2.9.0 open pfSense CE software release 99% 202 issues (188 closed — 14 open) Related issues Bug #14741: PHP error in DNS Forwarder host overrides when the language is set to French Actions Bug #15017: DHCP relay does not respect configured CARP VIP status Actions Bug #15087: IPsec Keep Alive does not update the gateway status Actions Bug #15346: Cannot add Port Forward with an unassociated filter rule Actions Bug #15411: Log entries without a hostname can cause the system log to display in an unexpected manner Actions Bug #15770: Using a Limiter on a rule with a gateway group limits all traffic through that gateway instead of the host IP address Actions Bug #16141: RRD data fails to restore via the ECL Actions Bug #16142: XMLRPC requests fail due to incorrect request path Actions Bug #16153: ECL can modify a discovered config file Actions Bug #16216: PPPoE interfaces using ``if_pppoe`` increase error counters due to normal ALTQ traffic shaping operations Actions Bug #16218: All-Inkl Dynamic DNS responses are not parsed correctly Actions Bug #16248: QLink/Marvell 41000 NIC bug Actions Bug #16264: Captive Portal Ethernet rules can block ARP Actions Bug #16266: Thermal Sensors widget does not respect per-sensor threshold vales Actions Bug #16272: Input validation text for deleting an IP Alias VIP within a CARP VIP subnet may reference incorrect VIP Actions Bug #16290: ``diag_authentication.php`` crashes with a core dump if RADIUS client Shared Secret value is not correct Actions Bug #16312: ``sshguard`` does not trigger for GUI logins from usernames containing unexpected characters Actions Bug #16314: GUI login events from usernames containing special characters or long strings can cause ambiguous or confusing log messages Actions Bug #16322: Gateway monitoring daemon can unexpectedly use a CARP VIP as the source IP address Actions Bug #16339: Captive Portal ``backwardsyncpassword`` value not sanitized in status output Actions Bug #16341: Error notification and log message ``"Updating repositories metadata" returned error code 1`` at boot due to ``certctl`` race condition Actions Bug #16351: Automatic IPv6 gateways for OpenVPN servers are created with the wrong gateway address Actions Bug #16376: Some remote syslog messages are duplicated when "System Events" option is enabled Actions Bug #16428: OpenVPN does not include ``client-to-client`` in generated configuration for Peer-to-Peer SSL/TLS servers Actions Bug #16429: NAT64 rules using ``reply-to`` do not forward packets Actions Bug #16456: Memory leak in ``libpfctl`` causes ``bsnmpd`` memory usage to grow over time Actions Bug #16472: Cannot set RADVD router lifetime to ``0`` Actions Bug #16475: Filter rule evaluation continues after matching a ``match quick`` rule Actions Bug #16487: Virtual IP addresses on PPPoE interfaces using ``if_pppoe`` can prevent PPP session termination Actions Bug #16495: Gateway list order is incorrect until reloading page after moving entries and saving Actions Bug #16505: Korean locale configuration name is incorrect Actions Bug #16540: Reserved DUMMYNET pipes for Captive Portal can overlap Actions Bug #16546: NAT64 rules do not pass traffic when a gateway is specified for the rule Actions Bug #16549: Captive Portal "Allowed IPs" entries do not work if the language is not set to English Actions Bug #16550: Cannot load alternate TCP Congestion Control kernel modules Actions Bug #16552: Hostnames in Kea static leases may not be registered with DNS Actions Bug #16557: Alerts do not trigger for empty configuration change descriptions Actions Bug #16566: Incorrect configuration change message when deleting an outbound NAT rule Actions Bug #16579: Firewall logs do not correctly parse ``short`` packet errors Actions Bug #16588: ``pfctl`` shows incorrect number of table addresses Actions Bug #16593: Potential remote command execution via DNSSL router advertisement messages Actions Bug #16602: ``kea2unbound`` crashes when reading an invalid configuration file Actions Bug #16610: GUI does not prevent adding a VIP with a blank address Actions Bug #16614: Connections from the firewall itself fail with oversize packets and TSO enabled Actions Bug #16625: Input validation error when saving an existing static route which contains an alias destination Actions Bug #16630: Inconsistent and incorrect privilege names on some PPP service-related log tabs Actions Bug #16634: Some package installation configuration data may be missing after OS upgrade Actions Bug #16637: Unbound configuration validation does not test the complete