Project

General

Profile

Activity

From 09/01/2010 to 09/30/2010

09/30/2010

08:59 PM Bug #929: Remote syslog not working
problem seems to be when only ticking the checkbox for "Everything"
if i check all the checkboxes I get:...
orangepeel beef
07:09 PM Bug #929: Remote syslog not working
... orangepeel beef
07:06 PM Bug #929: Remote syslog not working
Can you also send me your syslog.conf ?
Thanks,
Pierre
Pierre POMES
06:19 PM Bug #929: Remote syslog not working
they are all clustered though, Chris are your pfsense's clustered as well? orangepeel beef
06:18 PM Bug #929: Remote syslog not working
Have unchecked and rechecked enable remote syslog multiple times, have removed the syslog server and put in a differe... orangepeel beef
06:16 PM Bug #929: Remote syslog not working
Mine is :... Pierre POMES
06:12 PM Bug #929: Remote syslog not working
<syslog>
<reverse/>
<nentries>100</nentries>
<logall/>
...
orangepeel beef
06:02 PM Bug #929: Remote syslog not working
Mine looks like this. ... Chris Buechler
06:00 PM Bug #929: Remote syslog not working
I also confirm this is working in recent snapshots.
Can you give the syslog part of your /cf/conf/config.xml file ...
Pierre POMES
04:00 AM Bug #929: Remote syslog not working
I'm using the version 2.0-Beta4 Wed. sep 29 12:15:10 EDT 2010
The logging on remote server work fine.
May be yo...
Tahar GUEBLI
12:00 AM Bug #929: Remote syslog not working
I was previously running the Aug 28 build, and it existed there. Updated to latest build today and still there. orangepeel beef
04:52 PM Revision 3640c567: Ticket #921. Actually reconfigure apinger in case of newip event because it might impact a previous down event.
Ermal LUÇI
04:04 PM Revision a02708b1: Make this code more readble and clear on what it does.
Ermal LUÇI
03:58 PM Revision ccea4c49: Remove legacy code for static routes.
Ermal LUÇI
03:54 PM Revision 8d29cef4: Oops fix long standing variable name mistype.
Ermal LUÇI
03:53 PM Revision dd88e65a: Remove legacy code
Ermal LUÇI
03:49 PM Revision a63d867a: Catch up with gateway changes on static routes.
Ermal LUÇI
03:42 PM Revision dd8b859e: Remove support for this legacy code. The upgrade path handles this.
Ermal LUÇI
03:39 PM Revision 11d2be54: Revert previous change to enter a hidden value when interface is disabled. GHNB broke this on revision 58611e3a1da07a33c6cf65401ad3edf278190e75 and it does not make sense.
Ermal LUÇI
03:20 PM Revision f5d3a5ce: Do not support anymore an ip in the 'gateway' section of an interface.
Ermal LUÇI
03:20 PM Revision bc50b332: Remove forgotten code.
Ermal LUÇI
03:14 PM Revision bb849003: Initialize variable properly. Handle the case when the interfaces select box is disabled and it will not be posted(Reported-by: ghnb
Ermal LUÇI
12:53 PM Bug #921 (Feedback): Gateway monitoring stops after interface goes down
Ermal Luçi
12:20 PM Revision 9fd19334: Don't refer to non-existent variable.
Reported in forum http://forum.pfsense.org/index.php/topic,28643.0.html Marcus Brown

09/29/2010

09:53 PM Bug #929: Remote syslog not working
this regressed somewhat recently Chris Buechler
09:32 PM Bug #929 (Resolved): Remote syslog not working
I have configured syslog to send to a remote host but it is not sending any traffic. Doing a tcpdump shows no syslo... orangepeel beef
08:06 PM Bug #928 (Resolved): pfSense freezes during boot if DHCP client interface doesn't get a reponse from DHCP server
Reported here:
http://forum.pfsense.org/index.php/topic,28501.msg148698.html#msg148698
I can confirm I've seen sa...
Marcus Brown
07:53 PM Bug #927 (Closed): 3G modem rendered un-usable by forced cycling of connection
My 3G modem (USB Mercury connect) gets locked up when function interface_configure is called and the modem is already... Marcus Brown
05:09 PM Revision 5b3f9124: Fix state sorting
Jim Pingle
02:00 PM Revision 433ebfab: Update serviceproviders.xml to a newer version
Vinícius Coque
09:09 AM Revision 295764d5: Clean up Firewall: NAT: 1:1: Edit page.
- Change order of fields to be more consistent with the old order and the order shown on the rule listing, placing mo... Erik Fonnesbeck
06:38 AM Revision 6fa73745: Fix input validation with "no rdr" for ticket #570
Erik Fonnesbeck
06:05 AM Revision 44374c0a: Hide redirect and filter rule association fields when "no rdr" is checked. Ticket #570
Erik Fonnesbeck
05:29 AM Revision 3e74107e: Unhide the source port options on firewall rules when they are not at the defaults.
Erik Fonnesbeck
04:31 AM Revision 70a9056f: Revert "Shows source ports when they are already defined" - this only made it so they were never hidden.
This reverts commit d886ebd6d438cf9b397face67ed4f254de661a94. Erik Fonnesbeck
04:15 AM Revision 96160768: Simplify the logic here so that it only uses this conditional expression once.
Erik Fonnesbeck
04:02 AM Revision 727b04df: Revert "Remove unnecessary JS variable" - it had a purpose.
This reverts commit ec325889dc8a9a9ee4476bea6cb17cc4b63e28fe. Erik Fonnesbeck
03:02 AM Bug #570 (Feedback): When "No RDR" is checked on a port forward, hide fields that do not apply.
Erik Fonnesbeck

09/28/2010

10:39 PM Revision 59fe0814: Define and explain $aliases as a global.
Jim Pingle
10:31 PM Revision 8d1cd2db: Use a glob here instead of a shell exec.
Jim Pingle
10:29 PM Revision 2f13b10c: Carry aliases around as a global so that discover_pkg_rules() can see aliases/macros, otherwise package rules that reference aliases/macros will never properly pass verification.
Jim Pingle
03:13 PM Revision 25fec9b3: Test before working on what could be an empty value, otherwise it ends up set and causing an unexpected duplication. Fixes duplicate groups when editing users, as reported here: http://forum.pfsense.org/index.php/topic,26612.0.html
Jim Pingle
01:19 PM Revision 43652f2f: Merge remote branch 'mainline/master' into inc
Renato Botelho

09/27/2010

10:48 PM Todo #881: Passive FTP over pfsense
I too see this issue. No passive FTP out from the LAN->WAN works. I just updated to Mon Sep 27 04:12:19 EDT 2010 fro... Mike McLaughlin
04:11 AM Bug #922: Traffic Shaper
The problem persist on filter reload
after an upgrade to latest snapshot i have this problem:
Acknowledge All ...
Andrea Cutelle'
02:58 AM pfSense Packages Bug #925 (Rejected): Open VM Tools install
duplicate of #844 (it's the same, it's broken, we're aware) Chris Buechler
02:51 AM pfSense Packages Bug #925 (Rejected): Open VM Tools install
- responds to Bug #844 but its not the same
- there was 2.0 BETA Snapshots with the possibility to install open vm t...
Falk Nisius

09/26/2010

08:05 PM Revision 7eab3309: Do not synchronize ip alias. Ticket #882
Pierre POMES
07:59 PM Revision f44f8eb5: Properly handle reinitializing of variables on the next loop. Reported-by: http://forum.pfsense.org/index.php/topic,28636.0.html
Ermal LUÇI
06:49 PM Bug #495: USB drive fails to mount during boot
Had same problem mounting root from USB DVD drive with pfSense-2.0-BETA4-20100925-1629. Worked fine with pfSense 1.2.... Anonymous
04:07 PM Bug #882 (Feedback): IP aliases should not sync
The line to prevent synchronization (as for "proxyarp") was missing, probably because "ipalias" VIP type was added in... Pierre POMES

09/25/2010

09:07 AM Revision 49f61a1c: Rename to pass-through credits and improve descriptions.
Erik Fonnesbeck
08:36 AM Revision 8015e67b: Separate this control structure from the one before it, change the order, and rename the function.
Erik Fonnesbeck
06:49 AM Revision e65d1a98: Display the correct state when the new checkbox has been checked.
Erik Fonnesbeck
05:49 AM Bug #923 (Closed): Incoming traffic marked with diffserv goes to wrong queue
we're not investigating any shaper issues on 1.2.x as it's completely rewritten in 2.0. If you have issues on 2.0, pl... Chris Buechler
05:09 AM Revision 03552507: Add an option for allowing clients to pass through the captive portal a limited number of times before requiring login.
Erik Fonnesbeck
04:07 AM Bug #922: Traffic Shaper
Hi, after an ugrade to version: 2.0-BETA4 (i386)
built on Fri Sep 24 14:30:24 EDT 2010
there are many problem o...
Andrea Cutelle'

