Activity
From 03/07/2013 to 04/05/2013
04/05/2013
- 06:25 PM Revision 730790dd: Only check tunefs status when it's necessary, it avoids errors on iso boot. Fixes #2932
-
02:33 PM Bug #2883 (Resolved): pf rules contain erroneous "!/" artifact leading to "syntax error" in log
-
01:50 PM Bug #2883: pf rules contain erroneous "!/" artifact leading to "syntax error" in log
- It is fixed. At least for me. No more errors on boot. It could be gitsync issue that is not working now and was activ...
-
- Applied in changeset commit:730790dd972414dc93d687697edd75ab173e0d43.
-
- grep and awk are not called inside "configuring crash dumps", it seems it's related to commit:2085c6de5de1d9cd8864f85...
-
03:07 AM Bug #2932 (Resolved): Missing commands configuring crash dumps on iso boot
- I've added a screenshot of a 2.1 AMD 64 iso boot procedure
/etc/rc complains that it can not find awk and grep. T... - 01:09 PM Revision 43213ceb: change back to PRERELEASE, we'll re-enable public snapshots until we're confident the build problem is resolved.
-
05:30 AM Bug #2752 (Resolved): Captive Portal Last Activity isn't update anymore --> idle timeout just after login
-
05:03 AM Bug #2752: Captive Portal Last Activity isn't update anymore --> idle timeout just after login
- Issue solved with 2.0.3 please close ticket.
-
- This issue isn't solved with 2.0.3
With each release I have to modify the function "RADIUS_ACCOUNTING_STOP" in fil...
04/04/2013
- 11:56 PM Revision ceb09a8c: fix text
- 11:51 PM Revision 8b7c19ed: source IP is optional
-
10:38 PM Feature #2931 (Resolved): Import latest ixgbe drivers from FreeBSD 8-STABLE
- Numerous bug fixes and performance optimisations have been MFC'd into 8-STABLE:
http://lists.freebsd.org/pipermail/s... -
07:52 PM Bug #2919: IPv6 - WAN and LAN (DHCP-PD) does not renew address
- Either this issue or something similar happens when you change anything on the WAN interface settings page and hit ap...
-
02:57 PM pfSense Packages Bug #2930 (Resolved): NRPE package broken on 2.1
- Hi,
I've installed the latest 2.1 beta software and tried to install the NRPE v2 client (version 2.12_3 v2.1) with... -
02:35 PM Bug #2929 (Rejected): One-way OpenVPN Bridge
- There is not enough information here for a legitimate bug report. Please discuss it in the forum until an actual bug ...
-
02:29 PM Bug #2929: One-way OpenVPN Bridge
- This bug is in pfsense 2.1.
-
- When OpenVPN Bridge connection (Remote Access(SSL/TLS), UDP, tap) is established the clients from local pfsense subne...
-
- I have the same problem.
-
- Not enough information there for a legitimate problem report. Please post/discuss the issue on the forum first.
-
11:07 AM Bug #2927 (Rejected): Link Down Detection
- PFSense 2.1 is not detecting link failure, even with Alternate Monitor IP.
- 12:06 PM Revision aa752473: Only reload racoon when there is at least one tunnel enabled on the interface used to call rc.newwanip(v6). It fixes #2922
-
11:45 AM Bug #2928 (Closed): Authentication attempts against multiple radius servers should stop when the first reject is received.
- The radius.inc code in pfsense treats anything that is not an radius accept as the same kind of failure. It does not ...
-
- Applied in changeset commit:aa752473de6736186ee0ab6355046b6383521091.
-
06:24 AM Feature #2926 (Rejected): Predefined port name for radius - proxy (1814)
- When configuring pfsense for lan -- wan radius proxying (such as in Eduroam) it would be handy to get the "RADIUS pr...
04/03/2013
-
- Tidy up "system_gateway_groups_edit.php" XHTML
-
- Tidy up "system_gateway_groups.php" XHTML
-
- Tidy up "system_routes_edit.php" XHTML
-
- Tidy up "system_routes.php" XHTML
-
- Tidy up "system_gateways_edit.php" XHTML
-
- Tidy up "system_gateways.php" XHTML
-
- Tidy up "system_hasync.php" XHTML
-
- Tidy up "pkg_mgr.php" XHTML
-
- Tidy up "pkg_mgr_installed.php" XHTML
- 08:09 PM Revision efb67eda: Tidy up "system_gateway_groups_edit.php" XHTML
- Close INPUT and BR tags
Add missing closing TD tag
Add space to stop TD/STRONG tag generating errors
Remove closing T... -
08:09 PM pfSense Packages Feature #2925: "Monit" Monit for customized monitoring and alerting
- Downgraded to very low... with no reason :'(
COME ON! -
- I would really like to see Monit supported as an official package integrated into the WebGUI. It is fully compliant, ...
- 08:04 PM Revision f488ef5a: Tidy up "system_gateway_groups.php" XHTML
- Close INPUT and IMG tags and add alt to IMG tags
Move TFOOT between THEAD and TBODY, this is a "quirck" of HTML
Move ... - 07:57 PM Revision dcdff6fa: Tidy up "system_routes_edit.php" XHTML
- Close INPUT, BR and IMG tags and add alt to IMG tags
Update HTML boolean operators
Remove name statements from DIV ta... - 07:54 PM Revision 1bc92a15: Tidy up "system_routes.php" XHTML
- Close INPUT, BR and IMG tags and add alt to IMG tags
Move start TR tag with the PHP foreach statement
Move NOWRAP to ... - 07:51 PM Revision a1dccfc6: Tidy up "system_gateways_edit.php" XHTML
- Add CDATA section to SCRIPT tags
Close INPUT and BR tags
Update HTML boolean operators - 07:49 PM Revision 0cabd5db: Tidy up "system_gateways.php" XHTML
- Close INPUT and IMG tags and add alt to IMG tags
Deprecate the ampersand in ANCHOR tags
Move NOWRAP to class - 07:08 PM Revision 732f4625: Tidy up "system_hasync.php" XHTML
- Close P tags
- 07:01 PM Revision c6fb839b: Tidy up "pkg_mgr_installed.php" XHTML
- Add closehead variable and move scripts into HEAD and manually close
HEAD
Add missing close FONT tag
Close BR tags
De... - 06:58 PM Revision bf5b29ec: Tidy up "pkg_mgr.php" XHTML
- Add closehead variable, move scripts into HEAD and manaully close head.
