Activity
From 05/26/2013 to 06/24/2013
06/24/2013
-
11:55 PM Bug #3057: DHCPv6 not working with Router Advertisements 'Assisted'
- Proposed fix in https://github.com/pfsense/pfsense/pull/677
-
- When selecting 'Assisted' mode for Router Advertisements, OSX clients use stateless autoconfig and do not obtain DHCP...
-
- DHCPv6 reservations don't appear to be added to unbound.conf either (DHCPv4 reservations are added).
-
- Running latest 2.1RC with unbound 1.4.20_7 installed.
When setting host overrides in Services > DNS Forwarder the ... -
07:33 PM Revision 4efdada8: Add option and code to sync Auth servers with XMLRPC.
-
-
- Not enough information here for a valid bug report. Please start a thread on the forum and if, after assistance and d...
-
04:37 PM Bug #3055 (Rejected): System logs not work right
- I flag - > "Everything" in "Remote Syslog Contents" but not all event is send to a syslog.
In my case only the login... -
-
- 02:40 PM Revision efe42b5a: Fix #2887, based on NAT states that will be killed, also kill firewall states for same source and destination
- 02:40 PM Revision d13b7363: Fix #2887, based on NAT states that will be killed, also kill firewall states for same source and destination
-
02:09 PM
Bug #2627: Old delegated prefixes are not removed from the LAN interface
- Tried with:
2.1-RC0 (amd64)
built on Mon Jun 24 04:05:41 EDT 2013
FreeBSD 8.3-RELEASE-p8
Boot up. WAN & LAN g... -
12:55 PM Bug #2627 (Feedback): Old delegated prefixes are not removed from the LAN interface
- Could you please check a recent snapshot?
-
01:50 PM Bug #2878: radvd does not restart properly
- I'm still seeing an issue with RADVD not restarting automatically after a dhcp renew from my internet provider (Comca...
-
01:01 PM Bug #2878: radvd does not restart properly
- This has been working for me with the past several snapshots I've tested.
-
- Could you please check a recent snapshot?
-
- This seems to have been working fine for me on Comcast Home for the past few snapshots that I've tried. After > 8 day...
-
10:03 AM Bug #2919: IPv6 - WAN and LAN (DHCP-PD) does not renew address
- Can you test again with latest snapshots and see if this is fixed?
-
- The system log would be interesting to see here
-
- Applied in changeset commit:efe42b5a05dfc7c718b04fb00391f251d846a2f2.
-
- Applied in changeset commit:d13b7363304390736fa4686b4544319f26bdba92.
-
06:44 AM Bug #3054: openBGPd stoped working
- frustration is never a good friend :
excuse my p.s. :)
step 1 install: pfSense-LiveCD-2.1-RC0-amd64-20130618-1856... -
- ok some more info :
step 1 : install pfSense-memstick-2.1-RC0-amd64-20130618-1856.img
step 2 : make all confs in Se... -
- Applied in changeset pfsense-tools:commit:0416a5113ab777964567fc30b78647b6167f8b75.
06/23/2013
-
10:27 PM Bug #3054 (Rejected): openBGPd stoped working
- not enough here to be a legit bug report, please post info to the forum or list for help.
-
- After upgrade to :
2.1-RC0 (amd64)
built on Sat Jun 22 15:45:58 EDT 2013
openBGPd stopped working giving follo... - 09:56 PM Revision 211d95a9: Fix the RRD RRA’s to collect the correct amount of data for the Previous Period view for each resolution.
- Applied when RRD's are created.
RRA:AVERAGE:0.5:1:1200 = 20 hours of 1 minute data
RRA:AVERAGE:0.5:5:720 ... - 04:16 AM Revision 1e86f510: RRD Specify RRA and Resolution
- Don't leave it up to RRD Tool to select the RRA and resolution to use.
Specify the RRA and resolution to use per the ... - 03:53 AM Revision 88ba6d31: Merge branch 'RELENG_2_1' of git://github.com/pfsense/pfsense into RELENG_2_1
06/22/2013
-
11:01 AM Revision 63b69d34: System: Group manager, set max length for groupname to 16 characters
-
- System: Group manager, set max length for groupname to 16 characters
-
12:27 AM Bug #2997: CARP and pfSync traffic issues with traffic shaping
- Hi,
this should be already foreseen (http://forum.pfsense.org/index.php/topic,45045.msg344264.html#msg344264), ju...
06/21/2013
- 11:06 PM Revision 51f1fc58: Use Probe Interval on gateway advanced settings
-
-
11:54 AM Feature #3053 (New): Automatically add DHCP static addresses to CP passthru-mac
- Add a new option to Captive Portal to automatically add static addresses configured on DHCP server to the list of pas...
-
- Use "Probe Interval" to describe this advanced gateway parameter
-
05:03 AM Bug #3052 (Rejected): Adding a static dhcp for mac address dissapears.
- Cannot say if its a bug or normal behaviour. This is what i have
1 wan, 3 Vlan's
When i want to add a static ma... - 02:48 AM Revision 490cd438: Use Probe Interval on gateway advanced settings
-
02:21 AM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes
- Thanks.
I will test as soon as it's in a snapshot (im currently on 2.1RC0). Backing out the old patch already yielde...
