pfSense

09/14/2012

04:36 PM Revision 611b65a8: Force resync of vpns and dns even if the IP doesn't change in rc.newwanip, since we could be doing failover/failback for these services.

Jim Pingle

04:36 PM Revision 140f30ea: Add note about mac matching and media type.

Jim Pingle

12:10 PM Revision 80d30a83: Add some safety checks against empty entries

Jim Pingle

07:42 AM Feature #2241 (Feedback): DHCP - prevent dhcpd from handing out leases to certain MAC addresses

Implemented in commit:1f1a08c (and a fix in commit:80d30a8) Jim Pingle

02:26 AM pfSense Packages Bug #2632 (Rejected): Intel Quad Gigabit ET2 & Intel Quad Gigabit I350 igb could not setup receive structures

we don't control the drivers, test with newer base FreeBSD versions and report the issues to the mailing list net at ... Chris Buechler

01:55 AM pfSense Packages Bug #2632: Intel Quad Gigabit ET2 & Intel Quad Gigabit I350 igb could not setup receive structures

I forgot to mention for each interface that is active we recieve random "igb(x) could not setup receive structures" e... Matt Lehman

01:51 AM pfSense Packages Bug #2632 (Rejected): Intel Quad Gigabit ET2 & Intel Quad Gigabit I350 igb could not setup receive structures

There appears to be some sort of igb driver malfunction with 2.0.1 AMD64. We are using the 4GB NanoBSD vga build. We ... Matt Lehman

01:15 AM Revision 1f1a08c8: Allow/deny access to DHCP by partial MAC matching.

Jim Pingle

09/13/2012

04:52 PM Revision e288ddb1: Make the openvpn resync less intrusive, only trigger this if the OpenVPN interface is actually a gateway group name. Otherwise we skip.

Seth Mos

04:49 PM Revision 017817c2: Make the gateway group member check a boolean, might convert to something else at a later time so we could check group memberships.

Also launch the dyndns configure if the dyndns interface is a gateway group name, could check membership later if we ... Seth Mos

04:49 PM Revision 2223aa95: Always prepend the hostname we are working on

Seth Mos

03:46 PM Feature #2631: Highlight unapplied changes

This would be extremely hard to do.
You can always see a diff of the existing config to the previous - Diag > Back... Jim Pingle

03:43 PM Feature #2631: Highlight unapplied changes

Sorry for forgetting to include the version. It is version: 2.0.2-RC4 (amd64), and this is specifically a request fo... Christopher Peters

03:37 PM Feature #2631 (Needs Patch): Highlight unapplied changes

I have multiple users with access to our pfsense system, and this morning I found a large red warning in the GUI indi... Christopher Peters

05:18 AM Revision 768eb89c: Make sure we process dyndns interfaces that use a failover group when processed from rc.newwanip, which just passes a interface.

Seth Mos

05:04 AM Revision cdb0df65: Add function that checks if the interface is part of a gateway group.

Seth Mos

05:02 AM Revision 1be0e2da: Reference the correct variable here, it was broken before and could never have worked.

Seth Mos

09/12/2012

04:45 PM Revision ed6df99c: Use a better link here.

Jim Pingle

04:45 PM Revision 82f6b8e0: Use a better link here.

Jim Pingle

04:26 PM Revision bca84dfb: Don't skip over wrap_vga here.

Jim Pingle

04:23 PM Revision c832f6bf: Remove the filter configure call as this could otherwise lead to a recursive filter configure.

Seth Mos

04:18 PM Revision 0066932f: Print a nice large warning on the PPTP page about it no longer being considered secure.

Jim Pingle

04:18 PM Revision 0888bdfa: Print a nice large warning on the PPTP page about it no longer being considered secure.

Jim Pingle

03:44 PM Revision 1a6f5266: Bail here so we don't make invalid rules for IPsec if this is empty.

Jim Pingle

11:47 AM Feature #2552 (Resolved): Set the timezone in setup_php_ini.sh

Seth Mos

09/11/2012

04:47 PM Revision 8736e7a1: Merge pull request #221 from j-white/master

Fixed the rendering in IE for the password management page. Jim Pingle

03:03 PM Revision fa6a3d4d: Fixed the rendering in IE. Moved the head section out of the body.

Jesse White

08:32 AM Feature #2630 (Rejected): Add SSHD logging on a new SSHD tab under STATUS > SYSTEM LOG

Per jimp's request in forum: http://forum.pfsense.org/index.php/topic,53503.0.html
Please add a new SSHD tab that ... Jason Miles

09/10/2012

06:45 PM Revision 2643df8d: Merge pull request #220 from PiBa-NL/master

firewall log, allowing the showing of applied rule description with optional setting Jim Pingle

03:32 PM Revision 32f8552e: Show/hide toggle

Pi Ba

02:32 PM Revision 52b27268: Added a setting for configuring the firewall log to either:

-Not load descriptions
-Show descriptions in a column
-Show descriptions on a second row (after a click on 'show desc... Pi Ba

01:59 PM Feature #2629 (Feedback): Changed firewall log to show the applied rule description directly on screen, also layout optimization for "Show raw filter logs".

