Project

General

Profile

Activity

From 07/27/2011 to 08/25/2011

08/25/2011

08:58 PM Revision 2661e5d3: Remove stray echo statement
Seth Mos
08:57 PM Revision 60c62dee: Remove stray print_r()
Seth Mos
08:56 PM Revision c3a0d2a5: Automatically pick up on dynamic IPv6 interfaces. For Example dhcp6.
Seth Mos
06:59 PM Feature #1701: Vouchertime should be seperated
We have no current plans for implementing this. where "current plans" always means "someone willing to fund it" out o... Chris Buechler
04:17 AM Feature #1701: Vouchertime should be seperated
No intressst in this? Andreas Böhm
06:49 PM Bug #1556 (Feedback): Changing local IPsec tunnel endpoint does not work
I'm also unable to replicate this. Chris Buechler
08:22 AM Bug #1556: Changing local IPsec tunnel endpoint does not work
I switch one of my tunnels back and forth regularly between my two WANs and as long as I adjust the peer address on t... Jim Pingle
05:56 PM Bug #1814 (Rejected): Drive read/boot errors w/2.0 RC3
You have a dying hard drive or other fatal hardware quirk. Nothing we can do about that. Jim Pingle
05:55 PM Bug #1814 (Rejected): Drive read/boot errors w/2.0 RC3
From forum post: http://forum.pfsense.org/index.php/topic,39181.0.html which was submitted by palesius
I have a sy... David T
01:17 PM Revision 107f0cc8: Add a couple more mobile browser detection strings (BlackBerry, Opera Mini/Mobi)
Jim Pingle
01:15 PM Revision e6eb0fcb: Add a couple more mobile browser detection strings (BlackBerry, Opera Mini/Mobi)
Jim Pingle
09:14 AM Revision 5dc98f2e: Implement correct gen_subnetv6_max function that you can throw random prefix lengths in. Fixes Ticket #1725
Seth Mos
05:13 AM Bug #1725 (Feedback): DHCPv6 non-common bitmask shows incorrect range
I've been able to create a new gen_subnetv6_max() function in about a hour or 2 of coding and testing. Should be reso... Seth Mos
01:55 AM Revision 42964851: fix text
Chris Buechler
01:54 AM Revision ace9a954: fix text
Chris Buechler

08/24/2011

09:24 PM Revision 5c52cd56: force a set path for ioncube loader
Luiz Gustavo S. Costa
09:13 PM Revision ba35e0de: force a set path for ioncube loader
Luiz Gustavo S. Costa
08:10 PM Revision 99bdb17e: Unbreak the firewall rule Edit page, input error array was unset halfway the validation. Set that back up ontop.
Add gateway validation Seth Mos
07:21 PM Revision 4108dee8: Catch another possiblity for invalid rule generation
Seth Mos
04:59 PM Revision 196dafe9: Make sure this does not operate on empty parameters, and also log when removing states.
Jim Pingle
04:59 PM Revision 197c30ae: Make sure this does not operate on empty parameters, and also log when removing states.
Jim Pingle
04:09 PM Bug #1659 (Feedback): Missing input validation in rules gateway selection
Should be all set, there was a unset of the input errors halfway the input validation that must have broken a lot of ... Seth Mos
09:31 AM Bug #1659: Missing input validation in rules gateway selection
Committed code in git that should fix most of this, shows only the correct address family when editing a pool or fire... Seth Mos
03:20 PM Revision defe335c: DNSMasq was generating the error 'Socket operation on non-socket' and using 100% of the CPU, changing it to mwexec_bg() resolves the issue.
Warren Baker
03:18 PM Revision 923d15bf: DNSMasq was generating the error 'Socket operation on non-socket' and using 100% of the CPU, changing it to mwexec_bg() resolves the issue.
Warren Baker
03:09 PM Bug #1660 (Feedback): Missing input validation in system_gateway_groups_edit.php
I've committed code to the gateway groups page that prevents you from adding different address families in the same g... Seth Mos
02:50 PM Feature #1726 (Resolved): Allow disabling the "Autonomous address-configuration"
Confirmed that my Macbook with 10.5 only has a link-local address when set to router-only. you can Still enable DHCP6... Seth Mos
02:14 PM Revision 52e21fa1: Fix VPN network listing for OpenVPN, and also add tunnel networks to this list.
Jim Pingle
02:13 PM Revision 0c074cfb: Fix VPN network listing for OpenVPN, and also add tunnel networks to this list.
Jim Pingle
01:26 PM Revision a1c10b7f: Properly fix the address family check for gateway groups Ticket #1659
Seth Mos
01:12 PM Revision 8c591d01: Unbreak firewall rules edit, missing a )
Seth Mos
01:07 PM Revision 16b03b79: Fix a typo in the subnet generation causing the code to fail
Seth Mos
12:31 PM Revision fcb816d9: Only show gateways from the same address family on the groups edit page. Ticket #1659
Seth Mos
12:04 PM Revision 6fd35fe3: These html tags are not required since they are used in head.inc which is included.
Warren Baker
12:01 PM Revision 2299007e: These html tags are not required since they are used in head.inc which is included.
Warren Baker
11:02 AM Revision 270a2576: Add address family validation, also hide gateways or gateway groups from the gateway list.
Fix Ticket #1659 Seth Mos
10:42 AM Revision 9e80d14c: Add address family input validation on the Gateways edit page, also prevent adding gateways on interfaces that do not carry that address family.
Fix Ticket #1633 Seth Mos
09:40 AM Revision bb5a2d0e: Automatically adjust the subnet size drop down when editing a entry
Ticket #1661 Seth Mos
09:36 AM Revision 1831a00d: Add Address Family input validation on the system routes edit page. Do not allow IPv4 subnet masks > 32 bits.
Ticket #1661 Seth Mos
08:51 AM Revision c935003d: Update the system.inc code that sets up the static routes for DNS servers to reflect the interface to gateway name conversion
Seth Mos
08:47 AM Revision 9d8ee15b: Fix the address family check to skip empty DNS gateway fieldS
Seth Mos
08:29 AM Revision d623f2da: Change the DNS interface code to DNS gateway code. This will need upgrade code for existing configs.
Seth Mos
07:43 AM Bug #1809: Growl issue
How are you testing Growl to say it is not working?
Growl creates a temp file (/var/db/growlnotices_lastmsg.txt) of... Warren Baker
06:41 AM Bug #1610: v6 IPsec tunnels can trap 12 the kernel
This affects the kernel in 2.0 which is currently also in use on 2.1 Seth Mos
06:40 AM Bug #1633 (Feedback): Missing input validation in IPv6 gateways
Code committed that prevents address family mixups in gateways and monitors, prevent v6 gateways on v4 only interfaces. Seth Mos
05:37 AM Bug #1661 (Feedback): Missing input validation in system_routes_edit.php
Code with address family validation checked in, please test. Seth Mos
04:49 AM Bug #1662 (Feedback): DNS server gateway selection missing input validation
Code checked in that converts the interface names to gateway names, updated the system.inc code that updates the rout... Seth Mos
03:47 AM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes
ronald meulendijks wrote:
> 0.0.0.0/0[any] 192.168.78.1[any] 255
> out ipsec
> esp/tunnel/95.96.134.40-91.189.22... Chunlin Yao
03:45 AM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes
Jim P wrote:
> Some people are still hitting this same error, but not this specific circumstance. Two support custom... Chunlin Yao
03:28 AM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes
My situation maybe related to this issues.
Mobile clients connect to pfSense use nat-t. I think racoon should supp... Chunlin Yao
03:45 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
Is there any progress on this issue? Derrick Conner
03:42 AM Feature #1807: Button needed for '-add a new one-' on the static IP configuration
Seems fair enough Seth Mos
03:40 AM Bug #1758: Upgrade fails to upgrade RRD data for traffic and packets
Caution, if the config is Upgraded on nanobsd platforms the converted RRD files are not immediately saved to the flas... Seth Mos

08/23/2011

08:38 PM Revision a5308b81: Simplify this code a bit, should be the same test in both locations since this should be either/or, and with the other code it can apparently fall into a trap where it shows neither.
Jim Pingle
08:36 PM Revision 28ce79ad: Simplify this code a bit, should be the same test in both locations since this should be either/or, and with the other code it can apparently fall into a trap where it shows neither.
Jim Pingle
06:46 PM Revision 318189b6: Add a function that allows you to validate the address family on 2 addresses or 1 address and a gateway name. the gateway name must be the 2nd argument.
Seth Mos

08/22/2011

06:11 PM Bug #1813: Static routes on WAN interfaces overridden by route-to for firewall-initiated traffic
floating rules can work around this Chris Buechler
05:50 PM Bug #1813 (Confirmed): Static routes on WAN interfaces overridden by route-to for firewall-initiated traffic
the 'pass out' rules such as:
pass out route-to ( em1 9.2.2.1 ) from 9.2.3.17 to !9.2.2.0/21 keep state allow-opt... Chris Buechler
12:37 PM Revision 9debac94: Fix field name label.
Jim Pingle
12:37 PM Revision b4eec6e6: Fix field name label.
Jim Pingle
11:07 AM Bug #781: Entering sim code problem on a Huawei E1752
Having same problem here with a novatel eu850d minipcie card, although PIN is deactivated.
When removing the "GetOK ... Christian Schwarz
03:56 AM Revision dba5f621: un-break services_dhcpv6.php
Chris Buechler

08/21/2011

11:43 PM Bug #1812 (Rejected): bug for ipv6 dhcpv6 & dhcpv6 lease shortcut
has to be a browser cache issue, they're there. Chris Buechler
11:36 PM Bug #1812 (Rejected): bug for ipv6 dhcpv6 & dhcpv6 lease shortcut
The dhcpv6 & dhcpv6 shortcut isn't present in the menu. but i have access if I type manualy the link in the address bar. Alexandre Paradis
06:28 PM Feature #1811 (Closed): Monitor PPP for connections stuck in "initial" state
I've been trying to help debug an issue with dynamic DNS updates on 3G connections (1545) but keep getting hampered b... Ross Williamson
06:10 PM Feature #1663: DHCPv6 relay
DHCP Relay page only has 4 fields which are all the same between v4 and v6 with the exception of input validation. I ... Chris Buechler
06:47 AM Feature #1663: DHCPv6 relay
I'll Investigate the needs. Page probably needs a total makeover because next to nothing that exists in ipv4 can be p... Seth Mos
04:45 PM Revision 4fcab77b: Unbreak the DNS rebind check when accessing over IPv4
Seth Mos
03:32 PM Revision 826ac52c: Add router type to rtadvd daemon configuration to only advertise the router without slaac.
Seth Mos
03:11 PM Revision fd1e6c05: Clarify advertising options, add router only type.
Seth Mos
01:11 PM Feature #1726 (Feedback): Allow disabling the "Autonomous address-configuration"
Added a "router" type that sends pinfoflags as being "". From the confusing documentation this might need to be "l" w... Seth Mos
06:38 AM Feature #1726: Allow disabling the "Autonomous address-configuration"
My thought was to add this as a choice from the drop down on the DHCP server page.
The config code currently does ... Seth Mos
11:36 AM Revision ac005767: Fix the redirect URL for IPv6 addresses Ticket #1583
Seth Mos
11:13 AM Revision e6f7e0be: Fix the referrer checks for IPv6 addresses Ticket #1583
Seth Mos
11:03 AM Revision 4cf79fdd: Fix the DNS rebind Check for IPv6 addresses Ticket #1583
Seth Mos
08:50 AM Revision 385ed7d0: Make sure to set the $pconfig prefix delegation setting from the config.
Seth Mos
08:28 AM Bug #1583 (Feedback): IPv6 IPs with :: trigger DNS rebinding
Committed patches for both rebind and referrer checks.
Added patch for redirect url. Seth Mos
06:58 AM Bug #1583: IPv6 IPs with :: trigger DNS rebinding
Confirmed that without a alternate port you do in fact trigger a DNS rebinding attack.
Found another gem related to ... Seth Mos
06:50 AM Bug #1661: Missing input validation in system_routes_edit.php
Will fix, same javascript helper from firewall rules and DNS server settings (gateway) would apply. Seth Mos
06:49 AM Bug #1662: DNS server gateway selection missing input validation
This same issue exists on the firewall rules (edit) page for selection of gateways.
I can fix the input validation... Seth Mos
06:45 AM Bug #1676: dead IPv6 gateway causes kernel panics
the sbappendaddr_locked() is a function that I believe comes from our one shot dumps patch which is active for our 2.... Seth Mos
06:41 AM Bug #1706 (Resolved): "Bypass firewall rules for traffic on the same interface" is broken
Resolved by a commit a week ago when I ran into this myself on my lab setup. Seth Mos
06:40 AM Bug #1725: DHCPv6 non-common bitmask shows incorrect range
The function that calculates this is currently a string operated function instead of proper math. We need to have thi... Seth Mos

