Project

General

Profile

Activity

From 03/10/2012 to 04/08/2012

04/08/2012

06:55 PM Revision c616b3c7: Correct the variable names for the duplicate stf check
Seth Mos
06:47 PM Bug #2362 (Resolved): Deleting last/only port forward doesn't remove from secondary
if you delete the last/only port forward from the primary, it doesn't get removed from the secondary on config sync. Chris Buechler
06:41 PM Revision 4e83a8f2: Remove this piece of code, it loads even on interfaces not configured for track. Really needs asynchronous javascript.
Seth Mos
06:37 PM Revision 319c2bfd: Also use the prefix calculation function here.
Seth Mos
06:36 PM Revision 8b198c64: Prevent duplicate 6rd or 6to4 interfaces, these conflict and both use the stf0 adapter. Only 1 can be active.
Move piece of code into function, we need it more places, tighten rules for proto 41 traffic.
Attempt to micro optimi...
Seth Mos
06:13 PM Revision e7a9f730: Merge pull request #79 from bcyrill/patch-3
Merge array and keep unchanged values. Scott Ullrich
06:07 PM Revision adc3353e: Merge array and keep unchanged values.
Cyrill B
05:12 PM Feature #2361 (Resolved): router adv. daemon only allows for one subnet / limited options
The router adv. daemon configuration probably deserves its own page, instead of tugging it under dhcpv6.
For examp...
Johannes Ullrich
05:10 PM Bug #2360 (Resolved): OpenVPN "tap" mode not working
OpenVPN establishes the connection fine, but the bridge is not setup correctly. ARP replies are not answered via the ... Johannes Ullrich
05:08 PM Bug #2314: Members to bridge not added
confirming this issue on 2.1-DEVELOPMENT (amd64)
built on Sat Apr 7 22:44:34 EDT 2012
FreeBSD 8.3-RC2
(install...
Johannes Ullrich
05:06 PM Bug #2359 (Resolved): Typo: OpenVPN Configuration Page has two items "Server DHCP Bridge Start"
Line 1146 /usr/local/www/vpn_openvpn_server.php should say "Server DHCP Bridge End" (not "Start" as it currently say... Johannes Ullrich
04:48 PM Feature #2358 (Resolved): NAT64 support
example http://ecdysis.viagenie.ca/ Seth Mos
04:47 PM Feature #2357 (New): Support Dual Stack Lite
Tunnel IPv4 over Native IPv6.
Seth Mos
04:17 PM Feature #2356 (Resolved): Fill the "Track Interface" prefix drop down list asynchronously
When a interface is selected as a IPv6 "Track interface" type it will calculate all possible prefix posibilities in a... Seth Mos
04:10 PM Bug #2352 (Resolved): Only allow 1 6rd or 6to4 interface
Code checked in that triggers for me. It succesfully blocks a 2nd 6to4 or 6rd. Seth Mos
11:56 AM pfSense Packages Bug #2355 (Resolved): Tinydns logs won't parse records containing ":0" in the time stamp
Log record from tinydns containing :0 in the time stamp aren't showing up in the log
for example 2012-04-08 12:36:08...
Anton Bontes
04:52 AM Bug #1107: mpd on AMD64 generates invalid checksums with NAT
PPPoE server also impacted. Chris Buechler
02:33 AM Feature #1826: PPPoE server IPv6 support
After talking with Jim about it we both agree that this is a huge undertaking.
You would need either static addres...
Seth Mos

04/07/2012

10:20 PM Revision 26b89905: Move some constants in gitsync closer to the top of the source code and add some new ones of potential interest to those reconfiguring gitsync. Also modify messages to indicate that Git URLs are also allowed.
Erik Fonnesbeck
09:55 PM Revision 0b4ae4b5: Check for this function before calling it to avoid an error when hitting that line for pages that don't include the js file for it.
Erik Fonnesbeck
06:25 PM Revision 93cd15be: Correct typo in the filter rule
Seth Mos
05:20 PM Revision 5411c084: Add automatic firewall rules that allow traffic destined for a downstream delegated prefix.
The downstream router is the one to decide what to do with it. This can still be overridden by user rules, just like ... Seth Mos
03:37 PM Revision d48ed103: Change the command to reflect the new, just added dhcpleases6 binary for triggering route injection.
Seth Mos
02:47 PM Feature #2347: Add routes into the routing table for delegated IPv6 prefixes.
ok, the dhcpleases6 triggers adding of routes and that works, I can still access the ipv6 internet from behind 3 rout... Seth Mos
04:22 AM Feature #2347 (Feedback): Add routes into the routing table for delegated IPv6 prefixes.
* Code checked in, Ermal added a command option to dhcpleases to trigger the external php script that adds routes for... Seth Mos
01:18 PM Revision 8d923616: it needs to point to a existing file otherwise it will not launch.
Seth Mos
11:13 AM Revision acbb62fd: Add the -h parameter which is required for dhcpleases, might need to be removed later.
Seth Mos
09:43 AM pfSense Packages Bug #2350: Freeradius2 does not start up
pfSense 2.1 needs .pbi packages for installation. At the moment there are no pbis for freeradius2. Alexander Wilke
06:03 AM pfSense Packages Bug #2353: squid-reverse installation failure

2.1-DEVELOPMENT (amd64)
built on Thu Apr 5 12:15:36 EDT 2012
FreeBSD 8.3-RC2
E. Pek
06:02 AM pfSense Packages Bug #2353 (Resolved): squid-reverse installation failure
Beginning package installation for squid-reverse .
Downloading package configuration file... done.
Saving updated p...
E. Pek
04:21 AM Bug #2352 (Resolved): Only allow 1 6rd or 6to4 interface
Currently it is possible to configure more then 1 interface for 6to4/6rd, however, both use the same stf0 adapter so ... Seth Mos

04/06/2012

11:45 PM Revision ee965a5c: fix for Bug #2231 --- Dashboard: Traffic Graph: Unable to save settings
Darren Embry
09:43 PM Revision 556e760d: fix indentation.
Darren Embry
08:56 PM Revision 1ed88e06: fix a syntax error
Darren Embry
07:57 PM pfSense Packages Bug #2351 (Resolved): Bandwidthd does not start up
2.1-DEVELOPMENT (amd64)
built on Thu Apr 5 12:15:36 EDT 2012
FreeBSD 8.3-RC2
Bandwidthd package 2.0.1.3
Band...
E. Pek
07:50 PM pfSense Packages Bug #2350 (Resolved): Freeradius2 does not start up
On
2.1-DEVELOPMENT (amd64)
built on Thu Apr 5 12:15:36 EDT 2012
FreeBSD 8.3-RC2
Installing Freeradius2 seems ...
E. Pek
07:41 PM Bug #2231 (Resolved): Dashboard: Traffic Graph: Unable to save settings
fixed in commit:ee965a5c
I feel kinda sorta like this patch took longer and involved much more changed lines of co...
Darren Embry
12:49 PM Bug #2231: Dashboard: Traffic Graph: Unable to save settings
the issue still exists in
2.1-DEVELOPMENT (i386) built on Thu Apr 5 11:32:38 EDT 2012 FreeBSD 8.3-RC2
with Firef...
Rob Logan
06:15 PM Revision 0416d9a0: fix for #2289: Logic error in firewall rule interface selection for drop-down menu case
Darren Embry
06:10 PM Bug #2349 (Resolved): vlan(4) needs altq adaption on FreeBSD 8.3++
The vlan(4) code has been put to use if_transmit interface on 8.3 and up of FreeBSD and a solution needs to be found ... Ermal Luçi
06:08 PM Revision 092462dc: Add a dhcpleases monitor to the DHCPv6 server which will trigger automatic creation of routes into the routing table so that prefix delegation will just work.
Redmine ticket #2347 Seth Mos
05:16 PM Revision 48cb641a: Merge pull request #78 from Whizkidzz/master
Added "interface_selection" to enable interface selection in tinydns Scott Ullrich
05:14 PM Revision 9d14f808: Merge pull request #77 from Whizkidzz/RELENG_2_0
Releng 2 0 Scott Ullrich
05:09 PM Revision d33e772f: Merge pull request #76 from bcyrill/patch-2
Fixed Bug #2348 Scott Ullrich
05:00 PM Revision adb29e55: Fixed Bug #2348
Cyrill B
04:31 PM Revision 05d908db: Added "interface_selection" type to enable interface selection in tinydns server
This is usefull in multiwan setup and to check if a server behind pfsense is still running.
So that tinydns can chang...
Anton Bontes
03:04 PM Revision f3d91215: Bug #2329: checkbox js problem on diag_logs_settings.php
Darren Embry
02:58 PM Revision c8610dc9: aggh javascript lines terminated by \n instead of semicolon
Darren Embry
02:45 PM Revision 3df59bab: don't delete port aliases used by load balancer
Darren Embry
02:41 PM Revision 3f3ab846: Merge pull request #75 from bcyrill/patch-1
Replace is_function with function_exists Ermal LUÇI
02:21 PM Revision 85a46fbd: Added interface_selection to choose a interface in tinydns failover selection
Changed the $text so that no "option value" is preselected when adding a newrow with addrowto function. Anton Bontes
02:17 PM Revision 44c70591: Added rowsize[] for use in row_helper_dynamic.js
Anton Bontes
02:14 PM Revision 91b2f623: Replace is_function with function_exists
Cyrill B
02:13 PM Revision 177a823e: Added empty option line so not to write to config.xml if not filled in
Anton Bontes
02:10 PM Bug #2289 (Resolved): Logic error in firewall rule interface selection for drop-down menu case
Darren Embry
02:10 PM Bug #2289: Logic error in firewall rule interface selection for drop-down menu case
fixed in commit:0416d9a0 Darren Embry
02:01 PM Revision de69fab3: Added interface_selection for use in tinydns
Corrected the use of objectsize so that if its "undefined" the correct "rowsize[]" is used
which if used outside the ...
Anton Bontes
12:37 PM Bug #2063: PHP Memory Usage too high for 128MB RAM Systems (like ALIX)
I'm not sure where it is in the code offhand, but it's configured under System>Advanced and should be easy to track b... Chris Buechler
12:15 PM Bug #2330 (Feedback): vouchers disappear when saving
I've troubleshooted and confirmed that in this scenario, lines 229-244 here are being executed when you click "Save";... Darren Embry
11:04 AM Bug #2329 (Resolved): checkbox js problem on diag_logs_settings.php
Darren Embry
11:00 AM Bug #2329: checkbox js problem on diag_logs_settings.php
fixed in commit:f3d91215 Darren Embry
10:40 AM Bug #2348 (Resolved): rc.filter_synchronize is broken
The recent "Move CARP settings from pkg XML to a real PHP page" (commit:f97a5b0419d0350cc85b91d180238975c308ac07) bro... Cyrill B
09:56 AM Feature #2347: Add routes into the routing table for delegated IPv6 prefixes.
... Seth Mos
08:30 AM Feature #2347 (Resolved): Add routes into the routing table for delegated IPv6 prefixes.
Currently we support Prefix Delegation in the DCHPv6 server (ISC dhcpd 4.2.3). However, the dhcpd server does not add... Seth Mos
09:28 AM Revision eab2db68: Make sure that we use the right interface for 6rd
Seth Mos
09:27 AM Revision df52abf1: Unbreak rc.filter_synchronize, add )
Seth Mos
07:38 AM Bug #2333 (Resolved): CARP filter_synchronize PHP error, can not break
Seth Mos
07:01 AM Feature #2117 (Feedback): 6RD support for ISPs like Swisscom
More debugging revealed the following, SwissCom and ATT do not filter inbound IPv6 traffic for IPv4 space they do not... Seth Mos