I approved the request, it looks good now, thanks!
The show/hide toggle is also a good addition, and the three-way... Jim Pingle

10:35 AM Feature #2629: Changed firewall log to show the applied rule description directly on screen, also layout optimization for "Show raw filter logs".

Thanks for your comments.
Made a few modifications and added a setting to allow for keeping old behavior.
And mad... Pi Ba

01:55 AM Revision 18be4037: remove bunk input validation

Chris Buechler

09/09/2012

05:19 PM Feature #2629: Changed firewall log to show the applied rule description directly on screen, also layout optimization for "Show raw filter logs".

There are people with thousands of rules in the evaluated ruleset, and there are also people on very slow hardware (t... Jim Pingle

03:31 PM Feature #2629: Changed firewall log to show the applied rule description directly on screen, also layout optimization for "Show raw filter logs".

Would layout attached as new screenshot be ok? !New layout proposal!
As for the performance, there is a 2000 max r... Pi Ba

11:12 AM Feature #2629: Changed firewall log to show the applied rule description directly on screen, also layout optimization for "Show raw filter logs".

I'm not opposed to having that information readily accessible, but that format isn't very easy to read. I don't know ... Jim Pingle

10:39 AM Feature #2629 (Resolved): Changed firewall log to show the applied rule description directly on screen, also layout optimization for "Show raw filter logs".

Changed firewall log to show the applied rule description directly on screen, also layout optimization for "Show raw ... Pi Ba

07:15 AM Bug #2527: Miniupnpd starts but isn't working

jim thank you for staying on top of this!!! Works great now Cino .

07:12 AM pfSense Packages Bug #1907: snort

its there for 2.1 beta Cino .

07:10 AM pfSense Packages Bug #2002: snort

this has been resolved as far as I know Cino .

09/08/2012

09:41 PM pfSense Packages Bug #2602: BandwidthD - Reported Traffic / Usage is approximately Double real amount

Yup. Problem is still there.
Is this the right bug tracker to be addressing issues with the BandwidthD package for p... Brock Prozeniuk

12:41 PM Revision a6d5e043: Changed firewall log to show the applied rule description directly on screen, also layout optimization for "Show raw filter logs".

Pi Ba

09/07/2012

05:40 PM Bug #2628 (Rejected): Lost Conection Wan

This is not a support ticket system. Please use the forum or mailing list for support issues. Jim Pingle

05:35 PM Bug #2628 (Rejected): Lost Conection Wan

Hello good afternoon I have a problem I get disconnected from the WAN side of the probe reinstalling pfsense and leav... Eduvaldo Zapata

03:51 PM Bug #2627 (Resolved): Old delegated prefixes are not removed from the LAN interface

When the LAN tracks the WAN via DHCPv6 Prefix Delegation and the WAN bounces, thus receiving a new delegated prefix, ... Anonymous

02:48 PM Feature #972: Allow adding gateways outside of interface subnet

AT&T is doing this now on their network handing off DHCP with a /32 mask with certain uverse gear like the NVG510, so... Jim Pingle

02:45 PM Bug #2626: Patch included: syslog.conf allows duplicate logging of daemon.info messages (e.g. from snort or dnsmasq)

Haha, ok I had it right the first time. The key sentence from the syslog.conf man page is:
If a received message ... Andre LaBranche

05:26 AM Bug #2626: Patch included: syslog.conf allows duplicate logging of daemon.info messages (e.g. from snort or dnsmasq)

Er... upon further consideration, I don't actually know what is going on. Snort emits daemon.notice, and dnsmasq emit... Andre LaBranche

05:08 AM Bug #2626 (Resolved): Patch included: syslog.conf allows duplicate logging of daemon.info messages (e.g. from snort or dnsmasq)

Took me a while to hunt this down, and it's the same issue as reported in:
http://forum.pfsense.org/index.php?topi... Andre LaBranche

09/06/2012

06:47 PM Revision c184fa27: fix imbalanced HTML tags

hopefully continues to fix #2625 but no guarantees. Darren Embry

06:47 PM Revision 00ad21b9: fix more imbalanced HTML tags.

hopefully continues to fix #2625 but no guarantees. Darren Embry

06:47 PM Revision 59167b10: fix some imbalanced HTML tags

hopefully this will fix #2625 but this needs to be done anyway. Darren Embry

06:46 PM Revision d329d587: a few coding indentation/style fixes.

Darren Embry

06:27 PM Revision b9144088: Correct this function call, OpenVPN client killing works again, fixes #2554

Jim Pingle

05:46 PM Revision 17c0bb50: Inconsistent behavior with Alias info popup

hopefully fixes #2625
http://redmine.pfsense.org/issues/2625 Darren Embry

05:08 PM Revision 73567959: never call parseInt without a radix.

