Activity
From 04/24/2012 to 05/23/2012
05/23/2012
-
11:01 PM Revision e820da2a: Fix reference updating for when more than one carp vip exists. Skip the upgrade code if no carp vip defined. Ticket #2445
-
10:16 PM Revision 79f4bb0b: Disable logging for now since it will spam every 60secs * #users * #zones
-
10:14 PM Revision 90d4bccd: Disable logging for now since it will spam every 60secs * #users
-
09:49 PM Revision 879f7db7: Add missing declaration for global variable $g where it is used.
-
09:11 PM Revision 12766374: Fix name of the config section for virtual IPs in upgrade code. Ticket #2445
-
09:11 PM Revision d39a2fc6: Check the surrounding characters to not allow partial matches. Ticket #2445
-
08:35 PM Revision fe47f1f2: Revert "Rather do a fix by going through vips in reverse order"
- This reverts commit d996dfeab2ec40cf3fb44b51811333b40ed5073f.
-
08:26 PM Revision d01de40f: Fix easyrule duplicate destination for pass - Fixes #2447
-
07:48 PM Revision db461915: Don't skip "lan" as a possible WAN for shaper, since someone could have renamed/repurposed it. Someone may shoot themselves in the foot if they pick it accidentally, but otherwise some valid configs may be prevented accidentally.
-
07:47 PM Revision bd4c21fe: Don't skip "lan" as a possible WAN for shaper, since someone could have renamed/repurposed it. Someone may shoot themselves in the foot if they pick it accidentally, but otherwise some valid configs may be prevented accidentally.
-
07:26 PM Revision c714a1af: Fixes #2364. On busy pppoe servers it might take some time before mpd exits. Check for this before trying to restart
-
07:25 PM Revision 062676f8: Fixes #2364. On busy pppoe servers it might take some time before mpd exits. Check for this before trying to restart
-
06:56 PM Revision fbda07b9: Do this only for carp type vips
-
06:55 PM Revision d996dfea: Rather do a fix by going through vips in reverse order
-
06:54 PM Revision 909b0a91: Reflect naming changes, work around broken media type for wireless
-
06:49 PM Revision e27d337d: Since this is an interface to avoid issues arising from vip1 and vip11 existing and replacing vip1 will replace even vip11, put on the regex <(starting close tag).
-
06:25 PM Revision b45d6db6: Round off the values.
-
06:08 PM Revision 5e13bc84: Convert the Bytes per Second into kilobits per second like the status page says
-
05:35 PM Revision 6805d2d2: Fixes #2209. Obey the mtu value set on the interfaces.php page. Though this value will be overwritten if there is a configuration under PPP settings tab. Maybe a good idea is to set MRU at the same value if not set?
-
05:33 PM Revision e39b6feb: Fixes #2209. Obey the mtu value set on the interfaces.php page. Though this value will be overwritten if there is a configuration under PPP settings tab. Maybe a good idea is to set MRU at the same value if not set?
-
05:16 PM Feature #1986 (Feedback): Find a way to list logged in IPsec xauth users
- This mostly works.
Just destination which is the system itself needs some more fixes, though its useable. -
05:01 PM Feature #1965: Support Multiple IPsec Peers
- we currently already have rc.newipsecdns which does purging and reloading of tunnels. You can pass the function the o...
-
04:36 PM Revision 323954b1: Unset the IP protocol tag while processing this array. This prevents a log message
-
04:30 PM Bug #2447 (Feedback): Duplicated destination IPs in easy rule.
- Applied in changeset commit:d01de40fa6d6a05e03351f0ccd83c64f82a4a2e5.
-
04:00 PM Revision e313da37: Be a bit smarter about the stats interface for the huawei cards. Some of the K series have the stats on 0.2, the E series on 0.3
- Some of the older E series only have 0.2 too. The new K3770 I got today is too new.
-
03:35 PM Revision b22fc825: Move vip upgrade code to be later, since it was backed out of 2.0.x it no longer needs to be so early, and otherwise there can be some breakage/fallout. Ticket #2445
-
03:31 PM Bug #1874: Captive Portal Login dies on empty input
- I am sorry but you can use no authentication for empty passwords.
It works as its expected. -
03:30 PM Bug #2364 (Feedback): PPPoE Server doesn't restart correctly
- Applied in changeset commit:062676f880878f788315991de861a71ccb86a478.
-
03:29 PM Revision 617244c7: Ooops use correct name for vips
-
03:14 PM Revision d23e157a: Add more functions and expand the 3G status interfaces screen.
- List the SIM state, service, speeds and mode
-
03:12 PM Revision 35b71459: Oops this should be sed and not sh. Fixes #2445
-
03:12 PM Bug #2446: pfSense fails to queue UDP packets
- I wonder if you are not being bitten by the order of events happening.
If PBX has internal LAN addresses than this r... -
03:24 AM Bug #2446: pfSense fails to queue UDP packets
- Sorry about that, her it is, properly unformatted:...
-
03:24 AM Bug #2446: pfSense fails to queue UDP packets
- yes, the config for the rule in question is:
<rule>
<id/>
- <type>pass</type>
- <interface>opt1</inte... -
03:08 PM Bug #2423 (Closed): OpenNTPD seems to fail over time and can cause unintended clock skew.
- We switched to ntp.org's ntpd so this is no longer of concern.
-
02:24 PM Revision 7e631290: clean up old lock files for modem ports if a stale is left behind
-
02:19 PM pfSense Packages Bug #2449 (Closed): Console "Filesystem is full" on NanoBSD version
- I just updated a NanoBSD install and it's fine, /tmp is at 0% used. GUI login is OK.
I'd have to guess that squid ... -
12:56 PM pfSense Packages Bug #2449: Console "Filesystem is full" on NanoBSD version
- Apologies for not giving more information Jim. Let me tell you what ive done:
1. I am currently running a build fr... -
12:13 PM pfSense Packages Bug #2449 (Feedback): Console "Filesystem is full" on NanoBSD version
- Not nearly enough information here - specifically we need to know at least what size nanobsd image you're running and...
-
12:04 PM pfSense Packages Bug #2449 (Closed): Console "Filesystem is full" on NanoBSD version
- Tried to upgrade the NanoBSD embedded version and now getting an error on console saying /tmp write failed: Filesyste...
-
02:15 PM Bug #2373 (Feedback): There were error(s) loading the rules... (Floating rules bug)
- With new snapshots this should be resolved.
Issue was patch missing on 8.3 snaps -
01:30 PM Bug #2209 (Feedback): PPPoE MTU is not correctly set from values on interfaces.php
- Applied in changeset commit:6805d2d25f75ccb6d9b1da3814ba2244b3e3107e.
-
12:59 PM Revision bf58398c: Specify correct attribute where to read the setting from.
-
12:58 PM Revision 8e53abfa: If specified use the default settings for bw limitation rather than 0
-
12:57 PM Revision c5b0298f: If specified use the default settings for bw limitation rather than 0
-
12:55 PM Revision 64053339: Prevent 2 instances of rc.prunecaptiveportal from running in parallell since this might be a bad thing
-
12:53 PM Revision 3807002c: Prevent 2 instances of rc.prunecaptiveportal from running in parallell since this might be a bad thing
-
12:30 PM Bug #2012: 4th+ CARP member will not work with default automatic skew
- I am using it for HAProxy in a virtualized environment where we have two sites which are part of the same vCenter (we...
-
11:45 AM Bug #2012: 4th+ CARP member will not work with default automatic skew
- I am unsure why you'd want more than 3 members!
-
11:25 AM Revision d535507a: Add more fields to the 3g stats
-
11:10 AM Bug #2445 (Feedback): Carp vip renaming broken IPsec VPN tunnels that reference carp interfaces.
- Applied in changeset commit:35b714597c8947376b350681c361b38e2569747a.
-
11:04 AM Bug #2445: Carp vip renaming broken IPsec VPN tunnels that reference carp interfaces.
- This is the upgrade code existing there.
Normally the section with s///g should have taken care of that.
Probably y... -
10:50 AM Revision 739808f7: Make file names match to make this work. Also use zone name in the file to not mix things
-
10:48 AM Revision 6b517c76: Make file names match to make this work
-
10:15 AM Revision 99f95f7d: Add the 3G mode display, really needs a function that translates these into sane display numbers for strength and mode.
