Activity
From 03/14/2013 to 04/12/2013
04/12/2013
-
03:06 PM Bug #2915 (Feedback): OpenVPN server/client not started after WAN physical hotplug event
- Several fixes committed related to this.
-
01:32 PM Bug #2932 (Resolved): Missing commands configuring crash dumps on iso boot
- Checked on 20130409 snapshot and it's fixed.
-
- Zeev Zalessky wrote:
> is it possible to backport it to 2.0.2? i'm work now on build environment for 2.0.2.
No, i... -
07:47 AM Bug #2945: Installation stucks at 36%: /usr/local/bin/cpdup -vvv -I -o /usr /mnt/usr
- hm.... thanks for the hint!
-
06:36 AM Bug #2945: Installation stucks at 36%: /usr/local/bin/cpdup -vvv -I -o /usr /mnt/usr
- you can install to the drive in another system and move it over
-
- ok. i tried memstick and serial memstick.
serial memstick won't boot at all (
ok. i understand, ill try with a... -
- that's always happened in very rare circumstances. Try the memstick instead. We're not fixing non-regressions in the ...
-
- I've tried several last (5 days old was max) snapshots which were downloaded from: http://snapshots.pfsense.org/FreeB...
-
04/11/2013
-
07:42 PM pfSense Packages Bug #2944 (Resolved): dansguarian squid proxyport default set to 127.0.0.1
- I'm running: pfSense 2.0.2-RELEASE (i386)
If you state the 3128 port is default you should set to 3128 in the con... -
03:14 PM Feature #2123: Backup RRD files using the xml dump and restore from RRD tools
- I've looked over the code and the RRD restore does take into account both file formats of pre 2.1 config files. Debug...
-
- I just pushed another 5+ MB config (from 2.1) with 6 interfaces and assorted RRD files into a current 2.1 install and...
-
- I've created a 128MB ram VM and restored my working soekris config onto it, it succeeded. Granted this was a full ins...
-
11:46 AM Bug #1943: PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
- Dears,
I have the same problem with one of my firewall in china, I'm connected to a huawei SmartAX MA5620-8 -> there... -
- Applied in changeset commit:c1d8c235c4135dc4e5cdd1fe024066364eed4392.
-
07:08 AM Bug #2939: Static ARP entries removed after link loss on LAN
- Yes, this is what I got:
Apr 11 15:09:49 pfsense php: : HOTPLUG: Configuring interface lan -
- Are there messages containing the strings 'hotplug' (ignorecase) at /var/log/system.log after switch is turned back on?
-
06:56 AM Feature #2931: Import latest ixgbe drivers from FreeBSD 8-STABLE
- is it possible to backport it to 2.0.2? i'm work now on build environment for 2.0.2.
-
- Zeev Zalessky wrote:
> is it mean that 2.0.2 built with latest freebsd 8.1 will include ixgbe 2.5.0 driver and 2.1 w... -
02:56 AM Feature #2931: Import latest ixgbe drivers from FreeBSD 8-STABLE
- Brenton Denman-Murray wrote:
> Secondly:
> Will this be available in the next nightly snapshot, or will there be a ... -
12:58 AM Bug #2943 (Closed): Problem with Interim-Update in PfSense Captive portal
- Hi,
I am using latest Snapshot of Pfsense 2.1 and also installed FreeRadius2 Package in pfsense cp and confiured w...
04/10/2013
-
06:09 PM Feature #2931: Import latest ixgbe drivers from FreeBSD 8-STABLE
- Firstly:
Thank you very much Renato and the pfSense team.
Secondly:
Will this be available in the next nightly s... -
- Applied in changeset pfsense-tools:commit:d7237df820fde9fa7327960c9fdd191325494029.
-
09:07 AM Todo #2942: PHP-Growl: Growl Talk Notifications UDP 9887 implementation deprecated. GNTP is the new standard notification protocol.
