Activity
From 08/30/2011 to 09/28/2011
09/28/2011
-
10:40 PM Bug #1910 (Feedback): Duplex description inconsistency
- Applied in changeset commit:433e98427c6f66e3170b125c2541896cc073ff0e.
-
02:04 PM Bug #1912 (New): DHCP server domain search list needs input validation
- updated with actual problem. other part a feature in #1917
-
06:02 AM Bug #1912: DHCP server domain search list needs input validation
- If I put "services lan.stdenis lan.auber" in the field, I get a config.xml that contains:
<domain>intranet</dom... -
- The DHCP server's search list only supports a single domain, should be extended to support multiple domains such as: ...
-
- Applied in changeset commit:d353423564517a5038f57996769cb488ec802d7a.
-
- Applied in changeset commit:240ffd2e7e748f0074d572756cd40bb272b29451.
-
12:18 AM Bug #1916 (Resolved): LDAP Authentication ignores user naming attribute
- Using a User Naming Attribute other than CN does not appear to work. Additionally, LDAP authentication (both Diags--...
09/27/2011
-
- After a little more testing, it looks like it still WILL use the credentials after the bind test. I did not give anon...
-
- Im running pfSense 2.0, with an LDAP server running on CentOS6 (iRedmail). Both are in virtual machines, on a connec...
-
- Steps to reproduce:
1) Create a new auth server of type LDAP.
2) Set all paremeters correctly, and save.
3) Edit ... -
- Currently relayd does not show up under Status > Services. This makes it difficult to kill/restart relayd if a certai...
-
- that fills in what you have in that field, and works correctly. Need to see what your <dhcpd> config.xml contains.
-
- The domain search list box needs input validation to ensure a valid domain is entered there.
-
10:54 AM Bug #636: layer7 not work correctly
- We find it generally works, however adding just a few rules sends our CPU usage to 100%. We're still on one of the RC...
-
10:53 AM Feature #1911 (Closed): Interface Groups
- Interface groups are only usefull now to add firewall rules to multiple interfaces. Problem is that when you want to ...
-
- With "ifconfig -m" My Broadcom, Intel and Realtek chipsets call it "Autoselect" so I think the text can be changed to...
-
- The default is to not set a value, so the OS handles it automatically.
Autonegotiate forces the NIC to autonegotia... -
- In interface configuration when choosing Duplex settings, the help text states:
"Here you can explicitly set speed a... -
08:51 AM pfSense Packages Bug #1880: snort package 2.9 v2
- here is another snort example of what i found earlier with active x missing i guess it's something with the config? i...
-
08:47 AM Feature #1904: DHCP server doesn't allow arbitrary config blocks
- Thank you for updating the ticket -- any comments on whether this feature is under consideration? Maybe even a sim...
09/26/2011
-
05:47 PM Bug #1909: dhcp dies after reboot
Hmm, okay.
After reboot, the SSH admin reports wrong IP address for INSIDE (bridge0) but web interface
reports ...-
[2.0-RELEASE][admin@pfcafe.cafe.local]/var/run(9): cat dhcpd.pid
[2.0-RELEASE][admin@pfcafe.cafe.local]/var/run(10...-
- Look in /var/run/*.pid - see if there are any stale (old) pid files. It's possible something else is getting a killby...
-
Attached.
Thanks-
- can you attach your config?
-
- Just upgraded to to NanoBSD release from a previous 2.x RC version.
When it reboots, it comes up okay, but clients... -
- Strangely, I am updated to the latest 2.0 RELEASE (nanobsd) and have defined a firewall rule with Layer7 to block
ss... -
03:21 PM pfSense Packages Bug #1908 (Closed): Vnstat
- Bonjour,
j'ai un petit problème d'installation avec vnstat.
Merci de votre aide.
Beginning package installat... -
02:28 PM Bug #1906: Dashboard: Incorrect evaluation of needed upgrade
- Sorry. I did not want you troubleshoot my install. I guess what I was trying to say is that you should validate input...
-
- The expected file is plain text, not html, so it's not parsed on purpose. If it was allowed through your browser woul...
-
- There's no proxy. Either way the upgrade message is not valid and should be corrected. The html parsing failed also. ...
-
- You have a proxy or portal in front of that WAN. It's printing what it got back from the remote server, in this case,...
-
- One of my firewalls, has 2 WANs conifgure. WAN port appears to have ICMP accees to the internet but not http. On the ...
