Activity
From 03/31/2011 to 04/29/2011
04/29/2011
-
03:45 PM Bug #1485 (Feedback): WebUI password changes do not change shell and VPN passwords
- Applied in changeset commit:"c639315e3c86ae6cc2a1d1030347340f340f8270".
-
- I committed an ipsec xauth permission for users to fix #1202 a couple weeks ago, you should be using that instead.
... -
03:25 PM Bug #1485 (Resolved): WebUI password changes do not change shell and VPN passwords
- Version:
2.0-RC1 (amd64)
Goal:
Have user accounts that only work for IPSec VPN access. And allow the user to cha... -
- The previous commit should fix this, but needs additional testing.
-
02:24 PM Bug #1402: When creating a QinQ it works until reboot.
- Sorry the last image is like this for example:
!3.png! -
- Hello,
I have tested the changes and now the members are displayed correctly, thanks for that.
So I tryied agai... -
02:15 PM Bug #1408 (Feedback): DHCP DNS servers still get routes even if allow override is unchecked
- Committed a fix.
-
01:53 AM Bug #1415: Nat reflection is installing rules with 'Array'
- Here you are:
@$ ps -ax | grep inetd
7108 ?? Ss 0:44.47 /usr/sbin/inetd -wW -R 0 -a 127.0.0.1 /var/etc/ine...
04/28/2011
-
- Can you show the content of /var/etc/inetd.conf?
Also ps -ax | grep inetd -
- Try again. https://rcs.pfsense.org/projects/pfsense/repos/mainline/commits/9cf46050fc708f3a3395c7800acf5d81a69b1013
... -
11:11 AM Bug #1318: Certificate error: certificate subject does not match signing request subject
- I can also confirm this is the case with PositiveSSL's issued from Comodo.
2.0-RC1 (amd64)
built on Thu Apr 28... -
11:10 AM Todo #1373: Upgrade OpenVPN
- Change for the netsh interface on windows 7, use set address, instead of add address. Otherwise the command will exit...
-
- The current openvpn-ipv6 port has both the endpoint and payload patch for IPv6. The current installer we include in t...
-
09:18 AM Feature #1431: PPPoE LQR Echo
- I'm still waiting ISP (TM Net) to reply regarding this issue. I ask them if they can disable LQR echo. I will update ...
-
01:53 AM Feature #1431: PPPoE LQR Echo
- so far tricking the WAN interface in and out of DHCP works, but I don't understand why is this working
-
01:50 AM Feature #1431: PPPoE LQR Echo
- Alot of us are having the same problem with the same ISP and modem provided. The same issue occurs when PPPoE through...
04/27/2011
-
10:13 PM Todo #1438: Add override for CSR request->response subject mismatch
- My semester ends in about 2-3 weeks. At that point I will look around in the code for other places where this type of...
-
10:11 PM Todo #1438: Add override for CSR request->response subject mismatch
- tested this with a cert from namecheap, originally was seeing the issue described here, synced up to Yehuda's git clo...
-
07:02 PM Bug #1336: PPTP VPN NAT on WAN or other external interface
- Any news with this bug?
-
- actually I was wrong, this wasn't fixed in the official RC1 release, it's been in snapshots since early March though.
-
11:14 AM Bug #1151: Outgoing pptp Traffic-Flow stops after a while
- I think the problem is that I use a Bridge between LAN and OPT1. I have 3 interfaces
WAN
LAN
OPT1
The WAN-In... -
- i found why its don't work. Eri removed pptp proxy patch at 16/3/2011. i have amd64 iso from 10 Mar 2011 and this iso...
-
- because there is no way to tell that "username" is the same as "domain\username" or "username@domain" or other possib...
-
06:10 AM Bug #1484 (Rejected): Captive Portale
- Hi, I've enabled "Disable concurrent logins" in Captive Portal and I've configured a Radius Server (Windows Active Di...
-
08:07 AM Bug #1433: Config sync causes CARP state change
- I tryed the latest snapshot and I'm still having the CARP switch issue.
Each time I apply a change,using LAN CARP as... -
06:19 AM Feature #1482: Captive Portal support for a configurable RADIUS NAS ID
- Hi just found out that the code in /etc/inc/radius.inc function putStandardAttributes() does not call the getNasId() ...
-
- Processes are not spawn anymore but for example nat reflection seems anyway not working properly...
Examples: A nsl...
04/26/2011
-
- it can be built on a stock FreeBSD 8.1 system and copied over.
