Activity
From 02/11/2013 to 03/12/2013
03/12/2013
-
08:50 PM Feature #2858: Do not route rules to default gateway when its own gateway is down
- Ah my apologies... Its working as you have written..
Silly me.
I'm assuming that I should now be placing a DEN... -
- It appears the rules related to gateway OVPNC1 drop when the VPN is stopped/failed.
-
07:36 PM Feature #2858: Do not route rules to default gateway when its own gateway is down
- Could you show me /tmp/rules.debug in 2 different moments, when OVPN is up and when it's down?
-
- Wow thanks for working to add this!
I've applied the patch to pfSense-2.1-BETA1-amd64-20130312-0847 and it does no... -
- Applied in changeset commit:a1f735b31c8f7f0cca0ebc5a7153cd06cdf4482e.
-
- It's the expected behaviour today, so change it to a Feature and adjust Subject as well
-
07:04 PM Bug #2871 (Rejected): Non returning call : pfSense_get_modem_devices() called by interfaces_ppps_edit.php?id=1
- Duplicate of #2433
-
05:55 PM Bug #2871 (Rejected): Non returning call : pfSense_get_modem_devices() called by interfaces_ppps_edit.php?id=1
- When setting up a PPPoE WAN on @interfaces.php?if=wan@, there is an option (which also existed in 2.0.1) to set up ad...
-
-
03:02 PM Feature #2859: Allow to configure different mac addresses for multiple VLANs on same physical interface
- Just 4 vlans, 2 wan and 2 lan
-
- Are just VLANs assigned to interfaces (WAN, LAN, OPTx) or the parent nic is also assigned to any interface?
- 02:37 PM Revision a1f735b3: Do not route do default gw when rule gw is down
- - Add a new advanced misc option to change the behaviour
- When it is set and rule has its own gateway, that is down,... - 02:04 PM Revision 4f537e93: Fix indent and whitespaces
-
-
- 06:48 AM Revision ac135e42: use logging on the block all v6 rules if default is log
-
04:35 AM pfSense Packages Bug #2870 (Rejected): External DNS server always takes precedence over internal servers
- description isn't true, and it's not a bug, rather need to fix your config. Please post to the forum or mailing list ...
-
04:23 AM pfSense Packages Bug #2870 (Rejected): External DNS server always takes precedence over internal servers
- I have a set-up where pfSense runs between a DSL router (WAN interface) and an internal domain with multiple DNS serv...
-
- As far as I understood the LDAP authentication backend, the group membership needs to be stored in an attribute of th...
-
- I think I caught most of the edge cases for transitioning into and out of RAM disk mode, and preserving data across r...
03/11/2013
-
-
- That's possible, but could you reconsider your rejection?
It *is* a problem with the installer. A user who follows... -
- Easy install always defaults to 2x RAM size for swap. A custom installation is needed for anything that doesn't fit t...
-
- Clean 2.1 install, but existed in 2.01 as well, and I'm guessing all.
Per sizing requirements, I used a 2 GB SSD m... -
- Duplicate of #2867
-
- Sorry, lcicked OK part way, please delete this, I'll re-enter it
-
-
- See http://forum.pfsense.org/index.php/topic,59909.msg322186.html#msg322186
Appears in 2.1, I'm guessing all versi... -
10:14 AM Feature #2849: IKEv2 support for IPsec
- I read about it. I am still worried, about MOBIKE (isnt it important for roaming roadwarriors) and the absense (?) of...
-
- 06:25 AM Revision 6db58224: move the "block all v6" rules back to where they should be, fix comment
- 01:46 AM Revision a876f1ed: point to new github repo
- 01:44 AM Revision d5280de6: update github repo location
03/10/2013
-
07:20 PM Feature #2849: IKEv2 support for IPsec
- Another option for IKEv2 would be the portable version of OpenBSD's OpenIKED
https://github.com/reyk/openiked
-...
03/09/2013
-
-
- duplicate of #2495
-
- It was fixed on Jan 31, See #2495 - if it's still broken on 2.1 using a current snapshot, reply there, since that's a...
-
11:32 AM Bug #2647: rc.newwanip discovers wrong WAN IP when using DHCP
- Yeah, I tried this on 2.1 from March 7th and January 27th.
Please tell me if you need more information. -
- Have you tried this on 2.1, as recommended? Quite a lot of work went into fixing these kinds of bugs there. Specifica...
-
- ok, I tried to find the bug myself.
As we need to use DHCP on WAN (Cable Source-Verify) the address is being renewed... -
12:33 PM Revision 6062f0f3: Merge pull request #480 from phil-davis/master
- Services Status Widget remove leftover >
-
- Jim guided me here - I have got a similar problem on the recent 2.1-snapshot (March 7th).
Details are already descri... -
- That disconnect is the management GUI view of the connected clients. It is not disconnecting your actual client.
... -
11:50 AM pfSense Packages Bug #2865 (Rejected): openvpn ping-restart option for TAP interface
- If tap interface used other side of the tunnel never will be pinged.
But openvpn server instance by default sends
... - 10:20 AM Revision bb9aaf95: Services Status Widget remove leftover >
-
- duplicate
-
- 2.0.2-RELEASE (i386)
built on Fri Dec 7 16:30:29 EST 2012
FreeBSD 8.1-RELEASE-p13
When trying to bind second ope... - 12:44 AM Revision 70fee79c: fix text. Fixes #2863
03/08/2013
- 07:35 PM Revision 99dcc489: Use the process name rather to avoid the infamous file not found error
-
- Use HTMLENTITIES to deprecate the ampersand in page title URI
- 06:50 PM Revision a1560c1b: Use HTMLENTITIES to deprecate the ampersand
-
- Applied in changeset commit:70fee79c520702571be842f16708f3bcdaf11601.
-
- should be fixed, thanks
-
06:29 PM Bug #2863: Wrong heading for system_gateway_groups_edit.php
- It also says "Edit gateway entry" instead of "Edit gateway group entry".
-
- When editing a gateway group, the header is displayed as "System: Gateways: Edit gateway".
It should probably be "... - 05:41 PM Revision 60cd1864: Ignore vim swap files
- 01:54 PM Revision 76254caa: Be consistent on vlan checks
- 01:48 PM Revision f5c2bf1e: Fix logic inversion from 126ff5b264
- 01:48 PM Revision 43c6c9af: Check if MTU is already with correct value before change it
- 01:48 PM Revision be2c39b6: When parent is not assigned, reset it and all vlans without mtu set to default
- 01:48 PM Revision 3f3252f6: When reset parent to default mtu, deal with all VLANs too
- 01:48 PM Revision a976c633: Set vlanifs early and use it on more places to simplify logic
- 01:48 PM Revision 20eb8203: Consider parent mtu when it's set instead of default one
- 01:47 PM Revision 5ee6ce25: Simplify a bit the logic
- 01:47 PM Revision 1f9ecbcd: Pass parent interface to link_interface_to_vlans
- 01:47 PM Revision 8306b774: Fix typo on var name
- 01:47 PM Revision a1d36777: Fix typo s/assgined/assigned/
-
01:31 PM Revision 7965c38f: Be consistent on the check
-
-
-
-
- how to do that coz i have just one nic and 4 VLANS configured on it, 2 WAN and 2 LAN
-
- VLANs follow the same mac address of parent interface. If it's possible, spoof the mac on parent interface to check i...
-
-
02:09 AM Bug #2861: IPSec Status Broken
- Thank you, works fine now.
-
- Tidy up System:General Setup XHTML
-
- Tidy up System:Advanced:Admin XHTML
-
- Tidy up System:Advanced:FirewallNat XHTML
-
- Tidy up System:Advanced:Network XHTML
-
- Tidy up System:Advanced:Tunables XHTML
-
- Tidy up System:Advanced:Notifications XHTML
-
- Tidy up System:Advanced:Misc XHTML
03/07/2013
- 09:23 PM Revision 481e09b3: Tidy up System:Advanced:Misc XHTML
- Close BR tags
Close INPUT tags
Update CDATA secions in script tags
Update HTML boolean operators - 09:14 PM Revision 846ac60f: Tidy up System:Advanced:Notifications XHTML
- Close INPUT tags
- 09:08 PM Revision a5a61609: Tidy up System:Advanced:Tunables XHTML
- Deprecate ampersand
Close INPUT tags - 08:56 PM Revision 3410a6c5: Tidy up System:Advanced:Network XHTML
- Close BR tags
Update CDATA sections in script tags
Update HTML boolean operators - 08:51 PM Revision 8712fab6: Tidy up System:Advanced:FirewallNat XHTML
- Close BR tags
Updated HTML boolean operators - 08:41 PM Revision 3c119b78: Tidy up System:Advanced:Admin XHTML
- Added proper CDATA sections to scripts
Updated HTML boolean operators
Close BR tagas
Close INPUT tags - 08:32 PM Revision 925020e7: Tidy up System:General Setup XHTML
- Close INPUT tags
Tidy up HTML boolean operators -
-
- Fix stale bandwidth-by-IP table entries
- 06:25 PM Revision 5356362c: Fix stale bandwidth-by-IP table entries
- When the number of valid rows in the table reduced by more than 1 between updates, stale entries were left displayed ...
-
03:36 PM Bug #2712: Openvpn and Quagga cause route collision and race condition
- I'm also experiencing this issue and applied the patch.
