Activity
From 02/03/2014 to 03/04/2014
03/04/2014
-
11:47 PM pfSense Packages Bug #3502 (Closed): unbound package updated but not available???
- I had unbound 1.4.21_1-i386 installed earlier today and noticed that a new version is out (1.4.21_3). I attempted to...
-
- I'm using pfsense 2.1-RELEASE-i386. I tried to update Unbound, but the PBI file isn't available for download. The l...
-
11:25 PM Bug #3493: mute-replay-warnings doesn't appear to work
- Thanks. The captcha image was only showing as a broken image when I tried, now it loads fine.
-
07:37 AM Bug #3493: mute-replay-warnings doesn't appear to work
- Re: ... please update your email address...
---
Done.
Re: ... the contact page on your website isn't usable as t... - 11:14 PM Revision f08d2ae7: Merge pull request #994 from N0YB/RELENG_2_1
- XHTML Compliance
- 09:09 PM Revision 56b490ba: syntax errors corrected
- 08:07 PM Revision 94046ff1: XHTML Compliance
- VPN - OpenVPN - Client
-
04:42 PM Bug #3500 (Resolved): DHCP Leases List Not Showing Hostname in Some Cases
- The DHCP leases list shows a blank in the hostname field for some leases, even though the log shows that a hostname w...
- 01:03 PM Revision ebe2b407: Merge pull request #984 from phil-davis/master
- Return GWG IP protocol (version) when no gateway IP
- 12:52 PM Revision faddd381: Merge pull request #992 from Doncuppjr/master
- Add UEFI support to Network Boot options.
- 12:47 PM Revision 6c91204d: Merge pull request #993 from N0YB/RELENG_2_1
- XHTML Compliance
- 11:40 AM Revision bb30d32c: Remove alert confirmation to delete a package, today user need to confirm twice
- 11:40 AM Revision b6096065: Remove alert confirmation to delete a package, today user need to confirm twice
-
11:40 AM Bug #3460 (Resolved): CSRF Protection - Package manager
-
- Pull request 992 was merged
-
- that's something to be revisited in 10.x-based releases, as the situation will be different there.
03/03/2014
- 09:17 PM Revision cacc258f: XHTML Compliance
- VPN - OpenVPN - Server
- 09:00 PM Revision ff9c579f: Fix syntax
- 07:21 PM Revision 218a4ffa: s/unlink/unlink_if_exists/
- 07:21 PM Revision 48047e3f: s/unlink/unlink_if_exists/
-
07:20 PM Revision fdb116a9: Put added option in dhcp config instead of dhcpv6 config.
- Use empty function instead of <> "" for null test in dhcp network booting config section.
modified: etc/inc... - 06:16 PM Revision de9ac478: Validate if src OR dst have IP address set when protocol is IPv4+v6. Fixes #3499
- 06:15 PM Revision 6bb99c3f: Validate if src OR dst have IP address set when protocol is IPv4+v6. Fixes #3499
- 04:31 PM Revision 2ccaa575: Remove broken 'dynamic6' gateway, we already have ipprotocol to tell us the IP version, leave it more simple using only 'dynamic'. It helps #3484
- 04:31 PM Revision 246950c3: Fix typo on var name
- 04:31 PM Revision d07bc322: Remove broken 'dynamic6' gateway, we already have ipprotocol to tell us the IP version, leave it more simple using only 'dynamic'. It helps #3484
- 04:26 PM Revision bf36dafa: Fix typo on var name
- 01:54 PM Revision d557438a: Merge pull request #990 from N0YB/RELENG_2_1
- XHTML Compliance
-
-
01:13 PM Bug #3250: problems with ixgbe driver in pfsense 2.1 release
- revert back to 2.1-REL driver don't fix problem with MBUF in 2.1-REL driver. please reopen
-
-
- I reverted it, will leave it as feedback waiting a confirmation from Chris
-
- Applied in changeset commit:de9ac478b3a846cc4068d21c0cb5cf8f8097e22b.
-
- Applied in changeset commit:6bb99c3fe0e5510c8c1962f082ef30bf0ab84a81.
-
10:43 AM Bug #3499: Missing data validation for IPv4+IPv6 rule with IPv4 literal address
- Note: this is with pfsense 2.1
-
- If you add a rule selected as "IPv4+IPv6", but the source or destination is an IPv4 literal, then it is accepted but ...
-
- I pushed more fixes today, please try tomorrow's snapshot or gitsync it to latest RELENG_2_1 and let me know the resu...
-
- modified: etc/inc/services.inc
-
- 05:47 AM Revision 7023c602: Added support for UEFI booting to Network Booting configuration.
- modified: conf.default/config.xml
modified: etc/inc/services.inc
modified: usr/local/www/servic... -
-
- limited is not enabled by default (the commits associated with this ticket have been backed out). Everything here is ...
-
-
-
-
03/02/2014
-
11:42 PM
Bug #3200: IPv6 bugs
- I can confirm that at least the 2nd bullet point is still valid with the latest snapshot of 2.1.1....
-
- no feedback, I've confirmed elsewhere what I believe to be the root cause of the described problem to be fixed in 2.1...
-
- reverted back to 2.1-REL driver which will suffice for 2.1.1.
-
-
- unable to replicate, no response.
-
-
06:09 PM Bug #3498 (Resolved): Wake on Lan Widget no auth needed
- Wake on Lan Widget doesn't include "guiconfig.inc", so no auth is required when accessing it remotely, this could lea...
-
04:26 PM pfSense Packages Feature #3497: Zabbix-2 Proxy needs a custom field box.
- Wrote up a quick patch to add the feature.
https://github.com/rmiddle/pfsense-packages/commit/2799c464e83a4039e61b... -
- My Discoverers Processes have been 75% busy for the last 6 hours. I need to increase the number of poller processes ...
-
09:15 AM Bug #3496 (Rejected): NTP monlist Command Enabled
- Duplicate of #3384, already fixed.
-
08:06 AM Bug #3496 (Rejected): NTP monlist Command Enabled
- *Description*
The version of ntpd on the remote host has the 'monlist' command enabled. This command returns a list ...
03/01/2014
-
- Workaround.
If you can't upgrade Zabbix Agent remove /usr/local/pkg/zabbix2-agent.xml and then you can reinstall... -
- I have several systems 2.0 and 2.1 and running into upgrade issues when I try to move from Zabbix 2.0.4 to 2.2.1 if I...
- 10:55 PM Revision 3d8e954b: sync up ALTQ-capable interfaces list
- 10:54 PM Revision 263f1c9c: sync up ALTQ-capable interfaces list
- 06:56 PM Revision 0a173e6b: XHTML Compliance
- Firewall - Traffic Shaper
-
- ah thanks, I didn't check the link. Driver issues are outside our control. It might be fixed in FreeBSD 10.0, though ...
-
- mute-replay-warnings should work fine in general, if it doesn't, it's an issue in OpenVPN itself. I'm not aware of an...
-
- B. Derman - could you please update your email address to something that doesn't bounce? I get a slew of bounces from...
-
-
- 09:35 AM Revision f8c5358d: Merge pull request #989 from N0YB/RELENG_2_1
- XHTML Compliance
- 03:56 AM Revision e1002cd2: XHTML Compliance
- Firewall - Schedules - Edit
-
03:33 AM Bug #2945: Installation stucks at 36%: /usr/local/bin/cpdup -vvv -I -o /usr /mnt/usr
- I faced same issue and resolved by disabling multi core processing in the BIOS and enabling virtualization.
02/28/2014
- 09:01 PM Revision d7f3520f: Merge pull request #988 from N0YB/RELENG_2_1
- XHTML Compliance
- 08:57 PM Revision 76b1d814: XHTML Compliance
- Firewall - Aliases - Edit
- 08:52 PM Revision 1aad59d8: Merge pull request #987 from N0YB/RELENG_2_1
- XHTML Compliance
- 08:25 PM Revision 7d50bd3e: XHTML Compliance
- Firewall - NAT - Npt - Edit
- 08:25 PM Revision 6d0f5a63: Add an option to verify peers_identifier when it's ASN.1 distinguished name. It should fix #2904
- 06:46 PM Revision dadb4846: Merge pull request #986 from andrespetralli/master
- Re-enabling static lease updates
- 04:59 PM Revision 3cdef187: Re-enabling static lease updates
-
-
-
-
02:55 PM Feature #2904: Add checkbox or default option for "verify_identifier on;" on IPsec RSA VPNs
- Yay! Excellent, works just fine.
