Activity
From 08/03/2010 to 09/01/2010
09/01/2010
-
08:19 PM Bug #869 (Closed): Captive Portal rule does not work when using a restrictive ruleset
- The rule is correct as it is, where it passes to 8000/8001 to $cpinterface, and it all functions correctly. The reaso...
-
07:37 PM Bug #869 (Closed): Captive Portal rule does not work when using a restrictive ruleset
- Directions to reproduce:
Setup captive portal on OPT1.
Add a rule on OPT1 interface:
allow
protocol any
src:... -
05:55 PM Bug #863: floating rules breaks passive mode ftp
- Tested with:
> 2.0-BETA4 (i386)
> built on Wed Sep 1 11:07:08 EDT 2010
> FreeBSD 8.1-RELEASE
And has the sa... -
05:34 PM Bug #863 (Feedback): floating rules breaks passive mode ftp
- Test with the latest snapshot.
-
- Duplicate of #670.
-
- For history ticket #582 has useful links.
-
- We have these defined now:...
-
05:10 PM
Bug #853: PPPoE Server radius config not applied
- Thanks for the super quick fix. I can confirm that this is working now.
There are a few other fields on that page ... -
- The ipfw fwd gets hit, but I believe after that it gets hit by the pf rdr for Squid. A 'no rdr' for traffic destined ...
-
03:35 PM pfSense Packages Bug #868: transparent Squid breaks captive portal
- The issue is likely that the two are competing for trying to redirect connections going to port 80 and the squid pack...
-
- Squid's transparent redirect breaks captive portal.
-
- it's Squid's transparent redirect that kills it. A 'no rdr' from the package for CP should work around that, but that...
-
- Copy here the problematic /tmp/rules.debug or config.xml and i will try to fix it.
-
10:50 AM Bug #851: Portal Page never loads with multiple vlan on the same interface
- What do you mean when you say "do not run squid on port 8000" ?
-
- Just do not run squid on port 8000 :)
-
- Ok it's work fine whithout squid installed.
How can we have squid and Portal captive working on the same machine ? -
-
- It should not error out, but it will skip mostly aliases with multiple ports!
-
-
-
- Can you please be more specific on this?
-
- I will leave this open though not a target for 2.0.
Usually this is a pilot error and the modem should respond with ... -
-
08/31/2010
-
07:07 PM Bug #867 (Resolved): Activating vlan interface via webgui deletes interface
- This may be a duplicate issue attached to something else, apologies if so. Essentially, the webGUI is destroying inte...
-
- Yeah that's true. Could be combined in the future.
-
- It isn't completely redundant. It gives you a button to download the latest data from whatever web site it gets that...
-
02:16 PM Feature #864 (Resolved): Diagnostics -> Show Bogons is now redundant.
- With Diagnostics -> Tables now showing all pf tables, Diagnostics -> Show Bogons is redundant and, in my opinion, unn...
-
- Adding a confirmation prompt would be sufficient for letting the user know what it does.
-
- Additionally, this WOL function appears only for things listed as 'offline', as determined by presence in the ARP tab...
-
- When clicking a listed MAC address in the DHCP lease status, a WOL "magic packet" is automatically sent to the given ...
-
- I'm not familiar with exactly what that output is, but it looks like this:...
-
- This is pfctl -vvss output (note the data connection was 64.187.64.40:56329 -> 64.187.65.74:41768 this time):
<pre... -
- Can you show me an pfctl -vvss when this happens.
Seems the automatic handling might be creating the state wrongly f... -
- > Please show traces of traffic.
See attached pcap file. That is me connecting/logging in to the ftp server, is... -
- Please show traces of traffic.
Provide either rules screenshots or the /tmp/rules.debug content.
And please also ... -
- Sorry, this is on 2.0-BETA4 from Aug 30.
-
- I have a floating rule that allows port 21 traffic to an ftp server, and later on a catch-all floating rule to deny a...
-
- Seems OK now. Thanks!
-
-
- Correct static route handling.
-
- I have a static route for the LAN interface that does not get added on bootup.
10.0.0.47/32 lan - 10.0.250.2 LAN S... -
- If you change the mask on a static route, you end up with both the old route and the new route. e.g. start with a rou...
-
-
02:01 PM Bug #786: UDP traffic blocked by a floating rule
- I updated to the last build and still have the bug.
( 2.0-BETA4 (i386) built on Tue Aug 31 07:03:18 EDT 2010 )
Ho... -
- I cannot duplicate this anymore on latest snapshots too.
-
- I'll try tommorow with squid uninstalled.
-
- I suspect Squid in transparent mode causes that, does it work if you uninstall Squid?
-
- I have 2 interfaces.
Wan on em0 with one Vlan
and 4 Vlan (10 20 30 50) on re0.
The Vlan 50 will be dedicated to ... -
- Please provide more information about this.
I tested yesterday and it worked fine even though i had configured the p... -
- This is open discussion what to put in there so forwarding to Future.
-
- Applied in changeset commit:"4d3c8697b105956c838912ebc31c679498c6e286".
-
- Should be fixed on newer snapshots.
Thank you. -
- If you edit an interface group, change the name, and hit save, it prints the error:...
-
10:33 AM Bug #755: dnswatch not working
- Will check and revert but might take awhile since my remote site is unavailable at the moment :$
-
- Can you please test the latest snapshot?
For history
https://rcs.pfsense.org/projects/pfsense/repos/mainline/commits... -
- Can you please try with the latest snapshot and see if you can replicate.
