Project

General

Profile

Activity

From 12/26/2012 to 01/24/2013

01/24/2013

08:58 PM Bug #1629 (New): invalid state table entries after WAN IP change
we at least need the option to wipe the entire state table upon IP change. Chris Buechler
05:52 AM Bug #1629: invalid state table entries after WAN IP change
The only real solution to this is to switch to if-bound states for many reasons.
That is a bit more involved changed... Ermal Luçi
07:55 PM Bug #2746: IPv6 IPSEC shows down but is actually not...
Thanks for getting back to me...
You are right, it was a configuration issue but a mean one :-)
If you selec... Andre Keller
07:33 PM Revision e4ffca08: Make IPv4/IPv6 validation on IPSec
It should fix #2769 Renato Botelho
07:32 PM Revision ab2ccd9f: Fix indent and blanks at EOL
Renato Botelho
07:16 PM Bug #2763 (Feedback): Dynamic Firewall logs doesn't add new rows
Widget is working fine, but there is something wrong with fonts and sizes as you can see on attached screenshot. Renato Botelho
07:13 PM Revision 1aafb710: Don't forget the wizard...
Jim Pingle
06:54 PM Revision a28d40cb: Allow specifying multiple local/remote networks for OpenVPN separated by commas. While I'm here, fix up the IPv6 tunnel/remote/local network input validation. Simplify some code using functions.
Jim Pingle
04:17 PM Bug #2633: Captive Portal timeouts cause users to be stuck in limbo
Hi Ermal,
The fixes broke the captive portal entirely.
For one, DNS requests to the forwarder are completely bloc... Carlos Pereira
02:50 PM Bug #2777 (Rejected): NAT-Port forwarding dont work in Multi-WAN configuration, if the first WAN Interface have an higher Tier.
Port Forwarding (inbound) has nothing to do with Gateway Groups (outbound).
Please post in the forum for a more th... Jim Pingle
02:44 PM Bug #2777 (Rejected): NAT-Port forwarding dont work in Multi-WAN configuration, if the first WAN Interface have an higher Tier.
Nat(Port-forwarding) dont work with Multi-Wan, when the First WAN1-Interface has an higher Priotiy(Tier) or no Gatewa... Marvin Klose
02:49 PM Bug #1943: PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
Bipin, if you've identified that Unisphere BRAS is used by all the ISPs you've tried and had problems with, then perh... Dim Hatz
02:39 PM Revision f657f5e1: Ensure DHCP main range, pools ranges and static IP addresses don't overlap each other. It should fix #2773
Renato Botelho
02:30 PM Revision 41b4867e: Move is_inrange() to util.inc and rename it to is_inrange_v6()
Renato Botelho
02:29 PM Revision a78bf0c8: Fix logic of v6 version of is_inrange()
Renato Botelho
02:28 PM Revision 54404519: Move is_inrange() to util.inc and rename it to is_inrange_v4()
Renato Botelho
02:25 PM Revision 736698bd: Fix logic of is_inrange()
Renato Botelho
01:54 PM Revision 507628d5: Remove call-time pass-by-reference
Renato Botelho
01:40 PM Bug #2769 (Feedback): IPsec needs IPv4/IPv6 input validation
Applied in changeset commit:e4ffca08822057400f6a8c2af91622e0c32f6140. Renato Botelho
11:47 AM Revision 338c0941: Merge #237 manually whitout the GUI option for specifying interim interval. It will read now this attribute if present in a reply and use it. Fixes #1492
Ermal LUÇI
11:31 AM Revision a689bab6: Read Acct-Interim-Interval from an access-accept reply
Ermal LUÇI
11:19 AM Revision 9c115b40: Fixes #804. Correct deletion of ipv6 routes.
Ermal LUÇI
10:49 AM Revision c37e2460: Mostly for testing name relation in github. No functional change
Ermal Luçi
10:44 AM Revision a5085d59: Mostly for testing name relation in github. No functional change
Ermal LUÇI
10:37 AM Revision 18f338da: Correctly bring down an interface older configuration. Fixes #2758
Ermal Luçi
10:30 AM Revision 80fae0e2: Put for now the code here in preparation of properly cleaning a recofnigured interface
Ermal Luçi
10:24 AM Revision 9343d750: Teach interface_bring_down to read a cofniguration passed in. Will be useful for Ticket #2758
Ermal LUÇI
10:18 AM Revision 203e4bb6: Do not be so verbose by default this is just needed by a developer at best
Ermal LUÇI
10:09 AM Revision 61223023: Validate before taking the input and do anything with it
Ermal LUÇI
09:57 AM Revision 0e22dda5: Put some more sanity checking for various interface configurations
Ermal LUÇI
09:56 AM Bug #2758: Old configuration remains when changing interface type
After some tests here, i noted the issue persists. When I changed interface from static to pppoe, the static IP remai... Renato Botelho
04:40 AM Bug #2758 (Feedback): Old configuration remains when changing interface type
Applied in changeset commit:18f338da58e4f98478bd4710b3f4907759cd9540. Ermal Luçi
09:18 AM Feature #2776: Unknown Radius-Attributes
If racoon gives you an IP from the pool, that is fine.
Assigning a specific IP to a specific user is what doesn't ... Jim Pingle
09:09 AM Feature #2776: Unknown Radius-Attributes
Are you speaking of the radius-attributes like framed-ip-address of cisco?
the ip assignment on racoon is possible a... Jonh Nash
06:36 AM Feature #2776: Unknown Radius-Attributes
The lack of IP assignment is a deficiency in racoon. There may not be anything we can do for that. Jim Pingle
05:47 AM Feature #2776 (Resolved): Unknown Radius-Attributes
In VPN ipsec mobile there is the possibility to use the server radius for authentication and accounting
The authent... Jonh Nash
08:51 AM Bug #2756: SNMPD problems when binding pppoe interface
Okay i will remove it and see what will happens Claudius Badmind
08:29 AM Bug #2756: SNMPD problems when binding pppoe interface
Can you try removing the trap host/port and see if it stays up longer? Jim Pingle
08:26 AM Bug #2756: SNMPD problems when binding pppoe interface
@root 68740 0.0 1.4 8368 6760 ?? Ss 3:27PM 0:00.05 /usr/sbin/bsnmpd -c /var/etc/snmpd.conf -p /var/run/s... Claudius Badmind
08:40 AM Bug #2773 (Feedback): DHCP pools need validated against other pools when saving
Applied in changeset commit:f657f5e1e407a4687983b6e9907f0dc489945157. Renato Botelho
05:50 AM Feature #1492: Captive Portal Interim Updates
Applied in changeset commit:338c0941ef9a90d33b02627a320fb642d192b172. Ermal Luçi
05:46 AM Feature #1492 (Feedback): Captive Portal Interim Updates
Ermal Luçi
05:46 AM Feature #1492: Captive Portal Interim Updates
Merged manually without the GUI option. Ermal Luçi
05:20 AM Feature #804: Ability to enable/disable static routes
Applied in changeset commit:9c115b409d0b21132dae9ad2c62f842a7e438f8f. Ermal Luçi
05:18 AM Feature #804 (Feedback): Ability to enable/disable static routes
Ermal Luçi
04:52 AM Bug #2737 (Resolved): excessive filterdns processes in some circumstance(s)
This is solved now days since filterdns just reloads config and does not need to be restarted on change. Ermal Luçi
04:40 AM Bug #1112 (Resolved): IPsec GUI/backend missing RADIUS support
Please open a new ticket about that. Ermal Luçi

01/23/2013

11:22 PM Revision 7309ff39: Allow set DHCP options per reservation
Renato Botelho
08:32 PM Revision 5370146c: Make sure this is in global scope
Ermal LUÇI
08:02 PM Revision 5918f9b7: Resolves #2482. Remove an ipv6 alias from a vip eevn though the pfsense module does not have support for that
Ermal LUÇI
07:38 PM Revision f2bd8842: Correct reference to OpenVPN connect so it doesn't only refer to iOS.
Jim Pingle
07:10 PM Bug #2775 (Closed): OpenVPN Server binds on CARP IP on slave instead on master
Jim Pingle
07:10 PM Bug #2775: OpenVPN Server binds on CARP IP on slave instead on master
Tested this on a cluster I had handy and servers bound to a CARP VIP run on both. I'm not seeing a problem.
We use... Jim Pingle
07:08 PM Bug #2775: OpenVPN Server binds on CARP IP on slave instead on master
OpenVPN Servers are not bound by the same CARP restrictions as OpenVPN clients. It's normal for OpenVPN servers to be... Jim Pingle
06:08 PM Bug #2775: OpenVPN Server binds on CARP IP on slave instead on master
forgotten... the firewall slave binds on the right CARP IP:
wan_vip201: flags=49<UP,LOOPBACK,RUNNING> metric 0 mtu... Reiner Keller
05:51 PM Bug #2775 (Closed): OpenVPN Server binds on CARP IP on slave instead on master
Hello,
I am running
2.1-BETA1 (amd64)
built on Mon Jan 14 11:26:04 EST 2013
FreeBSD 8.3-RELE... Reiner Keller
05:34 PM Bug #1995 (Closed): Cannot edit default queue
Renato Botelho
05:22 PM Bug #2761 (Closed): Widget detection function can cause duplicate widgets in the Web GUI
Renato Botelho
04:24 PM Revision 287f7e26: Convert all captiveportal code to not use ipfw_set_context since its not needed anymore. Also add code to validate cpzone on webgui pages before being used
Ermal LUÇI
02:42 PM Bug #2483 (Feedback): IPv6 Interface Aliases not functioning
For now let it be without support from pfSense module to have that working. Ermal Luçi
02:10 PM Bug #2482 (Feedback): error trying to delete limiter
Applied in changeset commit:5918f9b71295521fb06eac8aec8fabcf876e1831. Ermal Luçi
01:25 PM Bug #2633 (Feedback): Captive Portal timeouts cause users to be stuck in limbo
Test later snapshots. Ermal Luçi
01:24 PM Bug #1112: IPsec GUI/backend missing RADIUS support
Oh that part is not yet functional.
It is on my TODO which can be pushed if someone has the need.
But probably from... Ermal Luçi
09:41 AM Bug #1112: IPsec GUI/backend missing RADIUS support
Hi Ermal, I can authenticate the client on radius, but I cannot allocate the ip address and I cannot see the accounti... Jonh Nash
04:37 AM Bug #1112: IPsec GUI/backend missing RADIUS support
Can you please be more verbose about what is not working? Ermal Luçi
01:23 PM Bug #2759 (Resolved): Lightsquid not working since mod_cgi was removed
Ermal Luçi
09:45 AM Bug #2759: Lightsquid not working since mod_cgi was removed
Jim P wrote:
> This should be fixed on current snapshots dated 1/21 or later.
Yes, thank you. It works now. Ian Pitcher
01:04 PM Revision fa7b825f: Fix some DHCP per pool options that will never be considered because of a wrong check
Renato Botelho
11:38 AM Revision b75d7fd5: Fix indent and whitespaces issues
Renato Botelho
07:26 AM Feature #2774 (New): Extend DHCP Pools code to allow using different subnets
The current DHCP pools code allows creating multiple ranges within the same large subnet. The ISC DHCP Daemon also su... Jim Pingle
07:12 AM Bug #2773 (Closed): DHCP pools need validated against other pools when saving
The new DHCP pools code checks the range given to make sure it is OK for itself (end is after start, etc) but it does... Jim Pingle
04:11 AM Bug #2772: Kernel panic on WAN wifi + pppoe
Please go through the forum first for this.
But the crashdump should be a helpful bit of information. Ermal Luçi

