Activity
From 05/10/2011 to 06/08/2011
06/08/2011
-
09:13 PM pfSense Packages Bug #1590 (Resolved): Snort Will Not Start
- Hello all-
I just upgraded my pfsense firewall (from a snap on Tuesday May 31 to a snap today 2.0-RC2 (amd64) buil... -
06:47 PM Bug #1545: Dynamic DNS updates fail on 3G connections
- Thanks, but not working. It is now not even updating on boot. The only way I can get it to update is to manually remo...
-
05:35 PM Bug #342 (Feedback): OpenNTPD can only listen on interface IP
- Applied in changeset commit:7401c8c451e33a5f5fd38e934760e1b855fee822.
-
04:47 PM Bug #1514 (Resolved): Limiters not syncing
- Since no complain received i am marking this as solved.
-
- The same issue exists for the mac address.
Possibly a fix for mac addresses should be done on 2.1 -
- I am moving this to 2.1 for improving.
For 2.0 the option under system->advanced should be enough. -
- It happened to me in a VM.
Not really sure on the circumstances, though if i can reproduce again i will check more t... -
- Applied in changeset commit:c7422829b2a76301d2efbe0aa01e3dcfcce3012f.
-
- Latest snapshot has more fixes in this regard.
-
- Evgeny you need fragments to trigger this panic.
-
- Yes, it reinstalls all packages on every update.
-
02:49 PM Bug #1588: HAVP dashboard widget broken by June 7 build
- Indeded, removing and re-installing the package fixed that. Does pfSense remove and re-install all packages every tim...
-
- Looks like that file doesn't exist, which means you need to reinstall the package. Some other package may have failed...
-
- I have a box running 2.0 RC1 with the havp package installed. After upgrading to the June 7 build, the service appear...
-
- Driver issue, we probably can't do anything for that. Try to reproduce it on a plain FreeBSD install and report it to...
-
01:19 PM Bug #1589 (Rejected): pfsense crashes all the time with rt3070 wlan
- Hello.
With rt3070 wlan card, pfsense is crashing all the time with the error that you can find a screenshot here ... -
10:35 AM pfSense Packages Bug #1587 (Resolved): The openvpn client configuration exporter doesn't enforce TLS subject verification
- Hi,
The openvpn client configuration exporter doesn't enforce TLS subject verification. This leads to a security v...
06/07/2011
-
10:13 AM Bug #1556: Changing local IPsec tunnel endpoint does not work
- Still struggling to replicate though tested with OPT1 and OPT2 (can't touch WAN). -(
1. Tunnel works via OPT1.
2. C... -
10:07 AM Feature #1571: Interfaces completely reset when hardware is changed
- "this is how things have always worked" means that this is a far more serious bug than I first thought, and a fundame...
-
05:18 AM Bug #1586 (Resolved): vouchers saved to XML config every 5 minutes even though no new vouchers have been activated
- On "Services: Captive portal: Vouchers" page there is an interval for saving vouchers into config with default of 5 m...
-
01:00 AM pfSense Packages Bug #1585 (Closed): pfsense 2.0-RC1 intermittently disconnects PPTP client session
- upgrade, that was fixed since then.
-
12:25 AM pfSense Packages Bug #1585 (Closed): pfsense 2.0-RC1 intermittently disconnects PPTP client session
- Hello,
I am testing pfsense 2.0 in a VMware virtual machine. My setup is:
Laptop (Ubuntu 10.04) pptp client
pl...
06/06/2011
-
01:08 PM Bug #1534: rc.newwanip issues (CARP slave problems, package issues)
- 19 VIPs, 20 permanent OpenVPN tunnels, 1 OpenVPN for users, 2 gigabit NICs aggregated into 1 lagg0 interface, 14 VLAN...
-
- How many interfaces / VIPs do you have on that box? When I apply changes on my VM, I only see 1-2 of those and they i...
-
- This doesn't seem to be fixed. If I clear a table/alias in the GUI, and it's really a table on the backend, the IPs a...
-
- Applied in changeset commit:a9c489c7ab68e9c853b37a3f132fbc2c53363bbb.
-
06:53 AM Bug #1556: Changing local IPsec tunnel endpoint does not work
- That is correct, racoon will listen on the correct interface, but ignore all communication for that phase 1.
The m... -
- Just updated the code to take into account some curl errors.
These errors just marked the service as updated but rea...
06/05/2011
-
01:36 PM Feature #1578 (Rejected): Custom DynDNS Providers
- Thanks Bill - will do.
Will reject this call, as indicated by Matt, it is a duplicate of #1241. -
01:27 PM Feature #1578: Custom DynDNS Providers
- Additionally, this is a duplicate of #1241 sorry for the confusion there. I had just seen that git was moved off of ...
-
- Originally posted here, uploaded to github to make it easier for me to keep it up-to-date http://forum.pfsense.org/in...
-
01:00 PM Feature #1578: Custom DynDNS Providers
- Pull request is at [[https://github.com/bsdperimeter/pfsense/pull/2]]
-
- Can you please update the pull request with the items you don't want to pull so the author can modify his changes? A...
-
- Github pull at: https://github.com/bsdperimeter/pfsense/pull/2
Sorry for the disturbance. -
- When browsing to an IPv6 IP containing :: the DNS rebinding check is triggered as the :: causes part of the IP to be ...
