Bug #16341: Error notification and log message ``"Updating repositories metadata" returned error code 1`` at boot due to ``certctl`` race condition Actions
Bug #16351: Automatic IPv6 gateways for OpenVPN servers are created with the wrong gateway address Actions
Bug #16376: Some remote syslog messages are duplicated when "System Events" option is enabled Actions
Bug #16428: OpenVPN does not include ``client-to-client`` in generated configuration for Peer-to-Peer SSL/TLS servers Actions
Bug #16429: NAT64 rules using ``reply-to`` do not forward packets Actions
Bug #16456: Memory leak in ``libpfctl`` causes ``bsnmpd`` memory usage to grow over time Actions
Bug #16472: Cannot set RADVD router lifetime to ``0`` Actions
Bug #16475: Filter rule evaluation continues after matching a ``match quick`` rule Actions
Bug #16487: Virtual IP addresses on PPPoE interfaces using ``if_pppoe`` can prevent PPP session termination Actions
Bug #16495: Gateway list order is incorrect until reloading page after moving entries and saving Actions
Bug #16505: Korean locale configuration name is incorrect Actions
Bug #16540: Reserved DUMMYNET pipes for Captive Portal can overlap Actions
Bug #16546: NAT64 rules do not pass traffic when a gateway is specified for the rule Actions
Bug #16549: Captive Portal "Allowed IPs" entries do not work if the language is not set to English Actions
Bug #16550: Cannot load alternate TCP Congestion Control kernel modules Actions
Bug #16552: Hostnames in Kea static leases may not be registered with DNS Actions
Bug #16557: Alerts do not trigger for empty configuration change descriptions Actions
Bug #16566: Incorrect configuration change message when deleting an outbound NAT rule Actions
Bug #16579: Firewall logs do not correctly parse ``short`` packet errors Actions
Bug #16588: ``pfctl`` shows incorrect number of table addresses Actions
Bug #16593: Potential remote command execution via DNSSL router advertisement messages Actions
Bug #16602: ``kea2unbound`` crashes when reading an invalid configuration file Actions
Bug #16610: GUI does not prevent adding a VIP with a blank address Actions
Bug #16614: Connections from the firewall itself fail with oversize packets and TSO enabled Actions
Bug #16625: Input validation error when saving an existing static route which contains an alias destination Actions
Bug #16630: Inconsistent and incorrect privilege names on some PPP service-related log tabs Actions
Bug #16634: Some package installation configuration data may be missing after OS upgrade Actions
Bug #16637: Unbound configuration validation does not test the complete configuration Actions
Bug #16644: Firewall log always shows rules with Reject action under "Associated Rules" Actions
Bug #16654: Interfaces menu does not use natural sorting when configured to sort alphabetically Actions
Bug #16661: UTF-8 characters in configuration data can result in an invalid configuration Actions
Bug #16681: Inaccurate "No default gateway found" log message when the default gateway is set to automatic Actions
Bug #16690: Dynamic DNS client ignores Verify SSL/TLS Certificate Trust option when the entry does not contain a username Actions
Bug #16705: Automatic gateways for OpenVPN peer-to-peer servers with a ``/30`` tunnel network do not use the peer address Actions
Bug #16709: Cannot disable IPsec Advanced Settings tab option for Strict Interface Binding Actions
Bug #16719: DHCP clients may not receive the reserved address after changing the DHCP static mapping Actions
Bug #16720: GUI performance degradation due to check for weak passwords on each page load Actions
Bug #16721: Creating a new user ignores certificate checkbox value if the certificate fields are populated Actions
Bug #16724: RAM disk package data is not preserved for additional packages Actions
Bug #16726: Loader menu does not display the logo properly Actions
Bug #16729: Firewall rule source option ``This Firewall (self)`` is not available when duplicating floating rules Actions
Bug #16731: Cannot update GoDaddy Dynamic DNS AAAA record Actions
Bug #16743: ``isvalidpid()`` function does not properly check or escape PID file parameter Actions
Bug #16744: Potential XSS in Delegated Length value for Prefix Delegation on ``services_dhcpv6.php`` when using Kea Actions
Bug #16763: Potential Stored XSS in ``diag_arp.php`` when using ISC DHCP Actions
Bug #16769: Interfaces Status shows an invalid SSID value for Wi-Fi interfaces Actions
Bug #16770: Potential XSS in RSS Widget feed content post titles Actions
Bug #16771: NULL bytes in an IP address can trigger PHP errors from ``ip2long()`` Actions
Bug #16773: Potential XSS in Captive Portal widget Actions
Bug #16783: Same port forward on multiple WANs can generate a PF error due to Pure NAT mode NAT reflection Actions
