Activity
From 03/03/2013 to 04/01/2013
04/01/2013
-
09:08 PM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes
- Running pfSense 2.0.2 stable with same IPsec tunnel issue (no tunnel data on reconnect, racoon restart needed)
I f... -
08:45 PM Revision 3c98b3f7: Whitespace/HTML fixes
-
-
08:18 PM Bug #2919 (Resolved): IPv6 - WAN and LAN (DHCP-PD) does not renew address
- The WAN DHCP IPv6 address and LAN DHCP-PD lease time from the provider is 4 days. When the lease expires, pfSense go...
-
- 03:40 PM Revision 9d7204aa: Consider packages that set enable to 'false' or 'off'
- 03:35 PM Revision 17c56f4a: Merge pull request #501 from phildd/master
- Support for disabled services on services status displays
-
03:20 PM pfSense Packages Bug #2918 (Rejected): ntpd doesn't sync if not bound to any interface
- When no interfaces are selected under Services=>NTP, in attempt to use NTP only for timekeeping on the server itself,...
- 02:56 PM Revision 0ad707c6: Do not allow to rename a gateway group, as it is for gateways. Fixes #2914
-
-
11:12 AM Bug #2914: Gateway Group Name change causes all rules and OpenVPN interfaces using that group to be invalid
- I actually have code that does the rename through the config. I couldn't submit a pull request because it touches the...
-
10:03 AM Bug #2914: Gateway Group Name change causes all rules and OpenVPN interfaces using that group to be invalid
- For 2.1 it's better to avoid such a big change, and since a gateway cannot be renamed, apply the same rule for gatewa...
-
- Applied in changeset commit:0ad707c6b93d41bf731c547b49252af4a15a5649.
- 02:30 AM Revision fc7f02c6: Do not display disabled services on services status widget
- 02:26 AM Revision ccfc0269: Check for disabled services when displaying service lists
03/31/2013
-
12:11 PM Bug #2412: inbound 6to4 traffic does not work in pf
- Update:
Upgraded to today's (March 30) snapshot. Now inbound connections work OK.
A little bit scary, however...
03/30/2013
-
07:20 PM Bug #2917 (Rejected): High CPU Usage
- not enough here to make this a legit bug report, feel free to start a discussion on the forum or mailing list and if ...
-
07:11 PM Bug #2917: High CPU Usage
- It appears to be caused by Firefox. As the number of Firefox browsers that are open with pfSense increases, the high...
-
- 2.0.2 running on D525 Atom with virtually zero CPU usage. Atom hardware replaced with Xeon CPU E5504 @ 2.00GHz with ...
03/29/2013
-
- Tidy up HTML boolean operators
- 07:25 PM Revision ce0117f7: Update HTML boolean operators
- Updated CHECKED, SELECTED and DISABLED boolean operator
-
- 08:44 AM Revision 30ca7b7e: Resync OpenVPN instances that use any changed gateway groups
- 08:42 AM Revision 8bca0805: Remember whcih gateway groups have been edited
- 08:40 AM Revision 99cc103b: Provide openvpn_resync_gwgroup function
- Allows all OpenVPN servers and clients that use a particular gateway group to be resynced in one easy call.
-
- /etc/rc.openvpn does not get passed the interface, so it has no idea what is going on. I can't see an easy way to get...
03/28/2013
-
- as long as it only impacts OpenVPN instances on the interface where the event occurred, it should be fine to call res...
-
- Easy to reproduce - setup OpenVPN client on interface WAN. Have it running connected to a server somewhere. Physicall...
-
- The Group Name is stored directly in the config of firewall rules, OpenVPN interface selection (and elsewhere...?). W...
-
- I have a gateway group VPNgways with WAN=Tier1, OPT1=Tier2. The OpenVPN servers and clients use interface VPNgways. T...
- 07:25 PM Revision a8f5790a: Fix whitespaces and indent
-
04:44 PM Bug #2753: RRD Graphs failes after pfSense upgrade (2.0.1 -> 2.0.2)
- Have been watching status on this issue for a couple months, since a similar scenario has applied to my setup as well...
- 12:00 PM Revision 7a47e299: Avoid send user to top of the page when you open add new gateway box
-
- Applied in changeset commit:e2ec86f40c9573292a46d4ab89ae70e353a99f8f.
-
- This pull request should fix it: https://github.com/pfsense/pfsense-packages/pull/415
03/27/2013
-
09:21 PM pfSense Packages Bug #2902: Snort does not update snort.org (basic?) rules. Possibly clock blocking by snort.org for basic subscribers.
- Issue is that the 2941 rules are not yet available to registered users, only subscribers. Modify the $snort_rules_fil...
-
- Same issue here, have tried the manual update but still no result.
-
- indeed it's not possible to do as described, but I've been irked on more than one occasion by it just bailing out wit...
-
- There is no way to know or detect the fact that the update is signed or unsigned until it has been fully downloaded. ...
-
06:34 PM Feature #2912 (Resolved): Updater handles unsigned updates poorly when used on beta/snapshot releases
- Running 2.1 beta, and notified of an available snapshot update, the updater attempts to download the update but only ...
-
07:32 PM pfSense Packages Bug #2892: "pfblocker_Range2CIDR" function yields erroneous results (pfBlocker v1.0.2)
- When doing some addtional work, I noticed that I mistyped the CIDR generated by the "pfblocker_Range2CIDR" function -...
- 02:11 PM Revision 3ffdcd4e: Add a new class called addgatewaybox to make it easier to respect custom themes. Fixes #2900
- Conflicts:
usr/local/www/interfaces.php
usr/local/www/themes/_corporate/all.css
usr/local/www... -
11:38 AM Revision d6307bd3: Fixes #1477. Use the new parameter to reduce igmpproxy logging level
-
06:40 AM Feature #1477 (Feedback): IGMPPROXY spamming the main systemlog
- Applied in changeset commit:d6307bd38ef0d50caf1d0224a845a206f00da1aa.
