Activity

30 days up to

User

Subprojects

Activity

From 03/17/2011 to 04/15/2011

04/15/2011

08:57 PM Revision 13399e17: Properly add dns and wins fields, load them on page load.: Seth Mos
08:54 PM Revision d7bccf3c: Generate a address from the bridge mac and configure a v6 address: Seth Mos
04:38 PM Revision a51493d1: Merge remote-tracking branch 'mainline/master' into inc: Conflicts:
etc/inc/gwlb.inc Vinicius Coque
04:11 PM Revision 7b2fdeb3: Properly set/unset voucher enable/disable bit.: Jim Pingle
03:17 PM Bug #954: Switching to manual outbound NAT creates incorrect rule for PPTP server: The internal automatic rule is wrong as well. Regardless of how many clients you have, the outbound NAT rule it makes... Jim Pingle
01:06 PM Revision 3df79aa0: Merge remote branch 'upstream/master': Conflicts:
usr/local/www/interfaces.php Seth Mos
12:53 PM Revision b9bbae04: Move the link to add a gateway up next to the drop-down box so it is more obvious.: Jim Pingle
12:37 PM Revision 6d3fd938: Change the wording and the link placement for adding a new gateway: Seth Mos
08:42 AM Revision b1c305e7: Merge remote branch 'upstream/master': Seth Mos
08:41 AM Revision cfd40454: Make it possible to add a IPv6 gateway using the ajax add button: Seth Mos
12:44 AM Todo #1438 (Resolved): Add override for CSR request->response subject mismatch: Just a bit of bug checking and the code that I mentioned on the mailing list will be ready (I am waiting on my CA to ... Yehuda Katz

04/14/2011

11:15 PM Bug #1437 (Resolved): More validation needed on CSR generation: It appears that if the countryName in the requested subject is not recognized by openssl, it throws these two errors ... Yehuda Katz
10:32 PM Feature #752 (Resolved): Ease policy routing across OpenVPN: this has been good for a while, using it on a number of installs. Chris Buechler
08:50 PM Revision ca90133b: Save a little space on the interface list for console assignment.: Jim Pingle
07:11 PM Bug #1436 (Resolved): firewall syslog stops working after reboot: 2.0-RC1 (i386)
built on Thu Apr 14 15:32:22 EDT 2011
You are on the latest version.
Platform nanobsd (1g)
H... Rob Lister
05:26 PM Revision d2903c0c: Test if a variable is set before trying to unset it. If a user has no rules in their config, then $config['filter'] would not be undefined, so unsettings $config['filter']['bypassstaticroutes'] would result in an error. http://forum.pfsense.org/index.php/topic,35702.0.html: Jim Pingle
02:35 PM pfSense Packages Feature #1435 (Needs Patch): Squid - add syslog capability: Hi,
Is it possible to add the squid log module rather than storing the logs
locally on the pfsense device?
If... Rob Lister
11:08 AM Feature #1434 (New): Radius Accounting in OpenVPN: Radius Accounting packets are critical to any enterprise implementation of OpenVPN due to compliance reasons. It is a... Fan Net
06:03 AM Bug #1149: nano build - upgrade size failure on USB flash drives: newbie on bsd and pfsense.
filed a bug week or so ago, got rejected. found this, exactly my problem.
currently ... juan peridot
06:00 AM Bug #1149: nano build - upgrade size failure on USB flash drives: newbie on bsd and pfsense.
filed a bug week or so ago, got rejected. found this, exactly my problem.
currently ... juan peridot

04/13/2011

08:13 PM Bug #1402: When creating a QinQ it works until reboot.: Is there any news about this issue??
Saludos! Juan José Ponce Domínguez
06:01 PM Bug #651: Multiple gateways on WAN interface: Ermal Luçi wrote:
> The problem with this is that apinger will bind to the same address and has no idea that the mon... Francesco R
04:34 PM Todo #648: Move "base" packages such as RIP, OLSR, etc, back into packages: Currently I know about at least 5 installations using the LiveCD in corporate installations
(+ my own one).
The r... Daniel Berlin
12:38 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: my pf info
2.0-RC1 (i386)
built on Tue Apr 12 11:38:49 EDT 2011 Hafiz Rafiyev
12:31 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: at last i found my periodically ipsec disconnect problem after researching in redmine,i'm using pptp from home to c... Hafiz Rafiyev
07:52 AM Revision c8cc0c1c: Add missing fields for l2tp to define dns and wins servers: Seth Mos

04/12/2011

10:18 PM Revision a93020d5: Do not send growl notices twice: Scott Ullrich
10:08 PM Revision 2632934e: Remove blank trailing c/r.: Scott Ullrich
10:08 PM Revision 10c3d4c0: Notify via smtp as well as growl: Scott Ullrich
05:52 PM Revision cd11a142: Drop the ntpdate sync in favor of using ntpd -s, which should have the same net effect without needing the shell script that has been prone to hanging.: Jim Pingle
05:14 PM Bug #1397 (Resolved): ntpdate sync not functioning properly: Jim Pingle
05:13 PM Bug #1397: ntpdate sync not functioning properly: Hi Jim P,
That change seemed to do the trick. NTP is running just perfectly after making those changes and rebooti... Damon Morda
04:58 PM Bug #1397: ntpdate sync not functioning properly: I updated this again with commit:cd11a14
ntpdate sync is completely gone, since simply starting ntpd with -s will ... Jim Pingle
04:58 PM Bug #1347: ntpd not starting: I updated this again with commit:cd11a14
ntpdate sync is completely gone, since simply starting ntpd with -s will ... Jim Pingle
04:29 PM Revision 2816c5a1: Fix Parse error: Seth Mos
02:04 PM Revision d67b6b17: Also exclude grep from running processes when grepping for a running packet capture. Also, fix other test to match the recent changes made.: Jim Pingle
08:43 AM Revision 2521266a: Only pick up the ipv6 addresses from the DNS servers section: Seth Mos
08:40 AM Revision af8f910e: Merge remote branch 'upstream/master': Seth Mos
08:39 AM Revision 86966fba: Merge remote branch 'upstream/master': Conflicts:
etc/inc/filter.inc
usr/local/www/themes/the_wall/rrdcolors.inc.php Seth Mos
01:24 AM Feature #1431: PPPoE LQR Echo: tricking the WAN interface to become a DHCP connection and back to PPPoE works . However after a system restart, the ... Calvin Teh
01:05 AM Feature #1431: PPPoE LQR Echo: I don't have anything with PPPoE handy but it looks at a glance like keep-alive should always be present. From interf... Chris Buechler
12:37 AM Bug #1433 (Resolved): Config sync causes CARP state change: Any config change causes the CARP IPs on the secondary to come up as master and back down to backup, which is unneces... Chris Buechler

04/11/2011

08:58 PM Revision 127eb8e0: Add a toggle under System > Advanced on the misc tab to enable/disable debug mode for racoon.: Jim Pingle
09:25 AM pfSense Packages Bug #1385: Open-VM-Tools not working anymore: Confirm not working on amd64 platform as well
2.0-RC1 (amd64)
built on Sun Apr 10 21:49:29 EDT 2011 Calvin Teh
09:19 AM Bug #1428 (Resolved): DNS servers not assigned: I was able to reproduce this, and committed a fix on Saturday. This is fixed on current snapshots, and confirmed with... Jim Pingle
09:04 AM Bug #1428: DNS servers not assigned: Same problem here after update... ISP DNS servers not applied. Had to enter DNS servers manually.
2.0-RC1 (i386)
... Chuck Evangelista
07:15 AM Bug #1381: GRE tunnel interface IP address updated after reboot only: you can close it. it's work as explained in your update Zeev Zalessky
04:44 AM Bug #1432 (Resolved): Carp Vips are promoted to master before firewall filter load: When the "master" machine boots, the CARP ips are promoted to master immediately, even before the firewall filters ar... Michele Di Maria
01:10 AM Bug #1399: rrdtool respawning too fast: Noticed this message in syslog long ago. Maxim Luppov
12:56 AM Feature #1431: PPPoE LQR Echo: one thing that I have noticed is , when WAN interface is on DHCP the keep alive option is working perfectly fine. Cha... Calvin Teh

