Activity
From 09/27/2011 to 10/26/2011
10/26/2011
-
10:40 PM Bug #1918: update status
- In almost all cases, such errors are resolved by clearing your browser's cache or closing and opening the browser ses...
-
09:22 PM Bug #1918: update status
- Just noticed the same problem. This is a stock release that was upgraded from RC1 to RELEASE. I haven't altered any...
-
10:38 PM Bug #1981 (Closed): lighttpd errorlog using text rather than clog format
- Please note that the format of /var/log/lighttpd.error is text rather than clog, which could potentially eat up disks...
-
05:48 PM Feature #1938: Filter messages broken into multiple syslog messages
- Wow, that's troubling. I escaped it because it looked like PHP was swallowing the backslash. But I'm looking now and ...
-
- A warning to those trying the proposed change, it doesn't quite work as written. It works if you run it from the comm...
-
01:17 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- Chris Buechler wrote:
> we're working on it. a partial fix will be in 2.0.1 though not sure we can get it entirely f... -
01:15 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- we're working on it. a partial fix will be in 2.0.1 though not sure we can get it entirely fixed for then (it's comin...
-
- Hafiz Rafiyev wrote:
> anybody working on this urgent bug?
Not that I am aware of. I also have an embedded test... -
12:09 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- anybody working on this urgent bug?
-
10:14 AM Bug #1928: Can't sync voucher database when carp peer is also active
- I deleted the CARP sync so that the voucher database keeps syncing fine but when the master goes down I still can't g...
10/25/2011
-
05:34 PM Bug #1980 (Closed): RFC 2136 will not update two records for one interface
- If you have two entries for the same interface, only the top one in the list will be updated when the address of that...
-
- It would be useful to have some stock aliases that come by default which are not editable by users. These aliases wou...
-
-
- In traffic_shaper_wizard_multi_all.xml wizard when you get to the VoIP bandwidth screen there is a box for each WAN, ...
-
10/24/2011
-
-
-
-
- ISC DHCP 4.2.3 was released on 19 Oct 2011
http://www.isc.org/software/dhcp -
- #1958 details the same issue, closed it in favor of this one.
-
- There are issues with the MAC pass-through, replicable in the following scenarios (use the attached config as a start...
-
- forgot this was here, opened #1976 instead which has the specific problem.
-
- Looks like a problem with your setup, I've got 2.0 amd64 installed in VirtualBox and it's fine.
Given the crashes ... -
04:09 AM Bug #1975 (Rejected): Weird Interface Names.
- Hello,
just installed the latest release 2.0 amd64 into virtualbox and got weird interface names.
I'm still inv...
10/23/2011
-
- As discussed here:
http://forum.pfsense.org/index.php/topic,39555.0.html
ipfw entrystats is returning wrong valu...
10/22/2011
-
- http://siproxd.sourceforge.net/index.php?op=changelog
> Release 0.8.1
> 10-Jul-2011
> This release fixes some bu... -
09:56 PM Bug #1336: PPTP VPN NAT on WAN or other external interface
- Test 2.0-Release This problem has been resolved.
Thank you pfsense team effort.
10/21/2011
-
10:11 PM pfSense Packages Bug #1749: Rules/ Categories update
- I am seeing this issue with 2.0 release, amd64. The process that autogenerates oinkmaster_nnnnnn_em0.conf is creating...
-
04:42 PM Bug #1968: webconfigurator dies
- well,I will try to unlock as suggested next time if it happens again.
Something I did not mention here, related to... -
- Probably the rate command is hanging on status_graph.php and if a command hangs like that, it hangs up fastcgi, which...
-
- ok,
new freeze of web interface WITHOUT modification.
This eliminates totally 'syntax error'
I made following in... -
03:02 PM Feature #1972 (Resolved): Allow /31 networks to be configured
- http://svn.freebsd.org/changeset/base/226402
Needs to be allowed on the web interface. -
- Duplicate of #1736
-
02:33 PM Bug #1971 (Rejected): carp sync username not honored
- Carp sync appears to not use the @Remote System Username@ anymore, but always sends @admin@ as the username.
I had... -
- Might be related to #1351
Also this post to the ipsec-tools list sounds similar:
http://sourceforge.net/mailarchi...
10/20/2011
-
05:14 PM Bug #1969: IPsec refuses connection after first Cisco Client connection
- I believe this to be the same issue as bug 1970, except that somehow the Cisco client is not disconnecting properly (...
-
- Attached are logfiles. First is a connection while racoon is in a hung state, followed by 4 pings to 8.8.8.8 (all ti...