-
04:14 AM Bug #1567: pfsense rc1 2.0 DNS
- *Update*
for general settings --> dns use gateway
have you tried it lately? -
- Unfortunately this has not helped. Here's some more logs (with -rc2 in the filename) of it happening on the latest ve...
06/04/2011
-
- not seeing any issues here, Brian you can post on the 2.0 board of the forum for help troubleshooting if it's still a...
-
-
-
-
-
-
-
-
- this should be worked around now, was triggered by a race condition in CARP deletion which has been worked around and...
-
- Sondre Slathia wrote:
> I just came across this issue still present on latest nightly build of embedded 4g pfsense 2... -
06:35 AM Bug #495: USB drive fails to mount during boot
- I just came across this issue still present on latest nightly build of embedded 4g pfsense 2. Is this issue resolved ...
-
01:27 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- harry,same problem i have got on 2.0-RC2 (i386),problem not resolved.I think it's not normal priority case because o...
06/03/2011
-
- I have slightly different results.
1. Setup as in the bug description - blocking rule just does not work, DNS reques... -
02:35 PM Bug #1546: Traffic Shaper fails to handle UDP traffic
- I disabled the upnp and tested again, but the same problem still occur, but for me is the upload traffic that goes to...
-
07:06 AM Bug #1546: Traffic Shaper fails to handle UDP traffic
- actually the topic was supposed to be UDP download traffic not going to proper queue, shaping as well as upload traff...
-
12:10 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- Still replicated this bug after updating to 2.0-RC2 (amd64) built on Thu Jun 2 10:50:48 EDT 2011.
I had the ipsec ... -
- Tested a few different scenarios and this seems to be solved all the way around. Thanks!
-
10:25 AM Bug #1577: Inserting any rules on VPN PPPoE interface cause filter not reload
- Attached the config xml.
-
- You can download the config from Diagnostics > Backup/Restore.
-
- I committed the change to check the CIDR and if it's 30+, it will not use the server/client-config-dir directives. Sh...
-
- Thanks for the feedback. I'll mark it as resolved.
-
09:44 AM Bug #1395: RRD data not collecting accurate information
- I just noticed that this problem appears to be fixed. I'm not sure when this behavior changed but this bug can be cl...
-
- Do you know the way to reproduce it? I can't see this behavior...
-
- bear in mind this is not the same bug as ports opened by upnp not being shaped, to replicate this bug add some rules ...
-
- duplicate of #1579
-
04:31 AM pfSense Packages Bug #1580 (Closed): countryblock doesn't uninstall cleanly
- The countryblock package doesn't uninstall cleanly and leaves some files behind, causing squid to fail on startup wit...
-
- 2.0RC1, lightsquid 1.8.0 pkg v.1.2
The lightsquid logfile location is hardcoded in
/usr/local/pkg/lightsquid.inc... -
- The countryblock package doesn't uninstall cleanly and leaves some files behind, causing squid to fail on startup wit...
-
- The ability to add a custom DynDNS Provider as per a mail to the support mailing list from 'TheBlueMatt'.
"Add the... -
- I've updated yesterday and now I'm running 2.0-RC2-IPv6 (amd64) built on Wed Jun 1 18:03:37 EDT 2011 and last commits...
06/02/2011
-
- yeah it is, general UDP shaping works fine.
-
- I use upnp to open ports for my ps3 games, so is very likely to be the same problem reported here http://redmine.pfse...
-
- Jim P noticed that it is impossible now to edit P2, when you change something else rather than networks definitions i...
-
- Corrected https://github.com/bsdperimeter/pfsense/commit/3da5c50d5c2285b439a56ab4fcd6f9dbe94f5c4e
Currently there is... -
- Just tested
exec("/etc/rc.reboot");
works ok. Probably because /etc/rc.reboot does not contain php code. -
- For the moment I disabled the package stop on reboot.
Though after sleeping on it, I remembered a similar problem I ... -
- The choices that use main mode (anything that isn't labeled "aggressive") won't work as the IP of the phone is used a...
-
- Yeah that's a fair point. I'll look into adding a check on the subnet mask side and tossing out the server/csc lines ...
-
12:24 PM Bug #1417: OpenVPN client specific overrides doesnt work by default
- The last section of http://backreference.org/2009/11/15/openvpn-and-iroute/ explains that there are situations where ...
-
- Well the remote network only adds a route, typically with SSL/TLS it requires an iroute to assocate that route to a g...
-
- I suppose I was using p2p+tls because it was the option that was selected when I clicked "add VPN server", not becaus...
-
- Ah, ok. I was thinking of a shared key and /30.
The main reason most people want to use p2p+tls is to push settin... -
- We used 172.25.0.0/30, and OpenVPN gripes as follows:
Jun 2 07:55:09 tfw1 openvpn[60992]: Options error: --server... -
- Hi,
Sorry i can´t know how to find config xml.
I created a rule on PPPoE Interface, with Action Pass from any sou... -
- Please provide your config xml or description of the rules and pppoe server configuration.
-
- When I inserting any rule filter on interface VPN PPPoE, the filter reload don´t start, show the follow error:
The... -
07:16 AM Bug #1386: Nested port aliases causes "Unknown port" error upon loading filters
- As a closing note: I switched my firewall config fully to nested port aliases now (some are 3 levels deep), and it al...
-
- Taking a look at http://forum.pfsense.org/index.php/topic,37399.0.html
it would be good to teach the match action ab... -
- It would be nice to be able to enforce password policy for local accounts.
http://www.openwall.com/passwdqc/ can hel...
