Activity
From 07/08/2014 to 08/06/2014
08/06/2014
-
07:18 AM Feature #3589 (Resolved): OpenVPN client: GUI option for "route-nopull"
-
03:03 AM Feature #3589: OpenVPN client: GUI option for "route-nopull"
- This feature has been implemented by https://redmine.pfsense.org/projects/pfsense/repository/revisions/b9e9903ddb2166...
08/05/2014
-
- Duplicate of #3328 (It's newer but already properly assigned and targeted)
-
03:24 PM Feature #893: Re-orderable IPsec
- This is going on 4 year now. Running in the same problem again. Unlike static routes IPsec routes are done by the o...
-
- Duplicate of #3328
-
- Allow IPSec tunnel order to be changed much like Firewall Rules can be re-ordered. The purpose is to give one tunnel ...
-
01:09 PM Feature #3793 (New): Enable external authentication support for rules
- Well, i am sad to see that pfSense doesn't handle external authentication support for rules, which means pfSense can'...
-
- The name size limit was changed to 16 chars, described as an OS limitation. In my case we use Active Directory and so...
-
11:52 AM Bug #3281 (Feedback): In certain cases, GRE interfaces are missing the "RUNNING" flag at bootup and will not function
- I tried redmine-3281.xml on a 2.2 system and all GRE interfaces have RUNNING flag set on reboot.
-
- Applied in changeset commit:12c887006320a3d01a3f761eca2dfc8f64c41fa2.
-
- Applied in changeset commit:8e2a409171011bfc14149c5fa533d938f49eebba.
08/04/2014
-
06:21 PM Feature #1361 (Resolved): DNSMasq, source interface and IPSec VPNs
- this was implemented for 2.1 and works fine, just didn't get moved to "resolved" status.
-
- that's most likely a ue driver issue, maybe in combination with what you're doing with VMware. People see those have ...
-
- Applied in changeset commit:aeb44799f3693c198c48926c85b4468a6dccb9f9.
08/02/2014
-
01:24 PM Bug #3791 (Rejected): Alias->URL Table (IPs)
- Upon boot pfSense 2.2 takes 7 -10 minutes to load pfSense at the [Loading Firewall] line with 8 <Aliases>_<URLs> Type...
08/01/2014
-
- There are absolutely no such issues. Please use one of our support channels for assistance. https://pfsense.org/support
-
06:21 AM Bug #3787: Outbound NAT to VIP AMD64 not working from OPT1 interface
- Chris Buechler wrote:
> you have a config problem or a general network issue with that IP (stale upstream ARP cache,... -
- Chris Buechler wrote:
> you have a config problem or a general network issue with that IP (stale upstream ARP cache,... -
- you have a config problem or a general network issue with that IP (stale upstream ARP cache, IP conflict). outbound N...
-
- Its version 2.1.4
Not 2.2.
I know that 8.3 is EOL but basic FW functions are not working here, so needs urgent ... -
- It is impossible to set both the track interface and an ID higher than 0 in one action, even if it is valid.
For e... -
- If you search around the web a bit, it's a common problem affecting lots of people with the current Lastpass add-on o...
-
06:58 AM Bug #3784: Cannot enter hostname with a dot
- Buster de wrote:
> Why you can't put only "server" into the hostname and "sub.domain.com" into the domain field?
... -
06:12 AM Bug #3784: Cannot enter hostname with a dot
- Why you can't put only "server" into the hostname and "sub.domain.com" into the domain field?
-
- Hi,
I need to configure a http proxy for www access.
It seems that /etc/rc.update_bogons.sh ignores proxy setting...
07/31/2014
-
12:49 PM Bug #3788 (Resolved): NetBIOS h-node should be translated 8 instead of 5
- Hallo everybody.
At line 182 of /usr/local/www/guiconfig.inc, nodetype value for h-node should be 8 instead than 5... -
11:59 AM Bug #3039: New vouchers doesn't sync with CARP slave
- Same problem on 2.1.4 (x64)
Ermal Luçi wrote:
> The system log would be interesting to see here
---
h3. 1) ... -
- No matter what I do and how I try to get it working, it doesnt work.
As long as I keep the WAN interface address t...
07/30/2014
-
06:46 PM Bug #3786: Browser hangs when wireless card enabled
- Ok clearing the highlight input boxes didn't fix it for me, but disabling lastpass completely did. Not sure why this...
-
- All pages or only the interface page for the wireless interface?
