2.5.0

Bug #1375: Captive portal logs: mixed with logs from other sources (squid, php)

Bug #1605: DHCP Server should group known clients by interface

Bug #1819: DNS Resolver Not Registering DHCP Server Specified Domain Name

Bug #3334: Status/Traffic Graph isn't IPv6 ready

Bug #3500: DHCP Leases List Not Showing Hostname in Some Cases

Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel

Bug #4674: invalid state table entries after WAN IP change

Bug #6025: Load balancing fails when one gateway has a weight of 1 and another gateway has a weight >1

Bug #6028: no firewall rules loaded after reboot with invalid ruleset

Bug #6030: Duplicated tracker IDs on block private networks rules

Bug #6167: IPsec IPComp not working

Bug #6186: race conditions in service startup

Bug #6195: Cannot set Manual Outbound NAT when Language is pt_BR

Bug #6263: Encryption options for every P2 on a given P1 are written to each P2 individually inside ipsec.conf with multiple P2 entries + split conn entries

Bug #6277: RRD graphs are not created correctly for interfaces using CODELQ

Bug #6333: Bootup starts/restarts dpinger multiple times

Bug #6846: System misreporting platform

Bug #6868: Interface MTU Setting not applied to all IPv6 routes

pfSense Packages - Bug #7161: pfSense-pkg-bind9 changelog pointing to non-existent location

Bug #7186: Unable to use national symbols in password fo ACB package

Bug #7198: nginx-error.log is not circular and can fill filesystem

pfSense Packages - Bug #7267: Status Traffic Totals - Stacked Bar - Scale not high enough

pfSense Packages - Bug #7293: dns/bind911 requires TCP_RFC7413 in kernel

Bug #7307: ZFS installer - shuts down instead of rebooting

Bug #7384: DHCPv6 doesn't merge IPv6 prefix with the input submitted in DNS servers field when using Track Interface IPv6 configuration parameter for the LAN interface.

Bug #7389: Limiter does not work with transparent proxy

Bug #7772: Regression of Bug #906

Bug #7801: UDP fragments received over IPsec tunnel are not properly reassembled and forwarded

Bug #8014: DynDNS wildcard option doesn't work for provider Loopia

Bug #8051: XG-2758 - Wrong Interface Assignment

Bug #8100: pfsync Initially Deletes States on Primary for Connections Established through Secondary

Bug #8136: dpinger for WAN DHCPv6 gets fails to update gateway IP

Bug #8192: dpinger - Change in ISP link-local IPv6 address drops connectivity

Bug #8248: Pfsense hangs - non pingable when removing traffic shaper from interface(s)

Bug #8263: Cannot create a nonlinear `Link Share` service curve because of: "the sum of the child bandwidth higher than parent"

Bug #8273: IPv6 GRE tunnel over PPPoE fails on startup

Bug #8443: DHCP relay not starting after ovpnc interface is unchecked - vm 2.4.3

Bug #8472: IPsec with "Split connections" enabled (multiple P2's) - new added P2's are not coming up (between two pfsense's 2.4.3)

Bug #8531: URL Table aliases don't support FQDNs or names that return >1 IP

Bug #8611: unable to receive IPv6 RA's on SG-1000, default route lost

Bug #8616: When reconfiguring a captiveportal, connected users get disconnected and can't login back

Bug #8815: IPv4 addresses disappear from interfaces when link is lost

Bug #8870: Webgui incorrectly reports "The system is on the latest version".

Bug #8907: wizard.php - $field['type'] - "Select" doesn't have the attribute "Size" defined

Bug #8922: Static routes set by system.inc for DNS gateway bindings are not removed

Bug #8964: IPsec async cryptography advanced setting - TCP traffic not passing through

Bug #9023: is_fqdn() validation

Bug #9053: Dynamic DNS will not allow Route 53 wildcard record

Bug #9058: crash in l2tp retransmit

Bug #9074: Alias URL lists only storing last-most list in config.

Bug #9133: "Show all configured leases" does not stay set after deleting a lease

pfSense Packages - Bug #9135: Suricata in inline modus blocks some downloads

Bug #9136: IPv6 Tracking Interfaces Lose IPv6 Address in Certain Cases

Bug #9148: PPPoE over a VLAN fails to reconnect.

