Project

General

Profile

Activity

From 10/03/2012 to 11/01/2012

11/01/2012

01:16 PM Bug #2306: USB ports show up as network interfaces
I'd much rather just set that in loader.conf by default, the fewer kernel patches the better. Chris Buechler
11:19 AM Bug #2306: USB ports show up as network interfaces
Maybe just patch it to give a default value of 1 to disable it in kernel? Ermal Luçi
12:53 PM Bug #2671 (Resolved): Call to undefined function read_layer7_config
Chris Buechler
12:28 PM Bug #2671: Call to undefined function read_layer7_config
I can confirm that it's working. Peter O
11:18 AM Bug #2671 (Feedback): Call to undefined function read_layer7_config
Already fixed here https://github.com/bsdperimeter/pfsense/commit/e8f35171571cf6d5e13d821d9b6b65c8060fc790 Ermal Luçi
03:52 AM Bug #2671 (Resolved): Call to undefined function read_layer7_config
Full error is: Fatal error: Call to undefined function read_layer7_config() in /etc/inc/filter.inc on line 843
Happe...
Peter O
09:21 AM Revision e8f35171: Include shaper.inc here to have all the function dependency work.
Ermal LUÇI
04:57 AM Bug #2672 (Closed): Limiters and bridge have issue
The dummynet patch for pf(4) needs tuning to work properly for bridging.
It should set PROTO_IFB | DIR_FWD
Ermal Luçi

