pfSense

03/07/2025

08:51 PM pfSense Packages Feature #14468 (Rejected): pass along ntopng professional license key

Jim Pingle

08:50 PM pfSense Packages Todo #15294 (Rejected): Naming “Custom Name” of Interface the same as “Interface” on pfSense in “Interface assignment”

Jim Pingle

05:51 PM pfSense Packages Bug #16083 (Resolved): SID MGT modifications remove all conf files

This shares the same root cause as https://redmine.pfsense.org/issues/15989 which has been fixed for the upcoming rel... Marcos M

04:29 PM pfSense Packages Bug #16083 (Resolved): SID MGT modifications remove all conf files

https://forum.netgate.com/topic/196641/sid-mgmt-gui-issue
Any changes to SID MGMT (creating/modifying existing con... Mike Moore

03:40 PM Bug #16076 (Resolved): Deleting or adding a firewall rule may result in an unexpected rule order

Marcos M

03:15 PM Bug #16081 (Feedback): Panic accessing ``sysctl`` OID ``net.inet.ip.nhdispatch`` with an INVARIANTS kernel

This is an assertion, triggered by incorrect sbuf use.
I've pushed the fix to both the plus-devel-main and the 25.03... Kristof Provost

06:35 AM pfSense Packages Feature #16082 (New): Change RefreshActiveChecks allowed values for Zabbix Agent 7.0

Zabbix Agent 6.4 and up support values 1-86400 (default 5) for the RefreshActiveChecks parameter.
Zabbix Agent 6.0 a... Andrew Almond

03/06/2025

11:20 PM Bug #16063 (Resolved): PHP error after saving NTP settings with an interface selected

Marcos M

08:59 PM pfSense Packages Feature #15853 (Pull Request Review): Add mDNS Bridge (mdns-bridge) package

Marcos M

08:58 PM pfSense Packages Feature #16070 (Pull Request Review): Add ANDwatch package

Marcos M

02:47 PM Bug #16081: Panic accessing ``sysctl`` OID ``net.inet.ip.nhdispatch`` with an INVARIANTS kernel

In fact this is only triggered in a debug/invariants kernel.
Can be triggered by running:... Steve Wheeler

02:36 PM Bug #16081 (Feedback): Panic accessing ``sysctl`` OID ``net.inet.ip.nhdispatch`` with an INVARIANTS kernel

Querying net.inet.ip.ip_direct_nh_dispatch via sysctl in a kernel with INVARIANTS set results in a panic:... Steve Wheeler

02:01 PM pfSense Plus Bug #16079 (Resolved): Separators for Ethernet rules span past the actions column

Marcos M

01:52 PM pfSense Plus Bug #16080 (New): Issues Upgrading from 24.03 to 24.11 SG-1100 Atheros 9280

I receive the below crash when upgrading my SG-1100 to 24.11. See attached upgrade log.
Refer to: https://forum.ne... Nick K

03/05/2025

08:12 PM Feature #2358 (Feedback): NAT64 support

Marcos M

08:05 PM Revision e1885867: Add GUI support for NAT64 rules with route-to

https://redmine.pfsense.org/issues/2358 Marcos M

05:05 PM Bug #16076: Deleting or adding a firewall rule may result in an unexpected rule order

There's an additional issue here when adding a rule at the top (i.e. when using the "up arrow Add" button) - the rule... Marcos M

04:32 PM Revision 6664dd6d: Insert rules at the correct index when adding it at the top. Fix #16076

Marcos M

02:54 PM Revision 1875c89d: Fix the mount(8) return value checking.

With the fix the system will not try to remount a successful mounted slice
with another file system type.
Restore th... Luiz Souza

01:12 AM Bug #15162: Adding Wake-On-LAN entry from ARP table view can incorrectly include OEM text in MAC address field

this still happens with the field for MAC address when creating a WOL entry from Diagnostics>ARP Table menu using pfS... Jordan G

03/04/2025

11:01 PM Bug #16029 (Pull Request Review): When using LDAP group filter, group has to be in the same LDAP container as the user

https://github.com/pfsense/pfsense/pull/4725 Marcos M

09:04 PM pfSense Plus Bug #16079 (Resolved): Separators for Ethernet rules span past the actions column

Separators created under the Ethernet firewall rules tab span an extra column on the rules table. Marcos M

07:48 PM Bug #15643: Deleting one pre-installed package may delete other pre-installed packages

This is resolved with the Netgate Installer version 1.1. Marcos M

06:52 PM pfSense Plus Feature #14945: Allow IPsec VTI ``ipsecX`` interfaces to be added to interface groups

Interface Groups is akin to Security Zones so coming up with a consistent policy for my IPsec VTI interfaces would be... Mike Moore

06:38 PM Revision d801b01c: Fix typo in upgrade_238_to_239()

Marcos M

11:06 AM Feature #15904: Add native support for Captive Portal API (RFC8908)

RE: the change of category from DHCP to captive portal.
As the captive portal is already associated with an interfac... Dale Harron

08:46 AM Feature #16078 (New): Add a option to round robin system DNS

I have diagnostic monitoring on my DNS severs and I noticed when I have ASN reporting turned on in pfBlocker my pfSen... Alex Simmons

04:02 AM pfSense Packages Feature #16075: Add Zabbix 7.0 packages for 24.03

Jordan G wrote in #note-1:
> that error can be indicative of a library dependency issue which one would expect when ... Andrew Almond

03/03/2025

11:24 PM Regression #15898 (Resolved): Changes to the ``admins`` user group are not synced to the secondary node

Marcos M wrote in #note-3:
> Applied in changeset commit:6ad2d8ff9f7d954f92c1dc0163b38a5cf2fa802b.
Tested. Succes... Craig Coonrad

10:00 PM Regression #15898 (Feedback): Changes to the ``admins`` user group are not synced to the secondary node

Applied in changeset commit:6ad2d8ff9f7d954f92c1dc0163b38a5cf2fa802b. Marcos M

11:18 PM Bug #16076 (Feedback): Deleting or adding a firewall rule may result in an unexpected rule order

This regressed after the fix for https://redmine.pfsense.org/issues/15935 which added the call to @filter_rules_sort(... Marcos M

11:15 PM Bug #16076 (In Progress): Deleting or adding a firewall rule may result in an unexpected rule order

Marcos M

11:10 PM Revision c181ebe1: Add a sequence number to each rule during rule sort. Fix #16076

The 'for' loop first checks if the rule at that iteration exists and
breaks if not. When the rules array contains a g... Marcos M

09:39 PM Revision 6ad2d8ff: Sync admin group changes. Fix #15898

The admin group needs to be removed and readded for its settings to sync.
This reverts commit 3e0facb20fa46a13bf7b70... Marcos M

