Bug #1906
closed
Dashboard: Incorrect evaluation of needed upgrade
0%
Description
One of my firewalls, has 2 WANs conifgure. WAN port appears to have ICMP accees to the internet but not http. On the 2.0-RELEASE dashboard, the following dashboard message is displayed: Update available. Click Here to view update.
Clicking on the link, the following is displayed on the screen:
Downloading new version information...done
Obtaining current version information...done
\n\n\n\n\n\n
\n \n \n \n \n
\n\n\n \n \n
\n\n
We are unable to connect you to your Optimum Online service.
Please click here for additional instructions.\n\n
No podemos conectarte con tu servicio Optimum Online.
Favor haz click aquí para instrucciones adicionales.\n\n \n\n\n
\n\n
Do not add this page to your browser’s “favorites” list. \n
No incluyas esta página en la lista de “Favoritos” de tu browser.\n
\n
© Copyright CSC Holdings, Inc.\n\n\n
\n\n\n \n\n\n\n Update source: http://updates.pfsense.org/_updaters\n"; this.document.forms0.output.scrollTop = this.document.forms0.output.scrollHeight;
Updated by Jim Pingle almost 14 years ago
- Status changed from New to Rejected
You have a proxy or portal in front of that WAN. It's printing what it got back from the remote server, in this case, an error message from their portal/proxy.
If it's a proxy, enter the proxy info in the advanced settings. If it's a portal, then you probably can't use that WAN as your default gateway effectively. Either way, not a bug in pfSense.
Updated by Alex Vergilis almost 14 years ago
There's no proxy. Either way the upgrade message is not valid and should be corrected. The html parsing failed also. You do not think that it should be corrected?
Updated by Jim Pingle almost 14 years ago
The expected file is plain text, not html, so it's not parsed on purpose. If it was allowed through your browser would try to render it and it could be a security issue.
Updated by Alex Vergilis almost 14 years ago
Sorry. I did not want you troubleshoot my install. I guess what I was trying to say is that you should validate input instead of putting out false messages to firewall operators and displaying malformed html.
Perhaps the message should say something like "Unable to retrieve update information", instead of "Update Available"
And when clicking on the main screen, display a similar message, and tell the firewall operator to read the logs for details.
What do you think?
Updated by