Activity
From 10/11/2014 to 11/09/2014
11/09/2014
-
09:26 PM Bug #3998: Duplicated limiter numbers
- On 2.2 I tried adding a few limiters and children and then deleting ones in the middle of the list... It seems that c...
-
02:43 PM Bug #3998 (Resolved): Duplicated limiter numbers
- I’ve 19 limiters (number 1 to 20, expect 13)
If I add a new one, he gets an already occupied number, 15. After that ... -
03:08 PM Bug #1943: PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
- The bug is still here. Fresh log attached.
-
02:20 PM Feature #2129: TCP mss clamping for IPv6
- Ok, so people understand better that the input value is not taken as input value but subtracted by some (incorrect) n...
-
11:17 AM Bug #3970: some files not removed on upgrade to 2.2
- I noticed that list takes only files currently, some of those would be easier to just rm -rf a directory instead of a...
-
07:40 AM Bug #3970 (Assigned): some files not removed on upgrade to 2.2
- I was working on a similar list but only for a 2.1.5 fresh install against 2.2. Your test is better and I'll check th...
-
- ttys_wrap file was removed on 2.2, but is still necessary o 2.1. Would be better if installer guess pfSense version b...
11/08/2014
-
- I did a clean install of 1.0.1-REL, then upgraded that to 1.2, 1.2.1, 1.2.2, 1.2.3, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.1, 2....
-
- MTU in RA and properly-functioning PMTUD do indeed make it questionable as to whether it's necessary. But MSS clampin...
-
- Chris Buechler wrote:
> questionable whether this is necessary. Definitely not a priority for 2.2
If you question... -
09:30 AM Bug #3982 (Feedback): Installer generates errors when selecting "Embedded" but still appears to work
- Solution put in place for having this working on 2.2 and 64bit installer.
-
- New snapshots will contain last filterdns code
11/07/2014
-
- confirmed working, looks good
-
- Reput back with proper building on snapshots.
-
- tun was the potentially problematic one. tap has never had ALTQ and probably isn't sensible to use in the shaper anyway.
-
- fixed
-
- It works for me but there were some patches accidentally removed from builds which have been put back.
-
- fixed
-
- Applied in changeset commit:80be089f050f0f27398a2f35ff5d48f43c7cfa3f.
-
- Rightsourceip was being set on site-to-site/peer-to-peer configs which is wrong.
-
- I don't know the cause, but it seems most likely to be when we bumped to strongswan 5.2.1 last week. There was a patc...
-
- Sometime in the recent past, AES-GCM has stopped working. To replicate, just setup a site to site IPsec VPN using AES...
-
- really needs some javascript to remove NAT-T option where IKEv2 is selected and replace with MOBIKE control. No longe...
-
- I'll finish this.
-
- root issue is #3997, closing this in favor of that.
-
- root issue is #3997, closing this in favor of that.
-
- In some circumstances, IPs can be added/removed from an interface in such ways that an interface's primary IP is no l...
-
- Up to and including 2.2 are affected by the bug described here.
https://bugs.freenas.org/issues/4803
There is a ... -
06:28 PM Revision 80be089f: Fixes #3995. Do not set rightsourceip on site-to-site VPNs but only on mobile users ones otherwise nothing works.
-
- confirmed that works now. Need to do more testing to ensure the obsoletedfiles list is complete.
-
- One way to replicate is changing the P2 local and/or remote subnet on a functional site to site VPN. Check SAD and SP...
-
- I cannot reproduce it on my side but for sure it was reloading secrets/crl/ca/cert's but was not realoding the config...
-
- Ermal pointed that the function I disabled is needed in some specific cases. I'm reviewing
-
-
- some limitations in strongswan that might make this difficult, as well as GUI design issues. Probably postpone the fu...
-
-
- Isn;t memstick just a loader.conf option kernel rather than else on amd64?
-
07:01 AM Bug #3982: Installer generates errors when selecting "Embedded" but still appears to work
- Even with only one kernel a choice must still be made about the console, so changing this screen into a console selec...
-
- The issue here is that the amd64 builds do not have anymore the wrap kernels.
Only i386 has this type of kernel.
... -
- I added my workaround mentioned above for now. The other issue needs verified to ensure there isn't a larger problem ...
-
- The latest sudo 0.2.3 works for me, both on a production 2.1.5 system and a test 2.2 system.
-
- The binary is looking for its files in /usr/local/ when they live in the PBI dir /usr/pbi/sudo-<arch>/local/
I can... -
- Indeed, same for me. I should really have been using some security on test systems rather than just the root/admin ac...
-
- With a completely default config, when trying to use sudo, you just get: ...
-
11:37 AM pfSense Packages Bug #2992: Boot problem after upgrade
- Hello,
New 2.1.4 install here, then upgraded to 2.1.5.
I then installed bandwidthd and just had the no boot iss... - 05:19 AM Revision bcb83c9e: Reintroduce graphcounter var to traffic_graphs.widget.php
- This counter got lost in commit https://github.com/pfsense/pfsense/commit/ee965a5c7bf37b852795e1201688e3b20bf3d8d1
Bu... - 04:11 AM Revision a8380480: fix text
- 04:09 AM Revision 6859f881: show interface name, not identifier
- 04:03 AM Revision d3d23754: fix text, PPPoE Server, not VPN
-
- I'll take it.
-
- Ticket #3981 is the root cause
- 02:19 AM Revision 7bd413eb: add a route debug option to log info about route commands executed (where those aren't already logged) to help with troubleshooting various routing scenarios.
11/06/2014
- 11:16 PM Revision 708af634: remove unnecessary is_array check, thanks Renato
- 10:36 PM Revision 6c3be365: Don't allow P2 local+remote network combinations that overlap with
- interface+remote-gateway of the P1. Fixes #3812
-
- fixed
-
- looks to be fixed, leaving for further confirmation
-
- actually it's strongswan itself doing this, looking at where/why.
-
- this is good
-
- Applied in changeset commit:6c3be3650008801aaa1579dca67b0588c04b8e18.
-
- fix pushed and tested, leaving for further testing and confirmation. The check only prevents P2s where the local+remo...
- 06:49 PM Revision dbb95f38: set install_routes=no for charon to avoid the issues noted in ticket
- 06:38 PM Revision 27c2e32e: Pass zone id to pfSense_ipfw_getTablestats(), should fix #3990
- 01:54 PM Revision 118218cb: Make sure target has scope when it's a link-local. Fixes #3969
- 01:40 PM Revision 049c74ec: Check if array is set
-
-
- confirmed fixed, though last activity is blank, that's a separate issue I'll check into further and open its own tick...
-
- Applied in changeset commit:27c2e32e28f871adf036b666e8e3ae1bf54ea7a2.
-
- Actually this is hit and miss, but it's the same root issue as #3960 it appears. Changed subject to the best descript...
-
- something was fixed that resolved this
-
- Matt, you're welcome to pick up #3982, no one's working on that yet. Just assign it to yourself and set to assigned s...
-
- Duplicate of #3982
-
10:12 AM Bug #3993 (Rejected): 2.2 memstick installer kernel selection is broken
- In the serial memstick image for 2.2, if you select 'Easy Install' and allow the system to install, you are prompted ...
-
- An additional note after talking to Renato earlier and doing some research:
The serial console worked for me becau... -
-
- works
-
- it's not consistent every time it appears, but it is replicable after discussing and trying further with Renato.
-
- Chris Buechler wrote:
> I confirmed it again on the most recent snapshot. In addition to changing it not removing, d... - 10:30 AM Revision 3f6525c1: Make sure srcip has scope when it's link-local. Should fix #3969
- 09:57 AM Revision e7752fc4: Remove extra ; and space
- 09:57 AM Revision e7a00514: Process obsolete files in shell script instead of php
- 09:57 AM Revision 48f77cef: Simplify post_upgrade_command logic and obsolete /usr/local/sbin/cvs_sync.sh instead of removing it on post_upgrade_command
-
09:40 AM Bug #3992 (Resolved): The password confirmation field is not properly formatted at VPN: L2TP: User: Add/Edit
- At VPN: L2TP: User: Add/Edit the password confirmation field is longer than the password field.