01/22/2013

11:31 PM Revision b3af5453: Escape some variables used in mwexec() calls
Renato Botelho
09:47 PM Revision 2fb343ed: Merge pull request #342 from bcyrill/patch-3
Update etc/inc/vpn.inc Ermal LUÇI
07:36 PM Revision 96a6f4cb: Update etc/inc/vpn.inc
There's no need to create a spd.conf.reload file if it's empty.
Phase 1 entries for mobile clients are not handled by... Cyrill B
06:43 PM Revision f5e81794: Fix indent and whitespace issues
Renato Botelho
06:28 PM Revision ee55ce7d: Add GUI option to use "topology subnet" for OpenVPN, since the OpenVPN Connect iOS client requires it for IPv6
Jim Pingle
06:09 PM Bug #2772 (Closed): Kernel panic on WAN wifi + pppoe
I have an alix (alix3d2, 2xminiPCI, 1xLAN, 2xUSB, bios 0.99h) board
with 2 miniPCI WiFi cards on it (WLM54GP23, Athe... r_t_f_m .
05:53 PM Revision 30b3f068: Validate bridge interface before delete it
Renato Botelho
05:23 PM Revision c6f8c400: Fix indent and remove extra whitespaces between tabs and at EOL
Renato Botelho
05:08 PM Revision e9b6e032: Validate vlan interface before delete it
Renato Botelho
05:00 PM Revision eea7eb99: Validate QinQ vlan interface to be sure it exists
Renato Botelho
05:00 PM Revision 782e33f8: Validate QinQ interface to be sure it's valid
Renato Botelho
04:03 PM Revision 62f8244b: Fix indent and blank at EOL
Renato Botelho
03:24 PM Revision 908e5985: When QinQ members are changed, make sure interfaces are created/destroyed (attempt 2)
Renato Botelho
02:44 PM Feature #2771 (New): Add packet tracing simulator
Functionally similar to the Cisco ASA command line:
packet-tracer input <interface> <protocol> <src-ip> <src-port> <... Jeremy Porter
02:02 PM Revision b554b869: Revert "When QinQ members are changed, make sure interfaces are created/destroyed"
This reverts commit a2bf1347c95bbb988bbd79d2cb091c28d9f075ed. Renato Botelho
01:49 PM Revision a2bf1347: When QinQ members are changed, make sure interfaces are created/destroyed
Renato Botelho
12:39 PM Feature #2770 (Rejected): add "device mptable" to amd64 builds to make pfsense boot on soekris6501
In http://www.mail-archive.com/soekris-tech@lists.soekris.com/msg06840.html a feature request ticket has been asked f... Alex H
10:54 AM Revision 1c3ddd9e: Fix indent
Renato Botelho
10:35 AM Bug #2746 (Feedback): IPv6 IPSEC shows down but is actually not...
I just created a pure IPv6 tunnel between two VMs running today's snapshot and it comes up and works and the status s... Jim Pingle
08:12 AM Bug #2746: IPv6 IPSEC shows down but is actually not...
When your tunnels are up, can you attach the output of:
setkey -D
and
setkey -DP
That should help us with... Jim Pingle
10:20 AM Bug #2769 (Closed): IPsec needs IPv4/IPv6 input validation
IPsec GUI input validation needs some work for IPv6.
If you choose IPv4 or IPv6 on the Phase 1 settings, addresses... Jim Pingle
09:53 AM Feature #2766: status_openvpn.php needs IPv6 support
After poking some more there just isn't a way to get the info from the management interface that I can see. If you co... Jim Pingle
12:57 AM Feature #2766: status_openvpn.php needs IPv6 support
if this is just something that isn't available in OpenVPN 2.3.0, then let's just move the target to 2.2. Chris Buechler
09:35 AM Bug #1351 (Feedback): Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes
This should be OK these days, just make sure:
Phase 1 Settings:
Policy Generation: Unique
Proposal Checking: Str... Jim Pingle
08:05 AM Bug #2759 (Feedback): Lightsquid not working since mod_cgi was removed
This should be fixed on current snapshots dated 1/21 or later. Jim Pingle
01:14 AM Feature #2768 (Resolved): Don't allow adding IP Alias or CARP VIP on network or broadcast addresses
It's currently possible to configure an IP alias or CARP IP on the network or broadcast address of a subnet. For inst... Chris Buechler
12:55 AM Feature #2587 (Closed): Add IPv6 Privacy settings.
yeah this really shouldn't have been left here, though it can be applicable in appliance usage scenarios. In general ... Chris Buechler

01/21/2013

09:17 PM Revision 4fb2e5ed: If entering an action take the redir and exit even though the action was not successful to avoid any issue
Ermal LUÇI
09:08 PM Revision 09294e84: Validate the cpzone parameter passed that it actually is a valid zone
Ermal LUÇI
09:07 PM Revision ed97b2cb: Validate the cpzone parameter passed that it actually is a valid zone
Ermal LUÇI
08:58 PM Revision 3760b867: Use symlink rather than forked commands. Also simplify a bit code
Ermal LUÇI
08:54 PM Revision 82e89ce3: Use more secure file name for the operations to avoid issues
Ermal LUÇI
08:52 PM Revision 3335f5d1: Use more secure file name for the operations to avoid issues
Ermal LUÇI
08:47 PM Revision 4734474e: Revert "There should be always a zone given from lighty to us so try to get that first"
This reverts commit 497d0b192f8e065ec3b4d1d94764b51c924a89b8. Ermal LUÇI
08:46 PM Revision 497d0b19: There should be always a zone given from lighty to us so try to get that first
Ermal LUÇI
07:57 PM Revision 48006baf: Correct error/alert displaying. Also remove redundant log_errror since file_notice does that by its own
Ermal LUÇI
07:46 PM Revision e01570e1: Just the first line is interesting here
Ermal LUÇI
07:38 PM Revision 31a5f13c: Unset some vars to free space and also gather the error from pfctl since the first run of the command no need to run again. Also merge 3 exec() into one to avoid forking to much
Ermal LUÇI
07:38 PM Revision f32eae2d: Unser some vars to free space
Ermal LUÇI
07:33 PM Revision 8152f145: Default to using sha256 digest for GUI cert.
Jim Pingle
07:33 PM Revision ca621902: Allow selecting the digest algorithm when creating a CA or Cert. Implements #2765
Jim Pingle
07:21 PM Revision bc2b0144: Remove remenant of file based days
Ermal LUÇI
06:46 PM Bug #2767 (Rejected): NATting problem in virtualization environment
this doesn't meet requirements for a legit bug report. http://doc.pfsense.org/index.php/Bug_reporting
There's a high... Chris Buechler
01:41 PM Bug #2767 (Rejected): NATting problem in virtualization environment
I'm sorry I couldn't give better subject, but I experience weird networking problems using pfSense 2.1 beta in a KVM ... Lorenzo Milesi
03:47 PM Revision 586098db: Make sure default config complies with latest version
Renato Botelho
03:47 PM Revision 2d563280: Fix indent and remove trailing tabs and whitespaces
Renato Botelho
03:02 PM Revision 35b443af: No reason for the ppp log to use this display method, use dump_clog() instead.
Jim Pingle
03:02 PM Revision f0469c5c: No reason for the ppp log to use this display method, use dump_clog() instead.
Jim Pingle
02:59 PM Revision 39f245c8: A couple fixes for openvpn routing table display. Feature #2766
Jim Pingle
02:36 PM Revision f8bb2aac: Enable cgi for the webgui since some ports like lightsquid need it
Ermal LUÇI
02:35 PM Revision b35fdb17: Enable cgi for the webgui since some ports like lightsquid need it
Ermal LUÇI
02:34 PM Revision 25dc1bb0: Run IPsec logs through htmlspecialchars before display.
Jim Pingle
02:33 PM Revision 7ee7ed46: Run IPsec logs through htmlspecialchars before display.
Jim Pingle
02:25 PM Revision ec970b50: Add routing table display for each OpenVPN ssl/tls server instance, collapsed by default. Part of feature #2766
Jim Pingle
02:15 PM Revision 3dc76aa5: Update the default config.xml to 9.2 so it does not trigger config.xml upgrade during install of a new system
Renato Botelho
02:14 PM Revision 20a3b436: Add IPv6 privacy settings tunables. Keep the default FreeBSD value for them, that is disabled. This implements feature request #2587
Renato Botelho
01:40 PM Feature #2765 (Feedback): Allow generation an x509 certificates with an SHA256 signature hash
Applied in changeset commit:ca6219025cabd3edbe53e522b345a167381a0171. Jim Pingle
11:48 AM Revision 633c02c1: Previous attempt to fix #1995 allow to set more than one default queues, prevent it with this change. It should fix #1995
Renato Botelho
11:45 AM Revision f8dca5a3: Previous attempt to fix #1995 allow to set more than one default queues, prevent it with this change. It should fix #1995
Renato Botelho
10:49 AM Revision cb2bd7ff: Merge pull request #340 from bcyrill/voucher_sync
Voucher sync Ermal LUÇI
10:12 AM Feature #2587: Add IPv6 Privacy settings.
There was a very short discussion about the IPv6 privacy extensions in the forum [1], with the key-point being that i... Cyrill B
09:02 AM Feature #2587 (Feedback): Add IPv6 Privacy settings.
Applied in changeset commit:20a3b4368660c876c72ef9eefe684269fa356561 Renato Botelho
07:26 AM Feature #2766: status_openvpn.php needs IPv6 support
Doesn't look like the OpenVPN management interface reports this back in the status line as it does for others, at lea... Jim Pingle
04:46 AM Feature #2766 (Resolved): status_openvpn.php needs IPv6 support
status_openvpn.php needs IPv6 support, for instance to show the IPv6 assigned virtual address instead of just the v4 ... Chris Buechler
07:10 AM Bug #2756: SNMPD problems when binding pppoe interface
Could you please collect snmpd process information when it starts?
# ps auxwww | grep -i snmp
And send the output. Renato Botelho
05:50 AM Bug #1995: Cannot edit default queue
Applied in changeset commit:633c02c1ac86dcd10e52e87e68e5ca757990b6e8. Renato Botelho
05:50 AM Bug #1995: Cannot edit default queue
Applied in changeset commit:633c02c1ac86dcd10e52e87e68e5ca757990b6e8. Renato Botelho
05:50 AM Bug #1995: Cannot edit default queue
Applied in changeset commit:f8dca5a36e63e095f6e0e22e71ec1a1444097814. Renato Botelho
05:50 AM Bug #1995 (Feedback): Cannot edit default queue
Applied in changeset commit:f8dca5a36e63e095f6e0e22e71ec1a1444097814. Renato Botelho
04:49 AM Bug #1995 (New): Cannot edit default queue
Not fixed yet. Renato Botelho
04:25 AM Bug #1995 (Resolved): Cannot edit default queue
Renato Botelho
05:13 AM Bug #2405 (Rejected): Lack of traffic shaping queue parent can take firewall down (pass no traffic)
You cannot select parent queue, it's done automatically and queue will not be created without parent. Renato Botelho