09/24/2010

11:12 PM Bug #903 (Closed): Login problem
Chris Buechler
11:10 PM Bug #903: Login problem
Ok. It appears to be a USB problem, I moved pfSense to the hard disk, no problem for the time being Ricardo Ramirez R.
11:07 AM Bug #729: if_bridge unpredictable filter interface selection
Seeing something different, but similar with a bridge configuration. It appears now that the arp cache is leaking int... Derek Buttineau
10:08 AM Bug #923 (Closed): Incoming traffic marked with diffserv goes to wrong queue
I have one installation of pfsense 1.2.2 and one of pfsense 1.2.3 with a similar configuration:
- same voip provid...
Silvio Massina
08:46 AM Bug #320 (New): Using special characters (e.g. åäö) in certificate "Descriptive name" breaks entire WebGUI
This is still a problem for sysctl tunables. For some reason their description field is desc and not descr, so they a... Jim Pingle
08:10 AM Bug #922 (Closed): Traffic Shaper
hi, 2.0-BETA4 (i386)
built on Thu Sep 23 14:10:46 EDT 2010
FreeBSD 8.1-RELEASE-p1
with traffic shaper enable w...
Andrea Cutelle'
06:26 AM Revision a36e98ff: Fix description for upload of logout page.
Erik Fonnesbeck
06:03 AM Revision b6494b87: Restore this code so the redirect after logging into the captive portal will work again. Ticket #918
Erik Fonnesbeck
05:40 AM Revision 6991e1a6: Fix the contents of the captive portal logout popup. Fixes #836
Erik Fonnesbeck
03:09 AM Bug #920: Routing groups don't change monitor IP address when PPPoE reconnects
Same code is causing this problem as #919. Marcus Brown
03:07 AM Bug #919: dynamic gateway handling is broken
I'm working on this issue. Marcus Brown
02:13 AM Bug #918: CP redirection URL and logout on popup don't work
I'm not quite sure what you mean for that second part. The option for the logout popup is unchecked by default. Erik Fonnesbeck
02:07 AM Bug #835 (Feedback): Captive portal non redirecting correctly when logout popup is enabled
This was related to #836, so it should also be fixed. Erik Fonnesbeck
01:40 AM Bug #836: Captive portal logout popup windows doesn't disconnect the user
Applied in changeset commit:"6991e1a60d4475d84660376f26f07735f8cbf67f". Erik Fonnesbeck

09/23/2010

10:59 PM Bug #921 (Resolved): Gateway monitoring stops after interface goes down
2.0-BETA4 Wed Sep 8 05:47:43 UTC 201
Further background info in Bug #920
1) Set WAN monitor IP to 4.2.2.2
2) P...
Andreas van dem Helge
10:46 PM Bug #920 (Resolved): Routing groups don't change monitor IP address when PPPoE reconnects
When using a PPPoE connection with dynamic IP address and dynamic gateway which both change each time a session is es... Andreas van dem Helge
08:40 PM Revision 5eb03383: Add additional acceptable version strings.
Jim Pingle
05:03 PM Revision a0995b8d: Fix Status > Services display and sorting, plus some HTML formatting and cleanup.
Jim Pingle
04:51 PM Revision 313827fd: Add a note to the Gateway Groups page reminding users that they must be used in firewall rules, and don't work just by defining the groups. Also, add thead/tbody/tfoot.
Jim Pingle
03:49 PM Revision 838e27bf: Pass args to openssl_pkey_new() so it gets the key length too. Fixes #905
Jim Pingle
02:02 PM Bug #919: dynamic gateway handling is broken
The monitor IP should never be associated with an interface, sounds like there are still bits of that issue around (i... Chris Buechler
07:05 AM Bug #919: dynamic gateway handling is broken
This is still partially broken. After my commit, it saves properly, but you can't unset(delete) the monitor ip becaus... Marcus Brown
06:00 AM Bug #919 (Feedback): dynamic gateway handling is broken
Applied in changeset commit:"58611e3a1da07a33c6cf65401ad3edf278190e75". Marcus Brown
05:55 AM Bug #919: dynamic gateway handling is broken
I just tested saving a monitor ip on the OPT3 interface on the monitorip field did end up in the [interfaces][opt] se... Marcus Brown
04:19 AM Bug #919 (Resolved): dynamic gateway handling is broken
2.0 BETA4, built Sept22, on an ALIX board with a 3G PPP WAN connection defined.
1. I've been reading of the code t...
Marcus Brown
11:50 AM Bug #905 (Feedback): OpenVPN certificate manager uses incorrect key length
Applied in changeset commit:"838e27bf24f54735795387800ce2d43662f3cc81". Jim Pingle
11:47 AM Bug #905: OpenVPN certificate manager uses incorrect key length
Looks like the key length wasn't also being passed to openssl_pkey_new. I'll be committing a fix shortly. Jim Pingle
11:38 AM Bug #905: OpenVPN certificate manager uses incorrect key length
This can also be verified by using standard OpenSSL commands:... Jim Pingle
11:02 AM Revision b256213d: Spelling of 'Access'.
Warren Baker
10:44 AM Bug #910: CARP+Bridging+NAT can lead to "freeze"/"lockup"
Another report here:
http://forum.pfsense.org/index.php/topic,28557.0.html
Jim Pingle
10:00 AM Revision 315c6c1c: Merge branch 'master' of rcs.pfsense.org:pfsense/mainline
Marcus Brown
09:57 AM Revision 58611e3a: Fixes #919 by properly saving <gateway> field as "dynamic"
` Marcus Brown
09:56 AM Revision db3791e9: DNSWatch core dumps when it encounters white spaces.
Warren Baker

09/22/2010

08:39 PM Revision 9ab9b745: Make safe_mkdir() create directories recursively
Renato Botelho
08:13 PM Revision 567702bb: Initialize variable to possibly prevent hard caching of content.
Ermal LUÇI
07:15 PM Revision b5eeef07: Restart dnsmasq first because dyndns might depend on it. Possibly these all should be sent through evnets to check_reload_status
Ermal LUÇI
07:12 PM Revision 58706991: Fixup multiple dyndns updates with interface parameter passed. Reported-by: Blumeatt http://forum.pfsense.org/index.php/topic,27704.15.html
Ermal LUÇI
06:47 PM Revision 6a94b64c: Revert "comment out line that's hanging dhclient for now"
This reverts commit 53a37b66d343682700ff49d595b3ea1310ec320f. Ermal LUÇI
05:34 PM Revision 53a37b66: comment out line that's hanging dhclient for now
Chris Buechler
05:12 PM Revision f3239b2d: unbreak rc.bootup
Chris Buechler
04:42 PM Revision a147b1e0: Use pkill to avoid an error if the process isn't already running. This was a cosmetic issue only, cron was not yet running when this happened at bootup, it's started later in the boot process. Fixes #902
Jim Pingle
04:33 PM Bug #918 (Resolved): CP redirection URL and logout on popup don't work
When setting a redirection URL in CP, it doesn't do anything. After logging in, it just returns to the login page aga... Chris Buechler
04:06 PM pfSense Packages Bug #908 (Resolved): Pfsense 2.0 beta4 built on Sun Sep 19 00:17:31 EDT 2010
Chris Buechler
03:32 PM Revision 838feb14: If we fail to send an event to check_reload_status consider its not running and try restarting it.
Ermal LUÇI
03:27 PM Revision fbd5fc52: Bring gitsync to the new check_reload_status behaviour.
Ermal LUÇI
02:07 PM Revision 7b2fdac4: Properly check and set "Prefer older IPsec SAs" setting in the config and its associated sysctl. Move setting the sysctl to its own function to avoid code duplication.
Jim Pingle
12:45 PM Bug #902 (Feedback): configuring cron issue
Applied in changeset commit:"a147b1e0432e2fa7ba831668d4f0ff95351179b8". Jim Pingle
12:00 PM Bug #917 (Feedback): Changing WebGUI port does not restart lighttpd with new settings
This should be fixed.
It was a forgotten switch to new check_reload_status world order.
Test newer snapshots.
Ermal Luçi
09:38 AM Bug #917 (Resolved): Changing WebGUI port does not restart lighttpd with new settings
When you change the WebGUI port, the setting does save properly but lighttpd's config is not rewritten. If you then c... Jim Pingle
10:07 AM Bug #907 (Feedback): Prefer older IPsec SAs doesn't change when checked/unchecked
Should be fixed with this commit: https://rcs.pfsense.org/projects/pfsense/repos/mainline/commits/7b2fdac49b28d638a38... Jim Pingle

