Project

General

Profile

Activity

From 10/25/2009 to 11/23/2009

11/23/2009

05:26 PM Bug #159: "." in hostname creates invalid dhcpd.conf
Ok, I misunderstood, sorry. It's clear now ;-)
Pierre POMES
05:16 PM Bug #159: "." in hostname creates invalid dhcpd.conf
Oh, I didn't mean changing the actual entries in the config.xml. Just when they're written out from the config.xml to... Chris Buechler
05:14 PM Bug #159: "." in hostname creates invalid dhcpd.conf
> why does the config need to be upgraded?
As you mentionned in earlier post of this tickets, the '.' in static m...
Pierre POMES
05:08 PM Bug #159: "." in hostname creates invalid dhcpd.conf
why does the config need to be upgraded?
By the way - Scott fixed the hostname verification in RELENG_1_2 yesterd...
Chris Buechler
05:07 PM Bug #159: "." in hostname creates invalid dhcpd.conf
Question for the dhcp server config upgrade: may it be an option to change version number from 6.0 to 6.1 (etc/inc/gl... Pierre POMES
06:46 AM Bug #168: Backup area
I did more tests and this only happens when 'Do not backup package information' is selected, so:
- go to backup/re...
Nuno Marques

11/22/2009

10:03 PM Todo #178 (Resolved): Import MAC address formatting option from m0n0
In m0n0wall under captive portal there is a feature where you can specify how the MAC address was sent as a username ... Chris Buechler
09:59 PM Feature #177 (Resolved): IPv6 support
(moved from cvstrac)
IPv6 support needs to be added at some point (post-2.0)
Chris Buechler
08:28 PM pfSense Packages Bug #121 (Rejected): Problem with VIA Veloctiy NetworkCard
This is a FreeBSD hardware issue of some sort that we can't do anything about.
http://doc.pfsense.org/index.php/Pol...
Chris Buechler
08:26 PM pfSense Packages Bug #133 (Resolved): console change lan ip causes fatal trap 12
this is fixed Chris Buechler
08:07 PM Bug #176 (Resolved): GMT offset zones reversed
The GMT timezones in the TZ database are opposite of what they appear they should be. i.e. GMT-4 is really GMT +4.
...
Chris Buechler
07:57 PM Bug #175 (Resolved): convert_real_interface_to_friendly_descr doesn't work for disabled interfaces
It needs to because some parts of the GUI use it to display interface info (system_gateways.php for one) where it cur... Chris Buechler
07:56 PM Bug #159: "." in hostname creates invalid dhcpd.conf
Hi,
My cloned repo is updated with the first part. For the second one, you are right, I will follow your advices, ...
Pierre POMES
07:50 PM Bug #174 (Resolved): Re-assigning interfaces doesn't reconfigure them
Re-assigning interfaces does not reconfigure their IP assignments. Example: if you have OPT1 assigned to em2 and OPT2... Chris Buechler

11/21/2009

12:01 AM Bug #173 (Resolved): Missing input validation for gateways
system_gateways_edit.php does not sanity check entries. Two checks should be added:
1) The gateway IP is within t...
Chris Buechler

11/20/2009

11:30 PM Bug #172 (Closed): Daylight savings causes duplicate months in RRD (sometimes)
(moved from cvstrac # 1681, with updated info)
Occasionally there are duplicate months in RRD graphs. It used to a...
Chris Buechler
11:07 PM Bug #171 (Resolved): "LICENSE" shows up in L7 protocol list
It appears that everything in /usr/local/share/protocols is shown in the L7 protocol list, including "LICENSE", the c... Chris Buechler
10:59 PM Bug #170 (Resolved): Shaper multi-all wizard doesn't work
After entering the number of WAN and LAN connections at the first screen of the multi-all shaper wizard, it comes bac... Chris Buechler
10:57 PM Bug #169 (Resolved): Shaper needs to show friendly interface name
The shaper shows wan/lan/optX, it should show the friendly interface name to avoid confusion where numerous OPT inter... Chris Buechler
10:47 AM Bug #168: Backup area
Can you explain what you mean and how to replicate in more depth? That doesn't make any sense to me. Chris Buechler
07:23 AM Bug #168 (Resolved): Backup area
Independently of backup area selected the backup is always full Nuno Marques
10:46 AM Bug #134 (New): Active mode FTP causes a panic
Chris Buechler
07:33 AM Bug #134: Active mode FTP causes a panic
Same problem here with 2.0-ALPHA-ALPHA version 20 11 2009
connect to any FTP server in active mode, and try a di...
Thierry Pimont

