Activity
From 12/25/2014 to 01/23/2015
01/23/2015
-
11:06 PM Bug #4269: Modifying port forwarding rule to invalid IP kill the firewall until reboot
- Well, indeed, not 'dead', but traffic is stopped.
I did what you suggested and e don't see any loop. However, I s... -
10:35 PM Bug #4269 (Feedback): Modifying port forwarding rule to invalid IP kill the firewall until reboot
- it's certainly not possible to kill a system by putting an incorrect IP into a port forward. maybe if you managed to ...
-
- First, this is using invalid actions, so this is not so critical, but doing so will result in denial of service.
-... -
- thought we already had a ticket to change strongswan's behavior here in the future, apparently not, but we do now. #4...
-
08:55 PM Bug #4267 (Closed): IPSEC Phase 1 deletion
- Deleting an IPSEC phase 1 entry from vpn_ipsec.php for a tunnel that has not connected does not result in the entry b...
-
- Doesn't appear we've opened a ticket to address this yet. strongSwan's behavior of not updating the SAD is going to g...
-
- to me for info gathering
-
- Where you have multiple P2s configured on a single P1 with IKEv1, there are some rekeying issues under some circumsta...
- 02:52 PM Revision 4c7f7c29: Merge pull request #5 from SanderVanLeeuwen/bootstrap
- Updated documentation / guidelines
-
06:18 AM Feature #4265: UPNP allow use of alias and schedule
- can any of the core developer let me know what would be the preferred method for those permission list so i can make ...
-
- i mean separated with a ","
-
- well, what i can do is is replace the last 4 permission boxes with a single one where some1 could type out all entrie...
-
06:11 AM Bug #4231: bridge or lagg of openvpn link down after reboot
- And the interface LAGG is BRIGED with the LAN
-
- After the patche of bug https://redmine.pfsense.org/issues/4257
the BRIDGE is OK, but not the LAGG
On 2.2RC last up... -
12:42 AM pfSense Packages Bug #4256: Squid3 using 100% CPU after install/reboot
- As shown in the log above: some squid processes. The issue is stable to reproduce.
- 12:02 AM Revision 323317c3: Typo
01/22/2015
- 10:41 PM Revision 6c943511: Additional documentation
- - Added checkbox example
- Form field help block example
- Button and icon usage explained -
- Many if not most 2FA solutions support LDAP and/or RADIUS so are already supported. That said, enhancements here woul...
-
07:56 PM Revision 145eb990: Fixes #4257 With the platform_booting() fixes a regression was done on openvpn tap interfaces or dynamic ones that are part of a bridge.
- Allow during bootup rc.newwanip to continue up to a ceratin part to handle bridges or other complex interfaces.
-
- Allow during bootup rc.newwanip to continue up to a ceratin part to handle bridges or other complex interfaces.
-
- fixed
-
06:20 AM Bug #4252: radvd not functional with CARP IPs
- Applied in changeset commit:9b527a7931795466ab7286f0caadd7bef082d002.
-
- Applied in changeset commit:8e24d1dacd80fd539cc9dd6a5f0a7c8953bcffd0.
-
- this is mostly fixed. Where CARP goes to backup status, it seems fine. But if the CARP VIPs are completely gone, it f...
-
- fixed
-
- Applied in changeset commit:145eb9907c638f5a1cf279b480a69bb3556c3b7e.
-
- Applied in changeset commit:30a61a895a969cfa890a30df76b2f83b252cb231.
-
- Fixed anything else apart taps through this issue.
-
- at the time I set it to 2.2.1, 2.2-release was already built and signed. Since we're rebuilding it for other reasons,...
-
- To remind you: there is no traffic between sites after reboot. Both sides are UP and RUNNING and NOTHING goes between.
-
- Huh, team is going to release 2.2 without working tap openvpn? That's interesting ...
-
- fixed
-
- Fixed by allowing the blocksize to not be multiple of blocksize.
-
- Jim mentioned today we'll get this addressed in 2.2.
Ermal: test setup with AES-GCM to an ASA is setup. will emai... - 04:27 PM Revision e8477a56: Text tweak
- 12:02 PM Revision 9b527a79: Make sure radvd is reconfigured when CARP is enabled/disabled. It should fix #4252
- 12:01 PM Revision 8e24d1da: Make sure radvd is reconfigured when CARP is enabled/disabled. It should fix #4252
-
-
- 11:03 AM Revision 560d1b53: When configuring radvd, check if carp is enabled. Ticket #4252
- 11:02 AM Revision 7b753c2b: Do not translate function return string
-
11:01 AM Feature #4265: UPNP allow use of alias and schedule
- I don't get the design in the first place. You could as many permissions there as needed, if only there was one of th...
-
- it would be great if the upnp settings page allowed to type in individual client ip for which to allow or deny rather...
- 11:01 AM Revision ee8fb75d: Fix typo in function name
- 11:00 AM Revision 150d479b: When configuring radvd, check if carp is enabled. Ticket #4252
- 11:00 AM Revision 42cc62a2: Do not translate function return string
- 10:59 AM Revision 44763e58: Fix typo in function name
- 10:24 AM Revision 2a746a1e: Add language hint to code block
- 10:22 AM Revision f180fe1a: Code style documentation for tables and forms
- 09:14 AM Revision dc85e806: Merge branch 'master' of https://github.com/pfsense/pfsense
- 09:13 AM Revision cc5b2948: Merge pull request #4 from SanderVanLeeuwen/bootstrap
- Firewall rules and VPN L2TP layout changes
-
09:05 AM Bug #1333: Rate causes high CPU usage
- Not here:
PID USERNAME THR PRI NICE SIZE RES STATE TIME WCPU COMMAND
70675 root 1 119 0 3... -
08:22 AM Bug #4240: 2.2 IPv6 radvd RDNSS Issue
- attached screenshots
-
06:45 AM Feature #3120 (Rejected): WebConfigurator, open help page on new window
- The help link used to open in a new window, it was changed to give the user the choice. The way it is now, the user c...
-
03:25 AM Feature #4264 (Closed): Make distinction between general & security updates, while applying the latter automatically
- Current pfSense setup does not make a distinction between security updates and general updates. The latter requires a...
-
- OK, lets call this fixed then. Thanks. :)
(Kinda inconsistent results, perhaps the VPN stuff would be worth a sepa... -
- for v4, it uses the same source networks as it uses for outbound NAT auto rule generation, which is a diff process.
-
- Kinda confused really what it covers now. It certainly is adding OpenVPN and IPSec IPv4 subnets to the ACL.
-
- It only covers interfaces that are assigned and enabled plus static routes for IPv6. Manual entries will be required ...
-
- Ok, this works mostly fine, except that it misses OpenVPN's IPv6 (and probably IPsec as well, don't have IPv6 IPsec t...
-
02:45 AM Feature #4262: Alphabetical listing of interfaces, VLANs
- The underlying identifier strings "wan" "lan" "opt1" ... are used all over the place in the config to hook things tog...
-
-
- Works just fine. See https://forum.pfsense.org/index.php?topic=86900.msg477095#msg477095
-
12:24 AM Bug #4261: Google Domains Dynamic DNS -- Works on 2.1.5 but not 2.2-RC
- Sorry, typo in the report -- I am using HTTPS for all my attempts, not HTTP. I'll start fresh and see if I can figur...
-
- oh one difference between what you're doing and we're trying, we're using HTTPS rather than HTTP. Might want to try t...
-
01:19 AM
pfSense Packages
Bug #4263 (Needs Patch): ntopng: historical feature issue
- Hello,
i can't use the historical feature. when i try to load historical data after setting interface and time inter... -
- which process is using 100% CPU?
-
12:20 AM Feature #4038: Button to clear the arp cache
- Chris Buechler wrote:
> Applying that may be dangerous, in that it leaves a file on your system with no authenticati... - 12:04 AM Revision 7fd2a0e3: Strict comparison not necessary here, and makes this fail to work as
- intended. Fixes #4258
- 12:04 AM Revision 7684d66f: Strict comparison not necessary here, and makes this fail to work as
- intended. Fixes #4258
01/21/2015
-
- Damien Braillard wrote:
> Just a proposition:
> When clicking the help button from a page of the web configurator, ... -
- works fine here, we just did some testing with two diff hosts on Google Domains. Both update, both display the correc...
-
- Hi team,
I'm using the new Google Domains Dynamic DNS functionality, and I am pleased that it works so well on 2.1... -
- Chris Buechler wrote:
> Applying that may be dangerous, in that it leaves a file on your system with no authenticati... -
- Applying that may be dangerous, in that it leaves a file on your system with no authentication that clears your ARP t...
-
- Grischa Zengel wrote:
> After swapping IP from two embedded devices (WizNet RS485 Gateways) the gateways weren't rea... -
- Thanks for the quick reply, Chris! Yes, an option would be great, even if it weren't a change to the default behavio...
-
- they're listed in the order of their identifier. wan, lan, opt1, opt2, ...
This is one of those things where if y... -
- Hi team,
If possible, I'd love to see interfaces and VLANs ordered alphabetically instead of by order of creation ... -
-
-
-
-
-
-
-
-
-
-
- that fixes the initial described problem. Also re-verified multi-WAN bits after static routes returned, including dis...
-
- Static routes are put back in the configuration.
-
- I put a workaround to not use the interfaces not present in config.
Though the real workaround here is to install ... -
- sent Ermal details on how to replicate in the test setup.
-
-
-
-
-
-
-
-
-
- updated subject to specific issue. Fixed
-
- Applied in changeset commit:7fd2a0e3a9163d8cc3f578f4bd105ed0c982737f.
-
- Applied in changeset commit:7684d66fad740820ca1c945a5b67a6f813306235.
-
- IPv4 subnets are automagically added to /var/unbound/access_lists.conf; however this is not done with any of the IPv6...
-
- 04:38 PM Revision 52b5a223: When radvd is configured on a CARP interface, enable it when it is MASTER and disable when go to BACKUP. It should fix #4252
- 04:36 PM Revision caaaf9ce: Add missing require for filter.inc since vpn_ipsec_configure() calls filter_configure(). It should fix #4236
- 04:36 PM Revision a6934401: When radvd is configured on a CARP interface, enable it when it is MASTER and disable when go to BACKUP. It should fix #4252
-
03:20 PM pfSense Packages Bug #4243: Last squidguard update prevents squid from starting
- The problem appears to be more complex than I first thought.
In a fresh install into virtualbox with squid 2.x and s... -
- strongswan has had ECP DH key groups support for quite some time, should be added to GUI.
https://wiki.strongswan.o... -
-
- https://redmine.pfsense.org/issues/4146
-
- *Before instance restart/after reboot:*
ovpnc1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 15... -
- you're right, I was too quick on the trigger here. The config upgrade failed on one pair of systems because it was up...
-
- Do you have a config that was broken after upgrade? I upgraded a 2.1.x to 2.2 on both modes, automatic and advanced a...
-
- There is a code to convert it, it's upgrade_102_to_103()
-
11:28 AM Feature #3377: OAuth2 authentication in captive portal
- Thomas NOEL wrote:
> Here is a proof of concept, for a OAuth2 captive portal authentication with Google accounts :
... -
- Applied in changeset commit:52b5a22363d34bbd621b9eb555cf849782318dda.
-
- Applied in changeset commit:a693440176e8bd4a783a9ccb75d2cd57629b5699.
-
- The conf file problem is fixed. Since CARP no longer has its own interface, we'll need to start/stop radvd along with...
-
09:37 AM
Feature #4259 (Resolved): Port forward NAT rules with "any" protocol
- Hello,
i'm starting to use pfsense inside my company network but i see that pfsense is missing a NAT ability compare... -
-
- 06:36 AM Revision 94efc59d: Use the parent NIC rather than the VIP. Fixes part of Ticket #4252
- 06:35 AM Revision 2f74d9d8: Use the parent NIC rather than the VIP. Fixes part of Ticket #4252
-
- 1. Install latest pfSense snapshot;
2. Install Squid3 package;
3. Observe 100% load on CPU oob and after reboot;
... -
01:01 AM Bug #4251: NAT Reflection not working if LAN is bridged
- The only other explanation that came to my mind is that nat reflection might need a reboot to activate under some cir...
01/20/2015
-
- working on this
-
- radvd.conf where a CARP IP is chosen results in an invalid config file, as it omits the interface entirely (where it ...
-
-
-
- Outbound NAT configs in 2.1.x and prior use a different XML structure than 2.2, and there isn't any config upgrade co...
-
08:54 PM Bug #4253: Diagnostics > Test Port requires Source Port
- So sorry to waste your valuable time. I'll do better in the future.
-
- upgrade, that was fixed a while ago
-
- The dialog for Diagnostics > Test Port says this for source port, "This should typically be left blank." and the fiel...
-
- Where you have a dynamic interface removed and re-added while running IKEv2 in strongswan, things break. Good easily ...
-
- I replied back on your forum thread, this sounds like a stale upstream ARP cache.
