pfSense

10/14/2011

08:03 PM Bug #1958 (Closed): CP ipfw ruleset has two rules with the same number

Not at all sure if it's an issue or not (haven't used ipfw before), but I've noticed that on my system 'ipfw show' pr... Dim Hatz

09:24 AM Bug #1957 (Resolved): Remove button-inside-hyperlink usage from web forms

Having an <input type="button"> inside an <a href="..."> is technically a violation of HTML5. Also, it makes the butt... David Nadle

05:20 AM Bug #1951 (Rejected): Auto generated reply-to rules not working

no specific bug here, need to post things like this to the list or forum first as it's more likely a config issue as ... Chris Buechler

04:03 AM Bug #1956 (Closed): Detect if logout was succesful

Currently, a message "You have been disconnected." is shown regardless whether the user was logged in before or not. ... Benjamin P

10/13/2011

07:51 PM Revision cf37ec23: Remove the old direct_networks table which is not used throughout the filter code. Instead we now create a negate_networks table which contains both vpns, directly connected networks (static routes) which should never be tagged for policy routing which breaks traffic.

This fixes Ticket #1950 and needs to be MFC to 2.0 for 2.0.1 Seth Mos

06:47 PM Revision c066ea8a: Remove the old direct_networks table which is not used throughout the filter code. Instead we now create a negate_networks table which contains both vpns, directly connected networks (static routes) which should never be tagged for policy routing which breaks traffic.

This fixes Ticket #1950 and needs to be MFC to 2.0 for 2.0.1
Conflicts:
etc/inc/filter.inc Seth Mos

02:58 PM Revision f7dc7ce1: Add no nat/rdr rules for carp protocol so people do not screw their setups.

Ermal LUÇI

02:58 PM Revision 378b2987: Add no nat/rdr rules for carp protocol so people do not screw their setups.

Ermal LUÇI

12:28 PM Revision 7ad4b1f4: Move the old databases to the backup folder in conf

Fixes ticket #1758 Seth Mos

12:28 PM Revision eb5e790f: Restore the RRD backup before attempting a migration as this bites the nanobsd users.

We immediately backup the new databases to a new rrd.tgz file. The old database will be moved to /root
Fix for ticket... Seth Mos

12:15 PM Revision 8fa054b1: Move the old databases to the backup folder in conf

Fixes ticket #1758 Seth Mos

12:12 PM Revision e34cf1f6: Restore the RRD backup before attempting a migration as this bites the nanobsd users.

We immediately backup the new databases to a new rrd.tgz file. The old database will be moved to /root
Fix for ticket... Seth Mos

11:34 AM Bug #1951: Auto generated reply-to rules not working

6 Screenshots attached. The Floating and Interface Group rules were only enabled one at a time. They are both disable... Larry Titus

11:10 AM Bug #1951: Auto generated reply-to rules not working

Without showing what you configured on the floating rules i cannot give you a real answer.
My first guess is that ... Ermal Luçi

11:09 AM Bug #1954 (Feedback): Outbound manual nat rules could break CARP

A fix has been put in for 2.0.1 to prevent nat from messing with carp packets. Ermal Luçi

11:07 AM Bug #1954 (Closed): Outbound manual nat rules could break CARP

If user create manual outbound rules with source any it can break carp protocol.
Prevent this by adding protection n... Ermal Luçi

11:07 AM Bug #1948: VoIP Rule from shaper wizard doesn't work as the description implies

That is true actually.
I will try to put a reasonable fix soon.
For now just remove the interface that is auto-se... Ermal Luçi

06:00 AM Bug #1758: Upgrade fails to upgrade RRD data for traffic and packets

Just a FYI in case people want to upgrade their 1.2.3 databases on their 2.0 installs. Executing the following code o... Seth Mos

10/12/2011

07:43 PM Bug #1951 (Rejected): Auto generated reply-to rules not working

In Multi-WAN setups, traffic seems to always leave the default gateway no matter what interface it entered on. For te... Larry Titus

05:05 PM Bug #1950 (Resolved): "Bypass firewall rules for traffic on the same interface" doesn't work as intended

The rules from "Bypass firewall rules for traffic on the same interface" go at the end of the ruleset, and thus are n... Jim Pingle

11:10 AM Bug #1949 (Resolved): can not set gateway group on a filter rule.

When trying to set a gateway group on a filter rule in 2.1 the address family validation triggers. This needs an addi... Seth Mos

10/11/2011

09:31 PM Revision 3f57df75: Disable could not find gateway for FOO log message. It is not causing any trouble and is making folks feel like there is something wrong with their install when there really is no issues.

Scott Ullrich

07:56 PM Revision ad700f39: Fix static routes editing and removal for both IPv4 and IPv6. Changing a route should clean up too.

Fix ticket #1892 Seth Mos

04:30 PM Bug #1948 (Resolved): VoIP Rule from shaper wizard doesn't work as the description implies

When using the shaper wizard, the text description for VoIP prioritization by address isn't consistent with the resul... Jim Pingle

03:37 PM Revision d8b989bc: Correct the updates path

Scott Ullrich

04:54 AM Bug #1946 (New): /usr/local/www/services_captiveportal.php

The description is wrong and the fix is wrong. Opening this because it appears committing a fix broke at least someth... Chris Buechler

12:00 AM Revision df39dd8a: replacing prototype by jQuery on firewall_*

Vinicius Coque

10/10/2011

08:05 PM pfSense Packages Bug #1765: Unable able to clear Snort Alerts

I uninstalled and reinstall the snort package. Its still not clearing the log. I dont get a blank page anymore. Just ... Cino .

07:54 PM Revision 0491163b: Merge pull request #14 from bcyrill/master

fix 1946 Scott Ullrich

07:52 PM Revision 13a45484: fix Bug 1946

Cyrill B

07:50 PM Revision 8d344afe: Merge pull request #13 from bcyrill/master

Bug 1944 Scott Ullrich

07:46 PM Revision 52bb3619: fix typo (Bug 1944)

Cyrill B

07:18 PM Revision d568e38d: Fix multi instance cp items. Fixes #1946

Scott Ullrich

07:15 PM Revision 164a1525: Fix multi instance cp items. Fixes #1946

Scott Ullrich

06:46 PM Revision 943b7053: Revert "Add zone. Fixes #1945"

This reverts commit 8a880cb97227c3cd41ed236d06e3188f97cea2ee. Scott Ullrich

06:44 PM Feature #1947 (New): Option to kill all states when creating a block rule

When creating a block rule you have the option to close all states relevant to the rule. Jonathan Bastin

06:41 PM Revision 8a880cb9: Add zone. Fixes #1945

Scott Ullrich

06:41 PM Revision 5dd5ef52: Add zone. Fixes #1945

Scott Ullrich

03:44 PM Bug #1676 (Feedback): dead IPv6 gateway causes kernel panics

Word is that the move to FreeBSD 9 will solve some of the issues as the ipsec socketbuffer patch will be gone. Seth Mos

03:42 PM Bug #1892: Cannot static add static IPv6 route.

