Project

General

Profile

2.5.0

closed

Release featuring FreeBSD 12-STABLE, WireGuard, many other improvements

100%

566 issues   (566 closed — 0 open)

Time tracking
Estimated time 24.30 hours
Issues by
Bug

378/378
Feature

151/151
Todo

36/36
New Content

1/1
Related issues
Bug #1353: Number of queues possible Actions
Bug #1375: Captive portal logs: mixed with logs from other sources (squid, php) Actions
Bug #1478: some characters in FW rule descriptions do not sync properly Actions
Bug #1605: DHCP Server should group known clients by interface Actions
Bug #1635: timeout setting on firewall rules does not work for UDP Actions
Bug #3039: New vouchers doesn't sync with CARP slave Actions
Bug #3128: Active voucher status not restored from backup Actions
Bug #3334: Status/Traffic Graph isn't IPv6 ready Actions
Bug #3381: LAN interface root Queue Bandwidth calculation is exactly double the total of the other child queues Actions
Bug #3488: Deleting an interface doesn't delete associated shaper queues Actions
Bug #3500: DHCP Leases List Not Showing Hostname in Some Cases Actions
Bug #3924: Renaming limiters removes them from firewall rules Actions
Bug #3956: Check for invalid CA on generating new certificate Actions
Bug #3965: dhcp6c started before bridge configured at boot, preventing interface tracking Actions
Bug #4510: Crash & reboot loop when configure PPPoE server on PPPoE client interface Actions
Bug #5258: Using pppoe WAN with ipv6 SLAAC, reply-to rules use the wrong interface address Actions
Bug #5308: Failed Namecheap DDNS updates don't cause an error in the GUI. Actions
Bug #5999: IPv6 IP Alias prevents Track Interface from working with DHCPv6 and RA Actions
Bug #6025: Load balancing fails when one gateway has a weight of 1 and another gateway has a weight >1 Actions
Bug #6028: no firewall rules loaded after reboot with invalid ruleset Actions
Bug #6030: Duplicated tracker IDs on block private networks rules Actions
Bug #6277: RRD graphs are not created correctly for interfaces using CODELQ Actions
Bug #6503: rrd graph for ntp monitoring does not reflect freq when neg (-) value. Actions
Bug #6528: The captive portal cannot be used on interface lan since it is part of a bridge but works anyway Actions
Bug #6598: "PPPoE clients" placeholder in rules only includes first PPPoE server instance Actions
Bug #6868: Interface MTU Setting not applied to all IPv6 routes Actions
Bug #7132: PPPoE IP Alias Actions
Bug #7142: IPv6: Floating rules on 6rd enabled WAN interfaces doesn't get bound to wan_stf Actions
Bug #7163: IGMP Proxy does not valid inputs Actions
Bug #7198: nginx-error.log is not circular and can fill filesystem Actions
Bug #7255: Firewall alias FQDN field rejects IDNs (Internationalized domain names) Actions
pfSense Packages - Bug #7293: dns/bind911 requires TCP_RFC7413 in kernel Actions
Bug #7307: ZFS installer - shuts down instead of rebooting Actions
Bug #7378: pfctl: ix0: driver does not support altq Actions
Bug #7379: Virtual IPs/Proxy ARP: Not defined pid file on starting choparp. Actions
Bug #7380: WAN DHCP Gateway Outside of Subnet Causing Route Issues Actions
Bug #7384: DHCPv6 doesn't merge IPv6 prefix with the input submitted in DNS servers field when using Track Interface IPv6 configuration parameter for the LAN interface. Actions
Bug #7386: IPv6 not disabled in mpd.conf w/ IPv6 GUI option set to 'disabled' Actions
Bug #7443: Issues Creating IPv6 Static Mappings Actions
Bug #7558: l2tp configure kills and sleeps even if first time Actions
Bug #7562: l2tp remoteip confusion Actions
Bug #7614: Port forwards where the destination is a network alias can create invalid refection rules if multiple subnets are in that alias. Actions
Bug #7742: 1:1 NAT for IPv6 applies wrong subnet mask to "Single Host" Actions
Bug #7778: DHCP relay not working correctly with bridges Actions
Bug #7912: LDAP Test Results modal doesn't comply with theming Actions
Bug #7915: CBQ Child queue set bandwidth does not apply correctly Actions
Bug #8015: IPsec VPN Not Reconnecting until complete reboot Actions
Bug #8136: dpinger for WAN DHCPv6 gets fails to update gateway IP Actions
Bug #8156: Prefix not being included in DNS entry registered by DHCP6 server Actions
Bug #8472: IPsec with "Split connections" enabled (multiple P2's) - new added P2's are not coming up (between two pfsense's 2.4.3) Actions
Bug #8522: SMTP test says success when actually fails Actions
Bug #8585: Logical interface MTU matches configuration of its physical port channel, not its own configuration Actions
Bug #8616: When reconfiguring a captiveportal, connected users get disconnected and can't login back Actions
Bug #8807: HA sync : files voucher_{$cpzone}.cfg and voucher_{$cpzone}.public are not created on save in /var/save when enabling vouchers on master. Actions
Bug #8809: HA sync : changing a voucher roll on master does not reset active tickets on slave. Actions
Bug #8870: Webgui incorrectly reports "The system is on the latest version". Actions
Bug #8922: Static routes set by system.inc for DNS gateway bindings are not removed Actions
Bug #8954: hn0: driver does not support altq Actions
Bug #8981: Uncheck DHCP registration does not clear entries Actions
Bug #8990: Additional BOOTP/DHCP Options per host Actions
Bug #9023: is_fqdn() validation Actions