- Warren Baker wrote:
> http://growl.laurent-laville.org/ should work no?
Good find Warren! Hadn't seen that one. T... -
- http://growl.laurent-laville.org/ should work no?
-
- Growl no longer uses UDP 9887 to send notifications as of 1.2.1 (as far as I can tell). Free versions 1.2.2-1.3 and p...
-
- Applied in changeset commit:8543a5bbe2037c9214f967806f417c7c4ba3b062.
-
- Seth, can you get this done within at most a week, or else explain enough to Renato so he can pick up on it? We're go...
04/09/2013
-
- aliases containing FQDNs cannot be used in static routes, need input validation to prevent that config from being used.
-
-
- meant to say they fail to gain access after the switch is turned back on.
-
- - it happens every time The switch connected to the LAN interface gets disconnected, ARP entries disappear and all LA...
-
- I couldn't reproduce it on my test environment.
- Does it happen every time LAN link is lost?
- Is there any usef...
04/08/2013
-
- is it mean that 2.0.2 built with latest freebsd 8.1 will include ixgbe 2.5.0 driver and 2.1 will has it also?
-
- Duplicate of #2931
-
- Hello,
is it possible to add latest ixgbe drivers to pfsense 2.1? drivers from freebsd are too old and too buggy -
- Applied in changeset commit:58f2f42a48247487fd2ee650c5ae137bbb77f4e0.
-
10:34 AM Bug #2938 (Resolved): status.php needs updated for new ipfw syntax
- /status.php includes the output from "ipfw show" which now does not work since the context parameter is mandatory. It...
-
- Assign it to you Seth, since you mentioned at #2123 you want to take a look. If you figure out there is no way to fix...
-
- Can we atleast have a look if we can optimize the way we handle those large memory arrays during restore? I'm doing t...
-
- The changes for ticket #2123 work, but in the version of rrdtool we're stuck on for the time being, it consumes far t...
-
- Hello, Static ARP entries disappear whenever a link loss happens on LAN, exact same issue I faced on 2.0 beta as expl...
-
- As I mentioned, there are other ways that it could happen that are also misconfigurations. We need to see the full co...
-
10:09 AM pfSense Packages Bug #2936: dhcrelay does not start
- How can i even select lo0, loopback interface is not available for dhcrelay !!!!
-
- Not enough information here. Please start a thread on the forum to discuss it, but it's most likely a configuration e...
-
- With pfsense 2.1-BETA1, dhcrelay fails to start with error :
/services_dhcp_relay.php: The command '/usr/local/sbi... -
- Not enough information here for a legitimate bug report. Please discuss it on the forum first and if an actual bug is...
-
- Hi,
I'tried pfsense 2.1-BE5A1 (built on Wed Mar 27 07:33:29 EDT 2013 ) as router/firewall (ospf is used for wan) a... -
- This can be made to work, the issue here is that the memory violation is thrown in PHP, not in the rrd_restore binary...
-
- for 2.1 this will be reverted as #2935. This needs revisiting when we're on a new rrdtool.
-
- Tom, can you please test a new snapshot and confirm this fix? I can't replicate.
-
-
-
- After Phil's last submission everything here looks good. thanks!
-
-
-
-
-
-
-
04/06/2013
-
01:03 PM Bug #2933 (Resolved): miniupnpd ext_ifname setting is not updated after changing WAN interface type from DHCP to PPPoE
- If the WAN interface type is set to DHCP or Static, then miniupnpd's ext_ifname setting is set to the name of the phy...
04/05/2013
-
-
01:50 PM Bug #2883: pf rules contain erroneous "!/" artifact leading to "syntax error" in log
- It is fixed. At least for me. No more errors on boot. It could be gitsync issue that is not working now and was activ...
-
- Applied in changeset commit:730790dd972414dc93d687697edd75ab173e0d43.