Darren Embry

02:48 PM Bug #2074 (Feedback): Changing interface IP changes interface assignment as well

This may have been corrected by the fixes for ticket #2490 - please re-test on a current snapshot. Jim Pingle

02:06 PM Bug #2625: Inconsistent behavior with Alias info popup

Those popups contain Edit links. If you somehow get a mouseout event handler on the link to close the tooltip [which... Darren Embry

01:50 PM Bug #2625: Inconsistent behavior with Alias info popup

Applied in changeset commit:c184fa273f8f575266addc38f838a31b763d3d1d. Darren Embry

01:50 PM Bug #2625: Inconsistent behavior with Alias info popup

Applied in changeset commit:00ad21b9d71a5b5cda116a6a30293999847e39e4. Darren Embry

01:50 PM Bug #2625: Inconsistent behavior with Alias info popup

Applied in changeset commit:59167b10fbe27b37c3fe9683bd58c24a4abdb732. Darren Embry

12:50 PM Bug #2625: Inconsistent behavior with Alias info popup

Applied in changeset commit:17c0bb50f81011cba034af5593efa0be3d27df1a. Darren Embry

12:48 PM Bug #2625 (Feedback): Inconsistent behavior with Alias info popup

Hopefully commit:17c0bb50 fixes this.
Darren Embry

12:17 PM Bug #2625 (Rejected): Inconsistent behavior with Alias info popup

When you mouseover an alias when viewing firewall rules, nat rules, and so on, the info box pops up showing the addre... Jim Pingle

01:44 PM Feature #2622: Allow DHCP without a range so that only static mappings may be used on an interface

Sure, we'd be open to including the patch. Jim Pingle

04:31 AM Feature #2622: Allow DHCP without a range so that only static mappings may be used on an interface

Hello,
Thanks for your response.
If I provide a patch and test this feature (dhcp without pool), is there any cha... Aris Adamantiadis

01:40 PM Bug #2554 (Feedback): "kill client" functionality broken on OpenVPN status page

Applied in changeset commit:b91440888e0c2bd398c89155d36c4a9d050c5caa. Jim Pingle

12:22 PM Revision 9500537d: Don't add ldapcfg to racoon.conf since we're not using racoon's built-in LDAP support now. Moving to external script-based auth, see ticket #1112

Jim Pingle

04:45 AM pfSense Packages Bug #2624 (Resolved): Varnish3 Package + GUI seems broken

The Varnish3 Package + GUI seems broken. ACL is Corrupt.
Version: Latest PFSense 2.1 DEVELOPMENT snapshot
When cl... Julian Sternberg

09/05/2012

06:52 PM Revision b16d666d: No need for these other lines on nanobsd, and it can interfere with booting on some devices.

Jim Pingle

06:36 PM Feature #1009: Active Directory group membership checking

Hi,
ive made a new auth.inc that works for me on "2.1-BETA0 (i386) built on Sun Sep 2 18:21:50 EDT 2012 " based on s... Pi Ba

06:19 PM Bug #2623 (Closed): IPsec VPN - Phase-2 entries count wrong for disabled entries

webGUI IPsec VPN
On disabled (greyed-out) VPN tunnels, the count of Phase-2 entries is incorrect (it always shows ... Dim Hatz

05:27 PM Bug #2555: check_reload_status consumes 100% CPU usage

I confirm the bug at least on all recent 64bit builds and in the last too:
2.1-BETA0 (amd64)
built on Tue Sep 4 16:... Gianluca Toso

09:06 AM pfSense Packages Bug #2621: Update NUT due to CVE-2012-2944

I posted a HEADS UP message on the package forum.
http://forum.pfsense.org/index.php/topic,53308.0.html
Addition... Jim Pingle

08:57 AM pfSense Packages Bug #2621: Update NUT due to CVE-2012-2944

(the box that I'd need to use NUT) Mathieu Simon

08:57 AM pfSense Packages Bug #2621: Update NUT due to CVE-2012-2944

Awesome Jim - I try to catch all of your explanations :-)
Let me know if you need a guinea pig, the box won't arri... Mathieu Simon

08:54 AM pfSense Packages Bug #2621 (Feedback): Update NUT due to CVE-2012-2944

Updated binaries, reinstalled, works fine for me with my APC Back-UPS ES 450. I imagine it should work for others als... Jim Pingle

07:17 AM pfSense Packages Bug #2621: Update NUT due to CVE-2012-2944

No objections, but someone would need to check/test to ensure the config file is compatible and make any necessary ch... Jim Pingle

02:53 AM pfSense Packages Bug #2621 (Resolved): Update NUT due to CVE-2012-2944

NUT can be remotely crashed as of CVE-2012-2944
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2944
Any o... Mathieu Simon