-
10:52 AM Bug #4249 (Not a Bug): virtual ips backup/restore bug
- the version of the software is 2.2 RC Jan 16 11:53
to take full backup; press diagnostics > backup > full backup >... - 04:44 PM Revision f0d51562: Place form save button outside form panel for clarity (saves whole form, not just the last panel)
- - Increase body bottom margin to create 20px margin between elements
and footer -
- It was bridged with an OpenVPN PSK TAP Client. That connection has been down for about a month but was not disabled. ...
-
- what was LAN bridged to? Was there an IP on the bridge itself or was it on the LAN interface?
-
- I have been trying everything to get NAT reflection working. My last effort was to remove LAN bridge (which I wasn't ...
-
02:21 PM Bug #4206: Missing route creation on DHCP-PD lease where ia-na != ia-pd
- Here is a follow-up with 3 attachments: The pcap file, a screenshot of the "Status: DHCPv6 leases" page and the dhcpd...
-
- The IP address and gateway settings on Interfaces > [assigned gif name] should remain at "None".
There is a dynami... -
12:19 PM Bug #4250 (Rejected): IPv6 gateway is not used for default IPv6 route when rebooting, gateway edit page cannot be configured
- Error while saving gateway page, having the default checkbox checked:
- "The gateway address 2001:x:x:x::1 does not ... - 10:08 AM Revision c4a7740d: Finish preliminary restyle of L2TP configuration
- vpn_l2tp.php - Use pill style for navigation
vpn_l2tp_users.php - Cleaned and formatted according to bootstrap style... -
- As reported on https://forum.pfsense.org/index.php?topic=86866.msg477744#msg477744
The linux hosts like to send unpa... -
04:51 AM Bug #4246: Fix "netstat -gW" behavior broken in r259638.
- This also limit the ability to debug problems with igmpproxy.
Is the fact that MROUTING kernel support is missing ... -
- Note that this was working properly in 2.1.5: Multicast forwarding table was displayed for IPv4.
01/19/2015
-
- On the page pfsense/pkg_edit.php?xml=squidguard_dest.xml&act=edit
for editing a target category the new expression l... -
- Running 'netstat -g' to display multicast forwarding table display the following message:...
-
-
04:37 AM pfSense Packages Bug #4228: 2.2 RC nano i386 on Watchguard Firebox
- this is already fixed in the latest release - I'm sorry !
Thomas -
- there are no such issues, please post to the forum or list for assistance.
-
- Ignore this one, false alarm sorry. I hacked some rules in the filter.inc that did force a route-to. removing those.....
-
- To add some more info to this issue, perhaps the traffic is properly natted as em0 is the default route, and that is ...
-
- When i put a manual outbount-nat-rule on em0, it is applied at traffic leaving from interface em3
In this case i'm... -
- they are disabled after the next filter reload, the process of disabling just doesn't kick off a filter reload.
-
- after disabling ipsec all the "# VPN Rules" are still loaded
A reload of rules should probably be triggered. - 05:12 PM Revision 61144c9b: Preliminary changes for VPN L2TP configuration
- - Cleaned using clean.sh
- Added bootstrap form and input wrappers & classes
- Splitted configuration into three part... -
- Issue 1) renders squidguard useless because it bypasses it entirely.
I can't seem to change the bug priority. I wa... -
- I don't believe I am seeing a package update breaking things completely...
squidguard 1.4_4 pkg v.1.9.9 introduces... - 01:44 PM Revision 06966500: Firewall rules layout changes
- - Added missing th for buttons column
- Wrap table in div.table-responsive; adds scrollbar on smaller viewports while... - 12:37 PM Revision 2e7fd143: Merge pull request #3 from SanderVanLeeuwen/bootstrap
- Fix grid setup on dashboard
- 12:28 PM Revision a2faa388: Fix grid setup on dashboard
- - Default width in .container is 100%, so col-md-12 isn't necessary there
- Add .row wrapper to 6/6 columns - 12:17 PM Revision ec71be6b: Merge pull request #2 from SanderVanLeeuwen/bootstrap
- Improved login screen styling
- 12:11 PM Revision 0a353c81: Full width input fields @ sm breakpoint
- 11:25 AM Revision ca276264: Add missing require for filter.inc since vpn_ipsec_configure() calls filter_configure(). It should fix #4236
- 11:09 AM Revision 365fc95d: Add reset button support for APU and FW7541
- 11:08 AM Revision 7f360152: Add reset button support for APU and FW7541
- 11:02 AM Revision c7d61071: Use bootstrap columns to scale and style jumbotron
- pfSense.css - proper positioning for logo, remove with on jumbotron
auth.inc - add bootstrap columns to jumbotron
aut... -
- seems likely there is some other root cause, like the alias issue from before, given no one else appears to be seeing...
-
- fixed
-
- Applied in changeset commit:ca276264ee3289e308f33bfc6d87217d108f4a13.
-
- there have never been any accommodations for mobile IPsec in that regard
-
10:08 AM Feature #4242 (New): Two Factor or OTP Authentication for Admin Interface
- Hi developers!
In a never-ending quest to beef up security, it would be great to have the ability of using two-fac... -
-
- If a custom install is chosen, the "Install Bootblocks" screen has a graphical glitch that causes display problems on...
-
- I'm have a 2.2 box running 10.1-RELEASE-p4 FreeBSD 10.1-RELEASE-p4 #0 36d7dec(releng/10.1)-dirty: Fri Jan 16 12:38:50...
-
- The athstats, cryptostats, and cryptotest utilities were present in 2.1.x but are not on 2.2 images, but they are lis...
-
- Push it to 2.2.1
-
04:28 AM pfSense Packages Todo #4029: Update phpsysinfo package
- That are some really good news :) Thank you
-
02:46 AM pfSense Packages Todo #4029: Update phpsysinfo package
- Phpsysinfo upcoming version (3.2.1) now works correctly with pfSense 2.1.5 and 2.2.
-
01:56 AM
Bug #4238 (Resolved): Firewall rule: source port display issue
- Hello,
it is a display issue and appears when i try to select saved aliases on source port range.
The red backgroun...
01/18/2015
- 06:05 PM Revision e30050b6: Unimportant typos in user and group manager
- that do not effect anything.
-
- Error "macro IPsec not defined"
I dont know why it currently happens, and dont have a way to trigger it easily as ... -
- PHP Errors:
[18-Jan-2015 21:30:33 CET] PHP Fatal error: Call to undefined function filter_configure() in /etc/inc/v... - 02:09 PM Revision 1eb66a84: correct a few typos that made these files unparsable
- services_unbound - added missing $-sign to variable
xmlrcp - removed redundant closing brackets. Some trailing whites... - 02:04 PM Revision 50242425: Derive name from easyrule block alias from the scripts name
- Allows to use different block lists by using symlinks to the
easyrule CLI script - 02:04 PM Revision 4dedce6d: Add showblock and unblock options to easyrule CLI tool
- Block rules added with easyrule block.... can now be listed and removed using
the easyrule tool. This is handy to be ... - 02:04 PM Revision e4d8943c: Fix inconsistent handling of seperator in easyrule, should fix #4233
- 01:58 PM Revision 2e1cd9d8: log.widget - replaced js processor with simple xhr that fetches html
- firewall_rules - typo, duplicate $pgtitle
log.js - simple xhr html updater, no need for duplicate logic
log.widget - ... -
- It seem 'reply-to' is missing in firewall rules generated for mobile-ipsec.
-
- Allow for strict user <> cn validation of mobile ipsec users when using rsa+xauth
It seems the gui setting is missin... -
10:55 AM pfSense Packages Bug #4197: squid 3.4 anti-virus feature not working
- The anti-virus feature is working now after adjusting the conf files based on the syntax checks you added to the to t...
-
08:10 AM Bug #4233: Inconsistent handling of seperators in easyrule cli
- patch provided at https://github.com/pfsense/pfsense/pull/1442
-
- When making modifications to the alias generated using easyrule CLI tool, there are two issues regarding separators:
... -
- line 405 in filter.inc is what i suspect to be the issue (maybe) because when filterdns is initially run with a time ...
-
- i guess the easy way to fix this would be to handle the $resolve_interval properly such that if the time difference i...
-
- Yes, of course. Since this bridged/TAP OpenVPN nonsense needs PROMISC on both the ovpn and other bridged interfaces -...
-
- same goes for bridged tap server: everything is UP and RUNNING but no traffic after reboot. Restarting server fixes t...
-
- I repeat myself: bridged tap client doesn't work after reboot!
Yes, latest commit brought the UP flag to the inter... -
- at boot, i think at the time of initialization of the BRIDGE (or LAGG), the vpn is not yet initialized, and this crea...
-
- both. specifically, one that reboot.
so that it works again, it is necessary after the reboot, resave the bridge con...
01/17/2015
-
09:10 PM pfSense Packages Bug #4232: GUI: Interface Menu
- Thanks! It's the same problem.
This could be marked as dupe report. Sorry about that (i searched before i posted.) -
- on Linux, it might be a font problem, since fixed/avoided in 2.2. see #3841
-
- I've tried that.
I've tried two browsers with the same result.
Mozilla Firefox 34.0
Chromium Version 39.0.2171.6... -
- clear your browser cache, it's using outdated pieces
-
- System Menu drops down on Help Menu.
Help Menu is just below System Menu.
This happend when upgradring from;
... -
- this is something I'd noted for 2.2.1 but don't think we have a ticket on it.
-
07:19 AM Feature #4230 (Resolved): Prefer SSL Perfect Forward Secrecy ciphers in UI
- Perfect Forward Secrecy (PFS) ciphers should be preferred in the admin interface to further harden the admin web serv...
-
- which side doesn't work?
-
- site 1 : 2.1.2 with BRIDGE lan, openvpn link and LAGG of 2 openvpn (multi wan: 1 vpn per wan)
site 2 : 2.2RC last u... -
- what version are you using?
-
- rectification for the BRIDGE, create an interface BRIDGE with the LAN and an openvpn links.
-
- If you create an interface LAGG with two openvpn links or an interface BRIDGE with two openvpn links, after reboot, t...
- 04:16 PM Revision 69b397dd: updated firewall WIP, fixed widget ordering
- * ipsec - replaced manual panel with simple alert
- 02:54 PM Revision a42e7aa2: replaced logobig with high-quality logo-black
- favicon - updated as well
authgui - form is now horizontal, logo update -
02:07 PM pfSense Packages Bug #3986: BandwidthD can break php-fpm in unknown rare edge case
- Hi,
FYI, I just added some new observations to the forum post, https://forum.pfsense.org/index.php?topic=84642.0
... - 01:50 PM Revision 80169aa8: implemented widget-config
- fbegin/fend.inc - temporary added for non-migrated pages
firewall_rules - use buttons for actions
index - implement w... -
- That's definitely a good news! Current webgui looks like "hello from hardcore early 90s". It would be nice to get a m...
-
- squid3 does this now. I would close this ticket
- 05:18 AM Revision ef9ef75f: add detection for 7541, APU
- 05:15 AM Revision 5a8519bb: add detection for 7541, APU
-
- this problem persists on 2.2 RC
-
12:02 AM Revision 1195a12d: move jquery ui css to theme folders
-
01/16/2015
- 09:30 PM Revision ccda8a1d: Merge branch 'master' into bootstrap
- Conflicts:
usr/local/www/carp_status.php
usr/local/www/diag_arp.php
usr/local/www/diag_authen... - 07:42 PM Revision b1fef27f: Set $arch accordingly to release
- 07:40 PM Revision 6aac31ef: change update URLs for release
- 07:36 PM Revision 6434d5be: Bump to 2.2-RELEASE
- 07:35 PM Revision 77fa86b0: make master 2.3-DEVELOPMENT
-
- the issue covered by this ticket is fixed, there might be other issues but those are separate and have no relation to...
-
03:17 PM pfSense Packages Bug #4114: Squid 3.4.9 transparent proxy broken.
- Issue definitely not "fixed" if you are upgrading from a working config - maybe if you install fresh or use some work...
-
- issue covered here is fixed
- 04:50 PM Revision b9a12ae0: Still missed one mistake on last commit
- 04:49 PM Revision b9ad208c: Fix some logic mistakes introduced in 89f171b052, spotted by phil-davis
- 04:30 PM Revision 0a1f1301: fix syntax and unbreak pfsense-utils.inc
- 04:24 PM Revision daae5e03: fix syntax and unbreak interfaces.inc
- 04:12 PM Revision 649cde0b: Address pull comments
- head.inc - Revert indenting
.gitignore - Add IDE name in comment - 03:14 PM Revision 2148e0bf: Ignore PhpStorm settings
- 03:13 PM Revision d75a843c: - Wrap form parts in panels
- - Improved some form-groups
- Add .checkbox helper to form-groups containing checkboxes - 03:11 PM Revision 45eebe10: Style page header & footer
- head.inc - Wrap header elements (title, breadcrumb)
guiconfig.inc - Prefix breadcrumb with title h1
pfSense.css - Sty... - 01:50 PM Revision 0c5dd854: Validate if both IP address and subnet are valid and the same version. Fixes #4223
- 01:50 PM Revision 17c98255: Validate if both IP address and subnet are valid and the same version. Fixes #4223
-
- you can't create CARP IPs on tap or tun interfaces. you're misinterpreting the recommendation, that's the binding of ...