Bug #16784: Error updating repository metadata at boot with certain packages installed Actions
Bug #16799: LDAP shell authentication does not honor configured group DN restriction Actions
Bug #16828: Kernel panic (page fault) in ``bpfmtap`` via ``vlantransmit`` with Suricata BPF listeners active on VLAN interfaces Actions
Bug #16836: IPsec daemon can crash if a peer initiates two rekeys for the same child SA Actions
Bug #16861: Static route not removed when enabling ``dpinger_dont_add_static_route`` while a gateway monitor IP address is set Actions
Bug #16898: Potential command execution via CR/LF in System Proxy settings Actions
Bug #16899: Potential command execution via CR/LF in OpenVPN settings Actions
Bug #16900: Daemon configuration manipulation via CR/LF in ISC DHCP settings Actions
Bug #16901: Daemon configuration manipulation via CR/LF in SNMP settings Actions
Bug #16906: Unbound configuration may be generated with duplicate interface bindings Actions
Bug #16918: Potential stored XSS in ``browser.php`` used by ``diag_edit.php`` Actions
Bug #16922: Captive Portal authentication failures from usernames containing special characters or long strings can cause ambiguous or confusing log messages Actions
Bug #16923: Potential XSS via inline Firewall Log rule descriptions Actions
Bug #16924: Potential stored XSS via Firewall Schedules Actions
Bug #16925: IPv6 Track Interfaces ignores the ``Disabled`` Router Advertisements mode Actions
Bug #16927: Multiple ``updaterrd.sh`` processes Actions
Bug #16940: Potential XSS in DHCPv4 Pool Descriptions Actions
Bug #16941: Potential XSS in DHCPv6 Pool Descriptions Actions
Bug #16942: Potential XSS via IPsec Phase 1 descriptions while editing Phase 2 entries Actions
Bug #16943: Potential XSS in PPP instance Provider and Plan fields Actions
Bug #16944: Potential XSS in Dynamic DNS widget display of Custom and RFC2136 entries Actions
Bug #16945: Potential XSS via URL Table Ports Alias content Actions
Bug #16947: Potential Local File Include vulnerability via Dashboard widget sequence data Actions
Bug #16954: Filter rules created as part of NAT rules can have an invalid protocol value Actions
Bug #16962: Daemon configuration manipulation via CR/LF in ISC DHCP numbered option settings Actions
Bug #16964: URL tables cannot import content from ``tgz`` file URLs Actions
Bug #16976: Potential XSS in Traffic Graphs Display option Actions
Bug #16979: Traffic Graphs display option "Description" does not utilize DHCP static mapping descriptions Actions
Feature #12495: Preserve other record types when updating IPv4 or IPv6 using deSEC DDNS Actions
Feature #13340: Option to change QinQ ethertype to Service VLAN Tag Actions
Feature #15221: Sort list of System Tunables Actions
Feature #15952: PHP RADIUS client ``Message-Authenticator`` attribute capability Actions
Feature #16068: Option to disable logging of packets blocked due to unmatched IP options Actions
Feature #16166: Option to deactivate ALTQ for VirtIO ``vtnet`` interfaces Actions
Feature #16215: Allow floating rules using the "match" action to match based on IP Options Actions
Feature #16230: Option to control Kea log level Actions
Feature #16241: Block non-global NAT64 addresses by default Actions
Feature #16253: Fix configuration artifacts on upgrade Actions
Feature #16308: Avoid traffic stalls from unnecessary filter reloads Actions
Feature #16325: Add support for labels in configuration rules Actions
Feature #16423: Update the SSH server configuration to current standards and include post-quantum cryptography algorithms Actions
Feature #16502: Support state killing on gateway recovery for policy-routed traffic from the firewall itself Actions
Feature #16517: Endpoint-independent Port Restricted Cone Outbound NAT rules Actions
Feature #16534: Omit reserved NAT64 addresses from DNS64 answers Actions
Feature #16607: Auto-renewal for certificates Actions
Feature #16613: Allow using interface subnet macros with interfaces which only contain VIPs Actions
Feature #16615: Omit NAT64 address for queries from the firewall itself Actions
Feature #16616: Option to set a default log level for all logs Actions
Feature #16624: Allow packages to preserve RAM disk data between boots Actions
Feature #16635: Gateway recovery functionality for the default failover gateway group when all gateways are offline Actions
Feature #16666: Allow wildcard records for Dynamic DNS provider deSEC.io Actions
Feature #16695: Include System Patches package by default Actions
Feature #16706: 6rd interface prefix tracking for OpenVPN IPv6 tunnel network Actions
Feature #16819: Log errors when determining the RFC2136 update source address Actions
Feature #16914: Set IP Alias VIP as the Router Advertisement source Actions
Feature #16960: Kea Custom Configuration JSON privilege Actions