-
- grep and awk are not called inside "configuring crash dumps", it seems it's related to commit:2085c6de5de1d9cd8864f85...
-
- I've added a screenshot of a 2.1 AMD 64 iso boot procedure
/etc/rc complains that it can not find awk and grep. T... -
-
05:03 AM Bug #2752: Captive Portal Last Activity isn't update anymore --> idle timeout just after login
- Issue solved with 2.0.3 please close ticket.
-
- This issue isn't solved with 2.0.3
With each release I have to modify the function "RADIUS_ACCOUNTING_STOP" in fil...
04/04/2013
-
- Numerous bug fixes and performance optimisations have been MFC'd into 8-STABLE:
http://lists.freebsd.org/pipermail/s... -
07:52 PM Bug #2919: IPv6 - WAN and LAN (DHCP-PD) does not renew address
- Either this issue or something similar happens when you change anything on the WAN interface settings page and hit ap...
-
02:57 PM pfSense Packages Bug #2930 (Resolved): NRPE package broken on 2.1
- Hi,
I've installed the latest 2.1 beta software and tried to install the NRPE v2 client (version 2.12_3 v2.1) with... -
- There is not enough information here for a legitimate bug report. Please discuss it in the forum until an actual bug ...
-
02:29 PM Bug #2929: One-way OpenVPN Bridge
- This bug is in pfsense 2.1.
-
- When OpenVPN Bridge connection (Remote Access(SSL/TLS), UDP, tap) is established the clients from local pfsense subne...
-
- I have the same problem.
-
- Not enough information there for a legitimate problem report. Please post/discuss the issue on the forum first.
-
11:07 AM Bug #2927 (Rejected): Link Down Detection
- PFSense 2.1 is not detecting link failure, even with Alternate Monitor IP.
-
11:45 AM Bug #2928 (Closed): Authentication attempts against multiple radius servers should stop when the first reject is received.
- The radius.inc code in pfsense treats anything that is not an radius accept as the same kind of failure. It does not ...
-
- Applied in changeset commit:aa752473de6736186ee0ab6355046b6383521091.
-
06:24 AM Feature #2926 (Rejected): Predefined port name for radius - proxy (1814)
- When configuring pfsense for lan -- wan radius proxying (such as in Eduroam) it would be handy to get the "RADIUS pr...
04/03/2013
-
- Downgraded to very low... with no reason :'(
COME ON! -
- I would really like to see Monit supported as an official package integrated into the WebGUI. It is fully compliant, ...
-
-
06:52 AM pfSense Packages Feature #2825: OpenBGPd: Add options prepend-neighbor and prepend-self
- Hi,
also an Option "set nexthop <ip>" would be great for CARP IP announcing (and perhaps also "set nexthop no-modi...
04/02/2013
-
- Applied in changeset commit:43d049ac6a6710ee2d3c933d6c02ee44c5d81dc3.
-
- URL Table URLs are wrongly added to filterdns.conf. To replicate, just add a URL Table alias pointing anywhere, and c...
-
- vpn_ipsec_force_reload() gets run from /etc/rc.newwanip but it's done no matter what interface goes up/down. vpn_ipse...
-
06:38 AM pfSense Packages Bug #2920: OSPF on interfaces with IP Alias and carp unpredictable
- When applying settings, I get the folowing error:...
-
- I just found out that the interface on fw1 had an ip of 172.20.20.0/24. Don't know how that managed to get through th...
-
- probably more of a feature request, will leave as is for future examination in this context
-
- I have an interface with IP 172.20.20.2 and CARP address 172.20.20.1. Due to legacy, this interface also has IP Alias...
04/01/2013
-
09:08 PM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes
- Running pfSense 2.0.2 stable with same IPsec tunnel issue (no tunnel data on reconnect, racoon restart needed)
I f... -
08:18 PM Bug #2919 (Resolved): IPv6 - WAN and LAN (DHCP-PD) does not renew address
- The WAN DHCP IPv6 address and LAN DHCP-PD lease time from the provider is 4 days. When the lease expires, pfSense go...
