Project

General

Profile

Activity

From 08/25/2009 to 09/23/2009

09/23/2009

11:01 PM Revision 351f5e6a: Rename ttyd -> ttyu
Scott Ullrich
10:16 PM Revision fe4397d2: Nuke sorting it apparently changed the ID association
Scott Ullrich
10:05 PM Revision ed371120: Merge remote branch 'mainline/master'
Eirik Oeverby
09:37 PM Revision f6497c7d: Forward all udp request to port 53(DNS) to our local server. This allows people with other dns configured other than the one in pfSense to still be able to authenticate in the CP.
Ermal Luçi
09:04 PM Revision f65c2f4c: Filter rules for interface-subnet rules fixed.
Eirik Oeverby
08:39 PM Revision 685c1413: Merge remote branch 'mainline/master'
Eirik Oeverby
08:37 PM Revision dd30341d: More IPSec, filter.inc changes
Eirik Oeverby
07:47 PM Revision 64d0a55d: Uncomment safety-belt checks that are required to avoid filter errors. Not sure why they are uncommented? Unfinished testing is my first guess.
Scott Ullrich
07:26 PM Revision 941fb7b4: Only create a rdr for local interfaces which is destined for the actual address we have a portforward for.
This prevents people from ending up in our netcat code for reflection when trying to access other websites.
Should fi...
Seth Mos
06:41 PM Bug #100 (Resolved): Serial console is broken on embedded/nanobsd on 8.x builds
sio was replaced with uart which we had already taken care of. but it seems that isa probing is no longer happening ... Scott Ullrich
03:31 PM Bug #100 (Resolved): Serial console is broken on embedded/nanobsd on 8.x builds
Boot: 1
/boot.config: -D
Consoles: internal video/keyboard serial port
BIOS drive C: is disk0
BIOS 639kB/49...
Scott Ullrich
06:39 PM Revision 9dc072e4: Here we go again .. IPSec stuff
Eirik Oeverby
05:11 PM Revision c339557b: register_argc_argv needs to be On so that we can process rc.linkup events
Scott Ullrich
03:29 PM Feature #87: Wizards needed
Pushing off 'till 3.0. Scott Ullrich
03:25 PM Bug #99 (Feedback): Reflection is broken in 2.0
Scott Ullrich wrote:
> Surfing into a website results in:
>
> nc [-46DEdhklnrStUuvz] [-e policy] [-i interval] [-...
Seth Mos
02:56 PM Bug #99 (Resolved): Reflection is broken in 2.0
This is closer than it was, but it still doesn't work. The port in inetd.conf and the one in the rdr don't match. The... Scott Ullrich
01:40 PM Bug #98 (Feedback): vlan_interface always down......
Ermal Luçi
01:40 PM Bug #98: vlan_interface always down......
Patch committed.
Since refrenced commits seems not to work for me(special chars in the name?!) commits for referen...
Ermal Luçi
11:41 AM Bug #98: vlan_interface always down......
Ermal noticed the same limit when he fixed another bug:
http://redmine.pfsense.org/issues/show/64
Jim Pingle
07:09 AM Bug #98 (Resolved): vlan_interface always down......
My vlan real name is bge0_vlan1.
In pfsense main page or interface_status page always see the interface down.
I che...
ChihWei Wang
03:39 AM Revision 25c09d9c: Show page title
Scott Ullrich

09/22/2009

10:51 PM Revision f1604340: Axe the s in developers. Capitalize accordingly. Suggested by JimP
Scott Ullrich
10:51 PM Revision 92c5013c: Axe the s in developers. Capitalize accordingly. Suggested by JimP
Scott Ullrich
10:50 PM Revision 43cca7d6: Axe the s in developers. Suggested by JimP
Scott Ullrich
10:48 PM Revision fb56bff1: Rename PHP Shell to developers shell
Scott Ullrich
10:47 PM Revision 3f64051e: Rename PHP Shell to developers shell
Scott Ullrich
10:07 PM Revision 11f52e40: Clarify that the URL should be a RCS url and that it should be HTTP
Scott Ullrich
09:18 PM Revision bd875499: WIP: IPSec changes
Eirik Oeverby
09:10 PM Revision 3b60a138: WIP: fixing IPSec screens/config
Eirik Oeverby
06:18 PM Feature #97 (Resolved): Captive Portal should sync its database to other members of clusters
It would be desirable to sync the captive portal database between CARP members. Scott Ullrich
06:16 PM Feature #96 (New): Add "All local networks" to source and destination drop down boxen in firewall rules
This would allow easily negating all local networks (internet) where usage of "floating rules" is not desirable easily. Scott Ullrich
11:09 AM Feature #83: CSV import for ALIASES
My apologizes didn't even notice the triangle.. Thanks for being one step ahead of me! And great project! Corey Wicklund

