Activity
From 04/09/2011 to 05/08/2011
05/08/2011
-
08:06 PM pfSense Packages Bug #1513 (Closed): Ntop
- IN
2.0-RC1 (i386)
built on Sat May 7 22:58:48 EDT 2011
I installed ntop and ...
It does not seem possible ... -
11:19 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- I am trying to replicate after updating to 2.0-RC1 (amd64) built on Sat May 7 23:04:11 EDT 2011 , but i am unable to ...
05/07/2011
-
11:59 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- need exact logs, copy and paste.
I don't think it's state killing related, Ermal had someone remove that and it d... -
- Jim P wrote:
> Just a guess here, but last I knew, PPTP issued a pfctl -k (src) -k (dst) when disconnecting, and if ... -
- Chris,
For the ipsec stuff:
If you can give me a link for a tutorial to get the ipsec working properly on ios i w... -
10:01 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- Just a guess here, but last I knew, PPTP issued a pfctl -k (src) -k (dst) when disconnecting, and if the IPs involved...
-
- IPsec works fine with iOS devices. The free OpenVPN client on OS X works fine too, it uses the same underlying softwa...
-
- Hi,
Im having the same problem on my pf box.
And it would appreciate if this is rise priority to high since P... -
- Ermal that means you need to log in.
I merged this
-
05:35 PM Bug #1336: PPTP VPN NAT on WAN or other external interface
- the problem caused by removing pptp patch by Eric at 16/3. you cansolve route problem at 32 bit version by using vers...
-
- Applied in changeset commit:"c7ac47fd2d5ad66ff69a3e46c93bf41247929bc8".
-
- I have seen CA/Certs come back before, but hadn't tried to track it down yet. I'll look into this and see what is goi...
-
12:06 PM Bug #1512 (Resolved): Ghost CAs
- Use wizard to create an openvpn server. Delete it. Delete the CA it used and all certs. Now create a new CA or do it ...
-
11:59 AM Bug #636: layer7 not work correctly
- can you do a packet trace for bittorrent?
You sure its not encrypted?
Keep in mind that these are regex from http://... -
07:51 AM Bug #1493: pf blocks all traffic following filter reload.
- Oops, I lied.. I see the blocked packets in "Filter Logs", sorry.
Please find attached a tarball of /tmp from a pf... -
12:58 AM Feature #1431: PPPoE LQR Echo
- tried with v1.2.3 and v2.0rc1 it still produces the same problem on the same ISP.
i tried mofifying the /var/etc/m...
05/06/2011
-
- some info here:
http://forum.pfsense.org/index.php/topic,36004.0/topicseen.html
I can replicate this on at least... -
10:48 PM Bug #1341: Removing last host from alias does not truly remove it, host continues to be affected by rules
- Thank you!
-
- this has been fixed
-
-
10:05 PM Bug #636: layer7 not work correctly
- Same as several others. HTTP block is working now, but it still does nothing for BitTorrent.
-
-
-
-
-
- working fine everywhere I've set it up
-
-
-
-
- forgot ticket in commit, change here: https://rcs.pfsense.org/projects/pfsense/repos/mainline/commits/9c04a8c07993357...
-
- fixed
-
-
-
- it's not supposed to work with that modem so this isn't a bug. There is a feature open to add support for more modems.
-
-
- Do the affected ISPs work with v1.2.3?
Do you have the "set link keep-alive ..." in /var/etc/mpd_wan.conf? -
- this isn't an actual issue, there is a separate issue for the broken checksums
-
- definitely works with em interfaces, not sure about 82574L specifically but shouldn't be different than any other.
-
12:25 PM Bug #1509 (Closed): Traffic Shaper (altq) not working with 82574L interfaces?
- I was using traffic shaper with realtek interfaces, and it always worked really well. After changing from realtek to ...
-
-
-
-
- this was implemented a while back plus some additional enhancements
-
- fixed
-
- fixed a while back
-
-
- package no longer exists
-
-
-
- this is probably fixed with the most recent package. If not, it's not our bug, it's in some other component we can't ...
-
- this is fixed
-
- fixed, more under #1423
-
-
08:08 PM pfSense Packages Bug #1423: Open-VM-Tools package script files broken in 2.0rc-1
- Looks good here as well.
Thanks guys! -
- Looks good here as well.
Thanks guys! -
- After Scott's last set of changes, I tried this on both 32-bit and 64-bit VMware pfSense 2.0 VMs and the tools instal...
-
07:05 PM Bug #1336: PPTP VPN NAT on WAN or other external interface
- I use pfSense 2.0 RC1 i386 with multi-WAN in my production environment, I meet the same issue. Is there any solution ...
