Activity
From 06/06/2013 to 07/05/2013
07/05/2013
-
08:30 PM Revision ae737247: Update services.inc
- Turn on AdvManagedFlag and AdvOtherConfigFlag for both 'managed' and 'assist' ramodes.
-
05:56 PM Revision 51b26242: Actually do this upon entering to get proper ip
-
-
-
- 05:29 PM Revision 5fb149ba: Remove unecessary var initialization
- 05:18 PM Revision d7deb24c: Remove unecessary var initialization
-
04:22 PM Bug #3075 (Closed): Can't delete unused Virtual IP "referenced by a least one gateway"
- I am working on some minor shuffling around of statics from my /29 block of IPs from my ISP. On 2.0.3 and 2.1 snapsho...
-
- Was the expected result of this revision to prevent the deletion of Virtual IPs that also exist in the same subnet as...
-
03:48 PM Revision 9db8c46d: When a CARP VIP transitions to master, we need to bump servers also, otherwise a transition from disabled or init may not properly (re)attach to the IP address.
-
-
-
-
03:27 PM Bug #3057 (Feedback): DHCPv6 not working with Router Advertisements 'Assisted'
- It was pushed on master and not on RELENG_2_1, because of that you cannot see the change on 2.1-RC0 snapshots. I appl...
-
02:44 PM Bug #3057: DHCPv6 not working with Router Advertisements 'Assisted'
- And also with
2.1-RC0 (i386)
built on Fri Jul 5 06:53:51 EDT 2013
FreeBSD 8.3-RELEASE-p8
I need to get ser... -
- This worked, but on build
Version 2.1-RC0 (i386)
built on Thu Jul 4 03:04:00 EDT 2013
FreeBSD 8.3-RELEASE-p8
... -
01:59 PM Bug #3069: traceroute6 fails to timeout and hangs the webconfigurator GUI
- FWIW, tried with @truss /usr/sbin/traceroute6 -w 2 -m 18 www.google.com@ - it looks like it *does* actually make it t...
-
- Looks like the code was last touched (beyond irrelevant cosmetics) almost 4 years ago. Unlikely to have any fix.
-
- MTR is an entirely different type of test. Useful, but probably not one we'd include by default. And yes its GUI does...
-
- Hmmm well, not sure either, beyond either a shiny red warning (think about remotely managed boxes, cutting yourself o...
-
- I was able to reproduce it finally. I tried it on a few different pfSense boxes and FreeBSD systems, and I only could...
-
- BTW, installed mtr-nox11, no such issue:
HOST: gw.example.com Loss% Snt Last Avg Best Wrst S... -
- Not really required to uncomment anything there. It's endlessly visible in the process listing from console, till you...
-
- I can't reproduce this on current 2.1 code.
In the GUI we pass "-w 2" which waits a max of two seconds for a reply... -
01:00 PM Bug #2495: pfsense doesn't seem to know what its WAN IP is
- Applied in changeset commit:4454f1f34841b07c2f8e5aa95b3e0d9a9e0ed9a2.
-
- Applied in changeset commit:b877d6351c614f58b68a3ab2c7b04ea7ea282961.
-
- Please, revert these patches ASAP. They hard crash the box with FTP! http://forum.pfsense.org/index.php/topic,64144.0...
- 12:12 PM Revision abe411ad: Fix a small issue when disable a boolean option and save, it shows option as enabled
- 12:11 PM Revision 6a605eec: Fix a small issue when disable a boolean option and save, it shows option as enabled
- 12:09 PM Revision 277fd8db: Fix whitespaces
- 12:08 PM Revision ae6d9444: Fix whitespaces
- 12:04 PM Revision 80dc15eb: Remove extra { wrongly added on last commit
- 11:56 AM Revision c3cbe91e: Fix whitespaces
- 11:56 AM Revision 810c6a96: Process zipped aliases list
- 11:56 AM Revision 6a9a0736: Remove useless code
- 11:54 AM Revision db0aa52a: Fix whitespaces
- 11:47 AM Revision 6fab0f03: Fix set/unset of checkaliasesurlcert
- 11:47 AM Revision 86ffa26d: Process zipped aliases list
- 11:47 AM Revision 76590ffe: Use download_file() and check ssl certificates
- 11:47 AM Revision abc7b6a2: Remove useless code
- 11:47 AM Revision ffd7802a: Create a function to download a file using curl
- 11:47 AM Revision 08b861a8: Add an option to check certificate for https URL aliases
-
- This should behave better with tomorrow snapshot due to a fix done in gateway monitoring.
Can you confirm this is th... -
-
-
-
- Applied in changeset commit:0ee96a458ab93ff451c9bb32b1b8bc20e13866e6.
-
- Applied in changeset commit:86573a248608ff5b166eb77e962f97e91df159d2.
-
- All good now... thumbs up! :) Proper rules generated and DHCPv6 traffic no longer blocked on ifaces with relay enable...
-
- The attached patch should fix it, but it would be better to test it before committing. Let us know if it helps.
-
- Related forum thread: http://forum.pfsense.org/index.php/topic,64168.0.html
-
- Looking at this part of filter.inc, I don't think it deals with this configuration correctly.
@
if ((is_array... -
09:18 AM Bug #1629: invalid state table entries after WAN IP change
- I am also affected by this bug in 2.0.3.
In my case not a changed ipadres on my WAN, but a dual Wan setup with failo... -
- Related forum thread: http://forum.pfsense.org/index.php/topic,64168.0.html
-
- This is very, very broken. It can never be stopped via disabling the checkbox and clicking save. On subsequent enabli...
-
07:20 AM
Bug #2919: IPv6 - WAN and LAN (DHCP-PD) does not renew address
- Glad to report that the firmware update I just installed (details below) seems to work.
Will continue to monitor ... -
- Jun 4 snapshots are even better for this.
-
- Applied in changeset commit:265be6f5ab7d5546a8f26ae6bcae33712f861102.
-
- I pushed some fixes for this.
On newer snapshots it should behave as expected. -
- Applied in changeset commit:63356262a7f3f82b97d029d983fff0132030e539.