09/21/2010

08:27 PM Bug #916: OpenNTPd Does Not Operate
That is correct. This is not documented: http://69.64.6.24/index.php/NTP_Server_(OpenNTPD)
How can I get access to...
Andreas van dem Helge
08:19 PM Bug #916 (Rejected): OpenNTPd Does Not Operate
It works fine. It will not provide responses immediately, you have to wait an hour or two after it launches until it'... Chris Buechler
03:05 PM Bug #916 (Rejected): OpenNTPd Does Not Operate
The OpenNTPd server does not operate. There is no option to install further NTP services in System > Packages. There ... Andreas van dem Helge
08:08 PM Revision cd9f13e0: Properly check if this is in use.
Jim Pingle
08:06 PM Revision 57d1853e: Another CRL delete fix.
Jim Pingle
07:56 PM Revision ad8df715: Fix delete action for CRLs, and other cleanup.
Jim Pingle
07:39 PM Revision 6db02381: Allow selecting an OpenVPN Server CRL if we are in an SSL mode.
Jim Pingle
07:18 PM Bug #555: Certificate Revocation List (CRL) missing from Certificate Manager
Also, as a note to myself: It still needs upgrade code to handle existing CRLs Jim Pingle
03:48 PM Bug #555: Certificate Revocation List (CRL) missing from Certificate Manager
It's still a work in progress, but at the moment you can at least import an external CRL and assign it to an openvpn ... Jim Pingle
07:11 PM Revision c492948a: Don't list a cert count for external CRLs since we can't tell what they are.
Jim Pingle
07:06 PM Revision 3d57d2d5: Add CRL manager tab to other Cert Manager pages
Jim Pingle
07:05 PM Revision 81bfb231: Add a work-in-progress CRL manager page
Jim Pingle
07:01 PM Revision fb3f1993: Some fixes/enhancements/cleanup
Jim Pingle
04:01 PM pfSense Packages Bug #908: Pfsense 2.0 beta4 built on Sun Sep 19 00:17:31 EDT 2010
Hi, I installed the 2.0-BETA4 (i386) built on Mon Sep 20 22:40:28 EDT 2010
the captive portal works correctly no...
Andrea Cutelle'
08:33 AM pfSense Packages Bug #908 (Feedback): Pfsense 2.0 beta4 built on Sun Sep 19 00:17:31 EDT 2010
Can you try the latest snapshot to see if this is working now?
It looks like the missing modules that were causing...
Jim Pingle
03:48 PM Bug #915 (Rejected): OpenNTPd Does Not Operate
Jim Pingle
03:06 PM Bug #915: OpenNTPd Does Not Operate
This is a duplicate of bug #916 Andreas van dem Helge
03:00 PM Bug #915 (Rejected): OpenNTPd Does Not Operate
Andreas van dem Helge
11:16 AM Revision d1a0d9d0: Ensure that the value is returned as 'selected' when using a multiple select list.
Warren Baker
10:48 AM Revision a6419492: Fix white spaces
Warren Baker
10:27 AM Revision 4ff99fcb: If column['fieldname'] is a description then change html class to listbg to conform to rest of GUI description table columns.
Warren Baker
09:48 AM Bug #912: PPTP/PPPoE/L2TP VPN logs missing
First, you're referring to PPTP server right?
I'm pretty sure they're supposed to be under the "VPN" tab of the Syst...
Marcus Brown
01:50 AM Bug #912 (Resolved): PPTP/PPPoE/L2TP VPN logs missing
The PPP log migration I believe targeted the PPTP logs as well. Regressions:
1) It's not logging PPTP at all that...
Chris Buechler
08:33 AM Bug #914 (Closed): Captive Portal Problem
Duplicate of #908 (It's a builder modules issue) Jim Pingle
06:26 AM Bug #914 (Closed): Captive Portal Problem
Captive portal in 2.0-BETA4 (i386)
built on Mon Sep 20 05:47:53 EDT 2010
FreeBSD 8.1-RELEASE
does not work. the...
Andrea Cutelle'
04:00 AM Feature #913: Add option to disable/enable beep sounds permanently via pfsense GUI
You can just rm beep.sh, and if you add that to an <earlyshellcmd> tag so it's done on every boot, upgrades won't mat... Chris Buechler
03:39 AM Feature #913 (Resolved): Add option to disable/enable beep sounds permanently via pfsense GUI
Hi all,
I used m0n0wall for years, great piece of software. Smooth and SILENT! But now I changed to pfsense using so...
Willy Tenner

09/20/2010

10:42 PM Bug #911 (Resolved): Need option to disable state killing on WAN failure
The addition to kill states when a WAN goes down is going to create fallout in scenarios where it needn't. Especially... Chris Buechler
07:36 PM Revision 7773b868: Make OpenVPN client list sortable.
Jim Pingle
07:29 PM Revision 80fa045a: Properly segment the OpenVPN server list table so it will sort properly.
Jim Pingle
03:58 PM Revision af799b48: Fix write_rcfile() declaring $rcfileprefix as global and touching rcfile before check if it is writable
Renato Botelho
03:10 PM Bug #910 (Resolved): CARP+Bridging+NAT can lead to "freeze"/"lockup"
As reported by a user here http://forum.pfsense.org/index.php/topic,28442.0.html (And experienced by myself last week... Jim Pingle
02:57 PM Revision 389c778e: Update wizard files for setup wizard to write proper config for current ppp architecture.
I also allowed selection of physical interface from the wizard screen. This is crucial
because if the user has the WA...
Marcus Brown
08:25 AM pfSense Packages Bug #908 (Resolved): Pfsense 2.0 beta4 built on Sun Sep 19 00:17:31 EDT 2010
Captive portal don't work correctly. as if it were not enabled.
Andrea Cutelle'
06:54 AM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
this is modified version of status_gateway_groups.php to show correct status of groups.
Ermal, please check and incl...
ivan primus

09/19/2010

08:33 PM Revision 8ad39798: Update (C)
Scott Ullrich
08:31 PM Revision 64183253: Ensure /etc/gettytab is of a sane size and restore from backup + log if it is not
Scott Ullrich
07:20 PM Bug #907 (Resolved): Prefer older IPsec SAs doesn't change when checked/unchecked
As reported here:
http://forum.pfsense.org/index.php/topic,28233.0.html
Toggling the checkbox for Prefer older IP...
Jim Pingle
07:11 PM Bug #906 (Resolved): Orphaned rules from deleted interfaces are still present in config
When you delete a normal interface, the rules are left orphaned in config.xml without an interface tag so there is no... Jim Pingle
06:46 PM Bug #905 (Resolved): OpenVPN certificate manager uses incorrect key length
Submitted to me via e-mail from "warhol" when the DB was having issues:
Problem: Cert Manager only produces 1024bi...
Jim Pingle
05:50 PM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
I recreated gateway groups and can confirm that there is still issue with status of gateways in group. Status of each... ivan primus
05:03 PM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
As of 18.09 snapshot I can confirm that this issue is resolved. Dynamic gateways are ok on upgrade / reboot / reconnect ivan primus
05:25 PM Todo #890 (Closed): Repository link doesn't work in yours bugtracker.
Fixed now. Jim Pingle
05:07 PM Revision effd2ecd: Fix the gateway status widget ajax update when there is loss/day.
Jim Pingle

09/18/2010

08:08 PM Feature #904 (Resolved): Enhance OpenVPN interface assignment integration
It would be nice if a couple things were done to improve how OpenVPN interfaces behave when assigned as a client inst... Jim Pingle
09:23 AM Bug #903 (Closed): Login problem
Warning: session_start(): open(/var/tmp//sess_4b5b8b2ddfbdf387ab78a29bf24b3bec, O_RDWR) failed: Input/output error (5... Ricardo Ramirez R.
02:44 AM Bug #902 (Resolved): configuring cron issue
during boot of the nanobsd on alix, all snaps after 13th September till date have this issue, during the boot it give... Bipin Chandra

09/17/2010

02:29 PM Revision 3c3ba8f0: Correct typo. Spotted by: wagnoza(IRC)
Ermal LUÇI
01:38 PM Revision b746dc61: on newip event reload the static routes for that interface because on dynamic gateways the ip might have changed. While here make sure the interface argument is repsected on system_routing_configure() and use send_event to reconfigure an interface to aleviate a possible race.
Ermal LUÇI
01:27 PM Revision b8292903: Fix braindead code!
Ermal LUÇI
01:02 PM pfSense Packages Bug #901: Squid "Don't filter for RFC1918" doesn't work for PPTP (patch included)
Actually, one might want to simply have the "$ifaces" chunk include the pptp interface alias, to simplify this. Overand IRC-Priv
01:01 PM pfSense Packages Bug #901 (Closed): Squid "Don't filter for RFC1918" doesn't work for PPTP (patch included)
**NOTE** this bug is filed against / patch is built against 2.7.8_1 - so if this is a dupe of a fixed bug, I apologiz... Overand IRC-Priv
03:37 AM Revision e4d7a064: Prevent a foreach on what might not be an array. Fixes #900
Jim Pingle

