Activity
From 10/18/2014 to 11/16/2014
11/16/2014
-
10:29 PM Bug #3361: DHCP6 WAN is not obtaining a default gateway
- JimP: you have a way to at least semi-reliably replicate this on current versions? I've been trying a variety of scen...
- 10:09 PM Revision 1deb0924: add the last few missed files to obsoletedfiles list. Ticket #3970
- 09:58 PM Revision 9e7e2c94: Properly handle CARP IP binding in dnsmasq post-changes for FreeBSD 10.x CARP. Ticket #4012
- 08:11 PM Revision 11fb4543: show tunnelv4 on v4 the same way tunnelv6 is shown on v6
- 08:09 PM Revision bac17444: show tunnelv4 on v4 the same way tunnelv6 is shown on v6
-
- fixed
-
-
- Some settings in IPsec are only relevant to IKEv1 or IKEv2, not both. Need some javascript to hide irrelevant setting...
-
- I added the last few missing ones, this is good now.
-
- fixed
-
- fixed
-
- fixed
- 09:21 AM Revision 67be8c3d: Sorted the provider names alphabetically
- 09:13 AM Revision 984abd66: Handle reverse-lookup zones for unbound
- By default unbound returns nothing for private reverse lookups. Here is some information about that from https://www....
- 07:18 AM Revision 4e82cebf: Don't show a big red "alarm"-looking message on every visit to the DHCP/DHCPv6 Server pages. Confuses people in that context, and it's not something that justifies highlighting in such a fashion. Move the message to show when you have no eligible interfaces.
- 06:05 AM Revision f2b4a29b: Don't try to clear states to gateway, all that does is wipe the entire state table unnecessarily. rc.newwanip takes care of killing states appropriately as needed when an IP changes.
- 05:37 AM Revision 9a25a85d: show user that something is actually happening when they choose php-fpm_restart
- 05:12 AM Revision b026cb18: Use appropriate size for the interface selects. Ticket #3989. clean up some text while here
-
03:21 AM Bug #4014: Unbound private reverse lookup domain overrides not working
- Pull request added: https://github.com/pfsense/pfsense/pull/1340
And attached is a sample of the GUI entry for a rev... -
- If I add a domain override for reverse lookups in some private address space, unbound never returns answers to any re...
- 12:40 AM Revision b5acc797: fix Unbound Advanced options
- 12:16 AM Revision 88a0937d: if unbound is enabled, assign interface IP as DNS, same behavior as dnsmasq
11/15/2014
-
- fixed
-
- I fixed some of what you noted, some has other tickets. What this ticket covers is resolved. Please post any issues y...
-
05:33 AM Todo #3396: Replace dnsmasq with Unbound
- 2.2-BETA (amd64) - built on Sat Nov 15 01:14:19 CST 2014
Host Overrides dose't work properly. Only the top one seems... -
- 2.2-BETA (amd64) - built on Sat Nov 15 01:14:19 CST 2014
Pfsense is not the default DNS service. Do not use the DNS ... -
02:21 PM Revision a0f9f9f7: Changes in the test page of user manager
-
11:51 AM Bug #3913: if_bridge missing ALTQ support
- Will do so once i can isolate better the problem.
Thanks. -
07:36 AM Bug #4013 (Resolved): DHCP6 static bindings not included in /var/unbound/host_entries.conf
- /var/unbound/host_entries.conf contains only IPv4, no IPv6 entries.
On the latest snapshot unbound restart shows t... - 07:27 AM Revision 0c50e94b: fix missing strpos parameter
-
- Got a good deal of info gathered from OP's system, both from 2.2, and from a 2012 2.1 snapshot where 6rd works fine. ...
11/14/2014
- 11:12 PM Revision 63d129cc: 6RD Rapid Deployment is akin to ATM Machine, PIN Number, ... read: it's redundant. let's just call it 6RD Configuration.
-
- this particular todo is complete. There are some outstanding Unbound bugs, covered in other tickets.
-
- default config updated. Needs more testing and feedback.
-
10:45 PM pfSense Packages Bug #3977: Squid-dev 3.3.11_1 pkg installs but does not start on 2-2-BETA
- Also, this bug affects my x64 box, so it is not just i386/x86 affected.
-
- the kernel portion of this seems to be working fine in 2.2. There is an issue with the delegated prefix handling that...
-
- When configuring dnsmasq with specific bind IPs and choosing CARP IPs in the list, it doesn't actually bind to the CA...
-
- there is something here that makes the status inconsistent from time to time. Seeing it on multiple systems. Status>I...
- 11:51 AM Revision 4dbcf2fb: Make sure dhcpleases use correct pid file for dnsmasq or unbound. Fixes #4008
-
11:41 AM Bug #4007: "Last activity" in CP status blank
- Looks like it's a problem on ipfw patch:...
-
- Yeah, that was with the most recent gitsynced code as of last night. The rest of those fixes were fine, this one didn...
-
- Did you try latest snapshots? I pushed a fix for this yesterday, commit commit:27c2e32e
-
10:06 AM Bug #4009: Selecting "Embedded" during install does not activate the serial console in a persistent way on amd64
- It's a regression. In previous versions with the embedded kernel you could not stop the serial console from working s...
-
09:53 AM Bug #4009: Selecting "Embedded" during install does not activate the serial console in a persistent way on amd64
- Why is this the fault of pfSense?
-
- Selecting "Embedded" during install does not activate the serial console in a persistent way on amd64 now that there ...
-
- dhcpleases write leases information to /etc/hosts, but unbound never uses data from it.
- 09:51 AM Revision 9612943e: Obsolete a lot of files forgotten during all last pfSense versions. It fixes #3970
- 09:46 AM Revision e09797b0: Deal correct with filenames with spaces
- 09:46 AM Revision cc814aef: Make it possible to remove a directory on obsoletedfiles
- 09:46 AM Revision e0141b7a: sort obsoletedfiles
-
- Also submitted to FreeBSD ports tree, if accepted, pfPort can be removed - https://bugs.freebsd.org/bugzilla/show_bug...
-
- Patch integrated on pfPorts and can be tested on next coming snapshots.
Also reported on https://community.openvpn... -
- The issue seems to be that openvpn setups the crypto before forking.
This makes crypto device unhappy in general and... -
- OpenVPN uses EVP API and always loads all available engines and tries to use them.
In the case of aesni for AES* the... -
- The error is fixed but the console problem I mentioned above is still an issue. I moved it to #4009
-
- fixed
- 07:43 AM Revision e2accfac: Update default config.xml for 2.2. Disable dnsmasq, enable Unbound. Remove
- outdated comments that used to sort of document the config file, but had
been neglected for quite some time and aren'... -
- Applied in changeset commit:4dbcf2fbcea9cfe2166c958d3872e3a7353e3c5c.
-
- Steps to reproduce:
1. Configure DNS Forwarder
2. Configure DHCP server
dhcpleases is going to use '-p /var/ru... -
- Applied in changeset commit:9612943eaa3c6ef427ea4414f7c32dc2b326dd55.
-
- also remember to add the obsolete openntpd files JimP mentioned.
-
- fixed
-
- fixed
11/13/2014
-
- Aside from issues that have other tickets, I'm satisfied here. Been through a number of test upgrades with varying co...
-
- same root issue is likely breaking other things as well
-
- root of this issue is line 1135 in captiveportal.inc: ...
-
- "Last activity" in CP status page is blank in 2.2.
-
- fixed
-
- Applied in changeset commit:b4e0f02b89fa6b8e8b22f31ee4486df171ae5337.
-
- Renato Botelho wrote:
> After investigate it a bit I noted IPs are not being added to ipfw tables, all are added as ... -
- Looks much better, fine to go ahead and commit that.
Still missing some, see attached. -
- Pass it to Chris to run a final test before commit.
-
10:18 PM Bug #3361: DHCP6 WAN is not obtaining a default gateway
- Turns out that the ISP for the WAN in question is only experimenting with IP6 at the moment. Anything I've picked up ...
- 07:58 PM Revision b95399a7: outbound NAT can apply to any type of interface, make WAN-type specific reference generic
-
- this is at least mostly fixed, still seeing a different issue I'm looking into.
-
-
- Also, while I'm here, fixup copyright.
