Activity
From 07/27/2010 to 08/25/2010
08/25/2010
-
06:08 PM Feature #850 (Feedback): Rename "Overload Tables" in the Diagnostics menu to "Tables"
-
- originally the script only showed the overload tables but it looks like its functionality has been expanded to all ta...
-
04:36 PM Feature #850: Rename "Overload Tables" in the Diagnostics menu to "Tables"
- agreed. It started out as something different than it ended up being if I recall.
-
04:09 PM Feature #850 (Resolved): Rename "Overload Tables" in the Diagnostics menu to "Tables"
- The menu item "Overload Tables" in the Diagnostics menu is confusingly named. It simply contains pf tables, which are...
-
06:00 PM Bug #849 (Feedback): diag_authentication.php Results Formatting
- Applied in changeset commit:"3f1789530e1223b31c76e3f4186592fc890c19e0".
-
01:16 PM Bug #849 (Resolved): diag_authentication.php Results Formatting
- Tab: Diagnostics > Authentication
The results return with bad formatting and typos.
Example:
User: <user> authenti... -
- Actually, I suppose it just needs the NAT on both sides of the VPN.
-
- I don't think that is something that you can currently resolve with PF on any type of site-to-site VPN connection.
-
- within the same subnet, that's good. The tricky part is what if it's a completely different subnet, such as the case ...
-
- Larry Titus wrote:
> Much to my surprise, it works!
States Table
Proto Source -> Router -> Destination State... -
- Much to my surprise, it works!
-
- Not on mine unless compatibility view is enabled (which breaks other things too, don't enable it).
-
- FYI, it's broken in IE8 too (tested on both XP and Win 7).
-
- I think I've noticed other areas where that doesn't really make sense, not a critical issue though. Need to add to th...
-
- When performing a firmware update from the web GUI and the "in progress" screen is displaying, a close button is pres...
-
- Tested and working.
-
09:40 AM Bug #847 (Resolved): Deleting interface leaves remnant in interface groups
- Beta4 snapshot from Tue Aug 24 01:26:38 EDT 2010, deleting an interface (OPT5 in my case) that was a member of interf...
-
08:48 AM Bug #835: Captive portal non redirecting correctly when logout popup is enabled
- I was on the daily snapshot when i tested this, i'm going to udate to today snapshot and check again
i'll post the... -
- This is primarily a reminder to figure out more about this and report it upstream. Another question arises here - sho...
08/24/2010
-
- http://people.freebsd.org/~yongari/axe/if_axe.c
http://people.freebsd.org/~yongari/axe/if_axereg.h
confirmed work... -
04:32 PM Bug #374: "Register DHCP leases in DNS forwarder" doesn't work
- Well I finally got around to updating to a new snapshot a couple of days ago and it seems to still be resolving even ...
-
- and http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/144642 too
-
01:28 PM Bug #838: DNS servers are not cleared from resolv.conf when link comes down
- I mean, I presume that this nameserver handling is done this way to keep the GUI responsive, so is there a way to get...
-
11:26 AM Bug #838: DNS servers are not cleared from resolv.conf when link comes down
- What do you mean efficent?
-
- Works now.
Is there any efficient way to make adding and removing nameservers faster?
-
- I fixed that issue. That is why i am requesting more info.
-
- I would not consider it critical because behaviour is the same.
that is expected on restart. -
- Okay, it starts at boot time and populates the /var/etc/hosts files with local host names properly. e.g. . . .
[2.... -
- Okay, works now with changes I just commited.
-
10:52 AM Bug #840 (Feedback): RRD scripts not collecting new data into the RRD
- This was caused by a change in the admin server settings for OpenVPN servers. This caused the data collector to fail....
-
10:36 AM pfSense Packages Bug #844 (Resolved): Open VM Tools Won't install
- The problem seems to be with open-vm-tools-nox11-253928.tbz
The installation returns:
$ cat /tmp/pkg_mgr_Open-VM-To... -
- Updated to "2.0-BETA4 (i386) built on Tue Aug 24 02:26:59 EDT 2010 FreeBSD 8.1-RELEASE" this morning, problems gone. ...
-
- I've committed a fix for the original issue reported. Earlier, I also fixed the issue of 'Allgraphs' always showing ...
-
- Oh the throughput graph on System tab, I read it as the graphs on the Traffic tab.
-
08:26 AM Feature #842 (Rejected): Flush DNS cache button
- Status > Services, just click the button to restart dnsmasq.
It's in the FAQ as such, too. -
05:24 AM Feature #842 (Rejected): Flush DNS cache button
- Sometimes it is useful to manually flush the dnsmasq DNS cache to help debugging DNS issues. This can be done with <p...
-
- It seems it actually can create a clone with a different bssid if you specify a value for wlanaddr when you create it...
-
-
- From ifconfig code:...
-
- I have an ALIX board running a single ADSL/PPPoE link for the WAN on vr2.
I also have DHCP set up on vr2 (via OP... -
- Thank you for the support on this.
If you confirm it works as expected we can close this. -
03:13 AM Feature #8: Clear states after failover
- Almost works, 2nd arg is set correctly with gw ip now, but local ip is missing now.
Line 163 filter.inc... -
- Applied in changeset commit:"d6d50244df14c43832cca5199b04e659557c20dd".
-
- Committed.
Thank you.
08/23/2010
-
- I'm referring to the System: Throughput graph specifically and no other, and I'm fairly sure this was posted only abo...
-
- Definitely hasn't been that way for a year and a half. All of our production 2.0 installs only stopped working when a...
-
- This is actually a legitimate issue. I've traced the code and found why it does this. As far as I can tell, it has ...
-
- none of the graphs currently contain any info, that's a new issue that has another ticket open on it.
-
- What more info can I provide? I'm now running "2.0-BETA4 (i386) built on Mon Aug 23 05:05:44 EDT 2010" and it's still...