-
- emerging active x seems to be missing
-
- From http://forum.pfsense.org/index.php/topic,41066.0.html
Before upgrade, this job exists if PPPoE restart is ena... -
- This relates to a few issues already posted:
http://redmine.pfsense.org/issues/764
http://redmine.pfsense.org/iss... -
- It's nice that 2.0 has the ability to add custom strings but what we also really need is the ability to create custom...
-
01:53 AM pfSense Packages Bug #1114 (Resolved): Snort Dashboard Widget has wrong link
-
- If you have OPT1 bridged to LAN, and OPT2 bridged to LAN, in 1.2.3 you have a single if_bridge interface with OPT1, O...
09/25/2011
-
- Lists like that can be added as URL table aliases in 2.0 (though the code may need adjusting so it only grabs the fir...
-
07:42 PM Feature #1901: Maintain IP range tables for popular Internet sites
- "We could dump the ASN numbers to plain txt files to be picked up off a pfsense server or mirror"
Right, that woul... -
03:43 AM Feature #1901: Maintain IP range tables for popular Internet sites
- For this to be useful or "complete" it would need a hybrid approach. You can't be sure that the spf record will also ...
-
- A somewhat related recent discussion http://forum.pfsense.org/index.php/topic,38741.0.html
-
- Current version of pfsense includes the filterdns daemon which periodically resolves any fqdn in aliases into IP(s). ...
-
- It boots fine and just doesn't load those drivers. We can't acknowledge the license automatically per its terms, we'r...
-
12:55 PM Bug #1902 (Rejected): intel_ipw license ack prevents boot from LiveCD
- Actual results:
When booting from LiveCD, boot fails. Messages indicate
legal.intel_wpi.license_ack=1
legal.... -
- updated patch
-
- Hmm, I would tend to agree with the OP on this matter. Seems like the firewall should be more fault-tolerant than go...
-
- As long as the executed script is a PHP script then using gettext() is no problem.
-
01:33 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- Me Too
Test environment
H/W: P4 2.8/DDR 512M
OS: pfsense 2.0 release
PPTP client disconnect kills all I...
09/24/2011
-
04:11 PM Bug #1900 (Closed): pfSense can't tell the difference between AF31 and EF markings
- I created a floating rule to queue packets marked as AF31 into a queue called "qVoice". Packets marked with EF do not...
-
12:47 AM Bug #1896: Port forwarding with Lagg
- after reinstalling (forcing update) this corrected the problem.... It was PfSense, and it wasn't.... 30 hours later :P
09/23/2011
-
07:37 PM Feature #1899 (Resolved): Discard Changes Button
- The GUI should have a 'Discard Changes' next to the 'Apply Changes' button.
People often delete/edit the wrong ru...
09/22/2011
-
- Applied in changeset commit:6be59d2855f40efaae5b2823df8f79a9a5d8a1df.
-
- The first few bytes of the corrupted executable are
_.Warning: Missing argument 8 for openvpn_client_export_instal... -
- not a general problem. Looks like that's from running out of memory possibly, post to the forum or mailing list with ...
-
04:24 AM Bug #1895 (Rejected): Login Error
- This morning i opened Chrome and i get this error (see screenshot attach).
-
-
- Do you have a link to a forum thread where any possible configuration issue was eliminated with help from others?
... -
- As the name says it, I fear that since I have a Lagg setup, I am unable to get any ports to forward to any of my LAN ...
-
- Please use the forum, mailing list, IRC, etc for support. This is not a support system. If a bug is confirmed after t...
-
- I just wanted to update that its 1:30 AM PST and I am done with this for the night. I have tried everything, I also s...
-
- As the name says it, I fear that since I have a Lagg setup, I am unable to get any ports to forward to any of my LAN ...
-
05:00 AM Bug #1892: Cannot static add static IPv6 route.
- Hello,
You've made a typo line 182 :...
09/21/2011
-
10:55 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- I have a test system running pfSense 2.0 amd64 here which I am able to duplicate the issue on that I can give access ...
-
- The newer miniupnpd is going forward with more then just the ipv6 firewall control bits. It also fixes and enhances q...
-
- Client support not added yet, pfPort for it doesn't build because of uid missing that the client uses.
-
- Hi,
I've committed your fix, please verify.
-
- Commit bb5a2d0e727dee7d200d0f84dc76ef0c790e0c00 adds a bug in static route adding.
The dropdown box don't list sub... -
02:38 PM Bug #1893 (Closed): Status - Queue does not show all the queues
- I have a nanoBSD system with 6 queues, I only see 5 queues and their details in the Status - Queue screen.