-
- to me for testing
-
- fixed
- 05:23 PM Revision 99b7f4b2: Merge pull request #1335 from brunostein/remove_multiple_groups
- 05:22 PM Revision 98d11ee7: Merge pull request #1334 from brunostein/remove_multiple_users
- 05:21 PM Revision b6fd5c8f: Merge pull request #1336 from phil-davis/patch-4
- 04:55 PM Revision b9608ab6: Implement advanced settings in unbound.conf
- The settings are made in the Advanced tab in the GUI and are stored in the config.
Now actually implement them in unb... - 04:50 PM Revision b4e0f02b: Make sure $cpzoneid is defined and use it to call pfSense_ipfw_Tableaction() and pfSense_ipfw_getTablestats(). Also fix fieldnames for captiveportal_hostnames. It should fix #4001
- 04:50 PM Revision 0cd7c91a: Subnet parameter is mandatory for pfSense_ipfw_Tableaction(), add where it's missing
-
- works great
-
- Should be fixed by commit:0373c361fe623e466ed2c9b8cf129a7f160f79cf
Assigning back to cmb for testing. -
03:27 PM Revision efca0d9e: Do not show the user/pass for pre shared key on Openvpn since its not-supported.
-
- OpenVPN is using EVP API so it loads all available engines which by default is cryptodev.
There are two problems h... -
- This seems like an openvpn problem, openssl lib does not show any problem when used with the openssl binary.
-
-
12:15 PM Revision b95a96ec: remove checkall checkbox
- 12:10 PM Revision 8105ffa6: Fix logic to find available next number for limiters and queues. It fixes #3998
- 12:09 PM Revision 89cf3dc0: Fix logic to find available next number for limiters and queues. It fixes #3998
-
-
-
-
-
- 11:10 AM Revision 340ce958: Add an extra protection to avoid having an empty group created
-
- Applied in changeset commit:8105ffa61c2d5aba42fa0ceac92ae7f9f80f8b19.
-
- Applied in changeset commit:89cf3dc0b6958322974d40fd1111ef276174053e.
-
11/12/2014
-
-
-
-
-
- If you install to a GEOM mirror, remove one of the drives, and add a new blank drive, the new drive doesn't show up a...
-
-
-
- 05:26 PM Revision 71f45fed: Don't allow interface descriptions that are strictly numbers as that
- generates an invalid ruleset. Ticket #4005
- 05:22 PM Revision a19cc600: fix variable typo
- 05:20 PM Revision 2b114010: fix text
- 04:22 PM Revision 61dec0b0: Make sure empty group or user are not created when editing
-
04:03 PM Bug #4000: guess_interface_from_ip parses netstat output that may be truncated
- Tested on the latest snapshot (built on Wed Nov 12 11:52:20 CST 2014). Looks good, finally the DHCP failover peer IP ...
-
- Applied in changeset commit:aa5acb424f4d05efd15ceed1b9e71d6a34dac674.
-
- to me to change the default config and test
-
- After investigate it a bit I noted IPs are not being added to ipfw tables, all are added as 0.0.0.0/32:...
-
-
- I'll take this one
- 02:27 PM Revision 2951a06a: Only create missing ssh keys, do not overwrite existing ones. It fixes #4003
-
- That does not have issues with the first ip address but rather no strict linkage of vip/carp interface to its informa...
-
- This seems a non issue since the old SPD will stay there until the SA related to them be alive.
As long as the old S... -
-
- last one was messed up by WebDrive's caching. attached an update
-
- Something is wrong, fresh install is not supposed to have those gettext files. I got last i386 and amd64 iso files an...
-
- updated diff attached.
V: is the clean install, Q: the upgraded system. -
- I took a quick look at it, and looks like it is also broken on stock FreeBSD (not tested to confirm). Looks like the ...
-
- Implemented as Chris suggested
-
- to me for testing
-
- Finding a new issue wasn't the contribution I intended to make.
I'll double check with the ISP for that WAN conne... -
- back to where we started here. Status>IPsec is fine, dashboard widget is wrong in two ways.
1) All connections show... -
- Heh fixed, sorry for the breakage.
-
-
- This reverts commit 694d368d818508a40bdef4f1a3f64b414b11c442.
-
- Thanks. The issue is an all-numeric interface description isn't valid, and no input validation prevented that. I just...
-
10:56 AM Bug #4005 (Resolved): There were error(s) loading the rules: rules.debug:11
- (this is my first bug report, I hope it is helpful)
There appears to be an error loading the rules that generates ... -
- Patch has been put in snapshots which should correct this.
-
- This is just cosmetics rather than table on ipfw issue.
-
- Applied in changeset commit:2951a06ad89fc207a709af362ddc42069fdee172.
-
- Working on a fix
-
- SSH host keys seem to always be recreated post-upgrade to 2.2 from 2.1x or earlier versions.
-
- There might be issues on HyperV with CARP.
Reference information on https://forum.pfsense.org/index.php?action=pro... - 06:32 AM Revision 5823df59: remove this log, it's never logged anything useful that I've seen, and unnecessarily spams the secondary's system log on every config sync.
- 01:13 AM Revision 4de91fda: hn(4) is ALTQ-capable, mark as such.
-
- more upgrade scenarios confirmed good now that some related blocking problems are fixed.
11/11/2014
-
- this broke IPsec status for everything. All down on dashboard, all down on Status>IPsec (showing down icon, but "esta...
-
- Patch put in.
-
- I believe I have a fix for to make this work, however, the fix currently needs to be applied manually on every box. I...
-
-
-
-
-
-
-
- Under certain circumstances (which I haven't fully quantified), you'll end up with 0.0.0.0 in your ipfw tables. Ermal...
-
-
- On 2.2, after disconnecting a user from CP on status_captiveportal.php, their HTTP requests no longer are redirected ...
-
- Peter: you're not getting an IP at all? That seems like a different issue, what we've seen here the system gets an IP...
-
- Meant to say DHCP6
-
- Currently running:
2.2-BETA (i386)
built on Sat Nov 08 15:40:19 CST 2014
I have a dual WAN configuration. WAN-0... -
- to me for testing against next snapshot
-
- updated comparison, but against a not freshly installed 2.2 so this is probably not useful at all. When the next new ...
-
- Chris, can you compare files again but now use a fresh installed 2.2? I fixed a bug in bsdinstaller that was introduc...
-
- to me to re-test
-
- this is pretty easily replicable. Log into 22vpntest, VPN>IPsec. Edit one of the "cmb home site to site" P2s, for ins...
-
- Long interface names are truncated in netstat output, which can lead to various potential problems (though most thing...
-
- that one's fixed now as well. Everything here works now.
-
- that fixed that issue, one remaining. Config sync no longer syncs those aliases to the secondary.
-
- Applied in changeset commit:94115b931349c4c2dbaff080842bcdbe60ed94b7.
-
- Oops fixed!
-
- this is mostly fixed after my commits earlier, I think just one last piece. ifconfig is missing the interface. You'll...
-
- scratch that, the test box wasn't rebooted post-gitsync and gitsync doesn't apply the relevant change on the fly. Thi...
-
- no change. Test setup on dev ESX is fully in place now, info on chaos wiki.
- 01:57 PM Revision 992f60d0: Set proxy env vars on interactive shell and also on crontab to make all scripts be able to use it. Ticket #3789
-
- I have corrected this on new snapshots.
- 01:33 PM Revision eacdbc4d: Revert "Ticket #3789. Put a start at using the proxyurl/proxyport from system configured settings for bogons. It still does not consider the user/pass configured"
- This reverts commit 664adf3845cf1df89769bb0ed5fc113048e0912e.
-
- works in every scenario I can find
-
-
- 06:03 AM Revision 0b7dbebe: touch up text
- 05:53 AM Revision 5f4f8365: fix text
-
05:36 AM Revision 29aef6c4: Change copyright statement to reflect reality
-
- 04:24 AM Revision e7896fc8: Change copyright statement to reflect reality
- 04:13 AM Revision e120d5ce: Fix syntax error in CARP status page. Ticket #3967
- 04:07 AM Revision a1b66bec: Restore the CARP parent display in firewall_virtual_ip.php. Ticket #3967
- 03:52 AM Revision a9b305a8: Set this to /8 instead since that's how it's done in stock FreeBSD 10.1. Ticket #3941
- 03:37 AM Revision b0533f16: Setting an interface's IP to 0.0.0.0 with mask 0.0.0.0 overwrites the
- default route with that interface's link route. Later in dhclient, that
gets deleted and leaves the system with no de... -
02:10 AM Bug #3988: menu text shifted to the left after upgrade
- I noted above that I cleared browser cache. From the original bug it was noted that main
issue are fonts.
