Activity
From 06/08/2014 to 07/07/2014
07/07/2014
- 11:13 PM Revision 7b15d229: Avoid reseting firewall hostname by WAN DHCP. It should fix #3746
- 11:12 PM Revision 2d34e81a: Avoid reseting firewall hostname by WAN DHCP. It should fix #3746
- 11:06 PM Revision 971de1f9: Convert almost all /sbin/sysctl calls to php functions
-
09:54 PM Bug #3558: Schedule States in System - Advanced - Misc not working
- @Phillip: I confirmed that your fix was in my test unit. The states still do not get cleared.
There are some subt... -
06:29 PM Bug #3744: CARP IPs stuck in INIT on 2.2
- Also sounds like a corrupted system
-
- This also sounds like a corrupted system, CARP IPs are on the same interface on 2.2, like this output:...
-
- Are racoon binaries available after upgrade? They should be removed by pfSense.obsoletedfiles. Based on the other tic...
-
- Applied in changeset commit:7b15d22967a9f9fefe7b8b11fa2d68c762c55219.
-
- Applied in changeset commit:2d34e81a9f80f556fa28d3a5ef30a7a7cad5285a.
-
01:33 PM Bug #3746 (Resolved): Firewall hostname being reset by DHCP WAN client
- If the firewall has a DHCP WAN, and the DHCP server on WAN supplies a hostname to the client, the firewall will take ...
-
- What is the snapshot timestamp? I tested on Sun Jul 06 14:26:03 CDT 2014 and it's ok
About the sshd keys being reg... -
- What is the snapshot timestamp? I tested on Sun Jul 06 14:26:03 CDT 2014 and it's ok
-
- What is the snapshot timestamp? I tested on Sun Jul 06 14:26:03 CDT 2014 and it's ok
-
- What is the snapshot timestamp? I tested on Sun Jul 06 14:26:03 CDT 2014 and it's ok
-
06:08 PM Bug #3369: Captive vouchers expire too quickly
- Wolfgang Niggl wrote:
> I have the same problem. No solution or is it solved in 2.1.1 ?
> Where in the code could b... -
05:54 PM Bug #3187: LiveCD boot issue on multicore systems.
- I can't speak to having tested this _exhaustedly_ this time, since two out of four of the original listed systems are...
- 03:52 PM Revision 79cd8239: Fix sysctl name
- 02:05 PM Revision 82f75815: Add set_single_sysctl(), a wrapper to set_sysctl() to make it simple to set value of a single sysctl
- 01:57 PM Revision ff23363d: Add get_single_sysctl(), a wrapper to get_sysctl() to make it simple to get value of a single sysctl
- 01:52 PM Revision aae16684: Fix indent
- 11:42 AM Revision 42bb1bee: Remove extra spaces and tabs
-
- Trying to enable traffic shaping on VLANs with 2.2 does not work. The GUI allows them to be selected but pf generates...
07/06/2014
-
11:41 PM Bug #3728: Cancel Button Doesn't Work - Firewall Aliases Edit
- Fix confirmed in 2.2.
Still broken in 2.1.4.
- 07:25 PM Revision e7f65689: Remove extra quote and fix syntax
-
05:24 PM Bug #3744 (Rejected): CARP IPs stuck in INIT on 2.2
- On at least 32 bit. ...
-
- Where CARP IPs are in INIT (at a minimum), Status>CARP shows nothing under the "Status" column. ifconfig: ...
-
- After upgrade from 2.1.4, on at least 32 bit, SSH is running properly but sends a RST back when attempting to connect...
-
- Partial state table dump....
-
- Something not right with IPsec after upgrade to 2.2 (and maybe when starting clean on 2.2, haven't entirely confirmed...
-
- "netstat -an" for instance in prior versions and stock FreeBSD lists "Active Internet connections" among the output. ...
-
- results in: ...
-
- what's in the table works as configured, it's likely the way outdated country data in the pfblocker package and/or a ...
-
01:31 AM Bug #3624: "ppp: OpenConfFile: Can't open file '/var/etc/mpd_wan.conf': No such file or directory"
- Forgot to say, I was having this problem on 2.1.3-RELEASE (amd64) but now am having the same problem on 2.1.4-RELEASE...
-
- Have tried the suggested work-around but it doesn't work for me. In case my symptoms are different I'm adding a short...
07/05/2014
- 09:00 PM Revision 64746cf6: use HTTPS for dyndns providers that support it
- 09:00 PM Revision 9b8c7295: use HTTPS for dyndns providers that support it
-
04:33 PM Bug #3723: URL Table based rules may pass blocked IP
- As an FYI, The pfBlocker Country Codes has been obsolete for almost two years now.
It still shouldn't be allowing ... -
02:43 PM Bug #3554: apinger and OpenVPN: Gateway down after OpenVPN client service restart
- Cullen Trey wrote:
> Hi,
>
> it seems to happen, if the openvpn interface comes up but encounters an error: in my... -
03:57 AM
Bug #3692: apinger loss % gets stuck
- I'm having the same issue with 2.1.4.
I have to restart the entire pfsense box to correct it, just restarting the ... -
01:16 AM Bug #3737 (Duplicate): Incoming VLAN traffic fails to reach VLAN interface if PCP not 0
- On ESXi, incoming VLAN traffic fails to reach the related VLAN interface if PCP is set to anything else than the defa...