-
10:52 AM Bug #1342: kernel crash with RC1 on vmware
- for the record : the problem was solved by disabling cdrom emulation in the guest.
-
- this is, like everything with IPv6, targeted for 2.1. This is likely the single most complex and time consuming piece...
-
- Hello,
I'm very interrested by this topic (IPv6 for CP). Do you have any plan or any schedule for this development...
09/20/2011
-
-
03:52 PM pfSense Packages Bug #1842: problem with FreeRADIUS?
- Just updated to 2-Release and problems have been fixed, so this can be closed.
Thanks. -
- Hi- I've just experienced the exact same issue. pfSense 2.0(REL) running nanobsd-2g on a Netgate Hamakua. My WAN DH...
-
09:48 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- Hi Chris,
we here at KRLS received your email this morning regarding this issue.
I would be more than happy to pr... -
- Thanks Alan!
Anyone who can replicate this, if you can get us access to your system (Hafiz, last we tried we couldn'... -
- please make merge requests on github. https://github.com/bsdperimeter/pfsense
-
07:19 AM Bug #1891 (Resolved): i18n of checks related to the [apply] buttons'
- We have been working on translating pfsense to Turkish and we noticed that controls related to the [Apply] buttons (m...
-
- We have been working on translating pfsense to Turkish and when we wanted to translate console scripts, we noticed th...
-
04:07 AM Bug #1344: Replace prototype javascript code with jQuery
- Another notification menu for jQuery
http://www.codebasehero.com/2011/07/jquery-notification-menu/
09/19/2011
-
04:29 PM pfSense Packages Bug #1887: axfrdns from tinydns is not working
- Rebooting fixed the binding error and with the attached patch, axfrdns is now responding to zone transfer requests.
... -
- I updated to 2.0-release yesterday and that introduced a new problem. Now I get "tcpserver: fatal: unable to bind: a...
-
- Please don't file tickets on pfSense when you are also modifying it.
-
- Ermal Luçi wrote:
> I am not sure what is your 'pfSense' referring to but you
> need to upgrade fully your installa... -
- To clarify further, the newer route binary we use in pfSense somewhere around RC3 also adds routes when specifying th...
-
01:17 PM Bug #1889 (Feedback): "route change" doesn't work (after commit:fb85533d)
- I am not sure what is your 'pfSense' referring to but you need to upgrade fully your installation to latest 2.0-RELEA...
-
- Oups, the correct URL of the problematic commit is :
https://github.com/bsdperimeter/pfsense/commit/fb85533d54d4ad2... -
- Also, revert commit:fb85533d54d4ad2dfcbda5a7b0b8007b5e4eac43 fix the bug.
-
- It seems that commit:fb85533d (or related ones) breaks my pfSense. When I add a static route (even the default route)...
-
- I found the issue, we did update a ISC bind port, but not the one we were actually building with.
Correcting mistake. -
- ISC dhcpd v4.2.1-p1 shipped with pfsense 2.0 suffers from recently published denial-of-service vulnerability CVE-2011...
09/18/2011
-
- I am experiencing the same problem reported in bug #119. #119 was closed a year ago, but I'm seeing the same problem...
09/17/2011
-
- Config upgrade for 1.x to 2.x versions needs to move MTU values on interfaces to MSS. The MTU field in 2.0 does what ...
-
- Already fixed (just now). Go to firmware settings and make sure you pick the amd64 url from the drop-down, then try a...
-
09:51 AM Bug #1885 (Closed): [Bug?] Switching from RC3 Snapshot to Release downloads wrong arch
- Hi,
just did an update on the latest 2.0RC3 amd64 and changed the firmware download link to the one provided by th... -
- I nicely blew up a 2.0 RC box by accidentally pasting in the download URL for the iso instead of the update file in t...
-
- The Limiter Info page currently shows the real time output of 'ipfw pipe show', which is less than ideally displayed....
09/16/2011
-
09:03 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- I paid to get this some attention. Ticket ID: QDS-175569
Hopefully you can reproduce yourself or use the above p... -
04:31 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- chris ,i gave to Ermal connection info to my pf 2.0 rc3 box.You can easily replicate this bug on my pf box because i ...
-
- If you have an interface with an IP type of "none", and then create a port forward on that interface with a destinati...
-
02:17 AM Bug #1881 (Closed): PPPoE server does not allow the Internet
- Have:
Pfsense 2.0-RC3 (i386) built on Sun Sep 11 21:36:53 EDT 2011
WAN - Static IP 93.152.19.7
LAN - 192.168.2.0... -
12:08 AM pfSense Packages Bug #1609: unable to install Avahi
- I am not sure who would want to / or need to fix this, I am reverting to i386 because it installs the package and wor...
