Project

General

Profile

2.5.0

Future Release

65%

325 issues   (161 closed — 164 open)

Time tracking
Estimated time 21.00 hours
Issues by
Bug

86/198
Feature

55/95
Todo

20/32
Related issues
Bug #1375: Captive portal logs: mixed with logs from other sources (squid, php)
Bug #1605: DHCP Server should group known clients by interface
Bug #1819: DNS Resolver Not Registering DHCP Server Specified Domain Name
Bug #3334: Status/Traffic Graph isn't IPv6 ready
Bug #3500: DHCP Leases List Not Showing Hostname in Some Cases
Bug #3956: Check for invalid CA on generating new certificate
Bug #4479: Firewall rules won't match GRE interface after applying IPSEC transport encryption on GRE tunnel
Bug #4521: Issue with OpenVPN certificate depth validation and long certificate subjects
Bug #4866: L2TP server are restarted after adding/modifying L2TP users (mpd.secret)
Bug #6025: Load balancing fails when one gateway has a weight of 1 and another gateway has a weight >1
Bug #6028: no firewall rules loaded after reboot with invalid ruleset
Bug #6030: Duplicated tracker IDs on block private networks rules
Bug #6167: IPsec IPComp not working
Bug #6186: race conditions in service startup
Bug #6277: RRD graphs are not created correctly for interfaces using CODELQ
Bug #6333: Bootup starts/restarts dpinger multiple times
Bug #6579: IPv6 CARP VIPs lost upon config sync where they include non-significant zeros
Bug #6868: Interface MTU Setting not applied to all IPv6 routes
pfSense Packages - Bug #7161: pfSense-pkg-bind9 changelog pointing to non-existent location
Bug #7163: IGMP Proxy does not valid inputs
Bug #7198: nginx-error.log is not circular and can fill filesystem
pfSense Packages - Bug #7267: Status Traffic Totals - Stacked Bar - Scale not high enough
pfSense Packages - Bug #7293: dns/bind911 requires TCP_RFC7413 in kernel
Bug #7307: ZFS installer - shuts down instead of rebooting
Bug #7380: WAN DHCP Gateway Outside of Subnet Causing Route Issues
Bug #7384: DHCPv6 doesn't merge IPv6 prefix with the input submitted in DNS servers field when using Track Interface IPv6 configuration parameter for the LAN interface.
Bug #7386: IPv6 not disabled in mpd.conf w/ IPv6 GUI option set to 'disabled'
Bug #7389: Limiter does not work with transparent proxy
Bug #7558: l2tp configure kills and sleeps even if first time
Bug #7562: l2tp remoteip confusion
Bug #7614: Port forwards where the destination is a network alias can create invalid refection rules if multiple subnets are in that alias.
Bug #7622: Don't include disabled ipsec phase2 entries on pf table vpn_networks
pfSense Packages - Bug #7654: Can't use a LDAP search filter containing an accent
Bug #7772: Regression of Bug #906
Bug #7778: DHCP relay not working correctly with bridges
Bug #7801: UDP fragments received over IPsec tunnel are not properly reassembled and forwarded
Bug #8015: IPsec VPN Not Reconnecting until complete reboot
Bug #8054: DHCP server accepts trailing dot in domain names, DNS resolver adds another and breaks
Bug #8100: pfsync Initially Deletes States on Primary for Connections Established through Secondary
Bug #8136: dpinger for WAN DHCPv6 gets fails to update gateway IP
Bug #8179: Incorrect reverse DNS zone in DHCP server config for non-octet-aligned subnet mask
Bug #8192: dpinger - Change in ISP link-local IPv6 address drops connectivity
Bug #8248: Pfsense hangs - non pingable when removing traffic shaper from interface(s)
Bug #8256: IPv6 IP Alias VIP not added to Interface Network Macros
Bug #8263: Cannot create a nonlinear `Link Share` service curve because of: "the sum of the child bandwidth higher than parent"
Bug #8273: IPv6 GRE tunnel over PPPoE fails on startup
Bug #8472: IPsec with "Split connections" enabled (multiple P2's) - new added P2's are not coming up (between two pfsense's 2.4.3)
Bug #8522: SMTP test says success when actually fails
Bug #8585: Logical interface MTU matches configuration of its physical port channel, not its own configuration
Bug #8611: unable to receive IPv6 RA's on SG-1000, default route lost
Bug #8616: When reconfiguring a captiveportal, connected users get disconnected and can't login back
Bug #8815: IPv4 addresses disappear from interfaces when link is lost
pfSense Packages - Bug #8830: Automatic flowbit resolution setting does not match description
