Activity
From 07/04/2010 to 08/02/2010
08/02/2010
-
06:06 PM Bug #789 (Closed): Bad racoon.conf generated.
- When setting up a new IPSEC connection in the GUI, if 'Local Network' is set to 'LAN subnet', and if the LAN interfac...
-
05:59 PM Feature #788 (Rejected): Support for Vodafone(huawei) K3765 3G modem
- We don't write drivers, we use what's available in FreeBSD (or occasionally ones not included but that are available ...
-
05:50 PM Feature #788 (Rejected): Support for Vodafone(huawei) K3765 3G modem
- Curently it is not possible to use the modem. Modem has much better performance than Huawei E220 and it's popular mos...
-
- to be consistent with how users expect it to work, and how it works in similar projects, it needs to just automatical...
-
05:08 PM Bug #475: L2TP is not functional in the way users will expect
- Probably this should be closed and a feature request should be opened for a wizard.
-
05:26 PM Bug #601: VHID changes do not apply immediately on secondary
- Just tested this again, and it is still a problem. On the secondary box, the VHID changes under the CARP settings scr...
-
- This should be fixed as part of another commit.
-
- PMTUD doesn't work with IPsec, creating a black hole that causes connectivity problems at times. Best work around is ...
-
- Applied in changeset commit:"0ce726624dc1fbc4998ca85d79b27d810d88d5fb".
-
- I will put this as a Feature rather than bug because of how ALTQ behaves on interfaces that do not have afixed bandwi...
-
- Applied in changeset commit:"62c4d0fb3ecaa43d51345c46240edf2f0a95552e".
-
- The settings sync to the slave but the service isn't restarted, so any change in hostnames or even the register DHCP ...
-
03:21 PM Bug #786 (Resolved): UDP traffic blocked by a floating rule
- I have a problem that as far as I can see is a bug.
When I add a "pass" floating rule for UPD traffic on port 53 the... -
- Applied in changeset commit:"09f11c7196f0627bd54b174cfd7cf701797ad256".
-
- Confirmed that static arp is off at boot time. If you check static arp, then save, the interface shows static arp is ...
-
- With static arp they should always show online, never offline, because they will always be in the ARP table. So if th...
-
12:19 PM Bug #782: Static ARP is not applied at boot time
- the reason y im saying point 2 is also cosmetic bug or so is because static arp enabled or no, once rebooted, arp tab...
-
- So point 1 is the real bug, and point 2 is irrelevant, those won't update with static ARP enabled, since the ARP entr...
-
- the reason y i see clients get ip lease is mayb because Deny unknown clients is unticked
-
- so the 2 i see in this is as follows:
- even with static arp enabled and client mac not listed, new clients with n... -
- With static ARP enabled, if the MAC is not listed, they shouldn't be able to even get an IP from DHCP. And they will ...
-
- yes i want only static entries to talk to the firewall although the clients still get a DHCP lease from the DHCP serv...
-
- If static ARP is enabled, then only the hosts with static entries can talk to the router. Are you sure you need stati...
-
- static ARP is enabled for me and still i left it for 24 hours and all the communicating hosts never show as online or...
-
- I see that if static ARP is disabled, every time DHCP settings are saved it clears out the ARP table, which may expla...
-
- It uses the gateway specified on the selected interface, it's a way to associate DNS servers with a particular ISP. I...
-
09:58 AM Feature #785 (Resolved): DNS servers over gateways
- In options DNS servers (System: General Setup) there is an option 'Use gateway'.
But in the dropping list there are ... -
01:17 PM Bug #777: Edit File wipes out file on save
- This has happened a few times before, it has to do with the file size and a option in lighty that has changed. I beli...
-
- Some files just sit there saying "Saving file" for a while. It is hit and miss, some work and some don't.
All of t... -
-
12:07 PM Bug #467: Unable to use active FTP via second gateway
- Ermal Luçi wrote:
> more information would be better.
Ok, I can try to describe it again.
vr1: adsl
vr2: cabl... -
- more information would be better.
-
- The error happens very seldom, I it saw 2 times. The last week did not observe.