10/31/2012

11:40 PM Revision 8462bfdc: Fix this browser check
Erik Fonnesbeck
11:27 PM Revision cf205dca: Resolves #2670. Mark vtnet interfaces as altq capable.
Ermal LUÇI
11:16 PM Revision 50100234: Add missing line ending to fix pf syntax error.
Erik Fonnesbeck
10:30 PM Revision 073cb45d: Use if-bound states for better features
Ermal LUÇI
08:15 PM Revision e9456e45: And more encoding...
Jim Pingle
08:05 PM Revision 8ec9cba4: Still more encoding...
Jim Pingle
08:01 PM Revision 313a14f7: More encoding...
Jim Pingle
07:53 PM Revision 8db87547: Encode this before showing it.
Jim Pingle
07:51 PM Revision a138f065: Encode parameters before showing them to users.
Jim Pingle
07:44 PM Revision ac4cbc15: Encode some more parameters before showing them to users.
Jim Pingle
06:30 PM Bug #2670 (Feedback): Trafic shaping with virtio NIC
Applied in changeset commit:cf205dca239bc0f32f81c1df74d76478dc07747f. Ermal Luçi
06:07 PM Bug #2670 (Resolved): Trafic shaping with virtio NIC
I'm running 2.1 snapshot (Oct 25 2012) with virtio NIC (KVM guest). I had to modify /etc/inc/interfaces.inc to be abl... Daniel Berteaud
06:24 PM Revision 7cf76e8b: Encode the interface parameter before using it in a redirect
Jim Pingle
06:23 PM Revision bb33a337: Encode the interface parameter before using it in a redirect
Jim Pingle
06:06 PM Revision e653b6e1: Encode the if parameter before using it in redirects, too.
Conflicts:
usr/local/www/firewall_rules.php
Jim Pingle
06:02 PM Revision ee898155: Encode the if parameter before using it in redirects, too.
Jim Pingle
06:02 PM Revision 52ab0384: Encode the if parameter before using it in html
Jim Pingle
06:01 PM Bug #2669 (Resolved): Captive portal: missing / in redirect URL
Running 2.1 snapshot from Oct 25 2012, the redirect URL after authentication is wrong (missing the / between host and... Daniel Berteaud
06:01 PM Revision abe430cc: Encode the if parameter before using it in html
Jim Pingle
05:39 PM Revision e26e0eac: Escape parameters better when managing tables. Fix test to allow deleting subnet entries as well as IPs.
Conflicts:
usr/local/www/diag_tables.php
Jim Pingle
05:33 PM Revision 1457cce5: Escape parameters better when managing tables. Fix test to allow deleting subnet entries as well as IPs.
Jim Pingle
04:54 PM Bug #2524: SNMP only shows one processor on a dual core system
I have a second system that is doing this now too.
When I type dmesg | grep -i cpu it shows:
CPU: AMD Athlon(tm...
Jonathan Black
03:52 PM Bug #2398: tftpd and tftp-proxy (inetd?) dies after WAN periodic reset
In /etc/inc/filter.inc around like 1858, try changing the place where it does a kill -HUP on inetd with two commands ... Jim Pingle
03:38 PM Revision 56143f06: Remove debug output
Jim Pingle
03:38 PM Revision 398d29a6: Remove debug output
Jim Pingle
02:49 PM Revision 56befec1: Set the CSRF Magic timeout to the same as the session timeout, so that if a user sets a lower session time, the CSRF magic tokens do not outlive the user's session.
Jim Pingle
01:49 PM Revision 23c3ccb6: Set the CSRF Magic timeout to the same as the session timeout, so that if a user sets a lower session time, the CSRF magic tokens do not outlive the user's session.
Jim Pingle
01:07 PM Bug #1112: IPsec GUI/backend missing RADIUS support
Thanks for response.
Think you that is resolved quickly?
Jonh Nash
12:39 PM Revision b3a1733d: Update CSRF Magic
Jim Pingle
12:39 PM Revision fcf53c1e: Update CSRF Magic
Jim Pingle
10:23 AM Revision 926c3b8e: Revert "Revert "Do not put the prefix len on the src ip""
This reverts commit 16c95ab93bcfb8d59260aa7564a402a6cec3050d.
This is how it should be for now. See #2665
Ermal LUÇI
09:43 AM Revision 16c95ab9: Revert "Do not put the prefix len on the src ip"
It actually makes sense in IPv6 world
This reverts commit 3b1385a3febf783f48881b7baf61844f8e91209d.
Ermal LUÇI
09:37 AM Revision 3b1385a3: Do not put the prefix len on the src ip
Ermal LUÇI
05:20 AM Bug #2665 (Feedback): 'pass out' on gif matches inbound traffic
This is not a mismatch of the rule but just how the system works.
There should be teached to pf(4) route-to for v6 t...
Ermal Luçi
04:05 AM Feature #2668 (Resolved): Support aliases in OpenVPN local/remote/tunnel network fields
I put aliases in for each of the networks or related groups of networks around my intranet. These are handy to use in... Phillip Davis
03:42 AM Revision 75e703c4: Merge pull request #243 from phil-davis/master
Replace deprecated split with explode Chris Buechler
03:34 AM Revision 44b1c3e8: Replace deprecated split with explode
Phil Davis
03:32 AM Revision aa2f8cab: Replace deprecated split with explode
Phil Davis
02:59 AM Bug #2667 (Closed): IPv6 on VLANs broken
Some time between September 7 and October 29 IPv6 on VLANs, maybe only in combination with lagg, has broken. The fire... Chris Buechler

10/30/2012

10:35 PM Revision b0bf6bd0: Fixes #2394. If an entry of 0.0.0.0/0 is configured than use the first interface ip matching. Also do a microptimization to not retrieve the interface list every ping host entry
Ermal LUÇI
10:08 PM Revision f85da3b5: Fixes #2300. Take into consideration ip aliases on carp
Ermal LUÇI
10:06 PM Revision e08a5153: Fixes #2300. Add static route even for ip aliases selected to avoid issues.
Ermal LUÇI
05:40 PM Bug #2394 (Feedback): IPsec keepalive doesn't work with 0.0.0.0/0 local subnet
Applied in changeset commit:b0bf6bd017e27f6d8161fe8fff0ba8e6a71f96a3. Ermal Luçi
05:10 PM Bug #2300: Static routes for IPsec peers missing when attached to IP Alias VIP
Applied in changeset commit:f85da3b5828843b8c1a904b05c2f9d612eab1b56. Ermal Luçi
05:10 PM Bug #2300 (Feedback): Static routes for IPsec peers missing when attached to IP Alias VIP
Applied in changeset commit:e08a5153f9a281fdbb3a0cb66fddfea4b23a19a6. Ermal Luçi
04:36 PM Revision d8bddd2a: use the proper array here for VIPs and use some suggestions from the ticket to fix #2645
Jim Pingle
12:25 PM Bug #1112: IPsec GUI/backend missing RADIUS support
There is no script yet, which is why this ticket is still open. Jim Pingle
12:19 PM Bug #1112: IPsec GUI/backend missing RADIUS support
Good evening,
it's possible to have the script file?
I don't understand where make the change.
thanks a lot...
Jonh Nash
11:40 AM Bug #2645 (Feedback): stristr() warning repeated dozens of times during boot
Applied in changeset commit:d8bddd2a44ce5776d2dfd3c4db79576e073f5aa0. Jim Pingle
06:54 AM Bug #2441: Setting up a new PPP interface (3g) hangs the webUI
Probably the same as #2433 Xavier Romain
06:36 AM Bug #2398: tftpd and tftp-proxy (inetd?) dies after WAN periodic reset
I've found a workaround long time ago but I forgot to mention here.
- installed Cron package
- added line : "/usr...
Xavier Romain

