Activity
From 10/22/2009 to 11/20/2009
11/20/2009
-
11:30 PM Bug #172 (Closed): Daylight savings causes duplicate months in RRD (sometimes)
- (moved from cvstrac # 1681, with updated info)
Occasionally there are duplicate months in RRD graphs. It used to a... -
- It appears that everything in /usr/local/share/protocols is shown in the L7 protocol list, including "LICENSE", the c...
-
- After entering the number of WAN and LAN connections at the first screen of the multi-all shaper wizard, it comes bac...
-
- The shaper shows wan/lan/optX, it should show the friendly interface name to avoid confusion where numerous OPT inter...
-
- Can you explain what you mean and how to replicate in more depth? That doesn't make any sense to me.
-
07:23 AM Bug #168 (Resolved): Backup area
- Independently of backup area selected the backup is always full
-
-
07:33 AM Bug #134: Active mode FTP causes a panic
- Same problem here with 2.0-ALPHA-ALPHA version 20 11 2009
connect to any FTP server in active mode, and try a di... -
01:23 AM Revision ba3e5c6c: More help page adjustments
11/19/2009
-
-
- Not fixed.
-
05:06 PM Todo #36 (Resolved): Replace PPP
-
- The Radius server settings need to also be pulled from the User Manager authentication server setup as well.
-
- The Radius server settings need to also be pulled from the User Manager authentication server setup as well.
-
- The Radius server settings need to also be pulled from the User Manager authentication server setup as well.
-
- When I hit save on CARP Settings page I get the following error:
Fatal error: Call to undefined function interface... -
- when using frox to achieve transparent ftp proxy the same thing happens, using 2.0-ALPHA-ALPHA built on Wed Nov 18 01...
-
11/18/2009
-
-
- The first part is good.
On the second, I would prefer to avoid changing people's configuration. If they already h... -
10:21 PM Bug #159: "." in hostname creates invalid dhcpd.conf
- I am working on it, two targets :
- make sure the 2.0 gui does not allow to enter fqdn reservation.
- during the up... -
- When attempting to save a Gateway with a space in the name (e.g "a b") the input validation throws an error as it sho...
-
- I should note this is full installs only - nanobsd is fine.
-
- The serial console on 8.x based versions doesn't work properly. The boot messages show up, and if the system panics y...
-
-
- this is not a legit bug report.
http://doc.pfsense.org/index.php/Bug_reporting
Please ask about this on the forum ... -
04:23 PM Bug #163 (Rejected): TCP Traffic on bridged multiwan config being blocked. Explicit PASS rules in place.
- Hi All,
I'm new to this so please excuse any fopars.
I have a the following pfsense config running on 1.2.3 RC3... -
- When going through the custom installer, you are no longer prompted to select the kernel for installation.
-
- If you expand traffic graphs in the dashboard, and save settings, it doesn't actually save. Always goes back to only ...
-
- Generating a certificate and using it for HTTPS results in an unusable web interface.
"You have received an inval... -
- Could it not just be made as long as the interface list? Generally that isn't going to be more than maybe 10-20 entri...
-
10:24 AM Bug #160: Captive portal interfaces box doesn't expand
- The only option is to make a multi column combo box.
I am not sure this is possible in a web based GUI though i see ... - 03:58 AM Revision 3a4fb57e: fix up text
- 03:33 AM Revision f79ceb07: Add interfaces_wlan_scan.php and firewall_nat_server.php to obsoleted files list
-
-
-
11/17/2009
-
- On a system with > 3 interfaces, the Interface box on services_captiveportal.php needs to expand so all the interface...
- 07:45 PM Revision 7f9ad068: Fix hostname in page title. thanks to sullrich@ for pointer
-
- Creating a reservation with a FQDN results in an invalid dhcpd.conf.
php: /services_dhcp.php: The command '/usr/l... -
- Seems to work OK in FF, IE8, and Opera. If anyone knows a better way to align images to the right, I'm all ears.
-
-
-
- 01:31 AM Revision 174fa1ab: Merge branch 'master' of git://rcs.pfsense.org/pfsense/pierrepomes-max-src-conn into review/master
-
-
11/16/2009
-
-
- this works now, thanks!
-
- Applied in changeset commit:"ad30055f6e376a1e0aa5e81d70d46ba27bc85a91".