Also the small "lo... - 09:29 AM Revision a68c6785: Fix to SMART disk matching
- preg_match returns 0 when the string does not match the regex.
0 does not "===" FALSE
So this check is not always wor... -
- modified pfsense-tools/builder_scripts/scripts/rc.d/etcmfs to set default size to 20m
-
- The /etc MFS on a 2.2 memstick image of the Netgate build is allocated with 10 MB of space. The files that get copied...
-
- Looks good now, gateway shows online at boot time and still shows online across several reboots. Thanks!
-
- Applied in changeset commit:118218cb69b1a8cea2f5915e4c81537b51462c34.
-
- Source IP is scoped now but it still is not showing "online" - In my testing from earlier it looks like the target ne...
-
- Applied in changeset commit:3f6525c1ab0fd3f704ab8e23f935c475c3cbd16c.
-
- Please try new snapshots, after move part of the logic to shell script it passed on all my tests
- 04:58 AM Revision a012464e: fix captive portal status page display
- 04:45 AM Revision bb18cfcb: fix up text
- 02:45 AM Revision e8fa9843: Pass friendlyifname to handle_argument_group, not realifname. Fixes #3984. clean up some text while here.
- 01:47 AM Revision e55e4b74: isset($_GET) seems to always evaluate to true, use something more specific. Fixes use of rc.linkup when run from CLI. Others likely fix similar circumstances, though maybe not ones that are used anywhere.
- 01:33 AM Revision c75e8aed: Disable delete_old_states in dhclient-script. rc.newwanip handles this correctly in 2.2, and this killed states in multiple circumstances where that isn't necessary nor desirable.
11/05/2014
-
- the fix earlier in rc.linkup didn't have any effect here. Dug through this more tonight. Best I can definitively say ...
- 11:18 PM Revision 9aec47b7: don't duplicate $message in CP log entries
-
- When clicking "Show last activity" on status_captiveportal.php (for instance, probably a problem elsewhere as well), ...
-
10:01 PM Bug #3989 (Resolved): DNS Resolver interface drop downs need enlarged
- The "Network Interfaces" and "Outgoing Network Interfaces" selection boxes need to be enlarged or made variable to th...
-
- fixed
-
- looks like check_reload_status is doing the right thing, rc.linkup seems to be where the issue is.
- 05:31 PM Revision d9b05eb4: When an alias contain hosts, add IPs and networks to filterdns too, otherwise you end up with a pre-defined and non-persistent table. Fixes #3939
-
- that change made kernel builds fail and was reverted.
-
- fixed
-
- Renato found solution today, implementing tomorrow morning.
-
- to me for testing
-
- Applied in changeset commit:d9b05eb490ab4d31a132c3e993bd560933eadd8c.
-
- Please try next snapshots
-
10:23 AM Bug #3842: Verdana font from the Linux package ttf-mscorefonts-installer causes rendering issues with pfSense WebGUI
- Hello!
I don't have Verdana or Tahoma fonts installed. I also don't have ttf-mscorefonts-installer package install... - 09:12 AM Revision fcfa23da: Merge pull request #1319 from phil-davis/patch-1
- 09:07 AM Revision 87d4456c: Merge pull request #1323 from derelict-pf/master
- 09:06 AM Revision 5940e655: Merge pull request #1326 from phil-davis/patch-5
- 09:06 AM Revision 798d8644: Fix obviously broken test in rc.initial.setlanip
- IMO might as well back-port any obviously wrong code to 2.1 branch, just in case anybody on 2.1.n cares for it or the...
- 09:05 AM Revision f81011ea: Merge pull request #1320 from phil-davis/patch-2
-
- Duplicate of #3842
-
- Ivo Babarovic wrote:
> After I upgraded from to 2.1.5 from 2.1.2.
> Text labels in web menus are shifted to the rig... -
- After I upgraded from to 2.1.5 from 2.1.2.
Text labels in web menus are shifted to the right and longer texts get ou... - 05:31 AM Revision e39c963a: fix up text
- 05:19 AM Revision 75756ab9: use a bit stronger of defaults in OpenVPN wizard
- 05:08 AM Revision 1c1fe666: Fix WINS description. It's not 1999, and it wasn't a good description for back then either. If you're running WINS at this point on your AD DCs...get rid of the Win 9x boxes, or realize you don't actually need or want WINS on anything Windows 2000 and newer.
- 05:05 AM Revision 7a22ab9b: fix up text
- 04:01 AM Revision cbc6a13f: Fix updating of hosts file on host override updates by bringing back the same behavior from previous releases.
- 03:22 AM Revision b7419cfc: skip disabled phase 1 entries in status output
- 01:57 AM Revision 261f2efe: fix NAT-T status. The 'nat' in the status array just tells how the connection is configured, not what it's actually using. Port seems to be the best way to determine what it's using. Fix up some other text while here
- 01:09 AM Revision 531686c1: use tabs rather than spaces, as most of this already did.
- 01:02 AM Revision d3c414e3: strongswan only has two options for NAT-T, force or auto.
- 12:44 AM Revision a43ddd1a: setting nmbclusters to 0 just results in an error, remove unnecessary line
- 12:34 AM Revision 41367b9c: remove old DISABLE_PHP_LINT_CHECKING, which dates way back to the CVS days and hasn't been relevant in years.
- 12:24 AM Revision 276efd64: touch up text
- 12:18 AM Revision 32171e59: fix invalid ipsec.conf
- 12:02 AM Revision f643a1f1: clean up text
11/04/2014
-
- There can only be one mobile P1 currently, which restricts you unnecessarily to only either IKEv1 or IKEv2 for mobile...
-
- this is correct for IKEv1 after my commits earlier. Seems to be working as it should. It'll continue to work on upgra...
-
- after further review and discussion with Ermal, the code is there to set forceencaps, it just isn't setting it correc...
-
- I have pushed them recently to be enforced.
The only remaining task is to remove Force from the options list because... -
- Old code was inaccurate and also listed entries that were symlinks to other disks
-
- In addition to the 2.2 issue of it somehow taking over php-fpm and thus breaking webGUI and...
I will note here that... -
05:53 PM pfSense Packages Bug #3986 (Closed): BandwidthD can break php-fpm in unknown rare edge case
- Hi,
Having a lot of struggles with BandwidthD in v2.2 More info here,
https://forum.pfsense.org/index.php?topic=7... -
-
-
- 07:31 PM Revision 756d867a: fix comment
-
- similarly, disabling a P1 doesn't remove it from the SPD nor SAD. It does remove it from the config file.
-
- I confirmed it again on the most recent snapshot. In addition to changing it not removing, deleting a P2 doesn't remo...
-
- Sorry, meant to add this for help, missed it,
https://forum.pfsense.org/index.php?topic=80248.msg437658#msg437658
-
- Hi,
I can't seem to get apcupsd or nut working in v2.2 - looks like a USB / driver issue, but I definitely could b... -
-
-
-
- Take a simple LAN/WAN setup, WAN set as a DHCP client. Boot the system with WAN's NIC unplugged. Then plug the NIC in...
-
- I pushed a fix that should treat this, test with new snapshots.
-
- aside from things that have bugs open, and things that can't be tested because of other open bugs, this seems fine. S...
-
-
10:25 AM pfSense Packages Todo #3983 (Needs Patch): Option for Cron Package
- Hello,
It's possible to add a custom button or other for disable or/and enable a cron task.
In the lastest versio... -
- Watch out for this one. It works on some boots and not others, or depending on the timing. There's a race condition s...