-
- Using the same setup as this bug:
http://redmine.pfsense.org/issues/1969
It appears that after a while with no cl... -
- no, no other addon, pure valilla pfsense 2.0 !
It is not my habit to spell www.something Www.something.
I have no... -
02:32 PM pfSense Packages Bug #1443: Squid errors on updating version
- This is now less of an issue as I have found that Squid will still run correctly. The error messages still appear, bu...
-
02:09 PM Bug #1402: When creating a QinQ it works until reboot.
- Hi,
I'm experiencing the same trouble with qinq.
*My platform* : Pfsense 2.0 amd64
*What I am trying to do* ... -
12:52 AM pfSense Packages Bug #1749: Rules/ Categories update
- I too have noticed this problem. Even though Snort will say "reapplying enabled/disabled rules" when doing an updated...
10/19/2011
-
- Full details etc in thread
http://forum.pfsense.org/index.php/topic,41631.0.html
I have mobile IPsec set up, and... -
- it's not that simple. need the specific problem, this isn't adequate as a bug report. I suspect it's an installed pac...
-
- --- /conf/backup/config-1319057958.xml 2011-10-19 23:18:58.000000000 +0200
+++ /conf/backup/config-1319057344.xml 20... -
- I just checked and this is happening in the release version as well, in both VMware and on physical hardware.
10/18/2011
-
03:22 PM Bug #1856 (Closed): Removing a Phase 2 does not remove the SPD policy
- Failed to replicate on current code.
more /tmp/spd.conf.reload.1318965869.ob2B1v
spddelete -6 2001:470:d72c:0:0:... -
- Ok, so the code now triggers properly on a nanobsd system but it causes a Out of Memory situation on a 128MB system (...
-
- The fix seems to work as intended, I tried switching filter rules back and forth on protocol, gateways, groups and ad...
-
- The direct_networks table was never used but initially created for the purpose of negate policy based routing rules. ...
10/17/2011
-
05:10 PM pfSense Packages Bug #1966 (Resolved): 500 Error On Graph Request of LightSquid
- System
------
I have PfSense version 2.0 (built on Tue Sep 13 17:33:40 EDT 2011), installed Squid 2.7.9_4.2 and Lig... -
- In the future it would be nice to have IPsec allow connections to/from multiple peers for the same tunnel, for failov...
-
- Applied in changeset commit:ebcd13cac1f5d83f7352016c9bc750adfd6e21fa.
-
- Applied in changeset commit:7cc56826c8036cac40b95aab8e1c6349741e5e01.
-
- The ticket system is not for troubleshooting or help - please keep it on the forum.
-
11:04 AM Bug #1964: Changing MTU on pfSense 2.0 doesn't work
- Why in pfsense 1.2.3 or in a linux-based firewall as Kerio Control it works and in pfSense 2.0 it doesn't work???
I'... -
- Then your MTU is 1496. It changed as it was supposed to - which means the MTU change is not the problem, and you have...
-
- Yes, I get the same ifconfig when I change MTU on the WebGUI, but it doesn't work, while if I do the same things in p...
-
- Please keep the discussion on the forum until a bug is confirmed. Changing the MTU works fine.
[2.0-RELEASE][root@... -
- I tried to change MTU on pfSense 2.0 into 1496 because of my internet connection needs. While i could get it working ...
-
02:08 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- Hafiz Rafiyev wrote:
> any progress abouts this bug?
Don't know. Was never contacted after my last comment nearl... -
I second that question! Is there something anyone needs, such as access to an online system that can reproduce ...-
- any progress abouts this bug?
10/16/2011
-
- Please note that the default webpage generated by get_default_captive_portal_html() /etc/inc/captiveportal.inc with a...
-
08:35 AM Feature #1962 (Closed): disconnect specific pptpd interface from command line
- For pfsense usage in secured network ability to disconnect specific dialin user or interface is must.
if some one k... -
12:49 AM pfSense Packages Bug #1961 (Closed): Spoink and IP banning
- Hello,
this request follows this post on the Forum: http://forum.pfsense.org/index.php/topic,41895.0.html.
Su...
10/15/2011
-
- Hi,
I've just been messing with the Dashboard and found a "bug" in the html source as shown in the picture added. -
02:09 PM Bug #1959: openssl does not accept ECC-certificates
- funny that it's possible to create a ecc-certificate using the older binary but it only works on the newer one ….
-
- related to this one #1851
-
- The default openssl-package will not work with ECC-certificates...
-
- maybe testing using the php-function "openssl_pkey_get_details" and checking for return-level could sanitize uploadin...
-
- Applied in changeset commit:8800783f5d513c7ff0cbb890d988f95ac9db4df9.
