this is exactly what i ended up doing, i kept having odd problems when trying to use bools, thanks for the feedback

@tsmalmbe @netblues Thanks. I'm not in charge of configuring the actual host system or hypervisor, so I likely can't do that.
But it's very useful to know this exists for future reference, and maybe the hosting provided can use this, too.

https://forum.netgate.com/category/30/bounties good luck.

Nope, that's up to FreeBSD. It looks pretty far down their Python todo list, though.

Yes, I am compiling 2.4.4.
I keep getting an error when building iso file. I have change the product name, so some strange errors comes up. I have set poudriere up, I've built the jail, ports and kernel, but when I try to build the iso file, I get error message.

@jimp
you are right
you command ( chflags noschg ) fixed it
now i could run ( rm -rf /usr/local/etc/c-icap/ )
thanks alot for your support

If you suspect a vulnerability in pfSense, a public forum is not a place to post about it. See https://www.pfsense.org/security/ and follow the correct procedure for responsible disclosure.

Most of that seems pretty mundane. The SSL/TLS warnings must be talking about OpenVPN or something else. The GUI uses 4096 DH parameters by default, and the default GUI cert uses SHA256.

The detection in that last thing is quite broken somehow. Shellshock? That was fixed years ago. That OSVDB-112004 entry is also for Apache, and pfSense uses nginx. Maybe you have that port forwarded into something else?

I find smokeping easier to use, and I use it to track several targets besides my gateway. Also and more importantly, I run it at home where I don't have pfSense as my router.

(wrote this while I was tinkering so the end result is I found the issue. )

Thats what it looks like.. Logged in as Admin I can do everything.

Just updated to latest snap. This is on bare metal..

Save config permission denied by the 'User - Config: Deny Config Write' permission for user 'usernamehere@2x.xx.xxx.xxx (Local Database)'.

I have two users and they are both part of the admin group. admin and my user name.. Still occurs.

Just made a new user name and same issue.

Ok.. found it. I had selected every rule without reading them all. Second one down.. User- Config: Deny Config Write

Seems backwards compared to the rest of the "allow rules" and does not affect the "admin" account as it does the others..

Same here, all my C3000 SoC boxes are working fine with 2.4.4 release except there are no AltQ, as far as I understand ixgbe supports ALTQ in FreeBSD supported NICs, what could be done about that? I also noticed that the release is using 3.2.12-k, when the latest version on Intel site now is 3.3.6

@msdisatis said in Make a PHP MVC Frontend for pfSense:

How do I port pfSense PHP extensions into python

Depends on what you mean by extensions. If you mean the PHP modules, you wouldn't. You'd find equivalent python libraries. If you mean the pfSense PHP module, that would have to be rewritten in something compatible with Python. If you mean packages, then that would be like rewriting any other part in another language.

If you drop the file in as-is then it could be run by anyone without logging in, which would be a giant security hole.

Anything you want to do could probably be done with enough coding, but if you want to do it securely, then you should look at similar pages from the GUI and other packages and look at what they have in common. If you include the standard set of required files it will do auth and other things for you automatically. At a minimum you'll need the require lines, plus other parts like head.inc and foot.inc and the same basic page structure with panels and such.

I use TortoiseGIT (on Windows) to do my git stuff..
And am using 'NetBeans' to make changes to my local copy of the repository. Upon saving a file it gets uploaded automatically to my pfSense test box. Other than that, its pretty similar. To your workflow..

Git-Sync the latest pfSense master repo to local filesystem. Make edits / save / test Commit changes to a new branch Push branch to my github repo Submit a PR

The nice thing about NetBeans is that knows the complete 'project' and offers completion of function names and some basic validation of code and variables used..

Thanks! https://redmine.pfsense.org/issues/8976

Hi Jimp.

That reference clarify all. I did not know that the example code was only to make the point about the kind of existing coding and was not the final one.

Thanks for your time and explanations. Sorry for having bothered you all. It is clear that you know what you do :-).

Regards.