Project

General

Profile

Activity

From 08/27/2012 to 09/25/2012

09/25/2012

09:14 PM Bug #2645: stristr() warning repeated dozens of times during boot
I put in some basic CARP settings (and maybe not a consistent/valid set?) and got the same PHP warnings from these co... Phillip Davis
05:34 PM Bug #2645 (Resolved): stristr() warning repeated dozens of times during boot
During boot, the message:
Warning: stristr(): Empty delimiter in /etc/inc/interfaces.inc on line 3872
is repeat...
Adam Thompson
08:54 PM Revision 1be1a67a: while booting do not let carp wait for pfsync synchronization if pfsync is not enabled
Pi Ba
05:14 PM Bug #2644 (Rejected): unbound package needs re-enabled on 2.1
no idea what this even means, Unbound will not make 2.1. Chris Buechler
02:08 PM Bug #2644 (Rejected): unbound package needs re-enabled on 2.1
with unbound disabled up grade loosed gui for unbound Michael Kellogg
03:50 PM Revision 767cf960: Refine OpenVPN client/server deletion to allow for removing invalid empty entries. Fixes #2643
Jim Pingle
12:18 PM Revision f00278f1: Ticket #2635: during ipsec reload, do not generate spd for disabled ph1
Pierre POMES
11:10 AM Bug #2643 (Feedback): OpenVPN Server not deletable
Applied in changeset commit:767cf960f4f7f6f525d971f6247c663590c1637e. Jim Pingle
11:09 AM Bug #2643: OpenVPN Server not deletable
That is what the commit fixes - it will allow you to delete those entries. Jim Pingle
11:09 AM Bug #2643: OpenVPN Server not deletable

I can not delete it because, unfortunately, nothing happens. :-(. When i press to oft the X that crash my openvpn s...
Sven Timmermann
10:53 AM Bug #2643: OpenVPN Server not deletable
OK, I committed a fix, next new snapshot dated after this commit should be OK. You can then just click the X on those... Jim Pingle
07:28 AM Bug #2643: OpenVPN Server not deletable
you can e-mail it to jimp (at) pfsense (dot) org. Jim Pingle
07:19 AM Bug #2635 (Feedback): Disabling IPsec leaves SPD
This should be fixed now. Pierre POMES

09/24/2012

07:55 PM Revision 687dbc35: Merge pull request #232 from bcyrill/patch-2
Make tables sortable Jim Pingle
07:38 PM Revision 5b42a459: Make tables sortable
Cyrill B
06:50 PM Revision 4f98a4a0: Merge pull request #231 from bcyrill/patch-1
Update etc/inc/priv.defs.inc Jim Pingle
06:48 PM Revision 14551ae0: Update etc/inc/priv.defs.inc
Include privileges for Diagnostics Sockets page Cyrill B
04:51 PM Revision 4087a5f5: Merge pull request #230 from phil-davis/master
Separate backend keywords from GUI language display in captive portal Jim Pingle
04:11 PM Revision eafb21b3: Separate backend keywords from GUI language display in captive portal
When the GUI language was set to Portuguese, keywords like "default" and "unformatted" would be translated into Portu... Phil Davis
04:08 PM Bug #2643: OpenVPN Server not deletable
Jim P wrote:
> We'll need to see the openvpn-server section of your config.xml - you can remove the IPs and certs/ke...
Sven Timmermann
03:30 PM Bug #2643: OpenVPN Server not deletable
We'll need to see the openvpn-server section of your config.xml - you can remove the IPs and certs/keys if needed but... Jim Pingle
03:25 PM Bug #2643 (Resolved): OpenVPN Server not deletable
Hi,
my Version:
2.1-BETA0 (amd64)
built on Sun Sep 23 21:11:43 EDT 2012
FreeBSD 8.3-RELEASE-p4
i have tr...
Sven Timmermann
10:10 AM Feature #2629 (Resolved): Changed firewall log to show the applied rule description directly on screen, also layout optimization for "Show raw filter logs".
Jim Pingle
10:08 AM Feature #2629: Changed firewall log to show the applied rule description directly on screen, also layout optimization for "Show raw filter logs".
Think this issue can be closed now.
Im happy with how it works now. And it has an option for pretty much everyone....
Pi Ba
12:18 AM Revision 489a6e7f: Merge pull request #228 from PiBa-NL/master
fix few issues in virtual IP edit page Jim Pingle
12:05 AM Revision 26a5f8c8: fix warning message for CARP /32 /128 masks added /31 /127 as these are also not applicable for carp which needs at least 3 IP's to function.
Pi Ba