09:01 AM Feature #2622: Allow DHCP without a range so that only static mappings may be used on an interface

Not a bug, but a missing feature.
Allowing DHCP without a defined range would be the only feasible way to do this,... Jim Pingle

08:53 AM Feature #2622 (Needs Patch): Allow DHCP without a range so that only static mappings may be used on an interface

Hello,
I have a range managed by a DHCP server. All the hosts in this range have a static DHCP assignment.
Each t... Aris Adamantiadis

04:13 AM pfSense Packages Bug #2618: High CPU load, low troughput - VMware ESXi (vSphere 5.0)

Hi Robin,
You opened the bug for ESXi 5.0 and above you're talking about VMware build 768111 which seems to be VMWar... Peter Baumann

01:10 AM pfSense Packages Bug #2618: High CPU load, low troughput - VMware ESXi (vSphere 5.0)

I see, but these people seem to have the same problem:
http://forum.pfsense.org/index.php?topic=41647.0 Robin Friberg

09/04/2012

11:09 PM pfSense Packages Bug #2618: High CPU load, low troughput - VMware ESXi (vSphere 5.0)

it's not a general problem, this very site runs behind a firewall in the latest version of ESX and it can push 1 Gbps... Chris Buechler

05:19 PM pfSense Packages Bug #2618: High CPU load, low troughput - VMware ESXi (vSphere 5.0)

So you'll reject that this is a bug?
I can recreate this problem 100% of the time.
I'll say its a problem that an... Robin Friberg

02:03 PM pfSense Packages Bug #2618 (Rejected): High CPU load, low troughput - VMware ESXi (vSphere 5.0)

not a general problem Chris Buechler

11:03 PM Bug #2620 (Rejected): Low outbound bandwidth

not a general problem hence not a legit bug report. Hacom can follow up with us via commercial support to test that s... Chris Buechler

09:38 PM Bug #2620 (Rejected): Low outbound bandwidth

35/35 fiber line. Full bandwidth with 2.0.1. Upgrading to 2.1 Beta0 upload speeds dropped to 5mb max. No traffic s... Drew Lehman

08:38 PM Revision 4c9e22b9: Add another test here for Nano+VGA to preserve the console selection.

Jim Pingle

03:58 PM Revision 744306c6: Fix up tcpdump for pflog stop/start a little, consolodate code, and restart tcpdump for pflog when saving log settings.

Jim Pingle

09/03/2012

12:52 PM Feature #2588: Import latest Intel Ethernet card drivers for FreeBSD 8-STABLE

Tested r235553 with 82574L on clean 8.3, looks like it really helps. Vladimir Suhhanov

09/02/2012

06:45 AM Bug #2619 (Resolved): DHCP lease delete doesnt work

i use the dhcp server with static arp and deny unknown clients ticked but suppose when those r unticked, it allows cl... Bipin Chandra

09/01/2012

03:15 PM Bug #1974: Captive Portal RADIUS accounting bytes wrong

I don't think this has been solved yet. I downloaded "pfSense-LiveCD-2.1-BETA0-i386-20120831-1027.iso.gz" from snapsh... Christophe B

05:55 AM pfSense Packages Bug #2618: High CPU load, low troughput - VMware ESXi (vSphere 5.0)

Forgot to specify some stuff:
I got two installations, one in prod and one in test.
The one in test was the one i... Robin Friberg

05:40 AM pfSense Packages Bug #2618 (Rejected): High CPU load, low troughput - VMware ESXi (vSphere 5.0)

Hi,
I'm having trouble with running pfsense (i386 and amd64) at vSphere ESXi servers.
When I do a speedtest betwe... Robin Friberg

08/31/2012

08:33 PM Bug #2617 (Resolved): resolv.conf missing ipv6

I posted in the forum about this a while back. resolv.conf doesn't get the ipv6 entries from my ISP. I don't think th... Don Simpson

08/30/2012

10:35 AM Bug #2611: all gateway not present when editing existing rule.

on further study, once u create a rule with a gateway and then when u try to edit then it doesnt appear, other rules ... Bipin Chandra

10:31 AM Bug #2611: all gateway not present when editing existing rule.

i have the same issue
when u edit gateway doesnt appear
when u add new rule based on old gateway doesnt appear
w... Bipin Chandra

06:49 AM Revision d587bbf9: Simplify schedules code and some styly nits

Ermal LUÇI

06:46 AM Revision daa06fb7: Simplify schedules code and some styly nits

Ermal LUÇI

06:36 AM Revision f68a7f71: Merge pull request #217 from phildd/master

Month matching for scheduler rules Ermal LUÇI

05:30 AM Bug #2254: uPNP breaks limiters

i think the ticket for this no longer exists so does it mean its fixed? Bipin Chandra

