Project

General

Profile

Roadmap

2.4.4-GS

2.4.4 RELEASE - Internal development release

79%

24 issues   (15 closed — 9 open)

Related issues
Bug #6028: no firewall rules loaded after reboot with invalid ruleset
Bug #6167: IPsec IPComp not working
Bug #7609: NTP Status not parsing all NTP Access Restrictions preventing status display when it is actually allowed
Bug #8499: IPv6 fragment logging causes panic in some circumstances
Bug #8893: Outbound NAT page unnecessarily strips underscores from alias names
Bug #8914: Gateway switch events cause a huge amount of log spew
Bug #8924: FreeDNS Dynamic DNS update needs IP
Bug #8927: PFsense 2.4.4 FreeRadius and Captive Portal Quota Problems
Bug #8933: diagnostics -> backup/restore -> reinstall packages hangs
Bug #8934: IPv6 fragment reassembly regression following FreeBSD-SA-18:10.ip
Bug #8935: IGMP Proxy not starting with PPPoE IF
Bug #8938: Installation of a package that depends on php72 on a version of pfSense older than 2.4.4-RELEASE breaks the pfSense install
Bug #8949: DHCPv6 Server Network Booting fails to be set
Bug #8953: Status > Gateways shows incorrect info
Bug #8962: firewall_rules.edit.php: Double quotes in Gateway description cause blank gateway drop-down
Bug #8967: PHP error in DNS Forwarder when config has no dnsmasq settings
Bug #8974: system_advanced_admin.php: Inconsistent placement of ssh options and lack of initialization
Bug #8993: PHP error from filter_rules_sort() when config.xml contains no rules
Feature #8926: WOL page selects first interface alphabetically, instead of LAN
Feature #8947: Cron based ACB option
Feature #9001: Add checkbox to disable SSL peer verification for SMTP notifications
pfSense Packages - Bug #8945: SquidGuard ACL blacklists
pfSense Packages - Bug #8989: [Freeradius] not starting radiusd -X | Errors reading /usr/local/etc/raddb/dictionary: dict_init: /usr/local/etc/raddb/dictionary[6] invalid entry

2.4.4-p1

First 2.4.4 public update

79%

63 issues   (31 closed — 32 open)

