Project

General

Profile

2.5.0

Future Release

27%

156 issues   (17 closed — 139 open)

Time tracking
Estimated time 22.00 hours
Issues by
Bug

14/109
Feature

2/31
Todo

1/16
Related issues
Bug #1819: DNS Forwarder Not Registering DHCP Server Specified Domain Name
Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel
Bug #6025: Load balancing fails when one gateway has a weight of 1 and another gateway has a weight >1
Bug #6028: no firewall rules loaded after reboot with invalid ruleset
Bug #6030: Duplicated tracker IDs on block private networks rules
Bug #6167: IPsec IPComp not working
Bug #6186: race conditions in service startup
Bug #6263: Encryption options for every P2 on a given P1 are written to each P2 individually inside ipsec.conf with multiple P2 entries + split conn entries
Bug #6277: RRD graphs are not created correctly for interfaces using CODELQ
Bug #6333: Bootup starts/restarts dpinger multiple times
Bug #6868: Interface MTU Setting not applied to all IPv6 routes
Bug #7146: install_cron_job() causes inexplicable issues when saving package configuration
pfSense Packages - Bug #7267: Status Traffic Totals - Stacked Bar - Scale not high enough
Bug #7307: ZFS installer - shuts down instead of rebooting
Bug #7384: DHCPv6 doesn't merge IPv6 prefix with the input submitted in DNS servers field when using Track Interface IPv6 configuration parameter for the LAN interface.
Bug #7389: Limiter does not work with transparent proxy
Bug #7772: Regression of Bug #906
Bug #7801: UDP fragments received over IPsec tunnel are not properly reassembled and forwarded
Bug #8100: pfsync Initially Deletes States on Primary for Connections Established through Secondary
Bug #8136: dpinger for WAN DHCPv6 gets fails to update gateway IP
Bug #8192: dpinger - Change in ISP link-local IPv6 address drops connectivity
Bug #8248: Pfsense hangs - non pingable when removing traffic shaper from interface(s)
Bug #8263: Cannot create a nonlinear `Link Share` service curve because of: "the sum of the child bandwidth higher than parent"
Bug #8273: IPv6 GRE tunnel over PPPoE fails on startup
Bug #8443: DHCP relay not starting after ovpnc interface is unchecked - vm 2.4.3
Bug #8472: IPsec with "Split connections" enabled (multiple P2's) - new added P2's are not coming up (between two pfsense's 2.4.3)
Bug #8531: URL Table aliases don't support FQDNs or names that return >1 IP
Bug #8611: unable to receive IPv6 RA's on SG-1000, default route lost
Bug #8815: IPv4 addresses disappear from interfaces when link is lost
Bug #8870: Webgui incorrectly reports "The system is on the latest version".
Bug #8964: IPsec async cryptography advanced setting - TCP traffic not passing through
Bug #8970: Queues Menu item ends with ":"
Bug #9004: Default gateway IPv4 set to a group fails after restart on 2.4.4
Bug #9074: Alias URL lists only storing last-most list in config.
pfSense Packages - Bug #9135: Suricata in inline modus blocks some downloads
Bug #9136: IPv6 Tracking Interfaces Lose IPv6 Address in Certain Cases
Bug #9148: PPPoE over a VLAN fails to reconnect.
Bug #9154: Editing a VLAN parent interface causes all VLANs to be reconfigured, which can lead to problems
Bug #9193: firewall_nat.php: PHP error deleting an imported NAT rule with no firewall rules present
Bug #9207: Phase1s created before pfSense 2.1.0 no longer work after upgrade to 2.4.3: IPsec ERROR: Could not find phase 1 source for connection [redacted]. Omitting from configuration file.
Bug #9208: The wrong session timeout value can be used for some captive portal users
Bug #9209: RADIUS: Set NAS Identifer to webConfigurator when logging in the UI
Bug #9214: Packages fail to reinstall after restoring config.xml from the installer