02:11 AM Revision 50b3fc5a: Month matching for scheduler rules

Fix some obvious things in the firewall scheduled rules code. If a user has some rules with a month specified and som... phildd

08/29/2012

09:17 PM Bug #2614: Scheduler bug - fires off on date not matched correctly

For a start, this code looks odd in /etc/inc/filter.inc at 3015:
@ if($timeday['month'])
$month = $timeday['mon... Phillip Davis

04:08 PM Bug #2614: Scheduler bug - fires off on date not matched correctly

That is in fact what i already did, nevertheless the scheduler fired off on 28 August while it was set as you see the... Sangye Ngawang

02:58 PM Bug #2614: Scheduler bug - fires off on date not matched correctly

You can go back under Diagnostics > Backup/Restore on the Config History tab and get an older version of your config ... Jim Pingle

02:49 PM Bug #2614: Scheduler bug - fires off on date not matched correctly

Attached is a screengrab from the scheduler section, but i have to change it now for a scheduled streaming event tomo... Sangye Ngawang

02:17 PM Bug #2614: Scheduler bug - fires off on date not matched correctly

I would need to see the scheduler section to validate that nothing is missing with that. Ermal Luçi

07:25 PM Bug #2555: check_reload_status consumes 100% CPU usage

... Snowy Maslov

02:45 PM Bug #2555: check_reload_status consumes 100% CPU usage

When this happens, please capture the full output of "ps uxawww" and attach it here. Odds are there are a batch of pr... Jim Pingle

05:37 PM Revision 13f334f3: Be consistent on formatting to easy reading

Ermal LUÇI

05:30 PM Revision 06498591: Try to remove old states when a DHCP IP changes, might be related to ticket #1629 and also "unable to allocate llinfo" messages from states through an old gateway.

Jim Pingle

05:28 PM Revision 56178d9a: Correct filter tdr install_cron function

Ermal LUÇI

03:44 PM Revision 58d9e380: Don't skip over wrap_vga here.

Jim Pingle

02:28 PM Bug #2409: ipfw - entryzerostats

Is this still the same with latest snaps? Ermal Luçi

02:27 PM Bug #2389: CP asks for a voucher code from MACs in the passthrough list

Can you please try with a recent snapshot.
The snapshots back there had some issues with how CP config was being app... Ermal Luçi

11:51 AM Bug #2597 (Resolved): Unable to create GRE port forward

Jim Pingle

11:47 AM Feature #1835 (New): uPNP IPv6 support

The newer miniupnpd does support it, but produces errors when it's enabled and run. It compiles OK, but doesn't funct... Jim Pingle

11:42 AM Feature #2595 (Resolved): Better hardware support for the Atoms (D2500, D2700, N2800)

Jim Pingle

11:41 AM Bug #2553 (Resolved): New lighttpd breaks connections from Safari on iOS

Jim Pingle

11:40 AM Bug #2527 (Resolved): Miniupnpd starts but isn't working

Works for me, and many others on the forum report it to be working now. Jim Pingle

11:40 AM Bug #2511 (Resolved): DHCPv6 Shows Wrong DUID

Jim Pingle

11:39 AM Bug #2490 (Resolved): Reassigning interfaces on console during restore causes them to be disabled, lose descriptions

Jim Pingle

11:39 AM Bug #2468 (Resolved): Interface does not exist warning during a network interface mismatch

Jim Pingle

11:38 AM Bug #2384 (Resolved): "Network interface mismatch" displayed for some valid configurations

Jim Pingle

11:38 AM Bug #1974 (Resolved): Captive Portal RADIUS accounting bytes wrong

Jim Pingle

11:37 AM Feature #1829 (Resolved): CARP with IPv6 support

No problems with CARP+IPv6 on several clusters, seems to be fine. Jim Pingle

11:36 AM Bug #1279 (Resolved): Filesystem on NanoBSD is left read/write at first bootup after package reinstallation

This is fixed from all the tests I've tried, and others on the forum have reported it to be fixed. Jim Pingle

11:36 AM Bug #1049 (Resolved): After reinstalling packages at bootup, WebUI not accessable (NanoBSD)

Multiple sources confirm this is fixed. Jim Pingle

11:26 AM Bug #2606 (Resolved): Unable to create ESP port forward

Ermal Luçi

10:57 AM Bug #2606: Unable to create ESP port forward

Updated to the latest nightly today (8/29) and was able to successfully add a port forward using the ESP protocol. Josh Hornung

08/28/2012

06:41 PM Revision 6ab59b35: Add check for local port being set before testing. Fixes #2606

Ermal LUÇI

03:12 PM Bug #2401 (New): Mounting read-only after mounting read-write can be very slow on NanoBSD

It may be improved a little but it's still slow even just running mount, no refcounts involved.
Still only affects c... Jim Pingle

02:04 PM Bug #2401 (Feedback): Mounting read-only after mounting read-write can be very slow on NanoBSD

