Activity
From 09/07/2014 to 10/06/2014
10/06/2014
-
10:24 PM Bug #3915: DHCP server static mapped clients do not receive custom DNS servers
- And here is the dhcpd.conf I forgot to attach.
-
- When I add a static mapped DHCP client, then put 2 custom DNS servers for that client (e.g. 8.8.8.8 and 8.8.4.4 to ov...
-
10:01 PM Bug #3822: 2.2 boot hangs at "Synchronizing user settings"
- If I halt the system then they will hang at "Synch user settings" ?? But if I pull the plug they seem to finish the...
-
- I have two machines on the latest 2.2 that hang every first boot but come alive after a re-boot. I can provide config...
-
07:06 PM Bug #3822: 2.2 boot hangs at "Synchronizing user settings"
- I updated the above mentioned redmine-3822.xml config file. I can reliably reproduce this hang by just restoring this...
-
04:05 PM Revision a3cc8dcc: Add an option to restart php-fpm from console
-
03:47 PM Bug #3894: OpenVPN client started multiple times when connecting to FQDN where connectivity to server is delayed
- Here is a video http://rghost.net/private/58388261/44e5fb12a48d08550c2bb5cd6c676bd3
Bug is 100% reproducible. My g... -
05:29 AM Bug #3894: OpenVPN client started multiple times when connecting to FQDN where connectivity to server is delayed
- Normally openvpn instances are restarted on interface up event!
Can you back this claim with proper information as... -
- fixed
-
- That's reasonable Phil, feel free to submit that as a merge request to master.
-
- and OpenVPN server GUI has boxes to provide up to 4 DNS servers to clients, so it seems reasonable/consistent to have...
-
- System->General Setup already supports 4 DNS servers, which get passed to DHCP clients if DNS Forwarder is not enable...
-
- Our recommendation for that is to use ip aliases.
Since you have already configured a VIP(carp) why you want to ad... -
07:15 AM Bug #3911: VHID 3 is already in use on interface WAN. Pick a unique number on this interface.
- maybe my formulation is wrong, but shouldn't it be possible to add multiple IP addresses/aliases to same VHID? ifconf...
-
-
-
-
-
-
- Applied in changeset commit:9c2968266996b21bb4e3754ae7ae4d6100970563.
- 04:48 AM Revision fb0a4e7a: Fix not rules for OPTn network case
- Reported in forum https://forum.pfsense.org/index.php?topic=82319.0
The "if (is_subnet($src)) ... filter_address_add_...
10/05/2014
-
10:35 PM Revision 3d77cc35: Add powerd normal mode flag (-n)
-
04:05 PM Bug #3913 (Resolved): if_bridge missing ALTQ support
- Hello,
I just upgraded my pfSense 2.1.5 install to the latest 2.2 beta release.
Once the update completed, i coul... -
02:33 AM Bug #3737: Incoming VLAN traffic fails to reach VLAN interface if PCP not 0
- I encounter the same issue, with the patch PCP is working fine.
Can you push this patch so it can be included in the...
10/04/2014
-
- works
-
- fixed
-
- fixed
-
- still doesn't work on: ...
-
- works
-
- these issues are fixed. The page as a whole needs some design work so "Overview" isn't a huge wall of text, will cove...
10/03/2014
-
- fixed
-
10:34 PM Bug #3912 (Resolved): Dynamic DNS disallows valid character in username
- OpenDNS allows a username (email) in the format of example+email@gmail.com, however the + sign trips up the services_...
-
- still an issue in some particular edge case I haven't quantified yet.
-
- That forum thread has no relation. The scenario as described doesn't exist in 2.1.5 or 2.2. The input error "VHID ......
-
- This happens when trying to add more IPs to a VHID, as discussed in https://forum.pfsense.org/index.php?topic=54885.0...
- 03:15 PM Revision 4665dbdd: Make proper check if IP address is configured on another interfaces and ignore current one. It fixes #3807
-
10:20 AM Bug #3807 (Feedback): Unable to edit existing Virtual IPs
- Applied in changeset commit:4665dbdd51ea845a4b84d5068b4ecf31cd9dce4b.
-
07:06 AM Feature #3228: Please add an "Interface Down" Trigger Level for Gateway Group members
- Chris Buechler wrote:
> Interface link down will trigger "interface down" from monitoring, so I fail to see a point.... -
05:53 AM Bug #3831: VPN PPTP, RADIUS issued IPs and secondary RADIUS server
- Found that problem in MPD (and libradius library). (http://sourceforge.net/p/mpd/discussion/44693/thread/e738def4)
-
- You should follow setup procedures for AD.
Search the net and you will find them.
10/02/2014
-
- Edit: scratch that, still an issue in some particular edge case I haven't quantified yet.
- 09:19 PM Revision 3c4fc30b: get back to our standard RFC-defined capitalization of IPsec
-
08:56 PM Revision 80a261a2: CARP, allow carp ip to be outside interface and alias subnets (FreeBSD10 feature)
- 08:09 PM Revision 3258d442: Merge pull request #1300 from jean-m-cyr/master
- 08:09 PM Revision 90a430c7: Merge pull request #1298 from PiBa-NL/vips_sort
-
-
07:18 PM Bug #3383: Web GUI becomes slow or unusable if the LDAP server used for GUI auth is unreachable
- Another option would be to add an authentication realm drop down to the login page, like you would get on a windows m...
-
- It would also be nice if it supported multiple LDAP servers. In an AD environment there are multiple directory serve...
-
- I have also experienced this bug. When pfsense is set to use LDAP as the authentication server (specifically Active ...
-
- haven't seen that elsewhere, and can't replicate on current versions
-
-
-
-
-
-
-
-
- fixed ages ago
-
-
-
- fixed quite some time ago.
-
-
-
- reflection of UDP works fine in pure NAT mode.