-
- Patch commited.
-
- 07:12 AM Revision cf21c8ad: Put the FQDN back into the page title. Many people have numerous firewalls up across tabs, and it's impossible to differentiate without this, which we've had for many years.
-
- tun/vpns/ovpns interfaces needs to be added to the openvpn group.
This is the behaviour intended so this report is bo... - 06:44 AM Revision 30a5a9d7: trigger setup wizard
-
- 02:15 AM Revision d520c62b: Jettison never used pages
-
- After going through the setup wizard with a single interface assigned, you're left with a broken configuration. LAN i...
-
- At the end of the setup wizard, a redirect to "http:///" is attempted. $myurl is blank. That bit of the XML looks the...
11/15/2009
- 11:41 PM Revision 92d5144e: this is not a required field
-
-
- Error of copy paste
This reverts commit 0f6fdf29a2f31bbf816eb3df33c3f1fc38c8b2a6. -
- Still working on this, just a periodic commit so nothing gets lost.
-
-
- 11:24 PM Revision 5e08497c: properly enable/disable Everything field
-
- OpenVPN rules are added to $OpenVPN, which is set to:
OpenVPN = "{ openvpn }"
needs to specify the tun interfa... - 10:27 PM Revision 5d55ecfc: fix typo
-
-
-
- 10:06 PM Revision 123f030c: Fix proxy ARP VIP addition (was calling old function)
- rename function from interfaces_proxyarp... to interface_ to be consistent with the functions for carp, carpdev, and ...
-
- 09:19 PM Revision 12fafaf7: I see no reason to retain this "braindeadedness". Create each CARP VIP with its VHID, and destroy accordingly.
- Resolves #151
-
-
-
- This reverts commit 5d5ec271de58dd8306fa7bacfb439b07b3dd2e51.
-
-
- This is a regression from 1.2, where we must have stripped spaces.
Aug 3 23:32:56 dhcpd: Configuration file errors... -
- (verified and moved from cvstrac # 1943)
After assigning an interface, the RRDgraph database files are no generated ... -
-
- this works now, thanks!
-
- This is the right commit.
cc76d08dcc63b628eb548201454341f21d8c56b3
-
- Applied in changeset commit:"d9d95b0a30c6b37c3525ee38d99495c63f7044f6".
-
- This still doesn't properly kill choparp. I think now because the vip is unset before the function gets called, so ag...
-
- Applied in changeset commit:"5d5ec271de58dd8306fa7bacfb439b07b3dd2e51".
-
- When a proxy ARP VIP is removed, its choparp is left running. This appears to be because:
1) When saving changes an... -
-
- Each deleted VIP leaves <vip/> in config.xml. For example after deleting 3 VIPs:
<virtualip>
... - 04:26 PM Revision 68b89303: Set executable
-
-
- Applied in changeset commit:"12fafaf755a9968306057952e63103ea034d7292".
-
- Deleting a CARP IP from firewall_virtual_ip.php does not remove it.
On a positive note, 'ifconfig vip0 destroy' d... -
-
- This error is gone now, thanks.
There is a new problem that did not happen previously - when testing vouchers, it... -
-
- When testing a voucher in status_captiveportal_test.php, the test displays and works fine, but it also shows on the p...
- 06:28 AM Revision 7540905c: call first tab "Active Users", and make it consistent
- 06:26 AM Revision e593f555: yes, I'll even fix typos in comments
- 05:27 AM Revision dd35bb5a: Not sure why this was changed like this. As is, you couldn't disconnect the first client. I don't see any reason to do it that way, and this is the way it's done in RELENG_1_2
- 05:00 AM Revision 4fca1592: Don't add hard coded rules to allow traffic to the portal.
- 1) the no state breaks CP
2) it's never been automatically allowed previously, and hard coded non-editable rules are ... - 04:21 AM Revision cc125e13: always return the IP address hosting the page, rather than forcing to the hostname, requiring functional DNS name resolution which possibly doesn't exist. Restores 1.2.x behavior where client IP isn't in the same subnet as any CP-enabled interface.
- 04:12 AM Revision 18cbd65f: fix typos
-
- (moved from cvstrac # 1740)
Is it possible to add the option of changing which syslog facility the firewall messages... -
- (moved from cvstrac #1600)
Currently the web gui does not allow rules like this, i want to be able to use the "NOT... -
- It's possible to use aliases in outbound NAT with PF, web interface doesn't allow it.