Your "fix" is not correct approach, needs more work. We need to be able to set a larger mask in case of a new ipv6 en... Seth Mos

03:39 PM Bug #1758: Upgrade fails to upgrade RRD data for traffic and packets

In config step x we run the following commands. The only things I can think of is that these have failed.
function... Seth Mos

01:40 PM Bug #1758: Upgrade fails to upgrade RRD data for traffic and packets

OK, I'm no expert on RRD, but have done a little more digging on this.
In 1.2.3, the Traffic and Packet RRDs were ... Eddie Atherton

03:24 PM Bug #1946: /usr/local/www/services_captiveportal.php

Please open a new ticket for subsequent issues and please be sure the line #'s correspond with the prior changes.
... Scott Ullrich

03:22 PM Bug #1946: /usr/local/www/services_captiveportal.php

Small error in commit (Revision 164a1525)
>lines 272 to 293
replace $config['captiveportal'] with $newcp
e.g. ... Cyrill B

03:15 PM Bug #1946: /usr/local/www/services_captiveportal.php

Applied in changeset commit:164a152577ccce56f896ea5ef020fcfbf60fe896. Anonymous

03:15 PM Bug #1946 (Feedback): /usr/local/www/services_captiveportal.php

Applied in changeset commit:d568e38d0275efebbe0c1969e26b31bdf125570e. Anonymous

03:13 PM Bug #1946: /usr/local/www/services_captiveportal.php

line 642
replace @second@ with @third@
line 661
replace @second@ with @fourth@ Cyrill B

03:06 PM Bug #1946 (Closed): /usr/local/www/services_captiveportal.php

/usr/local/www/services_captiveportal.php
lines 272 to 293
replace @$config['captiveportal']@ with @$newcp@
li... Cyrill B

02:45 PM Bug #1945: Missing zone parameter

Applied in changeset commit:943b7053835d0928c79af1bfe32fa6fc8d6d2b6a. Anonymous

02:40 PM Bug #1945: Missing zone parameter

Applied in changeset commit:5dd5ef52a5676415da4acef460dc2244d9eb8dbf. Anonymous

02:40 PM Bug #1945 (Feedback): Missing zone parameter

Applied in changeset commit:8a880cb97227c3cd41ed236d06e3188f97cea2ee. Anonymous

02:32 PM Bug #1945 (Closed): Missing zone parameter

line 336 in /usr/local/www/services_captiveportal_vouchers.php... Cyrill B

02:15 PM Bug #1944 (Closed): Typo in /etc/inc/voucher.inc

line 667 in /etc/inc/voucher.inc... Cyrill B

12:04 PM Feature #1901: Maintain IP range tables for popular Internet sites

Sure if you would want to "cover all the bases" you'd need to monitor DNS traffic and add IPs to the passthrough list... Dim Hatz

10:00 AM Feature #1901: Maintain IP range tables for popular Internet sites

The only option here is to create a transparent proxy for dns and hook that up with daemons as filterdns.
All other ... Ermal Luçi

09:51 AM Bug #1928: Can't sync voucher database when carp peer is also active

It is not meant to work that way!
The voucher sync will sync with the master or use it as its central database.
I... Ermal Luçi

06:26 AM Bug #1943 (Closed): PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only

(Copied from http://forum.pfsense.org/index.php/topic,40671.msg209656.html#msg209656)
Attached are four files. Her... David Burgess

10/09/2011

05:15 PM pfSense Packages Bug #1942 (Resolved): snort_blocked.php loads blank

Once snort has a large amount of blocked hosts the page doesn't load and a view source shows no html at all. This is ... Jonathan Bastin

01:18 PM Todo #1568 (Resolved): Import the IPv6 patch that allows router advertisements with forwarding enabled

Correct, it is not needed on FreeBSD9 where a alternative is already checked in by Bjoern.
The patch we use from m... Seth Mos

12:31 PM Todo #1568 (Feedback): Import the IPv6 patch that allows router advertisements with forwarding enabled

Probably not needed on 9. Ermal Luçi

12:46 PM Feature #1829 (Feedback): CARP with IPv6 support

Patch is active for 9 for FreeBSD 8 base it needs to be included by hand on builds to not create issues with 2.0 builds. Ermal Luçi

08:56 AM Revision 573ae2d1: fix typo. redmine #1941

Chris Buechler

07:17 AM pfSense Packages Feature #1815: OpenVPN Client Export Additional Parameters

I know, I added and submitted it on github :)
Thanks for closing the issue, I forgot about that! Andy I.

06:36 AM pfSense Packages Feature #1815 (Closed): OpenVPN Client Export Additional Parameters

There is an advanced section there that allows this Ermal Luçi

06:57 AM pfSense Packages Bug #1873 (Closed): Layer 7 RDP

the filters come from l7filter so it would need to be fixed there. They classify RDP as "OK: Probably works", but the... Chris Buechler

06:31 AM pfSense Packages Bug #1873: Layer 7 RDP

You are sure your rdp is not encrypted?
Ermal Luçi

06:37 AM pfSense Packages Bug #1689 (Resolved): Home URL broken from package paths

This has been solved for 2.0 Ermal Luçi

06:34 AM pfSense Packages Bug #1765 (Feedback): Unable able to clear Snort Alerts

This should be fixed since long now Ermal Luçi

06:33 AM pfSense Packages Bug #1753 (Resolved): Spoink integration

Ermal Luçi

04:53 AM Bug #1941 (Resolved): Typo in voucher_save_db_to_config function

fixed, thanks Chris Buechler

10/08/2011

09:36 PM Revision 3f978888: converting from prototype to jQuery on interfaces_assign.php

Vinicius Coque

07:04 PM Bug #1941: Typo in voucher_save_db_to_config function

Category: Captive Portal
Affected version: 2.1-IPv6
Affected Architecture: All Cyrill B

06:45 PM Bug #1941 (Resolved): Typo in voucher_save_db_to_config function

line 660 in /etc/inc/voucher.inc... Cyrill B

12:27 PM Revision dbe67167: Fixes issue with l2tp interfaces and altq

Ermal LUÇI

12:26 PM Revision 041e3190: Fixes issue with l2tp interfaces and altq

Ermal LUÇI

11:45 AM Feature #1938: Filter messages broken into multiple syslog messages

I don't know that I would call returning to the original functionality a "feature", this is a "bug" that broke the sy... Ted Lum

05:48 AM Feature #1938: Filter messages broken into multiple syslog messages

Probably some daemon should be done that reads this and does not complain much.
Does not seem hard to merge the tcpd... Ermal Luçi

04:40 AM Feature #1938 (Feedback): Filter messages broken into multiple syslog messages

this is the default logging format and not sure it should be changed, leaving as feedback for thoughts from others. M... Chris Buechler

07:14 AM Todo #1940 (New): Integrate rSyslogd

Seems its a better alternative to syslog since it supports encryption and can secure communication.
http://www.freeb... Ermal Luçi

05:51 AM Feature #1883: Diag > Limiter Info presentation enhancement

I am working on this. Ermal Luçi

12:35 AM Bug #1939 (Closed): Atheros DCMA-82 w/ IBSS has kernel panic

I'm trying to put together a Netgate ALIX kit for which I also picked up this wireless card that specifically states ... Josiah Ritchie

10/07/2011

09:38 PM Feature #1938 (Resolved): Filter messages broken into multiple syslog messages