-
- dnsmasq no longer used
-
- feature exists in 2.2
-
-
- as described is not a general issue, and good chance any edge case has been fixed in the years since.
-
-
- this hasn't happened in 2.1x and newer versions
-
-
- This seems to me to be a FreeBSD bug, setting advskew to 0 never works.. Setting it to 1 is possible though. Perhaps ...
-
- When leaving persistent CARP maintenance mode, the advskew is left at 254 on the running system, so it retains backup...
-
-
- issue as described doesn't exist.
-
- feature is implemented. There is still an outstanding problem with it not dropping back to the configured advskew, th...
-
- fixed
-
- there is no general bug here. Upgrades don't delete any groups, and of tens of thousands of systems that have upgrade...
-
- no outstanding bugs here, the wizard history has no functional impact and is retained for convenience. The lacking in...
-
- Interface link down will trigger "interface down" from monitoring, so I fail to see a point.
-
- I added a note to the documentation re: destination, which is the only legit issue here.
-
-
- Confirmed as described, whether multicast or unicast, no pfsync traffic is ever seen on the wire.
-
- original issue still exists
-
- fixed
-
- To replicate:
Take a clean default config, and add a CARP IP. Apply changes. Go to Status>CARP. It shows disabled... -
07:51 AM Bug #3450: DHCPv6 Lease Status shows no Leases
- @pfSense used in notes #4 was i386/32bit.@
-
07:46 AM Feature #3908 (Rejected): Set gateway outside the range of wan address
- Duplicate of #972
-
07:38 AM Feature #3908 (Rejected): Set gateway outside the range of wan address
- For example:
An ISP give you an IP: 5.30.2.24/32 and give you a gateway with an address in an other range : 217.13...
10/01/2014
-
- Reported-by: https://forum.pfsense.org/index.php?topic=82393.0
-
- *Manual Action is Needed!*
* pfSense's "DHCPv6 Leases" page can show the hosts after that.... -
03:58 AM Bug #3771: Webinterface and dhcpdcrashes with 500+ static leases
- It's easy to reproduce, setup an HA setup with dhcpd failover and create about 500 leases.
If I deactivate the dhc... -
12:37 AM Feature #3907 (Resolved): OpenVPN widget connected client count display
- Hello,
It would be nice to know how much openvpn clients are connected.
The Dashboard widget's title is "Server TC...
09/30/2014
-
- Duplicate of #3842
-
05:55 PM Bug #3906: Menu bar wraps, System menu hard to access
- I've just realised this is a duplicate of https://redmine.pfsense.org/issues/3842
Sorry. -
- From a debian and a fedora linux client, I have problems accessing the System menu in the webgui. The HELP menu is ...
-
09:48 AM pfSense Packages Bug #3905 (Closed): Upgrade from 2.1.3 to 2.1.5 broken Net/SNMP.pm path
- This results in issues with some plugins of Nagios. e.g.
/usr/pbi/nrpe-amd64/libexec/nagios/check_ifoperstatus
... -
- As per this forum report by chpalmer:
https://forum.pfsense.org/index.php?topic=82254.0
The version from 2.1 bran... -
- In addition to being a duplicate ticket, that's not a valid reason for wanting to disable ntpd.
Free tip: Bind Ope... -
- Duplicate of #3567
-
05:09 AM Todo #3903 (Rejected): Disable NTPD server
- I've my Openvpn servers runs on port 123 UDP, when the firewall rebooting NTPD or OpenVPN service is down... ( same p...
-
- Pull request has been merged
09/29/2014
-
- duplicate of #1837 and/or #1705
-
- Hey Ike,
Sounds like some general known issues in 8.x base with certain NICs in certain circumstances, the underl... -
- no bug here.
-
- works
-
- driver issue that's outside our control, and is almost certainly fixed in 2.2's base OS.
-
- config issue, not a bug. Please use one of our support resources for assistance. https://pfsense.org/support
-
- this has been possible for years
-
- duplicate of #3796
- 03:35 AM Revision c7fa58ac: Fix up NTP status page formatting
- Number of columns is not the same for all table rows
09/28/2014
-
11:00 PM Feature #3453: Management GUI (lighttpd) interface binding control
- Well, just had to do another pfSense update, and then had to go through the ritual of patching files to make it work....
-
-
07:28 PM Bug #3902 (Resolved): dhcp6c can't handle Server Unicast Option
- Hi
My ISPs DHCP6 server uses the Unicast Option (http://tools.ietf.org/html/rfc3315#section-22.12) which seemingly... -
- Hi
I was playing around with two instances of pfSense (with the same config).
pfSense1 had IP a.b.c.x (via DHCP) ... - 03:23 PM Revision 762a7b89: Spelling
-
03:16 PM Bug #3900: DynamicDNS should allow "@" at hostname
- BTW, where these configs are stored? Could I change them directly via Diagnostics / Edit File? It would be a good wor...
-
- No-ip has the ability to update one of several IP addresses of a round-robin DNS A record. This is done adding a "@<l...
09/27/2014
- 07:17 PM Revision e7b03bc1: Merge pull request #1295 from phil-davis/patch-21
- 05:19 PM Revision 6b18c66b: Clarify bracketing
- to minimize risk of a problem when adding code here in the future.
- 05:10 PM Revision 055a43d2: Allow extended alias inputs #3890
- Currently if you enter a space-separated list of subnets in the IP address box when entering an alias, the code repor...
-
04:40 PM Feature #3899 (New): Add feature to allow reordering of <package> items in config.xml
- Would it be possible to add a new page that would allow an admin/user to change the order in which packages are order...
-
- The version for 2.2 was not so difficult to integrate:
https://github.com/pfsense/pfsense/pull/1297 -
- It was kind-of a feature:) It fills out all the rows when you press Save the first time but tells you that the data i...