-
- This sounds like something Jim fixed recently if I recall, if the logout pop up was enabled it wouldn't use the redir...
-
- Please post more info to investigate this.
-
09:20 PM Bug #829: WAN stays assigned to pppoe0 interface after switching type from PPPoE to Static
- Hi Ermal, I tried testing it, but could not get it to work.
My WAN is configured as PPPoE to begin with:
- I g... -
- The code responsible for this is in the function eth_get in usr.sbin/wpa/l2_packet.c of the FreeBSD source code. It ...
-
- When using hostapd, on hostapd startup it reads the wrong type of MAC, causing authentication of clients to fail if u...
-
- Everything specified here should be fixed now.
-
-
- I try to be more clear.
in PFsense captive portal configuration page there is a flag that says "enable logout popu... -
- Can you please give proper information about this!
Otherwise this will be closed. -
- Corrected. Thx.
-
- Mmm. Yes, I see I missed that detail. :)
It doesn't look like it's going to work.
Patch: (rc.rc.resolv_conf_g... -
- There is not yet a new snapshot that includes the rebuilt check_reload_status that can handle this. It's building now...
-
- The file gets generated (/tmp/resolv_conf_generate) but /usr/local/sbin/check_reload_status doesn't know how to handl...
-
-
- I've updated my testing box with these changes, and I still don't see dhcpleases starting. There's no error now, so t...
-
- Applied in changeset commit:"24d619f5b696914e6b793bbf3c84b25131066b7b".
-
- Try latest snapshot or commits related to this.
they should get the proper ips to pass to pfctl though i plan to imp... -
- Im happy to report we are close to solving this issue!
Manually executing:
pfctl -b 192.168.102.2 -b 192.168.102.... -
- No new data is being collected into the round-robin database.
08/22/2010
-
- http://www.freebsd.org/cgi/query-pr.cgi?pr=149185
-
- #1 is a common problem in the GUI, almost 15-20 pages have the issue and two of those files are pkg_edit.php and wiza...
-
- I tried and tried to figure out what was causing #1 but never could find it. :(
I'll work on #2.
-
- When bringing down PPP,PPPoE,PPTP,L2TP we don't clear the DNS server IPs associated with those links from the /var/et...
-
- We have a problem with the order of operations in the rc.bootup script
with respect to getting the dhcpleases progra...
08/21/2010
-
- Try this change to see if it clears up the static arp error:
https://rcs.pfsense.org/projects/pfsense/repos/mainline... -
- Tried it myself with -HUP and the DHCP daemon just died, so that won't work. The clear_log_file() function already ki...
-
08:51 AM Bug #831: Status -> System logs - > DHCP bug
- i get this is system log, no idea if its normal or no
Aug 21 16:50:48 php: /diag_logs_dhcp.php: The command '/sbi... -
- Then do a little more testing and research to find out. Since you can easily replicate the issue, you can see the log...
-
- isnt this wrong to start dhcp daemon again in order to clear log, then u might as well just name the button restart d...
-
- When a user clicks on the logout button,the user is not actually disconnected and can still surf the web
-
- If the captive portal option for the logout popup is enabled when the users logs in he's not redirected to the typed ...
-
12:20 PM Bug #834 (Resolved): DHCP server options for TFTP server doesn't allow arbitrary strings
- To configure Polycom SIP phones to find their configurations, you need to be able to specify a value for option 66 or...
-
- im on the 21st snap and still after clicking disconnect, the page just keeps showing loading whereas the pppoe is alr...
08/20/2010
-
- opening to track issue we discussed earlier. Where WAN is an Ethernet interface, and OPT1/WAN2 is PPP, when WAN has n...
-
-
- Applied in changeset commit:"bd961c65906fe2f2c6aec4324dc3268d31aab1b7".
-
- tried that and after restarting dhcp daemon, logging resumes as normal.
-
- haven't tried that but ill do that and report back
-
- If you restart the DHCP daemon from Status > Services, does the logging resume? What about pressing "Save" on the Sys...
-
- basically what im trying to say is when pfsense is booted fresh and then u go to dhcp log and u can see entries in it...
-
- $ ls /var/log
apinger.log
dhcpd.log
dmesg.boot
filter.log
ipsec.log
l2tp.log
lastlog
lighttpd.error.log
ligh... -
- I cannot see anything wrong in code regarding specifics to dhcp!
Can you please show the output of ls /var/log
and a... -
- usually under system log, all the different tabs show the log, now under each is a clear log button on clicking which...
-
- It works in IE 8, and all versions of Firefox, Chome, Safari and Opera. (read: IE7 is broken)
Not sure we'll fix t... -
08:43 AM Bug #832 (Closed): Diagnostics: Show Bogons was broken layout!
- Pfsense version:
2.0-BETA4 (i386)
built on Thu Aug 19 21:03:03 EDT 2010 (FreeBSD 8.1-RELEASE )
Option "Show Bogon... -
- I implemented the fix for this.
Though i think it is better to put even the reloading of carps through rpcxml in the... -
- The GUI should respond now properly with the latest snapshot.
-
- now atleast with dial on demand ticked, the pppoe is disconnected and reconnected and receives new ip from isp but th...
-
- I investigated this and for now i just put a warning message there to tell you that you have to reassign the interfac...
-
- Previously configured Service Provider information is not displayed when an interface configuration is edited after s...
08/19/2010
-
- file 1 - PPPoE config
file 2 - WAN changed from PPPoE to static
file 3 - static config after I manually changed WAN... -
- I just reproduced it on VM running 'Aug 18 21:58:53 EDT 2010 ' snappy.
3 files attached:
-
- PPPoE was configured on the Interface->wan page by selecting type = pppoe. I will try to reproduce it on a VM box and...
