Activity

30 days up to

User

Subprojects

Activity

From 01/09/2012 to 02/07/2012

01/31/2012

07:06 PM Revision 7a58a4ca: Only do foreach on the p2's if it's actually an array.: Jim Pingle
07:04 PM Revision a11df336: Only do foreach on the p2's if it's actually an array.: Jim Pingle
06:04 PM Bug #2157 (Resolved): Changing relayd settings in system_advanced_misc.php does not trigger relayd config update/reload: When changing relayd settings in this screen (for example: "use sticky connections"), /var/etc/relayd.conf should be ... Pierre POMES
02:50 PM pfSense Packages Bug #2156 (Closed): Can't install TinyDNS: unexpected '&': 1.2.3 is no longer supported. If someone would like to make a merge request in git for a separate package for 1.2.3 t... Chris Buechler
12:18 PM pfSense Packages Bug #2156: Can't install TinyDNS: unexpected '&': Looks like the IPv6 code I added last June might be breaking this in two ways on 1.2.3. First because PHP4 doesn't li... Jim Pingle
06:33 AM pfSense Packages Bug #2156 (Closed): Can't install TinyDNS: unexpected '&': I was trying to install TinyDNS under my installation of pfsense ..
It got to the Installing dns-server and its de... Ahmed El Gamil
01:04 PM Bug #2149: PPTP Split Tunnel: Yeah I would also be interested in finding out which PPTP server supports that. All the ones I have used don't provid... Warren Baker

01/30/2012

09:40 PM Revision 9f2bf2e2: Fix exec bit: Jim Pingle
09:40 PM Revision 51f4e64b: Add a small script to disable APM on ATA drives if they claim to support it. Leaving this on will kill drives long-term, especially laptop drives, by generating excessive Load Cycles.: The APM bit set will persist until the drive is power cycled, so it's necessary to run on each boot to be sure. Jim Pingle
09:27 PM Revision a000752b: Fix exec bit: Jim Pingle
09:24 PM Revision 92ac3b3d: Add a small script to disable APM on ATA drives if they claim to support it. Leaving this on will kill drives long-term, especially laptop drives, by generating excessive Load Cycles.: The APM bit set will persist until the drive is power cycled, so it's necessary to run on each boot to be sure. Jim Pingle
07:32 PM Bug #2149: PPTP Split Tunnel: I'm not aware of any PPTP server that does that in a way that works for all clients, which are you using that does? E... Chris Buechler
09:50 AM Bug #2149: PPTP Split Tunnel: I think your may mean that is it not possible for the PPTP Server used by pfSense to send routes to PPTP clients as I... Chris Mirchandani
02:18 AM Bug #2149 (Rejected): PPTP Split Tunnel: it's not possible to send routes to PPTP clients, has to be done on the client. Chris Buechler
01:18 AM Bug #2149 (Rejected): PPTP Split Tunnel: Establishing a PPTP tunnel with pfSense does not pass routes to PPTP VPN clients. This may or may not be intended so ... Chris Mirchandani
07:28 PM Feature #2148 (Closed): Dynamic DNS Update Frequency: the cron package allows editing that easily, don't think it's worthwhile for us to bother otherwise. though if you're... Chris Buechler
09:43 AM Feature #2148: Dynamic DNS Update Frequency: Chris,
My suggestion is not to change the time it runs for everyone. My suggestion is to show the time/frequency i... Chris Mirchandani
01:54 AM Feature #2148: Dynamic DNS Update Frequency: You can change your cron job in that case. We're not going to run something every 3 minutes on everyone's system that... Chris Buechler
01:13 AM Feature #2148: Dynamic DNS Update Frequency: Chris,
Updates may take place if the IP on the WAN interface changes, but not if the pfSense device is behind a DS... Chris Mirchandani
04:11 PM Feature #1829: CARP with IPv6 support: Patch committed for FreeBSD 8. Ermal Luçi
04:41 AM Feature #1829: CARP with IPv6 support: If feasible, add support for manually configuring the link-local address to send by way of a patch to rtadvd.
We cou... Seth Mos
02:53 PM Bug #2155 (Resolved): CP sends voucher as username to RADIUS when "re-auth every minute enabled": When using Captive Portal + RADIUS + vouchers then CaptivePortal sends the voucher code as username to RADIUS when "r... Alexander Wilke
11:01 AM Feature #2152 (Needs Patch): Pass-through MAC and Vouchers: When I enable Pass-though MAC automatic additions it adds both the people that authenticate using my radius and my vo... Nathan Achey
04:34 AM Feature #2151 (Resolved): Add IPv6 support to the pfSense module: Lifted from /etc/inc/interfaces.inc FIXME notes.
We need something to set the IPv6 address. And we need to have a fu... Seth Mos
03:17 AM Bug #2150 (Rejected): PPTP DNS Issue: thanks Warren, definitely not an issue as described then. Chris, post to the forum or mailing list for help. Chris Buechler
03:03 AM Bug #2150: PPTP DNS Issue: It works fine for me on amd64. No problems at all.
Try use tcpdump and see if the dns traffic is even hitting the FW. Warren Baker
02:34 AM Bug #2150 (Feedback): PPTP DNS Issue: most people run exactly that way, it works. I just double checked another install to verify. Though I don't have an a... Chris Buechler
01:26 AM Bug #2150 (Rejected): PPTP DNS Issue: For PPTP clients DNS fails, I get a DNS time out, on every IP on a pfSense interface for which DNS is configured incl... Chris Mirchandani