Also please paste the srouce code of the lo... -
- It works for me now!
-
-
-
- Please check the latest snapshots.
-
-
- I removed a special character that was present in the XML file of openvpn wizard.
It should be ok now. -
- The OpenVPN setup wizard just goes to a blank page now.
-
- Seems the code was missing some curlies and was using wrong variable names.
-
- Where there are multiple PARP entries, choparp only runs on the last defined PARP IP/subnet, leaving all the other en...
08/30/2010
-
- This needs ...
-
-
- It is just that on some enable/disable of capabilities the em(4) needs to reinit itself(according to code).
-
- no change with latest em(4) driver
-
02:39 PM Bug #858 (Resolved): Widget settings will not save settings in some cases
- If you have the OpenVPN widget active and the firewall logs widget active, and the OpenVPN widget comes after the fir...
-
- Applied in changeset commit:"44c7cce5f93a1ab0cddbb547c06fdff4d797a2d4".
-
12:44 PM Bug #857 (Resolved): firewall_rules_edit.php Typos
- Section: Source port range
Someone was copy/paste happy with the )." part.
Specify the source port or port rang... -
05:24 AM Feature #856 (Rejected): Allow colour coding of rules
- Our access rules typically include a few different theoretical sections, for example:
VPN rules (allowing access to ...
08/29/2010
08/28/2010
-
- This should be retested with the latest drivers in 2.0.
Otherwise mostly this is a bug of em(4) ioctl handling of SE... -
- Can you add to line 1487...
08/27/2010
-
- shocking. ;) anything further from what's already done isn't critical in the vast majority of cases, has an availabl...
-
08:39 PM Feature #8: Clear states after failover
- I disagree strangely enough :). The feature request took somewhat a turn as it could solve other problems, But for me...
-
- The point of this particular issue is to clear states on a failed connection, which works now. Killing them on a conn...
-
- When wan fails to wan2 it do clear the states. But when wan connection recover states doesn't get cleared and my voip...
-
03:45 AM Feature #8: Clear states after failover
- Confirmed fail over is working as expected for me in build 2.0-BETA4 (i386) built on Thu Aug 26 09:00:28 EDT 2010
T... -
- The current practice of killing all states when a connection goes down on that downed connection is fine for the majo...
-
- ppp.log...
-
- the last one is a general issue in all browsers, any time the rule list gets too wide that happens (for instance usin...
-
- Fixed thanks.
-
03:38 PM Bug #695: In firewall rules and NAT some wrong displaying.
- line 498 in firewall_rules.php:...
-
- The last one is a bug in IE7 as far as i am aware.
-
- Applied in changeset commit:"17a710031ba8a8c0f3c402cdec8311a993312f31".
-
- This looks to be fixed. Was easily replicated before and can't do so now. Leaving to feedback for a bit for more test...
-
- Applied in changeset commit:"081a2b6b5f4fa1627bf544a3553c9b6419426464".
-
11:03 AM pfSense Packages Bug #854 (Resolved): Unable to access web config interface for package NRPEv2
- NRPEv2 package : in web interface when accessing Services-NRPEv2, I get :
Fatal error: Cannot redeclare filter_pfl... -
- Applied in changeset commit:"37d7de2d2b073545c18d95619d633fdaa5d4d7f4".
-
05:31 AM
Bug #853 (Resolved): PPPoE Server radius config not applied
- Just playing with pfSense (2.0-BETA4 (i386) built on Thu Aug 26 23:39:42 EDT 2010) and installed the freeradius packa...
-
08/26/2010
-
10:12 PM Bug #732: Shaper: Multip Lan wizard does not create lan connection queues
- Ermal, I just tried this out in the latest snapshot and everything works like it should. Thanks for fixing this issu...
-
07:49 PM Feature #852 (Rejected): Add Captive Portal default realm
- Hi,
There is one particular feature I would like added to the Captive Portal module. It would be nice to have a de... -
- It may be different depending on the card, but it has been as labeled on two different single-antenna systems with di...
-
10:29 AM Feature #13: wireless page to have option to select transmit and receive antennas
- im still not sure 0,1,2 values r labeled properly coz when i set all 3 to 0, i get the best transmittion and receptio...
-
- It should behave correctly now.
A patch was added to allow packets sent from the host to reach pf(4) even though a... -
- The files are now in the latest builds.
-
- They are in the latest builds.
-
- Much nicer. Thanks very much!
-
- seems to work fine on the latest snap.
-
- I have configure the Captive Portal on one vlan but the Portal Page never load itself.
I must load http://10.171.2... -
- Applied in changeset commit:"48f236320d930978ecb8b7eabb5256c368ba1de9".
-
08/25/2010
-
-
- originally the script only showed the overload tables but it looks like its functionality has been expanded to all ta...
-
- agreed. It started out as something different than it ended up being if I recall.
-
- The menu item "Overload Tables" in the Diagnostics menu is confusingly named. It simply contains pf tables, which are...
-
- Applied in changeset commit:"3f1789530e1223b31c76e3f4186592fc890c19e0".
-
- Tab: Diagnostics > Authentication
The results return with bad formatting and typos.
Example:
User: <user> authenti... -
- Actually, I suppose it just needs the NAT on both sides of the VPN.
-
- I don't think that is something that you can currently resolve with PF on any type of site-to-site VPN connection.