Related issues
Bug #7143: filterdns is triggering every 16 seconds for hosts even when the DNS record has not changed
Bug #8001: Invalid FQDN in alias causes alias table to fail *silently*
Bug #8465: Lost default gateway after recover from failover with CARP VIP and HA
Bug #8554: /etc/rc.kill_states code not correctly parsing pfctl output
Bug #8590: sshd does not allow agent forwarding
Bug #8758: filterdns stops working on a regular basis.
Bug #8815: IPv4 addresses disappear from interfaces when link is lost
Bug #8859: VTI: Some third-party vendors require rightsubnet to have a mask for VTI, rather than address
Bug #8864: SSH Guard Sensitivity/Whitelist on 2.4.4
Bug #8915: After updating to 2.4.4-rc an empty crash report is shown
Bug #8921: dpinger without .pid files.?. 'pending' status
Bug #8937: LAGG shows wrong ether address
Bug #8954: hn0: driver does not support altq
Bug #8956: traffic shaper after upgrade to 2.4.4 not showing queue under each limiter
Bug #8959: Restoring a <2.4.4 config with legacy gold auto backup package re-adds the menu option under Diagnostics
Bug #8961: IPSEC issues with Asynchronous Cryptography
Bug #8964: IPsec async cryptography advanced setting - TCP traffic not passing through
Bug #8970: Queues Menu item ends with ":"
Bug #8973: Traffic not going to Limiter queues
Bug #8977: Dynamic DNS - Custom (V6) - Throws Error "php-fpm: /services_dyndns_edit.php: phpDynDNS: (ERROR!) No Hostname Provided."
Bug #8978: vidconsole is invalid for efi booted systems
Bug #8980: Disabling hardware checksums does not disable IPv6 transmit checksum
Bug #8994: Two RRDDATA Sections in Restored Config Breaks Unit
Bug #8995: MTU Trouble with Orange is back
Bug #8998: All Captive Portal zones send only "CaptivePortal" as NAS Identifier
Bug #9002: [Interfaces :: WAN :: PPPoE] The service name contains invalid characters
Bug #9006: Using umlauts in client specific overrides common names field causes restore of old config backup
Bug #9009: Cannot create Schedule
Bug #9010: Captive Portal Unable to logout
Bug #9015: Default gateway doesn't switch as expected
Bug #9019: Hyper-V hn NICs drop UDP6 traffic when transmit checksums are enabled
Bug #9029: Proxy authentication is not working for HTTPS
Bug #9042: Web GUI does not recognise NVMe devices as SMART capable
Bug #9045: Race condition in package reinstall/startup after restore can lead to no packages restored
Bug #9048: Installer memsticks using GPT should always have partition count that is a multiple of 4
Bug #9051: Privileges on 'all' group are not being honored
Bug #9055: IKEv2 EAP Identity vs client ID matching for per-client settings with local users
Bug #9056: DNS search domain omitted in some cases
Bug #9059: Update Unbound to 1.8.1
Bug #9066: ecl.php: Checking /config path is not working due to lack of trailing slash
Bug #9067: PHP error when installing first package with empty installedpackages tag
Bug #9071: Package restore after fresh install can fail, claiming packages do not exist
Bug #9080: firewall_nat_1to1.php: PHP error with empty 1:1 NAT rule list
Bug #9081: signed long rollover in "Log file size (Bytes)" can cause self-inflicted DoS
Bug #9083: Config upgrade issue with empty IPsec P1
Bug #9086: Local Database authentication is failing in other languages
Bug #9095: PHP error when saving logs with empty syslog tag
Bug #9098: Default CRL lifetime of 9999 rolls over at 2038 on ARM
Bug #9099: system_certmanager.php: Empty cert tag can lead to PHP error
Bug #9102: PHP7: Error on restoring a config with packages
Bug #9105: WebGUI option toggles that need nginx restart are not triggering when disabled
Bug #9106: strongSwan 5.7.1 will not start on some 2.4.4/2.4.5 systems, log shows "charon has quit: integrity test of libstrongswan failed"
Bug #9109: interfaces_qinq_edit.php: PHP error when editing QinQ entries
Feature #8943: Additions to wake on lan section
Feature #8976: Status -> Traffic Graph, provide SAVE button for graph settings.
Feature #9032: RADIUS MAC Authentication: display the login page when MAC auth failed
Feature #9104: Add a FAT32 partition to memstick installer images
Todo #8898: Update strongswan to 5.7.1
Todo #9026: PTI checkbox wording can be confusing, should give a little more detail and show current PTI status
pfSense Packages - Bug #8607: Suricata package fails to prune suricata.log
pfSense Packages - Todo #9041: update ntopng 3.6.0

2.4.5

2.4.x maintenance release

2%

46 issues   (0 closed — 46 open)

