Activity
From 01/13/2015 to 02/11/2015
02/11/2015
- 11:00 PM Revision 377b1faa: DHCPv6 client rules MUST come before bogons. Add a comment that hopefully
- sticks out so this stops getting broken. Ticket #3395
- 10:59 PM Revision 274a531a: DHCPv6 client rules MUST come before bogons. Add a comment that hopefully
- sticks out so this stops getting broken. Ticket #3395
-
09:20 PM pfSense Packages Bug #4410: pfBlockerNG adding commented IPs
- @Ryan. Thanks for the Bug report. I haven't seen a Comment line with an IP in it before. The fix for this bug is in m...
-
12:08 PM pfSense Packages Bug #4410 (Resolved): pfBlockerNG adding commented IPs
- We have a list provider that requires our IP be passed as a variable in the query (e.g. http://example.com/list.php?i...
-
08:18 PM Revision eaa89cc6: Ticket #4390 Return only the subnet bits not the full network in cidr format.
-
-
-
-
-
-
07:20 PM Bug #4379: Remove CGN (RFC6598) address space from "private networks"
- it's only unusable where you need to allow traffic into WAN that's sourced from CGN space. Which in nearly all cases ...
-
07:00 PM pfSense Packages Bug #4412 (Not a Bug): squid reverse proxy
- when I try to activate the squid reverse proxy reports an error and when I modify sysctl returns or null or invalid s...
-
- Indeed. Fixed again, and added a comment that will hopefully prevent this from ever getting broken again.
-
- note the sort is there if you have 1 user only, disappears with > 1. I'm sure Phil's right on that. Moving to 2.2.2 s...
-
-
04:12 PM Bug #4403: Enabling SNMP causes kernel panic with APU with empty SD card slot
- Chris Buechler wrote:
> Andreas: could you do some experimentation with your combination of hardware? See if it's th... -
- the only scenario we've been able to replicate is with no SD card installed. It's easily replicable by just removing ...
-
03:46 PM Bug #4403: Enabling SNMP causes kernel panic with APU with empty SD card slot
- I don't have an SD card in, but I do have a Mini-PCIe wireless card.
-
- Well the first crash after update from 2.1 to 2.2 was with a sd card as the disk and a mini pcie 3g modem installed.
... -
- ...
-
- does sysctl hw.bus return a result?
-
- I can reproduce it on my APU now as well. Fresh install on mSATA, no SD card inserted, using the factory image.
Seem... -
- not a bug.
source is available here:
https://github.com/pfsense/pfsense -
06:24 AM Bug #4404: Fatal error when enabling IPSec
- Do you have a link to a stock util.inc, so I can compare ?
The file i patched, I need to have several subnets in D... -
- you're missing, or have a broken, /etc/inc/util.inc file. The installer can't forget files (and if anything as critic...
-
- nothing is broken, just have to put things in correctly. added #4411 to add input validation at some point to prevent...
-
06:03 AM Bug #4407: unbound advanced settings broken
- Kill Bill wrote:
>
> The server: clause is not the place for different kind of things, like the stub zone and forw... -
06:03 AM Bug #4407: unbound advanced settings broken
- Can we please append a link to unbound.conf(5) manpage (https://www.unbound.net/documentation/unbound.conf.html) with...
-
- Andreas Pflug wrote:
> Moving the custom option generation as suggested would make any option appear under the serve... -
- Kill Bill wrote:
> What advanced settings? This is just not true in general. Prefix the custom options with server: ... -
- In my case, I need *do-not-query-localhost: no* set.
-
- What advanced settings? This is just not true in general. Prefix the custom options with server: as noted on the bug ...
-
03:25 AM Bug #4407: unbound advanced settings broken
- If you have a patch change that works, it will be very easy for the devs if you make the edit at https://github.com/p...
-
- Same symptom as https://redmine.pfsense.org/issues/4090, but a different reason:
When domain overrides are set, an... -
- Something similar to dnsmasq's advanced config validation would be helpful for Unbound, to prevent users from creatin...
-
- Probably that was because the strongswan setting was not being propagated to the plugin.
Now that strongswan was upd... -
02:35 PM Bug #4389: gif0 tunnel for ipv6 using a carp-ip to the outside world stops working upon reboots and some config changes
- Copied interfaces.inc and system.inc to my 2.2 box and seems to work alright now..
Without daily snapshots online,... -
- Applied in changeset commit:b65de5585bb7bffe06750c712b399cd4da10052c.
-
- Applied in changeset commit:2de650f6117f4b80c3db4f9b46ad83d75d5b9130.
-
- Ok should be fixed by the commit i pushed.
Can you please confirm as well?
This seems to be a bug since 2.1++ -
- Applied in changeset commit:810b36ac0c363c21ea2f1b963f2c1be142fc59a2.
-
- It behaves correctly with the applied patch.
-
09:46 AM pfSense Packages Bug #4409 (Resolved): Tincd not starting on pfSense 2.2
- Hello,
i had troubles getting tinc daemon to work in 2.2, after some investigation I had to do:
ln -s /usr/loc... - 09:12 AM Revision 01c155f2: Random text typos
- and I "corrected" function names that had "_choosen_" in them.
That is not technically an error - function names do n... - 09:04 AM Revision 302cb96e: Check if notification is disabled
- in send_smtp_message()
Other packages like arpwatch sm.php and cron job output as reported in forum https://forum.pfs... - 09:04 AM Revision 33649526: Merge pull request #1480 from phil-davis/patch-1
- 09:02 AM Revision 1444c08e: Random text typos
- that I noticed.
- 09:01 AM Revision c70002be: Merge pull request #1482 from phil-davis/CP-text-typos
- 09:00 AM Revision 4ab7f8f4: Fix typo in class in bridge edit
- Fixing this makes nice little pencil icons appear in front of the text
entry fields. - 09:00 AM Revision ef8182ca: Merge pull request #1483 from phil-davis/formfld-unknown
- 08:59 AM Revision 079b0e20: Remove unset variable, spotted by phil-davis
- 08:59 AM Revision 5132312f: Remove unset variable, spotted by phil-davis
-
08:34 AM Bug #4408: Changes to DHCP-services crashes GUI and DHCP daemon when many leases are in use
- If I disable DHCP failover everything works perfectly.
-
- I have the DHCP service running on five interfaces and a good amount of leases (I would guess around 1,000 or more at...
- 07:45 AM Revision b3aacd59: rrset-cache-size should == 2 * msg-cache-size. Ticket #4367
-
07:44 AM pfSense Packages Bug #4198: lightsquid doesn't work, perl is missing
- I saw that yesterday, thank you!
-
- I pushed a fix for this yesterday. Perl is there but the package couldn't find it. Works for me now in testing.
- 07:43 AM Revision 2597415b: rrset-cache-size should == 2 * msg-cache-size. Ticket #4367
- 07:28 AM Revision 0c6db320: Fix typo in class in bridge edit
- Fixing this makes nice little pencil icons appear in front of the text
entry fields. - 07:14 AM Revision 24cbfd5a: Check if Unbound is enabled and using the same port before allowing dnsmasq to be enabled. part of Ticket #4332
- 07:13 AM Revision 06e847a7: Check if Unbound is enabled and using the same port before allowing dnsmasq to be enabled. part of Ticket #4332
- 07:07 AM Revision f416763b: Random text typos
- that I noticed.
-
03:42 AM Bug #4401: remove xen netfront driver until it can handle altq
- Is there a way to disable xen detection while booting?
I had to remove traffic shaping from my local pfsense and now... -
03:21 AM Bug #4401: remove xen netfront driver until it can handle altq
- xn0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=3<RXCSUM,TXCSUM>
ether be:f5:19... -
- Part of this was fixed in the default config yesterday (harden-glue is now enabled by default). We'll also add config...
-
- ath(4) does have ALTQ support, but its cloned interfaces end up unable to use it. ...
-
- still no other reports of this. will leave for feedback for now.
-
- It causes a wide range of problems for people. We've already seen several people report IPsec changes not applying be...
-
- that was apparently an oversight, thanks for catching. It should be fixed with what I just committed, which sets rrse...
-
01:29 AM Bug #4329: OpenVPN Server returns an error message while validating selfsigned certificate with a deep of 2
- ...
-
- Douglas Haber wrote:
> Maybe a hook should be added then in the web UI to say, "hey, Xen detected, please make sure ... -
- setting the MTU before setting the IP doesn't behave any differently. The MTU must be appended to the ifconfig comman...
-
- this is a hardware-specific issue of some sort, not an issue in our code. Judging by Ermal's analysis, ACPI seems lik...
02/10/2015
-
- enough people have reported this that it's clearly an issue in some circumstance. I'm not sure what that circumstance...
-
- Hi Together,
i am not sure if this is a hardware problem, but basically i am using a PC Engines APU.1C(2GB) board ... -
- fixed
-
- fixed
-
- It's best to leave as is, the upgrade and release notes describe how to work around pre-upgrade if necessary, and we'...
-
- The problem i think is that on FreeBSD 10 you have no tunnable to revert to 8.x behaviour.
That is only on HEAD. -
09:07 PM Feature #4405 (In Progress): Traffic shaping doesn't work when applied to a bridge interface
- Having two or more interfaces within a bridge, the traffic shaper doesn't work when applied to it. Traffic is seen on...
-
-
-
-
-
-
-
-
- 05:50 PM Revision 02376f6f: Check if notification is disabled
- in send_smtp_message()
Other packages like arpwatch sm.php and cron job output as reported in forum https://forum.pfs... -
- I have 3 boxes with pfSense 2.2 installed, and on one of them I get a fatal error when enable the checkmark "Enable I...
-
- Ok, reverted a test vm to factory defaults, then configured a simplified setup again it shows the same problem.
Sa... -
- Can you provide your config.xml to have a way to reproduce this normally it should work as expected!
-
- XN driver does not support ALTQ at all though it should not be hard to implement it.
-
- Since 2.2 (freeBSD 10.1) pfsense always detect xen on booting and uses pv(hvm) drivers (xn#).
xn0 is unusable withou... -
- Applied in changeset commit:1ee360aaa9176d3287a7099abd47f95c4464ac23.
-
- Applied in changeset commit:51e76899e66360dc9d8e35f68282c54ccd9a4759.
-
- Applied in changeset commit:22bca296dc3777bb872c7be460f09c3ff1177994.
-
- Applied in changeset commit:ed56ce5a1d12b5a065e2c375a182adc1b2d8f91d.
-
- Ok i pushed the proper fix for this.
Can you confirm it works for you as well? -
- gpioapu corrected to avoid comparison with NULL in strncmp.
-
- Applied in changeset commit:afb388159bc5a55d784404411ef1a7c7d22625a5.
-
- Applied in changeset commit:1ac5261fb0c96764526beb4d9928b9300094ac3e.
-
- I pushed a fix which make it work for me.
Can you please confirm?
Normally it is not necessary to have the mtu on... -
- For me this should be closed.
Setting in feedback for now. -
01:02 PM Feature #3387: process_alias_urltable Frequency
- rc.update_urltables accepts the parameter argv[1], and looks for the option now.
I've put in my crontab... -
11:39 AM Bug #2800: OpenVPN doesn't work properly with intermediate/chained CAs
- Same broken behaviour in 2.2.
Adding the Root CA certificate to the Intermediate CA's certificate in System: Certi... -
10:50 AM pfSense Packages Bug #4281 (Feedback): E-Mail Reports (mailreports package) Error With Multiple Graphs
- Applied in changeset commit:b852b5cd883b3d059bc3744fc7b130531a5f20ed.
-
- I set the log file size low and ran some tests and still couldn't make it crash.
If someone else finds syslogd cra... -
08:13 AM Bug #4393: syslogd stops and fails to restart during boot in some cases
- It looks like this fixed my issue. I had the log size set to 8192 thinking that it was in KB and realized that the f...
-
09:28 AM Bug #4402 (Resolved): Unbound: enable harden-glue by default and/or apply patch
- DNS poisoning seems to be possible under 2.2 according to https://forum.pfsense.org/index.php?topic=87491.0.
Fix: ... -
09:09 AM Feature #4400: allow aliases to enter *.domain.com to block all subdomains
- well one way possible would be to set domain overrides in dns resolver but the problem there is the override applies ...
-
- That is not possible. Entries must be resolved accurately to have their addresses placed into a table. There is no wa...
-
- it would be better if aliases allowed to enter a * before domain in order to block all different subdomain ips for a ...
-
- the same instance is not always affected...its 2 of the 3 that have the issue. So I would log into the GUI and notic...
-
- Yeah i have done this for mobile settings and some reports from the forum where the settings were not updated.
I w... -
05:34 AM Bug #4371 (Feedback): Re-enable suhosin
- It was re-enabled in 2012 in commit:c25197ba, is there anything else still missing?
- 04:34 AM Revision 5ece44f7: touch up Unbound text
- 04:34 AM Revision 74ab379d: touch up Unbound text
- 04:33 AM Revision ccdaaec6: Update Unbound defaults
-
- harden-referral-path - hardcoded to no in unbound.inc ATM; any very good reason for this? (Yeah, I did read the manpa...
- 04:28 AM Revision ef120e87: Update Unbound defaults
-
- And what is this checkbox for in the first column?
You can select multiple users and then delete them with 1 click (... -
02:18 AM Bug #4398 (Resolved): Userlist - No sorting anymore
- The Userlist in pfSense was changed in Version 2.2. Now there is no option sorting the user by name. Before a doublec...
- 12:36 AM Revision fb64f3aa: also add v6 IPs to hosts in the same manner v4 IPs are added. Ticket #4395
- 12:10 AM Revision f7dddc86: also add v6 IPs to hosts in the same manner v4 IPs are added. Ticket #4395
02/09/2015
-
- Where MTU on an interface is user-defined, the ifconfig command that assigns the IP and IPv6 addresses must include t...
-
- this was done in 2.2-RELEASE (can't set that as target since it's closed).
-
- this is excessive in at least some circumstances. The restart flushes the SAD so it will cause at least a brief outag...
- 08:22 PM Revision 3d5e8dce: Use appropriate interface field description when working with floating rules, it was confusing and potentially incorrect for floating rule purposes.
- 08:20 PM Revision 758b51a0: Use appropriate interface field description when working with floating rules, it was confusing and potentially incorrect for floating rule purposes.
-
- it's always just put v4 in there, I added v6 in the same manner if it exists.
-
- ...
-
- the likely reason for this is your squid3 config requiring communication with localhost, and it picking v6 to try to ...
-
- Applied in changeset pfsense-packages:commit:909f0dfd8a1efc99c8392423123fdc0b3d88ffea.
