# 2.2.3

2.2.x maintenance release

* Bug #3314: Traffic graph shows 2X the actual traffic on VLAN interfaces.
* Feature #3916: IPsec status Overview tab no longer an overview
* Bug #4028: Wireless Obytes counter always 0
* Bug #4107: Firmware backup restoration via WebUI does not reboot firewall at the end, no logs, no messages
* Bug #4131: CP RADIUS accounting not working
* Bug #4235: missing 'reply-to' in rules for mobile-ipsec
* Bug #4266: Rekeying issues with IKEv1 and multiple P2s under some circumstances
* Bug #4296: Using the same FQDN in multiple aliases causes static entries to be lost
* Bug #4370: ntpd does nothing with selected carp interfaces.
* Bug #4383: Firewall log contains IGMP for rules that do not have logging on
* Bug #4442: Boot sits at "Configuring firewall" for long time with hostnames, URL Tables, where DNS non-functional
* Bug #4459: Tzdata is too old (needs to be updated for Russia)
* Bug #4483: SLAAC and stateful DHCP6 IPs are configured on interface when using DHCP6 config type
* Bug #4532: /var/spool/lock Directory missing on nanobsd
* Bug #4537: Crash and reboot when accessing the web UI from the IPsec mobile client or over the tunnel on 32 bit
* Bug #4545: dynDNS service 'selfhost' fails certificate validation
* Bug #4655: IPsec: Enable bypass for LAN interface IP behaviour is reversed
* Bug #4592: FreeBSD 10.1-RELEASE-p6 signal handling problems with squid (FreeBSD bug 195802)
* Bug #4603: Log files used by packages are reinitialized on every boot
* Bug #4607: Bridge+CARP crashes/freezes pfSense
* Feature #4614: EAP-Radius support for accounting on strongswan
* Bug #4617: boot_serial="YES" in loader.conf causes very slow boot on some hardware where serial console not enabled
* Bug #4619: etc/inc/globals.inc typo - vfs.forcesync, not vfs.forceync
* Bug #4621: OpenVPN server does not bind to IPv6 CARP interface when configured from webgui.
* Bug #4625: Expiring a voucher doesn't disconnect a user who is using that voucher
* Feature #4626: Ability to set charon.make_before_break in strongswan.conf
* Bug #4631: some IPsec changes may not trigger required filter reload
* Bug #4633: CARP not enabled upon creation of first CARP IP
* Bug #4640: "Disable Cisco Extensions" change toggles "Auto-exclude LAN address" setting
* Bug #4650: some crash reports containing symlinks fail to submit
* Bug #4651: Policy route negation rules receive the same tracker ID as the rule they are based upon, which confuses the log parser
* Bug #4652: Captive Portal Idle-Timeout causes 2147483647 for acctsessiontime when no data transferred
* Bug #4653: mtree dies in post_upgrade_command during upgrade from 8.x and earlier
* Bug #4658: Quick/easy install fails with gmirror and SATA disks
* Bug #4661: OpenVPN client can't assign to GWGroup specifying VIPs
* Bug #4665: strongswan duplicates reqid at times, causing failures with multi-P2
* Bug #4678: DHCPv6 with static entries, Apply configuration button never goes away
* Bug #4679: IPsec dashboard widget wrongly shows "REKEYED" SAs as "down"
* Bug #4682: invalid return payload crash on primary on filter reload
* Bug #4686: Rekeyed SAs are not properly removed
* Bug #4698: XSS in system_authservers.php
* Bug #4701: WebGUI alias name changes does not reflect in NAT-Outbound
* Bug #4705: Language selection is not functional
* Bug #4712: Wizard hostname validation rejects upper case letters
* Bug #4720: pfSense ADI-2.2.2-RELEASE issues with backup/restore config /boot/config.local changed
* Bug #4730: Firewall Log Dynamic View missing Block/Allowed Reason
* Bug #4738: Setup Wizard can result in invalid LAN DHCP pool calculation
* Bug #4739: growl notifications cause excessive delays when configured with non-resolvable hostname
* Todo #4750: Upgrade to strongswan 5.3.2 for pfsense 2.2.3
* Bug #4751: kernel panic after disabling captive portal when idle timeout is in use
* Todo #4755: upgrade PHP to 5.5.26
* Bug #4772: L2TP + "Enable automatic outbound NAT for Reflection" + L2TP subnet overlapping + Port forwards can lead to a broken ruleset
* Bug #4774: hostid missing +x
* Bug #4775: Add frag limit control to the GUI
* Bug #4778: ADI memstick doesn't setup serial console correctly post-install
* Bug #4781: IPsec PSKs from user manager and vpn_ipsec_keys.php incorrect
* Bug #4785: IKEv2 w/PSK not matching where remote is FQDN
* Bug #2526: Limiter appears to break IPv6 connectivity