Project

General

Profile

Activity

From 10/01/2013 to 10/30/2013

10/30/2013

08:01 PM Revision 85bdf997: Add Auth Digest to OpenVPN wizard also.
Jim Pingle
07:47 PM Revision 97d5b59b: Add an Authentication Digest Algorithm drop-down to OpenVPN server/client (SHA1 is the default since that is OpenVPN's default)
Jim Pingle
03:44 PM Bug #3297 (Closed): IPsec log parsing code does not skip disabled Phase 1 entries
The IPsec log parsing code does not skip disabled Phase 1 entries, however, that may be OK but needs consideration.
...
Jim Pingle
03:29 AM Bug #3280 (New): Assigning GRE interface and configuring an IP address removes the IP from the underlying gre interface in the OS
Renato Botelho

10/29/2013

03:30 PM Bug #3280: Assigning GRE interface and configuring an IP address removes the IP from the underlying gre interface in the OS
Applied in changeset commit:204bec28359f7ef8bc0dee97b909839a0566daf8. Renato Botelho
03:30 PM Bug #3280: Assigning GRE interface and configuring an IP address removes the IP from the underlying gre interface in the OS
Applied in changeset commit:34e178135b252d6664d1ba47dc877e099033ca7f. Renato Botelho
04:10 AM Bug #3280: Assigning GRE interface and configuring an IP address removes the IP from the underlying gre interface in the OS
Applied in changeset commit:6721d6d0443bd7e697bd6ca33f470c801608df7e. Renato Botelho
04:10 AM Bug #3280 (Feedback): Assigning GRE interface and configuring an IP address removes the IP from the underlying gre interface in the OS
Applied in changeset commit:bb6291e0204ffe2828fe9c9425bdae9c8541fe54. Renato Botelho
09:35 AM Revision 204bec28: Revert "Define dynamic gateway for GRE interfaces and do not user to define IP address to the interface. Fixes #3280"
Another solution will be implemented
This reverts commit 6721d6d0443bd7e697bd6ca33f470c801608df7e.
Renato Botelho
09:35 AM Revision 34e17813: Revert "Define dynamic gateway for GRE interfaces and do not user to define IP address to the interface. Fixes #3280"
Another solution will be implemented
This reverts commit bb6291e0204ffe2828fe9c9425bdae9c8541fe54.
Renato Botelho
09:06 AM Revision 6721d6d0: Define dynamic gateway for GRE interfaces and do not user to define IP address to the interface. Fixes #3280
Renato Botelho
09:05 AM Revision bb6291e0: Define dynamic gateway for GRE interfaces and do not user to define IP address to the interface. Fixes #3280
Renato Botelho
12:20 AM Revision d3ad6cf0: fix typo
Chris Buechler
12:20 AM Revision 9aca7390: fix typo
Chris Buechler

10/28/2013

04:20 PM Revision 1dc0e7f4: Make return_gateways_array() return all disabled gateways when $disabled is true, it should fix #3291
Renato Botelho
04:19 PM Revision aec89bd3: Make return_gateways_array() return all disabled gateways when $disabled is true, it should fix #3291
Renato Botelho
01:29 PM Revision b84ac9c6: Merge pull request #822 from CharlieMarshall/interfacesWidget
cleanup interfaces.widget.php Ermal Luçi
12:35 PM Revision 20623f57: Fix an attempt to read unset variable $rtent
Renato Botelho
12:35 PM Revision 7610d228: Fix an attempt to read unset variable $rtent
Renato Botelho
11:20 AM Bug #3291: Add new gateway allow name duplication
Applied in changeset commit:1dc0e7f4f16b57ecca40157c5c8f76e9a60a914e. Renato Botelho
11:20 AM Bug #3291 (Feedback): Add new gateway allow name duplication
Applied in changeset commit:aec89bd3c2d0f9b464e0d7cc6d189c49966d6f0b. Renato Botelho
03:48 AM Bug #3295 (Rejected): /diag_authentication.php throws error
Duplicate of #3234 Renato Botelho

10/27/2013

03:17 PM Bug #3295: /diag_authentication.php throws error
Suggested fix:
wrap getNasIP() in if (!function_exists('getNasIP')) {} in both /usr/local/captiveportal/radius_authe...
Cool Fire
03:07 PM Bug #3295 (Rejected): /diag_authentication.php throws error
Trying to load this page results in the following error:
Fatal error: Cannot redeclare getNasIP() (previously decl...
Cool Fire

10/26/2013

07:49 AM Bug #3294 (Resolved): Creating users/groups silently fails on read only filesystem
Was setting up VPN and following various guides, which included the creation of a group and a user.
I did this, an...
Phil Sweeney

10/25/2013

09:42 PM Bug #3293 (Resolved): Using timezone Europe/Oslo causes firewall/system logs to be displayed in UTC
When configuring pfSense with timezone 'Europe/Oslo', the time shows correctly in the dashboard. The firewall/system ... Andreas Wintervold
07:15 PM Revision 0c951d98: cleanup interfaces.widget.php
Charlie Marshall
04:24 PM Bug #3290: IPV6 conectivity not restored after cablemodem reset
Steps to reproduce
- Establish IPV6 connectivity on Comcast network.
- Cycle cablemodem power.
- Observe that IP...
Jean Cyr
04:10 PM pfSense Packages Bug #3292 (Resolved): Syslog-ng accidentally gzip's SSL key file + fix
First off, pfSense is awesome, you folks rock.
Second off, there's a hilariously annoying bug with syslog-ng when ...
Zaphod Beeblebrox
01:25 PM Bug #3291 (Resolved): Add new gateway allow name duplication
When adding a new gateway, it doesn't check name collision with disabled interfaces and in the end you have 2 gateway... Renato Botelho
12:42 PM Revision bf755503: Use a more accurate error message, fixes #3282
Renato Botelho
12:41 PM Revision f44ac2e9: Use a more accurate error message, fixes #3282
Renato Botelho
07:40 AM Bug #3282: Gateway error "You can not use a IPv4 Gateway Address on a IPv6 only interface." is not accurate
Applied in changeset commit:bf75550387f2d76a0300253a322f42d6ecdf6460. Renato Botelho
07:40 AM Bug #3282 (Feedback): Gateway error "You can not use a IPv4 Gateway Address on a IPv6 only interface." is not accurate
Applied in changeset commit:f44ac2e9734396efa0653fbed255c28e074ae8dd. Renato Botelho
05:43 AM Bug #3249: DHCP Server/DHCP Relay both say the other is started
Scott Smith wrote:
> i too have found this same problem. My config has been workign for years and I have upgraded to...
Renato Botelho
01:27 AM Bug #3235: Could not open shared memory for read 1000
Tested on a stock 2.1-RELEASE test system. Set Permanent Read/Write, rebooted.
Diagnostics->NanoBSD shows reference ...
Phillip Davis

