Project

General

Profile

2.2

Release featuring FreeBSD 10.1, strongSwan and AES-GCM for IPsec, Unbound DNS Resolver, and more

100%

399 issues   (399 closed — 0 open)

Time tracking
Estimated time 1.90 hour
Issues by
Bug

343/343
Feature

40/40
Todo

16/16
Related issues
Bug #729: if_bridge unpredictable filter interface selection
Bug #807: Cannot set the keymap to anything other then the default
Bug #1047: Disable TSO, hardware checksum don't work for unassigned but active interfaces
Bug #1107: mpd on AMD64 generates invalid checksums with NAT
Bug #1359: Optimize reloading of IPsec tunnels
Bug #1399: rrdtool respawning too fast
Bug #1621: Switching WAN from type PPP to other leaves former port assigned
Bug #1629: invalid state table entries after WAN IP change
Bug #1681: OpenVPN tun IPs fail HTTP REFERER checks
Bug #1928: Can't sync voucher database when carp peer is also active
Bug #1983: Cancel Button generates a Confirm Form Resubmission message
Bug #2073: APIPA broadcasts forwarded by route-to
Bug #2121: pfctl -ss output has changed on FreeBSD 10
Bug #2122: pf log output slightly different in FreeBSD 10
Bug #2124: Package system updates for FreeBSD 10.x
Bug #2125: Update Package XML for FreeBSD 10.x
Bug #2126: Build package binaries for FreeBSD 10.x
Bug #2421: Filter log parser misinterprets some rare lines resulting in TCP:lo for the proto/flags
Bug #2495: pfsense doesn't seem to know what its WAN IP is
Bug #2514: static routes for monitor IPs should be removed
Bug #2610: Whole-disk gmirror may break when upgraded to a FreeBSD 10.x base
Bug #2665: 'pass out' on gif matches inbound traffic
Bug #2706: Padlock may need some adjustments for FreeBSD 10.x
Bug #2786: Setting MTU on VLAN does not set MTU on parent interface in 2.2
Bug #2833: Add a knob to prefer IPv4 over IPv6 for rare situations that require it
Bug #2882: 6RD not working in latest snapshots
Bug #2984: IPSec adds route but isn't needed any more
Bug #2993: IPsec in transport mode, tunneled traffic does not flow through enc0
Bug #3122: CP Pass-through MAC entry must deny entering the firewall's own MAC address
Bug #3165: OpenVPN Bridge with Client Specific Override
Bug #3182: VMware vmxnet interfaces are not detected as VLAN capable
Bug #3187: LiveCD boot issue on multicore systems.
Bug #3195: CP MAC allows duplication
Bug #3198: IPSEC, when nating to a different size subnet a invalid natting rule is made.
Bug #3213: Error creating more than 30 limiters
Bug #3219: Forwarded domain with underscore should be allowed to add
Bug #3237: "Revoked" status is incorrect for certificates that are different but share the same descriptive name.
Bug #3281: In certain cases, GRE interfaces are missing the "RUNNING" flag at bootup and will not function
Bug #3297: IPsec log parsing code does not skip disabled Phase 1 entries
Bug #3298: Package type tabs on 2.2 should have a default 'all' tab
Bug #3347: Certificate Authority SAN names not working in 2.1
Bug #3350: Disabling and enabling VLAN leaves VLAN interface missing
Bug #3353: Changing IPv6 from None to DHCP6 or vice-versa causes a panic+reboot
Bug #3354: Savecore error during bootup
Bug #3361: DHCP6 WAN is not obtaining a default gateway
Bug #3389: GUI allows to configure ICMPv4 types for ICMPv6 firewall rules
Bug #3401: Openvpn Server IPV4 generating attribute TUN-IPV6 this right?
Bug #3417: racoon crashes after mobile xauth login with fourth DNS server configured
Bug #3437: web redirector doesn't listen on IPv6 port 80
Bug #3469: rc.update_urltables can skip doing a required update
Bug #3482: Initial Setup disables WAN
Bug #3491: Improper input validation on firewall rules when using a numerical alias name
Bug #3498: Wake on Lan Widget no auth needed
Bug #3501: sanity check for PBI installations before uninstalling old pbi package.