-
- #1415 duplicated this
-
-
- this is not a legit bug report, ask questions on the forum or mailing list.
-
-
- under what circumstances is this a problem? The input validation doesn't allow quotes in rule descriptions.
-
- duplicate of #1340
-
- it works, you have a config issue of some sort. post to the forum or mailing list for help.
-
02:03 PM Bug #1483 (Rejected): OpenVPN peer-2-peer routing doesn't work
- Hi,
i have here installed pfsense 2.0-RC1 (i386) built on Thu Apr 14 19:19:42, and i tried to establish a peer-2-p... -
- Ok for the first one...
For the second one I attach you two different crashes I just caused while making changes on... -
- The second picture seems and issue from the shaper.
I cannot tell anything if i do not see the trace, type bt on the... -
- When running network traces to examine the packets sent/received during Captive Portal authentication and accounting ...
-
03:44 AM Bug #1445: Trouble with interface msk0 (Marvell Yukon 88E8057 Gigabit Ethernet)
- There is a driver bug logged, have a look at http://www.freebsd.org/cgi/query-pr.cgi?pr=156493 - otherwise one person...
04/25/2011
-
- Thanks Ermal for your response but when I create the step 1, and assign the member 1000 and click save, I get the nex...
-
- You do not need to create teh vlan in step2 since it is done automatically by the GUI.
-
- Hmm... I use the RC1 (i386) version and have this problem, that's the reason I asked. The pptp Traffic-Flow stops aft...
-
- yes. if it's marked as resolved, it's resolved.
-
- Is this bug fixed in the RC1 version?
-
- probably, that would be consistent with 1.2.x
-
- Should it delete the already created pppoe config?
-
03:42 PM Bug #1445: Trouble with interface msk0 (Marvell Yukon 88E8057 Gigabit Ethernet)
- I am having problems too with the msk0 Marvell Yukon Gigabit on an iMac.
I will get a watchdog timeout on that int... -
-
- Ok, I understand... I try to explain you the problems I encounter, you give me your opinion if it's related to this i...
-
- I am sorry but it will still go up and down on slave but it want cause any issues!
If you can reproduce the issue ... -
- On 1.2.3 if an interface is up, it had a * next to it to indicate the link state. This was removed a while ago on 2.0...
04/24/2011
-
- We're not running igmpproxy with verbose logging enabled, not sure if that log level is from something in the pfport ...
-
03:02 PM Feature #1477 (Resolved): IGMPPROXY spamming the main systemlog
- Since Igmpproxy is finally working now theres only one big problem left:
Igmpproxy is massivly spamming the main s... -
- that's intentional. though with CDATA now they may be safe, it's not going to change for now.
-
04:39 PM Bug #1478 (Resolved): some characters in FW rule descriptions do not sync properly
- Parentheses, periods and commas: "(", ")", ",", "." all get stripped out of the firewall rule description on the seco...
-
- Added the IPv6 payload patch from Gert Doering for full IPv6 support.
04/23/2011
-
09:08 AM Feature #1449: LAG setup from CLI (like VLANs)
- I would like to +1 on this request. I currently use a basic config exported from a working system, change it and use ...
-
- thanks
-
- Tested and working! (see image) the red lines at 10:03:50 and 10:05:05 represents the moments where the secondary mac...
-
- mmhh... with build "Fri Apr 22 18:24:14 EDT 2011" i386 on both machines, when I modify something on the master machin...
04/22/2011
-
-
10:04 AM Bug #1453: Voucher RSA key generation problem
- I reinstalled pfSense, and RSA key regeneration works well. I'm unable to reproduce this problem.
-
- I just installed pfsense 2.0-RC1 (i386) built on Fri Apr 22 01:23:40 EDT 2011 on an Alix 2D3 board. I tested the Vou...
-
- Applied in changeset commit:"9411fbf73e52f01730da3fc8ba663bc901087144".
-
- Applied in changeset commit:"9411fbf73e52f01730da3fc8ba663bc901087144".
-
- I pushed another change so try with that.
Though i think carp needs to be teached about a 'start' sysctl as it has a... -
- Reassign the bridge0 interface as LAN, and assign your old LAN interface as a separate interface that is a member of ...
-
- Yes but nat all LAN interface functionality can be moved to bridge interface yet (e.g. firewall anti-lockout). If you...
-
- already exists in 2.0, assign bridgeX
-
- Please add possibility to handle a bridge as an interface (e.g. add one IP address etc.). It would be useful if you a...