However, there is still a related issue. (I did not file thi... -
-
-
-
- 01:28 PM Revision 0d0d4a27: Validate MTU changes for VLANs and let user change it again
-
-
- Bandwidth by IP - allow filter by local and remote
- 01:08 PM Revision da11e022: Bandwidth by IP - allow filter by local and remote
- 01:05 PM Revision a02ce260: Bandwidth by IP - allow filter by local and remote
-
-
-
-
-
-
-
-
-
-
- 09:48 AM Revision eff8ea7d: Merge pull request #467 from phil-davis/master
- Bandwidth by IP - display static map names also when FQDN selected
- 09:18 AM Revision 2dbd8924: Bandwidth by IP - display static map names also when FQDN selected
- If display FQDN was selected, and an IP had no reverse lookup FQDN, but did have a DHCP static mapping, the static ma...
- 05:20 AM Revision 379ec2f7: Merge pull request #464 from phil-davis/master
- Add display by host name option to Traffic Graph
- 03:21 AM Revision 8389a461: Traffic Graph add option to display FQDN
- 03:19 AM Revision 232d38ab: Traffic Graph add option to display FQDN
- It was easy to give the user the choice of displaying IP Address, just the Host Name or the FQDN. And the display wra...
-
- Same Problem here with 2.1 Beta (built on Fri Mar 1 21:17:31 EST 2013)
It seems that also states without the old I... -
12:34 AM
Bug #2627: Old delegated prefixes are not removed from the LAN interface
- Testing was performed on:
2.1-BETA1 (amd64)
built on Wed Mar 6 15:11:09 EST 2013
FreeBSD 8.3-RELEASE-p6
Freshly... -
-
- Add Promiscuous Mode Option to Diagnostics Packet Capture Interface
03/06/2013
-
09:50 PM Bug #2822: Direction wrong in traffic graph (lan)
- Forum thread http://forum.pfsense.org/index.php/topic,59714.0.html
Now the bandwidth by IP display shows separate en... -
- 06:37 PM Revision 30406b49: Merge pull request #465 from stilez/master
- Typo in variable name
-
-
-
-
04:29 PM Bug #1629: invalid state table entries after WAN IP change
- I’ve upgraded to the latest beta, but the problem still persists. Even when the modem is restartet and i don’t get a ...
- 03:02 PM Revision c16f7c5c: Add display by host name to Traffic Graph
- 01:41 PM Revision 4006a437: Add display by host name to Traffic Graph
-
-
- Add DNS Forwarder option to not forward private reverse lookups
-
- Applied in changeset commit:2379c48e139eeebabd098a5d17062d8c463afe70.
-
- on debugging this i saw another strange behaviour with this function:
function ipsec_fixup_ip($ipaddr) {
... -
- the following two lines are also affected:
elseif (is_ipaddrv6($sp_*src*id))
$sp_dstid .= '/128';
should look ... -
- Hi,
there is a bug in
/etc/inc/ipsec.inc
on line 409
the lines
if (!strstr($sp_dstid,"/")) {
if (is_ipad... - 12:14 PM Revision 0a7985ba: Add DNS Forwarder option to not forward private reverse lookups
- 12:11 PM Revision 7bdd28fb: Add DNS Forwarder option to not forward private reverse lookups
- Currently, reverse lookups of private IP addresses that are not resolved on the pfSense box itself (e.g. like 192.168...
-
-
09:35 AM Bug #2860 (Closed): packages don't get restored
- I have a box with pfSense 2.0.2 with several packages installed:
arping
Cron
mtr-nox11
OpenVPN Client Export Util... - 09:34 AM Revision 8d64d6b5: Add Promiscuous Mode Option to Diagnostics Packet Capture Interface
- Also fix couple mismatched table cell tags
Some NIC's do not work well if placed into promiscuous mode -
08:54 AM Feature #2847: Add a checkbox to flag a gateway as "down"
- +1 same here sometimes i would like to disable my UMTS gateway a few days because of the bandwidth limit.
-
- Could you help us here?
pfSense is loosing connectivity completely now and then.
Please tell me if there's anythi... -
- hes back again so any clue on the cost
-
06:04 AM Feature #1855: NAT before IPsec VPN
- Hi, sorry for this later testing.
I have figured out how to test it without upgrading to 2.1 in my production envir... - 04:10 AM Revision 2459be50: clean up text a bit, make link more apparent
- 04:06 AM Revision 0f7668fb: DNS servers are optional
- 04:06 AM Revision 9cd89a2d: descr is optional
-
03:27 AM Bug #2832: Gateway status fails when 2 WANs have the same gateway.
- Ermal Luçi wrote:
> Why do you have static gateways for your pppoe?
> Please take this to the forums since its a co... -
- this wasn't for 6rd in general as I thought, rather a diff type.
03/05/2013
-
- i have a pppoe connection and my isp requires to spoof a fixed mac but it doesnt seem to work when using vlans, witho...
-
-
- been fixed at some point since then
-
-
-
- works
-
-
-
- works
-
-
-
- works
-
-
- Current Behavior:
When an OVPN client connection goes down, any policy based routing rules pointing to the ovpnc gat... -
09:06 PM Bug #2555: check_reload_status consumes 100% CPU usage
- Unfortunately I have moved on from pfsense so I can't recheck to see if this has been resolved in later versions stil...
-
- There are a wide range of issues unrelated to check_reload_status that can cause this. At the time of the original re...
-
- look to all work
-
-
- problem as described doesn't actually exist. Guessing a GRE NAT issue from the description.
-
-
-
-
-
-
-
-
-
-
-
-
-
- Tidy up "wol" widget XHTML
-
- Tidy up "smart" widget XHTML
-
- Tidy up "services" widget XHTML
-
- Tidy up "picture" and "rss" widget XHTML
-
- Tidy up "log" widget XHTML
-
- Tidy up "ipsec" and "load balancer" widgets XHTML
-
- Tidy up "gmirror" and "installed packages" widgets XHTML
-
- Tidy up "gateways" widgets XHTML
-
- Tidy up "carp_status" widget XHTML
-
- Tidy up "captive portal" widget XHTML
- 07:12 PM Revision ebaf7d05: Tidy up "wol" widget XHTML
- Added summary to table tag
Added ALT to img tag
Closed IMG tag
Moved nowrap to class definition
Deprecated the ampers... -
- 07:03 PM Revision 623ee867: Tidy up "smart" widget XHTML
- Added a new include file.
Added summart to table tag - 06:56 PM Revision bb877f44: Tidy up "services" widget XHTML
- Added ALT to img tags
Closed off IMG tags
Deprecated the ampersand in HREF tag
Added summary to table tags
Moved nowr... - 06:38 PM Revision eabce399: Tidy up widget XHTML
- Close input tags
Change target _NEW to _BLANK
Add ALT to img tags
Add CDATA sections to scipts.
Changed name in FORM ... - 06:25 PM Revision 59261d32: Tidy up "log" widget XHTML
- Add CDATA section to scripts
Close INPUT tag
Deprecate HTML boolean operators SELECTED and CHECKED
Removed duplicate ... - 06:15 PM Revision ab28bba4: Tidy up widgets XHTML
- Add summary to TABLE tags
Moved nowrap to class definition - 06:12 PM Revision 8c5a9058: Tidy up widgets XHTML
- Added summary to TABLE tags
Closed BR tags
Added alt to IMG tags
Tidied up CDATA section in scritps. - 05:42 PM Revision 8e4bb27f: Tidy up "gateways" widgets XHTML
- Added summary to table tags
Created new INC file to jump from the dashboard to the gateway status
page - 05:32 PM Revision 7a1f4f1f: Tidy up "carp_status" widget XHTML
- Add ALT to img tags
Close img tags - 05:28 PM Revision 0b1d867b: Tidy up "captive portal" widget XHTML
- Depracated the ampersand in HREF
Move nowrap to the class definition. -
- Tidy up "interface status" widget XHTML
-
- Tidy up "interface_statistics" widgets XHTML
-
- Tidy up "shortcuts.inc" XHTML
- 05:08 PM Revision 319f65ec: Tidy up widget XHTML
- Close BR tag
Close INPUT tag
Depcrated ampersand in HREF
Added ALT to img tag
Added close body tag
Added close htm tag -
- Tidy up "system_information" widgets XHTML
- 04:58 PM Revision bb1a8946: Tidy up widget XHTML
- Removed duplicte TR tag
Move norwap to the class definition. - 04:52 PM Revision 94fbacae: Tidy up XHTML
- Added ALT to img tag
- 04:32 PM Revision 9c07440e: Tidy up widgets XHTML
- Close BR tag
Add CDATA sections to scripts
HTML width paramter must be a whole number, not a decimal. -
- It's easy to reinstall this package at System: Package Manager. I guess additional warning will be fine.
Is it enou... -
- You have somehow installed the tap fix package multiple times. Not a GUI bug.
-
- ...
-
- 2.0.2-RELEASE (i386)
built on Fri Dec 7 16:30:29 EST 2012
FreeBSD 8.1-RELEASE-p13
https://*/vpn_openvpn_server.p... -
- Can you be more specific on qwhat does not work?
-
- Applied in changeset commit:1fadb9d1129b68572e04c3fd7b12fe4bd0098519.