-
- general FreeBSD issue I suspect is likely already fixed in newer versions. If not, it'll have to be reported upstream...
03/26/2013
-
-
07:54 PM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes
- I was using 2.1 BETA also and experienced the same issue as David Duchscher. I had to revert back to 2.0.2 stable so ...
-
01:36 PM Bug #2911 (Rejected): pfsense boot error on usb image w/o usb keyboard plugged in
- I deployed pfSense-2.0.2-RELEASE-4g-amd64-nanobsd_vga.img.gz on a 4gb usb thumbdrive on a Dell XPS 400 with no hard d...
- 12:43 PM Revision 4ad1e4ea: Add a new class called addgatewaybox to make it easier to respect custom themes. Fixes #2900
-
-
-
-
-
-
- Applied in changeset commit:4ad1e4ea74f621c01f9997f46ee7dff412dcc817.
-
-
- Tidy up "shaper.inc" XHTML
-
- Could not reproduce it here using latest snapshot, tier1 was used as expected on rules when it's up.
03/25/2013
-
- thanks
-
09:13 PM Bug #2905: radvd.conf does not include all configured RDNSS entries
- Looks like this issue is resolved. Tested with snapshot:
2.1-BETA1 (i386)
built on Mon Mar 25 15:43:19 EDT 2013
... -
- Applied in changeset commit:3d73a44d84accdb2f70abf705aed9b3858292317.
-
- When there is a tier 1 gateway that's being monitored, and a tier 2 gateway with monitoring disabled, the system skip...
- 09:46 PM Revision 6f1bcc36: Tidy up "shaper.inc" XHTML
- Close INPUT tags
Close IMG tags and add "alt" parameter
Change ONCLICK and ONCHANGE to lowercase -
-
- Do not bother with bogonsv6 if IPv6 allow is off
- 01:05 PM Revision 939cc57a: Fix file name reference
- 12:33 PM Revision 3d73a44d: Use configured dns servers on radvd.conf, fixes #2905
- 11:26 AM Revision aa95e7da: Merge pull request #495 from phil-davis/master
- Dynamic DNS add option for verbose logging
-
11:01 AM pfSense Packages Feature #2908 (Needs Patch): Add nginx package to available for install
- It would be really great feature, cause nginx reaaly great web serser with great proxy possibilities.
and now it i... - 10:38 AM Revision 8550a21c: Improve bogonsv6 checks during update
- Improvements to using pfctl to check the existence of the bogonsv6 table.
-
- Tidy up "shaper.inc" and "firewall_shapper.php" XHTML
03/24/2013
-
- Version Data: (from snapshots)
2.1-BETA1 (i386)
built on Sat Mar 23 22:03:50 EDT 2013 -
- The ipv6 RA does not include all configured dns entries from services_router_advertisements.php configuration page.
... -
06:33 PM Feature #2904 (Resolved): Add checkbox or default option for "verify_identifier on;" on IPsec RSA VPNs
- The ASN1DN field on the "peers_identifier" option within racoon.conf can be used to specify which certificate or set ...
-
03:41 PM pfSense Packages Bug #2903 (Not a Bug): Lightsquid realtime stat 403 error
- With a fresh lightquid install (and with several reinstall attempts) I get the following error when attempting to acc...
- 12:45 PM Revision c858c609: Do not bother with bogonsv6 if IPv6 allow is off
- Only implement the bogonsv6 table if IPv6 allow is on. Otherwise, if it looks like there would be room for the table ...
- 12:43 PM Revision e714e996: Do not bother with bogonsv6 if IPv6 allow is off
- The rules already block all IPv6 when IPv6 allow is off, so it is a waste of 70,000+ table entries of V6 bogons. On s...
03/23/2013
- 09:12 PM Revision 7da5315d: Tidy up "shaper" and "firewall shaper" XHTML
- Update VALIGN
Deprecated the ampersand in ANCHOR tags
Update TYPE in script -
- *update*
The tar file contains the ... -
- Snort 2.9.4.1 pkg v. 2.5.4 on 2.1-BETA1 (i386) built on Fri Mar 22 22:56:09 EDT 2013
I've tested and found this pr... -
- I get sig 11 (segmentation fault) failures as well. ...
-
- I set up the traffic shaper using the wizard, it worked fine for a few hours (4) then at some point started throwing:...
03/22/2013
- 07:22 PM Revision e680b2f9: Add checks to make sure CP hard timeout is less or equal DHCP server default lease time. It fixes #2899
-
-
-
- 04:41 PM Revision 1e503870: Dynamic DNS add option for verbose logging
- The verbose log option is "set or not set" in the config and needs to be passed to subroutines as a boolean true or f...
- 04:28 PM Revision 87b91672: Dynamic DNS add option for verbose logging
- Put most log messages inside "if verbose logging". Things that are always logged are actual errors and success messag...
- 04:25 PM Revision c8c90b81: Dynamic DNS add option for verbose logging
- This will allow the user to decide if they want all the noise in syslog. It defaults to off, so the log messages will...
-
- Tidy up "shaper.inc" XHTML
- 03:47 PM Revision 0fa05f45: Tidy up "shaper.inc" XHTML
- Add CDATA sections to javascript
Close off the BR tags -
- Tidy up "traffic shaper wizard" XHTML
-
- Tidy up "traffic shaper layer7" XHTML
-
- Tidy up "traffic shaper limiter" XHTML
-
- Tidy up "traffic shaper queue" XHTML
-
- Tidy up "traffic shaper" XHTML
-
- On Interfaces configuration, when you click "add a new one" to add a new gateway, it's using a hardcoded bg color #99...