06/20/2013
-
09:27 PM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes
- I have placed all the changes I have made to racoon up on Github. You can find them "here":https://github.com/duchsc...
-
12:24 PM pfSense Packages Bug #3051: Snort 2.9.4.6 pkg v. 2.5.9 -> wansuppress
- I can confirm that bug on Snort 2.9.4.6 pkg v. 2.5.9.
pfSense 2.1 RC0 -
- Pfsense 2.1 of 06/19/2013 17:23.
If change wansuppress on Snort, is necessary reboot Pfsense to enable the new rule... -
- Not any single crash with the new file. The OpenNTPD service is running rock-stable. No crash, no error in system-log...
-
-
04:44 AM Bug #3050: error loading TCP block or reject rule
- Erik Augustsson wrote:
> Works for me
same here
-
- Seems correct as a patch as long as you do not get LORs.
I though this was handled in the ioctl patch code already...
06/19/2013
-
11:11 PM Bug #3024: need a pipe / flowset / sched number
- I think I'm close to the problem, I deleted the database files belonging to the captive portal " /var/db " and then r...
-
- It's fine to leave bandwidth blank, altq fills it using the interface bandwidth. On my tests I could reproduce the is...
-
-
-
08:42 AM Revision b7d6c7f6: Correct the comments describing the error with correct values
-
-
08:20 AM Bug #2511: DHCPv6 Shows Wrong DUID
- I seem to have a similar problem.
A windows 8 client with the DUID 00:01:00:01:18:1c:59:c5:00:25:22:92:f5:43 (veri... -
07:02 AM Bug #3050: error loading TCP block or reject rule
- Works for me
-
02:43 AM Bug #3047: IPSEC remote access broken in 2.03
- same Problem since PFSense 2.0.2 with Android 4.1.2, 4.2, iOS 4/5.
Downgrade back to 2.0.1 and everything is fine wi... -
06/18/2013
-
- I backed the following patch out from ipsec-tools and many of my issues when away.
https://github.com/duchscherd/p... -
08:19 PM Bug #3049: RAM Disk RRD Loss Vulnerability
-
Fix verified.
RRD backup file rrd.tgz is retained after reboot.
-
- Applied in changeset commit:ef01b77f6dc5e2f4ba254739a1792207e7b52a09.
-
- Applied in changeset commit:dc21d4d5618e5190dbc85a479489b230063450f5.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Applied in changeset commit:40e6086ada6b73f6432b7ac93d4b376941028b09.
-
- Applied in changeset commit:2706c79b47373fd294446d7ab0cc25d79bd494a1.
- 10:48 AM Revision ef01b77f: Fix #3049, set $config as global to it can be read
- 10:48 AM Revision dc21d4d5: Fix #3049, set $config as global to it can be read
-
- Applied in changeset commit:5015ec4cd0c497ca1db68e7393d2898ba57efb0b.
-
- Applied in changeset commit:57fa70112a9ab5bec06f5dd64bf0d987dfdae159.
-
- After updating to _2.1-RC0 (amd64) built on Mon Jun 17 17:28:37 EDT 2013_ none of my TCP block rules are working anym...
-
-
- Since implement your new file yesterday, i habe no more ntpd crashes. I will report again at the end of the week.
-
02:21 AM Bug #2349: vlan(4) needs altq adaption on FreeBSD 8.3++
- Andreas, that's not really relevant to this bug - this is specifically for making altq work with the VLAN driver, tha...
-
01:43 AM Bug #2349: vlan(4) needs altq adaption on FreeBSD 8.3++
- Sorry i use the latest 2.1 RC0 i386 snapshot
-
- Hi
i'm sorry for reopening this ticket.
I have four openvpn connections and try to configure a traffic shaper wit... -
01:02 AM
Bug #2650: FTP helper breaks TCP sequence numbers on 2nd WAN
- I did a more in-depth analysis with tcpdumps (LAN/WAN) here:
http://forum.pfsense.org/index.php/topic,62237.msg34202...
06/17/2013
-
-
When using the RAM disk option for /tmp and /var, after a reboot and RRD data is restored, the RRD backup file /cf... - 03:26 PM Revision 9507aa0e: Allow user to set interval between attempts to resolve hostnames configured on aliases
- 03:24 PM Revision ab3ab2ac: Allow user to set interval between attempts to resolve hostnames configured on aliases
-
03:06 PM Feature #3048 (Resolved): Pre-download packages to reduce downtime during upgrade process?
- Not sure if this is possible under the current system...
If it is possible to determine what version of [a] package[... -
-
-
01:11 PM Bug #3047: IPSEC remote access broken in 2.03
- As before, same with IOS.
-
- Cisco VPN client is known to be broken when connecting to pfSense (and it's a violation of their license to do so usi...
-
- I don't understand why it doesn't work for me in 2.03 - no config changes whatsoever between 2.02 and 2.03. I also j...
-
- I used your exact IPsec config (aside from fixing the lifetimes to match the documented suggested values), and I am a...
-
10:15 AM Bug #2928: Authentication attempts against multiple radius servers should stop when the first reject is received.
- For two factor authentication , you need to use Access-Challenge response from your radius server, and use it to proc...