-
- Can you please provide more details on this.
If possible the config.xml file before and after the issues shows.
T... -
- Ok got a deal at it with your help.
We have to kill states of the form 'icmp 74.125.95.93:63260 <- 10.10.10.144 0:0'... -
- Tried the extra state kills on the CLI since snapshot hasn't been updated yet:
Still doesnt do enough, for the p... -
- Try latest snapshots more state killing added.
-
- This is now implemented in latest snapshots.
-
- Check out with latest snapshot.
We now check the routing table too. -
- Latest snapshot should be ok, i found where the loop was occuring.
08/18/2010
-
- To reproduce:
- configure WAN as PPPoE
- switch WAN from PPPoE to Static
- go to 'Interface Assignments' page a... -
- Applied in changeset commit:"6debb14077a5963aeab60fa9f8fcc87bdc806740".
-
- Try latest snapshot should be ok.
-
- We currently only have a way to generate a new user certificate, it would also be helpful to import existing user cer...
-
- Eventually (post 2.0) it would be nice to have a way to generate a CSR for a user cert, so user certs can be supporte...
-
- Applied in changeset commit:"9401767007a1bf03f02129fbe2c0d9d4d3621524".
-
01:06 PM Bug #729: if_bridge unpredictable filter interface selection
- Yes, my bad. PHONE is bridged to WAN not LAN
-
- A note on the last comment there:
From that config it looks like "Phones" is bridged to WAN, not LAN, which is more ... -
08/17/2010
-
- Using pfSense-Full-Update-2.0-BETA4-20100808-1004.tgz I have a WAN and LAN and also a PHONE which is bridged to LAN. ...
-
- not an issue now that we've backed down to 0.7.3
-
- Applied in changeset commit:"f6f5fde13718e29670783173e99b2f3707614151".
-
- Applied in changeset commit:"51d5aad75a0a88034b49db3d867e8a1e49fe2f12".
-
- Partially simpler patch committed to the port.
Try snapshots newer than this post. -
- This command seems to be giving no output at all, whether I run it before or after the pfctl -b.
-
- Actually no, pfctl is killing the right states. That is all it has to kill.
Can you please show me the src nodes sta...
08/16/2010
-
- The binding seems to be correct, but the status connection wasn't being parsed properly.
The status command to th... -
- When using TCP with OpenVPN, even where specifying 'local' to bind to a specific IP, the server binds itself to 127.0...
-
- it does have 'local' correctly where WAN is selected
-
- When "WAN" is specified as the interface in an OpenVPN configuration, it does not include the listen on the WAN IP, i...
-
- Can you please show your ppp log on this?
Or the mpd log on system log?
You can otherwise use the init script box on... -
- Applied in changeset commit:"ef26b049dbedc8ad9f88496ed9580882e3814c14".
-
- Should have been "pfctl -k ip1 -k ip2" in my last comment.
-
- Updated to 2.0-BETA4 (i386) built on Sun Aug 15 18:27:24 EDT 2010
Gateway applet working again and the rules.debug ...
08/15/2010
-
-
- Oh, thanks. It was in the wrong project (don't open tickets in tools) so a ticket I never saw. added info there and c...
-
02:38 PM Bug #824: dnswatch not working
- Chris - is this not related to the issue I logged (#755). It appears as though the same symptoms are exhibited (segfa...
-
- dnswatch crashes immediately upon running.
kernel: pid 45001 (dnswatch), uid 0: exited on signal 11 (core dumped... -
- dnswatch crashes immediately upon running....
-
04:48 AM Bug #781: Entering sim code problem on a Huawei E1752
- No, My guess is that SIM Pin doesn't run at the right time in the script.
-
- there is some correction
all above scenario work fine if dial on demand is disabled and dont work if its enabled. -
- im on the latest snap and still issues with this, further testing results below:
1) on reboot pppoe conencts fine....
08/14/2010
-
- Adding an interface at Interface>assign and saving changes drops all the interfaces on the system for 6-8 seconds. So...
-
- no change
-
- is the SIM PIN in the GUI not adequate for this?
-
- fixed
-
-
-
- This is because the management interface relies on the same port as the server is listening on, which changing would ...
-
-
- after unchecking the "enable" box, the save button isn't available, so interfaces can't be disabled.
-
- any1 else having this issue?
08/12/2010
-
- Duplicated by #789 but since that has a more accurate title and commits (and is already set to Feedback), this one ca...
-
02:27 PM Bug #758: sshlockout_pf doesn't work on 64 bit
- The attached patch fixes sshlockout_pf on amd64 (and includes an extra check for invalid logins on a normal FreeBSD i...
-
- Should be fixed by:
https://rcs.pfsense.org/projects/pfsense/repos/mainline/commits/9fad9848c9353b9a21402634a537ae... -
- i got so frustrated with this issue that i did a clean install on another CF card and reconfigured it from scratch an...
-
- after clicking disconnect, below r the details of system log and ppp log
system log shows
----------------
Aug 1...
08/11/2010
-
- Applied in changeset commit:"ac8c5e564341279a3a82700ab6dc3ebd61ae52da".
-
- No, #152 was a xmlreader-specific issue. I should note this does the same thing with both parsers, so I don't think i...
-
09:59 AM Bug #819: Blank <vip/> tags appear in config.xml
- Hum.. Related to http://redmine.pfsense.org/issues/152 ?
-
- After adding a CARP VIP (at least, possibly others), you end up with a <vip/> or <vip></vip> tag above the configured...
-
-
12:47 PM Bug #817: Policy filtering mark not saved
- Works with the the latest snapshot (2.0-BETA4 built on Wed Aug 11 06:12:55 EDT 201).
-
- Applied in changeset commit:"8ebbae22e08147c24da6c7cad6fcb9315eb1291f".