09/15/2011
-
- oh another thing when set to update every 12 hours (suggested)
it tends to override settings that was previously set. -
- I don't know how important it is but, there seems to be a missing gid entry
snort_netbios.rules. it's not important... -
- FQDNs in as network with a /32 are equivalent to hosts, that works fine, it's how all ours are setup.
-
04:40 PM Bug #1861: false log filterdns: host_dns: failed looking up "88.192.1250.131"
- Found your bug !
<alias>
<name>files2_zimbra_com</name>
<type>network</type>
<address>files2.zimbra.co... -
- Sep 15 21:48:05 filterdns: host_dns: failed looking up "a184": hostname nor servname provided, or not known
Sep 15 ... -
04:36 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- Chris, I have to admit, I have not checked it in the past few weeks but replication was simple. Build a pfSense, c...
-
09:42 AM Bug #1874: Captive Portal Login dies on empty input
- The Probleme why it wont work for voucher codes is really simple.
On line 143 in /usr/local/captiveportal/index.ph... -
- Just reviewd it on github, the problem is not fixed for usage with voucher codes!
-
- Is it only for user or pass fixed or also for vouchers?
I ask because im unable to view the changeset :(
09/14/2011
-
-
- I have installed pfSense in ESX hundreds if not thousands of times and recently 5-10 in 5. I have never seen this is...
-
03:24 PM Bug #1879 (Rejected): At end of install to hard drive pfSense directs user to eject CD but doesn't unlock CD ROM drive.
- Issue:
While testing pfSense 2 RC3 on ESXi 5.0.0 I received an error that the install CD was still locked by the ope... -
-
07:52 AM pfSense Packages Bug #1870: phpSysInfo on 2.0 RC3
- Perry,
Your reasoning is logical. I also tried the newest version of phpsysinfo and It destroyed my 2.0 install whe... -
01:51 AM Feature #1878 (Closed): Option to add permanent ARP entries for WOL
- Hi,
NOYB helped me with this problem http://forum.pfsense.org/index.php/topic,40451.0.html
It would be nice featu...
09/13/2011
-
07:01 PM Bug #781: Entering sim code problem on a Huawei E1752
- Yoann Simon wrote:
> Hello,
> I have got same problem with my 3g modem ...
> On france in business connexion ...
... -
- Hello,
I have got same problem with my 3g modem ...
On france in business connexion ...
Crdt
Poustiquet -
05:35 PM pfSense Packages Bug #1870: phpSysInfo on 2.0 RC3
- I was the package developer. As most of the info phpsysinfo provides is in pfSense 2.0 and I don't use pfSense on har...
-
03:48 PM
pfSense Packages
Bug #1873: Layer 7 RDP
- HTTP and SSH works... RDP not. This means that the L7 rule is in use
-
03:46 PM
pfSense Packages
Bug #1873: Layer 7 RDP
- We had a new pfsense installation with no other rules then the L7 rule. We just configured it as documented in you (s...
-
- You have to show more how you have configured this.
Usually its better to go through the forum first for such things... -
07:10 AM
pfSense Packages
Bug #1873 (Closed): Layer 7 RDP
- If you create a Layer7 filter with RDP blocked and assign it to a LAN (I didn't test WAN) it won't block RDP sessions...
-
- Applied in changeset commit:00eda3a2eb5fb7e43ba9504c90ad494f41504888.
-
- Applied in changeset commit:90477318aad050eb1f1b5282fac790f2a985fce3.
-
- If you go to the captive portal login page and click submit without filling in any in the vouchercode-field you´ll ge...
-
03:14 PM Bug #1877 (Resolved): (cosmetic) aliases-edit markup to wide for background
- @2.0-RC3 (amd64) built on Mon Sep 12 10:27:40 EDT 2011@
hi,
when editing a list of aliases the right side of som... -
- If you enter an umlaut into "Invalid Voucher Message" or "Expired Voucher Message" you get an acknowledgement, that y...
09/12/2011
-
- It having authentication for everything, and working in general, is adequate as far as I'm concerned.
-
- I've got it so that it requires authentication now by including the header and footer. Chris, does this satisfy your ...
-
- fixed
-
- Applied in changeset commit:8678130da6c30f82272a1b27b190da3e90211bf1.
-
- Applied in changeset commit:75bb4bc3849cda6af49ee51cc495353dcb5ad489.