10/24/2013

10:48 PM Bug #3290: IPV6 conectivity not restored after cablemodem reset
This is a significant issue since Comcast is aggressively rolling out IPV6 support, initiating frequent late-night mo... Jean Cyr
10:41 PM Bug #3290 (Duplicate): IPV6 conectivity not restored after cablemodem reset
Cablemodem reset causes complete loss of IPV6 conectivity. Jean Cyr
09:52 PM Bug #3249: DHCP Server/DHCP Relay both say the other is started
i too have found this same problem. My config has been workign for years and I have upgraded to
2.1-RELEASE (i386...
Scott Smith
08:34 PM Revision 53c5407e: Add source address selection to syslog settings, so it can work more effectively over a VPN. Fixes #355
Jim Pingle
08:33 PM Revision cbe12b8d: Add source address selection to syslog settings, so it can work more effectively over a VPN. Fixes #355
Jim Pingle
08:07 PM Revision b8250344: Fix #3235
. diag_nanobsd.php:
. Since conf_mount_ro() is always being called, always call
conf_mount_rw to keep refcount co...
Renato Botelho
08:01 PM Revision 785158c6: Fix #3235
. diag_nanobsd.php:
. Since conf_mount_ro() is always being called, always call
conf_mount_rw to keep refcount co...
Renato Botelho
03:54 PM Bug #3286: Radvd will not function with IPv6 Prefix delegation other than 64 on WAN
I am too busy to pull the files from a completely stock setup but I was able to pull them from a clean 2.1 install wi... Alex Fox
01:02 PM Bug #3286: Radvd will not function with IPv6 Prefix delegation other than 64 on WAN
Could you share relevant part of config.xml and radvd.conf? Renato Botelho
03:40 PM Bug #355: syslog should not bind on *
Applied in changeset commit:53c5407e646028a003b2765a87dd3316b21a9497. Jim Pingle
03:40 PM Bug #355 (Feedback): syslog should not bind on *
Applied in changeset commit:cbe12b8de3fa374e535d4478ab84a4a2c5f6e725. Jim Pingle
03:10 PM Bug #3235: Could not open shared memory for read 1000
Applied in changeset commit:b8250344f5f02851259ffde6fed8da40ddeaf0af. Renato Botelho
03:10 PM Bug #3235 (Feedback): Could not open shared memory for read 1000
Applied in changeset commit:785158c6c48e4e1842791d3b33d9b0395332991d. Renato Botelho
12:17 PM Feature #3289 (Needs Patch): VPN tunnels configuration displayed in pages
Well, if you have few hundred tunnels the web page gets too long and kind a hard do scroll or use at all on slower PC... Todor K
06:31 AM Bug #3255: OpenVPN client or server on GWG does not failover
My feedback above applies - using the version of rc.openvpn merged into the 2.1 branch. It is a good thing IMHO.
Ign...
Phillip Davis
06:27 AM Bug #3255 (Feedback): OpenVPN client or server on GWG does not failover
didn't realize the merge was pulled, last update I noticed was Phil's 2 days ago, back to Feedback since it's merged. Chris Buechler
04:49 AM Bug #3255 (New): OpenVPN client or server on GWG does not failover
Chris Buechler
03:55 AM Bug #3255: OpenVPN client or server on GWG does not failover
Tested with the 2.1 branch version of rc.openvpn
It successfully writes new servern.conf and clientn.conf files for ...
Phillip Davis
04:55 AM Bug #3278 (Rejected): OpenVPN - Unable to contact daemon, service not running?
config or network issue, not a bug. Chris Buechler
02:11 AM Feature #3288: Support interface macros in Outbound NAT rules
Forgot to attach a screenshot (>.<)' Dmitriy K
02:06 AM Feature #3288 (Resolved): Support interface macros in Outbound NAT rules
There is no automatic aliases for LANs in NAT Outbound. It would very useful when creating rules if there were predef... Dmitriy K
01:58 AM Bug #3287 (Rejected): RRD. No IPv6 data.
There is no IPv6 data reflected in RRD Graphs at all. See attachment. Dmitriy K

10/23/2013

03:19 PM Revision 599d564e: Prepend ipsec_ here as well for better protection
Ermal LUÇI
03:19 PM Revision 37a4fc94: Use the pid of the process for the tmp file also prepend ovpn_ here to make it clear
Ermal LUÇI
03:19 PM Revision c4844c2c: Correct even here the routes from cisco-avpair processing
Ermal LUÇI
03:19 PM Revision 56fbff2e: Use the pid of the process for the tmp file
Ermal LUÇI
03:15 PM Bug #3286: Radvd will not function with IPv6 Prefix delegation other than 64 on WAN
Additional information, if it helps. The LAN and WAN interfaces are as follows:
LAN:em0
WAN:em0_vlan100
Alex Fox
03:12 PM Bug #3286 (Not a Bug): Radvd will not function with IPv6 Prefix delegation other than 64 on WAN
Radvd functions properly when LAN interface is set as tracking to WAN and WAN is set to DHCP6 with a prefix delegatio... Alex Fox
01:58 PM Revision a4e4b560: Make sure pf rule labels never have more than 63 chars. It should fix #3208
Renato Botelho
01:58 PM Revision 9d879385: Make sure pf rule labels never have more than 63 chars. It should fix #3208
Renato Botelho
11:58 AM Revision 5d21bce0: Remove redundant test for OpenVPN resync_needed
Phil Davis
11:58 AM Revision f8804b74: Check for disabled OpenVPN instances in openvpn_resync_if_needed
It is much cleaner if we check first for disabled OpenVPN instances, before diving into all the other checks. Note, t... Phil Davis
11:57 AM Revision 4bf23d32: Fix logic inn detecting if OpenVPN resync needed
Commit https://github.com/pfsense/pfsense/commit/f33dcc5c79c54af7daf91a81cfdd7f489e8cb67c reversed the logic sequence... Phil Davis
11:52 AM Revision a3e232db: Merge pull request #813 from phil-davis/master
Fix logic in detecting if OpenVPN resync needed, fixes #3255 Renato Botelho
09:00 AM Bug #3208: interface name over 17 characters long results in pf errors
Applied in changeset commit:a4e4b5609c8ec28b9e680e8813a110b9cf7aedc7. Renato Botelho
09:00 AM Bug #3208 (Feedback): interface name over 17 characters long results in pf errors
Applied in changeset commit:9d879385019c6640fddf16b639d910e17e67f5d4. Renato Botelho
06:50 AM Bug #3255 (Feedback): OpenVPN client or server on GWG does not failover
Applied in changeset commit:a3e232db7d881d3718884676773c3c4780d7ac7f. Anonymous
06:37 AM Bug #3222: Firewall URL table aliases "Update Freq." has no units
You reported an issue, saying the update freq. unit was missing and it's confuse, this issue was fixed and for this r... Renato Botelho
04:22 AM Bug #3222: Firewall URL table aliases "Update Freq." has no units
Renato Botelho wrote:
> I changed the text to clarify freq. is in days. Abou the other changes you suggested, feel f...
badon _