The filter messages are being fragmented into multiple syslog message making filter log parsing difficult and unrelia... Ted Lum

02:35 PM Feature #1937 (New): Support for rule groupings

I accidentally deleted the earlier one when I was trying to delete an incorrect comment.
would be nice to have su... Chris Buechler

09:31 AM Feature #1935 (New): Allow rule with max-src-conn-* options to make conditional use of "overload <virusprot>"

Firewall: Rules: Advanced Options offers various options, to limit max number of connections per source IP and connec... Dim Hatz

08:26 AM Todo #1934 (Resolved): Add input validation for interface addresses in GUI and console

When entering an IP address for an interface in the GUI or the console, it would make sense to reject the input if th... Jim Pingle

05:07 AM Feature #1933 (Resolved): Support for interface groups in NAT screens

would be nice to have support for interface groups in the NAT screens Chris Buechler

04:10 AM pfSense Packages Bug #1930 (Closed): Multiple package install failures on fresh 2.0 install

Chris Buechler

10/06/2011

07:42 PM Revision b8f855af: Add curly braces to fix code logic. See http://forum.pfsense.org/index.php/topic,40953.msg215068.html#msg215068

Jim Pingle

01:24 PM Revision 05ff388a: Allow multiple PBI packages in one tag space separated

Scott Ullrich

12:55 PM Feature #1932 (Resolved): Captive Portal add RADIUS attributes for traffic quotas

AFAIK pfsense NAS recognizes the WISPr RADIUS attributes such as
WISPr-Bandwidth-Max-Up
WISPr-Bandwidth-Max-Down
I... Dim Hatz

09:37 AM pfSense Packages Bug #1930: Multiple package install failures on fresh 2.0 install

ahh success, whatever you did fixed it! -- all three packages installed correctly...thanks so much Fritz S

09:32 AM pfSense Packages Bug #1930: Multiple package install failures on fresh 2.0 install

http://files.chi.pfsense.org/mirror/downloads/pfSense-2.0-RELEASE-amd64.iso.gz Fritz S

09:23 AM pfSense Packages Bug #1930: Multiple package install failures on fresh 2.0 install

Think I found the issue - please try again Scott Ullrich

09:11 AM pfSense Packages Bug #1930: Multiple package install failures on fresh 2.0 install

PBI's are only available in 2.1 which is not readily available outside of IPV6 testing.. Where did you download this... Scott Ullrich

08:36 AM pfSense Packages Bug #1930 (Closed): Multiple package install failures on fresh 2.0 install

I have a fresh install of 2.0RELEASE_AMD64 on ESXi
I'm trying to install...
SquidGuard
lightsquid
openvpn cli... Fritz S

09:30 AM Bug #1931 (Closed): Status: Captive portal: Test Vouchers tab summary issue

A minor issue with the Status: Captive portal: Test Vouchers tab
When all vouchers submitted for checking have tim... Dim Hatz

07:16 AM Bug #1928 (Resolved): Can't sync voucher database when carp peer is also active

Hi,
When I try to sync the voucher database from the slave to the master I get a "Disallowing CARP sync loop" mess... Sander Naudts

10/05/2011

06:40 PM Feature #1917: DHCP server support for multiple domains in search list

Needs input validation in web interface as well, that doesn't suffice. Chris Buechler

06:43 AM Feature #1917: DHCP server support for multiple domains in search list

To solve this problem, I've written this patch:... Fabien Grumelard

02:15 PM Revision 007e59d2: Include certs.inc before calling lookup_ca in auth.inc. Fixes #1927

Jim Pingle

02:15 PM Revision bb37807c: Standardize page titles for firewall log pages. Fixes #1920

Jim Pingle

02:15 PM Revision 099e764a: Include certs.inc before calling lookup_ca in auth.inc. Fixes #1927

Jim Pingle

10:15 AM Bug #1927: missing require in OpenVPN openvpn.auth-user.php template

Applied in changeset commit:099e764a797146c0dc9810e8f99cd18789a8608e. Jim Pingle

10:15 AM Bug #1927 (Feedback): missing require in OpenVPN openvpn.auth-user.php template

Applied in changeset commit:007e59d2bf7d5be02e5cd34d3c1f5d2723ce5149. Jim Pingle

10:00 AM Bug #1927 (Resolved): missing require in OpenVPN openvpn.auth-user.php template

Hi,
I was unable to authenticate against LDAP using OpenVPN, and found that the openvpn.auth-user.php template app... Colin Petrie

10:15 AM Bug #1920 (Feedback): Incorrect title banner in 2 of 3 "Status: System Logs" Web Configurator pages.

Applied in changeset commit:bb37807c45ca5286696e9f5bb3365ce1e529b207. Jim Pingle

10/04/2011

07:17 AM Bug #1926 (Rejected): CARP in 2.0 only working with username 'admin'

Duplicate of #1736 Jim Pingle

06:50 AM Bug #1926 (Rejected): CARP in 2.0 only working with username 'admin'

We upgraded from 1.2.3 where the admin user was not called admin, but eg. 'username'.
'username' was set in 2.0 in... Marcel Manz

10/02/2011

11:38 PM Revision 076b14b2: converting from prototype to jQuery on interfaces.php

Vinicius Coque

08:33 PM Revision 8bb22d9c: Add full path to ssl files and silence warning

Warren Baker

06:11 PM Feature #1924 (New): Ability of CP's allowed IP addresses to use aliases

Enhance pfsense's Captive Portal "Allowed IP addresses" to enable the use of IP tables defined as Aliases. This featu... Dim Hatz

05:08 PM Revision 2ee1cf7b: Use curl instead of dig

Warren Baker

05:05 PM Bug #1923 (Rejected): RoutingGroups issue

not likely a bug as all of that works, post to the forum or mailing list for help. Chris Buechler

02:27 PM Bug #1923 (Rejected): RoutingGroups issue

I am using routing groups to have my ppp/umts device as tier1 gateway and an Ethernet interface as backup gateway (ti... Walter Zomb

10/01/2011

10:56 PM Revision 0f2bd251: Add some timeouts

Warren Baker

09:15 PM Revision 8c87758e: Add fetching of Root name servers hints file to setup

Warren Baker

09:12 PM Revision 958f144a: Add global for chroot environment

Warren Baker

09:08 PM Revision 77ff55ea: Remove extra word config

Warren Baker

09:06 PM Revision 2b6d9c41: Ensure unbound is owner of ssl files

Warren Baker

08:52 PM Revision 0a3d62f7: Use the correct path for Unbound SSL keys

Warren Baker

08:51 PM Revision c67d7be7: Use the correct config variable for config

Warren Baker

08:41 PM Revision 011310aa: Update root anchor for DNSSEC validation

Warren Baker

08:36 PM Revision 503425de: function shuffling and add missing ;

Warren Baker

08:22 PM Revision e088c012: Write out Unbound configuration file

Warren Baker

08:07 PM Revision a57399f4: Update comments and to do

Warren Baker

08:06 PM Revision 4f9de9b5: Add Unbound read function for /etc/hosts

Warren Baker

07:37 PM Revision f2265766: Swop dns xml tag for unbound

Warren Baker

07:34 PM Revision 0a64e626: Make space for Unbound custom options

Warren Baker

07:27 PM Revision 69508c47: Handle domain overrides and adjust config order

Warren Baker

06:47 PM Revision 84612dd7: Add Unbound statistics

Warren Baker

06:26 PM Revision 1485c2da: Add include fore remote control and change files .conf extension