-
- within the same subnet, that's good. The tricky part is what if it's a completely different subnet, such as the case ...
-
- Larry Titus wrote:
> Much to my surprise, it works!
States Table
Proto Source -> Router -> Destination State... -
- Much to my surprise, it works!
-
- Not on mine unless compatibility view is enabled (which breaks other things too, don't enable it).
-
- FYI, it's broken in IE8 too (tested on both XP and Win 7).
-
- I think I've noticed other areas where that doesn't really make sense, not a critical issue though. Need to add to th...
-
- When performing a firmware update from the web GUI and the "in progress" screen is displaying, a close button is pres...
-
- Tested and working.
-
09:40 AM Bug #847 (Resolved): Deleting interface leaves remnant in interface groups
- Beta4 snapshot from Tue Aug 24 01:26:38 EDT 2010, deleting an interface (OPT5 in my case) that was a member of interf...
-
08:48 AM Bug #835: Captive portal non redirecting correctly when logout popup is enabled
- I was on the daily snapshot when i tested this, i'm going to udate to today snapshot and check again
i'll post the... -
- This is primarily a reminder to figure out more about this and report it upstream. Another question arises here - sho...
08/24/2010
-
- http://people.freebsd.org/~yongari/axe/if_axe.c
http://people.freebsd.org/~yongari/axe/if_axereg.h
confirmed work... -
04:32 PM Bug #374: "Register DHCP leases in DNS forwarder" doesn't work
- Well I finally got around to updating to a new snapshot a couple of days ago and it seems to still be resolving even ...
-
- and http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/144642 too
-
01:28 PM Bug #838: DNS servers are not cleared from resolv.conf when link comes down
- I mean, I presume that this nameserver handling is done this way to keep the GUI responsive, so is there a way to get...
-
- What do you mean efficent?
-
- Works now.
Is there any efficient way to make adding and removing nameservers faster?
-
- I fixed that issue. That is why i am requesting more info.
-
- I would not consider it critical because behaviour is the same.
that is expected on restart. -
- Okay, it starts at boot time and populates the /var/etc/hosts files with local host names properly. e.g. . . .
[2.... -
- Okay, works now with changes I just commited.
-
10:52 AM Bug #840 (Feedback): RRD scripts not collecting new data into the RRD
- This was caused by a change in the admin server settings for OpenVPN servers. This caused the data collector to fail....
-
10:36 AM pfSense Packages Bug #844 (Resolved): Open VM Tools Won't install
- The problem seems to be with open-vm-tools-nox11-253928.tbz
The installation returns:
$ cat /tmp/pkg_mgr_Open-VM-To... -
- Updated to "2.0-BETA4 (i386) built on Tue Aug 24 02:26:59 EDT 2010 FreeBSD 8.1-RELEASE" this morning, problems gone. ...
-
- I've committed a fix for the original issue reported. Earlier, I also fixed the issue of 'Allgraphs' always showing ...
-
- Oh the throughput graph on System tab, I read it as the graphs on the Traffic tab.
-
- Status > Services, just click the button to restart dnsmasq.
It's in the FAQ as such, too. -
05:24 AM Feature #842 (Rejected): Flush DNS cache button
- Sometimes it is useful to manually flush the dnsmasq DNS cache to help debugging DNS issues. This can be done with <p...
-
- It seems it actually can create a clone with a different bssid if you specify a value for wlanaddr when you create it...
-
-
- From ifconfig code:...
-
- I have an ALIX board running a single ADSL/PPPoE link for the WAN on vr2.
I also have DHCP set up on vr2 (via OP... -
- Thank you for the support on this.
If you confirm it works as expected we can close this. -
- Almost works, 2nd arg is set correctly with gw ip now, but local ip is missing now.
Line 163 filter.inc... -
- Applied in changeset commit:"d6d50244df14c43832cca5199b04e659557c20dd".
-
- Committed.
Thank you.
08/23/2010
-
- I'm referring to the System: Throughput graph specifically and no other, and I'm fairly sure this was posted only abo...
-
- Definitely hasn't been that way for a year and a half. All of our production 2.0 installs only stopped working when a...
-
- This is actually a legitimate issue. I've traced the code and found why it does this. As far as I can tell, it has ...
-
- none of the graphs currently contain any info, that's a new issue that has another ticket open on it.
-
- What more info can I provide? I'm now running "2.0-BETA4 (i386) built on Mon Aug 23 05:05:44 EDT 2010" and it's still...
-
- This sounds like something Jim fixed recently if I recall, if the logout pop up was enabled it wouldn't use the redir...
-
- Please post more info to investigate this.
-
09:20 PM Bug #829: WAN stays assigned to pppoe0 interface after switching type from PPPoE to Static
- Hi Ermal, I tried testing it, but could not get it to work.
My WAN is configured as PPPoE to begin with:
- I g... -
- The code responsible for this is in the function eth_get in usr.sbin/wpa/l2_packet.c of the FreeBSD source code. It ...
-
- When using hostapd, on hostapd startup it reads the wrong type of MAC, causing authentication of clients to fail if u...
-
- Everything specified here should be fixed now.
-
-
- I try to be more clear.
in PFsense captive portal configuration page there is a flag that says "enable logout popu... -
- Can you please give proper information about this!
Otherwise this will be closed. -
- Corrected. Thx.
-
- Mmm. Yes, I see I missed that detail. :)
It doesn't look like it's going to work.