10/22/2013

10:26 PM pfSense Packages Bug #3285 (Resolved): spamd.log corrupt/truncated
noticed log became truncated or corrupt after a period of time (40 to 90 entries, depending upon entry length)
per...
dasanco dasanco
06:49 PM Revision 10d9290f: Prepend ipsec_ here as well for better protection
Ermal LUÇI
06:46 PM Revision 7b95ffdd: Use the pid of the process for the tmp file also prepend ovpn_ here to make it clear
Ermal LUÇI
06:44 PM Revision 45758be4: Correct even here the routes from cisco-avpair processing
Ermal LUÇI
06:42 PM Revision eb7d43c0: Use the pid of the process for the tmp file
Ermal LUÇI
03:45 PM Bug #3284: dhcpleases cannot identify domains set in DHCP server settings, breaks dnsmasq lookups
I should have added an example of how dhcpleases is invoked:... Steve Kerrison
03:44 PM Bug #3284 (Duplicate): dhcpleases cannot identify domains set in DHCP server settings, breaks dnsmasq lookups
dhcpleases is started with the domain suffix set to the domain of the pfsense installation. DHCP servers on individua... Steve Kerrison
03:45 PM Revision 9f293b1c: Fix cisco-avpair processing, and route processing from avpair replies.
Jim Pingle
03:45 PM Revision a35bae66: Fix cisco-avpair processing, and route processing from avpair replies.
Jim Pingle
02:53 PM Revision aad5eef2: Make the RADIUS settings respect the description of the timeout field. If the timeout value is left blank, use 5 seconds, don't print an error.
Jim Pingle
02:53 PM Revision afdf29d3: Make the RADIUS settings respect the description of the timeout field. If the timeout value is left blank, use 5 seconds, don't print an error.
Jim Pingle
02:42 PM Revision f144493c: Make it more explicit that 'update freq.' unit is days
Renato Botelho
02:40 PM Revision dd8e414e: Remove unused variable
Renato Botelho
02:40 PM Revision 2b6e6fee: Make it more explicit that 'update freq.' unit is days
Renato Botelho
02:39 PM Revision 6ff71781: Remove unused variable
Renato Botelho
01:31 PM Revision edc56e48: Add missing privileges to the list, it fixes #3279
Renato Botelho
01:31 PM Revision c03d4be1: Fix typo and whitespace
Renato Botelho
01:31 PM Revision 9b104557: Fix priv name
Renato Botelho
01:31 PM Revision 69aba859: Add missing privileges to the list, it fixes #3279
Renato Botelho
01:30 PM Revision 93f51e4b: Fix typo and whitespace
Renato Botelho
01:29 PM Revision a8521a63: Fix priv name
Renato Botelho
12:59 PM Revision 6ccefb28: Optimize DHCPv4 lease display online status for static leases. Do not re-parse complete ARP table for each lease, as it can be slow with large ARP tables.
Jim Pingle
12:58 PM Revision 63a1e1ee: Optimize DHCPv4 lease display online status for static leases. Do not re-parse complete ARP table for each lease, as it can be slow with large ARP tables.
Jim Pingle
11:19 AM Bug #3263: status_graph.php IP list is limited to interface subnet
It is code in the "rate" binary that controls which data is actually fed through to the front-end browser code. The "... Phillip Davis
10:47 AM Bug #3263: status_graph.php IP list is limited to interface subnet
Do you mean that if I upgrade that page from the source I can re-enable that feature ? Leonardo Lombardo
10:28 AM Bug #3263: status_graph.php IP list is limited to interface subnet
There was a time during 2.1 development when the whole list of IP addresses with their traffic was sent through to th... Phillip Davis
10:57 AM Bug #3206 (Feedback): Certificate Manager: wrong digest algorithm used when generating a certificate
Renato Botelho
10:37 AM Bug #3255: OpenVPN client or server on GWG does not failover
Is the pull request, or some variation of the code in it, going to get merged some time soon? Phillip Davis
10:27 AM Bug #3222 (Resolved): Firewall URL table aliases "Update Freq." has no units
I changed the text to clarify freq. is in days. Abou the other changes you suggested, feel free to send a pull request. Renato Botelho
08:30 AM Bug #3279: Usermanager: No way to assign permissions to DHCPv6 pages
Applied in changeset commit:edc56e4876ce32e70ca9cf37f0310159e8d59c56. Renato Botelho
08:30 AM Bug #3279 (Feedback): Usermanager: No way to assign permissions to DHCPv6 pages
Applied in changeset commit:69aba8590e46b1704542ecb677f335335e2e9f75. Renato Botelho

10/21/2013

08:09 PM Revision 53523624: Fix #3283, use jQuery to change attributes based on id
Renato Botelho
08:03 PM Revision 521504d1: Set id for select elements created dynamicaly created
Renato Botelho
08:01 PM Revision 6794e407: Fix #3283, use jQuery to change attributes based on id
Renato Botelho
07:58 PM Revision f4100c0e: Set id for select elements created dynamicaly created
Renato Botelho
03:10 PM Bug #3283: Removing an alias entry and then adding a new one results in an entry box with broken formatting
Applied in changeset commit:53523624259f97fb7148d80ae581fa09291e0c55. Renato Botelho
03:00 PM Bug #3283 (Feedback): Removing an alias entry and then adding a new one results in an entry box with broken formatting
Applied in changeset commit:6794e407b0b3b410757c5ac1a58c3264b5a79197. Renato Botelho
12:53 PM Bug #3283 (Resolved): Removing an alias entry and then adding a new one results in an entry box with broken formatting
If you edit an existing alias, click X on a row to remove it, then click + to add a new row, the new row comes up wit... Jim Pingle
02:03 PM Revision dd8722db: Limit CIDR choices for IPv4 on GRE interface, fixes #3277
Renato Botelho
02:02 PM Revision de304598: Limit CIDR choices for IPv4 on GRE interface, fixes #3277
Renato Botelho
12:59 PM Revision e782e8f4: Fix #3259. Save 'packet loss rate' and 'bucket size' for limiter queues
Renato Botelho
12:59 PM Revision dda9c67f: Fix #3259. Save 'packet loss rate' and 'bucket size' for limiter queues
Renato Botelho
11:49 AM Bug #3282 (Resolved): Gateway error "You can not use a IPv4 Gateway Address on a IPv6 only interface." is not accurate
Attempting to add an IPv4 gateway to an interface where no IPv4 address can be located results in the error "You can ... Jim Pingle
11:41 AM Bug #3281 (Resolved): In certain cases, GRE interfaces are missing the "RUNNING" flag at bootup and will not function
Still trying to gather information but this has been directly observed on a customer system.
GRE tunnel configured...
Jim Pingle
11:33 AM Bug #3280 (Resolved): Assigning GRE interface and configuring an IP address removes the IP from the underlying gre interface in the OS
If you assign a GRE interface and set the IPv4 type to Static, and configure an address identical to the address on t... Jim Pingle
10:51 AM Bug #3279 (Resolved): Usermanager: No way to assign permissions to DHCPv6 pages
The pages for "Status: DHCPv6 Leases" and "Services: DHCPv6 Server" do not appear in the list of available pages for ... Graeme Bragg
09:10 AM Bug #3277: GRE Tunnel CIDR drop-down is not limiting choices for IPv4
Applied in changeset commit:de3045982be1dcc509e7e519b63c147ed4e15148. Renato Botelho
09:00 AM Bug #3277 (Feedback): GRE Tunnel CIDR drop-down is not limiting choices for IPv4
Applied in changeset commit:dd8722db1f8da8641eab4831f96fa5b1740c35e9. Renato Botelho
07:31 AM Bug #3277 (Resolved): GRE Tunnel CIDR drop-down is not limiting choices for IPv4
On most screens (including the GIF interface configuration) when an IPv4 address is entered, the CIDR drop-down cuts ... Jim Pingle
08:19 AM Bug #3278 (Rejected): OpenVPN - Unable to contact daemon, service not running?
I have actually seen this issue on previous versions as well. Not too long ago, we switched from ipsec to openvpn, an... Anonymous
08:18 AM Bug #3270 (Resolved): Disabling VLAN interface disables vlan port, enabling the interface doesn't enable the vlan port
The issue was fixed. What you are proposing now is a change of the way pfSense creates the interface. What you alread... Renato Botelho
08:00 AM Bug #3259: firewall_shaper_vinterface.php does NOT save Packet loss rate and Queue size
Applied in changeset commit:e782e8f43f2c09a2f9cf4ab952ee718d71fc9237. Renato Botelho
08:00 AM Bug #3259: firewall_shaper_vinterface.php does NOT save Packet loss rate and Queue size
Applied in changeset commit:dda9c67f7f8fdc3401a0d3c7b885630d128e2fbb. Renato Botelho
01:40 AM Bug #3259: firewall_shaper_vinterface.php does NOT save Packet loss rate and Queue size
Here is a vid cap of the bug
https://www.youtube.com/watch?v=YYjNhLkXjOI
Leonardo Lombardo