06/01/2011
-
- What exactly did you have entered for the Tunnel Network? It works fine when entering a proper value (a /30 where the...
-
- Part of the last commit ( 0cc5ab4 ) broke my previously-working site-to-site p2p_tls vpn configuration using a /30. ...
-
- Gingerbread brought with it "Advanced IPsec VPNs", most of which look like they should work as a mobile client agains...
-
-
09:57 PM Bug #1565: Pull kern/134878 into pfsense 2.0
- Patch attached. Tested against RELENG_8_1. Also requires puc enabled in kernel.
-
08:55 PM Bug #1570: Reboot doesn't work from ssh with option 5
- Typo: 5.0 should be 5.)
And I can reboot from the web interface, so my bug is definitely different. -
- No, it doesn't , it is only mentioned in a comment that was added by you yesterday!
The original description clear... -
- you're the one who can't read, the other ticket covers both this and the web interface reboot.
-
- Can you not read ? This is not the same , it is the opposite. Please reopen this bug.
-
- Is 192.168.16.5/24 input considered valid? It's easier to error on this in gui...
-
- Still at least one case that needs checking:
It still allows you to overlap if you use the "[Interface Name] subnet"... -
-
- If MAC spoofing is enabled on an interface that is a DHCP client, in some circumstances it can get itself into a mess...
-
- thanks
-
04:45 AM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes
- Just for a point of reference to my earlier info.
I eventually found that my issue was a problem with the client end... -
- this is how things have always worked and how the system is intended to function. If you remove a physical interface ...
-
- I had a configuration that used 2 wireless cards (urtw) and had interfaces assigned. One of the urtw interfaces was c...
-
- That is because you are on the IPv6 branch which hadn't been merged in a while. I just synced it back up with mainlin...
-
- I just updated my backup router, but commits from 5 days ago are not included yet. I'm now running:
2.0-RC2-IPv6 (... -
09:46 AM Bug #1532: test_pfSpkg code breaks packages
- This might be a long term change, but it might make sense to convert each package to a class which will prevent multi...
-
- This has been reverted and it will not make 2.0
-
- How to replicate?
I've tried switching between WAN and OPT1 and racoon always listens on respective interface. Reboo... -
-
-
- This has been solved if needed can be re-opened later on.
-
- This is doable only if we keep an approximate file size for upgrades hardcoded in the source.
This allows to do heur... -
-
- Applied in changeset commit:97c1f2684c5dd225075fec08148f084ff190af0a.
-
- This is not so critical for 2.0
-
-
- I am closing this for now after 9 months.
If issues arise it can be re-opened. -
-
-
- Applied in changeset commit:6b421a0fb42a50d1e87ac63c64a5b8b8d2157577.
-
- I just pushed some fixes.
Please gitsync and verify they work correctly now. -
05:16 AM Bug #944: Moving VLANs to lagg doesn't remove old VLANs
- still in 2.0-RC2(amd64) built on Tue May 31 12:13:03 EDT 2011
-
-
- Looks good in 2.0-RC2 (amd64) built on Tue May 31 12:13:03 EDT 2011.
Trying to save an alias with name longer than... -
- I will look at this a bit since its related to some other hangs that happen at times.
-
- Changing rc.stop_packages to a shell script works. Which is a small trivial change and the following works for me:
... -
- Forgot to mention: mwexec("/usr/local/bin/php -f /etc/rc.stop_packages"); does not work either.
-
- I've spent some time trying to understand why we get three processes rc.stop_packages after clicking reboot from gui:...
-
- Can you upload the generated config file i am not seeing it.
-
05:52 AM Bug #636: layer7 not work correctly
- I've removed that, and there's no improvement.
-
- Multiple instances of iperf with udp traffic is very good way to generate substantial load.
05/31/2011
-
- Fixed by https://github.com/bsdperimeter/pfsense/commit/061f28bfd582d1f08d8dfe60f87fc4fd99ec0a93 for mobile clients a...
-
- same as #1564
-
- When I log into pfsense with ssh and choose option 5 to reboot and then confirm with "y", the system doesn't reboot.
... -
- same from console menu option 5
-
- The php.net bug is a decade old. While include() may 'fix' this, IMHO it really obfuscates what it's trying to do an...
-
10:33 AM Bug #1564: rc.stop_packages causes reboot to only works from SSH, not from Web interface
- #5 Solution works for me as well, for me please commit ...
-
- It seems that this is related to bug in php http://bugs.php.net/bug.php?id=11430 "Impossible to execute .php from ins...
-
- driver issues are outside of our control. If you have a patch to fix it, we can commit it.
-
06:13 PM Bug #1569 (Duplicate): USB760 CD not recognized
- While inserting/booting a USB760 CDMA usb modem one can't eject the CD to put it in modem mode because pfSense does n...
-
- The fixes from the ipv6 branch may apply here.
https://github.com/smos/pfsense-ipv6/commits/master/usr/local/www/wid... -
- It is impossible to accept v6 router advertisements when v6 forwarding is enabled.
this patch applies to FreeBSD 8... -
- Moved note to #1443
Please don't open new tickets for an update, if there is a problem with redmine that is a separ... -
- Lloyd is still having issues (See #1563)
I still can't reproduce this no matter what I do. -
- It works fine, I'm using it on my home router without problems. Please use the forum for help diagnosing such issues ...