01/19/2013

09:22 PM Feature #2765: Allow generation an x509 certificates with an SHA256 signature hash
Based on some searching I did earlier, it seems that the only ones suitable are:
sha1 (with the above mentioned re... Dim Hatz
08:45 PM Feature #2765: Allow generation an x509 certificates with an SHA256 signature hash
I'd hate to hardcode a list, but openssl doesn't appear to have a good way to list the available message digest algor... Jim Pingle
08:03 PM Feature #2765: Allow generation an x509 certificates with an SHA256 signature hash
Just quick update:
1) The relevant keyword in openssl.cnf is default_md = sha256 # (md5/sha512/etc)
2) For openss... Dim Hatz
07:09 PM Feature #2765 (Resolved): Allow generation an x509 certificates with an SHA256 signature hash
Apparently pfsense's Cert Manager has hard-coded the use of SHA-1 for all PKI operations ("digest_alg" => "sha1" in /... Dim Hatz
04:24 AM Revision bbe29bb1: Update /etc/inc/voucher.inc
Cyrill B
04:16 AM Revision a18eeb51: Update /etc/inc/voucher.inc
Cyrill B

01/18/2013

05:13 PM Bug #2764 (Resolved): Captive Portal Voucher Sync issue
I have found an issue with voucher sync. If you create a new voucher roll on the master pfSense and this new voucher ... Fabian Lorenz
04:04 PM Revision 1489e8c8: Fix indent
Renato Botelho
10:29 AM Revision f8cb8685: Correct stoping of the db and sending radius stops
Ermal LUÇI
08:26 AM Revision 33127391: Merge pull request #338 from bcyrill/pkg_mgr
Add version check to package install Ermal LUÇI
08:24 AM Revision 1d9b9b73: Merge pull request #339 from bcyrill/patch-2
Update etc/inc/interfaces.inc Ermal LUÇI
07:22 AM Bug #2709 (Feedback): webgui cannot restart if php is hung
This should be fixed/irrelevant now on 2.0.3 and 2.1. Many related changes in lighttpd and php config were made to fi... Jim Pingle
07:20 AM Bug #2709: webgui cannot restart if php is hung
The same is happening with me (2.0.2)... Danilo Baio
06:03 AM Bug #2763 (Closed): Dynamic Firewall logs doesn't add new rows
The Dynamic Firewall Log page doesn't add rows, it only updates the php generated rows which means that if it's loade... John Bayly
04:47 AM Bug #2756: SNMPD problems when binding pppoe interface
okay it sill stops working so here is my /var/etc/snmpd.conf... Claudius Badmind
03:25 AM Bug #2762 (Resolved): PF drops IPv6 packets with fragment header followed by a last fragment only
PF has the same problem as is described here for ipfw.
http://lists.freebsd.org/pipermail/freebsd-net/2011-February... Chris Buechler
02:37 AM Bug #1943: PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
the issue is some driver related and Unisphere BRAS which more and more isp r using which uses some flood protection ... Bipin Chandra
01:01 AM Bug #1943: PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
this is a very old issue, a big long thread on this since ages http://forum.pfsense.org/index.php/topic,41061.0.html Bipin Chandra
12:26 AM Revision 15d15c7f: Update etc/inc/interfaces.inc
As noted in http://forum.pfsense.org/index.php/topic,57849.0.html Cyrill B

01/17/2013

09:03 PM Bug #1856: Removing a Phase 2 does not remove the SPD policy
This bug is related to #2719 and has most likely also been resolved. Cyrill B
07:00 PM Revision 473129bb: Allow to edit default queue. Should fix #1995
Renato Botelho
06:57 PM Revision dbf2dde4: Remove call-time pass-by-reference
Renato Botelho
06:56 PM Revision 20f5fce5: Allow to edit default queue. Should fix #1995
Renato Botelho
06:36 PM Revision 633d51b7: Add version check to package install
Cyrill B
04:17 PM Revision c1ce0c51: Preserve "Idle timeout" parameter on interfaces gui. It fixes a problem pointed out on ticket #2641
Renato Botelho
04:15 PM Revision 5f921566: Revert part of 0ff214f27d that was committed accidentally
Renato Botelho
01:23 PM Bug #2756 (Feedback): SNMPD problems when binding pppoe interface
Renato Botelho
05:18 AM Bug #2756: SNMPD problems when binding pppoe interface
If it doesn't help, please attach the content of /var/etc/snmpd.conf. Renato Botelho
02:16 AM Bug #2756: SNMPD problems when binding pppoe interface
i use the latest snapshot.
and yes i know the config is in /var/etc thats why i dont get why i see in system.log "/e... Claudius Badmind
01:00 PM Bug #1995: Cannot edit default queue
Applied in changeset commit:473129bbc3ddcb6011f2dd9a736addabe1db8acc. Renato Botelho
01:00 PM Bug #1995 (Feedback): Cannot edit default queue
Applied in changeset commit:20f5fce5e45a7356e53e9f206c88b7a7cd69da81. Renato Botelho
11:53 AM Revision 2dde9989: Fix build list of widgets
Only consider files ending in ".php" to restrict widgets and avoid load
wrong files. It should fix #2761 Renato Botelho
11:31 AM Revision 0ff214f2: Preserve "Idle timeout" parameter on interfaces gui. It fixes a problem pointed out on ticket #2641
Renato Botelho
11:09 AM Bug #2547 (Closed): Pbi manager does not remove old packages after update
When the version is different it should work in the same way since it runs an uninstall for old before install the ne... Renato Botelho
07:30 AM Bug #2547: Pbi manager does not remove old packages after update
I believe that this was all sorted out some time ago. I just tested with the small package "blinkled"" on nanobsd:
i... Phillip Davis
07:00 AM Bug #2547 (Feedback): Pbi manager does not remove old packages after update
Renato Botelho
06:59 AM Bug #2547: Pbi manager does not remove old packages after update
The process of package update consists on uninstall the old version and install the new one. If PBI was left, it was ... Renato Botelho
11:05 AM Bug #1943 (Feedback): PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
Renato Botelho
07:59 AM Bug #2067 (Feedback): pppoe-binding deleted
It probably was already fixed on the changes made during all these months. I checked here and couldn't reproduce.
... Renato Botelho
06:00 AM Bug #2761 (Feedback): Widget detection function can cause duplicate widgets in the Web GUI
Applied in changeset commit:2dde998935cd0bfb4c72ca0512366cf248088ba1. Renato Botelho
05:31 AM Bug #2761 (Closed): Widget detection function can cause duplicate widgets in the Web GUI
The widget detection function in index.php doesn't filter out invalid files. This means that if you patch a widget fi... John Bayly
02:32 AM Bug #2641 (Resolved): mac spoof on wan (pppoe) doesnt spoof
Chris Buechler
02:29 AM Bug #2641: mac spoof on wan (pppoe) doesnt spoof
if thats the case then it works fine, u can close this bug.
one more thing i noticed not related to this issue but j... Bipin Chandra
01:56 AM Bug #2641: mac spoof on wan (pppoe) doesnt spoof
there's no way to revert a spoofed MAC short of rebooting (with PPP or anything else), the original MAC is gone once ... Chris Buechler
01:48 AM Bug #2641: mac spoof on wan (pppoe) doesnt spoof
tried, it works well but some issues. after i enter a spoofed mac id, it gets implemented and pppoe reconnects and us... Bipin Chandra
01:14 AM Revision 87537cf3: Validate passed parameters to smart commands, and the target device. Also escape when used in shell commands even after validation.
Discovered-By: Bernhard Thaler Jim Pingle
01:13 AM Revision 24879bc6: Validate passed parameters to smart commands, and the target device. Also escape when used in shell commands even after validation.
Discovered-By: Bernhard Thaler Jim Pingle

