pfSense

06/22/2012

11:23 PM Revision ea89b8df: Merge pull request #152 from bcyrill/patch-8

IGMPproxy, service_status widget Scott Ullrich

11:19 PM Revision ba1fabef: IGMPproxy, service_status widget

Cyrill B

11:09 PM Revision 43a92efd: Merge pull request #151 from bcyrill/patch-7

Make sure it's an array as an empty string has a count > 0 Scott Ullrich

11:09 PM Revision 65493c3d: Merge pull request #150 from bcyrill/patch-6

Do not try to start igmpproxy when there's no igmpentries configured. Scott Ullrich

11:09 PM Revision 50c74f0f: Make sure it's an array as an empty string has a count > 0

Cyrill B

11:03 PM Revision f86f6fb2: Do not try to start igmpproxy when there's no igmpentries configured.

Cyrill B

10:16 PM Revision 7b883165: Merge pull request #149 from bcyrill/patch-5

fix typo Scott Ullrich

10:15 PM Revision b8da4d00: fix typo

Cyrill B

06:27 PM Revision f5df5e84: re-indentation.

Darren Embry

05:36 PM Bug #2518 (Resolved): Gateway in DHCP Server Doesn't Use Default Setting

In the DHCP server settings the gateway option reads:
"The default is to use the IP on this interface of the firew... Steve Vigneau

12:00 PM Revision d4059316: Add missing global

Warren Baker

11:59 AM Revision 2ec063f9: Add missing global

Warren Baker

11:14 AM Bug #2511: DHCPv6 Shows Wrong DUID

Having thought about it a little more, it's probably to strip the ; from the end of the lines. Suggested fix is to ad... Phil Lavin

09:34 AM Bug #2511: DHCPv6 Shows Wrong DUID

Got bored at work... don't tell the boss. Found the issue.
The awk clean pattern in status_dhcpv6_leases.php remov... Phil Lavin

08:52 AM Bug #2511: DHCPv6 Shows Wrong DUID

Sorry, that's the wrong file. Right one attached.
Phil Phil Lavin

03:47 AM Bug #2511: DHCPv6 Shows Wrong DUID

Here's the file, if it helps. As above, DUID Windows reports is:
00-01-00-01-13-3E-DF-3B-A4-BA-DB-03-7F-BA
DUID... Phil Lavin

06/21/2012

10:29 PM Feature #2513 (Closed): Associate applicable static route to Gateway Monitor rule

didn't notice this when I opened mine, closing in favor of #2514 Chris Buechler

10:22 PM Feature #2513 (Closed): Associate applicable static route to Gateway Monitor rule

This is based on a "message":http://lists.pfsense.org/pipermail/list/2012-June/002408.html to the pfSense email list:... Moshe Katz

10:27 PM Bug #2514 (Resolved): static routes for monitor IPs should be removed

Since apinger in 2.0 and newer binds to specific IPs, and the policy routing for firewall-sourced traffic bound to a ... Chris Buechler

08:34 PM Bug #2511: DHCPv6 Shows Wrong DUID

It's in /var/dhcp/var/db/dhcpd6.leases - but it's encoded.
It's possible there is a buglet in the parsing code, DH... Jim Pingle

05:45 PM Bug #2511: DHCPv6 Shows Wrong DUID

Where is this file? I'll check the DUIDs in it. Phil Lavin

02:07 PM Bug #2511: DHCPv6 Shows Wrong DUID

ok, wow, I think those DUID values we show are straight from the dhcp leases file. Could be a bug in dhcpd.
Needs mo... Seth Mos

01:29 PM Bug #2511 (Resolved): DHCPv6 Shows Wrong DUID

The DHCPv6 server is issuing leases. It has issued 2a02:b90:7004:4000::8710 to a Windows 7 PC and displays the DUID a... Phil Lavin

06:23 PM Bug #2495: pfsense doesn't seem to know what its WAN IP is

I can confirm this; OpenVPN is binding to a random IP that's IP Aliased. Corey Quinn

05:15 PM Revision a448b35f: Restore this code that was accidentally reverted

Jim Pingle

02:00 PM Bug #2512 (Closed): DHCPv6 Server/RA Link is wrong

Jim Pingle

01:59 PM Bug #2512: DHCPv6 Server/RA Link is wrong

Sorry, my bad - my snapshot is a few days old and I didn't see a fixed bug in the tracker. Phil Lavin

01:57 PM Bug #2512: DHCPv6 Server/RA Link is wrong

Which page exactly? The main DHCP6 page should have been fixed a couple days ago by commit:bfb005344d122b6cc304f0e686... Jim Pingle

01:54 PM Bug #2512 (Closed): DHCPv6 Server/RA Link is wrong

This page says "The DHCP lease table can be viewed on the Status: DHCP leases page.". This links to the standard DHCP... Phil Lavin

01:34 PM Revision 0d5eff9f: Add "idle" to clarify that legitimate active connections would not be dropped by the pf optimization mode.

Jim Pingle

11:23 AM Feature #2123: Backup RRD files using the xml dump and restore from RRD tools

Jim P wrote:
> We're open to that but it requires a lot of changes in RRD tool syntax, fonts, and so on that also re... Cyrill B

11:11 AM Feature #2123: Backup RRD files using the xml dump and restore from RRD tools

We're open to that but it requires a lot of changes in RRD tool syntax, fonts, and so on that also require pulling in... Jim Pingle

11:10 AM Feature #2123: Backup RRD files using the xml dump and restore from RRD tools

You should try to upgrade the rrdtool as the memory consumption required during restore has been reduced drastically.... Cyrill B

10:54 AM Revision cbf4dec9: Merge pull request #148 from phil-davis/master

Fix time display on dashboard and other places Seth Mos

10:17 AM Revision 06c4bb10: Use config array to get the timezone. syscfg is no longer defined here.

Phil Davis

10:15 AM Revision c8083ee2: Use config array to get the timezone. syscfg is no longer defined here.

Phil Davis

10:14 AM Revision 119f89c8: Use config array to get the timezone. syscfg is no longer defined here.

Phil Davis

03:48 AM Bug #2349 (New): vlan(4) needs altq adaption on FreeBSD 8.3++

This patch broke ARP on a VLAN for directly connected devices. E.g. the switch IP address.
You can communicate wit... Seth Mos

03:30 AM Feature #2471: null routing of unused address space

I found that the ordering of -blackhole is required to be on the end of the command, or was that the opposite? I chan... Seth Mos

03:22 AM Feature #2471: null routing of unused address space

Sorry for the late reply!
the -blackhole seems not to do anything. still loops at the pfbox with ipv6. tested a bi... Hannu Teulahti

06/20/2012

04:45 PM Revision e4610069: Make sure to skip "unexpected" RA messages from other interfaces, we don't want those.

Seth Mos

04:32 PM pfSense Packages Bug #2350: Freeradius2 does not start up

.PBIs for amd64 and i386 are now up.
freeradius.inc was modified to fit pfsense2.1 environment.
Basic authenticatio... Alexander Wilke

03:27 PM pfSense Packages Bug #2509 (Resolved): Snort pfsense_rules should go away

Snort's pfsense_rules no longer exists and should be removed from the package. Chris Buechler

01:35 PM Revision 27746f77: Make sure that the limits are included in the normal ruleset, otherwise pf will use the defaults.

Seth Mos

05:45 AM Bug #1841: TCP state issue when traffic passing through a GRE tunnel within IPSEC

Sorry, should have mentioned, both pairs of firewalls are running 2.0.1 Colin Petrie

05:44 AM Bug #1841: TCP state issue when traffic passing through a GRE tunnel within IPSEC

I have the same problem as well, over gif tunnels as well as gre.
I use IPSEC transport mode between the CARP WAN ... Colin Petrie

06/19/2012

07:05 PM Revision 9bdb6a13: Remove null character at end of file

Erik Fonnesbeck

04:15 PM Bug #2038: Some 3G WANs on 2.0.x do not come up on cold boot

Found a generic 3G modem device wader that caters to a lot of existing kit. Biggest drawback is that it's python. Not... Seth Mos

02:43 PM Bug #2507 (Rejected): nanobsd is incredibly slow to save

Duplicate of #2401 Jim Pingle

02:42 PM Bug #2507 (Rejected): nanobsd is incredibly slow to save

Since upgrading to 2.1 snapshots the web interface is incredibly slow to save any settings. The pages load quickly en... Phil Lavin

01:59 PM Bug #2458 (Resolved): Pfsense not registering DNS servers found by PPP

Chris Buechler

01:35 PM Bug #2458: Pfsense not registering DNS servers found by PPP

Works for me too now, thanks a lot. Vladimir Suhhanov

01:45 PM Revision f2d5c538: Fix trailing whitespace

Jim Pingle

12:30 PM Revision cc43c4f8: Remove testing/debugging entry

Jim Pingle

11:56 AM pfSense Packages Bug #2345 (Resolved): Varnish3 Install Fails on pfsense 2.1 Head

Jim Pingle

10:11 AM pfSense Packages Bug #2345: Varnish3 Install Fails on pfsense 2.1 Head

I can now confirm that the latest snapshot [2.1-BETA0 (amd64) built on Mon Jun 18 20:06:29 EDT 2012] fixes the proble... Jostein Elvaker Haande

03:22 AM Bug #2506: filterdns needs help for IPv6

Aliases can have both IPv4 and IPv6 addresses. Ermal did add some IPv6 support bits, but I'm not sure if he added qua... Seth Mos

02:17 AM Feature #1668: OpenVPN Client Export support Tunnelblick

Creating a Tunnelblick configuration (not a installer bundle) seems pretty straightforward as the uncompressed config... Mathieu Simon

01:51 AM Revision 3fccb440: fix text

Chris Buechler

01:48 AM Revision eb004d5d: fix text

Chris Buechler

06/18/2012

11:45 PM Bug #2506 (Resolved): filterdns needs help for IPv6

filterdns appears to solely use IPv4 IPs in aliases. Need to determine how to handle that, especially whether PF tabl... Matt Bochenek

10:55 PM Feature #2505 (Resolved): Toggle button to disable/enable multiple firewall rules

I'd like to be able to disable and enable multiple firewall rules at once. It would make it easier for troubleshootin... Matt Bochenek

08:59 PM Revision d51927d2: Update pbi_create to current code from pc-bsd

Jim Pingle

05:51 PM Revision 68b624ec: Correct typo

Seth Mos

05:43 PM Revision 61c4383d: A few launch improvements so that configuring the DHCP6 client on the WAN it immediately kicks in.

With the fixed rc.newwanipv6 it should immediately spring to life.
Redmine ticket #2414 Seth Mos

05:39 PM Revision 63127eee: Make sure that we configure the track interface from the DHCP6 wan, correct typo.

Redmine ticket #2414 Seth Mos

04:37 PM Revision 2972b3e7: Now that we actually have a IP protocol tag in the config.xml we can make this check a lot simpler and do less guessing.

Redmine ticket #2503 Seth Mos

04:14 PM Bug #2414: IPv6 DHCP WAN, issue routing firewall-generated traffic

Just tested a upgrade from a 2.0.2 VM to 2.1, configured WAN for DHCP6 and LAN as track, prefix id. 0
Does not bring... Seth Mos

04:12 PM Revision 6be02801: Use awk instead of grep, this works on a v4 PPPoE connection for me. Need to verify that it works for 3G too.

Redmine ticket #2458 Seth Mos

03:45 PM Bug #2503: Changing monitor IP results in "The IPv6 monitor address <IPv4 IP> can not be used with a IPv4 gateway'."

I saw room for improvement regardless, we now have a ipprotocol tag so we don't have to guess the address family. Jus... Seth Mos

02:58 PM Bug #2503: Changing monitor IP results in "The IPv6 monitor address <IPv4 IP> can not be used with a IPv4 gateway'."

edit a static IPv4 gateway, blank out the monitor IP, save. Edit it again, try to put in a monitor IP, and it does this. Chris Buechler

02:51 PM Bug #2503 (Feedback): Changing monitor IP results in "The IPv6 monitor address <IPv4 IP> can not be used with a IPv4 gateway'."

Can you give me what specific case this applies too? I can't replicate it with a static IPv4 gateway. Seth Mos

02:47 PM Bug #2503: Changing monitor IP results in "The IPv6 monitor address <IPv4 IP> can not be used with a IPv4 gateway'."