I specifi... -
- seems this has been resolved. I haven't been able to replicate the circumstances here since Ermal's last round of fix...
-
12:20 AM Bug #1943: PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
- Damn, Today I had a 8h internet downtime because of this bug again while I was sleeping! Latest snapshot.
11/10/2014
-
-
-
- dhclient-script in 2.1x used the same 0.0.0.0/0.0.0.0, so that's a change in behavior between FreeBSD 8.3 and 10.1. C...
-
- Thanks for the comment Phil, that thought process brought to mind an idea. Using a /32 mask instead of 0.0.0.0 fixes ...
-
- Just a thought - perhaps the interface can be set to all/part of the link-local address space 169.254.0.0/255.255.255...
-
- found the exact spot where the issue happens. /sbin/dhclient-script, line 325. ...
-
- getting close to finding this, back to me as I'm working on it now.
-
-
-
-
- 06:38 PM Revision da66ef4f: Stop FQDN in hostname field
- 06:37 PM Revision 2d86ee95: Stop FQDN in hostname field
- 06:36 PM Revision 762fc5c0: Stop FQDN in hostname field
- using new is_unqualified_hostname function
- 06:35 PM Revision c941faa4: Stop FQDN in hostname field
- using new is_unqualified_hostname function
- 06:34 PM Revision 34c2b8f2: Stop FQDN in hostname field
- 06:33 PM Revision 84c4efc4: Stop FQDN in hostname field
- 06:31 PM Revision 6bcbd862: Add is_unqualified_hostname function
-
- to me for testing
-
- Applied in changeset commit:b0d054ca3b314d0ac7dcfd6a5ba30170a71fe63b.
-
- It should work same as before.
-
-
-
-
- Teh reply from interface was not being set properly.
Works for me now. -
- Applied in changeset commit:c46f9695ec7baf6dcfcc5a488fe0dd5dd6f4a00f.
-
-
-
-
-
-
- this issue is fixed, this isn't the place to discuss what's likely a support issue not a bug. Please post to the 2.2 ...
-
- The message is gone. Trouble stays:
But i don't have a single clue why but:
I don't have internet access from my ... -
- clear your browser cache and it'll almost certainly go away. If not, post to the forum or list with more info, this p...
-
- Hello!
I don't have Verdana or Tahoma fonts installed. I also don't have ttf-mscorefonts-installer package install... -
- In 2.1x and previous versions, the GW field in pftop showed the IP:port of the NAT applied to the connection, the src...
-
- updated comparison attached. S:\ is the upgraded system.
-
- On the latest snap + gitsync this is still a problem for me with just one WAN. The gateway appears to be set and is t...
-
- This should be retested.
For me this should only happen when you have 2+ dhcp6 wans. -
04:48 AM Bug #2762: PF drops IPv6 packets with fragment header followed by a last fragment only
- Just FYI:
The official bug (https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=172648) got another mention:
-> h... -
04:28 AM Feature #1388: 3G outbound failover connection with auto dial-up and hang-up
- +1 for me too !
11/09/2014
-
- On 2.2 I tried adding a few limiters and children and then deleting ones in the middle of the list... It seems that c...
-
02:43 PM Bug #3998 (Resolved): Duplicated limiter numbers
- I’ve 19 limiters (number 1 to 20, expect 13)
If I add a new one, he gets an already occupied number, 15. After that ... -
- The bug is still here. Fresh log attached.
-
02:20 PM Feature #2129: TCP mss clamping for IPv6
- Ok, so people understand better that the input value is not taken as input value but subtracted by some (incorrect) n...
-
- I noticed that list takes only files currently, some of those would be easier to just rm -rf a directory instead of a...
-
- I was working on a similar list but only for a 2.1.5 fresh install against 2.2. Your test is better and I'll check th...
-
- ttys_wrap file was removed on 2.2, but is still necessary o 2.1. Would be better if installer guess pfSense version b...
11/08/2014
-
- I did a clean install of 1.0.1-REL, then upgraded that to 1.2, 1.2.1, 1.2.2, 1.2.3, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.1, 2....
-
- MTU in RA and properly-functioning PMTUD do indeed make it questionable as to whether it's necessary. But MSS clampin...
-
- Chris Buechler wrote:
> questionable whether this is necessary. Definitely not a priority for 2.2
If you question... -
- Solution put in place for having this working on 2.2 and 64bit installer.
-
- New snapshots will contain last filterdns code
11/07/2014
-
- confirmed working, looks good
-
- Reput back with proper building on snapshots.
-
- tun was the potentially problematic one. tap has never had ALTQ and probably isn't sensible to use in the shaper anyway.
-
- fixed
-
- It works for me but there were some patches accidentally removed from builds which have been put back.
-
- fixed
-
- Applied in changeset commit:80be089f050f0f27398a2f35ff5d48f43c7cfa3f.
-
- Rightsourceip was being set on site-to-site/peer-to-peer configs which is wrong.
-
- I don't know the cause, but it seems most likely to be when we bumped to strongswan 5.2.1 last week. There was a patc...
-
- Sometime in the recent past, AES-GCM has stopped working. To replicate, just setup a site to site IPsec VPN using AES...
-
- really needs some javascript to remove NAT-T option where IKEv2 is selected and replace with MOBIKE control. No longe...
-
- I'll finish this.
-
- root issue is #3997, closing this in favor of that.
-
- root issue is #3997, closing this in favor of that.
-
- In some circumstances, IPs can be added/removed from an interface in such ways that an interface's primary IP is no l...
-
- Up to and including 2.2 are affected by the bug described here.
https://bugs.freenas.org/issues/4803
There is a ... -
-
- confirmed that works now. Need to do more testing to ensure the obsoletedfiles list is complete.
-
- One way to replicate is changing the P2 local and/or remote subnet on a functional site to site VPN. Check SAD and SP...
-
- I cannot reproduce it on my side but for sure it was reloading secrets/crl/ca/cert's but was not realoding the config...
-
- Ermal pointed that the function I disabled is needed in some specific cases. I'm reviewing
-
-
- some limitations in strongswan that might make this difficult, as well as GUI design issues. Probably postpone the fu...
-
-
- Isn;t memstick just a loader.conf option kernel rather than else on amd64?
-
- Even with only one kernel a choice must still be made about the console, so changing this screen into a console selec...
-
- The issue here is that the amd64 builds do not have anymore the wrap kernels.
Only i386 has this type of kernel.
... -
- I added my workaround mentioned above for now. The other issue needs verified to ensure there isn't a larger problem ...
-
- The latest sudo 0.2.3 works for me, both on a production 2.1.5 system and a test 2.2 system.
-
- The binary is looking for its files in /usr/local/ when they live in the PBI dir /usr/pbi/sudo-<arch>/local/
I can... -
- Indeed, same for me. I should really have been using some security on test systems rather than just the root/admin ac...
-
- With a completely default config, when trying to use sudo, you just get: ...
-
11:37 AM pfSense Packages Bug #2992: Boot problem after upgrade
- Hello,
New 2.1.4 install here, then upgraded to 2.1.5.
I then installed bandwidthd and just had the no boot iss... - 05:19 AM Revision bcb83c9e: Reintroduce graphcounter var to traffic_graphs.widget.php
- This counter got lost in commit https://github.com/pfsense/pfsense/commit/ee965a5c7bf37b852795e1201688e3b20bf3d8d1
Bu... - 04:11 AM Revision a8380480: fix text
- 04:09 AM Revision 6859f881: show interface name, not identifier
- 04:03 AM Revision d3d23754: fix text, PPPoE Server, not VPN
-
- I'll take it.
-
- Ticket #3981 is the root cause
- 02:19 AM Revision 7bd413eb: add a route debug option to log info about route commands executed (where those aren't already logged) to help with troubleshooting various routing scenarios.
