Activity
From 12/20/2013 to 01/18/2014
01/17/2014
-
04:46 AM Feature #3398 (Needs Patch): Notifications - information about errors
- I test the pfsense on HP DL360 G5
CPU: Intel(R) Xeon(R) E5410
Ram: 8GB
Disk controller: P400i (RAID5 4x hdd)
Wh... -
02:50 AM Bug #3205: Partial system freeze when disconnecting USB 3G stick
- i got the same situation as well as with the 3g stick connected if i reboot pfsense then it would just get stuck when...
01/16/2014
-
02:28 AM Bug #3397 (Needs Patch): Cannot load builtin or external firmware for mwl driver
- Hello,
I've tried to get a marvell wireless card to work a long time before posting this.
Here's the output of pf...
01/14/2014
-
09:15 PM Todo #3396 (Resolved): Replace dnsmasq with Unbound
- The replacement of dnsmasq with unbound needs to be completed for 2.2.
-
- #3395 addresses the only problem here. none of that impacts DHCP4 clients.
-
- 8000::/1 is included in Cymru's v6 bogons list. That's sane, since it shouldn't be in the Internet routing table, but...
-
- I'll provide further details privately to the person working on the issue, it's on a customer system and not somethin...
-
- I can't seem to determine why, as different systems with seemingly identical radvd.conf files don't consistently disp...
-
07:34 AM Bug #3045: NTPD crash / doesn't come up
- simply one line contining:
-0.056
(or other numbers) -
04:03 AM Bug #3045: NTPD crash / doesn't come up
- Fabio Giudici wrote:
> Good morning
> Just one more question: is it ntpd running in jail/chroot?
>
> Just to ... -
- Good morning
Just one more question: is it ntpd running in jail/chroot?
Just to restrict the issue...but it se... -
07:10 AM Todo #765: Patch: Add custom DHCP configuration
- Hello,
I am aware that this Feature Request is 3 years old but I feel that the last comment by Jonathan Diete is t... -
- Applied in changeset pfsense-tools:commit:3b8d3adb58956d7415f52bcc81cfb1eca84e80b0.
01/13/2014
-
11:14 AM Bug #3045: NTPD crash / doesn't come up
- I see a problem on my 2.1 64-bit system with NTPD that may be related to the issues reported here. Anytime the WAN i...
-
- Fabio Giudici wrote:
> I did just a series of test, and the core dump of ntpd seems strictly related to the presence...
01/12/2014
-
08:21 AM Bug #2762: PF drops IPv6 packets with fragment header followed by a last fragment only
- And another one on the broken scrub: http://www.freebsd.org/cgi/query-pr.cgi?pr=172648
-
- Erm, guys, what's up with this?! Upstream apparently does NOT intend to fix this in any way, cf. http://www.freebsd.o...
01/11/2014
-
01:26 PM Feature #2358: NAT64 support
- UPVOTE. I really like to be able to run my network with IPv6 only and make legacy IPv4 site available through NAT64.
-
- I did just a series of test, and the core dump of ntpd seems strictly related to the presence of the file /var/db/ntp...
01/10/2014
-
03:08 AM Feature #3393: AS filtering support in aliases
- An example of retrieving facebook ips from their AS number
[code]
whois -h whois.radb.net -- '-i origin AS32934' | ... -
- It would be nice to have an option to define a type of AS number in the aliasesand retrieve all the ips from the whoi...
-
- there will be publicly-available 2.2 snapshots in the not too distant future. At this point, I think you might be ok ...
01/09/2014
-
04:42 AM Feature #3377: OAuth2 authentication in captive portal
- Here is a proof of concept, for a OAuth2 captive portal authentication with Google accounts :
https://github.com/... -
- duplicate of #2859.
this isn't the place to ask questions, please take those to the forum or mailing list. -
02:50 AM Bug #3392: Allow to configure different mac addresses for multiple VLANs on same physical interface
- Feature #2859
how to do that coz i have just one nic and 4 VLANS configured on it, 2 WAN and 2 LAN -
- I had to beg to change the MAC of the provider.
Very important! I can make a few NIC VMware on, but I can not create...