Bug #9072: RRD graph mouseover information shows up as Mb when unit size is set to MB Actions
Bug #9074: Alias URL lists only storing last-most list in config. Actions
Bug #9097: ECL can't locate config.xml unless device is MBR-partitioned Actions
pfSense Packages - Bug #9135: Suricata in inline modus blocks some downloads Actions
Bug #9148: PPPoE over a VLAN fails to reconnect. Actions
Bug #9154: Editing a VLAN parent interface causes all VLANs to be reconfigured, which can lead to problems Actions
Bug #9187: Status->Interfaces doesn't show useful data for lagg Actions
Bug #9208: The wrong session timeout value can be used for some captive portal users Actions
Bug #9209: RADIUS: Set NAS Identifer to webConfigurator when logging in the UI Actions
Bug #9242: MBT-4220/2220 not recognized by pfsense correctly after UEFI upgraded to 1.00 Actions
Bug #9255: Potential performance issue when using multiple authentication servers in a zone Actions
Bug #9270: "Remove all states to and from the filtered address" does not remove all states Actions
Bug #9282: Add static mapping count to DHCP Server interface tabs Actions
Bug #9303: HA sync : disabling captive portal HA sync does remove all zones on slave Actions
Bug #9311: Captive Portal continues to limit per-user bandwidth when not enabled Actions
Bug #9324: IPv6 on top of a PPPOE ipv4 interface assigns parent interface to default route, not pppoe interface Actions
Bug #9331: Parallel Rekey fails for multiple Child SAs Actions
Bug #9365: Use of "continue" in switch statements can be ambiguous Actions
Bug #9366: "Illegal string offset" PHP errors Actions
Bug #9382: SNMP Undefined symbol "pf_altq" Actions
Bug #9383: dhcpleases kqueue error Actions
Bug #9388: Update ntpd Actions
Bug #9400: PHP scandir() error at boot Actions
Bug #9401: 26 to 31 character VPN interface names cause gateway names to exceed 31 character limit Actions
Bug #9405: IPsec IPv6 dynamic FQDN Remote Gateways / util.inc resolve_retry() IPv6 support Actions
Bug #9408: OCSP stapling detection broken on 2.5.0 Actions
Bug #9410: Package install fails to run from GUI Actions
Bug #9411: Firewall log does not contain valid entries Actions
Bug #9413: VLAN driver missing ALTQ support Actions
Bug #9414: Hardware with Intel 82583V interface such as some Watchguard equipment fail to load interface Actions
Bug #9415: Firewall log is empty in the GUI Actions
Bug #9420: crypt_data() uses deprecated openssl syntax for passphrase Actions
Bug #9421: crypt_data() needs to support stronger key derivation Actions
Bug #9428: Unable to access "System: Authentication servers" if "WebCfg - System: User Password Manager" is set Actions
Bug #9431: Upgrading to 2.5.0 with devel/aws-sdk-php installed fails Actions
Bug #9435: Dynamic DNS Update events do not occur after certain failover event cases Actions
Bug #9437: Captive Portal Bandwidth Limiter application issue (Credentials Vs. MacAddr Validation) Actions
Bug #9441: Setting Crypto HW breaks IPSec CBC Actions
Bug #9443: Captive Portal Vouchers feature is broken in 2.5.0 Actions
Bug #9449: Empty lines in various forms Actions
Bug #9450: Multiwan gateway group fail-over not working as expected (possible race condition) Actions
Bug #9459: patch pf: silence a runtime warning pfr_update_stats: assertion failed. Actions
Bug #9460: OpenVPN local auth failing due to fcgicli output Actions
Bug #9467: vmx(4) interfaces do not have ALTQ support on pfSense 2.5, they had ALTQ support on 2.4 Actions
Bug #9472: Unable to select QinQ interfaces for PPP interface Actions
Bug #9476: pfSense 2.4.x sending ARP replies with non-CARP source MAC address Actions
Bug #9478: Unable to check for updates from the GUI when using a proxy with authentication Actions
Bug #9539: HA: admin user's authorized key(s) won't get synced Actions
Bug #9548: Do not use VLANMTU flag to decide if interface supports to run VLAN Actions
Bug #9560: SMART tests not working Actions
Bug #9564: Dynamic DNS Status - IPv4 format error for 'Cached IP' Actions
Bug #9577: radvd send_ra_forall failed on interface / can't join ipv6-allrouters Actions
Bug #9592: VTI interface down because interface number created is greater than ipsec32768 Actions
Bug #9596: DHCPv6 Range should not be mandatory if Stateless DHCP selected as router mode Actions
Bug #9600: Add athp to wireless device regex list Actions
Bug #9611: PHP error on fresh 2.5.0 install or after factory reset Actions
Bug #9622: Changing admins membership does not replicate correctly to HA slave Actions
Bug #9641: Dynamic DNS cannot update AAAA records on 6rd tunnel interfaces bound to PPPoE interfaces Actions
Bug #9643: Limiters do not function properly on 2.5 snapshots Actions
Bug #9646: OpenSSL 1.1.1 does not list engines for AES-NI or BSD crypto Actions
Bug #9647: hn0: driver does not support altq Actions
Bug #9649: IPv6 6RD Tunnel Actions
Bug #9660: Syslogd keeps using old IP address after interface IP address change Actions
Bug #9710: IPv6 RA: prefix option does not contain router address in spite of "R" flag being set Actions
Bug #9715: Call to undefined function sort_related_log_files Actions
Bug #9730: newsyslog cron job not present after every upgrade Actions
pfSense Packages - Bug #9740: empty Status / Tinc VPN page on latest 2.5 Actions
Bug #9744: fatal error if ECDH Curve not default Actions
