Activity
From 10/22/2014 to 11/20/2014
11/20/2014
-
11:20 PM Bug #4031 (Resolved): Notifications mail bomb in some gateway failure circumstances
- In certain gateway failure scenarios where things are flapping, a significant number of emails can be generated via n...
-
08:30 PM Revision 750c9ff6: Change wording at the end of the wizard to remove "donate" since that is no longer an option
-
- 07:19 PM Revision 874599b9: Modified DynDns -> Eurodns url
-
-
- did you submit a crash report? If so, what are the first two octets of your IP? (that's enough for me to find it, not...
-
06:08 PM Bug #4030 (Resolved): AR9227 cards cause kernic panic when switched to n-mode
- I have a PCI AR9227 card that refuses to change to n-mode. After it boots back up, it appears to be in n-mode and wor...
-
03:25 PM Revision a8a642c5: Fixes #3198, check that subnet masks are equal when choosing binat type for IPSec to avoid errors on ruleset.
-
-
-
-
-
-
-
-
- 12:25 PM Revision c1a50dd7: Remove debugging code that can lead us to XSS injection, also pass variables through htmlspecialchars() to sanitize
- 12:25 PM Revision 3bdc7f59: Remove debugging code that can lead us to XSS injection, also pass variables through htmlspecialchars() to sanitize
-
-
-
-
-
- 10:59 AM Revision 140183fd: Merge pull request #1344 from phil-davis/patch-2
-
-
- yeah the tap scenario before would result in an invalid ruleset previously. This brings back the same behavior as pri...
-
- I created and assigned a tun and a tap static key and the tun received a gateway, the tap did not.
There are cases... -
10:06 AM Bug #3968 (Assigned): Incorrect gateway is assumed when using tun + topology subnet
-
- Applied in changeset commit:a8a642c5c8eff62f7beb228b165b9e1e38e3a7c2.
-
-
- Applied in changeset commit:2535f6dcc2d0898f1c89c7c0a2606c95b3f59320.
-
- Can you try with newer snapshots?
For lagg even here there should be a specific special case since it has to go th... -
- Can you retry again with the commit i made yesterday.
Lagg still might need special case here. -
- The pull request seems to add only the CP users which should anyhow be allowed to go through openvpn to the gui.
The ... -
- Applied in changeset commit:c4642eb1ff9b2e8beaba57c4833f428e6063c059.
-
- Last push behaves better for me.
-
-
- The reinstallall from the GUI was not restarting the packages.
Also during reboot i pushed some commits to force ins... - 06:04 AM Revision 3fc92f97: Display Resolver host override aliases
- On the main unbound resolver GUI page, like they display on the dnsmasq forwarder GIU page.
As per forum: https://for... -
-
- Will, i disabled the message it was a leftover from development times.
Thanks for reporting that.
You just need to ... -
03:04 AM Bug #4014: Unbound private reverse lookup domain overrides not working
- Yes, they do - quote from http://en.wikipedia.org/wiki/Blackhole_server
"According to IANA, the blackhole servers re... -
02:46 AM Bug #4014: Unbound private reverse lookup domain overrides not working
- Chris Buechler wrote:
> I think the way things are now is best, don't want to be hitting the roots (or forwarders) f... -
03:03 AM pfSense Packages Todo #4029 (Needs Patch): Update phpsysinfo package
- The available phpsysinfo package is totally out dated.
On the project page there has been an major update to 3.x.x ... - 01:10 AM Revision 687ff78c: Only skip tap-type OpenVPN servers, not all. Fixes #3713
11/19/2014
-
11:34 PM Bug #3966: OpenVPN crashes with AES-NI + AES-CBC
- I can confirm that enabling AES-NI and instructing OpenVPN client to use AES-128CBC seems to work perfectly as of 2.2...
-
- It is not a super-important thing, but there might be other device name combinations that have this issue also, or ot...
-
- On an Alix 2D13 with WiFi card in it.
2.2-BETA (i386)
built on Sun Nov 16 14:10:12 CST 2014
FreeBSD 10.1-RELEASE
... - 10:20 PM Revision 355c2f8b: also check port of dnsmasq/unbound and skip 127.0.0.1 in resolv.conf if
- not port 53. Ticket #4022
-
- easily replicable as described on the referenced system.
- 10:06 PM Revision 97383d2b: don't blow away previous contents of this variable. fixes #4022
-
- I committed a change last night to shorten the <descr> text, which helps slightly, but still nothing works at 9000 MA...
-
- Those changes shouldn't be necessary though, it's a problem of some sort with PBIs in general in 2.2.
-
08:27 PM Revision 14f7afb1: Do the tests check properly related to Ticket #2786
-
- Pretty sure this should be fine now. Leaving for sanity check from JimP.
-
- Applied in changeset commit:687ff78c96938e1bc6175b293e83079abdb704a4.
-
- The fix for this is incorrect. It also excludes tun servers, not only tap servers as the ticket title stated was a pr...
-
07:17 PM Bug #2882: 6RD not working in latest snapshots
- Hi Chris,
I can confirm that my ipv6 connection appears to be working!
I am seeing one thing new. There is a me... -
- others have also confirmed fixed
-
- Will, I gitsynced your system and rebooted to confirm it's correct now. Looks to work fine now, it came up on its own...
-
- That did mostly fix it, it's missing adding the default gateway though. I manually added it to Will's system and ever...
-
- Hi Ermal,
The box is up right now. CMB knows how to get to it...he was poking around in it last Friday.
Feel fr... -
- Can you show ifconfig, nestat -rnf inet6 output and system logs ?
Or give me access to a test system with 6rd conn... -
- Hi guys,
Just tried with 2.2-BETA (amd64) built on Tue Nov 18 23:43:52 CST 2014 & the gateway monitor indicator is... -
-
- 04:40 PM Revision b40a44a6: Merge pull request #1343 from phil-davis/patch-1
- 04:33 PM Revision bdf5efc5: Matching bracket in vpn.inc
- Reported forum https://forum.pfsense.org/index.php?topic=84322.0
-
- I think the way things are now is best, don't want to be hitting the roots (or forwarders) for PTRs on RFC 1918 in th...
-
- Now works for me on Tue Nov 18 23:43:52 CST 2014 build, reverse looking up internal private IPv4 addresses by having ...
-
- fixed
-
- confirmed good
-
- Applied in changeset commit:97383d2bda23b89da93e2cf31827a3b2aefe9246.
-
- I was wrong on the line where the problem existed. That's fixed now. I also fixed it to ensure it's only in there if ...
-
- The logic there looks correct, and on my tests it added 127.0.0.1 as the first nameserver in resolv.conf when unbound...
-
- fixed
-
- That is working now. I can add a DNS Resolver host override, with or without some aliases also, save and apply and th...
-
- Applied in changeset commit:b3c6783f82bd4f4b08a4f451e9045e4c5df188cc.
-
- As at 2.2-BETA (amd64) Tue Nov 18 23:43:52 CST 2014
I add a DNS Resolver Host Override, and also some alias names.
... -
- looks good
-
- fixed
-
- can you re-test this on 2.2 and report back? I haven't had any luck replicating this.
-
- it wasn't as of 2 weeks ago and I don't see any relevant changes since then.
-
- The patch mentioned here is already part of pfSense shiped sfxge driver.
-
- In the circumstance described here, where the interface is in use but not directly assigned (so part of a LAGG, or a ...
-
- VLANs are skipped by flags settings.
Normally a reboot should apply the right thing to the interfaces.
Reconfigurat... -
- The original post describes the problem, which is a regression from 2.1x. Say you have em0 and em0_vlan10. Set MTU on...
-
10:28 AM Bug #2786: Setting MTU on VLAN does not set MTU on parent interface in 2.2
- Currently, setting the MTU on an interface assigned to a VLAN seems to be ignored by pfSense.
For example, running... -
- What is the problem here really?
Normally an interface should have its own mtu and vlan is its own interface.
Why t... - 09:48 AM Revision b3c6783f: Make sure system_hosts_generate() is called by services_unbound_configure(). It should fix #4027
- 09:07 AM Revision bcd42a4e: Merge pull request #1342 from phil-davis/patch-1
- 08:46 AM Revision 0420f519: Remove var_dump from production code
- 08:44 AM Revision fa5b16c9: Remove var_dump from production code
-
-
-
- 05:33 AM Revision ab8d50ac: Shorten up the MAC pass-through descr. It was redundant, and for those with huge numbers of auto-added MAC passthrough entries, it adds up to a significant amount of config space (adding to delays when launching CP). helps Ticket #3932
-
- Applied in changeset commit:d882658e826ca1c9e41c0832b3d0f433756ed903.
-
- The issue here is that resolve-retry infinite is on by default.
I pushed a fix to do only 2 retries by default which... -
- The issue here should be coming from the route-to.
Since routing table need to have static routes to allow entries g... -
- A patch to support both protos on the same instance has been pushed.
-
- I put code in the builders to create this folder in the images.
-
- Seems it was only a parser issue for attr plugin https://forum.pfsense.org/index.php?topic=84304.new#new
Setting t... - 01:05 AM Revision 7bc953d1: update error log in accordance with change in input validation. thanks Phil Davis for pointer
11/18/2014
-
-
- 08:40 PM Revision 3ba07784: Revert "Revert "Use unbound from ports, it should fix #4020""
- This reverts commit cd7b929ac0ee324b96baabcd216cf303be937db7.