04/05/2012

11:10 PM Revision c2feff64: restore default dropdown values of 24/64 bits
now that feature #2320 behavor is a bit different regarding change of
existing set value when switching between ipv4 ...
Darren Embry
11:09 PM Revision b771e469: change behavior a bit on #bits dropdown
this is prepwork for restoring 24/64 bit defaults in vpn_ipsec_phase2 Darren Embry
10:17 PM Revision 6255beda: add feature #2320 to vpn_ipsec_phase2.php.
note: had to disable existing behavior that modified the value of the
behavior.
existing behavior that disables/enab...
Darren Embry
10:17 PM Revision 0f907a68: bug fix for #2320: on firewall_virtual_ip_edit.php it jumps to a length of 1 on a valid ipv4
Darren Embry
10:17 PM Revision f57a578d: work around a redeclaration error.
i'm going to start a discussion about making sure all require() calls
become require_once() calls but until then i ha...
Darren Embry
09:11 PM Revision f99aa333: Unbreak interface.inc after manual merge
Ermal LUÇI
09:08 PM Revision 87744d53: missed a spot for feature #2320 toggle subnet mask
Darren Embry
09:07 PM Revision 4459f03d: Remove slipped line
Ermal LUÇI
08:48 PM Revision d7afd900: use existing filter_expand_alias (well, via a wrapper) instead of
reinventing it Darren Embry
08:30 PM Revision 67898061: Unbreak openvpn
Ermal LUÇI
08:30 PM Revision d34b186c: Unbreak openvpn
Ermal LUÇI
08:24 PM Revision ccf346dd: Bump config version to take care of new vips
Ermal LUÇI
08:23 PM Revision 00b97dee: Reread config after doing footshooting
Ermal LUÇI
08:22 PM Revision 7b47bd4c: Make vips vhid be unique per parent interface!
Ermal LUÇI
08:13 PM Revision 4d0c032c: Make vips vhid be unique per parent interface!
Ermal LUÇI
07:06 PM Feature #2320: Javascript helper to toggle subnet mask length for IPv4/IPv6 during input
I've restored default 24/64 bits.
I had to modify the normal behavior on dropdown value changes between ipv6 and i...
Darren Embry
06:47 PM Feature #2320: Javascript helper to toggle subnet mask length for IPv4/IPv6 during input
Okay, all my changesets are committed now. Gotta think hard about this one then. Darren Embry
06:07 PM Feature #2320: Javascript helper to toggle subnet mask length for IPv4/IPv6 during input
it should still default that way on IPsec. For v4 addresses, show 1-32 and default to 24, and for v6, show 1-128 and ... Chris Buechler
06:03 PM Feature #2320: Javascript helper to toggle subnet mask length for IPv4/IPv6 during input
In vpn_ipsec_phase2.php there is some existing client-side JavaScript logic that changes the selected value for the #... Darren Embry
05:33 PM Feature #2320: Javascript helper to toggle subnet mask length for IPv4/IPv6 during input
fixed firewall_virtual_ip_edit.php (will commit soonish)
Darren Embry
05:04 PM Feature #2320: Javascript helper to toggle subnet mask length for IPv4/IPv6 during input
added on system_routes_edit.php Darren Embry
03:38 PM Feature #2320: Javascript helper to toggle subnet mask length for IPv4/IPv6 during input
Add on system_routes_edit.php too (needs gateways defined to save)
on firewall_virtual_ip_edit.php it jumps to a len...
Seth Mos
06:36 PM Revision 01ed452e: Load Balancer: allow port aliases in Pools and Virtual Servers. (PEV-394754)
Darren Embry
06:31 PM Todo #2346 (Closed): do we need to change our require() calls to require_once()?
Not sure if this is the right venue to start a discussion, but...
My change to vlsb.inc as part of this changeset:...
Darren Embry
06:15 PM Revision 99f6b2a9: Merge pull request #74 from irvingpop/master
Modify low-RAM threshold for disabling PHP APC Scott Ullrich
06:04 PM Revision 430b921b: Update etc/rc.php_ini_setup
Irving Popovetsky
05:47 PM Revision c1a104c7: Correct the fieldname we need to look into so we actually configure the tunneled interfaces.
Seth Mos
05:47 PM Revision cb515a86: Add a fix so that proper rules for 6to4 and 6rd are created which would otherwise generate rule errors.
Aren't tunneled interfaces fun! Seth Mos
05:10 PM Revision 0917cb21: load balancer: allow IPv4 subnets up to 64 addresses in Pools and Virtual Servers (PEV-394754)
Darren Embry
05:10 PM Revision 9859b2b5: minor changes
- aggh hard tab in a string
- aggh brackets in case clauses
Darren Embry
05:10 PM Revision 939b2d75: normalize indentation.
Darren Embry
04:28 PM pfSense Packages Bug #2345 (Resolved): Varnish3 Install Fails on pfsense 2.1 Head
I've found a little bug in /etc/inc/pkg-utils.inc on pFsense 2.1 HEAD Releases with pbi support.
It's because of t...
Julian Sternberg
03:33 PM Revision 6fb4a0b1: Add post config and correct variable names
Warren Baker
03:14 PM Revision 7839ec18: Remove custom options from basic settings page
Warren Baker
03:10 PM Revision ac2cfab2: Ensure interfaces are saved correctly
Warren Baker
02:45 PM Revision a7caf4d6: fix typo
Warren Baker
02:41 PM Revision 49f81faa: Add unbound user
Warren Baker
02:19 PM Revision 27bb6557: Setup chroot environment for unbound
Warren Baker
02:04 PM Bug #2063: PHP Memory Usage too high for 128MB RAM Systems (like ALIX)

Pull request for solution #1 here: https://github.com/bsdperimeter/pfsense/pull/74
Regarding #2 (auto-set the ...
Irving Popovetsky
01:17 PM Revision 3f2e3bcf: Remove Extra brace
Warren Baker
01:09 PM Revision 9e7cc68f: Use global variable
Warren Baker
01:08 PM Revision 89fd3ed3: Use isset() for DNSSEC status
Warren Baker
01:07 PM Revision 4b7ea181: Specify path to unbound config file
Warren Baker
12:18 PM Revision 830a82e7: Merge pull request #73 from phil-davis/master
Minor text typo fixes to recent unbound file commits Warren Baker
12:16 PM Revision 8314e2a3: Handle enable/disable options
Warren Baker
12:01 PM Revision 72049148: A minor typo fixed
Phil Davis
11:54 AM Revision fc6e0fbf: Was looking at what is coming in new builds and noticed a couple of typos and small point of English grammar, so thought it worth 5 minutes to update it.
Phil Davis
11:31 AM Revision 4ed3cc97: Add input checks
Warren Baker
11:21 AM Revision f196aba3: Add select box for outgoing queries
Warren Baker
11:13 AM Revision 467748e3: Better descriptions and cosmetics
Warren Baker
11:08 AM Revision 43a987e4: Add ACL id functions
Warren Baker
11:04 AM Revision eac1d3f9: Correct wording
Warren Baker
11:03 AM Revision bd82f06b: Correct links
Warren Baker
10:59 AM Revision 2bb29c16: A whole bunch of changes to the general settings page and advanced settings
Warren Baker
10:59 AM Revision 27d98335: Add Access Lists page for Unbound ACLs
Warren Baker
09:19 AM Revision 431f6526: Merge branch 'master' of github.com:bsdperimeter/pfsense
Warren Baker
09:18 AM Revision 14b1279d: Add Unbound GUI bits
Warren Baker
07:38 AM Bug #2333: CARP filter_synchronize PHP error, can not break
This was a setup with 2 carp members that only shared a single ipv6 vip.
Config sync was on the LAN interface over...
Seth Mos
07:27 AM Bug #2338: outbound NAT rules rewrite themselves if active interface is deleted
the issue is it removes the interface from the outbound NAT rule and then assumes WAN when there is no interface. del... Chris Buechler

04/04/2012

06:16 PM Revision df0e1f2d: Good catch jim :)
Ermal LUÇI
06:05 PM Revision 870952cf: Just php does not like this variable name and just prepends the 1 in output!
Ermal LUÇI
05:44 PM Revision 08ab5cd2: Expand these checks to include 'dynamic' or they'll never match dynamic gateways, leading to issues with routing.
Jim Pingle
03:43 PM Revision 08743d6d: Set the table limit before loading tables. This may help in cases where a ruleset fails to load due to table size, and the user increases the size but still can't load the rules.
Jim Pingle
03:36 PM Revision 73c8a6c7: Make sure that we reconfigure the tunneled interfaces when we get a new ipv4 address.
Seth Mos
03:35 PM Revision da664d19: Fix newlines
Jim Pingle
03:34 PM Revision 1ab1f0a9: Fix newlines
Jim Pingle
03:29 PM Revision 5bf2cc84: Change the firewall rules to prevent firewall rule errors
Seth Mos
01:53 PM Revision 4a41dff7: Bail out without a valid IPv6 address so we don't generate a invalid dhcpv6 server config
Seth Mos
12:55 PM Revision 479f0fda: Add realif overrides for tunneled interface, we want to override get_real_interface() here as it does not know address families and we don't know which the user wants.
Seth Mos
12:51 PM Revision 1132ff35: Add section for the dhcp6link status
Seth Mos
12:06 PM Revision 74c834f1: Add better hardening to the dynamic gateway code, handle IPv6 networks better
Prevent duplicate monitor IP addresses in the apinger configuration, otherwise we might end up with -4 million milise... Seth Mos
11:21 AM Bug #2338 (Resolved): outbound NAT rules rewrite themselves if active interface is deleted
To recreate:
1. Configure a working system with WAN, LAN, OPTx
2. Disable Automatic Outbound NAT and deleted auto...
David Burgess
10:59 AM Revision 04747c75: dl(), which is used by PEAR, is deprecated in 5.3 and fails to thus load this extension. No updates to PEAR either, so we can either always load like here or mod PEAR.inc. Should fix #2336
Warren Baker
07:04 AM Bug #2336: PHP extensions missing in amd64 builds (at least)
The RADIUS one is due to 5.3 and the deprecated dl() function. PEAR.inc makes use of dl() when loading the radius mod... Warren Baker
07:00 AM Bug #2336 (Feedback): PHP extensions missing in amd64 builds (at least)
Applied in changeset commit:04747c755f5453e059561ae01171a449c9b14432. Warren Baker
04:07 AM Bug #2336: PHP extensions missing in amd64 builds (at least)
Chris Buechler wrote:
> with MSCHAP:
The MSCHAP problem should be fixed with commit:bfc051081019abb7276223c89a45...
Warren Baker

