Development

• 

  HEADS UP: Snapshots moving to pfSense 2.5.0 on FreeBSD 12, expect initial instability
  • jimp  

  1
  0
  Votes
  1
  Posts
  1167
  Views

  No one has replied

• M

  What skills are needed for Development
  • mikeisfly  

  8
  0
  Votes
  8
  Posts
  9951
  Views

  F

  if we talk about software development Go with HTML CSS java php credit @optimumlogic
• A

  2.4.5.a.20200110.1421 and earlier: High CPU usage from pfctl
  • andrew_241  

  101
  0
  Votes
  101
  Posts
  5051
  Views

  

  Thought so but wanted to offer the help nonetheless :)
• 

  pfssh: how to add (initial) VLANs?
  • JeGr  

  2
  0
  Votes
  2
  Posts
  55
  Views

  

  You have to declare each level of the hash/array as you go. Like this: $config['vlans'] = array(); $config['vlans']['vlan'] = array(); $config['vlans']['vlan'][] = $newvlan; There is a convenience function that can help: init_config_arr(array('vlans', 'vlan')); $config['vlans']['vlan'][] = $newvlan; That function only initializes the arrays if they are unset/don't exist/are not arrays so it's safe to run unconditionally.
• 

  Athp driver
  • stephenw10  

  45
  0
  Votes
  45
  Posts
  1128
  Views

  

  Looks like current snaps are loading more firmware by default. Standby....
• P

  2.4.5 export ovpn 2.3 config bug
  • pukoid  

  6
  0
  Votes
  6
  Posts
  33
  Views

  P

  @Gertjan Updated OpenvpnClientExport package and checkbox works fine now. Dumb me.
• A

  How <caref>code in the confing.xml is generated?
  • aimad  

  4
  0
  Votes
  4
  Posts
  25
  Views

  

  On a cert, it's the refid of the CA that signed the cert. So it's copied from the CA refid.
• 

  ETA on traffic shaping for C3000 X553 NICs?
  • maxtoid  

  3
  0
  Votes
  3
  Posts
  112
  Views

  

  There are no plans to add altq to ixgbe as far as I know. One workaround for that us to use VLANs on the ix NICs, vlan interfaces do support altq. Steve
• 

  pf 2.4.5 and FRR bugs
  • yon 0  

  1
  0
  Votes
  1
  Posts
  57
  Views

  No one has replied

• I

  [Bug?]2.5.0-DEVELOPMENT (amd64) built on Sun May 03 23:56:0 snort-2.9.16 Inline IPS throttles Wireguard speed
  • iqjet  

  5
  0
  Votes
  5
  Posts
  120
  Views

  I

  I'm runing pfsense at a Intel(R) Core(TM) i5-5250U CPU. CPU load is low, RAM usage 23% out of 8GB. Google DNS is blocked. I use igb1. As I told, no problems without WG and full speed. WG natively runing on a Linux Mint 19.3 PC throttles the speed. Imho there is nothing wrong with Mode "Inline IPS" Edit Your requested results are in Snort.zip
• 

  Support for Edwards Curves
  • yon 0  

  1
  0
  Votes
  1
  Posts
  60
  Views

  No one has replied

• B

  Upgrade to 2.4.5 > 2.4.4-p3 SG-3100 ipv6 bogon list issue
  • behemyth  

  22
  0
  Votes
  22
  Posts
  632
  Views

  N

  @jimp said in Upgrade to 2.4.5 > 2.4.4-p3 SG-3100 ipv6 bogon list issue: It's reporting the size as it was when the page was loaded, apparently, and not what the calculated default for the system would be. That may be a bug, though it should probably report both. Well, it technically does report both in that it appropriately shows the value that was set when the page was loaded in the field where you can change the value. The bug would be that the display for the "default value" stated under the field is actually showing the currently set value.
• C

  crash reported.. can you tell me what happened?
  • comet424  

  10
  0
  Votes
  10
  Posts
  141
  Views

  C

  @virgiliomi ok thank you ill check it out.... I appreciate it... due to no work.. I cant afford anything,... and people hoarding food and the damn toilet paper... I appreciate it and ill check it out (:
• T

  Refactoring: create a wrapper Object or duplicate code?
  • tm_an  

  4
  0
  Votes
  4
  Posts
  51
  Views

  

  There aren't any plans to migrate from one to the other since they operate in much different ways.
• M