10/29/2012

11:05 AM Bug #2665 (Resolved): 'pass out' on gif matches inbound traffic
traffic coming in on a gif interface wrongly matches the out direction on the gif. For instance this: ... Chris Buechler
08:22 AM Revision fa29a6f0: Mark the pipe/queue with zero(unlimited) bandwidth to allow traffic on the state to flow still or new traffic matching the rule to flow. Dummynet blocks traffic not matchign apipe/flow by default. Reported-by: http://forum.pfsense.org/index.php/topic,54595.msg294734.html#msg294734
Ermal LUÇI

10/28/2012

11:41 AM Feature #2637: Add ability to define dnsmasq cache size
it's already set to the maximum cache size, but is hard coded. Chris Buechler
02:11 AM Bug #2651: traffic RRDs broken after upgrade to 2.1
File paths updated to ease patch application. Patch contents unchanged.
Norman Back
12:15 AM Bug #2617 (Resolved): resolv.conf missing ipv6
thanks for the follow up Chris Buechler

10/27/2012

10:40 PM Bug #2617: resolv.conf missing ipv6
BTW this seems to work after the change to the ISC client. I don't see this with the Oct 25th snapshot and didn't see... Don Simpson
03:24 PM Bug #1523: DHCP settings checks only one interface IP via ifconfig to validate settings
D'oh! I wish I had looked here before typing up a ticket that is exactly that same issue as in this ticket. In my cas... Larry Titus
01:50 PM Bug #2658 (Resolved): limiter went dead with recent patches
Ermal Luçi
09:15 AM Feature #2637: Add ability to define dnsmasq cache size
That line is not exactly what is default, I change my --local-ttl to something realistic for local static entries tha... JohnPoz _
09:12 AM Feature #2637: Add ability to define dnsmasq cache size
Just took a look at where dnsmasq is started in services
mwexec_bg("/usr/local/sbin/dnsmasq --local-ttl 86400 ...
JohnPoz _

10/26/2012

09:36 PM Bug #2658: limiter went dead with recent patches
Commits of 23 Oct 2012 have fixed this - both data entry form for limiters and code that implements them are working. Phillip Davis
09:09 PM Revision 61cf2b7e: now works again
most likely fixes #2638 Darren Embry
08:40 PM Revision 219d9eb9: fix #2639 (country interface selector in interfaces_ppps_edit.php)
also make ppps_edit more jslint ready for good measure Darren Embry
08:10 PM Revision 6cd9abff: Make the size of the group privilege list the same size as the user privilege list.
Jim Pingle
08:10 PM Revision 2a2b247b: Standardize hypenation and capitalization of Pre-Shared Key
Jim Pingle
08:02 PM Revision f8b64312: restrict '/' from virtual server name field
fixes #2656 Darren Embry
05:48 PM Bug #2306: USB ports show up as network interfaces
setting hw.usb.no_pf=1 in loader.conf will fix this. I didn't quickly see where to set this for new installs and upgr... Chris Buechler
04:10 PM Bug #2638 (Feedback): Captive portal status widget on the Dashboard is not working
Applied in changeset commit:61cf2b7ed7cfbbab57ec049032d6b953b921904d. Darren Embry
04:05 PM Bug #2529: Captive Portal does not function after update snap or restart system
Anything I can do to help move this along? I'm fairly new to pfsense but competent and would love to see this fixed A... Michael Mogren
03:40 PM Bug #2639 (Feedback): Selecting a Country under Interfaces > (assign), PPPs tab, PPP Link type populates provider list with javascript code.
Applied in changeset commit:219d9eb9a987387beff52a3852734e049aae1882. Darren Embry
03:10 PM Bug #2496 (Closed): The use of php exec() and php system() with pipe '|' will fail if the first output of a os command is long enough.
the issue as described doesn't really exist. Chris Buechler
03:10 PM Bug #2656 (Feedback): The "/" char in Virtual Server name disable the server
Applied in changeset commit:f8b6431222602e206eac046fa68e24a8c35c1659. Darren Embry
02:50 PM Bug #2656: The "/" char in Virtual Server name disable the server
just need input validation to prevent / from being used in the virtual server name in load_balancer_virtual_server_ed... Chris Buechler
03:08 PM Bug #2645: stristr() warning repeated dozens of times during boot
same error still there but has shifted to line 3840 Chris Buechler
02:58 PM Feature #2356 (Resolved): Fill the "Track Interface" prefix drop down list asynchronously
Chris Buechler