10/20/2013

08:11 AM pfSense Packages Bug #3274 (Closed): Unbound 1.4.21_1 install fails
Warren Baker

10/19/2013

05:19 PM Bug #3276 (Rejected): [ATH] Atheros 802.11 PCI card - Support of 802.11n
Hello,
I'm using Pfsense witch an Atheros WIFI card (chip AR9285). I can't use the standard "802.11n " although th...
B Broca
12:41 PM pfSense Packages Bug #3274: Unbound 1.4.21_1 install fails
Warren, thanks a lot for your quick reaction! Your second stab at fixing it worked for me, on both of my appliances b... Uwe Doering
09:20 AM pfSense Packages Bug #3274: Unbound 1.4.21_1 install fails
Applied in changeset commit:c5abc3905311d69e442989712cceb391719f6deb. Warren Baker
09:10 AM pfSense Packages Bug #3274 (Feedback): Unbound 1.4.21_1 install fails
Applied in changeset commit:3c7e7ebe4eeeeca998bb7b323322eb70ccd4f281. Warren Baker
07:31 AM pfSense Packages Bug #3274: Unbound 1.4.21_1 install fails
I attached two files that show what I mean. In the install log you can see that pfSense 2.0.2-RELEASE-amd64, installe... Uwe Doering
06:56 AM pfSense Packages Bug #3274: Unbound 1.4.21_1 install fails
I am able to install 1.4.21_1 but the Unbound binary is still 1.4.20. Justin Irwin
11:22 AM Bug #3273: Unable to delete VLAN
https://redmine.pfsense.org/issues/3275 Todor K
11:13 AM Bug #3273: Unable to delete VLAN
Yes please Renato Botelho
09:00 AM Bug #3273: Unable to delete VLAN
Should I raise separate issue for what I've mentioned in my previous update? Todor K
08:54 AM Bug #3273 (Resolved): Unable to delete VLAN
Renato Botelho
12:09 AM Bug #3273: Unable to delete VLAN
Resolved.
Noticed another issue on the same subject:
1. I have enabled and working VLAN interface.
2. Skipping s...
Todor K
11:21 AM Bug #3275 (Closed): Unable to delete VLAN interface
Having VLAN interface enabled and in running state I go to "Interfaces: Assign network ports" and delete the interfac... Todor K

10/18/2013

08:43 PM Revision ea838318: Fix #3273
- When you disable a interface, it destroys vlan interface from system.
Do not report error when interface doesn't ex...
Renato Botelho
08:41 PM Revision 36b7f215: Fix #3273
- When you disable a interface, it destroys vlan interface from system.
Do not report error when interface doesn't ex...
Renato Botelho
08:41 PM pfSense Packages Bug #3274 (Closed): Unbound 1.4.21_1 install fails
According to control files "pkg_config.8.xml" and "pkg_config.8.xml.amd64" the package version of Unbound has been up... Uwe Doering
08:32 PM Revision 40a8f669: Prevent a possible division by zero. it fixes #3212
Renato Botelho
08:32 PM Revision 488e8c81: Prevent a possible division by zero. it fixes #3212
Renato Botelho
05:26 PM Bug #3252: Diagnostics-Tables inconsistency
You have an email. Christian Borchert
05:18 PM Bug #3252: Diagnostics-Tables inconsistency
May I take a look at your /tmp/rules.debug? Renato Botelho
04:45 PM Bug #3252: Diagnostics-Tables inconsistency
Renato Botelho wrote:
> Do you have any firewall rule using snort_ips or snort_wl_hosts? When the table is not used ...
Christian Borchert
03:14 PM Bug #3252: Diagnostics-Tables inconsistency
Do you have any firewall rule using snort_ips or snort_wl_hosts? When the table is not used by any pf rule, it's not ... Renato Botelho
03:50 PM Bug #3273: Unable to delete VLAN
Applied in changeset commit:ea838318c0837b532b7ddf5dbc6881fd9f27cb1a. Renato Botelho
03:50 PM Bug #3273 (Feedback): Unable to delete VLAN
Applied in changeset commit:36b7f215449c027992858f324917a6ad4611e73b. Renato Botelho
03:32 PM Bug #3273 (Resolved): Unable to delete VLAN
I'm following the steps to create an interface, but int reverse.
1. Disable interface at Interfaces.
2. Delete the ...
Todor K
03:30 PM pfSense Packages Bug #3248 (Feedback): NUT package fails to write config to upsd.users
Applied in changeset commit:d199db0bc5bf99c77ec29d01edb646b7713cc9a8. Renato Botelho
03:30 PM Bug #3212: PHP Warning: Division by zero in /etc/inc/captiveportal.inc on line 729
Applied in changeset commit:40a8f669c2dbdc70a53009b97597b1982a5f5d65. Renato Botelho
03:30 PM Bug #3212 (Feedback): PHP Warning: Division by zero in /etc/inc/captiveportal.inc on line 729
Applied in changeset commit:488e8c81adf1b9c11320ef91de7812a7332b2228. Renato Botelho
03:19 PM Bug #3270: Disabling VLAN interface disables vlan port, enabling the interface doesn't enable the vlan port
OS interfaces are still created and up in ifconfig after the VLAN ports arecreated at Interfaces: VLAN.
Assigning an...
Todor K
08:40 AM Bug #3270: Disabling VLAN interface disables vlan port, enabling the interface doesn't enable the vlan port
Applied in changeset commit:ea1084476533bf9452d9f6f1012787c5c73e3939. Renato Botelho
08:40 AM Bug #3270 (Feedback): Disabling VLAN interface disables vlan port, enabling the interface doesn't enable the vlan port
Applied in changeset commit:bae42aaf13bd680f67a9b4f1a4325b03f80f86b4. Renato Botelho
02:38 PM Revision 6666ef48: Actually there is no reason to set a variable just to use once
Renato Botelho
02:38 PM Revision 06896c6a: Actually there is no reason to set a variable just to use once
Renato Botelho
02:31 PM Revision 2db5f9c2: Fix #3242 and some code cleanup:
- Only explode '/' and set address_subnet when address is a subnet, it
fixes issue reported at #3242
- While I'm he...
Renato Botelho
02:26 PM Revision 4e8a79a8: Fix #3242 and some code cleanup:
- Only explode '/' and set address_subnet when address is a subnet, it
fixes issue reported at #3242
- While I'm he...
Renato Botelho
01:40 PM Revision ea108447: Make sure vlan interface exist when it's being configured, it fixes #3270
Renato Botelho
01:40 PM Revision bae42aaf: Make sure vlan interface exist when it's being configured, it fixes #3270
Renato Botelho
10:37 AM Bug #3271: NAT UDP to port range creates rdr for all interfaces, and no nat rule.
Upon examination, I see that on the nat reflection 'disable' doesn't emit the rdr on the other interfaces, while 'pur... Harry Coin
10:22 AM Bug #3271: NAT UDP to port range creates rdr for all interfaces, and no nat rule.
Chris, check again. When 'pure nat' is specified nevertheless the rdr rule is emitted on the other interfaces.
Harry Coin
10:21 AM Bug #3271: NAT UDP to port range creates rdr for all interfaces, and no nat rule.
And, looking it to it even further, even though 'pure nat' was asked for, rules.debug shows:
# NAT Inbound Redirec...
Harry Coin
09:30 AM Bug #3242: editing alias url table doesnt show full link
Applied in changeset commit:2db5f9c23c7158b61f839d1679bde3ad3f135bdf. Renato Botelho
09:30 AM Bug #3242: editing alias url table doesnt show full link
Applied in changeset commit:4e8a79a83043c0880651d749ac67528615a03d90. Renato Botelho
09:28 AM Bug #3242: editing alias url table doesnt show full link
I got it, the problem only happens because your URL doesn't have protocol. I pushed a fix. Renato Botelho
06:43 AM Bug #3242: editing alias url table doesnt show full link
sent Bipin Chandra
06:31 AM Bug #3242: editing alias url table doesnt show full link
Bipin Chandra wrote:
> shall i send u my config file if that may show something?
yes please, send it to renato@pf...
Renato Botelho
12:15 AM Bug #3242: editing alias url table doesnt show full link
shall i send u my config file if that may show something? Bipin Chandra
05:58 AM pfSense Packages Feature #3272 (Resolved): pfBlocker: Specific ports to block.
It would be great if there was a possibility to specify port/port range which I want to block not all ports.
For e...
Dmitriy K