pfSense Packages - Bug #9220: STunnel: Tunnel list does not show certificate
Bug #9223: SSHGUARD doesn't work as expected
Bug #9225: Gateway group routing not updated on OpenVPN client reconnect
Bug #9231: firewall_aliases_edit.php: pf keyword matching is not catching some problem cases
Bug #9239: WebGUI: Diagnostics > Packet Capture will try to display any size of pcap file.
Bug #9248: Dynamic dns updates on azure ipv6 service is not working properly
Bug #9255: Potential performance issue when using multiple authentication servers in a zone
Bug #9259: User with "Deny Config Write" privilege is not fully prevented from creating accounts
Bug #9264: Disabling "IPv6 over IPv4 Tunneling" breaks config
Bug #9270: "Remove all states to and from the filtered address" does not remove all states
Bug #9275: ip tools link not working
Bug #9276: DNS troubleshooting tool incorrectly reporting "ai." as an invalid hostname
Bug #9281: ZFS encrypted+mirrored swap may not be activated on 2.4.4-p2
Bug #9283: Not obvious that HA sync will still sync certs if cert sync disabled but OpenVPN sync enabled
pfSense Packages - Bug #9286: squidGuard - Unable to change IP for sgerror.php URL in configuration
Bug #9292: Default route as indicated by "(Default)" does not match the actual default route on the OS.
Bug #9296: Rule / Alias FQDN-Resolution broken
Bug #9308: Missing countries from list used on certificate pages
Bug #9313: PHP Fatal error: Uncaught Error: Call to a member function addGlobal() on null in /usr/local/www/firewall_shaper_vinterface.php:415
Bug #9316: diag_backup.php: Parse error: syntax error, unexpected ';' in /usr/local/www/diag_backup.php on line 333
Bug #9317: Warning/crash when adding a new user and choosing to generate a certificate
Bug #9320: Outbound NAT and multiple IPSEC IPs for mobile warriors
Bug #9331: Parallel Rekey fails for multiple Child SAs
Bug #9344: OpenVPN click NCP Algorithms will always go to DH Parameters website(in Chinese-Taiwan)
Bug #9349: IPSec service start/stop/restart fails after settings change
Bug #9352: Duplicate default views in Status Monitoring that can't be removed.
Bug #9353: PHPSession errors from limited access to dashboard and widgets
Bug #9359: diag_tables.php duplicate entries from webConfigurator lockout table
Bug #9365: Use of "continue" in switch statements can be ambiguous
Bug #9366: "Illegal string offset" PHP errors
Bug #9382: SNMP Undefined symbol "pf_altq"
Bug #9383: dhcpleases kqueue error
Bug #9384: check_reload_status linkup log message has a "$" before the interface name
Bug #9385: OpenVPN logs a "Device busy" error when opening tap interfaces, but continues to function
Bug #9390: diag_backup.php: Backup output generation failure with CSRF script tag inserted into XML
Bug #9400: PHP scandir() error at boot
Bug #9407: Update jQuery to current version (3.3.1 or later)
Bug #9408: OCSP stapling detection broken on 2.5.0
Bug #9409: Crash dumps cannot be saved when RAM disks are enabled for /var
Bug #9410: Package install fails to run from GUI
Bug #9411: Firewall log does not contain valid entries
Bug #9413: VLAN driver missing ALTQ support
Bug #9414: Hardware with Intel 82583V interface such as some Watchguard equipment fail to load interface
Bug #9415: Firewall log is empty in the GUI
Bug #9420: crypt_data() uses deprecated openssl syntax for passphrase
Bug #9421: crypt_data() needs to support stronger key derivation
Bug #9428: Unable to access "System: Authentication servers" if "WebCfg - System: User Password Manager" is set
Bug #9431: Upgrading to 2.5.0 with devel/aws-sdk-php installed fails
Bug #9441: Setting Crypto HW breaks IPSec CBC