08/20/2011

10:22 PM pfSense Packages Todo #596: Varnish package suggestions for VCL syntax checking
follow this forum topic:
http://forum.pfsense.org/index.php/topic,38271.15.html Marcello Silva Coutinho
10:11 PM pfSense Packages Todo #596: Varnish package suggestions for VCL syntax checking
> I work in a web shop design company and we use varnish as a reverse proxy for mostly sites builded using Drupal, Co... Marcello Silva Coutinho
04:49 PM pfSense Packages Bug #1805 (Closed): Captive portal - Portal page contents - View current page url is incorrect.
duplicate of #1810 Chris Buechler
07:52 AM pfSense Packages Bug #1805: Captive portal - Portal page contents - View current page url is incorrect.
to be more specific: select line 700 - 710 and replace by:... Davy Moedbeck
01:28 PM Revision 6f75aab2: Fix mismatched curly brace
Jim Pingle
08:13 AM Feature #1810 (Resolved): Captive portal - Portal page contents - View current page url is incorrect.
In the /usr/local/www/services_captiveportal.php file the link to the uploaded html can not be accessed from a networ... Davy Moedbeck
06:05 AM Bug #1809 (Closed): Growl issue
I reported Bug #1769 that Growl stopped working and it got rejected.
So I tried some other stuff and updated the bug... Richard van Herp
05:39 AM Revision b51960fe: remove dead link, no equivalent exists, will add info on that page's help
Chris Buechler
05:37 AM Revision 1caa6adc: remove dead link, no equivalent exists, will add info on that page's help
Chris Buechler
01:35 AM Bug #1808 (Resolved): link to scrub info is dead
fixed, thanks Chris Buechler
12:49 AM Bug #1808 (Resolved): link to scrub info is dead
There is a link in the "Disable Firewall Scrub" section of /system_advanced_firewall.php that points to http://www.op... David Burgess

08/19/2011

10:45 PM Revision 3de1a999: USB slices are under-reported even more than CF slices when viewed directly, instead of when looking at the entire disk. Compensate by adding a few MB. Fixes NanoBSD upgrades when installed on USB thumbdrives. (Imaged after this fix, someone can apply this fix locally and then upgrade as well.)
Jim Pingle
07:33 PM Revision b881a921: Compensate some more occurencies of write_config() during the path
Ermal LUÇI
07:02 PM Revision 2add8ea7: Make update_status and update_output_window consistent on checking for console version or not.
Ermal LUÇI
07:01 PM Revision 23fc1ae8: Show the package name that are geing downloaded even during console update
Ermal LUÇI
06:22 PM Revision 582934a9: Compenstate for the write_config calls sending the filesystem to ro during pacakge installation.
Ermal LUÇI
05:42 PM Revision d5f25de6: Put rw/ro calls on pkg_edit.php on POST to avoid packages having to do these calls.
Ermal LUÇI
05:12 PM Revision 8420f4fe: Prevent negative references to be used for the refcount API. This should help with misusage of it as may occur in mount rw/ro calls.
Ermal LUÇI
05:10 PM Revision 595ddf1b: start packages script is called after rc.bootup so the filesystem is makred RO already. Put the script around the mount rw-ro calls to avoid problems.
Ermal LUÇI
04:48 PM Feature #1807 (Resolved): Button needed for '-add a new one-' on the static IP configuration
Button needed for '-add a new one-' on the static IP configuration. Currently this is just a link and not entirely o... Bobby Weiter
10:59 AM Bug #1344: Replace prototype javascript code with jQuery
Nice javascript spinner http://fgnass.github.com/spin.js/ Scott Ullrich
10:40 AM Bug #1806: OpenVPN Tunnel Network label configuration creates a wrong configuration file when using TAP device mode
Those lines are from the OpenVPN log
/sbin/ifconfig ovpns2 3.3.3.5 *netmask 3.3.3.6* mtu 1500 up
/usr/local/sbin/... Rino Santilli
10:27 AM Bug #1806 (Resolved): OpenVPN Tunnel Network label configuration creates a wrong configuration file when using TAP device mode
When creating a *layer 2 tunnel using TAP devices in peer-to-peer shared key mode* you get a warning in the OpenVPN l... Rino Santilli
08:09 AM pfSense Packages Bug #1805 (Closed): Captive portal - Portal page contents - View current page url is incorrect.
In the http://pfsense.local/services_captiveportal.php file there is an incorrect part:
the lines 701 till 709 nee... Davy Moedbeck
07:11 AM Bug #1804 (Rejected): DNS forwarder
Please post in the forum to rule out a configuration issue and to gather more information. If it's determined that a ... Jim Pingle
05:02 AM Bug #1804 (Rejected): DNS forwarder
I am on latest RC3 - I just discovered DNS forward is completely non-functional.
I am using 2 WAN (WAN+Opt2)- balanc... Sangye Ngawang

08/18/2011

09:18 PM Revision 3d749ab3: Fix copy paste error which cleared args
Andrew Thompson
09:18 PM Revision 237ac198: Fix copy paste error which cleared args
Andrew Thompson
03:24 PM Bug #1279 (New): Filesystem on NanoBSD is left read/write at first bootup after package reinstallation
It ends up read only but it breaks many other things if you upgrade with packages. GUI doesn't load, many processes d... Jim Pingle
11:47 AM Revision 6d063da3: Calculate the possible subnet ids from the delegated prefix length for the dropdown
Seth Mos
10:50 AM Revision 3dda090b: Add DHCP6 to the default configuration
Seth Mos
10:10 AM Revision 302d646e: Make sure to wait for the interface to be really created before letting the function return for PPP(oE) interfaces.
Seth Mos
09:54 AM Bug #1802: Interface not showing in traffic shaper
Yeah, unfortunately that is the case, axe(4) doesn't support altq. Was worth double checking though. Jim Pingle
09:52 AM Bug #1802: Interface not showing in traffic shaper
From the dmesg output I get, the NIC is using the Axe driver. So, no ALTQ support.
axe0: <vendor 0x0b95 product 0x... Jonathan Frank
09:48 AM Bug #1802 (Closed): Interface not showing in traffic shaper
They all call themselves ue0 now I see. If you look in dmesg there would be a line saying what driver it actually is.... Jim Pingle
09:44 AM Bug #1802: Interface not showing in traffic shaper
It use the "ue", which is not listed in the ALTQ supported driver list. Jonathan Frank
08:42 AM Bug #1802: Interface not showing in traffic shaper
What driver does the network card use? It would be something like aue0, etc. We can double check the driver to see if... Jim Pingle
08:34 AM Bug #1802: Interface not showing in traffic shaper
After doing more research, it seem like not all drivers/network cards are supporting ALTQ, so that must be the issue.... Jonathan Frank
08:21 AM Bug #1802 (Closed): Interface not showing in traffic shaper
Hi,
I recently installed pfSense 2.0 and am using an USB network card for testing purpose. I noticed that the inte... Jonathan Frank
09:39 AM Revision 5a3031ea: Make sure that we disable accepting router advertisements unless we explicitly enable them
Seth Mos
08:15 AM Revision 49047fb4: Add a log message when we enable router advertisements for a interface
Seth Mos
08:11 AM Revision 5f24a4de: Disable the rc.newwanipv6 script called from the dhcp6 client, this causes a recursing configure.
Seth Mos
07:19 AM Revision 12de53a8: Remove the gateway check here and always show the prefix delegation ID. Alternative we should consider a dhcp-pd type for the interface v6 address. Using a FE80::1 as the interface address for now.
Seth Mos
07:17 AM Revision 37fb708c: Add debugging to interface down function, add support for the type6 = dhcp6.
This really needs to be sorted out in a better way taking both v4 and v6 into consideration simultaneously. Seth Mos
06:55 AM Revision b868d9a0: Add the dhcp6 firewall rules so the client can get out.
Add a type6 field so that we can distinguish the ipv6 configuration types Seth Mos
02:28 AM Revision 35627492: fix text
Chris Buechler
02:28 AM Revision 2a5d416d: fix text
Chris Buechler

08/17/2011

09:49 PM Feature #828 (Resolved): Import for User Certificates
Chris Buechler
09:32 PM Feature #1801 (Rejected): Intermediate SSL certs box
Hello, it would be great to have a box in the certificate creation page to include intermediate certs.
forum threa... Alexandre Paradis
08:15 PM Revision e15e9c6b: Ticket #1279. Decrease the refcount even though we're in booting phase. This helps the refcount to work as intended and help in making filesystem read only correctly on embedded platfroms. While here put some exceptions to refcount API and silent any related errors that might trigger. Also take not of the NOTE on the php manual that after a share memory is opened further references to it for size and access mode should be 0.
Ermal LUÇI
08:09 PM Revision e1b068d7: Ticket #1279. Decrease the refcount even though we're in booting phase. This helps the refcount to work as intended and help in making filesystem read only correctly on embedded platfroms. While here put some exceptions to refcount API and silent any related errors that might trigger. Also take not of the NOTE on the php manual that after a share memory is opened further references to it for size and access mode should be 0.
Ermal LUÇI
05:15 PM Revision 86e1405d: Include the rate output in the privilege for the traffic graph.
Jim Pingle
05:14 PM Revision 8e95a671: Include the rate output in the privilege for the traffic graph.
Jim Pingle
05:14 PM Bug #1107: mpd on AMD64 generates invalid checksums with NAT
See also #1336 Jim Pingle
04:09 PM Bug #1279 (Feedback): Filesystem on NanoBSD is left read/write at first bootup after package reinstallation
I put a fix that helps this.
Can you please try with latest snapshots? Ermal Luçi
03:23 PM Feature #1787: Everyone with access to user manager has full admin rights
That's just a fact of how it works, not a bug. If you have access to the user manager you have full admin rights. Chris Buechler
03:08 PM Feature #1787: Everyone with access to user manager has full admin rights
There are only a few things I have changed. I think this problem is not dependend on the configuration. To test this ... Hans-Harald Webers
11:30 AM Feature #1787: Everyone with access to user manager has full admin rights
Can you describe how you have setup your firewall that gives you this issue? Ermal Luçi
11:15 AM Feature #1787 (Closed): Everyone with access to user manager has full admin rights
In some scenarios, it's undesirable for user manager users to have full admin capabilities, such as managing CP users... Hans-Harald Webers
03:18 PM Bug #1767: Unable to modify pppoe interface which is linked to a vlan via WebGUI
This is not expected to work on 2.0.
The way you should do is assign the vlan and then go and create a PPP type li... Ermal Luçi
03:10 PM pfSense Packages Bug #1590: Snort Will Not Start
amd64
pfsense rc3
Snort
Notes:
Snort seems to be still down
alerts tab clear log seems to be broken not availible
01:07 AM pfSense Packages Bug #1590: Snort Will Not Start
the only snag that I think *might* cause an issue is a future rules update since that flushes the rules folder. if l... Brett Ussher
12:44 AM pfSense Packages Bug #1590: Snort Will Not Start
Another update. Just tried rebooting the server -- no updates were done or any changes to configuration or addition/... Brett Ussher
11:38 AM Feature #1184: Certificate Manager - Ability to add nsCertType=SERVER extension to certificates
That may be possible, it would have to be tested to make sure it really works though. I haven't looked at this since ... Jim Pingle
11:33 AM Feature #1184: Certificate Manager - Ability to add nsCertType=SERVER extension to certificates
Since we know in advance what kinds of extensions we want, they should all be specified in the openssl.cnf, but in di... George Macon
10:35 AM Bug #1786 (Rejected): NanoBSD auto upgrade fails
Auto upgrade works fine, I just tested it on my alix again. You may have a problem specific to your system or CF. Ple... Jim Pingle
10:09 AM Bug #1786 (Rejected): NanoBSD auto upgrade fails
I installed
2.0-RC3 (i386) built on Tue Aug 16 20:24:26 EDT 2011
on a Netgate ALIX.2D3 / 2D13.
by dd the image... Bill Weidman
09:02 AM Revision 4bd491a3: Comment out code that seems to not be anymore useful. Remove later on if no complaints in sight.
Ermal LUÇI
09:01 AM Revision c63630f0: Comment out code that seems to not be anymore useful. Remove later on if no complaints in sight.
Ermal LUÇI
02:15 AM Revision 7734aea6: Make initial changes to allow pfSense to work in a jail.
This mostly avoids starting things that will not work and gets the
initial config. Most of the pfSense functionality ... Andrew Thompson
02:12 AM Revision 3c6d704a: Revert "Make initial changes to allow pfSense to work in a jail."
This reverts commit a26d95383a6146734f67c9db21cd83534052843a. Andrew Thompson
02:07 AM Revision a26d9538: Make initial changes to allow pfSense to work in a jail.
This mostly avoids starting things that will not work and gets the
initial config. Most of the pfSense functionality ... Andrew Thompson