Bug #9745: can't add ECDSA certificate key when signing CSR Actions
Bug #9758: dhcpleases does not handle spaces in DHCP lease hostnames Actions
Bug #9785: ACB permits manual backup attempt when disabled Actions
Bug #9790: firewall aliases table with fqdn stays in system after deleting Actions
Bug #9796: kernel panic after removing interfaces Actions
Bug #9802: status_logs_settings.php: "Reset log files" does not clear all log files Actions
Bug #9806: Undefined variables in filter.inc openvpn aliases section Actions
Bug #9830: NTP ACLs vs. NTP pools Actions
Bug #9855: CSRF error at login when clicking the 'sign in' button multiple times Actions
Bug #9872: Error during build when compiling a non pfSense software Actions
Bug #9879: PHP Warning: count(): Parameter must be an array or an object that implements Countable in /usr/local/www/system_crlmanager.php Actions
Bug #9899: PHP Error: DateTime::diff() expects parameter 1 to be DateTimeInterface, bool given in /etc/inc/certs.inc on line 1958 Actions
Bug #9907: Do not show incompatible ECDSA certs for DNS Resolver Actions
Bug #9920: system_crlmanager.php: CRL export file is empty if CA key type is ECDSA Actions
Bug #9924: crl_contains_cert() does not correctly report revoked status for intermediate CAs Actions
Bug #9933: Captive Portal + Voucher not keeping auto-added "Pass-through MAC Auto Entry" Actions
Bug #9936: zombie alias check errors if no alises exist Actions
Bug #9979: status_ipsec.php missing information Actions
Bug #9983: Reauth vs Rekey UI and behavior for swanctl Actions
Bug #9998: DHCP6c and Unbound DNS Server Boot-Up Configuration Failure Actions
Bug #10001: incorrect route deletion on 2.5 Actions
Bug #10149: system_gateways.php: PHP error on line 169 Actions
Bug #10151: vpn_ipsec_phase1.php: webgui bugs on latest 2.5 Actions
Bug #10155: sshguard is not compatible with RFC 5424 log format Actions
Bug #10176: Multiple duplicate / overlapping phase 2 Child SAs on IPsec tunnels Actions
Bug #10178: crypt.inc: crypt_data() legacy mode using wrong message digest Actions
Bug #10179: incorrect encrypted backup restore error handling Actions
Bug #10206: VIP alias-ip's disappear from nic (caused by running ifconfig twice.?.) Actions
Bug #10224: DHCP DDNS does not add zone entries for keys when using static host DDNS definitions Actions
Bug #10240: Incorrect interface assignment after switching from PPPoE Actions
Bug #10241: Updating Dynamic DNS provider Hover is not working Actions
Bug #10270: OMAPI / disableauthoritative / alwaysbroadcast not saved inside dhcpd.conf Actions
Bug #10276: NTP "No Select" does not work Actions
Bug #10284: Exporting p12 for CSR causes a crash report Actions
Bug #10295: Unescaped characters in dhcp-client-identifier prevent DHCPD from starting on interface Actions
Bug #10296: swanctl.conf may need multiple pools to support IPv4 and IPv6 Actions
Bug #10306: Incorrect IPsec service status Actions
Bug #10307: NTP status widget doesn't display stratum Actions
Bug #10314: Per-user IKEv2 settings are not functioning on 2.5.0 Actions
Bug #10327: Fix/Update GPS initialization commands for Garmin devices. Actions
Bug #10331: French language give a Warning: sprintf(): in system_advanced_admin.php Actions
Bug #10336: fatal error on firewall_aliases_edit.php Actions
Bug #10360: PHP error when renewing a CA used by services Actions
Bug #10362: Error renewing cert if SAN contains IP Address Actions
Bug #10363: Clarify behavior of OpenVPN server option for Duplicate Connections Actions
Bug #10365: LAGG member event causes filter to reload Actions
Bug #10375: Double zfs entry in loader.conf Actions
Bug #10383: Additional interfaces do not survive a reboot before the setup wizard has been run Actions
Bug #10386: A NTP Time Server name may only contain the characters a-z, 0-9, '-' and '.'. Actions
Bug #10397: Changing default or static route gateway on 2.5.0 does not remove old route Actions
Bug #10406: Interfaces.php PPPoE selection display inappropriate "Toggle All" button when periodic reset set to "pre-set" Actions
Bug #10407: L2TP static route not re-added after connection down/up Actions
Bug #10409: OpenVPN client without userpass hangs system startup Actions
Bug #10433: addMask() js code resets netmask size to 128/32 Actions
Bug #10438: Prepare pfSense-upgrade to deal with pkg 1.13.x+ Actions
Bug #10465: possible routing performance regression due to non use of ip_tryforward Actions
Bug #10471: Host Resources module is mandatory for PF SNMP module Actions
Bug #10481: Update doc links in WebGUI to reflect proper docs URLs Actions
Bug #10505: Mobile PSK users have wrong type in swanctl.conf secrets Actions
Bug #10517: Mobile PSK user mobile-userpool is ignored Actions
Bug #10518: Netmap appears broken in Snort and Suricata packages when Inline IPS Mode enabled Actions
Bug #10524: Bridge that includes a GIF interface does not come up at boot Actions
Bug #10529: IPsec Phase 1 options Reauth and Rekey do not allow valid "0" value Actions
Bug #10532: Mobile PSK users don't have 'mobile-userpool' section Actions
Bug #10537: wrong link on diag_dns.php Actions
Bug #10546: Gateways removed from routing groups based on low alert thresholds Actions
Bug #10551: gateway group not restoring the higher tier gateway Actions
Bug #10558: Multicast daemons work at boot, but fail if restarted Actions
