Project

General

Profile

Activity

From 11/27/2013 to 12/26/2013

12/26/2013

09:52 PM Revision 2aff8089: Fix wording/spacing
Jim Pingle
09:41 PM Revision 5c427ce7: Add support for local (push route) and remote (iroute) network definitions in an OpenVPN client-specific override entry.
Jim Pingle
09:11 PM Revision 9bc68540: Make this box a little narrow so it doesn't force the descriptions to wrap.
Jim Pingle
08:54 PM Revision 141254eb: Use empty even here
Ermal LUÇI
08:47 PM Revision 7cbfc265: Add a "status" subcommand to the svc php shell script.
Jim Pingle
08:28 PM Revision fed1b372: Check if there is a value before trying to do any operation
Ermal LUÇI
08:27 PM Revision c7a3356e: Add a setting to allow the user to specify the clog file size so more (or less) entries may be kept in the raw logs. Retain previous default size values if the user has not specified a preferred size. Files can only be resized when initialized, so provide a "Reset All Logs" button as well to force clear all logs and set them up at the new size.
Jim Pingle
07:27 PM Revision 7b03748b: Correct the php-fpm configuration generation
Ermal LUÇI
06:10 PM Revision 3f248cb6: Fix #3354, savecore -C only expects dumpdev
Renato Botelho
05:53 PM Revision e1ebe9e2: Add an option for users to be able to adjust how many configuration revisions are kept in the local backup cache.
Jim Pingle
04:07 PM Revision bfe615ee: Show backup file size in config history.
Jim Pingle
03:51 PM Revision 57671f81: Fix syntax, unbreak dashboard
Jim Pingle
03:45 PM Bug #3321: IPSEC failure on modem reset, automatic reconnection is broken, must manually restart racoon service
Same problem here with pfsense 2.1 and cisco router with IOS 12.4(15)T15 as remote endpoint.
IPSEC tunnel doesn't co...
Francesco Lotti
12:11 PM Bug #3353 (New): Changing IPv6 from None to DHCP6 or vice-versa causes a panic+reboot
This still happens on a current build. Jim Pingle
12:10 PM Bug #3354 (Feedback): Savecore error during bootup
Applied in changeset commit:3f248cb65a25189f7cff8f6ad4321998caaab073. Renato Botelho

12/24/2013

05:27 PM Revision fd34b8b5: Fix syntax
Renato Botelho
04:28 PM Revision 9e63dca9: Use intval even here
Ermal LUÇI
04:25 PM Revision b0ae5213: Use intval here to not trust php and also use empty which gives more protections
Ermal LUÇI
03:51 PM Revision 59257969: Sprinkle some more unsets
Ermal LUÇI
03:06 PM Revision e6756251: Remove /var/run/booting early to be consistent with $g['booting']
Renato Botelho
03:04 PM Revision f9dfaeae: Revert "Make sure functions called by rc.start_packages can see $g['booting'] when we are booting"
This reverts commit 5eb99ec9fae6b6ff077559b3feab8565701f2635. Renato Botelho
03:04 PM Revision 0450ae55: Revert "Only unset $g['booting'] when it was set here"
This reverts commit 73abb573feae03b164d3ed4284db4ed4ff26a256. Renato Botelho
03:04 PM Revision 5551d818: Remove /var/run/booting early to be consistent with $g['booting']
Renato Botelho
03:01 PM Revision 677a6426: Revert "Make sure functions called by rc.start_packages can see $g['booting'] when we are booting"
This reverts commit 8a461f41db7907b310171b6e0fb901b2f5e7e2fe. Renato Botelho
03:01 PM Revision afd33d68: Revert "Only unset $g['booting'] when it was set here"
This reverts commit 47493bd326cd7141df7df708b69e10479ed800af. Renato Botelho
02:43 PM Revision 73abb573: Only unset $g['booting'] when it was set here
Renato Botelho
02:42 PM Revision 47493bd3: Only unset $g['booting'] when it was set here
Renato Botelho
02:17 PM Revision 5eb99ec9: Make sure functions called by rc.start_packages can see $g['booting'] when we are booting
Renato Botelho
02:16 PM Revision e2edc30d: When WANTIME is empty, there is nothing to do here
Renato Botelho
02:16 PM Revision 811ecea4: test only does integer comparison, use bc to compare float
Renato Botelho
02:16 PM Revision 8f105c8a: Save status even if no script is executed
Renato Botelho
02:16 PM Revision 98864780: On first run REVIOUSSTATUS doesn't exist, so it cannot be UP or DOWN, invert the logic to fix this. While I'm here, check if file exists before cat it
Renato Botelho
02:15 PM Revision 8a461f41: Make sure functions called by rc.start_packages can see $g['booting'] when we are booting
Renato Botelho
02:09 PM Revision 72a95734: When WANTIME is empty, there is nothing to do here
Renato Botelho
02:08 PM Revision 67e86129: test only does integer comparison, use bc to compare float
Renato Botelho
02:07 PM Revision 128cc1f4: Save status even if no script is executed
Renato Botelho
02:06 PM Revision cd14bb19: On first run REVIOUSSTATUS doesn't exist, so it cannot be UP or DOWN, invert the logic to fix this. While I'm here, check if file exists before cat it
Renato Botelho
10:52 AM Revision 15bec718: While here unset some variables even on vouchers side
Ermal LUÇI
10:45 AM Revision 1f965b69: Merge manually 4fd85b115e2550969ddeadd43a2bc6dafff21779 3f2ae9d58f5ea3d9de175e8daa9c8902b3f23440 and e049c5e74f009430e22e446f149a552d00846d7a
Ermal LUÇI
10:34 AM Revision a2a42c72: Remove not relevant comment now. Also make the operation clear to avoid priority issues.
Ermal LUÇI
10:28 AM Revision e049c5e7: unset these values to not confuse php
Ermal LUÇI
10:23 AM Revision 3f2ae9d5: Properly initialize this
Ermal LUÇI
10:22 AM Revision 4fd85b11: Switch to a while loop to make things clear and readble. Also properly set zone dedicated rules in the rules/pipes DBs to properly release when a zone is deactivated
Ermal LUÇI
10:00 AM Revision 27cea9a3: Remove not relevant comment now. Also make the operation clear to avoid priority issues.
Ermal LUÇI
09:30 AM Bug #3374 (Rejected): Firewall logs shows incorrect rules
It isn't random, it's just using what it knew at the time.
The rules are matched using what is recorded in the act...
Jim Pingle
04:59 AM Bug #3374 (Rejected): Firewall logs shows incorrect rules
Over time, Firewall log is going crazy and picking random rule to show.
Reason to this bug is unknown to me.
Dmitriy K
06:59 AM Revision 9172982d: Merge pull request #863 from dhiltonp/master
/usr/local/www/system.php: strip excess whitespace from ntp field Chris Buechler
04:20 AM Revision 87019fc4: Enabling advanced RFC 2136 configuration for DHCPd service
This change adds the ability to configure RFC 2136 domain name updates
using a hmac-md5 keyname/key.
Andres Petralli