11/19/2009

09:29 PM Bug #16 (New): Deleting multiple OPT interfaces results in an invalid configuration
Not fixed. Chris Buechler
05:06 PM Todo #36 (Resolved): Replace PPP
Scott Ullrich
03:33 PM Todo #34: PPTP users integration with user manager
The Radius server settings need to also be pulled from the User Manager authentication server setup as well. Jim Pingle
03:33 PM Todo #33: L2TP users integration with user manager
The Radius server settings need to also be pulled from the User Manager authentication server setup as well. Jim Pingle
03:33 PM Todo #32: PPPoE Server users integration with user manager
The Radius server settings need to also be pulled from the User Manager authentication server setup as well. Jim Pingle
12:59 PM Bug #167 (Resolved): CARP error
When I hit save on CARP Settings page I get the following error:
Fatal error: Call to undefined function interface...
Nuno Marques
08:17 AM Bug #134: Active mode FTP causes a panic
when using frox to achieve transparent ftp proxy the same thing happens, using 2.0-ALPHA-ALPHA built on Wed Nov 18 01... Nuno Marques

11/18/2009

10:54 PM Bug #159: "." in hostname creates invalid dhcpd.conf
The first part is good.
On the second, I would prefer to avoid changing people's configuration. If they already h...
Chris Buechler
10:21 PM Bug #159: "." in hostname creates invalid dhcpd.conf
I am working on it, two targets :
- make sure the 2.0 gui does not allow to enter fqdn reservation.
- during the up...
Pierre POMES
08:15 PM Bug #166 (Closed): Input validation on Gateway editor needs work
When attempting to save a Gateway with a space in the name (e.g "a b") the input validation throws an error as it sho... Jim Pingle
06:09 PM Bug #165: Serial console on 8.x doesn't work properly
I should note this is full installs only - nanobsd is fine.
Chris Buechler
06:08 PM Bug #165 (Resolved): Serial console on 8.x doesn't work properly
The serial console on 8.x based versions doesn't work properly. The boot messages show up, and if the system panics y... Chris Buechler
04:37 PM Bug #163 (Rejected): TCP Traffic on bridged multiwan config being blocked. Explicit PASS rules in place.
this is not a legit bug report.
http://doc.pfsense.org/index.php/Bug_reporting
Please ask about this on the forum ...
Chris Buechler
04:23 PM Bug #163 (Rejected): TCP Traffic on bridged multiwan config being blocked. Explicit PASS rules in place.
Hi All,
I'm new to this so please excuse any fopars.
I have a the following pfsense config running on 1.2.3 RC3...
James Black
04:23 PM Bug #164 (Resolved): Custom installer does not allow kernel selection
When going through the custom installer, you are no longer prompted to select the kernel for installation. Chris Buechler
04:02 PM Bug #162 (Resolved): Expanding traffic graphs and saving doesn't save
If you expand traffic graphs in the dashboard, and save settings, it doesn't actually save. Always goes back to only ... Chris Buechler
03:54 PM Bug #161 (Resolved): HTTPS certificates invalid - duplicate serial
Generating a certificate and using it for HTTPS results in an unusable web interface.
"You have received an inval...
Chris Buechler
12:06 PM Bug #160: Captive portal interfaces box doesn't expand
Could it not just be made as long as the interface list? Generally that isn't going to be more than maybe 10-20 entri... Chris Buechler
10:24 AM Bug #160: Captive portal interfaces box doesn't expand
The only option is to make a multi column combo box.
I am not sure this is possible in a web based GUI though i see ...
Ermal Luçi

11/17/2009

10:02 PM Bug #160 (Resolved): Captive portal interfaces box doesn't expand
On a system with > 3 interfaces, the Interface box on services_captiveportal.php needs to expand so all the interface... Chris Buechler
05:29 PM Bug #159 (Resolved): "." in hostname creates invalid dhcpd.conf
Creating a reservation with a FQDN results in an invalid dhcpd.conf.
php: /services_dhcp.php: The command '/usr/l...
Chris Buechler

