Activity
From 11/21/2014 to 12/20/2014
12/20/2014
- 08:13 PM Revision 30501526: Prevent resolvconf(8) from stomping all over our newly generated
- resolv.conf and subsequent updates.
- 06:12 PM Revision fe416714: Put line break only if IPv4 address exists
- This makes a line for the IPv4 address if it is there. If the IPv4 address goes away, the whole line will disappear, ...
- 06:05 PM Revision 7a0c88f8: Interfaces widget remove blank line if no IPv4 address
- If the interface had an IPv6 address but no IPv4 address, there was a blank line where the IPv4 address would have be...
-
05:53 PM Bug #4129: IPsec connections with multiple P2s use only first SA
- In my test above i created complete separate conn sections in the config file, it seems possible to not repeat all in...
-
- I've been checking this a bit more, and did see that with the current way it does work properly for a tunnel that use...
- 05:16 PM Revision 6e795218: Set Interfaces widget IPv6 address
- Now that get_interfacestatus() is returning us the IPv6 address, and interfaces.widget.php has a div to put it in, ac...
- 05:12 PM Revision d7884992: Send IPv4 and IPv6 address in get_interfacestatus
- And make them strong (bold), which is how they are displayed originally by interfaces.widget.php
This allows the AJAX... - 05:08 PM Revision 2795f40b: Interfaces widget create all div
- All div for the various things need to be created here, so that later AJAX can switch the necessary things on/off and...
-
04:57 PM Bug #4134 (Resolved): Email notifications configuration migration to 2.2 broken (STARTTLS)
- 2.1.x config snippet:...
-
08:34 AM Feature #4133 (Resolved): Add GUI setting for VLANs PCP
- Add support for optionally setting VLANs priority (PCP) through the GUI, saved as part of the xml configuration.
S... - 01:57 AM Revision 5b4ed0e1: Use correct port for viewing portal page contents. Ticket #4125
- 01:56 AM Revision 5a098344: Use correct port for viewing portal page contents. Ticket #4125
12/19/2014
-
- Make sure to include a form (POST to "") with a submit button (name="accept") and a hidden field with name="redirurl"...
-
09:18 PM Revision 8cd0dba6: Fix help for UPnP/NAT-PMP
-
-
08:56 PM Bug #4125 (Resolved): Captive Portal - Portal page contents - View current page has a broken link
- Thanks for the feedback. I confirmed on another system as well.
-
- Works for me ;)
-
- should be fixed, leaving for further testing.
-
08:25 PM Revision 41c4ef39: Correct the leftsubnet specification for transport mode.
-
-
-
-
-
- Captive portal RADIUS accounting sends only 0 for Acct-Input and Output Packets, Octets, and Gigawords.
- 06:43 PM Revision 83aaa431: Remove option that has now been merged into infra-host-ttl.
-
-
-
-
- To add a little info/reference here from report: #4112, with StrongSwan i was able to make it work in my situation by...
-
- probably the best next step, after discussion with Jim T earlier, is to try ipsec-tools on 2.2 and see if the issue p...
-
- Where you have multiple P2s on a P1, only the first is actually used. The SPD and SAD are correct in setkey's output,...
-
- fixed
-
-
05:05 AM Bug #4090: unbound advanced settings cause broken unbound.conf file
- Ah ok, please try to update to a more recent snapshot, it should be fixed now. Seems to be same issue of #4104
-
- works
-
- source of issue is #4129
-
- though if you enable unbound, then dnsmasq is unset on the secondary. Doesn't happen just by disabling dnsmasq, that ...
-
- confirmed as described
-
- fixed
-
- worked around this issue for the time being.
-
- fixed
-
- only thing I'm aware of that was broken by this was unbound, and that was worked around within unbound, so yeah pushi...
-
- there is no bug here, that's why.
-
02:00 PM pfSense Packages Bug #4087: Rule reload doesn't update FQDN entries in pf tables
- If you say so. Usually finding a workaround to a bug while the bug is being fixed is part of dealing with the bug.
-
- this isn't a place for such discussions, please post to the forum or list.
-
- Confirmed it here. Adding the IPsec widget it starts logging it in the main system log. It may only happen when there...
-
- Yes, removing that widget works. (Was kinda planning on removing that for now anyway, seems in quite a messy state wi...
-
- If you turn off the IPsec widget, does the error stop?
Do you have mobile IPsec enabled?
It's the only thing I ca... -
- ...
-
- And which dashboard widgets are enabled?
-
- Phillip Davis wrote:
> Sounds like a problem in your /cf/conf/config.xml
> That should start with:
> <?xml version... -
04:19 AM Bug #4130: Status: Dashboard - index.php: XML error: no leases object found! (IPsec Widget)
- I do not see that on my 2.2 boxes.
Sounds like a problem in your /cf/conf/config.xml
That should start with:
<?x... -
- Whenever I go to the index.php page, it produces the a system log entry like this:...
-
- Diff works. ;)
-
05:31 AM pfSense Packages Bug #4118: NUT fails to start in pfSense 2.2
- Here's the diff if anyone wants it:...
-
-
-
- 12:22 AM Revision 19ddaa31: include $myid in these PSK lines. Ticket #4126
- 12:19 AM Revision 42a10991: include $myid in these PSK lines. Ticket #4126
12/18/2014
-
11:29 PM Feature #4128 (New): Email notification webgui configuration
- Please consider implementing in the webgui a tab to configure what type of email we want to be send by services.
A... -
- If you have values entered for CP's per-user bandwidth restriction in 2.2, but don't have the box checked to enable i...
-
- what I committed makes it work the same as it does on 2.1.5. To Ermal for review, to verify that's correct.
-
- PSKs from the user manager and vpn_ipsec_keys.php are written to ipsec.secrets without a leading $myid, which makes t...
- 06:13 PM Revision bd1a6267: Simplify logic using a proper function as spotted by Ermal
- 06:13 PM Revision 019c7b2d: Simplify logic using a proper function as spotted by Ermal
-
- With a short test this seems to be fixed now, thanks.
-
- Applied in changeset commit:02f65ece135c962b34548f2ec8ed9ed38ba22211.
-
- Applied in changeset commit:da4f91a9207cc5b958adbca75415266700b4b8c6.
-
- Fixed. (Same issue like the more generic Bug #4090 I guess.)
-
- It links to http://fqdn:<zoneid>, e.g. http://pfsense.example.com:2
- 03:52 PM Revision 0fcab48b: Replace ; by newlines when upgrading custom_options from unbound packages, it's related to ticket #4090
- 03:51 PM Revision c23f4d8f: Replace ; by newlines when upgrading custom_options from unbound packages, it's related to ticket #4090
-
02:32 PM Bug #4090: unbound advanced settings cause broken unbound.conf file
- I guess I was unclear. It was a vanilla 2.1.5 system I upgraded to 2.2-RC for testing.
-
- Vick Khera wrote:
> No, it was a vanilla 2.1.5 system in a vm. I use it for testing things, then revert the image to... -
- No, it was a vanilla 2.1.5 system in a vm. I use it for testing things, then revert the image to the base system with...
-
- Did you upgrade this system from 2.1.x with unbound package installed? The upgrade code had an issue, it was using ; ...
-
- Here it is. I also notice there is no config download option for unbound, just the dns forwarder. In any case, I cut ...
-
- I couldn't reproduce it, unbound.conf ended with lines exactly the same I added to textarea. Could you please share t...
-
-
- 11:54 AM Revision 1a2ea2cc: Display better message when booting and awaiting package reinstall
- 11:21 AM Revision 906ae455: Merge pull request #1391 from ExolonDX/master
- 10:03 AM Revision 02f65ece: Add openvpn interfaces to group when they are created, it should fix #4110
- 10:03 AM Revision afe81d69: Check if interface exist before try to add it to group
- 10:03 AM Revision da4f91a9: Add openvpn interfaces to group when they are created, it should fix #4110
- 10:02 AM Revision 67de15fc: Check if interface exist before try to add it to group
-
09:14 AM Feature #3633: OpenVPN client's "Client Certificate" should be optional
- RE: no cert vs no CA.
The cryptostorm.is service does supply a CA certificate which I imported to the pfSense cert ... -
- I tested the patch.
It does indeed work for the username only AND password only use case.
I pasted my key into th... - 07:17 AM Revision 5454fd1b: Allow dot at end of FQDN for a host
- Redmine #4124 has discussion of this.
-
- I made pull request https://github.com/pfsense/pfsense/pull/1394
That solution enables the validation of things like... -
- Yes, that is annoying for people who want/like/need to put the correct whole FQDN, including the root domain ".".
e.... - 04:24 AM Revision 2ccdd739: Display better message when booting and awaiting package reinstall
- 04:22 AM Revision 8aec06e0: Display better message when booting and awaiting package reinstall
-
-
- Works - I locked myself out from 1 IP address (after about 15 dodgy password entries). After the following hour bound...
-
- The other really useful feature would be to be able to disable entries in the alias list without having to remove the...
-
12:16 AM Feature #3506: Firewall:Aliases - Sort/Move Function
- +1
12/17/2014
-
- confirmed as described
-
- not true. I re-tested typical multi-WAN scenarios, then tested the less typical case described here where an OpenVPN ...
-
04:32 AM Bug #4121 (Rejected): Failover don´t switch back to Tier 1
- I Have two Gateway´s in a Group (Failover)
Tier1 = HideVPN Gateway OpenVPN with Monitoring IP
Tier2 = Normal WAN ... - 06:48 PM Revision 55092b0e: Bump latest_config version that I forgot on previous commit. Spotted by Jim Pingle
- 06:47 PM Revision a03551c2: Bump latest_config version that I forgot on previous commit. Spotted by Jim Pingle
-
- If not ideal since it only completely fixes the circumstance where you're binding to *:53, this is the best we can do...