-
- Applied in changeset commit:6d0f5a635aed336e5d2b6208a07a564b79f8863d.
-
02:14 PM Revision b31247af: Small correction for clear code
-
-
- 02:00 PM Revision 088a4eed: Tidy up GWG dropdown selection tests
- Tested this making a new rule, and editing existing IPv4, IPv6 and IPv4+Ipv6 rules, and switching the IP version on a...
- 01:57 PM Revision cd962bb9: Tidy up GWG dropdown selection tests
- Tested this making a new rule, and editing existing IPv4, IPv6 and IPv4+Ipv6 rules, and switching the IP version on a...
-
-
-
- 01:12 PM Revision 95281343: Merge pull request #983 from N0YB/RELENG_2_1
- XHTML Compliance
-
-
- OK, back to static IPv6, manually created GW, everything working again. So, assigned GIF interface set to None defini...
-
- This totally messed up my IPv6 connectivity. Cannot even ping an IPv6 from the firewall due to some nonsense about bu...
-
10:20 AM Bug #3484: IPv6 - the gateway address does not lie within one of the chosen interface's subnets
- Ah just gitsync to latest code and set the assigned GIF interface to none on the Interfaces configuration screen and ...
-
- OK, thanks for investigating. Please, let me know what should be done to test the fixes, kinda confused by the commen...
-
- Applied in changeset commit:c32a6b82a708149a66c1e477ddc0ba1c54d70440.
-
- Applied in changeset commit:ddb30ebfc686165e00f0155e00df16edc17c31c5.
-
- After investigation this seems to be an problem of INET6 implementation of FreeBSD.
It does not allow on gifv6 tunne... - 11:29 AM Revision 0344d76e: Tidy "gateway name - IP" in dropdown list
- for 2.1 branch
- 11:28 AM Revision fa94f1e1: Tidy "gateway name - IP" in dropdown list
- While I notice this also, for a plain gateway, the current IP address is also listed in the dropdown list text, like ...
- 08:10 AM Revision b612c49f: Use return_gateway_groups_array() to build correct GWG list
- Version for 2.1 branch
- 07:48 AM Revision d47e25c7: Use return_gateway_groups_array() to build correct GWG list
- Now return_gateway_groups_array() always returns at least the IP version 'ipprotocol' of each GWG, even if all its me...
- 03:04 AM Revision c6708833: Return GWG IP protocol (version) when no gateway IP - 2.1 branch
- 02:54 AM Revision f60003fa: Return GWG IP protocol (version) when no gateway IP
- This is a resubmit of an older pull request I had closed. It came up again in the forum, with a user setting up a VM ...
- 01:51 AM Revision 1541e25f: XHTML Compliance
- Firewall - NAT - Outbound - Edit
02/27/2014
-
- that's working as it should, you can disable logging for the bogon blocking if you want to silence the logs. There is...
-
10:48 PM Bug #3494 (Rejected): default deny/block bogons blocks some ipv6 multicast traffic
- With IPv6 enabled, my ISP's default gateway (Comcast) sends an ICMP6 packet (Multicast Listener Report) destined for ...
- 09:03 PM Revision 78c74f9b: Fix #3492, make sure filesystem is read-write
- 09:03 PM Revision 920dbb26: Fix #3492, make sure filesystem is read-write
- 08:50 PM Revision 2658000b: Merge pull request #981 from N0YB/RELENG_2_1
- XHTML Compliance
- 08:41 PM Revision 813016d2: XHTML Compliance
- Firewall - NAT - Port Forward - 1 to 1 - Edit
-
-
-
- Thanks, that worked.
-
- Applied in changeset commit:78c74f9b2188e029e0dd331a4cbfc1a9492ffc38.
-
- Applied in changeset commit:920dbb26b19773ae1ef96992ee26ae31293d029e.
-
- ...
- 03:38 PM Revision 6e8bb592: Merge pull request #979 from phil-davis/RELENG_2_1
- Errors in graph calculations
- 03:37 PM Revision df992bc1: Merge pull request #980 from N0YB/RELENG_2_1
- XHTML Compliance
-
- Have the lines
mute-replay-warnings;
verb 1;
as entries in the OpenVPN Advanced Configuration box, but am stil... -
- Alias name validation do not accept only numbers anymore on 2.2 since https://github.com/pfsense/pfsense/pull/960 was...
-
- If you have a host alias using a numerical name such as "2222", then using port "2222" (literal) in firewall rules is...
-
- Guys, this is NOT a feature request, this is a major security issue! Can someone finally fix this?
https://forum.p... -
- Duplicate of #3490
- 10:51 AM Revision 90435b20: Fix #3486, delete /var/crash content when click 'No'
- 10:51 AM Revision d7d6e57a: Fix #3486, delete /var/crash content when click 'No'
-
-
- It was replaced by htmlspecialchars()
-
- Applied in changeset commit:90435b203e6a4adc35e582511ddf122a4fe699fa.
-
- Applied in changeset commit:d7d6e57a228de0d855b12b3bb7eb0f2a50aef108.
- 02:20 AM Revision e082672d: XHTML Compliance
- Firewall - NAT - Port Forward - Edit
- 02:13 AM Revision edaa41be: Errors in in graph calculations
- This is the version for 2.1 branch corresponding to https://github.com/pfsense/pfsense/commit/f9983a874d6acf5fcf08a08...
02/26/2014
- 09:36 PM Revision 7f43c116: Merge pull request #978 from N0YB/RELENG_2_1
- XHTML Compliance
- 08:39 PM Revision cd83111a: XHTML Compliance
- Firewall - Rules - Edit
-
-
-
-
-
- Re-Filed as a Feature Request.
-
- All new computers have the ability to boot UEFI afaik. There are few little changes that need to be made to pfsense t...
-
- All new computers have the ability to boot UEFI afaik. There are few little changes that need to be made to pfsense t...
- 12:13 PM Revision 9f66bc5e: Merge pull request #977 from N0YB/RELENG_2_1
- XHTML Compliance
-
- 10:55 AM Revision 082c9d96: XHTML Compliance
- Firewall - Rules
- 10:18 AM Revision a02b89b0: Merge pull request #976 from N0YB/RELENG_2_1
- XHTML Compliance
- 09:10 AM Revision a5921773: XHTML Compliance
- Firewall - NAT - Port Forward
- 03:51 AM Revision d11f5bff: XHTML Compliance
- Firewall - NAT - Port Forward
- 03:41 AM Revision 334ca9d7: XHTML Compliance
- Firewall - NAT - Port Forward
-
- Hi,
i received following link that can fix IXGBE driver problem. http://christopher-technicalmusings.blogspot.com....
02/25/2014
- 09:41 PM Revision 0c78acf8: Merge pull request #975 from stilez/patch-1
- Port dropdowns: Put port no. after descrip
-
07:48 PM Revision f7e481dd: Port dropdowns: Put port no. after descrip
- At the moment, even if a port number is entered, it's re-displayed only as a port name when editing. Users who don't ...
-
- I'd defined a PRIQ shaper setup (via the wizard) on a 2 LAN, 1 WAN (with 4 CARP VIPs, no fail-over/syncing) then chan...
-
-
-
-
-
-
-
- It was fixed by commit:8a0ae97fa0e249aa13538103e662aa6191ebde65 and commit:90caf54ebf46763f4856d446ab0aa77259282119
-
- I like to diff my primary and secondary configs to check they are fully in sync. However, there are some false alarms...
-
-
-
-
-
-
-
-
-
-
- On clicking No on the crash report, nothing gets deleted, get the same notice at dashboard again and again, until del...
-
10:28 AM Bug #2495: pfsense doesn't seem to know what its WAN IP is
- I just tried it again with the current 2.1.1 Snapshot (2.1.1-PRERELEASE (amd64) built on Mon Feb 24 16:48:44 EST 2014...