-
03:20 PM pfSense Packages Bug #2918 (Rejected): ntpd doesn't sync if not bound to any interface
- When no interfaces are selected under Services=>NTP, in attempt to use NTP only for timekeeping on the server itself,...
-
-
11:12 AM Bug #2914: Gateway Group Name change causes all rules and OpenVPN interfaces using that group to be invalid
- I actually have code that does the rename through the config. I couldn't submit a pull request because it touches the...
-
- For 2.1 it's better to avoid such a big change, and since a gateway cannot be renamed, apply the same rule for gatewa...
-
- Applied in changeset commit:0ad707c6b93d41bf731c547b49252af4a15a5649.
03/31/2013
-
12:11 PM Bug #2412: inbound 6to4 traffic does not work in pf
- Update:
Upgraded to today's (March 30) snapshot. Now inbound connections work OK.
A little bit scary, however...
03/30/2013
-
- not enough here to make this a legit bug report, feel free to start a discussion on the forum or mailing list and if ...
-
07:11 PM Bug #2917: High CPU Usage
- It appears to be caused by Firefox. As the number of Firefox browsers that are open with pfSense increases, the high...
-
- 2.0.2 running on D525 Atom with virtually zero CPU usage. Atom hardware replaced with Xeon CPU E5504 @ 2.00GHz with ...
03/29/2013
-
- /etc/rc.openvpn does not get passed the interface, so it has no idea what is going on. I can't see an easy way to get...
03/28/2013
-
- as long as it only impacts OpenVPN instances on the interface where the event occurred, it should be fine to call res...
-
- Easy to reproduce - setup OpenVPN client on interface WAN. Have it running connected to a server somewhere. Physicall...
-
- The Group Name is stored directly in the config of firewall rules, OpenVPN interface selection (and elsewhere...?). W...
-
- I have a gateway group VPNgways with WAN=Tier1, OPT1=Tier2. The OpenVPN servers and clients use interface VPNgways. T...
-
04:44 PM Bug #2753: RRD Graphs failes after pfSense upgrade (2.0.1 -> 2.0.2)
- Have been watching status on this issue for a couple months, since a similar scenario has applied to my setup as well...
-
- Applied in changeset commit:e2ec86f40c9573292a46d4ab89ae70e353a99f8f.
-
- This pull request should fix it: https://github.com/pfsense/pfsense-packages/pull/415
03/27/2013
-
09:21 PM pfSense Packages Bug #2902: Snort does not update snort.org (basic?) rules. Possibly clock blocking by snort.org for basic subscribers.
- Issue is that the 2941 rules are not yet available to registered users, only subscribers. Modify the $snort_rules_fil...
-
- Same issue here, have tried the manual update but still no result.
-
- indeed it's not possible to do as described, but I've been irked on more than one occasion by it just bailing out wit...
-
- There is no way to know or detect the fact that the update is signed or unsigned until it has been fully downloaded. ...
-
06:34 PM Feature #2912 (Resolved): Updater handles unsigned updates poorly when used on beta/snapshot releases
- Running 2.1 beta, and notified of an available snapshot update, the updater attempts to download the update but only ...
-
07:32 PM pfSense Packages Bug #2892: "pfblocker_Range2CIDR" function yields erroneous results (pfBlocker v1.0.2)
- When doing some addtional work, I noticed that I mistyped the CIDR generated by the "pfblocker_Range2CIDR" function -...
-
- Applied in changeset commit:d6307bd38ef0d50caf1d0224a845a206f00da1aa.
-
- general FreeBSD issue I suspect is likely already fixed in newer versions. If not, it'll have to be reported upstream...
03/26/2013
-
07:54 PM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes
- I was using 2.1 BETA also and experienced the same issue as David Duchscher. I had to revert back to 2.0.2 stable so ...