11/16/2009

03:52 PM Bug #155: Space in hostname breaks dhcpd
this works now, thanks! Chris Buechler
06:55 AM Bug #155 (Resolved): Space in hostname breaks dhcpd
Applied in changeset commit:"ad30055f6e376a1e0aa5e81d70d46ba27bc85a91". Ermal Luçi
06:53 AM Bug #155 (Feedback): Space in hostname breaks dhcpd
Patch commited. Ermal Luçi
06:46 AM Bug #156 (Rejected): OpenVPN rules not added properly
tun/vpns/ovpns interfaces needs to be added to the openvpn group.
This is the behaviour intended so this report is bo...
Ermal Luçi
02:02 AM Bug #158 (Resolved): Setup wizard breaks single interface configurations
After going through the setup wizard with a single interface assigned, you're left with a broken configuration. LAN i... Chris Buechler
01:50 AM Bug #157 (Resolved): Setup wizard redirect broken
At the end of the setup wizard, a redirect to "http:///" is attempted. $myurl is blank. That bit of the XML looks the... Chris Buechler

11/15/2009

10:41 PM Bug #156 (Rejected): OpenVPN rules not added properly
OpenVPN rules are added to $OpenVPN, which is set to:
OpenVPN = "{ openvpn }"
needs to specify the tun interfa...
Chris Buechler
07:17 PM Bug #155 (Resolved): Space in hostname breaks dhcpd
This is a regression from 1.2, where we must have stripped spaces.
Aug 3 23:32:56 dhcpd: Configuration file errors...
Chris Buechler
07:12 PM Bug #154 (Resolved): New interface does not have RRD graphs created
(verified and moved from cvstrac # 1943)
After assigning an interface, the RRDgraph database files are no generated ...
Chris Buechler
06:13 PM Bug #153: Removing proxy ARP VIP doesn't kill off choparp
this works now, thanks! Chris Buechler
06:07 PM Bug #153: Removing proxy ARP VIP doesn't kill off choparp
This is the right commit.
cc76d08dcc63b628eb548201454341f21d8c56b3
Ermal Luçi
06:05 PM Bug #153 (Resolved): Removing proxy ARP VIP doesn't kill off choparp
Applied in changeset commit:"d9d95b0a30c6b37c3525ee38d99495c63f7044f6". Ermal Luçi
05:59 PM Bug #153 (New): Removing proxy ARP VIP doesn't kill off choparp
This still doesn't properly kill choparp. I think now because the vip is unset before the function gets called, so ag... Chris Buechler
05:55 PM Bug #153 (Resolved): Removing proxy ARP VIP doesn't kill off choparp
Applied in changeset commit:"5d5ec271de58dd8306fa7bacfb439b07b3dd2e51". Ermal Luçi
05:20 PM Bug #153 (Resolved): Removing proxy ARP VIP doesn't kill off choparp
When a proxy ARP VIP is removed, its choparp is left running. This appears to be because:
1) When saving changes an...
Chris Buechler
04:36 PM Bug #152 (Closed): Deleting a VIP leaves <vip/> in config.xml
Each deleted VIP leaves <vip/> in config.xml. For example after deleting 3 VIPs:
<virtualip>
...
Chris Buechler
04:20 PM Bug #151 (Resolved): Deleting a CARP IP doesn't remove it
Applied in changeset commit:"12fafaf755a9968306057952e63103ea034d7292". Chris Buechler
04:00 PM Bug #151 (Resolved): Deleting a CARP IP doesn't remove it
Deleting a CARP IP from firewall_virtual_ip.php does not remove it.
On a positive note, 'ifconfig vip0 destroy' d...
Chris Buechler
03:25 PM Bug #147: Voucher test page throws lock error
This error is gone now, thanks.
There is a new problem that did not happen previously - when testing vouchers, it...
Chris Buechler
12:25 PM Bug #147 (Feedback): Voucher test page throws lock error
Ermal Luçi
01:24 AM Bug #147 (Resolved): Voucher test page throws lock error
When testing a voucher in status_captiveportal_test.php, the test displays and works fine, but it also shows on the p... Chris Buechler
03:42 AM Feature #150 (Closed): Option to change syslog facility
(moved from cvstrac # 1740)
Is it possible to add the option of changing which syslog facility the firewall messages...
Chris Buechler
03:39 AM Feature #149 (Needs Patch): !ports in firewall rules
(moved from cvstrac #1600)
Currently the web gui does not allow rules like this, i want to be able to use the "NOT...
Chris Buechler
03:36 AM Feature #148 (Resolved): Allow alias usage on Outbound NAT
It's possible to use aliases in outbound NAT with PF, web interface doesn't allow it.
Chris Buechler
12:15 AM Bug #118 (Resolved): Captive portal not work
Captive portal is functional now after my earlier commits, though there are still some major problems. Closing this i... Chris Buechler