configuration Actions Bug #16644: Firewall log always shows rules with Reject action under "Associated Rules" Actions Bug #16654: Interfaces menu does not use natural sorting when configured to sort alphabetically Actions Bug #16661: UTF-8 characters in configuration data can result in an invalid configuration Actions Bug #16681: Inaccurate "No default gateway found" log message when the default gateway is set to automatic Actions Bug #16690: Dynamic DNS client ignores Verify SSL/TLS Certificate Trust option when the entry does not contain a username Actions Bug #16705: Automatic gateways for OpenVPN peer-to-peer servers with a ``/30`` tunnel network do not use the peer address Actions Bug #16709: Cannot disable IPsec Advanced Settings tab option for Strict Interface Binding Actions Bug #16719: DHCP clients may not receive the reserved address after changing the DHCP static mapping Actions Bug #16720: GUI performance degradation due to check for weak passwords on each page load Actions Bug #16721: Creating a new user ignores certificate checkbox value if the certificate fields are populated Actions Bug #16724: RAM disk package data is not preserved for additional packages Actions Bug #16726: Loader menu does not display the logo properly Actions Bug #16729: Firewall rule source option ``This Firewall (self)`` is not available when duplicating floating rules Actions Bug #16731: Cannot update GoDaddy Dynamic DNS AAAA record Actions Bug #16743: ``isvalidpid()`` function does not properly check or escape PID file parameter Actions Bug #16744: Potential XSS in Delegated Length value for Prefix Delegation on ``services_dhcpv6.php`` when using Kea Actions Bug #16763: Potential Stored XSS in ``diag_arp.php`` when using ISC DHCP Actions Bug #16769: Interfaces Status shows an invalid SSID value for Wi-Fi interfaces Actions Bug #16770: Potential XSS in RSS Widget feed content post titles Actions Bug #16771: NULL bytes in an IP address can trigger PHP errors from ``ip2long()`` Actions Bug #16773: Potential XSS in Captive Portal widget Actions Bug #16783: Same port forward on multiple WANs can generate a PF error due to Pure NAT mode NAT reflection Actions Bug #16784: "Updating repositories metadata" returned error code 1 appears on dashboard after fresh boot when Tailscale pkg is installed under certain unknown conditions Actions Bug #16799: LDAP shell authentication does not honor configured group DN restriction Actions Bug #16828: Kernel panic (page fault) in ``bpfmtap`` via ``vlantransmit`` with Suricata BPF listeners active on VLAN interfaces Actions Bug #16836: IPsec daemon can crash if a peer initiates two rekeys for the same child SA Actions Bug #16861: Static route not removed when enabling ``dpinger_dont_add_static_route`` while a gateway monitor IP address is set Actions Bug #16906: Unbound configuration may be generated with duplicate interface bindings Actions Bug #16922: Captive Portal authentication failures from usernames containing special characters or long strings can cause ambiguous or confusing log messages Actions Bug #16925: IPv6 Track Interfaces ignores the ``Disabled`` Router Advertisements mode Actions Bug #16927: Multiple ``updaterrd.sh`` processes Actions Bug #16954: Filter rules created as part of NAT rules can have an invalid protocol value Actions Bug #16964: URL tables cannot import content from ``tgz`` file URLs Actions Bug #16979: Traffic Graphs display option "Description" does not utilize DHCP static mapping descriptions Actions Feature #12495: Preserve other record types when updating IPv4 or IPv6 using deSEC DDNS Actions Feature #13340: Option to change QinQ ethertype to Service VLAN Tag Actions Feature #15221: Sort list of System Tunables Actions Feature #15952: PHP RADIUS client ``Message-Authenticator`` attribute capability Actions Feature #16068: Option to disable logging of packets blocked due to unmatched IP options Actions Feature #16166: Option to deactivate ALTQ for VirtIO ``vtnet`` interfaces Actions Feature #16215: Allow floating rules using the "match" action to match based on IP Options Actions Feature #16230: Option to control Kea log level Actions Feature #16241: Block non-global NAT64 addresses by default Actions Feature #16253: Fix configuration artifacts on upgrade Actions Feature #16308: Avoid traffic stalls from unnecessary filter reloads Actions Feature #16325: Add support for labels in configuration rules Actions Feature #16423: Update the SSH server configuration to current standards and include post-quantum cryptography algorithms Actions