pfSense

03/12/2013

08:50 PM Feature #2858: Do not route rules to default gateway when its own gateway is down

Ah my apologies... Its working as you have written..
Silly me.
I'm assuming that I should now be placing a DEN... Shawn Bruce

08:03 PM Feature #2858: Do not route rules to default gateway when its own gateway is down

It appears the rules related to gateway OVPNC1 drop when the VPN is stopped/failed. Shawn Bruce

07:36 PM Feature #2858: Do not route rules to default gateway when its own gateway is down

Could you show me /tmp/rules.debug in 2 different moments, when OVPN is up and when it's down? Renato Botelho

07:00 PM Feature #2858: Do not route rules to default gateway when its own gateway is down

Wow thanks for working to add this!
I've applied the patch to pfSense-2.1-BETA1-amd64-20130312-0847 and it does no... Shawn Bruce

09:40 AM Feature #2858 (Feedback): Do not route rules to default gateway when its own gateway is down

Applied in changeset commit:a1f735b31c8f7f0cca0ebc5a7153cd06cdf4482e. Renato Botelho

09:37 AM Feature #2858: Do not route rules to default gateway when its own gateway is down

It's the expected behaviour today, so change it to a Feature and adjust Subject as well Renato Botelho

07:04 PM Bug #2871 (Rejected): Non returning call : pfSense_get_modem_devices() called by interfaces_ppps_edit.php?id=1

Duplicate of #2433 Jim Pingle

05:55 PM Bug #2871 (Rejected): Non returning call : pfSense_get_modem_devices() called by interfaces_ppps_edit.php?id=1

When setting up a PPPoE WAN on @interfaces.php?if=wan@, there is an option (which also existed in 2.0.1) to set up ad... Stilez y

03:02 PM Feature #2859: Allow to configure different mac addresses for multiple VLANs on same physical interface

Just 4 vlans, 2 wan and 2 lan Bipin Chandra

12:37 PM Feature #2859: Allow to configure different mac addresses for multiple VLANs on same physical interface

Are just VLANs assigned to interfaces (WAN, LAN, OPTx) or the parent nic is also assigned to any interface? Renato Botelho

12:45 PM Feature #1550 (Resolved): used + active + ready should match # of tickets

Renato Botelho

12:44 PM Bug #2756 (Closed): SNMPD problems when binding pppoe interface

Renato Botelho

04:35 AM pfSense Packages Bug #2870 (Rejected): External DNS server always takes precedence over internal servers

description isn't true, and it's not a bug, rather need to fix your config. Please post to the forum or mailing list ... Chris Buechler

04:23 AM pfSense Packages Bug #2870 (Rejected): External DNS server always takes precedence over internal servers

I have a set-up where pfSense runs between a DSL router (WAN interface) and an internal domain with multiple DNS serv... Jan Christoph Ebersbach

03:12 AM Feature #2869 (Resolved): LDAP user authentication backend doesn't support membership lookups by querying the group

As far as I understood the LDAP authentication backend, the group membership needs to be stored in an attribute of th... Jan Christoph Ebersbach

03/11/2013

12:23 PM Bug #2867: Subpartition algorithms can cause install to fail or subpartition defaults to be impossible, on installs with small HD + sizeable RAM

That's possible, but could you reconsider your rejection?
It *is* a problem with the installer. A user who follows... Stilez y

12:09 PM Bug #2867 (Rejected): Subpartition algorithms can cause install to fail or subpartition defaults to be impossible, on installs with small HD + sizeable RAM

Easy install always defaults to 2x RAM size for swap. A custom installation is needed for anything that doesn't fit t... Jim Pingle

11:59 AM Bug #2867 (Rejected): Subpartition algorithms can cause install to fail or subpartition defaults to be impossible, on installs with small HD + sizeable RAM

Clean 2.1 install, but existed in 2.01 as well, and I'm guessing all.
Per sizing requirements, I used a 2 GB SSD m... Stilez y

12:10 PM Bug #2866 (Rejected): Subpartition algorithms can cause install to fail or subpartition defaults to be impossible, on installs with small HDlarge RAM installations

Duplicate of #2867 Jim Pingle

11:55 AM Bug #2866: Subpartition algorithms can cause install to fail or subpartition defaults to be impossible, on installs with small HDlarge RAM installations

Sorry, lcicked OK part way, please delete this, I'll re-enter it Stilez y

11:54 AM Bug #2866 (Rejected): Subpartition algorithms can cause install to fail or subpartition defaults to be impossible, on installs with small HDlarge RAM installations

Stilez y

12:03 PM Bug #2868 (Closed): Inescapable loop in installer

See http://forum.pfsense.org/index.php/topic,59909.msg322186.html#msg322186
Appears in 2.1, I'm guessing all versi... Stilez y

10:14 AM Feature #2849: IKEv2 support for IPsec

I read about it. I am still worried, about MOBIKE (isnt it important for roaming roadwarriors) and the absense (?) of... Georgios Tsalikis

07:30 AM Bug #2495 (New): pfsense doesn't seem to know what its WAN IP is

Renato Botelho

03/10/2013

07:20 PM Feature #2849: IKEv2 support for IPsec

Another option for IKEv2 would be the portable version of OpenBSD's OpenIKED
https://github.com/reyk/openiked
-... Dim Hatz

03/09/2013

05:01 PM Bug #2647 (Closed): rc.newwanip discovers wrong WAN IP when using DHCP

duplicate of #2495 Chris Buechler

11:50 AM Bug #2647: rc.newwanip discovers wrong WAN IP when using DHCP

It was fixed on Jan 31, See #2495 - if it's still broken on 2.1 using a current snapshot, reply there, since that's a... Jim Pingle

11:32 AM Bug #2647: rc.newwanip discovers wrong WAN IP when using DHCP

Yeah, I tried this on 2.1 from March 7th and January 27th.
Please tell me if you need more information. Christoph Filnkößl

11:28 AM Bug #2647: rc.newwanip discovers wrong WAN IP when using DHCP

Have you tried this on 2.1, as recommended? Quite a lot of work went into fixing these kinds of bugs there. Specifica... Jim Pingle

08:57 AM Bug #2647: rc.newwanip discovers wrong WAN IP when using DHCP

ok, I tried to find the bug myself.
As we need to use DHCP on WAN (Cable Source-Verify) the address is being renewed... Christoph Filnkößl

11:59 AM Bug #2495: pfsense doesn't seem to know what its WAN IP is

Jim guided me here - I have got a similar problem on the recent 2.1-snapshot (March 7th).
Details are already descri... Christoph Filnkößl

11:57 AM pfSense Packages Bug #2865 (Rejected): openvpn ping-restart option for TAP interface

That disconnect is the management GUI view of the connected clients. It is not disconnecting your actual client.
... Jim Pingle

11:50 AM pfSense Packages Bug #2865 (Rejected): openvpn ping-restart option for TAP interface

If tap interface used other side of the tunnel never will be pinged.
But openvpn server instance by default sends
... Stepan Karandin

03:00 AM pfSense Packages Todo #2864 (Rejected): Port binding for openvpn

duplicate Chris Buechler

02:37 AM pfSense Packages Todo #2864 (Rejected): Port binding for openvpn

2.0.2-RELEASE (i386)
built on Fri Dec 7 16:30:29 EST 2012
FreeBSD 8.1-RELEASE-p13
When trying to bind second ope... Stepan Karandin

03/08/2013

06:50 PM Bug #2863: Wrong heading for system_gateway_groups_edit.php

Applied in changeset commit:70fee79c520702571be842f16708f3bcdaf11601. Chris Buechler

06:43 PM Bug #2863 (Feedback): Wrong heading for system_gateway_groups_edit.php

should be fixed, thanks Chris Buechler

06:29 PM Bug #2863: Wrong heading for system_gateway_groups_edit.php

It also says "Edit gateway entry" instead of "Edit gateway group entry". Patrick Linstruth

06:24 PM Bug #2863 (Resolved): Wrong heading for system_gateway_groups_edit.php

When editing a gateway group, the header is displayed as "System: Gateways: Edit gateway".
It should probably be "... Patrick Linstruth

05:02 AM Feature #2859: Allow to configure different mac addresses for multiple VLANs on same physical interface

how to do that coz i have just one nic and 4 VLANS configured on it, 2 WAN and 2 LAN Bipin Chandra

04:54 AM Feature #2859 (Feedback): Allow to configure different mac addresses for multiple VLANs on same physical interface

VLANs follow the same mac address of parent interface. If it's possible, spoof the mac on parent interface to check i... Renato Botelho

02:11 AM Bug #2861 (Resolved): IPSec Status Broken

Chris Buechler

02:09 AM Bug #2861: IPSec Status Broken

Thank you, works fine now. Sebastian Chrostek

03/07/2013

03:36 PM Bug #2712: Openvpn and Quagga cause route collision and race condition

I'm also experiencing this issue and applied the patch.
However, there is still a related issue. (I did not file thi... Johan Braeken

01:57 AM Bug #1629: invalid state table entries after WAN IP change

Same Problem here with 2.1 Beta (built on Fri Mar 1 21:17:31 EST 2013)
It seems that also states without the old I... Sebastian Chrostek

12:34 AM Bug #2627: Old delegated prefixes are not removed from the LAN interface

Testing was performed on:
2.1-BETA1 (amd64)
built on Wed Mar 6 15:11:09 EST 2013
FreeBSD 8.3-RELEASE-p6
Freshly... Anonymous

03/06/2013

09:50 PM Bug #2822: Direction wrong in traffic graph (lan)

Forum thread http://forum.pfsense.org/index.php/topic,59714.0.html
Now the bandwidth by IP display shows separate en... Phillip Davis

04:29 PM Bug #1629: invalid state table entries after WAN IP change

I’ve upgraded to the latest beta, but the problem still persists. Even when the modem is restartet and i don’t get a ... Matthias Dilbert

12:30 PM Bug #2861 (Feedback): IPSec Status Broken

Applied in changeset commit:2379c48e139eeebabd098a5d17062d8c463afe70. Jim Pingle

12:18 PM Bug #2861: IPSec Status Broken

on debugging this i saw another strange behaviour with this function:
function ipsec_fixup_ip($ipaddr) {
... Sebastian Chrostek

11:53 AM Bug #2861: IPSec Status Broken

the following two lines are also affected:
elseif (is_ipaddrv6($sp_*src*id))
$sp_dstid .= '/128';
should look ... Sebastian Chrostek

11:48 AM Bug #2861 (Resolved): IPSec Status Broken

Hi,
there is a bug in
/etc/inc/ipsec.inc
on line 409
the lines
if (!strstr($sp_dstid,"/")) {
if (is_ipad... Sebastian Chrostek

09:35 AM Bug #2860 (Closed): packages don't get restored

I have a box with pfSense 2.0.2 with several packages installed:
arping
Cron
mtr-nox11
OpenVPN Client Export Util... Alex Kolesnik

08:54 AM Feature #2847: Add a checkbox to flag a gateway as "down"

+1 same here sometimes i would like to disable my UMTS gateway a few days because of the bandwidth limit. Claudius Badmind

08:37 AM Bug #2647: rc.newwanip discovers wrong WAN IP when using DHCP

Could you help us here?
pfSense is loosing connectivity completely now and then.
Please tell me if there's anythi... Christoph Filnkößl

07:32 AM Bug #1053: CBQ per se, in kernel

hes back again so any clue on the cost Bipin Chandra

06:04 AM Feature #1855: NAT before IPsec VPN

Hi, sorry for this later testing.
I have figured out how to test it without upgrading to 2.1 in my production envir... Michele Di Maria

03:27 AM Bug #2832: Gateway status fails when 2 WANs have the same gateway.