10/17/2013

11:08 PM Bug #3271 (Rejected): NAT UDP to port range creates rdr for all interfaces, and no nat rule.
that's because you have reflection on, that's how reflection works.
Chris Buechler
12:28 PM Bug #3271: NAT UDP to port range creates rdr for all interfaces, and no nat rule.
Looking into it further, I notice that the interface specified on the 'port forward' gui is pretty much ignored. The... Harry Coin
10:29 AM Bug #3271: NAT UDP to port range creates rdr for all interfaces, and no nat rule.
The same happens when an individual udp port is specified and not a range. rdr rules are created for every interface... Harry Coin
04:32 PM Bug #3259: firewall_shaper_vinterface.php does NOT save Packet loss rate and Queue size
I could not replicate this on any of my test systems Renato Botelho
04:31 PM Bug #3242: editing alias url table doesnt show full link
I couldn't replicate the issue on any of my test systems. Renato Botelho
02:11 PM Bug #3180 (Closed): SMTP notifications not work with 587 port and SSL/TLS
Warren Baker
03:50 AM Bug #3180: SMTP notifications not work with 587 port and SSL/TLS
Applied in changeset commit:dd33fd4e8b3fb66f49ae8337823264ab0d13504c. Warren Baker
02:05 PM Bug #3269 (Rejected): Problem System: Certificate Authority Manager
MD5 is harmful and should be avoided. Renato Botelho
04:10 AM Bug #3269: Problem System: Certificate Authority Manager
My comunication is only an advice. Insert an option in pfSense don't mean with pfSense will become insicure, because ... Luca Morri
03:55 AM Bug #3269: Problem System: Certificate Authority Manager
Until?! :-O If they've not noticed they are using insecure crap in 5 years, you'd better find a viable vendor (and di... Doktor Notor
08:43 AM Revision dd33fd4e: Split SSL/TLS into separate checkboxes so that plaintext connections can be made secured by using STARTTLS. Support for SMTPS connections should probably be done away with in future. Fixes #3180
Warren Baker

10/16/2013

08:58 PM Bug #3271 (Rejected): NAT UDP to port range creates rdr for all interfaces, and no nat rule.
The nat rule asking for a port forward on one interface (em0/WAN):
INET1MC UDP * * 97.64.213.58 15000 - 15400 ...
Harry Coin
12:44 PM Bug #3270 (Resolved): Disabling VLAN interface disables vlan port, enabling the interface doesn't enable the vlan port
Describing the steps to reproduce the effect I've noticed:
1. Interfaces: VLAN > Create VLAN on interface
2. Chec...
Todor K
12:18 PM Revision 78b0e51e: Fix #3268 - avoid pf table names conflict:
. Create a list of reserved table names for the hardcoded ones
. Use this list to validate aliases and load balance p...
Renato Botelho
12:18 PM Revision c48fdaa4: Fix #3268 - avoid pf table names conflict:
. Create a list of reserved table names for the hardcoded ones
. Use this list to validate aliases and load balance p...
Renato Botelho
11:48 AM Bug #3269: Problem System: Certificate Authority Manager
Yes, MD5 is insicure, but untill yealink don't update your ip-phone for SHA support is impossible use this phone with... Luca Morri
11:36 AM Bug #3269: Problem System: Certificate Authority Manager
Offering stuff known to be insecure since 2008 at least on not an option. Ditch the crappy HW. http://www.win.tue.nl/... Doktor Notor
05:13 AM Bug #3269 (Rejected): Problem System: Certificate Authority Manager
From pfSense 2.0.1 to 2.1 when you create a certificate, (in pfSense 2.1) you must select an algorithm (Sha1 , sha256... Luca Morri
07:20 AM Bug #3268: Load balancer needs input validation to prohibit reserved table names
Applied in changeset commit:78b0e51e9a135804bfea307ea30c25fe16473da1. Renato Botelho
07:20 AM Bug #3268 (Feedback): Load balancer needs input validation to prohibit reserved table names
Applied in changeset commit:c48fdaa40effe9edc8bb4fb933e124a93cb24a0d. Renato Botelho
05:16 AM Bug #742: apinger doesn't recover opt wan when connection returns.
i have a similar issue but in some ways its different, my isp sometimes blocks all traffic to internet and only gives... Bipin Chandra
02:53 AM Bug #742: apinger doesn't recover opt wan when connection returns.
Same issue for us on pfsense 2.1 Release:
if opt3 goes down, it doesn't recover and the "last check" time on /status...
Lionel Lejeune