-
-
- on further investigation, the wan interface page, period reset and dial on demand all r affected
-
- fixed in latest version
-
- fixed in latest version
-
- fixed in latest package
-
- fixed
-
- fixed in the latest package
08/01/2010
-
-
- This has been applied and committed, thanks! Can you please confirm with package version 1.0.6.8 that this is functi...
-
- similar committed, thanks
-
07:32 PM pfSense Packages Bug #770: imspector don't install on 2.0-BETA3-20100727
- I can confirm the same behavior. Just Installed the August 1st snapshot, imspector partially installed. I can't remov...
-
- lack of documentation is not a bug. It does need to be created, but it's too complex to note in the web interface, an...
-
06:58 PM Bug #784 (Rejected): Documentation: Firewall: Rules: Floating rules, Interface Groups, Interfaces: in which order are these groups processed?
- Reading "The Definitive Guide ...", online documentation and this bug tracker, none of them give me a clue,
in whic... -
- fixed
-
- Running: 2.0-BETA4-512mb-20100731-1322-nanobsd
Instead of displaying the user assigned label 'WAN1', firewall_nat.... -
- the problem is if u make changes under dhcp server and apply them then both the dhcp lease as well as arp table stop ...
-
- ok
-
05:09 AM Bug #781 (Resolved): Entering sim code problem on a Huawei E1752
- Had some problem using my 3g modem and it turns out to be a pin code problem. After setting pin off I can now use it ...
-
- upgraded from 22nd july nanobsd to 31st july nanobsd and disconnect button is broken again, might not be disconnect b...
07/31/2010
-
- works for me.
-
- duplicate of #589
-
-
-
-
-
-
- The issue is you're doing something you shouldn't be allowed to do, changing the interface on an associated rule. Ope...
-
- Creation of NAT (port forwarding) rules with Interface groups is filed under #701 as feature request.
Though with ... -
- Associated firewall rules should not be able to have their interface changed on firewall_rules_edit, as that's the re...
-
- Current 20100731-1322 implementation is incorrect:
- having 'WAN1', 'WAN2' and 'WAN' as grouping of WAN1+WAN2
- <fi... -
- BTW: 17 out of 18 (94%) out of our port forwarding rules are for all WAN links, and could benefit from being addressa...
-
- For users previously using Peplink Balance routers, all WAN can be selected in the screen where rules are edited. Ins...
-
- Ermal Luçi wrote:
> Can you please try latest snapshots and report back if the same situation persists?
>
> There... -
- not true actually, false report. Note when upgrading early 2.0 to latest 2.0, this is the case, and is necessary due ...
-
- Config upgrade from 1.2.x to 2.0 disables client specific override settings.
-
- When editing files via the Edit File screen, after saving them they're completely empty. inferfaces.inc at a minimum,...
-
07/30/2010
-
07:13 PM Bug #774: $priv array defined in priv.defs.inc doesnt store all match values
- Solved, changes are in rcs.pfsense.org/projects/pfsense/repos/oilop9000-improvements repository
regards -
- In fact this is not the only error, beacause in lines 765 and 771, the entire key is set to an empty array all over a...
-
- There is an error in lines 774 and 780 in file priv.defs.inc , thats because the key is redefined again as an empty a...
-
- false alarm actually, different problem
-
- This has regressed recently. Changing default from one statically configured gateway to another does not update the d...
-
-
04:20 PM Bug #775 (Resolved): Bridges destroyed when assigned and then configured by interface_configure
- Commit commit:5c49cf58c79f6d3c22182e1a4139be82df1bfa80 introduced a bug that bridges are destroyed when assigned and ...
-
-
- A workaround for this is to save and apply on the configuration page for each of the reassigned interfaces. The IP a...
-
- If you have an interface that has an IP alias VIP on it and reassign the interface, for a moment the newly assigned i...
-
04:31 PM pfSense Packages Bug #310: Nut needs changes for latest version
- Correct port detection still not implemented. Patch from first post still needed.
The new ACL works perfectly now. -
- Need to wait for a snapshot to confirm fixed, I tried a manual upgrade by hacking the code before completing boot. Wh...
-
- Seth committed code himself for this so i am putting to feedback.
