Activity
From 07/10/2010 to 08/08/2010
08/08/2010
-
09:39 PM Bug #560 (New): loader.conf is empty after a firmware update.
- this reportedly isn't fixed. http://forum.pfsense.org/index.php/topic,27257.0.html
-
- Thanks David, the issue is with mobile IPsec only.
-
12:53 AM Bug #797: UI: IPsec Phase 2 edit, Address field active for LAN subnet option
- Emailed you directly Chris.
-
03:21 PM Bug #812 (Resolved): RRD graph time axis not locked to latest times with higher average samples
- See attached chart - this was taken on Sunday 20:12, but the chart shows the x-axis to Monday 0.00...
This is the ... -
04:58 AM Bug #802: Interface reassignment with VLANs after config restore to diff hardware doesn't work
- Though I suppose technically since it only really works with ath at the moment, the similar issue with the VAP config...
-
- fixed
-
- Ermal has a patch to if_bridge that seems to make filtering with if_bridge behave as it logically should (not as it i...
08/07/2010
-
- we were missing TCP 1119 for battle.net, aside from that the other traffic would have been classified accordingly, ot...
-
07:39 PM Bug #800 (Resolved): Preset for QOS Wrong
- The preset for prioritizing game traffic for World of Warcraft does not actually pick up any traffic for World of War...
-
- if someone wants to knock this out for 2.0, great, but as a non-critical feature, moving to future.
-
- fixed
-
- Ability to NAT multiple GRE connections to a single remote host on a single public IP. Need some kind of work around ...
-
- Only one IP is allowed for DHCP relay. dhcrelay can use multiple servers by specifying them with spaces between the I...
-
- Ermal reverted the part of that commit that caused it.
-
- as far as I can tell this is fixed, it's not doing as Erik described, and works correctly.
-
- This is probably also applicable for systems with a VAP wireless configuration.
-
- When you have a configuration with VLANs and restore it to hardware with different NICs than the original hardware, t...
-
- The username for the config sync user must be 'admin'.
-
- (from cvstrac)
The PHP shell's "help" output refers to using $config - but $config apparently isn't declared as glob... -
-
- (from cvstrac)
Cannot set the keymap to anything other than the default. This is mainly because /etc/rc.d/syscons ... -
- Automatically adding an option to the drop downs on firewall rules, NAT, etc. screens for RFC 1918 networks would be ...
-
-
- a somewhat nicer overview for incoming PPTP connections... and their status.
Eg like :
user ip con... -
- ability to enable and disable static routes
-
- If anyone wants to test it, go ahead and try adding rules on the IPsec interface - it is one of the available choices...
-
- Ermal, how is this supposed to work? nat on enc0?
-
- Rules negating policy routing for remote VPN subnets are automatically added. In some circumstances this is undesirab...
-
- Aliases not currently usable in outbound NAT rules.
-
- looks like recent package fixes fixed this, I can't replicate it with the steps listed.
-
- everything here seems to be reasonable with all the latest changes
-
- fixed
-
- closed pending info on how to replicate, not seeing that on 6 different installs, with numerous browsers on 4 differe...
-
- Not seeing that on Chrome nor IE nor Firefox. The js doesn't (and can't AFAIK) disable those until the page is fully ...
-
- fixed
-
- fixed, and sticky with multi-WAN has no apparent problems, I've been load balancing all my HTTP with sticky for weeks...
-
- This does break off-host syslogging, moving to Future.
-
-
- this was either fixed a while back or needs more info, not seeing this anywhere on current versions
-
-
-
- This occurs because the wireless status page uses the list scan command on ifconfig, which only gives some cached dat...
-
- fixed, thanks
-
02:48 PM Bug #799 (Resolved): Misspelling of encryption in vpn_l2tp.php
- http://redmine.pfsense.org/projects/pfsense/repository/revisions/master/entry/usr/local/www/vpn_l2tp.php#L353
Shou... -
- same here
-
04:52 AM Bug #467: Unable to use active FTP via second gateway
- I am pleased to report I have upgraded my pfsense box to the latest snapshot "2.0-BETA4 built on Fri Aug 6 18:22:00 E...
-
12:01 PM Bug #684: interface status, disconenct button doesnt work
- still the same with the 7th august snap, if some1 could fix this minor issue, just caused by some php warning
-
08:39 AM Bug #758: sshlockout_pf doesn't work on 64 bit
- Sadly it still appears to be crashing.
-
-
- I've made it enforce the setting when saving, too, just like it does for the source and destination. Should the same...
-
- It does appear so in the code for the port forward edit page.
There may be a bit more to this than simply disablin... -
- Yes, it does.
-
- When you change the interface on the port forward, does it change the interface on the associated firewall rule?
-
- fixed
-
- this is fixed (though there is a related issue in another ticket, IP Alias VIPs don't get removed from the previously...
