Activity
From 04/22/2012 to 05/21/2012
05/20/2012
-
09:11 PM Bug #2444: DynamicDNS doesn't update on WAN IP change
- I am not 100% sure what you mean,
my DSL modem is connected to PF and DSL_WAN PF interface manages the PPPoE
connec... -
08:49 PM Bug #2444 (Feedback): DynamicDNS doesn't update on WAN IP change
- is the public IP actually on the firewall, not the modem? That's usually the cause, since in such cases it's impossib...
-
- I have a DSL WAN whose IP changes often.
If i manually make a change to the DSL_WAN interface, DynamicDNC updates ... -
05:37 PM Feature #2443 (New): Automatically start 3G usb interfaces upon plugin
- And cleanup the old LCK files from /var/spool/lock/LCK..cuaU0.0
devd should be able to do this for us. It says it ... -
-
- Hoping the devd changes resolve this, hoping for the best. Wireless is 802.11, not ethernet
-
- Helps in most cases but can still cause it to take too long making the dhcp client fail. Needs proper check_reload_st...
-
-
- The wireless interface reconfigure (Even with persist settings toggled) causes the interface to go down which then ne...
-
- check_reload_status is firing off for vr1, but not for ural0_wlan0 eventhough the kernel is marking it as up....
-
- Error output only lists:...
-
- Change just checked in, let me know how it goes.
-
- Should be resolved properly, or atleast for now, pretty sure we'll run into something new at some point. When adding ...
-
- When dynamic interfaces are down, these will show up even if there is already a manual entry for it too.
I have a ...
05/19/2012
-
- Trying to add a new PPP interface on a system that has no such configuration results in the UI hanging.
A system t... -
- I've configured a wireless nic as a client (infrastructure) on Opt3. It is set for DHCP but although the link comes u...
-
- I've been able to reproduce it.
When i open WAN_DSL connection and apply changes it does force a DynDNS update.
H... -
- I've yet to see it update on WAN IP change.
My WAN_DSL ip has changed, the dsl modem is connected directly to PF.
D... -
12:06 PM Feature #2439 (Resolved): XEN Para-virtualized Drivers Support
- It's possible to include the xen DomU driver in pfsense 2.1 ?
05/18/2012
-
05:58 PM Feature #2438 (Duplicate): Inbound traffic shaping on unpredictable ADSL - the qosmon approach
- I've been using pfSense for some time now, and it's wonderful. I've never been able to solve a problem, anyway: QoS o...
-
05:12 PM Bug #2437 (Resolved): PHP missing bcmath (that was solved for pfSense 2.0 two years ago, re-discovered in the latest pfSense 2.1)
- 1.
When "Radius Accounting" is enabled and trying to disconnect a connected client in the captive portal gui - the f... -
03:36 PM Bug #2373: There were error(s) loading the rules... (Floating rules bug)
- Also worth noting, though similar to the fact that it happens if you upgrade from 2.0.1 (noted above) is that loading...
05/17/2012
-
08:13 PM Feature #2413 (Feedback): Allow IPv6 interface configuration from the menu
- implemented in commit:c1361a9f
I've done basic testing but this needs a lot more testing than i'm able to do so i'... -
- fixed in commit:283d78c6
-
- Darren, do you think you can prevent this duplicate name issue in the Ajax call?
-
05:46 PM Bug #2373: There were error(s) loading the rules... (Floating rules bug)
- I just want to say, that amd64 architecture is affected also.
Have just tried it. -
- Seth, reassigning to you for you to test/close/assign back to me as needed.
-
- Fixed in commit:428c289f and commit:8dcca9b5.
Reassigning to you so you can do further testing.
Please close if e... -
- If restoring a partial config, we currently assume that only that section is uploaded. This is somewhat counterintuit...
-
- Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 90164860 bytes) in /usr/local/www/di...
-
- I've also added "RRD Data" as a backup option in the dropdowns. Requires a little special handling in diag_backup.ph...
-
- I've confirmed that -f is actually necessary anyway and added -f and log_error calls on failure to all the rrdtool re...
-
- The quick test I just did, backup config.xml on i386, upgrade to amd64, then restore config.xml didn't fix the RRD fi...