-
- Panic still happens even after a gitsync picking up these changes. First run through the wizard (going from DHCP to P...
-
- Applied in changeset commit:851083bd2f9c382dc513d4a10608f5dc840efc01.
-
- Applied in changeset commit:43d8f1cc9cd5190858ed7220339c0a147cc68dd2.
-
- Problem as described here, with patch here.
http://sourceforge.net/mailarchive/forum.php?thread_name=4DA4F48F.10608... -
- you need to post to the forum or mailing list for further help. Things are the way they are for good reason, you just...
-
- and you will tell me that there is no need for a Disable this Rule in Outbound rule editor ?
Think a moment a non ... -
- There is a vast difference there. One disables the rule (as it says) the other makes an exception where no nat is per...
-
- Hello,
Firewall: NAT: Port Forward: Edit
=================================
Disabled Disable this rule
Set this...
09/11/2011
-
- I would love to work on it and re-release it. How can we find out if the package maintainer is still around?
-
- probably because it didn't work. I'm not sure the package creator is around anymore. It also has no authentication su...
-
- pkg_config.8.xml - phpSysInfo has a maximum_version attribute of 1.2.3 on pkg_config.8.xml.
phpSysInfo does not s... -
- This is a general issue with packages that have conflicting dependencies. We expect to switch packages to PBIs in the...
-
- Not really avoidable if multiple packages use a particular dependency and cleanup during install. Perhaps a solution ...
09/10/2011
-
- I think that's a config issue of some sort, search on that or post to the forum or mailing list for help. regardless ...
-
10:20 PM Bug #1869 (Rejected): Broadcom 4306 Won't work
- I'm not entirely sure which logs to attach, or what you need, but just ask, and I'll reply.
When I us "ifconfig bw... -
11:19 AM
Bug #1865: Fatal error by saving System: Advanced: Miscellaneous
- I've updated to 2.0-RC3 (i386) built on Fri Sep 9 12:46:04 EDT 2011 and it works fine again.
Thanks Jim.
09/09/2011
-
- It would be great to be able to pull down a menu when setting the advanced DHCP server options. The link given in th...
-
- I have a setup with a Multi-WAN configuration, with one cable modem with MTU 1500 and one DSL modem, MTU 1492. After...
-
- happy to learn it (red background)
for me it is ok, I won't loose time anymore in creating 10 rules with varying t... -
- Red background on a form field means an alias can be used. That is consistent throughout the entire GUI.
-
- "other" includes aliases. Just for you (-:
Can you for 1 minute impersonate someone discovering pfsense.
He sees ... -
- Applied in changeset commit:98a4cdc2a27cb5723ba3c01e64cee980691be2a4.
-
- Applied in changeset commit:ae0023beeaa0da21cf2080e81cec9631bee63c8e.
-
09:40 AM
Bug #1865 (Resolved): Fatal error by saving System: Advanced: Miscellaneous
- pfSense 2.0-RC3 (i386) built on Thu Sep 8 15:15:55 EDT 2011
When I click on the save button appears this error m... -
- The CPU frequency for power saving is only printed if the current frequency does match the highest frequency. If you ...
-
09:50 AM
Bug #1866 (Rejected): Dashboard: System Information: CPU Type no longer shows powersave details
- pfSsense 2.0-RC3 (i386) built on Thu Sep 8 15:15:55 EDT 2011
Since this or previous snapshot the power saving de... -
- If the local subnet of an IPsec network is an IP alias, the "start" button under Status>IPsec doesn't show up. That's...
-
- Found a copy:
http://cygnus.redirectme.net/FreeBSD_4.9_Docs/legal/intel_ipw/LICENSE
We should be careful of thi...
09/08/2011
-
- "other" includes aliases.
-
- Hello,
please make the 'Destination Port from' field display something like
'single port or alias' to be consistent... -
05:34 PM Bug #1851: ECC-Cert breaks the webconfigurator
- maybe we want to "block" uploading the following curves until working ...
-
- gen...
-
- I think lighty need it enable in config and presently we do not enable sslv3.
-
- from /var/log/lighttpd.error.log ...
-
- will try to make it more readable in the future - hopefully ;)
-
- ok I misunderstood what you were talking about there. I fixed the description to be more clear.
-
- pushing the official NTP-servers (counting 3) for my country by DHCP - so it is a reputable source declared by law.
... -
- The server entered for pfSense is used by the NTP daemon as its upstream source - you can't have pfSense use only its...
