Project

General

Profile

Activity

From 10/21/2012 to 11/19/2012

11/19/2012

09:28 PM Revision 2d314598: Merge pull request #244 from bcyrill/ovpn-alias
Fix: Use specified IP if available Chris Buechler
08:45 PM Bug #2689 (Rejected): Client Export does not work when having multiple OpenVPN enabled
After setting up a second OpenVPN server, I find myself unable to export client configuration for it. Exports still w... Mikkel Høgh
07:23 PM Revision 2004def5: Put these logs under debug since that's their purpose
Ermal LUÇI
07:21 PM Revision 3ac8324f: Put these logs under debug since that's their purpose
Ermal LUÇI
04:54 PM Revision a9157b6b: Correct checking for privileges.
Ermal LUÇI
03:49 PM Bug #2685 (Needs Patch): Unnecessary fields in firewall aliases edit page
the fields that aren't relevant are disabled. No actual bugs here. if you want to submit a merge request to improve t... Chris Buechler
03:47 PM Bug #2674: MTU setting hardcoded 1280 for gif interfaces and in RADVD config
Normally I'd say the local interface MTU, but since there's no MSS clamping on v6 for the time being, probably the WA... Chris Buechler
04:28 AM Bug #2674: MTU setting hardcoded 1280 for gif interfaces and in RADVD config
Indeed I did. Do we want to always advertise the local interface MTU or the WAN MTU? Seth Mos
03:26 PM Bug #2686 (Feedback): OpenVPN listens on interface address instead of VIP
merged Chris Buechler
02:26 PM Revision 589e9633: Fixup gettext/printf call.
Jim Pingle
10:42 AM Revision 0c5c73e5: Add missing $
Ermal LUÇI
10:38 AM Revision d2b9afa5: Correct check to required function
Ermal LUÇI
09:59 AM Revision c9891afe: Commit a revised version of https://github.com/bsdperimeter/pfsense/pull/264.diff
Ermal LUÇI
09:48 AM Revision faea7e10: Merge pull request #259 from PiBa-NL/ipsecNAT
ipsec binat rule not possible if using a subnet together with a single ip so use nat Ermal LUÇI
09:46 AM Revision e0ba24f7: Switch to is_array() check and add curly
Seth Mos
09:45 AM Revision 576b9513: Merge pull request #263 from bcyrill/alias_url_table
Fix: Repopulate address field Ermal LUÇI
09:00 AM Revision 081507eb: Add correct rules for IPv6 tunnel endpoints which differ from the default route.
Seth Mos
08:40 AM Revision 6fb26a17: Add IPv6 support to this function so that IPv6 carp vips can be found
Seth Mos
08:38 AM Revision af661ba8: Do not return here, else we end without any IPsec endoint rules if just one fails.
Seth Mos
04:25 AM Bug #2688 (Resolved): Dynamic DNS IPsec endpoints not allowed through firewall rules
Previously in 2.1 there were rules in rules.debug for allowing IPsec traffic from dyndns hostname IPsec endpoints.
...
Seth Mos

11/18/2012

10:47 PM Bug #2684: OpenVPN interfaces cannot be set as usable gateways
I am aware of that. The issue is when pfSense interface IP is set to "none", the gateway doesn't pop up in the firewa... Anonymous
08:35 PM Revision 126f3edd: Merge pull request #261 from PiBa-NL/gateway
gateway monitoring, notifications generated tell affected gateway/group Ermal LUÇI
08:32 PM Revision 3d999ea7: Merge pull request #257 from PiBa-NL/auth
authentication, don't log 'errors' on normal procedure Ermal LUÇI
02:24 PM Revision 578c81b6: Fix: Repopulate field
Cyrill B
01:22 PM Revision a269fed6: ipsec binat rule not possible if using a subnet together with a single ip so use nat
Pi Ba
01:21 PM Revision 9250baaf: show difference between outbound NAT and outbound NONAT.
Pi Ba
01:20 PM Revision 50006cca: gateway monitoring, make the notifications generated clear to tell which gateway/group they are about
Pi Ba
01:18 PM Revision 669332bd: code cleanup, and extra newline for message and rule generation
Pi Ba
01:10 PM Revision 1198abf9: code comment typo ('log_error' should have been 'log_auth')
Pi Ba
01:10 PM Revision 9a98a89e: authentication, don't log 'errors' on normal procedure
Pi Ba
09:20 AM Feature #2687 (Resolved): Allow GIF interfaces to work with IP aliases
The web configuration currently does not support the creation of GIF interfaces that use a virtual IP address.
There...
Cyrill B
09:13 AM Bug #2686 (Resolved): OpenVPN listens on interface address instead of VIP
The OpenVPN server listens on the interface address instead of the specific ip address (VIP).
In commit:c1449c9484...
Cyrill B
08:54 AM Bug #2685 (Needs Patch): Unnecessary fields in firewall aliases edit page
On the "Firewall: Aliases: Edit" page additional input fields are shown / enabled although they are unused / misleadi... Cyrill B