-
- pfSense says:
@The following input errors were detected:
The interface chosen for the VIP has no IPv4 or IPv6 addre... -
- logging levels are configurable. Defaults could use some review later.
-
02:53 AM Bug #4227 (Resolved): Too much logging for IPSec DPD
- Is it possible to reduce the amount of logging for DPD packets. By default, these are generated every minute, and I h...
-
- fixed
-
- Applied in changeset commit:0c5dd854a840007e09bd3f95949cbce9abeb7d18.
-
- Applied in changeset commit:17c982555a2a3ecfa5c2ce988a6d85bee5a5980d.
-
- that did fix the issue for 2.2, pushing to 2.2.1 for getting the issue fixed in strongswan 5.2.2.
-
- the 'Watchguard Firebox with SDEC' driver is missing in the 'LCDproc' package
-
01:02 AM Feature #4179: Driver oce is missing from 2.2 RC
- oce.ko from FreeBSD 8.3 copied over to PfSense 2.2.5 works fine in our environment including VLAN tags, LACP trunk, C...
-
12:40 AM Feature #4179: Driver oce is missing from 2.2 RC
- just setting assignee for completeness
-
- PPTP comes out of pfSense in 2.3.
this bug is opened so we remember to do it. -
- People seem to like the look and feel of the web GUI in a recent fork (which shall not be named).
Jared says it's ... -
-
- I think this is going to want more testing than what we can afford in the 2.2.1 timeframe. That said, if it gets fi...
01/15/2015
-
- I thought this was covered by an outstanding pull request, but not seeing one at a glance specific to in_subnet. This...
-
- ip_in_subnet('11.22.33.5','abcd::/64') returns true.. this should not be.
still causes trouble like reported in ht... -
- downgrade to strongswan 5.2.1 (with cherry-picked security fixes from 5.2.2) looks to have fixed this issue. Leaving ...
-
- thanks Marcello, I merged it.
-
10:05 PM pfSense Packages Bug #4197: squid 3.4 anti-virus feature not working
- Typo and freshclam checks fixed on this PullRequest
https://github.com/pfsense/pfsense-packages/pull/788 - 09:05 PM Revision 5b7c33fc: Firewall Rules Apply be friendly to other languages
- Forum: https://forum.pfsense.org/index.php?topic=86808.0
Redmine: https://redmine.pfsense.org/issues/3886
print_info... - 09:04 PM Revision 65f9080d: Merge pull request #1441 from phil-davis/patch-1
-
-
-
-
-
- That pull request has been merged, so this particular thing should be fixed in 2.2
-
- It did not resolve - switch to Turkish, edit and save a firewall rule. The "Apply" step of the sequence is not displa...
-
-
-
-
07:09 PM Feature #4128: Email notification webgui configuration
- I think this is a fantastic idea!
- 06:15 PM Revision fe0fa4c3: Firewall Rules Apply be friendly to other languages
- Forum: https://forum.pfsense.org/index.php?topic=86808.0
Redmine: https://redmine.pfsense.org/issues/3886
print_info... -
-
04:31 PM pfSense Packages Bug #4114: Squid 3.4.9 transparent proxy broken.
- PfSense: 2.2-RC (amd64) built on Thu Jan 15 12:12:32 CST 2015
Squid: 3.4.10_2 pkg 0.2.4
Confirmed, Package is wor... -
- Please do not close.
I know the original bug was opened on amd64 but I have been following this avidly as it also ef... -
03:26 AM pfSense Packages Bug #4114: Squid 3.4.9 transparent proxy broken.
- Confirmed working now. (phew!)
Latest package 0.2.4 transparent proxy is OK.
ICMP pinger disabled in GUI to avoid ... -
- This has been reported working.
-
- Applied in changeset commit:98bf4991dc31f97fc7315a6b8aba433de9d39cea.
-
-
11:21 AM pfSense Packages Bug #4222: Update to 2.2 RC breaks domU
- Maybe a hook should be added then in the web UI to say, "hey, Xen detected, please make sure you checked (this note) ...
-
- In theory it is possible but given the wide range of disks that have been setup over the years, it is not yet a proce...
-
- Theoretically, could a hook for the referenced shell script be added into the pfSense upgrade process? Or even a sed ...
-
- To elaborate on that a little, the main problem with the disk is that the PVHVM drivers in FreeBSD apparently do not ...
-
- Already documented. It's a Xen/PVHVM thing we can't control.
https://doc.pfsense.org/index.php/Upgrade_Guide#Xen_U... -
- By doing an upgrade to nightly RC build for 2.2 from a working 2.1.5 install, it breaks it in Citrix XenServer. 2.2 s...
-
- Maybe just happened to not hit the issue after another reboot. This: ...
-
10:49 AM
pfSense Packages
Bug #4220: IPSec dose not work any more.
- *With the new built "Thu January 15 08:01:35 CST 2015
FreeBSD 10.1-RELEASE-p4 "IPsec works great.* -
06:56 AM
pfSense Packages
Bug #4220 (Closed): IPSec dose not work any more.
- Since update to "2.2-RC (amd64) built on Wed January 14 17:46:28 CST 2015 FreeBSD 10.1-RELEASE-p4 " does not work any...
-
-
- no diff than it's ever been.
-
- when limiter is used with source mask, it creates a lot of system log entries over time when active and applied to cl...
-
- duplicate
-
07:22 AM Bug #4221 (Rejected): Bridge does not have IPv6 link local address
- I configured a ethernet bridge with two members (re0_vlan20 and re1_vlan20) and assigned an IPv6 address to it.
It s... -
- This reverts commit 1ada4c8c514cc33b0df6238b7f2f177078bfe2e8.
-
- This reverts commit 324311043385aed357ca8838bde2c3af3111e564.
-
-
-
-
-
03:25 AM Bug #4212: unbound not starting on 12 CPU host
- It works. Thanks for the quick fix.
-
- affected version: 2.2-rc
-
- I configured a ethernet bridge with two members (re0_vlan20 and re1_vlan20) and assigned a IPv6 address to it.
It se...
01/14/2015
-
10:22 PM pfSense Packages Bug #4114: Squid 3.4.9 transparent proxy broken.
- Arthur Undisclosed wrote:
> I'm sorry, it seems there are still numerous issues with this package:
>
> - Transpar... -
- I'm sorry, it seems there are still numerous issues with this package:
- Transparent proxy still doesn't work. "TA... -
- Should be fine on 0.2.4
-
- strongswan has been reverted back to 5.2.1 to see if that resolves the issue, as other possibilities seem to have bee...
-
- The first one hsa been reverted and is present on new snaps.
-
- If the present builds do not work.
These commits seem at fault
http://git.strongswan.org/?p=strongswan.git;a=commit... -
05:20 PM pfSense Packages Bug #4217 (Resolved): siproxd on pfSense 2.2-RELEASE i386 fails to start
- running on Netgate ALIX router.
siproxd won't start via GUI.
Executing
[2.2-RC][root@router.example.org]/usr/... -
- https://forum.pfsense.org/index.php?topic=86701.msg475980#msg475980
-
- squidguard and squidguard-dev are missing symlinks to shared libs
ln -s /usr/pbi/squidguard-amd64/local/lib/liblda... -
- thanks Marcello and Renato!!
We are almost there, Marcello found a typo that he is correcting in the squid.inc fil... -
- Please try squid3 package version 0.2.4
-
-
-
-
- 02:11 PM Revision 38f77f4f: Obsolete libpng15 in favour of libpng16
- 02:09 PM Revision 6e0a0ab3: Obsolete libpng15 in favour of libpng16
-
- this works in 2.2
-
- The routes are not present anymore since 2.2.
-
- implemented
-
- I suppose this is not an issue anymore and can be resolved/closed.
-
- yeah this works
-
- This has already been committed/fixed from Chris.
- 11:34 AM Revision a771a6ae: Add support for 0x20 DNS random bit support. Fixes #4205
-
- 11:23 AM Revision 9eec3be3: Correctly handle number of cores and power of 2. Merged from the package already had this. Fixes #4212
- 11:22 AM Revision 5526efab: Merge pull request #1439 from wagonza/patch-5
- 11:09 AM Revision 46762efe: Correctly handle number of cores and power of 2. Merged from the package already had this. Fixes #4212
-
-
- Thanks, works :)
-
- Applied in changeset commit:37f34f561e7d537f5f56469de7632097b0058c4a.
-
- 0/ Add some patch.
1/ Click Test link
2/ You get something like:... -
09:04 AM Feature #2593: sync NTPD, SNMP config between HA members
- With the expanded config options in 2.2, this seems even more valuable now.
-
-
- looking good. squid is able to start. I installed the package on a fresh amd64 install. After package install it aut...
-
- Pull request already sent to fix it, but it can wait for 2.2.1 - https://github.com/pfsense/pfsense/pull/1440
-
05:40 AM Bug #4212: unbound not starting on 12 CPU host
- Applied in changeset commit:9eec3be339805c5f276500331c410fa18cc9bd5f.
-
- Applied in changeset commit:46762efee6b66b86090bb54f0bbb3d593bf23cf3.
-
- Thanks merged patch from the package would had this fixed (check https://github.com/pfsense/pfsense/pull/1439)
-
- I just saw, that this was already discussed in the pfsense forum:
https://forum.pfsense.org/index.php?topic=61659.... -
- In /etc/inc/unbound.inc
the unbound parameters 'msg_cache_slabs', 'rrset_cache_slabs', 'infra_cache_slabs', 'key_cac... -
- Support for EAP-MSchapv2 authentication.
The integration has been done according to https://forum.pfsense.org/index.... -
- Didn't validate it on 2.1.x, but I checked and it's ok on 2.2 by commit:be0af33ee0137cc92272b5f5c5c1a4a70bce82f2
-
05:17 AM Bug #4213 (Resolved): WebGUI - improper path to icons
- On the Status -> System Logs -> Firewall tab -> Summary View (/diag_logs_filter_summary.php) in the Source IP Data an...
-
- There has been some fixes on 5.2.2 related to that but not complete one.
-
01:04 AM Feature #3453: Management GUI (lighttpd) interface binding control
- I have personally opted for using the following patch, as a burn-in procedure, once the LAN interface has been define...
-
- +1, also needing this here.
This makes it impossible to create any redundant cluster with userland-based services ...
01/13/2015
-
- disabling unity is confirmed to work around this issue, and will suffice for the vast majority in this situation. I'l...
-
- Applied in changeset commit:078fdef02580b396cdad6c21e8e86360e53d338c.
-
- This may fix most issues with squid package on 2.2
https://github.com/pfsense/pfsense-packages/pull/786
I've incl... -
- This may fix most issues with squid package
https://github.com/pfsense/pfsense-packages/pull/786 -
-
-
-
-
-
-
- To be able to manage this first upgrade the config to assign each phase2 an reqid
Second use that during config gener... -
- To be able to manage this first upgrade the config to assign each phase2 an reqid
Second use that during config gener... -
- there are no issues as described. Replied back in your forum thread.
-
06:10 PM Bug #4211 (Rejected): DNS Answer ignored even though protect against rebind is disabled
- The pfsense server is 10.233.105.10/26
The interface I have to use for this dns query is 10.232.100.63/25
There... -
- Make title color more consistent with other pages.
Improving aesthetics. - 03:00 PM Revision 5a5615ce: Merge pull request #1437 from xbipin/master
-
- Make title color more consistent with other pages.
Improving aesthetics. -
01:19 PM Bug #4207: IPv6 - PHP error "Warning: inet_pton(): Unrecognized address" in DHCPv6/RA (possibly due to bad format of IPv6 address?)
- Awesome! Thanks for checking, Phillip, great to know it's fixed in the new release.
-
- No problems with white space or anything for me on 2.2-RC. As Chris says, this is fixed in 2.2 and I can't find a com...
-
- Aha! Looks like a leading space on the "range start" is what does it.
Leading space on this first one: @ 2001:47... -
- Well, I figured I might have left something in by accident - figures!
I've attached (but not embedded) the un-mung... -
- I tried your formats above and got no "Unrecognized address" text error stuff, just the proper errors reported on the...
-
- not something we're looking into for 2.2 at this point
-
10:06 AM Bug #4210 (Resolved): Bring back a FTP proxy
- on 2.2-RC we noted that ftp helper is not working anymore, confirmed by another users on forum:
https://forum.pfse... -
- Fixed, thanks.
-
- Fixed at some point on 2.2. When SANs are added to a cert, they are properly reflected in the properties.
> ... -
09:42 AM Feature #4209 (Resolved): Releasing DHCP on WAN interface should send a release
- Although sending a DHCP Release is not a requirement of the DHCP spec it would be nice if when clicking "release" on ...