- 12:08 PM Revision da7f6588: Spelling
- 12:04 PM Revision ff5fa759: Spelling
- 12:02 PM Revision 3c4cddc7: Spelling
- 11:59 AM Revision 0a97a7bb: Spelling
- 11:51 AM Revision 51dc66c9: Spelling
- 11:49 AM Revision ec074a86: Spelling
- 11:47 AM Revision f64b0b8e: Spelling
- 11:45 AM Revision 15c58806: Spelling
- 11:38 AM Revision abe63176: Spelling
- 11:37 AM Revision fb3b7640: Spelling
- 11:35 AM Revision 4304dd97: Spelling
- 11:34 AM Revision 8913533d: Spelling
- 11:26 AM Revision 47e1f0d4: Spelling
-
04:14 AM Bug #3896: ipv6 pppoe ISP with static adress
- I am trying with 2.2-BETA (i386) built on Fri Sep 26 14:06:31 CDT 2014
Pareil mais pas mieux. similar but not better
09/26/2014
-
06:17 PM Bug #3898: Traffic Graph webpage freezes up after some time
- my pfsense is:
2.1.5-RELEASE (i386)
built on Mon Aug 25 07:44:26 EDT 2014
FreeBSD 8.3-RELEASE-p16
You are on ... -
- Anytime I leave the page up 'Status-->Traffic Graph' on my Mac 10.9.5 Safari 7.1 browser, eventually the whole page w...
- 04:56 PM Revision adab585d: Merge pull request #1294 from phil-davis/patch-19
- 04:56 PM Revision 45cd176a: Merge pull request #1293 from phil-davis/patch-20
- 04:18 PM Revision bbd1f783: firewall_aliases_edit UI text changes
- If type URL Table then the heading "Description" on the 3rd column gets suppressed (I am not really sure why that is,...
- 04:01 PM Revision c5cfa06b: Minor fixes to firewall_aliases_edit
- for 2.1 branch
-
- Hi Atıf are you using the haproxy-devel 1.5.x package?
If so could you share the <haproxy> part of a configfile yo... -
- Security Announcement posted:
https://www.pfsense.org/security/advisories/pfSense-SA-14_18.packages.asc -
- Affected packages have been either updated or removed.
* FreeRADIUS2: Package updated with a patched version of ba... -
- You can already make these, IMHO. e.g. I have one called OfficeTime that looks like:
OfficeTime
Mon - Thur 14:0... -
08:49 AM
Feature #3897 (Rejected): recurring schedules
- it would be great to have the possibility to create recurring schedules such as "working hours", ...
-
- See https://github.com/pfsense/pfsense/pull/1293 for my suggested change, which also fixes up a little issue with the...
-
03:17 AM
Todo #3893 (Resolved): Alias -> IP
- Hi !
In the Web-GUI under Alias - IP - Hosts only IP is shown when addng a new entry.
Perhaps there should also be ... - 10:13 AM Revision ace5483e: Merge pull request #1292 from phil-davis/patch-18
-
- Please try latest version.
-
- 1. There is no need to set *IPv4 Configuration Type* to "DHCP" at all. Ovpn client interfaces are autoconfigurable. S...
-
- Hi all,
Funny case In France Nerim provider doesn't affect IPV6 address in adsl PPPOE.
It is dual IPV4 / IPV6 acc... -
- It would be nice to have a timeout when you applied changes to make it possible to revert changes back if no cofirmat...
-
- Requirements:
1. WAN connection should not be Static/DHCP!
Steps to reproduce:
1. Create an ovpn client instance... -
03:51 AM Bug #3205: Partial system freeze when disconnecting USB 3G stick
- any fix for this as its still troubling me
- 02:40 AM Revision 62218b4d: Remove useless check for alias description matching an interface description
- While looking at other checks in the code I noticed this check. It was not effective anyway, because the first line i...
-
02:18 AM Bug #3312: Gateway on IPsec rules is not functional in pf
- hello,
I installed 2.1.5 and when I put a getaway on ipsec rules, traffic goes to the default.
Is it a bug?
09/25/2014
-
- Checking further: git, avahi, and ntopng use bash during the build but do not include it in the PBI for installation....
-
- Update again:
More affected packages, full list is now:
git, avahi, freeradius2, ntopng, mailscanner -
- Also: The mailscanner package appears to be affected along with FreeRADIUS2
-
- [2.2-ALPHA][admin@apu.localdomain]/root(1): which bash
bash: Command not found.
[2.2-ALPHA][admin@apu.localdomain]/... -
- 2.2 does not include bash. No base install includes bash. If you added it manually, it came from FreeBSD, or perhaps ...
-
05:31 PM pfSense Packages Bug #3892 (Resolved): Critical bash vulnerability CVE-2014-6271
- 2.2-beta appears vulnerable:...
-
- ipfw is used by captive portal, and uses a cpzoneid to create a zone in ipfw using mwexec("/sbin/ipfw zone {$cpzonei...
-
01:04 PM Bug #3890 (Resolved): Aliases multiple CIDR ranges show error message
- Hi
If you create a new IP alias for network white-listing with any CIDR ranges separated by a space, pfsense WILL ... - 12:55 PM Revision 7ea27b0d: Be more strict on removing groups checking group id and group name, it avoids issues like happened to users on ticket #3856. While I'm here, replace GET by POST
- 12:29 PM Revision fbe0d698: Be more strict on user removal checking array id and also username to avoid removing wrong users when browser back button is used. It should fix #3856
- 11:18 AM Revision e45e3bf4: Merge pull request #1290 from jean-m-cyr/master
- 11:13 AM Revision b4db2d0e: Remove also old unbound startup script
-
07:41 AM Bug #3849: Compex WLE200NX wireless card stops responding
- I had the same issue, with nearly the same setup (APU 1D4 engine).