I can sort of reproduce this in Firefox but only ... -
- As soon as the interface is enabled in assign interfaces, web page refreshes hang/are slow. Theory: problems loadin...
-
02:57 PM Bug #2144: pfSense dyndns for Namecheap doesn't work with hostnames containing "."
- Pardon me for re-opening this old bug, but I've finally gotten tired of manually updating my "dynamic" DNS entry host...
-
12:50 PM Bug #3785: strongswan config being generated with ike SA lifetime set to value of ipsec SA lifetime
- Fixed by commit fa0a1411026bcbf173fbe6d573dfc260ee883102.
https://git.pfmechanics.com/pfsense/pfsense/commit/fa0a1... -
- Connection entries in /var/etc/ipsec/ipsec.conf are being generated with ikelifetime set to 3600s when the GUI shows ...
-
05:39 AM Feature #1361: DNSMasq, source interface and IPSec VPNs
- maybe now this will get fixed.
-
- I guess to enforce the message on the page to only use the host and not the domain part, checking for a dot was seen ...
-
04:37 AM Bug #3784: Cannot enter hostname with a dot
- was looking on github.
The issue it relates to is: https://redmine.pfsense.org/issues/159 -
- introduced in commit https://github.com/pfsense/pfsense/commit/46c5b763ef26269b50d303fc62793c58a42eefb1
I can't se... -
- We want the hostname name of our server to be server.sub.domain.com, but pfsense doesn't recognise server.sub as a va...
07/29/2014
-
06:55 PM Bug #3783: wan interface loses IP after carrier reconnect
- Here is an annotated log showing the strange dhclient restart behavior.
-
- *Summary:* My WAN interface successfully gets an IP address via DHCP after reconnecting the Ethernet connection. Howe...
-
- The speed is set correctly (to "16") in the config file, and the ntpd.log seems to show the correct speed:
Jul 29 23... -
- Happens in chrome and Firefox. Firebug output shows that speed 9600 is selected. although 4800 shows in the box.
" ... -
- https://172.27.44.136/services_ntpd_gps.php
Changing the serial port and speed does not actually save the speed. -
02:15 PM Bug #3760 (Feedback): reply-to with TCP and IPv6 generates broken checksums
- Merged a patch to correct the regression.
-
- Applied in changeset commit:9280a998704d182bc3a559163126e290edafbb26.
-
- I'm going to go with the first approach of converting the value in the config.xml/GUI to (number of retries + 1) * DP...
07/28/2014
-
- When you enter a value in the retries field of the "Dead Peer Detection" row in the edit form on vpn_ipsec_phase1.php...
-
02:08 PM Bug #3692: apinger loss % gets stuck
- And again. Is there any diagnostic information that we can gather to help with this???
-
10:01 AM Bug #3780 (Closed): VLAN on LAGG may loose their MAC addresses if the LAGG membership is changed.
- Configuration:
* PFSense 2.1.3
* Watchguard X750e
* LAGG0 consisting of sk2,sk3,msk0,msk1
* VLAN10, VLAN100 on LA... -
09:42 AM pfSense Packages Bug #3779 (Resolved): Zabbix Agent 1.x - ZABBIX_AGENT_BASE not defined
- Problem:
Zabbix 1.x agent does not start automatically and complains on boot that it cannot find ZABBIX_AGENT_BASE/e...
07/27/2014
-
05:38 AM Bug #3737: Incoming VLAN traffic fails to reach VLAN interface if PCP not 0
- I've finally managed to put together a fully working environment and take a deeper look at this.
The problem is th...
07/26/2014
-
03:37 PM Bug #3778 (Resolved): Destination port range not displayed when it's an associated NAT rule and "other" ports
- firewall_rules_edit.php doesn't display Destination Port Range when it's an associated NAT rule and From and To are "...
-
12:27 PM Bug #2800: OpenVPN doesn't work properly with intermediate/chained CAs
- Ran into the same issue today with version 2.1.4.
The hack to copy the full chain into the certmanager solves the p...
07/25/2014
-
-
- Applied in changeset commit:f3d8851136156c14fbce86489f99043bf20423a6.
-
- If a user has "WebCfg - Help pages" in their personal permissions (not inherited) and it is listed first, then after ...
-
- Applied in changeset commit:6141a91b4606b9fec2edf8b55e352c33a68875f8.
07/24/2014
-
11:40 PM Bug #3747: Route uses wrong interface (lo0) when tun local and remote are the same
- I wrote up what looks to be a similar issue here in the forums:
https://forum.pfsense.org/index.php?topic=79305.0
... -
- I pushed a fix, next round of snapshots should be fine.