04/10/2011

11:48 PM Feature #1431: PPPoE LQR Echo: mpd5 mentions it as a "set link keep-alive seconds max" parameter under mpd.conf .. but that mpd.conf is no where to ... Calvin Teh
09:42 PM Feature #1431: PPPoE LQR Echo: you'll have to look into mpd 5 and see if it supports that. Chris Buechler
09:28 PM Feature #1431 (Closed): PPPoE LQR Echo: Some ISPs that I have experienced with locally requires LQR echo reply sent from the client to ensure that the sessio... Calvin Teh
09:43 PM Bug #1413 (Closed): PPPoE connection disconnects consistently: actual cause in #1431 Chris Buechler
09:02 PM Bug #1413: PPPoE connection disconnects consistently: Dear All,
I have found the root cause of the issue that the ISP requires a LCP echo inteval reply of 30 seconds in... Calvin Teh
05:10 AM Bug #1347: ntpd not starting: with the Fri Apr 8 18:33:38 EDT 2011 build the
issue seems to be gone.
Thank you Martin Klein

04/09/2011

04:31 PM Bug #1428: DNS servers not assigned: need dhclient logs, that just looks like you aren't being assigned DHCP servers. Chris Buechler
01:36 PM Bug #1428: DNS servers not assigned: They should be assigned via DHCP by the ISP but PFSense will not accept them so I have assigned them manually in gene... Lloyd Collins
11:36 AM Bug #1428: DNS servers not assigned: Not enough info here. Are these assigned manually? By DHCP? Any errors in the logs or console? Jim Pingle
09:25 AM Bug #1428 (Resolved): DNS servers not assigned: I just updated my PFsense install to the latest version (2.0-RC1 (i386)built on Fri Apr 8 18:33:38 EDT 2011) and DNS ... Lloyd Collins
04:00 PM Revision 4eb4b18a: Revert changes to dhclient-script. Appears to have broken DNS servers from DHCP. Ticket #1428: Jim Pingle
06:43 AM Bug #1413: PPPoE connection disconnects consistently: here are the screenshot attachments for the PPPoE configuration Calvin Teh

04/08/2011

08:08 PM Revision e9e06fb2: Fix copy/paste error: Jim Pingle
07:39 PM Bug #1397: ntpdate sync not functioning properly: Hi Jim P,
I've also applied your commits, but it didn't resolve the issue. Once I applied them and started the dis... Damon Morda
05:28 PM Bug #1397: ntpdate sync not functioning properly: The ntp issue would be separate (it has its own ticket), but I didn't test with openvpn. I suspect that's because Ope... Jim Pingle
04:59 PM Bug #1397: ntpdate sync not functioning properly: Jimp, I've applied your commits and I see the service is now running fine at startup and is able to stop and restart ... Angel Torres
11:49 AM Bug #1397 (Feedback): ntpdate sync not functioning properly: Should be fixed as of commit:edf99ce (See also commit:2db351a and commit:54c1859) Jim Pingle
06:15 PM Revision ac6651c9: Make sure a theme directory actually exists before blindly using it.: Jim Pingle
03:46 PM Revision edf99ce4: Rework ntpdate_sync_once.sh, so it makes sure ntp/ntpdate/itself are not running before trying to sync time, and then launch ntpd at the end for time sync (last commit was premature): Jim Pingle
03:20 PM Revision 54c18594: Don't unconditionally start ntpd after doing ntpdate, it might be disabled.: Jim Pingle
03:20 PM Revision 2db351a7: Send ntpdate output to syslog: Jim Pingle
02:10 PM Bug #1427: Typo? in /tmp/post_upgrade_command prevents UP kernel upgrade: Use the pre button for code.
The issue here is somewhat moot: The UP kernel is eventually going to be phased out. ... Jim Pingle
02:08 PM Bug #1427: Typo? in /tmp/post_upgrade_command prevents UP kernel upgrade: Let's try one more time...
> if [ $KERNELTYPE = "UP" ]; then
> > -if [ -f /kernels/kernel_SMP.gz ]; then-
> > +if ... Yehuda Katz
02:07 PM Bug #1427: Typo? in /tmp/post_upgrade_command prevents UP kernel upgrade: The formatting of that ticket came out really bad.
> if [ $KERNELTYPE = "UP" ]; then
> > if [ -f /kernels/kernel_SM... Yehuda Katz
02:05 PM Bug #1427 (Resolved): Typo? in /tmp/post_upgrade_command prevents UP kernel upgrade: From the mailing list:... Yehuda Katz
12:59 PM Revision fbfd675a: Add an IPsec xauth permission. Try to use the nologin shell first (just unlock the account). Ticket #1202: Jim Pingle
12:28 PM Revision 02d99511: Putting client-config-dir in the config is valid also for p2p_tls servers. Fixes #1417.: Jim Pingle
11:54 AM Bug #1347 (Feedback): ntpd not starting: Jim Pingle
11:52 AM Bug #1347: ntpd not starting: If you have a WAN failure or don't have working DNS, then launching ntpd is just as useless because it uses the same ... Jim Pingle
08:30 AM Bug #1417: OpenVPN client specific overrides doesnt work by default: Applied in changeset commit:"02d99511539a3312f8aab54b7dd1cdcaec9c0847". Jim Pingle
08:22 AM Bug #1417: OpenVPN client specific overrides doesnt work by default: Strike that. Looking at the backend code, you must be using "Peer to Peer (SSL/TLS)". It seems that one case was miss... Jim Pingle
08:17 AM Bug #1417: OpenVPN client specific overrides doesnt work by default: What exact settings are you using for your OpenVPN server?
I just set up an instance with the wizard and it does h... Jim Pingle
03:59 AM Bug #1417: OpenVPN client specific overrides doesnt work by default: I have the following content in the client specific configuration.... Raffael Schmid
03:19 AM Bug #1426 (Resolved): IPsec descriptions need trimmed in rule labels: On configs upgraded from 1.2.3 at a minimum, and possibly others, the automatically generated IPsec rules do not trim... Chris Buechler

04/07/2011

08:17 PM Revision b510be5c: use same egrep statement for both checks: Scott Ullrich
08:16 PM Revision 1fd807da: Use full path to egrep: Scott Ullrich
08:15 PM Revision d0cc727e: Use full path to egrep: Scott Ullrich
08:11 PM Revision 955f2d78: Use some Seth egrep foo to protect from compromised DHCP servers. CVE-2011-0997: Scott Ullrich
07:32 PM Bug #1425: pfSense stops receiving traffic on 'bge' driven interface: The FreeBSD bug indicates that the bug is triggered by high traffic/bandwidth via the interface.
If someone can re... Chris Smith
06:59 PM Bug #1425: pfSense stops receiving traffic on 'bge' driven interface: It will be 8.1. Will see if we can easily back port the 8.2 driver if that is the fix. Chris Buechler
06:30 PM Bug #1425 (Closed): pfSense stops receiving traffic on 'bge' driven interface: Hi guys,
This bug has happened to our installation twice, now. Seemingly randomly, the bge0 interface (I have bge0... Chris Smith
05:13 PM pfSense Packages Bug #1390 (Resolved): pfflowd amd64 binary missing: Ermal Luçi
04:35 PM Revision e05458b0: Remove extra variable set: Scott Ullrich
04:34 PM Revision 7ec2a858: Remove copy paste: Scott Ullrich
04:33 PM Revision 0c951d9b: Unbreak check if capture is running: Scott Ullrich
04:00 PM Revision 5d788161: When using ' variables are not expanded. Use double quotes so that the variable is exanded: Scott Ullrich
03:49 PM Revision c76fc19f: Don't test for a user cert here either, see previous commit.: Jim Pingle
03:47 PM Revision 72d8453d: Don't test if a cert is in use here, you could in theory use a cert for a user and a server.: Jim Pingle
01:55 PM Bug #1402: When creating a QinQ it works until reboot.: Ok here are some screenshots:
1. First I create the QinQ with the SVLAN 13 and as member the VLAN 1000.
!1.png!
... Juan José Ponce Domínguez
05:30 AM Bug #1402: When creating a QinQ it works until reboot.: Please provide the logs and screenshots to help with this. Ermal Luçi
10:58 AM pfSense Packages Bug #1385: Open-VM-Tools not working anymore: I can confirmed this issue on i386 platform :... Charles AMPEAU
10:55 AM Bug #1342: kernel crash with RC1 on vmware: I just reinstalled to i386 (and change VM type to FreeBSD 32bits). It seems much more stable now...
Let's wait a f... Charles AMPEAU
08:05 AM Bug #1413: PPPoE connection disconnects consistently: here is an attachment of the packet capture done on the WAN interface. Ping was initiated as soon the PPPoE connectio... Calvin Teh
07:56 AM Feature #1424 (Closed): OpenVPN entry on interface groups: It would be consistent to add/show the OpenVPN, PPPoE, PPTP, etc.. under interface groups as permanent entries since ... Ermal Luçi
07:27 AM pfSense Packages Bug #1423 (Resolved): Open-VM-Tools package script files broken in 2.0rc-1: /usr/local/pkg/open-vm-tools.inc seems to have issues.
One of which is an erroneous "A " at the end of a here doc ... John Doe
07:10 AM Feature #1422 (Closed): short voucher codes: Please add an option for shorter voucher codes. For home use 5 or 6 chars codes would be sufficient instead of the or... Pavel Pilat
03:38 AM Bug #1418: SNMP bind to LAN: Thanks Ermal, lastest snapshot is OK.
Regards Charles AMPEAU

