Activity
From 09/16/2009 to 10/15/2009
10/15/2009
- 10:44 PM Revision 91bfbd00: Call conf_mount_rw() and ro where needed
-
10:38 PM Bug #112 (Resolved): mDNS firewall logs not displayed properly.
- This does appear to be fine in 1.2.3 and 2.0.
-
10:30 PM pfSense Packages Bug #114 (Resolved): squid.inc issue cache_replacement_policy heap LFUDA
- Applied in changeset commit:"c0c5582340eaf9eebf2ba363eb786b88758110ef".
-
09:20 PM pfSense Packages Bug #114 (Resolved): squid.inc issue cache_replacement_policy heap LFUDA
- This issue is a mistake on the order of the line default config squid.inc
@
cache_dir $disk_cache_system $cache... - 03:36 PM Revision db345cd5: Set maximum memory to 64M for this page. Fixes #113
- 03:36 PM Revision d5f5cf26: Set maximum memory to 64M for this page. Fixes #113
-
03:31 PM Bug #111: addresses ending in .224-239 will not policy route
- I've tested with pfSense-1.2.3-2g-20091015-0138-nanobsd.img.gz and everything is now routing correctly.
-
- Applied in changeset commit:"d5f5cf26af62467bdadba5be592e3ddbc6ac2df3".
-
09:55 AM Bug #113: Large failover DHCP scopes don't work
- It's the lease cleanup/deletion code that's using too much memory, it looks like. I suppose that could do a size chec...
-
- As reported here:
http://article.gmane.org/gmane.comp.security.firewalls.pfsense.support/18749
If a large (tens o...
10/14/2009
-
- I committed a fix that should prevent the files from being copied over on 2.0. Should fix this.
https://rcs.pfsense.... -
10:24 AM Bug #111 (Feedback): addresses ending in .224-239 will not policy route
- Feedback is needed after a new patch is in.
New builds of pfSense 1.2.3 are needed since this is a kernel patch. - 12:32 AM Revision 9c030892: Revert "Allow setting of LB Server mode"
- This reverts commit c5dfeaf6c31999688034c22b4fcb56477f0b9bd7.
- 12:16 AM Revision c5dfeaf6: Allow setting of LB Server mode
10/13/2009
-
- this is 1.2.2 actually, may not be an issue in 1.2.3.
-
- Not sure why it isn't parsing properly. At least a simple test with the CLI version of the parser seems to be working...
-
- There is an issue in the parsing of firewall logs for mDNS traffic. The destination IP shows as something like 0.1.6....
-
- I can also replicate this.
-
- This was reported in the forum, and I happened to be seeing the same behavior.
http://forum.pfsense.org/index.php/to... - 07:18 PM Revision 9974dae5: Remove upgrade IMG file after failure
- 07:17 PM Revision a66393ce: Remove upgrade IMG file after failure
-
10:58 AM pfSense Packages Bug #82: dns-server/tiny-dns-package not working after reinstallation
- Thanks for the fixes. The bug ist partially solved by the changes. I have noticed two issues that still exist:
# ...
10/12/2009
- 10:56 PM Revision 729b8d7c: oops, remove stray ;
- 10:53 PM Revision d5d5364f: Do not allow mounting of RO mode when the firmware update manual mode is engaged (RW)
-
- It's now up to 39 working packages out of 42 available to install. And two of those don't work on full installs eithe...
10/11/2009
- 09:15 PM Revision 89c3be09: fix typo
- 08:37 PM Revision 1215dada: fix typo
-
07:21 PM Revision ad828d4f: Merge branch 'master' into global
-
-
- I worked a bit on packages today and fixed quite a few to work on NanoBSD. There are still several with issues that w...