Warren Baker

06:19 PM Revision 29149246: Add static host entries to separate file and include in main config

Warren Baker

05:54 PM Revision 5b24d645: Merge branch 'master' of github.com:bsdperimeter/pfsense

Warren Baker

05:54 PM Revision e9dedc03: Various Unbound functions for configuration

Warren Baker

05:52 PM Revision 5f471c95: Use the new daemon for status->queues until a proper chart javascript library is availble

Ermal LUÇI

03:08 AM Revision e237741a: Merge branch 'master' of github.com:bsdperimeter/pfsense

Warren Baker

03:08 AM Revision df74eeb0: add ability to get root hints file

Warren Baker

01:47 AM Revision 169f1574: Create symlinks for packages config files into the PBI directory

Vinicius Coque

01:47 AM Revision 9b1b25ee: Fix pbi_info path

Vinicius Coque

01:47 AM Revision a6410107: Remove line forgotten last commit

Vinicius Coque

01:03 AM Revision 7e0d217d: Start for various Unbound functions

Warren Baker

12:20 AM Revision 1e656ec4: Change the way syslogd is killed/restarted a bit. Fixes log related pages hanging when logs are reset (or saving syslog settings)

Jim Pingle

12:20 AM Revision 8de52525: Change the way syslogd is killed/restarted a bit. Fixes log related pages hanging when logs are reset (or saving syslog settings)

Jim Pingle

12:04 AM Revision b3e15d1b: Add missing s

Jim Pingle

12:04 AM Revision 48183867: Add missing s

Jim Pingle

09/30/2011

11:57 PM Revision 689eaa4d: Move hostapd to its own log and tab, so it stops spamming the system log.

Jim Pingle

11:57 PM Revision 44b3a75c: Move hostapd to its own log and tab, so it stops spamming the system log.

Jim Pingle

07:21 PM Revision a36a239a: Add Unbound chroot directory path

Warren Baker

02:28 AM Revision 722112f3: Exclude relayd from main system log, it's really spammy, and is already in relayd.log

Jim Pingle

02:28 AM Revision 3a22174d: Exclude relayd from main system log, it's really spammy, and is already in relayd.log

Jim Pingle

12:15 AM Bug #1344: Replace prototype javascript code with jQuery

Nice Pagify jQuery plugin https://github.com/cmpolis/Pagify Warren Baker

09/29/2011

08:14 PM Revision 747cc15a: Add some missing ;'s.

Jim Pingle

08:14 PM Revision 5e49a14a: Set a full path to remote package from git

Luiz Gustavo S. Costa

07:14 PM Revision 146769ae: Show session detail in Virtual Server status

Jim Pingle

07:13 PM Revision ff160984: Show session detail in Virtual Server status

Jim Pingle

04:42 PM Feature #1922 (Closed): Add stge(4) driver

The stge(4) driver isn't included, but works if loaded from a module.
See http://forum.pfsense.org/index.php/topic... Jim Pingle

02:58 PM Feature #1831: Captive portal IPv6 support

For CP on IPv6 to work ipfw tables need to be tought about v6 addresses and
ipfw forward at layer2 needs to be coded... Ermal Luçi

12:10 PM Feature #1921 (Rejected): Log pass-through mac captive portal

this isn't possible as MAC passthrough has no session status by design, it's always allowed. Chris Buechler

03:36 AM Feature #1921 (Rejected): Log pass-through mac captive portal

It would be nice if the MAC and MAC Description of a computer that is allowed thru the Captive portal with his mac ad... Sander Naudts

06:40 AM Bug #1910: Duplex description inconsistency

Applied in changeset commit:6c1ebf813768d2f1952d729c7b43ccc22ffc96cc. Jim Pingle

03:49 AM Revision 53107064: remove symlinks for PBI binaries

Vinicius Coque

03:49 AM Revision 569aeae7: remove PBI even when packages depends on only one PBI package

Vinicius Coque

03:49 AM Revision 43dad535: Create symlinks for bin and sbin directories on /usr/local/ after installing a PBI

Vinicius Coque

03:02 AM Bug #1920 (Resolved): Incorrect title banner in 2 of 3 "Status: System Logs" Web Configurator pages.

When using the Web Configurator to navigate to the Status -> System Logs -> Firewall tab, the title of the "Normal Vi... Tim McColm

02:28 AM Revision 9a4cfa0b: Try to send the xmlrpc errors to the system log

Ermal LUÇI

02:21 AM Bug #1918 (Rejected): update status

that's not a general bug, it's some problem with your system. post to the forum or mailing list. Chris Buechler

01:34 AM Bug #1918: update status

this appear on 2.0 release on jetway nc9c-550lf Andrea Cutelle'

01:28 AM Bug #1918 (Rejected): update status

Hi, after the check for update status in dashbord and in menu system > firmware > autoupdate i receive this error : F... Andrea Cutelle'

02:08 AM Bug #1919 (Resolved): Package re-install loop on console after upgrade - package reinstall take ages on serial console

In fact, this is not an actual loop.... it's rather an innefiency in update_output_window() when $pkg_interface == "c... Louis-David Perron

01:19 AM Bug #1629: invalid state table entries after WAN IP change

Hi, the same error in my installation. pfsense 2.0 rel running on jetway nc9c-550lf. I have static public ip, when th... Andrea Cutelle'

09/28/2011

11:48 PM Revision b3c106a0: Check that we have user password otherwise strange things happen if tehre is nothing stored in the config

Ermal LUÇI

11:48 PM Revision aa690c34: Correctly check if it is a valid object or not

Ermal LUÇI

11:48 PM Revision b015aa8c: Check that we have user password otherwise strange things happen if tehre is nothing stored in the config

Ermal LUÇI

11:47 PM Revision fe032a7e: Correctly check if it is a valid object or not

Ermal LUÇI

11:32 PM Revision b1b42a06: Combine is_subnet to check for both v4 and v6 subnets

Warren Baker

11:26 PM Revision fdb9c1db: Add is_subnetv6 for checking of IPv6 subnets

Warren Baker

10:40 PM Bug #1910 (Feedback): Duplex description inconsistency

Applied in changeset commit:433e98427c6f66e3170b125c2541896cc073ff0e. Jim Pingle

06:41 PM Revision 433e9842: Clarify text/settings for media selection. Fixes #1910

Jim Pingle

06:40 PM Revision 6c1ebf81: Clarify text/settings for media selection. Fixes #1910

Jim Pingle

03:40 PM Revision 240ffd2e: Add relayd to Status > Services and widget. Add capability to kill when restarting instead of a simple reload. Implements #1913

Jim Pingle

03:39 PM Revision d3534235: Add relayd to Status > Services and widget. Add capability to kill when restarting instead of a simple reload. Implements #1913

Jim Pingle

02:04 PM Bug #1912 (New): DHCP server domain search list needs input validation

updated with actual problem. other part a feature in #1917 Chris Buechler

06:02 AM Bug #1912: DHCP server domain search list needs input validation

If I put "services lan.stdenis lan.auber" in the field, I get a config.xml that contains:
<domain>intranet</dom... Emmanuel Seyman