Feature #16502: Support state killing on gateway recovery for policy-routed traffic from the firewall itself Actions Feature #16517: Endpoint-independent Port Restricted Cone Outbound NAT rules Actions Feature #16534: Omit reserved NAT64 addresses from DNS64 answers Actions Feature #16607: Auto-renewal for certificates Actions Feature #16613: Allow using interface subnet macros with interfaces which only contain VIPs Actions Feature #16615: Omit NAT64 address for queries from the firewall itself Actions Feature #16616: Option to set a default log level for all logs Actions Feature #16624: Allow packages to preserve RAM disk data between boots Actions Feature #16635: Gateway recovery functionality for the default failover gateway group when all gateways are offline Actions Feature #16666: Allow wildcard records for Dynamic DNS provider deSEC.io Actions Feature #16695: Include System Patches package by default Actions Feature #16706: 6rd interface prefix tracking for OpenVPN IPv6 tunnel network Actions Feature #16819: Log errors when determining the RFC2136 update source address Actions Feature #16914: Set IP Alias VIP as the Router Advertisement source Actions Todo #6727: Apple TouchID/FaceID probes for site icon files that do not exist Actions Todo #15780: Speed up MBUF Usage command in System Information Dashboard widget Actions Todo #16118: Increase amount of system alias content printed in alias list Actions Todo #16128: Sanitize PPPoE configuration parameters Actions Todo #16291: Relocate Kea control socket and lease database Actions Todo #16307: Refactor PF ruleset generation Actions Todo #16388: Upgrade to Kea 3.0.2 Actions Todo #16432: Allow assigning bridge members which have an IP address Actions Todo #16468: Kea configuration parameter ``client-class`` is deprecated Actions Todo #16469: Improve file handling of the configuration cache Actions Todo #16471: Upgrade PHP to 8.4 Actions Todo #16503: Update Unbound to 1.24.2 to address CVE-2025-11411 Actions Todo #16509: Update strongSwan to 6.0.3 Actions Todo #16515: Set appropriate log levels for PHP and ``/usr/bin/logger`` logs Actions Todo #16538: Prevent the GUI from removing vital packages Actions Todo #16551: Update output and parsing behavior for PHP shell ``pfanchordrill`` Actions Todo #16559: Remove custom gateway ordering Actions Todo #16567: Do not add ``fe80::1:1`` link-local address to interfaces configured for IPv6 tracking Actions Todo #16580: Require absolute path when saving a file on ``diag_edit.php`` Actions Todo #16605: Update certificate expiration warning behavior Actions Todo #16606: Update recommended maximum server certificate lifetimes to 200 days Actions Todo #16620: Remove dead link about ``.local`` TLD use from ``system.php`` Actions Todo #16626: Save the update branch preference on system update Actions Todo #16636: Remove ``quick`` from previous ``match`` rules on upgrade Actions Todo #16653: Add label to automatic PF ``antispoof``, CARP, Captive Portal, and ICMPv6 rules Actions Todo #16657: Improve handling of certificates without subjects Actions Todo #16658: Automatically configure the OpenVPN tunnel MTU when set in the assigned interface configuration Actions Todo #16707: Improve gateway status consistency Actions Todo #16745: Migrate ``config.xml`` encoding from ENT_HTML401 to ENT_XML1 Actions Todo #16747: Remove user survey prompts Actions Todo #16792: Improve GUI handling of user rules that are automatically managed by the system Actions Todo #16793: Improve GUI handling of user aliases that are automatically managed by the system Actions Todo #16796: Retain a copy of the failed ruleset when a filter reload fails Actions Todo #16816: Improve default gateway detection when gateways share the same address Actions Todo #16826: Exclude nginx logs from ``system.log`` Actions Todo #16865: Kea attempts DNS Registration when Unbound is disabled Actions Todo #16882: Update dpinger to version 3.6 Actions Todo #16905: Encode Dynamic DNS credentials when passed as URL parameters Actions Todo #16959: Add ``device_key`` to filtered tags list for status output Actions Todo #16961: "Wake All" functionality on ``services_wol.php`` should only use POST Actions pfSense Packages - Bug #11797: Traffic Totals lost upon reboot when using a ramdisk for /var and /tmp Actions pfSense Packages - Bug #14491: FRR not starting with AgentX enabled Actions pfSense Packages - Bug #15274: HAProxy Configuration Changes Require pfSense Reboot to Take Effect Actions pfSense Packages - Bug #15909: Prevent tailscale interface from