04/03/2012

08:19 PM Revision 6ffef738: Merge pull request #71 from ebrandi/r53dyndns
Patch to add Route 53 as new Dynamic DNS provider into dyndns infrastructure Ermal LUÇI
06:59 PM Revision 4aab9c6c: If the end of the prefix6 range does not align with a multiple of the delegation size then dhcpd will not start.
The dhcp6 server page will need input validation for this. Seth Mos
05:43 PM Bug #2336 (Resolved): PHP extensions missing in amd64 builds (at least)
Trying CP w/RADIUS in latest 2.1 snapshot results in:
with PAP:...
Chris Buechler
12:54 PM Revision bfab2419: Add a command that should be able to extract the DUID for us.
Seth Mos
12:15 PM Revision 5632ae55: Add filter code that will automatically add pass rules for delegated IPv6 prefixes.
These rules can be overridden by user rules. Seth Mos
11:55 AM Revision ea2ab24d: Adjust the delegated prefix length for 6to4 to 16 bits
Seth Mos
11:12 AM Revision f9eb5ebb: Fix the comment text for 6to4 proto 41 rules.
Make sure that the DHCPv6 firewall rules for track6 interfaces are added. Seth Mos
10:48 AM Revision 3d05e59a: Remove debugging print_r();
Seth Mos
10:36 AM Revision c45b079d: Make sure that we can create a /64 delegation for very short prefixes.
Seth Mos
10:26 AM Feature #2016: DHCPv6 Server doesn't load if NTP server specified
http://linux.die.net/man/5/dhcp-options Seth Mos
08:40 AM Revision 89a5203c: Improve the prefix delegation math somewhat.
Seth Mos
08:27 AM Revision a6610d82: Automatically configure DHCPv6 servers for interfaces set to track6 another WAN.
If the prefix length permits it we setup DHPP-PD for the LAN clients so it can be daisy chained. Seth Mos
06:34 AM Revision 50a6400f: Add more possible prefix lengths for the DHCPv6 server for prefix delegation.
Seth Mos
04:11 AM Revision 78affc3c: Set the IPaddrv6 field for the lan to track6 so it autoconfigures from the WAN.
I forgot to remove the link local address it had in it on the original commit. Seth Mos
04:04 AM Revision 0ca7f8fe: Fix botched config.xml merge error. Remove duplicate ipaddrv6 tag.
Seth Mos

04/02/2012

09:16 PM Revision 6873d487: Remove this track6 line as it causes an xml error
Jim Pingle
03:14 PM Revision 6d778ed0: Changeout the told dhcp-pd config for the new track6 style autoconfiguration of the lan interface.
Seth Mos
02:23 PM Bug #2335 (New): IGMPProxy and CARP Results in System Instability Upon Reboot
This scenario was replicated on 3 PCs with various network cards on 2.01.
Enabling a CARP interface on a box with ...
J P
12:29 PM Revision a94f97b5: Add quick to the DHCP6 client and server rules
Seth Mos
12:07 PM Revision 73778c3f: We want to actually compress the IPv6 address, not uncompress.
Seth Mos
11:47 AM Revision 6c99bb63: Correct variable names and foreach assignment
Seth Mos
11:35 AM Revision cab9d832: Correct the DHCP6 client function to reflect the track6 changes
Seth Mos
11:23 AM Revision 6f1da659: Open up the DHCPv6 server firewall ruiles
Seth Mos
11:03 AM Revision 37b1c848: Reverse the echo request and echo reply for input and output filters
Seth Mos
10:58 AM Revision dbcddabc: Adjust the DHCP6 client firewall rules
Seth Mos
10:47 AM Revision e53ffe8d: Remove this file, it causes other issues
Seth Mos
10:28 AM Revision 74fa57aa: Fix the find dhcp6 process function to report the actual pid instead of the grep pid.
Remove spurious double debug line Seth Mos
10:10 AM Revision 239e817a: Add missing DHCP6 track6 support function
Seth Mos

04/01/2012

03:01 PM Revision 556abcab: Adjust the firewall rules for 6rd and 6to4 proto 41 traffic
Ticket #2117 Seth Mos
01:47 PM Feature #2117: 6RD support for ISPs like Swisscom
Ok, I've switched the tree back to the modified stf device which does receive IPv6 packets by proto 41 and can also s... Seth Mos
11:06 AM Revision 4aa569bd: Comment out the srd 6rd device and put in the patched stf device commands.
Still doesn't work but Ermal might be able to debug easily Seth Mos
10:43 AM Revision 2d5ca06e: A few more improvement such that tracking interfaces are automatically configured from the client interface
Seth Mos
08:03 AM Revision 1aa19130: Remove suprious debugging line
Seth Mos
07:55 AM Revision 86a139fc: Add interface tracking support for native dynamic IPv6 interfaces like dhcp6 too.
Correct the function name to reflect the RA daemon changeout Seth Mos
07:50 AM Revision 69b54cbe: Add logic that (re)configures the dependent interface that has interface tracking setup for a tunneled IPv6 protocol.
Seth Mos
07:41 AM Revision a11a839d: Add the stf0 interface to interface_has_gateway_v6() for 6to4
Seth Mos
06:27 AM Feature #2123: Backup RRD files using the xml dump and restore from RRD tools
Not sure if instructions here are clear enough, ask away.
The current RRD backups perform a tar command on /var/db...
Seth Mos
06:05 AM Bug #2334 (Resolved): quality rrd graphs do not automatically refresh
With the RRD page left open on the quality graphs these do not automatically refresh. Perhaps check if jQuery is stil... Seth Mos
06:00 AM Bug #2333 (Resolved): CARP filter_synchronize PHP error, can not break
PHP Errors:
[01-Apr-2012 08:31:40 UTC] PHP Fatal error: Cannot break/continue 1 level in /etc/rc.filter_synchronize...
Seth Mos
05:49 AM Bug #2332 (Resolved): gateways always renamed to "dynamic". Implement proper IPv6 support
When a dynamic IPv6 type is specified all gateways will be tagged "dynamic".
Trying to modify an existing static v...
Seth Mos
05:03 AM Revision cd132e86: This patch add Route 53 as new Dynamic DNS provider into dyndns infrastructure.
Due requeriments to handle requests to Amazon AWS API, it need root certificates package (ca_root_nss-3.12.4.tbz) and... Edson Brandi
03:59 AM Bug #2306: USB ports show up as network interfaces
they show as network interfaces on stock FreeBSD 8.3 and newer, some gripes on FreeBSD lists on it, no responses as t... Chris Buechler
03:58 AM Bug #2231: Dashboard: Traffic Graph: Unable to save settings
Do you have enough information to on this? Seth Mos

03/31/2012

06:41 PM Revision 20a7cb15: Add interface tracking support. With this it is now possible for dynamic IPv6 interfaces to setup the corresponding lan interface for RA.
DHCP6 with prefix delegation to follow later for automatic daisychaining. Seth Mos
02:23 PM Bug #2331 (Rejected): Saving default queue results in error message
Hi,
when changing the traffic shaper queue that is marked as "default", the system complains that there can only b...
Oliver Loch
09:50 AM Revision d7d2dc52: Do not process for disabled interfaces
Seth Mos
09:40 AM Revision c18a10cc: Make sure we only generate entries for radvd when we actually have a IPv6 prefix
Seth Mos
06:30 AM Bug #2278 (New): IPv6 Carp vip both master on FreeBSD 8.3
Chris Buechler
06:08 AM Feature #1825: Dynamic DNS client IPv6 support
pushing to 2.2 since it seems it's not supported by any of the providers yet. Chris Buechler
06:01 AM Feature #1828 (Resolved): Server load balancer IPv6 support
Chris Buechler
06:00 AM Bug #2066 (Resolved): Error when deleting all-numerical user from a "user manager"
confirmed fixed Chris Buechler
05:58 AM Todo #647 (Resolved): Move CARP settings from pkg XML to a real PHP page
this all seems good, tested on config upgrade and starting from scratch on 2.1.
Chris Buechler
05:48 AM Bug #2330 (Resolved): vouchers disappear when saving
config attached to replicate.
Browse to Services>CP, edit the zone, go to the Vouchers tab. You'll see the vouche...
Chris Buechler
05:45 AM Bug #2311 (Resolved): Wrong redirection URL (from http -> https) missing colon char
this particular issue is fixed Chris Buechler
05:40 AM Bug #1999 (Resolved): Existing voucher settings upset new CP Zones/Vouchers code
confirmed fixed Chris Buechler
04:44 AM Revision 04e999cf: more changes CARP -> HA where CARP != CARP.
Chris Buechler
01:48 AM Bug #1700 (Resolved): Captive Portal cannot work on master branch
this fixed CP in general, CP+IPv6 is a separate ticket for 2.2. Chris Buechler
01:24 AM Feature #2321 (Resolved): Move log locations
looks good Chris Buechler
01:23 AM Bug #2329 (Resolved): checkbox js problem on diag_logs_settings.php
When initially loading diag_logs_settings.php, the checkboxes under "Remote Syslog Contents" for "System events", "Fi... Chris Buechler
01:21 AM Bug #2328 (Resolved): Numerous non-CP logs ending up in CP logs
a number of logs not related to CP are ending up in the CP logs. The following a few examples. ... Chris Buechler
01:17 AM Feature #2034 (Resolved): Include VirtIO network driver
Chris Buechler
01:16 AM Bug #2072 (Closed): Limitation on multiple outbound PPTP connections
duplicate of #208 Chris Buechler
01:12 AM Bug #2289 (Assigned): Logic error in firewall rule interface selection for drop-down menu case
attached config replicates this Chris Buechler
12:59 AM Feature #2320: Javascript helper to toggle subnet mask length for IPv4/IPv6 during input
seems good to me, will let Seth give the final approval. Chris Buechler
12:34 AM Feature #1997 (Resolved): Add date picker to the Custom RRD graph page to translate to unix time.
this is fixed, looks good.
Simon - this isn't the place for OT questions, please post to the forum or list.
Chris Buechler
12:32 AM Bug #830 (New): Service provider information should be saved
correct, but when you go back to that screen it loses which "Service Provider" entry you actually picked. eg if I pic... Chris Buechler
12:29 AM Feature #1864 (Assigned): "Start" button for IPsec should be available for IP alias networks
example config attached. See Status>IPsec. The one with "Local network" LAN has the Start button. If you check Firewa... Chris Buechler
12:24 AM Bug #2327 (Resolved): disabling reply-to on floating rules doesn't work
confirmed fixed Chris Buechler
12:20 AM Bug #2144: pfSense dyndns for Namecheap doesn't work with hostnames containing "."
can anyone confirm this is fixed? Chris Buechler