07/04/2014
-
07:53 PM Revision 3fe260c2: Use a php function rather tan using exec. Suggested-by: garga
-
-
-
- Fix confirmed in both 2.1.4 and 2.2 Alpha. Thanks
- 12:44 PM Revision 2e906a1a: Add one more seatbelt to prevent tar to attempt to overwrite /dev items
-
07:23 AM Bug #3736 (Resolved): No static IPv6 address for WAN interface in Dashboard for PPPoE+static IPv6
- The IPv6 is not displayed in the Dashboard page when using a static IPv6 on WAN interface.
Steps for reproducing t... -
- No default route is created when using a static IPv6 on WAN interface.
Steps for reproducing the issue :
- enable... -
06:43 AM Bug #3678: Kernel panic: "Bogus interrupt trigger mode" on Intel J1900
- I am not entirely sure...
Chris Buechler seemed to know a little about this, as stated above "This has been worked... -
04:37 AM Bug #3678: Kernel panic: "Bogus interrupt trigger mode" on Intel J1900
- How do we get it in the next update?
07/03/2014
- 09:07 PM Revision be0af33e: Add missing $g to global, as noted on pull request 1249
-
- it's possible. That's a support request, which isn't appropriate here, please use one of our available support resour...
-
12:32 PM Feature #785: DNS servers over gateways
- Chris Buechler wrote:
> yes that's all possible. You can do that manually as well, with floating rules.
I just ga... -
- This is now in current snapshots and may be good enough for 2.2.
I did find that the XML_RPC code is in need of an... -
- The current XML_RPC code from PEAR in /etc/inc/xmlrpc_client.inc and /etc/inc/xmlrpc_server.inc is a bit behind. XML_...
-
12:52 PM Bug #1943: PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
- One of my sites that relies on radio-based Internet connectivity is experiencing this misbehavior. We are very, VERY...
-
-
- I am no longer seeing the console input in the logs on current snapshots, this appears to be fixed now.
- 12:26 PM Revision d461583b: Change Cancel button to call history.back() as done in Firewall Rules, the current method has issues with IE 11, it should fix #3728
-
- Applied in changeset commit:d461583b18b84b47ba0a398b9138085fa8eb47c8.
-
- Just for info, no change with release 2.1.4
As said above, the workaround did not make it into this release. -
- Hi Frenel
How has the GB J1900n-d3v been going? I also managed to get pfsense installed, but if the system reboots... -
04:18 AM Bug #3733 (Resolved): Certificate manager doesn't allow wildcards in Subject Alternative Names
- Hi there,
Having a wildcard certificate in the DNS Subject Alternative Name is valid, but the pfSense webinterfa... -
- The source is not closed, it's under an open source license and anyone can obtain it.
https://forum.pfsense.org/inde... -
02:47 AM Feature #3732 (Rejected): Request: a small info about the pfSense kernel build - to help build 3rd party software for pfSense
- For building certain 3rd party software - For example the "virtualbox-ose" port. Or "cuse4bsd".
These programs (an... -
- I am aware that ZFS is a storage feature and not required by Router / Firewalls. However to include gives more option...
07/02/2014
-
09:46 PM Bug #3147: Adding new interface can cause issues
- The issue affects more than just VIPs. Whatever auto-populates the 'Network Port' field after the new Interface is a...
-
08:46 PM Bug #3558: Schedule States in System - Advanced - Misc not working
- @Richard: I fixed up the timing of the schedule end, so now the state clearing code should be executed at the correct...
- 08:24 PM Revision d4b1e549: Back to cons25 for now since we found some issues with xterm on serial console
- 08:24 PM Revision 23c01a69: un-obsolete gettytab.bak
-
- Our current XMLRPC client version doesn't have support on its own to validate this in a way we can use to test in a u...
-
-
- Tried again on 2 machines. Neither works. Though the other (NAT & Rules) edit cancel buttons work fine. But the Al...
-
- It works fine for me, on 2.1.4 and 2.2 snapshot
-
09:35 AM Bug #3730 (Resolved): Router advertisement advertises gateway address as dns server even if the dns forwarder is disabled
- When using 6to4 on wan and assigning an interface tracking that, the radvd advertises the interface address as a dns ...
-
08:30 AM
pfSense Packages
Bug #3729 (Resolved): Bacula-client Services not running
- Version: 2.1.4-RELEASE (amd64)
Package: bacula-client 5.2.12_3 pkg v 1.0.3
The service was not running because th... -
- It was already fixed in commit:93f1d233b27d9aa3347050b2e7138660a23e28f9
-
- that is indeed an issue with FreeBSD 8.3, confirmed fixed in 2.2.
-
-
- was fixed in 2.1.4, ticket never got closed out.