-
- Applied in changeset pfsense-packages:commit:11375fe3e8826e02f7a5bec1f6a2d743060dbd76.
-
- This doesn't seem to be anything specific to our package, but softflowd on FreeBSD 10.x (and likely 9.x) in general. ...
-
12:26 PM Bug #4396: Lengthy unbound outage during restart when adding static DHCP leases
- Update:
Affected version: 2.2 Release -
- When updating static DHCP leases the call to services_unbound_configure on the services_dhcp page causes a full rebui...
-
- In the new >=0.17 package acl's are written before the user custom config, so acl's should be usable.
As for adding ... -
- There is no public 'development' repository to install developing packages from, however the official package reposit...
- 11:22 AM Revision 2b704ea9: Merge pull request #1469 from makkbe/master
-
- I just pushed a fix, there were some path issues in the config and startup script and such.
Seems to work OK here ... -
09:50 AM Revision 936bfd84: make computation of start of DHCPv6 range consistent with actual check
- When computing the start IP for the 'available range' field,
services_dhcpv6.php attempts to increment a colon-format... -
- The existing implementation of Net_IPv6::compress produces an empty
string when compressing the all-zeros ("::") addr... -
- The existing code only includes a v6 name server IP in the
automatically generated dhcpdv6 configuration for tracking...
02/08/2015
-
- to get that log it has to be 2.2-something, I presume this is 2.2-RELEASE.
-
- is it the same instance that's affected every time?
The log "OpenVPN ID server1 PID 22206 still running, killing"... -
- I have OpenVPN with tunnels between 3 locations. Almost every day Ill look at the dashboard and it will show one on ...
-
09:03 PM pfSense Packages Bug #4324: HAproxy and SSL client certificate validation
- Quick question, what is the proper way to install a development package?
The interface only allows me to install up ... -
- HAproxy currently allows to define ACLs to redirect to specific backends, and to define several frontend -> backend r...
-
- This typically happens when you have a corrupted log file. The first attempted write to said log file will crash sysl...
-
- Sometimes after rebooting syslogd shows that it has crashed. Rebooting usually fixes the issue. Here is what I see i...
-
06:31 PM pfSense Packages Bug #4391: Status | Services | nrpe2 | restart does not restart nrpe
- I have since done a kill -TERM and then reloaded: /status_services.php?mode=restartservice&service=nrpe2
This star... -
- What's in /var/run/nrpe2.pid ? Is the the current PID? If you killall -9 nrpe2; rm /var/run/nrpe2.pid, and then star...
-
- On pfSense 2.2, I am unable to restart nrpe2
I click through: Status | Services | nrpe2 | restart service.
The ... -
02:00 PM Bug #4390 (Resolved): Cannot create an IP alias on a CARP interface where the actual Interface address is in a different network
- I have configured the WAN IP addresses to be private addresses (i.e. in the 10.0.254.0/30 network) so that I can pres...
-
10:58 AM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- Nope! Stays at 0 throughout....
-
- Yes, this yet again got broken.
02/07/2015
-
10:26 PM Bug #3395: DHCPv6 client pass rules need to come before bogons
- I am experiencing this issue with v2.2. Rules look like this:...
-
- gif0 tunnel for ipv6 using a carp-ip to the outside world stops working upon reboots and some config changes
I fou... -
06:04 PM pfSense Packages Bug #4388 (Duplicate): Squid exits when listening on port 800
- Squid 3.4.10_2 pkg 0.2.6 running on 2.2 Release AMD64
After changing the port that the proxy listens on from 3128 to... -
- Could you checkout 0.17 package?(or perhaps 0.18) I've changed the 'none' CA to a separate checkbox which probably ma...
-
- The 2.2 Release AMD64 CD Installer does not provide any choices for keymap, screenmap or video font. Only '(default)'...
-
01:08 PM pfSense Packages Bug #4386 (Closed): softflowd not generating flow data on pfsense 2.2
- I used to run pfsense 2.1 on several machines, all of which sent NetFlow data to a PRTG collector without any problem...
-
- that is by design because of how it's used for registration of static mappings in the DNS Resolver/Forwarder. Allowin...
-
- Uh. No.
http://tools.ietf.org/html/rfc952
http://tools.ietf.org/html/rfc1123#page-13
etc. etc. etc. -
05:56 AM Bug #4385 (Rejected): hostname dots
- 2.2-RELEASE (amd64), built on Thu Jan 22 14:03:54 CST 2015, FreeBSD 10.1-RELEASE-p4
This might seem like a feature... - 04:28 AM Revision 6d5d9658: fix up text
- 04:28 AM Revision 5cb2a425: fix up text
02/06/2015
-
- services_captiveportal.php is missing input validation that allows creating invalid configurations, including ones th...
-
05:12 PM pfSense Packages Bug #3344: Disable IPV6 Squid3 not run
- Gilmar Cabral You are right man, your post helped me today means after one year you posted it...
i have been in thi... -
- Example: https://forum.pfsense.org/index.php?topic=88029.msg486945#msg486945
02/05/2015
- 09:09 PM Revision e4610d66: remove CGN from "Block private networks" as it was in 2.0x and earlier
- releases since it specifically notes RFC 1918 and CGN is more bogon.
Ticket #4379 - 07:47 PM Revision 2dfe7846: remove CGN from "Block private networks" as it was in 2.0x and earlier
- releases since it specifically notes RFC 1918 and CGN is more bogon.
Ticket #4379 -
-
-
- Yes, of course. I think we don't understand each other. I can trivially create a RFC1918 alias and place that rule wh...
-
- Bogons and block private only applies to traffic sourced on the WAN in question. Where you're on CGN, you pretty much...
-
- I'm not using either of these, so I pretty much don't care either way, but... fixing the description and nuking this ...
-
- since block private specifically says RFC 1918, it's more valid as bogon than private, I removed it from private.
-
- No need to filter this in both places, this is really the same thing like RFC1918 ranges.
Forum thread: https://fo... - 02:52 PM Revision 20078775: Merge pull request #1458 from xbipin/patch-4
-
- As requested at Bug #4380 - currently there's no way to track the status of syslogd service and/or start/stop/restart...
-
- Not a bug per se but a feature request. You can submit a feature request to add syslogd as a service under Status > S...
-
- Yes, so it's not a problem with the package, but with the base system. Should I file the bug about the same thing und...
-
- It was rejected because it's not the purpose of this package to track the services itself. The services are defined b...
-
- Kinda don't get why is this rejected. (Oh, and please, don't get me started with "delete the logs", not interested in...
-
- It uses the service list provided by the firewall. Same as Status > Services. Adding a service just to the package wo...
-
- No idea why it's not there. Certainly would be nice to have it when things go wrong, such as Bug #4352 or https://for...
-
- Applied in changeset commit:bb8a30c23b04d8332e8d4fccf15ed91d950cda2b.
-
- Applied in changeset commit:8b4c7ed15cdde2e49cfce5f96990ba1dbb2a9fd0.
-
- Update:
The rule is there but broken, pointing to the wrong port numbers, for example:
/tmp/rules.debug has:
<... -
- pfSense 2.1.x had an automatic captive portal pass rule to allow users to reach the portal daemon, this automatic rul...
-
01:14 PM Bug #4341: strongSwan fails to re-attach dynamic IPs where interfaces_use specified
- Same issue using a DHCP wan with Kabeldeutschland Cable ISP using a dynamic IP and the other node using a PPP wan wit...
-
- Same issue one Box using a PPP wan with O2/Alice ISP using a dynamic IP and other Box using DHCP with Kabeldeutschlan...
- 10:10 AM Revision ec1d66cc: Use web-gui setting for pap or chap instead of having it hard-coded to chap.
- 10:10 AM Revision 42c57d69: Merge pull request #1472 from bassebaba/master
- 09:48 AM Revision 8f637a0c: Merge pull request #1455 from xbipin/patch-2
- 09:41 AM Revision d06f9ebe: Use web-gui setting for pap or chap instead of having it hard-coded to chap.
-
- remove empty values
-
08:59 AM Bug #3997: get_interface_ip() returns first IP on interface, not necessarily primary IP
- Oh, and bridges and gateway config: https://gist.github.com/MikeN123/22d50fa3d37834b9659a
-
- Interfaces config, slightly censored: https://gist.github.com/MikeN123/009bc5fb76347663e448
Virtual IP config, sli... -
- Can you share your interfaces config or all of it so i can replicate that?
-
- 2.1.5 and 2.2.0. After reboot the VIP becomes the primary IP, and all outbound traffic and firewall rules referencing...
-
- On which scenario and which version this happens?
-
- Just FYI, I have a bridge interface with x.x.x.106 as primary IP, and an IP alias x.x.x.105. This fails consistently,...
-
- Where you have dial on demand enabled on PPPoE, and have multiple PPPoE connections, saving on interfaces.php after m...
-
07:51 AM Bug #4377 (Rejected): pfSense boot freezes after restart in QEMU/KVM
- pfSense virtual machine freezes after reboot at
@usbus0: 12Mbps Full Speed USB v1.0@
qemu proc contains :
@-... -
06:29 AM pfSense Packages Bug #4376 (Closed): Squid3 Squidguard3 Stability Problems
- Hi
Pfsense.2.2 also squid3 3 the stability and squidGuard3 squidGuard3 is experiencing problems, especially after 3... -
- upgrade config code so old entries not lost during upgrade
-
04:47 AM Revision e5e3216e: Add RTMP to the Traffic Shaper
-
03:53 AM Bug #4375: Kernel Crash
- So solution is disable acpi in bios ? or what we can do.
-
- I think this is because of acpi being enabled by default now.
-
- Jetway Mini ITX NF9D 2550 Board
-
- Upgrading 2.1.5 or new install same crash.
-
- Also this issue on redmine https://wiki.strongswan.org/issues/431 recommends reauth = no for IKEv2 for IKEv1 not sure...
-
- Also looking at this thread http://comments.gmane.org/gmane.network.vpn.strongswan.user/2055
It can be a solution to... -
- Does net.inet.ip.dummynet.io_pkt_drop increase during this time?
-
12:43 AM Feature #4374 (New): Add timestamps to notification e-mails
- It would sometimes be useful to have timestamps in the body of the e-mail itself. E-Mail transmission is not always r...
-
12:42 AM pfSense Packages Bug #4373: pfBlockerNG: IPv4 aliases are not preserved when upgrading package
- Ah, my bad. I got used to original pfBlocker and it's behavior ... didn't expected it to change. Thanks for clarifica...
02/04/2015
-
06:23 PM Revision cdcf197b: Fixed not being able to save custom and custom-v6 dyndns
- entries due to "host" being posted empty, and thus failing
is_domain() check. - 06:23 PM Revision 68f7662b: Merge pull request #1466 from tuyan/master
- 06:22 PM Revision a912dd7d: Firmware upgrade script text changes
- while I am looking at this, might as well correct these.
No function problems or impact. - 06:22 PM Revision 13685ab5: Merge pull request #1470 from phil-davis/patch-1
-
06:07 PM
Bug #4149: Register DHCP leases in DNS forwarder broken
- Now on 2.2, the bug is still present:
Feb 4 20:40:44 dhcpd: Unable to add forward map from linehead.ozone.caligrafi... -
-
-
-
-
- This is not a bug.
The text beside the pfBlockerNG Enable Checkbox in the General Tab, is as follows
*"Note - w... -
- After upgrading 1.01 to 1.02 I've lost all IPv4 tab aliases.
-
10:27 AM Bug #4344: package (re)installation loop after upgrading from 2.1.5-RELEASE to 2.2-RELEASE
- *FYI*
there's another package that was reported as unable to be 100% reinstalled after the upgrade procedure from 2.... -
- Vinícius Zavam wrote:
> *Piba-NL*'s (##pfsense@freenode) pointed out that would be nice to try this procedures:
> *... - 10:14 AM Revision 1f97f379: In last case, use dmesg.boot do detect ALIX boards when hw.model is not enough
- 10:14 AM Revision 6d043a1d: In last case, use dmesg.boot do detect ALIX boards when hw.model is not enough
-
- I can verify that turning off reply-to doesn't seem to make a difference, here:
The rule:... - 09:43 AM Revision 0fcf26e4: Silent kenv when smbios.system.product is not present. While here, add VirtualBox to the list of virtualenvs
- 09:43 AM Revision 7e36f71c: Silent kenv when smbios.system.product is not present. While here, add VirtualBox to the list of virtualenvs
-
- Applied in changeset commit:68716545c5fde880d7a22cd9b13b901d01ccb561.
-
- Applied in changeset commit:322cc0188107e8b8ca912511915e71334fe4089b.
-
- Thank you for the persistence.
Merged a better/modified version of the fix suggested here. - 02:18 AM Revision 695b6d08: Firmware upgrade script text changes
- while I am looking at this, might as well correct these.
No function problems or impact.
02/03/2015
-
- I haven't had a chance to get back to testing this scenario yet, but will soon. Seems like it may not be specific to ...
-
10:39 PM Bug #4326: Limiters on firewall rules where NAT applies drop all traffic
- Have we confirmed if having reply-to enabled or disabled affects if the limiter works correctly? As well, what about...
-
- thanks for the confirmation Paul, and Jim and Bryce for fixing. Others have confirmed fixed as well.
-
- Tested on v2.2 amd64 full install.
Removed existing version, made sure nothing but settings are left behind and in... -
- Update the package and try again, I pushed some fixes earlier today. It works for me in testing here.
-
- It'd be nice to have dnscrypt support built-in so people don't need hacks like
https://docs.google.com/document/d/1B... -
- We had to drop suhosin when moving to PHP 5.4 as it wasn't compatible at the time and its development had stalled. Th...
- 07:25 PM Revision f8b5f41d: Merge remote-tracking branch 'upstream/master'
- 07:21 PM Revision 68fde79c: Fixed alignment issue.
- 07:17 PM Revision 197cf433: Added DynDNS support for GleSYS API (www.glesys.com).
- 06:54 PM Revision 98b3de78: fix responder-only IPsec text
- 06:54 PM Revision d7f4c1a4: fix responder-only IPsec text
-
- Patch committed.
-
- ntpd does nothing with selected carp interfaces.
When only carp ip's are selected for ntpd to listen on the config '... -
- *Piba-NL*'s (##pfsense@freenode) pointed out that would be nice to try this procedures:
* clear installation's lock;... -
08:14 AM
pfSense Packages
Bug #4369 (Resolved): patch fetching doesn't work if pfsense is behind proxy
- Hello,
while i was testing a patch (Bug #4238) i noted that the fetch doesn't work.
Issuing a packet caputure while... -
07:25 AM Feature #809: Config sync username change
- The bug is still here in version 2.2 64bit.