- 08:40 PM Revision 3f5e1542: Revert "Revert "Obsolete unbound from FreeBSD base files, ticket #4020""
- This reverts commit d56dc72a43405ef7276f2b22ce4dc204ac1469fe.
-
08:08 PM Bug #4026 (Rejected): Virtual IP on a PPPoE interface - OpenVPN fails
- WAN interface is PPPoE(em1)
Virtual IP (1.2.3.4) on WAN interface
OpenVPN server on the Virtual IP 1.2.3.4
openv... -
- After a package reinstall, package services starting is hit and miss at best. Seems most of the time the services fai...
-
- yeah that's not new enough
-
- Hi guys,
No joy with 2.2-BETA (amd64) built on Tue Nov 18 14:41:54 CST 2014.
I guess I need to wait a little lo... -
- To be tested with new snapshots.
-
-
-
-
- At the moment it allows all local-connected subnets, including WAN/s. For example in some of my situations we have a ...
-
- Unbound defaults to only answering queries from 127.0.0.1, and you add specific allowed networks to permit queries. T...
-
-
03:03 PM Bug #3894: OpenVPN client started multiple times when connecting to FQDN where connectivity to server is delayed
- On a server with two OpenVPN Clients in Peer to Peer (SSL/TLS) mode, I have the same issue, while "Infinitely resolve...
-
- Applied in changeset commit:3ba077846e56459715e1f78a8e538797a890f49b.
-
-
- Applied in changeset commit:cd7b929ac0ee324b96baabcd216cf303be937db7.
-
-
- Applied in changeset commit:f13df0e3f1bf45d8dab01805f757e623165c044f.
-
- Unbound port built with libevent is marked BROKEN for FreeBSD 10+ due to an issue with capsicum, I reverted the commi...
-
- Warren Baker wrote:
> Thats what i wanted to do but Ermal felt that it should be left with base and modify the compi... -
- Thats what i wanted to do but Ermal felt that it should be left with base and modify the compile options in base to s...
-
- Today we are using unbound from base, which has no support for building with libevent. I'll work on moving it to use ...
- 02:03 PM Revision a8c82ef9: Pass path parameter through htmlpecialchars()
- 02:03 PM Revision f376043c: Define a local boolean var for showact to avoid security issues, also pass order parameter trough htmlspecialchars()
- 01:54 PM Revision ae38cb75: Pass path parameter through htmlpecialchars()
- 01:49 PM Revision 4b40d036: Define a local boolean var for showact to avoid security issues, also pass order parameter trough htmlspecialchars()
- 01:40 PM Revision e91a43d6: Fix whitespace and indent
- 11:21 AM Revision d56dc72a: Revert "Obsolete unbound from FreeBSD base files, ticket #4020"
- This reverts commit 8fde4ae8be00bfe7f9cfec107f6566413f41b5f7.
- 11:21 AM Revision cd7b929a: Revert "Use unbound from ports, it should fix #4020"
- This reverts commit f13df0e3f1bf45d8dab01805f757e623165c044f.
- 10:50 AM Revision f13df0e3: Use unbound from ports, it should fix #4020
- 10:48 AM Revision 8fde4ae8: Obsolete unbound from FreeBSD base files, ticket #4020
-
- Currently if relayd is in use and all pool servers are down, the connection does not get any NAT applied and will end...
- 09:47 AM Revision 8cfaf7bc: Merge pull request #1341 from phil-davis/patch-6
- 09:46 AM Revision 8a5265b2: Merge pull request #1332 from phil-davis/patch-3
- 09:45 AM Revision a0b72ec3: Merge pull request #1331 from phil-davis/patch-2
-
- In the latest release (v1.5.0 as of today), there is a new option unblock-lan-zones which is detailed as follows:
... - 05:27 AM Revision 8ce04d22: Static gateways weren't being added to the routing table after configuring at the console, fix that.
- 04:12 AM Revision ebb5ba62: check for IPs here also to avoid invalid config entries. change my last fix to v4/v6-specific
- 03:53 AM Revision d4b9bc5a: Make OpenVPN desccriptions appear in interfaces assign dropdown
- As reported in forum https://forum.pfsense.org/index.php?topic=84251.0
The fix turned out to be easy. - 02:20 AM Revision 845fd268: Verify IP address before putting into unbound config. some "Array" entries were ending up there.
- 02:15 AM Revision d25f0912: 192.254.0.0/16 isn't private, remove
- 02:04 AM Revision 83cafbc8: Clean up unbound advanced page HTML
- 12:33 AM Revision ec6ac69c: add vmx to list of ALTQ capable interfaces
11/17/2014
-
-
- 127.0.0.1 should be first in resolv.conf where unbound is enabled and bound to localhost. line 145 in system.inc. The...
-
-
- It appears Unbound is not being compiled with libevent. With the following in unbound.conf: ...
-
-
- 2.1.x and prior versions had an empty /usr/local/etc/rc.d/ directory after a clean install. 2.2 doesn't. This makes s...
-
-
- And another example of typical range of directories where package files are stored for 2.0.n, 2.1.n and 2.2.n and how...
-
- related commit in sudo package.
https://github.com/pfsense/pfsense-packages/commit/f4ae260c8ae8e54f0d40bfd337fbe9ed... -
- Multiple packages are looking for files in /usr/local/ rather than under the PBI's root dir. One example in #4017, Sq...
-
- no change. We have a test environment up internally. Ermal, ask me re: details.
-
- Next snapshots include patches that fix the behaviour.
-
- When choosing one of the "$interface IPv6 Link-local" options, it omits those from the unbound config.
-
- Indeed, the following only are there:
squid-2.7.9_4-amd64.pbi 17-Jul-2014 21:41 ... -
11:23 AM pfSense Packages Bug #4016 (Resolved): squid3 amd64 looks to have bad download link
- Hello,
It looks like squid3 amd64 has a bad download link (and will not install):... - 07:55 PM Revision ed6e93ea: correctly specify arrays here. Fixes last of issue with Ticket #3955, and
- probably a variety of other bugs.
- 07:54 PM Revision 224b4208: Fix pw syntax when local_group_set() is called with reset == true, -M always require a parameter
-
- it's there, was just overlooked in not being added to the list. I just fixed that.
-
06:10 PM Bug #3770: Some drivers not being built with altq support
- I'm not seeing ALTQ detected on vmxnet3 interfaces, and vmxnet2 is not detected at all... but this says that vmxnet h...
-
- that looks to be a general issue with a number of packages, #4018 covers that general issue
-
04:44 PM pfSense Packages Bug #4017 (Rejected): postfix package looking for /usr/local on pfsense 2.2
- I'm seeing these while trying to start posfix on 2.2 BETA
/usr/pbi/postfix-amd64/sbin/postfix start
cd: /usr/local/... - 04:58 PM Revision a0814e4c: Merge pull request #1339 from dembeck/master
- 04:48 PM Revision d33e6008: Merge pull request #1338 from SilvioGiunge/change_system_usermanager_settings_test_page
- 04:47 PM Revision a5a0f615: Merge pull request #1340 from phil-davis/patch-5
- 04:08 PM Revision b3977493: Unbound improvements and fixes, ticket #4011:
- - Create dhcpleases_entries.conf, feed by dhcpleases
- Do not read lines created by dhcpleases from /etc/hosts to pop... - 04:03 PM Revision 21713b25: Take unbound into consideration when creating /etc/hosts, also use new unbound parameters for dhcpleases when it's necessary, helps ticket #4011
- 04:02 PM Revision d3801fdb: Clear dirty subsystem for hosts and staticmaps when unbound is enabled
-
- this does set CURLOPT_INTERFACE, which should force source IP selection, and then route-to handle accordingly. I have...
-
- fixed
-
- thanks for the feedback
-
12:42 PM Bug #4013: DHCP6 static bindings not included in /var/unbound/host_entries.conf
- fixed in latest snapshot
-
- Worked on the tests I did, sending to Chris for a second round of tests
-
- 11:09 AM Revision a0e387a5: Improve test in unbound_add_domain_overrides
- Actually the test condition happened to work OK! But this change makes it easier to understand what is really intended.
-
-
- Chris Buechler wrote:
> JimP: you have a way to at least semi-reliably replicate this on current versions? I've been...
11/16/2014
-
- JimP: you have a way to at least semi-reliably replicate this on current versions? I've been trying a variety of scen...
- 10:09 PM Revision 1deb0924: add the last few missed files to obsoletedfiles list. Ticket #3970
- 09:58 PM Revision 9e7e2c94: Properly handle CARP IP binding in dnsmasq post-changes for FreeBSD 10.x CARP. Ticket #4012
- 08:11 PM Revision 11fb4543: show tunnelv4 on v4 the same way tunnelv6 is shown on v6
- 08:09 PM Revision bac17444: show tunnelv4 on v4 the same way tunnelv6 is shown on v6
-
- fixed
-
-
- Some settings in IPsec are only relevant to IKEv1 or IKEv2, not both. Need some javascript to hide irrelevant setting...
-
- I added the last few missing ones, this is good now.