07/01/2014
- 08:28 PM Revision 38c7d42e: Set proper serial parameters on boot.config and loader.conf for nanobsd without vga
-
- 05:11 PM Revision c5f9fb72: Make proper checks to check if we should or not enable serial console
- 05:11 PM Revision e6e3e0ee: Fix typo on var name
- 04:43 PM Revision 1053983c: Obsolete ttys_wrap and gettytab.bak
- 04:37 PM Revision edb4b657: Fix #3647 and other improvements:
- - Remove auto_login(), now gettytab is a constant file
- Add reload_ttys(), that will send a SIGHUP to init and make ... - 04:37 PM Revision 6f9a191d: Change default console from cons25 to xterm, while I'm here, simplify the check
- 04:35 PM Revision 7f394d3e: Stop calling auto_login() here since it's already called inside setup_serial_port()
- 04:35 PM Revision 3c72e984: Stop restoring gettytab.bak since it doesn't exist anymore
- 04:34 PM Revision d8f123b8: Sync etc/ttys with FreeBSD 10-STABLE, change default console for al.Pc and default serial for al.115200
- 04:33 PM Revision 025ad9ef: Sync gettytab with FreeBSD 10-STABLE, also reduce customizations, the only difference is al.Pc entry, for Pc with auto login
- 04:32 PM Revision a9e595cc: Remove unused function color()
- 04:31 PM Revision e6974dfe: Delete gettytab.bak and ttys_wrap, they are not needed anymore
-
04:10 PM Bug #3198: IPSEC, when nating to a different size subnet a invalid natting rule is made.
- I confirm this bug for 2.1.4
https://forum.pfsense.org/index.php?topic=78637 (in Spanish)
Difficult to understa... -
- Cancel button in Firewall Aliases Edit does not work.
-
- Applied in changeset commit:edb4b65732d76810e5610bcece85571f13969fc0.
06/30/2014
- 08:18 PM Revision 8ff231b4: fixes #3713
-
- Here is a workaround that works on 2.1.4-RELEASE (i386) for the benefit of those who find this bug report. (I acciden...
-
03:10 PM Bug #3727 (Resolved): PPP config loses "on-demand" setting when configured via interfaces tab
- I configured a PPP interface to run a verizon LTE modem plugged into a USB port. It is assigned as "WANVZ"
If I go... - 01:57 PM Revision c69e813c: Fix #3725:
- - Fix match_filter_field() and also simplify logic
- Fix $filterfieldsarray initialization
- Avoid to have double spa... - 01:47 PM Revision 939f4e39: Fix #3725:
- - Fix match_filter_field() and also simplify logic
- Fix $filterfieldsarray initialization
- Avoid to have double spa... -
12:54 PM Bug #3647: Serial console input is sent to system log as kernel messages
- It was happening with a recent snapshot on my 7551 at home as well.
-
- This is still happening on a current snapshot on my ALIX running NanoBSD on i386.
Serial terminal:... -
- I couldn't reproduce it on an updated VM running amd64 snapshot (Full install) from Mon Jun 30 05:10:01 CDT 2014
-
10:46 AM Bug #3726 (Not a Bug): Firewall Rule with Diffserv Code Point not matching properly
- I am using 2.1.4.
I have set up some simple traffic-shaping, and have several Floating firewall rules to send vari... -
-
- I updated to 2.1.4 a few days ago, and now I do not get this syntax any more.
Thank you!
James -
- Applied in changeset commit:c69e813c8420f2db40fcbd2f418cae8553852d66.
-
- Applied in changeset commit:939f4e39278d8acc1709bae76f51ec6551091fec.
06/29/2014
-
- The Pass, Block, Reject and Interface filters in the Firewall Logs Widget are not working/filtering.
This issue is... -
01:06 AM Bug #3724 (Resolved): Jumbo frames not being honoured with vmxnet3 driver
- Hi
I tried asking in the forum but I guess its not a common problem.
I will very happily try to help track this...
06/28/2014
-
10:30 PM Bug #475: L2TP is not functional in the way users will expect
- Slava Bendersky wrote:
> Just stop using racoon ? Why not start using libreswan base on netkey or klips. Libreswan m... -
- Why do not stop using racoon ? Why not start using libreswan base on netkey or klips. Libreswan match match more suti...
-
- Unfortunately, yes. I found this on a 2.1.4 image while confirming that the other bugs had been fixed.
-
09:01 AM Bug #3723 (Rejected): URL Table based rules may pass blocked IP
- I've noticed that bug few days ago when was inspecting my mail server. My first block rule was using an URL table (a ...
06/27/2014
-
- does this still happen with the recent GUI fixes in 2.1.4?
-
- I can't assign this to anyone unless we have hardware in-house.
- 07:21 PM Revision 6d74e3e9: Merge pull request #1244 from phil-davis/patch-11
- 02:56 PM Revision 0ffc4a7b: Add a BETA key for PBI signature check, this will be replaced by the final one before RELEASE. Ticket #3365
- 02:44 PM Revision 485cc436: Fix dir name
-
- I believe they are all fixed
-
- As the text under the option says, place a semicolon (";") between statements.
-
08:23 AM Bug #3722 (Rejected): OpenVPN Client Especific Overrides Advanced field
- I have a problem after upgrades in "Client Specific Overrides".
In the "Advanced" field put two rules, where each...
06/26/2014
- 07:44 PM Revision 4887afa1: Set default serial speed to 115200 for 2.2, fixes #3715
- 03:24 PM Revision 2bf2a1c4: Fix a regression introduced on 8d6c5f6621 that broke CARP+IP alias
-
- Applied in changeset commit:4887afa18b1cef26ed28b44ded38afc8b344767b.
- 09:32 AM Revision 0ee60267: Handle no dhcpd settings when upgrading
- This minor fix was in master but not 2.1 branch. I noticed the warning message when doing a fresh install/test of 2.1...
-
04:25 AM Bug #2038: Some 3G WANs on 2.0.x do not come up on cold boot
- Tried now with a ZTE MF668 it does start the u3g fine but it does not get an IP address from the mobile provider.