12/23/2013

07:28 PM Revision 56301bed: Fix DHCP lease time display, strftime already convert it to local timezone, so we no need to calc offset
Renato Botelho
07:27 PM Revision d8b37f91: Fix DHCP lease time display, strftime already convert it to local timezone, so we no need to calc offset
Renato Botelho
05:44 PM Feature #972: Allow adding gateways outside of interface subnet
What would be the "correct" way to make this survive reboots, please? Dan F
06:34 AM Feature #972: Allow adding gateways outside of interface subnet
because accommodating 1 in 100,000 scenarios isn't a priority, especially when there is an easy manual work around. P... Chris Buechler
04:40 PM Revision f2aa8287: Remove 'deny unknown clients' option from DHCPv6 since it's not supported, it fixes #3364
Renato Botelho
04:40 PM Revision 079c2927: Remove 'deny unknown clients' option from DHCPv6 since it's not supported, it fixes #3364
Renato Botelho
04:16 PM Revision 26b6e758: Make sure to give the zone a name during the upgrade, or else it comes through with a blank/null name.
Jim Pingle
04:15 PM Revision db817c93: Make sure to give the zone a name during the upgrade, or else it comes through with a blank/null name.
Jim Pingle
02:57 PM Revision 66cc4d43: Correct displaying states status and avoid divison by zero due to wrong data collected
Ermal LUÇI
10:40 AM Bug #3364: DHCPv6 "Deny unknown clients" does not work
Applied in changeset commit:f2aa8287545d45ed22c44b5e2c102fb7a22658b0. Renato Botelho
10:40 AM Bug #3364 (Feedback): DHCPv6 "Deny unknown clients" does not work
Applied in changeset commit:079c2927622510cf34b3ccc225b9193143534c76. Renato Botelho

12/22/2013

02:39 PM Feature #972: Allow adding gateways outside of interface subnet
Three years and counting... How is this still not implemented / patched?
Oliver K.
01:37 PM Revision e20a0af7: Avoid dashboard divide by zero errors
phildd
01:35 PM Revision 0b5d55b7: Merge pull request #865 from phildd/master
Avoid dashboard divide by zero errors Chris Buechler
12:20 PM Feature #3199: Option to accumulate or not IP addresses in Alias table of FQDNs
Normally this will be fixed when filterdns supports reloading with TTL of the DNS record.
This will come soon.
Ermal Luçi
11:49 AM Revision 15183bcb: Avoid dashboard divide by zero errors
phildd
01:28 AM Bug #3373: Sun Quad fast Ethernet ports constantly resetting
I'm guessing it may be fixed already in FreeBSD 10, in which case there isn't anything that needs to be done for 2.2.... Chris Buechler

12/21/2013

10:33 PM Bug #3373: Sun Quad fast Ethernet ports constantly resetting
This driver has worked in all previous versions. There are hundreds of units in operations now with this hardware in ... Charlie Singleton
09:09 PM Bug #3373 (Rejected): Sun Quad fast Ethernet ports constantly resetting
we don't control or develop drivers.
https://doc.pfsense.org/index.php/Policy_on_FreeBSD_issues
Chris Buechler
11:11 AM Bug #3373 (Rejected): Sun Quad fast Ethernet ports constantly resetting
Using the hme driver in version 2.1 with part# 501-5406-07 Sun Quad Fast Ethernet PCI card. Once configured, the por... Charlie Singleton
01:25 AM Revision e98daec5: Add checkbox and logic to disable forwarding HTTPS/SSL (Port 443)
connections to the captive portal if HTTPS logins is enabled. derelict-pf

12/20/2013

10:50 PM Revision 3e5933f2: Use return rather than exit to be friendly on CGI
Ermal LUÇI
10:49 PM Revision af8251cc: Addapt rc.newwanipv6 to FCGI calling
Ermal LUÇI
10:45 PM Revision e800a773: Call rc.newwanipv6 efficently through FCGI
Ermal LUÇI
10:32 PM Revision 362ec35d: Do not register the _ENV superglobal since its not required and probably not very useful in a [F]CGI world and its limit is restricted nowdays in pfSense.
Ermal LUÇI
10:08 PM Revision aa205c3b: Rmoeve register_long_arrays from php.ini and from php code the use of HTTP_*_VARS as its deprecated and luckily low use in pfSense to win memory and compativility
Ermal LUÇI
03:14 AM Bug #3372 (Rejected): Router advertisements originating from VLANs not forwarded correctly
this isn't true, RAs on VLANs are widely used with no issues. Tagging VLAN 1 is generally a bad idea, I suspect your ... Chris Buechler