-
- This commit from 480 causes the issue.
http://redmine.pfsense.org/projects/pfsense/repository/revisions/bf02c78434cb... -
- The gateway upgrade code is broken. I had a working snapshot from june 17th, I've confirmed that july 28th does not w...
-
- I know this is not the best (or correct) method to give feedback or code but maybe you can find this useful
I wrot... -
-
- It should work on latest snapshot.
-
- Here is not enough information to do a proper analysis on what is happening.
-
10:15 AM Feature #772 (Needs Patch): Add More Options to Diagnostics -> DNS Lookup
- I think it would be nice to see more options added to Diagnostics -> DNS Lookup so that you can specify the type of q...
-
- Thanks very much!
07/29/2010
-
- fixed
-
- Applied in changeset commit:"ca7b7f7eb0b63c33a3a43335f68a11271a857c78".
-
- Whichever table is selected shows up twice in the Overload Tables dropdown.
-
- I haven't been able to reproduce this. It always changes for me and I've confirmed it with ifconfig that the apbridg...
-
05:13 PM pfSense Packages Bug #770 (Resolved): imspector don't install on 2.0-BETA3-20100727
- The package imspector don't install. But, after error they apear on Installed Packages. Can't remove, resinstall xml ...
-
- i think it is easier to handle openvpn as all other cloned interfaces, build the list of assignment manually rather ...
-
- There's another somewhat related ticket open - the conversion process will break OpenVPN completely where interfaces ...
-
- If you restore a 1.2.3 config to 2.0, and that config has assigned OpenVPN interfaces, and the restore triggers the i...
-
- I personally prefer "last day", "last week", etc, but I can see why some might like it to be "current day", "current ...
-
- That was an intentional change by Seth actually. I'm not sure if that's the best behavior. I had the exact same thoug...
-
- I was mistaken, Graphs are refreshed.
But they are displayed with not a correct time slice. The right boundary of th... -
- It seems ok to me.
-
- from HypeTelecon on forum:
A while back I paid someone at rent-a-coder to update pfflowd so that it supported NetFl... -
- It should not happen on latest snapshots.
-
12:04 PM Bug #467 (Feedback): Unable to use active FTP via second gateway
- Setting back to Feedback. Jonathan will hopefully be posting some captures explaining what his current issue is sim...
-
09:56 AM Bug #755: dnswatch not working
- Ok i thought about making that change to the way the file is written but figured that wasn't the most ideal way of ha...
-
- Its not a patch against dnswatch but against the php script that writes the configuration file.
-
-
- You should be able on latest snapshot see openvpn client connections in the system gateway and should be able to put ...
-
- Well the problem with changing the type of alias is that you do not have anymore the information on the previous type...
-
- Can you please try this command and see if it changes anything:
sysctl net.link.bridge.pfil_local_phys=1 -
- Can you please provide some system logs about this.
I cannot see why this is happening by looking at code! -
- Moving to feedback to verify this functionality on 2.0.
07/28/2010
-
- that was it, thanks!
-
10:10 PM Bug #766 (Feedback): Packet capture results box empty
-
- After stopping a packet capture, the results box at the bottom of the page is empty, where the pcap itself is fine an...
-
-
- No change in snapshots with the latest commits.
-
- Patched.
-
- Ermal's recent change fixed the SNMP CPU usage on 64 bit, but it went from showing 100% all the time to showing 0% al...
-
- Applied in changeset commit:"b0c231e4f391f57ca7c20e2bd823bb585f131a2f".
-
- patch attached but should not be committed as is, should use base64 rather than cdata.
from Jonathan Dieter on su... -
- from Jonathan Dieter on support@
This patch will allow you to set a per-host network boot filename in
DHCP when y... -
- Currently, when you have an ICMP rule, the ICMP type is not reflected in the rule list. If you have separate rules fo...
-
- Applied in changeset commit:"a133bb38b2bee410bcefa8b22f8df758bca4c26f".
-
- Applied in changeset commit:"8e2986f8486237a964aa0890d335596a4da30c41".
-
- This is expected behavior.
Since the vr1 or vr0 is part of the multilink when it goes down mpd will bring the link d...
07/27/2010
-
- A number of changes have gone into that recently, you must be on an old version. The latest version lines 251-253 are...