11/17/2012

10:10 PM Bug #2684 (Rejected): OpenVPN interfaces cannot be set as usable gateways
assigned OpenVPN interfaces, when correctly set as type "none", are automatically filled in correctly on every versio... Chris Buechler
03:20 PM Bug #2684 (Rejected): OpenVPN interfaces cannot be set as usable gateways
I am trying to set a pfSense OpenVPN client instance as a gateway that LAN clients can use. I created an pfsense inte... Anonymous
04:54 PM Revision 969ac0e9: updated pfSense.pot
Vinícius Coque
04:52 PM Revision 52971880: Removing unnecessary gettext function calls
Vinícius Coque
09:48 AM Revision 67179472: Enable io_fast on dummynet to avoid uncessesary loop arounds of packets
Ermal LUÇI
09:48 AM Revision c2947275: Aiming at IPv6 compatibility, do the same tricks on the pfil reorder as for v4. This helps CP work on v6.
Ermal LUÇI
08:53 AM Revision 5ed6d70d: Correct path to certificates as well
Ermal LUÇI
08:51 AM Revision 6590675c: Merge pull request #253 from caseyr232/patch-1
Corrected racoon path to psk.txt. Ermal LUÇI
01:39 AM Revision 5debd85f: Corrected racoon path to psk.txt.
"path pre_shared_key \"{$g['varetc_path']}/psk.txt\";\n\n"; is incorrected, ammended to "path pre_shared_key \"{$g['v... caseyr232

11/16/2012

09:29 PM Revision 66f445c3: To allow limiters to work correctly on mutliwan for now enforce selecting a gateway on outgoing
Ermal LUÇI
09:28 PM Revision fbc75dd5: To allow limiters to work correctly on mutliwan for now enforce selecting a gateway on outgoing
Ermal LUÇI
04:09 PM Revision b3f1ef16: Merge pull request #252 from ogunacik/RELENG_2_0
Control whether text and node variables are not null. Ermal LUÇI
03:32 PM Revision 772ba790: it was giving error at firebug
ogun acik
02:25 PM pfSense Packages Bug #2683 (Rejected): Instalação SquidGuard
that file is there and downloadable, something wrong with your Internet connectivity from that system Chris Buechler
02:16 PM pfSense Packages Bug #2683 (Rejected): Instalação SquidGuard
Beginning package installation for squidGuard...
Downloading package configuration file... done.
Saving updated pac...
Daniel Anes
01:03 PM Bug #2682 (Closed): User Manager server settings appear/disappear randomly, although they still appear to work in 2.1
After creating an LDAP server under the User Manager and configuring it, the settings appear to visually revert to an... Quinten Steenhuis
10:26 AM Revision b4227df6: Only openvpn networks need to stay on negate table
Ermal LUÇI
09:27 AM Revision c7a7a4ee: Update usr/local/www/vpn_ipsec_phase1.php
Correct missing $ Ermal LUÇI

11/15/2012

09:54 PM Revision 31fcd0bd: Add extra safety belts here.
Jim Pingle
06:38 PM Revision 0450342b: This gets called in filter_configure_sync() already
Warren Baker
06:29 PM Revision 993f97dc: Remove none per Jim since it is confusing
Ermal LUÇI
02:32 PM Revision 73ebd062: Remove preload.php which warmed the caches. IT hurts on embedded and really does not help that much
Ermal LUÇI
02:30 PM Revision 991fc85d: While here check if the function needed exists to avoid a require_once call. (Microoptimization)
Ermal LUÇI
02:27 PM Revision db44954c: For destination tolerate a 0.0.0.0/0 and convert it to any
Ermal LUÇI
02:15 PM Revision 86672d44: Correct the destination for the binat to the real destination
Ermal LUÇI
02:12 PM Revision 44bf5c01: Tune the binat a bit so it does not affect all traffic on enc but just for the configured ph2
Ermal LUÇI
12:26 PM pfSense Packages Bug #2681: Squid 3 in pfsense 2.1 Beta
Please use the forum to report issues with packages. Package maintainers do not always monitor this system, but they ... Jim Pingle
12:19 PM pfSense Packages Bug #2681 (Closed): Squid 3 in pfsense 2.1 Beta
Squid doesn't honor custom proxy options Rodrigue Alahassa
10:41 AM Revision eff0526e: Not sure why this has been hidden so deep but putting that in the right place should help with error displayed related to HEADER already sent in PHP errors.log
Ermal LUÇI
04:20 AM Revision 9f40c982: Merge pull request #250 from phil-davis/master
Enhance reporting and changing read-write setting on nanoBSD Jim Pingle
04:00 AM Revision 41cc7a54: Enhance reporting read-write setting
If the user has already selected Current Read/Write Status to be Read-Write, then they also choose Permanent Read/Wri... Phil Davis
03:50 AM Revision 96cecadb: Add refcount_read to util.inc
Add refcount_read so other code can easily find out how many things have the file system mounted. Phil Davis
01:37 AM Revision dbbc7307: Fix typo
Jim Pingle
01:31 AM Revision 1213f83c: Re-add WOL to the services menu, it apparently disappeared in an earlier commit.
Jim Pingle