01/16/2013

08:02 PM Revision a8626608: Merge pull request #335 from ExolonDX/a0c0e8aefbac3e3979bac5fbfdecfedfe49cc2d3
Tidy up HTML Colour Names Jim Pingle
07:34 PM Revision a0c0e8ae: Tidy up HTML Colour Names
With XHTML 1.0, the extended colour names are invalid, to make pfSense
as W3C compliant as possible, need to go back ... Colin Fleming
06:53 PM Bug #1943: PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
Is it still happening on recent snapshots? I couldn't reproduce it, every time I re-plugged the wan cabble, pppoe rec... Renato Botelho
05:19 PM Revision 136f3e48: Merge pull request #334 from ExolonDX/master
Tidy up malformed URI warnings Jim Pingle
05:14 PM Revision 2151894c: Tidy up malformed URI warnings
"/usr/local/etc/status.php" has lots of "malformed URI" warnings, this
update tidies these up, adds a missing end tab... Colin Fleming
04:19 PM Bug #2752: Captive Portal Last Activity isn't update anymore --> idle timeout just after login
Next status update:
I reinstalled version 2.0.2 from scratch because I supposed that the update from 2.0.1 to 2.0.2 ... Erik Ruedin
02:55 PM Revision 281cf46f: Forgotten -n option
Ermal LUÇI
02:54 PM Revision cf6dacfd: Merge pull request #333 from bcyrill/missing_return
Missing return statement Ermal LUÇI
02:47 PM Revision d5ac388b: Missing return statement
Cyrill B
02:06 PM Revision 84086442: Set flag setautosrc to replicate parent's mac address automatically when it changes, it's a better solution then dettach it. This should fix #2641
Renato Botelho
01:34 PM Revision 70ae8b9c: Revert "When a interface type is changed, old configuration remains. When moving from static ip to ppp, it kepts the static ip configured on interface, when moving from ppp to static ip, it doesn't kill mpd. Implement interface_clean() to make sure only current configuration is in place"
This reverts commit 9111e5fd88f284bd6f66a24a270af9d9fea1b6c7. Renato Botelho
01:29 PM Revision 76a7d8e4: Merge git pull request 313 from bcyrill with some modifications
Ermal LUÇI
01:25 PM Revision 170a8550: Allow editing an imported CRL, and refresh OpenVPN CRLs when saving. Implements #2652
Jim Pingle
01:21 PM Revision 5cd73772: Use sysctl for this since its better rather than going thorugh dmesg
Ermal LUÇI
01:15 PM Revision 2d6a5d6a: Merge pull request #332 from bcyrill/patch-2
Update etc/rc.update_bogons.sh Ermal LUÇI
01:09 PM Revision 254ebf8b: Fix mac spoof when PPPoE is being used
When PPPoE is set and you change interface's mac address, the netgraph
node kept using the old parent interface mac a... Renato Botelho
12:53 PM Revision c98951ce: Update etc/rc.update_bogons.sh
The used version of sh does not support the fallthrough operator and function keyword. Cyrill B
12:30 PM Bug #2745 (Resolved): vpn_pppoe_edit.php loses settings on input errors
Renato Botelho
11:31 AM Revision 99e991fd: Add option to disable resolution, and drop down to select the gateway that your traceroute should use
Warren Baker
11:22 AM Bug #2759 (Resolved): Lightsquid not working since mod_cgi was removed
Since "this commit":https://github.com/bsdperimeter/pfsense/commit/f7bddb24d5cb98328fae3f83e1719085e099ea6e, the Ligh... Ian Pitcher
09:45 AM Bug #2758 (Resolved): Old configuration remains when changing interface type
When interface type is changed, new type is configured correctly but the old type configuration is not cleaned up.
... Renato Botelho
08:11 AM Revision f28cb1c9: Merge pull request #328 from bcyrill/patch-7
Update usr/local/captiveportal/index.php Ermal LUÇI
08:10 AM Bug #2641: mac spoof on wan (pppoe) doesnt spoof
Applied in changeset commit:84086442a2fa40b0fba12cf00a935144de3c5e71. Renato Botelho
07:20 AM Bug #2641: mac spoof on wan (pppoe) doesnt spoof
Applied in changeset commit:254ebf8b0fb9a8042d154ab2206d7c4f3f16b487. Renato Botelho
07:36 AM Feature #2757 (Resolved): CDP/ISDP/LLDP support.
Hello,
i think that will be good to add support for CDP/ISDP/LLDP discovery protocol into pfsense.
FreeBSD alrea... Zeev Zalessky
05:47 AM Bug #2756: SNMPD problems when binding pppoe interface
Are you seeing this on recent snapshots?
snmpd.conf is located on /var/etc and not on /etc, do you have any custom... Renato Botelho
01:17 AM Feature #2603 (Resolved): Provide support for Package external name, internal name and service name to be different
thanks! Chris Buechler
12:05 AM Revision fad944a9: Update to master
Cyrill B

01/15/2013

11:58 PM Revision 422e9d00: Merge pull request #329 from bcyrill/patch-8
Update etc/inc/captiveportal.inc Ermal LUÇI
11:57 PM Revision ea742716: Merge pull request #330 from bcyrill/patch-9
Add portal_hostname_from_client_ip function Ermal LUÇI
11:18 PM Feature #2603: Provide support for Package external name, internal name and service name to be different
This is completed and working.
The final implementation was to just have the option to specify <internal_name> in ad... Phillip Davis
10:26 PM Revision de132ae3: Add portal_hostname_from_client_ip function
Cyrill B
09:28 PM Revision 87e7fdea: Update etc/inc/captiveportal.inc
Cyrill B
09:12 PM Revision 3b832418: Update usr/local/captiveportal/index.php
Cyrill B
08:02 PM Revision 9111e5fd: When a interface type is changed, old configuration remains. When moving from static ip to ppp, it kepts the static ip configured on interface, when moving from ppp to static ip, it doesn't kill mpd. Implement interface_clean() to make sure only current configuration is in place
Renato Botelho
05:08 PM Revision f26c1f79: Use functions to reduce code duplication; Add function to clear route to the interface IP before starting openvpn, otherwise the process cannot start. Ticket #2712
Jim Pingle
04:30 PM Revision 46830150: Better test if we're running at the cli or in lighty. Also suppress output for the session start if it fails.
Jim Pingle
04:28 PM Revision a74260cb: Better test if we're running at the cli or in lighty. Also suppress output for the session start if it fails.
Jim Pingle
03:13 PM Revision b3435de1: Fixup home/end/ins/del in shell.
Jim Pingle
02:50 PM Bug #2726 (Resolved): deletion of DHCPv6 leases from status_dhcpv6_leases.php does not work
Chris Buechler
02:46 PM Bug #2726: deletion of DHCPv6 leases from status_dhcpv6_leases.php does not work
Yep, that appears to have fixed it. Graeme Bragg
02:22 PM Revision 8a16c550: Revert part of 8e9d126550 since it breaks wifi interfaces at boot time
Renato Botelho
01:51 PM Bug #2756 (Closed): SNMPD problems when binding pppoe interface
snmd stop working after a while
i restart the service and its working fine
All modules loaded
Modules
SNMP ... Claudius Badmind
08:19 AM Revision 05c6f644: Merge pull request #326 from fsSnowboard/master
Modern games added to Traffic Shaper Wizard Ermal LUÇI
01:54 AM Revision 71461d38: fixed spelling
Tyler Turner
01:45 AM Revision a2696314: Merge pull request #325 from bcyrill/patch-5
Remove redundant code fragment Chris Buechler
01:06 AM Revision a3e97754: Remove redundant code fragment
Cyrill B
12:13 AM Revision c15a87f7: Avoid duplicating /32 suffix on 3rd ppp-linkdown parameter (local-ip). It should fix #2700
Renato Botelho

01/14/2013

09:28 PM Revision b2a0a8e9: Something in the LDAP libraries has changed and it no longer likes spaces in the CA filename. Use the refid for the CA filename since it will always be unqiue, and it will never contain any spaces, unlike authname or the CA's descr.
Jim Pingle
09:27 PM Revision 6f165ffc: Something in the LDAP libraries has changed and it no longer likes spaces in the CA filename. Use the refid for the CA filename since it will always be unqiue, and it will never contain any spaces, unlike authname or the CA's descr.
Jim Pingle
08:21 PM Revision 02f3e0bb: Bold and note manifest entries that match the current architecture, and add a note cautioning against a cross-architecture upgrade.
Jim Pingle
08:16 PM Revision e550b82c: Bold and note manifest entries that match the current architecture, and add a note cautioning against a cross-architecture upgrade.
Jim Pingle
06:20 PM Bug #2700 (Feedback): ppp-linkdown uses /32 for $3 which already has /32
Applied in changeset commit:c15a87f7a16ced0c73cc709480cbcab651c78603. Renato Botelho
05:30 PM Bug #2749: gateway groups - when tier 1 gateway fails, routes traffic via gateway set to "never"
Colin Sinclair wrote:
Also, I tried setting the gateway in my LAN firewall rules to a standalone gateway (i.e. not t... Colin Sinclair
04:16 PM Bug #2749: gateway groups - when tier 1 gateway fails, routes traffic via gateway set to "never"
I should have added, all I did was disconnect the OpenVPN client behind the ALIENVPS gateway and then waited for the ... Colin Sinclair
04:13 PM Bug #2749: gateway groups - when tier 1 gateway fails, routes traffic via gateway set to "never"
Here are the relevant parts that changed in each one, thanks!... Colin Sinclair
03:23 PM Revision 9deea99c: Merge pull request #324 from ExolonDX/master
Update PHP shorthand tag Ermal LUÇI
03:20 PM Revision c67eaa25: Merge pull request #323 from lcapriotti/master
Allow manual voucher expiration Ermal LUÇI
03:00 PM Bug #2377: Captive portal fails on empty RADIUS password
Do you still have a copy of your patch? The attached file produces a 404 here.
I recently submitted a pull request... Cyrill B
02:26 PM Bug #2377: Captive portal fails on empty RADIUS password
No updates on this? There seems to be little interest in any changes to RADIUS handling, I keep seeing "why do you ne... Michael Newton
02:50 PM Revision 7061ba0f: fix indent on convert_real_interface_to_friendly_interface_name()
Renato Botelho
02:19 PM Revision be45aa79: Remove some trailing spaces and tabs from EOL
Renato Botelho
01:43 PM Revision 1fe0d1a1: Spelling mistake
Colin Fleming
01:41 PM Revision cde76eba: Spelling mistake
Colin Fleming
01:38 PM Revision 3dacbd7c: Remove a couple of call-time pass-by-reference for interface_ipalias_configure()
Renato Botelho
01:32 PM Revision 8e9d1265: Check if interface really exists on interface_ppps_configure() and interface_configure()
Renato Botelho
01:27 PM Revision a3381369: Update PHP shorthand tag
Standardise all PHP start tags from "<?" to "<?PHP" Colin Fleming
10:24 AM Revision 477c58ce: Add page to allow manual vouchers expiration
Luigi Capriotti
05:50 AM Bug #2641: mac spoof on wan (pppoe) doesnt spoof
yes it worked but as i mentioned in the forum, 2 things need to be done, when u apply the new mac id, the itnerface f... Bipin Chandra
05:06 AM Bug #2641: mac spoof on wan (pppoe) doesnt spoof
You will be able to spoof mac. Please let me know the results of your tests, it worked fine for me. Renato Botelho

01/13/2013

12:11 PM Revision 11d1d64e: Set adaptive.start/adaptive.end to disabled. Also allow them to be customized through system->advanced->firewall. This allows the firewall to be reachable if the state limit is hit but default.
Ermal LUÇI
07:42 AM Bug #2755: PFSense fail to upgrade if using VMXNet cards under Vmware
The way the update system works, I'm not sure there is a lot we can do for this. We can't pre-load the tools package,... Jim Pingle
02:24 AM Bug #2755: PFSense fail to upgrade if using VMXNet cards under Vmware
System Configuration:
ESXi 4.1, ESXi 5.0, VMXNET 2 cards with 2.0.1/2.0.2/2.1 tested. moshe l
02:18 AM Bug #2755 (Closed): PFSense fail to upgrade if using VMXNet cards under Vmware
Hi!
I am trying to upgrade two router VMs.
start upgrade from website, restarted, after restart I need to re-atta... moshe l
03:42 AM Revision 9bf5a970: more games for traffic shaper
Tyler Turner

01/12/2013

09:55 PM Revision 906e513a: fixed spelling mistake
Tyler Turner
08:43 PM Revision 435e715f: added traffic shaper game rules
unknown
09:44 AM Bug #2754 (Duplicate): PPP and 3G: Setting PIN in advanced options not working, stick works after removing SIM PIN
Recently tried to install a 3G Surfstick on pfSense 2.0.2 x64 stable. Didn't work until I removed the PIN from the SI... dont care
12:03 AM Revision 46215352: Merge pull request #321 from jmkizer/patch-1
Update usr/local/www/status_services.php Jim Pingle
12:01 AM Revision a517a108: Update usr/local/www/status_services.php
Missing include which defines functions such as get_shortcut_by_service_name() jmkizer