being assignable Actions pfSense Packages - Bug #15916: pfBlockerNG dnsbl daemon not able to start in CARP mode Actions pfSense Packages - Bug #16211: Python errors in Cellular Actions pfSense Packages - Bug #16220: WireGuard dashboard widget default refresh interval is invalid Actions pfSense Packages - Bug #16225: Telegraf service does not restart after change of settings Actions pfSense Packages - Bug #16348: HAProxy configuration references non-existent certificate files Actions pfSense Packages - Bug #16756: Editing a Firewall Rule before Forcing pfBlockerNG Update Empties All Aliases Actions pfSense Packages - Feature #16070: Add ANDwatch package Actions pfSense Packages - Feature #16089: Add Zabbix 7.4 Actions pfSense Packages - Feature #16533: Add Multicast Bridge (mcast-bridge) package Actions pfSense Packages - Feature #16576: update nmap package to 7.99_1 Actions pfSense Packages - Feature #16970: Update mDNS-Bridge package to 3.0 Actions pfSense Packages - Todo #16231: Update packages to use the XMLRPC plugins for HA Actions pfSense Packages - Todo #16399: Update mDNS-Bridge to 2.2 Actions pfSense Packages - Todo #16883: Update mcast-bridge to version 1.5.0 Actions pfSense Packages - Todo #16884: Update mdns-bridge to version 2.6.0 Actions pfSense Packages - Todo #16969: Update mdns-bridge to version 3.0.0 Actions
pfSense Plus - 26.07 open Release targeted for July 2026 100% 7 issues (4 closed — 3 open) Related issues pfSense Plus - Bug #16823: VXLAN interfaces are configured with an incorrect MTU after re-saving their parent interface Actions pfSense Plus - Bug #16902: pfSense-upgrade removes the repo branch setting for UFS upgrades. Actions pfSense Plus - Bug #16938: Alert about missing MTU settings for OpenVPN DCO tunnels on every boot Actions pfSense Plus - Feature #16855: GUI option to reset MIM device identity Actions
pfSense Plus - 26.10 open Release targeted for October 2026 15% 10 issues (0 closed — 10 open) Related issues Bug #16112: Mythic Beasts DynDNS Actions pfSense Plus - Bug #14894: Password protected console login prompt does not render properly on 4100/6100/8200 serial console Actions pfSense Plus - Bug #15533: Boot verification script over matches Actions pfSense Plus - Bug #16323: Serial/Console Baud Rate Cannot Be Changed Actions pfSense Plus - Feature #14297: Add Option for Vendor Class ID in DHCP Client Actions pfSense Plus - Feature #15380: During upgrade Process GUI timeouts still occur Actions pfSense Plus - Todo #15372: Adjust LED patterns for Boot Environments 2.0 Actions
CE-Next open The next release of pfSense software (CE) 24% 132 issues (11 closed — 121 open) Related issues Bug #3132: Gateway events for IPv6 affect IPv4 services and vice versa Actions Bug #5413: Reduce disruptions when changing DNS records from DHCP leases in Unbound Actions Bug #6333: Bootup starts/restarts dpinger multiple times Actions Bug #7389: Limiter does not work with transparent proxy Actions Bug #8013: IPsec MSS clamping value shared for IPv4 and IPv6 Actions Bug #8100: pfsync deletes states on primary for connections established through secondary Actions Bug #8192: dpinger - Change in ISP link-local IPv6 address drops connectivity Actions Bug #8263: Cannot create a nonlinear `Link Share` service curve because of: "the sum of the child bandwidth higher than parent" Actions Bug #8273: IPv6 GRE tunnel over PPPoE fails on startup Actions Bug #8611: unable to receive IPv6 RA's on SG-1000, default route lost Actions Bug #8815: IP addresses are removed from interfaces when link is lost and either IPv4 or IPv6 is dynamic Actions Bug #8964: IPsec async cryptography advanced setting - TCP traffic not passing through Actions Bug #9136: IPv6 Tracking Interfaces Lose IPv6 Address in Certain Cases Actions Bug #9349: IPSec service start/stop/restart fails after settings change Actions Bug #9384: devd putting "$" before variable contents when using single quotes Actions Bug #10513: State issues with policy routing and HA failover Actions Bug #10530: Convert config version to be based on product version Actions Bug #10690: Not possible to make UFS install on ZFS formatted drive Actions Bug #10708: ZFS bootpool boot symlink issue Actions Bug #10875: PPP periodic reset does not fully restore gateway group round-robin functionality Actions Bug #10892: Large number of VLAN/LANs make floating rules are to read Actions Bug #11110: Backup file should be checked before restoring a specific area Actions Bug #11296: Static route targets may still reachable via default route when the gateway