pfSense CE 2.5.2-RELEASE Now Available
We are excited to announce the release of pfSense Community Edition (CE) software version 2.5.2, now available for new installations and upgrades! Read our blog post for more information.
This version of pfSense CE software includes:
- WireGuard can now be installed as an experimental add-on package
- Additional hardware support
- Fixes for AES-NI encryption
- 50+ bug fixes and other minor improvements
For more details, see the Release Notes and Redmine.
Due to the significant nature of the changes in this upgrade, warnings and error messages are likely to occur while the upgrade is in process. In particular, errors from PHP and package updates may be observed on the console and in logs. In nearly all cases these errors are a harmless side effect of the inconsistent state of the system during the upgrade from changes in the operating system, libraries, and PHP versions. Once the upgrade completes, the system will be in a consistent state again. Only errors which persist after the upgrade are significant.
Always take a backup of the firewall configuration prior to any major change to the firewall, such as an upgrade.
Do not update packages before upgrading! Either remove all packages or do not update packages before running the upgrade.
The upgrade will take several minutes to complete. The exact time varies based on download speed, hardware speed, and other factors such as installed packages. Be patient during the upgrade and allow the firewall enough time to complete the entire process. After the update packages finish downloading it could take 10-20 minutes or more until the upgrade process ends. The firewall may reboot several times during the upgrade process. Monitor the upgrade from the firewall console for the most accurate view.
If the update check fails, or the update does not complete, run pkg install -y pfSense-upgrade to ensure that pfSense-upgrade is present.
Consult the Upgrade Guide for additional information about performing upgrades to pfSense software.
Thank you for 2.5.2 CE!
Thanks, flawless upgrade.
did the pfSense CE 2.5.2 update for 20+ systems. Most of them are OK, but the following findings:
- IPSec dashboard:
works but shows number for active and/or inactive tunnels as 0/1 instead of true count.
- "IPSec Status/Overview" connection control
if I install a fresh 2.5.2 system and did a reload/restore of a configuration having 23 Ipsec tunnels, then the "IPSec Status/Overview" did not enumerate IPsec ID and none of the tunnels work.
- Using IPsec(vti) the Gateway dashboard of the monitored gateway endpoint item shows "Offline, Packetloss" after upgrade, but connection is fine (false negative).
All that was fine with 2.5.1 before.
Hope I am not alone with that ...
- IPSec dashboard:
Igor Filth last edited by
I have the same problems
tecnoconsulta last edited by
@jwg014 Same here.
jean-francois last edited by
Sorry guys, but the new kernel module RTL8153 is unstable.
I own a Thinkpad USB adaptor and used it for months/years with the usual usbconfig & set_config line earlyshellcmd in config.xml. It was rocket stable to load standard ure driver and working several months without reboot (90 days before the latest upgrade!).
However, since upgrading to 2.5.2 the new kernel module, the network adaptor stops working after for 1 or 2 days. Link indicators are still blinking on the adaptor, but interface is down in the interface status page and console shoes no IP adress. The funny point is that existing TCP (VPN for example) connections are still working! If I unplug/plug RJ45 or USB, it doesn’t change anything and pfSense cannot reassign an DHCP IP adress.
After a reboot, network is back up and working fine... but stops working again after a few days without any reason. Honestly, I would really hope for the driver to be removed so that I can use again ure module manually without any issue.