01/08/2014
-
09:18 AM Feature #972: Allow adding gateways outside of interface subnet
- Hi Dan,
I felt in the same trouble, and I the idea I have found to survive reboot is using the ShellCmd package : ... -
07:41 AM pfSense Packages Bug #3391 (Rejected): Quagga OSPF doesn't install properly
- It works fine in a test VM here that never had Quagga, and also in a separate VM that had it previously and reinstall...
-
02:46 AM pfSense Packages Bug #3391 (Rejected): Quagga OSPF doesn't install properly
- Hello,
I have several pfSense firewalls, all having Quagga OSPF and running without issues.
They where installed ... -
05:28 AM Bug #2800: OpenVPN doesn't work properly with intermediate/chained CAs
- You mean you essentially created a cert chain yourself in the Certificate Authority Manager and then it worked?
01/07/2014
-
- that's reasonable, submit that as a pull request in github and we'll get it merged.
-
04:15 PM Feature #3388: Add checkbox and logic to disable forwarding of HTTPS requests to captive portal
- You're still misunderstanding. If the initial connection by the user prior to CP authentication is to, say, https://...
-
- Use a signed certificate on your CP!!!
-
- I believe you are missing the point.
This enables administrators to utilize HTTPS CP authentication, which might b... -
- Just do not configure https authentication!
-
04:39 PM Feature #3387: process_alias_urltable Frequency
- Ah never mind. I forgot about the ability to change the type on the fly...
-
- Shawn Bruce wrote:
> I have created a diff for firewall_aliases_edit.php against the latest git version. Would this ... -
- I have created a diff for firewall_aliases_edit.php against the latest git version. Would this be acceptable?
I am... -
- A code to upgrade current config to new format will be necessary too
-
- It seems like maybe the authentication fallback that allows a person to login using local auth when their LDAP server...
-
- On pfSense 2.2 you will be able to revert GUI auth backend to Local Database on the same option you use to restore GU...
-
- When I try to create a firewall rule that handles only certain types of IPv6 ICMP traffic, the interface lets me sele...
-
- Applied in changeset commit:51922cb793b83bf7d22fdaa47205fd59b4d70e87.
-
- Applied in changeset commit:6b6607316481aacaa055f8e4bce2ce1e520d3b1b.
01/06/2014
-
- Candidate patch here:
https://github.com/derelict-pf/pfsense/commit/e98daec5960b7ecdd18bc461003df3a18d2adbe7 -
- Candidate patch here:
https://github.com/derelict-pf/pfsense/commit/ae6c69833f34d8f14b1c6a9508126905328340bc -
- Candidate patch here:
https://github.com/derelict-pf/pfsense/commit/4fd56afe541a0a350dfe52b20521a551edd9f276 -
- Currently the urltable design only allows for updates on a daily interval and is processed via crontab every 12 hours...
-
- Applied in changeset commit:81f1947666ebbe19f1f6579a1e5293c42c6d1c04.
-
01/05/2014
-
08:54 AM Bug #3386: apinger not picking up 2nd OpenVPN tunnel
- I did another reboot and now it worked. You can close this issue (did not find button to close it myself).
-
- When adding a 2nd OpenVPN tunnel (client side, shared key static setup) and the corresponding Interface and Gateway i...
01/04/2014
-
10:32 PM Bug #2800: OpenVPN doesn't work properly with intermediate/chained CAs
- After I posted the above, I have a new idea.
I just copied the Root CA certificate to the Intermediate CA's certif... -
- I am hit with the same bug.
Also, if you set the Peer Certificate Authority to the Root CA, 2 things happen:
1.... -
02:49 PM Feature #3385: Accommodate static routes for PPTP connections
- correction :
When the VPN reconnects, the static route is not reinstated and must be re-instated to bring the rou... -
- Creating a static route on the pfSense box allows routing from the 10.20.2.0 network back across the (pptp) vpn to th...
-
07:00 AM Bug #3384 (Resolved): NTPd should deny service if the packet spacing violates the lower limits specified in the discard command (CVE-2013-5211)
- ntp.conf(5):
limited
Deny service if the packet spacing violates the lower limits specified
in ... -
04:29 AM Bug #3383 (Resolved): Web GUI becomes slow or unusable if the LDAP server used for GUI auth is unreachable
- Hy,
This one have been difficult to find.
I set up a ldap server in user manager through the web gui. Everything ...
01/03/2014
-
03:38 PM Bug #2650: FTP helper breaks TCP sequence numbers on 2nd WAN
- I've also run into this problem. I didn't want it to get so buried in the pile that it never got looked at again.