08/16/2011

10:05 PM Revision 487830da: Allow custom dnsmasq options so ppl can set SRV records and such for xmpp/kerberos
Andrew Thompson
10:02 PM Revision 8f9bffbc: Allow custom dnsmasq options so ppl can set SRV records and such for xmpp/kerberos
Andrew Thompson
07:01 PM pfSense Packages Bug #1590: Snort Will Not Start
I used the above command, which fixed that issue. However, after turning on some more Snort rules categories, when I... Brett Ussher
05:06 PM Revision 2a319b4f: Fix the filter rules to trigger for the right address family
Seth Mos
03:37 PM pfSense Packages Bug #1768: DNS Forwarder of Tinydns
Any news on this?
I would really like to patch the stuff and make it work. All I'm waiting for is some response on... Oliver Loch
08:58 AM Bug #636: layer7 not work correctly
Hi all,
I tried with version:
2.0-RC1-IPv6 (amd64)
built on Mon Aug 15 22:32:41 EDT 2011
This seems definitely... Peter Baumann
06:05 AM Bug #1773 (Resolved): wrong URL is displayed for web interface access at console for DHCP
After going through the Set IP address at the console and configuring an interface for DHCP, the displayed URL is wro... Chris Buechler
05:52 AM Bug #1407 (Resolved): GUI is sluggish without working DNS
When having localhost as a first server in resolv.conf, as is done on latest snapshots, this bug does not manifest.
... Ermal Luçi
05:13 AM Bug #1407: GUI is sluggish without working DNS
Hi all,
I just tested successfull with the following snapshot:
2.0-RC3 (amd64)
built on Mon Aug 15 22:32:41 EDT ... Peter Baumann

08/15/2011

08:23 PM Revision 0e12792d: Unbreak filter.inc. Pointy-hat ?
Ermal LUÇI
08:23 PM Revision 7a787c58: Resolves #1731. Correctly handle nested alias that have hostnames. While here prevent putting duplicated dns hostnames under the same table to prevent possible hickups and save double work.
Ermal LUÇI
08:16 PM Revision 24a682d3: Resolves #1731. Correctly handle nested alias that have hostnames. While here prevent putting duplicated dns hostnames under the same table to prevent possible hickups and save double work.
Ermal LUÇI
07:36 PM Revision 619e4229: Revert "Feature#1603. URL table aliases should be usable within network type aliases."
This reverts commit ae660b3ce7d7e2b1f34cb9f1b52eb4ce21e17c42. Ermal LUÇI
07:32 PM Revision df58fd46: Revert "Feature #1603. Correct nested urltable alias code to be more fullproof to errors and does not break the ruleset on large lists of urltables. Though this needs a revisit to work properly since it breaks urltable alias property of reloading contents."
This reverts commit 3a26fb7f03a0336ed8dd642c46c6e513fca794da. Ermal LUÇI
07:21 PM Revision 460082ce: Another roll at fixing the voucher sync problems.
Ermal LUÇI
07:20 PM Revision 6dd45e0d: Another roll at fixing the voucher sync problems.
Ermal LUÇI
06:22 PM Revision 1e37f324: Unbreak interfaces.php
Seth Mos
06:07 PM Revision 52a1f701: Fix broken static route bypass rules
Seth Mos
04:20 PM Bug #1731: Hostnames are not allowed access when using an Alias in an Alias
Applied in changeset commit:24a682d3b646b61f9f3fdf787113b3861bb3be09. Ermal Luçi
04:20 PM Bug #1731 (Feedback): Hostnames are not allowed access when using an Alias in an Alias
Applied in changeset commit:7a787c581eb272e7dba5fe83994e129db06bfb2c. Ermal Luçi
03:44 PM Bug #1629: invalid state table entries after WAN IP change
From the attached:
- What is the old gateway?
- What is the new gateway?
- What is the wrong entry?
 Ermal Luçi
03:40 PM Feature #1603: URL table aliases should be usable within network type aliases
Reverted the changes. Ermal Luçi
01:55 PM Revision 8103bd1e: Reflect the changes in the UI page that IPv4 and IPv6 are no lounger coupled together. They are now 2 seperate switch() statements.
This should also allow for toggling the dhcp6 client on a PPPoE interface Seth Mos
01:54 PM Revision 20b49b17: Fix a typo that caused stripping of the v4 config
Seth Mos
01:01 PM Bug #1771 (Rejected): OpenVPN and PPPoE Wan Interface
The GUI always binds to 443 on all interfaces. The fact that it works at all in that configuration is surprising. As ... Jim Pingle
12:53 PM Bug #1771 (Rejected): OpenVPN and PPPoE Wan Interface
Hi,
if a pppoe interface is used as wan interface and OpenVPN is attached to the wan interface on port 443/tcp (wh... Oliver Loch
12:15 PM Revision e029943a: Split the IPv4 and IPv6 configuration out into 2 seperate drop downs.
Seth Mos
11:04 AM Bug #1769: Growl stopped working
Well yes and no :)
I reinstalled the system (2.0 RC1) and it worked, I updated to 2.0 RC3 and it still worked, tha... Richard van Herp
06:05 AM pfSense Packages Bug #1770: Can not install package Country Block
make sure you post this in the country block thread on the forum, the maintainer of that package doesn't watch ticket... Chris Buechler
05:49 AM pfSense Packages Bug #1770 (Resolved): Can not install package Country Block
Can not install package Country Block.... Andrey Shimanskiy

08/14/2011

09:35 PM pfSense Packages Bug #1590: Snort Will Not Start
This issue is back again in RC3. I found the following fix in the forums:
http://forum.pfsense.org/index.php?topi... Brett Ussher
07:20 PM Bug #1769 (Rejected): Growl stopped working
works fine on that snapshot. Chris Buechler
09:35 AM Bug #1769 (Rejected): Growl stopped working
I just noticed that Grow will not display a message but only registrar itself.
To be sure it's not Lion I tried to s... Richard van Herp
07:18 PM Bug #1425: pfSense stops receiving traffic on 'bge' driven interface
Also, just as an aside, I was unable to trigger the issue using generated traffic from iperf. I tried to generate bot... Chris Smith
07:14 PM Bug #1425: pfSense stops receiving traffic on 'bge' driven interface
Disabling msix on our system caused serious problems (we also have igb Intel Pro cards in these systems which I suspe... Chris Smith
05:14 PM pfSense Packages Bug #1218: Freeradius package does not start when i do reboot
This bug is stila actual on RC-3.
The webGUI shows freeRADIUS running but clients cannot authenticate anymore. This ... Alexander Wilke
03:20 AM Bug #1545: Dynamic DNS updates fail on 3G connections
Dynamic DNS does not update without manual intervention on Aug 12 build Ross Williamson

08/13/2011

11:46 PM Bug #1618 (Resolved): Captive portal: Invalid AVP value in Radius accounting packet
confirmed fixed Chris Buechler
11:00 PM Bug #1618: Captive portal: Invalid AVP value in Radius accounting packet
Serge: can you confirm this fix please? Chris Buechler
11:31 PM Bug #1193 (Resolved): Traffic Shaper default queue Problem
Chris Buechler
11:31 PM Bug #1744 (Closed): Upgrading
Chris Buechler
11:12 PM Bug #1744: Upgrading
I haven't seen any package reinstall issues in general of late, sounds like this one may be something specific to tha... Chris Buechler
11:30 PM Bug #1628 (Resolved): Static ARP entries need reapplied after link loss
Chris Buechler
11:29 PM Bug #1336 (Closed): PPTP VPN NAT on WAN or other external interface
this is the same as #1107, closing in favor of that one. Chris Buechler
11:26 PM Bug #1552: DNS Reject Rule Crashes Router
Aaron - is this fixed?
Chris Buechler
11:26 PM Bug #1707 (Resolved): Pfsense 2.0 RC3 keeps route of deleted openvpn server
Chris Buechler
11:23 PM Bug #1401 (Feedback): VLANs and Web settings "TCP Segmentation Offload"
Chris Buechler
11:22 PM Bug #1666 (New): OpenVPN interface doesn't get added to bridge after reboot
Chris Buechler
11:22 PM Bug #1564 (Resolved): rc.stop_packages causes reboot to only works from SSH, not from Web interface
Chris Buechler
11:21 PM Bug #1097 (Closed): Onload Javascript on Rules page of management GUI
Chris Buechler
11:21 PM Bug #1402 (Closed): When creating a QinQ it works until reboot.
Chris Buechler
11:20 PM Bug #802 (Resolved): Interface reassignment with VLANs after config restore to diff hardware doesn't work
Chris Buechler
11:18 PM Bug #1239 (Resolved): PPTP - Assign password to a user with ñ
Chris Buechler
11:17 PM Bug #1107 (New): mpd on AMD64 generates invalid checksums with NAT
Chris Buechler
11:16 PM Bug #455 (Closed): On initial wizard reload button do not put browser on new assigned ip.
Chris Buechler
11:15 PM Bug #1243 (Resolved): GUI/Backend code needs updated after multi-PPPoE-server code switch
Chris Buechler
11:15 PM Bug #1377 (Closed): upgrade 1.2.3-Final nanobsd 4g to 2.0-RC1 nanobsd 4gb fails
Chris Buechler
11:15 PM Bug #886 (Resolved): RRD graph generation time scaling not written correctly
Chris Buechler
11:13 PM Bug #1047 (Resolved): Disable TSO, hardware checksum don't work for unassigned but active interfaces
Chris Buechler
11:13 PM Bug #1577 (Resolved): Inserting any rules on VPN PPPoE interface cause filter not reload
Chris Buechler
11:13 PM Bug #1426 (Resolved): IPsec descriptions need trimmed in rule labels
Chris Buechler
11:12 PM Todo #576 (Resolved): Make sure IPsec upgrade code properly handles mobile clients
Chris Buechler
11:09 PM Bug #1437: More validation needed on CSR generation
Yehuda - is this fixed? Chris Buechler
11:08 PM Feature #1260 (Resolved): Allow other Backends for Remote Access ( SSL/TLS + User Auth )
Chris Buechler
11:08 PM Bug #1251 (Resolved): /tmp/post_upgrade_command.php is not executing when going from 1.2.3 to 2.0
Chris Buechler
11:08 PM Bug #1417 (Resolved): OpenVPN client specific overrides doesnt work by default
Chris Buechler
11:07 PM Bug #1639 (Resolved): Port alias missing input validation in firewall_rules_edit.php
Chris Buechler
11:01 PM Bug #1598 (Resolved): IP Alias VIP configured on a CARP VIP, resets CARP VIP on sync
Chris Buechler
10:59 PM Bug #1614 (Resolved): "pptp clients" macro for firewall rules does not work
Chris Buechler
10:58 PM Bug #1515 (Resolved): Upgrading from 1.2.3, Load Balancer Pool to Gateway Group needs to strip invalid characters
Chris Buechler
10:58 PM Bug #1439 (Resolved): WAN PPPoE config dropped on update from 1.2.3 (nanobsd) to 2.0-RC1 (snapshot 20110415-1518)
Chris Buechler
10:58 PM Bug #1724 (Closed): Adding new gateway throws JS error in Chrome
no one else is seeing this Chris Buechler
10:57 PM Bug #1648 (Resolved): NAS IP setting
Chris Buechler
10:56 PM Bug #1696: Panic when finishing setup wizard with PPPoE WAN
I can still replicate this. If the WAN is set to PPPoE and you run through the setup wizard leaving the same settings... Chris Buechler
10:47 PM Feature #1603 (New): URL table aliases should be usable within network type aliases
This needs to be backed out and moved to target 2.1 for fixing, putting URL table aliases within network aliases resu... Chris Buechler
01:09 PM pfSense Packages Bug #1768 (Resolved): DNS Forwarder of Tinydns
Hello,
just playing around with the TinyDNS package on pfs and found some "issues":
As far as I got it, the ide... Oliver Loch
01:21 AM pfSense Packages Bug #1587 (Resolved): The openvpn client configuration exporter doesn't enforce TLS subject verification
Chris Buechler
01:20 AM pfSense Packages Bug #1742 (Resolved): Installation of Varnish on pfS RC broken and makes machine unusable
Chris Buechler