Ermal Luçi wrote:
> Why do you have static gateways for your pppoe?
> Please take this to the forums since its a co... Mathieu Déom

03:15 AM Feature #2117 (New): 6RD support for ISPs like Swisscom

this wasn't for 6rd in general as I thought, rather a diff type.
Chris Buechler

03/05/2013

11:02 PM Feature #2859 (Duplicate): Allow to configure different mac addresses for multiple VLANs on same physical interface

i have a pppoe connection and my isp requires to spoof a fixed mac but it doesnt seem to work when using vlans, witho... Bipin Chandra

10:11 PM Bug #319 (Closed): system_usermanager privilege not working as expected

Chris Buechler

10:09 PM Bug #2067 (Resolved): pppoe-binding deleted

been fixed at some point since then Chris Buechler

10:08 PM Bug #2786 (Resolved): Setting MTU on VLAN does not set MTU on parent interface in 2.2

Chris Buechler

10:04 PM Bug #2364 (Resolved): PPPoE Server doesn't restart correctly

Chris Buechler

09:58 PM Bug #1284 (Resolved): Syslog does not work with CLOG disabled

works Chris Buechler

09:36 PM Bug #1153 (Resolved): Re-assignment of bridge interfaces should be restricted

Chris Buechler

09:28 PM Feature #2117 (Resolved): 6RD support for ISPs like Swisscom

Chris Buechler

09:28 PM Feature #1855 (Closed): NAT before IPsec VPN

works Chris Buechler

09:27 PM Bug #2414 (Resolved): IPv6 DHCP WAN, issue routing firewall-generated traffic

Chris Buechler

09:27 PM Feature #2413 (Resolved): Allow IPv6 interface configuration from the menu

Chris Buechler

09:26 PM Bug #2797 (Resolved): IPsec "connect" button does not work for IPv6

works Chris Buechler

09:20 PM Bug #2362 (Resolved): Deleting last/only port forward doesn't remove from secondary

Chris Buechler

09:06 PM Feature #2858 (Closed): Do not route rules to default gateway when its own gateway is down

Current Behavior:
When an OVPN client connection goes down, any policy based routing rules pointing to the ovpnc gat... Shawn Bruce

09:06 PM Bug #2555: check_reload_status consumes 100% CPU usage

Unfortunately I have moved on from pfsense so I can't recheck to see if this has been resolved in later versions stil... Snowy Maslov

09:03 PM Bug #2555 (Resolved): check_reload_status consumes 100% CPU usage

There are a wide range of issues unrelated to check_reload_status that can cause this. At the time of the original re... Chris Buechler

08:56 PM Bug #2746 (Resolved): IPv6 IPSEC shows down but is actually not...

look to all work Chris Buechler

08:55 PM Bug #2805 (Resolved): Firewall Rules Interface select causes javascript error

Chris Buechler

08:54 PM Bug #2574 (Closed): Failure of secondary radius server causes PPTP authentication to hang even if primary is working!

problem as described doesn't actually exist. Guessing a GRE NAT issue from the description. Chris Buechler

08:52 PM Bug #2682 (Closed): User Manager server settings appear/disappear randomly, although they still appear to work in 2.1

Chris Buechler

08:52 PM Bug #2816 (Resolved): "none" is not a valid local P2 setting

Chris Buechler

08:49 PM Bug #2842 (Resolved): IPsec status broken

Chris Buechler

08:48 PM Feature #814 (Resolved): GUI should allow to bind openvpn on different ip same port

Chris Buechler

08:47 PM Bug #2518 (Resolved): Gateway in DHCP Server Doesn't Use Default Setting

Chris Buechler

08:43 PM Bug #2677 (Resolved): Dyndns debug file written with ascii string \n instead of line-feed

Chris Buechler

08:42 PM Bug #2804 (Resolved): firewall_rules.php

Chris Buechler

08:42 PM Feature #2768 (Resolved): Don't allow adding IP Alias or CARP VIP on network or broadcast addresses

Chris Buechler

08:41 PM Bug #2836 (Resolved): encrypted backups with RRD data are unrestorable

Chris Buechler

08:40 PM Bug #2837 (Resolved): Interface group rules are incorrectly ordered in the ruleset

Chris Buechler

03:25 PM pfSense Packages Bug #2857: webConfigurator openvpn form multiplication

It's easy to reinstall this package at System: Package Manager. I guess additional warning will be fine.
Is it enou... Stepan Karandin

02:28 PM pfSense Packages Bug #2857 (Rejected): webConfigurator openvpn form multiplication

You have somehow installed the tap fix package multiple times. Not a GUI bug. Jim Pingle

02:19 PM pfSense Packages Bug #2857: webConfigurator openvpn form multiplication

... Stepan Karandin

02:08 PM pfSense Packages Bug #2857 (Rejected): webConfigurator openvpn form multiplication

2.0.2-RELEASE (i386)
built on Fri Dec 7 16:30:29 EST 2012
FreeBSD 8.1-RELEASE-p13
https://*/vpn_openvpn_server.p... Stepan Karandin

03:17 PM Bug #2412: inbound 6to4 traffic does not work in pf

Can you be more specific on qwhat does not work? Ermal Luçi

02:00 PM Bug #2627: Old delegated prefixes are not removed from the LAN interface

Applied in changeset commit:1fadb9d1129b68572e04c3fd7b12fe4bd0098519. Ermal Luçi

02:00 PM Bug #2627 (Feedback): Old delegated prefixes are not removed from the LAN interface

Applied in changeset commit:afe4f2da5079fc68cd0fcdb8d5ba65b173dd5726. Ermal Luçi

01:06 PM Bug #2780 (Feedback): CP: passthough has no effect

Ermal Luçi

01:00 PM Bug #2822: Direction wrong in traffic graph (lan)

Applied in changeset pfsense-tools:commit:d09e8fddd50e95f731f7cef8d1db92ba1b4f2398. Ermal Luçi

12:49 PM Bug #2822 (Feedback): Direction wrong in traffic graph (lan)

Patch pushed test with new snapshots. Ermal Luçi

12:10 PM Bug #2832 (Closed): Gateway status fails when 2 WANs have the same gateway.

Why do you have static gateways for your pppoe?
Please take this to the forums since its a configuration issue rathe... Ermal Luçi

07:57 AM Bug #2641: mac spoof on wan (pppoe) doesnt spoof

this ticket needs to be opened again as mac spoofing when working with vlans stopped working, ill try without vlans t... Bipin Chandra

03/04/2013

11:50 AM pfSense Packages Bug #2855: OpenVPN Client Export Utility shows deleted user certificates

Sorry for the noise, you are right. Thanks for the superfast support. Daniel Migowski

11:48 AM pfSense Packages Bug #2855: OpenVPN Client Export Utility shows deleted user certificates

System > Cert Manager, Certificates tab.
Read the notes carefully when it prompts you to delete the user certifica... Jim Pingle

11:47 AM pfSense Packages Bug #2855: OpenVPN Client Export Utility shows deleted user certificates

Please reopen, I am willing to provide further info if you need some. Daniel Migowski

11:45 AM pfSense Packages Bug #2855: OpenVPN Client Export Utility shows deleted user certificates

For the preceeding comment... Daniel Migowski

11:45 AM pfSense Packages Bug #2855: OpenVPN Client Export Utility shows deleted user certificates

This is not a browser issue. There was never more than one not deleted cert active, and this is what I get (See attac... Daniel Migowski

11:39 AM pfSense Packages Bug #2855 (Rejected): OpenVPN Client Export Utility shows deleted user certificates

Unable to reproduce the problem. Please post in the forum for more help.
Deleted certificates are no longer in the... Jim Pingle

11:35 AM pfSense Packages Bug #2855 (Rejected): OpenVPN Client Export Utility shows deleted user certificates

I am using the OpenVPN Client Export Utility v1.0.4, and created a few certs for users, but these deleted certificate... Daniel Migowski

11:38 AM pfSense Packages Bug #2856 (Resolved): OpenVPN Client Export Utility does not handle Spaces in Common Name (CN) of user certificate

I am using the OpenVPN Client Export Utility v1.0.4, and tried to create an "archive" export (the one with the .ovpn-... Daniel Migowski

07:21 AM Bug #2854 (Duplicate): squid with multi wan doesnt work as intended, will route out of default wan1 inspite of configuring it to router out of wan2

squid always routes out of default wan1 in spite of it configured in transparent mode and local ip set to loopback an... Bipin Chandra

07:00 AM Bug #2758 (Feedback): Old configuration remains when changing interface type

Applied in changeset commit:e12ad49f4621ec9e99ca829c2d7188ad456638f8. Renato Botelho

06:50 AM Bug #2786 (Feedback): Setting MTU on VLAN does not set MTU on parent interface in 2.2

Applied in changeset commit:4a7352101fbd6901b46a3b6a9a3c00d23b75f0e1. Renato Botelho

06:40 AM Bug #2852 (Feedback): interfaces.php static route check too strict

Applied in changeset commit:e480d64bc5eb7a9accaad93b8845df1bf8bbb2f3. Renato Botelho

06:31 AM Feature #2853 (Rejected): OpenVPN RADIUS accounting

Duplicate of #1434 Jim Pingle

03:49 AM Feature #2853: OpenVPN RADIUS accounting

it's not designed to, hence a feature request. Chris Buechler

03:42 AM Feature #2853 (Rejected): OpenVPN RADIUS accounting

OpenVPN Server dose not send accounting packet for radius. Nima Mohammadi

02:49 AM pfSense Packages Bug #2624: Varnish3 Package + GUI seems broken

Pull request #396 solves this Torben Hørup

03/03/2013

01:20 PM pfSense Packages Feature #2220: Varnish 3 does not have the ability to change vcl_deliver function

Nice one, but you will get more success on getting it into main branch if you create a pull request with the changes. Torben Hørup

12:52 PM pfSense Packages Bug #2624: Varnish3 Package + GUI seems broken

the LB director page is broken by this commit https://github.com/bsdperimeter/pfsense-packages/commit/9b20c9278aaf542... Torben Hørup

09:53 AM pfSense Packages Bug #2851: Varnish3 config: add option to disable probing

Pull request added: https://github.com/bsdperimeter/pfsense-packages/pull/393 Torben Hørup

05:47 AM Bug #2852 (Resolved): interfaces.php static route check too strict

interfaces.php checks for "This IPv4/IPv6 address conflicts with a Static Route" are too strict. Rather than only che... Chris Buechler

03/02/2013

06:46 PM pfSense Packages Bug #2851: Varnish3 config: add option to disable probing

please make a pull request with your changes.
https://help.github.com/articles/using-pull-requests
Chris Buechler

02:27 PM pfSense Packages Bug #2851: Varnish3 config: add option to disable probing

Hmm got the patches reversed. Please ignore/delete the previous and use these instead... Torben Hørup

02:23 PM pfSense Packages Bug #2851: Varnish3 config: add option to disable probing

Second patch: respect the probe_disable option in code generator:... Torben Hørup

02:22 PM pfSense Packages Bug #2851: Varnish3 config: add option to disable probing

First patch: add a disable option to gui:... Torben Hørup

02:20 PM pfSense Packages Bug #2851 (Resolved): Varnish3 config: add option to disable probing

