Activity
From 01/21/2012 to 02/19/2012
02/19/2012
-
10:06 PM Bug #910 (Resolved): CARP+Bridging+NAT can lead to "freeze"/"lockup"
-
-
-
-
-
09:42 PM Feature #2205 (Feedback): relayd enhancements in system_advanced_misc.php
- New tab added for global relayd settings.
-
11:24 AM Bug #2213: Call to undefined function hash() in /etc/inc/auth.inc on line 507
- OK. I'll upgrade to 5.3... I did look at 2115 prior to this submittal. Must have missed the requirement. No worries. ...
-
11:17 AM Bug #2213 (Closed): Call to undefined function hash() in /etc/inc/auth.inc on line 507
- This is because you must be using PHP 5.3 on the current code, not PHP 5.2.x. It was switched a while back. See #2115
-
- Crash report begins. Anonymous machine information:
i386
8.1-RELEASE-p6
FreeBSD 8.1-RELEASE-p6 #0: Mon Dec 12 1... -
- Attempting to add a new user for captive portal testing purposes. Created a test user and clicked save... received th...
02/18/2012
-
- after changing an interface away from DHCP, dhclient is left running.
-
- You are right, it is confusing.
According to relayd man page, these parameters can be applied globally and for eac... -
02:03 PM Feature #2211: tun interfaces should not be hidden from Interfaces>assign
- Probably just rename the interface as we do for openvpn.
Otherwise some consequenceis might arise.
Most all of th... -
- tunX interfaces are hidden from assignment and should not be. they're useful in a number of circumstances when manual...
02/17/2012
-
- This commit:
https://github.com/bsdperimeter/pfsense/commit/a87c88106ab366f046baf0f459c445a055eea5f9
changed fro... -
- Setting the MTU on interfaces.php is ignored, and overridden by what's configured on the PPP instead. What's set by i...
-
- Need to rebuild the ipsec-tools port and use it in pfSense build.
-
01:54 PM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes
- Ermal,
Any chance you could shed some light on how to do that? I've got a few clients who this is affecting quite ... -
01:52 PM Bug #1705: Multi-WAN Failover loses default route
- Bump in a new mode:
"Gateways status could not be determined, considering all as up/active."
Sent at least a few ...
02/16/2012
-
-
12:59 PM Bug #437: Y2K38 bug in user manager expiration
- that should have said commit:e32805d9
-
- I see that Seth merged my pull request: e32805d9
-
11:35 AM pfSense Packages Bug #2208 (Resolved): Snort: Only the last updated rules get extracted, others get deleted
- Steps to reproduce:
1. Install Snort via the Package Manager
2. Configure Global Settings to download Snort.org rul... -
10:47 AM Bug #2207 (Resolved): Date header for E-mail incorrect.
- PFSense E-mail notification date header: "Date: Thu, 16 Feb 2012 16:43:35 CET"
Date deceleration according to RFC822...
02/15/2012
-
- Try to change line 198 of /etc/inc/mail_reports.inc from:...
-
- What e-mail client are you using? Because it renders them fine for me in both Thunderbird and K9.
-
05:32 PM Bug #2206 (Resolved): RRD Report Email HTML has incorrect file paths for attachments
- The HTML created by the RRD Report Email package is listing the graphs as:...
-
- Please post to the forum for support. This is a rejected ticket that was not a bug, but something that happened to th...
-
02:59 PM Bug #2200: Upgrade from 2.0-RC3 to 2.0.1 fails with "Something went wrong when trying to update the fstab entry"
- I've exactly the same problem.
-
- Good point. I will review and let you know !
Thanks,
Pierre
-
10:38 AM Bug #2204: DHCP reports client lease, but DNS doesn't know about
- No, but details follow as soon as I have full access to the machine again (later this evening).
-
- Not enough detail here. Do you have a forum thread where this was discussed in more detail?
-
- A client was assigned a lease, but the DNS server doesn't know about the client. It keeps not knowing about the clien...
-
- That is ambiguous as to whether that works with inbound or outbound load balancing. The sticky option works for both ...