01/29/2012

05:09 PM Feature #2148 (Rejected): Dynamic DNS Update Frequency: It updates on every IP change, the cron job is only to update if the IP hasn't changed in 25 days so the provider doe... Chris Buechler
01:45 PM Feature #2148 (Closed): Dynamic DNS Update Frequency: The current Dynamic DNS configuration does not check for IP address changes often enough to be useful in many situati... Chris Mirchandani
04:22 PM Feature #2143: Captive Portal - RADIUS - attribute: Acct-Terminate-Cause: I bought a FreeRADIUS book: "FreeRADIUS Beginner's Guide by Dirk van der Walt" and I uploaded to excerpts which expla... Alexander Wilke

01/28/2012

04:56 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: http://sourceforge.net/mailarchive/forum.php?thread_name=91C62B8E3E2A4F75893DCBCD634ECACF%40Avitos&forum_name=ipsec-t... Ermal Luçi
12:41 PM Feature #2147 (Resolved): Cert Manager - additional download button for .p12: Cert Manager in pfsense allows to download the .crt and .key file of CA and certificates. But on windows clients we n... Alexander Wilke

01/27/2012

06:38 PM Bug #1698: IPSec tunnel from CARP backup interface: This needs to teach racoon about carp interface status. Ermal Luçi
06:36 PM Bug #1393 (Closed): IPSec Xauth: Follow-up on #1112 Ermal Luçi
06:32 PM Bug #1872 (Closed): ipsec-tools strict DPD cookie check: This probably should just be skipped since its just related to old gear.
Closing for now, can reopen later on. Ermal Luçi
06:28 PM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes: This is the same as #1970.
Please try with the new ipsec-tools port from pfPorts. Ermal Luçi
06:13 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: sounds fine, just file an alert for already-existing configs that are wrong, and add the input validation to prevent ... Chris Buechler
05:32 PM Bug #1421: Disconnecting PPTP VPNs drops IPsec when using wrong PPTP server IP: The changes to ipsec-tools are a bit too intrusive to teach racoon about interface indexes.
I think the better optio... Ermal Luçi
06:10 PM Bug #1970 (Feedback): IPsec stops routing after a while: Applied in changeset commit:d2a5443f5d0f9747be874a4f8787ca18348a8461. Ermal Luçi
05:52 PM Feature #2117: 6RD support for ISPs like Swisscom: earlier 6rd work. http://bougaidenpa.org/masakazu/archives/54 Seth Mos
04:05 PM Feature #1986 (Feedback): Find a way to list logged in IPsec xauth users: pfPort patched.
new racoonctl option show-users Ermal Luçi
04:04 PM Bug #1112 (Feedback): IPsec GUI/backend missing RADIUS support: Patch committed to pfPort of ipsec-tools.
Btw probably it is not needed to compile racoon with LDAP and RADIUS suppor... Ermal Luçi
02:38 AM Feature #2146 (Resolved): Allow concurrent logins when using vouchers: When using vouchers it is not possible to use them more then once, even when enabling 'allow concurrent logins'. Usin... Igor Ybema

01/26/2012

05:18 PM Revision e8fc69ff: Be smarter about how to split a Namecheap hostname into host/domain. Fixes #2144: Jim Pingle
05:11 PM Revision 89bbb204: Be smarter about how to split a Namecheap hostname into host/domain. Fixes #2144: Jim Pingle
04:18 PM Feature #2143: Captive Portal - RADIUS - attribute: Acct-Terminate-Cause: The problem is that I cannot implement this but probably can help on testing. If it will not find a way into 2.1 than... Alexander Wilke
12:15 PM Bug #2144: pfSense dyndns for Namecheap doesn't work with hostnames containing ".": Applied in changeset commit:89bbb204ad58c4d0250ebabf34ebec1996a53088. Jim Pingle
12:15 PM Bug #2144 (Feedback): pfSense dyndns for Namecheap doesn't work with hostnames containing ".": Applied in changeset commit:e8fc69ff43bb089f90de4f87f02db44f55a96b40. Jim Pingle
12:03 PM Bug #2144: pfSense dyndns for Namecheap doesn't work with hostnames containing ".": Except that would break everyone's current settings unless we tried to be smart with some upgrade code (which could s... Jim Pingle
11:55 AM Bug #2144: pfSense dyndns for Namecheap doesn't work with hostnames containing ".": It's probable that other dyndns providers also accept hostnames including dots, since it's legal A record syntax. Thi... Doug Dimick
11:42 AM Bug #2144: pfSense dyndns for Namecheap doesn't work with hostnames containing ".": (Copying my reply from the forum post here)
Yeah we split on ., I didn't realize their client supported that syntax.... Jim Pingle
11:38 AM Bug #2144 (Resolved): pfSense dyndns for Namecheap doesn't work with hostnames containing ".": Namecheap happily supports hostnames like www.sub.domain.com. Their Windows dyndns client also supports hostnames tha... Doug Dimick
06:38 AM Revision 6f0dc800: Merge pull request #42 from Joecowboy/master: . Seth Mos
04:46 AM Revision 83e7491d: Update usr/local/www/widgets/javascript/cpu_graphs.js: Daniel Rasmussen