-
-
- * Use proper commands to reload strongswan rather than just the daemon
-
- Fix #3483 only use IPv4 DNS servers in DHCP v4 conf
-
- Fix #3483 only use IPv4 DNS servers in DHCP v4 conf
- 03:47 AM Revision 6a201696: Fix #3483 only use IPv4 DNS servers in DHCP v4 conf
- Version for 2.1 branch
- 03:40 AM Revision 3ad6b569: Fix #3483 only use IPv4 DNS servers in DHCP v4 conf
-
- Applied in changeset commit:a63f8ba8f37edf07c9d40c9134f98c74e36a83d7.
-
- Applied in changeset commit:042436e8f2e1ffee2411894fbb61ad961d13bf4f.
-
01:50 AM Bug #3483: DHCP server - lack of implicit values validation
- Applied in changeset commit:6a2016960b433f579b73f539ac5f64f5e956369e.
-
- Applied in changeset commit:3ad6b569d64043a75bbb63453658ed005e89ef2c.
-
12:14 AM Bug #3483: DHCP server - lack of implicit values validation
- Phillip Davis wrote:
> /etc/inc/vpn.inc
> function vpn_pppoe_configure(&$pppoecfg)
> function vpn_l2tp_configure()... -
- Phillip Davis wrote:
> /etc/inc/vpn.inc
> function vpn_pppoe_configure(&$pppoecfg)
> function vpn_l2tp_configure()...
02/24/2014
-
11:38 PM pfSense Packages Feature #3485 (Closed): Log rotation for mod_security
- As it stands, mod_security+apache does not rotate any logs generated by Apache, which can cause problems down the roa...
-
- /etc/inc/vpn.inc
function vpn_pppoe_configure(&$pppoecfg)
function vpn_l2tp_configure()
search for 'dnsserver'
bo... -
- Phillip Davis wrote:
> And also, if you have DNS Forwarder disabled, no DNS servers specified on the DHCPv4 page, an... -
- And also, if you have DNS Forwarder disabled, no DNS servers specified on the DHCPv4 page, and no IPv4 DHCP servers o...
-
- Should be fixed by:
https://github.com/pfsense/pfsense/pull/970 - master branch
https://github.com/pfsense/pfsense/... -
- There was a fix implemented for the same sort of thing happening with Dns zones here that seems to strip off any bad ...
-
- 1/ Put some IPv6 IPs as DNS servers into System - General Setup
2/ Disable DNS forwarder
3/ Configure some DHCPv4 p... - 07:05 PM Revision f13a1d6a: Make is_linklocal case-insensitive and fix #3433
- 07:03 PM Revision 04f5393f: Make is_linklocal case-insensitive and fix #3433
-
- Afraid it's trying to compare the subnet to the "gif remote address" which is obviously IPv4. No wonder it fails. As ...
-
- ...
- 03:25 PM Revision b5388f03: Fix #2302, save custom uploaded l7 pattern files on config.xml and replicate it to slave
- 03:25 PM Revision 732b160d: Set variable after make sure it's defined and has elements
- 03:25 PM Revision 420b4538: Fix whitespace and indent
- 03:25 PM Revision 1b90e2d5: Fix whitespaces and indent
-
-
-
-
-
- Applied in changeset commit:f13a1d6a8a57df7c5c6466bb34ebdf26e77a2846.
-
- Applied in changeset commit:04f5393f49be48989cb6e073a51bd35b33f177a1.
-
- Pull request merged - https://github.com/pfsense/pfsense/pull/964
- 10:57 AM Revision 037e7a62: Merge pull request #959 from stilez/patch-3
- Tighten is_subnet() functions
-
- Applied in changeset commit:b5388f033c51ba1102ec00d8c1d604c6ea39827d.
-
- Thanks. Makes sense.
Perhaps adding the following to the text under the "Enable Pass-through MAC automatic additi... -
- Chris:
Per the 3rd bullet on the indicated web page "... in all cases, simply switching the interface to a vr, de,... - 01:22 AM Revision 8cee3e44: Merge pull request #969 from N0YB/RELENG_2_1
- XHTML Compliance
- 12:59 AM Revision b48958df: XHTML Compliance
- Interfaces
02/23/2014
- 08:45 PM Revision 5462854c: Merge pull request #968 from N0YB/RELENG_2_1
- XHTML Compliance
- 07:02 PM Revision 3698711f: XHTML Compliance
- Interfaces - PPPs Edit
- 06:34 PM Revision d06c4448: Merge branch 'RELENG_2_1' of git://github.com/pfsense/pfsense into RELENG_2_1
-
02:49 PM Bug #3482 (Resolved): Initial Setup disables WAN
- I created a Xen-VM with
2 cores
2 nics, e1000
8 GB Disc
1 GB Ram
installed pfsense 2.1, no errors.
... -
- I have updated the package again and moved away from the previous package + archive. Should work fine now.
-
12:16 PM
Bug #2627: Old delegated prefixes are not removed from the LAN interface
- Tested this on:
2.1.1-PRERELEASE (amd64)
built on Sat Feb 22 05:12:28 EST 2014
FreeBSD 8.3-RELEASE-p14
1. Fre... -
- XHTML Compliance
- 10:58 AM Revision 37b6250b: Merge branch 'RELENG_2_1' of git://github.com/pfsense/pfsense into RELENG_2_1
- 10:01 AM Revision 813288dc: XHTML Compliance
- Interfaces - Wireless Edit
-
- XHTML Compliance
-
- XHTML Compliance
- 07:09 AM Revision cfd3676d: This one too.
- 06:55 AM Revision 6c156433: XHTML Compliance
- Interfaces
- 05:04 AM Revision 4a2c47fe: Element id's are to be unique. 'provider' used is elsewhere.
- 04:50 AM Revision ca4467bc: Better done globally here in the function.
-
- because that's not true.
-
- seems likely to be driver-specific, can you test with a different type of NIC to confirm or deny that?
-
- Subsequent to posting an issue to the mailing list (issue documented at http://www.derman.com/pfSense-Run-Away-Issue)...
- 02:30 AM Revision 6e31ca39: XHTML Compliance
- Interfaces
02/22/2014
-
09:16 PM Bug #3357: IPv6 on PPPoE default gateway assignment incorrect
- Craig Falconer wrote:
> My next plan is ... temporarily try a USB ethernet card, and see if stripping the VLAN tags ... -
- Ermal Luçi wrote:
> That is a different issue.
> Probably plain simple routing issue.
Definitely not simple rout... -
- That is a different issue.
Probably plain simple routing issue.
Since your LAN as a PD which is smaller than the ... -
- Ermal Luçi wrote:
> Can you test with latest snapshot of 2.1.1 and see if ti behaves better?
FANTASTIC! I have ... -
04:32 PM Bug #3480: Firewalländerungen OpenVPN-Client erst nach Tunnelneustart wirksam
- Könnte ich vielleicht noch gesagt bekommen, warum ich kommentarlos rejected werde?
-
-
- Hallo zusammen,
ich habe grade festgestellt, dass Firewalländerungen erst wirksam werden, wenn ich den Tunnel neu au... -
- Update firewall_rules_edit.php
-
-
06:54 AM Bug #1943: PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
- this seems to be solved in the latest 2.1.1-PRERELEASE
-
12:44 AM Bug #3479 (Closed): Rosewill RC-404 NIC not operating properly
02/21/2014
-
11:55 PM Revision c95b52d5: Update firewall_rules_edit.php
- PIM protocol for firewall rules.
- 08:46 PM Revision bc50c8d7: Update tzdata to 2013i
-
08:30 PM Bug #3479: Rosewill RC-404 NIC not operating properly
- Nevermind, come to find out it's some sort of hardware conflict.
My apologies. -
- So for some reason I can not get an IP on my Rosewill RC-404 NIC (http://www.newegg.com/Product/Product.aspx?Item=N82...
-
-
- The input validation does not allow the problem case any longer. Looks good enough to me.
-
- Move it to feedback since it should be enough for 2.1.1
-
-
-
-
-
-
-
-
- 11:01 AM Revision ad43847b: Merge pull request #960 from stilez/patch-4
- Tighten is_validaliasname()
-
-
-
-
-
- It would be handy to be able to save:
a) The default Remote Access Server to be displayed when when the Client Expor... -
- Applied in changeset commit:080fd00bac29b736a5e1e8e91b9efbb3c3ea8305.
-
- Applied in changeset commit:929776169f0f36b99ef62f7bfe633f8d02db2c43.
-
- I put a fix which should handle properly all cases to this.