-
- Please add a feature to create vouchers valid to a fixed time/date not for an amount of time.
-
- If you add a user responsible the voucher management of captive portal only with rights for vouchers only he/she have...
-
- If you use accented characters outside the ASCII character set, the WebCfg seems to save the messages but it does not...
-
- Needs to have this fix to make OpenVPN 2.2-RC2 work.
http://openvpn.git.sourceforge.net/git/gitweb.cgi?p=openvpn/open... -
04:57 AM pfSense Packages Bug #1452 (Resolved): Snort: broken link in snort_rules_edit.php [2.8.6.1 pkg v. 1.35]
- Patch attached
04/21/2011
-
- There's only one cert on each. However, I don't think the 2ry has been rebooted since setup; I'll do that and confir...
-
- config sync does indeed sync the cert that's used, and there currently isn't any way to do otherwise. But, if you sta...
-
- On the slave, go to System > Advanced, on the Admin tab, make sure the cert selected there is the same as the cert se...
-
- Hmm... in that case, I think this is a bug, not a feature. If the identical certificate is being offered from both m...
-
- Usually you would want to access the GUI on the boxes directly by accessing their actual IPs, not the CARP VIP, since...
-
- Using CARP VIP to administer pfSense, after the backup is promoted to master, Firefox complains about SSL certificate...
-
- Just got burned by this... I never noticed that XMLRPC Sync keeps IPSEC and OpenVPN in sync, but not PPTP. Even if t...
-
- Do we have the ability to diff chunks of the config xml? If diff(old-carp-config,new-carp-config)==zero-changes, don...
-
- pfSense is a long time having this code.
It was done because otherwise lots of code need to be added just to test fo... -
- Perhaps I'm missing something - I have yet to see a single auto-added FW rule for VPNs on my boxes: I thought the che...
-
- Provide a mechanism during initial interface assignment to create LAGs, not just VLANs. In a moderately complex envi...
-
- I put a patch for this and it would give by default to an interface 100Mbit line if it is not reported automatically.
-
- Its an OP issue.
-
- New merge request sent
-
- Applied in changeset commit:"1f0c76cfd7086aa90ea97a9775f2f024390a02ec".
-
- Applied in changeset commit:"46698c3f3c5e3f2e98829757616ddda3ce779b6d".
-
- Prompting for the password is too large of a change to try squeezing in at this point in the release cycle. I'll look...
-
02:38 AM Bug #1446: Export of internal generated cerificate (crt) ist empty when made from encrypted CA key
- I thing I found the problem. The imported CA-private key was encrypted:
-----BEGIN RSA PRIVATE KEY-----
Proc-Type: ... -
- OK, I finally got it all the way straightened out. I confirmed it worked between two test VM networks with my last co...
-
05:56 AM Bug #1417: OpenVPN client specific overrides doesnt work by default
- For me, the client-config-dir works with the build "Fri Apr 15 18:54:32 EDT 2011". I didn't upgrade yet.
I read th... -
07:12 AM pfSense Packages Bug #1385: Open-VM-Tools not working anymore
- Jim P wrote:
> We need to fix the automated build process, not upload new binaries.
Any news on that problem?
... -
- I find it very hard to believe there is any difference between amd64 and i386, all my systems that work fine are i386...
-
- Just tested with 64bit version. it's work directly after install using same config backup. 32 bit not working (latest...
-
- it is definitely working on 32 bit.
-
- please reopen it. PPTP Auth via radius not working in 32bit version!!!!
-
03:27 AM
pfSense Packages
Bug #1423: Open-VM-Tools package script files broken in 2.0rc-1
- _Include file open-vm-tools.inc could not be found for inclusion._
but why ? -
03:23 AM
pfSense Packages
Bug #1423: Open-VM-Tools package script files broken in 2.0rc-1
- The EOFA has gone now...
04/20/2011
-
- doubly confirmed, accounting and auth work fine. The posted config is correct. If you're seeing no traffic to your RA...
-
- it works fine. Also disables fine, you have to actually disable it by unchecking, you can't just take out the IP.
-
08:01 PM Bug #1448: PPTP VPN Radius authentication and accounting don't work
- Instead of opening a new bug i figured i would add to this.
I am having the same issue with PPTP authenticating to... -
- attached files from requested directory
-
- Can you show the contents of cat /var/etc/pptp-vpn/*
-
- PPTP VPN configured to use radius authentication and accounting. no traffic to radius server. no users authentication...