- The mode is actually a combination of LED color 4 = blue(idle), 5 = cyan(connected), and submode 7 = HSDPA
I need to ... -
09:47 AM Revision fe7fef64: Fix command, remove spurious '
-
09:41 AM Revision 7efe5ac5: Initialize the statistics, also parse on MODE messages
-
09:35 AM Revision d1796d06: Kill the old 3gstats collector. Clarify the log message
-
08:53 AM Revision 71f4a2b7: Unbreak adding IPv6 static routes
-
08:00 AM Bug #2038: Some 3G WANs on 2.0.x do not come up on cold boot
- Chapter 7.5 of the "HUAWEI UMTS Datacard Modem AT Command Interface Specification" lists the ^MODE messages to determ...
-
07:21 AM Revision 73ce6909: Make sure to bail the stats script if we can not open the modem device.
05/22/2012
- 09:58 PM Revision 6bb73ce6: Remove dead code.
- 09:58 PM Revision fffbfef0: Fix DynDNS issue introduced by f3b2b2a (_dnsIP was not set).
- 09:58 PM Revision 37f3e704: Add the option to use a custom Dynamic DNS Provider via an Update URL and Result Match.
-
09:39 PM pfSense Packages Bug #2448 (Rejected): Snort pfPort is breaking a full package builder run
- may just be bad timing/false alarm... will open if I can reproduce it again.
-
09:36 PM pfSense Packages Bug #2448 (Rejected): Snort pfPort is breaking a full package builder run
- Packages are not being built on the nightly run properly because snort is causing the build to fail.
Observe:
<pr... -
09:00 PM Revision 6bab92aa: Oops add forgotten global for config
-
08:59 PM Revision aec0f2fd: If extra bw attributes are supplied during reauthentication apply and log them
-
08:57 PM Revision 9261915b: If extra bw attributes are supplied during reauthentication apply and log them
-
07:18 PM Revision 5c0b5f64: Unlock if error occurs
-
07:17 PM Revision 66c18912: Unlock if error occurs
-
06:19 PM Bug #2446: pfSense fails to queue UDP packets
- Can you detail the rule you say assigns the traffic to your desired queue?
-
10:13 AM Bug #2446: pfSense fails to queue UDP packets
- Some extra details:
The floating rule assigning traffic A to the special queue should be set to "apply the action ... -
10:06 AM Bug #2446 (Closed): pfSense fails to queue UDP packets
- Replication instructions:
Create CBQ or PRIQ shaper on WAN interface and create a default queue and another queue ... -
06:19 PM Bug #2447 (Resolved): Duplicated destination IPs in easy rule.
- On snapshot released Tue May 22 08:05:51 EDT 2012
Easy rule adds duplicated "destination" IPs instead of "source"... -
01:26 PM Revision 43d735de: Use "proto 112" instead of tcpdump's vrrp keyword since it's a little behind the times and doesn't realize that ip6+vrrp is valid. And since we're not using the vrrp keyword directly anymore, let's call it CARP instead.
-
06:13 AM Revision 5a61fd69: Make sure that we match multiple characters.
- Ticket #2415
-
05:49 AM Revision e7de69fb: First round of CARP vip renaming changes
- Ticket #2415
-
05:10 AM Bug #2409: ipfw - entryzerostats
- in version 2.1.0 (bild 18May2012) an error is confirmed.
-
04:18 AM Bug #2038 (Resolved): Some 3G WANs on 2.0.x do not come up on cold boot
- This turned out to be a specific issue with ZTE modems and pin lock.
I've switched to a huawei modem and found a g... -
03:54 AM Bug #2278: IPv6 Carp vip both master on FreeBSD 8.3
- Ermal - you can put the time to Coltex
-
03:51 AM Bug #2278 (New): IPv6 Carp vip both master on FreeBSD 8.3
-
03:50 AM Bug #2278: IPv6 Carp vip both master on FreeBSD 8.3
- Still hitting the double master issue in the Xs4all DC carp
-
02:39 AM Bug #2445: Carp vip renaming broken IPsec VPN tunnels that reference carp interfaces.
- $i = 0;
foreach($config['ipsec']['phase1'] as $phase1) {
if($phase1['interface'] == "vip131")
$config['ipsec'][... -
02:34 AM Bug #2445 (Resolved): Carp vip renaming broken IPsec VPN tunnels that reference carp interfaces.
- Because of the vip renaming per interface any IPsec VPN tunnels, or endpoints referencing a CARP vip are now broken a...
05/21/2012
-
05:01 PM Revision ee8c34f4: Properly test for the address family now that the array says what it's supposed to be.
-
04:57 PM Revision 44b054ce: Add the address family tag to the gateway groups array
-
02:10 PM Revision c0ae3bfb: Don't auto-toggle the "do not backup rrd" setting - we do not want this on unless the user explicitly selects it. It makes for very, very large backup files and must default to off.
-
01:41 PM Revision 2b095a33: Correct the rrd update command
-
01:35 PM Revision 852171dd: Read in the correct interface file
-
01:31 PM Revision 5e589685: Add 3G statistics for Huawei modems, split the Cellular stats out to per interface instead of global.
05/20/2012
-
11:52 PM Revision 612f5198: Modify the tar parameters to exclude .git
-
09:11 PM Bug #2444: DynamicDNS doesn't update on WAN IP change
- I am not 100% sure what you mean,
my DSL modem is connected to PF and DSL_WAN PF interface manages the PPPoE
connec... -
08:49 PM Bug #2444 (Feedback): DynamicDNS doesn't update on WAN IP change
- is the public IP actually on the firewall, not the modem? That's usually the cause, since in such cases it's impossib...
-
08:14 PM Bug #2444 (Closed): DynamicDNS doesn't update on WAN IP change
- I have a DSL WAN whose IP changes often.
If i manually make a change to the DSL_WAN interface, DynamicDNC updates ... -
07:15 PM Revision c6d0f00b: Allow modification of gateway groups even if the gateways are down.
-
06:57 PM Revision 96cd928b: Allow saving on system.php if the gateways are down.
-
06:01 PM Revision 793d3c96: Attempt to Eject the CD device on 3G sticks for Huawei and ZTE devices.
-
06:01 PM Revision 1de3cd87: Act on wireless interfaces too for linkup.
- Redmine ticket #2440
-
05:37 PM Feature #2443 (New): Automatically start 3G usb interfaces upon plugin
- And cleanup the old LCK files from /var/spool/lock/LCK..cuaU0.0
devd should be able to do this for us. It says it ... -
05:10 PM Bug #2440 (Feedback): Wireless client nic set for DHCP does not start dhclient
-
05:10 PM Bug #2440: Wireless client nic set for DHCP does not start dhclient
- Hoping the devd changes resolve this, hoping for the best. Wireless is 802.11, not ethernet
-
12:15 PM Bug #2440 (New): Wireless client nic set for DHCP does not start dhclient
- Helps in most cases but can still cause it to take too long making the dhcp client fail. Needs proper check_reload_st...
-
08:47 AM Bug #2440 (Resolved): Wireless client nic set for DHCP does not start dhclient
-
07:44 AM Bug #2440: Wireless client nic set for DHCP does not start dhclient
- The wireless interface reconfigure (Even with persist settings toggled) causes the interface to go down which then ne...
-
07:32 AM Bug #2440: Wireless client nic set for DHCP does not start dhclient
- check_reload_status is firing off for vr1, but not for ural0_wlan0 eventhough the kernel is marking it as up....
-
07:10 AM Bug #2440: Wireless client nic set for DHCP does not start dhclient
- Error output only lists:...
-
04:28 PM Revision e4834b57: Merge pull request #111 from vizvayu/bug2374
- Fix of bug #2374 "When entering values in firewall rules leading and trailing spaces are not deleted" bis
-
03:51 PM Revision 03f7925a: Fix variable test
-
12:50 PM Revision 2a210730: Initialize variable if it's not set
-
12:48 PM Revision ffd2059b: This command works better with Huawei modems. Needs more testing
-
11:21 AM Revision 1cba5c58: Make sure we don't accidentaly clobber the v4 dns servers with empty fields from v6
-
11:13 AM Revision 3930a9c0: Prevent duplicate gateways from showing up if the interface is down. Redmine ticket #2442
-
10:38 AM Revision d23ef852: Set the retry value to 60 seconds, this is not attempts, this is seconds before it needs a reply. So if the DHCP server was any sort of slow it would fail to aquire a lease. This was true for my wireless network at home. Plus, on various other lossy links, even cable modems this could be true.