Close BR tags
Deprecate ampersand in ANCHOR t... - 05:56 PM Revision 974947be: Merge pull request #521 from ExolonDX/branch_15
- Tidy up "firewall_schedule_edit,php" XHTML
- 05:55 PM Revision c4b73934: Merge pull request #520 from ExolonDX/branch_14
- Tidy up "firewall_schedule.php" XHTML
- 05:54 PM Revision 2a9992a3: Merge pull request #519 from ExolonDX/branch_13
- Tidy up "system_advanced_misc.php" XHTML
- 05:54 PM Revision 86914f53: Merge pull request #518 from ExolonDX/branch_12
- Tidy up "diag_patterns.php" XHTML
- 05:53 PM Revision f6c70939: Merge pull request #517 from ExolonDX/branch_11
- Tidy up "system_firmware_restorefullbackup.php" XHTML
- 05:53 PM Revision bbc9c45f: Merge pull request #516 from ExolonDX/branch_10
- Tidy up "system_firmware_settings.php" XHTML
- 05:53 PM Revision 4f19f380: Merge pull request #515 from ExolonDX/branch_09
- Tidy up "system_firmware_auto.php" XHTML
- 05:52 PM Revision 9226959a: Merge pull request #514 from ExolonDX/branch_08
- Tidy up "system_firmware_check.php" XHTML
- 05:52 PM Revision 40d00dd4: Merge pull request #513 from ExolonDX/branch_07
- Tidy up "system_firmware.php" XHTML
- 05:52 PM Revision cc46f31d: Merge pull request #512 from ExolonDX/branch_06
- Tidy up "pfsense-utils.inc" XHTML
- 05:51 PM Revision 29c709af: Merge pull request #511 from ExolonDX/branch_05
- Tidy up "firewall_shaper_layer7.php" XHTML
- 05:51 PM Revision fe5fd3d6: Merge pull request #510 from ExolonDX/branch_04
- Tidy up "firewall_shaper_vinterface.php" XHTML
- 05:50 PM Revision 1275bddb: Merge pull request #508 from ExolonDX/branch_02
- Tidy up "firewall_shaper.php" XHTML
- 05:50 PM Revision 050e886e: Merge pull request #509 from ExolonDX/branch_03
- Tidy up "firewall_shaper_queues.php" XHTML
- 05:49 PM Revision ebaad519: Merge pull request #507 from ExolonDX/branch_01
- Tidy up "shaper.inc" XHTML
- 05:17 PM Revision 95f133d2: Tidy up "firewall_schedule_edit,php" XHTML
- Add CDATA section to SCRIPT tags
Close BR and INPUT tags
Tidy up HTML tags to lower case
Tidy up HTML boolean operato... - 05:14 PM Revision d2155191: Tidy up "firewall_schedule.php" XHTML
- Add ALT paramenter and close IMG tags
Tidy up close TR tag
Move NOWRAP into class parameter
Deprecate the ampersand i... - 04:51 PM Revision 779c00dd: Tidy up "system_advanced_misc.php" XHTML
- Tidy up HTML boolean operators
- 04:50 PM Revision e7de4b89: Tidy up "diag_patterns.php" XHTML
- Close INPUT tags
Move closing FORM tag to correct place - 04:47 PM Revision 931dde97: Tidy up "system_firmware_restorefullbackup.php" XHTML
- Close BR and INPUT tags
Add CDATA section to SCRIPT tags - 04:45 PM Revision 4a76b802: Tidy up "system_firmware_settings.php" XHTML
- Add closehead variable and move SCRIPT into HEAD
Add CDATA section to SCRIPT tags
Close BR and INPUT tags - 04:42 PM Revision a18b04d8: Tidy up "system_firmware_auto.php" XHTML
- Add closehead variable
Move META and LINK tags into HEAD and manually close HEAD
Tidy up the TABLE tag, move height a... - 04:37 PM Revision e8df541c: Tidy up "system_firmware_check.php" XHTML
- Remove closing HEAD tag
Move height and colspacing parameters into a style statement
Update background in TD tag to c... - 04:32 PM Revision 02559d7d: Tidy up "system_firmware.php" XHTML
- Close P, BR and INPUT tags
Remove duplicate end TD tag
Remove closing SPAN tag
Add missing closing TR tag
Add missing... - 04:27 PM Revision 6e4e6286: Tidy up "pfsense-utils.inc" XHTML
- Add type to SCRIPT tag
Add CDATA section to SCRIPT tags - 04:23 PM Revision e573ee95: Tidy up "firewall_shaper_layer7.php" XHTML
- Add missing closing SPAN tag
Remove P tag and class from shaper message
Swap TABLE and DIV tags
Add CDATA sections to... - 04:18 PM Revision a8f63907: Tidy up "firewall_shaper_vinterface.php" XHTML
- Remove P tag and class from shaper message
Swap TABLE and DIV tags around, TABLE cannot contain a DIV tag - 04:16 PM Revision 7519ed16: Tidy up "firewall_shaper_queues.php" XHTML
- Update P tag correctly
Add dummy row to TABLE tag, if there are no queues then the table is
empty and generates HTML ... - 04:12 PM Revision 4eb7d4d7: Tidy up "firewall_shaper.php" XHTML
- Remove P tag and class from shaper message
Swap the DIV and TABLE tags around, TABLE cannot contain a DIV statment - 04:08 PM Revision d8484854: Tidy up "shaper.inc" XHTML
- Add missing end TR tag
Add missing end TD tag
Add missing end SPAN tag
Move table row start into the PHP IF statement... -
-
10:10 AM Revision cd4a47d8: Merge pull request #504 from awm/ldap_deref
- Set LDAP option to dereference aliases when searching
-
- Disabled package is also indicated by enable blank
-
- Resync relevant OpenVPN instances when gateway group settings are modified
- 08:15 AM Revision 20202629: Disabled package is also indicated by enable blank
-
06:52 AM pfSense Packages Feature #2825: OpenBGPd: Add options prepend-neighbor and prepend-self
- Hi,
also an Option "set nexthop <ip>" would be great for CARP IP announcing (and perhaps also "set nexthop no-modi... - 01:05 AM Revision c5df941e: bump to 2.0.3-RELEASE
04/02/2013
- 10:17 PM Revision ae5f96c8: Fix URL add when you break sequence for addresses and details, shile I'm here, simplify logic
- 07:22 PM Revision 7cbeade1: Preserve all URLs when one of them is invalid
- 06:53 PM Revision 5a815dc7: Back to previous tab when click on Cancel
- 06:41 PM Revision 6a45942f: Preserve old URLs when an error happens, also, fix descriptions save for URLs
- 06:41 PM Revision c5eaef8e: Simplify logic
- 06:36 PM Revision 3d3081ec: Set LDAP option to dereference aliases when searching
-
-
-
-
- 03:34 PM Revision ac7f1763: Return to correct tab after save or delete an alias
- 03:34 PM Revision 9db1ff32: Fix whitespaces, indent and add a missing <tr>
- 03:34 PM Revision 43d049ac: Avoid adding URLs to filterdns.conf. It fixes #2921
- 03:34 PM Revision 0b9e4e8f: Save URLs and URL Table details
- 03:34 PM Revision f29109d0: Fix whitespaces and indent
-
-
-
-
-
-
-
- Applied in changeset commit:43d049ac6a6710ee2d3c933d6c02ee44c5d81dc3.