10/15/2013

10:49 PM Bug #3257: IP Alias on CARP IP doesn't work where IP alias above CARP parent in list
*How to reproduce this:*
I ran into this bug when I modified a setup pulled in from PFSense 2.0.x that looked like t...
R. S.
10:06 PM pfSense Packages Bug #999: vhosts does not show up as started
I can confirm this is still an issue with the package. It seems to work outside the fact there is no way to know if ... Robert Middleswarth
08:09 PM Bug #3045: NTPD crash / doesn't come up
also line
driftfile /var/db/ntpd.drift
seems to be involved.
those really seems to be directory permission is...
Fabio Giudici
07:46 PM Bug #3045: NTPD crash / doesn't come up
Problem seems to be related to line:
statsdir /var/log/ntp
in /var/etc/ntp.conf.
After commenting this line, n...
Fabio Giudici
06:52 PM Bug #3045: NTPD crash / doesn't come up
Issue just presented to me as well, on both members of cluster (pfSense 2.1 stable), Server SunFire X3-2...
I can at...
Fabio Giudici
01:36 PM Bug #3045: NTPD crash / doesn't come up
It is also incredibly inconsistent. If I wait an hour and try to start, perhaps ntpd will start without issue and run. Steve Jacobs
01:36 PM Bug #3045: NTPD crash / doesn't come up
Seeing this exact same issue on 2.1 Release i386 and amd64. I have attached my ntpd.core from an i386 install here. T... Steve Jacobs
04:22 PM Bug #3268 (Resolved): Load balancer needs input validation to prohibit reserved table names
Reserved table names aren't prohibited from being entered as a table name in load_balancer_pool_edit.php. At least <s... Chris Buechler
01:30 PM Revision c858a035: Merge pull request #817 from stephanel/master
Added OVH DynHOST in dynamic DNS services Renato Botelho
01:10 PM Revision 09dfec24: Merge pull request #819 from CharlieMarshall/responsive
make dashboard responsive (theme pfsense_ng_fs) Renato Botelho
07:14 AM Bug #3255 (New): OpenVPN client or server on GWG does not failover
Reopen it since pull request was not merged yet Renato Botelho
02:25 AM Bug #3255 (Resolved): OpenVPN client or server on GWG does not failover
thanks! Chris Buechler

10/14/2013

07:33 PM Revision b18a99d3: some tidying up
Charlie Marshall
07:27 PM Revision e5e0fd39: make dashboard responsive
Charlie Marshall
06:54 PM Revision 4a913451: Add Captive Portal Zones privileges definition. Fix #3216
Renato Botelho
06:53 PM Revision 8deaf333: Add Captive Portal Zones privileges definition. Fix #3216
Renato Botelho
02:00 PM Bug #3216: PFSense 2.1 - Captive Portal Zone - is not avaible in user effective privileges
Applied in changeset commit:4a913451bba01ac65dcaedf31e24fcd938bbe0a2. Renato Botelho
02:00 PM Bug #3216 (Feedback): PFSense 2.1 - Captive Portal Zone - is not avaible in user effective privileges
Applied in changeset commit:8deaf333f25dc18d461d7f2b0e61b1b2c1a64ace. Renato Botelho
01:28 PM Bug #3256: dnsmasq replying with incorrect address
Is the issue still happening? Renato Botelho

10/13/2013

08:01 PM Bug #3249: DHCP Server/DHCP Relay both say the other is started
I found that config from before. I've attached it. Hans Kokx
03:30 PM Bug #3267 (Closed): Can't skip wizard by clicking the pfSense logo, can't finish it normally either
I recently set up 3 new pfSense installs (all on 2.1 final), and on all 3 I had a problem with the Setup wizard - bot... Jernej Simončič
03:10 PM pfSense Packages Bug #3266: Synchronize OpenVPN + Site-Site = Fail
And in the category of 'somewhat evil hack that works':
If you have a master/backup pfsense setup AND
you have mo...
Harry Coin
02:29 PM pfSense Packages Bug #3266: Synchronize OpenVPN + Site-Site = Fail
Jim,
Doing as you suggest does solve the problem for the site-site server side in a Master/Backup HA situation wi...
Harry Coin
01:11 PM pfSense Packages Bug #3266: Synchronize OpenVPN + Site-Site = Fail
Jim, welcome news indeed. Please then change
"Interface : Whichever interface you want the server to use for incom...
Harry Coin
01:02 PM pfSense Packages Bug #3266 (Rejected): Synchronize OpenVPN + Site-Site = Fail
This works fine on 2.0.2+ if you select a CARP VIP as the "Interface" for the VPN, the system automatically stops the... Jim Pingle
12:11 PM pfSense Packages Bug #3266: Synchronize OpenVPN + Site-Site = Fail
Update: Should have written: the 'Disable this server' and 'Disable this client' button should be forced 'ON' when ... Harry Coin
12:08 PM pfSense Packages Bug #3266 (Rejected): Synchronize OpenVPN + Site-Site = Fail
The 'Synchronize OpenVPN' HA checkbox prevents site-site OpenVPN from working in primary/backup setups. Two enabled ... Harry Coin

10/12/2013

10:09 AM Bug #3242: editing alias url table doesnt show full link
its just a GUI bug i guess so can be fixed easily, the bug is in the edit page, it seems to strip the portion after / Bipin Chandra
10:06 AM Bug #3242: editing alias url table doesnt show full link
yes i have the 2.1 release in 2 alix boxes and 2 full installs and its same on all, happens all the time Bipin Chandra

10/11/2013

06:13 PM Feature #3265 (Closed): PATCH: auto-scale ramdisks on embedded platform based on RAM size
per http://lists.pfsense.org/pipermail/list/2013-October/004934.html
see attached patch
(Yeah, I'm just guessing...
Adam Thompson
01:59 PM Revision babc58d3: Allow special chars to be used on IPSec mobile login banner. Fixes #3247
Renato Botelho
01:59 PM Revision b4a62651: Allow special chars to be used on IPSec mobile login banner. Fixes #3247
Renato Botelho
12:20 PM Revision a518b337: Set default value to radius_protocol during upgrade, it should fix #3226
Renato Botelho
12:19 PM Revision 2d72659a: Set default value to radius_protocol during upgrade, it should fix #3226
Renato Botelho
11:25 AM Revision 0f0f7b2c: Fix 'Packet loss rate' and 'Bucket Size' range checking
Renato Botelho
11:25 AM Revision 7e7a65b0: Fix 'Packet loss rate' and 'Bucket Size' range checking
Renato Botelho
09:20 AM Revision feb2e013: Remove redundant test for OpenVPN resync_needed
Phil Davis
09:00 AM Bug #3247: ipsec mobile clients login banner cannot contain certain chars
Applied in changeset commit:babc58d30843cb388559178b60aecd7a9a64bcca. Renato Botelho
09:00 AM Bug #3247 (Feedback): ipsec mobile clients login banner cannot contain certain chars
Applied in changeset commit:b4a62651f8bf6e67e812b904f98c90c481a0d4c9. Renato Botelho
08:35 AM Bug #3242 (Feedback): editing alias url table doesnt show full link
I added and edited URL Table aliases lots of times and couldn't reproduce it. Is it happening all the time? Are you r... Renato Botelho
07:20 AM Bug #3226: Captive Portal Radius Error
Applied in changeset commit:a518b337a94bc1b5415599899d7ad01bb6a1d666. Renato Botelho
07:20 AM Bug #3226 (Feedback): Captive Portal Radius Error
Applied in changeset commit:2d72659aec4d153ec6401ccae2a90153e45accc6. Renato Botelho
06:39 AM Bug #3259: firewall_shaper_vinterface.php does NOT save Packet loss rate and Queue size
Confirmed. My appliance tells
2.1-RELEASE (i386)
built on Wed Sep 11 18:16:50 EDT 2013
FreeBSD 8.3-RELEASE-p1...
Leonardo Lombardo
06:28 AM Bug #3259 (Feedback): firewall_shaper_vinterface.php does NOT save Packet loss rate and Queue size
Are you running 2.1-RELEASE? I double checked 2 different systems and it's working as expected. Renato Botelho
04:28 AM Revision b35bcd45: added favicon to logged in pages
Jared Dillard
04:26 AM Bug #3264 (Rejected): Double traffic on vlan interfaces "out" side
Tested on amd64 arch version 2.1 with vlans over aggregated and single interfaces. The stats show that the traffic ov... Stanislav Yanchev
04:11 AM Revision e97b547e: Merge pull request #818 from jdillard/master
added favicon to logged in pages Jim Pingle
02:46 AM Revision cfa352c6: added favicon to logged in pages
Jared Dillard