- Redmine ticket #2440
retry time;
The retry statement determines the time that must pass after the
... -
10:34 AM Bug #2437 (Feedback): PHP missing bcmath (that was solved for pfSense 2.0 two years ago, re-discovered in the latest pfSense 2.1)
- Change just checked in, let me know how it goes.
-
10:09 AM Revision b2ff5d17: Add the PPP automatic interface type. This would show the _PPP gateways.
-
08:46 AM Bug #2442 (Resolved): Duplicate gateways showing for down interfaces
- Should be resolved properly, or atleast for now, pretty sure we'll run into something new at some point. When adding ...
-
07:55 AM Bug #2442 (Resolved): Duplicate gateways showing for down interfaces
- When dynamic interfaces are down, these will show up even if there is already a manual entry for it too.
I have a ...
05/19/2012
-
06:03 PM Bug #2441 (Closed): Setting up a new PPP interface (3g) hangs the webUI
- Trying to add a new PPP interface on a system that has no such configuration results in the UI hanging.
A system t... -
06:01 PM Bug #2440 (Resolved): Wireless client nic set for DHCP does not start dhclient
- I've configured a wireless nic as a client (infrastructure) on Opt3. It is set for DHCP but although the link comes u...
-
05:00 PM Feature #2148: Dynamic DNS Update Frequency
- I've been able to reproduce it.
When i open WAN_DSL connection and apply changes it does force a DynDNS update.
H... -
04:38 PM Feature #2148: Dynamic DNS Update Frequency
- I've yet to see it update on WAN IP change.
My WAN_DSL ip has changed, the dsl modem is connected directly to PF.
D... -
12:06 PM Feature #2439 (Resolved): XEN Para-virtualized Drivers Support
- It's possible to include the xen DomU driver in pfsense 2.1 ?
- 02:22 AM Revision fd86d829: Overcome laziness to avoid unnecessary loop
- 01:57 AM Revision 90f90934: Fix of bug #2374 "When entering values in firewall rules leading and
- trailing spaces are not deleted"
05/18/2012
-
07:49 PM Revision 1346306c: Allow 802.1p tags to be controlled from firewall rules edit screen
-
05:58 PM Feature #2438 (Duplicate): Inbound traffic shaping on unpredictable ADSL - the qosmon approach
- I've been using pfSense for some time now, and it's wonderful. I've never been able to solve a problem, anyway: QoS o...
-
05:12 PM Bug #2437 (Resolved): PHP missing bcmath (that was solved for pfSense 2.0 two years ago, re-discovered in the latest pfSense 2.1)
- 1.
When "Radius Accounting" is enabled and trying to disconnect a connected client in the captive portal gui - the f... -
05:10 PM Revision 26c31b86: Merge pull request #109 from marcelloc/patch-11
- Patch 11
-
05:09 PM Revision 38026252: Include movable code to reorder list,save button, domtt title messages, also base64 decode option, description and custom text to checkbox fields.
- New options need xml config to be included on package xml files, so no changes to packages that do not use these func...
-
03:36 PM Bug #2373: There were error(s) loading the rules... (Floating rules bug)
- Also worth noting, though similar to the fact that it happens if you upgrade from 2.0.1 (noted above) is that loading...
-
04:11 AM Revision 9c408ade: Merge pull request #108 from vizvayu/dashboard-cpufreq-update
- System info widget on dashboard now updates CPU Frequency automatically
- 03:53 AM Revision 4dedd18a: System info widget on dashboard now updates CPU Frequency automatically
- 03:41 AM Revision 735021f5: Merge pull request #94 from vizvayu/master
- Added description text for IPSec tunnel status in "Status: IPsec" page
- 01:37 AM Revision a425a28b: Moved status text to img title (tooltip)
- 01:37 AM Revision 4976f453: Added description text for IPSec tunnel status in "Status: IPsec" page
-
12:17 AM Revision c1361a9f: feature #2413 Allow IPv6 interface configuration from the menu
05/17/2012
-
11:17 PM Revision 416e1530: normalize indentation
-
11:02 PM Revision cd485c4f: remove some log_error calls
-
11:00 PM Revision 283d78c6: bug fix for #2426
- Input validaton on interface gateway creation box needs to reject duplicate names
-
10:33 PM Revision a0edece9: report errors adding a gateway through ajax calls
-
09:32 PM Revision 8dcca9b5: - also rename $section arg to $section_name in some functions to clarify
- - also robustify parsing for <tagname> and bulletproof the handling of
certain errors -
09:30 PM Revision 428c289f: allow null to be passed as 2nd arg to parse_config_xml*
- in which case entire config is returned
-
09:14 PM Revision ff9fbc7b: fix 'XML error: no Array object found!' errors
-
08:49 PM Revision 976d0213: fix cosmetic bug when developer was turned on.
- highlight the hidden menu item differently.
-
08:13 PM Feature #2413 (Feedback): Allow IPv6 interface configuration from the menu
- implemented in commit:c1361a9f
I've done basic testing but this needs a lot more testing than i'm able to do so i'... -
07:43 PM Revision dcb94db5: fix for #2231
- Don't activate master "Save Settings" button on traffic graph min/max.
-
07:22 PM Revision f757431d: more verbose log_error on rrdtool restore failure
-
07:22 PM Revision 5d51f00e: log_error if rrdtool restore calls fail
-
07:16 PM Revision 08877746: restore_rrddata() adds log_error calls and uses -f
-
07:13 PM Revision 7a865f03: add -f to 'rrdtool restore' call
-
06:58 PM Bug #2426 (Resolved): Input validaton on interface gateway creation box needs to reject duplicate names
- fixed in commit:283d78c6
-
04:53 PM Bug #2426: Input validaton on interface gateway creation box needs to reject duplicate names
- Darren, do you think you can prevent this duplicate name issue in the Ajax call?
-
06:55 PM Revision 7eead1fc: add rrddata to backup/restore dropdowns.
-
06:05 PM Revision c9a19238: indentation cleanup
-
06:03 PM Revision 754b75d0: move certain code to new function restore_rrddata()
-
05:46 PM Bug #2373: There were error(s) loading the rules... (Floating rules bug)
- I just want to say, that amd64 architecture is affected also.
Have just tried it. -
05:30 PM Feature #2356: Fill the "Track Interface" prefix drop down list asynchronously
- Seth, reassigning to you for you to test/close/assign back to me as needed.
-
05:29 PM Feature #2436 (Feedback): Enhance the restore section of the Backup/Restore section
- Fixed in commit:428c289f and commit:8dcca9b5.
Reassigning to you so you can do further testing.
Please close if e... -
03:48 PM Feature #2436 (Resolved): Enhance the restore section of the Backup/Restore section
- If restoring a partial config, we currently assume that only that section is uploaded. This is somewhat counterintuit...
-
04:37 PM Feature #2123: Backup RRD files using the xml dump and restore from RRD tools
- Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 90164860 bytes) in /usr/local/www/di...
-
03:21 PM Feature #2123: Backup RRD files using the xml dump and restore from RRD tools
- I've also added "RRD Data" as a backup option in the dropdowns. Requires a little special handling in diag_backup.ph...
-
03:18 PM Feature #2123: Backup RRD files using the xml dump and restore from RRD tools
- I've confirmed that -f is actually necessary anyway and added -f and log_error calls on failure to all the rrdtool re...
-
10:12 AM Feature #2123: Backup RRD files using the xml dump and restore from RRD tools
- The quick test I just did, backup config.xml on i386, upgrade to amd64, then restore config.xml didn't fix the RRD fi...
-
04:17 PM Bug #2231 (Resolved): Dashboard: Traffic Graph: Unable to save settings
-
03:38 PM Bug #2231: Dashboard: Traffic Graph: Unable to save settings
- fixed in commit:dcb94db5
-
12:25 AM pfSense Packages Bug #2435 (Resolved): SquidGuard: Deprecated function 'eregi' warnings
- In squidguard_configurator.inc, there are a number of uses of @eregi()@ which is now deprecated in PHP 5.3. This cau...
05/16/2012
-
06:03 PM Revision b61e8960: Teach mwexec and mwexec_bg how to optionally clear signal masks, and use that when launching ntp or ntpdate.