Todo #6727: Apple TouchID/FaceID probes for site icon files that do not exist Actions
Todo #15780: Speed up MBUF Usage command in System Information Dashboard widget Actions
Todo #16118: Increase amount of system alias content printed in alias list Actions
Todo #16128: Sanitize PPPoE configuration parameters Actions
Todo #16291: Relocate Kea control socket and lease database Actions
Todo #16307: Refactor PF ruleset generation Actions
Todo #16388: Upgrade to Kea 3.0.2 Actions
Todo #16432: Allow assigning bridge members which have an IP address Actions
Todo #16468: Kea configuration parameter ``client-class`` is deprecated Actions
Todo #16469: Improve file handling of the configuration cache Actions
Todo #16471: Upgrade PHP to 8.4 Actions
Todo #16503: Update Unbound to 1.24.2 to address CVE-2025-11411 Actions
Todo #16509: Update strongSwan to 6.0.3 Actions
Todo #16515: Set appropriate log levels for PHP and ``/usr/bin/logger`` logs Actions
Todo #16538: Prevent the GUI from removing vital packages Actions
Todo #16551: Update output and parsing behavior for PHP shell ``pfanchordrill`` Actions
Todo #16559: Remove custom gateway ordering Actions
Todo #16567: Do not add ``fe80::1:1`` link-local address to interfaces configured for IPv6 tracking Actions
Todo #16580: Require absolute path when saving a file on ``diag_edit.php`` Actions
Todo #16605: Update certificate expiration warning behavior Actions
Todo #16606: Update recommended maximum server certificate lifetimes to 200 days Actions
Todo #16620: Remove dead link about ``.local`` TLD use from ``system.php`` Actions
Todo #16626: Save the update branch preference on system update Actions
Todo #16636: Remove ``quick`` from previous ``match`` rules on upgrade Actions
Todo #16653: Add label to automatic PF ``antispoof``, CARP, Captive Portal, and ICMPv6 rules Actions
Todo #16657: Improve handling of certificates without subjects Actions
Todo #16658: Automatically configure the OpenVPN tunnel MTU when set in the assigned interface configuration Actions
Todo #16707: Improve gateway status consistency Actions
Todo #16745: Migrate ``config.xml`` encoding from ENT_HTML401 to ENT_XML1 Actions
Todo #16747: Remove user survey prompts Actions
Todo #16792: Improve GUI handling of user rules that are automatically managed by the system Actions
Todo #16793: Improve GUI handling of user aliases that are automatically managed by the system Actions
Todo #16796: Retain a copy of the failed ruleset when a filter reload fails Actions
Todo #16816: Improve default gateway detection when gateways share the same address Actions
Todo #16826: Exclude nginx logs from ``system.log`` Actions
Todo #16865: Kea attempts DNS Registration when Unbound is disabled Actions
Todo #16882: Update dpinger to version 3.6 Actions
Todo #16905: Encode Dynamic DNS credentials when passed as URL parameters Actions
Todo #16958: Improve handling of OpenSSL encryption passphrase Actions
Todo #16959: Add ``device_key`` to filtered tags list for status output Actions
Todo #16961: "Wake All" functionality on ``services_wol.php`` should only use POST Actions
pfSense Packages - Bug #11797: Traffic Totals lost upon reboot when using a ramdisk for /var and /tmp Actions
pfSense Packages - Bug #14491: FRR not starting with AgentX enabled Actions
pfSense Packages - Bug #15274: HAProxy Configuration Changes Require pfSense Reboot to Take Effect Actions
pfSense Packages - Bug #15909: Prevent tailscale interface from being assignable Actions
pfSense Packages - Bug #15916: pfBlockerNG dnsbl daemon not able to start in CARP mode Actions
pfSense Packages - Bug #16211: Python errors in Cellular Actions
pfSense Packages - Bug #16220: WireGuard dashboard widget default refresh interval is invalid Actions
pfSense Packages - Bug #16225: Telegraf service does not restart after change of settings Actions
pfSense Packages - Bug #16348: HAProxy configuration references non-existent certificate files Actions
pfSense Packages - Bug #16756: Editing a Firewall Rule before Forcing pfBlockerNG Update Empties All Aliases Actions
pfSense Packages - Feature #16070: Add ANDwatch package Actions
pfSense Packages - Feature #16089: Add Zabbix 7.4 Actions
pfSense Packages - Feature #16533: Add Multicast Bridge (mcast-bridge) package Actions
pfSense Packages - Feature #16576: update nmap package to 7.99_1 Actions
pfSense Packages - Feature #16970: Update mDNS-Bridge package to 3.0 Actions
pfSense Packages - Todo #16231: Update packages to use the XMLRPC plugins for HA Actions
pfSense Packages - Todo #16399: Update mDNS-Bridge to 2.2 Actions
pfSense Packages - Todo #16883: Update mcast-bridge to version 1.5.0 Actions
pfSense Packages - Todo #16884: Update mdns-bridge to version 2.6.0 Actions
pfSense Packages - Todo #16969: Update mdns-bridge to version 3.0.0 Actions