06/25/2014
- 03:18 PM Revision 4b167dcd: Merge pull request #1238 from DasTestament/master
-
- You must use the "Strict Interface Binding" option to force dnsmasq to change its binding in the way you describe. Ot...
-
10:46 AM Bug #3721 (Rejected): UDP port 53 is locked by DNS Forwarder even if interface is not selected
- Hello
Currently running the latest pfsense 2.1.3-RELEASE (amd64).
Currently I have some Virtual IPs setup for o... -
10:30 AM
Bug #3401 (Feedback): Openvpn Server IPV4 generating attribute TUN-IPV6 this right?
- Applied in changeset commit:b9e9903ddb21665023c9fcc241099476a42a9dbd.
-
- There was a little more info #3649 about this. Specifically, Ermal's comment on that ticket that "rtsold is not passi...
-
02:31 AM Bug #3720 (Resolved): Captive portal on httpS redirect to a http page
- When you set your captive portal to use httpS and set a after authentication url (redirect) to a http (not S) url, th...
06/24/2014
-
- 07:18 PM Revision b176474b: Update vpn_openvpn_server.php
- 07:15 PM Revision 4be2bfed: Update vpn_openvpn_client.php
-
-
- Just had this problem with a HUAWEI E1752 on cuaU0.0
running on a :
* 2.1.3-RELEASE (amd64)
* built on Thu May 0... -
- running a PC Engines APU
-
- I forgot to mention this is with a
2.1.3-RELEASE (amd64)
built on Thu May 01 15:52:13 EDT 2014
FreeBSD 8.3-RELE... -
- I had a similar problem with a HUAWEI E1752 after a cold boot.
Warm reboot works everytime.
Not sure what the p... - 03:06 PM Revision 0d26e77c: Merge pull request #1241 from Gertjanpfsense/master
- 03:00 PM Revision c15b5ed8: Fix dscp values and provide a config upgrade to fix values stored in config.xml. This is a proper fix for #3688
-
12:42 PM Revision 5a145a54: Delete README.md
- 12:27 PM Revision b1e8e675: Update openvpn.inc
-
08:23 AM Bug #3719 (Not a Bug): vmware cpu host extraordinary high usage
- pfSense is installed as VM in VMware ESXi (4, 5.1, 5.5), when pfSense is under high traffic (bandwidth or numerous co...
06/23/2014
- 10:26 PM Revision fbe0c5ff: Tidy up misc. XHTML
- "diag_dns.php"
Tidy up "equals sign"
"services_captiveportal.php"
Add space to OPTION tag
Update HTML Boolean operat... -
- Don't ask to select a zone if there is only ONE.
-
- 12:32 PM Revision 6c87714d: Add local/www to the list of directories that needs to be symlink'd to reduce PBI differences between 2.1 and 2.2
06/22/2014
-
- It will be easy for the devs to review this if you go to github - https://github.com/pfsense/pfsense - and make the c...
-
04:36 PM Bug #3716 (Resolved): Adding IPv6 alias to IPv6 CARP IP throws error - fix proposal attached
- Hi,
Adding an IPv6 alias to an IPv6 CARP IP throws the following error:
"...Could not find a matching real interf... -
- Hi,
I was configuring radvd on two back-to-back firewalls with an in-between subnet and I was missing the feature ... -
- Hi,
I had problems with Multi-WAN and two IPv6 tunnelbrokers - incoming traffic would "work" only when coming thro...
06/21/2014
- 09:23 PM Revision 1657cfd2: oops, that wasn't supposed to be removed.
- 09:16 PM Revision 60a5f9de: Use count($array) where applicable, instead of a $rowIndex increment.
06/20/2014
-
07:14 PM Revision 1a7ed9d0: Don't use pfsense name in comment
-
- 04:06 PM Revision 5b3c0116: Update openvpn.inc
- Added verbosity check in case when verbosity_level is absent in config.xml
- 03:59 PM Revision bfa22b15: Update vpn_openvpn_server.php
- removed comments
- 03:56 PM Revision 34c0adfc: Update vpn_openvpn_client.php
- removed comments
- 02:57 PM Revision 0e678da7: Update openvpn.inc
- Removed unnecessary "else {";
- 02:25 PM Revision efac3a13: Only include a scheduled rule if it is strictly before the end time
- The exact moment of the end time is the end of the schedule. We do not want to include a rule when filter_configure_s...
-
- 01:36 PM Revision 052dfa93: Remove extra data after space and fix pf rule syntax. It should fix #3688
- 01:35 PM Revision e792ac36: Remove extra data after space and fix pf rule syntax. It should fix #3688
- 12:36 PM Revision 1c9a521b: Merge pull request #1208 from razzfazz/nat_add_missing_protocols
- 12:35 PM Revision df203cb8: Merge pull request #1218 from razzfazz/nat_add_missing_protocols_master
-
- The default serial console speed should be changed to 115200 to be more in line with current hardware.
To ensure b... -
- The session cookie can end up being non-secure on HTTPS in a specific set of circumstances:
1. Set GUI to HTTPS
2... -
- Applied in changeset commit:efac3a1346867481d6cfcea62c131ad0c0de391b.
-
- Applied in changeset commit:a43c5bdea7ee07a5075d8c22a7a247424669e6f3.
-
- Applied in changeset commit:052dfa9346e716d63fbd85735c4a8784e6ed07e2.
-
- Applied in changeset commit:e792ac36324e3376763699344742d5dc49eab99c.