-
- fixed
-
- fixed
-
- fixed
- 09:21 AM Revision 67be8c3d: Sorted the provider names alphabetically
- 09:13 AM Revision 984abd66: Handle reverse-lookup zones for unbound
- By default unbound returns nothing for private reverse lookups. Here is some information about that from https://www....
- 07:18 AM Revision 4e82cebf: Don't show a big red "alarm"-looking message on every visit to the DHCP/DHCPv6 Server pages. Confuses people in that context, and it's not something that justifies highlighting in such a fashion. Move the message to show when you have no eligible interfaces.
- 06:05 AM Revision f2b4a29b: Don't try to clear states to gateway, all that does is wipe the entire state table unnecessarily. rc.newwanip takes care of killing states appropriately as needed when an IP changes.
- 05:37 AM Revision 9a25a85d: show user that something is actually happening when they choose php-fpm_restart
- 05:12 AM Revision b026cb18: Use appropriate size for the interface selects. Ticket #3989. clean up some text while here
-
- Pull request added: https://github.com/pfsense/pfsense/pull/1340
And attached is a sample of the GUI entry for a rev... -
- If I add a domain override for reverse lookups in some private address space, unbound never returns answers to any re...
- 12:40 AM Revision b5acc797: fix Unbound Advanced options
- 12:16 AM Revision 88a0937d: if unbound is enabled, assign interface IP as DNS, same behavior as dnsmasq
11/15/2014
-
- fixed
-
- I fixed some of what you noted, some has other tickets. What this ticket covers is resolved. Please post any issues y...
-
05:33 AM Todo #3396: Replace dnsmasq with Unbound
- 2.2-BETA (amd64) - built on Sat Nov 15 01:14:19 CST 2014
Host Overrides dose't work properly. Only the top one seems... -
- 2.2-BETA (amd64) - built on Sat Nov 15 01:14:19 CST 2014
Pfsense is not the default DNS service. Do not use the DNS ... -
02:21 PM Revision a0f9f9f7: Changes in the test page of user manager
-
11:51 AM Bug #3913: if_bridge missing ALTQ support
- Will do so once i can isolate better the problem.
Thanks. -
- /var/unbound/host_entries.conf contains only IPv4, no IPv6 entries.
On the latest snapshot unbound restart shows t... - 07:27 AM Revision 0c50e94b: fix missing strpos parameter
-
- Got a good deal of info gathered from OP's system, both from 2.2, and from a 2012 2.1 snapshot where 6rd works fine. ...
11/14/2014
- 11:12 PM Revision 63d129cc: 6RD Rapid Deployment is akin to ATM Machine, PIN Number, ... read: it's redundant. let's just call it 6RD Configuration.
-
- this particular todo is complete. There are some outstanding Unbound bugs, covered in other tickets.
-
- default config updated. Needs more testing and feedback.
-
10:45 PM pfSense Packages Bug #3977: Squid-dev 3.3.11_1 pkg installs but does not start on 2-2-BETA
- Also, this bug affects my x64 box, so it is not just i386/x86 affected.
-
- the kernel portion of this seems to be working fine in 2.2. There is an issue with the delegated prefix handling that...
-
- When configuring dnsmasq with specific bind IPs and choosing CARP IPs in the list, it doesn't actually bind to the CA...
-
- there is something here that makes the status inconsistent from time to time. Seeing it on multiple systems. Status>I...
- 11:51 AM Revision 4dbcf2fb: Make sure dhcpleases use correct pid file for dnsmasq or unbound. Fixes #4008
-
- Looks like it's a problem on ipfw patch:...
-
- Yeah, that was with the most recent gitsynced code as of last night. The rest of those fixes were fine, this one didn...
-
- Did you try latest snapshots? I pushed a fix for this yesterday, commit commit:27c2e32e
-
- It's a regression. In previous versions with the embedded kernel you could not stop the serial console from working s...
-
- Why is this the fault of pfSense?
-
- Selecting "Embedded" during install does not activate the serial console in a persistent way on amd64 now that there ...
-
- dhcpleases write leases information to /etc/hosts, but unbound never uses data from it.
- 09:51 AM Revision 9612943e: Obsolete a lot of files forgotten during all last pfSense versions. It fixes #3970
- 09:46 AM Revision e09797b0: Deal correct with filenames with spaces
- 09:46 AM Revision cc814aef: Make it possible to remove a directory on obsoletedfiles
- 09:46 AM Revision e0141b7a: sort obsoletedfiles
-
- Also submitted to FreeBSD ports tree, if accepted, pfPort can be removed - https://bugs.freebsd.org/bugzilla/show_bug...
-
- Patch integrated on pfPorts and can be tested on next coming snapshots.
Also reported on https://community.openvpn... -
- The issue seems to be that openvpn setups the crypto before forking.
This makes crypto device unhappy in general and... -
- OpenVPN uses EVP API and always loads all available engines and tries to use them.
In the case of aesni for AES* the... -
- The error is fixed but the console problem I mentioned above is still an issue. I moved it to #4009
-
- fixed
- 07:43 AM Revision e2accfac: Update default config.xml for 2.2. Disable dnsmasq, enable Unbound. Remove
- outdated comments that used to sort of document the config file, but had
been neglected for quite some time and aren'... -
- Applied in changeset commit:4dbcf2fbcea9cfe2166c958d3872e3a7353e3c5c.
-
- Steps to reproduce:
1. Configure DNS Forwarder
2. Configure DHCP server
dhcpleases is going to use '-p /var/ru... -
- Applied in changeset commit:9612943eaa3c6ef427ea4414f7c32dc2b326dd55.
-
- also remember to add the obsolete openntpd files JimP mentioned.
-
- fixed
-
- fixed
11/13/2014
-
- Aside from issues that have other tickets, I'm satisfied here. Been through a number of test upgrades with varying co...
-
- same root issue is likely breaking other things as well
-
- root of this issue is line 1135 in captiveportal.inc: ...
-
- "Last activity" in CP status page is blank in 2.2.
-
- fixed
-
- Applied in changeset commit:b4e0f02b89fa6b8e8b22f31ee4486df171ae5337.
-
- Renato Botelho wrote:
> After investigate it a bit I noted IPs are not being added to ipfw tables, all are added as ... -
- Looks much better, fine to go ahead and commit that.
Still missing some, see attached. -
- Pass it to Chris to run a final test before commit.
-
10:18 PM Bug #3361: DHCP6 WAN is not obtaining a default gateway
- Turns out that the ISP for the WAN in question is only experimenting with IP6 at the moment. Anything I've picked up ...
- 07:58 PM Revision b95399a7: outbound NAT can apply to any type of interface, make WAN-type specific reference generic
-
- this is at least mostly fixed, still seeing a different issue I'm looking into.
-
-
- Also, while I'm here, fixup copyright.
-
- to me for testing
-
- fixed
- 05:23 PM Revision 99b7f4b2: Merge pull request #1335 from brunostein/remove_multiple_groups
- 05:22 PM Revision 98d11ee7: Merge pull request #1334 from brunostein/remove_multiple_users
- 05:21 PM Revision b6fd5c8f: Merge pull request #1336 from phil-davis/patch-4
- 04:55 PM Revision b9608ab6: Implement advanced settings in unbound.conf
- The settings are made in the Advanced tab in the GUI and are stored in the config.
Now actually implement them in unb... - 04:50 PM Revision b4e0f02b: Make sure $cpzoneid is defined and use it to call pfSense_ipfw_Tableaction() and pfSense_ipfw_getTablestats(). Also fix fieldnames for captiveportal_hostnames. It should fix #4001
- 04:50 PM Revision 0cd7c91a: Subnet parameter is mandatory for pfSense_ipfw_Tableaction(), add where it's missing
-
- works great
-
- Should be fixed by commit:0373c361fe623e466ed2c9b8cf129a7f160f79cf
Assigning back to cmb for testing. -
-
- OpenVPN is using EVP API so it loads all available engines which by default is cryptodev.
There are two problems h... -
- This seems like an openvpn problem, openssl lib does not show any problem when used with the openssl binary.
-
-
12:15 PM Revision b95a96ec: remove checkall checkbox
- 12:10 PM Revision 8105ffa6: Fix logic to find available next number for limiters and queues. It fixes #3998
- 12:09 PM Revision 89cf3dc0: Fix logic to find available next number for limiters and queues. It fixes #3998
-
-
-
-
-
- 11:10 AM Revision 340ce958: Add an extra protection to avoid having an empty group created
-
- Applied in changeset commit:8105ffa61c2d5aba42fa0ceac92ae7f9f80f8b19.
-
- Applied in changeset commit:89cf3dc0b6958322974d40fd1111ef276174053e.
-
11/12/2014
-
-
-
-
-
- If you install to a GEOM mirror, remove one of the drives, and add a new blank drive, the new drive doesn't show up a...
-
-
-
- 05:26 PM Revision 71f45fed: Don't allow interface descriptions that are strictly numbers as that
- generates an invalid ruleset. Ticket #4005
- 05:22 PM Revision a19cc600: fix variable typo
- 05:20 PM Revision 2b114010: fix text
- 04:22 PM Revision 61dec0b0: Make sure empty group or user are not created when editing
-
04:03 PM Bug #4000: guess_interface_from_ip parses netstat output that may be truncated
- Tested on the latest snapshot (built on Wed Nov 12 11:52:20 CST 2014). Looks good, finally the DHCP failover peer IP ...