- 03:15 AM Revision 729b7029: fix typo
- 03:12 AM Revision d102e3ed: fix typos
- 02:10 AM Revision 734f3966: actually allow DNS to forwarder. CP is still broken, but this is closer at least.
- pointy-hat-to: eri
-
- Captive portal is functional now after my earlier commits, though there are still some major problems. Closing this i...
11/14/2009
- 10:39 PM Revision 647a1090: Sanitize username and only return letters numbers and spaces on the username. This eliminates the error during login that was cosmetic only in nature. The previous two commits where edge cases as the webConfigurator would never allow a blank username or password and was revised just for completeness sakes.
- 07:59 PM Revision 7466951a: Disallow blank passwords
- 07:48 PM Revision 2b1e35e6: Disallow blank passwords
- 03:26 AM Revision a094d47c: Patch from Ron Lockard that fixed restore_chflags due to a STDOUT redirection issue
- 03:26 AM Revision d2307ffb: Patch from Ron Lockard that fixed restore_chflags due to a STDOUT redirection issue
11/13/2009
-
- Patch committed on 2.0
-
- Patch committed in 2.0.
11/12/2009
11/11/2009
-
-
- 02:27 AM Revision 06231a7d: Default to top -HS
11/10/2009
-
-
-
-
- - Should fix the captive portal not working reports and Issue #118
NOTE: Now Captive portal is open on dns so... -
- Make sure that the behaviour returns to the previous architecture and to keep things right.
Carp needs some more wor... -
-
-
10:08 AM Feature #132: update OLSRd to 0.5.6-r6
- Thank you for syncing ... when will a nanobsd snapshot be available to download? It looks like snapshot building has ...
-
- Patch commited on 2.0
-
- Patch commited.
11/09/2009
-
-
- This should be fixed on newer snapshots.
-
- It's working again, but it isn't case-insensitive like it is when nesting aliases. Can you fix that?
-
- Patch commited.
- 12:56 AM Revision 6097246c: fix typo
- 12:36 AM Revision e89f2008: fix typo
- 12:07 AM Revision e3d345ab: err, this defeats the entire purpose of NAT-T for clients behind the firewall, let's not do this.
11/08/2009
- 11:58 PM Revision f9f160b1: clean up RADIUS issued IPs, shouldn't be two fields, and it wasn't properly checked/unchecked before. Fixes cvstrac # 1722
- 11:34 PM Revision ba9d3f07: Add explanation for additional fields.
-
- Work around here.
http://doc.pfsense.org/index.php/NanoBSD_on_WRAP -
- Aliases are allowed to be used in several ways that breaks the ruleset.
firewall_nat_edit.php needs a check to on... -
- The DHCP server range allows network and broadcast addresses.
-
- RFC 3164 ("The BSD Syslog Protocol") dictates that following the Timestamp field will be a space then the "HOSTNAME" ...
-
- An apostrophe in alias' descriptions (e.g., "ABC's LAN") prevents the mouse-over display from working (i.e., where it...
-
- Alias autocompletion is broken in the firewall and NAT edit pages at a minimum, though it works for nesting aliases.
-
- If a reserved name, such as 'max', is used for an alias or interface it breaks the ruleset. Need either an alias blac...
-
- Switching to AON only adds an outbound NAT rule for the LAN subnet, for outbound traffic to WAN.
It should add th... -
- The PPTP subnet size and number of users field needs to be combined as it is in m0n0wall, since the two are tied toge...
-
- Aliases have nearly no input validation, making it very easy to create invalid rulesets.
- 03:37 AM Revision 7a6a0c0a: Stop spamming the logs with config_unlock() is depricated please use unlock().
- 03:22 AM Revision ddf2c940: Merge branch 'master' of git@rcs.pfsense.org:pfsense/mainline
- 03:22 AM Revision 8b0d920e: allow sending of same message twice when 'testing' smtp service
- 03:21 AM Revision 09725e76: add links to IPsec logs under IPsec status and other pages
- 02:34 AM Revision c20acc35: Kill racoon when disabling IPSEC. Restart it if re-enabled.