01/25/2012

08:39 PM Revision 6763033d: Include admin user in bootup account sync: Jim Pingle
08:28 PM Revision b357f0a6: Include admin user in bootup account sync: Jim Pingle
06:50 PM Feature #933 (Closed): Add IPsec option to allow the client to save the Xauth password: Since no complaints received. Ermal Luçi
05:40 PM Revision a843870d: Fix LZO setting for Upgraded OpenVPN (was turning compression on even if old config had it disabled.): Jim Pingle
05:40 PM Revision 0d2156e5: Fix LZO setting for Upgraded OpenVPN (was turning compression on even if old config had it disabled.): Jim Pingle
05:20 PM Feature #2143: Captive Portal - RADIUS - attribute: Acct-Terminate-Cause: if you can implement and fully test and submit a merge request we'll get it in for 2.1, otherwise this probably can't... Chris Buechler
05:15 PM Feature #2143: Captive Portal - RADIUS - attribute: Acct-Terminate-Cause: This is the RFC:
http://freeradius.org/rfc/rfc2866.html#Acct-Terminate-Cause Alexander Wilke
05:13 PM Feature #2143 (Resolved): Captive Portal - RADIUS - attribute: Acct-Terminate-Cause: When using Captive Portal with RADIUS and Captive Portal is restarting the FreeRADIUS server does not get any informa... Alexander Wilke
05:17 PM Revision 1f78ab3a: Make sure we stop the configure if the device does not have a public address: Ticket #2117 Seth Mos
05:17 PM Revision 668e8961: Add backend 6RD support. We don't have the required patch yet for our stf driver.: Needs hooks into our gateway code to handle the default gateway since the stf interface does use router solicitations... Seth Mos
05:11 PM Revision 48e24ada: Fix upgrade code for 1.2.3 with assigned OpenVPN interface.: Jim Pingle
05:11 PM Revision d87d2f67: Fix upgrade code for 1.2.3 with assigned OpenVPN interface.: Jim Pingle
04:34 PM Revision c3ae41e6: Don't ignore when multiple OpenVPN DNS, NTP, WINS, etc servers were specified in 1.2.3 when upgrading. 1.2.3 separated by ;, 2.x uses separate vars.: Jim Pingle
04:33 PM Revision 4724f8b8: Don't ignore when multiple OpenVPN DNS, NTP, WINS, etc servers were specified in 1.2.3 when upgrading. 1.2.3 separated by ;, 2.x uses separate vars.: Jim Pingle
04:16 PM Feature #2117: 6RD support for ISPs like Swisscom: A healthy chunk of code is already in there. Come to think of it, 6to4 is very similar to this, but the patch for stf... Seth Mos
05:48 AM Feature #2117: 6RD support for ISPs like Swisscom: Got a reply from Swisscom clarifying their 6RD deployment, past trial, now production.
Our productive network uses 6... Seth Mos
03:59 PM Revision a15a7738: Safer for 1.2.3 upgrades to assume OpenVPN interface == any, since 1.2.3 didn't have a way to bind to an interface. Otherwise people accepting connections on opt interfaces on 1.2.3 will break on upgrade until the proper interface is selected in the GUI: Jim Pingle
03:56 PM Revision 3ef4cae6: Safer for 1.2.3 upgrades to assume OpenVPN interface == any, since 1.2.3 didn't have a way to bind to an interface. Otherwise people accepting connections on opt interfaces on 1.2.3 will break on upgrade until the proper interface is selected in the GUI: Jim Pingle
02:45 PM Revision 32dc8109: Clarify the UI text with example IPv6 prefix.: Ticket #2117 Seth Mos
02:45 PM Revision 0eb78676: Disable debug statement: Ticket #2117 Seth Mos
01:33 PM Revision 7d567088: Add gui knobs for 6RD support ticket #2217: Seth Mos
10:17 AM Revision b5a97555: Remove rtsol debugging output: Seth Mos

01/24/2012

09:14 PM Revision aa291f19: Comment out debug print for cert verification: Jim Pingle
09:14 PM Revision e5a2fed7: Comment out debug print for cert verification: Jim Pingle
08:04 PM Revision 9261370d: Check to see if the pid file exists before trying to kill anyprocess: Ermal LUÇI
08:04 PM Revision d224df18: Check to see if the pid file exists before trying to kill anyprocess: Ermal LUÇI
05:11 PM pfSense Packages Bug #2142 (Resolved): Squid Reverse Proxy should have login=PASS on all peers: I noticed that after configuring reverse proxy, I couldnt log into any machines that were behind the proxy.
After di... Ryan Davies
01:26 PM Feature #709: Add DHCP lease counts to the DHCP leases page: See also some notes in #2141 Jim Pingle
01:26 PM Feature #2141 (Closed): DHCP Lease Consumption Graph/Chart: Upon further searching, we already have a ticket for this... #709 Jim Pingle
12:55 PM Feature #2141: DHCP Lease Consumption Graph/Chart: Probably too much computation to do for a widget, and maybe even too much to do automatically for the leases view, si... Jim Pingle
12:49 PM Feature #2141 (Closed): DHCP Lease Consumption Graph/Chart: IPv4 (probably not sane for IPv6?) DHCP Lease consumption graph/chart in style of the Summary View on the Firewall Lo... Larry Titus
08:30 AM Bug #2130 (Feedback): Invalid netmask on IPv4 addresses core dumps filterdns: Applied in changeset commit:7f662df6657787d75b5fb3773199a3077485e4d9. Ermal Luçi
08:28 AM Bug #2130: Invalid netmask on IPv4 addresses core dumps filterdns: It was not a issue of not handling netmask but an issue with threads accessing free'd data. Ermal Luçi