Not able to replicate just yet.
I have a static gateway on my LAN for the Cisco 1811 and I can add a monitor IP just... Seth Mos

03:43 PM Revision ce35c606: Don't fall back to fetching PBIs from FreeBSD, they have none.

Jim Pingle

03:37 PM Revision ce73b2c5: Support IPv6 aliases, the frontend already does. Removing does not work yet.

See ticket #2483 Seth Mos

03:24 PM Bug #2458 (Feedback): Pfsense not registering DNS servers found by PPP

Ok, replaced cut with awk and now it does what I intended, fixed on PPPoE test and PPP 3G test. (v4 only) Seth Mos

11:06 AM Bug #2458 (New): Pfsense not registering DNS servers found by PPP

Chris Buechler

02:53 PM Feature #2462 (Resolved): New 3G (PPP) provider

Yeah, *99# is the default dial string for these types of devices, similar to bluetooth. Pretty much the defined dial ... Seth Mos

02:51 PM Feature #2471 (Resolved): null routing of unused address space

Appears to be resolved? Seth Mos

02:43 PM Bug #2483: IPv6 Interface Aliases not functioning

Ok, so I added code to add the IP alias for IPv6, but removing does not work.
Ermal, can you add support for IPv6 ... Seth Mos

02:15 PM Revision bfb00534: Fix link

Jim Pingle

02:12 PM Revision 20e7e444: Correct variable name. Fixes packet capture interface validation.

Jim Pingle

12:31 PM pfSense Packages Bug #2345: Varnish3 Install Fails on pfsense 2.1 Head

I will wait a couple of days, try the new snapshot and report back the status.
In the mean time, thanks! Jostein Elvaker Haande

11:38 AM pfSense Packages Bug #2345 (Feedback): Varnish3 Install Fails on pfsense 2.1 Head

This is because the package is set to download from a non-pfSense site, something we're trying to clean up. The PBI i... Jim Pingle

11:17 AM pfSense Packages Bug #2345: Varnish3 Install Fails on pfsense 2.1 Head

I can confirm this workaround to work on 2.1 [2.1-BETA0 (amd64) built on Mon Jun 11 18:14:31 EDT 2012]. Jostein Elvaker Haande

03:06 AM Bug #2349: vlan(4) needs altq adaption on FreeBSD 8.3++

Working great for me now, thanks Ermal for your hard work! Mark Uhde

12:20 AM Revision 2e2eb012: Brazilian Portuguese (pt_BR) translations added

Vinícius Coque

06/17/2012

09:43 PM Feature #2504 (New): lagg enhancements

The FreeBSD man page for lagg gives an example of configuring a lagg with a WiFi interface as a member.
The pfSens... Arthur Hartwig

07:35 PM Revision f7eb043c: Use require_once() prevent declaration errors.

Fixes redmine ticket #2502 Seth Mos

06:28 PM Bug #2503 (Resolved): Changing monitor IP results in "The IPv6 monitor address <IPv4 IP> can not be used with a IPv4 gateway'."

adding a monitor IP to a static IPv4 gateway results in "The IPv6 monitor address <IPv4 IP> can not be used with a IP... Chris Buechler

04:48 PM Bug #2502 (Resolved): PHP Fatal error, encrypted_configxml() redeclared.

Should be fixed now, caused by external config loader. Seth Mos

04:10 PM Bug #2502 (Resolved): PHP Fatal error, encrypted_configxml() redeclared.

PHP Errors:
[01-Jan-2000 01:11:16 UTC] PHP Fatal error: Cannot redeclare encrypted_configxml() (previously declared... Seth Mos

06/16/2012

06:14 PM Revision 15d18321: Merge pull request #147 from marcelloc/master

improve alias popup in firewall_rules Scott Ullrich

05:58 PM Revision 4e8854c6: improve alias popup in firewall_rules

include url_table list up to 10000 items
read alias only on mouseover
use table to list columns
show edit shortcut
sh... Charlie Root

04:48 AM Feature #2501 (Resolved): Add no-sync option for firewall rules

Add an option to firewall_rules_edit.php for no-sync to keep states from being synced via pfsync. Chris Buechler

02:07 AM Revision 3acbad17: This apparently is breaking reinstalls. Revert "Actually make reinstallpkg remove the bionaries and really reinstall them"

This reverts commit 3ddb92a6a52e2345684c11da72ef6853b82d2915. Jim Pingle

02:07 AM Revision 5a61e863: Revert "Remove missed line"

This reverts commit 2b52fee241484b1d52b2435e1716461ba2e36486. Jim Pingle

02:06 AM Revision 2229d94e: This is apparently breaking reinstalls. Revert "Actually make reinstallpkg remove the bionaries and really reinstall them"

This reverts commit 12b0fa564dc9b9ffe1773855e6ab528f4a5c7a5e. Jim Pingle

06/15/2012

10:32 PM Revision 72f99ce1: add Tusmobil provider info.

feature #2462 Darren Embry

08:54 PM Revision 72a22ae2: Merge pull request #146 from bcyrill/patch-2

Added radvd / Updated Captive Portal service widget Jim Pingle

06:56 PM Feature #2462 (Feedback): New 3G (PPP) provider

Darren Embry

06:26 PM Feature #2462: New 3G (PPP) provider

Okay, it's *actually* in github now. Forgot to 'git push' again. ;-) Darren Embry

06:22 PM Feature #2462: New 3G (PPP) provider

Seth, serviceproviders.xml is in our repos but there's an upstream.
I'm not sure how to specify the "phone number" o... Darren Embry

04:50 PM Feature #2462: New 3G (PPP) provider

Seems like low hanging fruit.
Add a PPP device under interfaces assign, there, create a new PPP and there is a dro... Seth Mos

05:53 PM Bug #2483: IPv6 Interface Aliases not functioning

Seth, this one's way over my head. (at least for now.) Darren Embry

04:45 PM Bug #2483: IPv6 Interface Aliases not functioning

This needs both frontend and backend code. Darren can you have a look. Seth Mos

04:42 PM Feature #2361: router adv. daemon only allows for one subnet / limited options

Johannes, am I correct in understanding that you want to announce multiple prefixes with multiple settings? e.g. diff... Seth Mos

03:26 PM Feature #2361: router adv. daemon only allows for one subnet / limited options

Regarding the "common list" you mentioned, there seem to be quite a few minor variations of it but yeah I find that t... Darren Embry

03:24 PM Feature #2361: router adv. daemon only allows for one subnet / limited options

Sorry, forgot about the bit that actually modifies /var/etc/radvd.conf. The bit that modifies /cf/conf/config.xml is... Darren Embry

02:49 PM Feature #2361: router adv. daemon only allows for one subnet / limited options

user interface to add subnets looks great. But settings are not reflected in /var/etc/radvd.conf . Should the be? wi... Johannes Ullrich

03:47 PM Bug #2496: The use of php exec() and php system() with pipe '|' will fail if the first output of a os command is long enough.

Maybe xdebug issue or something else. Ermal Luçi

02:41 PM Bug #2496: The use of php exec() and php system() with pipe '|' will fail if the first output of a os command is long enough.

Hi Chris
I don't know why you guys can't reproduce this.
The code is being watched live through Xdebug v2.1.3 a... robert zelaya

04:47 AM Bug #2496 (Feedback): The use of php exec() and php system() with pipe '|' will fail if the first output of a os command is long enough.

Not sure what you're seeing, but none of us can replicate that with the exact same thing you're doing substituting di... Chris Buechler

12:25 AM Bug #2496 (Closed): The use of php exec() and php system() with pipe '|' will fail if the first output of a os command is long enough.

System:
uname -a
FreeBSD pfSense.localdomain 8.3-RELEASE-p2 FreeBSD 8.3-RELEASE-p2 #0: Mon Jun 11 02:55:34 EDT ... robert zelaya

02:38 PM Revision 61d302e0: Added radvd / Updated Captive Portal service widget

Cyrill B

02:33 PM Bug #2497 (Rejected): Captive Portal authentication is bypassed

No and please discuss this on the forum. Ermal Luçi

09:35 AM Bug #2497 (Rejected): Captive Portal authentication is bypassed

As suggested in http://forum.pfsense.org/index.php/topic,50311.0.html the "CP multiinstance patch" might have broken ... Cyrill B

01:27 PM Revision b1ed647c: Merge pull request #145 from bcyrill/patch-1

Add radvd to Status:Services #2485 Seth Mos

01:13 PM Revision 0ed8d746: Add radvd to Status:Services #2485

Cyrill B

10:37 AM Todo #2485: Add Status > Services entry for radvd if RA is enabled

Jim P wrote:
> Don't forget about the widget, too :-)
done.
Cyrill B

09:47 AM Todo #2485: Add Status > Services entry for radvd if RA is enabled

Seth or Darren will need to look over the enable test probably, I'm not sure what all is needed there.
Don't forget ... Jim Pingle

09:37 AM Todo #2485: Add Status > Services entry for radvd if RA is enabled

Added in commit:0ed8d746e2.
Needs Feedback / Closing. Cyrill B

10:02 AM Revision 2b52fee2: Remove missed line

Ermal LUÇI

10:02 AM Revision 12b0fa56: Actually make reinstallpkg remove the bionaries and really reinstall them

Ermal LUÇI

10:00 AM Revision 3ddb92a6: Actually make reinstallpkg remove the bionaries and really reinstall them

Ermal LUÇI

01:51 AM Revision e88ea344: Simplify the input validation condition for protocol

Erik Fonnesbeck

06/14/2012

08:18 PM Revision 8c4ee062: add subnets to RA; add support for aliases

hopefully finishes #2361 Darren Embry

07:32 PM Feature #1361 (Feedback): DNSMasq, source interface and IPSec VPNs

Darren Embry

12:25 PM Feature #1361 (Resolved): DNSMasq, source interface and IPSec VPNs

Hugh, your patch is in github now.
Darren Embry

05:30 PM Feature #2361: router adv. daemon only allows for one subnet / limited options

Applied in changeset commit:8c4ee06242721655f29d98064516d0c26f723b68. Darren Embry

05:22 PM Feature #2361: router adv. daemon only allows for one subnet / limited options

and forgot to commit that work until just now Darren Embry

04:12 PM Feature #2361: router adv. daemon only allows for one subnet / limited options

just added subnets and support for aliases. Darren Embry

05:04 PM Revision 622caf8f: validate dropdowns for security reasons

*really* fixes #2494 :-) Darren Embry

04:51 PM Revision f7b6c87a: minor code rearranging

move code that populates $interfaces nearer the top Darren Embry

04:30 PM Revision a0b379c8: hugh blanford patch: dnsmasq, source interface and ipsec vpns

fixes #1361 Darren Embry

04:10 PM Revision 391cd070: add validation to fields on diag_packet_capture

fixes #2494 Darren Embry

04:00 PM Revision ccb55b27: fix a couple booboos

- fbegin.inc needs to be included after <body>
- s/require/require_once/ fixes 'cannot redeclare function' error Darren Embry

01:00 PM Bug #2494 (Feedback): diag_packet_capture.php needs input validation

Applied in changeset commit:622caf8fee84e0744da2b4cd9ea5d1fc4c499388. Darren Embry

12:43 PM Bug #2494 (Assigned): diag_packet_capture.php needs input validation

Darren Embry

12:07 PM Bug #2494 (Resolved): diag_packet_capture.php needs input validation

fixed in github.
not quite sure that dropdowns need additional validation because you can't select an option that ... Darren Embry

12:24 PM Bug #2398: tftpd and tftp-proxy (inetd?) dies after WAN periodic reset

I've not spotted the trigger condition, but I can confirm I'm seeing the same condition
with '2.1-DEVELOPMENT (amd64... Mark Blackman

08:53 AM Bug #2495 (Closed): pfsense doesn't seem to know what its WAN IP is

Having upgraded from stable to 2.1-BETA0 (i386) (built on Mon Jun 11 03:04:03 EDT 2012), a strange issue has occurred... Phil Lavin

06/13/2012

08:20 PM Revision 29e566a1: Rework the banner display a bit to preserve space (could still use some shortening, but better than it was)

Jim Pingle

07:01 PM Revision bd0c2295: Put v6 IP on a new line to save horizontal space

Jim Pingle

06:49 PM Revision b835b1fa: Add a note to the GIF page suggesting that if they are adding a he.net tunnelbroker they may want a dyndns entry to keep it updated.