11/14/2012

09:15 PM Revision bfd4a79e: Allow not setting group authentication
Ermal LUÇI
09:14 PM Revision 35feefd6: Remove accidental copy/pasto
Ermal LUÇI
09:01 PM Bug #1310: Check pakcage .inc files before including to avoid potential breakage
Possible solution, though I may be naive about thee details and exact implementation of future package managers. Howe... Stilez y
08:46 PM Revision 936fc874: For local users check the necessary priviledge is granted
Ermal LUÇI
07:59 PM Revision 0aee7a76: Correct Select button when no ca_ref is defined
Ermal LUÇI
07:46 PM Bug #2231: Dashboard: Traffic Graph: Unable to save settings
it's only fixed and only will be fixed in 2.1.
Chris Buechler
06:41 PM Bug #2231: Dashboard: Traffic Graph: Unable to save settings
Still there in 2.0.2 Release.
Cannot update settings in dashboard.
Brian Jensen
07:34 PM Revision 842d372c: Add ipsec/* anchor for radius dynamic rules
Ermal LUÇI
07:32 PM Revision 3260b82f: Make it more clear what is the username during syslog
Ermal LUÇI
07:31 PM Revision 52c9f9fa: Allow other system authentication types to be used with ipsec. LDAP/RADIUS/local acc
Ermal LUÇI
10:32 AM Revision 9a6d6728: Remove unused/unuseful tags anymore
Ermal LUÇI
10:27 AM Revision 522f1cc7: Implement a pruning for auto added mac passthrough and vouchers. This allows to prune the added entries logged-in through vouchers
Ermal LUÇI

11/12/2012

10:12 PM Feature #2026: [Patch] Multiple SMTP notice recipients
So as to change mail_reports.inc to send report to multiple addresses
--- /etc/inc/mail_reports.inc
+++ /etc/in...
Vladimir Poludintsev
08:41 PM Revision 7b229013: Add button to switch between read/write and read-only on Diag > NanoBSD; Add setting to keep the media read/write at all times; Add indication of ro/rw status on Dashboard.
Jim Pingle
02:05 PM Revision 75de894f: Merge pull request #249 from thomasnoel/RELENG_2_0
cherry-pick last commits to RELENG_2_0 Jim Pingle
02:00 PM Revision 95a3099e: fix last commit (#2679)
Thomas NOEL
02:00 PM Revision 69fec196: Resolves #2679. Correct behaviour when port is null to avoid warnings on error log
Ermal LUÇI
02:00 PM Revision a3882612: Resolves #2678. Merge patch suggedted to stop warnings on PHP_errors.log
Ermal LUÇI
01:54 PM Revision 1bceebd0: Fix variable reference, ticket #2679
Jim Pingle
11:44 AM Revision 3f00208a: Resolves #2679. Correct behaviour when port is null to avoid warnings on error log
Ermal LUÇI
11:12 AM Revision 9c59f962: Resolves #2678. Merge patch suggedted to stop warnings on PHP_errors.log
Ermal LUÇI
09:53 AM Revision a3da8f50: Send just line return rather than newline
Ermal LUÇI
08:10 AM Bug #2679: PHP warnings in diag_states_summary.php
Applied in changeset commit:69fec196d4f2a56c3390769c98e56ce4da292069. Ermal Luçi
07:47 AM Bug #2679: PHP warnings in diag_states_summary.php
I think there is an error in the commited patch : "if (!portarr)" instead of "if (!$portarr)"
(and yes, I start us...
Thomas NOEL
05:50 AM Bug #2679 (Feedback): PHP warnings in diag_states_summary.php
Applied in changeset commit:3f00208a0851ab37626a1ca39a644846964f6c18. Ermal Luçi
05:41 AM Bug #2679: PHP warnings in diag_states_summary.php
I would suggest you to use github for such fixes.
It makes it a lot easier to commit and review patches.
Redmine ...
Ermal Luçi
05:38 AM Bug #2679 (Resolved): PHP warnings in diag_states_summary.php
When there is a lot of clients, there is a lot of these warnings in /tmp/PHP_erros.log :... Thomas NOEL
05:46 AM Bug #2678: disk full because of big /tmp/PHP_errors.log
Thanks ! Can you "cherry-pick" the patch on RELENG_2_0 ? Thomas NOEL
05:14 AM Bug #2678 (Resolved): disk full because of big /tmp/PHP_errors.log
Merged, thx for the report. Ermal Luçi
05:03 AM Bug #2678 (Resolved): disk full because of big /tmp/PHP_errors.log
I have a big /tmp/PHP_errors.log on my pfSense 2.0 machine, with line like :... Thomas NOEL
05:43 AM Bug #2680 (Rejected): PHP Fatal error in /tmp/PHP_errors.log
I have this error in /tmp/PHP_errors.log... but I don't know where it comes from, and when it occurs... sorry :-/
...
Thomas NOEL