-
- Might be something specific to your CA then, hard to say without trying it out. I imported a CA I had made a long tim...
-
- Annexed the properties of the imported CA-certificate in case that the properties of the CA are the problem.
(create... -
- Tag in /cf/conf/config.xml is empty:
<cert>
<refid>4daeeb458a580</refid>
<descr><![CDATA[thomas_c]]></descr>
... -
- I performed that exact same sequence (imported a CA, generated a certificate, and exported) and I got the expected da...
-
- After generating a own certificate the exported crt is empty.
How the problem can be reproduced:
# An own CA-cert... -
- Yeah I had the wording in that wrong. There may be something else going on in P2P/TLS then. People on the forum were ...
-
- that commit looks like it would have been ok, it was changed for P2P TLS, not shared key.
-
- Hm, okay. But I use certificate based authentication....
So please reopen? -
- It would help if the stored certificates could be exported also in PKCS12-format, because many clients (like some on ...
04/19/2011
-
- Apparently it's just not allowed to have a shared key tunnel and push with client-config-dir. Backing out changes, as...
-
03:37 PM Bug #1318: Certificate error: certificate subject does not match signing request subject
- Also confirmed with RapidSSL with GeoTrust as the intermediate CA.
2.0-RC1 (amd64)
built on Thu Apr 14 11:13:23 ... -
- I caught it, the master firewall started to work after this log line:
Apr 19 10:03:27 pfsense1 check_reload_status... -
- The situation has improved, but not resolved yet... (tested with build 18 23:29:41 EDT 2011 i386)
In the image att...
04/18/2011
-
- the secondary has no need to blow away its CARP IPs and recreate them unless there has been a CARP change, and never ...
-
- In etc/inc/interfaces.inc, before line 1827, there could be something like:
$ints = get_interface_arr(true);
fore... -
- Makes sense that the VIPS are destroyed and recreated after reconfiguring on the backup machine, unfortunately when t...
-
- Well this is normal considering that the slave just destroys and recreates its vips and an election occurs in carp co...
-
04:38 PM Bug #1439: WAN PPPoE config dropped on update from 1.2.3 (nanobsd) to 2.0-RC1 (snapshot 20110415-1518)
- Here's the old and the new config. I replaced passwords and usernames, also removed some settings like firewall filt...
-
- The upgrade log won't tell us anything relevant here. We need the before and after upgrade versions of your config.xm...
-
- Better than a patch: I did a merge request on https://rcs.pfsense.org/projects/pfsense/repos/yakatz-sandbox/commits/e...
-
- What I meant to say there is this patch fixes the problem.
I am working on a patch that will actually completely wor... -
- Here is the simple patch. A better one is on the way.
-
- This seems to have been fixed by Seth.
-
-
02:47 PM Bug #636: layer7 not work correctly
- Still not working here either (2.0-RC1 (i386) built on Mon Apr 18 10:01:33 EDT 2011). L7 container set to block HTTP....
-
- No its not like #174. This is in console and i am not sure that it has been forseen for such use.
I will give a look... -
12:18 PM pfSense Packages Bug #1443: Squid errors on updating version
- I definitely have the errors, as does Nachtfalke as per http://forum.pfsense.org/index.php/topic,35673.0.html
I in... -
- I can't reproduce this. I have installed/reinstalled/uninstalled and starting and stopping the service works as expec...
-
- I try setting up suggest by Calvin Teh, and it working, but after restart it come back to the problem.
-
- I try setting up suggest by Calvin Teh, and it working, but after restart it come back to problem.
-
- I'm also having same problem. Any update regarding this issue
04/17/2011
-
- More information:
Reinstalling the package allows it to run for the period of time that the system is up. As soon ... -
- not convinced that's a driver problem, sounds like it may be config related, but if it is, not something we can fix. ...
-
- This is a follow-up to bug 1444. Installed via pfSense-memstick-2.0-RC1-i386-20110417-0359.img.gz.
As described i... -
- PS: the files changed are:
config/snort/index.php
config/snort/snort.xml
Thanks!
Michele -
- According to this thread http://forum.pfsense.org/index.php/topic,33812.0.html I added a index.php in the snort direc...
-
- ps: the file changed is
config/widget-snort/snort_alerts.inc
Thanks! -
- Made the change, waiting for someone to merge my git clone in the master
-
- BTW, this sounds like bug 174, fixed a year ago.
-
- I just installed 2.0-RC1 via pfSense-memstick-2.0-RC1-i386-20110417-0359.img.gz with the quick install wizard (SMP ke...