09/21/2009

11:13 PM Revision 581905c8: Pass origname instead of relying on a global
Scott Ullrich
11:12 PM Revision 978fd2e8: Pass origname instead of relying on a global
Scott Ullrich
09:36 PM Revision da5cbcbf: Add neccessary include.
Ermal Luçi
08:59 PM Feature #83: CSV import for ALIASES
2.0 features a import alias from list feature. Click on the pyramid. Scott Ullrich
08:54 PM Feature #83: CSV import for ALIASES
Updating target version to 3.0. 2.0 is in feature freeze. Scott Ullrich
08:12 PM Revision faebbab3: Only unload ipfw.ko if it is loaded. Doh
Scott Ullrich
08:00 PM pfSense Packages Bug #86 (Resolved): denyhosts on pfsense 1.2.2
Mark has fixed these issues. Scott Ullrich
07:55 PM Revision 4f7ead45: Revert "Properly send mpd logs to vpn.log. Filtering needs to be done in the file itself. Some trimming of what gets logged in the daemon itself needs to be done but that to a future review. This should partially fix Feature #73."
This reverts commit f441ab6809cdf358c321144bb74da1f550136b17. Scott Ullrich
07:14 PM Bug #92 (Resolved): Upgrading a m0n0wall confiuguration with interface name that is same as alias breaks routing for that interface
Scott Ullrich
10:44 AM Bug #92 (Resolved): Upgrading a m0n0wall confiuguration with interface name that is same as alias breaks routing for that interface
"I encountered a bug in #pfSense after upgrade from m0n0wall. No traffic was possible on an interface which had the s... Scott Ullrich
05:01 PM pfSense Packages Bug #94 (Resolved): Prevent Dashboard (re)install on 2.0
Tinkering around on a 2.0 box which was upgraded from 1.2.x, it reinstalled the dashboard package which, predictably,... Jim Pingle
04:00 PM Bug #90 (Closed): System logs are blank on 7.2 and 8.0 snapshots
Commit f441ab6809cdf358c321144bb74da1f550136b17 broke it. I have reverted. Scott Ullrich
03:57 PM Feature #73: Log failed PPTP vpn logins to PPTP log
I was forced to revert this change f441ab6809cdf358c321144bb74da1f550136b17 as it broke system logs and vpn logs. Scott Ullrich
03:33 PM Revision bca2d8ad: Check for interfaces with same name as alias. Ticket #92
Scott Ullrich
03:28 PM Revision b6db8ea3: Check for interfaces with same name as alias. Ticket #92
Scott Ullrich
03:09 PM Bug #93 (Closed): Filter log parsing - potential 2.0 bug
This is a note to myself so I don't forget this. On my 2.0 test box I see filter log entries with "TCP:", meaning the... Jim Pingle
03:00 PM Bug #67 (Closed): IPsec logs always show in reverse (return_clog() issue)
Closing. This is working properly in snapshots after this fix went in. Jim Pingle
10:55 AM pfSense Packages Bug #89: Mod_Security+Apache+Proxy apache configuration bug (and fix)
Applied in changeset commit:"5548a95ca1fb6130ab9a0ffeb092cf27080829d8". Scott Ullrich
10:53 AM pfSense Packages Bug #89 (Resolved): Mod_Security+Apache+Proxy apache configuration bug (and fix)
Scott Ullrich
06:33 AM Revision f94cf5f8: Test if dhcpd is enabled not if configs are preset. Reported-by: http://forum.pfsense.org/index.php/topic,19271.0.html
Ermal Luçi
12:14 AM Revision 1f302424: Rename all Help area items
Scott Ullrich
12:13 AM Revision 7333e06b: s/Doc Site/Documentation/
Scott Ullrich
12:08 AM Revision 471ce716: Add target support which allows launching links in a new window/tab, etc for help menu area
Scott Ullrich
12:04 AM Revision f8a6be5f: Squeeze help menu in
Scott Ullrich
12:01 AM Revision b24b485d: Squeeze help menu in
Scott Ullrich

09/20/2009

11:59 PM Revision db4aac13: Squeeze help menu in
Scott Ullrich
10:31 PM Revision 37efa12a: Rename Commercial Support to Support so it appears correctly in all themes. Need to find the font weight for the drop downs and lower that a bit.
Scott Ullrich
10:26 PM Revision 35ee5e8d: Squeeze Help area in
Scott Ullrich
10:22 PM Revision 669716df: Adding new 'Help' menu area with common areas. These items call pfSense jumptos such as http://www.pfsense.org/j.php?jumpto=book
Scott Ullrich
02:30 PM Revision f8315dd0: set 2/3 are no more used with ipfw.
Ermal Luçi
02:30 PM Revision 049cfa17: Fix rdr generation, fix by ltning
Chris Buechler
02:25 PM Revision cbed73fd: Move the allowed ips to set 1 as well.
Ermal Luçi
02:23 PM Revision 98a414a4: Forward everything to the CP portal page since some people might have proxies in between.
Ermal Luçi
02:22 PM Revision e9e3ef84: Remove the anti lockout rule on captive portal ruleset this opens a can of worms.
Ermal Luçi
02:21 PM Revision 6e622daf: With latest improvements to ipfw(4) we do not need ipfw on layer3 everything is done on layer2 now.
Ermal Luçi
02:20 PM Revision f6fbd03e: Teach captiveportal code to use the mac in tables functionality. Change the default ruleset to reflect this.
Ermal Luçi
02:02 PM Bug #81 (Feedback): Captive portal problems
Let this for now to feedback Ermal Luçi
12:45 PM Revision 88b8fdd0: Generate FilterIflist members if not generated before. This function is supposed to be private to filter.inc but seems some other code depends on it.
Ermal Luçi
09:02 AM Bug #91 (Resolved): "Everything" syslog option problem
"Everything" isn't working as it should, note to self to fix when I get back. Chris Buechler
06:42 AM Bug #90 (Closed): System logs are blank on 7.2 and 8.0 snapshots
As subject says. Ltning and I both seeing on multiple systems. Other logs (Firewall, OpenVPN, etc.) do work. Chris Buechler

