Project

General

Profile

2.9.0

open

pfSense CE software release

74%

119 issues   (78 closed — 41 open)

Issues by
Bug

35/51
Regression

14/18
Feature

13/26
Todo

16/24
Related issues
Bug #14648: Values obtained from ``sysctl`` are sometimes unexpectedly empty, leading to PHP and other math errors Actions
Bug #14741: PHP error in DNS Forwarder host overrides when the language is set to French Actions
Bug #14921: External Config Locator does not trigger a pkg sync except on first boot Actions
Bug #15116: Kea not working with UEFI HTTPBoot URL configured Actions
pfSense Packages - Bug #15274: HAProxy Configuration Changes Require pfSense Reboot to Take Effect Actions
Bug #15411: Log entries without a hostname can cause the system log to display in an unexpected manner Actions
Bug #15637: Kea DHCP service control inconsistencies Actions
Bug #15757: Incorrect dashboard column spacing when using five columns Actions
Bug #15770: Using a Limiter on a rule with a gateway group limits all traffic through that gateway instead of the host IP address Actions
Bug #15809: UFS upgrades do not create new log files Actions
pfSense Packages - Bug #15909: Prevent tailscale interface from being assignable Actions
pfSense Packages - Bug #15916: pfBlockerNG dnsbl daemon not able to start in CARP mode Actions
Bug #16141: RRD data fails to restore via the ECL Actions
Bug #16142: XMLRPC requests fail due to incorrect request path Actions
Bug #16153: ECL can modify a discovered config file Actions
Bug #16191: Early DNS registration can add invalid addreses Actions
Bug #16197: underscore (_) is not permitted in Identifier (Pre-Shared key) Actions
pfSense Packages - Bug #16211: Python errors in Cellular Actions
Bug #16216: PPPoE interfaces using ``if_pppoe`` increase error counters due to normal ALTQ traffic shaping operations Actions
pfSense Packages - Bug #16220: WireGuard dashboard widget default refresh interval is invalid Actions
pfSense Packages - Bug #16225: Telegraf service does not restart after change of settings Actions
Bug #16248: QLink/Marvell 41000 NIC bug Actions
Bug #16264: Captive Portal Ethernet rules can block ARP Actions
Bug #16266: Thermal Sensors widget does not respect per-sensor threshold vales Actions
Bug #16272: Input validation text for deleting an IP Alias VIP within a CARP VIP subnet may reference incorrect VIP Actions
Bug #16290: ``diag_authentication.php`` crashes with a core dump if RADIUS client Shared Secret value is not correct Actions
Bug #16312: ``sshguard`` does not trigger for GUI logins from usernames containing unexpected characters Actions
Bug #16314: GUI login events from usernames containing special characters or long strings can cause ambiguous or confusing log messages Actions
Bug #16322: Gateway monitoring daemon can unexpectedly use a CARP VIP as the source IP address Actions
Bug #16339: Captive Portal ``backwardsyncpassword`` value not sanitized in status output Actions
Bug #16341: Error notification and log message ``"Updating repositories metadata" returned error code 1`` at boot due to ``certctl`` race condition Actions
pfSense Packages - Bug #16348: HAProxy configuration references non-existent certificate files Actions
Bug #16351: Automatic IPv6 gateways for OpenVPN servers are created with the wrong gateway address Actions
Bug #16428: OpenVPN does not include ``client-to-client`` in generated configuration for Peer-to-Peer SSL/TLS servers Actions
Bug #16429: NAT64 rules using ``reply-to`` do not forward packets Actions
Bug #16472: Cannot set RADVD router lifetime to ``0`` Actions
Bug #16475: Filter rule evaluation continues after matching a ``match quick`` rule Actions
Bug #16487: Virtual IP addresses on PPPoE interfaces using ``if_pppoe`` can prevent PPP session termination Actions
Bug #16495: Gateway list order is incorrect until reloading page after moving entries and saving Actions
Bug #16505: Korean locale configuration name is incorrect Actions
Bug #16540: Reserved DUMMYNET pipes for Captive Portal can overlap Actions
Bug #16546: NAT64 rules do not pass traffic when a gateway is specified for the rule Actions
Bug #16549: Captive portal "allowed IPs" does not work if language is not english Actions
Bug #16550: Cannot load alternate TCP Congestion Control kernel modules Actions
Bug #16552: Hostnames in Kea static leases may not be registered with DNS Actions
Bug #16557: Alerts do not trigger for empty config change descriptions Actions
Bug #16566: Incorrect configuration change message when deleting an outbound NAT rule Actions
Bug #16579: Firewall logs do not correctly parse ``short`` packet errors Actions
Bug #16588: ``pfctl`` shows incorrect number of table addresses Actions
Bug #16593: Potential remote command execution via DNSSL router advertisement messages Actions
Bug #16602: ``kea2unbound``crashes when reading an invalid configuration file Actions
Regression #13622: Retain previous QinQ VLAN tag type value for existing entries on upgrade Actions
Regression #15074: ISO fails to boot UEFI Actions
pfSense Packages - Regression #15469: RRD Graphs height is smaller than expected Actions