-
- Applied in changeset commit:f4a8e38c6ed250e9a18c4e472481541198231cdb.
-
- The only option for now seems to create rules with allow-option advanced setting set.
-
01:46 AM Bug #3073: Please include PHP MySQL extension!
- You can touch /etc/php_dynamodules/module_name and rc.php_ini_setup will pick up on it and load the module (if the mo...
07/04/2013
-
11:00 PM Bug #3073 (Rejected): Please include PHP MySQL extension!
- it's already there
-
10:56 PM Bug #3073: Please include PHP MySQL extension!
- This is not a bug, sorry for the mistake.
-
- Would be too much to ask to include the php mysql extension by default in the next snapshoots? I use a custom authent...
- 01:42 PM Revision 079d1952: Add a new alias type, URLs containing Ports
- 01:40 PM Revision d9f33a7f: Add group_ports()
-
12:11 PM Bug #2762: PF drops IPv6 packets with fragment header followed by a last fragment only
- PS: It is not broken or weird behaviour (according to the RFCs). RFC 6145 (translating IPv4 <-> IPv6) specifies:
<... -
- Hrm seems it should work by default as i was brought to attention.
You sure it asks for interface assignment during b... -
09:37 AM Feature #3070: ova image wan configuration
- locally I could do it. True. The point is that I'm trying daily to download a snapshot from your snapshot server, run...
-
- You can just modify the default config.xml in the repository and that will give you that.
I do not think this will g... -
- Hi,
there is any possibility to generate the ova image with the WAN already configured to em0? I'm writing Cucumbe... -
- today I tried to download the last ova snapshot and looks like the virtualization folder is empty
http://snapshot... -
-
-
-
-
-
- Update interfaces.php
-
- While at it, it would be really useful to include /etc/version.lastcommit directly in the snapshots filename.
-
- Hi, to do test automation, it would be great to have on your snapshot server a link to the last build version. Today ...
- 01:06 AM Revision 3e3aeb8b: Update interfaces.php
- Remove errant double quote.
-
- Remove errant double quote.
- 12:46 AM Revision e00fafb3: Remove errant double quote.
07/03/2013
-
- As simple as trying to run IPv6 traceroute to www.google.com from the GUI:
@ 2 gige-g2-20.core1.prg1.he.net 3.31... - 03:52 PM Revision 581fa606: Merge pull request #692 from mgsmith1000/master
- Omit IP warning if HTTP_REFERER check is disabled.
- 03:50 PM Revision f0f1737b: Merge pull request #691 from mgsmith1000/RELENG_2_1
- Omit IP warning if HTTP_REFERER check is disabled.
-
03:36 PM Revision 31677598: Omit IP warning if HTTP_REFERER check is disabled.
-
-
-
-
-
-
-
- thanks!
-
- You can provide a patch and it will be evaluated!
-
08:36 AM Feature #3068 (Needs Patch): Notifications/Alerts - custom script
- Would be great to have an option in the notifications to execute a custom script.
-
- Please test with latest gitsync or tomorrow snapshots.
There were some fixes doen related to this as well. -
07:25 AM Bug #2878: radvd does not restart properly
- Tom M wrote:
> I am still seeing this issue. I have turned off Track Interface for DHCP on my LAN Interface and ipv6... -
- modified radius function to release the pinene if the client is not authenticated properly, and modified function cap...
-
- Modified radius function to release the pinene
-
- modified radius function to release the pinene if the client is not authenticated properly, and modified function cap...
-
- Not an easy one for 2.1
-
- Merging of the patch has been done.
Thank you. -
- not a bug, VIPs aren't always necessary for 1:1 NAT so they can't be prohibited from being removed because of 1:1 NAT...
07/02/2013
-
- Can we please do something about this? Or make a checkbox for logging (http://forum.pfsense.org/index.php/topic,34436...
-
09:27 PM Bug #3001: Captive portal Voucher sync on HTTPS with custom port
- Captive portal log also shows successful sync.
-
- Ok, I have tested this and it works properly. I've setup two VM's with three interfaces each. WAN (192.168.17.0/24), ...
-
09:13 PM Bug #3062: Captive Portal NOT re-using PIPENO
- Alberto, it will be much easier if you put the changes in GitHub. Then the developers can easily see the differences,...
-
- Only correct a sentence, I meant that I hope will serve out the modification, instead of "I hope you learn the contri...
-
- Excuse the mess in the text above, I did not know how to modify it, please if anyone can fix it, thanks
-
- Limiters:
02002: unlimited 0 ms burst 0
q133074 100 sl. 0 flows (1 buckets) sched 67538 weight 0 lmax 0 pr... -
- Ok, I'm working on a solution, and found the problem in the code, I put the fix and I'm probing now, it appears that ...
-
- Version 2.0.3 is also affected by this problem.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
06:59 PM Bug #3067 (Rejected): Virtual IP Removal
- I noticed that pfsense allows you to remove Virtual IPs that are currently in use in a 1:1 NAT which will cause issue...
-
-
-
05:06 PM Bug #3066 (Rejected): Proxy ARP failing with kernel error
- Hello, having trouble using Virtual IPs. My problem was worked around by using an Interface alias.
It appeared I w... - 04:22 PM Revision 98d5e234: Repect global conf_path
- 04:22 PM Revision 5e3356d7: Repect global conf_path
-
- I am still seeing this issue. I have turned off Track Interface for DHCP on my LAN Interface and ipv6 is now only tur...
-
- Can you please confirm that this is not anymore an issue?
-
- Added previously missing class selectors cs1-cs7 plus VA (voice-admit), plus the TOS values which still work with DSCP
-
- Added previously missing class selectors cs1-cs7 plus VA (voice-admit), plus the TOS values which still work with DSCP
-
- that's intentional for the time being. There's another ticket open on it.
-
- Hi,
I've just noticed that the sync of firewall rules description "eats" the char ">"
For example, on Firewall1... - 10:37 AM Revision dc63650a: Added previously missing class selectors cs1-cs7 plus VA (voice-admit), plus the TOS values which still work with DSCP
- Definitely requires my patches to the kernel patches to work (dscp.RELENG_*.diff). OTOH, it is currently broken anywa...