pfSense Plus - 26.10

open

Release targeted for October 2026

15%

10 issues   (0 closed — 10 open)

Related issues
Bug #16112: Mythic Beasts DynDNS Actions
pfSense Plus - Bug #14894: Password protected console login prompt does not render properly on 4100/6100/8200 serial console Actions
pfSense Plus - Bug #15533: Boot verification script over matches Actions
pfSense Plus - Bug #16323: Serial/Console Baud Rate Cannot Be Changed Actions
pfSense Plus - Feature #14297: Add Option for Vendor Class ID in DHCP Client Actions
pfSense Plus - Feature #15380: During upgrade Process GUI timeouts still occur Actions
pfSense Plus - Todo #15372: Adjust LED patterns for Boot Environments 2.0 Actions

CE-Next

open

The next release of pfSense software (CE)

26%

135 issues   (11 closed — 124 open)

Related issues
Bug #3132: Gateway events for IPv6 affect IPv4 services and vice versa Actions
Bug #5413: Reduce disruptions when changing DNS records from DHCP leases in Unbound Actions
Bug #6333: Bootup starts/restarts dpinger multiple times Actions
Bug #7389: Limiter does not work with transparent proxy Actions
Bug #8013: IPsec MSS clamping value shared for IPv4 and IPv6 Actions
Bug #8100: pfsync deletes states on primary for connections established through secondary Actions
Bug #8192: dpinger - Change in ISP link-local IPv6 address drops connectivity Actions
Bug #8263: Cannot create a nonlinear `Link Share` service curve because of: "the sum of the child bandwidth higher than parent" Actions
Bug #8273: IPv6 GRE tunnel over PPPoE fails on startup Actions
Bug #8611: unable to receive IPv6 RA's on SG-1000, default route lost Actions
Bug #8815: IP addresses are removed from interfaces when link is lost and either IPv4 or IPv6 is dynamic Actions
Bug #8964: IPsec async cryptography advanced setting - TCP traffic not passing through Actions
Bug #9136: IPv6 Tracking Interfaces Lose IPv6 Address in Certain Cases Actions
Bug #9349: IPSec service start/stop/restart fails after settings change Actions
Bug #9384: devd putting "$" before variable contents when using single quotes Actions
Bug #10513: State issues with policy routing and HA failover Actions
Bug #10530: Convert config version to be based on product version Actions
Bug #10690: Not possible to make UFS install on ZFS formatted drive Actions
Bug #10708: ZFS bootpool boot symlink issue Actions
Bug #10875: PPP periodic reset does not fully restore gateway group round-robin functionality Actions
Bug #10892: Large number of VLAN/LANs make floating rules are to read Actions
Bug #11110: Backup file should be checked before restoring a specific area Actions
Bug #11296: Static route targets may still reachable via default route when the gateway they should route through is down Actions
Bug #11335: Spoofing the MAC on a LAGG interface does not work for some NIC types. Actions
Bug #11429: System Log / Settings form activates "Reset Log Files" button on enter Actions
Bug #11430: PHP console spam after Assigning Interfaces Actions
Bug #11503: Using multiple authentication backends on an OpenVPN server fails Actions
Bug #11541: OpenVPN status does not work properly when set to TCP and Concurrent Connections = 1 Actions
Bug #12095: Memory leak in pcscd Actions
Bug #12335: IPsec DNS inefficiency Actions
Bug #12357: Captive Portal popup Logout button loads full login page in popup when clicked Actions
Bug #12715: Long system startup time when LDAP is configured and unavailable during startup. Actions
Bug #13102: Deleting an IPsec tunnel doesn't destroy the SA (SADs/SPDs), causes crash in status_ipsec.php Actions
Bug #13217: dhclient using default pid file location which does not exist Actions
Bug #13273: dhclient can use conflicting recorded leases Actions
Bug #13329: Traffic shaping Wizard sets invalid values for qVoip queue Actions
Bug #13450: L2TP Clients system alias is not populated Actions
Bug #13480: GIFs are not automatically started when parent interface doesn't have an address at boot Actions