- 06:25 PM Revision 264d17a5: syslogd can't just be HUPed to pick up its new config, as many of those
- are command line arguments. Go back to 2.1x and prior behavior of TERM and
restart. Fixes source IP use with syslog a... - 06:21 PM Revision f1905a3e: syslogd can't just be HUPed to pick up its new config, as many of those
- are command line arguments. Go back to 2.1x and prior behavior of TERM and
restart. Fixes source IP use with syslog a... - 06:17 PM Revision b0885c5a: Add a cron item to expire items from webConfiguratorlockout, also add config upgrade code. This fixes #4122
- 06:17 PM Revision 56c8376a: Add a cron item to expire items from webConfiguratorlockout, also add config upgrade code. This fixes #4122
- 05:27 PM Revision aafa7657: Check if interface is disabled when configuring DHCP server. It fixes #4119
- 05:27 PM Revision b2379012: Disable dhcp server when interface is disabled. Ticket #4119
- 05:27 PM Revision a030a437: Do not check disabled interfaces, ticket #4119
- 05:26 PM Revision 57006646: Check if interface is disabled when configuring DHCP server. It fixes #4119
- 05:25 PM Revision f4c40620: Disable dhcp server when interface is disabled. Ticket #4119
- 05:25 PM Revision e94692c0: Do not check disabled interfaces, ticket #4119
-
- Is there a way to sun a command that does an update immediately?
filterdns is run as
/usr/local/sbin/filterdns -p... -
- I would really like this feature too. When having aliases with 15 or 20 hosts etc. it is easier to maintain if they c...
-
- On page
https://pfsense/firewall_aliases_edit.php?id=xx
for alias type network(s) entering an FQDN with trailing pe... -
-
- Improve expiretable to support multiple tables and remove multiple calls from crontab
-
- Applied in changeset commit:b0885c5a7aa20801d78df77f5124eca766f34723.
-
- Applied in changeset commit:56c8376a9eabdc59e8f71535c0f3cd871cd776f1.
-
- The sshlockout_pf process adds IP addresses that fail too many GUI login attempts to the webConfiguratorlockout table...
-
-
- Applied in changeset commit:aafa7657399edf835a28c106c37ac71cc9b24335.
-
- Applied in changeset commit:570066460e88a63d186e8892930927e6e9825fc4.
-
- Original issue is also present
-
- The real issue here is DHCP server still starts after interface is disabled, even if you reboot the system service is...
-
- Guys, can you tell me how to stop logging this junk at least? This renders the system log absolutely useless with fir...
-
- I would push this on 2.2.1 since i am not yet able to evaluate if this is fixed what all is impacted.
-
- A couple of things to be done to improve pfSense passwd:
- Change hash from MD5 to SHA512 or blowfish
- Start to ...
12/16/2014
-
-
-
-
-
-
-
-
-
09:03 PM pfSense Packages Bug #4118: NUT fails to start in pfSense 2.2
- Thanks Denny: Confirmed to fix my copy.
[code]
#!/bin/sh
# This file was automatically generated
# by the pfSe... -
-
-
-
- 07:49 PM Revision c2e6e8e2: Remove "link", "vlink" and "alink" from BODY tag
- This is a positional change to remove "link", "vlink" and "alink" from
the BODY tag, the following themes do not have... -
-
- 07:13 PM Revision 24a87e44: Use provided function to change user's password
- 07:10 PM Revision c445a9f5: Use provided function to change user's password
-
-
-
- See also: ATM Machine, ISP Provider, DMZ Zone, LCD Display, GMT Time...
-
- See also: ATM Machine, ISP Provider, DMZ Zone, LCD Display, GMT Time...
-
- the subject here isn't what the problem really is, but there is some kind of interoperability issue with multiple P2s...
-
-
-
-
-
-
-
- The "temporary" button seems to behave OK in my test setup now but maintenance mode still does not appear to work pro...
-
- Applied in changeset commit:936e554bab69b0f6b1eb53cae807e3f2fafa3e73.
-
- Applied in changeset commit:dd0cb9fcf4428d8fdc0e6cd380ea2a5dff4e9114.
- 01:34 PM Revision 9d26addd: Make logic more visible as suggested by Ermal
- 01:33 PM Revision 136217fd: Make logic more visible as suggested by Ermal
- 01:28 PM Revision d4ea38c5: Tidy up "widgets" XHTML
- Add CDATA sections to scripts
Add ALT to image tags and close image tags
DIV tag cannot be inside a STRONG tag, so sw... - 01:28 PM Revision 04e722a6: Merge pull request #1388 from ExolonDX/master
- 12:22 PM Revision 936e554b: Cleanup aliases when temporarily disable CARP, fixes #4116
- 12:22 PM Revision 43157c8f: Teach interface_vip_bring_down() to deal with IP Alias over CARP
- 12:19 PM Revision dd0cb9fc: Cleanup aliases when temporarily disable CARP, fixes #4116
- 12:18 PM Revision 28268a4a: Teach interface_vip_bring_down() to deal with IP Alias over CARP
-
- DHCP Relay will print the usual error about DHCP being enabled even when DHCP is not active, if there is a disabled o...
-
- The question in the end is an enhancement, this ticket can be safely closed.
-
- Received this text in email today from dhcp-bugs@isc.org :
--------
Yes 4.3 added this functionality. There was a b...
12/15/2014
-
- So far, all that has been committed is a change to the ntpq command that gets the ntpd status, forcing it to use IPv4...
-
01:12 PM Bug #4074: Status NTP does not display any result if IPv6 Allow is off
- I'm still seeing NTP IPv6 requests blocked on lo0 using the Sat Dec 13 13:26:22 amd64 build. Should this fix be prese...
-
-
-
- And in the end the committed pull request was: https://github.com/pfsense/pfsense/pull/1385
I will do a change to ad... -
- Merged, thanks!
-
-
-
- I've determined that the USB problem was due to leftover files from the NUT install under pfSense 2.1.5. After having...
-
- The start up script for NUT, /usr/local/etc/rc.d/nut.sh, needs to change the path used to invoke upsdrvctl.
In Fre... - 07:18 PM Revision 73041230: Add DNS Resolver to the list of services to be sync'd on HA, make sure it and DNS Forwarder are not enabled simultaneously. It fixes #4067
- 07:18 PM Revision d691465c: Fix password field name
- 07:18 PM Revision 03226d75: Use newline to separate unbound custom options during config upgrade, it should fix #4104
- 07:18 PM Revision 8f3b2775: Add a shortcut for unbound and enable it
- 07:18 PM Revision f6179f4c: Fix password field name to apply correct style
- 07:16 PM Revision c25caf5b: Add DNS Resolver to the list of services to be sync'd on HA, make sure it and DNS Forwarder are not enabled simultaneously. It fixes #4067
- 06:43 PM Revision fa2122b0: Fix password field name
- 06:42 PM Revision 387ab31a: Use newline to separate unbound custom options during config upgrade, it should fix #4104
- 06:18 PM Revision 6bb9db05: Add a shortcut for unbound and enable it
- 04:47 PM Revision 99441482: Fix password field name to apply correct style
-
03:41 PM Bug #4117 (Resolved): Using run(4) USB WLAN in hostap mode crashes in FreeBSD 10.x
- I was using a "Hama Wireless LAN USB 2.0 Stick 300 Mbps" for some time as an access point with the 2.2 alpha and beta...
-
- Applied in changeset commit:73041230a79f7b0f2cbae60cf51596a1232d5029.
-
- Applied in changeset commit:c25caf5b01269961d0129f8f83dc8dc1a078c3a8.
-
- I'll take it
-
- Applied in changeset commit:03226d75ba52c78d33c5afaaa81379baf0d3856f.
-
- Applied in changeset commit:387ab31a976fbacfc0d8e2fde7efb7cb1c4b6b6b.
-
- It's these checkboxes breaking the upgrade:
!http://i.imgur.com/od1nv1s.png!
-
- Can you share your unbound config from 2.1.x?
- 12:46 PM Revision 5cfd9481: Add missing BR tags and fix display with pfsense_ng_fs theme. It fixes #4115
- 12:44 PM Revision e51d6e1b: Add missing BR tags and fix display with pfsense_ng_fs theme. It fixes #4115
-
-
- Fixed after gitsync, thanks. ;)
-
- Applied in changeset commit:5cfd948144741ba0d6981f89b2e40257cb9ef2b1.
-
- Applied in changeset commit:e51d6e1b7f195cbc8300c473a14610b84cc191b0.
-
- *DHCP server:*
!http://i.imgur.com/yiRg3HA.png!
*DHCPv6 server:*
!http://i.imgur.com/qfFo5Cz.png!
(FWIW, this... -
- @G Brinton - can you try the code in https://github.com/pfsense/pfsense/pull/1389
I discovered that OpenVPN does n... -
- Actually, at the moment, the code does allow a password to be entered without username - it gets through the front-en...
-
- Can we relax the input validation to require password only?
I've tested it with a service provider that only requir... -
- There still seems to be an issue here. On a current snapshot when I try to leave maintenance mode the skew is stuck a...
-
- When using "Temporarily Disable CARP", IP alias VIPs using a CARP VIP "interface" are still present and the interface...
12/14/2014
- 10:03 PM Revision 6678fdd1: Tidy up "widgets" XHTML
- Add CDATA sections to scripts
Add ALT to image tags and close image tags
DIV tag cannot be inside a STRONG tag, so sw... -
08:09 PM pfSense Packages Bug #4114 (Resolved): Squid 3.4.9 transparent proxy broken.
- The latest Squid packages all had issues, but none of them as serious as transparent proxy not working.
Squid has to... -
05:58 PM Bug #4113 (Resolved): multiple instances of /var/db/rrd/updaterrd.sh
- On my pfsenses I see multiple instances of updaterrd.sh
Because all instances uses only one pid file with only one... -
- ipsec, strongswan (sometimes) needs a 'conn' section with a unique reqid for each phase2
I've been trying to repla... -
- On Interfaces/VLAN is written:...
-
12:52 AM Feature #4108: USB printers support required
- Including ulpt driver module into freebsd/pfsense compilation does not make a print server from it, not even close to...
12/13/2014
-
- It's a firewall, not a print server. Don't do that. Anyone who *really* wants to can copy over a ulpt.ko from stock F...
-
- I ask you to add ulpt driver module or compile it into the kernel. People want to use it! :)
https://www.freebsd.org... - 07:25 PM Revision 7dd5f0f7: Where binding Unbound to *:53, set "interface-automatic: yes" so replies are sourced from the correct IP. Ideally this should always work this way, but setting this causes Unbound to bind to *:53, which shouldn't happen where specific interfaces are chosen. Ticket #4111
- 07:24 PM Revision f358fe3f: Where binding Unbound to *:53, set "interface-automatic: yes" so replies are sourced from the correct IP. Ideally this should always work this way, but setting this causes Unbound to bind to *:53, which shouldn't happen where specific interfaces are chosen. Ticket #4111
-
- Fix committed and verified for the circumstance where binding all interfaces.