01/11/2013

06:00 PM Revision d8b8937d: Fix some typos
Jim Pingle
05:45 AM Bug #2753 (Closed): RRD Graphs failes after pfSense upgrade (2.0.1 -> 2.0.2)
After upgrading from 2.0.1-RELEASE to 2.0.2-RELEASE RRD Graph stopped working with the following error message in the... Lasse Gurra
05:11 AM Bug #2752 (Resolved): Captive Portal Last Activity isn't update anymore --> idle timeout just after login
Since version 2.0.2 some of our captive portal users are logged out suddenly after login. In radius accounting i saw ... Erik Ruedin
04:48 AM Bug #2751 (Resolved): IPv6 log for ICMP Router Solicitation identified as ICMP packets
On log page, blocked Router Solicitation are not recognized as ICMPv6 packets.
Protocol is defined as "none". greg Bernard
03:06 AM pfSense Packages Bug #2581: Snort unexpectedly terminates / signal 11 error
Hello, It's not a hardware issue, I tested on several pc-s Intel and AMD processors, It seems to be a rule issue, Whe... Cimpean Andrei

01/10/2013

07:02 PM Revision e6b741a5: Put syslogd into secure mode so no remote log messages are accepted. Sending to a remote syslog server still works with this option.
Jim Pingle
07:01 PM Revision 526102c1: Put syslogd into secure mode so no remote log messages are accepted. Sending to a remote syslog server still works with this option.
Jim Pingle
06:51 PM Revision 43ba3952: Show the hostname if it doesn't match
Jim Pingle
06:51 PM Revision fbc723b1: Show the hostname if it doesn't match
Jim Pingle
05:57 PM Revision c73fec1f: Add a page to perform tcp connection tests to check if a host is responding on a given port.
Jim Pingle
05:27 PM Revision dbce0c2c: Allow empty RADIUS keys
Cyrill B
04:09 PM Revision 78efa294: Merge pull request #319 from bcyrill/patch-4
Update etc/inc/voucher.inc Jim Pingle
04:06 PM Revision 9cdb8eee: Update etc/inc/voucher.inc
Apply to branch 2.0 as well.
Fix array initialization as noted by 'elratt0r' in http://forum.pfsense.org/index.php/to... Cyrill B
04:04 PM Revision 84f394c6: Merge pull request #318 from bcyrill/patch-3
Update etc/inc/voucher.inc Jim Pingle
04:03 PM Revision 5a6359ae: Update etc/inc/voucher.inc
Fix array initialization as noted by 'elratt0r' in http://forum.pfsense.org/index.php/topic,49799.0.html Cyrill B
03:39 PM Bug #2710: Captive Portal radius accounting negative session time
Hello,
Has anybody an idea what could the reason be? I installed the version 2.0.2 and it's worse. This error provok... Erik Ruedin
01:27 PM Revision 051869b7: Do not prefer anymore oldsa and recommend it as a better choice
Ermal LUÇI
12:28 PM Revision 016d1520: Stack the queue graphs. Fixes #2692
Warren Baker
12:20 PM Revision 401feeb3: Stack the queue graphs. Fixes #2692
Warren Baker
09:28 AM Revision ba17b457: Remove some debugging
Warren Baker
09:17 AM Revision ea031bde: Dont pass -o option to view types that dont support it, it causes a segfault. Also make sure that when viewing all states that the correct switch is passed
Warren Baker
09:06 AM Revision 38de3c9d: Rework layout a bit and add number of states to view as an option
Warren Baker
08:54 AM Bug #2641: mac spoof on wan (pppoe) doesnt spoof
with this patch will i be able to spoof mac or is it removed only? Bipin Chandra
06:30 AM Bug #2692: RRD queue graph doe's not stack
Applied in changeset commit:016d152054e982dc18001b79ce7f0fb52b060193. Warren Baker
06:20 AM Bug #2692 (Feedback): RRD queue graph doe's not stack
Applied in changeset commit:401feeb3b2577cbbbeb596d63dbea81f353d0032. Warren Baker
02:11 AM Revision fc8c7084: Merge pull request #316 from rafaelabdo/master
Delete SPDs when an IPSec tunnel is deleted. Fix #2719. Jim Pingle
02:11 AM Revision a2d5b85e: Update zoneinfo to 2012.j
Jim Pingle
02:10 AM Revision f424778c: Update zoneinfo to 2012.j
Jim Pingle

01/09/2013

11:08 PM Revision 3ef033d4: Merge pull request #317 from bcyrill/patch-2
Update usr/local/www/diag_system_pftop.php Jim Pingle
10:54 PM Revision 19f7146a: Update usr/local/www/diag_system_pftop.php
Get rid of localization where it is not desired. Cyrill B
09:00 PM Revision e817ad19: Make values look a little prettier and prevent a potential problem
Warren Baker
08:24 PM Revision c668eaed: Rework the pfTOP page to provide the ability to select the view. Also provide better dropdown labels and remove the annoying onClick submit - its not needed since ajax will handle the post of the new value in the background
Warren Baker
08:10 PM Bug #2719: Deleting IPsec tunnel does not remove SPDs
Applied in changeset commit:fc8c7084e9ae69dce7f000dbf9c459397ea2b04c. Anonymous
08:10 PM Bug #2719 (Feedback): Deleting IPsec tunnel does not remove SPDs
Applied in changeset commit:6fd8526b6b051529642500a38e272d4711bc6a33. Anonymous
06:51 PM Revision f0fb3d44: In the case that no bandwidth limits are configured for queues but PRIQ is been used then rather set a default otherwise a value of 0 is used in the CDEFs for RRD
Warren Baker
05:53 PM Revision 6fd8526b: Delete SPDs when an IPSec tunnel is deleted.
- Add new function to delete SPDs (see 'remove_tunnel_spd_policy($phase1,$phase2)' on vpn.inc)
- Change vpn_ipsec.php... Rafael Abdo
05:34 PM Revision b13a841b: In the case that no bandwidth limits are configured for queues but PRIQ is been used then rather set a default otherwise a value of 0 is used in the CDEFs for RRD
Warren Baker
04:59 PM Revision a6f1f6d1: Fix convert_real_interface_to_friendly_interface_name() when parameter is already a friendly name and interface is using PPPoE. It should fix #2641
Renato Botelho
01:51 PM Revision 5019ff8f: Use get_parent_interface() instead of doing it manually
Renato Botelho
01:39 PM Revision 02b8bfae: Fix get_parent_interface() for ppp interfaces, it was using an unset variable $ppp_if
Renato Botelho
12:39 PM Bug #2749: gateway groups - when tier 1 gateway fails, routes traffic via gateway set to "never"
I can't do that now (not at home) but will post /tmp/rules.debug tonight, thanks! Colin Sinclair
12:36 PM Bug #2749: gateway groups - when tier 1 gateway fails, routes traffic via gateway set to "never"
"Allow default gateway switching" was/is UNchecked. Colin Sinclair
12:35 PM Bug #2749: gateway groups - when tier 1 gateway fails, routes traffic via gateway set to "never"
It would also help to get a copy of /tmp/rules.debug from when it's running normally, and again when the VPN is down ... Jim Pingle
12:29 PM Bug #2749: gateway groups - when tier 1 gateway fails, routes traffic via gateway set to "never"
Hi Jim, thanks for your response, I'll go and check that setting now...
The reason I'm using a gateway group is th... Colin Sinclair
12:24 PM Bug #2749: gateway groups - when tier 1 gateway fails, routes traffic via gateway set to "never"
There may be a bug here but the way you're using gateway groups is unnecessary.
Just choose the actual gateway in ... Jim Pingle
12:18 PM Bug #2749 (Not a Bug): gateway groups - when tier 1 gateway fails, routes traffic via gateway set to "never"
pfSense 2.0.2 running as a VM inside ESXi 5.0
Summary: it seems that a gateway group is not respecting the "never"... Colin Sinclair
12:09 PM Revision 83bab77b: Add physical interface alias for pptp interfaces. It should fix #2663
Renato Botelho
11:00 AM Bug #2641 (Feedback): mac spoof on wan (pppoe) doesnt spoof
Applied in changeset commit:a6f1f6d1ecf48cea4c7865a56682c58c40bf4cde. Renato Botelho
09:14 AM Bug #2641: mac spoof on wan (pppoe) doesnt spoof
this was discussed some time back on this link http://forum.pfsense.org/index.php/topic,53940.0.html Bipin Chandra
06:10 AM Bug #2663 (Feedback): PPTP on WAN Gets blocked via default deny rule.
Applied in changeset commit:83bab77be786e86a72acecc9fb84adb3986b59a5. Renato Botelho
05:06 AM Revision 610f3ff6: use Sunday rather than Monday for weekly bogon update
Chris Buechler
03:57 AM Bug #2748 (Closed): Route53 DynDNS Updater does not work
Hi,
i use the current nighlies, and the AWS Route54 DynDNS Service does not update the IP on AWS.
I have several Do... Tim Buchwaldt

01/08/2013

09:53 PM Revision 7a5e4eaa: Merge pull request #315 from bcyrill/patch-2
Update etc/rc.newwanipv6 Jim Pingle
09:40 PM Revision d36fd7c0: Update etc/rc.newwanipv6
Cyrill B
05:34 PM Revision 7807664d: List VLAN interfaces on Interfaces -> (assign) -> PPPs edit. It should fix #1767
Renato Botelho
11:40 AM Bug #1767 (Feedback): Unable to modify pppoe interface which is linked to a vlan via WebGUI
Applied in changeset commit:7807664def0a95554b4a5207638c6b447fc71b4a. Renato Botelho
10:14 AM Revision d9ce908f: Merge pull request #314 from phil-davis/master
Display gateways with matching IP protocol in Gateways list Chris Buechler
09:58 AM Revision 3042761a: Merge pull request #310 from bcyrill/bogons_patch1
Allow changing of bogons update frequency Chris Buechler
09:47 AM Revision 889cbaef: Display gateways with matching IP protocol in Gateways list
Some gateways do not have traditional addresses hard-coded into them - e.g. for OpenVPN dynamic gateways are created ... Phil Davis
06:00 AM Todo #2485 (Feedback): Add Status > Services entry for radvd if RA is enabled
Renato Botelho

