pfSense

09/05/2009

06:31 PM Bug #72 (Closed): Configured static routes are not re-added when link from LB Pool goes down then up

Closing this as it's a duplicate of #18, which has a better description of the full issue. Chris Buechler

06:09 PM Bug #72: Configured static routes are not re-added when link from LB Pool goes down then up

Patch added to 7.2 / 2.0 and 8.0 / 2.0 that will prevent FreeBSD from removing the routes associated with a interface... Scott Ullrich

06:25 PM Bug #18: Link loss can cause multi-WAN difficulties

Patch added to prevent the removal of static routes upon interface link loss. This is also similar to #72 ? Scott Ullrich

04:37 PM Bug #78 (Resolved): Outgoing load balancer needs configuration upgrade

Just tested upgrade outgoing and incoming load balancing from 1.2 -> 2.0.
It appears the only thing that needs upg... Scott Ullrich

04:30 PM Bug #28: Problems with m0n0wall configuration conversion

Applied in changeset commit:"dec5cb8537a019f5bf1b810f32d5cb047db2b3f4". Scott Ullrich

04:26 PM Bug #28 (Resolved): Problems with m0n0wall configuration conversion

Scott Ullrich

09/04/2009

09:15 PM Feature #77 (Closed): All files need function headers and also file headers

Need file headers such as this:
/****h* pfSense/notices
* NAME
* notices.inc - pfSense notice utilities
* ... Scott Ullrich

06:11 PM Bug #72: Configured static routes are not re-added when link from LB Pool goes down then up

Seth Mos wrote:
> If I understand this correctly, when a link goes physically down, freebsd will reset the routing t... GS FON

05:35 PM Bug #72: Configured static routes are not re-added when link from LB Pool goes down then up

If I understand this correctly, when a link goes physically down, freebsd will reset the routing table.
When the lin... Seth Mos

09/03/2009

10:53 PM Bug #76 (Resolved): Changes needed to traffic shaper since its rewrite

1. Change all lan opt1 opt2 to lan wan wan1 etc (use friendly interface name)
2. Uncomment and fix the 80% error You... Scott Ullrich

08:20 PM Feature #74 (Closed): Log successful and failed logins to the web gui

They already are in 2.0. Chris Buechler

08:10 PM Feature #74 (Closed): Log successful and failed logins to the web gui

I would like to request the ability to log the successful and failed attempts to login to the web gui. Alan Shearer

08:19 PM Feature #75 (Closed): Log successful and failed logins to SSH

They already are in the system log. Chris Buechler

08:11 PM Feature #75 (Closed): Log successful and failed logins to SSH

I would like to request the ability to log the successful and failed attempts to login to pfsense via SSH. Alan Shearer

08:05 PM Feature #73 (Resolved): Log failed PPTP vpn logins to PPTP log

I would like to request that failed attempts to login to the pfsense PPTP VPN server are logged to the PPTP log tab. ... Alan Shearer

01:20 AM Todo #61 (Resolved): Replace IPsec ping hosts shell script

Chris Buechler

09/01/2009

05:01 PM Todo #61: Replace IPsec ping hosts shell script

Fixed the creation of the /var/db/ipsecpinghosts. It was missing the source IP addres because of a typo in a variable. Seth Mos

04:59 PM Bug #67 (Resolved): IPsec logs always show in reverse (return_clog() issue)

Seth Mos

04:59 PM Bug #67: IPsec logs always show in reverse (return_clog() issue)

Zapped incorrect logline which may have came from a incorrect upstream merge.
$sor was defined twice. Seth Mos

10:27 AM Bug #72 (Closed): Configured static routes are not re-added when link from LB Pool goes down then up

The routes table is not acting proper when links from pool goes down then up (with new ip). GS FON

02:27 AM Todo #71 (Resolved): Improve sysctl handling

The sysctl handling needs some help. Hard coding values in configurations is problematic, in cases where the default ... Chris Buechler

08/31/2009

11:45 PM Bug #70 (Resolved): Interface with DHCP server cannot be DHCP client

Shouldn't allow switching interface IP config from static to DHCP/PPPoE/PPTP on an interface where the DHCP server is... Chris Buechler