12/19/2013

03:20 PM Bug #3372 (Rejected): Router advertisements originating from VLANs not forwarded correctly
With a simple _OPT1_ configured for IPv6 and 'unmanaged' router advertisements, the (ICMP6) RA packages are (1) *meas... Mich MSvB
02:52 PM Revision cc263020: Provide a setting to disable the auto added LAN SPDs in the DB
Ermal LUÇI
09:20 AM Revision 85d0e959: Make even ipsec script ready for GET arguments but later on it will be used as such
Ermal LUÇI
09:12 AM Revision b2af12ad: Use closelog to explicitly close open resource.
Ermal LUÇI
09:10 AM Revision b95b40a1: Move also tls-verify to fcgicli to avoid forking php process. Maybe even this should be done as a plugin to avoid overhead of forking.
Ermal LUÇI
08:53 AM Revision 5e28dad4: Migrate openvpn authentication to use fcgicli rather than forking a php process. Maybe should could consider to write a short library todo this
Ermal LUÇI
06:48 AM Feature #3371 (Rejected): Permit reorder the IPSec Tunnels
Duplicate of #3328 Jim Pingle
05:30 AM Feature #3371 (Rejected): Permit reorder the IPSec Tunnels
When using IPSec and set 2 networks match is not possible "take" the second network even the netmask is more "closed"... Alisson Oliveira
05:06 AM Feature #3370 (Resolved): Permit reorder gateways
When using "Allow default gateway switching", pfSense will change to next gateway avaliable. Isn't possible choose wh... Alisson Oliveira
03:35 AM Bug #3182: VMware vmxnet interfaces are not detected as VLAN capable
From what i see the driver has proper flags defined.
The code of fetching the capabilities is generic.
Probably t...
Ermal Luçi
03:27 AM Bug #3353 (Resolved): Changing IPv6 from None to DHCP6 or vice-versa causes a panic+reboot
Ermal Luçi
03:25 AM Bug #3361: DHCP6 WAN is not obtaining a default gateway
You expect RA on em0 but receive one from em1 not sure if you have 2 interfaces with DHCPv6?
Can you confirm that?
Ermal Luçi

12/18/2013

10:00 PM Revision 27a01557: Use proper function to check for ipaddr and also do not call the module ip set function since its only v4 fro now
Ermal LUÇI
09:59 PM Revision 6a3b4601: Correct removing the ip addresses from an interface!
Ermal LUÇI
09:57 PM Revision 00e8315b: Correct issues not only with vlans but all other clonable interfaces(related to Ticket #3270. Also correct removing old ip addresses from the interface and handling the right interface on interface renabling.
Ermal LUÇI
09:45 PM Revision 78c36733: Use does_interface_exist rather than calling ifconfig directly
Ermal LUÇI
08:56 PM Feature #1938: Filter messages broken into multiple syslog messages
There is a patch that will add a GUI option to enable this behavior:
http://files.pfsense.org/jimp/patches/pf-log-on...
Jim Pingle
08:52 PM Feature #1938: Filter messages broken into multiple syslog messages
The workaround for this bug has changed in version 2.1. The affected section has been slightly rewritten so the posit... Ted Lum
02:34 PM Bug #3369 (Not a Bug): Captive vouchers expire too quickly
It happens that one week vouchers bagan to expire in less than 24h after their activation.
That's all I see in the l...
Todor K
01:53 PM Feature #2439: XEN Para-virtualized Drivers Support
+10000 for XENSERVER PV driver support. freebsd 10 is supporting it already. Alex Alex
01:51 PM Revision e677dd06: Set latest config version
Ermal LUÇI
01:50 PM Revision e7d35d84: Convert ipaliases over carp to new world order
Ermal LUÇI
04:16 AM pfSense Packages Bug #3368 (Resolved): ProxyPassReverse / balancer://cluster/ adds extra slash to redirect
See bug report on https://issues.apache.org/bugzilla/show_bug.cgi?id=51982
Solution: update apache package to 2.2....
Anton Bontes

12/17/2013

07:41 PM Revision f3512fca: Reduce the total minutes by the remote minutes used, do not use the value directly. Otherwise the voucher will be cut short or listed invalid when it otherwise should have time left over.
Jim Pingle
07:38 PM Revision e183e1ce: Reduce the total minutes by the remote minutes used, do not use the value directly. Otherwise the voucher will be cut short or listed invalid when it otherwise should have time left over.
Jim Pingle
06:17 AM Feature #3367 (Resolved): Remove restriction that IPv4+IPv6 rules limited to TCP, UDP, ICMP only
[pfSense 2.1]
If you try to create a rule which is IPv4+IPv6 with protocol "any", it is rejected with the followin...
Brian Candler
06:05 AM Feature #3366 (Duplicate): Diagnostics: DNS Lookup does not return AAAA records
(1) diag_dns.php shows only A records for the given name.
(2) When called with createalias=true, it creates the alia...
Brian Candler

12/16/2013

08:12 PM Revision 1848a25e: Fix saving of voucher sync settings.
Jim Pingle
08:11 PM Revision c1d5f0ef: Fix saving of voucher sync settings.
Jim Pingle
05:34 PM Feature #3365 (Resolved): Implement package signing
Need to implement PBI signing for 2.2. Chris Buechler
01:57 PM Revision 00e55088: Register a function to unset certain globals after requests finish processing to release memory early
Ermal LUÇI
01:34 PM Revision 5be2085a: Rely on memory rather than LOWMEM boolean
Ermal LUÇI

12/15/2013

09:26 PM Revision 6d7ee1ab: Use same value consistently for configuration and tolerate a bit more
Ermal LUÇI
09:15 PM Revision 08b64f79: Use events to start sshd rather than relying on forking
Ermal LUÇI
08:43 PM Revision 815f1f77: Support if called from fastcgi
Ermal LUÇI
08:41 PM Revision 1c3d2cd3: Send events to check_reload_status for carp master/backup
Ermal LUÇI
07:11 PM Revision 1590947b: Call all php scripts in bootup with fcgicli. For rc.bootup only the part needing input needs to be abstracted
Ermal LUÇI
12:12 AM Bug #3364 (Resolved): DHCPv6 "Deny unknown clients" does not work
While experimenting with IPv6 I noticed that the "Deny unknown clients" option in "Services - DHCPv6 server" does not... Anders Lind