01/07/2013

10:48 PM Bug #2614: Scheduler bug - fires off on date not matched correctly
This should have been fixed by https://github.com/bsdperimeter/pfsense/commit/50b3fc5a0e1fb99747c325f6f5746f47d01e4f0... Phillip Davis
12:45 PM Bug #2614 (Feedback): Scheduler bug - fires off on date not matched correctly
Could you please confirm the issue persists on recent snapshots? Renato Botelho
08:42 PM Revision 3cde94cf: Avoid 'Cannot allocate memory' errors
Cyrill B
08:09 PM Revision 202699ad: Interface assignment wrongly changing:
When WAN is set to PPPoE and user set other interfaces IP address using
console, it wrongly change the interface assi... Renato Botelho
07:44 PM Revision 1b0074d5: Interface assignment wrongly changing:
When WAN is set to PPPoE and user set other interfaces IP address using
console, it wrongly change the interface assi... Renato Botelho
06:10 PM Revision f9a109a3: Make option 11 kill php and lighty like it does on HEAD
Jim Pingle
05:18 PM pfSense Packages Bug #2747 (Resolved): Snort ignores memcap settings
Snort is giving off many of these notifications in the system log:
*@snort[3825]: S5: Pruned 1 sessions from cache... Angel Torres
04:27 PM Revision 7c05f800: Add support for compressed bogon files
Cyrill B
03:55 PM Revision 5c94aa12: While I'm here, allow selecting "Localhost" as an OpenVPN interface.
Jim Pingle
03:47 PM Revision 489f484c: Unbreak selecting "any" for OpenVPN client/server interface.
Jim Pingle
02:53 PM Revision 92276df6: Add back end support for custom bogon urls
Cyrill B
02:10 PM Bug #2074: Changing interface IP changes interface assignment as well
Applied in changeset commit:202699ad0153ab3e57c3792c3d1493e4a7276e03. Renato Botelho
01:50 PM Bug #2074 (Feedback): Changing interface IP changes interface assignment as well
Applied in changeset commit:1b0074d5d139e71e1540230c3d2e36d71ccaf550. Renato Botelho
01:17 PM Bug #2074 (New): Changing interface IP changes interface assignment as well
Renato Botelho
01:05 PM Revision b94dd7d3: Retain user configured values for all fields when a validation error occours. It should fix #2745
Renato Botelho
12:15 PM Revision 5f993c44: Fix typo
Renato Botelho
08:04 AM Bug #2746 (Resolved): IPv6 IPSEC shows down but is actually not...
Hi
I just setup some IPv6 site-to-site ipsec vpns.
Good news: They work
Not so good news: In the IPSEC statu... Andre Keller
07:10 AM Bug #2745 (Feedback): vpn_pppoe_edit.php loses settings on input errors
Applied in changeset commit:b94dd7d3427f5ffbd11cf2f270ea3964ac9b7da9. Renato Botelho
03:18 AM Revision 96e9db4c: Merge pull request #311 from bcyrill/ipv6_newwanip
Partly revert commit 4c45712f Chris Buechler

01/06/2013

11:53 PM Revision 04aac151: Partly revert commit 4c45712f
Cyrill B
10:59 PM Revision 6b4480dc: Add bogons update frequency selection
Cyrill B
10:58 PM Revision 149ed85e: Fix spelling
Cyrill B
05:42 PM Bug #2063 (Resolved): PHP Memory Usage too high for 128MB RAM Systems (like ALIX)
this is much improved after a number of 2.1 changes. Chris Buechler
04:17 PM Revision 6aab5abe: Merge pull request #309 from phil-davis/master
Prevent "no such file" message when pid file does not exist Jim Pingle
03:22 PM Revision c4594e36: Prevent no such file message when pid file does not exist
Phil Davis
09:24 AM Revision 16d9ad13: Update the GUI page for the DHCP6 server, add a if statement that prevents throwing range errors on interface that have no static IPv6 address.
It is entirely valid to operate a DHCP6 server just for prefix delegation, but ISC doesn't appear to allow it yet. Seth Mos
09:20 AM Revision e9ab2ddb: Add some backend support for writing out a config so that the dhcp6 server can listen on the required MPD pppoe server interfaces.
Also nuke the failover entries, these don't exist for IPv6, this is handled by 2 servers and differing priorities Seth Mos

01/05/2013

06:36 PM Revision 5dbd619f: Add the PPPoE Server IP addresses to the locally configured addresses, this prevents the HTTP_REFERER check from triggering.
Seth Mos
05:03 PM Revision 96568521: Removing gettext from strins that should not be translated
Vinícius Coque
05:02 PM Revision df0207ce: Since php_sapi_name() is useless in pfSense test if argc has been registered or not to avoid warnings on bootup
Ermal LUÇI
04:59 PM Revision 9d584d5d: Put protection for session functions even here
Ermal LUÇI
04:58 PM Revision e294aded: Make the logic a bit more robust and readble
Ermal LUÇI
04:55 PM Revision 184847b5: While here try to hint the user from _ENV['USER'] if no session info
Ermal LUÇI
04:53 PM Revision cf0dae69: Since php_sapi_name() is useless in pfSense test if argc has been registered or not to avoid warnings on bootup
Ermal LUÇI
04:40 PM Revision 7ba99a6c: Make a bit more sense and consistent with when apc is enabled
Ermal LUÇI
04:38 PM Revision 9f1e3d64: Sync rc.php_init_setup with master
Ermal LUÇI
04:16 PM Revision 2b6f7508: Move up the syslog daemon so that we get a larger part of the bootup sequence.
Seth Mos
04:02 PM Revision 8f833c7c: Make sure the dhcp6c client always launches with the correct real interface argument.
Make sure we do a filter_configure_sync() here as otherwise the existing firewall rules (during boot) would block the... Seth Mos
03:59 PM Revision dcb41555: Do not skip displaying outbound NAT rules with no interface or an invalid interface; it interferes with editing/deleting the skipped rule itself or rules after it.
Erik Fonnesbeck
03:47 PM Revision d5d6c0ad: Revert "Use get_Cofnigured_interface_with_descr() here since that's the purpose"
This reverts commit 0c8e9f0c26b29f57faa2ccef9a559774103fee79. Erik Fonnesbeck
03:12 PM Revision 4c45712f: Update the rc.newwanipv6 with patches from the forum at
http://forum.pfsense.org/index.php/topic,56880.msg305769.html#msg305769
Still need to verify why this does not always... Seth Mos
03:02 PM Revision d53a9a51: The ISC client was far worse then the WIDE client was, back to plan A
Revert "Merge changes required for using the ISC dhclient in pfSense with prefix delegation. This should hopefully be... Seth Mos
02:51 PM Revision 0c8e9f0c: Use get_Cofnigured_interface_with_descr() here since that's the purpose
Ermal LUÇI
02:13 PM Revision e99ba2d6: Fix outbound NAT rules when interface is deleted:
- When delete interface, do not touch outbound NAT rules
- Skip outbound NAT rules when interface doesn't exist
- Bum... Renato Botelho
01:42 PM Revision aca65de5: Cleanup unused pages that was supposed for upload_progress bars
Ermal LUÇI
01:39 PM Revision b8090487: Add to obsolete files as well
Ermal LUÇI
01:35 PM Revision f2d7436a: Add to obsolete files as well
Ermal LUÇI
01:34 PM Revision 65ce97d2: Remove diag_backup.js progress.php upload_progress.php since they are not used since long time
Ermal LUÇI
01:22 PM Revision df53d679: Remove upload_progress_meter references not used
Ermal LUÇI
08:20 AM Bug #2338 (Feedback): outbound NAT rules rewrite themselves if active interface is deleted
Applied in changeset commit:e99ba2d66e915904626fd90ecc87711169189bdc. Renato Botelho
04:34 AM Bug #2745 (Resolved): vpn_pppoe_edit.php loses settings on input errors
When you save the page on vpn_pppoe_edit.php with an input validation error, upon reloading the page it loses all the... Chris Buechler

01/04/2013

10:15 PM Revision 9ec91e36: Merge: Just check the file_exists let pkill decide if its a vaild file or not.
Ermal LUÇI
10:14 PM Revision d9cdb363: Merge improvements to filterdns daemon
Ermal LUÇI
05:38 PM Revision 5034a7f5: Add this fix here too for upnp, set the bits when specifying the listening IP.
Jim Pingle
05:37 PM Revision a2b1d1e8: This seems to break upnp for IPv4 in other ways, and we have since disabled IPv6 in the daemon while compiling anyhow. Revert "In order for miniupnpd to latch onto IPv6, we just need to give the interface name here, not the subnet. The daemon is smart enough to latch onto the right subnet(s) here anyhow."
This reverts commit bc8a1938f5c1797213bf849f2bdb88bca72d5089. Jim Pingle
04:26 PM Revision 5b66196d: Remove cmd_chain.inc leftover
Ermal LUÇI
01:34 PM Revision d733ee9f: This is needed since preload is now gone
Warren Baker
01:32 PM Revision d0fc4479: This is needed since preload is now gone
Warren Baker
11:33 AM Bug #729: if_bridge unpredictable filter interface selection
Continuing discussion of https://redmine.pfsense.org/issues/2744
Odd that it's just appeared now on an established... Phil Lavin
11:24 AM Bug #2744: ARP related problem since upgrading
Not sure, but it's a known issue. Continue discussion on the other bug report for best results. Jim Pingle
11:21 AM Bug #2744: ARP related problem since upgrading
Actually, having reviewed that, it's quite old. Why would this issue just come to light now when the setup has worked... Phil Lavin
11:16 AM Bug #2744: ARP related problem since upgrading
That's annoying :P
Let me know if there's any debug you need from my side. I'll watch the original. Phil Lavin
11:11 AM Bug #2744 (Rejected): ARP related problem since upgrading
Most likely a duplicate of #729 Jim Pingle
11:02 AM Bug #2744 (Rejected): ARP related problem since upgrading
I upgraded, by request of another issue, to the latest snapshot yesterday. We've had a strange issue arise.
The se... Phil Lavin
10:55 AM Revision e384f16e: If less than 78 RAM just do not let php spawn another process
Ermal LUÇI
10:26 AM Revision f89afb47: Get back to trim() and strip / from left/right but when redirecting properly create the redirurl var
Ermal LUÇI
10:24 AM Revision 237c6ef2: Get back to trim() and strip / from left/right but when redirecting properly create the redirurl var
Ermal LUÇI
10:00 AM Revision 70e454e1: Slight code re-organization
Ermal LUÇI
09:57 AM Revision 7bd926d5: Another fix for issues reported on 2.0.2 with php processes dying. Do not use same path for system webGUI and CP webGUI of the php unix socket. This will cause the later started one, usually CP to exit when it attempts to bind/listen on the same path as previous process! Strange this has not been an issue beforegit diff!
Ermal LUÇI
09:52 AM Revision e3217701: Use proper var here for calculation
Ermal LUÇI
09:51 AM Revision a96f2d3d: Remove to parameters from system_generate_lighty_config that are unused and do a better job at tuning started php processes to not use less/more than needed. This also avoids DoS the system with php processes
Ermal LUÇI
09:19 AM Revision c21b10d4: Remove to parameters from system_generate_lighty_config that are unused and do a better job at tuning started php processes to not use less/more than needed. This also avoids DoS the system with php processes
Ermal LUÇI
09:04 AM Revision 56ef4d26: Always use fastcgi since the requirement is the same anyhow
Ermal LUÇI
08:53 AM Revision 197e128e: Obsolete /etc/inc/cmd_chain.inc
Ermal LUÇI
08:51 AM Revision 0b85e97d: Obsolete /etc/inc/cmd_chain.inc
Ermal LUÇI
08:51 AM Revision 5d128840: GC cmd_chain.inc it never found uses since pfSense module got used more. Also fix the problem with pfsync on bootup waiting 30 seconds since cmd chain was executed after and pfsync was never brought up to compleete the sync.
Ermal LUÇI
08:45 AM Revision 01abfd21: Add exec_raw.php to obsolete files.
Ermal LUÇI
08:45 AM Revision f16a2be7: Remove preload.php even here now that is possible to avoid issues during startup of lighty
Ermal LUÇI
08:43 AM Revision 59d76570: Always commit the session fast to allow other consumers to proceed to their requests. This unbreaks now the lock up the GUI had allowing only one action from same source per time. Now even if you run a command that blocks indefinitely for example the GUI want lock anymore but allow you to proceed to other actions. Manual cherry-pick of 4111fcf5307829b19b95fbb499addddff46264af
Ermal LUÇI
08:34 AM Revision 91117d33: Remove unused function
Ermal LUÇI
04:23 AM Revision 23090547: Welcoming in 2013
Chris Buechler
04:23 AM Revision fed246df: Welcoming in 2013
Chris Buechler