-
- Lines 251-253 are duplicated in auth.inc file
Code
if(!is_dir($user_home))
mkdir($user_home, 0755); -
- After disabling CARP under Status> CARP, and clicking Enable, it doesn't actually add the VIPs.
-
-
-
- Fix committed.
-
- Applied in changeset commit:"4a71c0873c237ecd4c6e50337b8550e3bb4184c2".
-
03:32 AM Bug #745: Interface groups cannot be named LAN, WAN or OPTx
- Confirm the renaming resolves the selection issue, and sorry for being a numpty naming it as such!
That said, can ... -
- Not likely an OS change. I'm not sure snort has ever really worked properly on NanoBSD w/2.0. vnstat didn't work at a...
-
- This isn't true of all packages (blinkled for example is fine, as are dashboard widgets), but Snort for example is b0...
-
- 8.1 hasn't changed anything. Here's the output on an ALIX 2D3:
# uname -a
FreeBSD gateway.X.X.X 8.1-RC2 FreeBSD 8...
07/26/2010
-
- original updated with actual issue.
-
- Just updated to latest snap (previously had Jun 15 where I noticed this issue), and it's still there.
This probabl... -
- Interface groups cannot have the same name as an actual interface, nor any system-defined aliases (IPsec, OpenVPN, et...
-
-
- Committed a fix since the contents of the file were being trashed by check_reload_status before running the actual co...
-
- I'm no expert at knowing whether this is any good - you have to trawl through the archives, but this one seems pretty...
-
- Needs testing on 8.1 and a pointer to the mentioned patch if such a thing exists.
-
- Partly the wizard and partly duplication to #749, but primarily a big whinge that the broader shaping implementation ...
-
- On every SSH login, sshlockout_pf dies on 64 bit installs. ...
-
- This is how I work around the issue, by assigning the interface to a /24 subnet.
However, if you have a fresh OVPN...
07/25/2010
-
- /tmp/check_reload_status shows "After /tmp/rc.linkup"
System log shows "Kernel: em0: link state changed to UP" and... -
04:27 PM Bug #757 (Resolved): PPPoE Disconnect button with multiple PPPoE interfaces
- Hello,
Chris asked for this be put in a new issue.
Version : 2.0-BETA3
built on Sun Jul 25 00:16:02 EDT 2010
... -
- Phob: that's different, open a new ticket with specifics on replicating
-
- Hello again,
I don't know if this is related or not, but I also notice that the corresponding Gateway for any disc... -
- Hi there,
I have tested this, and something still isn't working correctly.
I have 3 WAN interfaces, two of whic... -
- Is there a link to your patch? I dont see any changes in the repository?
-
- This is fixed.
07/24/2010
-
-
- works fine now
-
- this is fixed in the latest package version.
07/23/2010
-
- the package installer has been having issues on nanobsd from quiet some time now, below are steps to replicate it.
... -
- thanks for reporting back.
-
- works fine now
-
-
- works fine now
07/22/2010
-
- Please check with new snapshots.
-
10:33 AM Bug #708: Need more checks for dns rebind issue
- Scott Ullrich wrote:
> Do you have an entry in the DNS Forwarder to forward the domain? If not try adding one.
... -
- Please consider expanding this enhancement to include the following.
Automatically add aliases that correspond to ... -
- Is this still true?
-
- Applied in changeset commit:"aa115b2f3e08730d4a458e83b9f3aa47ef64698f".
-
- Applied in changeset commit:"746e60c9ee05d270e8af303f51c9b669571b1b5a".
07/21/2010
-
- Only if the configured pf ruleset allows access to the host. That's always been the behavior, and this breaks other t...
-
- The problem with this is that it will open all the services on the host.
Why not call this a configuration problem a... -
- Patched.
-
-
- Please try the behaviour on last snapshots.
-
- This sounds like a problem with how the wizard sets things up.
-
- This is not a bug its a configuration issue.
-
- Well the 'workaround' for this is to manually specify the bandwidth of the interface during root queue config.
Oth... -
- When this happens can you check if apinger process is running at all?
Can you please try latest snapshot there is ... -
- Applied in changeset commit:"3cc0728228d1062903d73ffa899eb004f2f670d6".
-
- Ok should be fixed.