- 06:23 PM Revision 0104833b: Add note about uncompressed images/files
- 06:22 PM Revision 7ce55201: Add note about uncompressed images/files
- 06:31 AM Revision effecc51: Add missing , Noticed-by @px via twitter
- 02:24 AM Revision 33cf5266: 1 minute != 40 seconds. Change to 70 and give the slower boots a chance to boot
- 02:24 AM Revision 21038c67: 1 minute != 40 seconds. Change to 70 and give the slower boots a chance to boot
- 02:16 AM Revision 5c33111d: Ensure glabel exists so we can mount ufs. Fixes #110
- 02:16 AM Revision bfa78efe: Ensure glabel exists so we can mount ufs. Fixes #110
- 01:45 AM Revision 61ff0de9: Show size in uppercase
- 01:44 AM Revision 9dd6215c: Show size in uppercase
- 01:40 AM Revision eab89033: Use /etc/nanosize.txt
- 01:40 AM Revision 62d01a53: Use /etc/nanosize.txt
- 01:39 AM Revision 8ae39a39: Use /etc/nanosize.txt
- 01:11 AM Revision c43ed2f9: Output NanoBSD image size
- 01:10 AM Revision b000d606: Output NanoBSD image size
10/10/2009
-
10:20 PM
Bug #110 (Resolved): NanoBSD slice duplication and switching still has some bugs
- Applied in changeset commit:"5c33111d5d83cf073e5bf0e0161551dcae8bd573".
-
- From a freshly imaged NanoBSD RC3 image (official posted one) I did the following:
* Use WebGUI to set slice 2 as ... - 08:07 PM Revision bfdb8779: Turn off sortable on this page. Something else is sorting the data prior and is causing the ordering to get foobar'd.
10/09/2009
-
- The issue is that when unsetting array members the count() that is evaluated on every iteration so it will not correc...
-
- This reverts commit d6e8dfa1d6b4bad7ef6f71263f275ca8e8b0a706.
10/08/2009
-
-
-
- Please try 1.2.3-RC3. A linkup bug was fixed where the various processes would not invoke after unplugging or plugg...
10/07/2009
-
-
10/06/2009
-
10:58 PM Bug #88: TXCSUM forced on at boot which breaks wireless bridging
I have this problem running on an Alix2d2 with an Atheros card, so it's also a vr0+ath0 combo. 'ifconfig vr0 -txcs...-
-
-
- Here is a link to that spreadsheet of NanoBSD packages mentioned in the previous update:
http://spreadsheets.googl... -
- I have a Google Docs spreadsheet that I have started, listing packages for NanoBSD and testing results, error message...
-
- The drop down menu that replaced long lists of tabs, such as firewall rules with many tabs, and some packages such as...
10/05/2009
- 09:31 PM Revision e43e4bb1: Adding apple icon for themes
- 09:29 PM Revision a3c77064: Add theme Apple touch icon support
- 09:28 PM Revision cd227af5: Add theme Apple touch icon support
- 09:21 PM Revision b41b4063: Add shiny webclip icon for Iphone homescreen bookmarks.
-
07:23 PM Revision 25ebeb96: Add shiny webclip icon for Iphone homescreen bookmarks. Please MFC to 1.2.3
-
-
-
- 05:22 PM Revision 6daa46be: Automatically source common items so that config is in the eval() context
- 05:20 PM Revision 8586a962: Automatically source common items so that config is in the eval() context
-
- Do some whitespace cleanup while here.
10/04/2009
-
-
- At a glance it looked like it just made a different bug apparent where VLANs shouldn't have that set, but that code a...
-
09:07 AM Todo #107: NanoBSD - Update Packages to work properly with 1.2.3-RC2 NanoBSD
- FreeSwitch Installation fails on my nanobsd 1.2.3-RC3 built on Sun Oct 4 02:37:42 UTC 2009. The memory backed /var pa...
- 03:13 AM Revision 9490c282: moving setup_microcode above interfaces_vlan_configure makes interfaces_vlan_configure log errors to the console, so move it after to silence.
10/03/2009
- 05:04 AM Revision 827a7864: Do not include head.inc twice
- 04:44 AM Revision 9308e4c1: Correct misc tab URL
- 04:38 AM Revision f9fb2569: Alert if there is a problem sending the test message
- 04:25 AM Revision 11b77414: Do not set font size, it breaks the default css and ends up overflowing the menu
- 04:02 AM Revision 6b060a2f: Remove more stray characters. Someone needs to start testing their changes!
- 04:01 AM Revision 9e01d6eb: Remove stray characters.