Bug #10569: Sanitize ACME passwords Actions
Bug #10580: PHP error when restoring to 2.5.0 Actions
Bug #10585: auth.inc: Exception calling XMLRPC method restore_config_section #-1 : Authentication failed: Invalid username or password Actions
Bug #10589: interfaces_staticarp_configure() doesnt need to disable staticarp on boot Actions
Bug #10592: DigitalOcean DNS update adds new DNS record instead of update Actions
Bug #10594: add QLogic 10 Gigabit Ethernet driver (qlxgb) to the ALTQ-capable list Actions
Bug #10607: Remote syslog for "General Authentication Events" using wrong selectors Actions
Bug #10610: Package upgrade or reinstall hangs indefintely on the console Actions
Bug #10613: cleanup status_queues.php code Actions
Bug #10623: Wrong Route configured for GIF interface on VLAN on LAGG Actions
Bug #10625: PFTop filter hide Actions
Bug #10626: get_interface_list() shows _stf (6RD/6to4) interfaces as parent Actions
Bug #10632: Incorrect swanctl.conf syntax from Child SA Close Action Actions
Bug #10636: The firmware table is filled Actions
Bug #10650: OpenVPN TCP in 2.4.5-p1 not working Actions
Bug #10652: Duplicate upgrade_203_to_204() function in upgrade_config.inc Actions
Bug #10660: PHP errors in the traffic shaper wizard Actions
Bug #10661: pfSense configures fe80::1:1 on lan interface without track6 Actions
Bug #10667: Separator bars on Floating rules do not cover the full table width Actions
Bug #10668: curl -T "{file1,file2}" loops forever eating up the RAM Actions
Bug #10674: Port Forward Address Fields not becoming active in Safari Actions
Bug #10675: DHCPv6 config not all directives start on a new line as expected Actions
Bug #10677: pfSense 2.5 incorrect rtwn(4) wireless regexp Actions
Bug #10680: Improve interface caching when we have many interfaces Actions
Bug #10684: RFC 2136 incomplete options Actions
Bug #10694: Firewall Alias does not allow an ipv6 network alias in the format x:x:x:x:x:x:d.d.d.d where the 'd's are the decimal values of the four low-order 8-bit pieces of the address (standard IPv4 representation) Actions
Bug #10703: OpenVPN copy doesn't save auth_pass Actions
Bug #10705: Difficult to see multiple selection form-control Actions
Bug #10709: services_router_advertisements.php: radvd won't start if Default valid lifetime is less than Default preferred lifetime Actions
Bug #10710: L2TP secret uses empty value Actions
Bug #10716: Policy routing rules are not written correctly for a down gateway Actions
Bug #10719: Gateway page displays mystery icons Actions
Bug #10720: Setup Wizard DNS Server validation JavaScript incorrectly claims IPv6 address is invalid Actions
Bug #10724: Allowed Hostnames adds/deletes only one A entry Actions
Bug #10730: Unable to use IDN symbols in DNS Resolver ACL Actions
Bug #10733: return_gateways_array() is called too many times Actions
Bug #10740: Console menu shows static subnet for dhcp connections. Actions
Bug #10742: unable to save DNS ACL in non-English interface Actions
Bug #10752: 1:1 NAT issue if Internal IP has VIPs Actions
Bug #10757: IPv6: NPt rules on 6rd enabled WAN interfaces don't get bound to wan_stf Actions
Bug #10759: HSFC traffic shaper error Actions
Bug #10766: Syntax error Actions
Bug #10773: if_em VLAN interfaces wont pass traffic after reboot Actions
Bug #10776: filterlog: Loopback source/destination sometimes reports 127.0.0.1 as 127.0.01 Actions
Bug #10780: net.inet.ip.dummynet.* values are ignored Actions
Bug #10781: Incorrect env variables if admin user logged in via ssh Actions
Bug #10793: SNMP: Netgate SG-3100 shows wrong speed Actions
Bug #10794: HAProxy Stats page credentials are not redacted in status.php Actions
Bug #10795: WebGUI "Dashboard -> Services Status" widget issue Actions
Bug #10797: status.php: Sanitize MaxMind GeoIP key Actions
Bug #10798: Unable to save CP zone named 'VIP' Actions
Bug #10803: Invalid rules generated from AVPair on OpenVPN Actions
Bug #10806: armada_thermal fails during device_attach Actions
Bug #10812: Traffic graph shows 2X the actual traffic on VLAN interfaces. Actions
Bug #10814: OpenVPN UDP multihome fails when connecting to an IP that is not logically closest. Actions
Bug #10827: Cannot add or delete separators when no rules are present Actions
Bug #10835: Verification on the interface group name length is not correct Actions
Bug #10836: TSO option does not fully toggle TSO on the interface Actions
Bug #10838: mask options didn't apply to the sched limiter Actions
Bug #10842: Not destroying VTI interfaces when booting before creating a new one Actions
Bug #10844: DHCPv6 service Dynamic DNS revisions made to fix Bug #10346 violates RFC/is too restrictive Actions
Bug #10846: Icon area within buttons are not clickable Actions
Bug #10847: Mobile user IPSec (PSK+Xauth) fails at user auth with PHP error Actions
Bug #10857: Captive Portal usedmacs DB is not copied to backup HA node Actions
Bug #10861: net.pf.request_maxcount value set in loader.conf not respected on latest snapshot Actions
Bug #10869: "Accounting updates" not working in PPPoE config page Actions
Bug #10882: DHCPv6 Static Mappings requires applying changes on DNS resolver setup Actions
Bug #10883: Parse error: syntax error alias-utils.inc Actions
Bug #10889: Hover text missing from Static Routes Page Actions