-
- I committed a fix to the upgrade code that should handle dnsupdate settings correctly, which is what had been causing...
07/20/2010
-
- Indeed, I am seeing this on nanobsd as well with ppp interfaces.
-
- tun/tap interfaces should likely be treated as dynamic gateways, where that check doesn't exist (such as for PPP). Bu...
-
- OpenVPN does all the ifconfig stuff of setting up the interface, so pfSense doesn't have to, but there are a couple o...
-
- I'll have a look. I made some commits in that area because there were a lot of problems with users and groups not han...
-
- Jim committed last on that area not sure the reason behind its commits!
-
- HI Guys
I noticed that in the latest snapshot dnswatch fails to startup as it seg faults. I managed to get it reco... -
- where is this patch?
-
- Even though it's an old driver from FreeBSD 6.0 and even though I've tried submitting to the lovely FreeBSD people ab...
-
- A natted ip (linksys dmz)
As i also have problems provoking it to fail I've replaced both the dsl box and the pfSe... -
- Applied in changeset commit:"496dcc199b5435cbd941b4ba89c9ded875f914fd".
-
- After upgrade to latest snapshot all RRD Graphs is not refreshed. (see screenshot)...
-
- OpenVPN can send 'dhcp-option' commands via push replies, available via foreign_option_ environment variable in the u...
-
05:45 AM Bug #729: if_bridge unpredictable filter interface selection
- Does anyone have an update on this? This is a major security issue in pf.
Please keep in mind that I discovered th... -
- I reported all these issues with the traffic shaper because I've been asked by a group of forum readers to create a d...
07/19/2010
-
- The larger issue is documentation in general on the shaper, how much should be explained in the actual web interface ...
-
- Given the frequent reference that deciding which scheduler to use is a pretty important decision in setting up the sh...
-
- That's because urtw doesn't support ALTQ.
-
- I have 2 urtw wireless NICs on my pfSense that don't even appear on the list of interfaces in the traffic shaper wher...
-
- pfSense can do several tasks at one, such as being a WAN router as well as bridging multiple LAN interfaces at the sa...
-
- It is not possible to create a root PRIQ or FAIRQ scheduler on an interface that doesn't report bandwidth (ie an Open...
-
- 2 moved to #746
1. I don't see, if you edit a rule that's assigned to a group, it stays with that group. If you ed... -
- You can't name an interface group as WAN, LAN, or OPTx because the rules are associated by the interface identifier (...
-
- It would be nice to add interface groups to the source/destination drop downs on the various GUI screens, to automati...
-
- Not sure what the problem is, I've seen different symptoms and haven't dug into it a lot. It appears no 1.2.x configu...
07/18/2010
-
- Using pfSense-2.0-BETA3-20100718-0208,
starting with keyinput "i" for installer,
configure video console using acce... -
-
-
-
-
- Some things do change before you apply changes.
1) When deleting a PARP entry, choparp is killed before clicking ap...
07/17/2010
-
- fixed
-
- This has since regressed, new users aren't added to all users.
-
-
-
- It never got to that point for new MAC entries. Fixed by:
https://rcs.pfsense.org/projects/pfsense/repos/mainline/c... -
-
-
-
-
-
-
-
-
- It's not that easy to replicate, none of mine do that. What kind of WANs?
-
- I've seen this again ( previous a sub note in ticket 536 )
in a multi wan setup with failover groups.
If wan fai... -
- some changes were made to this package regarding its database etc but due to a broken package manager on nanobsd, not...
07/16/2010
-
- Has this been addressed in a recent snapshot? I am also still seeing this behavior with "2.0-BETA3
built on Tue Jul... -
- In all previous versions, rules were added to allow all traffic to and from the interface IP where captive portal is ...
-
-
- solved
-
-
- solved
07/15/2010
-
- this was fixed since your version, which is over a month old. Please update to the latest before filing reports, thin...
-
10:14 AM Bug #699: html escaping problem in alias member description
- Correct, this is seen under Firewall -> Rules. I just tested with a host alias, same problem. To reproduce:
* cr... -
12:39 PM Bug #725: DHCP Relay missing logic for dynamic routes
- Arg.. just when I hit send I think of it...