Patch: (rc.rc.resolv_conf_g... -
- There is not yet a new snapshot that includes the rebuilt check_reload_status that can handle this. It's building now...
-
- The file gets generated (/tmp/resolv_conf_generate) but /usr/local/sbin/check_reload_status doesn't know how to handl...
-
-
- I've updated my testing box with these changes, and I still don't see dhcpleases starting. There's no error now, so t...
-
- Applied in changeset commit:"24d619f5b696914e6b793bbf3c84b25131066b7b".
-
- Try latest snapshot or commits related to this.
they should get the proper ips to pass to pfctl though i plan to imp... -
- Im happy to report we are close to solving this issue!
Manually executing:
pfctl -b 192.168.102.2 -b 192.168.102.... -
- No new data is being collected into the round-robin database.
08/22/2010
-
- http://www.freebsd.org/cgi/query-pr.cgi?pr=149185
-
- #1 is a common problem in the GUI, almost 15-20 pages have the issue and two of those files are pkg_edit.php and wiza...
-
- I tried and tried to figure out what was causing #1 but never could find it. :(
I'll work on #2.
-
- When bringing down PPP,PPPoE,PPTP,L2TP we don't clear the DNS server IPs associated with those links from the /var/et...
-
- We have a problem with the order of operations in the rc.bootup script
with respect to getting the dhcpleases progra...
08/21/2010
-
- Try this change to see if it clears up the static arp error:
https://rcs.pfsense.org/projects/pfsense/repos/mainline... -
- Tried it myself with -HUP and the DHCP daemon just died, so that won't work. The clear_log_file() function already ki...
-
- i get this is system log, no idea if its normal or no
Aug 21 16:50:48 php: /diag_logs_dhcp.php: The command '/sbi... -
- Then do a little more testing and research to find out. Since you can easily replicate the issue, you can see the log...
-
- isnt this wrong to start dhcp daemon again in order to clear log, then u might as well just name the button restart d...
-
- When a user clicks on the logout button,the user is not actually disconnected and can still surf the web
-
- If the captive portal option for the logout popup is enabled when the users logs in he's not redirected to the typed ...
-
12:20 PM Bug #834 (Resolved): DHCP server options for TFTP server doesn't allow arbitrary strings
- To configure Polycom SIP phones to find their configurations, you need to be able to specify a value for option 66 or...
-
- im on the 21st snap and still after clicking disconnect, the page just keeps showing loading whereas the pppoe is alr...
08/20/2010
-
- opening to track issue we discussed earlier. Where WAN is an Ethernet interface, and OPT1/WAN2 is PPP, when WAN has n...
-
-
- Applied in changeset commit:"bd961c65906fe2f2c6aec4324dc3268d31aab1b7".
-
- tried that and after restarting dhcp daemon, logging resumes as normal.
-
- haven't tried that but ill do that and report back
-
- If you restart the DHCP daemon from Status > Services, does the logging resume? What about pressing "Save" on the Sys...
-
- basically what im trying to say is when pfsense is booted fresh and then u go to dhcp log and u can see entries in it...
-
- $ ls /var/log
apinger.log
dhcpd.log
dmesg.boot
filter.log
ipsec.log
l2tp.log
lastlog
lighttpd.error.log
ligh... -
- I cannot see anything wrong in code regarding specifics to dhcp!
Can you please show the output of ls /var/log
and a... -
- usually under system log, all the different tabs show the log, now under each is a clear log button on clicking which...
-
- It works in IE 8, and all versions of Firefox, Chome, Safari and Opera. (read: IE7 is broken)
Not sure we'll fix t... -
08:43 AM Bug #832 (Closed): Diagnostics: Show Bogons was broken layout!
- Pfsense version:
2.0-BETA4 (i386)
built on Thu Aug 19 21:03:03 EDT 2010 (FreeBSD 8.1-RELEASE )
Option "Show Bogon... -
- I implemented the fix for this.
Though i think it is better to put even the reloading of carps through rpcxml in the... -
- The GUI should respond now properly with the latest snapshot.
-
- now atleast with dial on demand ticked, the pppoe is disconnected and reconnected and receives new ip from isp but th...
-
- I investigated this and for now i just put a warning message there to tell you that you have to reassign the interfac...
-
- Previously configured Service Provider information is not displayed when an interface configuration is edited after s...
08/19/2010
-
- file 1 - PPPoE config
file 2 - WAN changed from PPPoE to static
file 3 - static config after I manually changed WAN... -
- I just reproduced it on VM running 'Aug 18 21:58:53 EDT 2010 ' snappy.
3 files attached:
-
- PPPoE was configured on the Interface->wan page by selecting type = pppoe. I will try to reproduce it on a VM box and...
-
- Can you please provide more details on this.
If possible the config.xml file before and after the issues shows.
T... -
- Ok got a deal at it with your help.
We have to kill states of the form 'icmp 74.125.95.93:63260 <- 10.10.10.144 0:0'... -
- Tried the extra state kills on the CLI since snapshot hasn't been updated yet:
Still doesnt do enough, for the p... -
- Try latest snapshots more state killing added.
-
- This is now implemented in latest snapshots.
-
- Check out with latest snapshot.
We now check the routing table too. -
- Latest snapshot should be ok, i found where the loop was occuring.
08/18/2010
-
- To reproduce:
- configure WAN as PPPoE
- switch WAN from PPPoE to Static
- go to 'Interface Assignments' page a... -
- Applied in changeset commit:"6debb14077a5963aeab60fa9f8fcc87bdc806740".
