Subcategories

  • Discussions about snapshots for pfSense Plus 25.11

    18 Topics
    112 Posts
    H
    Boot verification failed for default_20240506115436. Netgate pfSense Plus was automatically rebooted back into default_20240506115436_20251112000214. @ 2025-11-12 00:05:41 Crash report begins. Anonymous machine information: amd64 16.0-CURRENT FreeBSD 16.0-CURRENT #20 plus-RELENG_25_11-n256491-a459b76736d0: Tue Oct 28 18:48:31 UTC 2025 root@pfsense-build-release-amd64-1.eng.atx.netgate.com:/var/jenkins/workspace/pfSense-Plus-snapshots-25_11-main/obj/amd64/mjYGPXLl/var/jenkins/workspace/pfSe Crash report details: No PHP errors found. Filename: /var/crash/info.0 Dump header from device: /dev/ada0p2 Architecture: amd64 Architecture Version: 4 Dump Length: 247296 Blocksize: 512 Compression: none Dumptime: 2025-11-12 00:04:41 -0500 Hostname: pfSense.localdomain Magic: FreeBSD Text Dump Version String: FreeBSD 16.0-CURRENT #0 plus-RELENG_25_11-n256495-95f1c5bfa8f0: Tue Nov 11 21:02:30 UTC 2025 root@pfsense-build-release-amd64-2.eng.atx.netgate.com:/var/jenkins/workspace/pfSense-Plus-sn Panic String: page fault Dump Parity: 1310204002 Bounds: 0 Dump Status: good Filename: /var/crash/textdump.tar.0 ddb.txt���������������������������������������������������������������������������������������������0600����0�������0�������625056������15105012551� 7110� �����������������������������������������������������������������������������������������������������ustar���root����������������������������wheel������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������db:0:kdb.enter.default> run pfs db:1:pfs> bt Tracing pid 93086 tid 100303 td 0xfffff800112c9000 kdb_enter() at kdb_enter+0x33/frame 0xfffffe00d3bb1640 panic() at panic+0x43/frame 0xfffffe00d3bb16a0 trap_pfault() at trap_pfault+0x3c9/frame 0xfffffe00d3bb16f0 calltrap() at calltrap+0x8/frame 0xfffffe00d3bb16f0 --- trap 0xc, rip = 0xffffffff81045d15, rsp = 0xfffffe00d3bb17c0, rbp = 0xfffffe00d3bb1800 --- pfi_kkif_update() at pfi_kkif_update+0x15/frame 0xfffffe00d3bb1800 pfi_kkif_update() at pfi_kkif_update+0x20a/frame 0xfffffe00d3bb1850 pfi_ifaddr_event() at pfi_ifaddr_event+0x82/frame 0xfffffe00d3bb18a0 srcaddr_change_event() at srcaddr_change_event+0xa7/frame 0xfffffe00d3bb1910 in6_update_ifa() at in6_update_ifa+0xd52/frame 0xfffffe00d3bb1a90 in6_addifaddr() at in6_addifaddr+0x7f/frame 0xfffffe00d3bb1b60 in6_control_ioctl() at in6_control_ioctl+0x7e1/frame 0xfffffe00d3bb1bd0 ifioctl() at ifioctl+0x8b0/frame 0xfffffe00d3bb1cd0 kern_ioctl() at kern_ioctl+0x255/frame 0xfffffe00d3bb1d40 sys_ioctl() at sys_ioctl+0x117/frame 0xfffffe00d3bb1e00 amd64_syscall() at amd64_syscall+0x126/frame 0xfffffe00d3bb1f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00d3bb1f30 --- syscall (54, FreeBSD ELF64, ioctl), rip = 0x823d91f8a, rsp = 0x820511e88, rbp = 0x820511f80 --- db:1:pfs> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xd232e969f628fa3 rdx 0x3f8 rbx 0x100 rsp 0xfffffe00d3bb1518 rbp 0xfffffe00d3bb1640 rsi 0xfffffe00d3bb13d0 rdi 0x4 r8 0x37625dc56d r9 0xfffff800112c9000 r10 0xfffffe00d3bb1400 r11 0xcedfc2df9afff59c r12 0 r13 0xfffff800061f67a8 r14 0xffffffff8147667e r15 0xfffff800112c9000 rip 0xffffffff80d92e33 kdb_enter+0x33 rflags 0x86 kdb_enter+0x33: movq $0,0x1b3e052(%rip) db:1:pfs> show pcpu cpuid = 3 dynamic pcpu = 0xfffffe0099144d80 curthread = 0xfffff800112c9000: pid 93086 tid 100303 critnest 1 "dhcp6c" curpcb = 0xfffff800112c9550 fpcurthread = 0xfffff800112c9000: pid 93086 "dhcp6c" idlethread = 0xfffff800057e8000: tid 100006 "idle: cpu3" self = 0xffffffff83813000 curpmap = 0xfffff8001127a358 tssp = 0xffffffff83813384 rsp0 = 0xfffffe00d3bb2000 kcr3 = 0x800000040fab54ae ucr3 = 0x800000040fab6cae scr3 = 0x40fab6cae gs32p = 0xffffffff83813404 ldt = 0xffffffff83813444 tss = 0xffffffff83813434 curvnet = 0xfffff800041f3f00 db:1:pfs> run lockinfo db:2:lockinfo> show locks No such command; use "help" to list available commands db:2:lockinfo> show alllocks No such command; use "help" to list available commands db:2:lockinfo> show lockedvnods