09/18/2009

05:01 PM Revision cb6fd90b: Remove unecessary calls to semaphores, will try again with them with 8 builds!
Ermal Luçi
03:22 PM Revision 09be0c76: Remove leftover code per Ermal
Scott Ullrich
12:48 PM Bug #88: TXCSUM forced on at boot which breaks wireless bridging
We may need to find out what other hardware people are using then, it is a problem with vr0+ath0 at least. Not sure w... Jim Pingle
12:46 PM Bug #88: TXCSUM forced on at boot which breaks wireless bridging
This is not universally true, there are instances I know of where this works fine, including my own AP. Maybe driver-... Chris Buechler
12:38 AM Bug #88 (Resolved): TXCSUM forced on at boot which breaks wireless bridging
When you have a wireless interface bridged to a wired interface, txcsum needs to be disabled on the wired NIC in orde... Jim Pingle
11:43 AM Feature #84: Nightly Filter Summary E-Mail
See also:
http://blog.stardothosting.com/2009/08/12/freebsd-pf-packet-filter-shell-script-to-report-on-hacking-att...
Jim Pingle
10:15 AM pfSense Packages Bug #89 (Resolved): Mod_Security+Apache+Proxy apache configuration bug (and fix)
This package tries to load apache's mem_cache module using a wrong name (mod_memcache).
Replace line 503 in file /...
Nuno Marques
01:48 AM Revision 9e7ef1a5: Update locking to use Ermals non semaphore patch. I just beat the holy heck out of it with the CP torture scripts and all seems OK
Scott Ullrich
01:47 AM Revision e6b21089: Update locking to use Ermals non semaphore patch. I just beat the holy heck out of it with the CP torture scripts and all seems OK
Scott Ullrich
01:33 AM Revision 92880548: Set max children to same amount as max procs
Scott Ullrich
01:32 AM Revision e59dd448: Set max children to same amount as max procs
Scott Ullrich
01:17 AM Revision 27d07d2d: It seems upon captive portal startup the captiveportal.db file is not written out until the /etc/rc.prunecaptiveportal script is run. If the Operator decides to visit status -> captive portal right after enabling the service they will be greated with some nasty nasty errors. Silence this nonsense by creating a blank captiveportal.db file right after nuking it.
Scott Ullrich
01:16 AM Revision 5caa648d: It seems upon captive portal startup the captiveportal.db file is not written out until the /etc/rc.prunecaptiveportal script is run. If the Operator decides to visit status -> captive portal right after enabling the service they will be greated with some nasty nasty errors. Silence this nonsense by creating a blank captiveportal.db file right after nuking it.
Scott Ullrich
12:11 AM Revision b95c4db2: Return NULL when captive portal is not enabled
Scott Ullrich
12:11 AM Revision 01d57b8c: Return NULL when captive portal is not enabled
Scott Ullrich

09/17/2009

11:04 PM Revision de752609: Do not process IPFW rules if captive portal is disabled.
Scott Ullrich
11:03 PM Revision 08b6c550: Do not process IPFW rules if captive portal is disabled.
Scott Ullrich
08:41 PM Revision 837b2b6b: Cap max requests at 500
Scott Ullrich
08:40 PM Revision 86900074: Cap max requests at 500
Scott Ullrich
08:39 PM Revision b024bf2f: Adding PHP_FCGI_MAX_REQUESTS => 500. This problem seems to stem from a little-known issue with PHP: PHP stops accepting new FastCGI connections after handling 500 requests; unfortunately, there is a potential race condition during the PHP cleanup code in which PHP can be shutting down but still have the socket open, so lighty can send request number 501 to PHP and have it accepted, but then PHP appears to simply exit, causing a 500 return from lighty.
Scott Ullrich
08:38 PM Revision c6c98953: Adding PHP_FCGI_MAX_REQUESTS => 500. This problem seems to stem from a little-known issue with PHP: PHP stops accepting new FastCGI connections after handling 500 requests; unfortunately, there is a potential race condition during the PHP cleanup code in which PHP can be shutting down but still have the socket open, so lighty can send request number 501 to PHP and have it accepted, but then PHP appears to simply exit, causing a 500 return from lighty.
Scott Ullrich
08:36 PM Revision 8134cc27: Adding PHP_FCGI_MAX_REQUESTS => 500. This problem seems to stem from a little-known issue with PHP: PHP stops accepting new FastCGI connections after handling 500 requests; unfortunately, there is a potential race condition during the PHP cleanup code in which PHP can be shutting down but still have the socket open, so lighty can send request number 501 to PHP and have it accepted, but then PHP appears to simply exit, causing a 500 return from lighty.
Scott Ullrich
08:34 PM Revision 0396a8c0: Adding PHP_FCGI_MAX_REQUESTS => 500. This problem seems to stem from a little-known issue with PHP: PHP stops accepting new FastCGI connections after handling 500 requests; unfortunately, there is a potential race condition during the PHP cleanup code in which PHP can be shutting down but still have the socket open, so lighty can send request number 501 to PHP and have it accepted, but then PHP appears to simply exit, causing a 500 return from lighty.
Scott Ullrich
10:01 AM Revision cb42f385: Add necessary include. Reported-by: http://forum.pfsense.org/index.php/topic,19193.0.html
Ermal Luçi
02:57 AM Revision 7b32d208: Merge branch 'master' of git://rcs.pfsense.org/pfsense/Eugene-igmpproxy
Scott Ullrich
02:07 AM Revision fc723417: Remove igmpproxy specific stuff from filter.inc, add allow-opt into pass out all...
Evgeny Yurchenko

09/16/2009

06:38 PM Revision e3ddfc61: Merge branch 'master' of git://rcs.pfsense.org/pfsense/Eugene-igmpproxy into review/master
Scott Ullrich
03:51 PM Revision 4e7d1665: Using /tmp for packet captures is a bad idea, mmmkay?
Scott Ullrich
03:49 PM Revision 6a01b7d9: Using /tmp for packet captures is a bad idea, mmmkay?
Scott Ullrich
02:22 PM Feature #87: Wizards needed
Maybe also a Wireless Access Point wizard, like ssid, wpa/wpa2 + key, channel, bridged/routed, IP & DHCP settings.
...
Jim Pingle
01:37 PM Feature #87 (Needs Patch): Wizards needed
We really need wizards for some of the more advanced areas of pfSense:
Restore the start_new_cluster and join_clus...
Scott Ullrich
01:16 PM Revision 3bcd5555: Remove image file when error occour because image file is greater than partition size
Renato Botelho
03:34 AM Revision 2afbe080: Add allow-opts at Upstream igmpproxy interface if the package is present
Charlie

09/15/2009

11:27 PM Revision dd9892c6: We need to link carp interfaces to wan and lan. This used to be the behavior but somehow was reverted.
Scott Ullrich
03:59 PM pfSense Packages Bug #86 (Resolved): denyhosts on pfsense 1.2.2
I installed the denyhosts package earlier today and noticed it was not starting up. I went to the command line and no... Mike E.
01:49 AM Revision 1d333258: Add pfSense_BUILDER_BINARIES: and pfSense_MODULE:. Adjust Copyright to include 2009 on files that I have asserted (C) on
Scott Ullrich

