Project

General

Profile

Activity

From 09/23/2010 to 10/22/2010

10/22/2010

09:47 PM Revision 98d75ad4: Be smart and correct; first check for opt*ip and after check for opt* otherwise it will never match the first case!
Ermal LUÇI
09:12 PM Bug #495 (Resolved): USB drive fails to mount during boot
Yeah I talked to thompsa a bit about this a couple days ago, our only option is to hard code kern.cam.boot_delay at a... Chris Buechler
07:05 PM Bug #495 (Feedback): USB drive fails to mount during boot
I think this should be documented somewhere and users can deal with it themselves.
It is not a bug in pfSense per se.
Ermal Luçi
08:06 PM Revision e4d79ab0: Balance <p> with </p>
Ermal LUÇI
07:56 PM Revision 67300ce5: Put </ul> tags inside the same <td> since they cannot span multiple of them.
Ermal LUÇI
07:52 PM Revision 4540ab2c: Clear some forgotten </img> </font> tags.
Ermal LUÇI
07:03 PM Bug #918: CP redirection URL and logout on popup don't work
You are sure you had selected that a popup window to be showed? Ermal Luçi
07:02 PM Bug #943 (Feedback): 2.0-BETA4 Dynamic DNS updates not working
Please try a new snapshot some fixes were done to dyndns which might fix even your issues. Ermal Luçi
07:01 PM Todo #881 (Feedback): Passive FTP over pfsense
This seems to be ok on latest snaps. Ermal Luçi
07:00 PM Bug #967 (Feedback): VLAN Interfaces not comming up at reboot
Please test a new snapshot.
Seems you have hit a bug that was present in recent snapshots and was resolved.
Ermal Luçi
06:51 AM Bug #967 (Resolved): VLAN Interfaces not comming up at reboot
I'm using 20101021 Snapshot of pfSense 2.0 on ALIX Box.
I setup the following:
# Factory Default
# create 4 VLAN...
Peter Baumann
04:05 PM Revision 1feb93cf: Mark this entry as an array before treating it as such otherwise php complains.
Ermal LUÇI
03:49 PM Revision 90e64fad: Check to see if it is not an array first - as per jim-p on IRC.
Warren Baker
02:01 PM Revision 5a5413bb: Add the default ipv4 route and the default ipv6 route, check both routing tables before adding or changing.
set the ipv6 IP address via a mwexec() until the pfsense module is adapted. FIXME.
Add filter rules for ipv6 to let t...
Seth Mos
11:32 AM Revision 47593ac6: Allow for configuring a IPv6 address on the interfaces page.
Add code to verify a ipv6 address
Let is_ipaddr() return true on a v4 and v6 address.
Change system gateways edit to ...
Seth Mos
11:07 AM Feature #177: IPv6 support
I've started ipv6 work on pfSense-smos clone and I've started running into the 1st few issues which I'm documenting h... Seth Mos
08:01 AM Bug #968: PHP error in user manager
I can see 2 admin groups in my group list, probably has something to do with it. Having the same problem on 2 freshly... Peter O
07:01 AM Bug #968 (Resolved): PHP error in user manager
Fresh install of built on Fri Oct 22 06:39:04 UTC 2010
A PHP error shows in the "select group membership" fields ...
Peter O
06:07 AM pfSense Packages Bug #844: Open VM Tools Won't install
People having this issue: You can install the tools with the following commands (I'm using ESXi 4.1 with 64 bit pfSen... Peter O
03:49 AM Revision be81b340: Display the ICMP type (abbreviated) in the firewall rule list and show the full text when the cursor is over it for ticket #762
Erik Fonnesbeck
02:54 AM Revision fc3e88f1: Fix crl upgrade code.
Jim Pingle
01:20 AM Bug #957: Dynamic DNS Fails with a disabled entry.
Confirmed, the applied patch fixes the issue. Matt Corallo
01:10 AM Bug #957: Dynamic DNS Fails with a disabled entry.
Matt, can you please confirm that fixed the issue? Chris Buechler

10/21/2010

11:54 PM Feature #762 (Feedback): Display ICMP type on firewall rule list
Erik Fonnesbeck
09:11 PM Revision 5e693f58: Break after the first error.
Jim Pingle
09:08 PM Revision 630d7025: Prevent the DHCP range from being changed to include static mapping entries. Fixes #964.
Jim Pingle
08:58 PM Revision ab8d138d: Reject DHCP static mappings that are inside of the DHCP range. Fixes #966
Jim Pingle
08:07 PM Revision 62b262e4: Remove WIP note. This should resolve #555.
Jim Pingle
08:00 PM Revision 6a0b3ea4: Indicate in various places if a certificate is revoked.
Jim Pingle
07:49 PM Revision 150bbe09: Indicate if a certificate has been revoked, both in the cert list and the user manager list.
Jim Pingle
07:11 PM Revision fc54f29b: Add ability to select reason codes for revocation. Reformat CRL edit screen a bit. Ticket #555
Jim Pingle
06:33 PM Revision 8e022a76: Refresh OpenVPN CRL files when a CRL has a cert added/removed. Ticket #555
Jim Pingle
05:34 PM Revision ad08687b: Add support for deleting a cert from a CRL (unrevoke). As of this point basic CRL functionality does work: Revoke a cert and it cannot connect. Remove it from the CRL and it can. (Have to edit/save OpenVPN server instance to update/refresh CRL though). Ticket #555
Jim Pingle
05:10 PM Bug #964 (Feedback): Changing DHCP pool size allows overlap with static leases
Applied in changeset commit:"630d7025810bf1ce006490db8524d6edc37ee6fb". Jim Pingle
04:45 PM Bug #964: Changing DHCP pool size allows overlap with static leases
See also #966 Jim Pingle
10:40 AM Bug #964 (Resolved): Changing DHCP pool size allows overlap with static leases
If you have a set pool size, then create static entries outside of the pool, and later expand the pool so it covers t... Jim Pingle
05:00 PM Bug #966 (Feedback): DHCP static lease inside the pool is not rejected
Applied in changeset commit:"ab8d138dcd5114c4892e12c514990797572fd318". Jim Pingle
04:45 PM Bug #966: DHCP static lease inside the pool is not rejected
See also #964 Jim Pingle
04:45 PM Bug #966 (Resolved): DHCP static lease inside the pool is not rejected
On 1.2.3, a static assignment inside of the DHCP pool is rejected (and rightly so), somewhere along the line in 2.0 t... Jim Pingle
04:10 PM Bug #555: Certificate Revocation List (CRL) missing from Certificate Manager
Applied in changeset commit:"62b262e4766bcd5e46b4191e0f618087b78d8f40". Jim Pingle
04:03 PM Bug #555 (Feedback): Certificate Revocation List (CRL) missing from Certificate Manager
This should be feature-complete as far as I can tell, unless anyone has any more ideas about how it should be changed... Jim Pingle
01:51 PM Bug #965 (Resolved): IPSec configuration network selection doesn't match rest of UI
Related to Feature Request #946, but not quite the same...
Everywhere else in the 2.0 UI (mostly rules, but I thin...
Adam Thompson
01:00 AM Revision 9f200d71: Change OpenVPN wizard to set input_errors when there is a fatal condition that will require preventing a config save.
Jim Pingle
12:59 AM Revision 7f167923: Add these error/info box classes to the wizard.css file.
Jim Pingle
12:59 AM Revision 27319e17: Add a patch to wizard.php to support input_errors from sullrich (with some modifications).
Jim Pingle
12:12 AM Revision 8f87a4a2: Reject special characters in CA/Cert field names during OpenVPN wizard. Fixes #900
Jim Pingle