-
- URL Table URLs are wrongly added to filterdns.conf. To replicate, just add a URL Table alias pointing anywhere, and c...
-
- vpn_ipsec_force_reload() gets run from /etc/rc.newwanip but it's done no matter what interface goes up/down. vpn_ipse...
-
06:38 AM pfSense Packages Bug #2920: OSPF on interfaces with IP Alias and carp unpredictable
- When applying settings, I get the folowing error:...
-
- I just found out that the interface on fw1 had an ip of 172.20.20.0/24. Don't know how that managed to get through th...
-
- probably more of a feature request, will leave as is for future examination in this context
-
- I have an interface with IP 172.20.20.2 and CARP address 172.20.20.1. Due to legacy, this interface also has IP Alias...
04/01/2013
-
09:08 PM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes
- Running pfSense 2.0.2 stable with same IPsec tunnel issue (no tunnel data on reconnect, racoon restart needed)
I f... -
-
-
08:18 PM Bug #2919 (Resolved): IPv6 - WAN and LAN (DHCP-PD) does not renew address
- The WAN DHCP IPv6 address and LAN DHCP-PD lease time from the provider is 4 days. When the lease expires, pfSense go...
-
- 03:40 PM Revision 9d7204aa: Consider packages that set enable to 'false' or 'off'
- 03:35 PM Revision 17c56f4a: Merge pull request #501 from phildd/master
- Support for disabled services on services status displays
-
03:20 PM pfSense Packages Bug #2918 (Rejected): ntpd doesn't sync if not bound to any interface
- When no interfaces are selected under Services=>NTP, in attempt to use NTP only for timekeeping on the server itself,...
- 02:56 PM Revision 0ad707c6: Do not allow to rename a gateway group, as it is for gateways. Fixes #2914
-
-
11:12 AM Bug #2914: Gateway Group Name change causes all rules and OpenVPN interfaces using that group to be invalid
- I actually have code that does the rename through the config. I couldn't submit a pull request because it touches the...
-
- For 2.1 it's better to avoid such a big change, and since a gateway cannot be renamed, apply the same rule for gatewa...
-
- Applied in changeset commit:0ad707c6b93d41bf731c547b49252af4a15a5649.
- 02:30 AM Revision fc7f02c6: Do not display disabled services on services status widget
- 02:26 AM Revision ccfc0269: Check for disabled services when displaying service lists
03/31/2013
-
12:11 PM Bug #2412: inbound 6to4 traffic does not work in pf
- Update:
Upgraded to today's (March 30) snapshot. Now inbound connections work OK.
A little bit scary, however...
03/30/2013
-
- not enough here to make this a legit bug report, feel free to start a discussion on the forum or mailing list and if ...
-
07:11 PM Bug #2917: High CPU Usage
- It appears to be caused by Firefox. As the number of Firefox browsers that are open with pfSense increases, the high...
-
- 2.0.2 running on D525 Atom with virtually zero CPU usage. Atom hardware replaced with Xeon CPU E5504 @ 2.00GHz with ...
03/29/2013
-
- Tidy up HTML boolean operators
- 07:25 PM Revision ce0117f7: Update HTML boolean operators
- Updated CHECKED, SELECTED and DISABLED boolean operator
-
- 08:44 AM Revision 30ca7b7e: Resync OpenVPN instances that use any changed gateway groups
- 08:42 AM Revision 8bca0805: Remember whcih gateway groups have been edited
- 08:40 AM Revision 99cc103b: Provide openvpn_resync_gwgroup function
- Allows all OpenVPN servers and clients that use a particular gateway group to be resynced in one easy call.
-
- /etc/rc.openvpn does not get passed the interface, so it has no idea what is going on. I can't see an easy way to get...
03/28/2013
-
- as long as it only impacts OpenVPN instances on the interface where the event occurred, it should be fine to call res...
-
- Easy to reproduce - setup OpenVPN client on interface WAN. Have it running connected to a server somewhere. Physicall...
-
- The Group Name is stored directly in the config of firewall rules, OpenVPN interface selection (and elsewhere...?). W...
-
- I have a gateway group VPNgways with WAN=Tier1, OPT1=Tier2. The OpenVPN servers and clients use interface VPNgways. T...
- 07:25 PM Revision a8f5790a: Fix whitespaces and indent
-
04:44 PM Bug #2753: RRD Graphs failes after pfSense upgrade (2.0.1 -> 2.0.2)
- Have been watching status on this issue for a couple months, since a similar scenario has applied to my setup as well...
