Activity
From 01/18/2017 to 02/16/2017
02/16/2017
-
04:54 PM Bug #7267 (Resolved): Status Traffic Totals - Stacked Bar - Scale not high enough
- On the Status / Traffic Totals, if you use Bar (Stacked) type, the vertical axis scale is only high enough for the TX...
-
05:33 AM Bug #7263: FreeRADIUS - complete lack of input validation
- Hopefully all done.
@Phil: You like to break this kind of things, in case you are bored. :P
02/15/2017
-
- https://github.com/pfsense/FreeBSD-ports/pull/308
(Work in progress ATM.) -
04:45 AM Bug #7263: FreeRADIUS - complete lack of input validation
- Well, it's not called "free" RADIUS for nothing - validation-free at least.
-
- No input validation whatsoever done anywhere. Nothing, zilch, nada...
02/14/2017
-
08:51 PM Bug #6404 (Resolved): FreeRADIUS Does Not Start After Upgrade
-
- Merged and working, can be closed.
-
02:44 PM Bug #6928 (Resolved): freeRADIUS, logging with "Access-Reject" not work in mysql table radpostauth
-
- Merged and working, can be closed.
-
-
- Works, can be closed.
02/13/2017
-
07:41 AM Feature #7189: Letsencrypt acme sync in HA environment
- Since the certs automatically sync between active and passive nodes, I am inclined to agree that acme should not be i...
02/10/2017
-
-
-
-
-
-
-
-
- Well it the update doesn't fix those, you should submit them upstream (or at least FreeBSD bugzilla).
-
11:26 AM Bug #7247: Update net/ntopng to 2.4.2017.01.20
- I have 3 recent coredumps saved - are these of any use to anyone for debugging or should I toss them?
-
- Attempting to fix the never ending core dumps with the current version. (Happens pretty much on any restart.)
02/09/2017
-
- Steve Wheeler wrote:
> I ran some tests with this and was unable to make it work. Adding 'route-to lo0' to the pass ... -
02:44 AM Feature #7221: ACME package : add standalone mode & specify port used
- Having the package automatically open/close ports 80 and 443 when issuing/renewing certificates would be great. I don...
02/08/2017
-
10:24 PM Bug #7190: pfSense-pkg-acme Bug - php errors on pages that list certificates when no LE Certs have been created yet (eg Cert. Manager - Certificates, OpenVPN - Servers)
- Jim Pingle wrote:
> PR was merged
Confirm fixed. -
- Added standalone HTTP and TLS options with configurable port.
A bind address isn't going to be viable at the momen... -
- Fixed in ACME 0.1.11 which was just pushed, you can now choose the key type and algorithm.
-
- Whole lot better indeed. ;)
!https://i.imgsafe.org/b65eeb532c.png! -
- Finally figured it out, fix is coming in 0.1.10 that I just pushed. Also made the box take up the whole width.
-
- That would be a better fit for a separate bug report. This formatting issue is enough of a PITA on its own.
-
- Yeah, I also failed to find any relevant code fix. LOL.
Also, the first row in the "Table" does not autoexpand the... -
- I've been looking at that but not having any luck so far. The code, by all appearances, should be taking up the whole...
-
- This one's so bad that I have no clue what to enter where.
!https://i.imgsafe.org/b3aab299c4.png! -
- Well yeah, the thing is not exactly simple readable code :D Being hidden wouldn't really be much of an issue if peopl...
-
- The input validation does need work but it's going to be rather complex to pull off. That should probably be a separa...
-
- Also, apparently there's lack of input validation here (i.e., at least those fields should be required so that people...
-
- In the Domain SAN list, the first row in the table does not auto-expand the fields with required settings. See screen...
-
07:38 AM Bug #6690: SURICATA IPS Issue - Kills VLANS & Traffic Shaper
- Kill Bill wrote:
> There's already #6023 for netmap + shaping.