- 10:01 AM Revision 84a27e31: fix dhcp static mapping/client identifier validation
-
-
-
-
- OK it's started now. I had to go Services - NTP - press Save button. Then press the restart service button. Now it's ...
-
- After this procedure i can't start the NTPD service.
-
- I've built ntpd binaries with debug symbols, there are binaries for 2.0.3 and 2.1, i386 and amd64:
ntpd-2.0.3-amd64
... -
- Crashed again. File attached.
-
-
-
-
-
-
- * During dhcp setup use -n for cp to avoid coping uselessly
-
- * During dhcp setup use -n for cp to avoid coping uselessly
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
06:53 AM Bug #706: OpenVPN client export needs to include remote-cert-tls server
- Hmm, nevermind, it seems to include 'ns-cert-type server' nowadays, that should suffice.
-
- Nowadays Pfsense seems to be able to generate server certificates, so I don't see any reason to not add 'remote-cert-...
- 05:39 AM Revision af600fe2: Don't flip the IPv6 allow setting just because people are upgrading. Just upgrading versions shouldn't change this behavior. As much as most of us would like people to start deploying IPv6, the vast majority aren't going to be immediately post-upgrade, and changing this can change the firewall policy behavior by allowing v6 that previously wasn't allowed. Upgrades should never change the firewall behavior like that. At the time it was done, everyone using the 2.1 code base was using it for IPv6, so of course it tripped up quite a few people.
- 05:32 AM Revision 4cdf35a4: Don't flip the IPv6 allow setting just because people are upgrading. Just upgrading versions shouldn't change this behavior. As much as most of us would like people to start deploying IPv6, the vast majority aren't going to be immediately post-upgrade, and changing this can change the firewall policy behavior by allowing v6 that previously wasn't allowed. Upgrades should never change the firewall behavior like that. At the time it was done, everyone using the 2.1 code base was using it for IPv6, so of course it tripped up quite a few people.
- 05:24 AM Revision 878454b8: not true you have to log in again since HTTP basic auth was deprecated.
- 05:24 AM Revision 891ecd18: not true you have to log in again since HTTP basic auth was deprecated.
- 05:23 AM Revision 9a0a9fc1: not true you have to log in again since HTTP basic auth was deprecated.
- 05:16 AM Revision a6c03297: add MSS clamping to setup wizard. Now that MTU and MSS are separate, the MTU description was wrong, and both need to be there.
- 05:15 AM Revision 7b79e0cb: add MSS clamping to setup wizard. Now that MTU and MSS are separate, the MTU description was wrong, and both need to be there.
06/16/2013
- 11:21 PM Revision 5fb01c77: Revert "Revert "Fix gateway quality rrd to have the correct granularity and be consistent with the pfSense graphs set.""
- This reverts commit 304ea841cff40aacaac084a0eb6c145ddd034303.
- 11:15 PM Revision 304ea841: Revert "Fix gateway quality rrd to have the correct granularity and be consistent with the pfSense graphs set."
- This reverts commit a8d262f63c4574f40f5f299a2e9f746986dc966a.
put the create_gateway_quality_rrd function in rrd.inc... -
- Another detail is that when the error happens it creates a single limit like the follow.
Limiters:
00001: 262.140... -
- You should have enough to re-create it on a pfSense box, but attached is the info you requested. Also, when the VPN ...
-
- Still not enough information. Most importantly we need the IPsec log entries (I forgot to mention that previously) fr...
-
- Forum link is here: http://forum.pfsense.org/index.php/topic,62209.msg341320.html
I didn't get any feedback so I ope... -
- There is not nearly enough information here for a valid bug report. Include details about your exact config (every op...
-
- In pfSense 2.0 through 2.02, my configuration for remote IPSEC access (like my iPhone) worked fine. IPSEC with Mobil...
-
01:39 PM Bug #3045: NTPD crash / doesn't come up
- I'm also seeing this every couple of days and have also attached file.
- 07:57 AM Revision 449f1dd2: allow defining dhcp static mappings using dhcp-client-identifier
06/15/2013
-
- The file is attached.
-
- If anyone tells me where the ntpd core crash dump is located, sure.
- 12:07 AM Revision e8ddd3a8: TCP flags are valid on any type of rule, don't skip them on block or reject rules
- 12:06 AM Revision bcd94190: TCP flags are valid on any type of rule, don't skip them on block or reject rules
06/14/2013
-
08:07 PM Bug #3046 (Resolved): Fatal error: Call to undefined function get_interface_ip() in /usr/local/captiveportal/radius_authentication.inc on line 56
- When using Radius authentication I get this immediately after logging in. My password is accepted, then I receive an...
- 07:48 PM Revision 664f9f3b: Fix max length for wpa passphrase, it fixes #3034
- 07:34 PM Revision 2ca43251: Fix max length for wpa passphrase, it fixes #3034
- 07:33 PM Revision df78d8cc: Fix max length for wpa passphrase, it fixes #3034
- 06:44 PM Revision c9322c5c: Allow queues to be deleted, it fixes #3037
- 06:44 PM Revision a22537c7: Allow queues to be deleted, it fixes #3037
-
- not true except where it causes problems with an upstream ARP cache, which we can't do anything about. Disable/enable...