11/06/2014
- 11:16 PM Revision 708af634: remove unnecessary is_array check, thanks Renato
- 10:36 PM Revision 6c3be365: Don't allow P2 local+remote network combinations that overlap with
- interface+remote-gateway of the P1. Fixes #3812
-
- fixed
-
- looks to be fixed, leaving for further confirmation
-
- actually it's strongswan itself doing this, looking at where/why.
-
- this is good
-
- Applied in changeset commit:6c3be3650008801aaa1579dca67b0588c04b8e18.
-
- fix pushed and tested, leaving for further testing and confirmation. The check only prevents P2s where the local+remo...
- 06:49 PM Revision dbb95f38: set install_routes=no for charon to avoid the issues noted in ticket
- 06:38 PM Revision 27c2e32e: Pass zone id to pfSense_ipfw_getTablestats(), should fix #3990
- 01:54 PM Revision 118218cb: Make sure target has scope when it's a link-local. Fixes #3969
- 01:40 PM Revision 049c74ec: Check if array is set
-
-
- confirmed fixed, though last activity is blank, that's a separate issue I'll check into further and open its own tick...
-
- Applied in changeset commit:27c2e32e28f871adf036b666e8e3ae1bf54ea7a2.
-
- Actually this is hit and miss, but it's the same root issue as #3960 it appears. Changed subject to the best descript...
-
- something was fixed that resolved this
-
- Matt, you're welcome to pick up #3982, no one's working on that yet. Just assign it to yourself and set to assigned s...
-
- Duplicate of #3982
-
10:12 AM Bug #3993 (Rejected): 2.2 memstick installer kernel selection is broken
- In the serial memstick image for 2.2, if you select 'Easy Install' and allow the system to install, you are prompted ...
-
- An additional note after talking to Renato earlier and doing some research:
The serial console worked for me becau... -
-
- works
-
- it's not consistent every time it appears, but it is replicable after discussing and trying further with Renato.
-
- Chris Buechler wrote:
> I confirmed it again on the most recent snapshot. In addition to changing it not removing, d... - 10:30 AM Revision 3f6525c1: Make sure srcip has scope when it's link-local. Should fix #3969
- 09:57 AM Revision e7752fc4: Remove extra ; and space
- 09:57 AM Revision e7a00514: Process obsolete files in shell script instead of php
- 09:57 AM Revision 48f77cef: Simplify post_upgrade_command logic and obsolete /usr/local/sbin/cvs_sync.sh instead of removing it on post_upgrade_command
-
09:40 AM Bug #3992 (Resolved): The password confirmation field is not properly formatted at VPN: L2TP: User: Add/Edit
- At VPN: L2TP: User: Add/Edit the password confirmation field is longer than the password field.
Also the small "lo... - 09:29 AM Revision a68c6785: Fix to SMART disk matching
- preg_match returns 0 when the string does not match the regex.
0 does not "===" FALSE
So this check is not always wor... -
- modified pfsense-tools/builder_scripts/scripts/rc.d/etcmfs to set default size to 20m
-
- The /etc MFS on a 2.2 memstick image of the Netgate build is allocated with 10 MB of space. The files that get copied...
-
- Looks good now, gateway shows online at boot time and still shows online across several reboots. Thanks!
-
- Applied in changeset commit:118218cb69b1a8cea2f5915e4c81537b51462c34.
-
- Source IP is scoped now but it still is not showing "online" - In my testing from earlier it looks like the target ne...
-
- Applied in changeset commit:3f6525c1ab0fd3f704ab8e23f935c475c3cbd16c.
-
- Please try new snapshots, after move part of the logic to shell script it passed on all my tests
- 04:58 AM Revision a012464e: fix captive portal status page display
- 04:45 AM Revision bb18cfcb: fix up text
- 02:45 AM Revision e8fa9843: Pass friendlyifname to handle_argument_group, not realifname. Fixes #3984. clean up some text while here.
- 01:47 AM Revision e55e4b74: isset($_GET) seems to always evaluate to true, use something more specific. Fixes use of rc.linkup when run from CLI. Others likely fix similar circumstances, though maybe not ones that are used anywhere.
- 01:33 AM Revision c75e8aed: Disable delete_old_states in dhclient-script. rc.newwanip handles this correctly in 2.2, and this killed states in multiple circumstances where that isn't necessary nor desirable.
11/05/2014
-
- the fix earlier in rc.linkup didn't have any effect here. Dug through this more tonight. Best I can definitively say ...
- 11:18 PM Revision 9aec47b7: don't duplicate $message in CP log entries
-
- When clicking "Show last activity" on status_captiveportal.php (for instance, probably a problem elsewhere as well), ...
-
10:01 PM Bug #3989 (Resolved): DNS Resolver interface drop downs need enlarged
- The "Network Interfaces" and "Outgoing Network Interfaces" selection boxes need to be enlarged or made variable to th...
-
- fixed
-
- looks like check_reload_status is doing the right thing, rc.linkup seems to be where the issue is.
- 05:31 PM Revision d9b05eb4: When an alias contain hosts, add IPs and networks to filterdns too, otherwise you end up with a pre-defined and non-persistent table. Fixes #3939
-
- that change made kernel builds fail and was reverted.
-
- fixed
-
- Renato found solution today, implementing tomorrow morning.
-
- to me for testing
-
- Applied in changeset commit:d9b05eb490ab4d31a132c3e993bd560933eadd8c.
-
- Please try next snapshots
-
- Hello!
I don't have Verdana or Tahoma fonts installed. I also don't have ttf-mscorefonts-installer package install... - 09:12 AM Revision fcfa23da: Merge pull request #1319 from phil-davis/patch-1
- 09:07 AM Revision 87d4456c: Merge pull request #1323 from derelict-pf/master
- 09:06 AM Revision 5940e655: Merge pull request #1326 from phil-davis/patch-5
- 09:06 AM Revision 798d8644: Fix obviously broken test in rc.initial.setlanip
- IMO might as well back-port any obviously wrong code to 2.1 branch, just in case anybody on 2.1.n cares for it or the...
- 09:05 AM Revision f81011ea: Merge pull request #1320 from phil-davis/patch-2
-
- Duplicate of #3842
-
- Ivo Babarovic wrote:
> After I upgraded from to 2.1.5 from 2.1.2.
> Text labels in web menus are shifted to the rig... -
- After I upgraded from to 2.1.5 from 2.1.2.
Text labels in web menus are shifted to the right and longer texts get ou... - 05:31 AM Revision e39c963a: fix up text
- 05:19 AM Revision 75756ab9: use a bit stronger of defaults in OpenVPN wizard
- 05:08 AM Revision 1c1fe666: Fix WINS description. It's not 1999, and it wasn't a good description for back then either. If you're running WINS at this point on your AD DCs...get rid of the Win 9x boxes, or realize you don't actually need or want WINS on anything Windows 2000 and newer.
- 05:05 AM Revision 7a22ab9b: fix up text
- 04:01 AM Revision cbc6a13f: Fix updating of hosts file on host override updates by bringing back the same behavior from previous releases.
- 03:22 AM Revision b7419cfc: skip disabled phase 1 entries in status output
- 01:57 AM Revision 261f2efe: fix NAT-T status. The 'nat' in the status array just tells how the connection is configured, not what it's actually using. Port seems to be the best way to determine what it's using. Fix up some other text while here
- 01:09 AM Revision 531686c1: use tabs rather than spaces, as most of this already did.
- 01:02 AM Revision d3c414e3: strongswan only has two options for NAT-T, force or auto.
- 12:44 AM Revision a43ddd1a: setting nmbclusters to 0 just results in an error, remove unnecessary line
- 12:34 AM Revision 41367b9c: remove old DISABLE_PHP_LINT_CHECKING, which dates way back to the CVS days and hasn't been relevant in years.
- 12:24 AM Revision 276efd64: touch up text
- 12:18 AM Revision 32171e59: fix invalid ipsec.conf
- 12:02 AM Revision f643a1f1: clean up text
11/04/2014
-
- There can only be one mobile P1 currently, which restricts you unnecessarily to only either IKEv1 or IKEv2 for mobile...