-
- When Unbound is bound to all interfaces, it replies back with the source IP it would use for initiating a new connect...
-
- interface-group is not set properly on the openvpn interfaces after reboot
The openvpn interfaces are part of the My... -
10:57 AM pfSense Packages Bug #4109: squid package doesn't include hostname when logging remotely
- sorry - snort not squid ;)
The remote system can detect the sender, of cause. But if you ommit the hostname, it's no... -
- Squid/snort inconsistencies in the report aside, syslog does not include that. It's up to the remote system to identi...
-
- Squid doesn't include the hostname when logging remotely (e.g.):
<33>Dec 13 13:40:18 snort[2160]: [120:3:1] (http_... -
09:03 AM Bug #3848: enabling schedule on 2.1.5 causes page fault
- 21 days and no page fault so far. I am updating to the latest build today and will continue to monitor.
-
- In XN there couldn't be tagging problems, because it didn't know anything about tagging.
They will tell me that the ... -
- If you restore full backups via console, using upgrade firmware menu - no problem it is working, the only one thing i...
12/12/2014
-
- Well, sadly this does not happen in the _background_... No idea why it does not background, as said the upgrade could...
-
- The bogon update sleep doesn't lock anything or prevent anything else from happening, it just sits in the background ...
-
- This kills the whole upgrade process, since this gets stuck on sleep "forever" (one day at least, or even a week or m...
-
- There are problems in VLAN tagging in that driver. That's outside of our control. Please replicate the problem on sto...
-
- That's in the code:...
-
- That's to lapidary.
Tagging is something which is handled by software and could be in hardware.
Without anything wr... -
- they don't show up because they report themselves as not being VLAN-capable. Those who have forced their way around t...
-
- Interface xn0 is not listed on "Interfaces: VLAN: Edit" for using as parent interface.
On XEN interface xn0 didn't... -
- it's not a config or command issue, if it were that simple I would have fixed it. It's a kernel issue with dummynet i...
-
- duplicate of #4089 which is fixed already.
-
- ipsec, using a carpip for the interface of a phase1 ipsec connection with fails to generate the ipsec.conf content.
... - 05:41 PM Revision b78111c4: Validation of y/n answers in setlanip
- At the moment the user can answer "yes" to most of the questions, but then later code only checks if the answer is "y...
- 05:40 PM Revision 00aa3b79: Merge pull request #1385 from phil-davis/patch-11
- 05:16 PM Revision e6abcccc: Validation of y/n answers in setlanip
- At the moment the user can answer "yes" to most of the questions, but then later code only checks if the answer is "y...
- 04:56 PM Revision d7b9b993: Update service providers xml to sync with upstream
- 04:55 PM Revision 38e1541b: Update service providers xml to sync with upstream
- 04:49 PM Revision a7d7cd7f: rc.initial.setlanip fix validation of CIDR within range
- Currently this allows the user to input any number for the CIDR. I happened to try 44 for an IPv4 CIDR when playing.
... - 04:49 PM Revision 3bc55eee: Merge pull request #1383 from phil-davis/patch-10
- 03:19 PM Revision 87657b95: rc.initial.setlanip fix validation of CIDR within range
- Currently this allows the user to input any number for the CIDR. I happened to try 44 for an IPv4 CIDR when playing.
... - 02:30 PM Revision 245f78d2: Regenerate Turkish mo
- 02:30 PM Revision 6220186b: Update po from last pot
- 02:30 PM Revision 4770b341: Update Turkish translation file from last version available on old translation server
- 02:29 PM Revision c45c6ccd: Regenerate Turkish mo
- 02:28 PM Revision 019645ff: Update po from last pot
- 02:27 PM Revision 66f8965d: Update Turkish translation file from last version available on old translation server
- 02:14 PM Revision 6e84f8c0: Regenerate pfSense.pot
- 02:13 PM Revision fb0495f3: Regenerate pfSense.pot
- 11:17 AM Revision 9b8f26cf: Fix password confirmation name to make style working as expected. Fixes #3992
- 11:17 AM Revision 2e65babb: Fix password confirmation name to make style working as expected. Fixes #3992
- 10:40 AM Revision 946e55bd: Base URL must be specified when alturlenable on
- I had a 2.1.5 system that I was wondering why the dashboard always said it could not check for updates. I discovered ...
- 10:40 AM Revision a516c81e: Merge pull request #1381 from phil-davis/patch-8
-
- On literally every box that had unbound installed as a package with 2.1.x, there's some statistics-related configurat...
-
- Done. We will have a new translation server available soon to make users able to translate again.
-
- in my case one of my alix boxes has a single wan conenction (pppoe) and i have set it to periodically reset at 3am so...
-
- Better solution in https://github.com/pfsense/pfsense/pull/1382
-
- Applied in changeset commit:9b8f26cfdf3a9829585c1e97b435407561e2766d.
-
- Applied in changeset commit:2e65babb16b604752afc6b5f948851cb881ce9af.
- 04:53 AM Revision a93bc299: Base URL must be specified when alturlenable on
- I had a 2.1.5 system that I was wondering why the dashboard always said it could not check for updates. I discovered ...
-
- Merged
-
-
- There is no IPv4 nor IPv6 assigned to the interface, there was a dynamic IPv6 GW created on 2.1.x, which was made def...
12/11/2014
- 09:50 PM Revision fcc96054: Split ICMP and ICMPv6 types on Firewall Rules
- - Remove redundant declaration of $icmptypes and move it to a common
place (filter.inc)
- Add missing ICMP types for ... - 09:49 PM Revision c03ed2fb: Fix indent and spaces
- 09:47 PM Revision d3bf4a41: Split ICMP and ICMPv6 types on Firewall Rules
- - Remove redundant declaration of $icmptypes and move it to a common
place (filter.inc)
- Add missing ICMP types for ... - 08:55 PM Revision 0ab1f107: Fix indent and spaces
- 06:46 PM Revision 470b14d8: Fix #4099:
- - When interface is 'lo0', strpos returns 0, that is erroneously
considered false (boolean) on the test. Be more stri... - 06:43 PM Revision 11bdc638: Fix #4099:
- - When interface is 'lo0', strpos returns 0, that is erroneously
considered false (boolean) on the test. Be more stri... - 05:05 PM Revision 79fabc8f: Fix #3790:
- - Do not let 2 interfaces to setup the same track6 prefix id
- Show correct prefix id range for each interface - 05:03 PM Revision 986fd3d9: Fix #3790:
- - Do not let 2 interfaces to setup the same track6 prefix id
- Show correct prefix id range for each interface -
- Applied in changeset commit:fcc96054a0935a2eb4aa380ccf0fc8c44987715f.
-
- Applied in changeset commit:d3bf4a4163c50146a18cbb6cebe87d8d9a453afe.
-
- That's an issue with Xen changing your devices without telling you, and coupled with FreeBSD's Xen disk driver not al...
-
03:37 PM Bug #4101 (Needs Patch): Mounting information lost upgrading from XenServer virtualized 2.1.5
- During the update, the devices get renamed and the reboot fails. You have to manually fix this during boot and edit t...
-
- Applied in changeset commit:470b14d8d676c342956c783bba4b352c91627626.
-
- Applied in changeset commit:11bdc638ef87c94d239113cbac9e5f59bc8b74da.
-
- IP aliases on localhost don't config sync to the secondary. This was broken, then fixed earlier in the 2.2 release cy...
-
- Applied in changeset commit:79fabc8fac5f8c8444f8374748572040e96bee24.
-
- Applied in changeset commit:986fd3d9a70bd92e2138372147e338e24f774730.
- 09:40 AM Revision bf310189: Change text and color delimiter to carat sign
- To match change made in functions.inc.php
- 09:40 AM Revision f2d27f93: Gateway Status Widget keep IP address bold
- Forum: https://forum.pfsense.org/index.php?topic=85187.msg467438#msg467438
The bold is specified literally in gatewa... - 09:39 AM Revision 8d5be861: Merge pull request #1378 from phil-davis/patch-10
- 09:38 AM Revision 07ab838e: Improve check if no OpenVPN defined
- Alternate version of https://github.com/pfsense/pfsense/pull/1376
This version retains the is_array() checks and then... - 09:37 AM Revision 21e71044: Merge pull request #1379 from phil-davis/patch-11
-
05:50 AM Feature #3933: Limiter burst doesn't have any effect
- Hi Chris,
This issue is a blocker for me, I would really want the bursting functionality to work. I would like to ... -
- Proposed solution https://github.com/pfsense/pfsense/pull/1372
-
- At the moment the user can answer "yes" to most of the (y/n) questions, but then later code only checks if the answer...
- 02:39 AM Revision 04c0724e: Improve check if no OpenVPN defined
- Alternate version of https://github.com/pfsense/pfsense/pull/1376
This version retains the is_array() checks and then... - 01:30 AM Revision 2cc10e2c: Change text and color delimiter to carat sign
- To match change made in functions.inc.php
- 01:28 AM Revision 6385c335: Gateway Status Widget keep IP address bold
- Forum: https://forum.pfsense.org/index.php?topic=85187.msg467438#msg467438
The bold is specified literally in gatewa... -
- Because the interface has no IP address/gateway yet, there is no way for pfSense to set a specific route to the monit...
12/10/2014
-
- actually im having the same issue
https://forum.pfsense.org/index.php?topic=78356.msg467520#msg467520 -
11:15 PM Bug #4095: Unbound config not regenrated on WAN-style interface acquiring IP address
- assigned to cmb for eval
-
- Example: system with dual-WAN - WAN and OPT1 both DHCP.
Boot with WAN getting DHCP but OPT1 connected but not gettin... -
- I'm almost to a point of confirming what Phil describes. Broke my system earlier and killed my VPN to where the test ...
-
- assigned to CMB for now. (Evaluation).
I can think of a bunch of scenarios that are "racy" (DHCP can take a while... -
- Note: Another hardware scenario where this can happen is if you have your upstream WAN devices connected to pfSense o...
-
- If I physically unplug OPT1, then everything fails over correctly to WAN. The issue seems to be only if a DHCP WAN-ty...