01/23/2012

07:15 PM Revision 9fd14591: Be more careful when creating and removing a user, to only alter a user if it really matches the passwd entry. Fixes #2066: pw usershow likes to ignore what you want even with -n and if the user is numeric and doesn't exist, it fetches by ui... Jim Pingle
07:13 PM Revision a82b1ab1: Be more careful when creating and removing a user, to only alter a user if it really matches the passwd entry. Fixes #2066: pw usershow likes to ignore what you want even with -n and if the user is numeric and doesn't exist, it fetches by ui... Jim Pingle
05:26 PM Bug #2138: RRD Wireless graph broken in BSS mode: Seth, the graph does not make sense when not using the card as an AP.
When using the interface as an AP you would ne... Christian Borchert
05:22 PM Bug #2138: RRD Wireless graph broken in BSS mode: Originally I made this graph for a wireless client connection so we could track the signal strength.
I'm not sure ... Seth Mos
05:19 PM Bug #2138 (New): RRD Wireless graph broken in BSS mode: http://forum.pfsense.org/index.php/topic,45194.0.html
I am using pfSense 2.0.1 amd64 with an Atheros card (D-Link ... Christian Borchert
02:15 PM Bug #2066: Error when deleting all-numerical user from a "user manager": Applied in changeset commit:a82b1ab12d1f433c7f0e9bfc6e952cf511de8045. Jim Pingle
02:15 PM Bug #2066 (Feedback): Error when deleting all-numerical user from a "user manager": Applied in changeset commit:9fd145911d89d7ca891d0e08a861474420361990. Jim Pingle
01:25 PM Bug #2066 (New): Error when deleting all-numerical user from a "user manager": Well the key here is that you're using a username that is all numbers, apparently. Not sure how well that was tested,... Jim Pingle
12:52 PM pfSense Packages Feature #2133 (Closed): Add ET's SidReporter to snort package: Please include ET's SidReporter (http://doc.emergingthreats.net/bin/view/Main/SidReporter) into the snortpackage?
... Christian Borchert
12:44 PM Bug #2131 (Closed): pfsync(4) version change breaks HA upgrade: It's noted in the upgrade guide for previous versions and we'll just have to expand that as we always do for new rele... Chris Buechler
11:13 AM Bug #2131: pfsync(4) version change breaks HA upgrade: I added this just to list possible options not really doing anything more with it.
Ermal Luçi
11:08 AM Bug #2131: pfsync(4) version change breaks HA upgrade: We always warn for that, this is no surprise.
We are usually shocked when it does work, since we expect failure he... Jim Pingle
04:06 AM Bug #2131 (Closed): pfsync(4) version change breaks HA upgrade: Since in FreeBSD 9 there is a new pfsync version upgrades will break the protocol so either a compat layer needs to b... Ermal Luçi
11:41 AM Feature #2026: [Patch] Multiple SMTP notice recipients: Something for version 2.1 maybe? Peter O
10:02 AM Revision 48a01262: Correct getNasIP in 2.0.x branch to be correct. There is no multi-zone support in 2.0.x: Ermal LUÇI
05:30 AM Bug #2132 (Closed): Multi-wan inbound connections might cease to function when rules with forced-gateway exist on the same interface: Scenario:
WAN interface WAN_TWO
There are rules on WAN_TWO with a forced gateway such as, for instance,... Fulvio Scapin
02:53 AM Bug #2130 (Resolved): Invalid netmask on IPv4 addresses core dumps filterdns: Jan 23 08:55:12 kernel: pid 7134 (filterdns), uid 0: exited on signal 11 (core dumped)
Jan 23 08:55:02 check_reloa... Seth Mos

01/22/2012

03:58 PM Feature #2129: TCP mss clamping for IPv6: the problem is that pf currently does not handle ipv6 fragments. the other case is IPsec tunnels and other VPN soluti... Seth Mos
12:30 PM Feature #2129: TCP mss clamping for IPv6: Ok I ran a test at ICSI Netalyzr, and ran into the same thing
IPv6 Path MTU (?): Warning
Your system can not send... JohnPoz _
12:14 PM Feature #2129: TCP mss clamping for IPv6: Where are you testing this exactly - my tests to http://test-ipv6.com/ show ok
Test IPv6 large packet
ok (0.204s)... JohnPoz _

01/21/2012

09:24 PM Revision 51e9533f: Removing unnecessary inclusions of prototype.js, guiconfig.inc already includes this file: Vinícius Coque
08:08 PM Revision 86cf3681: making small fixes on jQuery code: Vinícius Coque
07:39 PM Revision 30a8ef77: Converting javascript code to jQuery on installer webgui: Vinícius Coque
05:03 PM Bug #2127: Full Update Image Size is too large on 2.1: Not sure why the UP kernel is in that list either, since we don't use it. There's ~11MB right there... Jim Pingle
05:02 PM Bug #2127: Full Update Image Size is too large on 2.1: I'm sure there is a way to shrink it. Currently the kernels take up more room than anything else (combined, essential... Jim Pingle
04:59 PM Bug #2127: Full Update Image Size is too large on 2.1: I expect we can shrink that down considerably to get under 100 MB. It has to be including a number of unnecessary thi... Chris Buechler
02:56 PM Bug #2127 (Resolved): Full Update Image Size is too large on 2.1: The full update image size from the initial test builds on FreeBSD 9 is more than 100MB. The upload size limit on pfS... Jim Pingle
04:43 PM Feature #2129 (Resolved): TCP mss clamping for IPv6: There is no tcp mss clamping for ipv6 and pf is not doing it either. Rumor has it that OpenBSD has it now.
Your sy... Seth Mos
04:40 PM Feature #2128 (Bogus): Large DNS requests on dnsmaq: Not sure if unbound will fix this, but performing the ICSI netalyzr test it has issues with large dns requests.
Th... Seth Mos
02:48 PM Bug #2126 (Resolved): Build package binaries for FreeBSD 10.x: We need to get a set of FreeBSD 9.x PBI builders going to crank out the needed binaries for FreeBSD 9.x packages. Som... Jim Pingle
02:46 PM Bug #2125 (Resolved): Update Package XML for FreeBSD 10.x: We need 9.x equivalents of
pkg_config.8.xml
pkg_config.8.xml.amd64
We could start first with the purely PHP-bas... Jim Pingle
02:44 PM Bug #2124 (Resolved): Package system updates for FreeBSD 10.x: Several things need to happen to get packages going on FreeBSD 9, see subtasks. Jim Pingle
12:38 PM Feature #1104: mwl driver patch to enable generation of new BSSIDs for additional VAPs: I never mentioned previously in this ticket that I deleted the latter patch because a variant of the extra part of th... Erik Fonnesbeck
03:56 AM Revision f314bad6: Only add these lines if there is both an IP address and CIDR. Fixes #1882: Erik Fonnesbeck
03:30 AM Revision fa984be9: Only add these lines if there is both an IP address and CIDR. Fixes #1882: Erik Fonnesbeck

