Activity
From 10/14/2009 to 11/12/2009
11/10/2009
-
10:08 AM Feature #132: update OLSRd to 0.5.6-r6
- Thank you for syncing ... when will a nanobsd snapshot be available to download? It looks like snapshot building has ...
-
06:01 AM Bug #116 (Feedback): Carp and Captive portal don't work together
- Patch commited on 2.0
-
- Patch commited.
11/09/2009
-
- This should be fixed on newer snapshots.
-
01:16 PM Bug #142: Alias autocompletion broken
- It's working again, but it isn't case-insensitive like it is when nesting aliases. Can you fix that?
-
- Patch commited.
11/08/2009
-
- Work around here.
http://doc.pfsense.org/index.php/NanoBSD_on_WRAP -
- Aliases are allowed to be used in several ways that breaks the ruleset.
firewall_nat_edit.php needs a check to on... -
- The DHCP server range allows network and broadcast addresses.
-
- RFC 3164 ("The BSD Syslog Protocol") dictates that following the Timestamp field will be a space then the "HOSTNAME" ...
-
- An apostrophe in alias' descriptions (e.g., "ABC's LAN") prevents the mouse-over display from working (i.e., where it...
-
- Alias autocompletion is broken in the firewall and NAT edit pages at a minimum, though it works for nesting aliases.
-
- If a reserved name, such as 'max', is used for an alias or interface it breaks the ruleset. Need either an alias blac...
-
- Switching to AON only adds an outbound NAT rule for the LAN subnet, for outbound traffic to WAN.
It should add th... -
- The PPTP subnet size and number of users field needs to be combined as it is in m0n0wall, since the two are tied toge...
-
- Aliases have nearly no input validation, making it very easy to create invalid rulesets.
11/07/2009
-
- To replicate:
1) Add a IPsec VPN, check SPD
2) Change remote endpoint IP
3) Check SPD - old endpoint IP is used... -
- 1) Multiple NAT rules can be assigned the same filter rule
2) when removing the link (i.e. switching to "pass" or "n... -
08:55 PM
Bug #120 (Resolved): 1.2.3 RC3 NO NAT rules have ports 1024:65535 added to destination
- Applied in changeset commit:"4937fc88d1f0f9bf5b4d0268797de7a6e6ddcecc".
-
01:01 PM Bug #93 (Closed): Filter log parsing - potential 2.0 bug
- I can no longer reproduce this. It may have been a side effect of another bug, or something specific about the log en...
-
- If you add a port forward for TCP 21 on WAN, and connect to the FTP server from the WAN side, the box panics.
FTP... -
- Scott asked because we currently don't know of anyone using it. It's the only feature not in widespread use to our kn...
-
- Currently not.
Our mesh network operators require the users to use r5 or r6, because of some problems in r4.
So...
11/06/2009
-
- To replicate, connect to any FTP server in active mode, and try a directory listing. The box will immediately panic w...
-
- This is wrecking all kinds of things in 2.0, so the new xmlreader has been reverted for the time being.
If you wo... -
05:46 PM pfSense Packages Bug #133 (Resolved): console change lan ip causes fatal trap 12
- Reproduce:
1) Install pfsense-2.0-ALPHA-ALPHA-2009-10-25-1210 into vmware (esxi4) on 0.9gb HD, used default of smp e... -
04:02 PM Feature #132: update OLSRd to 0.5.6-r6
- Are you using OLSRd currently in pfS?
-
- it looks like 0.5.6-r6 is out with some bugfixes ( http://www.olsr.org )
Is it possible to get it into the 1.2.3 r...
11/05/2009
-
-
09:07 AM Feature #129: CNAME support for dnsmasq
- I did some more research on this matter.
* There are reasons not to use CNAME records:
http://cr.yp.to/djbdns/n...
11/04/2009
-
- It's intentionally skipped for WAN (and WAN only, OPT WANs are handled correctly - except in the case of a DHCP inter...
-
06:11 PM Bug #131: "Static route filtering" doesn't add rules for routes on WAN
- That code didn't paste well. Here's a second go at it:...
-
- The "Static route filtering" option (under System -> Advanced) doesn't account for packets entering and leaving the s...
-
-
-
- Add a color picker widget and allow user to pick a color that will appear in the rule row.
-
- No. We would loose too many features such as failover-dhcp (CARP).
-
- I see. Would'nt it be possible to substitude isc dhcpd entirely with dnsmasq?
-
- Thanks but we cannot migrate to the new version of DNSMASQ until someone writes a replacement for the isc log scannin...
-
- As of version 2.46 dnsmasq supports limited support for CNAME entries(1,2). When i was about to test the attached pat...
-
08:32 AM
pfSense Packages
Bug #128: squid upstream proxy
- https://rcs.pfsense.org/projects/pfsense-packages/repos/mainline/commits/4c09ba4183f227ffc827f08c74e929738796e883
-
08:30 AM
pfSense Packages
Bug #128: squid upstream proxy
- fixed !