08/12/2011

02:32 PM Revision af6576a8: Also only add 127.0.0.1 as a DNS server if dnsmasq (DNS Forwarder) is enabled.
Jim Pingle
02:31 PM Revision 6a4ec785: Also only add 127.0.0.1 as a DNS server if dnsmasq (DNS Forwarder) is enabled.
Jim Pingle
11:57 AM Revision 37f33271: Correct the link generation. Reported-by: http://forum.pfsense.org/index.php/topic,39855.0.html
Ermal LUÇI
11:57 AM Revision 704143f5: Correct the link generation. Reported-by: http://forum.pfsense.org/index.php/topic,39855.0.html
Ermal LUÇI
11:53 AM Revision bf866028: Remove a slipped in text that confuses people
Ermal LUÇI
11:53 AM Revision 14f62733: Remove a slipped in text that confuses people
Ermal LUÇI
11:47 AM Revision 6c86a39f: Allow disabling having localhost in resolv.conf. There are some special setups that might need this.
Ermal LUÇI
11:46 AM Revision 89289853: Allow disabling having localhost in resolv.conf. There are some special setups that might need this.
Ermal LUÇI

08/11/2011

09:41 PM Revision f61dc8e6: Resolves #1193. Properly warn about duplicate default queue
Ermal LUÇI
09:39 PM Revision 401869ec: Resolves #1193. Properly warn about duplicate default queue
Ermal LUÇI
07:48 PM Revision 30696466: Fix description
Jim Pingle
07:47 PM Revision 221b170b: Fix description
Jim Pingle
07:29 PM Revision ea8eef6f: Move these permissions to user.priv.inc so they don't get blasted when priv.defs.inc is automatically regenerated.
Conflicts:
etc/inc/priv.defs.inc Jim Pingle
07:26 PM Revision 84d86f07: Fix missing $ on variable.
Jim Pingle
07:25 PM Revision 9a26f342: Move these permissions to user.priv.inc so they don't get blasted when priv.defs.inc is automatically regenerated.
Jim Pingle
07:25 PM Revision d6c311d3: Fix missing $ on variable.
Jim Pingle
06:04 PM Revision aeb6ffe2: Populate pconfig in all cases with user info, or else when you delete a privilege, the list disappears until you go back and edit the user again. (Certs too)
Jim Pingle
06:04 PM Revision 5574e742: Sort user privileges so dashboard/index.php come first, so if a user has those permissions, they get redirected there first and not to another page.
Jim Pingle
06:03 PM Revision adacdf5f: Populate pconfig in all cases with user info, or else when you delete a privilege, the list disappears until you go back and edit the user again. (Certs too)
Jim Pingle
06:02 PM Revision 3f109700: Sort user privileges so dashboard/index.php come first, so if a user has those permissions, they get redirected there first and not to another page.
Jim Pingle
05:56 PM Bug #749: Downstream queues should not be assigned to LAN interfaces
Well making p2pcatch all only valid for Wan->Lan traffic is not easily possbile today.
It certainly would be possibl... Ermal Luçi
05:40 PM Bug #1193: Traffic Shaper default queue Problem
Applied in changeset commit:401869ec326193cac13fbe4b6e2c8c879039445a. Ermal Luçi
05:40 PM Bug #1193: Traffic Shaper default queue Problem
Applied in changeset commit:f61dc8e6d638949866fdcb61c05c9d5905a48a80. Ermal Luçi
04:01 PM Revision 5457129f: Add Dashboard privilege which is a collection of all required pages for the dashboard. Partial fix for ticket #620 - may do something more for 2.1
Jim Pingle
03:59 PM Revision 72f7c837: Add Dashboard privilege which is a collection of all required pages for the dashboard. Partial fix for ticket #620 - may do something more for 2.1
Jim Pingle
03:44 PM Revision cfb5b1b1: Fix privilege matching so that it respects wildcards better, especially when leading.
Jim Pingle
03:44 PM Revision 3f655b44: Fix privilege matching so that it respects wildcards better, especially when leading.
Jim Pingle
03:36 PM Bug #1741 (Feedback): Default page when not authorised
If the user has either the Login/Logout, or the new Dashboard privilege, those now get sorted first in the list when ... Jim Pingle
01:28 PM Bug #1421 (New): Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
Jim Pingle
05:54 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
please change status to new,because it's unresolved Hafiz Rafiyev
12:39 PM Feature #620: No privilege choice to allow access to Dashboard
This should be worked around for now on 2.0/2.1 but if there is a more elegant long-term solution for 2.1 that would ... Jim Pingle
10:43 AM Revision d560b783: Syncrhonize the information with the wizards xml. Reported-by: http://forum.pfsense.org/index.php/topic,39176.msg205359.html#msg205359
Ermal LUÇI
10:42 AM Revision a020b638: Syncrhonize the information with the wizards xml. Reported-by: http://forum.pfsense.org/index.php/topic,39176.msg205359.html#msg205359
Ermal LUÇI
10:40 AM Bug #1767: Unable to modify pppoe interface which is linked to a vlan via WebGUI
Hi Oliver,
from the view of the WAN interface sis0_vlan7 is a network port and the name of this network port was c... Willy Tenner
07:53 AM Bug #1767: Unable to modify pppoe interface which is linked to a vlan via WebGUI
Hi,
IMHO it's not a real bug - it's just the way it's configured. You create a VLAN and then you assign the VLAN i... Oliver Loch
07:45 AM pfSense Packages Bug #1764: Wrong version of squid3 among the packages for pfSense 1.2.3
No, I mean the squid3 package has been broken in some fashion the majority of the time, and when it works, you're luc... Jim Pingle
03:47 AM pfSense Packages Bug #1764: Wrong version of squid3 among the packages for pfSense 1.2.3
Fulvio Scapin wrote:
> Jim P wrote:
> > Squid 3 is not and has never been recommended for general use. It's experim... Fulvio Scapin
03:46 AM pfSense Packages Bug #1764: Wrong version of squid3 among the packages for pfSense 1.2.3
Jim P wrote:
> Squid 3 is not and has never been recommended for general use. It's experimental at best. Please use ... Fulvio Scapin

08/10/2011

09:04 PM Bug #1759: PPPoE not working
Yup. Works. Thanks. Oliver Loch
05:23 PM Bug #1759 (Resolved): PPPoE not working
Chris Buechler
05:18 PM Bug #1759: PPPoE not working
Hi,
I've just updated to the latest snapsphot version "Wed Aug 10 12:23:51 EDT 2011" (*pfSense-Full-Update-2.0-RC3... Scott Douglas
06:06 PM Bug #749: Downstream queues should not be assigned to LAN interfaces
It seems to me that you are saying that p2p catch all and not shaping Lan to Lan traffic are mutually exclusive then.... Josh Stompro
05:34 PM Bug #749: Downstream queues should not be assigned to LAN interfaces
Probably yes.
But that is what it does if you select it.
Meaning that qP2P will become default queue if you enable... Ermal Luçi
03:10 PM Revision 71893063: Fix priv name
Jim Pingle
03:10 PM Revision dd7d1178: Fix priv name
Jim Pingle
03:06 PM Revision 422ea9a8: Add privilege to directly access dashboard widgets if needed for ajax.
Jim Pingle
03:05 PM Revision 9a08ea71: Add privilege to directly access dashboard widgets if needed for ajax.
Jim Pingle
03:05 PM Revision 3861883b: Make this box much bigger, it's hard to find things in the tiny window with a long list.
Jim Pingle
03:04 PM Revision 675b5fa6: Make this box much bigger, it's hard to find things in the tiny window with a long list.
Jim Pingle
02:54 PM Revision b1e10d63: If a user has access to RRD graphs, also let them access the actual RRD graph images.
Jim Pingle
02:54 PM Revision 8fa9b3e7: If a user has access to RRD graphs, also let them access the actual RRD graph images.
Jim Pingle
02:41 PM Revision 3d2ec65e: Log when a user tries to access an unauthorized page.
Jim Pingle
02:40 PM Revision 0d4f348f: Log when a user tries to access an unauthorized page.
Jim Pingle
09:45 AM pfSense Packages Bug #1766 (Feedback): Minor bug - siproxd prints out error message when siproxd_generate_rules called with "pfearly"
Applied in changeset commit:e59953342fc399c119766363a3815f7335b07951. Jim Pingle
02:51 AM pfSense Packages Bug #1766 (Resolved): Minor bug - siproxd prints out error message when siproxd_generate_rules called with "pfearly"
I have pfSense 2.0 with siproxd and noticed the following in the system log when siproxd start up is processed:
<p... Matt Hoskins
08:29 AM Bug #1767: Unable to modify pppoe interface which is linked to a vlan via WebGUI
Not that it matters to the real bug here, but "configure a null service name" is now the default behavior if the serv... Jim Pingle
06:30 AM Bug #1767 (Resolved): Unable to modify pppoe interface which is linked to a vlan via WebGUI
In Germany our VDSL provider (T-Com) is using VLAN id 7 for connecting to the internet. So I created VLAN 7 with pare... Willy Tenner
04:57 AM Bug #1705: Multi-WAN Failover loses default route
Chris - Thanks for letting me know. I have been looking through the forums, but nothing there works for me for some ... Mike Brady
02:58 AM Bug #1744: Upgrading
Package not found error still present with today's (built on Tue Aug 9 15:52:55 EDT 2011) build.
Upgrade was faster,... Lo Zio
02:51 AM Bug #1760 (Resolved): pftop shows "(null)" on recent snapshots
Chris Buechler