Bug #3503: E-Mail Reports syslog error: "rrdcolors.inc.php for theme does not exist" (and proposed fix)
Bug #3517: VPN re
Bug #3535: Selecting "LAN" as "WAN" in Multi-WAN Traffic Shaper wizard breaks the ruleset
Bug #3537: Bandwidth values are forced by the Traffic Shaper Wizard but are not required nor used for PRIQ
Bug #3540: 100% CPU-Issue when IPv6 DHCP with stateless addresses is active
Bug #3542: cert_get_issuer() in certs.inc doesn't always return the full Distinguished Name
Bug #3550: [IPv6] wizard not pointing to the right IPv6 address after first setup.
Bug #3554: apinger and OpenVPN: Gateway down after OpenVPN client service restart
Bug #3557: module runfw.ko is missing in 2.2 alpha
Bug #3558: Schedule States in System - Advanced - Misc not working
Bug #3562: Wireless Radius Setup Fails - partially due to empty config strings
Bug #3568: DynDNS: Hostname '@' not accepted for Namecheap
Bug #3573: tun/tap interfaces not available for assignment in 2.2
Bug #3575: OPT interfaces on GRE tunnels do not accept IPv6 or IPv4 addresses to be set.
Bug #3576: Console upgrade automatically skips hash check if no hash file found
Bug #3579: Limiter rules causing syntax errors
pfSense Packages - Bug #3590: Snort package missing
Bug #3593: pfSsh.php playback gitsync master not working on 2.2 ALPHA
Bug #3594: Captive portal inconsistancy - "Allowed IP addresses" vs "Allowed Hostnames"
Bug #3596: OpenVPN being passed bad arguments
Bug #3601: Assigning a PPP Interface failed
Bug #3611: DHCP relay to a server behind the gateway does not work
Bug #3612: Packages through proxy doesn't work since change to HTTPS
Bug #3613: Remote syslog server gets added to " DHCP service events" without being checked.
Bug #3614: dhcpd: send_packet: No buffer space available
Bug #3615: /etc/rc.d/*.sh start" is executed during bootup, but equivalent "stop" cmd is never issued during shutdown
Bug #3619: ipfw/dummynet not always loaded when required in 2.2
Bug #3620: Saving unbound settings twice in a row yields incorrect interface selection validation errors
Bug #3621: Editing an IPsec Phase 1 creates a new Phase 1 instead
Bug #3629: URL alias update process hangs waiting for lock
Bug #3637: Incorrect interface matching on bridge edit page
Bug #3639: Captive portal crash when paackets come
Bug #3644: rc.expireaccounts expires every expired account every time it runs
pfSense Packages - Bug #3645: Many Call-time Pass-by-reference instances in packages need fixed for PHP 5.5
Bug #3647: Serial console input is sent to system log as kernel messages
Bug #3648: Filter logs broken on amd64, working on i386
Bug #3649: IPv6 Gateway is not functioning when using DHCPv6
Bug #3650: IP aliases are configured even when an interface is disabled
Bug #3654: Outbound IPsec rules do not exclude WAN subnet
Bug #3655: 127.0.0.1 shouldn't be used in resolv.conf if dnsmasq not binding there
Bug #3657: Web Interface - Missing Static IPv6 /127 Subnet Prefix
Bug #3661: xauth user is not displayed in IPsec status
Bug #3662: "Provide a list of accessible networks to clients" is not working
Bug #3663: Filter parser does not display ICMP log messages
Bug #3664: "IPsec" not displayed in firewall log interface column
Bug #3665: IPsec tunnel description not displayed on status output
Bug #3666: PMTUD is broken for NATed traffic
Bug #3674: Subnet options do not activate on manual outbound NAT rule edit page
Bug #3675: pfPorts failed builds on RELENG_2_2
Bug #3678: Kernel panic: "Bogus interrupt trigger mode" on Intel J1900
Bug #3680: disabling an interface which is part of an interface group puts another (arbitrary) interface into the group instead
Bug #3689: Filter logs Input Validation Failure
Bug #3690: php-fpm blocks (stops the boot, prevents webgui startup, etc)
Bug #3691: Fetch error on HTTPS console update by URL
Bug #3692: apinger loss % gets stuck
Bug #3700: pfctl: illegal option -- G
Bug #3702: gif interface assignment removes tunnel's inside IPv6 IPs
Bug #3703: MTU not applied on reboot
Bug #3712: missing protocols in NAT edit page
Bug #3713: Gateways missing for OpenVPN server (shared key or /30s)
Bug #3714: Session cookie inconsistent behavior when switching GUI protocols
Bug #3717: Adding an IPv6 rule on an interface with IPv6 gateway does not add "reply-to" in the resulting rule - fix proposal attached
Bug #3724: Jumbo frames not being honoured with vmxnet3 driver
Bug #3725: Firewall Logs Widget Filters Not Working
Bug #3727: PPP config loses "on-demand" setting when configured via interfaces tab
Bug #3728: Cancel Button Doesn't Work - Firewall Aliases Edit
Bug #3745: VLANs are not ALTQ capable on 2.2 (missing patches?)