-
-
- fixed in commit:dcb94db5
-
12:25 AM pfSense Packages Bug #2435 (Resolved): SquidGuard: Deprecated function 'eregi' warnings
- In squidguard_configurator.inc, there are a number of uses of @eregi()@ which is now deprecated in PHP 5.3. This cau...
05/16/2012
-
09:48 AM Bug #2231 (New): Dashboard: Traffic Graph: Unable to save settings
- Something still isn't 100% here - When you activate a drop-down to expand one of the closed graphs, it also activates...
05/15/2012
-
- Applied in changeset commit:c886fed9ba6a19fface58c918be5d7b111cca1f3.
-
- Adding this bit in auth.inc broke the realtime traffic graphs:
@Header("X-Frame-Options: DENY");@
We either nee...
05/14/2012
-
- Yeah you're right I started to fix it one way then changed my mind halfway, but didn't back out the original change. ...
-
12:19 PM Bug #2432: OpenVPN Client Specific Override ifconfig-push
- I understand your concern about upgrade users since i appreciate when upgrade runs smoothly.
I've looked at the ... -
- Not sure that making them server-specific will be feasible. At the very least, that will cause problems for upgrade u...
-
- Hello,
I'm using a snapshot of pfSense 2.1 (20120419-1059). My pfSense installation holds two distinct VPN serve... -
11:25 AM pfSense Packages Bug #2429: Hostname issues in OpenVPN Client Export
- I replaced the two {{ with { in /usr/local/pkg/openvpn-client-export.inc on two lines in the file.
It works perfectly! -
- Applied in changeset commit:0d639e580d2fc2651a4386a4248ac9e9b97d949d.
-
- When i select installation hostname when i export it looks like this in the configuration file:
remote host.{domain.... -
- This has already been fixed in 2.0.2/2.1.
-
06:02 AM Bug #2431 (Rejected): Receiving warning message when adding/modifiyng exclude list in Services Status widget (dashboard)
- Warning message displayed :...
-
- Duplicate
-
- Sorry for duplicate submit.
-
- Warning message displayed :...
05/11/2012
-
- It appears that the limiters are referenced only by their index in the current list of limiters, instead of by name o...
-
11:08 AM Bug #2427 (Feedback): /etc/rc.firmware_notify
- Wrong file been referenced. Fix in commit:62fc138e7096d9b28026a86244baad56980494f4
-
- When doing an upgrade the shell script /etc/rc.firmware is executed. As part of the upgrade process this script execu...
-
- fixed in commit:937cec84
-
- [Edit: the ticket system seems to have chopped off all my text except the last line...]
The real issue is making a d... -
04:31 AM Bug #2426 (Resolved): Input validaton on interface gateway creation box needs to reject duplicate names
- If two gateways are created with the same name/label, and one of them is set as default for an interface, it's not po...
05/10/2012
-
02:15 PM Bug #2063: PHP Memory Usage too high for 128MB RAM Systems (like ALIX)
- pull request attempt number 2: https://github.com/bsdperimeter/pfsense/pull/106
-
- Pull request to set the number of web configurator processes to 1 on ALIX systems with 256MB RAM or less
https://... -
-
- This is already fixed for 2.1: https://github.com/bsdperimeter/pfsense/pull/96
-
- http://www.php.net/manual/en/function.openlog.php#98307 suggests an alternate way of specifying the facility that may...
-
- That looks like anything in PHP that uses log_error() is doing that.
However log_error is doing this:... -
11:45 AM Bug #2419 (Feedback): Possible Clickjacking Vunerability
-
- ipfw supports masking MACs, sort of like a CIDR, and this could be a useful feature to allow, for example, all phones...
-
- Over time, NTP eventually loses the ability to keep the clock in sync and sometimes will actually set the wrong time,...
-
06:51 AM Bug #2373: There were error(s) loading the rules... (Floating rules bug)
- Some error
Snap 2.1-DEVELOPMENT built on Wed May 9 21:13:38 EDT 2012 ... -
- Awesome stuff.
-
02:27 AM Feature #2418: HttpOnly and Secure flag are not set in the HTTP response header
- Wow.. Fantastic
Works as i had hoped
thank you for the quick fix
05/09/2012
-
-
- When trying to delete a previously added hostname from a Captive Portal zone - nothing happens. There is no error, bu...
