Activity
From 10/08/2011 to 11/06/2011
11/04/2011
-
03:05 PM Bug #1991 (Resolved): URL Table aliases issue after config restore
- In a freshly installed 2.0 system, when restoring a previous config.xml, there seems to be an issue with error-handli...
-
01:16 PM Bug #1990 (Resolved): Custom RRD Graphs Does NOT Properly Graph "End" Value
- When I try to Set a "Start" value in Unix time AND an "End" value in Unix time, the "End" value turns into current Un...
11/03/2011
-
08:13 PM Bug #1989 (Rejected): snort engine
- no idea what you're referring to but this is nowhere near a legit bug report, post to the forum or list.
-
06:59 PM Bug #1989 (Rejected): snort engine
- snort has difficulty parsing data
-
07:24 PM Bug #1697: Interface group doesn't apply to all interfaces in all cases
- This appears fixed. Pings flow through both interfaces in a group, matching on the correct rule.
Tested on 2.0-RE... -
- Static ARP entries on disabled interfaces are tried to be applied and fail since that network doesn't exist. Need a c...
11/02/2011
-
- that's already possible, just have to use a different hostname
-
03:19 PM pfSense Packages Bug #1982: Snort exits on rules update and does not restart
- As reported above, this affects both i386 and x86 architectures according to reports in the link I gave:
http://foru... -
11:05 AM Bug #1976: problems with CP MAC pass-through
- Applied in changeset commit:e3db5627224a0293f74e0d032a9b230f98f85952.
-
- Applied in changeset commit:a135349d62a1932cb1ab9c29436efcd8e8a383d5.
11/01/2011
-
07:18 PM Bug #1987 (Resolved): GRE tunnel - Route search type
- When configuring GRE tunnels, you have the option "Route search type", which should activate the LINK1 flag to the GR...
-
06:15 PM Bug #1951: Auto generated reply-to rules not working
- For the record, this must have been "upgrade rot". After doing a clean 2.0-Release install and restoring the exact sa...
-
- Proposed patch
http://sourceforge.net/mailarchive/message.php?msg_id=28279523 -
04:30 PM Bug #1886: Config upgrade needs to move MTU values to MSS
- Applied in changeset commit:f6ee561edb89615910f316912ec033ab32e2960f.
-
- Applied in changeset commit:1cad6f6c891f7c70b36cfbdbaf4126084ab729ee.
-
- At the moment there is no way to get a list of logged in users from racoonctl, setkey, or any other utility we're awa...
-
- Applied in changeset commit:b4542701c3f275b74a309f0db7682086b6d7b461.
-
12:04 PM pfSense Packages Bug #1765: Unable able to clear Snort Alerts
- I've confirmed that option 1 works on my box also.. Thanks Leon Topliss
-
11:07 AM pfSense Packages Bug #1765: Unable able to clear Snort Alerts
- Hello, my first post here so hope its helpful. Not seeing the fix when i uninstall and reinstall. The Clear button se...
-
- what platform btw? I'm running i386 and don't have this issue. Mine is set to update every 12 hours. Once in a while,...
-
- Applied in changeset commit:4bd57d115d2fee37a0d9e8e999d6bfd3b986f3e1.
10/31/2011
-
- brings back to fatal error in .conf
Enable 'extended_response_inspection' inspection before setting 'inspect_gzip'
10/30/2011
-
- Closing, using #1965 instead.
-
03:35 AM Feature #1965: Support Multiple IPsec Peers
- It looks a duplicate of this:
http://redmine.pfsense.org/issues/1548
Actually this is explained better :D
10/29/2011
-
- yes, it would be great!
As you understand, I personally don't want to focus on the solution itself, for me any solu... -
- In addition to the web form, allow the submission of voucher via URL e.g....
10/28/2011
-
07:39 PM Bug #1983 (Resolved): Cancel Button generates a Confirm Form Resubmission message
- Add or edit a rule (such as a firewall rule) and apply it, leaving the "The settings have been applied." message open...
-
- Using Snort 2.9.0.5 pkg v. 2.0 on pfSense 2.0... using either autoupdate of rules or manual update of rules, if Snort...