-
- Applied in changeset commit:aa5acb424f4d05efd15ceed1b9e71d6a34dac674.
-
- to me to change the default config and test
-
- After investigate it a bit I noted IPs are not being added to ipfw tables, all are added as 0.0.0.0/32:...
-
-
- I'll take this one
- 02:27 PM Revision 2951a06a: Only create missing ssh keys, do not overwrite existing ones. It fixes #4003
-
- That does not have issues with the first ip address but rather no strict linkage of vip/carp interface to its informa...
-
- This seems a non issue since the old SPD will stay there until the SA related to them be alive.
As long as the old S... -
-
- last one was messed up by WebDrive's caching. attached an update
-
- Something is wrong, fresh install is not supposed to have those gettext files. I got last i386 and amd64 iso files an...
-
- updated diff attached.
V: is the clean install, Q: the upgraded system. -
- I took a quick look at it, and looks like it is also broken on stock FreeBSD (not tested to confirm). Looks like the ...
-
- Implemented as Chris suggested
-
- to me for testing
-
- Finding a new issue wasn't the contribution I intended to make.
I'll double check with the ISP for that WAN conne... -
- back to where we started here. Status>IPsec is fine, dashboard widget is wrong in two ways.
1) All connections show... -
- Heh fixed, sorry for the breakage.
-
-
- This reverts commit 694d368d818508a40bdef4f1a3f64b414b11c442.
-
- Thanks. The issue is an all-numeric interface description isn't valid, and no input validation prevented that. I just...
-
- (this is my first bug report, I hope it is helpful)
There appears to be an error loading the rules that generates ... -
- Patch has been put in snapshots which should correct this.
-
- This is just cosmetics rather than table on ipfw issue.
-
- Applied in changeset commit:2951a06ad89fc207a709af362ddc42069fdee172.
-
- Working on a fix
-
- SSH host keys seem to always be recreated post-upgrade to 2.2 from 2.1x or earlier versions.
-
- There might be issues on HyperV with CARP.
Reference information on https://forum.pfsense.org/index.php?action=pro... - 06:32 AM Revision 5823df59: remove this log, it's never logged anything useful that I've seen, and unnecessarily spams the secondary's system log on every config sync.
- 01:13 AM Revision 4de91fda: hn(4) is ALTQ-capable, mark as such.
-
- more upgrade scenarios confirmed good now that some related blocking problems are fixed.
11/11/2014
-
- this broke IPsec status for everything. All down on dashboard, all down on Status>IPsec (showing down icon, but "esta...
-
- Patch put in.
-
- I believe I have a fix for to make this work, however, the fix currently needs to be applied manually on every box. I...
-
-
-
-
-
-
-
- Under certain circumstances (which I haven't fully quantified), you'll end up with 0.0.0.0 in your ipfw tables. Ermal...
-
-
- On 2.2, after disconnecting a user from CP on status_captiveportal.php, their HTTP requests no longer are redirected ...
-
- Peter: you're not getting an IP at all? That seems like a different issue, what we've seen here the system gets an IP...
-
- Meant to say DHCP6
-
- Currently running:
2.2-BETA (i386)
built on Sat Nov 08 15:40:19 CST 2014
I have a dual WAN configuration. WAN-0... -
- to me for testing against next snapshot
-
- updated comparison, but against a not freshly installed 2.2 so this is probably not useful at all. When the next new ...
-
- Chris, can you compare files again but now use a fresh installed 2.2? I fixed a bug in bsdinstaller that was introduc...
-
- to me to re-test
-
- this is pretty easily replicable. Log into 22vpntest, VPN>IPsec. Edit one of the "cmb home site to site" P2s, for ins...
-
- Long interface names are truncated in netstat output, which can lead to various potential problems (though most thing...
-
- that one's fixed now as well. Everything here works now.
-
- that fixed that issue, one remaining. Config sync no longer syncs those aliases to the secondary.
-
- Applied in changeset commit:94115b931349c4c2dbaff080842bcdbe60ed94b7.
-
- Oops fixed!
-
- this is mostly fixed after my commits earlier, I think just one last piece. ifconfig is missing the interface. You'll...
-
- scratch that, the test box wasn't rebooted post-gitsync and gitsync doesn't apply the relevant change on the fly. Thi...
-
- no change. Test setup on dev ESX is fully in place now, info on chaos wiki.
- 01:57 PM Revision 992f60d0: Set proxy env vars on interactive shell and also on crontab to make all scripts be able to use it. Ticket #3789
-
- I have corrected this on new snapshots.
- 01:33 PM Revision eacdbc4d: Revert "Ticket #3789. Put a start at using the proxyurl/proxyport from system configured settings for bogons. It still does not consider the user/pass configured"
- This reverts commit 664adf3845cf1df89769bb0ed5fc113048e0912e.
-
- works in every scenario I can find
-
-
- 06:03 AM Revision 0b7dbebe: touch up text
- 05:53 AM Revision 5f4f8365: fix text
-
05:36 AM Revision 29aef6c4: Change copyright statement to reflect reality
-
- 04:24 AM Revision e7896fc8: Change copyright statement to reflect reality
- 04:13 AM Revision e120d5ce: Fix syntax error in CARP status page. Ticket #3967
- 04:07 AM Revision a1b66bec: Restore the CARP parent display in firewall_virtual_ip.php. Ticket #3967
- 03:52 AM Revision a9b305a8: Set this to /8 instead since that's how it's done in stock FreeBSD 10.1. Ticket #3941
- 03:37 AM Revision b0533f16: Setting an interface's IP to 0.0.0.0 with mask 0.0.0.0 overwrites the
- default route with that interface's link route. Later in dhclient, that
gets deleted and leaves the system with no de... -
02:10 AM Bug #3988: menu text shifted to the left after upgrade
- I noted above that I cleared browser cache. From the original bug it was noted that main
issue are fonts.
I specifi... -
- seems this has been resolved. I haven't been able to replicate the circumstances here since Ermal's last round of fix...
-
12:20 AM Bug #1943: PPPoE won't reconnect after link loss when using vr(4) NICs on certain ISPs only
- Damn, Today I had a 8h internet downtime because of this bug again while I was sleeping! Latest snapshot.
11/10/2014
-
-
-
- dhclient-script in 2.1x used the same 0.0.0.0/0.0.0.0, so that's a change in behavior between FreeBSD 8.3 and 10.1. C...
-
- Thanks for the comment Phil, that thought process brought to mind an idea. Using a /32 mask instead of 0.0.0.0 fixes ...
-
- Just a thought - perhaps the interface can be set to all/part of the link-local address space 169.254.0.0/255.255.255...
-
- found the exact spot where the issue happens. /sbin/dhclient-script, line 325. ...
-
- getting close to finding this, back to me as I'm working on it now.
-
-
-
-
- 06:38 PM Revision da66ef4f: Stop FQDN in hostname field
- 06:37 PM Revision 2d86ee95: Stop FQDN in hostname field
- 06:36 PM Revision 762fc5c0: Stop FQDN in hostname field
- using new is_unqualified_hostname function
- 06:35 PM Revision c941faa4: Stop FQDN in hostname field
- using new is_unqualified_hostname function
- 06:34 PM Revision 34c2b8f2: Stop FQDN in hostname field
- 06:33 PM Revision 84c4efc4: Stop FQDN in hostname field
- 06:31 PM Revision 6bcbd862: Add is_unqualified_hostname function
-
- to me for testing
-
- Applied in changeset commit:b0d054ca3b314d0ac7dcfd6a5ba30170a71fe63b.
-
- It should work same as before.
-
-
-
-
- Teh reply from interface was not being set properly.
Works for me now. -
- Applied in changeset commit:c46f9695ec7baf6dcfcc5a488fe0dd5dd6f4a00f.
-
-
-
-
-
-
- this issue is fixed, this isn't the place to discuss what's likely a support issue not a bug. Please post to the 2.2 ...
-
- The message is gone. Trouble stays:
But i don't have a single clue why but:
I don't have internet access from my ... -
- clear your browser cache and it'll almost certainly go away. If not, post to the forum or list with more info, this p...
-
- Hello!
I don't have Verdana or Tahoma fonts installed. I also don't have ttf-mscorefonts-installer package install... -
- In 2.1x and previous versions, the GW field in pftop showed the IP:port of the NAT applied to the connection, the src...
-
- updated comparison attached. S:\ is the upgraded system.
-
- On the latest snap + gitsync this is still a problem for me with just one WAN. The gateway appears to be set and is t...
-
- This should be retested.
For me this should only happen when you have 2+ dhcp6 wans. -
04:48 AM Bug #2762: PF drops IPv6 packets with fragment header followed by a last fragment only
- Just FYI:
The official bug (https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=172648) got another mention:
-> h... -
04:28 AM Feature #1388: 3G outbound failover connection with auto dial-up and hang-up
- +1 for me too !
11/09/2014
-
- On 2.2 I tried adding a few limiters and children and then deleting ones in the middle of the list... It seems that c...
-
02:43 PM Bug #3998 (Resolved): Duplicated limiter numbers
- I’ve 19 limiters (number 1 to 20, expect 13)
If I add a new one, he gets an already occupied number, 15. After that ... -
- The bug is still here. Fresh log attached.