-
- The problem is related to 64 bit only.
-
01:08 PM Bug #1336: PPTP VPN NAT on WAN or other external interface
- I should also mention, I do not have multi-WAN setup. So this issue does not appear to be limited to multi-WAN setups.
-
- I am unable to get the most modern 2.0 RC1 amd64 build to route PPTP VPN traffic to the web. Version 1.2.3 works fin...
-
06:43 PM Bug #1510 (Resolved): Aliases names over 32 characters in length cause table problem errors
- If one creates an alias with a name over 32 characters, it will cause table name problems when trying to use the alia...
-
-
02:47 PM Bug #1507: openvpn.inc Local line in openvpn.inc failover
- It seems I missed the Any on the local interface selection in the client config. This can be closed.
Thank You -
- it is updated when the interface is changed. It is required for the client config in multi-WAN scenarios.
-
- When you failover to opt1 the client configuration is not updated with opt1's ip address. I'm not expecting existing...
-
02:39 PM Bug #1151: Outgoing pptp Traffic-Flow stops after a while
- I use now the version '2.0-RC1 (i386) built on Thu May 5 18:22:32 EDT 2011' and it's still the same behavior, the tra...
-
- I would need the /tmp/rules.debug
also the port alias section from config.xml -
02:19 AM Bug #1508: Wan Fai lback
- Could be the same thing I see on my wan2. When I look in /tmp/rules.debug gateways hasn't recovered. In a shell scrip...
05/05/2011
-
- Changing anything in the web interface to do with gateways makes the system failback but this is a manual process.
... -
- Subject should say "Wan Fail Back"
-
- When the WAN interface has a static ip and the system fails over the gateway to a tier2 opt1 interface it will not fa...
-
06:35 PM Bug #1386: Nested port aliases causes "Unknown port" error upon loading filters
- What feedback exactly would you require? I was of the impression that I described the "procedure to reproduce the pro...
-
- Can you please give more detail on this?
Seems not many people havie seen this! -
- to change an OpenVPN client from WAN to OPT1 you have to change its config from WAN to OPT1, there is no failover of ...
-
- if (!empty($iface_ip)) {
$conf .= "local {$iface_ip}\n";
}
in /etc/inc/openvpn.inc c... -
- pftop shows only traffic being passed, not blocked. check /tmp/rules.debug and the loaded rulesets and other info in ...
-
- Hi, can you let me know what information would be useful?
At present, the only system logs immediately preceding f... -
- I pushed this https://rcs.pfsense.org/projects/pfsense-tools/repos/mainline/commits/99030511af941f6679b15a8920e720486...
-
- If the firewall can't connect to the mail server notifications fail and never attempt to notify again. A nice featur...
-
- The first time you insert the 3g modem it will work properly, if you disconnect or soft reboot ppp can't connect stat...
-
- Pfsense is not ejecting the cdrom when you insert/boot a verizon usb760 3g card. Without ejecting the cd-rom you don'...
-
08:18 AM Bug #1502: web interface needs to be manually started
- when RC1 boots the web interface does not come up (at least here).
Once I see the LCD display come alive I then have... -
- That is definitely not normal, but there is not enough information here to reach any kind of conclusion. Please post ...
-
- it seems since I switched to using rc1 when PFSense is rebooted I have to ssh in and then restart the web configurato...
-
- That is also not normal behavior, and not something that anyone else has seen that I'm aware of. Between your previou...
-
- seems that the autoupdater may not be rebooting and shutting down instead. Also, the web interface keeps showing that...
-
05:02 AM Bug #1501 (Closed): Captive Portal Logout popup does not work
- The logout popup for the captive portal does not work. People can still use the network and RADIUS is getting its acc...
05/04/2011
-
07:42 PM Bug #1235 (Feedback): pfsense 2.0 load balancing with a https monitor seems to default timeout 200ms causing constant timeouts
- I have added a patch for this but for now made this a global option. We should, at a later stage add the option for c...
-
02:25 PM Bug #1235: pfsense 2.0 load balancing with a https monitor seems to default timeout 200ms causing constant timeouts
- Did some quick tests: The timeout option is only valid as a global config or in the table stanza, not in a redirect ...
-
- I have confirmed this issue. The default relayd timeout of 200ms is being used even with a timeout specified inside ...
-
- Not sure we want to expose this for 2.0, potential for fallout since that's never been exposed, though it's probably ...
-
- Currently there is nothing in webGUI to configure how often Captive Portal pruning should be executed. So the default...
-
- not enough info to do anything with this. Definitely not a universal issue, maybe something specific to KVM or someth...