Bug #3746: Firewall hostname being reset by DHCP WAN client
Bug #3747: Route uses wrong interface (lo0) when tun local and remote are the same
Bug #3748: Interface in extended down state, not functional when link is brought back up
Bug #3749: Upgrade from 2.1.4 to 2.2 does not automatically reboot
Bug #3750: Console auto login is not setup properly on upgrade from 2.1.4 to 2.2
pfSense Packages - Bug #3756: PBI package for Snort does not properly configure the barnyard2 support binary
Bug #3757: Minicron process inexplicaly terminated
Bug #3760: reply-to with TCP and IPv6 generates broken checksums
Bug #3769: Only the first phase 2 entry is used when multiple entries are present for an IPsec tunnel in 2.2
Bug #3770: Some drivers not being built with altq support
pfSense Packages - Bug #3772: Broken openbgpd config generation logic in 2.2
Bug #3773: Can't add an IP alias on lo0 through the web GUI in 2.2
Bug #3775: Installer installs incorrect gettytab/ttys
Bug #3777: User with "WebCfg - Help pages " permission listed first gets a bogus redirect
Bug #3781: strongswan dpdtimeout value not generated correctly
Bug #3782: ntp/gps serial speed doesn't set
Bug #3785: strongswan config being generated with ike SA lifetime set to value of ipsec SA lifetime
Bug #3789: rc.update_bogons.sh and login shell ignore http proxy settings
Bug #3790: Input validation is too strict for IPv6 Prefix ID for Track Interface
Bug #3797: DHCP server restarted multiple times on secondary after config sync
Bug #3800: Disable source port rewriting - Auto created rule LAN to WAN missing?
Bug #3801: Captive Portal on 2.2 does not pass through logged-in users
Bug #3807: Unable to edit existing Virtual IPs
Bug #3809: IPsec Save Xauth Password no longer work
Bug #3811: IP aliases on CARP w/IPsec getting mixed up on addition of a new VLAN.