04/06/2011

11:53 PM Revision 8fee59d6: Fix link; use same message for missing certs.: Jim Pingle
11:41 PM Revision 0930bd01: Make the default openvpn cert authority message a bit relaxed and let user know about the wizard option as well: Scott Ullrich
11:31 PM Bug #1402: When creating a QinQ it works until reboot.: mmmm...sorry because I am not giving any screenshot, but im not at the office right now.
I have been testing like ... Juan José Ponce Domínguez
10:56 PM Bug #1421 (Rejected): Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: Disconnecting PPTP VPNs drops IPsec when using a public IP as the PPTP server IP, which is an incorrect configuration... Chris Buechler
10:47 PM Bug #1420 (Resolved): Changing a WAN's type from PPPoE to other breaks it: When a WAN interface set for PPPoE is switched to any other type, it breaks it, as it leaves that interface assigned ... Chris Buechler
07:01 PM Bug #1381: GRE tunnel interface IP address updated after reboot only: It's work. please update documentation Zeev Zalessky
06:23 PM Revision 87bb66af: Correct text to include PPTP as well.: Ermal LUÇI
06:22 PM Revision 9a36dc9d: Resolves #1391. Bring back VPN auto rule disable advanced setting.: Ermal LUÇI
05:36 PM Revision ab75b4ee: CRL is read in as an array now, so even in the imported config it will appear to be an array even though it can only have one value. Fixes #1358: Jim Pingle
05:14 PM Revision 6177fd92: Fixup text.: Jim Pingle
04:55 PM Revision 557300a7: Actually re-parse the config if a valid config was not written. (Should help stop installs from blowing up on failed config upgrades). Save the bad config for inspection, and print a message to the console about what was done.: Jim Pingle
02:59 PM Revision 4c613f84: Correct error message for gateways to report down when the gateway is down and not high latency.: Ermal LUÇI
02:58 PM Revision 19d91466: Another sweep at keeping the default route always present when the default setup route is marked as down. This now adds checks for configuration where a defaultgw is not specified by the user but deduced automatically.: Ermal LUÇI
02:26 PM Bug #802: Interface reassignment with VLANs after config restore to diff hardware doesn't work: Forward to me to take a look. Ermal Luçi
02:25 PM Bug #1391 (Feedback): Disable auto-added VPN rules missing: Applied in changeset commit:"9a36dc9d241e004e7bcdec25def3b7b0c9d94cff". Ermal Luçi
02:23 PM Bug #1410: pfSense remains without default route: Another improvement was committed related to this.
It now considers gateways that are not marked as default in the GUI. Ermal Luçi
10:54 AM Bug #1410: pfSense remains without default route: Ermal Luçi wrote:
> A setup with multiple WANs can losse its default route when its gateway is marked as down from a... Andrea Gambacorta
01:45 PM Bug #1358 (Feedback): OpenVPN Upgrade Issue: Applied in changeset commit:"ab75b4ee5475fe1be718cb0e93d0a34f293c5ed0". Jim Pingle
11:30 AM Bug #1417 (Feedback): OpenVPN client specific overrides doesnt work by default: I know for a fact this works without doing that, need more info. Chris Buechler
10:49 AM Revision d10da0f9: Resolves #1418. Correct test to actully do what's intended.: Ermal LUÇI
10:43 AM Bug #1342: kernel crash with RC1 on vmware: are these all 64 bit? Chris Buechler
07:28 AM Bug #1342: kernel crash with RC1 on vmware: Same problem here... With lastest snapshot update applied (pfSense-Full-Update-2.0-RC1-amd64-20110405-1827.tgz)
!k... Charles AMPEAU
10:42 AM Revision 5766add8: If the supplied gateway is all ones(255.255.255.255) do not report it as a gateway since its useless.: Ermal LUÇI
10:41 AM Bug #1419 (Rejected): Incorrect Intel License information in dmesg: just a fact of the Intel driver, we don't include doc. You'll have to get it from a stock FreeBSD. Chris Buechler
10:26 AM Bug #1419 (Rejected): Incorrect Intel License information in dmesg: Running:
FreeBSD fw 8.1-RELEASE-p2 FreeBSD 8.1-RELEASE-p2 #1: Tue Apr 5 17:09:22 EDT 2011 sullrich@FreeBSD_8.0_pfS... Ken Seefried
10:16 AM Bug #1407 (New): GUI is sluggish without working DNS: That may help with multi-wan, but doesn't help the case when there is only one WAN, or all WANs are down. Jim Pingle
05:28 AM Bug #1413: PPPoE connection disconnects consistently: will furnish with a screenshot since the VM is disabled at the moment. However what I have configured on the WAN inte... Calvin Teh
04:57 AM Bug #1413: PPPoE connection disconnects consistently: Show your pppoe configuration please Ermal Luçi
04:53 AM Bug #1418 (Resolved): SNMP bind to LAN: Thanks committed. Ermal Luçi
04:41 AM Bug #1418 (Resolved): SNMP bind to LAN: Hi,
With 2.0, it's impossible to make bsnmpd bind to LAN. It's very usefull when we want to access SNMP data from ... Charles AMPEAU
02:01 AM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes: Rob Eckel wrote:
> I solved the problem that I was experiencing today. I noticed that the step of the connection th... Rob Eckel
12:49 AM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes: I solved the problem that I was experiencing today. I noticed that the step of the connection that it was stalling o... Rob Eckel

04/05/2011

07:55 PM Revision 262595f0: Unbreak inetd.conf generation to avoid entries containing Array entries. This gixes nat reflection and a spamming of the system with nc processes with wrong parameters.: Ermal LUÇI
03:55 PM Bug #1417: OpenVPN client specific overrides doesnt work by default: yeah, dunno how to change the attributes... :) I'm talking about an installation inside kvm with 2.0 rc1. Raffael Schmid
02:53 PM Bug #1417 (Resolved): OpenVPN client specific overrides doesnt work by default: Hi
I wanted to use the "client specific overrides"-feature. But it didn't push the configuration until I put the f... Raffael Schmid
03:54 PM Bug #1415 (Feedback): Nat reflection is installing rules with 'Array': Just committed a fix for this.
https://rcs.pfsense.org/projects/pfsense/repos/mainline/commits/262595f0d5756ad4411e3... Ermal Luçi
09:22 AM Bug #1415: Nat reflection is installing rules with 'Array': 19001 dgram udp nowait/0 nobody /usr/bin/nc nc -u -w 2000 Array 25535
19002 dgram udp nowait/0 nobody /usr/bin/nc ... Scott Ullrich
09:21 AM Bug #1415 (Resolved): Nat reflection is installing rules with 'Array': This leads to 10K+ nc processes which never go away and at some point will exhaust your firewalls resources.
Scott Ullrich
03:16 PM Revision 5b64e336: Fix variable name: Jim Pingle
03:02 PM Bug #1107: mpd on AMD64 generates invalid checksums with NAT: I tried this with the same result as before. Lowered the MTU on the OpenVPN interface to match the MTU of the PPTP in... Andreas Winge
11:02 AM Bug #1416 (Rejected): RRD failures for Traffic and Packets graphs: It works for me on the most recent snapshot with fresh rrd files. Try to rm /var/db/rrd/* and press save on the RRD s... Jim Pingle
10:12 AM Bug #1416 (Rejected): RRD failures for Traffic and Packets graphs: None of the Traffic and Packet graphs work on my ALIX.2D3 systems for the latest builds. Here's a sample output for a... Alex Vergilis
08:18 AM Bug #1414 (Closed): dhclient fail on wifi: If using dhcp on a wifi interface dhclient fails because it is executed before wpa_supplicant is finished configureri... Torben Hørup
06:08 AM Feature #1411: Gateway Group as default gateway: I could see use for this too. Jonathan Puddle
05:28 AM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes: Hi,
Tested again , tried many different situations. They all have the same problem.
It's definitely a routing/fil... ronald meulendijks
03:57 AM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes: One thing that is different in my setup is that the other end is racoon as well, not shrewsoft client. With the racoo... Andy Giles
02:18 AM Bug #1413 (Closed): PPPoE connection disconnects consistently: ISP uses VLAN 500 to provide VDSL2 connectivity through a Huawei HG655A BTU. VLAN tagging is done on a separate Mikro... Calvin Teh