-
- this is correct for IKEv1 after my commits earlier. Seems to be working as it should. It'll continue to work on upgra...
-
- after further review and discussion with Ermal, the code is there to set forceencaps, it just isn't setting it correc...
-
- I have pushed them recently to be enforced.
The only remaining task is to remove Force from the options list because... -
- Old code was inaccurate and also listed entries that were symlinks to other disks
-
- In addition to the 2.2 issue of it somehow taking over php-fpm and thus breaking webGUI and...
I will note here that... -
05:53 PM pfSense Packages Bug #3986 (Closed): BandwidthD can break php-fpm in unknown rare edge case
- Hi,
Having a lot of struggles with BandwidthD in v2.2 More info here,
https://forum.pfsense.org/index.php?topic=7... -
-
-
- 07:31 PM Revision 756d867a: fix comment
-
- similarly, disabling a P1 doesn't remove it from the SPD nor SAD. It does remove it from the config file.
-
- I confirmed it again on the most recent snapshot. In addition to changing it not removing, deleting a P2 doesn't remo...
-
- Sorry, meant to add this for help, missed it,
https://forum.pfsense.org/index.php?topic=80248.msg437658#msg437658
-
- Hi,
I can't seem to get apcupsd or nut working in v2.2 - looks like a USB / driver issue, but I definitely could b... -
-
-
-
- Take a simple LAN/WAN setup, WAN set as a DHCP client. Boot the system with WAN's NIC unplugged. Then plug the NIC in...
-
- I pushed a fix that should treat this, test with new snapshots.
-
- aside from things that have bugs open, and things that can't be tested because of other open bugs, this seems fine. S...
-
-
10:25 AM pfSense Packages Todo #3983 (Needs Patch): Option for Cron Package
- Hello,
It's possible to add a custom button or other for disable or/and enable a cron task.
In the lastest versio... -
- Watch out for this one. It works on some boots and not others, or depending on the timing. There's a race condition s...
-
- When running the installer and choosing "Embedded" two errors are given by the GUI but if "skip" is chosen the instal...
-
- As i said before TAP should behave the same on 2.1 as well
11/03/2014
-
- This is a recent regression in 2.2. diag_ipsec_spd.php shows "No IPsec security associations" when there are active, ...
-
- A static route for the remote network of every P2 is added in 2.2, pointing to WAN's gateway IP. I'm guessing the int...
-
- the issue described here is resolved. The two Ermal noted we'll discuss
-
- I have done testing on this.
It works even today as is.
List of issues i am after:
- Racoon does not like agress... -
- The enable/disable/force NAT-T settings from earlier versions don't do anything in 2.2. It appears in newer strongswa...
-
- no change
-
- tun is fine, tap not.
-
- looks good, thanks Warren
-
07:00 AM Bug #3974 (Feedback): DNS Resolver: Advanced - Error in description
- Applied in changeset commit:d5566d43f4ace5036b5e5476d975bb8d13ce3b6f.
-
- Yeah i have the changes done. Just haven't submitted a pull request just yet. There are a few more which Im still goi...
-
- I have a bit of code to make that all consistent. I also see that Wagonza just made some updates to the related files...
-
01:38 AM Bug #3974: DNS Resolver: Advanced - Error in description
- Just noticed that the same issue exists for a few other items on the same page:
Outgoing TCP Buffers 0 vs 10
In... -
- Go to Services -> DNS Resolver -> Advanced -> Outgoing TCP Buffers and Incoming TCP Buffers (/services_unbound_advan...
-
- assigning to me for further testing. Unchanged in 2.2 from prior releases, not a common enough issue to hold up and p...
-
- fixed. Voucher sync is separate from CP's config sync, it does work.
-
- no change
-
-
- Hi,
It's possible to add a custom area to select only backup or restore
-One for Limiter
-One for Layer7
Than... -
05:35 PM pfSense Packages Bug #3977: Squid-dev 3.3.11_1 pkg installs but does not start on 2-2-BETA
- Nev Secular wrote:
> 2.2-BETA (i386) built on Thu Oct 30 13:58:57 CDT 2014 FreeBSD 10.1-RC3
> After installing squi... -
- 2.2-BETA (i386) built on Thu Oct 30 13:58:57 CDT 2014 FreeBSD 10.1-RC3
After installing squid-dev 3.3.11_1 pkg squid... - 05:27 PM Revision f384d8a5: Merge pull request #1329 from phil-davis/patch-3
- 04:43 PM Revision a3fad592: Fixup dhcpd interface enabled check
-
- 03:04 PM Revision ba667cc6: Fix console set interface IP address
- Problem as per forum https://forum.pfsense.org/index.php?topic=83651.0
The problem comes whenever services_dhcpd_conf... -
- that didn't fix the issue described here
-
- /tmp/post_upgrade_command.php is executed after new files are in place and before reboot, probably the root cause is ...
- 12:56 PM Revision ec290464: Merge pull request #1328 from wagonza/master
- 12:54 PM Revision fe9d4894: Fix indent
- 12:52 PM Revision 2783e408: Revert "Indent better"
- This reverts commit a431bfc9e698c753d9a54218af9076184deb6251.
- 12:45 PM Revision d5566d43: Make sure defaults values are actually used. Fixes #3974
-
- not true, please post more info to the forum or list for assistance.
-
05:27 AM pfSense Packages Bug #3975 (Rejected): Gateway Monitoring Offline
- PfSense 2.2 shows gateways as always offline
-
- that is replicable on 2.1.x but not 2.2, already fixed there.
-
11:04 AM Bug #3976 (Resolved): VLAN Interfaces on LAGG get orphaned on LAGG change
- Reproduce:
1. Create LAGG with e.g. em3 + em4, LACP and a nice description
2. Create a few vlans and assign them ... - 10:48 AM Revision 7bb24e18: Merge pull request #1327 from wagonza/pfSense-master
-
- It's not the gateway that needs states killed, it's the old WAN IP.
-
06:36 AM
Bug #1629: invalid state table entries after WAN IP change
- I'm on ...
- 10:08 AM Revision 46a989ce: Indent here as well
- 10:08 AM Revision a431bfc9: Indent better
- 10:04 AM Revision 1b436de1: Be consistent with the other pages
- 10:03 AM Revision be11b6f1: Add braces
- 08:27 AM Revision 4c3abd34: Fix obviously broken test in rc.initial.setlanip
- IMO might as well back-port any obviously wrong code to 2.1 branch, just in case anybody on 2.1.n cares for it or the...
- 07:54 AM Revision 0a89d059: Merge pull request #1324 from phil-davis/patch-3
- 06:04 AM Revision 8727b3c8: Set interface address from consol tidy output
- While trying to see why this is not working for me (forum https://forum.pfsense.org/index.php?topic=83651.0 ) I have ...
-
-
02:35 AM Bug #3940: check_reload_status uses deprecated libevent-1.4
- It also looks good on my custom build - no high CPU load.
11/02/2014
-
05:48 PM Bug #3973 (Resolved): Route 53 dynamic DNS provider fails to update record
- Existing records are not updating with the Route 53 dynamic DNS provider.
Records that do not exist are created p... -
- Updated to:
2.2-BETA (amd64)
built on Sat Nov 01 21:36:28 CDT 2014
FreeBSD 10.1-RC4
Now filterdns has just 8 th... -
- My main 2.1.5 production system is the big offender with this - it has over 4000 in filterdns fstat. But I can't upgr...
11/01/2014
-
-
-
-
-
-
-
-
-
- Working AVAHI on 2.2
mkdir /var/run/dbus
chown messagebus:messagebus /var/run/dbus
dbus-daemon --system
Aaron... -
- A general note
-
- Jim P wrote:
> While this is being fixed, it may also warrant adding a <service> tag for dbus.
Was that a general... -
- While this is being fixed, it may also warrant adding a <service> tag for dbus.
-
- Oops! I confused the terms "Assignee" and "Assigner". I put myself as the assignee, thinking that I was supposed to d...
-
- Avahi package version 0.6.31 pkg v1.06 has a bug which prevents it from working. This bug should be easy to fix. I ha...
-
- Well sorry to bring bad news, but i still got the same error message (i have removed the shaper rules and recreated t...