The "Remote System Username" field into Firewall->Virtual IP->CARP Set... - 03:32 AM Revision adf17d4f: fix text
- 03:32 AM Revision e829fcbb: fix text
-
- ...
-
- Just reporting another little very minor thing, I am testing the latest version for which you added ACL negation and ...
02/02/2015
-
- unbound.conf is generated by back-end code in /etc/inc/unbound.inc
Search for rrset_cache_size and rrset-cache-siz... -
04:43 PM Bug #4367 (Resolved): Incorrect rrset-cache-size in unbound.conf
- In /usr/local/www/services_unbound_advanced.php is missing code responsible for setting correct value for rrset-cache...
-
-
-
- No, I haven't. In my production settings, I am only using "ssl_c_used" since I can guarantee for sure we are in a TLS...
-
- Thanks for reporting this, my suspicion is that 'ssl_c_used ssl_c_verify 0' would be enough for all cases.
Have yo... - 05:28 PM Revision 4520b2d2: Fix aliases popup width when fields are hidden when page is loaded. It should fix #4238
- 05:28 PM Revision 6672609b: Fix aliases popup width when fields are hidden when page is loaded. It should fix #4238
-
-
-
03:51 PM Feature #4366: Namecheap Dynamic DNS updates fail on subdomain formatted domains
- Formatting removed the {@} symbol
{@}.sub.domain.com -
- The domain in question is in the format
sub.domain.com
I need to update the @ record for this domain.
So, it's b... -
- entries due to "host" being posted empty, and thus failing
is_domain() check. - 01:19 PM Revision 315d866c: Merge remote-tracking branch 'origin/master'
-
11:37 AM Bug #4365 (Resolved): ALTQ Traffic Shaping is not working in pfSense 2.2 when run on Hyper-V 2012 R2
- Using pfSense 2.2 release on Hyper-V 2.2 with regular network adapters (not legacy adapters), HFSC queues can be set ...
-
- Applied in changeset commit:4520b2d2b70caa48813f73f89ef5b9c942ea5b25.
-
- Applied in changeset commit:6672609b90a8e60a13ca471a3ad3e054eca542bd.
-
- fix indent
-
- Let me double check this issue again.
-
05:11 AM Bug #3669: WAN IPs not being cached causing unnecessary "rc.start_packages: Restarting/Starting all packages"
- Whilst this ticket has been marked resolved, the second part of the fix relating to /etc/rc.newwanipv6 has never been...
-
-
- 07:56 AM Revision b82159a6: Unbound domain override IP:port validation
- The domain override is IP:port is invalid if either the IP address OR port is invalid.
Previously you could put an in... - 07:56 AM Revision e67c5bee: Merge pull request #1457 from phil-davis/patch-2
-
- 07:55 AM Revision 2b8353ba: Merge pull request #1459 from PiBa-NL/speedup_is_port
- 07:54 AM Revision 87549136: Remove latin-1 encoding of RSS feed
- Many thanks to Gertjan in forum https://forum.pfsense.org/index.php?topic=87504.msg484017#msg484017
Specifically sett... - 07:54 AM Revision b2b1822b: Merge pull request #1465 from phil-davis/patch-1
-
- No keymap file is present on pfsense 2.2 64bit so, when installing : no keymap selection is available.
After havin... -
-
- This is fixed with rev. 87549136 / rev. 8820a3aa close please.
-
03:55 AM Bug #4274: Marking a packet with only a number results in a broken rule
- Just wanted to say I've verified this works. Thanks so much for the quick response.
- 02:40 AM Revision 8820a3aa: Remove latin-1 encoding of RSS feed
- Many thanks to Gertjan in forum https://forum.pfsense.org/index.php?topic=87504.msg484017#msg484017
Specifically sett...
02/01/2015
-
- At least two people have reported issues with 2.2-RELEASE not booting on their hardware, stopping with a kernel panic...
-
03:28 PM Bug #4297: Squid unable to listen on port inferior to 1024
- Chris,
This is a bug and you can see in the forums that other users are having the same problem.
Yes, I do need t... - 11:55 AM Revision 0453eb6e: Converted Misc & Notifications
-
- It's just waiting on one of use to have enough time to test it to make sure it works and also doesn't break 2.1.x.
-
- me too agree its completely broken and the patch provided by bryce needs to be merged
- 10:44 AM Revision f9a9fb78: Converted system_advanced_network
- 10:29 AM Revision 9aa48e62: Select - update name to name[] when multiple=true
- 10:28 AM Revision 4b6f8c8d: updated last incorrect _POST references
-
09:45 AM Feature #4354: Allow dpinger to ping more than one destination for a gateway.
- I've got 2 poor internet connections and use apinger to switch as need be and as of 2.2rc this is no longer a reliabl...
-
05:08 AM Feature #4354: Allow dpinger to ping more than one destination for a gateway.
- we're probably going to re-write apinger for 2.3
-
- See feature request https://redmine.pfsense.org/issues/1189
Various people have discussed this over the years - nobo... - 07:33 AM Revision 63072a7f: need $g here so product_name is set in user agent
- 07:33 AM Revision b051f148: need $g here so product_name is set in user agent
-
06:19 AM
Bug #4238: Firewall rule: source port display issue
- Bipin Chandra wrote:
> i checked and doesnt seem any issue in port forwarding ports, try clearing your browser cache... -
- See https://forum.pfsense.org/index.php?topic=87504.msg484017#msg484017 for cause and fix.
01/31/2015
-
- Here is a quick fix that you can apply to get it working until patch is merged.
64-bit run: ln -sf /usr/local/etc/... -
01:19 PM pfSense Packages Bug #4282: Vnstat2 1.11 Does Configuration Parser Error
- Is there a status update to when the pull request will be accepted, as it stands right now VNSTAT2 package is complet...
- 10:30 PM Revision 76a9ad94: Add input validation to prevent the use of AES > 128 where glxsb is enabled. Ticket #4361
- 10:30 PM Revision 69aeef21: Add input validation to prevent the use of AES > 128 where glxsb is enabled. Ticket #4361
-
-
-
-
- 05:13 PM Revision 3a8c6408: Merge branch 'master' of github.com:SjonHortensius/pfsense
- 05:10 PM Revision 5d00f1d4: fix another typo in cleaner
- 05:08 PM Revision f6546b41: WIP: Converted advanced_firewall
- 05:08 PM Revision 2cc784b3: Form_Select - handle selected values
- 05:06 PM Revision ae479a27: Add placeholder showing default value
-
-
- The glxsb crypto accelerator breaks AES > 128 bit and people don't seem to be aware of that. Adding input validation ...
- 02:14 PM Revision a41b03d0: Support data-toggle=disable
- Checkbox - moved call to better location
Select - use parent:: for attributes
Input - add support for attributes with... -
-
- This issue is still not resolved
https://forum.pfsense.org/index.php?topic=77506.new;topicseen#new
Can this tic... - 01:09 PM Revision 1a86b8fe: Don't treat >name special, just put it in attr; fixes Select.id
- Select - name is no longer special, use $attr and get a free ID
Checkbox - make displayAsRadio return itself for chai... -
- Applied in changeset commit:87808568a70404e04c306723cdd65f52e59003f9.
-
- Applied in changeset commit:fdc9ac09ef07752da6153cd3c28f734c61985372.
-
- Currently only Mobile connection is repsonder only.
There are situations where this behaviour is required hence the ... -
- Applied in changeset commit:86e1846f47bda6a1e2560c249994b47716fac4ad.
-
- Applied in changeset commit:908edbd3d17a6fac747b6583322be9e547026f7f.
-
- Strongswan allows ID behaviour to be controllable especially useful for multiple devices connecting with same ID.
- 12:22 PM Revision 81dfcea5: Converted system_advanced_admin
- 12:21 PM Revision 276c29d4: Add support for sprintf to setHelp
- clean - fix typo in php-end-tag cleaner
Input - support sprintf parameter
Select - put option-names through gettext -
- http://svnweb.freebsd.org/base?view=revision&revision=265096
-
11:56 AM Bug #4246: Fix "netstat -gW" behavior broken in r259638.
- Problem still there in 2.2 RELEASE.
I run pfSense on an Alix board, which is 32 bits.
Is the kerbel config the ... -
- The kernel option is there in our kernels and should be on 2.2 kernels as well....
-
- The kernel option is there in our kernels and should be on 2.2 kernels as well....
-
- More testing should be done related to rekey, uniqueids and DPD closeaction statement which might impact this.
-
- The first code block is wrong.
It should be:
#1:... -
- In openvpn.widget.php:
> document type does not allow element "table" here; missing one of "th", "td" start-tag
... -
- My interfaces starts with the number of the port written on the case.
> It is possible that you violated the namin... -
- In openvpn.widget.php:
> The <tfoot> element is used in conjunction with the <thead> and <tbody> elements to spec... -
- In openvpn.widget.php:
<table style="padding-top:0px; padding-bottom:0px; padding-left:0px; padding-right:0px" cla... - 10:08 AM Revision b8150520: Traffic Shaper Wizard Upstream SIP Server
- Not being remembered and actioned.
Bug #4314 -
-
-
-
-
- 09:17 AM Revision 7790dacc: Firewall Log does not display logged IGMP packets
- If IGMP packets are logged (either pass or block) then parse_filter_line did not set their src and dst IP.
Later in t... -
-
-
-
08:21 AM Bug #4352: 2.2 syslogd exiting sig 15 when boot finishes
- received email. will reply with access info...
-
08:20 AM Bug #4341: strongSwan fails to re-attach dynamic IPs where interfaces_use specified
- Same issue using a PPP wan with Orange France ISP using a dynamic IP. Everything was working fine before pfsense 2.2/...
-
- this is back for me and I dont't know why this suddenly showed up and why restarting apinger no longer fixes this. al...
-
07:20 AM pfSense Packages Bug #4293: Squid 2.7.9 pkg v.4.3.6 i386 won't start
- Some missing link lib.
you can add this symbolic links in a ssh session,
and restart the squid service.
ln... -
-
- this allows schedule selection to pkg_edit.php, this can then be
utilized by packages to set schedules in many other ... -
- Hello,
I would like to be able to put more than one IP as a monitoring IP in the GUI. I would like the system to u... -
- Applied in changeset commit:41da54ce14d2d43a5ce9738bd80b73355fa26180.
-
- Applied in changeset commit:420fce0458f4f1b49faa167a1b6ccc7800d2b8a3.
-
-
- Merged pull 1453
-
- Applied in changeset commit:430379acf9e4bfcda2625954700a6184265c8f73.
-
- Applied in changeset commit:ee65c642df6466ed59c332d448a4804690ce55c1.
-
-
- Applied in changeset commit:fdf6fcb3b1405016146088f547085c5d08ff0398.
-
- Applied in changeset commit:95c93bc3f6a281bd525d72925ea54dfa6ec2709b.
-
- Fixed the same way as poasswords
-
- The pull request has been merged.
-
- i checked and doesnt seem any issue in port forwarding ports, try clearing your browser cache and check again and if ...
01/30/2015
-
- I emailed you to see if we can setup a time that I can check out your system in general
-
- Yes, it does it at every boot or reboot and started exactly after performing an in place upgrade from 2.1.5 release.
... -
- does it do that at every boot? could you share your config?
-
- upgraded box from 2.1.5. syslogd now exits at boot/reboot and does not restart again. prevents ALL logs on the entire...
-
-
- 05:00 PM Revision 07b37952: Unbound domain override IP:port validation
- The domain override is IP:port is invalid if either the IP address OR port is invalid.
Previously you could put an in... -
04:43 PM Bug #4345: Traffic Shaping doesn't work with Xen netfront driver
- Yes, that NIC's changed to xm but still working on 2.1.5 and not on 2.2.
-
- that should be something that changed to xn NICs after upgrade so they're no longer Realtek, is that the case?
-
- I'm using 2 NIC's Realtek RTL8111/8168 PCI Express Gigabit Ethernet. Both are working on PFSense 2.1.5 with traffic s...
-
04:30 PM Bug #4286: State killing on gateway change
- As I thought, it seems to be a miss-configuration on our part. However, further testing is necessary. Would you mind ...
-
- probably would be good to have upgrade code to clean this up, should help fix some people's issues.
-
- Applied in changeset commit:fa77655557586453a0279566a84d01cd25645978.
-
- Applied in changeset commit:7c449a56f208cb7a02c739610a8abfe11ee498be.
-
- Should there be upgrade code to fix this issue or not?
-
- Also for a discussion https://forum.pfsense.org/index.php?topic=87786.new#new
-
- On 2.2 of pfSense reqid is part of the configuration stored.
When from the GUI a phase2/phase1 is generated with the... -
- If things on strongswan.conf are changed ipsec service needs to be restarted since reloading does not work for them
-
12:52 PM Bug #3692: apinger loss % gets stuck
- I hate to say it but in a new pfsense 2.2 installation (with two wan load balancing and high availability) I have now...
-
- As suggested in forum: https://forum.pfsense.org/index.php?topic=80264.0
To prevent the possibility that a malicio... -
- I deleted the package and tried to use pkg as described at https://doc.pfsense.org/index.php/Installing_FreeBSD_Packa...
-
- Known issue: https://forum.pfsense.org/index.php?topic=85265.0
-
- I do not know how to fix the mangled FailDaemon name, but I see the cause....
-
- Unbound seems to allow multiple stub-addr in a stub-zone.
This would be handy when using DNS Resolver on pfSense wit... -
- *http://pastebin.com/8ni6F2Tb* was scheduled to expire in 2 weeks, so... here's its content:...
-
- unnecessary but lets just add this for safety
-
04:29 AM pfSense Packages Bug #4331: Issue with VPN interface within Squid 3.4 for Transparent Proxy
- Nev Secular wrote:
> I'm running pfSense 2.2 with squid 3.4.10_2
>
> Want to include my VPN interface in transpar... -
03:55 AM pfSense Packages Bug #4348 (Closed): SquidGuard is not starting
- Applying "Enable" results in
System log:
php: squidGuard_blacklist_update.sh: The command '/usr/pbi/squid-amd64... -
03:43 AM pfSense Packages Feature #4347 (Closed): Recent Version of Asterisk
- Version 1.8 is very old. Please update Asterisk to something recent.
-
- I have modified radiusd.sh to prevent it from being executed in parallel and to wait a bit for the process to start b...
-
- I dug a little deeper and here is what I discovered.
By the time "radiusd.sh start" is invoked second time, first ... -
- During FreeRADIUS package uninstall, package is removed, but process fails to stop. Log:...