01/20/2012

10:55 PM Bug #1882: Invalid pf rule generated from a port forward with dest=any on an interface with ip=none: Applied in changeset commit:fa984be954d33c90fb42186edc94865de5b2c921. Erik Fonnesbeck
10:55 PM Bug #1882 (Feedback): Invalid pf rule generated from a port forward with dest=any on an interface with ip=none: Applied in changeset commit:f314bad6789e05cecfb14242e13be077248ebf13. Erik Fonnesbeck
06:03 PM Revision b0c76f18: Ticket #2114. Remove define_syslog_variables since its deprecated and probably not needed: Ermal LUÇI
05:26 PM Bug #2121: pfctl -ss output has changed on FreeBSD 10: Looks like the format for the changed part is like this:
NAT on destination (port forward)
@destination_after_nat... Erik Fonnesbeck
03:35 PM Bug #2121: pfctl -ss output has changed on FreeBSD 10: I think I prefer the new output, it's a clearer separation for which is the internal IP rather than guess by counting... Jim Pingle
03:32 PM Bug #2121: pfctl -ss output has changed on FreeBSD 10: maybe fixup on the state print patches so that the -> is added back? Seth Mos
02:03 PM Bug #2121 (Resolved): pfctl -ss output has changed on FreeBSD 10: The state parsing code in diag_dump_states.php and elsewhere needs updated since on FreeBSD 9.x the format of the sta... Jim Pingle
04:05 PM Revision 199c320b: Bump upload size to 128mb, the firmware updates (at least for now while testing) are a bit too large for the old value.: Jim Pingle
03:54 PM Feature #1825: Dynamic DNS client IPv6 support: Reply from Namecheap is that they currently don't support it, but they submitted the request upward and they are supp... Jim Pingle
03:25 PM Feature #2123 (Resolved): Backup RRD files using the xml dump and restore from RRD tools: By dumping the xml files in the backup process we can restore the RRD files from i386 onto a amd64.
Migration path... Seth Mos
02:28 PM Bug #2122: pf log output slightly different in FreeBSD 10: For the above, when the solution is found, the code to get the rule number is in /etc/inc/filter_log.inc in find_rule... Jim Pingle
02:21 PM Bug #2122 (Closed): pf log output slightly different in FreeBSD 10: We can collect any issues we find with pf log output being different on FreeBSD 9 here, and the fallout.
First:
T... Jim Pingle
02:27 PM Feature #1938 (New): Filter messages broken into multiple syslog messages: Jim Pingle
01:29 PM Revision d1fc1182: Correct the Called-Station-Id attribute setting to be consistent on the data sent: Ermal LUÇI
12:57 PM Revision 48387425: Should be preg_split instead of explode: Erik Fonnesbeck
12:25 PM Revision 33266794: Correct the Called-Station-Id attribute setting to be the same on STOP/START packets: Ermal LUÇI
12:23 PM Revision 212ab80f: Correct the Called-Station-Id attribute setting to be the consistent on authentication packets: Ermal LUÇI
12:21 PM Revision cff5204a: Correct the Called-Station-Id attribute setting to be the same on STOP/START packets: Ermal LUÇI
11:18 AM Revision 2ce660ad: Unbreak a number of explode() replacements which required preg_split(): Seth Mos
11:10 AM Bug #2114: Depreciated PHP Functions/Warnings: Looks like define_syslog_variables() was removed and has no replacement, and that is used twice:... Jim Pingle
11:06 AM Bug #2114: Depreciated PHP Functions/Warnings: Various ereg* functions are also now depreciated:
* ereg() (use preg_match() instead)
* ereg_replace() (use preg_re... Jim Pingle
07:33 AM Bug #2114: Depreciated PHP Functions/Warnings: Thanks Erik, I just committed a patch with your suggestions.
If these changes come through ok I'll proceed with the j... Seth Mos
09:56 AM Bug #1112: IPsec GUI/backend missing RADIUS support: Does not seem to hard to add support for external script authentication.
Probably that is the easiest path to follow... Ermal Luçi
01:58 AM Feature #1663: DHCPv6 relay: The settings for DHCP Relay v6 on the latest snapshot aren't saving.
1.) Set it up
2.) Save it
3.) Navigate away... Darwin Mach