-
- that does work, but there are issues with that approach. One, you have to remember what VHID you're using on that, an...
-
- Getting back to this.
Apparently i just made conversion code to convert any such aliases to carp on same vhid.
So... -
- Applied in changeset commit:f3dd7e8cdb11077486421364ea3a11c411ba807b.
-
- Applied in changeset commit:9fdc167f4ef1c8fd1b76ba9ca6e56c8085dbe672.
-
-
- Applied in changeset commit:d338018f4798ea41975589f8c5b111568747e572.
-
-
- Applied in changeset commit:935fcedbca2dbe8c3d9eb41bc5739b511a9ec19a.
-
- Applied in changeset commit:d35dfaaecb5eabedade43738ba4f76967a7425a3.
-
-
- most I've found thus far is it still happens after removing all the "route delete default" commands from dhclient-scr...
-
- People have confirmed that the behaviour is improved.
Only the graph part needs improvement. -
-
- I think i found the cause.
Please test with new snapshots. -
09:07 AM Feature #3971 (Resolved): IPv6 - Preserve the DUID used for WAN DHCP-PD in the configuration file
+Feature Request+
Preserve the DUID used to obtain the DHCP-PD addressing on the WAN in config.xml
Secondary ...- 06:42 AM Revision 038f6e96: clarify logs generated by newwanip(v6) when restarting packages, it's not only IP changes that end up here (by design).
-
- not the issue it initially appeared to be, assigned to me for review in the future. behavior is no diff than previous...
10/31/2014
- 10:05 PM Revision a94a16cd: s/a/an/ and speling.
- 09:55 PM Revision 162a7b4e: s/then/than/
-
- Ermal - no change with the kernel you built. I have a test setup up now that you can reach. /msg me for info.
-
- There is at least one file from earlier versions that has to be removed in the process of upgrading to 2.2, with setk...
-
- this is for site to site VPNs with > 1 P2. One easy way to replicate, setup a site to site IPsec between 2.1.5 and 2....
-
- It works for me for mobile clients which this issue is about!
The unity plugin sends split-include sections now. -
-
-
- Should work correctly on new snapshots.
-
-
- Ok reproduced only for TAP, tun is ok.
Also i think tap behaved the same before. -
- I cannot replicate this on tun/tap?!!!
I do not even see changes in code to not support it! -
- I'll take this one
-
- PC Engines not aware of the issue, but not surprised by it given Realtek's horrible documentation.
We've confirme... -
- looks to be fine, works in both directions from testing.
-
- I couldn't reproduce it, I changed local or remote subnet and it worked as expected. Can you confirm it is still happ...
-
- When using a DHCPv6 WAN, apinger sets the srcip to be the interface link-local address but it does not set the scope ...
-
- New snapshots are available, using libevent 2.0 and check_reload_status with fixes.
-
- pfsense-tools repo already have the final patch applied, please try it or wait new snapshots today yet.
-
- After applying your patch there are still 3 statements with "socket_close_command(fd, ev);" left:
root@pfsense-bui... - 02:24 AM Revision c656bc75: Fix getext to gettext typo
- 02:23 AM Revision 41aa5cd4: Fix getext to gettext typo
- 02:23 AM Revision 29af6265: Fix getext to gettext typo
- 02:22 AM Revision 24516832: Fix getext to gettext typo
- 02:21 AM Revision b3f0b2e1: Fix getext to gettext typo
- 02:10 AM Revision 687712ee: More gettext typos
- 02:10 AM Revision 95169728: More gettext typos
- 02:09 AM Revision c69f62b8: More gettext typos
- 02:07 AM Revision 91ee10c0: More gettext typos
- 01:30 AM Revision e4982b90: fix typoed gettext
10/30/2014
- 09:37 PM Revision 1ae41bfe: Kill states associated with the old WAN IP when WAN IP has changed. Retain
- hidden config option to wipe all states on IP change, as there seemed to
be circumstances where the 'pfctl -k $oldip'... -
- 06:15 PM Revision 461eac09: only kill all states if the IP changed. ticket #1629
-
- this is fixed. The states of the former WAN IP are now killed post-IP change, which should resolve nearly all cases w...
-
- issue here is resolved
-
- Its expected and resolving this is not in plan for 2.2.
Also that is not what this ticket is about. -
- I am unsure if this should be allowed!
Normally switching to master it should have the latest voucher status synched... -
- Seems to be working for me now.
-
- the most common scenario here is fixed, IPv4 is fine, but IPv6 has regressed from 2.1.x. reply-to with v6 works in pr...
-
- This seems to be resolved with confirmation from https://forum.pfsense.org/index.php?topic=81440.msg457606#msg457606
-
-
-
- I re-opened it after confirming that atypical circumstance. Your pull request is wrong though, it fixes a rare edge c...
-
- Well, I won't argue. If you see no bug then there is no bug.
-
-
- this is valid with topology subnet in newer versions
-
- I know that pfsense team wants to release 2.2 asap but its quality will suffer if fast decisions were taken place.
... -
- scratch that, can happen with topology subnet
-
- The script */usr/local/sbin/ovpn-linkup* has en error where network mask is returned as a gateway when no gateway pro...
-
- I contacted Pascal @ PC Engines to see if that's an issue they're aware of and if they have any further info on it.
... -
10:44 AM Bug #3870: re(4) NICs on APU are unable to hardcode speed/duplex properly
- Boy I sure hope this is somehow fixable in software - we have a fair handful of APUs deployed already and continue to...
-
- Linux much happier on SD card in the APU, couldn't get anything to boot from USB flash.
TLDR version: either the... -
- Either OpenBSD has the same problem, or this is a hardware issue. ...
-
10:21 AM Bug #2406: No IP alias within the subnet of a CARP IP can be deleted
- Chris Buechler wrote:
> This is fixed. You can't remove the last IP alias on the subnet of a CARP IP because it'll b... -
- That previous patch is not correct, consider this one.
10/29/2014
-
- fixed
-
- The specific issue here is OpenVPN client is launched multiple times when connecting to FQDN with "resolv-retry infin...
- 08:39 PM Revision 5274102e: Hide burst for limiters, since it doesn't do anything. more details in
- ticket #3933
-
- Thomas, could you try attached patch, built with libevent 2.0 and let me know the result?
-
- I built a custom image and confirmed it. We are not seeing it on our snapshots because builder was not updated and st...
-
- fixed.
-
- Ticket for what Ermal and I discussed earlier re: IP aliases on CARP. That functionality is effectively gone from 2.2...
-
- with a kernel Ermal built with his changes as committed earlier, v4 reply-to looks to be fine in all scenarios. Will ...
-
- Current status is broken checksums on IPv6, source NAT doesn't apply to translate the IP back on IPv4 (though return ...
-
- I'll try this on Linux to see how that behaves, should help narrow down whether it's hardware or driver.
-
- to me to review in combination with the other limiter tickets.
non-regression and uncommon issue, removing 2.2 ta... -
- hm, not sure what I was trying at the time, apparently I missed assigning the bridge or something. thanks for the fol...
-
- Hello,
Sorry for the late testing.
I tried to reenable traffic shaping via the wizard but get this one:
[[There... -
- dummynet burst on stock FreeBSD 10.1 does indeed work how I'd expect it to work. Ours doesn't have any impact whatsoe...
- 01:02 PM Revision a4372874: Fix a typo on array index, related to ticket #3963
-
- Yeah it really should say "Connecting", how difficult would it be to make that happen? I don't think this is a regres...
-
- After doing somo analysis, my understanding is 'Status' is supposed to be up, since interface exists on operating sys...
-
- After discussion with Jeremy, we're satisfied this is good for 2.2.
-
10:47 AM Feature #3365: Implement package signing
- We'll create a secured key repository, and signing keys will be imported into it for access. Renato will create the ...
- 06:08 AM Revision 002d286c: fix up text
-
- this may or may not still be an issue with 2.2, much has changed, and this is something we've never been able to repl...
-
-
-
-
- On systems with AES-NI enabled, OpenVPN using AES-128-CBC, AES-192-CBC, and AES-256-CBC crashes on start. ...