-
- Applied in changeset commit:e1fd8311bd36906e423c4c711dc3133078e8a464.
-
- I do not like that since you cannot draw the line what is more important and what is to skip.
-
- Either was fixed from someone else or it was not an issue.
It is correct in code either way. -
- I do not see any usefulness on this!
-
- Patches accepted!
-
- notes from originator: ...
10/14/2011
-
- Not at all sure if it's an issue or not (haven't used ipfw before), but I've noticed that on my system 'ipfw show' pr...
-
- Having an <input type="button"> inside an <a href="..."> is technically a violation of HTML5. Also, it makes the butt...
-
- no specific bug here, need to post things like this to the list or forum first as it's more likely a config issue as ...
-
04:03 AM Bug #1956 (Closed): Detect if logout was succesful
- Currently, a message "You have been disconnected." is shown regardless whether the user was logged in before or not. ...
10/13/2011
-
11:34 AM Bug #1951: Auto generated reply-to rules not working
- 6 Screenshots attached. The Floating and Interface Group rules were only enabled one at a time. They are both disable...
-
- Without showing what you configured on the floating rules i cannot give you a real answer.
My first guess is that ... -
- A fix has been put in for 2.0.1 to prevent nat from messing with carp packets.
-
- If user create manual outbound rules with source any it can break carp protocol.
Prevent this by adding protection n... -
- That is true actually.
I will try to put a reasonable fix soon.
For now just remove the interface that is auto-se... -
- Just a FYI in case people want to upgrade their 1.2.3 databases on their 2.0 installs. Executing the following code o...
10/12/2011
-
- In Multi-WAN setups, traffic seems to always leave the default gateway no matter what interface it entered on. For te...
-
- The rules from "Bypass firewall rules for traffic on the same interface" go at the end of the ruleset, and thus are n...
-
- When trying to set a gateway group on a filter rule in 2.1 the address family validation triggers. This needs an addi...
10/11/2011
-
- When using the shaper wizard, the text description for VoIP prioritization by address isn't consistent with the resul...
-
- The description is wrong and the fix is wrong. Opening this because it appears committing a fix broke at least someth...
10/10/2011
-
08:05 PM pfSense Packages Bug #1765: Unable able to clear Snort Alerts
- I uninstalled and reinstall the snort package. Its still not clearing the log. I dont get a blank page anymore. Just ...
-
06:44 PM Feature #1947 (New): Option to kill all states when creating a block rule
- When creating a block rule you have the option to close all states relevant to the rule.
-
- Word is that the move to FreeBSD 9 will solve some of the issues as the ipsec socketbuffer patch will be gone.
-
- Your "fix" is not correct approach, needs more work. We need to be able to set a larger mask in case of a new ipv6 en...
-
- In config step x we run the following commands. The only things I can think of is that these have failed.
function... -
01:40 PM Bug #1758: Upgrade fails to upgrade RRD data for traffic and packets
- OK, I'm no expert on RRD, but have done a little more digging on this.
In 1.2.3, the Traffic and Packet RRDs were ... -
03:24 PM Bug #1946: /usr/local/www/services_captiveportal.php
- Please open a new ticket for subsequent issues and please be sure the line #'s correspond with the prior changes.
... -
03:22 PM Bug #1946: /usr/local/www/services_captiveportal.php
- Small error in commit (Revision 164a1525)
>lines 272 to 293
replace $config['captiveportal'] with $newcp
e.g. ... -
03:15 PM
Bug #1946: /usr/local/www/services_captiveportal.php
- Applied in changeset commit:164a152577ccce56f896ea5ef020fcfbf60fe896.
-
03:15 PM
Bug #1946 (Feedback): /usr/local/www/services_captiveportal.php
- Applied in changeset commit:d568e38d0275efebbe0c1969e26b31bdf125570e.
-
- line 642
replace @second@ with @third@
line 661
replace @second@ with @fourth@ -
- /usr/local/www/services_captiveportal.php
lines 272 to 293
replace @$config['captiveportal']@ with @$newcp@
li... -
02:45 PM
Bug #1945: Missing zone parameter
- Applied in changeset commit:943b7053835d0928c79af1bfe32fa6fc8d6d2b6a.
-
02:40 PM
Bug #1945: Missing zone parameter
- Applied in changeset commit:5dd5ef52a5676415da4acef460dc2244d9eb8dbf.
-
02:40 PM
Bug #1945 (Feedback): Missing zone parameter
- Applied in changeset commit:8a880cb97227c3cd41ed236d06e3188f97cea2ee.
-
- line 336 in /usr/local/www/services_captiveportal_vouchers.php...
-
- line 667 in /etc/inc/voucher.inc...