- 12:00 PM Revision 7a47e299: Avoid send user to top of the page when you open add new gateway box
-
- Applied in changeset commit:e2ec86f40c9573292a46d4ab89ae70e353a99f8f.
-
- This pull request should fix it: https://github.com/pfsense/pfsense-packages/pull/415
03/27/2013
-
09:21 PM pfSense Packages Bug #2902: Snort does not update snort.org (basic?) rules. Possibly clock blocking by snort.org for basic subscribers.
- Issue is that the 2941 rules are not yet available to registered users, only subscribers. Modify the $snort_rules_fil...
-
- Same issue here, have tried the manual update but still no result.
-
- indeed it's not possible to do as described, but I've been irked on more than one occasion by it just bailing out wit...
-
- There is no way to know or detect the fact that the update is signed or unsigned until it has been fully downloaded. ...
-
06:34 PM Feature #2912 (Resolved): Updater handles unsigned updates poorly when used on beta/snapshot releases
- Running 2.1 beta, and notified of an available snapshot update, the updater attempts to download the update but only ...
-
07:32 PM pfSense Packages Bug #2892: "pfblocker_Range2CIDR" function yields erroneous results (pfBlocker v1.0.2)
- When doing some addtional work, I noticed that I mistyped the CIDR generated by the "pfblocker_Range2CIDR" function -...
- 02:11 PM Revision 3ffdcd4e: Add a new class called addgatewaybox to make it easier to respect custom themes. Fixes #2900
- Conflicts:
usr/local/www/interfaces.php
usr/local/www/themes/_corporate/all.css
usr/local/www... -
11:38 AM Revision d6307bd3: Fixes #1477. Use the new parameter to reduce igmpproxy logging level
-
- Applied in changeset commit:d6307bd38ef0d50caf1d0224a845a206f00da1aa.
-
- general FreeBSD issue I suspect is likely already fixed in newer versions. If not, it'll have to be reported upstream...
03/26/2013
-
-
07:54 PM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes
- I was using 2.1 BETA also and experienced the same issue as David Duchscher. I had to revert back to 2.0.2 stable so ...
-
01:36 PM Bug #2911 (Rejected): pfsense boot error on usb image w/o usb keyboard plugged in
- I deployed pfSense-2.0.2-RELEASE-4g-amd64-nanobsd_vga.img.gz on a 4gb usb thumbdrive on a Dell XPS 400 with no hard d...
- 12:43 PM Revision 4ad1e4ea: Add a new class called addgatewaybox to make it easier to respect custom themes. Fixes #2900
-
-
-
-
-
-
- Applied in changeset commit:4ad1e4ea74f621c01f9997f46ee7dff412dcc817.
-
-
- Tidy up "shaper.inc" XHTML
-
- Could not reproduce it here using latest snapshot, tier1 was used as expected on rules when it's up.
03/25/2013
-
- thanks
-
09:13 PM Bug #2905: radvd.conf does not include all configured RDNSS entries
- Looks like this issue is resolved. Tested with snapshot:
2.1-BETA1 (i386)
built on Mon Mar 25 15:43:19 EDT 2013
... -
- Applied in changeset commit:3d73a44d84accdb2f70abf705aed9b3858292317.
-
- When there is a tier 1 gateway that's being monitored, and a tier 2 gateway with monitoring disabled, the system skip...
- 09:46 PM Revision 6f1bcc36: Tidy up "shaper.inc" XHTML
- Close INPUT tags
Close IMG tags and add "alt" parameter
Change ONCLICK and ONCHANGE to lowercase -
-
- Do not bother with bogonsv6 if IPv6 allow is off
- 01:05 PM Revision 939cc57a: Fix file name reference
- 12:33 PM Revision 3d73a44d: Use configured dns servers on radvd.conf, fixes #2905
- 11:26 AM Revision aa95e7da: Merge pull request #495 from phil-davis/master
- Dynamic DNS add option for verbose logging
-
11:01 AM pfSense Packages Feature #2908 (Needs Patch): Add nginx package to available for install
- It would be really great feature, cause nginx reaaly great web serser with great proxy possibilities.
and now it i... - 10:38 AM Revision 8550a21c: Improve bogonsv6 checks during update
- Improvements to using pfctl to check the existence of the bogonsv6 table.
-
- Tidy up "shaper.inc" and "firewall_shapper.php" XHTML
03/24/2013
-
- Version Data: (from snapshots)
2.1-BETA1 (i386)
built on Sat Mar 23 22:03:50 EDT 2013 -
- The ipv6 RA does not include all configured dns entries from services_router_advertisements.php configuration page.
... -
06:33 PM Feature #2904 (Resolved): Add checkbox or default option for "verify_identifier on;" on IPsec RSA VPNs
- The ASN1DN field on the "peers_identifier" option within racoon.conf can be used to specify which certificate or set ...
-
03:41 PM pfSense Packages Bug #2903 (Not a Bug): Lightsquid realtime stat 403 error
- With a fresh lightquid install (and with several reinstall attempts) I get the following error when attempting to acc...
- 12:45 PM Revision c858c609: Do not bother with bogonsv6 if IPv6 allow is off
- Only implement the bogonsv6 table if IPv6 allow is on. Otherwise, if it looks like there would be room for the table ...
- 12:43 PM Revision e714e996: Do not bother with bogonsv6 if IPv6 allow is off
- The rules already block all IPv6 when IPv6 allow is off, so it is a waste of 70,000+ table entries of V6 bogons. On s...
03/23/2013
- 09:12 PM Revision 7da5315d: Tidy up "shaper" and "firewall shaper" XHTML
- Update VALIGN
Deprecated the ampersand in ANCHOR tags
Update TYPE in script -
- *update*
The tar file contains the ... -
- Snort 2.9.4.1 pkg v. 2.5.4 on 2.1-BETA1 (i386) built on Fri Mar 22 22:56:09 EDT 2013
I've tested and found this pr... -
- I get sig 11 (segmentation fault) failures as well. ...
-
- I set up the traffic shaper using the wizard, it worked fine for a few hours (4) then at some point started throwing:...