05:43 PM Feature #15562: Add support for OpenID

This is a desired feature of mine for using our OIDC provider as the primary login for users including all sysadmin/IT. Anonymous

01:10 PM Bug #16077 (Incomplete): dpinger not reliable - ping request/replies

There isn't nearly enough information here to identify any specific problem. It's most likely _not_ dpinger but some... Jim Pingle

09:04 AM Bug #16077 (Incomplete): dpinger not reliable - ping request/replies

The running dpinger process, seems to be stall for no reason, hence reporting the gateway as down, but it is not:
... Stefan Bauer

08:57 AM pfSense Packages Bug #15939 (Resolved): An empty IPv4/v6 and DNSBL entry is added if it’s not saved

Tested on 25.07-DEV (built on Fri Feb 28 6:00:00 UTC 2025)
When I pressed Add IPv4/IPv6 and DNSBL group entries an... Azamat Khakimyanov

03/02/2025

05:54 AM Bug #16076: Deleting or adding a firewall rule may result in an unexpected rule order

Sorry, 2.png should = 1,2,3,4,5,6,7*,8,9,10 Craig .

05:51 AM Bug #16076 (Resolved): Deleting or adding a firewall rule may result in an unexpected rule order

There seems to be an issue with firewall rules being re-ordered after using the red (multiple) "Delete" button, even ... Craig .

04:55 AM Bug #16073: Nested aliases used with OpenVPN do not always load routes

Tested on 24.11, I can confirm this. aleksei prokofiev

04:05 AM Bug #16063: PHP error after saving NTP settings with an interface selected

with patch applied changing ntp can be changed between single or multiple server(s) without issue. looks good from here Jordan G

03:25 AM pfSense Packages Feature #16075: Add Zabbix 7.0 packages for 24.03

that error can be indicative of a library dependency issue which one would expect when installing packages with the b... Jordan G

03/01/2025

09:45 PM pfSense Plus Bug #16037 (Incomplete): New CoDel limiters are no longer created with any default values

Jordan G

09:44 PM pfSense Plus Bug #16037: New CoDel limiters are no longer created with any default values

thanks for confirming that it seems to be working for you now and please feel free to update if you are able to isola... Jordan G

06:29 PM pfSense Packages Feature #14630: FRR script hook for clearing states on routing changes

Can we get some guidance from the developers on this.
What should be the proper way of handling this? Mike Moore

05:05 PM pfSense Packages Bug #12444 (Closed): ntopng throws errors when viewing single host

Christopher Cope

05:03 PM pfSense Packages Bug #12260 (Closed): Update popup and version missmatch?

Christopher Cope

05:02 PM pfSense Packages Bug #9079 (Closed): High CPU usage of ntopng even during IDLE and no network traffic

Christopher Cope

05:01 PM pfSense Packages Bug #11530 (Closed): ntopng 4.2 needs to be updated to 4.3, Bug when accessing a host for details

Christopher Cope

07:10 AM Bug #16063: PHP error after saving NTP settings with an interface selected

I was able to reproduce this on 24.11, the patch appears to fix it. Lev Prokofev

05:27 AM pfSense Packages Feature #16075 (Rejected): Add Zabbix 7.0 packages for 24.03

The Zabbix 7.0 packages were added for 24.11 in "15548":https://redmine.pfsense.org/issues/15548 and work great.
The... Andrew Almond

02/28/2025

10:33 PM pfSense Packages Bug #10783 (Closed): NtopNG is very unstable on arm64

Marcos M

10:18 PM pfSense Packages Bug #10783: NtopNG is very unstable on arm64

This issue is stale and can be closed Denny Page

10:28 PM pfSense Packages Bug #15115 (Closed): NUT Package Functionality

Marcos M

10:04 PM pfSense Packages Bug #15115: NUT Package Functionality

This issue is stale and can be closed. Denny Page

10:26 PM pfSense Packages Bug #13972 (Closed): nut on pfsense spams console every 5 minutes "UPS ups is unavailable" against cyberpower snmp rmcard205

Marcos M

10:07 PM pfSense Packages Bug #13972: nut on pfsense spams console every 5 minutes "UPS ups is unavailable" against cyberpower snmp rmcard205

This issue is stale and can be closed Denny Page

10:26 PM pfSense Packages Bug #13886 (Closed): NUT Server Package

Marcos M

10:08 PM pfSense Packages Bug #13886: NUT Server Package

This issue is stale and can be closed Denny Page

10:26 PM pfSense Packages Bug #9143 (Closed): ntopng not displaying values in historical correctly

Marcos M

10:08 PM pfSense Packages Bug #9143: ntopng not displaying values in historical correctly

This issue is stale and can be closed Denny Page

10:18 PM pfSense Packages Bug #9079: High CPU usage of ntopng even during IDLE and no network traffic

This issue is very stale and can be closed Denny Page

10:17 PM pfSense Packages Bug #11530: ntopng 4.2 needs to be updated to 4.3, Bug when accessing a host for details

This issue is stale and can be closed Denny Page

10:16 PM pfSense Packages Bug #12260: Update popup and version missmatch?

This issue is stale and can be closed Denny Page

10:16 PM pfSense Packages Bug #12444: ntopng throws errors when viewing single host

This issue is stale and can be closed Denny Page

10:16 PM pfSense Packages Feature #14468: pass along ntopng professional license key

The pfSense ntopng package uses the open source variant of ntopng. In order to use the commercial version, you have t... Denny Page

10:14 PM pfSense Packages Todo #15294: Naming “Custom Name” of Interface the same as “Interface” on pfSense in “Interface assignment”

The interface assignments you are referring to are internal to ntopng. pfSense has no control of, or insight into, as... Denny Page

10:11 PM pfSense Packages Feature #15960: NTOP Port Configuration in WebUI feature request

Neither http-port nor https-port should not be added to the advanced configuration section. The http/https setting fo... Denny Page

10:06 PM pfSense Packages Bug #14951: Tripplite Smart1500LCD UPS

This issue is stale and can be closed Denny Page

07:07 PM pfSense Plus Regression #16074 (Not a Bug): States view doesn't populate Rule ID field if opening a new tab

It's not a bug. Clicking the link is the only intended behavior there as that specific link has the @usepost@ attribu... Jim Pingle

07:01 PM pfSense Plus Regression #16074 (Not a Bug): States view doesn't populate Rule ID field if opening a new tab

There is an inconsistency when viewing the Diagnostics > States page. For example, on the Firewall > LAN page, when ... Steve Y