-
- Change committed in commit:49ddf9a10ff3379162d437622f664cfe924b4552 - let us know if you happy this please.
-
- According to our tests for PCI-DSS certification by a professional security auditing team.
PfSense lacks the HttpO... -
- The following raw log entry:...
-
- While we're doing this, may as well add a fourth outbound NAT option
* Off (all outbound NAT disabled)
Then someo... -
- According to our tests for PCI-DSS certification by a professional security auditing team.
PfSense has a possible ...
05/08/2012
-
- I reverted that commit, had to adjust a few things since it didn't come out cleanly, but it should be out of RELENG_2...
-
- this needs to be backed out entirely from RELENG_2_0, it wasn't supposed to be there.
-
- Now that CARP VIP interfaces have been renamed, some issues have come up. They are now named, for example, wan_vip241...
-
- Also this does not seem to work.
[2.1-DEVELOPMENT][root@pfsense-amd64.localdomain]/root(68): racoonctl show-sa isa... -
- Setting this back to New since we still need code in the GUI to read this yet.
-
- Updated zoneinfo in commit:23b1fc4 and commit:8a4b381
-
- We do keep a copy of zoneinfo.tgz in the git repo. Hasn't been touched since 2008, and our code pulls the zones from ...
-
- Looks like someone also checked in a fix in commit:107e8acc that broke this again. It appears the fix on this ticket ...
-
- This appears to be properly fixed and functional on current snapshots.
-
- This seems mostly OK but I discovered one case the other day that is still problematic.
If you have a PPPoE interf... -
- I added a hostname with a . to one of my domains using Namecheap DNS and it updated fine, so this is fixed.
-
- Often we suggest people switch to manual outbound NAT to make some very basic adjustments (such as a static port for ...
-
- Applied in changeset commit:76ac460bd4a95a8600b05cecebd8d66f20feed70.
-
- The problem seems to be, in part, that this checks for an interface name of carp or vip, but with IP alias it would a...
-
- Closing this as the routing for PD nets is working great now, I plugged my ALIX in with a stock config and it pulled ...
-
- From Seth:
> There is a problem where pfSense itself can not reach the ipv6 internet [with a DHCPv6 WAN] leading to ... -
- Applied in changeset commit:76db94c28d3cabe38f0b0921c21f80dfddcf93fc.
-
- The code was already there to show that timestamp, so I fixed it up to show it (not quite how this patch was, better ...
-
- That second bit about v4 already has a ticket - #2074
-
- The current console menu only allows for IPv4 interface configuration. We need to add support for IPv6 interface conf...
-
-
- This has been OK for a while, the images are now under 90MB, which is down considerably from where they started.
-
- Setting this back to New only since we still need to code up GUI support for this. The backend part should be OK.
-
-
- Tested newest snapshots and it works for me.
-
- This has been working fine for me since that last commit. Logs are coming across IPv6 and are targeted at an IPv6 IP ...
-
- This has been working fine for me since my last fix. No errors, and it runs as expected during shutdown.
-
-
07:35 AM Bug #2360: OpenVPN "tap" mode not working
- appears to be working now. Thanks!
05/07/2012
-
- This seems to be the classic UDP problem where the system will source the reply from the "closest" address rather tha...
-
-
-
- make a merge request on github and this will make 2.1.
-
- easily worked around by pasting in the cert chain for the CA cert.
-
-
-
- Ah you're right, I didn't copy/paste or save from the test box to the repo like I usually do. Easy to miss in the fon...
-
- I think it works, with one small typo fixed:
pfSense_bridge_add_member($bridgeif, $realifl);
last later should ... -
- This should be fixed now by commit:e5e8840356e1f9ac2cd0e12f511599b5df84ace9
-
- This may be fixed now with commit:e5e8840356e1f9ac2cd0e12f511599b5df84ace9
05/06/2012
-
08:10 AM
Feature #2410 (Feedback): Support name based aliasing via CNAMEs or some other mechanism.
- Applied in changeset commit:5a2a83493cdb3f647b4913f3b84ef864103148f5.
-
04:35 AM Feature #2410: Support name based aliasing via CNAMEs or some other mechanism.
- https://github.com/bsdperimeter/pfsense/pull/99
-
- With the WAN configured as 6to4 it is possible to browse the internet but it is not possible to initiate traffic from...