- 02:58 PM Revision 4271dfb8: Tidy up "traffic shaper wizard" XHTML
- Move "tree.css" to the HEAD statement and manually close the HEAD
statement
Close BR and P tags - 02:54 PM Revision e750c0af: Tidy up "traffic shaper layer7" XHTML
- Close INPUT, BR, P and IMG tags
Add "alt" to IMG tags
Add CDATA section to scripts
Move "tree.css" and "tree.js" to t... - 02:42 PM Revision 2174be22: Tidy up "traffic shaper limiter" XHTML
- Close INPUT, BR, IMG and P tags
Add "alt" to IMG tags
Deprecate ampersand in ANCHOR tags
Add CDATA section to scripts... - 02:35 PM Revision f6b81501: Tidy up "traffic shaper queue" XHTML
- Deprecate the ampersand in the ANCHOR tag
Close BR and P tags
Move "tree.css" and "tree.js" to the HEAD statement and... - 02:29 PM Revision df5c0bc0: Tidy up "traffic shaper" XHTML
- Close INPUT, BR and P tags
Update PHP Shorthand tag
Spelling mistake
Move "tree.css" and "tree.js" to the HEAD statem...
03/21/2013
-
05:26 PM Bug #2890: radvd segmentation fault
- 2.1-BETA1 (i386)
built on Thu Mar 21 04:30:58 EDT 2013
FreeBSD 8.3-RELEASE-p6
Updated to the above version and r... -
-
-
03:04 PM Bug #2891: Limiter does not work with high speed
- Forgot to tell that I did a total rekonfiguration but have tried to rekosntruct the limiter issue. I think you are ri...
-
- You have only 50 slots meaning 50 packets.
Can you configure the 'Queue Size' under advanced options of limiters to ... -
- Sure. I think you are just right. Command in shell is the same as "limiter info" in the GUI I guess.
Limiters:
00... -
-
-
-
-
- Thermal Sensors Widget (for pfSense v2.1-BETA1 and up).
-
-
-
- In some cases, IPsec failover using a gateway group will not move from one WAN to another properly. Unfortunately thi...
-
-
-
- DynDNS status widget async update
-
08:20 AM Bug #2893: Add extTable to SNMPd or change sysDescr.
- Nice, thank you!
-
- Applied in changeset commit:dadf8ebb488c6dbefc84cf1a104e1d34e41966bb.
- 02:51 AM Revision b23e1a70: DynDNS status widget add 5 minute refresh
- It was easy to add the code to refresh the status every 5 minutes. I think 5 minutes is a reasonable refresh time for...
03/20/2013
-
- Track apinger status in /var/run instead of /tmp
-
-
-
-
-
-
-
-
- I updated to the following:
2.1-BETA1 (i386)
built on Tue Mar 19 16:35:08 EDT 2013
FreeBSD 8.3-RELEASE-p6
O... -
- I have put a fix for radvd.
Can you test with a newer snapshot? -
-
- I found old mails in mailing list, which discussed the issue:
http://www.mail-archive.com/support@pfsense.com/msg086... -
- The commands would only work if the user has the UCD module loaded, which is possible on 2.1. I would hesitate to add...
-
- Please add extTable lines in bSNMPd config (/var/etc/snmpd.config) like:...
- 02:19 PM Revision c1dcb7ab: DynDNS status widget async update
- The Dynamic DNS status widget performs remote operations to the www to check the cached dynamic DNS IP against the ac...
- 09:01 AM Revision 3e3ff931: Track apinger status in /var/run instead of /tmp
- This is a one line status file updated every few seconds. It would be
better to store this in /var/run since that is ... -
08:33 AM Bug #1974: Captive Portal RADIUS accounting bytes wrong
- Not it is not fixed it was much better some time ago but recent tests have the same results 700 MB through the portal...
-
-
-
-
-
-
-
- Probably you have to increase the queue of the limiter to hold that traffic.
Can you show an ipfw pipe show of your ... -
- E.G. the file
http://list.iblocklist.com/?list=bt_ads&fileformat=p2p&archiveformat=gz
on 2013-Mar-18 has/had an ent...
03/19/2013
-
-
- 08:06 PM Revision 4e6667b2: Simplify a bit logic
- 08:01 PM Revision e5a27e16: Fix typo
-
-
-
- On 2.0.2 limiters only work up til aprox. 15Mbitps. Limiters set to speeds higher than 15Mbit will act if they are ju...
-
- 06:52 PM Revision def432e6: Make sure file has content before call route delete
- 06:36 PM Revision 46e27ea7: Respect 'States' option from Advanced/Misc
- - Respect this option and do not clean states when it's configured
- Create /etc/rc.kill_states to be easier to check... - 06:36 PM Revision 9cc119c2: Remove redundant call
- 06:36 PM Revision 2c27096c: Improve ppp-linkdown:
- - Improve readability giving name to parameter variables
- Add path for all command calls - 06:36 PM Revision 6d5460e6: Fix default route deletion
- 06:36 PM Revision 94b49d82: Fix indent
-
-
-
-
-
-
- 2.1-BETA1 (i386)
built on Tue Mar 19 05:51:13 EDT 2013
FreeBSD 8.3-RELEASE-p6
radvd segfaults on my router with ... -
02:48 PM Bug #2889 (Closed): ACK Traffic Put in Normal Queues. Normal Traffic Put in ACK Queues
- We are running 2.0.2 i386. We've noticed any rules that came from 2.0.1 are fine, however if we create new rules on o...
-
- It's now respecting <kill_states/>
-
- The state killing in ppp-linkdown only kills the NAT states on the affected WAN. It leaves the firewall states there,...
-
-
-
-
12:47 PM Revision 145cc518: Fix the Cellular strength indicator, rssi was always reporting 8 because we didn't use the variable.
- The dBm values array was reversed, corrected
- 12:23 PM Revision 7488a9e0: Fix whitespace and indent
-
-
-
-
-
-
-
- 12:08 AM Revision 4fc54000: Thermal Sensors Widget (for pfSense v2.1-BETA1 and up).