-
- architecture Amd 64
-
- Under general setup drop down box +use gateway+ does not seem to work when there are more then one interface
-
- It works fine, even on the latest snapshots. Please use the forum to get help diagnosing an issue and confirming a bu...
-
- Under firewall tab
adding a *rule* to wan interface does not seem to work -
- You have a stray <containter/> tag what happens if you remove that?
-
- The l7shaper config is attached, sorry, it took me a minute to find it. The log output looks similar to above, some e...
-
- attach a tested patch against RELENG_8_1 and we'll add it.
-
- I've submitted this as a bug because I am unable to use my 8 port serial card with pfsense, but can with 8_2_RELENG w...
05/30/2011
-
- not for 2.0, can be revisited in the future
-
- Do we need "NAT from localhost out LAN and other internal interfaces as well"? It does not look hard to implement.
-
- That much is adequate for 2.0.
-
- The first part is fixed by this https://github.com/bsdperimeter/pfsense/commit/edb2a3dab4833fa024828f3150cdcc1521ea1b48
-
10:21 PM Bug #1564: rc.stop_packages causes reboot to only works from SSH, not from Web interface
- I can confirm that I have this issue using 2.0-RC2 (i386) Mon May 30 11:06:53.
Tried to reboot from reboot.php. We... -
04:45 PM Bug #1564 (New): rc.stop_packages causes reboot to only works from SSH, not from Web interface
-
04:42 PM Bug #1564: rc.stop_packages causes reboot to only works from SSH, not from Web interface
- I can confirm on snapshot May 30 11:53:52 nanobsd 4G when I remove rc.stop_packages https://github.com/bsdperimeter/p...
-
- Cannot replicate this issue.
-
02:02 PM Bug #1564 (Resolved): rc.stop_packages causes reboot to only works from SSH, not from Web interface
- As reported in the forum (http://forum.pfsense.org/index.php/topic,37258.0.html), the reboot feature doesn't work fro...
-
- I've added the same syntax checks to NAT pages.
https://github.com/bsdperimeter/pfsense/commit/b45babaeb55ac039f498d... -
- Can you try with latest snapshots?
-
- Please try with latest version.
Currently increasing the timeout is the best solution.
In long term possibly the ...
05/29/2011
-
09:44 AM pfSense Packages Bug #1563 (Closed): UPDATE: Squid errors on updating version
- This is an update to http://redmine.pfsense.org/issues/1443 which will not let me edit
I am still experiencing the...
05/28/2011
-
- nothing we can do with ath driver issues. usually forcing the channel will work around that particular problem.
-
- These are driver issue which we try to look whenever possible.
-
04:39 AM Bug #1562 (Rejected): atheros 9280 not working
- card is detected and it is possible to create wireless devices
but if i configure the device (tested in b also g mod...
05/27/2011
-
-
02:41 PM Bug #1372: RRD is not updating VPN statistics
- Verified in
2.0-RC2 (i386)
built on Fri May 27 07:59:32 EDT 2011
It is fixed now.
Thx. -
- Sorry, this happened ages ago. Didn't realise it was so quick. Here's the logs as requested. As mentioned the first u...
-
- Yesterday I've installed HAVP. I've set it up to run in transparent mode and it works fine with one exception. If I'l...
-
- Disabling and re-enabling HAVP on master router causes even more severe load on backup router. It also causes other i...
-
- Indeed I was using old gitsync URL. I've performed few tests yesterday on updated systems. Unfortunately applied chan...
05/26/2011
-
- Applied in changeset commit:13f0762d9c2f23e19eec13dc1041506c40051be8.
-
-
- OK, I'm closing this out. That other bug isn't right either, it's really just this problem too.
Start a new ticke... -
01:52 PM Bug #1415: Nat reflection is installing rules with 'Array'
- Dear Jim,
I tried, but it didn't work anyway... btw, I think this specific issue can be closed since is resolved, ma... -
- Try switching to manual outbound NAT if you haven't already, and then add an outbound NAT rule on the LAN with a sour...
-
- Hello,
I confirm that rules are not defined with "array" even in the case of "port alias" described above.
Anyway,... -
- Jim P wrote:
> Is this on a current snapshot? That bug was fixed a week or so ago (there is already a ticket for it,... -
- Is this on a current snapshot? That bug was fixed a week or so ago (there is already a ticket for it, #1522, reopen t...
-
- I don't know if this behavior is as desired or if it's even a new issue with 2.0 rc2.
I've found that when you c... -
- Error from the IPsec log:...
-
- Currently, the GUI lets you specify the same source/destination subnet more than once in the list of phase 2 definiti...
-
- You need to show the generated config file and you have not shown your layer7 from your config.
-
- I've tested things a bit more today, and am seeing some strange behaviour. I've added some Layer7 rules, and am then ...
-
11:11 AM Bug #651: Multiple gateways on WAN interface
- Sorry!
The post is:
http://forum.pfsense.org/index.php/topic,37116.0.html -
- Hello!
At the Spanish Forum there is an user with similar problem.
He posted images of its topology. So, its ea... -
10:08 AM Feature #1557 (Resolved): Add the Interface descriptions to the OS interface descriptions
- When configuring an interface we can specify a "description" of the interface.
Unfortunately this description is not... -
- When attempting to change over a tunnel from a OPT back to the WAN interface the tunnel never came up.
The other s...
05/25/2011
-
- This really does crash the box. Attaching a backtrace. I can reproduce it at will.