-
- As with DNS, (optionally) allow the upstream DHCP server to provide NTP servers to the firewall.
-
- (fyi, searching '1250' in a fresh backup gives nothing of course)
-
- Hello,
I made a typo while entering an IP in a alias object.
1250 instead of 250
I validated the alias (5 IP l... -
- plz also read "further reading" from bug #1858
-
- after installing a new box the system-SSH-key should default to 2048 or even 4096 bit RSA-keys...
-
- key-sizes above 8192 will not work on Safari (Mac OS X)
-
- after installing a new box the system-SSL-cert should default to 2048 or even 4096 bit RSA-keys
current: RSA - 102... -
- The friendly interfaces are shown now.
Remaining is showning the root interface so they can be cloned -
- so expecting a "feature" for the console would not be implemented either:
> ##external management-host##... -
- We can't stop everyone from shooting themselves in the feet.
Changing the default LAN behavior to anything but st... -
- I agree with Jim. This is not going in but thanks for the suggestion.
-
- hi Jim,
somehow i still do not understand WHAT can get wrong?
I know it is not simple and some coding is needed
... -
- Still too many things to go wrong. It is not that simple.
And the real fix is even simpler: Just don't plug a new ... -
- hi Jim,
x) send just 1 (one) ICMP package for ping
x) single pings to the whole subnet concurrently and wait for ... -
- It's a lot of work and a lot to go wrong for very little benefit there. If someone is concerned about it taking over ...
-
- maybe we set the LAN-if to DHCP to test if there is already a server and that way we obtain an IP (this way we know t...
-
- when a new installation is booting it should check if there is already another host using the default ip of 192.168.1.1
-
- On the 2.1 IPv6 snaps dating September 1st I can not replicate this anymore, this may have been fixed somewhere by an...
-
- Applied in commit:21c160361dff36941812424390c10a235762b411
-
- Just to synchronize the answer
http://forum.pfsense.org/index.php/topic,38559.msg210340.html#msg210340 -
- The linked info is still OpenBSD-only I believe.
-
01:23 AM Feature #1855: NAT before IPsec VPN
- Thanks to FreeBSD 9 it should be now possible to NAT before the VPN in order to solve network overlapping.
Here htt... -
- I thought we already had a feature ticket open for IPsec+NAT in general but doesn't appear so.
-
- Removing a IPv6 phase 2 entry leaves the IPsec SPD policy in place.
Deleting it manually from the IPsec status SPD... -
- what's mentioned in this ticket works, there are other caveats with IPsec and NAT
09/07/2011
-
- Alright, please give me a few weeks, as I am really far behind in my projects, thank you again for this quick fix. I ...
-
- thank you
-
- The filter field on diag_logs_filter.php should be at the top of the page, like the states display, as if you have a ...
-
- Ermal Luçi wrote:
> I cannot see this driver in FreeBSD 8.1 did you compile from some patch of sorts?
The driver ... -
- driver doesn't exist in stock releases
-
- I cannot see this driver in FreeBSD 8.1 did you compile from some patch of sorts?
-
- Hi,
after checking that altq is implemented into the driver, I added it to the is_altq_capable() function in the "... -
- Hi,
running the latest 2.0RC3:
2.0-RC3 (amd64)
built on Tue Sep 6 22:44:22 EDT 2011
the WAN interface is m... -
- Having a /32 IP on an interface and a gateway on another subnet is not a valid pfSense configuration, and thus not su...
-
- then we have a problem.....!
If i read well, nat-1-to-1 is in both direction, when an interface is 'wan'.
You a... -
01:54 PM pfSense Packages Bug #1853 (Resolved): Barnyard2 binary not installed
- After installing snort (2.8.6.1 pkg v 2.0) on pfsense 2.0-RC3 (amd64) (built on Tue Sep 6 22:44:22 EDT 2011) barnyard...
-
- Applied in changeset commit:f65b6851ea3d473128e48419450f0edb5d8830d9.
-
- some ecc-test-certificates are available at "SECG's ECC/TLS test server":http://tls.secg.org/index1.php?action=server...
-
- known bugs in lighttpd - fixed in 1.4.29
see http://www.lighttpd.net/2011/7/3/1-4-29 -
- Uploading a certificate which is using Elliptic curve cryptography (ECC) - afterwards webconfigurator stops respondi...
-
09:09 AM pfSense Packages Bug #1852 (Closed): Snort and IP-Block Installation/Deintsallation issue
- If you install snort, it replaces system Perl with Perl-multi-threaded. Once you remove snort it removes Perl-multi-t...