05/05/2012
-
- The code seems to work fine for me. I added a host, gave it an alias, and it was populated in /etc/hosts as expected....
-
- Whitespace could use some cleanup, but usually patches will work so long as they are clean. It may have been that the...
-
- Whitespace is handled somewhat inconsistently throughout the pfsense codebase. I tried hard to mimic the style of exi...
-
- Done. https://github.com/znerol/pfsense Branch: feature/master/dns-host-alias
-
- mater is 2.1 (for now)
Interesting, I just did another gitsync to bring my VM up to the most current code and it s... -
- Actually the patch is against the master branch on github. The last commit i see in my git log is https://github.com/...
-
- Was that patched against 2.0.1 or 2.1? It doesn't appear to apply to 2.1.
-
- Patch attached. It applies on an installed pfsense 2.0.1 as well as onto git master.
In order to patch a running s...
05/04/2012
-
- The only place that makes a firewall rule for OpenVPN is in the wizard, and that's a one-time deal. There isn't an au...
-
10:06 PM Bug #2411 (Closed): OpenVPN Automatic Rule Generation does not update TCP/UDP
- When changing the protocol type of an OpenVPN connection, the automatic firewall rule generation does not update the ...
-
- Anyone can confirm this issue ?
-
08:02 AM Feature #2410: Support name based aliasing via CNAMEs or some other mechanism.
- Hosts file would work great I suspect, interface mock looks good too. Thanks!
-
- Hi. I probably could put together something for pfSense 2.0. Instead of implementing "real" CNAME support I'd like to...
05/03/2012
-
- Resubmission of feature request 129 from 1.2.2
I would like to request that this feature reconsidered. Regardless ... -
- Cancel that, entering new ticket for this in 2.x.
-
- I would like to request that this ticket be reopened and the feature reconsidered. Regardless of what DJB may think,...
-
12:39 PM Bug #2409 (Resolved): ipfw - entryzerostats
- I apologize for my english...
pfSense 2.0.1
When logging in CaptivePortal (auth Radius, Accounting Updates - Start/... -
- aggh, stupid dumb idiot darren forgot to commit changes.
they're there now in commit:6b2d4b5a . -
- we don't create or control drivers, report the problems upstream to FreeBSD, after testing with a newer base stock Fr...
-
06:52 AM Bug #2408 (Rejected): Wireless run driver crashes kernel
- The run driver for a common 11n Ralink chipset casues severe system instability and kernel crashes. I have tested tha...
05/01/2012
-
- fixed
-
- The input validation that triggers: ...
04/30/2012
-
- Applied in changeset commit:60dd7649d02e4a82f9d57953359bf312038f174a.
-
- Looks like that syntax:...
-
- Simple: create a Traffic Shaper queue but forget to choose a queue parent.
from: http://tech.akom.net/archives/59...
04/28/2012
-
- PHP appears to be choking on the new changed syntax in /etc/rc.stop_packages. It's giving a syntax error when execute...
04/27/2012
-
11:02 PM Bug #2373: There were error(s) loading the rules... (Floating rules bug)
- I've done some testing and I think the patch to add the "match" action must be missing.
-
02:52 PM Bug #2373: There were error(s) loading the rules... (Floating rules bug)
- Found this issue and have following observation:
It is always the first match rule that gives the syntax error, no m... -
- Mounting read-only after mounting read-write can be very slow on recent NanoBSD images on 2.1, based on FreeBSD 8.3
... -
08:08 AM Feature #2400 (Closed): GUI options for WPA Enterprise with identity/password
- WebCfg WiFi Interfaces allows one to connect to just about anything, but connecting to a AD network with identity/pas...
-
- Just noticed that https://dns.he.net/ supports IPv6 for DynDNS now. Update format is identical to IPv4, just send the...
-
- I confirm, "ERRO" is in igmpproxy daemon.
04/26/2012
-
- with the exception of "ERRO" which isn't in our code.
-
- fixed, thanks
-
- 1) igmpproxy: *+ERRO+*: There must be at least 2 Vif's where one is upstream. (vifcount 16, upStreamVif -1)
2) php: ... -
- Has this issue been resolved? You can answer by marking it as such. Thanks. :-)
-
- > Cool, the one-minute graph is refreshing
by which I don't mean scintillating or interesting. :-) -
- Cool, the one-minute graph is refreshing. Marking as resolved.