This should have gonne away with the fixes that went in for reference counting fixes. Ermal Luçi

03:00 PM Bug #2613 (Feedback): Incoming traffic on a vlan is not seen

Applied in changeset pfsense-tools:commit:cba403d0126da81cd3fec30eed295548e4dbb445. Ermal Luçi

07:06 AM Bug #2613: Incoming traffic on a vlan is not seen

After reading all that I've done and again carefully reading epek's answer I must admit he was right.
Setting the ... Andre Vink

02:53 PM Bug #1279 (Feedback): Filesystem on NanoBSD is left read/write at first bootup after package reinstallation

With changes done to the reference counting code this should be fixed. Ermal Luçi

01:59 PM Bug #2605 (Resolved): Filter rule are not created correctly

Ermal Luçi

09:30 AM Bug #2605 (Feedback): Filter rule are not created correctly

Applied in changeset commit:0d0558195ed9a0df50e8bce1fd52419921b0e30e. Jim Pingle

06:50 AM Bug #2605: Filter rule are not created correctly

yes. This patch works. Thanks for the quick turn around!
(tested with 2.1-BETA0 (amd64)
built on Mon Aug 27 14:5... Johannes Ullrich

01:58 PM Bug #2597 (Feedback): Unable to create GRE port forward

Ermal Luçi

01:50 PM Bug #2606 (Feedback): Unable to create ESP port forward

Applied in changeset commit:6ab59b35ec999c576a95317985b6901428c143bc. Ermal Luçi

12:31 PM Bug #2614: Scheduler bug - fires off on date not matched correctly

No i can't give my config - but ill add the scheduled tasks and hope that this is related to the scheduler menu item.... Sangye Ngawang

12:12 PM Bug #2614: Scheduler bug - fires off on date not matched correctly

Can you provide some examples from your config to debug this easily? Ermal Luçi

08:27 AM Bug #2614 (Closed): Scheduler bug - fires off on date not matched correctly

I use Scheduler to trigger many rules, today the rules were all activated
The last date that was still in there was... Sangye Ngawang

12:22 PM Revision 0d055819: Don't put this rule in if $carp_int is empty, it makes an invalid rule. Fixes #2605

Jim Pingle

08/27/2012

06:41 PM Revision e3df974b: Restructure these IP/subnet tests so they don't break transport mode.

Jim Pingle

06:38 PM Revision 116ba665: Restructure these IP/subnet tests so they don't break transport mode

Jim Pingle

02:33 PM Revision ca929de8: Merge pull request #216 from bcyrill/patch-8

Fix bug reported in http://forum.pfsense.org/index.php/topic,53000.0.htm... Jim Pingle

02:25 PM Revision 2ef16014: Fix bug reported in http://forum.pfsense.org/index.php/topic,53000.0.html

Cyrill B

12:44 PM Bug #2605: Filter rule are not created correctly

If you change the test to this:... Jim Pingle

08:11 AM Bug #2613 (Resolved): Incoming traffic on a vlan is not seen

Traffic with a vlan tag is not seen on the vlan interface but is seen on the master interface.
traffic with a vlan... Andre Vink

07:01 AM Bug #2612: PPTP client not connecting remote IPSEC site

this conf was working before upgrade,can you please replicate this issue?do you want extra info from me? Hafiz Rafiyev

06:32 AM Bug #2612 (Rejected): PPTP client not connecting remote IPSEC site

This is a support/configuration issue, not a bug. Please use the forum or mailing list. Jim Pingle

02:36 AM Bug #2612: PPTP client not connecting remote IPSEC site

this issue asked by me on August 17 2012 under PPTP subcategory,but any answer yet Hafiz Rafiyev

02:34 AM Bug #2612 (Rejected): PPTP client not connecting remote IPSEC site

I got an IPSEC tunnel between Site1 and Site2. Both running pfSense 2.0.1-RELEASE (amd64)
PPTP clients connect to S... Hafiz Rafiyev

12:03 AM Revision 82c41ba1: Merge pull request #215 from phildd/master

Tidy console package install progress percentage Jim Pingle

08/26/2012

08:40 PM Bug #2611: all gateway not present when editing existing rule.

Config attached.
it's a fresh install from 1-2 weeks with the 2.1 branch. updated to Sat Aug 25 13:20:25 EDT 2012 ... Alexandre Paradis

08:13 PM Bug #2611: all gateway not present when editing existing rule.

Make sure you've read and followed the stickies on the 2.1 and IPv6 boards on the forum - sounds like you didn't edit... Jim Pingle

08:12 PM Bug #2611 (Feedback): all gateway not present when editing existing rule.

not seeing that, need more info, and/or a backup of your config attached.
Chris Buechler

07:26 PM Bug #2611 (Closed): all gateway not present when editing existing rule.