Jim Pingle

06:49 PM Revision 19a4caea: Adjust this size a bit for a more comfortable fit.

Jim Pingle

04:18 PM Revision 731b7a8c: Merge pull request #144 from ccesario/master

Add scrollbar in dropdown menu based in window height Scott Ullrich

04:01 PM Revision 6c9ce30d: Define the menu size dynamically

Carlos Cesario

03:59 PM Revision 6f50fcb8: Add scrollbar in dropdown menu

Carlos Cesario

02:21 PM Revision cceb3e6f: Make sure this check is reversed, that way we only pick up the legacy field if the new one isn't set.

Seth Mos

01:24 PM Revision f6e70bfc: Add scrollbar in dropdown menu

Carlos Cesario

12:10 PM Revision 9213ee05: Merge pull request #140 from marcelloc/master

fix missing match array on help pages permission Jim Pingle

02:32 AM Revision 3d03a966: Merge pull request #142 from phil-davis/master

Fix a couple of Crypto Acceleration text typos Jim Pingle

02:29 AM Revision 43669934: Fix some Crypto Acceleration text typos

Phil Davis

01:01 AM Revision d53dc7d0: fix missing match on help pages permission

Marcello Silva Coutinho

12:14 AM Bug #2494: diag_packet_capture.php needs input validation

Some of this is already done but doesn't actually report an error to the user, it simply leaves the invalid parameter... Jim Pingle

06/12/2012

11:06 PM Bug #2494 (Resolved): diag_packet_capture.php needs input validation

diag_packet_capture.php does minimal if any input validation. Every field on that page needs to be verified.
Interf... Chris Buechler

07:10 PM Revision 7530177c: Generalize the Crypto hardware option and add GUI support for AES-NI.

Jim Pingle

05:55 PM Revision 7c9a30c8: Allow autocomplete on packet capture and exec, since it's convenient to have a history there and there are no password fields.

Jim Pingle

05:54 PM Revision 5c7abe2e: Provide a way to disable the autocomplete shutoff.

Jim Pingle

04:52 PM Revision 435b4eec: This should have been 2.1 only, and it's just causing some odd package behavior on 2.0.2 (blank lines in squid's interface selection, for one). 2.1 has different code here anyhow. Revert "Added "interface_selection" type to enable interface selection in tinydns server"

This reverts commit 05d908db3ad62e46eb22bb73e397ba8bf61cb36c. Jim Pingle

03:53 PM Bug #2437: PHP missing bcmath (that was solved for pfSense 2.0 two years ago, re-discovered in the latest pfSense 2.1)

The fix provided by Seth Mos fixes the issue with bcmod() when running it from php command line, but it still doesn't... Yuri Keren

02:24 PM Revision 2e23c199: Merge pull request #139 from marcelloc/master

fix permissions check to xml package files and show only menus user has access to Scott Ullrich

02:08 PM Revision 14f5f705: fix permissions check to xml package files and show only menus user has access to

Marcello Silva Coutinho

11:03 AM Bug #2493: WAN loadbalancing rule fails on second/third safe

Jim P wrote:
> Does it work if you disable "sticky" in System > Advanced on the Misc tab?
Yes - disabling stick... Dirk-Willem van Gulik

10:59 AM Bug #2493: WAN loadbalancing rule fails on second/third safe

$title =~ s/safe/save/ Dirk-Willem van Gulik

10:57 AM Bug #2493: WAN loadbalancing rule fails on second/third safe

Does it work if you disable "sticky" in System > Advanced on the Misc tab? Jim Pingle

10:54 AM Bug #2493 (Closed): WAN loadbalancing rule fails on second/third safe

Source routing rule is fine during the first time round. And appears in the pfctl output as:... Dirk-Willem van Gulik

10:41 AM Bug #2489 (Resolved): More than one secure dynamic dns update entry fails - due to malformed keyfile - and patch

See commit:8ec0a8bc and #2068. Jim Pingle

10:39 AM Bug #2489: More than one secure dynamic dns update entry fails - due to malformed keyfile - and patch

Ermal Luçi wrote:
> Seems the fix has been committed!
Ermail - what is the commit reference - I cannot find it ... Dirk-Willem van Gulik

10:38 AM Bug #2490: Reassigning interfaces on console during restore causes them to be disabled, lose descriptions

I don't see a reason to ever unset enable there, why is that there? Is that only if you re-assign interfaces and don'... Chris Buechler

03:56 AM Bug #2490: Reassigning interfaces on console during restore causes them to be disabled, lose descriptions

The reason I asked is that interfaces.php lets you store a blank descr in the config to get the default name. Erik Fonnesbeck

02:24 AM Bug #2490: Reassigning interfaces on console during restore causes them to be disabled, lose descriptions

If descr is set the enable will not be removed.
For historic reason i left it there!
Please move on. Ermal Luçi

09:15 AM Revision ef62f989: Remove extra spaces and add closing <tr> tag

Warren Baker

09:14 AM Revision c449c5f6: Remove extra spaces and add closing <tr> tag

Warren Baker

08:30 AM Feature #1829: CARP with IPv6 support

I don't think the dhcpv6 settings are synced up to the backup yet.
You'll need to configure that manually, and sel... Seth Mos

08:11 AM Feature #1829: CARP with IPv6 support

Finally got a snapshot that has working carp+radvd.... Hannu Teulahti

04:24 AM Feature #2492 (Needs Patch): identify changes lines before "apply"

when a record in aliases or rules is changed one has to press "apply". in the meantime I would like to be able to see... Alexander Swen

06/11/2012

11:03 PM Bug #2490: Reassigning interfaces on console during restore causes them to be disabled, lose descriptions

Is there any reason to ever unset the "enable" setting there? Is not the "enable" setting only set for opt interface... Erik Fonnesbeck

04:40 PM Bug #2490 (Feedback): Reassigning interfaces on console during restore causes them to be disabled, lose descriptions

Applied in changeset commit:62784b050ad874bd8544531954b4b158036f9a23. Ermal Luçi

03:19 PM Bug #2490 (Resolved): Reassigning interfaces on console during restore causes them to be disabled, lose descriptions

When restoring a config, and reassigning interfaces at the console, somehow this happens:
* LAN/WAN are OK
* OPT in... Jim Pingle

10:09 PM Revision 3d1d6f71: Put configured limits on rules.limits file and load them before loading the ruleset. To avoid any issues with large rulests and options being loaded not first

Ermal LUÇI

09:59 PM pfSense Packages Feature #2487: DNS Servers Query Seqentially / Parallel

Attached patch file adds a DNS forwarder strict order option to System: General page.

The strict order option ... NOYB NOYB

05:00 AM pfSense Packages Feature #2487: DNS Servers Query Seqentially / Parallel

Looks like just adding the dnsmasq 'strict-order' option takes care of this.

Services: DNS Forwarder - Advance... NOYB NOYB

01:00 AM pfSense Packages Feature #2487 (Needs Patch): DNS Servers Query Seqentially / Parallel

Chris Buechler

12:18 AM pfSense Packages Feature #2487 (Needs Patch): DNS Servers Query Seqentially / Parallel

System: General Setup
DNS Servers

Option for querying each server sequentially with a specified delay, rathe... NOYB NOYB

09:53 PM Revision 5c855809: Put configured limits on rules.limits file and load them before loading the ruleset. To avoid any issues with large rulests and options being loaded not first

Ermal LUÇI

08:42 PM Revision 62784b05: Fixes #2490. If there is a descr set on the interface keep it and do not disable the iface

Ermal LUÇI

07:27 PM Bug #2491 (Resolved): disabling pfsync doesn't actually disable pfsync

After disabling pfsync (in 2.0.1/2.0.2 at least), it isn't really disabled until you reboot. Chris Buechler

06:20 PM Revision cb1d821b: Make the carp vip interface column in the widget just a smidge wider since the names are longer now.

Jim Pingle

05:04 PM Bug #2489 (Feedback): More than one secure dynamic dns update entry fails - due to malformed keyfile - and patch

Seems the fix has been committed! Ermal Luçi

10:57 AM Bug #2489 (Resolved): More than one secure dynamic dns update entry fails - due to malformed keyfile - and patch

When configuring more than one DDNS service to inform (e.g. if you have multiple WAN uplinks) - the first one will wo... Dirk-Willem van Gulik

04:17 PM pfSense Packages Bug #2486 (Resolved): Snort Stable 2.9.2.3 pkg v. 2.1.1 platform: 2.0

The files are there now. If there are other errors after load them, start new forum threads/tickets as needed. Jim Pingle

09:23 AM pfSense Packages Bug #2486: Snort Stable 2.9.2.3 pkg v. 2.1.1 platform: 2.0

The problem is the rfile in the repository is snort-2.9.2.tbz not snort-2.9.2.3.tbz so it causes a 404. Same is true ... Kevin Hart

02:17 PM Revision 79f286ab: Switch this back to attr, some older browsers have problems with prop, and attr still works for this.

Jim Pingle

01:20 PM Feature #336: Option to create lagg under assign interfaces

This should also, ideally, be able to setup bridges.
Something such as:
* Add new bridge
* Tell it which inter... Jim Pingle

10:19 AM Bug #2488 (Closed): WAN address changes to IP Alias ones randomly

This is normal, cosmetic only, and harmless.
On FreeBSD, all IPs on an interface (aliases, and the actual "first" ... Jim Pingle

07:53 AM Bug #2488: WAN address changes to IP Alias ones randomly

To be more precise, i've cuted this scenario in three screenshots,
1.png: Initial view of WAN address
2.png : Confi... Julien BERTON

07:25 AM Bug #2488 (Feedback): WAN address changes to IP Alias ones randomly

what do you mean "switches randomly"? There isn't any concept of primary vs. alias IPs, things like "WAN address" are... Chris Buechler

05:58 AM Bug #2488 (Closed): WAN address changes to IP Alias ones randomly

Hi everyone,
Recently updated my pfSense 2.0.1 to 2.1.
When configuring WAN address with IPv6 address, everything... Julien BERTON

10:05 AM Bug #2349: vlan(4) needs altq adaption on FreeBSD 8.3++

I'll test this out sometime in the next 2 weeks and report back Cino .

09:17 AM pfSense Packages Bug #1080: Snort Installation fails

I am currently having this issue too and can confirm the problem is an error with both http://files.pfsense.org/packa... Kevin Hart

07:03 AM Revision 8b2e2f12: Make mac_format aware of cpzone but also friendly to previous code!