12/14/2013

11:24 PM pfSense Packages Bug #3363 (Needs Patch): TinyDNS does not respond to IPv6 subnet
TinyDNS seems not respond to IPv6 addresses when trying DNS Server - Settings - Respond to IP.
I have tried to make ...
Anders Lind
09:42 PM Revision 83e46727: Mute the output of the command since its not really useful
Ermal LUÇI
09:39 PM Revision 73c3eed8: Remove deprecated sysctls. vfs.forcesync needs to be seen if the patch needs to be put in place again!
Ermal LUÇI
09:21 PM Revision 9e0fb701: Use system ident rather than php-fpm for system logs
Ermal LUÇI
07:20 PM Revision 4aea91d8: Switch to php-fpm for lighty and check_reload_status will use it. Step by step will migrate the other calls
Ermal LUÇI
11:22 AM Revision da49fd89: Remove a probably bad copy/paste line
Renato Botelho
01:29 AM Feature #3199: Option to accumulate or not IP addresses in Alias table of FQDNs
Thanks for the confirmation. Sorry, forgot to mention that I'm running 2.1-RELEASE as well.
It seems like a bug t...
Steve Reinhardt

12/13/2013

11:09 PM Revision c71b14fd: Make scripts able to react when called from FCGI with GET method
Ermal LUÇI
10:58 PM Revision a1007e19: Properly detect if an ip is already configured for VIP. Remove useless checks for carp
Ermal LUÇI
06:34 PM Revision 92603e27: Add an option to restore default logout/error/portal custom pages on Captive Portal. Fixes #3362
Renato Botelho
12:40 PM Feature #3362 (Feedback): Add a means to reset CP HTML/Error Page/Logout Page to default
Applied in changeset commit:92603e27d98bb89f63b2c0581f2fad2c39a9b09e. Renato Botelho
11:17 AM Feature #3362 (Resolved): Add a means to reset CP HTML/Error Page/Logout Page to default
While testing #3339 it hit me that we don't have any way to clear the defined pages for a captive portal instance. To... Jim Pingle
11:11 AM Feature #3339 (Resolved): Add a button to allow downloading the Captive Portal HTML text, error text, and logout page text
This works as expected, I can download the raw html/php source of the uploaded CP page. Jim Pingle
11:04 AM Bug #3195 (Resolved): CP MAC allows duplication
This appears to properly check now, adding a duplicate with different case is not allowed and produces an error in th... Jim Pingle
10:55 AM Feature #2416 (Resolved): Hybrid NAT mode that is a mix of Auto+Manual
This all appears to work as expected now. Jim Pingle
10:51 AM Bug #3361: DHCP6 WAN is not obtaining a default gateway
Additional info:
ifconfig shows ACCEPT_RTADV on for the WAN NIC.
Adding the gateawy manually does allow it to w...
Jim Pingle
09:54 AM Bug #3361 (Resolved): DHCP6 WAN is not obtaining a default gateway
On a 2.2 image the firewall pulls a WAN IP and even a LAN delegation, but does not get an IPv6 default route.
An i...
Jim Pingle
10:44 AM pfSense Packages Feature #3320: HAVP does not honor FW Gateway rules
My bad...
Found a nice piece of documentation for those who like experience this:
http://securite-ti.com/pfSense_We...
Orsiris de Jong
10:20 AM Bug #2833 (Resolved): Add a knob to prefer IPv4 over IPv6 for rare situations that require it
This works as expected on 2.2.
With it unchecked, IPv6 is preferred. Check it and try again, it uses IPv4. Unchec...
Jim Pingle
09:48 AM Bug #3122 (Resolved): CP Pass-through MAC entry must deny entering the firewall's own MAC address
This appears to work fine, it rejects any firewall MAC I attempt to add. Jim Pingle
08:49 AM Feature #3327 (Resolved): Allow reordering of 1:1 NAT entries
Looks like it all works as expected now, thanks! Jim Pingle
02:28 AM Feature #3199: Option to accumulate or not IP addresses in Alias table of FQDNs
I just double-checked this now that 2.1-RELEASE has been out an running for ages. I have a table of the IPs of all my... Phillip Davis
12:54 AM Feature #3199: Option to accumulate or not IP addresses in Alias table of FQDNs
I just ran into this problem, and I'd consider it a bug that needs to be fixed, not a feature request. I was using a... Steve Reinhardt

12/12/2013

07:32 PM Revision 940ef0e3: Fix parsing of the rule number in the pf log on FreeBSD 10.x, part of Bug #2122
Jim Pingle
11:21 AM Revision 8adb814b: /usr/local/www/system.php: strip excess whitespace from ntp field before processing
David P Hilton
10:38 AM Bug #2121: pfctl -ss output has changed on FreeBSD 10
The format is slightly different on 10.x than 9.x examples above.
In this sample output, 192.0.2.x is WAN on em0, 19...
Jim Pingle
08:43 AM Bug #3353 (New): Changing IPv6 from None to DHCP6 or vice-versa causes a panic+reboot
Still crashes on a current snapshot at the end of the wizard.... Jim Pingle
12:56 AM Bug #3046: Fatal error: Call to undefined function get_interface_ip() in /usr/local/captiveportal/radius_authentication.inc on line 56
I can confirm that this is also happening in 2.1-RELEASE with free radius2 2.1.12_1/2.2.0 pkg v1.6.7_2 Ozzy Schoonover

12/11/2013

04:36 PM Bug #3321: IPSEC failure on modem reset, automatic reconnection is broken, must manually restart racoon service
More users reporting the same issue:
http://forum.pfsense.org/index.php/topic,67625.0.html
Christian Borchert
04:36 PM Bug #3321: IPSEC failure on modem reset, automatic reconnection is broken, must manually restart racoon service
Another user reports the same issue:
http://forum.pfsense.org/index.php/topic,67929.0.html
Christian Borchert
04:31 PM Bug #3321: IPSEC failure on modem reset, automatic reconnection is broken, must manually restart racoon service
More users reporting the same issue:
http://forum.pfsense.org/index.php/topic,68776.msg376347.html#msg376347
Christian Borchert
04:22 PM Bug #3321: IPSEC failure on modem reset, automatic reconnection is broken, must manually restart racoon service
Another user reports the same issue:
http://forum.pfsense.org/index.php/topic,69235.0.html
Christian Borchert
04:20 PM pfSense Packages Bug #3360 (Resolved): Apache reverse proxy-dev leaves / out of Backend Path
When configuring locations the "backend path" text says "Backend redirect path. Leave blank to use / "
But if left b...
Anton Bontes
09:41 AM Bug #3045: NTPD crash / doesn't come up
I can report that this happens on i386 and amd64. I've switched architectures trying to avoid this bug. I can also re... Steve Jacobs
03:11 AM Bug #3264: Double traffic on vlan interfaces "out" side
The bug is only in the out graph and it's seen on aggregated interfaces too. That's about it. Stanislav Yanchev
03:04 AM Bug #3264 (Rejected): Double traffic on vlan interfaces "out" side
Duplicate of #3314. This is older but there are more data there. Renato Botelho
02:24 AM Bug #3314: Traffic graph shows 2X the actual traffic on VLAN interfaces.
amd64 version is affected too
https://redmine.pfsense.org/issues/3264
Stanislav Yanchev