Related issues
Bug #1819: DNS Forwarder Not Registering DHCP Server Specified Domain Name
Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel
Bug #6025: Load balancing fails when one gateway has a weight of 1 and another gateway has a weight >1
Bug #6030: Duplicated tracker IDs on block private networks rules
Bug #6186: race conditions in service startup
Bug #6263: Encryption options for every P2 on a given P1 are written to each P2 individually inside ipsec.conf with multiple P2 entries + split conn entries
Bug #6277: RRD graphs are not created correctly for interfaces using CODELQ
Bug #6333: Bootup starts/restarts dpinger multiple times
Bug #6868: Interface MTU Setting not applied to all IPv6 routes
Bug #7146: install_cron_job() causes inexplicable issues when saving package configuration
Bug #7384: DHCPv6 doesn't merge IPv6 prefix with the input submitted in DNS servers field when using Track Interface IPv6 configuration parameter for the LAN interface.
Bug #7389: Limiter does not work with transparent proxy
Bug #7772: Regression of Bug #906
Bug #7801: UDP fragments received over IPsec tunnel are not properly reassembled and forwarded
Bug #8100: pfsync Initially Deletes States on Primary for Connections Established through Secondary
Bug #8136: dpinger for WAN DHCPv6 gets fails to update gateway IP
Bug #8192: dpinger - Change in ISP link-local IPv6 address drops connectivity
Bug #8248: Pfsense hangs - non pingable when removing traffic shaper from interface(s)
Bug #8263: Cannot create a nonlinear `Link Share` service curve because of: "the sum of the child bandwidth higher than parent"
Bug #8273: IPv6 GRE tunnel over PPPoE fails on startup
Bug #8443: DHCP relay not starting after ovpnc interface is unchecked - vm 2.4.3
Bug #8472: IPsec with "Split connections" enabled (multiple P2's) - new added P2's are not coming up (between two pfsense's 2.4.3)
Bug #8489: DHCPv6 Client Failure to Initialize with "Do not wait for RA"
Bug #8531: URL Table aliases don't support FQDNs or names that return >1 IP
Bug #8611: unable to receive IPv6 RA's on SG-1000, default route lost
Bug #9100: CA/Cert valid end dates after 2038 are blank on ARM
Feature #855: More flexible options for state killing based on WAN status
Feature #1337: VLANs with different MAC address than parent interface
Feature #3377: OAuth2 authentication in captive portal
Feature #3473: Allow configuration of OpenVPN keepalive
Feature #4405: Traffic shaping doesn't work when applied to a bridge interface
Feature #6324: Improve IKEv2 multiple traffic selector per SA configuration GUI
Feature #6742: OAuth2 authentication for OpenVPN (and for FreeRadius)
Feature #6775: Strongswan PKCS#11 Support
Feature #7467: Add iPhone/Android/Generic USB tethering support
Feature #7767: OCSP support for OpenVPN server
Feature #8160: Accomodate both RADIUS and pool IP addresses in IPsec
Feature #8861: Show more detail on status_interfaces.php
Feature #9111: Add IPsec VTI interface MTU support
Todo #8350: Remove clog in favor of standard syslogd or syslogd alternative with rotation via newsyslog or logrotate
Todo #8821: Remove Growl Notifications
Todo #8886: Update downloads page once hybrid iso/img installers are implemented
pfSense Packages - Bug #7267: Status Traffic Totals - Stacked Bar - Scale not high enough
pfSense Packages - Feature #8985: Suricata: allow configuration for external/internal additional storage

Future

Items for an indeterminate later release

12%

142 issues   (18 closed — 124 open)