I assume that when you say "reachable via any static route" you mean a... -
- I concur that your proposed solution would address the issue. Thanks!
-
- It seems to work for me.
Can you please try by uncommenting line:
137 @unlink("{$g['tmp_p... -
- When adding a pass-through MAC entry, it isn't added to ipfw until after clicking Save on the captive portal tab. Tha...
07/14/2010
-
- that'd be adequate. As is, I've heard from several users who are confused about the advanced options because of the t...
-
- How about just removing the first save / cancel button altogether?
-
- I think I may have seen this issue on the first boot of a new NanoBSD install that I was setting up yesterday.
-
- It appears this started with 924f202ee818c72b10855d3a1c06b34a9e7aa595
-
- Sounds like any rules list displaying a rule with the alias.
-
- Hi, could you clarify what screen this is on.. The Dashboard?
-
- Although I suspect we can use the above patch and even axe
$route .= " round-robin "; -
- Please try the attached patch.
-
- I fixed the wol build (by using the FreeBSD port instead of our pfPort which had no customizations, was just a straig...
-
- Applied in changeset commit:"9277b7efaa567ca2dcb584368c985ddd80d655f7".
-
-
- Applied in changeset commit:"780e7dc58845ab40ab7119f7b3f3dc268d63f326".
-
04:32 AM Bug #739 (Resolved): relayctl problem
- The following message was taken from the pfsense log:
php: /xmlrpc.php: The command '/usr/local/bin/relayctl reloa... -
- The updated binary is in current snapshots, and the GUI parts should show up in the next snapshot, sometime this even...
-
- Applied in changeset commit:"93b2c459855b82920decea1a2db080b0ae09b267".
-
- Do you have an entry in the DNS Forwarder to forward the domain? If not try adding one.
07/13/2010
-
- Also forgot to mention, that if using the 3 interface setup (with WAN and OPT1 bridged, with LAN on a private subnet)...
-
- Forgot to mention, indeed the host LAN side host (or OPT1 side host depending which scenario I'm doing), always appea...
-
- I see what you mean about the Anti-Lock out rule, *however when I first discovered this issue, I was actually using a...
-
- Hello, I needed it remove the --stop-dns-rebind option from the dnsmasq section of /etc/inc/services.inc to enable th...
-
- Cool - thanks Jim.
-
- Applied in changeset commit:"5ad9311a5b51bc76e1a74b0da4840b3e653afe26".
-
- In the function discover_pkg_rules() in /etc/inc/filter.inc, if a package returns errors in the parsing of the filter...
-
- Applied in changeset commit:"51599b2094b5f599fb3476ebc916fd6e91b2ad2d".
-
- On the interface traffic is being redirected to, currently 1:1 NAT Reflection only generates NAT rules for the subnet...
-
- This probably shouldn't be too hard to implement. With port forwards it will probably need code for separating the g...
-
- Currently it isn't possible to restrict users to accessing only specific services, except when they have a separate r...
07/12/2010
-
- Privileges can be assigned to a group that a user is a member of or they can be assigned directly to the user. Howev...
-
- Usually pretty quickly, it may take a while to show up on all the mirrors though.
I pulled your patch into our pfPor... -
09:02 PM Feature #262: Add NAT-PMP support to miniupnpd
- I just (few minutes ago!) received an email from the FreeBSD port maintainer approving the @miniupnpd@ port update. A...
-
- Nevermind, I missed the link to the PR in the original ticket info. Looks like it does have a patch. We can use that ...
-
- Thanks for the patch!
Does your FreeBSD PR for the port include a patch to update the port, or did you just ask fo... -
- I've included a patch to allow NAT-PMP to be a "first class" citizen along with UPnP. This is important for us as wel...
-
- The SSH tunnel shell needs a rewrite of the message it displays. It also could be more descriptive and maybe allow p...
-
- In such a config you must disable the antilockout rule under System > Advanced if you want to block everything out LA...
-
- When going through the traffic_shaper_wizard_multi_all.xml wizard and trying to set the p2p catch all bandwidth to an...
-
- When using the traffic_shaper_wizard_multi_lan.xml wizard, queues are not created for the local lan interfaces.