02:03 PM Feature #1917 (Resolved): DHCP server support for multiple domains in search list

The DHCP server's search list only supports a single domain, should be extended to support multiple domains such as: ... Chris Buechler

11:40 AM Feature #1913: Add relayd to Status > Services

Applied in changeset commit:d353423564517a5038f57996769cb488ec802d7a. Jim Pingle

11:40 AM Feature #1913 (Feedback): Add relayd to Status > Services

Applied in changeset commit:240ffd2e7e748f0074d572756cd40bb272b29451. Jim Pingle

04:57 AM Revision a5566aa8: install/remove packages using PBI

Vinicius Coque

12:18 AM Bug #1916 (Resolved): LDAP Authentication ignores user naming attribute

Using a User Naming Attribute other than CN does not appear to work. Additionally, LDAP authentication (both Diags--... c c

09/27/2011

11:36 PM Bug #1914: LDAP Authentication test wont use credentials

After a little more testing, it looks like it still WILL use the credentials after the bind test. I did not give anon... c c

10:18 PM Bug #1914 (Closed): LDAP Authentication test wont use credentials

Im running pfSense 2.0, with an LDAP server running on CentOS6 (iRedmail). Both are in virtual machines, on a connec... c c

11:05 PM Revision e3522ebf: Fixup relayd to handle DNS load balancing as well as standard TCP load balancing.

Jim Pingle

10:50 PM Bug #1915 (Resolved): LDAP "authentication containers" select button is inoperative.

Steps to reproduce:
1) Create a new auth server of type LDAP.
2) Set all paremeters correctly, and save.
3) Edit ... c c

10:39 PM Revision b7b4ab22: Merge branch 'jquery' of github.com:vcoque/pfsense into jquery

Conflicts:
usr/local/www/index.php Vinicius Coque

10:38 PM Revision 300e2c0b: convert javascript code to jQuery on system* files

Vinicius Coque

10:31 PM Revision f63932ca: Use jQuery fadeout effect

Vinicius Coque

10:31 PM Revision f910c29e: Convert prototype code to jQuery

Vinícius Coque

10:31 PM Revision b1678e2d: Convert dashboard ajax code from Prototype to jQuery

Vinícius Coque

10:31 PM Revision 9cd55a66: Add jQuery javascript library

Vinícius Coque

09:50 PM Revision b7027bae: Adding pbi_ suite of tools

Scott Ullrich

09:50 PM Revision af422d55: Adding pbi_create

Scott Ullrich

09:13 PM Revision b6d74873: Fixup relayd to handle DNS load balancing as well as standard TCP load balancing.

Jim Pingle

07:06 PM Feature #1913 (Resolved): Add relayd to Status > Services

Currently relayd does not show up under Status > Services. This makes it difficult to kill/restart relayd if a certai... Jim Pingle

06:22 PM Revision 64f39f0b: Merge branch 'jquery' of github.com:vcoque/pfsense into jquery

Vinicius Coque

06:22 PM Revision 0e7d1686: Convert prototype code to jQuery

Vinícius Coque

06:22 PM Revision 81017bc0: Convert dashboard ajax code from Prototype to jQuery

Vinícius Coque

06:22 PM Revision 0ce64219: Add jQuery javascript library

Vinícius Coque

03:00 PM Bug #1912 (Feedback): DHCP server domain search list needs input validation

that fills in what you have in that field, and works correctly. Need to see what your <dhcpd> config.xml contains. Chris Buechler

11:09 AM Bug #1912 (Resolved): DHCP server domain search list needs input validation

The domain search list box needs input validation to ensure a valid domain is entered there. Emmanuel Seyman

10:54 AM Bug #636: layer7 not work correctly

We find it generally works, however adding just a few rules sends our CPU usage to 100%. We're still on one of the RC... Jonathan Puddle

10:53 AM Feature #1911 (Closed): Interface Groups

Interface groups are only usefull now to add firewall rules to multiple interfaces. Problem is that when you want to ... Peter O

10:18 AM Bug #1910: Duplex description inconsistency

With "ifconfig -m" My Broadcom, Intel and Realtek chipsets call it "Autoselect" so I think the text can be changed to... Peter O

10:13 AM Bug #1910: Duplex description inconsistency

The default is to not set a value, so the OS handles it automatically.
Autonegotiate forces the NIC to autonegotia... Jim Pingle

10:06 AM Bug #1910 (Resolved): Duplex description inconsistency

In interface configuration when choosing Duplex settings, the help text states:
"Here you can explicitly set speed a... Peter O

08:51 AM pfSense Packages Bug #1880: snort package 2.9 v2

here is another snort example of what i found earlier with active x missing i guess it's something with the config? i... not availible

08:47 AM Feature #1904: DHCP server doesn't allow arbitrary config blocks

Thank you for updating the ticket -- any comments on whether this feature is under consideration? Maybe even a sim... → luckman212

09/26/2011

10:22 PM Revision 3ff39566: Add global to hide download tab

Scott Ullrich

10:16 PM Revision 61265070: Remove .

Scott Ullrich

10:11 PM Revision 7e2ad1be: Fix filename

Scott Ullrich

10:10 PM Revision ceb3515d: Add download feature

Scott Ullrich

05:47 PM Bug #1909: dhcp dies after reboot

Hmm, okay.
After reboot, the SSH admin reports wrong IP address for INSIDE (bridge0) but web interface
reports ... Rob Lister

05:35 PM Bug #1909: dhcp dies after reboot

[2.0-RELEASE][admin@pfcafe.cafe.local]/var/run(9): cat dhcpd.pid
[2.0-RELEASE][admin@pfcafe.cafe.local]/var/run(10... Rob Lister

05:29 PM Bug #1909: dhcp dies after reboot

Look in /var/run/*.pid - see if there are any stale (old) pid files. It's possible something else is getting a killby... Jim Pingle

05:27 PM Bug #1909: dhcp dies after reboot

Attached.
Thanks Rob Lister

05:23 PM Bug #1909: dhcp dies after reboot

can you attach your config? Chris Buechler

05:20 PM Bug #1909 (Resolved): dhcp dies after reboot

Just upgraded to to NanoBSD release from a previous 2.x RC version.
When it reboots, it comes up okay, but clients... Rob Lister

04:29 PM Bug #636: layer7 not work correctly

Strangely, I am updated to the latest 2.0 RELEASE (nanobsd) and have defined a firewall rule with Layer7 to block
ss... Rob Lister

03:21 PM pfSense Packages Bug #1908 (Closed): Vnstat

Bonjour,
j'ai un petit problème d'installation avec vnstat.
Merci de votre aide.
Beginning package installat... kevin guery

02:28 PM Bug #1906: Dashboard: Incorrect evaluation of needed upgrade

Sorry. I did not want you troubleshoot my install. I guess what I was trying to say is that you should validate input... Alex Vergilis

02:02 PM Bug #1906: Dashboard: Incorrect evaluation of needed upgrade

The expected file is plain text, not html, so it's not parsed on purpose. If it was allowed through your browser woul... Jim Pingle

02:00 PM Bug #1906: Dashboard: Incorrect evaluation of needed upgrade

There's no proxy. Either way the upgrade message is not valid and should be corrected. The html parsing failed also. ... Alex Vergilis

01:57 PM Bug #1906 (Rejected): Dashboard: Incorrect evaluation of needed upgrade

You have a proxy or portal in front of that WAN. It's printing what it got back from the remote server, in this case,... Jim Pingle

01:55 PM Bug #1906 (Rejected): Dashboard: Incorrect evaluation of needed upgrade

One of my firewalls, has 2 WANs conifgure. WAN port appears to have ICMP accees to the internet but not http. On the ... Alex Vergilis

02:11 PM pfSense Packages Bug #1907 (Closed): snort

emerging active x seems to be missing not availible

09:37 AM Bug #1905 (Resolved): Upgrade code does not rename PPPoE restart script, creates second cron job.