06:30 PM Feature #15776: System Aliases for various reserved networks

Done with commit:15709960f5057fe0b1281a645a41b8958a8926a8. Marcos M

06:29 PM Revision 15709960: Add combined IPv4/6 system aliases

https://redmine.pfsense.org/issues/15776 Marcos M

06:17 PM pfSense Packages Feature #14630: FRR script hook for clearing states on routing changes

For anyone still tracking, there is a solution as documented in forum post - https://forum.netgate.com/topic/196577/... Mike Moore

05:48 PM Feature #16038 (Feedback): Add options for custom dynamic DNS update frequencies and disabling caching

Without the cache, there would be a lot of unnecessary DDNS requests. Setting the default behavior to force would int... Marcos M

05:46 PM Bug #16046: Dynamic DNS IP address may not be updated after changing the interface of a Dynamic DNS entry

Yes, and no. I've commented with more details on the relevant redmine. Marcos M

04:54 PM Bug #16046: Dynamic DNS IP address may not be updated after changing the interface of a Dynamic DNS entry

I opened redmine "16038":https://redmine.pfsense.org/issues/16038 to address a similar issue of dynamic DNS IP addres... Andrew Almond

04:38 PM Bug #13624: Only one alias in local network of OpenVPN Server works in 2.6.0

Kris Phillips wrote in #note-8:
> Reproduced this with a customer. The root of the issue appears to be that OpenVPN... Chris W

04:36 PM Bug #16073 (New): Nested aliases used with OpenVPN do not always load routes

Given:
- Alias @AliasParent@ contains various other aliases @AliasChild1@, @AliasChild2@, etc., however all children... Chris W

03:21 PM pfSense Docs Correction #16072 (New): Disable reply-to for advanced routing scnerios

This is related to redmine #14630
Today within the forums, a solution was found - https://forum.netgate.com/topic/... Mike Moore

04:48 AM Feature #16071 (New): SAML/SSO authentication for Captive Portal and OpenVPN

I've been looking for a way to allow my users to authenticate via Entra ID SSO in Captive portal and for VPN access t... Ajan T

02/27/2025

11:43 PM pfSense Packages Feature #16070 (Pull Request Review): Add ANDwatch package

ANDwatch is a modern replacement for arpwatch. When contrasted with arpwatch, ANDwatch offers the following enhanceme... Denny Page

11:14 PM Revision c47f6dc2: Bump the default go version to 1.23

Brad Davis

09:13 PM Bug #16069 (Resolved): The monitoring IP address for dynamic gateways may be unexpectedly routed via a different gateway

The reported issue should be fixed with commit:3b5f0ecbfc2d952891dbe227e9afbf9d2ed0ebd4. Marcos M

09:13 PM Bug #16069 (Resolved): The monitoring IP address for dynamic gateways may be unexpectedly routed via a different gateway

When the option @Static route@ is unchecked, it's expected that the monitoring IP address for a dynamic gateway is al... Marcos M

09:09 PM Bug #16068 (Needs Patch): Logging of packets with IP options cannot be disabled

Logging of packets with options (IGMP) was added/fixed as mentioned in redmine "15400":https://redmine.pfsense.org/is... Andrew Almond

09:05 PM Feature #15904: Add native support for Captive Portal API (RFC8908)

The implementation of this is exceptionally simple:
Construct the same information strings as you would enter into... Dale Harron

08:57 PM Todo #15429 (Resolved): Clarify descriptions for gateway recovery options

I've updated the option descriptions:
* commit:0c43c9f7398c7b3ab234ac831eda3a5db85dc240
* commit:7d2ad4a05139669fbf... Marcos M

08:44 PM Revision 3b5f0ecb: Fall back to routing via the interface for dynamic gateway monitoring IPs

It's possible that when setup_gateways_monitor() is called, the gateway
address is not yet available. To avoid routin... Marcos M

08:35 PM Regression #16031 (Resolved): Some older ISA-based uart consoles do not function on development snapshots around 25.03 or later

Note added to 25.03 docs: https://gitlab.netgate.com/docs/pfSense-docs/-/commit/d78ded2d4e13701fd557522d7a8ccb8604d83... Jim Pingle

07:44 PM Bug #16066 (Duplicate): When I configure the captive portal as below, captive Portal gives a used port number.

Marcos M

11:58 AM Bug #16066 (Duplicate): When I configure the captive portal as below, captive Portal gives a used port number.

here dont checking zoneid if exist
https://github.com/pfsense/pfsense/blob/ec956d343e6cd2db69caa23ba647a19d18fd... sezer h

05:47 PM pfSense Plus Bug #15994 (Resolved): Backup configuration cache is not cleaned automatically

Marcos M

12:02 PM Feature #16067 (New): OpenVPN tls-crypt-v2 support

Customer asks for native support of tls-crypt-v2 feature in future pfSense releases.
Currently he managed to make it... Georgiy Tyutyunnik

11:37 AM Feature #15776: System Aliases for various reserved networks

Jim Pingle wrote in #note-7:
> This looks good but I can't help wondering if we should have "46" variants with all o... Jens Groh

03:44 AM Bug #16022: Static lease DNS records are incorrectly removed when backing lease expires

Is there a system patch available for this issue by chance? Thanks Denny Page

03:38 AM Regression #15898: Changes to the ``admins`` user group are not synced to the secondary node

Version: 24.11
I observed this as well on several HA deployments.
Since root is not in the admins group on the... Craig Coonrad

02/26/2025

07:58 PM pfSense Plus Bug #16058 (Rejected): NTPD issue with authenticated update since upgrade

The authenticated NTP feature was implemented with pfSense+ 24.11. It may be that the configuration applied during th... Marcos M

07:35 PM Bug #16063 (Feedback): PHP error after saving NTP settings with an interface selected

Applied in changeset pfsense:commit:7573eafea9025f1a895886cf24d20fc5762c7b7d. Marcos M

07:01 PM Bug #16063 (Confirmed): PHP error after saving NTP settings with an interface selected

To reproduce:
# Enable MIM
# Go to Services > NTP
# Select Localhost for @Interface@ then click @Save@ Marcos M

07:26 PM Revision 7573eafe: Don't set invalid config value for ntpd interfaces. Fix #16063

This regressed after the config access refactor. To keep the same behavior
from before the refactor, simply set the c... Marcos M

06:42 PM pfSense Packages Bug #16065: pfblockerng python mode causing errors in Unbound

Forum discussion: https://forum.netgate.com/topic/195601 Marcos M

12:58 PM Feature #6742: OAuth2 authentication for OpenVPN (and for FreeRadius)

Is there any native support for Oauth or SAML or OIDC is implemented in PfSense?
I'm have been searching for so lon... Ajan T

02/25/2025

11:38 PM Bug #15923: After restoring the backup, PHP produce the errors.