-
02:20 PM Feature #2129: TCP mss clamping for IPv6
- Ok, so people understand better that the input value is not taken as input value but subtracted by some (incorrect) n...
-
- I noticed that list takes only files currently, some of those would be easier to just rm -rf a directory instead of a...
-
- I was working on a similar list but only for a 2.1.5 fresh install against 2.2. Your test is better and I'll check th...
-
- ttys_wrap file was removed on 2.2, but is still necessary o 2.1. Would be better if installer guess pfSense version b...
11/08/2014
-
- I did a clean install of 1.0.1-REL, then upgraded that to 1.2, 1.2.1, 1.2.2, 1.2.3, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.1, 2....
-
- MTU in RA and properly-functioning PMTUD do indeed make it questionable as to whether it's necessary. But MSS clampin...
-
- Chris Buechler wrote:
> questionable whether this is necessary. Definitely not a priority for 2.2
If you question... -
- Solution put in place for having this working on 2.2 and 64bit installer.
-
- New snapshots will contain last filterdns code
11/07/2014
-
- confirmed working, looks good
-
- Reput back with proper building on snapshots.
-
- tun was the potentially problematic one. tap has never had ALTQ and probably isn't sensible to use in the shaper anyway.
-
- fixed
-
- It works for me but there were some patches accidentally removed from builds which have been put back.
-
- fixed
-
- Applied in changeset commit:80be089f050f0f27398a2f35ff5d48f43c7cfa3f.
-
- Rightsourceip was being set on site-to-site/peer-to-peer configs which is wrong.
-
- I don't know the cause, but it seems most likely to be when we bumped to strongswan 5.2.1 last week. There was a patc...
-
- Sometime in the recent past, AES-GCM has stopped working. To replicate, just setup a site to site IPsec VPN using AES...
-
- really needs some javascript to remove NAT-T option where IKEv2 is selected and replace with MOBIKE control. No longe...
-
- I'll finish this.
-
- root issue is #3997, closing this in favor of that.
-
- root issue is #3997, closing this in favor of that.
-
- In some circumstances, IPs can be added/removed from an interface in such ways that an interface's primary IP is no l...
-
- Up to and including 2.2 are affected by the bug described here.
https://bugs.freenas.org/issues/4803
There is a ... -
-
- confirmed that works now. Need to do more testing to ensure the obsoletedfiles list is complete.
-
- One way to replicate is changing the P2 local and/or remote subnet on a functional site to site VPN. Check SAD and SP...
-
- I cannot reproduce it on my side but for sure it was reloading secrets/crl/ca/cert's but was not realoding the config...
-
- Ermal pointed that the function I disabled is needed in some specific cases. I'm reviewing
-
-
- some limitations in strongswan that might make this difficult, as well as GUI design issues. Probably postpone the fu...
-
-
- Isn;t memstick just a loader.conf option kernel rather than else on amd64?
-
- Even with only one kernel a choice must still be made about the console, so changing this screen into a console selec...
-
- The issue here is that the amd64 builds do not have anymore the wrap kernels.
Only i386 has this type of kernel.
... -
- I added my workaround mentioned above for now. The other issue needs verified to ensure there isn't a larger problem ...
-
- The latest sudo 0.2.3 works for me, both on a production 2.1.5 system and a test 2.2 system.
-
- The binary is looking for its files in /usr/local/ when they live in the PBI dir /usr/pbi/sudo-<arch>/local/
I can... -
- Indeed, same for me. I should really have been using some security on test systems rather than just the root/admin ac...
-
- With a completely default config, when trying to use sudo, you just get: ...
-
11:37 AM pfSense Packages Bug #2992: Boot problem after upgrade
- Hello,
New 2.1.4 install here, then upgraded to 2.1.5.
I then installed bandwidthd and just had the no boot iss... - 05:19 AM Revision bcb83c9e: Reintroduce graphcounter var to traffic_graphs.widget.php
- This counter got lost in commit https://github.com/pfsense/pfsense/commit/ee965a5c7bf37b852795e1201688e3b20bf3d8d1
Bu... - 04:11 AM Revision a8380480: fix text
- 04:09 AM Revision 6859f881: show interface name, not identifier
- 04:03 AM Revision d3d23754: fix text, PPPoE Server, not VPN
-
- I'll take it.
-
- Ticket #3981 is the root cause
- 02:19 AM Revision 7bd413eb: add a route debug option to log info about route commands executed (where those aren't already logged) to help with troubleshooting various routing scenarios.
11/06/2014
- 11:16 PM Revision 708af634: remove unnecessary is_array check, thanks Renato
- 10:36 PM Revision 6c3be365: Don't allow P2 local+remote network combinations that overlap with
- interface+remote-gateway of the P1. Fixes #3812
-
- fixed
-
- looks to be fixed, leaving for further confirmation
-
- actually it's strongswan itself doing this, looking at where/why.
-
- this is good
-
- Applied in changeset commit:6c3be3650008801aaa1579dca67b0588c04b8e18.
-
- fix pushed and tested, leaving for further testing and confirmation. The check only prevents P2s where the local+remo...
- 06:49 PM Revision dbb95f38: set install_routes=no for charon to avoid the issues noted in ticket
- 06:38 PM Revision 27c2e32e: Pass zone id to pfSense_ipfw_getTablestats(), should fix #3990
- 01:54 PM Revision 118218cb: Make sure target has scope when it's a link-local. Fixes #3969
- 01:40 PM Revision 049c74ec: Check if array is set
-
-
- confirmed fixed, though last activity is blank, that's a separate issue I'll check into further and open its own tick...
-
- Applied in changeset commit:27c2e32e28f871adf036b666e8e3ae1bf54ea7a2.
-
- Actually this is hit and miss, but it's the same root issue as #3960 it appears. Changed subject to the best descript...
-
- something was fixed that resolved this
-
- Matt, you're welcome to pick up #3982, no one's working on that yet. Just assign it to yourself and set to assigned s...
-
- Duplicate of #3982
-
10:12 AM Bug #3993 (Rejected): 2.2 memstick installer kernel selection is broken
- In the serial memstick image for 2.2, if you select 'Easy Install' and allow the system to install, you are prompted ...
-
- An additional note after talking to Renato earlier and doing some research:
The serial console worked for me becau... -
-
- works
-
- it's not consistent every time it appears, but it is replicable after discussing and trying further with Renato.
-
- Chris Buechler wrote:
> I confirmed it again on the most recent snapshot. In addition to changing it not removing, d... - 10:30 AM Revision 3f6525c1: Make sure srcip has scope when it's link-local. Should fix #3969
- 09:57 AM Revision e7752fc4: Remove extra ; and space
- 09:57 AM Revision e7a00514: Process obsolete files in shell script instead of php
- 09:57 AM Revision 48f77cef: Simplify post_upgrade_command logic and obsolete /usr/local/sbin/cvs_sync.sh instead of removing it on post_upgrade_command
-
09:40 AM Bug #3992 (Resolved): The password confirmation field is not properly formatted at VPN: L2TP: User: Add/Edit
- At VPN: L2TP: User: Add/Edit the password confirmation field is longer than the password field.
Also the small "lo... - 09:29 AM Revision a68c6785: Fix to SMART disk matching
- preg_match returns 0 when the string does not match the regex.
0 does not "===" FALSE
So this check is not always wor... -
- modified pfsense-tools/builder_scripts/scripts/rc.d/etcmfs to set default size to 20m
-
- The /etc MFS on a 2.2 memstick image of the Netgate build is allocated with 10 MB of space. The files that get copied...
-
- Looks good now, gateway shows online at boot time and still shows online across several reboots. Thanks!
-
- Applied in changeset commit:118218cb69b1a8cea2f5915e4c81537b51462c34.
-
- Source IP is scoped now but it still is not showing "online" - In my testing from earlier it looks like the target ne...
-
- Applied in changeset commit:3f6525c1ab0fd3f704ab8e23f935c475c3cbd16c.
-
- Please try new snapshots, after move part of the logic to shell script it passed on all my tests
- 04:58 AM Revision a012464e: fix captive portal status page display
- 04:45 AM Revision bb18cfcb: fix up text
- 02:45 AM Revision e8fa9843: Pass friendlyifname to handle_argument_group, not realifname. Fixes #3984. clean up some text while here.
- 01:47 AM Revision e55e4b74: isset($_GET) seems to always evaluate to true, use something more specific. Fixes use of rc.linkup when run from CLI. Others likely fix similar circumstances, though maybe not ones that are used anywhere.
- 01:33 AM Revision c75e8aed: Disable delete_old_states in dhclient-script. rc.newwanip handles this correctly in 2.2, and this killed states in multiple circumstances where that isn't necessary nor desirable.
11/05/2014
-
- the fix earlier in rc.linkup didn't have any effect here. Dug through this more tonight. Best I can definitively say ...
- 11:18 PM Revision 9aec47b7: don't duplicate $message in CP log entries
-
- When clicking "Show last activity" on status_captiveportal.php (for instance, probably a problem elsewhere as well), ...
-
10:01 PM Bug #3989 (Resolved): DNS Resolver interface drop downs need enlarged
- The "Network Interfaces" and "Outgoing Network Interfaces" selection boxes need to be enlarged or made variable to th...
-
- fixed
-
- looks like check_reload_status is doing the right thing, rc.linkup seems to be where the issue is.