- 10:34 AM Revision 1227101b: Added previously missing class selectors cs1-cs7 plus VA (voice-admit), plus the TOS values which still work with DSCP
- Definitely requires my patches to the kernel patches to work (dscp.RELENG_*.diff). OTOH, it is currently broken anywa...
- 10:13 AM Revision 492b1314: Fix the RRD RRA’s to collect the correct amount of data for the Previous Period view for each resolution.
- Applied when RRD's are created.
RRA:AVERAGE:0.5:1:1200 = 20 hours of 1 minute data
RRA:AVERAGE:0.5:5:720 ... - 10:12 AM Revision da9a0ad0: RRD Specify RRA and Resolution
- Don't leave it up to RRD Tool to select the RRA and resolution to use.
Specify the RRA and resolution to use per the ... - 09:50 AM Revision 70d36e38: Adjust archives array values to match sizes for average calculation.
- 09:50 AM Revision 086d941d: Archive start is “now” minus archive length. Not “end” minus archive length. Sometimes "end" is not "now".
- 09:48 AM Revision 5ce5439f: Merge pull request #685 from N0YB/RRD_RRA_Sized_for_Previous_Period
- Archive start is “now” minus archive length
-
09:27 AM Revision a13acc0e: Add a checkbox that can be used to request only a IPv6 prefix without a IPv6 address. Some ISPs DHCP6 servers will fail the request if both are requested and only a Prefix is allowed.
- Conflicts:
usr/local/www/interfaces.php -
-
07:37 AM Bug #3064: Broadcom BCM57780 Nic lights not working (Activity and Link)
- The patch link is not correct, here is the correct one - http://svnweb.freebsd.org/base/head/sys/dev/bge/if_bge.c?r1=...
-
- It appears that the freeBSD 8.x and even the 9.X code has a bug where once the network is configured it turns off the...
-
04:51 AM Bug #3063: system will crash after "PowerD" enabled.
- Hardware: Intel(R) Pentium(R) Dual CPU E2200 @ 2.20GHz, Normal PC.
I did not find any obvious message about this f... -
- I am using pfsense as a transparent firewall.
I found the system would be hanged(no any message) in a few minute, ... -
-
-
-
- Can you try with tomorrows snapshots.
-
- confirmed fixed
-
- Also, I have replicated the test by Josh Stompro above (changing an existing alias used by a static route from IP to ...
-
- I have tested this with the latest build and it works as intended. I created two aliases, one with a FQDN and one wit...
-
- I have tested this and can confirm it works properly (2.1-RC0 - Jul 1 15:22:23 EDT 2013). I created a new shaping rul...
-
- confirmed fixed in testing and on customer's production system where problem was discovered.
07/01/2013
- 10:42 PM Revision 24646d57: Adjust archives array values to match sizes for average calculation.
- 10:38 PM Revision 641f2f3c: Archive start is “now” minus archive length. Not “end” minus archive length. Sometimes "end" is not "now".
-
- Captive portal does not correctly release pipe numbers, is continually increasing them until they are exhausted, and ...
-
- Closed per submitter request
-
- You can close this bug
-
- Add show/hide to the new "Reject Leases From" row
- 10:16 AM Revision c54b4586: fix typos
- 07:46 AM Revision 63c704c3: Add show/hide to the new "Reject Leases From" row
- Show for Basic and Advanced. Hide for Config File Override.
-
- /etc/bogons is back to the short couple of lines version and /etc/bogonsv6 is empty after every snapshot update. Woul...
-
01:16 AM Revision 9e5ae41a: support mitigating BEAST attack
- According to http://redmine.lighttpd.net/projects/lighttpd/wiki/Release-1_4_30
"...by setting
ssl.cipher-list = "EC...
06/30/2013
- 02:32 PM Revision cafb7dfe: change css & jquery to allow for multiple columns for themes ending in _fs
- 02:15 PM Revision 60695c6a: update loader.js - add jquery to display additional column button and create/delete columns
- 02:02 PM Revision c73a2a29: update css to fit full screen
- 01:58 PM Revision db83bdf9: Merge pull request #676 from N0YB/RRD_RRA_Sized_for_Previous_Period
- Fix the RRD RRA’s to collect the correct amount of data for the Previous Period view for each resolution.
- 01:57 PM Revision 1a03f646: Merge pull request #675 from N0YB/RRD_Specify_RRA_Resolution
- RRD Specify RRA and Resolution
- 01:55 PM Revision bc82e331: Merge pull request #671 from wrboyce/master
- allow defining dhcp static mappings using dhcp-client-identifier
- 01:50 PM Revision 61ef14bb: Merge branch 'Advanced_DHCP_Client_Options' of https://github.com/N0YB/pfsense into N0YB-Advanced_DHCP_Client_Options
- Conflicts:
usr/local/www/interfaces.php - 01:45 PM Revision ca794dd1: clone pfsense_ng theme
- 12:21 PM Revision 2cfde694: Handle comma-separated list arg to rc.openvpn
- The argument passed to rc.openvpn can be a comma-separated list of gateways - not just 1 gateway. Enhance the code to...
- 12:19 PM Revision 43d7e83e: Merge pull request #681 from phil-davis/master
- Handle comma-separated list arg to rc.openvpn
-
- It was changed only on 2.1, not 2.0.x, because of this you still see the issue on 2.0.3. You can apply the change on ...
- 04:09 AM Revision 7ef9de3f: Handle comma-separated list arg to rc.openvpn
- The argument passed to rc.openvpn can be a comma-separated list of gateways - not just 1 gateway. Enhance the code to...
-
03:18 AM Bug #2998: Diffserv Code Point options misleading
- I decided to go for the "minimally invasive" approach:
1. I added the CSx itens to the drop-down box.
2. I fixed ...
06/29/2013
- 11:42 AM Revision 216c80dd: Added previously missing class selectors cs1-cs7 plus VA (voice-admit), plus the TOS values which still work with DSCP
- Also removed the ranges 1-64 and 0x04-0xfc, which never ever have worked as expected (the kernel code does not recogn...