09/16/2010

11:51 PM Bug #900: OpenVPN Wizard: Server Certificate Wizard
Ok. It worked without accents.
Thank you very much!
Ricardo Ramirez R.
11:45 PM Bug #900: OpenVPN Wizard: Server Certificate Wizard
That is possible. I do not believe that extended characters are supported in openssl certificates very well (or at le... Jim Pingle
11:42 PM Bug #900: OpenVPN Wizard: Server Certificate Wizard
May be is an accent in the city, I wrote Toncancipá Ricardo Ramirez R.
11:40 PM Bug #900 (Feedback): OpenVPN Wizard: Server Certificate Wizard
Applied in changeset commit:"e4d7a06478f0c023a87fadc6f1c0fed388015626". Anonymous
11:38 PM Bug #900: OpenVPN Wizard: Server Certificate Wizard
Did you leave some fields blank when creating the certificate?
I added a check that will prevent a foreach on an e...
Jim Pingle
11:25 PM Bug #900 (Resolved): OpenVPN Wizard: Server Certificate Wizard
Creating a Server Certificate with Wizard
2.0-BETA4 (i386)
built on Wed Sep 15 09:52:13 EDT 2010
FreeBSD 8.1-R...
Ricardo Ramirez R.
10:42 PM Revision 86dcdfc9: Add as a search domain the domains suggested by dhcp.
Ermal LUÇI
10:28 PM Revision 9d1f614c: Fix typo.
Ermal LUÇI
10:09 PM Revision 968b84bc: Revert "Add Supported by BSD Perimter field"
This reverts commit 5df6a315c4b995e5a09e555548dc6d04b316fea3.
Conflicts:
usr/local/www/pkg_mgr.php
...
Chris Buechler
10:08 PM Revision bb8f919b: We might not have any defaultgw selected and consider wan as default. Make sure to catch this so GUI works and other parts that depend on defaultgw detection.
Ermal LUÇI
09:40 PM Revision 088ce869: Fix this function's logic/variable tests.
Jim Pingle
09:32 PM Revision 7b757d1b: Add some safety belt checks so we don't try to update an imported crl
Jim Pingle
08:57 PM Revision c5f010aa: Add some CRL support functions, not active or used in the GUI yet.
Jim Pingle
05:44 PM Revision 999111cb: Make it possible to show default against dynamic gateway names in the GUI.
Ermal LUÇI
05:27 PM Revision bc0fd36f: Do not suck in the file but actually execute it.
Ermal LUÇI
05:26 PM Revision 2f36abb8: Display delete(x) buttons.
Ermal LUÇI
05:23 PM Revision ea939fc3: Oops bring back this code too.
Ermal LUÇI
05:14 PM Revision 0c4846ff: Actually this part should not have been committed at all.
Ermal LUÇI
05:09 PM Revision 5657aa95: Fix gettext! Needed here?!
Ermal LUÇI
05:06 PM Revision 6c4988f7: Whitespace fixes.
Ermal LUÇI
05:04 PM Revision 8af8524e: Whitespace fixes.
Ermal LUÇI
05:01 PM Revision 99c61352: Bring code up to speed with latest world.
Ermal LUÇI
04:49 PM Revision ef05ae5f: Actually display a the right class for static gateways. Also fix whitespace
Ermal LUÇI
04:31 PM Revision 7ec17767: Show status as Gathering data rather than unknown since the later seems to scary people!
Ermal LUÇI
03:27 PM Revision ad9db2a9: Merge remote branch 'mainline/master' into inc
Conflicts:
etc/inc/filter.inc
Renato Botelho
01:50 PM pfSense Packages Bug #897 (Closed): Missing DNS record types SRV SPF DOMAINKEYS
Currently there is no method of publishing required SIP SRV records for a domain on pfsense.
Same for SPF/Domainkeys...
Sadara Kael
01:43 PM Feature #896 (Needs Patch): Add PPPoUDP/PPPoTCP servers/links
It would seem only a minor effort to add PPPoTCP/PPPoUDP support to pfsense, as all the framework is already there.
...
Sadara Kael
01:38 PM Feature #895 (New): PPP subsystem MPPE/MPPC support
mpd5 and kernel are missing M$ MPPC/MPPE modules and configureation options.
This would benefit all mpd5 services ...
Sadara Kael
01:31 PM Feature #894 (Resolved): Common names in certificate generator
The certificate generator is missing the ability to add Subject Alternative Names
A proposed layout graphically woul...
Sadara Kael
08:40 AM Revision 97e6256f: Add support for an automatic merge list to gitsync, properly escape user-supplied parameters, and improve error handling a bit.
Erik Fonnesbeck
05:47 AM Revision 9bc8788a: Use a list that includes WAN and LAN here rather than only OPT.
Erik Fonnesbeck
05:15 AM Revision 8735afe8: Return list with WAN and LAN interfaces in the configured order rather than giving special treatment, as is already done with the OPTx interfaces.
Erik Fonnesbeck
04:45 AM Revision 14f49fd0: Revert "Reorder the way this list (get_configured_interface_list) is generated to make it more beautiful."
This reverts commit 144d0e793de61366340758b28f169c3afeeba922. Erik Fonnesbeck
03:49 AM Revision be56e294: Merge branch 'master' of rcs.pfsense.org:pfsense/mainline
Marcus Brown
03:45 AM Revision 144d0e79: Reorder the way this list (get_configured_interface_list) is generated to make it more beautiful.
I know you guys said don't bother, but it's just cosmetic, and it took 10 seconds. Marcus Brown

09/15/2010

09:38 PM Revision ecb08c6a: Write status file every 5seconds.
Ermal LUÇI
08:34 PM Revision 886cb1ab: correct text to properly describe reject, this references old, wrong behavior
Chris Buechler
08:11 PM Revision 739c9efd: Send a log entry when openvpn resync is called.
Ermal LUÇI
07:47 PM Revision 04c528e7: Ticket #876. Actually the event to send is interface newip $ip rather interface configure! also use the fact that now we have a /tmp/$if_defaultgw rather than relying in route get default which might block.
Ermal LUÇI
07:24 PM Revision 0c452870: Reload dns and interface properly on dynamic types.
Ermal LUÇI
06:51 PM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
It works even with alternate monitor ip on pppoe (static route is correctly added).
Thing that I noticed on manual r...
ivan primus
06:24 PM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
Ermal, on reboot, apinger is not started. There is apinger proces - ps auxw.
It apears atfer I edit some gw
root ...
ivan primus
06:03 PM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
testing latest snapshot 15.09 with latest commits by Ermal not included in latest snapshot.
Can't test post upgrade ...
ivan primus
03:08 PM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
Latest commits should fix issues reported. Ermal Luçi
11:53 AM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
I wrote a bug #889, but it was closed as a duplicate of this bug.
But this problem is relevant for latest snapshot...
Mike Stupalov
06:49 PM Revision d8bf779b: Oops this is meant to add members not override them.
Ermal LUÇI
06:46 PM Revision 3befe730: Cleanup code.
Ermal LUÇI
02:12 PM Feature #893: Re-orderable IPsec
that's not true of static routes, order has nothing to do with routes, most specific matching route wins. Chris Buechler
02:09 PM Feature #893 (Closed): Re-orderable IPsec
Allow IPSec tunnel order to be changed much like Firewall Rules can be re-ordered. The purpose is to give one tunnel ... Larry Titus
01:48 PM Bug #892: loader.conf.local changes lost after nanobsd upgrade
If there was such a mechanism, it would probably need to be synced to the other slice after an upgrade but before the... Erik Fonnesbeck
07:41 AM Bug #892: loader.conf.local changes lost after nanobsd upgrade
I thought somewhere we had a post-upgrade script that ran after the image was applied but I may be thinking of a full... Jim Pingle
02:21 AM Bug #892 (Resolved): loader.conf.local changes lost after nanobsd upgrade
Because of the way nanobsd functions, the usual method of putting loader.conf changes into loader.conf.local doesn't ... Chris Buechler
01:04 PM Revision c9cb32c4: Do not overwrite the redirurl parameter already taken care of.
Ermal LUÇI
12:37 PM Revision 5556f3a1: Do not use the \ based list for modules because it treats even the comments as modules. Simplify logic and make sure php.ini exists in both paths when needed.
Ermal LUÇI
12:32 PM Revision cf6a1f80: Change windows.onLoad event to rely on DOM readiness instead, for enablechange() function. Tested on Safari, Chrome, FFox and IE7+8 on windows and OSX.
Warren Baker