09/23/2012

11:21 PM Revision 362c9bb0: Don't die silently if the time is too far off. Fix from: dhatz
Jim Pingle
11:05 PM Revision 9e0f8e23: fix for breaking editing carp edit selection setting.
Pi Ba
08:55 PM Revision f665130d: Merge pull request #227 from PiBa-NL/master
Diagnose\Sockets page improvements. Jim Pingle
07:52 PM Revision c75fd3db: Diagnose\Sockets page renamed and now also has button to show all socket connections, explanation moved to bottom.
Pi Ba
06:43 PM Feature #2642 (Feedback): Change ntpd config so it doesn't silently exit if time is substantially off
Committed in commit:362c9bb0 Jim Pingle
12:03 PM Feature #2642 (Resolved): Change ntpd config so it doesn't silently exit if time is substantially off
pfsense 2.1-BETA0 w/ ntpd 4.2.6p5 in a VBox VM: If host system is "suspended" overnight, the clock of the FreeBSD/pfs... Dim Hatz
11:43 AM Bug #2641 (Resolved): mac spoof on wan (pppoe) doesnt spoof
i have a pppoe connection and my isp requires to spoof a fixed mac but it doesnt seem to work on latest nanobsd alix ... Bipin Chandra
01:46 AM Revision 5dc66dff: Merge pull request #225 from PiBa-NL/master
Virtual IP Edit consistent options, "Sockets listening" page, openVPN allow change mode Jim Pingle

09/22/2012

10:44 PM Revision d41bb447: Add a "Sockets listening" page to the Diagnostics menu.
This for easy viewing of what services are bound to which interface and port.
( based on the file diag_sockets.php fr...
Pi Ba
09:26 PM Revision b1aa3804: changed "Firewall: Virtual IP Address: Edit" page to always have the same options available (if applicable) for IPalias/CARP/ProxyArp/other
Pi Ba
09:23 PM Revision c8bb7f15: Allow for changing OpenVPN TUN to TAP device mode without reboot.
Pi Ba

09/19/2012

11:58 PM Bug #2633: Captive Portal timeouts cause users to be stuck in limbo
Here's my suggested fix to it. I know it isn't pretty, but it helps
Carlos Pereira
11:43 PM Bug #2633: Captive Portal timeouts cause users to be stuck in limbo
The fix for this lies in /etc/rc.prunecaptiveportal
The script has to check not only for running instances of the ...
Carlos Pereira
11:20 PM Bug #2633: Captive Portal timeouts cause users to be stuck in limbo
After a lot of researching and poking through the code, I think I have identified the source of the problems.
It see...
Carlos Pereira
12:36 PM Feature #2640 (Needs Patch): Add a way to find where an alias is used
It would be very nice to have a way to find where an alias is used in the config. I'm currently searching for a rule... Ugo Bellavance
12:19 PM Revision ea68f6cc: We should also resync openvpn clients since they can use gateway groups too.
Jim Pingle
12:16 PM Bug #2639 (Resolved): Selecting a Country under Interfaces > (assign), PPPs tab, PPP Link type populates provider list with javascript code.
Under Interfaces > (assign), PPPs tab, add an entry, select PPP Link type, then choose a country such as United State... Jim Pingle
10:26 AM Bug #2619 (Resolved): DHCP lease delete doesnt work
Jim Pingle
03:35 AM Bug #2619: DHCP lease delete doesnt work
u can close this, its solved in the 18th September snapshot Bipin Chandra
07:57 AM Feature #1189: Gateway: Multiple monitor ips
me too would want this as i have had the same issue from long but simply tried to avoid it by disabling the monitor c... Bipin Chandra
07:22 AM Feature #1189: Gateway: Multiple monitor ips
I also would like to see the possibility to add multiple Monitor IPs. This would be a great improvement. Andreas Heckmann
12:17 AM Revision 7e3891ff: don't log here, users can define their own logging rules if they want logging
Chris Buechler

09/18/2012

04:27 PM Revision 15f47319: Merge pull request #223 from PiBa-NL/master
Firewall log, alternating color rows & sorting improvements. Jim Pingle
01:17 PM Bug #2638 (Resolved): Captive portal status widget on the Dashboard is not working
This is due to the fact that in 2.1 zones were introduced and this widget still has code like (in /usr/local/www/widg... Yuri Keren
12:07 PM Revision f6e4341d: Merge pull request #224 from phil-davis/master
Fix deleting DHCP leases Jim Pingle
09:35 AM Feature #2637 (Closed): Add ability to define dnsmasq cache size
Dnsmasq supports a maximum cache size of up to 10,000 records, but defaults to only 150. On most pfSense platforms, t... Chris Wadge
05:38 AM Revision f6fef11d: Fix deleting DHCP leases
This broke when the code was changed to suck the whole leases file into an array with:
$leases_contents = file($lease...
Phil Davis
02:56 AM Bug #2514: static routes for monitor IPs should be removed
I have just upgraded a 2.0 Final installation to "Sun Sep 16 19:35:57 EDT 2012" and everything seems to work fine now... Peter O