they should route through is down Actions Bug #11335: Spoofing the MAC on a LAGG interface does not work for some NIC types. Actions Bug #11429: System Log / Settings form activates "Reset Log Files" button on enter Actions Bug #11430: PHP console spam after Assigning Interfaces Actions Bug #11503: Using multiple authentication backends on an OpenVPN server fails Actions Bug #11541: OpenVPN status does not work properly when set to TCP and Concurrent Connections = 1 Actions Bug #12095: Memory leak in pcscd Actions Bug #12335: IPsec DNS inefficiency Actions Bug #12357: Captive Portal popup Logout button loads full login page in popup when clicked Actions Bug #12715: Long system startup time when LDAP is configured and unavailable during startup. Actions Bug #13102: Deleting an IPsec tunnel doesn't destroy the SA (SADs/SPDs), causes crash in status_ipsec.php Actions Bug #13217: dhclient using default pid file location which does not exist Actions Bug #13273: dhclient can use conflicting recorded leases Actions Bug #13329: Traffic shaping Wizard sets invalid values for qVoip queue Actions Bug #13450: L2TP Clients system alias is not populated Actions Bug #13480: GIFs are not automatically started when parent interface doesn't have an address at boot Actions Bug #13483: dhcp6c shouldn't be killed and restarted on interface reconfigurations Actions Bug #13487: GUI IPV6-WAN-status stays "Offline, Packetloss" after a short communication hick up Actions Bug #13680: Package install scripts run after PHP upgrade produce errors Actions Bug #13734: PPP interfaces with a QinQ parent can't initialize the PPPoE node for link Actions Bug #13792: Filterdns assumes sets of resolved addresses for each hostname are nonintersecting Actions Bug #13793: filterdns does not reconcile modelled tables with the current state of filter tables Actions Bug #13937: New OpenVPN entries are not immediately reflected in RRD graphs Actions Bug #13961: Virtual IP address input validation does not check for overlap with DHCP address ranges Actions Bug #14244: ``get_interface_list()`` in ``util.inc`` does not always match the expected device in ``dmesg``. Actions Bug #14262: IPv6 firewall log entries do not wrap and force the table width past the width of the page Actions Bug #14350: Captive portal text messages are not translated Actions Bug #14577: OpenVPN not removing old Cisco-AVPair anchor rules and files in ``/tmp`` Actions Bug #14648: Values obtained from ``sysctl`` are sometimes unexpectedly empty, leading to PHP and other math errors Actions Bug #14921: External Config Locator does not trigger a pkg sync except on first boot Actions Bug #14983: Upgrade can fail when unexpected EFI partitions are present. Actions Bug #15081: Upgrade fails due to undersized EFI filesystem Actions Bug #15116: Kea not working with UEFI HTTPBoot URL configured Actions Bug #15448: ``miniupnpd`` lacks IGDv2 support Actions Bug #15518: Kea does not send configured TFTP server name Actions Bug #15637: Kea DHCP service control inconsistencies Actions Bug #15757: Incorrect dashboard column spacing when using five columns Actions Bug #15809: UFS upgrades do not create new log files Actions Bug #15847: Kea DHCP lease utilization stats incorrect for delegated prefix pools Actions Bug #15902: After an IPv6 prefix and IP change on the WAN interface the KEA DHCP service crashes and cannot be restarted Actions Bug #16191: Early DNS registration can add invalid addreses Actions Bug #16194: IPv6 ICMP firewall log entries marked with protocol "Options" instead of ICMPv6 Actions Bug #16197: underscore (_) is not permitted in Identifier (Pre-Shared key) Actions Bug #16798: UDP Broadcast Traffic Sent out WAN when Policy-based Route is Defined Actions Bug #16881: Auto-added routes for IPsec remote gateways are not removed after P1 deletion for any interface assigned to "wan" Actions Bug #16886: PPPoE Server includes LAN address as DNS even when bound to a different interface Actions Bug #16888: Console Menu option 2 clears unrelated configuration Actions Bug #16890: UPnP input validation allows using WAN for the inside interface Actions Bug #16891: ALTQ queues are shown for disabled interfaces Actions Bug #16931: DHCP Server and Relay pages list unsupported interfaces Actions Bug #17004: Config warning when saving duplicated alias Actions Feature #2386: Bridge member that is not an assigned interface Actions Feature #4405: Traffic shaping doesn't work when applied to a bridge interface Actions Feature #11440: Expand collapsed sections by clicking anywhere on