04/16/2011
-
- UPDATE: I have just reinstalled the latest version of 2.0RC1-i386-20110415-11416 and I still have the same issues. Th...
-
- As per http://forum.pfsense.org/index.php/topic,35673.0.html some of us are experiencing Squid errors when updating f...
-
- Only if you're willing to pay to have it fixed. Otherwise it gets fixed when we get to it.
-
03:03 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- is it possible to rise priority from normal to high?because i have to disable PPTP VPN on my production firewalls wit...
-
- any fix for this bug?
-
- cron job was broken when the server died recently, fixed.
-
11:32 AM Bug #1440 (Closed): Bogons list is outdated
- The pfsense bogon list in http://files.pfsense.org/mirrors/bogon-bn-nonagg.txt is hoplessly outdated. The following ...
-
- not going to remove it as it could possibly change though it most likely won't, and the same mechanism will be used f...
-
- Once the IPv4 bogons list is updated with the updates in http://redmine.pfsense.org/issues/1440, the ipv4 bogon list ...
-
- Actually, it wasn't clear to me that the config partition is shared between the slices. I thought it was stored with...
-
- That is a known and expected problem. There is no way around that since both slices share the same config. No code we...
-
- I just upgraded a firewall from 1.2.3 to todays snapshot, using pfSense-2.0-RC1-4g-i386-20110415-1518-nanobsd-upgrade...
-
- I just upgraded a firewall from 1.2.3 to todays snapshot, using pfSense-2.0-RC1-4g-i386-20110415-1518-nanobsd-upgrade...
04/15/2011
-
- The internal automatic rule is wrong as well. Regardless of how many clients you have, the outbound NAT rule it makes...
-
- Just a bit of bug checking and the code that I mentioned on the mailing list will be ready (I am waiting on my CA to ...
04/14/2011
-
- It appears that if the countryName in the requested subject is not recognized by openssl, it throws these two errors ...
-
- this has been good for a while, using it on a number of installs.
-
07:11 PM Bug #1436 (Resolved): firewall syslog stops working after reboot
- 2.0-RC1 (i386)
built on Thu Apr 14 15:32:22 EDT 2011
You are on the latest version.
Platform nanobsd (1g)
H... -
- Hi,
Is it possible to add the squid log module rather than storing the logs
locally on the pfsense device?
If... -
11:08 AM Feature #1434 (New): Radius Accounting in OpenVPN
- Radius Accounting packets are critical to any enterprise implementation of OpenVPN due to compliance reasons. It is a...
-
06:03 AM Bug #1149: nano build - upgrade size failure on USB flash drives
- newbie on bsd and pfsense.
filed a bug week or so ago, got rejected. found this, exactly my problem.
currently ... -
- newbie on bsd and pfsense.
filed a bug week or so ago, got rejected. found this, exactly my problem.
currently ...
04/13/2011
-
- Is there any news about this issue??
Saludos! -
06:01 PM Bug #651: Multiple gateways on WAN interface
- Ermal Luçi wrote:
> The problem with this is that apinger will bind to the same address and has no idea that the mon... -
04:34 PM Todo #648: Move "base" packages such as RIP, OLSR, etc, back into packages
- Currently I know about at least 5 installations using the LiveCD in corporate installations
(+ my own one).
The r... -
- my pf info
2.0-RC1 (i386)
built on Tue Apr 12 11:38:49 EDT 2011 -
at last i found my periodically ipsec disconnect problem after researching in redmine,i'm using pptp from home to c...
04/12/2011
-
-
05:13 PM Bug #1397: ntpdate sync not functioning properly
- Hi Jim P,
That change seemed to do the trick. NTP is running just perfectly after making those changes and rebooti... -
- I updated this again with commit:cd11a14
ntpdate sync is completely gone, since simply starting ntpd with -s will ... -
- I updated this again with commit:cd11a14
ntpdate sync is completely gone, since simply starting ntpd with -s will ... -
- tricking the WAN interface to become a DHCP connection and back to PPPoE works . However after a system restart, the ...
-
- I don't have anything with PPPoE handy but it looks at a glance like keep-alive should always be present. From interf...
-
- Any config change causes the CARP IPs on the secondary to come up as master and back down to backup, which is unneces...
04/11/2011
-
- Confirm not working on amd64 platform as well
2.0-RC1 (amd64)
built on Sun Apr 10 21:49:29 EDT 2011 -
- I was able to reproduce this, and committed a fix on Saturday. This is fixed on current snapshots, and confirmed with...