09/17/2012

10:41 PM Bug #2636 (Resolved): state mismatch issue on enc0 with amd64
There's some kind of state mismatch issue on enc0 with amd64. Potentially related, tcpdump on enc0 doesn't show any i... Chris Buechler
09:48 PM Feature #2634: No IPv6 networks in firewall NAT rules
Thanks for the response Seth,
You understand correctly, I'm wanting to redirect IP6 traffic. I understand with squ...
Guy B
07:34 PM Revision db4fb430: Safety belt
Jim Pingle
04:33 PM Revision 00c0720a: gitsync: Improve parameter handling to allow hyphenated options anywhere in the parameter list. (previously only allowed them at the end)
Erik Fonnesbeck
01:47 PM Revision 147b2be1: gitsync: Add --minimal parameter that installs only the updated files.
Erik Fonnesbeck
12:38 PM Revision 6fda15a9: fix for: Output from CSRF magic mangles files in Diagnostics > Edit File
http://redmine.pfsense.org/issues/2294 Darren Embry
12:33 PM Revision c578fb0f: Fix special build_commit tag that was broken from previous change to how it read the file with the commit ID.
Erik Fonnesbeck
06:49 AM Bug #2635 (Resolved): Disabling IPsec leaves SPD
After disabling a phase 1, the SPD is left in place where it should be cleared. Chris Buechler

09/16/2012

11:55 PM Feature #2634: No IPv6 networks in firewall NAT rules
Yeah, we'll need to block any ipv6 addresses in a redirect rule, it won't work.
Any nat or rdr can not span address ...
Seth Mos
05:23 PM Feature #2634 (Resolved): No IPv6 networks in firewall NAT rules
I'm using snapshot:
2.1-BETA0 (i386)
built on Sat Sep 15 16:38:08 EDT 2012
I tried adding a port forward rule t...
Guy B
11:33 PM Revision cba980f6: Add support for multiple DHCP pools within the interface's subnet, and allow most of the settings for the main range to be set specific inside the pool. (e.g. it allows setting different gateways and DNS for different pools). Still needs improved input validation to prevent overlapping ranges/pools.
Jim Pingle
10:17 AM Revision f06f7cc0: (line endings UNIX format..)
Firewall log alternating colored rows
Firewall log sortable
Fixed several sorting issues in widgets and other pages
S...
Pi Ba

09/15/2012

01:52 PM Bug #2633 (Resolved): Captive Portal timeouts cause users to be stuck in limbo
Hi Guys,
I run the internet service for a 350+ user student residence and I'm trying out the 2.1 snapshots.
Follo...
Carlos Pereira

09/14/2012

04:36 PM Revision 611b65a8: Force resync of vpns and dns even if the IP doesn't change in rc.newwanip, since we could be doing failover/failback for these services.
Jim Pingle
04:36 PM Revision 140f30ea: Add note about mac matching and media type.
Jim Pingle
12:10 PM Revision 80d30a83: Add some safety checks against empty entries
Jim Pingle
07:42 AM Feature #2241 (Feedback): DHCP - prevent dhcpd from handing out leases to certain MAC addresses
Implemented in commit:1f1a08c (and a fix in commit:80d30a8) Jim Pingle
02:26 AM pfSense Packages Bug #2632 (Rejected): Intel Quad Gigabit ET2 & Intel Quad Gigabit I350 igb could not setup receive structures
we don't control the drivers, test with newer base FreeBSD versions and report the issues to the mailing list net at ... Chris Buechler
01:55 AM pfSense Packages Bug #2632: Intel Quad Gigabit ET2 & Intel Quad Gigabit I350 igb could not setup receive structures
I forgot to mention for each interface that is active we recieve random "igb(x) could not setup receive structures" e... Matt Lehman
01:51 AM pfSense Packages Bug #2632 (Rejected): Intel Quad Gigabit ET2 & Intel Quad Gigabit I350 igb could not setup receive structures
There appears to be some sort of igb driver malfunction with 2.0.1 AMD64. We are using the 4GB NanoBSD vga build. We ... Matt Lehman
01:15 AM Revision 1f1a08c8: Allow/deny access to DHCP by partial MAC matching.
Jim Pingle

09/13/2012

04:52 PM Revision e288ddb1: Make the openvpn resync less intrusive, only trigger this if the OpenVPN interface is actually a gateway group name. Otherwise we skip.
Seth Mos
04:49 PM Revision 017817c2: Make the gateway group member check a boolean, might convert to something else at a later time so we could check group memberships.
Also launch the dyndns configure if the dyndns interface is a gateway group name, could check membership later if we ... Seth Mos
04:49 PM Revision 2223aa95: Always prepend the hostname we are working on
Seth Mos
03:46 PM Feature #2631: Highlight unapplied changes
This would be extremely hard to do.
You can always see a diff of the existing config to the previous - Diag > Back...
Jim Pingle
03:43 PM Feature #2631: Highlight unapplied changes
Sorry for forgetting to include the version. It is version: 2.0.2-RC4 (amd64), and this is specifically a request fo... Christopher Peters
03:37 PM Feature #2631 (Needs Patch): Highlight unapplied changes
I have multiple users with access to our pfsense system, and this morning I found a large red warning in the GUI indi... Christopher Peters
05:18 AM Revision 768eb89c: Make sure we process dyndns interfaces that use a failover group when processed from rc.newwanip, which just passes a interface.
Seth Mos
05:04 AM Revision cdb0df65: Add function that checks if the interface is part of a gateway group.
Seth Mos
05:02 AM Revision 1be0e2da: Reference the correct variable here, it was broken before and could never have worked.
Seth Mos