-
- Version: 2.0-RC1 (i386) built on Tue Apr 19 23:03:17 EDT 2011
Hardware: /usr/libexec/qemu-kvm -S -M rhel5.4.0 -cpu... -
- Test latest snapshots.
-
- @Jonathan,
can you show any picture of your configuration and the system log with the relevant layer7 logs(they sh... -
03:48 PM Bug #636: layer7 not work correctly
Okay,
On image 2.0-RC1 (i386)
built on Tue May 3 10:51:27 EDT 2011
Confirmed that it works as previous comme...-
09:20 AM Bug #636: layer7 not work correctly
- I haven't tried any advance layer 7 rules yet but I do agree with Jonathan that a simple rule to block traffic(I bloc...
-
05:22 AM Bug #636: layer7 not work correctly
- I've tested with a snapshot from the evening of the 3rd. It appears to be partially working now. If I create a simple...
-
- Applied in changeset commit:"56da23dc5ffebdb6cf52f3b46abebc0ef56e9861".
-
02:58 PM Bug #1494 (Closed): Limiter does not apply to active FTP
- The only way to do active FTP work is enabling functionality ftp.proxy.handle which brings the problem of not applyin...
-
10:50 AM Feature #1489: Can't configure PPPoE over VLAN
- Howdy Mr. Stretz,
It is possible to do what you want without changing code, but it requires an extra step.
You ca... -
09:49 AM Feature #1489 (New): Can't configure PPPoE over VLAN
- Marking item as future as this is a legitimate problem.
-
05:37 AM Feature #1489: Can't configure PPPoE over VLAN
- I'm confused. You write "for now" though close this bug. Does that mean forever? I had a look at the code and with...
-
- Please use the forum at http://forum.pfsense.org/ for support questions, and post as much detail there in a thread as...
-
06:48 AM Bug #1491 (Closed): Optional interface problem pinging LAN interface static IP's
- There are 3 interface, WAN(pppoe),LAN and WLAN(optional wireless AP).
DHCP server is turned on on all interfaces.
O... -
- Only owners can process and verify merge requests!
-
- merge request for this: https://rcs.pfsense.org/projects/pfsense-tools/repos/mainline/merge_requests/72
-
05/03/2011
-
- I tested the Tue May 3 11:16:02 EDT 2011 and the bug is fixed. Thanks for the quick turn around!
-
- There was a typo s/conf/config/ - this has been fixed.
Applied in change set commit:327ef8eb3244f79e1b669dca792c83... -
- Unfortunately this still doesn't fix the issue. I tested and (isset($conf['system']['lb_use_sticky'])) returns false...
-
- Its the way it works for now.
So please assign your vlan and choose the assigned interface as parent. -
- I currently have to run a PPPoE link over a 802.1Q tagged VLAN (don't ask...). When I go to [[http://10.49.1.1/inter...
-
12:25 PM Bug #1402: When creating a QinQ it works until reboot.
- Im just trying to connect two pfsense and pass into a parent vlan 2 vlans.
!qinq.jpg! -
- Looks like all packages failed to reinstall for some reason, so I guess the problem isn't/wasn't in the packages but ...
-
- That is because a package failed to reinstall, which is not related to this. If a package fails during the reinstall ...
-
- But anyterm and darkstat are still packages, right? I still have their entries in the menu (though they are broken d...
-
- OpenVPN is not a package on 2.0, it's part of the base system. OpenNTPd is also part of the base system, even if it i...
-
- I upgraded from 1.2.3 nanobsd to 2.0-rc1 (currently a snapshot built on Mon May 2 21:11:55 EDT 2011).
The package ... -
- Ah, ok, that wasn't obvious from the output. I'd suggest changing the string "platform:" to "minimum version:".
-
- that's the minimum version, if they aren't compatible they aren't in 2.0's package lists.
-
- A quick glance at the list of Available Packages in the Package Manager shows a lot of packages. But most of these p...
-
- this is not a support site and not a valid bug report, use the forum or mailing list.
-
03:03 AM Bug #1487 (Rejected): INTERNET PROBLEM
- We are using pfsense as a software & firewall.We have lot of windows & linux mechines.Yesterday i reinstalled the pfs...
05/02/2011
-
- thanks
-
01:43 PM Bug #1485: WebUI password changes do not change shell and VPN passwords
- Thanks for quick fix! It works.
I updated to 2.0 RC1 built Fri Apr 29 21:19:09 EDT 2011. I changed the privileges ... -
- Applied in changeset commit:"9b0ddd8cf37fbf4e453d476a985f00e36bbb0861".
-
- When the sticky session flag is set in advanced/misc and then a relayd pool setup the sticky-session option is not se...