Probing is not relevant for all backend targets. Eg: i currently use a varnish setup where a single backend target is... Torben Hørup

05:25 AM Feature #2850 (Resolved): add units in ntp status page

Hi, I am trying to set up a stratum 1 ntp server with a serial gps (if that is what it is called)
and when I am chec... Kristoffer Øyjord

04:42 AM Feature #2847: Add a checkbox to flag a gateway as "down"

+1 - quite often I have ISPs with links that lose 10-20% packets for a few days. Call the ISP, they know they have a ... Phillip Davis

01:43 AM Feature #2849 (Resolved): IKEv2 support for IPsec

Hi dear pfSense devs!
One handicap i find in pfSense is the lack ok IKEv2 which guarantees smooth operation for ro... Georgios Tsalikis

03/01/2013

08:39 AM Bug #1053: CBQ per se, in kernel

I don't know for sure. Ermal is away this week he may be able to give you an idea when he's back. Jim Pingle

08:10 AM Bug #1053: CBQ per se, in kernel

how much funding would be required to fix it? Bipin Chandra

06:45 AM Bug #1053: CBQ per se, in kernel

It may be possible to fix eventually, but it's likely not a simple answer. If the fix came from upstream it would be ... Jim Pingle

06:39 AM Bug #1053: CBQ per se, in kernel

so im assuming its not possible to fix this until some1 from FreeBSD does? Bipin Chandra

06:30 AM Bug #1053: CBQ per se, in kernel

Doesn't appear to be specific to us, and has been around a while...
http://lists.freebsd.org/pipermail/freebsd-pf/20... Jim Pingle

06:10 AM Bug #1053: CBQ per se, in kernel

we r in 2.1 and no sign of fixing this Bipin Chandra

07:56 AM Feature #2847 (Resolved): Add a checkbox to flag a gateway as "down"

Occasionally, the Multi-WAN gateway detection mechanisms are not very helpful in disabling a WAN that has become unus... Jim Pingle

07:50 AM Feature #2768 (Feedback): Don't allow adding IP Alias or CARP VIP on network or broadcast addresses

Applied in changeset commit:6b23c19a15eb621208fa6d6fc5a8b97c3dd6ff97. Renato Botelho

06:49 AM Bug #2756: SNMPD problems when binding pppoe interface

Okay after finding 2 bugs u send me to a forum ... okay noted
btw i use 2 wan interfaces Claudius Badmind

05:04 AM Bug #2756 (Feedback): SNMPD problems when binding pppoe interface

I did a lot of testing here, with snmp configured to bind a pppoe interface, every time pppoe disconnects and reconne... Renato Botelho

04:35 AM Bug #2756 (New): SNMPD problems when binding pppoe interface

Renato Botelho

05:41 AM Bug #2780: CP: passthough has no effect

Just updated to snapshot Wed Feb 27 and I confirme that the problem is fixed now, both MAC passthrough and Allowed IP... Daniel Berteaud

05:28 AM Bug #2483 (Closed): IPv6 Interface Aliases not functioning

It works fine these days Renato Botelho

05:22 AM Bug #2633: Captive Portal timeouts cause users to be stuck in limbo

Changes were made on Captive Portal since last month, could you please try a recent snapshot? Renato Botelho

03:03 AM Feature #2781 (Resolved): Hierarchical view of "Status-Queues" page

thanks Chris Buechler

03:02 AM Feature #2781: Hierarchical view of "Status-Queues" page

well, it seems all the issues about this task has been solved... if no one has nothing to say, I think we can close i... Michele Di Maria

02/28/2013

04:19 PM Feature #1594 (Closed): numbers in "Interface Group" names

Renato Botelho

07:10 AM Bug #2798: Captive Portal does not capture anyone

You mentioned it happens when you enable/disable alias for pfblocker. Have you tried to disable pfblocker and check i... Renato Botelho

02/27/2013

11:38 PM Bug #2844 (Resolved): hide "full backup" option on nano

Chris Buechler

10:01 PM Bug #2844: hide "full backup" option on nano

All above stuff hidden on build:
2.1-BETA1 (i386)
built on Wed Feb 27 15:57:21 EST 2013
FreeBSD 8.3-RELEASE-p6
No... Phillip Davis

05:10 AM Bug #2844 (Feedback): hide "full backup" option on nano

Applied in changeset commit:9beebb5e54428ada74c902a091a6992f4583f370. Renato Botelho

03:55 AM Bug #2844: hide "full backup" option on nano

And the System->Firmware, Restore Full Backup tab is also not relevant on nano installs IMHO. Phillip Davis

04:14 PM pfSense Packages Bug #2845 (Closed): bandwidthd keeps saying "Please start bandwidthd to populate this directory." even after its started.

Installed bandwidthd on pfSense-2.0.2-RELEASE, it always says "Please start bandwidthd to populate this directory." w... M K

01:30 PM Feature #1550 (Feedback): used + active + ready should match # of tickets

Applied in changeset commit:5b13c47cb2391da39472aeed5f6269a913ae831a. Renato Botelho

12:18 PM Feature #2439: XEN Para-virtualized Drivers Support

Has anyone looked into this yet? I would imagine it wouldn't be too much trouble to include the xenhvm drivers to at ... Jupiter Vuorikoski

09:36 AM Bug #2841 (Feedback): input validation on IPv6 static routes needs to take link-local into consideration

this doesn't actually appear to be an issue, awaiting feedback on http://forum.pfsense.org/index.php/topic,59374.0.html Chris Buechler

08:29 AM Bug #2780: CP: passthough has no effect

Since when to/from/both direction options were removed on commit:aea564088a it started to consider Allowed IPs just a... Renato Botelho

02/26/2013

10:38 PM Bug #2844 (Resolved): hide "full backup" option on nano

The "Perform full backup prior to upgrade" option should only be available on full installs since nano has an alterna... Chris Buechler

09:59 AM Bug #2843 (Feedback): Easy Rule: Pass failed for IPv6

Should be fixed by commit:aea834001cdfc129d1dc64209c4871a8c06bc1a9 Jim Pingle

08:28 AM Bug #2843 (Resolved): Easy Rule: Pass failed for IPv6

When trying to create an "Easy Rule: Pass" within the Firewall logs the pass rule is created but the subnet is wrong.... Thomas Rieschl

05:40 AM Bug #2842: IPsec status broken

Applied in changeset commit:ed5f7e9ebd5b00018dc99dc00ea36ce752a90b5b. Renato Botelho

05:11 AM Bug #2842: IPsec status broken

emailed it to you Chris Buechler

04:57 AM Bug #2842 (Feedback): IPsec status broken

Do you have the output of 'setkey -D' at the time error happened? Renato Botelho

02/25/2013

11:57 PM Bug #2406 (Resolved): No IP alias within the subnet of a CARP IP can be deleted

This is fixed. You can't remove the last IP alias on the subnet of a CARP IP because it'll break CARP, you have to de... Chris Buechler

11:52 PM Bug #2406: No IP alias within the subnet of a CARP IP can be deleted

It is the last one. pfSense should be able to determine if the alias type is CARP or IP Alias and let you remove any ... Richard Adams

09:36 PM Bug #2842: IPsec status broken

someone please follow up on VCZ-534999 when this is resolved Chris Buechler

09:33 PM Bug #2842 (Resolved): IPsec status broken

IPsec status on v4 connections is broken in recent snapshots (not sure how recent, but it's a regression from the las... Chris Buechler

09:24 PM Bug #2841 (Closed): input validation on IPv6 static routes needs to take link-local into consideration

The input validation on IPv6 static routes requires the gateway IP to be on the interface's configured subnet. It's a... Chris Buechler

03:52 PM Bug #2074 (Resolved): Changing interface IP changes interface assignment as well

Renato Botelho

03:49 PM Bug #1118 (Resolved): Adding NAT rule based on a NAT rule moves it to bottom of list

Renato Botelho

03:48 PM Bug #2829 (Resolved): CARP settings overwrite prefixlen of IPv6 address with prefixlen of IPv4 address on edit

Renato Botelho

03:47 PM Bug #2491 (Resolved): disabling pfsync doesn't actually disable pfsync

Renato Botelho

03:46 PM Bug #2827 (Resolved): changing "IPv6 Configuration Type" dropdown results in error if you have an old config.xml with unmigrated <dhcpd6> block

Renato Botelho

03:46 PM Bug #2824 (Resolved): IP alias VIP stacked on CARP VIP interface has a blank "Interface" column on VIP list

Renato Botelho

03:45 PM Todo #1723 (Resolved): PPTPd and all mpd based services need more checks

Renato Botelho

03:44 PM Bug #2789 (Closed): Bug with DHCPD, with the last upgrade from 2.1

It's not reproducible, seems to be a local issue instead of a bug on pfSense. Please try to find help in forums and/o... Renato Botelho

01:40 PM Bug #2837 (Feedback): Interface group rules are incorrectly ordered in the ruleset

Applied in changeset commit:8e479c61bc77a6cb2ea284325520cf7a31315c81. Renato Botelho

09:55 AM Bug #2837 (New): Interface group rules are incorrectly ordered in the ruleset

Close but a little more needs fixed. My manual groups are getting sorted properly, but the VPN rules are also technic... Jim Pingle

09:40 AM Bug #2837 (Feedback): Interface group rules are incorrectly ordered in the ruleset

Applied in changeset commit:06182467540b978ef7dccdf311c7677014c04beb. Renato Botelho

12:27 PM Bug #2838: nanobsd on alix wont boot if usb flash drive attached at boot, stuck on external config loader

i get this when i run the first command
[2.1-BETA1][root@firewall.xbipin]/root(8): dd if=/dev/zero of=/dev/da0 bs=... Bipin Chandra

12:22 PM Bug #2838: nanobsd on alix wont boot if usb flash drive attached at boot, stuck on external config loader

Yes, I put all of the commands I used in my ticket update when I closed it. And please, move this to a forum thread, ... Jim Pingle

12:21 PM Bug #2838: nanobsd on alix wont boot if usb flash drive attached at boot, stuck on external config loader

can u tell me how did u format the drive?
is this command fine?
newfs -U /dev/da0s1 Bipin Chandra

11:39 AM Bug #2838 (Closed): nanobsd on alix wont boot if usb flash drive attached at boot, stuck on external config loader

This really belongs on a forum thread, not the ticket system, until a bug is actually confirmed.
I can't reproduce ... Jim Pingle

11:01 AM Bug #2838: nanobsd on alix wont boot if usb flash drive attached at boot, stuck on external config loader

do u want access to mine right now? Bipin Chandra

10:56 AM Bug #2838 (New): nanobsd on alix wont boot if usb flash drive attached at boot, stuck on external config loader

Couldn't reproduce it on VMs and I don't have an alix board available for testing at this moment Renato Botelho

08:10 AM Bug #2838: nanobsd on alix wont boot if usb flash drive attached at boot, stuck on external config loader

after boot is finished, i plugged in the usb and went into shell and typed the command and this is what i get
[2.1... Bipin Chandra

08:00 AM Bug #2838: nanobsd on alix wont boot if usb flash drive attached at boot, stuck on external config loader

What happens if, after boot is finished, you plug the flash drive and run:... Renato Botelho

06:11 AM Bug #2838: nanobsd on alix wont boot if usb flash drive attached at boot, stuck on external config loader

while ur at this i noticed one more bug not related to this which prevents a system reboot
Warning: Invalid argume... Bipin Chandra