-
- When you have a forced redirect URL specified, the $PORTAL_REDIRURL$ macro still shows the URL the person attempted t...
-
- config attached, kindly delete once u get a look at it.
how to get the logs once webgui freezes, i mean using ssh ... -
- Can i have your config and the system logs after the webgui freezes?
-
- still not solved, as a matter of fact its gone more worse. Now either if u got to the wan interface page and click sa...
-
11:51 AM Feature #818: TrafficShaping for variable bandwidth
- Perfect! Thanks. I didn't had a chance yet to look at a 2.0 snapshot. Good to know.
By the way:
I like the pfSens... -
- Where your bandwidth is scheduled like that, in 2.0 you can use schedule rules to apply different QoS parameters depe...
-
- At my clients places i am using pfSense 1.2.2 and 1.2.3 with multi-WAN/multi-LAN and its working fine so far.
The ... -
- There are various scenarios where it would be useful to expose an interface on outbound NAT rules to use subnets or a...
-
- There is not yet a new enough build to have these latest changes. The next one may possibly have all the changes, bu...
-
- I have tested with latest snapshot built on Tue Aug 10 22:06:38 EDT 2010 which includes the change.
It seems failove...
08/10/2010
-
- Applied in changeset commit:"050f48306fa7a3c9ba44538b67d9cecf4a8390b7".
-
- Applied in changeset commit:"8d9cbe6ff3ba430a3354d3df100ed54bf1031507".
-
-
- Should be fixed as part of another commit.
Actually when disconnecting PPPoE1 and trying to connect it, the code w... -
- Applied in changeset commit:"fd9ba7c09f01aaa1ae50bc15e918c05b024f4f36".
-
- Test latest snapshots.
-
- I have a simple setup with WAN and LAN interfaces. I'm trying to add a firewall rule under the LAN interface that ma...
-
- I added a solution to run the command after the rules referencing this interfaces are removed from the working config...
-
- Ok, had some time spare and tested it with today's snapshot (built on Sun Aug 8 10:20:52 EDT 2010) and behaviour is s...
-
- In my last post I ment comment 26, it seems redmine linked issue 26 for the text "poundsign26".
-
- I have done some testing regarding this issue around 24th of June.
Calling pfctl -b manually did not do enough at ... -
01:54 PM Bug #816 (Closed): USB Keyboard Detection - Boot Hangs
- I'm having issues with booting a system with a USB keyboard. The keyboard works perfectly fine, but when pfSense atte...
-
- Applied in changeset commit:"6c74ac2363176cf4492b2331130998fc4c140048".
-
08:08 AM Bug #815 (Resolved): IPSEC VPN creation fails if LAN I/F has no IP address.
- vpn.inc makes the assumption that the LAN interface will have an IP address. In the case where it does not (for examp...
08/09/2010
-
- Yeah but this goes all back to wlan interfaces, ppp, possibly others.
And that means defining rules in code for this... -
- There's an easier option there, simply detect VLANs with a missing parent interface upon config restore and prompt fo...
-
- Two options:
* Either make the code OO similar to the shaper one. Which would only keep the real/parent interface sa... -
- Details: http://forum.pfsense.org/index.php/topic,27348.0.html
-
06:06 PM Bug #798: IPSEC not working after CARP failover
- do you have a specific bug ID I can track? I can't seem to locate it.
-
05:01 PM Bug #729: if_bridge unpredictable filter interface selection
- I'll test this latest snapshot ASAP.
Very keen to see the results -
-
- Patch integrated in the builds. Please test the latest one.
-
- Looks like it takes the ID of the first user and uses that for XMLRPC sync, and since the admin user can't be renamed...
-
- Yeah that's a problem we can't easily accommodate right now, the solution for the time being is to just do a routing ...
-
- The problem is that in pfSense currently there is no even generated on changed routes.
So if the underlying route ch... -
-
- It would be better shiping with aliases containing such entries!
-
- If you only have one physical interface, plus a 3G modem for WAN, the current console assignment is far from ideal. Y...
-
- Ahh! I knew I was missing some variable. Glad you were able to narrow it down, you're welcome. But even with the UI n...
08/08/2010
-
- this reportedly isn't fixed. http://forum.pfsense.org/index.php/topic,27257.0.html
-
- Thanks David, the issue is with mobile IPsec only.
-
- Emailed you directly Chris.
-
03:21 PM Bug #812 (Resolved): RRD graph time axis not locked to latest times with higher average samples
- See attached chart - this was taken on Sunday 20:12, but the chart shows the x-axis to Monday 0.00...
This is the ... -
- Though I suppose technically since it only really works with ath at the moment, the similar issue with the VAP config...
-
- fixed
-
- Ermal has a patch to if_bridge that seems to make filtering with if_bridge behave as it logically should (not as it i...
08/07/2010
-
- we were missing TCP 1119 for battle.net, aside from that the other traffic would have been classified accordingly, ot...
-
07:39 PM Bug #800 (Resolved): Preset for QOS Wrong
- The preset for prioritizing game traffic for World of Warcraft does not actually pick up any traffic for World of War...
-
- if someone wants to knock this out for 2.0, great, but as a non-critical feature, moving to future.
-
- fixed
-
- Ability to NAT multiple GRE connections to a single remote host on a single public IP. Need some kind of work around ...
-
- Only one IP is allowed for DHCP relay. dhcrelay can use multiple servers by specifying them with spaces between the I...
-
- Ermal reverted the part of that commit that caused it.
-
- as far as I can tell this is fixed, it's not doing as Erik described, and works correctly.
-
- This is probably also applicable for systems with a VAP wireless configuration.
-
- When you have a configuration with VLANs and restore it to hardware with different NICs than the original hardware, t...
-
- The username for the config sync user must be 'admin'.