10/20/2010

11:13 PM Revision 47319bfb: Add upgrade code for importing CRLs. Ticket #555
Jim Pingle
09:00 PM Bug #900 (Feedback): OpenVPN Wizard: Server Certificate Wizard
It should be fixed now after my latest commits (not seen on this ticket). Some changes to wizard.php were needed to p... Jim Pingle
08:21 PM Bug #900 (New): OpenVPN Wizard: Server Certificate Wizard
Spoke too soon. It prints the error message properly but the bad values are still saved in the config and a config re... Jim Pingle
08:15 PM Bug #900: OpenVPN Wizard: Server Certificate Wizard
Applied in changeset commit:"8f87a4a2aa746a44b6bd5f0ef4b4eea63c7703de". Jim Pingle
08:18 PM Bug #961: Config sync doesn't remove the last alias on the slave
OK, that is a bit different scenario that I have not tested yet. I shouldn't need your alias list to try that out. Jim Pingle
08:14 PM Bug #961: Config sync doesn't remove the last alias on the slave
Hi Jim,
Yes, I was talking about Firewall > Aliases.
I don't know if I was clear in my first message, by "last al...
Thiago Witt
05:41 PM Bug #961: Config sync doesn't remove the last alias on the slave
If you are talking about an Alias as in Firewall > Aliases, I can't reproduce this. If I delete the last one on the m... Jim Pingle
07:37 AM Bug #961 (Resolved): Config sync doesn't remove the last alias on the slave
If I setup two systems with carp sync and create an alias, it will sync correctly with the slave, but when I remove i... Thiago Witt
07:41 PM Revision 28ff7ace: Add more CRL functionality. Needs to wait on a new build for further testing.
Jim Pingle
07:41 PM Revision 5293bfec: Fix some forgotten name->descr changes.
Jim Pingle
07:06 PM Bug #963 (Closed): CARP Virtual IPs bind to actual interface, not interface description
Yes, you need to maintain the correct order. Chris Buechler
07:05 PM Bug #963 (Closed): CARP Virtual IPs bind to actual interface, not interface description
I have the following setup on Oct 2 snapshot:
Firewall A:
WAN (wan) -> em1 -> 2xx.xxx.xx...
Tom Pepper
06:46 PM Bug #555: Certificate Revocation List (CRL) missing from Certificate Manager
I've made some more CRL commits today. Once the new snapshot is up, it should (in theory) be capable of revoking a ce... Jim Pingle
06:43 PM Revision d8912c6b: move dhcpd.conf authoritative; so it's only there once, not once per interface.
Chris Buechler
05:53 PM Bug #601 (Resolved): VHID changes do not apply immediately on secondary
This works properly now. Jim Pingle
05:17 PM Feature #811 (Feedback): PPTP/GRE NAT multiple connections to single server
Ermal Luçi
04:14 PM Bug #368 (Closed): DHCP option is not recognized
this is a general issue covered in #962 Chris Buechler
04:14 PM Bug #962 (Resolved): DHCP custom options must have type selection
The custom DHCP options are currently all added as text type. This doesn't work for many options, which require a dif... Chris Buechler
03:13 PM Revision ac87dbbf: Traffic shaper wizards remove redirection before final step. This seems a forgotten item.
Ermal LUÇI
12:48 PM Revision 7d30a315: Sync CRLs, too.
Jim Pingle
08:22 AM Bug #960: Problem with config sync + ipsec + special characters
We escape that with CDATA in the config, though I'm not sure how well that translates via XMLRPC (pfsync and CARP rea... Jim Pingle
07:33 AM Bug #960 (Resolved): Problem with config sync + ipsec + special characters
When the description field in ipsec's phases 1 and 2 contains special characters such as accentuation config sync is ... Thiago Witt
07:25 AM Bug #959 (Resolved): Config sync removes alias VIPs on the slave
I want to have 2 CARP VIPs on the same interface, but each using a different subnet, so I need an alias on each syste... Thiago Witt

10/19/2010

08:08 PM Revision 50cafcf3: Correctly call die() in the places needed. Also remove unused global.
Ermal LUÇI
07:34 PM Revision d7381e71: Generalize the "low res" user agent detection so it isn't Apple-specific. Include Android in the detection, and also provide a mechanism so that the "low res" theme can be set in globals.inc.
Jim Pingle
06:19 PM Revision f2a86ca9: Rename 'name' to 'descr' for CA, Certificates, and CRLs, to gain CDATA protection and standardize field names. Ticket #320.
Jim Pingle
05:03 PM Revision 6751b3e7: Generalize this function and use it in more places to reduce duplicated code.
Jim Pingle
04:52 PM Bug #882 (Resolved): IP aliases should not sync
Hi Thiago,
Ok for the new ticket. I will put this one to resolved since the initial report is now ok.
Thanks,
...
Pierre POMES
10:35 AM Bug #882: IP aliases should not sync
Hi Pierre,
I just update both my systems with gitsync and now it no longer syncs the aliases, so that's ok.
Now...
Thiago Witt
04:51 PM Revision 9ff73b79: Convert fullname field on users to descr, so it gains CDATA protection.
Jim Pingle
04:39 PM Revision e988813d: desc to descr in Load Balancer config, so they gain CDATA protection and standardize field names. Ticket #320.
Jim Pingle
04:07 PM Revision c4f55084: Update field name reference in code, it was changed to descr but this code was missed. (Is this code even needed? Doesn't seem to do anything.)
Jim Pingle
04:00 PM Revision 15864861: Change the description field on sysctl tunables to be 'descr' and not 'desc' so they will gain CDATA protection. Ticket #320
Jim Pingle
03:44 PM Bug #729 (New): if_bridge unpredictable filter interface selection
This needs revisiting at proper time because now the patch that was added is not in the builds. Ermal Luçi
02:34 PM Bug #320 (Feedback): Using special characters (e.g. åäö) in certificate "Descriptive name" breaks entire WebGUI
I have renamed the fields in several parts of the config and GUI to descr in an attempt to help resolve this issue. I... Jim Pingle
07:17 AM Bug #879 (Resolved): Correct parsing of output by rate
Jim Pingle
02:44 AM Bug #879: Correct parsing of output by rate
Thanks. Just close this ticket. Torben Hørup
03:31 AM pfSense Packages Bug #265: Bugs in Squid LightSquid SquidGuard Packages in PFsense 2.0
squidGuard.conf contains the option "dbhome" which defines where blacklists are located, the default path is /usr/loc... Basel G.
12:46 AM Bug #958 (Resolved): reply-to for 1:1 from other directly connected subnets not functioning correctly
Where you have a system with two WANs, such as WAN1 and WAN2, when sourcing traffic from a host on the WAN1's IP subn... Chris Buechler

10/18/2010

10:36 PM pfSense Packages Bug #265: Bugs in Squid LightSquid SquidGuard Packages in PFsense 2.0
No need to make the CF mounted read/write all the time just to extract the Squidguard blacklists, why not to mount RW... Basel G.
09:16 PM pfSense Packages Bug #265: Bugs in Squid LightSquid SquidGuard Packages in PFsense 2.0
The only alternative to using /var is to keep the CF mounted read write all the time, which eliminates the purpose of... Chris Buechler
08:28 PM pfSense Packages Bug #265: Bugs in Squid LightSquid SquidGuard Packages in PFsense 2.0
To effectively remove packages you have to delete the .xml file(s) in "/usr/local/pkg", this seems to be a problem wi... Basel G.
09:19 PM pfSense Packages Bug #580: dns-server fails to install and remove
Nevermind. I recreated the whole thing on another instance of PfSense and everything works fine. I think the package ... Jorge Fabregas
07:58 PM Revision 8a98ce81: ipalias type should be handled in backup_vip_config_section. Remove useless code which copies vip section before call to backup_vip_config_section. Ticket #882
Pierre POMES
05:17 PM Revision f5fe66cd: Merge remote branch 'mainline/master' into inc
Renato Botelho
03:58 PM Bug #882 (Feedback): IP aliases should not sync
Hi Thiago,
A new fix hax been commited. Can you please try again ?
Thanks again,
Pierre
Pierre POMES
03:18 PM Bug #882 (Assigned): IP aliases should not sync
Thanks for the report. I will doublecheck.
Pierre
Pierre POMES
03:02 PM Bug #882: IP aliases should not sync
Hi, I've just tested it with the latest snapshot and it seems the problem remains.
Looking at the source, I think ...
Thiago Witt
03:16 PM Revision 5d763c0e: Fix the dedicated and multi_all wizards. They had typos in variable names and some remaining unused code which caused problems!
Ermal LUÇI
12:39 PM Revision 2e408f59: Disable the bandwidth speed selection field also to avoid errors/problems when the catch all is not activated.
Ermal LUÇI
11:52 AM Revision 232846a2: Ticket #868. Add Connection: close to the header to be proxy friendly. See http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html for reference.
Ermal LUÇI
11:14 AM Revision f21c7979: Use proper matching because the command might contain nice in it.
Ermal LUÇI
05:55 AM pfSense Packages Bug #868 (Feedback): transparent Squid breaks captive portal
Ermal Luçi
05:49 AM Bug #582: Add all Diffserv options
See #670 for more information. Ermal Luçi
05:48 AM Bug #670 (Closed): Diffserv Code Point in firewall rule isn't match with the result of "pfctl-sr"
The issue is that you are doing the calculation wrong.
AFAIK dscp values you see on Cisco site you have to add 00 at...
Ermal Luçi
02:44 AM Revision 00686fee: Character '#' is invalid in string fields of SNMP service screen. Ticket #956
Pierre POMES