04/04/2011

09:23 PM Bug #1347: ntpd not starting: The script /usr/local/sbin/ntpdate_sync_once.sh is looping until the initial synchro with ntpdate is sucessfull. Once... Pierre POMES
05:41 PM Revision 0ef48aed: Make sure all themes have the right colors defined.: Jim Pingle
03:42 PM Bug #1401: VLANs and Web settings "TCP Segmentation Offload": I´m on a bussiness trip and can check that first on Friday... Sorry. Stefan Voni
09:44 AM Bug #1401: VLANs and Web settings "TCP Segmentation Offload": Can you please verify that after saving the new options under system->advanced for disabling TSO and than going to th... Ermal Luçi
03:05 PM Revision 1309fadd: <script/> tags are put in the function build_javascript no need to put them here. Prevents errors reported at:http://forum.pfsense.org/index.php/topic,34139.0.html: Ermal LUÇI
01:42 PM Revision f599d893: Merge remote-tracking branch 'mainline/master' into inc: Conflicts:
etc/inc/shaper.inc Vinicius Coque
12:17 PM Bug #802 (New): Interface reassignment with VLANs after config restore to diff hardware doesn't work: Changing back to new. I have a configuration file here that will utterly wreack havoc if someone wants to take a lo... Scott Ullrich
11:09 AM Revision 1d60ed9b: Try to always keep pfSense with a default gateway to avoid errors for service running from pfSense itself. Previously PBR should be configured for such services. While PBR is a better fix this at least keeps users from complaining in simple setups. Reported by many.: Ermal LUÇI
11:01 AM Bug #1412 (Resolved): Assign a user the "WebCfg - System: User Manager Page" does'nt allow access: When trying to add to a blank user the following rights :
WebCfg - System: User Manager page
WebCfg - System: Us... Geoffrey Chavepeyer
10:32 AM Revision f206afb5: On interface ip change reload even igmpproxy. Reported-by: http://forum.pfsense.org/index.php/topic,34372.0.html: Ermal LUÇI
10:24 AM Revision 056df2d9: Add -a to include all updaterrd.sh scripts running and also remove top killing since its not used anymore in stat gathering.: Ermal LUÇI
09:31 AM Bug #1408: DHCP DNS servers still get routes even if allow override is unchecked: Seems like a pretty bad bug if you checked the option to ignore the DNS servers and yet they get static routes. I'd p... Jim Pingle
09:24 AM Bug #1408: DHCP DNS servers still get routes even if allow override is unchecked: This is caused by the dhclient script.
I do not think this should be fixed for 2.0 as this has been the behavior unt... Ermal Luçi
09:17 AM Bug #1407 (Feedback): GUI is sluggish without working DNS: Can you try a snapshot from tomorrow.
I fixed #1410 and that would fix this as well. Ermal Luçi
09:03 AM Bug #1381: GRE tunnel interface IP address updated after reboot only: On step3 you just enable the interface and leave it as type none.
That will make your GRE work. Ermal Luçi
07:47 AM Feature #1411 (Duplicate): Gateway Group as default gateway: Hi,
can i propose the feature in subject?
Now if the default gateway go down pfsense arent able to download the p... Andrea Gambacorta
06:51 AM Bug #1342: kernel crash with RC1 on vmware: This seems like a hardware problem.
Either motherboard or your harddisk controller! Ermal Luçi
05:44 AM Bug #1342: kernel crash with RC1 on vmware: Here is a backtrace screenshot.
I don't know if it helps you...
Thomas NOEL
05:15 AM Bug #1410 (Resolved): pfSense remains without default route: A setup with multiple WANs can losse its default route when its gateway is marked as down from apinger.
This results... Ermal Luçi

04/03/2011

08:30 PM Bug #636: layer7 not work correctly: +1 for this not working.
I have a bridged interface (one WLAN and one LAN) but tried it without the bridged inte... Rob Lister
12:49 PM Bug #1409 (Rejected): Open VM Tools install error: duplicate Chris Buechler
10:17 AM Bug #1409 (Rejected): Open VM Tools install error: Beginning package installation for Open-VM-Tools...
Downloading package configuration file... done.
Saving updated ... Ralf Wessling
10:07 AM Bug #373: Package Manager not available in menus: Packages cannot be used from the LiveCD, and there is no way to support them while running from the LiveCD. Adding pa... Jim Pingle
09:53 AM Bug #373: Package Manager not available in menus: I'm running version 1.2.3-RELEASE and no option in the system menu to add packages either. If it's related to runn... J Smith

04/02/2011

01:28 PM Bug #1381: GRE tunnel interface IP address updated after reboot only: after full configuration of pfSense including all wan (4 interfaces)and all lan interfaces (3 interfaces) i started t... Zeev Zalessky
12:57 PM Bug #1408 (Resolved): DHCP DNS servers still get routes even if allow override is unchecked: If you have hardcoded DNS servers and _uncheck_ "Allow DNS server list to be overridden by DHCP/PPP on WAN", DNS serv... Jim Pingle
12:52 PM Bug #1407 (Resolved): GUI is sluggish without working DNS: If you don't have functional DNS, the GUI can be extremely sluggish.
Common scenario to reproduce:
* Multi-WAN se... Jim Pingle
09:36 AM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes: Hi,
I have altered the Racoon.conf with the solution Andy Giles suggested. But no luck unfotunally.
altered the s... ronald meulendijks
05:31 AM pfSense Packages Feature #1406 (Resolved): Update LCDProc to v0.5.4: The new version has updated drivers for LCD Panels (many patches to the existing ones and new drivers added).
The f... Michele Di Maria
05:10 AM Feature #1405 (Duplicate): Show interface in the Floating Rules list: Since Floating Rules can apply to different interfaces, it would be useful if in the list this information was visibl... Michele Di Maria
02:34 AM Feature #1404 (Closed): Broadcom 10GbE bxe Driver: it'll automatically be available when that version of FreeBSD is a stable release and we put out a release based on i... Chris Buechler
01:59 AM Feature #1404 (Closed): Broadcom 10GbE bxe Driver: It looks like the Broadcom 10GbE driver (BCM57710/BCM57711) is now out. It would be great to have it included in pfSe... Thomas M

03/29/2011

10:17 PM Bug #1394 (Resolved): MTU does not reset: Version Info:
2.0-RC1 (amd64)
built on Sat Mar 26 00:18:39 EDT 2011
Steps to reproduce:
1. Go to Interfaces ->... Erik Chow
05:17 PM pfSense Packages Bug #1385: Open-VM-Tools not working anymore: the pkg_config.8.cml changes were now pushed to git, please ignore the message before... Anonymous
05:13 PM pfSense Packages Bug #1385: Open-VM-Tools not working anymore: We need to fix the automated build process, not upload new binaries. Jim Pingle
05:12 PM pfSense Packages Bug #1385: Open-VM-Tools not working anymore: please add this to pkg_config.8.xml as i cannot commit now :-(
<package>
<name>Open-VM-Tools</name>
<descr>... Anonymous
04:58 PM pfSense Packages Bug #1385: Open-VM-Tools not working anymore: it's build for http://files.pfsense.org/packages/8/All
it's the x86 build Anonymous
04:55 PM pfSense Packages Bug #1385: Open-VM-Tools not working anymore: the following packages can be found at http://pfsense.trendchiller.com/packages/
fusefs-kmod-0.3.9.p1.20080208_7.t... Anonymous
04:36 PM Revision bca0472d: Merge remote-tracking branch 'mainline/master' into inc: Conflicts:
etc/inc/voucher.inc Vinicius Coque
04:22 PM Bug #1391: Disable auto-added VPN rules missing: Yes you can override it but those who upgrade need the exact same functionality they had before without changing anyt... Chris Buechler
03:37 PM Bug #1391: Disable auto-added VPN rules missing: Well in 1.2.3 you could not override these settings at all while on 2.0 you can!
I do not think the setting is neces... Ermal Luçi
12:26 AM Bug #1391 (Resolved): Disable auto-added VPN rules missing: $config['system']['disablevpnrules'] in 1.2.3 disabled the auto-added WAN rules for IPsec and PPTP (and tun rules for... Chris Buechler
04:00 PM Revision a5187d43: Check for "aes 256" as IPsec encryption type, not just rijndael.: Jim Pingle
03:33 PM Bug #1393 (Closed): IPSec Xauth: Regarding this thread(http://forum.pfsense.org/index.php/topic,34135.0.html) racoon needs to be patched to allow XAut... Ermal Luçi
03:30 PM Bug #1318: Certificate error: certificate subject does not match signing request subject: I can also confirm this issue.
2.0-RC1 (i386)
built on Mon Mar 28 16:09:59 EDT 2011
The CSR (included) was ... Mark Laagland
03:27 PM Feature #1392 (Rejected): XMPP (Jabber) Notifications/Alerts: Would be great to have an option in the GUI, to send notifications to an XMPP account. Then you can receive messages ... Ken B
03:06 PM Revision 92273f24: Fix spamd rrd graph command.: Jim Pingle
01:54 PM Revision 49bb5c07: Add some upgrade code for IPsec mobile clients. Passes php -l but needs more testing.: Jim Pingle
12:25 PM Todo #576 (Feedback): Make sure IPsec upgrade code properly handles mobile clients: There was no IPsec mobile client upgrade code at all. I committed some with commit:49bb5c0 and it seems to work prope... Jim Pingle
12:02 PM Bug #1389: services don't start: Ok, I will configure again and see what happens. I am pretty sure that I configured bandwidthd. In any case, the wi... Erik Chow
09:11 AM Revision b0eaa10c: Trim spaces out to avoid problems from explode.: Ermal LUÇI
08:19 AM Revision ad6df0b3: Add back gre allowing rules since they are needed.: Ermal LUÇI
02:29 AM Bug #1317 (Resolved): Voucher database synchronization: thanks Chris Buechler
02:09 AM Bug #1317: Voucher database synchronization: Hi,
this can be closed. It is working now.
Thnx a lot
stefan Stefan baldus