-
- Running a fresh install from http://snapshots.pfsense.org/FreeBSD_stable/10/amd64/pfSense_HEAD/livecd_installer/pfSen...
-
05:34 PM Bug #3774: MTU Interface Settings Ignored when Assigned to LAGG Ports
- It seems like a simular issue has been resolved for VLANS: https://redmine.pfsense.org/issues/2786. Although it's unc...
-
- In pfSense 2.2 (and I believe 2.1 and earlier as well), there is no way to properly set the MTU when assigning a LAGG...
-
- Applied in changeset commit:070aeff3b72fb2a5627f933b6595b2489f946b71.
-
- In 2.2, if you go to Firewall->Virtual IPs and try to add an IP alias on the loopback interface, when you click the s...
-
02:47 PM Bug #3624: "ppp: OpenConfFile: Can't open file '/var/etc/mpd_wan.conf': No such file or directory"
- Follow-up to say my problems are partly resolved ... I replaced the network cable to the ADSL2 modem (Vigor 120). Now...
-
09:19 AM Feature #1388: 3G outbound failover connection with auto dial-up and hang-up
- +1 for this.
-
- Applied in changeset commit:02dcf3888c643fcbd6b7f01d92eec2f9b5dc5955.
-
- Under Services -> OpenBGPD, under the neighbors tab, if you add a neighbor and set the Neighbor Parameter called "Loc...
-
- The change included in the next snapshot worked fine.
-
07:52 AM pfSense Packages Feature #3768: Snort IPS/IDS
- This feature already exists in the Snort package, but the setting is global and is located on the GLOBAL SETTINGS tab...
-
- I was not supposed to close it yet, will wait more details from submitter about how to reproduce
-
- I have test environments with 1000+ static mappings working perfectly on 2.1.4 and on 2.2-snapshots. You can discuss ...
-
03:34 AM Bug #3771 (New): Webinterface and dhcpdcrashes with 500+ static leases
- I'm using pfSense 2.1.3 in a HA setup with CARP, pfsync, and dhcp failover.
I've got about 500+ static leases in m...
07/23/2014
-
11:23 PM pfSense Packages Bug #3767: Ntop Problem.
- Ok, thanks for the prompt response.
I do not think there is a need for any development, just correct recompilation... -
- because any efforts we're going to put towards ntop in general will be on ntopng, we're not going to put dev time int...
-
- Chris Buechler wrote:
> there's nothing broken in general with ntop
I would not be so sure about that - if there ... -
- there's nothing broken in general with ntop. it needs to be deprecated and replaced with ntopng regardless.
-
- it's not an issue on any stable release version I've seen. If you can replicate, let us know exactly how.
-
12:45 PM Bug #3761: Disable interface where Captive portal is mapped you cannot login anymore
- Hello, thank you for your information, propably it is fixed in version 2.1.4, because I had this problem in 2.1.1
... -
- There are a few descriptions of problems in tickets in Kayako under the apinger-badstats tag.
-
04:51 PM Bug #3198: IPSEC, when nating to a different size subnet a invalid natting rule is made.
- Forgot to add that the VPNs work after the patch, binat is perfect, but my firewall is useless.
-
- I have this bug on 2.1.4 and after applying the patch described in https://github.com/pfsense/pfsense/pull/784, I hav...
-
03:48 PM Bug #3770 (Resolved): Some drivers not being built with altq support
- The Intel igb driver is currently not being built with altq support enabled. This leads to a situation where the use...
-
- pushed the patch to master. Will test in next snapshot.
-
- See the attached config.xml file. The ipsec phase 1 peers with ikeid's 2 and 3 are active. Each of them have 3 phase ...
07/22/2014
-
-
- My bad, it was a configuration mistake. I'm sorry. Feel free to close the ticket.
-
- This looks to be fixed already in 2.2.
The scenario where it's replicable in 2.1x is easy to duplicate. This is t... -
- I couldn't reproduce it on similar setup using virtualbox. Let me know if I can have access to this box.
-
- It's fairly easy to reproduce on a fresh install in VMware workstation.
1. Connect a client to the WAN network (or... -
- I can't assign this until we know how to duplicate it.
-
- Can you confirm it's still happening on new snapshots? I couldn't replicate it on my test systems.
-
- Applied in changeset commit:bc53fec62dd3e40c8f6c1d65baeb12a40b1167cf.
-
- That type of configuration would require a custom monitor IP address configuration so leaving it on 'auto' is definit...