Bug #10891: Captive Portal related files are not deleted after deleting CP zone in WebGUI Actions
Bug #10899: VXVLAN interfaces are not created correctly Actions
Bug #10906: can't download backup Crash report begins Actions
Bug #10919: Improve handling of OpenVPN data cipher negotiation options Actions
Bug #10923: Update ixl Driver on pfSense 2.5.0 to bring back Intel X710-T2L/T4L support that was present on version 2.4.5-P1. Actions
Bug #10925: PHP: Invalid argument supplied for foreach() in /etc/inc/util.inc on line 2640 Actions
Bug #10926: Secondary RADIUS Server is never used Actions
Bug #10942: LDAP Auth error after update 2.5.0.a.20200930.1303 Actions
Bug #10943: boot fail after upgrade to the latest snapshot 20201001.0050. if bios is set to efi Actions
Bug #10945: Alias popup not displaying contents Actions
Bug #10947: Virtual interface assignment can't be done in CLI interface assignment Actions
Bug #10948: Gateway group popover not populated on firewall_rules.php Actions
Bug #10949: PPPoE server can't be added Actions
Bug #10963: Thermal Sensors widget shows invalid sensors Actions
Bug #10965: rtsold not starting dhcp6c when managed bit is set Actions
Bug #10966: IPv6 - WAN does not renew address when upstream fails Actions
Bug #10968: Mixed & Upper case Alias table names broken. Actions
Bug #10977: Additional IPsec bypass rules input validation Actions
Bug #10978: rc.initial tries to execute rc.local.running even if it doesn't exist, and even if it is already running. Actions
Bug #10982: Primary/Secondary DNS Server field validation issue in Setup Wizard Actions
Bug #10986: dynamic interface address for 1:1 NAT works incorrectly in some dual-stack cases Actions
Bug #10998: traffic shaper php error Actions
Bug #11002: OpenVPN Clients registration does not clear DNS entries Actions
Bug #11005: IPv6 Prefix Delegation not requested if no interfaces set to track6 Actions
Bug #11006: L2TP Server and Client both use "l2tpX" for interface names Actions
Bug #11017: Incorrect synchronizetoip value causing XMLRPC errors Actions
Bug #11018: Hostname is ignored when DNS Lookup calculates response time Actions
Bug #11021: ral(4) driver kernel panics in arm64 Actions
Bug #11023: route_get('default', 'inet') always returns empty Actions
Bug #11024: Dynamic DNS update for HE.net Tunnelbroker always sets IP address of default WAN interface Actions
Bug #11025: traffic shaper PHP error Actions
pfSense Packages - Bug #11031: FRR: PHP error in frr_bgp.inc Actions
Bug #11032: Setting Log compression to None disables all entries in log view Actions
Bug #11034: poesX interfaces is not created Actions
Bug #11035: PPPoE: can't remove hook Actions
Bug #11037: Change APIs for HE.net Tunnelbroker dynamic DNS update Actions
Bug #11050: "Backup extra data" does not behave properly Actions
Bug #11051: Unbound: custom TLS listen port ignored Actions
Bug #11053: PHP error on services_dhcp_relay.php Actions
Bug #11059: L2TP Server is restarted when administering users Actions
Bug #11061: CARP rules show up as "part" of the snort package in rules.debug Actions
Bug #11063: PHP error if SMTP notification fails Actions
Bug #11064: WARNING: write_config() was called without description Actions
Bug #11072: Setting "Inverse" to "Off" does not save in the Traffic Graphs Dashboard widget Actions
Bug #11073: Traffic monitor widget error Actions
Bug #11077: Kernel panic when deleting VLAN interfaces Actions
Bug #11078: IPsec PH2 incorrect proposals order Actions
Bug #11087: Unbound fails to start if it binds to down/nocarrier interface Actions
Bug #11100: dhcp6c never run rc.newwanipv6 Actions
Bug #11106: idn_to_ascii() with URL/URLTable aliases incorrect behavior Actions
Bug #11109: WebGUI RADIUS authentication doesn't work if WAN is down Actions
Bug #11122: Bridge STP priority/cost error Actions
Bug #11129: Unbound restarts on every openvpn client connection Actions
Bug #11134: VTI interfaces can be added to groups, but rules have no effect Actions
Bug #11142: rc.newwanip restarts VPN services when the IP matches Actions
Bug #11146: Domeneshop DDNS not updating cache IP Actions
Bug #11159: Allow wildcard dns record of type A in the DynDNS client for DNS provider Gandi Actions
Bug #11167: Insecure default values for user certificates created via User Manager Actions
Bug #11193: IPsec KeyID Not Working on Development Snapshots Actions
Bug #11196: IPsec DPD action incorrect on development snapshots Actions
Bug #11197: Clicking firewall states leads to php error Actions
pfSense Packages - Bug #11205: DNSBL SafeSearch redirection doesn't work with DuckDuckGo Actions
Bug #11208: pkg_edit uses incorrect description for pkg_edit buttons Actions
Bug #11212: PHP error on Mobile IPsec input validating error Actions
Bug #11224: dhcpd.conf creation - zone declarations Actions
Bug #11237: Incorrect copyright year Actions
Bug #11249: openvpn peer to peer shared key deprecated warning Actions
Bug #11254: Some OpenVPN configuration files remain after deleting an instance Actions
Bug #11256: Cannot add alias with multiple URLs Actions
Bug #11265: Remove log spam due to bootstrap map file Actions
Bug #11267: PHP Error in FRR after WireGuard merge Actions
Bug #11272: OCSP settings only for TLS auth Actions
Bug #11275: Certificate import of a signed certificate signing request is not offered Actions