Bug #3812: IPSec validation should prevent phase2 policies(subnets) to include remote peer on it
Bug #3813: DNS Server override with PPPoE doesn't work in 2.2
Bug #3817: Missing call to preg_quote at pkg-utils.inc:295
Bug #3822: 2.2 boot hangs at "Synchronizing user settings"
Bug #3823: diag_ipsec.php fails with PSK+Xauth mobile client connected
Bug #3825: Rejected traffic shown as blocked in firewall log
Bug #3826: 2.2 diag_ipsec.php issues
Bug #3829: Widget Firewall: Reverse Resolve with DNS Issues
Bug #3833: DHCP "release" action can be triggered via GET, should only be via POST
Bug #3840: Disable (or give the option to disable) the OS addition to the SSH daemon banner
Bug #3842: Verdana font from the Linux package ttf-mscorefonts-installer causes rendering issues with pfSense WebGUI
Bug #3846: Adding interface for new VLAN selects active WAN VIP address breaking connectivity
Bug #3848: enabling schedule on 2.1.5 causes page fault
Bug #3852: IGMPPROXY still spamming the main systemlog
Bug #3853: DHCP Server failover_peerip is not synchronized on 2.2 with CARP
Bug #3854: pf on 2.2 should not have an upper table entry limit, but generates errors with large datasets
Bug #3856: Delete a user, edit another one and going back... delete the edited user
Bug #3857: is_port() validate a wrong port range
Bug #3863: Supermicro IPMI Boot virtual CD-ROM
Bug #3864: /diag_dump_states.php has duplicate <form> element
Bug #3866: firewall log filtering
Bug #3870: re(4) NICs on APU are unable to hardcode speed/duplex properly
Bug #3876: pfsync is not synchronizing states on 2.2
Bug #3879: Unable to move widgets in GUI
Bug #3884: Restarting Web GUI does not restart PHP-FPM
Bug #3886: (TurkishLanguage) After the firewall rule for example (lan rule) does not come "Apply Button"
Bug #3890: Aliases multiple CIDR ranges show error message
Bug #3891: ipfw, on pfSense 2.2 kernel dump caused by: ipfw zone 4096 create
Bug #3894: OpenVPN client started multiple times when connecting to FQDN where connectivity to server is delayed
Bug #3904: Firewall Log widget generates a load of HTML code when Reverse DNS resolution is clicked
Bug #3909: carp_status.php shows disabled after initial config when it really isn't
Bug #3910: Cannot set advskew back to 0
Bug #3912: Dynamic DNS disallows valid character in username
Bug #3913: if_bridge missing ALTQ support
Bug #3917: Mobile IPsec status page issues
Bug #3918: On 2.2, mounting read-only after mounting read-write can be very slow on certain media NanoBSD
Bug #3919: carp vhid=255
Bug #3921: max-packets option missing from pfctl
Bug #3922: jumbo frames on lagg not working
Bug #3927: Unable to set gif MTU
Bug #3931: Using international characters in IPsec PSK causes invalid XML
Bug #3935: Unable to complete NIC assignment with only one NIC
Bug #3937: Interfaces Dashboard Widget - Font to big and scaling wrong
Bug #3938: Captive Portal PHP Error at bootup on current snapshots
Bug #3939: Cannot create Host or Network type alias with an IP address/range
Bug #3940: check_reload_status uses deprecated libevent-1.4
Bug #3941: adding a DHCP client interface results in missing default gateway on 2.2
Bug #3944: git fatal errors are not shown to user when building pfSense iso from source.
Bug #3947: "ipsec_starter: Bad file descriptor" spams system log
Bug #3949: Dynamic DNS public IP check always uses default gateway
Bug #3950: Entering a backwards IP range in an Alias results in an Internal Server Error
Bug #3951: Processes like filterdns and ipfw-classifyd accumulate many open file handles
Bug #3955: IPsec dashboard widget needs adapting for 2.2
Bug #3957: 2.2 tap missing ALTQ
Bug #3960: deleting or changing phase 2 doesn't remove former P2
Bug #3961: only first of multiple P2s works in 2.2
Bug #3964: Web interface fails to load on first boot
Bug #3966: OpenVPN crashes with AES-NI + AES-CBC
Bug #3967: Need to restore IP aliases on CARP IPs in 2.2
Bug #3968: Incorrect gateway is assumed when using tun + topology subnet
Bug #3969: apinger configuration for DHCPv6 gateway is missing interface scope on source IP and target
Bug #3970: some files not removed on upgrade to 2.2
pfSense Packages - Bug #3972: Avahi daemon doesn't start due to missing folder for requisite dbus-daemon.