11/13/2009

09:30 AM Bug #135 (Feedback): Connecting to FTP server causes panic
Patch committed on 2.0 Ermal Luçi
09:29 AM Bug #134 (Feedback): Active mode FTP causes a panic
Patch committed in 2.0. Ermal Luçi

11/10/2009

10:08 AM Feature #132: update OLSRd to 0.5.6-r6
Thank you for syncing ... when will a nanobsd snapshot be available to download? It looks like snapshot building has ... Daniel Binder
06:01 AM Bug #116 (Feedback): Carp and Captive portal don't work together
Patch commited on 2.0 Ermal Luçi
06:00 AM Bug #118 (Feedback): Captive portal not work
Patch commited. Ermal Luçi

11/09/2009

06:07 PM pfSense Packages Bug #133 (Feedback): console change lan ip causes fatal trap 12
This should be fixed on newer snapshots. Ermal Luçi
01:16 PM Bug #142: Alias autocompletion broken
It's working again, but it isn't case-insensitive like it is when nesting aliases. Can you fix that? Chris Buechler
11:54 AM Bug #142 (Feedback): Alias autocompletion broken
Patch commited. Ermal Luçi

11/08/2009

11:19 PM Bug #66: Nanobsd does not work on WRAP
Work around here.
http://doc.pfsense.org/index.php/NanoBSD_on_WRAP
Chris Buechler
08:06 PM Bug #146 (Resolved): Missing validation for alias usage
Aliases are allowed to be used in several ways that breaks the ruleset.
firewall_nat_edit.php needs a check to on...
Chris Buechler
08:04 PM Bug #145 (Resolved): DHCP server available range is wrong
The DHCP server range allows network and broadcast addresses.
Chris Buechler
07:50 PM Bug #144 (Closed): Syslog messages violate RFC 3164
RFC 3164 ("The BSD Syslog Protocol") dictates that following the Timestamp field will be a space then the "HOSTNAME" ... Chris Buechler
07:45 PM Bug #143 (Resolved): Apostrophe in alias description breaks mouse-over display
An apostrophe in alias' descriptions (e.g., "ABC's LAN") prevents the mouse-over display from working (i.e., where it... Chris Buechler
07:45 PM Bug #142 (Resolved): Alias autocompletion broken
Alias autocompletion is broken in the firewall and NAT edit pages at a minimum, though it works for nesting aliases. Chris Buechler
07:27 PM Bug #141 (Resolved): Reserved names cannot be used for aliases or interfaces
If a reserved name, such as 'max', is used for an alias or interface it breaks the ruleset. Need either an alias blac... Chris Buechler
07:24 PM Bug #140 (Resolved): Switching to AON should generate proper full NAT rules
Switching to AON only adds an outbound NAT rule for the LAN subnet, for outbound traffic to WAN.
It should add th...
Chris Buechler
06:38 PM Bug #139 (Resolved): PPTP Server subnet and clients needs combined
The PPTP subnet size and number of users field needs to be combined as it is in m0n0wall, since the two are tied toge... Chris Buechler
06:28 PM Bug #138 (Resolved): Missing input validation for aliases
Aliases have nearly no input validation, making it very easy to create invalid rulesets. Chris Buechler

