Activity

30 days up to

User

Subprojects

Activity

From 06/19/2011 to 07/18/2011

07/18/2011

10:22 PM Revision 50261132: Adding dashboard hook: Scott Ullrich
10:22 PM Revision 810a11bc: Adding dashboard hook: Scott Ullrich
10:17 PM Revision 173d8e75: Adding hook to pre_table for aliases: Scott Ullrich
10:17 PM Revision c6fa5230: Adding hook to pre_table for aliases: Scott Ullrich
10:13 PM Revision 88377362: Add alias edit hook: Scott Ullrich
10:12 PM Revision 193716d0: Add alias edit hook: Scott Ullrich
10:07 PM Revision 2a74593e: Add pre_input_errors hook to interfaces assign: Scott Ullrich
10:07 PM Revision 25746baf: Add pre_input_errors hook to interfaces assign: Scott Ullrich
07:44 PM Bug #1694: /etc/hosts gets dhcp clients entries with wrong domainnames: Chris Buechler wrote:
> Needs to be fixed at some point, but if you end up with a loop like that you have something ... Cyrus Patel
06:49 PM Bug #1694: /etc/hosts gets dhcp clients entries with wrong domainnames: Needs to be fixed at some point, but if you end up with a loop like that you have something configured in a non-optim... Chris Buechler
06:44 PM Bug #1694 (Closed): /etc/hosts gets dhcp clients entries with wrong domainnames: For 2.0-RC3 (i386) snapshot of Fri Jul 15 19:39:23 EDT 2011
The dynamic entries being written to /etc/hosts on a... Cyrus Patel
07:39 PM Revision 343d4981: Merge remote-tracking branch 'mainline/master' into inc: Vinicius Coque
07:32 PM Todo #1695 (Resolved): local services should also use the forwarder (if enabled) for DNS.: Presently, local services do not use the DNS forwarder (if enabled).
The solution (recommended by the dnsmasq manp... Cyrus Patel
07:25 PM Revision 48fc39a3: Adding pre_input_errors hook: Scott Ullrich
07:25 PM Revision f1bf74ca: Adding pre_input_errors hook: Scott Ullrich
07:23 PM Revision 355ab787: Revert "Move early call up a bit": This reverts commit 50cd07ff1190cdd25293ecdd7e08e81161de33c5. Scott Ullrich
07:23 PM Revision b4b7bda6: Revert "Move early call up a bit": This reverts commit 35843e59c81366a7d30a44a94c8a135fc6834454. Scott Ullrich
07:12 PM Revision 35843e59: Move early call up a bit: Scott Ullrich
07:11 PM Revision 50cd07ff: Move early call up a bit: Scott Ullrich
06:33 PM Revision b1e4005f: removes variables concatenation on gettext strings: Vinicius Coque
05:42 PM Revision 3f48162f: Merge remote-tracking branch 'mainline/master' into inc: Vinicius Coque
05:33 PM Revision d1d0a1ad: makes correct use of printf and gettext: removes variables names and replace it with '%s' Vinicius Coque
05:00 PM Bug #1690: PPPoE Server not passing IP from RADIUS server: Ermal Luçi wrote:
> Can you please be more clear?
> Exapnd what works and what not and possibly go first through th... Matt Crook
08:59 AM Bug #1690: PPPoE Server not passing IP from RADIUS server: Can you please be more clear?
Exapnd what works and what not and possibly go first through the forums? Ermal Luçi
04:28 PM Revision b2f54b5e: Oops fix hook name: Scott Ullrich
04:26 PM Revision a1dece5e: Adding hook for interfaces edit: Scott Ullrich
04:26 PM Revision 40b83796: Adding hook for interfaces edit: Scott Ullrich
04:26 PM Revision 920d1d01: Adding hook for interfaces edit: Scott Ullrich
01:45 PM Feature #1687: GetText code inspection: We are reviewing the gettext code, strings with incorrect use of printf are already fixed. Soon they will be merged i... Vinícius Coque
01:00 PM Bug #749: Downstream queues should not be assigned to LAN interfaces: I tried to test this out, but the description that Ermal added doesn't clearly tell me what I'm looking for. At firs... Josh Stompro
11:19 AM Bug #1629: invalid state table entries after WAN IP change: I had it reset again this weekend which took the asterisk server down again. Unfortunately I wasn't near a computer ... Eli Hunter
07:48 AM Bug #1545: Dynamic DNS updates fail on 3G connections: Ross Williamson wrote:
> So I have no idea what is going on. This is on the latest snapshot which appears to be Jul ... Jim Pingle
04:55 AM Bug #1545: Dynamic DNS updates fail on 3G connections: For whatever reason dynamic DNS has completely stopped working for me now. I can't even force an update. On first boo... Ross Williamson
06:24 AM Bug #1493: pf blocks all traffic following filter reload.: Similar problem here:
Hardware: Fujitsu Primergy; VMWare VSphere
pfSense 2.0-RC3 (amd64)
built on Mon Jul 4 ... Markus Schlager
05:19 AM Bug #1493: pf blocks all traffic following filter reload.: Hi,
I have tested with a vanilla install of pfSense.
I consistently encounter this issue. I have tried i386 pf... Aaron Roberts
05:42 AM Bug #1692 (Rejected): OpenVPN Clients can't route to IPSEC peer: that's a configuration issue, the PPTP clients are likely on the LAN subnet which means they fall into the P2, your O... Chris Buechler
03:31 AM Bug #1692 (Rejected): OpenVPN Clients can't route to IPSEC peer: Client PC connects using OpenVPN to a central pfsense firewall (2.0-RC3). Central firewall has IPSEC tunnel to remote... Nei Ka

07/17/2011

11:55 PM Revision a41e80f9: Redirect errors to file: Scott Ullrich
11:55 PM Revision aa840cf9: Redirect errors to file: Scott Ullrich
08:33 PM Revision 10995178: Make name similar: Scott Ullrich
08:33 PM Revision eeee6c24: Make name similar: Scott Ullrich
08:29 PM Revision 5c08b73f: Adding hooks: Scott Ullrich
08:29 PM Revision 1db196b2: Adding hooks: Scott Ullrich
06:21 AM Bug #1691 (Closed): Virtio driver not working: In commit:2ac109889ae1afeeea6cdd8dbcc339023a3f32a0 the virtio driver was added from upstream freebsd.
However, when ... Marcus Beyer
03:33 AM Bug #1690 (Resolved): PPPoE Server not passing IP from RADIUS server: I have tried both with windows RADIUS and the packaged offered as an add-on for pfSense (freeradius) and both with th... Matt Crook
02:15 AM Revision cb2518bf: Merge branch 'master' of git@github.com:bsdperimeter/pfsense: Chris Buechler
12:55 AM Revision 0040bcfa: Adding hook for interfaces allowing pfCenter and friends to add interfaces to the dropdown: Scott Ullrich
12:55 AM Revision 29af4f6f: Adding hook for interfaces allowing pfCenter and friends to add interfaces to the dropdown: Scott Ullrich

07/16/2011

08:53 PM Bug #1629: invalid state table entries after WAN IP change: No, no, Im not talking about IPv6 in pfSense, Im talking about IPv6 NAT passthrough in the "System: Advanced: Network... Matt Corallo
05:33 PM Bug #1629: invalid state table entries after WAN IP change: IPv6 is a completely different version, that's 2.1 not 2.0, post info to the IPv6 board on the forum. Chris Buechler
04:57 PM Bug #1629: invalid state table entries after WAN IP change: I have the same problem (after the fixes) with IPv6 tunneling, so this is not resolved. Matt Corallo
02:14 AM pfSense Packages Bug #1689 (Resolved): Home URL broken from package paths: The pfsense image in the top left corner which takes the user back to the index.php page has it's url dynamically cre... reg ister