-
09:04 AM Bug #1428: DNS servers not assigned
- Same problem here after update... ISP DNS servers not applied. Had to enter DNS servers manually.
2.0-RC1 (i386)
... -
- you can close it. it's work as explained in your update
-
- When the "master" machine boots, the CARP ips are promoted to master immediately, even before the firewall filters ar...
-
01:10 AM Bug #1399: rrdtool respawning too fast
- Noticed this message in syslog long ago.
-
- one thing that I have noticed is , when WAN interface is on DHCP the keep alive option is working perfectly fine. Cha...
04/10/2011
-
- mpd5 mentions it as a "set link keep-alive seconds max" parameter under mpd.conf .. but that mpd.conf is no where to ...
-
- you'll have to look into mpd 5 and see if it supports that.
-
- Some ISPs that I have experienced with locally requires LQR echo reply sent from the client to ensure that the sessio...
-
- actual cause in #1431
-
- Dear All,
I have found the root cause of the issue that the ISP requires a LCP echo inteval reply of 30 seconds in... -
05:10 AM Bug #1347: ntpd not starting
- with the Fri Apr 8 18:33:38 EDT 2011 build the
issue seems to be gone.
Thank you
04/09/2011
-
- need dhclient logs, that just looks like you aren't being assigned DHCP servers.
-
- They should be assigned via DHCP by the ISP but PFSense will not accept them so I have assigned them manually in gene...
-
- Not enough info here. Are these assigned manually? By DHCP? Any errors in the logs or console?
-
- I just updated my PFsense install to the latest version (2.0-RC1 (i386)built on Fri Apr 8 18:33:38 EDT 2011) and DNS ...
-
- here are the screenshot attachments for the PPPoE configuration
04/08/2011
-
- Hi Jim P,
I've also applied your commits, but it didn't resolve the issue. Once I applied them and started the dis... -
- The ntp issue would be separate (it has its own ticket), but I didn't test with openvpn. I suspect that's because Ope...
-
04:59 PM Bug #1397: ntpdate sync not functioning properly
- Jimp, I've applied your commits and I see the service is now running fine at startup and is able to stop and restart ...
-
- Should be fixed as of commit:edf99ce (See also commit:2db351a and commit:54c1859)
-
- Use the pre button for code.
The issue here is somewhat moot: The UP kernel is eventually going to be phased out. ... -
- Let's try one more time...
> if [ $KERNELTYPE = "UP" ]; then
> > -if [ -f /kernels/kernel_SMP.gz ]; then-
> > +if ... -
- The formatting of that ticket came out really bad.
> if [ $KERNELTYPE = "UP" ]; then
> > if [ -f /kernels/kernel_SM... -
- From the mailing list:...
-
-
- If you have a WAN failure or don't have working DNS, then launching ntpd is just as useless because it uses the same ...
-
- Applied in changeset commit:"02d99511539a3312f8aab54b7dd1cdcaec9c0847".
-
- Strike that. Looking at the backend code, you must be using "Peer to Peer (SSL/TLS)". It seems that one case was miss...
-
- What exact settings are you using for your OpenVPN server?
I just set up an instance with the wizard and it does h... -
- I have the following content in the client specific configuration....
-
- On configs upgraded from 1.2.3 at a minimum, and possibly others, the automatically generated IPsec rules do not trim...
04/07/2011
-
07:32 PM Bug #1425: pfSense stops receiving traffic on 'bge' driven interface
- The FreeBSD bug indicates that the bug is triggered by high traffic/bandwidth via the interface.
If someone can re... -
- It will be 8.1. Will see if we can easily back port the 8.2 driver if that is the fix.
-
- Hi guys,
This bug has happened to our installation twice, now. Seemingly randomly, the bge0 interface (I have bge0... -
-
- Ok here are some screenshots:
1. First I create the QinQ with the SVLAN 13 and as member the VLAN 1000.
!1.png!
... -
- Please provide the logs and screenshots to help with this.
-
- I can confirmed this issue on i386 platform :...
-
- I just reinstalled to i386 (and change VM type to FreeBSD 32bits). It seems much more stable now...
Let's wait a f... -
- here is an attachment of the packet capture done on the WAN interface. Ping was initiated as soon the PPPoE connectio...
-
- It would be consistent to add/show the OpenVPN, PPPoE, PPTP, etc.. under interface groups as permanent entries since ...