Te... -
- Brief description: When setting the amount of bandwidth that can be used in the traffic shaper wizard, peer to peer ...
-
- Try latest snapshots. The error should not be present anymore.
-
- Meant to also say in that update that the ssh tunnel shell should really be in a separate ticket since it isn't direc...
-
- The assigning of ssh privileges should be OK now. If a user is a member of a group that contains the user-shell-acces...
-
- Please try a new snapshot.
A change was made on the utility to monitor if the file is being deleted/renamed actions t...
07/11/2010
07/10/2010
-
10:30 AM Bug #374: "Register DHCP leases in DNS forwarder" doesn't work
- Adam Stylinski wrote:
> After having left pfsense running for a while my dynamic hostname resolution seems to have v... -
12:39 AM Bug #117: dns forewarder + carp not working properly
- Scott Ullrich wrote:
> This should be resolved now. Thank you for the report.
It seems that it is not 100% resol...
07/09/2010
-
- Applied in changeset commit:"d030c9ded4e5541de5be8e73d2bd4f5942380b45".
-
- if we create a rule under the floating tab and the interface if we select multiple of them, eg: LAN and OPT1 and then...
-
- auto update didn't work on the version you're on, and that issue, plus the invalid range, has long since been fixed. ...
-
- Also, if the date doesn't change, the update didn't take. You might need to to a manual firmware update or a console ...
-
- Are you on i386 or amd64 snapshots?
-
04:24 PM Bug #730 (Rejected): DHCP server not accepting valid ranges
- I created /26 subnets all within the same class C on four separate interfaces like so:
OPT1 - 10.0.0.0/26
OPT2 - ... -
- I currently don't have access to the test box, but I will later on this evening, and once I do, I will post the outpu...
-
- This bug is regarding traffic leaking when using bridges interfaces. I have been able to produce this bug on 2 sepera...
-
- tom hensel wrote:
> yes, i'm using DHCP on one of the WAN interfaces (vr1). so the DHCP client is overwriting the de... -
09:04 AM Bug #728: default gateway cannot be unset
- > # netstat -rn
Destination Gateway Flags Refs Use Netif Expire
default 192... -
- Changed the title of the ticket to reflect that this does not really have anything to do with gateway groups.
-
- Then show the output of:
# netstat -rn
And a copy of your configuration in the state where it doesn't work afte... -
- Jim P wrote:
> You always need a default gateway, you can't just uncheck it. You must use gateway groups via rules, ... -
- You always need a default gateway, you can't just uncheck it. You must use gateway groups via rules, and they must ma...
-
- Jim P wrote:
> The default gateway is not associated with gateway groups in that way.
could you please elaborate?... -
-
- The default gateway is not associated with gateway groups in that way.
-
- 1) define a gateway group of at least two gateways
2) unset "Default Gateway" checkbox from the according gateway
3... -
- When submitting a configuration, we need the configuration as it is when it doesn't work. You didn't mention that you...
-
- Jim P wrote:
> Yes, and I also read your configuration, and saw that you were not using the gateway group at all in ... -
- Yes, and I also read your configuration, and saw that you were not using the gateway group at all in rules.
Make a... -
- Jim P wrote:
> This is a configuration issue, not a bug. Please use a support system to ask for additional help (lik... -
- This is a configuration issue, not a bug. Please use a support system to ask for additional help (like the forum or I...
-
- the only traffic that gets over the second WAN interface is DNS traffic as defined in "General Setup".
in addition, ... -
- it might be but there have been a few rare cases in which i got disconnected from the isp which usually doesn't happe...
-
- The problem is it's missing checks for static routes, so it picks the wrong interface. This issue exists in m0n0wall ...
07/08/2010
-
- Forgot to add that this is 1.2.3-RELEASE on nanobsd platform.
-
- In my environment the DHCP relay server is across another router on the LAN interface, and I'm relaying through the O...
-
08:08 PM Bug #667: dial on demand broken again
pfsense behaves by default (without dial-on-demand ticked) as you stated above ( "if connection dropped for some o...-
- Applied in changeset commit:"35c9cd4463738ebfc07aa6099ebb8bd54e10434b".
07/07/2010
07/06/2010
-
-
03:54 PM Bug #710: Interfaces error on WAN
- This appears to have resolved with the July 4th update.