01/29/2015
-
- please use one of our available support resources. https://pfsense.org/support
-
01:42 PM pfSense Packages Bug #4342: carp switch problem
- It was configured using : https://doc.pfsense.org/index.php/Configuring_pfSense_Hardware_Redundancy_%28CARP%29
Pleas... -
- this is almost certainly indicative of a connectivity problem between the two systems
-
- Wrong files.
Please remove pfsense_problem.JPG
-
- I have 2 pfsense cluster installations in two different locations.
One of them 2.2 version 64-bit, second 32 and 64 ... -
- which driver is it saying doesn't support altq?
-
- On the version 2.1.5 I got the traffic shaping work without problem but after upgraded to 2.2 it's just doesn't worki...
- 05:10 PM Revision 091195f0: Firewall Log does not display logged IGMP packets
- If IGMP packets are logged (either pass or block) then parse_filter_line did not set their src and dst IP.
Later in t... -
- I think this happens because CARP packets are being sent to dummynet.
Before the kernel patch prevented this from ha... - 02:02 PM Revision f5b23288: Set update_url and update_manifest automatically based on version being or not a RELEASE
- 02:02 PM Revision 15ff0dc5: Set update_url and update_manifest automatically based on version being or not a RELEASE
-
- I this affected us at PAX South. We had limiters in place and had certain downloads dropping to 0 bytes/sec until we...
-
- I suppose that's possible, although manually checking the box to disable the generated reply-to doesn't seem to chang...
-
- I believe it only happens where the matching rule with limiter includes reply-to.
-
- this issue was originally reported by "WolfSec-Support" <support at wolfsec.ch> on the pfSense's mailing list.
* htt... -
11:53 AM Feature #2834: carp+pfsync: add ability to prefer one node as master
- https://github.com/pfsense/pfsense/pull/1449
My patch was rejected. Looking to see what will be accepted. -
11:43 AM pfSense Packages Feature #4335: NUT send notifications via built in smtp notification feature
- The following seems to work pretty good.
Add to upsmon.conf... -
- I think I found the info needed to make this work. A command line tool for sending email via the notification system...
-
- Related forum thread that got me started looking at this: https://forum.pfsense.org/index.php?topic=87723.0
-
- Note: In filter_log.inc parse_filter_line() there is also code that tries to handle protocol 112 CARP (around line 24...
-
- Proposed fix: https://github.com/pfsense/pfsense/pull/1456
-
- I have a rule that that deals with multicast packets (to 224.0.0.0/4).
There are lines in /var/log/filter.log for pa... -
- remove old permission box fields
- 09:51 AM Revision d9f9836a: Merge pull request #7 from SanderVanLeeuwen/bootstrap
- Documentation updates + layout tweaks
- 09:47 AM Revision 10322913: Keep original PHP form example
- 09:39 AM Revision 2900b876: Fix footer position
-
- Done on both builders
- 09:06 AM Revision 76d450e2: fix input validation, = is OK here
- 09:05 AM Revision 427831ac: fix input validation, = is OK here
-
07:33 AM
Bug #4238: Firewall rule: source port display issue
- i noted also that the issue is present also for nat rules (port forwarding)
-
- after its merged, this can be closed
-
02:05 AM
Bug #4238: Firewall rule: source port display issue
- ben kenobi wrote:
> Thanks,
> after removing style="display:none" the cosmetic issue is not present anymore.
-
02:05 AM
Bug #4238: Firewall rule: source port display issue
- Thanks,
after removing style="display:none" id="sprtable" the cosmetic issue is not present anymore.
-
06:12 AM Bug #4341 (Resolved): strongSwan fails to re-attach dynamic IPs where interfaces_use specified
- I have a single WAN setup with PPPOE
IPsec (problem applies to both: IKE1 and IKE2)
Every 24 hours the WAN gets rec... -
03:20 AM Bug #4340 (Resolved): OpenVPN connect fails if login contains special characters (e.g. &)
- Hello,
after upgrade pfSense to 2.2, OpenVPN fails connect for login S&V (authorization by AD).
@
openvpn: user 'S... -
- fixed, thanks
-
- though you're right on the math part, shouldn't have = there. about to push a fix.
-
- You must be looking at the wrong description for the box. One is 40 MB, one is 60 MB. ...
-
02:56 AM Bug #4339: RAM Disk Setting minimum ram error
- Also, 60MB isn't accepted either. the actual minimum is 61.
-
- Version : 2.2-RELEASE (amd64)
when saying "Set the size, in MB, for the /tmp RAM disk. Leave blank for 40MB. Do n... -
- After reconsideration, I agree we should keep the existing default. I'm not sure that's the right answer for upgraded...
-
- That FreeBSD PR got bumped recently, no patch available at this time.
-
- Ermal Luçi wrote:
> [...]
>
> Can you try this patch and let me know if it works for you?
The patch creates an e... - 12:05 AM Revision 079becf2: Add form styling conventions with an HTML example
01/28/2015
-
- Need to upgrade PHP to 5.5.21 for 2.2.1.
-
-
-
-
- 09:39 PM Revision 422a715c: Add id attribute to input elements
-
- This also happens on system boot.
-
- I noticed that whenever I change WAN interface settings and apply them multiple radiusd instances are launched. Syste...
-
-
- 06:46 PM Revision 340e8bc5: Accept port range on Outbound NAT. Fixes #4300
- 06:45 PM Revision b601f897: Accept port range on Outbound NAT. Fixes #4300
-
- you're using a serial console, it's not hung, it has no keyboard. Please follow up on your forum thread for additiona...
-
02:08 PM Bug #4334 (Rejected): Haning installation
- I have been trying to install pfsense sevarel times.
but every time the installation hangs at the same point (See at... -
05:54 PM pfSense Packages Bug #4336 (Resolved): syslog-ng package missing libraries
- The following error is logged when attempting to enable the syslog-ng service:
Syslog-ng syntax test failed: [2015-0... - 04:28 PM Revision 42322ae0: Fix name attr for Select, implement Checkbox::displayAsRadio
-
- Applied in changeset commit:1fbae628c24e8259dc2ddb3f610c78b4dad45a34.
-
- Applied in changeset commit:6a2f0ad75063b9a0068b0a1983fb61fe3b408920.
-
-
- Confirmed. If you place a purely numerical value in the "You can mark a packet matching this rule and use this mark t...
-
- Applied in changeset commit:1abdf80b2d4abaf7fb0238ae21d554603149619e.
-
- Applied in changeset commit:17b3a06878f3664abb7f745a08ab19fc2c58bbba.
-
-
- The same rule does not break pf on a pfSense 2.1 install, so it's definitely an issue with 2.2
-
- This is related to #2998 and i do not see anything different in 2.2 in comparison to 2.1?
Probably even 2.1 it did... -
- I do not expect there to be issues from this.
The SAD is there but the policies(SPD) are not so there is nothing tha... - 03:43 PM Revision fee13fc0: Reload filter when IPsec is disabled, fixes #4245
- 03:42 PM Revision 1959e3d1: Reload filter when IPsec is disabled, fixes #4245
- 03:33 PM Revision a27f0c10: Add support for 0x20 DNS random bit support. Fixes #4205
- 03:33 PM Revision 52d946d8: Merge pull request #1440 from wagonza/patch-6
- 03:23 PM Revision 7c7c2ba2: Support for Office365 Mail
- https://redmine.pfsense.org/issues/4176
Allow the user to choose SMTP authentication mechanism PLAIN or LOGIN.
For ex... - 03:23 PM Revision 27c25d29: Support choice of SMTP Authentication Mechanisms
- https://redmine.pfsense.org/issues/4176
I have left some documentation here of other mechanisms that someone might ca... - 03:23 PM Revision e336d9ef: Merge pull request #1421 from phil-davis/patch-4
-
- This is a wishlist feature request.
The NUT package should have a checkbox that allows it to use the built in noti... -
- I'm seeing this when the limiter is applied to a filter on the WAN interface, but not the LAN interface. Odd.
-
- Applied in changeset commit:b50baf79f18b21454dad25819d3a6656caf2abcc.
-
- Applied in changeset commit:99df898e0c5fd8533d234bbb7846b89d9097a424.
-
-
- Likely, (or build from source) but 2.2.1 likely not that far away, either.
-
12:55 PM Bug #4328: Some symlinks not updated by full update
- Thanks. I assume the only way to test this is to wait for 2.2.1 :)
-
- I pushed a fix for this on tools
-
- Forum thread: https://forum.pfsense.org/index.php?topic=87336.msg481876#msg481876
On upgrade, there are loads of /... -
- Can we talk about *not* disabling strict mode? FreeBSD 10 runs LAGG LACP in 'strict' mode for a reason.
https://bug... -
- ...
-
- Phillip Davis wrote:
> "Two" should be good. I just checked a road warrior server of mine. I changed Certificate Dep... -
- "Two" should be good. I just checked a road warrior server of mine. I changed Certificate Depth to "Two" and it chang...
-
- Phillip Davis wrote:
> Is that related to the "Certificate Depth" setting on the OpenVPN Server GUI page?
I didn't ... -
- Is that related to the "Certificate Depth" setting on the OpenVPN Server GUI page?
Do you have that already set to "... -
- Hello,
I've recently upgraded from 2.1.5 to 2.2 and getting an error message:-
>Jan 28 09:39:23 pfsense openvpn[4... - 01:38 PM Revision 7094c303: Fix #4318 - gen_subnetv4_max() not working on 32bit
- 01:38 PM Revision e69a0cf3: Fix #4318 - gen_subnetv4_max() not working on 32bit
-
- Applied in changeset commit:340e8bc5cf67a2e826df28d1ac3a1eb70ed2c5c5.
-
- Applied in changeset commit:b601f897a5f6acfb4abc8beeedf0bb0d5cfa3193.
- 12:56 PM Revision 01a84fcf: updated forms description HTML > PHP
-
12:38 PM Bug #4311: aPinger service gets higher ping. Resolves for short period after restart aPinger service
- I am also getting this same issue, and I can confirm a restart restores the pings to their normal value for a short t...
-
02:09 AM Bug #4311: aPinger service gets higher ping. Resolves for short period after restart aPinger service
- Forgot to mention that this is based on a fresh 2.2 install with a restore of a backup of 2.0 version
-
- drivers are outside our control, we only follow up with ones relevant to things we sell @ store.pfsense.org. Please r...
-
03:32 AM Bug #4330: Pfsense 2.2 breaks certain Realtek cards
- Should mention I tried adding if_re.ko and if_rl.ko from FreeBSD 10.1 to /boot/modules with no success.
-
- Hi there
Pfsense 2.2 upgrade has gone very smoothly on all but one of my machines. Unfortunately one happened to b... -
10:08 AM Feature #4322: Add Google Domains DDNS
- I'm aware, but it took a while to figure it out on my own. It would be much simpler to have a menu item of it's own. ...
-
- Applied in changeset commit:fee13fc057f3c1e96a3db2535ab7734953de5924.
-
- Applied in changeset commit:1959e3d1d08747799229bacea10fbb906367c84f.
-
09:50 AM Feature #4205: unbound config option missing
- Applied in changeset commit:a27f0c10a90e696d9b987bdc38727eb738163c48.
-
- Applied in changeset commit:a771a6aee364f60ab436f26d061b373118462c43.
-
- If you run through the shaper wizard with, for example, two WANs, then some sections like VoIP get a set of <conn0upl...
-
- with this additional change we can allow infinite number of entries
rather than just 500 due to the for loop set to a... -
- Pull request has been merged
-
- the above link is the patch file but u can simply edit the page (/usr/local/www/firewall_rules_edit.php) by going to ...
-
- https://github.com/pfsense/pfsense/pull/1452.patch
-
04:57 AM
Bug #4238: Firewall rule: source port display issue
- the fetch fails
i suppose that a / is missing on the patch
usr/local/www/firewall_rules_edit.php
Regards - 08:57 AM Revision 0f062592: Dynamic DNS wildcard typo
- Self-explanatory, just a dumb typo bug
- 08:57 AM Revision c19bdcf4: Merge pull request #1450 from phil-davis/patch-1
- 08:55 AM Revision 4c40e2a7: Unimportant typos in user and group manager
- that do not effect anything.
- 08:55 AM Revision adaf6ca9: Merge pull request #1445 from phil-davis/priv-typos
-
- This patch will allow the web GUI for UPnP to enter more user specified
entries rather than just 4, I replaced the 4 ... -
08:37 AM Bug #4314: Traffic Shaper Wizard not accepting an alias in the "Upstream SIP Server" text box
- I applied the patch and it works ok now. The wizard remembers the text box content and the floating rules are automat...
-
- Note:
$x2 = ip2long32("127.255.255.255");
var_dump($x2);
$y2 = ip2long32("128.0.0.0");
var_dump($y2);
$z2 = $y2 ... -
- Sorry - the last subtraction in my code above should have been "$z2 = $y2 - $x2" - so ignore the rubbish "float(-198....
-
- Yes - I had been checking the code on a 64-bit system accidentally. Now I am at home with my Alix it all goes wrong:
... -
08:10 AM Bug #4317: firewall_edit_nat.php - memory exhaustion on 32 bit with VIP range
- yes, correct, everything i386 on our side...
-
- A fix was just posted for #4318, apply that fix and try this again, I suspect it will work fine. If so, we can close ...
-
08:06 AM Bug #4317: firewall_edit_nat.php - memory exhaustion on 32 bit with VIP range
- Yep, on i386 Kernel.
Dont see a way to change architecture doing an auto upgrade and several machines are remote.
... -
- Are you all on i386?
I could see that loop going out of control due to #4318, source:usr/local/www/firewall_nat_ed... -
- Here i paste relevant part of one upgraded router setup.
This particular one has a mixture of virtualIPs, may this h... -
- Numbers like that work fine for me - e.g. subnet 197.1.2.131 subnet_bits 29
It build a correct list of 8 addresses.
... -
- I got exactly the same situation, so may I at least help consistently confirming the issue existence:
I have stopp... -
- You are right, must have missed it due to fatigue, although I do remember removing this before upgrading to 2.2.
<... -
- It should be possible to run both services for different purposes so long as they are on different port numbers.
C... -
- Applied in changeset commit:7094c303b7d46c9f7b24c3f1bd4432187832e85c.
-
- Applied in changeset commit:e69a0cf3a216c8647a6def4eee41ab01319ce90f.
-
- I'm running pfSense 2.2 with squid 3.4.10_2
Want to include my VPN interface in transparent proxy within squid.
s... -
- i added the rowhelper control as well as it will allow infinite number of entries and tried it and works well
http... -
12:24 AM
Bug #4327 (Closed): Package Manager issue behind proxy
- Hello,
the pfsense that i have installed inside my company uses proxy connections to get updates from pfsense sites....