-
- I suggest to add two new settings in system_advanced_misc.php for a better relayd control. (cf screenshot attached)
...
02/14/2012
-
- Test ok.
-
- https://github.com/bsdperimeter/pfsense/pull/49
-
- The issue is the call to strtotime which is limited to 2038 in 32-bit versions of PHP. The only solution that will wo...
-
-
- Applied in changeset commit:eaf23c171704362fdf3d7e27200ffdf540642c20.
-
- This is not unexpected behavior, there need to be policy route negation rules for any directly connected networks, st...
-
08:17 AM Bug #2202 (Rejected): Firewall rules specifying a gateway does not work for WAN subnet in some cases.
- I have a LAN firewall rule specifying that all outband traffic (destination all) should go to a gateway group contain...
02/13/2012
-
- If you pick an interface subnet in an IPsec P2 that has no IP, it generates an invalid racoon.conf. Input validation ...
-
03:29 PM Bug #2164: Captive Portal - RADIUS - Acct-Session-Time does not reset when "stop/start accounting" is enabled
- I am sorry to say that - or better - I am sorry that I posted something wrong on my first post! :-(
I am wrong wit... -
09:02 AM Bug #2200: Upgrade from 2.0-RC3 to 2.0.1 fails with "Something went wrong when trying to update the fstab entry"
- I disagree with the Rejected status.
I installed this system as described in the installation guide, using dd to... -
- This is not a general problem/bug, but something specific to your setup or what you're doing. Please post in the foru...
-
- I tried upgrading from 2.0-RC3 to 2.0.1 on my nanobsd box, but it failed with "Something went wrong when trying to up...
-
01:48 AM pfSense Packages Bug #2199: Varnish3 fails on start with sysctl-ish errors
- Same error on Varnish 2.1.5 (pkg v1.0), so it's not specific to v3.
Same error on my production firewall (i386 2.0.1... -
- Running pfSense 2.0.1-RELEASE nanobsd-VGA off a USB stick.
Installed Varnish3.
Performed initial configuration, ena...
02/12/2012
-
- Not sure why it doesn't work for you, I've setup 3-4 VPNs this week in SSL/TLS + User Auth mode and it works fine to ...
-
- When running an OpenVPN server in server mode "User Auth" or "SSL/TLS" the Client export Utility allows to export con...
02/11/2012
-
05:26 AM Bug #2165 (Feedback): IE 9 causes log out on Status>Traffic Graph
- Fix tested with IE9, IE8 (with Adobe SVG plugin), Firefox, and Chrome.
02/10/2012
-
10:08 PM pfSense Packages Feature #2197 (Closed): WebDav gateway
- I'd like a WebDAV gateway package.
At a minimum, it'd need to support user authentication, and provide read-only a... -
- 0x2000000 = 33554432 decimal (why that sysctl wants a hex mask but displays in decimal)
-
- Just to keep this noted here.
Seems -1 is not the value for software only but on 8.1 sources 0x02000000 is the value. -
- If there are multiple crypto devices on a box (padlock, hifn, glxsb) it may lead to some abiguity or confusion about ...
-
- We need to add an accounting on packet like this after the CP service has restarted:...
-
- Hi,
I didn't get the patch too 100% applied with this command:... -
-
11:53 AM Bug #2195 (Rejected): static route
- Hello,
Static routes fails i have a multilan and multiwan environment because i use recommended settings a do not ... -
- Do not cross-post to the ticket system, this is for bug reports, not support discussions. Free support is given on th...
-
- Hello,
Static routes fail in multilan y multiwan environment because i use recommended settings a not work, please...
02/09/2012
-
- Attached patch from request
-
- Well this is an easy fix if it really works that way.
I am not sure what really the Acc-Session-Time measures but si... -
- Fixing up redmine's copies of the git repo it accidentally set this back to feedback in the process.
-
12:52 PM
pfSense Packages
Bug #82 (Feedback): dns-server/tiny-dns-package not working after reinstallation
- Applied in changeset commit:71bc2064b506456195c4aa0623aaf016c175aae9.