-
05:21 PM Revision 10e741d5: ntpdate was hanging, use the same hacky fix that works for ntpd and it works too. All happy, even from a cold boot on ALIX 2d3 with no RTC battery.
-
05:17 PM Revision 9cf11774: Fixup halt and reboot to catch the output from the shutdown process properly.
- Conflicts:
usr/local/www/halt.php
usr/local/www/reboot.php -
05:15 PM Revision b40e9b1c: Fixup halt and reboot to catch the output from the shutdown process properly.
-
02:57 PM Revision b3f2cc0f: Fixup ntpd logging
-
02:49 PM Revision 90df3bd8: On its own, ntpd does not sync fast enough at bootup, so bring back the ntpdate sync but improve it so it can't get stuck forever.
- Conflicts:
etc/rc.newwanipv6 -
02:48 PM Revision 0b8e9d38: On its own, ntpd does not sync fast enough at bootup, so bring back the ntpdate sync but improve it so it can't get stuck forever.
-
09:48 AM Bug #2231 (New): Dashboard: Traffic Graph: Unable to save settings
- Something still isn't 100% here - When you activate a drop-down to expand one of the closed graphs, it also activates...
05/15/2012
-
09:01 PM Revision 317d1c0b: Hackish workaround for ntpd failing to move away from init when called from within PHP 5.2, PHP 5.3 has a better workaround.
-
08:50 PM Revision df973fcb: Revert "Clear process signals before exec() or ntpd misbehaves if called from PHP on i386." -- this only works on PHP 5.3
- This reverts commit ac4bc5853f75a8f8467f5c53704f33e2066c3da6.
-
08:42 PM Revision 82deea60: Fix syntax here too in case we need to revive it.
-
08:41 PM Revision 11e06906: Fix syntax here too in case we need to revive it.
-
08:37 PM Revision 7dab8995: Clear process signals before exec() or ntpd misbehaves if called from PHP on i386.
-
08:36 PM Revision ac4bc585: Clear process signals before exec() or ntpd misbehaves if called from PHP on i386.
-
08:08 PM Revision d80eae9a: Update gitsync with latest changes from master branch
- feef287ead62815b1a67bac15ebaa2d36226d4e2 - Remove obsolete files after gitsync
26b8990538c71c99df8e95fd5fada57f79465d... -
07:26 PM Revision ae26412f: Move git package name/URL to the configuration variables section.
-
06:27 PM Revision da5b3e83: Merge pull request #107 from bcyrill/patch-1
- correct closing tags
-
06:22 PM Revision ec18e696: correct closing tags
-
05:45 PM Revision e37eeb49: Only process this if it's an array
-
05:05 PM Revision ac911619: Use a text description instead of a code.
-
05:04 PM Revision 0770e603: Add NTP status page using ntpq.
-
05:04 PM Revision 321f3076: Use FreeBSD's ntpd instead in the backend
-
05:04 PM Revision 49551bbf: With FreeBSD's ntpd, the current options are irrelevant, but we can have a nice status page
- Conflicts:
usr/local/www/fbegin.inc -
05:01 PM Revision a0c16779: Fix ntp name here too
- Conflicts:
etc/inc/priv.defs.inc -
05:00 PM Revision 02414e3a: s/OpenNTPD/NTP/ for log pages and menu entry, to save space (and make it easier if we switch)
- Conflicts:
usr/local/www/diag_logs.php
usr/local/www/diag_logs_auth.php
usr/local/www/diag_l... -
03:44 PM Revision c886fed9: As suggested by wagonza, using SAMEORIGIN for X-Frame-Options is sufficient here, and does allow the traffic graphs to work. Fixes #2419
-
03:11 PM Revision 29c2c1db: Fix quoting - can't use ' if we want to expand a variable inside the string.
-
02:35 PM Revision 25890c50: Use a text description instead of a code.
-
11:40 AM Bug #2419 (Feedback): Possible Clickjacking Vunerability
- Applied in changeset commit:c886fed9ba6a19fface58c918be5d7b111cca1f3.
-
10:56 AM Bug #2419 (New): Possible Clickjacking Vunerability
- Adding this bit in auth.inc broke the realtime traffic graphs:
@Header("X-Frame-Options: DENY");@
We either nee...
05/14/2012
-
08:30 PM Revision e078c882: Add NTP status page using ntpq.
-
07:44 PM Revision 42135f07: Use FreeBSD's ntpd instead in the backend
-
06:50 PM Revision a8543b59: With FreeBSD's ntpd, the current options are irrelevant, but we can have a nice status page
-
06:17 PM Revision ffc7d2c4: Fix ntp name here too
-
06:11 PM Revision ae2c143a: s/OpenNTPD/NTP/ for log pages and menu entry, to save space (and make it easier if we switch)
-
04:39 PM Revision 547c56c4: Create $altnames earlier, and also fix a bracing issue with this if statement. Fixes certificate importing.
-
04:27 PM Revision e052047d: Whoops, don't flip these since I negated the test.
-
03:09 PM Revision d9c96fb1: Flip this test around since it's safer to assume the dev mode is tun. Ticket #2432
-
02:03 PM Revision 93efafec: Fix redirect when saving settings in the widget, it was landing on the widget page instead of returning to the dashboard.
-
02:02 PM Revision e6b16f89: Fix redirect when saving settings in the widget, it was landing on the widget page instead of returning to the dashboard.
-
01:08 PM Revision 310c29c6: Make the ppp-linkup script understand both address families.
-
12:54 PM Revision e32cb5d0: Make the ppp-linkup script understand both address families.
-
12:23 PM Bug #2432: OpenVPN Client Specific Override ifconfig-push
- Yeah you're right I started to fix it one way then changed my mind halfway, but didn't back out the original change. ...
-
12:19 PM Bug #2432: OpenVPN Client Specific Override ifconfig-push
- I understand your concern about upgrade users since i appreciate when upgrade runs smoothly.
I've looked at the ... -
11:03 AM Bug #2432: OpenVPN Client Specific Override ifconfig-push
- Not sure that making them server-specific will be feasible. At the very least, that will cause problems for upgrade u...
-
10:48 AM Bug #2432 (Closed): OpenVPN Client Specific Override ifconfig-push
- Hello,
I'm using a snapshot of pfSense 2.1 (20120419-1059). My pfSense installation holds two distinct VPN serve... -
11:25 AM pfSense Packages Bug #2429: Hostname issues in OpenVPN Client Export
- I replaced the two {{ with { in /usr/local/pkg/openvpn-client-export.inc on two lines in the file.
It works perfectly! -
10:20 AM pfSense Packages Bug #2429 (Feedback): Hostname issues in OpenVPN Client Export
- Applied in changeset commit:0d639e580d2fc2651a4386a4248ac9e9b97d949d.
-
05:14 AM pfSense Packages Bug #2429 (Resolved): Hostname issues in OpenVPN Client Export
- When i select installation hostname when i export it looks like this in the configuration file:
remote host.{domain.... -
09:44 AM Bug #2431 (Rejected): Receiving warning message when adding/modifiyng exclude list in Services Status widget (dashboard)
- This has already been fixed in 2.0.2/2.1.
-
06:02 AM Bug #2431 (Rejected): Receiving warning message when adding/modifiyng exclude list in Services Status widget (dashboard)
- Warning message displayed :...
-
09:43 AM Bug #2430 (Rejected): Receiving warning message when adding/modifiyng exclude list in Services Status widget (dashboard)
- Duplicate
-
06:36 AM Bug #2430: Receiving warning message when adding/modifiyng exclude list in Services Status widget (dashboard)
- Sorry for duplicate submit.
-
06:02 AM Bug #2430 (Rejected): Receiving warning message when adding/modifiyng exclude list in Services Status widget (dashboard)
- Warning message displayed :...
05/11/2012
-
04:49 PM Revision bbdc5919: remove the stuff triggering display of relay protocol row
-
04:49 PM Revision 06d84cf3: allow port in virtual servers to be left blank
- in which case listening port would be inherited from the pool
-
04:49 PM Revision 183ea34c: allow aliases for the ipaddr field in virtual servers (PEV-394754)
- 03:16 PM Revision 777c202f: make use of the correct file to send notifications
- 03:12 PM Revision 62fc138e: make use of the correct file to send notifications
-
03:04 PM Revision 937cec84: fix for bug #2422 could not remove entries from CP Allowed Hostnames
-
11:34 AM Bug #2428 (Resolved): Removing a limiter breaks any references to limiters after it
- It appears that the limiters are referenced only by their index in the current list of limiters, instead of by name o...
