Activity
From 11/24/2012 to 12/23/2012
12/23/2012
-
09:55 PM
Bug #2730 (Resolved): Cannot add a static DHCP mapping within an Additional DHCP Pool
- When attempting to add a static DHCP mapping within an Additional DHCP Pool, the static mapping gets added to the ove...
12/21/2012
-
04:59 PM Bug #2729 (Resolved): UserManager has no indication that an account has an authorized_keys key defined
- UserManager -> Users -> userpage offers no indication that an account has an authorized_keys key defined.
It's onl... -
02:01 PM Bug #2728 (Resolved): PPP WAN types do not obtain DNS servers properly in 2.0.2-RELEASE
- [Note: This has already been resolved in commit:5feadf7fca75866582af73834c8d2ab14edca456 - Putting an entry here for ...
-
12:59 PM Feature #2727 (Resolved): Add switch to dDNS Updates (RFC 2136) for external IP check
- Hi all,
I'm referring to http://forum.pfsense.org/index.php/topic,57012.0.html
My preferred way would be to add... -
03:26 AM Bug #1112: IPsec GUI/backend missing RADIUS support
- Hi Jim,
from a few days it stopped working. No longer requests are forwarded to the radius.
thanks
Jonh
12/20/2012
-
06:59 PM Bug #2725 (Closed): deletion of DHCPv6 leases from status_dhcpv6_leases.php
- duplicate of #2726
-
06:36 PM Bug #2725 (Closed): deletion of DHCPv6 leases from status_dhcpv6_leases.php
- https://10.66.67.1/status_dhcpv6_leases.php?deleteip=2001:470:6a6f::dead:2d&all=
-
- Deletion of current (not active) DHCPv6 leases does not work using the "delete" button next to the lease in status_dh...
-
- user error
-
03:51 PM Feature #2006 (Resolved): CP ipfw fwd all non-authenticated clients' TCP connections to 127.0.0.1,8000
-
- I think ipv6 fwd support on ipfw is not on 8.3, though i might be wrong!
And you forgot to attach as well.
As usu...
12/19/2012
-
07:18 PM Feature #1831: Captive portal IPv6 support
- ... and CP_speedup.diff also.
-
- MFC r232865, r232868 and r233478 added ipfw support for IPv6 tables in stable. To apply the changes the CaptivePortal...
-
- Maybe it would work around it to only disable preemption on the slave (Though that would only hold true for a two-nod...
-
- If there is a CARP IP in INIT on both the primary and backup systems, for instance if a NIC is unplugged on both that...
12/18/2012
-
- Is this still valid issue on recent snaps?
If yes, than a look at why frequent updates are present there! -
- It works for me on a build on Mon Dec 10 18:06:55 EST 2012 FreeBSD 8.3-RELEASE-p5.
Maybe the ipfw hooks are loaded...
12/17/2012
-
- Applied in changeset commit:38d41bb041e4df3e39a7399bb3f37b33a9159ce4.
-
07:48 AM Bug #2722 (Resolved): Revision 4c6ede42 broke licenses.php
- Line 168 is missing the closing > near the end.
Can this be fixed?
12/16/2012
-
- NAT-T works in general with the iPad. Please post to the forum or list for help, this is a support issue, not a bug, ...
-
10:54 PM pfSense Packages Bug #2721 (Rejected): IPSEC NAT-T with iPad client
- Hi,
I can successful setup pfsense 2.01 + ipsec with iPad client. Everything was fine except when I change the NAT... -
08:18 PM pfSense Packages Bug #2720: TinyDNS does not read nameserver_*
- Sorry, the file name is ...
-
- Line 1137 in /usr/local/pkg/tinydns.in, line 1137, is:...
12/14/2012
-
- @Fredrik
Since those problems are not related to the original bug report you should not report them here but inste... -
02:25 AM Bug #2529: Captive Portal does not function after update snap or restart system
- Hi.
Thankyou for the quick responce.
Something else now seams broken.
The user is now redericted to the login ... -
- It will follow the routing table.
If you see there are a lot of tricks with route-to/reply-to on our rulesets. -
12:24 AM Bug #2159: Upgrade code breaks RRD databases on nano
- I've just run into this after upgrading from 2.0 to 2.1 (WebGUI upgrade using pfSense-2.1-BETA1-1g-i386-nanobsd-upgra...
12/13/2012
-
- @Fredrik
Your problems are not directly related to this former issue. Instead there was a parsing problem in ipfw ... -
- I'm sorry but I still have a problem with this one.
After upgrading to snapshot built on Wed Dec 12 10:59:14 EST 201... -
- Ermal, I can't imagine how TCP resets and UDP destination unreachable could "sometimes just exit the wrong interface...