From http://forum.pfsense.org/index.php/topic,41066.0.html
Before upgrade, this job exists if PPPoE restart is ena... Jim Pingle

06:42 AM Revision 68e14a6b: Simplify message

Scott Ullrich

06:38 AM Revision 09b964a2: Hide warning until firmware update enabled = true

Scott Ullrich

03:17 AM Revision 110603e4: Disable download and revisit tomorrow

Scott Ullrich

03:04 AM Revision 92490745: Use escapeshellcmd

Scott Ullrich

03:03 AM Revision f54a278c: Fix path

Scott Ullrich

02:49 AM Revision ea76bdaf: Add download backup feature

Scott Ullrich

02:40 AM Revision 7c1260e3: Include functions first. Just saw a APC cache bug for getAllowedPages()

Scott Ullrich

02:34 AM Revision e70f748f: Use format_bytes()

Scott Ullrich

02:28 AM Feature #1904 (Needs Patch): DHCP server doesn't allow arbitrary config blocks

This relates to a few issues already posted:
http://redmine.pfsense.org/issues/764
http://redmine.pfsense.org/iss... → luckman212

02:21 AM Bug #834: DHCP server options for TFTP server doesn't allow arbitrary strings

It's nice that 2.0 has the ability to add custom strings but what we also really need is the ability to create custom... → luckman212

02:08 AM Revision d337fd0e: Center text

Scott Ullrich

02:07 AM Revision 9930d494: Increase colspan

Scott Ullrich

02:07 AM Revision f0f8bee2: Add delete full backup feature

Scott Ullrich

01:53 AM pfSense Packages Bug #1114 (Resolved): Snort Dashboard Widget has wrong link

Scott Ullrich

12:56 AM Bug #1903 (Closed): 1.x->2.0 Config upgrade problem with multiple bridged interfaces

If you have OPT1 bridged to LAN, and OPT2 bridged to LAN, in 1.2.3 you have a single if_bridge interface with OPT1, O... Chris Buechler

12:33 AM Revision 7d86e6a8: Nuke class

Scott Ullrich

12:31 AM Revision 1f6442a7: Show backup size

Scott Ullrich

12:27 AM Revision b8bfcce5: Add option to not restore config.xml

Scott Ullrich

12:09 AM Revision e40d415a: Make the manual firmware upgrade screen look a little less busy.

Scott Ullrich

09/25/2011

11:29 PM Revision 9928303b: Note when no backups are found

Scott Ullrich

11:19 PM Revision c1605b35: Add restore full backup tab

Scott Ullrich

09:57 PM Revision a30afe0e: Add checkbox to invoke full backup prior to upgrade

Scott Ullrich

09:01 PM Revision b2a67b55: Add option to perform full backup prior to upgrade. First commit of 2011 pfSense hackathon!

Scott Ullrich

08:02 PM Feature #1901: Maintain IP range tables for popular Internet sites

Lists like that can be added as URL table aliases in 2.0 (though the code may need adjusting so it only grabs the fir... Jim Pingle

07:42 PM Feature #1901: Maintain IP range tables for popular Internet sites

"We could dump the ASN numbers to plain txt files to be picked up off a pfsense server or mirror"
Right, that woul... Dim Hatz

03:43 AM Feature #1901: Maintain IP range tables for popular Internet sites

For this to be useful or "complete" it would need a hybrid approach. You can't be sure that the spf record will also ... Seth Mos

03:35 AM Feature #1901: Maintain IP range tables for popular Internet sites

A somewhat related recent discussion http://forum.pfsense.org/index.php/topic,38741.0.html Dim Hatz

03:17 AM Feature #1901 (Needs Patch): Maintain IP range tables for popular Internet sites

Current version of pfsense includes the filterdns daemon which periodically resolves any fqdn in aliases into IP(s). ... Dim Hatz

07:22 PM Bug #1902 (Rejected): intel_ipw license ack prevents boot from LiveCD

It boots fine and just doesn't load those drivers. We can't acknowledge the license automatically per its terms, we'r... Chris Buechler

12:55 PM Bug #1902 (Rejected): intel_ipw license ack prevents boot from LiveCD

Actual results:
When booting from LiveCD, boot fails. Messages indicate
legal.intel_wpi.license_ack=1
legal.... Bill McGonigle

07:14 PM Feature #1016: dyndns support for eurodns.com

updated patch Chris Buechler

01:39 PM Feature #1571: Interfaces completely reset when hardware is changed

Hmm, I would tend to agree with the OP on this matter. Seems like the firewall should be more fault-tolerant than go... → luckman212

04:26 AM Bug #1890: No gettext support in console scripts

As long as the executed script is a PHP script then using gettext() is no problem. Seth Mos

01:33 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP

Me Too
Test environment
H/W: P4 2.8/DDR 512M
OS: pfsense 2.0 release
PPTP client disconnect kills all I... Shadow Hwang

09/24/2011

04:11 PM Bug #1900 (Closed): pfSense can't tell the difference between AF31 and EF markings

I created a floating rule to queue packets marked as AF31 into a queue called "qVoice". Packets marked with EF do not... Tate Thatcher

12:47 AM Bug #1896: Port forwarding with Lagg

after reinstalling (forcing update) this corrected the problem.... It was PfSense, and it wasn't.... 30 hours later :P Matt Crook

09/23/2011

07:37 PM Feature #1899 (Resolved): Discard Changes Button

The GUI should have a 'Discard Changes' next to the 'Apply Changes' button.
People often delete/edit the wrong ru... Cam Cook

09/22/2011

03:05 PM Bug #1898 (Feedback): Client Export on 2.0 Release creates corrupted Windows installers

Applied in changeset commit:6be59d2855f40efaae5b2823df8f79a9a5d8a1df. Jim Pingle

02:59 PM Bug #1898 (Resolved): Client Export on 2.0 Release creates corrupted Windows installers

The first few bytes of the corrupted executable are
_.Warning: Missing argument 8 for openvpn_client_export_instal... Dim Hatz

01:35 PM Bug #1895 (Rejected): Login Error

not a general problem. Looks like that's from running out of memory possibly, post to the forum or mailing list with ... Chris Buechler

04:24 AM Bug #1895 (Rejected): Login Error

This morning i opened Chrome and i get this error (see screenshot attach).
Mario Nee