03/22/2013
- 07:22 PM Revision e680b2f9: Add checks to make sure CP hard timeout is less or equal DHCP server default lease time. It fixes #2899
-
-
-
- 04:41 PM Revision 1e503870: Dynamic DNS add option for verbose logging
- The verbose log option is "set or not set" in the config and needs to be passed to subroutines as a boolean true or f...
- 04:28 PM Revision 87b91672: Dynamic DNS add option for verbose logging
- Put most log messages inside "if verbose logging". Things that are always logged are actual errors and success messag...
- 04:25 PM Revision c8c90b81: Dynamic DNS add option for verbose logging
- This will allow the user to decide if they want all the noise in syslog. It defaults to off, so the log messages will...
-
- Tidy up "shaper.inc" XHTML
- 03:47 PM Revision 0fa05f45: Tidy up "shaper.inc" XHTML
- Add CDATA sections to javascript
Close off the BR tags -
- Tidy up "traffic shaper wizard" XHTML
-
- Tidy up "traffic shaper layer7" XHTML
-
- Tidy up "traffic shaper limiter" XHTML
-
- Tidy up "traffic shaper queue" XHTML
-
- Tidy up "traffic shaper" XHTML
-
- On Interfaces configuration, when you click "add a new one" to add a new gateway, it's using a hardcoded bg color #99...
- 02:58 PM Revision 4271dfb8: Tidy up "traffic shaper wizard" XHTML
- Move "tree.css" to the HEAD statement and manually close the HEAD
statement
Close BR and P tags - 02:54 PM Revision e750c0af: Tidy up "traffic shaper layer7" XHTML
- Close INPUT, BR, P and IMG tags
Add "alt" to IMG tags
Add CDATA section to scripts
Move "tree.css" and "tree.js" to t... - 02:42 PM Revision 2174be22: Tidy up "traffic shaper limiter" XHTML
- Close INPUT, BR, IMG and P tags
Add "alt" to IMG tags
Deprecate ampersand in ANCHOR tags
Add CDATA section to scripts... - 02:35 PM Revision f6b81501: Tidy up "traffic shaper queue" XHTML
- Deprecate the ampersand in the ANCHOR tag
Close BR and P tags
Move "tree.css" and "tree.js" to the HEAD statement and... - 02:29 PM Revision df5c0bc0: Tidy up "traffic shaper" XHTML
- Close INPUT, BR and P tags
Update PHP Shorthand tag
Spelling mistake
Move "tree.css" and "tree.js" to the HEAD statem...
03/21/2013
-
05:26 PM Bug #2890: radvd segmentation fault
- 2.1-BETA1 (i386)
built on Thu Mar 21 04:30:58 EDT 2013
FreeBSD 8.3-RELEASE-p6
Updated to the above version and r... -
-
-
03:04 PM Bug #2891: Limiter does not work with high speed
- Forgot to tell that I did a total rekonfiguration but have tried to rekosntruct the limiter issue. I think you are ri...
-
- You have only 50 slots meaning 50 packets.
Can you configure the 'Queue Size' under advanced options of limiters to ... -
- Sure. I think you are just right. Command in shell is the same as "limiter info" in the GUI I guess.
Limiters:
00... -
-
-
-
-
- Thermal Sensors Widget (for pfSense v2.1-BETA1 and up).
-
-
-
- In some cases, IPsec failover using a gateway group will not move from one WAN to another properly. Unfortunately thi...
-
-
-
- DynDNS status widget async update
-
08:20 AM Bug #2893: Add extTable to SNMPd or change sysDescr.
- Nice, thank you!
-
- Applied in changeset commit:dadf8ebb488c6dbefc84cf1a104e1d34e41966bb.
- 02:51 AM Revision b23e1a70: DynDNS status widget add 5 minute refresh
- It was easy to add the code to refresh the status every 5 minutes. I think 5 minutes is a reasonable refresh time for...
03/20/2013
-
- Track apinger status in /var/run instead of /tmp
-
-
-
-
-
-
-
-
- I updated to the following:
2.1-BETA1 (i386)
built on Tue Mar 19 16:35:08 EDT 2013
FreeBSD 8.3-RELEASE-p6
O... -
- I have put a fix for radvd.
Can you test with a newer snapshot? -
-
- I found old mails in mailing list, which discussed the issue:
http://www.mail-archive.com/support@pfsense.com/msg086... -
- The commands would only work if the user has the UCD module loaded, which is possible on 2.1. I would hesitate to add...
-
- Please add extTable lines in bSNMPd config (/var/etc/snmpd.config) like:...
- 02:19 PM Revision c1dcb7ab: DynDNS status widget async update
- The Dynamic DNS status widget performs remote operations to the www to check the cached dynamic DNS IP against the ac...
- 09:01 AM Revision 3e3ff931: Track apinger status in /var/run instead of /tmp
- This is a one line status file updated every few seconds. It would be
better to store this in /var/run since that is ... -
08:33 AM Bug #1974: Captive Portal RADIUS accounting bytes wrong
- Not it is not fixed it was much better some time ago but recent tests have the same results 700 MB through the portal...
-
-
-
-
-
-
-
- Probably you have to increase the queue of the limiter to hold that traffic.
Can you show an ipfw pipe show of your ... -
- E.G. the file
http://list.iblocklist.com/?list=bt_ads&fileformat=p2p&archiveformat=gz
on 2013-Mar-18 has/had an ent...
03/19/2013
-
-
- 08:06 PM Revision 4e6667b2: Simplify a bit logic
- 08:01 PM Revision e5a27e16: Fix typo
-
-
-
- On 2.0.2 limiters only work up til aprox. 15Mbitps. Limiters set to speeds higher than 15Mbit will act if they are ju...