10/17/2010

11:28 PM Bug #882 (Resolved): IP aliases should not sync
Chris Buechler
11:28 PM Bug #929 (Resolved): Remote syslog not working
Chris Buechler
11:28 PM Bug #797 (Resolved): UI: IPsec Phase 2 edit, Address field active for LAN subnet option
Chris Buechler
10:36 AM Bug #797 (Feedback): UI: IPsec Phase 2 edit, Address field active for LAN subnet option
Problem was due to a javascript issue, only for mobiles. Should be fixed now.
Pierre POMES
11:27 PM Bug #956 (Resolved): # cannot be used in SNMP configuration
Chris Buechler
10:44 PM Bug #956 (Feedback): # cannot be used in SNMP configuration
You are right. Fix commited in the screen. Pierre POMES
10:24 PM Bug #956: # cannot be used in SNMP configuration
That's fine, though it'd be easier and fine to just throw an input validation error if any of the fields contain # Chris Buechler
10:22 PM Bug #956: # cannot be used in SNMP configuration
Chris,
The man page of bsnmp deals with '#' in config file:...
Pierre POMES
09:07 PM Bug #956: # cannot be used in SNMP configuration
Just figured it out. Don't use "#" characters in any of the fields...
(I had the address set to "#200-135 Innovat...
Adam Thompson
07:39 PM Bug #956: # cannot be used in SNMP configuration
Hi Adam,
I just upgraded to the latest snapshot and I cannot reproduce the problem.
Can you give me the "snmpd"...
Pierre POMES
02:35 PM Revision 71880c96: Do not include 'remoteid' javascript functions for mobile ipsec. Ticket #797
Pierre POMES

10/16/2010

04:19 PM Revision 65996399: Resolves #957. Correct the code to reflect what its supposed to do.
Ermal LUÇI
03:28 PM Revision 814bb2dc: Bump config.
Ermal LUÇI
03:27 PM Revision 65167fcc: Do not run anymore the cron job for monitoring check_reload_status since it has a monitoring process that does this through kqueue.
Ermal LUÇI
01:16 PM Bug #906: Orphaned rules from deleted interfaces are still present in config
You are right the interface deletion code does get rid of the rules, but if someone deleted the interface before that... Jim Pingle
12:24 PM Bug #906: Orphaned rules from deleted interfaces are still present in config
This is how the interface deletion code works!
What are the details to reproduce the problems?
Ermal Luçi
12:20 PM Bug #957 (Feedback): Dynamic DNS Fails with a disabled entry.
Applied in changeset commit:"659963994dce689bdaaa5cdd83bc77008737d92a". Ermal Luçi
12:18 PM Bug #957: Dynamic DNS Fails with a disabled entry.
Thank you committed. Ermal Luçi

10/15/2010

08:54 PM pfSense Packages Bug #580: dns-server fails to install and remove
Hi, I'm running the latest (as of Oct 15th) and I just installed dns-server and a few minutes later decided to remove... Jorge Fabregas
07:11 PM Bug #957 (Resolved): Dynamic DNS Fails with a disabled entry.
Line 593 in /etc/inc/services.inc should be return, not continue.
This can cause the following error on a page whi...
Matt Corallo
04:18 PM Bug #956 (Resolved): # cannot be used in SNMP configuration
Actual problem is a # character can't be used in any of the SNMP configuration fields. Original post follows.
R...
Adam Thompson
02:29 PM Revision f5ea58da: Ticket #927. Increase timeout to gice mpd the time needed to exit gracefully.
Ermal LUÇI
01:59 PM Revision b641a575: Ticket #934. Perform test only for ldap backend. Also tell the user through a message when they click it for other backends.
Ermal LUÇI
01:42 PM Revision f1aad4d1: Resolves #879. Commit patch referenced in ticket to properly parse rate output.
Ermal LUÇI
12:14 PM Revision 26f131b8: Fix typo
Renato Botelho
12:11 PM Revision b96f6496: Merge remote branch 'mainline/master' into inc
Conflicts:
etc/inc/pkg-utils.inc
Renato Botelho
08:33 AM Bug #927 (Feedback): 3G modem rendered un-usable by forced cycling of connection
Try with latest changes. Ermal Luçi
08:02 AM Feature #934 (Feedback): Add RADIUS support to Diag>Auth page
Ermal Luçi
07:50 AM Bug #879 (Feedback): Correct parsing of output by rate
Applied in changeset commit:"f1aad4d1ad04214382ba577360732ae581c51264". Ermal Luçi
04:49 AM Feature #935 (Feedback): User manager RADIUS authentication method
You can create the same user locally and assign it to groups that should work iirc.
Never tested though.
Ermal Luçi

10/14/2010

11:25 PM Bug #714: Cellular RRD Graph Shows w/o 3G Modem Installed
Just FYI, still present as mentioned in the update (Cellular still appears when at the Settings tab) on:
2.0-BETA4...
Steve Vigneau
11:17 PM Bug #714 (New): Cellular RRD Graph Shows w/o 3G Modem Installed
Setting back to New since it hasn't been fixed. Jim Pingle
07:32 PM Revision 2c794549: Ticket #950. Correctly handle failures while installing packages which might leave stale information behind. Also do not try to startup services twice. Rename uninstall_package_from_name to uninstall_package because the operation on packages is only done through package names.
Ermal LUÇI
06:58 PM Revision ab0eced7: We want to upgrade all of interfaces/gateways.
Ermal LUÇI
03:30 PM Bug #950 (Feedback): Package installation failures leaves package installed
Ermal Luçi
03:00 PM Bug #955 (Feedback): Static IP gateway does not upgrade from 1.2.x to 2.0
Should be fixed in later versions. Ermal Luçi
12:33 PM Bug #955 (Resolved): Static IP gateway does not upgrade from 1.2.x to 2.0
If you have a 1.2.3 install with WAN configured with a static IP, the gateway does not upgrade to 2.0.
This used t...
Jim Pingle
02:47 PM Bug #922 (Feedback): Traffic Shaper
Is this happening with latest version? Ermal Luçi
01:07 PM Revision a1945b0a: Merge remote branch 'mainline/master' into inc
Renato Botelho
06:42 AM Bug #883 (Feedback): Renaming gateway doesn't update static routes
This should be ok in latest versions. AFAIR you cannot rename gateways anymore. Ermal Luçi
04:54 AM Revision 4b0c83c3: Hide ports when protocol does not use ports. Ticket #953
Erik Fonnesbeck
02:28 AM Revision f9106085: Hide translation section when "Do not NAT" is checked. Fixes #952
Erik Fonnesbeck
02:12 AM Revision c3f36fb5: Don't clear the source port when changing source address type to any. Also update source when editing a rule with source type any.
Erik Fonnesbeck
01:09 AM Feature #953 (Feedback): On outbound NAT rule edit, hide ports when protocol does not use ports.
Erik Fonnesbeck

10/13/2010

10:45 PM Feature #952 (Feedback): When "Do not NAT" is checked on outbound rule, the translation section should be hidden.
Applied in changeset commit:"f91060852cd28d14fa2cfa100c358e3c4a7fab2c". Erik Fonnesbeck
07:33 PM Feature #952 (Resolved): When "Do not NAT" is checked on outbound rule, the translation section should be hidden.
If "Do not NAT" is checked on an outbound NAT rule, it uses the "no nat" statement in the ruleset, which does not use... Erik Fonnesbeck
09:59 PM Bug #954 (Resolved): Switching to manual outbound NAT creates incorrect rule for PPTP server
When switching to manual outbound NAT when the PPTP server is enabled, it does not pick up any kind of IP address fro... Erik Fonnesbeck
09:57 PM Revision da6155e0: Make sure this is an array before entering the foreach loop. Reported at http://forum.pfsense.org/index.php/topic,29118.0.html
Erik Fonnesbeck
07:41 PM Feature #953 (Resolved): On outbound NAT rule edit, hide ports when protocol does not use ports.
In other rule types, the fields for ports are hidden when selecting a protocol that does not use them. The edit page... Erik Fonnesbeck
05:00 PM Feature #951 (Resolved): CARP doesn't sync Layer 7 rule groups
In pfsense 2.0 (Tue Oct 12 23:05:03 EDT 2010) CARP doesn't sync Layer 7 rule groups. Thomas Svedin
03:41 PM Bug #757: PPPoE Disconnect button with multiple PPPoE interfaces
Can you please try with latest version! Ermal Luçi
04:11 AM Bug #757: PPPoE Disconnect button with multiple PPPoE interfaces
i have the same problem, with period pppoe reset enabled also, once the connection is brought down, it never gets up,... Bipin Chandra
12:54 PM Revision 94823361: Add GUI checkbox to enable strict username/common name matching for SSL/TLS+User Auth mode. Fixes #887
Jim Pingle
11:43 AM Bug #948 (Closed): Can't assign VLANs to LAGG interface via web interface
Chris Buechler
11:29 AM Bug #948: Can't assign VLANs to LAGG interface via web interface
I was fiddling the settings before trying reinstall and renamed some vlans to remove couple of umlaut characters. Sud... Teemu Haapoja
08:05 AM Bug #948: Can't assign VLANs to LAGG interface via web interface
I upgraded to the latest snapshot (2.0-BETA4 (amd64) built on Wed Oct 13 05:08:20 UTC 2010) and the problem still pe... Teemu Haapoja
04:17 AM Bug #948 (Feedback): Can't assign VLANs to LAGG interface via web interface
I just setup VLANs on lagg with igb NICs yesterday, on yesterday's snapshot (same one in the original post), with 0 i... Chris Buechler
03:56 AM Bug #948: Can't assign VLANs to LAGG interface via web interface
Here is ifconfig output for the relevant parts. VLAN_MTU is present on the member interfaces (which do show up on the... Teemu Haapoja
11:39 AM Revision 8eec6fc0: Merge remote branch 'mainline/master' into inc
Renato Botelho
10:55 AM Bug #950 (Resolved): Package installation failures leaves package installed
When a package cannot be installed, such as missing binaries or binaries that cannot be fetched for any reason, the p... Chris Buechler
08:55 AM Feature #887 (Feedback): Add an option for stricter OpenVPN ssl/tls+user auth checking
Applied in changeset commit:"94823361c3216555761ff57463fe91b2a229a090". Jim Pingle
07:02 AM Revision 5a171fb7: Wording fix.
Warren Baker