07/15/2011

11:02 PM Bug #1688 (Resolved): DHCP server subnet input validation needs to check config.xml, not ifconfig: The DHCP server subnet input validation in 2.0 checks what IP is configured on the interface, so it's impossible to c... Chris Buechler
08:12 PM Revision d470bf70: Ticket #1552. Do not allow route-to to be set on block/reject rules for now. The issue is in the kernel but for 2.0 this protection is enough.: Ermal LUÇI
08:12 PM Revision e5df770b: Ticket #1552. Do not allow route-to to be set on block/reject rules for now. The issue is in the kernel but for 2.0 this protection is enough.: Ermal LUÇI
08:04 PM Revision 0b664809: Ticket #1193. Do not show default queue checkbox when another queue has it selected.: Ermal LUÇI
08:02 PM Revision acebc1ec: Ticket #1193. Do not show default queue checkbox when another queue has it selected.: Ermal LUÇI
07:25 PM Revision 5f8f263a: Actually increase the default queue length for the new default queue: Ermal LUÇI
07:25 PM Revision 4a60bca6: Respect the p2p catchall setting.: Ermal LUÇI
07:24 PM Revision 2a9eb326: Add checks to prevent php warnings.: Ermal LUÇI
07:24 PM Revision f06efc95: Re-enable downstream queues but with the difference that the default queue now tries to use all the link when possible and the bandwidth limit is specified on a subqueue instead of the interface.: Ermal LUÇI
07:24 PM Revision caac28a5: Re-enable downstream queues but with the difference that the default queue now tries to use all the link when possible and the bandwidth limit is specified on a subqueue instead of the interface.: Ermal LUÇI
07:23 PM Revision 91942bd3: Revert "Ticket #749. Do not create the queues at LAN side for traffic_shaper_wizard_dedicated. Since we cannot control bandwidth its useless to try to handle it(ALTQ was built with this concept in mind).": This reverts commit cd3346e205ad0f818977b7ccd0bd7259ed2f2e4e. Ermal LUÇI
07:23 PM Revision e1439000: Re-enable downstream queues but with the difference that the default queue now tries to use all the link when possible and the bandwidth limit is specified on a subqueue instead of the interface.: Ermal LUÇI
07:23 PM Revision 9039e3dd: Revert "Ticket #749. Do not create the queues at LAN side for traffic_shaper_wizard and traffic_shaper_wizard_multi_all. Since we cannot control bandwidth its useless to try to handle it(ALTQ was built with this concept in mind.": This reverts commit 4447358371f80814ea1c5e0f00c1a7301a2396f6. Ermal LUÇI
07:22 PM Revision f1715738: Actually increase the default queue length for the new default queue: Ermal LUÇI
07:17 PM Revision 058a4f1c: Respect the p2p catchall setting.: Ermal LUÇI
07:11 PM Revision 8f864d33: Add checks to prevent php warnings.: Ermal LUÇI
07:08 PM Revision ed7c364d: Re-enable downstream queues but with the difference that the default queue now tries to use all the link when possible and the bandwidth limit is specified on a subqueue instead of the interface.: Ermal LUÇI
07:02 PM Revision b2608f72: Re-enable downstream queues but with the difference that the default queue now tries to use all the link when possible and the bandwidth limit is specified on a subqueue instead of the interface.: Ermal LUÇI
06:27 PM Revision 189b043d: fix correct name: Luiz Gustavo S. Costa
06:20 PM Revision 6fd23d7a: Revert "Ticket #749. Do not create the queues at LAN side for traffic_shaper_wizard_dedicated. Since we cannot control bandwidth its useless to try to handle it(ALTQ was built with this concept in mind).": This reverts commit cd3346e205ad0f818977b7ccd0bd7259ed2f2e4e. Ermal LUÇI
06:19 PM Revision 1750ed78: Re-enable downstream queues but with the difference that the default queue now tries to use all the link when possible and the bandwidth limit is specified on a subqueue instead of the interface.: Ermal LUÇI
05:36 PM Revision 746fc9ec: Revert "Ticket #749. Do not create the queues at LAN side for traffic_shaper_wizard and traffic_shaper_wizard_multi_all. Since we cannot control bandwidth its useless to try to handle it(ALTQ was built with this concept in mind.": This reverts commit 4447358371f80814ea1c5e0f00c1a7301a2396f6. Ermal LUÇI
05:13 PM Feature #1687: GetText code inspection: <td colspan="2" class="listtopic">< ? php printf (gettext("Last $nentries PPP log entries"),$nentries); ? ></td>
Serg Dvoriancev
05:12 PM Feature #1687: GetText code inspection: ver 2.0
Quickly i able to find it here
/diag_logs_ppp.php [91]
<td colspan="2" class="listtopic"><?php printf ... Serg Dvoriancev
04:58 PM Feature #1687: GetText code inspection: Can you please point to such locations? Ermal Luçi
04:56 PM Feature #1687 (Resolved): GetText code inspection: In some cases, you can find such code:
$myname = 'NameName';
$myvar = 'abcd123';
$mytext = gettext("This is {$m... Serg Dvoriancev
04:46 PM Revision b473da5f: Ticket #1052. Enforce certificates if they are present for authenticating to ldap. Allow to select a CA under ldap type authentication backend to be used for this.: Ermal LUÇI
04:40 PM Bug #1686 (Closed): guiconfig.inc GetText logical bug: guiconfig.inc
function print_info_box_np($msg, $name="apply",$value="Apply changes")
This function is called with... Serg Dvoriancev
04:11 PM Bug #1552: DNS Reject Rule Crashes Router: This has been fixed for now by nullifying the gateway selection silently. Ermal Luçi
04:10 PM Bug #1552 (Feedback): DNS Reject Rule Crashes Router: Ermal Luçi
04:00 PM Bug #1193 (Feedback): Traffic Shaper default queue Problem: Plese test latest snapshots. Ermal Luçi
03:50 PM Bug #1685: Web configurator silently fails when "Private key does not match the certificate public key": In the meantime you can get back in by resetting the LAN IP from the console, entering the same information again. Du... Jim Pingle
03:48 PM Bug #1685: Web configurator silently fails when "Private key does not match the certificate public key": This is for version 2.0 RC3 x86. Jeff Shaw
03:48 PM Bug #1685 (Resolved): Web configurator silently fails when "Private key does not match the certificate public key": After choosing a particular certificate for the web administrator under System -> Advanced, the web server fails to r... Jeff Shaw
03:39 PM Revision 1852870c: fix correct name: Luiz Gustavo S. Costa
03:17 PM Bug #749 (Feedback): Downstream queues should not be assigned to LAN interfaces: This has been worked around by creating a queue that can go full interface speed. Ermal Luçi
02:57 PM Revision d792cf48: Correct ts filename: Scott Ullrich
02:56 PM Revision 8164e340: Correct ts filename: Scott Ullrich
02:24 PM Bug #1684 (Rejected): Clearing the IPsec log causes webadmin to become unresponsive.: Can't reproduce this on current snapshots, full or nanobsd. Clearing logs returns fast and works as expected. Please ... Jim Pingle
02:19 PM Bug #1684 (Rejected): Clearing the IPsec log causes webadmin to become unresponsive.: So far the only way I've found to fix this is reboot. Restarting the web administrator from the console just printed ... Jeff Shaw
02:17 PM Bug #76: Changes needed to traffic shaper since its rewrite: Sorry, I don't understand. Can't do what?
Isn't the error I am experiencing exactly same as #2 in the description o... torontob toronbot
01:25 AM Bug #76: Changes needed to traffic shaper since its rewrite: yes but that's no longer a bug, in this ticket that wasn't checked correctly, it is now. you can't do that. Chris Buechler
01:23 AM Bug #76: Changes needed to traffic shaper since its rewrite: I am trying RC3 today and I still see the error with Single-WAN-Multi-LAN:
*"You cannot set the VoIP upload bandwi... torontob toronbot
01:10 PM Revision fe2031ab: Ticket #1052. Enforce certificates if they are present for authenticating to ldap. Allow to select a CA under ldap type authentication backend to be used for this.: Ermal LUÇI
09:09 AM Bug #1052 (Feedback): Certificate validation of the LDAPS servers is not enforced: Just committed a fix for this.
You have to select the CA where you configure LDAP settings for it to be used.
This ... Ermal Luçi
08:03 AM Revision e6bd2312: Fixes #1618. Always convert the NAS_PORT value to int in php and pass the attribute type during encoding to guarantee that it is encoded as an integer.: Ermal LUÇI
08:02 AM Revision b451691f: Fixes #1618. Always convert the NAS_PORT value to int in php and pass the attribute type during encoding to guarantee that it is encoded as an integer.: Ermal LUÇI
07:56 AM Feature #1683 (New): PF scrub min-ttl option: Idea from this forum post http://forum.pfsense.org/index.php/topic,27206.0.html
It would be nice if pfsense have thi... Nikolay Stoyanov
07:35 AM Feature #1682 (Closed): second MAC address for one IP address: Idea from this forum post http://forum.pfsense.org/index.php/topic,36066.0.html
It would be nice if pfsense have thi... Nikolay Stoyanov
07:24 AM Bug #1545: Dynamic DNS updates fail on 3G connections: i have the same issue, pfSense RC3 with two WAN.
Primary with lan connection to a router with fixed ip
Secondary PP... Emanuel Milani
05:57 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: i have to restart racoon service in order it works properly after pptp client disconnect.But i'm not sure this shutdo... Hafiz Rafiyev
04:47 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: I think that restart is user-triggered, people restart racoon to fix it. The log that looks interesting to me is:
... Chris Buechler
03:36 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: Well i need the system logs since seems something is resetting ipsec daemon.... Ermal Luçi
05:10 AM Bug #1681 (Resolved): OpenVPN tun IPs fail HTTP REFERER checks: tun IPs on OpenVPN connections fail the local IP check used for the HTTP_REFERER web interface protection, so the def... Chris Buechler
04:31 AM Bug #1565 (Resolved): Pull kern/134878 into pfsense 2.0: You would have to load puc manually as a module from loader.conf but the patch is imported now. Ermal Luçi
04:05 AM Bug #1618: Captive portal: Invalid AVP value in Radius accounting packet: Applied in changeset commit:b451691f08e5615158b04c767bc6c7cb876bc913. Ermal Luçi
04:05 AM Bug #1618: Captive portal: Invalid AVP value in Radius accounting packet: Applied in changeset commit:e6bd231242cb43ad7e8fca8635d6adcb17f38186. Ermal Luçi
04:01 AM Bug #1618 (Feedback): Captive portal: Invalid AVP value in Radius accounting packet: This should be fixed in latest snapshots. Ermal Luçi
03:48 AM Bug #1407: GUI is sluggish without working DNS: resolv.conf was populated in this case.
This instance was exacerbated by AutoConfigBackup so it was even worse th... Chris Buechler
03:33 AM Bug #1407: GUI is sluggish without working DNS: Can you check if /etc/resolv.conf has any entry during this time? Ermal Luçi
01:16 AM Bug #1407: GUI is sluggish without working DNS: still hit this and it creates major issues with trying to operate or troubleshoot the system when there's no Internet. Chris Buechler
03:43 AM Bug #1425: pfSense stops receiving traffic on 'bge' driven interface: Can you please try by disabling msix and tso on bge interfaces? Ermal Luçi
03:34 AM Bug #1679: Login redirect issue: There was a reason of removing automatic redirection.
Mostly was because of automatic posting that could break thing... Ermal Luçi

07/14/2011

07:18 PM Revision 84bc8eb7: Fix missing " in gettext line: Jim Pingle
03:00 PM Bug #1610: v6 IPsec tunnels can trap 12 the kernel: The one shot patch is not needed at all now.
You can just increase the sysctl sockmaxbuf to give the same results. Ermal Luçi
01:13 PM Revision 87f0f42c: Already doing this no need to duplicate: Ermal LUÇI
12:30 PM Bug #1680 (Rejected): Automatic Nat inter IpAlias: Please open a forum thread to discuss this and eliminate any possible configuration errors. IF a bug has been confirm... Jim Pingle
12:23 PM Bug #1680 (Rejected): Automatic Nat inter IpAlias: I believe this is a bug
PfSense doing this automatically Nat inter all IpAlias of a interface
In my setup I have
... Joaquim Soares Soares
03:39 AM Bug #1679: Login redirect issue: Note:
This fix keeps the redirect for non privileged users active.
Andreas Böhm
03:35 AM Bug #1679 (Rejected): Login redirect issue: 1. Login and go to the captive portal status page (URL: http://your-pfsense-box.org/status_captiveportal.php)
2. Wai... Andreas Böhm