09/14/2009

11:14 PM Revision 7ac5a4cb: Add pfSense_BUILDER_BINARIES: and pfSense_MODULE:. Adjust Copyright to include 2009 on files that I have asserted (C) on
Scott Ullrich
10:20 PM Revision 13d193c2: Add pfSense_BUILDER_BINARIES: and pfSense_MODULE:. Adjust Copyright to include 2009 on files that I have asserted (C) on
Scott Ullrich
08:38 PM Bug #85 (Rejected): PfSense 1.2.2 only halt
This is not a legit bug report, please ask on the forum or mailing list and you may find suggestions. We cannot do an... Chris Buechler
04:12 PM Bug #85 (Rejected): PfSense 1.2.2 only halt
I have a Pfsense 1.2.2 install on HP Proliant ML110G5 working fine with 4NICs GIGABIT.
The problem I detected is w...
kaneda otomo
05:16 PM Revision 40b48c6c: Fix multiple radius server handling.
Ermal Luçi

09/13/2009

08:13 PM Revision 89a31c7e: Prevent negative RADIUS_NAS_PORT. This is a hack on m0n0 and not needed on pfSense.
Ermal Luçi
04:19 PM Bug #80 (Closed): Stickies patch broken on 8.0
Stickies patch has been committed to freebsd head and MFC'd so no more necessary to be part of patches set. Ermal Luçi
12:20 PM Revision f211aa59: Flush all tables when restarting/saving a CP configuration.
Ermal Luçi
12:12 PM Revision 15527c00: Prevent negative RADIUS_NAS_PORT attribute. Before this was a hack made in m0n0 but which is not anymore valid in pfSense.
Ermal Luçi
11:53 AM Revision 508e5229: Before configuring CP make sure that all interfaces are not set for filtering with ipfw. Otherwise some wrong misconfigurations might happen when changing the interface on an active CP config.
Ermal Luçi

09/12/2009

10:30 PM Revision b6aed0e1: s/util/utils/
Scott Ullrich
09:11 PM Feature #84 (New): Nightly Filter Summary E-Mail
Scott and I talked about this earlier on IRC. Could be a package for 2.0, or worked in somehow.
A daemon of some s...
Jim Pingle
08:01 PM Revision f5024891: Add pfSense_BUILDER_BINARIES: and pfSense_MODULE: additions
Scott Ullrich
07:34 PM Revision 523855b0: Add pfSense_BUILDER_BINARIES: and pfSense_MODULE: additions
Scott Ullrich
05:34 PM Revision 50059c17: Set auto_release
Scott Ullrich
05:26 PM Bug #81: Captive portal problems
3) above may be fixed by locking addition on the status page checked in last night. Chris Buechler
05:25 PM Bug #81: Captive portal problems
Can't replicate the problem where CP stops functioning when the RADIUS server becomes unavailable. Tried using 1 and ... Chris Buechler
05:55 AM Revision 5c38d65a: set auto_release
Chris Buechler
01:51 AM Revision f986e402: Use already read in file to obtain the number of sessions
Scott Ullrich
01:42 AM Revision 3ea73062: Add missing Location:
Scott Ullrich
01:42 AM Revision d6f13f82: Add missing Location:
Scott Ullrich
01:42 AM Revision 283dc8a0: Redirect back to cp page after disconnection of user
Scott Ullrich
01:41 AM Revision d402b77f: Redirect back to cp page after disconnection of user
Scott Ullrich
01:30 AM Revision b3890d78: Lock around read call
Scott Ullrich
01:29 AM Revision 7c563481: Lock around read call
Scott Ullrich

09/11/2009

11:12 PM Revision 5ba2df71: Rename variables names to item_menu. ie: system -> system_menu
Scott Ullrich
09:49 PM Revision 20b9b335: Add more comments. Reformat
Scott Ullrich
09:40 PM Revision 868ba36d: flush out buffers so the loading prompt appears snappy
Scott Ullrich
08:16 PM Revision 4a993c8f: Sort ARP table. Sort items with hostnames first then list items without hostnames afterwards.
Scott Ullrich
07:44 PM Revision 53d4b84d: Sort items
Scott Ullrich
07:41 PM Revision 45887105: Sort aliases
Scott Ullrich
06:49 PM Revision 815f9631: Allow clicking on a column header to sort the table
Scott Ullrich
06:38 PM Revision c3a05140: Merge branch 'master' of git://rcs.pfsense.org/pfsense/stompro1-minorfixes
Scott Ullrich
06:30 PM Revision 5e3249f0: Sort by item name and include packages in the sorting order
Scott Ullrich
05:49 PM Revision 082df017: Sort by name
Scott Ullrich
05:36 PM Revision f0ed24ed: Nuke debugging helper
Scott Ullrich
05:34 PM Revision 4a8bc5a2: Add msort() which will sort lower and uppercase items teogether (packages for example). Sort packages by lower/upper. IE: arping, arpwatch, Backup
Scott Ullrich
04:02 PM Revision 1b197e55: Added checks to wol command execution to make it more obvious when the script fails.
If the wol command returns with anything other than 0, alert the user that the command
failed, and that they should l...
Josh Stompro
02:36 PM Revision 8acfca38: Fixes error that comes up when wake all is used.
This error was coming up when wake all was used from the services WOL page.
"Fatal error: Function name must be a str...
Josh Stompro
02:34 PM Revision 038c8142: Merge commit 'mainline/master'
Josh Stompro
01:54 PM Feature #83 (Closed): CSV import for ALIASES
Thought it might be nice to be able to import ip's or ports via a CSV or something. Corey Wicklund
10:25 AM Revision f441ab68: Properly send mpd logs to vpn.log. Filtering needs to be done in the file itself. Some trimming of what gets logged in the daemon itself needs to be done but that to a future review. This should partially fix Feature #73.
Ermal Luçi