-
- this seems to be fine now
-
- same.
-
-
-
- fixed
-
- Updated to latest snapshot from this afternoon, and can confirm that renaming the interface that I was having issues ...
-
- fixed
-
- fixed
-
- fixed
-
-
-
-
-
-
-
- fixed
-
- This is closer. Still one problem, when you switch interfaces like this, it does not delete the alias IPs from the pr...
-
-
- this doesn't take dynamic routing into account, it probably should just use a routing table lookup to determine the i...
-
- fixed
-
-
- Check http://forum.pfsense.org/index.php/topic,27197.msg142135.html#msg142135 for some details on this question which...
08/06/2010
-
-
- looks good
-
- looks good
-
- fixed
-
- fixed
-
-
- fixed
-
-
-
- Applied in changeset commit:"1beafceb73be3362da8d9d1c3f6e89c4dfc80607".
-
- fixed
-
- falls into the category of DPD not functioning in ipsec-tools, which is being tracked on 2.0.
-
06:37 PM Bug #798 (Rejected): IPSEC not working after CARP failover
- I have tested multiple pfsense clusters running on Vmware ESXi. When a CARP failover initiates, the backup unit take...
-
05:58 PM Bug #434 (Feedback): xmlparse.inc should not call die
- I made it return just an empty array. That should suffice to solve this.
-
- Forgot to mention, I tested this on current versions of Chrome and IE8. Since it works after reselecting from the dro...
-
- When editing an existing Phase 2 IPsec entry where the "Local Network: Type" field is set to "LAN subnet" already, wh...
-
- there will likely be one with a date of late 20100806 (after 16:00 to be safe), otherwise on the 7th.
-
- Hmm, good point :-) Sorry, just jumped on it based on the post at http://forum.pfsense.org/index.php/topic,27197.msg1...
-
- There are no snapshots with that fix yet, especially not one from the day before the fix was committed.
-
- I just updated to the latest (Aug. 5th) snapshot from Aug 1st (where I first reported the problem) and the problem st...
-
-
09:14 AM Feature #796 (Resolved): Add 95th Percentile Line to RRD
- Please add a check box to add a 95th percentile line to the RRD graphs. This is a useful bit of information for those...
-
09:09 AM Feature #795: disable acpi on alix
- Could maybe be a checkbox instead, as plenty of people run embedded on hardware that supports ACPI just fine.
-
- it would be a good idea to disable ACPI on embedded environments as alix etc dont support it and the warning is alway...
-
- ok then the rest works fine except the pppoe after 30th august which is preventing me from upgrading to the latest.
-
- If you check "deny unknown clients" it would prevent that. It's likely a byproduct of DHCP being broadcast, and not d...
-
- i applied the patch and tried it and it works fine now but the core issue still remains, that is, client macs not lis...
-
04:37 AM Bug #729: if_bridge unpredictable filter interface selection
- And please remember that the problem goes away after you wait for a few minutes. This only happens when the arp table...
-
- Hi Chris,
I appreciate what you are saying, but the point of concern here is that the host shouldn't be able to se... -
- There's also a FreeBSD bug report relating to this that's been open since Feb 2008: http://www.freebsd.org/cgi/query-...
08/05/2010
-
- After saving on system_advanced_firewall.php, any selected TFTP interfaces are not shown as selected. After loading t...
-
- This scenario is described in the if_bridge man page: ...
-
-
- The attached patch fixes the crash.
-
- I found another potential issue that could clobber the static ARP entries. Wait for the snapshot after next (it's in ...
-
- So for some reason your MAC/IP pairs are not being added to the ARP table when you enable static ARP.
-Although you s... -
- arp -a before enabling static arp
? (192.168.0.11) at 00:1b:11:0b:ef:9b on vr0 expires in 1134 seconds [ethernet]
... -
- What would help more is:
* The output of "arp -a" before you enable
* The output of "arp -a" after you enable
* ... -
- i tried the 5th august nanobsd and this doesnt work, as soon as i enable, every1 gets locked out but the lan clients ...
-
- opt1 in access point mode and also bridged to lan and after boot everything shows fine under status wireless but supp...
-
- thanks for the effort, ill test it out once i get the pppoe reconnect issue sorted out due to which im stuck on the 3...
-
- implemented
-
06:41 AM pfSense Packages Bug #436: [PATCH] rewrite of tinydns_add_active_leases
- Tested with package version 1.0.6.11 and pfSense-2.0-BETA4-20100804-1929.iso. Looks okay to me so far.
A little hi... -
- all snaps from 31st july to 5th august keep giving this in browser in a endless loop when disconnect button is presse...
-
- all snaps from 31st july to 5th august keep giving this in browser in a endless loop when disconnect button is presse...
08/04/2010
-
- As reported here.
http://forum.pfsense.org/index.php/topic,27197.0.html -
- True, running pfctl -b manually does work, but it's not run properly at failover.