11/10/2012

03:03 PM Bug #2677 (Resolved): Dyndns debug file written with ascii string \n instead of line-feed
The string written to the dyndns debug file encloses the \n in single quotes which means the backslash is not interpr... Lakin Lowrey

11/09/2012

01:11 PM Revision ca7a78d8: Fix interface variable to check against
Jim Pingle
09:42 AM Revision 02593e37: Correctly mark found configuration.
Fixes http://forum.pfsense.org/index.php/topic,54595.0.html Ermal LUÇI
02:36 AM Feature #2676: Reply-to option in firewall rule
It should be more clear from the attached picture.
The network 1.1.1.0/26 should be reachable from the Internet an...
Miroslav Novotný
01:44 AM Feature #2676: Reply-to option in firewall rule
Can you describe this more since its a bit of strange unless you have not the same subnet on multiple cards. Ermal Luçi
01:41 AM Feature #2676 (New): Reply-to option in firewall rule
Hello,
I am trying to configure network scenario with multiple path to LAN network (with public IP addresses). I n...
Miroslav Novotný

11/08/2012

09:39 PM Revision 0b3a76ca: More fixes to the schedules rules
Ermal LUÇI
06:53 PM Bug #2412: inbound 6to4 traffic does not work in pf
I have a problem which may be related. First, I (now) have no problems initiating traffic inbound to any of my 6to4 a... Lakin Lowrey
01:24 PM Revision 819e9c31: Remove carp nat rule auto generated since those are only applied on LAN(interfaces without a gateway) and its not probably a good thing to do.
Ermal LUÇI
11:40 AM Revision 7466cd71: Do not generate carp NAT rules when in BACKUP/INIT mode
Ermal LUÇI
07:00 AM Bug #2675 (Resolved): /tmp/.rc.prunecaptiveportal.running can be present on boot
This morning after a crash, a /tmp/.rc.prunecaptiveportal.running is present has not been deleted (I think the crash ... Thomas NOEL

11/07/2012

05:24 PM Revision 70addcc5: Cleanup/standardize labels on L2TP config
Jim Pingle
04:34 PM Revision 10b9dfcf: Always create a pipe for any user on CP and if no limit present set it to 0(unlimited). If any limit comes from the sources of reauthentication this limit will be applied without any other consequences
Ermal LUÇI
03:19 PM Revision ec091c89: break the loop for none schedule limiters
Ermal LUÇI
12:38 PM Bug #2586: Package Repository URL not honored
Found the problem. The package repo does a lookup for www.pfsense.org and if it fails the package pull completely bai... Rob Fuller
07:45 AM Revision 34811aa7: Merge pull request #247 from mdima/master
Adds "Sort by direction" in the Traffic Graph page Ermal LUÇI
07:07 AM Revision 893fb622: Adds "Sort by direction" in the Traffic Graph page
Added the option to sort IPs by direction in the Traffic Graph page, and
improved the detection of the local network ...
Michele Di Maria

11/06/2012

09:31 PM Revision 32837bb4: Use a random exponent for the RSA generation of keys. Its is questionable if its needed to be saved as a value? Ticket #2657
Ermal LUÇI
09:28 PM Revision 9539590c: Use a random exponent for the RSA generation of keys. Its is questionable if its needed to be saved as a value?
Ermal LUÇI
03:36 PM Bug #2657 (Feedback): Potential weakness of the captive portal voucher system (design issue)
For now the exponent has been converted to a random value when generating the keys.
This should mitigate the concern...
Ermal Luçi
05:18 AM Bug #2657: Potential weakness of the captive portal voucher system (design issue)
This appears to largely be based, at least the "urgent recommendation" part, on a false premise - that there is a def... Chris Buechler
05:42 AM Revision a8e925c3: revert change to if-bound states since this seems to have broken all kinds of things
Chris Buechler
02:05 AM Bug #2674 (Resolved): MTU setting hardcoded 1280 for gif interfaces and in RADVD config
The MTU setting in the GUI for gif interfaces is ignored, and set to hardcoded or default value of 1280. Likewise, RA... Keenan Tims
01:27 AM Revision d153e9a3: Merge pull request #246 from PiBa-NL/master
sorting improvement 1.2.3.4:123 and *:1234 & update snapshot contents against .sha256 Jim Pingle