-
12:46 AM Bug #3043 (Rejected): Changing CARP vhid breaks SNAT on the virtual IP
- Two nodes with CARP outside and CARP inside.
Outbound SNAT is done via the outside virtual IP.
Changing the vhid of... -
- Applied in changeset commit:664f9f3b919f970fb77c66cc4c5c3445081d5f25.
-
- Applied in changeset commit:2ca432514e09e5388f1786f0f6c6d977d3254533.
-
- Applied in changeset commit:df78d8cc1890f19702e3e78bb3c5a583ada52356.
-
- Applied in changeset commit:c9322c5ceb272a3b51a4cd2f737d268cde3584c7.
-
- Applied in changeset commit:a22537c73c6a1301b9e2656bfaa4382b93314a55.
- 12:45 PM Revision d60629b0: Update list of mobile service providers
- 12:44 PM Revision 6b7c0fef: Update list of mobile service providers
-
- Is there a ntpd core with crash dump that you can share? It could help us to identify the issue.
-
- The NTP services crashes a lot, reason unknown for me.
The System Logs says:
_kernel: pid 35663 (ntpd), uid 0: ex... -
11:02 AM Bug #3044: SSHD failed to start.
- http://forum.pfsense.org/index.php/topic,63435.0.html
-
- Not enough information here. Please post in the forum for assistance in finding the cause of the error. If a legitima...
-
- php: : The command '/usr/sbin/sshd' returned exit code '1', the output was 'Could not load host key: /etc/ssh/ssh_hos...
06/13/2013
-
-
-
-
-
-
-
- EAOrigin.pat - Traffic Sharping Layer 7
-
- 04:44 PM Revision 4e79fb9a: EAOrigin.pat - Traffic Sharping Layer 7
- The EA Store is now Origin, Tested and works (for now) will make changes if i come to anything useful.
-
-
-
-
03:39 PM Bug #2882: 6RD not working in latest snapshots
- Hi Ermal
Here is the output of the 2 commands you asked me to run on my Jan 18th build where 6RD works:
http://... -
01:24 PM Bug #2882: 6RD not working in latest snapshots
- And that seemed to have been a user error on my part.
My IPv6 firewall rule on LAN had default (ipv4 dhcp) gateway... -
- Ermal Luçi wrote:
> You are talking about tracking interfaces or 6rd tunnel here?
>
> radvd has nothing to do wit... -
- Will Wainwright wrote:
> Hi Chris,
>
> I'm sorry to report that it has not fixed the issue for me.
>
> As alwa... -
- You are talking about tracking interfaces or 6rd tunnel here?
radvd has nothing to do with 6rd in this ticket.
... -
- This was seen in log after reboot:
Jun 13 13:29:23 radvd[49436]: resuming normal operation
Jun 13 13:29:23 radvd[... -
- I just tried this out on:
2.1-RC0 (amd64)
built on Wed Jun 12 18:24:47 EDT 2013
FreeBSD 8.3-RELEASE-p8
Afte... -
03:24 PM Bug #3042: CARP interface handling
- This seems like bad news. PfSense with the current carp interface-based failover seemed like an excellent way to do t...
-
- Also newcarp in FreeBSD 10.x does away with the interface notion entirely so I'm not sure it's a viable request for t...
-
- It's too late for more 2.1 features, removing 2.1 target.
-
- Currently PfSense handles carp interfaces as Layer 3 interfaces with a static IP-address on the created interface. Ho...
-
02:18 PM Bug #2526: Limiter appears to break IPv6 connectivity
- This problem appears to be present in the Wed Jun 12 06:19:03 EDT 2013 build. IPv6 Traffic hits the limiter as shown ...
-
- Applied in changeset pfsense-tools:commit:3e217b8208cdba17060a72a9ccb5fb7ebff9ed25.
-
- Applied in changeset pfsense-tools:commit:9c0a39f717a04def5d6c0260eb74a7cd0cde8b17.
-
- Implemented in commit:48b86f6257bd0c79f26ee5e111bfa1488a28e6fb
-
- Implemented in commit:48b86f6257bd0c79f26ee5e111bfa1488a28e6fb
-
- Not enough information here for a valid bug report. Please post in the forum where someone can assist you in diagnosi...
-
- Crash report begins. Anonymous machine information:
amd64
8.3-RELEASE-p8
FreeBSD 8.3-RELEASE-p8 #1: Wed Jun 12 ... -
- Yeah! It would be great to have CDP in pfsense!
06/12/2013
-
- Hi Chris,
I'm sorry to report that it has not fixed the issue for me.
As always, please let me know if there's ... -
- confirmed working for me again on the latest snapshot. Will leave this as is for feedback from others for now.
-
-
-
-
-
- SWF
-
- Most of that is already done in 2.1's firewall log view/filtering. The ones that aren't there yet aren't really feasi...
-
- It would be great if the firewall logs could be more debug-friendly:
- have source and destination ports in separate... -
- Yup, I thought it could be scheduled somehow, but it didn't happen in the next few hours.
-
- This is not immediate.
You are sure that you waited enough for the replication to happen? -
- Issuing new vouchers on master node is not automatically synced with CARP slave node.
