Activity
From 10/13/2011 to 11/11/2011
11/11/2011
-
02:01 PM Bug #1992: OpenVPN in tap mode, allow transparant interface
- Checked in a fix for that, should be up now.
-
01:24 PM Bug #1992: OpenVPN in tap mode, allow transparant interface
- Hmm, when trying to define the bridges' DHCP scope after selecting the to-be bridged interface (This is the second VP...
-
- Installed it, testing.
-
- Some notes on using that:
First, read all of the text descriptions on the new fields that show up when you switch ... -
- I committed the initial revision to the repo just now:
https://github.com/bsdperimeter/pfsense-packages/commit/dafa2... -
- Sounds like a good solution. Looking forward to it, as installing a (even beta) package instead of manually editing f...
-
06:21 AM Bug #1992: OpenVPN in tap mode, allow transparant interface
- Jim is making it into a package for 2.0.x users, so it can be fully vetted in all possible scenarios during the 2.1 r...
-
- Would be really great if these changes would hit 2.0.1. Doesn't look like it would break existing installations to me...
-
12:34 PM Feature #2006 (Resolved): CP ipfw fwd all non-authenticated clients' TCP connections to 127.0.0.1,8000
- I noticed that in 2.0REL captiveportal.inc adds an ipfw rule to forward all un-authenticated clients' TCP connections...
-
09:58 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- Yes but the 2.0 tries to be smarter in regards to the whole system about events.
This makes a lot of things better b... -
09:53 AM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- As Derrick says,it's running on 1.2.3 with wan ip very well,my opinion it's userful to control pptp Server address bo...
-
- I filed a related report in http://redmine.pfsense.org/issues/1991
11/10/2011
-
- If a user puts in a URL for an alias that contains invalid data, filter reloads fail. Need to validate what's returne...
-
09:48 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- Chris Buechler wrote:
> It works (aside from now having this consequence), but yes it is technically not correct, an... -
- It works (aside from now having this consequence), but yes it is technically not correct, and has never been shown th...
-
So, does this mean I've been setting up 1.2.3 wrong all this time and it still works? Let me make sure I understa...-
- David: you can still do just that without using the WAN IP there, any unused private IP is fine.
-
06:30 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP
- Yes, I can confirm that setting that IP to an IP other than the WAN IP does avoid the problem.
I believe we origin... -
- Looks like Ermal figured out what triggers this - if you have the "PPTP Server IP" configured as your WAN IP, which i...
-
- Update pushed on package.
-
- It is build like that by default on pfsense.
-
- It seems that compiling snort with --enable-reload will allow snort to reload on receiving a SIGHUP without requiring...
-
- This was implemented quite a while ago as a drop-down menu to select crypto accelerators (if present).
-
- This was implemented yesterday in 2.1 and merged into 2.0.1.
https://github.com/bsdperimeter/pfsense/commit/7aaabd... -
- Tried to work this out last week and found that our rowhelper code only works for once instance per page, so having i...
-
- The tun/tap switch was added before 2.0 shipped, but had some issues that have since been fixed on mainline.
-
- There were issues in the code, but they should be OK now. Fixed in mainline, not sure if it'll get backported to 2.0....
-
-
- Ah, yeah you're right, the parameters to ifconfig-push in the csc file are backwards. It should be the other way to c...
-
-
- There were issues in the code, but they should be OK now. Fixed in mainline, not sure if it'll get backported to 2.0....
11/09/2011
-
09:30 PM Bug #1697: Interface group doesn't apply to all interfaces in all cases
- Ok, so our initial tests showed this issue was resolved. But when applying live traffic on the box, about 70% of the ...
-
09:26 PM Feature #1997: Add date picker to the Custom RRD graph page to translate to unix time.
- That is an EXCELLENT converter, probably the BEST and ONLY one which allows for free-form (eg. 11/9/2011 12:15:59) in...
-
03:34 AM Feature #1997: Add date picker to the Custom RRD graph page to translate to unix time.