08/09/2011

09:13 PM Revision 3bb423f0: fixed corrected name of ioncube module
Luiz Gustavo S. Costa
09:08 PM Revision 277ee858: fixed corrected name of ioncube module
Luiz Gustavo S. Costa
09:00 PM Revision d78df7b9: Make the checks during step4 and step5 actually work.
Ermal LUÇI
09:00 PM Revision 577c402d: Make the checks during step4 and step5 actually work.
Ermal LUÇI
06:01 PM Revision ae21b289: Correct world of wordcraft rule description array. Reported-by: http://forum.pfsense.org/index.php/topic,39176.0.html
Ermal LUÇI
06:01 PM Revision 78b33bd0: Correct world of wordcraft rule description array. Reported-by: http://forum.pfsense.org/index.php/topic,39176.0.html
Ermal LUÇI
05:09 PM Bug #1193: Traffic Shaper default queue Problem
Testing 2.0-RC3 I386 Built on Mon Aug 8 19:26:45 EDT 2011 nanobsd 2g
The logic to not show the default queue check... Josh Stompro
03:59 PM Bug #1636: outbound state timeout control not possible?
this isn't the place to ask questions, please post to the forum or mailing list. Chris Buechler
12:55 PM Bug #1636: outbound state timeout control not possible?
I too agree with Adam. I have this problem all the time with my SIP connection. It keeps dropping. Have not timed it ... Peter Brauner
12:51 PM pfSense Packages Bug #1765 (Resolved): Unable able to clear Snort Alerts
Unable to clear the Snort Alert log. After clicking on Clear and Ok, you are brought to a blank page. Going back to t... Cino .
11:51 AM Bug #749: Downstream queues should not be assigned to LAN interfaces
https://github.com/bsdperimeter/pfsense/commit/8fd84f8778dde3f1c62934c1c2ae687bc5c0f51f
Testing the changes made i... Josh Stompro
09:59 AM pfSense Packages Bug #1764: Wrong version of squid3 among the packages for pfSense 1.2.3
Squid 3 is not and has never been recommended for general use. It's experimental at best. Please use squid 2.9.x if y... Jim Pingle
09:57 AM pfSense Packages Bug #1764 (Resolved): Wrong version of squid3 among the packages for pfSense 1.2.3
Same issue resolved with this commit:
http://redmine.pfsense.org/projects/pfsense-packages/repository/revisions/3bd2... Fulvio Scapin
08:58 AM Bug #1745: various Kernel panics with 2 identical NICs
Sorry for posting in the wrong place. And thanks for providing the pointer to more info! Andreas Bochem
08:32 AM Bug #1336 (New): PPTP VPN NAT on WAN or other external interface
Switching this back to New since the patch had to be backed out for now - it appears to have been negatively impactin... Jim Pingle
01:09 AM Bug #1705: Multi-WAN Failover loses default route
Mike - what you're describing is the correct default behavior. This ticket is about a non-default option that we do n... Chris Buechler
12:35 AM Bug #1705: Multi-WAN Failover loses default route
I should also say that the pppoe link is being taken down by unplugging the cable. When the cable is reconnected the... Mike Brady
12:11 AM Bug #1705: Multi-WAN Failover loses default route
I have also observed this with 2.0RC3.
In my case the tier 1 interface is pppoe. When it is taken down the defaul... Mike Brady

08/08/2011

05:55 PM Revision a92276d2: Start NTPd after dns since its a requirment and latest changes should help with delays people are reporting. Reminded-by: Jim
Ermal LUÇI
05:55 PM Revision b69374f9: Start NTPd after dns since its a requirment and latest changes should help with delays people are reporting. Reminded-by: Jim
Ermal LUÇI
05:19 PM Revision 8e866217: When clicked allow overriding of dns servers by dynamic WANs still configure the other dns servers so in multi-WAN environments dns has a chance to work still.
Ermal LUÇI
05:19 PM Revision b03bf7ab: When clicked allow overriding of dns servers by dynamic WANs still configure the other dns servers so in multi-WAN environments dns has a chance to work still.
Ermal LUÇI
05:16 PM Revision 8ac329da: Tell the local system to use the locally running dns forwarder as a primary source. This should help ticket #1407
Ermal LUÇI
05:15 PM Revision 6265b041: Tell the local system to use the locally running dns forwarder as a primary source. This should help ticket #1407
Ermal LUÇI
04:24 PM Revision a7702ed5: Correct array key typo mistake. Ticket #1052
Ermal LUÇI
04:24 PM Revision 5e17f20d: Correct array key typo mistake. Ticket #1052
Ermal LUÇI
02:14 PM Bug #1759: PPPoE not working
Please try a snapshot from tomorrow it should be back to working.
Thanks for your efforts. Ermal Luçi
01:53 PM Bug #1759: PPPoE not working
Hi,
just tested it. The latest working kernel is from July, 27th 2011. The one from the August, 6 2011 snapshot is... Oliver Loch
01:38 PM Revision 985d6e18: Show the CP User count in the page title, as on 1.2.3.
Jim Pingle
01:37 PM Revision b48b79c2: Show the CP User count in the page title, as on 1.2.3.
Jim Pingle
01:21 PM Bug #636: layer7 not work correctly
Try a snapshot from tomorrow since the port was not rebuild it seems. Ermal Luçi
01:18 PM Bug #1760 (Feedback): pftop shows "(null)" on recent snapshots
Please test next coming snapshots it should be fixed. Ermal Luçi
12:35 PM Bug #1760: pftop shows "(null)" on recent snapshots
It just needs a port rebuild of pfTop. Ermal Luçi
01:17 PM Bug #1407 (Feedback): GUI is sluggish without working DNS
Please test latest snapshots fixes have been pushed there. Ermal Luçi
07:53 AM Bug #1052: Certificate validation of the LDAPS servers is not enforced
Ermal Luçi wrote:
> That is because you have to select the CA to use under system->User manager->Servers.
>
> Tha... Florent Daigniere
07:33 AM Bug #1052: Certificate validation of the LDAPS servers is not enforced
That is because you have to select the CA to use under system->User manager->Servers.
That will force to use a pol... Ermal Luçi
12:24 AM pfSense Packages Bug #1753: Spoink integration
I'm getting the same error -- however only if I check "Block offenders" (Checking this option will automatically bloc... chris hamilton

08/07/2011

04:54 PM Feature #1761 (Rejected): Allow packages files and configuration synchronization for CARP
I searched the tracker but could not find a feature request on the subject so I am posting a new one.
Is it possib... Dragomir Denev
10:00 AM Bug #1759: PPPoE not working
Hi,
had experienced the same w/ the August 2nd snapshot.
Ping was working, but no data connection made it... Did... Holger Goetz
09:25 AM Bug #1759: PPPoE not working
Hi,
I'm going to test this evening when someone is at the location.
KR,
Grimeton
 Oliver Loch
07:39 AM Bug #1759: PPPoE not working
Hi,
I can confirm that the last working update is *pfSense-Full-Update-2.0-RC3-amd64-20110728-0359.tgz*, I do not ... Scott Douglas
01:22 AM Revision 4f163cb8: Apparently RFC 1123 overrides RFC 952 and hostnames can start with digits these days.
Jim Pingle
01:20 AM Revision 8a85ab90: Apparently RFC 1123 overrides RFC 952 and hostnames can start with digits these days.
Jim Pingle

08/06/2011

11:01 PM Bug #1760 (Resolved): pftop shows "(null)" on recent snapshots
as shown here: http://forum.pfsense.org/index.php/topic,39527.0.html Chris Buechler
10:51 PM Bug #1759: PPPoE not working
I suspect the fix for wrong checksums on PPTP traffic is breaking this. last build without that would be 20110727, pl... Chris Buechler
10:25 PM Bug #1759: PPPoE not working
Hi,
I copied the kernel by hand over to the box.
And that's all that changed. Full RC3 from August, 5 2011 and ... Oliver Loch
09:01 PM Bug #1759 (Feedback): PPPoE not working
PPPoE has very little to do with the Kernel in that way - you are referring to a firmware update, perhaps? Or did you... Jim Pingle
08:27 PM Bug #1759 (Resolved): PPPoE not working
Hello,
I just updated to the latest snapshot, August,5 2011 on a box that connects to internet via pppoe.
After... Oliver Loch
07:48 PM pfSense Packages Bug #1590: Snort Will Not Start
this particular issue is fixed. the one you noted is in #1753 Chris Buechler
10:15 AM pfSense Packages Bug #1590: Snort Will Not Start
Can this be reopened? All week I've been helping Ermal test i386 platform. I've done a fresh amd64 install and receiv... Cino .
07:54 AM Bug #1052: Certificate validation of the LDAPS servers is not enforced
I've upgraded to today's nightly: It doesn't work for openvpn nor diag_authentication.php
for openvpn: ldap_setup_... Florent Daigniere

08/05/2011

08:56 PM Bug #1688 (Resolved): DHCP server subnet input validation needs to check config.xml, not ifconfig
Chris Buechler
02:21 PM Bug #1688: DHCP server subnet input validation needs to check config.xml, not ifconfig
Bug ist fixed. Used version for testing: 2.0-RC3 (i386) built on Wed Aug 3 20:04:02 EDT 2011 Daniel Jampen
08:03 PM Bug #1758 (Resolved): Upgrade fails to upgrade RRD data for traffic and packets
Running a nanobsd upgrade from 1.2.3 to 2.0-RC3 gives the following errors:
Aug 4 22:22:20 roadblock php: : The c... Eddie Atherton
02:42 PM Bug #886: RRD graph generation time scaling not written correctly
All RRD graphs are working fine @ Pfsense nanobsd 1G 2.0-RC3 (i386) built on Wed Aug 3 20:04:02 EDT 2011 Daniel Jampen
02:21 PM Revision ff1a605c: Remove GUI code to enable fast routing. The backend code was removed back in December in 4f76b144b0885b9a407db026723bb61f568effc3
Jim Pingle
02:20 PM Revision 5b0f2653: Remove GUI code to enable fast routing. The backend code was removed back in December in 4f76b144b0885b9a407db026723bb61f568effc3
Jim Pingle
02:18 PM Bug #1709 (Closed): RRD failures for Traffic and Packets graphs on NanoBSD
Jim Pingle
02:16 PM Bug #1709: RRD failures for Traffic and Packets graphs on NanoBSD
I am using Alix 2d3 and the 1G image. All RRD graphs are shown correctly so I think it is a user specific problem and... Daniel Jampen
04:57 AM pfSense Packages Feature #1757 (Resolved): snort processes should be tracked by pid rather then using top and grep
Today snort start/stop relies on greping through processes while it could rely on pid files for each of them to make ... Ermal Luçi
04:56 AM pfSense Packages Bug #1756 (Closed): Configuration files for snort need be on base filesystem
The configuration files of snort do not need to reside on /usr/local filesystem since this make it unfriendly for emb... Ermal Luçi
03:56 AM pfSense Packages Todo #1755 (Resolved): Alerts and Blocked status pages is unkown in snort
The correctness of the Alerts and blocked pages is unknown. Ermal Luçi
03:55 AM pfSense Packages Bug #1754 (Resolved): Status->services integration is not usable with snort
The status->Services page is not usable with snort.
Either the displaying of snort there should be removed or code... Ermal Luçi
03:53 AM pfSense Packages Bug #1753 (Resolved): Spoink integration
For the alert_pf option the snort package needs the spoink code.
This code is not present today on the snort packa... Ermal Luçi
03:52 AM pfSense Packages Bug #1752 (Closed): Error handling in snort
The error handling is almost in existent in the package.
As an example: if you remove an item in a screen it does ... Ermal Luçi
03:50 AM pfSense Packages Bug #1751 (Resolved): Various pages linking of information in snort
The present snort package architecture relies on poor linkage between the information configured in the different scr... Ermal Luçi
03:48 AM pfSense Packages Bug #1750 (Closed): Downloaded rules handling optimization
Presently the downloaded rules are copy/pasted for each configured interface.
This is not good from space considerat... Ermal Luçi
03:44 AM pfSense Packages Bug #1749 (Resolved): Rules/ Categories update
The present snort package architecture will forget any customization done to the rules and categories after a rules u... Ermal Luçi
03:44 AM pfSense Packages Bug #1748 (Resolved): Rules GUI
Rules GUI is partially implemented.
The editing/saving is not completely working.
 Ermal Luçi
03:41 AM pfSense Packages Bug #1747 (Resolved): Barnyard2
Barnyard2 will not always run as expected because code to start/stop it is not correct.
The GUI seems to be left hal... Ermal Luçi
03:38 AM pfSense Packages Bug #1746 (Resolved): Preprocessor do not work
The code of the preprocessor rules is buggy and it does not work.
The saving on the GUI of selected options is not... Ermal Luçi