10/25/2012

04:18 PM Bug #2651: traffic RRDs broken after upgrade to 2.1
After further consideration I think it would be better to reduce the number of rows to match the 2.1 definition.
Als...
Norman Back
11:34 AM Bug #2651: traffic RRDs broken after upgrade to 2.1
adding comments from duplicate #2664... Chris Buechler
11:35 AM Bug #2664 (Closed): After upgrading from 1.2.3 to 2.1 the rrd traffic & packets graphs no longer work.
duplicate of #2651 Chris Buechler
03:56 AM Bug #742: apinger doesn't recover opt wan when connection returns.
Same here on 2.1-BETA0 (i386) built on Wed Oct 24 14:05:19 EDT 2012, FreeBSD 8.3-RELEASE-p4
==== LOG ====
Oct 25 ...
Vlad Fedorkov

10/24/2012

06:05 PM Revision 5c9f6cfc: To avoid issues with missing removed schedules just do not create the pipe at all
Ermal LUÇI
02:02 PM Bug #2664: After upgrading from 1.2.3 to 2.1 the rrd traffic & packets graphs no longer work.
Changing:
$rrdcreate .= "RRA:AVERAGE:0.5:60:1000 ";
to
$rrdcreate .= "RRA:AVERAGE:0.5:60:3000 ";
in upgrade_0...
Norman Back
01:46 PM Bug #2664 (Closed): After upgrading from 1.2.3 to 2.1 the rrd traffic & packets graphs no longer work.
After upgrading from 1.2.3 to 2.1 the rrd traffic & packets graphs no longer work. However graphs are OK if upgrading... Norman Back
10:05 AM Revision 8e2597c9: Merge pull request #242 from phil-davis/master
Fix warning when no gateway groups Seth Mos
09:04 AM Revision a133c803: Fix warning when no gateway groups
If there are no gateway groups defined, and you save a rule that has an ordinary gateway selected in "Advanced Featur... Phil Davis
08:36 AM Bug #2663 (Resolved): PPTP on WAN Gets blocked via default deny rule.
When using PPTP to Dial WAN the default deny rule blocks traffic.
I searched for a solution for this for months now,...
Martin Graham