04:14 PM Bug #69 (Resolved): OpenVPN 'local' directive

The OpenVPN local directive is forced to be specified (by the interface drop down), forcing the OpenVPN server to use... Chris Buechler

01:24 AM Bug #68 (Resolved): Dyndns for second WAN( opt1) does not work

There are two problems with the dyndns page.
1) When ever I make any changes (disable/enable, or aything at all) ... GS FON

08/30/2009

05:13 PM Bug #67 (Closed): IPsec logs always show in reverse (return_clog() issue)

Due to a bug in return_clog(), the IPsec logs always show in reverse. It seems to be the only logs page that actually... Jim Pingle

08/28/2009

01:30 PM Bug #66 (Closed): Nanobsd does not work on WRAP

Opening ticket to track this known issue.
PC Engines WRAP.1C/1D/1E v1.11
640 KB Base Memory
130048 KB Extended ... Chris Buechler

01:23 PM Todo #65 (Resolved): Ability to disable accounts

There needs to be a checkbox to disable accounts without removing them, and without specifying an expiration date (yo... Chris Buechler

08/27/2009

07:35 PM Bug #28 (New): Problems with m0n0wall configuration conversion

one other issue:
<diag/>
has to be replaced with:
<diag>
<ipv6nat/>
</diag>
or the unset on ipv6nat when savin... Chris Buechler

08/26/2009

11:50 PM Bug #64 (Resolved): VLAN interface choices in 2.0 (creating, assigning)

While fixing some other issues I noticed that when you attempt to create additional VLANs, the VLAN interfaces are al... Jim Pingle

11:44 PM Bug #62: Check vlan 1.2 -> 2.0 upgrade code and interface naming.

You might sync and try again.
I fixed a couple bugs in the automatic vlan hardware detection today that could have... Jim Pingle

02:41 PM Bug #62 (Resolved): Check vlan 1.2 -> 2.0 upgrade code and interface naming.

Check vlan 1.2 -> 2.0 upgrade code and interface naming. Also check deleting vlans and interface assignment.
I ran... Seth Mos

04:29 PM Todo #63: Change web interface default to HTTPS

In this scenario would there also be a way to change back to HTTP if the user so chooses?
The way that browsers fr... Jim Pingle

04:14 PM Todo #63: Change web interface default to HTTPS

Are we proposing that HTTP no longer function as the webConfigurator and simply redirects to https?
What happens i... Scott Ullrich

03:50 PM Todo #63 (Resolved): Change web interface default to HTTPS

The web interface needs to change to HTTPS by default, probably with an auto redirect from HTTP to HTTPS to avoid use... Chris Buechler

02:39 PM Todo #61 (Resolved): Replace IPsec ping hosts shell script

The old IPsec ping hosts shell script was gutted as it grepped through the entire config.xml. This was a serious perf... Seth Mos

08/25/2009

07:34 PM Bug #60 (Resolved): Firewall rules edit -> DiffServ Code Point

1) is not wrapped under an advanced button
2) needs to be a select drop down box if those really are the only values... Scott Ullrich

04:51 PM Feature #58 (Resolved): E-Mail Notifications/Alerts

Scott Ullrich

02:48 PM Feature #58: E-Mail Notifications/Alerts

Basic support for email notifications have been added. Example:
---------- Forwarded message ----------
From: <... Scott Ullrich

02:21 PM Feature #58: E-Mail Notifications/Alerts

Wouldn't have to be encrypted, for those who don't want to send potentially sensitive info over email, it could simpl... Chris Buechler

11:46 AM Feature #58 (Resolved): E-Mail Notifications/Alerts

It would be good to have some kind of configurable system for e-mail notifications of system alerts make it in for 2.... Jim Pingle

02:06 PM Feature #59 (Closed): Integrate Ermals PHP / FreeBSD ifconfig module

It will be desirable to integrate Ermals recent work on turning ifconfig into a php module. This will speed up the w... Scott Ullrich

08/24/2009

10:20 PM Feature #11: Allow multiple syslog servers

Applied in changeset commit:"be5d59d74f6ae394ee267157331ebaa81b7b27a1". Scott Ullrich