-
- Applied in changeset commit:7788c76a4e9e04b356f40f2129ff5309617dad99.
-
- Applied in changeset commit:f0e80b72a3c359f52596e9b6948178ad48d6bb1b.
-
09:27 AM Bug #1555 (Resolved): Wrong DHCP configuration option when activating "Deny unknown clients"
- Hello everybody,
There is a bug in the generated dhcpd.conf when enabling "Deny unknown clients".
the resulting... -
-
- Using the "Tue May 24 04:45:10 EDT 2011" version, the problem seems to be successfully fixed. :) I was able to create...
-
- "Services: Captive portal: Vouchers" page gets nearly all greyed out and no new roll can be generated (the "+" icon d...
05/24/2011
-
05:17 PM Bug #1553: Dynamic DNS does not allow @ in the password
- It looks like the (AT) is breaking the string being sent to DNS-0-Matic's server as "ksdfg" is part of the password I...
-
- DNS-O-Matic accepts the passwords with an @ symbol on their website but when you use that password on the Dynamic DNS...
-
- Do you mean that DNS-O-Matic rejects such a password?
I don't see that we are currently doing any kind of input valid... -
- Dynamic DNS updater does not allow for @ symbol in the password for the update service.
Run into this problem when... -
- (1) Should be working properly now.
(3) You can already limit the size of the capture in the GUI using the "Count" f... -
- Squid, Squidguard, and Lightsquid have been working on 2.0 for quite some time now.
-
- This was added quite some time ago, almost all fields in outbound NAT can use aliases now.
-
- need backtrace
-
- UDP - LAN - net - * - !Router - 53(DNS) - WAN - none - DNS Reject
If this rule is setup on the LAN interface to re... -
- Applied in changeset commit:ee6d2b525127a05121682b1c26dd153496385b36.
-
- It looks like you can save a NAT rule with a " in the description, which could get you a filter rule with a " in the ...
-
- Applied in changeset commit:4e12754d1ae3405a8910686a7fa0bb012c01d8da.
-
- Applied in changeset commit:bdb6bd30651fc219acf5a0171752164d680a1c7b.
-
- Applied in changeset commit:a90896fd641a24d33af1db55efbf83c5cfac9974.
-
- Ah, ok. I wasn't looking back far enough in the git log. Looks good, thanks!
-
- a828210b746c074c1e701a44f5f2ec3a69ba368a
2594f4010b85e5f4571ba76a69e36a16f441b4e3 -
- I didn't see a commit bringing this into mainline, is the patch on the ticket up to date? I just want to make sure we...
-
- thanks!
-
- If apinger marks a gateway as down as soon as it is up it will mark it as availble and the pool will switch to it for...
05/23/2011
-
- I was going through the files again and I found that there are no more places in the code that need this change.
Thi... -
- Any comments on this potential solution?
-
02:40 PM Bug #1508: Wan Fai lback
- Correct me if I'm wrong, but this appears to only resolve the issue of bringing the WAN back up if you physically unp...
-
11:00 AM Bug #1444: Reconfiguring interfaces doesn't deconfigure previous ones
- Applied in changeset commit:7a18dfa4ed218ad7b114d9cd52c008a76c811614.
-
-
- Did you adjust your gitsync URL to point at the github location? The IPv6 tree is up-to-date with 2.0 mainline right ...
-
- > Sure. I did update today
Err... before weekend :-) -
- > Can you please test with latest snapshot from tomorrow and let me know.
> I have done some fixes that should preve... -
07:24 AM pfSense Packages Todo #1551 (Resolved): OLSR Version update
- The OLSR Version in the pfSense 2.0RC1 is 0.5.6-r7(release Date 09/2009).
This should be updatet becaus the aktua... -
04:49 AM Bug #1342: kernel crash with RC1 on vmware
- Hi,
A new crash this morning, RC2 on a vmware guest, without open-vm-tools... Any hint or any help will be highly ... -
- Would it be possible to change the captive portal status display philosophy so that used, active and ready columns ma...
05/22/2011
-
- I already forked from GitHub and I am working from there.
I should have something to merge later today. -
- Another note: Our repositories have moved from rcs.pfsense.org to github (https://github.com/bsdperimeter/pfsense), s...
-
- Yehuda - That option is only available to users with certain levels of access here. If you want to just add a note on...
-
- Ermal - that is exactly what is in the works. Check ticket #1438 - this ticket can probably be closed in favor of tha...
05/21/2011
-
05:29 PM Bug #1549 (Closed): Sip INVITE dropped.
- As best as I can tell so far, the issue is that SIP INVITE packets in particular are being dropped for X minutes ever...
-
- Next snapshot should.
-
- > I just fixed this. Please test new snapshots.
I just updated my installation to:
2.0-RC2 (amd64)
built on... -
- Possibly reading this link https://pkiwidgets.quovadisglobal.com/pkiwidgets/matchCertAndCSR.aspx the same procedure s...
-
-
05:09 AM pfSense Packages Bug #1533: Open-VM-Tools 313025 fails to install, reports installed, can't uninstall
- Please close as resolved; now installs and uninstalls with no errors.
-
- Thanks. Just waiting for an IP change before I do as I updated to the latest build so haven't got any logs when the p...
05/20/2011
-
- Thanks for finding the problem and confirming the fix :-)
-
- Hi,
I was just testing the latest image, I think everything is at its own place after sync... I did this test:
1) u... -
- Applied in changeset commit:aa6699fbea27f15626a8901bcf34ae6bdcc3f2e5.