06:10 AM Bug #2838: nanobsd on alix wont boot if usb flash drive attached at boot, stuck on external config loader

i get this when debug is true
External config loader 1.0 is now starting... da0s1
/sbin/mount -t msdosfs /dev/da0... Bipin Chandra

05:46 AM Bug #2838 (Feedback): nanobsd on alix wont boot if usb flash drive attached at boot, stuck on external config loader

Renato Botelho

05:45 AM Bug #2838: nanobsd on alix wont boot if usb flash drive attached at boot, stuck on external config loader

Could you please edit /etc/ecl.php, change the line 37 from:... Renato Botelho

01:39 AM Bug #2838 (Closed): nanobsd on alix wont boot if usb flash drive attached at boot, stuck on external config loader

i have a lexar 8GB USB flash drive, i created one partition and formatted with "newfs -U /dev/da0s1". now when i rebo... Bipin Chandra

10:20 AM Bug #2780: CP: passthough has no effect

Also replicated here. Happy to provide debug info if it's required.
Phil Phil Lavin

10:17 AM Bug #2840 (Rejected): Captive Portal "Allowed" broken

Duplicate of #2780 Jim Pingle

10:12 AM Bug #2840 (Rejected): Captive Portal "Allowed" broken

On a recent upgrade, this stopped working. It was originally working with an IP passthrough to 8.8.8.8 (DNS) and host... Phil Lavin

09:20 AM Bug #2598 (Resolved): reply-to on IPv4+6 rules breaks v6

It creates two rules because it has to. On WAN without the default gateway it needs to add reply-to on the rules sepa... Jim Pingle

08:48 AM Bug #2598: reply-to on IPv4+6 rules breaks v6

This works now for dualstack rules on WAN. But it also creates 2 separate rules on other (OPT) interfaces for dual-st... Bernhard Lichtinger

06:55 AM Feature #2839 (Closed): MultiWAN channel up/down notification

After channel gets down, the notification is sent, while when it's back up, no notifications sent. Small fixing patch... Alex Kolesnik

02/24/2013

11:58 PM Bug #1838 (Resolved): Dynamic DNS disabled checkbox doesn't work

Chris Buechler

10:30 PM Bug #1838: Dynamic DNS disabled checkbox doesn't work

Disabled 1 of my DynDNS entries. The regular update checks for that entry do not happen any more (as required), and o... Phillip Davis

11:56 PM Bug #2835 (Resolved): fadvise memory leak in FreeBSD 8.3-RELEASE

Chris Buechler

10:11 PM Bug #2835: fadvise memory leak in FreeBSD 8.3-RELEASE

From a system before upgrade:
[2.1-BETA1]/root(1): uptime
9:02AM up 2 days, 16:19, 2 users, load averages: 1.56, ... Phillip Davis

09:00 AM Bug #2835 (Feedback): fadvise memory leak in FreeBSD 8.3-RELEASE

Applied in changeset pfsense-tools:commit:548949d8726b5660d288336e8679e48f3b8cd2ff. Renato Botelho

08:00 AM Bug #2836: encrypted backups with RRD data are unrestorable

Applied in changeset commit:343266ccf71605dbde9aff845f3075f3c090a829. Renato Botelho

07:50 AM Bug #2836 (Feedback): encrypted backups with RRD data are unrestorable

Applied in changeset commit:4cfd23901d1da439a8373e90142ec175c03d7dab. Renato Botelho

07:56 AM Bug #2406 (Feedback): No IP alias within the subnet of a CARP IP can be deleted

As proposed on bug description, the error still shows up when you try to remove the last IP alias, but do not complai... Renato Botelho

02/23/2013

08:10 PM Bug #2837 (Resolved): Interface group rules are incorrectly ordered in the ruleset

The rules are supposed to be ordered like so:
Floating rules, interface group rules, user rules
But currently t... Jim Pingle

06:42 PM Feature #2466 (Resolved): Allow single firewall rules to apply to both IPv4 and IPv6 simultaneously

Thanks. You can mix v4 and v6 within aliases, we do extensively on our production networks. If there's a scenario whe... Chris Buechler

01:38 AM Bug #2836 (Resolved): encrypted backups with RRD data are unrestorable

an encrypted backup config.xml including RRD data is unrestorable. As discussed here:
http://lists.pfsense.org/pipe... Chris Buechler

02/22/2013

04:29 PM Todo #2485 (Resolved): Add Status > Services entry for radvd if RA is enabled

Jim Pingle

04:26 PM Todo #2485: Add Status > Services entry for radvd if RA is enabled

On this snapshot:
2.1-BETA1 (i386) built on Wed Feb 20 19:15:36 EST 2013
I see radvd in the Status: Services s... Bruce Mah

04:15 PM Bug #2820 (Resolved): Unable to generate CSR in 2.1BETA1

Jim Pingle

04:14 PM Bug #2820: Unable to generate CSR in 2.1BETA1

This is now working for me as of this snapshot: 2.1-BETA1 (i386) built on Wed Feb 20 19:15:36 EST 2013.
Bruce Mah

03:40 PM Feature #2466: Allow single firewall rules to apply to both IPv4 and IPv6 simultaneously

I can confirm this is working. Now if only you could mix IPv4 and IPv6 within aliases. Richard Adams

01:33 PM Bug #2039 (Resolved): Adding a local interface conflicting with a static route in the routing table fails to add the link route

thanks Renato Botelho

01:17 PM Bug #2039: Adding a local interface conflicting with a static route in the routing table fails to add the link route

Tested by adding a static route and then creating an opt interface and trying to assign an address within a static ro... Richard Adams

01:15 PM Bug #2412 (New): inbound 6to4 traffic does not work in pf

Jim Pingle

11:50 AM Bug #2412: inbound 6to4 traffic does not work in pf

I have tested with:
2.1-BETA1 (i386)
built on Thu Feb 21 18:19:58 EST 2013
FreeBSD 8.3-RELEASE-p6
The problem... Richard Adams

01:14 PM Bug #2406 (New): No IP alias within the subnet of a CARP IP can be deleted

Jim Pingle

01:03 PM Bug #2406: No IP alias within the subnet of a CARP IP can be deleted

Using:
2.1-BETA1 (amd64)
built on Thu Feb 21 23:02:24 EST 2013
FreeBSD 8.3-RELEASE-p6
with the latest gitsync.
... Richard Adams

12:59 PM Feature #804 (Resolved): Ability to enable/disable static routes

thanks Chris Buechler

12:53 PM Feature #804: Ability to enable/disable static routes

I have tested and this is working as expected. I added an IPV6 route and then removed it. Routing table had it when i... Richard Adams

12:10 PM Bug #1838 (Feedback): Dynamic DNS disabled checkbox doesn't work

Applied in changeset commit:d348160eb4d400a03aa7cbdc8e8f5d4c400b341f. Renato Botelho

11:30 AM Bug #2600 (Feedback): DHCP Server different parameter order in config.xml interrupts peer groups

Applied in changeset commit:c4bd43ccba1be01cf3ef05fea89c9730dc633096. Renato Botelho

10:48 AM Bug #2835 (Resolved): fadvise memory leak in FreeBSD 8.3-RELEASE

From pfSense forum http://forum.pfsense.org/index.php/topic,59249.0.html :
Apparently there is a memory leak in the ... Phillip Davis

09:00 AM Bug #2303 (Feedback): SPD on secondary not cleared after config sync

Applied in changeset commit:d026178fa695f607f3b490978a9f4113fa7b111d. Renato Botelho

08:27 AM Feature #2834 (Needs Patch): carp+pfsync: add ability to prefer one node as master

This request is done because we have the situation of a lot (3x /27) ip-addresses with most of them guarded by carp. ... Alexander Swen

06:40 AM Bug #2491 (Feedback): disabling pfsync doesn't actually disable pfsync

Applied in changeset commit:b32ea59d5a45b86beee73d416462c01d1ac915ec. Renato Botelho

05:54 AM Bug #2012 (Resolved): 4th+ CARP member will not work with default automatic skew

Renato Botelho

02/21/2013

07:35 PM Bug #2555: check_reload_status consumes 100% CPU usage

Tracked down the issue to dhcp6c calling rc.newwanipv6 which called "filter reload" on check_reload_status.
The de... Ben Harris

04:11 PM Bug #2756: SNMPD problems when binding pppoe interface

hmm after update still the same .... any idea Claudius Badmind

03:21 PM Feature #2241: DHCP - prevent dhcpd from handing out leases to certain MAC addresses

Unrelated to this ticket. Open a new feature request ticket for each of those separately. Jim Pingle

03:19 PM Feature #2241: DHCP - prevent dhcpd from handing out leases to certain MAC addresses

Thank you for this patch, however I would still like to see 2 checkboxes added to the GUI to control the following fl... → luckman212

01:30 PM Bug #1118: Adding NAT rule based on a NAT rule moves it to bottom of list

Applied in changeset commit:5d764d64b999cd2f1c9b00c62771a18e05b52025. Renato Botelho

01:20 PM Bug #1118 (Feedback): Adding NAT rule based on a NAT rule moves it to bottom of list

Applied in changeset commit:3202763c8bdd2cd6821be7bc21829085548cc504. Renato Botelho

01:17 PM Bug #1118: Adding NAT rule based on a NAT rule moves it to bottom of list

Slightly related: using the + at the top of the NAT rules list adds the rule to the bottom, not the top. (could make ... Jim Pingle

12:20 PM Bug #1153 (Feedback): Re-assignment of bridge interfaces should be restricted

Applied in changeset commit:95540233e3b9d8c4be5616065edcc6e1f2e2f972. Renato Botelho

09:44 AM Bug #2833 (Resolved): Add a knob to prefer IPv4 over IPv6 for rare situations that require it

We should have a knob somewhere to let users prefer IPv4 over IPv6 in case they have broken IPv6 routing and need to ... Jim Pingle

09:30 AM Bug #2406 (Feedback): No IP alias within the subnet of a CARP IP can be deleted

Applied in changeset commit:b030e03510656584d1d29f3a1d355e4a6d947f04. Renato Botelho

08:21 AM Bug #1988 (Feedback): Static ARP entries attempted to be applied on disabled interfaces

Renato Botelho

08:21 AM Bug #1988 (New): Static ARP entries attempted to be applied on disabled interfaces

Renato Botelho

08:20 AM Bug #1988 (Feedback): Static ARP entries attempted to be applied on disabled interfaces

Applied in changeset commit:873e49ec1cf3a291c9267a5efca70d74481a126b. Renato Botelho

08:10 AM Bug #2039 (Feedback): Adding a local interface conflicting with a static route in the routing table fails to add the link route

Applied in changeset commit:42fa2c01422e57fddea07352029530ace34363c4. Renato Botelho

08:04 AM Bug #2010 (Feedback): VLAN parent interface / altq interface wrong assumptions about int_family name format

Renato Botelho

04:56 AM Bug #2010 (New): VLAN parent interface / altq interface wrong assumptions about int_family name format

Renato Botelho

04:50 AM Bug #2010 (Feedback): VLAN parent interface / altq interface wrong assumptions about int_family name format

Applied in changeset commit:2ccac12588f59039c88d06126762f41be2f65ce2. Renato Botelho

06:24 AM Bug #2832 (Closed): Gateway status fails when 2 WANs have the same gateway.

