Activity
From 04/17/2017 to 05/16/2017
05/16/2017
-
04:04 PM Feature #7535: Snort messages filling System / General. Should have its own log.
- As far as I know, anything pertaining to logging is set to the default. It is set to send alerts to the system log. F...
-
03:30 PM Feature #7535: Snort messages filling System / General. Should have its own log.
- Do you have it configured to log alerts to the system log? Otherwise, it does not put too much info into the system ...
05/14/2017
-
12:50 AM Feature #7548: Add absolute offset stat to NTP monitoring display
- PR https://github.com/pfsense/FreeBSD-ports/pull/355
Has a full refactoring of the code first, then adding this feat...
05/13/2017
-
- PR https://github.com/pfsense/FreeBSD-ports/pull/354 (now closed)
-
- In Status Monitoring, NTP, the graph and stats data below it show the time offset. This varies plus and minus from ze...
05/12/2017
-
06:46 AM Bug #7543: pfBlockerNG doesn't appear to pull IP block lists that are marked as "OFF" if previously they were enabled
- It's a bug. The update message should reflect the deletion of the IP ranges associated with the list set to "OFF". ...
-
06:38 AM Bug #7543 (Rejected): pfBlockerNG doesn't appear to pull IP block lists that are marked as "OFF" if previously they were enabled
-
06:25 AM Bug #7543: pfBlockerNG doesn't appear to pull IP block lists that are marked as "OFF" if previously they were enabled
- Andrew - wrote:
> Please can you confirm whether pfBlockerNG is properly pulling lists of IPs that are changed from ... -
- If you have various IPv4 lists and set one of them to "ON", but then subsequently set it to "OFF", it appears that pf...
-
05/11/2017
-
- We report what OpenVPN's management interface reports. In this case, that is actually the remote client's _source_ po...
-
10:25 AM Bug #7539 (Rejected): OpenVPN dashboard widget shows 1194 for client connections
- I have never submitted a bug before, but I have noticed this issue now that I have built a second VPN server to play ...
05/10/2017
-
- I'm running 2.3.4. Snort is completely burying other messages in System / General. It should have its own log.
05/09/2017
-
- I committed a temporary fix for HAProxy to revert the problematic changes in HAProxy:
https://github.com/pfsense/F... -
- If HAProxy is enabled and has DNS Resolvers configured on its Settings tab, then the widget and stats page will fail....
05/06/2017
-
- I checked other packages that have a dashboard widget. The others all do stuff that is compatible with the multi-copi...
-
- And for haproxy-devel PR https://github.com/pfsense/FreeBSD-ports/pull/351
-
- Upstream bug: http://bugs.squid-cache.org/show_bug.cgi?id=4711
Also, there were multiple other SSL-Bump fixes in 3... -
- Same issue with pfSense-pkg-Netgate_Coreboot_Upgrade - the changelog link points to https://github.com/pfsense/FreeBS...
05/05/2017
-
12:32 PM Bug #7310 (Resolved): Packages pre-deinstall script removes temporary files used by pkg
- Works
-
- I have no idea why I wrote 2.3.4 above. This is an issue with using the HAproxy widget on 2.4, due to enhancements in...
-
- Install and enable the HAproxy package.
On the Dashboard for 2.3.4, add the HAproxy widget
In the HAproxy widget, c...
05/04/2017
-
02:45 AM Feature #7519 (Resolved): Add support for --listen-v6 to ACME standalone webserver
- The ACME script allows passing "--listen-v6" to force IPv6 in standalone mode. In an environment with public IPv6 add...
05/03/2017
05/02/2017
-
- I just pushed a change to use remote-cert-tls and also adjusted the code around it to test for the proper EKU before ...
05/01/2017
-
- Are you sure your scanner is hitting the firewall and not being redirected to another web service?
Looking at the ...
04/30/2017
-
12:31 AM Bug #7503 (Rejected): Web Interface and possible app configuration issue
- Version: 2.3.3_1
Vulnerability Scanner: OpenVas
Possible Vulnerability #1: SSL/TLS: Missing `secure` Cookie Attribu...
04/27/2017
-
11:06 AM Bug #7498: Deprecated option included in OpenVPN client export
- That makes sense. As you stated - if certs are being signed with the correct KU/EKU from 2009 in my mind it seems lik...
-
- That should work fine for certificates made any time recently on pfSense.