Regression #16232: Swap fails to activate when multiple swap partitions exist Actions
Regression #16237: Drivers that load firmware can cause a kernel panic. Actions
Regression #16243: PPPoE MSSFix uses incorrect values for 6RD Actions
Regression #16313: sshguard patch files are not present in devel branches Actions
Regression #16326: Dynamic DNS does not use preferred VIP in Gateway Group Actions
Regression #16330: Changing a firewall rule protocol always toggles the display of advanced option Actions
Regression #16362: ``syslogd`` daemon can terminate when a remote log server refuses connections Actions
Regression #16368: Custom Dynamic DNS services ignore the monitor interface Actions
Regression #16421: OpenVPN servers will not start with DH parameter lengths less than 2048 Actions
Regression #16449: e1000 network interfaces unexpectedly link at half-duplex Actions
Regression #16451: CE shows QAT as a crypto option Actions
Regression #16513: WireGuard service show status stopped but peers can still connect Actions
pfSense Packages - Regression #16518: net-mgmt/pfSense-pkg-arpwatch: sendmail_proxy.php missing dot between hostname and domain Actions
Regression #16528: ``sshguard`` does not trigger for GUI auth failures due to log format changes Actions
Regression #16575: Firewall logs do not match pf rules with rule number ``0`` Actions
Feature #12495: Preserve other record types when updating IPv4 or IPv6 using deSEC DDNS Actions
Feature #13293: Option to set auth-gen-token in OpenVPN GUI Actions
Feature #13340: Option to change QinQ ethertype to Service VLAN Tag Actions
Feature #14208: Automatic Split-DNS for 1:1 NAT Actions
Feature #14437: Add DynDNS Provider - Hetzner Actions
Feature #15544: Add hostname to Slack notifications Actions
Feature #15636: High Availability Status Changes Actions
Feature #15659: Kea option for ``reservations-out-of-pool`` and associated input validation (IPv4 and IPv6) Actions
Feature #15922: Allow using dhcp mappings in host aliases for any service Actions
Feature #15934: Kea Lease Reclamation and Affinity Options (IPv4 and IPv6) Actions
Feature #15952: Support Message-Authenticator in the PHP RADIUS client Actions
Feature #16068: Option to disable logging of packets blocked due to unmatched IP options Actions
pfSense Packages - Feature #16070: Add ANDwatch package Actions
Feature #16159: Provide periodic connection reset for if_pppoe Actions
Feature #16166: Option to deactivate ALTQ for VTNET interfaces Actions
Feature #16189: Better Logging for LDAP Connection Errors Actions
Feature #16215: Allow floating rules using the "match" action to match based on IP Options Actions
Feature #16241: Block non-global NAT64 addresses by default Actions
Feature #16253: Fix configuration artifacts on upgrade Actions
Feature #16308: Avoid traffic stalls from unnecessary filter reloads Actions
Feature #16325: Add support for labels in configuration rules Actions
Feature #16423: Enable Post Quantum Crypto Support in SSH Server Actions
Feature #16502: Support state killing on gateway recovery for policy-routed traffic from the firewall itself Actions
Feature #16517: Endpoint-independent Port Restricted Cone Outbound NAT rules Actions
Feature #16534: Omit reserved NAT64 addresses from DNS64 answers Actions
Feature #16607: Auto-renewal for certificates Actions
Todo #6727: Apple TouchID/FaceID probes for site icon files that do not exist Actions
Todo #15408: Reduce inconsistencies between Configuration History with/without ZFS Boot Environments Actions
pfSense Packages - Todo #15785: upgrade to frr10 Actions
Todo #16128: Sanitize PPPoE configuration parameters Actions
pfSense Packages - Todo #16231: Update packages to use the XMLRPC plugins for HA Actions
Todo #16291: Relocate Kea control socket and lease database Actions
Todo #16307: Refactor PF ruleset generation Actions
Todo #16388: Upgrade to Kea 3.0.2 Actions
pfSense Packages - Todo #16399: Update mDNS-Bridge to 2.2 Actions
Todo #16432: Allow assigning bridge members which have an IP address Actions
Todo #16468: Kea configuration parameter ``client-class`` is deprecated Actions
Todo #16469: Improve file handling of the configuration cache Actions
Todo #16471: Upgrade PHP to 8.4 Actions
Todo #16503: Update Unbound to 1.24.2 to address CVE-2025-11411 Actions
Todo #16509: Update strongSwan to 6.0.3 Actions
Todo #16515: Set appropriate log levels for PHP and ``/usr/bin/logger`` logs Actions
Todo #16538: Prevent removal of vital packages from the GUI Actions
Todo #16547: Make Priority field when editing a VLAN consistent with the VLAN Priority fields in firewall rules Actions
Todo #16551: Update output and parsing behavior for PHP shell ``pfanchordrill`` Actions
Todo #16559: Remove custom gateway ordering Actions
Todo #16567: Remove link-local fe80::1:1 addresses from trackv6 interfaces Actions
Todo #16580: Require absolute file path when saving a file on Diagnostics > Edit File Actions
Todo #16605: Update certificate expiration warning behavior Actions
Todo #16606: Update recommended maximum server certificate lifetimes to 200 days Actions