When I go to Services>Captive ... -
-
- It's the expected behaviour, if you don't have zones, status menu won't show up.
-
- Having CARP active with two nodes, when I start Captive service on master it starts it on the slave node too.
But st... -
-
- 02:28 AM Revision 8d1eb49e: SWF
- As said on the pFsense forum http://forum.pfsense.org/index.php/topic,62863.0.html It works and tested by me.
06/11/2013
-
- Status-Queues: Get the stats gauge for PPS or bandwidth Edit (RELENG_2_1)
-
- Let the user select the values to show in the stats gauge between PPS and bandwidth.
-
-
-
- should work with tomorrow's snapshot.
-
- If you use PRIQ, you cannot delete any queues, even ones that were created manually. The delete button does not appea...
-
- Hi there!
That's my first bug report and I hope it's well done :)
Services>Snort
Add or edit interface>Alert Set... -
- Heh that is just a copy/pasto from implementation.
Will probably fix that. -
-
06/10/2013
-
-
-
06:56 PM Bug #3035: [Satus->Captive Portal] Menu Link Disappears When Viewing Captive Portal Status
- I just tested this again on a fresh OVA. I found that starting from a fresh install (i.e. no zones), creating a zone,...
-
- it shouldn't show up anywhere when there are no zones defined, I've noticed that changed in 2.1. In 2.0.x and previou...
-
- I can only reproduce that when I have no zones defined. If I have a zone defined, it always shows up for me.
-
- Christian McDonald wrote:
> I can reproduce this on two pfSense boxes each running:
>
> 2.1-RC0 (amd64)
> built... -
- I can reproduce this on two pfSense boxes each running:
2.1-RC0 (amd64)
built on Thu Jun 6 21:08:57 EDT 2013 -
- Not reproducible here, as you can see on attached screenshot.
-
- Status-Queues: Get the stats gauge for PPS or bandwidth
-
- Seems like a local issue, I could not reproduce. You should try to get help on forums and mailing lists to try to fig...
-
- What is the length of the password you got the issue?
06/09/2013
-
- !http://i.imgur.com/SgaFqaO.png!
-
- When viewing the Captive Portal Status, the menu item for Status->Captive Portal Disappears
Steps to reproduce:
... -
06:43 PM Bug #3034 (Resolved): Security FLAW in pfSense Wireless Found
- I have found a security flaw in pfSense wireless. If you enable WPA2 for security and use a password for the pre shar...
-
- Let the user select the values to show in the stats gauge between PPS and bandwidth.
06/08/2013
- 05:24 PM Revision f57e4181: Replace hardcoded path by vardb_path
-
05:08 PM Bug #3033 (Rejected): Static IPv6 route to OpenVPN tunnel ignored
- I have an openvpn tunnel to a remote server which works correctly for IPv4 traffic but not for IPv6. When the remote ...
-
- test on 2.1 and report more info on forum if you can still replicate
-
03:17 AM pfSense Packages Bug #3032 (Rejected): last activity in CP 2.0.3
- hi
in my 2.0.3 amd64 captive portal last activity was periodically (every minutes?) reset to the system boot time:... -
- i have two installation with 2.0.3 but the problem still exist.
i opened a new segnalation (3032)
thx
06/07/2013
-
02:27 PM Bug #3020: HFSC Priority
- Ermal Luçi wrote:
> HFSC does not have notion of priority.
Ok, sorry for this report but I Sugere remove or corre... -
11:35 AM Feature #3031 (Resolved): Message is false after changing Hardware Checksum Offloading setting
- It seems that appliance needs to reboot after changing the advanced networking setting.
System -> Advanced, click ... -
- If you are using LAGG+VLAN interfaces (e.g. lagg0_vlan10) in the shaper wizard, the wizard does not fill in the bandw...
-
- Having similar issues:
2.1 RC0 (symptoms started from 2.03 on as far as i can remember)
Policy Generation > Uni... -
03:12 AM pfSense Packages Bug #999: vhosts does not show up as started
- Hi!
Could you tell us how to fix it.
I think two years it's so much time to fix this little problem (talking ab...
06/06/2013
-
11:44 PM Feature #3025: Allow Proxy Arp to Bind to CARP Interface
- Thanks a lot for your time and sorry for the useless ticket opening.
-
- IP Alias VIPs don't work that way, but proxy ARP VIPs are not and cannot be compatible in the way you describe.
On... -
- Ip Alias can't expand a whole network withing a single line of conf
When configuring a Proxy ARP you can specify a... -
- no need. IP alias or more CARP.
-
- Hi,
We are using a cluster pfSense to NAT 1:1 two network.
I need to make Proxy ARP VIP to bind to CARP Interfa... -
-
-
-
-
- The configuration page for the DHCPv6 server and router advertisements currently only lists those interfaces that hav...
-
- I notice that configuring DHCP-PD starts a dhcpd server on the tracking (LAN) interface that serves up the delegated ...
-
-
12:55 PM Bug #2412: inbound 6to4 traffic does not work in pf
- I can confirm that this is working as intended. Thank you for fixing it. We are mainly using this to test ipv6 capabi...