-
- Applied in changeset commit:06a45374b159db353f24f7c39ab8ce52038b6d89.
-
- I do not like sending resets or destination uncreachble since sometimes they will just exit the wrong interface.
Esp... -
- When you remove an IPsec tunnel, Phase 1 or Phase 2, its SPDs are left active.
Thus if you are moving from IPsec ...
12/12/2012
-
-
10:56 PM Bug #2401: Mounting read-only after mounting read-write can be very slow on NanoBSD
- Fantastic, I have upgraded 7 Alix nanobsd systems to 2.1-BETA1. They all do conf_mount_ro in under 1 second now. Well...
-
04:03 PM pfSense Packages Bug #2718 (Resolved): bandwidthd not showing indivdual pc graphs properly.
- running bandwidthd version 2.1.5 on pfsense
2.1-BETA0 (i386)
built on Sun Dec 9 04:41:14 EST 2012
FreeBSD 8.3-RE... -
- this isn't true in general, I just did this several times yesterday on the latest 2.1, and do it several times a week...
-
02:23 AM Bug #2716 (Rejected): Don't reset the physical interface if I add an VLAN
- If I add a new VLAN interface to a physical interface, when I enable it, all the others are going down and the traffi...
-
- this is not a place to ask questions, please post to the forum or mailing list.
-
- Is there any way to disable an interface (physical or VLAN) without loosing all its configuration and the firewall ru...
-
- When I disable CARP manually, if I add a new interface, the driver restart the interface completely. And CARP restart...
12/11/2012
-
09:56 PM Feature #2410: Support name based aliasing via CNAMEs or some other mechanism.
- FWIW, the tomato project uses dnsmasq with DNS forwarder-like functionality and allows mapping multiple hostnames to ...
-
- Applied in changeset pfsense-tools:commit:008742971cb44d8c0f81929504ab7330442c4ba4.
-
- It was broken on that snapshot. Current snapshots are OK.
-
03:27 AM Bug #2714 (Rejected): SNMP modules broken
- At least snmp_ucd.so is not loadable (and it prevents further modules from loading, which might or might not be broke...
-
- Following up this old request, I wonder, is it really necessary to fwd all traffic to lighttpd listening at port 8000...
12/10/2012
-
- changed our affected system over to not use lagg at all, and it's still broken. Only IPv6 that works is on a physical...
-
- Two more points of data:
* Enabling write caching has no effect on speed.
* Switching from UFS to UFS2 has no effec...
12/07/2012
-
- The ISC dhclient allows rejecting of subnets:
Quote from ISC dhclient doc:
----------------------------
reject 192... -
- Seth Mos wrote:
> Would a hook into the dhclient-script not be a option for this to return on a "invalid" address
... -
03:17 AM Feature #2704: dhclient refuse certain DHCP offers (e.g. private RFC1918 leases on WAN)
- Would a hook into the dhclient-script not be a option for this to return on a "invalid" address
-
- I didn't want to commit this to 2.0.x not knowing for sure if it fixed the issue, but here is a patch that can be app...
-
- Applied in changeset commit:66c73aab00fc80028a1fbf2eceec18380268c55e.
-
- Applied in changeset commit:0b73e6f2466194cfa6cc2b72180db84fba3f81fa.
-
- mobile IPsec P2 shouldn't permit setting transport mode, that leads to an invalid racoon.conf.
12/06/2012
-
- There is still no way to do this with or without the GUI. It still requires patches to the software (ipsec-tools/raco...
-
09:06 AM Bug #475: L2TP is not functional in the way users will expect
- Are there any updates on this regarding the 2.1 release? I'm running the 2.1 beta (build: Fri Nov 16 04:26:21 EST 201...
-
07:06 AM
Bug #2349: vlan(4) needs altq adaption on FreeBSD 8.3++
- wifiste . wrote:
> Hi there. Seems the problem is back. I've just upgraded the 1947 snapshot build (Wednesday, Decem... -
06:55 AM
Bug #2349: vlan(4) needs altq adaption on FreeBSD 8.3++
- Hi there. Seems the problem is back. I've just upgraded the 1947 build snapshot (Wednesday, December 5th 2012) and go...
-
05:30 AM Bug #2711: Nat reflection is reflecting complete subnet of WAN-IP's whilst it should only reflect the WAN-IP's itself
- Chris Buechler wrote:
> your port forward would have to have "WAN subnet" as the destination for this to happen. Mis...
12/05/2012
-
- I believe that change will fix the issue.
We tried telling it to not distribute the tun subnet, both as a /32 and... -
05:35 PM Bug #2712: Openvpn and Quagga cause route collision and race condition
- The two vpns were 192.168.200.0/24 and 192.168.198.0/24.