-
- When running the installer and choosing "Embedded" two errors are given by the GUI but if "skip" is chosen the instal...
-
- As i said before TAP should behave the same on 2.1 as well
11/03/2014
-
- This is a recent regression in 2.2. diag_ipsec_spd.php shows "No IPsec security associations" when there are active, ...
-
- A static route for the remote network of every P2 is added in 2.2, pointing to WAN's gateway IP. I'm guessing the int...
-
- the issue described here is resolved. The two Ermal noted we'll discuss
-
- I have done testing on this.
It works even today as is.
List of issues i am after:
- Racoon does not like agress... -
- The enable/disable/force NAT-T settings from earlier versions don't do anything in 2.2. It appears in newer strongswa...
-
- no change
-
- tun is fine, tap not.
-
- looks good, thanks Warren
-
07:00 AM Bug #3974 (Feedback): DNS Resolver: Advanced - Error in description
- Applied in changeset commit:d5566d43f4ace5036b5e5476d975bb8d13ce3b6f.
-
- Yeah i have the changes done. Just haven't submitted a pull request just yet. There are a few more which Im still goi...
-
- I have a bit of code to make that all consistent. I also see that Wagonza just made some updates to the related files...
-
01:38 AM Bug #3974: DNS Resolver: Advanced - Error in description
- Just noticed that the same issue exists for a few other items on the same page:
Outgoing TCP Buffers 0 vs 10
In... -
- Go to Services -> DNS Resolver -> Advanced -> Outgoing TCP Buffers and Incoming TCP Buffers (/services_unbound_advan...
-
- assigning to me for further testing. Unchanged in 2.2 from prior releases, not a common enough issue to hold up and p...
-
- fixed. Voucher sync is separate from CP's config sync, it does work.
-
- no change
-
-
- Hi,
It's possible to add a custom area to select only backup or restore
-One for Limiter
-One for Layer7
Than... -
05:35 PM pfSense Packages Bug #3977: Squid-dev 3.3.11_1 pkg installs but does not start on 2-2-BETA
- Nev Secular wrote:
> 2.2-BETA (i386) built on Thu Oct 30 13:58:57 CDT 2014 FreeBSD 10.1-RC3
> After installing squi... -
- 2.2-BETA (i386) built on Thu Oct 30 13:58:57 CDT 2014 FreeBSD 10.1-RC3
After installing squid-dev 3.3.11_1 pkg squid... - 05:27 PM Revision f384d8a5: Merge pull request #1329 from phil-davis/patch-3
- 04:43 PM Revision a3fad592: Fixup dhcpd interface enabled check
-
- 03:04 PM Revision ba667cc6: Fix console set interface IP address
- Problem as per forum https://forum.pfsense.org/index.php?topic=83651.0
The problem comes whenever services_dhcpd_conf... -
- that didn't fix the issue described here
-
- /tmp/post_upgrade_command.php is executed after new files are in place and before reboot, probably the root cause is ...
- 12:56 PM Revision ec290464: Merge pull request #1328 from wagonza/master
- 12:54 PM Revision fe9d4894: Fix indent
- 12:52 PM Revision 2783e408: Revert "Indent better"
- This reverts commit a431bfc9e698c753d9a54218af9076184deb6251.
- 12:45 PM Revision d5566d43: Make sure defaults values are actually used. Fixes #3974
-
- not true, please post more info to the forum or list for assistance.
-
05:27 AM pfSense Packages Bug #3975 (Rejected): Gateway Monitoring Offline
- PfSense 2.2 shows gateways as always offline
-
- that is replicable on 2.1.x but not 2.2, already fixed there.
-
11:04 AM Bug #3976 (Resolved): VLAN Interfaces on LAGG get orphaned on LAGG change
- Reproduce:
1. Create LAGG with e.g. em3 + em4, LACP and a nice description
2. Create a few vlans and assign them ... - 10:48 AM Revision 7bb24e18: Merge pull request #1327 from wagonza/pfSense-master
-
- It's not the gateway that needs states killed, it's the old WAN IP.
-
06:36 AM
Bug #1629: invalid state table entries after WAN IP change
- I'm on ...
- 10:08 AM Revision 46a989ce: Indent here as well
- 10:08 AM Revision a431bfc9: Indent better
- 10:04 AM Revision 1b436de1: Be consistent with the other pages
- 10:03 AM Revision be11b6f1: Add braces
- 08:27 AM Revision 4c3abd34: Fix obviously broken test in rc.initial.setlanip
- IMO might as well back-port any obviously wrong code to 2.1 branch, just in case anybody on 2.1.n cares for it or the...
- 07:54 AM Revision 0a89d059: Merge pull request #1324 from phil-davis/patch-3
- 06:04 AM Revision 8727b3c8: Set interface address from consol tidy output
- While trying to see why this is not working for me (forum https://forum.pfsense.org/index.php?topic=83651.0 ) I have ...
-
-
02:35 AM Bug #3940: check_reload_status uses deprecated libevent-1.4
- It also looks good on my custom build - no high CPU load.
11/02/2014
-
05:48 PM Bug #3973 (Resolved): Route 53 dynamic DNS provider fails to update record
- Existing records are not updating with the Route 53 dynamic DNS provider.
Records that do not exist are created p... -
- Updated to:
2.2-BETA (amd64)
built on Sat Nov 01 21:36:28 CDT 2014
FreeBSD 10.1-RC4
Now filterdns has just 8 th... -
- My main 2.1.5 production system is the big offender with this - it has over 4000 in filterdns fstat. But I can't upgr...
11/01/2014
-
-
-
-
-
-
-
-
-
- Working AVAHI on 2.2
mkdir /var/run/dbus
chown messagebus:messagebus /var/run/dbus
dbus-daemon --system
Aaron... -
- A general note
-
12:58 PM pfSense Packages Bug #3972: Avahi daemon doesn't start due to missing folder for requisite dbus-daemon.
- Jim P wrote:
> While this is being fixed, it may also warrant adding a <service> tag for dbus.
Was that a general... -
- While this is being fixed, it may also warrant adding a <service> tag for dbus.
-
- Oops! I confused the terms "Assignee" and "Assigner". I put myself as the assignee, thinking that I was supposed to d...
-
- Avahi package version 0.6.31 pkg v1.06 has a bug which prevents it from working. This bug should be easy to fix. I ha...
-
03:16 PM Bug #3913: if_bridge missing ALTQ support
- Well sorry to bring bad news, but i still got the same error message (i have removed the shaper rules and recreated t...
-
- that does work, but there are issues with that approach. One, you have to remember what VHID you're using on that, an...
-
- Getting back to this.
Apparently i just made conversion code to convert any such aliases to carp on same vhid.
So... -
- Applied in changeset commit:f3dd7e8cdb11077486421364ea3a11c411ba807b.
-
- Applied in changeset commit:9fdc167f4ef1c8fd1b76ba9ca6e56c8085dbe672.
-
-
- Applied in changeset commit:d338018f4798ea41975589f8c5b111568747e572.
-
-
- Applied in changeset commit:935fcedbca2dbe8c3d9eb41bc5739b511a9ec19a.
-
- Applied in changeset commit:d35dfaaecb5eabedade43738ba4f76967a7425a3.
-
-
- most I've found thus far is it still happens after removing all the "route delete default" commands from dhclient-scr...
-
- People have confirmed that the behaviour is improved.
Only the graph part needs improvement. -
-
- I think i found the cause.
Please test with new snapshots. -
09:07 AM Feature #3971 (Resolved): IPv6 - Preserve the DUID used for WAN DHCP-PD in the configuration file
+Feature Request+
Preserve the DUID used to obtain the DHCP-PD addressing on the WAN in config.xml
Secondary ...- 06:42 AM Revision 038f6e96: clarify logs generated by newwanip(v6) when restarting packages, it's not only IP changes that end up here (by design).