The only potential problem I foresee is... -
- Okay that makes sense - thank you :)
However, surely by having the @ns-cert-type@ option included in all exports y... -
- The verification option you mentioned in the GUI controls verifying the name only, it does not verify the type, so it...
-
- As of OpenVPN 2.4 the directive: @ns-cert-type@ has been deprecated.
However, from my testing, the client export p...
04/26/2017
-
- You'll need to post on the forums in that case before there's some bug identified. The above patch is the only change...
04/23/2017
-
- Added an install message and some input validation and other tweaks @ https://github.com/pfsense/FreeBSD-ports/pull/344.
04/22/2017
-
01:28 AM Bug #7487: Status Traffic Totals doesnt persist through reboots.
- Sadly someone else will have to test, the system I am using as my router is 32 bit and 2.4 only seems to be available...
04/21/2017
-
- Highly unlikely to be a captive portal problem, but something with your local configuration. Could be a package, coul...
-
04:50 PM Bug #7486 (Rejected): Captive Portal (CP): MS Edge and IE have interner access despite CP
- Well.. This sounds a Little dumb and I dont know wtf is going on tbh.
Well. At first, I better tell you about the ... -
- /var and /tmp handling was changed significantly in 2.4, please re-test there.
-
- Forgot to add the effected version as I did not notice the field till after I submitted, but I am running 2.3.3-RELEA...
-
- The persistent data for vmstat is stored on /var and when you have var and tmp on ramdrives, the data isn't backed up...
-
01:50 PM Bug #6182: HAProxy not supporting ALPN
- Ah yes sorry, got some versions mixed up in my head..
-
01:44 PM Bug #6182: HAProxy not supporting ALPN
- Pi Ba wrote:
> You can wait, but its still 1.0.2..
>
> [2.4.0-BETA][root@pfSense.localdomain]/root: openssl versi...
04/20/2017
-
- You can wait, but its still 1.0.2..
[2.4.0-BETA][root@pfSense.localdomain]/root: openssl version
OpenSSL 1.0.2k-f... -
- Ok, thanks that makes sense.
I excitedly wait for pfSense 2.4, and an ALPN capable HAProxy then.
-
- Joshua Ruehlig wrote:
> Ok, just to clear up my understanding. Is the following correct?
>
> If we build a port w... -
- Ok, just to clear up my understanding. Is the following correct?
If we build a port with openssl from ports, it no... -
11:31 AM Bug #6690: SURICATA IPS Issue - Kills VLANS & Traffic Shaper
- Jim Thompson wrote:
> Steven Kreitzer wrote:
> > Sandeep K V wrote:
> > > Hi Steven Kreitzer and Jim Thompson isn'...
04/19/2017
-
- I've reviewed deinstall functions for all packages and removed commands that can cause this symptom. It still can hap...
-
- First, that isn't the way you set OpenSSL to use the port now. It would be:...
-
- Pi Ba wrote:
> The extra build flag should probably be added to: https://github.com/pfsense/pfsense/blob/master/tool...
04/18/2017
-
- There is no way to NOT configure EAP in the package. Simply said, configuring the certs in the CA manager is *mandato...
-
- You may not realize it is enabled, but it must be, or you wouldn't get that error. At this point it is not a bug, but...
-
11:34 AM Bug #7479: freeRadius not started after update to 1.7.8
- Jim Pingle wrote:
> Given the error, you had to have used it in the past.
eap? no, i not used EAP, never.
this... -
- A server certificate is necessary for EAP. Given the error, you had to have used it in the past.
-
- i not use Cert Manager. And EAP.
It is necessary? -
- Support for the old and redundant certificate manager in FreeRADIUS was removed. Create or import a server certificat...
-
- I upgrade freeraius and freeraius not started now
In log:
Apr 18 23:21:00 radiusd 11844 rlm_eap: SSL error err... -
- The extra build flag should probably be added to: https://github.com/pfsense/pfsense/blob/master/tools/conf/pfPorts/m...
-
- Kill Bill wrote:
> Joshua Ruehlig wrote:
> > Is it possible to set build options for dependent ports?
>
> See th...
04/17/2017
-
- Joshua Ruehlig wrote:
> Is it possible to set build options for dependent ports?
See the previous comment.
-
- Is it possible to set build options for dependent ports?
Maybe we can add an OPTION to set 'WITH_OPENSSL_PORT= yes' ...
Also available in: Atom