header Actions Feature #11589: Fix iftop experimental traffic fetcher, unify and improve output style Actions Feature #12077: Allow stick-connections per gateway group Actions Feature #12121: Wider "local network(s)" fields in OpenVPN server configuration Actions Feature #12553: Auto Config Backup: Allow selecting multiple backups for deletion Actions Feature #13244: Add help text under Timezone settings in the GUI Actions Feature #13293: Option to set auth-gen-token in OpenVPN GUI Actions Feature #13351: Improve Indicated Memory Usage in the Dashboard Actions Feature #13362: Update dynamic gateway consumers when their interface is renamed Actions Feature #13499: Namecheap service type is missing help text for the password field Actions Feature #13710: Support UTF-8 CA/Certificate subject components Actions Feature #13843: Add ability to properly configure RADIUS captive portal user quotas of 4096MB or more Actions Feature #13844: Make RADIUS Start/Stop accounting immediately log off a user that exceeds quota when reauthentication is disabled Actions Feature #14122: Allow selecting the repo branch on config restore Actions Feature #14166: Use netstat output for interface packet counters Actions Feature #14437: Add DynDNS Provider - Hetzner Actions Feature #14483: Conditionally reconfigure IPsec VTI interfaces only when necessary while applying IPsec changes Actions Feature #14620: Support running DHCPv4 Server and DHCPv4 Relay at the same time on different interfaces Actions Feature #14762: Support X25519 and X448 public key algorithms in certificates Actions Feature #15090: Improve feedback from config recovery during install Actions Feature #15323: Display server description when WOL is sent using mac url or power-on button Actions Feature #15544: Add hostname to Slack notifications Actions Feature #15636: High Availability Status Changes Actions Feature #15647: Include ability to generate Configuration file and QR Code for wireguard configuration Actions Feature #15648: Include ability to gen private/public key in UI for easier WireGuard client provisioning Actions Feature #15659: Kea option for ``reservations-out-of-pool`` and associated input validation (IPv4 and IPv6) Actions Feature #15745: Add User Manager Setting to control Remote Authentication fallback behavior Actions Feature #15766: Enable autocomplete for log filters Actions Feature #15922: Allow using dhcp mappings in host aliases for any service Actions Feature #15934: Kea Lease Reclamation and Affinity Options (IPv4 and IPv6) Actions Feature #16029: Add option to search for LDAP groups in the base DN Actions Feature #16159: Provide periodic connection reset for if_pppoe Actions Feature #16189: Better Logging for LDAP Connection Errors Actions Feature #16877: Extend the anti-lockout feature to all LAN interfaces Actions Feature #16880: Extend the LAN bypass option for IPsec to all LAN subnets Actions Feature #16887: Extend ``enableallowallwan`` script to apply to all WAN interfaces Actions Todo #12367: ZFS: Do not show memstick disk on target list Actions Todo #13508: Uncouple RAM Disk size from available kernel memory Actions Todo #13644: Enable ALTQ support in cxgbe(4) Actions Todo #14264: Consider lowering default session timeout from current default of four hours (240m) Actions Todo #14352: Virtual IP address configuration input fields are handled inconsistently between VIP types Actions Todo #14359: Reorganize Advanced Options Actions Todo #15408: Reduce inconsistencies between Configuration History with/without ZFS Boot Environments Actions Todo #16547: Make Priority field when editing a VLAN consistent with the VLAN Priority fields in firewall rules Actions Todo #16668: Upgrade PHP to 8.5.x Actions Todo #16874: Improve handling of custom interface assignments Actions Todo #16875: Remove obsolete interface configuration scripts Actions Todo #16876: Remove option "IPv6 over IPv4 Tunneling" Actions Todo #16878: Remove unused PF option "loginterface" from generated ruleset Actions Todo #16879: Remove redundant hosts file reconfiguration when configuring an interface assigned to "lan" Actions Todo #16885: Improve dhcp6c wait timer during boot Actions Todo #16889: Allow reconfiguring all WAN interfaces with ``rc.interfaces_wan_configure` Actions Todo #16950: Add upgrade code to normalize widget sequence data Actions