07/13/2011

10:42 PM Revision fc23b860: Revert "Only load modules once": This reverts commit 00b9730d6fe20272a40e707b709e677a847b7863. Scott Ullrich
10:42 PM Revision 59d15836: Revert "Only load modules once": This reverts commit e4f3307c8bd1673bb6fbf74eed6aababb88c83e2. Scott Ullrich
10:37 PM Revision 00b9730d: Only load modules once: Scott Ullrich
10:36 PM Revision e4f3307c: Only load modules once: Scott Ullrich
10:12 PM Revision 427fa49c: Allow a ZMQ syslog address: Andrew Thompson
09:17 PM Revision 2ce206b0: CRL fixes for empty CRLs (so they don't kill OpenVPN): Jim Pingle
09:16 PM Revision cfcc6994: CRL fixes for empty CRLs (so they don't kill OpenVPN): Jim Pingle
08:43 PM Revision 0a81ee27: Adding ioncube_loader: Scott Ullrich
08:43 PM Revision 4a79ec20: Adding ioncube_loader: Scott Ullrich
03:15 PM Bug #1675: Captive portal logout problems with pop-up blockers.: The problem here is that a generic way of implementing this is needed.
Some javascript tricks are needed which with ... Ermal Luçi
01:45 PM Revision 17ad7de4: Correct version in /etc/version to say what it is rather than the wrong thing from the merge.: Ermal LUÇI
01:39 PM Revision b2484fd2: Remove extra "/": Warren Baker
12:31 PM Revision cdfdb1a7: Fix merge conflict: Jim Pingle
12:26 PM Revision d685dad4: Merge pull request #5 from smos/master: Welcome IPv6! Jim Pingle
11:32 AM Bug #1676 (Resolved): dead IPv6 gateway causes kernel panics: It appears just having an IPv6 gateway configured that's unreachable will result in panics several times a day, even ... Chris Buechler
11:26 AM Revision 0b07c763: fix missing ": Chris Buechler
11:09 AM Bug #1627 (Resolved): VPN VOIP Traffic Ignoring Traffic Shaper Queues: Ermal Luçi
10:58 AM Bug #1627: VPN VOIP Traffic Ignoring Traffic Shaper Queues: Ermal great thanks for your fix,i had same problem(voip queue in ipsec vpn).After your last fix it's working just fin... Hafiz Rafiyev
10:12 AM Bug #1344: Replace prototype javascript code with jQuery: jQuery UI Core has a progress bar builtin:
http://jqueryui.com/demos/progressbar/
It is easy to control, is built... G D
07:17 AM Bug #1344: Replace prototype javascript code with jQuery: Progress bar replacement?
http://t.wits.sg/misc/jQueryProgressBar/demo.php for the demo
http://t.wits.sg/jquery... Warren Baker
09:43 AM Bug #1501 (Closed): Captive Portal Logout popup does not work: it does work Chris Buechler
07:30 AM Bug #1664: DHCP Server no longer allows empty gateway: I have tested and can confirm the fix.
It's working as expected now.
// rancor rancor rancor
04:20 AM Revision a213ad18: Allow a ZMQ syslog address: Andrew Thompson

07/12/2011

11:57 PM Revision 8b6313a4: Merge remote-tracking branch 'upstream/master': Conflicts:
etc/inc/easyrule.inc
etc/inc/filter.inc
etc/inc/interfaces.inc
etc/inc/ser... Jim Pingle
10:22 PM Revision 0a213420: Fix botched patch, add closing bracket: Andrew Thompson
10:22 PM Revision f7c7eecb: Allow DHCP mappings to be resolved first for reverse lookups.: This was affecting a kerberos installation where the first DNS alias was
given for the PTR instead of the static DHCP... Andrew Thompson
07:41 PM Revision c317af99: Create dynamodules in the order they where touche: Scott Ullrich
07:39 PM Revision fd3e19f3: Create dynamodules in the order they where touched: Scott Ullrich
05:13 PM Bug #1675 (New): Captive portal logout problems with pop-up blockers.: Need to change the Captive portal pop-up page to use techniques to bypass pop-up blockers. Ermal Luçi
04:59 PM Revision 3994cc70: Do a more strict check on this to avoid warnings: Ermal LUÇI
04:59 PM Revision d916bfab: Do a more strict check on this to avoid warnings: Ermal LUÇI
04:17 PM Bug #1666: OpenVPN interface doesn't get added to bridge after reboot: Tried the latest snapshot which contains this patch, but still doesn't get the OVPN interface added to the bridge aft... Joost van den Broek
12:52 PM Feature #1673 (Rejected): PPTP VPN Server Address by Interface Name: That is not the IP to listen for connections on, it is the IP to be used by connecting clients as their gateway on th... Jim Pingle
12:43 PM Feature #1673 (Rejected): PPTP VPN Server Address by Interface Name: Could the ability to type the interface name (eg WAN) in the server address instead of just the IP address be added. ... Com DAC
10:20 AM Bug #1598: IP Alias VIP configured on a CARP VIP, resets CARP VIP on sync: Andreas Bochem wrote:
> Same issue persisting on latest _2.0-RC3 (amd64) built on Mon Jul 4 16:49:48 EDT 2011_.
T... Jim Pingle
07:10 AM Bug #1598: IP Alias VIP configured on a CARP VIP, resets CARP VIP on sync: Same issue persisting on latest _2.0-RC3 (amd64) built on Mon Jul 4 16:49:48 EDT 2011_. Andreas Bochem
04:08 AM Revision 649ea752: Fix botched patch, add closing bracket: Andrew Thompson
03:35 AM Revision aa994814: Allow DHCP mappings to be resolved first for reverse lookups.: This was affecting a kerberos installation where the first DNS alias was
given for the PTR instead of the static DHCP... Andrew Thompson
03:13 AM Bug #1627: VPN VOIP Traffic Ignoring Traffic Shaper Queues: What snapshot are you on?
There have been made some fixes lately to fix this can you please test?
By looking at the ... Ermal Luçi

07/11/2011

09:32 PM Revision 1ee701fb: Enable the pfsync checking unconditionally: Ermal LUÇI
09:32 PM Revision 156ecb64: Enable the pfsync checking unconditionally: Ermal LUÇI
09:23 PM Bug #1627: VPN VOIP Traffic Ignoring Traffic Shaper Queues: 2.0-RC2 (i386)
built on Fri Jun 10 21:40:17 EDT 2011
I added our config with ip's and keys changed, and a screen... Abdiel Marin
09:05 PM Revision 514f63d1: Put a netmask of /32 to all parameters of -k/-K/-b of pfctl to avoid any issues.: Ermal LUÇI
09:05 PM Revision 639223f3: Put a netmask of /32 to all parameters of -k/-K/-b of pfctl to avoid any issues.: Ermal LUÇI
08:37 PM Revision 70013f06: Actually give pfsync time to catch up.: Ermal LUÇI
08:37 PM Revision 2eb9c02f: Actually give pfsync time to catch up.: Ermal LUÇI
08:33 PM Revision 6d8097b2: If the sync has not finished do not start carp yet: Ermal LUÇI
08:27 PM Revision 6930e805: If the sync has not finished do not start carp yet: Ermal LUÇI
06:26 PM Bug #1629: invalid state table entries after WAN IP change: I got the update installed last week but haven't had the IP change on me yet (surprisingly). I'll update this once t... Eli Hunter
05:04 PM Bug #1629: invalid state table entries after WAN IP change: Have you tested this on 2.0? Ermal Luçi
02:17 PM Bug #1634: Limiter and bridge needs special handling: There may also be some routing concerns when used on a bridge. See QYX-233317. Jim Pingle
01:50 PM Feature #1668: OpenVPN Client Export support Tunnelblick: Ok good to know. I don't have a Mac to try it out on but I know some of my users have Macs at home so the support qu... David Miller
01:46 PM Feature #1668: OpenVPN Client Export support Tunnelblick: The config archive works fine for Tunnelblick. Chris Buechler
01:41 PM Feature #1668: OpenVPN Client Export support Tunnelblick: I typo'ed the name of the client in the subject and don't have permissions to correct it. Could someone please corre... David Miller
01:33 PM Feature #1668 (Closed): OpenVPN Client Export support Tunnelblick: TunnelBrick is an opensource MacOSX OpenVPN client that seems to be pretty active. https://code.google.com/p/tunnelb... David Miller
12:58 PM Revision 3cfc695c: Fix gettext: Vinicius Coque
12:55 PM Revision 5237d356: Fixes #1666. For OpenVPN interfaces always check if part of bridge or not.: Ermal LUÇI
12:52 PM Revision 0b932972: Merge remote-tracking branch 'mainline/master' into inc: Vinicius Coque
12:41 PM Revision bf17eb72: Fixes #1666. For OpenVPN interfaces always check if part of bridge or not.: Ermal LUÇI
12:02 PM Revision fdbce60c: Merge remote-tracking branch 'mainline/master' into inc: Vinicius Coque
09:37 AM Bug #1667 (New): L2TP server does not respond properly from a CARP VIP: If you setup an L2TP server and try to connect to a CARP VIP on the same interface, it does not work. The server resp... Jim Pingle
08:55 AM Bug #1666: OpenVPN interface doesn't get added to bridge after reboot: Applied in changeset commit:5237d356f41b6ac44cabaaa17208795b8471abcd. Ermal Luçi
08:40 AM Bug #1666 (Feedback): OpenVPN interface doesn't get added to bridge after reboot: Applied in changeset commit:bf17eb72c18ee9b751f9e3eb22a082fd9c273ac9. Ermal Luçi
07:51 AM Bug #1666 (Resolved): OpenVPN interface doesn't get added to bridge after reboot: When using an interface assigned to an OpenVPN tap interface in a bridge, it won't be added correctly after rebooting... Joost van den Broek
05:07 AM pfSense Packages Bug #1631 (Resolved): incorrect syntax of /boot/loader.conf after open-vm-tools package installed: thanks Chris Buechler
04:55 AM pfSense Packages Bug #1631: incorrect syntax of /boot/loader.conf after open-vm-tools package installed: The same installation sequence now works fine. All OK. Ivars Strazdins