10/12/2010

10:12 PM Revision 24997966: Ticket #942. Try to prevent empty entries and use implode to avoid problems.
Ermal LUÇI
10:01 PM Revision df2a0f18: Resolves #944. Actually bring down the vlan interface if it existed previously. This is a regression from the ppp dance/requests/whatever.
Ermal LUÇI
09:44 PM Revision 3c692174: Resolves #947. Blacklist lagg interfaces from the list of possible lagg members.
Ermal LUÇI
09:21 PM Revision 8901958c: Add backend code to verify username against cn on login if set by user. Needs GUI code to set the option yet. Ticket #887
Jim Pingle
08:16 PM Bug #757: PPPoE Disconnect button with multiple PPPoE interfaces
Hello again,
I heard from gnhb in the forums who indicated this was/is due to my PPPoE interfaces having the "Dial...
Pho Bia
06:46 PM Bug #920 (Feedback): Routing groups don't change monitor IP address when PPPoE reconnects
This should be solved by the apinger process restarting.
Please test newer snaps.
Ermal Luçi
06:11 PM Bug #942 (Feedback): dhcp relay breaks
Ermal Luçi
06:05 PM Bug #944 (Feedback): Moving VLANs to lagg doesn't remove old VLANs
Applied in changeset commit:"df2a0f1861be7a4b751bc4cb6e5fe7025b8f0f9c". Ermal Luçi
05:45 PM Bug #947 (Feedback): existing lagg members should not be able to be added to lagg
Applied in changeset commit:"3c69217457175c82b73922fca2ce578c3dbfc221". Ermal Luçi
09:19 AM Bug #947 (Resolved): existing lagg members should not be able to be added to lagg
interfaces available after added to a lagg interface. for example:
I created lagg interface with em2 and em3 interfa...
Chris Buechler
05:30 PM Bug #948: Can't assign VLANs to LAGG interface via web interface
Can you show an ifconfig of lagg members and lagg itself when this happens?
Probably one of the members of lagg is n...
Ermal Luçi
10:50 AM Bug #948 (Closed): Can't assign VLANs to LAGG interface via web interface
LAGG interface is missing from VLAN capable interfaces list when creating or editing VLANs, but existing VLANs using ... Teemu Haapoja
02:45 PM Bug #943: 2.0-BETA4 Dynamic DNS updates not working
Yeah that's good but the forum sees more traffic, and the 2.0 board is very active. There are probably quite a few pe... Jim Pingle
02:05 PM Bug #943: 2.0-BETA4 Dynamic DNS updates not working
Will look at opening a forum account and doing so. Already discussed on the support@ ML and Chris suggested opening ... R B
01:29 PM Bug #943 (New): 2.0-BETA4 Dynamic DNS updates not working
I'll set this back to new for now. You might want to start a forum post on the 2.0 board to see if anyone else has si... Jim Pingle
01:00 PM Bug #943: 2.0-BETA4 Dynamic DNS updates not working
Switched to DynDNS (Dynamic) and unset the wildcard. Tested with the three combinations (dynamic/wild, static/nowild... R B
12:37 PM Bug #943: 2.0-BETA4 Dynamic DNS updates not working
That is possible, I am on a full install. First, can you try setting for DynDNS (Dynamic) and unchecking Wildcard jus... Jim Pingle
12:06 PM Bug #943: 2.0-BETA4 Dynamic DNS updates not working
Perhaps the difference is the platform. Mine's running the embedded NanoBSD build and I get no such 'DynDns: xxx' me... R B
11:33 AM Bug #943: 2.0-BETA4 Dynamic DNS updates not working
And I do the same thing on mine and it works:... Jim Pingle
12:59 PM Revision bd6f4dcc: Correct this note, on at least one card (mxge) it defaults to an MTU of 9000, so we can't always say the default will be 1500.
Jim Pingle
12:42 PM Feature #949 (Rejected): Multiple IP Addresses on one interface
Already implemented in 2.0.
Firewall > Virtual IPs, the type of "IP Alias" is where this is done.
Jim Pingle
12:13 PM Feature #949 (Rejected): Multiple IP Addresses on one interface
Hello,
I read that you wanted to implement a feature throw which there can be assigned multiple IP's on one inter...
George Lucan
09:50 AM pfSense Packages Bug #945 (Feedback): vhosts package in pfsense 2.0
Applied in changeset commit:"ddac713985dc06d55d5b4222147792d4775bf894". Jim Pingle
08:15 AM Feature #946 (New): Allow aliases to be used to define IPsec phase 2 networks
Eventually it would be nice to allow using aliases on the IPsec phase 2 definition screen for local and remote networ... Jim Pingle

10/11/2010

11:54 PM pfSense Packages Bug #945 (Resolved): vhosts package in pfsense 2.0
The vhosts package has portions for FreeBSD 7.2 (pfsense 1.x) and FreeBSD 8.0 (earlier 2.x builds).
The current Free...
Moshe Katz
10:33 PM Revision ce94b839: revert miniupnpd -d change
Scott Ullrich
10:26 PM Revision d2bdde27: Be more verbose with miniupnpd logs. otherwise practically nothing is logged.
Scott Ullrich
09:10 PM Revision 9228de6c: Fix graph staggering, the old method was causing the graphs to diverge in update intervals over time.
Jim Pingle
08:29 PM Revision 719dcffb: Whitespace fixes
Jim Pingle
07:16 PM Revision f3704cb2: Bail out here if a variable isn't an array like it should be.
Jim Pingle
05:36 PM Revision 0a7c9c8e: Fixup comments a little.
Jim Pingle
05:34 PM Revision 99642234: Correct and cleanup this input validation logic for IPsec Phase 1 PSK/Cert config. In some cases the test was not being evaluated as expected.
Jim Pingle
04:37 PM Bug #944 (Resolved): Moving VLANs to lagg doesn't remove old VLANs
When moving a VLAN from a physical interface to lagg (amongst other possible scenarios), you end up with duplicate VL... Chris Buechler
04:08 PM Bug #943: 2.0-BETA4 Dynamic DNS updates not working
Nope. Just updated to "Sun Oct 10 23:06:39 EDT 2010" and the same test produces the same behavior: DynDNS.org still ... R B
03:37 PM Bug #943 (Feedback): 2.0-BETA4 Dynamic DNS updates not working
Please update to a much more recent (10/10 newer) snapshot and try again, then update the ticket. Many changes happen... Jim Pingle
03:34 PM Bug #943 (Resolved): 2.0-BETA4 Dynamic DNS updates not working
Running 2.0-BETA4 (i386) NanoBSD 1G image dated "Mon Sep 20 22:40:28 EDT 2010". WAN is a DSL PPPoE link in bridged (... R B
03:53 PM Revision 10f0a57a: Merge remote branch 'mainline/master' into inc
Conflicts:
etc/inc/authgui.inc
Renato Botelho
12:07 PM Bug #942 (Resolved): dhcp relay breaks
with pfsense 2.0 beta4 Oct. 10th snapshot installed, the dhcrelay service can't start.
Find following errors in sy...
kevin cai
07:58 AM Revision d60f510a: Unset the end time if we are graphing for the "current" period. That makes the graphs refresh correctly.
Seth Mos
07:25 AM Revision fea89a63: Hard-coded pfSense to product_name for Growl alert notifications.
Warren Baker
06:09 AM Revision 6840d0e7: Unfortunately, using variables in this way in strings passed to gettext doesn't work well with translations. Replacing with sprintf for now.
Erik Fonnesbeck
05:58 AM Revision f99c6a23: Update this text to match the current default.
Erik Fonnesbeck
05:52 AM Revision 28436d13: Fix text.
Erik Fonnesbeck
05:00 AM pfSense Packages Bug #868: transparent Squid breaks captive portal
With adding :header("Connection: close"), Portal Captive work fine even squid is installed.
Thanks
Tahar GUEBLI