10:52 AM Revision 0c13b5f6: Correct typo, fixes Ticket #1892

Seth Mos

08:01 AM Bug #1896 (Rejected): Port forwarding with Lagg

Jim Pingle

08:01 AM Bug #1896: Port forwarding with Lagg

Do you have a link to a forum thread where any possible configuration issue was eliminated with help from others?
... Jim Pingle

07:47 AM Bug #1896 (Rejected): Port forwarding with Lagg

As the name says it, I fear that since I have a Lagg setup, I am unable to get any ports to forward to any of my LAN ... Matt Crook

07:30 AM Bug #1894 (Rejected): Port forwarding with Lagg

Please use the forum, mailing list, IRC, etc for support. This is not a support system. If a bug is confirmed after t... Jim Pingle

04:35 AM Bug #1894: Port forwarding with Lagg

I just wanted to update that its 1:30 AM PST and I am done with this for the night. I have tried everything, I also s... Matt Crook

03:01 AM Bug #1894 (Rejected): Port forwarding with Lagg

As the name says it, I fear that since I have a Lagg setup, I am unable to get any ports to forward to any of my LAN ... Matt Crook

05:00 AM Bug #1892: Cannot static add static IPv6 route.

Hello,
You've made a typo line 182 :... Alexis Olivier

02:21 AM Revision c9df50aa: Merge branch 'jquery' of github.com:vcoque/pfsense into jquery

Vinícius Coque

02:20 AM Revision 1d06188d: Convert prototype code to jQuery

Vinícius Coque

02:20 AM Revision d06201a3: Convert dashboard ajax code from Prototype to jQuery

Vinícius Coque

02:20 AM Revision 90d63a87: Add jQuery javascript library

Vinícius Coque

02:17 AM Revision f6771ddf: Convert prototype code to jQuery

Vinícius Coque

09/21/2011

10:55 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP

I have a test system running pfSense 2.0 amd64 here which I am able to duplicate the issue on that I can give access ... David Rees

08:32 PM Revision 9c070452: Fix interface finding. Now properly adds a dhcpv6 static mapping via + button.

Jim Pingle

08:22 PM Revision 9fbefc09: Fix type detection

Jim Pingle

08:16 PM Revision 9d539cb5: Fix misnomer since the page was copied from dhcpv4, change references to arp to ndp instead.

Jim Pingle

08:14 PM Revision 4e85523b: Speed up display of static dhcpv6 leases by skipping an additional ndp exec for each entry, use the existing arpdata array instead.

Jim Pingle

07:49 PM Revision 4151bdba: Fix display of static dhcpv6 assignments. Format duid with colons.

Jim Pingle

06:04 PM Revision 2fdc8262: Show MAC address on DHCPv6 output. (Not that it's used in the same way for DHCPv6 as it is for v4, but it's handy to see in one place)

Jim Pingle

05:42 PM Revision dcd81322: For DHCPv6 the CLTT (client last transaction time) is used instead of the "start" time for the lease. Should now more accurately display when a lease started.

Jim Pingle

05:08 PM Revision eb26eb1c: Commit a fix that prevents the drop down from showing over 31 length.

Fixes Ticket #1892 Seth Mos

02:59 PM Feature #1835: uPNP IPv6 support

The newer miniupnpd is going forward with more then just the ipv6 firewall control bits. It also fixes and enhances q... Seth Mos

02:55 PM Feature #1836 (Feedback): RFC 5006 support for DNS from RAs

Client support not added yet, pfPort for it doesn't build because of uid missing that the client uses. Seth Mos

02:52 PM Bug #1892 (Feedback): Cannot static add static IPv6 route.

Hi,
I've committed your fix, please verify.
Seth Mos

11:14 AM Bug #1892 (Resolved): Cannot static add static IPv6 route.

Commit bb5a2d0e727dee7d200d0f84dc76ef0c790e0c00 adds a bug in static route adding.
The dropdown box don't list sub... Alexis Olivier

02:38 PM Bug #1893 (Closed): Status - Queue does not show all the queues

I have a nanoBSD system with 6 queues, I only see 5 queues and their details in the Status - Queue screen. Michael Gaudette

10:52 AM Bug #1342: kernel crash with RC1 on vmware

for the record : the problem was solved by disabling cdrom emulation in the guest. Thomas NOEL

07:49 AM Feature #1831: Captive portal IPv6 support

this is, like everything with IPv6, targeted for 2.1. This is likely the single most complex and time consuming piece... Chris Buechler

03:26 AM Feature #1831: Captive portal IPv6 support

Hello,
I'm very interrested by this topic (IPv6 for CP). Do you have any plan or any schedule for this development... Thomas NOEL

12:27 AM Revision 7fe6d08e: Merge branch 'jquery' of github.com:vcoque/pfsense into jquery

Vinícius Coque

12:25 AM Revision 826a4a77: Convert dashboard ajax code from Prototype to jQuery

Vinícius Coque

12:22 AM Revision 92a10a8a: Add jQuery javascript library

Vinícius Coque

09/20/2011

08:11 PM Revision f0be3768: Bind the state killing to the interface they should kill the states so that it does not impact other services like in #1421

Ermal LUÇI

08:11 PM Revision a486425f: Bind the state killing to the interface they should kill the states so that it does not impact other services like in #1421

Ermal LUÇI

06:57 PM Revision f393a514: Split the IAID off in the output, interpret the result. (Matches up with what shows in output from client)

Jim Pingle

06:21 PM Revision b63b9691: Remove 0x, really isn't needed

Jim Pingle

06:18 PM Revision a4dd274b: Improve duid parsing. Still some work to be done but should avoid the infinite loop it hit in some cases previously.

Jim Pingle

03:53 PM pfSense Packages Bug #1842 (Closed): problem with FreeRADIUS?

Jim Pingle

03:52 PM pfSense Packages Bug #1842: problem with FreeRADIUS?

Just updated to 2-Release and problems have been fixed, so this can be closed.
Thanks. Rob Heat

11:35 AM Bug #1629: invalid state table entries after WAN IP change

Hi- I've just experienced the exact same issue. pfSense 2.0(REL) running nanobsd-2g on a Netgate Hamakua. My WAN DH... → luckman212

09:48 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP

Hi Chris,
we here at KRLS received your email this morning regarding this issue.
I would be more than happy to pr... Ross Berryman

06:11 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP

Thanks Alan!
Anyone who can replicate this, if you can get us access to your system (Hafiz, last we tried we couldn'... Chris Buechler

07:58 AM Bug #1891: i18n of checks related to the [apply] buttons'

please make merge requests on github. https://github.com/bsdperimeter/pfsense Chris Buechler

07:19 AM Bug #1891 (Resolved): i18n of checks related to the [apply] buttons'

We have been working on translating pfsense to Turkish and we noticed that controls related to the [Apply] buttons (m... Necmettin Begiter

07:05 AM Bug #1890 (New): No gettext support in console scripts

We have been working on translating pfsense to Turkish and when we wanted to translate console scripts, we noticed th... Necmettin Begiter

04:07 AM Bug #1344: Replace prototype javascript code with jQuery

Another notification menu for jQuery
http://www.codebasehero.com/2011/07/jquery-notification-menu/ Warren Baker