-
06:39 PM Feature #8: Clear states after failover
- I still have this issue on a August 4 build...
-
- It appeared previously that firewall states would all be gone but states such as: ...
-
- Can you please be more clear what you mean by nat states?
-
06:11 PM Bug #495: USB drive fails to mount during boot
- This listed configuration option has been tested and confirmed to work. Test board was running 2.0 BETA3 on a Geode L...
-
02:44 PM Bug #495: USB drive fails to mount during boot
- http://forums.freebsd.org/showpost.php?s=d7af7671c4a56cb50af4c13e2fb7877f&p=91961&postcount=8
It looks like a conf... -
- Don't need the patch, just the loader.conf addition:
kern.cam.boot_delay=10000
-
- Applied in changeset commit:"3b3170d094510f8cdde36a9f24b9ca10b4ea24f4".
-
04:03 PM Bug #757: PPPoE Disconnect button with multiple PPPoE interfaces
- Hi there - I can certainly do this, which log do you want/need? (which file catches the interface/gateway issue?)
... -
- Applied in changeset commit:"4cea5cf8ab9b06ccd414a783c1b7cb40e5961bf4".
-
- I could reproduce this on a vm with 2.0 i have though i will update it again and post here.
-
- to further narrow this down, i upgraded to the 30th july snap (pfSense-2.0-BETA4-1g-20100730-1433-nanobsd-upgrade.img...
08/03/2010
-
- Ermal: at your request from earlier, I can't duplicate this on 1.2.3.
Though I can't duplicate it on 2.0 either, ... -
02:24 PM Bug #786: UDP traffic blocked by a floating rule
- Sorry, pisted the same file twice. Here is rules.debug_ko with the rule enabled
-
- rules.debug_ok with the rule disabled and dns lookup working
rules.debug_ok withe the rule enabled and the dns looku... -
- can you please post the contents of the file /tmp/rules.debug before and after the problem shows itself.
-
-
- Applied in changeset commit:"7ed9c6acdf2435ea95d83b09fb87b6ef8b279b37".
-
-
- Applied in changeset commit:"6441fa9a5f8fa303469822aa3e79b863de1ab9c5".
-
-
- Line 2260 needs a "=" after firewall_shaper.php?interface.
http://redmine.pfsense.org/projects/pfsense/repository/... -
- Yes, it works on reboot, and even on NanoBSD.
-
- did u try rebooting with the static arp enabled and ur client machines ip and mac already in list and that too on the...
-
- Then wait for the next update and try again to disable/enable the service. It works fine for me now in my VM setup. I...
-
- all my entries have been with ip and mac and for me if i then enable static arp, every1 is locked out so for me its b...
-
- It works fine, as intended, though I was incorrect on one point: You must specify IP addresses for clients listed in ...
-
- Yes, but it was always enabled in the GUI - only now it's enabled in the GUI and at boot time. Previously, it was onl...
-
- its not the gui but its the patch itself, if static arp is enabled,e very1 is locked out, no1 can communicate with th...
-
- There shouldn't be any difference when saving from the GUI, but I'll look into it.
The firewall's MAC doesn't need... -
- after the patch, things have gone much worse, as soon as i go to dhcps erver and tick static arp and click save, ever...
-
- Is this intended for clients or for the firewall itself?
Clients using the DNS forwarder wouldn't hit any of these... -
01:39 AM Feature #790 (New): Advanced options for dnsclient (resolv.conf)
- Possibility to add additional options in resolv.conf:
* timeout:n (default 5)
* attempts:n (default 2)
* maybe oth... -
- i tried to trace the changes between 22nd july to 31st july but wasnt able to find whats causing this pppoe reconenct...
-
02:15 AM Bug #682: WAN traffic graph is broken with MLPPP
- I recently upgraded from 2-line mlppp to 4-line mlppp and the WAN:outgoing graph is still reading double. I partly ex...
-
- yes that's all possible. You can do that manually as well, with floating rules. It's definitely something we should c...
-
- > It uses the gateway specified on the selected interface, it's a way to associate DNS servers with a particular ISP....
08/02/2010
-
06:06 PM Bug #789 (Closed): Bad racoon.conf generated.
- When setting up a new IPSEC connection in the GUI, if 'Local Network' is set to 'LAN subnet', and if the LAN interfac...
-
- We don't write drivers, we use what's available in FreeBSD (or occasionally ones not included but that are available ...
-
05:50 PM Feature #788 (Rejected): Support for Vodafone(huawei) K3765 3G modem
- Curently it is not possible to use the modem. Modem has much better performance than Huawei E220 and it's popular mos...
-
- to be consistent with how users expect it to work, and how it works in similar projects, it needs to just automatical...
-
- Probably this should be closed and a feature request should be opened for a wizard.