Can you try tomorrows snapshots of 2.1.1? -
- is_validaliasname() treats "empty string" as a valid alias name, it probably shouldn't.
I suspect it also should not... -
02:47 AM Bug #3045: NTPD crash / doesn't come up
- Upgraded one of my clusters to 2.1.1-PRERELEASE (amd64) built on Wed Feb 19 19:46:29 EST 2014.
Can confirm NTPD is... -
- Oh, ping-restart should also be added to the list.
-
- The is_subnet(), is_subnetv4() and is_subnetv6() functions have significant issues in their coding logic.
Issues:
1...
02/20/2014
-
-
-
- It is very easy for the devs if you submit a pull request on GitHub - https://github.com/pfsense
-
- PIM protocol is missing, so I added it in firewall_rules_edit.php. It would be nice to release in the official versio...
- 08:43 PM Revision 3e0b2df2: Update tzdata to 2013i
- 08:32 PM Revision 6a193210: Update list of mobile service providers
- 08:32 PM Revision 9d40745b: Update list of mobile service providers
-
-
-
-
-
-
-
- 06:37 PM Revision 3f7f26ae: Add the missing global $g
-
-
- duplicate of #3317
-
07:12 AM Bug #3446: NTP server doesn't bind to assigned interfaces on automatic service restart after queriing his assigned master time server
- I just saw that my report is most likely a duplicate of: https://redmine.pfsense.org/issues/3317
-
- What would be needed is you system log or at least o confirmation from ifconfig that dhcp6c is retrieving something f...
-
- Send a pull request on github.
-
- Excuse me for the additional update, but I added a <hideinterfaceregex> to hide loopback interfaces from the LADVD co...
- 11:26 AM Revision 070dad6c: Use env var provided by openvpn to determine if it's tun or tap, it should fix #3475
- 11:21 AM Revision 08185f4a: Use env var provided by openvpn to determine if it's tun or tap, it should fix #3475
-
- A tested and the code will show as many records as available on registration file. Are you sure there were more recor...
-
09:45 AM pfSense Packages Bug #3168: siproxd
cleaned ip-adresses and sip-user-ids
at this moment: Currently Registered Phones (1)
-
- Could you please share the content of /var/siproxd/siproxd_registrations?
-
-
-
-
-
-
- Tighten is_numeric()
-
- Make a good copy of PHP_errors.log for crash reporter
- 07:56 AM Revision 38cb3c39: Make a good copy of PHP_errors.log for crash reporter
- Forum report https://forum.pfsense.org/index.php/topic,72877.0.html
-
- Only missing signing key and definition about how it will happen
-
- Done
-
- Done
-
- Applied in changeset commit:070dad6c8d4f4e02ad9f6f87169b7adc1ebeee34.
-
- Applied in changeset commit:08185f4aa2282077e2e1f15baad5593352123d68.
-
03:35 AM Feature #3476 (Duplicate): Null rule entry for logical segmentation of sets of rules
- Hello,
We have a rather complicated rule set, with IPSec links to other offices and customers, DMZ LAN and also Pr... -
- that's by design - the MAC pass-through entries aren't captive portal users, they're MACs that are always allowed thr...
- 02:18 AM Revision d55cba63: Fix gateway quality RRD to have the correct granularity and be consistent with the pfSense graphs set.
- Create gateway quality RRD with settings suitable for pfSense graph set, since apinger uses default step (300) and o...
-
- Improvements:
1) avoids 'expensive' preg_match() and is a more exact test
2) fixes logic whereby an empty string or ...
02/19/2014
- 09:42 PM Revision 5b699be7: Merge pull request #950 from N0YB/RELENG_2_1
- XHTML Compliance
- 09:17 PM Revision de76f366: XHTML Compliance
- UPnP & NAT-PMP
-
- XHTML Compliance
- 08:38 PM Revision 55e41a98: XHTML Compliance
- Traffic Graph Status
-
- Create ntp_status.widget.php
-
- Create ntp_status.inc
-
- Update status_rrd_graph_settings.php
-
- Update status_rrd_graph_img.php
-
- Update status_rrd_graph.php
-
- Update status_ntpd.php
-
-
- Create services_ntpd_pps.php
-
-
- Update system.inc
-
-
- Where tap interfaces have an IP assigned, function get_interface_gateway returns the subnet mask as the gateway IP (f...
-
- Create services_ntpd_gps.php
-
-
-
- Update services_ntpd.php
-
- Update rrd.inc
-
- Filter log - ensure IPv6 AJAX resolve works too
-
- Using str_replace(array('.', ':') as asked
-
- Remove old webguiport code
-
- 12:53 PM Revision 0c8cc915: Remove old webguiport code
- webguiport is managed in system_advanced_admin.php these days, not here in system.php. This validation is never execu...
- 12:26 PM Revision e09da6c2: Fix #3469
- Before downloading file to process urltable, there is a random wait
time between 5 and 60 seconds. Because of this, t... - 12:22 PM Revision 47f7842f: Fix #3469
- Before downloading file to process urltable, there is a random wait
time between 5 and 60 seconds. Because of this, t... - 11:48 AM Revision 869dfb66: Fix #3468, wording fix
- 11:48 AM Revision d06ad5eb: Fix #3468, wording fix
-
- Please test on 2.1.1 and report back. https://forum.pfsense.org/index.php/topic,71546.0.html
-
- I have several clusters running on 2.1 amd64 using LAGG (on igb based quad port cards) + VLAN + CARP + OpenVPN client...
- 11:23 AM Revision 96fc5388: Merge pull request #945 from phildd/master
- Enhance interface gateway data entry descriptions
- 11:23 AM Revision 69498c01: Merge pull request #944 from N0YB/RELENG_2_1
- XHTML Compliance
- 10:41 AM Revision e2a6a6fb: Enhance interface gateway data entry descriptions
- 10:33 AM Revision 6e2eabe5: XHTML Compliance
- CARP Status
-
- Dodgy-looking stuff in graph calculations
-
08:50 AM
pfSense Packages
Feature #3456 (Feedback): ladvd (lldp/cdp/edp/ndp daemon)
- Applied in changeset commit:80f804d0d7b4053b0366470d5ad1bc34e89b03b1.
-
- PBIs available at:
http://files.pfsense.org/packages/8/All/ladvd-1.0.4-i386.pbi
http://files.pfsense.org/packages... -
- Improve LDAP DN examples
-
- Releng 2 1 Enhance interface gateway data entry descriptions
-
- AJAX-ify DNS lookups in standard firewall/filter
-
-
- 07:48 AM Revision 25ba63fb: Take single and double quotes into consideration
-
- XHTML Compliance
-
- Applied in changeset commit:e09da6c2668f041851316bcb334263814a3daffe.
-
- Applied in changeset commit:47f7842f80ec52081bce27e9230203763adb0064.
-
- /etc/rc.update_urltables often skips doing a required update ...
* /etc/rc.update_urltables runs at 12:30 PM each ... -
- Hi,
Would it be possible to replace the --server option in the openvpn server conf with the explicit declarations ... -
- Applied in changeset commit:869dfb664a1af87f07384f6bcaba4515a0da8a5c.
-
- Applied in changeset commit:d06ad5eb05b26eb811b67bbb94f2bd01884c43de.
-
- In /etc/rc.update_urltables change line 43
from
log_error("{$argv[0]}: {$t['name']} does not need updated.");
t... -
- Merged pull request #584 to fix this.
-
- The keepalive option is always added to an OpenVPN server configuration.
There are many scenarios where this is no... -
- Attempting view, via "Diagnostics -> Table -> [applicable large table]", the contents of a large URL table (alias) ge...
-
- Attempting to load an empty URL table (alias) causes an error.
If a table download fails and/or results in an empt... -
- The standard firewall log has lookup ability but these open in a new tab/window, they don't show in the log, other pl...
-
- Using a self-created/signed CA (created via pfSense's nice Certificate Manager), I created a server and user certific...