-
01:36 PM Bug #2911 (Rejected): pfsense boot error on usb image w/o usb keyboard plugged in
- I deployed pfSense-2.0.2-RELEASE-4g-amd64-nanobsd_vga.img.gz on a 4gb usb thumbdrive on a Dell XPS 400 with no hard d...
-
-
- Applied in changeset commit:4ad1e4ea74f621c01f9997f46ee7dff412dcc817.
-
-
- Could not reproduce it here using latest snapshot, tier1 was used as expected on rules when it's up.
03/25/2013
-
- thanks
-
09:13 PM Bug #2905: radvd.conf does not include all configured RDNSS entries
- Looks like this issue is resolved. Tested with snapshot:
2.1-BETA1 (i386)
built on Mon Mar 25 15:43:19 EDT 2013
... -
- Applied in changeset commit:3d73a44d84accdb2f70abf705aed9b3858292317.
-
- When there is a tier 1 gateway that's being monitored, and a tier 2 gateway with monitoring disabled, the system skip...
-
- It would be really great feature, cause nginx reaaly great web serser with great proxy possibilities.
and now it i...
03/24/2013
-
- Version Data: (from snapshots)
2.1-BETA1 (i386)
built on Sat Mar 23 22:03:50 EDT 2013 -
- The ipv6 RA does not include all configured dns entries from services_router_advertisements.php configuration page.
... -
06:33 PM Feature #2904 (Resolved): Add checkbox or default option for "verify_identifier on;" on IPsec RSA VPNs
- The ASN1DN field on the "peers_identifier" option within racoon.conf can be used to specify which certificate or set ...
-
03:41 PM pfSense Packages Bug #2903 (Not a Bug): Lightsquid realtime stat 403 error
- With a fresh lightquid install (and with several reinstall attempts) I get the following error when attempting to acc...
03/23/2013
-
- *update*
The tar file contains the ... -
- Snort 2.9.4.1 pkg v. 2.5.4 on 2.1-BETA1 (i386) built on Fri Mar 22 22:56:09 EDT 2013
I've tested and found this pr... -
- I get sig 11 (segmentation fault) failures as well. ...
-
- I set up the traffic shaper using the wizard, it worked fine for a few hours (4) then at some point started throwing:...
03/22/2013
-
- On Interfaces configuration, when you click "add a new one" to add a new gateway, it's using a hardcoded bg color #99...
03/21/2013
-
05:26 PM Bug #2890: radvd segmentation fault
- 2.1-BETA1 (i386)
built on Thu Mar 21 04:30:58 EDT 2013
FreeBSD 8.3-RELEASE-p6
Updated to the above version and r... -
-
03:04 PM Bug #2891: Limiter does not work with high speed
- Forgot to tell that I did a total rekonfiguration but have tried to rekosntruct the limiter issue. I think you are ri...
-
- You have only 50 slots meaning 50 packets.
Can you configure the 'Queue Size' under advanced options of limiters to ... -
- Sure. I think you are just right. Command in shell is the same as "limiter info" in the GUI I guess.
Limiters:
00... -
- In some cases, IPsec failover using a gateway group will not move from one WAN to another properly. Unfortunately thi...
-
08:20 AM Bug #2893: Add extTable to SNMPd or change sysDescr.
- Nice, thank you!
-
- Applied in changeset commit:dadf8ebb488c6dbefc84cf1a104e1d34e41966bb.
03/20/2013
-
- I updated to the following:
2.1-BETA1 (i386)
built on Tue Mar 19 16:35:08 EDT 2013
FreeBSD 8.3-RELEASE-p6
O... -
- I have put a fix for radvd.
Can you test with a newer snapshot? -
- I found old mails in mailing list, which discussed the issue:
http://www.mail-archive.com/support@pfsense.com/msg086... -
- The commands would only work if the user has the UCD module loaded, which is possible on 2.1. I would hesitate to add...
