If you suspect a vulnerability in pfSense, a public forum is not a place to post about it. See https://www.pfsense.org/security/ and follow the correct procedure for responsible disclosure.

Most of that seems pretty mundane. The SSL/TLS warnings must be talking about OpenVPN or something else. The GUI uses 4096 DH parameters by default, and the default GUI cert uses SHA256.

The detection in that last thing is quite broken somehow. Shellshock? That was fixed years ago. That OSVDB-112004 entry is also for Apache, and pfSense uses nginx. Maybe you have that port forwarded into something else?

I find smokeping easier to use, and I use it to track several targets besides my gateway. Also and more importantly, I run it at home where I don't have pfSense as my router.

(wrote this while I was tinkering so the end result is I found the issue. )

Thats what it looks like.. Logged in as Admin I can do everything.

Just updated to latest snap. This is on bare metal..

Save config permission denied by the 'User - Config: Deny Config Write' permission for user 'usernamehere@2x.xx.xxx.xxx (Local Database)'.

I have two users and they are both part of the admin group. admin and my user name.. Still occurs.

Just made a new user name and same issue.

Ok.. found it. I had selected every rule without reading them all. Second one down.. User- Config: Deny Config Write

Seems backwards compared to the rest of the "allow rules" and does not affect the "admin" account as it does the others..

Same here, all my C3000 SoC boxes are working fine with 2.4.4 release except there are no AltQ, as far as I understand ixgbe supports ALTQ in FreeBSD supported NICs, what could be done about that? I also noticed that the release is using 3.2.12-k, when the latest version on Intel site now is 3.3.6

@msdisatis said in Make a PHP MVC Frontend for pfSense:

How do I port pfSense PHP extensions into python

Depends on what you mean by extensions. If you mean the PHP modules, you wouldn't. You'd find equivalent python libraries. If you mean the pfSense PHP module, that would have to be rewritten in something compatible with Python. If you mean packages, then that would be like rewriting any other part in another language.

If you drop the file in as-is then it could be run by anyone without logging in, which would be a giant security hole.

Anything you want to do could probably be done with enough coding, but if you want to do it securely, then you should look at similar pages from the GUI and other packages and look at what they have in common. If you include the standard set of required files it will do auth and other things for you automatically. At a minimum you'll need the require lines, plus other parts like head.inc and foot.inc and the same basic page structure with panels and such.

I use TortoiseGIT (on Windows) to do my git stuff..
And am using 'NetBeans' to make changes to my local copy of the repository. Upon saving a file it gets uploaded automatically to my pfSense test box. Other than that, its pretty similar. To your workflow..

Git-Sync the latest pfSense master repo to local filesystem. Make edits / save / test Commit changes to a new branch Push branch to my github repo Submit a PR

The nice thing about NetBeans is that knows the complete 'project' and offers completion of function names and some basic validation of code and variables used..

Thanks! https://redmine.pfsense.org/issues/8976

Hi Jimp.

That reference clarify all. I did not know that the example code was only to make the point about the kind of existing coding and was not the final one.

Thanks for your time and explanations. Sorry for having bothered you all. It is clear that you know what you do :-).

Regards.

Just wanted to let you know, I just tried this on PR#3989 (which was previously 2 commits) and I was able to squash it! Worked great.

I will try it tomorrow.
I was moving the modem to another location, so I had to connect a longer cable.
I connected and disconnected wan port several times and at one point connected the wrong cable too (IPMI cable).
So, it might have been one of those rare bugs that are hard to reproduce.
igb3 is my wan port.

Yes, same configuration, binary from 2.4.3 works and binary from 2.4.4 does not want to work.

I will open an issue.

Thx! :)

Thanks, my eye usually drifts to the 0-->100% bar since it's nice and green 🌴
I'll be better next time

@grimson said in Translation (i18n):

You need glasses:

Thanks - no need for the snark.

oops, thought I had looked for this. my bad

There is zero difference in an update triggered by the GUI and one triggered from the console. The same process is run in either case.

I just pushed a fix for that squidGuard PHP error though, it was definitely a problem.

@mohamednasr I am 100% positive that things are missing in this script, and just to test it I followed the steps, and it indeed did NOT work AT ALL...

Perhaps you can revisit this and verify what parts are missing? I can identify at least missing back-quotes (`) around the date section and the setting of $REMOTECONFIG, but somewhere, somehow the backup itself also need to be made, I think?

It's a development version, so write a bug report on redmine.