-
11:08 AM Bug #2427 (Feedback): /etc/rc.firmware_notify
- Wrong file been referenced. Fix in commit:62fc138e7096d9b28026a86244baad56980494f4
-
06:36 AM Bug #2427 (Resolved): /etc/rc.firmware_notify
- When doing an upgrade the shell script /etc/rc.firmware is executed. As part of the upgrade process this script execu...
-
10:59 AM Bug #2422 (Resolved): Captive Portal: Allowed Hostnames tab - cannot remove a previously added hostname
- fixed in commit:937cec84
-
07:29 AM Bug #2426: Input validaton on interface gateway creation box needs to reject duplicate names
- [Edit: the ticket system seems to have chopped off all my text except the last line...]
The real issue is making a d... -
04:31 AM Bug #2426 (Resolved): Input validaton on interface gateway creation box needs to reject duplicate names
- If two gateways are created with the same name/label, and one of them is set as default for an interface, it's not po...
05/10/2012
-
07:17 PM Revision 4dfd930e: cleanup: code for building arrays for autocompleted fields
-
06:25 PM Revision c9649cf8: Merge pull request #106 from irvingpop/master
- max_procs adjustments for small memory systems, attempt 2
-
06:17 PM Revision 98f20e35: max_procs adjustments for small memory systems, attempt 2
- Per Jim P's feedback, move max_procs completely out of
system_webgui_start() and move all of the memory/procs decis... -
06:00 PM Revision 5b84bd65: add autocomplete for port (PEV-394754)
-
05:51 PM Revision 04d4bcdf: use get_alias_list for port field in load_balancer_pool_edit
-
05:48 PM Revision a0539faa: prep work: function get_alias_list()
- I wrote this function primarily to remove a lot of duplicate code
that's there because of a lot of those autocomplete... -
04:39 PM Revision a1f77238: add autocomplete to load_balancer_pool_edit.php (PEV-394754)
- we also enable the json extension here.
-
04:05 PM Revision 9b420daf: fix a bug in anti-clickjack that made all pages blank
- https://github.com/bsdperimeter/pfsense/commit/babac37a3b9a676525fff422011b9f3c0f9bd39f
-
03:54 PM Revision f3d7f30e: update help text in port fields to Firewall -> Aliases (PEV-394754)
-
03:51 PM Revision babac37a: Add click jacking support. Ticket #2419
-
02:15 PM Bug #2063: PHP Memory Usage too high for 128MB RAM Systems (like ALIX)
- pull request attempt number 2: https://github.com/bsdperimeter/pfsense/pull/106
-
12:35 PM Bug #2063: PHP Memory Usage too high for 128MB RAM Systems (like ALIX)
- Pull request to set the number of web configurator processes to 1 on ALIX systems with 256MB RAM or less
https://... -
12:56 PM Revision 970934dc: Revert "Bump config version to take care of new vips" - forgot to revert this when I reverted the main vip commit.
- This reverts commit ccf346ddb80997a4426484c25e5c3bd8a223990f.
-
12:02 PM Bug #2359 (Resolved): Typo: OpenVPN Configuration Page has two items "Server DHCP Bridge Start"
-
11:49 AM Bug #2359: Typo: OpenVPN Configuration Page has two items "Server DHCP Bridge Start"
- This is already fixed for 2.1: https://github.com/bsdperimeter/pfsense/pull/96
-
11:46 AM Bug #2328: Numerous non-CP logs ending up in CP logs
- http://www.php.net/manual/en/function.openlog.php#98307 suggests an alternate way of specifying the facility that may...
-
11:35 AM Bug #2328: Numerous non-CP logs ending up in CP logs
- That looks like anything in PHP that uses log_error() is doing that.
However log_error is doing this:... -
11:45 AM Bug #2419 (Feedback): Possible Clickjacking Vunerability
-
09:57 AM Feature #2424 (Resolved): Allow masking of pass-thru MACs
- ipfw supports masking MACs, sort of like a CIDR, and this could be a useful feature to allow, for example, all phones...
-
09:34 AM Bug #2423 (Closed): OpenNTPD seems to fail over time and can cause unintended clock skew.
- Over time, NTP eventually loses the ability to keep the clock in sync and sometimes will actually set the wrong time,...
- 07:07 AM Revision 5b5c9911: Add _ to the list of are allowed characters
- 07:02 AM Revision 06f746c3: Add _ to the list of are allowed characters
-
06:51 AM Bug #2373: There were error(s) loading the rules... (Floating rules bug)
- Some error
Snap 2.1-DEVELOPMENT built on Wed May 9 21:13:38 EDT 2012 ... -
02:34 AM Feature #2418 (Closed): HttpOnly and Secure flag are not set in the HTTP response header
- Awesome stuff.
-
02:27 AM Feature #2418: HttpOnly and Secure flag are not set in the HTTP response header
- Wow.. Fantastic
Works as i had hoped
thank you for the quick fix - 01:57 AM Revision 82618bec: fix typo
- 01:57 AM Revision b1aa904f: fix typo
05/09/2012
-
08:55 PM Revision 2f65de89: Add initial support for subjectAltName - still needs some select love for the "type" field, freetext for now for testing (it does work, cert gets the specified subjectAltName).
- 05:51 PM Revision ddb71e4c: Handle HTTPOnly and Secure flags on cookies
-
05:25 PM Revision ca88c37e: Include TCP flags in CLI filter parser output (if present)
- 05:08 PM Revision 49ddf9a1: Handle HTTPOnly and Secure flags on cookies
-
04:49 PM Bug #2422 (Assigned): Captive Portal: Allowed Hostnames tab - cannot remove a previously added hostname
-
04:38 PM Bug #2422 (Resolved): Captive Portal: Allowed Hostnames tab - cannot remove a previously added hostname
- When trying to delete a previously added hostname from a Captive Portal zone - nothing happens. There is no error, bu...
-
01:49 PM Feature #2418 (Feedback): HttpOnly and Secure flag are not set in the HTTP response header
- Change committed in commit:49ddf9a10ff3379162d437622f664cfe924b4552 - let us know if you happy this please.
-
09:47 AM Feature #2418 (Closed): HttpOnly and Secure flag are not set in the HTTP response header
- According to our tests for PCI-DSS certification by a professional security auditing team.
PfSense lacks the HttpO... -
01:34 PM Bug #2421 (Resolved): Filter log parser misinterprets some rare lines resulting in TCP:lo for the proto/flags
- The following raw log entry:...
-
12:08 PM Feature #2416: Hybrid NAT mode that is a mix of Auto+Manual
- While we're doing this, may as well add a fourth outbound NAT option
* Off (all outbound NAT disabled)
Then someo... -
09:52 AM Bug #2419 (Resolved): Possible Clickjacking Vunerability
- According to our tests for PCI-DSS certification by a professional security auditing team.
PfSense has a possible ...
05/08/2012
-
10:22 PM Revision 30274157: Revert "Make vips vhid be unique per parent interface!" - per cmb, this should not have been on RELENG_2_0 see ticket #2415
- This reverts commit 4d0c032c528b10221a2ef894b5eca34f6fda39a7.
Conflicts:
etc/inc/openvpn.inc
etc/in... -
07:43 PM Revision 8a4b381f: Update zoneinfo using latest zones from FreeBSD
-
07:42 PM Revision 23b1fc49: Update zoneinfo using latest zones from FreeBSD
-
07:05 PM Revision b80e57d4: Pull in fix for Ticket #1917 to RELENG_2_0 as well.
-
07:02 PM Revision 84931046: Back out duplicated fix from 107e8acc - Ticket #1917 was already fixed before this was added.
-
06:20 PM Bug #2415: Fallout from CARP vip interface names changes
- I reverted that commit, had to adjust a few things since it didn't come out cleanly, but it should be out of RELENG_2...
-
06:02 PM Bug #2415: Fallout from CARP vip interface names changes
- this needs to be backed out entirely from RELENG_2_0, it wasn't supposed to be there.
-
12:19 PM Bug #2415 (Resolved): Fallout from CARP vip interface names changes
- Now that CARP VIP interfaces have been renamed, some issues have come up. They are now named, for example, wan_vip241...