The central site is the server, the remote site is the cl... -
- I just committed a change that should work when the OS (re)starts OpenVPN, but I'm not sure if this will cover the ca...
-
- another tactic might be to have the OpenVPN code do a "route delete x.x.x.x" where x.x.x.x is the IP in the routing t...
-
- I suspect one possible solution would be to simply set it to not distribute routes for the actual OpenVPN tunnel inte...
-
- design should really follow what we do for RRD data and DHCP leases file. don't recall offhand if that's something ea...
-
- bandwidthd will also need some way to save its accumulated data across reboots (yes, /tmp is recreated from scratch i...
-
- Hi Jim, I confirm that works fine. Great job.
12/04/2012
-
- Configuring Quagga for route redistribution over redundant Openvpn site to site links, can cause OpenVPN to fail to b...
-
07:17 PM Bug #2164: Captive Portal - RADIUS - Acct-Session-Time does not reset when "stop/start accounting" is enabled
- I suggest to add a field to cpdb. store the ACCT-START time when calling RADIUS_ACCOUNTING_START
-
07:12 PM Bug #2308: HFSC WebUI doesn't check for "Bandwidth" setting
- Face same issue, i vote to solve this bug.
-
- your port forward would have to have "WAN subnet" as the destination for this to happen. Misconfiguration, not a bug.
-
- http://forum.pfsense.org/index.php/topic,56283.0.html
-
- When I have NAT-reflection enabled, I can't reach the services anymore of others that are in the ISP's subnet.
My ... -
03:53 PM Bug #1943: PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
- I too can confirm this works for a family member running on 2.0.1. In their case, if they never established a connect...
-
-
-
- Code was added as of commit:f15849b5e4961e5c76931a8891ea7a7e2f6f3c53 but probably still needs some testing.
-
-
- Support for RADIUS/LDAP was committed a couple weeks ago and appears to be working fine, though it may yet need some ...
-
- Unfortunately it appears that the reject statement only allows individual IP addresses, so denying all private server...
-
- My cable modem does this, and it's extremely annoying, so I'd be all for such an option. It would also be easy to rep...
-
- the ability to ignore private leases is the request. Because some cable modems start handing out private addresses wh...
-
- Do you mean that we want to be able to ignore certain offers? Or are you implying that pfSense is ingoring DHCP offers?
-
04:09 AM Bug #2710 (Resolved): Captive Portal radius accounting negative session time
- I use captive portal with a separate freeradius server with accounting. One type of user profile is a daily limite of...
-
- Works now, erronous return instead of a continue; One entry caused all rules to be skipped
12/03/2012
-
- duplicate of #1995
-
- Jim, thanks for pointing out the misconfiguration. I agree that GUI should be more informative on the misconfiguration.
-
- You have a configuration error. There is no 58.26.115.x IP on the backup unit, so it can't add a CARP VIP for that su...
-
- master pfsense:
em0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 150 ... -
- It affected version 2.0.1 (amd64) as well.
You need to un-check default queue, click "save" button, then only can ... -
- If php crashes or hangs it appears to leave stale unix domain sockets in /tmp. Requests to the default URL will retu...
-
-
02:56 PM Bug #2705: Host IP not appearing in Traffic Graph on VPN
- You are right! I had not checked the 2.1 beta version before writing. With the last version the Host IP list appear ...
-
- I do not understand why the STABLE driver is needed to be merged?
-
- I can confirm this is happening to me too....
12/02/2012
-
- Please also provide the output of "ifconfig -a" off both hosts.
-
- The IP addresses mentioned is just an example thus it is different than the IP addresses in attached screenshot.
-
- Version: 2.0.1-RELEASE (amd64)
Bug trigger condition:
1)Assign IP 192.168.105.1 to OPT2 interface in master pfse... -
- From /usr/src/UPDATING:
> 20120913:
> The random(4) support for the VIA hardware random number
> generator (`PADLO... -
09:31 AM Bug #2705: Host IP not appearing in Traffic Graph on VPN
- make sure ur on 2.1 beta latest snap
-
- shows fine for me
-
- The list of Host IP, Bandwidth In, Bandwidth Out is void for OpenVPN Server interface.
The graph of the traffic work... -
08:50 AM
Bug #2697 (Feedback): jme driver missing from embedded image
- Applied in changeset pfsense-tools:commit:5617c5204620c8a6bde6e1f0c22b8afe7096896b.
-
01:36 AM Bug #2697: jme driver missing from embedded image
- I've created a custom build with the driver enabled and it's working fine so far. I created a pull request on github ...
-
- dhclient can use of the "reject x.y.z.w" keyword to refuse certain offers.