- Original post: http://forum.pfsense.org/index.php/topic,59193.0.html
03/18/2013
-
-
-
-
-
-
-
-
-
01:48 PM Bug #2883: pf rules contain erroneous "!/" artifact leading to "syntax error" in log
- I have tested this fix already with no luck
Provided more information here http://forum.pfsense.org/index.php/topic,... -
- I already have pushed a fix for this.
Test with newer snapshots. - 01:32 PM Revision f6461410: Avoid trying to remove an invalid IP
-
-
-
- Applied in changeset pfsense-tools:commit:f7608973a69f99c0e0a8fca652579991a9b1607b.
03/17/2013
-
- Diag DNS Lookup Dialog Output
- 12:19 AM Revision fe74228f: Diag DNS Lookup Dialog Output
- Display DNS lookup results in a dialog box rather than browsing away from the current page (Dashboard Firewall Widget...
03/16/2013
-
- Just a Couple Minor Tweaks
- 09:07 PM Revision c3b8ad61: Just a Couple Minor Tweaks
- 04:09 PM Revision e074fb75: Use killbypid instead of a killall that never works
- 02:47 PM Revision 6a69bc65: Use realif on dhcp6 pid filename since find_dhcp6c_process() looks for it and cannot kill it
- 01:32 PM Revision 6d529efd: Fix indent and whitespaces
- 11:56 AM Revision 2abfec49: Initialize array to silence warnings on foreach
- 11:34 AM Revision fba196c3: Avoid deleting the RA Subnet when IP is invalid, also simplify it a bit
- 11:26 AM Revision e1968b0d: Fix indent and whitespaces
03/15/2013
-
- System Firewall Log Filtering by Fields
-
- It was changed to just put the first sentence of description in changeset commit:41af581edd49bb920a783bf5b78f9bbfe2a7...
-
10:15 AM Feature #2886: multiple ips per carp vhid group
- > You can add IP alias VIPs on top of a single CARP VIP to have as many IPs as you want on a single VHID in pfSense 2...
-
- This isn't relevant to how we use CARP.
You can add IP alias VIPs on top of a single CARP VIP to have as many IPs as... -
- since I can't find very detailed information on how carp works (under the hood i mean) i've read some documentation o...
-
- Our future pfsense boxes will be to distributing traffic over our appservers. Currently we use two old debian Lenny b...
- 09:17 AM Revision 74c6d36f: System Firewall Log Filtering by Fields
- Previous filter form retained for raw logs view.
- 09:16 AM Revision e46adb09: Merge pull request #482 from mdima/master
- Fixes IPSec Status for natted tunnels
-
09:13 AM Revision 1bad1025: Fixes IPSec Status for natted tunnels
- See http://redmine.pfsense.org/issues/2884 for details.
Thanks, Michele -
- thanks!
-
- Done! ;)
-
- That sounds sane. I haven't dug into this part of the code though. If it works and you think that's reasonable, go ah...
-
- Since the SPD entries are not specular, in stead of searching for the "in" entry, we could look for the "out" entry, ...
-
- I've noticed this on every install I've worked on with NAT lately too, it works just fine but the status always shows...
-
- Hi,
the status of the Phase2 is reported as down in case of NAT before IPSec, while the tunnel is up and working ... -
- most parts of rule generation ensure a legit IP and subnet, need to fix that for this circumstance. Where these retur...
03/14/2013
-
- I found this one in 2.0.x, but not yet in 2.1. However it looks like someone else had it happen identically:
http://... -
09:13 PM Bug #2882 (Resolved): 6RD not working in latest snapshots
- Hi guys,
I use Charter's 6RD service to get ipv6 connectivity. I'm currently running the Jan 18th snapshot and my ... - 05:08 PM Revision d632dd5a: Check if IP is already configured on console setup
-
-
10:01 AM pfSense Packages Bug #2870: External DNS server always takes precedence over internal servers
- My solution to the problem was to create a DNS domain override for the internal domain. It also wasn't necessary to s...
-
- It's already in 2.1, and working.
-
06:42 AM Feature #2881 (Closed): LDAP Support for xauth for IPsec mobile clients
- Hi,
please add the option to use the LDAP backend for xauth in IPsec.
As I found a topic on that, there is alread...
03/13/2013
-
11:48 PM pfSense Packages Bug #2747: Snort ignores memcap settings
- This can be closed. Issue resolved by BMeeks with Snort version 2.5.4
-
07:52 PM pfSense Packages Bug #2879 (Closed): uninstalling Postfix Forwarder leaves widget
- The uninstall script for "Postfix Forwarder" doesn't delete any postfix related widgets from the homepage. This resul...
-
- Enhance tmp and var size checks
- 06:56 PM Revision 8ad8b044: Enhance tmp and var size checks
- Gets rid of the following console "unexpected operator" messages during boot:
Mounting filesystems...
[: -gt: unexpec... - 06:54 PM Revision 7d88b426: Re-enable admin user if it's disabled when 'Reset webConfigurator password' option is used. Fixes #2877
-
03:47 PM Bug #2878 (Resolved): radvd does not restart properly
- On the latest 2.1-BETA1 (i386) - built on Thu Mar 7 01:55:06 EST 2013 build, the radvd daemon does not automatically ...
-
- Applied in changeset commit:7d88b4269f01f2282a05df3e671da3f71704d17b.
-
01:04 PM Bug #2877 (Resolved): Reset webconfigurator password does not unlock admin account
- When the Reset webconfigurator password option is used it states that all permissions have been reset. How ever if th...
-
- 09:55 AM Revision 5077b1e4: fixup text
-
-
-
-
- radns was updated and now builds fine
-
- thanks for feedback
-
08:53 AM Feature #2858: Do not route rules to default gateway when its own gateway is down
- It's working perfectly then :)
Sorry about the previous confusion. -
- Exactly, or you can negate the 192.168.99.151 as src on rule that allow all traffic from 192.168.99.0/24.