- 11:33 AM Revision 6e0d8f82: Added previously missing class selectors cs1-cs7 plaus VA (voice-admit)
- Definitely requires my patches to the kernel patches to work (dscp.RELENG_*.diff). OTOH, it is currently broken anywa...
-
05:43 AM Bug #2626: Patch included: syslog.conf allows duplicate logging of daemon.info messages (e.g. from snort or dnsmasq)
- Just updated to 2.0.3; this problem is still here (or came back), with the same cause as before. In my installed copy...
06/28/2013
-
08:14 PM Bug #1943: PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
- I'm also looking forward for the solution of this. I currently halt my 14 sites installation until the bug will be fi...
-
-
-
-
-
- http://forum.pfsense.org/index.php/topic,63941.0.html
-
- After several weeks looking for the origin of the problem exposed in this forum, I concluded that the problem occurs ...
-
-
-
01:05 PM Bug #2919: IPv6 - WAN and LAN (DHCP-PD) does not renew address
For the very first time, I have been able to go over 4 days without loosing IPv6 addressing. This is very positive...-
- That happens when a package has failed to reinstall, which is a problem with a specific package in most cases. Check ...
-
09:58 AM Bug #3060 (Rejected): Post-upgrade screen never goes away and some packages disappear from menu
- 1. I have posted this in the forum at http://forum.pfsense.org/index.php/topic,63793.0.html
The upgrade status scr... -
- Add Dyn Dns Euro Dns Provider
06/27/2013
- 09:31 PM Revision ec66caa6: DynDns Euro Dns Provider
- Add Dyn Dns Euro Dns Provider
-
-
-
-
11:23 AM Bug #2349: vlan(4) needs altq adaption on FreeBSD 8.3++
- I just updated from a January build to yesterday's build and still get altq errors similar to those above on my lagg0...
-
- Added support for DHCPv6 reservations and /etc/hosts entries in PR 466
-
07:57 AM Bug #1399: rrdtool respawning too fast
- Attaching rrdtool.core from 2.1 p13
-
- Same message appeared to me after upgrade from 2.0.3 to 2.1 p13
I have anohter server upgraded to 2.1 p8 (few days e... -
- Forget my bullshit about ipfw above - Goole managed to sneak some ipfw results into my "pf" search, I just a bit conf...
-
- was a bad snapshot that was removed
-
02:27 AM Bug #3058: Latest 2.1 RC update killed Alix
- Please close bugreport - seems the problem has not reappeared. Sorry for wasting time, my apologies.
06/26/2013
-
- Submitted PR #456 as fix.
Turns out the issue isn't IPv6 addresses, it was the duplicate host handling, if both IP... -
- Apparently the AHCI module may also be required for trim to work properly. See http://forum.pfsense.org/index.php/top...
-
01:42 PM Bug #3047: IPSEC remote access broken in 2.03
- We're using VMWare PFSense. Upgraded to 2.1 but still no luck with mobile vpn.
-
- I was reading the whole story again since I was not able to reproduce the issue, and I have a suspect. Could you plea...
-
- Craig Falconer wrote:
> If this affects others, can Tuesday's build be pulled before too many people are affected?
... -
- Just updated from Monday to Tuesday's build on my spare alix 2d2....
06/25/2013
-
- They are working on current snapshots in our environment. There must be something else wrong in your setup, so please...
-
02:10 PM Bug #3055: System logs not work right
- Sorry for my english, but maybe I have not explained well.
The problem is server-side logs that not receive the logs... -
- I've been updating a snapshot copy since December 2012 without a full rebuild. I'm wonder if I start with a fresh bet...
-
12:57 PM Bug #2878: radvd does not restart properly
- Just updated to the same snapshot, and radvd seems to have come up just fine for me. This is also on Comcast, so I wo...
-
-
01:24 PM Bug #3047: IPSEC remote access broken in 2.03
- Not sure if it matters, but I am on an ALIX device. I have since moved back to 2.02 because I cannot afford the down...
-
- @@Jun 24 16:00:18 racoon: ERROR: failed to begin ipsec sa negotication.
Jun 24 16:00:18 racoon: ERROR: no configur... -
- Robert Guerra wrote:
> Just updated to June 24 release (details below) and IPv6 connectivity -still - does not work.... -
07:54 AM
Bug #2919: IPv6 - WAN and LAN (DHCP-PD) does not renew address
- Just updated to June 24 release (details below) and IPv6 connectivity -still - does not work. Am on Comcast service a...
-
- As the TOS field has an "unstable history" (RFC 3168), a most flexible approach should be imperative. That means that...
-
- Proposed fix for bug #3057
-
- Could you please try a recent snapshot? It should be fixed now.
-
-
- Turn on AdvManagedFlag and AdvOtherConfigFlag for both 'managed' and 'assist' ramodes.
06/24/2013
-
- Proposed fix in https://github.com/pfsense/pfsense/pull/677
-
- When selecting 'Assisted' mode for Router Advertisements, OSX clients use stateless autoconfig and do not obtain DHCP...
-
- DHCPv6 reservations don't appear to be added to unbound.conf either (DHCPv4 reservations are added).
-
- Running latest 2.1RC with unbound 1.4.20_7 installed.
When setting host overrides in Services > DNS Forwarder the ... -
-
-
- Not enough information here for a valid bug report. Please start a thread on the forum and if, after assistance and d...
-
- I flag - > "Everything" in "Remote Syslog Contents" but not all event is send to a syslog.
In my case only the login... -
-
- 02:40 PM Revision efe42b5a: Fix #2887, based on NAT states that will be killed, also kill firewall states for same source and destination
- 02:40 PM Revision d13b7363: Fix #2887, based on NAT states that will be killed, also kill firewall states for same source and destination
-
02:09 PM
Bug #2627: Old delegated prefixes are not removed from the LAN interface
- Tried with:
2.1-RC0 (amd64)
built on Mon Jun 24 04:05:41 EDT 2013
FreeBSD 8.3-RELEASE-p8
Boot up. WAN & LAN g... -
- Could you please check a recent snapshot?