09/12/2012

04:45 PM Revision ed6df99c: Use a better link here.
Jim Pingle
04:45 PM Revision 82f6b8e0: Use a better link here.
Jim Pingle
04:26 PM Revision bca84dfb: Don't skip over wrap_vga here.
Jim Pingle
04:23 PM Revision c832f6bf: Remove the filter configure call as this could otherwise lead to a recursive filter configure.
Seth Mos
04:18 PM Revision 0066932f: Print a nice large warning on the PPTP page about it no longer being considered secure.
Jim Pingle
04:18 PM Revision 0888bdfa: Print a nice large warning on the PPTP page about it no longer being considered secure.
Jim Pingle
03:44 PM Revision 1a6f5266: Bail here so we don't make invalid rules for IPsec if this is empty.
Jim Pingle
11:47 AM Feature #2552 (Resolved): Set the timezone in setup_php_ini.sh
Seth Mos

09/11/2012

04:47 PM Revision 8736e7a1: Merge pull request #221 from j-white/master
Fixed the rendering in IE for the password management page. Jim Pingle
03:03 PM Revision fa6a3d4d: Fixed the rendering in IE. Moved the head section out of the body.
Jesse White
08:32 AM Feature #2630 (Rejected): Add SSHD logging on a new SSHD tab under STATUS > SYSTEM LOG
Per jimp's request in forum: http://forum.pfsense.org/index.php/topic,53503.0.html
Please add a new SSHD tab that ...
Jason Miles

09/10/2012

06:45 PM Revision 2643df8d: Merge pull request #220 from PiBa-NL/master
firewall log, allowing the showing of applied rule description with optional setting Jim Pingle
03:32 PM Revision 32f8552e: Show/hide toggle
Pi Ba
02:32 PM Revision 52b27268: Added a setting for configuring the firewall log to either:
-Not load descriptions
-Show descriptions in a column
-Show descriptions on a second row (after a click on 'show desc...
Pi Ba
01:59 PM Feature #2629 (Feedback): Changed firewall log to show the applied rule description directly on screen, also layout optimization for "Show raw filter logs".
I approved the request, it looks good now, thanks!
The show/hide toggle is also a good addition, and the three-way...
Jim Pingle
10:35 AM Feature #2629: Changed firewall log to show the applied rule description directly on screen, also layout optimization for "Show raw filter logs".
Thanks for your comments.
Made a few modifications and added a setting to allow for keeping old behavior.
And mad...
Pi Ba
01:55 AM Revision 18be4037: remove bunk input validation
Chris Buechler

09/09/2012

05:19 PM Feature #2629: Changed firewall log to show the applied rule description directly on screen, also layout optimization for "Show raw filter logs".
There are people with thousands of rules in the evaluated ruleset, and there are also people on very slow hardware (t... Jim Pingle
03:31 PM Feature #2629: Changed firewall log to show the applied rule description directly on screen, also layout optimization for "Show raw filter logs".
Would layout attached as new screenshot be ok? !New layout proposal!
As for the performance, there is a 2000 max r...
Pi Ba
11:12 AM Feature #2629: Changed firewall log to show the applied rule description directly on screen, also layout optimization for "Show raw filter logs".
I'm not opposed to having that information readily accessible, but that format isn't very easy to read. I don't know ... Jim Pingle
10:39 AM Feature #2629 (Resolved): Changed firewall log to show the applied rule description directly on screen, also layout optimization for "Show raw filter logs".
Changed firewall log to show the applied rule description directly on screen, also layout optimization for "Show raw ... Pi Ba
07:15 AM Bug #2527: Miniupnpd starts but isn't working
jim thank you for staying on top of this!!! Works great now Cino .
07:12 AM pfSense Packages Bug #1907: snort
its there for 2.1 beta Cino .
07:10 AM pfSense Packages Bug #2002: snort
this has been resolved as far as I know Cino .

09/08/2012

09:41 PM pfSense Packages Bug #2602: BandwidthD - Reported Traffic / Usage is approximately Double real amount
Yup. Problem is still there.
Is this the right bug tracker to be addressing issues with the BandwidthD package for p...
Brock Prozeniuk
12:41 PM Revision a6d5e043: Changed firewall log to show the applied rule description directly on screen, also layout optimization for "Show raw filter logs".
Pi Ba

