pfSense bugtracker

08/02/2021

03:49 AM pfSense Feature #4496: IPv6 outbound NAT support

Upon closer inspection, NAT over IPv6 is working.
Cloudflare Warp+ advertises not hiding IP addresses and it does ... Richard Yao

02:17 AM pfSense Feature #4496: IPv6 outbound NAT support

Dmitriy K wrote in #note-3:
> afaik, NPt does this, no?
Sadly, NPt does not work for my use case. I have a situation... Richard Yao

04/02/2021

09:04 AM pfSense Bug #11773 (Rejected): Using SSL/TLS for outgoing DNS Queries in forwarding mode can cause DNS to hang following the restoration of WAN connectivity

I have unbound setup in forwarding mode to use "SSL/TLS for outgoing DNS Queries to Forwarding Servers". Unfortunatel... Richard Yao

03/29/2021

11:37 AM pfSense Bug #11733: Web interface hangs when gateway link becomes intermittent

The ONT was just replaced. Immediately after, I tried to connect to the web interface, but I received a 502 error as ... Richard Yao

03/26/2021

03:16 PM pfSense Bug #11733 (Rejected): Web interface hangs when gateway link becomes intermittent

I have a failing Verizon ONT. The web interface hung when the ONT first started to fail. Logging into pfsense using S... Richard Yao

03/15/2019

05:21 PM pfSense Bug #9402: Netgate "DNS over TLS with pfSense" Blog Post recommends configuration vulnerable to MITM attacks from self signed certificates

Jim, thanks for the quick response. You replied so quickly that I was late in adding that I hadn't actually verified ... Richard Yao

05:20 PM pfSense Bug #9402: Netgate "DNS over TLS with pfSense" Blog Post recommends configuration vulnerable to MITM attacks from self signed certificates

One more remark. While I cited that blog post, I haven't actually taken the time to verify that this protects against... Richard Yao

05:16 PM pfSense Bug #9402: Netgate "DNS over TLS with pfSense" Blog Post recommends configuration vulnerable to MITM attacks from self signed certificates

There is a typo in my original report. The post should say:
server:
tls-cert-bundle: /usr/local/share/certs/ca-ro... Richard Yao

05:13 PM pfSense Bug #9402 (Duplicate): Netgate "DNS over TLS with pfSense" Blog Post recommends configuration vulnerable to MITM attacks from self signed certificates

Users should be told to set these options in unbound:
server:
tls-cert-bundle: /usr/local/share/certs/ca-root-nss... Richard Yao

04:18 PM pfSense Bug #9401 (Resolved): 26 to 31 character VPN interface names cause gateway names to exceed 31 character limit

If you make an OpenVPN interface name with 26 to 31 characters (in my case, I made them with exactly 26 and 31 charac... Richard Yao