11/05/2012

11:54 PM Revision 426fc7d3: table javascript sorting improvement sorttable 1.2.3.4:123 and *:1234 now sort properly.
Pi Ba
10:15 PM Revision 2ab2d8fb: Check update snapshot contents against .sha256 instead of .md5
Pi Ba
01:06 PM Revision 19588eae: Merge pull request #245 from ogunacik/RELENG_2_0
fixed paths Jim Pingle
12:35 PM Revision 83272466: fixed paths
ogun acik

11/04/2012

05:48 PM Bug #2673 (Closed): Traffic to IPv6 endpoint of IPv6 GRE Tunnel over IPv4 IPSEC causes receiving end to crash
Issue:
Traffic going across an IPv6 GRE tunnel running over a tunnelled IPv4 IPsec VPN to the LAN IPv6 address of th...
Graeme Bragg

11/03/2012

09:41 PM Revision d7a0c22a: Fix: Use specified IP if available
Cyrill B

11/02/2012

03:06 PM Revision 7e669778: Make a function to get the current theme and use it everywhere rather than duplicating code or missing functions. (Fixes forced themes using the wrong theme for login screen)
Conflicts:
etc/inc/util.inc
usr/local/www/head.inc
Jim Pingle
02:50 PM Revision 1e1e1ec8: Make a function to get the current theme and use it everywhere rather than duplicating code or missing functions. (Fixes forced themes using the wrong theme for login screen)
Jim Pingle
04:29 AM Revision 158f0e7d: Don't resync openvpn if rc.newwanip is being run on an openvpn interface, to avoid a loop.
Jim Pingle

11/01/2012

01:16 PM Bug #2306: USB ports show up as network interfaces
I'd much rather just set that in loader.conf by default, the fewer kernel patches the better. Chris Buechler
11:19 AM Bug #2306: USB ports show up as network interfaces
Maybe just patch it to give a default value of 1 to disable it in kernel? Ermal Luçi
12:53 PM Bug #2671 (Resolved): Call to undefined function read_layer7_config
Chris Buechler
12:28 PM Bug #2671: Call to undefined function read_layer7_config
I can confirm that it's working. Peter O
11:18 AM Bug #2671 (Feedback): Call to undefined function read_layer7_config
Already fixed here https://github.com/bsdperimeter/pfsense/commit/e8f35171571cf6d5e13d821d9b6b65c8060fc790 Ermal Luçi
03:52 AM Bug #2671 (Resolved): Call to undefined function read_layer7_config
Full error is: Fatal error: Call to undefined function read_layer7_config() in /etc/inc/filter.inc on line 843
Happe...
Peter O
09:21 AM Revision e8f35171: Include shaper.inc here to have all the function dependency work.
Ermal LUÇI
04:57 AM Bug #2672 (Closed): Limiters and bridge have issue
The dummynet patch for pf(4) needs tuning to work properly for bridging.
It should set PROTO_IFB | DIR_FWD
Ermal Luçi