07/10/2011

08:11 PM Bug #1664 (Resolved): DHCP Server no longer allows empty gateway: Chris Buechler
12:05 PM Bug #1664: DHCP Server no longer allows empty gateway: Applied in changeset commit:7988ce7581efee9aef0184edfb2eeb2f352477a8. Anonymous
12:05 PM Bug #1664 (Feedback): DHCP Server no longer allows empty gateway: Applied in changeset commit:45d1024db3d3d32fb26f2b6c42460cbe98e24096. Anonymous
08:33 AM Bug #1664 (Resolved): DHCP Server no longer allows empty gateway: The default is to use the IP on this interface of the firewall as the gateway but if I leave this empty (default) it'... rancor rancor
04:11 PM Revision 24e5d98b: MFC: Do not check to see if gateway alls within a null value.: Scott Ullrich
04:04 PM Revision 45d1024d: Do not check to see if gateay falls within a null value. Resolves #1664: Scott Ullrich
04:03 PM Revision 7988ce75: Do not check to see if gateay falls within a null value. Resolves #1664: Scott Ullrich
05:08 AM Revision a5334f5c: fix text: Chris Buechler
05:07 AM Revision f745b8ef: fix text: Chris Buechler
03:54 AM Bug #1608 (Resolved): manual update on nanobsd and alix fails always: Chris Buechler
02:52 AM Bug #1608: manual update on nanobsd and alix fails always: this is fixed now Bipin Chandra
02:53 AM Bug #1053: CBQ per se, in kernel: will this be fixed in 2.0? Bipin Chandra
02:51 AM Bug #1582: traffic shaper queues bug: this is fixed now Bipin Chandra
01:09 AM Feature #1663 (Resolved): DHCPv6 relay: Need to add support for DHCPv6 relay. Can just copy DHCP Relay as DHCPv6 Relay, the existing dhcrelay supports IPv6 r... Chris Buechler
12:59 AM Bug #1662 (Resolved): DNS server gateway selection missing input validation: If a gateway is chosen for a DNS server on system.php, the gateway must be the same protocol as that of the DNS serve... Chris Buechler
12:57 AM Bug #1661 (Resolved): Missing input validation in system_routes_edit.php: system_routes_edit.php doesn't validate that the gateway selected is the same protocol as the entered "Destination ne... Chris Buechler
12:54 AM Bug #1660 (Resolved): Missing input validation in system_gateway_groups_edit.php: Members of a gateway group must all be of the same protocol, IPv4 or IPv6 only, not both. Currently you can create a ... Chris Buechler
12:53 AM Bug #1659 (Resolved): Missing input validation in rules gateway selection: Currently you can pick an IPv4 gateway for an IPv6 firewall rule, and an IPv6 gateway for an IPv4 firewall rule. Need... Chris Buechler

07/09/2011

03:36 PM Bug #1344: Replace prototype javascript code with jQuery: Neat tool for generating network maps!?
http://jsplumb.org/jquery/anchorDemo.html
Scott Ullrich
07:24 AM Revision 47b5ce1f: fix text: Chris Buechler
07:23 AM Revision 5eeb1d9d: fix text: Chris Buechler
02:21 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: Ermal Luçi wrote:
> Can you please post the system logs more complete not the ipsec related part?
Ermal,I special... Hafiz Rafiyev

07/08/2011

09:29 PM Revision 2612ebc6: Ticket #1564. Give +x to the script so it can be executed. Simple hah :): Ermal LUÇI
09:16 PM Revision 89bb7dcc: Ticket #1564. Give +x to the script so it can be executed. Simple hah :): Ermal LUÇI
08:53 PM Bug #1658: Adding new Gateway in interface page needs input validation: it has no input validation currently (partially because it can't check the subnet before the interface is configured) Chris Buechler
08:50 PM Bug #1658 (Resolved): Adding new Gateway in interface page needs input validation: When adding a new gateway in the interface page, it asks you to specify a "Gateway Name" for the interface; when subm... Jeff Reid
05:42 PM Bug #1641 (Resolved): DHCP server default gateway needs input validation: Chris Buechler
12:54 PM Bug #1641: DHCP server default gateway needs input validation: Running 2.0-RC3 (i386) Fri Jul 8 06:31:45 EDT 2001
I just tried adding a gateway that was outside the subnet I'm u... Josh Stompro
05:24 PM Bug #1657: Timezone should be synchronized on all utilities: this only applies when the tz is changed while the system is running, and has always been the case. I've always just ... Chris Buechler
04:43 PM Bug #1657 (Closed): Timezone should be synchronized on all utilities: During setup the timzeone is set correctly but some utilities in base do not honor it which creates some problems to ... Ermal Luçi
05:20 PM Bug #1598: IP Alias VIP configured on a CARP VIP, resets CARP VIP on sync: For what it's worth, I have a pair of devices running 2.0-BETA5 (8.1-RELEASE-p2 #0: Tue Jan 25 20:12:38 EST 2011 ... Steve Polyack
03:23 PM Bug #1279 (New): Filesystem on NanoBSD is left read/write at first bootup after package reinstallation: The filesystem is mounted noatime, so even if it's left rw, it still isn't touched except when the system wants to wr... Jim Pingle
03:19 PM Bug #1279: Filesystem on NanoBSD is left read/write at first bootup after package reinstallation: Using nanobsd i386 8.1-release-p4 Jul 8 06:31:18 EDT 2011, after resetting to system default and rebooting, the / mou... Josh Stompro
02:41 PM Bug #673: SSHD keys not created on restore: I now see bug #1279, which discusses the rw nanobsd mount issue.
Josh
Josh Stompro
02:25 PM Bug #673: SSHD keys not created on restore: I'm not sure how to test this since in the latest snapshot the / mount is still set to rw by default. Erik, you ment... Josh Stompro
11:16 AM Bug #1501: Captive Portal Logout popup does not work: Running 2.0-RC3 (i386) Tur Jul 7 01:04:41 EDT 2011
The logout popup does work for me. I'm not using Radius or acc... Josh Stompro
10:30 AM Feature #1656 (New): Teach pfctl to kill states by port number: It would be useful in the future if Diag > States could kill states more selectively by port number instead of only b... Jim Pingle
10:19 AM Bug #1653 (Resolved): CP timeout bug: get_last_activity: Ermal Luçi
10:07 AM Revision 650969bf: Merge branch 'master' of git@github.com:bsdperimeter/pfsense: Chris Buechler
09:21 AM Bug #1639: Port alias missing input validation in firewall_rules_edit.php: Basically it checks for invalid combinations. I did not feel safe to call is_alias(something) without making sure 'so... Evgeny Yurchenko
08:14 AM Bug #1639: Port alias missing input validation in firewall_rules_edit.php: Isnt this commit a bit drastic?
Possibly just check impossible combination should be enough? Ermal Luçi
08:12 AM Bug #1639 (Feedback): Port alias missing input validation in firewall_rules_edit.php: Ermal Luçi
05:10 AM Bug #1655 (Rejected): Change WAN address and their gateway: changing the WAN IP and gateway works fine, whether in re-running the setup wizard or interfaces.php. Post to the lis... Chris Buechler
04:27 AM Bug #1655 (Rejected): Change WAN address and their gateway: When change the IP of the WAN and its gateway (the wizard proposes WANGW).
The gateway is not working properly, prob... Oscar Francia
03:28 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: Can you please post the system logs more complete not the ipsec related part? Ermal Luçi
12:49 AM Revision cfceda6d: Bug #1639. Port alias missing input validation in firewall_rules_edit.php.: Evgeny Yurchenko
12:46 AM Revision 5909b520: Bug #1639. Port alias missing input validation in firewall_rules_edit.php.: Evgeny Yurchenko

07/07/2011

11:32 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: Ermal Luçi wrote:
> Can you please test latest snapshots and see if this happends again.
Ermal any changes with l... Hafiz Rafiyev
11:31 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: Just tested the latest snapshot 2.0-RC3 (amd64) built on Thu Jul 7 16:01:09 EDT 2011 - no change. All VPNs still dro... David Rees
08:56 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: They're up now, the branch changed on the snapshots so the links were not pointing to the right place. Also, auto upd... Jim Pingle
07:23 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: Jim P wrote:
> That snapshot was not created after Ermal's note. Please wait for the next new snapshot. It should be... Hafiz Rafiyev
10:48 PM Bug #1639: Port alias missing input validation in firewall_rules_edit.php: Commit https://github.com/bsdperimeter/pfsense/commit/cfceda6d3528d4cdb87fccdb00f28ce194bf393f Evgeny Yurchenko
10:01 PM Bug #1639: Port alias missing input validation in firewall_rules_edit.php: > A port alias can be assigned only as the "to" or "from" port, which is invalid and results in a pf syntax error.
... Evgeny Yurchenko
10:21 PM Revision eaa549ea: Bug #1641 fix. DHCP server default gateway needs input validation.: Evgeny Yurchenko
10:10 PM Revision 9bc59815: Bug #1641 fix. DHCP server default gateway needs input validation.: Evgeny Yurchenko
08:26 PM Bug #1629: invalid state table entries after WAN IP change: That's expected to happen in 1.2.3 (it has no provisions for dealing with that scenario, only 2.0 does). Chris Buechler
08:12 PM Bug #1641: DHCP server default gateway needs input validation: Commit https://github.com/bsdperimeter/pfsense/commit/9bc59815c6eba7051a401404d4d0b0c7842a9d2f Evgeny Yurchenko
08:03 PM Revision 13b9dba9: Merge remote branch 'upstream/master': Jim Pingle
07:59 PM Revision d8532e5d: $g needs to be a global. Resolves #1654: Scott Ullrich
07:58 PM Revision 44a4d54d: Reconfigure wan/lan when finishing wizard, or the new IPs will not be applied.: Jim Pingle
07:57 PM Revision 10f5d53c: Reconfigure wan/lan when finishing wizard, or the new IPs will not be applied.: Jim Pingle
07:16 PM Revision aa6798c0: $g needs to be a global. Resolves #1654: Scott Ullrich
05:01 PM Bug #1654: miniupnpd.pid located in wrong folder: gitsync my pfsense and noticed miniupnpd.pid is now located in /var/run after reboot
thanks again guys! Cino .
04:49 PM Bug #1654: miniupnpd.pid located in wrong folder: thanks for the quick fix... I'll test once a new snapshot comes out Cino .
04:00 PM Bug #1654: miniupnpd.pid located in wrong folder: Applied in changeset commit:d8532e5db1abd2e4f6fd07998629936967fc9e67. Anonymous
03:15 PM Bug #1654 (Feedback): miniupnpd.pid located in wrong folder: Applied in changeset commit:aa6798c07088b4a45f85e2626576e33876d04263. Anonymous
03:03 PM Bug #1654 (Resolved): miniupnpd.pid located in wrong folder: Running snapshot Thu Jun 30 17:12:48 EDT 2011 currently and also noticed it on Jul 4th snapshot.
miniupnpd.pid is ... Cino .
04:55 PM Revision fab60c5e: Merge remote-tracking branch 'mainline/master' into inc: Vinicius Coque
02:37 PM Revision 2108ada4: Use RELENG_2_0 for updates and gitsync default.: Jim Pingle
10:04 AM Feature #1652: Improvements in captive portal page: Lo Zio,
I like your suggestions, so I'm going to add my own wish list items for the CP here.
- Hide certain po... Josh Stompro
09:38 AM Bug #1653: CP timeout bug: get_last_activity: I can confirm that this is fixed with the Jul 7 01:04:41 snapshot.
"ipfw table 1 entrystats 192.168.1.130" Now ret... Josh Stompro
08:48 AM Bug #1653: CP timeout bug: get_last_activity: Also "Last activity" info from Captive portal status (/status_captiveportal.php?order=&showact=1) is wrong.
It shows... Lo Zio
04:18 AM Bug #1653: CP timeout bug: get_last_activity: I confirm this is the behaviour of my previus bug report (1647).
As per previous request, here is the log:
Jul 6 13... Lo Zio
08:49 AM Bug #1607 (Resolved): MBUF usage grows geometrically: Ermal Luçi
01:02 AM Bug #1607: MBUF usage grows geometrically: After 10 days uptime my MBUF Usage has almost completely levelled off at 6062 /9856. The second number was at 9730 fo... David Burgess