03/30/2012

08:40 PM Revision 0ffb5926: Add the new pages for the relocated logfiles and messages.
Ticket #2321 Seth Mos
08:33 PM Revision 6c582308: Make sure to add a semicolon to indicate end of line syntax
Seth Mos
08:10 PM Revision 380cd810: Correct the field name, otherwise we have invalid syntax
Seth Mos
06:38 PM Bug #2327 (Feedback): disabling reply-to on floating rules doesn't work
should be fixed already.
https://github.com/bsdperimeter/pfsense/commit/12c7b5778418734a7ebbd816bb75522ca17a2a54
Chris Buechler
06:30 PM Bug #2327 (Resolved): disabling reply-to on floating rules doesn't work
Checking the "disable reply-to" on floating rules doesn't work, the reply-to is still there. One example rule:
<p...
Chris Buechler
02:11 PM pfSense Packages Bug #1244: apache_mod_security_package missing mod_proxy.so (and perhaps others)
Issue doesent seem to be fixed Fresh amd64 2.0.1 install here too and the same issue with missing mod_proxy.so on amd... Mikael Hugo
12:51 PM Bug #2326: Erroneous successful webGUI authentication with blank password and AD authentication backend
This behaviour is detailed in section 5.1 of rfc 2829 - http://www.ietf.org/rfc/rfc2829.txt
5.1. Anonymous authent...
Kane Rason
12:34 PM Bug #2326 (Closed): Erroneous successful webGUI authentication with blank password and AD authentication backend
Erroneous successful authentication to the webGUI when using Active Directory authentication and no password is speci... Kane Rason
08:08 AM Revision 31c43fd3: Add 6to4 support for automatic tunneling.
Seth Mos

03/29/2012

09:26 PM Bug #2324 (Feedback): AES 256 doesn't work with glxsb
this is an OS issue outside our control, try with 2.1 which has a newer base OS.
Chris Buechler
01:42 PM Bug #2324 (Closed): AES 256 doesn't work with glxsb
Enabling glxsb on Alix board (Netgate m1n1wall 2D13) prevents AES256 IPSec Phase2 connections from establishing:
M...
Todd Blum
07:42 PM Revision 3f9cc8e4: Commit the config backend code for the switch to radvd
Seth Mos
04:29 PM Revision e12c63db: fix for bug #2322: Fix CP secondary RADIUS auth source GUI
http://redmine.pfsense.org/issues/2322 Darren Embry
03:18 PM Revision a53794c9: possible fix for Bug #2311: Wrong redirection URL (from http -> https) missing colon char
Darren Embry
03:05 PM Bug #1700: Captive Portal cannot work on master branch
Grab CP since i am more acustomed to it Ermal Luçi
02:27 PM Bug #1700: Captive Portal cannot work on master branch
Just to be clear, someone else needs to look at this to figure out what to do on ipv6 so I'm going to assign this bac... Darren Embry
03:02 PM Bug #2311: Wrong redirection URL (from http -> https) missing colon char
OK, just synced my 2.1 with the file from git, and the malformed 302 redirection URL issue seems fixed.
However:
...
Dim Hatz
02:21 PM Bug #2311 (Assigned): Wrong redirection URL (from http -> https) missing colon char
Chris, I'm pretty sure I fixed the problem just from looking at the code but I need you to test this please because f... Darren Embry
12:59 PM Bug #2311: Wrong redirection URL (from http -> https) missing colon char
Yes, it's the standard CP with SSL login enabled, i.e. CP answers http requests (forwarded via ipfw to 127.0.0.1:8000... Dim Hatz
11:13 AM Bug #2311 (Feedback): Wrong redirection URL (from http -> https) missing colon char
I believe I found and fixed the bug but can you provide steps to reproduce along with config.xml?
And this is with...
Darren Embry
02:29 PM Feature #2320: Javascript helper to toggle subnet mask length for IPv4/IPv6 during input
Chris, I'm reassigning this to you so you can test this or have someone else test it out. I'm pretty sure I've found... Darren Embry
02:28 PM Bug #1874: Captive Portal Login dies on empty input
Ermal, I strongly believe you should be assigned this one then, so I will assign accordingly. :-)
Darren Embry
02:26 PM Bug #2261 (Resolved): Spanning Tree interface priority options do not alter Bridge
I'm closing this then. Darren Embry
02:21 PM Bug #2325 (Duplicate): Limiters don't work on OPT WAN rules w/rdr
Putting a limiter on an OPT WAN (any WAN that doesn't have the default gateway) breaks traffic through rdrs (at a min... Chris Buechler
01:03 PM Bug #830 (Feedback): Service provider information should be saved
I guess you're talking about Service Provider stuff under PPP configuration when you select PPP as an IPv4 configurat... Darren Embry
12:43 PM Feature #1864 (Feedback): "Start" button for IPsec should be available for IP alias networks
If you could give me steps to reproduce/get to state where there should be a start button but isn't one, that would b... Darren Embry
12:24 PM Bug #2322 (Resolved): Fix CP secondary RADIUS auth source GUI
fixed in changeset e12c63d
Darren Embry
12:16 PM Bug #2322 (Assigned): Fix CP secondary RADIUS auth source GUI
Darren Embry
12:12 PM Bug #2322: Fix CP secondary RADIUS auth source GUI
that's correct Chris Buechler
11:53 AM Bug #2322 (Feedback): Fix CP secondary RADIUS auth source GUI
Darren Embry
11:53 AM Bug #2322: Fix CP secondary RADIUS auth source GUI
So right now we have:... Darren Embry
12:09 PM Feature #1361 (Feedback): DNSMasq, source interface and IPSec VPNs
Darren Embry
12:08 PM Feature #1361: DNSMasq, source interface and IPSec VPNs
Hugh, any chance you can provide the patch in the form of a *unified diff* or *context diff* please, and *attach* it ... Darren Embry
11:40 AM Revision adc91ab7: Unbreak the 6rd config setting now that the javascript was fixed.
Pointy hat to /me
Ticket #2304
Seth Mos
10:20 AM Revision e0977fed: Move some of the log file tabs around.
Add seperate tabs for dnsmasq,unbound as well as gateways. Seth Mos
08:53 AM Bug #2304 (Resolved): The javascript to enable and disable the various config boxes fail since adding the 6rd IPv6 config type
My bad, fixed now. Seth Mos
08:47 AM Bug #2304 (Assigned): The javascript to enable and disable the various config boxes fail since adding the 6rd IPv6 config type
Ok, the javascript successfully works now, but I can not save the interface config when I select "6rd" and press save... Seth Mos
08:15 AM Bug #1996: status_graph.php is not displaying real-time bw stats
The rate binary does not have any support for IPv6. This is unfortunate.
I've emailed the author.
Seth Mos
07:36 AM Feature #2321: Move log locations
Just committed.
https://github.com/bsdperimeter/pfsense/commit/e0977fed0fabd99dcfec0611bf27f133c85b24fd
Seth Mos
05:54 AM Feature #2321: Move log locations
Yes, we will move the System logs to a new top level tab as Discussed in IRC with Chris.
+System
- General
- Gat...
Seth Mos
07:17 AM Revision 8e4893fc: Merge pull request #69 from ovidiucp/master
Fix domain search list for MacOS X clients Seth Mos
05:19 AM Feature #2323 (New): GUI doesn't allow to configure DHCP server to serve IP addresses belonging to subnets wich are not associated with an interface
What I'm trying to do is actually to relay DHCP requests received in multicast by a switch to pfSense using unicast.
...
Romain De Rasse
04:48 AM Revision 107e8acc: Make domain search list work for MacOS X clients, by adding
option domain-search "domain1", "domain2", "domain3";
to /var/dhcpd/etc/dhcpd.conf
I reported this as a bug on the ...
Ovidiu Predescu

03/28/2012

10:50 PM Revision f51d5d57: feature #2320: JS helper to toggle subnet mask for ipv4/v6 during input
http://redmine.pfsense.org/issues/2320 Darren Embry
10:31 PM Revision 979b179d: prep work for feature #2320: tag for ipv4v6 fields
Darren Embry
08:58 PM Revision 980ded5a: prep work for feature #2320: stub js function
Darren Embry
08:57 PM Revision a94c3e43: prep work for feature #2320: tag dynamic fields for ipv4v6
Darren Embry
08:56 PM Revision a8fe61f1: prep work for feature #2320: tag fields for ipv4v6
Darren Embry
08:19 PM Bug #1946 (Closed): /usr/local/www/services_captiveportal.php
#2322 open to fix what this broke and clear up the reason for the confusion. Chris Buechler
08:18 PM Bug #2322 (Resolved): Fix CP secondary RADIUS auth source GUI
CP in 2.1 supports a secondary authentication source for RADIUS, so you can pick between two authentication sources d... Chris Buechler
08:09 PM Bug #1525 (Resolved): OpenVPN passtos does not work
Chris Buechler
08:09 PM Bug #1537 (Closed): Openvpn Client Exporter does not clean up itself
Chris Buechler
08:08 PM Bug #2004 (Resolved): Client Specific Override ->Tunnel Network
Chris Buechler
08:07 PM Bug #2027 (Resolved): "kip" firewall log parsing bug
Chris Buechler
08:07 PM Bug #1625 (Resolved): installer shouldn't offer to install over boot drive/partition or install bootblocks on boot drive
Chris Buechler
08:04 PM Bug #2080 (Closed): display_error_form in /etc/inc/authgui.inc does not set a HTTP status code
Chris Buechler
08:04 PM Bug #2068 (Resolved): dyndns update (rfc 2136) error when more as one entry
Chris Buechler
07:56 PM Feature #675 (Closed): Autocreation of rules to allow all traffic between bridged interfaces
Chris Buechler
07:56 PM Feature #603 (Resolved): Add proxy support for internal HTTP functions
Chris Buechler
07:55 PM Bug #673 (Resolved): SSHD keys not created on restore
Chris Buechler
07:55 PM Feature #677 (Resolved): Allow custom SMTP port for notifications
Chris Buechler
07:54 PM Feature #690 (Closed): Move SSH Authentication Attempts from System Log to New Log
Chris Buechler
07:52 PM Feature #796 (Resolved): Add 95th Percentile Line to RRD
Chris Buechler
07:52 PM Feature #697 (Needs Patch): Updateprocedure in the GUI
Chris Buechler
07:51 PM Feature #1057 (Needs Patch): Limiter mask only supports dest/src ip
Chris Buechler
07:49 PM Feature #1368 (Needs Patch): DHCP Leases - description column
Chris Buechler
07:49 PM Feature #1369 (Needs Patch): DHCP Leases - Hostname Unsuitable for Printing
Chris Buechler
07:46 PM Feature #1504 (Needs Patch): Verizon 3g usb760
Chris Buechler
07:46 PM Bug #1505 (Needs Patch): usb 3g 760 modem doesn't respond
Chris Buechler
07:45 PM Bug #1600 (Resolved): Captive Portal Reauthentication
Chris Buechler
07:44 PM Bug #1554 (Resolved): Voucher page turns grey after parameter change
Chris Buechler
07:41 PM Feature #1864 (Assigned): "Start" button for IPsec should be available for IP alias networks
Chris Buechler
07:41 PM Bug #1865 (Resolved): Fatal error by saving System: Advanced: Miscellaneous
Chris Buechler
07:41 PM Feature #1867 (Closed): RFE: DHCP Server option to set interface-MTU option to lowest WAN interface value
that's generally undesirable. That's why MSS clamping exists. Chris Buechler
07:40 PM Bug #1882 (Resolved): Invalid pf rule generated from a port forward with dest=any on an interface with ip=none
Chris Buechler
07:38 PM Feature #2057 (Resolved): Ability to disable the auto-added "Negate policy routing" for VPNs
Chris Buechler
07:27 PM Feature #1361 (Assigned): DNSMasq, source interface and IPSec VPNs
need to merge the above diff though it may not cleanly apply anymore and need some manual help. Chris Buechler
07:25 PM Feature #1520 (Closed): Option to disable the automatic default gateway (re)selection
this particular feature as noted in the original post is good and has been since 2.0, if there are other issues they ... Chris Buechler
07:23 PM Bug #830 (Assigned): Service provider information should be saved
Chris Buechler
07:21 PM Bug #2311 (Assigned): Wrong redirection URL (from http -> https) missing colon char
Chris Buechler
07:20 PM Feature #2321 (Feedback): Move log locations
Need more info.
Are we going to move System under a new top-level tab?
If yes what's that new top-level tab going...
Darren Embry
04:09 PM Feature #2321 (Resolved): Move log locations
The current System logs are getting a bit crowded.
In discussion with Chris we thought making System a 2nd tab row...
Seth Mos
06:46 PM Feature #2320 (Feedback): Javascript helper to toggle subnet mask length for IPv4/IPv6 during input
Pretty much done. I've done *some* testing but I want others to test as well. Darren Embry
03:51 PM Feature #2320 (Resolved): Javascript helper to toggle subnet mask length for IPv4/IPv6 during input
There are numerous places in the UI where one is free to enter a IPv4 or IPv6 address, however, the max subnet mask l... Seth Mos
01:53 PM Feature #2319 (Resolved): include SSD TRIM option in installer
With FreeBSD 8.3 now supporting SSD TRIM, it would be beneficial to SSD users to have the option to enable this featu... David Burgess
11:28 AM Feature #1828 (Feedback): Server load balancer IPv6 support
I believe this just needs more testing. I have used our relayd on 2.1 to run a DNS LB even on IPv6 IPs, so I know it ... Jim Pingle
12:59 AM Revision 17aa0c18: Ticket #2317: typo, use ipaddrv6 instead of ipaddr
Pierre POMES