10/02/2009
- 11:26 PM Revision b0e382de: Oops, use the pfSense jumpto service for the Book and add a pfSense custom search portal powered by google that is limited to specific pfSense
-
- Looks like that last patch may have had some unintended side effects on vlans:
http://forum.pfsense.org/index.php/... -
- Xauth is forced for IPsec mobile clients in 2.0, breaking all upgraded configurations.
-
01:52 PM Todo #107: NanoBSD - Update Packages to work properly with 1.2.3-RC2 NanoBSD
- ATM I'am in no condition to test all of them on my working router :)
in a few weeks i planned on setting up some k... -
- What we need is someone to go through and try them all and see *specifically* which ones work and which don't. And id...
-
- 8/10? Come on. If you are going to file a bug report please at least list the packages that have issues!
-
- Some (most likely 8/10) packages need writing access to their config files...
this leads to warning messages.. and i... -
- Updates with a cached ip seem not to work properly after
a line hard reset (by ISP or manually).
My ISP deconnects ...
10/01/2009
-
-
- Suggested-by: billm@
-
-
-
-
-
- * Make optimizations around it.
* Make sure when we reload teh underlying interface we reload carp too.
* Some fixes ...
09/30/2009
- 10:26 PM Revision 6b0c5879: If /etc/spwd.db.tmp exists remove it before running pwd_mkdb
- 10:53 AM Revision 0c8ec13a: Make sure that we always end the file with a carriage return, if we have a single record the carriage return is missing which causes dnswatch to crash.
-
09:32 AM pfSense Packages Feature #105 (Resolved): SquidGuard: Add progress bar for blacklist fetch with cancel/resume button
- A progress bar for fetching the blacklist file is needed in the SquidGuard package. Something similar to the rules do...
- 12:42 AM Revision 817e358d: Turn off auto update feature on NanoBSD platform. This will be addressed in 2.0
09/29/2009
-
-
09/28/2009
- 10:47 PM Revision ad9c8bb4: Turn off FLOWTABLE
-
01:36 PM pfSense Packages Bug #104: phpSysInfo e LightSquid - direct access without password
- Scott Ullrich wrote:
> Use a VPN then. If you need further help post to the mailing list or forum.
OK Scott! Th... -
- Use a VPN then. If you need further help post to the mailing list or forum.
-
- Welkson Renny de Medeiros wrote:
> Hi pfSense Team!
>
> Sorry by my poor english!
>
> Security question:
>
... -
- #1 Do not assign tickts to people
#2 Use a firewall rule to prevent logins to the webGUI -
- Hi pfSense Team!
Sorry by my poor english!
Security question:
¤https://192.168.1.1/ (login is required)
¤... -
- 01:04 AM Revision 3eec7a4f: If gzsig does not exist then return 1
- 01:04 AM Revision c50da179: If gzsig does not exist then return 1
09/26/2009
-
- The custom options field is missing for OpenVPN client configurations in 2.0.
-
06:47 PM pfSense Packages Bug #102 (Closed): Web GUI access problem
- While configuring General Conf, I put https for access. Unfortunately, now I can't access my pfsense through web gui ...
- 03:49 PM Revision b7a9691a: Fix siproxd rule generation
- 03:09 AM Revision f5d7fe7c: fix Everything remote syslog option
- Resolves #91
- 12:34 AM Revision 19ee38b4: move setup_microcode above the interface configuration, so in circumstances where the interface configuration needs to override those settings for working around certain problems (like disabling tx/rx checksum for wireless bridging) it doesn't get stomped on at boot time.
09/25/2009
- 11:49 PM Revision 369fb263: Disable checksum offloading on wired interfaces when a wireless interface is bridged.
- Resolves #88
-
- Fixed
-
- additional commit to fix at boot time.
https://rcs.pfsense.org/projects/pfsense/repos/mainline/commits/19ee38b4c955... -
- That patch won't help at boot, unfortunately. The bridge is setup and that code is evaluated before the settings chec...