09/10/2009

11:53 PM Revision 8b1f77be: Clarify what the drop down is for
Scott Ullrich
11:51 PM Revision 147b90b8: Add space in between save and end of table data
Scott Ullrich
11:18 PM Revision 64716c95: Add missing vncell
Scott Ullrich
10:51 PM Revision 80682f55: Add 1 meg to on size disk image
Scott Ullrich
10:50 PM Revision c126b548: Add 1 meg to on size disk image
Scott Ullrich
10:35 PM Revision 7335c4cf: Remove /var/run/firmware.lock as well
Scott Ullrich
10:34 PM Revision ae342f47: Remove /var/run/firmware.lock as well
Scott Ullrich
10:30 PM Revision 595459a3: Show what each of the numbers are during a upgrade size failure check
Scott Ullrich
10:29 PM Revision 5d15e968: Show what each of the numbers are during a upgrade size failure check
Scott Ullrich
10:26 PM Revision d2d86ca3: Use ['name'] instead of ['tmp_name']
Scott Ullrich
10:24 PM Revision 4fa1b013: Use ['name'] instead of ['tmp_name']
Scott Ullrich
09:33 PM Revision b6ef36e8: Make sure globals are set
Scott Ullrich
05:34 PM Revision 6f8662b9: Correctly fix Bug #64.
Ermal Luçi
04:55 PM Revision 0c9da721: Resolves issue #70.
Ermal Luçi
03:17 PM Revision e14d1c01: Trigger syncing of data always and let the apprpriate script(rc.filter_synchronize) decide if a notice is to be send or not. This removes dependency on keeping code synchronized with the syncing script.
Ermal Luçi
11:43 AM Bug #64 (Feedback): VLAN interface choices in 2.0 (creating, assigning)
https://rcs.pfsense.org/projects/pfsense/repos/mainline/commits/6f8662b948dd176534b4af836e147401d33e5ee1
This fixes ...
Ermal Luçi
11:17 AM Bug #70 (Resolved): Interface with DHCP server cannot be DHCP client
I commited a fix for this Ermal Luçi
09:21 AM Bug #60: Firewall rules edit -> DiffServ Code Point
This is not wrapped under advanced because so was the TOS functionality previously. Ermal Luçi
09:20 AM Bug #62 (Feedback): Check vlan 1.2 -> 2.0 upgrade code and interface naming.
AFAIK this should be all resolved.
I forgot to reference commits to this that's why you cannot see them here.
Ermal Luçi

09/09/2009

10:01 PM Revision 5e4071be: Seems we need even CDATA handling since it is used through packages.
Ermal Luçi
09:27 PM Revision 32113e06: Use empty() function for testing which is far more better than just <> "".
Ermal Luçi
09:23 PM Revision 9d3d1ac1: Make checks stronger.
Ermal Luçi
09:21 PM Revision 83cfae8d: Remove wrongly duplicated code. Leave a comment on the oddity that is the packages code.
Ermal Luçi
07:55 PM Bug #64 (New): VLAN interface choices in 2.0 (creating, assigning)
I did a sync on a 2.0 test box just now and I still see a VLAN interfaces in both of the places I mentioned, as new V... Jim Pingle
06:23 PM Bug #64 (Feedback): VLAN interface choices in 2.0 (creating, assigning)
It should be fixed as of now.
Forgotten reference to the issue during commit.
Ermal Luçi
06:49 PM pfSense Packages Bug #82 (Feedback): dns-server/tiny-dns-package not working after reinstallation
I have commited a few fixes. Please test the changes once the packages sync and report back. Thanks! Scott Ullrich
06:45 PM pfSense Packages Bug #82 (Resolved): dns-server/tiny-dns-package not working after reinstallation
Applied in changeset commit:"10124b099f3668814d1ac0dfdd6b7d5c8a5487ee". Anonymous
11:07 AM pfSense Packages Bug #82 (Closed): dns-server/tiny-dns-package not working after reinstallation
After a package reinstallation of 'dns-server' the service hangs after some time without any error messages and is no... Frank Schmidt
05:42 PM Revision 51043cd1: Revert "add crontab entries for snort auto block and snort update"
This reverts commit b0d639a5e7880ee55c671cbabdb01cd0f1ae1b38. Scott Ullrich
04:30 PM Revision b0d639a5: add crontab entries for snort auto block and snort update
robert zelaya
02:41 PM Revision 0eb230cb: If it is supposed to be an array then make sure it has the array type. This fixes wireless configuration problems at least.
Ermal Luçi

09/08/2009

08:52 PM Revision d7498a87: Handle vlans specially now that we have other than just vlan in the vlan interface names.
Ermal Luçi
08:49 PM Revision b86457b6: Fixed a few typos, expanded HCBI description, Expanded other descriptions.
Expanded on the description of the wizard so it is clearer about the situation it is to be used for.
Added the LAN ac...
Josh Stompro
08:49 PM Revision 2d53158f: Spelling and comment formatting changes, no code changes.
Josh Stompro
07:30 PM Bug #81: Captive portal problems
some of these from mailing list, also reported here:
http://forum.pfsense.org/index.php/topic,18516.msg95289.html
Chris Buechler
07:29 PM Bug #81 (Resolved): Captive portal problems
Several issues with the new captive portal locking have been reported.
1) /index.php: WARNING: unlock() - Could n...
Chris Buechler
03:37 PM Revision e7b81ad7: Fixed a few typos, expanded HCBI description, Expanded other descriptions.
Expanded on the description of the wizard so it is clearer about the situation it is to be used for.
Added the LAN ac...
Josh Stompro
03:17 PM Revision a8ca98e9: Spelling and comment formatting changes, no code changes.
Josh Stompro
03:03 PM Bug #80 (Closed): Stickies patch broken on 8.0
~~stickies.RELENG_8.diff~
Stickies patch needs fixing and then added back to patches.RELENG_8_0
Scott Ullrich
02:28 PM Bug #79 (Resolved): DNSMasq removed ISC-DHCP Log parsing. Need to write a replacement
From their notes:
Remove ISC-leasefile reading code. This has been deprecated for a long time,
and last time I re...
Scott Ullrich