- 05:15 PM Revision 7ff663d3: Respect ['upload_path'] for upload_tmp_dir for PHP
-
04:54 PM Revision 1e476e11: $realif only exists on apply, which this code path would never touch. Change to use the configured interface instead. Fixes #2212
-
04:49 PM Revision 76ac460b: $realif only exists on apply, which this code path would never touch. Change to use the configured interface instaed. Fixes #2212
-
04:15 PM Feature #1986: Find a way to list logged in IPsec xauth users
- Also this does not seem to work.
[2.1-DEVELOPMENT][root@pfsense-amd64.localdomain]/root(68): racoonctl show-sa isa... -
09:17 AM Feature #1986 (New): Find a way to list logged in IPsec xauth users
- Setting this back to New since we still need code in the GUI to read this yet.
-
03:40 PM Bug #2030 (Feedback): Timezones need to update for Russia
- Updated zoneinfo in commit:23b1fc4 and commit:8a4b381
-
03:29 PM Bug #2030 (New): Timezones need to update for Russia
- We do keep a copy of zoneinfo.tgz in the git repo. Hasn't been touched since 2008, and our code pulls the zones from ...
-
03:37 PM Revision 76db94c2: Add last check timestamp to gateway status (actually just fix it, since the code was there, but not functional) Fixes #1155
-
02:53 PM Feature #1917: DHCP server support for multiple domains in search list
- Looks like someone also checked in a fix in commit:107e8acc that broke this again. It appears the fix on this ticket ...
-
02:46 PM Bug #2348 (Resolved): rc.filter_synchronize is broken
- This appears to be properly fixed and functional on current snapshots.
-
02:38 PM Bug #2332: gateways always renamed to "dynamic". Implement proper IPv6 support
- This seems mostly OK but I discovered one case the other day that is still problematic.
If you have a PPPoE interf... -
02:34 PM Bug #2144 (Resolved): pfSense dyndns for Namecheap doesn't work with hostnames containing "."
- I added a hostname with a . to one of my domains using Namecheap DNS and it updated fine, so this is fixed.
-
02:21 PM Feature #2416 (Resolved): Hybrid NAT mode that is a mix of Auto+Manual
- Often we suggest people switch to manual outbound NAT to make some very basic adjustments (such as a static port for ...
-
01:03 PM Revision cb01726c: Move the stop_packages code to a function, and call the function from the shell script, and call the function directly for a reboot. Fixes #2402 and ticket #1564
-
12:50 PM Bug #2212 (Feedback): dhclient not stopped after changing interface from DHCP to other type
- Applied in changeset commit:76ac460bd4a95a8600b05cecebd8d66f20feed70.
-
12:20 PM Bug #2300: Static routes for IPsec peers missing when attached to IP Alias VIP
- The problem seems to be, in part, that this checks for an interface name of carp or vip, but with IP alias it would a...
-
11:55 AM Feature #2347 (Resolved): Add routes into the routing table for delegated IPv6 prefixes.
- Closing this as the routing for PD nets is working great now, I plugged my ALIX in with a stock config and it pulled ...
-
11:55 AM Bug #2414 (Resolved): IPv6 DHCP WAN, issue routing firewall-generated traffic
- From Seth:
> There is a problem where pfSense itself can not reach the ipv6 internet [with a DHCPv6 WAN] leading to ... -
11:40 AM Bug #1155: [patch] status_gateways.php doesn't show last check time
- Applied in changeset commit:76db94c28d3cabe38f0b0921c21f80dfddcf93fc.
-
11:32 AM Bug #1155 (Feedback): [patch] status_gateways.php doesn't show last check time
- The code was already there to show that timestamp, so I fixed it up to show it (not quite how this patch was, better ...
-
09:46 AM Feature #2413: Allow IPv6 interface configuration from the menu
- That second bit about v4 already has a ticket - #2074
-
03:23 AM Feature #2413 (Resolved): Allow IPv6 interface configuration from the menu
- The current console menu only allows for IPv4 interface configuration. We need to add support for IPv6 interface conf...
-
09:39 AM Feature #2242 (Resolved): Add status of lagg(4) member interfaces to Status > Interfaces
-
09:38 AM Bug #2127 (Resolved): Full Update Image Size is too large on 2.1
- This has been OK for a while, the images are now under 90MB, which is down considerably from where they started.
-
09:13 AM Bug #1112 (New): IPsec GUI/backend missing RADIUS support
- Setting this back to New only since we still need to code up GUI support for this. The backend part should be OK.
-
09:05 AM Bug #1427 (Resolved): Typo? in /tmp/post_upgrade_command prevents UP kernel upgrade
-
09:03 AM Bug #2314 (Resolved): Members to bridge not added
- Tested newest snapshots and it works for me.
-
08:58 AM Bug #2370 (Resolved): syslog.conf requires IPv6 literal
- This has been working fine for me since that last commit. Logs are coming across IPv6 and are targeted at an IPv6 IP ...
-
08:58 AM Bug #2402 (Resolved): rc.stop_packages synxtax error when executed
- This has been working fine for me since my last fix. No errors, and it runs as expected during shutdown.
-
08:53 AM Bug #2360 (Resolved): OpenVPN "tap" mode not working
-
07:35 AM Bug #2360: OpenVPN "tap" mode not working
- appears to be working now. Thanks!
05/07/2012
-
10:53 PM Revision c8deb624: Merge pull request #102 from marcelloc/patch-9
- Fix missing description in rowhelper.
-
10:48 PM Revision 31366121: Fix missing description in rowhelper.
-
08:58 PM Revision 58d642df: Use a better default update url
-
07:57 PM Revision 8358b341: Whoops, typo. Fixed now.
-
07:57 PM Revision 45eb5e65: Whoops, typo. Fixed now.
-
07:04 PM Bug #1667: L2TP server does not respond properly from a CARP VIP
- This seems to be the classic UDP problem where the system will source the reply from the "closest" address rather tha...
-
07:01 PM Revision 17113cea: Don't pass a shell escaped version of $realifl to pfSense_bridge_add_member(). Fixes bridging
-
07:00 PM Revision e5e88403: Don't pass a shell escaped version of $realifl to pfSense_bridge_add_member(). Fixes bridging
-
06:36 PM Revision c4ac3144: Fix missing paren
-
06:21 PM Bug #1892 (Resolved): Cannot static add static IPv6 route.
-
06:20 PM Revision fe7d855d: Bump to 2.0.2-RC1 for testing.
-
06:17 PM Feature #1184 (Resolved): Certificate Manager - Ability to add nsCertType=SERVER extension to certificates
-
06:16 PM Feature #1258: dyndns - DNS Made Easy
- make a merge request on github and this will make 2.1.
-
06:14 PM Feature #1801: Intermediate SSL certs box
- easily worked around by pasting in the cert chain for the CA cert.
-
06:12 PM Bug #2336 (Resolved): PHP extensions missing in amd64 builds (at least)
-
06:03 PM Bug #1662 (Resolved): DNS server gateway selection missing input validation
-
05:27 PM Revision cd619518: Merge pull request #101 from marcelloc/patch-8
- Patch 8
-
05:27 PM Revision 9a1a0fac: Merge pull request #100 from marcelloc/patch-7
- Stop service needs to wait process to be stopped before trying to restar...
-
04:06 PM Revision 9a1248b3: Stop service needs to wait process to be stopped before trying to restart it.
-
03:53 PM Revision 6ae78f08: Stop service needs to wait process to be stopped before trying to restart/start it.
-
03:52 PM Bug #2314: Members to bridge not added
- Ah you're right, I didn't copy/paste or save from the test box to the repo like I usually do. Easy to miss in the fon...
-
03:47 PM Bug #2314: Members to bridge not added
- I think it works, with one small typo fixed:
pfSense_bridge_add_member($bridgeif, $realifl);
last later should ... -
03:29 PM Bug #2314 (Feedback): Members to bridge not added
- This should be fixed now by commit:e5e8840356e1f9ac2cd0e12f511599b5df84ace9
-
03:29 PM Bug #2360 (Feedback): OpenVPN "tap" mode not working
- This may be fixed now with commit:e5e8840356e1f9ac2cd0e12f511599b5df84ace9
05/06/2012
- 06:07 PM Revision 89341b50: fix vouchers
-
04:02 PM Revision 5db4d1eb: Test if this is an array before using it as an array.