-
- assigned to pingle for eval
-
- Applied in changeset commit:1b37ae46e73fed8db8ca6c5cc67988a369a738b8.
-
- Jim Thompson wrote:
> assigned to Renato.
>
> see other comments on possible security issues in the Alias code.
... -
- need more info on 'when' this happens (why would be great)
07/21/2014
-
10:01 PM pfSense Packages Feature #3768 (Closed): Snort IPS/IDS
- Hello Everyone,
I would like ask add timer (in minutes) for blocked IP in snort.
That timer will drop the drop rul... -
- Applied in changeset commit:9d83d01ff26b259bf149acedf2761cc4b09828db.
-
- Added the patch to rtsol, next round of snapshots will have it in
-
- this isn't true in general, went through a couple scenarios last week on 2.1.4 with disabling an interface where CP i...
-
- Ermal is checking routing issue, here are some details:...
07/19/2014
-
10:25 PM Bug #2335: IGMPProxy and CARP Results in System Instability Upon Reboot
- Is this issue still present or is there a target on when it will be possibly resolved?
-
09:18 PM pfSense Packages Bug #3767 (Rejected): Ntop Problem.
- Hello,I have install ntop latest version.When I want see IP information.It's will show this screenshot on ip_informat...
-
07:28 AM pfSense Packages Bug #3766 (Closed): Unhashed plain passwords saved by 2 packages (one a shell login package)
- In the saved config.xml, user passwords are (?salted and) hashed, and so are PPP passwords.
But passwords for Anyt... -
- I entered a port alias ("Myport" defined as 999) through the 2.1.4 FW->"Alias"->"Port" UI, as part of a test. Using s...
-
- Just got bit with this again. Different symptoms this time... Gateway status (home page) showed 102% loss. RRD graphs...
07/18/2014
-
04:32 PM Bug #3692: apinger loss % gets stuck
- i have the same problem on two pfsense machines.
-
- Applied in changeset commit:dd030de935c500d9c3698969b985fbf068ab6ef8.
-
11:30 AM
Bug #3713: Gateways missing for OpenVPN server (shared key or /30s)
- Applied in changeset commit:8ff231b430864a08040c22518fde9bdfff54be0a.
-
- Pull request has been merged
-
- This should be an easy fix. Where you have a tap OpenVPN server configured, a dynamic gateway is added that has no IP...
-
- the package works in general, there is no indication of an actual bug here. Please post to the forum or mailing list ...
-
- It's can't see any ip detail information.
-
- Hello,I install pfsense 2.1.4 and install ntop package.I can access ntop web gui.But when I see any IP detail informa...
-
-
07/17/2014
-
-
- Tested newly built PBI and it installs all the dependent components correctly. I believe this ticket can now be closed.
-
- Should be fixed now
-
- It's working with BETA key, let it as feedback while the final key is not ready
-
-
- Maybe you were seeing issues like #3475?
-
- Can you please add more information about what issue you are trying to get fixed here?
07/16/2014
-
- I just got bit by this again running 2.1.4. For me, it happens every few weeks. and is always associated with an elev...
-
11:27 AM Feature #3763 (Rejected): GUI: Packages: add 'non supported' or 'experimental' field
- G'day,
Based on my journey here:
https://forum.pfsense.org/index.php?topic=79367.0
I installed squid3-dev, c... -
06:43 AM Bug #3762 (Closed): web interface ajax updates do not work after upgrade
- I have two pfsense boxes:
gw-1 - nanobsd (4g) vga (boots from usb flash drive) platform
gw-2 - generic pfsense (boo... -
- When Captive Portal is configured to work on WLAN-interface (not tested on other interfaces) and you go to "Interface...
07/15/2014
-
- don't create invalid config files is the lesson here. Always test on an unimportant system before restoring. And neve...
-
- it ain't linked and ain't designed to be updated. it only gets added at all as part of the wizard
-
- Had default block logging disabled. Turned it back on and saw the reply packets being dropped attempting to exit anot...
-
- With two WANs, reply-to will normally ensure connections that enter via alternate WANs return back via the expected p...
-
- source is freely accessible, info here:
https://forum.pfsense.org/index.php?topic=76132.0 -
- Applied in changeset commit:dca795b7cf6136c010adc50b268b62cef2f7ead1.
07/14/2014
-
- When trying to save syslog-ng settings, error is displaying, complaining about configuration file format being too ol...