10/10/2010

09:09 PM Bug #757: PPPoE Disconnect button with multiple PPPoE interfaces
Hi there,
The disconnect button is broken again. Slightly different behaviour this time.
Status->Interfaces
...
Pho Bia
07:39 PM pfSense Packages Bug #941: vhosts package config error
Fixed file attached. Moshe Katz
07:38 PM pfSense Packages Bug #941 (Resolved): vhosts package config error
The vhosts package generates a config file for lighttpd.
The config file incorrectly loads mod_accesslog twice.
E...
Moshe Katz
04:09 PM Revision 1ffa44bb: Kill apinger with a large axe until the TERM issues can be resolved
Scott Ullrich
02:25 PM Revision ebb57fe2: Replace hard coded pfSense with product_name
Warren Baker
02:12 PM Revision ecdae807: Replace hard coded pfSense with product_name.
Warren Baker
01:12 PM Revision 4dddf8c3: Cosmetic change from product_website to product_name
Warren Baker
12:47 PM Revision c3f4734d: Wording fix.
Warren Baker
08:48 AM Revision 6adc8e32: Fix the "all dynamic gateways are shown as default" problem reported here: http://forum.pfsense.org/index.php/topic,28960.0.html
A non-empty string will evaluate true with == operator. Marcus Brown

10/09/2010

05:24 AM Bug #876 (Resolved): pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
Chris Buechler
01:28 AM Feature #940: traffic to webgui from lan unrestricted
how do u do it without creating traffic shaping queues? Bipin Chandra

10/08/2010

07:07 PM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
I tested it on 2 firewalls and everything seems to be ok. This issue actualy included few other connected issues. My ... ivan primus
06:06 PM Feature #940 (Closed): traffic to webgui from lan unrestricted
can already do in 2.0 Chris Buechler
11:04 AM Feature #940 (Closed): traffic to webgui from lan unrestricted
consider this a feature request as usually what happens, when the internet speed is low such as mine 1mbps, i need to... Bipin Chandra
11:05 AM Feature #939: Ability to restore specific areas of configuration backup from full config backup
count my vote for this as this is what i have been wanting from a quiet some time and dont find it too tough to imple... Bipin Chandra
10:27 AM Feature #939 (Closed): Ability to restore specific areas of configuration backup from full config backup
It would be great if particular areas of a configuration backup could be restored without manually editing the .xml f... Alan B
10:21 AM Bug #938 (Rejected): XML error: no ipsec object found!
to restore IPsec-only you must only have <ipsec> to </ipsec> in the config. Not a bug, that's just how it works. Chris Buechler
10:11 AM Bug #938 (Rejected): XML error: no ipsec object found!
Have current running pfSense 1.2.3 system and created a backup which includes all areas of the configuration. Perform... Alan B
10:03 AM pfSense Packages Bug #868: transparent Squid breaks captive portal
add *header("Connection: close");* in /usr/local/captiveportal/index.php will fix the issue
header("Expires: 0");
...
chudy fernandez

10/07/2010

07:26 PM Bug #936 (Resolved): Bad racoon.conf generated with localid_type=address
Chris Buechler
07:22 PM Bug #936: Bad racoon.conf generated with localid_type=address
Thank you Pierre, I tried with the current snapshot and the issue is fixed.
Best regards,
Thiago
Thiago Witt
05:37 PM Revision ce338162: Show the product_name as the slice "name" for rebrands. Cosmetic only.
Jim Pingle
05:21 PM Revision 26c8cc72: Add function to convert pfsense slice name to product name.
Jim Pingle
02:44 PM Todo #881: Passive FTP over pfsense
This problem went away within the last 2 days. Mike McLaughlin
01:30 PM Revision 6a71611f: Remove unnecessary variable and fix loop test. Corrects AJAX update of last gateway status table cell (it was never updated before)
Jim Pingle
01:29 PM Revision 5af7eba3: Fix AJAX update of gateway status when the status is "Gathering Data".
Jim Pingle
12:27 AM Bug #876: pppoe on OPT - on upgrade/reboot/reconnect is lost on gateway status list
Ivan, can you test a current snapshot (without your modified status_gateway_groups.php) for this problem again? There... Marcus Brown

10/06/2010

07:44 PM Revision 7e1cf139: Replace hardcoded pfSense with product_name.
Jim Pingle
04:41 PM Bug #930 (Resolved): attempt to create routing group - does not create it
Chris Buechler
01:39 PM Bug #930: attempt to create routing group - does not create it
I have downloaded Today's Snapshot, and it appears to create the group.
This appears to be fixed.
Thank you!
Scott Howell
11:12 AM Bug #930: attempt to create routing group - does not create it
I tested this issue and it works for me on a recent snapshot. I get a group showing up in the list.
If you haven't...
Marcus Brown
02:48 AM Bug #930: attempt to create routing group - does not create it
I would suggest this is related to:
http://redmine.pfsense.org/issues/919
Please confirm so this can be closed....
Tony Graziano
03:25 PM pfSense Packages Bug #937 (Closed): OpenVPN client export utility does not capture IP address of server
Done. :-) Jim Pingle
03:24 PM pfSense Packages Bug #937: OpenVPN client export utility does not capture IP address of server
Different browser, the problem goes away. Aaaagh, browser issue.
Sorry for the noise. Please close this ticket, ...
Michael Lucas
03:16 PM pfSense Packages Bug #937: OpenVPN client export utility does not capture IP address of server
It must be something in your OpenVPN instance's config. The code in question looks like this:... Jim Pingle
03:00 PM pfSense Packages Bug #937: OpenVPN client export utility does not capture IP address of server
Interesting note here:
If I run the extract from the backup firewall, I get the correct IP in the installer. It's...
Michael Lucas
02:26 PM pfSense Packages Bug #937: OpenVPN client export utility does not capture IP address of server
Was not aware of 7-zip, thanks.
I've downloaded a fresh Windows Installer and looked into it with 7-zip. The conf...
Michael Lucas
02:03 PM pfSense Packages Bug #937: OpenVPN client export utility does not capture IP address of server
I downloaded and extracted a windows installer bundle and it, too, included the CARP VIP as the remote entry.
Perh...
Jim Pingle
02:01 PM pfSense Packages Bug #937: OpenVPN client export utility does not capture IP address of server
And I forgot to answer your direct question:
2.0-BETA4 (amd64)
built on Sun Oct 3 18:27:52 UTC 2010
FreeBSD 8.1-...
Michael Lucas
01:55 PM pfSense Packages Bug #937: OpenVPN client export utility does not capture IP address of server
Jim,
You are correct. The VIP is there. I created the VPN before I created any CARP interfaces, so I didn't see ...
Michael Lucas
12:41 PM pfSense Packages Bug #937 (Feedback): OpenVPN client export utility does not capture IP address of server
Can you confirm what snapshot you are running?
I just tried this on a VM on the latest image: I made a CARP VIP, ...
Jim Pingle
12:26 PM pfSense Packages Bug #937 (Closed): OpenVPN client export utility does not capture IP address of server
Running 3 October amd64 2.0 snapshot on ESXi. Using OpenVPN with the client export utility.
In the "advanced" Ope...
Michael Lucas
04:18 AM Revision aeebce1b: Use mwexec_bg instead of exec to run a service's start command so PHP doesn't hang in the likely event that it spawns a background process.
Erik Fonnesbeck
02:57 AM Bug #912: PPTP/PPPoE/L2TP VPN logs missing
Yes, exactly, that is empty when you click that button.
Last 50 PPTP VPN log entries
Time Action User IP addres...
Tony Graziano
01:19 AM Revision aab78bd9: Fix racoon.conf generation for localid_type=address. Ticket #936
Pierre POMES