Bug #8870: Webgui incorrectly reports "The system is on the latest version".
Bug #8922: Static routes set by system.inc for DNS gateway bindings are not removed
Bug #8964: IPsec async cryptography advanced setting - TCP traffic not passing through
Bug #8981: Uncheck DHCP registration does not clear entries
Bug #8987: Web GUI main page very slow to load if wan interface is enabled but not connected.
Bug #8990: Additional BOOTP/DHCP Options per host
Bug #9023: is_fqdn() validation
Bug #9058: crash in l2tp retransmit
Bug #9074: Alias URL lists only storing last-most list in config.
pfSense Packages - Bug #9135: Suricata in inline modus blocks some downloads
Bug #9136: IPv6 Tracking Interfaces Lose IPv6 Address in Certain Cases
Bug #9148: PPPoE over a VLAN fails to reconnect.
Bug #9154: Editing a VLAN parent interface causes all VLANs to be reconfigured, which can lead to problems
Bug #9187: Status->Interfaces doesn't show useful data for lagg
Bug #9208: The wrong session timeout value can be used for some captive portal users
Bug #9209: RADIUS: Set NAS Identifer to webConfigurator when logging in the UI
Bug #9225: Gateway group routing not updated on OpenVPN client reconnect
Bug #9255: Potential performance issue when using multiple authentication servers in a zone
Bug #9270: "Remove all states to and from the filtered address" does not remove all states
Bug #9282: Add static mapping count to DHCP Server interface tabs
Bug #9320: Outbound NAT and multiple IPSEC IPs for mobile warriors
Bug #9324: IPv6 on top of a PPPOE ipv4 interface assigns parent interface to default route, not pppoe interface
Bug #9331: Parallel Rekey fails for multiple Child SAs
Bug #9334: bogus dialogue on Limiter deletion
Bug #9344: OpenVPN click NCP Algorithms will always go to DH Parameters website(in Chinese-Taiwan)
Bug #9349: IPSec service start/stop/restart fails after settings change
Bug #9353: PHPSession errors from limited access to dashboard and widgets
Bug #9365: Use of "continue" in switch statements can be ambiguous
Bug #9366: "Illegal string offset" PHP errors
Bug #9382: SNMP Undefined symbol "pf_altq"
Bug #9383: dhcpleases kqueue error
Bug #9384: devd putting "$" before variable contents when using single quotes
Bug #9385: OpenVPN logs a "Device busy" error when opening tap interfaces, but continues to function
Bug #9400: PHP scandir() error at boot
Bug #9401: 26 to 31 character VPN interface names cause gateway names to exceed 31 character limit
Bug #9405: IPsec IPv6 dynamic FQDN Remote Gateways / util.inc resolve_retry() IPv6 support
Bug #9408: OCSP stapling detection broken on 2.5.0
Bug #9410: Package install fails to run from GUI
Bug #9411: Firewall log does not contain valid entries
Bug #9413: VLAN driver missing ALTQ support
Bug #9414: Hardware with Intel 82583V interface such as some Watchguard equipment fail to load interface
Bug #9415: Firewall log is empty in the GUI
Bug #9420: crypt_data() uses deprecated openssl syntax for passphrase
Bug #9421: crypt_data() needs to support stronger key derivation
Bug #9428: Unable to access "System: Authentication servers" if "WebCfg - System: User Password Manager" is set
Bug #9431: Upgrading to 2.5.0 with devel/aws-sdk-php installed fails
Bug #9441: Setting Crypto HW breaks IPSec CBC
Bug #9443: Captive Portal Vouchers feature is broken in 2.5.0
Bug #9449: Empty lines in various forms
Bug #9450: Multiwan gateway group fail-over not working as expected (possible race condition)
Bug #9459: patch pf: silence a runtime warning pfr_update_stats: assertion failed.
Bug #9460: OpenVPN local auth failing due to fcgicli output
Bug #9467: vmx(4) interfaces do not have ALTQ support on pfSense 2.5, they had ALTQ support on 2.4
Bug #9472: Unable to select QinQ interfaces for PPP interface
Bug #9476: pfSense 2.4.x sending ARP replies with non-CARP source MAC address
Bug #9478: Unable to check for updates from the GUI when using a proxy with authentication
Bug #9548: Do not use VLANMTU flag to decide if interface supports to run VLAN
Bug #9560: SMART tests not working
Bug #9564: Dynamic DNS Status - IPv4 format error for 'Cached IP'
Bug #9577: radvd send_ra_forall failed on interface / can't join ipv6-allrouters
Bug #9592: VTI interface down because interface number created is greater than ipsec32768