07/02/2011

10:00 PM Bug #1629: invalid state table entries after WAN IP change: Please provide state-table dump before IP change and after. Evgeny Yurchenko
09:56 PM Bug #1621: Switching WAN from type PPP to other leaves former port assigned: Then create separate Bug report describing the problem. Evgeny Yurchenko
07:21 PM Bug #1625 (Feedback): installer shouldn't offer to install over boot drive/partition or install bootblocks on boot drive: I have checked in a fix for this.
Scott Ullrich
06:34 PM Bug #1624 (Resolved): installer needs to zero first and last block of disk: Scott Ullrich
06:15 PM Bug #1611 (Closed): DHCP leases show as expired when they shouldn't be: it is that package, uninstall it. It doesn't do anything that isn't in 2.0 base now AFAIK. I disabled it. Chris Buechler
06:12 PM Bug #1611: DHCP leases show as expired when they shouldn't be: Yes, same here, I haven't tried removing it though. Eirik Zakariassen
05:48 PM Bug #1611: DHCP leases show as expired when they shouldn't be: Indeed I do have that package installed! Dainel Spisak
04:15 PM Bug #1611: DHCP leases show as expired when they shouldn't be: MAC-to-vendor does overwrite this page, and I haven't seen this anywhere (also don't have that package installed anyw... Chris Buechler
02:36 PM Bug #1611: DHCP leases show as expired when they shouldn't be: I think this is a bug in the MAC-to-vendor package. remove it and suddenly leases show up correctly. Adam Gundy
04:38 PM Bug #1636: outbound state timeout control not possible?: huh? which filter state?
I agree that you shouldn't have to set the timeout in two different places, but currently... Adam Gundy
04:10 PM Bug #1636 (Rejected): outbound state timeout control not possible?: NAT states have the same timeout as the filter state and there isn't any scenario where doing otherwise would be a go... Chris Buechler
03:27 PM Bug #1636 (Rejected): outbound state timeout control not possible?: it does not appear to be possible to control the timeout on an outgoing NAT connection.
you can control the settin... Adam Gundy
04:26 PM Bug #1637: captive portal web service port bind validation issue: forgot to provide pfsense version 2.0-RC3 (i386) built on Fri Jul 1 20:11:57 EDT 2011 ellis melman
04:21 PM Bug #1637 (Needs Patch): captive portal web service port bind validation issue: captive portal uses port 8000 for the web interface but fails to report to the user if the port is already in useby a... ellis melman
02:59 PM Bug #1635 (Resolved): timeout setting on firewall rules does not work for UDP: the 'state timeout' firewall rule setting (under 'advanced options') has no effect on UDP connections. that's because... Adam Gundy

07/01/2011

10:36 PM Bug #1582: traffic shaper queues bug: really think this should be re-opened, there is definitely something wrong with queuing UDP traffic. I find that a s... Philip Wipf
09:21 PM Revision 40fd50c8: Do not add an automatic gateway on openvpn tap case since its only the netmask.: Ermal LUÇI
08:50 PM Revision 6fd8fde2: Use empty() so we don't use it if it's defined but blank.: Jim Pingle
08:46 PM Revision a9404381: If available, also track the IP used by a user making a config change.: Jim Pingle
07:25 PM Bug #1624: installer needs to zero first and last block of disk: I added a utility that will zap any prior GPT partitions. This should do the same thing.
Scott Ullrich
03:38 PM Revision 2488a7e7: Merge remote branch 'upstream/master': Jim Pingle
03:20 PM Revision 0fcaf4f2: Unlock the fields when making a new internal cert, so we copy the data from the CA but are not locked into it. (Cert details often differ from CA details...): Jim Pingle
07:32 AM Bug #1634 (Duplicate): Limiter and bridge needs special handling: As reported by customers to have working limiters working with bridges its needed to have an ip on the bridge interfa... Ermal Luçi
05:31 AM Bug #1621: Switching WAN from type PPP to other leaves former port assigned: Sorry to insist but the problem showed up after a change in config.I deactivated the interface and when I activated i... Joao Seabra
12:24 AM Bug #1621: Switching WAN from type PPP to other leaves former port assigned: Forgot to mention: now user can always fix the mess he got after several reassignments by going to Interfaces->(assig... Evgeny Yurchenko
12:08 AM Bug #1621 (New): Switching WAN from type PPP to other leaves former port assigned: updated with the real cause, though this isn't ideal and should be improved in the future, its cause is user error, n... Chris Buechler
03:13 AM Bug #1632: Captive Portal changed behaviour: DesktopShare PC is restricted through firewall rules, but this rules were applied only after captive portal authentic... Davide B
02:55 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: This one got me too, going to have to back out one system and go back to 1.2.3, any idea when this will be addressed? Derrick Conner
12:05 AM Bug #1633 (Resolved): Missing input validation in IPv6 gateways: It's possible to pick an IPv4-only interface for your IPv6 gateway, which results in deletion of the default IPv4 rou... Chris Buechler

06/30/2011

11:40 PM Bug #1621: Switching WAN from type PPP to other leaves former port assigned: Whenever you set up WAN to PPP section <ppps><ppp><ports> in config.xml changes to whatever you shoos in "modem port"... Evgeny Yurchenko
09:31 PM Revision 2c063971: Correct pid filename so the instance of lighty for SSL is running.: Ermal LUÇI
05:17 PM Bug #1632 (Rejected): Captive Portal changed behaviour: not a bug, fact of how CP works, that passthrough is required. Chris Buechler
12:44 PM Bug #1632: Captive Portal changed behaviour: Can you provide more information on this?
Your configuration in 1.2.3 and your config in 2.0.
Aslo an architecture ... Ermal Luçi
12:21 PM Bug #1632 (Rejected): Captive Portal changed behaviour: Hi,
I've upgraded (maintaining the same configuration) a corporate firewall with a "Transit LAN" with corporate netw... Davide B
09:16 AM Bug #1421 (New): Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: Jim Pingle
06:27 AM pfSense Packages Bug #1631: incorrect syntax of /boot/loader.conf after open-vm-tools package installed: Thanks, fixed in changeset commit:d7807cc49fb9c3c28f417c929b19c65c56ec6cb8
Warren Baker
05:55 AM pfSense Packages Bug #1631 (Resolved): incorrect syntax of /boot/loader.conf after open-vm-tools package installed: After vmwate tools package installation, file /boot/loader.conf has inforrect syntax , which prevents kernel modules ... Ivars Strazdins
03:01 AM Feature #1630: lagg ALTQ support: Chris Buechler wrote:
> I don't believe lagg supports ALTQ which is why, it's not as simple as showing that interfac... Matt Crook
02:23 AM Feature #1630: lagg ALTQ support: I don't believe lagg supports ALTQ which is why, it's not as simple as showing that interface. Chris Buechler
02:19 AM Feature #1630 (Resolved): lagg ALTQ support: when you go to use the wizard "traffic_shaper_wizard_multi_lan.xml" when you are using lagg for your lan, it won't le... Matt Crook
02:54 AM Bug #1628: Static ARP entries need reapplied after link loss: Tested it with embedded and it works! going to apply it to a full version install now. Basel G.

06/29/2011

11:24 PM Bug #1621: Switching WAN from type PPP to other leaves former port assigned: Indeed if you change from PPP to PPPoE you'll have /dev/cuau0 remained in <ports></ports>. Evgeny Yurchenko
10:33 PM pfSense Packages Bug #1626: Snort snort_rules.php drop down only works in Firefox: Can't install snort at all -( Installation fails with
Downloading http://files.pfsense.org/packages/8/All/snortsam... Evgeny Yurchenko
08:06 PM Revision d368b334: Move interfaces_staticarp_configure() to interfaces.inc where it really belongs.: Jim Pingle
07:54 PM Revision 8ee623f3: Instead of deleting arp entries, reconfigure static arp. For interfaces without static arp enabled, the net effect is the same (arp entries are already deleted as part of that function). Fixes #1628: Jim Pingle
04:53 PM Bug #1351 (New): Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes: Some people are still hitting this same error, but not this specific circumstance. Two support customers, plus others... Jim Pingle
03:55 PM Bug #1628 (Feedback): Static ARP entries need reapplied after link loss: Applied in changeset commit:8ee623f3a98dca5681274d6a14450223236b4013. Jim Pingle
12:42 PM Bug #1628: Static ARP entries need reapplied after link loss: yes the only issue is ARP entries are disappearing
I'm power cycling all the switches since we get powercuts and w... Basel G.
12:31 PM Bug #1628: Static ARP entries need reapplied after link loss: The problem is still with the ARP entries disappearing. That's the only issue here.
Are you power cycling the indi... Jim Pingle
12:29 PM Bug #1628: Static ARP entries need reapplied after link loss: My setup is like this: about 20 switches serving around 150 clients connected through LAN, when I do a power cycle on... Basel G.
12:18 PM Bug #1628: Static ARP entries need reapplied after link loss: The problem with Static ARP is its locking out everyone listed when they disconnect and try to reconnect, maybe its r... Basel G.
11:08 AM Bug #1628: Static ARP entries need reapplied after link loss: Deny Unknown Clients only affects the DHCP server giving out IPs to clients that are not listed. A client can hardcod... Jim Pingle
11:04 AM Bug #1628: Static ARP entries need reapplied after link loss: small clarification about "Deny unknown hosts", if users are using a static IP they can bypass this if they are not i... Basel G.
08:06 AM Bug #1628 (Resolved): Static ARP entries need reapplied after link loss: Enabling static ARP in DHCPD causes the ARP table to get cleared if a disconnect happens to switches/clients connecte... Basel G.
03:22 PM Revision 5962f766: Check if an item is an array before treating it as such in the upgrade code.: Jim Pingle
11:01 AM Bug #1629 (Resolved): invalid state table entries after WAN IP change: We have an asterisk server behind pfsense 2.0-RC3 using a PPPoE DSL connection.
Whenever our WAN IP changes the aste... Eli Hunter
08:20 AM Bug #1534 (Resolved): rc.newwanip issues (CARP slave problems, package issues): Chris Buechler
04:48 AM Bug #1534: rc.newwanip issues (CARP slave problems, package issues): Unfortuntely I can't drop IPv6 support on my machines. I'm currently running 2.0-RC3-IPv6 (amd64) built on Mon Jun 27... Marcin Krol
04:24 AM Bug #636: layer7 not work correctly: Updated to the latest version, but logging is busted, so I can't say what's happening. (There's a bunch of comments i... Jonathan Puddle
03:22 AM Bug #1627 (Feedback): VPN VOIP Traffic Ignoring Traffic Shaper Queues: Chris Buechler
03:22 AM Bug #1627: VPN VOIP Traffic Ignoring Traffic Shaper Queues: what version? what type of VPN? Chris Buechler
02:06 AM Bug #1627: VPN VOIP Traffic Ignoring Traffic Shaper Queues: is it this that ur referring to?
http://forum.pfsense.org/index.php/topic,36742.0.html Bipin Chandra
03:15 AM Bug #1545: Dynamic DNS updates fail on 3G connections: I'm having trouble keeping the 3G connection active. It is now deciding to get stuck in PPP "Initial" state on IP cha... Ross Williamson