-
- Fixed on recent versions
-
- It was fixed
-
- It's expected since PBI libraries are contained inside PBI_DIR/lib and binary wrappers setup environment before call it.
-
- Perfect. Thanks!
-
- I haven't found a means of reliably replicating this with shorter lifetimes. It's either some combination of things t...
-
- PPTP is very nearly dead, this won't be fixed.
-
- won't happen with the logging in 2.2
-
- was fixed a while back
-
- multiple people have confirmed 2.2 fixes this issue.
-
- 254 is the highest available VHID in 2.2.
-
- updated subject to root cause of issue.
Anders: asked about getting a pcap of the DHCPv6 traffic in your forum th... - 01:25 AM Revision 156938a8: Where the P1 is disabled, show the P2s as disabled since they will be, same as in previous versions.
- 01:25 AM Revision 51ef7499: Where the P1 is disabled, show the P2s as disabled since they will be, same as in previous versions.
-
- went back through and verified things after that change, all is well.
01/12/2015
-
- adding some details from what I've found thus far.
* It's not universal, but it is replicable. It's not replicabl... -
- to me for further info
-
- When P1 rekeys with IKEv1, in certain circumstances (which aren't entirely clear) it'll end up failing with no propos...
- 11:50 PM Revision d71f9794: Fix IPsec widget for multiple P2, it fixes #4164
- 11:50 PM Revision f285d039: Fix IPsec widget for multiple P2, it fixes #4164
- 10:33 PM Revision 324a2387: Unbound is compiled with libevent so setting this to always be 4096.
- 10:32 PM Revision a9402b96: Merge pull request #1430 from wagonza/patch-4
- 10:32 PM Revision ad9148ae: Allow for overhead and up maximum limit from 8 to 32, also only set it if its set to 4 or above. Fixes https://forum.pfsense.org/index.php?topic=78356.msg472781#msg472781
- 10:31 PM Revision bf6c57c7: Merge pull request #1428 from wagonza/patch-3
-
- this looks good now
-
- Applied in changeset commit:d71f97947553897f8ae6b0bb1f5145f9456f20bc.
-
- Applied in changeset commit:f285d039255f8536d135578125be4f5c76ccd24a.
-
- Renato committed something that seems to work for this, to me for further testing.
-
- same status, seems fine for everything except multiple P2s.
-
- Tested with "2.2-RC (i386) built on Sun Jan 11 18:19:43 CST 2015", but the problem is still present.
-
- that looks like the only issue that existed here and that works fine now.
-
- Applied in changeset commit:324311043385aed357ca8838bde2c3af3111e564.
-
- Applied in changeset commit:83b8ed6b2bec13d3b60acd9bd4786e5a7df4de90.
-
- Just pushed a commit for this.
Thx for the catch. -
- Well your problem is on
leftid = asn1dn:
What do you have configured as leftid? -
- The IPsec log is above. There is nothing relevant in system log. Relevant configuration from both endpoints:...
-
- I am sorry this is not something you call a bug report.
Please provide the contents of your /var/etc/ipsec and you... -
- Had perfectly working IKEv2 Mutual RSA configurations. After last round of messing with IPSec (presumably related to ...
-
- this should be fine as is now. Not going to retain the previous default setting since we haven't seen any problems th...
-
- I removed them entirely for the time being. Having a note in the docs will probably suffice.
I don't believe we'v... -
- If we choose to remove them, for reference the new tunables are documented at https://doc.pfsense.org/index.php/Boot_...
-
- Some of the old ATA subsystem tunables are still used in loader.conf that should be updated and changed on upgrade. O...
-
-
-
-
-
- there were some issues with IPv6 validation in 2.1.5 that are since fixed in 2.2. That was triggered by an invalid IP...
-
- h3. Short Version
I received the following error while trying to configure DHCPv6/RA.
h3. Details
h4. Error
... -
-
- Thanks Marcello! I'll have keep note of this in-case it's brought up on the forums again.. I've always used a higher ...
-
- thanks Marcello.
For those wanting to bind it to something < 1024, they'll have to configure net.inet.ip.portrang... -
- Marcello Silva Coutinho wrote:
> /var/run/squid will be fixed on next package update. This fixes squid -k reconfigur... -
- /var/run/squid will be fixed on next package update. This fixes squid -k reconfigure calls returning "no running copy...
- 06:43 PM Revision df92099c: Remove old write caching tunable as well. Ticket #4203
- 06:43 PM Revision bdb8fbff: Remove old write caching tunable as well. Ticket #4203
- 06:37 PM Revision f66bcbaf: Remove the settings to disable DMA, which have changed in FreeBSD 10.
- Ticket #4203
- 06:34 PM Revision 397009e9: Remove the settings to disable DMA, which have changed in FreeBSD 10.
- Ticket #4203
-
-
-
- works now
-
- Applied in changeset commit:5cd24cf110ed3b5919922de4437ea3344f54eaea.
-
- Applied in changeset commit:21165e6455f1402eb6b319dd515a6b43f0bb0e04.
-
- Works for me now.
The issue was related to just echo introducing a \n at the end. -
- The long story ( https://forum.pfsense.org/index.php?topic=86374.0 ) short:
When a prefix is delegated through DHCP ... - 02:36 PM Revision eab9d9c1: Fix spell typo spotted by phil-davis
- 02:35 PM Revision 8ec853c3: Fix spell typo spotted by phil-davis
-
-
-
- The config option for "use-caps-for-id" is missing from the Advanced tab of the Resolver config page. It's not critic...
- 01:50 PM Revision 0c5e61b1: Fix cut paste brain fade
- 01:49 PM Revision 3fbfbe90: Restart PHP-FPM allow to setup ini file
- I was just using console menu option 16 Restart PHP-FPM and it hung on a nanoBSD system.
I found /tmp/php_errors.txt ... - 01:49 PM Revision b73e9bc2: Merge pull request #1431 from phil-davis/patch-1
-
- CP is leaking resources on reload of rules or while reconfiguration.
This will show itself as pipes exhausted when... -
- I loaded that on nano and full, 32 and 64 bit, both on 2.2 and on 2.1.5 then upgraded to 2.2, and it never tries to s...
-
-
-
-
-
- This reverts commit 7077addc5a5058fab4b4dc7678270c1000d342c9.
-
- This reverts commit 7077addc5a5058fab4b4dc7678270c1000d342c9.
-
-
-
- Set the time limit to 0 and restore it back to default value when this is detected.
* Do not leak pipes when reloadi... -
- Set the time limit to 0 and restore it back to default value when this is detected.
* Do not leak pipes when reloadi... -
-
-
-
-
-
-
-
-
- Yeah, strongswan 5.2.2 does not fix anything here indeed.
-
-
-
-
-
-
-
- This should be resolved properly now.
-
- I pushed some fixes related to this that impacted even 2.2
Normally on a capable machine for this it should be ok.
... - 01:34 AM Revision 1aecc4da: Bring back showing of default value like previous versions.
- 01:33 AM Revision ab54ec9f: Bring back showing of default value like previous versions.
- 01:16 AM Revision 4fc1c68f: Do not return disabled dynamic gateways
- When a dynamic gateway is disabled (by the user through the webGUI), it was still being returned by return_gateways_a...
- 01:16 AM Revision 7f52fdd2: Merge pull request #1433 from phil-davis/patch-3
01/11/2015
-
- to replicate this, first copy the sysctl section from the attached config file to a 2.1.5 config file and then upgrad...
-
- this isn't true, most all configs have the sysctl items and the code that sets them reads their default value and set...
-
- i noticed when u have a config which u have been upgrading since long and now from 2.1.5 to 2.2, the system tunable e...
-
- That's functionally equivalent to what I was trying, which seems like it should work and does fix at least part of th...
-
- Applied in changeset commit:30656f66407ab42c6f42e9552371090ca84165bb.
-
- @Ermal - that fix only got applied to master. It needs to be in RELENG_2_2 also.
-
- the changes in strongswan 5.2.2 that help some FQDN circumstances don't change anything in this case. Where "right" i...
-
- log file from squid.log. There are a few things going on here..
Squid is unable to bind to port 80 for reverse pro... -
- Please see post https://forum.pfsense.org/index.php?topic=84638.msg474780#msg474780
/var/run/squid.pid isn't being c... -
- all characters are supported and work. Only way it reverts back is if the entire config reverts back, which would be ...
-
04:29 PM Bug #4201 (Rejected): pfSense user passwords: cannot contain - or ! characters?
- I was trying to set admin user passwords of the form "iodjf-oisdfj-123-oijdfs!-dsiofjs" with about 25 total chars
an... -
- fixed
-
08:37 AM pfSense Packages Bug #4059: library required by squid3 may be absent
- It looks like the problem originally reported in this issue has been resolved. Thank you, BB
-
- Forgot to mention: Stopping service doesn't kill squid processes:
php-fpm[64022]: /status_services.php: The command ... -
- I can confirm: Squid package is working. But looks like there is an another issue appeared: Squid package heats up my...
-
- No, would not be great. That would never be a good idea.
-
- Hello,
It would be great to have a new option to not sync passwords for auth users in config sync settings.
Cur... - 03:40 PM Revision fd607d14: configured gitignore for eclipse, add clean.sh
-
-
-
- 03:35 PM Revision 7c804c69: Some tweaks for global tpl considerations
- * pkg_mgr* - removed icon-hrefs with actual buttons
* system - made labels shorter, added label in content column too... - 03:15 PM Revision 2d375e81: Fix cut paste brain fade
- 03:09 PM Revision 8d848bdf: Do not return disabled dynamic gateways
- When a dynamic gateway is disabled (by the user through the webGUI), it was still being returned by return_gateways_a...
- 02:24 PM Revision 8a07e316: Merge branch 'master' into bootstrap
- Conflicts occured in copyright message (year-update) due to whitespace difference and themes/ which was removed
- 02:01 PM Revision 41ea4cf3: implemented widget drag/drop on index + storage
- replaced custom jquery-ui with default set of plugins
- 01:03 PM Revision fc03ca01: Fix POST typo in interfaces_assign.php
- Obviously a typo. But this section is inside:
if (isset($_POST['add_x']) && isset($_POST['if_add'])) {
and I cannot f... - 01:03 PM Revision 6bdb02d3: Merge pull request #1432 from phil-davis/patch-2
- 12:55 PM Revision 3f6930f7: Fix POST typo in interfaces_assign.php
- Obviously a typo. But this section is inside:
if (isset($_POST['add_x']) && isset($_POST['if_add'])) {
and I cannot f... -
- On 2.2 there is a macro in the drop-down list for destination that is "This Firewall" which covers all IP addresses o...
-
11:48 AM Feature #4194: Mass maintenance tools :-)
- Give my damaged brain some time, and it comes back to me (in the shower, this morning :D).
_(I seriously have brai... -
- perl isn't correctly installed for lightsquid to work. Manually installing perl and adding a couple of symbiotic link...
-
- I haven't posted this on the forum yet but it looks like the symbiotic links aren't being created for the anti-virus ...
01/10/2015
-
- Even though this is in feedback, I'm assigning it. (To Chris.)
-
-
- Normally this should be fixed as part of latest 2.2 and switch to strongswan 5.2.2.
Now the resolve to address is ... -
-
-
-
-
- 04:33 PM Revision 6eeca0ef: notices now presented as modal-popup
- 03:53 PM Revision 1d8c79cc: Restart PHP-FPM allow to setup ini file
- I was just using console menu option 16 Restart PHP-FPM and it hung on a nanoBSD system.
I found /tmp/php_errors.txt ... - 03:53 PM Revision 2d26ee5e: initial rewrite of package management pages
-
- Applied in changeset commit:e821f30e7dd50285cf0c590d205409bb53cf3d6a.
-
- base64 is a better solution, implemented now.
-
- activated on master branch.
-
- 01:02 PM Revision 31f03b6c: re-added shortcuts/, global tpl updates
- * merged fbegin into head.inc, rename fend to foot.inc
* consistency: head.inc now outputs '<body>'; foot outputs '</... -
- Pfsense: 2.2-RC (amd64) built on Sat Jan 10 03:54:06 CST 2015
Squid: 3.4.10_2 pkg 0.2.2
Installation works fine ... -
- Pfsense: 2.2-RC (amd64) built on Sat Jan 10 03:54:06 CST 2015
Squid: 3.4.10_2 pkg 0.2.2
Issue with transparent p... -
- Just tested the new package, still transparent proxy does not work. In the logs I get "TAG_NONE/400" and the client g...
- 04:08 AM Revision ed5c6e89: Default to only AES and SHA1 for new P2s.
- 04:08 AM Revision c39feb71: Default to only AES and SHA1 for new P2s.
- 04:01 AM Revision c5ddb6ad: Default IPsec to AES
- 04:00 AM Revision 6f7960c3: Default IPsec to AES
- 03:59 AM Revision c1826169: Default IPsec to main mode, unless mobile client.
- 03:59 AM Revision 460719c8: Default IPsec to main mode, unless mobile client.
01/09/2015
-
- the problem here is how ovpn_auth_verify passes the password to openvpn.auth-user.php. The latter does a urldecode, w...