Bug #11277: Hide WireGuard interfaces from Interface Assignments pages Actions
Bug #11279: Typo in WireGuard Configuration Actions
Bug #11282: php error on creating new PPPoE server instance Actions
Bug #11283: Incorrect WireGuard help page Actions
Bug #11286: Endpoint port is mandatory if Endpoint is defined Actions
Bug #11287: The Wireguard Peers list is not Dark theme compatible Actions
Bug #11288: Wireguard: Peer PSK is auto-filled to the keepalive field Actions
Bug #11289: Wireguard: Automatic outbound NAT rules are applied to the WG interface Actions
Bug #11291: WireGuard MTU Can Flap between 1420 and 1500 Actions
Bug #11297: strongSwan doesn't support wildcard certificates Actions
Bug #11298: Gateway Group Offline Bug Actions
Bug #11300: WireGuard Gateway Should Monitor the Remote Peer, not the Local Peer. Actions
Bug #11303: Sticky connections units Actions
Bug #11304: DNS-Problems after Configuring VPN-WireGuard with IPv4 & IPv6 Address Actions
Bug #11307: PHP error when attempting to edit Wireguard peer after creation Actions
Bug #11311: Listen and peer port validation in wg.inc Actions
Bug #11312: Unable to edit or add WireGuard peers Actions
Bug #11314: PHP error in gwlb.inc (potential race) Actions
Bug #11319: Mobile IPsec certificate type validation Actions
Bug #11322: WireGuard Public Key should not be entered by the user Actions
Bug #11323: Removing a WireGuard tunnel can cause others to be renumbered Actions
Bug #11328: OpenVPN Ciphers will not stick in 2.5 Actions
Bug #11330: IGMP Proxy upgrade to latest version Actions
Bug #11336: Hide TLS keydir for p2p openvpn mode Actions
Bug #11338: WireGuard cannot connect to an IPv6 endpoint Actions
Bug #11340: Hide WG interfaces on DHCP/DHCPv6 Relay pages Actions
Bug #11341: PresharedKey is not sanitized from status_output config file Actions
Bug #11342: Sanitize DHCP DDNS keys Actions
Bug #11344: Sanitize Squid securiteinfo_id Actions
Bug #11348: Sanitize PKCS#11 PIN from swanctl.conf Actions
Bug #11360: captive portal custom logo error Actions
Bug #11361: ISO Installer not functioning on latest snapshots Actions
Bug #11362: Peer Certificate Options Missing when creating new Server in 2.5x in User/Auth Mode Actions
Bug #11367: radvd.conf keeps old configuration Actions
Bug #11368: OpenVPN Remote Access (User Auth) Actions
Bug #11372: I can delete nested alias even if it is in use Actions
Bug #11378: Unknown OID error on ZFS install Actions
Bug #11389: Mixed-case or Uppercase Alias names will not resolve when nested within another Alias Actions
Bug #11401: Upgrade broken due to need to reinstall pkg Actions
Feature #97: Captive Portal should sync its database to other members of clusters Actions
Feature #885: Show gateway/group IPs on mouseover Actions
Feature #1019: Lagg Failover Mode Master Interface Actions
Feature #1192: Certificate Manager - Ability to Encrypt Private Keys When Exporting Actions
Feature #1557: Add the Interface descriptions to the OS interface descriptions Actions
Feature #1984: Allow CP Voucher submission via URL so they can be distributed as QR code Actions
Feature #2146: Allow concurrent logins when using vouchers Actions
Feature #2424: Allow masking of pass-thru MACs Actions
Feature #2850: add units in ntp status page Actions
Feature #3031: Message is false after changing Hardware Checksum Offloading setting Actions
Feature #3229: make DynDNS status accessible to the colorblind Actions
Feature #3258: Allow multiple certificates to be revoked in a single step Actions
Feature #3329: Allow creating "not" rules for IPsec Phase 2 Actions
Feature #3559: add option for backup ddns ( dynamic dns ) in restore area Actions
Feature #3567: Option to disable NTP Actions
Feature #4038: Button to clear the arp cache Actions
Feature #4068: CAs present on CERT manager are not trusted from pfSense Actions
Feature #4763: Restore from backup that contains only area Traffic Shaper doesn't restore Limiters Actions
Feature #4991: WebGUI does not support ECDSA certificates for IPSec Stage 1 Actions
Feature #5644: Captive Portal retain logins across reboot Actions
Feature #6324: Improve IKEv2 multiple traffic selector per SA configuration GUI Actions
Feature #6377: 6rd ipv6 tunnel: MTU settings not editable and not correlated to interface MTU (hardcoded to 1280) Actions
Feature #6775: Strongswan PKCS#11 Support Actions
Feature #6787: NTP GUI sync/poll interval Actions
Feature #6908: Alias copy, sort, search/replace functions Actions
Feature #7016: system_information_widget.php - Indicate adaptive state timeout status when active Actions
Feature #7095: Improve Remote Gateway field description for IPSec VPN Phase 1 Actions
Feature #7284: NTPd Autoset GPS device baud rate Actions
Feature #7304: DHCP: Enable OMAPI Config Actions
Feature #7332: Provide certificate expiry warning Actions
Feature #7362: Add the default values of the TCP and UDP Timeouts on the WebUI depending on the "Firewall Optimization Options" Actions
Feature #7406: Ability to clear all dhcp leases at once Actions
Feature #7467: Add iPhone/Android/Generic USB tethering support Actions
Feature #7705: Support dynamic interface address for 1:1 NAT Actions
Feature #7741: warn me when shooting myself in the foot with NPt Actions
Feature #7767: OCSP support for OpenVPN server Actions