10/31/2012

11:40 PM Revision 8462bfdc: Fix this browser check
Erik Fonnesbeck
11:27 PM Revision cf205dca: Resolves #2670. Mark vtnet interfaces as altq capable.
Ermal LUÇI
11:16 PM Revision 50100234: Add missing line ending to fix pf syntax error.
Erik Fonnesbeck
10:30 PM Revision 073cb45d: Use if-bound states for better features
Ermal LUÇI
08:15 PM Revision e9456e45: And more encoding...
Jim Pingle
08:05 PM Revision 8ec9cba4: Still more encoding...
Jim Pingle
08:01 PM Revision 313a14f7: More encoding...
Jim Pingle
07:53 PM Revision 8db87547: Encode this before showing it.
Jim Pingle
07:51 PM Revision a138f065: Encode parameters before showing them to users.
Jim Pingle
07:44 PM Revision ac4cbc15: Encode some more parameters before showing them to users.
Jim Pingle
06:30 PM Bug #2670 (Feedback): Trafic shaping with virtio NIC
Applied in changeset commit:cf205dca239bc0f32f81c1df74d76478dc07747f. Ermal Luçi
06:07 PM Bug #2670 (Resolved): Trafic shaping with virtio NIC
I'm running 2.1 snapshot (Oct 25 2012) with virtio NIC (KVM guest). I had to modify /etc/inc/interfaces.inc to be abl... Daniel Berteaud
06:24 PM Revision 7cf76e8b: Encode the interface parameter before using it in a redirect
Jim Pingle
06:23 PM Revision bb33a337: Encode the interface parameter before using it in a redirect
Jim Pingle
06:06 PM Revision e653b6e1: Encode the if parameter before using it in redirects, too.
Conflicts:
usr/local/www/firewall_rules.php
Jim Pingle
06:02 PM Revision ee898155: Encode the if parameter before using it in redirects, too.
Jim Pingle
06:02 PM Revision 52ab0384: Encode the if parameter before using it in html
Jim Pingle
06:01 PM Bug #2669 (Resolved): Captive portal: missing / in redirect URL
Running 2.1 snapshot from Oct 25 2012, the redirect URL after authentication is wrong (missing the / between host and... Daniel Berteaud
06:01 PM Revision abe430cc: Encode the if parameter before using it in html
Jim Pingle
05:39 PM Revision e26e0eac: Escape parameters better when managing tables. Fix test to allow deleting subnet entries as well as IPs.
Conflicts:
usr/local/www/diag_tables.php
Jim Pingle
05:33 PM Revision 1457cce5: Escape parameters better when managing tables. Fix test to allow deleting subnet entries as well as IPs.
Jim Pingle
04:54 PM Bug #2524: SNMP only shows one processor on a dual core system
I have a second system that is doing this now too.
When I type dmesg | grep -i cpu it shows:
CPU: AMD Athlon(tm...
Jonathan Black
03:52 PM Bug #2398: tftpd and tftp-proxy (inetd?) dies after WAN periodic reset
In /etc/inc/filter.inc around like 1858, try changing the place where it does a kill -HUP on inetd with two commands ... Jim Pingle
03:38 PM Revision 56143f06: Remove debug output
Jim Pingle
03:38 PM Revision 398d29a6: Remove debug output
Jim Pingle
02:49 PM Revision 56befec1: Set the CSRF Magic timeout to the same as the session timeout, so that if a user sets a lower session time, the CSRF magic tokens do not outlive the user's session.
Jim Pingle
01:49 PM Revision 23c3ccb6: Set the CSRF Magic timeout to the same as the session timeout, so that if a user sets a lower session time, the CSRF magic tokens do not outlive the user's session.
Jim Pingle
01:07 PM Bug #1112: IPsec GUI/backend missing RADIUS support
Thanks for response.
Think you that is resolved quickly?
Jonh Nash
12:39 PM Revision b3a1733d: Update CSRF Magic
Jim Pingle
12:39 PM Revision fcf53c1e: Update CSRF Magic
Jim Pingle
10:23 AM Revision 926c3b8e: Revert "Revert "Do not put the prefix len on the src ip""
This reverts commit 16c95ab93bcfb8d59260aa7564a402a6cec3050d.
This is how it should be for now. See #2665
Ermal LUÇI
09:43 AM Revision 16c95ab9: Revert "Do not put the prefix len on the src ip"
It actually makes sense in IPv6 world
This reverts commit 3b1385a3febf783f48881b7baf61844f8e91209d.
Ermal LUÇI
09:37 AM Revision 3b1385a3: Do not put the prefix len on the src ip
Ermal LUÇI
05:20 AM Bug #2665 (Feedback): 'pass out' on gif matches inbound traffic
This is not a mismatch of the rule but just how the system works.
There should be teached to pf(4) route-to for v6 t...
Ermal Luçi
04:05 AM Feature #2668 (Resolved): Support aliases in OpenVPN local/remote/tunnel network fields
I put aliases in for each of the networks or related groups of networks around my intranet. These are handy to use in... Phillip Davis
03:42 AM Revision 75e703c4: Merge pull request #243 from phil-davis/master
Replace deprecated split with explode Chris Buechler
03:34 AM Revision 44b1c3e8: Replace deprecated split with explode
Phil Davis
03:32 AM Revision aa2f8cab: Replace deprecated split with explode
Phil Davis
02:59 AM Bug #2667 (Closed): IPv6 on VLANs broken
Some time between September 7 and October 29 IPv6 on VLANs, maybe only in combination with lagg, has broken. The fire... Chris Buechler

10/30/2012

10:35 PM Revision b0bf6bd0: Fixes #2394. If an entry of 0.0.0.0/0 is configured than use the first interface ip matching. Also do a microptimization to not retrieve the interface list every ping host entry
Ermal LUÇI
10:08 PM Revision f85da3b5: Fixes #2300. Take into consideration ip aliases on carp
Ermal LUÇI
10:06 PM Revision e08a5153: Fixes #2300. Add static route even for ip aliases selected to avoid issues.
Ermal LUÇI
05:40 PM Bug #2394 (Feedback): IPsec keepalive doesn't work with 0.0.0.0/0 local subnet
Applied in changeset commit:b0bf6bd017e27f6d8161fe8fff0ba8e6a71f96a3. Ermal Luçi
05:10 PM Bug #2300: Static routes for IPsec peers missing when attached to IP Alias VIP
Applied in changeset commit:f85da3b5828843b8c1a904b05c2f9d612eab1b56. Ermal Luçi
05:10 PM Bug #2300 (Feedback): Static routes for IPsec peers missing when attached to IP Alias VIP
Applied in changeset commit:e08a5153f9a281fdbb3a0cb66fddfea4b23a19a6. Ermal Luçi
04:36 PM Revision d8bddd2a: use the proper array here for VIPs and use some suggestions from the ticket to fix #2645
Jim Pingle
12:25 PM Bug #1112: IPsec GUI/backend missing RADIUS support
There is no script yet, which is why this ticket is still open. Jim Pingle
12:19 PM Bug #1112: IPsec GUI/backend missing RADIUS support
Good evening,
it's possible to have the script file?
I don't understand where make the change.
thanks a lot...
Jonh Nash
11:40 AM Bug #2645 (Feedback): stristr() warning repeated dozens of times during boot
Applied in changeset commit:d8bddd2a44ce5776d2dfd3c4db79576e073f5aa0. Jim Pingle
06:54 AM Bug #2441: Setting up a new PPP interface (3g) hangs the webUI
Probably the same as #2433 Xavier Romain
06:36 AM Bug #2398: tftpd and tftp-proxy (inetd?) dies after WAN periodic reset
I've found a workaround long time ago but I forgot to mention here.
- installed Cron package
- added line : "/usr...
Xavier Romain