09/14/2010

08:32 PM Revision 01f1b601: Ticket #867. Flush the cache when restarting apinger and also when rc.newwanip is called. also restart apinger earlier in to be on latest address asap.
Ermal LUÇI
07:31 PM Revision 0c8cdb25: Ensure $value is unset so that subsequent rowhelper fields, without <value/> don't have a previous $value set.
Warren Baker
05:51 PM Revision b9d8c75d: Add Save + Cancel buttons to be below advanced features section if advanced features is enabled.
Warren Baker
04:19 PM Bug #891 (Resolved): Errors When adding or editing an alias on Pfsense 2.0
The examples given for 2) while probably a typo is a legit hostname, we can't do anything about that one without bloc... Chris Buechler
08:42 AM Bug #891: Errors When adding or editing an alias on Pfsense 2.0
I've fixed 1) and 3), but 2) will probably be difficult to fix without blocking some legitimate hosts, since this doe... Erik Fonnesbeck
03:11 AM Bug #891: Errors When adding or editing an alias on Pfsense 2.0
I see what the problem is with 1). The delete button is currently an image button in the form, which I think is trea... Erik Fonnesbeck
02:48 AM Bug #891: Errors When adding or editing an alias on Pfsense 2.0
The problem with 1) seems to be that the delete button is set as the default button. It deletes the first entry if y... Erik Fonnesbeck
02:36 AM Bug #891: Errors When adding or editing an alias on Pfsense 2.0
Submitted a 2nd patch for review dev@pfsense.org.
robert zelaya
02:34 AM Bug #891 (Resolved): Errors When adding or editing an alias on Pfsense 2.0
File: firewall_aliases_edit.php
1) pressing enter in the description box deletes the first entry
2) Error corre...
robert zelaya
01:03 PM Revision 88efcf04: Do stricter validation of host names and domain names.
Erik Fonnesbeck
07:59 AM Revision 331a89ca: Fix the delete button and a couple other small errors. Ticket #891
Erik Fonnesbeck
07:32 AM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
I can see for sure that after manual reconnect of pppoe interface, apinger is using old IP as source for ping packets... ivan primus
03:55 AM Bug #843 (Resolved): Interface controls coupling unexpectedly
Chris Buechler
03:48 AM Bug #843: Interface controls coupling unexpectedly
This issue is resolved and can be closed. Marcus Brown
02:43 AM Bug #873 (Resolved): deinstall does not unset package <menu> and <service> tags from /conf/config.xml
robert zelaya

09/13/2010

04:07 PM Revision 1cfb2b77: Simplify logic.
Ermal LUÇI
04:02 PM Revision c65e1e0d: Ticket #876. Actually use the friendly name for the key of the array returned by return_gateways_array() so the dynamic gateway and status pages work correctly.
Ermal LUÇI
01:53 PM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
NOTE: I am testing it on different firewall with almost identical configuration. I can not crash first one.
Using ...
ivan primus
12:00 PM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
This should be ok now.
Since i committed another fix.
Ermal Luçi
12:57 PM Revision f14bd707: Merge remote branch 'mainline/master' into inc
Conflicts:
etc/inc/filter.inc
etc/inc/gwlb.inc
Renato Botelho
05:22 AM Bug #836: Captive portal logout popup windows doesn't disconnect the user
I can confirm the problem with the logout button. Currently I'm using the latest BETA4-2g-20100911-1644-nanobsd Image... Dimitri Roschkowski
02:52 AM Bug #889: Gateway groups not work anymore!
Yes, sorry, did not notice the discussion. Mike Stupalov
02:47 AM Bug #889 (Rejected): Gateway groups not work anymore!
duplicate of issue in #876 Chris Buechler
02:13 AM Bug #889 (Rejected): Gateway groups not work anymore!
After update to the latest snaphot for the September, 11th, all gateway groups have ceased to work.
All traffic goes...
Mike Stupalov
02:40 AM Todo #881: Passive FTP over pfsense
Mike Stupalov wrote:
> Now do not work both types FTP (Active, Passive). :(
Sorry, I have a little deceived.
All...
Mike Stupalov
02:19 AM Todo #881: Passive FTP over pfsense
I update to snapshot:... Mike Stupalov
02:22 AM Todo #890 (Closed): Repository link doesn't work in yours bugtracker.
The link doesn't work: http://redmine.pfsense.org/projects/pfsense/repository Mike Stupalov
01:54 AM Revision 4b4d550a: fix text
Chris Buechler

09/12/2010

09:48 PM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
The commits associated with this ticket have caused a number of issues with dynamic gateways. See here for one:
htt...
Chris Buechler
08:30 PM Revision 7d802394: Disable the 12 hour graph for now, it appears to have defective math.
Seth Mos
04:34 PM Bug #886: RRD graph generation time scaling not written correctly
I've disabled the 12 hour timespan graph for now. I'll have to look into it later. Seth Mos
04:31 AM Bug #888 (Closed): services_dhcp_edit.php - The hostname cannot end with a hyphen according to RFC952
This was already fixed on the 7th of this month. Erik Fonnesbeck

09/11/2010

04:52 PM Bug #888 (Closed): services_dhcp_edit.php - The hostname cannot end with a hyphen according to RFC952
I have two hosts that have hyphens in them (ex abc-host and def-host). When I tried to add them to the static DHCP le... Roop Singh
12:18 PM Revision d92b3311: Fix enablechange() js problem caused by converting print() to echo().
Warren Baker
02:09 AM Bug #886: RRD graph generation time scaling not written correctly
We're seeing this too. Our RRD graphs were fine up until yesterday's release. Jonathan Puddle

09/10/2010

08:35 PM Revision 3a134b53: Fix regular expression to allow 10 for ping count.
Erik Fonnesbeck
07:32 PM Revision c050ecda: Ensure count is valid. Submitted-by: Josh Little
Scott Ullrich
07:30 PM Revision 61ba386b: Ensure count is valid. Submitted-by: Josh Little
Scott Ullrich
10:33 AM Feature #887 (Resolved): Add an option for stricter OpenVPN ssl/tls+user auth checking
Currently, we don't verify that the common name of the certificate matches the username being used for login. This me... Jim Pingle
09:16 AM Bug #636: layer7 not work correctly
I've started to get these today as well. We use the L7 containers.
> ipfw-classifyd: Something went wrong waiting on...
Jonathan Puddle
08:32 AM Bug #883: Renaming gateway doesn't update static routes
Probably not related directly, this is just a case where the old gateway name is still in the config for the static r... Jim Pingle
08:20 AM Bug #883: Renaming gateway doesn't update static routes
I think this issue is releted to #876
There is some gateway naming inconsistency. Sometimes gateway a automaticly n...
ivan primus
07:18 AM Bug #886: RRD graph generation time scaling not written correctly
As discovered in this thread: http://forum.pfsense.org/index.php/topic,27910.msg146548.html#msg146548
The time ren...
Jim Pingle
01:29 AM Bug #886 (Resolved): RRD graph generation time scaling not written correctly
In the latest snapshot as of now, certain RRD graphs cannot be rendered due to negative distance on the time axis (i.... Adam Stylinski
04:01 AM Todo #881: Passive FTP over pfsense
We're still seeing the exact same behaviour (Active FTP works fine, Passive doesn't work) on this snapshot:
2.0-BE...
Jonathan Puddle

09/09/2010

09:25 PM Revision 68f291ff: Ticket #876. Show all gateways even though apinger is not monitoring them, for various reasons, this removes user confusion in the status pages.
Ermal LUÇI
05:29 PM Todo #881: Passive FTP over pfsense
Try latest snapshot should be working ok. Ermal Luçi
07:01 AM Todo #881: Passive FTP over pfsense
We're not using any floating rules, btw. Just trying to allow our users on LAN to access FTP on WAN. Active FTP is fine. Jonathan Puddle
07:00 AM Todo #881: Passive FTP over pfsense
I'm seeing the same thing as Mike using 2.0-BETA4 (i386) built on Mon Sep 6 22:04:59 EDT 2010. Though passive FTP was... Jonathan Puddle
05:25 PM Revision 3d471a14: Ticket #876. Add the ip to the respective files on ppp linkup event so the code of dynamic gateways finds them. Also reorganize/simplify/optimize the apinger config generation code. Do not use that 127.0.0.x hack anymore and avoid loops as much as possible.
Ermal LUÇI
04:40 PM Revision 4b887ef4: Since the OpenVPN management is done via unix socket and not tcp, we no longer need to require the local_port be set in order to activate the daemon.
Jim Pingle
01:19 PM Revision 41d507a5: Reload cron after changes. Submitted-by: robiscool
Scott Ullrich
12:13 PM Feature #885 (Resolved): Show gateway/group IPs on mouseover
It would be nice to show the contents of a gateway or gateway group on mouseover in the firewall rule list view, like... Jim Pingle
12:03 PM Bug #883 (Resolved): Renaming gateway doesn't update static routes
If you rename a gateway, any static route using that gateway loses its association.
Static routes should be checke...
Jim Pingle