This is fixed in 24.11 and 2.8.
2.7.2, 23.09 and 24.03 hit it. Steve Wheeler

11:08 PM Bug #16064 (Feedback): Boot loader is not upgraded on UFS installs

Christian McDonald

12:58 AM Bug #16064 (Feedback): Boot loader is not upgraded on UFS installs

At pfSense upgrade the bootloader is checked and updated if necessary but this process is skipped for UFS installs.
... Steve Wheeler

10:19 PM pfSense Packages Bug #15939 (Feedback): An empty IPv4/v6 and DNSBL entry is added if it’s not saved

Should be fixed with https://github.com/pfsense/FreeBSD-ports/commit/aaf683d62794327bddd8ca0c75e10a31a51f34dd. Marcos M

05:44 PM pfSense Packages Bug #16065 (New): pfblockerng python mode causing errors in Unbound

[90474:3] error: pythonmod: Exception occurred in function operate, event: module_event_new
[90474:3] error: pytho... Raffi T

12:09 AM Bug #16063: PHP error after saving NTP settings with an interface selected

Ok, sorry for the update but - easier steps to repro
Works OK first time displaying Services>NTP. Do it again and 5... steven warner

02/24/2025

11:04 PM Bug #16063: PHP error after saving NTP settings with an interface selected

Update:
Issue occurs when editing the sole existing server and not adding a new one... steven warner

10:57 PM Bug #16063 (Resolved): PHP error after saving NTP settings with an interface selected

System had one NTP server defined. Entered info for another NTP server by ip address, and selected save.
Gets "50x... steven warner

07:59 PM pfSense Docs Todo #16017 (Feedback): Update AutoConfigBackup docs to account for new changes

This should finish it up:
https://gitlab.netgate.com/docs/pfSense-docs/-/commit/4ab9d396b2235d93111fb89ee5126e8867... Jim Pingle

07:15 PM Bug #16057 (Resolved): The package ``post-install`` script does not run with a system upgrade on ZFS

pkg has been patched locally for now:
https://github.com/pfsense/FreeBSD-ports/commit/629f859694af769c7239bb9a32e5d1... Marcos M

05:46 AM Feature #15022: Allow overriding text scrolling during package install/uninstall

Thank you this worked when I did a new upgrade also, I could check back with it. (my upgrade failed because of my 210... Jonathan Lee

03:53 AM pfSense Plus Bug #15595 (Resolved): ``pftop`` core dump with ICMP states

version: 25.03-RC
platform: 4200
On 24.11 I couldn't get pftop to crash consistently. Until I initiated some pings, ... Craig Coonrad

01:21 AM Todo #16060 (Feedback): ``pkg`` no longer supports setting ``ALTABI`` manually at run-time

Fixed in the latest pfSense-upgrade. Luiz Souza

02/22/2025

11:30 PM Bug #16043: The filtered states shown may include states for interfaces other than the selected interface

testing with 25.03.r.20250221.0254 the diagnostics>states page seems to produce results more in-line with what one wo... Jordan G

10:31 PM Todo #16050 (Resolved): Update cpu-microcode-intel to version 20250211 for multiple CVE mitigations

... Christopher Cope

10:24 PM pfSense Plus Regression #15494 (Resolved): Reinstall Packages button reports another instance of ``pfSense-upgrade`` is running

Working for me as well on... Christopher Cope

04:01 PM pfSense Plus Regression #15494: Reinstall Packages button reports another instance of ``pfSense-upgrade`` is running

reinstall packages button seems to be functional again when testing on 25.03.r.20250221.0254 Jordan G

07:59 AM Feature #16062 (New): Assign devices to Users

Feature Request to assign multiple devices to users (users without admin access to the firewall settings) to improve ... Ben Newport

02/21/2025

10:12 PM Todo #16050 (Feedback): Update cpu-microcode-intel to version 20250211 for multiple CVE mitigations

Marcos M

10:11 PM Bug #16047 (Resolved): Cannot kill states using the post-NAT address

Now works as intended in snapshots. The fix has been picked to 25.03. Marcos M

10:00 PM Feature #15321: Kea DHCP Custom Configuration Support (IPv4 and IPv6)

I've created a quick-start guide for this on the forum:
https://forum.netgate.com/topic/196513 Marcos M

12:51 AM Feature #15321: Kea DHCP Custom Configuration Support (IPv4 and IPv6)

No doubt
But what it does do is provide the flexibility *now* for people that really need it while we take the next ... Christian McDonald

08:21 PM pfSense Docs Todo #16017: Update AutoConfigBackup docs to account for new changes

More Progress:
https://gitlab.netgate.com/docs/pfSense-docs/-/commit/cd4a16b91743e13809b8f6a71ecb2d495cfd5c42
Stage... Jim Pingle

06:49 PM Bug #16057 (Needs Patch): The package ``post-install`` script does not run with a system upgrade on ZFS

This is an issue since 24.03. The root cause here is due to a bug with pkg. It was supposed to be fixed but the upstr... Marcos M

02/20/2025

11:43 PM Feature #15321: Kea DHCP Custom Configuration Support (IPv4 and IPv6)

I can already forsee the numerous support posts. Are we relying on the user to correctly identify the spacing issues ... Mike Moore

09:09 PM Feature #15321: Kea DHCP Custom Configuration Support (IPv4 and IPv6)

The subject of this issue has been reworded to more accurately reflect the current direction we are taking with the f... Christian McDonald

05:02 PM Feature #15321 (Feedback): Kea DHCP Custom Configuration Support (IPv4 and IPv6)

Christian McDonald

09:08 PM pfSense Docs Todo #16017: Update AutoConfigBackup docs to account for new changes

More progress: https://gitlab.netgate.com/docs/pfSense-docs/-/commit/050b05e642c93ebad98548507392ebce8d60daea Jim Pingle

08:16 PM pfSense Plus Feature #16061: Automatic Site-to-Site VPN

There is no full public road map but there is a page with more information: https://www.netgate.com/multi-instance-ma... Jim Pingle

08:09 PM pfSense Plus Feature #16061: Automatic Site-to-Site VPN

You just made my year. Is there a public roadmap? I checked the roadmap tab in Redmine but I didn't see anything. Andrew Collings

01:42 PM pfSense Plus Feature #16061 (Duplicate): Automatic Site-to-Site VPN

This is already planned as a part of multi-instance management, so no need for a separate feature request. Jim Pingle

03:42 AM pfSense Plus Feature #16061 (Duplicate): Automatic Site-to-Site VPN

Would it be feasible to implement a solution similar to Ubiquiti's Site Magic? We have 12 locations with Netgate appl... Andrew Collings

06:14 PM Bug #16047 (Ready To Test): Cannot kill states using the post-NAT address

https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/commit/8bc7ad06d91d330aaa14ced38c6b0925e18a1503
https://gitlab.ne... Kristof Provost

01:23 PM Bug #16059 (Resolved): RAM Disk cron jobs are not saved correctly

fixed in the latest 25.03 build
tested on:
25.03-BETA (amd64)
built on Mon Feb 17 20:02:00 UTC 2025
FreeBSD 15.0-... Georgiy Tyutyunnik

12:19 AM Bug #16059 (Feedback): RAM Disk cron jobs are not saved correctly

Fixed with commit:35dab7fc85caaa9b2b55c8525c3a753e83e8a599 and commit:7d9da7bef6f638ea676c8330883742c2d0414a67. Marcos M

03:19 AM pfSense Packages Bug #13654: Wireguard does not fail back failover WAN setup.