-
- Applied in changeset commit:8490db315678c14c6b580e6d23718e8f089487c9.
-
- Applied in changeset commit:dfbb5e15dfdcacafbb7544257da252a0c4ea33ed.
-
- Thanks Cino.
-
10:03 AM pfSense Packages Bug #1765: Unable able to clear Snort Alerts
- this has been resolved. you can close out this ticket
-
- Applied in changeset commit:bfa526dc396cd4bfd79b70cc554fd4a2df394e1f.
-
- barnyard2 works, i still have to manually install the file but it could because I'm running 2.1-dev
-
- I'am sure my static routes is properly configured i am reporting a bug and is not solved yet.
Regards
Nicanor M... -
- Please keep discussion and support questions on the forum. This ticket system is for confirmed bugs only, and static ...
-
- Excuse me, i think is bug.
I trying instructions from forums since 2.0 beta versions and i can't solve the proble... -
- i believe this has been resolved but i'm unable to test
-
- Please keep discussion and support questions on the forum. This ticket system is for confirmed bugs only, and static ...
-
- Excuse me, i think is bug.
I trying instructions from forums since 2.0 beta versions and i can't solve the proble... -
- not a bug. read the reply you got on the forum
-
- Since beta version of pfsense 2 i have problems with static routes, traffics between static routes stop, all is confi...
02/08/2012
-
- this is addressed in #2082
-
- there is a lot involved here, people will expect to auth both v4 and v6 IPs in a single shot which complicates everyt...
-
- The short version is racoon need to learn to differentiate packets by their incoming interface.
A patch is present o... -
- Applied in changeset commit:c92fb4c4dea298072593b2aae22aed43dcf44972.
-
- Applied in changeset commit:10fb17c167e72f7ba83b526f6435be45deeb34be.
-
11:59 AM Bug #2174 (Closed): Using Show States with a large number of states causes an error
- I'm running pfSense 2.0.1. I have the system configured to support 800K states, it generally has around 450K states ...
-
- After upgrading from 2.0-RC3 to 2.0.1, the pfsync0 interface started reporting send errors.
[2.0.1-RELEASE][admin@ho... -
- All present php scripts in pfSense call exit after sending a redir or finding an error or wanting to just finish proc...
-
04:39 AM Feature #1169: Add load balancer status in SNMP
- It is also necessary to add a text inside snmpd web configuration field where you can add customs commands, or someth...
02/07/2012
-
09:25 PM pfSense Packages Feature #2170 (Closed): Enable AirPrint mdns via Avahi
- Can we have Avahi adjusted to allow mdns broadcasts for Apple AirPrint?
This will allow iOS devices to print via C... -
- Follow on #1136
-
- The only way to solve this is teach mpd about external script used to authenticate users, as for OpenVPN/IPSec etc.
... -
- A non-fatal warning there would be nice. I'm not sure we should prevent it outright but they should be aware that it ...
-
- Applied in changeset commit:fbdc4b568453198fda514800286825fa9e74896f.
-
- Applied in changeset commit:2890cae51a424519662922e558bc939077b66c7c.
-
- Changed error message. Probably should even warn user on dhcp timeout lower than CP timeout?
-
- Applied in changeset commit:843a6fe25ac303ceda46450a3f4ac24f69a54ecb.
-
- Applied in changeset commit:443abb317d52d57fba132eef7ebffa839538a0e4.
-
- I removed the 3 biggest files there _Dev kernels and uniprocessor one since their presence is not really needed these...
-
- Applied in changeset commit:67e73dcd0663222e2d9c803e50a4a15104f8bc08.
02/06/2012
-
02:15 PM Bug #2166 (Resolved): Dynamic DNS not updating
- RFC 2136 DNS is not updating when no DynDNS config is present.
Version:
2.0.1-RELEASE (amd64)
built on Mon Dec...
02/04/2012
-
- There seems to be a function in /etc/inc/captiveportal.inc which has "Acct-Terminate-Cause = 7" but it seems not to w...