- Possible candidate.
http://morecavalier.com/index.php?whom=Apps%2FUnix+timestamp+converter -
07:13 PM Bug #2004: Client Specific Override ->Tunnel Network
- .8 shows same result
Tunnel network = 10.10.10.8/30
assigns 10.10.10.9 to the client
client log:
openvpn[2664... -
- .9/30 is not a valid subnet definition, which may be influencing the output. Use .8/30
http://doc.pfsense.org/inde... -
- Tunnel Network description says:
This is the virtual network used for private communications between this client an... -
- Accept Aliases in System: Static Routes: Edit route -> Destination network
-
02:52 PM pfSense Packages Bug #2002 (Closed): snort
- does not list ipv6 address in alert or block
it shows up as n/a.. there is a fix by using clear alert
however the i... -
- That card should be covered by the ixgbe driver which is in both amd64 and i386 already. If the existing driver doesn...
-
01:25 PM Bug #2000 (Rejected): intel x520 network card
- Hi!
I wanna know if there is the module for this card intel x520 10gb for amd64 cuz i've seen it for i386,
i have... -
- That is nowhere near a usable bug report. Please post in the forum until an actual bug has been confirmed.
-
- Snort is now unreliable
-
- If you have existing voucher settings, and update a system to master/2.1, the voucher settings will cause some issues...
-
- leaving the base URL blank doesn't remove it, you'll have to remove it from globals.inc. there are no bugs here. YOu ...
11/08/2011
-
- Even if someone wants to check for updates, pfSense should do it ALOT less frequently.
-
- When I UN-CHECK "Use a URL server for firmware upgrades other than www.pfsense.org" under "Updater Settings", and "Ba...
-
- Applied in changeset commit:49db607f186c37ad48b25640184051a6ae205ff4.
-
- Applied in changeset commit:0389f03498994dbdaf47543a325b58d14b1cdbab.
-
- The current custom rrd graph page needs a startdate and enddate in unix time. This really needs a date picker that se...
-
-
- It was on the todo list but forgotten, I am not sufficiently at home in javascript to do the calendar thing.
-
- Thank you Seth for fixing this issue!!
If only I can input dates & times on the "Custom RRD Graphs" page in human ... -
10:23 AM Bug #1996 (Resolved): status_graph.php is not displaying real-time bw stats
- The new jquery code that was added to the file isn't displaying the real-time bw stats from the rate program. The ori...
-
- My testing has confirmed that it is fix
11/07/2011
-
- When attempting to edit the default queue, you get "Only one default queue per interface is allowed." and cannot save...
-
- Since there is no concept of priority in HFSC it should be removed from the GUI.
-
-
-
- the problems in general with layer7 were fixed before 2.0 release. The fact that pushing a ton of traffic through it ...
-
-
- updated to 4.2.3
-
-
- Gateways that aren't monitored end up being the only ones put into gateway groups reportedly.
http://forum.pfsense.... -
- Chris, it is not how it's supposed to be.. When using tap, the "Tunnel Network" should have the option of not being f...
-
- bug reports have to have a specific bug, this is a support request, please post to the forum or list.
-
- I am trying to create a Road-warrior situation where the client is supposed to get an IP from the DHCP server in the ...
-
- Found the cause, we were using $now instead of $end, this should resolve it.
Do take note that there is a 5 second h... -
- I have one installs where this happens too, I've stopped the flapping by putting by putting a switch in between the c...
11/04/2011
-
- In a freshly installed 2.0 system, when restoring a previous config.xml, there seems to be an issue with error-handli...
-
- When I try to Set a "Start" value in Unix time AND an "End" value in Unix time, the "End" value turns into current Un...
11/03/2011
-
- no idea what you're referring to but this is nowhere near a legit bug report, post to the forum or list.
-
- snort has difficulty parsing data
-
- This appears fixed. Pings flow through both interfaces in a group, matching on the correct rule.
Tested on 2.0-RE... -
- Static ARP entries on disabled interfaces are tried to be applied and fail since that network doesn't exist. Need a c...
11/02/2011
-
- that's already possible, just have to use a different hostname
-
03:19 PM pfSense Packages Bug #1982: Snort exits on rules update and does not restart
- As reported above, this affects both i386 and x86 architectures according to reports in the link I gave:
http://foru... -
- Applied in changeset commit:e3db5627224a0293f74e0d032a9b230f98f85952.
-
- Applied in changeset commit:a135349d62a1932cb1ab9c29436efcd8e8a383d5.
11/01/2011
-
07:18 PM Bug #1987 (Resolved): GRE tunnel - Route search type
- When configuring GRE tunnels, you have the option "Route search type", which should activate the LINK1 flag to the GR...