- 02:39 AM Revision 94bf59b1: XHTML Compliance
- Settings Logs Status
- 02:36 AM Revision d5d192a1: XHTML Compliance
- NTP Logs Status
- 02:35 AM Revision 3d1a290b: XHTML Compliance
- Open VPN Logs Status
- 02:34 AM Revision 6b0d7871: XHTML Compliance
- Load Balancer Logs Status
- 02:33 AM Revision 7e23690a: XHTML Compliance
- VPN Logs Status
- 02:32 AM Revision ec56ae9d: XHTML Compliance
- PPP Logs Status
- 02:31 AM Revision 5e736c8a: XHTML Compliance
- Portal Auth Logs Status
- 02:29 AM Revision 1fe3c758: XHTML Compliance
- DHCP Logs Status
-
- "Diagnostics -> pfTop [Queue]" doesn't show P/S or B/S (running command-line pftop followed by left-arrow does show P...
-
- Visit "Status -> OpenVPN" and press the "Restart openvpn Service" button for a running server.
When the OpenVPN se... -
- Editing traffic shaper queues (Firewall -> Traffic Shaper -> By Interface) can cause "php: /status_queues.php: XML er...
-
- After enabling "Enable Pass-through MAC automatic additions" the "Captive Portal" RRD graphs no longer show any graph...
02/18/2014
- 11:31 PM Revision 56e3ea85: Only add dhcpv6 client allow rules if ipv6allow is set
- 11:31 PM Revision 5a47e9b1: Only add dhcpv6 client allow rules if ipv6allow is set
-
- XHTML Compliance
- 09:07 PM Revision 8749f693: XHTML Compliance
- Queues Status
-
- XHTML Compliance
- 08:45 PM Revision 0c8a8127: XHTML Compliance
- Package Logs Status
-
- 07:38 PM Revision d291634a: Take single and double quotes into consideration
-
-
- 07:00 PM Revision 8a4d1dbd: Move 'allow dhcpv6 client' rules above block bogonsv6 ones, it should fix #3395
- 07:00 PM Revision a60c6356: Move 'allow dhcpv6 client' rules above block bogonsv6 ones, it should fix #3395
-
05:23 PM Revision 540c012b: Update status_ntpd.php
- fixed tail path
-
- fixed tail path
-
-
-
- 04:12 PM Revision f9983a87: Dodgy-looking stuff in graph calculations
- I noticed that the graphs in this post - https://forum.pfsense.org/index.php/topic,72794.0.html - had numbers for in-...
-
- corrected path
-
- Corrections made as requested
-
- Updated errorneous paths. Sorry.
-
- Dedicated widget which has a javascript clock showing the server time accurately, and based on NTP's running state di...
-
- NTP widget helper
-
- Add NTP graph to settings
-
- Add NTP graph drawing
-
- Add NTP graphing
-
- Normally i have fixed this for 2.1 and up.
Setting this to feedback to see if someone finds problems with the fixes. -
- This seems to have been solved.
-
- A bit more informative NTP status page...
-
- Separate page for other PPS sources config
-
- Update priv.defs.inc - add new NTP pages
-
- Separate page to set GPS receiver pps sync
-
- Extended options for NTPd
-
- Add new NTPd functions
-
-
- Add NTP graphing to RRD
-
- Incomplete.
-
-
- This is better nowdays.
-
-
- Nowdays this is not anymore relevant.
- 01:59 PM Revision 1ac5a652: Take single and double quotes into consideration
-
- The new IPSec implementation in 2.2 does support it though supporting it in the GUI is not forseen yet.
-
- Please check if last commit fix the issue for you
-
-
- Applied in changeset commit:8a4d1dbd2a4d536201363a0f8d8a42fb6e057b33.
-
- Applied in changeset commit:a60c6356ee22b081bdfe6b8a8dfd83865e6f2681.
-
- 11:35 AM Revision 9e875e0c: Revert "Replaced gethostbyname() with gethostbynamel() to get a list of all IPs associated with the dns name and add them to the allowed list"
- This change is not needed, filterdns will handle it.
This reverts commit d460371416d4e2cfef976d5a7616f63f6faa203f. -
-
-
-
-
10:48 AM Revision 33d1b241: captive portal, don't generate rules for disabled portal
-
- Applied in changeset commit:69a0c7351bed26b4fb0259ce893442bd99d9d89d.
-
- Applied in changeset commit:133f8b33472b9bca9e8f788820233cafbd674fcb.
-
- 10:38 AM Revision 8f821cbc: Merge pull request #891 from PiBa-NL/captive_disable
- captive portal, don't generate rules for a disabled portal
- 10:31 AM Revision aecb7a79: Merge pull request #890 from N0YB/Gateway_Monitor
- Gateway Monitor Advanced Settings
- 10:15 AM Revision 9305e219: Merge pull request #904 from dv-user1/master
- Replaced gethostbyname() with gethostbynamel() to get a list of all IPs ...
-
- This reverts commit 7c77641060bc5662f75519556af5e4566078dfc6.
-
-
- This reverts commit cb431dbf47c53b72119bd8feca0217e1c25d998b.
-
-
-
-
-
-
- XHTML Compliance
- 07:45 AM Revision 1370befa: XHTML Compliance
- Open VPN Status
-
- Applied in changeset commit:6766e4771ef6582212044ab8938f4757776618a4.
-
- Applied in changeset commit:82921e738bb9d1a784733152822a9e976767ce3a.
-
- Applied in changeset commit:048bb82a0e2c814da90816657ecedf59fedf8dbd.
-
-
-
-
-
- /etc/inc.system.php defines a boolean $multiwan and uses that to decide whether to display the dropdown selection box...
-
- I am not sure this is something to be fixed for 2.1.1 so putting to 2.2.
-
- Applied in changeset commit:70b49cba96706753a7c1bc4a1166f9744a080352.
-
- Applied in changeset commit:c79f717a5893443a895b7d09eb8218b5058d1f08.
-
- Can you test with latest snapshot of 2.1.1 and see if ti behaves better?
-
- Can you confirm that it at least timeouts for now.
I made it understand that waiting indefinitely until a TCP connec...
02/17/2014
- 10:16 PM Revision cb061c7f: Merge pull request #925 from N0YB/RELENG_2_1
- XHTML Compliance
- 09:37 PM Revision b9a494f0: XHTML Compliance
- NTP Status
-
- XHMTL Compliance
- 08:13 PM Revision 5a2e0c3b: XHMTL Compliance
- Load Balancer Status
-
-
-
-
-
- XHMTL Compliance
- 07:18 PM Revision 3ac9b8ae: XHMTL Compliance
- IPsec Status Tabs
Mostly element closings and minimizations (nowrap), empty table row. - 06:45 PM Revision 18b4e253: Help ticket #3449:
- Improve data validation to avoid save a host/subnet or a IPv4 with
invalid mask. The reported error is on javascript ... - 06:43 PM Revision c00e6bd4: Help ticket #3449:
- Improve data validation to avoid save a host/subnet or a IPv4 with
invalid mask. The reported error is on javascript ... -
- XHTML Compliance
- 05:52 PM Revision fe672816: XHTML Compliance
- RRD Graphs Update
Use CDATA section instead of clunky decode hex value for ampersand in script. -
- Are you using the latest available snapshot? Could you give more details about how to reproduce it? I tried but could...
-
04:30 PM Bug #2820: Unable to generate CSR in 2.1BETA1
- Seeing this again on RELENG_2_1
-
- If you are seeing the same issue of #2820, please add a comment there and we can re-open it, this is good to keep tra...
-
- Seeing the behaviour in issue #2820 on current RELENG_2_1 code. Can't submit to create a CSR, given error "Please sel...
- 03:20 PM Revision 838e1f63: Use correct parameter (bootfile-url) to configure netboot on DHCPdv6, it fixes #3421
- 03:20 PM Revision b67ec10c: Fix typo on variable name and really add custom options for dhcpdv6
- 03:20 PM Revision bd942860: Use correct parameter (bootfile-url) to configure netboot on DHCPdv6, it fixes #3421
- 03:20 PM Revision 547f1e65: Fix typo on variable name and really add custom options for dhcpdv6
-
- Applied in changeset pfsense-packages:commit:ad6e7cb89edbb0849eda4516cb0976fb877bc397.
-
- Reviewing http://seclists.org/fulldisclosure/2014/Jan/187 I can see that it's still possible to execute remote comman...
-
- we'll re-evaluate for 2.2
-
- Well it is not something to be fixed for 2.1.1 since its an OS issue rather than pfSense collection one.
-
- pkg parameter isn't encoded properly, it's possible to inject javascript code:
https://ip/pkg_mgr_install.php?mode... -
- The CSRF protection doesn't work on the package manager as it takes the parameters to install/uninstall/reinstall pac...