-
- Unfortunately we can't write a novella to explain the subtle nuances of every option in the GUI. The revised descript...
-
- (Sorry, Chris - overlapped yours and didn't see your comment)
-
- Thanks, that explanation makes sense. (It may be that some apparent "issues" actually relate to improving narrative a...
-
- the block rules override every user-defined and auto-added rule, which is the intent of the feature. It's not enable/...
-
- I'll try to reword it, but "allow" and "blocked" imply firewall actions, "disabled" would imply features being shut o...
-
- The narrative reads "All IPv6 will be blocked unless this box is checked". That's not the same as "merely blocks by d...
-
- "Allow IPv6" is not a master switch to disable IPv6 functions. It merely adds a block rule to prevent IPv6 from passi...
-
- Some automatic IPv6 rules still get created if IPv6 is disabled (not clear if this is intentional). Two examples: the...
-
-
-
-
- I checked and it's fixed.
-
-
-
- IPv6 rules can certainly have 'any' as the protocol, that can and has worked since IPv6 was added.
IPv4+IPv6 rules... -
- IPv6 rules doesn't allow "any" or "ignore" as valid for protocol in a rule - but there isn't a full TCP/UDP/ICMP filt...
03/12/2013
-
- Ah my apologies... Its working as you have written..
Silly me.
I'm assuming that I should now be placing a DEN... -
- It appears the rules related to gateway OVPNC1 drop when the VPN is stopped/failed.
-
- Could you show me /tmp/rules.debug in 2 different moments, when OVPN is up and when it's down?
-
- Wow thanks for working to add this!
I've applied the patch to pfSense-2.1-BETA1-amd64-20130312-0847 and it does no... -
- Applied in changeset commit:a1f735b31c8f7f0cca0ebc5a7153cd06cdf4482e.
-
- It's the expected behaviour today, so change it to a Feature and adjust Subject as well
-
- Duplicate of #2433
-
- When setting up a PPPoE WAN on @interfaces.php?if=wan@, there is an option (which also existed in 2.0.1) to set up ad...
-
-
03:02 PM Feature #2859: Allow to configure different mac addresses for multiple VLANs on same physical interface
- Just 4 vlans, 2 wan and 2 lan
-
- Are just VLANs assigned to interfaces (WAN, LAN, OPTx) or the parent nic is also assigned to any interface?
- 02:37 PM Revision a1f735b3: Do not route do default gw when rule gw is down
- - Add a new advanced misc option to change the behaviour
- When it is set and rule has its own gateway, that is down,... - 02:04 PM Revision 4f537e93: Fix indent and whitespaces
-
-
- 06:48 AM Revision ac135e42: use logging on the block all v6 rules if default is log
-
- description isn't true, and it's not a bug, rather need to fix your config. Please post to the forum or mailing list ...
-
- I have a set-up where pfSense runs between a DSL router (WAN interface) and an internal domain with multiple DNS serv...
-
- As far as I understood the LDAP authentication backend, the group membership needs to be stored in an attribute of th...
-
- I think I caught most of the edge cases for transitioning into and out of RAM disk mode, and preserving data across r...
03/11/2013
-
-
- That's possible, but could you reconsider your rejection?
It *is* a problem with the installer. A user who follows... -
- Easy install always defaults to 2x RAM size for swap. A custom installation is needed for anything that doesn't fit t...
-
- Clean 2.1 install, but existed in 2.01 as well, and I'm guessing all.
Per sizing requirements, I used a 2 GB SSD m... -
- Duplicate of #2867
-
- Sorry, lcicked OK part way, please delete this, I'll re-enter it
-
-
- See http://forum.pfsense.org/index.php/topic,59909.msg322186.html#msg322186
Appears in 2.1, I'm guessing all versi... -
10:14 AM Feature #2849: IKEv2 support for IPsec
- I read about it. I am still worried, about MOBIKE (isnt it important for roaming roadwarriors) and the absense (?) of...
-
- 06:25 AM Revision 6db58224: move the "block all v6" rules back to where they should be, fix comment
- 01:46 AM Revision a876f1ed: point to new github repo
- 01:44 AM Revision d5280de6: update github repo location
03/10/2013
-
07:20 PM Feature #2849: IKEv2 support for IPsec
- Another option for IKEv2 would be the portable version of OpenBSD's OpenIKED
https://github.com/reyk/openiked
-...
03/09/2013
-
-
- duplicate of #2495
-
- It was fixed on Jan 31, See #2495 - if it's still broken on 2.1 using a current snapshot, reply there, since that's a...
-
11:32 AM Bug #2647: rc.newwanip discovers wrong WAN IP when using DHCP
- Yeah, I tried this on 2.1 from March 7th and January 27th.
Please tell me if you need more information. -
- Have you tried this on 2.1, as recommended? Quite a lot of work went into fixing these kinds of bugs there. Specifica...
-
- ok, I tried to find the bug myself.
As we need to use DHCP on WAN (Cable Source-Verify) the address is being renewed... -
- Services Status Widget remove leftover >
-
- Jim guided me here - I have got a similar problem on the recent 2.1-snapshot (March 7th).
Details are already descri... -
- That disconnect is the management GUI view of the connected clients. It is not disconnecting your actual client.
... -
11:50 AM pfSense Packages Bug #2865 (Rejected): openvpn ping-restart option for TAP interface
- If tap interface used other side of the tunnel never will be pinged.
But openvpn server instance by default sends
... - 10:20 AM Revision bb9aaf95: Services Status Widget remove leftover >
-
- duplicate
-
- 2.0.2-RELEASE (i386)
built on Fri Dec 7 16:30:29 EST 2012
FreeBSD 8.1-RELEASE-p13
When trying to bind second ope... - 12:44 AM Revision 70fee79c: fix text. Fixes #2863
03/08/2013
- 07:35 PM Revision 99dcc489: Use the process name rather to avoid the infamous file not found error
-
- Use HTMLENTITIES to deprecate the ampersand in page title URI
- 06:50 PM Revision a1560c1b: Use HTMLENTITIES to deprecate the ampersand
-
- Applied in changeset commit:70fee79c520702571be842f16708f3bcdaf11601.