Bug #9596: DHCPv6 Range should not be mandatory if Stateless DHCP selected as router mode
Bug #9600: Add athp to wireless device regex list
Bug #9611: PHP error on fresh 2.5.0 install or after factory reset
Bug #9622: Changing admins membership does not replicate correctly to HA slave
Bug #9634: rc.newwanipv6 is called although dhcp6c should discard Request messages
Bug #9643: Limiters do not function properly on 2.5 snapshots
Bug #9646: OpenSSL 1.1.1 does not list engines for AES-NI or BSD crypto
Bug #9649: IPv6 6RD Tunnel
pfSense Packages - Bug #9657: STunnel fails to generate an rc script
Bug #9663: panic on boot when IPv6 option "Do not wait for a RA" is enabled
Bug #9710: IPv6 RA: prefix option does not contain router address in spite of "R" flag being set
Bug #9715: Call to undefined function sort_related_log_files
Bug #9730: newsyslog cron job not present after every upgrade
pfSense Packages - Bug #9740: empty Status / Tinc VPN page on latest 2.5
Bug #9744: fatal error if ECDH Curve not default
Bug #9745: can't add ECDSA certificate key when signing CSR
Bug #9758: dhcpleases does not handle spaces in DHCP lease hostnames
Bug #9785: ACB permits manual backup attempt when disabled
Bug #9790: firewall aliases table with fqdn stays in system after deleting
Bug #9796: kernel panic after removing interfaces
Bug #9802: status_logs_settings.php: "Reset log files" does not clear all log files
Bug #9806: Undefined variables in filter.inc openvpn aliases section
Bug #9830: NTP ACLs vs. NTP pools
Bug #9855: CSRF error at login when clicking the 'sign in' button multiple times
Bug #9872: Error during build when compiling a non pfSense software
Bug #9879: PHP Warning: count(): Parameter must be an array or an object that implements Countable in /usr/local/www/system_crlmanager.php
Bug #9887: Rule separator positions change when deleting multiple rules
Bug #9917: Widget Refresh Logic Flawed
Bug #9920: system_crlmanager.php: CRL export file is empty if CA key type is ECDSA
Bug #9924: crl_contains_cert() does not correctly report revoked status for intermediate CAs
Bug #9936: zombie alias check errors if no alises exist
Bug #9979: status_ipsec.php missing information
Bug #9983: Reauth vs Rekey UI and behavior for swanctl
Bug #9998: DHCP6c and Unbound DNS Server Boot-Up Configuration Failure
Bug #10001: incorrect route deletion on 2.5
Bug #10149: system_gateways.php: PHP error on line 169
Bug #10151: vpn_ipsec_phase1.php: webgui bugs on latest 2.5
Bug #10155: sshguard is not compatible with RFC 5424 log format
Bug #10176: Multiple overlapping phase 2 SAs on VTI tunnels
Bug #10178: crypt.inc: crypt_data() legacy mode using wrong message digest
Bug #10179: incorrect encrypted backup restore error handling
Bug #10190: can't disable Phase 1 when Phase 2 is VTI
Bug #10200: DHCPv6 domain-search list not sent to clients
Bug #10206: VIP alias-ip's disappear from nic (caused by running ifconfig twice.?.)
Bug #10236: Cannot add more than 2 VMXNET3 Adapters in vSphere
Bug #10240: incorrect interface assignment after switching from PPPoE
Bug #10241: Updating Dynamic DNS provider Hover is not working
Bug #10247: Duplicate Outbound NAT entries when creating L2TP server
Bug #10264: Gateways created at the console do not apply the naming convention used in the GUI
Bug #10270: OMAPI / disableauthoritative / alwaysbroadcast not saved inside dhcpd.conf
Bug #10276: NTP "No Select" does not work
Bug #10284: Exporting p12 for CSR causes a crash report
Bug #10295: Unescaped characters in dhcp-client-identifier prevent DHCPD from starting on interface
Bug #10296: swanctl.conf may need multiple pools to support IPv4 and IPv6
Bug #10305: Using special character in Schedules description
Bug #10306: Incorrect IPsec service status
Bug #10307: NTP status widget doesn't display stratum
Bug #10314: Per-user IKEv2 settings are not functioning on 2.5.0
Bug #10317: SMTP notifications validating SSL when option disabled
Bug #10327: Fix/Update GPS initialization commands for Garmin devices.
Bug #10331: French language give a Warning: sprintf(): in system_advanced_admin.php
Bug #10336: fatal error on firewall_aliases_edit.php
Bug #10346: DHCPv6 service Dynamic DNS errors
Bug #10351: Saving IPSEC connection breaks FRR BGP on VTI interfaces
Bug #10359: Require State Filter setting breaks filter rule link to associated states