  Cert Manager Export Password
  • michaelschefczyk  

  12
  0
  Votes
  12
  Posts
  6989
  Views

  B

  @johnpoz said in Cert Manager Export Password: See the popup I showed where it says to look in profiles - did you miss that? It is a very valid point. It is easy to miss. But I haven't. Going back to the two things I have tried. If using the unencrypted p12 (which I know it is not meant to work): when I click on it, I see the pop up at the bottom saying that I have to go to my profiles to add it. If I go to general-->profiles I can see it there, I can click to install it, enter the pin code, and then I get stuck waiting for the password. But the p12 does get sent to profiles and an install can be attempted. when using the encrypted version, nothing happens when I click on the p12 file. When I say "nothing", I mean as if I had not touched the screen at all. No error, no "open with" menu, nothing. UPDATE: I have noticed that you used the Windows version of openssl. So just for the sake of it, I decided to install it and give it a shot. Surprisingly, it worked this time. Thinking that there can't be a difference between the two openssl, my head pointed towards the transfer between my raspbian and my Windows computer. Per default winscp transfers text file, and apparently doing this messed up the base64 and made it unusable for the encrypted version. After repeating the process with a binary transfer mode, I could import that encrypted p12 as well. So in the end, I could solve the problem and I hope this can help someone else. Thanks a lot @johnpoz for pointing me in the right direction. Without your screenshot I wouldn't have thought about looking into that and find the root-cause.
• T

  Get list of interface name, descriptions and ip address
  • trumee  

  4
  0
  Votes
  4
  Posts
  120
  Views

  

  Of course You already did. When you visit the console, you activated that script. ( maybe without knowing it )
• R

  (SOLVED) vnstatd Status Traffic Totals data collection daemon not loading
  solved • • ragnar00  

  6
  0
  Votes
  6
  Posts
  178
  Views

  H

  @ragnar00 Thank you. I found it.
• 

  2.4.5 Snapshots are Live
  • dennis_s  

  35
  1
  Votes
  35
  Posts
  2360
  Views

  L

  Jimp, I did the upgrade via shell command 13 I noticed, quick reading during startup scroll, package pecl-radius reinstall i think package net-socket same i think routing invallid argument After reboot and back in the gui pfSense is reporting 245 now just as it should be (was reporting 244 before, some halfway status) There is no error message on the dashboard. Louis
• L

  readline.so 0 bytes after upgrade
  • louis2  

  9
  0
  Votes
  9
  Posts
  262
  Views

  

  I split this off into its own thread so it doesn't take over the other one.
• B

  firewall rules are not applied after a reboot of firewall, the fix is reapply or run status filter reload
  • bcruze  

  6
  0
  Votes
  6
  Posts
  163
  Views

  B

  i replied in my other thread about the alias is fixed by reinstalling the firewall on my SG 3100 back to stable and not restoring ANYthing previously. entirely rebuilt from scratch i am now running sg 3100 on 2.4.4-RELEASE-p3 (arm) but have the same issue as i originally posted in this thread. on the stable release, i have spent hours on trying to figure this out. in reading on redmine https://redmine.pfsense.org/issues/6028 if i am reading this correctly this affects ALL versions of Pfense? i have been using Pfsense for the past 3-4 years and never experienced this. leads me to two things. is the image file for the sg 3100 contain issues my SG 4220 and SG 2220 did not have? because i have been using these same rules, and yesterday they were built from scratch not restored from a previous firewall.. if this is the bug i just need to know that so i understand its being worked on thank you Sir
• T

  This topic is deleted!
  • techpro2004  

  4
  0
  Votes
  4
  Posts
  62
  Views
• G

  Anchors not processing
  • gidotop  

  3
  0
  Votes
  3
  Posts
  86
  Views

  G

  So a good example would be something like this: pfctrl -sr currently prints out the rule set and userrules anchor (anchor "userrules/*" all) is empty. I have confirmed with a pfctrl -a userrules -sr which returns nothing. I then added the following: echo "pass in quick on em0 inet proto tcp from 192.168.1.7 to any port = 32400 flags S/SA keep state" | pfctl -a userrules -f - when I run pfctrl -a userrules -sr after this I get: pass in quick on em0 inet proto tcp from 192.168.1.7 to any port = 32400 flags S/SA keep state The rule doesn't work though and it doesn't display with a pfctrl -sr either. I can't see what I am specifying wrong, I have tried calling the anchor with and with out the /* in quotes a few times and it places the new rule under the userrules anchor as displayed with pfctl -a userrules -sr each time. I can clear it with pfctl -a userrules -Fr as well. Given this example can you see where I have gone astray? Thank you for your help.
• T

  2.4.5 bugs?
  • techpro2004  

  8
  0
  Votes
  8
  Posts
  434
  Views

  

  It's not ready. /EOT. Again.
• S

  /usr/local/sbin/pfSense-upgrade deletions
  • skogs  

  15
  0
  Votes
  15
  Posts
  579
  Views

  

  See above, that is not the recommended procedure. Locking this, it's been solved already.
• T

  (SOLVED)pfSense 2.5.0 and 2.4.5 confusion
  • tman904  

  12
  0
  Votes
  12
  Posts
  677
  Views

  T

  Thank you, I'll keep that in mind for future. I understand why I had confusion and the replies have helped clear it up for me. Again thank you Jim and everyone that helped.
• 

  pfSense-upgrade -6 pfSense-upgrade: Command not found.
  • yon 0  

  2
  0
  Votes
  2
  Posts
  118
  Views

  

  https://forum.netgate.com/topic/150930/usr-local-sbin-pfsense-upgrade-deletions/9
• C