-
12:06 PM Revision 18e89fd6: Merge pull request #99 from znerol/feature/master/dns-host-alias
- Support name based aliasing via CNAMEs or some other mechanism.
-
08:10 AM Feature #2410 (Feedback): Support name based aliasing via CNAMEs or some other mechanism.
- Applied in changeset commit:5a2a83493cdb3f647b4913f3b84ef864103148f5.
-
04:35 AM Feature #2410: Support name based aliasing via CNAMEs or some other mechanism.
- https://github.com/bsdperimeter/pfsense/pull/99
-
03:17 AM Bug #2412 (Resolved): inbound 6to4 traffic does not work in pf
- With the WAN configured as 6to4 it is possible to browse the internet but it is not possible to initiate traffic from...
05/05/2012
- 07:47 PM Revision 85d1b51b: Fix whitespace: use spaces in services_dnsmasq_edit.php in order to match coding style of surrounding html
-
05:51 PM Feature #2410: Support name based aliasing via CNAMEs or some other mechanism.
- The code seems to work fine for me. I added a host, gave it an alias, and it was populated in /etc/hosts as expected....
-
05:46 PM Feature #2410: Support name based aliasing via CNAMEs or some other mechanism.
- Whitespace could use some cleanup, but usually patches will work so long as they are clean. It may have been that the...
-
03:45 PM Feature #2410: Support name based aliasing via CNAMEs or some other mechanism.
- Whitespace is handled somewhat inconsistently throughout the pfsense codebase. I tried hard to mimic the style of exi...
-
03:16 PM Feature #2410: Support name based aliasing via CNAMEs or some other mechanism.
- Done. https://github.com/znerol/pfsense Branch: feature/master/dns-host-alias
-
12:40 PM Feature #2410: Support name based aliasing via CNAMEs or some other mechanism.
- mater is 2.1 (for now)
Interesting, I just did another gitsync to bring my VM up to the most current code and it s... -
12:22 PM Feature #2410: Support name based aliasing via CNAMEs or some other mechanism.
- Actually the patch is against the master branch on github. The last commit i see in my git log is https://github.com/...
-
11:30 AM Feature #2410: Support name based aliasing via CNAMEs or some other mechanism.
- Was that patched against 2.0.1 or 2.1? It doesn't appear to apply to 2.1.
-
07:35 AM Feature #2410: Support name based aliasing via CNAMEs or some other mechanism.
- Patch attached. It applies on an installed pfsense 2.0.1 as well as onto git master.
In order to patch a running s... - 11:07 AM Revision 5a2a8349: Add support for aliases in DNS Forwarder, fixes #2410
05/04/2012
-
10:37 PM Bug #2411 (Closed): OpenVPN Automatic Rule Generation does not update TCP/UDP
- The only place that makes a firewall rule for OpenVPN is in the wizard, and that's a one-time deal. There isn't an au...
-
10:06 PM Bug #2411 (Closed): OpenVPN Automatic Rule Generation does not update TCP/UDP
- When changing the protocol type of an OpenVPN connection, the automatic firewall rule generation does not update the ...
-
12:18 PM Revision 3eebc3eb: Minimal non-intrusive change for SSHDCond package extra parameters
-
10:27 AM Bug #2398: tftpd and tftp-proxy (inetd?) dies after WAN periodic reset
- Anyone can confirm this issue ?
-
08:02 AM Feature #2410: Support name based aliasing via CNAMEs or some other mechanism.
- Hosts file would work great I suspect, interface mock looks good too. Thanks!
-
05:42 AM Feature #2410: Support name based aliasing via CNAMEs or some other mechanism.
- Hi. I probably could put together something for pfSense 2.0. Instead of implementing "real" CNAME support I'd like to...
05/03/2012
-
04:48 PM Revision a52706d5: missed a spot for #2407
-
04:34 PM Revision 470d24a3: implement #2407: create config option for captive portal listening port
-
02:54 PM Revision 6b2d4b5a: fix for #2356 'track interface'
- convert pulldown for ipv6 prefix id to a textbox. validation is
implemented. -
02:53 PM Revision 331103ae: Fix syntax error in bogons update
-
12:55 PM Feature #2410 (New): Support name based aliasing via CNAMEs or some other mechanism.
- Resubmission of feature request 129 from 1.2.2
I would like to request that this feature reconsidered. Regardless ... -
12:42 PM Feature #129: CNAME support for dnsmasq
- Cancel that, entering new ticket for this in 2.x.
-
11:50 AM Feature #129: CNAME support for dnsmasq
- I would like to request that this ticket be reopened and the feature reconsidered. Regardless of what DJB may think,...
-
12:39 PM Bug #2409 (Resolved): ipfw - entryzerostats
- I apologize for my english...
pfSense 2.0.1
When logging in CaptivePortal (auth Radius, Accounting Updates - Start/... -
10:49 AM Feature #2356: Fill the "Track Interface" prefix drop down list asynchronously
- aggh, stupid dumb idiot darren forgot to commit changes.
they're there now in commit:6b2d4b5a . -
07:01 AM Bug #2408 (Rejected): Wireless run driver crashes kernel
- we don't create or control drivers, report the problems upstream to FreeBSD, after testing with a newer base stock Fr...
-
06:52 AM Bug #2408 (Rejected): Wireless run driver crashes kernel
- The run driver for a common 11n Ralink chipset casues severe system instability and kernel crashes. I have tested tha...
05/02/2012
-
12:30 PM Revision 8d70eb8d: When the "OpenVPN" users type was commented out of the drop-down, this function wasn't adjusted so it was off by one in its counts, making the URL table update frequency box disabled.
-
12:29 PM Revision aa11af07: When the "OpenVPN" users type was commented out of the drop-down, this function wasn't adjusted so it was off by one in its counts, making the URL table update frequency box disabled.
05/01/2012
-
08:00 PM Revision e0c45357: Move routing (radvd, routed, ospf, bgp) to its own log since these daemons can be really spammy at times.
-
06:25 PM Revision 3a1e12cf: Add some safety belt checks to status_queues.php to prevent exec blocking or infinite redirection loops. Better error display when things go wrong.
- 05:32 AM Revision eedd093a: correct hostname variable, and use FQDN
- 04:41 AM Revision a1a0cd46: fix saving of hard timeout
- 04:29 AM Revision 402ffa96: fix text
-
01:20 AM Bug #2330 (Resolved): vouchers disappear when saving
- fixed
-
12:25 AM Bug #2406 (Resolved): No IP alias within the subnet of a CARP IP can be deleted
- The input validation that triggers: ...
04/30/2012
-
07:32 PM Revision 60dd7649: Move the stop_packages code to a function, and call the function from the shell script, and call the function directly for a reboot. Fixes #2402 and ticket #1564
-
04:29 PM Revision 6478e71e: Fix display of widgets with configuration controls in IE. From Gertjan on the forum. See http://forum.pfsense.org/index.php/topic,42977.0.html
-
03:30 PM Bug #2402 (Feedback): rc.stop_packages synxtax error when executed
- Applied in changeset commit:60dd7649d02e4a82f9d57953359bf312038f174a.
-
03:07 PM Bug #2402: rc.stop_packages synxtax error when executed
- Looks like that syntax:...
-
02:09 PM Revision cb8c684e: Better error handling for crypt_data and also better password argument handling
-
02:08 PM Revision 15855fbc: Better error handling for crypt_data and also better password argument handling
-
01:03 PM Bug #2405 (Rejected): Lack of traffic shaping queue parent can take firewall down (pass no traffic)
- Simple: create a Traffic Shaper queue but forget to choose a queue parent.
from: http://tech.akom.net/archives/59...
04/28/2012
-
02:54 PM Bug #2402 (Resolved): rc.stop_packages synxtax error when executed
- PHP appears to be choking on the new changed syntax in /etc/rc.stop_packages. It's giving a syntax error when execute...
-
08:30 AM Revision 3f76f90e: Add note to NAT Reflection helper indicating where it works.
-
08:12 AM Revision 8c06bd69: Change description of 1:1 NAT Reflection setting to be more accurate.
-
07:38 AM Revision f9053c0c: Restore protection for the "destination any" case for port forward NAT Reflection, which was forgotten when shuffling around code before committing. Also add a couple other missing checks.