10:18 PM Feature #11 (Resolved): Allow multiple syslog servers

Scott Ullrich

09:49 PM Bug #16 (Resolved): Deleting multiple OPT interfaces results in an invalid configuration

Scott Ullrich

09:12 PM Bug #26 (Resolved): "No XMLRPC Sync" still sends data to CARP Slaves, and CARP slave rules marques NO Sync are erased

This code exists in 1.2.3. Also fixed a bug with nosync. This should be resolved. Scott Ullrich

09:05 PM Bug #38: Malfunctioning of 'No XMLRPC Sync' code, causing some rules to still get synced to CARP members

Applied in changeset commit:"d6e8dfa1d6b4bad7ef6f71263f275ca8e8b0a706". Scott Ullrich

09:01 PM Bug #38 (Resolved): Malfunctioning of 'No XMLRPC Sync' code, causing some rules to still get synced to CARP members

Scott Ullrich

07:25 PM Bug #25: Shaper Wizard, Penalty Box screen, Address field Alias Usage

Applied in changeset commit:"44c10295114daaf8d65a0502f01f1d27131f1623". Scott Ullrich

07:22 PM Bug #25 (Resolved): Shaper Wizard, Penalty Box screen, Address field Alias Usage

Scott Ullrich

06:30 PM Bug #57: split() has been DEPRECATED in favor of preg_split()

Applied in changeset commit:"f5d637bce14826e21ace2c0660d55dbbf0119b94". Scott Ullrich

06:29 PM Bug #57 (Resolved): split() has been DEPRECATED in favor of preg_split()

Scott Ullrich

06:23 PM Bug #57 (Resolved): split() has been DEPRECATED in favor of preg_split()

Need to sweep the tree and replace before PHP 6.0. Scott Ullrich

05:55 PM Feature #40 (Resolved): Allow default "appliance" setup

Support for this has been added. Scott Ullrich

05:54 PM Bug #39 (Resolved): Restore

After todays commits from Ermal it appears the XMLReader errors are gone and now configurations can be imported as th... Scott Ullrich

05:51 PM Bug #22 (Resolved): Problems with 1.2.x configuration restore to 2.0

Scott Ullrich

03:47 PM Bug #22: Problems with 1.2.x configuration restore to 2.0

The first issue is resolved. We now call convert_config() directly after the configuration is uploaded in order to ... Scott Ullrich

05:48 PM Feature #42 (Resolved): OpenNTPD logging

Scott Ullrich

05:43 PM Todo #4 (Resolved): Remove hard coded VLAN supported interfaces list

Support has been commited for this. Scott Ullrich

05:09 PM Bug #28 (Resolved): Problems with m0n0wall configuration conversion

Scott Ullrich

04:40 PM Bug #28: Problems with m0n0wall configuration conversion

Default gateway is moved correctly. m0n0wall configuration update appears to be working OK now. Scott Ullrich

04:12 PM Bug #28: Problems with m0n0wall configuration conversion

Have made a change to reduce the m0n0wall configuration version to 1.0 triggering our upgrade scripts Scott Ullrich

04:42 PM Feature #56 (Resolved): VAP code

It would be desirable to add VAP support to FreeBSD 8.0 / 2.0 builds. This will be required for 2.0 release. Scott Ullrich

04:41 PM Bug #55 (Resolved): 2.0 / FreeBSD 8 needs wireless changes to work.

Need to clone interfaces in order for them to function in 8.0 Scott Ullrich

08/23/2009

07:29 PM Bug #25: Shaper Wizard, Penalty Box screen, Address field Alias Usage

Partially resolved. Both versions now show a red input alias box but the javascript appears to not be hooked in. Scott Ullrich

07:17 PM Bug #31 (Resolved): Invoking early installer does not apply VMware tweaks

Scott Ullrich

07:17 PM Bug #15 (Resolved): Package reinstall on configuration restore doesn't work

Scott Ullrich

07:16 PM Bug #21 (Resolved): Rulesets containing hostnames do not load at boot time

Scott Ullrich

07:15 PM Bug #2 (Resolved): Gateway not added when switching from DHCP to static

Just tested this and it appears to be resolved. After creating a new gateway and saving I navigated away from interf... Scott Ullrich

06:50 PM Bug #39: Restore

It appears we have traded one bug for another. This bug is resolved now but the new XML Reader is causing:
Warni... Scott Ullrich

06:33 PM Bug #41 (Resolved): OpenNTPD javascript error

Scott Ullrich

06:26 PM Bug #52 (Resolved): nanobsd- bootup slice doesn't reflect changes until reboot.