-
02:08 PM Bug #3027 (Resolved): input_errors2Ajax function
- In various places input_errors2Ajax() is used. However this function doesn't exist.
I'm assuming the original intent... -
- What you are saying is you go and set a static ip to an interface and the interface didn't get that IP address config...
-
09:33 AM Bug #3026 (Rejected): not all interfaces will get their designated IP after I add an IP to an interface
- When I add an IP to an interface my pfsense will become unresponsive for a minute.
On Zabbix I can see the system lo... -
-
- probably promiscuous broken in the 8.3 fxp driver. There's another ticket open to back port a newer driver.
-
02:11 AM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes
- Same problem here running:
2.0.3-RELEASE (amd64)
Client can connect OK for the first session but then after dis...
06/05/2013
-
- I am experiencing a bug in the captive portal, it happens every 3 days or so, this ruling requires me to reinstall pf...
-
02:54 PM Bug #3023 (Rejected): Snort + Intel NIC not working on 2.1 RC0
- I have used Snort + Intel NIC (as WAN interface) successfully on pfSense 2.03 before. I cannot get it to work with 2....
-
-
-
11:05 AM Bug #3016: IPsec client (or branch office) can't access to Internet over VPN gateway
- Fix looks and works correctly
2.1-RC0 (amd64)
built on Tue Jun 4 20:54:59 EDT 2013
FreeBSD 8.3-RELEASE-p8 -
07:48 AM Bug #3022 (Resolved): OpenVPN does not failover to the 2nd configured LDAP auth.server
- More details:
http://forum.pfsense.org/index.php/topic,62570.msg337904.html#msg337904
It might be a limitation of... -
- HFSC does not have notion of priority.
-
- Hi,
The priority range for HFSC is 0 to 7. Priority 0 is the lowest priority for the least important data. When no...
06/04/2013
-
- no telling whether it's a bug from that, but probably not. Please post to the forum or mailing list for help. Only sp...
-
06:35 PM Bug #3019 (Rejected): Realtek 8168 Gigabit Ethernet
- I am not sure if this is a bug but you can close this if not.
Whenever I am copying big data from my network to my... -
-
- 11:26 AM Revision 50d3ed9c: Also consider 0.0.0.0/0 here since it fails on is_subnet() but is a valid/special config. Fixes #3016
- 11:25 AM Revision c766d411: Remove extra parenthesis
- 11:24 AM Revision 4eb3ac52: Also consider 0.0.0.0/0 here since it fails on is_subnet() but is a valid/special config. Fixes #3016
-
- Checkbox "System->Advanced->Anti-lockout" (Disable webConfigurator anti-lockout rule)
don't affect for spd.conf gene... -
- Fix for CURL options (Custom DynDNS)
-
- Applied in changeset commit:50d3ed9c3c76d16a88d801ded20f4db9e7f6e915.
-
- Applied in changeset commit:4eb3ac52b07533c26a1ebf3e496d25669629a038.
06/03/2013
-
05:48 PM Revision d9bdc020: Correction on last commit (CURL options)
- My last commit only worked on "Save & Force Update" but not on a
reconnect. Fixed that -
-
-
-
-
-
- Applied in changeset commit:d4090fbfe00f2cdac17a4f7e8f89a43a6d1728eb.
-
- Applied in changeset commit:6b53736d3beaef6d536bbcaf10b07865fd53248d.
-
- Applied in changeset commit:ae3caa3d83d5d33ab17cf8a4336621d364c051c5.
-
- Added CURL options to custom DynDNS
06/02/2013
-
11:58 PM Bug #3017 (Resolved): Cert Manager - Certificates - + shows "add or import ca" instead of "add or import certificate"
- System - Cert Manager - Certificates - +
The hovering text shows "add or import ca" (identical to the CA page) inste... -
10:09 PM Bug #3012: Bug in full backup size computation and/or display
- Sorry I meant gzip 1.3.12
-
- Nothing to do with this particular backup file, since the problem is there each time we do a new full backup. Most pr...
-
- something wrong with that backup file, or maybe with gzip itself. Nothing we can do either way, it does work correctl...
-
- ...
- 03:47 AM Revision d9f2de9a: DHCP Server enable/disable change needs filter_configure
- When DHCP Server is enabled or disabled on an interface, the filter rules should change to include or not mention DHCP.
- 03:47 AM Revision 91523382: Merge pull request #665 from phil-davis/master
- DHCP Server enable/disable change needs filter_configure
06/01/2013
- 05:18 PM Revision 6c124212: DHCP Server enable/disable change needs filter_configure
- When DHCP Server is enabled or disabled on an interface, the filter rules should change to include or not mention DHCP.
-
- Added the options for CURLOPT_IPRESOLVE and CURLOPT_SSL_VERIFYPEER in
the webinterface for custom DynDNS -
- Sorry:
Main office
Mode: tunnel
Local Subnet: 0.0.0.0/0
Remote Subnet: BRANCH-LAN
: cat /var/etc/ipsec/spd.c... -
- Don't delete tunnel for main office
-
- Branch office tunnel:
Mode: tunnel
Local Subnet: LAN
Remote Subnet: 0.0.0.0/0
root(1): cat /var/etc/... -
- I have been testing with m0n0wall (1.8.1b540) and it does not have this problem. Perhaps the teams can collaborate t...