-
- Pull request merged
-
-
- Pull requests merged.
06/19/2014
- 07:29 PM Revision 96fcabaa: Replace some backticks by exec ans simplify commands
- 07:20 PM Revision 692c21fd: Remove more backtick abuse
- 06:58 PM Revision 3f0c20c3: Add -n for 2 remaining sysctl calls, also replace backtick by exec
- 06:57 PM Revision c69d32f6: Add full path for dmesg and replace backtick by exec
- 04:05 PM Revision 4f380b62: Remove also . and / from graph
- 04:04 PM Revision 902da388: Remove also . and / from graph
- 03:29 PM Revision bc27c6d1: Remove more backticks
- 03:26 PM Revision 57627d9f: Fix status_rrd_graph_img.php and also improve it:
- - Remove escapeshellarg that broke command line
- Only remove dangerous chars to avoid command injection
- Replace al... - 03:23 PM Revision 2d1e985d: Fix status_rrd_graph_img.php and also improve it:
- - Remove escapeshellarg that broke command line
- Only remove dangerous chars to avoid command injection
- Replace al... - 02:30 PM Revision bef10560: Make sure single quotes are encoded and avoid javascript injection
- 02:29 PM Revision daeab6c4: Fix indent and whitespaces
- 02:29 PM Revision 8aca755a: Make sure single quotes are encoded and avoid javascript injection
- 01:37 PM Revision cedd0705: Use CDATA for javascript
- 01:37 PM Revision 559929c2: Fix indent and whitespaces
-
01:29 PM Bug #3692: apinger loss % gets stuck
- I noticed this yesterday. For a period of time I had a bad episode of packetloss on a WAN gateway and even though th...
- 04:47 AM Revision a43c5bde: Only include a scheduled rule if it is strictly before the end time
- The exact moment of the end time is the end of the schedule. We do not want to include a rule when filter_configure_s...
-
- A response.... and the last gigabyte anything I ever buy!
"
Thank you for your kindly mail and inquiry. Accordi... -
- I doubt you'll get a reply in any reasonable amount of time from motherboard manufacturers, but maybe if enough peopl...
-
- yeah the 59 was originally added so you can do 23:59.
-
- and I think the "59" minute end time option is so that a schedule can go to 23:59 - there is no way to specify 24:00 ...
-
- where you actually have a block all rule, or no pass rules, connections cannot be established.
The pre-auth conne...
06/18/2014
-
- I looked at this a while ago and then had trouble replicating the problem. I suspect it only occurs when the filter_c...
-
- Still no reply from Gigabyte...
- 07:54 PM Revision aba02f65: Simplify logic, add some protection to user input parameters
- 07:39 PM Revision d1dda498: Simplify logic, add some protection to user input parameters
- 06:41 PM Revision f1a13a7f: Fix whitespaces and indent
- 06:38 PM Revision f334f8bf: Fix whitespaces and indent
- 04:46 PM Revision bef9f697: We need to allow subdirectories under /usr/local/pkg, here is the proper fix
- 04:46 PM Revision 811baa9b: We need to allow subdirectories under /usr/local/pkg, here is the proper fix
- 11:21 AM Revision 08f30320: Change the option for webconfig login autocomplete from opt-in to opt-out, also bump config version and write a function to keep the current status on upgrades
- 10:52 AM Revision e8abc4a7: Set 'Disable webConfigurator login autocomplete' as on by default
- 10:38 AM Revision 16789caa: Always set httponly attribute on cookies
- 10:38 AM Revision fa73c7cd: Always set httponly attribute on cookies
-
-
12:33 AM Bug #3707: pfsense-tools: No sync for > 1month between ESF-internal and git.pfsense.org
- Just to make sure things are as working as last week as per 18 june 05:30 UTC, the current commit I get is dated from...
06/17/2014
-
- I have logged a call with Gigabyte siting the BIOS ACPI issues and that F3 bios update does not address this problem....
-
07:58 AM Bug #3678: Kernel panic: "Bogus interrupt trigger mode" on Intel J1900
- Someone "pointed out":https://forum.pfsense.org/index.php?topic=72305.msg426782#msg426782 that this appears to be a B...
-
- Same problem here on the Gigabyte J1900N-D3V motherboard.