03/27/2012

10:23 PM pfSense Packages Bug #2318 (Resolved): Mod_Proxy
Hi, after install mod_security package in pf 2.0.1 amd64, I get this error.
The mod_proxy doesn't exists.
The ...
Carlos Cesario
08:56 PM Bug #2317 (Resolved): DHCPv6 static mapping
Chris Buechler
08:55 PM Bug #2317 (Feedback): DHCPv6 static mapping
Thanks, should be fixed now.
Pierre POMES
08:45 PM Bug #2317 (Resolved): DHCPv6 static mapping
Get error when I try to Apply Changes on page Services: DHCPv6 server, after adding static mapping
Warning: inet_p...
Andreas Cider
07:46 PM Feature #1997: Add date picker to the Custom RRD graph page to translate to unix time.
I can't speak for daylight saving time handling but the rest of your needs are fit by this.
http://trentrichardson...
Darren Embry
02:58 PM Bug #2314: Members to bridge not added

If this is related to what Im seeing here- http://forum.pfsense.org/index.php/topic,46738.0.html
then this sta...
Chris Palmer
04:14 AM Bug #2314: Members to bridge not added
I did the daily update via the webgui, so I guess that's a binary update. Florian Hibler
03:09 AM Bug #2314: Members to bridge not added
You did a binary upgrade or just gitsync to 2.1? Ermal Luçi

03/26/2012

09:20 PM Feature #2315 (New): Traffic Shaper - Adaptive Bandwidth Management
There is a method to adjust the queue limits, so that unpredictable connections can be throttled down to avoid satura... John Banks
08:29 PM Feature #1997: Add date picker to the Custom RRD graph page to translate to unix time.
I hope the date picker will have the ability to accurately "pick" hours, minutes, and seconds rather than rounding to... Simon Fong
04:45 PM Bug #2314 (Resolved): Members to bridge not added
After creating or editing a bridge (I guess that restarts the bridge), all members are gone. Also deleting and creati... Florian Hibler
10:53 AM Bug #2278 (Feedback): IPv6 Carp vip both master on FreeBSD 8.3
-Can not replicate with FreeBSD 8.3-RC2 snapshots from snapshots.pfsense.org. Possibly fixed between RC1 and RC2.-
-...
Seth Mos

03/25/2012

05:07 PM Bug #2311 (Resolved): Wrong redirection URL (from http -> https) missing colon char
Setup: pfsense 2.1 20120322-1658
config.xml file copied over from 2.0.1
Checking CP I noticed a wrong redirection...
Dim Hatz

03/23/2012

11:12 PM Revision 7b89ea6a: Remove unused code
Ermal LUÇI
11:11 PM Revision bba2d76b: Remove unused code
Ermal LUÇI
09:11 PM Revision 6769cddc: Correct location of '\n'
Ermal LUÇI
09:10 PM Revision f7f33eb3: Correct location of '\n'
Ermal LUÇI
09:03 PM Revision f5130e64: Correct building of queue to not depend on parent mask
Ermal LUÇI
09:01 PM Revision d0f4f66c: Correct building of queue to not depend on parent mask
Ermal LUÇI
06:50 PM Bug #1874: Captive Portal Login dies on empty input
Yeah i will fix that since already know the fix for it.
Its just that the pages are not updated on enable/disable of...
Ermal Luçi
06:26 PM Bug #2310 (Resolved): Possible typo - "Optional 11" interface ?
Possibly a typo:
Doing a test install of pfSense-LiveCD-2.1-DEVELOPMENT-i386-20120322-1658.iso I noticed that at t...
Dim Hatz
06:00 PM Revision 31d6f24b: pull jquery-ui.custom.css from themes/THEME if it exists there
otherwise pull /javascript/jquery/jquery-ui.custom.css,
which contains defaults.
Darren Embry
05:35 PM Revision ce49a7c9: Add date/time picker to Custom RRD graphs.
from: http://trentrichardson.com/examples/timepicker/ Darren Embry
04:18 PM Revision aacd203c: you are right, Ermal, system_hasync.php is obviously not part of m0n0wall. :-)
Darren Embry
02:06 PM Revision fe5e1374: Merge pull request #67 from phil-davis/master
Bug #2301: More fixes to pbi package install and removal Scott Ullrich
01:33 PM Feature #1997 (Feedback): Add date picker to the Custom RRD graph page to translate to unix time.
Darren Embry
01:33 PM Feature #1997: Add date picker to the Custom RRD graph page to translate to unix time.
Okay we have a datepicker now:
https://github.com/bsdperimeter/pfsense/commit/ce49a7c9f2781bda704e4e561026b5e445ab1f...
Darren Embry
01:11 PM Bug #2308 (New): HFSC WebUI doesn't check for "Bandwidth" setting
Hi,
I configured pfSense todo some QoS. To get everything "firsthand" I used the HFSC module.
When configuring ...
Oliver Loch
06:28 AM Revision a1d4a048: remove_freebsd_package: check that a symlink exists and is currently pointing into the pbidir of the current package, then unlink it. This avoids possibly deleting real files, or deleting a symlink that points into some other package.
pkg_fetch_recursive: remove a bonus "$" in the symlink target specification. This was causing symlinks from /usr/loca... Phil Davis
05:59 AM Bug #2261: Spanning Tree interface priority options do not alter Bridge
Nice one! That looks good. mike bold
01:25 AM Revision f97a5b04: Move CARP settings from pkg XML to a real PHP page
https://redmine.pfsense.org/issues/647 Darren Embry

03/22/2012

09:22 PM Todo #647 (Feedback): Move CARP settings from pkg XML to a real PHP page
needs more testing than i can do but at least the convert_config() works and the settings page works: https://github.... Darren Embry
06:00 PM Todo #647: Move CARP settings from pkg XML to a real PHP page
Yes for the upgrade.
For the tool it does not exist.
Ermal Luçi
05:55 PM Todo #647: Move CARP settings from pkg XML to a real PHP page
do we use /etc/inc/upgrade_config.inc to upgrade the config.xml side?
is there any sort of tool for converting <pa...
Darren Embry
04:26 PM Todo #647 (Assigned): Move CARP settings from pkg XML to a real PHP page
HA Sync is the best description being clear what it's doing using sensible standard terminology, and without potentia... Chris Buechler
08:39 AM Todo #647: Move CARP settings from pkg XML to a real PHP page
Jim P wrote:
> Sounds good to me, or even just "Synchronization", if under System, sort of implies that as well "Sys...
Warren Baker
07:50 AM Todo #647: Move CARP settings from pkg XML to a real PHP page
Warren Baker wrote:
> My 2c, I think 'High Availability Sync' (or HA Sync) best describes the use since pfSync is a ...
Jim Pingle
03:18 AM Todo #647: Move CARP settings from pkg XML to a real PHP page
My 2c, I think 'High Availability Sync' (or HA Sync) best describes the use since pfSync is a protocol which provides... Warren Baker
09:09 PM Bug #2307 (Closed): OpenNTP fails to update time at bootup
OpenNTP fails to update it's time on both a clean install and an upgraded install from 2.0.1 at bootup. Both boxes ha... Larry Titus
08:55 PM Bug #2306: USB ports show up as network interfaces
Correction, I used the i386 versions not amd64. Larry Titus
08:54 PM Bug #2306 (Resolved): USB ports show up as network interfaces
usbus## shows up as network interfaces on both the console and in the WebUI. See attached screenshots. This was teste... Larry Titus
06:07 PM Bug #2278: IPv6 Carp vip both master on FreeBSD 8.3
Probably it will be related to the IPv6 patch there is in there.
Can you confirm that Seth?
Ermal Luçi
04:51 PM Revision 95e174f1: correctly read/write the priority/path cost settings to the main XML configuration file.
code from mike bold.
https://redmine.pfsense.org/issues/2261
Darren Embry
04:36 PM Revision da5895bb: fix a typo.
Darren Embry
04:17 PM Revision 59418cee: Add date picker to the Custom RRD graph page to translate to unix time.
implements #1997.
http://redmine.pfsense.org/issues/1997
Darren Embry
03:20 PM Revision 10c526e4: fix for: Traffic Limiter Bits/sec option broken
fixes #2296
http://redmine.pfsense.org/issues/2296
Darren Embry
02:48 PM Revision ef59af27: fix for: Captive Portal cannot work on master branch
reverting to listening on 0.0.0.0 seems to work just fine
mostly fixes #1700 .
http://redmine.pfsense.org/issues/1700
Darren Embry
02:40 PM Bug #475: L2TP is not functional in the way users will expect
Another related link:
Howto set up a L2TP/IPsec VPN Dial-In Server (Part I to III)
http://forums.freebsd.org/show...
Dim Hatz
02:19 PM Revision 103a9d37: Update the default config.xml to 8.3 so it does not trigger config.xml upgrade during install of a new system
Seth Mos
02:19 PM Revision d579e3db: Improve the memory use while processing the leases file.
Seth Mos
12:48 PM Feature #1997: Add date picker to the Custom RRD graph page to translate to unix time.
Would still be nice to have a JS Date Picker in the GUI end so people don't have to type it out. Clicking around a ca... Jim Pingle
12:14 PM Feature #1997 (Resolved): Add date picker to the Custom RRD graph page to translate to unix time.
Input fields are now freeform. I went with PHP's strtotime() function for freeform input. It understands time zones... Darren Embry
12:47 PM Bug #2261: Spanning Tree interface priority options do not alter Bridge
Thanks, I've committed your changes to interfaces_bridge_edit.php. Here's what XML looks like now:... Darren Embry
12:12 PM Bug #2261: Spanning Tree interface priority options do not alter Bridge
Please find diff's attached.
I don't think they are very easy to read so I've also included the original source fi...
mike bold
11:46 AM Bug #2261 (Feedback): Spanning Tree interface priority options do not alter Bridge
Can you attach actual patches (aka diff's) please? I was really hoping for those instead of entire files. :-)
Yo...
Darren Embry
05:45 AM Bug #2261: Spanning Tree interface priority options do not alter Bridge
Hi Darren, sorry for the delay, I see you have resolved the issue in file interfaces.inc. Nice one!
I also made a ...
mike bold
11:16 AM Bug #2296 (Resolved): Traffic Limiter Bits/sec option broken
fixed: https://github.com/bsdperimeter/pfsense/commit/10c526e452cb1688a9a91bc0fb75198d190adb7c Darren Embry
11:01 AM Bug #1874: Captive Portal Login dies on empty input
Not able to reproduce a blank page if I revert above changeset.
When I take the following steps:
- set the captiv...
Darren Embry
10:50 AM Bug #1700: Captive Portal cannot work on master branch
Applied in changeset commit:ef59af2728f4baffff2a42088304daa138cbdb47. Darren Embry
10:47 AM Bug #1700 (Feedback): Captive Portal cannot work on master branch
I've reverted to listening on 0.0.0.0 once again. Works fine in stock pfsense 2.1-DEVELOPMENT.
I didn't touch the...
Darren Embry
12:56 AM Revision bef75b4c: fix for: Captive Portal Login dies on empty input
Not actually tested because CP doesn't work right now.
http://redmine.pfsense.org/issues/1874
Darren Embry