-
- (from cvstrac)
The PHP shell's "help" output refers to using $config - but $config apparently isn't declared as glob... -
-
- (from cvstrac)
Cannot set the keymap to anything other than the default. This is mainly because /etc/rc.d/syscons ... -
- Automatically adding an option to the drop downs on firewall rules, NAT, etc. screens for RFC 1918 networks would be ...
-
-
- a somewhat nicer overview for incoming PPTP connections... and their status.
Eg like :
user ip con... -
- ability to enable and disable static routes
-
- If anyone wants to test it, go ahead and try adding rules on the IPsec interface - it is one of the available choices...
-
- Ermal, how is this supposed to work? nat on enc0?
-
- Rules negating policy routing for remote VPN subnets are automatically added. In some circumstances this is undesirab...
-
- Aliases not currently usable in outbound NAT rules.
-
- looks like recent package fixes fixed this, I can't replicate it with the steps listed.
-
- everything here seems to be reasonable with all the latest changes
-
- fixed
-
- closed pending info on how to replicate, not seeing that on 6 different installs, with numerous browsers on 4 differe...
-
- Not seeing that on Chrome nor IE nor Firefox. The js doesn't (and can't AFAIK) disable those until the page is fully ...
-
- fixed
-
- fixed, and sticky with multi-WAN has no apparent problems, I've been load balancing all my HTTP with sticky for weeks...
-
- This does break off-host syslogging, moving to Future.
-
-
- this was either fixed a while back or needs more info, not seeing this anywhere on current versions
-
-
-
- This occurs because the wireless status page uses the list scan command on ifconfig, which only gives some cached dat...
-
- fixed, thanks
-
02:48 PM Bug #799 (Resolved): Misspelling of encryption in vpn_l2tp.php
- http://redmine.pfsense.org/projects/pfsense/repository/revisions/master/entry/usr/local/www/vpn_l2tp.php#L353
Shou... -
- same here
-
04:52 AM Bug #467: Unable to use active FTP via second gateway
- I am pleased to report I have upgraded my pfsense box to the latest snapshot "2.0-BETA4 built on Fri Aug 6 18:22:00 E...
-
- still the same with the 7th august snap, if some1 could fix this minor issue, just caused by some php warning
-
- Sadly it still appears to be crashing.
-
-
- I've made it enforce the setting when saving, too, just like it does for the source and destination. Should the same...
-
- It does appear so in the code for the port forward edit page.
There may be a bit more to this than simply disablin... -
- Yes, it does.
-
- When you change the interface on the port forward, does it change the interface on the associated firewall rule?
-
- fixed
-
- this is fixed (though there is a related issue in another ticket, IP Alias VIPs don't get removed from the previously...
-
- this seems to be fine now
-
- same.
-
-
-
- fixed
-
- Updated to latest snapshot from this afternoon, and can confirm that renaming the interface that I was having issues ...
-
- fixed
-
- fixed
-
- fixed
-
-
-
-
-
-
-
- fixed
-
- This is closer. Still one problem, when you switch interfaces like this, it does not delete the alias IPs from the pr...
-
-
- this doesn't take dynamic routing into account, it probably should just use a routing table lookup to determine the i...
-
- fixed
-
-
- Check http://forum.pfsense.org/index.php/topic,27197.msg142135.html#msg142135 for some details on this question which...
08/06/2010
-
-
- looks good
-
- looks good
-
- fixed
-
- fixed
-
-
- fixed
-
-
-
- Applied in changeset commit:"1beafceb73be3362da8d9d1c3f6e89c4dfc80607".
-
- fixed
-
- falls into the category of DPD not functioning in ipsec-tools, which is being tracked on 2.0.
-
- I have tested multiple pfsense clusters running on Vmware ESXi. When a CARP failover initiates, the backup unit take...
-
- I made it return just an empty array. That should suffice to solve this.
-
- Forgot to mention, I tested this on current versions of Chrome and IE8. Since it works after reselecting from the dro...
-
- When editing an existing Phase 2 IPsec entry where the "Local Network: Type" field is set to "LAN subnet" already, wh...
-
- there will likely be one with a date of late 20100806 (after 16:00 to be safe), otherwise on the 7th.
-
- Hmm, good point :-) Sorry, just jumped on it based on the post at http://forum.pfsense.org/index.php/topic,27197.msg1...
-
- There are no snapshots with that fix yet, especially not one from the day before the fix was committed.
-
- I just updated to the latest (Aug. 5th) snapshot from Aug 1st (where I first reported the problem) and the problem st...
-
-
- Please add a check box to add a 95th percentile line to the RRD graphs. This is a useful bit of information for those...
-
- Could maybe be a checkbox instead, as plenty of people run embedded on hardware that supports ACPI just fine.
-
- it would be a good idea to disable ACPI on embedded environments as alix etc dont support it and the warning is alway...
-
- ok then the rest works fine except the pppoe after 30th august which is preventing me from upgrading to the latest.
-
- If you check "deny unknown clients" it would prevent that. It's likely a byproduct of DHCP being broadcast, and not d...
-
- i applied the patch and tried it and it works fine now but the core issue still remains, that is, client macs not lis...
-
- And please remember that the problem goes away after you wait for a few minutes. This only happens when the arp table...
-
- Hi Chris,
I appreciate what you are saying, but the point of concern here is that the host shouldn't be able to se... -
- There's also a FreeBSD bug report relating to this that's been open since Feb 2008: http://www.freebsd.org/cgi/query-...
08/05/2010
-
- After saving on system_advanced_firewall.php, any selected TFTP interfaces are not shown as selected. After loading t...
-
- This scenario is described in the if_bridge man page: ...
-
-
- The attached patch fixes the crash.
-
- I found another potential issue that could clobber the static ARP entries. Wait for the snapshot after next (it's in ...
-
- So for some reason your MAC/IP pairs are not being added to the ARP table when you enable static ARP.