10/23/2012

09:37 PM Revision 8d1a9e58: Throw an error when invalid configuration is posted(address->network).
Ermal LUÇI
08:56 PM Revision fbfed5ba: Correct issues with limiters. 1. correct spelling of config option 2. avoid duplicating javascript
Ermal LUÇI
04:26 PM Revision e5df3664: Merge pull request #241 from bcyrill/patch-3
Fix limiter error Jim Pingle
04:04 PM Bug #2636 (Feedback): state mismatch issue on enc0 with amd64
This should behave better on latest snapshots. Ermal Luçi
03:58 PM Bug #2658 (Feedback): limiter went dead with recent patches
Should be working with next round of snapshots. Ermal Luçi
02:31 PM Revision 184c7952: Fix limiter error
Cyrill B
02:06 PM Revision 902f1bd8: Fix limiter error
Cyrill B
01:56 PM Revision 2c7bdd05: Fix limiter error
Cyrill B
01:35 PM Revision 09a49064: Fix limiter error
Cyrill B
07:41 AM Feature #804: Ability to enable/disable static routes
I don't recall how I was testing previously. On a current snapshot though, an IPv4 route does disappear when it is di... Jim Pingle
02:28 AM Feature #804: Ability to enable/disable static routes
Jim I didnt test with v6 so was wondering if your testing was for v6. v4 seems to work for me:
I added a route 8.8...
Warren Baker
06:11 AM Feature #2660: Checkbox to disable re-install packages after a config restore
Should of course be:
because it removes all packages and then adds them.
frater fenantius
06:07 AM Feature #2660 (Closed): Checkbox to disable re-install packages after a config restore
I have 2 identical machines for running a multi LAN/WAN pfsense.
One machine is running and a 2nd is there as a spar...
frater fenantius

10/22/2012

06:07 PM Bug #2633: Captive Portal timeouts cause users to be stuck in limbo
After combing through all the Captive Portal code and countless hours of testing, here's what I found:
- Due to the...
Carlos Pereira
05:48 PM Revision ac91bae5: Use a proposal check value of obey for all mobile, not just pure-PSK. (The docs recommend setting this, may as well make it the default)
Jim Pingle

10/20/2012

09:35 AM Bug #2590 (Resolved): OVA reports wrong version
Chris Buechler
09:27 AM Bug #2454 (Resolved): Captive portal return wrong authentication URL
Chris Buechler
09:24 AM Todo #1229 (Closed): Captive Portal configuration page needs advanced button love
Chris Buechler
09:24 AM Feature #795 (Needs Patch): disable acpi on alix
Chris Buechler
09:22 AM Bug #651 (Closed): Multiple gateways on WAN interface
one WAN with multiple gateways isn't really supported. It can be made to work with floating rules to override the pol... Chris Buechler
09:21 AM Feature #629 (Closed): Change Listen IP address of web daemon (HTTP / HTTPS) from any to fix IP address
part of #628 Chris Buechler
09:19 AM Todo #339 (Closed): Add SexyButtons to pfSense
Chris Buechler
09:15 AM Bug #1543 (Closed): 2 Different Simultaneous OpenVPN Clients - Packet Loss
no actual bug here. Chris Buechler
09:09 AM Feature #1832 (Resolved): Traffic shaper needs review for IPv6
Chris Buechler
09:04 AM Feature #2263 (Closed): Patches to racoon ipsec-tools since 0.8.0
0.8.1 has those which has a ticket elsewhere Chris Buechler
09:02 AM Bug #2444 (Closed): DynamicDNS doesn't update on WAN IP change
can't replicate Chris Buechler
08:59 AM Feature #2563 (Closed): Hardware Sizing - Traffic Shaping not mentioned
we'll add that when we update that page in general. this isn't a place for documentation-related things so closing. Chris Buechler
08:57 AM Bug #2571 (Resolved): Creating a IPv4 GRE tunnel in pfSense 2.1 results in no endpoint IP being set
Chris Buechler
08:53 AM Bug #2623 (Closed): IPsec VPN - Phase-2 entries count wrong for disabled entries
don't think this is a bug really, it's counting enabled P2s by design. Chris Buechler
08:52 AM Feature #2648 (Resolved): Add "PlayBook" to the $lowres_ua check in head.inc
Chris Buechler
08:50 AM Bug #2643 (Resolved): OpenVPN Server not deletable
Chris Buechler
01:57 AM Bug #2441: Setting up a new PPP interface (3g) hangs the webUI
Seth Mos wrote:
> I found that running killall php from the console a few times often unwedges this and suddenly the...
yon Liu

10/18/2012

01:58 PM Bug #2475: Connection rate limiting does not work for Captive Portal
I can confirm that mod_evasive doesn't seem to be included in 2.0.1.
Should there be a mod_evasive.so...
Josh Stompro
01:53 PM Bug #2475: Connection rate limiting does not work for Captive Portal
This feature bug is related to this ticket.
http://redmine.pfsense.org/issues/2551
Josh Stompro
09:04 AM Revision 2ed21904: Check if there is any configuration present before going through it.
Ermal LUÇI
09:03 AM Revision d96b96b9: Check if there is any configuration present before going through it.
Ermal LUÇI
08:53 AM Revision 95799b92: Switch to background launching
Seth Mos