-
- I'm still seeing an issue with RADVD not restarting automatically after a dhcp renew from my internet provider (Comca...
-
- This has been working for me with the past several snapshots I've tested.
-
- Could you please check a recent snapshot?
-
- This seems to have been working fine for me on Comcast Home for the past few snapshots that I've tried. After > 8 day...
-
- Can you test again with latest snapshots and see if this is fixed?
-
- The system log would be interesting to see here
-
- Applied in changeset commit:efe42b5a05dfc7c718b04fb00391f251d846a2f2.
-
- Applied in changeset commit:d13b7363304390736fa4686b4544319f26bdba92.
-
06:44 AM Bug #3054: openBGPd stoped working
- frustration is never a good friend :
excuse my p.s. :)
step 1 install: pfSense-LiveCD-2.1-RC0-amd64-20130618-1856... -
- ok some more info :
step 1 : install pfSense-memstick-2.1-RC0-amd64-20130618-1856.img
step 2 : make all confs in Se... -
- Applied in changeset pfsense-tools:commit:0416a5113ab777964567fc30b78647b6167f8b75.
06/23/2013
-
- not enough here to be a legit bug report, please post info to the forum or list for help.
-
- After upgrade to :
2.1-RC0 (amd64)
built on Sat Jun 22 15:45:58 EDT 2013
openBGPd stopped working giving follo... - 09:56 PM Revision 211d95a9: Fix the RRD RRA’s to collect the correct amount of data for the Previous Period view for each resolution.
- Applied when RRD's are created.
RRA:AVERAGE:0.5:1:1200 = 20 hours of 1 minute data
RRA:AVERAGE:0.5:5:720 ... - 04:16 AM Revision 1e86f510: RRD Specify RRA and Resolution
- Don't leave it up to RRD Tool to select the RRA and resolution to use.
Specify the RRA and resolution to use per the ... - 03:53 AM Revision 88ba6d31: Merge branch 'RELENG_2_1' of git://github.com/pfsense/pfsense into RELENG_2_1
06/22/2013
-
11:01 AM Revision 63b69d34: System: Group manager, set max length for groupname to 16 characters
-
- System: Group manager, set max length for groupname to 16 characters
-
12:27 AM Bug #2997: CARP and pfSync traffic issues with traffic shaping
- Hi,
this should be already foreseen (http://forum.pfsense.org/index.php/topic,45045.msg344264.html#msg344264), ju...
06/21/2013
- 11:06 PM Revision 51f1fc58: Use Probe Interval on gateway advanced settings
-
-
11:54 AM Feature #3053 (New): Automatically add DHCP static addresses to CP passthru-mac
- Add a new option to Captive Portal to automatically add static addresses configured on DHCP server to the list of pas...
-
- Use "Probe Interval" to describe this advanced gateway parameter
-
05:03 AM Bug #3052 (Rejected): Adding a static dhcp for mac address dissapears.
- Cannot say if its a bug or normal behaviour. This is what i have
1 wan, 3 Vlan's
When i want to add a static ma... - 02:48 AM Revision 490cd438: Use Probe Interval on gateway advanced settings
-
02:21 AM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes
- Thanks.
I will test as soon as it's in a snapshot (im currently on 2.1RC0). Backing out the old patch already yielde...
06/20/2013
-
09:27 PM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes
- I have placed all the changes I have made to racoon up on Github. You can find them "here":https://github.com/duchsc...
-
12:24 PM pfSense Packages Bug #3051: Snort 2.9.4.6 pkg v. 2.5.9 -> wansuppress
- I can confirm that bug on Snort 2.9.4.6 pkg v. 2.5.9.
pfSense 2.1 RC0 -
- Pfsense 2.1 of 06/19/2013 17:23.
If change wansuppress on Snort, is necessary reboot Pfsense to enable the new rule... -
- Not any single crash with the new file. The OpenNTPD service is running rock-stable. No crash, no error in system-log...
-
-
04:44 AM Bug #3050: error loading TCP block or reject rule
- Erik Augustsson wrote:
> Works for me
same here
-
- Seems correct as a patch as long as you do not get LORs.
I though this was handled in the ioctl patch code already...
06/19/2013
-
- I think I'm close to the problem, I deleted the database files belonging to the captive portal " /var/db " and then r...
-
- It's fine to leave bandwidth blank, altq fills it using the interface bandwidth. On my tests I could reproduce the is...
-
-
-
-
-
08:20 AM Bug #2511: DHCPv6 Shows Wrong DUID
- I seem to have a similar problem.
A windows 8 client with the DUID 00:01:00:01:18:1c:59:c5:00:25:22:92:f5:43 (veri... -
07:02 AM Bug #3050: error loading TCP block or reject rule
- Works for me
-
- same Problem since PFSense 2.0.2 with Android 4.1.2, 4.2, iOS 4/5.
Downgrade back to 2.0.1 and everything is fine wi... -
06/18/2013
-
- I backed the following patch out from ipsec-tools and many of my issues when away.
https://github.com/duchscherd/p... -
08:19 PM Bug #3049: RAM Disk RRD Loss Vulnerability
-
Fix verified.
RRD backup file rrd.tgz is retained after reboot.
-
- Applied in changeset commit:ef01b77f6dc5e2f4ba254739a1792207e7b52a09.
-
- Applied in changeset commit:dc21d4d5618e5190dbc85a479489b230063450f5.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Applied in changeset commit:40e6086ada6b73f6432b7ac93d4b376941028b09.
-
- Applied in changeset commit:2706c79b47373fd294446d7ab0cc25d79bd494a1.
- 10:48 AM Revision ef01b77f: Fix #3049, set $config as global to it can be read
- 10:48 AM Revision dc21d4d5: Fix #3049, set $config as global to it can be read
-
- Applied in changeset commit:5015ec4cd0c497ca1db68e7393d2898ba57efb0b.