-
- Example system: 2 WANs, both DHCP, that uplink to 2 different ISPs (WAN and OPT1) (called WAN_DHCP interface WANGENER...
-
- After updating to 2.2 RC, removing the NUT package, cleaning up 2.1.5 NUT leftovers by hand, and reinstalling the NUT...
-
- assigned to Chris for evaluation.
-
- Ermal reported it, I'm assigning it to him. :-)
-
Assigned to Renato for evaluation and possible fix, because: packages.-
- re-assigned
-
- Could we try what Jeremy asked for?
-
- This way, a router running NanoBSD won't sit at a db> prompt indefinitely if it crashes.
-
- This way, a router running NanoBSD won't sit at a db> prompt indefinitely if it crashes.
- 03:40 PM Revision e519371d: Fixup text rule should be route
- This code was obviously taken from firewall rules and reused here without changing the word "rule" to "route".
- 03:39 PM Revision b3986dd1: Merge pull request #1377 from phil-davis/patch-9
- 03:32 PM Revision f4d094b4: Fixup text rule should be route
- This code was obviously taken from firewall rules and reused here without changing the word "rule" to "route".
-
- For new users in the User Manager, it would be handy to have the ability to force them to change their password on th...
-
- Definitely not true. Something in your case legitimately is breaking DNSSEC. Post some details to the forum or list a...
-
- On the DNS Resolver main configuration page, if you enable DNSSEC, the resolver is no longer able to resolve www.goog...
- 02:14 PM Revision 59c5e4bd: Remove spurious '>', fixes #4091
- 02:14 PM Revision d7563eeb: Remove spurious '>', fixes #4091
-
02:01 PM pfSense Packages Bug #4097 (Not a Bug): Unable to restart Postfix
- Postfix seems disabled but can't enabled.
When trying to restart Postfix from the GUI nothing seems to happen. The c... -
- fixed
-
- Applied in changeset commit:c02acef2866f08662d62aa6f0ba73168e85dafc8.
-
- Applied in changeset commit:76f12171884adcbbf6ea6d66b87851b0a5fcc4b3.
-
- Configure IPsec bound to a CARP IP on P1, and see it ends up being completely omitted from ipsec.conf.
-
- you need default gateway switching enabled for that to work
-
12:35 PM Bug #4096 (Rejected): Update Checker doesnt work Under Failover setup
- I have a failover setup
WAN, WAN2
WAN being primary.
if WAN is down. pfSense can not check if iam on the latest v... -
-
- Merged, thanks!
-
- A bunch of the hover text for buttons on this page, and delete confirmation mention "rule" rather than "route".
Obvi... - 11:58 AM Revision b8dd129d: Make sure this message is only displayed on console
- 11:58 AM Revision 52e97bcc: Make sure this message is only displayed on console
- 11:56 AM Revision c02acef2: get_failover_interface() is already called inside get_interface_ip(v6), no need to call it twice. It should fix #4089
- 11:55 AM Revision 76f12171: get_failover_interface() is already called inside get_interface_ip(v6), no need to call it twice. It should fix #4089
-
- Applied in changeset commit:59c5e4bd687ec9779488e35e418380bde8a2544e.
-
- Applied in changeset commit:d7563eebc721a6eb2ca1f58136905ed4044a1a15.
-
- In service->NTP under "access restrictions" advanced button, the line for "Disable ntpq and ntpdc queries (default: d...
-
- I found that I need to specify...
-
- I need to permit private IPs for my local domains to resolve. That is, vick.int.kcilink.com resolves to 192.168.7.80....
12/09/2014
-
01:31 PM Bug #4082: Adding to Captive Portal Allowed Hostnames list gives error (exit code 71) in System Logs
- Thanks; so when I add pfsense.org , which is not already there :o), it gives the same error.
Currently, that pass th... -
- It occurred to me after turning the computer off well after midnight that you might have been referring to the "TTL" ...
-
- Oh, that's a bug with network-type aliases and FQDNs if you mix networks in with them. That's fixed in 2.2, there's a...
-
- You have missed the problem. I am not interested in new DNS lookups.
The problem is that THE ENTRIES CORRESPONDING T... -
- Nor should they be. They're updated in the background by filterdns when the TTL expires. It's pointless to do another...
-
- pf tables can be populated from FQDNs through pfsense aliases. This is a very good feature for a number of reasons. T...
-
11:46 AM Bug #3939: Cannot create Host or Network type alias with an IP address/range
- It looks like there is still an issue with this.
If I create a new alias with 2 networks and 2 FQDN's, all expected... -
- It took me a long time to find the problem because there are few symptoms that immediately break things, other than a...
-
- not true in general, though I'm sure there are unusual edge cases where that's possible. Even the described flapping ...
-
- Default configuration is to monitor the WAN gateway once per second and to take action if it doesn't respond for 10 s...
-
- The config file that is generated for squidguard 1.4_4 pkg v.1.9.6 is buggy in two ways, leading to unexpected and da...
-
- fixed
-
- fixed
-
04:18 AM pfSense Packages Bug #4085 (Resolved): Check_mk agent configuration: 'Listen Port' is required, contrary to description
- In the Check_mk agent configuration page, the description for 'Listen Port' says:
"Leave empty to use Default prot [... -
- The official Check_mk agent package doesn't work because the shebang line at the top of /usr/local/bin/check_mk_agent...
12/08/2014
-
11:51 PM pfSense Packages Feature #3485: Log rotation for mod_security
- +1
Ended up having to install a local crontab to avoid log overflowing, which is totally sub-optimal and non-repro... - 09:45 PM Revision e2a319f3: Use exit instead of return here, otherwise script's return code is always 0 and user with wrong password is authenticated
- 09:44 PM Revision 9a92e2ef: Use exit instead of return here, otherwise script's return code is always 0 and user with wrong password is authenticated
-
03:24 PM Feature #4083 (Resolved): Replace GET by POST
- These functions should be sent as a POST to pfSense software, which should then do a redirect back to the status page...
-
02:29 PM Bug #4081: Apinger reporting incorrect latency
- also affects rrd graph at same time
-
- it's not reporting latency to the gateway, its calculations become wrong under some circumstance.
-
- that's just cosmetic, when it tries to add something that's already there.
-
10:07 AM
Bug #3286: Radvd will not function with IPv6 Prefix delegation other than 64 on WAN
- Just wanted to add a comment here... it's possible that this is not a pfSense bug. DHCPv6+PD leases a prefix of the r...
12/07/2014
- 10:32 PM Revision 34d03237: Standardise css list padding
- for _corporate
- 10:32 PM Revision 63d41775: Standardise css list padding
- for code-red theme
- 10:32 PM Revision 40a27d2c: Standardise css list padding
- for metallic theme
- 10:32 PM Revision fa367078: Standardise css list padding
- for nervecenter theme
- 10:32 PM Revision ed1457e3: Standardise css list padding
- for pfsense-dropdown theme
- 10:32 PM Revision ba1ff148: Standardise css list padding
- for pfsense theme
- 10:32 PM Revision 433f5949: Standardise css list padding
- for pfsense_ng_fs theme
- 10:32 PM Revision 93365bbd: Standardise css list padding
- for the_wall theme
- 10:32 PM Revision 14bd365a: Provide success return indication from console_configure_dhcpd
- Recent commit https://github.com/pfsense/pfsense/commit/9ea554ee5cb25ea3bf5bb6bf7997c6c7379ce349 added testing of the...
- 10:31 PM Revision ae0daa80: Merge pull request #1371 from phil-davis/patch-6
- 10:30 PM Revision 47a12231: Merge pull request #1370 from phil-davis/patch-5
- 04:56 PM Revision eca5402b: Provide success return indication from console_configure_dhcpd
- Recent commit https://github.com/pfsense/pfsense/commit/9ea554ee5cb25ea3bf5bb6bf7997c6c7379ce349 added testing of the...
-
- Pull request merged
-
- Should be fixed by: https://github.com/pfsense/pfsense/pull/1371
It was broken recently by enhancements to return ... -
08:50 AM Bug #4080 (Resolved): can't edit setting after factory reset!
- After I do a "reset to factory defaults" I couldn't change any other setting from the Console menu ... I have tried t...
- 04:28 PM Revision 2ce15f63: Standardise css list padding
- for the_wall theme
- 04:26 PM Revision fe9273cf: Standardise css list padding
- for pfsense_ng_fs theme
- 04:24 PM Revision 4fb660ae: Standardise css list padding
- for pfsense theme
- 04:23 PM Revision 6e74f280: Standardise css list padding
- for pfsense-dropdown theme
- 04:21 PM Revision 09b095b0: Standardise css list padding
- for nervecenter theme
- 04:19 PM Revision af978cb9: Standardise css list padding
- for metallic theme
- 04:16 PM Revision 04d21981: Standardise css list padding
- for code-red theme
- 04:11 PM Revision 66591feb: Standardise css list padding
- for _corporate
- 03:42 PM Revision cd4d0c29: Standardise css list padding
- On Status->Services, the Services Status widget when a service status is down, the red "x" button does not line up wi...
- 03:41 PM Revision e17748e2: Typo CIDR in UPnP GUI page
- As reported by johnpoz https://forum.pfsense.org/index.php?topic=84964.0
- 03:41 PM Revision f3dac61c: Merge pull request #1368 from phil-davis/patch-3
- 03:40 PM Revision f060bd2a: Merge pull request #1369 from phil-davis/patch-4
- 01:25 PM Revision 9241d942: Typo CIDR in UPnP GUI page
- As reported by johnpoz https://forum.pfsense.org/index.php?topic=84964.0
-
- Adding a web address to the Captive Portal's Allowed Hostnames list consistently gives this error in the system logs:...
-
12:36 PM Bug #1629: invalid state table entries after WAN IP change
- So is this change going in to 2.2? Will the state killing be triggered in a gateway group failover event that is typi...
-
- I agree this would be a very nice feature to have, as would the ability to sort or re-order the "interfaces" lists wh...
-
- I have a bare metal box that I believe this or something related is happing chris has access info if any of the other...
-
- If a gateway has an explicit monitor address, apinger will stop reporting latency to the monitor address and switch t...
- 09:47 AM Revision 0f3d668f: Standardise css list padding
- On Status->Services, the Services Status widget when a service status is down, the red "x" button does not line up wi...