10/16/2012

04:56 PM Revision 1d949f50: Add a few required things here to allow the script to work
Jim Pingle
02:58 PM Revision 399e4b3f: Fix spelling
Warren Baker
12:22 PM Revision 9e2822df: Fix syntax error
Jim Pingle
05:25 AM Bug #2074: Changing interface IP changes interface assignment as well
I re-tested on the 2.1-BETA0-i386-20121014-1810 snapshot.
Unfortunately, the problem still occurs.
Right after ...
Hana Purna

10/15/2012

09:51 PM Revision 6eb97c2e: Merge pull request #239 from phil-davis/master
Limiter addBwRowTo plus icon syntax Ermal LUÇI
12:41 PM Revision e7ccf2a5: Ooops fix removed line by accident
Ermal LUÇI

10/13/2012

01:10 AM Feature #2588: Import latest Intel Ethernet card drivers for FreeBSD 8-STABLE
Any news or suggestions?
I've sheduled restart of boxes with 82574L, every 48 hours, but this does not look good fo...
Vladimir Suhhanov

10/12/2012

10:47 AM Revision a1dd913e: Limiter addBwRowTo plus icon syntax
Fix the syntax so that the GUI Limiter, Creat new limiter, Bandwidth "+" icon as the correct title text, and the Mask... Phil Davis
10:20 AM Revision 65101877: Merge changes required for using the ISC dhclient in pfSense with prefix delegation. This should hopefully be a bit more reliable in the long run.
The dhclient6-script could be merged with dhclient-script in the future.
Still need to cleanup old adresses and prefi...
Seth Mos
09:31 AM Bug #2658: limiter went dead with recent patches
Agree - this was broken by https://github.com/bsdperimeter/pfsense/commit/c9ba2f8a92b0e18b891af2049436d4a3a505f9d9
I...
Phillip Davis
01:33 AM Bug #2658 (Resolved): limiter went dead with recent patches
limiter dont seem to work or atleast appear dead, more info here http://forum.pfsense.org/index.php/topic,54595.0.html Bipin Chandra
09:05 AM Bug #2401: Mounting read-only after mounting read-write can be very slow on NanoBSD
I've updated to 2.1-BETA0 (i386) built on Thu Oct 11 yesterday and having the sames issues like described by you all.... David Jarosch
05:29 AM Bug #1454: Voucher error messages character set problem
Problem still affects 2.1-beta - using a non-ASCII character anywhere will cause pfSense to corrupt it's config file,... Jernej Simončič

10/11/2012

10:32 PM Revision b00dc866: Fix typo
Erik Fonnesbeck
06:35 PM Bug #2529 (New): Captive Portal does not function after update snap or restart system
Chris Buechler
03:24 PM Revision e8d517b4: Use only binat so both side can communicate properly. With nat only the side behind nat works
Ermal LUÇI
01:31 PM Revision 64846e1a: Merge pull request #238 from phil-davis/master
Handle case with no server or no client OpenVPN Jim Pingle
01:11 PM Revision b95f5460: Handle case with no server or no client OpenVPN
If there are OpenVPN servers but not clients, this warning is emitted:
Warning: Invalid argument supplied for foreach...
Phil Davis
08:33 AM Bug #2657 (Closed): Potential weakness of the captive portal voucher system (design issue)
If the holder of a voucher can guess the encoded roll and ticket IDs and magic number (in particular if the default c... Hans-Joachim Knobloch
02:50 AM Bug #2656 (Closed): The "/" char in Virtual Server name disable the server
If there is a "/" character in Virtual Server name, the service will stop respond to the IP address assigned.
Moni...
Philippe Bonvin