Ermal LUÇI

07:00 AM Revision 805b9ab6: Revert "Make mac_format aware of multiple Captiveportal instances"

This reverts commit 54df925b9ea447bdd10f88a886e2ef11d44c3059. Ermal LUÇI

07:00 AM Revision e0ad13cd: Revert "Make sure mac_format is always defined"

This reverts commit 56f9032170d3130c2066e5eebbe18b96398073ca. Ermal LUÇI

06/10/2012

05:21 PM Revision b552173f: Merge pull request #138 from bcyrill/patch-5

Make sure mac_format is always defined Scott Ullrich

05:20 PM Revision 56f90321: Make sure mac_format is always defined

Cyrill B

04:51 PM pfSense Packages Bug #2486 (Resolved): Snort Stable 2.9.2.3 pkg v. 2.1.1 platform: 2.0

In my pfSense when i want to install snort:
I can't downlaod snort-2.9.2.3.tbz !
The older version was good...
B... Frederic Bonnet

04:15 PM Revision 7b4b4158: Merge pull request #137 from bcyrill/patch-4

Fix Captiveportal zone Scott Ullrich

04:14 PM Revision 91308b61: Merge pull request #135 from bcyrill/patch-2

Added Captiveportal to service status Scott Ullrich

06/09/2012

09:40 PM Todo #2485 (Resolved): Add Status > Services entry for radvd if RA is enabled

We should have an entry under Status > Services for radvd if it's enabled for any interface, to follow the custom of ... Jim Pingle

08:33 PM Revision 54df925b: Make mac_format aware of multiple Captiveportal instances

Cyrill B

08:17 PM Revision 52a43b2f: Update Captiveportal

Cyrill B

08:02 PM Revision e3cf528e: Added Captiveportal to service status

Cyrill B

07:59 PM Bug #2477: router advertisement daemon (radvd) no longer starts

That's fine Johannes, not sure of the context for that in this case, generally comments like that would be reserved f... Chris Buechler

08:34 AM Bug #2477: router advertisement daemon (radvd) no longer starts

Resolved! Thanks
> Although I understand you file the ticket as high, we are not all full time paid developers or ... Johannes Ullrich

07:34 PM Bug #1279: Filesystem on NanoBSD is left read/write at first bootup after package reinstallation

Seems we need to revisit this again... If a NanoBSD upgrade reinstalls packages, once again it tends to completely ho... Jim Pingle

06:49 PM Bug #2484 (Resolved): Serial console speed has no effect on NanoBSD

Changing the serial console speed doesn't do anything on NanoBSD images - the console stays at 9600bps, even though t... Jernej Simončič

06:43 PM Bug #2483 (Closed): IPv6 Interface Aliases not functioning

GUI supports adding an IPv6 alias - however it never actually updates the interface config. Vince Maroun

04:40 PM Revision 63c654a4: Merge pull request #134 from bcyrill/patch-1

Removed unused maxproc parameter Scott Ullrich

04:32 PM Revision f53ff9ff: Removed unused maxproc parameter

Cyrill B

03:54 PM Revision 632e7733: Merge pull request #133 from bcyrill/patch-8

Added zone Scott Ullrich

03:52 PM Revision 6844896c: maxprocperip is defined per zone

Cyrill B

03:46 PM Revision 85317bfd: Merge pull request #132 from bcyrill/patch-4

Update Captiveportal Scott Ullrich

03:46 PM Revision 99897bf5: Merge pull request #131 from marcelloc/master

fix jquery+domtt notices css on all themes Scott Ullrich

03:08 PM Revision fa3e5c05: Needs a default case so IPv6 interfaces are resolved to a real interface

Seth Mos

02:59 PM Revision a636682d: Update master

Cyrill B

01:05 PM Bug #2482: error trying to delete limiter

crash report
Crash report begins. Anonymous machine information:
amd64
8.3-RELEASE-p2
FreeBSD 8.3-RELEASE-... Johannes Ullrich

01:04 PM Bug #2482 (Resolved): error trying to delete limiter

Fatal error: Call to undefined method dnpipe_class::GetName() in /usr/local/www/firewall_shaper_vinterface.php on lin... Johannes Ullrich

08:38 AM Feature #2361: router adv. daemon only allows for one subnet / limited options

looking good so far. Only thing missing is the ability to set subnets for the RA. Right now, it does only advertise t... Johannes Ullrich

03:56 AM Revision 43b1760c: fix jquery+domtt notices css on all themes

Marcello Silva Coutinho

06/08/2012

10:05 PM Revision ce0631b5: add <radnsservers> to the list of things that are arrays

for ticket #2361 Darren Embry

10:05 PM Revision 163e4b91: actually update RA DNS settings now

finishes #2361 Darren Embry

10:05 PM Revision 4e0fc44f: more work on feature #2361

- fields are there now but don't do anything
- checkbox for 'use same settings' that disables fields Darren Embry

09:47 PM Revision 8921bf89: Merge pull request #130 from marcelloc/master

move css style from last pull request to themes. Scott Ullrich

09:37 PM Revision 97f30a08: fix css style to themes.

Marcello Silva Coutinho

08:00 PM Revision ef3e9f16: Merge pull request #129 from marcelloc/master

convert menu alerts/notices to jquery + domtt Scott Ullrich

07:50 PM Revision 005ac3ca: convert menu alerts/notices to jquery + domtt

Marcello Silva Coutinho

07:37 PM Revision f3475477: split dhcpv6 server and ra #2361

Darren Embry

07:24 PM Revision 25d1c6b2: Shorter version of the fix to always set the radvd interface.

Redmine ticket #2477 Seth Mos

07:20 PM Revision 48a5985c: Make sure to fall through if this tag is not set.

Should fix redmine ticket #2477 Seth Mos

06:02 PM Feature #2361: router adv. daemon only allows for one subnet / limited options

here are the new fields:... Darren Embry

06:00 PM Feature #2361 (Feedback): router adv. daemon only allows for one subnet / limited options

Applied in changeset commit:163e4b91b10fd54374d69b02cb6caad5db262842. Darren Embry

03:49 PM Feature #2361 (Assigned): router adv. daemon only allows for one subnet / limited options

oh wait, i forgot to add fields for dns, searchdomain, use same settings to the RA tab. Darren Embry

03:46 PM Feature #2361 (Feedback): router adv. daemon only allows for one subnet / limited options

implemented, please do further testing.
commit:f347547 split dhcpv6 server and ra #2361
commit:1c8dbfb remove the... Darren Embry

05:53 PM Revision 1c8dbfbb: remove the RA stuff from services_dhcpv6 for #2361

Darren Embry

05:47 PM Revision 93458cb1: rename menu item for #2361

Darren Embry

05:27 PM Revision 5ef4a9e1: prep work for splitting dhcpv6 and RA for #2361.

Darren Embry

04:37 PM Bug #2477: router advertisement daemon (radvd) no longer starts

I think I may have fixed the snapshot. Otherwise please reopen.
Although I understand you file the ticket as high,... Seth Mos

10:25 AM Bug #2477 (Feedback): router advertisement daemon (radvd) no longer starts

I believe Seth had said this was because the snapshot was missing something that should be in the next new snapshot. ... Jim Pingle

10:19 AM Bug #2477: router advertisement daemon (radvd) no longer starts

just found additional logs in routing.log confirming the issue with the configuration file:
Jun 8 14:11:50 pfsens... Johannes Ullrich

10:14 AM Bug #2477 (Resolved): router advertisement daemon (radvd) no longer starts

as of today's update, radvd no longer starts. No obvious error message I can see so far, but the config file looks ba... Johannes Ullrich

04:14 PM Todo #2480 (Closed): Add checkbox to OpenVPN client/server to exlcude VPN server from (pushed) routes

If you try to push a route, or route directly, for the subnet containing the VPN server, OpenVPN would accept the rou... Jim Pingle

04:13 PM Feature #2479 (New): Allow reordering of the traffic graphs on the dashboard

Since the meaning of opt1-optN is variable, listing interfaces in sequence is not very meaningful in many cases. e.g.... Ronald Antony

12:41 PM Revision ff6677cf: Make sure we tag all 2.0 gateways as being IPv4, in 2.1 we require this tag to be present for the gateways.

This should prevent duplicate gateway entries for people coming from 2.0 that have dynamic interfaces Seth Mos

11:52 AM Bug #2478 (Closed): NTPd turns off after restoring a config file

NTP was completely reworked for 2.0.2 and 2.1 - this wouldn't be valid there because of the new design. Jim Pingle

11:50 AM Bug #2478 (Closed): NTPd turns off after restoring a config file

I don't know if this is designed this way on purpose or not but when restoring an XML config file from a system where... Larry Titus

06:34 AM Revision 1e5f47bb: Add blackhole to Null routes

Redmine ticket #2471 Seth Mos

04:52 AM Feature #1965 (Feedback): Support Multiple IPsec Peers

This has been complete on check_reload/pfSctl side. Ermal Luçi

03:38 AM Bug #2476: SECURITY ISSUE - Plain Text Dynamic DNS Account Password

This is the last time I'm going to say it - it's impossible to do in a way that isn't trivially reversible. There's a... Chris Buechler

01:36 AM Bug #2476: SECURITY ISSUE - Plain Text Dynamic DNS Account Password

As I’ve been pointing out and you don’t seem to be grasping, just because there is "seemingly" (by your claims any... NOYB NOYB

12:46 AM Bug #2476: SECURITY ISSUE - Plain Text Dynamic DNS Account Password

Insecurely storing your config can certainly be a security issue with every firewall and router. Literally every rout... Chris Buechler

12:20 AM Bug #2476: SECURITY ISSUE - Plain Text Dynamic DNS Account Password

Please stop misclassifying it as not a security issue.
Sorry you feel your responses here are a waste of your t... NOYB NOYB

12:11 AM Bug #2476: SECURITY ISSUE - Plain Text Dynamic DNS Account Password

It truly is impossible to securely resolve. You won't find anything that has a secure solution for encrypting such pa... Chris Buechler

12:05 AM Bug #2476: SECURITY ISSUE - Plain Text Dynamic DNS Account Password

The point is that you should not be saying it is not a security issue. Rather that it is by design due to lack of... NOYB NOYB

12:00 AM Bug #2476: SECURITY ISSUE - Plain Text Dynamic DNS Account Password

you can call it anything you want, the reality is it's impossible to store such passwords in a hashed or encrypted ma... Chris Buechler

03:03 AM Feature #2471: null routing of unused address space

I can probably add that flag if a Null route is involved. Let me check
Try now. Seth Mos

02:53 AM Feature #2471: null routing of unused address space

this one works, but it's a bit ugly. the -reject or -blackhole might be nicer.
traceroute and ping loop at the pfs... Hannu Teulahti

12:39 AM Revision d23b53eb: add gateways to config from cmdline

Darren Embry

12:39 AM Revision 3176c043: fix: Call to undefined function error

fix: Call to undefined function ipsec_get_phase1_dst() in /etc/inc/filter.inc on line 3216 Darren Embry

12:39 AM Revision 1b8bf24d: again, string interpolation kinda defeats the purpose of gettext. ;-)

Darren Embry

12:39 AM Revision 005a7049: variable interpolation defeats the purpose of gettext.

Darren Embry

12:39 AM Revision c63e3594: work in progress: set gateway IPs from console

- add --dry-run mode
- prompts for gateway IP address as needed
does not yet do:
- add gateway to config Darren Embry

06/07/2012

11:57 PM Bug #2476: SECURITY ISSUE - Plain Text Dynamic DNS Account Password

You have stated that it is not a security issue. It clearly is. Not doing anything about it does not change that... NOYB NOYB

11:53 PM Bug #2476: SECURITY ISSUE - Plain Text Dynamic DNS Account Password

we have the ability to encrypt backups, that's what you should do. It's impossible to securely encrypt such passwords... Chris Buechler

11:49 PM Bug #2476: SECURITY ISSUE - Plain Text Dynamic DNS Account Password

I did read the link. And it is still a security issues. Lack of interest in resolving it does not change the fac... NOYB NOYB

11:44 PM Bug #2476: SECURITY ISSUE - Plain Text Dynamic DNS Account Password

read the link. There are no alternatives for such passwords. Chris Buechler

11:43 PM Bug #2476: SECURITY ISSUE - Plain Text Dynamic DNS Account Password

Just because it is by design does not mean it is not a security issue. Saving account passwords in plain text is ... NOYB NOYB

11:34 PM Bug #2476 (Rejected): SECURITY ISSUE - Plain Text Dynamic DNS Account Password

by design, not a security issue.
http://doc.pfsense.org/index.php/Why_are_some_passwords_stored_in_plaintext_in_con... Chris Buechler

11:33 PM Bug #2476 (Rejected): SECURITY ISSUE - Plain Text Dynamic DNS Account Password

Dynamic DNS account password is saved as plain text in XML config and backup files.