Bug #13483: dhcp6c shouldn't be killed and restarted on interface reconfigurations Actions
Bug #13487: GUI IPV6-WAN-status stays "Offline, Packetloss" after a short communication hick up Actions
Bug #13680: Package install scripts run after PHP upgrade produce errors Actions
Bug #13734: PPP interfaces with a QinQ parent can't initialize the PPPoE node for link Actions
Bug #13792: Filterdns assumes sets of resolved addresses for each hostname are nonintersecting Actions
Bug #13793: filterdns does not reconcile modelled tables with the current state of filter tables Actions
Bug #13937: New OpenVPN entries are not immediately reflected in RRD graphs Actions
Bug #13961: Virtual IP address input validation does not check for overlap with DHCP address ranges Actions
Bug #14244: ``get_interface_list()`` in ``util.inc`` does not always match the expected device in ``dmesg``. Actions
Bug #14262: IPv6 firewall log entries do not wrap and force the table width past the width of the page Actions
Bug #14350: Captive portal text messages are not translated Actions
Bug #14577: OpenVPN not removing old Cisco-AVPair anchor rules and files in ``/tmp`` Actions
Bug #14648: Values obtained from ``sysctl`` are sometimes unexpectedly empty, leading to PHP and other math errors Actions
Bug #14921: External Config Locator does not trigger a pkg sync except on first boot Actions
Bug #14983: Upgrade can fail when unexpected EFI partitions are present. Actions
Bug #15081: Upgrade fails due to undersized EFI filesystem Actions
Bug #15116: Kea not working with UEFI HTTPBoot URL configured Actions
Bug #15448: ``miniupnpd`` lacks IGDv2 support Actions
Bug #15518: Kea does not send configured TFTP server name Actions
Bug #15637: Kea DHCP service control inconsistencies Actions
Bug #15757: Incorrect dashboard column spacing when using five columns Actions
Bug #15809: UFS upgrades do not create new log files Actions
Bug #15847: Kea DHCP lease utilization stats incorrect for delegated prefix pools Actions
Bug #15902: After an IPv6 prefix and IP change on the WAN interface the KEA DHCP service crashes and cannot be restarted Actions
Bug #16191: Early DNS registration can add invalid addreses Actions
Bug #16194: IPv6 ICMP firewall log entries marked with protocol "Options" instead of ICMPv6 Actions
Bug #16197: underscore (_) is not permitted in Identifier (Pre-Shared key) Actions
Bug #16798: UDP Broadcast Traffic Sent out WAN when Policy-based Route is Defined Actions
Bug #16881: Auto-added routes for IPsec remote gateways are not removed after P1 deletion for any interface assigned to "wan" Actions
Bug #16886: PPPoE Server includes LAN address as DNS even when bound to a different interface Actions
Bug #16888: Console Menu option 2 clears unrelated configuration Actions
Bug #16890: UPnP input validation allows using WAN for the inside interface Actions
Bug #16891: ALTQ queues are shown for disabled interfaces Actions
Bug #16931: DHCP Server and Relay pages list unsupported interfaces Actions
Bug #17004: Config warning when saving duplicated alias Actions
Bug #17021: Port Forward associated rule option "pass" is unnecessarily creating firewall rule entries with incorrect attributes Actions
Bug #17023: Non-CARP VIPs used as the RA interface are used for radavd HA Actions
Bug #17026: Gateways Widget No Longer Shows ms and % Strings Actions
Feature #2386: Bridge member that is not an assigned interface Actions
Feature #4405: Traffic shaping doesn't work when applied to a bridge interface Actions
Feature #11440: Expand collapsed sections by clicking anywhere on header Actions
Feature #11589: Fix iftop experimental traffic fetcher, unify and improve output style Actions
Feature #12077: Allow stick-connections per gateway group Actions
Feature #12121: Wider "local network(s)" fields in OpenVPN server configuration Actions
Feature #12553: Auto Config Backup: Allow selecting multiple backups for deletion Actions