Bug #3974: DNS Resolver: Advanced - Error in description
pfSense Packages - Bug #3975: Gateway Monitoring Offline
Bug #3976: VLAN Interfaces on LAGG get orphaned on LAGG change
Bug #3980: wrong static routes added for remote P2 subnets
Bug #3981: strongswan "gets crazy" after a few reloads, wipes SAD and doesn't remove old SPD
Bug #3982: Installer generates errors when selecting "Embedded" but still appears to work
Bug #3984: system booted with DHCP client NIC unplugged never kicks off dhclient
Bug #3987: not possible to have both IKEv1 and IKEv2 mobile P1s
Bug #3989: DNS Resolver interface drop downs need enlarged
Bug #3990: pfSense_ipfw_getTablestats issue
Bug #3991: /etc MFS on 2.2 Netgate build memstick image runs out of space
Bug #3992: The password confirmation field is not properly formatted at VPN: L2TP: User: Add/Edit
pfSense Packages - Bug #3994: sudo package not working on 2.2
Bug #3995: Site-to-site VPN not working on IKEv2
Bug #3998: Duplicated limiter numbers
Bug #3999: SRC, GW wrong in pftop on 2.2
Bug #4000: guess_interface_from_ip parses netstat output that may be truncated
Bug #4001: disconnected CP client no longer gets redirected to portal page
Bug #4002: 0.0.0.0 shown as being in ipfw tables for CP where it isn't
Bug #4003: SSH host keys regenerated post-2.2 upgrade
Bug #4004: CARP on HyperV
Bug #4005: There were error(s) loading the rules: rules.debug:11
Bug #4006: diag_gmirror.php missing new blank disk as available consumer
Bug #4007: "Last activity" in CP status blank
Bug #4008: dhcpleases doesn't restart when change from/to dnsmasq and unbound
Bug #4009: Selecting "Embedded" during install does not activate the serial console in a persistent way on amd64
Bug #4011: Integration between unbound and dhcp is not working
Bug #4012: dnsmasq doesn't listen on chosen CARP IPs
Bug #4013: DHCP6 static bindings not included in /var/unbound/host_entries.conf
Bug #4014: Unbound private reverse lookup domain overrides not working
Bug #4015: IKE version change needs javascript to update other available fields
pfSense Packages - Bug #4016: squid3 amd64 looks to have bad download link
pfSense Packages - Bug #4017: postfix package looking for /usr/local on pfsense 2.2
Bug #4018: several packages not looking in pbi dir for files
Bug #4019: clean 2.2 install doesn't have /usr/local/etc/rc.d/ directory
Bug #4020: Unbound not compiled with libevent
Bug #4022: Unbound doesn't set 127.0.0.1 in resolv.conf
Bug #4023: allowed networks in Unbound inadequate
Bug #4025: package service starting issues post-package reinstall
Bug #4027: Unbound host overrides not being implemented
pfSense Packages - Bug #4032: squid3-dev 3.3.11_1 pkg 2.2.8 doesn't work OOB
Bug #4036: Unbound bails with "fatal error: Could not read config file: /unbound.conf"
Bug #4037: delete missing from SAD and SPD screens
Bug #4039: IPsec does not install anymore LAN SPDs
Bug #4040: gateway monitoring issues with multiple PPPoE with same gateway
Bug #4041: Default gateway switching logic seems broken
Bug #4042: AES-GCM should not be an option in P1
Bug #4043: ipsec_dump_sad has issues with IKEv2
Bug #4045: IPsec dashboard widget status incorrect
Bug #4046: Invalid access-control.conf entry with certain IPv6 settings
Bug #4047: address family check on dynamic gateways incorrect
Bug #4048: cosmetic-only RRD error in logs on nano during boot
Bug #4049: dashboard PHP warnings
Bug #4050: Unbound advanced page missing input validation
Bug #4051: Not assigning v6 DNS when Unbound is enabled
Bug #4052: vpn_ipsec_settings.php missing input validation
Bug #4056: IKEv2 rekeying issues
pfSense Packages - Bug #4059: library required by squid3 may be absent
Bug #4064: improper handling of DNS servers by rtsold
Bug #4066: Dynamic DNS updates failing on PPPoE reconnect
Bug #4067: Unbound configuration does not get synchronized to the secondary members of a cluster install
Bug #4069: cookie_test causes false positives in vulnerability scanners
Bug #4070: Vulnerability SSL Weak Ciphers
Bug #4071: IPsec with remote gateway of FQDN missing rightid after boot
Bug #4074: Status NTP does not display any result if IPv6 Allow is off
Bug #4076: DNS Forwarder options do not unset during CARP sync
pfSense Packages - Bug #4078: NUT fails to start with USB
Bug #4080: can't edit setting after factory reset!