-
- Fixed in 1_2.
https://rcs.pfsense.org/projects/pfsense/repos/mainline/commits/369fb26331d05781e42835776c8c31105f573... -
-
-
-
-
09/24/2009
-
- We do not track hardware-specific FreeBSD issues as we can't do anything about them, report to a FreeBSD list for help.
-
12:55 PM Bug #101: XIRCOM CreditCard 10/100 PCMCIA Ethernet card not working
- Scott Ullrich wrote:
> Sorry but this is not a valid bug report. You need to ask about this in the forum or mailin... -
- Sorry but this is not a valid bug report. You need to ask about this in the forum or mailing list.
http://lists.... -
- I'm trying to install pfSense on a Thinkpad 390E with two PCMCIA Xircom CE3B NIC cards. It seems that pfSense is not ...
-
08:07 AM Bug #98: vlan_interface always down......
- Ermal Luçi wrote:
> Patch committed.
>
> Since refrenced commits seems not to work for me(special chars in the na...
09/23/2009
- 11:01 PM Revision 351f5e6a: Rename ttyd -> ttyu
- 10:16 PM Revision fe4397d2: Nuke sorting it apparently changed the ID association
- 10:05 PM Revision ed371120: Merge remote branch 'mainline/master'
-
- 09:04 PM Revision f65c2f4c: Filter rules for interface-subnet rules fixed.
- 08:39 PM Revision 685c1413: Merge remote branch 'mainline/master'
- 08:37 PM Revision dd30341d: More IPSec, filter.inc changes
- 07:47 PM Revision 64d0a55d: Uncomment safety-belt checks that are required to avoid filter errors. Not sure why they are uncommented? Unfinished testing is my first guess.
- 07:26 PM Revision 941fb7b4: Only create a rdr for local interfaces which is destined for the actual address we have a portforward for.
- This prevents people from ending up in our netcat code for reflection when trying to access other websites.
Should fi... -
- sio was replaced with uart which we had already taken care of. but it seems that isa probing is no longer happening ...
-
- Boot: 1
/boot.config: -D
Consoles: internal video/keyboard serial port
BIOS drive C: is disk0
BIOS 639kB/49... - 06:39 PM Revision 9dc072e4: Here we go again .. IPSec stuff
- 05:11 PM Revision c339557b: register_argc_argv needs to be On so that we can process rc.linkup events
-
- Pushing off 'till 3.0.
-
03:25 PM Bug #99 (Feedback): Reflection is broken in 2.0
- Scott Ullrich wrote:
> Surfing into a website results in:
>
> nc [-46DEdhklnrStUuvz] [-e policy] [-i interval] [-... -
- This is closer than it was, but it still doesn't work. The port in inetd.conf and the one in the rdr don't match. The...
-
-
- Patch committed.
Since refrenced commits seems not to work for me(special chars in the name?!) commits for referen... -
- Ermal noticed the same limit when he fixed another bug:
http://redmine.pfsense.org/issues/show/64 -
- My vlan real name is bge0_vlan1.
In pfsense main page or interface_status page always see the interface down.
I che... - 03:39 AM Revision 25c09d9c: Show page title
09/22/2009
- 10:51 PM Revision f1604340: Axe the s in developers. Capitalize accordingly. Suggested by JimP
- 10:51 PM Revision 92c5013c: Axe the s in developers. Capitalize accordingly. Suggested by JimP
- 10:50 PM Revision 43cca7d6: Axe the s in developers. Suggested by JimP
- 10:48 PM Revision fb56bff1: Rename PHP Shell to developers shell
- 10:47 PM Revision 3f64051e: Rename PHP Shell to developers shell
- 10:07 PM Revision 11f52e40: Clarify that the URL should be a RCS url and that it should be HTTP
- 09:18 PM Revision bd875499: WIP: IPSec changes
- 09:10 PM Revision 3b60a138: WIP: fixing IPSec screens/config
-
- It would be desirable to sync the captive portal database between CARP members.
-
- This would allow easily negating all local networks (internet) where usage of "floating rules" is not desirable easily.
-
11:09 AM Feature #83: CSV import for ALIASES
- My apologizes didn't even notice the triangle.. Thanks for being one step ahead of me! And great project!