Future open Items for an indeterminate later release 3% 113 issues (5 closed — 108 open) Related issues Bug #1675: Captive portal logout problems with pop-up blockers. Actions Bug #4406: ALTQ problems with wireless cloned interfaces Actions Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel Actions Bug #5367: Safari repeatedly tries to reload dashboard Actions Bug #5786: Check WebConfigurator port for conflicts Actions Bug #6167: IPsec IPComp not working Actions Bug #6186: race conditions in service startup Actions Bug #6696: Add configure link to Status > Queues error message if traffic shaping not configured Actions Bug #7082: pkg_edit.php - impossible to use default_value with rowhelperfield Actions Bug #7138: Pfsense wide dhcpv6 client doesn't recognise ifid statement Actions Bug #7195: pkg_edit.php - <checkenablefields> tag has no effect on fields other than checkbox/input Actions Bug #7222: Encryption No Longer Enforced for Email Notifications Actions Bug #7288: The field 'Distinguished name Organization' contains invalid characters Actions Bug #8502: main (top) menu items do not drop down in some cases Actions Bug #8614: Cannot remove Additional BOOTP/DHCP Options Actions Bug #8820: System/Advanced/Misc - "Do not kill connections when schedule expires" UN-checked still leaves existing connections open. Actions Bug #9344: OpenVPN click NCP Algorithms will always go to DH Parameters website(in Chinese-Taiwan) Actions Bug #9353: PHPSession errors from limited access to dashboard and widgets Actions Bug #9755: package description wrong link https://www.freshports.org/security/openvpn-client-export Actions Bug #10310: Systems with low RAM and several packages may temporarily fail to load large tables after an upgrade Actions Bug #10352: RADIUS authentication fails with MSCHAPv1 or MSCHAPv2 when passwords contain international characters Actions Bug #11093: ral(4) driver non-functional in arm64 Actions Bug #11352: CTF types > 2^15 in the pfSense kernel config results in DTrace failing Actions Bug #11473: System Activity shows invalid data on SG-3100 Actions Bug #12013: Reading log data is inefficient in certain cases Actions Bug #15228: User manger fails to display certificate option for a new user in case of input error Actions Bug #15708: The filterdns service won't start Actions Feature #84: Nightly Filter Summary E-Mail Actions Feature #96: Add "All local networks" to source and destination drop down boxen in firewall rules Actions Feature #286: Backup/restore users individually Actions Feature #290: Add Multi-WAN awareness to UPnP Actions Feature #521: Group manager Assigned Permissions Actions Feature #701: Interface groups with NAT Actions Feature #946: Allow aliases to be used to define IPsec phase 2 networks Actions Feature #1257: Handle encypted CA/Certificate private keys Actions Feature #1268: Allow mass renewing of certs Actions Feature #1337: VLANs with different MAC address than parent interface Actions Feature #1831: Captive portal IPv6 support Actions Feature #2024: RRD Graphs for packages Actions Feature #2479: Allow reordering of the traffic graphs on the dashboard Actions Feature #2593: sync NTPD, SNMP config between HA members Actions Feature #2676: Reply-to option in firewall rule Actions Feature #2965: Mac Firewalling Actions Feature #3115: Traffic shaping for multi WAN Actions Feature #3185: Accommodate a DHCPv6 failover-like mechanism Actions Feature #3377: OAuth2 authentication in captive portal Actions Feature #3652: OpenVPN - Dynamic IPv6 Tunnel Network Actions Feature #3696: Multiple items backup/restore Actions Feature #3697: New backup/restore area: Certificates Actions Feature #3882: Add OUI database to the base system, remove dependency on nmap Actions Feature #4098: Add option to force a password change on login Actions Feature #4195: Aliases: sections Actions Feature #4234: allow for strict user <> cn validation of mobile ipsec users when using rsa+xauth Actions Feature #4632: Support for Multipath TCP (MPTCP) Actions Feature #4724: Captive Portal Status Add Client Hostname Actions Feature #4776: Add 802.1x dynamic vlan support Actions Feature #5307: Add logarithmic scale option to RRD graphs Actions Feature #5510: Need a simple way to enable/disable package-installed services Actions Feature #5619: Curl with ARES support Actions Feature #5735: Automaticaly add DHCP leases to alias list or make it readable in selected fields Actions Feature #5835: Improve OpenVPN client gateway detection in edge cases where the remote does not send gateway information Actions Feature #5950: DHCPv6 Server support for PD of PD-obtained networks Actions Feature #6457: Allow ability to configure AWS EC2 AMI via userdata Actions Feature #6728: Route53 API mod and Geolocation