-
03:50 AM Bug #3015: DHCP (v4) won't start because of IPv6 DNS servers in /var/dhcpd/etc/dhcpd.conf
- Thanks for the fast turn around Jim. That fixed it.
-
-
05/31/2013
-
- Applied in changeset commit:9399370b367df7b73b84d605f4f44599c93b0bbe.
-
- Applied in changeset commit:f79a5df0733fe17d4a938381e9175fa2e2abefb1.
-
- The process which writes out the /var/dhcpd/etc/dhcpd.conf file just before starting dhcpd is configuring the forward...
-
04:53 PM Feature #3014 (Needs Patch): Add Variomedia to Dyndns providers
- Could someone please add Variomedia (german hoster and domain registrar - http://www.variomedia.de) to the Dyndns pro...
- 01:11 PM Revision 5789e9f8: Update pot file
- 11:14 AM Revision 1407f6a8: Remove wrongly added file in commit 75f457856a
- 11:13 AM Revision 9b03b76a: Update pot file
-
- There is no problems with the message
The value MUST NOT be < 60 and it SHOULD be >= 600. -
09:49 AM pfSense Packages Bug #3003: Freeeadius.xml bug
- http://www.ietf.org/rfc/rfc2869.txt
The Value field contains the number of seconds between each
inter... -
- Add CloudFlare Dynamic DNS Service Support
-
- Seems there is something wrong with the backup file. I tested it here, GUI says 392.43Mb and I checked the file:
<pr...
05/30/2013
-
-
- 07:30 PM Revision ffa1acdc: Update dyndns.class
- Fix Tabs
- 07:21 PM Revision 6bc58a97: Update dyndns.class
- Remove unneeded test variable.
- 07:16 PM Revision 3793649f: Update dyndns.class
- Minor Style Change
- 07:13 PM Revision e26e1f76: Update dyndns.class add CloudFlare
- Add CloudFlare Support to dyndns.class
- 06:26 PM Revision 8780ff35: Update Services.inc add Cloudflare DYNDNS
- Add Cloudflare to the list of DYNDNS services
-
- Back port sharper.inc commit from master to RELENG_2_1
- 04:25 PM Revision 2fbefad6: Back port sharper.inc commit from master to RELENG_2_1
-
- Add dynamic category tabs for better listing all available packages
-
- WebGUI Auto Codeset and Language Dynamics & pfSense.pot updates
-
- Simplify shaper.inc for ipv6
-
- change interface text entry box to drop down menu
-
- improve look of picture button selector
-
06:35 AM Bug #2409: ipfw - entryzerostats
- Using latest snaps
when we use Captive portal, RADIUS_ACCOUNTING_STOP packets are not sent to RADIUS server -
- thanks
-
12:59 AM Bug #1980: RFC 2136 will not update two records for one interface
- Related to #2068. It now works on i386/amd64 on version 2.0.3.
I.e. this can be closed.
-
01:04 AM Bug #1943: PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
- so is there any solution to this, like an updated driver or so?
05/29/2013
- 10:55 PM Revision 310bf9e0: improve look of picture button selector
- 08:55 PM Revision 2a7bfc1f: change interface text entry box to drop down menu
-
-
-
- Not sure if this is a bug or something we do incorrectly, so I've added this issue as "Feature".
While upgrading a... -
- Sorry but how could a 30 GB compressed file be extracted and only consume 640 MB ? If restoring is not complete and i...
-
- that's the extracted size, not compressed size. Whether it's better to put the compressed size there I'm not sure, pe...
-
- We have installed several releases of 2.1 on AMD64 since it's in BETA stage over the course of several months, but th...
-
-
- 03:58 PM Revision d345f596: Don't gettext() the example strings.
- They must not be translated.
- 03:56 PM Revision 04cdae54: Improve Authentication Containers examples.
- * The first example was wrong (cf. ldap_backed() in auth.inc which
looks for a DC= part to determine a full DN.
* T... - 03:42 PM Revision d57725aa: Fix LDAP Extended Query example.
- The old one was not valid LDAP filter syntax.
-
03:31 PM Bug #3011 (Rejected): Mobile client disconnect but SA not flushing
- 2.1 - 29 may snapshot.
I use a mutual psk+ xauth for mobile clients with Policy Generation on, Proposal Checking obe... -
- I have same problem with 2.0 and 2.1 - 29 may snapshot.
I use a mutual psk+ xauth for mobile clients with Policy Gen... - 01:48 PM Revision 2bba9aef: Fixes #2979
- . Change max value for traffic and packets graphs to 20GigE
. Bump config version to 9.6
. Write a config upgrade fun... - 01:47 PM Revision fa3b33a5: Fixes #2979
- . Change max value for traffic and packets graphs to 20GigE
. Bump config version to 9.6
. Write a config upgrade fun... -
-
-
-
-
-
09:24 AM
Bug #1943: PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
- Starting to look a lot more like mine was modem related. Replaced mine on yesterday afternoon, been up since then.
... -
- Applied in changeset commit:2bba9aefc21a4e173af3626fb5d08516e35ee47a.