-Although you s... -
- arp -a before enabling static arp
? (192.168.0.11) at 00:1b:11:0b:ef:9b on vr0 expires in 1134 seconds [ethernet]
... -
- What would help more is:
* The output of "arp -a" before you enable
* The output of "arp -a" after you enable
* ... -
- i tried the 5th august nanobsd and this doesnt work, as soon as i enable, every1 gets locked out but the lan clients ...
-
- opt1 in access point mode and also bridged to lan and after boot everything shows fine under status wireless but supp...
-
- thanks for the effort, ill test it out once i get the pppoe reconnect issue sorted out due to which im stuck on the 3...
-
- implemented
-
06:41 AM pfSense Packages Bug #436: [PATCH] rewrite of tinydns_add_active_leases
- Tested with package version 1.0.6.11 and pfSense-2.0-BETA4-20100804-1929.iso. Looks okay to me so far.
A little hi... -
- all snaps from 31st july to 5th august keep giving this in browser in a endless loop when disconnect button is presse...
-
- all snaps from 31st july to 5th august keep giving this in browser in a endless loop when disconnect button is presse...
08/04/2010
-
- As reported here.
http://forum.pfsense.org/index.php/topic,27197.0.html -
- True, running pfctl -b manually does work, but it's not run properly at failover.
-
- I still have this issue on a August 4 build...
-
- It appeared previously that firewall states would all be gone but states such as: ...
-
- Can you please be more clear what you mean by nat states?
-
- This listed configuration option has been tested and confirmed to work. Test board was running 2.0 BETA3 on a Geode L...
-
02:44 PM Bug #495: USB drive fails to mount during boot
- http://forums.freebsd.org/showpost.php?s=d7af7671c4a56cb50af4c13e2fb7877f&p=91961&postcount=8
It looks like a conf... -
- Don't need the patch, just the loader.conf addition:
kern.cam.boot_delay=10000
-
- Applied in changeset commit:"3b3170d094510f8cdde36a9f24b9ca10b4ea24f4".
-
04:03 PM Bug #757: PPPoE Disconnect button with multiple PPPoE interfaces
- Hi there - I can certainly do this, which log do you want/need? (which file catches the interface/gateway issue?)
... -
- Applied in changeset commit:"4cea5cf8ab9b06ccd414a783c1b7cb40e5961bf4".
-
- I could reproduce this on a vm with 2.0 i have though i will update it again and post here.
-
- to further narrow this down, i upgraded to the 30th july snap (pfSense-2.0-BETA4-1g-20100730-1433-nanobsd-upgrade.img...
08/03/2010
-
- Ermal: at your request from earlier, I can't duplicate this on 1.2.3.
Though I can't duplicate it on 2.0 either, ... -
02:24 PM Bug #786: UDP traffic blocked by a floating rule
- Sorry, pisted the same file twice. Here is rules.debug_ko with the rule enabled
-
- rules.debug_ok with the rule disabled and dns lookup working
rules.debug_ok withe the rule enabled and the dns looku... -
- can you please post the contents of the file /tmp/rules.debug before and after the problem shows itself.
-
-
- Applied in changeset commit:"7ed9c6acdf2435ea95d83b09fb87b6ef8b279b37".
-
-
- Applied in changeset commit:"6441fa9a5f8fa303469822aa3e79b863de1ab9c5".
-
-
- Line 2260 needs a "=" after firewall_shaper.php?interface.
http://redmine.pfsense.org/projects/pfsense/repository/... -
- Yes, it works on reboot, and even on NanoBSD.
-
- did u try rebooting with the static arp enabled and ur client machines ip and mac already in list and that too on the...
-
- Then wait for the next update and try again to disable/enable the service. It works fine for me now in my VM setup. I...
-
- all my entries have been with ip and mac and for me if i then enable static arp, every1 is locked out so for me its b...
-
- It works fine, as intended, though I was incorrect on one point: You must specify IP addresses for clients listed in ...
-
- Yes, but it was always enabled in the GUI - only now it's enabled in the GUI and at boot time. Previously, it was onl...
-
- its not the gui but its the patch itself, if static arp is enabled,e very1 is locked out, no1 can communicate with th...
-
- There shouldn't be any difference when saving from the GUI, but I'll look into it.
The firewall's MAC doesn't need... -
- after the patch, things have gone much worse, as soon as i go to dhcps erver and tick static arp and click save, ever...
-
- Is this intended for clients or for the firewall itself?
Clients using the DNS forwarder wouldn't hit any of these... -
01:39 AM Feature #790 (New): Advanced options for dnsclient (resolv.conf)
- Possibility to add additional options in resolv.conf:
* timeout:n (default 5)
* attempts:n (default 2)
* maybe oth... -
- i tried to trace the changes between 22nd july to 31st july but wasnt able to find whats causing this pppoe reconenct...
-
02:15 AM Bug #682: WAN traffic graph is broken with MLPPP
- I recently upgraded from 2-line mlppp to 4-line mlppp and the WAN:outgoing graph is still reading double. I partly ex...
-
- yes that's all possible. You can do that manually as well, with floating rules. It's definitely something we should c...
-
- > It uses the gateway specified on the selected interface, it's a way to associate DNS servers with a particular ISP....
08/02/2010
-
- When setting up a new IPSEC connection in the GUI, if 'Local Network' is set to 'LAN subnet', and if the LAN interfac...
-
- We don't write drivers, we use what's available in FreeBSD (or occasionally ones not included but that are available ...
-
05:50 PM Feature #788 (Rejected): Support for Vodafone(huawei) K3765 3G modem
- Curently it is not possible to use the modem. Modem has much better performance than Huawei E220 and it's popular mos...
-
- to be consistent with how users expect it to work, and how it works in similar projects, it needs to just automatical...