Also put some info up on this link on the forum:
https://... - 06:13 PM Revision 2b641a08: Protect servicestatusfilter parameter with htmlspecialchars()
- 06:13 PM Revision ce9d5d72: Protect servicestatusfilter parameter with htmlspecialchars()
- 05:53 PM Revision e4921058: Protect rssfeed parameters with htmlspecialchars()
- 05:53 PM Revision 860b102a: Protect rssfeed parameters with htmlspecialchars()
- 05:28 PM Revision 526f5b11: Add comment I forgot on last commit
- 05:27 PM Revision 3034b371: Add comment I forgot on last commit
- 05:27 PM Revision 8588095f: Re-generate session ID on a successful login to avoid session fixation
- 05:26 PM Revision ff9b30ec: Re-generate session ID on a successful login to avoid session fixation
- 04:47 PM Revision 62480a44: Avoid directory traversal on restorefullbackup
- 04:47 PM Revision 5de32d52: Avoid directory traversal on restorefullbackup
-
04:37 PM Revision b67cdd05: Fix core dump on viewing invalid package log
-
- 02:17 PM Revision 7145cd87: Remove . and / from pkg name to avoid directory traversal
- 02:17 PM Revision 1cfe5490: Remove . and / from pkg name to avoid directory traversal
- 01:48 PM Revision c3936caf: Remove id=0 from miniupnpd menu and shortcut
- 01:48 PM Revision 73944f68: Remove id=0 from miniupnpd menu and shortcut
- 01:33 PM Revision 69eb2e29: Avoid directory traversal when reading package xml files, also check if file exists before try to read it
- 01:33 PM Revision 9ddd3418: Avoid directory traversal when reading package xml files, also check if file exists before try to read it
- 01:19 PM Revision d09ff9ef: Make sure variables are escaped, also replace exec calls to run rm by unlink_if_exists()
- 01:19 PM Revision 65eb0f61: Remove useless code, variable is set again on next line
- 01:19 PM Revision aa27de6e: Make sure variables are escaped, also replace exec calls to run rm by unlink_if_exists()
- 01:18 PM Revision 592abfa4: Remove useless code, variable is set again on next line
- 12:40 PM Revision 45438fd3: Escape parameters passed to shell_exec()
- 12:40 PM Revision e41ab9aa: Escape parameters passed to shell_exec()
- 12:31 PM Revision 76c4ff0e: Be more careful with host parameter and make sure it's escaped when call shell functions
- 12:28 PM Revision ee4ba9fb: Be more careful with host parameter and make sure it's escaped when call shell functions
- 10:34 AM Revision 54a9da9f: Validate starttime and stoptime format
- 10:33 AM Revision 65f815dd: Validate starttime and stoptime format
- 07:38 AM Revision c7264382: Default values for verb if it is not set when edit
- 07:09 AM Revision caf58ced: a bit of refactoring
- forgot to sync _server.php with _client.php naming style
- 07:01 AM Revision b9e9903d: patchpack1
- -Fix #3401 (Added tun option "Disable IPv6"
-Added new options: route-nopull, route-noexec, verb;
06/16/2014
- 10:14 PM Revision 2464e353: XHTML Compliance - System Menu
- Enforce select option
-
07:39 PM Bug #3678: Kernel panic: "Bogus interrupt trigger mode" on Intel J1900
- I'm having no luck getting pfsense to boot on my Intel NUC DN2820. Kernel panics with "Bogus interrupt trigger mode.".
-
07:26 AM Bug #3678: Kernel panic: "Bogus interrupt trigger mode" on Intel J1900
- So this looks like a BIOS bug (bad ACPI table) that would be possible to workaround.
Those of you with the Gigabyte ... -
05:06 AM Bug #3678: Kernel panic: "Bogus interrupt trigger mode" on Intel J1900
- I can confirm the same issue with ASUS J1900I-C. Both with pfsense 2.1.3 and with pfSense-memstick-serial-2.2-DEVELOP...
- 06:10 PM Revision 7860191a: Create some symlinks inside pbi dir to reduce differences between 2.1 and 2.2 and avoid the need to change a lot of PBI scripts
-
-
- This is definitely a problem. It appears to be due to the timing and boundaries of the schedules.
If you end a sch... -
- I could not find an ICLA or CCLA in the database.
@Per von Zweigbergk:
If you could please sign either the Indiv... -
- The ICLA looks OK, I show that it was signed and submitted. Thanks!
I added some comments on the pull request for ... -
07:50 AM Bug #3321: IPSEC failure on modem reset, automatic reconnection is broken, must manually restart racoon service
- Seems to be broken in 2.1.3 with Draytek Vigor 2200E. Need Cronjob to restart periodically.
- 07:14 AM Revision b4e9a4da: XHTML Compliance - System Menu
- Advanced - Admin Access Tab
Advanced - Firewall / NAT Tab
Cert Manager - Certificate Revocation Tab
User Manager - Us... -
-
02:28 AM Bug #3637: Incorrect interface matching on bridge edit page
- Seems to be working correctly now
-
02:19 AM Bug #2882: 6RD not working in latest snapshots
- I've put up a bounty for this issue to be fixed in the near future (3 months of I dont update the post): https://foru...
06/15/2014
-
-
- assigned to Ermal, either fix this or push it to 2.3
-
- bumped priority
assigned to Pingle.
I'd like this implemented in 2.2.
I'd also like it displayed both on Main -> Pa... -
09:24 PM Feature #3410: Patch: Add Apple Open Directory memberUid support in group lookup
- I believe I signed one in the correct place just now (portal.pfsense.org). Please let me know if I need to do anythin...
-
- assigned to Pingle. Once a CLA has been signed, we can look at incorporating this.
-
- assigned to Renato.
see other comments on possible security issues in the Alias code. -
- pushed to 2.3
-
- pull request received 3 months ago. assigned to Pingle.
please ensure that a CLA is on-file before reviewing the ... -
- pushed to 2.3
-
- Assigned to Renato.
While you're in there, I suspect security issues in the Alias code. -
- assigned to Renato, increased priority.
please work with porter on how this gets done. -
- Assigned to Pingle for evaluation and resolution.
-
- assigned to Renato for evaluation.
-
- assigned to Renato.
on full installs, it might be nice to cache the packages. -
- assigned to Ermal for final evaluation. Fix it or close it.
-
- I'm not sure this is a bug we should attempt to fix in 2.2. Marked as 'future'.