09/07/2012

05:40 PM Bug #2628 (Rejected): Lost Conection Wan
This is not a support ticket system. Please use the forum or mailing list for support issues. Jim Pingle
05:35 PM Bug #2628 (Rejected): Lost Conection Wan
Hello good afternoon I have a problem I get disconnected from the WAN side of the probe reinstalling pfsense and leav... Eduvaldo Zapata
03:51 PM Bug #2627 (Resolved): Old delegated prefixes are not removed from the LAN interface
When the LAN tracks the WAN via DHCPv6 Prefix Delegation and the WAN bounces, thus receiving a new delegated prefix, ... Anonymous
02:48 PM Feature #972: Allow adding gateways outside of interface subnet
AT&T is doing this now on their network handing off DHCP with a /32 mask with certain uverse gear like the NVG510, so... Jim Pingle
02:45 PM Bug #2626: Patch included: syslog.conf allows duplicate logging of daemon.info messages (e.g. from snort or dnsmasq)
Haha, ok I had it right the first time. The key sentence from the syslog.conf man page is:
If a received message ...
Andre LaBranche
05:26 AM Bug #2626: Patch included: syslog.conf allows duplicate logging of daemon.info messages (e.g. from snort or dnsmasq)
Er... upon further consideration, I don't actually know what is going on. Snort emits daemon.notice, and dnsmasq emit... Andre LaBranche
05:08 AM Bug #2626 (Resolved): Patch included: syslog.conf allows duplicate logging of daemon.info messages (e.g. from snort or dnsmasq)
Took me a while to hunt this down, and it's the same issue as reported in:
http://forum.pfsense.org/index.php?topi...
Andre LaBranche

09/06/2012

06:47 PM Revision c184fa27: fix imbalanced HTML tags
hopefully continues to fix #2625 but no guarantees. Darren Embry
06:47 PM Revision 00ad21b9: fix more imbalanced HTML tags.
hopefully continues to fix #2625 but no guarantees. Darren Embry
06:47 PM Revision 59167b10: fix some imbalanced HTML tags
hopefully this will fix #2625 but this needs to be done anyway. Darren Embry
06:46 PM Revision d329d587: a few coding indentation/style fixes.
Darren Embry
06:27 PM Revision b9144088: Correct this function call, OpenVPN client killing works again, fixes #2554
Jim Pingle
05:46 PM Revision 17c0bb50: Inconsistent behavior with Alias info popup
hopefully fixes #2625
http://redmine.pfsense.org/issues/2625
Darren Embry
05:08 PM Revision 73567959: never call parseInt without a radix.
Darren Embry
02:48 PM Bug #2074 (Feedback): Changing interface IP changes interface assignment as well
This may have been corrected by the fixes for ticket #2490 - please re-test on a current snapshot. Jim Pingle
02:06 PM Bug #2625: Inconsistent behavior with Alias info popup
Those popups contain Edit links. If you somehow get a mouseout event handler on the link to close the tooltip [which... Darren Embry
01:50 PM Bug #2625: Inconsistent behavior with Alias info popup
Applied in changeset commit:c184fa273f8f575266addc38f838a31b763d3d1d. Darren Embry
01:50 PM Bug #2625: Inconsistent behavior with Alias info popup
Applied in changeset commit:00ad21b9d71a5b5cda116a6a30293999847e39e4. Darren Embry
01:50 PM Bug #2625: Inconsistent behavior with Alias info popup
Applied in changeset commit:59167b10fbe27b37c3fe9683bd58c24a4abdb732. Darren Embry
12:50 PM Bug #2625: Inconsistent behavior with Alias info popup
Applied in changeset commit:17c0bb50f81011cba034af5593efa0be3d27df1a. Darren Embry
12:48 PM Bug #2625 (Feedback): Inconsistent behavior with Alias info popup
Hopefully commit:17c0bb50 fixes this.
Darren Embry
12:17 PM Bug #2625 (Rejected): Inconsistent behavior with Alias info popup
When you mouseover an alias when viewing firewall rules, nat rules, and so on, the info box pops up showing the addre... Jim Pingle
01:44 PM Feature #2622: Allow DHCP without a range so that only static mappings may be used on an interface
Sure, we'd be open to including the patch. Jim Pingle
04:31 AM Feature #2622: Allow DHCP without a range so that only static mappings may be used on an interface
Hello,
Thanks for your response.
If I provide a patch and test this feature (dhcp without pool), is there any cha...
Aris Adamantiadis
01:40 PM Bug #2554 (Feedback): "kill client" functionality broken on OpenVPN status page
Applied in changeset commit:b91440888e0c2bd398c89155d36c4a9d050c5caa. Jim Pingle
12:22 PM Revision 9500537d: Don't add ldapcfg to racoon.conf since we're not using racoon's built-in LDAP support now. Moving to external script-based auth, see ticket #1112
Jim Pingle
04:45 AM pfSense Packages Bug #2624 (Resolved): Varnish3 Package + GUI seems broken
The Varnish3 Package + GUI seems broken. ACL is Corrupt.
Version: Latest PFSense 2.1 DEVELOPMENT snapshot
When cl...
Julian Sternberg