Bug #9150: Web authentication RADIUS package shows PHP error if unable to resolve FQDN of RADIUS server

Bug #9154: Editing a VLAN parent interface causes all VLANs to be reconfigured, which can lead to problems

Bug #9208: The wrong session timeout value can be used for some captive portal users

Bug #9209: RADIUS: Set NAS Identifer to webConfigurator when logging in the UI

Bug #9218: SNMP sysDescr does not display hostname and patch version

pfSense Packages - Bug #9220: STunnel: Tunnel list does not show certificate

Bug #9225: Gateway group routing not updated on OpenVPN client reconnect

Bug #9234: Wording consistency in Certificate Management notifications

Bug #9243: IPsec ID type keyid not explicitly set

Bug #9248: Dynamic dns updates on azure ipv6 service is not working properly

Bug #9255: Potential performance issue when using multiple authentication servers in a zone

Bug #9258: error when deleting P2

Bug #9259: User with "Deny Config Write" privilege is not fully prevented from creating accounts

Bug #9267: dhclient does not handle protocol timeouts or script failures correctly

Bug #9270: "Remove all states to and from the filtered address" does not remove all states

Bug #9271: Azure DDNS whitespace cleanup

pfSense Packages - Bug #9286: squidGuard - Unable to change IP for sgerror.php URL in configuration

Bug #9292: Default route as indicated by "(Default)" does not match the actual default route on the OS.

Bug #9296: Rule / Alias FQDN-Resolution broken

Bug #9302: radvd always advertises DNS servers and Domain Search List regardless of M or O flag

Bug #9320: Outbound NAT and multiple IPSEC IPs for mobile warriors

Bug #9331: Parallel Rekey fails for multiple Child SAs

Bug #9344: OpenVPN click NCP Algorithms will always go to DH Parameters website(in Chinese-Taiwan)

Bug #9349: IPSec service start/stop/restart fails after settings change

Bug #9353: PHPSession errors from limited access to dashboard and widgets

Bug #9361: Cloudflare Not Allowing "*" Hostname Entry in Dynamic DNS

Bug #9362: rc.dyndns.update: Cloudflare DDNS with proxy enabled doesn't work at all

Bug #9365: Use of "continue" in switch statements can be ambiguous

Bug #9366: "Illegal string offset" PHP errors

Bug #9382: SNMP Undefined symbol "pf_altq"

Bug #9383: dhcpleases kqueue error

Bug #9384: devd putting "$" before variable contents when using single quotes

Bug #9385: OpenVPN logs a "Device busy" error when opening tap interfaces, but continues to function

Bug #9400: PHP scandir() error at boot

Bug #9407: Update jQuery to current version (3.3.1 or later)

Bug #9408: OCSP stapling detection broken on 2.5.0

Bug #9410: Package install fails to run from GUI

Bug #9411: Firewall log does not contain valid entries

Bug #9413: VLAN driver missing ALTQ support

Bug #9414: Hardware with Intel 82583V interface such as some Watchguard equipment fail to load interface

Bug #9415: Firewall log is empty in the GUI

Bug #9420: crypt_data() uses deprecated openssl syntax for passphrase

Bug #9421: crypt_data() needs to support stronger key derivation

Bug #9428: Unable to access "System: Authentication servers" if "WebCfg - System: User Password Manager" is set

Bug #9431: Upgrading to 2.5.0 with devel/aws-sdk-php installed fails

Bug #9441: Setting Crypto HW breaks IPSec CBC

Bug #9443: Captive Portal Vouchers feature is broken in 2.5.0

Bug #9447: Configuring LAGG at XG-7100 Switch Ports Broken

Bug #9448: Dynamic DNS options showing in GUI for IPv6 when not in use

Bug #9449: Empty lines in various forms

Bug #9450: Multiwan gateway group fail-over not working as expected (possible race condition)

Bug #9459: patch pf: silence a runtime warning pfr_update_stats: assertion failed.

Bug #9460: OpenVPN local auth failing due to fcgicli output

Bug #9466: DHCP (IPv4) relay mistakenly listening on upstream interface

Bug #9467: vmx(4) interfaces do not have ALTQ support on pfSense 2.5, they had ALTQ support on 2.4

Bug #9468: Removing the last limiter does not sync to secondary via XMLRPC

Bug #9469: Removing the last ATLQ traffic shaper queue does not sync to secondary via XMLRPC

Bug #9476: pfSense 2.4.x sending ARP replies with non-CARP source MAC address

Bug #9478: Unable to check for updates from the GUI when using a proxy with authentication

Bug #9488: No console when booting CE Memstick UEFI.

pfSense Packages - Bug #9497: AWS VPN Wizard: WebGUI times out.

Bug #9522: Diagnostics > System Activity shows only the header

Bug #9540: PHP Uncaught Error in Status/System Logs/Firewall/Dynamic View

Bug #9541: Non-admin user with admin rights is given the wrong URL for the user manager

Bug #9543: diag_dns.php: Reverse lookup of IPv6 fails with "Host must be a valid hostname or IP address."

