pfSense bugtracker

12/18/2025

KP 01:52 PM pfSense Bug #16588: ``pfctl`` shows incorrect number of table addresses

That'll be fixed when https://cgit.freebsd.org/src/commit/?id=ad7f49f98b1ae7504f69db897901a055613c8300 comes in with the next upstream merge. Kristof Provost

11/14/2025

KP 10:13 AM pfSense Feature #16517: Endpoint-independent Port Restricted Cone Outbound NAT rules

At least some NAT translations must have failed. This may be a configuration issue, or perhaps there's just so much traffic that you ran out of ports or perhaps there's another reason. I can't tell from the backtrace, and probably wouldn... Kristof Provost

11/13/2025

KP 04:19 PM pfSense Feature #16517: Endpoint-independent Port Restricted Cone Outbound NAT rules

I managed to reproduce the problem and have a fix pending review: https://reviews.freebsd.org/D53737 Kristof Provost

10/29/2025

KP 01:55 PM pfSense Bug #16478: syslogd crashes with SIGABRT during newsyslog rotation

I've been unable to reproduce this.
Do you have any non-default settings for syslog? It may be useful to attach your syslog configuration files (/etc/newsyslog.conf, /etc/newsyslog.conf.d/*, /var/etc/newsyslog.conf.d/*).
If you can p... Kristof Provost

08/18/2025

KP 09:44 AM pfSense Regression #16362: ``syslogd`` daemon can terminate when a remote log server refuses connections

I can't reproduce this.
In my test I did see that syslogd noticed the error (ECONNREFUSED) and then marked the destination as UNUSED. It will then no longer attempt to deliver to that destination.
Arguably that's wrong, because this ... Kristof Provost

05/01/2025

KP 12:28 PM pfSense Bug #16169 (Ready To Test): NAT64 states have ``src`` and ``dst`` swapped in data returned by pfSense PHP Module

It turns out that for nat64 we need to swap the wire information. That's a little odd, but it's what pfctl does (both for us and for OpenBSD), so we'll just do the same in the module.
I've pushed that to both devel and plus-devel branch... Kristof Provost

04/30/2025

KP 02:38 PM pfSense Bug #16167: if_pppoe sends invalid service name

Steve ran this dtrace probe: Kristof Provost

KP 12:57 PM pfSense Bug #16167: if_pppoe sends invalid service name

I'm unable to reproduce this.
There was an issue with pppcfg where '-pppoesvc' (i.e. to remove a service name) didn't work, but that has different symptoms and the PHP code never used that feature either.
I've gone through the ioct... Kristof Provost

04/07/2025

KP 08:22 AM pfSense Todo #16128 (Resolved): Sanitize PPPoE configuration parameters

A user reports (https://forum.netgate.com/topic/197026/25-03-b-20250306-0140-if_pppoe-kernel-module-chap-failure/10 ) that a leading space in a password used to be ignored as it was written to the mpd5 configuration file without quotes a... Kristof Provost

03/26/2025

KP 09:23 AM pfSense Bug #16101: Kernel Panic in ``if_qlnxe`` kernel module when loaded via ``kldload``

I'm rather confused by this panic.
`fault virtual address = 0x0` and `instruction pointer = 0x20:0x0` pretty much mean we're following a NULL function pointer.
The backtrace also points to get_operstate_ether(), where we call ... Kristof Provost