-
- Confirmed this... On the slave, when this config change happens:
> (system): Merged in config (system sections) fr... -
- Hello,
with the last image (RC2, x86, built on Thu May 19 19:44:17 EDT 2011), after a config sync on the backup mach... -
- It would be nice if in Phase 1 could be possible to add a second remote gateway as backup, if phase 1 with the first ...
-
- Applied in changeset commit:abcdca835cbce83d72d70bb957bbbf2118ae3d01.
-
- I just fixed this. Please test new snapshots.
Thanks for reporting. -
-
- Ermal Luçi wrote:
> I have made changes on the system which should fix this.
> Please test latest snaps.
Yesterd... -
- Please attach dyndns and PPP logs
-
12:41 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- With an IPSEC connection running, this is the log when I connected to the PPTP, then disconnected. After the IPSEC w...
05/19/2011
-
- I and some others are having problems with the traffic shaper handling UDP traffic, the traffic dont pass thru the as...
-
- I'm having (and have been having for a long time with 2.0, even pre-RC) problems with the dynamic DNS service not upd...
-
- Please find the requested files attached.
The error occured when I create a port alias group "HR_Orion", containin... -
- Seth's referring to ESP rather than GRE there
-
- One of the issues that came up was with Racoon. Even if the default gateway came back to the WAN interface the tunnel...
-
- I have made changes on the system which should fix this.
Please test latest snaps. -
- No more interest from the author.
-
- Well you can't have two active subnets on an interface for DHCP, so it doesn't make sense to make another tab when it...
-
- Well i would like this to be closed or turned to a feature.
The way dhcpd is configured from GUI is trhough tabs tha... -
- Applied in changeset commit:b7d56b6412280d9dde10af0175dcc84eb75a85f2.
-
04:41 PM Feature #1544 (Resolved): Syslog Features
- If possible would you consider adding any/all of the following features to syslog host fields in diag_logs_settings.p...
-
04:37 PM Bug #1543: 2 Different Simultaneous OpenVPN Clients - Packet Loss
- K Mullin wrote:
> I have tried individual Outbound NAT rules for each OPT interface, this actually doesn't work even... -
- Attached are original tcpdumps of a few ICMP packets. As well as a screenshot of the Outbound NAT rules.
I have tr... -
- Uploads to here should be fixed. It would be helpful to see exactly how your outbound NAT rule(s) are configured.
... -
- I've tried assigning both OpenVPN instances to an OPT interfaces, this does not seem to have any effect.
Which con... -
- Do you have both of these OpenVPN interfaces assigned as OPT interfaces?
Seeing your full config might be helpful.... -
- 2.0-RC2 (i386) (NANOBSD)
built on Sun May 15 04:00:16 EDT 2011
I'm using a recent build, and I have 2 simultaneo... -
- Applied in changeset commit:43a68abc9d16878cedac8ffda46fc12af5bb18ef.
-
- I have setup multiple PPTP servers on i386 within the last week, and it worked fine, including NAT out to the Interne...
-
- Applied in changeset commit:51f8a7f8d553ff4418168e9840b0f01a49e9ed6f.
-
- Closing this out. The underlying cause of the original errors have been fixed, and if there are any left they are pac...
-
- This was something else entirely, a red herring.
-
- Confirmed this is fixed now.
-
- Applied in changeset commit:bac9941b5ea3fb67f7203726d426afdf84576150.
-
- Applied in changeset commit:dfa6dedad7a3741cc621669077304f44c2c79467.
-
- Should be fixed by https://github.com/bsdperimeter/pfsense/commit/dfa6dedad7a3741cc621669077304f44c2c79467
-
- Hi,
foreach doesn't works after array_flip()...
=================
--- ./etc/rc.start_packages.orig 2011-05... -
11:00 AM Bug #1542: Fatal Error during Upgrade from 2.0-RC1 to latest snapshot 2.0-RC2<May 18 built>
- created forum thread: http://forum.pfsense.org/index.php/topic,36898.0.html
-
- That error would point to your config being empty or unparseable. Look farther back in the boot log for more detail. ...
-
- Hi,
I've just upgraded from pfSense-2.0-RC1-i386-20110226-1530.iso
to latest snapshot (pfSense-2.0-RC1-i386-2011... -
07:19 AM Bug #1540: Captive Portal Vouchers Synchronization
- It is not an autocomplete problem, I did the test on several browsers and computers.
I tried to delete the credent... -
- Toon Vandenneucker wrote:
> I know I can't do that, but I can't make the master stop from synchronizing its database... -
- I know I can't do that, but I can't make the master stop from synchronizing its database from the slave.
Even when I... -
- it sounds like you're syncing from the slave to the master and the master to the slave, you can't do that.
-
- I've set up two teaming firewalls. On the master, I've defined a voucher roll.
When I want my slave to retrieve the ...
05/18/2011
-
- I am not quite done yet, but I was looking at this ticket and there does not seem to be a way that I can update the p...
-
- This one is a bit tricky, I've looked into it before and came up empty. There doesn't seem to be a good way to do thi...
-
11:17 PM Feature #1184: Certificate Manager - Ability to add nsCertType=SERVER extension to certificates
- +1 Request for this. I will correct though, not having ns-cert-type does not allow a MitM attack except from other VP...
-
- Three places call `openssl_csr_new(...)`.