-
- I've noticed that the snort_blocked.php page uses a lot of CPU in the php process. It takes a long time to render for...
-
01:36 AM pfSense Packages Bug #1942: snort_blocked.php loads blank
- Blank Page happens also on pfsense 2.0 final at these URL
#blocked pages
/snort/snort_blocked.php
#alerts
/snor... -
- Another solution is to remove Spoink and use SnortSam in it's place in the Snort package. I think this is in the dev ...
10/27/2011
-
- I just tested pfSense 2.0-RELEASE and with multiple WAN w/ multiple public IP addresses, selecting the LAN interface ...
-
11:10 AM Bug #1918: update status
- Just tried in three different browsers (2 of which I never access this device with) and an incognito window in Chromi...
10/26/2011
-
- In almost all cases, such errors are resolved by clearing your browser's cache or closing and opening the browser ses...
-
- Just noticed the same problem. This is a stock release that was upgraded from RC1 to RELEASE. I haven't altered any...
-
- Please note that the format of /var/log/lighttpd.error is text rather than clog, which could potentially eat up disks...
-
05:48 PM Feature #1938: Filter messages broken into multiple syslog messages
- Wow, that's troubling. I escaped it because it looked like PHP was swallowing the backslash. But I'm looking now and ...
-
- A warning to those trying the proposed change, it doesn't quite work as written. It works if you run it from the comm...
-
01:17 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- Chris Buechler wrote:
> we're working on it. a partial fix will be in 2.0.1 though not sure we can get it entirely f... -
- we're working on it. a partial fix will be in 2.0.1 though not sure we can get it entirely fixed for then (it's comin...
-
- Hafiz Rafiyev wrote:
> anybody working on this urgent bug?
Not that I am aware of. I also have an embedded test... -
12:09 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- anybody working on this urgent bug?
-
10:14 AM Bug #1928: Can't sync voucher database when carp peer is also active
- I deleted the CARP sync so that the voucher database keeps syncing fine but when the master goes down I still can't g...
10/25/2011
-
05:34 PM Bug #1980 (Closed): RFC 2136 will not update two records for one interface
- If you have two entries for the same interface, only the top one in the list will be updated when the address of that...
-
- It would be useful to have some stock aliases that come by default which are not editable by users. These aliases wou...
-
-
- In traffic_shaper_wizard_multi_all.xml wizard when you get to the VoIP bandwidth screen there is a box for each WAN, ...
-
10/24/2011
-
-
-
-
- ISC DHCP 4.2.3 was released on 19 Oct 2011
http://www.isc.org/software/dhcp -
- #1958 details the same issue, closed it in favor of this one.
-
- There are issues with the MAC pass-through, replicable in the following scenarios (use the attached config as a start...
-
- forgot this was here, opened #1976 instead which has the specific problem.
-
- Looks like a problem with your setup, I've got 2.0 amd64 installed in VirtualBox and it's fine.
Given the crashes ... -
04:09 AM Bug #1975 (Rejected): Weird Interface Names.
- Hello,
just installed the latest release 2.0 amd64 into virtualbox and got weird interface names.
I'm still inv...
10/23/2011
-
- As discussed here:
http://forum.pfsense.org/index.php/topic,39555.0.html
ipfw entrystats is returning wrong valu...
10/22/2011
-
- http://siproxd.sourceforge.net/index.php?op=changelog
> Release 0.8.1
> 10-Jul-2011
> This release fixes some bu... -
09:56 PM Bug #1336: PPTP VPN NAT on WAN or other external interface
- Test 2.0-Release This problem has been resolved.
Thank you pfsense team effort.
10/21/2011
-
10:11 PM pfSense Packages Bug #1749: Rules/ Categories update
- I am seeing this issue with 2.0 release, amd64. The process that autogenerates oinkmaster_nnnnnn_em0.conf is creating...
-
04:42 PM Bug #1968: webconfigurator dies
- well,I will try to unlock as suggested next time if it happens again.
Something I did not mention here, related to... -
- Probably the rate command is hanging on status_graph.php and if a command hangs like that, it hangs up fastcgi, which...