01/27/2015
-
- When I do that, /tmp/rules.limiter has the expected stuff like:
pipe 1 config bw 4Gb
But as you say, Diagnostics... -
- Steps to reproduce:
# Firewall -> Traffic Shaper -> Limiter
# Create new limiter with a memorable bandwidth. (In ... -
- A PASS filter rule with In / Out limiters set will pass traffic until bandwidth in a limited direction hits the limit...
-
- I just stumbled upon something with HAproxy that is probably not the expected/intended behavior when building an ACL ...
- 08:33 PM Revision 69f9ff40: final touches on Forms
- system - removed trailing unused form-html
Form - set proper width for submit-button column
Element - support returni... - 07:51 PM Revision dc58b7b3: moved some js from separate files to contextual .php
- pfSense.js - to prevent a blob of scripts; move index-widget handling to
actual index, introduce events instead
*.j... - 06:17 PM Revision 7efe99b5: Traffic Shaper Wizard Upstream SIP Server
- Not being remembered and actioned.
Bug #4314 -
- it can be manually configured using the "custom" type currently
-
- Google domains (domains.google.com) has added DDNS services outlined here: https://support.google.com/domains/answer/...
-
- duplicate of #4276
-
04:13 PM Bug #4323 (Rejected): Layer 7 / ipfw-classifyd 100% cpu in 2.2
- Any Layer 7 traffic shaper configuration causes ipfw-classifyd to use 100% of cpu and essentially blocks all outbound...
-
- The VPN on Site A has the "Stake killing on gateway change" feature enabled (box unchecked), and it did not restore o...
-
- We're currently testing the same kind of set up with IPsec and it seems we have the same issue (on 2.1.4). This funct...
-
09:31 AM Bug #4286: State killing on gateway change
- The problem was already here in the previous stable version.
-
- Did you have this multiwan setup working previously with 2.1.5? Or has the issue existed since then?
-
- not sure if this helps
01-27-2015 15:33:50 Daemon.Debug pfsense Jan 27 15:33:50 arpwatch: reaper: pid 93610, exit ... - 02:22 PM Revision ca127ab7: Simplify use of other serial ports setting all of them as onifconsole when serial is enabled
- 02:22 PM Revision 04c8360c: Teach ufslabels.sh to deal with DESTDIR, useful on installation
- 02:22 PM Revision 8c392069: Improve a bit sh syntax and fix it for multiple swap devices
- 02:20 PM Revision 12fe841f: Change version to 2.2.1-DEVELOPMENT
-
- not a replicable circumstance.
In order for the situation as described to occur, you have to have some kind of co... -
- Hi,
After upgrade to 2.2, experience memory limit errors even after increasing php memory_limit :
_Crash report... -
- The effect that I see most often is Macs on the LAN adding a mapping for external port 4500 (for BTMM) and breaking I...
-
- This might actually be considered a bug rather than a feature, as without this change, miniupnpd will happily let LAN...
-
- The miniupnpd port has a build-time option that forces it to check if the requested external port is already in use l...
-
- Miniupnpd supports IPv6; this can be enabled by adding the "IPV6" and "UPNP_IGDV2" make options to the port. See atta...
-
- I re-did tests with 3.4.10_2 pkg 0.2.6 on clean VM and real router and looks like everything is ok. I wonder what was...
- 01:57 PM Revision 4f009171: Simplify use of other serial ports setting all of them as onifconsole when serial is enabled
- 01:50 PM Revision 873cab16: Teach ufslabels.sh to deal with DESTDIR, useful on installation
-
- #4318 is the root cause of this
-
01:42 PM Bug #4319 (Rejected): Release 2.2 - Wake on Lan different behaviour on alix and apu
- Upgrade worked fine on multiple hardware installations (all on
alix / apu). The only thing I've realised is, that WO... -
- gen_subnet_max returns incorrectly on 32 bit 2.2. One example, WoL will always throw in 255.255.255.255 as the broadc...
- 12:59 PM Revision db4b4576: Improve a bit sh syntax and fix it for multiple swap devices
- 12:39 PM Revision a005a836: finalized Form classes, allowed add/removeClass on all elements
- + add overloadable submit button
- 12:39 PM Revision f76cbd6f: Fix sed syntax, -i requires a space before the parameter. Also fix regex to find swap device
- 12:38 PM Revision 802956d6: Fix sed syntax, -i requires a space before the parameter. Also fix regex to find swap device
-
- I think this should fix it:
https://github.com/pfsense/pfsense/pull/1453
The field name for that had been changed i... -
- When using the traffic shaper wizard "Multiple LAN/WAN" I choose to prioritize voice over IP traffic and use a generi...
-
- you're pointing to the snapshot server not the stable release update location, so that's the expected end result.
... -
11:40 AM Bug #4315 (Resolved): unable to auto-update i386 from 2.2-BETA to 2.2-RELEASE
- Currently running "2.2-BETA (i386) built on Sat Nov 22 20:52:45 CST 2014 FreeBSD 10.1-RELEASE".
Dashboard shows upda... -
- not true, that works correctly
-
09:58 AM Bug #4313: DHCP server does not send configured DNS (with DNS forwarder/resolver disabled)
- Sorry, I had something misconfigured...
-
- I have DHCP server enabled on LAN, with the DNS fields configured.
I also disabled DNS forwarder/resolver.
On the... - 09:12 AM Revision a32c0623: whitespace changes; renamed classes to Form_ prefix
-
- Not likely to happen. If anything we may go the other way, deprecating NanoBSD and using full installs exclusively. L...
-
- https://github.com/pfsense/pfsense/pull/1452
patch to fix this -
07:25 AM Bug #4312 (Resolved): Bridge advanced settings not always applied after interface is added to bridge
- on 2.2 release
after reboot, the option PRIVATE PORTS (ovpns6 and ovpnc4 for my example) of BRIDGE not work (brigde ... -
07:15 AM Bug #4276: Layer 7 not working / ipfw-classifyd high load
- in logs:...
- 06:26 AM Revision 6a32a3e4: use example.com for examples
- 06:26 AM Revision a8b61be6: use example.com for examples
- 06:21 AM Revision 5e3affe2: these descriptions were flipped. Ticket #4273
- 06:21 AM Revision 580f5eee: these descriptions were flipped. Ticket #4273
-
- Bump
-
-
-
- duplicate of #4276
-
- Have "ipfw-classifyd: packet dropped: output queue full" in system log, cant load any web page
-
- im trying to code the schedule feature to upnp but seems im totally lost in all the php and inc file code, can any1 g...
-
- Our RRD graphs in the section Quality gain a higher ping than I can measure. After restarting the aPinger service the...
-
- Configuring limiters on a firewall rule in 2.2 on a system using HA results in a kernel panic reboot loop. To replica...
-
- the root issue here is #4308
-
- In FreeBSD 10.0 and newer, LAGG with LACP defaults to strict mode. If it's not getting LACPDUs on the ports, it doesn...
-
12:42 AM Bug #4297: Squid unable to listen on port inferior to 1024
- Chris Buechler wrote:
> that sysctl has no relation to what you're trying to do. net.inet.ip.portrange.reservedhigh ... -
- Thanks. Yeah the descriptions were backwards, fixed.
-
- reported here that just setting cisco_unity=no is inadequate to fix this issue.
https://forum.pfsense.org/index.php...
01/26/2015
-
- that sysctl has no relation to what you're trying to do. net.inet.ip.portrange.reservedhigh is what you're looking fo...
-
- Squid 3.4.10_2 pkg 0.2.6
pFsense 2.2
Impossible to listen on port <1024
The field 'reverse HTTP port' must con... -
- The UI also has a typo: Diector
-
- Oh, now that I notice it: "director = -dir" would normally be "director = bacula-dir", that it is, it would match t...
-
- This is what pfSense 2.2 shows me for my bacula-fd configuration:...
-
- Bacula is running with:...
-
- duplicate of #4081
-
- To add: minimum possible WAN GATEWAY ping return value is 7ms (100% impossible for it to go under that number, a cabl...
-
- Impossibly high, or impossibly low?
Yes, I have seen occasions when the ping time is impossibly low for a while. I t... -
- Performed upgrade from 2.1.5 to 2.2-RELEASE. Now Gateway Monitor produces arbitrary and completely bogus (impossible)...
-
- already there, just have to configure it correctly
-
06:15 PM Feature #4305: Add Advanced / local-data option to Host Overrides for DNS Resolver / Unbound
- You are (obviously) right.
I read that article, but must have assumed it was part of the TXT Comment Support.
T... -
- You're just doing it wrong....
-
- The Advanced button doesn't allow the inclusion of local-data: entries. Actually it allows it, but it breaks unbound
... -
- this is part of what's noted in if_bridge(4): ...
- 04:40 PM Revision 3ad5d4ce: Merge branch 'bootstrap' of github.com:SjonHortensius/pfsense into bootstrap
- 04:38 PM Revision b40bcb23: New POC for generating forms through PHP classes
- reduce the amount of html c/ping by keeping the amount of
meta-data limited -
- that'll be required to add as a tunable where you need that to work. The fact it worked before was technically the bu...
-
10:19 AM Bug #4284: PFSense 2.2. won't automatically add arp entries from multicast mac addresses into its arp table
- This can be permanently fixed on each PFSense Firewall by:
System->Advanced->System Tunables
Then add an entry ... -
- Even if you don't go to the extreme I'm suggesting in [[https://redmine.pfsense.org/issues/4272]], I would suggest ke...
-
- In addition to this, I'd say the forced change to "pfsense" is rather annoying, in that it's really simple to fat fin...
-
03:21 PM Bug #4280: LAN with quad NIC configured with LAGG-LACP and VLANs
- Ok so I created a VM with a fresh install of 2.2 and did the following,
System > Advanced > Networking
Checked "D... -
- Ok for some reason there was a nat state that was already passing traffic. Deleting that state made the apinger pings...
-
- that's how things work by design, the interface IP of the interface in question is the appropriate source. You can NA...
-
- When using a public carp-ip on a wan interface that has a private ip apinger 'srcip' is set to the local ip.
Even wh... -
02:16 PM pfSense Packages Bug #4304: pfflowd non-functional on 2.2.x versions
- The Packages page reports version as:
0.8 pkg v1.0.2 -
- Jan 26 20:56:32 pfflowd[40995]: pfflowd listening on pfsync0
Jan 26 20:56:32 kernel: pfsync0: promiscuous mode enabl... -
- not something we're going to fix, you can replicate on stock FreeBSD and report upstream to see if that gets any resu...
-
- duplicate of #4282
-
-
- Several DSCP choices are non-functional in pfSense 2.2 rules and when chosen, they result in a broken ruleset that wi...
-
- Not much info I can provide for this one but arpwatch isn't sending email reports anymore after upgrading to 2.2 amd6...
- 10:03 AM Revision 5f8673d1: Merge pull request #6 from SanderVanLeeuwen/bootstrap
- pfSense in Virtualbox installation instructions
- 09:54 AM Revision 6c6ff9ad: Add Virtualbox installation instructions
- 09:51 AM Revision 88d0577b: Add Virtualbox installation instructions
-
- In the meantime, that field may also be left blank so that it affects all ports, not only that specific range.
-
- One note, it is to be noted that this does NOT seem to break update, nor backup/restore. I.e. on upgrade, from 2.1.5...
-
- Thanks for the head-up. It seem to be to fix bug #3857. I concur that the edit box is a single port entry, and shou...
-
- That behavior was changed by https://github.com/pfsense/pfsense/commit/9060f420a9444c68fc8db926787d0bb37d77ed72
Not ... -
- In pfSense 2.1.5, I could enter an outbound NAT rule with destination port range, and in pfSense 2.2, I get error tha...
-
- siproxd works fine on amd64 but fails on i386.
Crashes with signal 4. -
- In the monitoring system there is a strange entry for IP:
Address Interface Netmask
0.0.0.0/ vtnet0 (... -
- When accessing snmp from a montitoring system I get many, many errors (logged in the central syslog):
snmpd[95772]...
01/25/2015
-
- If aliases exist that have both FQDN entries and IP address or network entries, and the same FQDN entries are in mult...
-
05:59 PM Feature #2989: Changing language english to turkish not effect
- Is the pull request merged? what it's id?
-
04:42 PM pfSense Packages Bug #4295 (Resolved): stunnel not working in Release 2.2
- Installed Package stunnel on pfsense 2.2 but is doesn't work.
(Please see attached file)
I was able to resolve th... -
04:42 PM Feature #4294: Add additonal option to RADIUS Called-Station-Id value
- Also, if this ne option is set, the Called-Station-Id should also be the same WAN MAC in RADIUS accounting packets to...
-
- We are a hotspot provider and have many potential customers who are looking to use our service and love their pfSense...
-
04:27 PM Bug #4218: Bridge does not have AUTO_LINKLOCAL flag
- Can anyone reproduce this? Can this be assigned to 2.2.1?
-
04:26 PM pfSense Packages Bug #4293: Squid 2.7.9 pkg v.4.3.6 i386 won't start
- understand from irc the 64bit package works ok - i386 seems to have issues
-
- squid not starting following upgrade to 2.2
32 bit
squid-2.7.9_4-i386
php-fpm[259]: /rc.start_packages: The co... - 03:47 PM Revision 3aa55bbe: Dynamic DNS wildcard typo
- Self-explanatory, just a dumb typo bug
-
02:24 PM Feature #4292 (New): Show 95th Percentile for IPv6 Traffic in RRD Graphs
- The RRD graphs correctly show the 95th percentile for IPv4 traffic but it is neither computed nor displayed for IPv6 ...
-
- Ahh - well that is different to what I was thinking. Yes the failback of the OpenVPN traffic in that case will depend...
-
- Thank you for your answer, however I forgot to mention that I'm not using OpenVPN server on Pfsense, but on a remote ...
-
- This seems more an OpenVPN failover issue. I just tested mine at home on 2.2-RELEASE - failed my main link, my OpenVP...
-
- Hello,
I have a problem in a multi-wan configuration:
Link 1 (main) in tier1
Link 2 (backup) in tier2
The m... -
11:06 AM Bug #4289: Invalid alias using a numerical name causes a filter reload error
- What config look older alias?
-
- It may be an older notice that hasn't cleared, make sure the alias is gone and then force a filter reload from Status...
-
- I Remove it and rename it. But after filter reload error the same # User Aliases
1 = "{ 21 }" -
- You have an invalid alias named "1". Remove it or rename it.
"The alias name must be less than 32 characters long,... -
- Done!