What really helped me, was to set the Wireless ... -
- Applied in changeset commit:fbe0d6986aef1ce933f91ad34ba9393344693180.
- 01:26 AM Revision 31377265: Support IPV6 in unbound.conf
- IPv6 addresses are not included in unbound config and access list
09/24/2014
- 11:58 PM Revision 78244277: Merge pull request #1289 from jean-m-cyr/master
- 11:10 PM Revision 806bf882: outgoing ip incorrectly set in unbound.conf
- DNS resolver outgoing IP interface IP address is incorrectly set to the
last inbound interface IP address... fix it. - 09:43 PM Revision c11b7ffe: Remove unbound files, menu and service during config upgrade, otherwise things can go really bad with functions redeclared un base and package unbound.inc and config corrupted when upgrading from 2.1.x with unbound installed to 2.2. PBI and package section are both removed later during package upgrade
- 06:28 PM Revision 90a95930: Merge pull request #1288 from brunostein/fix_button_close_info_box
-
06:20 PM Revision 370b4666: Fix close button in the info box
-
- At a minimum, upgrade to 2.1.5. If you still have a problem, post on the forum.
-
12:31 PM Bug #3883: Changing SNMP Bind Interface does not change actual bind interface of SNMP service.
- There are six interfaces on this system. This is the output for binding to interface All, LAN, two other interfaces,...
- 10:10 AM Revision abf2e0f1: Merge pull request #1287 from jean-m-cyr/master
-
-
05:52 AM Bug #3889 (Confirmed): Non relevant changes in config.xml
- Version 2.1.5:
I push the configs to git for QA.
I have a lot of changes in empty tags (from short to long format... - 02:09 AM Revision 3be4caf9: NTP Service GPS page always reverts to 'Custom' GPS type
- Remember and correctly display GPS type setting
09/23/2014
-
- 12:08 PM Revision bdbb4dba: Make sure unbound user and group is also created during upgrade config
- 11:57 AM Revision 3f257101: Provide upgrade config code to migrate unbound settings from 2.1 package to 2.2 base. Bump config version to 11.1. It fixes #3880
- 09:58 AM Revision 8d5b31a2: Merge pull request #1286 from jean-m-cyr/master
-
- I can't reproduce this on 2.1.5, please post on the forum for assistance/diagnosis. If a bug can be confirmed, this m...
-
- When the 1:1 NAT exclusions from #3887 are possible, allowing the 1:1 NAT entries to be reordered will be necessary t...
-
- In some cases it is necessary to create exclusions from a broad definition of a more general 1:1 NAT rule, such as:
... - 07:16 AM Revision 63d5a5e0: NTP server configuration does not highlight selected interfaces
- Missing explode of selected interface list prevent logic from working.
-
- Applied in changeset commit:3f257101f44f5a3d1547d1d442761d7fdcf597fd.
-
03:03 AM Bug #3886 (Resolved): (TurkishLanguage) After the firewall rule for example (lan rule) does not come "Apply Button"
- Hello i will explain that bug on forum that topic
https://forum.pfsense.org/index.php?topic=78795.0
Please upda... -
- I will put a menu option for this.
The webgui is not the only consumer of php these days.
09/22/2014
-
11:04 PM Bug #3885 (Duplicate): Dynamic DNS provider password containing special character ampersand &
- When password contains an ampersand symbol "&" results in failed login to provider. System log reports invalid userna...
-
09:55 PM Bug #3884 (Resolved): Restarting Web GUI does not restart PHP-FPM
- For some reason (I'm still looking through the logs trying to find out why), PHP-FPM crashed on one of my boxes. Sin...
-
06:44 PM Bug #3867: Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 71 bytes) on diag_states_summary.php version 2.1.5
- The one mentioned in the title (2.1.5)
States: (608828/1600000) -
- How big of a state table this is?
Which version of pfSense this is reported for? -
05:41 PM Bug #1943: PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
- I just wanted to chime in that I am also experiencing this problem however my want port is: em0 90:e2:ba:06:ba:93 ...
-
-
- Version
2.1.4-RELEASE (amd64)
built on Fri Jun 20 12:59:50 EDT 2014
FreeBSD 8.3-RELEASE-p16
CPU Type
Intel(R... - 11:42 AM Revision 4ce44163: Obsolete recently removed jquery files
- 11:18 AM Revision c9f63b08: Apply previous progressbar customizations for jquery-ui 1.11.1
- 11:18 AM Revision b9cf74c3: Update jquery-ui components to 1.11.1, it fixes #3879"
-
- This has been fixed on 2.2
-
-
- This should work properly on 2.2
-
- I still can't reproduce this no matter how I try to break it. Setting to feedback for now. I posted a message on the ...
-
- Not anymore a problem on 2.2
-
- Please test in 2.2 and report back.
This should not be anymore an issue. -
- Already present in 2.1.x ++
-
- This works properly on 2.2
-
- That's not the same, this would be for all local subnets, not all IPs on the firewall. (self) was only relevant to th...
-
- (self) has been introduced as a selection.
-
- This is possible to implement easily now that strongswan is used.
-
- Its possible since 2.1.x era.
-
- Present in 2.2
-
- This is possible on 2.2.
So this can be considered closed. -
- These should have been fixed since long.
-
- This should work properly on 2.2 since vmxnet is part of base OS.
-
- This should be fixed on 2.2
-
- zfs is present on 2.2 builds.
VIMAGE its not possible and in the future depends on the roadmap. -
- Please try again with latest snapshots.
-
-
- It has libssl defined in the makefile not sure why you change that to libcrypto!
-
09:48 AM Bug #3881 (Rejected): Issue building pfPort "voucher"
- Using pfsense-tools with latest commit ID 3e127740d9f11962433b5f52c23ad99de55e252, when build.sh is trying to build "...
-
- Currently some pages that deal with MAC addresses, such as the ARP table and DHCP leases view, show the manufacturer ...