Check http://zhigang.org/wiki/DHCP "How...
12/01/2012
-
- When un-assigning an interface, only the IPv4 IP is removed from it. The IPv6 IP needs to be removed as well.
Exa...
11/30/2012
-
09:06 PM Bug #1918: update status
- Please consider re-opening this, as I'm experiencing it on 2.0.1, and it prevents installing new packages via the web...
-
08:02 AM Bug #1629: invalid state table entries after WAN IP change
- still not working with 2.1Beta0(i386)built pfSense-memstick-2.1-BETA0-i386-20121128-1058.img
need to reset state t... -
05:41 AM Bug #1629: invalid state table entries after WAN IP change
- Confirmed to still be an issue in 2.1-BETA0 (amd64) built on Wed Nov 28 15:23:39 EST 2012
A reconnect of PPPoE WA...
11/29/2012
-
- Setting up a full BGP feed (450,000 routes), and selecting Services->OpenBGPD->Status crashes php with out of memory....
-
09:37 AM pfSense Packages Bug #1942: snort_blocked.php loads blank
- I am experiencing the same issue and curious where this was fixed. Is it in the beta version? I am currently runnin...
11/28/2012
-
- In this changeset an error was introduced:
http://redmine.pfsense.org/projects/pfsense/repository/diff/usr/local/sbi... -
10:08 AM pfSense Packages Bug #2698: freeradius2 counter not working
- Last thing, the CP have the option that say it has to auth users every minute, but in debug mode is send packets in...
-
- Example:
"alice" Cleartext-Password := "test", Max-Daily-Session := 420
7 minutes = 420
Please I had save ... -
- Hi.
I have try to setup my pfsense box and handle my users from freeradius2, I want to use the "Amount of Time s... -
- We use /var/etc/snmpd.conf, not /etc/snmpd.conf
And if you make hand edits, they will be overwritten next time it'... -
05:25 AM pfSense Packages Bug #2699 (Rejected): Bsnmpd is not using the config /etc/snmpd.config properly
- I changed the config file /etc/snmpd.config
to get my cpu temp.
I installed snmp_ucd.
begemotSnmpdModulePath."... -
- Some fixes for this have gone into 2.1 over the past few months. Try a 2.1-BETA snapshot and see if it's repeatable t...
-
- I can confirm that this problem still exists in 2.0.1-RELEASE (amd64) built on Mon Dec 12 18:16:13 EST 2011 using PP...
-
01:04 AM Bug #2696: Disconnection from a PPTP dialup tunnel brings down the IPSec tunnels
- Ops, busted! And yes, now it works properly...
I would suggest to change a little bit the description, like adding...
11/27/2012
-
- I have a JMicron based miniPCIe card that I'm using with pfSense - it's working fine with the normal image, but it is...
-
- this is what happens when you misconfigure your PPTP. Never put an interface IP as the server IP for PPTP. there's a ...
-
- Hello,
to reproduce the problem, the steps are:
1) Create an IPSec point-to-point tunnel with a remote box
2) Conf... -
05:37 PM pfSense Packages Bug #2695 (Resolved): bandwidthd package writes to RO directory in embedded
- As per
http://forum.pfsense.org/index.php/topic,49165.0.html
bandwidthd package on alix running nanoBSD tries to ... -
09:52 AM Feature #2693 (New): Allow mapping mapping non-physical interfaces via console
- Creating virtual interfaces via console like LAGG is another issue, that's by now only possible via gui.
The issue... -
- If it would already be possible to assign a previously created lagg (via Web) on the console that would be helpful, r...
-
- Applied in changeset commit:84464c9ab0b94b9602c6ec62502dc4ad3e7a8c0a.
-
- Normally this can be overcommed with match rules on floating tab.
It is present there on 2.1 and i am pushing the fix...
11/26/2012
-
-
-
-
-
-
-
-
-
-
- current releases default to 127.0.0.1 in resolv.conf
-
-
04:52 AM Bug #2692 (Resolved): RRD queue graph doe's not stack
- Hi
Curently pfsense ovraps areas when drawing queue's. So if last queue is bigger than others, it will cover all ...
11/24/2012
-
-
- we've been using gif with CARP virtual IPs for ages, works fine. IP aliases don't show in the list
-
-
-
-
- The floating rule should be queue, not pass. Rules file isn't accessible, but configs like this are common and work f...
-
- we have as feature-complete IPv6 as pretty much anything, and better in ways than many commercial and open source alt...
-
-
- doesn't appear to be a problem anymore, leaving for feedback for now.
-
- this looks to have been fixed at some point, not seeing that on any of several installs.
-
-
- can't replicate
-
-
-
-
-
- fixed
-
- confirmed working
Also available in: Atom