-
- Applied in changeset commit:afe4f2da5079fc68cd0fcdb8d5ba65b173dd5726.
-
-
- Applied in changeset pfsense-tools:commit:d09e8fddd50e95f731f7cef8d1db92ba1b4f2398.
-
- Patch pushed test with new snapshots.
-
- Why do you have static gateways for your pppoe?
Please take this to the forums since its a configuration issue rathe... -
-
-
- DNS Forwarder allow blank forwarding IP address
- 09:46 AM Revision 5f5bd76b: DNS Forwarder example text
- It was a bit silly putting the examples inside gettext() calls - they should not be translated to other languages in ...
- 09:17 AM Revision 4560c2d1: DNS Forwarder allow null forwarding address
- dnsmasq allows a blank forwarding IP address to be specified in --server parameters. In that case, dnsmasq will attem...
- 09:02 AM Revision 6f8679af: DNS Forwarder allow null forwarding address
- dnsmasq allows a blank forwarding IP address to be specified in --server parameters. In that case, dnsmasq will attem...
-
- this ticket needs to be opened again as mac spoofing when working with vlans stopped working, ill try without vlans t...
03/04/2013
-
- Added IE Mobile for WP8 to list of mobile browsers
-
-
- 12:57 PM Revision e12ad49f: Save ppp info and realif on interfaces.apply to be able to cleanup old configuration when changing interface type. Fixes #2758
- 12:50 PM Revision 4a735210: Make parent interface and all VLANs use the same MTU. Fixes #2786
- 12:37 PM Revision 74889b22: When adding a new static route, check if network address conflicts with interfaces. It will complement ticket #2852
- 12:08 PM Revision e480d64b: Fix validation of conflict between interface ip address and static routes. Fixes #2852
-
11:50 AM pfSense Packages Bug #2855: OpenVPN Client Export Utility shows deleted user certificates
- Sorry for the noise, you are right. Thanks for the superfast support.
-
- System > Cert Manager, Certificates tab.
Read the notes carefully when it prompts you to delete the user certifica... -
- Please reopen, I am willing to provide further info if you need some.
-
- For the preceeding comment...
-
- This is not a browser issue. There was never more than one not deleted cert active, and this is what I get (See attac...
-
- Unable to reproduce the problem. Please post in the forum for more help.
Deleted certificates are no longer in the... -
- I am using the OpenVPN Client Export Utility v1.0.4, and created a few certs for users, but these deleted certificate...
-
- I am using the OpenVPN Client Export Utility v1.0.4, and tried to create an "archive" export (the one with the .ovpn-...
- 11:30 AM Revision b241b144: Merge pull request #445 from phil-davis/master
- Services status widget display 1st sentence of description
- 10:09 AM Revision 41af581e: Services status widget display 1st sentence of description
- Some packages (e.g. bandwidthd, dansguardian, HAVP, nmap, squid3...) have a very verbose package description. This is...
- 09:25 AM Revision 397bff13: Merge pull request #436 from phil-davis/master
- Add DynDNS No-IP Free account support
-
- squid always routes out of default wan1 in spite of it configured in transparent mode and local ip set to loopback an...
-
- Applied in changeset commit:e12ad49f4621ec9e99ca829c2d7188ad456638f8.
-
- Applied in changeset commit:4a7352101fbd6901b46a3b6a9a3c00d23b75f0e1.
-
- Applied in changeset commit:e480d64bc5eb7a9accaad93b8845df1bf8bbb2f3.
-
- Duplicate of #1434
-
- it's not designed to, hence a feature request.
-
03:42 AM Feature #2853 (Rejected): OpenVPN RADIUS accounting
- OpenVPN Server dose not send accounting packet for radius.
-
02:49 AM pfSense Packages Bug #2624: Varnish3 Package + GUI seems broken
- Pull request #396 solves this
- 01:22 AM Revision 672d7e7b: Config file formating:
- FIX - Add new line after comment so first option statement is on uncommented line.
Prefix send host-name with tab. -
03/03/2013
-
- Just make the page validate as XHTML
-
- The only XHTML errors remaining are the ones of the general includes.
-
- Nice one, but you will get more success on getting it into main branch if you create a pull request with the changes.
-
- the LB director page is broken by this commit https://github.com/bsdperimeter/pfsense-packages/commit/9b20c9278aaf542...
-
- Pull request added: https://github.com/bsdperimeter/pfsense-packages/pull/393
-
- interfaces.php checks for "This IPv4/IPv6 address conflicts with a Static Route" are too strict. Rather than only che...
03/02/2013
- 10:39 PM Revision 2cf899d3: Added IE mobile for WP8
-
- please make a pull request with your changes.
https://help.github.com/articles/using-pull-requests
-
- Hmm got the patches reversed. Please ignore/delete the previous and use these instead...
-
- Second patch: respect the probe_disable option in code generator:...
-
- First patch: add a disable option to gui:...
-
- Probing is not relevant for all backend targets. Eg: i currently use a varnish setup where a single backend target is...
-
05:25 AM Feature #2850 (Resolved): add units in ntp status page
- Hi, I am trying to set up a stratum 1 ntp server with a serial gps (if that is what it is called)
and when I am chec... -
- +1 - quite often I have ISPs with links that lose 10-20% packets for a few days. Call the ISP, they know they have a ...
-
- Hi dear pfSense devs!
One handicap i find in pfSense is the lack ok IKEv2 which guarantees smooth operation for ro...
03/01/2013
- 06:03 PM Revision 244dee81: Reconfigure routing when a new gateway is added
- 03:23 PM Revision d09e69da: Send ipprotocol parameter when adding new gateways from interfaces.php
-
- 02:16 PM Revision 75f4d868: Remove *_defaultgwv6 also
- 01:44 PM Revision 6b23c19a: Don't allow adding IP Alias or CARP VIP on network or broadcast addresses. Fixes #2768
- 01:02 PM Revision 17ff2c46: Add check for ipv6 subnet when adding aliases with CARP parents
- 12:51 PM Revision 0692dea8: Simplify code
- 12:48 PM Revision 02421eca: Silent php -l removing pass-by-reference
-
- I don't know for sure. Ermal is away this week he may be able to give you an idea when he's back.
-
- how much funding would be required to fix it?
-
- It may be possible to fix eventually, but it's likely not a simple answer. If the fix came from upstream it would be ...
-
- so im assuming its not possible to fix this until some1 from FreeBSD does?
-
- Doesn't appear to be specific to us, and has been around a while...
http://lists.freebsd.org/pipermail/freebsd-pf/20... -
- we r in 2.1 and no sign of fixing this
-
- Occasionally, the Multi-WAN gateway detection mechanisms are not very helpful in disabling a WAN that has become unus...
-
- Applied in changeset commit:6b23c19a15eb621208fa6d6fc5a8b97c3dd6ff97.
-
- Okay after finding 2 bugs u send me to a forum ... okay noted
btw i use 2 wan interfaces -
- I did a lot of testing here, with snmp configured to bind a pppoe interface, every time pppoe disconnects and reconne...
-
-
05:41 AM Bug #2780: CP: passthough has no effect
- Just updated to snapshot Wed Feb 27 and I confirme that the problem is fixed now, both MAC passthrough and Allowed IP...
-
- It works fine these days
-
- Changes were made on Captive Portal since last month, could you please try a recent snapshot?
-
- thanks
-
- well, it seems all the issues about this task has been solved... if no one has nothing to say, I think we can close i...
- 02:18 AM Revision 336d4f04: Add section tag to v6 documentation links.
- Put v4 send, request, require & modifies in lease requirements and requests section.
No functional changes.
02/28/2013
- 10:51 PM Revision 56dda8e0: Fix indent and whitespaces
- 06:41 PM Revision eb171d8f: Update translatio files
-
-
08:06 AM Revision 34121b0c: Unbreak the html table, this was missing a table cell close tag, also add trim() on the output.
-
- You mentioned it happens when you enable/disable alias for pfblocker. Have you tried to disable pfblocker and check i...
02/27/2013
-
-
- All above stuff hidden on build:
2.1-BETA1 (i386)
built on Wed Feb 27 15:57:21 EST 2013
FreeBSD 8.3-RELEASE-p6
No... -
- Applied in changeset commit:9beebb5e54428ada74c902a091a6992f4583f370.
-
- And the System->Firmware, Restore Full Backup tab is also not relevant on nano installs IMHO.
-
-
-
- 07:24 PM Revision 5b13c47c: Do not count active vouchers as used. Fixes #1550
- 07:20 PM Revision d8fba822: Fix indent and whitespace
-
04:14 PM pfSense Packages Bug #2845 (Closed): bandwidthd keeps saying "Please start bandwidthd to populate this directory." even after its started.
- Installed bandwidthd on pfSense-2.0.2-RELEASE, it always says "Please start bandwidthd to populate this directory." w...
- 03:47 PM Revision 08c3810c: Just set defaultgw after all gateways are processed, it fixes return_gateways_array()
- 02:26 PM Revision 5b0e0182: Consider CP allowed IPs for both directions. It will help ticket #2780
-
- Applied in changeset commit:5b13c47cb2391da39472aeed5f6269a913ae831a.
-
12:18 PM Feature #2439: XEN Para-virtualized Drivers Support
- Has anyone looked into this yet? I would imagine it wouldn't be too much trouble to include the xenhvm drivers to at ...