Feature #7861: Make "Descriptive name" of certificates editable Actions
Feature #8160: Accomodate both RADIUS and pool IP addresses in IPsec Actions
Feature #8624: DNS Resolver Resolve IPv6 OpenVPN Client Addresses Actions
Feature #8645: Upload certificate file instead of pasting Actions
Feature #8698: LDAP authenticated users should be able to log in via ssh Actions
Feature #8786: Wireguard VPN Actions
Feature #8952: Dynamic DNS Copy Button Actions
Feature #9155: Add driver bnxt for Broadcom NetXtreme interfaces Actions
Feature #9206: OpenVPN+RADIUS+Cisco AVPair ACL Enhancements/BugFixes Actions
Feature #9260: ssh_tunnel_shell: Disable console message output Actions
Feature #9274: CP - trim() username post_value Actions
Feature #9302: radvd always advertises DNS servers and Domain Search List regardless of M or O flag Actions
Feature #9309: Allow manual selection of IPsec IKE Pseudo-Random Function (PRF) Actions
Feature #9426: Show PPP uptime on the Dashboard - Interfaces Widget Actions
Feature #9432: Block additional Captive Portal Logins Actions
Feature #9527: Add ability for LDAP extended query on groups in RFC2307 containers. Actions
Feature #9531: [IPSEC] Add additional curve-based DH Groups (31+) Actions
Feature #9538: add support for athp(4) driver Actions
Feature #9639: Cloudflare DDNS "API Token" Actions
Feature #9642: Add DDNS support for dynv6.com Actions
Feature #9661: Increase the number of DHCP/DHCPv6 NTP server options to three (or more) Actions
Feature #9688: restartallwan - pfSsh.php script to restart all wan interfaces Actions
Feature #9702: OpenVPN "push-reset" option in Client Specific Override breaks "subnet" topology Actions
Feature #9706: Increased number of colors for login screen Actions
Feature #9716: Italian translation Actions
Feature #9726: Hash Algorithm configured on child ESP/AH proposals using AES GCM though strongswan strips them Actions
Feature #9754: Add separate authentication log Actions
Feature #9771: diag_reboot.php: add ability to reroot and reboot with fsck to WebGUI Actions
Feature #9788: Display number of connections in status_openvpn.php Actions
Feature #9825: Requirements for trusted certificates in iOS 13 and macOS 10.15 Actions
Feature #9834: system_certmanager.php: add ability to import certificate without private key Actions
Feature #9842: Add CA/certificate renewal function Actions
Feature #9843: allow to generate cert/csr with ECDSA key Actions
Feature #9862: Add support for waiting between ping-packages on diag_ping.php Actions
Feature #9869: Allow CRL entries to be made by serial number Actions
Feature #9878: IPsec PKCS#11 authentication Actions
Feature #9883: Allow CAs to use randomized serials when signing Actions
Feature #9884: Add support for OpenVPN --x509-username-field Actions
Feature #9896: Add poly1305-chacha20 to the TLSv1.2 cipher list in nginx Actions
Feature #9909: Add option to (dis)allow unauthenticated LDAP binds Actions
Feature #9923: Add select_source compatible output to cert_build_list() Actions
Feature #9972: cert_build_list(): by default don't show certs without prv key Actions
Feature #10186: Ability to do inverse matching of tags in floating rules Actions
Feature #10214: Allow IPsec duplicate endpoints Actions
Feature #10222: Tune GRE MTU if GRE over IPsec is used Actions
Feature #10256: Add support for IPv6 to No-IP Dynamic DNS Actions
Feature #10273: OpenVPN compile with --enable-async-push Actions
Feature #10274: DNS64 support Actions
Feature #10301: Password confirmation when exporting encrypted backup file Actions
Feature #10318: Do not restart PPPoE server after adding/modifying users Actions
Feature #10322: Force ipv4/ipv6 DNS resolution for NTP servers Actions
Feature #10323: Allow limiting NTP pool server usage count Actions
Feature #10333: Increase the number of DHCP NTP server options to three for DHCP Static Mappings Actions
Feature #10340: IPsec Mobile GUI Improvement (Dashboard and Status > IPsec > Leases) Actions
Feature #10354: Telegram Notification Support Actions
Feature #10374: Add ARM32/64 network booting support to dhcpd Actions
Feature #10387: Reevaluate the GUI upgrade language presented to the user Actions
Feature #10388: Upgrade to Python 3.8 Actions
Feature #10392: GRE: Tunnels cannot have IPv6 and IPv4 addresses at the same time Actions
Feature #10449: Aggressive NSEC option Actions
Feature #10454: OpenVPN+RADIUS+Cisco-AVPair IPv6 ACL Actions
Feature #10459: Improved DynDNS Logging Actions
Feature #10469: Same RADIUS Cisco-AVPair parser code for both OpenVPN/IPsec Actions
Feature #10495: Add support of Pushover API for notifications Actions
Feature #10504: Make LACP timeout PDU transmission speed configurable Actions
Feature #10538: DNS/Ping/Traceroute IDN support Actions
Feature #10545: RADIUS authenticated users should be able to log in via ssh Actions
Feature #10556: Change action on 'XML configuration file not found' error Actions
Feature #10583: status.php: Add L2TP VPN configuration Actions
Feature #10597: Setting host-uniq for PPPoE Actions
Feature #10603: Handle -c commands with arguments in rc.initial Actions
pfSense Packages - Feature #10612: Add pfSense package for Zeek (formerly Bro) Network Security Monitor Actions
Feature #10617: freeDNS Dynamic DNS API v2 Support Actions
Feature #10635: status.php: Add DNS Resolver configuration Actions