10/10/2012

07:37 PM Revision d0da2c8c: Tune check so nat rules for single host ips get added
Ermal LUÇI
11:22 AM Bug #2529: Captive Portal does not function after update snap or restart system
The "fix" for this also gets wiped out when you update... need a real fix ASAP! Michael Mogren
08:36 AM Bug #2582: OpenVPN service won't start after changing the IP of interface
Update to my original issue. After editing the /var/etc/openvpn/server1.conf file with a the new IP everything worke... Tyler Merrill

10/09/2012

07:17 PM Revision 3a343d73: Refine saving/applying on more pages - don't show apply or take an action unless the user is allowed to do that.
Jim Pingle
05:44 PM Revision c9ba2f8a: Make limiters have a schedule specified which applie bandwidth limits during that period
Ermal LUÇI
02:53 PM Revision 5ff00e73: Make sure admin can always write the config
Jim Pingle
02:44 PM Revision bec92ab9: Don't offer to apply changes if no changes actually happened.
Jim Pingle
02:40 PM Revision 170cb2bc: Add initial support for a privilege that denies write access to the config.
NOTE: This only prevents writing to config.xml - it does NOT prevent other changes/execution that do not involve writ... Jim Pingle
02:28 PM Bug #2526 (Feedback): Limiter appears to break IPv6 connectivity
Brought limiters up-to-speed with IPv6. Ermal Luçi
12:28 AM Bug #2655 (Resolved): RRD Graphs for Captive Portal not working
Under RRD Graphs ---> Cutom --> Captive Portal
No data graphing
Life Form
12:23 AM Bug #2529: Captive Portal does not function after update snap or restart system
Not yet fixed only work around can do the trick. The start up bug still exists. After a snap upgrade or a system rebo... Life Form

10/06/2012

09:36 PM Revision 6f3d3a07: Allow editing an imported CRL, and refresh OpenVPN CRLs when saving. Implements #2652
Jim Pingle
04:40 PM Todo #2652 (Feedback): Add edit function for imported CRLs
Applied in changeset commit:6f3d3a0781556890e3a6158e32374aed2229f2bd. Jim Pingle

10/05/2012

08:39 PM Revision f9f6f7d4: Fix reference to gateway in pool config
Jim Pingle
07:41 PM Revision f3c338b3: This should fix ipsec status for natted tunnel(s).
Ermal LUÇI
07:08 PM Revision 909890c4: Correct the config generation
Ermal LUÇI
07:05 PM Revision a0c4a6ce: config.xml might have some elusive data so do not fail sainfo section for localside if there is an empty nat address. Just do not put the nat side in there
Ermal LUÇI
07:00 PM Revision 72dd4f07: Check against _address since that is the field inputed _type is always there.
Ermal LUÇI
06:33 PM Feature #1492: Captive Portal Interim Updates
Perhaps something like this, which is based on what we use in production for 2.0: https://github.com/bsdperimeter/pfs... Michael Newton
04:13 PM Feature #1492: Captive Portal Interim Updates
Ideally, pfSense should accept the Acct-Interim-Interval sent by the server to determine interim update interval, as ... Michael Newton
06:17 PM Revision 9a5a078a: Properly set address type selection
Ermal LUÇI
06:15 PM Revision 6e97e102: Correct check since it might be an ip as well
Ermal LUÇI
06:12 PM Revision db535a1c: Correctly build the sainfo to avoid errors
Ermal LUÇI
06:07 PM Revision 67bcb765: Be more strict on validation during filter reload
Ermal LUÇI
06:04 PM Revision 261e72f0: Do not make natlocalid required
Ermal LUÇI
05:44 PM Revision 64eda26c: Fixup easyrule block for IPv6
Jim Pingle
04:58 PM Revision 023f744b: Use .= for strings rather than +=
Jim Pingle
04:30 PM Revision db277413: Don't write a rule out of the natlocal_subnet is blank.
Jim Pingle
04:21 PM Revision 2ecf5b34: This field isn't required, so only check it if there is a value
Jim Pingle
04:20 PM Feature #2143: Captive Portal - RADIUS - attribute: Acct-Terminate-Cause
See https://github.com/bsdperimeter/pfsense/pull/236 Michael Newton
02:15 PM Feature #2143: Captive Portal - RADIUS - attribute: Acct-Terminate-Cause
We have done this on our installations, but the only patch file I have is rather comprehensive and covers all our RAD... Michael Newton
03:31 PM Revision 97f7a517: Safety belt
Jim Pingle
02:29 PM Revision 902052bc: show true/false in logged message instead of 1/<nothing>
Bill Marquette
01:58 PM Bug #2377: Captive portal fails on empty RADIUS password
When using a captive portal, the need is often to display T&C and prevent casual users from getting access, not to pr... Michael Newton
09:24 AM Todo #2652: Add edit function for imported CRLs
Still should be its own ticket - it's not the same issue as this one, and this is technically a deficiency in functio... Jim Pingle
09:22 AM Todo #2652: Add edit function for imported CRLs
I'm with Ermal on this, it should be weighted a bit heavier than "nice to have". Jim Thompson
08:01 AM Bug #2582: OpenVPN service won't start after changing the IP of interface
I just changed my WAN on a test system from DHCP (which had 192.168.9.101 at the time) to a static IP (192.168.9.99) ... Phillip Davis
08:00 AM Bug #742: apinger doesn't recover opt wan when connection returns.
It's unlikely that it's the same issue still. Try a 2.1 snapshot, there has been a ton of work done in this area sinc... Jim Pingle
07:57 AM Bug #742: apinger doesn't recover opt wan when connection returns.
This one should be reopened. Apparently it was closed only because of lack of feedback...
I experience the same is...
Simon Ihmig