None of those have any validation.
All three are in /etc/inc/certs.inc
I... -
- The repos moved to github over the weekend.
https://github.com/organizations/bsdperimeter -
- _I know it's not really a bug, but this problem prevents me to properly follow the evolution of pfSense._
On this ... -
- Applied in changeset commit:2f6532d55221f86cbc717350eafb8e4404181cbd.
-
- This has been disabled at all for now.
Switch to 2.1 as target. -
- from what we discussed on this previously, rather than selecting a default or not, there should be 3 options in a dro...
-
- Applied in changeset commit:bb4fcffd7d89b48429bae5f8913f5c17bfee6952.
-
- Applied in changeset commit:ce107ca58c61c8f166e672a5ad93fa2daee7bec4.
-
- Committed that little patch here:
https://github.com/bsdperimeter/pfsense-tools/commit/f2b7c612a4434df1d6ac9314a2f98... -
- My c is a bit rusty so it could have gone either way :-)
If that header patch does the job that is much nicer. The... -
07:23 AM Bug #1525: OpenVPN passtos does not work
- Whatever! ;-) This is even shorter... ptos is not used anywhere else:...
-
- Are you sure? The parameter is a pointer to the address of ptos (&ls->ptos), so a cast would lead to unpredictable re...
-
- Applied in changeset commit:7171b7b65dfe9b4a93220b31d689c0fa7e1da40e.
-
-
Yes I updated to the official RC1.
So I guess it will be pushed on to the next RCx.
Mistery Solved :)
...-
- In the current code there is already a ksort there. I assume you upgraded to the official RC1 and not to a snapshot?
... -
I've just migrated, 2 days ago. So I imported it 1 day ago.
The issue seems to be with my ca_subject not matchi...-
- How long ago did you import that certificate into a 2.0 install? I checked a CA/Cert I recently had imported into a V...
-
Jim,
you are right, the CA/certificate|key and server/certificate|key are both imported.
But the server/certi...-
- If the server certificate has no caref, then the system believes it wasn't generated against any CA. If the server ce...
-
- Hi,
I'm currently running pfSense 2.0 RC1.
I've just installed OpenVpn-client-export package. Whenever
that I... -
- what version?
what you attached is an access request, no accounting packets there. -
- on which version?
05/17/2011
-
- Jim P wrote:
> Is this on i386 or amd64? I just tried i386 this morning and it installed fine, initialized all of th... -
-
- Is this on i386 or amd64? I just tried i386 this morning and it installed fine, initialized all of the KLDs, and oper...
-
-
- Can you please test with latest snapshot from tomorrow and let me know.
I have done some fixes that should prevent t... -
- Quoted from here http://forum.pfsense.org/index.php/topic,36802.0.html
> I've mentioned some rc.d problems in othe... -
- I tried on a full install and nanobsd and each time it has cleaned up after itself.
Are you on the most current ve... -
- Openvpn Client Exporter does not clean up files that are used to generate the archive but only the archive itself.
-
- Applied in changeset commit:882406aedba41f9871cde9228c79c0fba30488b8.
-
- It would be nice for the Openvpn Client Exporter to be able to export dyndns configured hostnames in the config.
-
- Can you try that with a cast instead of reassignment? You should be able to use (int) before that variable name for a...
-
- That would be great ;-) The patched file ist openvpn-2.2.0/socket.h...
-
-
-
- Well if you found a workaround, even if they don't patch it, we can. Just do a diff -u file.c.orig file.c and post th...
-
- see ticket #135:
https://community.openvpn.net/openvpn/ticket/135
I found the problem (see ticket above). Let's s... -
- A client-side issue seems more likely. I put special characters all over a PSK and I was still able to connect and pa...
-
- I've used a wide range of special characters too without any issues. Maybe a client side issue in this case? Or maybe...
-
01:20 PM Bug #1535: Special Characters in IPsec PSK can cause problems
- Note: I am currenlty using '%', '@' and '.' as non-letter/digit character on a 1.2.3 pfSense system, with a Juniper r...
-
- A customer reported that having any PSK with special characters caused problems with all mobile clients connecting an...
-
-
11:27 AM pfSense Packages Bug #1080: Snort Installation fails
- seems resolved now. Package is able to instal will no issues.
-
- My MB is Supermicro X7SPA-HF, which has 2 Intel 82574L NICs built-in. They are setup for my WAN/LAN and traffic shapi...
05/16/2011
-
- Build 313025 of Open-VM-Tools fails to install due to an error in open-vm-tools.inc - it aborts installation due to a...
-
- For anyone watching this bug report, i've created a workaround until it gets officially fixed.
create a file /root/f... -
-
10:10 AM pfSense Packages Bug #1531: ipfw broken in 2.0-RC1
- sorry for the noise.
I just came across some ipfw commands while digging for IPv6 settings and
haven't had a look ... -
- ipfw isn't loaded by default. If you have a feature enabled that needs IPFW (captive portal, limiters, etc) it will b...
-
- using:
8.1-RELEASE-p2 FreeBSD 8.1-RELEASE-p2 #0: Tue Apr 19 23:38:02 EDT 2011
sullrich@FreeBSD_8.0_pfSense_2.0-sn... -
- count my vote for it as well and one more thing i always wished the ARP table and the DHCP leases table had was the d...
-
- I have no issues either. Would it be possible to add the code from this thread for this add-on? This way you can see ...