- 01:51 AM Revision 4937fc88: Don't add port on no nat rules. Fixes #120
- 01:29 AM Revision e979cfc6: Don't add port on no nat rules. Fixes #120
- 01:03 AM Revision 68b0c7eb: show what pass/linked icons mean
- 12:55 AM Revision 537dff78: show pass icon for rdr pass entries, fix editing of pass entries
- 12:34 AM Revision f891bf66: old version got committed accidentally, fix
11/07/2009
-
- To replicate:
1) Add a IPsec VPN, check SPD
2) Change remote endpoint IP
3) Check SPD - old endpoint IP is used... -
- 1) Multiple NAT rules can be assigned the same filter rule
2) when removing the link (i.e. switching to "pass" or "n... -
08:55 PM
Bug #120 (Resolved): 1.2.3 RC3 NO NAT rules have ports 1024:65535 added to destination
- Applied in changeset commit:"4937fc88d1f0f9bf5b4d0268797de7a6e6ddcecc".
-
- I can no longer reproduce this. It may have been a side effect of another bug, or something specific about the log en...
- 08:57 AM Revision 297ed624: Fix "Filter rule association" "Pass" option
-
- If you add a port forward for TCP 21 on WAN, and connect to the FTP server from the WAN side, the box panics.
FTP... -
- Scott asked because we currently don't know of anyone using it. It's the only feature not in widespread use to our kn...
-
- Currently not.
Our mesh network operators require the users to use r5 or r6, because of some problems in r4.
So... - 03:33 AM Revision 093bcebc: Move newer xmlreader code to xmlreader.inc. Restore old xmlparse code to xmlparse.inc. Default to the older xmlparse.inc but add a flag check if /cf/conf/use_xmlreader is present the newer code will be included instead until the remaining bugs can be resolved with it (see rcs for many).
- 03:28 AM Revision 26433cb8: Adding newer xmlreader code to it's own file so that it can be turned and off until remaining bugs are fixed
- 01:24 AM Revision d1f9da0a: Nuke old dev bootstrap code that is no longer in use
11/06/2009
-
- To replicate, connect to any FTP server in active mode, and try a directory listing. The box will immediately panic w...
-
- This is wrecking all kinds of things in 2.0, so the new xmlreader has been reverted for the time being.
If you wo... -
05:46 PM pfSense Packages Bug #133 (Resolved): console change lan ip causes fatal trap 12
- Reproduce:
1) Install pfsense-2.0-ALPHA-ALPHA-2009-10-25-1210 into vmware (esxi4) on 0.9gb HD, used default of smp e... -
- Are you using OLSRd currently in pfS?
-
- it looks like 0.5.6-r6 is out with some bugfixes ( http://www.olsr.org )
Is it possible to get it into the 1.2.3 r...
11/05/2009
-
-
09:07 AM Feature #129: CNAME support for dnsmasq
- I did some more research on this matter.
* There are reasons not to use CNAME records:
http://cr.yp.to/djbdns/n...
11/04/2009
-
- It's intentionally skipped for WAN (and WAN only, OPT WANs are handled correctly - except in the case of a DHCP inter...
-
06:11 PM Bug #131: "Static route filtering" doesn't add rules for routes on WAN
- That code didn't paste well. Here's a second go at it:...
-
- The "Static route filtering" option (under System -> Advanced) doesn't account for packets entering and leaving the s...
-
-
-
- Add a color picker widget and allow user to pick a color that will appear in the rule row.
-
- No. We would loose too many features such as failover-dhcp (CARP).
-
- I see. Would'nt it be possible to substitude isc dhcpd entirely with dnsmasq?
-
- Thanks but we cannot migrate to the new version of DNSMASQ until someone writes a replacement for the isc log scannin...
-
- As of version 2.46 dnsmasq supports limited support for CNAME entries(1,2). When i was about to test the attached pat...
-
08:32 AM
pfSense Packages
Bug #128: squid upstream proxy
- https://rcs.pfsense.org/projects/pfsense-packages/repos/mainline/commits/4c09ba4183f227ffc827f08c74e929738796e883
-
08:30 AM
pfSense Packages
Bug #128: squid upstream proxy
- fixed !
11/03/2009
-
-
-
-
-
- Using Squid with an upstream proxy, the GUI says to use port 7 to disable ICP protocol, but the config file does not ...