09/05/2012

06:52 PM Revision b16d666d: No need for these other lines on nanobsd, and it can interfere with booting on some devices.
Jim Pingle
06:36 PM Feature #1009: Active Directory group membership checking
Hi,
ive made a new auth.inc that works for me on "2.1-BETA0 (i386) built on Sun Sep 2 18:21:50 EDT 2012 " based on s...
Pi Ba
06:19 PM Bug #2623 (Closed): IPsec VPN - Phase-2 entries count wrong for disabled entries
webGUI IPsec VPN
On disabled (greyed-out) VPN tunnels, the count of Phase-2 entries is incorrect (it always shows ...
Dim Hatz
05:27 PM Bug #2555: check_reload_status consumes 100% CPU usage
I confirm the bug at least on all recent 64bit builds and in the last too:
2.1-BETA0 (amd64)
built on Tue Sep 4 16:...
Gianluca Toso
09:06 AM pfSense Packages Bug #2621: Update NUT due to CVE-2012-2944
I posted a HEADS UP message on the package forum.
http://forum.pfsense.org/index.php/topic,53308.0.html
Addition...
Jim Pingle
08:57 AM pfSense Packages Bug #2621: Update NUT due to CVE-2012-2944
(the box that I'd need to use NUT) Mathieu Simon
08:57 AM pfSense Packages Bug #2621: Update NUT due to CVE-2012-2944
Awesome Jim - I try to catch all of your explanations :-)
Let me know if you need a guinea pig, the box won't arri...
Mathieu Simon
08:54 AM pfSense Packages Bug #2621 (Feedback): Update NUT due to CVE-2012-2944
Updated binaries, reinstalled, works fine for me with my APC Back-UPS ES 450. I imagine it should work for others als... Jim Pingle
07:17 AM pfSense Packages Bug #2621: Update NUT due to CVE-2012-2944
No objections, but someone would need to check/test to ensure the config file is compatible and make any necessary ch... Jim Pingle
02:53 AM pfSense Packages Bug #2621 (Resolved): Update NUT due to CVE-2012-2944
NUT can be remotely crashed as of CVE-2012-2944
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2944
Any o...
Mathieu Simon
09:01 AM Feature #2622: Allow DHCP without a range so that only static mappings may be used on an interface
Not a bug, but a missing feature.
Allowing DHCP without a defined range would be the only feasible way to do this,...
Jim Pingle
08:53 AM Feature #2622 (Needs Patch): Allow DHCP without a range so that only static mappings may be used on an interface
Hello,
I have a range managed by a DHCP server. All the hosts in this range have a static DHCP assignment.
Each t...
Aris Adamantiadis
04:13 AM pfSense Packages Bug #2618: High CPU load, low troughput - VMware ESXi (vSphere 5.0)
Hi Robin,
You opened the bug for ESXi 5.0 and above you're talking about VMware build 768111 which seems to be VMWar...
Peter Baumann
01:10 AM pfSense Packages Bug #2618: High CPU load, low troughput - VMware ESXi (vSphere 5.0)
I see, but these people seem to have the same problem:
http://forum.pfsense.org/index.php?topic=41647.0
Robin Friberg

09/04/2012

11:09 PM pfSense Packages Bug #2618: High CPU load, low troughput - VMware ESXi (vSphere 5.0)
it's not a general problem, this very site runs behind a firewall in the latest version of ESX and it can push 1 Gbps... Chris Buechler
05:19 PM pfSense Packages Bug #2618: High CPU load, low troughput - VMware ESXi (vSphere 5.0)
So you'll reject that this is a bug?
I can recreate this problem 100% of the time.
I'll say its a problem that an...
Robin Friberg
02:03 PM pfSense Packages Bug #2618 (Rejected): High CPU load, low troughput - VMware ESXi (vSphere 5.0)
not a general problem Chris Buechler
11:03 PM Bug #2620 (Rejected): Low outbound bandwidth
not a general problem hence not a legit bug report. Hacom can follow up with us via commercial support to test that s... Chris Buechler
09:38 PM Bug #2620 (Rejected): Low outbound bandwidth
35/35 fiber line. Full bandwidth with 2.0.1. Upgrading to 2.1 Beta0 upload speeds dropped to 5mb max. No traffic s... Drew Lehman
08:38 PM Revision 4c9e22b9: Add another test here for Nano+VGA to preserve the console selection.
Jim Pingle
03:58 PM Revision 744306c6: Fix up tcpdump for pflog stop/start a little, consolodate code, and restart tcpdump for pflog when saving log settings.
Jim Pingle

09/03/2012

12:52 PM Feature #2588: Import latest Intel Ethernet card drivers for FreeBSD 8-STABLE
Tested r235553 with 82574L on clean 8.3, looks like it really helps. Vladimir Suhhanov

09/02/2012

06:45 AM Bug #2619 (Resolved): DHCP lease delete doesnt work
i use the dhcp server with static arp and deny unknown clients ticked but suppose when those r unticked, it allows cl... Bipin Chandra

09/01/2012

03:15 PM Bug #1974: Captive Portal RADIUS accounting bytes wrong
I don't think this has been solved yet. I downloaded "pfSense-LiveCD-2.1-BETA0-i386-20120831-1027.iso.gz" from snapsh... Christophe B
05:55 AM pfSense Packages Bug #2618: High CPU load, low troughput - VMware ESXi (vSphere 5.0)
Forgot to specify some stuff:
I got two installations, one in prod and one in test.
The one in test was the one i...
Robin Friberg
05:40 AM pfSense Packages Bug #2618 (Rejected): High CPU load, low troughput - VMware ESXi (vSphere 5.0)
Hi,
I'm having trouble with running pfsense (i386 and amd64) at vSphere ESXi servers.
When I do a speedtest betwe...
Robin Friberg