-
- I put a patch yesterday in the layer7 daemon used for classification.
It was forgetting the protocols during reload.... -
- Usually it will be needed for the QinQ vlan, 1000 3000, in your case.
I cannot answer to you without a clear descr...
04/30/2011
-
- Do I have to change the MTU of the interface involved in order to get work?. Is just an idea....
04/29/2011
-
- Applied in changeset commit:"c639315e3c86ae6cc2a1d1030347340f340f8270".
-
- I committed an ipsec xauth permission for users to fix #1202 a couple weeks ago, you should be using that instead.
... -
- Version:
2.0-RC1 (amd64)
Goal:
Have user accounts that only work for IPSec VPN access. And allow the user to cha... -
- The previous commit should fix this, but needs additional testing.
-
- Sorry the last image is like this for example:
!3.png! -
- Hello,
I have tested the changes and now the members are displayed correctly, thanks for that.
So I tryied agai... -
- Committed a fix.
-
01:53 AM Bug #1415: Nat reflection is installing rules with 'Array'
- Here you are:
@$ ps -ax | grep inetd
7108 ?? Ss 0:44.47 /usr/sbin/inetd -wW -R 0 -a 127.0.0.1 /var/etc/ine...
04/28/2011
-
- Can you show the content of /var/etc/inetd.conf?
Also ps -ax | grep inetd -
- Try again. https://rcs.pfsense.org/projects/pfsense/repos/mainline/commits/9cf46050fc708f3a3395c7800acf5d81a69b1013
... -
- I can also confirm this is the case with PositiveSSL's issued from Comodo.
2.0-RC1 (amd64)
built on Thu Apr 28... -
11:10 AM Todo #1373: Upgrade OpenVPN
- Change for the netsh interface on windows 7, use set address, instead of add address. Otherwise the command will exit...
-
- The current openvpn-ipv6 port has both the endpoint and payload patch for IPv6. The current installer we include in t...
-
09:18 AM Feature #1431: PPPoE LQR Echo
- I'm still waiting ISP (TM Net) to reply regarding this issue. I ask them if they can disable LQR echo. I will update ...
-
- so far tricking the WAN interface in and out of DHCP works, but I don't understand why is this working
-
01:50 AM Feature #1431: PPPoE LQR Echo
- Alot of us are having the same problem with the same ISP and modem provided. The same issue occurs when PPPoE through...
04/27/2011
-
10:13 PM Todo #1438: Add override for CSR request->response subject mismatch
- My semester ends in about 2-3 weeks. At that point I will look around in the code for other places where this type of...
-
- tested this with a cert from namecheap, originally was seeing the issue described here, synced up to Yehuda's git clo...
-
- Any news with this bug?
-
- actually I was wrong, this wasn't fixed in the official RC1 release, it's been in snapshots since early March though.
-
- I think the problem is that I use a Bridge between LAN and OPT1. I have 3 interfaces
WAN
LAN
OPT1
The WAN-In... -
- i found why its don't work. Eri removed pptp proxy patch at 16/3/2011. i have amd64 iso from 10 Mar 2011 and this iso...
-
- because there is no way to tell that "username" is the same as "domain\username" or "username@domain" or other possib...
-
06:10 AM Bug #1484 (Rejected): Captive Portale
- Hi, I've enabled "Disable concurrent logins" in Captive Portal and I've configured a Radius Server (Windows Active Di...
-
08:07 AM Bug #1433: Config sync causes CARP state change
- I tryed the latest snapshot and I'm still having the CARP switch issue.
Each time I apply a change,using LAN CARP as... -
06:19 AM Feature #1482: Captive Portal support for a configurable RADIUS NAS ID
- Hi just found out that the code in /etc/inc/radius.inc function putStandardAttributes() does not call the getNasId() ...
-
- Processes are not spawn anymore but for example nat reflection seems anyway not working properly...
Examples: A nsl...
04/26/2011
-
- it can be built on a stock FreeBSD 8.1 system and copied over.
-
- #1415 duplicated this
-
-
- this is not a legit bug report, ask questions on the forum or mailing list.
-
-
- under what circumstances is this a problem? The input validation doesn't allow quotes in rule descriptions.
-
- duplicate of #1340
-
- it works, you have a config issue of some sort. post to the forum or mailing list for help.
-
02:03 PM Bug #1483 (Rejected): OpenVPN peer-2-peer routing doesn't work
- Hi,
i have here installed pfsense 2.0-RC1 (i386) built on Thu Apr 14 19:19:42, and i tried to establish a peer-2-p... -
- Ok for the first one...
For the second one I attach you two different crashes I just caused while making changes on... -
- The second picture seems and issue from the shaper.