-
- It should be good now with these two fixes and the one just before them for a separate related issue.
-
- It appears that this only happens when the gateway referenced by the static route is directly reachable (on the same ...
02/03/2012
-
- Browsing to Status>Traffic Graph in IE 9 logs the session out the web interface.
Attached is the contents of "Fol... -
- updated with proper description of problem
-
- Acct-Session-Time needs reset to value 0 when accounting-stop packet is sent. This is done when "no accounting update...
-
- If you enable NAT reflection for 1:1 NAT and also the outbound NAT rules to assist 1:1 NAT, the resulting rules only ...
02/02/2012
-
- No that's fine, and that would work, but since you mentioned the client export package .p12 that's why I made the oth...
-
- No need to include the CA.crt into pkcs12 (cert.crt + cert.key).
Just make a pkcs12 from the corresponding .crt an... -
- The GUI uses PHP's built-in OpenSSL commands, and the Client Export package uses shell commands.
The PHP version o... -
01:12 PM Bug #1736: Allow other users to be used as authenticator in xmlrpc exchanges
- Adding this to help prevent duplicate bugs...
In the Firewall -> Virtual IPs scree, in the CARP Settings tab, the ... -
- Applied in changeset commit:6fbe0168416bdb5d410cb36fdf531b317d3e072a.
02/01/2012
-
02:35 PM Bug #2159 (Resolved): Upgrade code breaks RRD databases on nano
- Feb 1 20:28:40 php: /status_rrd_graph_img.php: Failed to create graph with error code 1, the error is: ERROR: No DS ...
-
- Applied in changeset commit:18d4d360a3a5de5c80ab3940ce2cf80bee3859e6.
-
- Applied in changeset commit:c82b2c3f212e7c008146df624e0423d0f10770ab.
-
- The SNMP GUI has a "bind to LAN interface" option but that is a bit ambiguous and not so useful in 2.x. It also doesn...
-
-
- from reading the sparse documentation one needs to calculate the IPv6 prefix address for the broker inside the give p...
01/31/2012
-
- When changing relayd settings in this screen (for example: "use sticky connections"), /var/etc/relayd.conf should be ...
-
- 1.2.3 is no longer supported. If someone would like to make a merge request in git for a separate package for 1.2.3 t...
-
- Looks like the IPv6 code I added last June might be breaking this in two ways on 1.2.3. First because PHP4 doesn't li...
-
06:33 AM pfSense Packages Bug #2156 (Closed): Can't install TinyDNS: unexpected '&'
- I was trying to install TinyDNS under my installation of pfsense ..
It got to the Installing dns-server and its de... -
01:04 PM Bug #2149: PPTP Split Tunnel
- Yeah I would also be interested in finding out which PPTP server supports that. All the ones I have used don't provid...
01/30/2012
-
- I'm not aware of any PPTP server that does that in a way that works for all clients, which are you using that does? E...
-
09:50 AM Bug #2149: PPTP Split Tunnel
- I think your may mean that is it not possible for the PPTP Server used by pfSense to send routes to PPTP clients as I...
-
- it's not possible to send routes to PPTP clients, has to be done on the client.
-
- Establishing a PPTP tunnel with pfSense does not pass routes to PPTP VPN clients. This may or may not be intended so ...
-
- the cron package allows editing that easily, don't think it's worthwhile for us to bother otherwise. though if you're...
-
- Chris,
My suggestion is not to change the time it runs for everyone. My suggestion is to show the time/frequency i... -
- You can change your cron job in that case. We're not going to run something every 3 minutes on everyone's system that...
-
- Chris,
Updates may take place if the IP on the WAN interface changes, but not if the pfSense device is behind a DS... -
- Patch committed for FreeBSD 8.
-
- If feasible, add support for manually configuring the link-local address to send by way of a patch to rtadvd.
We cou... -
- When using Captive Portal + RADIUS + vouchers then CaptivePortal sends the voucher code as username to RADIUS when "r...
-
11:01 AM Feature #2152 (Needs Patch): Pass-through MAC and Vouchers
- When I enable Pass-though MAC automatic additions it adds both the people that authenticate using my radius and my vo...