Bug #9443: Captive Portal Vouchers feature is broken in 2.5.0
Bug #9446: Filter reload error with NAT reflection enabled
Bug #9449: Empty lines in various forms
Bug #9450: Multiwan gateway group fail-over not working as expected (possible race condition)
Bug #9459: patch pf: silence a runtime warning pfr_update_stats: assertion failed.
Bug #9460: OpenVPN local auth failing due to fcgicli output
Bug #9466: DHCP (IPv4) relay mistakenly listening on upstream interface
Bug #9467: vmx(4) interfaces do not have ALTQ support on pfSense 2.5, they had ALTQ support on 2.4
Bug #9468: Removing the last limiter does not sync to secondary via XMLRPC
Bug #9469: Removing the last ATLQ traffic shaper queue does not sync to secondary via XMLRPC
Bug #9470: unbound remotecontrol.conf not rewritten when the file is empty
Bug #9476: pfSense 2.4.x sending ARP replies with non-CARP source MAC address
Bug #9478: Unable to check for updates from the GUI when using a proxy with authentication
Bug #9479: Alias table not updated when adding new entry
Feature #855: More flexible options for state killing based on WAN status
Feature #1337: VLANs with different MAC address than parent interface
Feature #3377: OAuth2 authentication in captive portal
Feature #3473: Allow configuration of OpenVPN keepalive
Feature #4405: Traffic shaping doesn't work when applied to a bridge interface
Feature #6324: Improve IKEv2 multiple traffic selector per SA configuration GUI
Feature #6742: OAuth2 authentication for OpenVPN (and for FreeRadius)
Feature #6775: Strongswan PKCS#11 Support
Feature #7016: system_information_widget.php - Indicate adaptive state timeout status when active
Feature #7467: Add iPhone/Android/Generic USB tethering support
Feature #7671: Gateway Monitoring Via Custom Script or Telnet.
Feature #7767: OCSP support for OpenVPN server
Feature #8160: Accomodate both RADIUS and pool IP addresses in IPsec
Feature #8602: DNS over TLS host verification
Feature #8861: Show more detail on status_interfaces.php
pfSense Packages - Feature #8985: Suricata: allow configuration for external/internal additional storage
Feature #9111: Add IPsec VTI interface MTU support
Feature #9206: OpenVPN+RADIUS+Cisco AVPair ACL Enhancements/BugFixes
Feature #9217: Squid LDAP Authentication - spaces in ldif values
Feature #9238: Add support for Zerotier
Feature #9260: ssh_tunnel_shell: Disable console message output
pfSense Packages - Feature #9265: Add options to configure TIMEOUTclose and debug on stunnel package
Feature #9272: Allow multiple IP in ListenIP for Zabbix Agent
Feature #9274: CP - trim() username post_value
Feature #9290: Need a way to suppress status output display in /status.php
Feature #9297: Log and Graph Temperatures
Feature #9323: Option to hide 'Kernel PTI' from sysinfo widget
pfSense Packages - Feature #9387: Update telegraf to 1.9.3 from ports
pfSense Packages - Feature #9399: pkg support for SSH + sudo authentication via LDAP
Feature #9412: Add sorting and search/filtering to CA/Certificates
Feature #9439: Poll Interval For GPS and PPS
Todo #7091: Write upgrade code to rename igb devices to em
Todo #8350: Remove clog in favor of standard syslogd or syslogd alternative with rotation via newsyslog or logrotate
Todo #8821: Remove Growl Notifications
Todo #8886: Update downloads page once hybrid iso/img installers are implemented
Todo #9158: add squid proxy 4
Todo #9245: Update copyright notices to 2019
Todo #9356: Find optimal default for net.pf.request_maxcount
Todo #9360: Switch to Python 3.x
Todo #9367: Update SMART Page with new capabilities
Todo #9386: Deprecate built-in relayd Load Balancer
Todo #9417: Convert LDAP TLS setup from environment to LDAP_OPT_X_TLS_* set options