-
- should be fixed, thanks
-
06:29 PM Bug #2863: Wrong heading for system_gateway_groups_edit.php
- It also says "Edit gateway entry" instead of "Edit gateway group entry".
-
- When editing a gateway group, the header is displayed as "System: Gateways: Edit gateway".
It should probably be "... - 05:41 PM Revision 60cd1864: Ignore vim swap files
- 01:54 PM Revision 76254caa: Be consistent on vlan checks
- 01:48 PM Revision f5c2bf1e: Fix logic inversion from 126ff5b264
- 01:48 PM Revision 43c6c9af: Check if MTU is already with correct value before change it
- 01:48 PM Revision be2c39b6: When parent is not assigned, reset it and all vlans without mtu set to default
- 01:48 PM Revision 3f3252f6: When reset parent to default mtu, deal with all VLANs too
- 01:48 PM Revision a976c633: Set vlanifs early and use it on more places to simplify logic
- 01:48 PM Revision 20eb8203: Consider parent mtu when it's set instead of default one
- 01:47 PM Revision 5ee6ce25: Simplify a bit the logic
- 01:47 PM Revision 1f9ecbcd: Pass parent interface to link_interface_to_vlans
- 01:47 PM Revision 8306b774: Fix typo on var name
- 01:47 PM Revision a1d36777: Fix typo s/assgined/assigned/
-
-
-
-
-
- how to do that coz i have just one nic and 4 VLANS configured on it, 2 WAN and 2 LAN
-
- VLANs follow the same mac address of parent interface. If it's possible, spoof the mac on parent interface to check i...
-
-
02:09 AM Bug #2861: IPSec Status Broken
- Thank you, works fine now.
-
- Tidy up System:General Setup XHTML
-
- Tidy up System:Advanced:Admin XHTML
-
- Tidy up System:Advanced:FirewallNat XHTML
-
- Tidy up System:Advanced:Network XHTML
-
- Tidy up System:Advanced:Tunables XHTML
-
- Tidy up System:Advanced:Notifications XHTML
-
- Tidy up System:Advanced:Misc XHTML
03/07/2013
- 09:23 PM Revision 481e09b3: Tidy up System:Advanced:Misc XHTML
- Close BR tags
Close INPUT tags
Update CDATA secions in script tags
Update HTML boolean operators - 09:14 PM Revision 846ac60f: Tidy up System:Advanced:Notifications XHTML
- Close INPUT tags
- 09:08 PM Revision a5a61609: Tidy up System:Advanced:Tunables XHTML
- Deprecate ampersand
Close INPUT tags - 08:56 PM Revision 3410a6c5: Tidy up System:Advanced:Network XHTML
- Close BR tags
Update CDATA sections in script tags
Update HTML boolean operators - 08:51 PM Revision 8712fab6: Tidy up System:Advanced:FirewallNat XHTML
- Close BR tags
Updated HTML boolean operators - 08:41 PM Revision 3c119b78: Tidy up System:Advanced:Admin XHTML
- Added proper CDATA sections to scripts
Updated HTML boolean operators
Close BR tagas
Close INPUT tags - 08:32 PM Revision 925020e7: Tidy up System:General Setup XHTML
- Close INPUT tags
Tidy up HTML boolean operators -
-
- Fix stale bandwidth-by-IP table entries
- 06:25 PM Revision 5356362c: Fix stale bandwidth-by-IP table entries
- When the number of valid rows in the table reduced by more than 1 between updates, stale entries were left displayed ...
-
03:36 PM Bug #2712: Openvpn and Quagga cause route collision and race condition
- I'm also experiencing this issue and applied the patch.
However, there is still a related issue. (I did not file thi... -
-
-
-
- 01:28 PM Revision 0d0d4a27: Validate MTU changes for VLANs and let user change it again
-
-
- Bandwidth by IP - allow filter by local and remote
- 01:08 PM Revision da11e022: Bandwidth by IP - allow filter by local and remote
- 01:05 PM Revision a02ce260: Bandwidth by IP - allow filter by local and remote
-
-
-
-
-
-
-
-
-
-
- 09:48 AM Revision eff8ea7d: Merge pull request #467 from phil-davis/master
- Bandwidth by IP - display static map names also when FQDN selected
- 09:18 AM Revision 2dbd8924: Bandwidth by IP - display static map names also when FQDN selected
- If display FQDN was selected, and an IP had no reverse lookup FQDN, but did have a DHCP static mapping, the static ma...
- 05:20 AM Revision 379ec2f7: Merge pull request #464 from phil-davis/master
- Add display by host name option to Traffic Graph
- 03:21 AM Revision 8389a461: Traffic Graph add option to display FQDN
- 03:19 AM Revision 232d38ab: Traffic Graph add option to display FQDN
- It was easy to give the user the choice of displaying IP Address, just the Host Name or the FQDN. And the display wra...
-
- Same Problem here with 2.1 Beta (built on Fri Mar 1 21:17:31 EST 2013)
It seems that also states without the old I... -
12:34 AM
Bug #2627: Old delegated prefixes are not removed from the LAN interface
- Testing was performed on:
2.1-BETA1 (amd64)
built on Wed Mar 6 15:11:09 EST 2013
FreeBSD 8.3-RELEASE-p6
Freshly... -
-
- Add Promiscuous Mode Option to Diagnostics Packet Capture Interface
03/06/2013
-
- Forum thread http://forum.pfsense.org/index.php/topic,59714.0.html
Now the bandwidth by IP display shows separate en... -
- 06:37 PM Revision 30406b49: Merge pull request #465 from stilez/master
- Typo in variable name
-
-
-
-
04:29 PM Bug #1629: invalid state table entries after WAN IP change
- I’ve upgraded to the latest beta, but the problem still persists. Even when the modem is restartet and i don’t get a ...