-
04:06 AM Revision de6348e6: Fix preservation of the selection of interfaces on input errors for floating rules.
-
03:59 AM Revision 43fd29df: Fix preservation of the selection of interfaces on input errors for floating rules.
04/27/2012
-
11:02 PM Bug #2373: There were error(s) loading the rules... (Floating rules bug)
- I've done some testing and I think the patch to add the "match" action must be missing.
-
02:52 PM Bug #2373: There were error(s) loading the rules... (Floating rules bug)
- Found this issue and have following observation:
It is always the first match rule that gives the syntax error, no m... -
02:44 PM Bug #2401 (Resolved): Mounting read-only after mounting read-write can be very slow on NanoBSD
- Mounting read-only after mounting read-write can be very slow on recent NanoBSD images on 2.1, based on FreeBSD 8.3
... -
08:30 AM Revision eb2d95f9: Use !empty instead of isset to prevent accidental deletion of the last used repository URL when firmware update gitsync settings have been saved without a repository URL.
-
08:08 AM Feature #2400 (Closed): GUI options for WPA Enterprise with identity/password
- WebCfg WiFi Interfaces allows one to connect to just about anything, but connecting to a AD network with identity/pas...
-
08:04 AM Feature #1825: Dynamic DNS client IPv6 support
- Just noticed that https://dns.he.net/ supports IPv6 for DynDNS now. Update format is identical to IPv4, just send the...
-
04:07 AM Bug #2399: Typo from IGMP proxy service in system log
- I confirm, "ERRO" is in igmpproxy daemon.
-
01:47 AM Revision c5d8b1f4: Use !empty instead of isset to prevent accidental deletion of the last used repository URL when firmware update gitsync settings have been saved without a repository URL.
-
01:37 AM Revision f122c1a3: Add a space between Note: and the message. Also move the period into the gettext string, since punctuation is not language-independent.
04/26/2012
- 10:36 PM Revision d372a32d: fix text. ticket #2399
- 10:34 PM Revision f2ff5c8b: fix text. Ticket #2399
-
10:04 PM Revision 0637b0a9: fix for Bug #2253 Quality Graphs not generated after 'Reset RRD Data'
- Seth Mos wrote:
> This needs to call setup_gateways_monitor() in after
> enable_rrd_graphing() to fix.
Also note: $r... -
06:33 PM Bug #2399: Typo from IGMP proxy service in system log
- with the exception of "ERRO" which isn't in our code.
-
06:30 PM Bug #2399 (Resolved): Typo from IGMP proxy service in system log
- fixed, thanks
-
03:02 PM Bug #2399 (Resolved): Typo from IGMP proxy service in system log
- 1) igmpproxy: *+ERRO+*: There must be at least 2 Vif's where one is upstream. (vifcount 16, upStreamVif -1)
2) php: ... -
06:08 PM Bug #2330: vouchers disappear when saving
- Has this issue been resolved? You can answer by marking it as such. Thanks. :-)
-
06:06 PM Bug #2253: Quality Graphs not generated after 'Reset RRD Data'
- > Cool, the one-minute graph is refreshing
by which I don't mean scintillating or interesting. :-) -
06:05 PM Bug #2253 (Resolved): Quality Graphs not generated after 'Reset RRD Data'
- Cool, the one-minute graph is refreshing. Marking as resolved.
-
06:00 PM Bug #2253 (Assigned): Quality Graphs not generated after 'Reset RRD Data'
- I've implemented the fix in commit:0637b0a9. Let's see if graphs get populated again...
-
02:42 PM Bug #2398: tftpd and tftp-proxy (inetd?) dies after WAN periodic reset
- TFTP package info from config.xml :...
-
02:33 PM Bug #2398 (Closed): tftpd and tftp-proxy (inetd?) dies after WAN periodic reset
- When the WAN (PPPoE in my case) connection is restarted by custom periodic reset or when connection resetted by ISP, ...
-
10:37 AM Feature #2356: Fill the "Track Interface" prefix drop down list asynchronously
- P.S. The "array" would literally be every single value from 0 to (2 ^ _n_) - 1 for some value of _n_ (at least that's...
-
10:34 AM Feature #2356: Fill the "Track Interface" prefix drop down list asynchronously
- The code displays and validates for the range already.
!http://i.imgur.com/L0yoJ.png! - 03:26 AM Revision 10c1352e: Merge pull request #97 from alowther/master
- Additional RIP options
04/25/2012
- 09:51 PM Revision b30e3be4: options for auto-summary/supernet
-
06:55 PM Feature #2386: Bridge member that is not an assigned interface
- I'm adding screenshots of a configuration I use that would benefit from this. For firewall rules, the only interface...
-
06:27 PM Revision 655e4d41: The descr field might not exist, use a uppercase friendly name
-
03:17 PM Bug #2314: Members to bridge not added
- This is probably due to the changes made in
commit:2064fa2eb4e2bca59f7c675969ee13752283d4c1
And in pfSense-tools... - 06:39 AM Revision 0cfaf2c8: Revert "Use 'Packet Loss or High Latency' as the default option when creating a new gateway group"
- This reverts commit 6ee04b69c8ace44e798e29e665039455aad1c439.
- 06:39 AM Revision 8de4a8bc: Revert "Use 'Packet Loss or High Latency' - use a fullstop, fixes #2397"
- This reverts commit 1cc71979e44d7955084a0cdb50d7698239fac770.
- 05:03 AM Revision f81398b0: Merge pull request #96 from irvingpop/master
- Simple OpenVPN bridge wording fix
-
05:00 AM Revision 850ae59e: Correct wording "Server Bridge DHCP Start" is shown instead of "Server Bridge DHCP End"
-
02:59 AM pfSense Packages Bug #2396 (Closed): apache_mod_security_package missing mod_proxy.so (and perhaps others)
-
02:40 AM Todo #2397 (Rejected): Gateway Groups
- Currently when defining a new Gateway group, the default trigger level is set to 'Member Down'.
It ideally should be... -
02:40 AM Todo #2397: Gateway Groups
- Applied in changeset commit:8de4a8bc4d52755dce1fbf2fe80d45687397a429.
-
01:22 AM Todo #2397: Gateway Groups
- Hrmm. I think http://doc.pfsense.org/index.php/Multi-WAN_2.0#Trigger_Level needs to be changed then to indicate this ...
-
01:03 AM Todo #2397: Gateway Groups
- "member down" doesn't mean link down, or it never has historically up to and including recent 2.1, it means it's comp...
04/24/2012
- 07:19 PM Revision 1cc71979: Use 'Packet Loss or High Latency' - use a fullstop, fixes #2397
- 07:18 PM Revision 6ee04b69: Use 'Packet Loss or High Latency' as the default option when creating a new gateway group
-
03:20 PM Todo #2397 (Feedback): Gateway Groups
- Applied in changeset commit:1cc71979e44d7955084a0cdb50d7698239fac770.
-
03:12 PM Todo #2397: Gateway Groups
- Make sure to touch gwlb.inc return_gateways_array(); it defaults to memberdown for any dynamic gateway. That needs to...
-
02:51 PM Todo #2397 (Rejected): Gateway Groups
- Currently when defining a new Gateway group, the default trigger level is set to 'Member Down'.
It ideally should be... -
02:37 PM pfSense Packages Bug #2396: apache_mod_security_package missing mod_proxy.so (and perhaps others)
- Sorry for the duplicate, I hadn't seen issue #2318.
-
02:35 PM pfSense Packages Bug #2396 (Closed): apache_mod_security_package missing mod_proxy.so (and perhaps others)
- Related to issue #1244
This was supposed to have been fixed but I'm still getting the following error on a fresh i... -
10:03 AM Bug #2395 (Closed): Port forwards with destination "any" on OpenVPN interface creates invalid rules
- Seems to be a duplicate of #1882 which should be fixed in RELENG_2_0 and master.
-
07:52 AM Bug #2395 (Closed): Port forwards with destination "any" on OpenVPN interface creates invalid rules
- These two lines: ...
-
06:50 AM Revision f7cd5647: Make sure to stop the dhcpleases6 process
- 02:14 AM Revision cb062635: routes should not be skipped when IPsec is on WAN, as WAN may not be the default gateway.
- 02:14 AM Revision 58070e1c: routes should not be skipped when IPsec is on WAN, as WAN may not be the default gateway.
Also available in: Atom