08/31/2012

08:33 PM Bug #2617 (Resolved): resolv.conf missing ipv6
I posted in the forum about this a while back. resolv.conf doesn't get the ipv6 entries from my ISP. I don't think th... Don Simpson

08/30/2012

10:35 AM Bug #2611: all gateway not present when editing existing rule.
on further study, once u create a rule with a gateway and then when u try to edit then it doesnt appear, other rules ... Bipin Chandra
10:31 AM Bug #2611: all gateway not present when editing existing rule.
i have the same issue
when u edit gateway doesnt appear
when u add new rule based on old gateway doesnt appear
w...
Bipin Chandra
06:49 AM Revision d587bbf9: Simplify schedules code and some styly nits
Ermal LUÇI
06:46 AM Revision daa06fb7: Simplify schedules code and some styly nits
Ermal LUÇI
06:36 AM Revision f68a7f71: Merge pull request #217 from phildd/master
Month matching for scheduler rules Ermal LUÇI
05:30 AM Bug #2254: uPNP breaks limiters
i think the ticket for this no longer exists so does it mean its fixed? Bipin Chandra
02:11 AM Revision 50b3fc5a: Month matching for scheduler rules
Fix some obvious things in the firewall scheduled rules code. If a user has some rules with a month specified and som... phildd

08/29/2012

09:17 PM Bug #2614: Scheduler bug - fires off on date not matched correctly
For a start, this code looks odd in /etc/inc/filter.inc at 3015:
@ if($timeday['month'])
$month = $timeday['mon...
Phillip Davis
04:08 PM Bug #2614: Scheduler bug - fires off on date not matched correctly
That is in fact what i already did, nevertheless the scheduler fired off on 28 August while it was set as you see the... Sangye Ngawang
02:58 PM Bug #2614: Scheduler bug - fires off on date not matched correctly
You can go back under Diagnostics > Backup/Restore on the Config History tab and get an older version of your config ... Jim Pingle
02:49 PM Bug #2614: Scheduler bug - fires off on date not matched correctly
Attached is a screengrab from the scheduler section, but i have to change it now for a scheduled streaming event tomo... Sangye Ngawang
02:17 PM Bug #2614: Scheduler bug - fires off on date not matched correctly
I would need to see the scheduler section to validate that nothing is missing with that. Ermal Luçi
07:25 PM Bug #2555: check_reload_status consumes 100% CPU usage
... Snowy Maslov
02:45 PM Bug #2555: check_reload_status consumes 100% CPU usage
When this happens, please capture the full output of "ps uxawww" and attach it here. Odds are there are a batch of pr... Jim Pingle
05:37 PM Revision 13f334f3: Be consistent on formatting to easy reading
Ermal LUÇI
05:30 PM Revision 06498591: Try to remove old states when a DHCP IP changes, might be related to ticket #1629 and also "unable to allocate llinfo" messages from states through an old gateway.
Jim Pingle
05:28 PM Revision 56178d9a: Correct filter tdr install_cron function
Ermal LUÇI
03:44 PM Revision 58d9e380: Don't skip over wrap_vga here.
Jim Pingle
02:28 PM Bug #2409: ipfw - entryzerostats
Is this still the same with latest snaps? Ermal Luçi
02:27 PM Bug #2389: CP asks for a voucher code from MACs in the passthrough list
Can you please try with a recent snapshot.
The snapshots back there had some issues with how CP config was being app...
Ermal Luçi
11:51 AM Bug #2597 (Resolved): Unable to create GRE port forward
Jim Pingle
11:47 AM Feature #1835 (New): uPNP IPv6 support
The newer miniupnpd does support it, but produces errors when it's enabled and run. It compiles OK, but doesn't funct... Jim Pingle
11:42 AM Feature #2595 (Resolved): Better hardware support for the Atoms (D2500, D2700, N2800)
Jim Pingle
11:41 AM Bug #2553 (Resolved): New lighttpd breaks connections from Safari on iOS
Jim Pingle
11:40 AM Bug #2527 (Resolved): Miniupnpd starts but isn't working
Works for me, and many others on the forum report it to be working now. Jim Pingle
11:40 AM Bug #2511 (Resolved): DHCPv6 Shows Wrong DUID
Jim Pingle
11:39 AM Bug #2490 (Resolved): Reassigning interfaces on console during restore causes them to be disabled, lose descriptions
Jim Pingle
11:39 AM Bug #2468 (Resolved): Interface does not exist warning during a network interface mismatch
Jim Pingle
11:38 AM Bug #2384 (Resolved): "Network interface mismatch" displayed for some valid configurations
Jim Pingle
11:38 AM Bug #1974 (Resolved): Captive Portal RADIUS accounting bytes wrong
Jim Pingle
11:37 AM Feature #1829 (Resolved): CARP with IPv6 support
No problems with CARP+IPv6 on several clusters, seems to be fine. Jim Pingle
11:36 AM Bug #1279 (Resolved): Filesystem on NanoBSD is left read/write at first bootup after package reinstallation
This is fixed from all the tests I've tried, and others on the forum have reported it to be fixed. Jim Pingle
11:36 AM Bug #1049 (Resolved): After reinstalling packages at bootup, WebUI not accessable (NanoBSD)
Multiple sources confirm this is fixed. Jim Pingle
11:26 AM Bug #2606 (Resolved): Unable to create ESP port forward
Ermal Luçi
10:57 AM Bug #2606: Unable to create ESP port forward
Updated to the latest nightly today (8/29) and was able to successfully add a port forward using the ESP protocol. Josh Hornung