-
- Applied in changeset commit:57fa70112a9ab5bec06f5dd64bf0d987dfdae159.
-
- After updating to _2.1-RC0 (amd64) built on Mon Jun 17 17:28:37 EDT 2013_ none of my TCP block rules are working anym...
-
-
- Since implement your new file yesterday, i habe no more ntpd crashes. I will report again at the end of the week.
-
02:21 AM Bug #2349: vlan(4) needs altq adaption on FreeBSD 8.3++
- Andreas, that's not really relevant to this bug - this is specifically for making altq work with the VLAN driver, tha...
-
01:43 AM Bug #2349: vlan(4) needs altq adaption on FreeBSD 8.3++
- Sorry i use the latest 2.1 RC0 i386 snapshot
-
- Hi
i'm sorry for reopening this ticket.
I have four openvpn connections and try to configure a traffic shaper wit... -
01:02 AM
Bug #2650: FTP helper breaks TCP sequence numbers on 2nd WAN
- I did a more in-depth analysis with tcpdumps (LAN/WAN) here:
http://forum.pfsense.org/index.php/topic,62237.msg34202...
06/17/2013
-
-
When using the RAM disk option for /tmp and /var, after a reboot and RRD data is restored, the RRD backup file /cf... - 03:26 PM Revision 9507aa0e: Allow user to set interval between attempts to resolve hostnames configured on aliases
- 03:24 PM Revision ab3ab2ac: Allow user to set interval between attempts to resolve hostnames configured on aliases
-
03:06 PM Feature #3048 (Resolved): Pre-download packages to reduce downtime during upgrade process?
- Not sure if this is possible under the current system...
If it is possible to determine what version of [a] package[... -
-
-
- As before, same with IOS.
-
- Cisco VPN client is known to be broken when connecting to pfSense (and it's a violation of their license to do so usi...
-
- I don't understand why it doesn't work for me in 2.03 - no config changes whatsoever between 2.02 and 2.03. I also j...
-
- I used your exact IPsec config (aside from fixing the lifetimes to match the documented suggested values), and I am a...
-
10:15 AM Bug #2928: Authentication attempts against multiple radius servers should stop when the first reject is received.
- For two factor authentication , you need to use Access-Challenge response from your radius server, and use it to proc...
- 10:01 AM Revision 84a27e31: fix dhcp static mapping/client identifier validation
-
-
-
-
- OK it's started now. I had to go Services - NTP - press Save button. Then press the restart service button. Now it's ...
-
- After this procedure i can't start the NTPD service.
-
- I've built ntpd binaries with debug symbols, there are binaries for 2.0.3 and 2.1, i386 and amd64:
ntpd-2.0.3-amd64
... -
- Crashed again. File attached.
-
-
-
-
-
-
- * During dhcp setup use -n for cp to avoid coping uselessly
-
- * During dhcp setup use -n for cp to avoid coping uselessly
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
06:53 AM Bug #706: OpenVPN client export needs to include remote-cert-tls server
- Hmm, nevermind, it seems to include 'ns-cert-type server' nowadays, that should suffice.
-
- Nowadays Pfsense seems to be able to generate server certificates, so I don't see any reason to not add 'remote-cert-...
- 05:39 AM Revision af600fe2: Don't flip the IPv6 allow setting just because people are upgrading. Just upgrading versions shouldn't change this behavior. As much as most of us would like people to start deploying IPv6, the vast majority aren't going to be immediately post-upgrade, and changing this can change the firewall policy behavior by allowing v6 that previously wasn't allowed. Upgrades should never change the firewall behavior like that. At the time it was done, everyone using the 2.1 code base was using it for IPv6, so of course it tripped up quite a few people.
- 05:32 AM Revision 4cdf35a4: Don't flip the IPv6 allow setting just because people are upgrading. Just upgrading versions shouldn't change this behavior. As much as most of us would like people to start deploying IPv6, the vast majority aren't going to be immediately post-upgrade, and changing this can change the firewall policy behavior by allowing v6 that previously wasn't allowed. Upgrades should never change the firewall behavior like that. At the time it was done, everyone using the 2.1 code base was using it for IPv6, so of course it tripped up quite a few people.
- 05:24 AM Revision 878454b8: not true you have to log in again since HTTP basic auth was deprecated.
- 05:24 AM Revision 891ecd18: not true you have to log in again since HTTP basic auth was deprecated.
- 05:23 AM Revision 9a0a9fc1: not true you have to log in again since HTTP basic auth was deprecated.
- 05:16 AM Revision a6c03297: add MSS clamping to setup wizard. Now that MTU and MSS are separate, the MTU description was wrong, and both need to be there.
- 05:15 AM Revision 7b79e0cb: add MSS clamping to setup wizard. Now that MTU and MSS are separate, the MTU description was wrong, and both need to be there.
06/16/2013
- 11:21 PM Revision 5fb01c77: Revert "Revert "Fix gateway quality rrd to have the correct granularity and be consistent with the pfSense graphs set.""
- This reverts commit 304ea841cff40aacaac084a0eb6c145ddd034303.
- 11:15 PM Revision 304ea841: Revert "Fix gateway quality rrd to have the correct granularity and be consistent with the pfSense graphs set."
- This reverts commit a8d262f63c4574f40f5f299a2e9f746986dc966a.
put the create_gateway_quality_rrd function in rrd.inc... -
- Another detail is that when the error happens it creates a single limit like the follow.
Limiters:
00001: 262.140... -
- You should have enough to re-create it on a pfSense box, but attached is the info you requested. Also, when the VPN ...
-
- Still not enough information. Most importantly we need the IPsec log entries (I forgot to mention that previously) fr...
-
- Forum link is here: http://forum.pfsense.org/index.php/topic,62209.msg341320.html
I didn't get any feedback so I ope... -
- There is not nearly enough information here for a valid bug report. Include details about your exact config (every op...
-
- In pfSense 2.0 through 2.02, my configuration for remote IPSEC access (like my iPhone) worked fine. IPSEC with Mobil...
-
- I'm also seeing this every couple of days and have also attached file.