NOYB NOYB

09:39 PM Revision 63a202a8: Merge pull request #127 from briantist/patch-1

255 is not a valid skew value. Fixed bug #2012 Scott Ullrich

09:37 PM Revision 648a3ed8: 255 is not a valid skew value. Fixed bug #2012 (http://redmine.pfsense.org/issues/2012)

Brian Scholer

08:34 PM Feature #2413: Allow IPv6 interface configuration from the menu

Okay, you can set gateway IP addresses from the command line now. See config:c63e3594 and config:d23b53eb.
Puntin... Darren Embry

03:13 PM Feature #2413: Allow IPv6 interface configuration from the menu

This is what you will now see:... Darren Embry

02:05 PM Feature #2413: Allow IPv6 interface configuration from the menu

> Note that http://dhcp and http://dhcp6 are not valid, it appears to be almost right.
> http://192.168.2.254:/
>... Darren Embry

01:41 PM Feature #2413: Allow IPv6 interface configuration from the menu

Another new feature for the console menu to clarify console configuration. With the last as it is now, it is hard to ... Seth Mos

01:31 PM Feature #2413: Allow IPv6 interface configuration from the menu

> Tried to set to dhcp6 again, still set to Static IPv6. I think it's not setting the tag.
I'm actually going to j... Darren Embry

01:27 PM Feature #2413: Allow IPv6 interface configuration from the menu

> When configuring interface WAN for dhcp6 it does not set $config['interfaces']['wan']['ipaddrv6'] to dhcp6. Are you... Darren Embry

01:23 PM Feature #2413: Allow IPv6 interface configuration from the menu

> When configuring interface WAN, as dhcp and dhcp6 I get the url http://dhcp/ displayed
Now should be showing IPv6 ... Darren Embry

07:16 PM Revision 0098aa73: show dhcp/dhcp6/static/staticv6 along with descriptions in console

Darren Embry

07:16 PM Revision 6499a7d5: show real interface names

Darren Embry

07:16 PM Revision 3f63e8e2: minor variable name change.

Darren Embry

07:00 PM Revision ee2b3c1f: Merge pull request #126 from marcelloc/patch-21

fix select_source option Scott Ullrich

06:59 PM Revision 1624b5f1: fix select_source option

Marcello Silva Coutinho

06:20 PM Bug #2475 (Resolved): Connection rate limiting does not work for Captive Portal

Using pfSense 2.0.1. Installation of pfSense as a CP at a big exhibition fair failed because the connection rate limi... George Spiliotis

06:03 PM Revision d71371bc: actually display webconfigurator port numbers on console

Darren Embry

05:33 PM Revision bfaafe28: setting $config['interfaces']['wan']['ipaddrv6'] to 'dhcp6' *should* work now.

Darren Embry

05:32 PM Bug #2012: 4th+ CARP member will not work with default automatic skew

Proposed a fix:
https://github.com/bsdperimeter/pfsense/pull/127
This will make the 4th member work, at the very ... Brian Scholer

05:28 PM Revision b3cb233f: now shows ipv6 webConfigurator URLs (#2413)

Darren Embry

04:51 PM Revision 140e4bc6: do #2467 only show GWs from same addr fam oncreate

Darren Embry

04:51 PM Revision a75b0b3b: minor indentation fix

Darren Embry

04:20 PM Revision 9a19c316: While I'm here, don't test these with isset, just test directly, since they will be set to true/false in globals.inc

Jim Pingle

04:14 PM Revision 364e4f74: Provide a way to disable the pkg info link

Jim Pingle

04:13 PM Revision 93888ad9: Provide a way to disable the pkg info link

Jim Pingle

04:12 PM Revision 6afeb202: If radvd is already running, reload, otherwise start one.

Shut down when there are no prefixes to announce Seth Mos

03:48 PM Revision db0d446f: fix for bug #2469 ("WAN -> LAN -> OPT10")

Darren Embry

03:30 PM Bug #2474 (Feedback): Recent changes to pkg_edit code broke select_source

Should be fixed in
commit:1624b5f1e2f6fa8015f24eaa640269c22829fcdb Jim Pingle

11:27 AM Bug #2474 (Resolved): Recent changes to pkg_edit code broke select_source

Something in one of the recent changes to pkg_edit.php has broken select_source.
For example, the interface select... Jim Pingle

01:49 PM Feature #2361: router adv. daemon only allows for one subnet / limited options

We probably want to split them off and keep them tied together.
What Jim and I agreed upon was tabs per interface,... Seth Mos

01:04 PM Bug #2379 (Feedback): When using squid as a proxy server Traphic graph does not show the LAN specific Ip addresses

Which traffic graph? Status > Traffic Graphs?
If so, that's generated by the 'rate' program, and it's somewhat limit... Jim Pingle

12:48 PM Bug #2310: Possible typo - "Optional 11" interface ?

Dim: as I previously stated I believe I fixed this issue, but just to be on the safe side, I'm reassigning to you so ... Darren Embry

11:46 AM Bug #2310 (Assigned): Possible typo - "Optional 11" interface ?

Darren Embry

11:45 AM Bug #2310: Possible typo - "Optional 11" interface ?

I strongly believe this is the same issue as #2469, fixed in commit:db0d446f. Darren Embry

12:45 PM Feature #2467 (Resolved): AJAX enhancement: only show gateways from same address families upon creation

implemented in commit:140e4bc6
Darren Embry

12:06 PM Revision 838a1ecb: Add better protection for unknown rapriority

Seth Mos

12:05 PM Revision 8ca73e85: Make sure we still start on older configs where the setting is still called mode, and not ramode.

Add a failsafe for the rapriority Seth Mos

12:01 PM Revision dc131dfe: We need to define the default route here, not the advertised prefix.

Seth Mos

11:46 AM Revision 8859c0a6: Correct the syntax, the RemoveRoute needs to end up in route statement

Seth Mos

11:42 AM Bug #2469 (Resolved): Assign interfaces prompt is going WAN -> LAN -> OPT10

fixed in commit:db0d446f
Darren Embry

11:27 AM Revision 738dfac4: Remove duplicate prefix line

Seth Mos

11:18 AM Revision a99b2b08: Prevent radvd from telling the clients to remove the route to itself.

Seth Mos

11:12 AM Revision 83973bfb: Do not send DeprecatePrefix messages for CARP announcements, it causes clients to purge the CARP default route.

Seth Mos

10:05 AM Revision b5264f22: Sync missing code from interface.inc to newwanip script

Ermal LUÇI

10:00 AM Revision 0d9c5026: Actually do not try to reload everything during bootup since it will be done by bootup code

Ermal LUÇI

09:59 AM Revision ae17d2e9: Actually do not try to reload everything during bootup since it will be done by bootup code

Ermal LUÇI

09:25 AM Revision 76231e63: Bye, bye olsrd back to packages.

Ermal LUÇI

08:51 AM Revision 3e662cb0: Get rid of carpdev, it will never be

Ermal LUÇI

08:36 AM Revision 98aea4c3: Detour through check_reload_status and only when the settings get applied not when the gateway has been changed.

Ermal LUÇI

08:32 AM Revision 7fe30c74: Do not blindly startup check_reload_status check first

Ermal LUÇI

08:27 AM Revision 915089b7: Catch up with multiple events sending. Also do not blindly startup check_reload_status check first

Ermal LUÇI

07:45 AM Revision 30fb0527: Surely this cannot work a fit

Revert "This script update the Dynamic DNS registration when called by apinger if a gateway from a group is down."
T... Ermal LUÇI

07:35 AM Revision 514123f8: Someone needs to ask before breaking stuff like this!

Revert "Eject duplicate script, we already have a script specifically for this."
This reverts commit 56a0c7373ae4cc7... Ermal LUÇI

07:04 AM Feature #1829: CARP with IPv6 support

Confirmed that the latest available snapshot 07-06-2012 17:00 does not have the carp patch. Probably just sheer bad l... Seth Mos

03:48 AM Feature #1829: CARP with IPv6 support

You need a snapshot with a kernel of June 7th or later Seth Mos

03:45 AM Feature #1829: CARP with IPv6 support

if I choose carp int as RA interface, the radvd does not start.... Hannu Teulahti

05:20 AM Todo #2237 (Feedback): Move OLSRD back to a package

This has been moved to pacakges Ermal Luçi

06/06/2012

08:59 PM Revision 2d6f800a: Fix exec bit for usr/local/sbin/openvpn.attributes.sh

Jim Pingle

08:58 PM Revision a1b9105b: Only add openvpn acl script lines if it's a server mode that does user auth

Jim Pingle

06:51 PM Bug #2473 (Rejected): OpenVPN fails to initialize on for either p2p_tls or p2p_shared_key.

Already fixed in git. Jim Pingle

06:47 PM Bug #2473 (Rejected): OpenVPN fails to initialize on for either p2p_tls or p2p_shared_key.

When a P2P mode is selected, OpenVPN fails to start. The logs indicate that the client-connect and client-disconnect... Lott Caskey

06:20 PM Revision 846c7b77: Changeover to the new multiple command pfSctl

Seth Mos

05:21 PM Revision 8275ea28: Reverse the arguments, i got them wrong.

Redmine ticket #1965 Seth Mos

04:11 PM Revision 83d807cb: Trigger dyndns and ipsecdns updates through check_reload_status. IpsecDNS already performs a filter_configure() too.

Redmine ticket #1965 Seth Mos

04:09 PM Revision 56a0c737: Eject duplicate script, we already have a script specifically for this.

Redmine ticket #1965 Seth Mos

03:55 PM Revision b013b81e: This script update the Dynamic DNS registration when called by apinger if a gateway from a group is down.

redmine ticket #1965 Seth Mos

12:26 PM Feature #1965: Support Multiple IPsec Peers

Needs hooks in gateway monitoring.
If a gateway is down we call pfCtl.... Seth Mos

09:22 AM Feature #1829: CARP with IPv6 support

Testing proved that CARP router advertisments work. Excellent. Seth Mos

04:04 AM Feature #1829 (Feedback): CARP with IPv6 support

I've activated the CARP link local patch from Andrew on the 8.3 builds. It appears to work as it should.
I've comm... Seth Mos

08:34 AM Revision 9a933304: When advertising on a CARP vip, pick the CARP ipv6 address as the RDNSS address

Redmine ticket #1829 Seth Mos

08:25 AM Revision e1f6761d: Make sure that both the Carp vip interface and the parent interface are in the list.

Redmine ticket #1829 Seth Mos

08:25 AM Revision 5078cd76: Extra safetynet to prevent duplicate static entries with broken config.xml

Make sure to fil the array that we fill for configured interfaces with the real interface, not just the carp if.
Redm... Seth Mos

08:19 AM Revision 6bee76d5: Make lock files availble to all users for usage from php process

Ermal LUÇI

08:17 AM Revision f26f4fa5: Make lock files availble to all users for usage from php process

Ermal LUÇI

07:22 AM Revision 628306af: Correct upgrade code from report of http://forum.pfsense.org/index.php/topic,50182.0.html

Ermal LUÇI

06:50 AM Revision fe838158: Change the DHCPv6 services page into a RA and DHCPv6 section, move some of the variables.

Add drop down to select carp vip for that interface for CARP advertisements
Allow setting the RA priority.
Redmine ti... Seth Mos

06/05/2012

07:49 PM Revision 52a8cfea: Always use the uppercase description

Seth Mos

07:41 PM Revision 1a69c4d1: Wrong branch

Revert "Import OpenVPN cisco style radius attributes applying policy to logged in users. Feature #2100"
This reverts... Ermal LUÇI

07:40 PM Revision 227a0140: Remove left-over from copy-pasto

Ermal LUÇI

07:39 PM Revision 7056e4ed: Use preg_match instead, we should probably make this a function so we can add proper device detection schemes and a known list of command ports.

That would also allow for resetting the 3g stick when it hangs.
We should consider storing the device and manufacture... Seth Mos

07:39 PM Revision 8574d351: Correct the variable to the modem device output.

Seth Mos

07:38 PM Revision 5b4ee05e: Import OpenVPN cisco style radius attributes applying policy to logged in users. Feature #2100

Ermal LUÇI

07:37 PM Revision 1492e02c: Import OpenVPN cisco style radius attributes applying policy to logged in users. Feature #2100

Ermal LUÇI

07:24 PM Revision 477cc2bc: Import OpenVPN cisco style radius attributes applying policy to logged in users. Feature #2100

Ermal LUÇI

04:59 PM Bug #2405: Lack of traffic shaping queue parent can take firewall down (pass no traffic)

Can you detail how to reproduce this?
The parent is inherited automagically and you do not select it yourself!!!! Ermal Luçi

04:52 PM Feature #1986 (Resolved): Find a way to list logged in IPsec xauth users

We can close this, it's working fine as-is since your last fix and there's no reason not to just code around the othe... Jim Pingle

04:48 PM Feature #1986 (Feedback): Find a way to list logged in IPsec xauth users

For me this is resolved.
Agreed that its easy to skip the non-user tunnels.
If needed be the change to not show the... Ermal Luçi

03:19 PM Todo #2100 (Feedback): Import OpenVPN RADIUS ACL support

Its in 2.1 Ermal Luçi

02:47 PM Revision ae5c8d0e: Make sure the page does match as we trying to match the page to the url path and not the full url

Warren Baker

02:10 PM Bug #2349 (Feedback): vlan(4) needs altq adaption on FreeBSD 8.3++

For 2.1 this is solved in newer snapshots.
During transition to 9 this will be solved in more generic way. Ermal Luçi

06:57 AM Bug #2446: pfSense fails to queue UDP packets

Sorry for the delay, here is the file you asked for. The rule question, I guess, is the first one below the comment
... Torgeir Skjøtskift

05:45 AM Revision fbf0d4d3: Make sure to return the Null route gateways too for looking up a gateway entry

Seth Mos

02:59 AM Feature #2471: null routing of unused address space

applied that change to the other gateway lookup functions as well. Seth Mos

02:49 AM Feature #2471: null routing of unused address space

This fixes the "different address family" problem... Hannu Teulahti

06/04/2012

07:20 PM Bug #2469: Assign interfaces prompt is going WAN -> LAN -> OPT10

Probably the same with http://redmine.pfsense.org/issues/2310 which I submitted a couple of months ago (you may want ... Dim Hatz

07:08 PM Revision 22968348: Revert "Make the ppp-linkup script understand both address families."