- 11:06 AM Revision 9beebb5e: Hide 'Perform full backup prior to upgrade' option on nano, also hide restore full backup. Fixes #2844
- 10:55 AM Revision 4b805dbc: Fix whitespaces, indent and unclosed html tags
-
- this doesn't actually appear to be an issue, awaiting feedback on http://forum.pfsense.org/index.php/topic,59374.0.html
-
- Since when to/from/both direction options were removed on commit:aea564088a it started to consider Allowed IPs just a...
- 01:11 AM Revision 6e704f19: Fix response read for 'add new gateway' applet at interface configuration
02/26/2013
-
- The "Perform full backup prior to upgrade" option should only be available on full installs since nano has an alterna...
-
-
- Status Queue page: Adds the IF name not shown for FAIRQ or PRIQ
-
-
- Tidy up HTML errors in INDEX.PHP
-
- Set correct netmask for IPv6 addresses when creating an easy rule: pass
-
03:34 PM Revision aea83400: no IPv6 check when an easy rule: pass is created
- The easyrule_pass_rule_add() now checks for an IPv6 address and sets the
netmask accordingly.
This is the fix for bug... -
- trim ping host
-
- Added trim() function to the $host variable. If whitespace is in front
of the host or IP address the ping command wil... -
- Avoid DynDNS timeout delay when gateway is down
- 01:15 PM Revision 0b844b73: Fix indent, whitespaces and unbalanced <tr> and <td> tags
- 12:07 PM Revision 873e4b28: Avoid DynDNS timeout delay when gateway is down
- When a dynamic DNS entry is set on an interface that has a private IP, the code has to find the ultimate public IP of...
- 11:41 AM Revision ed5f7e9e: When auth algorithm is hmac-sha512, it produces long lines and wrap them, what breaks the parser. Ignore lines that starts with a space to fix it. Fixes #2842
-
- Should be fixed by commit:aea834001cdfc129d1dc64209c4871a8c06bc1a9
-
- When trying to create an "Easy Rule: Pass" within the Firewall logs the pass rule is created but the subnet is wrong....
-
- Applied in changeset commit:ed5f7e9ebd5b00018dc99dc00ea36ce752a90b5b.
-
- emailed it to you
-
- Do you have the output of 'setkey -D' at the time error happened?
02/25/2013
-
- This is fixed. You can't remove the last IP alias on the subnet of a CARP IP because it'll break CARP, you have to de...
-
11:52 PM Bug #2406: No IP alias within the subnet of a CARP IP can be deleted
- It is the last one. pfSense should be able to determine if the alias type is CARP or IP Alias and let you remove any ...
-
- Status Queue page: Fixes the Drops issue and adds the Queue length information to the page.
-
- Fixes the Drops issue and adds the Queue length information to the page.
-
- someone please follow up on VCZ-534999 when this is resolved
-
- IPsec status on v4 connections is broken in recent snapshots (not sure how recent, but it's a regression from the las...
-
- The input validation on IPv6 static routes requires the gateway IP to be on the interface's configured subnet. It's a...
-
-
-
-
-
- 07:38 PM Revision 8e479c61: Add VPNs and PPPoE rules before regular ones. Fixes #2837
-
-
-
-
-
-
-
-
- It's not reproducible, seems to be a local issue instead of a bug on pfSense. Please try to find help in forums and/o...
- 03:40 PM Revision 06182467: Create rules for grouped interfaces before regular ones. Fixes #2837
- 03:05 PM Revision 133d754e: Fix indent and whitespaces
-
- Applied in changeset commit:8e479c61bc77a6cb2ea284325520cf7a31315c81.
-
- Close but a little more needs fixed. My manual groups are getting sorted properly, but the VPN rules are also technic...
-
- Applied in changeset commit:06182467540b978ef7dccdf311c7677014c04beb.
- 01:38 PM Revision 774aedf0: Ignore swap partitions when looking for external config file
- 12:32 PM Revision 52034432: Make sure captiveportal section of config is an array, reported on ticket #2838
-
- i get this when i run the first command
[2.1-BETA1][root@firewall.xbipin]/root(8): dd if=/dev/zero of=/dev/da0 bs=... -
- Yes, I put all of the commands I used in my ticket update when I closed it. And please, move this to a forum thread, ...
-
- can u tell me how did u format the drive?
is this command fine?
newfs -U /dev/da0s1 -
- This really belongs on a forum thread, not the ticket system, until a bug is actually confirmed.
I can't reproduce ... -
- do u want access to mine right now?
-
- Couldn't reproduce it on VMs and I don't have an alix board available for testing at this moment
-
- after boot is finished, i plugged in the usb and went into shell and typed the command and this is what i get
[2.1... -
- What happens if, after boot is finished, you plug the flash drive and run:...
-
- while ur at this i noticed one more bug not related to this which prevents a system reboot
Warning: Invalid argume... -
- i get this when debug is true
External config loader 1.0 is now starting... da0s1
/sbin/mount -t msdosfs /dev/da0... -
-
- Could you please edit /etc/ecl.php, change the line 37 from:...
-
- i have a lexar 8GB USB flash drive, i created one partition and formatted with "newfs -U /dev/da0s1". now when i rebo...
-
10:20 AM Bug #2780: CP: passthough has no effect
- Also replicated here. Happy to provide debug info if it's required.
Phil -
- Duplicate of #2780
-
- On a recent upgrade, this stopped working. It was originally working with an IP passthrough to 8.8.8.8 (DNS) and host...
-
- It creates two rules because it has to. On WAN without the default gateway it needs to add reply-to on the rules sepa...
-
08:48 AM Bug #2598: reply-to on IPv4+6 rules breaks v6
- This works now for dualstack rules on WAN. But it also creates 2 separate rules on other (OPT) interfaces for dual-st...
-
- After channel gets down, the notification is sent, while when it's back up, no notifications sent. Small fixing patch...
02/24/2013
-
-
- Disabled 1 of my DynDNS entries. The regular update checks for that entry do not happen any more (as required), and o...
-
-
- From a system before upgrade:
[2.1-BETA1]/root(1): uptime
9:02AM up 2 days, 16:19, 2 users, load averages: 1.56, ... -
- Applied in changeset pfsense-tools:commit:548949d8726b5660d288336e8679e48f3b8cd2ff.
- 05:28 PM Revision 0333f968: Add DynDNS No-IP Free account support
- The free No-IP account requires the IP address to be changed within every 30 days. If there is no change, the "last u...
- 05:22 PM Revision 528d5f17: Add DynDNS No-IP Free account support
- 01:52 PM Revision 343266cc: Encrypt backup after rrd data is added, it fixes #2836
- 01:50 PM Revision 4cfd2390: Encrypt backup after rrd data is added, it fixes #2836
- 01:39 PM Revision 73ed069b: Fix indent and whitespaces
- 10:16 AM Revision 1970b50e: Merge pull request #435 from phil-davis/master
- Put common DynDNS code and constants into services.inc
-
- Applied in changeset commit:343266ccf71605dbde9aff845f3075f3c090a829.
-
- Applied in changeset commit:4cfd23901d1da439a8373e90142ec175c03d7dab.
-
- As proposed on bug description, the error still shows up when you try to remove the last IP alias, but do not complai...
- 07:12 AM Revision 94c872f7: Remove leading spaces from DYNDNS_PROVIDER_DESCRIPTIONS
- Remove leading spaces to make the string consistent.
- 07:03 AM Revision 1ddae7c3: Use common code and constants from services.inc
- to reduce code duplication
- 07:01 AM Revision 7a5fe50d: Use common code and constants from services.inc
- to reduce code duplication
- 06:59 AM Revision 14aee2f4: Use common code and constants from services.inc
- Reduce code duplication
- 06:57 AM Revision 0e3aeb6b: Add common DynDNS constants and code
- to system.inc to remove code duplication
- 06:18 AM Revision cfa845a9: Add onchange tag to checkbox too
- 04:14 AM Revision ecbf63f0: Merge pull request #433 from phil-davis/master
- Cleanup code handling 25 day dyndns update
- 03:34 AM Revision f4dd8b4c: Advanced DHCP Client Options & Config File Override
- DHCP v4:
Protocol Timing
Send Options
Request Options
Require Options
Option Modifiers
DHCP v6:
Interface Statement
... - 03:24 AM Revision f5e293e6: Cleanup code handling 25 day dyndns update
- The code that checks if an IP has not changed for 25 days has out-of-date comments and uses "25" in multiple places a...
02/23/2013
-
- The rules are supposed to be ordered like so:
Floating rules, interface group rules, user rules
But currently t... -
- Whitespace and text typos dyndns.class
-
- Thanks. You can mix v4 and v6 within aliases, we do extensively on our production networks. If there's a scenario whe...
- 05:06 PM Revision 0c7bb880: Whitespace and text typos dyndns.class
- Standardise tabbing and fix a few text typos, before making any real functional changes.
- 07:35 AM Revision dcb63afe: Merge pull request #431 from phildd/master
- Fix is_altq_capable
- 06:09 AM Revision 2163ace9: Fix is_altq_capable
- Fixes traffic shaper determine which interfaces should be displayed and used.
-
- an encrypted backup config.xml including RRD data is unrestorable. As discussed here:
http://lists.pfsense.org/pipe...