-
- SOLVED
-
- Becuase the new test_pfSpkg() function gets added to each package's .inc file with the same name, the package system ...
-
- Thank you for taking the time to track it down, it's really appreciated.
If you hear back anything from them, be s... -
- You are right! It looks like an OpenVPN problem in the FreeBSD port. I
compiled OpenVPN 2.2.0 with FreeBSD8.1
Thi... -
04:54 AM Bug #1514: Limiters not syncing
- Ah, sorry.
What we see here are the limiter rules not replicating.
05/15/2011
-
- Applied in changeset commit:4e4de1d1af14cd8849418ca46c144966a8129a4c.
-
- i get this under dhcp leases and arp table
Warning: file(/usr/local/share/nmap/nmap-mac-prefixes): failed to open ... -
- I forgot to mention that in the post above, translated from google, the vlans from ng_vlan can be safely exchanged wi...
-
- According to this forum post http://forum.pfsense.org/index.php/topic,36722.msg189344.html#msg189344 the super-vlan c...
-
09:58 AM Feature #1431: PPPoE LQR Echo
- updated to RC2 build on 15th May .. PPPoE connection does not disconnect at all, are there any changes on the ppp mod...
05/14/2011
-
- Recently Ermal added rules for automatic outbound NAT to NAT from localhost out WAN, this works fine, but switching t...
-
- The point of policy routing is to override the system routing table, you don't want it to care at all about the routi...
-
- As it is today route-to in pf(4) does not check for any static routes before sending the packet.
In 1.2.3 there were... -
- Which part of the traffic shaper are you talking about?
Layer7, limiters or queues?
05/13/2011
-
09:27 PM Bug #1526: OpenVPN Wizard created duplicate rules
- I probably did leave it checked, and users certainly can change the rules. Still it might not hurt to do a quick scan...
-
- If you uncheck the box that tells the wizard to create the rules on the last step, it shouldn't make them. If you unc...
-
- if you tell it to add a rule, it's going to add a rule.
-
- Every time the openvpn wizard is run, it creates a new *:* rule in the OpenVPN Firewall Rules. This creates a lot of ...
-
-
- Any way to try that same test compiling it on a FreeBSD client?
It's probably a FreeBSD-specific issue, if that's ... -
- Just compiled
OpenVPN 2.2.0 x86_64-unknown-linux-gnu [SSL] [EPOLL] [eurephia] built on May 13 2011
and it work... -
- It's working with Linux OpenVPN 2.1.1 x86_64-redhat-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] built on Jan 5 2010
w... -
- The keyword is in the config, see below. I will try an openvpn linux client. I think setting the TOS field is very OS...
-
- Does the passtos keyword appear in your OpenVPN config in /var/etc/openvpn/ for the tunnel?
If the keyword appears... -
- I set up an OpenVPN tunnel, everthings works fine but if I try to use the passtos option of OpenVPN, the TOS Bits are...
-
- Applied in changeset commit:"5e80046a6b76d79356c3c24830cccd48ff144255".
-
- Hello everybody,
I found a bug : if you activate DHCP Relay and provide a DHCP server not in the network from sele... -
- Applied in changeset commit:"08212a218dff0400190dc052c5e73c9ed2fbf18b".
-
- I see in the logs "Filter Reload" when wan comes back up. I've also ran the PfSctl -c 'filter reload' manually and i...
05/12/2011
-
- The DHCP configuration checks the IP address of an interface to ensure that the range is valid. However, it only chec...
-
- When you change the IP of an interface (ex: LAN) using the Interfaces > [name] page, the old IP remains on the interf...
-
- Installed a few more times and it seems to work fine. Closing the ticket.
-
- It would be nice to have multiple gateways for a given route with metrics that get properly respected for route prefe...
-
- The method that moves the default gateway to another gateway when the preferred goes down is very convenient, but we ...
-
- Reproted here http://forum.pfsense.org/index.php/topic,36641.0.html.
There is a bug in sshlockout where the buffer u...
05/11/2011
-
- The "unrecognized route message ..." log indicates some sort of routing table change that could impact racoon. Run 'r...
-
02:43 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- I'm also experiencing the same issue and have had to disable PPTP on our 2.0-RC1 (i386). I get the same message in t...
-
- We're using the latest version of ntop from the FreeBSD ports tree.
The only other thing I can think of that might... -
- I did, no way, still stops after few time...
maybe updating ntop to the latest version could help, but anyway it's ...
05/10/2011
-
- One of the many joys of ntop... you might try to remove the package and reinstall it, to make sure it's got all of th...
-
- Hello,
on my secondary machine (CARP as backup) the service starts, but after 1 minute the service stops and I see o... -
- Should be OK now. Try to install/reinstall the package, save the settings, it should start.
-
- duplicate of #1326
-
03:38 PM Feature #1518 (Rejected): Openvpn server + bridge
- I have this interface config on FreeBSD server, and it works ok:
#ifconfig
.....
msk0: flags=8943<UP,BROADCAST,RUN... -
- Duplicate of/same issues as #585
-
- Bug still exists in 2.0-RC1 (amd64) build on Mon May 9 04:17:17 EDT 2011.
Tested:
# create vlan 66 on em0 -> ifco... -
04:30 AM Bug #1517 (Closed): Captive Portal sends RADIUS output accounting packets with zero value
- There seem to be no proper accounting for the downstream data - only upstream traffic is counted. A check with Wiresh...
Also available in: Atom