-
- Lifted from /etc/inc/interfaces.inc FIXME notes.
We need something to set the IPv6 address. And we need to have a fu... -
- thanks Warren, definitely not an issue as described then. Chris, post to the forum or mailing list for help.
-
- It works fine for me on amd64. No problems at all.
Try use tcpdump and see if the dns traffic is even hitting the FW. -
- most people run exactly that way, it works. I just double checked another install to verify. Though I don't have an a...
-
- For PPTP clients DNS fails, I get a DNS time out, on every IP on a pfSense interface for which DNS is configured incl...
01/29/2012
-
- It updates on every IP change, the cron job is only to update if the IP hasn't changed in 25 days so the provider doe...
-
- The current Dynamic DNS configuration does not check for IP address changes often enough to be useful in many situati...
-
- I bought a FreeRADIUS book: "FreeRADIUS Beginner's Guide by Dirk van der Walt" and I uploaded to excerpts which expla...
01/28/2012
-
- http://sourceforge.net/mailarchive/forum.php?thread_name=91C62B8E3E2A4F75893DCBCD634ECACF%40Avitos&forum_name=ipsec-t...
-
- Cert Manager in pfsense allows to download the .crt and .key file of CA and certificates. But on windows clients we n...
01/27/2012
-
- This needs to teach racoon about carp interface status.
-
- Follow-up on #1112
-
- This probably should just be skipped since its just related to old gear.
Closing for now, can reopen later on. -
- This is the same as #1970.
Please try with the new ipsec-tools port from pfPorts. -
- sounds fine, just file an alert for already-existing configs that are wrong, and add the input validation to prevent ...
-
- The changes to ipsec-tools are a bit too intrusive to teach racoon about interface indexes.
I think the better optio... -
- Applied in changeset commit:d2a5443f5d0f9747be874a4f8787ca18348a8461.
-
- earlier 6rd work. http://bougaidenpa.org/masakazu/archives/54
-
- pfPort patched.
new racoonctl option show-users -
- Patch committed to pfPort of ipsec-tools.
Btw probably it is not needed to compile racoon with LDAP and RADIUS suppor... -
02:38 AM Feature #2146 (Resolved): Allow concurrent logins when using vouchers
- When using vouchers it is not possible to use them more then once, even when enabling 'allow concurrent logins'. Usin...
01/26/2012
-
- The problem is that I cannot implement this but probably can help on testing. If it will not find a way into 2.1 than...
-
- Applied in changeset commit:89bbb204ad58c4d0250ebabf34ebec1996a53088.
-
- Applied in changeset commit:e8fc69ff43bb089f90de4f87f02db44f55a96b40.
-
- Except that would break everyone's current settings unless we tried to be smart with some upgrade code (which could s...
-
11:55 AM Bug #2144: pfSense dyndns for Namecheap doesn't work with hostnames containing "."
- It's probable that other dyndns providers also accept hostnames including dots, since it's legal A record syntax. Thi...
-
- (Copying my reply from the forum post here)
Yeah we split on ., I didn't realize their client supported that syntax.... -
- Namecheap happily supports hostnames like www.sub.domain.com. Their Windows dyndns client also supports hostnames tha...
01/25/2012
-
- Since no complaints received.
-
- if you can implement and fully test and submit a merge request we'll get it in for 2.1, otherwise this probably can't...
-
- This is the RFC:
http://freeradius.org/rfc/rfc2866.html#Acct-Terminate-Cause -
- When using Captive Portal with RADIUS and Captive Portal is restarting the FreeRADIUS server does not get any informa...
-
- A healthy chunk of code is already in there. Come to think of it, 6to4 is very similar to this, but the patch for stf...
-
- Got a reply from Swisscom clarifying their 6RD deployment, past trial, now production.
Our productive network uses 6...
01/24/2012
-
05:11 PM pfSense Packages Bug #2142 (Resolved): Squid Reverse Proxy should have login=PASS on all peers
- I noticed that after configuring reverse proxy, I couldnt log into any machines that were behind the proxy.