- 05:31 PM Revision d9b05eb4: When an alias contain hosts, add IPs and networks to filterdns too, otherwise you end up with a pre-defined and non-persistent table. Fixes #3939
-
- that change made kernel builds fail and was reverted.
-
- fixed
-
- Renato found solution today, implementing tomorrow morning.
-
- to me for testing
-
- Applied in changeset commit:d9b05eb490ab4d31a132c3e993bd560933eadd8c.
-
- Please try next snapshots
-
- Hello!
I don't have Verdana or Tahoma fonts installed. I also don't have ttf-mscorefonts-installer package install... - 09:12 AM Revision fcfa23da: Merge pull request #1319 from phil-davis/patch-1
- 09:07 AM Revision 87d4456c: Merge pull request #1323 from derelict-pf/master
- 09:06 AM Revision 5940e655: Merge pull request #1326 from phil-davis/patch-5
- 09:06 AM Revision 798d8644: Fix obviously broken test in rc.initial.setlanip
- IMO might as well back-port any obviously wrong code to 2.1 branch, just in case anybody on 2.1.n cares for it or the...
- 09:05 AM Revision f81011ea: Merge pull request #1320 from phil-davis/patch-2
-
- Duplicate of #3842
-
- Ivo Babarovic wrote:
> After I upgraded from to 2.1.5 from 2.1.2.
> Text labels in web menus are shifted to the rig... -
- After I upgraded from to 2.1.5 from 2.1.2.
Text labels in web menus are shifted to the right and longer texts get ou... - 05:31 AM Revision e39c963a: fix up text
- 05:19 AM Revision 75756ab9: use a bit stronger of defaults in OpenVPN wizard
- 05:08 AM Revision 1c1fe666: Fix WINS description. It's not 1999, and it wasn't a good description for back then either. If you're running WINS at this point on your AD DCs...get rid of the Win 9x boxes, or realize you don't actually need or want WINS on anything Windows 2000 and newer.
- 05:05 AM Revision 7a22ab9b: fix up text
- 04:01 AM Revision cbc6a13f: Fix updating of hosts file on host override updates by bringing back the same behavior from previous releases.
- 03:22 AM Revision b7419cfc: skip disabled phase 1 entries in status output
- 01:57 AM Revision 261f2efe: fix NAT-T status. The 'nat' in the status array just tells how the connection is configured, not what it's actually using. Port seems to be the best way to determine what it's using. Fix up some other text while here
- 01:09 AM Revision 531686c1: use tabs rather than spaces, as most of this already did.
- 01:02 AM Revision d3c414e3: strongswan only has two options for NAT-T, force or auto.
- 12:44 AM Revision a43ddd1a: setting nmbclusters to 0 just results in an error, remove unnecessary line
- 12:34 AM Revision 41367b9c: remove old DISABLE_PHP_LINT_CHECKING, which dates way back to the CVS days and hasn't been relevant in years.
- 12:24 AM Revision 276efd64: touch up text
- 12:18 AM Revision 32171e59: fix invalid ipsec.conf
- 12:02 AM Revision f643a1f1: clean up text
11/04/2014
-
- There can only be one mobile P1 currently, which restricts you unnecessarily to only either IKEv1 or IKEv2 for mobile...
-
- this is correct for IKEv1 after my commits earlier. Seems to be working as it should. It'll continue to work on upgra...
-
- after further review and discussion with Ermal, the code is there to set forceencaps, it just isn't setting it correc...
-
- I have pushed them recently to be enforced.
The only remaining task is to remove Force from the options list because... -
- Old code was inaccurate and also listed entries that were symlinks to other disks
-
- In addition to the 2.2 issue of it somehow taking over php-fpm and thus breaking webGUI and...
I will note here that... -
05:53 PM pfSense Packages Bug #3986 (Closed): BandwidthD can break php-fpm in unknown rare edge case
- Hi,
Having a lot of struggles with BandwidthD in v2.2 More info here,
https://forum.pfsense.org/index.php?topic=7... -
-
-
- 07:31 PM Revision 756d867a: fix comment
-
- similarly, disabling a P1 doesn't remove it from the SPD nor SAD. It does remove it from the config file.
-
- I confirmed it again on the most recent snapshot. In addition to changing it not removing, deleting a P2 doesn't remo...
-
- Sorry, meant to add this for help, missed it,
https://forum.pfsense.org/index.php?topic=80248.msg437658#msg437658
-
- Hi,
I can't seem to get apcupsd or nut working in v2.2 - looks like a USB / driver issue, but I definitely could b... -
-
-
-
- Take a simple LAN/WAN setup, WAN set as a DHCP client. Boot the system with WAN's NIC unplugged. Then plug the NIC in...
-
- I pushed a fix that should treat this, test with new snapshots.
-
- aside from things that have bugs open, and things that can't be tested because of other open bugs, this seems fine. S...
-
-
10:25 AM pfSense Packages Todo #3983 (Needs Patch): Option for Cron Package
- Hello,
It's possible to add a custom button or other for disable or/and enable a cron task.
In the lastest versio... -
- Watch out for this one. It works on some boots and not others, or depending on the timing. There's a race condition s...
-
- When running the installer and choosing "Embedded" two errors are given by the GUI but if "skip" is chosen the instal...
-
- As i said before TAP should behave the same on 2.1 as well
11/03/2014
-
- This is a recent regression in 2.2. diag_ipsec_spd.php shows "No IPsec security associations" when there are active, ...
-
- A static route for the remote network of every P2 is added in 2.2, pointing to WAN's gateway IP. I'm guessing the int...
-
- the issue described here is resolved. The two Ermal noted we'll discuss
-
- I have done testing on this.
It works even today as is.
List of issues i am after:
- Racoon does not like agress... -
- The enable/disable/force NAT-T settings from earlier versions don't do anything in 2.2. It appears in newer strongswa...
-
- no change
-
- tun is fine, tap not.
-
- looks good, thanks Warren
-
- Applied in changeset commit:d5566d43f4ace5036b5e5476d975bb8d13ce3b6f.
-
- Yeah i have the changes done. Just haven't submitted a pull request just yet. There are a few more which Im still goi...
-
- I have a bit of code to make that all consistent. I also see that Wagonza just made some updates to the related files...
-
01:38 AM Bug #3974: DNS Resolver: Advanced - Error in description
- Just noticed that the same issue exists for a few other items on the same page:
Outgoing TCP Buffers 0 vs 10
In... -
- Go to Services -> DNS Resolver -> Advanced -> Outgoing TCP Buffers and Incoming TCP Buffers (/services_unbound_advan...
-
- assigning to me for further testing. Unchanged in 2.2 from prior releases, not a common enough issue to hold up and p...
-
- fixed. Voucher sync is separate from CP's config sync, it does work.
-
- no change
-
-
- Hi,
It's possible to add a custom area to select only backup or restore
-One for Limiter
-One for Layer7
Than... -
05:35 PM pfSense Packages Bug #3977: Squid-dev 3.3.11_1 pkg installs but does not start on 2-2-BETA
- Nev Secular wrote:
> 2.2-BETA (i386) built on Thu Oct 30 13:58:57 CDT 2014 FreeBSD 10.1-RC3
> After installing squi... -
- 2.2-BETA (i386) built on Thu Oct 30 13:58:57 CDT 2014 FreeBSD 10.1-RC3
After installing squid-dev 3.3.11_1 pkg squid... - 05:27 PM Revision f384d8a5: Merge pull request #1329 from phil-davis/patch-3
- 04:43 PM Revision a3fad592: Fixup dhcpd interface enabled check
-
- 03:04 PM Revision ba667cc6: Fix console set interface IP address
- Problem as per forum https://forum.pfsense.org/index.php?topic=83651.0
The problem comes whenever services_dhcpd_conf... -
- that didn't fix the issue described here
-
- /tmp/post_upgrade_command.php is executed after new files are in place and before reboot, probably the root cause is ...
- 12:56 PM Revision ec290464: Merge pull request #1328 from wagonza/master
- 12:54 PM Revision fe9d4894: Fix indent
- 12:52 PM Revision 2783e408: Revert "Indent better"
- This reverts commit a431bfc9e698c753d9a54218af9076184deb6251.
- 12:45 PM Revision d5566d43: Make sure defaults values are actually used. Fixes #3974
-
- not true, please post more info to the forum or list for assistance.
-
05:27 AM pfSense Packages Bug #3975 (Rejected): Gateway Monitoring Offline
- PfSense 2.2 shows gateways as always offline
-
- that is replicable on 2.1.x but not 2.2, already fixed there.
-
11:04 AM Bug #3976 (Resolved): VLAN Interfaces on LAGG get orphaned on LAGG change
- Reproduce:
1. Create LAGG with e.g. em3 + em4, LACP and a nice description
2. Create a few vlans and assign them ... - 10:48 AM Revision 7bb24e18: Merge pull request #1327 from wagonza/pfSense-master
-
- It's not the gateway that needs states killed, it's the old WAN IP.
-
06:36 AM
Bug #1629: invalid state table entries after WAN IP change
- I'm on ...