Bug #10360: PHP error when renewing a CA used by services
Bug #10362: Error renewing cert if SAN contains IP Address
Bug #10363: Note for Duplicate Connections in OpenVPN tunnel settings is obscure
Bug #10365: LAGG member event causes filter to reload
Bug #10366: Captive Portal Allowed MAC bandwidth Issue
Bug #10368: OpenVPN server no definition of protocol to use (udp4)
Bug #10383: Additional interfaces do not survive a reboot before the setup wizard has been run
Bug #10386: A NTP Time Server name may only contain the characters a-z, 0-9, '-' and '.'.
Bug #10390: Fix DigitalOcean Dynamic DNS client for IPv6
Bug #10397: Changing default or static route gateway on 2.5.0 does not remove old route
Bug #10406: "Toggle All" button for radio buttons
Bug #10418: IPsec VTI address/mask selection not functional
Bug #10420: Miscellaneous page with pre-existing RAM disks config can^t be saved
Bug #10424: status.php: Calls using pkg should use pkg-static
Bug #10433: addMask() js code resets netmask size to 128/32
Bug #10438: Prepare pfSense-upgrade to deal with pkg 1.13.x+
Feature #790: Advanced options for dnsclient (resolv.conf)
Feature #855: More flexible options for state killing based on WAN status
Feature #1019: Lagg Failover Mode Master Interface
Feature #1192: Certificate Manager - Ability to Encrypt Private Keys When Exporting
Feature #1257: Handle encypted CA/Certificate private keys
Feature #1337: VLANs with different MAC address than parent interface
Feature #1557: Add the Interface descriptions to the OS interface descriptions
Feature #2568: Allow dashed DUID to be entered in a DHCPv6 Mapping
Feature #2850: add units in ntp status page
Feature #3258: Allow multiple certificates to be revoked in a single step
Feature #3377: OAuth2 authentication in captive portal
Feature #3567: Option to disable NTP
Feature #4068: CAs present on CERT manager are not trusted from pfSense
Feature #4405: Traffic shaping doesn't work when applied to a bridge interface
Feature #4991: WebGUI does not support ECDSA certificates for IPSec Stage 1
Feature #5644: Captive Portal retain logins across reboot
Feature #6324: Improve IKEv2 multiple traffic selector per SA configuration GUI
Feature #6742: OAuth2 authentication for OpenVPN (and for FreeRadius)
Feature #6775: Strongswan PKCS#11 Support
Feature #6787: NTP GUI sync/poll interval
Feature #6960: Consider replacing ISC DHCP server with KEA DHCP
Feature #7016: system_information_widget.php - Indicate adaptive state timeout status when active
Feature #7284: NTPd Autoset GPS device baud rate
Feature #7304: DHCP: Enable OMAPI Config
Feature #7332: Provide certificate expiry warning
Feature #7467: Add iPhone/Android/Generic USB tethering support
Feature #7671: Gateway Monitoring Via Custom Script or Telnet.
Feature #7767: OCSP support for OpenVPN server
Feature #7861: Make "Descriptive name" of certificates editable
Feature #8160: Accomodate both RADIUS and pool IP addresses in IPsec
Feature #8289: OpenVPN - configurable username as common name
Feature #8624: DNS Resolver Resolve IPv6 OpenVPN Client Addresses
Feature #8645: Upload certificate file instead of pasting
Feature #8861: Show more detail on status_interfaces.php
Feature #9152: Sort diag_states_summary.php by states
Feature #9206: OpenVPN+RADIUS+Cisco AVPair ACL Enhancements/BugFixes
Feature #9260: ssh_tunnel_shell: Disable console message output
pfSense Packages - Feature #9265: Add options to configure TIMEOUTclose and debug on stunnel package
Feature #9274: CP - trim() username post_value
Feature #9297: Log and Graph Temperatures
Feature #9302: radvd always advertises DNS servers and Domain Search List regardless of M or O flag
Feature #9309: Allow manual selection of IPsec IKE Pseudo-Random Function (PRF)
pfSense Packages - Feature #9387: Update telegraf to 1.9.3 from ports
Feature #9426: Show PPP uptime on the Dashboard - Interfaces Widget
Feature #9527: Add ability for LDAP extended query on groups in RFC2307 containers.
Feature #9531: [IPSEC] Add additional curve-based DH Groups (31+)
Feature #9538: add support for athp(4) driver
Feature #9544: Enable RADIX_MPATH
pfSense Packages - Feature #9545: Enable MULTIPATH in FRR
Feature #9639: Cloudflare DDNS "API Token"
Feature #9661: Increase the number of DHCP/DHCPv6 NTP server options to three (or more)