-
06:15 PM Bug #1951: Auto generated reply-to rules not working
- For the record, this must have been "upgrade rot". After doing a clean 2.0-Release install and restoring the exact sa...
-
- Proposed patch
http://sourceforge.net/mailarchive/message.php?msg_id=28279523 -
- Applied in changeset commit:f6ee561edb89615910f316912ec033ab32e2960f.
-
- Applied in changeset commit:1cad6f6c891f7c70b36cfbdbaf4126084ab729ee.
-
- At the moment there is no way to get a list of logged in users from racoonctl, setkey, or any other utility we're awa...
-
- Applied in changeset commit:b4542701c3f275b74a309f0db7682086b6d7b461.
-
- I've confirmed that option 1 works on my box also.. Thanks Leon Topliss
-
11:07 AM pfSense Packages Bug #1765: Unable able to clear Snort Alerts
- Hello, my first post here so hope its helpful. Not seeing the fix when i uninstall and reinstall. The Clear button se...
-
- what platform btw? I'm running i386 and don't have this issue. Mine is set to update every 12 hours. Once in a while,...
-
- Applied in changeset commit:4bd57d115d2fee37a0d9e8e999d6bfd3b986f3e1.
10/31/2011
-
- brings back to fatal error in .conf
Enable 'extended_response_inspection' inspection before setting 'inspect_gzip'
10/30/2011
-
- Closing, using #1965 instead.
-
03:35 AM Feature #1965: Support Multiple IPsec Peers
- It looks a duplicate of this:
http://redmine.pfsense.org/issues/1548
Actually this is explained better :D
10/29/2011
-
- yes, it would be great!
As you understand, I personally don't want to focus on the solution itself, for me any solu... -
- In addition to the web form, allow the submission of voucher via URL e.g....
10/28/2011
-
07:39 PM Bug #1983 (Resolved): Cancel Button generates a Confirm Form Resubmission message
- Add or edit a rule (such as a firewall rule) and apply it, leaving the "The settings have been applied." message open...
-
- Using Snort 2.9.0.5 pkg v. 2.0 on pfSense 2.0... using either autoupdate of rules or manual update of rules, if Snort...
-
- I've noticed that the snort_blocked.php page uses a lot of CPU in the php process. It takes a long time to render for...
-
01:36 AM pfSense Packages Bug #1942: snort_blocked.php loads blank
- Blank Page happens also on pfsense 2.0 final at these URL
#blocked pages
/snort/snort_blocked.php
#alerts
/snor... -
- Another solution is to remove Spoink and use SnortSam in it's place in the Snort package. I think this is in the dev ...
10/27/2011
-
- I just tested pfSense 2.0-RELEASE and with multiple WAN w/ multiple public IP addresses, selecting the LAN interface ...
-
11:10 AM Bug #1918: update status
- Just tried in three different browsers (2 of which I never access this device with) and an incognito window in Chromi...
10/26/2011
-
- In almost all cases, such errors are resolved by clearing your browser's cache or closing and opening the browser ses...
-
- Just noticed the same problem. This is a stock release that was upgraded from RC1 to RELEASE. I haven't altered any...
-
- Please note that the format of /var/log/lighttpd.error is text rather than clog, which could potentially eat up disks...
-
05:48 PM Feature #1938: Filter messages broken into multiple syslog messages
- Wow, that's troubling. I escaped it because it looked like PHP was swallowing the backslash. But I'm looking now and ...
-
- A warning to those trying the proposed change, it doesn't quite work as written. It works if you run it from the comm...
-
- Chris Buechler wrote:
> we're working on it. a partial fix will be in 2.0.1 though not sure we can get it entirely f... -
- we're working on it. a partial fix will be in 2.0.1 though not sure we can get it entirely fixed for then (it's comin...
-
- Hafiz Rafiyev wrote:
> anybody working on this urgent bug?
Not that I am aware of. I also have an embedded test... -
- anybody working on this urgent bug?
-
10:14 AM Bug #1928: Can't sync voucher database when carp peer is also active
- I deleted the CARP sync so that the voucher database keeps syncing fine but when the master goes down I still can't g...
10/25/2011
-
05:34 PM Bug #1980 (Closed): RFC 2136 will not update two records for one interface
- If you have two entries for the same interface, only the top one in the list will be updated when the address of that...
-
- It would be useful to have some stock aliases that come by default which are not editable by users. These aliases wou...