"Shaping" is a hack that shouldn't have happened. -
- Steven Kreitzer wrote:
> Sandeep K V wrote:
> > Hi Steven Kreitzer and Jim Thompson isn't this the expected way the... -
- In general, I'd say people who wish to use Snort/Suricata as IPS should look into divert sockets instead. The netmap ...
-
03:59 AM Bug #7229: Package Manager Update "Suricata" failed
- Actually i copied the failure message from the one i've found in pfsense forum, but mine was very similar. Problem is...
02/07/2017
-
- PR was merged
-
04:15 PM Bug #7223: IPv4 Rules not working in Inline Mode
- That's very interesting to know that we are having similar issues Joe!
I hope that either this can be resolved or ... -
03:57 PM Bug #7223: IPv4 Rules not working in Inline Mode
- James Webb wrote:
> James Webb wrote:
> > Kill Bill wrote:
> > > Your own IP as in something from HOME_NET? Not ex... -
- James Webb wrote:
> Kill Bill wrote:
> > Your own IP as in something from HOME_NET? Not exactly useful test either.... -
- Kill Bill wrote:
> Your own IP as in something from HOME_NET? Not exactly useful test either. In general, taking sim... -
- Your own IP as in something from HOME_NET? Not exactly useful test either. In general, taking similar things to the f...
-
- Kill Bill wrote:
> Just to be clear here - If you are looking at the Blocks tab, that is NOT the place to look at wi... -
- Just to be clear here - If you are looking at the Blocks tab, that is NOT the place to look at with the inline mode.
-
- After adding the following rule to custom.rules:
@drop ip [108.74.97.21, 82.132.247.191] any <> $HOME_NET any (msg... -
- There is no such code in Suricata package. This is pkg(7) bug. Remove and reinstall the package.
-
- Error message while updating suricata to 3.1.2_2
Also happened from 3.0_7 to 3.0_8 (reported on pfsense forum: [[h...
02/06/2017
-
05:59 PM Bug #7211: DNS Made Easy ACME script not parsing domain IDs properly
- I tried applying that patch to the script on my pfSense install, and the ACME challenge process worked just fine afte...
-
04:34 PM Feature #7221: ACME package : add standalone mode & specify port used
- In acme.sh there are several options:
*Standalone mode:*
@acme.sh --issue -d aa.com --standalone --httpport 8... -
- Added the standalone mode, to be able to specify port used for the challenge and the possibility to automatically ope...
-
- Fixed in acme pkg version 0.1.8 which will be available shortly
-
- Pushed a fix for this in acme pkg version 0.1.7, will be available shortly.
-
07:34 AM Feature #7220: ACME client port and service config
- Jim Pingle wrote:
> That's a security limitation of Let's Encrypt. Nothing we can do about it.
>
> https://commun... -
- That's a security limitation of Let's Encrypt. Nothing we can do about it.
https://community.letsencrypt.org/t/let... -
- Hi, any way to configure a port of the http server, i dont use 80 or 443 and is not possible to active letsencrypt.
-
07:31 AM Bug #1620: Can't use transparent proxy when using bridge.
- I ran some tests with this and was unable to make it work. Adding 'route-to lo0' to the pass rule did not allow this ...
-
- There are several assumptions that had to be made there for the time being to get it working in a basic fashion (key ...
-
02/05/2017
-
11:49 PM
Bug #7218: acme_inc.sh hard codes 'HMAC-MD5.SIG-ALG.REG.INT' for nsupdate key types
- The file is acme_sh.inc not acme_inc.sh.
-
11:47 PM
Bug #7218 (Resolved): acme_inc.sh hard codes 'HMAC-MD5.SIG-ALG.REG.INT' for nsupdate key types
- 'HMAC-MD5.SIG-ALG.REG.INT' is hardcoded in acme_inc.sh so that is the only type of key that can be used for dns-nsupd...
-
- That isn't possible in pf. If you need time quotas, you'll have to use something that can hook into RADIUS for accoun...
-
02:06 PM Feature #7217 (Rejected): x hrs per day total
- Currently there is a schedule feature in pfsense, where you can allow an IP from 4pm to 5:59pm for example, Mo-Su
... -
- Works fine here with pfSense-pkg-haproxy-0.52_4.