-
- Just tested this again, and it is still a problem. On the secondary box, the VHID changes under the CARP settings scr...
-
- This should be fixed as part of another commit.
-
- PMTUD doesn't work with IPsec, creating a black hole that causes connectivity problems at times. Best work around is ...
-
- Applied in changeset commit:"0ce726624dc1fbc4998ca85d79b27d810d88d5fb".
-
- I will put this as a Feature rather than bug because of how ALTQ behaves on interfaces that do not have afixed bandwi...
-
- Applied in changeset commit:"62c4d0fb3ecaa43d51345c46240edf2f0a95552e".
-
- The settings sync to the slave but the service isn't restarted, so any change in hostnames or even the register DHCP ...
-
- I have a problem that as far as I can see is a bug.
When I add a "pass" floating rule for UPD traffic on port 53 the... -
- Applied in changeset commit:"09f11c7196f0627bd54b174cfd7cf701797ad256".
-
- Confirmed that static arp is off at boot time. If you check static arp, then save, the interface shows static arp is ...
-
- With static arp they should always show online, never offline, because they will always be in the ARP table. So if th...
-
- the reason y im saying point 2 is also cosmetic bug or so is because static arp enabled or no, once rebooted, arp tab...
-
- So point 1 is the real bug, and point 2 is irrelevant, those won't update with static ARP enabled, since the ARP entr...
-
- the reason y i see clients get ip lease is mayb because Deny unknown clients is unticked
-
- so the 2 i see in this is as follows:
- even with static arp enabled and client mac not listed, new clients with n... -
- With static ARP enabled, if the MAC is not listed, they shouldn't be able to even get an IP from DHCP. And they will ...
-
- yes i want only static entries to talk to the firewall although the clients still get a DHCP lease from the DHCP serv...
-
- If static ARP is enabled, then only the hosts with static entries can talk to the router. Are you sure you need stati...
-
- static ARP is enabled for me and still i left it for 24 hours and all the communicating hosts never show as online or...
-
- I see that if static ARP is disabled, every time DHCP settings are saved it clears out the ARP table, which may expla...
-
- It uses the gateway specified on the selected interface, it's a way to associate DNS servers with a particular ISP. I...
-
- In options DNS servers (System: General Setup) there is an option 'Use gateway'.
But in the dropping list there are ... -
01:17 PM Bug #777: Edit File wipes out file on save
- This has happened a few times before, it has to do with the file size and a option in lighty that has changed. I beli...
-
- Some files just sit there saying "Saving file" for a while. It is hit and miss, some work and some don't.
All of t... -
-
- Ermal Luçi wrote:
> more information would be better.
Ok, I can try to describe it again.
vr1: adsl
vr2: cabl... -
- more information would be better.
-
- The error happens very seldom, I it saw 2 times. The last week did not observe.
-
-
- on further investigation, the wan interface page, period reset and dial on demand all r affected
-
- fixed in latest version
-
- fixed in latest version
-
- fixed in latest package
-
- fixed
-
- fixed in the latest package
08/01/2010
-
-
- This has been applied and committed, thanks! Can you please confirm with package version 1.0.6.8 that this is functi...
-
- similar committed, thanks
-
07:32 PM pfSense Packages Bug #770: imspector don't install on 2.0-BETA3-20100727
- I can confirm the same behavior. Just Installed the August 1st snapshot, imspector partially installed. I can't remov...
-
- lack of documentation is not a bug. It does need to be created, but it's too complex to note in the web interface, an...
-
06:58 PM Bug #784 (Rejected): Documentation: Firewall: Rules: Floating rules, Interface Groups, Interfaces: in which order are these groups processed?
- Reading "The Definitive Guide ...", online documentation and this bug tracker, none of them give me a clue,
in whic... -
- fixed
-
- Running: 2.0-BETA4-512mb-20100731-1322-nanobsd
Instead of displaying the user assigned label 'WAN1', firewall_nat.... -
- the problem is if u make changes under dhcp server and apply them then both the dhcp lease as well as arp table stop ...
-
- ok
-
- Had some problem using my 3g modem and it turns out to be a pin code problem. After setting pin off I can now use it ...
-
- upgraded from 22nd july nanobsd to 31st july nanobsd and disconnect button is broken again, might not be disconnect b...
07/31/2010
-
- works for me.
-
- duplicate of #589
-
-
-
-
-
-
- The issue is you're doing something you shouldn't be allowed to do, changing the interface on an associated rule. Ope...
-
- Creation of NAT (port forwarding) rules with Interface groups is filed under #701 as feature request.
Though with ... -
- Associated firewall rules should not be able to have their interface changed on firewall_rules_edit, as that's the re...