-
- ok,
new freeze of web interface WITHOUT modification.
This eliminates totally 'syntax error'
I made following in... -
- http://svn.freebsd.org/changeset/base/226402
Needs to be allowed on the web interface. -
- Duplicate of #1736
-
02:33 PM Bug #1971 (Rejected): carp sync username not honored
- Carp sync appears to not use the @Remote System Username@ anymore, but always sends @admin@ as the username.
I had... -
- Might be related to #1351
Also this post to the ipsec-tools list sounds similar:
http://sourceforge.net/mailarchi...
10/20/2011
-
05:14 PM Bug #1969: IPsec refuses connection after first Cisco Client connection
- I believe this to be the same issue as bug 1970, except that somehow the Cisco client is not disconnecting properly (...
-
- Attached are logfiles. First is a connection while racoon is in a hung state, followed by 4 pings to 8.8.8.8 (all ti...
-
- Using the same setup as this bug:
http://redmine.pfsense.org/issues/1969
It appears that after a while with no cl... -
- no, no other addon, pure valilla pfsense 2.0 !
It is not my habit to spell www.something Www.something.
I have no... -
02:32 PM pfSense Packages Bug #1443: Squid errors on updating version
- This is now less of an issue as I have found that Squid will still run correctly. The error messages still appear, bu...
-
02:09 PM Bug #1402: When creating a QinQ it works until reboot.
- Hi,
I'm experiencing the same trouble with qinq.
*My platform* : Pfsense 2.0 amd64
*What I am trying to do* ... -
12:52 AM pfSense Packages Bug #1749: Rules/ Categories update
- I too have noticed this problem. Even though Snort will say "reapplying enabled/disabled rules" when doing an updated...
10/19/2011
-
- Full details etc in thread
http://forum.pfsense.org/index.php/topic,41631.0.html
I have mobile IPsec set up, and... -
- it's not that simple. need the specific problem, this isn't adequate as a bug report. I suspect it's an installed pac...
-
- --- /conf/backup/config-1319057958.xml 2011-10-19 23:18:58.000000000 +0200
+++ /conf/backup/config-1319057344.xml 20... -
- I just checked and this is happening in the release version as well, in both VMware and on physical hardware.
10/18/2011
-
03:22 PM Bug #1856 (Closed): Removing a Phase 2 does not remove the SPD policy
- Failed to replicate on current code.
more /tmp/spd.conf.reload.1318965869.ob2B1v
spddelete -6 2001:470:d72c:0:0:... -
- Ok, so the code now triggers properly on a nanobsd system but it causes a Out of Memory situation on a 128MB system (...
-
- The fix seems to work as intended, I tried switching filter rules back and forth on protocol, gateways, groups and ad...
-
- The direct_networks table was never used but initially created for the purpose of negate policy based routing rules. ...
10/17/2011
-
05:10 PM pfSense Packages Bug #1966 (Resolved): 500 Error On Graph Request of LightSquid
- System
------
I have PfSense version 2.0 (built on Tue Sep 13 17:33:40 EDT 2011), installed Squid 2.7.9_4.2 and Lig... -
- In the future it would be nice to have IPsec allow connections to/from multiple peers for the same tunnel, for failov...
-
- Applied in changeset commit:ebcd13cac1f5d83f7352016c9bc750adfd6e21fa.
-
- Applied in changeset commit:7cc56826c8036cac40b95aab8e1c6349741e5e01.
-
- The ticket system is not for troubleshooting or help - please keep it on the forum.
-
11:04 AM Bug #1964: Changing MTU on pfSense 2.0 doesn't work
- Why in pfsense 1.2.3 or in a linux-based firewall as Kerio Control it works and in pfSense 2.0 it doesn't work???
I'... -
- Then your MTU is 1496. It changed as it was supposed to - which means the MTU change is not the problem, and you have...
-
- Yes, I get the same ifconfig when I change MTU on the WebGUI, but it doesn't work, while if I do the same things in p...
-
- Please keep the discussion on the forum until a bug is confirmed. Changing the MTU works fine.