I cannot tell anything if i do not see the trace, type bt on the... -
- When running network traces to examine the packets sent/received during Captive Portal authentication and accounting ...
-
- There is a driver bug logged, have a look at http://www.freebsd.org/cgi/query-pr.cgi?pr=156493 - otherwise one person...
04/25/2011
-
- Thanks Ermal for your response but when I create the step 1, and assign the member 1000 and click save, I get the nex...
-
- You do not need to create teh vlan in step2 since it is done automatically by the GUI.
-
- Hmm... I use the RC1 (i386) version and have this problem, that's the reason I asked. The pptp Traffic-Flow stops aft...
-
- yes. if it's marked as resolved, it's resolved.
-
- Is this bug fixed in the RC1 version?
-
- probably, that would be consistent with 1.2.x
-
- Should it delete the already created pppoe config?
-
03:42 PM Bug #1445: Trouble with interface msk0 (Marvell Yukon 88E8057 Gigabit Ethernet)
- I am having problems too with the msk0 Marvell Yukon Gigabit on an iMac.
I will get a watchdog timeout on that int... -
-
- Ok, I understand... I try to explain you the problems I encounter, you give me your opinion if it's related to this i...
-
- I am sorry but it will still go up and down on slave but it want cause any issues!
If you can reproduce the issue ... -
- On 1.2.3 if an interface is up, it had a * next to it to indicate the link state. This was removed a while ago on 2.0...
04/24/2011
-
- We're not running igmpproxy with verbose logging enabled, not sure if that log level is from something in the pfport ...
-
03:02 PM Feature #1477 (Resolved): IGMPPROXY spamming the main systemlog
- Since Igmpproxy is finally working now theres only one big problem left:
Igmpproxy is massivly spamming the main s... -
- that's intentional. though with CDATA now they may be safe, it's not going to change for now.
-
04:39 PM Bug #1478 (Resolved): some characters in FW rule descriptions do not sync properly
- Parentheses, periods and commas: "(", ")", ",", "." all get stripped out of the firewall rule description on the seco...
-
- Added the IPv6 payload patch from Gert Doering for full IPv6 support.
04/23/2011
-
09:08 AM Feature #1449: LAG setup from CLI (like VLANs)
- I would like to +1 on this request. I currently use a basic config exported from a working system, change it and use ...
-
- thanks
-
- Tested and working! (see image) the red lines at 10:03:50 and 10:05:05 represents the moments where the secondary mac...
-
- mmhh... with build "Fri Apr 22 18:24:14 EDT 2011" i386 on both machines, when I modify something on the master machin...
04/22/2011
-
-
10:04 AM Bug #1453: Voucher RSA key generation problem
- I reinstalled pfSense, and RSA key regeneration works well. I'm unable to reproduce this problem.
-
- I just installed pfsense 2.0-RC1 (i386) built on Fri Apr 22 01:23:40 EDT 2011 on an Alix 2D3 board. I tested the Vou...
-
- Applied in changeset commit:"9411fbf73e52f01730da3fc8ba663bc901087144".
-
- Applied in changeset commit:"9411fbf73e52f01730da3fc8ba663bc901087144".
-
- I pushed another change so try with that.
Though i think carp needs to be teached about a 'start' sysctl as it has a... -
- Reassign the bridge0 interface as LAN, and assign your old LAN interface as a separate interface that is a member of ...
-
- Yes but nat all LAN interface functionality can be moved to bridge interface yet (e.g. firewall anti-lockout). If you...
-
- already exists in 2.0, assign bridgeX
-
- Please add possibility to handle a bridge as an interface (e.g. add one IP address etc.). It would be useful if you a...
-
- Please add a feature to create vouchers valid to a fixed time/date not for an amount of time.
-
- If you add a user responsible the voucher management of captive portal only with rights for vouchers only he/she have...
-
- If you use accented characters outside the ASCII character set, the WebCfg seems to save the messages but it does not...
-
- Needs to have this fix to make OpenVPN 2.2-RC2 work.
http://openvpn.git.sourceforge.net/git/gitweb.cgi?p=openvpn/open... -
04:57 AM pfSense Packages Bug #1452 (Resolved): Snort: broken link in snort_rules_edit.php [2.8.6.1 pkg v. 1.35]
- Patch attached
04/21/2011
-
- There's only one cert on each. However, I don't think the 2ry has been rebooted since setup; I'll do that and confir...
-
- config sync does indeed sync the cert that's used, and there currently isn't any way to do otherwise. But, if you sta...
-
- On the slave, go to System > Advanced, on the Admin tab, make sure the cert selected there is the same as the cert se...