After di... -
- See also some notes in #2141
-
- Upon further searching, we already have a ticket for this... #709
-
- Probably too much computation to do for a widget, and maybe even too much to do automatically for the leases view, si...
-
12:49 PM Feature #2141 (Closed): DHCP Lease Consumption Graph/Chart
- IPv4 (probably not sane for IPv6?) DHCP Lease consumption graph/chart in style of the Summary View on the Firewall Lo...
-
- Applied in changeset commit:7f662df6657787d75b5fb3773199a3077485e4d9.
-
- It was not a issue of not handling netmask but an issue with threads accessing free'd data.
01/23/2012
-
05:26 PM Bug #2138: RRD Wireless graph broken in BSS mode
- Seth, the graph does not make sense when not using the card as an AP.
When using the interface as an AP you would ne... -
- Originally I made this graph for a wireless client connection so we could track the signal strength.
I'm not sure ... -
- http://forum.pfsense.org/index.php/topic,45194.0.html
I am using pfSense 2.0.1 amd64 with an Atheros card (D-Link ... -
- Applied in changeset commit:a82b1ab12d1f433c7f0e9bfc6e952cf511de8045.
-
- Applied in changeset commit:9fd145911d89d7ca891d0e08a861474420361990.
-
- Well the key here is that you're using a username that is all numbers, apparently. Not sure how well that was tested,...
-
- Please include ET's SidReporter (http://doc.emergingthreats.net/bin/view/Main/SidReporter) into the snortpackage?
... -
- It's noted in the upgrade guide for previous versions and we'll just have to expand that as we always do for new rele...
-
- I added this just to list possible options not really doing anything more with it.
-
- We always warn for that, this is no surprise.
We are usually shocked when it does work, since we expect failure he... -
- Since in FreeBSD 9 there is a new pfsync version upgrades will break the protocol so either a compat layer needs to b...
-
- Something for version 2.1 maybe?
-
05:30 AM Bug #2132 (Closed): Multi-wan inbound connections might cease to function when rules with forced-gateway exist on the same interface
- Scenario:
WAN interface WAN_TWO
There are rules on WAN_TWO with a forced gateway such as, for instance,... -
- Jan 23 08:55:12 kernel: pid 7134 (filterdns), uid 0: exited on signal 11 (core dumped)
Jan 23 08:55:02 check_reloa...
01/22/2012
-
- the problem is that pf currently does not handle ipv6 fragments. the other case is IPsec tunnels and other VPN soluti...
-
12:30 PM Feature #2129: TCP mss clamping for IPv6
- Ok I ran a test at ICSI Netalyzr, and ran into the same thing
IPv6 Path MTU (?): Warning
Your system can not send... -
- Where are you testing this exactly - my tests to http://test-ipv6.com/ show ok
Test IPv6 large packet
ok (0.204s)...
01/21/2012
-
- Not sure why the UP kernel is in that list either, since we don't use it. There's ~11MB right there...
-
- I'm sure there is a way to shrink it. Currently the kernels take up more room than anything else (combined, essential...
-
- I expect we can shrink that down considerably to get under 100 MB. It has to be including a number of unnecessary thi...
-
- The full update image size from the initial test builds on FreeBSD 9 is more than 100MB. The upload size limit on pfS...
-
- There is no tcp mss clamping for ipv6 and pf is not doing it either. Rumor has it that OpenBSD has it now.
Your sy... -
- Not sure if unbound will fix this, but performing the ICSI netalyzr test it has issues with large dns requests.
Th... -
- We need to get a set of FreeBSD 9.x PBI builders going to crank out the needed binaries for FreeBSD 9.x packages. Som...
-
- We need 9.x equivalents of
pkg_config.8.xml
pkg_config.8.xml.amd64
We could start first with the purely PHP-bas... -
- Several things need to happen to get packages going on FreeBSD 9, see subtasks.
-
- I never mentioned previously in this ticket that I deleted the latter patch because a variant of the extra part of th...
Also available in: Atom