-
- Try latest snapshot should be ok.
-
- We currently only have a way to generate a new user certificate, it would also be helpful to import existing user cer...
-
- Eventually (post 2.0) it would be nice to have a way to generate a CSR for a user cert, so user certs can be supporte...
-
- Applied in changeset commit:"9401767007a1bf03f02129fbe2c0d9d4d3621524".
-
01:06 PM Bug #729: if_bridge unpredictable filter interface selection
- Yes, my bad. PHONE is bridged to WAN not LAN
-
- A note on the last comment there:
From that config it looks like "Phones" is bridged to WAN, not LAN, which is more ... -
08/17/2010
-
- Using pfSense-Full-Update-2.0-BETA4-20100808-1004.tgz I have a WAN and LAN and also a PHONE which is bridged to LAN. ...
-
- not an issue now that we've backed down to 0.7.3
-
- Applied in changeset commit:"f6f5fde13718e29670783173e99b2f3707614151".
-
- Applied in changeset commit:"51d5aad75a0a88034b49db3d867e8a1e49fe2f12".
-
- Partially simpler patch committed to the port.
Try snapshots newer than this post. -
- This command seems to be giving no output at all, whether I run it before or after the pfctl -b.
-
- Actually no, pfctl is killing the right states. That is all it has to kill.
Can you please show me the src nodes sta...
08/16/2010
-
- The binding seems to be correct, but the status connection wasn't being parsed properly.
The status command to th... -
- When using TCP with OpenVPN, even where specifying 'local' to bind to a specific IP, the server binds itself to 127.0...
-
- it does have 'local' correctly where WAN is selected
-
- When "WAN" is specified as the interface in an OpenVPN configuration, it does not include the listen on the WAN IP, i...
-
- Can you please show your ppp log on this?
Or the mpd log on system log?
You can otherwise use the init script box on... -
- Applied in changeset commit:"ef26b049dbedc8ad9f88496ed9580882e3814c14".
-
- Should have been "pfctl -k ip1 -k ip2" in my last comment.
-
- Updated to 2.0-BETA4 (i386) built on Sun Aug 15 18:27:24 EDT 2010
Gateway applet working again and the rules.debug ...
08/15/2010
-
-
- Oh, thanks. It was in the wrong project (don't open tickets in tools) so a ticket I never saw. added info there and c...
-
- Chris - is this not related to the issue I logged (#755). It appears as though the same symptoms are exhibited (segfa...
-
- dnswatch crashes immediately upon running.
kernel: pid 45001 (dnswatch), uid 0: exited on signal 11 (core dumped... -
- dnswatch crashes immediately upon running....
-
- No, My guess is that SIM Pin doesn't run at the right time in the script.
-
- there is some correction
all above scenario work fine if dial on demand is disabled and dont work if its enabled. -
- im on the latest snap and still issues with this, further testing results below:
1) on reboot pppoe conencts fine....
08/14/2010
-
- Adding an interface at Interface>assign and saving changes drops all the interfaces on the system for 6-8 seconds. So...
-
- no change
-
- is the SIM PIN in the GUI not adequate for this?
-
- fixed
-
-
-
- This is because the management interface relies on the same port as the server is listening on, which changing would ...
-
-
- after unchecking the "enable" box, the save button isn't available, so interfaces can't be disabled.
-
- any1 else having this issue?
08/12/2010
-
- Duplicated by #789 but since that has a more accurate title and commits (and is already set to Feedback), this one ca...
-
02:27 PM Bug #758: sshlockout_pf doesn't work on 64 bit
- The attached patch fixes sshlockout_pf on amd64 (and includes an extra check for invalid logins on a normal FreeBSD i...
-
- Should be fixed by:
https://rcs.pfsense.org/projects/pfsense/repos/mainline/commits/9fad9848c9353b9a21402634a537ae... -
- i got so frustrated with this issue that i did a clean install on another CF card and reconfigured it from scratch an...
-
- after clicking disconnect, below r the details of system log and ppp log
system log shows
----------------
Aug 1...
08/11/2010
-
- Applied in changeset commit:"ac8c5e564341279a3a82700ab6dc3ebd61ae52da".
-
- No, #152 was a xmlreader-specific issue. I should note this does the same thing with both parsers, so I don't think i...
-
09:59 AM Bug #819: Blank <vip/> tags appear in config.xml
- Hum.. Related to http://redmine.pfsense.org/issues/152 ?
-
- After adding a CARP VIP (at least, possibly others), you end up with a <vip/> or <vip></vip> tag above the configured...
-
-
12:47 PM Bug #817: Policy filtering mark not saved
- Works with the the latest snapshot (2.0-BETA4 built on Wed Aug 11 06:12:55 EDT 201).
-
- Applied in changeset commit:"8ebbae22e08147c24da6c7cad6fcb9315eb1291f".
-
- When you have a forced redirect URL specified, the $PORTAL_REDIRURL$ macro still shows the URL the person attempted t...
-
- config attached, kindly delete once u get a look at it.
how to get the logs once webgui freezes, i mean using ssh ... -
- Can i have your config and the system logs after the webgui freezes?
-
- still not solved, as a matter of fact its gone more worse. Now either if u got to the wan interface page and click sa...
-
11:51 AM Feature #818: TrafficShaping for variable bandwidth
- Perfect! Thanks. I didn't had a chance yet to look at a 2.0 snapshot. Good to know.