Locked vnodes db:1:pfs> acttrace Tracing command intr pid 12 tid 100045 td 0xfffff80005808780 (CPU 2) cpustop_handler() at cpustop_handler+0x27/frame 0xfffffe001b76def0 ipi_nmi_handler() at ipi_nmi_handler+0x38/frame 0xfffffe001b76df00 nmi_handle_intr() at nmi_handle_intr+0xf/frame 0xfffffe001b76df20 nmi_calltrap() at nmi_calltrap+0x8/frame 0xfffffe001b76df20 --- trap 0x13, rip = 0xffffffff80d94792, rsp = 0xfffffe00d36de9a8, rbp = 0xfffffe00d36dea30 --- lock_delay() at lock_delay+0x12/frame 0xfffffe00d36dea30 _rm_rlock_hard() at _rm_rlock_hard+0x3aa/frame 0xfffffe00d36dea60 pf_test() at pf_test+0x1b2/frame 0xfffffe00d36ded30 pf_check_in() at pf_check_in+0x33/frame 0xfffffe00d36ded60 pfil_mbuf_in() at pfil_mbuf_in+0x38/frame 0xfffffe00d36ded90 ip_input() at ip_input+0x3a1/frame 0xfffffe00d36dedf0 swi_net() at swi_net+0x128/frame 0xfffffe00d36dee60 ithread_loop() at ithread_loop+0x239/frame 0xfffffe00d36deef0 fork_exit() at fork_exit+0x7b/frame 0xfffffe00d36def30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe00d36def30 --- trap 0xb0580629, rip = 0xda0e5fc40c0785ec, rsp = 0xfe26d2b689a0ceed, rbp = 0xd7162d14f6daff0d --- Tracing command intr pid 12 tid 100046 td 0xfffff80005808000 (CPU 1) cpustop_handler() at cpustop_handler+0x27/frame 0xfffffe001b75eef0 ipi_nmi_handler() at ipi_nmi_handler+0x38/frame 0xfffffe001b75ef00 nmi_handle_intr() at nmi_handle_intr+0xf/frame 0xfffffe001b75ef20 nmi_calltrap() at nmi_calltrap+0x8/frame 0xfffffe001b75ef20 --- trap 0x13, rip = 0xffffffff80d94792, rsp = 0xfffffe00d36d99a8, rbp = 0xfffffe00d36d9a30 --- lock_delay() at lock_delay+0x12/frame 0xfffffe00d36d9a30 _rm_rlock_hard() at _rm_rlock_hard+0x3aa/frame 0xfffffe00d36d9a60 pf_test() at pf_test+0x1b2/frame 0xfffffe00d36d9d30 pf_check_in() at pf_check_in+0x33/frame 0xfffffe00d36d9d60 pfil_mbuf_in() at pfil_mbuf_in+0x38/frame 0xfffffe00d36d9d90 ip_input() at ip_input+0x3a1/frame 0xfffffe00d36d9df0 swi_net() at swi_net+0x128/frame 0xfffffe00d36d9e60 ithread_loop() at ithread_loop+0x239/frame 0xfffffe00d36d9ef0 fork_exit() at fork_exit+0x7b/frame 0xfffffe00d36d9f30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe00d36d9f30 --- trap 0, rip = 0, rsp = 0x80018, rbp = 0xfffff80102b7ab40 --- ??() at 0/frame 0xfffff80102b7ab40 Tracing command pfctl pid 2223 tid 100272 td 0xfffff80011247000 (CPU 0) cpustop_handler() at cpustop_handler+0x27/frame 0xffffffff8294c080 ipi_nmi_handler() at ipi_nmi_handler+0x38/frame 0xffffffff8294c090 nmi_handle_intr() at nmi_handle_intr+0xf/frame 0xffffffff8294c0b0 nmi_calltrap() at nmi_calltrap+0x8/frame 0xffffffff8294c0b0 --- trap 0x13, rip = 0x26bc57e1fff9, rsp = 0x26bc545c9f40, rbp = 0x26bc545c9f50 --- Tracing command dhcp6c pid 93086 tid 100303 td 0xfffff800112c9000 (CPU 3) kdb_enter() at kdb_enter+0x33/frame 0xfffffe00d3bb1640 panic() at panic+0x43/frame 0xfffffe00d3bb16a0 trap_pfault() at trap_pfault+0x3c9/frame 0xfffffe00d3bb16f0 calltrap() at calltrap+0x8/frame 0xfffffe00d3bb16f0 --- trap 0xc, rip = 0xffffffff81045d15, rsp = 0xfffffe00d3bb17c0, rbp = 0xfffffe00d3bb1800 --- pfi_kkif_update() at pfi_kkif_update+0x15/frame 0xfffffe00d3bb1800 pfi_kkif_update() at pfi_kkif_update+0x20a/frame 0xfffffe00d3bb1850 pfi_ifaddr_event() at pfi_ifaddr_event+0x82/frame 0xfffffe00d3bb18a0 srcaddr_change_event() at srcaddr_change_event+0xa7/frame 0xfffffe00d3bb1910 in6_update_ifa() at in6_update_ifa+0xd52/frame 0xfffffe00d3bb1a90 in6_addifaddr() at in6_addifaddr+0x7f/frame 0xfffffe00d3bb1b60 in6_control_ioctl() at in6_control_ioctl+0x7e1/frame 0xfffffe00d3bb1bd0 ifioctl() at ifioctl+0x8b0/frame 0xfffffe00d3bb1cd0 kern_ioctl() at kern_ioctl+0x255/frame 0xfffffe00d3bb1d40 sys_ioctl() at sys_ioctl+0x117/frame 0xfffffe00d3bb1e00 amd64_syscall() at amd64_syscall+0x126/frame 0xfffffe00d3bb1f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00d3bb1f30 --- syscall (54, FreeBSD ELF64, ioctl), rip = 0x823d91f8a, rsp = 0x820511e88, rbp = 0x820511f80 --- db:1:pfs> ps If you need more I can upload the file since it's quite long.
  • Submitting PRs for packages in the pfSense/FreeBSD-ports repo?