Related issues
Bug #1605: DHCP Server should group known clients by interface
Bug #1675: Captive portal logout problems with pop-up blockers.
Bug #3132: Gateway events for IPv6 affect IPv4 services and vice versa
Bug #3445: Proxy URL behaviour for package list - trailing slash
Bug #4154: RADIUS authentication not working over IPv6
Bug #4406: ALTQ problems with wireless cloned interfaces
Bug #4716: "DNS Resolver" lacks SOA for ".local" domain setups
Bug #5367: Safari repeatedly tries to reload dashboard
Bug #5539: rc.firmware - cut does not cut it...
Bug #5786: Check WebConfigurator port for conflicts
Bug #5826: Auto-exclude LAN address feature only works for the LAN interface
Bug #6696: Add configure link to Status > Queues error message if traffic shaping not configured
Bug #6880: Multiple DHCP6 WAN connections leads to multiple dhcp6c clients
Bug #7082: pkg_edit.php - impossible to use default_value with rowhelperfield
Bug #7138: Pfsense wide dhcpv6 client doesn't recognise ifid statement
Bug #7195: pkg_edit.php - <checkenablefields> tag has no effect on fields other than checkbox/input
Bug #7222: Encryption No Longer Enforced for Email Notifications
Bug #7288: The field 'Distinguished name Organization' contains invalid characters
Bug #7841: CARP Sync Issue - when no internet on standby
Bug #8013: IPsec MSS clamping value shared for IPv4 and IPv6
Bug #8502: main (top) menu items do not drop down in some cases
Bug #8576: pfSense stops passing traffic after some time when using Outbound NAT pool w/ Sticky Address
Bug #8614: Cannot remove Additional BOOTP/DHCP Options
Bug #8818: Thermal Sensor
Bug #8820: System/Advanced/Misc - "Do not kill connections when schedule expires" UN-checked still leaves existing connections open.
Bug #8847: IPsec status
Bug #8987: Web GUI main page very slow to load if wan interface is enabled but not connected.
Feature #84: Nightly Filter Summary E-Mail
Feature #96: Add "All local networks" to source and destination drop down boxen in firewall rules
Feature #97: Captive Portal should sync its database to other members of clusters
Feature #286: Backup/restore users individually
Feature #290: Add Multi-WAN awareness to UPnP
Feature #521: Group manager Assigned Permissions
Feature #701: Interface groups with NAT
Feature #746: Add interface group to source/dest drop downs
Feature #773: CODE for remove unnecesary menu items for users with restrictions.
Feature #790: Advanced options for dnsclient (resolv.conf)
Feature #806: Add private networks to rules dropdown
Feature #885: Show gateway/group IPs on mouseover
Feature #939: Ability to restore specific areas of configuration backup from full config backup
Feature #946: Allow aliases to be used to define IPsec phase 2 networks
Feature #997: Add per-user setting for activating menu
Feature #1169: Add load balancer status in SNMP
Feature #1205: VPN: User-based / Group-based firewall rules
Feature #1268: Allow mass renewing of certs
Feature #1831: Captive portal IPv6 support
Feature #1979: Add some default read-only system aliases
Feature #2024: RRD Graphs for packages
Feature #2358: NAT64 Support
Feature #2386: Bridge member that is not an assigned interface
Feature #2424: Allow masking of pass-thru MACs
Feature #2479: Allow reordering of the traffic graphs on the dashboard
Feature #2593: sync NTPD, SNMP config between HA members
Feature #2668: Allow Alias network names in OpenVPN local/remote/tunnel networks
Feature #2676: Reply-to option in firewall rule
Feature #2960: Add queue length adjustment capabilities to traffic shaper based on network size
Feature #2965: Mac Firewalling
Feature #3115: Traffic shaping for multi WAN
Feature #3156: Grouping rules
Feature #3178: IPSec dynamic hosts for IPv6
Feature #3185: Accommodate a DHCPv6 failover-like mechanism
Feature #3244: Check that OpenVPN tunnel network does not overlap any other subnet
Feature #3336: Setting per-pool timeout in load balancer
Feature #3393: AS filtering support in aliases
Feature #3474: Openvpn client-specific-overrides ip conflicts
Feature #3559: add option for backup ddns ( dynamic dns ) in restore area
Feature #3652: OpenVPN - Dynamic IPv6 Tunnel Network
Feature #3696: Multiple items backup/restore
Feature #3697: New backup/restore area: Certificates
Feature #3882: Add OUI database to the base system, remove dependency on nmap