10/28/2014
- 09:33 PM Revision eea2ad5d: FreeBSD fails to set advskew back to 0 after you set it to any other
- value. That's a separate issue that needs fixing upstream, but in the mean
time, we can work around it by removing al... - 07:06 PM Revision 70eef835: Remove redundancy as pointed out by phil-davis
- 07:06 PM Revision 44c7d73c: Decode recently created cert and key. It fixes #3964. While here, fix logical condition to create a new cert if crt or key is not present
- 06:31 PM Revision 569e2fdf: Add option to kill all states on IP change, currently a hidden option for more testing. ticket #1629
-
- That is correct, we're running the commands correctly to set it back to 0. The source of the issue is FreeBSD 10.1 wo...
- 05:00 PM Revision fd057a56: Merge pull request #1317 from phil-davis/patch-1
- 04:55 PM Revision 0a8dd27b: Remove redundancy as pointed out by phil-davis
- 04:26 PM Revision 7c199791: Merge pull request #1297 from phil-davis/patch-23
-
- needs review along with the other limiter tickets, there is overlap between them.
-
- Applied in changeset commit:44c7d73c4a1aa2cca3a932447ef6b6be2034badd.
-
- Applied in changeset commit:143c22f7719836d5decee0da0ec52e61e79fd6a2.
-
- cert.pem file is missing on first boot of clean 2.2 nano install, which leaves the web interface dead. ...
-
- I committed a change to add a new option that kills all states upon IP change. That's going to be the answer for thos...
- 12:17 PM Revision 143c22f7: Decode recently created cert and key. It fixes #3964. While here, fix logical condition to create a new cert if crt or key is not present
-
- Pull request has been merged
- 11:49 AM Revision 0a8d7fe9: Back to use listr instead of vncellt since it has small fonts and mitigate changes of go outside the sidget. It should fix #3937
- 11:24 AM Revision 30cb409d: Simplify logic
- 11:10 AM Revision bf50b0a4: Remove unecessary variables
- 11:08 AM Revision 9c76c0f1: Whitespace and indent
-
08:48 AM Bug #3965 (Resolved): dhcp6c started before bridge configured at boot, preventing interface tracking
- Setup:
- WAN interface configured for DHCPv6 prefix discovery
- LAN interface configured for IPv6, tracking interfa... -
That change is an improvement and keeps the widget from being pushed off the side of the dash.
Call it a perso...-
- Applied in changeset commit:0a8d7fe996275febad7ee28ec3daf70101928cc6.
10/27/2014
-
- To clarify - eventually it goes to "down" status, after failing for quite a while. The issue is it shows "up" while g...
-
- this also applies to PPP, likely the same root cause
-
- PPPoE-type WAN interfaces show their status as "up" when they aren't actually. To replicate, just set an interface to...
-
- this needs to be set in tcshrc so it applies to everything using fetch and similar utilities now and in the future.
-
- 08:36 PM Revision 4721677d: fix ping_hosts.sh to not ping IPsec if CARP is in backup
- 08:32 PM Revision 7e1aa4b7: fix ping_hosts.sh to not ping IPsec if CARP is in backup
-
02:57 AM pfSense Packages Bug #3962: LADVD interface handling issues with lagg and bridge
- My thoughts are that it is a GUI issue. I believe that only the physical interfaces should be shown.
10/26/2014
-
-
- this issue is fixed, that one's #2786
-
-
- regressed in 2.2
-
- I'm guessing this is a problem with ladvd itself and nothing we're doing with it, so should likely be reported upstre...
-
- On my pfsense 2.1.5 router I've got LADVD installed.
Two physical interfaces are bridged.
As long as I only selec... - 03:11 AM Revision e8b5f724: domain and search should not both be defined in resolv.conf per FreeBSD man page and handbook (only the latter is actually used). Change this to just not use domain, and set the search to the system's domain where not using the function that generates the search list for dynamic WANs.
10/25/2014
-
11:31 PM Bug #3922: jumbo frames on lagg not working
- Typo: #3744 should have been #3774
-
- This still seems to be a problem for me. I'm running the 2.2-BETA (amd64) Fri Oct 24 12:17:25 CDT 2014 build. I have ...
-
- Where you have multiple P2s on 2.2, only the first does anything. It negotiates successfully, but the strongswan/2.2 ...
-
- When editing an existing P2 in 2.2, the original entry isn't removed from the SPD. For instance, change just the IP s...
-
- pretty sure this was fixed in a 2.1.x release since then. It's definitely good in 2.2.
-
-
- it's pf that makes this hang somehow. disable pf, and traceroute6 finishes no problem. No blocked traffic being logged.
-
-
-
-
-
-
- I don't see any actual bugs here. All DHCPv6 leases are shown in every instance I've seen. Whether they're "active" s...
-
- this isn't true on 2.2, haven't tried earlier versions. The "route add failed" scenarios could well be a problem, but...
-
- sshdcond.inc function restart_sshd() does edits to /etc/sshd and /etc/sshd ends up with invalid PHP syntax.
Forum: h... -
- not an apparent issue on 2.2 (unless this somehow overlapped with separate issues open there)
-
- not sure of status here, assigning to Renato for follow-up.
10/24/2014
-
- I never could replicate that. The described behavior is the browser not responding, and nothing we do should make the...
-
- no change. Ermal, msg me and we can both take a look at my test setup.
-
- I need to go through and verify a variety of upgrade scenarios.
Only issue I've seen recently is where you have t... -
-
- this will break enough existing systems it's worthy of RC blocking
-
- ALTQ support in tun and tap is missing in 2.2. A number of existing configurations on 2.1x will fail to load the rule...
-
- the subject doesn't quite cover all the breakage this causes, there are various times that the default gateway is rem...
-
- fixed
-
-
- this is good in 2.2, if we do another 2.1.x release we probably want to back port that.
-
-
05:05 PM Bug #3678: Kernel panic: "Bogus interrupt trigger mode" on Intel J1900
- Chris Buechler wrote:
> this was since fixed in 9 and 10 stable FreeBSD, current 2.2 should work here
I can confi... - 02:38 PM Revision 577b776e: Warn if attempting to import IPv6 range
- There is currently no code to convert an IPv6 range to a set of corresponding IPv6 subnets, so warn the user if they ...
- 02:32 PM Revision bb67ac32: Support converting an IP range to an array of addresses
- so that it can be used for expanding ranges in host alias input.
- 02:25 PM Revision feb1953e: Expand range or subnet for host alias
- When entering a host alias, if the user put an IP range (like 192.168.0.10-192.168.0.20) or a subnet (like 192.168.1....
-
06:58 AM Bug #3956 (Resolved): Check for invalid CA on generating new certificate
- ... or check for valid values on generating dynamic function internalca_change() in system_certmanager.php
I had a...
10/23/2014
-
- PPTP is dead, and shouldn't be used in this context anyway
-
- The IPsec dashboard widget needs updating to understand strongswan's status.
-
- that's a scenario that no client accounts for. Excessive updating can get you banned from some of the providers, whic...
-
04:03 PM Bug #3901: DynDNS is not forcefully updated after powerup
- From my point of view the current behaviour is not perfect.
As I described above it might be the case that the data ... - 02:25 PM Revision e112f9ee: Merge pull request #1312 from phil-davis/patch-8
- 02:24 PM Revision 095707fe: Merge pull request #1313 from phil-davis/patch-9
-
-
10:06 AM Bug #3954: Port forwarding rule changes do NOT take affect
- Nevermind, I found that vpn->pptp->redirect to x.x.x.x was configured. please close bug.
-
- my pfsense is:
2.1.5-RELEASE (i386)
built on Mon Aug 25 07:44:26 EDT 2014
FreeBSD 8.3-RELEASE-p16
I have a po... -
- After upgrading my Mac to Yosemite 10.10 and Safari to 8.0, I don't have this problem anymore. I do see the page free...
-
- Pushed
-
04:12 AM Bug #2882: 6RD not working in latest snapshots
- I'm using the latest snapshot (amd64 built on Tue Oct 21 22:27:38 CDT 2014) and it seems like 6rd still isn't working...
10/22/2014
-
03:27 PM Bug #3369: Captive vouchers expire too quickly
- Chris Buechler wrote:
> mine for further testing when time permits
good luck :) -
- mine for further testing when time permits
-
- Thanks maz, got it. One follow-up question sent via email.