When creating, i have all my gateway, i can select the correct one, everything works fine. if i save it, then edit th... Alexandre Paradis

07:36 PM Revision e961bd67: Tidy console package install progress percentage

This makes the file download percentage progress come out at the end of the line. New values are updated by using bac... phildd

11:40 AM Feature #2595: Better hardware support for the Atoms (D2500, D2700, N2800)

kitdavis reported in forum, that for amd64 build problem is also solved.
http://forum.pfsense.org/index.php/topic,51... Vladimir Suhhanov

10:04 AM Bug #2610 (Closed): Whole-disk gmirror may break when upgraded to a FreeBSD 10.x base

Due to various changes in geom and how things are checked, a whole-disk gmirror may break when the base OS is updated... Jim Pingle

09:23 AM Feature #2609 (Needs Patch): Support for ActiveDNS

ActiveDNS is a South African service only aimed at serving South African
customers who use the cheaper "local-only" ... Edward van Kuik

06:13 AM pfSense Packages Bug #2608 (Resolved): typo in pfblocker text

in the north america page we have :
'Alias Only' - Will create alias pfBlockerNorth America with selected countrie... Alexandre Paradis

08/25/2012

10:43 PM Feature #2603: Provide support for Package external name, internal name and service name to be different

What design is preferred?
Allow a package to specify both <internal_name> and <service_name> in case they are differ... Phillip Davis

05:15 PM Revision d9c72958: Fix ntp config syntax for the version we're using

Jim Pingle

07:30 AM Feature #2361: router adv. daemon only allows for one subnet / limited options

sorry for not responding earlier (haven't had a lot of time to experiment with pfsense). Just to push back a bit here... Johannes Ullrich

02:00 AM Feature #2607: CARP Traffic affected from Traffic Shaping

what do you mean bad user-defined config? I'm in a multi-WAN/multi-LAN setup. CARP is just set upped in my master and... Emmanuel Rivera

01:04 AM Bug #1053: CBQ per se, in kernel

been waiting for this fix since a year now Bipin Chandra

01:00 AM Bug #1575: Limiters are bypassed by local applications injecting rules

will this be fixed or is it fixed in 2.1? Bipin Chandra

08/24/2012

11:10 PM Feature #2607 (Feedback): CARP Traffic affected from Traffic Shaping

not a bug, you have a bad user-defined config. it's certainly possible to break CARP with certain shaper configs. Don... Chris Buechler

11:04 PM Feature #2607 (Duplicate): CARP Traffic affected from Traffic Shaping

CARP is freaking out, some VIPs were master on a box and some others are on the backup box. This started to happen wh... Emmanuel Rivera

10:22 PM Bug #2349: vlan(4) needs altq adaption on FreeBSD 8.3++

Tried updating to the latest snapshot tonight and immediately noticed issues related to the ARP on a VLAN. Looking to... Chris Ogden

05:19 PM Bug #2606 (Resolved): Unable to create ESP port forward

When attempting to create a port forward rule for the ESP protocol, pfSense complains a destination port has not been... Josh Hornung

04:42 PM Bug #2605 (Resolved): Filter rule are not created correctly

After upgrading to the latest snapshot, the filter rules refuse to load due to an error:
----
There were error(s)... Johannes Ullrich

12:47 PM Revision 0300d9ec: Try harder to determine hostname when sending e-mail.

Jim Pingle

08:53 AM Revision 7fca58c6: Merge pull request #214 from phildd/master

Fix IPv6 remote_network typo Seth Mos

08:46 AM Revision 062fe17d: Fix IPv6 remote_network typo

The IPv4 remote network was being displayed in both the IP4 and IPv6 input fields. Then whatever value was in the IPv... phildd

01:39 AM Feature #2595: Better hardware support for the Atoms (D2500, D2700, N2800)

FIXED for the D2500CC board, at least on x86 architecture.
Waiting confirmation for the x64 in the forum Vladimir Suhhanov

08/23/2012

10:22 PM Feature #814: GUI should allow to bind openvpn on different ip same port

Vote for this feature. ahshang ang

09:45 PM Revision 627fa5a9: Merge pull request #213 from bcyrill/patch-5

Test for an array before using it like one. Jim Pingle

09:40 PM Revision cf74d3a8: Test for an array before using it like one.