-
- not the issue it initially appeared to be, assigned to me for review in the future. behavior is no diff than previous...
10/31/2014
- 10:05 PM Revision a94a16cd: s/a/an/ and speling.
- 09:55 PM Revision 162a7b4e: s/then/than/
-
- Ermal - no change with the kernel you built. I have a test setup up now that you can reach. /msg me for info.
-
- There is at least one file from earlier versions that has to be removed in the process of upgrading to 2.2, with setk...
-
- this is for site to site VPNs with > 1 P2. One easy way to replicate, setup a site to site IPsec between 2.1.5 and 2....
-
- It works for me for mobile clients which this issue is about!
The unity plugin sends split-include sections now. -
-
-
- Should work correctly on new snapshots.
-
-
- Ok reproduced only for TAP, tun is ok.
Also i think tap behaved the same before. -
- I cannot replicate this on tun/tap?!!!
I do not even see changes in code to not support it! -
- I'll take this one
-
- PC Engines not aware of the issue, but not surprised by it given Realtek's horrible documentation.
We've confirme... -
- looks to be fine, works in both directions from testing.
-
- I couldn't reproduce it, I changed local or remote subnet and it worked as expected. Can you confirm it is still happ...
-
- When using a DHCPv6 WAN, apinger sets the srcip to be the interface link-local address but it does not set the scope ...
-
- New snapshots are available, using libevent 2.0 and check_reload_status with fixes.
-
- pfsense-tools repo already have the final patch applied, please try it or wait new snapshots today yet.
-
- After applying your patch there are still 3 statements with "socket_close_command(fd, ev);" left:
root@pfsense-bui... - 02:24 AM Revision c656bc75: Fix getext to gettext typo
- 02:23 AM Revision 41aa5cd4: Fix getext to gettext typo
- 02:23 AM Revision 29af6265: Fix getext to gettext typo
- 02:22 AM Revision 24516832: Fix getext to gettext typo
- 02:21 AM Revision b3f0b2e1: Fix getext to gettext typo
- 02:10 AM Revision 687712ee: More gettext typos
- 02:10 AM Revision 95169728: More gettext typos
- 02:09 AM Revision c69f62b8: More gettext typos
- 02:07 AM Revision 91ee10c0: More gettext typos
- 01:30 AM Revision e4982b90: fix typoed gettext
10/30/2014
- 09:37 PM Revision 1ae41bfe: Kill states associated with the old WAN IP when WAN IP has changed. Retain
- hidden config option to wipe all states on IP change, as there seemed to
be circumstances where the 'pfctl -k $oldip'... -
- 06:15 PM Revision 461eac09: only kill all states if the IP changed. ticket #1629
-
- this is fixed. The states of the former WAN IP are now killed post-IP change, which should resolve nearly all cases w...
-
- issue here is resolved
-
- Its expected and resolving this is not in plan for 2.2.
Also that is not what this ticket is about. -
- I am unsure if this should be allowed!
Normally switching to master it should have the latest voucher status synched... -
- Seems to be working for me now.
-
- the most common scenario here is fixed, IPv4 is fine, but IPv6 has regressed from 2.1.x. reply-to with v6 works in pr...
-
- This seems to be resolved with confirmation from https://forum.pfsense.org/index.php?topic=81440.msg457606#msg457606
-
-
-
- I re-opened it after confirming that atypical circumstance. Your pull request is wrong though, it fixes a rare edge c...
-
- Well, I won't argue. If you see no bug then there is no bug.
-
-
- this is valid with topology subnet in newer versions
-
- I know that pfsense team wants to release 2.2 asap but its quality will suffer if fast decisions were taken place.
... -
- scratch that, can happen with topology subnet
-
- The script */usr/local/sbin/ovpn-linkup* has en error where network mask is returned as a gateway when no gateway pro...
-
- I contacted Pascal @ PC Engines to see if that's an issue they're aware of and if they have any further info on it.
... -
10:44 AM Bug #3870: re(4) NICs on APU are unable to hardcode speed/duplex properly
- Boy I sure hope this is somehow fixable in software - we have a fair handful of APUs deployed already and continue to...
-
- Linux much happier on SD card in the APU, couldn't get anything to boot from USB flash.
TLDR version: either the... -
- Either OpenBSD has the same problem, or this is a hardware issue. ...
-
10:21 AM Bug #2406: No IP alias within the subnet of a CARP IP can be deleted
- Chris Buechler wrote:
> This is fixed. You can't remove the last IP alias on the subnet of a CARP IP because it'll b... -
- That previous patch is not correct, consider this one.
10/29/2014
-
- fixed
-
- The specific issue here is OpenVPN client is launched multiple times when connecting to FQDN with "resolv-retry infin...
- 08:39 PM Revision 5274102e: Hide burst for limiters, since it doesn't do anything. more details in
- ticket #3933
-
- Thomas, could you try attached patch, built with libevent 2.0 and let me know the result?
-
- I built a custom image and confirmed it. We are not seeing it on our snapshots because builder was not updated and st...
-
- fixed.
-
- Ticket for what Ermal and I discussed earlier re: IP aliases on CARP. That functionality is effectively gone from 2.2...
-
- with a kernel Ermal built with his changes as committed earlier, v4 reply-to looks to be fine in all scenarios. Will ...
-
- Current status is broken checksums on IPv6, source NAT doesn't apply to translate the IP back on IPv4 (though return ...
-
- I'll try this on Linux to see how that behaves, should help narrow down whether it's hardware or driver.
-
- to me to review in combination with the other limiter tickets.
non-regression and uncommon issue, removing 2.2 ta... -
- hm, not sure what I was trying at the time, apparently I missed assigning the bridge or something. thanks for the fol...
-
- Hello,
Sorry for the late testing.
I tried to reenable traffic shaping via the wizard but get this one:
[[There... -
- dummynet burst on stock FreeBSD 10.1 does indeed work how I'd expect it to work. Ours doesn't have any impact whatsoe...
- 01:02 PM Revision a4372874: Fix a typo on array index, related to ticket #3963
-
- Yeah it really should say "Connecting", how difficult would it be to make that happen? I don't think this is a regres...
-
- After doing somo analysis, my understanding is 'Status' is supposed to be up, since interface exists on operating sys...
-
- After discussion with Jeremy, we're satisfied this is good for 2.2.
-
10:47 AM Feature #3365: Implement package signing
- We'll create a secured key repository, and signing keys will be imported into it for access. Renato will create the ...
- 06:08 AM Revision 002d286c: fix up text
-
- this may or may not still be an issue with 2.2, much has changed, and this is something we've never been able to repl...
-
-
-
-
- On systems with AES-NI enabled, OpenVPN using AES-128-CBC, AES-192-CBC, and AES-256-CBC crashes on start. ...
10/28/2014
- 09:33 PM Revision eea2ad5d: FreeBSD fails to set advskew back to 0 after you set it to any other
- value. That's a separate issue that needs fixing upstream, but in the mean
time, we can work around it by removing al... - 07:06 PM Revision 70eef835: Remove redundancy as pointed out by phil-davis
- 07:06 PM Revision 44c7d73c: Decode recently created cert and key. It fixes #3964. While here, fix logical condition to create a new cert if crt or key is not present
- 06:31 PM Revision 569e2fdf: Add option to kill all states on IP change, currently a hidden option for more testing. ticket #1629
-
- That is correct, we're running the commands correctly to set it back to 0. The source of the issue is FreeBSD 10.1 wo...
- 05:00 PM Revision fd057a56: Merge pull request #1317 from phil-davis/patch-1
- 04:55 PM Revision 0a8dd27b: Remove redundancy as pointed out by phil-davis
- 04:26 PM Revision 7c199791: Merge pull request #1297 from phil-davis/patch-23
-
- needs review along with the other limiter tickets, there is overlap between them.