-
- Traffic shaper - By Queue view needs to use friendly inerface names to allow easy configuration and presentation.
Al... -
- If there are 2 WANs and the primary one fails and there are limiters configured in floating rules(after policy routin...
09/06/2011
-
10:06 PM Bug #1437: More validation needed on CSR generation
- I have so much going on, I thought I replied to this, but I guess I did not.
Everything that I did to cause an err... -
- should be fixed, awaiting Yehuda's confirmation
-
- should be fixed, will leave for confirmation
-
- if someone wants to see this get fixed in short order, purchase a 5 hour support subscription at portal.pfsense.org a...
-
-
-
-
- no change
-
- this has been confirmed working.
-
- well, OVH big big french provider is also using this king of setup
A well english detailled big page explain all h... -
- yes, I have added the 'dashboard' as small fixe, because all other unauthorized pages goes to 404.
In future release... -
- The privilege system will redirect the user to whichever page is listed first in their permissions (which they are al...
-
- Applied in changeset commit:fce938b3a32ed071edf9aba6b1f07ec08a82a743.
-
- Applied in changeset commit:7179d00e0b0134615e442829792960f343b8a378.
-
- menu system/user/manager
add a group
fix a few status/logs page among all proposed priviledges
create a user
ad... -
- not sure what you're referring to
-
- Hello,
after day and day of tuning/discovering, I had tried the user/group settings to build a person able to consul... -
- Duplicate of #972
-
- Hello,
During network lessons at school you learn that the gateway must be reachable with an IP in the same subnet... -
- it is both directions, where traffic is set to leave the interface where that 1:1 is assigned. Read http://pfsense.or...
-
- oh, I see no reason why you call nat-1to-1 when traffic is internet toward natted machine (B) and routing when it is ...
-
- rules including policy routing and NAT are separate entities that must be configured as you desire.
-
- Hello,
Add a check box in NAT One to One that make it more strict.
Explanation
my system have
Two WAN inter... -
- please close this one, I recreated it in 'pfsense' .
-
- duplicate of #1845
-
- Hello,
after day and day of tuning/discovering, I had tried the user/group settings to build a person able to consul... -
05:33 PM Bug #337: sticky connections do not work
- Ermal, can you please check your last commit. I can confirm that sticky sessions work for me on snapshot 2.0-RC3 (i3...
-
- Under Diagnostics > Limiters, it only shows the limiter pipes and does not display any information about the child qu...
-
- This is a package issue and not a Captive portal issue from what you have posted here.
-
- With CP & vouchers, say a 1 hour voucher never kicks off/logs out the end user after an hour.
After searching there ... -
03:03 AM Bug #1841 (Duplicate): TCP state issue when traffic passing through a GRE tunnel within IPSEC
- When running a GRE tunnel between two Pfsense 2.0 RC3 TCP traffic is shown as having its SYN/ACK packets dropped on t...
09/05/2011
-
08:29 AM Bug #1052: Certificate validation of the LDAPS servers is not enforced
- Ermal Luçi wrote:
> HAve you tested with latest snapshots?
Hi Ermal,
No, I haven't; just came back from holida...
09/04/2011
-
- That's good to know, we'll investigate. We're still not quite sure what's happening, some ipv6 builds seem to hit it ...
-
04:26 PM Bug #1758: Upgrade fails to upgrade RRD data for traffic and packets
- These errors showed up on the upgrade, and are associated with the upgrade process, not trying to display the graphs....
09/03/2011
-
08:18 PM pfSense Packages Bug #1753: Spoink integration
- Thanks to pfsense developers for the new version of snorte with the block offenders working, i've enabled it on my pf...
-
- ah, you mean the rtadvd settings? That would make sense, I tied them into the dhcp6 config as that seems the most str...
-
- My thought was actually keeping it in the DHCPv6 screen even though it has nothing to do with it, since we already ha...
-
- Ah, yes, well, the gateway field needs to go from the dhcpv6 config in the UI since it doesn't exist.
Complain to th... -
02:22 PM Bug #1839: No Quality RRD Graph w/ Non-Default Frequency Probe
-
RRD Graphs: Quality
Works with Probe Frequency (System - Routing) set at default (empty), 1, 2, 3, and 9 (prob... -
-
Setting Gateway Frequency Probe (System - Routing) to a non-default value, say 10 seconds, causes the RRD Quality ... -
- rtadvd service support committed. should fix both dns server and rtadvd clients to get the same information.
radns... -
- The package has the snort rules file hardcoded in the code.