03/28/2011

05:55 PM pfSense Packages Bug #1390 (Resolved): pfflowd amd64 binary missing: since the v0.8 pfflowd upgrade, the amd64 binary is missing Steve Beaudoin
05:51 PM Revision 75c8044a: Allow TCP and UDP for DHCP failover traffic.: Jim Pingle
04:26 PM Bug #1389 (Rejected): services don't start: you have to configure them before they will start. This isn't specific enough to be a legit bug report, please see
h... Chris Buechler
04:23 PM Bug #1389 (Rejected): services don't start: Version Info:
2.0-RC1 (amd64)
built on Sat Mar 26 00:18:39 EDT 2011
I installed bandwidthd (version 2.0.1.2), d... Erik Chow
04:17 PM Revision c6dfd289: In IPsec, s/mobileclients/client/, this was changed long ago in the config but not everywhere followed.: Jim Pingle
02:46 PM Revision 8f587b1d: Correct PPTP Clients alias address. The PPTP server address was been utlized instead, which resulted in an incorrect firewall rule when 'PPTP Clients' was configured.: Warren Baker
11:06 AM Feature #1388 (New): 3G outbound failover connection with auto dial-up and hang-up: I would like to see implemented a feature to use an USB 3G modems as a failover (not balancing) dial-up connection (*... Pio Pii
10:37 AM Revision 7f2c8034: Test the existence of route_vpn_gateway variable and if set use it as a gateway. Recommended-by: http://forum.pfsense.org/index.php/topic,24436.msg158589.html#msg158589: Ermal LUÇI
07:53 AM Bug #1243: GUI/Backend code needs updated after multi-PPPoE-server code switch: FWIW, the /etc/inc/filter.inc portion of Vinícius Coque's patch fixes my problem of PPPOE rules not being created for... Deon George
06:50 AM Bug #636: layer7 not work correctly: I can't tell. My system log is entirely saturated with "ipfw-classifyd: unable to write to divert socket: No buffer s... Jonathan Puddle
06:28 AM Bug #636: layer7 not work correctly: Do you have on your logs any information as 'identified proto(http)' ? Ermal Luçi
05:25 AM Bug #636: layer7 not work correctly: Using 2.0-RC1 (i386) built on Mon Mar 28 00:15:15 EDT 2011, and the error message is now gone (thanks!), but I am sti... Jonathan Puddle
06:32 AM Bug #1381: GRE tunnel interface IP address updated after reboot only: No you do not assign GRE as OPT7 but you assign GRE as OPT8 or more :) Ermal Luçi
12:12 AM Bug #1318: Certificate error: certificate subject does not match signing request subject: I am having the same issue. I tried to use a register.com SSL cert, which has intermediate CAs. Upon getting the ce... Erik Chow

03/27/2011

11:47 PM Bug #1387 (Closed): PPPoE rules not added: Duplicate of #1243 Jim Pingle
11:31 PM Bug #1387 (Closed): PPPoE rules not added: Hi, I'm running pfsense 2.0-RC1.
* I have 3 interfaces (LAN (em2) - 10.1.1.192/26, WAN (em0) - 10.1.1.56 and DMZ (... Deon George
06:24 PM Revision d68647a1: Merge remote branch 'upstream/master': Scott Ullrich
11:17 AM Revision 404e0009: Fix the gif edit page, it was checking the subnet bits, not the actual subnet. The check needs to be refined to check actual subnets instead of just the address. but this will do for now.: Seth Mos
09:19 AM Bug #1386 (Resolved): Nested port aliases causes "Unknown port" error upon loading filters: I'm trying to create nested port aliases in PFSense 2.0.
I created an Alias "R_Webserver", type "Ports", (role: we... Frank Zavelberg
05:13 AM Bug #1381: GRE tunnel interface IP address updated after reboot only: I did as you explained:
1. Create new Interface (OPT7) assigned to non assigned interface (em1)
2. configure static... Zeev Zalessky
03:12 AM Bug #1327: RFC 2136 dynamic dns bug: To further clarify, please update "host" field of the GUI for RFC 2136 updates to read "Fully qualified hostname of t... Isaac McDonald
03:02 AM Bug #1327: RFC 2136 dynamic dns bug: I was able to get updates to work by putting the complete FQDN into the hostname portion. ex. host.example.com rather... Isaac McDonald
02:48 AM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes: I have the same issue as originally described. I'm currently running:
2.0-RC1 (i386)
built on Thu Mar 24 22:33... Rob Eckel

03/26/2011

09:33 PM Revision 17730d9d: Only run conf_mount_rw here if there isn't another process going.: Jim Pingle
09:30 PM Revision 974c5af7: Actually if /etc/sshd is already running, doing a conf_mount_ro() would be a bad thing, as the other process still expects rw.: Jim Pingle
09:21 PM Revision 63e18082: Backing this out to see if it unbreaks NanoBSD upgrades with packages involved. Revert "Workaround for conf_mount_rw/ro during boot to only allow it to change at the start and end. Fixes #1279": This reverts commit 548be1fd6697ab115cbb29d61bc5507744488094. Jim Pingle
05:25 PM Bug #1279: Filesystem on NanoBSD is left read/write at first bootup after package reinstallation: Applied in changeset commit:"63e18082bb98d51763e542d5c4094793b300eb60". Jim Pingle