-
- Applied in changeset commit:44c7d73c4a1aa2cca3a932447ef6b6be2034badd.
-
- Applied in changeset commit:143c22f7719836d5decee0da0ec52e61e79fd6a2.
-
- cert.pem file is missing on first boot of clean 2.2 nano install, which leaves the web interface dead. ...
-
- I committed a change to add a new option that kills all states upon IP change. That's going to be the answer for thos...
- 12:17 PM Revision 143c22f7: Decode recently created cert and key. It fixes #3964. While here, fix logical condition to create a new cert if crt or key is not present
-
- Pull request has been merged
- 11:49 AM Revision 0a8d7fe9: Back to use listr instead of vncellt since it has small fonts and mitigate changes of go outside the sidget. It should fix #3937
- 11:24 AM Revision 30cb409d: Simplify logic
- 11:10 AM Revision bf50b0a4: Remove unecessary variables
- 11:08 AM Revision 9c76c0f1: Whitespace and indent
-
08:48 AM Bug #3965 (Resolved): dhcp6c started before bridge configured at boot, preventing interface tracking
- Setup:
- WAN interface configured for DHCPv6 prefix discovery
- LAN interface configured for IPv6, tracking interfa... -
That change is an improvement and keeps the widget from being pushed off the side of the dash.
Call it a perso...-
- Applied in changeset commit:0a8d7fe996275febad7ee28ec3daf70101928cc6.
10/27/2014
-
- To clarify - eventually it goes to "down" status, after failing for quite a while. The issue is it shows "up" while g...
-
- this also applies to PPP, likely the same root cause
-
- PPPoE-type WAN interfaces show their status as "up" when they aren't actually. To replicate, just set an interface to...
-
- this needs to be set in tcshrc so it applies to everything using fetch and similar utilities now and in the future.
-
- 08:36 PM Revision 4721677d: fix ping_hosts.sh to not ping IPsec if CARP is in backup
- 08:32 PM Revision 7e1aa4b7: fix ping_hosts.sh to not ping IPsec if CARP is in backup
-
02:57 AM pfSense Packages Bug #3962: LADVD interface handling issues with lagg and bridge
- My thoughts are that it is a GUI issue. I believe that only the physical interfaces should be shown.
10/26/2014
-
-
- this issue is fixed, that one's #2786
-
-
- regressed in 2.2
-
- I'm guessing this is a problem with ladvd itself and nothing we're doing with it, so should likely be reported upstre...
-
- On my pfsense 2.1.5 router I've got LADVD installed.
Two physical interfaces are bridged.
As long as I only selec... - 03:11 AM Revision e8b5f724: domain and search should not both be defined in resolv.conf per FreeBSD man page and handbook (only the latter is actually used). Change this to just not use domain, and set the search to the system's domain where not using the function that generates the search list for dynamic WANs.
10/25/2014
-
11:31 PM Bug #3922: jumbo frames on lagg not working
- Typo: #3744 should have been #3774
-
- This still seems to be a problem for me. I'm running the 2.2-BETA (amd64) Fri Oct 24 12:17:25 CDT 2014 build. I have ...
-
- Where you have multiple P2s on 2.2, only the first does anything. It negotiates successfully, but the strongswan/2.2 ...
-
- When editing an existing P2 in 2.2, the original entry isn't removed from the SPD. For instance, change just the IP s...
-
- pretty sure this was fixed in a 2.1.x release since then. It's definitely good in 2.2.
-
-
- it's pf that makes this hang somehow. disable pf, and traceroute6 finishes no problem. No blocked traffic being logged.
-
-
-
-
-
-
- I don't see any actual bugs here. All DHCPv6 leases are shown in every instance I've seen. Whether they're "active" s...
-
- this isn't true on 2.2, haven't tried earlier versions. The "route add failed" scenarios could well be a problem, but...
-
- sshdcond.inc function restart_sshd() does edits to /etc/sshd and /etc/sshd ends up with invalid PHP syntax.
Forum: h... -
- not an apparent issue on 2.2 (unless this somehow overlapped with separate issues open there)
-
- not sure of status here, assigning to Renato for follow-up.
10/24/2014
-
- I never could replicate that. The described behavior is the browser not responding, and nothing we do should make the...
-
- no change. Ermal, msg me and we can both take a look at my test setup.
-
- I need to go through and verify a variety of upgrade scenarios.
Only issue I've seen recently is where you have t... -
-
- this will break enough existing systems it's worthy of RC blocking
-
- ALTQ support in tun and tap is missing in 2.2. A number of existing configurations on 2.1x will fail to load the rule...
-
- the subject doesn't quite cover all the breakage this causes, there are various times that the default gateway is rem...
-
- fixed
-
-
- this is good in 2.2, if we do another 2.1.x release we probably want to back port that.
-
-
05:05 PM Bug #3678: Kernel panic: "Bogus interrupt trigger mode" on Intel J1900
- Chris Buechler wrote:
> this was since fixed in 9 and 10 stable FreeBSD, current 2.2 should work here
I can confi... - 02:38 PM Revision 577b776e: Warn if attempting to import IPv6 range
- There is currently no code to convert an IPv6 range to a set of corresponding IPv6 subnets, so warn the user if they ...
- 02:32 PM Revision bb67ac32: Support converting an IP range to an array of addresses
- so that it can be used for expanding ranges in host alias input.
- 02:25 PM Revision feb1953e: Expand range or subnet for host alias
- When entering a host alias, if the user put an IP range (like 192.168.0.10-192.168.0.20) or a subnet (like 192.168.1....
-
06:58 AM Bug #3956 (Resolved): Check for invalid CA on generating new certificate
- ... or check for valid values on generating dynamic function internalca_change() in system_certmanager.php
I had a...
10/23/2014
-
- PPTP is dead, and shouldn't be used in this context anyway
-
- The IPsec dashboard widget needs updating to understand strongswan's status.
-
- that's a scenario that no client accounts for. Excessive updating can get you banned from some of the providers, whic...
-
04:03 PM Bug #3901: DynDNS is not forcefully updated after powerup
- From my point of view the current behaviour is not perfect.
As I described above it might be the case that the data ... - 02:25 PM Revision e112f9ee: Merge pull request #1312 from phil-davis/patch-8
- 02:24 PM Revision 095707fe: Merge pull request #1313 from phil-davis/patch-9
-
-
10:06 AM Bug #3954: Port forwarding rule changes do NOT take affect
- Nevermind, I found that vpn->pptp->redirect to x.x.x.x was configured. please close bug.
-
- my pfsense is:
2.1.5-RELEASE (i386)
built on Mon Aug 25 07:44:26 EDT 2014
FreeBSD 8.3-RELEASE-p16
I have a po... -
- After upgrading my Mac to Yosemite 10.10 and Safari to 8.0, I don't have this problem anymore. I do see the page free...
-
- Pushed
-
04:12 AM Bug #2882: 6RD not working in latest snapshots
- I'm using the latest snapshot (amd64 built on Tue Oct 21 22:27:38 CDT 2014) and it seems like 6rd still isn't working...
10/22/2014
-
03:27 PM Bug #3369: Captive vouchers expire too quickly
- Chris Buechler wrote:
> mine for further testing when time permits
good luck :) -
- mine for further testing when time permits
-
- Thanks maz, got it. One follow-up question sent via email.
-
- I have sent you the link through your email Chris cmb(at)pfsense
please do not share the image publicly as its key... -
- this is still the case, though only IE seems to care, it's still an issue in IE 11.
10/21/2014
-
- change the GUI cert generation code to use it. Also, move the GUI cert
generation code to its own function so we can ... -
-
-
- 05:46 PM Revision 687d0a6d: remove the command number shown in the shell prompt, it's a pointless
- waste of screen space
-
- it doesn't appear to be possible to get a system into this state in FreeBSD 10.x, it's been fixed since 8.x.