This makes it a step to be followed when upgrading snort... -
- Still not fixed.
http://forum.pfsense.org/index.php/topic,40498.0.html
09/02/2011
-
- I am just upgrading now, has there been some work since I last posted on the PPPoE server? If so, thank you.
-
- Post you dyndns section from your config.
-
05:58 AM Bug #1838 (Resolved): Dynamic DNS disabled checkbox doesn't work
- As disabling a dynamic dns client with the checkbox, nothing is done except still updating dyndns host. Checkbox does...
-
- Latest package of snort should not have this issue.
-
- Should be working now
-
- Should be working now
-
- Should work as intended now.
-
03:26 AM Bug #337: sticky connections do not work
- Updated to version 2.0-RC3 (i386) built on Thu Sep 1 18:11:23 EDT 2011
Unfortunately the behavior is still the sam...
09/01/2011
-
- Description of how to replicate: ...
-
- need some additional consideration on how this should work from the GUI perspective. Maybe just make the underlying b...
-
- The specific issue is that you can not select a Carp IPv6 vip interface for router advertisements. Ideally we need to...
-
- need to be able to bind router advertisements to CARP IPs.
-
- Found this client which is even listed in the FreeBSD ports, dump the info into our filesystem and the rest is picked...
-
- Need RFC 5006 support for DNS from RAs
-
- probably will have to add a new port for miniupnpd-v6 or similar, as we're going to keep RELENG_2_0 snapshot builders...
-
- Thread in the miniupnp forum here.
http://miniupnp.tuxfamily.org/forum/viewtopic.php?t=728
This will take a while... -
- uPNP needs IPv6 support.
-
- I can't envision any scenario where you'd need proxy NDP, though maybe something will come up in the future. On the r...
-
- Need a WAN type for stateless autoconfiguration for IPv6, that's not going to be common in typical Internet firewall ...
-
- PPTP type WANs need IPv6 support. Not sure how that works or if it's even feasible, needs research.
-
- Layer 3 protocol isn't relevant for much of what it does, but needs review and at least some changes for IPv6.
-
- Captive portal needs IPv6 support. ipfw fwd doesn't function with IPv6 last I heard, amongst other things that need w...
-
- server load balancer needs IPv6 support.
-
- rc.newwanipv6 needs work. Might need to converge with rc.newwanip to avoid race and stepping on each other causing re...
-
- PPPoE server needs IPv6 support. Sends IPv6-CP packets, not confirmed if DHCPv6 server works.
-
- DynDNS client needs IPv6 support for registering AAAAs.
-
- Spoink is now integrated to snort and snort uses 2.9.0.5 port.
Possibly should ping the spoink author about this? -
- fixed
-
- Hello,
There is a bug in the configuration of DHCPv6 : using the deny unknown-clients option makes the DHCPv6 fail...
08/31/2011
-
- thanks
-
01:40 PM Bug #1666: OpenVPN interface doesn't get added to bridge after reboot
- Seems to be fixed with latest snapshot, thanks.
-
- This is for snort-dev from what i can see!?
-
- Also looking for a progress/status report here. Thanks.
08/30/2011
-
- The rules such as: ...
-
- HAve you tested with latest snapshots?
-
- Can you please try latest snapshots?
Also if still seeing issues can you get packet traces and any logs from pfSense... -
- Applied in changeset commit:db74464bf6f980c5c5845d53624d4c6f1b139fa7.
-
- I was finally able to reproduce this in a VM, even when the WAN was initially set for DHCP. Same panic message/backtr...
-
- Can you please test with tomorrows snapshot?
-
06:21 AM Bug #337: sticky connections do not work
I'm having the exact same behaviour as described by Mark Huijgen earlier. The only difference is that my two WAN in...-
- Bootstrap, a nice framework from Twitter which has a number of some quite nice features http://twitter.github.com/boo...
-
07:22 AM pfSense Packages Bug #1822 (Closed): Snort won't start
- So many issues with this package.
1) Local rules get wiped every time the auto updater runs. Then we have to go t... -
07:16 AM Bug #1806: OpenVPN Tunnel Network label configuration creates a wrong configuration file when using TAP device mode
- Did it with success, but with a little modification about the netmask. In fact to make it work I had to use the $mask...
-
- STP options work fine, not enough here to do anything with. Please post to the forum or mailing list with information.
-
04:12 AM pfSense Packages Bug #1821 (Rejected): spanning tree options
- Spanning Tree options are not considered
Also available in: Atom