03/25/2011

11:33 PM Revision cd2c71fc: Make sure that there is a value before using it as a redirection.: Ermal LUÇI
10:44 PM Revision 3b68081f: Make the return values on error consistent with the normal return value.: Ermal LUÇI
10:38 PM Bug #1377: upgrade 1.2.3-Final nanobsd 4g to 2.0-RC1 nanobsd 4gb fails: ... Bill McIlhargey
10:24 PM Bug #1377: upgrade 1.2.3-Final nanobsd 4g to 2.0-RC1 nanobsd 4gb fails: ran the following command in the console and tried upgrading to the 2.0 nanobsd 4gb rc1
tail -f /cf/conf/upgrade_... Bill McIlhargey
10:33 PM Revision 2fe347eb: Actually correctly report the timeleft in log messages. This is mostly cosmetic.: Ermal LUÇI
10:04 PM Revision 3e404e0c: Make the two default page codes similar in regarding to redirurl in hope that when one voucher login succeeds it redirects to the url submmitted.: Ermal LUÇI
09:56 PM Revision 351b6990: Correctly synchronize the db of vouchers from master. Also correctly write it to the files since before it is only allowed during bootup and not from xmlrpc.: Ermal LUÇI
09:20 PM Revision 4fab0ce0: Actually remember that the vouchers are enabled: Ermal LUÇI
09:08 PM Revision c5b3fa90: Allow to enable vouchers with the only things specified the voucher database synchronization since the other values will be fetched from it.: Ermal LUÇI
08:47 PM Revision a34b8b3b: Display the correct error page if vouchers are active or if normal CP is active when default provided forms are used.: Ermal LUÇI
08:32 PM Revision 509e1202: Correct log messages to not display port twice.: Ermal LUÇI
07:19 PM Bug #1317 (Feedback): Voucher database synchronization: Latest snapshot should have this ok now. Ermal Luçi
06:45 PM Revision 650b573b: Correctly handle aliases for the target on inetd rules. Otherwise bad parameters are passed to netcat(nc) and we DoS the host.: Ermal LUÇI
04:14 PM Bug #1381: GRE tunnel interface IP address updated after reboot only: you do:
- create interface
- create GRE
- assign GRE as an interface but not replacing its parent inteface assignm... Ermal Luçi
01:09 PM Revision 588402bf: Fix the javascript to toggle the fields correctly: Seth Mos
11:59 AM Revision 152ab4d0: Merge remote-tracking branch 'mainline/master' into inc: Conflicts:
etc/inc/interfaces.inc
etc/inc/priv.defs.inc
etc/inc/shaper.inc
etc/inc/sy... Vinicius Coque
11:49 AM Revision 54bdff75: Merge remote-tracking branch 'mainline/master' into inc: Conflicts:
etc/inc/auth.inc
etc/inc/config.lib.inc
etc/inc/filter.inc
etc/inc/pfsense... Vinicius Coque
10:37 AM Revision d5d0c16b: Fix javascript, close the select tag which will show the text: Seth Mos
09:46 AM Bug #1384: no privileges can be assigned for IPSec dialin in the user-manager: sorry, my fault... did not see 1202 somehow ;-) Anonymous
09:40 AM Bug #1384 (Closed): no privileges can be assigned for IPSec dialin in the user-manager: Duplicate of #1202 Jim Pingle
05:00 AM Bug #1384 (Closed): no privileges can be assigned for IPSec dialin in the user-manager: no privileges that can be assigned for IPSec dialin in the user-manager
[http://forum.pfsense.org/index.php/topic,... Anonymous
09:05 AM pfSense Packages Bug #1385 (Resolved): Open-VM-Tools not working anymore: somehow the Open-VM-Tools for 2.0 are messed up
_./vmware-guestd.sh start_
Starting vmware_guestd.
/libexec/ld-e... Anonymous
09:00 AM Revision d93ee937: Make sure to uses 'tables' in array.: Warren Baker
08:58 AM Revision 94aa3d21: Remove legacy Bogons Privileges page and add Tables to Privileges.: Warren Baker
04:46 AM Bug #636: layer7 not work correctly: I committed that patch and fixed the error above which was accidental breakage by me.
So try latest snapshot with th... Ermal Luçi

03/24/2011

10:34 PM Revision 24143605: Note that disabling does not survive a reboot: Scott Ullrich
08:57 PM Bug #1350 (Rejected): reboot loop on soekris net4511: net45xx isn't supported hardware, only 64 MB RAM. Chris Buechler
05:55 PM Bug #1383: Upgrade routines should check free space: the problem I saw was only out of disk space on /, /cf was fine. Chris Buechler
05:50 PM Bug #1383 (Closed): Upgrade routines should check free space: Need to check the free space on /cf and / before upgrades. If there is not enough free space then cancel upgrade a... Scott Ullrich
05:34 PM Revision c8703797: Do not write ont rules anymore max-packets. This apparently was done by me in a previous commit, it helps with Ticket #636.: Ermal LUÇI
03:27 PM Revision 2279a587: Try to not stomp rule to each other. Reported-by: http://forum.pfsense.org/index.php/topic,34787.msg180186.html#msg180186: Ermal LUÇI
03:23 PM Revision 96d0233c: Forgot to add the dollar sign to make it a variable: Seth Mos
02:51 PM Revision ee5c01b5: Remove the old v6 address using the -alias method: Seth Mos
02:18 PM pfSense Packages Bug #1244 (Resolved): apache_mod_security_package missing mod_proxy.so (and perhaps others): fixed the dependencies of apache with amd64 Luiz Gustavo S. Costa
02:11 PM Bug #1365 (Resolved): RRD is not gathering CPU statistics: Warren Baker
05:38 AM Bug #1365: RRD is not gathering CPU statistics: Thank you! Works, cpustats is present now. Maxim Luppov
12:59 PM Revision 9634e95b: Correct wrong comment.: Ermal LUÇI
12:56 PM Bug #1331 (Rejected): Layer7 filtering not working: Chris Buechler
07:15 AM Bug #1331: Layer7 filtering not working: Duplicate of http://redmine.pfsense.org/issues/636 Jonathan Puddle
10:00 AM Bug #1381: GRE tunnel interface IP address updated after reboot only: So, first i create Interface, then i create GRE Tunnel and after that i change the interface assignment from some thi... Zeev Zalessky
09:58 AM Bug #1381 (Feedback): GRE tunnel interface IP address updated after reboot only: Ermal Luçi
09:57 AM Bug #1381: GRE tunnel interface IP address updated after reboot only: Well there is some validation missing in the GUI it seems.
You cannot create the gre and after create the interface f... Ermal Luçi
09:28 AM Bug #1377: upgrade 1.2.3-Final nanobsd 4g to 2.0-RC1 nanobsd 4gb fails: Here is the post discussing this further
http://forum.pfsense.org/index.php/topic,34687.0.html Bill McIlhargey
08:33 AM Bug #651: Multiple gateways on WAN interface: The problem with this is that apinger will bind to the same address and has no idea that the monitoring host is down ... Ermal Luçi
07:42 AM Revision 126f5314: Merge remote branch 'upstream/master': Conflicts:
etc/inc/rrd.inc
usr/local/www/interfaces.php Seth Mos
07:20 AM Bug #636: layer7 not work correctly: Using 2.0-RC1 (i386) built on Wed Mar 23 20:46:01 EDT 2011, I get the following error when I set one of my LAN rules ... Jonathan Puddle

03/23/2011

11:14 PM Revision d322e3b3: Fix voucher disconnect sync issue: Scott Ullrich
09:43 PM pfSense Packages Bug #1363: Spamd not updating pf tables: Erik, I was using 2.0RC1 and today I just updated the system to the last snapshot. Then, I removed spamd package and ... Fernando Maior
01:13 AM pfSense Packages Bug #1363: Spamd not updating pf tables: It might be fixed now. Reinstall the package and try again. Erik Fonnesbeck
04:30 PM Bug #1381: GRE tunnel interface IP address updated after reboot only: Attached screenshots and config.xml no related log entries Zeev Zalessky
03:07 PM Bug #1381: GRE tunnel interface IP address updated after reboot only: I am sorry but you ahve to be more specific than that.
Provide screenshot or your config.xml and a better descriptio... Ermal Luçi
01:05 PM Bug #1381 (Closed): GRE tunnel interface IP address updated after reboot only: After create of GRE tunnel and assign it to newly created interface with correct IP, IP is assigned only after reboot. Zeev Zalessky
03:40 PM Bug #1382 (Rejected): PPTP rule not added: rules work, aside from the scenario in #1360 Chris Buechler
03:31 PM Bug #1382 (Rejected): PPTP rule not added: Hello.
Testing the latest snapshot I had problems connecting to PPTP server.
I did a netstat and 1723 was there l... Guilherme Oliveira
02:39 PM Revision 31c9b8a3: Optimized all images using Yahoo Smush.it service.: Savings:
-------------------------------------
Total images uploaded - 1432
Total images smushed - 575
Total uploaded... Tux Dictumst
01:52 PM Bug #1292: PPTP server with Radius breaks on upgrade from 1.2.3 to 2.0: I have the same problem. I migrated from 1.2.3.
<pptpd>
<redir/>
<localip>172.16.99.1</localip>
<remoteip... Guilherme Oliveira
01:10 PM Revision d421e319: Do not error out for pptp/l2tp localip setting not set since its legitimate.: Ermal LUÇI
12:21 PM Bug #1374 (Resolved): Traffic Shaper Limiter queues creation bug: Chris Buechler
08:07 AM Bug #1374: Traffic Shaper Limiter queues creation bug: It's ok now. I can create pipes and queues. Still need to do more test to see how it works.
Thank you. Maxim Luppov
06:46 AM Bug #1374: Traffic Shaper Limiter queues creation bug: That you. Will test this soon and report results. Maxim Luppov
12:13 PM Bug #1365 (Feedback): RRD is not gathering CPU statistics: Should be fixed in the next snap, it was missing from the build. I have just committed the change, so please let me k... Warren Baker
10:36 AM Bug #1365: RRD is not gathering CPU statistics: Still no fix for this. Maybe just put top back. Maxim Luppov
05:43 AM Bug #836: Captive portal logout popup windows doesn't disconnect the user: I am still having this issue with 2.0RC1 snapshots (latest update 23.03.2011). Mark Dammer
03:43 AM Bug #1380 (Closed): NAT reflection of UDP (or DNS?) doesn't work, spawns thousands of processes: As described here:
http://forum.pfsense.org/index.php/topic,34659.msg179973.html
NAT reflection of DNS, probably ... Chris Buechler
01:45 AM Bug #1049: After reinstalling packages at bootup, WebUI not accessable (NanoBSD): NMap and Avahi appear to cause the error 500 even if installed through the web GUI after the system has fully booted.... Erik Fonnesbeck
01:43 AM Revision 004cb7c5: Merge 8b7d91267376d8b1e5e8d5748371430e2a601e23 https://rcs.pfsense.org/projects/pfsense/repos/mterron-clone/commits/8b7d91267376d8b1e5e8d5748371430e2a601e23 which fixes rc.shutdown issue: Scott Ullrich
12:36 AM Revision 084e77e7: fix text: Chris Buechler

