# 2.4.5-p1

2.4.x maintenance release

* Feature #2568: Allow dashed DUID to be entered in a DHCPv6 Mapping
* Feature #4629: Rules Floating tab doesn't display interfaces
* Bug #4866: L2TP server are restarted after adding/modifying L2TP users (mpd.secret)
* Bug #6579: IPv6 CARP VIPs lost upon config sync where they include non-significant zeros
* Feature #6600: DHCP Server - Primary DDNS Address won't accept IPv6 address
* Bug #7622: Don't include disabled ipsec phase2 entries on pf table vpn_networks
* Feature #7704: Destination port range "Any" in Port Forward UI doesn't work
* Bug #7725: Support for iwm
* Bug #8054: DHCP server accepts trailing dot in domain names, DNS resolver adds another and breaks
* Bug #8256: IPv6 IP Alias VIP not added to Interface Network Macros
* Feature #8289: OpenVPN - configurable username as common name
* Bug #8987: Web GUI main page very slow to load if wan interface is enabled but not connected.
* Bug #9259: User with "Deny Config Write" privilege is not fully prevented from creating accounts
* Bug #9320: Outbound NAT and multiple IPSEC IPs for mobile warriors
* Bug #9334: bogus dialogue on Limiter deletion
* Bug #9632: DynDNS not updating IP address for DNSExit 
* Bug #9634: rc.newwanipv6 is called although dhcp6c should discard Request messages
* Feature #9828: L2TP (long) username containing @ (realm separator)
* Feature #9891: QLogic 10 Gigabit Ethernet driver (qlxgb)
* Feature #9985: Build virtio_console.ko
* Bug #10190: can't disable Phase 1 when Phase 2 is VTI
* Bug #10200: DHCPv6 domain-search list not sent to clients
* Bug #10211: Limiters ECN input validation problem
* Feature #10221: Update DH group warnings to say that group 5 is also weak
* Bug #10247: Duplicate Outbound NAT entries when creating L2TP server
* Bug #10264: Gateways created at the console do not apply the naming convention used in the GUI
* Feature #10293: DNS flag day - EDNS buffer size recommendation
* Bug #10305: Using special character in Schedules description
* Feature #10321: URL/URL Table alias with IDN hostnames
* Bug #10317: SMTP notifications validating SSL when option disabled
* Feature #10341: Exclude unsupported interfaces from DHCP Relay
* Bug #10346: DHCPv6 service Dynamic DNS errors
* Feature #10348: Add localhost to NTP Interfaces
* Todo #10349: status.php: Sanitize ldapbindpass and ldap_pass
* Feature #10350: Add OpenVPN configuration file(s) to status.php file
* Bug #10351: Saving IPSEC connection breaks FRR BGP on VTI interfaces
* Bug #10359: Require State Filter setting breaks filter rule link to associated states
* Bug #10368: OpenVPN server no definition of protocol to use (udp4) 
* Bug #10373: Incorrect copyright year
* Bug #10390: Fix DigitalOcean Dynamic DNS client for IPv6
* Feature #10412: DHCPv6 Static Entries are not updated on external DDNS server
* Bug #10414: Very high CPU usage of pfctl and more causing very high load and a hardly usable internet connection
* Bug #10416: dhcrelay command line options not properly configured for some DHCP failover scenarios
* Bug #10418: IPsec VTI address/mask selection not functional
* Bug #10420: Miscellaneous page with pre-existing RAM disks config can't be saved
* Todo #10423: status.php: Add kernel modules
* Bug #10424: status.php: Calls using pkg should use pkg-static
* Bug #10463: The ng_etf module is missing from base in armv6 and aarch64
* Feature #10448: DHCPv6 RA - show default values in certain fields
* Feature #10455: status.php: Add upgrade_log.latest.txt
* Bug #10458: Config update error:  /etc/inc/upgrade_config.inc:5492
* Bug #10460: OpenVPN does not add IPv6 prefix to unbound DNS resolver
* Bug #10488: sshguard fails to run on pfSense 2.4.5
* Bug #10492: LDAP groups conflict in privileges
* Bug #10499: Dark theme Auto-complete popup field has dark text on dark background
* Bug #10508: Backup does not skip all RRD data
* Bug #10509: unable to remove CA private key
* Bug #10525: Chinese (taiwan) / HK Translation using incorrect identifier on 2.4.5
* Bug #10527: L2TP shared secret is ignored
* Bug #10531: L2TP client not able to use shared secret
* Bug #10540: is_process_running can generate error for empty process
* Bug #10542: Exclamation marks in the description field of a floating rule result in a filter reload error.
* Todo #10564: Update pkg to 1.13.x
* Bug #10568: Sanitize FreeRADIUS user password
* Bug #10576: Update unbound to mitigate CVE-2020-12662
* Bug #10591: Cannot set a value for NAT Reflection timeout
* Todo #10609: Fix for CVE-2020-12762 (CVSS 3: 7.8) - json-c integer overflow and out-of-bounds write
* Bug #4497: Using a specific password within FreeRADIUS user management causes pfSense to restore a backup!
* Bug #7654: Can't use a LDAP search filter containing an accent
* Bug #10444: FRR will not start in 2.4.5 aarch64
* Bug #10573:  Netgate_Coreboot_Upgrade cannot write to flash in 2.4.5