- 07:57 AM Revision 449f1dd2: allow defining dhcp static mappings using dhcp-client-identifier
06/15/2013
-
- The file is attached.
-
- If anyone tells me where the ntpd core crash dump is located, sure.
- 12:07 AM Revision e8ddd3a8: TCP flags are valid on any type of rule, don't skip them on block or reject rules
- 12:06 AM Revision bcd94190: TCP flags are valid on any type of rule, don't skip them on block or reject rules
06/14/2013
-
08:07 PM Bug #3046 (Resolved): Fatal error: Call to undefined function get_interface_ip() in /usr/local/captiveportal/radius_authentication.inc on line 56
- When using Radius authentication I get this immediately after logging in. My password is accepted, then I receive an...
- 07:48 PM Revision 664f9f3b: Fix max length for wpa passphrase, it fixes #3034
- 07:34 PM Revision 2ca43251: Fix max length for wpa passphrase, it fixes #3034
- 07:33 PM Revision df78d8cc: Fix max length for wpa passphrase, it fixes #3034
- 06:44 PM Revision c9322c5c: Allow queues to be deleted, it fixes #3037
- 06:44 PM Revision a22537c7: Allow queues to be deleted, it fixes #3037
-
- not true except where it causes problems with an upstream ARP cache, which we can't do anything about. Disable/enable...
-
- Two nodes with CARP outside and CARP inside.
Outbound SNAT is done via the outside virtual IP.
Changing the vhid of... -
- Applied in changeset commit:664f9f3b919f970fb77c66cc4c5c3445081d5f25.
-
- Applied in changeset commit:2ca432514e09e5388f1786f0f6c6d977d3254533.
-
- Applied in changeset commit:df78d8cc1890f19702e3e78bb3c5a583ada52356.
-
- Applied in changeset commit:c9322c5ceb272a3b51a4cd2f737d268cde3584c7.
-
- Applied in changeset commit:a22537c73c6a1301b9e2656bfaa4382b93314a55.
- 12:45 PM Revision d60629b0: Update list of mobile service providers
- 12:44 PM Revision 6b7c0fef: Update list of mobile service providers
-
- Is there a ntpd core with crash dump that you can share? It could help us to identify the issue.
-
- The NTP services crashes a lot, reason unknown for me.
The System Logs says:
_kernel: pid 35663 (ntpd), uid 0: ex... -
11:02 AM Bug #3044: SSHD failed to start.
- http://forum.pfsense.org/index.php/topic,63435.0.html
-
- Not enough information here. Please post in the forum for assistance in finding the cause of the error. If a legitima...
-
- php: : The command '/usr/sbin/sshd' returned exit code '1', the output was 'Could not load host key: /etc/ssh/ssh_hos...
06/13/2013
-
-
-
-
-
-
-
- EAOrigin.pat - Traffic Sharping Layer 7
-
- 04:44 PM Revision 4e79fb9a: EAOrigin.pat - Traffic Sharping Layer 7
- The EA Store is now Origin, Tested and works (for now) will make changes if i come to anything useful.
-
-
-
-
03:39 PM Bug #2882: 6RD not working in latest snapshots
- Hi Ermal
Here is the output of the 2 commands you asked me to run on my Jan 18th build where 6RD works:
http://... -
01:24 PM Bug #2882: 6RD not working in latest snapshots
- And that seemed to have been a user error on my part.
My IPv6 firewall rule on LAN had default (ipv4 dhcp) gateway... -
- Ermal Luçi wrote:
> You are talking about tracking interfaces or 6rd tunnel here?
>
> radvd has nothing to do wit... -
- Will Wainwright wrote:
> Hi Chris,
>
> I'm sorry to report that it has not fixed the issue for me.
>
> As alwa... -
- You are talking about tracking interfaces or 6rd tunnel here?
radvd has nothing to do with 6rd in this ticket.
... -
- This was seen in log after reboot:
Jun 13 13:29:23 radvd[49436]: resuming normal operation
Jun 13 13:29:23 radvd[... -
- I just tried this out on:
2.1-RC0 (amd64)
built on Wed Jun 12 18:24:47 EDT 2013
FreeBSD 8.3-RELEASE-p8
Afte... -
03:24 PM Bug #3042: CARP interface handling
- This seems like bad news. PfSense with the current carp interface-based failover seemed like an excellent way to do t...
-
- Also newcarp in FreeBSD 10.x does away with the interface notion entirely so I'm not sure it's a viable request for t...
-
- It's too late for more 2.1 features, removing 2.1 target.
-
- Currently PfSense handles carp interfaces as Layer 3 interfaces with a static IP-address on the created interface. Ho...
-
02:18 PM Bug #2526: Limiter appears to break IPv6 connectivity
- This problem appears to be present in the Wed Jun 12 06:19:03 EDT 2013 build. IPv6 Traffic hits the limiter as shown ...
-
- Applied in changeset pfsense-tools:commit:3e217b8208cdba17060a72a9ccb5fb7ebff9ed25.
-
- Applied in changeset pfsense-tools:commit:9c0a39f717a04def5d6c0260eb74a7cd0cde8b17.
-
- Implemented in commit:48b86f6257bd0c79f26ee5e111bfa1488a28e6fb
-
- Implemented in commit:48b86f6257bd0c79f26ee5e111bfa1488a28e6fb
-
- Not enough information here for a valid bug report. Please post in the forum where someone can assist you in diagnosi...
-
- Crash report begins. Anonymous machine information:
amd64
8.3-RELEASE-p8
FreeBSD 8.3-RELEASE-p8 #1: Wed Jun 12 ... -
- Yeah! It would be great to have CDP in pfsense!
06/12/2013
-
- Hi Chris,
I'm sorry to report that it has not fixed the issue for me.
As always, please let me know if there's ... -
- confirmed working for me again on the latest snapshot. Will leave this as is for feedback from others for now.
-
-
-
-
-
- SWF
-
- Most of that is already done in 2.1's firewall log view/filtering. The ones that aren't there yet aren't really feasi...