-
- I've implemented the fix in commit:0637b0a9. Let's see if graphs get populated again...
-
- TFTP package info from config.xml :...
-
- When the WAN (PPPoE in my case) connection is restarted by custom periodic reset or when connection resetted by ISP, ...
-
- P.S. The "array" would literally be every single value from 0 to (2 ^ _n_) - 1 for some value of _n_ (at least that's...
-
- The code displays and validates for the range already.
!http://i.imgur.com/L0yoJ.png!
04/25/2012
-
06:55 PM Feature #2386: Bridge member that is not an assigned interface
- I'm adding screenshots of a configuration I use that would benefit from this. For firewall rules, the only interface...
-
- This is probably due to the changes made in
commit:2064fa2eb4e2bca59f7c675969ee13752283d4c1
And in pfSense-tools... -
-
- Currently when defining a new Gateway group, the default trigger level is set to 'Member Down'.
It ideally should be... -
- Applied in changeset commit:8de4a8bc4d52755dce1fbf2fe80d45687397a429.
-
- Hrmm. I think http://doc.pfsense.org/index.php/Multi-WAN_2.0#Trigger_Level needs to be changed then to indicate this ...
-
- "member down" doesn't mean link down, or it never has historically up to and including recent 2.1, it means it's comp...
04/24/2012
-
- Applied in changeset commit:1cc71979e44d7955084a0cdb50d7698239fac770.
-
- Make sure to touch gwlb.inc return_gateways_array(); it defaults to memberdown for any dynamic gateway. That needs to...
-
- Currently when defining a new Gateway group, the default trigger level is set to 'Member Down'.
It ideally should be... -
02:37 PM pfSense Packages Bug #2396: apache_mod_security_package missing mod_proxy.so (and perhaps others)
- Sorry for the duplicate, I hadn't seen issue #2318.
-
- Related to issue #1244
This was supposed to have been fixed but I'm still getting the following error on a fresh i... -
- Seems to be a duplicate of #1882 which should be fixed in RELENG_2_0 and master.
-
- These two lines: ...
04/23/2012
-
- When you have a keepalive IP defined in a phase 2 that uses 0.0.0.0/0 (everything) as the local network, the logic th...
-
06:49 PM Bug #2314: Members to bridge not added
- I can also confirm this behaviour on:
2.1-DEVELOPMENT (amd64)
built on Sun Apr 22 05:15:07 EDT 2012
FreeBSD 8.3-... -
11:50 AM Bug #2278: IPv6 Carp vip both master on FreeBSD 8.3
- Hy,
It's works for me ! Thank you very much !
Have you a idea of the date of integration in official image ?
Regards -
- Reverted the get_interface_list() part. I had forgotten that the interfaces named in $vfaces don't show for interfac...
-
- reverted back to original behavior without "in" after further evaluation and discussion with Ermal.
04/22/2012
-
- closing since openospfd is being ditched in favor of quagga
-
- duplicate
-
11:02 AM Bug #2393 (Closed): PF not "forgetting" older IP addresses after a change on the WAN interface
- Hi,
when starting pfsense and the cable modem from my provider together at the same time, the cable modem comes up... -
- DNS damn autocorrect.
-
- When I do what I wrote in the first post, the DNA lookup via dnsmasq stops working -> bug.
Oliver -
- Well not meaning to be pedantic about it, but the bug/pebkac question should be solved on the forum before opening a ...
-
- Yeah, you're right, but when i try to differ between a bug and pebcak, one should be able to ask the question.
I'm... -
- That's really a question for the forum, not the ticket system. Such discussion doesn't belong on here.
-
- Hi,
yes it's also breaking if I don't assign the traffic to a queue.
The default queue is used anyway, which is... -
- Does it break without the QoS parts on the rule?
QoS on floating rules should be using the "match" action, not "pa... -
- Hi,
when adding a floating rule that allows outgoing traffic on the wan interface from the wan address to any tcp/... -
03:21 AM Todo #1940: Integrate rSyslogd
- Another vote for rsyslog here too . We too would like to monitor remote deployments.
Also available in: Atom