09/21/2009
- 11:13 PM Revision 581905c8: Pass origname instead of relying on a global
- 11:12 PM Revision 978fd2e8: Pass origname instead of relying on a global
-
-
- 2.0 features a import alias from list feature. Click on the pyramid.
-
- Updating target version to 3.0. 2.0 is in feature freeze.
- 08:12 PM Revision faebbab3: Only unload ipfw.ko if it is loaded. Doh
-
- Mark has fixed these issues.
- 07:55 PM Revision 4f7ead45: Revert "Properly send mpd logs to vpn.log. Filtering needs to be done in the file itself. Some trimming of what gets logged in the daemon itself needs to be done but that to a future review. This should partially fix Feature #73."
- This reverts commit f441ab6809cdf358c321144bb74da1f550136b17.
-
-
- "I encountered a bug in #pfSense after upgrade from m0n0wall. No traffic was possible on an interface which had the s...
-
- Tinkering around on a 2.0 box which was upgraded from 1.2.x, it reinstalled the dashboard package which, predictably,...
-
- Commit f441ab6809cdf358c321144bb74da1f550136b17 broke it. I have reverted.
-
- I was forced to revert this change f441ab6809cdf358c321144bb74da1f550136b17 as it broke system logs and vpn logs.
-
-
-
- This is a note to myself so I don't forget this. On my 2.0 test box I see filter log entries with "TCP:", meaning the...
-
- Closing. This is working properly in snapshots after this fix went in.
-
- Applied in changeset commit:"5548a95ca1fb6130ab9a0ffeb092cf27080829d8".
-
-
- 12:14 AM Revision 1f302424: Rename all Help area items
- 12:13 AM Revision 7333e06b: s/Doc Site/Documentation/
- 12:08 AM Revision 471ce716: Add target support which allows launching links in a new window/tab, etc for help menu area
- 12:04 AM Revision f8a6be5f: Squeeze help menu in
- 12:01 AM Revision b24b485d: Squeeze help menu in
09/20/2009
- 11:59 PM Revision db4aac13: Squeeze help menu in
- 10:31 PM Revision 37efa12a: Rename Commercial Support to Support so it appears correctly in all themes. Need to find the font weight for the drop downs and lower that a bit.
- 10:26 PM Revision 35ee5e8d: Squeeze Help area in
- 10:22 PM Revision 669716df: Adding new 'Help' menu area with common areas. These items call pfSense jumptos such as http://www.pfsense.org/j.php?jumpto=book
-
- 02:30 PM Revision 049cfa17: Fix rdr generation, fix by ltning
-
-
-
-
-
-
- Let this for now to feedback
-
-
- "Everything" isn't working as it should, note to self to fix when I get back.
-
- As subject says. Ltning and I both seeing on multiple systems. Other logs (Firewall, OpenVPN, etc.) do work.
09/18/2009
-
- 03:22 PM Revision 09be0c76: Remove leftover code per Ermal
-
- We may need to find out what other hardware people are using then, it is a problem with vr0+ath0 at least. Not sure w...
-
- This is not universally true, there are instances I know of where this works fine, including my own AP. Maybe driver-...
-
- When you have a wireless interface bridged to a wired interface, txcsum needs to be disabled on the wired NIC in orde...
-
- See also:
http://blog.stardothosting.com/2009/08/12/freebsd-pf-packet-filter-shell-script-to-report-on-hacking-att... -
10:15 AM pfSense Packages Bug #89 (Resolved): Mod_Security+Apache+Proxy apache configuration bug (and fix)
- This package tries to load apache's mem_cache module using a wrong name (mod_memcache).
Replace line 503 in file /... - 01:48 AM Revision 9e7ef1a5: Update locking to use Ermals non semaphore patch. I just beat the holy heck out of it with the CP torture scripts and all seems OK
- 01:47 AM Revision e6b21089: Update locking to use Ermals non semaphore patch. I just beat the holy heck out of it with the CP torture scripts and all seems OK
- 01:33 AM Revision 92880548: Set max children to same amount as max procs
- 01:32 AM Revision e59dd448: Set max children to same amount as max procs
- 01:17 AM Revision 27d07d2d: It seems upon captive portal startup the captiveportal.db file is not written out until the /etc/rc.prunecaptiveportal script is run. If the Operator decides to visit status -> captive portal right after enabling the service they will be greated with some nasty nasty errors. Silence this nonsense by creating a blank captiveportal.db file right after nuking it.