    23
    0 Votes
    23 Posts
    2k Views
    jimpJ
    Ideally anything dealing with FreeBSD-ports should happen on a FreeBSD system at some point (either directly or in a secondary capacity) because then you have access to tools like portlint which can check the port structure to ensure it's complete and correct before committing changes, for example it will flag problems with the formatting or content of the Makefile.
  • Testing packages

    4
    0 Votes
    4 Posts
    1k Views
    jimpJ
    When the package is made properly, the pkg add will perform the exact same install procedure as the GUI would.
  • Query relating to privs.inc

    1
    0 Votes
    1 Posts
    449 Views
    No one has replied
  • Adding flexibility to dhcpd (code submitted)

    1
    0 Votes
    1 Posts
    554 Views
    No one has replied
  • Error Building 2.4.0 Kernel

    3
    0 Votes
    3 Posts
    1k Views
    C
    I also found myself with this problem, which I was able to fix with this fix : https://github.com/freebsd/freebsd/commit/6884a6e482ca6effa702761a1e3fa98bb6946c30#diff-49d9a861ee932d5b656eb20466f2a292 But other problems have occurred. :-[ I had not had this problem with the RC version, which it was in "FreeBSD 11.0", so I put a compilation environment under this version, and compilation to work. I therefore conclude that the development team forgot to add a "BRANCH RELENG_2_4_0" on this repository: https://github.com/pfsense/FreeBSD-src The "Main repository for pfSense" is also unusable because it refers to a "BRANCH" that is missing: https://github.com/pfsense/pfsense/blob/RELENG_2_4_0/tools/builder_defaults.sh#L108 Can someone tell us about this omission ? Thank you !
  • 802.11s status pfSense

    2
    0 Votes
    2 Posts
    1k Views
    jimpJ
    As far as I'm aware, we have no intention of adding any wifi features like that. AP features belong in an AP. FreeBSD is great, but it does not lend itself well to being an AP.
  • PFSense Image Azure CustomData

    1
    0 Votes
    1 Posts
    564 Views
    No one has replied
  • A short preview of the "3.0" CLI commands (/r/PFSENSE)

    3
    0 Votes
    3 Posts
    1k Views
    bmeeksB
    @biggsy: Thanks Bill but I'm not sure how it would be related to Squid.  However, I'm not a Squid user either so I could easily be wrong. I run this bgpctl command from a tiny PHP script called through an afterfilterchange shellcmd. It causes the BGP peer to resend all the currently blacklisted IPs, which are loaded into an Alias table referenced by a block rule on WAN.  It does this very, very quickly, too. The only reason for having to do all this is that the Alias table is not managed through the GUI, so it gets cleared on a rule change or reload. Of course, I have no reason to expect this won't be achievable in some other way under 3.0 but it is a very useful function of openbgpd. Sorry…just realized today that I posted my reply to the wrong thread ...  :-[ Bill
  • Squid UI proposal: Add input for blacklisting URLs in addition to domains

    1
    0 Votes
    1 Posts
    527 Views
    No one has replied
  • Cisco AnyConnect (server) support?