08/04/2011

02:58 PM Revision 6ebf7095: Remove trailing newline
Scott Ullrich
02:57 PM Revision 263aeb4b: Fix typo
Scott Ullrich
02:13 PM Bug #1744 (Feedback): Upgrading
Try it after the next new snapshot (dated after this post) Jim Pingle
04:01 AM Bug #1744 (Closed): Upgrading
Hi,
was using RC3 with squid+lightsquid.
Upgraded to the build to "Wed Aug 3 19:24:43 EDT 2011".
At reboot proba... Lo Zio
01:02 PM Bug #1743 (Closed): Package Menu items disapper when installing a new package
Jim Pingle
12:30 PM Bug #1743: Package Menu items disapper when installing a new package
issue seems to be resolved! Thanks Ermal! Cino .
10:27 AM Bug #1393: IPSec Xauth
And as of commit:5d6bade495483d81dee13b429b95867cd87c2236 the xauth+ldap bits are in 2.1 already, so it's already bee... Jim Pingle
10:25 AM Bug #1393: IPSec Xauth
Actually you are referring to the LDAP patch, this ticket is for something else entirely. Yours is probably closer to... Jim Pingle
09:54 AM Bug #1393: IPSec Xauth
Lastly I ran into the same issue, according to the post of jimp support for IPsec xauth is not going to happen until ... Dries Trybou
08:18 AM Bug #1745 (Rejected): various Kernel panics with 2 identical NICs
Please post on the forum for help diagnosing such issues, since often there are configuration tweaks that can mitigat... Jim Pingle
08:14 AM Bug #1745 (Rejected): various Kernel panics with 2 identical NICs
We have two identical HP Servers (DL180 G6), same hardware and all, which originally came
with one 4-port NIC and on... Andreas Bochem

08/03/2011

08:52 PM Revision c4d83bf8: Move seting up of tabs/menus/service entries after custom php commands. Seems there is something tripping config vars that make these steps not work.
Ermal LUÇI
08:50 PM Revision 57811192: Move seting up of tabs/menus/service entries after custom php commands. Seems there is something tripping config vars that make these steps not work.
Ermal LUÇI
08:19 PM Revision f3a274b7: Correct the ambiguity caused by missing curlies
Ermal LUÇI
08:18 PM Revision cfaccd81: Correct the ambiguity caused by missing curlies
Ermal LUÇI
05:29 PM Revision 05ca39d9: Remove this write_config call seems to be causing grief.
Ermal LUÇI
05:29 PM Revision bc38b5f2: Remove this write_config call seems to be causing grief.
Ermal LUÇI
04:39 PM Revision 448cc756: Work around the fact that get_configured_interface_list re-parses the config and kills the reference made before it, which was making it impossible to delete a pppoe instance.
Jim Pingle
04:38 PM Revision c5ce8398: Work around the fact that get_configured_interface_list re-parses the config and kills the reference made before it, which was making it impossible to delete a pppoe instance.
Jim Pingle
04:18 PM Bug #1734 (Closed): Traffic Shaper Issues in resent builds
Please followup in the forum Ermal Luçi
12:58 AM Bug #1734: Traffic Shaper Issues in resent builds
ermal,
You are correct, I am using the PRIQ discipline.
Initial testing indicates that adding a value to the Ba... Chris Mirchandani
04:18 PM Bug #1743 (Feedback): Package Menu items disapper when installing a new package
Should be fixed by latest commits. Ermal Luçi
03:52 PM Bug #1743 (Closed): Package Menu items disapper when installing a new package
Change https://github.com/bsdperimeter/pfsense/commit/27018d3cc4f12c995efadf5dc5ba90eb7c1aa641 broke package menu ite... Cino .
02:30 PM Revision 090d2bdc: Add yet another intermediate config write during pacakge processing which breaks some installation steps.
Ermal LUÇI
02:30 PM Revision 27018d3c: Add yet another intermediate config write during pacakge processing which breaks some installation steps.
Ermal LUÇI
01:52 PM Revision dd40d664: USB slices are under-reported even more than CF slices when viewed directly, instead of when looking at the entire disk. Compensate by adding a few MB. Fixes NanoBSD upgrades when installed on USB thumbdrives. (Imaged after this fix, someone can apply this fix locally and then upgrade as well.)
Jim Pingle
12:00 PM Bug #1729 (Feedback): IMSpector-wip is missing some files for install
Should be OK now. Jim Pingle
11:46 AM pfSense Packages Bug #1626: Snort snort_rules.php drop down only works in Firefox
Can you please test with the lastest version of the package and tell which browser it does not work? Ermal Luçi
11:38 AM Bug #1344: Replace prototype javascript code with jQuery
I wanted an "enhanced" multi select box for something I was working on and although Chosen looks absolutely brilliant... G D
10:33 AM pfSense Packages Bug #1742: Installation of Varnish on pfS RC broken and makes machine unusable
Fix seems to have worked. Much thanks :D Chris Clancey
10:00 AM pfSense Packages Bug #1742 (Feedback): Installation of Varnish on pfS RC broken and makes machine unusable
Applied in changeset commit:4ed88cf4a9b82b07003d0a03b0952f6697b2e3cb. Jim Pingle
08:57 AM pfSense Packages Bug #1742 (Resolved): Installation of Varnish on pfS RC broken and makes machine unusable
When installing Varnish package from packages menu, install gets stuck at:
Loading package configuration... done.
C... Chris Clancey
07:58 AM Bug #1741 (Resolved): Default page when not authorised
We have found that when a user tries to go to a page which is not in their effective privileges list they are redirec... Cynetix Cynetix
07:44 AM Feature #1740 (Closed): Remove restricted menu's and menu items
After creating a new user with limited permissions we found that the full menu structure was shown regardless. We hav... Cynetix Cynetix
06:10 AM Bug #636: layer7 not work correctly
Still seeing the same issue. Using 2.0-RC3 (i386) built on Tue Aug 2 19:07:41 EDT 2011 Jonathan Puddle
06:05 AM Bug #1739: Interface problem
Using i386 snapshot from Aug 2 on a PC Lo Zio
06:04 AM Bug #1739 (Closed): Interface problem
I was creating a cert request.
Selected 1K key.
Entered illegal chars for a value, and submitting the page hinted m... Lo Zio
05:10 AM pfSense Packages Bug #1452 (Resolved): Snort: broken link in snort_rules_edit.php [2.8.6.1 pkg v. 1.35]
Ermal Luçi
04:50 AM pfSense Packages Bug #1024 (Resolved): Snort GUI broken in latest snapshots
fixed Chris Buechler
04:50 AM pfSense Packages Bug #1590 (Resolved): Snort Will Not Start
fixed Chris Buechler
04:49 AM pfSense Packages Todo #532 (Closed): little bug in snort_rules_edit.php (missing include)
Chris Buechler
04:18 AM pfSense Packages Bug #1236: Anyterm package doesn't start after upgrade

Hi.
Running: 2.0-RC3 (i386) built on Sun Jul 31 05:05:32 EDT 2011.
The issue I see is that if I don't put ... Peter Moreno
03:33 AM pfSense Packages Bug #1717 (Resolved): BandwidthD Service not starting
Chris Buechler
03:23 AM pfSense Packages Bug #1717: BandwidthD Service not starting

Hi.
Let see if the help, I have running:
2.0-RC3 (i386) built on Sun Jul 31 05:05:32 EDT 2011
And hav... Peter Moreno
01:00 AM Bug #1738 (New): Restore fails when username in backup is not matching
It's not likely that it will happen to anyone, but the consequences are quite time consuming.
When on the default ... Louis-David Perron
12:14 AM pfSense Packages Bug #1737 (Closed): ospfd - Route deleted after reboot and reload of the ospfd process
I have installed PfSense2.0-RC3.
The wan interface is em0 with ip 2.2.2.2/24
The lan interface is em1 with ip 10.... Jean Aumont

08/02/2011

09:37 PM Bug #611: Firmware upgrade error: "There has been an error verifying the signature on this image."
It's a refreshing issue. If you chenga the update url to something than change it back, it works. Filipe Vieira
09:33 PM Bug #611: Firmware upgrade error: "There has been an error verifying the signature on this image."
This problem occurs on pfSense 2 RC3. I have checked "Allow auto-update firmware images with a missing or invalid dig... Filipe Vieira
09:25 PM Revision e9df45f0: Oops fix variable name
Ermal LUÇI
09:25 PM Revision e56a7306: Blacklist lan as being used as default gateway when auto switching is on. This prevents some problems in general functionality with services.
Ermal LUÇI
09:24 PM Revision 4ac9cdf2: Oops fix variable name
Ermal LUÇI
09:24 PM Revision 0fea7000: Blacklist lan as being used as default gateway when auto switching is on. This prevents some problems in general functionality with services.
Ermal LUÇI
09:17 PM Revision b0d088eb: Correctly check the values for VoIP on multi_lan traffic shaper wizard. Reported-by: http://forum.pfsense.org/index.php/topic,32833.15.html. Ticket #1728
Ermal LUÇI
09:15 PM Revision 834a3e6a: Correctly check the values for VoIP on multi_lan traffic shaper wizard. Reported-by: http://forum.pfsense.org/index.php/topic,32833.15.html. Ticket #1728
Ermal LUÇI
08:32 PM Bug #1629: invalid state table entries after WAN IP change
I just copied the system log page and state table in attached document.
Would collecting the data with a syslog se... Eli Hunter
08:32 PM Revision 9afdf058: Correct the link to index.php so it always works correctly.
Ermal LUÇI
08:31 PM Revision ea858be0: Correct the link to index.php so it always works correctly.
Ermal LUÇI
07:59 PM Revision 233e2af1: If no pppoe service name is configured, send a null service name. Seems to help clients especially when reconnecting.
Jim Pingle
07:57 PM Revision 5c5d2cad: If no pppoe service name is configured, send a null service name. Seems to help clients especially when reconnecting.
Jim Pingle
02:55 PM Bug #1696: Panic when finishing setup wizard with PPPoE WAN
Does this happen on current snapshots? I can't reproduce this in a VM. Jim Pingle
08:14 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
I also upgraded new snap today,but nothing changed.Ermal you can test yourself ipsec drop after pptp client disconnec... Hafiz Rafiyev
08:00 AM Revision eea89a5c: Declare the arrays as global since that is what they are. Correct the name of asterisk in the global defniition.
Ermal LUÇI
07:59 AM Revision a7951d4a: Declare the arrays as global since that is what they are. Correct the name of asterisk in the global defniition.
Ermal LUÇI
07:47 AM Revision b3795cb9: Correct battlenet data to not be overriden. Reported-by: http://forum.pfsense.org/index.php/topic,39176.0.html
Ermal LUÇI
07:47 AM Revision 3adc6769: Correct battlenet data to not be overriden. Reported-by: http://forum.pfsense.org/index.php/topic,39176.0.html
Ermal LUÇI
03:48 AM Bug #1736 (Closed): Allow other users to be used as authenticator in xmlrpc exchanges
Presently only admin user, hardcoded, can allow the sync of the user data through xmlrpc.
It would need to be done... Ermal Luçi
12:11 AM Bug #1572: DHCP + MAC spoofing leads to link cycling
I now wonder if it's also this:
http://forum.pfsense.org/index.php/topic,36643.0.html
if so, I can reproduce but al... Derrick Brashear