By the way:
I like the pfSens... -
- Where your bandwidth is scheduled like that, in 2.0 you can use schedule rules to apply different QoS parameters depe...
-
- At my clients places i am using pfSense 1.2.2 and 1.2.3 with multi-WAN/multi-LAN and its working fine so far.
The ... -
- There are various scenarios where it would be useful to expose an interface on outbound NAT rules to use subnets or a...
-
- There is not yet a new enough build to have these latest changes. The next one may possibly have all the changes, bu...
-
- I have tested with latest snapshot built on Tue Aug 10 22:06:38 EDT 2010 which includes the change.
It seems failove...
08/10/2010
-
- Applied in changeset commit:"050f48306fa7a3c9ba44538b67d9cecf4a8390b7".
-
- Applied in changeset commit:"8d9cbe6ff3ba430a3354d3df100ed54bf1031507".
-
-
- Should be fixed as part of another commit.
Actually when disconnecting PPPoE1 and trying to connect it, the code w... -
- Applied in changeset commit:"fd9ba7c09f01aaa1ae50bc15e918c05b024f4f36".
-
- Test latest snapshots.
-
- I have a simple setup with WAN and LAN interfaces. I'm trying to add a firewall rule under the LAN interface that ma...
-
- I added a solution to run the command after the rules referencing this interfaces are removed from the working config...
-
- Ok, had some time spare and tested it with today's snapshot (built on Sun Aug 8 10:20:52 EDT 2010) and behaviour is s...
-
- In my last post I ment comment 26, it seems redmine linked issue 26 for the text "poundsign26".
-
- I have done some testing regarding this issue around 24th of June.
Calling pfctl -b manually did not do enough at ... -
01:54 PM Bug #816 (Closed): USB Keyboard Detection - Boot Hangs
- I'm having issues with booting a system with a USB keyboard. The keyboard works perfectly fine, but when pfSense atte...
-
- Applied in changeset commit:"6c74ac2363176cf4492b2331130998fc4c140048".
-
08:08 AM Bug #815 (Resolved): IPSEC VPN creation fails if LAN I/F has no IP address.
- vpn.inc makes the assumption that the LAN interface will have an IP address. In the case where it does not (for examp...
08/09/2010
-
- Yeah but this goes all back to wlan interfaces, ppp, possibly others.
And that means defining rules in code for this... -
- There's an easier option there, simply detect VLANs with a missing parent interface upon config restore and prompt fo...
-
- Two options:
* Either make the code OO similar to the shaper one. Which would only keep the real/parent interface sa... -
- Details: http://forum.pfsense.org/index.php/topic,27348.0.html
-
06:06 PM Bug #798: IPSEC not working after CARP failover
- do you have a specific bug ID I can track? I can't seem to locate it.
-
05:01 PM Bug #729: if_bridge unpredictable filter interface selection
- I'll test this latest snapshot ASAP.
Very keen to see the results -
-
- Patch integrated in the builds. Please test the latest one.
-
- Looks like it takes the ID of the first user and uses that for XMLRPC sync, and since the admin user can't be renamed...
-
- Yeah that's a problem we can't easily accommodate right now, the solution for the time being is to just do a routing ...
-
- The problem is that in pfSense currently there is no even generated on changed routes.
So if the underlying route ch... -
-
- It would be better shiping with aliases containing such entries!
-
- If you only have one physical interface, plus a 3G modem for WAN, the current console assignment is far from ideal. Y...
-
- Ahh! I knew I was missing some variable. Glad you were able to narrow it down, you're welcome. But even with the UI n...
08/08/2010
-
- this reportedly isn't fixed. http://forum.pfsense.org/index.php/topic,27257.0.html
-
- Thanks David, the issue is with mobile IPsec only.
-
- Emailed you directly Chris.
-
03:21 PM Bug #812 (Resolved): RRD graph time axis not locked to latest times with higher average samples
- See attached chart - this was taken on Sunday 20:12, but the chart shows the x-axis to Monday 0.00...
This is the ... -
- Though I suppose technically since it only really works with ath at the moment, the similar issue with the VAP config...
-
- fixed
-
- Ermal has a patch to if_bridge that seems to make filtering with if_bridge behave as it logically should (not as it i...
08/07/2010
-
- we were missing TCP 1119 for battle.net, aside from that the other traffic would have been classified accordingly, ot...
-
07:39 PM Bug #800 (Resolved): Preset for QOS Wrong
- The preset for prioritizing game traffic for World of Warcraft does not actually pick up any traffic for World of War...
-
- if someone wants to knock this out for 2.0, great, but as a non-critical feature, moving to future.
-
- fixed
-
- Ability to NAT multiple GRE connections to a single remote host on a single public IP. Need some kind of work around ...
-
- Only one IP is allowed for DHCP relay. dhcrelay can use multiple servers by specifying them with spaces between the I...
-
- Ermal reverted the part of that commit that caused it.
-
- as far as I can tell this is fixed, it's not doing as Erik described, and works correctly.
-
- This is probably also applicable for systems with a VAP wireless configuration.
-
- When you have a configuration with VLANs and restore it to hardware with different NICs than the original hardware, t...
-
- The username for the config sync user must be 'admin'.