-
10:45 PM Bug #3757 (Resolved): Minicron process inexplicaly terminated
- The minicron process handling rc.prunecaptiveportal get terminated when command 'pkill -HUP cron' is called.
The p... -
- Testing with Snort package on current 2.2 Alpha release shows the barnyard2 program is not properly installed/linked ...
-
11:48 AM Bug #3755 (Rejected): XML error: "X cannot occur more than once" kills the frontends
- I recently got some new hardware and moved my old 2.0.4 setup to 2.1.4 by manually merging the configuration files fo...
-
06:12 AM pfSense Packages Feature #3754 (Closed): Add APC Back-UPS CS to NUT
- I cannot make an APC Back-UPS CS work with NUT 2.6.5_1 pkg 2.0.2, no matter what settings I choose ("php: nut: Servic...
-
- As far as I know FreeBSD does not support PCP by itself (a “man vlan” on the latest 10-STABLE still indicates “No 802...
07/13/2014
-
08:01 AM Bug #3753 (Rejected): OpenVPN changing protocol/port Firewall rule ain't updated
- When changing protocol/port for OpenVPN the Firewall rule that allow traffic ain't updated.
Could just be deleted ...
07/12/2014
-
- I haven't dug too deeply into this, but I suspect the root issue here is this should be a feature request for PCP con...
-
- thanks for confirming
07/11/2014
-
- As Ermal mentioned on pull request comment, it needs to be improved. We can keep the technical discussion there.
-
-
- Applied in changeset commit:720c529f2890708c8dca6264924ec5b1afbf0daf.
07/10/2014
-
- This seems to be an issue again in 2.2.
See [[https://forum.pfsense.org/index.php?topic=79180.0]]. -
11:02 AM Bug #3748: Interface in extended down state, not functional when link is brought back up
- Issue seems to be resolved with pfSense-LiveCD-2.2-DEVELOPMENT-i386-20140708-0814 with the exact same testing environ...
-
- /etc/ttys was missing on full update tarball, it's now fixed on latest snapshots
07/09/2014
-
- this has changed for 2.2.
-
- It works as expected on stock FreeBSD
-
07:55 AM pfSense Packages Bug #3752: IMSpector fails to start
- I'd love to suggest a fix, but I'm not even sure where the repository is. There's a _lot_ of imspector-related junk o...
-
- As most all IM has moved to HTTPS or otherwise encrypted, its usefulness has declined significantly. The imspector pr...
-
-
07:43 AM Bug #3745: VLANs are not ALTQ capable on 2.2 (missing patches?)
- No traffic on em1_Vlan10 or em1_vlan200. I have traffic on em1. No shaping enabled in this interfaces.
Snapshot: Wed... -
- I think it's safe to assume this is fixed upstream in FreeBSD. If there are any rare edge cases like this previously ...
-
- root cause in #3749
-
- root cause in #3749
-
- root cause in #3749
-
- What we do to the NIC is the same whether it lost link for a minute or a year or anywhere in between. Our code actual...
-
- root cause in #3749
-
- not sure how that would even end up working in the circumstance. writing this one off to #3749
-
- root cause in #3749
-
- this goes back to #3749
07/08/2014
-
- The issue was solved by uninstalling the package, manually removing /usr/local/lib/imspector/ and installing imspecto...
-
- I would like to rectify a mistake I have made. Two of the missing files are actually called "sqlitelog*ging*plugin.so...
-
- The latest release of imspector fails to start. Logfiles report the following missing files:
* /usr/local/lib/imspec... -
- The latest release of bandwidthd does not ship with legend.gif and the header.
-
- Added the missing patch, should be fine on next snapshots
-
- After 2.1.4 to 2.2 upgrade, the console does not auto login until the admin page settings are saved again. (System > ...
-
- After an upgrade from 2.1.4 to 2.2, the firewall does not automatically reboot. The architecture stayed the same, but...
-
- Environment:
-pfSense 2.1.3/2.1.4
-Default/base installation (single DHCP WAN, LAN as 192.168.1.1 with DHCP server)... -
11:40 AM Feature #3534: DDNS using arbitrary zone primary
- Please consider spending 7 seconds on a glance at the few lines I posted, it's really trivial. I'm not inclined to pu...
-
- Fix cherry-picked to RELENG_2_1
-
-
- Pushed a fix on tools, next round of snapshots should be ok
-
- When an openvpn client is configured using tun, and server sets topology subnet, we end up with routing issues. tun i...
-
- This appears to have fixed it. The latest snap contains the proper hostname on my system that easily replicated the p...
Also available in: Atom