06/28/2011

08:47 PM Revision dfa766ff: Put resolvconf generation first since gif tunnels can use hostanmes: Ermal LUÇI
08:45 PM Revision 48484aac: Add recovery code for gif/gre the same as in interface_configure. This helps gif/gre tunnels. Needed for capr? Suggested-by: jim-p: Ermal LUÇI
08:30 PM Bug #1627 (Resolved): VPN VOIP Traffic Ignoring Traffic Shaper Queues: I have a VPN setup for remote employees. The VOIP traffic usually goes to the VOIP queue between our PBX and the VOIP... Abdiel Marin
08:12 PM Revision da70dc36: Move apinger monitor reconfigure down after gif, since gif can add gateways.: Jim Pingle
08:09 PM Revision 8484586f: Do not show the root interface queue on the queue list availble since it is not allowed to choose it. Ticket #636: Ermal LUÇI
07:57 PM Revision ecc584aa: Reconfigure gif so it picks up the new wan ip.: Jim Pingle
07:55 PM Revision 48427553: Merge remote-tracking branch 'mainline/master' into inc: Vinicius Coque
07:26 PM Revision 84924e76: Add proper checks in auth code for testing if the section has been set in the config. Also do the same in the ugprade code: Ermal LUÇI
07:21 PM Revision 38a481ad: Add he.net tunnelbroker update dyndns type: Jim Pingle
07:11 PM Revision 3cedb66f: Correctly display page title: Ermal LUÇI
04:10 PM Bug #636: layer7 not work correctly: Can you please test with latest snapshots? Ermal Luçi
03:21 PM Revision 3062d6f7: Merge remote branch 'upstream/master': Jim Pingle
03:20 PM Revision e8c8891d: Fix typo: Jim Pingle
02:22 PM Revision 9ed6c9ac: Make text cosmetics consistent and close off missing <span/> tag.: Warren Baker
02:20 PM Bug #1621: Switching WAN from type PPP to other leaves former port assigned: No,I din't configure pfsense to use /dev/cua0.What happened was that I changed WAN type to DHCP,PPP,etc and saved tho... Joao Seabra
01:17 PM Revision 03d7297b: Use correct table header class.: Warren Baker
11:10 AM Revision beaab622: More text consistency.: Warren Baker
10:59 AM Revision 9338cf35: Note consistency and gettext() added.: Warren Baker
09:03 AM Revision 48f55356: Consistency of NOTE vs Note as through the rest of the webGUI.: Warren Baker
02:43 AM pfSense Packages Bug #1626 (Closed): Snort snort_rules.php drop down only works in Firefox: snort_rules.php?id=X drop down seems to have taken its code from our old interfaces drop down on firewall_rules.php a... Chris Buechler

06/27/2011

10:38 PM Bug #1622 (Rejected): Loss of connectivity and response from pfSense system in 2.0 RC3: there isn't a general problem with systems dropping offline, and this doesn't have a specific problem hence isn't a v... Chris Buechler
02:57 PM Bug #1622 (Rejected): Loss of connectivity and response from pfSense system in 2.0 RC3: Running a "fresh" 2.0 RC3 AMD64 install on a system with 4 Gig of RAM and an Intel EXPI9402PT Dual Port NIC. After so... Justin Mitchell
08:45 PM Revision 0818baf7: Adding patch for pfearly hook from Andrew Thompson: Scott Ullrich
08:43 PM Revision ca1a3fc2: Clean up leftover code not needed for anything.: Ermal LUÇI
07:59 PM Bug #1572: DHCP + MAC spoofing leads to link cycling: this has never worked in any 8.x base versions, it's a problem in FreeBSD 8.x. It's intermittent, I ran that way for ... Chris Buechler
07:56 PM Bug #1572: DHCP + MAC spoofing leads to link cycling: I'm facing the same problem with the latest snapshots for the past 4 days, also "Deny unkown hosts" doesn't do as it ... Basel G.
07:01 PM Revision b0d6223f: When editing a vlan and chaning its tag id and the vlan is assigned correct even the interface name of the assignment otherwise we result in breaking the install.: Ermal LUÇI
06:42 PM Revision f257c139: Don't do a csrf check when downloading packet capture, see http://forum.pfsense.org/index.php/topic,37794.0.html - also exit after sending the file to the user to avoid partial broken page loads after downloading a packet capture.: Jim Pingle
06:06 PM Revision 8a385f42: Merge remote branch 'upstream/master': Jim Pingle
06:05 PM Revision 2f3554bb: Bail out of ipsec_get_phase1_dst if there is no remote gateway, else it falls into running resolve_retry() with invalid parameters causing a long delay in returning.: Jim Pingle
05:44 PM Bug #1623 (Closed): Redirect in System : Advanced loses port number: works as it should, if a non-default port is specified that's where the redirect goes, if there isn't a port specifie... Chris Buechler
05:18 PM Bug #1623 (Closed): Redirect in System : Advanced loses port number: Making a change under system_advanced_admin.php results in a delayed redirect. This redirect forgets to add a port nu... Bill McGonigle
05:38 PM Bug #1625: installer shouldn't offer to install over boot drive/partition or install bootblocks on boot drive: Please test the new installer located at /installer on 2.0.
There are no plans to further develop the LUA based in... Scott Ullrich
05:30 PM Bug #1625 (Resolved): installer shouldn't offer to install over boot drive/partition or install bootblocks on boot drive: When running the installer from rw media (pfsense-memstick image in this case) the installer offers the drive/partiti... Bill McGonigle
05:28 PM Bug #1624: installer needs to zero first and last block of disk: Please test the new installer located at /installer on 2.0.
There are no plans to further develop the LUA based in... Scott Ullrich
05:26 PM Bug #1624 (Resolved): installer needs to zero first and last block of disk: I've seen some problems installing pfSense 2 on previously used disks.
In one case I had a disk which just minutes... Bill McGonigle
05:11 PM Revision 39e268c4: Add a button to reset the RRD data (rm's rrd files and reinitializes).: Jim Pingle
04:11 PM Revision d30afa60: In upgrade code for server load balancing, set redirect_mode. Also in the backend code, assume redirect_mode as the default if it's not set.: Jim Pingle
02:57 PM Revision e4b9d53b: Be consistent with upper and lowercase.: Warren Baker
02:54 PM Bug #1611: DHCP leases show as expired when they shouldn't be: I also have this issue, running
2.0-RC3 (i386)
built on Sun Jun 26 20:44:17 EDT 2011
Running Pfsense on Vmwa... Eirik Zakariassen
09:43 AM pfSense Packages Bug #1620: Can't use transparent proxy when using bridge.: It's not a squid issue, its a nat/rdr issue.
As I told even creating a rdr rule, I cant't see any traffic going to... Marcello Silva Coutinho
08:00 AM Revision ae26b02e: send lighttpd a KILL in restart_webgui, once I've seen the former way result in a never ending stream of .... never killing it, and others have reported the same. a killall -9 sufficed in those instances to kill it, so this should resolve.: Chris Buechler

06/26/2011

10:51 PM Revision 9bc27ae5: Fix off-by-one in OpenVPN "local" to "ipaddr" conversion.: Jim Pingle
07:30 PM Bug #1621 (Feedback): Switching WAN from type PPP to other leaves former port assigned: You have it configured to use /dev/cuau0 so no, it won't use re0 since it's not configured to do so. You must have ed... Chris Buechler
06:54 PM Bug #1621: Switching WAN from type PPP to other leaves former port assigned: attach your config or can email it to me (cmb at pfsense dot org) Chris Buechler
06:50 PM Bug #1621 (Closed): Switching WAN from type PPP to other leaves former port assigned: replacing description with actual problem found by Evgeny:
Whenever you set up WAN to PPP section <ppps><ppp><por... Joao Seabra
07:03 PM Revision 84296ca3: Merge remote-tracking branch 'upstream/master': Jim Pingle
11:05 AM Bug #1615: rrd graph not refreshing the correct time frame: Commit https://github.com/bsdperimeter/pfsense/commit/0da02ef5d99de2c04846934b0cd7504e9e880eec.
ststus_rrd_graph_img... Evgeny Yurchenko
04:36 AM Revision 0da02ef5: Bug #1615. Half-fix.: Evgeny Yurchenko

06/25/2011

09:37 AM Revision 271e9b69: fix whitespace: Chris Buechler
03:14 AM pfSense Packages Bug #1620 (New): Can't use transparent proxy when using bridge.: Can't foward any package To localhost while using bridge and setting ip address only on new bridge interface.
Sam... Marcello Silva Coutinho
02:56 AM Bug #1619: crontab wrong expiretable check time: Ir Does not make sense. Why configure an Option To expire in 60 minutes but not in 60 minutes.
If i want To limit co... Marcello Silva Coutinho