-
-
- ...
-
- It's expected
-
- Test OK for range 1025:1027:1029.
But if you supply a port range with the ending port containing a lower value tha... -
-
- Widgets can be moved, and after the changes are saved, they persist. Test OK!
..
pfSense 2.2-BETA amd64
Firefox ... -
- Applied in changeset commit:b9cf74c3b3c19c3912fe9ecb10b519bff5583f13.
-
- If you follow the help link ("?" in the shortcut bar) from that page, it is documented there.
https://doc.pfsense.... -
- See #2433 - This is a duplicate of that one. There is a workaround in place on recent (~last 4 months) snapshots.
-
- On new snapshots, interfaces_ppps_edit.php does not seems to enter on a endless loop. Clicking on edit icon, editing ...
-
-
- Tested. OK!
..
pfSense 2.2-BETA amd64
Firefox ESR 24.8.0 win32
.. -
-
- Latest snapshot seems OK.
(pfctl -ss output)... -
- If unbound is installed (as a package) on 2.1.x, when migrate to 2.2, convert the config block since now unbound is p...
-
-
-
09/21/2014
-
07:50 PM Bug #3879 (Resolved): Unable to move widgets in GUI
- As of 2.2 Beta snapshots, widgets within the GUI are unable to be moved around. This applies to all Themes. Forum s...
-
- UPnP is working again for my gaming consoles with Open NAT thanks to this fix.
-
08:35 AM Bug #3801: Captive Portal on 2.2 does not pass through logged-in users
- It works ! :)
I can now login through captive portal. Rule is added into ipfw and I can navigate correctly. -
- Please post in the forum for assistance until a bug has been confirmed.
OpenVPN defaults to a digest of SHA1, as d... -
08:18 AM Bug #3878 (Rejected): OpenVPN Site to Site Connection HMAC Error
- on the 2.1 i have a site-to-site vpn to an other 2.1 machine. The other one is the Server.
Authentication is shared ... -
- Since the last beta booting from iso functioning very well.
-
- In 2.1 i have configured a VPN-Provider as a OpenVPN Client Connectionl:
importing certificates, add openvpn clientc...
09/20/2014
- 02:55 PM Revision b446562b: Simplify logic
- 02:41 PM Revision ad970c21: Add missing <form> and require filter.inc for filter_configure()
-
06:22 AM Bug #3640: Sierra Wireless 3G Modem support driver
- The Direct IP mode is Sierra Wireless only and provide and Ethernet virtual interface trough USB.
This mode is suppo...
09/19/2014
-
- 07:53 PM Revision 8718669c: Recent versions of miniupnpd does not accept IPv4 address anymore, use interface name always. It fixes #3874
- 05:16 PM Revision 9ec8e1f2: Allow hostname to start with '@.' for namecheap. It fixes #3568
- 05:15 PM Revision de29dadc: Allow hostname to start with '@.' for namecheap. It fixes #3568
-
- For the record, properly recover from disconnected sockets patch put in.
-
- Applied in changeset commit:8718669cafdb241a7b801489ba0d6dd20f8d1e7e.
-
- After version 20140523, miniupnpd moved from warning to error the use of IP address for interface on config file, it ...
-
- On 2.2, with a valid pfsync configuration, no state information is passed between the HA nodes.
From ifconfig on t... -
- I upgraded my test VM and tried it again, it still works. If I remove the failover IP, it becomes blank on the second...
-
12:53 PM Bug #3853: DHCP Server failover_peerip is not synchronized on 2.2 with CARP
- Doesn't seem to have been fixed yet: https://forum.pfsense.org/index.php?topic=81948.0
-
- Applied in changeset commit:9ec8e1f280c35667dcdacfd0ee09f4b3f7d5f5f3.
-
- Applied in changeset commit:de29dadc20688daa579937fbd8b4dfdcae3587e6.
-
- Duplicate of #3568
-
09:15 AM Bug #3873 (Rejected): pfSense dyndns for Namecheap - unable to use '@.domain.com' as hostname
- As shown in the documentation to update an "@" record you have to use use "@.domain.com" as hostname. Without...
-
11:58 AM Bug #3875 (Resolved): interface reporting dscrepancy
- Hi All,
2.1.4-RELEASE, we're experiencing an issue where pfSense reports interface statistics incorrectly.
Initia... -
11:52 AM Bug #3634: Default gateway not restored after it comes back online
- Hey guys, are there any plans to fix this for 2.2? Thanks!
- 11:16 AM Revision 93ee78b7: Check if there are leases to show, it fixes warning when $mobile['pool'] is empty or not array
- 09:57 AM Revision beae652c: Correct evaluation for "Acct-Interim-Interval" from RADIUS
- Setting "Acct-Interim-Interval :=600" in FreeRadius2 evaluates to 'random' values with PfSense 2.1.
Possibly a bug re... -
- 09:43 AM Revision d2fdc707: Correct evaluation for "Acct-Interim-Interval" from RADIUS
- Setting "Acct-Interim-Interval :=600" in FreeRadius2 evaluates to 'random' values with PfSense 2.1.
Possibly a bug re... -
09:07 AM Bug #3872: Enabling a disabled VLAN subinterface with multiple CARP VIPs configured causes system crash
- Sorry, just to reiterate this only happens when two or more CARP VIPs are configured on the VLAN interfaces.
-
- Hi,
No, I have not tried this in 2.2.
Yes, the VIPs are on the VLAN interfaces. I then disable the VLAN interf... -
- So to understand even more.
You say the vips are on the VLAN interfaces and you disable the vlan interface, right?
... -
- You have tried if you recieve this problem on 2.2?
-
- When tagged VLAN interfaces have multiple CARP VIPs configured, disabling the interface via the GUI and then enabling...
-
- It was fixed on 2.1.4
-
-
- dnsmasq is working as expected on 2.1.5, it's probably a local issue. You can use forums and mailing lists to discuss...