10/05/2010

09:22 PM Bug #936 (Feedback): Bad racoon.conf generated with localid_type=address
Hi Thiago,
This problem should be fixed now on the next snapshot !
Regards,
Pierre
Pierre POMES
11:15 AM Bug #936 (Resolved): Bad racoon.conf generated with localid_type=address
When setting up a new Phase 2 IPSEC connection in the GUI, if 'Local Network' is set to 'Address', then an invalid ra... Thiago Witt
05:11 PM Revision 7fa03a98: Simplify this code so it's obvious what we're really testing for.
Should be no functional change here. Marcus Brown
04:45 PM Revision 1ced293c: Avoid generating a dynamic gateway entry in the list if there is already one in the config for the interface.
Marcus Brown
04:35 PM Bug #929: Remote syslog not working
Looks like it is fixed. Thanks :) orangepeel beef
03:26 PM Revision 86df2846: Test if this variable is set before making a reference, for safety. Add reference back for speed.
Jim Pingle
03:19 PM Revision 43a22ee2: This one looks safe, and might improve speed. Add it back.
Jim Pingle
03:13 PM Revision 6447bde5: This ref should be safe too
Jim Pingle
03:07 PM Revision 74e1e658: Whoops this reference was good (for speed) and should stay.
Jim Pingle
02:56 PM Revision 6727f4ef: More unneeded references.
Jim Pingle
02:52 PM Revision b676a6a9: Remove unneeded reference.
Jim Pingle
02:49 PM Revision 070343cb: Remove unused variable.
Jim Pingle
02:49 PM Revision b51f12bb: No need for a reference here.
Jim Pingle
12:34 PM Revision 4178a1dd: Add contributed patch to allow certain IPsec mobile clients to save Xauth passwords. Fixes #933.
Jim Pingle
12:24 PM Revision e857eff6: Merge remote branch 'mainline/master' into inc
Renato Botelho
09:18 AM Revision d62b164a: Report dynamic gateways as default even when they are down.
If gateways appear to lose their default status when they are down it can
be confusing for users. This is purely a UI...
Marcus Brown
09:12 AM Revision 8d3556c2: Add $g variable to global declaration so we can access it later.
Marcus Brown
09:06 AM Revision dc9975f4: Print the theme correctly.
Warren Baker
08:35 AM Feature #933 (Feedback): Add IPsec option to allow the client to save the Xauth password
Applied in changeset commit:"4178a1ddf67da87a1a86c5df9c3367aea6d3ae07". Jim Pingle
08:33 AM Feature #933: Add IPsec option to allow the client to save the Xauth password
Committed, thanks! Jim Pingle

10/04/2010

10:47 PM Feature #933: Add IPsec option to allow the client to save the Xauth password
Patch attached. Paul K
08:57 PM Feature #933 (Closed): Add IPsec option to allow the client to save the Xauth password
Add check box in the 'Client Configuration (mode-cfg)' section of IPsec configuration pages that would allow pfSense ... Paul K
09:43 PM Feature #935 (Resolved): User manager RADIUS authentication method
pfsense 2.0 has the new radius authentication method, but the code has no way to assign privileges to the radius user... orangepeel beef
09:03 PM Feature #934: Add RADIUS support to Diag>Auth page
to be clear this is from:
system_usermanager_settings.php with radius server configured
orangepeel beef
09:02 PM Feature #934 (Closed): Add RADIUS support to Diag>Auth page
This page only supports LDAP currently. orangepeel beef
07:01 PM Revision 68b04527: Fix OpenVPN client kill. Reported at http://forum.pfsense.org/index.php/topic,28784.0.html
Jim Pingle
04:52 PM Bug #932: IP TTL does not get decreased with route-to/reply-to.
Not a big deal. Chris Buechler
09:49 AM Bug #932: IP TTL does not get decreased with route-to/reply-to.
I added an FAQ to cover this since it affects older versions as well:
http://doc.pfsense.org/index.php/Router_is_Mis...
Jim Pingle
08:48 AM Bug #932 (Not a Bug): IP TTL does not get decreased with route-to/reply-to.
pf(4) policy routing(route-to/reply-to) does not decrease the ip TTL when forwarding packets.
This makes pfSense inv...
Ermal Luçi
01:26 PM Revision e9b0bcf7: Ticket #931. Check that directory exist before trying to tar up. Do this for rrd and dhcpleases scripts used during shutdown.
Ermal LUÇI
01:20 PM Revision b211666f: Mark subsystem as dirty.
Ermal LUÇI
01:13 PM Revision da3ee823: Do not use mwexec when unlink can be used and is faster. This also avoids errors on log from rm(1).
Ermal LUÇI
01:09 PM Revision a17027a6: Do not try to update dyndns for an interface that no ip can be determined, since it will not suceed. Reported-by: http://forum.pfsense.org/index.php/topic,28750.0.html
Ermal LUÇI
01:00 PM Revision 9cc0dd73: Bring l2tp users page back to latest world of 2.0 to avoid errors. Reported-by: http://forum.pfsense.org/index.php/topic,28829.0.html
Ermal LUÇI
12:39 PM Revision 54b78cc1: Fix checking the status of gateways. Typos and unset variables! Spotted-by: Mark Huijgen
Ermal LUÇI
09:31 AM Bug #928 (Feedback): pfSense freezes during boot if DHCP client interface doesn't get a reponse from DHCP server
This should be fixed in snapshots after Oct 3. Ermal Luçi
09:25 AM Bug #931 (Feedback): Don't try to backup DHCP leases if DHCP server disabled
Ermal Luçi
12:41 AM Bug #834 (Resolved): DHCP server options for TFTP server doesn't allow arbitrary strings
Chris Buechler

10/03/2010

10:55 PM Bug #834: DHCP server options for TFTP server doesn't allow arbitrary strings
I just updated to a nightly and tested this and it appears to work fine now. Calvin Hendryx-Paker
06:11 PM Bug #931 (Resolved): Don't try to backup DHCP leases if DHCP server disabled
The DHCP lease backup causes errors when the DHCP server isn't enabled. ... Chris Buechler

10/02/2010

02:03 PM Bug #849 (Resolved): diag_authentication.php Results Formatting
Thanks. the other issue you noted on some password fields is a general one (related to css IIRC), there is another t... Chris Buechler
09:42 AM Bug #849: diag_authentication.php Results Formatting
_checked on 2.0-BETA4 (amd64) Sat Oct 2 08:52:40 UTC 2010:_
Looks better now.
Just a minor cosmetic issue:
In th...
Andreas Bochem
02:02 PM Bug #857 (Resolved): firewall_rules_edit.php Typos
Chris Buechler
09:28 AM Bug #857: firewall_rules_edit.php Typos
_checked on 2.0-BETA4 (amd64) Sat Oct 2 08:52:40 UTC 2010:_... Andreas Bochem
01:58 PM Bug #866 (Resolved): Changing a route's mask leaves the old route
Thanks Chris Buechler
08:51 AM Bug #866: Changing a route's mask leaves the old route
_checked on 2.0-BETA4 (amd64) Sat Oct 2 08:52:40 UTC 2010:_
Added testing route /16, changed to /24, and changed aga...
Andreas Bochem
01:57 PM Bug #862 (Resolved): rename interface group error
Chris Buechler
09:22 AM Bug #862: rename interface group error
_checked on 2.0-BETA4 (amd64) Sat Oct 2 08:52:40 UTC 2010:_
* created interface group "testgroup" (with just one int...
Andreas Bochem
09:56 AM Bug #834: DHCP server options for TFTP server doesn't allow arbitrary strings
_checked on 2.0-BETA4 (amd64) Sat Oct 2 08:52:40 UTC 2010:_
WebGUI permits to enter under "Additional BOOTP/DHCP opt...
Andreas Bochem
07:29 AM Revision c6865c5e: Fix intended behaviour when the default gateway changes interface.
Ermal LUÇI
07:14 AM Revision a531d687: This breaks the code because the ASSUMPTION is to reload the gateway interface that was a defaultgw previously and not the interface that just became defaultgw. Mostly for dynamic connections like dhcp/ppp*
Pointy-hat: gnhb
Revert "Update code to actually accomplish the intended behavior of NOT reloading the interface"
T...
Ermal LUÇI
05:27 AM Revision 318baca5: Update code to actually accomplish the intended behavior of NOT reloading the interface
if not necessary when a GW record is saved. Marcus Brown