-
- Sure if you would want to "cover all the bases" you'd need to monitor DNS traffic and add IPs to the passthrough list...
-
- The only option here is to create a transparent proxy for dns and hook that up with daemons as filterdns.
All other ... -
- It is not meant to work that way!
The voucher sync will sync with the master or use it as its central database.
I... -
06:26 AM Bug #1943 (Closed): PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
- (Copied from http://forum.pfsense.org/index.php/topic,40671.msg209656.html#msg209656)
Attached are four files. Her...
10/09/2011
-
- Once snort has a large amount of blocked hosts the page doesn't load and a view source shows no html at all. This is ...
-
- Correct, it is not needed on FreeBSD9 where a alternative is already checked in by Bjoern.
The patch we use from m... -
- Probably not needed on 9.
-
- Patch is active for 9 for FreeBSD 8 base it needs to be included by hand on builds to not create issues with 2.0 builds.
-
07:17 AM pfSense Packages Feature #1815: OpenVPN Client Export Additional Parameters
- I know, I added and submitted it on github :)
Thanks for closing the issue, I forgot about that! -
- There is an advanced section there that allows this
-
- the filters come from l7filter so it would need to be fixed there. They classify RDP as "OK: Probably works", but the...
-
- You are sure your rdp is not encrypted?
-
- This has been solved for 2.0
-
- This should be fixed since long now
-
-
- fixed, thanks
10/08/2011
-
- Category: Captive Portal
Affected version: 2.1-IPv6
Affected Architecture: All -
- line 660 in /etc/inc/voucher.inc...
-
- I don't know that I would call returning to the original functionality a "feature", this is a "bug" that broke the sy...
-
- Probably some daemon should be done that reads this and does not complain much.
Does not seem hard to merge the tcpd... -
- this is the default logging format and not sure it should be changed, leaving as feedback for thoughts from others. M...
-
- Seems its a better alternative to syslog since it supports encryption and can secure communication.
http://www.freeb... -
- I am working on this.
-
12:35 AM Bug #1939 (Closed): Atheros DCMA-82 w/ IBSS has kernel panic
- I'm trying to put together a Netgate ALIX kit for which I also picked up this wireless card that specifically states ...
10/07/2011
-
- The filter messages are being fragmented into multiple syslog message making filter log parsing difficult and unrelia...
-
- I accidentally deleted the earlier one when I was trying to delete an incorrect comment.
would be nice to have su... -
- Firewall: Rules: Advanced Options offers various options, to limit max number of connections per source IP and connec...
-
- When entering an IP address for an interface in the GUI or the console, it would make sense to reject the input if th...
-
- would be nice to have support for interface groups in the NAT screens
-
10/06/2011
-
- AFAIK pfsense NAS recognizes the WISPr RADIUS attributes such as
WISPr-Bandwidth-Max-Up
WISPr-Bandwidth-Max-Down
I... -
09:37 AM pfSense Packages Bug #1930: Multiple package install failures on fresh 2.0 install
- ahh success, whatever you did fixed it! -- all three packages installed correctly...thanks so much
-
- http://files.chi.pfsense.org/mirror/downloads/pfSense-2.0-RELEASE-amd64.iso.gz
-
- Think I found the issue - please try again
-
- PBI's are only available in 2.1 which is not readily available outside of IPV6 testing.. Where did you download this...
-
- I have a fresh install of 2.0RELEASE_AMD64 on ESXi
I'm trying to install...
SquidGuard
lightsquid
openvpn cli... -
- A minor issue with the Status: Captive portal: Test Vouchers tab
When all vouchers submitted for checking have tim... -
- Hi,
When I try to sync the voucher database from the slave to the master I get a "Disallowing CARP sync loop" mess...
10/05/2011
-
- Needs input validation in web interface as well, that doesn't suffice.
-
06:43 AM Feature #1917: DHCP server support for multiple domains in search list
- To solve this problem, I've written this patch:...
-
- Applied in changeset commit:099e764a797146c0dc9810e8f99cd18789a8608e.
-
- Applied in changeset commit:007e59d2bf7d5be02e5cd34d3c1f5d2723ce5149.
-
10:00 AM Bug #1927 (Resolved): missing require in OpenVPN openvpn.auth-user.php template
- Hi,
I was unable to authenticate against LDAP using OpenVPN, and found that the openvpn.auth-user.php template app... -
- Applied in changeset commit:bb37807c45ca5286696e9f5bb3365ce1e529b207.
10/04/2011
-
- Duplicate of #1736
-
06:50 AM Bug #1926 (Rejected): CARP in 2.0 only working with username 'admin'
- We upgraded from 1.2.3 where the admin user was not called admin, but eg. 'username'.