-
- Hmm... in that case, I think this is a bug, not a feature. If the identical certificate is being offered from both m...
-
- Usually you would want to access the GUI on the boxes directly by accessing their actual IPs, not the CARP VIP, since...
-
- Using CARP VIP to administer pfSense, after the backup is promoted to master, Firefox complains about SSL certificate...
-
- Just got burned by this... I never noticed that XMLRPC Sync keeps IPSEC and OpenVPN in sync, but not PPTP. Even if t...
-
- Do we have the ability to diff chunks of the config xml? If diff(old-carp-config,new-carp-config)==zero-changes, don...
-
- pfSense is a long time having this code.
It was done because otherwise lots of code need to be added just to test fo... -
- Perhaps I'm missing something - I have yet to see a single auto-added FW rule for VPNs on my boxes: I thought the che...
-
- Provide a mechanism during initial interface assignment to create LAGs, not just VLANs. In a moderately complex envi...
-
- I put a patch for this and it would give by default to an interface 100Mbit line if it is not reported automatically.
-
- Its an OP issue.
-
- New merge request sent
-
- Applied in changeset commit:"1f0c76cfd7086aa90ea97a9775f2f024390a02ec".
-
- Applied in changeset commit:"46698c3f3c5e3f2e98829757616ddda3ce779b6d".
-
- Prompting for the password is too large of a change to try squeezing in at this point in the release cycle. I'll look...
-
02:38 AM Bug #1446: Export of internal generated cerificate (crt) ist empty when made from encrypted CA key
- I thing I found the problem. The imported CA-private key was encrypted:
-----BEGIN RSA PRIVATE KEY-----
Proc-Type: ... -
- OK, I finally got it all the way straightened out. I confirmed it worked between two test VM networks with my last co...
-
05:56 AM Bug #1417: OpenVPN client specific overrides doesnt work by default
- For me, the client-config-dir works with the build "Fri Apr 15 18:54:32 EDT 2011". I didn't upgrade yet.
I read th... -
07:12 AM pfSense Packages Bug #1385: Open-VM-Tools not working anymore
- Jim P wrote:
> We need to fix the automated build process, not upload new binaries.
Any news on that problem?
... -
- I find it very hard to believe there is any difference between amd64 and i386, all my systems that work fine are i386...
-
- Just tested with 64bit version. it's work directly after install using same config backup. 32 bit not working (latest...
-
- it is definitely working on 32 bit.
-
- please reopen it. PPTP Auth via radius not working in 32bit version!!!!
-
03:27 AM
pfSense Packages
Bug #1423: Open-VM-Tools package script files broken in 2.0rc-1
- _Include file open-vm-tools.inc could not be found for inclusion._
but why ? -
03:23 AM
pfSense Packages
Bug #1423: Open-VM-Tools package script files broken in 2.0rc-1
- The EOFA has gone now...
04/20/2011
-
- doubly confirmed, accounting and auth work fine. The posted config is correct. If you're seeing no traffic to your RA...
-
- it works fine. Also disables fine, you have to actually disable it by unchecking, you can't just take out the IP.
-
08:01 PM Bug #1448: PPTP VPN Radius authentication and accounting don't work
- Instead of opening a new bug i figured i would add to this.
I am having the same issue with PPTP authenticating to... -
- attached files from requested directory
-
- Can you show the contents of cat /var/etc/pptp-vpn/*
-
- PPTP VPN configured to use radius authentication and accounting. no traffic to radius server. no users authentication...
-
- Might be something specific to your CA then, hard to say without trying it out. I imported a CA I had made a long tim...
-
- Annexed the properties of the imported CA-certificate in case that the properties of the CA are the problem.
(create... -
- Tag in /cf/conf/config.xml is empty:
<cert>
<refid>4daeeb458a580</refid>
<descr><![CDATA[thomas_c]]></descr>
... -
- I performed that exact same sequence (imported a CA, generated a certificate, and exported) and I got the expected da...
-
- After generating a own certificate the exported crt is empty.
How the problem can be reproduced:
# An own CA-cert... -
- Yeah I had the wording in that wrong. There may be something else going on in P2P/TLS then. People on the forum were ...
-
- that commit looks like it would have been ok, it was changed for P2P TLS, not shared key.
-
- Hm, okay. But I use certificate based authentication....
So please reopen? -
- It would help if the stored certificates could be exported also in PKCS12-format, because many clients (like some on ...
04/19/2011
-
- Apparently it's just not allowed to have a shared key tunnel and push with client-config-dir. Backing out changes, as...
-
03:37 PM Bug #1318: Certificate error: certificate subject does not match signing request subject
- Also confirmed with RapidSSL with GeoTrust as the intermediate CA.