-
- Current 20100731-1322 implementation is incorrect:
- having 'WAN1', 'WAN2' and 'WAN' as grouping of WAN1+WAN2
- <fi... -
- BTW: 17 out of 18 (94%) out of our port forwarding rules are for all WAN links, and could benefit from being addressa...
-
- For users previously using Peplink Balance routers, all WAN can be selected in the screen where rules are edited. Ins...
-
- Ermal Luçi wrote:
> Can you please try latest snapshots and report back if the same situation persists?
>
> There... -
- not true actually, false report. Note when upgrading early 2.0 to latest 2.0, this is the case, and is necessary due ...
-
- Config upgrade from 1.2.x to 2.0 disables client specific override settings.
-
- When editing files via the Edit File screen, after saving them they're completely empty. inferfaces.inc at a minimum,...
-
07/30/2010
-
07:13 PM Bug #774: $priv array defined in priv.defs.inc doesnt store all match values
- Solved, changes are in rcs.pfsense.org/projects/pfsense/repos/oilop9000-improvements repository
regards -
- In fact this is not the only error, beacause in lines 765 and 771, the entire key is set to an empty array all over a...
-
- There is an error in lines 774 and 780 in file priv.defs.inc , thats because the key is redefined again as an empty a...
-
- false alarm actually, different problem
-
- This has regressed recently. Changing default from one statically configured gateway to another does not update the d...
-
-
- Commit commit:5c49cf58c79f6d3c22182e1a4139be82df1bfa80 introduced a bug that bridges are destroyed when assigned and ...
-
-
- A workaround for this is to save and apply on the configuration page for each of the reassigned interfaces. The IP a...
-
- If you have an interface that has an IP alias VIP on it and reassign the interface, for a moment the newly assigned i...
-
04:31 PM pfSense Packages Bug #310: Nut needs changes for latest version
- Correct port detection still not implemented. Patch from first post still needed.
The new ACL works perfectly now. -
- Need to wait for a snapshot to confirm fixed, I tried a manual upgrade by hacking the code before completing boot. Wh...
-
- Seth committed code himself for this so i am putting to feedback.
-
- This commit from 480 causes the issue.
http://redmine.pfsense.org/projects/pfsense/repository/revisions/bf02c78434cb... -
- The gateway upgrade code is broken. I had a working snapshot from june 17th, I've confirmed that july 28th does not w...
-
- I know this is not the best (or correct) method to give feedback or code but maybe you can find this useful
I wrot... -
-
- It should work on latest snapshot.
-
- Here is not enough information to do a proper analysis on what is happening.
-
- I think it would be nice to see more options added to Diagnostics -> DNS Lookup so that you can specify the type of q...
-
- Thanks very much!
07/29/2010
-
- fixed
-
- Applied in changeset commit:"ca7b7f7eb0b63c33a3a43335f68a11271a857c78".
-
- Whichever table is selected shows up twice in the Overload Tables dropdown.
-
- I haven't been able to reproduce this. It always changes for me and I've confirmed it with ifconfig that the apbridg...
-
05:13 PM pfSense Packages Bug #770 (Resolved): imspector don't install on 2.0-BETA3-20100727
- The package imspector don't install. But, after error they apear on Installed Packages. Can't remove, resinstall xml ...
-
- i think it is easier to handle openvpn as all other cloned interfaces, build the list of assignment manually rather ...
-
- There's another somewhat related ticket open - the conversion process will break OpenVPN completely where interfaces ...
-
- If you restore a 1.2.3 config to 2.0, and that config has assigned OpenVPN interfaces, and the restore triggers the i...
-
- I personally prefer "last day", "last week", etc, but I can see why some might like it to be "current day", "current ...
-
- That was an intentional change by Seth actually. I'm not sure if that's the best behavior. I had the exact same thoug...
-
- I was mistaken, Graphs are refreshed.
But they are displayed with not a correct time slice. The right boundary of th... -
- It seems ok to me.
-
- from HypeTelecon on forum:
A while back I paid someone at rent-a-coder to update pfflowd so that it supported NetFl... -
- It should not happen on latest snapshots.
-
12:04 PM Bug #467 (Feedback): Unable to use active FTP via second gateway
- Setting back to Feedback. Jonathan will hopefully be posting some captures explaining what his current issue is sim...
-
09:56 AM Bug #755: dnswatch not working
- Ok i thought about making that change to the way the file is written but figured that wasn't the most ideal way of ha...
-
- Its not a patch against dnswatch but against the php script that writes the configuration file.
-
-
- You should be able on latest snapshot see openvpn client connections in the system gateway and should be able to put ...
-
- Well the problem with changing the type of alias is that you do not have anymore the information on the previous type...
-
- Can you please try this command and see if it changes anything:
sysctl net.link.bridge.pfil_local_phys=1 -
- Can you please provide some system logs about this.
I cannot see why this is happening by looking at code! -
- Moving to feedback to verify this functionality on 2.0.