09/08/2010

11:37 PM Revision 7eaf04fd: On vpn_pptp.php only unset variables that are set.
Erik Fonnesbeck
08:06 PM Revision e11aa161: Converted all print() statements to echo() and also added 2 new XML tags for packages to create an 'Advanced Features' section.
Tags are <advanced_options/> and <advancedfield/> which when enabled will add the advanced field into the new advance... Warren Baker
05:04 PM Revision 6dcd80af: Check for proper type.
Ermal LUÇI
05:02 PM Revision 41fb483a: Correct typo in file name. Also do not delete users just expire them.
Ermal LUÇI
04:56 PM Revision e5953c68: Use foreach and check for type to avoid errors.
Ermal LUÇI
04:45 PM Revision e8d0903d: Start-up first check_reload_status than call rc.bootup since this is the new world order. This unbreaks booting and removes spurious messages during boot. While here for all binaries use full path for correctnes and avoid any 'strange' issues.
Ermal LUÇI
01:20 PM Revision 8c04b1ae: Merge remote branch 'mainline/master' into inc
Conflicts:
etc/inc/filter.inc
etc/inc/pkg-utils.inc
etc/inc/service-utils.inc
etc/inc...
Renato Botelho
12:49 PM Revision 245da543: Typo: choosen -> chosen
Jim Pingle
11:35 AM Todo #881: Passive FTP over pfsense
Mike, do you have floating firewall rules in use? See issue #863.
I just updated to 2.0-BETA4 (i386) built on Tue...
Jesse Norell
08:12 AM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
NOTE: function setup_gateways_monitor in gwdb.inc - it seems it is not configured to add route to monitor IP of dynam... ivan primus
04:51 AM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
static route created by pfsense to monitor ip of pppoe interface ivan primus
04:49 AM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
Just another question.
The static route you speak about is your static route, created through the gui or the one cre...
Ermal Luçi
05:44 AM Revision 9b485e51: Expand alias for redirect target port and truncate to first port or range if destination port is not that same alias, since the translation port in PF does not accept lists.
Erik Fonnesbeck
04:06 AM Revision 22d323b3: Fix variable name typo in status_services.php and fix return value of is_pid_running. Fixes #877
Erik Fonnesbeck
01:47 AM Revision 392687e5: Fix hyphen validation for host name on Services: DHCP: Edit static mapping page.
Erik Fonnesbeck
01:21 AM Bug #877 (Resolved): Status service OpenVPN
fixed, thanks Chris Buechler
12:20 AM Bug #877 (Feedback): Status service OpenVPN
Applied in changeset commit:"22d323b338ef35be05dbd97eb33d8f07517c38fb". Erik Fonnesbeck
12:08 AM Bug #877 (New): Status service OpenVPN
prior to the recent commit, mine never showed at all there, I didn't even realize they were supposed to. This is clos... Chris Buechler
12:14 AM Bug #882 (Resolved): IP aliases should not sync
IP alias VIPs should not sync to the secondary Chris Buechler

09/07/2010

10:18 PM Revision c29ff7bd: Provide a button to reload the filter at status->filter reload status.
Ermal LUÇI
08:37 PM Revision f4e8db1f: Do the check regarding 'none' configured interfaces properly. This fixes breakage on VIP configuration. Reported-by: http://forum.pfsense.org/index.php/topic,28120.0.html
Ermal LUÇI
07:53 PM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
setup_gateways_monitor is called from /etc/rc.bootup /etc/newwanip /etc/inc/upgrade_config.inc
All 3 prrocedures doe...
ivan primus
07:36 PM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
I can't see setup_gateways_monitor() function being called from system_gateways_edit.php, page where static routes ar... ivan primus
05:51 PM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
using latest snapshot 06.09 ivan primus
05:50 PM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
I have removed all routing groups to make it simple.
Than I edit and saved settings of pppoe interface and route to...
ivan primus
05:34 PM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
Its the same thing.
setup_gateway_monitoring() is getting called.
Probably you need to test with a newer snapshot...
Ermal Luçi
05:23 PM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
This last commit didn't help also c3b1ba3fcd6284d2a36b23c5938a3fee4f520cdf
This pppoe interface is on vlan OPT4 int...
ivan primus
08:37 AM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
´´´
# cat /usr/local/sbin/ppp-linkup
#!/bin/sh
# unset CGI environment variables so as not to confuse PHP
unset...
ivan primus
08:27 AM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
After testing I have find out that:
- after disconnecting pppoe interface, static route to monitor is is correctly d...
ivan primus
07:44 PM Revision c3b1ba3f: Ticket #876. Reload gateways/apinger before filter_reload so the new ip/gateway is considered up from the beginning.
Ermal LUÇI
07:36 PM Revision 0ae6daf8: Use the new events mechanisms to dispatch events.
Ermal LUÇI
07:20 PM pfSense Packages Bug #585: Unable to start the ntop service
Extra update. it seems rrdtool 1.4.3 pulled in this build is too new for this ntop, since it provides librrd_th.so.5 ... Lars Goldschlager
07:12 PM pfSense Packages Bug #585: Unable to start the ntop service
And yet, the problem is it doesn't include all the packages it really needs.
In a default install the following pa...
Lars Goldschlager
03:57 PM pfSense Packages Bug #668 (Feedback): Snort does not deinstall properly
Can the poster confirm this is fixed now.
#873 is fixed so this should be fixed too from discussion above.
Ermal Luçi
03:56 PM pfSense Packages Feature #880 (Closed): Default route on wan failover
This is taken care already in 2.0 in another way. Ermal Luçi
03:52 PM Bug #873: deinstall does not unset package <menu> and <service> tags from /conf/config.xml
Fixed; Ermal fixed my issue with his update sept, 07 2010. robert zelaya
02:57 PM Bug #878: Drag and Drop firewall rules causes corruption
Likewise with Chrome for Linux v5.0.375.127. Seems fine in IceWeasel 3.0.6. Jesse Norell
12:52 PM Bug #863: floating rules breaks passive mode ftp
Testing with:
> 2.0-BETA4 (i386)
> built on Mon Sep 6 22:04:59 EDT 2010
> FreeBSD 8.1-RELEASE
It still doesn...
Jesse Norell
07:50 AM pfSense Packages Bug #868: transparent Squid breaks captive portal
Burkart Orlowski wrote:
> I had the same problem and found a workaround.
>
> Edit the following line in /usr/loc...
Burkart Orlowski
07:49 AM pfSense Packages Bug #868: transparent Squid breaks captive portal
I had the same problem and found a workaround.
Edit the following line in /usr/local/captiveportal/index.php
$ou...
Burkart Orlowski
06:09 AM Todo #881 (Resolved): Passive FTP over pfsense
Here the out-of-date information: http://doc.pfsense.org/index.php/Howto_setup_ftp_server_behind_pfsense
How to fo...
Mike Stupalov
04:53 AM Bug #879: Correct parsing of output by rate
Heres the patch as an attachment instead Torben Hørup

09/06/2010

04:13 PM Revision 298e5e0a: Ticket #876. Remove old status file of apinger before restarting because it might confuse gui.
Ermal LUÇI
03:04 PM Revision cfdf9444: Delete previous route if present.
Ermal LUÇI
01:35 PM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
Ermal...nothing have changed.
After restart there is no reference of pppoe gateway in system logs, like it does not ...
ivan primus
01:13 PM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
I will check this new change on /etc/inc/gwlb.inc and report back ivan primus
01:08 PM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
yes...it changes ivan primus
09:05 AM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
Does your pppoe address change during renewal or it stays the same? Ermal Luçi
07:18 AM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
Just to mention again: this is not hardware problem or link problem. I have 3 firewalls with different hardware, diff... ivan primus
07:05 AM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list

This is system output while it is not routinh trough pppoe
# uname -an
FreeBSD 8.1-RELEASE FreeBSD 8.1-RELEASE ...
ivan primus
06:13 AM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
Can you give more details about your configuration.
As verbose as possible will be better.
For example.
All config...
Ermal Luçi
01:15 PM Revision 401a6674: Actually there is a script that will run ntpd on bootup. Revert partially the change to fix ntp.
Ermal LUÇI
01:11 PM pfSense Packages Feature #880 (Closed): Default route on wan failover
In *dual wan* setup it would be useful to have *default route* (using first WAN gateway) changed to second WAN gatewa... Cristiano Brunetti
01:10 PM Revision 45611d02: Ticket #877. Some cleanup and fixes so that openvpn status works correctly.
Ermal LUÇI
01:04 PM Revision c8960970: Fix ntpd starting at boot time and also status->services checking/stop/start/restart display. Previously ntpd would not start at all either though it should.
Ermal LUÇI
12:02 PM Bug #879 (Resolved): Correct parsing of output by rate
The formating of /usr/local/bin/rate output (called in bandwidth_by_ip.php) sometimes mess up the parser.
For instan...
Torben Hørup
09:43 AM Bug #878: Drag and Drop firewall rules causes corruption
Forgot to add that i tested with:
Chrome for Mac v5.0.375.127
Chrome for Windows7 v5.0.375.127 and IE8 v8.0.7600....
Warren Baker
09:19 AM Bug #878 (Closed): Drag and Drop firewall rules causes corruption
As per forum issue http://forum.pfsense.org/index.php/topic,28037.0.html - re-ordering of the firewalls using drag-an... Warren Baker
03:55 AM Bug #877: Status service OpenVPN
here a screen shot Tahar GUEBLI
03:24 AM Bug #877 (Feedback): Status service OpenVPN
It's not listed in services (there isn't a service entry, and doesn't really need one). Please add a screenshot of wh... Chris Buechler
03:07 AM Bug #877 (Resolved): Status service OpenVPN
In services in Status tab, the openVpn service is marqued as stopped
even though the service is running?
Tahar GUEBLI
03:52 AM Bug #875: Uninstalling packages can remove system libraries
I think just installing all necessary package binaries in a specific folder with pkg_add will solve the issue.
It jus...
Ermal Luçi
03:24 AM pfSense Packages Bug #870 (Resolved): Squid doesn't uninstall properly
Chris Buechler
02:59 AM pfSense Packages Bug #870: Squid doesn't uninstall properly
Ok all is fine now.
Thanks
:-)
Tahar GUEBLI