-
- 06:52 PM Revision def432e6: Make sure file has content before call route delete
- 06:36 PM Revision 46e27ea7: Respect 'States' option from Advanced/Misc
- - Respect this option and do not clean states when it's configured
- Create /etc/rc.kill_states to be easier to check... - 06:36 PM Revision 9cc119c2: Remove redundant call
- 06:36 PM Revision 2c27096c: Improve ppp-linkdown:
- - Improve readability giving name to parameter variables
- Add path for all command calls - 06:36 PM Revision 6d5460e6: Fix default route deletion
- 06:36 PM Revision 94b49d82: Fix indent
-
-
-
-
-
-
- 2.1-BETA1 (i386)
built on Tue Mar 19 05:51:13 EDT 2013
FreeBSD 8.3-RELEASE-p6
radvd segfaults on my router with ... -
02:48 PM Bug #2889 (Closed): ACK Traffic Put in Normal Queues. Normal Traffic Put in ACK Queues
- We are running 2.0.2 i386. We've noticed any rules that came from 2.0.1 are fine, however if we create new rules on o...
-
- It's now respecting <kill_states/>
-
- The state killing in ppp-linkdown only kills the NAT states on the affected WAN. It leaves the firewall states there,...
-
-
-
-
- The dBm values array was reversed, corrected
- 12:23 PM Revision 7488a9e0: Fix whitespace and indent
-
-
-
-
-
-
-
- 12:08 AM Revision 4fc54000: Thermal Sensors Widget (for pfSense v2.1-BETA1 and up).
- Original post: http://forum.pfsense.org/index.php/topic,59193.0.html
03/18/2013
-
-
-
-
-
-
-
-
-
- I have tested this fix already with no luck
Provided more information here http://forum.pfsense.org/index.php/topic,... -
- I already have pushed a fix for this.
Test with newer snapshots. - 01:32 PM Revision f6461410: Avoid trying to remove an invalid IP
-
-
-
- Applied in changeset pfsense-tools:commit:f7608973a69f99c0e0a8fca652579991a9b1607b.
03/17/2013
-
- Diag DNS Lookup Dialog Output
- 12:19 AM Revision fe74228f: Diag DNS Lookup Dialog Output
- Display DNS lookup results in a dialog box rather than browsing away from the current page (Dashboard Firewall Widget...
03/16/2013
-
- Just a Couple Minor Tweaks
- 09:07 PM Revision c3b8ad61: Just a Couple Minor Tweaks
- 04:09 PM Revision e074fb75: Use killbypid instead of a killall that never works
- 02:47 PM Revision 6a69bc65: Use realif on dhcp6 pid filename since find_dhcp6c_process() looks for it and cannot kill it
- 01:32 PM Revision 6d529efd: Fix indent and whitespaces
- 11:56 AM Revision 2abfec49: Initialize array to silence warnings on foreach
- 11:34 AM Revision fba196c3: Avoid deleting the RA Subnet when IP is invalid, also simplify it a bit
- 11:26 AM Revision e1968b0d: Fix indent and whitespaces
03/15/2013
-
- System Firewall Log Filtering by Fields
-
- It was changed to just put the first sentence of description in changeset commit:41af581edd49bb920a783bf5b78f9bbfe2a7...
-
10:15 AM Feature #2886: multiple ips per carp vhid group
- > You can add IP alias VIPs on top of a single CARP VIP to have as many IPs as you want on a single VHID in pfSense 2...
-
- This isn't relevant to how we use CARP.
You can add IP alias VIPs on top of a single CARP VIP to have as many IPs as... -
- since I can't find very detailed information on how carp works (under the hood i mean) i've read some documentation o...
-
- Our future pfsense boxes will be to distributing traffic over our appservers. Currently we use two old debian Lenny b...
- 09:17 AM Revision 74c6d36f: System Firewall Log Filtering by Fields
- Previous filter form retained for raw logs view.
- 09:16 AM Revision e46adb09: Merge pull request #482 from mdima/master
- Fixes IPSec Status for natted tunnels
-
09:13 AM Revision 1bad1025: Fixes IPSec Status for natted tunnels
- See http://redmine.pfsense.org/issues/2884 for details.
Thanks, Michele -
- thanks!
-
- Done! ;)
-
- That sounds sane. I haven't dug into this part of the code though. If it works and you think that's reasonable, go ah...
-
- Since the SPD entries are not specular, in stead of searching for the "in" entry, we could look for the "out" entry, ...
-
- I've noticed this on every install I've worked on with NAT lately too, it works just fine but the status always shows...
-
- Hi,
the status of the Phase2 is reported as down in case of NAT before IPSec, while the tunnel is up and working ... -
- most parts of rule generation ensure a legit IP and subnet, need to fix that for this circumstance. Where these retur...
03/14/2013
-
- I found this one in 2.0.x, but not yet in 2.1. However it looks like someone else had it happen identically:
http://... -
09:13 PM Bug #2882 (Resolved): 6RD not working in latest snapshots
- Hi guys,
I use Charter's 6RD service to get ipv6 connectivity. I'm currently running the Jan 18th snapshot and my ... - 05:08 PM Revision d632dd5a: Check if IP is already configured on console setup
-
-
10:01 AM pfSense Packages Bug #2870: External DNS server always takes precedence over internal servers
- My solution to the problem was to create a DNS domain override for the internal domain. It also wasn't necessary to s...
-
- It's already in 2.1, and working.
-
06:42 AM Feature #2881 (Closed): LDAP Support for xauth for IPsec mobile clients
- Hi,
please add the option to use the LDAP backend for xauth in IPsec.
As I found a topic on that, there is alread...
03/13/2013
-
11:48 PM pfSense Packages Bug #2747: Snort ignores memcap settings
- This can be closed. Issue resolved by BMeeks with Snort version 2.5.4
-
07:52 PM pfSense Packages Bug #2879 (Closed): uninstalling Postfix Forwarder leaves widget
- The uninstall script for "Postfix Forwarder" doesn't delete any postfix related widgets from the homepage. This resul...
-
- Enhance tmp and var size checks
- 06:56 PM Revision 8ad8b044: Enhance tmp and var size checks
- Gets rid of the following console "unexpected operator" messages during boot:
Mounting filesystems...
[: -gt: unexpec... - 06:54 PM Revision 7d88b426: Re-enable admin user if it's disabled when 'Reset webConfigurator password' option is used. Fixes #2877
-
03:47 PM Bug #2878 (Resolved): radvd does not restart properly
- On the latest 2.1-BETA1 (i386) - built on Thu Mar 7 01:55:06 EST 2013 build, the radvd daemon does not automatically ...