- 02:35 AM Revision 8217d34d: Fallback to using hw.realmem and hw.physmem sysctl's when we cannot probe the available memory from bootup log file. RouterStationPRO is an example
11/02/2009
- 09:27 PM Revision 08b17c6d: Add default load balancing monitor types for ICMP, TCP, HTTP, HTTPS and SMTP from BillM
-
- 12:38 PM Revision 3b52c5af: Woops, remove accidental debugging line.
- 09:41 AM Revision 2580f584: remove unnecessary cat
- 09:27 AM Revision 5d412624: Cleanup of firewall_nat_out_edit.php, whitespace changes, add curlies
- for statements. Unset dstport and natport so the firewall rules do not
break. -
- This also happens when adding a new interface under Interfaces -> Assign.
Warning: XMLReader::read(): /cf/conf/ba... -
- Enabling SSH under System -> Advanced results in this at the top of the screen after saving:
Warning: XMLReader::... -
- Here's another instance of something being returned as "Array" when it shouldn't be.
php: : There were error(s) l... -
- I've seen this pop up in many text boxes of the web interface, for instance by browsing to Interfaces -> WAN, with th...
-
- after booting a fresh install and logging into the web interface, an alert is erroneously shown:
[interfaces] vr1 i... -
- in system logs after boot with default config.xml:
php: : The command 'sysctl kern.polling.enable=0' returned exi...
10/29/2009
-
- Applied in changeset commit:"5804c04459a7746b0b73caf42e2e937fcc640f8b".
-
12:05 PM pfSense Packages Bug #123: apache_mod_security_settings.xml bad formating.
- Scott Ullrich wrote:
> Which field tag? The file looks OK at first glance.
Look at line 155 on the repository li... -
- Which field tag? The file looks OK at first glance.
-
- On http://redmine.pfsense.org/repositories/entry/pfsense-packages/config/apache_mod_security/apache_mod_security_sett...
-
03:23 AM Todo #122 (Resolved): Update the miniupnpd pfPort after the 1.2.3 release
- There is a typo in miniupnpd, and might as well update the current miniupnpd in the process.
Oct 29 08:18:32 miniup...
10/28/2009
-
08:06 PM
pfSense Packages
Bug #121 (Rejected): Problem with VIA Veloctiy NetworkCard
- Hi,
my Via Velocity network card (onboard of my VIA EPIA EN1200EG) runs in this error when I install 1.2.3RC3 new:... - 07:46 PM Revision 84fa0d60: Turn off IPSEC net.inet.ip.ipsec_in_use when IPSEC is disabled
- 02:56 PM Revision ad6722c5: Set sysctl net.inet.ip.ipsec_in_use=1 when starting racoon
- 01:14 AM Revision 4e3cdd2e: Revert "Fix no nat rules where ports 1024:65535 is added Resolves #120"
- This reverts commit 395a0413858c2301732e82d89f6a1b94ea0886f4.
- 01:13 AM Revision 6734081a: Revert "Fix no nat rules where ports 1024:65535 is added Resolves #120"
- This reverts commit 8763e56d20eec74f1c4caaea80ac1cfcb46bbe03.
- 12:40 AM Revision 8763e56d: Fix no nat rules where ports 1024:65535 is added Resolves #120
- 12:40 AM Revision 395a0413: Fix no nat rules where ports 1024:65535 is added Resolves #120
10/27/2009
-
-
- Applied in changeset commit:"8763e56d20eec74f1c4caaea80ac1cfcb46bbe03".
-
- I'm not sure if this is the proper method for fixing this issue, but I modified my /etc/inc/filter.inc file with the ...
-
- In 1.2.3 RC3, when creating a NO NAT rule, ports 1024:65535 are added to the destination portion of the statement. F...