09/18/2014
- 06:57 PM Revision e5b3335a: Do not call write_config() when click on Apply Changes because it was already done and it causes dhcpd to restart one more time on secondary nodes. It fixes #3797
-
- 05:08 PM Revision 565488c9: Do now call write_config() when click on Apply Changes because it was already done and it causes dhcpd to restart one more time on secondary nodes. It fixes #3797
-
- It will be investigated on the future.
-
- It should be properluy fixed with tomorrows snapshots.
-
04:07 PM Todo #3871 (Resolved): Please document that Interface Groups not to be used with multi-wan
- Hello,
I spent the better part of a day trying to figure out why some firewall rules I added to a WANS interface ... -
- Thanks for the tips, had a brain freeze and didn't think to see where that mystery IP went :). I configured that Dyn ...
-
- Applied in changeset commit:e5b3335ad921e072f20f052fd0e02a43aada700d.
-
- Applied in changeset commit:565488c9cf34c60eccf0f364acc8a0372af31569.
- 01:50 PM Revision 24395438: Update jquery to 1.11.1
- * Update jquery to latest version
* Use production version instead of development
* Rename file to have version on it... -
- The APU uses re(4) network interfaces. If one of these is configured to a specific speed/duplex such as 100BaseTX <fu...
-
- It's not a Captive portal issue, but a problem on your custom pages. They have an input hidden called zone with value...
09/17/2014
-
- This is a local config and upstream DNS issue, not a bug.
-
- Go to 198.105.254.68 in your browser, it comes up with http://searchassist.dyndns.com
Somewhere you are using DynDNS... -
- Hello,
My pfSense DHCP server is configured to give out the following "Domain search list"
(names changed):
la... -
- 05:26 PM Revision c4372d3c: Restore id for cancel button to fix js error
-
- 02:10 PM Revision ac5934df: While I'm touching this file, replace GET by POST
- 01:34 PM Revision cc265e2e: Deduplicate <form>, fixes #3864
- 01:32 PM Revision 729b9f01: Deduplicate <form>, fixes #3864
-
12:59 PM Bug #3869 (Rejected): Erro on captiveportal with custom login page.
- I have 2 instances of Captive Portal, each one on a different subnet.
In both of captive portals I have a custom lo... - 10:27 AM Revision 75cf353b: It's time to move to 2.2-BETA
-
- Applied in changeset commit:cc265e2e59e0f2ce874d5446e1fa49cdaaae1cfb.
-
- Applied in changeset commit:729b9f018d28d3823c8d653aab8d18114ce55437.
-
- When visiting Diagnostics -> States Summary we get:
Fatal error: Allowed memory size of 134217728 bytes exhausted (t...
09/16/2014
- 05:12 PM Revision 022fe5b0: Merge pull request #1284 from phil-davis/patch-17
- 05:12 PM Revision e5d2c660: Merge pull request #1283 from phil-davis/patch-16
- 04:13 PM Revision 0b857543: Fix #3866 Firewall Log Filtering
- on master
- 04:11 PM Revision 9036e766: Fix #3866 Firewall Log Filtering
- on 2.1 branch
-
- Applied in changeset commit:c77104440623b60b8fb2a1d2f09c8c554e3cba68.
-
- 12:41 PM Revision 8f097bdd: Merge pull request #1282 from ExolonDX/branch_master_06
- 12:40 PM Revision cc98be5a: Merge pull request #1281 from ExolonDX/branch_master_05
- 12:40 PM Revision 05bf20a3: Merge pull request #1280 from ExolonDX/branch_master_04
- 12:40 PM Revision 17b86608: Merge pull request #1279 from ExolonDX/branch_master_03
- 12:39 PM Revision 9ab5042e: Merge pull request #1278 from ExolonDX/branch_master_02
- 12:39 PM Revision a77b360c: Merge pull request #1277 from ExolonDX/branch_master_01
-
- Applied in changeset commit:0b85754309f89d867d60a6d81a707235418f9bac.
-
- Applied in changeset commit:9036e7661e3e97944f8d329cc6fb24b8206a7326.
-
- That was easy thing to fix - there was a double dollar sign starting a variable name:
https://github.com/pfsense/pfs... -
- I confirm this bug is present since 2.2.
Tested on 2 setups.
very first setup and results:
1. I have bridged t...
09/15/2014
-
10:57 PM Bug #3866 (Resolved): firewall log filtering
- in diag_logs_filter.php filtering of the firewall log does not work as expected any more.
in 2.1.4 when preceding an... -
05:50 PM Bug #3865 (Rejected): With explicit block-everything rule in firewall it incorrectly blocks LAN to LAN DHCP broadcast 0.0.0.0 and 255.255.255.255
- With no rules, the pfSense firewall blocks everything by default (default config includes pass-everything rules). Tho...
-
10:02 AM Bug #3864 (Resolved): /diag_dump_states.php has duplicate <form> element
- I believe line 74 of /usr/local/www/diag_dump_states.php should be removed:...
-
- *Quick Update:* I am using RFC3849 (2001:db8::/32) address space here, but all IPv6 addresses I own to configure the ...
09/14/2014
-
- Booting from the ISO is not possible with virtual CD-ROM. Typing Text with Keyboard is possible. Pluging in and out t...
-
01:19 PM Feature #3862 (New): Allow configuration of IGMP proxy's 'quickleave' parameter from the web interface
- I have multiple set top boxes through my IPTV provider and it seems IGMP proxy's 'quickleave' parameter causes proble...
- 12:17 PM Revision d02491e6: Tidy up "status_rrd_graph.php" XHTML
- "id" attributes cannot start with a numeric character, so change "8hour"
to "eighthour" and "4year" to "fouryear". - 12:06 PM Revision 8de8ff0f: Tidy up "diag_dns.php" XHTML
- Tidy up the "=" sign properly!