-
08:48 AM Feature #4079 (Closed): Specify opt-number to use on new interfaces
- When creating new interfaces, it would be nice to be able to specify the number that the opt-interface receives. A si...
12/05/2014
- 09:06 PM Revision a4e07baf: Disable RC4 ciphers in lighttpd
- 09:05 PM Revision fa10244f: Disable RC4 ciphers in lighttpd
- 07:04 PM Revision 72e79bc7: Call filter_configure_sync() is a better fix for #4066, as pointed by Ermal
- 07:04 PM Revision 56c6993c: Call filter_configure_sync() is a better fix for #4066, as pointed by Ermal
- 06:23 PM Revision 6a7dae05: Fix #4066:
- Make sure pf is configured before other services are restarted when WAN
IP changes. The way it was before, 'pass out'... - 06:20 PM Revision 6d744cc8: Fix #4066:
- Make sure pf is configured before other services are restarted when WAN
IP changes. The way it was before, 'pass out'... -
- All done
- 01:06 PM Revision 5c3dae18: Add RELENG_2_2 to gitsync
- 01:06 PM Revision a911f2e2: Set text and color of Gateways Widget Status
- getstats.php calls functions.inc.php get_stats(), which calls get_gatewaystats().
get_gatewaystats() now returns the ... - 01:06 PM Revision 3002168f: Explicitly pass gateway status and color
- This code was passing a whole load of html to attempt to set various properties of the Gateways Widget Status column ...
- 01:06 PM Revision d68be5d6: Use proper listr class for Gateways Widget Status
- The Gateways Widget Status was not using the listr class, and so it was missing the borders for the right and bottom ...
- 01:05 PM Revision 8da00522: Add RELENG_2_2 to gitsync
- 01:05 PM Revision 75f65f9c: Merge pull request #1367 from phil-davis/patch-2
-
- Applied in changeset commit:6a7dae05d3a628492f5b55ff87a7153ee69484dd.
-
- Applied in changeset commit:6d744cc842058a2ff35c82700cce71a2f5eaae41.
- 12:09 PM Revision 95d045fc: Set text and color of Gateways Widget Status
- getstats.php calls functions.inc.php get_stats(), which calls get_gatewaystats().
get_gatewaystats() now returns the ... - 11:58 AM Revision beb7d9e3: Explicitly pass gateway status and color
- This code was passing a whole load of html to attempt to set various properties of the Gateways Widget Status column ...
- 11:51 AM Revision 6404148c: Use proper listr class for Gateways Widget Status
- The Gateways Widget Status was not using the listr class, and so it was missing the borders for the right and bottom ...
-
- On 64 bit, the NUT build is looking libusb.so.2, whereas the native build for 64 bit in /usr/lib is libusb.so.3. Ther...
- 09:01 AM Revision d4337df8: Fix gateway widget status update
- Redmine #4077
- 09:00 AM Revision d57c55ca: Merge pull request #1366 from phil-davis/patch-1
- 07:55 AM Revision 5eeee40f: Fix gateway widget status update
- Redmine #4077
- 05:39 AM Revision 04d307d8: dyn.dns.he.net uses a self-signed cert, disable verification for it.
- 05:38 AM Revision 393dac91: dyn.dns.he.net uses a self-signed cert, disable verification for it.
- 05:19 AM Revision d69414fe: Don't try to launch 3gstats unless it's on a valid device.
- 05:19 AM Revision 514512dd: Don't try to launch 3gstats unless it's on a valid device.
- 05:11 AM Revision a0b470ee: Proper CA certificates are in place to validate SSL in these cases where it previously couldn't be, remove disabling of verification.
- 05:10 AM Revision 5ed9fab7: Proper CA certificates are in place to validate SSL in these cases where it previously couldn't be, remove disabling of verification.
- 03:02 AM Revision 95bd66a0: replace spaces with tabs
- 03:00 AM Revision 590aa3e7: After discussion with Ermal, remove this to force consumers to send things
- properly. I fixed the scenario in Unbound where it was sending IPs to
these functions rather than an interface, so th... - 02:58 AM Revision 32a81561: Don't include link-locals as unbound interface candidates
- Unbound does not presently support link-local interfaces.
- 02:57 AM Revision 8742f799: Merge pull request #1365 from jean-m-cyr/master
-
- Pull request: https://github.com/pfsense/pfsense/pull/1366
After this the status updates - pull the cable out of a... -
- On the Dashboard, Gateways Status widget, the RTT and Loss columns update every 10 seconds. But the Status column doe...
12/04/2014
- 11:34 PM Revision 0af2fab6: The time has come - bump to 2.2-RC
- 11:20 PM Revision b3460e3d: The time has come - bump to 2.2-RC
-
- found one scenario that's still a problem, investigating.
-
- confirmed fixed on multiple systems
- 09:58 PM Revision 1d57a7f7: After discussion with Ermal, remove this to force consumers to send things
- properly. I fixed the scenario in Unbound where it was sending IPs to
these functions rather than an interface, so th... - 06:18 PM Revision a623defd: replace spaces with tabs
- 06:07 PM Revision ad62d077: Don't include link-locals as unbound interface candidates
- Unbound does not presently support link-local interfaces.
- 05:52 PM Revision d0b5ddce: Fix update url since now we have RELENG_2_2
-
- fixed
-
-
- no quick fix here, will review further for 2.2.1
-
- should be done
-
- Just /etc/version is missing
-
- - Branch RELENG_2_2 created
- set_version.sh changed
Still missing (waiting some definitions):
- Update URL
-... -
- Time to branch RELENG_2_2, and everything that comes along with that. Should be final thing before RC.
-
- yeah looks good
-
- Works for me, too. I restored a problem config and it still has a console when it boots back up. Marking this as reso...
-
- this should be good
-
- We'll review Ermal's patch post-2.2.
-
- Revert "Can't skip this if booting, ends up breaking config. Ticket #4071"
This reverts commit effb3a3cfe4e57b781f35... -
- 10:40 AM Revision b8959f3c: Provide friendly descr in error message in Interfaces Assign
- I was doing drastic things testing some stuff, swapping WAN and OPT1 interfaces in Interfaces->Assign. I accidentally...
- 10:39 AM Revision 9fc7e40d: Merge pull request #1364 from phil-davis/patch-4
- 10:31 AM Revision f0eef2ef: Provide friendly descr in error message in Interfaces Assign
- I was doing drastic things testing some stuff, swapping WAN and OPT1 interfaces in Interfaces->Assign. I accidentally...
- 10:01 AM Revision 01b8dbb0: Put -4 in the right place in ntpq clockver command #4074
- I had pasted it in here between "-c" and "clockvar", that was not good.
That's all I have for #4074 (I hope) - 10:01 AM Revision 9bcb0919: Use IPv4 for ntpq if IPv6 not allowed in widget #4074
- Similar code here. Shame it was not in a subroutine called from both places, but not about to re-engineer that now:)
- 10:01 AM Revision 99a80364: Merge pull request #1363 from phil-davis/patch-3
- 10:00 AM Revision 2966bc42: Merge pull request #1362 from phil-davis/patch-2
-
- Revert "Can't skip this if booting, ends up breaking config. Ticket #4071"
This reverts commit effb3a3cfe4e57b781f35... -
-
- With a CARP cluster, the options on Services > DNS Forwarder will sync to the secondary when set, but when unset they...
- 08:05 AM Revision 62a407da: Put -4 in the right place in ntpq clockver command #4074
- I had pasted it in here between "-c" and "clockvar", that was not good.
That's all I have for #4074 (I hope) - 07:59 AM Revision c2914fc9: Use IPv4 for ntpq if IPv6 not allowed in widget #4074
- Similar code here. Shame it was not in a subroutine called from both places, but not about to re-engineer that now:)
- 06:23 AM Revision e26effd3: change the ordering of dhcpd_configure and unbound_configure here, claims on forum it fixes issue I can't seem to replicate.
- 06:12 AM Revision 888dd494: Merge pull request #1361 from phil-davis/patch-2
- 05:41 AM Revision e4a496ae: Use IPv4 for ntpq if IPv6 not allowed
- Forum: https://forum.pfsense.org/index.php?topic=84890.0
- 05:07 AM Revision 679c54fc: Merge pull request #1360 from jean-m-cyr/master
- 03:23 AM Revision f302a333: Link local interfaces don't have subnet.. don't create access-control statement
- Selecting link local interface for unbound causes invalid access-control
statement in unbound config since link local... -
- I reverted the fix you pushed and committed f658bac which is the correct fix.
The issue came from the platform_booti... - 02:43 AM Revision effb3a3c: Can't skip this if booting, ends up breaking config. Ticket #4071
-
- Yes, I was thinking a similar thing. "Allow IPv6" is really meant to be a general blocker for outside things that mig...
-
- Good catch, thanks. I merged that.
Wondering if it'd be best to allow localhost to localhost v6 connectivity rega...
12/03/2014
-
- Forum: https://forum.pfsense.org/index.php?topic=84890.0
ntpq by default tries to ask ntpd for status using the IP... -
- After further consideration, I will make this a bug, but corrected to the real issue (subject fixed). We can make peo...
-
- every meaningful cookie sets secure in all versions. That's flagging on the cookie_test that does nothing but check w...
-
04:53 PM Bug #4069 (Resolved): cookie_test causes false positives in vulnerability scanners
- openvas reports vulnerability:
*Vulnerability Detection Result*
The cookies:
Set-Cookie: cookie_test=1417649... -
- thanks
-
- Display the currently installed package version numbers, along with text like "Latest: N/A". and the Version box bein...
-
- Soft failures returned by fetch resulted in immediate and continual retries prior to the last couple days. Now it at ...
-
- The last update has nothing to do with your issue Dmitriy, the fix I put in a couple weeks ago is fine for that. Erma...
-
12:48 PM Bug #3894: OpenVPN client started multiple times when connecting to FQDN where connectivity to server is delayed
- Does that mean that the issue remains intact? Or SIGKILL will do in my case?
-
- Since the circumstance Phil noted is pretty common, and the change that caused a problem there had no benefit on the ...
-
- fix confirmed on two of my systems and slpalmer's where I originally found the issue.
-
- Where a P1 exists with a FQDN as the remote-gateway, ipsec.conf is missing rightid after boot. Adding ticket for trac...
- 06:42 PM Revision e78509cc: fix IPv6 static routes, is_ipaddrv6 returns true for strings including a
- CIDR mask, which then ended up broken.