09/07/2009

11:54 PM Revision cd327877: Don't show server load balancer pools in Gateway field
Chris Buechler
06:36 PM Feature #59 (New): Integrate Ermals PHP / FreeBSD ifconfig module
Chris Buechler
03:48 PM Feature #59 (Rejected): Integrate Ermals PHP / FreeBSD ifconfig module
Scott Ullrich

09/06/2009

07:52 PM Revision 3e6aaee5: Use stristr just in case of case sensitive nanobsd name
Scott Ullrich
07:52 PM Revision 68f452a8: Use stristr just in case of case sensitive nanobsd name
Scott Ullrich
07:50 PM Revision fe38f1da: Move nano check to top of function
Scott Ullrich
07:50 PM Revision b7cda8cc: Move nano check to top of function
Scott Ullrich
07:49 PM Revision 4c0d7036: Check globals variable
Scott Ullrich
07:49 PM Revision 3350a691: Check globals variable
Scott Ullrich
07:48 PM Revision 7475fc0b: Check for nanobsd in the filename for nanobsd upgrades since it is not a tar gzipped file similar to the full upgrades.
Scott Ullrich
07:47 PM Revision d79be80d: Check for nanobsd in the filename for nanobsd upgrades since it is not a tar gzipped file similar to the full upgrades.
Scott Ullrich
02:42 PM Bug #18 (Feedback): Link loss can cause multi-WAN difficulties
This needs more testing, and possibly a different solution, depending on how the routing functions in FreeBSD 8 and w... Chris Buechler
02:12 PM Bug #18 (Resolved): Link loss can cause multi-WAN difficulties
This has been resolved with my recent change. I just tested by pulling my Wimax network interface and the static ro... Scott Ullrich

09/05/2009

11:03 PM Revision a91333d3: Add a line on sys info widget for NanoBSD boot slice if the platform is nanobsd
Jim Pingle
09:10 PM Revision 6160967a: Bump to RC3. RC2 was never released officially and was only available via snapshots. Bumping to avoid confusion since it was tagged for so long
Scott Ullrich
08:25 PM Revision dec5cb85: Add <ipv6nat/> to <diag>. Resolves #28
Scott Ullrich
06:31 PM Bug #72 (Closed): Configured static routes are not re-added when link from LB Pool goes down then up
Closing this as it's a duplicate of #18, which has a better description of the full issue. Chris Buechler
06:09 PM Bug #72: Configured static routes are not re-added when link from LB Pool goes down then up
Patch added to 7.2 / 2.0 and 8.0 / 2.0 that will prevent FreeBSD from removing the routes associated with a interface... Scott Ullrich
06:25 PM Bug #18: Link loss can cause multi-WAN difficulties
Patch added to prevent the removal of static routes upon interface link loss. This is also similar to #72 ? Scott Ullrich
04:40 PM Revision 93958dab: Correct typo. Reported-by: stompro(forums:http://forum.pfsense.org/index.php/topic,18841.0.html)
Ermal Luçi
04:37 PM Bug #78 (Resolved): Outgoing load balancer needs configuration upgrade
Just tested upgrade outgoing and incoming load balancing from 1.2 -> 2.0.
It appears the only thing that needs upg...
Scott Ullrich
04:36 PM Revision 36df510d: Send a notify message only when really the synchronize is being done
Ermal Luçi
04:34 PM Revision 9813a154: Do not try to syncronize data when this setting is not enabled
Ermal Luçi
04:30 PM Bug #28: Problems with m0n0wall configuration conversion
Applied in changeset commit:"dec5cb8537a019f5bf1b810f32d5cb047db2b3f4". Scott Ullrich
04:26 PM Bug #28 (Resolved): Problems with m0n0wall configuration conversion
Scott Ullrich
01:13 AM Revision 91cae49d: Add documentation headers for each function
Scott Ullrich
01:03 AM Revision a183dd4d: Remove newlines
Scott Ullrich
01:02 AM Revision 06287a5f: Do not echo out, use log_error()
Scott Ullrich
01:00 AM Revision f11527de: Correct typo 'Could'
Scott Ullrich
12:57 AM Revision 2c7ac8dc: Ensure file exists
Scott Ullrich
12:56 AM Revision 743c30df: Do not email the same message twice
Scott Ullrich

09/04/2009

09:42 PM Revision d902ef8b: Use size 50. Patch from Fernando Lemos
Scott Ullrich
09:25 PM Revision 3dfd1523: Use unlink()
Scott Ullrich
09:19 PM Revision fb05887a: Use unlink()
Scott Ullrich
09:15 PM Feature #77 (Closed): All files need function headers and also file headers
Need file headers such as this:
/****h* pfSense/notices
* NAME
* notices.inc - pfSense notice utilities
* ...
Scott Ullrich
07:04 PM Revision 5a439cb5: fix typo
Chris Buechler
06:11 PM Bug #72: Configured static routes are not re-added when link from LB Pool goes down then up
Seth Mos wrote:
> If I understand this correctly, when a link goes physically down, freebsd will reset the routing t...
GS FON
05:35 PM Bug #72: Configured static routes are not re-added when link from LB Pool goes down then up
If I understand this correctly, when a link goes physically down, freebsd will reset the routing table.
When the lin...
Seth Mos
02:53 AM Revision eb006b8f: Reformat file
Scott Ullrich
02:29 AM Revision a9e2c82c: Remove extra listtopic
Scott Ullrich
02:28 AM Revision 6a3aed9b: Restore correct variable
Scott Ullrich
02:26 AM Revision f2ad7765: Add listtopics for VoIP screen cleaning it up
Scott Ullrich
02:17 AM Revision 11a98a4a: Humans are not mathematicians by default so telling them interface 0 does not compute. Use +1
Scott Ullrich
02:13 AM Revision 71300e64: We know these interfaces are WAN, rename interface to WAN
Scott Ullrich
02:08 AM Revision 9e138c85: Break each interface up into their own listoptics
Scott Ullrich
02:03 AM Revision f2fe3984: Break each interface up into their own listoptics
Scott Ullrich
01:50 AM Revision 353a94fd: Change variables to match the form
Scott Ullrich
01:37 AM Revision 7e1f0348: Change 'Interface of this connection' to 'Select interface #X that you would like to shape'
Scott Ullrich
01:20 AM Revision 0ece92a1: Change numberconnections to Enter number of XXX type connections
Scott Ullrich