This reverts commit 310c29c6a6089f1766ac052572b532e736a2251b. Jim Pingle

06:49 PM Bug #2470 (Resolved): unable to create single address /128 ipv6 route

Chris Buechler

06:41 AM Bug #2470: unable to create single address /128 ipv6 route

Seems to work now. Thank you!
Hannu Teulahti

05:01 AM Bug #2470 (Feedback): unable to create single address /128 ipv6 route

Fix applied Seth Mos

04:24 AM Bug #2470 (Resolved): unable to create single address /128 ipv6 route

the system_routes_edit.php does not allow /128 for a ipv6 route. the largest mask selectable is 127 bits.
running ... Hannu Teulahti

06:40 PM Feature #2472 (Closed): Option to tie OpenVPN client instance to CARP status

ah I forgot you had already added that Jim. Chris Buechler

07:55 AM Feature #2472: Option to tie OpenVPN client instance to CARP status

To clarify a little: We already do this on 2.0.2 and 2.1, if you bind the client instance to a CARP VIP, it will not ... Jim Pingle

06:32 AM Feature #2472: Option to tie OpenVPN client instance to CARP status

updated with proper description Chris Buechler

05:35 AM Feature #2472 (Closed): Option to tie OpenVPN client instance to CARP status

Currently OpenVPN clients on backup CARP status hosts will still send out packets on that CARP IP, breaking that Open... Rudy Attias

05:48 PM Revision 36b2d82d: Also include gwlb.inc in interfaces.inc

Seth Mos

04:31 PM Bug #2440: Wireless client nic set for DHCP does not start dhclient

Managed to track it down on a 2.0.2 RC. Turns out that the re-configure of a existing link brings the interface down ... Seth Mos

10:44 AM Revision 9847b940: Enhance the gateways status widget. Show Pending when it's not ready yet, show unknown when it really isn't online.

Seth Mos

10:37 AM Revision 603f19f0: Some minor enhancements from renaming the Gathering Data to Pending.

When it doesn't exist in the array it's really unknown. Make that lightblue. show a ~ Seth Mos

10:12 AM Revision 4a67fc61: Use "Pending" instead of gathering data, which is shorter

Seth Mos

09:59 AM Revision 7bfa645c: Fix Typo, although the host might indeed be loca. We'll just keep it local instead.

Seth Mos

08:20 AM Revision 6fdea6a2: Allow for Null routes

Seth Mos

07:48 AM Revision 3d36f9d1: Allow for /128 IPv6 route entries in static routes.

Redmine ticket #2470 Seth Mos

06:37 AM Feature #2471: null routing of unused address space

there is a typo on line 324 gwlb.inc, but I fixed it by hand (locahost instead of localhost).
function return_gate... Hannu Teulahti

05:36 AM Feature #2471 (Feedback): null routing of unused address space

Try now Seth Mos

04:57 AM Feature #2471: null routing of unused address space

We'll add a option for that. Seth Mos

04:54 AM Feature #2471 (Resolved): null routing of unused address space

we have quite a lot of unused ipv4 and ipv6 addresses. we have used to nullroute the large address blocks with our ol... Hannu Teulahti

06:21 AM Revision e90c833a: Always add a link-local of fe80::1:1 when the interface is set to track6. This allows webui access over IPv6 to a easy address.

Make a shortcut in the get_failover_interface() function to get_real_interface() if we find the interface in $config. Seth Mos

05:37 AM Feature #2466 (Feedback): Allow single firewall rules to apply to both IPv4 and IPv6 simultaneously

Seems to work so far, filter.inc code needs to duplicate rules by address families to work for addresses, reply-to an... Seth Mos

12:43 AM Revision 4264284e: Teach rc.initial.ping at least a little bit about ipv6.

Jim Pingle

06/03/2012

11:54 PM Revision 42db9f7b: Change style of this jquery call, the method that was used did not work properly.

Jim Pingle

10:00 PM Revision f2f721e2: Merge pull request #125 from marcelloc/patch-20

Include github changelog link to package version when $g['disablepackage... Jim Pingle

09:57 PM Revision 8b19e1b3: Include github changelog link to package version when $g['disablepackagehistory'] is not set, domtt titles, remove package info column and move package info to description tab

Marcello Silva Coutinho

09:54 PM Revision 16aa29e4: Merge pull request #124 from marcelloc/patch-19

Include github changelog link to package version when $g['disablepackage... Jim Pingle

09:52 PM Revision 36d82968: Include github changelog link to package version when $g['disablepackagehistory'] is not set , domtt titles, remove package info column and move package info to description tab

Marcello Silva Coutinho

07:48 PM Revision c5e53ee6: Unbreak php errors on login form

Jim Pingle

05:39 PM Revision 6a1ff0fe: Merge pull request #120 from ccesario/master

Change jQuery function: attr() to prop() Scott Ullrich

05:29 PM Revision 88dda5ed: Change jQuery function attr() to prop()

Carlos Cesario

02:11 PM Revision e3b14bbe: Include the gateway functions in rc.banner to prevent throwing a error

Seth Mos

11:32 AM Revision 6dbffeda: Add Gateway Group support to the IPsec interface drop down.

Edit of gateway group correctly reflects the new IP Address.
We need to make a blacklist for interface names in the g... Seth Mos

11:00 AM Revision bf001dec: Allow for failover DynDNS hostnames.

replace get_real_interface() calls with get_failover_interface. If it isn't a group we call get_real_interface() anyh... Seth Mos

09:53 AM Bug #2469: Assign interfaces prompt is going WAN -> LAN -> OPT10

Could be related to the changes from Darren who is working on the console menu.
I'll assign to Darren since he is ... Seth Mos

06/02/2012

10:12 PM Bug #2469 (Resolved): Assign interfaces prompt is going WAN -> LAN -> OPT10

After prompting for WAN, then LAN, a current snapshot then asks the user about "Optional 10 interface", instead of "O... Jim Pingle

10:10 PM Bug #2468 (Resolved): Interface does not exist warning during a network interface mismatch

Instead of reporting that a network interface mismatch happened, then proceeding to the assign interfaces prompt, cur... Jim Pingle

07:48 PM Revision 3e1eec58: Allow for selection of a gateway group as a interface to monitor

Redmine ticket #1965 Seth Mos

07:27 PM Revision ab1112da: The gateway groups array now knows about vips to be tied into that gateway group so we can tie the groups into services.

Redmine ticket #1965 Seth Mos

04:50 PM Revision 27a79802: Add a virtual IP field to a interface in the gateway groups edit screen.

Redmine ticket #1965 Seth Mos

02:25 PM Revision 4adf752c: Add statistic functions for the ZTE modems

Seth Mos

02:10 PM Revision 284101d3: Add support for the ZTE modem stats

Should be generic enough for other modems too. Seth Mos

01:18 PM Feature #2467 (Resolved): AJAX enhancement: only show gateways from same address families upon creation

When creating a new gateway group all gateways are showm, both ipv4 and ipv6. Add some ajax glue that will hide the o... Seth Mos

11:38 AM Bug #2038: Some 3G WANs on 2.0.x do not come up on cold boot

Checked in support for the ZTE modem stats.
Should be easier to add new ones now too.
Do note that the ZTE modem will... Seth Mos

11:18 AM Bug #2038: Some 3G WANs on 2.0.x do not come up on cold boot

With includes changes ZTE 3G dongle now comes up correctly.
Rewrote the stats utility to poke at the application p... Seth Mos

10:59 AM Revision 75e89498: Move the SIM Pin and APN settings to the modem setup since we need these only once.

Seth Mos

10:37 AM Revision aa7504e0: Fix the PinReady command not found error.

Add a log command to show where you are dialing to. Seth Mos

10:12 AM Revision 5100c2de: Unbreak tree, add }

Seth Mos

09:49 AM Revision 117f8e6f: We are on FreeBSD 8.3 now

Seth Mos

08:38 AM Feature #2413 (New): Allow IPv6 interface configuration from the menu

OPtion 2 Set interface IP address.
When configuring interface WAN, as dhcp and dhcp6 I get the url http://dhcp/ disp... Seth Mos

08:19 AM Revision 488595df: Escape the shell variable

Seth Mos

06/01/2012

09:34 PM Revision d27a8a3d: Merge pull request #119 from marcelloc/patch-15

include more features to interfaces_selection Scott Ullrich

09:34 PM Revision e14fbca4: include more features to interfaces_selection

<showips>
<showvirtualips>
<showlistenall>
<hideinterfaceregex>
New features will show only with these new options o... Marcello Silva Coutinho

07:51 PM Revision 85a236e9: Fixes #2428. Reference limiters in rules by name to avoid issues. Also put upgrade code for existing configs. The same fix is necessary for 2.0.x though not sure how this should be committed there.

Ermal LUÇI

05:10 PM Bug #2278 (Feedback): IPv6 Carp vip both master on FreeBSD 8.3

Andrew working on this Chris Buechler

03:50 PM Bug #2428 (Feedback): Removing a limiter breaks any references to limiters after it

Applied in changeset commit:85a236e9dd5db87197ed6855995da609bf310bff. Ermal Luçi

02:50 PM Bug #2349: vlan(4) needs altq adaption on FreeBSD 8.3++

Any update on this issue? I haven't tried since it was reported broken.. Its a show stopper for me to update freebsd ... Cino .

12:25 PM Revision 730b6148: Include util.inc and IPv6.inc before config.lib.inc.

Several parts of the config upgrade relay on functions in these. Seth Mos

12:25 PM Revision 4a5fbf61: Make sure we include "util.inc" during config upgrade. We need is_ipaddrv4() during upgrade which is triggered from gwlb.inc

Seth Mos

12:16 PM Revision 06392e40: Fix function call name

Jim Pingle

10:23 AM Bug #1974: Captive Portal RADIUS accounting bytes wrong

Thanks, however the captive portal in the latest snapshots doesn't work, I believe there is a bug open about that: 24... Yuri Keren

06:10 AM Revision 31bdb9e5: Make sure to get the real interface in case we get passed a friendly interface

Redmine ticket #2463 Seth Mos

05:46 AM Revision e02caf4a: Actually save the IPprotocol variable into the config, otherwise it stil won't work.

People will likely need to edit and save their gateways now if they have double entries.
e.g. both manual and automat... Seth Mos

02:59 AM Bug #2463: system_gateways_edit.php rejects correct configurations with dynamic or vpn interfaces

I just checked in more code, and the fix that allows you to actually save the ipprotocol value.
So edit and save t... Seth Mos

05/31/2012

10:51 PM Revision 4473e33c: Merge pull request #116 from marcelloc/patch-14

Show current/updated repo package description instead of local/cached de... Scott Ullrich

10:47 PM Revision e83a9ff7: Show current/updated repo package description instead of local/cached description.

Marcello Silva Coutinho

09:50 PM Revision 53fde3ce: Merge pull request #115 from marcelloc/patch-13

new pkg_edit.php code with revised functions, no 0-99 loop on row_helper... Scott Ullrich

09:49 PM Revision 55c846c4: new pkg_edit.php code with revised functions, no 0-99 loop on row_helper, movable rows, tootip with domtt.

new field types button, info as well combinefileds working and colspan2 on nodisplaname option.
jquery code improved ... Marcello Silva Coutinho

06:34 PM Revision d4d5f7b4: Rename old RRD quality database to the new GW name so we continue the graph.