07/28/2010
-
- that was it, thanks!
-
10:10 PM Bug #766 (Feedback): Packet capture results box empty
-
- After stopping a packet capture, the results box at the bottom of the page is empty, where the pcap itself is fine an...
-
-
- No change in snapshots with the latest commits.
-
- Patched.
-
- Ermal's recent change fixed the SNMP CPU usage on 64 bit, but it went from showing 100% all the time to showing 0% al...
-
- Applied in changeset commit:"b0c231e4f391f57ca7c20e2bd823bb585f131a2f".
-
- patch attached but should not be committed as is, should use base64 rather than cdata.
from Jonathan Dieter on su... -
- from Jonathan Dieter on support@
This patch will allow you to set a per-host network boot filename in
DHCP when y... -
- Currently, when you have an ICMP rule, the ICMP type is not reflected in the rule list. If you have separate rules fo...
-
- Applied in changeset commit:"a133bb38b2bee410bcefa8b22f8df758bca4c26f".
-
- Applied in changeset commit:"8e2986f8486237a964aa0890d335596a4da30c41".
-
- This is expected behavior.
Since the vr1 or vr0 is part of the multilink when it goes down mpd will bring the link d...
07/27/2010
-
- A number of changes have gone into that recently, you must be on an old version. The latest version lines 251-253 are...
-
- Lines 251-253 are duplicated in auth.inc file
Code
if(!is_dir($user_home))
mkdir($user_home, 0755); -
- After disabling CARP under Status> CARP, and clicking Enable, it doesn't actually add the VIPs.
-
-
-
- Fix committed.
-
- Applied in changeset commit:"4a71c0873c237ecd4c6e50337b8550e3bb4184c2".
-
- Confirm the renaming resolves the selection issue, and sorry for being a numpty naming it as such!
That said, can ... -
- Not likely an OS change. I'm not sure snort has ever really worked properly on NanoBSD w/2.0. vnstat didn't work at a...
-
- This isn't true of all packages (blinkled for example is fine, as are dashboard widgets), but Snort for example is b0...
-
- 8.1 hasn't changed anything. Here's the output on an ALIX 2D3:
# uname -a
FreeBSD gateway.X.X.X 8.1-RC2 FreeBSD 8...
07/26/2010
-
- original updated with actual issue.
-
- Just updated to latest snap (previously had Jun 15 where I noticed this issue), and it's still there.
This probabl... -
- Interface groups cannot have the same name as an actual interface, nor any system-defined aliases (IPsec, OpenVPN, et...
-
-
- Committed a fix since the contents of the file were being trashed by check_reload_status before running the actual co...
-
- I'm no expert at knowing whether this is any good - you have to trawl through the archives, but this one seems pretty...
-
- Needs testing on 8.1 and a pointer to the mentioned patch if such a thing exists.
-
- Partly the wizard and partly duplication to #749, but primarily a big whinge that the broader shaping implementation ...
-
- On every SSH login, sshlockout_pf dies on 64 bit installs. ...
-
- This is how I work around the issue, by assigning the interface to a /24 subnet.
However, if you have a fresh OVPN...
07/25/2010
-
- /tmp/check_reload_status shows "After /tmp/rc.linkup"
System log shows "Kernel: em0: link state changed to UP" and... -
- Hello,
Chris asked for this be put in a new issue.
Version : 2.0-BETA3
built on Sun Jul 25 00:16:02 EDT 2010
... -
- Phob: that's different, open a new ticket with specifics on replicating
-
- Hello again,
I don't know if this is related or not, but I also notice that the corresponding Gateway for any disc... -
- Hi there,
I have tested this, and something still isn't working correctly.
I have 3 WAN interfaces, two of whic... -
- Is there a link to your patch? I dont see any changes in the repository?
-
- This is fixed.
07/24/2010
-
-
- works fine now
-
- this is fixed in the latest package version.
07/23/2010
-
- the package installer has been having issues on nanobsd from quiet some time now, below are steps to replicate it.
... -
- thanks for reporting back.
-
- works fine now
-
-
- works fine now
07/22/2010
-
- Please check with new snapshots.
-
10:33 AM Bug #708: Need more checks for dns rebind issue
- Scott Ullrich wrote:
> Do you have an entry in the DNS Forwarder to forward the domain? If not try adding one.
... -
- Please consider expanding this enhancement to include the following.
Automatically add aliases that correspond to ... -
- Is this still true?
-
- Applied in changeset commit:"aa115b2f3e08730d4a458e83b9f3aa47ef64698f".
-
- Applied in changeset commit:"746e60c9ee05d270e8af303f51c9b669571b1b5a".
07/21/2010
-
- Only if the configured pf ruleset allows access to the host. That's always been the behavior, and this breaks other t...
-
- The problem with this is that it will open all the services on the host.