09/05/2010

08:16 AM Revision 4c5b8653: Add upgrade code for NAT 1:1 rules and bump config version.
Erik Fonnesbeck
08:16 AM Revision aecbc33e: Fix "use system default" setting for reflection on NAT 1:1 rule edit page and remove reference to nonexistent "externalmask" field.
Erik Fonnesbeck
08:15 AM Revision d3690bcb: Fix reflection on 1:1 rules and properly reinitialize the variable holding the CIDR mask on each iteration of the loop since having none specified is allowed.
Erik Fonnesbeck
07:32 AM Revision 8920455d: Revert "Add missing break statement in input validation code."
This reverts commit 52bebb6f44293de1d184c2a6310ad6fb38c5f7f2. Marcus Brown
06:39 AM Revision 52bebb6f: Add missing break statement in input validation code.
Marcus Brown

09/04/2010

10:28 PM Bug #874: Creating IPSec Phase1 failes in BETA4-20100904-0228
Very well, Rickard u here's my forum post:
http://forum.pfsense.org/index.php/topic,28064.0.html
Roop Singh
09:58 PM Bug #874: Creating IPSec Phase1 failes in BETA4-20100904-0228
I have tried both a normal and mobile tunnel, and none of the PSK modes prompt me for a CA.
Again, please use the ...
Jim Pingle
09:51 PM Bug #874: Creating IPSec Phase1 failes in BETA4-20100904-0228
Build Sat Sep 4 11:27:25 EDT 2010
vpn_ipsec_phase1.php
140 $method = $pconfig['authentication_meth...
Roop Singh
06:00 PM Bug #874 (Rejected): Creating IPSec Phase1 failes in BETA4-20100904-0228
It works fine if you select a method that does not require a certificate. It also works fine if you select RSA mode a... Jim Pingle
05:48 PM Bug #874 (Rejected): Creating IPSec Phase1 failes in BETA4-20100904-0228
I am new to pfSense, but i must say I like it, so It might be a newbe error :)
When I try to start and setup the I...
Rickard u
07:47 PM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
I think I need to refine this issue, because problems after upgrade and pppoe address renewal are simular but not the... ivan primus
07:33 PM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
After searching through logs and pfctl / netstat output I have found that after pppoe address renewal static route to... ivan primus
06:46 PM Bug #876 (Resolved): pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
This is not new bug. I have 3 firewalls now with 01.09 builds and always the same problem. Every upgrade or dhcp addr... ivan primus
05:48 PM Bug #875 (Resolved): Uninstalling packages can remove system libraries
If you install a package (like squid) which replaces a base system library (like LDAP), it will install its own copy ... Jim Pingle
12:58 AM Revision 3896d93e: Do this check earlier rather than later, instead of moving the interface_bring_down call.
Erik Fonnesbeck
12:50 AM Revision 0a28d385: Revert "Rearrange function calls for wireless to prevent killing hostapd/wpa_supplicant at the wrong time."
This reverts commit e93385d06ddf0e2888b3f5ee5764992a19f99120. Erik Fonnesbeck
12:49 AM Revision fb2f0db1: Revert "Ticket #867. Do not destory interfaces other than preventing a loop for ppp interfaces during interface configuration."
This reverts commit 990fb7a9a9b03f744c56792011f1c1e2950ce764. Erik Fonnesbeck

09/03/2010

11:42 PM Revision 67e77adf: Protect against wpa_supplicant dying when bringing down interfaces to change wireless regulatory configuration.
Erik Fonnesbeck
10:54 PM Revision b2a66231: Ticket #873. Call write_config() before including file to avoid loosing already done modifications. While here do some code cleanup and formating to make it more readble.
Ermal LUÇI
10:50 PM Revision e93385d0: Rearrange function calls for wireless to prevent killing hostapd/wpa_supplicant at the wrong time.
- Moved interface_wireless_configure call to after the new location of the interface_bring_down call to prevent it fr... Erik Fonnesbeck
06:54 PM pfSense Packages Bug #870: Squid doesn't uninstall properly
Can you please try with latest snapshot. Ermal Luçi
06:53 PM Bug #873 (Feedback): deinstall does not unset package <menu> and <service> tags from /conf/config.xml
Ermal Luçi
05:11 PM Bug #873 (Resolved): deinstall does not unset package <menu> and <service> tags from /conf/config.xml
Issue:
deinstall does not unset package <menu> and <service> tags from /conf/config.xml
Cause:
"require_once...
robert zelaya
05:59 PM Revision e49a2031: Ticket #843. Disable for now bringing down the interface unless we want to destroy it. While this is not all correct this seems to help alleviate problems when the parent is shared on cloned types.
Ermal LUÇI
05:49 PM pfSense Packages Bug #668: Snort does not deinstall properly
This issue was caused by "require_once("config.inc");" in snort.inc.
I made a ticket about said issue "redmine.pfs...
robert zelaya
05:45 PM Revision c12fb6cb: Allow 1:1 rules to specify source and destination. This is almost the same as on Port Forward tab rules without protocol and ports.
Ermal LUÇI
05:32 PM Todo #734 (Feedback): Fix up appearance of SSH tunnel shell
Ermal Luçi
05:28 PM Revision 8fc0b2dc: Add missing break;
Ermal LUÇI
04:14 PM pfSense Packages Feature #872 (Needs Patch): Tunnel Information and Control protocol
Implement a package for Tunnel Information and Control protocol used by SixXS.
http://www.sixxs.net/tools/tic/
Diego Velazquez
02:48 PM Feature #827 (Closed): CSR for User Certificates
This is also no longer an issue due to the user certificate changes made yesterday. Jim Pingle
02:05 PM Bug #832 (Closed): Diagnostics: Show Bogons was broken layout!
This functionality has been moved to Diagnostic->Table. Ermal Luçi
01:59 PM Bug #843 (Feedback): Interface controls coupling unexpectedly
Ermal Luçi
11:50 AM Revision 90388e48: Actually decode before writing to mpd.secret. Alos correct variable names. Discovered-by: Efonne(IRC)
Ermal LUÇI
11:36 AM Revision 2fc29020: Base64 encode passowrd fields for safer operations. Suggested-by: Efonne(IRC)
Ermal LUÇI
10:54 AM Revision ce968051: Upgrade user data too for new pppoe world.
Ermal LUÇI
10:46 AM Revision 18de0728: Correct function name. Pointy-hat: jimp@
Ermal LUÇI
09:47 AM Revision 08d97c59: Added wiki help page for Tables and removed help link for Bogons (now included in Tables).
Warren Baker