10/04/2012

09:16 PM Bug #2582: OpenVPN service won't start after changing the IP of interface
I should clarify. We have 4 OpenVPN server instances total on this particular pfSense box, with the remote access se... Tyler Merrill
09:14 PM Bug #2582: OpenVPN service won't start after changing the IP of interface
I also had this same issue, although I'm using 2.0.1 AMD64 release on a virtual machine under VMWare ESXi 5.0.0. We ... Tyler Merrill
08:55 PM Revision 050fd8ad: Rather use the system constants as defined
Ermal LUÇI
08:51 PM Revision e4d7130d: Use integer rather than hex to put these values. AMD64 builds do rather awkward problems
Ermal LUÇI
06:37 PM Revision 3c107b76: Add a NAT entry for configuring NAT on ipsec phase2. It will add nat rules on enc interface
Ermal LUÇI
04:53 PM Todo #2652: Add edit function for imported CRLs
Might be nice as a separate feature request for the future, but not something I'm thinking of doing now. Jim Pingle
04:44 PM Todo #2652: Add edit function for imported CRLs
Normally should be added even an option to update CRL from some web source. This is very common on many platforms. Ermal Luçi
11:07 AM Todo #2652 (Resolved): Add edit function for imported CRLs
Currently imported CRLs can't be edited to paste in a new/fresh CRL, which makes updating them cumbersome (have to ad... Jim Pingle
02:29 PM Revision 6f663992: Eliminate system calls here, use PHP instead.
Jim Pingle
02:28 PM Revision 80ff6bfe: Eliminate system calls here, use PHP instead.
Jim Pingle
01:24 PM Revision f5acd065: Sanitize some variables
Discovered-By: Yann CAM Jim Pingle
01:14 PM Revision 33ba4131: Sanitize some variables
Discovered-By: Yann CAM Jim Pingle
12:55 PM Revision fa9f5ff9: Verify posted kernel type against a defined list of good values.
Discovered-By: Yann CAM Jim Pingle
12:55 PM Revision 73b9d3c6: Verify posted kernel type against a defined list of good values.
Discovered-By: Yann CAM Jim Pingle
12:20 PM Revision d729dbeb: Fix reference to limitrules
Jim Pingle

10/03/2012

05:17 PM Revision 7b27db03: Add restrict lines to limit what local clients are allowed to do to the ntp server.
Jim Pingle
05:17 PM Revision 6162b068: Only attempt to unset this if it has been set.
Jim Pingle
12:47 AM Bug #2293 (Resolved): Associated NAT rules for TCP missing flags
Chris Buechler
12:45 AM Bug #2651 (Resolved): traffic RRDs broken after upgrade to 2.1
None of the traffic graphs work after upgrading 2.0.x->2.1. In system log: ... Chris Buechler
 

Also available in: Atom