-
-
-
-
-
-
-
-
-
-
07:35 PM Bug #3281: In certain cases, GRE interfaces are missing the "RUNNING" flag at bootup and will not function
- I have 2.2-RC (amd64) built on Fri Jan 09 09:55:04 CST 2015 FreeBSD 10.1-RELEASE-p3 installed on Hyper-v 2012 R2
I a... -
- all good, could clearly replicate different scenarios on a version prior to the fix date, and they work fine on a ver...
-
- this seems to be working, will leave for others' confirmation.
-
- Please try pkg version 0.2.2
-
- all the circumstances that work in 2.1.x confirmed good
-
- Just kicking this so maybe we can get it resolved.
-
- as suspected after previous fixes, this doesn't work, it only shows the first up.
-
- works
-
- works. Cleans up lists like the DROP list to work, and prevents loading of aliases containing bunk data that'd blow u...
-
- fixed again
-
- this is fine as is for now, will revisit for 2.2.1
-
- Please try pkg version 0.2.2
-
- The commit that was done been commented out in the code now.. Which would reopen this issue.
Would it be an option... -
- works
-
- it's there on 2.2-RC both 32 and 64 bit, nano and full. It's not a symlink and never has been. I double checked the o...
-
- In the thread you referred to, Jim, Volker made another good mass maintenance suggestion:
[quote]
The other reall... -
- Thank you, Jim: how could I have overlooked that?(?) Even more: as I have used them in the past(!) (But there was som...
-
- The mass disable/enable/copy function is good, but the second bit you describe is essentially already there with Inte...
-
- G'day :D
As I wrote here:
https://forum.pfsense.org/index.php?topic=86254.15
If you would want, at least in ... -
- +1 for me too, and also +1 for Volker's suggestion.
-
09:38 AM Bug #3383: Web GUI becomes slow or unusable if the LDAP server used for GUI auth is unreachable
- Renato Botelho being able to revert to local DB is a useful workaround compared to the current process of having to e...
- 08:51 AM Revision 2cbcc256: Unbound is compiled with libevent so setting this to always be 4096.
- 08:23 AM Revision ad04bbbf: Allow for overhead and up maximum limit from 8 to 32, also only set it if its set to 4 or above. Fixes https://forum.pfsense.org/index.php?topic=78356.msg472781#msg472781
-
- Sorting is already a feature request: #3506
The sections part may be something to consider though. -
- Sorry, pushed 'send' before filling the classification fields :-(
-
- G'day :D
My aliases are a mess; I have many of them, and I need to reorganize this. Now, one thing that is making ... - 07:14 AM Revision 557c21da: After the other set of changes had unexpected complications, let's back this out too. Revert "PEAR static method call warning"
- This reverts commit 4751f76a6772147097906b699d4216ae38c58c39.
- 07:13 AM Revision 3529ac32: After the other set of changes had unexpected complications, let's back this out too. Revert "PEAR static method call warning"
- This reverts commit 4751f76a6772147097906b699d4216ae38c58c39.
- 06:40 AM Revision 0515117e: This broke a variety of things. Revert "Deprecated and non-static method messages"
- This reverts commit 91b9a02fb131746c67fdf9f34282f123a13f1b13.
- 06:40 AM Revision 23ca5695: This broke a variety of things. Revert "Deprecated and non-static method messages"
- This reverts commit 91b9a02fb131746c67fdf9f34282f123a13f1b13.
- 06:20 AM Revision 0391b39b: PEAR static method call warning
- Forum https://forum.pfsense.org/index.php?topic=86478.0
PEAR is used by
IPv6.inc
auth.inc
captiveportal.inc
radius.in... - 06:20 AM Revision 79ac2ee0: Merge pull request #1427 from phil-davis/PEAR-static-methods
- 06:18 AM Revision ecefba29: disable this PHP error logging, errors that are really significant end up with a crash report, this is more noise than useful at this stage in 2.2.
- 06:17 AM Revision e8e494f3: disable this PHP error logging, errors that are really significant end up with a crash report, this is more noise than useful at this stage in 2.2.
- 04:19 AM Revision 4751f76a: PEAR static method call warning
- Forum https://forum.pfsense.org/index.php?topic=86478.0
PEAR is used by
IPv6.inc
auth.inc
captiveportal.inc
radius.in... -
- confirmed working
01/08/2015
-
- Not seeing it.
[2.2-RC][admin@<Yeah, no>]/root: cat /etc/version*
2.2-RC
Thu Jan 08 19:13:15 CST 2015
d97dd424371014... -
- on 2.2 beta I have ldd /usr/local/sbin/check_reload_status with all libs ok
/usr/local/sbin/check_reload_status:
... -
-
-
-
-
- package build options are updated and pbi rebuild.
- 08:26 PM Revision bad9dec5: Deprecated and non-static method messages
- Fix various files that can emit messages like:
PHP Strict Standards: Non-static method SimplePie_Misc::array_unique(... - 08:25 PM Revision dd0ad62c: Merge pull request #1426 from phil-davis/deprecated-stuff
- 07:35 PM Revision 91b9a02f: Deprecated and non-static method messages
- Fix various files that can emit messages like:
PHP Strict Standards: Non-static method SimplePie_Misc::array_unique(... -
- yeah this did break that scenario
-
- This broke https://redmine.pfsense.org/issues/4129 again.. it really needs different reqid's for each P1 if unity is ...
-
- Just need to check if the IKEv1 tunnels with many phase2 are still usable with pfSense to some other product Chris.
... -
- This is confirmed fixed on the most recent snapshot, but adding a ticket for tracking purposes.
check_reload_stat... - 06:17 PM Revision 7c1c70d5: Improve URL and URL ports alias update data:
- - Move redundant code to a function parse_aliases_file(). Before the max
number of items was not being respected when... - 06:16 PM Revision 6d1907a3: Improve URL and URL ports alias update data:
- - Move redundant code to a function parse_aliases_file(). Before the max
number of items was not being respected when... -
- to me for testing
-
- Patch provided by Microsoft applied, ready for tests on next rounds of snapshots
-
-
- Applied in changeset commit:2ecb2dafa5fa78388fd72c3360495f734cb5633c.
-
- Applied in changeset commit:ac8f75f1e046b32c88693ff0c6854b7f641cf206.
-
- to me for further testing
-
-
- Ermal: the test box at 172.27.44.52 has the test case setup we talked about earlier, where the "pass out" rules speci...
-
- strongswan 5.2.2 may fix, otherwise disabling unity plugin should work around, awaiting feedback
-
-
-
- fixed
-
- Applied in changeset commit:9156a51d0cb8f7124be3c173ea9bebc057f662b5.
-
- Applied in changeset commit:ce997e6a88e9eb23c03b73f89d38257ce37a4023.
- 02:26 PM Revision ae952a03: Unobsolete libcurl.so.4 since it's installed by recent versions of curl package
- 02:26 PM Revision 1ba50154: Unobsolete libcurl.so.4 since it's installed by recent versions of curl package
-
- fixed
-
- Added a workaround for this.
- 01:08 PM Revision d10a1662: Fix check for cookies, the way it was implemented didn't work because it would need a refresh to check if cookie was set or not. Use javascript to do a simple test
- 01:08 PM Revision a980b284: Fix check for cookies, the way it was implemented didn't work because it would need a refresh to check if cookie was set or not. Use javascript to do a simple test
-
- Applied in changeset commit:7c1c70d5ea751213307fec9e522a7f032c0c9499.
-
- Applied in changeset commit:6d1907a3d2d9729f37fe15d0291d3a0f9a85a25e.
- 12:26 PM Revision 9156a51d: Add a value to cookie, otherwise it's not set. Before my last change parameters were out of order and expiration time was being set as value. It should fix #4069
- 12:15 PM Revision ce997e6a: Add a value to cookie, otherwise it's not set. Before my last change parameters were out of order and expiration time was being set as value. It should fix #4069
-
-
- 06:05 AM Revision f585d06e: some lagg modes are missing vlanmtu, but work fine with VLANs. Work around it for now at least. Ticket #4186
- 06:03 AM Revision 21e2561f: some lagg modes are missing vlanmtu, but work fine with VLANs. Work around it for now at least. Ticket #4186
- 05:48 AM Revision 2727e3fc: Also include /127 for IPv6, it works fine. Ticket #3657
- 05:47 AM Revision 8948f125: Also include /127 for IPv6, it works fine. Ticket #3657
- 05:42 AM Revision 13358d35: Allow for configuring /31 masks on interfaces.php. The rest of the code was updated accordingly some time ago, and an employee with Cox Communications has confirmed this allows things to work on their circuits deployed with /31s. Ticket #4190
- 05:39 AM Revision aac1c1db: Allow for configuring /31 masks on interfaces.php. The rest of the code was updated accordingly some time ago, and an employee with Cox Communications has confirmed this allows things to work on their circuits deployed with /31s. Ticket #4190
-
05:28 AM Revision 74017e32: "Like with like" - move a few functions to better places in the code (they are placed strangely)
- A few functions such as ipcmp(), subnet_expand(), and check_subnets_overlap() are in illogical places - away from al...
- 05:28 AM Revision 564978ad: Merge pull request #1425 from stilez/patch-2
- 05:04 AM Revision 05b47f2d: fix up text
- 05:04 AM Revision b25ccd04: fix up text
- 03:00 AM Revision 6be58d9d: fix strongswan conf file generation with ipcomp. Ticket #4182
- 02:59 AM Revision 2a691e34: fix strongswan conf file generation with ipcomp. Ticket #4182
-
02:55 AM Bug #4191 (Resolved): GRE interface not in RUNNING state after reboot
- When using GRE in combination with IPSEC transport mode the GRE interface never gets to RUNNING state after reboot. A...
-
- I tested by have an OpenVPN server setup in English, then switch language to Turkish. The words for "Local Database" ...
-
- I can't easily test this, but the change looks good to me and Renato, and I trust Phil to get it right. If there are ...
-
- Heh i even saw that issue but apparently did not include in the fix.
Thx Chris.
01/07/2015
-
-
-
- this has been fixed in 2.2
-
- works.
related forum thread:
https://forum.pfsense.org/index.php?topic=83741.msg467113 -
- The back-end work for this was done a while back, but not exposed in the GUI as FreeBSD 8.x lacked support. An employ...
-
- A few functions such as ipcmp(), subnet_expand(), and check_subnets_overlap() are in illogical places - away from al...
-
- Testing isn't an issue, assign it to me once the patch is in.
-
- Assigning this to Ermal, as Microsoft has given us a patch.
(Testing is a whole different problem.)
If the patc... -
- fixed
-
-
-
-
-
- that broke the conf files, but is now fine with the commits I just pushed.
-
- Applied in changeset commit:40cc36d165ebe44f423554e9bc411f17161fea3b.
-
- Applied in changeset commit:45efe1b672f16a5c4b1e856f1deb2e55dde1c6e4.
-
- With racoon compression is always enabled on the connection while with strongswan default value is to off.
Even th... -
- confirmed the new snapshot with this fix fixes the circumstances where we were seeing this.
-
- Applied in changeset commit:f8e23dc8c4f6c333621e4fb44e8fc1f3ef1dd60c.
-
- Applied in changeset commit:4a3ce17a7e3926cce3bf2671965096db78f95932.
-
-
- FreeBSD allows up to ~16000 range of reqid on the SAs specified manually.
There are problems with the IPsec SA track... -
- With Renato's steps I could replicate the issue. the base64 encoding works, and does fix it.
-
- Cleaned that up. The existing 512M systems out there will fail auto-update checks now, but they didn't upgrade succes...
-
-
- 07:26 PM Revision 2f56ac49: Don't hard code the target IP in auto-generated outbound NAT rules, use
- previous behavior of setting it to the interface IP.
- 07:25 PM Revision b9f290bd: Don't hard code the target IP in auto-generated outbound NAT rules, use
- previous behavior of setting it to the interface IP.
-
-
-
-
-
-
-
-
-
- #4189 is actual root cause
-
- This one seems to be a side-effect of this a bogus url(IPs) alias like described here: https://redmine.pfsense.org/is...
-
- the issue as described doesn't exist. There could be some unusual edge case but I don't see how, our test environment...
-
- error "macro IPsec not defined" caused by ipsec connection initiated from a carp-ip/interface
on reboot (and rando... - 06:49 PM Revision 3add5b2d: fix text
- 06:48 PM Revision 2a8a09a9: fix text
- 06:47 PM Revision d2884b9a: fix spelling of compression
- 06:47 PM Revision e57a3e40: fix spelling of compression
-
- url alias with ip's not loading correctly.
01-08-15 01:05:28 [ There were error(s) loading the rules: /tmp/rules.d... -
- The checkbox to disable IPv6 only blocks all IPv6. If you leave IPv6 enabled elsewhere, it'll block it, and cause thi...
-
04:40 PM Bug #4187 (Rejected): dhcpv6 client settings override system defaults
- Hi,
It's my first bugreport here, so please be gentle.