-
- There is no output encoding for the logfile variable, which leads to two reflected XSS point in the file snort_log_vi...
-
-
-
- 02:11 PM Revision acbab51a: Use htmlspecialchars(), a better solution for #2952
- 02:11 PM Revision a8495e50: Grab exec result just to be careful
- 02:11 PM Revision f458b2cb: Use htmlspecialchars(), a better solution for #2952
- 02:11 PM Revision e4a4ec89: Grab exec result just to be careful
-
-
-
-
-
- Next build will be with previous drivers which are more stable.
-
- Enhanced validation of general DNS servers and gateways
- 12:00 PM Revision cd5d6241: Enhanced validation of general DNS servers and gateways
-
-
-
-
-
-
-
-
-
-
- Applied in changeset commit:838e1f6342b42c52e21d11942e35561c25194c1d.
-
- Applied in changeset commit:bd942860594ecf3383ac39eb203ce3c73d4c59d2.
-
- Applied in changeset commit:2b2d0d545d01a9b21d4350908e73c6ce5b3e1d22.
-
- Applied in changeset commit:11ad160eae8e9d4e17df6462a1975a36faa1abd8.
-
-
- Put this to feedback since the changes will be made when CP functions get merged as system functionality.
-
- Applied in changeset commit:fb92e33201d5572530c8cdaa75635b750a13a4db.
-
- Applied in changeset commit:6191b3215c4e10bfe98e196291c864fb1db3d233.
-
-
- Enhanced validation of general DNS servers and gateways
-
- XHTML Compliance
- 07:22 AM Revision 4c0c5365: XHTML Compliance
- Filter Reload Status
Mark script as CDATA section to avoid expansion of the begin tag entity (<). -
- A sample package xml (a bit different from my version: I had to prepare a local repository)...
-
- I wrote a simple webconfigurator script from scrath for ladvd (that I prefer over openlldp because it supports also c...
-
- Applied in changeset commit:e8b05b83ed12ae7f65021c14686826b5aac96e00.
-
- Applied in changeset commit:bae729da39079601b262e805a34d3818c3b994dc.
-
- Can you please confirm this happens with latest 2.1.1?
If yes can you post your config.xml? -
- I cannot reproduce this.
And there is already code taking care of this since:... -
- This was related with issues of pfSctl which have been fixed since.
-
- Applied in changeset commit:378296af776e28c47652fd1268708be73f5f19ad.
-
- Applied in changeset commit:bd369bcfb4499cc91f7de090dbe67daefc635f64.
-
- Applied in changeset commit:2b76f145e40e47d06c7441ae8a419aeae9cc811b.
-
- Applied in changeset commit:74a40221d6ad7611bc6182aa506c5d6f5cee8edf.
02/16/2014
-
10:03 AM Bug #3455 (Closed): Selecting interfaces for DNS forwarder breaks auto-update
- An interesting intersection of two features...
If the local DNS forwarder is the first DNS server pfSense queries (p... -
06:40 AM Bug #3447: pfSense 2.1 Captive Portal RADIUS Accouting records not sent to RADIUS Server
- Changing to code in captiveportal_disconnect_client() to use column 9 was a bit of a fluke as that column just happen...
02/15/2014
-
- I have local users that are just for OpenVPN authentication. They just have access to the System: User Password page,...
- 09:24 PM Revision 6aa8b0de: XHTML Compliance
- Filter Reload Status
- 04:04 PM Revision df4471e2: Improve processing of DNS server changes
- What a pain this was. The user can blank out a DNS server from a position in the middle of the list. e.g. they had al...
-
- XHTML Compliance
-
09:12 AM Feature #3453 (Duplicate): Management GUI (lighttpd) interface binding control
- Add configuration option to allow/prevent lighttpd from binding to certain interfaces.
In a highly secure environm... - 07:14 AM Revision 00537a6b: XHTML Compliance
- System Logs Wireless Tab
- 07:11 AM Revision 37227fbc: XHTML Compliance
- System Logs Routing Tab
02/14/2014
-
11:49 PM Bug #3384: NTPd should deny service if the packet spacing violates the lower limits specified in the discard command (CVE-2013-5211)
- Having limited enabled by default is not appropriate, and it shouldn't be the case.
Having the option to turn it o... -
- XHTML Compliance
- 05:50 PM Revision fd889d72: XHTML Compliance
- Status DHCPv6 Leases
-
05:04 PM Bug #3451: Pfsense 2.1 Captive Portal Proxy Transparent
- That? Using authenticated proxy?
I think that and a failure of CP when transparent proxy -
- there are options to work around that
-
- In pfsense 2.1 using captive portal voutcher with transparent proxy to set proxy desktop browser captive portal login...
-
-
04:02 PM Bug #3421: dhcpv6 server Netboot/next-server causes dhcpv6 not to start, and reports an error message.
- Agreed, I think the following was also required to make it work, as seen in the above dhcpv6.conf...
-
-
-
- 01:19 PM Revision fe640345: Abort installation when pbi_add fails
-
12:40 PM Bug #2952: Unvalidated input during system_firmware_check.php
- I'd advocate a more appropriate fix than addslashes() for this - slash-escaping is not sufficient to protect against ...
-
- Applied in changeset commit:d210dddff39462019bc9b349cb3322a92d88feca.
-
- Applied in changeset commit:dbfa041c1024edf6836058147714cca89267f8f0.
- 12:24 PM Revision d210dddf: Fix #2952, escape necessary chars to avoid xss injection
- 12:24 PM Revision 429f454d: Respect g['tmp_path']
- 12:24 PM Revision 5d56f235: Use https to get updates, it helps #2952
- 12:23 PM Revision dbfa041c: Fix #2952, escape necessary chars to avoid xss injection
- 12:23 PM Revision 5f1c154d: Respect g['tmp_path']
- 12:04 PM Revision 52acb1ff: Enhanced validation of general DNS servers and gateways
- 10:19 AM Revision aea33635: Add https to update URLs and replace RELENG_8_3 by RELENG_10_0
- 09:33 AM Revision 7d437401: Merge pull request #916 from N0YB/RELENG_2_1
- XHTML Compliance
- 09:11 AM Revision d6e58836: XHTML Compliance
- Status DHCP Leases
-
- XHTML Compliance
- 05:41 AM Revision 909a3e55: XHTML Compliance
- Create an empty row in tbody if there are no log entries displayed.
- 05:19 AM Revision c5523ea6: XHTML Compliance
- Create an empty row in tbody when there are no firewall log entries displayed.
02/13/2014
-
05:59 PM Bug #3450 (Rejected): DHCPv6 Lease Status shows no Leases
- Viewing DHCPv6 Leases under the Status menu shows no active or configured leases, despite multiple devices on LAN hav...
-
- Another one :)
duckdns.org:
https://www.duckdns.org/update?domains=exampledomain&token=<token>
More info: https:... -
- and there is also a forum request to add zonomi.com
https://forum.pfsense.org/index.php/topic,72326.0.html
so perha... -
09:13 AM Feature #3448 (Needs Patch): add additional dyndns providers dyndns.fr, dyndnspro.com, dynamicdomain.net
- Please add dyndns.fr , dynamicdomain.net and dyndnspro.com in the dynamic dns (dyndns) dns
system.
Urls are :
... -
- IE8 on XP (pause for laughter) does not respect the JavaScript that disables the CIDR field when editing a host alias...
- 11:32 AM Revision 6635f5b9: Abort installation when pbi_add fails
-
- because that's the inside of the tunnel, your WAN graph is the outside.
-
03:34 AM Bug #3287: RRD. No IPv6 data.
- Chris Buechler wrote:
> not a bug, in that circumstance there is no v6 traffic on your WAN. It's all encapsulated in... -
- Change string to "Maximum new connections per host / per second(s)"
-
- Code in /etc/inc/cativeportal.inc is referring to the wrong columns in the array returned by captiveportal_read_db()....
-
- Every morning my pfsense synchronizes with a master timeserver on the internet. The ntpd is taken down while synchron...
02/12/2014
- 11:10 PM Revision d5bdbe0c: Change string to "Maximum new connections per host / per second(s)"
- Clarifying the setting's meaning.
