2.4.4-p3 New Features and Changes

pfSense® software version 2.4.4-p3 addresses security and other issues found in 2.4.4-p2.


For those who have not yet updated to 2.4.5-p1, consult the previous release notes and blog posts for those releases to read all important information and warnings before proceeding.


The upcoming pfSense release version 2.5.0 deprecates the built-in load balancer, and all related code has been removed as it is not compatible with FreeBSD 12. Plan migrations to alternate solutions such as the HAProxy package now.

See the 2.5.0 release notes for more information.

Security / Errata

Backup / Restore

  • Fixed issues with output buffering causing configuration backup download failures #9390

  • Fixed automatic package reinstallation after restoring config.xml from the installer #9214

  • Force <enableserial> when restoring a backup on a device with serial only console


  • Added missing countries from CA list on certificate pages #9308

  • Fixed an error when adding a new user and choosing to generate a certificate #9317


  • Fixed input validation on diag_dns.php to allow a trailing dot on hostnames #9276

  • Removed non-functional tools links from diag_dns.php #9275

  • Fixed rewriting of the DNS Resolver file remotecontrol.conf if it is present but empty #9470

Firewall Rules / NAT / Aliases

  • Fixed intermittent pf errors when NAT reflection is enabled #9446

  • Fixed reserved pf keyword matching when creating and editing aliases #9231

  • Fixed duplicate entries showing on diag_tables.php from lockout tables #9359

  • Fixed a PHP error deleting an imported NAT rule with no firewall rules present #9193

  • Do not show scheduler icon when scheduler tag is empty

Gateways / Routing

  • Fixed issues with the default IPv4 gateway set to a group failing after restart #9004


  • Fixed PHP error from interface groups when editing QinQ entries


  • Fixed IPsec Phase 1 entries on upgrade to have their protocol field populated properly #9207

Operating System

  • Fixed support for ZFS encrypted+mirrored swap #9281

  • Fixed problems saving crash dumps when /var is a RAM disk #9409

Traffic Shaping

  • Fixed a PHP error when loading a limiter that does not exist #9313

  • Fixed limiter selection validation

  • Fixed Queues menu items ending with “:” in certain languages #8970


  • Numerous optimizations and improvements for status.php diagnostics output #9290

  • Fixed a PHP error on system_advanced_network.php when disabling “IPv6 over IPv4 Tunneling” #9264

  • Improved handling of large captures on diag_packet_capture.php and disabled viewing of captures larger than 50MiB. #9239

  • Added hostname to login page title if the user has enabled Show hostname on login banner #9096

  • Centralized the list of country codes used by multiple areas #9308

  • Updated translation files


  • Clarified conditions for synchronizing certificates in HA Sync options #9283