I have 2 VDSL WANs using PPPoE connections but they have the same gateway and because of that pfsense gateway monitor... Mathieu Déom

02/20/2013

10:51 PM Bug #2831 (Rejected): Issue while connecting the openvpn

not a bug, post to the forum or mailing list Chris Buechler

10:48 PM Bug #2831 (Rejected): Issue while connecting the openvpn

Hi Team
I have set the Openvpn server in Pfsense.I have successfully connected through it from another network.Bu... zam kp

10:15 PM Bug #2819: Unconstrained memory growth of tcpdump

can attach it here if it's under 5 MB gzipped/bzipped which it might be at that. otherwise can email it to me and I c... Chris Buechler

04:10 PM Bug #2819: Unconstrained memory growth of tcpdump

Jim, I was able to reproduce the situation. 3 days after reboot, tcpdump process grew to 25 MB from 2.5 MB. I ... Irving Popovetsky

10:12 PM Bug #2830 (Rejected): a Bug for 100Mb interface?

configuration problem, post to the forum or mailing list Chris Buechler

09:50 PM Bug #2830: a Bug for 100Mb interface?

--[adsl router] ------192.168.2.152 (100Mb)[win7]
|
|
---192.168.... scott gao

09:47 PM Bug #2830 (Rejected): a Bug for 100Mb interface?

test env:win7+vmware7+pfsense2.0.2+winxp
--[adsl router] ------192.168.2.152 (100Mb)[win7]
... scott gao

03:54 PM Bug #2828: CARP does not work on dual-homed VMware ESXi hosts without a workaround on the ESX host

Oops, I was dead wrong, other machines see the same behaviour as soon as Promiscous Mode is enabled on the VMware por... Bernhard Schmidt

07:54 AM Bug #2828: CARP does not work on dual-homed VMware ESXi hosts without a workaround on the ESX host

Weird thing is, it only seems to affect pfSense boxes. We have tons of Linux and Windows machines, even in the same p... Bernhard Schmidt

07:28 AM Bug #2828: CARP does not work on dual-homed VMware ESXi hosts without a workaround on the ESX host

The workaround for altering the ESX host is correct and works for most people, since it's a problem with ESX.
If w... Jim Pingle

06:00 AM Bug #2828 (Closed): CARP does not work on dual-homed VMware ESXi hosts without a workaround on the ESX host

Certain active/active VMware ESXi configurations loop back CARP multicast frames sent by the machine. This breaks CAR... Bernhard Schmidt

12:13 PM Bug #1877 (Resolved): (cosmetic) aliases-edit markup to wide for background

It was already fixed in 2.1. Renato Botelho

09:20 AM Bug #2829 (Feedback): CARP settings overwrite prefixlen of IPv6 address with prefixlen of IPv4 address on edit

Applied in changeset commit:ebbfc4b771a16b1aed5e97c2aaa2bee3db6b2e4d. Renato Botelho

07:18 AM Bug #2829 (Resolved): CARP settings overwrite prefixlen of IPv6 address with prefixlen of IPv4 address on edit

* Add IPv4 CARP address to WAN, i.e. 10.10.10.1, prefixlen /29
* Add IPv6 CARP address to WAN, i.e. 2001:db8:0:e901:... Bernhard Schmidt

07:54 AM Bug #2826 (Resolved): Status > Traffic Graphs gives javascript alert when changing interfaces.

Renato Botelho

06:40 AM Bug #2827 (Feedback): changing "IPv6 Configuration Type" dropdown results in error if you have an old config.xml with unmigrated <dhcpd6> block

Applied in changeset commit:1f56ce58668708485f9d95c9b01e72519dde87b4. Renato Botelho

04:25 AM Feature #2781: Hierarchical view of "Status-Queues" page

Well, the new status queues page still doesn't show Borrows, Suspends or Drops:... Petri Oksanen

01:34 AM Feature #2781: Hierarchical view of "Status-Queues" page

Well, I think we can close this, or if you have any suggestions/problems please write me! Michele Di Maria

02/19/2013

03:55 PM Bug #2827 (Resolved): changing "IPv6 Configuration Type" dropdown results in error if you have an old config.xml with unmigrated <dhcpd6> block

I have upgraded my 2.1 from snapshot to snapshot for quite a long time and I now have accumulated 2 IPv6 dhcpd blocks... Dwayne Voelker

12:38 PM Bug #2786 (New): Setting MTU on VLAN does not set MTU on parent interface in 2.2

Renato Botelho

12:35 PM Bug #2758: Old configuration remains when changing interface type

This new version of the patch is working fine for all tests I've made here. Renato Botelho

12:14 PM Bug #2826 (Feedback): Status > Traffic Graphs gives javascript alert when changing interfaces.

Ermal Luçi

12:14 PM Bug #2826: Status > Traffic Graphs gives javascript alert when changing interfaces.

Should be fixed by latest commits.
Missed the ticket creation. Ermal Luçi

11:18 AM Bug #2826 (Resolved): Status > Traffic Graphs gives javascript alert when changing interfaces.

Status > Traffic Graphs gives javascript alert when changing interfaces. Just says "Error 0 -- error".
See http://... Jim Pingle

06:21 AM Bug #2822: Direction wrong in traffic graph (lan)

After investigation, i figured out the root cause of this issue. For LAN interface:
- pfSense_get_interface_stats(... Renato Botelho

05:21 AM pfSense Packages Feature #2825 (Resolved): OpenBGPd: Add options prepend-neighbor and prepend-self

To be able to more properly control traffic flow, adding "prepend-neighbor" and "prepend-self" to the list of options... Andreas Bjorshammar

02/18/2013

10:39 PM Bug #2820: Unable to generate CSR in 2.1BETA1

The change in comment #2 appears to get rid of "Please select a valid Digest Algorithm", but the error "Please select... Bruce Mah

07:50 AM Bug #2820 (Feedback): Unable to generate CSR in 2.1BETA1

Applied in changeset commit:24c0145c2cdb7eb8006020579c7c8b82f0108412. Jim Pingle

05:20 PM Bug #2824 (Feedback): IP alias VIP stacked on CARP VIP interface has a blank "Interface" column on VIP list

Applied in changeset commit:79ea2726b5c1c2a723e915a2d4d9cc983d216062. Renato Botelho

03:18 PM Bug #2824 (Resolved): IP alias VIP stacked on CARP VIP interface has a blank "Interface" column on VIP list

When you create an IP alias VIP and select a CARP VIP as its interface, it shows up properly on the VIP edit page, bu... Jim Pingle

03:19 PM Bug #2823 (Resolved): Unable to save changes on a CARP VIP

Works now, thanks! Jim Pingle

03:10 PM Bug #2823 (Feedback): Unable to save changes on a CARP VIP

Applied in changeset commit:4021ec36a9ce460b1501f42da8237d51bbedc611. Renato Botelho

11:47 AM Bug #2821: mobile ipsec problem since upgrade from pfsense 2.0.1 to 2.0.2

Same problem, on 2.0.2 no IPSec tunnel route added!
Oscar Oscar Francia

06:46 AM Bug #2806: General setup: Error when changing system DNS Server

Just for the record - a typo in the function name was fixed by https://github.com/bsdperimeter/pfsense/commit/df40755... Phillip Davis

02/17/2013

11:27 PM Bug #2823 (Resolved): Unable to save changes on a CARP VIP

If I try to edit and save a CARP VIP, changing nothing, the GUI rejects the change.... Jim Pingle

11:25 AM Bug #2065: PHP Warning on Interface Creation (master/IPv6 branch)

I have found at least a workaround for my issue, patch is included.
In /usr/local/www/interfaces.php the code that... Dwayne Voelker

09:41 AM Bug #2555: check_reload_status consumes 100% CPU usage

Amy Alvarez wrote:
> FYI this is still happening to me on 2.0.2 release.
I do have captive portal enabled, but I ... Amy Alvarez

09:38 AM Bug #2555: check_reload_status consumes 100% CPU usage

FYI this is still happening to me on 2.0.2 release. Amy Alvarez

07:59 AM Bug #2451 (Resolved): IPv6 rule: 'add network' becomes 'add single host'

Renato Botelho

12:19 AM Bug #2451: IPv6 rule: 'add network' becomes 'add single host'

The latest change fixed my problem, thank you! Anonymous

07:58 AM Bug #2818 (Resolved): IPSec phase2 "Automatically ping host" function broken. Bug confirmed.

Renato Botelho

07:58 AM Bug #2806 (Closed): General setup: Error when changing system DNS Server

There is no call to is_validip() on entire system.inc Renato Botelho

07:52 AM Bug #2791 (Resolved): Validation glitch with gateways added from Interfaces > [Name]

Renato Botelho

07:52 AM Bug #2780 (New): CP: passthough has no effect

Renato Botelho

07:50 AM Bug #2719 (Resolved): Deleting IPsec tunnel does not remove SPDs

Renato Botelho

07:38 AM Bug #1823 (Resolved): policy routing for firewall-initiated traffic only works for interface IPs

Renato Botelho

07:37 AM Bug #1629 (New): invalid state table entries after WAN IP change

Renato Botelho

07:33 AM Feature #1010 (Closed): Privilege setting for allowing login access through captive portal

Renato Botelho

06:30 AM Bug #2822 (Resolved): Direction wrong in traffic graph (lan)

On my LAN graph I see outgoing traffic (downloads) +graphed+ ok (out), but +listed+ under Bandwidth +IN+
2.0.2-REL... Danny Bogaards

02/16/2013

02:00 PM Bug #2451 (Feedback): IPv6 rule: 'add network' becomes 'add single host'

Applied in changeset commit:507aa90af48b14ffaab6664c708a3b03d723164c. Renato Botelho

12:45 AM Bug #2451 (New): IPv6 rule: 'add network' becomes 'add single host'

Jim Pingle

12:19 AM Bug #2451: IPv6 rule: 'add network' becomes 'add single host'

Maybe this change broke something, because I have created exactly the same rule on earlier snapshots without any prob... Anonymous

11:08 AM Bug #2818: IPSec phase2 "Automatically ping host" function broken. Bug confirmed.

Thanks for that Renato. :-)
//Dan Dan Lundqvist

10:00 AM Bug #2818: IPSec phase2 "Automatically ping host" function broken. Bug confirmed.

Applied in changeset commit:923e440b75eda660a5cdbd102912fe53d61d1237. Renato Botelho

11:03 AM Bug #2821: mobile ipsec problem since upgrade from pfsense 2.0.1 to 2.0.2

Jim P wrote:
> Discuss/troubleshoot on the forum. It comes up often and is always a settings issue.
Hi Jim.
I ... Dennis Neuhaeuser

11:00 AM Bug #2821 (Rejected): mobile ipsec problem since upgrade from pfsense 2.0.1 to 2.0.2

Discuss/troubleshoot on the forum. It comes up often and is always a settings issue. Jim Pingle

10:58 AM Bug #2821 (Rejected): mobile ipsec problem since upgrade from pfsense 2.0.1 to 2.0.2

since upgrade from 2.0.1 to 2.0.2 there is a problem with mobile ipsec connections:
the first client always connec... Dennis Neuhaeuser

12:45 AM Bug #2627 (New): Old delegated prefixes are not removed from the LAN interface

Jim Pingle

02/15/2013

11:58 PM Bug #1943: PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only

here is the thread at mpd forum, doesnt seem like a mpd issue but some network drivers
http://sourceforge.net/proj... Bipin Chandra

01:25 PM Bug #1943 (New): PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only

Renato Botelho

05:12 PM Bug #2818: IPSec phase2 "Automatically ping host" function broken. Bug confirmed.