-
11:21 AM Bug #3382 (New): IGMPPROXY fails with more than 32 interfaces
- Hi,
I have a problem with the igmpproxy:
I am using pfSense in an enviroment of round about 120 users, and every ...
01/02/2014
-
09:54 PM Bug #3381: LAN interface root Queue Bandwidth calculation is exactly double the total of the other child queues
- Further to this, the " Borrow from other queues when available" doesn't work when you go 1 level deeper than the root...
-
- FYI - The WAN interface seems to be 100% correct all the time.
-
- LAN interface root Queue Bandwidth calculation is exactly double the total of the other child queues. This looks to b...
-
- Hi,
after adding an User-Expiration-Option to an user of FreeRadius Service, radius tries to restart but breaks:
...
12/31/2013
-
- Sure go ahead.
-
- In Captive Portal we have native, ldap and radius authentication. Today, a lot of authentication systems provide OAut...
12/30/2013
-
03:30 AM Bug #3376: Alias Edit does not display correctly
- Applied in changeset commit:44b72c67ec3331ecd3a6430697ad47dbeac7c450.
-
- Applied in changeset commit:1b9ab14ad23e1f66a11801fbe7a24423ab8529a0.
12/29/2013
-
- I have no idea what I am doing with the jQuery stuff, but I pulled out some "^" marks in pull request https://github....
-
- I had a 2.1-RELEASE system and GitSync'd to the 2.1 release branch. I was using Alias Bulk Import, but then also real...
12/27/2013
-
- There was an attempt to remove it in the past but seems it had side-effects (see ticket #3179 and commit:32a9eb1873)....
-
05:05 AM pfSense Packages Bug #3375 (Closed): BIND, ACLs: Incorrect code is being generated for empty range ACL.
- BIND 9.9.4 pkg v 0.3.2;
Steps to reproduce:
1. Create an ACL "Test";
2. Follow the advise and leave "Enter IP ..... -
- I see. Pretty understandable reason.
Basically speaking, if my pfsense box will go berserk with "reload fw filter"... -
- This is probably related to an issue fixed in head of pf and probably the MFC is missed.
Not related to the previous...
12/26/2013
-
03:45 PM Bug #3321: IPSEC failure on modem reset, automatic reconnection is broken, must manually restart racoon service
- Same problem here with pfsense 2.1 and cisco router with IOS 12.4(15)T15 as remote endpoint.
IPSEC tunnel doesn't co... -
- This still happens on a current build.
-
- Applied in changeset commit:3f248cb65a25189f7cff8f6ad4321998caaab073.
12/24/2013
-
- It isn't random, it's just using what it knew at the time.
The rules are matched using what is recorded in the act... -
- Over time, Firewall log is going crazy and picking random rule to show.
Reason to this bug is unknown to me.
12/23/2013
-
05:44 PM Feature #972: Allow adding gateways outside of interface subnet
- What would be the "correct" way to make this survive reboots, please?
-
- because accommodating 1 in 100,000 scenarios isn't a priority, especially when there is an easy manual work around. P...
-
- Applied in changeset commit:f2aa8287545d45ed22c44b5e2c102fb7a22658b0.
-
- Applied in changeset commit:079c2927622510cf34b3ccc225b9193143534c76.
12/22/2013
-
02:39 PM Feature #972: Allow adding gateways outside of interface subnet
- Three years and counting... How is this still not implemented / patched?
-
- Normally this will be fixed when filterdns supports reloading with TTL of the DNS record.
This will come soon. -
- I'm guessing it may be fixed already in FreeBSD 10, in which case there isn't anything that needs to be done for 2.2....
12/21/2013
-
10:33 PM Bug #3373: Sun Quad fast Ethernet ports constantly resetting
- This driver has worked in all previous versions. There are hundreds of units in operations now with this hardware in ...
-
- we don't control or develop drivers.
https://doc.pfsense.org/index.php/Policy_on_FreeBSD_issues -
- Using the hme driver in version 2.1 with part# 501-5406-07 Sun Quad Fast Ethernet PCI card. Once configured, the por...
12/20/2013
-
- this isn't true, RAs on VLANs are widely used with no issues. Tagging VLAN 1 is generally a bad idea, I suspect your ...
Also available in: Atom