Feature #9688: restartallwan - pfSsh.php script to restart all wan interfaces
Feature #9706: Increased number of colors for login screen
Feature #9716: Italian translation
Feature #9718: Make diag_states_summary table sortable
Feature #9726: Hash Algorithm configured on child ESP/AH proposals using AES GCM though strongswan strips them
Feature #9754: Add separate authentication log
Feature #9771: diag_reboot.php: add ability to reroot and reboot with fsck to WebGUI
Feature #9788: Display number of connections in status_openvpn.php
pfSense Packages - Feature #9820: Add Zabbix 4.4 (agent and proxy) packages
Feature #9825: Requirements for trusted certificates in iOS 13 and macOS 10.15
Feature #9828: L2TP (long) username containing @ (realm separator)
Feature #9834: system_certmanager.php: add ability to import certificate without private key
Feature #9842: Add CA/certificate renewal function
Feature #9843: allow to generate cert/csr with ECDSA key
Feature #9862: Add support for waiting between ping-packages on diag_ping.php
Feature #9869: Allow CRL entries to be made by serial number
Feature #9878: IPsec PKCS#11 authentication
Feature #9883: Allow CAs to use randomized serials when signing
Feature #9884: Add support for OpenVPN --x509-username-field
Feature #9896: Add poly1305-chacha20 to the TLSv1.2 cipher list in nginx
Feature #9907: do not show incompatible ECDSA certs for DNS Resolver
Feature #9923: Add select_source compatible output to cert_build_list()
Feature #9942: Give pfSense the possibility to change the keyboard Layout for console users
Feature #9972: cert_build_list(): by default don't show certs without prv key
pfSense Packages - Feature #9974: Add pfSense package for sysutils/node_exporter
Feature #10186: Ability to do inverse matching of tags in floating rules
Feature #10214: Allow IPsec duplicate endpoints
Feature #10221: Update DH group warnings to say that group 5 is also weak
Feature #10222: Tune GRE MTU if GRE over IPsec is used
Feature #10256: Add support for IPv6 to No-IP Dynamic DNS
Feature #10273: OpenVPN compile with --enable-async-push
Feature #10274: DNS64 support
Feature #10293: DNS flag day - EDNS buffer size recommendation
Feature #10301: Password confirmation when exporting encrypted backup file
Feature #10321: URL/URL Table alias with IDN hostnames
Feature #10323: Allow limiting NTP pool server usage count
Feature #10333: Increase the number of DHCP NTP server options to three for DHCP Static Mappings
Feature #10341: Exclude unsupported interfaces from DHCP Relay
Feature #10348: Add localhost to NTP Interfaces
Feature #10374: Add ARM32/64 network booting support to dhcpd
Feature #10387: Reevaluate the GUI upgrade language presented to the user
Feature #10388: Upgrade to Python 3.8
Feature #10412: DHCPv6 Static Entries are not updated on external DDNS server
Todo #8350: Remove clog in favor of standard syslogd or syslogd alternative with rotation via newsyslog or logrotate
Todo #8821: Remove Growl Notifications
Todo #9052: Update Font-Awesome
pfSense Packages - Todo #9158: Updates for Squid 4.x
Todo #9356: Find optimal default for net.pf.request_maxcount
Todo #9360: Switch to Python 3.x
Todo #9367: Update SMART Page with new capabilities
Todo #9386: Deprecate built-in relayd Load Balancer
Todo #9482: Remove zabbix 3.2 and 3.4 from pfSense
Todo #9603: Strongswan stroke is deprecated, move to swanctl/vici
Todo #9607: Update web server TLS versions for 2.5.0
Todo #9711: Add GUI options to control log rotation
Todo #9712: Add code for packages to set their own log rotation parameters
Todo #9713: Review log rotation behavior
Todo #9714: Add page to view "other" logs
Todo #9734: Re-evaluate log size, line defaults, and limits
pfSense Packages - Todo #9787: Update Mail Reports to deal with clog deprecation
Todo #9808: status_logs_settings.php: Add GUI option for syslog format
Todo #9856: Add certificate detail infoblock to CA list
Todo #9897: Warn user when using incompatible ECDSA cert curves for WebGUI
Todo #9903: Rename IPsec "RSA" options to more generic "Certificate" options
Todo #9915: Convert OpenVPN to CAPath
Todo #10135: help.php: Update links to use The pfSense Book
Todo #10349: Sanitize ldapbindpass and ldap_pass
Todo #10353: Update pkg to 1.13.x
Todo #10423: status.php: Add kernel modules