Feature #10637: Turn of spell checking on package upgrade progress textarea Actions
Feature #10639: Add rtwn(4) wireless support Actions
Feature #10658: Allow to generate ECDSA certs on User Manager page Actions
Feature #10678: Allow to select 802.11n channel width (HT) Actions
Feature #10696: status.php: Add config history Actions
Feature #10698: Allow to select EoIP protocol Actions
Feature #10711: Allow to use OpenVPN TAP interfaces in DHCP Relay Actions
Feature #10723: Disable "Hardware Checksum Offloading" if VM is detected Actions
Feature #10727: Limiter bw type in Mbit/s Actions
Feature #10743: Traffic shaper wizard: Add Google Stadia port range Actions
Feature #10747: Captive Portal IDN hostname support Actions
Feature #10748: Add support for limiting IPsec VPN access per user group via RADIUS Actions
Feature #10762: add Broadcom NetXtreme to ALTQ-capable list Actions
Feature #10826: Support for Domeneshop DDNS Actions
Feature #10837: Update wizardapp.inc XBox and Wii ports Actions
Feature #10856: Backup/Restore Captive Portal usedmacs DB Actions
Feature #10868: Backup Captive Portal DB Actions
Feature #10870: Allow custom IPSEC NAT-T port Actions
Feature #10896: Multiple IPs for one DNS entry in unbound resolver override Actions
Feature #10910: Backup/restore DHCP v4/v6 leases Actions
Feature #10912: DNS Domain Overrides - more than one target IP Actions
Feature #10914: Skip extra data checkbox Actions
Feature #10931: system.php: Add option to omit DNS Servers from resolv.conf Actions
Feature #10934: Add ral(4) to arm64 Actions
Feature #10944: Sanitize secret2 Actions
Feature #10946: Sanitize WiFi 802.1x RADIUS shared secret Actions
Feature #10972: Add IPv6 DDNS support for easyDNS Actions
Feature #10975: Button to clear the NDP cache Actions
Feature #10984: Port Forward IPv6 Actions
Feature #10988: Queue bw type in Mbit/s Actions
Feature #10992: Cloudflare DDNS query Zone ID with token Actions
Feature #10999: Allow to register OpenVPN Remote Access (User Auth) client in DNS Resolver Actions
Feature #11029: Enable command history in the shell Actions
Feature #11041: Add hardware interface name to popup hint in Interfaces Dashboard widget Actions
Feature #11045: Improve link state visibility on Status > Interfaces Actions
Feature #11057: Add default route indicator to Gateways widget Actions
Feature #11068: Safari 14.0.1 on MacOS 11.0.1 (Big Sur) asked for the favicon apple-touch-icon-precompressed.png instead of apple-touch-icon.png Actions
Feature #11079: Include the updated Realtek driver pkg in the pfSense repo Actions
Feature #11171: Remove debug log entries present following "Block additional logins" feature request Actions
Feature #11207: Add watchfrr to routing log Actions
Feature #11354: WireGuard should respond from the address used by peer Actions
Todo #204: All write_config() statements should include a reason of some sort Actions
Todo #6638: Update no-ip DDNS to new API Actions
Todo #8350: Remove clog in favor of standard syslogd or syslogd alternative with rotation via newsyslog or logrotate Actions
Todo #8821: Remove Growl Notifications Actions
Todo #9052: Update Font-Awesome Actions
Todo #9356: Find optimal default for net.pf.request_maxcount Actions
Todo #9360: Switch to Python 3.x Actions
Todo #9367: Update SMART Page with new capabilities Actions
Todo #9386: Deprecate built-in relayd Load Balancer Actions
Todo #9417: Convert LDAP TLS setup from environment to LDAP_OPT_X_TLS_* set options Actions
Todo #9603: Strongswan stroke is deprecated, move to swanctl/vici Actions
Todo #9607: Update web server TLS versions for 2.5.0 Actions
Todo #9711: Add GUI options to control log rotation Actions
Todo #9712: Add code for packages to set their own log rotation parameters Actions
Todo #9713: Review log rotation behavior Actions
Todo #9714: Add page to view "other" logs Actions
Todo #9734: Re-evaluate log size, line defaults, and limits Actions
pfSense Packages - Todo #9787: Update Mail Reports to deal with clog deprecation Actions
Todo #9808: status_logs_settings.php: Add GUI option for syslog format Actions
Todo #9856: Add certificate detail infoblock to CA list Actions
Todo #9897: Warn user when using incompatible ECDSA cert curves for WebGUI Actions
Todo #9903: Rename IPsec "RSA" options to more generic "Certificate" options Actions
Todo #9915: Convert OpenVPN to CAPath Actions
Todo #10135: help.php: Update links Actions
Todo #10353: Update pkg to 1.13.x Actions
Todo #10533: Change default domain for new installations from "localdomain" to "home.arpa" Actions
Todo #10659: PHP: Update to 7.4.x Actions
Todo #10676: JQuery 1.2 < 3.5.0 Multiple XSS From Nessus Actions
Todo #10704: Work around PHP issues with SSL LDAP and multiple authentication servers Actions
Todo #10997: Retire m0n0wall config support Actions
Todo #11020: Update OpenVPN to 2.5.0 Actions
Todo #11179: Update OpenSSL to 1.1.1i and to 1.0.2x to fix CVE-2020-1971 Actions
pfSense Packages - Todo #11215: Update NtopNG to 4.2 Actions
Todo #11219: Improve IPsec GUI options for P1/P2 reauth/rekey Actions
Todo #11278: Update dnsmasq to >=2.8.3 Actions
Todo #11309: DNS Resolver automatic ACL entries need refinement Actions
pfSense Docs - New Content #10774: Feedback on Installing and Upgrading — Upgrade Troubleshooting Actions