Feature #13244: Add help text under Timezone settings in the GUI Actions
Feature #13293: Option to set auth-gen-token in OpenVPN GUI Actions
Feature #13351: Improve Indicated Memory Usage in the Dashboard Actions
Feature #13362: Update dynamic gateway consumers when their interface is renamed Actions
Feature #13499: Namecheap service type is missing help text for the password field Actions
Feature #13710: Support UTF-8 CA/Certificate subject components Actions
Feature #13843: Add ability to properly configure RADIUS captive portal user quotas of 4096MB or more Actions
Feature #13844: Make RADIUS Start/Stop accounting immediately log off a user that exceeds quota when reauthentication is disabled Actions
Feature #14122: Allow selecting the repo branch on config restore Actions
Feature #14166: Use netstat output for interface packet counters Actions
Feature #14437: Add DynDNS Provider - Hetzner Actions
Feature #14483: Conditionally reconfigure IPsec VTI interfaces only when necessary while applying IPsec changes Actions
Feature #14620: Support running DHCPv4 Server and DHCPv4 Relay at the same time on different interfaces Actions
Feature #14762: Support X25519 and X448 public key algorithms in certificates Actions
Feature #15090: Improve feedback from config recovery during install Actions
Feature #15323: Display server description when WOL is sent using mac url or power-on button Actions
Feature #15544: Add hostname to Slack notifications Actions
Feature #15636: High Availability Status Changes Actions
Feature #15647: Include ability to generate Configuration file and QR Code for wireguard configuration Actions
Feature #15648: Include ability to gen private/public key in UI for easier WireGuard client provisioning Actions
Feature #15659: Kea option for ``reservations-out-of-pool`` and associated input validation (IPv4 and IPv6) Actions
Feature #15745: Add User Manager Setting to control Remote Authentication fallback behavior Actions
Feature #15766: Enable autocomplete for log filters Actions
Feature #15922: Allow using dhcp mappings in host aliases for any service Actions
Feature #15934: Kea Lease Reclamation and Affinity Options (IPv4 and IPv6) Actions
Feature #16029: Add option to search for LDAP groups in the base DN Actions
Feature #16159: Provide periodic connection reset for if_pppoe Actions
Feature #16189: Better Logging for LDAP Connection Errors Actions
Feature #16877: Extend the anti-lockout feature to all LAN interfaces Actions
Feature #16880: Extend the LAN bypass option for IPsec to all LAN subnets Actions
Feature #16887: Extend ``enableallowallwan`` script to apply to all WAN interfaces Actions
Todo #12367: ZFS: Do not show memstick disk on target list Actions
Todo #13508: Uncouple RAM Disk size from available kernel memory Actions
Todo #13644: Enable ALTQ support in cxgbe(4) Actions
Todo #14264: Consider lowering default session timeout from current default of four hours (240m) Actions
Todo #14352: Virtual IP address configuration input fields are handled inconsistently between VIP types Actions
Todo #14359: Reorganize Advanced Options Actions
Todo #15408: Reduce inconsistencies between Configuration History with/without ZFS Boot Environments Actions
Todo #16547: Make Priority field when editing a VLAN consistent with the VLAN Priority fields in firewall rules Actions
Todo #16668: Upgrade PHP to 8.5.x Actions
Todo #16874: Improve handling of custom interface assignments Actions
Todo #16875: Remove obsolete interface configuration scripts Actions
Todo #16876: Remove option "IPv6 over IPv4 Tunneling" Actions
Todo #16878: Remove unused PF option "loginterface" from generated ruleset Actions
Todo #16879: Remove redundant hosts file reconfiguration when configuring an interface assigned to "lan" Actions
Todo #16885: Improve dhcp6c wait timer during boot Actions
Todo #16889: Allow reconfiguring all WAN interfaces with ``rc.interfaces_wan_configure` Actions
Todo #16950: Add upgrade code to normalize widget sequence data Actions