10/26/2009
- 05:14 PM Revision 9694e102: Automatically populate linespeed when prefilling
- 04:50 PM Revision 9d933d94: Handle secondary DNS correctly for 3G
- 04:43 PM Revision 1d894eaf: Switch over to handling DNS from ppp.linkup allowing mulitple 3G cards to coexist on the same box
- 06:08 AM Revision d0c04c77: Kill foreach error
- 06:06 AM Revision 5870589c: Adding diag_logs_ppp.php
- 06:02 AM Revision 220ee0de: s/IPsec VPN/IPsec/ to keep the tab behavior
- 06:00 AM Revision 16bc1e31: Set correct tab title
- 05:59 AM Revision beb26389: Set title
- 05:48 AM Revision 295e19dd: Add PPP logging tab
- 05:40 AM Revision ffeb5acf: Handle uping interfaces a bit more sanely
- 05:27 AM Revision 7284d850: Revert interfaces_bring_up changes
- 05:26 AM Revision 2ebf3945: Check to see if interface exists
- 05:09 AM Revision a6bce436: Add space between interface and real interface brackets
- 04:55 AM Revision 70af94d7: Add ppp endpoints IP as gateway
- 04:25 AM Revision 36bf235e: Add and use ppp-script
- 03:53 AM Revision bb26581c: Move "
- 03:48 AM Revision f532da19: Remove extra "
- 03:41 AM Revision 08f03cdf: Add newline
- 03:29 AM Revision 55563f1b: Give more room to the interfaces td (40%)
- 03:22 AM Revision 87519eb7: Fix typo (missing ])
- 03:17 AM Revision 7a6f7c55: Show when configuring interfaces on bootup for newly added interfaces (qinq, ppp, etc)
- 02:49 AM Revision 5ad9b2a7: Call rc.linkup after up event
- 02:26 AM Revision b8103b06: Return up instead of running
- 02:03 AM Revision 2a1226ad: Simplify logic
- 01:47 AM Revision 30cee7b2: Add dns server discovered with ppp
- 01:07 AM Revision 8995a99c: Remove booting newline:
- 12:55 AM Revision 410cdac4: Set booting to true.. not TRUE
- 12:37 AM Revision 568b1358: When a real interface is passed to get_real_interface() simply pass it back
- 12:06 AM Revision 77ccab82: On second look, turn on PPP interfaces at the get_interfaces_with_gateway level
10/25/2009
- 11:57 PM Revision 23557bc3: Add nat on rules for PPP
- 11:24 PM Revision ec054b7c: s/interface_bring_up/interfaces_bring_up/
- 11:15 PM Revision 891546ea: Full wlan name is returned now. Use it
- 11:02 PM Revision b99256c1: Add misc comments
- 11:02 PM Revision a2934331: Use get_real_interface() and does_interface_exist()
- 10:31 PM Revision cddb1be2: Do not specify a wlan # and let freebsd decide and return the interface that was created before renaming.
- 09:31 PM Revision 19e83210: Refactor wireless code a hair making it work on 8.x
- 09:04 PM Revision 88157f66: Take into account hostap type interfaces
- 08:37 PM Revision 10394059: Unbreak wireless on 8.x
- 07:38 PM Revision 46c3f09a: Add links to prefill ATT and Spring settings
10/23/2009
- 06:24 PM Revision 064b183b: Silence foreach() error when no PPP interfaces exist
- 06:16 PM Revision 58ebf6bb: Setting the VIP to the VHID ID has to be the
- single most brain-headed decision in the history
of man-kind. Do this correctly by finding the first
available vip i... - 05:44 PM Revision 00380613: Unbreak find_interface_ip for normal interfaces
- 05:38 PM Revision a71b32d2: Unbreak CARP Enable/Disable button
- 05:29 PM Revision 27625b39: Unbreak status -> interfaces. TODO: Unbreak Disable Carp button
- 05:17 PM Revision 6a423903: Unbreak find_interface_ip(). test case: echo find_interface_ip(lan);
-
04:49 PM pfSense Packages Bug #119 (Resolved): axfrdns not working in dns-server package
- Zone transfers are not working in the dns-server package.
I have traced the problem out to these issues:
1. tin...
10/22/2009
- 10:34 PM Revision 214630ed: Correctly fix the function so that the table expands again.
- Whoever rewrote this must have been sleep deprived or really lost.
- 10:24 PM Revision da82a94a: Unbreak filter_get_direct_networks()
- Check if the array is empty
- 10:11 PM Revision 340de029: Remove double dollar sign
- 10:07 PM Revision 21729218: Restore the filter_get_vpns_list() functionality
- Increase readability
-
-
-
08:26 AM Bug #118 (Resolved): Captive portal not work
- Dear Sir
I use this version "2.0-ALPHA-ALPHA built on Tue Oct 20 04:02:07 UTC 2009
FreeBS...
Also available in: Atom