-
- Probably this should be closed and a feature request should be opened for a wizard.
-
- Just tested this again, and it is still a problem. On the secondary box, the VHID changes under the CARP settings scr...
-
- This should be fixed as part of another commit.
-
- PMTUD doesn't work with IPsec, creating a black hole that causes connectivity problems at times. Best work around is ...
-
- Applied in changeset commit:"0ce726624dc1fbc4998ca85d79b27d810d88d5fb".
-
- I will put this as a Feature rather than bug because of how ALTQ behaves on interfaces that do not have afixed bandwi...
-
- Applied in changeset commit:"62c4d0fb3ecaa43d51345c46240edf2f0a95552e".
-
- The settings sync to the slave but the service isn't restarted, so any change in hostnames or even the register DHCP ...
-
- I have a problem that as far as I can see is a bug.
When I add a "pass" floating rule for UPD traffic on port 53 the... -
- Applied in changeset commit:"09f11c7196f0627bd54b174cfd7cf701797ad256".
-
- Confirmed that static arp is off at boot time. If you check static arp, then save, the interface shows static arp is ...
-
- With static arp they should always show online, never offline, because they will always be in the ARP table. So if th...
-
- the reason y im saying point 2 is also cosmetic bug or so is because static arp enabled or no, once rebooted, arp tab...
-
- So point 1 is the real bug, and point 2 is irrelevant, those won't update with static ARP enabled, since the ARP entr...
-
- the reason y i see clients get ip lease is mayb because Deny unknown clients is unticked
-
- so the 2 i see in this is as follows:
- even with static arp enabled and client mac not listed, new clients with n... -
- With static ARP enabled, if the MAC is not listed, they shouldn't be able to even get an IP from DHCP. And they will ...
-
- yes i want only static entries to talk to the firewall although the clients still get a DHCP lease from the DHCP serv...
-
- If static ARP is enabled, then only the hosts with static entries can talk to the router. Are you sure you need stati...
-
- static ARP is enabled for me and still i left it for 24 hours and all the communicating hosts never show as online or...
-
- I see that if static ARP is disabled, every time DHCP settings are saved it clears out the ARP table, which may expla...
-
- It uses the gateway specified on the selected interface, it's a way to associate DNS servers with a particular ISP. I...
-
- In options DNS servers (System: General Setup) there is an option 'Use gateway'.
But in the dropping list there are ... -
- This has happened a few times before, it has to do with the file size and a option in lighty that has changed. I beli...
-
- Some files just sit there saying "Saving file" for a while. It is hit and miss, some work and some don't.
All of t... -
-
- Ermal Luçi wrote:
> more information would be better.
Ok, I can try to describe it again.
vr1: adsl
vr2: cabl... -
- more information would be better.
-
- The error happens very seldom, I it saw 2 times. The last week did not observe.
-
-
- on further investigation, the wan interface page, period reset and dial on demand all r affected
-
- fixed in latest version
-
- fixed in latest version
-
- fixed in latest package
-
- fixed
-
- fixed in the latest package
08/01/2010
-
-
- This has been applied and committed, thanks! Can you please confirm with package version 1.0.6.8 that this is functi...
-
- similar committed, thanks
-
07:32 PM pfSense Packages Bug #770: imspector don't install on 2.0-BETA3-20100727
- I can confirm the same behavior. Just Installed the August 1st snapshot, imspector partially installed. I can't remov...
-
- lack of documentation is not a bug. It does need to be created, but it's too complex to note in the web interface, an...
-
06:58 PM Bug #784 (Rejected): Documentation: Firewall: Rules: Floating rules, Interface Groups, Interfaces: in which order are these groups processed?
- Reading "The Definitive Guide ...", online documentation and this bug tracker, none of them give me a clue,
in whic... -
- fixed
-
- Running: 2.0-BETA4-512mb-20100731-1322-nanobsd
Instead of displaying the user assigned label 'WAN1', firewall_nat.... -
- the problem is if u make changes under dhcp server and apply them then both the dhcp lease as well as arp table stop ...
-
- ok
-
- Had some problem using my 3g modem and it turns out to be a pin code problem. After setting pin off I can now use it ...
-
- upgraded from 22nd july nanobsd to 31st july nanobsd and disconnect button is broken again, might not be disconnect b...
07/31/2010
-
- works for me.
-
- duplicate of #589
-
-
-
-
-
-
- The issue is you're doing something you shouldn't be allowed to do, changing the interface on an associated rule. Ope...
-
- Creation of NAT (port forwarding) rules with Interface groups is filed under #701 as feature request.
Though with ... -
- Associated firewall rules should not be able to have their interface changed on firewall_rules_edit, as that's the re...
-
- Current 20100731-1322 implementation is incorrect:
- having 'WAN1', 'WAN2' and 'WAN' as grouping of WAN1+WAN2
- <fi... -
- BTW: 17 out of 18 (94%) out of our port forwarding rules are for all WAN links, and could benefit from being addressa...
-
- For users previously using Peplink Balance routers, all WAN can be selected in the screen where rules are edited. Ins...
-
- Ermal Luçi wrote:
> Can you please try latest snapshots and report back if the same situation persists?
>
> There... -
- not true actually, false report. Note when upgrading early 2.0 to latest 2.0, this is the case, and is necessary due ...
-
- Config upgrade from 1.2.x to 2.0 disables client specific override settings.
-
- When editing files via the Edit File screen, after saving them they're completely empty. inferfaces.inc at a minimum,...
-
07/30/2010
-
07:13 PM Bug #774: $priv array defined in priv.defs.inc doesnt store all match values
- Solved, changes are in rcs.pfsense.org/projects/pfsense/repos/oilop9000-improvements repository
regards -
- In fact this is not the only error, beacause in lines 765 and 771, the entire key is set to an empty array all over a...