10/10/2013

04:59 PM Revision aa0753e3: Needs parens
Jim Pingle
04:57 PM Revision 9f212aea: Needs parens
Jim Pingle
04:50 PM Revision 151f5cb7: Remove newsyslog cron job on upgrade, if present.
Jim Pingle
04:49 PM Revision 12f7e3d4: Add upgrade code to change the DHCP next-server value to nextserver since it was renamed sometime in 2.1 but upgrade code didn't follow.
Jim Pingle
04:47 PM Revision a3cc1409: Add upgrade code to change the DHCP next-server value to nextserver since it was renamed sometime in 2.1 but upgrade code didn't follow. Also shuffle the upgrade code blocks a bit since we need these on 2.1.x and nobody should be on 2.2 yet, so the impact should be minimal to renumber the one bit specific to 2.2.
Jim Pingle
10:52 AM Bug #3263 (Duplicate): status_graph.php IP list is limited to interface subnet
In the page status_graph.php the IPs in the list are only from the interface subnet. This does not work when that int... Leonardo Lombardo
09:14 AM Bug #3262 (Rejected): BUG in rules application when setting a group gateway
Duplicate of #3173, already fixed on 2.1. Jim Pingle
07:26 AM Bug #3262 (Rejected): BUG in rules application when setting a group gateway
Dear,
I will try to explain the problem.
First , we have 2 WAN :
* WAN1 (PPOE)
* WAN2
We have configure a ...
Damien L
04:57 AM Feature #3261 (Needs Patch): RRD Graph Change
Would it be possible to have the feature to allow a change from the 95th Percentile to whatever value we like. I.E 90... Craig Duff

10/09/2013

07:01 PM Revision a4a56eb0: Added OVH DynHOST in dynamic DNS services
Stéphane
02:03 PM Revision 6f4a2864: Perform a much more accurate comparison between two certificates to determine if they are identical when checking their revocation status. Fixes #3237
Jim Pingle
02:02 PM Revision 04761344: Perform a much more accurate comparison between two certificates to determine if they are identical when checking their revocation status. Fixes #3237
Jim Pingle
12:54 PM Revision 090b9a4a: Remove newsyslog cron job on upgrade, if present.
Jim Pingle
12:51 PM Revision fda96df0: We do not use nor include newsyslog, so remove the cron job.
Jim Pingle
12:51 PM Revision f324698c: We do not use nor include newsyslog, so remove the cron job.
Jim Pingle
12:50 PM Revision 0b5636fc: Remove this check, the value can be 0 here if the target is the first item in the array.
Jim Pingle
12:48 PM Revision 506ff948: Remove this check, the value can be 0 here if the target is the first item in the array.
Jim Pingle
10:14 AM Bug #3118: Main menu drop-down closes before selection in Chrome on Linux Mint 15
I'm having this issue as well. Ubuntu 12.04x64 with Chrome 29.0.1547.76 Corey Boyle
09:10 AM Bug #3237: "Revoked" status is incorrect for certificates that are different but share the same descriptive name.
Applied in changeset commit:6f4a2864ad0e83f152a0cdc9c157f5d95aa8a9c7. Jim Pingle
09:10 AM Bug #3237 (Feedback): "Revoked" status is incorrect for certificates that are different but share the same descriptive name.
Applied in changeset commit:0476134494c5e6079b7a98d53732b9448bc69435. Jim Pingle
09:09 AM Feature #3260 (Resolved): Add ability to see a summary list of IP addresses for currently connected mobile IPsec clients
When mobile IPSec clients connect they are given a virtual IP from the Virtual Address Pool. On the IPSec status page... Andreas Wintervold
06:05 AM Bug #3259 (Resolved): firewall_shaper_vinterface.php does NOT save Packet loss rate and Queue size
The form on firewall_shaper_vinterface.php ignores the values entered in the fields:
Packet loss rate
Queue size
...
Leonardo Lombardo
03:40 AM Feature #3258 (Resolved): Allow multiple certificates to be revoked in a single step
If you have to revoke more than once certificate, the process is pretty cumbersome because you have to edit the CRL a... Till Jaeger

10/08/2013

07:58 PM Bug #3257: IP Alias on CARP IP doesn't work where IP alias above CARP parent in list
I have tested now again and saw that problem resource is if CARP Ip is defined after IP Alias (order priority problem... Atıf CEYLAN
06:31 PM Bug #3257: IP Alias on CARP IP doesn't work where IP alias above CARP parent in list
Sorry, affected version is 2.1 Atıf CEYLAN
06:29 PM Bug #3257 (Resolved): IP Alias on CARP IP doesn't work where IP alias above CARP parent in list
I have 300 over IPs in 3 different subnets. I have added 3 different CARP IPs from each subnet. Other IPs on them as ... Atıf CEYLAN
05:31 PM Bug #3256: dnsmasq replying with incorrect address
Seems to go back to normal/proper responses after an unknown amount of time as well. Chris Craft
05:21 PM Bug #3256: dnsmasq replying with incorrect address
Not the iphone... Chris Craft
05:15 PM Bug #3256 (Rejected): dnsmasq replying with incorrect address
Using nslookup from multiple windows 7 clients, got a reply of another DHCP client's address for multiple queries of ... Chris Craft
12:08 PM Bug #3176: Hosts file corrupted when using "Register DHCP leases in DNS forwarder"
I just got bitten by this as well, running 2.1-RELEASE (i386). See attached.
I also can verify that turning off the...
Adam Thompson
03:13 AM pfSense Packages Bug #3056: Unbound not getting IPv6 host overrides
David Wood wrote:
> At this moment, with the last commit being 4dfc14961006b0702d1c5e18190b3fcd64dd4d76 , the typo I...
Warren Baker
03:10 AM pfSense Packages Bug #3056: Unbound not getting IPv6 host overrides
Applied in changeset commit:ec6f62c13304169f44ee47d21a09373cf6f4fd22. Warren Baker
02:45 AM Bug #3255: OpenVPN client or server on GWG does not failover
This is fixed by https://github.com/pfsense/pfsense/pull/813 Phillip Davis
02:44 AM Bug #3255 (Resolved): OpenVPN client or server on GWG does not failover
If I have a GWG "OpenVPNGWG" with WAN1=tier1, WAN2=tier2 then the initial OpenVPN client or server on "OpenVPNGWG" co... Phillip Davis