-
- Please attach a copy of your config.xml and /tmp/rules.debug. A sanitized version of config.xml can be copied from op...
-
- Jan 25 16:09:02 php-fpm[55157]: /rc.filter_configure_sync: New alert found: There were error(s) loading the rules: /t...
-
- Don't forget to also check that the package continues to work on 2.1.x with the fix applied. If it does not, then mor...
-
- i tested this and it seems to solve the issue
-
- After digging into this further, this is a "feature" of the PBI architecture, and a bug in the package. The PBI middl...
-
10:18 AM Feature #4291: combined dynamic/static ARP
- I'm not sure if it is a bug or this is the normal behavior...
As a work around I do attach another NIC to pfSense... -
- while creating DHCP server there is option called "Enable Static ARP entries"...
When NOT ticked... each lease will ... -
- inetd is running - but the standard start script is missing.
Also the check_mk config goes to /etc/inetd.conf - th... -
- When installing or configuring the package I get in the system log:
php-fpm[74859]: /rc.start_packages: The comman... -
- https://github.com/pfsense/pfsense/pull/1438
this patch will allow the web GUI for UPnP to enter more user specifi... -
- Hello,
I have a ppp link configured with a 3G usb modem Huwaei E372 which is working great.
However there is a bu... -
04:59 AM pfSense Packages Bug #4277: squidGuard-squid3 installation Failed after pfSense Update to 2.2
- Having the same problem here, see https://forum.pfsense.org/index.php?topic=87325.0
There is no sha256sum for squi... -
- Pullreq/patch https://github.com/pfsense/pfsense-packages/pull/795
-
- The lcdproc package in the 2.2/FreeBSD-10 release is a PBI and therefore its file access calls go through the PBI pat...
-
- this seems a duplicate of https://redmine.pfsense.org/issues/4282
fixing that would solve this
01/24/2015
-
- I have a cluster created with Windows Network Load Balancing using the IGMP multicast. Anyway, the cluster IP has a m...
-
- Attached is a simple fix based on the initial request of giving people the option to disable the syncing of the skew ...
-
07:41 PM Bug #4283 (Rejected): Constant cas# device timeout errors and crashes with Sun 501-6738-10
- Updated a copy of a working 2.1.5 production system to 2.2 and, during the boot, see constant cas2 and cas3 device ti...
-
- also see post https://forum.pfsense.org/index.php?topic=87316.0;topicseen
-
- I can confirm, this bug as well Vnstat2 installs correctly but no logs are ever updated. after going into the shell a...
-
- (Wow, I meant to update the title slightly... I promise, I speak better English)
Obligatory patch to pfsense-packa... -
- Since upgrading to 2.2 (and reinstalling all packages), vnstat2 errors out every time....
-
- Thanks for fixing the project - didn't realize which project I was in when I opened the issue.
I went ahead and op... -
- I've got some other bugs to fix there already (such as updating the mail library). I plan to work on it this week if ...
-
- Simple patch to rename the temporary variable that's conflicting with the global $g....
-
- When a report has multiple graphs, the following errors are generated while generating graphs 2-N...
-
- Original Post:
https://forum.pfsense.org/index.php?topic=87311
Problem:
With a fresh install of 2.2 and a basic ... -
- I have noticed this before when upgrading a slow system (like Alix 2D13). After getting the upgrade it tells you the ...
-
- In mail notification from pfsesne:...
-
11:42 AM pfSense Packages Bug #4277 (Closed): squidGuard-squid3 installation Failed after pfSense Update to 2.2
- hello
after updating pfSense to the last release 2.2 it is impossible de reinstall squidGuard-squid3 with the f... -
- In logs:...
-
- After upgrade pfsense 2.1.5 to 2.2 i have problem with ipfw-classifyd...
- 10:17 AM Revision 0bf1e5fe: Fixed contextual links
- pfSense.css - move help-link to ul that gets positioned
head.inc - implemented fixme
shortcuts.inc - replaced icons - 09:53 AM Revision 64c0004e: Updated readme with development instructions
-
- Upon upgrade of 2.1.5 to 2.2, strongswan did not start and quit with the following message:
Jan 24 16:12:39 ips... - 09:38 AM Revision b4988336: Merge branch 'master' into bootstrap
- Conflicts:
usr/local/www/head.inc
usr/local/www/themes/_corporate/styles/jquery-ui-1.11.1.css - 09:35 AM Revision 4c4e082b: Merge branch 'master' of https://github.com/pfsense/pfsense
-
- Any updates or work around!?
We also need this option... We use login by MAC address...but it's waiting the client t... -
07:57 AM Bug #3147: Adding new interface can cause issues
- This 'bug' appears to have finally been addressed with the changes for #3846 "Adding interface for new VLAN selects a...
-
07:41 AM
Bug #3290: IPV6 conectivity not restored after cablemodem reset
- I had a similar issue when my modem automatically rebooted during Comcast maintenance. Two things... First, a reboot ...
-
- Sorry, just realized I didn't list this as applying to 2.2 and it doesn't seem that I'm able to change it now.
-
- I have a lot of floating rules used to mark packets with a number that I then catch later to do traffic shaping. Thi...
-
04:43 AM Bug #4273 (Resolved): OpenVPN options route-nopull and route-noexec swapped
- From the pfsense GUI:
Don't pull routes - Don't add or remove routes automatically. Instead pass routes to --route-u... -
- Embedded looks like a great way to go, why continue supporting a full install?
I've had this idea for a while. It ma... -
- I think that is expected unless you have received mail, and thus have an sqlite log/database.
See attached image, of... -
- The Postfix dashboard widget shows blank in 2.2, likely needs updates for new PHP.
-
- pointed out here
https://forum.pfsense.org/index.php?topic=84026.msg477208#msg477208
fix would be simply changing... -
- vnstat2 package conf file in /usr/pbi/vnstat-i386/etc/vnstat.conf and /usr/pbi/vnstat-amd64/etc/vnstat.conf not point...
01/23/2015
-
- Well, indeed, not 'dead', but traffic is stopped.
I did what you suggested and e don't see any loop. However, I s... -
- it's certainly not possible to kill a system by putting an incorrect IP into a port forward. maybe if you managed to ...
-
- First, this is using invalid actions, so this is not so critical, but doing so will result in denial of service.
-... -
- thought we already had a ticket to change strongswan's behavior here in the future, apparently not, but we do now. #4...
-
08:55 PM Bug #4267 (Closed): IPSEC Phase 1 deletion
- Deleting an IPSEC phase 1 entry from vpn_ipsec.php for a tunnel that has not connected does not result in the entry b...
-
- Doesn't appear we've opened a ticket to address this yet. strongSwan's behavior of not updating the SAD is going to g...
-
- to me for info gathering
-
- Where you have multiple P2s configured on a single P1 with IKEv1, there are some rekeying issues under some circumsta...
- 02:52 PM Revision 4c7f7c29: Merge pull request #5 from SanderVanLeeuwen/bootstrap
- Updated documentation / guidelines
-
- can any of the core developer let me know what would be the preferred method for those permission list so i can make ...
-
- i mean separated with a ","
-
- well, what i can do is is replace the last 4 permission boxes with a single one where some1 could type out all entrie...
-
- And the interface LAGG is BRIGED with the LAN
-
- After the patche of bug https://redmine.pfsense.org/issues/4257
the BRIDGE is OK, but not the LAGG
On 2.2RC last up... -
- As shown in the log above: some squid processes. The issue is stable to reproduce.
- 12:02 AM Revision 323317c3: Typo
01/22/2015
- 10:41 PM Revision 6c943511: Additional documentation
- - Added checkbox example
- Form field help block example
- Button and icon usage explained -
- Many if not most 2FA solutions support LDAP and/or RADIUS so are already supported. That said, enhancements here woul...
-
- Allow during bootup rc.newwanip to continue up to a ceratin part to handle bridges or other complex interfaces.
-
- Allow during bootup rc.newwanip to continue up to a ceratin part to handle bridges or other complex interfaces.
-
- fixed
-
- Applied in changeset commit:9b527a7931795466ab7286f0caadd7bef082d002.
-
- Applied in changeset commit:8e24d1dacd80fd539cc9dd6a5f0a7c8953bcffd0.
-
- this is mostly fixed. Where CARP goes to backup status, it seems fine. But if the CARP VIPs are completely gone, it f...
-
- fixed
-
- Applied in changeset commit:145eb9907c638f5a1cf279b480a69bb3556c3b7e.
-
- Applied in changeset commit:30a61a895a969cfa890a30df76b2f83b252cb231.
-
- Fixed anything else apart taps through this issue.
-
- at the time I set it to 2.2.1, 2.2-release was already built and signed. Since we're rebuilding it for other reasons,...
-
- To remind you: there is no traffic between sites after reboot. Both sides are UP and RUNNING and NOTHING goes between.
-
- Huh, team is going to release 2.2 without working tap openvpn? That's interesting ...
-
- fixed
-
- Fixed by allowing the blocksize to not be multiple of blocksize.
-
- Jim mentioned today we'll get this addressed in 2.2.
Ermal: test setup with AES-GCM to an ASA is setup. will emai... - 04:27 PM Revision e8477a56: Text tweak
- 12:02 PM Revision 9b527a79: Make sure radvd is reconfigured when CARP is enabled/disabled. It should fix #4252
- 12:01 PM Revision 8e24d1da: Make sure radvd is reconfigured when CARP is enabled/disabled. It should fix #4252
-
-
- 11:03 AM Revision 560d1b53: When configuring radvd, check if carp is enabled. Ticket #4252
- 11:02 AM Revision 7b753c2b: Do not translate function return string
-
- I don't get the design in the first place. You could as many permissions there as needed, if only there was one of th...
-
- it would be great if the upnp settings page allowed to type in individual client ip for which to allow or deny rather...
- 11:01 AM Revision ee8fb75d: Fix typo in function name
- 11:00 AM Revision 150d479b: When configuring radvd, check if carp is enabled. Ticket #4252
- 11:00 AM Revision 42cc62a2: Do not translate function return string
- 10:59 AM Revision 44763e58: Fix typo in function name
- 10:24 AM Revision 2a746a1e: Add language hint to code block
- 10:22 AM Revision f180fe1a: Code style documentation for tables and forms
- 09:14 AM Revision dc85e806: Merge branch 'master' of https://github.com/pfsense/pfsense
- 09:13 AM Revision cc5b2948: Merge pull request #4 from SanderVanLeeuwen/bootstrap
- Firewall rules and VPN L2TP layout changes
-
09:05 AM Bug #1333: Rate causes high CPU usage
- Not here:
PID USERNAME THR PRI NICE SIZE RES STATE TIME WCPU COMMAND
70675 root 1 119 0 3... -
08:22 AM Bug #4240: 2.2 IPv6 radvd RDNSS Issue
- attached screenshots
-
- The help link used to open in a new window, it was changed to give the user the choice. The way it is now, the user c...
-
03:25 AM Feature #4264 (Closed): Make distinction between general & security updates, while applying the latter automatically
- Current pfSense setup does not make a distinction between security updates and general updates. The latter requires a...
-
- OK, lets call this fixed then. Thanks. :)
(Kinda inconsistent results, perhaps the VPN stuff would be worth a sepa... -
- for v4, it uses the same source networks as it uses for outbound NAT auto rule generation, which is a diff process.
-
- Kinda confused really what it covers now. It certainly is adding OpenVPN and IPSec IPv4 subnets to the ACL.
-
- It only covers interfaces that are assigned and enabled plus static routes for IPv6. Manual entries will be required ...
-
- Ok, this works mostly fine, except that it misses OpenVPN's IPv6 (and probably IPsec as well, don't have IPv6 IPsec t...
-
- The underlying identifier strings "wan" "lan" "opt1" ... are used all over the place in the config to hook things tog...
-
-
- Works just fine. See https://forum.pfsense.org/index.php?topic=86900.msg477095#msg477095
-
12:24 AM Bug #4261: Google Domains Dynamic DNS -- Works on 2.1.5 but not 2.2-RC
- Sorry, typo in the report -- I am using HTTPS for all my attempts, not HTTP. I'll start fresh and see if I can figur...
-
- oh one difference between what you're doing and we're trying, we're using HTTPS rather than HTTP. Might want to try t...
-
01:19 AM
pfSense Packages
Bug #4263 (Needs Patch): ntopng: historical feature issue
- Hello,
i can't use the historical feature. when i try to load historical data after setting interface and time inter... -
- which process is using 100% CPU?
-
12:20 AM Feature #4038: Button to clear the arp cache
- Chris Buechler wrote:
> Applying that may be dangerous, in that it leaves a file on your system with no authenticati... - 12:04 AM Revision 7fd2a0e3: Strict comparison not necessary here, and makes this fail to work as
- intended. Fixes #4258
- 12:04 AM Revision 7684d66f: Strict comparison not necessary here, and makes this fail to work as
- intended. Fixes #4258
01/21/2015
-
- Damien Braillard wrote:
> Just a proposition:
> When clicking the help button from a page of the web configurator, ... -
- works fine here, we just did some testing with two diff hosts on Google Domains. Both update, both display the correc...
-
- Hi team,
I'm using the new Google Domains Dynamic DNS functionality, and I am pleased that it works so well on 2.1... -
- Chris Buechler wrote:
> Applying that may be dangerous, in that it leaves a file on your system with no authenticati... -
- Applying that may be dangerous, in that it leaves a file on your system with no authentication that clears your ARP t...
-
- Grischa Zengel wrote:
> After swapping IP from two embedded devices (WizNet RS485 Gateways) the gateways weren't rea... -
- Thanks for the quick reply, Chris! Yes, an option would be great, even if it weren't a change to the default behavio...
-
- they're listed in the order of their identifier. wan, lan, opt1, opt2, ...
This is one of those things where if y... -
- Hi team,
If possible, I'd love to see interfaces and VLANs ordered alphabetically instead of by order of creation ... -
-
-
-
-
-
-
-
-
-
-
- that fixes the initial described problem. Also re-verified multi-WAN bits after static routes returned, including dis...
-
- Static routes are put back in the configuration.
-
- I put a workaround to not use the interfaces not present in config.
Though the real workaround here is to install ... -
- sent Ermal details on how to replicate in the test setup.
-
-
-
-
-
-
-
-
-
- updated subject to specific issue. Fixed
-
- Applied in changeset commit:7fd2a0e3a9163d8cc3f578f4bd105ed0c982737f.
-
- Applied in changeset commit:7684d66fad740820ca1c945a5b67a6f813306235.
-
- IPv4 subnets are automagically added to /var/unbound/access_lists.conf; however this is not done with any of the IPv6...