I'm having this issue in 24.11 with 6 different 6100s. It fails over flawlessly but will not fail back. I can go into... Andrew Collings

02:46 AM Bug #16039: Gateway does not go down when packet loss threshold is set to 100%

Thanks for looking into it and for the heads up. I can't believe I completely missed that option. Andrew Collings

12:33 AM Todo #16060 (Closed): ``pkg`` no longer supports setting ``ALTABI`` manually at run-time

When pkg is run on the latest snapshot, the following is shown:... Marcos M

12:28 AM pfSense Plus Bug #15994 (Pull Request Review): Backup configuration cache is not cleaned automatically

https://gitlab.netgate.com/pfSense/factory/-/merge_requests/165 Marcos M

12:10 AM Revision 7d9da7be: Fix clobbered cron configuration on upgrade

Marcos M

02/19/2025

11:38 PM Bug #16059 (Resolved): RAM Disk cron jobs are not saved correctly

After enabling RAM Disks at @System > Advanced > Miscellaneous@ the related cron jobs are saved to the configuration ... Marcos M

09:03 PM pfSense Docs Todo #16017 (In Progress): Update AutoConfigBackup docs to account for new changes

WIP commit: https://gitlab.netgate.com/docs/pfSense-docs/-/commit/1e9da8bc640a6bd02618f75bc557cfa494978a36
Jim Pingle

08:38 PM pfSense Packages Bug #15976: Fix ntopng listen options

Hey all, this is a pretty simple change. Can someone have a look at pulling this in please? Thanks. Denny Page

08:37 PM pfSense Packages Feature #15891: NUT driver list update

Hey all, this is a pretty simple change. Can someone have a look at pulling this in please? Thanks. Denny Page

08:34 PM pfSense Plus Regression #15494 (Feedback): Reinstall Packages button reports another instance of ``pfSense-upgrade`` is running

Fix has been committed and picked to 25.03. Marcos M

06:58 PM pfSense Plus Regression #15494 (In Progress): Reinstall Packages button reports another instance of ``pfSense-upgrade`` is running

Marcos M

07:57 PM Feature #15022 (Resolved): Allow overriding text scrolling during package install/uninstall

Testing this with installing/uninstalling Snort I see the auto-scroll checkbox works as expected while packages are b... Marcos M

07:35 PM Bug #15643 (Resolved): Deleting one pre-installed package may delete other pre-installed packages

Jim Pingle

07:29 PM Bug #15643: Deleting one pre-installed package may delete other pre-installed packages

can't reproduce on latest dev, fixed
tested on:
Version 25.07-DEVELOPMENT (amd64)
built on Mon Feb 17 22:46:00 UTC... Georgiy Tyutyunnik

06:51 PM Revision 883ec036: Fix typo in Firewall State Policy description

Steve Wheeler

05:49 AM pfSense Plus Bug #16058 (Rejected): NTPD issue with authenticated update since upgrade

Hi there,
I have happily setup authenticated NTPD using a sha256 key a while ago, and it was working quite happi... Eric Nguyen

01:20 AM pfSense Plus Bug #16051: Limiters saved while MIM is enabled disappear after reboot

On upgrades to 25.03, existing invalid configuration should be automatically fixed. Alternatively, the following coul... Marcos M

01:06 AM Revision 7d2ad4a0: Clarify failover state-killing behavior for gateway groups

Marcos M

12:40 AM Bug #16052 (Closed): UPNP does not apply unless saved again on reboot

For reference, there's also an issue with it on the current 25.03-BETA which results in the service crashing. A fix w... Marcos M

12:33 AM Bug #16057 (Resolved): The package ``post-install`` script does not run with a system upgrade on ZFS

As an example, the freeradius package defines the following in its xml:... Marcos M

02/18/2025

11:29 PM Bug #16052: UPNP does not apply unless saved again on reboot

Good evening. You can close the ticket. It seems only to happen if plex is already connected to a port like 15478 an... Dwight Northwood

04:43 PM Bug #16052: UPNP does not apply unless saved again on reboot

I can't reproduce this here on the latest beta build. From a fresh boot I can immediately open a port mapping and it ... Jim Pingle

08:50 PM pfSense Docs Todo #16056 (New): Add hardware compatibility information to Multi-Instance Management page

link: https://docs.netgate.com/pfsense/en/latest/mim/index.html
Add bullet point to "WARNING" section with somethi... Craig Coonrad

05:10 PM pfSense Plus Bug #16037: New CoDel limiters are no longer created with any default values

I tested again on the device that I was creating the blank limiters, and now it is creating them correctly with defau... Andrew Almond

05:01 PM pfSense Plus Bug #16054 (New): Many arpresolve errors in system log for gateways that are down

When a gateway goes down, the system log is filled with messages similar to
@Feb 18 08:40:50 kernel arpresolve: can... Andrew Almond

02:39 PM Todo #16049 (Resolved): Update nginx to 1.26.3

Latest beta build for 25.03 has @nginx-1.26.3,3@ and appears to be working fine. Jim Pingle

12:53 PM pfSense Plus Bug #15595: ``pftop`` core dump with ICMP states

I've pushed a fix for pftop crashes (specifically seen with `pftop -f icmp`) to the 25.03 and plus-devel-main branche... Kristof Provost

02/17/2025

08:26 PM Revision dd619ffb: Properly quote these variables and use the built-in echo

Brad Davis

07:56 PM Revision e6dd4136: Remove SED as it is now unused

Brad Davis

07:47 PM Revision 1a94dd65: Simplify clearing the arp table by using functionality built into arp(1)

Brad Davis

07:40 PM Revision 93423f89: Properly quote these variables and avoid using test -o

Brad Davis

05:30 PM Revision 972246c7: Avoid using test -o and use || instead

Brad Davis

04:50 PM Todo #16050: Update cpu-microcode-intel to version 20250211 for multiple CVE mitigations