- 05:05 PM Revision 30640018: Change our default resolv-retry back to OpenVPN's default. Changing this
- didn't help the ticket where it was intended to help, which was later
fixed differently. This change in defaults is p... -
- openvas reports vulnerability:
*Vulnerability Detection Result*
Weak ciphers offered by this service:
SSL3_RSA... -
- Worked fine on my tests, will leave it open to hear a 2nd opinion
-
- Please try again with last snapshots
-
- Dynamic DNS updates started failing within the last few days with: ...
-
- probably should add a new config sync checkbox for DNS Resolver, and leave DNS Forwarder as is.
-
- Unbound configuration does not get synchronized to the secondary members of a cluster install.
There is no provision... -
-
- Normally the CAs imported/generated on the CERT manager of pfSense should be trusted to help avoid issues with cert v...
-
01:41 PM
Feature #3029: DHCPv6 Server/RA page should list interfaces that are configured to track DHCP-PD
- Definitely interested in this one. Other open source router firmwares have figured out how to do DHCPv6 on a LAN that...
- 12:57 PM Revision 576af570: Merge pull request #1359 from phil-davis/patch-1
- 11:42 AM Revision efa28692: Display installed pkg version even if pkg server not available
- Forum: https://forum.pfsense.org/index.php?topic=84820.0
It seems reasonable to me to display the currently installed... -
- the root issue from #4018 is fixed, this package has a separate issue.
-
- Just in case installed squid3 3.4 and it doesn't work:
@Dec 3 14:27:47 php-fpm[7738]: /pkg_mgr_install.php: The comm... -
- This is an issue with incorrect symlinks. This issue is tracked in #4018.
-
-
- you have to mark the gif's gateway as default if you want it as such, that's not a bug.
-
- Steps to reproduce:
1. Create a GIF IPv6 tunnel (*gifx*);
2. *gifx* tunnel should be the only one tunnel in the sys... - 03:35 AM Revision a94b1edc: Merge pull request #1348 from phil-davis/patch-4
- 03:28 AM Revision c042bc3b: Merge pull request #1357 from DasTestament/patch-1
- 02:50 AM Revision d12e3d3c: reload Unbound here, fixes some instances of PD-assigned v6 IPs missing from unbound.conf
- 02:15 AM Revision a0e9e17d: If get_interface_ip(v6) is passed an IP, return the IP.
- Properly set up interface binding for v6 link local IPs. Ticket #4021
except had to comment out the fix for now beca...
12/02/2014
-
- should also be safe to remove resolvconf entirely once this is done, as Ermal suggested yesterday. Right now rtsold l...
-
- rtsold is configured at its defaults, which calls resolvconf to update resolv.conf. It ends up blowing away everythin...
-
- Confirmed fixed in multiple production systems where this could be replicated.
-
- Renato and I have tested nearly every package. This issue in general is fixed. There are still some issues with indiv...
-
08:36 PM Feature #4063 (Duplicate): Captive Portal: Sync IPFW table states between CARP Members
- Dear all,
Currently PFSYNC doesnt sync Captive Portal user states in CARP settings. If failover occurs, users need... -
- this is fixed, except I had to comment out the fix for now because of #4062
-
- pfSense_getall_interface_addresses returns v6 link local IPs minus the %interface off the end. That makes get_possibl...
-
- back to me for testing after discussion with Jim. I now have a Solarflare card to test.
-
- In a HA setup with DHCP server enabled, both peers will assign IPs. The leases that sync to peers don't include clien...
-
-
- I set HTTP on redmine.pfsense.com to redirect to https://redmine.pfsense.org. We don't link to .com anywhere, though ...
-
04:52 PM Bug #4060: SSL weirdness in redmine
- I didn't even notice that! The interesting part is that I followed a link to that... I'll try to retrace my steps, ...
-
04:32 PM Bug #4060: SSL weirdness in redmine
- That screenshot shows you're trying to connect to redmine.pfsense.com rather than redmine.pfsense.org. The certificat...
-
- Pretty much just FYI...
When navigating to https://redmine.pfsense.org/ using Chrome Version 39.0.2171.65 (64-bit)... - 05:14 PM Revision 690b557c: wait 10 minutes before retrying on soft failures to avoid us getting DoSed
- if something is wrong there (like someone's system can't validate the
cert) - 05:08 PM Revision a82b458f: don't include cert.pem in the obsoletedfiles list.
-
- Best procedure I've found so far:
Tools required:
1. A switch with at least two ports configured for 802.1Q-over-... -
- This is still an outstanding problem in 2.2-beta as of 20141201-1400 build... and it's a royal PITA to work around.
-
01:20 PM
Bug #3790: Input validation is too strict for IPv6 Prefix ID for Track Interface
- A couple of additional items for this that need to be resolved...
- When the prefix selection box first appears, i... -
-
-
-
-
- I understand that, and I will now go to all my site-to-site clients on 2.1.5 and turn on that setting so it carries o...
-
- You have an option resolve-retry-inifinite on the openvpn settings.
Use that to have it behave as before. -
- I have systems where the internet somewhere goes away quite regularly. The actual pfSense WAN interface to the upstre...
-
-
-
10:26 AM pfSense Packages Bug #4059: library required by squid3 may be absent
- I attempted a package install of squid3 (3.4.9_pkg 0.1). The install...
-
- I attempted a package install of 3.4.9_1 pkg 0.1. The install proceeds, but the subsequent start of the squid3 servi...
-
-
-
-
-
- When running 2.1, the dashboard displayed all the various interfaces as: interface, link status, link speed/duplex, i...
-
08:12 AM
Bug #4057: [Cosmetic] ssh_tunnel_shell timer issues
- I would assume that you either show hours, or show minutes, or, if you show both, make it so the format 'x hour and y...
-
- It is showing hours and minutes in total.
It is not showing passesd hours and minutes.
If you do the math 1331 mi... -
04:17 AM
Bug #4057 (Rejected): [Cosmetic] ssh_tunnel_shell timer issues
- The minute timer in the SSH-only banner is not decrementing the number of elapsed minutes based on the number of elap...
-
- Can you confirm that dhcpv6 is running on top of pppoe?
-
- I believe this bug should be targeted against 2.2
-
12:27 AM pfSense Packages Todo #4029: Update phpsysinfo package
- Chris Buechler wrote:
> if someone wants to fix it, they can. we're not going to.
Thank you for the info..
I t...
12/01/2014
- 10:54 PM Revision 9eabb248: also take into account the "all" option in Unbound Network Interfaces when
- setting 127.0.0.1 into resolv.conf.
-
- if someone wants to fix it, they can. we're not going to.
-
- phpsysinfo was removed from pfSense 2.2 and higher
-
- Current version also doesn't work on pfSense 2.2 with php 5.5.x.
-
- adding a ticket for the IPsec rekeying issue we've been tracking the last few days. Appears to be this strongswan bug...
-
- 11:18 AM Revision be5b4133: Revert "/etc/ssl/cert.pem was obsoleted by mistake, remove it"
- Since /usr/local/ssl/cert.pem is in place now, it can be obsoleted
This reverts commit bb788b8ceb3337b62401819378ec3... - 11:17 AM Revision bb788b8c: /etc/ssl/cert.pem was obsoleted by mistake, remove it
- 11:06 AM Revision 4dd7ca80: Update filter.inc
- Add missing gettext.
p.s: Is it really needed to log? Lots of rules causes lots of spam on ifaces without gw. Such k... -
10:11 AM pfSense Packages Feature #4055 (Rejected): Enable area authentication from GUI
- I can not find how to enable "area 0.0.0.0 authentication" from the GUI for Services Quagga OSPFd
-
-
-
-
08:11 AM pfSense Packages Feature #4054: Package Country Block
- OK, too bad. There is a reason this old version is still running : impossible to get a maintenance window with the cl...
-
- pfSense 1.2.3 is no longer supported, many packages have been broken there for quite some time. If packages are requi...
-
- Hello,
You disabled the Country Block package saying :
"disable the old, unmaintained CountryBlock package that'... -
- Commits have been made and make this happy.
Probably need to merge this in 2.1 branch that i am going to do now. -
- On shutdown, the RRD data is all expanded from /var/db/rrd/*.rrd to /var/db/rrd/*.xml, then all the *.xml are put int...
11/30/2014
-
01:15 AM Bug #3670: IPv6 DHCP-PD over PPPoE non functional + radvd core dump + solution
- I can confirm that at least the first problem also exists in 2.2-BETA.
In shell, ifconfig gives me:...
11/29/2014
- 07:43 PM Revision e3afacbb: Only set i_dont_care_about_security_and_use_aggressive_mode_psk=yes where there is a P1 with aggressive+PSK enabled. Log a warning when such a configuration is in use.
- 12:27 PM Revision cc62e5ed: Merge pull request #1356 from phil-davis/patch-3
- 12:20 PM Revision 9c97e4b8: Correctly delete xml file after restore and conversion to rrd
- When doing "Generating RRD graphs" at bootup, the data is restored from /cf/conf/rrd.tgz into xml format files in /va...
- 12:10 PM Revision 345145e2: Merge pull request #1355 from phil-davis/patch-2
- 11:45 AM Revision 8c2a5a73: Fix bracketing of if statement in unbound
- Stops message:
Warning: in_array() expects parameter 2 to be array, null given in /etc/inc/unbound.inc on line 607
Th... -
06:38 AM
Bug #4046: Invalid access-control.conf entry with certain IPv6 settings
- I was on a build dated 11/25. It doesn't seem to be a problem on a newer build now, so it must have been something th...
- 04:58 AM Revision 978b8f50: fix syntax on prefix6 for DHCPv6 PD
-
-
01:18 AM
Bug #4041: Default gateway switching logic seems broken
- This can be closed, Ermal fixed it in the latest snapshots.
- 01:33 AM Revision c5cd9b75: validate MTU and MSS as integers, and don't allow MSS larger than pf will accept to avoid broken rulesets.
-
- fixed
- 01:17 AM Revision a96dc32e: Add input validation on vpn_ipsec_settings.php. Fixes #4052.
-
-
- Ermal is correct.
Check the contents of the patch against https://svnweb.freebsd.org/base/releng/10.1/sys/dev/sfxg... -
I tend to side with Ermal here.