09/03/2009

10:53 PM Bug #76 (Resolved): Changes needed to traffic shaper since its rewrite
1. Change all lan opt1 opt2 to lan wan wan1 etc (use friendly interface name)
2. Uncomment and fix the 80% error You...
Scott Ullrich
08:20 PM Feature #74 (Closed): Log successful and failed logins to the web gui
They already are in 2.0. Chris Buechler
08:10 PM Feature #74 (Closed): Log successful and failed logins to the web gui
I would like to request the ability to log the successful and failed attempts to login to the web gui. Alan Shearer
08:19 PM Feature #75 (Closed): Log successful and failed logins to SSH
They already are in the system log. Chris Buechler
08:11 PM Feature #75 (Closed): Log successful and failed logins to SSH
I would like to request the ability to log the successful and failed attempts to login to pfsense via SSH. Alan Shearer
08:05 PM Feature #73 (Resolved): Log failed PPTP vpn logins to PPTP log
I would like to request that failed attempts to login to the pfsense PPTP VPN server are logged to the PPTP log tab. ... Alan Shearer
01:20 AM Todo #61 (Resolved): Replace IPsec ping hosts shell script
Chris Buechler
01:03 AM Revision 4013744d: fully remove NAT-T, and bring back DPD, nothing wrong with it
Chris Buechler

09/02/2009

07:43 PM Revision 6dba5e88: Disable NATT and DPD
Scott Ullrich
07:41 PM Revision ec1bcf1b: Disable NATT
Scott Ullrich

09/01/2009

09:07 PM Revision 6a58710e: Fix log sorting order so that it honors the setting.
Seth
07:49 PM Revision a2c311e6: game was canceled... no longer available...
mfuchs
07:43 PM Revision 7241feb1: Fix typo in variable name which resulted in a incorrect format for the /var/db/ipsecpinghosts file.
Fixes half of #61 Seth Mos
05:01 PM Todo #61: Replace IPsec ping hosts shell script
Fixed the creation of the /var/db/ipsecpinghosts. It was missing the source IP addres because of a typo in a variable. Seth Mos
04:59 PM Bug #67 (Resolved): IPsec logs always show in reverse (return_clog() issue)
Seth Mos
04:59 PM Bug #67: IPsec logs always show in reverse (return_clog() issue)
Zapped incorrect logline which may have came from a incorrect upstream merge.
$sor was defined twice.
Seth Mos
10:27 AM Bug #72 (Closed): Configured static routes are not re-added when link from LB Pool goes down then up
The routes table is not acting proper when links from pool goes down then up (with new ip). GS FON
06:18 AM Revision 06702ef7: add missing sysctl to config upgrade
Chris Buechler
06:09 AM Revision 2602fe39: Make the config upgrade sysctls match the correct values in the default config.xml.
Chris Buechler
02:27 AM Todo #71 (Resolved): Improve sysctl handling
The sysctl handling needs some help. Hard coding values in configurations is problematic, in cases where the default ... Chris Buechler

08/31/2009

11:45 PM Bug #70 (Resolved): Interface with DHCP server cannot be DHCP client
Shouldn't allow switching interface IP config from static to DHCP/PPPoE/PPTP on an interface where the DHCP server is... Chris Buechler
09:37 PM Revision b34838d3: Use == false for better readability with file_is_for_platform() function
Scott Ullrich
09:37 PM Revision 6a1bf73d: Use == false for better readability with file_is_for_platform() function
Scott Ullrich
09:36 PM Revision c817023d: Use == false for better readability with file_is_for_platform() function
Scott Ullrich
09:34 PM Revision bce0292f: Correct typo for filename
Scott Ullrich
09:34 PM Revision d23c2645: Correct typo for filename
Scott Ullrich
07:19 PM Revision f9e06425: Add function that extracts etc/platform from an upgrade file and compares to the file on disk. This replaces the dumb filename platform check.
Scott Ullrich
07:18 PM Revision f0394a03: Add function that extracts etc/platform from an upgrade file and compares to the file on disk. This replaces the dumb filename platform check.
Scott Ullrich
04:14 PM Bug #69 (Resolved): OpenVPN 'local' directive
The OpenVPN local directive is forced to be specified (by the interface drop down), forcing the OpenVPN server to use... Chris Buechler
01:24 AM Bug #68 (Resolved): Dyndns for second WAN( opt1) does not work
There are two problems with the dyndns page.
1) When ever I make any changes (disable/enable, or aything at all) ...
GS FON

08/30/2009

05:13 PM Bug #67 (Closed): IPsec logs always show in reverse (return_clog() issue)
Due to a bug in return_clog(), the IPsec logs always show in reverse. It seems to be the only logs page that actually... Jim Pingle

08/29/2009

10:01 PM Revision 00abad24: Turn off auto assignment of interfaces code until the author can fix its issues
Scott Ullrich

08/28/2009

01:30 PM Bug #66 (Closed): Nanobsd does not work on WRAP
Opening ticket to track this known issue.
PC Engines WRAP.1C/1D/1E v1.11
640 KB Base Memory
130048 KB Extended ...
Chris Buechler
01:23 PM Todo #65 (Resolved): Ability to disable accounts
There needs to be a checkbox to disable accounts without removing them, and without specifying an expiration date (yo... Chris Buechler

08/27/2009

11:29 PM Revision 70b139a3: Grammar fixes, patch from Josh Stompro
Chris Buechler
07:35 PM Bug #28 (New): Problems with m0n0wall configuration conversion
one other issue:
<diag/>
has to be replaced with:
<diag>
<ipv6nat/>
</diag>
or the unset on ipv6nat when savin...
Chris Buechler