-
- Applied in changeset commit:7d88b4269f01f2282a05df3e671da3f71704d17b.
-
01:04 PM Bug #2877 (Resolved): Reset webconfigurator password does not unlock admin account
- When the Reset webconfigurator password option is used it states that all permissions have been reset. How ever if th...
-
- 09:55 AM Revision 5077b1e4: fixup text
-
-
-
-
- radns was updated and now builds fine
-
- thanks for feedback
-
08:53 AM Feature #2858: Do not route rules to default gateway when its own gateway is down
- It's working perfectly then :)
Sorry about the previous confusion. -
- Exactly, or you can negate the 192.168.99.151 as src on rule that allow all traffic from 192.168.99.0/24.
-
- Unfortunately we can't write a novella to explain the subtle nuances of every option in the GUI. The revised descript...
-
- (Sorry, Chris - overlapped yours and didn't see your comment)
-
- Thanks, that explanation makes sense. (It may be that some apparent "issues" actually relate to improving narrative a...
-
- the block rules override every user-defined and auto-added rule, which is the intent of the feature. It's not enable/...
-
- I'll try to reword it, but "allow" and "blocked" imply firewall actions, "disabled" would imply features being shut o...
-
- The narrative reads "All IPv6 will be blocked unless this box is checked". That's not the same as "merely blocks by d...
-
- "Allow IPv6" is not a master switch to disable IPv6 functions. It merely adds a block rule to prevent IPv6 from passi...
-
- Some automatic IPv6 rules still get created if IPv6 is disabled (not clear if this is intentional). Two examples: the...
-
-
-
-
- I checked and it's fixed.
-
-
-
- IPv6 rules can certainly have 'any' as the protocol, that can and has worked since IPv6 was added.
IPv4+IPv6 rules... -
- IPv6 rules doesn't allow "any" or "ignore" as valid for protocol in a rule - but there isn't a full TCP/UDP/ICMP filt...
03/12/2013
-
- Ah my apologies... Its working as you have written..
Silly me.
I'm assuming that I should now be placing a DEN... -
- It appears the rules related to gateway OVPNC1 drop when the VPN is stopped/failed.
-
- Could you show me /tmp/rules.debug in 2 different moments, when OVPN is up and when it's down?
-
- Wow thanks for working to add this!
I've applied the patch to pfSense-2.1-BETA1-amd64-20130312-0847 and it does no... -
- Applied in changeset commit:a1f735b31c8f7f0cca0ebc5a7153cd06cdf4482e.
-
- It's the expected behaviour today, so change it to a Feature and adjust Subject as well
-
- Duplicate of #2433
-
- When setting up a PPPoE WAN on @interfaces.php?if=wan@, there is an option (which also existed in 2.0.1) to set up ad...
-
-
03:02 PM Feature #2859: Allow to configure different mac addresses for multiple VLANs on same physical interface
- Just 4 vlans, 2 wan and 2 lan
-
- Are just VLANs assigned to interfaces (WAN, LAN, OPTx) or the parent nic is also assigned to any interface?
- 02:37 PM Revision a1f735b3: Do not route do default gw when rule gw is down
- - Add a new advanced misc option to change the behaviour
- When it is set and rule has its own gateway, that is down,... - 02:04 PM Revision 4f537e93: Fix indent and whitespaces
-
-
- 06:48 AM Revision ac135e42: use logging on the block all v6 rules if default is log
-
- description isn't true, and it's not a bug, rather need to fix your config. Please post to the forum or mailing list ...
-
- I have a set-up where pfSense runs between a DSL router (WAN interface) and an internal domain with multiple DNS serv...
-
- As far as I understood the LDAP authentication backend, the group membership needs to be stored in an attribute of th...
-
- I think I caught most of the edge cases for transitioning into and out of RAM disk mode, and preserving data across r...
03/11/2013
-
-
- That's possible, but could you reconsider your rejection?
It *is* a problem with the installer. A user who follows... -
- Easy install always defaults to 2x RAM size for swap. A custom installation is needed for anything that doesn't fit t...
-
- Clean 2.1 install, but existed in 2.01 as well, and I'm guessing all.
Per sizing requirements, I used a 2 GB SSD m... -
- Duplicate of #2867
-
- Sorry, lcicked OK part way, please delete this, I'll re-enter it
-
-
- See http://forum.pfsense.org/index.php/topic,59909.msg322186.html#msg322186
Appears in 2.1, I'm guessing all versi... -
10:14 AM Feature #2849: IKEv2 support for IPsec
- I read about it. I am still worried, about MOBIKE (isnt it important for roaming roadwarriors) and the absense (?) of...
-
- 06:25 AM Revision 6db58224: move the "block all v6" rules back to where they should be, fix comment
- 01:46 AM Revision a876f1ed: point to new github repo
- 01:44 AM Revision d5280de6: update github repo location
03/10/2013
-
07:20 PM Feature #2849: IKEv2 support for IPsec
- Another option for IKEv2 would be the portable version of OpenBSD's OpenIKED
https://github.com/reyk/openiked
-...
03/09/2013
-
-
- duplicate of #2495
-
- It was fixed on Jan 31, See #2495 - if it's still broken on 2.1 using a current snapshot, reply there, since that's a...
-
11:32 AM Bug #2647: rc.newwanip discovers wrong WAN IP when using DHCP
- Yeah, I tried this on 2.1 from March 7th and January 27th.
Please tell me if you need more information. -
- Have you tried this on 2.1, as recommended? Quite a lot of work went into fixing these kinds of bugs there. Specifica...
-
- ok, I tried to find the bug myself.
As we need to use DHCP on WAN (Cable Source-Verify) the address is being renewed... -
- Services Status Widget remove leftover >
-
- Jim guided me here - I have got a similar problem on the recent 2.1-snapshot (March 7th).
Details are already descri... -
- That disconnect is the management GUI view of the connected clients. It is not disconnecting your actual client.
... -
11:50 AM pfSense Packages Bug #2865 (Rejected): openvpn ping-restart option for TAP interface
- If tap interface used other side of the tunnel never will be pinged.