Bug #4089: IPsec skips P1s bound to CARP IPs
Bug #4090: unbound advanced settings cause broken unbound.conf file
Bug #4093: Static Routes GUI page mentions rules
Bug #4094: Gateway Status can report Online when gateway is waiting for DHCP
Bug #4095: Unbound config not regenrated on WAN-style interface acquiring IP address
Bug #4099: IP aliases on localhost not config syncing across
Bug #4100: Validation of y/n answers in setlanip console menu
Bug #4104: unbound package configuration migration to 2.2 broken
Bug #4110: interface-group is not set properly on the openvpn interfaces after reboot
Bug #4111: Unbound replies using wrong source IP when bound to *
Bug #4112: ipsec, strongswan (sometimes) needs a 'conn' section with a unique reqid for each phase2
pfSense Packages - Bug #4114: Squid 3.4.9 transparent proxy broken.
Bug #4115: Services - DHCP/DHCPv6 Server - some advanced options have messed up GUI
Bug #4116: IP Alias VIPs using CARP VIP as their interface are not properly deactivated for temporary CARP disable
Bug #4119: Disable DHCP server when interface is disabled / DHCP relay is checking for disabled interfaces
Bug #4122: webConfiguratorlockout table is missing expiration
Bug #4124: Alias FQDNs don't permit trailing period
Bug #4125: Captive Portal - Portal page contents - View current page has a broken link
Bug #4126: some PSKs incorrect in ipsec.secrets
Bug #4127: CP per-user bandwidth restriction applied when disabled
Bug #4129: IPsec connections with multiple P2s use only first SA
Bug #4130: Status: Dashboard - index.php: XML error: no leases object found! (IPsec Widget)
Bug #4132: Captive Portal - Portal page contents - confusing instructions (gettext issue)
Bug #4134: Email notifications configuration migration to 2.2 broken (STARTTLS)
Bug #4137: IPSec widget - Invalid argument supplied for foreach() in /usr/local/www/widgets/widgets/ipsec.widget.php on line 89
Bug #4138: Status - IPsec: Description missing on connected tunnels
Bug #4139: IPsec status widget broken
Bug #4140: Password protect console menu setting not preserved on upgrade
Bug #4141: captive-portal on opt1 interface affects traffic going through other interfaces
Bug #4143: After firmware upgrade it keeps saying "Packages are currently being reinstalled in the background." for no apparent reason.
pfSense Packages - Bug #4144: Current GUI doesn't allow you to select multiple logging severity options
Bug #4146: OpenVPN tap interfaces are down after boot
Bug #4148: gen_subnet returns incorrect result for IPv6
Bug #4151: Main page for this section link in services_unbound_host_edit.php is linked to services_dnsmasq.php
Bug #4152: Main page for this section link in services_unbound_domainoverride_edit.php is linked to services_dnsmasq.php
Bug #4157: IPsec route-to/reply-to "pass out" rules mis-route ISAKMP and ESP traffic with remote on same subnet
Bug #4158: IPsec PSK containing " breaks
Bug #4159: 2.2 amd64 nsupdate broken
Bug #4161: Misspelling in privilege "WebCfg - Services - Captiveprotal Zones page"
Bug #4163: upgraded configs missing <iketype>
Bug #4164: IPsec dashboard status wrong for connections with multiple P2s
Bug #4169: IPsec NAT address to address using nat instead of binat
Bug #4172: Diag Test Port does not allow blank source port
Bug #4174: multi-WAN IPsec uses wrong interface at times
Bug #4177: Bug in OpenVPN user/pass auth
Bug #4180: OpenVPN Backend for authentication field does not process in other languages
Bug #4182: IPsec ipcomp is not supported with strongswan
Bug #4186: VLANs on lagg not configurable with FEC, LB and RR modes
Bug #4188: IPSec SA requestid has limited range in FreeBSD
Bug #4189: url(IPs) alias not loading correctly.
Bug #4192: check_reload_status aggregation of CARP events causes issues
Bug #4202: IPsec - completely broken after last round of changes
Bug #4203: Default loader tunables for DMA and write caching changed on FreeBSD 10.x
Bug #4204: CP leaking resources on reload
Bug #4212: unbound not starting on 12 CPU host
Bug #4213: WebGUI - improper path to icons
Bug #4223: ip_in_subnet('11.22.33.5','abcd::/64') returns true.. this should not be.