10/07/2013

08:56 PM Bug #3240 (Resolved): CoDel not applied on non-priq queue types
thanks Chris Buechler
06:26 AM Bug #3240: CoDel not applied on non-priq queue types
Fix confirmed working. Richard Connon
06:21 AM Bug #3240 (Feedback): CoDel not applied on non-priq queue types
Pull request was already merged Renato Botelho
08:55 PM Bug #3245 (Resolved): Traffic graphs widget has old interface names
Chris Buechler
10:14 AM Bug #3245: Traffic graphs widget has old interface names
Fixed for me. Phillip Davis
06:29 AM Bug #3245 (Feedback): Traffic graphs widget has old interface names
Pull request was merged, please confirm it fixed the issue. Renato Botelho
05:38 PM Revision e390d664: Replace pfSense with the rebrand
Warren Baker
05:36 PM Revision 7add9de0: fix text - add space between sentences. This got lost in another commit
Warren Baker
05:35 PM Revision 2b4f2f23: Replace pfSense with the rebrand
Warren Baker
05:35 PM Revision 2df0e712: Replace pfSense with the rebrand
Warren Baker
04:21 PM pfSense Packages Bug #3056: Unbound not getting IPv6 host overrides
At this moment, with the last commit being 4dfc14961006b0702d1c5e18190b3fcd64dd4d76 , the typo I mentioned is in line... David Wood
03:15 PM Feature #3254 (Closed): Add DNS controls for radvd on tracking interfaces
Radvd only distributes the local interface link-local address of the tracking interface as a DNS server when the DNS ... Alex Fox
11:30 AM Bug #3216: PFSense 2.1 - Captive Portal Zone - is not avaible in user effective privileges
I was able to work around this.
Add the lines below to /etc/inc/priv.defs.inc (Toward the end but anywhere as long...
Joshua Shoemaker
07:17 AM Bug #3250: problems with ixgbe driver in pfsense 2.1 release
Hi,
thanks for update.
any due date for 2.1.1 release?
Zeev Zalessky
06:27 AM pfSense Packages Bug #3248: NUT package fails to write config to upsd.users
Please send the patch as a pull request on github. Renato Botelho

10/05/2013

01:11 PM Bug #3205: Partial system freeze when disconnecting USB 3G stick
Same here. Huawei E1820. 2.1 RELEASE on physical VIA EPIA and VirtualBox.
First time configured without problems, t...
Michal Sawa

10/04/2013

03:34 PM Bug #3252 (Rejected): Diagnostics-Tables inconsistency
See attached files.
!pfsense_aliases.png!
!pfsense_tables.png!
Diagnostics-Tables does not return consistent r...
Christian Borchert
12:40 PM Revision b93fd19b: Now that doc.pfsense.org does https and redirects http to https, we may as well send the help links to the https destinations.
Jim Pingle
12:39 PM Revision 2dd9b120: Now that doc.pfsense.org does https and redirects http to https, we may as well send the help links to the https destinations.
Jim Pingle
11:41 AM Revision 9e3cc25b: use (self) instead of any for web lockout
Chris Buechler
11:40 AM Revision c3b9bcb2: use (self) instead of any for web lockout
Chris Buechler
11:08 AM Bug #3249: DHCP Server/DHCP Relay both say the other is started
I pulled the dhcrelay section out of the config and restored from it. That seems to have done the trick. Normally, ... Hans Kokx
08:16 AM Bug #3249: DHCP Server/DHCP Relay both say the other is started
Nothing in the upgrade that would have enabled it if it weren't already enabled. We'd need to see a copy of the pre-u... Jim Pingle
08:10 AM Bug #3249: DHCP Server/DHCP Relay both say the other is started
I can't explain it, either. I'm not sure if I could duplicate it (and I'm hesitant to restore the config remotely, u... Hans Kokx
08:05 AM Bug #3249: DHCP Server/DHCP Relay both say the other is started
In your config somehow you managed to get both of them enabled. The DHCP settings for the LAN show it enabled, and th... Jim Pingle
07:50 AM Bug #3249: DHCP Server/DHCP Relay both say the other is started
Scrubbed config attached.
Sidenote: wasn't particularly thrilled to see my password stored in plaintext all over t...
Hans Kokx
07:36 AM Bug #3249: DHCP Server/DHCP Relay both say the other is started
The scrubbed backup would definitely help. The only way I can see this happening is if there was an interface at one ... Jim Pingle
07:21 AM Bug #3249: DHCP Server/DHCP Relay both say the other is started
I've never manually edited the config. For all intents and purposes, this is a relatively clean and simple config --... Hans Kokx
01:37 AM Bug #3249 (Feedback): DHCP Server/DHCP Relay both say the other is started
short of disabling the input validation or manually editing the config, that should be impossible. Do you have specif... Chris Buechler
07:31 AM Bug #3251 (Closed): Some help page links are missing characters
Fixed the web server redirect rule (needed [QSA,NE]) and they work again. Jim Pingle
07:25 AM Bug #3251: Some help page links are missing characters
OK it isn't a PHP/pfSense problems, it's the web server's http->https redirect dropping them. If I change the links t... Jim Pingle
07:05 AM Bug #3251 (Closed): Some help page links are missing characters
Some help page links are dropping certain characters. Specifically, in help.php, the link should go here:
https://...
Jim Pingle
06:47 AM Revision 7825f71e: use (self) rather than any as the destination for the lockout rules
Chris Buechler
06:46 AM Revision b762e3dc: use (self) rather than any as the destination for the lockout rules
Chris Buechler
06:37 AM Bug #3246: automatic lockout rule too general and cannot be unarmed
both have been changed Chris Buechler
06:29 AM Bug #3246: automatic lockout rule too general and cannot be unarmed
Afraid I don't understand what's been committed. This bug is about HTTPS, you changed this for SSH? What's the point ... Doktor Notor
02:00 AM Bug #3246: automatic lockout rule too general and cannot be unarmed
Thanks, that resolves my main concern. Aris Adamantiadis
01:45 AM Bug #3246 (Resolved): automatic lockout rule too general and cannot be unarmed
changed destination to (self) rather than any. The rest of the complaints aren't true or aren't valid. It's logged in... Chris Buechler

10/03/2013

02:37 PM Bug #3250 (Closed): problems with ixgbe driver in pfsense 2.1 release
Hello,
from release of 2.1 we have huge problems with intel 10Gb cards. as you can see in following forum topic (h...
Zeev Zalessky
02:10 PM Revision 619753ee: Fix display of pools in the LB status widget and on the LB Virtual Server status.
Jim Pingle
02:10 PM Revision c1e48e9b: Fix display of pools in the LB status widget and on the LB Virtual Server status.
Jim Pingle
10:10 AM Bug #3249 (Closed): DHCP Server/DHCP Relay both say the other is started
Under Services > DHCP Server, I get the following message:
> The DHCP Server can only be enabled on interfaces con...
Hans Kokx

10/02/2013

02:11 PM pfSense Packages Bug #3248 (Resolved): NUT package fails to write config to upsd.users
The configuration driver for the NUT package is testing obsolete variable "allowaddr" in order to determine if it sho... Denny Page
12:15 PM Revision 58ba4513: Merge pull request #815 from marcelloc/patch-1
fix pkg_edit.php to show interface description instead of interface name Ermal Luçi
11:41 AM Revision f82cbe49: fix pkg_edit.php to show interface description instead of interface name
Marcello Silva Coutinho
05:03 AM Revision 634054cc: Check for disabled OpenVPN instances in openvpn_resync_if_needed
It is much cleaner if we check first for disabled OpenVPN instances, before diving into all the other checks. Note, t... Phil Davis

10/01/2013

01:40 PM Bug #3246: automatic lockout rule too general and cannot be unarmed
Is that a joke ? The lockout system is bugged (I explained how) and the antilockout cannot be used to reset that lock... Aris Adamantiadis
12:47 PM Bug #3246 (Rejected): automatic lockout rule too general and cannot be unarmed
WHat do you expect it to do, its protecting the system!
BTW, it has an antilockout by default as well.
Ermal Luçi
 

Also available in: Atom