Bug #9548: Do not use VLANMTU flag to decide if interface supports to run VLAN

Bug #9550: New privilege matching method does not allow menu or tab links to anchors (#foo)

Bug #9558: GPS NTP source PHP errors

Bug #9560: SMART tests not working

Bug #9564: Dynamic DNS Status - IPv4 format error for 'Cached IP'

Bug #9569: Fix serial console terminal size issues

Bug #9580: Dynamic DNS DNSimple client errors

Bug #9582: PHP error setting up VLANs from the console

Bug #9586: Unbound Access List /31 UI Issue

Bug #9595: OpenVPN does not resync when running on a gateway group

Bug #9600: Add athp to wireless device regex list

Bug #9603: Strongswan stroke is deprecated, move to swanctl/vici

Bug #9611: PHP error on fresh 2.5.0 install or after factory reset

Bug #9643: Limiters do not function properly on 2.5 snapshots

Bug #9646: OpenSSL 1.1.1 does not list engines for AES-NI or BSD crypto

Bug #9649: IPv6 6RD Tunnel

pfSense Packages - Bug #9652: Squid Proxy Server /var/squid/lib/ssl_db directory not found in squid.inc

pfSense Packages - Bug #9657: STunnel fails to generate an rc script

Bug #9663: panic on boot when IPv6 option "Do not wait for a RA" is enabled

Bug #9668: Running /etc/rc.newipsecdns breaks FRR BGP on VTI interfaces

Bug #9674: hidden OpenVPN settings are validated and written to file

pfSense Packages - Bug #9681: [Monitoring] New views title are always in lower case.

Bug #9684: System Notifications: Asterisks over writing current password causing notifications to stop working.

Bug #9692: system_authservers.php: Descriptive name can be changed by removing read-only property via inspect element

Bug #9708: /etc/inc/unbound.inc: Pfsense Default Unbound Configuration does not Prevent DNS Rebinding Attacks Against Localhost

Bug #9715: Call to undefined function sort_related_log_files

Bug #9719: system_certmanager.php - Descriptive name field disappeared when adding certificate for user

Bug #9720: vpn_ipsec_phase2.php - no remote network field in VTI mode

Bug #9722: services_captiveportal_vouchers.php wrong status icon link

Bug #9730: newsyslog cron job not present after every upgrade

Bug #9741: interfaces_ppps_edit.php: WebGUI don't show local ip / gateway ip values

Bug #9744: fatal error if ECDH Curve not default

Bug #9745: can't add ECDSA certificate key when signing CSR

Bug #9747: IPSec widget - Missing escape of domain backslash

Bug #9748: openvpn_wizard.xml: DH 15360 and 16384 fall back to 1024

pfSense Packages - Bug #9752: ACME - Actions have no access to additionally generated certificate files.

Bug #9756: vpn_openvpn_(client|server).php: js issue when selecting multiple NCP

Bug #9758: dhcpleases does not handle spaces in DHCP lease hostnames

Bug #9763: Trying to set VLAN Priority causes error

Bug #9767: Interesting Traffic Will not Initiate an IPsec VTI tunnel.

Bug #9770: XML-based Packages do not activate shortcuts

Bug #9778: Inconsistent update check results

Bug #9779: Dynamic DNS class constructor uses deprecated function name

Bug #9780: PHP warning in diag_dump_states.php

Bug #9781: Fix IPsec VTI interface creation logic

Bug #9785: ACB permits manual backup attempt when disabled

Bug #9796: kernel panic after removing interfaces

Bug #9802: status_logs_settings.php: "Reset log files" does not clear all log files

Bug #9806: Undefined variables in filter.inc openvpn aliases section

Bug #9807: Packets Monitoring graphs are being incorrectly scaled

Bug #9819: Captive portal: Change order redirect page is selected

Feature #790: Advanced options for dnsclient (resolv.conf)

Feature #855: More flexible options for state killing based on WAN status

Feature #1257: Handle encypted CA/Certificate private keys

Feature #1337: VLANs with different MAC address than parent interface

Feature #3377: OAuth2 authentication in captive portal

Feature #3473: Allow configuration of OpenVPN keepalive

Feature #3792: Group name size limit too restrictive on Active Directory Users

Feature #4405: Traffic shaping doesn't work when applied to a bridge interface

Feature #5644: Captive Portal retain logins across reboot

Feature #6324: Improve IKEv2 multiple traffic selector per SA configuration GUI

Feature #6742: OAuth2 authentication for OpenVPN (and for FreeRadius)

Feature #6775: Strongswan PKCS#11 Support

Feature #6787: NTP GUI sync/poll interval

Feature #6960: Consider replacing ISC DHCP server with KEA DHCP

Feature #7016: system_information_widget.php - Indicate adaptive state timeout status when active

Feature #7304: DHCP: Enable OMAPI Config

Feature #7467: Add iPhone/Android/Generic USB tethering support

Feature #7671: Gateway Monitoring Via Custom Script or Telnet.