01/19/2012

11:20 PM Revision 26275879: Empty the file: Scott Ullrich
11:19 PM Revision 873c6cef: Add dummy file that was removed in FBSD 9 that keeps the installer from borking. This is much easier than rengerating the patch that is against the installer.: Scott Ullrich
07:50 PM Revision 6ac18f9d: mhash -> hash change from Ermal: Jim Pingle
07:48 PM Revision d9867431: Change from mhash to hash module, mhash is depreciated.: Jim Pingle
07:33 PM Revision cfbfd941: The function split() is replaced by the function explode(). Starting with PHP 5.3 this is deprecated and with version 6 gone.: Replacing it surpresses all the warnings Seth Mos
07:03 PM Revision 80c88a68: Fix the config patch to the dhcp6 relayx: Seth Mos
07:01 PM Revision 77b86ada: Mute error: Undefined variable: g in /etc/inc/shaper.inc on line 4062: Ermal LUÇI
06:58 PM Revision 54213e81: Add class PEAR5 code rather than a new file: Ermal LUÇI
06:50 PM Revision 0d6fee24: Update PEAR.inc code to latest version: Ermal LUÇI
04:40 PM Bug #2114: Depreciated PHP Functions/Warnings: A couple that were either missed or I thought just needed special consideration when changing:
This is likely inte... Erik Fonnesbeck
02:11 PM Bug #2114: Depreciated PHP Functions/Warnings: On a similar note, join() is simply an alias to implode() now, so it should also be safe to change all of these to im... Jim Pingle
02:09 PM Bug #2114: Depreciated PHP Functions/Warnings: For the split calls, most can be made into explode.
These will need to be changed to preg_split():... Jim Pingle
01:56 PM Bug #2114 (Resolved): Depreciated PHP Functions/Warnings: In PHP 5.3 some depreciation warnings were introduced, which we may want to tackle as they are found.
Here are so... Jim Pingle
04:09 PM Feature #2117 (New): 6RD support for ISPs like Swisscom: databeestje_: 3. Select “6RD” as tunnel protocol, and configure its parameters:
[22:02] databeestje_: 1. IP... Seth Mos
03:08 PM Bug #2115 (Feedback): mhash is depreciated in PHP 5.3 and must be changed: This needs just more testing now. Ermal Luçi
02:25 PM Bug #2115: mhash is depreciated in PHP 5.3 and must be changed: We only have two mhash calls, may not be too hard to convert to whatever is available.... Jim Pingle
02:23 PM Bug #2115: mhash is depreciated in PHP 5.3 and must be changed: http://pear.php.net/bugs/bug.php?id=17828... Jim Pingle
02:15 PM Bug #2115: mhash is depreciated in PHP 5.3 and must be changed: mhash was supposedly moved into the base of php 5.3. Will need to see why that's missing, as it is no longer a separa... Jim Pingle
02:08 PM Bug #2115 (Resolved): mhash is depreciated in PHP 5.3 and must be changed: During the General Wizard setup after you specify the password the following error is returned:... Warren Baker
01:58 PM Bug #2111 (Resolved): WebUI pages fail to load: Warren Baker
01:52 PM Bug #2111: WebUI pages fail to load: All related to PEAR.inc. Ermal is having a look at a new version. Warren Baker
01:22 PM Bug #2111: WebUI pages fail to load: Looks like it is all related to -capetiveportal.inc.- radius.inc. If you comment that out of captiveportal.inc - the ... Warren Baker
12:55 PM Bug #2111: WebUI pages fail to load: Looks like it is all related to capetiveportal.inc. If you comment that out the pages render correctly. Warren Baker
10:54 AM Bug #2111 (Resolved): WebUI pages fail to load: The following pages give no result.
interfaces.php
interfaces_assign.php
services_captiveportal.php
status_serv... Seth Mos
11:14 AM Bug #1112: IPsec GUI/backend missing RADIUS support: Not sure if racoon supports that... from racoon.conf(5)... Jim Pingle
11:01 AM Bug #1112: IPsec GUI/backend missing RADIUS support: Probably this should be handled the same as openvpn through an external script. Ermal Luçi
10:59 AM Todo #2099: Remove "queue" from CARP traffic: This will be the topic with new carp after 2.1 Ermal Luçi
10:57 AM Bug #2101 (Closed): Upgrade code for Multi-Zone CP Missing: Seems upgrade code was present since the beginning. Ermal Luçi
10:41 AM Todo #2109 (Resolved): pfSense on FreeBSD 10.x: Seth Mos
07:51 AM pfSense Packages Bug #2107 (Rejected): Scheduling weird behaviour in pfsense 1.2.3: Please repeat any tests with pfSense 2.0.1 before submitting a bug report. If you need help, please post on the forum... Jim Pingle
05:59 AM pfSense Packages Bug #2107 (Rejected): Scheduling weird behaviour in pfsense 1.2.3: I have an issue with scheduling in pfsense 1.2.3 In my firewall rules lets say I have a declared a network segment f... sherwin kit suazo

01/18/2012

08:11 PM Revision 3b49bc25: Ensure timezone is set: Scott Ullrich
08:05 PM Revision 943994ff: Ensure timezone is set: Scott Ullrich
04:12 PM Revision 3133cc3b: Do not set EXTENSIONSDIR twice: Scott Ullrich
04:11 PM Revision d6abdf03: Nuke extra C/R: Scott Ullrich
04:10 PM Revision 79454450: Test for newer 20090626 PHP_EXT_DIR: Scott Ullrich