-
- Please add extTable lines in bSNMPd config (/var/etc/snmpd.config) like:...
-
08:33 AM Bug #1974: Captive Portal RADIUS accounting bytes wrong
- Not it is not fixed it was much better some time ago but recent tests have the same results 700 MB through the portal...
-
-
-
-
-
-
-
- Probably you have to increase the queue of the limiter to hold that traffic.
Can you show an ipfw pipe show of your ... -
- E.G. the file
http://list.iblocklist.com/?list=bt_ads&fileformat=p2p&archiveformat=gz
on 2013-Mar-18 has/had an ent...
03/19/2013
-
- On 2.0.2 limiters only work up til aprox. 15Mbitps. Limiters set to speeds higher than 15Mbit will act if they are ju...
-
- 2.1-BETA1 (i386)
built on Tue Mar 19 05:51:13 EDT 2013
FreeBSD 8.3-RELEASE-p6
radvd segfaults on my router with ... -
02:48 PM Bug #2889 (Closed): ACK Traffic Put in Normal Queues. Normal Traffic Put in ACK Queues
- We are running 2.0.2 i386. We've noticed any rules that came from 2.0.1 are fine, however if we create new rules on o...
-
- It's now respecting <kill_states/>
-
- The state killing in ppp-linkdown only kills the NAT states on the affected WAN. It leaves the firewall states there,...
03/18/2013
-
- I have tested this fix already with no luck
Provided more information here http://forum.pfsense.org/index.php/topic,... -
- I already have pushed a fix for this.
Test with newer snapshots. -
- Applied in changeset pfsense-tools:commit:f7608973a69f99c0e0a8fca652579991a9b1607b.
03/15/2013
-
- It was changed to just put the first sentence of description in changeset commit:41af581edd49bb920a783bf5b78f9bbfe2a7...
-
10:15 AM Feature #2886: multiple ips per carp vhid group
- > You can add IP alias VIPs on top of a single CARP VIP to have as many IPs as you want on a single VHID in pfSense 2...
-
- This isn't relevant to how we use CARP.
You can add IP alias VIPs on top of a single CARP VIP to have as many IPs as... -
- since I can't find very detailed information on how carp works (under the hood i mean) i've read some documentation o...
-
- Our future pfsense boxes will be to distributing traffic over our appservers. Currently we use two old debian Lenny b...
-
- thanks!
-
04:13 AM Bug #2884: Tunnel status in case of NAT before IPSec
- Done! ;)
-
- That sounds sane. I haven't dug into this part of the code though. If it works and you think that's reasonable, go ah...
-
- Since the SPD entries are not specular, in stead of searching for the "in" entry, we could look for the "out" entry, ...
-
- I've noticed this on every install I've worked on with NAT lately too, it works just fine but the status always shows...
-
- Hi,
the status of the Phase2 is reported as down in case of NAT before IPSec, while the tunnel is up and working ... -
- most parts of rule generation ensure a legit IP and subnet, need to fix that for this circumstance. Where these retur...
03/14/2013
-
- I found this one in 2.0.x, but not yet in 2.1. However it looks like someone else had it happen identically:
http://... -
09:13 PM Bug #2882 (Resolved): 6RD not working in latest snapshots
- Hi guys,
I use Charter's 6RD service to get ipv6 connectivity. I'm currently running the Jan 18th snapshot and my ... -
10:01 AM pfSense Packages Bug #2870: External DNS server always takes precedence over internal servers
- My solution to the problem was to create a DNS domain override for the internal domain. It also wasn't necessary to s...
-
- It's already in 2.1, and working.
-
06:42 AM Feature #2881 (Closed): LDAP Support for xauth for IPsec mobile clients
- Hi,
please add the option to use the LDAP backend for xauth in IPsec.
As I found a topic on that, there is alread...
Also available in: Atom