12/10/2013

02:08 PM Revision aebf41df: Use current racoon.conf syntax to avoid issues when deprecated one is removed, it fixes #3338
Renato Botelho
08:10 AM Todo #3338 (Feedback): Update racoon.conf "remote" syntax
Applied in changeset commit:aebf41dfa424604315e42bf0cc3ca545760989ea. Renato Botelho

12/09/2013

03:27 PM pfSense Packages Bug #3359 (Rejected): Apache Httpd Server compiled with wrong directives for config dir
The PBI directories are correct for 2.1 packages. The other values can be solved through configuration changes to the... Jim Pingle
03:24 PM pfSense Packages Bug #3359 (Rejected): Apache Httpd Server compiled with wrong directives for config dir
Following command gives:
$ httpd -V
Server version: Apache/2.2.23 (FreeBSD)
Server built: Dec 20 2012 15:58:11...
Anton Bontes
11:49 AM Revision b3b3d115: Check that DHCP end IP is >= DHCP start IP
Phil Davis
11:49 AM Revision 2c712868: Use correct vars for IPv6 when checking subnet start and end
Phil Davis
11:48 AM Revision bed4017e: Merge pull request #862 from phil-davis/master
Fixes for DHCP range validation when entering from console Renato Botelho
11:22 AM Revision 9a2d491c: Fix vpn_pppoe_get_id and stop duplicating pppoeid for multiple servers, it fixes #2286
Renato Botelho
11:22 AM Revision d8b011b8: Fix vpn_pppoe_get_id and stop duplicating pppoeid for multiple servers, it fixes #2286
Renato Botelho
11:22 AM Revision fb7c06b8: Fix vpn_pppoe_get_id and stop duplicating pppoeid for multiple servers, it fixes #2286
Renato Botelho
11:07 AM Revision 5a997d96: Use correct vars for IPv6 when checking subnet start and end
Phil Davis
10:58 AM Revision 60818ff2: tidy up html
Renato Botelho
10:42 AM Revision e9bf4980: Fix whitespaces and indent
Renato Botelho
10:17 AM Todo #3196: Improve IPv4 address validation on interface setup (GUI and console) and setup wizard
I can't break it now - the console interface is validating lots of IP subnet and DHCP range stuff... Since I did the ... Phillip Davis
04:02 AM Todo #3196 (Feedback): Improve IPv4 address validation on interface setup (GUI and console) and setup wizard
Renato Botelho
09:53 AM Revision 12f5a2d8: Check that DHCP end IP is >= DHCP start IP
Phil Davis
09:08 AM Revision 9b749311: Fix checking DHCP end IP is in range
Cut-paste bug Phil Davis
09:06 AM Revision 69116e98: Merge pull request #861 from phil-davis/master
Fix checking DHCP end IP is in range Renato Botelho
08:30 AM Bug #3045: NTPD crash / doesn't come up
Sorry for posting here again. But I still got the "exited on signal 11 (core dumped)" error sometimes.
NTP runs fine...
Thomas Rieschl
05:36 AM Bug #2286: Multiple PPPoE Server do not work
I've pushed a fix but saved servers has now duplicated pppoeid fields on config.xml, you should remove and add them a... Renato Botelho
05:30 AM Bug #2286: Multiple PPPoE Server do not work
Applied in changeset commit:9a2d491c037162137255756eb05bd62316103d42. Renato Botelho
05:30 AM Bug #2286: Multiple PPPoE Server do not work
Applied in changeset commit:d8b011b8e6bfea3d0cc841dccd5bc4e764d4f96b. Renato Botelho
05:30 AM Bug #2286 (Feedback): Multiple PPPoE Server do not work
Applied in changeset commit:fb7c06b834fd1b02519039f3b3a206338bdcb3f8. Renato Botelho
03:15 AM Revision 3038ece7: Fix checking DHCP end IP is in range
Cut-paste bug Phil Davis

12/08/2013

09:14 PM Todo #3196: Improve IPv4 address validation on interface setup (GUI and console) and setup wizard
Latest changes for the console work nicely - it re-prompts for the IPv4 address when the address and netmask combinat... Phillip Davis
04:51 PM Bug #2286: Multiple PPPoE Server do not work
Markus Engelbrecht wrote:
> After adding a second PPPoE Server on a different VLAN (interface) the first and the se...
Thomas Levi
07:07 AM Bug #3353 (Resolved): Changing IPv6 from None to DHCP6 or vice-versa causes a panic+reboot
This is solved now mostly a problem in pf patches rather than other places. Ermal Luçi

12/07/2013

08:50 PM Revision a364ecd0: added missing quotes
thx rbgarga Dwayne Voelker
08:50 PM Revision 0c8fb222: Allow setting a default scale type preference for the traffic graphs widget
I originally submitted this at https://redmine.pfsense.org/issues/2994
but it seems that is not used for commits now ...
Dwayne Voelker
08:49 PM Revision 3c263d45: Merge pull request #860 from iamzam/RELENG_2_1
Allow setting a default scale type preference for the traffic graphs wid... Renato Botelho
07:29 PM Revision 52d5ef8d: Nice race on FreeBSD 10 for carp seems you cannot do on the same command line the carp config due to inherent races. Account for this
Ermal LUÇI
06:54 PM Revision 84b23cce: This needs to have alias added to not remove the interface ip
Ermal LUÇI
06:05 PM Revision 7a7ba89a: Correct curlies yet again
Ermal LUÇI