[2.0-RELEASE][root@... -
- I tried to change MTU on pfSense 2.0 into 1496 because of my internet connection needs. While i could get it working ...
-
02:08 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- Hafiz Rafiyev wrote:
> any progress abouts this bug?
Don't know. Was never contacted after my last comment nearl... -
I second that question! Is there something anyone needs, such as access to an online system that can reproduce ...-
- any progress abouts this bug?
10/16/2011
-
- Please note that the default webpage generated by get_default_captive_portal_html() /etc/inc/captiveportal.inc with a...
-
08:35 AM Feature #1962 (Closed): disconnect specific pptpd interface from command line
- For pfsense usage in secured network ability to disconnect specific dialin user or interface is must.
if some one k... -
- Hello,
this request follows this post on the Forum: http://forum.pfsense.org/index.php/topic,41895.0.html.
Su...
10/15/2011
-
- Hi,
I've just been messing with the Dashboard and found a "bug" in the html source as shown in the picture added. -
02:09 PM Bug #1959: openssl does not accept ECC-certificates
- funny that it's possible to create a ecc-certificate using the older binary but it only works on the newer one ….
-
- related to this one #1851
-
- The default openssl-package will not work with ECC-certificates...
-
- maybe testing using the php-function "openssl_pkey_get_details" and checking for return-level could sanitize uploadin...
-
- Applied in changeset commit:8800783f5d513c7ff0cbb890d988f95ac9db4df9.
-
- Applied in changeset commit:e1fd8311bd36906e423c4c711dc3133078e8a464.
-
- I do not like that since you cannot draw the line what is more important and what is to skip.
-
- Either was fixed from someone else or it was not an issue.
It is correct in code either way. -
- I do not see any usefulness on this!
-
- Patches accepted!
-
- notes from originator: ...
10/14/2011
-
- Not at all sure if it's an issue or not (haven't used ipfw before), but I've noticed that on my system 'ipfw show' pr...
-
- Having an <input type="button"> inside an <a href="..."> is technically a violation of HTML5. Also, it makes the butt...
-
- no specific bug here, need to post things like this to the list or forum first as it's more likely a config issue as ...
-
04:03 AM Bug #1956 (Closed): Detect if logout was succesful
- Currently, a message "You have been disconnected." is shown regardless whether the user was logged in before or not. ...
10/13/2011
-
- 6 Screenshots attached. The Floating and Interface Group rules were only enabled one at a time. They are both disable...
-
- Without showing what you configured on the floating rules i cannot give you a real answer.
My first guess is that ... -
- A fix has been put in for 2.0.1 to prevent nat from messing with carp packets.
-
- If user create manual outbound rules with source any it can break carp protocol.
Prevent this by adding protection n... -
- That is true actually.
I will try to put a reasonable fix soon.
For now just remove the interface that is auto-se... -
- Just a FYI in case people want to upgrade their 1.2.3 databases on their 2.0 installs. Executing the following code o...
10/12/2011
-
- In Multi-WAN setups, traffic seems to always leave the default gateway no matter what interface it entered on. For te...
-
- The rules from "Bypass firewall rules for traffic on the same interface" go at the end of the ruleset, and thus are n...
-
- When trying to set a gateway group on a filter rule in 2.1 the address family validation triggers. This needs an addi...
10/11/2011
-
- When using the shaper wizard, the text description for VoIP prioritization by address isn't consistent with the resul...
-
- The description is wrong and the fix is wrong. Opening this because it appears committing a fix broke at least someth...
10/10/2011
-
- I uninstalled and reinstall the snort package. Its still not clearing the log. I dont get a blank page anymore. Just ...
-
06:44 PM Feature #1947 (New): Option to kill all states when creating a block rule
- When creating a block rule you have the option to close all states relevant to the rule.
-
- Word is that the move to FreeBSD 9 will solve some of the issues as the ipsec socketbuffer patch will be gone.
-
- Your "fix" is not correct approach, needs more work. We need to be able to set a larger mask in case of a new ipv6 en...