02/22/2013
- 06:10 PM Revision d348160e: Unset enable parameter instead of set its value to false. Fixes #1838
- 05:22 PM Revision c4bd43cc: Copy full dhcpd conf from master to slave. Fixes #2600
-
-
04:26 PM Todo #2485: Add Status > Services entry for radvd if RA is enabled
- On this snapshot:
2.1-BETA1 (i386) built on Wed Feb 20 19:15:36 EST 2013
I see radvd in the Status: Services s... -
-
- This is now working for me as of this snapshot: 2.1-BETA1 (i386) built on Wed Feb 20 19:15:36 EST 2013.
-
- I can confirm this is working. Now if only you could mix IPv4 and IPv6 within aliases.
- 02:56 PM Revision d026178f: Make sure we create / delete SPDs and SADs on secondary node when it changes on primary. Fixes #2303
-
- thanks
-
- Tested by adding a static route and then creating an opt interface and trying to assign an address within a static ro...
-
-
- I have tested with:
2.1-BETA1 (i386)
built on Thu Feb 21 18:19:58 EST 2013
FreeBSD 8.3-RELEASE-p6
The problem... -
-
- Using:
2.1-BETA1 (amd64)
built on Thu Feb 21 23:02:24 EST 2013
FreeBSD 8.3-RELEASE-p6
with the latest gitsync.
... -
- thanks
-
- I have tested and this is working as expected. I added an IPV6 route and then removed it. Routing table had it when i...
- 12:43 PM Revision dc2e5552: simplify logic a bit
- 12:40 PM Revision fb6a3e7a: Set pfsync0 as down when it's not being used
- 12:34 PM Revision b32ea59d: Fixes on HA setup:
- - Configure pfsync when configuration is changed
- Disable pfsync when it's disabled on GUI
- Remove syncpeer and bac... -
- Applied in changeset commit:d348160eb4d400a03aa7cbdc8e8f5d4c400b341f.
-
- Applied in changeset commit:c4bd43ccba1be01cf3ef05fea89c9730dc633096.
-
- From pfSense forum http://forum.pfsense.org/index.php/topic,59249.0.html :
Apparently there is a memory leak in the ... -
- Applied in changeset commit:d026178fa695f607f3b490978a9f4113fa7b111d.
-
08:27 AM Feature #2834 (Needs Patch): carp+pfsync: add ability to prefer one node as master
- This request is done because we have the situation of a lot (3x /27) ip-addresses with most of them guarded by carp. ...
-
- Applied in changeset commit:b32ea59d5a45b86beee73d416462c01d1ac915ec.
-
-
-
02/21/2013
-
07:35 PM Bug #2555: check_reload_status consumes 100% CPU usage
- Tracked down the issue to dhcp6c calling rc.newwanipv6 which called "filter reload" on check_reload_status.
The de... - 07:30 PM Revision 5d764d64: Insert new NAT rules on the top of the list when top plus icon is used. Fixes #1118
- 07:28 PM Revision b779511e: Tidy up HTML errors in INDEX.PHP
- Without any "widgets" selected, INDEX.PHP (i.e. the "dashboard")
produces 230+ HTML errors, so:
Remove the "closehea... - 07:15 PM Revision 3202763c: Add NAT rule based on NAT rule below it instead of at the bottom of the list. Fixes #1118
- 06:18 PM Revision 95540233: Do not allow bridge members to be assigned to itself. Fixes #1153
- 05:21 PM Revision ef88e1e1: Fix indent and whitespaces
-
- hmm after update still the same .... any idea
- 03:28 PM Revision b030e035: Allow deleting all aliases but the last one within the same subnet of a CARP IP. Fixes #2406
-
- Unrelated to this ticket. Open a new feature request ticket for each of those separately.
-
03:19 PM Feature #2241: DHCP - prevent dhcpd from handing out leases to certain MAC addresses
- Thank you for this patch, however I would still like to see 2 checkboxes added to the GUI to control the following fl...
- 02:16 PM Revision 873e49ec: Set if interface is enable before try to configure static arp. Fixes #1988
- 02:05 PM Revision 42fa2c01: Avoid conflicting interface IP address with static routes. Fixes #2039
-
-
- Applied in changeset commit:5d764d64b999cd2f1c9b00c62771a18e05b52025.
-
- Applied in changeset commit:3202763c8bdd2cd6821be7bc21829085548cc504.
-
- Slightly related: using the + at the top of the NAT rules list adds the rule to the bottom, not the top. (could make ...
-
- Applied in changeset commit:95540233e3b9d8c4be5616065edcc6e1f2e2f972.
- 11:43 AM Revision acc68ffa: find_interface_ipv6 should return the first configured address, not the last one
- 11:30 AM Revision 8de7e180: Improve error message since we can have ipv6 set here
- 11:23 AM Revision 6e828f98: Add missing check for IPv6 overlap on interfaces, it complements the change made for ticket #1723
- 11:19 AM Revision 2c98a935: Teach is_ipaddr_configured to check ipv6 for single IPs. While I'm here, reduce code duplication
- 10:41 AM Revision 8d8b1af7: Remove unused function remove_numbers()
- 10:41 AM Revision 2ccac125: A nic family name can contain numbers on it, remove only the index in the end. Fixes #2010
-
- We should have a knob somewhere to let users prefer IPv4 over IPv6 in case they have broken IPv6 routing and need to ...
-
- Applied in changeset commit:b030e03510656584d1d29f3a1d355e4a6d947f04.
-
-
-
- Applied in changeset commit:873e49ec1cf3a291c9267a5efca70d74481a126b.
-
- Applied in changeset commit:42fa2c01422e57fddea07352029530ace34363c4.
-
-
-
- Applied in changeset commit:2ccac12588f59039c88d06126762f41be2f65ce2.
-
- I have 2 VDSL WANs using PPPoE connections but they have the same gateway and because of that pfsense gateway monitor...
02/20/2013
-
- not a bug, post to the forum or mailing list
-
10:48 PM Bug #2831 (Rejected): Issue while connecting the openvpn
- Hi Team
I have set the Openvpn server in Pfsense.I have successfully connected through it from another network.Bu... -
- can attach it here if it's under 5 MB gzipped/bzipped which it might be at that. otherwise can email it to me and I c...
-
04:10 PM Bug #2819: Unconstrained memory growth of tcpdump
- Jim, I was able to reproduce the situation. 3 days after reboot, tcpdump process grew to 25 MB from 2.5 MB. I ...
-
- configuration problem, post to the forum or mailing list
-
09:50 PM Bug #2830: a Bug for 100Mb interface?
- --[adsl router] ------192.168.2.152 (100Mb)[win7]
|
|
---192.168.... -
- test env:win7+vmware7+pfsense2.0.2+winxp
--[adsl router] ------192.168.2.152 (100Mb)[win7]
... -
- 07:50 PM Revision 9a15b8d2: Fix issues on "Set interface(s) IP address" option
- - Avoid duplicate gateway entries
- Fix checking if a default gw already exists
- Set IPv6 to none when user choose i... - 06:11 PM Revision c6a69aed: fix typo
- 05:55 PM Revision b82e4696: fix typo
-
03:54 PM Bug #2828: CARP does not work on dual-homed VMware ESXi hosts without a workaround on the ESX host
- Oops, I was dead wrong, other machines see the same behaviour as soon as Promiscous Mode is enabled on the VMware por...
-
- Weird thing is, it only seems to affect pfSense boxes. We have tons of Linux and Windows machines, even in the same p...
-
- The workaround for altering the ESX host is correct and works for most people, since it's a problem with ESX.
If w... -
- Certain active/active VMware ESXi configurations loop back CARP multicast frames sent by the machine. This breaks CAR...
- 03:15 PM Revision ebbfc4b7: Revert "Preselect interface subnet mask for carp interfaces"
- This was not a good change, it just consider ipv4, and it doesn't
respect the previous selected value. Revert it now ... - 12:41 PM Revision 1f56ce58: Fix dhcp v6 config section name for console setup and check on interfaces.php, the correct is dhcpdv6 instead of dhcpd6. Fixes #2827
-
- It was already fixed in 2.1.
- 11:51 AM Revision 2675f511: Fix sort param to call bandwidth_by_ip
-
- Applied in changeset commit:ebbfc4b771a16b1aed5e97c2aaa2bee3db6b2e4d.
-
- * Add IPv4 CARP address to WAN, i.e. 10.10.10.1, prefixlen /29
* Add IPv6 CARP address to WAN, i.e. 2001:db8:0:e901:... -
- Status Queue: Uniform units in the interface.
-
-
- Uniform units in the interface.
-
- Applied in changeset commit:1f56ce58668708485f9d95c9b01e72519dde87b4.
-
04:25 AM Feature #2781: Hierarchical view of "Status-Queues" page
- Well, the new status queues page still doesn't show Borrows, Suspends or Drops:...
-
- Well, I think we can close this, or if you have any suggestions/problems please write me!
02/19/2013
-
-
-
-
-
-
-
03:55 PM Bug #2827 (Resolved): changing "IPv6 Configuration Type" dropdown results in error if you have an old config.xml with unmigrated <dhcpd6> block
- I have upgraded my 2.1 from snapshot to snapshot for quite a long time and I now have accumulated 2 IPv6 dhcpd blocks...