-
- There is an error in lines 774 and 780 in file priv.defs.inc , thats because the key is redefined again as an empty a...
-
- false alarm actually, different problem
-
- This has regressed recently. Changing default from one statically configured gateway to another does not update the d...
-
-
- Commit commit:5c49cf58c79f6d3c22182e1a4139be82df1bfa80 introduced a bug that bridges are destroyed when assigned and ...
-
-
- A workaround for this is to save and apply on the configuration page for each of the reassigned interfaces. The IP a...
-
- If you have an interface that has an IP alias VIP on it and reassign the interface, for a moment the newly assigned i...
-
04:31 PM pfSense Packages Bug #310: Nut needs changes for latest version
- Correct port detection still not implemented. Patch from first post still needed.
The new ACL works perfectly now. -
- Need to wait for a snapshot to confirm fixed, I tried a manual upgrade by hacking the code before completing boot. Wh...
-
- Seth committed code himself for this so i am putting to feedback.
-
- This commit from 480 causes the issue.
http://redmine.pfsense.org/projects/pfsense/repository/revisions/bf02c78434cb... -
- The gateway upgrade code is broken. I had a working snapshot from june 17th, I've confirmed that july 28th does not w...
-
- I know this is not the best (or correct) method to give feedback or code but maybe you can find this useful
I wrot... -
-
- It should work on latest snapshot.
-
- Here is not enough information to do a proper analysis on what is happening.
-
- I think it would be nice to see more options added to Diagnostics -> DNS Lookup so that you can specify the type of q...
-
- Thanks very much!
07/29/2010
-
- fixed
-
- Applied in changeset commit:"ca7b7f7eb0b63c33a3a43335f68a11271a857c78".
-
- Whichever table is selected shows up twice in the Overload Tables dropdown.
-
- I haven't been able to reproduce this. It always changes for me and I've confirmed it with ifconfig that the apbridg...
-
05:13 PM pfSense Packages Bug #770 (Resolved): imspector don't install on 2.0-BETA3-20100727
- The package imspector don't install. But, after error they apear on Installed Packages. Can't remove, resinstall xml ...
-
- i think it is easier to handle openvpn as all other cloned interfaces, build the list of assignment manually rather ...
-
- There's another somewhat related ticket open - the conversion process will break OpenVPN completely where interfaces ...
-
- If you restore a 1.2.3 config to 2.0, and that config has assigned OpenVPN interfaces, and the restore triggers the i...
-
- I personally prefer "last day", "last week", etc, but I can see why some might like it to be "current day", "current ...
-
- That was an intentional change by Seth actually. I'm not sure if that's the best behavior. I had the exact same thoug...
-
- I was mistaken, Graphs are refreshed.
But they are displayed with not a correct time slice. The right boundary of th... -
- It seems ok to me.
-
- from HypeTelecon on forum:
A while back I paid someone at rent-a-coder to update pfflowd so that it supported NetFl... -
- It should not happen on latest snapshots.
-
- Setting back to Feedback. Jonathan will hopefully be posting some captures explaining what his current issue is sim...
-
- Ok i thought about making that change to the way the file is written but figured that wasn't the most ideal way of ha...
-
- Its not a patch against dnswatch but against the php script that writes the configuration file.
-
-
- You should be able on latest snapshot see openvpn client connections in the system gateway and should be able to put ...
-
- Well the problem with changing the type of alias is that you do not have anymore the information on the previous type...
-
- Can you please try this command and see if it changes anything:
sysctl net.link.bridge.pfil_local_phys=1 -
- Can you please provide some system logs about this.
I cannot see why this is happening by looking at code! -
- Moving to feedback to verify this functionality on 2.0.
07/28/2010
-
- that was it, thanks!
-
-
- After stopping a packet capture, the results box at the bottom of the page is empty, where the pcap itself is fine an...
-
-
- No change in snapshots with the latest commits.
-
- Patched.
-
- Ermal's recent change fixed the SNMP CPU usage on 64 bit, but it went from showing 100% all the time to showing 0% al...
-
- Applied in changeset commit:"b0c231e4f391f57ca7c20e2bd823bb585f131a2f".
-
- patch attached but should not be committed as is, should use base64 rather than cdata.
from Jonathan Dieter on su... -
- from Jonathan Dieter on support@
This patch will allow you to set a per-host network boot filename in
DHCP when y... -
- Currently, when you have an ICMP rule, the ICMP type is not reflected in the rule list. If you have separate rules fo...
-
- Applied in changeset commit:"a133bb38b2bee410bcefa8b22f8df758bca4c26f".
-
- Applied in changeset commit:"8e2986f8486237a964aa0890d335596a4da30c41".
-
- This is expected behavior.
Since the vr1 or vr0 is part of the multilink when it goes down mpd will bring the link d...
07/27/2010
-
- A number of changes have gone into that recently, you must be on an old version. The latest version lines 251-253 are...
-
- Lines 251-253 are duplicated in auth.inc file
Code
if(!is_dir($user_home))
mkdir($user_home, 0755); -
- After disabling CARP under Status> CARP, and clicking Enable, it doesn't actually add the VIPs.
-
-
-
- Fix committed.
-
- Applied in changeset commit:"4a71c0873c237ecd4c6e50337b8550e3bb4184c2".
-
- Confirm the renaming resolves the selection issue, and sorry for being a numpty naming it as such!
That said, can ... -
- Not likely an OS change. I'm not sure snort has ever really worked properly on NanoBSD w/2.0. vnstat didn't work at a...
-
- This isn't true of all packages (blinkled for example is fine, as are dashboard widgets), but Snort for example is b0...
-
- 8.1 hasn't changed anything. Here's the output on an ALIX 2D3:
# uname -a
FreeBSD gateway.X.X.X 8.1-RC2 FreeBSD 8...
Also available in: Atom