09/19/2011

04:29 PM pfSense Packages Bug #1887: axfrdns from tinydns is not working

Rebooting fixed the binding error and with the attached patch, axfrdns is now responding to zone transfer requests.
... Michael Durian

04:10 PM pfSense Packages Bug #1887: axfrdns from tinydns is not working

I updated to 2.0-release yesterday and that introduced a new problem. Now I get "tcpserver: fatal: unable to bind: a... Michael Durian

02:02 PM Bug #1889 (Rejected): "route change" doesn't work (after commit:fb85533d)

Please don't file tickets on pfSense when you are also modifying it. Seth Mos

01:59 PM Bug #1889: "route change" doesn't work (after commit:fb85533d)

Ermal Luçi wrote:
> I am not sure what is your 'pfSense' referring to but you
> need to upgrade fully your installa... Thomas NOEL

01:55 PM Bug #1889: "route change" doesn't work (after commit:fb85533d)

To clarify further, the newer route binary we use in pfSense somewhere around RC3 also adds routes when specifying th... Seth Mos

01:17 PM Bug #1889 (Feedback): "route change" doesn't work (after commit:fb85533d)

I am not sure what is your 'pfSense' referring to but you need to upgrade fully your installation to latest 2.0-RELEA... Ermal Luçi

12:05 PM Bug #1889: "route change" doesn't work (after commit:fb85533d)

Oups, the correct URL of the problematic commit is :
https://github.com/bsdperimeter/pfsense/commit/fb85533d54d4ad2... Thomas NOEL

12:03 PM Bug #1889: "route change" doesn't work (after commit:fb85533d)

Also, revert commit:fb85533d54d4ad2dfcbda5a7b0b8007b5e4eac43 fix the bug.
Thomas NOEL

11:08 AM Bug #1889 (Rejected): "route change" doesn't work (after commit:fb85533d)

It seems that commit:fb85533d (or related ones) breaks my pfSense. When I add a static route (even the default route)... Thomas NOEL

01:51 PM Bug #1888: Upgrade ISC dhcpd to v4.2.2

I found the issue, we did update a ISC bind port, but not the one we were actually building with.
Correcting mistake. Seth Mos

09:14 AM Bug #1888 (Resolved): Upgrade ISC dhcpd to v4.2.2

ISC dhcpd v4.2.1-p1 shipped with pfsense 2.0 suffers from recently published denial-of-service vulnerability CVE-2011... Dim Hatz

09/18/2011

06:18 PM pfSense Packages Bug #1887 (Resolved): axfrdns from tinydns is not working

I am experiencing the same problem reported in bug #119. #119 was closed a year ago, but I'm seeing the same problem... Michael Durian

09/17/2011

03:52 PM Revision 21b8289e: Properly dispaly CP status page with the multi instance CP

Ermal LUÇI

11:26 AM Bug #1886 (Resolved): Config upgrade needs to move MTU values to MSS

Config upgrade for 1.x to 2.x versions needs to move MTU values on interfaces to MSS. The MTU field in 2.0 does what ... Chris Buechler

09:52 AM Bug #1885 (Closed): [Bug?] Switching from RC3 Snapshot to Release downloads wrong arch

Already fixed (just now). Go to firmware settings and make sure you pick the amd64 url from the drop-down, then try a... Jim Pingle

09:51 AM Bug #1885 (Closed): [Bug?] Switching from RC3 Snapshot to Release downloads wrong arch

Hi,
just did an update on the latest 2.0RC3 amd64 and changed the firmware download link to the one provided by th... Oliver Loch

04:38 AM Bug #1884 (Resolved): Lacking update validation on console upgrade

I nicely blew up a 2.0 RC box by accidentally pasting in the download URL for the iso instead of the update file in t... Chris Buechler

02:22 AM Revision c012cc39: tagged 2_0_0 with previous push, now bump version to 2.0.1-DEVEL

Chris Buechler

12:17 AM Feature #1883 (New): Diag > Limiter Info presentation enhancement

The Limiter Info page currently shows the real time output of 'ipfw pipe show', which is less than ideally displayed.... Chris Buechler

09/16/2011

09:03 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP

I paid to get this some attention. Ticket ID: QDS-175569
Hopefully you can reproduce yourself or use the above p... Alan Bryan

04:31 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP

chris ,i gave to Ermal connection info to my pf 2.0 rc3 box.You can easily replicate this bug on my pf box because i ... Hafiz Rafiyev

01:12 PM Bug #1882 (Resolved): Invalid pf rule generated from a port forward with dest=any on an interface with ip=none

If you have an interface with an IP type of "none", and then create a port forward on that interface with a destinati... Jim Pingle

02:17 AM Bug #1881 (Closed): PPPoE server does not allow the Internet

Have:
Pfsense 2.0-RC3 (i386) built on Sun Sep 11 21:36:53 EDT 2011
WAN - Static IP 93.152.19.7
LAN - 192.168.2.0... Nikolay Emashew

12:08 AM pfSense Packages Bug #1609: unable to install Avahi

I am not sure who would want to / or need to fix this, I am reverting to i386 because it installs the package and wor... ed bond

09/15/2011

07:28 PM Revision 0380704f: To avoid any possible issues during the different paths of the workflow create the zone since its first step

Ermal LUÇI

07:23 PM Revision 0dad12d8: Do not try to add mac passthrough to a not loaded ipfw since the macs might be added to the wrong zone.

Ermal LUÇI

06:52 PM pfSense Packages Bug #1880: snort package 2.9 v2

oh another thing when set to update every 12 hours (suggested)
it tends to override settings that was previously set. not availible

01:08 AM pfSense Packages Bug #1880 (Resolved): snort package 2.9 v2

I don't know how important it is but, there seems to be a missing gid entry
snort_netbios.rules. it's not important... not availible

05:24 PM Bug #1861: false log filterdns: host_dns: failed looking up "88.192.1250.131"

FQDNs in as network with a /32 are equivalent to hosts, that works fine, it's how all ours are setup. Chris Buechler

04:40 PM Bug #1861: false log filterdns: host_dns: failed looking up "88.192.1250.131"

Found your bug !
<alias>
<name>files2_zimbra_com</name>
<type>network</type>
<address>files2.zimbra.co... Franck Bourdonnec

03:53 PM Bug #1861: false log filterdns: host_dns: failed looking up "88.192.1250.131"

Sep 15 21:48:05 filterdns: host_dns: failed looking up "a184": hostname nor servname provided, or not known
Sep 15 ... Franck Bourdonnec

04:36 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP

Chris, I have to admit, I have not checked it in the past few weeks but replication was simple. Build a pfSense, c... Derrick Conner

09:42 AM Bug #1874: Captive Portal Login dies on empty input

The Probleme why it wont work for voucher codes is really simple.
On line 143 in /usr/local/captiveportal/index.ph... Andreas Böhm

08:39 AM Bug #1874: Captive Portal Login dies on empty input

Just reviewd it on github, the problem is not fixed for usage with voucher codes! Andreas Böhm

08:32 AM Bug #1874: Captive Portal Login dies on empty input

Is it only for user or pass fixed or also for vouchers?
I ask because im unable to view the changeset :( Andreas Böhm

05:54 AM Revision 7d3eeb8c: Unbreak the firewall rules, I accidentally reset the variable.

Seth Mos