-
- 04:38 PM Revision 52b5a223: When radvd is configured on a CARP interface, enable it when it is MASTER and disable when go to BACKUP. It should fix #4252
- 04:36 PM Revision caaaf9ce: Add missing require for filter.inc since vpn_ipsec_configure() calls filter_configure(). It should fix #4236
- 04:36 PM Revision a6934401: When radvd is configured on a CARP interface, enable it when it is MASTER and disable when go to BACKUP. It should fix #4252
-
03:20 PM pfSense Packages Bug #4243: Last squidguard update prevents squid from starting
- The problem appears to be more complex than I first thought.
In a fresh install into virtualbox with squid 2.x and s... -
- strongswan has had ECP DH key groups support for quite some time, should be added to GUI.
https://wiki.strongswan.o... -
-
- https://redmine.pfsense.org/issues/4146
-
- *Before instance restart/after reboot:*
ovpnc1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 15... -
- you're right, I was too quick on the trigger here. The config upgrade failed on one pair of systems because it was up...
-
- Do you have a config that was broken after upgrade? I upgraded a 2.1.x to 2.2 on both modes, automatic and advanced a...
-
- There is a code to convert it, it's upgrade_102_to_103()
-
11:28 AM Feature #3377: OAuth2 authentication in captive portal
- Thomas NOEL wrote:
> Here is a proof of concept, for a OAuth2 captive portal authentication with Google accounts :
... -
- Applied in changeset commit:52b5a22363d34bbd621b9eb555cf849782318dda.
-
- Applied in changeset commit:a693440176e8bd4a783a9ccb75d2cd57629b5699.
-
- The conf file problem is fixed. Since CARP no longer has its own interface, we'll need to start/stop radvd along with...
-
09:37 AM
Feature #4259 (Resolved): Port forward NAT rules with "any" protocol
- Hello,
i'm starting to use pfsense inside my company network but i see that pfsense is missing a NAT ability compare... -
-
- 06:36 AM Revision 94efc59d: Use the parent NIC rather than the VIP. Fixes part of Ticket #4252
- 06:35 AM Revision 2f74d9d8: Use the parent NIC rather than the VIP. Fixes part of Ticket #4252
-
- 1. Install latest pfSense snapshot;
2. Install Squid3 package;
3. Observe 100% load on CPU oob and after reboot;
... -
- The only other explanation that came to my mind is that nat reflection might need a reboot to activate under some cir...
01/20/2015
-
- working on this
-
- radvd.conf where a CARP IP is chosen results in an invalid config file, as it omits the interface entirely (where it ...
-
-
-
- Outbound NAT configs in 2.1.x and prior use a different XML structure than 2.2, and there isn't any config upgrade co...
-
- So sorry to waste your valuable time. I'll do better in the future.
-
- upgrade, that was fixed a while ago
-
- The dialog for Diagnostics > Test Port says this for source port, "This should typically be left blank." and the fiel...
-
- Where you have a dynamic interface removed and re-added while running IKEv2 in strongswan, things break. Good easily ...
-
- I replied back on your forum thread, this sounds like a stale upstream ARP cache.
-
10:52 AM Bug #4249 (Not a Bug): virtual ips backup/restore bug
- the version of the software is 2.2 RC Jan 16 11:53
to take full backup; press diagnostics > backup > full backup >... - 04:44 PM Revision f0d51562: Place form save button outside form panel for clarity (saves whole form, not just the last panel)
- - Increase body bottom margin to create 20px margin between elements
and footer -
- It was bridged with an OpenVPN PSK TAP Client. That connection has been down for about a month but was not disabled. ...
-
- what was LAN bridged to? Was there an IP on the bridge itself or was it on the LAN interface?
-
- I have been trying everything to get NAT reflection working. My last effort was to remove LAN bridge (which I wasn't ...
-
02:21 PM Bug #4206: Missing route creation on DHCP-PD lease where ia-na != ia-pd
- Here is a follow-up with 3 attachments: The pcap file, a screenshot of the "Status: DHCPv6 leases" page and the dhcpd...
-
- The IP address and gateway settings on Interfaces > [assigned gif name] should remain at "None".
There is a dynami... -
- Error while saving gateway page, having the default checkbox checked:
- "The gateway address 2001:x:x:x::1 does not ... - 10:08 AM Revision c4a7740d: Finish preliminary restyle of L2TP configuration
- vpn_l2tp.php - Use pill style for navigation
vpn_l2tp_users.php - Cleaned and formatted according to bootstrap style... -
- As reported on https://forum.pfsense.org/index.php?topic=86866.msg477744#msg477744
The linux hosts like to send unpa... -
- This also limit the ability to debug problems with igmpproxy.
Is the fact that MROUTING kernel support is missing ... -
- Note that this was working properly in 2.1.5: Multicast forwarding table was displayed for IPv4.
01/19/2015
-
- On the page pfsense/pkg_edit.php?xml=squidguard_dest.xml&act=edit
for editing a target category the new expression l... -
- Running 'netstat -g' to display multicast forwarding table display the following message:...
-
-
04:37 AM pfSense Packages Bug #4228: 2.2 RC nano i386 on Watchguard Firebox
- this is already fixed in the latest release - I'm sorry !
Thomas -
- there are no such issues, please post to the forum or list for assistance.
-
- Ignore this one, false alarm sorry. I hacked some rules in the filter.inc that did force a route-to. removing those.....
-
- To add some more info to this issue, perhaps the traffic is properly natted as em0 is the default route, and that is ...
-
- When i put a manual outbount-nat-rule on em0, it is applied at traffic leaving from interface em3
In this case i'm... -
- they are disabled after the next filter reload, the process of disabling just doesn't kick off a filter reload.
-
- after disabling ipsec all the "# VPN Rules" are still loaded
A reload of rules should probably be triggered. - 05:12 PM Revision 61144c9b: Preliminary changes for VPN L2TP configuration
- - Cleaned using clean.sh
- Added bootstrap form and input wrappers & classes
- Splitted configuration into three part... -
- Issue 1) renders squidguard useless because it bypasses it entirely.
I can't seem to change the bug priority. I wa... -
- I don't believe I am seeing a package update breaking things completely...
squidguard 1.4_4 pkg v.1.9.9 introduces... - 01:44 PM Revision 06966500: Firewall rules layout changes
- - Added missing th for buttons column
- Wrap table in div.table-responsive; adds scrollbar on smaller viewports while... - 12:37 PM Revision 2e7fd143: Merge pull request #3 from SanderVanLeeuwen/bootstrap
- Fix grid setup on dashboard
- 12:28 PM Revision a2faa388: Fix grid setup on dashboard
- - Default width in .container is 100%, so col-md-12 isn't necessary there
- Add .row wrapper to 6/6 columns - 12:17 PM Revision ec71be6b: Merge pull request #2 from SanderVanLeeuwen/bootstrap
- Improved login screen styling
- 12:11 PM Revision 0a353c81: Full width input fields @ sm breakpoint
- 11:25 AM Revision ca276264: Add missing require for filter.inc since vpn_ipsec_configure() calls filter_configure(). It should fix #4236
- 11:09 AM Revision 365fc95d: Add reset button support for APU and FW7541
- 11:08 AM Revision 7f360152: Add reset button support for APU and FW7541
- 11:02 AM Revision c7d61071: Use bootstrap columns to scale and style jumbotron
- pfSense.css - proper positioning for logo, remove with on jumbotron
auth.inc - add bootstrap columns to jumbotron
aut... -
- seems likely there is some other root cause, like the alias issue from before, given no one else appears to be seeing...
-
- fixed
-
- Applied in changeset commit:ca276264ee3289e308f33bfc6d87217d108f4a13.
-
- there have never been any accommodations for mobile IPsec in that regard
-
10:08 AM Feature #4242 (New): Two Factor or OTP Authentication for Admin Interface
- Hi developers!
In a never-ending quest to beef up security, it would be great to have the ability of using two-fac... -
-
- If a custom install is chosen, the "Install Bootblocks" screen has a graphical glitch that causes display problems on...
-
- I'm have a 2.2 box running 10.1-RELEASE-p4 FreeBSD 10.1-RELEASE-p4 #0 36d7dec(releng/10.1)-dirty: Fri Jan 16 12:38:50...
-
- The athstats, cryptostats, and cryptotest utilities were present in 2.1.x but are not on 2.2 images, but they are lis...
-
- Push it to 2.2.1
-
04:28 AM pfSense Packages Todo #4029: Update phpsysinfo package
- That are some really good news :) Thank you
-
02:46 AM pfSense Packages Todo #4029: Update phpsysinfo package
- Phpsysinfo upcoming version (3.2.1) now works correctly with pfSense 2.1.5 and 2.2.
-
01:56 AM
Bug #4238 (Resolved): Firewall rule: source port display issue
- Hello,
it is a display issue and appears when i try to select saved aliases on source port range.
The red backgroun...
01/18/2015
- 06:05 PM Revision e30050b6: Unimportant typos in user and group manager
- that do not effect anything.
-
- Error "macro IPsec not defined"
I dont know why it currently happens, and dont have a way to trigger it easily as ... -
- PHP Errors:
[18-Jan-2015 21:30:33 CET] PHP Fatal error: Call to undefined function filter_configure() in /etc/inc/v... - 02:09 PM Revision 1eb66a84: correct a few typos that made these files unparsable
- services_unbound - added missing $-sign to variable
xmlrcp - removed redundant closing brackets. Some trailing whites... - 02:04 PM Revision 50242425: Derive name from easyrule block alias from the scripts name
- Allows to use different block lists by using symlinks to the
easyrule CLI script - 02:04 PM Revision 4dedce6d: Add showblock and unblock options to easyrule CLI tool
- Block rules added with easyrule block.... can now be listed and removed using
the easyrule tool. This is handy to be ... - 02:04 PM Revision e4d8943c: Fix inconsistent handling of seperator in easyrule, should fix #4233
- 01:58 PM Revision 2e1cd9d8: log.widget - replaced js processor with simple xhr that fetches html
- firewall_rules - typo, duplicate $pgtitle
log.js - simple xhr html updater, no need for duplicate logic
log.widget - ... -
- It seem 'reply-to' is missing in firewall rules generated for mobile-ipsec.
-
- Allow for strict user <> cn validation of mobile ipsec users when using rsa+xauth
It seems the gui setting is missin... -
- The anti-virus feature is working now after adjusting the conf files based on the syntax checks you added to the to t...
-
08:10 AM Bug #4233: Inconsistent handling of seperators in easyrule cli
- patch provided at https://github.com/pfsense/pfsense/pull/1442
-
- When making modifications to the alias generated using easyrule CLI tool, there are two issues regarding separators:
... -
- line 405 in filter.inc is what i suspect to be the issue (maybe) because when filterdns is initially run with a time ...
-
- i guess the easy way to fix this would be to handle the $resolve_interval properly such that if the time difference i...
-
- Yes, of course. Since this bridged/TAP OpenVPN nonsense needs PROMISC on both the ovpn and other bridged interfaces -...
-
- same goes for bridged tap server: everything is UP and RUNNING but no traffic after reboot. Restarting server fixes t...
-
- I repeat myself: bridged tap client doesn't work after reboot!
Yes, latest commit brought the UP flag to the inter... -
- at boot, i think at the time of initialization of the BRIDGE (or LAGG), the vpn is not yet initialized, and this crea...
-
- both. specifically, one that reboot.
so that it works again, it is necessary after the reboot, resave the bridge con...
01/17/2015
-
09:10 PM pfSense Packages Bug #4232: GUI: Interface Menu
- Thanks! It's the same problem.
This could be marked as dupe report. Sorry about that (i searched before i posted.) -
- on Linux, it might be a font problem, since fixed/avoided in 2.2. see #3841
-
- I've tried that.
I've tried two browsers with the same result.
Mozilla Firefox 34.0
Chromium Version 39.0.2171.6... -
- clear your browser cache, it's using outdated pieces
-
- System Menu drops down on Help Menu.
Help Menu is just below System Menu.
This happend when upgradring from;
... -
- this is something I'd noted for 2.2.1 but don't think we have a ticket on it.
-
07:19 AM Feature #4230 (Resolved): Prefer SSL Perfect Forward Secrecy ciphers in UI
- Perfect Forward Secrecy (PFS) ciphers should be preferred in the admin interface to further harden the admin web serv...
-
- which side doesn't work?
-
- site 1 : 2.1.2 with BRIDGE lan, openvpn link and LAGG of 2 openvpn (multi wan: 1 vpn per wan)
site 2 : 2.2RC last u... -
- what version are you using?
-
- rectification for the BRIDGE, create an interface BRIDGE with the LAN and an openvpn links.
-
- If you create an interface LAGG with two openvpn links or an interface BRIDGE with two openvpn links, after reboot, t...
- 04:16 PM Revision 69b397dd: updated firewall WIP, fixed widget ordering
- * ipsec - replaced manual panel with simple alert
- 02:54 PM Revision a42e7aa2: replaced logobig with high-quality logo-black
- favicon - updated as well
authgui - form is now horizontal, logo update -
02:07 PM pfSense Packages Bug #3986: BandwidthD can break php-fpm in unknown rare edge case
- Hi,
FYI, I just added some new observations to the forum post, https://forum.pfsense.org/index.php?topic=84642.0
... - 01:50 PM Revision 80169aa8: implemented widget-config
- fbegin/fend.inc - temporary added for non-migrated pages
firewall_rules - use buttons for actions
index - implement w... -
- That's definitely a good news! Current webgui looks like "hello from hardcore early 90s". It would be nice to get a m...
-
- squid3 does this now. I would close this ticket
- 05:18 AM Revision ef9ef75f: add detection for 7541, APU
- 05:15 AM Revision 5a8519bb: add detection for 7541, APU
-
- this problem persists on 2.2 RC
-
12:02 AM Revision 1195a12d: move jquery ui css to theme folders
-
01/16/2015
- 09:30 PM Revision ccda8a1d: Merge branch 'master' into bootstrap
- Conflicts:
usr/local/www/carp_status.php
usr/local/www/diag_arp.php
usr/local/www/diag_authen... - 07:42 PM Revision b1fef27f: Set $arch accordingly to release
- 07:40 PM Revision 6aac31ef: change update URLs for release
- 07:36 PM Revision 6434d5be: Bump to 2.2-RELEASE
- 07:35 PM Revision 77fa86b0: make master 2.3-DEVELOPMENT
-
- the issue covered by this ticket is fixed, there might be other issues but those are separate and have no relation to...
-
03:17 PM pfSense Packages Bug #4114: Squid 3.4.9 transparent proxy broken.