-
- this definitely works on 2.1x and 2.2.
-
-
- works
-
- this looks to be fine, scenarios that previously triggered multiple restarts on the secondary now only have it restar...
-
- Additional info, secondary spits this out: ...
-
03:18 PM Bug #3951: Processes like filterdns and ipfw-classifyd accumulate many open file handles
- Here it is!
-
- could anyone attach the full output of fstat from an affected system? Spot checked some using filterdns and they seem...
-
- My case: pfSense 2.1.5 running on i386 embedded version. Clean install, only modification apart from UI is password f...
-
- Forum: https://forum.pfsense.org/index.php?topic=63357.msg453040#msg453040
and surrounding discussion and results in... -
- why do it there in update_bogons? Set it as an env variable in general and nothing else needs to be touched.
-
- pull requests merged, will leave this to feedback for verification
-
- Firewall->Aliases, add an alias, type Networks.
Put a range like 192.168.1.10-192.168.1.0
Save
It tries for a wh... -
12:50 PM Bug #3900: DynamicDNS should allow "@" at hostname
- Sent a pull request to fix this annoyance. ( https://github.com/pfsense/pfsense/pull/1315 )
Forum discussion at: h... - 09:32 AM Revision 99ba943a: Prevent Internal Server Error if range is backwards
- Fixes redmine #3950 - ip_range_to_subnet_array can easily swap the input parameters if the caller has passed/entered ...
- 09:18 AM Revision 29b3bb05: Prevent Internal Server Error if range is backwards
- Fixes redmine #3950 - ip_range_to_subnet_array can easily swap the input parameters if the caller has passed/entered ...
-
09:07 AM Feature #809: Config sync username change
- Still a problem. Version 2.1.5
-
- Duplicate of #3383
Please search a bit before opening tickets. -
- I have 2.1.5 with a local user (admin) plus an LDAP server (Active Directory). The LDAP server is set as the primary ...
-
- Duplicate of #809
-
- Duplicate of #809
-
- The HA configuration sync page takes a username and password. However, if you change the username to something other ...
- 06:54 AM Revision 9b86d3fe: + is a valid character in some dynamic DNS providers' usernames. Fixes #3912
- 05:40 AM Revision 2fb66948: hostnames can end with a . (and actually always do, it's just usually implied), so allow that here. Fixes wrong input validation in parts of nsupdate GUI, among other things.
-
- Chris Buechler wrote:
> maz: if you can upload that image somewhere, I'll check it out.
I will upload it ASAP as ... -
- Also, this is the same as #3829, which is resolved, so good.
Now clicking the IP address takes the user to the full ... -
- Jim worked around this one. Phil, if you see anything that was missed, feedback appreciated but I think this is funct...
-
- needs re-testing on 2.2
-
- this is still an issue. That pull request was not the answer though.
It should suffice (for 2.2) to add input val... -
- I've left multiple browsers up on traffic graph for several hours up to days, with no ill effects. I just pulled up t...
-
- fixed, thanks
-
- You'll see in the system log how it works. If your IP hasn't changed, and it's been less than 25 days since the last ...
-
- Had a look at dhcp.c ISC source code and submitted a bug report. Then after more research I found this:
Extend the... -
-
- Updated subject to reflect full extent of issue - it's all dynamic DNS services, not just RFC 2136.
-
- When using the "Use Public IP" option of RFC 2136 dynamic DNS updates, you'll always end up with the public IP of the...
10/20/2014
-
- Jim's fix works, and suffices for 2.2.
-
-
- A variety of areas do things like this, it'd be nice to eliminate any unrelated changes
-
- I tried on Opera 25.0.1614.50 and somehow Opera fits it in better, but still the font size of stuff in the Interfaces...
-
- I have attached a screen shot of what the Interfaces widget looks like on a 2.2 system with a long IPv6 address. Rega...
-
- 2.2-BETA (amd64)
built on Sun Oct 19
Have tried it with:
Windows7 with Firefox (33.0 and prior)
Mac OSX wit... -
- What is the operating system, browser and pfSense version you are using? I couldn't replicate the problem here.
-
- it is broken on 2.2 at the moment, that's #3760.
It does work where route-to/reply-to function correctly though. ... -
- not important for 2.2
-
- still an issue on latest snapshot. the LAN rule in that scenario ends up as a comment with "at the break".
-
- Where you have an OpenVPN client or server instance defined on tun and switch to tap, or vice-versa, the ovpnc*/ovpns...
-
- I fixed it in commit:7d363e57a0df41604777b4019c98caeef0b8a79f before 2.1.4 but apparently never noticed this ticket t...
-
- this has been fixed at some point in the mean time (probably in a 2.1.x release since then, but tested and definitely...
-
- can't replicate, inadequate detail to know what might have happened there, doesn't appear to be something anyone else...
-
- re-tested this scenario on 2.2 and it works fine there as well.
-
- Ermal and I talked about this a couple days ago, it doesn't have a ticket though so opening here. System log on 2.2 s...
- 05:00 PM Revision a23adfba: Merge pull request #1306 from phil-davis/patch-3
- 03:41 PM Revision 6d951458: Let user decide if he wants to proceed to the upgrade when sha256 fails to download. Fixes #3576
-
- pfSense version: 2.1.5-RELEASE (amd64)
built on Mon Aug 25 07:44:45 EDT 2014
FreeBSD 8.3-RELEASE-p16
After ena... -
- after discussion with Ermal, needs testing vs. stock FreeBSD
-
- Phil - do you not see a pencil to the right of your comment? That's how you can edit previous posts. I thought it was...
-
- Domain-Name-Server is specifically set in pfSense DHCP config to 10.49.48.*250* and that is delivered correctly to th...
-
- It is related to the client requesting DHCP "option 252", which is related to web-proxy auto-discovery - http://tools...
-
- Applied in changeset commit:6d9514581abc09a05f6d86633bbd0bb08aab2cf5.
-
- @ermal, Are you aware of these performance issues?
- 12:31 AM Revision 2c296872: h-node should be 8
- 12:30 AM Revision 13ec619c: h-node should be 8
10/19/2014
- 11:38 PM Revision bc12ae8a: Underscores are valid characters in domains. Fixes #3219
-
- fixed, thanks
-
- that'll suffice
-
-
- resolution Jim noted has since been implemented, which resolves the only real issue I see here.
-
- lot of things it can conflict with, if you want to add the input validation, patches welcome.
-
-
- as described isn't an issue
-
- maz: if you can upload that image somewhere, I'll check it out.
-
- issue as described doesn't exist in 2.2
-
- Local browser cache was the likely cause of that, though www not matching would be unexpected. Not a replicable issue.
-
- issue as described was fixed in 2.2
-
- fixed in 2.2
-
- Confirmed as described. Create a new host alias containing only "example.com", save and apply changes. ...
-
- there is something fundamentally wrong with your configuration, LAN and WAN can't have the same IP, and you have a ma...
-
- fixed
-
- also after changing the display from UTC to local time, BOOTP entries show up as "1969/12/31 07:00:00PM"
-
- status_dhcp_leases.php shows the end of BOOTP leases as "tstp never", where it should just show the "never" and maybe...
-
08:25 AM Bug #3944 (Resolved): git fatal errors are not shown to user when building pfSense iso from source.
- git fatal errors are not shown to user when building pfSense iso from source.
This complicates troubleshooting when ... -
- Replacing line 90 in rc.initial.firmware_update, the "sleep(15)", with aborting the upgrade instead (making the sha25...
10/18/2014
-
- Return routing is correct now, but TCP checksums are broken (with or without hardware checksum offloading enabled).
-
- Tester issue.
-
10/17/2014
-
-
- The loading should be faster.
-
- Works correctly now.