I've pushed updates so sysutils/cpu-microcode-intel is now at the 2025-02-11 release and sysutils/cpu-microcode-amd i... Kristof Provost

03:03 PM Todo #16049: Update nginx to 1.26.3

I've updated nginx on plus-RELENG_25_03 to 1.26.3.
I've not touched the plus-devel-main (ie 25.07-DEV) branch. That'... Kristof Provost

10:55 AM pfSense Docs Todo #16053 (Closed): Reinstalling pfSense Plus Software Determine Target Drive does not include USB storage

In the Netgate Physical Appliances documentation, there is often a How-To Guide for Reinstalling pfSense Plus Softwar... Jared Silva

02/16/2025

02:42 AM Bug #16052: UPNP does not apply unless saved again on reboot

The service is started on my system but not creating the port forwards until I click on save. Minor issue as it is a... Dwight Northwood

01:21 AM Bug #16052 (Incomplete): UPNP does not apply unless saved again on reboot

Dwight Northwood wrote:
> Noticed my plex was being blocked on beta 25.03 as the UPNP was not working correctly.
> ... Kris Phillips

01:05 AM Todo #16049 (Confirmed): Update nginx to 1.26.3

25.07-DEV is also running 1.26.2. Christopher Cope

02/15/2025

11:17 PM Bug #16052 (Closed): UPNP does not apply unless saved again on reboot

Noticed my plex was being blocked on beta 25.03 as the UPNP was not working correctly.
I would go into the option ... Dwight Northwood

10:56 PM pfSense Plus Bug #16051 (Resolved): Limiters saved while MIM is enabled disappear after reboot

I can't replicate this on the Feb 12 build. On reboot I still have the two test limiters.... Chris W

07:15 PM pfSense Plus Bug #16051 (Feedback): Limiters saved while MIM is enabled disappear after reboot

Marcos M

09:55 PM Bug #15110: pfSense hangs when rebooting

Same here with a 5100 after change the original 8GB eMMC to a 128 GB SSD. It never reboots without removing the power... Daniel van der Wal

03:25 PM Bug #15110: pfSense hangs when rebooting

The issue persisted in 24.11. Danilo Zrenjanin

07:38 PM pfSense Plus Bug #15959: MIM GUI is unable to write IPv6 aliases

The issue persisted in:... Danilo Zrenjanin

07:18 PM Bug #15930 (Not a Bug): Mobile IPsec clients can't connect after gateway failover

This is not a bug. We have verified that it operates as intended in the customer's environment as well. Accordingly, ... Danilo Zrenjanin

02/14/2025

10:57 PM Bug #15982: Limiters do not change values and disappear after reboot if bandwidth set over 5 Gig

Thanks for the report. I've opened a separate issue here: https://redmine.pfsense.org/issues/16051 Marcos M

02:59 PM Bug #15982: Limiters do not change values and disappear after reboot if bandwidth set over 5 Gig

Running into a similar issue
https://forum.netgate.com/topic/196432/limiter-config-disappered/2
Albiet, my con... Mike Moore

10:57 PM pfSense Plus Bug #16051 (In Progress): Limiters saved while MIM is enabled disappear after reboot

This is resolved in 25.03, though existing configurations are not automatically fixed on upgrade. Marcos M

10:54 PM pfSense Plus Bug #16051 (Resolved): Limiters saved while MIM is enabled disappear after reboot

# Enable MIM
# Create two limiters, @test-1@ and @test-2@ both with @50@ Mb bandwidth
# Reboot Marcos M

09:40 PM Todo #16049: Update nginx to 1.26.3

Mike Moore wrote in #note-1:
> Will this be through the system update package OR through a firmware upgrade?
This... Kris Phillips

09:33 PM Todo #16049: Update nginx to 1.26.3

Will this be through the system update package OR through a firmware upgrade? Mike Moore

09:23 PM Todo #16049 (Resolved): Update nginx to 1.26.3

Vulnerabilities in nginx have been discovered in CVE-2025-23419. Plus 24.11 and 25.03-BETA runs 1.26.2, which is vul... Kris Phillips

09:31 PM Todo #16050 (Resolved): Update cpu-microcode-intel to version 20250211 for multiple CVE mitigations

Multiple Intel CPU vulnerabilities have been reported here in FreeBSD:
https://vuxml.freebsd.org/freebsd/d598266d-77... Kris Phillips

07:20 PM pfSense Plus Regression #16048: Checking the "Force all traffic thru VPN" within OpenVPN wizard or server configuration does(may?) not add outgoing NAT rule.

Okay, gotcha! I wasn't sure if that was the issue. Thanks for the quick reply! Stephen Trotter

03:25 PM pfSense Plus Regression #16048 (Rejected): Checking the "Force all traffic thru VPN" within OpenVPN wizard or server configuration does(may?) not add outgoing NAT rule.

Manual NAT rules will never be added automatically unless you're switching from Auto or Hybrid over to Manual. This i... Jim Pingle

03:04 PM pfSense Plus Regression #16048: Checking the "Force all traffic thru VPN" within OpenVPN wizard or server configuration does(may?) not add outgoing NAT rule.

I just wanted to add the reasoning that I believe it may be a regression.
It's because of the numerous guides (and... Stephen Trotter

03:01 PM pfSense Plus Regression #16048 (Rejected): Checking the "Force all traffic thru VPN" within OpenVPN wizard or server configuration does(may?) not add outgoing NAT rule.

I was attempting to set up an OpenVPN tunnel so I could connect my phone thru my home network.
The desired behavior ... Stephen Trotter

05:40 PM Revision c50d1eb3: Properly quote these variables and clean up some spacing

Brad Davis

05:17 PM Revision 58e6c4d7: Properly quote these variables and use the correct equals

Brad Davis

04:49 PM Revision e5a70b8a: Properly quote these variables

Brad Davis

03:59 PM Revision 71ed3463: Fix using proper equals and separate this test properly

Brad Davis

02:40 PM Bug #16046 (Feedback): Dynamic DNS IP address may not be updated after changing the interface of a Dynamic DNS entry

Applied in changeset commit:de695c0e4bd4e9b2bfb34ae2d557509865ccf9f5. Marcos M

02:27 PM Regression #16045 (Feedback): Dynamic DNS IPv6 tries to use IPv4 address

Marcos M

02:24 PM Revision 0c43c9f7: Clarify descriptions for State Killing on Gateway Recovery

Marcos M

01:09 PM Regression #13622: QinQ ethertype tags changed

Is there any timeline to resolve this one? Double stacked 802.1q packets are far more common than 802.1ad in my exper... Chris Rowe

02/13/2025

11:05 PM Bug #16047 (Resolved): Cannot kill states using the post-NAT address

To reproduce:
# Start a continuous ping to a public address from a device behind the LAN.... Marcos M