08/01/2011

06:15 PM Revision 6ecb52bd: Start hostid
Scott Ullrich
06:15 PM Revision 1fd3fe31: Start hostid
Scott Ullrich
02:44 PM Bug #1027: Config restore triggers HTTP_REFERER check on interface mismatch
2.0-RC3 (i386)
built on Sun Jul 31 05:05:32 EDT 2011
Same as Braden, changed interface, swap WAN and OPT1. Chang... jikjik lim
03:02 AM Bug #1027: Config restore triggers HTTP_REFERER check on interface mismatch
This is happening to me on 2.0 RC3, nanobsd, with a clean install.
Steps to reproduce:
changed interface defs via... Braden McGrath
02:19 PM Bug #1729: IMSpector-wip is missing some files for install
Looks like the package build system got an updated MySQL port. Working on it now. Thanks! Bill Marquette
02:18 PM Bug #1729 (Assigned): IMSpector-wip is missing some files for install
Bill Marquette
02:11 PM Bug #1121: wireless interface antenna settings not applied at boot
i never put anything manually coz i have no knowledge in freebsd etc, i dont even know where the config file is store... Bipin Chandra
12:45 PM Bug #1121 (Closed): wireless interface antenna settings not applied at boot
Nothing puts them in the config. You had to have done that manually. Jim Pingle
12:43 PM Bug #1121: wireless interface antenna settings not applied at boot
i removed that line and rebooted, so far the antenna settings r applied, let me test for further 24hrs and if its rem... Bipin Chandra
12:09 PM Bug #1121: wireless interface antenna settings not applied at boot
For starters, in that config you have:... Jim Pingle
11:56 AM Bug #1121: wireless interface antenna settings not applied at boot
i just use one card at a time that too as a access point only and nothing fancy, i have tried clearing the config and... Bipin Chandra
11:46 AM Bug #1121: wireless interface antenna settings not applied at boot
I am not sure what else might be relevant - If the code did not work, it would be broken for everyone, not just you.
... Jim Pingle
11:43 AM Bug #1121: wireless interface antenna settings not applied at boot
what info can i provide for analysis coz i have 2 atheros cards and both the same, both different makes but same athe... Bipin Chandra
11:13 AM Bug #1121: wireless interface antenna settings not applied at boot
There may be something specific to your card or config going on then, as no matter what I do, the settings always app... Jim Pingle
10:45 AM Bug #1728 (Resolved): Shaper wizard not defining queues properly, doesn't shape manually by floating, ip or voip assignments
http://forum.pfsense.org/index.php/topic,32833.15.html Ermal Luçi
03:01 AM Bug #1734 (Feedback): Traffic Shaper Issues in resent builds
Seems like you are using PRIQ as a discipline.
Can you please check that putting the bandwidth of the physical inter... Ermal Luçi
01:59 AM pfSense Packages Bug #1735 (Resolved): Tinydns load balancing not working
Chris Buechler
01:58 AM pfSense Packages Bug #1735: Tinydns load balancing not working
Verified. Thanks Heinrich Lee Yu
01:53 AM pfSense Packages Bug #1735 (Feedback): Tinydns load balancing not working
Merged in github, thanks, please verify. Chris Buechler

07/31/2011

11:51 PM pfSense Packages Bug #1735 (Resolved): Tinydns load balancing not working
When specifying extra IP addresses for failover and load balancing, failover works but load balancing doesnt.
Actu... Heinrich Lee Yu
02:20 PM Bug #1730: DHCP Failover
Jim, thanks for the update. No one responded to my forum post and I must have missed the fix since build 2.0-RC3 Buil... Chris Mirchandani
12:00 PM Bug #1730 (Rejected): DHCP Failover
Check your /tmp/rules.debug. We already have code in place to account for that.... Jim Pingle
11:48 AM Bug #1730 (Rejected): DHCP Failover
Running 2.0-RC3 Built On: Sun Jul 24 04:39:44 EDT 2011
I have discovered that I have to manually allow access to p... Chris Mirchandani
12:49 PM Bug #1734 (Closed): Traffic Shaper Issues in resent builds
I am using the AMD64 builds of pfSense 2.0 RC3. I have the same build running on dedicated hardware and in a VM with ... Chris Mirchandani
12:10 PM Bug #1732 (Rejected): CARP does not Failover on all interfaces
Please post on the forum to rule out configuration errors. I have just tested all that in a VM pair this week and it ... Jim Pingle
12:06 PM Bug #1732 (Rejected): CARP does not Failover on all interfaces
I am using the AMD64 builds of pfSense 2.0 RC3. I have the same build running on an dedicated hardware and in a VM wi... Chris Mirchandani
11:55 AM Bug #1731 (Resolved): Hostnames are not allowed access when using an Alias in an Alias
I am using the AMD64 builds of pfSense 2.0 RC3. I have the same build running on dedicated hardware and in a VM with ... Chris Mirchandani
03:57 AM Bug #1121: wireless interface antenna settings not applied at boot
i use the below command to check the applied settings
sysctl dev.ath
then i set them properly by using
sysctl de... Bipin Chandra

07/30/2011

12:17 PM Bug #708: Need more checks for dns rebind issue
Chris Buechler wrote:
> That's impossible because 5 will never happen, browsers' internal DNS caches don't come anyw... Cyrus Patel
08:25 AM Bug #1728: Shaper wizard not defining queues properly, doesn't shape manually by floating, ip or voip assignments
Using the build 2.0-RC3 (i386)
built on Fri Jul 29 22:08:01 EDT 2011
Still seeing the same error messages. Have se... Tony Graziano
12:19 AM Revision 43086fae: Max procs should be 1 when using an op code cacher
Scott Ullrich
12:17 AM Revision 94436824: Max procs should be 1 when using an op code cacher
Scott Ullrich

07/29/2011

08:00 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
Hafiz Rafiyev wrote:
> Ermal Luçi wrote:
> > I have put a fix in latest snapshots.
> >
> > @Hafiz Rafiyev,
> > ... Hafiz Rafiyev
01:18 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
Ermal Luçi wrote:
> I have put a fix in latest snapshots.
>
> @Hafiz Rafiyev,
> i have put the fix on your box s... Hafiz Rafiyev
04:48 PM Revision a3cc48b7: Silence pfctl -d errors
Scott Ullrich
04:47 PM Revision 02edeac5: Silence pfctl -d errors
Scott Ullrich
11:41 AM Bug #1728: Shaper wizard not defining queues properly, doesn't shape manually by floating, ip or voip assignments
ezshaper part of config.xml attached. Tony Graziano
10:57 AM Bug #1728: Shaper wizard not defining queues properly, doesn't shape manually by floating, ip or voip assignments
The ezshaper part not the shaper part. Ermal Luçi
09:35 AM Bug #1728: Shaper wizard not defining queues properly, doesn't shape manually by floating, ip or voip assignments

<shaper>
<queue>
<interface>wan</interface>
<name>wan</name>
<scheduler>CBQ</scheduler>
<bandwidth>2<... Tony Graziano
09:15 AM Bug #1728: Shaper wizard not defining queues properly, doesn't shape manually by floating, ip or voip assignments
Can you provide the ezshaper from config.xml that caused this? Ermal Luçi
09:00 AM Bug #1728 (Resolved): Shaper wizard not defining queues properly, doesn't shape manually by floating, ip or voip assignments
When running through the wizard for shaping, the following occurs when applying the configuration:
29 08:43:38 php... Tony Graziano
09:39 AM Bug #1729 (Resolved): IMSpector-wip is missing some files for install
See below error while installing the package:
Downloading http://files.pfsense.org/packages/8/All/mysql-client-... Cino .
09:24 AM Bug #1425: pfSense stops receiving traffic on 'bge' driven interface
See here:
http://doc.pfsense.org/index.php/Tuning_and_Troubleshooting_Network_Cards Jim Pingle
06:20 AM Bug #1425: pfSense stops receiving traffic on 'bge' driven interface
hw.pci.enable_msix Ermal Luçi
08:56 AM Bug #1727: No default nor static routes after reboot.
Sorry, I was migrating from smos ipv6 git and I was on an old update URL (http://snapshots.pfsense.org/FreeBSD_RELENG... Alexis Olivier
07:13 AM Bug #1727 (Rejected): No default nor static routes after reboot.
Please use snapshots from upgrading since binary can change during commits.
go grab latest snapshot and use that to ... Ermal Luçi
06:57 AM Bug #1727 (Rejected): No default nor static routes after reboot.
After a gitsync and a reboot, i get no static nor default routes added on launch.
I got the error :... Alexis Olivier
07:18 AM Revision d7894259: fix text
Chris Buechler
07:17 AM Revision 73800013: fix text
Chris Buechler
07:14 AM Revision 32363c2e: Merge branch 'master' of github.com:bsdperimeter/pfsense
Chris Buechler
03:04 AM Bug #1121: wireless interface antenna settings not applied at boot
for me i have set diversity off and tx/rx to 1 but after boot those values r all 0 and even after leaving it as it is... Bipin Chandra
01:12 AM Feature #1726 (Resolved): Allow disabling the "Autonomous address-configuration"
You should add a checkbox allowing to disable the "Autonomous address-configuration", setting the rtadvd option "pinf... Chris Buechler
01:09 AM Bug #1725 (Resolved): DHCPv6 non-common bitmask shows incorrect range
On the DHCPv6 page, when you have a non-common bitmask, showed range is incorrect. Example:
Address ... Chris Buechler

