Project

General

Profile

2.9.0

open

pfSense CE software release

87%

200 issues   (167 closed — 33 open)

Issues by
Bug

76/88
Regression

28/33
Feature

28/40
Todo

35/39
Related issues
pfSense Packages - Bug #11797: Traffic Totals lost upon reboot when using a ramdisk for /var and /tmp Actions
pfSense Packages - Bug #14491: FRR not starting with AgentX enabled Actions
Bug #14648: Values obtained from ``sysctl`` are sometimes unexpectedly empty, leading to PHP and other math errors Actions
Bug #14741: PHP error in DNS Forwarder host overrides when the language is set to French Actions
Bug #14921: External Config Locator does not trigger a pkg sync except on first boot Actions
Bug #15087: IPsec Keep Alive does not update the gateway status Actions
Bug #15116: Kea not working with UEFI HTTPBoot URL configured Actions
pfSense Packages - Bug #15274: HAProxy Configuration Changes Require pfSense Reboot to Take Effect Actions
Bug #15411: Log entries without a hostname can cause the system log to display in an unexpected manner Actions
Bug #15637: Kea DHCP service control inconsistencies Actions
Bug #15757: Incorrect dashboard column spacing when using five columns Actions
Bug #15770: Using a Limiter on a rule with a gateway group limits all traffic through that gateway instead of the host IP address Actions
Bug #15809: UFS upgrades do not create new log files Actions
pfSense Packages - Bug #15909: Prevent tailscale interface from being assignable Actions
pfSense Packages - Bug #15916: pfBlockerNG dnsbl daemon not able to start in CARP mode Actions
Bug #16141: RRD data fails to restore via the ECL Actions
Bug #16142: XMLRPC requests fail due to incorrect request path Actions
Bug #16153: ECL can modify a discovered config file Actions
Bug #16191: Early DNS registration can add invalid addreses Actions
Bug #16197: underscore (_) is not permitted in Identifier (Pre-Shared key) Actions
pfSense Packages - Bug #16211: Python errors in Cellular Actions
Bug #16216: PPPoE interfaces using ``if_pppoe`` increase error counters due to normal ALTQ traffic shaping operations Actions
Bug #16218: All-Inkl Dynamic DNS responses are not parsed correctly Actions
pfSense Packages - Bug #16220: WireGuard dashboard widget default refresh interval is invalid Actions
pfSense Packages - Bug #16225: Telegraf service does not restart after change of settings Actions
Bug #16248: QLink/Marvell 41000 NIC bug Actions
Bug #16264: Captive Portal Ethernet rules can block ARP Actions
Bug #16266: Thermal Sensors widget does not respect per-sensor threshold vales Actions
Bug #16272: Input validation text for deleting an IP Alias VIP within a CARP VIP subnet may reference incorrect VIP Actions
Bug #16290: ``diag_authentication.php`` crashes with a core dump if RADIUS client Shared Secret value is not correct Actions
Bug #16312: ``sshguard`` does not trigger for GUI logins from usernames containing unexpected characters Actions
Bug #16314: GUI login events from usernames containing special characters or long strings can cause ambiguous or confusing log messages Actions
Bug #16322: Gateway monitoring daemon can unexpectedly use a CARP VIP as the source IP address Actions
Bug #16339: Captive Portal ``backwardsyncpassword`` value not sanitized in status output Actions
Bug #16341: Error notification and log message ``"Updating repositories metadata" returned error code 1`` at boot due to ``certctl`` race condition Actions
pfSense Packages - Bug #16348: HAProxy configuration references non-existent certificate files Actions
Bug #16351: Automatic IPv6 gateways for OpenVPN servers are created with the wrong gateway address Actions
Bug #16376: Some remote syslog messages are duplicated when "System Events" option is enabled Actions
Bug #16428: OpenVPN does not include ``client-to-client`` in generated configuration for Peer-to-Peer SSL/TLS servers Actions
Bug #16429: NAT64 rules using ``reply-to`` do not forward packets Actions
Bug #16472: Cannot set RADVD router lifetime to ``0`` Actions
Bug #16475: Filter rule evaluation continues after matching a ``match quick`` rule Actions
Bug #16487: Virtual IP addresses on PPPoE interfaces using ``if_pppoe`` can prevent PPP session termination Actions
Bug #16495: Gateway list order is incorrect until reloading page after moving entries and saving Actions
Bug #16505: Korean locale configuration name is incorrect Actions
Bug #16540: Reserved DUMMYNET pipes for Captive Portal can overlap Actions