-
- (from cvstrac)
The PHP shell's "help" output refers to using $config - but $config apparently isn't declared as glob... -
-
- (from cvstrac)
Cannot set the keymap to anything other than the default. This is mainly because /etc/rc.d/syscons ... -
- Automatically adding an option to the drop downs on firewall rules, NAT, etc. screens for RFC 1918 networks would be ...
-
-
- a somewhat nicer overview for incoming PPTP connections... and their status.
Eg like :
user ip con... -
- ability to enable and disable static routes
-
- If anyone wants to test it, go ahead and try adding rules on the IPsec interface - it is one of the available choices...
-
- Ermal, how is this supposed to work? nat on enc0?
-
- Rules negating policy routing for remote VPN subnets are automatically added. In some circumstances this is undesirab...
-
- Aliases not currently usable in outbound NAT rules.
-
- looks like recent package fixes fixed this, I can't replicate it with the steps listed.
-
- everything here seems to be reasonable with all the latest changes
-
- fixed
-
- closed pending info on how to replicate, not seeing that on 6 different installs, with numerous browsers on 4 differe...
-
- Not seeing that on Chrome nor IE nor Firefox. The js doesn't (and can't AFAIK) disable those until the page is fully ...
-
- fixed
-
- fixed, and sticky with multi-WAN has no apparent problems, I've been load balancing all my HTTP with sticky for weeks...
-
- This does break off-host syslogging, moving to Future.
-
-
- this was either fixed a while back or needs more info, not seeing this anywhere on current versions
-
-
-
- This occurs because the wireless status page uses the list scan command on ifconfig, which only gives some cached dat...
-
- fixed, thanks
-
02:48 PM Bug #799 (Resolved): Misspelling of encryption in vpn_l2tp.php
- http://redmine.pfsense.org/projects/pfsense/repository/revisions/master/entry/usr/local/www/vpn_l2tp.php#L353
Shou... -
- same here
-
04:52 AM Bug #467: Unable to use active FTP via second gateway
- I am pleased to report I have upgraded my pfsense box to the latest snapshot "2.0-BETA4 built on Fri Aug 6 18:22:00 E...
-
- still the same with the 7th august snap, if some1 could fix this minor issue, just caused by some php warning
-
- Sadly it still appears to be crashing.
-
-
- I've made it enforce the setting when saving, too, just like it does for the source and destination. Should the same...
-
- It does appear so in the code for the port forward edit page.
There may be a bit more to this than simply disablin... -
- Yes, it does.
-
- When you change the interface on the port forward, does it change the interface on the associated firewall rule?
-
- fixed
-
- this is fixed (though there is a related issue in another ticket, IP Alias VIPs don't get removed from the previously...
-
- this seems to be fine now
-
- same.
-
-
-
- fixed
-
- Updated to latest snapshot from this afternoon, and can confirm that renaming the interface that I was having issues ...
-
- fixed
-
- fixed
-
- fixed
-
-
-
-
-
-
-
- fixed
-
- This is closer. Still one problem, when you switch interfaces like this, it does not delete the alias IPs from the pr...
-
-
- this doesn't take dynamic routing into account, it probably should just use a routing table lookup to determine the i...
-
- fixed
-
-
- Check http://forum.pfsense.org/index.php/topic,27197.msg142135.html#msg142135 for some details on this question which...
08/06/2010
-
-
- looks good
-
- looks good
-
- fixed
-
- fixed
-
-
- fixed
-
-
-
- Applied in changeset commit:"1beafceb73be3362da8d9d1c3f6e89c4dfc80607".
-
- fixed
-
- falls into the category of DPD not functioning in ipsec-tools, which is being tracked on 2.0.
-
- I have tested multiple pfsense clusters running on Vmware ESXi. When a CARP failover initiates, the backup unit take...
-
- I made it return just an empty array. That should suffice to solve this.
-
- Forgot to mention, I tested this on current versions of Chrome and IE8. Since it works after reselecting from the dro...
-
- When editing an existing Phase 2 IPsec entry where the "Local Network: Type" field is set to "LAN subnet" already, wh...
-
- there will likely be one with a date of late 20100806 (after 16:00 to be safe), otherwise on the 7th.
-
- Hmm, good point :-) Sorry, just jumped on it based on the post at http://forum.pfsense.org/index.php/topic,27197.msg1...
-
- There are no snapshots with that fix yet, especially not one from the day before the fix was committed.
-
- I just updated to the latest (Aug. 5th) snapshot from Aug 1st (where I first reported the problem) and the problem st...
-
-
- Please add a check box to add a 95th percentile line to the RRD graphs. This is a useful bit of information for those...
-
- Could maybe be a checkbox instead, as plenty of people run embedded on hardware that supports ACPI just fine.
-
- it would be a good idea to disable ACPI on embedded environments as alix etc dont support it and the warning is alway...
-
- ok then the rest works fine except the pppoe after 30th august which is preventing me from upgrading to the latest.
-
- If you check "deny unknown clients" it would prevent that. It's likely a byproduct of DHCP being broadcast, and not d...
-
- i applied the patch and tried it and it works fine now but the core issue still remains, that is, client macs not lis...
-
- And please remember that the problem goes away after you wait for a few minutes. This only happens when the arp table...
-
- Hi Chris,
I appreciate what you are saying, but the point of concern here is that the host shouldn't be able to se... -
- There's also a FreeBSD bug report relating to this that's been open since Feb 2008: http://www.freebsd.org/cgi/query-...
08/05/2010
-
- After saving on system_advanced_firewall.php, any selected TFTP interfaces are not shown as selected. After loading t...