Seth Mos

06:09 PM Bug #2458: Pfsense not registering DNS servers found by PPP

ThorstenK code, posted in forum, works flawlessly for me (I use IPv4 only) Vladimir Suhhanov

02:24 AM Bug #2458: Pfsense not registering DNS servers found by PPP

2.1-BETA0 (i386)
built on Wed May 30 19:35:31 EDT 2012
FreeBSD 8.3-RELEASE-p2
The script IS NOT working for me... Vladimir Suhhanov

06:08 PM Revision 05a4cebd: Add a inet46 filter type on the firewall rules page. I have locked down a few of the most common limitations.

Still arguing if we should lock this down even further to aliases only.
Redmine ticket #2466 Seth Mos

05:41 PM Bug #2373 (Resolved): There were error(s) loading the rules... (Floating rules bug)

Ermal Luçi

05:37 PM Feature #2436: Enhance the restore section of the Backup/Restore section

If you want to make a new ticket for the memory issue I guess you can do that. :-) Darren Embry

05:36 PM Feature #2436: Enhance the restore section of the Backup/Restore section

Should I still look into the memory issue? My understanding is some of that XML parsing code we've been using has bi... Darren Embry

03:32 PM Feature #2436 (Resolved): Enhance the restore section of the Backup/Restore section

Seth Mos

03:28 PM Feature #2436: Enhance the restore section of the Backup/Restore section

I can confirm that restoring an entire RRD file from a i386 onto a amd64 works as expected. Great work!
I must have ... Seth Mos

03:25 PM Feature #2436 (Assigned): Enhance the restore section of the Backup/Restore section

When trying to restore just the RRD section on a current 31-5-2012 snapshots I get the following error.... Seth Mos

05:02 PM Bug #2465 (Closed): Values reported by 'ipfw table 1 entrystats' reports a much higher value of transfered bytes, 6-7 times more

Duplicate of #1974 Ermal Luçi

11:03 AM Bug #2465 (Closed): Values reported by 'ipfw table 1 entrystats' reports a much higher value of transfered bytes, 6-7 times more

Thus the radius reported bytes-in / bytes-out values are incorrect which leads to incorrect traffic stats recorded fo... Yuri Keren

05:01 PM Bug #1974: Captive Portal RADIUS accounting bytes wrong

This has been fixed on latest snapshots.
Please try those. Ermal Luçi

04:28 PM Revision c1d36d26: Finally give in and sprout a Internet Protocol drop down on the gateways edit screen.

With added validation and multiple detection parts to work when the value is not set yet.
Redmine ticket #2463 Seth Mos

03:20 PM Feature #2466 (Resolved): Allow single firewall rules to apply to both IPv4 and IPv6 simultaneously

I've added code that allows for setting a firewall rule to IPv4+IPv6
Limitations:
- only allows tcp/udp and icmp
... Seth Mos

01:42 PM Bug #2463 (Feedback): system_gateways_edit.php rejects correct configurations with dynamic or vpn interfaces

Code checked in, I finally gave in and added a drop down for the internet protocol. There is just too much that could... Seth Mos

05:04 AM Bug #2463: system_gateways_edit.php rejects correct configurations with dynamic or vpn interfaces

Confirmed Seth Mos

05/30/2012

08:51 PM Revision 88165371: Do not allow empty passwords since this might cause problems for some authentication servers like ldap. Fixes #2326

Ermal LUÇI

08:50 PM Revision d427980c: Do not allow empty passwords since this might cause problems for some authentication servers like ldap. Fixes #2326

Ermal LUÇI

08:15 PM Revision a5011585: Rather than doig a string search do a proper matching of selected interfaces. Fixes #2378

Ermal LUÇI

08:14 PM Revision 17103056: Rather than doig a string search do a proper matching of selected interfaces. Fixes #2378

Ermal LUÇI

07:59 PM Revision 4dc04853: Clarify comment. Fixes #2270

Ermal LUÇI

07:58 PM Revision 03bbddae: Clarify comment. Fixes #2270

Ermal LUÇI

05:10 PM Revision 46ca7f3d: Fix copy/paste-o

Jim Pingle

05:10 PM Revision 18172eca: Fix copy/paste-o

Jim Pingle

04:59 PM Revision f56a60e7: Fix input validation and import test.

Jim Pingle

04:59 PM Revision 58168f4e: Fix input validation and import test.

Jim Pingle

04:59 PM Bug #2437 (Resolved): PHP missing bcmath (that was solved for pfSense 2.0 two years ago, re-discovered in the latest pfSense 2.1)

Chris Buechler

03:14 PM Bug #2437: PHP missing bcmath (that was solved for pfSense 2.0 two years ago, re-discovered in the latest pfSense 2.1)

Running bcmod() works now.
Thanks. Yuri Keren

04:50 PM Bug #2326 (Feedback): Erroneous successful webGUI authentication with blank password and AD authentication backend

Applied in changeset commit:88165371efbc79fdc0194de26814eacca68d2a5c. Ermal Luçi

04:47 PM Revision bb39c283: Switch to ntpd from ports, add Services > NTP to select interfaces for binding. Respect old ntp settings in the process.

Conflicts:
etc/inc/system.inc
usr/local/www/fbegin.inc Jim Pingle

04:44 PM Revision cf180ccc: Switch to ntpd from ports, add Services > NTP to select interfaces for binding. Respect old ntp settings in the process.

Jim Pingle

04:36 PM Bug #2446: pfSense fails to queue UDP packets

Please put the file on /tmp/rules.debug after anonymizing addresses here to verify what you say. Ermal Luçi

04:29 PM Bug #1931 (Closed): Status: Captive portal: Test Vouchers tab summary issue

Its by design that you will not be granted access to the portal if you submitted multiple vouchers and one of them is... Ermal Luçi

04:10 PM Bug #2378 (Feedback): Captive portal selects additional interfaces where it shouldn't

Applied in changeset commit:1710305617db80cde51a961077c3d18959c238d3. Ermal Luçi

04:00 PM Bug #2270 (Feedback): CP - default value of "Maximum concurrent connections per client IP address"

Applied in changeset commit:4dc04853f4588043bd39a6e304cbb33388937744. Ermal Luçi

03:03 PM Bug #1974: Captive Portal RADIUS accounting bytes wrong

Does not seem like the fix is working.
I am running pfSense 2.1 built on April 24 and the reported bytes-in and by... Yuri Keren

02:17 PM Revision 829fd8c1: Don't display a "mobile" user without a username.

Jim Pingle

02:09 PM Revision 0551a524: Bump to 2.1-BETA0, let the fun begin.

Jim Pingle

02:08 PM Revision db2243e7: Bump to 2.0.2-RC2 after FreeBSD-SA-12:01 v1.1 and FreeBSD-SA-12:02

Jim Pingle

02:02 PM Revision 52ec5df8: Don't display a "mobile" user without a username.

Jim Pingle

01:39 PM Revision 13fc6fb9: Fix filename (Ticket #2459)

Jim Pingle

01:19 PM Revision fec04267: Disable autocomplete on all but the login form. Fixes #2459

Jim Pingle

12:56 PM Bug #2464: The traffic graph permission does not allow a user to load the graph.

Please use the forum to discuss such issues. If you need to start a new ticket for a new issue, that's fine, but this... Jim Pingle

12:48 PM Bug #2464: The traffic graph permission does not allow a user to load the graph.

Actually this is becoming more complicated than I hoped. I gave the user the permission you mentioned, and now graph.... Jeff Shaw

12:13 PM Bug #2464: The traffic graph permission does not allow a user to load the graph.

I would like to reopen this as a feature request, then, that Status: Traffic Graph implies Diagnostics: Interface Tra... Jeff Shaw

11:10 AM Bug #2464 (Closed): The traffic graph permission does not allow a user to load the graph.

You also need to assign the permission for graph.php (the actual graph), which is "Diagnostics: Interface Traffic pag... Jim Pingle

11:06 AM Bug #2464 (Closed): The traffic graph permission does not allow a user to load the graph.

I wanted a user to be allowed to view the traffic graph, so I created a user for her, and assigned her only the permi... Jeff Shaw

12:33 PM Revision 69b6c2b5: Skip a few pieces of code earlier. Perform file test on dhcpd logs.

Seth Mos

12:17 PM Revision 8dfb0c00: Add a few micro optimizations, bail out when the file does not exist.

Seth Mos

10:08 AM Feature #1361: DNSMasq, source interface and IPSec VPNs

Sorry a beginner at this. The patch file was the wrong way around. Hugh Blandford

10:03 AM Feature #1361: DNSMasq, source interface and IPSec VPNs

Sorry this update has taken so long. I have checked the file still applies and added the capability to handle the _m... Hugh Blandford

09:20 AM Bug #2459 (Feedback): Adding autocomplete=off in the webGUI forms

Applied in changeset commit:fec04267ea5303333839a45149e3cc2edc8250ff. Jim Pingle

07:50 AM Feature #1986: Find a way to list logged in IPsec xauth users

After the last commit, racoon no longer crashes, but now it's listing all tunnels in the 'show-users' output, but non... Jim Pingle

05:19 AM Bug #2373: There were error(s) loading the rules... (Floating rules bug)

For my current configuration and settings issue is fixed. Vladimir Suhhanov

05/29/2012

09:46 PM Revision b0115477: Fix a couple misdirected form submissions

Jim Pingle

08:02 PM Bug #2459: Adding autocomplete=off in the webGUI forms

Apparently you can do this in jQuery by sticking one line in the file somewhere:... Jim Pingle

09:39 AM Bug #2459 (Resolved): Adding autocomplete=off in the webGUI forms

Doing a diff between config.xml versions, I noticed that my pfsense's password was stored in plaintext format in
<pr... Dim Hatz

07:57 PM Feature #1241 (Resolved): Custom Dynamic DNS

thanks Chris Buechler

07:53 PM Feature #1241: Custom Dynamic DNS

This was merged, and can be closed. Matt Corallo

07:56 PM Feature #336: Option to create lagg under assign interfaces

*+1* This is important to me. Although, right now I am about to try and figure out how to do it manually since I need... Ted Lum

07:52 PM Bug #2463 (Resolved): system_gateways_edit.php rejects correct configurations with dynamic or vpn interfaces

eg. Gateway of dynamic makes the "Monitor IP" setting reject everything as having a "different Address Family"
Addit... Matt Corallo

05:25 PM Revision 0350b814: Up the default for tables to 3000

Jim Pingle

05:24 PM Revision 4e2f4c18: Up the default for tables to 3000

Jim Pingle

03:11 PM Feature #2462 (Resolved): New 3G (PPP) provider

pfSense currently doesn't include the 3G provider I'm using. Here's the provider's data:
Country: Slovenia
Provid... Jernej Simončič

02:52 PM Revision d57f6f21: Add a knob to tune the maximum number of tables that can be defined, the pf default of 1000 is too low for systems with >500 aliases.

Jim Pingle

02:51 PM Revision 84aea606: Add a knob to tune the maximum number of tables that can be defined, the pf default of 1000 is too low for systems with >500 aliases.