I think I found the problem.
It needed to be even one more step out of the loop at the end of the foreach phase1 l... Dan Lundqvist

05:00 PM Bug #2818: IPSec phase2 "Automatically ping host" function broken. Bug confirmed.

Or there is something wrong so it doesn't create an array even if it suppose to do it (the $ipsecpinghosts*[]* )
Or... Dan Lundqvist

04:30 PM Bug #2818: IPSec phase2 "Automatically ping host" function broken. Bug confirmed.

*The correction does not work.*
The problem is that the $ipsecpinghosts is NOT treated as a table but rather as a si... Dan Lundqvist

04:20 AM Bug #2818 (Feedback): IPSec phase2 "Automatically ping host" function broken. Bug confirmed.

Applied in changeset commit:fa77faffbf284ce5e89b9bd36963a747adbf1fed. Renato Botelho

01:06 AM Bug #2818: IPSec phase2 "Automatically ping host" function broken. Bug confirmed.

Updated to "2.1-BETA1 (i386) built on Thu Feb 14 16:27:05 EST 2013" and
tried to tried to clear / apply / reconfigu... Dan Lundqvist

03:48 PM Bug #2065: PHP Warning on Interface Creation (master/IPv6 branch)

I have run into something very much like this (see http://forum.pfsense.org/index.php/topic,58966.0.html )
Trying ... Dwayne Voelker

03:37 PM Bug #2820 (Resolved): Unable to generate CSR in 2.1BETA1

Please see this thread for info.
http://forum.pfsense.org/index.php?topic=58971 Brandon Jenkins

01:37 PM Bug #1629: invalid state table entries after WAN IP change

To followup my previous post, I have verified that the WAN (em0) states are indeed flushed, however their correspondi... Dim Hatz

12:53 PM Bug #2756 (Feedback): SNMPD problems when binding pppoe interface

Renato Botelho

11:43 AM Bug #2756 (New): SNMPD problems when binding pppoe interface

This last change should fix the issue, please gitsync it or update to the next released snapshot, back snmp Bind Inte... Renato Botelho

11:40 AM Bug #2756 (Feedback): SNMPD problems when binding pppoe interface

Applied in changeset commit:7790196644a3cc38cc2ec7d0df01f164479b43be. Renato Botelho

11:33 AM Bug #2756 (New): SNMPD problems when binding pppoe interface

The problem is when snmpd starts the interface doesn't have the IP address set yet. And when it reconnect it crashes ... Renato Botelho

11:26 AM Bug #2756: SNMPD problems when binding pppoe interface

very nice! i tested it right now
after a reconnect the snmp stoped working
then i bind it to all interfaces an... Claudius Badmind

11:11 AM Bug #2756: SNMPD problems when binding pppoe interface

Could you please change "Bind Interface" to All to see if the error persists? Renato Botelho

12:40 PM Bug #2819: Unconstrained memory growth of tcpdump

Hi Jim, I agree there must be something else happening. I'm happy to Guinea pig my home pfSense router, which exh... Irving Popovetsky

12:10 PM Bug #2819: Unconstrained memory growth of tcpdump

I thought there was already an open ticket for this here on redmine but I don't see it now.
That is for the filter... Jim Pingle

12:06 PM Bug #2819 (Resolved): Unconstrained memory growth of tcpdump

The following process seems to grow in an unconstrained fashion:... Irving Popovetsky

11:12 AM Bug #2655 (Resolved): RRD Graphs for Captive Portal not working

Confirmed on forum it's now working. Renato Botelho

10:38 AM Todo #2817 (New): Back Unbound changes out of 2.1, revert to a package for now.

Looks like the code needs adjusted to account for PBI changes on 2.1.
http://forum.pfsense.org/index.php?topic=588... Jim Pingle

01:20 AM Todo #2817: Back Unbound changes out of 2.1, revert to a package for now.

The unbound package installs fine, but no binaries are installed:... Anonymous

07:54 AM Bug #2794 (Resolved): PHP Error on NTP

Jim Pingle

07:49 AM Bug #2794: PHP Error on NTP

This is resolved - tested in last night's snapshot. Phil Lavin

07:45 AM Bug #2349 (Resolved): vlan(4) needs altq adaption on FreeBSD 8.3++

Renato Botelho

07:21 AM Bug #2349: vlan(4) needs altq adaption on FreeBSD 8.3++

Upgraded last night - the wizard completed correctly without errors. Nice work :) Phil Lavin

07:43 AM Bug #2786 (Feedback): Setting MTU on VLAN does not set MTU on parent interface in 2.2

I did an attempt to implement a fix, please review and let me know if it's ok. Renato Botelho

04:50 AM Bug #2816 (Feedback): "none" is not a valid local P2 setting

Applied in changeset commit:508799c3794a9febb9e4abf7167171aa195e77d0. Renato Botelho

04:20 AM Bug #1681 (Feedback): OpenVPN tun IPs fail HTTP REFERER checks

Applied in changeset commit:71034b51ff8831b43cf70c6f26955e6e6bdee5ca. Renato Botelho

12:30 AM pfSense Packages Bug #2698: freeradius2 counter not working

Guys, sorry, yes the patch fix the issue, thanks!!!
http://forum.pfsense.org/index.php/topic,57303.0/all.html Peter Moreno

02/14/2013

06:20 PM Bug #2818 (Resolved): IPSec phase2 "Automatically ping host" function broken. Bug confirmed.

Tested on: 2.1-BETA1 (i386) built on Sun Feb 10 22:04:57 EST 2013
plus small manual correction from gitsync regard... Dan Lundqvist

03:49 PM Bug #355: syslog should not bind on *

Mh, I was googling for the wrong keywords (focusing on binding syslogd to a specific interface/address)...
Thanks f... Michele Di Maria

02:19 PM Bug #355: syslog should not bind on *

That has been documented for quite some time on the doc wiki:
http://doc.pfsense.org/index.php/Why_can%27t_I_query_S... Jim Pingle

02:15 PM Bug #355: syslog should not bind on *

Wow, yes. I just created a fake gateway using the local interface IP address (which is a bridge interface), and a sta... Michele Di Maria

01:59 PM Bug #355: syslog should not bind on *

It depends on the type of VPN. With OpenVPN it works fine, it just sources the syslog traffic from the tunnel interfa... Jim Pingle

01:56 PM Bug #355: syslog should not bind on *

Another issue related to this task is logging to a remote syslog server, where remote I mean to the other side of a P... Michele Di Maria

03:07 PM Bug #2349: vlan(4) needs altq adaption on FreeBSD 8.3++

Its for all vlans not specific to any driver. Ermal Luçi

07:50 AM Bug #2349: vlan(4) needs altq adaption on FreeBSD 8.3++

Can anyone speculate on if this will fix the same error with sk1_vlan1 or if the fix was only applicable to em* inter... Phil Lavin

11:50 AM Todo #2817 (Feedback): Back Unbound changes out of 2.1, revert to a package for now.

Applied in changeset commit:950c9a182eaacfbb6c48a6371affe7852ffb13ba. Warren Baker

11:41 AM Todo #2817 (Resolved): Back Unbound changes out of 2.1, revert to a package for now.

Unbound needs to be backed out of 2.1 and changed back into a package for now.
We can try integration again for 2.2. Jim Pingle

10:56 AM Bug #2627: Old delegated prefixes are not removed from the LAN interface

I am using the build below:... Anonymous

08:41 AM Bug #2812: Adding a one way phase 2 IPSec tunnel causes a config error

Ok, from my understanding of IPSec, I thought that was the case... but then I finally had a scenario where I thought ... William Hilsum

08:37 AM Bug #2812 (Rejected): Adding a one way phase 2 IPSec tunnel causes a config error

there is no such thing as a "one way" P2, the fact that "none" exists there is the actual problem. Your config isn't ... Chris Buechler

07:05 AM Bug #2812: Adding a one way phase 2 IPSec tunnel causes a config error

Please find it attached - first section is working phase 1, second is working phase 2, third is the faulty one way ph... William Hilsum

08:36 AM Bug #2816 (Resolved): "none" is not a valid local P2 setting

"none" recently started showing up in the "local network" field for IPsec P2s, which is invalid and needs to be remov... Chris Buechler

04:15 AM Bug #2362: Deleting last/only port forward doesn't remove from secondary

I don't believe option should be removed since it is still valid for rules from Master you don't want to sync.
- R... Renato Botelho

02:02 AM Bug #2362: Deleting last/only port forward doesn't remove from secondary

If those seciton need to be synched no matter what than its better to remove the options completely from the filter s... Ermal Luçi

02:00 AM Feature #1979: Allow user-defined rules to utilize built-in system aliases

IIrc you already can use the names of a port in /etc/services wherever a port is asked.
So instead of typing 80 you... Ermal Luçi

02/13/2013

10:54 PM Feature #1668 (Closed): OpenVPN Client Export support Tunnelblick

Just tested this and the current beta (didn't test the release) imported an "Other" type Inline config without any fu... Jim Pingle

05:50 PM Bug #2451 (Feedback): IPv6 rule: 'add network' becomes 'add single host'

Applied in changeset commit:965c3e23a60f25d263389bf02b685bb7f20f3915. Renato Botelho

05:31 PM Bug #2451: IPv6 rule: 'add network' becomes 'add single host'

OK it works correctly in the source box, but not the destination box. Jim Pingle

05:00 PM Bug #2451: IPv6 rule: 'add network' becomes 'add single host'

I couldn't reproduce it here. When I back to edit rule it's set as network and bitmask 32. Renato Botelho

03:31 PM Bug #2451 (New): IPv6 rule: 'add network' becomes 'add single host'

It's partially fixed but not 100%
If I enter 2a00:1450:: in a firewall rule as a network with a mask of /32 (which... Jim Pingle

07:10 AM Bug #2451 (Feedback): IPv6 rule: 'add network' becomes 'add single host'

Applied in changeset commit:cb2b59b89b4d7fb6449c0f45d142302dd2029373. Renato Botelho

05:32 PM Bug #1629: invalid state table entries after WAN IP change

Ermal, testing this feature on a pfsense box with a WAN interface that gets via DHCP an IP in a /24 subnet (i.e. it's... Dim Hatz

09:58 AM Bug #1629: invalid state table entries after WAN IP change

Thanks, it works with my VoIP device now. The states get killed correctly. Anonymous

03:26 PM pfSense Packages Feature #2736 (Resolved): Additional configuration options for SMTP, POP3 and IMAP Pre-Processors in snort.conf

Jim Pingle

03:19 PM pfSense Packages Feature #2736: Additional configuration options for SMTP, POP3 and IMAP Pre-Processors in snort.conf

This can be closed. These were incorporated in the other changes included in subsequent Pull Requests via Github. Bill Meeks

03:26 PM pfSense Packages Feature #2735 (Resolved): Improvement to Snort Rules Update Process

ok, thanks again! Jim Pingle

03:20 PM pfSense Packages Feature #2735: Improvement to Snort Rules Update Process

Yep. These, too, were part of the larger set of PulL Requests done in late Janaury and early February. This reqest ... Bill Meeks

02:49 PM Bug #2627: Old delegated prefixes are not removed from the LAN interface

I will wait for the updated snapshot. In the meantime I went on to disable the DHCPv6 client on the WAN interface (IP... Anonymous

02:19 PM Bug #2627: Old delegated prefixes are not removed from the LAN interface

Can you gitsync and try again, or wait for the next new snap? It may be that the last snap doesn't have the changes i... Jim Pingle