2.0-RC1 (amd64)
built on Thu Apr 14 11:13:23 ... -
- I caught it, the master firewall started to work after this log line:
Apr 19 10:03:27 pfsense1 check_reload_status... -
- The situation has improved, but not resolved yet... (tested with build 18 23:29:41 EDT 2011 i386)
In the image att...
04/18/2011
-
- the secondary has no need to blow away its CARP IPs and recreate them unless there has been a CARP change, and never ...
-
- In etc/inc/interfaces.inc, before line 1827, there could be something like:
$ints = get_interface_arr(true);
fore... -
- Makes sense that the VIPS are destroyed and recreated after reconfiguring on the backup machine, unfortunately when t...
-
- Well this is normal considering that the slave just destroys and recreates its vips and an election occurs in carp co...
-
- Here's the old and the new config. I replaced passwords and usernames, also removed some settings like firewall filt...
-
- The upgrade log won't tell us anything relevant here. We need the before and after upgrade versions of your config.xm...
-
- Better than a patch: I did a merge request on https://rcs.pfsense.org/projects/pfsense/repos/yakatz-sandbox/commits/e...
-
- What I meant to say there is this patch fixes the problem.
I am working on a patch that will actually completely wor... -
- Here is the simple patch. A better one is on the way.
-
- This seems to have been fixed by Seth.
-
-
- Still not working here either (2.0-RC1 (i386) built on Mon Apr 18 10:01:33 EDT 2011). L7 container set to block HTTP....
-
- No its not like #174. This is in console and i am not sure that it has been forseen for such use.
I will give a look... -
12:18 PM pfSense Packages Bug #1443: Squid errors on updating version
- I definitely have the errors, as does Nachtfalke as per http://forum.pfsense.org/index.php/topic,35673.0.html
I in... -
- I can't reproduce this. I have installed/reinstalled/uninstalled and starting and stopping the service works as expec...
-
- I try setting up suggest by Calvin Teh, and it working, but after restart it come back to the problem.
-
- I try setting up suggest by Calvin Teh, and it working, but after restart it come back to problem.
-
- I'm also having same problem. Any update regarding this issue
04/17/2011
-
- More information:
Reinstalling the package allows it to run for the period of time that the system is up. As soon ... -
- not convinced that's a driver problem, sounds like it may be config related, but if it is, not something we can fix. ...
-
- This is a follow-up to bug 1444. Installed via pfSense-memstick-2.0-RC1-i386-20110417-0359.img.gz.
As described i... -
- PS: the files changed are:
config/snort/index.php
config/snort/snort.xml
Thanks!
Michele -
- According to this thread http://forum.pfsense.org/index.php/topic,33812.0.html I added a index.php in the snort direc...
-
- ps: the file changed is
config/widget-snort/snort_alerts.inc
Thanks! -
- Made the change, waiting for someone to merge my git clone in the master
-
- BTW, this sounds like bug 174, fixed a year ago.
-
- I just installed 2.0-RC1 via pfSense-memstick-2.0-RC1-i386-20110417-0359.img.gz with the quick install wizard (SMP ke...
04/16/2011
-
- UPDATE: I have just reinstalled the latest version of 2.0RC1-i386-20110415-11416 and I still have the same issues. Th...
-
- As per http://forum.pfsense.org/index.php/topic,35673.0.html some of us are experiencing Squid errors when updating f...
-
- Only if you're willing to pay to have it fixed. Otherwise it gets fixed when we get to it.
-
03:03 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- is it possible to rise priority from normal to high?because i have to disable PPTP VPN on my production firewalls wit...
-
- any fix for this bug?
-
- cron job was broken when the server died recently, fixed.
-
11:32 AM Bug #1440 (Closed): Bogons list is outdated
- The pfsense bogon list in http://files.pfsense.org/mirrors/bogon-bn-nonagg.txt is hoplessly outdated. The following ...
-
- not going to remove it as it could possibly change though it most likely won't, and the same mechanism will be used f...
-
- Once the IPv4 bogons list is updated with the updates in http://redmine.pfsense.org/issues/1440, the ipv4 bogon list ...
-
- Actually, it wasn't clear to me that the config partition is shared between the slices. I thought it was stored with...
-
- That is a known and expected problem. There is no way around that since both slices share the same config. No code we...
-
- I just upgraded a firewall from 1.2.3 to todays snapshot, using pfSense-2.0-RC1-4g-i386-20110415-1518-nanobsd-upgrade...
-
- I just upgraded a firewall from 1.2.3 to todays snapshot, using pfSense-2.0-RC1-4g-i386-20110415-1518-nanobsd-upgrade...