Conflicts:
etc/inc/filter.inc Jim Pingle

05/28/2012

08:34 PM Bug #2458: Pfsense not registering DNS servers found by PPP

Using snap built on Mon May 28 10:16:21 EDT 2012 I cannot reproduce the log from using the ppp-linkup (Revision 70317... royden yates

04:14 PM Bug #2458: Pfsense not registering DNS servers found by PPP

My comment may be invalid as I have a different response from snap 2.1-DEVELOPMENT (i386)
built on Mon May 28 10:16... royden yates

03:32 PM Bug #2458: Pfsense not registering DNS servers found by PPP

My modem is a Huawei LTE e398
The modified ppp-linkup script fails for me and results in the modem being unrespon... royden yates

10:09 AM Bug #2458 (Feedback): Pfsense not registering DNS servers found by PPP

I committed a fixed ppp-linkup script. It looks like what used to be 2 different variables is now a single variable.
... Seth Mos

09:33 AM Bug #2458 (Resolved): Pfsense not registering DNS servers found by PPP

2.1-DEVELOPMENT (i386) - built May 27 05:31:49 EDT 2012 on i386
If system general DNS settings are left empty no d... royden yates

05:54 PM Revision 30b9b160: Add missing div tag

Jim Pingle

05:53 PM Revision 454ea767: Add missing div tag

Jim Pingle

03:35 PM Bug #2038 (New): Some 3G WANs on 2.0.x do not come up on cold boot

The ZTE MF190 I have here doesn't like pfSense at all. Although the /dev/cuaU0.2 responds to AT and is willing to wor... Seth Mos

03:02 PM Bug #2455 (Resolved): IPSec Phase 2 settings GUI doesn't take into account AH vs ESP selection properly

Chris Buechler

10:18 AM Bug #2455: IPSec Phase 2 settings GUI doesn't take into account AH vs ESP selection properly

Yep, the GUI bug seems to be fixed.
I can even get an AH tunnel up (but so far no traffic goes through it, but if it... Ronald Antony

12:55 PM Revision 703173f2: Update the link script to parse the arguments 6 and 7 differently.

Previously mpd supplied the dns1 string as $6 and the IP as $7. It is now a single argument $6.
Apparently this chang... Seth Mos

10:14 AM Bug #2415: Fallout from CARP vip interface names changes

It's supposed to be selectable there for IP Alias type VIPs, so they can ride on top of the carp interface. (As a mea... Jim Pingle

10:12 AM Bug #2415 (Feedback): Fallout from CARP vip interface names changes

Changes have been committed but I still see Carp vips showing up in different places.
E.g. Add a carp vip on the v... Seth Mos

08:48 AM Bug #2377: Captive portal fails on empty RADIUS password

Why do you need an empty pass? Ermal Luçi

08:30 AM Bug #2440: Wireless client nic set for DHCP does not start dhclient

Cold boot on the alix with 2.0.2 RC1 works. However, the moment the link goes down it enters the up down cycle simila... Seth Mos

08:28 AM Bug #2450 (Resolved): Unable to use a ports alias on a firewall rule.

Through some miracle the alias type was not set in the config.
[2] => Array
(
... Seth Mos

05/27/2012

08:11 AM Revision 8fe0f2d3: Do not add link-local address on carp interface manually. It causes them to go double master.

Redmine ticket #2278 Seth Mos

05/26/2012

04:59 PM Feature #1986: Find a way to list logged in IPsec xauth users

A bit better info now, the i386/amd64 bit was a red herring, it can crash on both. They key factor is that you have t... Jim Pingle

12:50 PM Feature #1986 (New): Find a way to list logged in IPsec xauth users

Ermal - running the show-users command with no users connected seems to crash racoon with no logged error, just a cor... Jim Pingle

01:10 PM Bug #2455: IPSec Phase 2 settings GUI doesn't take into account AH vs ESP selection properly

I'll check it out as soon as a snapshot is live that incorporates the change... Ronald Antony

08:41 AM Bug #2455 (Feedback): IPSec Phase 2 settings GUI doesn't take into account AH vs ESP selection properly

Should be ok now, could you test again ?
Thanks.
Pierre Pierre POMES

08:19 AM Bug #2455 (Assigned): IPSec Phase 2 settings GUI doesn't take into account AH vs ESP selection properly

Pierre POMES

12:43 PM Revision b20a5cdb: Ticket #2455: do not check encryption algo for AH protocol

Pierre POMES

10:44 AM Bug #1629: invalid state table entries after WAN IP change

Same deal, 2.0.1-RELEASE and this happens every so often, but not on every IP change. I can delete the 2 state entri... Akom Benevolent

08:06 AM Revision 730c6494: do a direct return, it will not find the PinReady command

Seth Mos

07:54 AM Revision f94eb529: Adjust the +CPIN? cmd so it works for huawei 3G sticks too

Seth Mos

07:28 AM Revision 2f8782fe: More validation for ejecting CDrom devices for 3G sticks, needs extra manufacturers. Less typos in variable names also helps a lot.

Seth Mos

07:24 AM Revision 17d656fc: Only attempt to remove stale LCK files if they exist.

Seth Mos

03:20 AM pfSense Packages Bug #2457 (Resolved): Lightsquid 1.8.2 pkg v.2.32 logpath is wrong in lightsquid.cfg

In my pfSense router:
2.1-DEVELOPMENT (amd64)
built on Mon May 14 10:01:41 EDT 2012
FreeBSD 8.3-RELEASE-p1
... Gabriel Paniagua Castro

05/25/2012

10:32 PM Feature #2456 (Resolved): Option to choose default tab in IPsec status Dashboard widget

There are two things that would massively increase the usefulness of that widget:
a) remember or allow to be confi... Ronald Antony

08:42 PM Revision 6e0b68bf: List logged-in IPsec xauth users and provide a mechanism to disconnect them. Implements #1986

Jim Pingle

08:36 PM Revision bf3da811: List logged-in IPsec xauth users and provide a mechanism to disconnect them. Implements #1986

Conflicts:
usr/local/www/diag_ipsec.php Jim Pingle

08:01 PM Revision 2e9b8f61: Merge pull request #114 from marcelloc/patch-12

drag and drop function to reorder lists on pkg framework using jquery. Scott Ullrich

08:00 PM Revision 05a42cce: drag and drop function to reorder lists on pkg framework using jquery.

also new features like base64,description, tooltip custom texts.
tested with sorting features too.
related post on fo... Marcello Silva Coutinho

07:59 PM Bug #2373: There were error(s) loading the rules... (Floating rules bug)

Thanks Jim, sorry I was a bit frustrated - not with you guys, with myself for not testing the build before running it... Mark Uhde

11:15 AM Bug #2373: There were error(s) loading the rules... (Floating rules bug)

OK, iff there are PPTP issues, that would be a new/separate ticket. Try to confirm with others on the forum first. Th... Jim Pingle

10:52 AM Bug #2373: There were error(s) loading the rules... (Floating rules bug)

At least I have no annoying error messages anymore and looks like shaping is working, but i need more time to test it... Vladimir Suhhanov

05:38 AM Bug #2373: There were error(s) loading the rules... (Floating rules bug)

This bug appears fixed Ermal, BUT the changes seem to have broken the PPTP server *and* traffic shaping still doesn't... Mark Uhde

07:16 PM Revision 88810240: Allow for atleast 15 seconds before considering it a timeout, 60 would mean try once, since it would immediately hit the 60 second timeout

Seth Mos

07:16 PM Revision 13ea7caa: Make sure that we only perform validation if the GW name is filled as well as a IP address

Seth Mos

06:18 PM Revision 020ba5fe: Clarify the error message to something useful

Seth Mos

05:12 PM Bug #2440 (New): Wireless client nic set for DHCP does not start dhclient

Ok, this is definitely not fixed, I can't make sense of it. Deferring. Seth Mos

04:40 PM Feature #1986: Find a way to list logged in IPsec xauth users

Applied in changeset commit:6e0b68bfdea29b2943b6f104373f43cc56537bd8. Jim Pingle

04:33 PM Bug #2455 (Resolved): IPSec Phase 2 settings GUI doesn't take into account AH vs ESP selection properly

On the VPN:IPsec:Edit Phase 2 page there is the section Phase 2 proposal (SA/Key Exchange)
If under Protocol ESP i... Ronald Antony

04:14 PM Revision 31f0ef21: Switch to a common function to determine anti-lockout ports, and fix a bug that was getting the ports wrong with custom https+redirect on.

Jim Pingle

04:13 PM Revision 55cfe813: Switch to a common function to determine anti-lockout ports, and fix a bug that was getting the ports wrong with custom https+redirect on.

Jim Pingle

02:39 PM Bug #2349: vlan(4) needs altq adaption on FreeBSD 8.3++

Now that the traffic shaper itself is fixed, this is the bug I run up against, LOL. Thanks for your hard work Ermal! ... Mark Uhde

10:11 AM Revision ac10faad: Ensure there is a '.' between hostname and domain. Partially fixes #2454

Warren Baker

06:10 AM Bug #2454 (Feedback): Captive portal return wrong authentication URL

Applied in changeset commit:ac10faad42081ccfe48a37aa9814bc4684ffb701. Warren Baker

05:45 AM Bug #2454 (Resolved): Captive portal return wrong authentication URL

Since the last update "Built On: Sun May 13 02:42:10 EDT 2012" our captive portal doesn't work anymore.
The redir... Mathieu Déom

12:07 AM Bug #2452 (Rejected): Reject type rules only allowed for TCP

not a bug, and this isn't a place to ask questions, please post to the forum or mailing list. Chris Buechler

05/24/2012

10:23 PM Revision 1b9aff45: Merge pull request #113 from vizvayu/load_average

Added load average information to System Information widget Jim Pingle

09:56 PM Revision 2bae7ce3: Removed extra line :)

Cristian Feldman

09:52 PM Revision 25a46a3c: Added load average information to the System Information widget

Cristian Feldman

08:37 PM Revision 29c70782: Don't resolve on ipsec_get_phase1_dst() results, because ipsec_get_phase1_dst() already does that before returning output.

Conflicts:
etc/inc/ipsec.inc Jim Pingle

08:36 PM Revision fd97f40c: Test for empty here, rather than !, so a blank value (as from mobile clients) doesn't fall to the other tests.

Jim Pingle

08:35 PM Revision a55be495: Don't do resolve_retry on ipsec_get_phase1_dst() results, because ipsec_get_phase1_dst() already does that before returning output.

Jim Pingle

08:33 PM Revision a6222c03: Test for empty here, rather than !, so a blank value (as from mobile clients) doesn't fall to the other tests.

Jim Pingle

01:47 PM Feature #2453 (Resolved): [ER] allow renaming of network interfaces without enabling them

In Interfaces>(assign) you can create a new interface. The first one is WAN, the second is LAN, and then it starts wi... Ronald Antony

11:15 AM Bug #2012: 4th+ CARP member will not work with default automatic skew

Additional information:
http://forum.pfsense.org/index.php/topic,49745.0.html
Brian Scholer

11:11 AM Bug #2451: IPv6 rule: 'add network' becomes 'add single host'

block return in quick on $WIRED inet6 from any to 2a00:1450:: label "USER_RULE: TmpReject YouTube" Charles Orus

07:39 AM Bug #2451: IPv6 rule: 'add network' becomes 'add single host'

can you include what ends up in the /tmp/rules.debug? Seth Mos

07:13 AM Bug #2451 (Resolved): IPv6 rule: 'add network' becomes 'add single host'

I tried to add a reject rule for a range of IPv6 addresses:
"Reject TCP IPv6 to type network 2a00:1450:: CIDR ... Charles Orus

09:50 AM Bug #2446: pfSense fails to queue UDP packets

Also note, as I wrote in the original post, that ICMP echo request packets are correctly assigned to the queue for sp... Torgeir Skjøtskift

09:46 AM Bug #2446: pfSense fails to queue UDP packets

PBX is an alias consisting of two public IP addresses belonging to a public IP subnet defined on the interface opt1 a... Torgeir Skjøtskift

07:29 AM Revision 310ce280: Merge pull request #2 from TheBlueMatt/master

Custom Dynamic DNS Ermal LUÇI

07:20 AM Feature #1477: IGMPPROXY spamming the main systemlog

It's igmpproxy doing it. I get it too. As a workaround for myself I have just added igmpproxy to syslog and yes I agr... Charles Orus

07:17 AM Bug #2452 (Rejected): Reject type rules only allowed for TCP

I am sorry if I report intended behaviour. But I don't understand why rules of type reject only are allowed with TCP.... Charles Orus

02:25 AM Bug #2450: Unable to use a ports alias on a firewall rule.

Note that a existing rule on a different interface with the same alias actually works and is successfully expanded.
... Seth Mos

02:24 AM Bug #2450 (Resolved): Unable to use a ports alias on a firewall rule.

The following input errors were detected:
mngtports is not a valid start destination port. It must be a port a... Seth Mos

02:23 AM Bug #2440: Wireless client nic set for DHCP does not start dhclient

I performed more devd.conf changes, the media type is not recognized so I made it act on the _wlan subsystem now.
I ... Seth Mos