-
- Make sure your web browser is not blocking the popup. It will do that by default in any modern browser (but not as v...
-
- That other user manager bug has been fixed, so you may want to wait for a new snapshot to come up, install it, and th...
-
03:41 PM Bug #721: captive portal error
- About the user manager problem, I see an open ticket that reproduce my problem; shortly when adding an user, it's cre...
-
- Both of those could be specific to your configuration settings, so it's hard to say. I would post in the forum first ...
-
- OK, I tried the fix suggested and it works fine.
But now I found two other problems:
- authentication with Use... -
- Applied in changeset commit:"0321fa1ba49f41e672fe0836a399e03ed05d38d5".
-
- I would like to thank Craig Heffner for bringing this issue to our attention.
-
05:36 AM Bug #708: Need more checks for dns rebind issue
- DNS domain forwarding no longer works, log says: possible DNS-rebind attack detected. I used this function to forward...
-
02:45 AM Bug #708: Need more checks for dns rebind issue
- I can confirm that I also had to comment out this DNS rebind code in /etc/inc/auth.inc so that I could login.
-
- Looks like /usr/share/skel was being removed by the builder (it was in the remove.list) so the files weren't making i...
-
- This is a hardware-specific (not necessarily bad hardware, but specific to your hardware/setup) FreeBSD issue, which ...
-
07:22 AM Bug #724 (Rejected): fatal trap 12:page fault while in kernel mode
- On all new snapshots of pfsense 2.0 I get the attached error. I can't boot to the live cd, I've tryed to make a full ...
-
- On a snapshot from this AM (Tue Jul 6 04:18:29 UTC 2010): voucher, dnswatch, gzsig, ssh_tunnel_shell, and sshlockout...
-
-
03:42 AM Bug #681: upgrade snapshot change nanobsd image identification (
- works fine!
Thanks
07/05/2010
-
08:58 PM Bug #713: Shaper Wizard: When backlogged, high priority queues get zero bandwidth
- There is no error message output.
The shaper config functions, but logically is not correct. During congestion,... -
- Can you please be more detailed on what the error is?
-
- I fixed some builder pfPorts issues that would lead to voucher, dnswatch, gzsig, ssh_tunnel_shell, and sshlockout_pf ...
-
- Note that your existing non-working configuration still won't work. The change makes it so the nested alias will nev...
-
- Applied in changeset commit:"6775c54e2aa571d76d2fc6dea58f5c5a677997f4".
-
- what im trying to tell u is in older snaps dial on demand as well as disconnect used to work together as well as in 1...
-
- I actually will revert that changeset if you do not make up your mind.
Seems i have misread the bug before and if yo... -
10:22 AM Bug #723 (Resolved): Load Balancer problems
- how to reproduce:
-create pool
-create virtual server
Check /var/etc/relayd.conf it will only contain the table,... -
- I installed pfsense 2.0-BETA3 built on Sun Jul 4 07:31:59 EDT 2010.
I configured it in my virtual machine to test my... -
07:44 AM pfSense Packages Bug #719: Squid doesn't use local DNS cache (and fails after WAN failover)
- Stupid me just discovered the already present option "Use alternate DNS-servers for the proxy-server".
I still thi... -
- We use Squid as a transparent proxy and have two PPPoE uplinks via two different ISPs. Those should failover automat...
-
- But the empty group all the same appears, and the user is not added in one group. :)
-
- I have found, where an error:
auth.inc have this line (289)... -
- Also at removal of the user, it is not deleted from group 'all'.
-
- Today I have refreshed to last snapshot, but it has not helped.
It seems to me that at creation of the user, the g...
07/04/2010
-
05:23 PM Bug #374: "Register DHCP leases in DNS forwarder" doesn't work
- After having left pfsense running for a while my dynamic hostname resolution seems to have vanished.
uptime
11:58... -
02:16 PM pfSense Packages Bug #692: snort pidfile issue
- Confirmed as well using 2.8.6 pkg v. 1.27 on pfSense 2.0 beta
-
-
- After having left pfsense running for a while my dynamic hostname resolution seems to have vanished.
# uptime
1...
Also available in: Atom