06/24/2011

11:16 PM Bug #1619 (Rejected): crontab wrong expiretable check time: it's not designed to expire them after exactly an hour and has no need for doing so. Running it more frequently would... Chris Buechler
09:59 PM Bug #1619 (Rejected): crontab wrong expiretable check time: **/60 * * * * root /usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout*
**/60* checks... Marcello Silva Coutinho
07:09 PM Revision 5a7cc1f9: No need to use nohup when using mwexec_bg since it calls nohup itself. Also use fullpath to executables.: Ermal LUÇI
07:05 PM Revision 01599e5e: Remove nohup from the calling for check_reload_status since it may cause issues to the processes that get forked from it.: Ermal LUÇI
02:53 PM Revision 506514e7: Add LB monitor types to config during upgrade, or they will be missing from boxes upgraded from 1.2.3.: Jim Pingle
01:51 PM Bug #1336: PPTP VPN NAT on WAN or other external interface: I can confirm Jim P's analysis. On VMWare, i386 works fine, amd64 does not. R W
12:10 PM Revision 5ca13f69: Import error handling to avoid errors.: Ermal LUÇI
09:39 AM Bug #1605: DHCP Server should group known clients by interface: Yeah that may be fine then, though the code to implement this should not use .0, but mathematically calculate the nul... Jim Pingle
09:25 AM Bug #1605: DHCP Server should group known clients by interface: This is what it does:
01:18:15.819317 IP 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 08:00:27:a6:50:bf... Evgeny Yurchenko
09:10 AM Bug #1605: DHCP Server should group known clients by interface: It still does its ping test to ensure an IP is open before assignment, though I suppose on .0 in a /24 that would fai... Jim Pingle
08:56 AM Bug #1605: DHCP Server should group known clients by interface: Just tested with
host s_lan_0 {
hardware ethernet 08:00:27:e5:68:94;
fixed-address 192.168.56.99,... Evgeny Yurchenko
07:49 AM Bug #1605: DHCP Server should group known clients by interface: That hack might work for the first client to connect in a subnet, but if two of them crossed at once it would not ass... Jim Pingle
04:03 AM Bug #1605: DHCP Server should group known clients by interface: @Evgeny:
Uuh, nice hack. Accepted! But I don't think it's really easy to implement. Every time, someone creates/modi... Willy Tenner
08:24 AM Bug #1572: DHCP + MAC spoofing leads to link cycling: I encountered the same problem. Enabling MAC spoofing on WAN Interface using DHCP will instantly trigger link cycling... Daniel Bernhardt
08:23 AM Bug #1618 (Resolved): Captive portal: Invalid AVP value in Radius accounting packet: Hello,
Using captive portal, with Radius authentication and accounting enabled, my server (tinyradius java lib) co... Serge ALEXANDRE
05:27 AM Bug #1334: Traffic Shaper Rules ignored: is this the same as
http://redmine.pfsense.org/issues/1582
for more info
http://forum.pfsense.org/index.php/topi... Bipin Chandra
05:18 AM Bug #1582: traffic shaper queues bug: i compared an old config file with the current one and didnt notice any major change in the queues and rules, should ... Bipin Chandra
12:28 AM Revision 22b380aa: Internal cert and CSR creation error handling added.: Evgeny Yurchenko
12:05 AM Revision 1b6d9fa5: Internal CA creation error handling added.: Evgeny Yurchenko

06/23/2011

11:30 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: Just updated to 2.0-RC3 (amd64) built on Tue Jun 21 23:37:22 EDT 2011 which has the patch that Jim P linked to - same... David Rees
11:02 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: Jim P wrote:
> Try it with commit:90ecc0b62f8b363d9497b4754133738edb9bc633
I have tried this on a "2.0-RC1 (amd64... David Rees
11:02 PM Revision 95c8cf48: Intermediate CAs and openssl_xxx() error checking in CA management.: Evgeny Yurchenko
10:28 PM pfSense Packages Bug #1609: unable to install Avahi: The tgz is an ugly mess that needs to die. It really needs to install properly from the package system. It may just n... Jim Pingle
10:23 PM pfSense Packages Bug #1609: unable to install Avahi: Maybe we should remove
<depends_on_package>avahi-0.6.28.tbz</depends_on_package>
from pkg_config.8.xml.amd64 as it... Evgeny Yurchenko
09:45 PM Bug #1612: Custom scripts in /usr/local/etc/rc.d get deleted: it was actually fixed a while back, I just missed the fact the file was still there, it's not an issue Chris Buechler
09:44 PM Bug #1612: Custom scripts in /usr/local/etc/rc.d get deleted: Tried to reproduce:
# echo test >/etc/rc.d/test
# chmod 555 /etc/rc.d/test
Install iperf package: /etc/rc.d/test i... Evgeny Yurchenko
09:22 PM Bug #1605: DHCP Server should group known clients by interface: We are running dhcpd-4.2.1-P1 which supports grouping. The problem is 'host' cannot be related with 'subnet' (I tried... Evgeny Yurchenko
09:19 PM Bug #1437: More validation needed on CSR generation: I will test this on or right after July 4th. I will not have internet access between tomorrow and then (working at a ... Yehuda Katz
08:30 PM Bug #1437: More validation needed on CSR generation: Errors handling added:
https://github.com/bsdperimeter/pfsense/commit/95c8cf48f9bd72da5371aa01a03a070885411dbf
http... Evgeny Yurchenko
08:12 PM Revision 034e4e83: Merge remote branch 'upstream/master': Jim Pingle
06:08 PM Revision ca4acbcd: After an interface mismatch and apply actually show when we are rebooting instead of the same message that the interface mismatch exists when really the system is rebooting.: Scott Ullrich
05:37 PM Bug #1611: DHCP leases show as expired when they shouldn't be: Chris, here is the dhcp.leases:
# more /var/dhcpd/var/db/dhcpd.leases
# The format of this file is documented in ... Dainel Spisak
10:58 AM Bug #1611: DHCP leases show as expired when they shouldn't be: Can't replicate.
I configured 3 VLAN on my LAN beside my untagged LAN. Every thing on em1
em1:192.168.10.0/24
... rancor rancor
03:34 PM Revision d2a08a06: Add small comment about rrd binaries: Scott Ullrich
03:14 PM Revision cb6630e5: Loosen grep for rrd: Scott Ullrich
03:11 PM Revision efea7969: Backup rrdtool binaries during package reinstallation. Currently that is the onlyp package that can be clobbered by others. We will rework this completely in a future version when we adopt PBIs.: Scott Ullrich
02:34 PM pfSense Packages Bug #1616: Dell R210 incompatibility: How long did you let the system install at 38%? This is the longest step in the installer and it does not give a lo... Scott Ullrich
02:33 PM pfSense Packages Bug #1616 (Rejected): Dell R210 incompatibility: we don't track hardware-specific issues as there isn't anything we can do about them. Chris Buechler
05:52 AM pfSense Packages Bug #1616 (Rejected): Dell R210 incompatibility: I bought 2 Dell R210 and with all pfSense versions there's no way to install it!
With pfSense-2.0-RC3-amd64-201106... Davide B
02:21 PM Bug #259 (Resolved): When disabling a dhcp interface, dhclient is not stopped: Ermal Luçi
02:14 PM Bug #259: When disabling a dhcp interface, dhclient is not stopped: It seems to work now.
Before I disable vlan203 the dhclient is running
$ ps ax | grep dhclient
8629 ?? Is ... rancor rancor
02:09 PM Bug #1341 (Resolved): Removing last host from alias does not truly remove it, host continues to be affected by rules: Ermal Luçi
01:58 PM Bug #1341: Removing last host from alias does not truly remove it, host continues to be affected by rules: It seems to work now
Tested to reproduce with version 2.0 RC3 date 23 june 2011 and as quick as I remove the host ... rancor rancor
02:06 PM Bug #455: On initial wizard reload button do not put browser on new assigned ip.: What is the needed feedback? I want to test fixes but there does not seems to be neither a fix nor a question
// r... rancor rancor
01:08 PM Bug #1156 (Closed): Upgrade from 1.2.3 to 2.0 with VMware tools installed will panic: Thanks for the update! Scott Ullrich
01:05 PM Bug #1156: Upgrade from 1.2.3 to 2.0 with VMware tools installed will panic: It works for me with 2.0 RC3 - snapshot dated 23 june 2011
I just tested with a fresh install with pfSense-1.2.3-R... rancor rancor
11:10 AM Bug #875: Uninstalling packages can remove system libraries: I just committed a change that should hopefully preserve rrdtool. Please test the next snapshot run. Scott Ullrich
11:05 AM Bug #875: Uninstalling packages can remove system libraries: Uninstalling the ntop package results in the removal of rrdtool, possibly others as it does have a long list of depen... David Miller
10:54 AM pfSense Packages Bug #1617 (Rejected): Uninstalling ntop package removes rrdtool: Already covered under #875 - add a note on that ticket instead of opening a new ticket. Jim Pingle
10:52 AM pfSense Packages Bug #1617 (Rejected): Uninstalling ntop package removes rrdtool: Subject pretty much sums it up. If you install and then uninstall the ntop package the rrdgraphs will stop working. ... David Miller
08:52 AM Bug #1598: IP Alias VIP configured on a CARP VIP, resets CARP VIP on sync: Checked on 2.0-RC3 (amd64) built on Wed Jun 22 23:09:34 EDT 2011:
Dis-/re-enabling CARP is an issue even with no I... Andreas Bochem
05:48 AM pfSense Packages Bug #1164: Installing pfSense 2.0 on a Dell PowerEdge R210: I bought 2 Dell R210 and with all pfSense versions there's no way to install it!
With pfSense-2.0-RC3-amd64-201106... Davide B
02:08 AM Bug #1582: traffic shaper queues bug: queues adnd rules both created manually, no wizard used and it used to work also earlier but just went dead in newer ... Bipin Chandra