Why not call this a configuration problem a... -
- Patched.
-
-
- Please try the behaviour on last snapshots.
-
- This sounds like a problem with how the wizard sets things up.
-
- This is not a bug its a configuration issue.
-
- Well the 'workaround' for this is to manually specify the bandwidth of the interface during root queue config.
Oth... -
- When this happens can you check if apinger process is running at all?
Can you please try latest snapshot there is ... -
- Applied in changeset commit:"3cc0728228d1062903d73ffa899eb004f2f670d6".
-
- Ok should be fixed.
-
- I committed a fix to the upgrade code that should handle dnsupdate settings correctly, which is what had been causing...
07/20/2010
-
- Indeed, I am seeing this on nanobsd as well with ppp interfaces.
-
- tun/tap interfaces should likely be treated as dynamic gateways, where that check doesn't exist (such as for PPP). Bu...
-
- OpenVPN does all the ifconfig stuff of setting up the interface, so pfSense doesn't have to, but there are a couple o...
-
- I'll have a look. I made some commits in that area because there were a lot of problems with users and groups not han...
-
- Jim committed last on that area not sure the reason behind its commits!
-
- HI Guys
I noticed that in the latest snapshot dnswatch fails to startup as it seg faults. I managed to get it reco... -
- where is this patch?
-
- Even though it's an old driver from FreeBSD 6.0 and even though I've tried submitting to the lovely FreeBSD people ab...
-
- A natted ip (linksys dmz)
As i also have problems provoking it to fail I've replaced both the dsl box and the pfSe... -
- Applied in changeset commit:"496dcc199b5435cbd941b4ba89c9ded875f914fd".
-
- After upgrade to latest snapshot all RRD Graphs is not refreshed. (see screenshot)...
-
- OpenVPN can send 'dhcp-option' commands via push replies, available via foreign_option_ environment variable in the u...
-
- Does anyone have an update on this? This is a major security issue in pf.
Please keep in mind that I discovered th... -
- I reported all these issues with the traffic shaper because I've been asked by a group of forum readers to create a d...
07/19/2010
-
- The larger issue is documentation in general on the shaper, how much should be explained in the actual web interface ...
-
- Given the frequent reference that deciding which scheduler to use is a pretty important decision in setting up the sh...
-
- That's because urtw doesn't support ALTQ.
-
- I have 2 urtw wireless NICs on my pfSense that don't even appear on the list of interfaces in the traffic shaper wher...
-
- pfSense can do several tasks at one, such as being a WAN router as well as bridging multiple LAN interfaces at the sa...
-
- It is not possible to create a root PRIQ or FAIRQ scheduler on an interface that doesn't report bandwidth (ie an Open...
-
- 2 moved to #746
1. I don't see, if you edit a rule that's assigned to a group, it stays with that group. If you ed... -
- You can't name an interface group as WAN, LAN, or OPTx because the rules are associated by the interface identifier (...
-
- It would be nice to add interface groups to the source/destination drop downs on the various GUI screens, to automati...
-
- Not sure what the problem is, I've seen different symptoms and haven't dug into it a lot. It appears no 1.2.x configu...
07/18/2010
-
- Using pfSense-2.0-BETA3-20100718-0208,
starting with keyinput "i" for installer,
configure video console using acce... -
-
-
-
-
- Some things do change before you apply changes.
1) When deleting a PARP entry, choparp is killed before clicking ap...
07/17/2010
-
- fixed
-
- This has since regressed, new users aren't added to all users.
-
-
-
- It never got to that point for new MAC entries. Fixed by:
https://rcs.pfsense.org/projects/pfsense/repos/mainline/c... -
-
-
-
-
-
-
-
-
- It's not that easy to replicate, none of mine do that. What kind of WANs?
-
- I've seen this again ( previous a sub note in ticket 536 )
in a multi wan setup with failover groups.
If wan fai... -
- some changes were made to this package regarding its database etc but due to a broken package manager on nanobsd, not...
07/16/2010
-
- Has this been addressed in a recent snapshot? I am also still seeing this behavior with "2.0-BETA3
built on Tue Jul... -
- In all previous versions, rules were added to allow all traffic to and from the interface IP where captive portal is ...
-
-
- solved
-
-
- solved
07/15/2010
-
- this was fixed since your version, which is over a month old. Please update to the latest before filing reports, thin...
-
10:14 AM Bug #699: html escaping problem in alias member description
- Correct, this is seen under Firewall -> Rules. I just tested with a host alias, same problem. To reproduce:
* cr... -
12:39 PM Bug #725: DHCP Relay missing logic for dynamic routes
- Arg.. just when I hit send I think of it...
I assume that when you say "reachable via any static route" you mean a... -
- I concur that your proposed solution would address the issue. Thanks!
-
- It seems to work for me.