-
07:27 AM pfSense Packages Bug #1423 (Resolved): Open-VM-Tools package script files broken in 2.0rc-1
- /usr/local/pkg/open-vm-tools.inc seems to have issues.
One of which is an erroneous "A " at the end of a here doc ... -
07:10 AM Feature #1422 (Closed): short voucher codes
- Please add an option for shorter voucher codes. For home use 5 or 6 chars codes would be sufficient instead of the or...
-
- Thanks Ermal, lastest snapshot is OK.
Regards
04/06/2011
-
- mmmm...sorry because I am not giving any screenshot, but im not at the office right now.
I have been testing like ... -
- Disconnecting PPTP VPNs drops IPsec when using a public IP as the PPTP server IP, which is an incorrect configuration...
-
- When a WAN interface set for PPPoE is switched to any other type, it breaks it, as it leaves that interface assigned ...
-
- It's work. please update documentation
-
- Forward to me to take a look.
-
- Applied in changeset commit:"9a36dc9d241e004e7bcdec25def3b7b0c9d94cff".
-
- Another improvement was committed related to this.
It now considers gateways that are not marked as default in the GUI. -
10:54 AM Bug #1410: pfSense remains without default route
- Ermal Luçi wrote:
> A setup with multiple WANs can losse its default route when its gateway is marked as down from a... -
- Applied in changeset commit:"ab75b4ee5475fe1be718cb0e93d0a34f293c5ed0".
-
- I know for a fact this works without doing that, need more info.
-
- are these all 64 bit?
-
- Same problem here... With lastest snapshot update applied (pfSense-Full-Update-2.0-RC1-amd64-20110405-1827.tgz)
!k... -
- just a fact of the Intel driver, we don't include doc. You'll have to get it from a stock FreeBSD.
-
10:26 AM Bug #1419 (Rejected): Incorrect Intel License information in dmesg
- Running:
FreeBSD fw 8.1-RELEASE-p2 FreeBSD 8.1-RELEASE-p2 #1: Tue Apr 5 17:09:22 EDT 2011 sullrich@FreeBSD_8.0_pfS... -
- That may help with multi-wan, but doesn't help the case when there is only one WAN, or all WANs are down.
-
- will furnish with a screenshot since the VM is disabled at the moment. However what I have configured on the WAN inte...
-
- Show your pppoe configuration please
-
- Thanks committed.
-
- Hi,
With 2.0, it's impossible to make bsnmpd bind to LAN. It's very usefull when we want to access SNMP data from ... -
02:01 AM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes
- Rob Eckel wrote:
> I solved the problem that I was experiencing today. I noticed that the step of the connection th... -
- I solved the problem that I was experiencing today. I noticed that the step of the connection that it was stalling o...
04/05/2011
-
- yeah, dunno how to change the attributes... :) I'm talking about an installation inside kvm with 2.0 rc1.
-
- Hi
I wanted to use the "client specific overrides"-feature. But it didn't push the configuration until I put the f... -
- Just committed a fix for this.
https://rcs.pfsense.org/projects/pfsense/repos/mainline/commits/262595f0d5756ad4411e3... -
09:22 AM Bug #1415: Nat reflection is installing rules with 'Array'
19001 dgram udp nowait/0 nobody /usr/bin/nc nc -u -w 2000 Array 25535
19002 dgram udp nowait/0 nobody /usr/bin/nc ...-
- This leads to 10K+ nc processes which never go away and at some point will exhaust your firewalls resources.
-
03:02 PM Bug #1107: mpd on AMD64 generates invalid checksums with NAT
- I tried this with the same result as before. Lowered the MTU on the OpenVPN interface to match the MTU of the PPTP in...
-
- It works for me on the most recent snapshot with fresh rrd files. Try to rm /var/db/rrd/* and press save on the RRD s...
-
10:12 AM Bug #1416 (Rejected): RRD failures for Traffic and Packets graphs
- None of the Traffic and Packet graphs work on my ALIX.2D3 systems for the latest builds. Here's a sample output for a...
-
08:18 AM Bug #1414 (Closed): dhclient fail on wifi
- If using dhcp on a wifi interface dhclient fails because it is executed before wpa_supplicant is finished configureri...
-
06:08 AM Feature #1411: Gateway Group as default gateway
- I could see use for this too.
-
05:28 AM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes
- Hi,
Tested again , tried many different situations. They all have the same problem.
It's definitely a routing/fil... -
03:57 AM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes
- One thing that is different in my setup is that the other end is racoon as well, not shrewsoft client. With the racoo...