07/28/2011

11:05 PM Bug #1724 (Feedback): Adding new gateway throws JS error in Chrome
can't replicate with the latest version of Chrome on OS X, looks like problem with your Chrome (cache maybe, especial... Chris Buechler
10:54 PM Bug #1724 (Closed): Adding new gateway throws JS error in Chrome
I just did a clean install-to-disk of pfSense 2.0-RC3.
When I went to the WAN page.
I selected the "add" new gate... Christian Höltje
08:56 PM Revision 31a15efb: Add an override for default interval to send icmp
Ermal LUÇI
08:56 PM Revision f7203985: Add an override for default interval to send icmp
Ermal LUÇI
08:45 PM Revision 8687d2ba: Clarify notes for pptp "Server address"
Jim Pingle
08:45 PM Revision 6d1ae23c: Clarify notes for pptp "Server address"
Jim Pingle
08:35 PM Revision db07cc25: Fix status page of gateways to show gateways with monitoring disabled as up.
Ermal LUÇI
08:35 PM Revision 253591c7: Fix status page of gateways to show gateways with monitoring disabled as up.
Ermal LUÇI
08:31 PM Revision 33c06ef7: Add a new option to allow disabling of gateway monitoring. This gateways will always be reported as up.
Ermal LUÇI
08:31 PM Revision b8873098: Add a new option to allow disabling of gateway monitoring. This gateways will always be reported as up.
Ermal LUÇI
07:58 PM Revision b9f98526: Use route change here as well to avoid leaving the routing table without a destination for a short period.
Ermal LUÇI
07:58 PM Revision 4c41b626: Use route change here as well to avoid leaving the routing table without a destination for a short period.
Ermal LUÇI
07:45 PM Revision 3e8fad13: Rework rc.stop_packages a little. Fixes #1564
Jim Pingle
07:44 PM Revision 0124456b: Rework rc.stop_packages a little. Fixes #1564
Jim Pingle
07:35 PM Revision e151744e: Just break states based on the remote host ip and not with localip. The later might be the same as address used by other services and might interrupt them
Ermal LUÇI
07:35 PM Revision dfd9c31d: Just break states based on the remote host ip and not with localip. The later might be the same as address used by other services and might interrupt them
Ermal LUÇI
06:33 PM Revision 77877238: Move the textarea displaying packet capture outside of the form tag, or else a browser will try to submit the contents of the textarea when hitting a button. If you were viewing a large capture, that can be quite a long time it's wasting on uploading data that serves no purpose.
Jim Pingle
06:33 PM Revision 89fae3e7: Fix whitespace formatting
Jim Pingle
06:31 PM Revision 5ab25db0: Move the textarea displaying packet capture outside of the form tag, or else a browser will try to submit the contents of the textarea when hitting a button. If you were viewing a large capture, that can be quite a long time it's wasting on uploading data that serves no purpose.
Jim Pingle
06:29 PM Revision d427daea: Fix whitespace formatting
Jim Pingle
06:24 PM Revision d3347fdf: Fix display of ssh port on anti-lockout rule display in GUI.
Jim Pingle
06:23 PM Revision 1f82f5e0: Fix display of ssh port on anti-lockout rule display in GUI.
Jim Pingle
06:08 PM Bug #1425: pfSense stops receiving traffic on 'bge' driven interface
Okay, fair enough. Can you please help me with the process of disabling 'msix'? I'm finding it difficult to discover ... Chris Smith
05:41 PM Bug #1425: pfSense stops receiving traffic on 'bge' driven interface
The simplest way to do that is getting a FreeBSD 8.1 box and build the latest bge drivers from FreeBSD HEAD.
Then lo... Ermal Luçi
05:39 PM Bug #1425: pfSense stops receiving traffic on 'bge' driven interface
I have had TSO disabled since two weeks ago and have not experienced any crashes, but the systems could go literally ... Chris Smith
05:05 PM Bug #1425: pfSense stops receiving traffic on 'bge' driven interface
I am removing dependency on 2.0 since this a driver/hw issue and out of our control. Ermal Luçi
05:09 PM Feature #620: No privilege choice to allow access to Dashboard
Presently there is no proper way to do it.
The solution is envolved and it will wait 2.1 Ermal Luçi
05:06 PM Bug #1437 (Feedback): More validation needed on CSR generation
Ermal Luçi
05:03 PM Bug #1393 (Feedback): IPSec Xauth
There has been merged a setting for allowing LDAP as backend to be configured.
Not sure it should be merged in 2.0. Ermal Luçi
04:10 PM Bug #1709 (Feedback): RRD failures for Traffic and Packets graphs on NanoBSD
Something must have corrupted (or failed to upgrade) your RRD files in the past. Or you had a backup of the bad files... Jim Pingle
03:57 PM Bug #1407: GUI is sluggish without working DNS
Does it happen if resolv.conf has an entry
'options timeout:1'
'options attempts:1' Ermal Luçi
03:49 PM Bug #1688 (Feedback): DHCP server subnet input validation needs to check config.xml, not ifconfig
Ermal Luçi
03:47 PM Bug #1629: invalid state table entries after WAN IP change
Can you post system log with state table as well? Ermal Luçi
03:45 PM Bug #1564: rc.stop_packages causes reboot to only works from SSH, not from Web interface
Applied in changeset commit:0124456b0c4d602adea538cee35fc67c977e9f2e. Jim Pingle
03:45 PM Bug #1564 (Feedback): rc.stop_packages causes reboot to only works from SSH, not from Web interface
Applied in changeset commit:3e8fad13ae4a029fc6d872d87399f98f04a752cb. Jim Pingle
03:40 PM Bug #1564: rc.stop_packages causes reboot to only works from SSH, not from Web interface
rc.stop_packages is currently disabled which is why reboots are still working now.
Since the upgrade to PHP 5.2.1... Jim Pingle
03:42 PM Todo #1723 (Resolved): PPTPd and all mpd based services need more checks
More checks need to be added for the localip parameter of mpd based services when used as a concentrator since people... Ermal Luçi
03:36 PM Bug #1421 (Feedback): Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
I have put a fix in latest snapshots.
@Hafiz Rafiyev,
i have put the fix on your box so you can test directly wit... Ermal Luçi
01:37 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
Chris Buechler wrote:
> someone who can replicate this and can get us access to their system, please email me (cmb a... Hafiz Rafiyev
03:11 PM Bug #1598: IP Alias VIP configured on a CARP VIP, resets CARP VIP on sync
I have no problems with this that I can reproduce. I have about every combination of VIPs on interfaces and IP aliase... Jim Pingle
02:36 PM Bug #1377 (Feedback): upgrade 1.2.3-Final nanobsd 4g to 2.0-RC1 nanobsd 4gb fails
This works fine for me. Imaged a CF with 1.2.3 4GB, configured it, ran for a bit, then upgraded to a current 2.0 snap... Jim Pingle
01:54 PM Bug #1336 (Feedback): PPTP VPN NAT on WAN or other external interface
It works for me with Ermal's patch directly applied. Once snapshots with this fix are uploaded, others can test. Jim Pingle
01:51 PM Bug #1318 (Feedback): Certificate error: certificate subject does not match signing request subject
Can anyone reproduce this since #1438 has been fixed/closed? Jim Pingle
01:40 PM Bug #1121 (Feedback): wireless interface antenna settings not applied at boot
I can't reproduce this on current snapshots. If I set to Diversity=Off, And TX/RX for antenna 2, then it shows 2/2/0 ... Jim Pingle
01:33 PM Bug #875 (Resolved): Uninstalling packages can remove system libraries
yeah i think this is good Chris Buechler
01:17 PM Bug #875: Uninstalling packages can remove system libraries
I've installed/uninstalled quite a few packages and the only way I have managed to break the system is if I use pkg_d... Jim Pingle
01:09 PM Bug #802 (Feedback): Interface reassignment with VLANs after config restore to diff hardware doesn't work
I restored a config with vlans to a VM and it worked fine - I had to go to the VLANs tab and reparent the VLANs one b... Jim Pingle
12:58 PM Bug #1722 (Closed): Associated filter rule retains original Interface option after copying a NAT rule
I discovered a problem with the automatic filter rules created for NAT rules. When copying a NAT rule, the associate... Oz Solomon
12:24 PM Revision 4222087e: Also escape \ in pptp passwords.
Jim Pingle
12:23 PM Revision 001c9bed: Also escape \ in pptp passwords.
Jim Pingle
10:40 AM pfSense Packages Bug #1714 (Resolved): Missing png-1.4.5_1 port for ntop and vnstat2
Jim Pingle
10:05 AM pfSense Packages Bug #1714: Missing png-1.4.5_1 port for ntop and vnstat2
both packages installed for me.. Thanks again!! Cino .
08:17 AM Revision 1f33a712: Correct priority number to not have clashes with PRIQ which do not allow same priority numbers for two different queues.
Ermal LUÇI
08:16 AM Revision 609debe5: Correct priority number to not have clashes with PRIQ which do not allow same priority numbers for two different queues.
Ermal LUÇI
08:00 AM Revision 800d973d: Do not add any reply-to information to rules with action match. Reported-by: http://forum.pfsense.org/index.php/topic,39247.msg202728.html#msg202728
Ermal LUÇI
07:57 AM Revision f829cd35: Do not add any reply-to information to rules with action match. Reported-by: http://forum.pfsense.org/index.php/topic,39247.msg202728.html#msg202728
Ermal LUÇI

07/27/2011

11:24 PM Revision b22bf161: Adding hook
Scott Ullrich
11:23 PM Revision ff49f684: Adding hook
Scott Ullrich
11:03 PM Revision d9327477: Add hooks
Scott Ullrich
11:03 PM Revision 439cc13f: Add hooks
Scott Ullrich
10:31 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
someone who can replicate this and can get us access to their system, please email me (cmb at pfsense dot org).
Chris Buechler
10:16 PM Bug #708: Need more checks for dns rebind issue
That's impossible because 5 will never happen, browsers' internal DNS caches don't come anywhere near obeying short T... Chris Buechler
12:02 PM Bug #708: Need more checks for dns rebind issue
The checks won't protect against DNS rebind attacks that run like this:
1. browser makes DNS lookup for <hostname-of... Cyrus Patel
10:05 PM Bug #1719 (Resolved): OpenVPN Status in Dashboard
Chris Buechler
09:26 PM Bug #1719: OpenVPN Status in Dashboard
Looks good. Thanks. Alex Vergilis
08:40 PM Revision 8b618d91: Correct check as per http://forum.pfsense.org/index.php/topic,39155.0.html
Ermal LUÇI
08:39 PM Revision 6968b356: Correct check as per http://forum.pfsense.org/index.php/topic,39155.0.html
Ermal LUÇI
08:31 PM Revision 96267107: Correct whitespace and some problems in the just merged ldap auth sorce for racoon
Ermal LUÇI
08:19 PM Revision 5d6bade4: Merge pull request #8 from ninja76/master
IPSec xAuth allowing LDAP to be used as a backend Ermal LUÇI
07:41 PM Revision f9199cd3: Check for null Array and move option system to top
Bryan Haase
05:43 PM Revision 3ab1b036: Prevent php from coring if the wrong parameters are passed to ip2long
Ermal LUÇI
05:40 PM Revision 1fb8d314: Prevent php from coring if the wrong parameters are passed to ip2long
Ermal LUÇI
04:54 PM Revision 4cf82d52: Relax PPTP password restrictions, just prevent starting with a !, and limit to common printable/keyboard characters so it doesn't result in invalid xml. Fixes #1720
Jim Pingle
04:49 PM Revision 2c466077: Relax PPTP password restrictions, just prevent starting with a !, and limit to common printable/keyboard characters so it doesn't result in invalid xml. Fixes #1720
Jim Pingle
04:19 PM Revision 9140006b: Correct issue with adding IPv6 default gateway reported http://forum.pfsense.org/index.php/topic,39344.0/topicseen.html
Ermal LUÇI
04:05 PM Revision 94efbf8b: Shift OpenVPN require, it was causing CRLs to not save changes properly.
Jim Pingle
04:05 PM Revision c3555734: Shift OpenVPN require, it was causing CRLs to not save changes properly.
Jim Pingle
03:51 PM Revision 8c011fc9: Fix variable so CSC/Overrides for OpenVPN are actually deleted from the fs when deleted from the GUI.
Jim Pingle
03:50 PM Revision e6af6518: Fix variable so CSC/Overrides for OpenVPN are actually deleted from the fs when deleted from the GUI.
Jim Pingle
03:41 PM Bug #1703 (Resolved): editing/removing interface groups leaves remnant
Ermal Luçi
05:49 AM Bug #1703: editing/removing interface groups leaves remnant
Looks good as of _2.0-RC3 (amd64) built on Tue Jul 26 19:09:40 EDT 2011_:
The group name is not removed in all ca... Andreas Bochem
03:37 PM Revision 95305736: Rework OpenVPN status, show status for shared key servers.
Jim Pingle
03:36 PM Revision f27d726c: Rework OpenVPN status, show status for shared key servers.
Jim Pingle
02:01 PM Bug #1721: uPnP issue with STATIC ip addresses
Where do I find the logs or is it easier to find them via the file system? Matt Crook
01:58 PM Bug #1721: uPnP issue with STATIC ip addresses
Seth Mos wrote:
> If I remember correctly the Xbox will not request uPNP mapping when the IP address is configured s... Matt Crook
05:59 AM Bug #1721 (Feedback): uPnP issue with STATIC ip addresses
pretty sure Seth's right from some quick searching. Chris Buechler
05:16 AM Bug #1721: uPnP issue with STATIC ip addresses
If I remember correctly the Xbox will not request uPNP mapping when the IP address is configured statically.
Try t... Seth Mos
01:47 PM Revision 2c189c8c: Improved ipsec ldap xauth
Bryan Haase
01:06 PM Bug #1676: dead IPv6 gateway causes kernel panics
Definitely easy to reproduce with the right conditions, mine panics thusly:
* Home router with IPv6 connectivity v... Jim Pingle
12:55 PM Todo #1720: Relax input validation for PPTP Passwords
Applied in changeset commit:2c466077934c3812aed9d15b77ab515e4b3e116d. Jim Pingle
12:55 PM Todo #1720 (Feedback): Relax input validation for PPTP Passwords
Applied in changeset commit:4cf82d52943b00c2710b7867387230a0e58225be. Jim Pingle
 

Also available in: Atom