More debugging (what you're calling "too noisy") is good.
I don't think there...-
Jens,
If you look at that thread, Ermal has the fix in-hand.
IJS...
11/28/2014
- 11:30 PM Revision 5a663a5d: Skip v6 WANs in Unbound access-control. Ticket #4023
-
- fixed
-
- Applied in changeset commit:f4620b36fdc29ed665776f50a01423c901a48411.
-
- should be fixed, will double check on additional systems.
-
- Some things for v6 DNS assignment are only checking if dnsmasq is enabled, not unbound. About to push a fix, adding t...
- 10:30 PM Revision 80075b9e: fix v6 access-control in Unbound, Ticket #4023
-
-
- fixed
-
- this should be good, leaving for more testing.
- 10:09 PM Revision f4620b36: check if Unbound is enabled in addition to dnsmasq for v6 DNS assignment. Fixes #4051
-
- Yep, seems to be working correctly now. Thanks!
I did end up having to reboot after changing the MTU setting for m... - 09:54 PM Revision b7960673: Fix input validation for DNS resolver when localhost is enabled in resolv.conf and "all" chosen in Network Interfaces. While here, set something other than '' when all is chosen.
-
09:47 PM Revision 2388a1ac: Merge pull request #1354 from phil-davis/patch-2
-
-
-
- fixed
-
- Yeah that was the circumstance that prompted me to open this, I realized this morning. To me for testing.
-
- Applied in changeset commit:16d6c1df8c5b110c9fd7a5e9238d03b820ed2445.
-
- It still happens after a system upgrade with packages installed, while packages are being reinstalled during boot you...
-
- fixed
-
- Applied in changeset commit:a96dc32e35766aa6c0788154a2b246bb76b252c2.
-
- should be fixed
-
- There isn't input validation on vpn_ipsec_settings.php.
-
- fixed
- 05:39 PM Revision 8676899f: Process RRD backup compression in var
- Prior to this the RRD xml files were added uncompressed to the archive in /cf/conf and then that archive was compress...
-
- Looks to be fixed. A full PBI rebuild ran, and we're going through testing packages.
-
- fixed
-
- this should be fixed, leaving for review.
-
- Hoepfully the latest commits with a file makes this final solution.
-
-
- 02:43 PM Revision 16d6c1df: Add a parameter on platform_booting to help detect if it's on GUI on console and use it in appropriate places, it fixes #4049
- 02:15 PM Revision 5acce704: Fix sapi name check to detect if it's on console, ticket #4049
-
-
-
-
-
-
-
- 09:17 AM Revision 4dbc18db: Merge pull request #1352 from phil-davis/patch-8
- 09:17 AM Revision ba44446f: Merge pull request #1351 from phil-davis/patch-7
- 08:10 AM Revision f865302f: Add input validation to Unbound advanced settings page. Ticket #4050
- 06:47 AM Revision 823cabba: Validate as integers, not just numeric, to prevent possible breakage.
- 04:10 AM Revision f8f5ba1a: Add option to disable auto-added access-control entries for users who want to manually manage ACLs. Ticket #4023
- 03:03 AM Revision aea7da2f: Fixup misleading comment
- This comment was misleading - this is the IP of whatever interface that is being processed, not just WAN IP. Might as...
- 02:55 AM Revision bd4471a4: Fix module name in top comment
- A bit of rubbish to update while I notice it.
11/27/2014
-
- There is effectively no input validation on services_unbound_advanced.php.
-
09:17 PM pfSense Packages Bug #3986: BandwidthD can break php-fpm in unknown rare edge case
- Hi,
Yes, I can definitely reproduce this - just installed the latest version of pfSense (v2.2, from today), and I ... -
- I will try a few variations again to see if I can break anything. I did see it in a CPU loop on a 2.1.5 system last w...
-
- bandwidthd works in general on 2.2 now. The issue Phil noted with php-fpm may still be a problem in some circumstance...
-
-
-
-
- 06:54 PM Revision 045287e8: use correct variable here
-
-
- likely not an issue in 2.2, leaving for feedback.
-
-
-
- This is not a bug or problem.
Interal structures in pf make this be displayed this way. -
-
-
-
-
-
-
-
- fixed long ago
-
-
-
-
-
- No need for an embedded kernel, maybe a flag file in /conf/ that is set/checked to signal that the serial console sho...
-
- I committed that part by accident.
Though i think returning a embedded kernel only for this is redundant no? -
- Seems like that would still be possible to bypass in a few ways (like ACB). Relying on config.xml for what should be ...
-
- Yeah that seems fine if it works, haven't tested it. Maybe JimP can think of a scenario where that doesn't work, but ...
-
- Do you agree with this diff?...
-
- This is important in that it'll be a support nightmare to put out a release that makes it this easy to break the cons...
-
- Applied in changeset commit:7a63d5d095edf84850715af23c6e380542896a1d.
-
-
- anyterm package no longer exists
-
-
-
- We'll fix this as part of ACB enhancements immediately post-2.2.
-
-
-
-
- 11:58 AM Revision 2bc1451a: Merge pull request #1350 from phil-davis/patch-6
-
-
- 10:27 AM Revision e318d592: Fix Unbound host_entries.conf warnings on console during boot
- system_hosts_generate() tried to make /var/unbound/host_entries.conf at various times in the boot sequence before the...
- 09:46 AM Revision 23c5cf73: Merge pull request #1349 from phil-davis/patch-5
- 09:43 AM Revision 3cd3cbd2: Setup rrd dir before calling create_gateway_quality_rrd
- Stops error:
ERROR: opening '/var/db/rrd/WAN_DHCP-quality.rrd': No such file or directory
in system log during boot.
... -
- Applied in changeset commit:648661c57bfdd75e4916be6bdb537bff378d9f0d.
-
-
- Commits have been done to fix this.
-
- During boot, nano logs things like the following: ...
-
-
-
-
-
- yeah that must have been cache. Multiple systems that were doing that no longer are.
-
- this was on the most recent snapshot available at the time I posted it, but I could have had stale cache. re-testing.
-
- I got this yesterday but Ermal has fixed it. Did you try last snapshot after clear browser's cache?
-
- Ermal's already been working on this, but it's still an issue and we don't have a ticket. The dashboard spews the fol...
-
- been through a lot of testing with package reinstalls post-upgrade and just hitting "reinstall all packages", and thi...
-
- that was merged a while back and should have resolved this. Thanks!
-
- they're there
-
- haven't heard of anyone else seeing this.
-
-
- it needed to be updated to 3.4, which has been completed.
-
03:15 AM Feature #2505: Toggle button to disable/enable multiple firewall rules
- This Feature would be much appreciated!
Not only for debugging but also for emergency situations,
i.e. if you want ... -
- Yep - gone from the GUI. That's the easy way to fix everything :)
-
- yeah that's a legacy piece that doesn't do anything useful at the moment. I removed the checkbox for now. One of the ...
-
-
- VIP should be bound to localhost with PPPoE, not WAN.
-
- I'm contemplating removing this as a package. It is installed a couple dozen times a month, but I've never heard of i...
-
-
- bug here is fixed. would be nice to have a <service> tag, but this was a quick fix and that's a little more involved ...
-
- Applied in changeset commit:a3ffce8ab05d830dba2b9d36da60178c1789fa65.
-
-
-
-
- Bill: was this fixed?
-
- There is a similar issue with lagg here. Our package should probably detect when you have a bridge or lagg and put it...
-
- this isn't an issue in any recent versions, may have been in old versions at some point.
-
- all good, also doesn't require a reboot for the most common scenarios.
11/26/2014
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Now works better than ever :)
Though on complex scenarios still needs a reboot to apply proper MTU allover as in G... -
-
-
-
-
-
-
- 11:11 AM Revision b9767e86: Fix variable typos introduced in eb8ad408
-
-
-
- 10:15 AM Revision 708aa0ef: Remove variable use here since it's confusing sshdcond package, ticket #3959
- 07:18 AM Revision c683f627: include 169.254./16 in unbound's DNS rebinding protection
- 07:00 AM Revision e3045c51: include Unbound access-control entries for local IPv6 networks reachable via static route. Ticket #4023
- 05:42 AM Revision edee528c: Send the gateway name to this function. Fixes #4047
- 04:57 AM Revision 31afa084: Skip interface subnets for IPv4 here, this is best handled via the NAT networks list. Ticket #4023
- 04:39 AM Revision 3bdf2a70: Use the subnets automatic outbound NAT uses for tonatsubnets for Unbound's access-control config, as this is a good source of what networks are internal. Ticket #4023
-
- Applied in changeset commit:a2103cc238bc568016d4ed931bd5ec52ca103fc8.
- 03:12 AM Revision f1a6f696: If localhost is configured to be included in resolv.conf, force its selection in Unbound. The resolv.conf logic prevents that from being a problem, but people don't seem to realize they have to pick that to use Unbound for the host itself. Force it here rather than just silently skipping its inclusion in resolv.conf.
- 02:20 AM Revision 95834f84: correct logic here to omit 127.0.0.1 from resolv.conf when no DNS resolver bound there.
-
- I've been through a good deal of bridging testing in 2.2. It all behaves as expected. The subject-described issue is ...
- 01:36 AM Revision f72fce18: fix text here, variables came back empty and aren't all that useful here anyway.
-
- things are much better with apinger in general after fixes in the past 1-2 months. I can still replicate some issues ...
-
- fixed, updated subject to reflect actual issue
-
- v4 should be good now. I removed the interface subnets for all enabled interfaces, since that's potentially excessive...
11/25/2014
-
- fixed
-
- The address family check for dynamic gateways doesn't work, preventing adding of static routes out dynamic gateways.
-
- one update to use the same list of networks as automatic outbound NAT uses, that's the best internal networks list th...
- 10:16 PM Revision 563ea7ea: only show aggressive/main mode for IKEv1
- 09:01 PM Revision a46dc3c7: fix typo
-
-
-
-
-
-
-
- I don't see any way it's possible for that to happen unless you're on an old version. Every part of the code that put...
-
07:21 PM
Bug #4046 (Resolved): Invalid access-control.conf entry with certain IPv6 settings
- WAN connection with IPv6 via DHCP... when the box to request only a prefix is checked, this results in the WAN interf...