10/01/2010

06:40 PM Revision 1bbd3d99: Fix height of plus button, reported at http://forum.pfsense.org/index.php/topic,28764.0.html
Erik Fonnesbeck
05:51 PM Revision db91013a: Be sane at what was supposed to be done.:
Ermal LUÇI
05:41 PM Revision e62fe748: Do not show statically configured interfaces as with dynamic gateways because the gateway is already referenced/monitored on its own entry.
Ermal LUÇI
05:38 PM Revision b314ab72: Better initialize this.
Ermal LUÇI
05:08 PM Revision 23fafd14: Do not allow a gateway to be renamed. Possibly a better solution is to rename the gateway in all pointed places!
Ermal LUÇI
05:03 PM Revision c568e682: Handle the cases to not save data on config better.
Ermal LUÇI
04:51 PM Revision 78ae2b14: Make sure we do not overwrite the gateway stored in config with a dynamic gateway info. Correct POST var name(Found by ghnb). Also correctly reload only the defaultgw interface changed only if it is different than the present one.
Ermal LUÇI
04:24 PM Bug #917 (Resolved): Changing WebGUI port does not restart lighttpd with new settings
Jim Pingle
04:21 PM Bug #917: Changing WebGUI port does not restart lighttpd with new settings
Tested on Snapshot built on Fri Oct 1 07:58:19 UTC 2010:
Chaging the WebGUI port is effective immediately.
Andreas Bochem
04:24 PM Bug #905 (Resolved): OpenVPN certificate manager uses incorrect key length
Jim Pingle
04:16 PM Bug #905: OpenVPN certificate manager uses incorrect key length
Confirm certs are now created with the correct key length as chosen in the gui.
Tested on Snapshot from Fri Oct 1 07...
Andreas Bochem
04:08 PM Revision d44d26c1: Fix the problem of not saving data when most of the information is not being posted. Also do not disable any field anymore to allow people to choose static gateways for dynamic interfaces. Also do not save any information when the user Clicks save but has not posted any information not known already. Do not prevent to post a dynamic value for gateway on an interface that is configured with static ip.
Ermal LUÇI
01:29 PM Revision 8e1fd4fe: More gettext fixes
Renato Botelho
01:17 PM Revision addc0439: Fix quotes to use %N$X on gettext calls
Renato Botelho
01:06 PM Bug #930 (Resolved): attempt to create routing group - does not create it
System: Gateway Groups
When attempting to create a rout group (System -> Routes -> Groups), upon completion, the s...
Scott Howell
12:56 PM Revision 788c1288: Merge remote branch 'mainline/master' into inc
Conflicts:
etc/inc/filter.inc
etc/inc/system.inc
Renato Botelho
12:55 PM Revision 07bdaacd: Fix syslog.conf generation. Ticket #929
Pierre POMES
08:58 AM Bug #929 (Feedback): Remote syslog not working
Ok, thanks for this last report.
I just commited a fix, issue should be fixed now, it is working on my box.
Ch...
Pierre POMES
08:37 AM Bug #320: Using special characters (e.g. åäö) in certificate "Descriptive name" breaks entire WebGUI
The fullname field in the user manager is also another source of this issue. It will either need to be CDATA escaped ... Jim Pingle
02:10 AM Revision 80a5b5f7: We don't store monitor ip in the <interfaces> config any more.
Requested by cbuechler in ticket #919. Marcus Brown
12:04 AM Revision 24d4a390: When a dynamic interface is up, we still need to report that it's "dynamic" to this GUI in system_gateways_edit.php.
If user edits a dynamic gateway that is up, the gateway IP address (reported by return_gateways_array) will end up
in...
Marcus Brown
12:01 AM Revision e0df9716: cbuechler says monitorip should not be stored in <interfaces><$if>. See ticket #919
Marcus Brown

09/30/2010

08:59 PM Bug #929: Remote syslog not working
problem seems to be when only ticking the checkbox for "Everything"
if i check all the checkboxes I get:...
orangepeel beef
07:09 PM Bug #929: Remote syslog not working
... orangepeel beef
07:06 PM Bug #929: Remote syslog not working
Can you also send me your syslog.conf ?
Thanks,
Pierre
Pierre POMES
06:19 PM Bug #929: Remote syslog not working
they are all clustered though, Chris are your pfsense's clustered as well? orangepeel beef
06:18 PM Bug #929: Remote syslog not working
Have unchecked and rechecked enable remote syslog multiple times, have removed the syslog server and put in a differe... orangepeel beef
06:16 PM Bug #929: Remote syslog not working
Mine is :... Pierre POMES
06:12 PM Bug #929: Remote syslog not working
<syslog>
<reverse/>
<nentries>100</nentries>
<logall/>
...
orangepeel beef
06:02 PM Bug #929: Remote syslog not working
Mine looks like this. ... Chris Buechler
06:00 PM Bug #929: Remote syslog not working
I also confirm this is working in recent snapshots.
Can you give the syslog part of your /cf/conf/config.xml file ...
Pierre POMES
04:00 AM Bug #929: Remote syslog not working
I'm using the version 2.0-Beta4 Wed. sep 29 12:15:10 EDT 2010
The logging on remote server work fine.
May be yo...
Tahar GUEBLI
12:00 AM Bug #929: Remote syslog not working
I was previously running the Aug 28 build, and it existed there. Updated to latest build today and still there. orangepeel beef
04:52 PM Revision 3640c567: Ticket #921. Actually reconfigure apinger in case of newip event because it might impact a previous down event.
Ermal LUÇI
04:04 PM Revision a02708b1: Make this code more readble and clear on what it does.
Ermal LUÇI
03:58 PM Revision ccea4c49: Remove legacy code for static routes.
Ermal LUÇI
03:54 PM Revision 8d29cef4: Oops fix long standing variable name mistype.
Ermal LUÇI
03:53 PM Revision dd88e65a: Remove legacy code
Ermal LUÇI
03:49 PM Revision a63d867a: Catch up with gateway changes on static routes.
Ermal LUÇI
03:42 PM Revision dd8b859e: Remove support for this legacy code. The upgrade path handles this.
Ermal LUÇI
03:39 PM Revision 11d2be54: Revert previous change to enter a hidden value when interface is disabled. GHNB broke this on revision 58611e3a1da07a33c6cf65401ad3edf278190e75 and it does not make sense.
Ermal LUÇI
03:20 PM Revision f5d3a5ce: Do not support anymore an ip in the 'gateway' section of an interface.
Ermal LUÇI
03:20 PM Revision bc50b332: Remove forgotten code.
Ermal LUÇI
03:14 PM Revision bb849003: Initialize variable properly. Handle the case when the interfaces select box is disabled and it will not be posted(Reported-by: ghnb
Ermal LUÇI
12:53 PM Bug #921 (Feedback): Gateway monitoring stops after interface goes down
Ermal Luçi
12:20 PM Revision 9fd19334: Don't refer to non-existent variable.
Reported in forum http://forum.pfsense.org/index.php/topic,28643.0.html Marcus Brown

09/29/2010

09:53 PM Bug #929: Remote syslog not working
this regressed somewhat recently Chris Buechler
09:32 PM Bug #929 (Resolved): Remote syslog not working
I have configured syslog to send to a remote host but it is not sending any traffic. Doing a tcpdump shows no syslo... orangepeel beef
08:06 PM Bug #928 (Resolved): pfSense freezes during boot if DHCP client interface doesn't get a reponse from DHCP server
Reported here:
http://forum.pfsense.org/index.php/topic,28501.msg148698.html#msg148698
I can confirm I've seen sa...
Marcus Brown
07:53 PM Bug #927 (Closed): 3G modem rendered un-usable by forced cycling of connection
My 3G modem (USB Mercury connect) gets locked up when function interface_configure is called and the modem is already... Marcus Brown
05:09 PM Revision 5b3f9124: Fix state sorting
Jim Pingle
02:00 PM Revision 433ebfab: Update serviceproviders.xml to a newer version
Vinícius Coque
09:09 AM Revision 295764d5: Clean up Firewall: NAT: 1:1: Edit page.
- Change order of fields to be more consistent with the old order and the order shown on the rule listing, placing mo... Erik Fonnesbeck
06:38 AM Revision 6fa73745: Fix input validation with "no rdr" for ticket #570
Erik Fonnesbeck
06:05 AM Revision 44374c0a: Hide redirect and filter rule association fields when "no rdr" is checked. Ticket #570
Erik Fonnesbeck
05:29 AM Revision 3e74107e: Unhide the source port options on firewall rules when they are not at the defaults.
Erik Fonnesbeck
04:31 AM Revision 70a9056f: Revert "Shows source ports when they are already defined" - this only made it so they were never hidden.
This reverts commit d886ebd6d438cf9b397face67ed4f254de661a94. Erik Fonnesbeck
04:15 AM Revision 96160768: Simplify the logic here so that it only uses this conditional expression once.
Erik Fonnesbeck
04:02 AM Revision 727b04df: Revert "Remove unnecessary JS variable" - it had a purpose.
This reverts commit ec325889dc8a9a9ee4476bea6cb17cc4b63e28fe. Erik Fonnesbeck
03:02 AM Bug #570 (Feedback): When "No RDR" is checked on a port forward, hide fields that do not apply.
Erik Fonnesbeck