10:40 PM Revision de695c0e: Force a DDNS update when changing interfaces. Fix #16046

Marcos M

10:40 PM Revision 91d95436: Remove redundant call to dyndnsCheckIP()

The variable '$this->_dnsIP' is set when the object is constructed and
when the function '_detectChange()' is called.... Marcos M

10:40 PM Revision 42efc42c: Respect the RR type implied by the DDNS Service Type. Fix #16045

Background:
In previous pfSense versions, the RR type and the IP address family used
to make the DDNS request were as... Marcos M

10:38 PM Bug #16046 (Resolved): Dynamic DNS IP address may not be updated after changing the interface of a Dynamic DNS entry

To reproduce:
# Configure two WANS, WAN1 and WAN2.
# Create a DDNS config using WAN1.
# Check that the domain now ... Marcos M

03:52 PM Regression #16045 (In Progress): Dynamic DNS IPv6 tries to use IPv4 address

Please try the following patch:
{{collapse... Marcos M

10:12 AM Regression #16045: Dynamic DNS IPv6 tries to use IPv4 address

This patch fixes some things and at first glance it looks to work?
*But most likely its broken in more places.* Look... Bart Schapendonk

07:58 AM Regression #16045: Dynamic DNS IPv6 tries to use IPv4 address

Sorry, my cat slapped the submit button whith his tail before I could finish.
This is on: "25.03-BETA (amd64) built ... Bart Schapendonk

07:54 AM Regression #16045 (Resolved): Dynamic DNS IPv6 tries to use IPv4 address

@Feb 13 08:49:54 php-fpm 34382 /services_dyndns_edit.php: Dynamic DNS: updatedns() starting
Feb 13 08:49:54 php-... Bart Schapendonk

10:49 AM Bug #16007: Dynamic DNS, Porkbun, "@.mydomain.xyz"

Mustache Mustache wrote in #note-6:
> Ben Woods wrote in #note-5:
> > Could this be caused by porkbun moving the UR... Emanuel Persson

04:34 AM pfSense Docs Correction #16044 (New): Add 4200 eMMC monitoring notice to Troubleshooting Disk Lifetime

The onboard eMMC storage on the 4200 cannot be monitored by mmc-utils or any other method. A note needs to be added t... Andrew Almond

04:27 AM pfSense Plus Bug #15978: Unable to get SMART data from 4200 onboard storage

@mmendoza The ability to monitor the storage health is a critical part of the basic operation of a firewall, especial... Andrew Almond

02/12/2025

07:25 PM Bug #16043 (Feedback): The filtered states shown may include states for interfaces other than the selected interface

Applied in changeset commit:ba43ae3191b64ff05a60f1faca79a6ad0d127abc. Marcos M

06:55 PM Bug #16043 (Resolved): The filtered states shown may include states for interfaces other than the selected interface

In Diagnostics > States the option is given to select an interface for filtering the displayed states. The states dis... Marcos M

07:10 PM Revision ba43ae31: Exclude states that don't match the selected interface. Fix #16043

Marcos M

06:58 PM Revision 740d3241: Improve performance of state display in diag_dump_states.php

The variable $killdstip was previously used in the tool-tip for the kill
state icon which later changed to reference ... Marcos M

04:38 PM Revision db1a9fd5: kea: don't define pd-pools using ISC config

Christian McDonald

04:14 PM Bug #16019 (Feedback): Kea can unintentionally attempt to spawn multiple processes and fail

A mitigation has been added for this. Christian McDonald

04:09 PM Revision b7ed91f9: kea: ensure all (rogue) instances are terminated. For #16019

Christian McDonald

04:02 PM Revision 7f5ad503: Compare system version using the pfSense-system package

This returns the previous behavior of comparing the package which has the
product dependencies. Marcos M

03:46 PM pfSense Plus Bug #15989: Renaming an alias in MIM does not update firewall and NAT rules with the new alias name

Related:
* https://redmine.pfsense.org/issues/15932
* https://redmine.pfsense.org/issues/16083 Marcos M

03:10 PM Revision 74e84f2b: Exclude the ramdisk restore log from the archive

The ramdisk restore log is meant to log the latest restore attempt. It
must be excluded from the archive to avoid clo... Marcos M

02/11/2025

10:31 PM Bug #16019: Kea can unintentionally attempt to spawn multiple processes and fail

Thanks for the info! I just ran into the same issue and I think it's also mentioned in the forums here: https://forum... Sevi A

09:43 PM Bug #12947 (Feedback): Old IPv6 addresses may continue to be used after DHCP or RA changes

Marcos M

09:28 PM Revision 1616fe18: Add a reminder to stop/start the RA service when the prefix has changed

The DeprecatePrefix option for radvd only triggers on shutdown.
Followup to 646389402feb2dd94171d7c81d4be67feef4f8d8. Marcos M

08:57 PM Revision 78cfbc5e: Reduce rc.newwanipv6 actions on RENEW

This change passes the dhcp6c REASON to the script. The script uses this
to retain the previous behavior for REASONs ... Marcos M

06:12 PM Regression #15400: IGMP packets are logged when the filter rule has logging disabled

While this behavior may be intentional, it is confusing if it is caused by the default ruleset, and disabling the opt... Andrew Almond

06:02 PM Revision 64638940: Trigger rc.newwanipv6 on dhcp6c RENEW

The upstream DHCPv6 server may respond to the RENEW with a different
prefix hence the rc.newwanipv6 script should be ... Marcos M

05:39 PM Feature #15321 (In Progress): Kea DHCP Custom Configuration Support (IPv4 and IPv6)

Christian McDonald

03:17 PM Bug #16007: Dynamic DNS, Porkbun, "@.mydomain.xyz"

Ben Woods wrote in #note-5:
> Could this be caused by porkbun moving the URL for their API recently?
> Old Value: p... Mustache Mustache

03:07 PM Revision 1d909abb: Fix regression when configuring the interface MAC address

Followup to dbb8c4840dbd75f28528a3ce4a0070091d95336a Marcos M

01:08 AM pfSense Docs Todo #16042 (New): Feedback on pfSense® software Configuration Recipes — Configuring CoDel Limiters for Bufferbloat

*Page:* https://docs.netgate.com/pfsense/en/latest/recipes/codel-limiters.html
*Feedback:* Suggestion regarding IP... Daniel Marks

02/10/2025

07:09 PM Revision e33068b7: Generate the UUID using the external interface MAC

Use the configured external interface to generate the UUID and serial for
miniupnpd.conf. Additionally, resort to usi... Marcos M

07:01 PM Revision dbb8c484: Handle a null return from pfSense_get_ifaddrs()