But openvpn server instance by default sends
... - 10:20 AM Revision bb9aaf95: Services Status Widget remove leftover >
-
- duplicate
-
- 2.0.2-RELEASE (i386)
built on Fri Dec 7 16:30:29 EST 2012
FreeBSD 8.1-RELEASE-p13
When trying to bind second ope... - 12:44 AM Revision 70fee79c: fix text. Fixes #2863
03/08/2013
- 07:35 PM Revision 99dcc489: Use the process name rather to avoid the infamous file not found error
-
- Use HTMLENTITIES to deprecate the ampersand in page title URI
- 06:50 PM Revision a1560c1b: Use HTMLENTITIES to deprecate the ampersand
-
- Applied in changeset commit:70fee79c520702571be842f16708f3bcdaf11601.
-
- should be fixed, thanks
-
06:29 PM Bug #2863: Wrong heading for system_gateway_groups_edit.php
- It also says "Edit gateway entry" instead of "Edit gateway group entry".
-
- When editing a gateway group, the header is displayed as "System: Gateways: Edit gateway".
It should probably be "... - 05:41 PM Revision 60cd1864: Ignore vim swap files
- 01:54 PM Revision 76254caa: Be consistent on vlan checks
- 01:48 PM Revision f5c2bf1e: Fix logic inversion from 126ff5b264
- 01:48 PM Revision 43c6c9af: Check if MTU is already with correct value before change it
- 01:48 PM Revision be2c39b6: When parent is not assigned, reset it and all vlans without mtu set to default
- 01:48 PM Revision 3f3252f6: When reset parent to default mtu, deal with all VLANs too
- 01:48 PM Revision a976c633: Set vlanifs early and use it on more places to simplify logic
- 01:48 PM Revision 20eb8203: Consider parent mtu when it's set instead of default one
- 01:47 PM Revision 5ee6ce25: Simplify a bit the logic
- 01:47 PM Revision 1f9ecbcd: Pass parent interface to link_interface_to_vlans
- 01:47 PM Revision 8306b774: Fix typo on var name
- 01:47 PM Revision a1d36777: Fix typo s/assgined/assigned/
-
-
-
-
-
- how to do that coz i have just one nic and 4 VLANS configured on it, 2 WAN and 2 LAN
-
- VLANs follow the same mac address of parent interface. If it's possible, spoof the mac on parent interface to check i...
-
-
02:09 AM Bug #2861: IPSec Status Broken
- Thank you, works fine now.
-
- Tidy up System:General Setup XHTML
-
- Tidy up System:Advanced:Admin XHTML
-
- Tidy up System:Advanced:FirewallNat XHTML
-
- Tidy up System:Advanced:Network XHTML
-
- Tidy up System:Advanced:Tunables XHTML
-
- Tidy up System:Advanced:Notifications XHTML
-
- Tidy up System:Advanced:Misc XHTML
03/07/2013
- 09:23 PM Revision 481e09b3: Tidy up System:Advanced:Misc XHTML
- Close BR tags
Close INPUT tags
Update CDATA secions in script tags
Update HTML boolean operators - 09:14 PM Revision 846ac60f: Tidy up System:Advanced:Notifications XHTML
- Close INPUT tags
- 09:08 PM Revision a5a61609: Tidy up System:Advanced:Tunables XHTML
- Deprecate ampersand
Close INPUT tags - 08:56 PM Revision 3410a6c5: Tidy up System:Advanced:Network XHTML
- Close BR tags
Update CDATA sections in script tags
Update HTML boolean operators - 08:51 PM Revision 8712fab6: Tidy up System:Advanced:FirewallNat XHTML
- Close BR tags
Updated HTML boolean operators - 08:41 PM Revision 3c119b78: Tidy up System:Advanced:Admin XHTML
- Added proper CDATA sections to scripts
Updated HTML boolean operators
Close BR tagas
Close INPUT tags - 08:32 PM Revision 925020e7: Tidy up System:General Setup XHTML
- Close INPUT tags
Tidy up HTML boolean operators -
-
- Fix stale bandwidth-by-IP table entries
- 06:25 PM Revision 5356362c: Fix stale bandwidth-by-IP table entries
- When the number of valid rows in the table reduced by more than 1 between updates, stale entries were left displayed ...
-
03:36 PM Bug #2712: Openvpn and Quagga cause route collision and race condition
- I'm also experiencing this issue and applied the patch.
However, there is still a related issue. (I did not file thi... -
-
-
-
- 01:28 PM Revision 0d0d4a27: Validate MTU changes for VLANs and let user change it again
-
-
- Bandwidth by IP - allow filter by local and remote
- 01:08 PM Revision da11e022: Bandwidth by IP - allow filter by local and remote
- 01:05 PM Revision a02ce260: Bandwidth by IP - allow filter by local and remote
-
-
-
-
-
-
-
-
-
-
- 09:48 AM Revision eff8ea7d: Merge pull request #467 from phil-davis/master
- Bandwidth by IP - display static map names also when FQDN selected
- 09:18 AM Revision 2dbd8924: Bandwidth by IP - display static map names also when FQDN selected
- If display FQDN was selected, and an IP had no reverse lookup FQDN, but did have a DHCP static mapping, the static ma...
- 05:20 AM Revision 379ec2f7: Merge pull request #464 from phil-davis/master
- Add display by host name option to Traffic Graph
- 03:21 AM Revision 8389a461: Traffic Graph add option to display FQDN
- 03:19 AM Revision 232d38ab: Traffic Graph add option to display FQDN
- It was easy to give the user the choice of displaying IP Address, just the Host Name or the FQDN. And the display wra...
-
- Same Problem here with 2.1 Beta (built on Fri Mar 1 21:17:31 EST 2013)
It seems that also states without the old I... -
12:34 AM
Bug #2627: Old delegated prefixes are not removed from the LAN interface
- Testing was performed on:
2.1-BETA1 (amd64)
built on Wed Mar 6 15:11:09 EST 2013
FreeBSD 8.3-RELEASE-p6
Freshly... -
-
- Add Promiscuous Mode Option to Diagnostics Packet Capture Interface
Also available in: Atom