Bug #16546: NAT64 rules do not pass traffic when a gateway is specified for the rule Actions
Bug #16549: Captive Portal "Allowed IPs" entries do not work if the language is not set to English Actions
Bug #16550: Cannot load alternate TCP Congestion Control kernel modules Actions
Bug #16552: Hostnames in Kea static leases may not be registered with DNS Actions
Bug #16557: Alerts do not trigger for empty configuration change descriptions Actions
Bug #16566: Incorrect configuration change message when deleting an outbound NAT rule Actions
Bug #16579: Firewall logs do not correctly parse ``short`` packet errors Actions
Bug #16588: ``pfctl`` shows incorrect number of table addresses Actions
Bug #16593: Potential remote command execution via DNSSL router advertisement messages Actions
Bug #16602: ``kea2unbound`` crashes when reading an invalid configuration file Actions
Bug #16610: GUI does not prevent adding a VIP with a blank address Actions
Bug #16614: Connections from the firewall itself fail with oversize packets and TSO enabled Actions
Bug #16625: Input validation error when saving an existing static route which contains an alias destination Actions
Bug #16630: Inconsistent and incorrect privilege names on some PPP service-related log tabs Actions
Bug #16634: Some package installation configuration data may be missing after OS upgrade Actions
Bug #16637: Unbound configuration validation does not test the complete configuration Actions
Bug #16644: Firewall log always shows rules with Reject action under "Associated Rules" Actions
Bug #16654: Interfaces menu does not use natural sorting when configured to sort alphabetically Actions
Bug #16661: UTF-8 characters in configuration data can result in an invalid configuration Actions
Bug #16681: Inaccurate "No default gateway found" log message when the default gateway is set to automatic Actions
Bug #16690: Dynamic DNS client ignores Verify SSL/TLS Certificate Trust option when the entry does not contain a username Actions
Bug #16705: Automatic gateways for OpenVPN peer-to-peer servers with a ``/30`` tunnel network do not use the peer address Actions
Bug #16709: Cannot disable IPsec Advanced Settings tab option for Strict Interface Binding Actions
Bug #16719: DHCP clients may not receive the reserved address after changing the DHCP static mapping Actions
Bug #16720: GUI performance degradation due to check for weak passwords on each page load Actions
Bug #16721: Creating a new user ignores certificate checkbox value if the certificate fields are populated Actions
Bug #16724: RAM disk package data is not preserved for additional packages Actions
Bug #16726: Loader menu does not display the logo properly Actions
Bug #16729: Firewall rule source option ``This Firewall (self)`` is not available when duplicating floating rules Actions
Bug #16731: Cannot update GoDaddy Dynamic DNS AAAA record Actions
Bug #16743: ``isvalidpid()`` function does not properly check or escape PID file parameter Actions
Bug #16744: Potential XSS in Delegated Length value for Prefix Delegation on ``services_dhcpv6.php`` when using Kea Actions
pfSense Packages - Bug #16756: Editing a Firewall Rule before Forcing pfBlockerNG Update Empties All Aliases Actions
Bug #16763: Potential Stored XSS in ``diag_arp.php`` when using ISC DHCP Actions
Bug #16769: Interfaces Status shows an invalid SSID value for WiFi interfaces Actions
Bug #16770: Potential XSS in RSS Widget feed content post titles Actions
Bug #16771: NULL bytes in an IP address can trigger PHP errors from ``ip2long()`` Actions
Bug #16773: Potential XSS in Captive Portal widget Actions
Bug #16783: Same port forward on multiple WANs can generate a PF error due to Pure NAT mode NAT reflection Actions
Bug #16799: LDAP shell authentication does not honor configured group DN restriction Actions
Bug #16828: Kernel panic (page fault) in ``bpfmtap`` via ``vlantransmit`` with Suricata BPF listeners active on VLAN interfaces Actions
Bug #16836: IPsec daemon can crash if a peer initiates two rekeys for the same child SA Actions
Regression #13622: Retain previous QinQ VLAN tag type value for existing entries on upgrade Actions
Regression #15074: ISO fails to boot UEFI Actions
pfSense Packages - Regression #15469: RRD Graphs height is smaller than expected Actions
Regression #16232: Swap fails to activate when multiple swap partitions exist Actions