01/17/2012

11:25 PM Bug #2066: Error when deleting all-numerical user from a "user manager": i've send my config files to jimp, hopefully he can check on it
even if you start from a scratch it will still be th... faizal md dan
09:03 AM Bug #2066: Error when deleting all-numerical user from a "user manager": But where?! i clean it up during the upgrade from 1.2.3 dli muc
08:55 AM Bug #2066: Error when deleting all-numerical user from a "user manager": Probably special characters?! Ermal Luçi
08:25 AM Bug #2066: Error when deleting all-numerical user from a "user manager": jimp (at) pfsense [dot] org. Jim Pingle
08:23 AM Bug #2066: Error when deleting all-numerical user from a "user manager": Is there a email Address to send? dli muc
07:46 AM Bug #2066: Error when deleting all-numerical user from a "user manager": We need a full copy of your config.xml to work with. We cannot replicate this in any circumstances that we have tried... Jim Pingle
07:45 AM Bug #2066: Error when deleting all-numerical user from a "user manager": Create a functional OVPN with two users. (with OpenVPN Client Export Utility Pack)
Delete than the users.
If you de... dli muc
12:28 PM Bug #2102: PPTP VPN does not work - LCP: parameter negotiation failed: it is. PPTP and GRE connectivity is problematic in many circumstances for many reasons. post to the forum or mailing ... Chris Buechler
12:26 PM Bug #2102: PPTP VPN does not work - LCP: parameter negotiation failed: I dont think so. In the forum others reported that the problem came or disappeared out of nowhere.
Also, other VPNs ... Christoph Filnkößl
12:19 PM Bug #2102 (Rejected): PPTP VPN does not work - LCP: parameter negotiation failed: not a bug, that's a general problem with connectivity generally Chris Buechler
12:14 PM Bug #2102 (Rejected): PPTP VPN does not work - LCP: parameter negotiation failed: We are using a pfSense 2.0.1 on a cable line.
One IP is directly on WAN, a /28-subnet is routed to DMZ for use with ... Christoph Filnkößl
10:56 AM Bug #2101 (Closed): Upgrade code for Multi-Zone CP Missing: The code for multi-zone captive portal was imported into mainline (2.1) a while back, but no upgrade code exists. So ... Jim Pingle
10:40 AM Todo #2100 (Resolved): Import OpenVPN RADIUS ACL support: need to import the OpenVPN RADIUS ACL support we have implemented privately. Not critical for 2.1 but shouldn't be ha... Chris Buechler
08:51 AM Revision 1f4f9c7c: Merge pull request #41 from lotheac/master: .profile and .shrc cleanup Seth Mos
08:38 AM Revision a7401ce7: Clean up .profile and .shrc: Lauri Tirkkonen
03:00 AM Todo #2099 (New): Remove "queue" from CARP traffic: Hello,
as it happened for the "Outbound NAT", there's the possibility that the CARP traffic can be matched by on... Michele Di Maria
01:43 AM Revision 9feaf772: replacing prototype with jQuery on load balancer pages: Vinícius Coque

01/16/2012

06:24 AM pfSense Packages Bug #1887: axfrdns from tinydns is not working: Sorry, turns out it's not that broken after all, after a reboot the axfrdns service started again, however:
Its st... Anonymous

01/15/2012

03:05 PM Bug #2051: Scheduled Firewall rules do not work properly: Gord-
Please go here http://forum.pfsense.org/index.php/board,3.0.html and let others help you through this.
Chris Palmer
02:53 PM Revision d6159f76: Scriptaculous / prototype replaced by jQuery: Vinícius Coque
02:51 PM Revision ea0d4171: Converting headjs javascript code from prototype to jQuery: Vinícius Coque
01:44 PM Revision a59c7fa6: Duplicate logic from gif tunnels for gre tunnels these are very similar: Fix for ticket #2077 Seth Mos
01:38 PM Revision 2d107ad5: Remove 32 bit subnetmask limitation for IPv6: Seth Mos
12:07 PM Revision 58418355: Show the interface Link Local addresses on the status_interfaces.php: Seth Mos
12:01 PM Feature #1826: PPPoE server IPv6 support: Added PPPoE edit screen support, added pppoe server interface selection on the DHCPv6 server page.
Added the set bun... Seth Mos
11:40 AM Revision 35af7141: Fix for ticket 2071, this allows link local addresses for gateways.: Backend already added the interface scope for link local addresses, hurrah. Seth Mos
11:30 AM Feature #1825: Dynamic DNS client IPv6 support: Namecheap appears to only go by hostname and has nothing in the FAQ [re: IPv6], but they have been very responsive to... Jim Pingle
10:07 AM Feature #1825: Dynamic DNS client IPv6 support: Briefly looked at it, but DynDNS didn't have backend support for submitting these. Not even in beta.
You can manua... Seth Mos
10:05 AM Feature #2077: GRE GUI needs IPv6 support: Ok, backend code fixed to create the GRE tunnel. Although it accepts the prefixlen /64 command it does not set anythi... Seth Mos
09:46 AM Feature #2077 (Feedback): GRE GUI needs IPv6 support: Only thing I can find in the verification is the subnet mask length enlarged from 32 to 128.
Otherwise it does accept... Seth Mos
08:23 AM Feature #2071 (Feedback): Allow link local addresses for gateways: OK, I've added support for allowing link local addresses in the gateways form.
I've also added link local address ... Seth Mos

01/14/2012

03:32 PM Bug #2051: Scheduled Firewall rules do not work properly: I'm sorry but you can't dispute this proof that the schedule function does not work. I would really like someone to ... Gord Schablablak