- 07:30 PM Revision 79f4c970: fix IPsec widget status display after recent changes broke it. Ticket #4045
-
-
-
-
-
-
-
- ipsec_dump_sad works fine with IKEv1, but matches on the wrong parts of setkey output for IKEv2. Shifting the line nu...
-
- not seeing a crash report from anything on those first two octets. One in the same big Verizon block but well off fro...
-
-
- 04:48 PM Revision fc86e6c1: remove unused function referencing racoon
- 04:31 PM Revision 8ce58e05: Option for browser tab text order
- 04:29 PM Revision 0274d41a: Option for browser tab text order
- Easy thing to do - add an option for the user to select if they want the host name or page name text to display first...
-
- unchanged for physical interface where parent isn't assigned. Clear test case on 172.27.32.125, igb1 and igb1_vlan10....
-
- Ok works for me.
Lagg needs a restart when the mtu is changed on a vlan on top of it properly the same behaviour wih... -
- Applied in changeset commit:2b58f94e6005a4b1e8c3387341dc07f3c173269f.
-
-
-
-
-
-
- This was because AES-GCM was being used on Phase1 which is not recommended.
The options are removed now from the GUI... -
- right, the problem is it's configured to send it, but it's not doing so.
-
- The other side is not sending AES-GCM in its list of supported algos hence you end up with no proposal found.
-
-
- mine for testing
-
- others have reported it works with RSA+Xauth, I can't seem to get it to work with PSK+Xauth though. to me for more te...
-
- confirmed after gitsync on others
-
-
- status on IPsec dashboard widget regressed after a recent change. about to push a fix, adding ticket for tracking
-
- If that "Solarflare patch" is the binary blob driver for sfxge, then we should yank it back out by the roots.
-
- On the current snapshot this is fixed on every system I could reproduce the problem with before. Updated multiple VMs...
- 09:24 AM Revision c039d44a: Merge pull request #1347 from phil-davis/patch-3
-
07:28 AM Feature #4044 (Resolved): Add UEFI support
- FreeBSD 10.1-RELEASE does appear to have support for UEFI installation images, however it appears as though pfSense s...
- 05:37 AM Revision 24aa9e40: fix up text
-
- Everything is ok except for tun server. Incorrect IP is assumed: 5.45.32.2 is not exists and never existed.
--
... -
- fixed
-
- fixed. users will need to manually configure outbound NAT as desired in this circumstance.
-
- fixed
-
- works for SAD, we'll leave SPD as is, shouldn't be a need for it.
11/24/2014
-
- Strongswan's documentation shows AES-GCM ciphers are valid for both IKEv1 and IKEv2.
https://wiki.strongswan.org/... -
- removal of main/aggressive mode looks good.
thinking there are other things we're missing here, leaving to feedba... -
- Applied in changeset commit:0771969b40bb37d0aa8b8d66fbd17b5176957231.
-
11:01 PM
Bug #4041 (Resolved): Default gateway switching logic seems broken
- Tested with:...
-
-
-
-
08:55 PM Bug #4030: AR9227 cards cause kernic panic when switched to n-mode
- 108.28 (Sorry for the [super] late reply)
-
- Revert "Do not let the user mess with SAs from this page. The daemon and primary status page handles tat"
This rever... -
-
-
- Revert "Gather DNS information and return on bootup"
This reverts commit c2847e0faa781712f6419c8f305c97df66d9d233. -
-
- With multiple PPPoE connections with the same gateway, the static route for the monitor IP can end up on the wrong in...
-
- this is fine with that, no need for it.
-
- Applied in changeset commit:2f851abff998778d6e8a120a708fee67368edb45.
-
- On 2.1 branch and before there were SPDs installed by default to bypass LAN ips to go through ipsec.
This could be d... -
- fixed
-
- Applied in changeset commit:43517fcc1b616b7443b26247dc59dbd65bde2819.
-
- Fixed Chris, though lagg still needs reboot to work on my vms and your test setup.
-
- fixed long ago
-
- Will leave for feedback until the fix is in snapshots, but a gitsync on two VMs and an APU shows they are all working...
-
- Applied in changeset commit:ec5753e7563c31e843a503d17f78487a2d156c78.
-
- Works for me.
-
- others have confirmed fixed on forum thread
-
- this has regressed, doesn't work with lagg or physical interfaces
-
- I'm still seeing this issue on the Mon Nov 24 07:19:16 CST 2014 build, even without using LAGG.
Steps to reproduce... -
- Applied in changeset commit:f07008f559059d5f3da9bc702d19a9c8aa7c18f7.
-
- Fixed for SADs SPDs i do not think are necessary.
-
- This was removed by me since everything is managed from the daemon now.
It would cause problems if you try to mangle... -
-
- Fixes on dynamic interfaces pushed today should have fixed the last issues with this as well.
-
-
-
-
-
- 04:29 AM Revision a8604dc6: Process unbound start from status services
- This was missing, so nothing happened when the user tried to start Unbound from Status->Services
11/23/2014
- 08:49 PM Revision e0dd1fdd: Merge pull request #1346 from SunStroke74/patch-2
- 07:35 PM Revision cfbe7e09: Removing extra closing bracket
-
- After swapping IP from two embedded devices (WizNet RS485 Gateways) the gateways weren't reachable from an other subn...
-
04:05 PM Bug #3684: Openvpn not routing incomming traffic correct when using tap device
- There is no other rules for the openvpn and no flowing rules,
I have tried to update to beta 2.2 and I have the sa...
11/22/2014
- 09:34 PM Revision 1ea3b03b: Merge branch 'wagonza'
- 09:33 PM Revision 38e91976: Merge branch 'master' of https://github.com/wagonza/pfsense into wagonza
- 07:24 PM Revision e840fc8c: Don't unset these items for PPP configurations as they're not configured here and doing so loses settings configured in interfaces_ppps_edit.php. Ticket #3727
- 07:13 PM Revision 15fbb5ec: Fix ovpn-linkup for tun + topology subnet case setting router as ifconfig_local envvaar when route_vpn_gateway and ifconfig_remote are both not defined. Keep using 5th parameter as a seatbelt in last case. While I'm here, improve sh syntax. It should fix #3968
- 07:03 PM Revision 68ce5a28: phone number is a required field
- 06:57 PM Revision 02a2bffa: add a usleep here to prevent killing twice. Ticket #3894
- 06:42 PM Revision 93ead355: In some circumstances, OpenVPN doesn't exit on SIGTERM. SIGKILL it when that happens. Ticket #3894
-
-
-
-
- looks like a config problem not a bug.
-
-
-
- Duplicate, #4018 is the cause of this
-
-
- this was fixed, root PBI problem has a diff ticket
-
- there has been a ladvd package available for a while now.
- 05:17 PM Revision e295e7ca: MSS clamping on VPNs is necessary in both directions where it's needed. Rather than requiring setting on both ends, especially since the remote side can be some third party device where MSS clamping may not be available or not work, set in both directions here.
-
- diag_ipsec_sad.php and diag_ipsec_spd.php are both missing the delete buttons they had in 2.1.5 and prior versions.
-
- pretty sure this is fixed after merging Warren's earlier pull request. I found a system where I could reliably replic...
-
02:12 PM Bug #4036 (Resolved): Unbound bails with "fatal error: Could not read config file: /unbound.conf"
- I just upgraded a pretty heavily configured (many OpenVPN tunnels, QoS, 80-100 firewall rules, etc. on a 150/50Mbps c...
-
- this actually applies to all wifi judging by the FreeBSD PR on the issue.
https://bugs.freebsd.org/bugzilla/show_bu... -
- confirmed. The root of the issue is the Obytes counter on ath0 and ath0_wlanX is always 0. For instance: ...
-
- no change with Ermal's last commit.
My last commit on this ticket resolves this for ondemand and some other items... -
- Applied in changeset commit:15fbb5ecf35ac794b4bf357c1cd821a1413cdaa9.
-
- Since the fix was pushed, looks better to be moved to feedback state
-
- Ermal's change is good, but doesn't help this circumstance. The root cause here is OpenVPN doesn't exit when sent a S...
-
- I have installed 2.2 beta built on Sat Nov 22 02:14:01 CST 2014 (nano bsd 4g, no vga) and will monitor it.
- 07:15 AM Revision b7b3f343: fix up text
-
- The list of 100 backups kept automatically tends to mostly be full of uninteresting stuff, e.g. we add all LAN client...
-
- A user with the priv user-config-readonly cannot change the config. This is handled correctly in write_config().
But... -
- When doing a manual backup, there is a check box for:
"Do not overwrite previous backups for this hostname"
But wit... - 03:52 AM Revision 7786c9d6: clean up tabs in strongswan.conf
- 03:11 AM Revision 0a69eb7a: touch up text
-
- this seems to be fine, works where it's reasonable to work, can be assigned if desired in other circumstances.
-
- this was fixed by coincidence when something else got fixed, my systems where this was an issue are now fine.
11/21/2014
-
- this is a big enough regression in usability to justify being a bug.
- 07:26 PM Revision d266dc07: Merge branch 'master' of github.com:wagonza/pfsense
- 07:24 PM Revision 0a5a8df9: d DHCPLeases starting before Unbound/DNSMasq and returning a pid not found message. Add missing reload feature
- 07:10 PM Revision 5ce68025: d DHCPLeases starting before Unbound/DNSMasq and returning a pid not found message. Add missing reload feature
- 06:27 PM Revision 5b506a49: Fix input validation of custom-type dynamic DNS hostnames.
-
- confirmed the described scenario is an issue, and I can't find that patch's contents anywhere
-
- fixed. lagg works fine here too
-
- reboot doesn't handle it correctly either. There is a clear test case on 172.27.32.125 with its lagg0 and members igb...
-
- fixed
-
- This appears to be tied to having a DHCPv4 WAN configured along side DHCPv6. If I set the WAN of an affected system t...
-
- fixed
-
-
- still an issue here
- 12:22 PM Revision d274a75b: Fix syntax
-
- Revert "Merge e3cffd6cefc - Properly remove IPv6 carp vips as reported from https://forum.pfsense.org/index.php?topic...
-
-
- duplicate of #4018
-
- 1. Install pfSense latest snapshot;
2. Install squid3-dev package;
System logs will be bloated with:
Nov 21 12:5... -
-
- Will track all those issues in #4018
-
- Note that postfix is one of the affected packages, will close #4017 and keep the issue here.
Also available in: Atom