- Update the usage of get_interface_addresses() to handle a null return
- Update the usage of get_interface_mac() to ... Marcos M

04:55 PM Revision 2ef2fffc: Improve various pieces here, properly quote variables, use = properly, and use || instead of -o

Brad Davis

04:41 PM Revision e8d3a416: Simplify fetching the physical mem and do the calulation in shell instead of using expr(1)

Brad Davis

04:34 PM Revision f356ce54: let is not valid in shell and fix the calculation too

Brad Davis

04:26 PM Revision a465f0c1: Remove useless use of cat

Brad Davis

04:22 PM Revision 237b4ee7: Fix spacing and use tabs consistently

Brad Davis

04:03 PM Feature #15652 (Feedback): Kea DHCPv6 Prefix Delegation Support (IPv6 Only)

Support added in 25.07 for testing
DHCP log should show entries like:... Christian McDonald

04:02 PM Regression #16035 (Rejected): Ignore link-local addresses when generating Unbound host records

Christian McDonald

12:02 AM Revision b24bcd7a: Properly quote variables and switch to $( ) instead of backticks

Brad Davis

02/09/2025

11:07 PM Revision 6ee5b44a: Properly quote these variables

Brad Davis

10:39 PM Bug #12947: Old IPv6 addresses may continue to be used after DHCP or RA changes

I am also looking into this issue.
There are different possible issues here, depnding on configuration method.
In... Elias Ohm

10:37 PM Revision 84926bb6: Improve these tests by avoiding -a which might cause commands to run on the right-hand side

Brad Davis

10:20 PM Revision 1cbe125a: Instead of using a negative -z test, use -n

Brad Davis

09:56 PM Revision 4e5642c8: Improve these tests by avoiding -a and -o which might cause commands to run on the right-hand side

Brad Davis

09:43 PM Revision 7dc60557: Simplify checking the exit code from these commands

Brad Davis

09:15 PM Revision 8670a047: SC2086: Properly quote these variables

Brad Davis

09:05 PM Revision 51ceef5e: Simplify generating the random time to sleep by using jot(1)

Brad Davis

08:28 PM Revision c3cf1790: Simplify this check

Brad Davis

08:14 PM Revision 5a7a1a84: Remove unnecessary case statement since tar now uses libarchive and handles the different types of compression automatically

Brad Davis

04:44 PM pfSense Plus Feature #11732: Add VXLAN Support to pfSense Plus

I added VXLAN support by building latest FreeBSD VXLAN kernel module for my Pfsense CE 2.7.2 kernel.
You can see my ... Max Pal

11:10 AM Feature #15321: Kea DHCP Custom Configuration Support (IPv4 and IPv6)

This modification to the patch for Plus release 25.03 Beta is working for me:... Dale Harron

04:37 AM Bug #15852: Alias Nesting Only Shows IP and Network Alias Types On Initial Creation

Jordan G wrote in #note-2:
> it appears this functionality is by design and to prevent things like port aliases bein... Ethan Word

03:06 AM Bug #16039 (Confirmed): Gateway does not go down when packet loss threshold is set to 100%

Chris W

03:04 AM Bug #16039 (Incomplete): Gateway does not go down when packet loss threshold is set to 100%

I can reproduce this for the most part. I set WAN1 for the Tier1 interface and WAN2 for the Tier2 on a 4100 (identica... Chris W

02/08/2025

11:56 PM pfSense Plus Bug #16037: New CoDel limiters are no longer created with any default values

following the documentation and creating a new limiter using taildrop/fqcodel leaving all values blank except the ini... Jordan G

08:47 PM Bug #15930 (Incomplete): Mobile IPsec clients can't connect after gateway failover

Further testing was conducted on the Netgate 8200 and 7100 devices, but the issue could not be replicated. This sugge... Danilo Zrenjanin

01:34 PM pfSense Packages Feature #15548: Add packages for Zabbix 7.0 Agent and Proxy

Hi,
I don't understand why this is closed if packages still aren't available for CE 2.7.2?
Zabbix 6 LTS goes EO... Steve Scotter

02:06 AM pfSense Packages Feature #14630: FRR script hook for clearing states on routing changes

Its been over a year so im not sure where this situation leaves us.
To be blunt, you cannot use dynamic routing prot... Mike Moore

02/07/2025

07:25 PM pfSense Docs Todo #16040 (Closed): Feedback on pfSense® software Configuration Recipes — High Availability Configuration Example

Fixed, thanks!
https://gitlab.netgate.com/docs/pfSense-docs/-/commit/c3e58087af002592d0eaea875d14826fb02ff3cf
Jim Pingle

05:26 PM pfSense Docs Todo #16040 (Closed): Feedback on pfSense® software Configuration Recipes — High Availability Configuration Example

*Page:* https://docs.netgate.com/pfsense/en/latest/recipes/high-availability.html
*Feedback:*
2001:db8::201/64 ... Steve Y

06:39 PM Bug #16041 (New): Use newer name `submissions` for TCP port 465 instead of `smtp/s`

In Firewall > Rules, the table displayed has a column named "port" which helpfully shows not just the port number, bu... Sean McBride

05:52 PM Bug #15876: Routing Advertisements daemon fails to start when configured with more than 3 RDNSS entries in a prefix

With the updated radvd version in 25.03, up to 4 entries may be configured to align with what can be set in the DHCPv... Marcos M

04:58 PM Bug #15930 (New): Mobile IPsec clients can't connect after gateway failover

Kris Phillips

04:36 PM Bug #15060: LDAP bind fails when authentication servers use different CA chains

The issue still exists on 24.11. Lev Prokofev

03:13 PM Revision 1a578050: Fix the case where pfSense_get_ifaddrs() returns NULL.

It happens when the interface has no address (triggered with pppoe). Luiz Souza

02/06/2025

10:06 PM Revision b12078bb: Simplify rc.restore_ramdisk_store

Brad Davis

09:23 PM Revision d9554e41: Reorganize how RAM disks are created

This improves things by moving the read of the sizes for the RAM disks
up before things are unmounted and so we have ... Brad Davis

09:23 PM Revision 46d21522: Setup the dynamic linker before we call xmllint

Brad Davis

05:20 PM Todo #15258: Update Gandi LiveDNS service with API changes

I tested your commits via the Patches system and it works for me now! Hopefully with this confirmation from the OP wi... Matthew Drury

04:43 PM Revision ddc07852: Move dictionary.pfsense into PREFIX where it belongs

Brad Davis

03:25 PM Regression #16036 (Resolved): Cannot set a new name when duplicating an existing gateway group

tested, reproduced.
patch fixes the issue
tested on:
25.03-BETA (amd64)
built on Tue Feb 4 1:23:00 CET 2025
Free... Georgiy Tyutyunnik