10/29/2012

11:05 AM Bug #2665 (Resolved): 'pass out' on gif matches inbound traffic
traffic coming in on a gif interface wrongly matches the out direction on the gif. For instance this: ... Chris Buechler
08:22 AM Revision fa29a6f0: Mark the pipe/queue with zero(unlimited) bandwidth to allow traffic on the state to flow still or new traffic matching the rule to flow. Dummynet blocks traffic not matchign apipe/flow by default. Reported-by: http://forum.pfsense.org/index.php/topic,54595.msg294734.html#msg294734
Ermal LUÇI

10/28/2012

11:41 AM Feature #2637: Add ability to define dnsmasq cache size
it's already set to the maximum cache size, but is hard coded. Chris Buechler
02:11 AM Bug #2651: traffic RRDs broken after upgrade to 2.1
File paths updated to ease patch application. Patch contents unchanged.
Norman Back
12:15 AM Bug #2617 (Resolved): resolv.conf missing ipv6
thanks for the follow up Chris Buechler

10/27/2012

10:40 PM Bug #2617: resolv.conf missing ipv6
BTW this seems to work after the change to the ISC client. I don't see this with the Oct 25th snapshot and didn't see... Don Simpson
03:24 PM Bug #1523: DHCP settings checks only one interface IP via ifconfig to validate settings
D'oh! I wish I had looked here before typing up a ticket that is exactly that same issue as in this ticket. In my cas... Larry Titus
01:50 PM Bug #2658 (Resolved): limiter went dead with recent patches
Ermal Luçi
09:15 AM Feature #2637: Add ability to define dnsmasq cache size
That line is not exactly what is default, I change my --local-ttl to something realistic for local static entries tha... JohnPoz _
09:12 AM Feature #2637: Add ability to define dnsmasq cache size
Just took a look at where dnsmasq is started in services
mwexec_bg("/usr/local/sbin/dnsmasq --local-ttl 86400 ...
JohnPoz _

10/26/2012

09:36 PM Bug #2658: limiter went dead with recent patches
Commits of 23 Oct 2012 have fixed this - both data entry form for limiters and code that implements them are working. Phillip Davis
09:09 PM Revision 61cf2b7e: now works again
most likely fixes #2638 Darren Embry
08:40 PM Revision 219d9eb9: fix #2639 (country interface selector in interfaces_ppps_edit.php)
also make ppps_edit more jslint ready for good measure Darren Embry
08:10 PM Revision 6cd9abff: Make the size of the group privilege list the same size as the user privilege list.
Jim Pingle
08:10 PM Revision 2a2b247b: Standardize hypenation and capitalization of Pre-Shared Key
Jim Pingle
08:02 PM Revision f8b64312: restrict '/' from virtual server name field
fixes #2656 Darren Embry
05:48 PM Bug #2306: USB ports show up as network interfaces
setting hw.usb.no_pf=1 in loader.conf will fix this. I didn't quickly see where to set this for new installs and upgr... Chris Buechler
04:10 PM Bug #2638 (Feedback): Captive portal status widget on the Dashboard is not working
Applied in changeset commit:61cf2b7ed7cfbbab57ec049032d6b953b921904d. Darren Embry
04:05 PM Bug #2529: Captive Portal does not function after update snap or restart system
Anything I can do to help move this along? I'm fairly new to pfsense but competent and would love to see this fixed A... Michael Mogren
03:40 PM Bug #2639 (Feedback): Selecting a Country under Interfaces > (assign), PPPs tab, PPP Link type populates provider list with javascript code.
Applied in changeset commit:219d9eb9a987387beff52a3852734e049aae1882. Darren Embry
03:10 PM Bug #2496 (Closed): The use of php exec() and php system() with pipe '|' will fail if the first output of a os command is long enough.
the issue as described doesn't really exist. Chris Buechler
03:10 PM Bug #2656 (Feedback): The "/" char in Virtual Server name disable the server
Applied in changeset commit:f8b6431222602e206eac046fa68e24a8c35c1659. Darren Embry
02:50 PM Bug #2656: The "/" char in Virtual Server name disable the server
just need input validation to prevent / from being used in the virtual server name in load_balancer_virtual_server_ed... Chris Buechler
03:08 PM Bug #2645: stristr() warning repeated dozens of times during boot
same error still there but has shifted to line 3840 Chris Buechler
02:58 PM Feature #2356 (Resolved): Fill the "Track Interface" prefix drop down list asynchronously
Chris Buechler