Future

open

Items for an indeterminate later release

3%

113 issues   (5 closed — 108 open)

Related issues
Bug #1675: Captive portal logout problems with pop-up blockers. Actions
Bug #4406: ALTQ problems with wireless cloned interfaces Actions
Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel Actions
Bug #5367: Safari repeatedly tries to reload dashboard Actions
Bug #5786: Check WebConfigurator port for conflicts Actions
Bug #6167: IPsec IPComp not working Actions
Bug #6186: race conditions in service startup Actions
Bug #6696: Add configure link to Status > Queues error message if traffic shaping not configured Actions
Bug #7082: pkg_edit.php - impossible to use default_value with rowhelperfield Actions
Bug #7138: Pfsense wide dhcpv6 client doesn't recognise ifid statement Actions
Bug #7195: pkg_edit.php - <checkenablefields> tag has no effect on fields other than checkbox/input Actions
Bug #7222: Encryption No Longer Enforced for Email Notifications Actions
Bug #7288: The field 'Distinguished name Organization' contains invalid characters Actions
Bug #8502: main (top) menu items do not drop down in some cases Actions
Bug #8614: Cannot remove Additional BOOTP/DHCP Options Actions
Bug #8820: System/Advanced/Misc - "Do not kill connections when schedule expires" UN-checked still leaves existing connections open. Actions
Bug #9344: OpenVPN click NCP Algorithms will always go to DH Parameters website(in Chinese-Taiwan) Actions
Bug #9353: PHPSession errors from limited access to dashboard and widgets Actions
Bug #9755: package description wrong link https://www.freshports.org/security/openvpn-client-export Actions
Bug #10310: Systems with low RAM and several packages may temporarily fail to load large tables after an upgrade Actions
Bug #10352: RADIUS authentication fails with MSCHAPv1 or MSCHAPv2 when passwords contain international characters Actions
Bug #11093: ral(4) driver non-functional in arm64 Actions
Bug #11352: CTF types > 2^15 in the pfSense kernel config results in DTrace failing Actions
Bug #11473: System Activity shows invalid data on SG-3100 Actions
Bug #12013: Reading log data is inefficient in certain cases Actions
Bug #15228: User manger fails to display certificate option for a new user in case of input error Actions
Bug #15708: The filterdns service won't start Actions
Feature #84: Nightly Filter Summary E-Mail Actions
Feature #96: Add "All local networks" to source and destination drop down boxen in firewall rules Actions
Feature #286: Backup/restore users individually Actions
Feature #290: Add Multi-WAN awareness to UPnP Actions
Feature #521: Group manager Assigned Permissions Actions
Feature #701: Interface groups with NAT Actions
Feature #946: Allow aliases to be used to define IPsec phase 2 networks Actions
Feature #1257: Handle encypted CA/Certificate private keys Actions
Feature #1268: Allow mass renewing of certs Actions
Feature #1337: VLANs with different MAC address than parent interface Actions
Feature #1831: Captive portal IPv6 support Actions
Feature #2024: RRD Graphs for packages Actions
Feature #2479: Allow reordering of the traffic graphs on the dashboard Actions
Feature #2593: sync NTPD, SNMP config between HA members Actions
Feature #2676: Reply-to option in firewall rule Actions
Feature #2965: Mac Firewalling Actions
Feature #3115: Traffic shaping for multi WAN Actions
Feature #3185: Accommodate a DHCPv6 failover-like mechanism Actions
Feature #3377: OAuth2 authentication in captive portal Actions
Feature #3652: OpenVPN - Dynamic IPv6 Tunnel Network Actions
Feature #3696: Multiple items backup/restore Actions
Feature #3697: New backup/restore area: Certificates Actions
Feature #3882: Add OUI database to the base system, remove dependency on nmap Actions
Feature #4098: Add option to force a password change on login Actions
Feature #4195: Aliases: sections Actions
Feature #4234: allow for strict user <> cn validation of mobile ipsec users when using rsa+xauth Actions
Feature #4632: Support for Multipath TCP (MPTCP) Actions
Feature #4724: Captive Portal Status Add Client Hostname Actions
Feature #4776: Add 802.1x dynamic vlan support Actions
Feature #5307: Add logarithmic scale option to RRD graphs Actions
Feature #5510: Need a simple way to enable/disable package-installed services Actions
Feature #5619: Curl with ARES support Actions
Feature #5735: Automaticaly add DHCP leases to alias list or make it readable in selected fields Actions
Feature #5835: Improve OpenVPN client gateway detection in edge cases where the remote does not send gateway information Actions