- 10:08 AM Revision 46a989ce: Indent here as well
- 10:08 AM Revision a431bfc9: Indent better
- 10:04 AM Revision 1b436de1: Be consistent with the other pages
- 10:03 AM Revision be11b6f1: Add braces
- 08:27 AM Revision 4c3abd34: Fix obviously broken test in rc.initial.setlanip
- IMO might as well back-port any obviously wrong code to 2.1 branch, just in case anybody on 2.1.n cares for it or the...
- 07:54 AM Revision 0a89d059: Merge pull request #1324 from phil-davis/patch-3
- 06:04 AM Revision 8727b3c8: Set interface address from consol tidy output
- While trying to see why this is not working for me (forum https://forum.pfsense.org/index.php?topic=83651.0 ) I have ...
-
-
02:35 AM Bug #3940: check_reload_status uses deprecated libevent-1.4
- It also looks good on my custom build - no high CPU load.
11/02/2014
-
05:48 PM Bug #3973 (Resolved): Route 53 dynamic DNS provider fails to update record
- Existing records are not updating with the Route 53 dynamic DNS provider.
Records that do not exist are created p... -
- Updated to:
2.2-BETA (amd64)
built on Sat Nov 01 21:36:28 CDT 2014
FreeBSD 10.1-RC4
Now filterdns has just 8 th... -
- My main 2.1.5 production system is the big offender with this - it has over 4000 in filterdns fstat. But I can't upgr...
11/01/2014
-
-
-
-
-
-
-
-
-
- Working AVAHI on 2.2
mkdir /var/run/dbus
chown messagebus:messagebus /var/run/dbus
dbus-daemon --system
Aaron... -
- A general note
-
- Jim P wrote:
> While this is being fixed, it may also warrant adding a <service> tag for dbus.
Was that a general... -
- While this is being fixed, it may also warrant adding a <service> tag for dbus.
-
- Oops! I confused the terms "Assignee" and "Assigner". I put myself as the assignee, thinking that I was supposed to d...
-
- Avahi package version 0.6.31 pkg v1.06 has a bug which prevents it from working. This bug should be easy to fix. I ha...
-
- Well sorry to bring bad news, but i still got the same error message (i have removed the shaper rules and recreated t...
-
- that does work, but there are issues with that approach. One, you have to remember what VHID you're using on that, an...
-
- Getting back to this.
Apparently i just made conversion code to convert any such aliases to carp on same vhid.
So... -
- Applied in changeset commit:f3dd7e8cdb11077486421364ea3a11c411ba807b.
-
- Applied in changeset commit:9fdc167f4ef1c8fd1b76ba9ca6e56c8085dbe672.
-
-
- Applied in changeset commit:d338018f4798ea41975589f8c5b111568747e572.
-
-
- Applied in changeset commit:935fcedbca2dbe8c3d9eb41bc5739b511a9ec19a.
-
- Applied in changeset commit:d35dfaaecb5eabedade43738ba4f76967a7425a3.
-
-
- most I've found thus far is it still happens after removing all the "route delete default" commands from dhclient-scr...
-
- People have confirmed that the behaviour is improved.
Only the graph part needs improvement. -
-
- I think i found the cause.
Please test with new snapshots. -
09:07 AM Feature #3971 (Resolved): IPv6 - Preserve the DUID used for WAN DHCP-PD in the configuration file
+Feature Request+
Preserve the DUID used to obtain the DHCP-PD addressing on the WAN in config.xml
Secondary ...- 06:42 AM Revision 038f6e96: clarify logs generated by newwanip(v6) when restarting packages, it's not only IP changes that end up here (by design).
-
- not the issue it initially appeared to be, assigned to me for review in the future. behavior is no diff than previous...
10/31/2014
- 10:05 PM Revision a94a16cd: s/a/an/ and speling.
- 09:55 PM Revision 162a7b4e: s/then/than/
-
- Ermal - no change with the kernel you built. I have a test setup up now that you can reach. /msg me for info.
-
- There is at least one file from earlier versions that has to be removed in the process of upgrading to 2.2, with setk...
-
- this is for site to site VPNs with > 1 P2. One easy way to replicate, setup a site to site IPsec between 2.1.5 and 2....
-
- It works for me for mobile clients which this issue is about!
The unity plugin sends split-include sections now. -
-
-
- Should work correctly on new snapshots.
-
-
- Ok reproduced only for TAP, tun is ok.
Also i think tap behaved the same before. -
- I cannot replicate this on tun/tap?!!!
I do not even see changes in code to not support it! -
- I'll take this one
-
- PC Engines not aware of the issue, but not surprised by it given Realtek's horrible documentation.
We've confirme... -
- looks to be fine, works in both directions from testing.
-
- I couldn't reproduce it, I changed local or remote subnet and it worked as expected. Can you confirm it is still happ...
-
- When using a DHCPv6 WAN, apinger sets the srcip to be the interface link-local address but it does not set the scope ...
-
- New snapshots are available, using libevent 2.0 and check_reload_status with fixes.
-
- pfsense-tools repo already have the final patch applied, please try it or wait new snapshots today yet.
-
- After applying your patch there are still 3 statements with "socket_close_command(fd, ev);" left:
root@pfsense-bui... - 02:24 AM Revision c656bc75: Fix getext to gettext typo
- 02:23 AM Revision 41aa5cd4: Fix getext to gettext typo
- 02:23 AM Revision 29af6265: Fix getext to gettext typo
- 02:22 AM Revision 24516832: Fix getext to gettext typo
- 02:21 AM Revision b3f0b2e1: Fix getext to gettext typo
- 02:10 AM Revision 687712ee: More gettext typos
- 02:10 AM Revision 95169728: More gettext typos
- 02:09 AM Revision c69f62b8: More gettext typos
- 02:07 AM Revision 91ee10c0: More gettext typos
- 01:30 AM Revision e4982b90: fix typoed gettext
10/30/2014
- 09:37 PM Revision 1ae41bfe: Kill states associated with the old WAN IP when WAN IP has changed. Retain
- hidden config option to wipe all states on IP change, as there seemed to
be circumstances where the 'pfctl -k $oldip'... -
- 06:15 PM Revision 461eac09: only kill all states if the IP changed. ticket #1629
-
- this is fixed. The states of the former WAN IP are now killed post-IP change, which should resolve nearly all cases w...
-
- issue here is resolved
-
- Its expected and resolving this is not in plan for 2.2.
Also that is not what this ticket is about. -
- I am unsure if this should be allowed!
Normally switching to master it should have the latest voucher status synched... -
- Seems to be working for me now.
-
- the most common scenario here is fixed, IPv4 is fine, but IPv6 has regressed from 2.1.x. reply-to with v6 works in pr...
-
- This seems to be resolved with confirmation from https://forum.pfsense.org/index.php?topic=81440.msg457606#msg457606
-
-
-
- I re-opened it after confirming that atypical circumstance. Your pull request is wrong though, it fixes a rare edge c...
-
- Well, I won't argue. If you see no bug then there is no bug.
-
-
- this is valid with topology subnet in newer versions
-
- I know that pfsense team wants to release 2.2 asap but its quality will suffer if fast decisions were taken place.
... -
- scratch that, can happen with topology subnet
-
- The script */usr/local/sbin/ovpn-linkup* has en error where network mask is returned as a gateway when no gateway pro...
-
- I contacted Pascal @ PC Engines to see if that's an issue they're aware of and if they have any further info on it.
... -
10:44 AM Bug #3870: re(4) NICs on APU are unable to hardcode speed/duplex properly
- Boy I sure hope this is somehow fixable in software - we have a fair handful of APUs deployed already and continue to...
-
- Linux much happier on SD card in the APU, couldn't get anything to boot from USB flash.
TLDR version: either the... -
- Either OpenBSD has the same problem, or this is a hardware issue. ...
-
10:21 AM Bug #2406: No IP alias within the subnet of a CARP IP can be deleted
- Chris Buechler wrote:
> This is fixed. You can't remove the last IP alias on the subnet of a CARP IP because it'll b... -
- That previous patch is not correct, consider this one.
10/29/2014
-
- fixed
-
- The specific issue here is OpenVPN client is launched multiple times when connecting to FQDN with "resolv-retry infin...
- 08:39 PM Revision 5274102e: Hide burst for limiters, since it doesn't do anything. more details in
- ticket #3933
-
- Thomas, could you try attached patch, built with libevent 2.0 and let me know the result?
-
- I built a custom image and confirmed it. We are not seeing it on our snapshots because builder was not updated and st...
-
- fixed.
-
- Ticket for what Ermal and I discussed earlier re: IP aliases on CARP. That functionality is effectively gone from 2.2...
-
- with a kernel Ermal built with his changes as committed earlier, v4 reply-to looks to be fine in all scenarios. Will ...
-
- Current status is broken checksums on IPv6, source NAT doesn't apply to translate the IP back on IPv4 (though return ...
-
- I'll try this on Linux to see how that behaves, should help narrow down whether it's hardware or driver.
-
- to me to review in combination with the other limiter tickets.
non-regression and uncommon issue, removing 2.2 ta... -
- hm, not sure what I was trying at the time, apparently I missed assigning the bridge or something. thanks for the fol...
-
- Hello,
Sorry for the late testing.
I tried to reenable traffic shaping via the wizard but get this one:
[[There... -
- dummynet burst on stock FreeBSD 10.1 does indeed work how I'd expect it to work. Ours doesn't have any impact whatsoe...