08/26/2009

11:50 PM Bug #64 (Resolved): VLAN interface choices in 2.0 (creating, assigning)
While fixing some other issues I noticed that when you attempt to create additional VLANs, the VLAN interfaces are al... Jim Pingle
11:44 PM Bug #62: Check vlan 1.2 -> 2.0 upgrade code and interface naming.
You might sync and try again.
I fixed a couple bugs in the automatic vlan hardware detection today that could have...
Jim Pingle
02:41 PM Bug #62 (Resolved): Check vlan 1.2 -> 2.0 upgrade code and interface naming.
Check vlan 1.2 -> 2.0 upgrade code and interface naming. Also check deleting vlans and interface assignment.
I ran...
Seth Mos
08:45 PM Revision 48b57191: On 1.2. the traffic graphs have only color per item and as such do not use a array.
Seth
07:03 PM Revision eca4bfbc: More fixes for vlan detection
Jim Pingle
06:37 PM Revision 459f45af: Slight fix to vlan hardware support detection.
Jim Pingle
06:03 PM Revision 4ae540e5: Unbreak ipsec on my firewall. For some reason p2_ealgos is not being defined and requires a 'require' to bring it in. Not sure why this is happening but this fix unbreaks my case at least.
Scott Ullrich
04:29 PM Todo #63: Change web interface default to HTTPS
In this scenario would there also be a way to change back to HTTP if the user so chooses?
The way that browsers fr...
Jim Pingle
04:14 PM Todo #63: Change web interface default to HTTPS
Are we proposing that HTTP no longer function as the webConfigurator and simply redirects to https?
What happens i...
Scott Ullrich
03:50 PM Todo #63 (Resolved): Change web interface default to HTTPS
The web interface needs to change to HTTPS by default, probably with an auto redirect from HTTP to HTTPS to avoid use... Chris Buechler
04:17 PM Revision 96c52992: Do not direct deliver
Scott Ullrich
02:39 PM Todo #61 (Resolved): Replace IPsec ping hosts shell script
The old IPsec ping hosts shell script was gutted as it grepped through the entire config.xml. This was a serious perf... Seth Mos
01:45 PM Revision 92a5e926: Revert "Use php to detect product name on shell scripts"
This reverts commit 07881462254d007cf77c1a5b09e7a840f708657e. Renato Botelho
03:15 AM Revision 68e74187: remove debugging echo
Scott Ullrich
02:04 AM Revision 52bcf4b2: Check correct variables
Scott Ullrich
01:15 AM Revision d86d411a: Do not enter for loop if all variables are 0. Apparently we have some include ordering issues that are preventing these variables from being set.
Scott Ullrich
12:06 AM Revision 66058d00: Ipsec.inc is in functions.inc
Scott Ullrich

08/25/2009

11:51 PM Revision 177f8e32: Change name to rc.carpmaster and rc.carpbackup
Scott Ullrich
11:00 PM Revision 3790bbcf: Remove incorrect "shaper does not work with bridging", it works perfectly fine.
Chris Buechler
08:34 PM Revision 6eac9b90: Pretty sure ruleid should be a hidden field.
Scott Ullrich
08:29 PM Revision 234bb0a5: We no longer have a carpdev patch. Comment out the radio button
Scott Ullrich
08:17 PM Revision c24d44de: Use MASTER and BACKUP
Scott Ullrich
08:04 PM Revision b100b85d: Resolve elsif error
Scott Ullrich
07:35 PM Revision ae75bcb4: Adding rc.carpup and rc.carpdown
Scott Ullrich
07:34 PM Bug #60 (Resolved): Firewall rules edit -> DiffServ Code Point
1) is not wrapped under an advanced button
2) needs to be a select drop down box if those really are the only values...
Scott Ullrich
07:17 PM Revision 39cacda2: Add and use rc.carpup and rc.carpdown
Scott Ullrich
07:08 PM Revision b9ab1f26: Summons the capitalization police
Scott Ullrich
07:01 PM Revision 08ce2d6a: Correct hint
Scott Ullrich
06:51 PM Revision 7d8c8a28: Add seperator
Scott Ullrich
06:46 PM Revision 4090c90f: Correct pconfig variables
Scott Ullrich
06:44 PM Revision f804b689: Require notices.inc
Scott Ullrich
06:41 PM Revision 7bb30b16: s/growl/smtp/
Scott Ullrich
06:38 PM Revision 4bbb3155: Ensure both fields are present before sending email
Scott Ullrich
06:37 PM Revision b19369b7: Adding SMTP support. Ticket #59
Scott Ullrich
04:51 PM Feature #58 (Resolved): E-Mail Notifications/Alerts
Scott Ullrich
02:48 PM Feature #58: E-Mail Notifications/Alerts
Basic support for email notifications have been added. Example:
---------- Forwarded message ----------
From: <...
Scott Ullrich
02:21 PM Feature #58: E-Mail Notifications/Alerts
Wouldn't have to be encrypted, for those who don't want to send potentially sensitive info over email, it could simpl... Chris Buechler
11:46 AM Feature #58 (Resolved): E-Mail Notifications/Alerts
It would be good to have some kind of configurable system for e-mail notifications of system alerts make it in for 2.... Jim Pingle
02:06 PM Feature #59 (Closed): Integrate Ermals PHP / FreeBSD ifconfig module
It will be desirable to integrate Ermals recent work on turning ifconfig into a php module. This will speed up the w... Scott Ullrich
02:44 AM Revision 98301932: Fix typo
Scott Ullrich
02:27 AM Revision c0234938: Fix error for server #1
Scott Ullrich
02:17 AM Revision be5d59d7: Allow up to 3 remote syslog servers. Resolves #11
Scott Ullrich
01:47 AM Revision e31288e3: rename interface to OPTYmdHis Resolves #16
Scott Ullrich
01:21 AM Revision 2990acf8: Remove whitespace and \t
Scott Ullrich
01:20 AM Revision 2d0b9ebd: Remove whitespace and \t
Scott Ullrich
01:00 AM Revision d6e8dfa1: Use array_splice() to unset items that should not be sync'd (nosync) Resolves #38
Scott Ullrich
12:54 AM Revision 86fa7e0e: Use array_splice() to unset items that should not be sync'd (nosync) Resolves #38
Scott Ullrich
 

Also available in: Atom