-
-
- pfSsh.php playback installpkg git
pfSsh.php playback uninstallpkg git
pfSsh.php playback listpkg -
-
-
-
- This new version of the patch is working fine for all tests I've made here.
-
-
- Should be fixed by latest commits.
Missed the ticket creation. -
- Status > Traffic Graphs gives javascript alert when changing interfaces. Just says "Error 0 -- error".
See http://... - 11:41 AM Revision 1fea5ad9: Get the correct interface subnet
- 10:17 AM Revision 30a90672: Merge pull request #426 from N0YB/Interfaces_Types_Config_Sections_Spacer_Row
- Interfaces Types Config Sections Spacer Row
- 06:56 AM Revision 1c4846e9: Interfaces Types Config Sections Spacer Row
- Fix spacer (last) row display inconsistency
Missed one -
- After investigation, i figured out the root cause of this issue. For LAN interface:
- pfSense_get_interface_stats(... -
05:21 AM pfSense Packages Feature #2825 (Resolved): OpenBGPd: Add options prepend-neighbor and prepend-self
- To be able to more properly control traffic flow, adding "prepend-neighbor" and "prepend-self" to the list of options...
02/18/2013
- 11:14 PM Revision 79ea2726: Display right interface name on alias list when alias interface os CARP. Fixes #2824
- 10:51 PM Revision 9e696e9a: Merge pull request #425 from N0YB/Interfaces_Types_Config_Sections_Spacer_Row
- Interfaces Types Config Sections Spacer Row
- 10:50 PM Revision 672717cf: Merge pull request #423 from N0YB/Interfaces_Static_IP_Gateway_Add_New
- Interfaces Static IP v4 & v6 Gateway Add New
-
- The change in comment #2 appears to get rid of "Please select a valid Digest Algorithm", but the error "Please select...
-
- Applied in changeset commit:24c0145c2cdb7eb8006020579c7c8b82f0108412.
- 09:40 PM Revision a236affe: Interfaces Types Config Sections Spacer Row
- Fix spacer (last) row display inconsistency
- 09:10 PM Revision 4021ec36: CARP IPs were being checked twice in some cases. Fixes #2823
- 07:23 PM Revision bd10508a: Interfaces Static IP v4 & v6 Gateway Add New
- Fix mismatched table row tags
-
- Applied in changeset commit:79ea2726b5c1c2a723e915a2d4d9cc983d216062.
-
- When you create an IP alias VIP and select a CARP VIP as its interface, it shows up properly on the VIP edit page, bu...
-
- Works now, thanks!
-
- Applied in changeset commit:4021ec36a9ce460b1501f42da8237d51bbedc611.
-
-
11:47 AM Bug #2821: mobile ipsec problem since upgrade from pfsense 2.0.1 to 2.0.2
- Same problem, on 2.0.2 no IPSec tunnel route added!
Oscar -
- Just for the record - a typo in the function name was fixed by https://github.com/bsdperimeter/pfsense/commit/df40755...
- 02:51 AM Revision 3e9c81b2: Merge pull request #422 from jean-m-cyr/master
- Avoid Warning: Invalid argument supplied for foreach() in /etc/inc/system.inc
- 02:21 AM Revision 34cb8645: Avoid Warning: Invalid argument supplied for foreach() in /etc/inc/system.inc
- Warning: Invalid argument supplied for foreach() in /etc/inc/system.inc
Don't use captiveportal configuration option...
02/17/2013
-
- If I try to edit and save a CARP VIP, changing nothing, the GUI rejects the change....
- 02:34 PM Revision 5705c60a: Revert "Merge pull request #417 from miken32/cp-database-fix"
- It breaks customizations, it's not a good time for such big change.
This reverts commit 40c7b1a98bfdc61261154adaac5f... -
- 11:43 AM Revision 2d7e9111: Merge pull request #419 from bcyrill/patch-6
- Remove #2760 workaround
- 11:42 AM Revision cae9d2ca: Merge pull request #418 from bcyrill/bogons_mem
- Update bogons update routine
-
- I have found at least a workaround for my issue, patch is included.
In /usr/local/www/interfaces.php the code that... -
09:41 AM Bug #2555: check_reload_status consumes 100% CPU usage
- Amy Alvarez wrote:
> FYI this is still happening to me on 2.0.2 release.
I do have captive portal enabled, but I ... -
- FYI this is still happening to me on 2.0.2 release.
-
-
12:19 AM
Bug #2451: IPv6 rule: 'add network' becomes 'add single host'
- The latest change fixed my problem, thank you!
-
-
- There is no call to is_validip() on entire system.inc
-
-
-
-
-
-
-
06:30 AM Bug #2822 (Resolved): Direction wrong in traffic graph (lan)
- On my LAN graph I see outgoing traffic (downloads) +graphed+ ok (out), but +listed+ under Bandwidth +IN+
2.0.2-REL... -
12:34 AM Revision 9ffce6c1: Remove #2760 workaround
- Since pfctl has been patched there is no need for the #2760 issue workaround anymore.
02/16/2013
- 08:01 PM Revision 507aa90a: Set (src|dst)mask to 128 for single IPv6 addresses. Fixes #2451
-
- 03:55 PM Revision 923e440b: Fix #2818. Last change didn't work, it needs to be one more step out of the loop.
-
- Applied in changeset commit:507aa90af48b14ffaab6664c708a3b03d723164c.
-
-
12:19 AM
Bug #2451: IPv6 rule: 'add network' becomes 'add single host'
- Maybe this change broke something, because I have created exactly the same rule on earlier snapshots without any prob...
-
11:08 AM Bug #2818: IPSec phase2 "Automatically ping host" function broken. Bug confirmed.
- Thanks for that Renato. :-)
//Dan -
- Applied in changeset commit:923e440b75eda660a5cdbd102912fe53d61d1237.
-
11:03 AM Bug #2821: mobile ipsec problem since upgrade from pfsense 2.0.1 to 2.0.2
- Jim P wrote:
> Discuss/troubleshoot on the forum. It comes up often and is always a settings issue.
Hi Jim.
I ... -
- Discuss/troubleshoot on the forum. It comes up often and is always a settings issue.
-
- since upgrade from 2.0.1 to 2.0.2 there is a problem with mobile ipsec connections:
the first client always connec... -
02/15/2013
-
- here is the thread at mpd forum, doesnt seem like a mpd issue but some network drivers
http://sourceforge.net/proj... -
-
-
- 05:40 PM Revision 77901966: Restart snmpd on rc.newwanip. It should fix #2756
-
- I think I found the problem.
It needed to be even one more step out of the loop at the end of the foreach phase1 l... -
- Or there is something wrong so it doesn't create an array even if it suppose to do it (the $ipsecpinghosts*[]* )
Or... -
- *The correction does not work.*
The problem is that the $ipsecpinghosts is NOT treated as a table but rather as a si... -
- Applied in changeset commit:fa77faffbf284ce5e89b9bd36963a747adbf1fed.
-
- Updated to "2.1-BETA1 (i386) built on Thu Feb 14 16:27:05 EST 2013" and
tried to tried to clear / apply / reconfigu... -
- I have run into something very much like this (see http://forum.pfsense.org/index.php/topic,58966.0.html )
Trying ... -
03:37 PM Bug #2820 (Resolved): Unable to generate CSR in 2.1BETA1
- Please see this thread for info.
http://forum.pfsense.org/index.php?topic=58971 -
-
- To followup my previous post, I have verified that the WAN (em0) states are indeed flushed, however their correspondi...
-
-
- This last change should fix the issue, please gitsync it or update to the next released snapshot, back snmp Bind Inte...
-
- Applied in changeset commit:7790196644a3cc38cc2ec7d0df01f164479b43be.
-
- The problem is when snmpd starts the interface doesn't have the IP address set yet. And when it reconnect it crashes ...
-
- very nice! i tested it right now
after a reconnect the snmp stoped working
then i bind it to all interfaces an... -
- Could you please change "Bind Interface" to All to see if the error persists?
-
- Hi Jim, I agree there must be something else happening. I'm happy to Guinea pig my home pfSense router, which exh...
-
- I thought there was already an open ticket for this here on redmine but I don't see it now.
That is for the filter... -
- The following process seems to grow in an unconstrained fashion:...
-
- Confirmed on forum it's now working.
- 10:51 AM Revision 508799c3: Remove invallid option 'none' for IPSec Phase 2. Fixes #2816
-
- Looks like the code needs adjusted to account for PBI changes on 2.1.
http://forum.pfsense.org/index.php?topic=588... -
01:20 AM
Todo #2817: Back Unbound changes out of 2.1, revert to a package for now.
- The unbound package installs fine, but no binaries are installed:...
- 10:20 AM Revision fa77faff: Fix #2818. Save information about all phase1 on ipsecpinghosts instead of only the last one
- 10:12 AM Revision 71034b51: Treat openvpn tunnel IPs as local IPs and prevent warning on login page when acessing it using tun IP address. Fixes #1681
- 09:35 AM Revision 40c7b1a9: Merge pull request #417 from miken32/cp-database-fix
- Use associative array for captive portal database
-
-
- This is resolved - tested in last night's snapshot.
-
-
- Upgraded last night - the wizard completed correctly without errors. Nice work :)
-
- I did an attempt to implement a fix, please review and let me know if it's ok.