Feature #4024: Add a reject rule to prevent traffic from "falling through" relayd and reaching the GUI accidentally
Feature #4098: Add option to force a password change on login
Feature #4194: Mass maintenance tools :-)
Feature #4195: Aliases: sections
Feature #4209: Releasing DHCP on WAN interface should send a release
Feature #4234: allow for strict user <> cn validation of mobile ipsec users when using rsa+xauth
Feature #4259: Port forward NAT rules with "any" protocol
Feature #4632: Support for Multipath TCP (MPTCP)
Feature #4724: Captive Portal Status Add Client Hostname
Feature #4789: user interface / text fields are too short to display long alias names
Feature #4821: PPPoE WANs do not take full advantage of NIC driver queues for receiving traffic
Feature #4881: allow dynamic IPs-nets for NPt
Feature #5307: Add logarithmic scale option to RRD graphs
Feature #5510: Need a simple way to enable/disable package-installed services
Feature #5619: Curl with ARES support
Feature #5735: Automaticaly add DHCP leases to alias list or make it readable in selected fields
Feature #5835: Improve OpenVPN client gateway detection in edge cases where the remote does not send gateway information
Feature #5851: Add copy action to OpenVPN client / server
Feature #5919: Add a control to the web gui to allow the setting of leftsendcert in IPSec
Feature #5922: SNMP - enable SNMP v3 functionality
Feature #5950: DHCPv6 Server support for PD of PD-obtained networks
Feature #6293: Include 'if_urndis.ko' kernel module for USB network tethering
Feature #6392: Allow folding based on separators in firewall rules
Feature #6457: Allow ability to configure AWS EC2 AMI via userdata
Feature #6728: Route53 API mod and Geolocation
Feature #6960: Consider replacing ISC DHCP server with KEA DHCP
Feature #6961: IPv4/IPv6 Dual-Stack IPSEC mobile vpn
Feature #6989: Add second IP to monitoring in "Gateway Monitoring"
Feature #7077: Display negotiated cipher for NCP OpenVPN connections in Status->OpenVPN
Feature #7078: Allow reordering of client specific overrides in OpenVPN
Feature #7181: Add Top and Add Bottom on Seperator
Feature #7182: Break up System Widget on the Dashboard
Feature #7224: Abandon rate in favor of iftop
Feature #7244: Publish pfsense as a Vagrant Basebox
Feature #7260: Source OS / p0f Database Missing Modern Operating Systems
Feature #7327: add working sftp support to sshd daemon
Feature #7353: Openvpn Logins page
Feature #7410: IPSEC multiple dynamic IP remote clients
Feature #7416: Dhclient does not support supersede statement for option 54
Feature #7544: Graphing hits against firewall rules.
Feature #7783: Support for hosting VMs on pfSense using bhyve
Feature #7803: Include more OpenVPN Options in GUI
Feature #7847: USB NIC not loading (TP-Link UE300 RTL8153)
Feature #7852: Add views support to Unbound GUI
Feature #7882: Seperator feature in DHCP Static mapping for this feature
Feature #7897: User Dashboard
Feature #8084: Implementação do Login Social no Captive Portal
Feature #8171: Close TCP connections if associated rule just has been disabled
Feature #8284: Add duplicate option next to OpenVPN servers and clients
Feature #8316: expiration date when creating new rules
Feature #8346: Let pFSense act as an IPSec XAuth VPN Client
Feature #8474: Easier Conversion to HA Pair from Existing Non-HA Firewall
Feature #8511: Dynamic DNS: Cloudflare Add TTL option
Feature #8712: QOS on ipsec links
Feature #8775: Use SRV record for LDAP Authentication
Feature #8841: Floating rules : add interface column
Feature #8849: DHCP Custom configuration
Feature #8879: DHCP options ADD force options
Feature #8946: Add field to show IA_PD to DHCP6 Server page
Feature #9044: Add SoftEther
Todo #32: PPPoE Server users integration with user manager
Todo #33: L2TP users integration with user manager
Todo #204: All write_config() statements should include a reason of some sort
Todo #1521: Investigate FreeBSD route metric support for future versions
Todo #4123: Add support to multiple tables to expiretable
Todo #5902: Use a common place for default values
Todo #6645: More reliable update system
Todo #6647: Enable Additional Security Headers
Todo #6697: White squares around the numeric values in the Status / Queues page
Todo #6727: Missing file apple-touch-icon-precomposed.png ?