- 03:02 PM Revision c16f7c5c: Add display by host name to Traffic Graph
- 01:41 PM Revision 4006a437: Add display by host name to Traffic Graph
-
-
- Add DNS Forwarder option to not forward private reverse lookups
-
- Applied in changeset commit:2379c48e139eeebabd098a5d17062d8c463afe70.
-
- on debugging this i saw another strange behaviour with this function:
function ipsec_fixup_ip($ipaddr) {
... -
- the following two lines are also affected:
elseif (is_ipaddrv6($sp_*src*id))
$sp_dstid .= '/128';
should look ... -
- Hi,
there is a bug in
/etc/inc/ipsec.inc
on line 409
the lines
if (!strstr($sp_dstid,"/")) {
if (is_ipad... - 12:14 PM Revision 0a7985ba: Add DNS Forwarder option to not forward private reverse lookups
- 12:11 PM Revision 7bdd28fb: Add DNS Forwarder option to not forward private reverse lookups
- Currently, reverse lookups of private IP addresses that are not resolved on the pfSense box itself (e.g. like 192.168...
-
-
09:35 AM Bug #2860 (Closed): packages don't get restored
- I have a box with pfSense 2.0.2 with several packages installed:
arping
Cron
mtr-nox11
OpenVPN Client Export Util... - 09:34 AM Revision 8d64d6b5: Add Promiscuous Mode Option to Diagnostics Packet Capture Interface
- Also fix couple mismatched table cell tags
Some NIC's do not work well if placed into promiscuous mode -
08:54 AM Feature #2847: Add a checkbox to flag a gateway as "down"
- +1 same here sometimes i would like to disable my UMTS gateway a few days because of the bandwidth limit.
-
- Could you help us here?
pfSense is loosing connectivity completely now and then.
Please tell me if there's anythi... -
- hes back again so any clue on the cost
-
- Hi, sorry for this later testing.
I have figured out how to test it without upgrading to 2.1 in my production envir... - 04:10 AM Revision 2459be50: clean up text a bit, make link more apparent
- 04:06 AM Revision 0f7668fb: DNS servers are optional
- 04:06 AM Revision 9cd89a2d: descr is optional
-
03:27 AM Bug #2832: Gateway status fails when 2 WANs have the same gateway.
- Ermal Luçi wrote:
> Why do you have static gateways for your pppoe?
> Please take this to the forums since its a co... -
- this wasn't for 6rd in general as I thought, rather a diff type.
03/05/2013
-
- i have a pppoe connection and my isp requires to spoof a fixed mac but it doesnt seem to work when using vlans, witho...
-
-
- been fixed at some point since then
-
-
-
- works
-
-
-
- works
-
-
-
- works
-
-
- Current Behavior:
When an OVPN client connection goes down, any policy based routing rules pointing to the ovpnc gat... -
09:06 PM Bug #2555: check_reload_status consumes 100% CPU usage
- Unfortunately I have moved on from pfsense so I can't recheck to see if this has been resolved in later versions stil...
-
- There are a wide range of issues unrelated to check_reload_status that can cause this. At the time of the original re...
-
- look to all work
-
-
- problem as described doesn't actually exist. Guessing a GRE NAT issue from the description.
-
-
-
-
-
-
-
-
-
-
-
-
-
- Tidy up "wol" widget XHTML
-
- Tidy up "smart" widget XHTML
-
- Tidy up "services" widget XHTML
-
- Tidy up "picture" and "rss" widget XHTML
-
- Tidy up "log" widget XHTML
-
- Tidy up "ipsec" and "load balancer" widgets XHTML
-
- Tidy up "gmirror" and "installed packages" widgets XHTML
-
- Tidy up "gateways" widgets XHTML
-
- Tidy up "carp_status" widget XHTML
-
- Tidy up "captive portal" widget XHTML
- 07:12 PM Revision ebaf7d05: Tidy up "wol" widget XHTML
- Added summary to table tag
Added ALT to img tag
Closed IMG tag
Moved nowrap to class definition
Deprecated the ampers... -
- 07:03 PM Revision 623ee867: Tidy up "smart" widget XHTML
- Added a new include file.
Added summart to table tag - 06:56 PM Revision bb877f44: Tidy up "services" widget XHTML
- Added ALT to img tags
Closed off IMG tags
Deprecated the ampersand in HREF tag
Added summary to table tags
Moved nowr... - 06:38 PM Revision eabce399: Tidy up widget XHTML
- Close input tags
Change target _NEW to _BLANK
Add ALT to img tags
Add CDATA sections to scipts.
Changed name in FORM ... - 06:25 PM Revision 59261d32: Tidy up "log" widget XHTML
- Add CDATA section to scripts
Close INPUT tag
Deprecate HTML boolean operators SELECTED and CHECKED
Removed duplicate ... - 06:15 PM Revision ab28bba4: Tidy up widgets XHTML
- Add summary to TABLE tags
Moved nowrap to class definition - 06:12 PM Revision 8c5a9058: Tidy up widgets XHTML
- Added summary to TABLE tags
Closed BR tags
Added alt to IMG tags
Tidied up CDATA section in scritps. - 05:42 PM Revision 8e4bb27f: Tidy up "gateways" widgets XHTML
- Added summary to table tags
Created new INC file to jump from the dashboard to the gateway status
page - 05:32 PM Revision 7a1f4f1f: Tidy up "carp_status" widget XHTML
- Add ALT to img tags
Close img tags - 05:28 PM Revision 0b1d867b: Tidy up "captive portal" widget XHTML
- Depracated the ampersand in HREF
Move nowrap to the class definition. -
- Tidy up "interface status" widget XHTML
-
- Tidy up "interface_statistics" widgets XHTML
-
- Tidy up "shortcuts.inc" XHTML
- 05:08 PM Revision 319f65ec: Tidy up widget XHTML
- Close BR tag
Close INPUT tag
Depcrated ampersand in HREF
Added ALT to img tag
Added close body tag
Added close htm tag -
- Tidy up "system_information" widgets XHTML
- 04:58 PM Revision bb1a8946: Tidy up widget XHTML
- Removed duplicte TR tag
Move norwap to the class definition. - 04:52 PM Revision 94fbacae: Tidy up XHTML
- Added ALT to img tag
- 04:32 PM Revision 9c07440e: Tidy up widgets XHTML
- Close BR tag
Add CDATA sections to scripts
HTML width paramter must be a whole number, not a decimal. -
- It's easy to reinstall this package at System: Package Manager. I guess additional warning will be fine.