-
-
- This is not a bug. The webroot method assumes you have a webserver already running. It won't run any webserver on its...
-
03:57 AM Bug #7215 (Not a Bug): ACME challenge fails
- ACME challenge fails for "webroot local folder" method because no web server is listening on HTTP 80.
Setup:
1. p... -
07:15 AM Bug #7211: DNS Made Easy ACME script not parsing domain IDs properly
- Has been fixed upstream for a while:
https://github.com/Neilpang/acme.sh/commit/3cf85634ebb955ecee7616e88f4e1cef4458...
02/04/2017
-
- I'm currently running pfSense 2.3.2_1, and I tried the new ACME package (0.1.5) with DNS Made Easy verification. How...
02/03/2017
-
-
11:38 PM Bug #6875: dpinger not switching icmp id automatically
- I think the report is erroneous. There should be no state association beyond a single ICMP Echo Request and it's Echo...
-
09:26 PM
Bug #7208 (Resolved): ACME ftpwebroot doesn't work
- Below is the output of trying to use ftpwebroot. I redacted some data. As you can see from the log it doesn't appea...
-
06:00 PM Bug #7205 (Resolved): ACME package ignores DNS-Manual method, defaults to http-01
- My initial run using DNS-Manual as the method failed with the log suggesting DNS was ignored and http-01 was attempte...
-
- To confirm, with the latest Let's Encrypt package, you can get by with LE only on the primary node. It can generate t...
-
02:29 PM Bug #7197: Freeradius ldap authentication failed after update 1.7.5 to 1.7.6
- Thanks it's work fine
-
- PR has been merged, thanks!
-
- Fixed by https://github.com/pfsense/FreeBSD-ports/commit/73246541879f9256f4241b2a22dc61e6e31e6bd2
-
- I figured out a way to fix this. It's not pretty but the way the client passes data and processes the api commands do...
02/02/2017
-
- Given the impressive number of details provided, my crystal ball says that - out of the ~4500 lines of code changed i...
-
- Hi
After updating freeradius package from 1.7.4 to 1.7.5 version, it's failed to authenticate via Ldap.
My Con...
02/01/2017
-
- PR https://github.com/pfsense/FreeBSD-ports/pull/286
-
- I just installed pfSense-pkg-acme and went to the Cert. Manager - Certificates Page. I see the following output imme...
-
- With multiple domains in the "Domain SAN List" set to nsupdate, it only appears to use the last key entered, rather t...
-
07:46 PM Bug #7191 (Resolved): squid package EN-US grammar errors
- In the Services > Squid Proxy Server > Antivirus > Enable Manual Configuration section, the warning "Warning: Only en...
-
- There are a couple considerations here to keep straight for GUI use as well.
* One cert with SANs for both hosts i... -
- Configure the letsencrypt package https://github.com/pfsense/FreeBSD-ports/tree/devel/security/pfSense-pkg-acme to sy...
-
-
- Works.
-
-
- Fixed with https://github.com/pfsense/FreeBSD-ports/commit/df93449ea55537c48bca4304f72aa7ced243a116 - close please.
-
-
- Can be closed. Feature misunderstanding.
-
01:44 PM Feature #6022: Consider MLVPN for bonded VPN
- This feature would bring high value to the product and really make it stand out from the crowd. Not many solutions a...
-
- Already fixed
-
- ...
-
09:27 AM Bug #7188 (Closed): Squid update issue
- Hi, after updating (yesteray) squid my web ui is not working any more! Here is the error:
Parse error: syntax erro...
01/31/2017
-
04:08 PM
Bug #7009 (Resolved): syslog_ng Log Viewer page didn't get converted to the new 2.3 bootstrap
-
- Works, thanks for help.