Actions Feature #6742: OAuth2 authentication for OpenVPN (and for FreeRadius) Actions Feature #7078: Allow reordering of client specific overrides in OpenVPN Actions Feature #7181: Add Top and Add Bottom on Seperator Actions Feature #7182: Break up System Widget on the Dashboard Actions Feature #7244: Publish pfsense as a Vagrant Basebox Actions Feature #7260: Source OS / p0f Database Missing Modern Operating Systems Actions Feature #7783: Support for hosting VMs on pfSense using bhyve Actions Feature #7847: USB NIC not loading (TP-Link UE300 RTL8153) Actions Feature #7852: Add views support to Unbound GUI Actions Feature #8316: expiration date when creating new rules Actions Feature #8474: Easier Conversion to HA Pair from Existing Non-HA Firewall Actions Feature #8694: Client CA Auth for PFSense WebGui Actions Feature #8712: QOS on ipsec links Actions Feature #8775: Use SRV record for LDAP Authentication Actions Feature #8879: DHCP options ADD force options Actions Feature #9536: Support dynamic prefix in DHCPv6 Server Actions Feature #9574: Show changelog at package upgrade Actions Feature #9680: Seperate DHCP Server and relay per interface Actions Feature #9717: Search box for pfsense ? Actions Feature #9718: Make diag_states_summary table sortable Actions Feature #9942: Give pfSense the possibility to change the keyboard Layout for console users Actions Feature #10204: Possible clarification of Track IPv6 Interface Subnet ID Actions Feature #10223: Add the ability to create additional loopback interfaces Actions Feature #10250: DHCP lease view by interface Actions Feature #10404: Consider using chrony for NTP services Actions Feature #10467: Email alert functionality for system health Actions Feature #10987: Add support for secure boot Actions Feature #11056: Add option to disable flow-control on interfaces in GUI Actions Feature #11270: Consider integrating Nebula mesh VPN Actions Feature #11302: WireGuard XMLRPC sync Actions Feature #11324: Separate syslog "Remote log servers" Parameters Actions Feature #11498: WireGuard does not pass multicast traffic to peer Actions Feature #11588: Automatically suggest next IP address in Wireguard interface subnet when creating a peer Actions Feature #11604: WireGuard Dynamic Listen Port Randomization Actions Feature #11921: Feature Request: Compile unbound with EDNS Client Subnet (ECS) module (--enable-subnet) Actions Feature #12521: Add the BBR2, QUIC, RACK Congestion Control (CC) protocols Actions Feature #12564: add column to show that an Alias is in use by or not Actions Feature #12863: dynamically tune sha512crypt rounds Actions Feature #13805: A way to reliably determine if system is the primary or secondary in CARP Actions Feature #14666: Option to add automatic pass rules for IGMP Proxy which allow IP options Actions Feature #15078: Display all available updates on the dashboard Actions Todo #32: PPPoE Server users integration with user manager Actions Todo #33: L2TP users integration with user manager Actions Todo #5902: Use a common place for default values Actions Todo #6647: Enable Additional Security Headers Actions Todo #6697: White squares around the numeric values in the Status / Queues page Actions Todo #11280: Add WireGuard to ALTQ list Actions Todo #12025: Add 1:1 Validation to Notify Someone They are 1:1 NAT'ing an Interface Address Actions
pfSense Packages - Future open Scheduled for an unspecified future version, typically not the next one 37% 8 issues (3 closed — 5 open) Related issues pfSense Packages - Bug #7267: Status Traffic Totals - Stacked Bar - Scale not high enough Actions pfSense Packages - Bug #10791: Valid (vlan)interfaces do not get vif reporting "Invalid phyint address" Actions pfSense Packages - Bug #13153: Static routes bound to WireGuard interfaces are not restored after down / up events Actions pfSense Packages - Feature #11178: Filer do not ask what to do with previous filename Actions pfSense Packages - Feature #11798: HA Sync for FRR config Actions pfSense Packages - Feature #12358: IP List Copy/Import/Export Actions pfSense Packages - Feature #12909: Convert Suricata GeoIP Lookup feature on ALERTS tab to use local GeoIP2 database Actions pfSense Packages - Feature #13284: Option to define "Issuer" in OPT configuration. Actions
pfSense Plus - Plus-Next open The next release of pfSense Plus software 0% 3 issues (0 closed — 3 open) Related issues Todo #1521: Multipath Routing GUI Support Actions pfSense Plus - Bug #12759: Proprietary packages link to non-existant or non-public github pages Actions