01/03/2013

10:50 PM Revision 4111fcf5: Always commit the session fast to allow other consumers to proceed to their requests. This unbreaks now the lock up the GUI had allowing only one action from same source per time. Now even if you run a command that blocks indefinitely for example the GUI want lock anymore but allow you to proceed to other actions
Ermal LUÇI
07:38 PM Revision 24b78825: Merge pull request #307 from kernelpaniclite/dns.he.net
dynamic dns update url for dns.he.net fixed Jim Pingle
07:29 PM Revision 16fea0ce: dynamic dns update url for dns.he.net fixed
Added curl option to use IPv4
Updated url schema Cedric Ohle
05:14 PM Revision 18749fa5: Merge pull request #306 from phil-davis/RELENG_2_0
Fix out packet count reporting Jim Pingle
04:08 PM Revision 1d6c4cbf: Fix out packet count reporting
This is a little tiny fix, for the similar issue that was fixed in 2.1 a month ago (the 2.1 fix had a mix of v4 and v... Phil Davis
03:22 PM Revision d79e9c71: Remove obsoleted file as well
Ermal LUÇI
02:57 PM Revision a4fc6ec7: Ticket #2063 Do not enable apc on less than 135MB ram
Ermal LUÇI
02:29 PM Revision 8a0f6ca1: Be a little smarter about the default kernel in rare cases where we cannot determine what was in use.
Jim Pingle
02:29 PM Revision 82bce0a1: Be a little smarter about the default kernel in rare cases where we cannot determine what was in use.
Jim Pingle
02:25 PM Revision 748c7b85: Always make sure php has its own process manager to make lighty happy
Ermal LUÇI
02:24 PM Revision eef77bfe: Always make sure php has its own process manager to make lighty happy
Ermal LUÇI
02:11 PM Feature #290: Add Multi-WAN awareness to UPnP
There is a MULTIPLE_EXTERNAL_IP option in miniupnpd that allows you to specify multiple external IP addresses, and th... Jim Pingle
02:04 PM Feature #2743 (Resolved): Add external interface selector to UPnP Settings
Somewhat related to #290 but different enough to warrant a separate ticket since this doesn't necessarily depend on U... Jim Pingle
01:44 PM Revision e83eaf36: Pass -S to tcpdump to avoid an increase in memory consumption over time.
Jim Pingle
01:40 PM Revision ab350c0f: Pass -S to tcpdump to avoid an increase in memory consumption over time.
Jim Pingle
01:35 PM Revision 4a1a432b: Merge pull request #305 from phil-davis/RELENG_2_0
Minimise rewriting of /etc/gettytab Jim Pingle
01:20 PM Revision 8bc93c1a: Bump this, since it seems inevitable at this point.
Jim Pingle
01:16 PM Bug #2495 (Closed): pfsense doesn't seem to know what its WAN IP is
Submitter reported problem is not happening on recent snapshots. Closing it. Renato Botelho
01:09 PM Bug #2495: pfsense doesn't seem to know what its WAN IP is
All is well with a /26 subnet now. Definitely rebooted it a bunch of times since reporting this bug both for upgrades... Phil Lavin
12:38 PM Bug #2495: pfsense doesn't seem to know what its WAN IP is
ok, check the ifconfig output again after the upgrade.
Somehow the IPs are ending up on the interface in the wrong... Jim Pingle
12:11 PM Bug #2495: pfsense doesn't seem to know what its WAN IP is
Note the above is with a subnet of /25. Seems most people have pissed off home - I'll run the update now and let you ... Phil Lavin
12:10 PM Bug #2495: pfsense doesn't seem to know what its WAN IP is
[2.1-BETA0][root@prop-router-rugby.local]/root(1): ifconfig -a
msk0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> metric ... Phil Lavin
11:58 AM Bug #2495: pfsense doesn't seem to know what its WAN IP is
In the meantime, please show the output of:... Jim Pingle
11:51 AM Bug #2495: pfsense doesn't seem to know what its WAN IP is
It's a production router - I'll try to update when most of the populous have gone home and I'll let you know.
Phil Phil Lavin
10:54 AM Bug #2495 (Feedback): pfsense doesn't seem to know what its WAN IP is
I couldn't reproduce it on recent 2.1-BETA1 snapshot. Could you please confirm if it's still happening? Renato Botelho
01:08 PM Revision 2ba3ea05: Avoid duplicate log entries for facilities higher or equal daemon.info. It should fix #2626
Renato Botelho
12:55 PM Revision d99f9393: Minimise rewriting of /etc/gettytab
See forum http://forum.pfsense.org/index.php/topic,57325.0.html
Avoid possible problems with having a partial /etc/ge... Phil Davis
10:27 AM Revision 860978f2: Make mod_fastcgi last to have url.rewrite work properly
Ermal LUÇI
10:25 AM Revision 17098641: Make is_pid_running function return more conisten results by using isvalidpid
Ermal LUÇI
10:24 AM Revision e3c4516b: Use rtrim to avoid issues
Ermal LUÇI
10:22 AM Revision f7bddb24: Simplify lighty config and tune mod_evasive as needed. Mostly a cherry-pick from RELENG_2_0 changes
Ermal LUÇI
08:26 AM Revision 081320a4: Move to varrun_path for consistency
Ermal LUÇI
08:26 AM Revision 186be7fe: Move to varrun_path for consistency
Ermal LUÇI
07:33 AM Revision f86dafa9: Merge pull request #303 from phil-davis/master
Minimise rewriting of /etc/gettytab Warren Baker
07:10 AM Bug #2626 (Feedback): Patch included: syslog.conf allows duplicate logging of daemon.info messages (e.g. from snort or dnsmasq)
Applied in changeset commit:2ba3ea05709b63127bc2f7856635292f7bc10623. Renato Botelho
07:02 AM Revision adc0f2fe: Minimise rewriting of /etc/gettytab
See forum http://forum.pfsense.org/index.php/topic,57325.0.html
Avoid possible problems with having a partial /etc/ge... Phil Davis
05:03 AM Bug #2732: Captiveportal Can't Show User Status
Thank you, with the assistance of the management team, the problem has been resolved
Happy New Year!
ver. 2013/1/2 X.Z. Lin

01/02/2013

10:59 PM pfSense Packages Feature #2646: openvpn-client-export UAC prompt solution
Someone has already added code to the export package for OpenVPNManager as an option, which does the same thing that ... Jim Pingle
05:42 PM pfSense Packages Feature #2646: openvpn-client-export UAC prompt solution
Stumbled upon this one:
http://openvpn-mi-gui.inside-security.de/
> Description
> OpenVPN MI GUI is a Windows ... Dim Hatz
06:43 PM Revision 5d6495a7: Tell filterdns to reload the config rather than restart if its running
Ermal LUÇI
05:21 PM Revision d3647381: Make is_pid_running function return more conisten results by using isvalidpid
Ermal LUÇI
05:14 PM Revision 192d8931: Enable mod_evasive if needed for CP
Ermal LUÇI
05:03 PM Revision 6f0d237e: Simpligy lighty config and send all lighty logs to syslog rather to a file not readble by anything
Ermal LUÇI
04:28 PM Bug #2732 (Resolved): Captiveportal Can't Show User Status
Chris Buechler
09:25 AM Bug #2732: Captiveportal Can't Show User Status
Fixed in commit:1974c2d6bfc053efc6e13f1c39e40faef2b2d9b5 Cyrill B
04:28 PM pfSense Packages Bug #2742 (Rejected): freeradius2 let u add users with username/passwd fields empty
Chris Buechler
12:51 PM pfSense Packages Bug #2742: freeradius2 let u add users with username/passwd fields empty
It's not a bug - it's a feature ;-)
I disabled the check that username/password fields are neccessary to create a ... Alexander Wilke
02:09 AM pfSense Packages Bug #2742 (Rejected): freeradius2 let u add users with username/passwd fields empty
Hi.
I'm working with FreeRadius2/CP and I had seen than the GUI let me add users with username/passwd fields e... Peter Moreno
03:38 PM Revision aa32c88d: USe rtrim here as that it the meaning. This should unbreak the issues on 2.0.2 with CP
Ermal LUÇI
12:12 PM Bug #2063 (Feedback): PHP Memory Usage too high for 128MB RAM Systems (like ALIX)
Could you please confirm it fixed the issue? Renato Botelho
08:25 AM Bug #2722 (Resolved): Revision 4c6ede42 broke licenses.php
Jim Pingle
08:22 AM Bug #2722: Revision 4c6ede42 broke licenses.php
Error is gone after update, THNX. Rob J. Epping

01/01/2013

08:07 PM Bug #2739 (Resolved): LiveCD - "ataidle: error opening /dev/ad?"
Chris Buechler
11:08 AM Bug #2739: LiveCD - "ataidle: error opening /dev/ad?"
Works fine. Thanks! Daniel Berlin
11:32 AM Bug #2738: /usr/local/bin/beep: not found
There have been no fresh builds of that branch to test from our builders. The binary will be there when we make one. ... Jim Pingle
11:06 AM Bug #2738: /usr/local/bin/beep: not found
Nope, sorry, it's not fixed.
I tried a fresh rebuild of RELENG_2_0, but still beep ist missing! Daniel Berlin