-
- Next snapshot should have the fixed of allowing states to match properly.
-
- I am sorry but you need to read better the source!
10/16/2014
- 09:46 PM Revision 2ac79ade: Merge pull request #1310 from phil-davis/patch-6
- 09:44 PM Revision 308e3042: Merge pull request #1311 from phil-davis/patch-7
-
- that's a problem inherent in what you're doing with squid and has nothing to do with CP itself.
-
03:58 PM pfSense Packages Bug #3660: Captive Portal Idle timeout Pfsense 2.1.3
- It's true. Solution to the problem on the link below
https://forum.pfsense.org/index.php?topic=69606.0 -
- issue as described isn't true
-
-
-
- Not sure if i should file this under pfsense or packages..
For haproxy it would be beneficial to have support in pf ... -
04:10 PM Bug #3760: reply-to with TCP and IPv6 generates broken checksums
- Same troubles on:
built on Thu Oct 16 09:56:37 CDT 2014 -
- no change on: ...
-
- Thanks Phil, my bad on that breakage. Will re-test this when I get a moment
-
01:56 PM pfSense Packages Bug #3942 (Resolved): bind - allow starting named with "-4" argument
- pfSense Version 2.1.15 amd64
BIND pkg Version - 9.9.5P1_5 pkg v 0.3.5
Requesting feature to start the named daemo... -
01:10 PM Bug #3898: Traffic Graph webpage freezes up after some time
- p.s. the browser in my case was Firefox 33.0 on intel windows-7
-
- Just thought I'd add:
There is also a similar issue on "Status: Traffic shaper: Queues". If left in a browser for so... -
-
-
- that didn't fix it. Config diff attached that shows changes made by interfaces.php just clicking "Save" on an assigne...
-
- there is an invalid checksum issue at play here that has a separate ticket.
-
- Take a simple WAN and LAN setup, WAN on DHCP with its dynamic gateway marked as default, LAN static. Add a third NIC ...
-
- Using ipguard and dhcp server to block using MAC is palliative solution as firewalls usually block via MAC rules are ...
-
- Using ipguard and dhcp server to block using MAC is palliative solution as firewalls usually block via MAC rules are ...
-
- duplicate. and it's pointless.
Though it is possible to MAC filter w/CP -
- doesn't crash anymore, but it also doesn't work at all.
trying to create any zone results in: ... -
-
- affects at least 2.1.5 and 2.2, not sure about earlier. Not sure how involved fixing this is at a brief glance, it's ...
-
- SLAAC also ends up missing a default gateway, though System>Routing shows a gateway entry with the appropriate IP and...
-
- still no CLA.
Per - could you please go through that process as Jim noted so we can accept this? -
- This is a little better, but still completely non-functional. It actually sends pfsync traffic now, which is the impr...
-
- fixed
-
- This has always been an issue on at least some (and I believe most, if not all) re(4), dating back to at least the Fr...
-
- As crosscheck: I just have build check_reload_status using libevent-1.4.14b-stable. With this version the load is ok.
-
- The snapshot 2.2 builds uses deprecated libevent-1.4 library. The Makefile of "check_reload_status" was fixed with co...
-
- Also, in *rc.newwanipv6* instances are started twice ...
-
- Look for "openvpn_restart" event in the system log to speedup things. Just forgot to mention it in the post above.
-
- Yeah, obviously I can't run 2 times same instance but bug in logic can. So, here is system log.
Looks like opvn i...
10/15/2014
-
07:22 PM Bug #3939 (Resolved): Cannot create Host or Network type alias with an IP address/range
- Affects 2.1.5 release as well as the latest 2.2 build - pfSense-LiveCD-2.2-BETA-amd64-20141015-1437.iso
Repro step... -
- Thanks Phillip, I can get past the interface assignment now.
I don't know if this is related or not but now webConfi... -
- Applied in changeset commit:5d49ceac8b7591f4db502eb4c2c52b37cc63e7ae.
-
- This can be marked as resolved.
Though general issues are to be solved in FreeBSD for this.... -
- Tested this with several very large lists. I think it can be changed to resolved. Thanks.
Updating: pfB_IBlock
6... -
- Patch has been merged in to fix the wrong ioctl handling.
Please test newer snapshots. -
- Please use the next one.
-
- Damn, i was getting crazy with my servers until i found this report !
I tested "built on Wed Oct 15 11:40:50 CDT 2... -
- Please test with later coming snapshot since it should have the final fix for this.
-
-
-
- Just need tests. I'll take care of it.
-
-
- From the logs seems you have already an running instance hence you cannot start a second one!
Can you post your syst... -
- Please try next coming snapshots this should be fixed.
-
-
- I've tried both 2.1.x and 2.2 and they are both affected. It's not possible to set the speed/duplex on either one.
-
02:02 PM Bug #3870: re(4) NICs on APU are unable to hardcode speed/duplex properly
- Do we know if this is a problem with 2.1 or 2.2, (or both)?
- 01:49 PM Revision 29fb23d4: Merge pull request #1309 from phil-davis/patch-5
-
-
-
- Jared put fixes into 2.2 ( commit:6817c18afa737e83756516a7b7c14ff5e5d85814 and commit:2300ee35e94bc49dff99f64133fe98c...
-
- Assigned back to JimP, because Jared is no longer with us.
-
- Did you try to send an tcp/udp packet rather than icmp one?
-
- Actually try out a next coming snapshot i found a quick hack that will help even for icmp case.
-
- Ermal suggests that if /cf/conf/use_xmlreader exists, that a faster parser will be used in 2.2.
Please re-test. E... -
- At boot on a current snapshot with captive portal enabled there is a PHP error displayed:
PHP Errors:
[15-Oct-201... -
- 08:41 AM Revision 466aae83: Manage dhcpleaseinlocaltime consistently
- dhcpleaseinlocaltime is actually a global setting, but the setting is stored per-DHCP-enabled-interface.
The display ... -
- Confirmed fixed for IPsec P1, PSK tab, and User PSK fields. Invalid characters are now properly rejected.
-
- The changes in this commit ( https://github.com/pfsense/pfsense/commit/607e15dbdf942483154887fea278bf54c64ae6ce ) hav...
- 06:41 AM Revision 73a96698: Provide an edit button for static mapped entries
- As suggested in forum https://forum.pfsense.org/index.php?topic=82883.msg0#new
Instead of a non-functioning red plus ... - 05:47 AM Revision fff9ee45: Whitespace in status_dhcp_leases.php
-
05:37 AM Bug #3784: Cannot enter hostname with a dot
- Owen Gerrard wrote:
> Buster de wrote:
> > Why you can't put only "server" into the hostname and "sub.domain.com" i... - 04:19 AM Revision 5d49ceac: Fix #3935 Properly allow WAN without LAN
- Was broken by https://github.com/pfsense/pfsense/commit/bd0b5d2dc7a279d3473a65a11d67efb5e39392be
10/14/2014
-
-
11:27 PM pfSense Packages Bug #3936 (Resolved): Proxy state tab of lightsquid
- In the proxy state tab of lightsquid I get the following ...
-
- It was broken a week ago, I'm sure accidentally :)
This code works: https://github.com/pfsense/pfsense/pull/1309
... -
- Also, if I add a NIC to finish startup then try to unassign from the menu, it doesn't say anything but returns to the...
-
- Running a VM with one NIC.
Boot to the latest snapshot ISO:
pfSense-LiveCD-2.2-BETA-amd64-20141014-1737
No VLANs... -
-
-
-
-
- It is fixed for me with new snapshots.
-
08:14 PM Bug #3760: reply-to with TCP and IPv6 generates broken checksums
- Whoops - Submitted that last update too early and couldn't figure out how to remove it.
The version I am currently... -
- Can I just check, should I be using the pre-compiled snapshot from here:
https://snapshots.pfsense.org/FreeBSD_relen... -
- More testing needed after another change have been merged.