Is it enou... -
- You have somehow installed the tap fix package multiple times. Not a GUI bug.
-
- ...
-
- 2.0.2-RELEASE (i386)
built on Fri Dec 7 16:30:29 EST 2012
FreeBSD 8.1-RELEASE-p13
https://*/vpn_openvpn_server.p... -
- Can you be more specific on qwhat does not work?
-
- Applied in changeset commit:1fadb9d1129b68572e04c3fd7b12fe4bd0098519.
-
- Applied in changeset commit:afe4f2da5079fc68cd0fcdb8d5ba65b173dd5726.
-
-
- Applied in changeset pfsense-tools:commit:d09e8fddd50e95f731f7cef8d1db92ba1b4f2398.
-
- Patch pushed test with new snapshots.
-
- Why do you have static gateways for your pppoe?
Please take this to the forums since its a configuration issue rathe... -
-
-
- DNS Forwarder allow blank forwarding IP address
- 09:46 AM Revision 5f5bd76b: DNS Forwarder example text
- It was a bit silly putting the examples inside gettext() calls - they should not be translated to other languages in ...
- 09:17 AM Revision 4560c2d1: DNS Forwarder allow null forwarding address
- dnsmasq allows a blank forwarding IP address to be specified in --server parameters. In that case, dnsmasq will attem...
- 09:02 AM Revision 6f8679af: DNS Forwarder allow null forwarding address
- dnsmasq allows a blank forwarding IP address to be specified in --server parameters. In that case, dnsmasq will attem...
-
- this ticket needs to be opened again as mac spoofing when working with vlans stopped working, ill try without vlans t...
03/04/2013
-
- Added IE Mobile for WP8 to list of mobile browsers
-
-
- 12:57 PM Revision e12ad49f: Save ppp info and realif on interfaces.apply to be able to cleanup old configuration when changing interface type. Fixes #2758
- 12:50 PM Revision 4a735210: Make parent interface and all VLANs use the same MTU. Fixes #2786
- 12:37 PM Revision 74889b22: When adding a new static route, check if network address conflicts with interfaces. It will complement ticket #2852
- 12:08 PM Revision e480d64b: Fix validation of conflict between interface ip address and static routes. Fixes #2852
-
11:50 AM pfSense Packages Bug #2855: OpenVPN Client Export Utility shows deleted user certificates
- Sorry for the noise, you are right. Thanks for the superfast support.
-
- System > Cert Manager, Certificates tab.
Read the notes carefully when it prompts you to delete the user certifica... -
- Please reopen, I am willing to provide further info if you need some.
-
- For the preceeding comment...
-
- This is not a browser issue. There was never more than one not deleted cert active, and this is what I get (See attac...
-
- Unable to reproduce the problem. Please post in the forum for more help.
Deleted certificates are no longer in the... -
- I am using the OpenVPN Client Export Utility v1.0.4, and created a few certs for users, but these deleted certificate...
-
- I am using the OpenVPN Client Export Utility v1.0.4, and tried to create an "archive" export (the one with the .ovpn-...
- 11:30 AM Revision b241b144: Merge pull request #445 from phil-davis/master
- Services status widget display 1st sentence of description
- 10:09 AM Revision 41af581e: Services status widget display 1st sentence of description
- Some packages (e.g. bandwidthd, dansguardian, HAVP, nmap, squid3...) have a very verbose package description. This is...
- 09:25 AM Revision 397bff13: Merge pull request #436 from phil-davis/master
- Add DynDNS No-IP Free account support
-
- squid always routes out of default wan1 in spite of it configured in transparent mode and local ip set to loopback an...
-
- Applied in changeset commit:e12ad49f4621ec9e99ca829c2d7188ad456638f8.
-
- Applied in changeset commit:4a7352101fbd6901b46a3b6a9a3c00d23b75f0e1.
-
- Applied in changeset commit:e480d64bc5eb7a9accaad93b8845df1bf8bbb2f3.
-
- Duplicate of #1434
-
- it's not designed to, hence a feature request.
-
03:42 AM Feature #2853 (Rejected): OpenVPN RADIUS accounting
- OpenVPN Server dose not send accounting packet for radius.
-
02:49 AM pfSense Packages Bug #2624: Varnish3 Package + GUI seems broken
- Pull request #396 solves this
- 01:22 AM Revision 672d7e7b: Config file formating:
- FIX - Add new line after comment so first option statement is on uncommented line.
Prefix send host-name with tab. -
03/03/2013
-
- Just make the page validate as XHTML
-
- The only XHTML errors remaining are the ones of the general includes.
-
- Nice one, but you will get more success on getting it into main branch if you create a pull request with the changes.
-
- the LB director page is broken by this commit https://github.com/bsdperimeter/pfsense-packages/commit/9b20c9278aaf542...
-
- Pull request added: https://github.com/bsdperimeter/pfsense-packages/pull/393
-
- interfaces.php checks for "This IPv4/IPv6 address conflicts with a Static Route" are too strict. Rather than only che...
Also available in: Atom