Remove "=" sign from INPUT tag
Change alignment to the "middle" of the TD tag
Add miss... - 11:57 AM Revision 24e183cd: Tidy up "gateways.widget.php" XHTML
- Remove invalid "summary" attribute from TD tag
- 11:54 AM Revision 607e15db: Tidy up "interfaces.widget.php" XHTML
- Remove duplicate closing TR tag
DIV tag cannot be enclosed in a B (bold) tag
Change class and style - 11:49 AM Revision e3e1f748: Tidy up "pkg_mgr_install.php" XHTML
- While using the widescreen theme, when you update the firmware or add a
new package the TEXTAREAs are side-by-side wh... - 11:43 AM Revision c5709378: Tidy up "fbegin.inc" XHTML
- "id" must be a unique attribute.
09/13/2014
-
- Using "2.2-ALPHA (amd64) built on Sat Sep 13 00:05:21 CDT 2014" nanobsd, and I'm still not able to edit existing virt...
-
04:52 AM Bug #3861 (Rejected): PPPOE non-NAT config cannot ping attached hosts as packets go upstream
- I have a system configured as a plain router for a /29 subnet (no NAT) with an upstream PPPoE link. This means that b...
09/12/2014
- 07:37 PM Revision 62424bdb: Remove almost all calls to history.back() and make Cancel button back to HTTP_REFERER, there are a couple of places I didn't touch on this commit because it requires more work
-
-
-
-
-
-
-
-
-
- Normally this should be fixed on gateways page to show the ip aliases as source interface rather than apinger itself.
-
- *2.1.5-RELEASE (amd64)*
* DHCPv6 Server seems to be not in a good shape
** it works only if RA is enable, but RA... -
- Please update latest version of 2.2 of rebuilt apinger manually and retry.
-
- Patched apinger, need some feedback if the issue is solved now.
-
- Seems to work properly now, thanks!
-
- I tested this with the fixes applied and confirmed that it did correct the issue.
-
-
- I updated to 12th September snapshot.
As soon as the user logs into the captive portal, kernel crashes (probably a... -
08:51 AM Bug #3860 (Resolved): Selection of Enable STARTTLS disapears after clicking TEST SMTP on system_advanced_notifications.php
- On page System: Advanced : Notifications (system_advanced_notifications.php) the check box STARTTLS is cleared after ...
09/11/2014
- 09:22 PM Revision 1a6769a6: Replace GET by POST on system_usermanager.php and make necessary adjustments on necessary pages. It fixes #3856
- 09:22 PM Revision 7c2d0050: Back to referer instead of hard coded system_usermanager.php since this page is called from other places
- 09:22 PM Revision 111bea0d: Add a function to redirect to a page passing parameters through POST
- 09:22 PM Revision d83a4264: Add a cancel button for user and group edit page
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Applied in changeset commit:1a6769a630b73e20dc093df7d9b59e8bd4dfce74.
-
- Confirmed. Will work on a fix
-
04:16 PM Bug #3854: pf on 2.2 should not have an upper table entry limit, but generates errors with large datasets
- pfB_BTLevel1
-
- https://www.iblocklist.com/lists.php
-
- Can you provide a link to this big list?
-
- Applied in changeset commit:415b71f1d41c886b06dfc83d8bc2cb906be78509.
-
- I think the sysctl that was activated should fix this.
-
02:17 PM Feature #3859: Make it possible to set the source IP address for gateway monitoring
- You are right in saying that in most cases the correct IP can be easily deduced from the gateway IP address. However,...
-
- I would think this can be automated to meet [most|all] use cases. The gateway has a gateway IP address. So the code t...
-
- In some cases pfsense does not configure the correct source ip address for apinger checks.
One such scenario is wh... -
- This will not be possible to be fixed in 2.2
Many things need to change for this to happen. - 11:38 AM Revision 4889b4c0: Merge pull request #1260 from DasTestament/master
- 11:26 AM Revision ee4da773: Merge pull request #1274 from phil-davis/patch-13
- 11:25 AM Revision b7063ed3: Merge pull request #1275 from phil-davis/patch-14
-
- Looks good to me. I can now auth to the portal and then access other sites as expected.
-
06:50 AM
Feature #3515 (Feedback): Windows OpenVPN clients require register-dns to properly use a DNS server set by Pfsense
- Applied in changeset commit:c38764dc0494463b06f70c7ef8e249629a922134.
- 02:17 AM Revision 63673f3c: Standardise size of Duplicate Slice button
- The Duplicate Slice button currently is displayed in smaller text and in a row of its own, separate from the row abov...
- 02:10 AM Revision ffda0775: Standardise size of Duplicate Slice button
- The Duplicate Slice button currently is displayed in smaller text and in a row of its own, separate from the row abov...
-
01:37 AM Bug #3858 (Resolved): DynDNS errno 47: Address family not supported by protocol family
- I'm on pfSense 2.1.3-RELEASE amd64 (seems to be missing from affected version). Upon configuring the custom (v4, not ...
09/10/2014
-
-
- 08:02 PM Revision 9060f420: Change is_port() to only validate a single port, we have is_portrange() for specific cases. Make necessary adjustments after check all is_port() calls. It fixes #3857
- 06:39 PM Revision be32a003: Delete IP Alias on CARP VIP interface on secondary node when it's deleted on primary. It fixes #3855
- 06:39 PM Revision 7397f643: Fix operator
- 06:39 PM Revision 846dc21c: Fix operator
-
-
- To show that it works on 2.1.4... This is the same exact list being replaced on 2.1.4. The list has a different alias...
-
- Better more concise details with Table-entries set at 1,000,000, have also tried 10,000,000.