03/22/2011

10:58 PM Revision 8b7d9126: Fix rc.shutdown: Tux Dictumst
10:02 PM Bug #636: layer7 not work correctly: So, same build...
Applied the first 2 changes in your code there, the 3rd seemed to have already been applied in m... Guy B
09:19 PM Bug #636: layer7 not work correctly: Hi there,
I tested it with 2.0-RC1 (i386)
built on Tue Mar 22 16:13:31 EDT 2011
Did a restart and got this er... Guy B
08:19 PM Revision c1ac2424: Actually remove the pid file before starting a new miniupnpd since it seems to not like it. Log provided on:http://forum.pfsense.org/index.php/topic,33371.msg180084.html#msg180084: Ermal LUÇI
07:47 PM Revision 1cea22d5: Fix parse error: Seth Mos
07:41 PM Revision 15cc0894: Restore the IPv6 counters I accidentally overwrote: Seth Mos
07:10 PM Revision c46ee61f: Unbreak adding subqueues to queues also. This has happened after allowing renaming, oops.: Ermal LUÇI
06:19 PM Revision 6be14e38: Unbreak adding subqueues to limiters. Correct some text in the way.: Ermal LUÇI
04:49 PM Bug #1374: Traffic Shaper Limiter queues creation bug: I committed even more fixes at this which should allow for it to function correctly. Ermal Luçi
04:44 PM Bug #1049: After reinstalling packages at bootup, WebUI not accessable (NanoBSD): Same packages as before. Backup, NMAP, Avahi and RRD Summary. When a package is installed I get the following on the ... James Lepthien
04:42 PM Bug #1049: After reinstalling packages at bootup, WebUI not accessable (NanoBSD): Can you be more verbose:
- What packages you installed?
- Any pertaining log? Ermal Luçi
04:11 PM Bug #1049: After reinstalling packages at bootup, WebUI not accessable (NanoBSD): It worked a long time now. Today I updated to the latest snap and now I get the 500 error again, when accessing the W... James Lepthien
03:41 PM Feature #1361: DNSMasq, source interface and IPSec VPNs: static routes work for dnsmasq and all other services in all versions.
http://doc.pfsense.org/index.php/Why_can%27t... Chris Buechler
02:21 PM Revision 66fc1f14: Add all to the reserved keywords: Scott Ullrich
01:59 PM Bug #1312: NAT reflection/DNS Forwarder broken again: Can you pls provide information on how to log for NAT reflection.
Then I will setup a basic pfsense config with no... Brian Jensen
12:04 PM Bug #1312 (Feedback): NAT reflection/DNS Forwarder broken again: Chris Buechler
11:58 AM Bug #1312: NAT reflection/DNS Forwarder broken again: This is not something I'm able to reproduce with my own configuration - works fine here, so I'm going to need more de... Erik Fonnesbeck
01:24 PM Bug #1377 (Closed): upgrade 1.2.3-Final nanobsd 4g to 2.0-RC1 nanobsd 4gb fails: I tried the image pfSense-2.0-RC1-4g-i386-20110226-1633-nanobsd-upgrade.img.gz through the WebGUI and the following i... Bill McIlhargey
12:00 PM Bug #673: SSHD keys not created on restore: Check the latest image and see if this has been fixed. Erik Fonnesbeck
10:05 AM Bug #141: Reserved names cannot be used for aliases or interfaces: I know this bug is marked as complete but I just ran into this problem using the alias name of "all". With a 2.0 RC1... David Miller
07:28 AM Revision 548be1fd: Workaround for conf_mount_rw/ro during boot to only allow it to change at the start and end. Fixes #1279: Erik Fonnesbeck
05:53 AM Bug #1348 (Resolved): Multiple static routes that use the same next hop cause apinger issues: Seth Mos
05:16 AM Bug #749: Downstream queues should not be assigned to LAN interfaces: This is a major issue for us, and we'd be happy to contribute funds to getting this re-worked. Shaping that only work... Jonathan Puddle
03:40 AM Bug #1279 (Feedback): Filesystem on NanoBSD is left read/write at first bootup after package reinstallation: Applied in changeset commit:"548be1fd6697ab115cbb29d61bc5507744488094". Erik Fonnesbeck
12:50 AM Revision fc2c320e: Merge branch 'master' of rcs.pfsense.org:pfsense/mainline: Marcus Brown
12:44 AM Revision e4d40f41: Update GUI to enable L2TP client configuration.: Marcus Brown
12:43 AM Revision 633de329: Add missing "Connect/Disconnect" button to GUI for L2TP client connections.: Marcus Brown