12/06/2013

07:16 PM Revision 0c21eb70: Use _vip as identified for CARP vip IPs to allow easier upgrade code. This way only ipaliases on carp need to be upgraded.
Ermal LUÇI
02:05 PM Revision e08ba4bb: Load only the options rather than clearing the whole ruleset. This solves a problematic issue on 2.1
Ermal LUÇI
02:04 PM Revision 86c135de: Load only the options and nothing else
Ermal LUÇI
01:39 PM Revision 77a341a4: Add a knob to prefer IPv4 over IPv6, it fixes #2833
Renato Botelho
01:37 PM Revision 09e14acf: Unbreak etc/sshd, add a missing quote
Renato Botelho
12:48 PM Bug #3358 (New): new version of <include_file> is not required during reinstall_all
When an outdated version of a package is installed and pfSense is updated, it will call pkg_reinstall_all() on next b... Renato Botelho
12:05 PM Todo #3196 (New): Improve IPv4 address validation on interface setup (GUI and console) and setup wizard
Jim Pingle
11:43 AM Bug #3308: route-to/reply-to not updated when PPP gateway IP changes
This just happened again and per your suggestions I checked Status>Gateways and /tmp/rules.debug.
Status>Gateways ...
Oz Solomon
11:43 AM Revision 9401e47c: Check if dhcp start and end addresses are inside interface subnet, helps #3196
Renato Botelho
11:43 AM Revision 9d1225a9: Add function is_inrange() that calls is_inrange_v6 or is_inrange_v4 accordingly
Renato Botelho
11:42 AM Revision 7a25652f: Check if dhcp start and end addresses are inside interface subnet, helps #3196
Renato Botelho
11:41 AM Revision da6cb29e: Add function is_inrange() that calls is_inrange_v6 or is_inrange_v4 accordingly
Renato Botelho
11:39 AM Revision 97049b79: When user attempt to set network or broadcast address, ask again for the IP address. Issue #3196
Renato Botelho
11:34 AM Revision bebf0fa8: When user attempt to set network or broadcast address, ask again for the IP address. Issue #3196
Renato Botelho
09:55 AM Bug #3357 (Resolved): IPv6 on PPPoE default gateway assignment incorrect
I started with a forum post here [[http://forum.pfsense.org/index.php/topic,68364.0.html]] with details as well.
...
Adrien Carlyle
07:40 AM Bug #2833 (Feedback): Add a knob to prefer IPv4 over IPv6 for rare situations that require it
Applied in changeset commit:77a341a458d604287f46180db1facbdb540cd139. Renato Botelho
02:46 AM Feature #3356 (Resolved): Document functionality of unclear DynDNS providers
The pages [1] and [2] would benefit from improved documentation of certain DynDNS providers. For example, there are t... Mich MSvB
02:25 AM Bug #3355 (Resolved): Interface monitor logic changes firewall tables too late for DynDNS
This report corresponds with mailing list email 'Bug in DynDNS notification sequence'.
*PRELUDE*
Some DynDNS pr...
Mich MSvB

12/05/2013

10:04 PM Todo #3196: Improve IPv4 address validation on interface setup (GUI and console) and setup wizard
As a side-issue, I purposely put in dodgy values for the DHCP - outside of the subnet I had specified - and was surpr... Phillip Davis
10:00 PM Todo #3196: Improve IPv4 address validation on interface setup (GUI and console) and setup wizard
I did GitSync and tried this on the console. Here is some sample output:
@Enter an option: 2
Available interfaces...
Phillip Davis
08:09 PM Revision 5c43e7bd: Also account for a widget being null/not defined, and not just closed/open.
Jim Pingle
08:05 PM Revision a6d96f9b: Also account for a widget being null/not defined, and not just closed/open.
Jim Pingle
05:03 PM Bug #2082: Captive Portal error when client IPs are reused
it is a requirement to configure your DHCP lease time and CP timeout appropriately, that's not a work around, it's th... Chris Buechler
09:45 AM Bug #2082: Captive Portal error when client IPs are reused
The issue is not resolved, linking the DHCP lease time and CP timeouts is a workaround.
The CP must work based on MA...
Luigi Capriotti
04:27 PM Revision f2dd61a7: Identify vips where needed by @ symbol that will be used
Ermal LUÇI
04:18 PM Revision af93d29a: Make more strict checks
Ermal LUÇI
04:16 PM Revision 9cdc1caf: Provide proper interface for getting carp status
Ermal LUÇI
03:41 PM Revision 103b8e5e: Remove not true comment
Ermal LUÇI
03:41 PM Revision 049ed50d: Correct syntax
Ermal LUÇI
03:24 PM Revision 8ff83255: added missing quotes
thx rbgarga Dwayne Voelker
03:13 PM Revision 6363a6de: Create even elyptic curve keys
Ermal LUÇI
10:51 AM Revision b6877e06: Handle more carp enahancements for FreeBSD 10. the interface vips will be names $if@$vhid since the interface name is the same as other ips.
Ermal LUÇI
10:51 AM Revision 0aa72930: Optimize a bit
Ermal LUÇI
09:24 AM Bug #3352 (Rejected): CaptivePortal: new device/different user getting an authorised already IP cannot be authenticated
"When the DHCP lease time is shorter than the idle/hard timeout of the captive portal the following situation may hap... Jim Pingle
08:58 AM Bug #3352 (Rejected): CaptivePortal: new device/different user getting an authorised already IP cannot be authenticated
When the DHCP lease time is shorter than the idle/hard timeout of the captive portal the following situation may happ... Luigi Capriotti
09:08 AM Bug #3354 (Resolved): Savecore error during bootup
During bootup of a pfSense 2.2 / FreeBSD 10 image there is an error from savecore. It still works despite the error, ... Jim Pingle
09:02 AM Bug #3353 (Resolved): Changing IPv6 from None to DHCP6 or vice-versa causes a panic+reboot
On a 2.2 image running FreeBSD 10, you can step all the way through the wizard but clicking "Reload" at the end cause... Jim Pingle
05:19 AM Revision 943d52cf: Allow setting a default scale type preference for the traffic graphs widget
I originally submitted this at https://redmine.pfsense.org/issues/2994
but it seems that is not used for commits now ...
Dwayne Voelker
12:32 AM Bug #829 (New): WAN stays assigned to pppoe0 interface after switching type from PPPoE to Static
Chris Buechler