12/31/2012

03:41 PM Revision b08e147f: Make sure a device actually exists before trying to act on it. Fixes #2739
Jim Pingle
03:41 PM Revision 5486c48c: Make sure a device actually exists before trying to act on it. Fixes #2739
Jim Pingle
01:16 PM Revision 0e39c303: Merge pull request #302 from phil-davis/master
Select a valid interface when WAN is disabled Ermal LUÇI
12:14 PM Revision 76165eac: Select default interface when WAN is disabled
If WAN is disabled, then the Traffic Graph does not default to a valid interface when it first displays. This fix sel... Phil Davis
09:40 AM Bug #2739: LiveCD - "ataidle: error opening /dev/ad?"
Applied in changeset commit:b08e147f433b689870206a1b98f91d716bd13c9a. Jim Pingle
09:40 AM Bug #2739 (Feedback): LiveCD - "ataidle: error opening /dev/ad?"
Applied in changeset commit:5486c48c370d60126666ad49ecb94400f91ea2e5. Jim Pingle
09:24 AM Feature #1831: Captive portal IPv6 support
The required pfPorts patches were missing in the above archive. Cyrill B
08:59 AM Feature #1831: Captive portal IPv6 support
Attached is the zip file with the required patches. All files except for the patch captiveportal.inc.diff, which appl... Cyrill B

12/30/2012

11:25 PM Revision 2e4c921f: Merge pull request #270 from CarpeNoctem/CarpeNoctem
Added 'Copy my MAC address' to captive portal Pass-through MAC form, as ... Chris Buechler
11:22 PM Revision e9189747: Merge pull request #293 from bcyrill/patch-11
Add some unobtrusive IPv6 changes to CP Chris Buechler
11:22 PM Revision 41085ea8: Merge pull request #294 from bcyrill/patch-12
Fix: Invert if condition Chris Buechler
11:22 PM Revision 8301cc5f: Merge pull request #298 from bcyrill/cp-sqlite
Various fixes to removal of pipes Chris Buechler
11:21 PM Revision 1d2c5de8: Merge pull request #300 from bcyrill/cp_patch2
Fix: Captive Portal status widget Chris Buechler
11:21 PM Revision 2455ebd6: Merge pull request #301 from bcyrill/cp_patch3
Fix: Voucher Sync Chris Buechler
11:20 PM Revision 9d2a2c4d: Merge pull request #299 from bcyrill/cp_patch1
Fix: Disconnect CP client Chris Buechler
05:21 PM Feature #2630 (Rejected): Add SSHD logging on a new SSHD tab under STATUS > SYSTEM LOG
SSH isn't verbose enough in any configuration that should be deployed in the real world to justify a logging tab. Chris Buechler
05:12 PM Feature #1831: Captive portal IPv6 support
Go ahead and attach it here for now, though that will almost certainly require some updating to merge cleanly post-2.... Chris Buechler
08:47 AM Feature #1831: Captive portal IPv6 support
I assume there won't be any major changes anymore to 2.1 thus this feature will be integrated in 2.2? So I can either... Cyrill B
04:56 PM Bug #2738: /usr/local/bin/beep: not found
Could you provide the latest snapshot?! ... I'll give it a try then. Daniel Berlin
08:54 AM Bug #2738 (Resolved): /usr/local/bin/beep: not found
Somehow that binary was missing just on the amd64 builder for 2.0.x. Rebuilt and it's fine now.
There isn't going ... Jim Pingle
04:41 AM Bug #2738 (Resolved): /usr/local/bin/beep: not found
Hi,
when booting the LiveCD I get the above error (and no beep)...
See screenshot.
Regards, Daniel Daniel Berlin
04:27 PM Bug #2737: excessive filterdns processes in some circumstance(s)
A small fix to consider while looking at the issue of multiple filterdns processes, is that the scripts invoking filt... Dim Hatz
11:57 AM Bug #2740 (Feedback): 2.0.2 hangs on boot (LiveCD)
I can't reproduce this. Please post on the forum for help diagnosing the issue.
Usually a lack of DNS might cause a ... Jim Pingle
11:54 AM Bug #2740 (Rejected): 2.0.2 hangs on boot (LiveCD)
Hi,
the latest version hangs on boot while loading the the NTP client:
"Starting NTP time client..."
-> the "d... Daniel Berlin
04:48 AM Bug #2739 (Resolved): LiveCD - "ataidle: error opening /dev/ad?"
Hi,
the above error appears when booting the LiveCD (without any HD installed).
See screenshot.
Regards, Daniel Daniel Berlin

12/29/2012

07:26 PM Revision c2a6cda0: rename for clarification
Cyrill B
07:25 PM Revision 0fe77f8e: serialize dbent array
Cyrill B
07:14 PM Revision 075711db: Fix: Voucher Sync
Cyrill B
07:02 PM Revision 7eed2174: Fix: Captive Portal status widget
Cyrill B
06:41 PM Revision 5038fb53: Fix: Disconnect CP client
Cyrill B
02:22 PM Revision be0a33ef: Fix: Remove entries from captiveportal DB
Cyrill B
02:19 PM Revision f92595dc: Fix: Check for the existence of the rules file
Cyrill B
12:39 AM Revision 0754d9b7: Merge pull request #296 from bcyrill/patch-14
Fix: SQlite in CP Chris Buechler
12:38 AM Revision 9d81dcdf: Merge pull request #297 from bcyrill/patch-15
Fix: last activity on CP status Chris Buechler

12/28/2012

11:48 PM Revision 339688b2: Fix: last activity on CP status
Cyrill B
11:13 PM Revision 1974c2d6: Fix: SQlite in CP
Cyrill B
10:08 PM Revision 894f18ef: Merge pull request #286 from N0YB/bogonsv6_comments
pfctl is comment aware (#) Chris Buechler
09:36 PM Revision 08d93848: Fix: Invert if condition
Cyrill B
09:14 PM Revision 60884727: Determine subnet from address family
Cyrill B
09:12 PM Revision 45bef774: Get IPv6 address for IPv6 clients
Cyrill B
09:09 PM Revision 277ed6cb: Add [] to IPv6 address
Cyrill B
06:52 PM Revision fd58d121: Merge pull request #291 from framer99/patch-1
Update usr/local/www/services_dhcp.php Jim Pingle
06:49 PM Revision 83a9a1d2: Update usr/local/www/services_dhcp.php
Inform user how the Primary/Secondary DHCPd process is determined in a failover pair so they don't end up with two se... framer99
02:16 PM Revision 43affef2: Use file_put_contents for simplicity and concistency
Ermal LUÇI
02:14 PM Revision ac94ebd8: Just check the file_exists let pkill decide if its a vaild file or not.
Ermal LUÇI
01:51 PM Revision 84b32407: GC cmd_chain.inc it never found uses since pfSense module got used more. Also fix the problem with pfsync on bootup waiting 30 seconds since cmd chain was executed after and pfsync was never brought up to compleete the sync.
Ermal LUÇI
10:12 AM pfSense Packages Feature #2735: Improvement to Snort Rules Update Process
Added a corrected *snort_check_for_rule_updates.php* file to fix a small bug in the status text message where the cur... Bill Meeks
08:42 AM Feature #1831: Captive portal IPv6 support
IPv6 here we are! There's still some cleanup to be done but other than that it is *working*.
Still todo:
- add i... Cyrill B

12/27/2012

11:42 PM Bug #2737 (Resolved): excessive filterdns processes in some circumstance(s)
Some people are seeing huge numbers of filterdns processes. For instance:
http://forum.pfsense.org/index.php/topi... Chris Buechler
05:27 PM pfSense Packages Feature #2736 (Resolved): Additional configuration options for SMTP, POP3 and IMAP Pre-Processors in snort.conf
The attached *snort.inc* file contains some changes to the section that generates the snort.conf file for a newly add... Bill Meeks
05:21 PM pfSense Packages Feature #2735 (Resolved): Improvement to Snort Rules Update Process
The current rules update process in the Snort package has some shortcomings. In particular, when using both the Emer... Bill Meeks
05:18 PM Revision fee50f4d: Self-test should be hypenated, and the T should be lower case.
Jim Pingle
04:17 PM Revision 891e0d11: Correct tcp flags explanation code for CWR (should be W, not C)
Jim Pingle
11:29 AM Bug #2734 (Closed): Mobile IPsec AES128 fails with glxsb on Alix, iOS client
+Hardware:+ Alix 2D3, latest BIOS. I attach the output of dmesg.
+pfSense:+ v2.0.2 (also fails with 2.0.1 and some... Jorge Albarenque
02:27 AM Revision 4c2ca7ea: Merge pull request #278 from phil-davis/master
Support different package internal name - feature #2603 Chris Buechler

12/26/2012

04:29 PM Revision 20df6ed7: Fix DHCPv6 lease deletion. Fixes #2726
Jim Pingle
03:16 PM Revision 0d1b26ee: Static mappings are not pool-specific. They exist independent of any pool, and you can't actually add static mappings "inside" a pool range. So disable the static map list/controls if editing a pool, since they are "global" for an interface. Fixes #2370.
Jim Pingle
03:09 PM Revision ee1fb205: Add description to additional DHCP pools. Implements #2733
Jim Pingle
02:24 PM Feature #1831: Captive portal IPv6 support
Those patches make the required changes to the php53-pfSense-module and the filterdns ports. Cyrill B
06:34 AM Feature #1831: Captive portal IPv6 support
I'll just add this here so that it doesn't get lost:
Add IPv6 support to 'pfSense_ip_to_mac' function https://github... Cyrill B
11:10 AM Revision c7421820: Merge pull request #289 from phildd/master
Handle null parameter to services_dyndns_configure Ermal LUÇI
11:08 AM Revision fca92751: Merge pull request #288 from bcyrill/patch-1
Fix comment Ermal LUÇI
10:55 AM Bug #2732: Captiveportal Can't Show User Status
pfSense-LiveCD-2.1-BETA1-i386-20121226-0706 still have the same problem! X.Z. Lin
10:30 AM Bug #2726 (Feedback): deletion of DHCPv6 leases from status_dhcpv6_leases.php does not work
Applied in changeset commit:20df6ed79b44807f2f556b821c125c4ca6bf3127. Jim Pingle
09:33 AM Bug #2730 (Resolved): Cannot add a static DHCP mapping within an Additional DHCP Pool
Should be "fixed" by commit:0d1b26ee (I put the wrong ticket ID on the commit)
Static mappings are not pool-specif... Jim Pingle
09:20 AM Feature #2733 (Feedback): Add in a "description" field for additional DHCP pools
Applied in changeset commit:ee1fb205d3b704d2c5af5fc7bc0c93bdb67d0271. Jim Pingle
03:24 AM Feature #2733 (Resolved): Add in a "description" field for additional DHCP pools
Would it be possible to add in a description field to the "additional pools" section under the DHCP4/6 server service... Brett Cooper
08:52 AM Revision 786ff5eb: Handle null parameter to services_dyndns_configure
When service_dyndns_configure is called with a null parameter, it should check/update the dyndns state of all interfa... phildd
01:57 AM Revision ddd69ea9: Fix comment
Cyrill B
 

Also available in: Atom