  PHP Crash Reporter on upgrading to 2.4.5
  • cobhc  

  3
  0
  Votes
  3
  Posts
  111
  Views

  C

  @jimp Thank you!
• K

  Problem with OpenVPN and Dynamic DNS
  • k625  

  2
  0
  Votes
  2
  Posts
  102
  Views

  K

  Today I updated pfsense to the version "2.4.5-RC (amd64) built on Thu Feb 27 00:05:35 EST 2020" and the problem with Dynamic DNS is gone. Thanks!
• T

  how can i fix this error in he process of building source code
  • Tewodros  

  6
  0
  Votes
  6
  Posts
  147
  Views

  T

  @jimp i try to to customize the code for my Owen purpose still it don't run after i gate the code
• S

  Few CSS Changes and Traffic Graph
  • sbwcws  

  2
  1
  Votes
  2
  Posts
  163
  Views

  S

  It has a well view, what did you use to improve your traffic graph? I still have some problems with and even more when I try to upgrade my Ip man is such horrible haha. I like you css style, well done bro!
• G

  I can not update the pfsense fix
  • Grapeape22  

  7
  0
  Votes
  7
  Posts
  209
  Views

  S

  I didn't get an error message, but bumping from 0221.1500 to 0225.2100 took me a solid 30 minutes. Not quite sure what the hold up was.
• S

  Clarification on Builds?
  • skogs  

  3
  1
  Votes
  3
  Posts
  131
  Views

  

  They are on a timer now and not triggered by any specific change as before. Keep an eye on Github and Redmine and see if anything interesting changed between what you have and the current one.
• S

  Obfuscated OpenSSH for remote access? The greatest invention since sliced cheese!
  • specomp  

  3
  0
  Votes
  3
  Posts
  109
  Views

  

  If it makes it into OpenSSH sshd in the base system FreeBSD, perhaps. But doubtful.
• D

  This topic is deleted!
  • davidjonny  

  1
  0
  Votes
  1
  Posts
  10
  Views

  No one has replied

• 

  export p12 pfsense crash report
  • kiokoman  

  1
  0
  Votes
  1
  Posts
  43
  Views

  No one has replied

• 

  pf 2.4.5 need add ecdsa Certificates support
  • yon 0  

  2
  0
  Votes
  2
  Posts
  150
  Views

  

  No. It's in 2.5.0, but won't be copied back to 2.4.5. It's too late and the changes required for that are too large. (And IIRC it may also require PHP 7.3 and OpenSSL 1.1.1 for some parts, but I might be misremembering that).
• G

  Is this a real update or a fake update
  • Grapeape22  

  6
  0
  Votes
  6
  Posts
  280
  Views

  

  We're working on migrating the builds over to a new coordinated system that is not only faster but will have consistent timestamps for everything across all builds that start at the same time. It will trigger at set times, multiple times per day, rather than on demand as commits happen, but can still be set off manually if we want. Other than the timestamps being more "even" in most cases, it should be transparent to users. The timestamp on the individual images will be when the entire build run starts and not necessarily when that kernel build timestamp happens.
• S

  PHP warning
  • skogs  

  5
  0
  Votes
  5
  Posts
  166
  Views

  

  I think we found/fixed most of those unquoted strings some time ago, but there is always a possibility that more are lurking. The <shaper> section wouldn't show what the wizard had in it that led to the original error, but if you look in <ezshaper> that holds the wizard data.
• G

  I have the issue with the squid
  • Grapeape22  

  6
  0
  Votes
  6
  Posts
  87
  Views

  S

  I'm not trying to be disrespectful friend, just you didn't mention whether it was running or functional afterward, nor an actual complete error line so hard to start troubleshooting. :) Finding out if it starts properly from the webconfigurator after full up compared to at startup can potentially be a valid troubleshooting step that would lead to the cause. edit: Just built fresh 2.4.4_release-p3 vm and installed full squid package. As far as I can tell, every single edit to the squid configs generates a similar line in the logs. Restarting the machine also puts one in the log every single time. Tested the blocking function with the clam functions and with another vm successfully blocked the eicar test file... While I cannot confirm or deny that the line is or is not an error, I think I can confirm that it existed before the 2.4.5 development freeze and that it has zero impact on functionality and probably not a blocker. edit#2: To clarify OP and my ???? in response the actual log line from normal config edits: php-fpm 766 /pkg_edit.php: [squid] - squid_resync function call pr: bp: rpc:no and php-fpm 767 /pkg_edit.php: [squid] - squid_resync function call pr: bp: rpc:no Actual log line from normal bootup: php-fpm 339 /rc.start_packages: [squid] - squid_resync function call pr: bp: rpc:no
• T

  How about now?
  • techpro2004  

  4
  0
  Votes
  4
  Posts
  186
  Views

  

  You'll know it's ready when the release is announced.