Feature #7767: OCSP support for OpenVPN server

Feature #8160: Accomodate both RADIUS and pool IP addresses in IPsec

Feature #8645: Upload certificate file instead of pasting

Feature #8861: Show more detail on status_interfaces.php

pfSense Packages - Feature #8985: Suricata: allow configuration for external/internal additional storage

Feature #9030: Allow TLS Key Direction with OpenVPN

Feature #9111: Add IPsec VTI interface MTU support

Feature #9152: Sort diag_states_summary.php by states

Feature #9206: OpenVPN+RADIUS+Cisco AVPair ACL Enhancements/BugFixes

Feature #9251: DNS Resolver (Unbound) Python Integration

Feature #9256: adjust frequency of geom rebuild notifications.

Feature #9260: ssh_tunnel_shell: Disable console message output

pfSense Packages - Feature #9265: Add options to configure TIMEOUTclose and debug on stunnel package

Feature #9268: Add Linode Dynamic DNS support

Feature #9274: CP - trim() username post_value

Feature #9280: Add AAAA record type support for DynDNS with Digital Ocean

Feature #9285: Add an option to disable the ping-check in dhcpd

Feature #9297: Log and Graph Temperatures

Feature #9323: Option to hide 'Kernel PTI' from sysinfo widget

pfSense Packages - Feature #9387: Update telegraf to 1.9.3 from ports

pfSense Packages - Feature #9399: pkg support for SSH + sudo authentication via LDAP

Feature #9412: Add sorting and search/filtering to CA/Certificates

Feature #9426: Show PPP uptime on the Dashboard - Interfaces Widget

Feature #9439: Poll Interval For GPS and PPS

Feature #9452: Add Gandi LiveDNS DynDNS client.

pfSense Packages - Feature #9521: Upgrade to HAProxy 1.9

Feature #9527: Add ability for LDAP extended query on groups in RFC2307 containers.

Feature #9531: [IPSEC] Add additional curve-based DH Groups (31+)

Feature #9532: GUI indication and options for MDS mitigation

Feature #9538: add support for athp(4) driver

Feature #9544: Enable RADIX_MPATH

pfSense Packages - Feature #9545: Enable MULTIPATH in FRR

Feature #9590: RFE: Add additional prefix delegation size entries to dropdown-list

Feature #9620: User privilege to manage integrated switch

Feature #9661: Increase the number of DHCP/DHCPv6 NTP server options to three (or more)

Feature #9693: Bypass automatic backups

Feature #9694: Redact ACB encryption password from status.php

Feature #9695: Add Ability to Force NAT-T Encapsulation on IKEv2 Peers

Feature #9705: Add kernel memory usage to status.php

Feature #9706: Increased number of colors for login screen

Feature #9716: Italian translation

Feature #9718: Make diag_states_summary table sortable

Feature #9754: Add separate authentication log

Feature #9757: DH groups 25,26,27 not listed for phase1 & phase2

Feature #9766: diag_packet_capture.php: allow to input multiple tcp/udp ports

Feature #9771: diag_reboot.php: add ability to reroot and reboot with fsck to WebGUI

Feature #9788: Display number of connections in status_openvpn.php

Feature #9791: Ability to filter Diagnostics ARP Table by IP range (DHCP)

pfSense Packages - Feature #9820: Add Zabbix 4.4 (agent and proxy) packages

Feature #9825: Requirements for trusted certificates in iOS 13 and macOS 10.15

Todo #8350: Remove clog in favor of standard syslogd or syslogd alternative with rotation via newsyslog or logrotate

Todo #8821: Remove Growl Notifications

Todo #9052: Update Font-Awesome

pfSense Packages - Todo #9158: add squid proxy 4

Todo #9356: Find optimal default for net.pf.request_maxcount

Todo #9360: Switch to Python 3.x

Todo #9367: Update SMART Page with new capabilities

Todo #9386: Deprecate built-in relayd Load Balancer

Todo #9482: Remove zabbix 3.2 and 3.4 from pfSense

Todo #9607: Update web server TLS versions for 2.5.0

Todo #9711: Add GUI options to control log rotation

Todo #9712: Add code for packages to set their own log rotation parameters

Todo #9713: Review log rotation behavior

Todo #9714: Add page to view "other" logs

Todo #9734: Re-evaluate log size, line defaults, and limits

pfSense Packages - Todo #9787: Update Mail Reports to deal with clog deprecation

Todo #9808: status_logs_settings.php: Add GUI option for syslog format

Project

General

Profile

pfSense