09/02/2010

09:30 PM Feature #828 (Feedback): Import for User Certificates
This was solved as a consequence of the certificate reorganization I just completed. User certificates can now be imp... Jim Pingle
08:56 PM Revision 7e91b28a: We no longer need system_usermanager_addcert.php, its redundant functionality has been merged with system_certmanager.php
Jim Pingle
08:50 PM Revision ad9b5c67: Allow creating a user certificate, pre-fill some info, direct back to user edit screen if that is what led us here. If we are making a user certificate, give another choice to select a pre-existing certificate to associate with that user.
Jim Pingle
08:50 PM Revision b0884cde: Adjust add link.
Jim Pingle
08:50 PM Revision c25f73ae: Adjust the user manager to use cert references on the user instead of the actual certs.
Jim Pingle
08:50 PM Revision 3554c9f0: When generating a user cert, put it in with the rest of the certificates and store a reference in the user.
Jim Pingle
08:50 PM Revision 79e1ffed: Update sync code since CERT/CA have moved.
Jim Pingle
08:50 PM Revision 0879599c: Only allow a certificate to be deleted if it is not currently in use.
Jim Pingle
08:50 PM Revision dea98903: Remove two unused functions (now useless) and add a few more utility functions.
Jim Pingle
08:50 PM Revision d590fa20: Show was a certificate is used for, if anything.
Jim Pingle
08:50 PM Revision 8fefb9dd: Upgrade code to merge user certificates with normal certificates.
Jim Pingle
08:42 PM Revision 395ba5d1: Remove obsolete Bogons files
Warren Baker
08:24 PM Revision 1c9ed80d: Added missing Save message.
Warren Baker
08:19 PM Revision 6c474eb8: Remove redundant 'Show Bogons' link and added Bogons list to Diagnostics -> Tables while preserving the same download functionality.
Warren Baker
07:40 PM Bug #714: Cellular RRD Graph Shows w/o 3G Modem Installed
Not quite fixed. Cellular still appears if I click the 'Settings' tab. It doesn't appear while any of the other tabs ... Steve Vigneau
07:36 PM Bug #863: floating rules breaks passive mode ftp
Again with newer snapshot please. Ermal Luçi
07:30 PM Feature #871 (Closed): PPTP client
Will be on 2.0. Ermal Luçi
01:44 PM Feature #871 (Closed): PPTP client
Include support for pfSense as a PPTP client.
This would be very useful where the router admin doesn't run the other...
Richard Connon
05:59 PM Revision 6ae9f9b7: Upgrade code for pppoe.
Ermal LUÇI
05:34 PM Revision 60b8b580: Add my copyright.
Ermal LUÇI
05:33 PM Revision 926677d4: These are obsolete now.
Ermal LUÇI
05:32 PM Revision b1e2b044: Forgot to add the new file for pppoe.
Ermal LUÇI
05:27 PM Revision 0e642c78: Make possible to run multiple instances of pppoe server. Not yet switched to mpd4.
Ermal LUÇI
05:11 PM Revision f3ceee6e: Fix typo: s/write_confg/write_config/
Vinícius Coque
04:52 PM Feature #864 (Resolved): Diagnostics -> Show Bogons is now redundant.
wagonza resolved. Chris Buechler
04:44 PM Bug #837 (Resolved): dhcpleases still not starting at boot time
Chris Buechler
09:58 AM Bug #837: dhcpleases still not starting at boot time
This is resolved. Marcus Brown
03:56 PM Bug #838 (Resolved): DNS servers are not cleared from resolv.conf when link comes down
Chris Buechler
10:13 AM Bug #838: DNS servers are not cleared from resolv.conf when link comes down
This works now. This issue can be closed.
Marcus Brown
02:18 PM Revision c73c126f: Bump 7.1 -> 8.1
Warren Baker
02:10 PM Revision 7b57d9bd: keep src-nodes the same as states, as it is by default. in some circumstances this can limit per-host connections
Scott Ullrich
10:09 AM Bug #843: Interface controls coupling unexpectedly
Can we get this classified for 2.0? Marcus Brown
07:09 AM Revision 00710912: keep src-nodes the same as states, as it is by default. in some circumstances this can limit per-host connections
Chris Buechler
05:10 AM pfSense Packages Bug #870 (Resolved): Squid doesn't uninstall properly
After uninstalling squid,
the only account than can access the web gui is the admin account
others can't any more...
Tahar GUEBLI

09/01/2010

11:33 PM Revision 4c4be113: Revert "Since IPFW is redirecting to the captive portal running on 127.0.0.1:"
This reverts commit d624c7902cf71d8fe739fd68595784949902a948. Scott Ullrich
10:52 PM Revision d624c790: Since IPFW is redirecting to the captive portal running on 127.0.0.1:
65531 11375 1820680 fwd 127.0.0.1,8000 tcp from any to any in
We need to permit traffic from the Captive Portal inte...
Scott Ullrich
09:52 PM Revision 00621aee: Add even carp ips to the sloppy state filter rules of CP.
Ermal LUÇI
08:53 PM Revision 56c100ab: Fix line endings on remaining files that did not have the same line endings as everything else.
Erik Fonnesbeck
08:19 PM Bug #869 (Closed): Captive Portal rule does not work when using a restrictive ruleset
The rule is correct as it is, where it passes to 8000/8001 to $cpinterface, and it all functions correctly. The reaso... Chris Buechler
07:37 PM Bug #869 (Closed): Captive Portal rule does not work when using a restrictive ruleset
Directions to reproduce:
Setup captive portal on OPT1.
Add a rule on OPT1 interface:
allow
protocol any
src:...
Scott Ullrich
07:26 PM Revision b4e6524c: CA/CERT Move
Jim Pingle
07:18 PM Revision 4e990e1e: CA/CERT Move
Jim Pingle
07:15 PM Revision 1e332e98: CA/CERT Move
Jim Pingle
07:06 PM Revision b9d959b9: Bump version of config so upgrade code will run.
Jim Pingle
07:06 PM Revision 9ad72e5e: Moving certs and ca out from under system. Provide upgrade code to move existing certs.
Jim Pingle
05:55 PM Bug #863: floating rules breaks passive mode ftp
Tested with:
> 2.0-BETA4 (i386)
> built on Wed Sep 1 11:07:08 EDT 2010
> FreeBSD 8.1-RELEASE
And has the sa...
Jesse Norell
05:34 PM Bug #863 (Feedback): floating rules breaks passive mode ftp
Test with the latest snapshot. Ermal Luçi
05:40 PM Bug #582 (Closed): Add all Diffserv options
Duplicate of #670. Ermal Luçi
05:39 PM Bug #670: Diffserv Code Point in firewall rule isn't match with the result of "pfctl-sr"
For history ticket #582 has useful links. Ermal Luçi
05:37 PM Bug #670 (Feedback): Diffserv Code Point in firewall rule isn't match with the result of "pfctl-sr"
We have these defined now:... Ermal Luçi
05:10 PM Bug #853: PPPoE Server radius config not applied
Thanks for the super quick fix. I can confirm that this is working now.
There are a few other fields on that page ...
Anonymous
04:42 PM Revision 064e1807: And some safe belts to prevent wrong lines in inetd.conf
Ermal LUÇI
04:09 PM Revision 68071477: Just take action when there is a file otherwise just call filter_reload.
Ermal LUÇI
03:51 PM Revision e8471084: Ticket #866 #632. Save old settings or actions to be taken for reconfiguring a route/vip on a tmp file and make use that information when apply settings buttons is clicked. This makes the gui behave as expected.
Ermal LUÇI
03:37 PM pfSense Packages Bug #868: transparent Squid breaks captive portal
The ipfw fwd gets hit, but I believe after that it gets hit by the pf rdr for Squid. A 'no rdr' for traffic destined ... Chris Buechler
03:35 PM pfSense Packages Bug #868: transparent Squid breaks captive portal
The issue is likely that the two are competing for trying to redirect connections going to port 80 and the squid pack... Erik Fonnesbeck
03:03 PM pfSense Packages Bug #868 (Closed): transparent Squid breaks captive portal
Squid's transparent redirect breaks captive portal. Chris Buechler
03:04 PM Bug #851 (Closed): Portal Page never loads with multiple vlan on the same interface
it's Squid's transparent redirect that kills it. A 'no rdr' from the package for CP should work around that, but that... Chris Buechler
01:51 PM Bug #851: Portal Page never loads with multiple vlan on the same interface
Copy here the problematic /tmp/rules.debug or config.xml and i will try to fix it. Ermal Luçi
10:50 AM Bug #851: Portal Page never loads with multiple vlan on the same interface
What do you mean when you say "do not run squid on port 8000" ?
Tahar GUEBLI
05:59 AM Bug #851: Portal Page never loads with multiple vlan on the same interface
Just do not run squid on port 8000 :) Ermal Luçi
05:54 AM Bug #851: Portal Page never loads with multiple vlan on the same interface
Ok it's work fine whithout squid installed.
How can we have squid and Portal captive working on the same machine ?
Tahar GUEBLI
12:32 PM Revision 8e0c3760: Ticket #568. Do not show the save/cancel buttons on the edit page of firewall rules if that are advanced options set.
Ermal LUÇI
12:13 PM Revision 990fb7a9: Ticket #867. Do not destory interfaces other than preventing a loop for ppp interfaces during interface configuration.
Ermal LUÇI
11:31 AM Bug #743 (Feedback): Installation: textual label: (Select task="Advanced Installation") <> (Are you sure="Custom Install")
Ermal Luçi
10:56 AM Bug #672 (Feedback): Reflection, netcat usage error
It should not error out, but it will skip mostly aliases with multiple ports!
Ermal Luçi
09:59 AM Bug #632 (Feedback): Change type of Virtual IP not work.
Ermal Luçi
09:57 AM Bug #866 (Feedback): Changing a route's mask leaves the old route
Ermal Luçi
06:47 AM Feature #753 (Feedback): Add OpenVPN foreign_option support
Can you please be more specific on this? Ermal Luçi
06:42 AM Bug #781: Entering sim code problem on a Huawei E1752
I will leave this open though not a target for 2.0.
Usually this is a pilot error and the modem should respond with ...
Ermal Luçi
06:37 AM Bug #568 (Feedback): firewall rules advanced clean up
Ermal Luçi
06:19 AM Bug #867 (Feedback): Activating vlan interface via webgui deletes interface
Ermal Luçi
04:33 AM Revision 5281b3e8: also include split_dns, as Cisco VPN clients won't query across the VPN without it.
Chris Buechler
 

Also available in: Atom