01/13/2012

10:44 PM Bug #2084: pfsense_ng Theme Shifting With Resolution Changes: Ok, to bad it's not centered, it looks odd like this...
I think it's a great theme, being off centered isn't typic... D F
07:27 PM Revision 0c305760: Allow using subnets and special nets in the CLI version of easyrule: Jim Pingle
06:31 PM Revision 633136b8: Fix help text: Jim Pingle
04:27 PM Revision a237d9b2: Fix ssh key note to refer to DSA not just RSA since both work.: Jim Pingle
04:26 PM Revision 60879d14: Fix ssh key note to refer to DSA not just RSA since both work.: Jim Pingle
10:38 AM pfSense Packages Bug #1887: axfrdns from tinydns is not working: Just upgraded to package version 1.0.6.17 on pfSense 2.0.1. DNS zone transfers are broke again.
-Jan Anonymous

01/12/2012

10:56 PM Bug #2084 (Rejected): pfsense_ng Theme Shifting With Resolution Changes: that's how it's designed to work, it's not a problem. If you'd like to see it stay centered, feel free to make it do ... Chris Buechler
10:40 PM Bug #2084 (Rejected): pfsense_ng Theme Shifting With Resolution Changes: I'm not sure if this is a bug, it seems like one, since the theme shifts around when changing resolutions and it shou... D F
10:47 PM Bug #1419: Incorrect Intel License information in dmesg: SORRY TYPO;
so the bootup and /var/log/dmesg.boot *isn't* still talking about this...
D F
10:46 PM Bug #1419: Incorrect Intel License information in dmesg: When was 2.0.1 released?
I just installed it the other day, sorry I didn't find a release date, but hopefully thi... D F
04:48 AM Feature #2083 (Closed): Auth : LDAP users and group object.: on
2.0.1-RELEASE (i386)
built on Mon Dec 12 18:24:17 EST 2011
FreeBSD 8.1-RELEASE-p6
in the webconfigurator "S... Olivier CASPARI

01/11/2012

09:41 PM Revision fd8774c0: Add some protocol filtering capability to the packet capture page: Jim Pingle
09:08 PM Revision b397879f: Add a button to re-view the packet capture file if one exists in /root/: Jim Pingle
07:58 PM Revision d495dc51: Fix tab name to be consistent.: Jim Pingle
05:21 PM Bug #2080 (Feedback): display_error_form in /etc/inc/authgui.inc does not set a HTTP status code: what do you think it should set? 200 is correct unless there is an error at the HTTP level, which is not what happene... Chris Buechler
10:33 AM Bug #2080 (Closed): display_error_form in /etc/inc/authgui.inc does not set a HTTP status code: When displaying an error page, the web UI doesn't set a HTTP status code on its response.
It puts it in the HTML t... Russell Howe
04:59 PM Revision b70151ae: Fix botched tag, add some line breaks: Jim Pingle
04:51 PM Revision 4892d709: Remove a second, redundant temperature block (there is already one higher up that appears to be functional, this one is not.): Jim Pingle
04:48 PM Revision 3a94345c: Change system info widget fields from <input> to <span> so they don't appear editable, and we aren't bound by their width constraints. (One long one was messing up table width).: Jim Pingle
04:45 PM Bug #2082: Captive Portal error when client IPs are reused: The log needs to be clarified so it detects IP reusage on a diff MAC rather than only checking the IP and thinking it... Chris Buechler
04:26 PM Bug #2082 (Resolved): Captive Portal error when client IPs are reused: This captive portal scenario appears to be broken (tested on 2.0.1):
* client_a has IP x.x.x.207, logs into CP, th... Jim Pingle
04:17 PM Revision c6678f31: Merge pull request #37 from Joecowboy/master: Dashboard widget fixes and mods Jim Pingle

01/10/2012

02:38 PM Bug #2079 (Closed): Dynamic DNS: moved to #1553 Chris Buechler
04:42 AM Bug #2079 (Closed): Dynamic DNS: *This is a duplicate of Bug #1553* This server is throwing a 500 every time I try to post my comment to Bug #1553.
... Andrew DeFilippis
02:38 PM Bug #1553: Dynamic DNS does not allow @ in the password: adding comment from #2079 duplicate
------------------------------------------------
Dynamic DNS updater does... Chris Buechler
02:05 PM Revision 6a3262b3: Respect the value of the per-rule "disable reply-to" checkbox.: Jim Pingle
02:04 PM Revision 12c7b577: Respect the value of the per-rule "disable reply-to" checkbox.: Jim Pingle
02:38 AM Bug #2078: Interface cleanup - not correctly removed from UPnP when deleted: Gotcha. Feel free to alter it down to "very low" unless you guys save that for things like spelling errors. :) I f... Braden McGrath
02:34 AM Bug #2078: Interface cleanup - not correctly removed from UPnP when deleted: "no buffer space available" in scenarios like that is just a generic "I can't do that" complaint. Won't hurt anything... Chris Buechler
02:31 AM Bug #2078 (Closed): Interface cleanup - not correctly removed from UPnP when deleted: When deleting an interface that had previously been active with UPnP, that interface apparently is not correctly remo... Braden McGrath

01/09/2012

03:03 AM Revision 932052bd: it's 2012: Chris Buechler
03:00 AM Revision 91238d86: it's 2012: Chris Buechler

Also available in: Atom

Project

General

Profile

pfSense

Activity

Activity

02/07/2012

02/06/2012

02/04/2012

02/03/2012

02/02/2012

02/01/2012

01/31/2012

01/30/2012

01/29/2012

01/28/2012

01/27/2012

01/26/2012

01/25/2012

01/24/2012

01/23/2012

01/22/2012

01/21/2012

01/20/2012

01/19/2012

01/18/2012

01/17/2012

01/16/2012

01/15/2012

01/14/2012

01/13/2012

01/12/2012

01/11/2012

01/10/2012

01/09/2012