As suggested by forum member "Senser" on
https://forum.pfsense.org/index.php/topic... - 02:08 PM Revision 25333e5a: Obsolete old ipsec tools files
-
-
-
-
-
-
-
-
04:53 AM Bug #3176: Hosts file corrupted when using "Register DHCP leases in DNS forwarder"
- I'm seeing this too (on 2.0). While the corruption is happening, there are two /usr/local/sbin/dhcpleases processes r...
-
02:20 AM Bug #3223: pfr_unroute_kentry: delete failed and freeze
- Sorry i forget this story. But yes I have very very big tables in my setup where i have this trouble.
But i had some...
02/11/2014
-
- I realized how to make the Filter: All and Remote options actually work again in 2.1.1. That code was committed a cou...
-
- FYI if you use ...
-
- It works as it's supposed to. That's connections established by, or from, the firewall itself, not traffic through it...
-
-
- this was confirmed fixed pre-2.1 release. Does your /boot/loader.conf file contain the following line? ...
-
- I believe we have adequate solutions in place here, and having discard enabled by default doesn't seem to be appropri...
-
- has this ever worked? Offhand I can't recall seeing anyone doing that.
-
- the third bullet point is the same cause as #3394. The fix for that might fix everything else you've noted here. Can ...
-
- Ermal committed a fix for this in dhcp6c that was causing radvd to inherit its socket.
-
- not a bug, in that circumstance there is no v6 traffic on your WAN. It's all encapsulated in v4 at that point.
- 02:31 PM Revision 5833def1: Fix symlink calls adding full link name, it fixes issue reported at https://forum.pfsense.org/index.php/topic,72405.0.html
- 02:30 PM Revision 80d708de: Fix symlink calls adding full link name, it fixes issue reported at https://forum.pfsense.org/index.php/topic,72405.0.html
-
- Yes, this works, thank you:...
-
-
- Fixed for 2.1 as part of commit:f188be51ae242a6de7f99b0c6206ec24d5296af4
-
- Fixed as part of ee41ab022d92cf7d0a1b75e1d85aca7162648292
-
- via Brian Candler on mailing list.
When creating a network alias which contains an IPv6 address, some additional ... -
- To sum this up, I posted about the mess at the forum: https://forum.pfsense.org/index.php/topic,72418.0.html
Addit... -
- thanks
-
- Fix was merged in 56e75b0. Thank you!
-
-
-
-
-
-
-
08:53 AM Bug #3445 (Resolved): Proxy URL behaviour for package list - trailing slash
- In the System -> Advanced -> Miscellaneous settings, where you enter the proxy URL, if you have a trailing slash then...
-
- Check for tmp captiveportal dir before making it
-
04:54 AM Bug #3443: run -- Ralink Technology USB
- I am wrong, i tested it with the tow options "Yes"
and the driver loaded and worked fine untill i connect my self t... -
- Mr.Chris as it is said in the FreeBSD Kernel Interfaces Manual
[[http://www.freebsd.org/cgi/man.cgi?query=run&apropo... -
- The run driver is included. It appears it doesn't work with your card. Probably no solution to that until our 2.2 rel...
-
- *NAME*
run -- Ralink Technology USB IEEE 802.11a/g/n wireless network device
*SYNOPSIS*
To compile thi... - 03:05 AM Revision 6240ba7b: Check for tmp captiveportal dir before making it
- In forum: https://forum.pfsense.org/index.php/topic,72483.0.html
Warning: mkdir(): File exists in /etc/inc/system.inc...
02/10/2014
-
- If stunnel is technically designed as two sub=packages (stunnel and stunnel_certs) then the issue may be that on inst...
-
- Pfsense 2.1.1beta, installed Stunnel, but any attempt to add either a first tunnel or a first cert consistently cause...
-
-
-
- Fix for #3416
-
- Correct javascript error which prevents PPP/PPPoE per-link settings from
being displayed (bandwidth, MTU, MRU, MRRU). -
- FYI: Still happens on a current build.
FreeBSD pfs22.local 10.0-RELEASE FreeBSD 10.0-RELEASE #0 d44ce30(releng/10.... -
- Releng 2 1 Standardize LAN net display
- 11:06 AM Revision ad9f79d3: Standardise LAN net display
- 11:02 AM Revision 2e769d69: Standardise LAN net display
- 11:00 AM Revision 50e10c80: Standardise LAN net display
- for 2.1.1
- 10:54 AM Revision 6901d6af: Merge pull request #909 from phil-davis/RELENG_2_1
- Releng 2 1 Return all stats when all or remote is selected on Traffic Graph
- 10:45 AM Revision 54995d41: Reorder Traffic Graph filter options so Local is default
- 10:43 AM Revision 188a4d55: Return all stats when all or remote is selected on Traffic Graph
- and make the default query return "Local" traffic.
- 10:31 AM Revision 086191ba: Merge pull request #906 from phil-davis/master
- Return and filter appropriately when all or remote is selected on Traffic Graph
- 10:26 AM Revision 4b5554a8: Merge pull request #908 from N0YB/XHTML_Compliance_RRD_Graphs
- XHTML Compliance - RRD Graphs
- 03:21 AM Revision 18ed5f7d: XHTML Compliance - RRD Graphs
- Close input tag
02/09/2014
-
- 05:24 AM Revision fa6af314: Make Local the default filter for Traffic Graph
- to preserve the previous standard behavior that shows "Local" when Traffic Graph starts.
- 05:21 AM Revision 737aef33: Make Local the default filter for Traffic Graph
- to preserve the old behavior, that it shows "Local" traffic when first started.
02/08/2014
- 03:41 PM Revision 5177b583: Return all when all or remote is selected on Traffic Graph
-
- XHTML Compliance - RRD Graphs
- 07:05 AM Revision c7a1d428: XHTML Compliance - RRD Graphs
-
05:51 AM Feature #3426: NanoBSD shorter F1 boot prompt display
- In pfsense-tools / builder_scripts / builder_common.sh, line #2202
@boot0cfg -B -b ${CLONEDIR}/${NANO_BOOTLOADER} ... -
- Forgot the forum thread; see https://forum.pfsense.org/index.php?topic=51489.0
-
- On trying to enter a message with diacritics (e.g. ěščřžýáíéúů) on a CP Zone - Vouchers - Invalid Voucher Message/Exp...
02/07/2014
- 08:11 PM Revision d4603714: Replaced gethostbyname() with gethostbynamel() to get a list of all IPs associated with the dns name and add them to the allowed list
- 05:55 PM Revision c1d59c7a: Enhance interface gateway data entry descriptions
- 05:54 PM Revision 6002c9be: Enhance interface gateway data entry descriptions
- 05:51 PM Revision b36aad25: Enhance interface gateway data entry descriptions
- 05:50 PM Revision 974fb32c: Enhance interface gateway data entry descriptions
- 05:48 PM Revision 657eabdf: Enhance interface gateway data entry descriptions
-
-
-
-
- 02:55 PM Revision eb83317a: s/http/https/ for doc.pfsense.org
- 02:54 PM Revision 2fede2d9: s/http/https/ for doc.pfsense.org
- 12:41 PM Revision e5b5e29c: Add support for signed PBI, help ticket #3365:
- - Add an option to allow user to accept unsigned packages
- The only missing part is public key, that needs to be add... -
- Standardise LAN net display
- 10:03 AM Revision 447ad2f5: Standardise LAN net display
- 09:58 AM Revision 33b1bc17: Standardise LAN net display
- 09:54 AM Revision 04d270fe: Standardise LAN net display
- On the main firewall rules multi-rule display it shows "LAN net" "WAN net" etc. But on the edit screen it shows "LAN ...
-
-
- I think that bug was introduced since 2.1-RELEASE and perhaps it is in that 2.1p1 NetGate version. It has since been ...
02/06/2014
-
-
-
06:33 PM Bug #3440 (Resolved): Aliases, Networks and the vanishing subnets inside of Google Chrome
- When creating an Alias for a network in Google Chrome on OS X Mavericks I have the option of choosing a CIDR represen...
-
- Thanks, works now. ;-)
-
- Applied in changeset commit:d292bd8d60b1e01702b3654e8bb3ac8fd66c88e6.
-
- Applied in changeset commit:8d112d7d51fd55e73a171615b9c075cd04a739d8.
-
- ...