02:17 PM Bug #2627: Old delegated prefixes are not removed from the LAN interface

Running this build:
2.1-BETA1 (amd64)
built on Tue Feb 12 10:20:45 EST 2013
FreeBSD 8.3-RELEASE-p5
Whenever the WAN ... Anonymous

01:20 PM Bug #2362 (Feedback): Deleting last/only port forward doesn't remove from secondary

Applied in changeset commit:a1fb7d61c4be90e6b6fcbc44fd644677cb0761e4. Renato Botelho

09:43 AM Bug #2362: Deleting last/only port forward doesn't remove from secondary

Same happens for last/only filter rule. I'm working on a solution. Renato Botelho

08:36 AM Feature #1979: Allow user-defined rules to utilize built-in system aliases

Not sure we'd need much in the way of port aliases. We already have a ton of ports in the drop-down list on firewall ... Jim Pingle

08:26 AM Feature #1979: Allow user-defined rules to utilize built-in system aliases

as with anything else - when someone's willing to pay for it, or someone does it and submits a merge request. Chris Buechler

08:21 AM Feature #1979: Allow user-defined rules to utilize built-in system aliases

I'd like to push things a bit since this would really help a lot.
Jim P wrote:
> Some ideas:
> * Local Networks
... JD -

08:23 AM Bug #2756: SNMPD problems when binding pppoe interface

I figured out that every time my ISP reconnect me snmpd stop working that's why it wont start from the beginning also... Claudius Badmind

06:34 AM Feature #2815: Anonymizing the config during export on the backup page

We already do that for the copy included on /status.php, though the function needs updated since it needs to also cle... Jim Pingle

01:48 AM Feature #2815 (Resolved): Anonymizing the config during export on the backup page

It would be nice to be able to scramble sensitive data of the config of a box to easy the process for reporting issue... Ermal Luçi

03:27 AM Feature #1883: Diag > Limiter Info presentation enhancement

probably not Chris Buechler

01:32 AM Bug #2675 (Feedback): /tmp/.rc.prunecaptiveportal.running can be present on boot

Patch has been pushed that corrects this by ignoring alock if it has been created for more than 2 minutes(2 runs of p... Ermal Luçi

02/12/2013

11:47 PM Bug #2636: state mismatch issue on enc0 with amd64

on the one system of ours that was having this issue, it's better than it used to be (it used to be impossible to com... Chris Buechler

10:38 AM Bug #2636: state mismatch issue on enc0 with amd64

By any chance you have net.inet.ipsec.filtertunnel set to something grater than 0? Ermal Luçi

07:15 PM Bug #2362: Deleting last/only port forward doesn't remove from secondary

Yeah it does as of Friday's snapshot at least. Chris Buechler

02:57 PM Bug #2362: Deleting last/only port forward doesn't remove from secondary

Does this still happen on 2.1? I thought I fixed all of these not too long ago. Jim Pingle

06:27 PM Todo #2814 (Closed): OpenVPN push route hint on configuration page is misleading

we can't document everything in the web interface, that's just an example of one of hundreds of potential options the... Chris Buechler

06:14 PM Todo #2814 (Closed): OpenVPN push route hint on configuration page is misleading

On the OpenVPN server configuration page it says:... Nei Ka

05:18 PM Bug #1823: policy routing for firewall-initiated traffic only works for interface IPs

I already know the answer after thinking about it. Only if the hidden rule used match would the route-to stack onto ... Adam Gibson

03:31 PM Bug #1823: policy routing for firewall-initiated traffic only works for interface IPs

As an update. The out rule in floating that I listed does disable the hidden route to.route-to.
I found the mista... Adam Gibson

03:26 PM Bug #1823: policy routing for firewall-initiated traffic only works for interface IPs

Strange. I am seeing inconsistency with this or I am going crazy and making a bunch of mistakes testing this (I am s... Adam Gibson

03:22 PM Bug #1823: policy routing for firewall-initiated traffic only works for interface IPs

!!!! Hold up... !!!!
The above rule did cancel the route-to it seems. Sorry about that, I messed up the test. ... Adam Gibson

03:14 PM Bug #1823: policy routing for firewall-initiated traffic only works for interface IPs

I didn't think it was possible to override it. I just tested it and could not override it.
You can not create an ... Adam Gibson

04:00 PM Bug #2813: Diagnostics: S.M.A.R.T. Monitor Tools

Applied in changeset commit:1d2add88f4222b04708a1a1af38567ab197a460a. Jim Pingle

03:46 PM Bug #2813 (Feedback): Diagnostics: S.M.A.R.T. Monitor Tools

Fixed by commit:d6d775a6b51fedc4044497ca9af526a31df6d687 Jim Pingle

02:49 PM Bug #2813 (Resolved): Diagnostics: S.M.A.R.T. Monitor Tools

diag_smart.php
Perform Self Tests
Click abort
directs to smartmon.php
which is 404 - Not Found W FM

03:45 PM Feature #2640: Add a way to find where an alias is used

That commit ID was for another ticket (sorry) Jim Pingle

03:30 PM Feature #2640: Add a way to find where an alias is used

I agree there is a workaround, but it would be very nice to have it in the GUI. This saves a lot of time when I'm on... Ugo Bellavance

03:30 PM Feature #2640 (Feedback): Add a way to find where an alias is used

Applied in changeset commit:d6d775a6b51fedc4044497ca9af526a31df6d687. Jim Pingle

03:18 PM Feature #2640: Add a way to find where an alias is used

Easier way: download a config backup and grep/search it.
Not sure how feasible this would be in the GUI, given the... Jim Pingle

03:44 PM Bug #2752 (Feedback): Captive Portal Last Activity isn't update anymore --> idle timeout just after login

Please try a 2.0.3 image, this appears to be one of the bugs addressed there:
http://forum.pfsense.org/index.php/top... Jim Pingle

03:43 PM Feature #2757 (New): CDP/ISDP/LLDP support.

Whoops, added that note to the wrong ticket. Jim Pingle

03:37 PM Feature #2757 (Closed): CDP/ISDP/LLDP support.

Please try a 2.0.3 image, this appears to be one of the bugs addressed there:
http://forum.pfsense.org/index.php/top... Jim Pingle

03:42 PM Bug #2812: Adding a one way phase 2 IPSec tunnel causes a config error

Attach your /var/etc/racoon.conf (or /var/etc/ipsec/racoon.conf on 2.1 ) and the ipsec section of your config.xml wit... Jim Pingle

09:14 AM Bug #2812 (Rejected): Adding a one way phase 2 IPSec tunnel causes a config error

Hi
I have a current IPSec tunnel that is working great.
I tried to add a second and third that is one way (loca... William Hilsum

03:40 PM Feature #2801 (Rejected): Display (all) PHP logs in the Web UI

On 2.1 (where development is typically done) these do show on the dashboard as a crash report, so they can be viewed ... Jim Pingle

03:36 PM Bug #2754: PPP and 3G: Setting PIN in advanced options not working, stick works after removing SIM PIN

Might be the same issue as #781 Jim Pingle

03:35 PM Bug #2748 (Feedback): Route53 DynDNS Updater does not work

Will need a lot more detail. Any log messages from the system log for starters.
The route53 code was contributed, ... Jim Pingle

03:33 PM pfSense Packages Feature #2736 (Feedback): Additional configuration options for SMTP, POP3 and IMAP Pre-Processors in snort.conf

Have these changes already been merged in by pull requests? Jim Pingle

03:33 PM pfSense Packages Feature #2735 (Feedback): Improvement to Snort Rules Update Process

Have these changes already been merged in by pull requests? They look familiar. Jim Pingle

03:27 PM pfSense Packages Bug #2698 (Feedback): freeradius2 counter not working

Jim Pingle

03:26 PM pfSense Packages Bug #2681 (Closed): Squid 3 in pfsense 2.1 Beta

Jim Pingle

03:24 PM Bug #2680 (Rejected): PHP Fatal error in /tmp/PHP_errors.log

Without more detail and no other reports, this is not likely legitimate. Jim Pingle

03:16 PM Bug #2627 (Feedback): Old delegated prefixes are not removed from the LAN interface

Can you try this again on a recent 2.1 snapshot? Several changes to prefix delegation have happened recently. Jim Pingle

03:14 PM Feature #2609: Support for ActiveDNS

Can you submit those changes as a github pull request please?
https://help.github.com/articles/using-pull-requests
... Jim Pingle

03:09 PM Bug #2578: Upgrade 1.2.3 to 2.0 CARP

Do you happen to have a copy of your config from before and after this upgrade to compare? You can e-mail it in if yo... Jim Pingle

03:07 PM Bug #2570 (Closed): Status: Interfaces - Fatal error: Call to undefined function filter_configure()

Jim Pingle

03:07 PM Bug #2550 (Rejected): Cannot delete limiters...

Duplicate of 2482 Jim Pingle

03:06 PM Feature #2523: Prompt for confirmation before upgrading to different architecture

Not that it's specifically addressing the need for a prompt, but I recently made the manifest drop-down bold the choi... Jim Pingle

03:05 PM Bug #2451: IPv6 rule: 'add network' becomes 'add single host'

This is probably due to an old check for the CIDR being /32 meaning single IP, but that test should not be applied on... Jim Pingle

03:03 PM Bug #2432 (Closed): OpenVPN Client Specific Override ifconfig-push

Jim Pingle

02:56 PM Bug #2374 (Feedback): When entering values in firewall rules leading and trailing spaces are not deleted

Fixed by commit on this ticket but not marked as fixed. Jim Pingle

02:53 PM Bug #2307 (Closed): OpenNTP fails to update time at bootup

We have switched to the ntp.org daemon now, this is no longer relevant. Jim Pingle

02:52 PM Bug #2297 (Closed): Inbound NAT on secondary WAN Interface when Primary Interface has no carrier

Probably this is due to the lack of a default gateway. Enable gateway switching under System > Advanced on the Misc t... Jim Pingle

02:45 PM Bug #2288 (Closed): Traffic Graph slows network processing

That's just a side effect of using the GUI. The more things that are open and checking in the GUI, the more resources... Jim Pingle

02:43 PM Feature #1933: Support for interface groups in NAT screens

You would have to split the user rule(s) with respective reply-to. Ermal Luçi

02:05 PM Feature #1933: Support for interface groups in NAT screens

Outbound NAT might be feasible but for port forwards this could be problematic as the group rules wouldn't get reply-... Jim Pingle

02:43 PM pfSense Packages Bug #2256 (Feedback): FreeRadius not starting

Many changes to the package since then, is this still a problem? Jim Pingle

02:36 PM Bug #2166 (Feedback): Dynamic DNS not updating

Can this still be reproduced on 2.1? Jim Pingle

02:34 PM Feature #2083 (Closed): Auth : LDAP users and group object.