Scott Ullrich

08/21/2009

03:58 AM Feature #54: Ability to allow IP options

Ah yes, I hadn't noticed that box. Just tried it and it works. Chris Buechler

03:37 AM Feature #54 (Resolved): Ability to allow IP options

As far as i know 2.0 has this resolved since under firewall rules -> Advanced option button there is such a choice i ... Ermal Luçi

08/20/2009

10:33 PM Feature #54 (Resolved): Ability to allow IP options

PF sensibly blocks packets with IP options by default.
http://www.openbsd.org/faq/pf/filter.html#ipopts
But we h... Chris Buechler

08/19/2009

04:45 PM Bug #53: Some packages with RC scripts start twice at bootup

I was able to at least get snort to behave better by changing its startup routine slightly:
https://rcs.pfsense.org/... Jim Pingle

08/18/2009

05:04 PM Bug #53 (Resolved): Some packages with RC scripts start twice at bootup

Some packages like snort startup on package sync, and they create and RC script.
This means that when packages are... Jim Pingle

08/16/2009

01:51 AM Bug #44 (Feedback): Nano issue2

Chris Buechler

01:50 AM Bug #43 (Feedback): Nano issue 1

Chris Buechler

01:48 AM Bug #26 (New): "No XMLRPC Sync" still sends data to CARP Slaves, and CARP slave rules marques NO Sync are erased

Chris Buechler

01:47 AM Bug #46 (Feedback): 1.2.3 Loadbalancer Status "Description" incorrect

Chris Buechler

01:47 AM Bug #46: 1.2.3 Loadbalancer Status "Description" incorrect

A fix for this was committed, please verify. Chris Buechler

08/13/2009

11:42 AM Bug #52 (Resolved): nanobsd- bootup slice doesn't reflect changes until reboot.

When changing the bootup slice under diagnostics, nanobsd the dropdown for bootup slice still reflects the old select... Jon Klinck

08/11/2009

02:01 PM pfSense Packages Bug #47 (Resolved): Nano img issue 3

Scott Ullrich

01:41 PM pfSense Packages Bug #47: Nano img issue 3

Freeswitch needs to call conf_mount_rw(); (php) or /etc/rc.conf_mount_rw (shell)
When finished installing, ru... Scott Ullrich

01:35 PM pfSense Packages Bug #48 (Resolved): pfsense 7.2 / 2.0 build issue

Scott Ullrich

01:33 PM pfSense Packages Bug #51 (Resolved): patch for builder_snapshot_loop.sh

Scott Ullrich

12:55 PM pfSense Packages Bug #51 (Resolved): patch for builder_snapshot_loop.sh

it never makes it to the 4 gig build Richard Neese

08/10/2009

07:33 PM Bug #50 (Resolved): DHCP Server input validation lacking

The network and broadcast addresses shouldn't be allowed as usable addresses within the range.
If the range inclu... Chris Buechler

06:59 PM Bug #49 (Resolved): typo in diagnostics, nanobsd

Fixed, thanks Chris Buechler

06:34 PM Bug #49 (Resolved): typo in diagnostics, nanobsd

When duplicating a slice, the message still says "Duplicaating slice" Jon Klinck

08/07/2009

04:52 PM pfSense Packages Bug #45 (Resolved): not all ports being built in iso/images 2.0

Should be fixed by
https://rcs.pfsense.org/projects/pfsense-tools/repos/mainline/commits/1597db121251d749e6e34418b3... Jim Pingle

09:26 AM pfSense Packages Bug #48: pfsense 7.2 / 2.0 build issue

correction on my statement it seems on 8.0 it says it builds it but I do not see it installed. Richard Neese

09:11 AM pfSense Packages Bug #48 (Resolved): pfsense 7.2 / 2.0 build issue

after running the build_pfsorts.sh on freebsd 7.2 building a 2.0 img it seems that thre script is not building the p... Richard Neese