03/21/2012

11:48 PM Revision 9a456170: fix for: Spanning Tree interface priority options do not alter Bridge
http://redmine.pfsense.org/issues/2261 Darren Embry
11:19 PM Revision 2452cc37: fix: Input validation problem with VIPs and "none" type interfaces
http://redmine.pfsense.org/issues/2291 Darren Embry
11:16 PM Todo #647: Move CARP settings from pkg XML to a real PHP page
Indeed, and calling it CARP Settings, IMO, contributes to the continued confusion about where the CARP heartbeats hap... Jim Pingle
10:53 PM Todo #647 (Feedback): Move CARP settings from pkg XML to a real PHP page
true, having it under Virtual IPs never was a sensible location, though not sure where best to put it. Need to determ... Chris Buechler
10:00 PM Todo #647: Move CARP settings from pkg XML to a real PHP page
Pierre POMES wrote:
> And it may be nice to include some settings of "general settings" or "advanced settings":
> -...
Jim Pingle
09:28 PM Todo #647: Move CARP settings from pkg XML to a real PHP page
And it may be nice to include some settings of "general settings" or "advanced settings":
- proxy settings
- load b...
Pierre POMES
09:18 PM Todo #647: Move CARP settings from pkg XML to a real PHP page
Might be time to promote that to its own entry under System or Firewall, "Cluster Sync" or "HA Sync" or something lik... Jim Pingle
04:14 PM Todo #647: Move CARP settings from pkg XML to a real PHP page
doesn't have any relation to what CARP is on the back end, just needs to be done in general. Chris Buechler
04:13 PM Todo #647: Move CARP settings from pkg XML to a real PHP page
This probably can wait until the new carp time comes? Ermal Luçi
02:38 PM Todo #647 (Assigned): Move CARP settings from pkg XML to a real PHP page
Chris Buechler
08:52 PM Bug #1874 (Feedback): Captive Portal Login dies on empty input
blind commit, need to test when CP actually starts working.
Applied in changeset commit:bef75b4c9f43c024db19907bf5f6...
Darren Embry
02:46 PM Bug #1874 (Assigned): Captive Portal Login dies on empty input
Chris Buechler
07:43 PM Bug #2261 (Resolved): Spanning Tree interface priority options do not alter Bridge
fixed: https://github.com/bsdperimeter/pfsense/commit/9a45617000737d00af9364ae0aba28601472b3f0 Darren Embry
01:05 PM Bug #2261 (Feedback): Spanning Tree interface priority options do not alter Bridge
Mike, can you attach your patch please? I *think* I could figure this one out on my own but would like to see your p... Darren Embry
11:26 AM Bug #2261 (Assigned): Spanning Tree interface priority options do not alter Bridge
Chris Buechler
07:15 PM Bug #2291: Input validation problem with VIPs and "none" type interfaces
Note that the messages were modified slightly to be one of the following:
This interface is referenced by IPv4 VIP...
Darren Embry
07:14 PM Bug #2291 (Resolved): Input validation problem with VIPs and "none" type interfaces
fixed: https://github.com/bsdperimeter/pfsense/commit/2452cc37fb1b735d88b0791ec062c378a2d68f27 Darren Embry
02:40 PM Bug #2291 (Assigned): Input validation problem with VIPs and "none" type interfaces
Chris Buechler
06:20 PM Revision 2e5de33c: Merge pull request #66 from phil-davis/master
Bug #2301: Mixed-case package names and package deletion Scott Ullrich
06:06 PM Revision 44988c5e: Remove an extra "-" left there by accident.
Phil Davis
06:05 PM Revision dd65598e: Add per-rule delete ("X") button to Outbound NAT rules
http://redmine.pfsense.org/issues/1062 Darren Embry
05:56 PM Revision 8059acb5: Handle mixed-case package names like squidGuard.
Check that conf files in PBI folders exist before unlink.
Pass correct package names 1 at a time from uninstalll_pack...
Phil Davis
05:51 PM Revision 90dd6423: [Patch] Multiple SMTP notice recipients
http://redmine.pfsense.org/issues/2026 Darren Embry
05:27 PM Revision 0b8160bb: fix for: The javascript to enable and disable the various config boxes fail since adding the 6rd IPv6 config type
http://redmine.pfsense.org/issues/2304 Darren Embry
04:48 PM Revision 961062c5: Merge branch 'master' of github.com:bsdperimeter/pfsense
Darren Embry
04:47 PM Revision a38ea8d8: fix for: Output from CSRF magic mangles files in Diagnostics > Edit File
http://redmine.pfsense.org/issues/2294 Darren Embry
04:22 PM pfSense Packages Bug #1768: DNS Forwarder of Tinydns
I found that if you check the option "Allow DNS server list to be overridden by DHCP/PPP on WAN" on pfsense GUI, you ... Felipe Santos
03:54 PM Revision fcbf8a60: fix text
Chris Buechler
03:11 PM Bug #2214: PHP core dumps on RRD upgrade
Just to clarify this problem a little more, Suhosin has a patch for building of PHP5 and then there is the extension ... Warren Baker
01:40 PM Bug #2214 (Resolved): PHP core dumps on RRD upgrade
Warren committed a new php5-suhosin port which fixes the core dump by downgrading to a older patch. Seth Mos
03:02 PM Bug #2036 (Closed): 2.0 crash on WRAP PC Engines WRAP.1D
Chris Buechler
03:02 PM Bug #2053 (Rejected): Don't NAT OpenVPN after system restart
Chris Buechler
03:02 PM Bug #2052 (Resolved): CP ipfw duplicate rules
Chris Buechler
03:01 PM Feature #1140 (Needs Patch): Option to delete more than one "confguration history" at one time.
Chris Buechler
02:57 PM Bug #1968 (Closed): webconfigurator dies
Chris Buechler
02:56 PM Bug #1927 (Resolved): missing require in OpenVPN openvpn.auth-user.php template
Chris Buechler
02:56 PM Bug #1549 (Closed): Sip INVITE dropped.
Chris Buechler
02:55 PM Bug #1542 (Closed): Fatal Error during Upgrade from 2.0-RC1 to latest snapshot 2.0-RC2<May 18 built>
Chris Buechler
02:55 PM Bug #1509 (Closed): Traffic Shaper (altq) not working with 82574L interfaces?
Chris Buechler
02:55 PM Bug #1478 (Needs Patch): some characters in FW rule descriptions do not sync properly
Chris Buechler
02:54 PM Bug #998 (Closed): Installer fails on gmirror device files
Chris Buechler
02:54 PM Bug #922 (Closed): Traffic Shaper
Chris Buechler
02:49 PM Bug #2165 (Resolved): IE 9 causes log out on Status>Traffic Graph
Chris Buechler
02:47 PM Bug #1898 (Resolved): Client Export on 2.0 Release creates corrupted Windows installers
Chris Buechler
02:46 PM Bug #1881 (Closed): PPPoE server does not allow the Internet
it works in general, would need something more specific to have a bug open, can't replicate. Chris Buechler
02:43 PM Bug #2296 (Assigned): Traffic Limiter Bits/sec option broken
Chris Buechler
02:39 PM Bug #1662 (New): DNS server gateway selection missing input validation
Chris Buechler
02:38 PM Bug #1700 (Assigned): Captive Portal cannot work on master branch
Chris Buechler
02:36 PM Feature #1997 (Assigned): Add date picker to the Custom RRD graph page to translate to unix time.
Chris Buechler
02:36 PM Bug #1610 (Resolved): v6 IPsec tunnels can trap 12 the kernel
Chris Buechler
02:35 PM Bug #1410 (Resolved): pfSense remains without default route
this particular issue is resolved. there are still issues with default gateway switching in general that need to be q... Chris Buechler
02:33 PM Feature #2205 (Resolved): relayd enhancements in system_advanced_misc.php
Chris Buechler
02:24 PM Bug #2305 (Resolved): PBI db stored on var does not survive reboot
On FreeBSD 8.3 the PBI system stores its database in /var/db/pbi - this is where it remembers what FreeBSD packages a... Phillip Davis
02:00 PM Feature #1062 (Resolved): Add per-rule delete ("X") button to Outbound NAT rules
done: https://github.com/bsdperimeter/pfsense/commit/dd65598e5258da1373b9101ca6e31acb7ae22a8e
Darren Embry
11:22 AM Feature #1062 (Assigned): Add per-rule delete ("X") button to Outbound NAT rules
Chris Buechler
01:46 PM Feature #2026 (Resolved): [Patch] Multiple SMTP notice recipients
fixed, a little bit more robustly: https://github.com/bsdperimeter/pfsense/commit/90dd642352ea4c26eec633d1f075f12262e... Darren Embry
11:26 AM Feature #2026 (Assigned): [Patch] Multiple SMTP notice recipients
Chris Buechler
01:22 PM Bug #2304 (Resolved): The javascript to enable and disable the various config boxes fail since adding the 6rd IPv6 config type
fixed in: https://github.com/bsdperimeter/pfsense/commit/0b8160bbfa98e2934519cc6c58edf80f0214bab9
Darren Embry
01:10 PM Bug #2304: The javascript to enable and disable the various config boxes fail since adding the 6rd IPv6 config type
What I meant to say was, selecting a IPv6 configuration type on interfaces.php does not correctly toggle the javascri... Seth Mos
12:59 PM Bug #2304 (Resolved): The javascript to enable and disable the various config boxes fail since adding the 6rd IPv6 config type
Doesn't actually need a working connection, just select 6rd and from that point on the other options are not disabled... Seth Mos
12:46 PM Bug #2294 (Resolved): Output from CSRF magic mangles files in Diagnostics > Edit File
fixed: https://github.com/bsdperimeter/pfsense/commit/a38ea8d88e3c06ce4304da1d6404d13c2b894ef4
Darren Embry
11:25 AM Bug #2294 (Assigned): Output from CSRF magic mangles files in Diagnostics > Edit File
Chris Buechler
11:35 AM Feature #1119 (Resolved): Add a per-VIP override to hide it from expansion in drop-down fields
Chris Buechler
11:29 AM Feature #1854 (Resolved): filter field on diag_logs_filter.php should be at top of page
Chris Buechler
11:28 AM Bug #2015 (Closed): Firewall: Shaper, By Queues View. Needs a couple of little fixes
Chris Buechler
11:28 AM Bug #1660 (Resolved): Missing input validation in system_gateway_groups_edit.php
Chris Buechler
11:19 AM Bug #1912 (Resolved): DHCP server domain search list needs input validation
Chris Buechler
11:18 AM Bug #2207 (Resolved): Date header for E-mail incorrect.
Chris Buechler
11:16 AM Bug #437 (Resolved): Y2K38 bug in user manager expiration
Chris Buechler
01:11 AM Bug #2301: Adding symlinks for conf files when PBI packages have names that are substrings of each other
I also discovered that some packages have a mixed-case name, but that the PBI name is all lowercase. For example "squ... Phillip Davis