I noticed routing system logs (system logs -> routing) g... -
-
- Thanks, that's what I was wondering. It's 3 of the modes where lagg stops reporting itself as VLAN-capable.
-
04:17 PM Bug #4186: VLANs on lagg not configurable with FEC, LB and RR modes
- To be more precise: The drop down boxes on interface_vlan_edit.php only show igb0 to igb3, but not lagg0.
-
- For me it is not possible to create a vlan tag on top of the lagg0 interface. I am currently investigating /etc/inc/i...
-
- what do you mean it doesn't allow you to create tagged interfaces on the lagg? That works fine, we have several syste...
-
- Hi,
i created different variants (simple virtualbox (3× pcn, 3x em), lanner 7535 (6x EM), supermicro c2758 board (6x... -
- fixed
-
- Applied in changeset commit:4ab1ffa0b042e4fda87d66de2fd74a1e6db48272.
-
- Applied in changeset commit:d4e894f6a6f464fd00e39356a23586f8420b31af.
-
- Also retires IPsec force reloading advanced sysctl since its useless nowdays with strongswan and remove its call on r...
-
- Also retires IPsec force reloading advanced sysctl since its useless nowdays with strongswan and remove its call on r...
-
- Pushed a sysctl to be able to disable unity plugin as a workaround.
-
- The box does what it's intended to do. It disables sending firewall _notifications_ via SMTP. Other subsystems may by...
-
- It looks like /etc/inc/notices.inc function notify_via_smtp() correctly checks the disabled setting, so anything that...
-
01:04 PM Bug #4184 (Rejected): Disable SMTP Notifications
- In SYSTEM>ADVANCED>NOTIFICATIONS>SMTP E-Mail, even selecting the "Disable SMTP Notifications" option, still keeps sen...
-
- Thanks gen_subnet() is fixed, however issue #4141 still exists as ip_in_subnet(11.22.33.5,abcd::/64) needs fixing to.
-
- fixed
-
12:55 PM Bug #4183: Dashboard System Information CPU bar at 100% when actually idle
- FYI, I investigated further and found it was the Chrome Add-on AdBlock that was causing the CPU bar to remain on pend...
-
- that's not showing 100%, that's what it shows before it updates at all (that's showing "pending" essentially).
-
- That's not a "full red bar" - see the stripes there. Means the graph is still loading (takes 10 secs to settle).
-
- The Dashboard - System Information shows CPU with full red bar - implying 100% CPU usage but numerical value under th...
- 11:24 AM Revision 4ab1ffa0: Fix #4146:
- OpenVPN create the tun/tap interface and, when set an IP address to
it, mark it as UP. In some scenarios, when TAP is... - 11:11 AM Revision d4e894f6: Fix #4146:
- OpenVPN create the tun/tap interface and, when set an IP address to
it, mark it as UP. In some scenarios, when TAP is... -
- Unlikely to be a problem in the export package. Please post in the forum for discussion until a bug is confirmed.
-
08:52 AM Bug #4181 (Rejected): Two OpenVPN Server, Client Export only works only for one
- When i have 2 OpenVPN Server on PFsense 2.2 and Client Export only shows the Export for the first Server.
DropDown "... -
- I'm one of the people initially have this issue:
https://forum.pfsense.org/index.php?topic=86056.msg472022#msg472022... -
- I do not think is anymore an issue now that the connections with multiple phase2 on IKEv1 get split on their own conn...
-
07:47 AM Feature #3633: OpenVPN client's "Client Certificate" should be optional
- Hi, Is anyone going to pull this into master for 2.2?
Thanks - 06:53 AM Revision be2d7eb7: Log PHP errors. Ticket #4143
- 06:47 AM Revision 19c8976b: Log PHP errors. Ticket #4143
-
- the original had a couple issues that I noted as comments in the comment, and Renato added one there as well. I imple...
-
- works
-
- what we now have is a good balance between not DDoSing ourselves and not giving up too easily.
-
- works
-
- this kind of thing seems simple enough, but adding a device can have fallout. For 2.2, you can copy over the ko and k...
-
- this exhibits the behavior I was seeing in a fix I attempted, then got sidetracked on other things after not quickly ...
01/06/2015
-
-
- 08:55 PM Revision c8d87d2a: Remove useless check, CARP does not depend of interface having another IP set before
- 08:54 PM Revision b5686214: Remove useless check, CARP does not depend of interface having another IP set before
-
- the specific issue is the "pass out" isn't getting routed out via the correct interface. As responder it's fine, as i...
-
- test setup details on the IPsec test list wiki page
- 05:17 PM Revision 3ffea319: Remove some extra spaces
- 05:17 PM Revision d9db4862: Fix typo on variable name
-
- Tightens, canonicalises and improves for IPv6, the functions
gen_subnet(), gen_subnetv6(), gen_subnet_max(), gen_subn... - 05:16 PM Revision 3bad4691: Remove some extra spaces
- 05:15 PM Revision 3f499654: Fix typo on variable name
-
- Tightens, canonicalises and improves for IPv6, the functions
gen_subnet(), gen_subnetv6(), gen_subnet_max(), gen_subn... - 02:22 PM Revision 0bd024d0: OpenVPN backend authentication fix key and translation
- The array returned by auth_get_authserver_list() has key as the fixed name of each available authentication mode - e....
- 02:22 PM Revision 06cb724b: Merge pull request #1422 from phil-davis/patch-1
- 01:44 PM Revision d8540659: Revert "FreeBSD fails to set advskew back to 0 after you set it to any other"
- A patch was added to allow set advskew back to 0
This reverts commit eea2ad5d61b2cbcf2957207fb0f13769c203cb36. - 01:44 PM Revision 57f58894: Revert "FreeBSD fails to set advskew back to 0 after you set it to any other"
- A patch was added to allow set advskew back to 0
This reverts commit eea2ad5d61b2cbcf2957207fb0f13769c203cb36. - 12:01 PM Revision b785a40b: Add secure flag when necessary to cookie_test, as we do for session cookie, to avoid false positives in common vulnerabilities scanners. It fixes #4069
- 12:00 PM Revision 39c50234: Add secure flag when necessary to cookie_test, as we do for session cookie, to avoid false positives in common vulnerabilities scanners. It fixes #4069
-
- Pull request has been merged.
-
- Chris Buechler wrote:
> stilez has an ICLA on file now so we can merge that. It looks fine to me, to Ermal for revie... -
- I targeted it to 2.2.1, it'll be committed to RELENG_2_2 after 2.2 is released, and a gitsync will bring it to 2.2. I...
-
- Hi,
Not a huge issue, just trying to understand - so this won't be included in the near future? Only asking becaus... -
- Provide a better description and move it to future since we are in RC
-
- Merged, thanks!
-
- Should be ok on next snapshots
-
- Applied in changeset commit:b785a40bac3b2aeee993fd3302eff7e781654586.
-
- Applied in changeset commit:39c502347d5a87a2376f74b912c1281ba79131ee.
- 01:42 AM Revision 91454850: OpenVPN backend authentication fix key and translation
- The array returned by auth_get_authserver_list() has key as the fixed name of each available authentication mode - e....
01/05/2015
-
- I'm testing on a production system where I've been looking into a separate IPsec issue as well. Now setting up a test...
-
- Proposed fix: https://github.com/pfsense/pfsense/pull/1422
-
- Forum: https://forum.pfsense.org/index.php?topic=86326.0
The code is using the text of the translated name to try an... - 06:57 PM Revision 055bd1ee: Allow IPv6 on loopback needs quick
- The following block uses "quick" which causes that block to come into effect before the "pass in" here. The pass rule...
- 06:57 PM Revision 386788e2: Merge pull request #1419 from phil-davis/patch-2
- 06:56 PM Revision 91a84a26: Limit unbound so-rcvbuf: 8m
- Issue reported here: https://forum.pfsense.org/index.php?topic=78356.msg472781#msg472781
Most unbound doc places ment... - 06:56 PM Revision 6d8dadb5: Merge pull request #1420 from phil-davis/patch-3
- 05:44 PM Revision cfb5073f: Fix #4090:
- - Unbound advanced options may contain double quotes and it breaks the
syntax when a backup is restored because newli... - 05:41 PM Revision 0a23cddc: Fix #4090:
- - Unbound advanced options may contain double quotes and it breaks the
syntax when a backup is restored because newli... - 02:58 PM Revision 24149c31: It's supposed to remove windows EOL here, not ;
- 02:58 PM Revision 7f5c2669: Make it possible to backup/restore 'DNS Resolver' section individually
- 02:57 PM Revision fbf3d06e: It's supposed to remove windows EOL here, not ;
- 02:57 PM Revision fb130335: Make it possible to backup/restore 'DNS Resolver' section individually
-
- The driver oce (oce.ko) to support Emulex 10 GE NICs is missing from pfSense 2.2 RC but available and working in Free...
-
- Under some circumstance we haven't exactly narrowed down yet, having the Cisco unity plugin enabled in strongswan cau...
- 01:17 PM Revision 62403377: Do not monitor a gateway that has not got DHCP yet
- When an interface is waiting to get DHCP, but the cable is physically-electrically connected to the upstream device, ...
- 01:16 PM Revision fd9b1512: Merge pull request #1414 from phil-davis/patch-1
-
- Applied in changeset commit:cfb5073f83fa80e5b40476b12ea91ff5114c60fc.
-
- Applied in changeset commit:0a23cddced057d929c53f3ad1e5d6898a3fada50.
-
- Confirmed. Steps to reproduce on 2.2:
* Configure DNS Resolver Advanced Options with the following content... -
08:06 AM Bug #4090: unbound advanced settings cause broken unbound.conf file
- Jim P wrote:
> Any chance we could get the exact config.xml section that exhibited the problem?
Attached is the f... -
- please replicate on stock FreeBSD 10.1 and report upstream
-
- Confirmed that pull request 1421 code is working for the user in forum: https://forum.pfsense.org/index.php?topic=862...
-
08:36 AM
Bug #4177: Bug in OpenVPN user/pass auth
- For instance if the password ends with a +
-
- I think Ermal was fixing some of that. Give an example of final char/s that still do not work on latest snapshots - t...
-
07:18 AM
Bug #4177 (Resolved): Bug in OpenVPN user/pass auth
- As stated in https://forum.pfsense.org/index.php?topic=85311
OpenVPN user/pass auth fails if passwords end on spec... -
- After the fix is pushed, revert commit:eea2ad5d
-
- The bug described in this ticket is resolved. The maintenance mode issue will be fixed when #3910 fix is pushed and c...
-
- Pull request merged
-
02:37 AM pfSense Packages Feature #3685: haproxy listener ip from alias
- Hi,
I had added before this feature to the my own haproxy.
Thanks for the feature.
01/04/2015
-
- works, thanks
-
- the original issue here is fixed, and this looks to work fine in general.
Richard: if you can re-test with 2.2 an... -
- Do you have a test case setup?
When you do, let's assign this to Ermal. -
- I'm not sure how to test this. (I don't want an Office365 Mail account.)
-
- Proposed implementation of this: https://github.com/pfsense/pfsense/pull/1421
It works for me on a mail server that ... -
- This may apply to more than Office365 mail, but it does impact this mail system for sure. Details (and the fix) are a...
- 04:37 PM Revision 305856e8: Support for Office365 Mail
- https://redmine.pfsense.org/issues/4176
Allow the user to choose SMTP authentication mechanism PLAIN or LOGIN.
For ex... - 04:33 PM Revision c4249322: Support choice of SMTP Authentication Mechanisms
- https://redmine.pfsense.org/issues/4176
I have left some documentation here of other mechanisms that someone might ca... - 03:19 PM Revision 4708c6f0: Limit unbound so-rcvbuf: 8m
- Issue reported here: https://forum.pfsense.org/index.php?topic=78356.msg472781#msg472781
Most unbound doc places ment... - 02:32 PM Revision c876b212: Allow IPv6 on loopback needs quick
- The following block uses "quick" which causes that block to come into effect before the "pass in" here. The pass rule...
- 01:59 PM Revision f79f9497: completed confbak and backup/restore
-
- I've included some ability to use aliases, and add multiple ip's in 1 frontend. Does this satisfy your needs?
-
- Using the 'shared frontends' its possible to define acl's for different backends, this should allow for 'most' common...
- 11:57 AM Revision 7d5b007c: initial drag/drop WIP, working on backup/restore page
-
- Well noted Andy, the pass was not having effect. It needs "quick" on that pass rule.
Pull request: https://github.co... -
- And some updates for apcupsd (hope this info helps!).
Thanks!
-
- Hi,
Hopefully this is helpful info, but here is another package that still need a minor / slight correction (detai...
01/03/2015
-
10:37 PM Bug #4175 (Rejected): kernel panic when loading run driver for RT3070
- I get a kernel panic whenever trying to load the run wireless driver on the 2.2-RC i386 snapshots:
<118>Configurin... -
10:28 PM Bug #4074: Status NTP does not display any result if IPv6 Allow is off
- I'm still seeing IPv6 lo traffic blocked in the Fri Jan 02 14:50:21 CST 2015 2.2-RC build. Screenshot attached and ex...