Regression #16237: Drivers that load firmware can cause a kernel panic. Actions
Regression #16243: PPPoE MSSFix uses incorrect values for 6RD Actions
Regression #16313: sshguard patch files are not present in devel branches Actions
Regression #16326: Dynamic DNS does not use preferred VIP in Gateway Group Actions
Regression #16330: Changing a firewall rule protocol always toggles the display of advanced option Actions
Regression #16362: ``syslogd`` daemon can terminate when a remote log server refuses connections Actions
Regression #16368: Custom Dynamic DNS services ignore the monitor interface Actions
Regression #16407: Editing an alias used in static routes does not correctly update the routing table Actions
Regression #16421: OpenVPN servers will not start with DH parameter lengths less than 2048 Actions
Regression #16449: e1000 network interfaces unexpectedly link at half-duplex Actions
Regression #16451: CE shows QAT as a crypto option Actions
Regression #16513: WireGuard service show status stopped but peers can still connect Actions
pfSense Packages - Regression #16518: net-mgmt/pfSense-pkg-arpwatch: sendmail_proxy.php missing dot between hostname and domain Actions
Regression #16528: ``sshguard`` does not trigger for GUI auth failures due to log format changes Actions
Regression #16575: Firewall logs do not match PF rules with rule number ``0`` Actions
Regression #16638: PPPoE on VirtIO ``vtnet`` interface fails to pass routed traffic Actions
Regression #16672: Firewall rules matching and tagging across distinct anchors are ignored by subsequent tagged rule Actions
Regression #16682: ``daemon`` facility messages are not logged Actions
Regression #16688: Creating a CA certificate with Trust Store checked is not trusted Actions
Regression #16697: Kea DHCPv6 Leases page does not include delegated prefixes from active dynamic leases Actions
Regression #16728: Changing the password from the default in the GUI from the default requires a logout and login to continue Actions
Regression #16733: RSS widget generates a PHP error with custom feed Actions
Regression #16768: pkg 2.6.2 breaks the GUI update check code Actions
pfSense Packages - Regression #16785: STunnel Core Dumps when started Actions
Regression #16790: Kernel panic due to race condition on a ``bpf`` device Actions
Regression #16795: Automatically generated ``vpn_networks`` table is missing OpenVPN networks Actions
Regression #16803: Links to send WOL packets are not handled consistently, may fail to send Actions
Regression #16815: All OpenVPN instances are restarted when applying changes to any assigned interface Actions
Regression #16825: Shared Key OpenVPN tunnels need directive to bypass deprecation error Actions
Feature #12495: Preserve other record types when updating IPv4 or IPv6 using deSEC DDNS Actions
Feature #13293: Option to set auth-gen-token in OpenVPN GUI Actions
Feature #13340: Option to change QinQ ethertype to Service VLAN Tag Actions
Feature #14208: Automatic Split-DNS for 1:1 NAT Actions
Feature #14437: Add DynDNS Provider - Hetzner Actions
Feature #15221: Sort list of System Tunables Actions
Feature #15544: Add hostname to Slack notifications Actions
Feature #15636: High Availability Status Changes Actions
Feature #15659: Kea option for ``reservations-out-of-pool`` and associated input validation (IPv4 and IPv6) Actions
Feature #15922: Allow using dhcp mappings in host aliases for any service Actions
Feature #15934: Kea Lease Reclamation and Affinity Options (IPv4 and IPv6) Actions
Feature #15952: PHP RADIUS client ``Message-Authenticator`` attribute capability Actions
Feature #16068: Option to disable logging of packets blocked due to unmatched IP options Actions
pfSense Packages - Feature #16070: Add ANDwatch package Actions
pfSense Packages - Feature #16089: Add Zabbix 7.4 Actions
Feature #16159: Provide periodic connection reset for if_pppoe Actions
Feature #16166: Option to deactivate ALTQ for VirtIO ``vtnet`` interfaces Actions
Feature #16189: Better Logging for LDAP Connection Errors Actions
Feature #16215: Allow floating rules using the "match" action to match based on IP Options Actions
Feature #16230: Option to control Kea log level Actions
Feature #16241: Block non-global NAT64 addresses by default Actions
Feature #16253: Fix configuration artifacts on upgrade Actions
Feature #16308: Avoid traffic stalls from unnecessary filter reloads Actions
Feature #16325: Add support for labels in configuration rules Actions