03/20/2012

04:47 PM Feature #1829 (Assigned): CARP with IPv6 support
http://www.macfreek.nl/memory/Non-Local_IPv6_Router_Advertisement Seth Mos
04:46 PM Feature #1829: CARP with IPv6 support
Looks like we mayb be able to circumvent this by switching to radvd. The config syntax is far more readable too.
N...
Seth Mos
02:53 PM Bug #2303 (Resolved): SPD on secondary not cleared after config sync
When IPsec is disabled on the primary, it syncs over and disables it on the secondary, but it leaves the SPD in place... Chris Buechler
02:08 PM Revision 282f5713: Fix pattern upload, button text check was incorrect.
Jim Pingle
02:08 PM Revision 2f3d4950: Fix pattern upload, button text check was incorrect.
Jim Pingle
01:16 PM Bug #2158 (Resolved): SNMP bind needs to list all interfaces/VIPs
Chris Buechler
01:14 PM Bug #2158: SNMP bind needs to list all interfaces/VIPs
I just tested this, and the dropdown appears to correctly populated now. Using this snapshot build:
pfSense-2.1-D...
Bruce Mah
12:24 PM Revision 89cb50de: Merge pull request #65 from phil-davis/master
Bug #2301: Handle case when PBI package names are substrings of each other Scott Ullrich
11:14 AM Revision 84d50fe7: Fix case where package names are substrings of each other. e.g. "squid" and "squid_radius_auth". Look for "squid-", which will match the full PBI package name for squid but will not match "squid_radius_auth". Bug #2301
Phil Davis
10:11 AM Feature #2302 (Resolved): Uploaded Layer 7 patterns not saved in config, backed up, or synced
If you upload a custom Layer 7 pattern, it's dropped into /usr/local/share/protocols/ and that's it. If you restore a... Jim Pingle
06:57 AM Bug #2301 (Resolved): Adding symlinks for conf files when PBI packages have names that are substrings of each other
When installing Squid on 2.1-DEV the libwww, squid_radius_auth and squid packages are put on the system with PBI.
In...
Phillip Davis

03/19/2012

07:46 PM Revision fe9ee1e0: Pull required .inc
Ermal LUÇI
07:45 PM Revision 44252f58: Pull required .inc
Ermal LUÇI
08:58 AM Bug #2074: Changing interface IP changes interface assignment as well
I can confirm an almost identical problem.
I have pfSense configured with 2 dual NIC cards:
* bge0 -> PPPoE (WA...
Scott Whitlock
08:50 AM Bug #2300 (Resolved): Static routes for IPsec peers missing when attached to IP Alias VIP
The "static route needed?" check in vpn.inc for IPsec peers only checks CARP VIPs to see if a static route is needed,... Jim Pingle
08:31 AM Bug #1841: TCP state issue when traffic passing through a GRE tunnel within IPSEC
I've got exactly the same issue. The main reason for me to use this configuration, is to be able to have VPN and dyna... stephane stephane

03/18/2012

10:15 PM Bug #2299 (Resolved): Redundant NAT rules created for PPTP subnet by Auto Outbound NAT rule generation
Outbound NAT is set to Automatic
PPTP server
server address: 192.168.100.2
remote address range: 192.168.100.64
...
Dim Hatz
01:23 AM Revision c7255ec1: Do not show tabs for interfaces with 'link local' address (fe80::...)
Pierre POMES
01:06 AM Revision 0f54c806: Do not show tabs for interfaces with 'link local' address (fe80::...)
Pierre POMES

03/16/2012

08:10 PM Bug #2298 (Rejected): Routing issue
not a bug, config issue. Can discuss further if you post to forum or mailing list, this is strictly for specific conf... Chris Buechler
09:10 AM Bug #2298 (Rejected): Routing issue
Not sure if this is a bug, but seems to be.
Steps to replicate:
Multi tier system. Cisco ASA at the top with se...
Ross McInnes
08:50 AM Bug #2297 (Closed): Inbound NAT on secondary WAN Interface when Primary Interface has no carrier
Inbound connectivity (ICMP, NAT, etc) from WAN becomes inaccessible on a secondary WAN connection when the primary WA... Mark Royan
12:19 AM Revision c9eb66f6: Fix a logical bug on gettext
The parameter showapply determines when the apply button should be displayed
Ticket #1686
Vinícius Coque

03/15/2012

09:14 PM Revision 290ef7e0: support for xmlrpcauthuser and xmlrpcauthpass in $g.
also for some reason get_pkg_sizes() wasn't using credentials at all. Darren Embry
08:04 PM Revision 3d594a3f: Correct population of the temp version of this variable. Fixes #2158 (drop-down preselection issue)
Jim Pingle
04:00 PM Bug #2158 (Feedback): SNMP bind needs to list all interfaces/VIPs
Applied in changeset commit:3d594a3fba8a2e781f845d64102d06fb6dc4e0b7. Jim Pingle
03:42 PM Bug #2158 (New): SNMP bind needs to list all interfaces/VIPs
I'll set this back to new, there's probably a little logic error in re-selecting the right value on load. Jim Pingle
03:36 PM Bug #2158: SNMP bind needs to list all interfaces/VIPs
I'm seeing a minor buglet in SNMP configuration that might be related to this bug.
On the Services -> SNMP page, t...
Bruce Mah
03:35 PM Bug #2296 (Resolved): Traffic Limiter Bits/sec option broken
What should happen:
When the bandwidth of an upload limiter is set to 100 Bit/s, and then saved, the bandwidth shoul...
Joel Whitehouse
02:58 PM Revision f5b8bdbf: Set FCGI_CHILDREN to 0 since it does not make sense php to manage itself when lighttpd is doing so. This makes it possible to recover from 550-Internal... error.
Ermal LUÇI
02:58 PM Revision a67b9fb9: Set FCGI_CHILDREN to 0 since it does not make sense php to manage itself when lighttpd is doing so. This makes it possible to recover from 550-Internal... error.
Ermal LUÇI
02:34 PM Revision ca320457: Unbreak the upgrade_config.inc, sorry
Seth Mos
02:01 PM Revision e8e2ffbd: Update help text for Host alaises to indicate FQDNs are allowed.
Jim Pingle
01:56 PM Revision b0b22431: Update help text for Host alaises to indicate FQDNs are allowed.
Jim Pingle
01:47 PM Revision 56ee96ed: More memory optimizations for the RRD upgrade. Ticket #1758 #2159
Seth Mos
01:41 PM Revision d6425f75: Update the upgrade function so we use less memory here too to make sure it succeeds on Nano.
Related to ticket. #2159 #1758 Seth Mos
01:19 PM Revision 30a560cf: Merge pull request #53 from jeandebogue/patch-1
Move the echo "UP|DOWN" earlier Jim Pingle
12:05 PM Feature #2295 (Resolved): Allow multiple OpenVPN compression settings (disable, yes, no, adaptive)
The issue was discussed in http://forum.pfsense.org/index.php/topic,47156.0.html and has to do with how OpenVPN behav... Dim Hatz
10:02 AM Revision 7a763898: Merge pull request #64 from phil-davis/master
Bug #2284: rc.newwanip handle case when gifs config is null Seth Mos
08:54 AM Bug #2214: PHP core dumps on RRD upgrade
Warren Baker wrote:
> Attached is a bt full of php-5.3.10 and modules compiled with debugging.
Lets try that again.
Warren Baker
08:49 AM Bug #2214: PHP core dumps on RRD upgrade
Attached is a bt full of php-5.3.10 and modules compiled with debugging. Warren Baker
04:33 AM Revision 29bf947e: Use better is_array test to check if there are any gifs in the config.
Phil Davis

03/14/2012

08:18 PM Revision 6f49abdc: Don't put an extra space here or later tests will fail to match this as a pass rule. Part of #2293
Jim Pingle
08:17 PM Revision c3f01709: Don't put an extra space here or later tests will fail to match this as a pass rule. Part of #2293
Jim Pingle
06:29 PM Bug #2294 (Resolved): Output from CSRF magic mangles files in Diagnostics > Edit File
Somehow CSRF Magic code is ending up in the text when you edit a file in Diagnostics > Edit file. One example is with... Jim Pingle
04:29 PM Bug #2293 (Feedback): Associated NAT rules for TCP missing flags
Mostly mitigated by commit:c3f01709d6d932f9f49f771ecd5f2652af05d5fe and the fact that pf apparently assumes flags S/S... Jim Pingle
03:54 PM Bug #2293 (Resolved): Associated NAT rules for TCP missing flags
TCP rules are supposed to get "flags S/SA" by default but for some reason associated filter rules for TCP port forwar... Jim Pingle
02:18 PM pfSense Packages Bug #2292 (Resolved): DarkStat interface selection needs to only allow single interface
This is only a small bug / misinterpretation.
The configuration interface under "Diagnostic" - "DarkStat settings...
Ruediger Biernat
12:37 PM Bug #2291 (Resolved): Input validation problem with VIPs and "none" type interfaces
When trying to set an interface to "none" type IP and you have a VIP, it spits out: ... Chris Buechler
08:09 AM Revision efb5b9f1: Update etc/rc.newwanip
Phil Davis