11/07/2009

10:13 PM Bug #137 (Resolved): Change of IPsec remote gateway doesn't trigger SPD reload
To replicate:
1) Add a IPsec VPN, check SPD
2) Change remote endpoint IP
3) Check SPD - old endpoint IP is used...
Chris Buechler
09:07 PM Bug #136 (Resolved): Issues with linked filter/NAT rules
1) Multiple NAT rules can be assigned the same filter rule
2) when removing the link (i.e. switching to "pass" or "n...
Chris Buechler
08:55 PM Bug #120 (Resolved): 1.2.3 RC3 NO NAT rules have ports 1024:65535 added to destination
Applied in changeset commit:"4937fc88d1f0f9bf5b4d0268797de7a6e6ddcecc". Anonymous
01:01 PM Bug #93 (Closed): Filter log parsing - potential 2.0 bug
I can no longer reproduce this. It may have been a side effect of another bug, or something specific about the log en... Jim Pingle
04:46 AM Bug #135 (Resolved): Connecting to FTP server causes panic
If you add a port forward for TCP 21 on WAN, and connect to the FTP server from the WAN side, the box panics.
FTP...
Chris Buechler
04:10 AM Feature #132: update OLSRd to 0.5.6-r6
Scott asked because we currently don't know of anyone using it. It's the only feature not in widespread use to our kn... Chris Buechler
03:58 AM Feature #132: update OLSRd to 0.5.6-r6
Currently not.
Our mesh network operators require the users to use r5 or r6, because of some problems in r4.
So...
Daniel Binder

11/06/2009

11:36 PM Bug #134 (Resolved): Active mode FTP causes a panic
To replicate, connect to any FTP server in active mode, and try a directory listing. The box will immediately panic w... Chris Buechler
10:49 PM Bug #127: Empty config entries returned as array
This is wrecking all kinds of things in 2.0, so the new xmlreader has been reverted for the time being.
If you wo...
Chris Buechler
05:46 PM pfSense Packages Bug #133 (Resolved): console change lan ip causes fatal trap 12
Reproduce:
1) Install pfsense-2.0-ALPHA-ALPHA-2009-10-25-1210 into vmware (esxi4) on 0.9gb HD, used default of smp e...
Scott Griepentrog
04:02 PM Feature #132: update OLSRd to 0.5.6-r6
Are you using OLSRd currently in pfS? Scott Ullrich
03:02 PM Feature #132 (Resolved): update OLSRd to 0.5.6-r6
it looks like 0.5.6-r6 is out with some bugfixes ( http://www.olsr.org )
Is it possible to get it into the 1.2.3 r...
Daniel Binder

11/05/2009

03:47 PM Feature #129 (Closed): CNAME support for dnsmasq
Chris Buechler
09:07 AM Feature #129: CNAME support for dnsmasq
I did some more research on this matter.
* There are reasons not to use CNAME records:
http://cr.yp.to/djbdns/n...
znerol znerol

11/04/2009

09:42 PM Bug #131: "Static route filtering" doesn't add rules for routes on WAN
It's intentionally skipped for WAN (and WAN only, OPT WANs are handled correctly - except in the case of a DHCP inter... Chris Buechler
06:11 PM Bug #131: "Static route filtering" doesn't add rules for routes on WAN
That code didn't paste well. Here's a second go at it:... Garret Huntress
06:11 PM Bug #131 (Resolved): "Static route filtering" doesn't add rules for routes on WAN
The "Static route filtering" option (under System -> Advanced) doesn't account for packets entering and leaving the s... Garret Huntress
08:36 PM Bug #111 (Resolved): addresses ending in .224-239 will not policy route
Chris Buechler
08:35 PM Bug #81 (Resolved): Captive portal problems
Chris Buechler
01:53 PM Feature #130 (Closed): Add color picker to rules / nat rows
Add a color picker widget and allow user to pick a color that will appear in the rule row. Scott Ullrich
11:53 AM Feature #129: CNAME support for dnsmasq
No. We would loose too many features such as failover-dhcp (CARP). Scott Ullrich
11:51 AM Feature #129: CNAME support for dnsmasq
I see. Would'nt it be possible to substitude isc dhcpd entirely with dnsmasq? znerol znerol
11:48 AM Feature #129: CNAME support for dnsmasq
Thanks but we cannot migrate to the new version of DNSMASQ until someone writes a replacement for the isc log scannin... Scott Ullrich
11:46 AM Feature #129 (Closed): CNAME support for dnsmasq
As of version 2.46 dnsmasq supports limited support for CNAME entries(1,2). When i was about to test the attached pat... znerol znerol
08:32 AM pfSense Packages Bug #128: squid upstream proxy
https://rcs.pfsense.org/projects/pfsense-packages/repos/mainline/commits/4c09ba4183f227ffc827f08c74e929738796e883 Anonymous
08:30 AM pfSense Packages Bug #128: squid upstream proxy
fixed ! Anonymous