-
- ISP uses VLAN 500 to provide VDSL2 connectivity through a Huawei HG655A BTU. VLAN tagging is done on a separate Mikro...
04/04/2011
-
09:23 PM Bug #1347: ntpd not starting
- The script /usr/local/sbin/ntpdate_sync_once.sh is looping until the initial synchro with ntpdate is sucessfull. Once...
-
03:42 PM Bug #1401: VLANs and Web settings "TCP Segmentation Offload"
- I´m on a bussiness trip and can check that first on Friday... Sorry.
-
- Can you please verify that after saving the new options under system->advanced for disabling TSO and than going to th...
-
- Changing back to new. I have a configuration file here that will utterly wreack havoc if someone wants to take a lo...
-
11:01 AM Bug #1412 (Resolved): Assign a user the "WebCfg - System: User Manager Page" does'nt allow access
- When trying to add to a blank user the following rights :
WebCfg - System: User Manager page
WebCfg - System: Us... -
- Seems like a pretty bad bug if you checked the option to ignore the DNS servers and yet they get static routes. I'd p...
-
- This is caused by the dhclient script.
I do not think this should be fixed for 2.0 as this has been the behavior unt... -
- Can you try a snapshot from tomorrow.
I fixed #1410 and that would fix this as well. -
- On step3 you just enable the interface and leave it as type none.
That will make your GRE work. -
- Hi,
can i propose the feature in subject?
Now if the default gateway go down pfsense arent able to download the p... -
- This seems like a hardware problem.
Either motherboard or your harddisk controller! -
05:44 AM Bug #1342: kernel crash with RC1 on vmware
Here is a backtrace screenshot.
I don't know if it helps you...
-
- A setup with multiple WANs can losse its default route when its gateway is marked as down from apinger.
This results...
04/03/2011
-
+1 for this not working.
I have a bridged interface (one WLAN and one LAN) but tried it without the bridged inte...-
- duplicate
-
10:17 AM Bug #1409 (Rejected): Open VM Tools install error
- Beginning package installation for Open-VM-Tools...
Downloading package configuration file... done.
Saving updated ... -
- Packages cannot be used from the LiveCD, and there is no way to support them while running from the LiveCD. Adding pa...
-
09:53 AM Bug #373: Package Manager not available in menus
I'm running version 1.2.3-RELEASE and no option in the system menu to add packages either. If it's related to runn...
04/02/2011
-
- after full configuration of pfSense including all wan (4 interfaces)and all lan interfaces (3 interfaces) i started t...
-
- If you have hardcoded DNS servers and _uncheck_ "Allow DNS server list to be overridden by DHCP/PPP on WAN", DNS serv...
-
- If you don't have functional DNS, the GUI can be extremely sluggish.
Common scenario to reproduce:
* Multi-WAN se... -
- Hi,
I have altered the Racoon.conf with the solution Andy Giles suggested. But no luck unfotunally.
altered the s... -
- The new version has updated drivers for LCD Panels (many patches to the existing ones and new drivers added).
The f... -
- Since Floating Rules can apply to different interfaces, it would be useful if in the list this information was visibl...
-
- it'll automatically be available when that version of FreeBSD is a stable release and we put out a release based on i...
-
01:59 AM Feature #1404 (Closed): Broadcom 10GbE bxe Driver
- It looks like the Broadcom 10GbE driver (BCM57710/BCM57711) is now out. It would be great to have it included in pfSe...
04/01/2011
-
- Thanks,
I will try this solution.
report to you if it also fixes this problem. -
- PLease provide logs or screenshots and part of your interfaces config.
It should work and is 80% finished i would sa...
03/31/2011
-
11:26 PM Bug #1336: PPTP VPN NAT on WAN or other external interface
- Yes,I also encountered the same problem.
My Test environment Attachment Page1.jpg
1. Wan2 Rules: Open WAN2 Port G... -
- jeje yes and I am testing with it, actually it works!. I know is not finished yet but meanwhile I think is better to ...
-
- was QinQ ever finished? Maybe should be hidden until a later release.
-
- Hello,
When creating a QinQ interface it works fine but the configuration stop working until reboot. The system te... -
- Topic says it all.
Some investigation is needed to find the cause. -
- Error is :
Downloading http://files.pfsense.org/packages/8/All/icu-4.6.1.tbz ... could not download from there or... -
- Problem exists in Snapshot :
2.0-RC1 (i386)
built on Wed Mar 30 23:56:33 EDT 2011
Also available in: Atom