10/25/2012

04:18 PM Bug #2651: traffic RRDs broken after upgrade to 2.1
After further consideration I think it would be better to reduce the number of rows to match the 2.1 definition.
Als...
Norman Back
11:34 AM Bug #2651: traffic RRDs broken after upgrade to 2.1
adding comments from duplicate #2664... Chris Buechler
11:35 AM Bug #2664 (Closed): After upgrading from 1.2.3 to 2.1 the rrd traffic & packets graphs no longer work.
duplicate of #2651 Chris Buechler
03:56 AM Bug #742: apinger doesn't recover opt wan when connection returns.
Same here on 2.1-BETA0 (i386) built on Wed Oct 24 14:05:19 EDT 2012, FreeBSD 8.3-RELEASE-p4
==== LOG ====
Oct 25 ...
Vlad Fedorkov

10/24/2012

06:05 PM Revision 5c9f6cfc: To avoid issues with missing removed schedules just do not create the pipe at all
Ermal LUÇI
02:02 PM Bug #2664: After upgrading from 1.2.3 to 2.1 the rrd traffic & packets graphs no longer work.
Changing:
$rrdcreate .= "RRA:AVERAGE:0.5:60:1000 ";
to
$rrdcreate .= "RRA:AVERAGE:0.5:60:3000 ";
in upgrade_0...
Norman Back
01:46 PM Bug #2664 (Closed): After upgrading from 1.2.3 to 2.1 the rrd traffic & packets graphs no longer work.
After upgrading from 1.2.3 to 2.1 the rrd traffic & packets graphs no longer work. However graphs are OK if upgrading... Norman Back
10:05 AM Revision 8e2597c9: Merge pull request #242 from phil-davis/master
Fix warning when no gateway groups Seth Mos
09:04 AM Revision a133c803: Fix warning when no gateway groups
If there are no gateway groups defined, and you save a rule that has an ordinary gateway selected in "Advanced Featur... Phil Davis
08:36 AM Bug #2663 (Resolved): PPTP on WAN Gets blocked via default deny rule.
When using PPTP to Dial WAN the default deny rule blocks traffic.
I searched for a solution for this for months now,...
Martin Graham

10/23/2012

09:37 PM Revision 8d1a9e58: Throw an error when invalid configuration is posted(address->network).
Ermal LUÇI
08:56 PM Revision fbfed5ba: Correct issues with limiters. 1. correct spelling of config option 2. avoid duplicating javascript
Ermal LUÇI
04:26 PM Revision e5df3664: Merge pull request #241 from bcyrill/patch-3
Fix limiter error Jim Pingle
04:04 PM Bug #2636 (Feedback): state mismatch issue on enc0 with amd64
This should behave better on latest snapshots. Ermal Luçi
03:58 PM Bug #2658 (Feedback): limiter went dead with recent patches
Should be working with next round of snapshots. Ermal Luçi
02:31 PM Revision 184c7952: Fix limiter error
Cyrill B
02:06 PM Revision 902f1bd8: Fix limiter error
Cyrill B
01:56 PM Revision 2c7bdd05: Fix limiter error
Cyrill B
01:35 PM Revision 09a49064: Fix limiter error
Cyrill B
07:41 AM Feature #804: Ability to enable/disable static routes
I don't recall how I was testing previously. On a current snapshot though, an IPv4 route does disappear when it is di... Jim Pingle
02:28 AM Feature #804: Ability to enable/disable static routes
Jim I didnt test with v6 so was wondering if your testing was for v6. v4 seems to work for me:
I added a route 8.8...
Warren Baker
06:11 AM Feature #2660: Checkbox to disable re-install packages after a config restore
Should of course be:
because it removes all packages and then adds them.
frater fenantius
06:07 AM Feature #2660 (Closed): Checkbox to disable re-install packages after a config restore
I have 2 identical machines for running a multi LAN/WAN pfsense.
One machine is running and a 2nd is there as a spar...
frater fenantius

10/22/2012

06:07 PM Bug #2633: Captive Portal timeouts cause users to be stuck in limbo
After combing through all the Captive Portal code and countless hours of testing, here's what I found:
- Due to the...
Carlos Pereira
05:48 PM Revision ac91bae5: Use a proposal check value of obey for all mobile, not just pure-PSK. (The docs recommend setting this, may as well make it the default)
Jim Pingle
 

Also available in: Atom