This list will load c... -
- Ermal,
When I ran the tests shown in forum post I had tried from 1000000 to 20000000 in System: Advanced: Firewa... -
- The table entries limit is still there
maximumtableentries os system->Advanced.
What has changed is that there is... -
-
-
-
-
-
- Patch committed.
Needs to be confirmed fixed with newer snapshots. -
-
-
- Applied in changeset commit:9060f420a9444c68fc8db926787d0bb37d77ed72.
-
- is_port() function should validate only a single port since there is is_portrange() available, but it actually valida...
-
- Applied in changeset commit:be32a003afd114098e8cfe7c18edae887810500f.
-
- There is still a problem here, it is still getting restarted multiple times but it appears to be due to this behavior...
-
06:55 AM Bug #3856 (Resolved): Delete a user, edit another one and going back... delete the edited user
- In the user manager page, if you delete a user and then go to the edit page for another user, when you click the brow...
09/09/2014
-
-
-
-
- 08:55 PM Revision 76e656ba: Merge pull request #1273 from fsSnowboard/master
- 08:53 PM Revision 60ef0911: Make sure dhclient is not running before start it, it fixes console interface setup when interface is using dhcpv4. It should also help #3482
- 08:52 PM Revision d9d1bd20: Implement a function to kill dhclient process, sometimes it takes a little time to die, so use a sleep(1) there
- 08:50 PM Revision 397e40d5: find_dhclient_process() returns an int, not string
-
-
- 08:12 PM Revision f049d544: Some device names are bigger now (eg vtnet, ixgbe, cxgbe)
-
07:42 PM pfSense Packages Bug #3839: Suricata resolve host pop up broken after upgarde
- This bug is fixed in the latest 2.0.3 v2.0.2 version of the Suricata package. This issue can be closed.
-
- 07:34 PM Revision aa352bb3: Fix minor typo to name and port range
- Typo on the name of the FaceTime shape rule, and missing 1 from Google
Talk port range. -
-
04:53 PM Bug #3849: Compex WLE200NX wireless card stops responding
- I have downgraded to 2.1.4 (i.e. reinstalled 2.1.4 from scratch and restored config). I noticed that after the first ...
-
- Now these should be called specifc policies.
Since phase2 is totally managed by the ipsec daemon there can be what... -
- Strongswan has been patched to have this information, also the diag_ipsec improved to display it.
-
- See #3854
-
- This should be closed in favor of #3854, #3854 describes the problem more clearly. Thanks, Bill.
-
- 02:54 PM Revision 3b0bc8c3: Import fix for http://bugs.jquery.com/ticket/9521
- 02:53 PM Revision ccefd603: Import fix for http://bugs.jquery.com/ticket/9521
-
- Can you try on latest snapshots.
-
- Applied in changeset commit:572f6cccd47f72fe64e84731cf4d12ccbef46da6.
-
- On 2.1.x and before, the failover_peerip is synchronized and adjusted for use by the secondary. On 2.2 the value is b...
-
- When you delete an IP Alias made using a CARP VIP as its interface, it does not get removed from the secondary node a...
- 12:14 PM Revision b22ef160: As pointed out by Ermal, VIPs should go first in the list since NAT is first match. Ticket #983
-
- On 2.2 (FreeBSD 10.x base), pf is not supposed to have an upper table size limit. The knob to set it has been removed...
-
-
04:17 AM Bug #3852: IGMPPROXY still spamming the main systemlog
- Thank you very much, Renato!
Case can be closed now.
Kind regards and sunny greatings from Berlin/Germany.
09/08/2014
- 09:35 PM Revision d629f1ca: igmpproxy param -d doesn't like the space before optarg. Fixes #3852
- 09:35 PM Revision 354a1d3f: igmpproxy param -d doesn't like the space before optarg. Fixes #3852
-
-
- 08:36 PM Revision 7c611a3e: Improvements on interfaces_assign.php:
- - Let user select network port to add instead of pick the first
available, it fixes #3846
- While I'm here, drop GE... -
- 08:24 PM Revision 1c4b1636: Convert this block into a function for later use
- 08:24 PM Revision e4034dcb: Fix indent
- 08:24 PM Revision eb2ab5eb: Remove unecessary var initialization
- 08:24 PM Revision 19498fbf: Replace mwexec() by unlink_if_exists() and respect global tmp_path
- 08:24 PM Revision 1b0e073e: Fix indent and whitespaces
-
-
- Fix committed to #3852 should have fixed this one too. I don't think a new tab is necessary now that debug level has ...
-
-
- Transfer to Jeremy who will work on necessary changes for the new key
-
- Applied in changeset commit:d629f1ca6949735dd0c766b09d122b3edd6e1169.
-
- Applied in changeset commit:354a1d3ffce75d1ed0c7405f50b7947251da1c54.
-
- This is a renewal from an old feature ticket #1477. Because the bug is still there (my current pfSense version is 2.1...
-
- Point 1) is fixed already.
Point 3) has been corrected by Renato though it does not show the local subnet in case of... -
- Applied in changeset commit:7c611a3ea06545427336cbd26f04e8db21dbdf07.
-
02:38 PM Bug #3846: Adding interface for new VLAN selects active WAN VIP address breaking connectivity
- it is basically an issue when adding a new interface, I do not think it is specifically related to CARP or VLANs . F...
-
- Can you provide more information on this.
It seems rather strange that you see this since it is not related in general. -
- Applied in changeset commit:a1b5f07b047b3f27e6326c718eec43167e3bf6dd.
-
-
- Applied in changeset commit:fa9667d2b90c030aeffd896f5dd680c7f5ae677b.
-
- For IKEv1 there are complication to adding this.
It will mean that if you have more than one phase2 for IKEv1 it wil...
09/07/2014
-
- The DNS servers and related settings are not supposed to sync.
-
- In General Settings - DNS servers settings to not get synced to our second firewall.
Neither the server names nor t...
Also available in: Atom