-
- In config step x we run the following commands. The only things I can think of is that these have failed.
function... -
01:40 PM Bug #1758: Upgrade fails to upgrade RRD data for traffic and packets
- OK, I'm no expert on RRD, but have done a little more digging on this.
In 1.2.3, the Traffic and Packet RRDs were ... -
03:24 PM Bug #1946: /usr/local/www/services_captiveportal.php
- Please open a new ticket for subsequent issues and please be sure the line #'s correspond with the prior changes.
... -
03:22 PM Bug #1946: /usr/local/www/services_captiveportal.php
- Small error in commit (Revision 164a1525)
>lines 272 to 293
replace $config['captiveportal'] with $newcp
e.g. ... -
03:15 PM
Bug #1946: /usr/local/www/services_captiveportal.php
- Applied in changeset commit:164a152577ccce56f896ea5ef020fcfbf60fe896.
-
03:15 PM
Bug #1946 (Feedback): /usr/local/www/services_captiveportal.php
- Applied in changeset commit:d568e38d0275efebbe0c1969e26b31bdf125570e.
-
- line 642
replace @second@ with @third@
line 661
replace @second@ with @fourth@ -
- /usr/local/www/services_captiveportal.php
lines 272 to 293
replace @$config['captiveportal']@ with @$newcp@
li... -
02:45 PM
Bug #1945: Missing zone parameter
- Applied in changeset commit:943b7053835d0928c79af1bfe32fa6fc8d6d2b6a.
-
02:40 PM
Bug #1945: Missing zone parameter
- Applied in changeset commit:5dd5ef52a5676415da4acef460dc2244d9eb8dbf.
-
02:40 PM
Bug #1945 (Feedback): Missing zone parameter
- Applied in changeset commit:8a880cb97227c3cd41ed236d06e3188f97cea2ee.
-
- line 336 in /usr/local/www/services_captiveportal_vouchers.php...
-
- line 667 in /etc/inc/voucher.inc...
-
- Sure if you would want to "cover all the bases" you'd need to monitor DNS traffic and add IPs to the passthrough list...
-
- The only option here is to create a transparent proxy for dns and hook that up with daemons as filterdns.
All other ... -
- It is not meant to work that way!
The voucher sync will sync with the master or use it as its central database.
I... -
06:26 AM Bug #1943 (Closed): PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
- (Copied from http://forum.pfsense.org/index.php/topic,40671.msg209656.html#msg209656)
Attached are four files. Her...
10/09/2011
-
- Once snort has a large amount of blocked hosts the page doesn't load and a view source shows no html at all. This is ...
-
- Correct, it is not needed on FreeBSD9 where a alternative is already checked in by Bjoern.
The patch we use from m... -
- Probably not needed on 9.
-
- Patch is active for 9 for FreeBSD 8 base it needs to be included by hand on builds to not create issues with 2.0 builds.
-
07:17 AM pfSense Packages Feature #1815: OpenVPN Client Export Additional Parameters
- I know, I added and submitted it on github :)
Thanks for closing the issue, I forgot about that! -
- There is an advanced section there that allows this
-
- the filters come from l7filter so it would need to be fixed there. They classify RDP as "OK: Probably works", but the...
-
- You are sure your rdp is not encrypted?
-
- This has been solved for 2.0
-
- This should be fixed since long now
-
-
- fixed, thanks
10/08/2011
-
- Category: Captive Portal
Affected version: 2.1-IPv6
Affected Architecture: All -
- line 660 in /etc/inc/voucher.inc...
-
- I don't know that I would call returning to the original functionality a "feature", this is a "bug" that broke the sy...
-
- Probably some daemon should be done that reads this and does not complain much.
Does not seem hard to merge the tcpd... -
- this is the default logging format and not sure it should be changed, leaving as feedback for thoughts from others. M...
-
- Seems its a better alternative to syslog since it supports encryption and can secure communication.
http://www.freeb... -
- I am working on this.
-
12:35 AM Bug #1939 (Closed): Atheros DCMA-82 w/ IBSS has kernel panic
- I'm trying to put together a Netgate ALIX kit for which I also picked up this wireless card that specifically states ...
Also available in: Atom