    5
    0 Votes
    5 Posts
    9k Views
    D
    If it was an optional package add-on, the GPL license doesnt taint the base at all. +1 to this. This guy brought it in via freebsd packages https://blog.dhampir.no/content/pfsense-as-a-cisco-anyconnect-vpn-client-using-openconnect
  • User Interface suggestion for improved visability

    1
    0 Votes
    1 Posts
    517 Views
    No one has replied
  • FauxAPI :: A REST API interface for pfSense to facilitate dev-ops

    6
    0 Votes
    6 Posts
    10k Views
    N
    FauxAPI has received an update to v1.1 In brief:- new API call alias_update_urltables - forces the immediate update of remote URL tables new API call gateway_status - returns the current status of the gateways updated documentation tested against pfSense 2.3.2 and 2.3.3 The package has received some great feedback and users deploying in complex large environments - enjoy, send feedback. N
  • MOVED: Configuracion de PFsense

    Locked
    1
    0 Votes
    1 Posts
    581 Views
    No one has replied
  • BUG: unbound/ PfblockerNG when enabling RAM disk

    3
    0 Votes
    3 Posts
    1k Views
    B
    I had the same issue until I increased my RAM disk size.  I think what happens is the file tries to write to the RAM disk but fails since it's out of space with the default size.  The setting is found under System/Advanced/Miscellaneous.  I increased mine to 512 MB's.  Since I have 8 or 16 gigs of RAM and have plenty to spare.
  • Custom index.html - Bandwidthd

    1
    0 Votes
    1 Posts
    616 Views
    No one has replied
  • Command line management - pfSense_API via PowerShell

    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • Tools Repo

    Locked
    50
    0 Votes
    50 Posts
    28k Views
    jimpJ
    The tools repo is no longer used. Everything needed to build current versions is in the public repositories on github. There is a reason this thread has not had any activity in years. Locking.
  • How to Build pfSense 2.3?

    21
    0 Votes
    21 Posts
    14k Views
    C
    I followed the detailed post above, its on the right path but the build script is clearly designed with obstacles. So if rename to pfSense it blocks the build. So then try to rename appropriate files from pfSense to nonSense since they dont distribute with that name in addition it tries to fetch packages from dead netgate url's. The showstopper is when renaming the 3 files in here to nonSense pfsense # ls /root/work/pfsense/pfsense/tmp/FreeBSD-src/release/conf/ pfSense_make.conf          ufw_installer_make.conf    ufw_recover_make.conf pfSense_src-env.conf      ufw_installer_src-env.conf ufw_recover_src-env.conf pfSense_src.conf          ufw_installer_src.conf    ufw_recover_src.conf Then running build.sh again, the build script itself renames them back to pfSense and then complains it cannot find the nonSense files, so its sabotaging itself. I blocked the script doing the sabotage by making the filles immune (root cannot even write/delete) chflags schg nonSense_* But now hitting repo clone errors. Since I only need to compile a custom kernel I might just try to compile the kernel in the traditional FreeBSD way, as I am only oing this to get a patched kernel to fix a nasty panic bug.
  • 0 Votes
    5 Posts
    2k Views
    M
    My method is automated, Even the people who connect to these remote devices in many cases dont know anything about linux, or security.  So with a bit or code i wrote, When you SSH to the SG-1000 it automatically redirects you into telnet to the proper device, no need to issue any telnet commands, etc.  You SSH, and its as if you have gone directly to the telnet device in question. The SG-1000 would also take the place of the firewalling of the crappy DSL Modems, as they could be put in transparent mode, and the pfsense then utilized for a much better firewalling solution and access control. It would be a simultaneous upgrade to the firewall, and the telnet device at the same time, as well as facilitating better security for any other devices connected in that location. My code supports tunneling each user account to a different telnet device, not just 1 telnet device.  So its flexible in its usage, and works on bigger models as well, such as SG-2220, and 2440.
  • Package question

    1
    0 Votes
    1 Posts
    783 Views
    No one has replied
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.