04/15/2011
-
- The internal automatic rule is wrong as well. Regardless of how many clients you have, the outbound NAT rule it makes...
-
- Just a bit of bug checking and the code that I mentioned on the mailing list will be ready (I am waiting on my CA to ...
04/14/2011
-
- It appears that if the countryName in the requested subject is not recognized by openssl, it throws these two errors ...
-
- this has been good for a while, using it on a number of installs.
-
- 2.0-RC1 (i386)
built on Thu Apr 14 15:32:22 EDT 2011
You are on the latest version.
Platform nanobsd (1g)
H... -
- Hi,
Is it possible to add the squid log module rather than storing the logs
locally on the pfsense device?
If... -
11:08 AM Feature #1434 (New): Radius Accounting in OpenVPN
- Radius Accounting packets are critical to any enterprise implementation of OpenVPN due to compliance reasons. It is a...
-
06:03 AM Bug #1149: nano build - upgrade size failure on USB flash drives
- newbie on bsd and pfsense.
filed a bug week or so ago, got rejected. found this, exactly my problem.
currently ... -
- newbie on bsd and pfsense.
filed a bug week or so ago, got rejected. found this, exactly my problem.
currently ...
04/13/2011
-
- Is there any news about this issue??
Saludos! -
06:01 PM Bug #651: Multiple gateways on WAN interface
- Ermal Luçi wrote:
> The problem with this is that apinger will bind to the same address and has no idea that the mon... -
04:34 PM Todo #648: Move "base" packages such as RIP, OLSR, etc, back into packages
- Currently I know about at least 5 installations using the LiveCD in corporate installations
(+ my own one).
The r... -
- my pf info
2.0-RC1 (i386)
built on Tue Apr 12 11:38:49 EDT 2011 -
at last i found my periodically ipsec disconnect problem after researching in redmine,i'm using pptp from home to c...
04/12/2011
-
-
05:13 PM Bug #1397: ntpdate sync not functioning properly
- Hi Jim P,
That change seemed to do the trick. NTP is running just perfectly after making those changes and rebooti... -
- I updated this again with commit:cd11a14
ntpdate sync is completely gone, since simply starting ntpd with -s will ... -
- I updated this again with commit:cd11a14
ntpdate sync is completely gone, since simply starting ntpd with -s will ... -
- tricking the WAN interface to become a DHCP connection and back to PPPoE works . However after a system restart, the ...
-
- I don't have anything with PPPoE handy but it looks at a glance like keep-alive should always be present. From interf...
-
- Any config change causes the CARP IPs on the secondary to come up as master and back down to backup, which is unneces...
04/11/2011
-
- Confirm not working on amd64 platform as well
2.0-RC1 (amd64)
built on Sun Apr 10 21:49:29 EDT 2011 -
- I was able to reproduce this, and committed a fix on Saturday. This is fixed on current snapshots, and confirmed with...
-
09:04 AM Bug #1428: DNS servers not assigned
- Same problem here after update... ISP DNS servers not applied. Had to enter DNS servers manually.
2.0-RC1 (i386)
... -
- you can close it. it's work as explained in your update
-
- When the "master" machine boots, the CARP ips are promoted to master immediately, even before the firewall filters ar...
-
01:10 AM Bug #1399: rrdtool respawning too fast
- Noticed this message in syslog long ago.
-
- one thing that I have noticed is , when WAN interface is on DHCP the keep alive option is working perfectly fine. Cha...
04/10/2011
-
- mpd5 mentions it as a "set link keep-alive seconds max" parameter under mpd.conf .. but that mpd.conf is no where to ...
-
- you'll have to look into mpd 5 and see if it supports that.
-
- Some ISPs that I have experienced with locally requires LQR echo reply sent from the client to ensure that the sessio...
-
- actual cause in #1431
-
- Dear All,
I have found the root cause of the issue that the ISP requires a LCP echo inteval reply of 30 seconds in... -
05:10 AM Bug #1347: ntpd not starting
- with the Fri Apr 8 18:33:38 EDT 2011 build the
issue seems to be gone.
Thank you
04/09/2011
-
- need dhclient logs, that just looks like you aren't being assigned DHCP servers.
-
- They should be assigned via DHCP by the ISP but PFSense will not accept them so I have assigned them manually in gene...
-
- Not enough info here. Are these assigned manually? By DHCP? Any errors in the logs or console?
-
- I just updated my PFsense install to the latest version (2.0-RC1 (i386)built on Fri Apr 8 18:33:38 EDT 2011) and DNS ...
-
- here are the screenshot attachments for the PPPoE configuration
Also available in: Atom