03/13/2012

08:33 PM Feature #2235: Rules with destination interface
Tags can be used for firewall rules to match only traffic handled by a certain NAT rule, right? Any reason this hasn... Erik Fonnesbeck
07:39 PM Revision 2a9cb3b2: Fix the link local check when trying to add a link local gateway
Ticket #2071 Seth Mos
07:27 PM Revision 4096fe5d: Enable the NTP server fields for our DHCP6 server.
Seth Mos
07:27 PM Revision 83bbb0cd: Include this file to make sure that rc.newwanipv6 actually works.
Seth Mos
07:16 PM Revision 4a8c0780: Ermal says the new openntpd binary fixes this instead -- Revert "Start ntpd in the background since we don't need to care about its return data. Speeds up GUI with broken DNS."
This reverts commit 89d291ec25c12ed5744c63679270d1a13b5c6b3a. Jim Pingle
07:15 PM Revision 93606e57: Ermal says the new openntpd binary fixes this instead -- Revert "Start ntpd in the background since we don't need to care about its return data. Speeds up GUI with broken DNS."
This reverts commit 9281c9c66c4a5d64e6fda459ce89f18bc8fc27db. Jim Pingle
05:32 PM Revision 9281c9c6: Start ntpd in the background since we don't need to care about its return data. Speeds up GUI with broken DNS.
Jim Pingle
05:31 PM Revision 89d291ec: Start ntpd in the background since we don't need to care about its return data. Speeds up GUI with broken DNS.
Jim Pingle
05:03 PM Feature #1663 (Assigned): DHCPv6 relay
Ok, found the glaring error, doesn't start, config is rubbish. Need to properly code this. Arguments to dhcrelay -6 v... Seth Mos
05:03 PM Bug #2289 (Resolved): Logic error in firewall rule interface selection for drop-down menu case
If you have enough interfaces that your Firewall > Rules interface list is a drop-down, and WAN is disabled, when you... Jim Pingle
04:54 PM Bug #1725 (Resolved): DHCPv6 non-common bitmask shows incorrect range
Seth Mos
04:54 PM Bug #1827 (Feedback): rc.newwanipv6 needs work
Included rrd.inc so that the script actually executes. Seth Mos
04:53 PM Feature #2071 (Resolved): Allow link local addresses for gateways
Seth Mos
04:52 PM Feature #2071: Allow link local addresses for gateways
Confirmed working Seth Mos
04:41 PM Bug #1949 (Resolved): can not set gateway group on a filter rule.
No response, resolved Seth Mos
04:40 PM Feature #2016 (Resolved): DHCPv6 Server doesn't load if NTP server specified
Checked in a fix that enabled the NTP fields for the DHCP6 server again. Seth Mos
03:43 PM Feature #2077 (Resolved): GRE GUI needs IPv6 support
Confirmed fix, works in march 13th snapshot Seth Mos
03:23 PM Bug #1974 (Feedback): Captive Portal RADIUS accounting bytes wrong
This is fixed in latest code Ermal Luçi
01:00 PM Revision 71bdd226: Rather make use of grep -c than all these pipes
Warren Baker
12:09 PM Bug #2288 (Closed): Traffic Graph slows network processing
Having the traffic graphs open will slow networking down by a given percentage for each instance of the graphs open. ... Brendan Zerr
10:44 AM Bug #2214: PHP core dumps on RRD upgrade
This is the backtrace without debugging symbols. Probably not useful.
#0 0x081ee4f5 in zend_hash_exists ()
[New ...
Seth Mos
09:21 AM Bug #2214: PHP core dumps on RRD upgrade
Adding the test script and data file Seth Mos
09:15 AM Bug #2214: PHP core dumps on RRD upgrade
Made a core file and I have the truss output Seth Mos
08:48 AM Revision c25197ba: Adjust the ordering so that our modules load properly.
The order appears to be important in which we load the modules Seth Mos
08:40 AM Bug #2286 (Resolved): Multiple PPPoE Server do not work
After adding a second PPPoE Server on a different VLAN (interface) the first and the second PPPoE Server will not ans... Markus Engelbrecht
08:26 AM pfSense Packages Bug #2285 (Resolved): swapstate_check.php is being run when the Squid cache is null
When Squid is not keeping a cache (e.g. on nanobsd by default, or of the user doesn't want a cache), swapstate_check.... Phillip Davis
08:05 AM Bug #2284 (Resolved): rc.newwanip handle case when gifs config is null
If the 'gifs' section of the config is null, then /etc/rc.newwanip logs errors when trying to process the 'gifs' arra... Phillip Davis
07:55 AM pfSense Packages Bug #2283 (Resolved): pfblocker array handling when alias table is empty
When pfblocker is not enabled or there is nothing setup for pfblocker to do, and there are no other aliases defined i... Phillip Davis
03:53 AM Bug #1344: Replace prototype javascript code with jQuery
And another notification plugin - looks neat http://needim.github.com/noty/ Warren Baker

03/12/2012

07:28 PM Revision 1cb94b24: Looking at pw code : chars are invalid in a comment fieldgit diff! Replace those to just space
Ermal LUÇI
07:28 PM Revision a2463716: Looking at pw code : chars are invalid in a comment fieldgit diff! Replace those to just space
Ermal LUÇI
06:38 PM Revision 24769c3f: Make this unconditional to have the pfil hooks setuped always right
Ermal LUÇI
06:12 PM Feature #1482: Captive Portal support for a configurable RADIUS NAS ID
Forgot a @global@ call. Michael Newton
04:26 PM Revision 7377fb4b: An empty file is created so that the table is availblke for rules refrencing it so mark it as successful.
Ermal LUÇI
04:26 PM Revision 966f359e: An empty file is created so that the table is availblke for rules refrencing it so mark it as successful.
Ermal LUÇI
03:53 PM Revision 4aa0979f: Prevent ruleset breaking from grep putting garbage on urltable files and as a result creating unparsable files breaking rulesets
Ermal LUÇI
03:53 PM Revision ad218b1d: Prevent ruleset breaking from grep putting garbage on urltable files and as a result creating unparsable files breaking rulesets
Ermal LUÇI
02:28 PM Feature #2235: Rules with destination interface
The way pf works you can't put rules on the WANs in the outbound direction that match local IPs as the source. This i... Jim Pingle
10:51 AM Feature #2235: Rules with destination interface
This does not work as expected unfortunately.
I put a rule on external interface (permit lan -> any), but traffic ...
David RAMEY
04:36 AM Feature #2235 (Closed): Rules with destination interface
you can easily do that with floating rules. Chris Buechler
01:25 PM Feature #2281 (Closed): NAT reflection of UDP using "socat"
Since according to jimp's posts in the forum, pfsense's NAT Reflection (currently using netcat) functionality has nev... Dim Hatz
10:55 AM Revision 973b2663: Simplify this code a little and make it easily extendible.
Ermal LUÇI
10:55 AM Revision 9b79809e: Simplify this code a little and make it easily extendible.
Ermal LUÇI
10:34 AM Revision a24a096d: check for presense of file before trying to exec it
Ermal LUÇI
10:34 AM Revision 06fd1952: check for presense of file before trying to exec it
Ermal LUÇI
10:32 AM Revision e8197e56: Do not wipe logs on reboot on full install
Ermal LUÇI
10:32 AM Revision 0ee33b35: Do not wipe logs on reboot on full install
Ermal LUÇI
08:07 AM Bug #2278: IPv6 Carp vip both master on FreeBSD 8.3
Just tested with 2 clean FreeBSD 8.3-RC1 vms and there the IPv6 Carp backup and failover works correctly. That implie... Seth Mos
05:11 AM Bug #2278: IPv6 Carp vip both master on FreeBSD 8.3
I have attached 4 pcaps. The 1st 2 pcap files are both members running 8.3.
Pcap 3 and 4 is the master and backup ...
Seth Mos
04:38 AM Bug #2278 (Resolved): IPv6 Carp vip both master on FreeBSD 8.3
On our FreeBSD 8.3 snapshots both carp members will become master for IPv6 vips. The IPv4 vips if they exist work nor... Seth Mos
08:04 AM pfSense Packages Bug #2280 (Resolved): pfblocker date() and mktime() warnings from cron job
When pfblocker runs from crontab to reload various lists at user-specified intervals, it reports warnings about the P... Phillip Davis
07:23 AM pfSense Packages Bug #2279: zoneinfo.tgz has old timezone names and data
I discovered a previous bug report at https://redmine.pfsense.org/issues/2030
This had an up-to-date zoneinfo.tgz fi...
Phillip Davis
06:19 AM pfSense Packages Bug #2279: zoneinfo.tgz has old timezone names and data
Also see the forum topic http://forum.pfsense.org/index.php/topic,47093.0.html
Phillip Davis
06:09 AM pfSense Packages Bug #2279 (Resolved): zoneinfo.tgz has old timezone names and data
/usr/share/zoneinfo/zone.tab contains the current timezone names (and other data) and is distributed as part of FreeB... Phillip Davis
04:44 AM Bug #1572 (Resolved): DHCP + MAC spoofing leads to link cycling
Chris Buechler
04:44 AM Bug #1425 (Closed): pfSense stops receiving traffic on 'bge' driven interface
fixed upstream Chris Buechler
04:43 AM Bug #816 (Closed): USB Keyboard Detection - Boot Hangs
needs to be fixed upstream if it hasn't already been Chris Buechler
04:43 AM Feature #214 (Closed): Simultaneuous Serial/Video Console
Chris Buechler
04:41 AM Bug #1945 (Closed): Missing zone parameter
Chris Buechler
04:41 AM Feature #1191 (Needs Patch): Enable dynamic VLAN assignment at Captive Portal
Chris Buechler
04:37 AM Feature #2241 (Needs Patch): DHCP - prevent dhcpd from handing out leases to certain MAC addresses
Chris Buechler

03/11/2012

03:41 PM Revision 80b86de5: Fix wich roll to write
Ermal LUÇI
03:40 PM Revision 9ac08841: Fix wich roll to write
Ermal LUÇI
07:39 AM Todo #1940: Integrate rSyslogd
Another vote for rsyslog. We are in need of being able to use TLS in order to log to our remote location. Kevin L
03:35 AM Bug #1909: dhcp dies after reboot
I see the same issue trying to run DHCP on an interface with an alias. Removing the alias gets everything working aga... Michael Newton
03:26 AM Feature #1482: Captive Portal support for a configurable RADIUS NAS ID
We're just putting together our first 2.0 boxes; it's currently untested, but I've attached the patch we're planning ... Michael Newton

03/10/2012

10:53 PM Bug #2277: miniupnp will does not listen on vip's
At the end of the day the issue is with CARP not doing multicast, since even if there was an option to allow binding ... Dave Sanderson
10:35 PM Bug #2277 (Feedback): miniupnp will does not listen on vip's
looks like that's changed more recently in CARP in OpenBSD judging by the ifconfig output shown here.
http://www....
Chris Buechler
10:23 PM Bug #2277: miniupnp will does not listen on vip's
After some more research I'm not sure this can solved as it doesn't appear that CARP interfaces are multicast capable... Dave Sanderson
10:10 PM Bug #2277 (Resolved): miniupnp will does not listen on vip's
Currently miniupnp does not listen on vip's just the of the interface. Unfortunately that means if the default GW is... Dave Sanderson
08:16 PM Feature #2276 (New): Remote CRL fetch support
It would be nice being able to fetch CRL from an external HTTP server with a configurable schedule.
Current manual...
David RAMEY
 

Also available in: Atom