-
- Also use some more sane defaults for the contents of the default self-signed certificate's fields so it will be more ...
- 06:44 PM Revision 1f4ad8f4: update comment to reflect breakage caused here and reference associated redmine ticket, not high priority, can be fixed later
- 06:21 PM Revision eb71461c: block IPv4 link-local. Per RFC 3927, hosts "MUST NOT send the packet to
- any router for forwarding", and "any network device receiving such a
packet MUST NOT forward it". FreeBSD won't route... -
- Applied in changeset commit:4703c007ef8b5cef28ab9650b28ea807cc7611f6.
-
- A patch for proxy support without username/password configured on system->settings will be considered now.
-
- Applied in changeset commit:e02ea742a546513eedcef1f4049a90e998951b78.
-
-
- Bumped to 2900. The only reason left to 30 was for speed ones.
Normally having 30 limiters is a bit.... unusual sinc... - 05:41 PM Revision 69b79ff0: Fix PSK for non-ascii also here, ticket #3917
-
- This should be working afaik!
-
- This should work better on pfSense 2.2 as of 1 week ago!
-
- It should not do this anymore on newer snapshots.
- 05:23 PM Revision 5a42d9ef: Fix initial console menu layout, it fixes #3884
-
- Patch merged for 2.2 from 2.1
-
- It will take effect only when the queue if full as normal with other shaping implementations.
If your queue is not f... - 04:50 PM Revision b907136c: Improve IPsec status page for mobile. It fixes #3917
- 04:46 PM Revision ca1fdcce: Add missing gettext call
- 04:40 PM Revision d6c9dcf9: Add missing gettext calls
- 04:23 PM Revision 6795e0da: Fix indent and spaces
- 03:50 PM Revision 123d8700: Does not accept non-ascii characters on IPsec PSK. It fiixes #3931
- 03:48 PM Revision a4c1fff2: Close this form early since there is another form below
-
-
- works
-
- fixed by implementing the appropriate behavior per RFC 3927 - block it.
-
-
- Seems to still allow some characters that can break XML (like à )
-
- Pushed a fix commit:123d870060
-
- Applied in changeset commit:5a42d9ef426a05cbd64559bbe2b75a355dc0d821.
-
- Applied in changeset commit:b907136c28defe8b45da3ae4a17a5e23f07a7e4a.
-
- several wizard fixes in 2.2, and no issues like this outstanding. Though this one in particular doesn't sound legit a...
-
- I can't find any frequency that doesn't work, this has been fixed at some point in the mean time.
-
- Of course. Nothing that simple is broken. Block private networks is my guess. This isn't the place to discuss, please...
-
11:12 AM Bug #3929: Port Forwarding with an association Filter
- i completly reinstalled pfsense, with default configuration.
then i configured the port forwarding.
are u sure, t... -
- Because you have something misconfigured. There isn't anything wrong with port forwards or associated rules.
-
- Hi,
how could this be not a bug?
I set all things by documentation.
Have a look at https://doc.pfsense.org/ind... -
- not a bug, please use one of our available support resources for assistance. https://pfsense.org/support
-
- this was since fixed in 9 and 10 stable FreeBSD, current 2.2 should work here
-
- This could be summarized as "I forced my browser to create multiple CAs and it created multiple CAs." Yes, it does.
-
- fixed
-
06:21 AM Bug #3735: No default route when using WAN static IPv6 address
- This issue has already been discussed on the forum :
https://forum.pfsense.org/index.php?topic=65964.0
The way to s... - 04:07 AM Revision dc4a8b9e: update input_error description after changes for ticket #3491
10/13/2014
-
- No matter what you put in the burst field, the limiter behaves exactly the same as if it's 0 or null. Re-tested on th...
-
- fixed
-
-
- works, nice improvement for ease of use.
-
- fixed
-
-
- How big are the resulting configs there? I'm not running PHP out of memory after throwing 9000 randomly-generated MAC...
-
- When using captive portal, with all users become permanently learned after enough users have authenticated the system...
-
- fixed
-
- fixed
-
- fixed
-
- fixed
-
- Applied in changeset commit:71c26c22209e22c37d437077da6c69b0fb09627f.
- 05:36 PM Revision 71c26c22: Properly set MTU for lagg interface, it fixes #3922
- 04:09 PM Revision 5c2e6873: Make sentence more accurate as pointed out by phil-davis
- 03:42 PM Revision 1c764a3a: GIF interfaces MTU must be something between 1280 and 8192, make the correct check. It fixes #3927
-
- The first issue as noted originally is still a problem as described. Throw a limiter on an upstream system that drops...
-
- After deploying hardware key storage, we need to distribute access keys to users that will be logging into builders t...
-
-
- fixed
-
- Applied in changeset commit:1c764a3a50d4eb732e7c96eb9351e7b35c2051d4.
-
- Back to new, we should provide a validation on GUI
-
- According src code https://github.com/freebsd/freebsd/blob/releng/10.1/sys/net/if_gif.h#L91 minimum valid MTU for gif...
-
- Several upgrades later on systems that used to have this issue, and we're still good. Others on forum have also confi...
- 11:54 AM Revision 07c24bf1: Merge pull request #1308 from phil-davis/patch-4
-
-
- #3431 and #3636 are effectively the same, closed those in favor of this.
-
- If an international character, such as à is added to an IPsec PSK, it will cause the configuration to contain invalid...
-
- closing in favor of #3931
-
- closing in favor of #3931
10/12/2014
-
-
-
10/11/2014
-
11:44 PM
Bug #3568: DynDNS: Hostname '@' not accepted for Namecheap
- Works great now, thanks Renato! Feel free to mark this one as resolved.
-
- In squid, yes, but *not* in the FreeBSD port from which we build the package. It'll come eventually once the package ...
-
11:16 PM pfSense Packages Bug #3805: enable-http-violation are not compiled in Squid
- This option is available in: 2.7 / 2.6 http://www.squid-cache.org/Doc/config/header_access/
-
- That wasn't an option in the squid 2.7.x FreeBSD port, it was hardcoded. That port is gone from FreeBSD now, eventual...
-
- this has been addressed since then, I can't think of any common scenario that isn't covered.
-
-
-
-
11:29 AM Bug #3930 (Rejected): Browser Page Refresh After CA Creation Creates Duplicate CA
- +*Issue*+: After creating an internal CA, refreshing/reloading the browser page immediately after creation causes the...
-
- Hello,
using Port Forwarding with an association Filter rule isnt working.
I have a WAN (em2) and a LAN (em0). ... -
10:10 AM Bug #3770: Some drivers not being built with altq support
- But "bridge"?
- 03:17 AM Revision 3b5b437b: fix text
- 02:54 AM Revision 0c4cd13f: fix up text on sys_adv_misc
- 02:10 AM Revision 5046435d: fix text and descriptions in GRE edit page
-
- there isn't a bug described there, post to the forum or mailing list to discuss further.
-
- confirmed
-
- Take a test system with lagg0 and lagg0_vlan5 both assigned. Specify a MAC address for lagg0 on interfaces.php, and i...
-
- fixed
-
- This is true, but it doesn't matter in most circumstances. For those where you need the MAC to not change, you need t...
-
- closing in favor of #3922
-
- Phil's pull request to fix this still pending, some reason that hasn't been accepted?
-
- This seems to be fixed, and fixed a similar but different issue I'd run into but not opened a ticket for yet.
-
- fixed
-
- fixed
-
- fixed
-
- works in 2.2 (and probably newer 2.1x versions than this referenced, but didn't test those)
- 12:09 AM Revision b22f436a: s/removing/omitting/g for gateway monitor log entires. "Removing" is not necessarily correct, there are many circumstances where this runs where it wasn't there to begin with, and is potentially misleading.
Also available in: Atom