-
- I have sent you the link through your email Chris cmb(at)pfsense
please do not share the image publicly as its key... -
- this is still the case, though only IE seems to care, it's still an issue in IE 11.
10/21/2014
-
- change the GUI cert generation code to use it. Also, move the GUI cert
generation code to its own function so we can ... -
-
-
- 05:46 PM Revision 687d0a6d: remove the command number shown in the shell prompt, it's a pointless
- waste of screen space
-
- it doesn't appear to be possible to get a system into this state in FreeBSD 10.x, it's been fixed since 8.x.
-
- this definitely works on 2.1x and 2.2.
-
-
- works
-
- this looks to be fine, scenarios that previously triggered multiple restarts on the secondary now only have it restar...
-
- Additional info, secondary spits this out: ...
-
03:18 PM Bug #3951: Processes like filterdns and ipfw-classifyd accumulate many open file handles
- Here it is!
-
- could anyone attach the full output of fstat from an affected system? Spot checked some using filterdns and they seem...
-
- My case: pfSense 2.1.5 running on i386 embedded version. Clean install, only modification apart from UI is password f...
-
- Forum: https://forum.pfsense.org/index.php?topic=63357.msg453040#msg453040
and surrounding discussion and results in... -
- why do it there in update_bogons? Set it as an env variable in general and nothing else needs to be touched.
-
- pull requests merged, will leave this to feedback for verification
-
- Firewall->Aliases, add an alias, type Networks.
Put a range like 192.168.1.10-192.168.1.0
Save
It tries for a wh... -
12:50 PM Bug #3900: DynamicDNS should allow "@" at hostname
- Sent a pull request to fix this annoyance. ( https://github.com/pfsense/pfsense/pull/1315 )
Forum discussion at: h... - 09:32 AM Revision 99ba943a: Prevent Internal Server Error if range is backwards
- Fixes redmine #3950 - ip_range_to_subnet_array can easily swap the input parameters if the caller has passed/entered ...
- 09:18 AM Revision 29b3bb05: Prevent Internal Server Error if range is backwards
- Fixes redmine #3950 - ip_range_to_subnet_array can easily swap the input parameters if the caller has passed/entered ...
-
09:07 AM Feature #809: Config sync username change
- Still a problem. Version 2.1.5
-
- Duplicate of #3383
Please search a bit before opening tickets. -
- I have 2.1.5 with a local user (admin) plus an LDAP server (Active Directory). The LDAP server is set as the primary ...
-
- Duplicate of #809
-
- Duplicate of #809
-
- The HA configuration sync page takes a username and password. However, if you change the username to something other ...
- 06:54 AM Revision 9b86d3fe: + is a valid character in some dynamic DNS providers' usernames. Fixes #3912
- 05:40 AM Revision 2fb66948: hostnames can end with a . (and actually always do, it's just usually implied), so allow that here. Fixes wrong input validation in parts of nsupdate GUI, among other things.
-
- Chris Buechler wrote:
> maz: if you can upload that image somewhere, I'll check it out.
I will upload it ASAP as ... -
- Also, this is the same as #3829, which is resolved, so good.
Now clicking the IP address takes the user to the full ... -
- Jim worked around this one. Phil, if you see anything that was missed, feedback appreciated but I think this is funct...
-
- needs re-testing on 2.2
-
- this is still an issue. That pull request was not the answer though.
It should suffice (for 2.2) to add input val... -
- I've left multiple browsers up on traffic graph for several hours up to days, with no ill effects. I just pulled up t...
-
- fixed, thanks
-
- You'll see in the system log how it works. If your IP hasn't changed, and it's been less than 25 days since the last ...
-
- Had a look at dhcp.c ISC source code and submitted a bug report. Then after more research I found this:
Extend the... -
-
- Updated subject to reflect full extent of issue - it's all dynamic DNS services, not just RFC 2136.
-
- When using the "Use Public IP" option of RFC 2136 dynamic DNS updates, you'll always end up with the public IP of the...
10/20/2014
-
- Jim's fix works, and suffices for 2.2.
-
-
- A variety of areas do things like this, it'd be nice to eliminate any unrelated changes
-
- I tried on Opera 25.0.1614.50 and somehow Opera fits it in better, but still the font size of stuff in the Interfaces...
-
- I have attached a screen shot of what the Interfaces widget looks like on a 2.2 system with a long IPv6 address. Rega...
-
- 2.2-BETA (amd64)
built on Sun Oct 19
Have tried it with:
Windows7 with Firefox (33.0 and prior)
Mac OSX wit... -
- What is the operating system, browser and pfSense version you are using? I couldn't replicate the problem here.
-
- it is broken on 2.2 at the moment, that's #3760.
It does work where route-to/reply-to function correctly though. ... -
- not important for 2.2
-
- still an issue on latest snapshot. the LAN rule in that scenario ends up as a comment with "at the break".
-
- Where you have an OpenVPN client or server instance defined on tun and switch to tap, or vice-versa, the ovpnc*/ovpns...
-
- I fixed it in commit:7d363e57a0df41604777b4019c98caeef0b8a79f before 2.1.4 but apparently never noticed this ticket t...
-
- this has been fixed at some point in the mean time (probably in a 2.1.x release since then, but tested and definitely...
-
- can't replicate, inadequate detail to know what might have happened there, doesn't appear to be something anyone else...
-
- re-tested this scenario on 2.2 and it works fine there as well.
-
- Ermal and I talked about this a couple days ago, it doesn't have a ticket though so opening here. System log on 2.2 s...
- 05:00 PM Revision a23adfba: Merge pull request #1306 from phil-davis/patch-3
- 03:41 PM Revision 6d951458: Let user decide if he wants to proceed to the upgrade when sha256 fails to download. Fixes #3576
-
- pfSense version: 2.1.5-RELEASE (amd64)
built on Mon Aug 25 07:44:45 EDT 2014
FreeBSD 8.3-RELEASE-p16
After ena... -
- after discussion with Ermal, needs testing vs. stock FreeBSD
-
- Phil - do you not see a pencil to the right of your comment? That's how you can edit previous posts. I thought it was...
-
- Domain-Name-Server is specifically set in pfSense DHCP config to 10.49.48.*250* and that is delivered correctly to th...
-
- It is related to the client requesting DHCP "option 252", which is related to web-proxy auto-discovery - http://tools...
-
- Applied in changeset commit:6d9514581abc09a05f6d86633bbd0bb08aab2cf5.
-
- @ermal, Are you aware of these performance issues?
- 12:31 AM Revision 2c296872: h-node should be 8
- 12:30 AM Revision 13ec619c: h-node should be 8
10/19/2014
- 11:38 PM Revision bc12ae8a: Underscores are valid characters in domains. Fixes #3219
-
- fixed, thanks
-
- that'll suffice
-
-
- resolution Jim noted has since been implemented, which resolves the only real issue I see here.
-
- lot of things it can conflict with, if you want to add the input validation, patches welcome.
-
-
- as described isn't an issue
-
- maz: if you can upload that image somewhere, I'll check it out.
-
- issue as described doesn't exist in 2.2
-
- Local browser cache was the likely cause of that, though www not matching would be unexpected. Not a replicable issue.
-
- issue as described was fixed in 2.2
-
- fixed in 2.2
-
- Confirmed as described. Create a new host alias containing only "example.com", save and apply changes. ...
-
- there is something fundamentally wrong with your configuration, LAN and WAN can't have the same IP, and you have a ma...
-
- fixed
-
- also after changing the display from UTC to local time, BOOTP entries show up as "1969/12/31 07:00:00PM"
-
- status_dhcp_leases.php shows the end of BOOTP leases as "tstp never", where it should just show the "never" and maybe...
-
08:25 AM Bug #3944 (Resolved): git fatal errors are not shown to user when building pfSense iso from source.
- git fatal errors are not shown to user when building pfSense iso from source.
This complicates troubleshooting when ... -
- Replacing line 90 in rc.initial.firmware_update, the "sleep(15)", with aborting the upgrade instead (making the sha25...
10/18/2014
-
- Return routing is correct now, but TCP checksums are broken (with or without hardware checksum offloading enabled).
-
- Tester issue.
-
Also available in: Atom