12/04/2013

11:31 PM Bug #829: WAN stays assigned to pppoe0 interface after switching type from PPPoE to Static
Hello,
I just experienced this issue. My pfSense build is:
2.1-RELEASE (i386)
built on Wed Sep 11 18:16:50 ED...
James Simas
08:21 PM Revision 21d74c8e: Prevent network or broadcast address to be set on interface (console, GUI and wizard). It should fix #3196
Renato Botelho
08:21 PM Revision 20dda766: Prevent network or broadcast address to be set on interface (console, GUI and wizard). It should fix #3196
Renato Botelho
06:14 PM Bug #3349: System Information Widget Showing Incorrect Memory Used %
Also i created some code to accurately show what % of the disk space is being used instead of pulling what % DF puts ... Wifi Ghost
06:10 PM Bug #3349: System Information Widget Showing Incorrect Memory Used %
Yes, i have tested my new code on 4 systems and tried it with varying amounts of memory, anything over 512MB, and wit... Wifi Ghost
05:46 PM Bug #3349: System Information Widget Showing Incorrect Memory Used %
You should take inactive and cache into consideration, as it happens today. Considering it you still see differences ... Renato Botelho
05:53 PM Bug #3351: increase traffic graph.php SVG resolution
This patch doesn't apply cleanly. Is it possible to submit this change using github's pull request? It's much easier ... Renato Botelho
12:36 AM Bug #3351 (Needs Patch): increase traffic graph.php SVG resolution
While debugging a limiter issue it turned out I needed the text on the traffic graphs which hadn't been working for m... Bill McGonigle
04:12 PM pfSense Packages Bug #999: vhosts does not show up as started
looks a little weird... it seems that \b...\b didn't match the old way:
[2.1-RELEASE][root@pfsense.local]/root(23)...
Reiner Keller
02:20 PM Todo #3196: Improve IPv4 address validation on interface setup (GUI and console) and setup wizard
Applied in changeset commit:21d74c8e79948cd05c11f0ab79a463aea4bff2ce. Renato Botelho
02:20 PM Todo #3196 (Feedback): Improve IPv4 address validation on interface setup (GUI and console) and setup wizard
Applied in changeset commit:20dda766516f943339799abc31f7c3640fff3195. Renato Botelho
11:17 AM Revision f51fa0d4: Use proper interface here
Ermal LUÇI
11:17 AM Revision 991bd7ad: Correct only carp value changes
Ermal LUÇI
08:27 AM Bug #3250: problems with ixgbe driver in pfsense 2.1 release
Since this ticket is light on detail, there are a few main issues with the current driver:
1. Error message from t...
Jim Pingle

12/03/2013

04:20 PM Revision a589dc74: Add FreeBSD pkgng repo definition
Jim Pingle
02:37 PM Revision f70a140f: Fix #3350. Do not destroy an interface when it's being disabled
Renato Botelho
02:37 PM Revision 5bc62353: Fix #3350. Do not destroy an interface when it's being disabled
Renato Botelho
11:42 AM Revision 8e97590d: Remove a left testing code
Renato Botelho
10:54 AM Bug #829: WAN stays assigned to pppoe0 interface after switching type from PPPoE to Static
It seems a workaround is to set the interface to static, type an IP, then submit the changes. Once you do this, you c... Caesar Caesar
10:44 AM Bug #829: WAN stays assigned to pppoe0 interface after switching type from PPPoE to Static
Same issue on 2.1-RELEASE (i386)
built on Wed Sep 11 18:16:50 EDT 2013
FreeBSD 8.3-RELEASE-p11
Caesar Caesar
09:33 AM Todo #3196: Improve IPv4 address validation on interface setup (GUI and console) and setup wizard
It's not only setup wizard, but you can also use network or broadcast addresses on interfaces.php and console. Renato Botelho
08:40 AM Bug #3350: Disabling and enabling VLAN leaves VLAN interface missing
Applied in changeset commit:f70a140fe18cb80012e53f82c268788fbcae5436. Renato Botelho
08:40 AM Bug #3350 (Feedback): Disabling and enabling VLAN leaves VLAN interface missing
Applied in changeset commit:5bc623536d8bb3b93e68a1b1535c9de582721a09. Renato Botelho
05:12 AM pfSense Packages Bug #3344: Disable IPV6 Squid3 not run
Bus only disable ipv6 suport that squid3 port closed Gilmar Cabral
05:10 AM pfSense Packages Bug #3344: Disable IPV6 Squid3 not run
Confuse with another bug reported. Gilmar Cabral
04:05 AM pfSense Packages Bug #3344: Disable IPV6 Squid3 not run
How is it related to squid3? It's an openvpn conf. I'm confused Renato Botelho
04:00 AM pfSense Packages Bug #3344: Disable IPV6 Squid3 not run
Generated example configurator GUI pfsense.
Generated parameter automatic tun-ipv6
Print attached configuration gen...
Gilmar Cabral
03:40 AM pfSense Packages Bug #3344: Disable IPV6 Squid3 not run
but disable checkbox not create route ipv6 automatic Gilmar Cabral
12:56 AM pfSense Packages Bug #3344 (Rejected): Disable IPV6 Squid3 not run
that checkbox has nothing to do with what squid will bind to. It only blocks IPv6 network traffic, which can't have a... Chris Buechler
12:57 AM pfSense Packages Feature #3320 (Closed): HAVP does not honor FW Gateway rules
that's how things are supposed to work, you need floating rule policy routing for anything initiated by the firewall ... Chris Buechler