-
05:33 AM Feature #4133: Add GUI setting for VLANs PCP
- I just realized that the blob in the git diff regarding configuration compatibility has a few missing brackets. I gue...
01/02/2015
-
- Still quantifying exactly what's happening here, it's hit and miss. Some ISAKMP and/or ESP traffic ends up following ...
-
03:20 PM Todo #4173 (Resolved): Web site cleanup - deprecated 512 MB images
- In the pfsense IRC channel last night, someone was having problems with the 512 MB images in
http://updates.pfsens... - 03:07 PM Revision 5a158a29: Fix track6 prefix id range check, reported by jimp
- 03:07 PM Revision eef5aeeb: Fix track6 prefix id range check, reported by jimp
- 11:25 AM Revision 8c46314c: Allow blank source port in diag_testport
- Reported by forum https://forum.pfsense.org/index.php?topic=86146.0
Also, if there are input validation errors, save ... - 11:24 AM Revision 9fd02f60: Merge pull request #1418 from phil-davis/patch-2
- 10:49 AM Revision a3c9510c: Allow blank source port in diag_testport
- Reported by forum https://forum.pfsense.org/index.php?topic=86146.0
Also, if there are input validation errors, save ... -
- Should be fixed by commit:5a158a29698405a1d3ee759dcbf9a95f9150e12e
-
- Seems to break when WAN is set to a /64 delegation. Saving LAN with an ID of 0 is rejected, though it is valid.
-
- Applied in changeset commit:22c884d104498547356e6144b6a0c22300085b22.
-
08:06 AM
pfSense Packages
Bug #3729: Bacula-client Services not running
- Can confirm this still exists in 2.1.5.
-
- Merged
-
- Proposed fix https://github.com/pfsense/pfsense/pull/1418
-
- Leaving the source port blank results in a warning that the source port should either be valid or left blank.
Report... -
- [2.2-RC][root@pfs22amd64.home]/root: ldd /usr/local/bin/nsupdate
/usr/local/bin/nsupdate:
libreadline.so.6 => /usr... -
-
01:53 AM Bug #3886: (TurkishLanguage) After the firewall rule for example (lan rule) does not come "Apply Button"
- https://forum.pfsense.org/index.php?topic=78795.0
-
- fixed
01/01/2015
-
09:15 PM pfSense Packages Bug #4078: NUT fails to start with USB
- This issue can be closed. It is addressed by 4118.
-
- should be accurate on 2.2, I don't recall for sure on 2.1.5.
-
05:06 AM Bug #1974: Captive Portal RADIUS accounting bytes wrong
- This problem seems to still exist on 2.1.5-RELEASE (amd64). The radius accounting logs say the amount of data used ov...
-
- fixed
-
- that's how things have to work. Traffic from clients in those circumstances should be hitting rules specifying gatewa...
-
- discussed here
https://forum.pfsense.org/index.php?topic=85059.0 -
- when u set a gateway monitoring IP, it results in all traffic going out of that gateway only, it would be better if o...
-
03:19 PM Feature #4171 (Resolved): Allow for one rule to apply to both ipv6 and ipv4 to allow all protocols.
- Spawned from a question posted to twitter by me:...
- 12:13 PM Revision 6317d31d: Fix lineup of copyright lines
- and module names and other bits of formatting and typos in header
comment sections. - 12:13 PM Revision d4b2cd35: Remove duplicate copyright
- Noticed these had the copyright twice
- 12:12 PM Revision 0e25a6b9: Merge pull request #1416 from phil-davis/Copyright-format
- 12:12 PM Revision 183c08d1: Merge pull request #1415 from phil-davis/copyright-dup
- 09:26 AM Revision ce77a9c4: Fix lineup of copyright lines
- and module names and other bits of formatting and typos in header
comment sections. -
- FYI, i did send a new pull request https://github.com/pfsense/pfsense/pull/1403 as the other one was closed.
- 03:10 AM Revision 7f696ba0: Remove duplicate copyright
- Noticed these had the copyright twice
12/31/2014
- 10:18 PM Revision 1d709219: Use binat, not nat, where IPsec NAT is configured with an address for local and NAT. Ticket #4169
- 10:17 PM Revision d6726bcb: Use binat, not nat, where IPsec NAT is configured with an address for local and NAT. Ticket #4169
- 06:22 PM Revision d961e7e3: Welcome 2015
- 06:22 PM Revision ed2d1343: Welcome 2015
- 05:24 PM Revision 2d793d01: Do not monitor a gateway that has not got DHCP yet
- When an interface is waiting to get DHCP, but the cable is physically-electrically connected to the upstream device, ...
-
- looks to be fixed, leaving for further testing
-
- Where the NAT on a P2 is from an address to an address, the NAT rule is wrongly added as "nat" rather than "binat".
... -
- thanks Phil. Yeah v6 goes through the same thing, it worked fine as well.
-
- Note: I have only tested with IPv4. But I presume the same problem, test case and resolution should work for IPv6 in ...
-
- Tested by:
Test system with WAN connected to a local LAN through a switch, switch uplinked to a production pfSense t... - 02:54 PM Revision 16a0f334: Add config upgrade code to make sure iketype is set, bump config version to 11.4. It fixes #4163
- 02:54 PM Revision 368d4910: Add config upgrade code to make sure iketype is set, bump config version to 11.4. It fixes #4163
- 02:27 PM Revision c95bb533: libreadline.so.6 is not supposed to be obsoleted, fixes #4159
- 02:26 PM Revision 7cb2ebe7: libreadline.so.6 is not supposed to be obsoleted, fixes #4159
-
- Target version set back to 2.2.
The issue is that it's slow.
I made an assignment yesterday. I'm restoring it ... -
- 2.2 doesn't run out of memory doing this, so the problem as it existed in earlier versions is gone (probably with the...
-
- Got annoyed about my DynDNS status attached to a gateway group showing the IP address in red, and realised it was a d...
-
- Well, in that case you should at least put a big fat warning on the docs. I am new to pfSense and when I add a module...
-
- That is a known issue with all add-on packages which include their own web interfaces. Unless they have their own pro...
-
- The result pages produced by bandwithd can be accessed without a login when knowing the url (which does not contain a...
-
- Applied in changeset commit:16a0f33446b3fffc6783803fad56f3b71eceb78c.
-
- Applied in changeset commit:368d491073eecbb3ff89e016c4308ca5bad86860.
-
- Applied in changeset commit:c95bb5333cc5dfdc23fc1999ba9ac4935190eea5.
-
- Applied in changeset commit:7cb2ebe7550ca328661ec12f380d4dc43b71dd30.
- 08:02 AM Revision 3cf56fb0: Allow IPv6 on loopback even where IPv6 is otherwise disabled. The intent of that feature is to prevent IPv6 from communicating on the network. Blocking it on localhost can result in issues and is unnecessary. Ticket #4074
- 08:00 AM Revision 4270d983: Allow IPv6 on loopback even where IPv6 is otherwise disabled. The intent of that feature is to prevent IPv6 from communicating on the network. Blocking it on localhost can result in issues and is unnecessary. Ticket #4074
- 05:14 AM Revision 36dbc3ae: Reload Unbound after IP changes, to fix issues noted in Ticket #4095. Do so before Dynamic DNS updates occur to ensure the host has functioning DNS.
- 05:10 AM Revision 1c84a5f1: Reload Unbound after IP changes, to fix issues noted in Ticket #4095. Do so before Dynamic DNS updates occur to ensure the host has functioning DNS.
-
03:53 AM Bug #2882: 6RD not working in latest snapshots
- I've been trying to get this working for a week now with no success. I have the latest (as of tonight) snapshot inst...
-
- When removing the Lightsquid package, it did not remove the crontab entries, removing the package should not do this?...
- 02:43 AM Revision 1142d9a0: IPsec Widget allow for old settings that have no iketype
- as mentioned in https://forum.pfsense.org/index.php?topic=84527.msg471919#msg471919
This change makes it work like si... - 02:42 AM Revision 7b43825e: Merge pull request #1412 from phil-davis/patch-2
-
- there is a test case for this on 22vpntest. The tap interfaces are missing "UP" in flags. ...
- 02:40 AM Revision 6e26b9c5: Allow for old settings that have no iketype
- This bit of code looks like it could do with the same test as https://github.com/pfsense/pfsense/pull/1412
This is ex... - 02:40 AM Revision 55dec416: Merge pull request #1413 from phil-davis/patch-3
-
- to me for review
- 02:12 AM Revision c8c4520a: Only set route-to and reply-to on ESP and ISAKMP rules if the remote endpoint is not within the parent interface's subnet. Ticket #4157
- 02:11 AM Revision a7f2eea8: Only set route-to and reply-to on ESP and ISAKMP rules if the remote endpoint is not within the parent interface's subnet. Ticket #4157
-
- not something we'll be able to get fixed in 2.2. needs testing and reporting upstream, not something I can make a pri...
-
- As a general fix for the issue of blocking v6 to loopback, I went ahead and committed a change to pass v6 on loopback...
-
- This seems to be limited impact. 32 bit is minority, and it's an unusual circumstance. I can't seem to replicate it e...
-
- SSLv3 was disabled already in 2.2, I disabled the RC4 options a bit later in 2.2.
-
- confirmed on a handful more systems with a variety of configs, a good mix of ones that need the route-to/reply-to and...
-
- When you have FQDNs in aliases, and the system clock jumps significantly (talking years), it creates a flood of DNS r...
-
12:24 AM Feature #4165 (Rejected): Allow for security zones when defining interfaces and firewall rules.
- I have experience using CheckPoint and PaloAlto appliances with "zone" features. This allows you to group networks\in...
12/30/2014
-
11:22 PM Revision 430f8380: Check for fqdn peerid/myids and prepend @ so strongswan does not try to be smart. Also use %any for myid instead of risking of putting the wrong value in the secrets file for traffic selector
-
-
-
- 11:14 PM Revision 68f0da59: ipsec_smp_dump_status get out of loop if error
- when reading response from socket.
Otherwise it would be in a loop and end up like: https://forum.pfsense.org/index.p... -
-
- I just committed what should be a solution for this. Phil and Bipin if you could please verify on 31st snapshot (or g...
-
-
-
-
-
- 09:12 PM Revision 3b2c83b8: initial commit of new firewall_rules
- css - add styling for tr.disabled
firewall_rules - migrated to bootstrap
guiconfig - changed alias-popup to be displa... -
- yeah seeing that now, the proper v4 IP is put into the config for ID, but the "right" ipsec.conf entry has the hostna...
-
- Did not even look at the configs... Go to Phase 1 - put a dual-stack FQDN there. Go to Status - IPsec, select the ent...
-
- where? Not seeing that. I have the same circumstance setup and everything in /var/etc/ipsec/ has the v4 IP, everythin...
-
- should be fixed, leaving for further verification
-
- stilez has an ICLA on file now so we can merge that. It looks fine to me, to Ermal for review.
-
- this works. the only issue introduced by this that I've found is the status widget issue in #4164
-
- fixed
-
- Applied in changeset commit:7f69cbe7d442650671fe29a2d4804fbd77bc9855.
-
- Applied in changeset commit:c86c2b8b7d7e3eedbc68d3ed67ed5a7e88052086.
-
- "ipsec statusall" reports connections with multiple P2s as being a single connection, which breaks the active/inactiv...
-
- Upgraded configs don't have <iketype> added, which leaves some things non-functional until editing and saving the P1s...
- 05:39 PM Revision 43531ed7: Allow for old settings that have no iketype
- This bit of code looks like it could do with the same test as https://github.com/pfsense/pfsense/pull/1412
This is ex... - 05:34 PM Revision d2cc92ec: Merge branch 'master' into bootstrap
- 04:35 PM Revision 86b429b3: IPsec Widget allow for old settings that have no iketype
- as mentioned in https://forum.pfsense.org/index.php?topic=84527.msg471919#msg471919
This change makes it work like si... - 03:58 PM Revision d50b4c30: implemented tabs
- interfaces.widget - no need to display associated state, the second icon
does that already
gui.css - no longe... -
- thanks, fixed
-
- Merged
-
- Fixed that spelling and other inconsistencies I noticed in the priv list test.
https://github.com/pfsense/pfsense/pu... -
02:38 AM Bug #4161 (Resolved): Misspelling in privilege "WebCfg - Services - Captiveprotal Zones page"
- Hello,
I am running pfSense 2.1.5-RELEASE (i386) .
ISSUE:
- The privilege "WebCfg - Services - Captiveprotal Z... - 12:55 PM Revision 6617b9bf: ipsec_smp_dump_status get out of loop if error
- when reading response from socket.