Bug #4236: Call to undefined function filter_configure() in /etc/inc/vpn.inc
Bug #4248: AES-GCM doesn't interoperate with devices not using padding
Bug #4252: radvd not functional with CARP IPs
Bug #4254: Dynamic interface removal/addition breaks IKEv2
Bug #4257: tap interfaces missing from bridge after boot
Bug #4258: DNS Resolver - auto-added access controls missing IPv6 subnets where "all" interfaces selected
Feature #484: Add a warning if users are using non-official package repo
Feature #973: OpenVPN client in GUI cannot connect to a server requiring username/password
Feature #983: Improve/Enhance IP Alias VIP handling in GUI
Feature #1361: DNSMasq, source interface and IPSec VPNs
Feature #1836: RFC 5006 support for DNS from RAs
Feature #1938: Filter messages broken into multiple syslog messages
Feature #1972: Allow /31 networks to be configured
Feature #2129: TCP mss clamping for IPv6
Feature #2151: Add IPv6 support to the pfSense module
Feature #2295: Allow multiple OpenVPN compression settings (disable, yes, no, adaptive)
Feature #2302: Uploaded Layer 7 patterns not saved in config, backed up, or synced
Feature #2416: Hybrid NAT mode that is a mix of Auto+Manual
Feature #2501: Add no-sync option for firewall rules
Feature #2715: Don't reactivate CARP until I manually do it
Feature #2847: Add a checkbox to flag a gateway as "down"
Feature #2849: IKEv2 support for IPsec
Feature #2986: Turkish Language Import For Next Snapshots
Feature #2989: Changing language english to turkish not effect
Feature #3018: Can't disable autogenerate SPD rules
pfSense Packages - Feature #3129: Enable LEDs on BCM57780 NICs
Feature #3327: Allow reordering of 1:1 NAT entries
Feature #3328: Allow reordering of IPsec Phase 1 and Phase 2 entries
Feature #3339: Add a button to allow downloading the Captive Portal HTML text, error text, and logout page text
Feature #3341: Add a means for reverting GUI auth backend to Local Database from the console
Feature #3362: Add a means to reset CP HTML/Error Page/Logout Page to default
Feature #3365: Implement package signing
Feature #3413: CARP interface names in WebGUI
Feature #3490: Update DHCP options for network booting with UEFI
Feature #3515: Windows OpenVPN clients require register-dns to properly use a DNS server set by Pfsense
Feature #3522: Option to set CARP interfaces to 'maintenance mode', persisting through a reboot so the primary machines stays as backup/inactive
Feature #3589: OpenVPN client: GUI option for "route-nopull"
Feature #3599: missing kernel option / kernel module in 2.2 (mount_nullfs)
Feature #3633: OpenVPN client's "Client Certificate" should be optional
Feature #3832: change default update URL to https
Feature #4053: Make backup of RRD more efficient on using /var disk space
Feature #4072: Display installed pkg version even if pkg server not available
Feature #4190: Support for RFC 3021, using 31-Bit Prefixes on IPv4 Point-to-Point Links
Feature #4214: IKEv2 EAP-MSCHAPv2 support
Todo #2109: pfSense on FreeBSD 10.x
Todo #2565: Update code for PHP 5.4, fix pass-by-reference
Todo #3338: Update racoon.conf "remote" syntax
Todo #3396: Replace dnsmasq with Unbound
Todo #3399: Implement a replacement for base nsupdate command for RFC2136 Dynamic DNS
Todo #3632: Move to sqlite3 php module
Todo #3705: use HTTPS for rc.update_bogons.sh
Todo #3715: Change default serial speed to 115200
Todo #3795: Update hostapd to support 802.11n
Todo #3874: Make miniupnpd config syntax compatible with new versions
Todo #3880: Write upgrade code for unbound
Todo #3893: Alias -> IP
Todo #3958: test 2.2 upgrade scenarios
pfSense Packages - Todo #4029: Update phpsysinfo package
Todo #4073: Validate bogon update failure handling
Todo #4075: branch RELENG_2_2, update build tools and build servers accordingly