-
- This scenario is described in the if_bridge man page: ...
-
-
- The attached patch fixes the crash.
-
- I found another potential issue that could clobber the static ARP entries. Wait for the snapshot after next (it's in ...
-
- So for some reason your MAC/IP pairs are not being added to the ARP table when you enable static ARP.
-Although you s... -
- arp -a before enabling static arp
? (192.168.0.11) at 00:1b:11:0b:ef:9b on vr0 expires in 1134 seconds [ethernet]
... -
- What would help more is:
* The output of "arp -a" before you enable
* The output of "arp -a" after you enable
* ... -
- i tried the 5th august nanobsd and this doesnt work, as soon as i enable, every1 gets locked out but the lan clients ...
-
- opt1 in access point mode and also bridged to lan and after boot everything shows fine under status wireless but supp...
-
- thanks for the effort, ill test it out once i get the pppoe reconnect issue sorted out due to which im stuck on the 3...
-
- implemented
-
06:41 AM pfSense Packages Bug #436: [PATCH] rewrite of tinydns_add_active_leases
- Tested with package version 1.0.6.11 and pfSense-2.0-BETA4-20100804-1929.iso. Looks okay to me so far.
A little hi... -
- all snaps from 31st july to 5th august keep giving this in browser in a endless loop when disconnect button is presse...
-
- all snaps from 31st july to 5th august keep giving this in browser in a endless loop when disconnect button is presse...
08/04/2010
-
- As reported here.
http://forum.pfsense.org/index.php/topic,27197.0.html -
- True, running pfctl -b manually does work, but it's not run properly at failover.
-
- I still have this issue on a August 4 build...
-
- It appeared previously that firewall states would all be gone but states such as: ...
-
- Can you please be more clear what you mean by nat states?
-
- This listed configuration option has been tested and confirmed to work. Test board was running 2.0 BETA3 on a Geode L...
-
02:44 PM Bug #495: USB drive fails to mount during boot
- http://forums.freebsd.org/showpost.php?s=d7af7671c4a56cb50af4c13e2fb7877f&p=91961&postcount=8
It looks like a conf... -
- Don't need the patch, just the loader.conf addition:
kern.cam.boot_delay=10000
-
- Applied in changeset commit:"3b3170d094510f8cdde36a9f24b9ca10b4ea24f4".
-
04:03 PM Bug #757: PPPoE Disconnect button with multiple PPPoE interfaces
- Hi there - I can certainly do this, which log do you want/need? (which file catches the interface/gateway issue?)
... -
- Applied in changeset commit:"4cea5cf8ab9b06ccd414a783c1b7cb40e5961bf4".
-
- I could reproduce this on a vm with 2.0 i have though i will update it again and post here.
-
- to further narrow this down, i upgraded to the 30th july snap (pfSense-2.0-BETA4-1g-20100730-1433-nanobsd-upgrade.img...
08/03/2010
-
- Ermal: at your request from earlier, I can't duplicate this on 1.2.3.
Though I can't duplicate it on 2.0 either, ... -
- Sorry, pisted the same file twice. Here is rules.debug_ko with the rule enabled
-
- rules.debug_ok with the rule disabled and dns lookup working
rules.debug_ok withe the rule enabled and the dns looku... -
- can you please post the contents of the file /tmp/rules.debug before and after the problem shows itself.
-
-
- Applied in changeset commit:"7ed9c6acdf2435ea95d83b09fb87b6ef8b279b37".
-
-
- Applied in changeset commit:"6441fa9a5f8fa303469822aa3e79b863de1ab9c5".
-
-
- Line 2260 needs a "=" after firewall_shaper.php?interface.
http://redmine.pfsense.org/projects/pfsense/repository/... -
- Yes, it works on reboot, and even on NanoBSD.
-
- did u try rebooting with the static arp enabled and ur client machines ip and mac already in list and that too on the...
-
- Then wait for the next update and try again to disable/enable the service. It works fine for me now in my VM setup. I...
-
- all my entries have been with ip and mac and for me if i then enable static arp, every1 is locked out so for me its b...
-
- It works fine, as intended, though I was incorrect on one point: You must specify IP addresses for clients listed in ...
-
- Yes, but it was always enabled in the GUI - only now it's enabled in the GUI and at boot time. Previously, it was onl...
-
- its not the gui but its the patch itself, if static arp is enabled,e very1 is locked out, no1 can communicate with th...
-
- There shouldn't be any difference when saving from the GUI, but I'll look into it.
The firewall's MAC doesn't need... -
- after the patch, things have gone much worse, as soon as i go to dhcps erver and tick static arp and click save, ever...
-
- Is this intended for clients or for the firewall itself?
Clients using the DNS forwarder wouldn't hit any of these... -
- Possibility to add additional options in resolv.conf:
* timeout:n (default 5)
* attempts:n (default 2)
* maybe oth... -
- i tried to trace the changes between 22nd july to 31st july but wasnt able to find whats causing this pppoe reconenct...
-
02:15 AM Bug #682: WAN traffic graph is broken with MLPPP
- I recently upgraded from 2-line mlppp to 4-line mlppp and the WAN:outgoing graph is still reading double. I partly ex...
-
- yes that's all possible. You can do that manually as well, with floating rules. It's definitely something we should c...
-
- > It uses the gateway specified on the selected interface, it's a way to associate DNS servers with a particular ISP....
Also available in: Atom