-
- OK, this patch is irrelevant in the light of commit e2ffc9d which replaces dig with drill. AFAICS, drill doesn't have...
-
- OK, so I have narrowed this down.
* If I set System > General Setup > DNS Servers to just 8.8.8.8 or 8.8.4.4, it w... -
- Here you go - plain dig, dig asking for A, dig asking for AAAA. Of course, what's of interest is what's in the "ANSWE...
-
- can't replicate. What does the output of dig show for psg.com for you?
-
01:39 PM pfSense Packages Bug #3439 (Closed): TFTP - cannot start or restart from Status -> Services
- TFTP package installs fine, and is started upon installation.
However, it cannot be restarted or started after sto... - 12:37 PM Revision 7b5a22ab: Remove PBI scripts since it'll be installed dynamically by tools
-
- Minor issue: when you configure management to be HTTPS, the port 80 redirector only works on the IPv4 address and not...
-
- It allows to use existing configurations on xml to generate StrongSWAN configurations.
So its only IKEv1
* Missing s... -
09:36 AM Feature #3199: Option to accumulate or not IP addresses in Alias table of FQDNs
- I don't see any reason to accumulate addresses at all. DNS A records for an FQDN return all valid addresses at once. ...
-
02/05/2014
-
- No no, I get what you're saying, and I don't disagree with it at all in the correct scenario.
But the person who o... -
- Keith, this iburst stuff is suggested on ntp.org site, suggested on tons of distro-specific docs, default in lots of ...
-
- Apparently got way too messed up. I reimaged the box, applied the above patch, now both unbound and nut install prope...
-
- No, that did not work... Still heavily messed up:...
-
- Or you can apply this mannually and reinstall the packages: https://github.com/pfsense/pfsense/commit/dab351f359bb451...
-
- BTW, screwed unbound as well... and probably a whole lot more. :-(
-
- Try to reinstall package with tomorrow's snapshot and let me know if it's fixed or not.
-
- Cannot save nut setting no matter what....
- 02:30 PM Revision dab351f3: escapeshellarg() is not required here
- 02:29 PM Revision b3e1ccb5: escapeshellarg() is not required here
- 01:58 PM Revision 5293c5c7: Teach php-fpm about our required environment path
- 01:50 PM Revision 275f4b5a: Revert "Set PATH before call pbi related binaries"
- This was pushed by mistake
This reverts commit 4c9bda43f5bcfd5ba9812c84199bbe4f1f158960. -
- I just came to request the same thing. Although I was thinking of a simple check box that said subtrack instead of a...
-
-
- Alias names are not hostnames, they are pf macro names which may not contain hyphens.
-
- When trying to add hostname foo-bar1 under Firewall > Aliases
"The following input errors were detected:
The al...
02/04/2014
-
10:31 PM Bug #3432: PPPoE (WAN) reconnected, WAN does not updated
- Ok, looks like it was due reported via forums apinger bug
@
Feb 5 06:30:00 apinger: alarm canceled: WAN_PPPOE(21... - 08:39 PM Revision bc30d9c5: Silent recently added symlink() calls
- 08:38 PM Revision b3cbb077: Fix some wrong escapeshellarg() calls
- Conflicts:
etc/inc/filter_log.inc
etc/inc/pkg-utils.inc - 08:32 PM Revision 38207029: Silent recently added symlink() calls
- 08:14 PM Revision 7b27b18b: Fix some wrong escapeshellarg() calls
-
- Hey, that works. I was saying it seems like a lot from the standpoint of a *public* NTP server. Clearly if you have n...
-
- _every 5 seconds OR twice in a row. Seems like a lot to me_
Uhm, not really a *lot* when iburst is used. (8 pack... - 07:07 PM Revision af7a8373: Simplify logic calling grep less times, as done on mail_reports.inc on 2c6efc9
- 07:06 PM Revision 7b7ad7f6: Simplify logic calling grep less times, as done on mail_reports.inc on 2c6efc9
- 07:02 PM Revision 4bdb08e3: Use unlink_if_exists or @unlink to avoid PHP errors when file doesn't exist
- Conflicts:
usr/local/www/firewall_aliases_edit.php - 07:01 PM Revision 552f5a6a: Use unlink_if_exists or @unlink to avoid PHP errors when file doesn't exist
-
- Added previously missing DSCP VA (requires kernel patch patch submitted ...
-
- Added previously missing DSCP VA (requires kernel patch patch submitted ...
-
03:15 PM pfSense Packages Bug #3434 (Resolved): widentd
- pfSense 2.1, 64bit, widentd 1.03_1
The 'Listening interface' selections don't work the way I expect. I'm testing f... - 02:47 PM Revision 1eb03024: Add escapeshellarg() calls on exec parameters. While I'm here, replace some exec() calls by php functions like symlink, copy, unlink, mkdir
- Conflicts:
usr/local/www/diag_logs_vpn.php
usr/local/www/firewall_aliases_edit.php
usr/local/... - 02:43 PM Revision 46b12609: Add escapeshellarg() calls on exec parameters. While I'm here, replace some exec() calls by php functions like symlink, copy, unlink, mkdir
- Conflicts:
etc/inc/filter_log.inc
etc/inc/interfaces.inc
etc/inc/pfsense-utils.inc
et... - 02:36 PM Revision 44f2ef9b: Fix an obvious typo on var name
- 02:36 PM Revision 0ae6d916: Use php function to get hostname instead of exec()
- 02:36 PM Revision 93e350f5: Add path for sysctl, also use -n param instead of awk
- 02:36 PM Revision 4dc89803: Simplify logic
- 02:35 PM Revision 645018b2: Use php function to get hostname instead of exec()
- 02:35 PM Revision 4744c6e4: Add {} between variables inside quotes
- 02:35 PM Revision 7ea30d60: Use php function to get hostname instead of exec()
- 02:35 PM Revision eda41792: Add {} between variables inside quotes
- 02:34 PM Revision d31ca336: Add escapeshellarg() calls on exec parameters. While I'm here, replace some exec() calls by php functions like symlink, copy, unlink, mkdir
- 02:34 PM Revision 39ed87e5: Fix an obvious typo on var name
- 02:34 PM Revision 873c1701: Add escapeshellarg() calls on exec parameters. While I'm here, replace some exec() calls by php functions like symlink, copy, unlink, mkdir
- 02:34 PM Revision 4f188f54: Use php function to get hostname instead of exec()
- 02:34 PM Revision 1d9b51c6: Add path for sysctl, also use -n param instead of awk
- 02:34 PM Revision 306f8556: Simplify logic
- 02:34 PM Revision f1777174: Use php function to get hostname instead of exec()
- 02:34 PM Revision 8340d956: Add {} between variables inside quotes
- 02:34 PM Revision e6867c81: Use php function to get hostname instead of exec()
- 02:34 PM Revision 3f4bd83b: Add {} between variables inside quotes
- 02:34 PM Revision 4c9bda43: Set PATH before call pbi related binaries
- 01:31 PM Revision 7962a55f: Added previously missing DSCP VA (requires kernel patch patch submitted by me)
- 01:30 PM Revision 28c49959: Added previously missing DSCP VA (requires kernel patch patch submitted by me)
-
- Trying to add a gateway address FE80::5:73FF:FEA0:2 (which is a Cisco HSRP address, copy-pasted directly from output ...
02/03/2014
-
- I am connected to ISP via PPPoE with dynamic IP. WAN is configured as PPPoE and this configuration was working about ...
-
- The default values with the "limited" parameter specified only allow a client to NTP sync once every 5 seconds OR twi...
-
- Using limited as-is denies access to NTP clients, so this change is not viable. If you try to sync time against ntpd ...
-
08:09 PM Bug #3431 (Closed): IPSec PSK Characters Error
- My first report, hope everything is o.k. with it...
Using german Umlaute in the PSK like ö, ä, ü or ß leads on 2.1... -
-
- 11:17 AM Revision cf3189ff: Merge pull request #897 from N0YB/RELENG_2_1
- XHTML Compliance - Status: System logs: Firewall
-
- If you make a pull request in GitHub it makes it really easy for the devs to take a look and commit the fix.
-
01:31 AM
Bug #3429: Modify anti-lockout pf rule to use "no state"
- May I ask why? I have been running those filter rules (for SSH) for several years on an OpenBSD gateway without any p...
Also available in: Atom