11/03/2009

10:53 AM pfSense Packages Bug #128 (Resolved): squid upstream proxy
Using Squid with an upstream proxy, the GUI says to use port 7 to disable ICP protocol, but the config file does not ... Nuno Marques

11/02/2009

03:31 AM Bug #126: XML parser errors when enabling SSH
This also happens when adding a new interface under Interfaces -> Assign.
Warning: XMLReader::read(): /cf/conf/ba...
Chris Buechler
02:24 AM Bug #126 (Resolved): XML parser errors when enabling SSH
Enabling SSH under System -> Advanced results in this at the top of the screen after saving:
Warning: XMLReader::...
Chris Buechler
02:47 AM Bug #127: Empty config entries returned as array
Here's another instance of something being returned as "Array" when it shouldn't be.
php: : There were error(s) l...
Chris Buechler
02:26 AM Bug #127 (Resolved): Empty config entries returned as array
I've seen this pop up in many text boxes of the web interface, for instance by browsing to Interfaces -> WAN, with th... Chris Buechler
02:08 AM Bug #125 (Resolved): Erroneous "interface not present" alert
after booting a fresh install and logging into the web interface, an alert is erroneously shown:
[interfaces] vr1 i...
Chris Buechler
02:04 AM Bug #124 (Resolved): Polling problems with 8
in system logs after boot with default config.xml:
php: : The command 'sysctl kern.polling.enable=0' returned exi...
Chris Buechler

10/29/2009

12:45 PM pfSense Packages Bug #123 (Resolved): apache_mod_security_settings.xml bad formating.
Applied in changeset commit:"5804c04459a7746b0b73caf42e2e937fcc640f8b". Scott Ullrich
12:05 PM pfSense Packages Bug #123: apache_mod_security_settings.xml bad formating.
Scott Ullrich wrote:
> Which field tag? The file looks OK at first glance.
Look at line 155 on the repository li...
Grégory Boddin
11:45 AM pfSense Packages Bug #123: apache_mod_security_settings.xml bad formating.
Which field tag? The file looks OK at first glance. Scott Ullrich
11:38 AM pfSense Packages Bug #123 (Resolved): apache_mod_security_settings.xml bad formating.
On http://redmine.pfsense.org/repositories/entry/pfsense-packages/config/apache_mod_security/apache_mod_security_sett... Grégory Boddin
03:23 AM Todo #122 (Resolved): Update the miniupnpd pfPort after the 1.2.3 release
There is a typo in miniupnpd, and might as well update the current miniupnpd in the process.
Oct 29 08:18:32 miniup...
Seth Mos

10/28/2009

08:06 PM pfSense Packages Bug #121 (Rejected): Problem with VIA Veloctiy NetworkCard
Hi,
my Via Velocity network card (onboard of my VIA EPIA EN1200EG) runs in this error when I install 1.2.3RC3 new:...
Anonymous

10/27/2009

09:15 PM Bug #120 (New): 1.2.3 RC3 NO NAT rules have ports 1024:65535 added to destination
Scott Ullrich
08:45 PM Bug #120 (Resolved): 1.2.3 RC3 NO NAT rules have ports 1024:65535 added to destination
Applied in changeset commit:"8763e56d20eec74f1c4caaea80ac1cfcb46bbe03". Scott Ullrich
08:16 PM Bug #120: 1.2.3 RC3 NO NAT rules have ports 1024:65535 added to destination
I'm not sure if this is the proper method for fixing this issue, but I modified my /etc/inc/filter.inc file with the ... Garret Huntress
07:57 PM Bug #120 (Resolved): 1.2.3 RC3 NO NAT rules have ports 1024:65535 added to destination
In 1.2.3 RC3, when creating a NO NAT rule, ports 1024:65535 are added to the destination portion of the statement. F... Garret Huntress
 

Also available in: Atom