- 09:50 AM Revision 959c12cf: Remove Status Verbiage. Consumes too much realestate in widget. Status icon without the verbiage is sufficient in widget view.
-
- I cancelled the previous pull request and a new one submitted.
https://github.com/pfsense/pfsense/pull/1234
I r... - 12:36 AM Revision f1a34790: Hostnames are not case restrictive.
06/14/2014
06/13/2014
-
10:14 PM Bug #3712: missing protocols in NAT edit page
- Please advise if there is any concern with merging these. I'll happily modify the pull requests as necessary.
-
- I created pull requests for this a few weeks back:
- "1208 for RELENG_2_1":https://github.com/pfsense/pfsense/pull... -
- I created pull requests for this a few weeks back:
"1208 for RELENG_2_1":https://github.com/pfsense/pfsense/pull/12... -
- The protocol selection on the NAT edit page is missing some protocols that are available for selection on other pages...
- 08:46 PM Revision bc388533: Avoid keeping old files from previous sessions on /tmp/configbak
- 07:13 PM Revision 828da370: cf/ dir is removed below, do not need to remove the file here
- 07:08 PM Revision dc86f24d: Fix path for trigger_initial_wizard
- 06:11 PM Revision 061ac3f3: Better string check
- 12:25 PM Revision c352b9d1: Merge pull request #1034 from vsquared56/master
- 11:59 AM Revision 6f3d2063: Replace Header() calls by lowercase
- 11:37 AM Revision 44b79ffb: Merge pull request #1222 from phil-davis/patch-8
- 11:36 AM Revision bcfd894e: Merge pull request #1229 from ExolonDX/branch-master_06
- 11:36 AM Revision 718af29d: Merge pull request #1228 from ExolonDX/branch_master_05
- 08:17 AM Revision f5b26faa: Remove htmlspecialchars() call for a fixed string.
-
- Pull request merged
06/12/2014
-
-
05:24 PM Bug #3707: pfsense-tools: No sync for > 1month between ESF-internal and git.pfsense.org
- Ok there was a missing path option in the crontab. This appears to be running normally now.
-
- The tools repo was trying to update with the wrong key. Its also having trouble running form cron. Its manually upda...
-
- Related to my report in #3693 the pfsense-tools repository on git.pfsense.org hasn't been updated since 20th may whil...
-
04:27 PM
pfSense Packages
Bug #3711 (Resolved): bind package not starting after update
- Hello,
We reinstalled bind package after an update, but now the named service is not starting up. we restarted our... -
- Adding static DHCP leases doesn't cause BIND zones to update with "Register DHCP static mappings" on.
This one mus... -
- I believe "Custom Zone Domain records" is enough to implement any idea you want. Just add there mail._domainkey.<doma...
-
- I have performed some tests with pfSense 2.2 and seems like #3323 has been successfully fixed.
-
- Issue persists on 2.2
- 12:53 PM Revision 1d8b3cdd: Fix i386 default URL for snapshots
- 12:31 PM Revision e7eeb5ce: Do not expire already disabled users, it fixes #3644
- 12:31 PM Revision 11eaf7bf: Do not expire already disabled users, it fixes #3644
- 11:59 AM Revision 859a5304: Fix #3665, show IPSec tunnel description on status page
- 11:33 AM Revision bd757043: Fix a typo on variable name
- 11:16 AM Revision 6186c00a: Fix td class
-
- Looks good to me. Might be nice to have the P2 descriptions in the Child SA list as well if it's not too much trouble.
-
- Applied in changeset commit:859a53045631abf3844efda55a3169186618746a.
-
- Applied in changeset commit:e7eeb5ceac07f83630ced5e9cf18b10083a9aca8.
-
- Applied in changeset commit:11eaf7bfe6ba02d39e08d3c7541cb5d2b181d686.
-
04:36 AM Bug #2882: 6RD not working in latest snapshots
- I am also running in to this issue using the Dutch fiber ISP 'OnsBrabantnet'. If there is anything I can do or provid...
-
03:05 AM Bug #3709 (Resolved): Disabled static route entries trigger 'route delete' error at boot
- I've got a site to site openvpn setup. On the server i've got "remote networks" setup. On system reboot, this remote ...
-
02:32 AM
pfSense Packages
Bug #3708 (Closed): Error with order field while creating the first entry in "groups ACL" for squidGuard package
- While creating the first ACL in "Groups ACL" for squidGuard package the following message is shown in the "Order" fie...
06/11/2014
- 05:56 PM Revision f01c3b59: Fix #3702, make sure tunnel inside IP is set when interface changes
-
03:49 PM Bug #1107: mpd on AMD64 generates invalid checksums with NAT
- When I look back at what I wrote and on the logs, I see that all NAT have the checksum error. But for some reason the...
-
- As long as this problem has existed, NAT out WAN via PPTP on amd64 has been broken, that was the easiest problem to r...
-
- Oh 2.1.3 that I am running now is so much worse than when I reported this. As said in 2.1.3 NAT out to the WAN wasn't...
-
- Your description of what you did is something that has worked all along.
It was when the pfsense had an outgoing ... -
- Applied in changeset commit:f01c3b5973e96502b787d282cc508a95f3a40d38.
-
09:11 AM Bug #3706 (New): Permission order affects default page on limited accounts, but can't reorder
- 1. Make an account
2. Assign dashboard permission
3. save
4. Assign reboot permission
5. save
6. log in with tha... -
- I think you're on to something there. This: ...