-
- It would be great if the firewall logs could be more debug-friendly:
- have source and destination ports in separate... -
- Yup, I thought it could be scheduled somehow, but it didn't happen in the next few hours.
-
- This is not immediate.
You are sure that you waited enough for the replication to happen? -
- Issuing new vouchers on master node is not automatically synced with CARP slave node.
When I go to Services>Captive ... -
-
- It's the expected behaviour, if you don't have zones, status menu won't show up.
-
- Having CARP active with two nodes, when I start Captive service on master it starts it on the slave node too.
But st... -
-
- 02:28 AM Revision 8d1eb49e: SWF
- As said on the pFsense forum http://forum.pfsense.org/index.php/topic,62863.0.html It works and tested by me.
06/11/2013
-
- Status-Queues: Get the stats gauge for PPS or bandwidth Edit (RELENG_2_1)
-
- Let the user select the values to show in the stats gauge between PPS and bandwidth.
-
-
-
- should work with tomorrow's snapshot.
-
- If you use PRIQ, you cannot delete any queues, even ones that were created manually. The delete button does not appea...
-
- Hi there!
That's my first bug report and I hope it's well done :)
Services>Snort
Add or edit interface>Alert Set... -
- Heh that is just a copy/pasto from implementation.
Will probably fix that. -
-
06/10/2013
-
-
-
- I just tested this again on a fresh OVA. I found that starting from a fresh install (i.e. no zones), creating a zone,...
-
- it shouldn't show up anywhere when there are no zones defined, I've noticed that changed in 2.1. In 2.0.x and previou...
-
- I can only reproduce that when I have no zones defined. If I have a zone defined, it always shows up for me.
-
- Christian McDonald wrote:
> I can reproduce this on two pfSense boxes each running:
>
> 2.1-RC0 (amd64)
> built... -
- I can reproduce this on two pfSense boxes each running:
2.1-RC0 (amd64)
built on Thu Jun 6 21:08:57 EDT 2013 -
- Not reproducible here, as you can see on attached screenshot.
-
- Status-Queues: Get the stats gauge for PPS or bandwidth
-
- Seems like a local issue, I could not reproduce. You should try to get help on forums and mailing lists to try to fig...
-
- What is the length of the password you got the issue?
06/09/2013
-
- !http://i.imgur.com/SgaFqaO.png!
-
- When viewing the Captive Portal Status, the menu item for Status->Captive Portal Disappears
Steps to reproduce:
... -
06:43 PM Bug #3034 (Resolved): Security FLAW in pfSense Wireless Found
- I have found a security flaw in pfSense wireless. If you enable WPA2 for security and use a password for the pre shar...
-
- Let the user select the values to show in the stats gauge between PPS and bandwidth.
06/08/2013
- 05:24 PM Revision f57e4181: Replace hardcoded path by vardb_path
-
05:08 PM Bug #3033 (Rejected): Static IPv6 route to OpenVPN tunnel ignored
- I have an openvpn tunnel to a remote server which works correctly for IPv4 traffic but not for IPv6. When the remote ...
-
- test on 2.1 and report more info on forum if you can still replicate
-
03:17 AM pfSense Packages Bug #3032 (Rejected): last activity in CP 2.0.3
- hi
in my 2.0.3 amd64 captive portal last activity was periodically (every minutes?) reset to the system boot time:... -
- i have two installation with 2.0.3 but the problem still exist.
i opened a new segnalation (3032)
thx
06/07/2013
-
02:27 PM Bug #3020: HFSC Priority
- Ermal Luçi wrote:
> HFSC does not have notion of priority.
Ok, sorry for this report but I Sugere remove or corre... -
11:35 AM Feature #3031 (Resolved): Message is false after changing Hardware Checksum Offloading setting
- It seems that appliance needs to reboot after changing the advanced networking setting.
System -> Advanced, click ... -
- If you are using LAGG+VLAN interfaces (e.g. lagg0_vlan10) in the shaper wizard, the wizard does not fill in the bandw...
-
- Having similar issues:
2.1 RC0 (symptoms started from 2.03 on as far as i can remember)
Policy Generation > Uni... -
03:12 AM pfSense Packages Bug #999: vhosts does not show up as started
- Hi!
Could you tell us how to fix it.
I think two years it's so much time to fix this little problem (talking ab...
06/06/2013
-
11:44 PM Feature #3025: Allow Proxy Arp to Bind to CARP Interface
- Thanks a lot for your time and sorry for the useless ticket opening.
-
- IP Alias VIPs don't work that way, but proxy ARP VIPs are not and cannot be compatible in the way you describe.
On... -
- Ip Alias can't expand a whole network withing a single line of conf
When configuring a Proxy ARP you can specify a... -
- no need. IP alias or more CARP.
-
- Hi,
We are using a cluster pfSense to NAT 1:1 two network.
I need to make Proxy ARP VIP to bind to CARP Interfa... -
-
-
-
-
- The configuration page for the DHCPv6 server and router advertisements currently only lists those interfaces that hav...
-
- I notice that configuring DHCP-PD starts a dhcpd server on the tracking (LAN) interface that serves up the delegated ...
-
-
12:55 PM Bug #2412: inbound 6to4 traffic does not work in pf
- I can confirm that this is working as intended. Thank you for fixing it. We are mainly using this to test ipv6 capabi...
-
- In various places input_errors2Ajax() is used. However this function doesn't exist.
I'm assuming the original intent... -
- What you are saying is you go and set a static ip to an interface and the interface didn't get that IP address config...
-
09:33 AM Bug #3026 (Rejected): not all interfaces will get their designated IP after I add an IP to an interface
- When I add an IP to an interface my pfsense will become unresponsive for a minute.
On Zabbix I can see the system lo... -
-
- probably promiscuous broken in the 8.3 fxp driver. There's another ticket open to back port a newer driver.
-
02:11 AM Bug #1351: Mobile IPsec no traffic pass trough after 2nd connect after 5 minutes
- Same problem here running:
2.0.3-RELEASE (amd64)
Client can connect OK for the first session but then after dis...
Also available in: Atom