- 07:16 AM Revision d896f867: Merge pull request #236 from miken32/nas_accounting
- NAS accounting
-
06:06 AM Revision f1ab195e: self-explanatory now, no comments needed
-
-
-
- Applied in changeset commit:508799c3794a9febb9e4abf7167171aa195e77d0.
-
- Applied in changeset commit:71034b51ff8831b43cf70c6f26955e6e6bdee5ca.
-
12:30 AM pfSense Packages Bug #2698: freeradius2 counter not working
- Guys, sorry, yes the patch fix the issue, thanks!!!
http://forum.pfsense.org/index.php/topic,57303.0/all.html -
02/14/2013
-
-
-
- Tested on: 2.1-BETA1 (i386) built on Sun Feb 10 22:04:57 EST 2013
plus small manual correction from gitsync regard... - 06:09 PM Revision 2ccc41c1: Add privileges to CP 'Allowed hostnames' and fix a typo on edit IPs
- 05:59 PM Revision 120404e0: Keep Unbound here for syslog messages
- 05:50 PM Revision 950c9a18: Backout Unbound for now bring back in 2.2. Fixes #2817
-
- Mh, I was googling for the wrong keywords (focusing on binding syslogd to a specific interface/address)...
Thanks f... -
- That has been documented for quite some time on the doc wiki:
http://doc.pfsense.org/index.php/Why_can%27t_I_query_S... -
- Wow, yes. I just created a fake gateway using the local interface IP address (which is a bridge interface), and a sta...
-
- It depends on the type of VPN. With OpenVPN it works fine, it just sources the syslog traffic from the tunnel interfa...
-
- Another issue related to this task is logging to a remote syslog server, where remote I mean to the other side of a P...
-
- Its for all vlans not specific to any driver.
-
- Can anyone speculate on if this will fix the same error with sk1_vlan1 or if the fix was only applicable to em* inter...
- 12:18 PM Revision 03e96afb: Set $interfacegw properly and avoid losing default route in some circumstances
-
11:50 AM Todo #2817 (Feedback): Back Unbound changes out of 2.1, revert to a package for now.
- Applied in changeset commit:950c9a182eaacfbb6c48a6371affe7852ffb13ba.
-
- Unbound needs to be backed out of 2.1 and changed back into a package for now.
We can try integration again for 2.2. - 11:42 AM Revision 8878f4bb: Fix rrd display when captive portal is enabled
-
10:56 AM
Bug #2627: Old delegated prefixes are not removed from the LAN interface
- I am using the build below:...
- 10:25 AM Revision 80feb8e5: Set global $g to use right theme
-
08:41 AM Bug #2812: Adding a one way phase 2 IPSec tunnel causes a config error
- Ok, from my understanding of IPSec, I thought that was the case... but then I finally had a scenario where I thought ...
-
- there is no such thing as a "one way" P2, the fact that "none" exists there is the actual problem. Your config isn't ...
-
- Please find it attached - first section is working phase 1, second is working phase 2, third is the faulty one way ph...
-
- "none" recently started showing up in the "local network" field for IPsec P2s, which is invalid and needs to be remov...
-
-
-
- I don't believe option should be removed since it is still valid for rules from Master you don't want to sync.
- R... -
- If those seciton need to be synched no matter what than its better to remove the options completely from the filter s...
-
- IIrc you already can use the names of a port in /etc/services wherever a port is asked.
So instead of typing 80 you...
02/13/2013
- 11:50 PM Revision 965c3e23: Deal correct with bitmask for ipv6 on destination, same we did for src. If fixes #2451
- 11:00 PM Revision f1a831b8: Restore require_once(interfaces.inc) on get_configured_ip_addresses(), it's required by get_interface_ip()
-
- Just tested this and the current beta (didn't test the release) imported an "Other" type Inline config without any fu...
-
-
-
-
-
-
- Update dyndns service and widget
-
-
-
- Add additional dyndns hosts to widget
-
- In 2.1 support for HE.net Tunnelbroker, SelfHost, Route 53 and Custom entries has been added.
- 07:19 PM Revision 72711980: Warn users that nosync option won't prevent it to be overwritten on carp slave members
- 07:19 PM Revision a1fb7d61: Fully sync filter and nat sections. Fixes #2362
-
-
-
-
-
-
-
- Applied in changeset commit:965c3e23a60f25d263389bf02b685bb7f20f3915.
-
- OK it works correctly in the source box, but not the destination box.
-
- I couldn't reproduce it here. When I back to edit rule it's set as network and bitmask 32.
-
- It's partially fixed but not 100%
If I enter 2a00:1450:: in a firewall rule as a network with a mask of /32 (which... -
- Applied in changeset commit:cb2b59b89b4d7fb6449c0f45d142302dd2029373.
-
- Correct filename for dyndns widget cached ip
-
- Ermal, testing this feature on a pfsense box with a WAN interface that gets via DHCP an IP in a /24 subnet (i.e. it's...
-
09:58 AM
Bug #1629: invalid state table entries after WAN IP change
- Thanks, it works with my VoIP device now. The states get killed correctly.
- 05:26 PM Revision 3d72df58: Correct filename for dyndns widget cached ip
-
-
03:19 PM pfSense Packages Feature #2736: Additional configuration options for SMTP, POP3 and IMAP Pre-Processors in snort.conf
- This can be closed. These were incorporated in the other changes included in subsequent Pull Requests via Github.
-
- ok, thanks again!
-
- Yep. These, too, were part of the larger set of PulL Requests done in late Janaury and early February. This reqest ...
-
02:49 PM
Bug #2627: Old delegated prefixes are not removed from the LAN interface
- I will wait for the updated snapshot. In the meantime I went on to disable the DHCPv6 client on the WAN interface (IP...
-
- Can you gitsync and try again, or wait for the next new snap? It may be that the last snap doesn't have the changes i...
-
02:17 PM
Bug #2627: Old delegated prefixes are not removed from the LAN interface
- Running this build:
2.1-BETA1 (amd64)
built on Tue Feb 12 10:20:45 EST 2013
FreeBSD 8.3-RELEASE-p5
Whenever the WAN ... -
- Applied in changeset commit:a1fb7d61c4be90e6b6fcbc44fd644677cb0761e4.
-
- Same happens for last/only filter rule. I'm working on a solution.
- 01:06 PM Revision cb2b59b8: Deal correct with /32 subnet mask for ipv6 addresses. If fixes #2451
- 12:31 PM Revision 96ccd009: Fix indent and whitespaces
-
- Not sure we'd need much in the way of port aliases. We already have a ton of ports in the drop-down list on firewall ...
-
- as with anything else - when someone's willing to pay for it, or someone does it and submits a merge request.
-
08:21 AM Feature #1979: Allow user-defined rules to utilize built-in system aliases
- I'd like to push things a bit since this would really help a lot.
Jim P wrote:
> Some ideas:
> * Local Networks
... -
- I figured out that every time my ISP reconnect me snmpd stop working that's why it wont start from the beginning also...
-
- Dynamic DNS status widget for use on the Status Dashboard
- 07:14 AM Revision 81fe3f5e: Make a Dynamic DNS status widget available for use on the Status Dashboard page. See forum toipic: http://forum.pfsense.org/index.php/topic,58278.msg312146.html#msg312146 for the discussion on this.
-
- We already do that for the copy included on /status.php, though the function needs updated since it needs to also cle...
-
- It would be nice to be able to scramble sensitive data of the config of a box to easy the process for reporting issue...
-
- probably not
- 02:24 AM Revision 16634530: Merge pull request #412 from phil-davis/master
- Say goodbye to routed at bootup
- 02:19 AM Revision 78514535: Say goodbye to routed at bootup
- Now that routed/RIP has been removed from the base system, it generates errors trying to start it in the base system ...
-
- Patch has been pushed that corrects this by ignoring alock if it has been created for more than 2 minutes(2 runs of p...
02/12/2013
-
- on the one system of ours that was having this issue, it's better than it used to be (it used to be impossible to com...
-
- By any chance you have net.inet.ipsec.filtertunnel set to something grater than 0?
-
-
- Remove duplicate $ipsecpinghosts variable
-
-
-
- Update etc/inc/services.inc
-
-
- Fix path to chmod
-
-
- add input validation for NAS-Identifier
-
-
- Yeah it does as of Friday's snapshot at least.
-
- Does this still happen on 2.1? I thought I fixed all of these not too long ago.
-
-
- we can't document everything in the web interface, that's just an example of one of hundreds of potential options the...
-
06:14 PM Todo #2814 (Closed): OpenVPN push route hint on configuration page is misleading
- On the OpenVPN server configuration page it says:...
-
-
05:18 PM Bug #1823: policy routing for firewall-initiated traffic only works for interface IPs
- I already know the answer after thinking about it. Only if the hidden rule used match would the route-to stack onto ...
-
- As an update. The out rule in floating that I listed does disable the hidden route to.route-to.
I found the mista... -
- Strange. I am seeing inconsistency with this or I am going crazy and making a bunch of mistakes testing this (I am s...
-
!!!! Hold up... !!!!
The above rule did cancel the route-to it seems. Sorry about that, I messed up the test. ...-
- I didn't think it was possible to override it. I just tested it and could not override it.
You can not create an ... - 04:38 PM Revision ad885a63: Remove RIP from menu
-
- Applied in changeset commit:1d2add88f4222b04708a1a1af38567ab197a460a.