- Issue definitely not "fixed" if you are upgrading from a working config - maybe if you install fresh or use some work...
-
- issue covered here is fixed
- 04:50 PM Revision b9a12ae0: Still missed one mistake on last commit
- 04:49 PM Revision b9ad208c: Fix some logic mistakes introduced in 89f171b052, spotted by phil-davis
- 04:30 PM Revision 0a1f1301: fix syntax and unbreak pfsense-utils.inc
- 04:24 PM Revision daae5e03: fix syntax and unbreak interfaces.inc
- 04:12 PM Revision 649cde0b: Address pull comments
- head.inc - Revert indenting
.gitignore - Add IDE name in comment - 03:14 PM Revision 2148e0bf: Ignore PhpStorm settings
- 03:13 PM Revision d75a843c: - Wrap form parts in panels
- - Improved some form-groups
- Add .checkbox helper to form-groups containing checkboxes - 03:11 PM Revision 45eebe10: Style page header & footer
- head.inc - Wrap header elements (title, breadcrumb)
guiconfig.inc - Prefix breadcrumb with title h1
pfSense.css - Sty... - 01:50 PM Revision 0c5dd854: Validate if both IP address and subnet are valid and the same version. Fixes #4223
- 01:50 PM Revision 17c98255: Validate if both IP address and subnet are valid and the same version. Fixes #4223
-
- you can't create CARP IPs on tap or tun interfaces. you're misinterpreting the recommendation, that's the binding of ...
-
- pfSense says:
@The following input errors were detected:
The interface chosen for the VIP has no IPv4 or IPv6 addre... -
- logging levels are configurable. Defaults could use some review later.
-
02:53 AM Bug #4227 (Resolved): Too much logging for IPSec DPD
- Is it possible to reduce the amount of logging for DPD packets. By default, these are generated every minute, and I h...
-
- fixed
-
- Applied in changeset commit:0c5dd854a840007e09bd3f95949cbce9abeb7d18.
-
- Applied in changeset commit:17c982555a2a3ecfa5c2ce988a6d85bee5a5980d.
-
- that did fix the issue for 2.2, pushing to 2.2.1 for getting the issue fixed in strongswan 5.2.2.
-
- the 'Watchguard Firebox with SDEC' driver is missing in the 'LCDproc' package
-
01:02 AM Feature #4179: Driver oce is missing from 2.2 RC
- oce.ko from FreeBSD 8.3 copied over to PfSense 2.2.5 works fine in our environment including VLAN tags, LACP trunk, C...
-
- just setting assignee for completeness
-
- PPTP comes out of pfSense in 2.3.
this bug is opened so we remember to do it. -
- People seem to like the look and feel of the web GUI in a recent fork (which shall not be named).
Jared says it's ... -
-
- I think this is going to want more testing than what we can afford in the 2.2.1 timeframe. That said, if it gets fi...
01/15/2015
-
- I thought this was covered by an outstanding pull request, but not seeing one at a glance specific to in_subnet. This...
-
- ip_in_subnet('11.22.33.5','abcd::/64') returns true.. this should not be.
still causes trouble like reported in ht... -
- downgrade to strongswan 5.2.1 (with cherry-picked security fixes from 5.2.2) looks to have fixed this issue. Leaving ...
-
- thanks Marcello, I merged it.
-
- Typo and freshclam checks fixed on this PullRequest
https://github.com/pfsense/pfsense-packages/pull/788 - 09:05 PM Revision 5b7c33fc: Firewall Rules Apply be friendly to other languages
- Forum: https://forum.pfsense.org/index.php?topic=86808.0
Redmine: https://redmine.pfsense.org/issues/3886
print_info... - 09:04 PM Revision 65f9080d: Merge pull request #1441 from phil-davis/patch-1
-
-
-
-
-
- That pull request has been merged, so this particular thing should be fixed in 2.2
-
- It did not resolve - switch to Turkish, edit and save a firewall rule. The "Apply" step of the sequence is not displa...
-
-
-
-
07:09 PM Feature #4128: Email notification webgui configuration
- I think this is a fantastic idea!
- 06:15 PM Revision fe0fa4c3: Firewall Rules Apply be friendly to other languages
- Forum: https://forum.pfsense.org/index.php?topic=86808.0
Redmine: https://redmine.pfsense.org/issues/3886
print_info... -
-
04:31 PM pfSense Packages Bug #4114: Squid 3.4.9 transparent proxy broken.
- PfSense: 2.2-RC (amd64) built on Thu Jan 15 12:12:32 CST 2015
Squid: 3.4.10_2 pkg 0.2.4
Confirmed, Package is wor... -
- Please do not close.
I know the original bug was opened on amd64 but I have been following this avidly as it also ef... -
03:26 AM pfSense Packages Bug #4114: Squid 3.4.9 transparent proxy broken.
- Confirmed working now. (phew!)
Latest package 0.2.4 transparent proxy is OK.
ICMP pinger disabled in GUI to avoid ... -
- This has been reported working.
-
- Applied in changeset commit:98bf4991dc31f97fc7315a6b8aba433de9d39cea.
-
-
11:21 AM pfSense Packages Bug #4222: Update to 2.2 RC breaks domU
- Maybe a hook should be added then in the web UI to say, "hey, Xen detected, please make sure you checked (this note) ...
-
- In theory it is possible but given the wide range of disks that have been setup over the years, it is not yet a proce...
-
- Theoretically, could a hook for the referenced shell script be added into the pfSense upgrade process? Or even a sed ...
-
- To elaborate on that a little, the main problem with the disk is that the PVHVM drivers in FreeBSD apparently do not ...
-
- Already documented. It's a Xen/PVHVM thing we can't control.
https://doc.pfsense.org/index.php/Upgrade_Guide#Xen_U... -
- By doing an upgrade to nightly RC build for 2.2 from a working 2.1.5 install, it breaks it in Citrix XenServer. 2.2 s...
-
- Maybe just happened to not hit the issue after another reboot. This: ...
-
10:49 AM
pfSense Packages
Bug #4220: IPSec dose not work any more.
- *With the new built "Thu January 15 08:01:35 CST 2015
FreeBSD 10.1-RELEASE-p4 "IPsec works great.* -
06:56 AM
pfSense Packages
Bug #4220 (Closed): IPSec dose not work any more.
- Since update to "2.2-RC (amd64) built on Wed January 14 17:46:28 CST 2015 FreeBSD 10.1-RELEASE-p4 " does not work any...
-
-
- no diff than it's ever been.
-
- when limiter is used with source mask, it creates a lot of system log entries over time when active and applied to cl...
-
- duplicate
-
- I configured a ethernet bridge with two members (re0_vlan20 and re1_vlan20) and assigned an IPv6 address to it.
It s... -
- This reverts commit 1ada4c8c514cc33b0df6238b7f2f177078bfe2e8.
-
- This reverts commit 324311043385aed357ca8838bde2c3af3111e564.
-
-
-
-
-
03:25 AM Bug #4212: unbound not starting on 12 CPU host
- It works. Thanks for the quick fix.
-
- affected version: 2.2-rc
-
- I configured a ethernet bridge with two members (re0_vlan20 and re1_vlan20) and assigned a IPv6 address to it.
It se...
01/14/2015
-
10:22 PM pfSense Packages Bug #4114: Squid 3.4.9 transparent proxy broken.
- Arthur Undisclosed wrote:
> I'm sorry, it seems there are still numerous issues with this package:
>
> - Transpar... -
- I'm sorry, it seems there are still numerous issues with this package:
- Transparent proxy still doesn't work. "TA... -
- Should be fine on 0.2.4
-
- strongswan has been reverted back to 5.2.1 to see if that resolves the issue, as other possibilities seem to have bee...
-
- The first one hsa been reverted and is present on new snaps.
-
- If the present builds do not work.
These commits seem at fault
http://git.strongswan.org/?p=strongswan.git;a=commit... -
05:20 PM pfSense Packages Bug #4217 (Resolved): siproxd on pfSense 2.2-RELEASE i386 fails to start
- running on Netgate ALIX router.
siproxd won't start via GUI.
Executing
[2.2-RC][root@router.example.org]/usr/... -
- https://forum.pfsense.org/index.php?topic=86701.msg475980#msg475980
-
- squidguard and squidguard-dev are missing symlinks to shared libs
ln -s /usr/pbi/squidguard-amd64/local/lib/liblda... -
- thanks Marcello and Renato!!
We are almost there, Marcello found a typo that he is correcting in the squid.inc fil... -
- Please try squid3 package version 0.2.4
-
-
-
-
- 02:11 PM Revision 38f77f4f: Obsolete libpng15 in favour of libpng16
- 02:09 PM Revision 6e0a0ab3: Obsolete libpng15 in favour of libpng16
-
- this works in 2.2
-
- The routes are not present anymore since 2.2.
-
- implemented
-
- I suppose this is not an issue anymore and can be resolved/closed.
-
- yeah this works
-
- This has already been committed/fixed from Chris.
- 11:34 AM Revision a771a6ae: Add support for 0x20 DNS random bit support. Fixes #4205
-
- 11:23 AM Revision 9eec3be3: Correctly handle number of cores and power of 2. Merged from the package already had this. Fixes #4212
- 11:22 AM Revision 5526efab: Merge pull request #1439 from wagonza/patch-5
- 11:09 AM Revision 46762efe: Correctly handle number of cores and power of 2. Merged from the package already had this. Fixes #4212
-
-
- Thanks, works :)
-
- Applied in changeset commit:37f34f561e7d537f5f56469de7632097b0058c4a.
-
- 0/ Add some patch.
1/ Click Test link
2/ You get something like:... -
09:04 AM Feature #2593: sync NTPD, SNMP config between HA members
- With the expanded config options in 2.2, this seems even more valuable now.
-
-
- looking good. squid is able to start. I installed the package on a fresh amd64 install. After package install it aut...
-
- Pull request already sent to fix it, but it can wait for 2.2.1 - https://github.com/pfsense/pfsense/pull/1440
-
- Applied in changeset commit:9eec3be339805c5f276500331c410fa18cc9bd5f.
-
- Applied in changeset commit:46762efee6b66b86090bb54f0bbb3d593bf23cf3.
-
- Thanks merged patch from the package would had this fixed (check https://github.com/pfsense/pfsense/pull/1439)
-
- I just saw, that this was already discussed in the pfsense forum:
https://forum.pfsense.org/index.php?topic=61659.... -
- In /etc/inc/unbound.inc
the unbound parameters 'msg_cache_slabs', 'rrset_cache_slabs', 'infra_cache_slabs', 'key_cac... -
- Support for EAP-MSchapv2 authentication.
The integration has been done according to https://forum.pfsense.org/index.... -
- Didn't validate it on 2.1.x, but I checked and it's ok on 2.2 by commit:be0af33ee0137cc92272b5f5c5c1a4a70bce82f2
-
05:17 AM Bug #4213 (Resolved): WebGUI - improper path to icons
- On the Status -> System Logs -> Firewall tab -> Summary View (/diag_logs_filter_summary.php) in the Source IP Data an...
-
- There has been some fixes on 5.2.2 related to that but not complete one.
-
- I have personally opted for using the following patch, as a burn-in procedure, once the LAN interface has been define...
-
- +1, also needing this here.
This makes it impossible to create any redundant cluster with userland-based services ...
01/13/2015
-
- disabling unity is confirmed to work around this issue, and will suffice for the vast majority in this situation. I'l...
-
- Applied in changeset commit:078fdef02580b396cdad6c21e8e86360e53d338c.
-
- This may fix most issues with squid package on 2.2
https://github.com/pfsense/pfsense-packages/pull/786
I've incl... -
- This may fix most issues with squid package
https://github.com/pfsense/pfsense-packages/pull/786 -
-
-
-
-
-
-
- To be able to manage this first upgrade the config to assign each phase2 an reqid
Second use that during config gener... -
- To be able to manage this first upgrade the config to assign each phase2 an reqid
Second use that during config gener... -
- there are no issues as described. Replied back in your forum thread.
-
06:10 PM Bug #4211 (Rejected): DNS Answer ignored even though protect against rebind is disabled
- The pfsense server is 10.233.105.10/26
The interface I have to use for this dns query is 10.232.100.63/25
There... -
- Make title color more consistent with other pages.
Improving aesthetics. - 03:00 PM Revision 5a5615ce: Merge pull request #1437 from xbipin/master
-
- Make title color more consistent with other pages.
Improving aesthetics. -
01:19 PM Bug #4207: IPv6 - PHP error "Warning: inet_pton(): Unrecognized address" in DHCPv6/RA (possibly due to bad format of IPv6 address?)
- Awesome! Thanks for checking, Phillip, great to know it's fixed in the new release.
-
- No problems with white space or anything for me on 2.2-RC. As Chris says, this is fixed in 2.2 and I can't find a com...
-
- Aha! Looks like a leading space on the "range start" is what does it.
Leading space on this first one: @ 2001:47... -
- Well, I figured I might have left something in by accident - figures!
I've attached (but not embedded) the un-mung... -
- I tried your formats above and got no "Unrecognized address" text error stuff, just the proper errors reported on the...
-
- not something we're looking into for 2.2 at this point
-
10:06 AM Bug #4210 (Resolved): Bring back a FTP proxy
- on 2.2-RC we noted that ftp helper is not working anymore, confirmed by another users on forum:
https://forum.pfse... -
- Fixed, thanks.
-
- Fixed at some point on 2.2. When SANs are added to a cert, they are properly reflected in the properties.
> ... -
09:42 AM Feature #4209 (Resolved): Releasing DHCP on WAN interface should send a release
- Although sending a DHCP Release is not a requirement of the DHCP spec it would be nice if when clicking "release" on ...
-
- Fixed on recent versions
-
- It was fixed
-
- It's expected since PBI libraries are contained inside PBI_DIR/lib and binary wrappers setup environment before call it.
-
- Perfect. Thanks!
-
- I haven't found a means of reliably replicating this with shorter lifetimes. It's either some combination of things t...
-
- PPTP is very nearly dead, this won't be fixed.
-
- won't happen with the logging in 2.2
-
- was fixed a while back
-
- multiple people have confirmed 2.2 fixes this issue.
-
- 254 is the highest available VHID in 2.2.
-
- updated subject to root cause of issue.
Anders: asked about getting a pcap of the DHCPv6 traffic in your forum th... - 01:25 AM Revision 156938a8: Where the P1 is disabled, show the P2s as disabled since they will be, same as in previous versions.
- 01:25 AM Revision 51ef7499: Where the P1 is disabled, show the P2s as disabled since they will be, same as in previous versions.
-
- went back through and verified things after that change, all is well.
Also available in: Atom