-
12:51 PM
Bug #7009 (Feedback): syslog_ng Log Viewer page didn't get converted to the new 2.3 bootstrap
-
-
08:00 AM Feature #7179: Package Filer into 2.3
- Also did xmlrpc 2.4 adjustments:
https://github.com/pfsense/FreeBSD-ports/pull/277/commits/8d27c452ce42ca2ef0d65b65b... -
- Pull Request to include the filer package in pfSense >= 2.3
https://github.com/pfsense/FreeBSD-ports/pull/277
01/30/2017
-
03:24 PM Feature #2825: OpenBGPd: Add options prepend-neighbor and prepend-self
- Hello,
I know it's been a long time since this thread was started, but we started using the openBGPd package and not... -
- Konstantin Ab wrote:
> Hmmm, it seems to work!
> records appear in Table
Thanks for testing. Added to this monst...
01/29/2017
-
09:27 PM Bug #6928: freeRADIUS, logging with "Access-Reject" not work in mysql table radpostauth
- Hmmm, it seems to work!
records appear in Table -
- Can you please test this patch? https://github.com/pfsense/FreeBSD-ports/commit/cdf9b05e966f311b8ae83c7a3158479bd5c9e...
-
- i tryed diable SQL. No problem.
I'm watching the security problems in this table. -
08:38 AM Feature #6022: Consider MLVPN for bonded VPN
- +1
It's too bad that pfSense do not have this functionality yet
Many of us use multiple WANs please consider MLVP... -
- Added a huge deprecation warning to the page as part of https://github.com/pfsense/FreeBSD-ports/pull/272.
-
- I'd rather nuke this redundant thing altogether, however not sure how to handle the transition for unfortunate users ...
01/28/2017
-
- Does uncommenting this break things if SQL is *disabled*? The whole thing is a damn complex heap of code, not really ...
01/27/2017
-
- All merged. Please test with 1.7.5_1 when available; if it still does not work, describe exactly what actions make it...
01/26/2017
-
04:27 PM Bug #6748 (Feedback): rrd_fetch_json.php returns html when user is unauthorized (causes "Error: SyntaxError: Unexpected token <")
- I added a better error message in the case that JSON doesn't get returned, but a hint for the user to check that they...
-
- See
- https://github.com/pfsense/FreeBSD-ports/pull/267
- https://github.com/pfsense/FreeBSD-ports/pull/268
01/25/2017
-
- Your logs are way too huge! Configure something sane on Logs Mgmt tab. (You can override the memory limit in https://...
-
- https://github.com/pfsense/FreeBSD-ports/pull/265 - that's not a real solution obviously, so kindly leave this bug op...
01/24/2017
-
-
- Cannot reproduce, plus suspect it's more or less a duplicate of another non-reproducible issue filed by the same user...
-
- The changelog link should point to https://github.com/pfsense/FreeBSD-ports/tree/devel/dns/pfSense-pkg-bind9 while it...
-
-
- No feedback, related to ancient package version, plus apparently not a pfSense issue either. Retest with current pack...
-
06:35 AM Bug #5869: Squid non-functional in transparent mode in 2.3
- Here’s the mail I got recently for my problem
I was not able to get to these sites at the time of my first post but ...
01/23/2017
-
10:22 AM Bug #6350: Auto Config Backup - Uncaught Exception
- Steve Beaver wrote:
> Fixed by populating version table when info request fails
I don't remember what package ver... -
09:10 AM
Bug #6350 (Feedback): Auto Config Backup - Uncaught Exception
- Fixed by populating version table when info request fails
-
-
- Upstream server issue, has nothing to do with pfSense. Close please.
01/18/2017
-
10:26 PM Bug #7127: Authentication fail in AutoConfigBackup package
- Confirmed. I just installed version 1.47 and it now works just fine with the mixed case ID. Thanks!!!
... um, y... -
- Works
-
- I'll grab this back for testing once the new package is available
-
- 3.0.4_3 should be fixed
-
- Looks like we're missing the latest change to the Makefile for www/lightsquid from earlier this week, CGI.pm was remo...
-
-
01:59 AM Bug #7130 (Resolved): Lightsquid 3.0.4_2 HTTP 500
- As title says, when one clicks on Open Lightsquid HTTP error 500 appers.
Also available in: Atom