-
-
- In traffic_shaper_wizard_multi_all.xml wizard when you get to the VoIP bandwidth screen there is a box for each WAN, ...
-
10/24/2011
-
-
-
-
- ISC DHCP 4.2.3 was released on 19 Oct 2011
http://www.isc.org/software/dhcp -
- #1958 details the same issue, closed it in favor of this one.
-
- There are issues with the MAC pass-through, replicable in the following scenarios (use the attached config as a start...
-
- forgot this was here, opened #1976 instead which has the specific problem.
-
- Looks like a problem with your setup, I've got 2.0 amd64 installed in VirtualBox and it's fine.
Given the crashes ... -
04:09 AM Bug #1975 (Rejected): Weird Interface Names.
- Hello,
just installed the latest release 2.0 amd64 into virtualbox and got weird interface names.
I'm still inv...
10/23/2011
-
- As discussed here:
http://forum.pfsense.org/index.php/topic,39555.0.html
ipfw entrystats is returning wrong valu...
10/22/2011
-
- http://siproxd.sourceforge.net/index.php?op=changelog
> Release 0.8.1
> 10-Jul-2011
> This release fixes some bu... -
09:56 PM Bug #1336: PPTP VPN NAT on WAN or other external interface
- Test 2.0-Release This problem has been resolved.
Thank you pfsense team effort.
10/21/2011
-
10:11 PM pfSense Packages Bug #1749: Rules/ Categories update
- I am seeing this issue with 2.0 release, amd64. The process that autogenerates oinkmaster_nnnnnn_em0.conf is creating...
-
04:42 PM Bug #1968: webconfigurator dies
- well,I will try to unlock as suggested next time if it happens again.
Something I did not mention here, related to... -
- Probably the rate command is hanging on status_graph.php and if a command hangs like that, it hangs up fastcgi, which...
-
- ok,
new freeze of web interface WITHOUT modification.
This eliminates totally 'syntax error'
I made following in... -
- http://svn.freebsd.org/changeset/base/226402
Needs to be allowed on the web interface. -
- Duplicate of #1736
-
02:33 PM Bug #1971 (Rejected): carp sync username not honored
- Carp sync appears to not use the @Remote System Username@ anymore, but always sends @admin@ as the username.
I had... -
- Might be related to #1351
Also this post to the ipsec-tools list sounds similar:
http://sourceforge.net/mailarchi...
10/20/2011
-
05:14 PM Bug #1969: IPsec refuses connection after first Cisco Client connection
- I believe this to be the same issue as bug 1970, except that somehow the Cisco client is not disconnecting properly (...
-
- Attached are logfiles. First is a connection while racoon is in a hung state, followed by 4 pings to 8.8.8.8 (all ti...
-
- Using the same setup as this bug:
http://redmine.pfsense.org/issues/1969
It appears that after a while with no cl... -
- no, no other addon, pure valilla pfsense 2.0 !
It is not my habit to spell www.something Www.something.
I have no... -
02:32 PM pfSense Packages Bug #1443: Squid errors on updating version
- This is now less of an issue as I have found that Squid will still run correctly. The error messages still appear, bu...
-
02:09 PM Bug #1402: When creating a QinQ it works until reboot.
- Hi,
I'm experiencing the same trouble with qinq.
*My platform* : Pfsense 2.0 amd64
*What I am trying to do* ... -
12:52 AM pfSense Packages Bug #1749: Rules/ Categories update
- I too have noticed this problem. Even though Snort will say "reapplying enabled/disabled rules" when doing an updated...
10/19/2011
-
- Full details etc in thread
http://forum.pfsense.org/index.php/topic,41631.0.html
I have mobile IPsec set up, and... -
- it's not that simple. need the specific problem, this isn't adequate as a bug report. I suspect it's an installed pac...
-
- --- /conf/backup/config-1319057958.xml 2011-10-19 23:18:58.000000000 +0200
+++ /conf/backup/config-1319057344.xml 20... -
- I just checked and this is happening in the release version as well, in both VMware and on physical hardware.
10/18/2011
-
- Failed to replicate on current code.
more /tmp/spd.conf.reload.1318965869.ob2B1v
spddelete -6 2001:470:d72c:0:0:... -
- Ok, so the code now triggers properly on a nanobsd system but it causes a Out of Memory situation on a 128MB system (...