-
- yep, this one's been implemented.
-
- And now I looked in the code for 2.2 and saw that it was there. Awesome!
- 05:23 AM Revision daa169f7: remove extra .
06/10/2014
-
- Sorry, I misread the description. Ignore that last comment.
Will there ever be a possibility to provide user/pass ... -
- This one can be closed. It has been working for years now.
- 05:21 PM Revision f5629ea6: Be more precise to match members of a bridge interface, it should fix #3637
- 05:20 PM Revision f2c86031: Be more precise to match members of a bridge interface, it should fix #3637
-
- not identical, no. Had the same basic components - scrub all, pass all, nat on. I can throw the completely identical ...
-
05:37 AM Bug #3666: PMTUD is broken for NATed traffic
- You used the same ruleset on stock FreeBSD as pfSense?
-
- Additional data point. This seemingly isn't an issue in stock FreeBSD 10-STABLE. One I had handy: ...
-
- no change. I did confirm it's specific to NATed traffic and updated subject accordingly. Send any packet > egress int...
-
- the root issue is the link route MTUs in FreeBSD 8.3 aren't correctly updated. That works in 10.x, and hence 2.2 (I'v...
-
12:59 PM Bug #3703: MTU not applied on reboot
- fwiw, in UI going from mtu 9000 to mtu 'blank', after multiple save/apply, ifconfig, netstat, and ping all still show...
-
- Netstat -rnW output after first save/apply, while ifconfig says mtu 9000
$ netstat -rnW
Routing tables
Interne... -
- Please also include "netstat -rnW" -- watch the mtu column there.
-
- This is the ifconfig output after first save/apply:
$ ifconfig
em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTI... -
- Also be sure to specify any additional configurations you have on the interfaces such as lagg, vlans, bridges, gif/gr...
-
- Are you sure the MTU is not being set? Could you paste the output of ifconfig? I tried it both on 2.1.3 and 2.2 and i...
-
- Set MTU on LAN to 9000. Save. Apply. 'Ping -f -l 8972 pfsense' from windows box. Timed out.
Save LAN settings aga... - 02:28 PM Revision b2821f7d: Revert "Revert "Fix #3700 and other syntax issues:""
- This reverts commit 4cc2ae78d3027c349969437f08a88b1fb88c9de8.
- 02:28 PM Revision ab3c1e24: Revert "Fix sh syntax"
- This reverts commit cd49f9cd5d21a6592ba690cd315f19266092bee5.
- 01:54 PM Revision cd49f9cd: Fix sh syntax
- 01:54 PM Revision 4cc2ae78: Revert "Fix #3700 and other syntax issues:"
- This reverts commit e912bfae186b6b657daf52607f9d027f46be0478.
- 01:42 PM Revision ff3da5db: Fix #3700 and other syntax issues:
- - Remove -G parameter from pfctl since it doesn't exist anymore
- Initialize $old_router
- Fix sh syntax on variable ... - 01:40 PM Revision e912bfae: Fix #3700 and other syntax issues:
- - Remove -G parameter from pfctl since it doesn't exist anymore
- Initialize $old_router
- Fix sh syntax on variable ... -
- Applied in changeset commit:f5629ea6b83572ae8fa681b7bfd0c2e05844b290.
-
- Applied in changeset commit:f2c86031649e5f199ef10e848593ba38429694da.
-
- The *rc.Update_bogons.sh* script should reference the *HTTPS* site instead of the HTTP one.
v4url=${v4url:-"http:/... -
12:03 PM pfSense Packages Bug #3704 (Closed): spamd whitelist/blacklist bug
- 1 - I've create a white list with google IP's range but I'm still get connections from Google IP's in GREY when I cli...
-
- Applied in changeset commit:ff3da5dba67c64514808e86165e92362f3ff8b33.
-
- Applied in changeset commit:e912bfae186b6b657daf52607f9d027f46be0478.
06/09/2014
- 06:32 PM Revision 6da518fc: Do not allow interface group name to be bigger than 15 chars, helps ticket #3208
- 06:32 PM Revision 6a0f34b8: Do not allow interface group name to be bigger than 15 chars, helps ticket #3208
-
- Dan E wrote:
> I can confirm this issue on a Gigabyte GA-J1900N-D3V. I've tried AMD64/i386 builds of 2.1.3 as well a... -
- Confirmed same on an ALIX with: ...
-
12:59 AM Bug #3514: IPv6 - LAN looses Prefix after link event
- Derek Ivey wrote:
> I seem to be running into this bug in pfSense 2.1.3-RELEASE. It seems like a SIGHUP is properly ... -
- I seem to be running into this bug in pfSense 2.1.3-RELEASE. It seems like a SIGHUP is properly being sent to the dhc...
06/08/2014
- 09:50 PM Revision 529ba86a: Populate gateway address field with tilde if there is no address or friendly interface.
- This is to match the update data.
- 09:47 PM Revision 1f47798a: Fix gateway widget size change on first update.
- Inner table size changes on the first update because the table in update data does not have the same attributes as th...
-
- the actual bug at fault here is #3702. We do actually ignore prefixlen there and set it to 128, so maybe shouldn't gi...
-
- This used to work, but I'm not entirely sure at what point - 2.1.4 behaves the same. On the most current 2.2 snapshot...
-
- Normally removing an IP from an interface where that type is "none" is appropriate. But not with gif (or tun or tap o...
Also available in: Atom