-
- Fixed by commit:d6d775a6b51fedc4044497ca9af526a31df6d687
-
02:49 PM Bug #2813 (Resolved): Diagnostics: S.M.A.R.T. Monitor Tools
- diag_smart.php
Perform Self Tests
Click abort
directs to smartmon.php
which is 404 - Not Found -
- That commit ID was for another ticket (sorry)
-
03:30 PM Feature #2640: Add a way to find where an alias is used
- I agree there is a workaround, but it would be very nice to have it in the GUI. This saves a lot of time when I'm on...
-
- Applied in changeset commit:d6d775a6b51fedc4044497ca9af526a31df6d687.
-
- Easier way: download a config backup and grep/search it.
Not sure how feasible this would be in the GUI, given the... -
- Please try a 2.0.3 image, this appears to be one of the bugs addressed there:
http://forum.pfsense.org/index.php/top... -
- Whoops, added that note to the wrong ticket.
-
- Please try a 2.0.3 image, this appears to be one of the bugs addressed there:
http://forum.pfsense.org/index.php/top... -
- Attach your /var/etc/racoon.conf (or /var/etc/ipsec/racoon.conf on 2.1 ) and the ipsec section of your config.xml wit...
-
- Hi
I have a current IPSec tunnel that is working great.
I tried to add a second and third that is one way (loca... -
- On 2.1 (where development is typically done) these do show on the dashboard as a crash report, so they can be viewed ...
-
- Might be the same issue as #781
-
- Will need a lot more detail. Any log messages from the system log for starters.
The route53 code was contributed, ... -
- Have these changes already been merged in by pull requests?
-
- Have these changes already been merged in by pull requests? They look familiar.
-
-
-
- Without more detail and no other reports, this is not likely legitimate.
-
- Can you try this again on a recent 2.1 snapshot? Several changes to prefix delegation have happened recently.
-
- Can you submit those changes as a github pull request please?
https://help.github.com/articles/using-pull-requests
... -
- Do you happen to have a copy of your config from before and after this upgrade to compare? You can e-mail it in if yo...
-
-
- Duplicate of 2482
-
- Not that it's specifically addressing the need for a prompt, but I recently made the manifest drop-down bold the choi...
-
- This is probably due to an old check for the CIDR being /32 meaning single IP, but that test should not be applied on...
-
-
- Fixed by commit on this ticket but not marked as fixed.
-
- We have switched to the ntp.org daemon now, this is no longer relevant.
-
- Probably this is due to the lack of a default gateway. Enable gateway switching under System > Advanced on the Misc t...
-
- That's just a side effect of using the GUI. The more things that are open and checking in the GUI, the more resources...
-
- You would have to split the user rule(s) with respective reply-to.
-
- Outbound NAT might be feasible but for port forwards this could be problematic as the group rules wouldn't get reply-...
-
- Many changes to the package since then, is this still a problem?
-
- Can this still be reproduced on 2.1?
-
- Should be fixed by the "Extended Query" box in 2.1
-
- Does this still happen on 2.1? I see a few possibly related commits that may have fixed this.
-
- Applied in changeset pfsense:commit:f8edf05d872f8887b891f15b48aa694a94ed2f9e.
-
- Added a while ago. In at least 2.1.
-
-
- Applied in changeset commit:100f3e7191a0c720857316c4ba0cac0890fe8177.
-
- Lighty logs to syslog now, so this isn't relevant any longer.
-
- Worth trying again on a recent 2.1, and keep the recent edits to the recommending settings for mobile IPsec in mind f...
-
- On 2.1 we use OpenSSL 1.0.1e (or later) so it's worth trying again there.
-
- This works, at least on 2.1 and recent 2.0.x's. It displays for me, and I've used it with customers recently as well.
-
- There was some work to solve a similar issue with ordering and aliases on 2.1 recently, worth trying there, it's like...
-
-
-
- There is a per-mapping static ARP option for DHCP entries now, which should fill this need.
-
- This has been cleaned up a bit since then but some is expected behavior. Anything that's supposed to be an IP but isn...
-
- This has been done on 2.1 for a couple months now and confirmed to be working there.
-
- As Chris said, it will be OK on 2.1. No easy fix until then.
-
-
- Fixed at some point, the key length is retained now even when input validation gives errors.
-
- This was fixed a while back, I've done this recently and it works.
- 01:45 PM Revision d94eb904: Preselect interface subnet mask for carp interfaces
-
- virtio was fixed up a while ago, check the forum/wiki for info.
-
- Appears to have been fixed.
-
- This gets annoying when trying to help customers fix up broken OpenVPN routing, we should fix this sooner rather than...
-
- Should be better on 2.1
-
- Logs changed a lot since then, it's likely been fixed. Can reopen if a new report on 2.1 surfaces.
-
- Replaced by #2440 (better info there)
-
- Moving back to packages since this is no longer built in.
-
- Important tunables like that are in the GUI now, not sysctl.conf
-
- Fixed long ago
-
- Package was changed long ago to not do chown on the cache any longer.
-
- Sounds like one of the other IPsec mobile bugs that was fixed long ago (check other tickets).
-
- Captive Portal gained this feature some time ago.
-
-
-
- This has, in all likelihood, been fixed since then. The behavior would at least have changed on 2.1 after the recent ...
-
- Fixed long ago
-
- Fixed long ago.
-
-
- They are included in automatic outbound NAT now, but not the interface macro.
-
- Applied in changeset commit:bde982dd5aad41254273300676d1d5c2ecf367c3.
-
- 12:50 PM Revision e9389ae8: Remove RIP since it's a package again. See ticket #648
-
- Fixed long ago on 2.x
-
- This was fixed up a while ago.
-
- On 2.1, DHCP static mappings now have a checkbox to setup a static arp entry for that IP. Should be close enough to t...
-
- This can now be set manually after the install on 2.1.
touch /root/TRIM_set; /etc/rc.reboot
to remove
touch ... -
- We have been prefixing the paths with / for a while now on 2.1 (and earlier?)
-
- An alias feature was implemented a while back on 2.1
-
- Should we give this a target for 2.1?
-
- hmm its hard to test it on another machine i will do a complete new install of the system next week and i try to inst...
-
- It seems to be a local issue instead of a bug on pfSense since there are no other users reporting the same issue and ...
-
-
-
-
-
-
- Applied in changeset pfsense-packages:commit:849ae9e3bd2877bfb784b88b10d41dc772127f2a.
-
- RIP needs to be moved back to a package
- 11:26 AM Revision 443c2822: Fix indent and whitespaces
- 11:07 AM Revision 8184a8dd: Check if file exists before try to read it. Fixes #2764
- 11:02 AM Revision c2173267: Fix indent and whitespaces
-
- That is a remenant of another implementation for packages.
The only way for now is to use the directly callable func... -
-
- Support for custom NAS-Identifier
-
- Status Queue page: Fixes the bytes/bits unit in the page.
-
- You will have better luck opening a forum thread on the packages board to diagnose this. certainly needs a lot more d...
-
07:51 AM pfSense Packages Bug #2811 (Closed): squidGuard-1.4_4 starting large number of child processes
- when i installed squidguard from the pkg, this time it reinstalled squid. i enabled the squid guard, in few minutes i...
-
-
- I just pushed another change to reset states with certain gateways set.
It should behave even better than previously,... -
- Applied in changeset commit:8184a8ddbb5c92cf3b01806c7a4f6172c95c7ed3.
- 04:39 AM Revision 39866b68: Merge pull request #407 from jean-m-cyr/master
- Make sure ntpd creates a pid file at bootup
- 03:01 AM Revision a82de14d: Make sure ntpd creates ntpd.pid file at bootup
-
- Merged thank you for the pull request.
02/11/2013
-
-
- cleanup whitespace
- 08:35 PM Revision e6c60013: Check interfaces and VIP IP address overlap
- - Check if interface IP overlaps other interfaces or localip from mpd
based services
- Check if VIPs IP overlaps in... -
-
-
-
-
-
- it's always been optional, users can override with floating rules. It's an appropriate default for the vast majority.
-
- Can this be an option? I actually consider it a feature. I don't want policy routing at all. I change routing on t...
-
- Submitted: https://github.com/bsdperimeter/pfsense/pull/406
-
- Please send a pull request on github as everyone else since its easier to merge/review/...
-
-
- Applied in changeset commit:e6c60013283ea203853e0bc34158e185016f4df6.
-
-
-
-
-
-
-
-
-
-
-
-
09:20 AM Bug #2349: vlan(4) needs altq adaption on FreeBSD 8.3++
- I can confirm that this patch did not break vlan support as it did 8 months ago.
I had to completely rebuild my p... -
- So can you confirm it works correctly now?
-
- Please ignore my reported troubles, see http://forum.pfsense.org/index.php/topic,58717.0.html for an explanation.
... -
-
-
-
05:21 AM pfSense Packages Bug #2809 (Closed): Reverse Proxy for ActiveSync / Real-Time Monitor
- Real-Time Monitor and the access.log for the Reverse Proxy package do not show the full request URI (it is cut off af...
-
- Today the problem occurred again. So it was not fixed yet.
-
-
-
-
01:53 AM Feature #2757: CDP/ISDP/LLDP support.
- Any chance to see this feature implemented in 2.1?
Also available in: Atom