Cyrill B

03:30 PM Bug #2590 (Feedback): OVA reports wrong version

Applied in changeset pfsense-tools:commit:708b07d63bbdc49b2f56eca5cb3c8862f4c33a27. Jim Pingle

03:30 PM Feature #2595 (Feedback): Better hardware support for the Atoms (D2500, D2700, N2800)

Applied in changeset pfsense-tools:commit:2cce75c70fa831a4356184f88cefd6a3b65853c1. Ermal Luçi

03:30 PM pfSense Packages Bug #2572 (Feedback): bgpd[30274]: /var/etc/openbgpd/bgpd.conf: owner not root or current user

Applied in changeset commit:c4cb635d11cd82e98be9d16d9abf4fc8b4a35c84. Jim Pingle

03:30 PM pfSense Packages Bug #2575 (Feedback): OpenOSPFd pkg BETA 0.5.2 produces invalid ospfd.conf

Applied in changeset commit:c051bf14000857ffff97ab80273a1a0ea6b62c7b. Jim Pingle

03:10 PM Bug #1049: After reinstalling packages at bootup, WebUI not accessable (NanoBSD)

Applied in changeset commit:1032ab47c73871993e34446b84767efd235cfd05. Jim Pingle

03:10 PM Bug #2553: New lighttpd breaks connections from Safari on iOS

Applied in changeset commit:d4f8cb1ad30c15e34a47f2d5c27d0d6ca09b5e2f. Jim Pingle

03:10 PM Bug #2326: Erroneous successful webGUI authentication with blank password and AD authentication backend

Applied in changeset commit:d427980c76cd11beeb923c939e1924fecf532a08. Ermal Luçi

03:10 PM Bug #2364: PPPoE Server doesn't restart correctly

Applied in changeset commit:c714a1afdae4ce79dcb51e07787303b64ccf212a. Ermal Luçi

03:10 PM Bug #2209: PPPoE MTU is not correctly set from values on interfaces.php

Applied in changeset commit:e39b6feb28bfbd72d0dca923bdc2d458b84476bd. Ermal Luçi

06:41 AM Bug #1841: TCP state issue when traffic passing through a GRE tunnel within IPSEC

Hi! Thanks for the info - i will configure that as in one of my next projects, as i have to configure some tunneling ... Martin Saini

08/22/2012

06:50 PM Revision 5a429ed6: Fix another typo

Jim Pingle

04:15 AM Revision c1406943: Fix typo

Jim Pingle

04:06 AM Bug #2570: Status: Interfaces - Fatal error: Call to undefined function filter_configure()

Fixed by pfsense Github pull request 200 Phillip Davis

03:40 AM Feature #2603 (Resolved): Provide support for Package external name, internal name and service name to be different

Startup and shutdown code currently has lines like:
start_service($package['name']); /* rc.start_packages line 57 */... Phillip Davis

08/21/2012

08:47 PM Revision 18080a21: This file won't exist at bootup yet, drop it from the sanity test.

Jim Pingle

08:23 PM Revision 5c8843d5: Teach ntpd how to get its time from a local GPS on serial.

Jim Pingle

03:11 PM pfSense Packages Bug #2602 (Closed): BandwidthD - Reported Traffic / Usage is approximately Double real amount

2.0.1-RELEASE (amd64)
built on Mon Dec 12 18:43:51 EST 2011
FreeBSD 8.1-RELEASE-p6
bandwidthd 2.0.1.3
AMD PhenomI... Brock Prozeniuk

08/20/2012

06:00 AM Bug #2401: Mounting read-only after mounting read-write can be very slow on NanoBSD

Hi,
I've been having this problem with NanoBSD too. However, I just noticed that when I updated Safari to v6.0 the p... Marcus Brown

08/19/2012

06:17 PM Revision 73815007: Test for an array before using it like one.

Jim Pingle

08/17/2012

02:43 PM Revision be9c20c7: Use REQUEST_URI here so the GET parameters are preserved (makes the links work better for things like interfaces.php?if=wan, and packages.

Jim Pingle

05:15 AM Revision dc3e3acb: Disable Execution timeout for this script.

Seth Mos

08/16/2012

05:53 PM Revision 59b97df1: Correct carp rules and a weird nat rule on carp so they actually generate what they are meant for

Ermal LUÇI

01:30 PM Bug #2600: DHCP Server different parameter order in config.xml interrupts peer groups

Hello Jim
I startet with an "empty" slave and configured interfaces and DHCP before initiating CARP.
Then it was... Erik Ruedin

11:34 AM Bug #2600: DHCP Server different parameter order in config.xml interrupts peer groups

Do you have the HA sync settings set to copy the DHCP settings from master to slave? If so it should be copying that ... Jim Pingle

08:01 AM Bug #2600 (Resolved): DHCP Server different parameter order in config.xml interrupts peer groups

I have installed two pfsense (2.1) in CARP mode which works fine exceptionally the DHCP server. I had always interrup... Erik Ruedin

07:33 AM Feature #2599 (Closed): Captive Portal autologin function better than MAC passthrough

We use pfsense in an apartment hotel to organize the network. As portal server we use Antamedia at the moment. We wan... Erik Ruedin

02:18 AM Revision 391abfcf: Extend the shortcuts code and link back from Status > Services also.

Jim Pingle

12:54 AM Bug #2598 (Resolved): reply-to on IPv4+6 rules breaks v6

The auto-added reply-to on WAN rules in combination with IPv4+v6 rules breaks v6 connectivity, as the v4 IP is includ... Chris Buechler