-
- The fix seems to work as intended, I tried switching filter rules back and forth on protocol, gateways, groups and ad...
-
- The direct_networks table was never used but initially created for the purpose of negate policy based routing rules. ...
10/17/2011
-
05:10 PM pfSense Packages Bug #1966 (Resolved): 500 Error On Graph Request of LightSquid
- System
------
I have PfSense version 2.0 (built on Tue Sep 13 17:33:40 EDT 2011), installed Squid 2.7.9_4.2 and Lig... -
- In the future it would be nice to have IPsec allow connections to/from multiple peers for the same tunnel, for failov...
-
- Applied in changeset commit:ebcd13cac1f5d83f7352016c9bc750adfd6e21fa.
-
- Applied in changeset commit:7cc56826c8036cac40b95aab8e1c6349741e5e01.
-
- The ticket system is not for troubleshooting or help - please keep it on the forum.
-
11:04 AM Bug #1964: Changing MTU on pfSense 2.0 doesn't work
- Why in pfsense 1.2.3 or in a linux-based firewall as Kerio Control it works and in pfSense 2.0 it doesn't work???
I'... -
- Then your MTU is 1496. It changed as it was supposed to - which means the MTU change is not the problem, and you have...
-
- Yes, I get the same ifconfig when I change MTU on the WebGUI, but it doesn't work, while if I do the same things in p...
-
- Please keep the discussion on the forum until a bug is confirmed. Changing the MTU works fine.
[2.0-RELEASE][root@... -
- I tried to change MTU on pfSense 2.0 into 1496 because of my internet connection needs. While i could get it working ...
-
- Hafiz Rafiyev wrote:
> any progress abouts this bug?
Don't know. Was never contacted after my last comment nearl... -
I second that question! Is there something anyone needs, such as access to an online system that can reproduce ...-
- any progress abouts this bug?
10/16/2011
-
- Please note that the default webpage generated by get_default_captive_portal_html() /etc/inc/captiveportal.inc with a...
-
08:35 AM Feature #1962 (Closed): disconnect specific pptpd interface from command line
- For pfsense usage in secured network ability to disconnect specific dialin user or interface is must.
if some one k... -
- Hello,
this request follows this post on the Forum: http://forum.pfsense.org/index.php/topic,41895.0.html.
Su...
10/15/2011
-
- Hi,
I've just been messing with the Dashboard and found a "bug" in the html source as shown in the picture added. -
02:09 PM Bug #1959: openssl does not accept ECC-certificates
- funny that it's possible to create a ecc-certificate using the older binary but it only works on the newer one ….
-
- related to this one #1851
-
- The default openssl-package will not work with ECC-certificates...
-
- maybe testing using the php-function "openssl_pkey_get_details" and checking for return-level could sanitize uploadin...
-
- Applied in changeset commit:8800783f5d513c7ff0cbb890d988f95ac9db4df9.
-
- Applied in changeset commit:e1fd8311bd36906e423c4c711dc3133078e8a464.
-
- I do not like that since you cannot draw the line what is more important and what is to skip.
-
- Either was fixed from someone else or it was not an issue.
It is correct in code either way. -
- I do not see any usefulness on this!
-
- Patches accepted!
-
- notes from originator: ...
10/14/2011
-
- Not at all sure if it's an issue or not (haven't used ipfw before), but I've noticed that on my system 'ipfw show' pr...
-
- Having an <input type="button"> inside an <a href="..."> is technically a violation of HTML5. Also, it makes the butt...
-
- no specific bug here, need to post things like this to the list or forum first as it's more likely a config issue as ...
-
04:03 AM Bug #1956 (Closed): Detect if logout was succesful
- Currently, a message "You have been disconnected." is shown regardless whether the user was logged in before or not. ...
10/13/2011
-
- 6 Screenshots attached. The Floating and Interface Group rules were only enabled one at a time. They are both disable...
-
- Without showing what you configured on the floating rules i cannot give you a real answer.
My first guess is that ... -
- A fix has been put in for 2.0.1 to prevent nat from messing with carp packets.
-
- If user create manual outbound rules with source any it can break carp protocol.
Prevent this by adding protection n... -
- That is true actually.
I will try to put a reasonable fix soon.
For now just remove the interface that is auto-se... -
- Just a FYI in case people want to upgrade their 1.2.3 databases on their 2.0 installs. Executing the following code o...
Also available in: Atom