- 01:02 PM Revision a4372874: Fix a typo on array index, related to ticket #3963
-
- Yeah it really should say "Connecting", how difficult would it be to make that happen? I don't think this is a regres...
-
- After doing somo analysis, my understanding is 'Status' is supposed to be up, since interface exists on operating sys...
-
- After discussion with Jeremy, we're satisfied this is good for 2.2.
-
10:47 AM Feature #3365: Implement package signing
- We'll create a secured key repository, and signing keys will be imported into it for access. Renato will create the ...
- 06:08 AM Revision 002d286c: fix up text
-
- this may or may not still be an issue with 2.2, much has changed, and this is something we've never been able to repl...
-
-
-
-
- On systems with AES-NI enabled, OpenVPN using AES-128-CBC, AES-192-CBC, and AES-256-CBC crashes on start. ...
10/28/2014
- 09:33 PM Revision eea2ad5d: FreeBSD fails to set advskew back to 0 after you set it to any other
- value. That's a separate issue that needs fixing upstream, but in the mean
time, we can work around it by removing al... - 07:06 PM Revision 70eef835: Remove redundancy as pointed out by phil-davis
- 07:06 PM Revision 44c7d73c: Decode recently created cert and key. It fixes #3964. While here, fix logical condition to create a new cert if crt or key is not present
- 06:31 PM Revision 569e2fdf: Add option to kill all states on IP change, currently a hidden option for more testing. ticket #1629
-
- That is correct, we're running the commands correctly to set it back to 0. The source of the issue is FreeBSD 10.1 wo...
- 05:00 PM Revision fd057a56: Merge pull request #1317 from phil-davis/patch-1
- 04:55 PM Revision 0a8dd27b: Remove redundancy as pointed out by phil-davis
- 04:26 PM Revision 7c199791: Merge pull request #1297 from phil-davis/patch-23
-
- needs review along with the other limiter tickets, there is overlap between them.
-
- Applied in changeset commit:44c7d73c4a1aa2cca3a932447ef6b6be2034badd.
-
- Applied in changeset commit:143c22f7719836d5decee0da0ec52e61e79fd6a2.
-
- cert.pem file is missing on first boot of clean 2.2 nano install, which leaves the web interface dead. ...
-
- I committed a change to add a new option that kills all states upon IP change. That's going to be the answer for thos...
- 12:17 PM Revision 143c22f7: Decode recently created cert and key. It fixes #3964. While here, fix logical condition to create a new cert if crt or key is not present
-
- Pull request has been merged
- 11:49 AM Revision 0a8d7fe9: Back to use listr instead of vncellt since it has small fonts and mitigate changes of go outside the sidget. It should fix #3937
- 11:24 AM Revision 30cb409d: Simplify logic
- 11:10 AM Revision bf50b0a4: Remove unecessary variables
- 11:08 AM Revision 9c76c0f1: Whitespace and indent
-
08:48 AM Bug #3965 (Resolved): dhcp6c started before bridge configured at boot, preventing interface tracking
- Setup:
- WAN interface configured for DHCPv6 prefix discovery
- LAN interface configured for IPv6, tracking interfa... -
That change is an improvement and keeps the widget from being pushed off the side of the dash.
Call it a perso...-
- Applied in changeset commit:0a8d7fe996275febad7ee28ec3daf70101928cc6.
10/27/2014
-
- To clarify - eventually it goes to "down" status, after failing for quite a while. The issue is it shows "up" while g...
-
- this also applies to PPP, likely the same root cause
-
- PPPoE-type WAN interfaces show their status as "up" when they aren't actually. To replicate, just set an interface to...
-
- this needs to be set in tcshrc so it applies to everything using fetch and similar utilities now and in the future.
-
- 08:36 PM Revision 4721677d: fix ping_hosts.sh to not ping IPsec if CARP is in backup
- 08:32 PM Revision 7e1aa4b7: fix ping_hosts.sh to not ping IPsec if CARP is in backup
-
02:57 AM pfSense Packages Bug #3962: LADVD interface handling issues with lagg and bridge
- My thoughts are that it is a GUI issue. I believe that only the physical interfaces should be shown.
10/26/2014
-
-
- this issue is fixed, that one's #2786
-
-
- regressed in 2.2
-
- I'm guessing this is a problem with ladvd itself and nothing we're doing with it, so should likely be reported upstre...
-
- On my pfsense 2.1.5 router I've got LADVD installed.
Two physical interfaces are bridged.
As long as I only selec... - 03:11 AM Revision e8b5f724: domain and search should not both be defined in resolv.conf per FreeBSD man page and handbook (only the latter is actually used). Change this to just not use domain, and set the search to the system's domain where not using the function that generates the search list for dynamic WANs.
10/25/2014
-
- Typo: #3744 should have been #3774
-
- This still seems to be a problem for me. I'm running the 2.2-BETA (amd64) Fri Oct 24 12:17:25 CDT 2014 build. I have ...
-
- Where you have multiple P2s on 2.2, only the first does anything. It negotiates successfully, but the strongswan/2.2 ...
-
- When editing an existing P2 in 2.2, the original entry isn't removed from the SPD. For instance, change just the IP s...
-
- pretty sure this was fixed in a 2.1.x release since then. It's definitely good in 2.2.
-
-
- it's pf that makes this hang somehow. disable pf, and traceroute6 finishes no problem. No blocked traffic being logged.
-
-
-
-
-
-
- I don't see any actual bugs here. All DHCPv6 leases are shown in every instance I've seen. Whether they're "active" s...
-
- this isn't true on 2.2, haven't tried earlier versions. The "route add failed" scenarios could well be a problem, but...
-
- sshdcond.inc function restart_sshd() does edits to /etc/sshd and /etc/sshd ends up with invalid PHP syntax.
Forum: h... -
- not an apparent issue on 2.2 (unless this somehow overlapped with separate issues open there)
-
- not sure of status here, assigning to Renato for follow-up.
10/24/2014
-
- I never could replicate that. The described behavior is the browser not responding, and nothing we do should make the...
-
- no change. Ermal, msg me and we can both take a look at my test setup.
-
- I need to go through and verify a variety of upgrade scenarios.
Only issue I've seen recently is where you have t... -
-
- this will break enough existing systems it's worthy of RC blocking
-
- ALTQ support in tun and tap is missing in 2.2. A number of existing configurations on 2.1x will fail to load the rule...
-
- the subject doesn't quite cover all the breakage this causes, there are various times that the default gateway is rem...
-
- fixed
-
-
- this is good in 2.2, if we do another 2.1.x release we probably want to back port that.
-
-
05:05 PM Bug #3678: Kernel panic: "Bogus interrupt trigger mode" on Intel J1900
- Chris Buechler wrote:
> this was since fixed in 9 and 10 stable FreeBSD, current 2.2 should work here
I can confi... - 02:38 PM Revision 577b776e: Warn if attempting to import IPv6 range
- There is currently no code to convert an IPv6 range to a set of corresponding IPv6 subnets, so warn the user if they ...
- 02:32 PM Revision bb67ac32: Support converting an IP range to an array of addresses
- so that it can be used for expanding ranges in host alias input.
- 02:25 PM Revision feb1953e: Expand range or subnet for host alias
- When entering a host alias, if the user put an IP range (like 192.168.0.10-192.168.0.20) or a subnet (like 192.168.1....
-
06:58 AM Bug #3956 (Resolved): Check for invalid CA on generating new certificate
- ... or check for valid values on generating dynamic function internalca_change() in system_certmanager.php
I had a...
10/23/2014
-
- PPTP is dead, and shouldn't be used in this context anyway
-
- The IPsec dashboard widget needs updating to understand strongswan's status.
-
- that's a scenario that no client accounts for. Excessive updating can get you banned from some of the providers, whic...
-
04:03 PM Bug #3901: DynDNS is not forcefully updated after powerup
- From my point of view the current behaviour is not perfect.
As I described above it might be the case that the data ... - 02:25 PM Revision e112f9ee: Merge pull request #1312 from phil-davis/patch-8
- 02:24 PM Revision 095707fe: Merge pull request #1313 from phil-davis/patch-9
-
-
10:06 AM Bug #3954: Port forwarding rule changes do NOT take affect
- Nevermind, I found that vpn->pptp->redirect to x.x.x.x was configured. please close bug.
-
- my pfsense is:
2.1.5-RELEASE (i386)
built on Mon Aug 25 07:44:26 EDT 2014
FreeBSD 8.3-RELEASE-p16
I have a po... -
- After upgrading my Mac to Yosemite 10.10 and Safari to 8.0, I don't have this problem anymore. I do see the page free...
-
- Pushed
-
04:12 AM Bug #2882: 6RD not working in latest snapshots
- I'm using the latest snapshot (amd64 built on Tue Oct 21 22:27:38 CDT 2014) and it seems like 6rd still isn't working...
10/22/2014
-
03:27 PM Bug #3369: Captive vouchers expire too quickly
- Chris Buechler wrote:
> mine for further testing when time permits
good luck :) -
- mine for further testing when time permits
-
- Thanks maz, got it. One follow-up question sent via email.
-
- I have sent you the link through your email Chris cmb(at)pfsense
please do not share the image publicly as its key... -
- this is still the case, though only IE seems to care, it's still an issue in IE 11.
Also available in: Atom