06/22/2011

11:25 PM Bug #1582 (Closed): traffic shaper queues bug: config issue not bug, UDP queues as configured (though probably related to general wizard issue covered by another ti... Chris Buechler
09:25 PM Revision e0ed1aa3: The fix of Ticket #1341 broke the FQDN aliases with only one hostname entry, reported-by: http://forum.pfsense.org/index.php/topic,38051.0.html. Fix this regression by properly handling this cases.: Ermal LUÇI
09:00 PM Revision 0e61e3e4: Merge remote branch 'upstream/master': Conflicts:
etc/inc/filter.inc
etc/inc/util.inc Jim Pingle
08:29 PM Bug #1377: upgrade 1.2.3-Final nanobsd 4g to 2.0-RC1 nanobsd 4gb fails: 4GB
I worked around this by physically going to the unit and reload the card with a 4G 2-RC1 image. Bill McIlhargey
12:52 PM Bug #1377: upgrade 1.2.3-Final nanobsd 4g to 2.0-RC1 nanobsd 4gb fails: Is this specific to the 4GB size? I just did a manual update of a 1GB system and it had no problems upgrading that I ... Jim Pingle
07:06 PM Bug #1613: OpenVPN LDAP authentication should not modify mail attribute as login.: I've just realised my example is not a good one - in the company that I work for, our email addresses are in the form... Deon George
08:28 AM Bug #1613: OpenVPN LDAP authentication should not modify mail attribute as login.: The HTML (or something) has parsed my "description" and removed the "at" character. So all references to '' (double q... Deon George
08:25 AM Bug #1613 (Resolved): OpenVPN LDAP authentication should not modify mail attribute as login.: I have setup an LDAP user directory, using mail as the unique search key (to find users). In the organisation I work ... Deon George
06:52 PM Revision ff629977: Properly generate a subnet based on the range of IPs for PPTP clients. Bonus: fix off-by-one math error in the NAT code that does the same thing. Fixes #1614: Jim Pingle
05:19 PM Revision 91c31339: Revert "Correct displaying any availble default value.": This reverts commit 01c170c4612a4afdbaa2d6e9bf98552dddc1cde3. Warren Baker
02:55 PM Bug #1614 (Feedback): "pptp clients" macro for firewall rules does not work: Applied in changeset commit:ff629977e3d45c1d41fc12449e647abd8b780241. Jim Pingle
02:28 PM Bug #1614 (Resolved): "pptp clients" macro for firewall rules does not work: Using the "pptp clients" entry in the drop-down list for firewall rules does not work. It does not match/pass traffic... Jim Pingle
02:39 PM Revision 68d1632c: New line missing after pkg is extracted.: Warren Baker
02:31 PM Bug #1615 (Resolved): rrd graph not refreshing the correct time frame: The javascript is correctly triggering to refresh the rrd graphs, but the start and end time passed to the graphing s... Seth Mos
12:52 PM Bug #1554: Voucher page turns grey after parameter change: Oops, still on RC1. I don't know RC3 is out. When I log on, I can see:
***
2.0-RC1 (i386)
built on Sat Feb 26 1... Pavel Pilat
12:34 PM Bug #1554: Voucher page turns grey after parameter change: It happened again today with what version? As Chris said you should be running 2.0-RC3. Scott Ullrich
12:29 PM Bug #1554: Voucher page turns grey after parameter change: make sure you're on RC3, a number of voucher-related things have been fixed since RC1. Chris Buechler
11:14 AM Bug #1554: Voucher page turns grey after parameter change: ... and again! After I restored the voucher functionality using previous config file, we managed to set up only one v... Pavel Pilat
08:48 AM Bug #1554: Voucher page turns grey after parameter change: Today it happened again - I had to restore older config. It is OK after restart. Pavel Pilat
05:02 AM Bug #1612 (Closed): Custom scripts in /usr/local/etc/rc.d get deleted: nevermind, I apparently can't see straight this morning, the file is still there... it shifted positions in ls becau... Chris Buechler
03:57 AM Bug #1612: Custom scripts in /usr/local/etc/rc.d get deleted: I investigated this and i cannot see in any place in pfSense base code something like that being done apart
the sect... Ermal Luçi
03:15 AM Bug #1612: Custom scripts in /usr/local/etc/rc.d get deleted: Yeah I thought it was, but it happens on the newest snapshot. Chris Buechler
03:11 AM Bug #1612: Custom scripts in /usr/local/etc/rc.d get deleted: You are sure to be on latest version.
I recall this happened during package improvements and i fixed this regression... Ermal Luçi
12:39 AM Bug #1612 (Closed): Custom scripts in /usr/local/etc/rc.d get deleted: The package reinstall process (it appears) deletes unknown startup scripts in /usr/local/etc/rc.d/ which is commonly ... Chris Buechler
04:58 AM Bug #944 (Resolved): Moving VLANs to lagg doesn't remove old VLANs: thanks Chris Buechler
04:19 AM Bug #944: Moving VLANs to lagg doesn't remove old VLANs: confirm fixed in 2.0-RC3 (amd64) built on Tue Jun 21 23:37:22 EDT 2011 Andreas Bochem
04:57 AM Bug #1602 (Resolved): diag_arp.php hangs when DNS server unreachable: Chris Buechler
04:49 AM Bug #1602: diag_arp.php hangs when DNS server unreachable: Looks good on 2.0-RC3 (amd64) built on Tue Jun 21 23:37:22 EDT 2011.
My current test system does not have a workin... Andreas Bochem

06/21/2011

07:13 PM Revision adc4bdcc: Set extension name correctly.. Duh!: Scott Ullrich
07:04 PM Revision 14033103: Fix copy and pasto: Scott Ullrich
06:55 PM Revision 9c881f26: Add extension directory: Scott Ullrich
06:05 PM Revision 5bbd08e1: More whitespace fixes.: Warren Baker
05:44 PM Revision 1015b3a9: If no event_address in globals.inc specified assume the default. Also fixed whitespaces.: Warren Baker
04:08 PM Revision 490615d3: Add custom boot early hook: Scott Ullrich
04:08 PM Revision f81cbdad: Use correct directory: Scott Ullrich
03:09 PM Bug #636: layer7 not work correctly: Hrm i see.
Thank you for the info.
Actually you cannot use the root queue in there and i will try to fix the interf... Ermal Luçi
06:18 AM Bug #636: layer7 not work correctly: Pretty basic, as you can see. And the system logs still display:
Jun 20 23:49:07 ipfw-classifyd: Loaded Protocol:... Jonathan Puddle
06:17 AM Bug #636: layer7 not work correctly: <l7shaper>
<container>
<name>test</name>
<enabled>on</enabled>
<description/>
<divert_port>41744<... Jonathan Puddle
12:27 PM Revision 160d5497: Merge remote branch 'upstream/master': Jim Pingle
12:26 PM Revision a6c85b8b: More icons missing from certain themes...: Jim Pingle
12:12 PM Revision c7bb0eed: Merge remote branch 'upstream/master': Conflicts:
etc/version Jim Pingle
08:25 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: Hafiz Rafiyev wrote:
> Jim same problem is continued ,i have to restart racoon service after pptp client disconnect,... Hafiz Rafiyev
06:58 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: Jim same problem is continued ,i have to restart racoon service after pptp client disconnect,here is log.
Jun 21 1... Hafiz Rafiyev
05:46 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: Harry Gonzalez wrote:
> Luca Sari wrote:
> > I've got the same problem on a 2.0-RC2 (i386)built on Mon Jun 6 00:12:... Luca Sari
08:02 AM Revision f27526cd: Do not store CA and CERT in config unless needed. Will allow deleting unused certs.: Evgeny Yurchenko
07:08 AM Revision 7cca77de: Kill olsrd if it is not enabled. Reported-by: http://forum.pfsense.org/index.php/topic,37931.0.html: Ermal LUÇI
03:16 AM Bug #1601 (Resolved): Authentication page loop: Confirmed on the forums. Ermal Luçi
03:14 AM Bug #1602 (Feedback): diag_arp.php hangs when DNS server unreachable: Ermal Luçi

06/20/2011

11:55 PM Revision 5b9afe1e: mkdir zend modules: Scott Ullrich
10:53 PM Revision 8ef700da: Add 'dynamodules' for zend_extension and zend_extension_ts. /etc/php_dynamodules_zend and /etc/php_dynamodules_zend_ts directories: Scott Ullrich
10:29 PM Revision c76ce920: Remove ioncube: Scott Ullrich
08:06 PM Revision 90ecc0b6: Disable state killing in VPN down scripts.: Jim Pingle
06:57 PM Revision c880d032: Fix ovpn-linkup so it writes out the proper gateway IP in all cases.: (For some reason -n wasn't working properly, plus $5 is the right parameter for the remote IP here) Jim Pingle
06:24 PM Bug #1611 (Feedback): DHCP leases show as expired when they shouldn't be: what does your /var/dhcpd/var/db/dhcpd.leases look like? Chris Buechler
06:15 PM Bug #1611 (Closed): DHCP leases show as expired when they shouldn't be: Running on 2.0-RC3 (i386) built on Sun Jun 19 21:45:34 EDT 2011, I have a system with multiple VLAN's on the LAN side... Dainel Spisak
05:19 PM Bug #1545: Dynamic DNS updates fail on 3G connections: You need to update since this is a bug fixed in latest snapshots of check_reload_Status. Ermal Luçi
04:05 PM Bug #1421 (Feedback): Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: Jim Pingle
04:05 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: Try it with commit:90ecc0b62f8b363d9497b4754133738edb9bc633 Jim Pingle
03:59 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: Chris Buechler wrote:
> We can't replicate this, I can connect and disconnect PPTP all day long and IPsec never drop... Harry Gonzalez
03:51 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: Harry it's so simple to replicate the bug.
Steps to replicate bug.
1)Make ipsec VPN tunnel between 2 PF 2.0RC2,... Hafiz Rafiyev
10:33 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: Luca Sari wrote:
> I've got the same problem on a 2.0-RC2 (i386)built on Mon Jun 6 00:12:42 EDT 2011 running under v... Harry Gonzalez
02:40 PM Revision 06bfdd53: Add missing theme images.: Jim Pingle
11:50 AM Revision f0b17f3f: Merge remote-tracking branch 'mainline/master' into inc: Vinicius Coque
06:24 AM Bug #1607: MBUF usage grows geometrically: The RRD graphs mostly didn't survive the config restore, so the screenshot is the best I can do. I had firewall set t... David Burgess

06/19/2011

11:52 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: I've got the same problem on a 2.0-RC2 (i386)built on Mon Jun 6 00:12:42 EDT 2011 running under vmWare.
the problem ... Luca Sari
11:40 PM Revision 3745f21e: bump to RC3: Chris Buechler
07:08 PM Revision 857da904: Do not check dynamic and special interfaces for a complete interface mismatch error: Scott Ullrich
07:01 PM Revision 53bbbf04: Do not create blank domain lines if domain is gone from config.xml. It breaks tools such as dig when troubleshooting, etc.: Scott Ullrich
07:01 PM Revision a53992b7: Simplify message that wraps off screen: Scott Ullrich
04:39 PM Revision ffdcbeb6: Also ignore lines starting with server-duid, and fix the # ignore so it is anchored on the start of the line. Add a note to fix a loop later that can fall into infinity.: Jim Pingle
02:58 PM Revision 248501cd: Merge remote-tracking branch 'upstream/master': Jim Pingle
11:39 AM Bug #1607: MBUF usage grows geometrically: Of those I would probably be most inclined to point a finger an mlppp since it's the least common used feature among ... Jim Pingle
12:45 AM Bug #1607: MBUF usage grows geometrically: Summary:
7 lines mlppp
2 em NICs
14 or so vlans on both NICS, total
openvpn client
no packages currently insta... David Burgess

Also available in: Atom

Project

General

Profile

pfSense

Activity

Activity

07/18/2011

07/17/2011

07/16/2011

07/15/2011

07/14/2011

07/13/2011

07/12/2011

07/11/2011

07/10/2011

07/09/2011

07/08/2011

07/07/2011

07/06/2011

07/05/2011

07/04/2011

07/03/2011

07/02/2011

07/01/2011

06/30/2011

06/29/2011

06/28/2011

06/27/2011

06/26/2011

06/25/2011

06/24/2011

06/23/2011

06/22/2011

06/21/2011

06/20/2011

06/19/2011