03/21/2011

11:07 PM Feature #1361: DNSMasq, source interface and IPSec VPNs: Chris Buechler wrote:
> we've been feature frozen a while, this won't make it until 2.1. just add a static route as ... Braden McGrath
09:56 PM Feature #1361: DNSMasq, source interface and IPSec VPNs: a feature freeze is a feature freeze, if we added every little thing that came along at RC stage we wouldn't put out ... Chris Buechler
09:53 PM Feature #1361: DNSMasq, source interface and IPSec VPNs: Chris,
this is only changing the testing of the IP address that takes place in the page. Its really only cosmetic... Hugh Blandford
09:43 PM Feature #1361: DNSMasq, source interface and IPSec VPNs: we've been feature frozen a while, this won't make it until 2.1. just add a static route as described in the FAQ. Chris Buechler
09:42 PM Feature #1361: DNSMasq, source interface and IPSec VPNs: Looking for a dev response on this - has it been included into the latest nightlies? I need this functionality and r... Braden McGrath
10:12 PM pfSense Packages Bug #1376: Text in "Interfaces" widget wraps when interface speed is more then 100mbit: the length of the ip address also can cause a wrap even if interface speed is 100 mbit. Alex Fox
10:08 PM pfSense Packages Bug #1376 (Resolved): Text in "Interfaces" widget wraps when interface speed is more then 100mbit: Version 2.0-RC1 built on March 20th. Please see the attached screen shot. Alex Fox
09:59 PM Bug #1279: Filesystem on NanoBSD is left read/write at first bootup after package reinstallation: This is happening in RC1; I haven't yet tried a newer snapshot to check there. Braden McGrath
08:42 PM Revision 7efd9972: Ticket #1374. Actually test the right field name.: Ermal LUÇI
08:01 PM Revision 71edee5e: Select the device mode to tun if variable device_mode not exist in the configuration: Luiz Gustavo S. Costa
06:58 PM Revision bf87b4d7: Added option to select the type of device for use in the tunnel openvpn: Luiz Gustavo S. Costa
04:29 PM Bug #1374 (Feedback): Traffic Shaper Limiter queues creation bug: I just committed a fix for this, please test a newer snapshot or try the patch manually. Ermal Luçi
06:49 AM Bug #1374 (Resolved): Traffic Shaper Limiter queues creation bug: Traffic Shaper Limiter doesn't allow you to create queues with next error in system log: "php: /firewall_shaper_vinte... Maxim Luppov
03:46 PM Revision 4a3ff493: Set some defaults, advertise a default ipv6 mtu of 1280.: Seth Mos
03:40 PM Revision 656f1763: Correct typo in array name. Add select box for operating mode of rtadvd and dhcpv6 combination: Seth Mos
02:22 PM Bug #1370 (Closed): Captive Portal Status Page - always empty: Passthrough entries are not active CP users by design. The status page won't show those and shouldn't. Chris Buechler
05:39 AM Bug #1370: Captive Portal Status Page - always empty: Not a bug.
I could set up a local test environment.
The empty status page is because of the CP option: "Enable ... mickey holland
05:29 AM Bug #1370: Captive Portal Status Page - always empty: Typo: "he is also not a pass-through client."
should read: "he is also now a pass-through client."
... just ... mickey holland
05:27 AM Bug #1370: Captive Portal Status Page - always empty: ... just thought of something...
I have the "automatically add users that login to the pass-through mac list" enab... mickey holland
05:22 AM Bug #1370: Captive Portal Status Page - always empty: OK, Thanks for the advice. Here follows:
Version: 2.0 RC1 release (from the iso, NO daily build updates).
I had... mickey holland
05:14 AM Bug #1370 (Feedback): Captive Portal Status Page - always empty: what version? Always include that, and it's better to post things like this that have no specific bug (the status pag... Chris Buechler
04:19 AM Bug #1370 (Closed): Captive Portal Status Page - always empty: My understanding is that the captive portal status page should report those users currently logged in by means of som... mickey holland
10:24 AM Bug #1375 (Resolved): Captive portal logs: mixed with logs from other sources (squid, php): I have noticed that Portal Auth logs sometimes contain logs which apparently don't belong here, such as squid or php ... Pavel Pilat
08:17 AM Revision 5ceb1942: Further fixup the fetch Mac address exec() this hopefully works: Seth Mos
06:57 AM Bug #1366: Restore configuration / Restore area not working: Marcello Silva Coutinho wrote:
> Chris Buechler wrote:
> > It works, I've tested every possible edit/change/etc., w... Max Riedel
02:34 AM Bug #1366: Restore configuration / Restore area not working: Chris Buechler wrote:
> It works, I've tested every possible edit/change/etc., when you feed it valid config data it... Marcello Silva Coutinho
02:27 AM Bug #1366: Restore configuration / Restore area not working: It works, I've tested every possible edit/change/etc., when you feed it valid config data it works. Even your exact a... Chris Buechler
02:21 AM Bug #1366: Restore configuration / Restore area not working: Le me explain better.
create two alias with some ports or ips.
backup your config.
delete one alias not appl... Marcello Silva Coutinho
02:06 AM Bug #1366: Restore configuration / Restore area not working: Marcello Silva Coutinho wrote:
> when trying to restore just alias or VLANS I get a "sucess operation / may be requi... Marcello Silva Coutinho
01:17 AM Bug #1366 (Rejected): Restore configuration / Restore area not working: you cannot restore parts of a 1.2.3 config to 2.0, it gets merged but it never shows up because the config is complet... Chris Buechler
12:51 AM Bug #1366 (Rejected): Restore configuration / Restore area not working: when trying to restore just alias or VLANS I get a "sucess operation / may be require reboot" but nothing goes to xml... Marcello Silva Coutinho
05:12 AM Todo #1373 (Resolved): Upgrade OpenVPN: OpenVPN needs to be upgraded to current code, upgrading to openVPN mainline breaks various OpenVPN servers.
IPv6 s... Seth Mos
05:05 AM Bug #1372 (Resolved): RRD is not updating VPN statistics: The RRD graphs are not showing the number of connected VPN users.
In version "2.0-RC1 (i386) built on Fri Mar 18 ... Sven Rubben
04:30 AM Feature #1371 (Needs Patch): UPnP & NAT-PMP Status - Delete individual connections: The subject says it all!
On the status page we can clear ALL the connections, but not individually. That might be ... mickey holland
04:13 AM Feature #1369 (Needs Patch): DHCP Leases - Hostname Unsuitable for Printing: At the DHCP Leases page, many hostnames are empty.
In the DHCP logs, often I see "Hostname Unsuitable for Printin... mickey holland
04:12 AM Feature #1368 (Closed): DHCP Leases - description column: At the DHCP Leases page, could a column be added which shows the description from either the DHCP Server/reservations... mickey holland
01:16 AM Feature #1367 (New): Input validation on partial config restores: Restoring partial 1.2.x configs does not work since it does not go through the config upgrade process. There is also ... Chris Buechler

03/20/2011

10:11 PM Revision 32018396: Attempt to manually generate a ipv6 address: Seth Mos
10:07 PM Revision 22dae853: Add a function that will calculate the ipv6 address for a given hardware address: Seth Mos
08:56 PM Revision 375828d9: fix text: Chris Buechler
03:08 PM Bug #1365 (Resolved): RRD is not gathering CPU statistics: CPU usage statistics is not gathering by RRD anymore. There was change related to cpu load statistics gathering algor... Maxim Luppov
10:57 AM Bug #1364 (Resolved): Can't import an existing CRL without the CA's private key: I've recently moved a standalone openVPN server to pfSense 2.0-RC1. I have an external pki and was able to import my ... Scott LaBombard
09:14 AM Revision 09991924: Merge commit from Bill M for ipv6 counters and interface stats: Seth Mos

03/19/2011

07:17 PM Bug #1362 (Rejected): Nat port forwarding fails when switching internal ip's: I know for a fact this works in all versions, and this isn't specific enough to be a legit bug report, 99% chance thi... Chris Buechler
01:24 PM Bug #1362 (Rejected): Nat port forwarding fails when switching internal ip's: I have 2 internal web servers, I have a NAT forward rule on port 80 to go to a an internal ip *.*.*.28 I switched the... Drew Kozicki
03:43 PM pfSense Packages Bug #1363: Spamd not updating pf tables: What I could assess is that, when you issue a "killall -HUP spamlogd", the whitelist is not read and applied to the p... Fernando Maior
02:16 PM pfSense Packages Bug #1363 (Resolved): Spamd not updating pf tables: After you whitelist a number of hosts using the GUI, the whitelist pf table remains unchanged. Fernando Maior

03/18/2011

10:11 PM Revision b2305621: Generate the config file in a variable then write it as a whole to a file.: Ermal LUÇI
03:20 PM Revision e9e295f7: Read data into variables before passing to rrdtool, so it's easier to extend this to store data elsewhere in addition to (or instead of) rrdtool. Also, switch to using cpustats for CPU statistics instead of top.: Jim Pingle
09:18 AM Revision 755405c1: fix filter rules for requested ipv6 icmp types: Seth Mos
09:07 AM Revision 32d4db2e: Fix edit bug that duplicated records.: Seth Mos

03/17/2011

08:02 PM Bug #636: layer7 not work correctly: Please test even with ... Ermal Luçi
03:50 PM Bug #636: layer7 not work correctly: I was testing and getting the same behaviour as you.
Can you please restart your machines before testing if http will... Ermal Luçi
07:57 PM Revision 52bac969: Up the number of packets that gets sent to divert consumers since this count includes for tcp even the 2way handshake count which might hurt the matching. This should possibly fix layer 7 Ticket #636.: Ermal LUÇI
06:58 PM Revision 3c69c52c: Log the configuration is not the same error message only when this is true. This message would have been shown even when a communication error would occur.: Ermal LUÇI
11:52 AM Revision 9498c8d7: Fix field lengths for IPv6 addresses: Seth Mos
11:45 AM Revision c271c485: enlarge various address fields for IPv6 addresses: Seth Mos
10:59 AM Revision 8a3b09ef: Comment out static mappings, this needs more research: Seth Mos
10:21 AM Revision 7e5f3edb: Add Total number of CP users graph: Warren Baker
09:22 AM Bug #1356 (Resolved): IPSec SPD definitions lost after reboot: Jim Pingle
08:55 AM Bug #1356: IPSec SPD definitions lost after reboot: Thank you. Works as expected now. Alex Vergilis
08:17 AM Feature #1361: DNSMasq, source interface and IPSec VPNs: well here is my first bit of php coding, so hopefully it is ok. It seems to do what I wanted it to do.... Hugh Blandford
04:02 AM Feature #1361 (Resolved): DNSMasq, source interface and IPSec VPNs: Posts: 1
View Profile Email Personal Message (Online)

DNSMasq, source interface and IPSec VPNs
« on: Mar... Hugh Blandford

Also available in: Atom

Project

General

Profile

pfSense

Activity

Activity

04/15/2011

04/14/2011

04/13/2011

04/12/2011

04/11/2011

04/10/2011

04/09/2011

04/08/2011

04/07/2011

04/06/2011

04/05/2011

04/04/2011

04/03/2011

04/02/2011

04/01/2011

03/31/2011

03/30/2011

03/29/2011

03/28/2011

03/27/2011

03/26/2011

03/25/2011

03/24/2011

03/23/2011

03/22/2011

03/21/2011

03/20/2011

03/19/2011

03/18/2011

03/17/2011