Otherwise it would be in a loop and end up like: https://forum.pfsense.org/index.p... - 11:47 AM Revision 13c6375b: Captive portal spelling
- 11:47 AM Revision ef0d25b3: Standardise text in priv list
- 11:47 AM Revision 565dcf3c: Merge pull request #1410 from phil-davis/patch-1
- 11:35 AM Revision e0273f44: Captive portal spelling
- 11:32 AM Revision 9006a538: Standardise text in priv list
-
08:45 AM Bug #4150: Captive Portal doesn't work with > 120 VLAN interfaces
- ICLA submitted. Thanks guys! Making me love pfsense more and more each day
-
- thanks, let's not break anything worse than it already is there, will push to 2.2.1
-
- Updated the pull request, though its not correct as implemented even as a workaround.
-
- Thanks!
Ethan: we'll need an ICLA from you to accept that.
To Ermal for review of pull request. -
- spent a lot of time confirming a variety of scenarios here. this as a whole is definitely working fine, in a wide ran...
-
- that's legitimately wrong syntax Bipin, not related to this, see forum.
-
- as soon as i enter the below line in advanced config box and hit save and apply, dns resolver stops working and wont ...
-
- fixed
-
- doesn't seem to be every WAN reconnection, I can't replicate it at will. I only see one instance of it happening in m...
-
- this doesn't seem to be as bad as it used to be, will revisit.
-
- still not seeing any way that sleep can hold up anything. Do you have specific steps to replicate?
-
- fixed
-
- fixed
-
- confirmed, fixed
-
- The first attempt to send a guest shutdown results in: ...
12/29/2014
-
- ...
-
- I just upgraded a test nanoBSD system with "Password protect the console menu" set. The setting was correctly impleme...
- 07:14 PM Revision 1180e4f0: started migration to bootstrap
- * migrated /index and most widgets on it
* migrated /system.php using new form-layout
* removed /themes and /javascri... -
- Since the switch to strongswan, any PSKs containing " do not work, it seems strongswan terminates the PSK right befor...
-
- Where your IPsec remote endpoint is on the same subnet as the local IP where it's bound, the "pass out" rules for ISA...
-
- Addressed here: https://github.com/pfsense/pfsense/pull/1409
-
- Ok, I did a little digging and I found out what's happening. IPFW isn't inserting all of the necessary CP rules becau...
-
- Thanks guys. So it looks like the exact number is 117 VLANS, but when I add any more, the captive portal starts letti...
-
- Any chance we could get the exact config.xml section that exhibited the problem?
-
- This was a 2.1.3 install into a VM, upgrade to 2.1.5, then upgraded to 2.2-RC (and again to the 12/24 snapshot). Ther...
- 02:48 PM Revision 55f910a3: Simplify cron array comparison
- This works fine - I had not thought about how arrays are compared. Using "==" checks that the key/value pairs match i...
- 02:48 PM Revision 71bd5ec1: Minimise config updates when checking cron jobs
- 02:47 PM Revision 16d2c13a: Merge pull request #1407 from phil-davis/patch-1
- 02:31 PM Revision aff83787: Simplify cron array comparison
- This works fine - I had not thought about how arrays are compared. Using "==" checks that the key/value pairs match i...
- 01:40 PM Revision 91145658: Backout pull request #1391
- https://forum.pfsense.org/index.php?topic=85944.0
Backout pull request #13191 - 01:40 PM Revision d9feefb1: Merge pull request #1408 from ExolonDX/master
-
- OpenNTPD had its own share of crashes and other bad behavior (See #2423 for one major example). The only thing it han...
-
- Chris Buechler wrote:
> Why people think it's better I don't know
Probably because it does not try to bind to unw... -
- openntpd is a buggy mess, we've been there, done that, and got rid of it for many reasons. Why people think it's bett...
- 11:51 AM Revision 40930f75: Backout pull request #1391
- https://forum.pfsense.org/index.php?topic=85944.0
Backout pull request #13191 -
- Pull request has been merged
-
- Pull request has been merged
- 06:53 AM Revision 994a0644: Minimise config updates when checking cron jobs
-
- That is likely a hardware-related lockup for which the OS can do nothing better. A true RAID adapter may handle that ...
-
- What pfSense version? 2.1.5? 2.2-RC?
-
12:52 AM Bug #4156 (Rejected): Raid Gmirror not failing graceully
- 1 Hard drive fails
System locks up (console unable to input on keyboard, no network traffic can't ping access web ...
12/28/2014
- 06:45 PM Revision 8f6875de: Fix unbound shortcut links
- Fixes redmine #4151
1) Make the naming in shortcuts.inc more clear - forwarder=dnsmasq
resolver=unbound
2) Make the v... -
- 10:51 AM Revision db88a3a2: Fix unbound shortcut links
- Fixes redmine #4151
1) Make the naming in shortcuts.inc more clear - forwarder=dnsmasq
resolver=unbound
2) Make the v... -
- Phillip Davis wrote:
> It happens after some WAN event that has potential IP change, and the OpenVPN clients are res... -
- It happens after some WAN event that has potential IP change, and the OpenVPN clients are restarted. About 20 seconds...
-
- i have a stable internet connection on the alix and i just noticed the same behaviour
-
- Phillip Davis wrote:
> The 2 APUs I have do not have any ntpd exited messages. That could be because the 64-bit ntpd... -
- My Alix boxes do it also. Here is an example:
@$ clog /var/log/system.log | grep signal
Dec 24 13:16:36 skt-rt-01 k... -
- Seeing this on tons of Alix boxes. (Frankly had to install Service Watchdog package to keep ntpd running, it crashes ...
-
- Same changes now in https://github.com/pfsense/pfsense/pull/1405
That pull request is a single commit - easier to ma... -
- Same changes now in https://github.com/pfsense/pfsense/pull/1405
That pull request is a single commit - easier to ma... -
- Same issue for openvpn tap clients! everything is UP and RUNNING but iface is DOWN.
12/27/2014
-
-
- And more things I noticed - the Unbound Advanced and ACLs tabs do not display the shortcuts at all. The Resolver logs...
-
-
- Same set of fixes for this one also
https://github.com/pfsense/pfsense/pull/1404 -
- will need more details, likely this isn't 2.2-specific if there is any actual problem here.
-
- There really is nothing to prevent this from working.
Though i am sure you would get better solution for this if you... -
- duplicate of #1957
-
- Browser: IE11;
Removing shaper:
1. Configure shaper via "Dedicated Links" wizard;
2. Go to "By interface" tab an... -
- FYI- This was the same on pfSense 2.1. It doesn't send out IPv6 RADIUS requests either. So at least it's not a regres...
-
- Ermal Luçi wrote:
> Hence the issue, i think this should be pushed post 2.2 to really be fixed.
Well, whatever is... -
- libradius is v4 only for now.
Hence the issue, i think this should be pushed post 2.2 to really be fixed. -
- Yep, it just seems to vanish somewhere. :) I deleted the client on the Windows server, and nothing logged. normally, ...
-
- Just tried this and I'm seeing the same thing against FreeRADIUS2. The IPv6 RADIUS request never leaves the client ho...
-
- Following https://doc.pfsense.org/index.php/OpenVPN_with_RADIUS_via_Active_Directory - this does not work if the RADI...
-
-
- Works, thanks.
-
- This will really be fixed when the carp interface link is made a strong one rather than the weak one that is today.
... -
- Chris has put a little different - Vick's example does not have the double-quotes on the last 2 lines.
In any case, ... -
08:14 AM
Bug #4149: Register DHCP leases in DNS forwarder broken
- Well, I'm sure it's an issue in 2.1.5, as I am observing it. I haven't tested 2.2 (as far as I can tell 2.1.5 is the ...
-
- All instances are tap.
12/26/2014
- 10:50 PM Revision e63734ff: clarify message here after customer feedback, it wasn't meant to imply "only a reboot will re-enable" but that's how some people have read it.
- 10:49 PM Revision cccee755: clarify message here after customer feedback, it wasn't meant to imply "only a reboot will re-enable" but that's how some people have read it.
-
06:51 PM Bug #4152 (Resolved): Main page for this section link in services_unbound_domainoverride_edit.php is linked to services_dnsmasq.php
- Services: DNS Resolver: Edit Domain Override (services_unbound_domainoverride_edit.php)
Main page for this section... -
- Services: DNS Resolver: Edit host (services_unbound_host_edit.php)
Main page for this section [+] link at the top ... -
- Captive portal is not authenticating users (just letting everyone on) when a zone is attached to more than 120 VLAN i...
-
- thanks for the feedback. I'm not 100% confident yet, will leave this open til early next week while I'm doing further...
-
- All good here, finally ;)
-
- It seems all the problem circumstances here are fine now. A spot check of a handful of test systems where several iss...
-
- Phillip Davis wrote:
> The description went missing in https://github.com/pfsense/pfsense/commit/bd0bb466f073c50a443... -
- The description went missing in https://github.com/pfsense/pfsense/commit/bd0bb466f073c50a443c09096e89acf0abf8fdaa
I... -
- not sure if that's an issue in 2.1.5 (maybe in some edge case, but there would be much more of an uproar than 2 peopl...
-
04:57 PM
Bug #4149 (Rejected): Register DHCP leases in DNS forwarder broken
- On 2.1.5, the DHCP registration option in DNS Forwarding is broken. When a new machine is granted a DHCP lease, the f...
-
- It appears it's more than just after boot, tap interfaces seem to always end up missing "UP". Will attempt to further...
-
- corrected specific issue
-
- updated subject to actual issue
-
- fixed
-
- fixed
-
- confirmed current status as Jim described. Temporary is fine. Maintenance mode gets stuck at advskew 254 only on inte...
-
- Thanks for diagnosis PiBa. #4148 has root cause
-
- There is a pull request to fix this:
https://github.com/pfsense/pfsense/pull/958
#4141 shows one instance where ... -
- fixed
-
- I can paste in exactly what you have above: ...
-
- it's crashing in run and we include 100% stock run(4) and don't patch anything related to wifi, there is more of a di...
-
- doing something to ensure browsers don't excessively cache js and css is something we've discussed internally, but ha...
-
- To fix various widget behavior, I keep making minor changes to the way some of the backround update data is passed ar...
-
- 03:13 PM Revision 02e4ee54: Update /etc/ttys from new partition when upgrading nanobsd, and in this case do not call reload_ttys(). It should fix #4140
- 03:13 PM Revision e68b7be0: Remove unused variable
- 03:00 PM Revision c07cd2ce: Update /etc/ttys from new partition when upgrading nanobsd, and in this case do not call reload_ttys(). It should fix #4140
- 02:57 PM Revision da4f9b60: Remove unused variable
-
- fixed
-
- Applied in changeset commit:4469379c20d22b6c80bb7c47219e2fa2895c89a1.
-
- Applied in changeset commit:f29fd4d08d910d6a10e294c555c052ae6a69c2b4.
- 02:21 PM Revision ef6f553d: Move this check before full sync to disable dnsmasq/unbound in the first time it's sync'd
- 02:21 PM Revision 4469379c: Add dnsmasq and unbound config sections to full sync, it fixes #4076 that is caused because boolean config fields are not disabled on secondary
- 02:21 PM Revision d0bf02bd: Move this check before full sync to disable dnsmasq/unbound in the first time it's sync'd
- 02:20 PM Revision f29fd4d0: Add dnsmasq and unbound config sections to full sync, it fixes #4076 that is caused because boolean config fields are not disabled on secondary
-
- all seems fine here
-
- there have always been some circumstances with some packages where that happens. additional comment on the pull reque...
-
- fixed
-
- fixed
-
- Not having this install_package called from the new updated file could cause some packages to 'break', because of bei...
-
-
- Applied in changeset commit:05a05c59ca10b62bdba34178e25e28fa55be12fc.
-
- Duplicate of #3358
- 10:21 AM Revision ddfe3e05: Display tunnel description on IPsec widget
- There was not even code to attempt to display the description.
Also, when I first created a phase1 and there were no ... - 10:19 AM Revision 46df4e88: Merge pull request #1402 from phil-davis/patch-1
-
- When you define an IPv4 tunnel using FQDN as Remote gateway, this resolves to AAAA record (if any) and subsequently o...
-
- Applied in changeset commit:02e4ee541ba8af0992c6cd3acd468d731369b287.
-
- Applied in changeset commit:c07cd2ce79f56c96c886db818cb36651b5a334be.
- 08:03 AM Revision 5525974b: Display tunnel description on IPsec widget
- There was not even code to attempt to display the description.
Also, when I first created a phase1 and there were no ...
12/25/2014
-
- Tested, works ok for my tunnels. Thanks.
-
- Sorry, this is not a widget issue. Another browser caching problem in action. Guys, would it be possible to produce a...
-
- After the latest batch of patches, as soon as CPU usage bar stops refreshing, the interface details (speed, duplex, m...
-
- Setup:
1. Latest snapshot
2. 2 ovpn servers on parent WAN (PPPoE);
3. 1 ovpn server on LAN;
After reboot:
1. A... -
- Still missing the description here...
!http://i57.tinypic.com/1q60oz.png!
-
- Even GUI says "use CTRL+click to select/unselect." you cant do that because a combobox is used instead of listbox so ...
Also available in: Atom