Feature #16423: Update the SSH server configuration to current standards and include post-quantum cryptography algorithms Actions
Feature #16502: Support state killing on gateway recovery for policy-routed traffic from the firewall itself Actions
Feature #16517: Endpoint-independent Port Restricted Cone Outbound NAT rules Actions
pfSense Packages - Feature #16533: Add Multicast Bridge (mcast-bridge) package Actions
Feature #16534: Omit reserved NAT64 addresses from DNS64 answers Actions
pfSense Packages - Feature #16576: update nmap package to 7.99_1 Actions
Feature #16607: Auto-renewal for certificates Actions
Feature #16613: Allow using interface subnet macros with interfaces which only contain VIPs Actions
Feature #16615: Omit NAT64 address for queries from the firewall itself Actions
Feature #16616: Option to set a default log level for all logs Actions
Feature #16624: Allow packages to preserve RAM disk data between boots Actions
Feature #16635: Gateway recovery functionality for the default failover gateway group when all gateways are offline Actions
Feature #16666: Allow wildcard records for Dynamic DNS provider deSEC.io Actions
Feature #16695: Include System Patches package by default Actions
Feature #16706: 6rd interface prefix tracking for OpenVPN IPv6 tunnel network Actions
Feature #16819: Log errors when determining the RFC2136 update source address Actions
Todo #6727: Apple TouchID/FaceID probes for site icon files that do not exist Actions
Todo #15408: Reduce inconsistencies between Configuration History with/without ZFS Boot Environments Actions
Todo #15780: Speed up MBUF Usage command in System Information Dashboard widget Actions
Todo #16118: Increase amount of system alias content printed in alias list Actions
Todo #16128: Sanitize PPPoE configuration parameters Actions
pfSense Packages - Todo #16231: Update packages to use the XMLRPC plugins for HA Actions
Todo #16291: Relocate Kea control socket and lease database Actions
Todo #16307: Refactor PF ruleset generation Actions
Todo #16388: Upgrade to Kea 3.0.2 Actions
pfSense Packages - Todo #16399: Update mDNS-Bridge to 2.2 Actions
Todo #16432: Allow assigning bridge members which have an IP address Actions
Todo #16468: Kea configuration parameter ``client-class`` is deprecated Actions
Todo #16469: Improve file handling of the configuration cache Actions
Todo #16471: Upgrade PHP to 8.4 Actions
Todo #16503: Update Unbound to 1.24.2 to address CVE-2025-11411 Actions
Todo #16509: Update strongSwan to 6.0.3 Actions
Todo #16515: Set appropriate log levels for PHP and ``/usr/bin/logger`` logs Actions
Todo #16538: Prevent the GUI from removing vital packages Actions
Todo #16547: Make Priority field when editing a VLAN consistent with the VLAN Priority fields in firewall rules Actions
Todo #16551: Update output and parsing behavior for PHP shell ``pfanchordrill`` Actions
Todo #16559: Remove custom gateway ordering Actions
Todo #16567: Do not add ``fe80::1:1`` link-local address to interfaces configured for IPv6 tracking Actions
Todo #16580: Require absolute path when saving a file on ``diag_edit.php`` Actions
Todo #16605: Update certificate expiration warning behavior Actions
Todo #16606: Update recommended maximum server certificate lifetimes to 200 days Actions
Todo #16620: Remove dead link about ``.local`` TLD use from ``system.php`` Actions
Todo #16626: Save the update branch preference on system update Actions
Todo #16636: Remove ``quick`` from previous ``match`` rules on upgrade Actions
Todo #16653: Add label to automatic PF ``antispoof``, CARP, Captive Portal, and ICMPv6 rules Actions
Todo #16657: Improve handling of certificates without subjects Actions
Todo #16658: Automatically configure the OpenVPN tunnel MTU when set in the assigned interface configuration Actions
Todo #16707: Improve gateway status consistency Actions
Todo #16745: Migrate ``config.xml`` encoding from ENT_HTML401 to ENT_XML1 Actions
Todo #16747: Remove user survey prompts Actions
Todo #16792: Improve GUI handling of user rules that are automatically managed by the system Actions
Todo #16793: Improve GUI handling of user aliases that are automatically managed by the system Actions
Todo #16796: Retain a copy of the failed ruleset when a filter reload fails Actions
Todo #16816: Improve default gateway detection when gateways share the same address Actions
Todo #16826: Exclude nginx logs from ``system.log`` Actions