'username' was set in 2.0 in...
10/02/2011
-
- Enhance pfsense's Captive Portal "Allowed IP addresses" to enable the use of IP tables defined as Aliases. This featu...
-
- not likely a bug as all of that works, post to the forum or mailing list for help.
-
02:27 PM Bug #1923 (Rejected): RoutingGroups issue
- I am using routing groups to have my ppp/umts device as tier1 gateway and an Ethernet interface as backup gateway (ti...
09/30/2011
-
12:15 AM Bug #1344: Replace prototype javascript code with jQuery
- Nice Pagify jQuery plugin https://github.com/cmpolis/Pagify
09/29/2011
-
- The stge(4) driver isn't included, but works if loaded from a module.
See http://forum.pfsense.org/index.php/topic... -
- For CP on IPv6 to work ipfw tables need to be tought about v6 addresses and
ipfw forward at layer2 needs to be coded... -
- this isn't possible as MAC passthrough has no session status by design, it's always allowed.
-
- It would be nice if the MAC and MAC Description of a computer that is allowed thru the Captive portal with his mac ad...
-
- Applied in changeset commit:6c1ebf813768d2f1952d729c7b43ccc22ffc96cc.
-
03:02 AM Bug #1920 (Resolved): Incorrect title banner in 2 of 3 "Status: System Logs" Web Configurator pages.
- When using the Web Configurator to navigate to the Status -> System Logs -> Firewall tab, the title of the "Normal Vi...
-
- that's not a general bug, it's some problem with your system. post to the forum or mailing list.
-
01:34 AM Bug #1918: update status
this appear on 2.0 release on jetway nc9c-550lf-
- Hi, after the check for update status in dashbord and in menu system > firmware > autoupdate i receive this error : F...
-
02:08 AM Bug #1919 (Resolved): Package re-install loop on console after upgrade - package reinstall take ages on serial console
- In fact, this is not an actual loop.... it's rather an innefiency in update_output_window() when $pkg_interface == "c...
-
- Hi, the same error in my installation. pfsense 2.0 rel running on jetway nc9c-550lf. I have static public ip, when th...
09/28/2011
-
- Applied in changeset commit:433e98427c6f66e3170b125c2541896cc073ff0e.
-
- updated with actual problem. other part a feature in #1917
-
06:02 AM Bug #1912: DHCP server domain search list needs input validation
- If I put "services lan.stdenis lan.auber" in the field, I get a config.xml that contains:
<domain>intranet</dom... -
- The DHCP server's search list only supports a single domain, should be extended to support multiple domains such as: ...
-
- Applied in changeset commit:d353423564517a5038f57996769cb488ec802d7a.
-
- Applied in changeset commit:240ffd2e7e748f0074d572756cd40bb272b29451.
-
- Using a User Naming Attribute other than CN does not appear to work. Additionally, LDAP authentication (both Diags--...
09/27/2011
-
- After a little more testing, it looks like it still WILL use the credentials after the bind test. I did not give anon...
-
- Im running pfSense 2.0, with an LDAP server running on CentOS6 (iRedmail). Both are in virtual machines, on a connec...
-
- Steps to reproduce:
1) Create a new auth server of type LDAP.
2) Set all paremeters correctly, and save.
3) Edit ... -
- Currently relayd does not show up under Status > Services. This makes it difficult to kill/restart relayd if a certai...
-
- that fills in what you have in that field, and works correctly. Need to see what your <dhcpd> config.xml contains.
-
- The domain search list box needs input validation to ensure a valid domain is entered there.
-
10:54 AM Bug #636: layer7 not work correctly
- We find it generally works, however adding just a few rules sends our CPU usage to 100%. We're still on one of the RC...
-
10:53 AM Feature #1911 (Closed): Interface Groups
- Interface groups are only usefull now to add firewall rules to multiple interfaces. Problem is that when you want to ...
-
- With "ifconfig -m" My Broadcom, Intel and Realtek chipsets call it "Autoselect" so I think the text can be changed to...
-
- The default is to not set a value, so the OS handles it automatically.
Autonegotiate forces the NIC to autonegotia... -
- In interface configuration when choosing Duplex settings, the help text states:
"Here you can explicitly set speed a... -
08:51 AM pfSense Packages Bug #1880: snort package 2.9 v2
- here is another snort example of what i found earlier with active x missing i guess it's something with the config? i...
-
08:47 AM Feature #1904: DHCP server doesn't allow arbitrary config blocks
- Thank you for updating the ticket -- any comments on whether this feature is under consideration? Maybe even a sim...
Also available in: Atom