12/02/2013

10:31 PM Bug #3350 (Resolved): Disabling and enabling VLAN leaves VLAN interface missing
If you disable an interface that's a VLAN, it deletes the VLAN, and re-enabling that interface doesn't add the VLAN i... Chris Buechler
09:12 PM Revision 77411fa7: Correct CARP events on devd and the argument processing on called scripts
Ermal LUÇI
07:35 PM Revision aa87cf11: Fix #3339. Add a way to download CP portal, error and logout html pages
Renato Botelho
06:21 PM Revision 61422dd4: When reset webConfigurator password, if authentication server is not Local Database, ask user to back to it. Fix #3341
Renato Botelho
05:45 PM Revision 338ded9b: Fix whitespaces and indent
Renato Botelho
02:27 PM Bug #3349 (Not a Bug): System Information Widget Showing Incorrect Memory Used %
I have 2048MB on my system. With the code below the web gui system information widget shows i have 512MB installed, t... Wifi Ghost
02:19 PM Revision 0e42cad8: Show aliases popup on Outbound NAT list
Renato Botelho
02:11 PM Revision dde20226: Declare missing global vars and fix gateway deletion
Renato Botelho
01:40 PM Feature #3339 (Feedback): Add a button to allow downloading the Captive Portal HTML text, error text, and logout page text
Applied in changeset commit:aa87cf1108532f083761a5d2da4ff518cc398356. Renato Botelho
01:34 PM Revision a9be92f0: Fix typos
Renato Botelho
12:20 PM Feature #3341 (Feedback): Add a means for reverting GUI auth backend to Local Database from the console
Applied in changeset commit:61422dd487c2646c21b09b8bb3588ed3e49e3223. Renato Botelho
06:35 AM Bug #3348 (Resolved): DHCP server: IP of next-server is lost on upgrade to 2.1
Known issue, already fixed in the repository. Jim Pingle
02:36 AM Bug #3348 (Resolved): DHCP server: IP of next-server is lost on upgrade to 2.1
When upgrading from 2.0.3 to 2.1, the contents of the next-server entry in the DHCP server settings is lost. This hap... Stefan Seidel
04:29 AM pfSense Packages Feature #3320: HAVP does not honor FW Gateway rules
Well, it actually seems that putting a computer's IP in the bypass list of squid does finally honor FW rule to route ... Orsiris de Jong

12/01/2013

04:01 PM pfSense Packages Bug #2602: BandwidthD - Reported Traffic / Usage is approximately Double real amount
This issue should remain closed.
This note is being added so that there is an answer associated with this issue to...
Brock Prozeniuk

11/29/2013

07:35 PM Bug #3345: Openvpn create route ipv6 default Pfsense 2.1
The configuration generated by the openvpn server in the conf file via shell shows support for ipv6 enabled even usin... Gilmar Cabral
02:51 PM Bug #3345 (Rejected): Openvpn create route ipv6 default Pfsense 2.1
OpenVPN creates whatever routes it's configured to create (or that it pulls if pulling is enabled). No sign of a bug ... Chris Buechler
07:32 PM pfSense Packages Bug #3344: Disable IPV6 Squid3 not run
Yes.
System -> Advanced.
Disable ipv6 support package squid3 closed port 3128, but the service runs but refuses con...
Gilmar Cabral
02:52 PM pfSense Packages Bug #3344 (Feedback): Disable IPV6 Squid3 not run
Need more info, what specifically do you mean by "Disabling IPv6"? Checking the box under System>Advanced? Chris Buechler
02:42 PM Bug #3346 (Rejected): 1:1 NAT rule (w/ VIP) breaks connectivity to WAN
1:1 NAT works fine, sounds like you have an issue with your upstream ARP cache. Chris Buechler
01:50 AM Bug #3346: 1:1 NAT rule (w/ VIP) breaks connectivity to WAN
To note: I've tried taking the backup from the alix board and applying it to the new machine (intel motherboard), and... Matt Deering
01:47 AM Bug #3346 (Rejected): 1:1 NAT rule (w/ VIP) breaks connectivity to WAN
Clean installation on a computer, setup default gateway, dhcp and set up basic internet connectivity, no packages, no... Matt Deering
12:07 PM Revision 4e4e35dd: One more typo on Alternative Names fill, that was setting type field with $value
Renato Botelho
12:07 PM Revision 4287c73a: One more typo on Alternative Names fill, that was setting type field with $value
Renato Botelho
11:57 AM Revision 30c15c58: Fix a (probably) copy/paste issue that is making all Alternative Names disapear when an input error is detected
Renato Botelho
11:57 AM Revision edf37d56: Fix a (probably) copy/paste issue that is making all Alternative Names disapear when an input error is detected
Renato Botelho
04:44 AM Bug #3347 (Resolved): Certificate Authority SAN names not working in 2.1
Hey Guys, It appears Subject Alternative Names are not working in the CA module for pfsense 2.1.
The fault is, the...
David Meixner

11/28/2013

06:43 PM Revision 1ebb561d: Remove 0.0.0.0 from automatic outbound nat rules
Renato Botelho
06:42 PM Revision 992324ef: Remove 0.0.0.0 from automatic outbound nat rules
Renato Botelho
06:36 PM Revision 7238e0cf: Remove references to _vip interface and provide proper configuration for carp on FreeBSD 10. Still some places to deal with this and certainly missing upgrade code
Ermal LUÇI
10:55 AM Revision 4c91880c: Fix 0.0.0.0 mask for automatic outbound NAT
Renato Botelho
02:42 AM Bug #829: WAN stays assigned to pppoe0 interface after switching type from PPPoE to Static
Pfsense 2.1-RELEASE (amd64)
built on Wed Sep 11 18:17:37 EDT 2013
FreeBSD 8.3-RELEASE-p11
This exact bug just ha...
o s

11/27/2013

04:46 PM Bug #3345 (Rejected): Openvpn create route ipv6 default Pfsense 2.1
OpenVPN creates ipv6 default route in p2p mode with virtual interface ovpns1 dedicated tunnel. Setup OpenVPN server g... Gilmar Cabral
04:42 PM pfSense Packages Bug #3344 (Rejected): Disable IPV6 Squid3 not run
Disabling ipv6 in the GUI squid3 closes port 3128. Gilmar Cabral
 

Also available in: Atom