- 01:16 AM Revision 5caa648d: It seems upon captive portal startup the captiveportal.db file is not written out until the /etc/rc.prunecaptiveportal script is run. If the Operator decides to visit status -> captive portal right after enabling the service they will be greated with some nasty nasty errors. Silence this nonsense by creating a blank captiveportal.db file right after nuking it.
- 12:11 AM Revision b95c4db2: Return NULL when captive portal is not enabled
- 12:11 AM Revision 01d57b8c: Return NULL when captive portal is not enabled
09/17/2009
- 11:04 PM Revision de752609: Do not process IPFW rules if captive portal is disabled.
- 11:03 PM Revision 08b6c550: Do not process IPFW rules if captive portal is disabled.
- 08:41 PM Revision 837b2b6b: Cap max requests at 500
- 08:40 PM Revision 86900074: Cap max requests at 500
- 08:39 PM Revision b024bf2f: Adding PHP_FCGI_MAX_REQUESTS => 500. This problem seems to stem from a little-known issue with PHP: PHP stops accepting new FastCGI connections after handling 500 requests; unfortunately, there is a potential race condition during the PHP cleanup code in which PHP can be shutting down but still have the socket open, so lighty can send request number 501 to PHP and have it accepted, but then PHP appears to simply exit, causing a 500 return from lighty.
- 08:38 PM Revision c6c98953: Adding PHP_FCGI_MAX_REQUESTS => 500. This problem seems to stem from a little-known issue with PHP: PHP stops accepting new FastCGI connections after handling 500 requests; unfortunately, there is a potential race condition during the PHP cleanup code in which PHP can be shutting down but still have the socket open, so lighty can send request number 501 to PHP and have it accepted, but then PHP appears to simply exit, causing a 500 return from lighty.
- 08:36 PM Revision 8134cc27: Adding PHP_FCGI_MAX_REQUESTS => 500. This problem seems to stem from a little-known issue with PHP: PHP stops accepting new FastCGI connections after handling 500 requests; unfortunately, there is a potential race condition during the PHP cleanup code in which PHP can be shutting down but still have the socket open, so lighty can send request number 501 to PHP and have it accepted, but then PHP appears to simply exit, causing a 500 return from lighty.
- 08:34 PM Revision 0396a8c0: Adding PHP_FCGI_MAX_REQUESTS => 500. This problem seems to stem from a little-known issue with PHP: PHP stops accepting new FastCGI connections after handling 500 requests; unfortunately, there is a potential race condition during the PHP cleanup code in which PHP can be shutting down but still have the socket open, so lighty can send request number 501 to PHP and have it accepted, but then PHP appears to simply exit, causing a 500 return from lighty.
-
- 02:57 AM Revision 7b32d208: Merge branch 'master' of git://rcs.pfsense.org/pfsense/Eugene-igmpproxy
-
02:07 AM Revision fc723417: Remove igmpproxy specific stuff from filter.inc, add allow-opt into pass out all...
09/16/2009
- 06:38 PM Revision e3ddfc61: Merge branch 'master' of git://rcs.pfsense.org/pfsense/Eugene-igmpproxy into review/master
- 03:51 PM Revision 4e7d1665: Using /tmp for packet captures is a bad idea, mmmkay?
- 03:49 PM Revision 6a01b7d9: Using /tmp for packet captures is a bad idea, mmmkay?
-
- Maybe also a Wireless Access Point wizard, like ssid, wpa/wpa2 + key, channel, bridged/routed, IP & DHCP settings.
... -
- We really need wizards for some of the more advanced areas of pfSense:
Restore the start_new_cluster and join_clus... - 01:16 PM Revision 3bcd5555: Remove image file when error occour because image file is greater than partition size
- 03:34 AM Revision 2afbe080: Add allow-opts at Upstream igmpproxy interface if the package is present
Also available in: Atom