08/28/2012

06:41 PM Revision 6ab59b35: Add check for local port being set before testing. Fixes #2606
Ermal LUÇI
03:12 PM Bug #2401 (New): Mounting read-only after mounting read-write can be very slow on NanoBSD
It may be improved a little but it's still slow even just running mount, no refcounts involved.
Still only affects c...
Jim Pingle
02:04 PM Bug #2401 (Feedback): Mounting read-only after mounting read-write can be very slow on NanoBSD
This should have gonne away with the fixes that went in for reference counting fixes. Ermal Luçi
03:00 PM Bug #2613 (Feedback): Incoming traffic on a vlan is not seen
Applied in changeset pfsense-tools:commit:cba403d0126da81cd3fec30eed295548e4dbb445. Ermal Luçi
07:06 AM Bug #2613: Incoming traffic on a vlan is not seen
After reading all that I've done and again carefully reading epek's answer I must admit he was right.
Setting the ...
Andre Vink
02:53 PM Bug #1279 (Feedback): Filesystem on NanoBSD is left read/write at first bootup after package reinstallation

With changes done to the reference counting code this should be fixed.
Ermal Luçi
01:59 PM Bug #2605 (Resolved): Filter rule are not created correctly
Ermal Luçi
09:30 AM Bug #2605 (Feedback): Filter rule are not created correctly
Applied in changeset commit:0d0558195ed9a0df50e8bce1fd52419921b0e30e. Jim Pingle
06:50 AM Bug #2605: Filter rule are not created correctly
yes. This patch works. Thanks for the quick turn around!
(tested with 2.1-BETA0 (amd64)
built on Mon Aug 27 14:5...
Johannes Ullrich
01:58 PM Bug #2597 (Feedback): Unable to create GRE port forward
Ermal Luçi
01:50 PM Bug #2606 (Feedback): Unable to create ESP port forward
Applied in changeset commit:6ab59b35ec999c576a95317985b6901428c143bc. Ermal Luçi
12:31 PM Bug #2614: Scheduler bug - fires off on date not matched correctly
No i can't give my config - but ill add the scheduled tasks and hope that this is related to the scheduler menu item.... Sangye Ngawang
12:12 PM Bug #2614: Scheduler bug - fires off on date not matched correctly
Can you provide some examples from your config to debug this easily? Ermal Luçi
08:27 AM Bug #2614 (Closed): Scheduler bug - fires off on date not matched correctly
I use Scheduler to trigger many rules, today the rules were all activated
The last date that was still in there was...
Sangye Ngawang
12:22 PM Revision 0d055819: Don't put this rule in if $carp_int is empty, it makes an invalid rule. Fixes #2605
Jim Pingle

08/27/2012

06:41 PM Revision e3df974b: Restructure these IP/subnet tests so they don't break transport mode.
Jim Pingle
06:38 PM Revision 116ba665: Restructure these IP/subnet tests so they don't break transport mode
Jim Pingle
02:33 PM Revision ca929de8: Merge pull request #216 from bcyrill/patch-8
Fix bug reported in http://forum.pfsense.org/index.php/topic,53000.0.htm... Jim Pingle
02:25 PM Revision 2ef16014: Fix bug reported in http://forum.pfsense.org/index.php/topic,53000.0.html
Cyrill B
12:44 PM Bug #2605: Filter rule are not created correctly
If you change the test to this:... Jim Pingle
08:11 AM Bug #2613 (Resolved): Incoming traffic on a vlan is not seen
Traffic with a vlan tag is not seen on the vlan interface but is seen on the master interface.
traffic with a vlan...
Andre Vink
07:01 AM Bug #2612: PPTP client not connecting remote IPSEC site
this conf was working before upgrade,can you please replicate this issue?do you want extra info from me? Hafiz Rafiyev
06:32 AM Bug #2612 (Rejected): PPTP client not connecting remote IPSEC site
This is a support/configuration issue, not a bug. Please use the forum or mailing list. Jim Pingle
02:36 AM Bug #2612: PPTP client not connecting remote IPSEC site
this issue asked by me on August 17 2012 under PPTP subcategory,but any answer yet Hafiz Rafiyev
02:34 AM Bug #2612 (Rejected): PPTP client not connecting remote IPSEC site
I got an IPSEC tunnel between Site1 and Site2. Both running pfSense 2.0.1-RELEASE (amd64)
PPTP clients connect to S...
Hafiz Rafiyev
12:03 AM Revision 82c41ba1: Merge pull request #215 from phildd/master
Tidy console package install progress percentage Jim Pingle
 

Also available in: Atom