11/03/2009
-
10:53 AM pfSense Packages Bug #128 (Resolved): squid upstream proxy
- Using Squid with an upstream proxy, the GUI says to use port 7 to disable ICP protocol, but the config file does not ...
11/02/2009
-
- This also happens when adding a new interface under Interfaces -> Assign.
Warning: XMLReader::read(): /cf/conf/ba... -
- Enabling SSH under System -> Advanced results in this at the top of the screen after saving:
Warning: XMLReader::... -
- Here's another instance of something being returned as "Array" when it shouldn't be.
php: : There were error(s) l... -
- I've seen this pop up in many text boxes of the web interface, for instance by browsing to Interfaces -> WAN, with th...
-
- after booting a fresh install and logging into the web interface, an alert is erroneously shown:
[interfaces] vr1 i... -
- in system logs after boot with default config.xml:
php: : The command 'sysctl kern.polling.enable=0' returned exi...
10/29/2009
-
- Applied in changeset commit:"5804c04459a7746b0b73caf42e2e937fcc640f8b".
-
12:05 PM pfSense Packages Bug #123: apache_mod_security_settings.xml bad formating.
- Scott Ullrich wrote:
> Which field tag? The file looks OK at first glance.
Look at line 155 on the repository li... -
- Which field tag? The file looks OK at first glance.
-
- On http://redmine.pfsense.org/repositories/entry/pfsense-packages/config/apache_mod_security/apache_mod_security_sett...
-
03:23 AM Todo #122 (Resolved): Update the miniupnpd pfPort after the 1.2.3 release
- There is a typo in miniupnpd, and might as well update the current miniupnpd in the process.
Oct 29 08:18:32 miniup...
10/28/2009
-
08:06 PM
pfSense Packages
Bug #121 (Rejected): Problem with VIA Veloctiy NetworkCard
- Hi,
my Via Velocity network card (onboard of my VIA EPIA EN1200EG) runs in this error when I install 1.2.3RC3 new:...
10/27/2009
-
-
- Applied in changeset commit:"8763e56d20eec74f1c4caaea80ac1cfcb46bbe03".
-
- I'm not sure if this is the proper method for fixing this issue, but I modified my /etc/inc/filter.inc file with the ...
-
- In 1.2.3 RC3, when creating a NO NAT rule, ports 1024:65535 are added to the destination portion of the statement. F...
10/23/2009
-
04:49 PM pfSense Packages Bug #119 (Resolved): axfrdns not working in dns-server package
- Zone transfers are not working in the dns-server package.
I have traced the problem out to these issues:
1. tin...
10/22/2009
-
08:26 AM Bug #118 (Resolved): Captive portal not work
- Dear Sir
I use this version "2.0-ALPHA-ALPHA built on Tue Oct 20 04:02:07 UTC 2009
FreeBS...
10/21/2009
-
- sullrich pushed 020d757a to pfsense/mainline on branch master
Reload filter in case we need to sync CARP data
sullr... -
07:03 PM Bug #117 (Resolved): dns forewarder + carp not working properly
- I have two pfsense boxes: core-01a and core-01b. The two boxes have a working carp setup on the LAN side. IP's are:
...
10/19/2009
-
11:33 AM Bug #116 (Resolved): Carp and Captive portal don't work together
- I've set CARP to work between two servers, using the WAN interface for synchronization, and it works fine.
Problem...
10/17/2009
-
11:13 AM Feature #115 (Rejected): PPTP Idle Timeout Options
- I would like to request the ability to set an idle timeout for a PPTP session. This way the session would be disconn...
10/15/2009
-
- This does appear to be fine in 1.2.3 and 2.0.
-
- Applied in changeset commit:"c0c5582340eaf9eebf2ba363eb786b88758110ef".
-
09:20 PM pfSense Packages Bug #114 (Resolved): squid.inc issue cache_replacement_policy heap LFUDA
- This issue is a mistake on the order of the line default config squid.inc
@
cache_dir $disk_cache_system $cache... -
03:31 PM Bug #111: addresses ending in .224-239 will not policy route
- I've tested with pfSense-1.2.3-2g-20091015-0138-nanobsd.img.gz and everything is now routing correctly.
-
- Applied in changeset commit:"d5f5cf26af62467bdadba5be592e3ddbc6ac2df3".
-
- It's the lease cleanup/deletion code that's using too much memory, it looks like. I suppose that could do a size chec...
-
- As reported here:
http://article.gmane.org/gmane.comp.security.firewalls.pfsense.support/18749
If a large (tens o...
10/14/2009
-
- I committed a fix that should prevent the files from being copied over on 2.0. Should fix this.
https://rcs.pfsense.... -
- Feedback is needed after a new patch is in.
New builds of pfSense 1.2.3 are needed since this is a kernel patch.
Also available in: Atom