Can you please try by uncommenting line:
137 @unlink("{$g['tmp_p... -
- When adding a pass-through MAC entry, it isn't added to ipfw until after clicking Save on the captive portal tab. Tha...
07/14/2010
-
- that'd be adequate. As is, I've heard from several users who are confused about the advanced options because of the t...
-
- How about just removing the first save / cancel button altogether?
-
- I think I may have seen this issue on the first boot of a new NanoBSD install that I was setting up yesterday.
-
- It appears this started with 924f202ee818c72b10855d3a1c06b34a9e7aa595
-
- Sounds like any rules list displaying a rule with the alias.
-
- Hi, could you clarify what screen this is on.. The Dashboard?
-
- Although I suspect we can use the above patch and even axe
$route .= " round-robin "; -
- Please try the attached patch.
-
- I fixed the wol build (by using the FreeBSD port instead of our pfPort which had no customizations, was just a straig...
-
- Applied in changeset commit:"9277b7efaa567ca2dcb584368c985ddd80d655f7".
-
-
- Applied in changeset commit:"780e7dc58845ab40ab7119f7b3f3dc268d63f326".
-
- The following message was taken from the pfsense log:
php: /xmlrpc.php: The command '/usr/local/bin/relayctl reloa... -
- The updated binary is in current snapshots, and the GUI parts should show up in the next snapshot, sometime this even...
-
- Applied in changeset commit:"93b2c459855b82920decea1a2db080b0ae09b267".
-
- Do you have an entry in the DNS Forwarder to forward the domain? If not try adding one.
07/13/2010
-
- Also forgot to mention, that if using the 3 interface setup (with WAN and OPT1 bridged, with LAN on a private subnet)...
-
- Forgot to mention, indeed the host LAN side host (or OPT1 side host depending which scenario I'm doing), always appea...
-
- I see what you mean about the Anti-Lock out rule, *however when I first discovered this issue, I was actually using a...
-
- Hello, I needed it remove the --stop-dns-rebind option from the dnsmasq section of /etc/inc/services.inc to enable th...
-
- Cool - thanks Jim.
-
- Applied in changeset commit:"5ad9311a5b51bc76e1a74b0da4840b3e653afe26".
-
- In the function discover_pkg_rules() in /etc/inc/filter.inc, if a package returns errors in the parsing of the filter...
-
- Applied in changeset commit:"51599b2094b5f599fb3476ebc916fd6e91b2ad2d".
-
- On the interface traffic is being redirected to, currently 1:1 NAT Reflection only generates NAT rules for the subnet...
-
- This probably shouldn't be too hard to implement. With port forwards it will probably need code for separating the g...
-
- Currently it isn't possible to restrict users to accessing only specific services, except when they have a separate r...
07/12/2010
-
- Privileges can be assigned to a group that a user is a member of or they can be assigned directly to the user. Howev...
-
- Usually pretty quickly, it may take a while to show up on all the mirrors though.
I pulled your patch into our pfPor... -
09:02 PM Feature #262: Add NAT-PMP support to miniupnpd
- I just (few minutes ago!) received an email from the FreeBSD port maintainer approving the @miniupnpd@ port update. A...
-
- Nevermind, I missed the link to the PR in the original ticket info. Looks like it does have a patch. We can use that ...
-
- Thanks for the patch!
Does your FreeBSD PR for the port include a patch to update the port, or did you just ask fo... -
- I've included a patch to allow NAT-PMP to be a "first class" citizen along with UPnP. This is important for us as wel...
-
- The SSH tunnel shell needs a rewrite of the message it displays. It also could be more descriptive and maybe allow p...
-
- In such a config you must disable the antilockout rule under System > Advanced if you want to block everything out LA...
-
- When going through the traffic_shaper_wizard_multi_all.xml wizard and trying to set the p2p catch all bandwidth to an...
-
- When using the traffic_shaper_wizard_multi_lan.xml wizard, queues are not created for the local lan interfaces.
Te... -
- Brief description: When setting the amount of bandwidth that can be used in the traffic shaper wizard, peer to peer ...
-
- Try latest snapshots. The error should not be present anymore.
-
- Meant to also say in that update that the ssh tunnel shell should really be in a separate ticket since it isn't direc...
-
- The assigning of ssh privileges should be OK now. If a user is a member of a group that contains the user-shell-acces...
-
- Please try a new snapshot.
A change was made on the utility to monitor if the file is being deleted/renamed actions t...
07/11/2010
07/10/2010
-
10:30 AM Bug #374: "Register DHCP leases in DNS forwarder" doesn't work
- Adam Stylinski wrote:
> After having left pfsense running for a while my dynamic hostname resolution seems to have v... -
12:39 AM Bug #117: dns forewarder + carp not working properly
- Scott Ullrich wrote:
> This should be resolved now. Thank you for the report.
It seems that it is not 100% resol...
Also available in: Atom