09/28/2010

10:39 PM Revision 59fe0814: Define and explain $aliases as a global.
Jim Pingle
10:31 PM Revision 8d1cd2db: Use a glob here instead of a shell exec.
Jim Pingle
10:29 PM Revision 2f13b10c: Carry aliases around as a global so that discover_pkg_rules() can see aliases/macros, otherwise package rules that reference aliases/macros will never properly pass verification.
Jim Pingle
03:13 PM Revision 25fec9b3: Test before working on what could be an empty value, otherwise it ends up set and causing an unexpected duplication. Fixes duplicate groups when editing users, as reported here: http://forum.pfsense.org/index.php/topic,26612.0.html
Jim Pingle
01:19 PM Revision 43652f2f: Merge remote branch 'mainline/master' into inc
Renato Botelho

09/27/2010

10:48 PM Todo #881: Passive FTP over pfsense
I too see this issue. No passive FTP out from the LAN->WAN works. I just updated to Mon Sep 27 04:12:19 EDT 2010 fro... Mike McLaughlin
04:11 AM Bug #922: Traffic Shaper
The problem persist on filter reload
after an upgrade to latest snapshot i have this problem:
Acknowledge All ...
Andrea Cutelle'
02:58 AM pfSense Packages Bug #925 (Rejected): Open VM Tools install
duplicate of #844 (it's the same, it's broken, we're aware) Chris Buechler
02:51 AM pfSense Packages Bug #925 (Rejected): Open VM Tools install
- responds to Bug #844 but its not the same
- there was 2.0 BETA Snapshots with the possibility to install open vm t...
Falk Nisius

09/26/2010

08:05 PM Revision 7eab3309: Do not synchronize ip alias. Ticket #882
Pierre POMES
07:59 PM Revision f44f8eb5: Properly handle reinitializing of variables on the next loop. Reported-by: http://forum.pfsense.org/index.php/topic,28636.0.html
Ermal LUÇI
06:49 PM Bug #495: USB drive fails to mount during boot
Had same problem mounting root from USB DVD drive with pfSense-2.0-BETA4-20100925-1629. Worked fine with pfSense 1.2.... Anonymous
04:07 PM Bug #882 (Feedback): IP aliases should not sync
The line to prevent synchronization (as for "proxyarp") was missing, probably because "ipalias" VIP type was added in... Pierre POMES

09/25/2010

09:07 AM Revision 49f61a1c: Rename to pass-through credits and improve descriptions.
Erik Fonnesbeck
08:36 AM Revision 8015e67b: Separate this control structure from the one before it, change the order, and rename the function.
Erik Fonnesbeck
06:49 AM Revision e65d1a98: Display the correct state when the new checkbox has been checked.
Erik Fonnesbeck
05:49 AM Bug #923 (Closed): Incoming traffic marked with diffserv goes to wrong queue
we're not investigating any shaper issues on 1.2.x as it's completely rewritten in 2.0. If you have issues on 2.0, pl... Chris Buechler
05:09 AM Revision 03552507: Add an option for allowing clients to pass through the captive portal a limited number of times before requiring login.
Erik Fonnesbeck
04:07 AM Bug #922: Traffic Shaper
Hi, after an ugrade to version: 2.0-BETA4 (i386)
built on Fri Sep 24 14:30:24 EDT 2010
there are many problem o...
Andrea Cutelle'

09/24/2010

11:12 PM Bug #903 (Closed): Login problem
Chris Buechler
11:10 PM Bug #903: Login problem
Ok. It appears to be a USB problem, I moved pfSense to the hard disk, no problem for the time being Ricardo Ramirez R.
11:07 AM Bug #729: if_bridge unpredictable filter interface selection
Seeing something different, but similar with a bridge configuration. It appears now that the arp cache is leaking int... Derek Buttineau
10:08 AM Bug #923 (Closed): Incoming traffic marked with diffserv goes to wrong queue
I have one installation of pfsense 1.2.2 and one of pfsense 1.2.3 with a similar configuration:
- same voip provid...
Silvio Massina
08:46 AM Bug #320 (New): Using special characters (e.g. åäö) in certificate "Descriptive name" breaks entire WebGUI
This is still a problem for sysctl tunables. For some reason their description field is desc and not descr, so they a... Jim Pingle
08:10 AM Bug #922 (Closed): Traffic Shaper
hi, 2.0-BETA4 (i386)
built on Thu Sep 23 14:10:46 EDT 2010
FreeBSD 8.1-RELEASE-p1
with traffic shaper enable w...
Andrea Cutelle'
06:26 AM Revision a36e98ff: Fix description for upload of logout page.
Erik Fonnesbeck
06:03 AM Revision b6494b87: Restore this code so the redirect after logging into the captive portal will work again. Ticket #918
Erik Fonnesbeck
05:40 AM Revision 6991e1a6: Fix the contents of the captive portal logout popup. Fixes #836
Erik Fonnesbeck
03:09 AM Bug #920: Routing groups don't change monitor IP address when PPPoE reconnects
Same code is causing this problem as #919. Marcus Brown
03:07 AM Bug #919: dynamic gateway handling is broken
I'm working on this issue. Marcus Brown
02:13 AM Bug #918: CP redirection URL and logout on popup don't work
I'm not quite sure what you mean for that second part. The option for the logout popup is unchecked by default. Erik Fonnesbeck
02:07 AM Bug #835 (Feedback): Captive portal non redirecting correctly when logout popup is enabled
This was related to #836, so it should also be fixed. Erik Fonnesbeck
01:40 AM Bug #836: Captive portal logout popup windows doesn't disconnect the user
Applied in changeset commit:"6991e1a60d4475d84660376f26f07735f8cbf67f". Erik Fonnesbeck

09/23/2010

10:59 PM Bug #921 (Resolved): Gateway monitoring stops after interface goes down
2.0-BETA4 Wed Sep 8 05:47:43 UTC 201
Further background info in Bug #920
1) Set WAN monitor IP to 4.2.2.2
2) P...
Andreas van dem Helge
10:46 PM Bug #920 (Resolved): Routing groups don't change monitor IP address when PPPoE reconnects
When using a PPPoE connection with dynamic IP address and dynamic gateway which both change each time a session is es... Andreas van dem Helge
08:40 PM Revision 5eb03383: Add additional acceptable version strings.
Jim Pingle
05:03 PM Revision a0995b8d: Fix Status > Services display and sorting, plus some HTML formatting and cleanup.
Jim Pingle
04:51 PM Revision 313827fd: Add a note to the Gateway Groups page reminding users that they must be used in firewall rules, and don't work just by defining the groups. Also, add thead/tbody/tfoot.
Jim Pingle
03:49 PM Revision 838e27bf: Pass args to openssl_pkey_new() so it gets the key length too. Fixes #905
Jim Pingle
02:02 PM Bug #919: dynamic gateway handling is broken
The monitor IP should never be associated with an interface, sounds like there are still bits of that issue around (i... Chris Buechler
07:05 AM Bug #919: dynamic gateway handling is broken
This is still partially broken. After my commit, it saves properly, but you can't unset(delete) the monitor ip becaus... Marcus Brown
06:00 AM Bug #919 (Feedback): dynamic gateway handling is broken
Applied in changeset commit:"58611e3a1da07a33c6cf65401ad3edf278190e75". Marcus Brown
05:55 AM Bug #919: dynamic gateway handling is broken
I just tested saving a monitor ip on the OPT3 interface on the monitorip field did end up in the [interfaces][opt] se... Marcus Brown
04:19 AM Bug #919 (Resolved): dynamic gateway handling is broken
2.0 BETA4, built Sept22, on an ALIX board with a 3G PPP WAN connection defined.
1. I've been reading of the code t...
Marcus Brown
11:50 AM Bug #905 (Feedback): OpenVPN certificate manager uses incorrect key length
Applied in changeset commit:"838e27bf24f54735795387800ce2d43662f3cc81". Jim Pingle
11:47 AM Bug #905: OpenVPN certificate manager uses incorrect key length
Looks like the key length wasn't also being passed to openssl_pkey_new. I'll be committing a fix shortly. Jim Pingle
11:38 AM Bug #905: OpenVPN certificate manager uses incorrect key length
This can also be verified by using standard OpenSSL commands:... Jim Pingle
11:02 AM Revision b256213d: Spelling of 'Access'.
Warren Baker
10:44 AM Bug #910: CARP+Bridging+NAT can lead to "freeze"/"lockup"
Another report here:
http://forum.pfsense.org/index.php/topic,28557.0.html
Jim Pingle
10:00 AM Revision 315c6c1c: Merge branch 'master' of rcs.pfsense.org:pfsense/mainline
Marcus Brown
09:57 AM Revision 58611e3a: Fixes #919 by properly saving <gateway> field as "dynamic"
` Marcus Brown
09:56 AM Revision db3791e9: DNSWatch core dumps when it encounters white spaces.
Warren Baker
 

Also available in: Atom