-
- Applied in changeset commit:fa3b33a57e362654551a16a91a5c6b56971ad4c4.
-
- Applied in changeset pfsense-tools:commit:73eee43c2c60f6ffebd507115bbf3c3908f5e5db.
-
07:02 AM Revision 5217befe: Update dyndns.class
- To remove a curl_setopt line that is unused for "dnsomatic", and to allow for all characters to be used in the userna...
-
- URL encoding the user/pass for dnsomatic, since it accepts all characters.
-
- Minor PHP syntax fixes from ExolonDX
- 02:43 AM Revision be47e83c: Deprecate ampersand (by ExolonDX)
- Apply this syntax fix to 2.1 branch (already applied in main after 2.1 was branched - https://github.com/pfsense/pfse...
- 02:41 AM Revision acd8af41: Add missing quotes (by ExolonDX)
- Apply this syntax fix to 2.1 branch (already applied in main after 2.1 was branched - https://github.com/pfsense/pfse...
-
- To remove a curl_setopt line that is unused for "dnsomatic", and to allow for all characters to be used in the userna...
05/28/2013
-
- I placed pull request 656 on git to resolve this issue, by using "rawurlencode":...
- 08:34 PM Revision 853030ac: Do not hide IPV6 setting when system->advanced->network->allowipv6 is false
-
- I managed to reproduce it locally with an ALIX board and can confirm the issue is related to vr driver. It's always r...
-
05:44 AM
Bug #1943: PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
- I think my issue may be modem related. I thought I had ruled this out but it seems both modems I tested with gave iss...
-
- This is tested and working in several production networks, there are no confirmed issues currently. Please post in th...
-
08:59 AM Feature #1855: NAT before IPsec VPN
- Hi!
I have a same problem as Michele Di Maria. - Please reopen a ticket. -
-
-
- Ermal Luçi wrote:
> [...]
>
> Seems the [^_] is wrong here it is not present on earlier versions there, no?
[^... -
- ...
-
- something to be re-evaluated in the future.
-
- I wouldn't make this removed.
The problem is that reply-to/route-to are dynamic based on gateway status.
While stat... -
- I will take a look at seeing if can make this less tricky.
-
- Applied in changeset pfsense-tools:commit:eae00391a109101fc995d3309a6e2d2bdb7be579.
-
- that's not how it's ever worked before, it's stayed sticky to a specific rdr in every previous OS version.
-
- Actually fixed.
I had disabled the per rule src-tracking to mitigate something else.
Though seems it hurts more than ... -
- Please test with new snapshots or gitsync
-
- Probably just a rebuild of ca_root_nss port is needed on the snapshot builder!
Try to fetch from here http://ftp.f... -
- Applied in changeset commit:368d34c31aed69fe5f0c44814367a2658f4b4bc0.
-
- Applied in changeset commit:f9d480ff0b4a0cbd569a600ba6087770226ddba5.
05/27/2013
-
- This is not a general issue, but typically specific to a certain package being installed. Post on the forum for assis...
-
01:02 PM
Bug #3009 (Rejected): Package Manager does not work after updating
- Updated to 2.1-RC0 (i386) built on Sun May 26 19:31:39 EDT 2013. The Package Manager page showed message that package...
-
- There really isn't anything we can do about that. Raise it as a FreeBSD PR if you can reproduce it on a stock FreeBSD...
-
03:37 PM Bug #3010 (Rejected): DC ethernet driver seems to have issues with some multiport card and mother board combinations
- Greetings,
On some mother boards, with multiport 21143 based NIC cards, there seem to be driver problems. Symptoms... - 01:22 PM Revision e434d5c6: Fix whitespace
- 01:17 PM Revision e47d24e4: Fixes to get routes + dns working:
- . Simplify code using new parameter of get_staticroutes()
. Check for subnets instead of ip addrs
. Avoid touch filte... - 11:29 AM Revision 1901463c: Add extra param, off by default, to make get_staticroutes() return hostnames too
- 11:28 AM Revision aa57f965: Last element is always empty, be sure we drop it
- 10:27 AM Revision c82dcc1d: Permit to use aliases containing hostnames on static routes
- 10:23 AM Revision 356e86d4: Use filterdns to update static routes using hostnames
- 10:03 AM Revision 2a2b9eea: Split system_routing_configure() and teach it to deal with hostnames
- 10:03 AM Revision 30ab140a: Add rc.newroutedns to change routes when hosts changes
- 10:03 AM Revision 2d0c5e3e: Make add_hostname_to_watch return ips it's adding to later use
- 10:03 AM Revision 86a5e1a8: Fix whitespace and indent
- 10:03 AM Revision 046583c3: Simplify logic
-
- There is already a function to do it, upgrade_085_to_086. I tested it locally and it worked as expected.
If you ha... -
- Hello,
using HTTPS-Urls with Dynamic DNS gives the following error and no update is done.... -
- I would like to be able to include traffic that leaves over a GIF tunnel in my traffic shaping for the physical inter...
05/26/2013
-
- Upgrade to 2.0.3-RELEASE - bug confirmed:
ipfw table 1 entryzerostats 10.0.0.83
ipfw: getsockopt(IP_FW_TABLE_ZERO_E...
Also available in: Atom