Should be fixed by the "Extended Query" box in 2.1 Jim Pingle

02:31 PM Bug #2056 (Feedback): Display error in captive portal admin screen

Does this still happen on 2.1? I see a few possibly related commits that may have fixed this. Jim Pingle

02:30 PM Bug #1987 (Feedback): GRE tunnel - Route search type

Applied in changeset pfsense:commit:f8edf05d872f8887b891f15b48aa694a94ed2f9e. Jim Pingle

02:27 PM Feature #2003 (Closed): Allow Aliases in routing

Added a while ago. In at least 2.1. Jim Pingle

02:26 PM pfSense Packages Bug #2002 (Closed): snort

Jim Pingle

02:20 PM Bug #1284 (Feedback): Syslog does not work with CLOG disabled

Applied in changeset commit:100f3e7191a0c720857316c4ba0cac0890fe8177. Ermal Luçi

02:17 PM Bug #1981 (Closed): lighttpd errorlog using text rather than clog format

Lighty logs to syslog now, so this isn't relevant any longer. Jim Pingle

02:15 PM Bug #1969 (Feedback): IPsec refuses connection after first Cisco Client connection

Worth trying again on a recent 2.1, and keep the recent edits to the recommending settings for mobile IPsec in mind f... Jim Pingle

02:13 PM Bug #1959 (Feedback): openssl does not accept ECC-certificates

On 2.1 we use OpenSSL 1.0.1e (or later) so it's worth trying again there. Jim Pingle

02:05 PM Bug #1915: LDAP "authentication containers" select button is inoperative.

This works, at least on 2.1 and recent 2.0.x's. It displays for me, and I've used it with customers recently as well. Jim Pingle

02:03 PM Bug #1909 (Feedback): dhcp dies after reboot

There was some work to solve a similar issue with ordering and aliases on 2.1 recently, worth trying there, it's like... Jim Pingle

02:02 PM pfSense Packages Bug #1908 (Closed): Vnstat

Jim Pingle

02:01 PM pfSense Packages Bug #1907 (Closed): snort

Jim Pingle

01:58 PM Feature #1878 (Closed): Option to add permanent ARP entries for WOL

There is a per-mapping static ARP option for DHCP entries now, which should fill this need. Jim Pingle

01:57 PM Bug #1861 (Closed): false log filterdns: host_dns: failed looking up "88.192.1250.131"

This has been cleaned up a bit since then but some is expected behavior. Anything that's supposed to be an IP but isn... Jim Pingle

01:54 PM Feature #1855 (Feedback): NAT before IPsec VPN

This has been done on 2.1 for a couple months now and confirmed to be working there. Jim Pingle

01:53 PM pfSense Packages Bug #1852 (Closed): Snort and IP-Block Installation/Deintsallation issue

As Chris said, it will be OK on 2.1. No easy fix until then. Jim Pingle

01:51 PM pfSense Packages Bug #1822 (Closed): Snort won't start

Jim Pingle

01:49 PM Bug #1739 (Closed): Interface problem

Fixed at some point, the key length is retained now even when input validation gives errors. Jim Pingle

01:47 PM Bug #1722 (Closed): Associated filter rule retains original Interface option after copying a NAT rule

This was fixed a while back, I've done this recently and it works. Jim Pingle

01:45 PM Bug #1691 (Closed): Virtio driver not working

virtio was fixed up a while ago, check the forum/wiki for info. Jim Pingle

01:43 PM Bug #1686 (Closed): guiconfig.inc GetText logical bug

Appears to have been fixed. Jim Pingle

01:43 PM Bug #1681: OpenVPN tun IPs fail HTTP REFERER checks

This gets annoying when trying to help customers fix up broken OpenVPN routing, we should fix this sooner rather than... Jim Pingle

01:40 PM pfSense Packages Bug #1651 (Closed): Removing Squidgard removes squid

Should be better on 2.1 Jim Pingle

01:36 PM Bug #1375 (Closed): Captive portal logs: mixed with logs from other sources (squid, php)

Logs changed a lot since then, it's likely been fixed. Can reopen if a new report on 2.1 surfaces. Jim Pingle

01:36 PM Bug #1414 (Closed): dhclient fail on wifi

Replaced by #2440 (better info there) Jim Pingle

01:33 PM pfSense Packages Todo #1551: OLSR Version update

Moving back to packages since this is no longer built in. Jim Pingle

01:29 PM Bug #1332 (Closed): Autoupdate erases line in /etc/sysctl.conf which was created by LiveCD

Important tunables like that are in the GUI now, not sysctl.conf Jim Pingle

01:25 PM pfSense Packages Bug #1315 (Closed): ERROR 404 on packages area upper-left logo of psense.

Fixed long ago Jim Pingle

01:24 PM pfSense Packages Bug #1301 (Closed): Squid package become unusable through time if we use large disk cache

Package was changed long ago to not do chown on the cache any longer. Jim Pingle

01:23 PM Bug #1290 (Closed): IPsec roadwarrior use case: Traffic from LAN does not hit established tunnel

Sounds like one of the other IPsec mobile bugs that was fixed long ago (check other tickets). Jim Pingle

01:22 PM Feature #1286 (Closed): Captive Portal sends WAN IP instead of Mac or custom string in "called-station-id" RADIUS attribute

Captive Portal gained this feature some time ago. Jim Pingle

01:17 PM pfSense Packages Bug #1272 (Closed): AXFR Zone transfers not working in v2 Beta5

Jim Pingle

01:16 PM pfSense Packages Bug #1245 (Closed): barnyard2 won't start

Jim Pingle

01:16 PM Bug #1226 (Closed): Possible DOS in CARP synchronization

This has, in all likelihood, been fixed since then. The behavior would at least have changed on 2.1 after the recent ... Jim Pingle

01:13 PM pfSense Packages Bug #1200 (Closed): Navigational link in Shellcmd package broken

Fixed long ago Jim Pingle

01:13 PM pfSense Packages Bug #1199 (Closed): Navigational link in Backup package broken

Fixed long ago. Jim Pingle

01:09 PM pfSense Packages Bug #1163 (Rejected): Squid not restart in widget

Jim Pingle

01:02 PM Feature #983: Improve/Enhance IP Alias VIP handling in GUI

They are included in automatic outbound NAT now, but not the interface macro. Jim Pingle

01:00 PM Bug #808 (Feedback): PHP Shell - $config doesn't work but $GLOBALS["config"] does.

Applied in changeset commit:bde982dd5aad41254273300676d1d5c2ecf367c3. Jim Pingle

12:53 PM pfSense Packages Bug #679 (Closed): HAVP error message shows up behind top menu.

Jim Pingle

12:49 PM Bug #415 (Closed): DNS forwarder domain override add doesn't restart dnsmasq

Fixed long ago on 2.x Jim Pingle

12:47 PM pfSense Packages Bug #310 (Closed): Nut needs changes for latest version

This was fixed up a while ago. Jim Pingle

12:46 PM Feature #264 (Closed): More flexible DHCP - Static ARP

On 2.1, DHCP static mappings now have a checkbox to setup a static arp entry for that IP. Should be close enough to t... Jim Pingle

12:45 PM Feature #2319: include SSD TRIM option in installer

This can now be set manually after the install on 2.1.
touch /root/TRIM_set; /etc/rc.reboot
to remove
touch ... Jim Pingle

12:44 PM Bug #23 (Closed): Links broken on sub-folders due to relative paths

We have been prefixing the paths with / for a while now on 2.1 (and earlier?) Jim Pingle

12:43 PM Feature #197 (Closed): [PATCH] dns service: alias option for DNS forwarder

An alias feature was implemented a while back on 2.1 Jim Pingle

12:36 PM Feature #1883: Diag > Limiter Info presentation enhancement

Should we give this a target for 2.1? Jim Pingle

12:11 PM Bug #2756: SNMPD problems when binding pppoe interface

hmm its hard to test it on another machine i will do a complete new install of the system next week and i try to inst... Claudius Badmind

12:04 PM Bug #2756: SNMPD problems when binding pppoe interface

It seems to be a local issue instead of a bug on pfSense since there are no other users reporting the same issue and ... Renato Botelho

12:06 PM Bug #2790 (Resolved): Gateways widget broken for IPv6

Renato Botelho

11:47 AM Todo #648 (Closed): Move "base" packages such as RIP, OLSR, etc, back into packages

Renato Botelho

06:53 AM Todo #648 (Feedback): Move "base" packages such as RIP, OLSR, etc, back into packages

Renato Botelho

11:47 AM Bug #2810 (Resolved): Move RIP back to a package

Renato Botelho

06:50 AM Bug #2810 (Feedback): Move RIP back to a package

Applied in changeset pfsense-packages:commit:849ae9e3bd2877bfb784b88b10d41dc772127f2a. Renato Botelho

06:45 AM Bug #2810 (Resolved): Move RIP back to a package

RIP needs to be moved back to a package Renato Botelho

09:20 AM pfSense Packages Bug #2807 (Closed): filter_rules_needed tag (in package xml) not used when generating rules

That is a remenant of another implementation for packages.
The only way for now is to use the directly callable func... Ermal Luçi

07:55 AM pfSense Packages Bug #2811 (Closed): squidGuard-1.4_4 starting large number of child processes

You will have better luck opening a forum thread on the packages board to diagnose this. certainly needs a lot more d... Jim Pingle

07:51 AM pfSense Packages Bug #2811 (Closed): squidGuard-1.4_4 starting large number of child processes

when i installed squidguard from the pkg, this time it reinstalled squid. i enabled the squid guard, in few minutes i... Koti SK

05:26 AM Bug #1629: invalid state table entries after WAN IP change

I just pushed another change to reset states with certain gateways set.
It should behave even better than previously,... Ermal Luçi

05:10 AM Bug #2764 (Feedback): Captive Portal Voucher Sync issue

Applied in changeset commit:8184a8ddbb5c92cf3b01806c7a4f6172c95c7ed3. Renato Botelho

02:57 AM Feature #1482: Captive Portal support for a configurable RADIUS NAS ID

Merged thank you for the pull request. Ermal Luçi

02/11/2013

05:51 PM Bug #1823: policy routing for firewall-initiated traffic only works for interface IPs

it's always been optional, users can override with floating rules. It's an appropriate default for the vast majority. Chris Buechler

11:27 AM Bug #1823: policy routing for firewall-initiated traffic only works for interface IPs

Can this be an option? I actually consider it a feature. I don't want policy routing at all. I change routing on t... Adam Gibson

04:38 PM Feature #1482: Captive Portal support for a configurable RADIUS NAS ID

Submitted: https://github.com/bsdperimeter/pfsense/pull/406 Michael Newton

05:32 AM Feature #1482: Captive Portal support for a configurable RADIUS NAS ID

Please send a pull request on github as everyone else since its easier to merge/review/... Ermal Luçi

02:40 PM Todo #1723 (Feedback): PPTPd and all mpd based services need more checks

Applied in changeset commit:e6c60013283ea203853e0bc34158e185016f4df6. Renato Botelho

09:20 AM Bug #2349: vlan(4) needs altq adaption on FreeBSD 8.3++

I can confirm that this patch did not break vlan support as it did 8 months ago.
I had to completely rebuild my p... Chris Ogden

09:18 AM Bug #2349: vlan(4) needs altq adaption on FreeBSD 8.3++

So can you confirm it works correctly now? Ermal Luçi

09:15 AM Bug #2349: vlan(4) needs altq adaption on FreeBSD 8.3++

Please ignore my reported troubles, see http://forum.pfsense.org/index.php/topic,58717.0.html for an explanation.
... Chris Ogden

05:21 AM pfSense Packages Bug #2809 (Closed): Reverse Proxy for ActiveSync / Real-Time Monitor

Real-Time Monitor and the access.log for the Reverse Proxy package do not show the full request URI (it is cut off af... Matthias S

03:11 AM Bug #1629: invalid state table entries after WAN IP change

Today the problem occurred again. So it was not fixed yet. Matthias Dilbert

01:53 AM Feature #2757: CDP/ISDP/LLDP support.

Any chance to see this feature implemented in 2.1? Zeev Zalessky