Feature #5950: DHCPv6 Server support for PD of PD-obtained networks Actions
Feature #6457: Allow ability to configure AWS EC2 AMI via userdata Actions
Feature #6728: Route53 API mod and Geolocation Actions
Feature #6742: OAuth2 authentication for OpenVPN (and for FreeRadius) Actions
Feature #7078: Allow reordering of client specific overrides in OpenVPN Actions
Feature #7181: Add Top and Add Bottom on Seperator Actions
Feature #7182: Break up System Widget on the Dashboard Actions
Feature #7244: Publish pfsense as a Vagrant Basebox Actions
Feature #7260: Source OS / p0f Database Missing Modern Operating Systems Actions
Feature #7783: Support for hosting VMs on pfSense using bhyve Actions
Feature #7847: USB NIC not loading (TP-Link UE300 RTL8153) Actions
Feature #7852: Add views support to Unbound GUI Actions
Feature #8316: expiration date when creating new rules Actions
Feature #8474: Easier Conversion to HA Pair from Existing Non-HA Firewall Actions
Feature #8694: Client CA Auth for PFSense WebGui Actions
Feature #8712: QOS on ipsec links Actions
Feature #8775: Use SRV record for LDAP Authentication Actions
Feature #8879: DHCP options ADD force options Actions
Feature #9536: Support dynamic prefix in DHCPv6 Server Actions
Feature #9574: Show changelog at package upgrade Actions
Feature #9680: Seperate DHCP Server and relay per interface Actions
Feature #9717: Search box for pfsense ? Actions
Feature #9718: Make diag_states_summary table sortable Actions
Feature #9942: Give pfSense the possibility to change the keyboard Layout for console users Actions
Feature #10204: Possible clarification of Track IPv6 Interface Subnet ID Actions
Feature #10223: Add the ability to create additional loopback interfaces Actions
Feature #10250: DHCP lease view by interface Actions
Feature #10404: Consider using chrony for NTP services Actions
Feature #10467: Email alert functionality for system health Actions
Feature #10987: Add support for secure boot Actions
Feature #11056: Add option to disable flow-control on interfaces in GUI Actions
Feature #11270: Consider integrating Nebula mesh VPN Actions
Feature #11302: WireGuard XMLRPC sync Actions
Feature #11324: Separate syslog "Remote log servers" Parameters Actions
Feature #11498: WireGuard does not pass multicast traffic to peer Actions
Feature #11588: Automatically suggest next IP address in Wireguard interface subnet when creating a peer Actions
Feature #11604: WireGuard Dynamic Listen Port Randomization Actions
Feature #11921: Feature Request: Compile unbound with EDNS Client Subnet (ECS) module (--enable-subnet) Actions
Feature #12521: Add the BBR2, QUIC, RACK Congestion Control (CC) protocols Actions
Feature #12564: add column to show that an Alias is in use by or not Actions
Feature #12863: dynamically tune sha512crypt rounds Actions
Feature #13805: A way to reliably determine if system is the primary or secondary in CARP Actions
Feature #14666: Option to add automatic pass rules for IGMP Proxy which allow IP options Actions
Feature #15078: Display all available updates on the dashboard Actions
Todo #32: PPPoE Server users integration with user manager Actions
Todo #33: L2TP users integration with user manager Actions
Todo #5902: Use a common place for default values Actions
Todo #6647: Enable Additional Security Headers Actions
Todo #6697: White squares around the numeric values in the Status / Queues page Actions
Todo #11280: Add WireGuard to ALTQ list Actions
Todo #12025: Add 1:1 Validation to Notify Someone They are 1:1 NAT'ing an Interface Address Actions

pfSense Packages - Future

open

Scheduled for an unspecified future version, typically not the next one

37%

8 issues   (3 closed — 5 open)

Related issues
pfSense Packages - Bug #7267: Status Traffic Totals - Stacked Bar - Scale not high enough Actions
pfSense Packages - Bug #10791: Valid (vlan)interfaces do not get vif reporting "Invalid phyint address" Actions
pfSense Packages - Bug #13153: Static routes bound to WireGuard interfaces are not restored after down / up events Actions
pfSense Packages - Feature #11178: Filer do not ask what to do with previous filename Actions
pfSense Packages - Feature #11798: HA Sync for FRR config Actions
pfSense Packages - Feature #12358: IP List Copy/Import/Export Actions
pfSense Packages - Feature #12909: Convert Suricata GeoIP Lookup feature on ALERTS tab to use local GeoIP2 database Actions
pfSense Packages - Feature #13284: Option to define "Issuer" in OPT configuration. Actions